theokit 0.47.0 → 0.48.1

package/dist/{dev-4NLBCCLU.js → dev-6TWDBX6G.js}

@@ -8,8 +8,8 @@ import {
 } from "./chunk-GEQJAFSV.js";
 import {
   theoPluginAsync
-} from "./chunk-OGU2MIHC.js";
-import "./chunk-ELDTTO6P.js";
+} from "./chunk-ZALJIZH2.js";
+import "./chunk-GEHX6CAE.js";
 import "./chunk-2CVV6CNN.js";
 import "./chunk-IEES3CHD.js";
 import {
@@ -24,14 +24,14 @@ import {
 } from "./chunk-CUYEA62B.js";
 import "./chunk-5ODOE6EF.js";
 import "./chunk-HRCNHWLP.js";
-import "./chunk-VPV7WABO.js";
+import "./chunk-VTJMND23.js";
 import "./chunk-6GGWS7J3.js";
 import "./chunk-FXZZS7YW.js";
 import "./chunk-D3425YDV.js";
 import "./chunk-LNVMHQ2Z.js";
 import "./chunk-MNIQ5F3Y.js";
 import "./chunk-A7JBF5FO.js";
-import "./chunk-XTM32FF6.js";
+import "./chunk-VQIUTCK2.js";
 
 // src/cli/commands/dev.ts
 import react from "@vitejs/plugin-react";
@@ -112,4 +112,4 @@ export {
   devCommand,
   startDevServer
 };
-//# sourceMappingURL=dev-4NLBCCLU.js.map
+//# sourceMappingURL=dev-6TWDBX6G.js.map

package/dist/doctor-Y53QTUSP.js

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+import "tsx/esm";
+
+// src/cli/commands/doctor.ts
+import { diagnose, renderDiagnosis, secretPresence } from "@theokit/agents/doctor";
+function credentialCheck(env) {
+  const candidates = ["OPENROUTER_API_KEY", "OPENAI_API_KEY", "ANTHROPIC_API_KEY"];
+  const found = candidates.find((name) => secretPresence(env[name]) === "present");
+  return found === void 0 ? {
+    name: "credential",
+    status: "fail",
+    detail: "absent \u2014 set one of OPENROUTER_API_KEY, OPENAI_API_KEY or ANTHROPIC_API_KEY, or run `theokit auth login`"
+  } : { name: "credential", status: "ok", detail: `${found}: ${secretPresence(env[found])}` };
+}
+async function mcpCheck(projectRoot) {
+  const { readFile } = await import("fs/promises");
+  const { join } = await import("path");
+  try {
+    const raw = await readFile(join(projectRoot, ".mcp.json"), "utf8");
+    const parsed = JSON.parse(raw);
+    const count = Object.keys(parsed.mcpServers ?? {}).length;
+    return { name: "mcp", status: "ok", detail: `${String(count)} server(s) configured` };
+  } catch (error) {
+    return error.code === "ENOENT" ? { name: "mcp", status: "warn", detail: "no .mcp.json \u2014 no MCP servers will start" } : {
+      name: "mcp",
+      status: "fail",
+      detail: `.mcp.json is unreadable: ${error.message}`
+    };
+  }
+}
+async function subagentCheck(projectRoot) {
+  const { listSubagentNames } = await import("@theokit/agents");
+  const names = await listSubagentNames(projectRoot);
+  return names.length === 0 ? { name: "subagents", status: "warn", detail: "none defined in .theokit/agents/" } : { name: "subagents", status: "ok", detail: names.join(", ") };
+}
+async function doctorCommand(deps = {}) {
+  const projectRoot = deps.projectRoot ?? process.cwd();
+  const env = deps.env ?? process.env;
+  const write = deps.write ?? ((text) => {
+    process.stdout.write(`${text}
+`);
+  });
+  const checks = [
+    credentialCheck(env),
+    await mcpCheck(projectRoot),
+    await subagentCheck(projectRoot),
+    ...deps.extraChecks ?? []
+  ];
+  const diagnosis = diagnose(checks);
+  write(renderDiagnosis(diagnosis));
+  return diagnosis.exitCode;
+}
+export {
+  doctorCommand
+};
+//# sourceMappingURL=doctor-Y53QTUSP.js.map

package/dist/doctor-Y53QTUSP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/doctor.ts"],"sourcesContent":["import { diagnose, renderDiagnosis, secretPresence, type Check } from '@theokit/agents/doctor'\n\n/**\n * M84 — `theokit doctor`: what will this installation actually DO?\n *\n * `theokit info` answers \"does my project parse?\". That is not the question an agent product has.\n * The question is which credential will be used, which MCP servers will start, which skills exist —\n * the RESOLVED state, not the declared one.\n *\n * ## Never prints a secret\n *\n * Enforced by `secretPresence` from the primitive: present / absent / unreadable, never a value, a\n * prefix, a truncation or a length. A doctor that printed secrets would be the one command built for\n * support that you must not paste into a support request.\n *\n * ## The list lives here, the mechanism does not\n *\n * `diagnose` / `renderDiagnosis` / `Check` come from `@theokit/agents/doctor`, because every product\n * re-derives them identically. WHICH checks to run is what differs per product — so this file holds\n * the framework's own list, and a product composes its own on top.\n */\n\n/**\n * The injection surface of {@link doctorCommand}.\n *\n * Exported because a product composing its own checks on top needs to name this shape — and because\n * Knip caught it exported from the module and reachable from nothing, which is the same\n * published-but-unreachable failure M67, M73 and M79 each closed one instance of.\n */\nexport interface DoctorDeps {\n  readonly projectRoot?: string\n  readonly env?: Readonly<Record<string, string | undefined>>\n  /** Where the report goes. Injected so the suite never writes to the real stdout. */\n  readonly write?: (text: string) => void\n  /** Extra checks a product contributes. Appended after the framework's own. */\n  readonly extraChecks?: readonly Check[]\n}\n\n/** The credential the run will use, reported WITHOUT its value. */\nfunction credentialCheck(env: Readonly<Record<string, string | undefined>>): Check {\n  const candidates = ['OPENROUTER_API_KEY', 'OPENAI_API_KEY', 'ANTHROPIC_API_KEY'] as const\n  const found = candidates.find((name) => secretPresence(env[name]) === 'present')\n  return found === undefined\n    ? {\n        name: 'credential',\n        status: 'fail',\n        detail:\n          'absent — set one of OPENROUTER_API_KEY, OPENAI_API_KEY or ANTHROPIC_API_KEY, or run `theokit auth login`',\n      }\n    : { name: 'credential', status: 'ok', detail: `${found}: ${secretPresence(env[found])}` }\n}\n\n/** Whether an `.mcp.json` is present, and whether it parses. */\nasync function mcpCheck(projectRoot: string): Promise<Check> {\n  const { readFile } = await import('node:fs/promises')\n  const { join } = await import('node:path')\n  try {\n    const raw = await readFile(join(projectRoot, '.mcp.json'), 'utf8')\n    const parsed: unknown = JSON.parse(raw)\n    const count = Object.keys((parsed as { mcpServers?: object }).mcpServers ?? {}).length\n    return { name: 'mcp', status: 'ok', detail: `${String(count)} server(s) configured` }\n  } catch (error) {\n    // An absent file is the common case and NOT a failure — most projects use no MCP server. A file\n    // that exists and does not parse IS a failure, because the operator believes it is in effect.\n    return (error as NodeJS.ErrnoException).code === 'ENOENT'\n      ? { name: 'mcp', status: 'warn', detail: 'no .mcp.json — no MCP servers will start' }\n      : {\n          name: 'mcp',\n          status: 'fail',\n          detail: `.mcp.json is unreadable: ${(error as Error).message}`,\n        }\n  }\n}\n\n/** Whether `.theokit/agents/*.md` defines any subagent. */\nasync function subagentCheck(projectRoot: string): Promise<Check> {\n  const { listSubagentNames } = await import('@theokit/agents')\n  const names = await listSubagentNames(projectRoot)\n  return names.length === 0\n    ? { name: 'subagents', status: 'warn', detail: 'none defined in .theokit/agents/' }\n    : { name: 'subagents', status: 'ok', detail: names.join(', ') }\n}\n\n/**\n * Run the framework's checks and report.\n *\n * Returns the exit code rather than calling `process.exit`: a command that exits cannot be tested,\n * and a doctor nobody ran is the one thing worse than no doctor.\n */\nexport async function doctorCommand(deps: DoctorDeps = {}): Promise<number> {\n  const projectRoot = deps.projectRoot ?? process.cwd()\n  const env = deps.env ?? process.env\n  const write =\n    deps.write ??\n    ((text: string) => {\n      process.stdout.write(`${text}\\n`)\n    })\n\n  const checks: Check[] = [\n    credentialCheck(env),\n    await mcpCheck(projectRoot),\n    await subagentCheck(projectRoot),\n    ...(deps.extraChecks ?? []),\n  ]\n\n  const diagnosis = diagnose(checks)\n  write(renderDiagnosis(diagnosis))\n  return diagnosis.exitCode\n}\n"],"mappings":";;;;AAAA,SAAS,UAAU,iBAAiB,sBAAkC;AAuCtE,SAAS,gBAAgB,KAA0D;AACjF,QAAM,aAAa,CAAC,sBAAsB,kBAAkB,mBAAmB;AAC/E,QAAM,QAAQ,WAAW,KAAK,CAAC,SAAS,eAAe,IAAI,IAAI,CAAC,MAAM,SAAS;AAC/E,SAAO,UAAU,SACb;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QACE;AAAA,EACJ,IACA,EAAE,MAAM,cAAc,QAAQ,MAAM,QAAQ,GAAG,KAAK,KAAK,eAAe,IAAI,KAAK,CAAC,CAAC,GAAG;AAC5F;AAGA,eAAe,SAAS,aAAqC;AAC3D,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,QAAM,EAAE,KAAK,IAAI,MAAM,OAAO,MAAW;AACzC,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,KAAK,aAAa,WAAW,GAAG,MAAM;AACjE,UAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,UAAM,QAAQ,OAAO,KAAM,OAAmC,cAAc,CAAC,CAAC,EAAE;AAChF,WAAO,EAAE,MAAM,OAAO,QAAQ,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,wBAAwB;AAAA,EACtF,SAAS,OAAO;AAGd,WAAQ,MAAgC,SAAS,WAC7C,EAAE,MAAM,OAAO,QAAQ,QAAQ,QAAQ,gDAA2C,IAClF;AAAA,MACE,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ,4BAA6B,MAAgB,OAAO;AAAA,IAC9D;AAAA,EACN;AACF;AAGA,eAAe,cAAc,aAAqC;AAChE,QAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,iBAAiB;AAC5D,QAAM,QAAQ,MAAM,kBAAkB,WAAW;AACjD,SAAO,MAAM,WAAW,IACpB,EAAE,MAAM,aAAa,QAAQ,QAAQ,QAAQ,mCAAmC,IAChF,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,MAAM,KAAK,IAAI,EAAE;AAClE;AAQA,eAAsB,cAAc,OAAmB,CAAC,GAAoB;AAC1E,QAAM,cAAc,KAAK,eAAe,QAAQ,IAAI;AACpD,QAAM,MAAM,KAAK,OAAO,QAAQ;AAChC,QAAM,QACJ,KAAK,UACJ,CAAC,SAAiB;AACjB,YAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAAA,EAClC;AAEF,QAAM,SAAkB;AAAA,IACtB,gBAAgB,GAAG;AAAA,IACnB,MAAM,SAAS,WAAW;AAAA,IAC1B,MAAM,cAAc,WAAW;AAAA,IAC/B,GAAI,KAAK,eAAe,CAAC;AAAA,EAC3B;AAEA,QAAM,YAAY,SAAS,MAAM;AACjC,QAAM,gBAAgB,SAAS,CAAC;AAChC,SAAO,UAAU;AACnB;","names":[]}

package/dist/index.js

@@ -8,12 +8,12 @@ import {
   scanRoutes,
   theoConfigSchema,
   theoPlugin
-} from "./chunk-4TLLWXWH.js";
+} from "./chunk-YRRWQDKK.js";
 import "./chunk-SSYDEKWF.js";
 import "./chunk-OIGJOYX6.js";
-import "./chunk-EIRQM55C.js";
-import "./chunk-U3H53IIN.js";
-import "./chunk-37ZO643S.js";
+import "./chunk-OJLL4YD6.js";
+import "./chunk-FO55VGMQ.js";
+import "./chunk-XALU5LCU.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
 import "./chunk-KD5G3YXI.js";
@@ -27,8 +27,9 @@ import "./chunk-MTEWLGVY.js";
 import "./chunk-OLGPYOLO.js";
 import "./chunk-AVQU5CQF.js";
 import "./chunk-ACKBVBUI.js";
-import "./chunk-7SABX4DJ.js";
+import "./chunk-IZ3TIL6K.js";
 import "./chunk-YOIVCCZT.js";
+import "./chunk-6E5WKMDS.js";
 import "./chunk-JA2ZAT5Q.js";
 import "./chunk-52PDWL5S.js";
 import "./chunk-U267AOWS.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config/define-config.ts","../src/config/config-builder.ts","../src/config/validate-structure.ts","../src/core/errors.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,SAAS,aAAaA,SAAkD;AAC7E,SAAOA;AACT;;;ACiCA,SAAS,kBAAkB,MAA0C;AACnE,QAAM,QAAQ,CAAC,UACb,kBAAkB,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC;AACzC,SAAO;AAAA,IACL,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,QAAQ,CAAC,UAAU,MAAM,EAAE,QAAQ,MAAM,CAAC;AAAA,IAC1C,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,SAAS,CAAC,UAAU,MAAM,EAAE,SAAS,MAAM,CAAC;AAAA,IAC5C,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,KAAK,CAAC,UAAU,MAAM,EAAE,KAAK,MAAM,CAAC;AAAA,IACpC,KAAK,CAAC,YAAY,MAAM,OAAO;AAAA,IAC/B,OAAO,MAAM,aAAa,IAAI;AAAA,EAChC;AACF;AAKO,SAAS,SAAwB;AACtC,SAAO,kBAAkB,CAAC,CAAC;AAC7B;;;AC5DA,SAAS,kBAAkB;AAC3B,SAAS,YAAY;;;ACLd,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1B;AAAA,EACA;AAAA,EAEhB,YAAY,QAAkB,SAAiB;AAC7C,UAAM,aAAa,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI;AAE1D;AAAA,MACE;AAAA;AAAA,UACa,OAAO;AAAA;AAAA,KACjB,aAAa;AAAA,EAAc,UAAU;AAAA,IAAO;AAAA,IACjD;AAEA,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AACF;;;ADHA,IAAM,iBAAmC;AAAA,EACvC;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAIO,SAAS,yBAAyB,SAAiB,SAAS,OAAa;AAC9E,MAAI,CAAC,WAAW,OAAO,GAAG;AACxB,UAAM,IAAI,iBAAiB,CAAC,qCAAqC,OAAO,EAAE,GAAG,OAAO;AAAA,EACtF;AAEA,QAAM,SAAmB,CAAC;AAE1B,QAAM,eAAiC;AAAA,IACrC,EAAE,MAAM,QAAQ,cAAc,+BAA+B,MAAM,IAAI;AAAA,EACzE;AAEA,aAAW,QAAQ,cAAc;AAC/B,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,aAAW,QAAQ,gBAAgB;AACjC,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,GAAG;AACrB,UAAM,IAAI,iBAAiB,QAAQ,OAAO;AAAA,EAC5C;AACF;","names":["config"]}
+{"version":3,"sources":["../src/config/define-config.ts","../src/config/config-builder.ts","../src/config/validate-structure.ts","../src/core/errors.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,SAAS,aAAaA,SAAkD;AAC7E,SAAOA;AACT;;;ACiCA,SAAS,kBAAkB,MAA0C;AACnE,QAAM,QAAQ,CAAC,UACb,kBAAkB,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC;AACzC,SAAO;AAAA,IACL,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,QAAQ,CAAC,UAAU,MAAM,EAAE,QAAQ,MAAM,CAAC;AAAA,IAC1C,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,SAAS,CAAC,UAAU,MAAM,EAAE,SAAS,MAAM,CAAC;AAAA,IAC5C,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,KAAK,CAAC,UAAU,MAAM,EAAE,KAAK,MAAM,CAAC;AAAA,IACpC,KAAK,CAAC,YAAY,MAAM,OAAO;AAAA,IAC/B,OAAO,MAAM,aAAa,IAAI;AAAA,EAChC;AACF;AAKO,SAAS,SAAwB;AACtC,SAAO,kBAAkB,CAAC,CAAC;AAC7B;;;AC5DA,SAAS,kBAAkB;AAC3B,SAAS,YAAY;;;ACLd,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1B;AAAA,EACA;AAAA,EAEhB,YAAY,QAAkB,SAAiB;AAC7C,UAAM,aAAa,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI;AAE1D;AAAA,MACE;AAAA;AAAA,UACa,OAAO;AAAA;AAAA,KACjB,aAAa;AAAA,EAAc,UAAU;AAAA,IAAO;AAAA,IACjD;AAEA,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AACF;;;ADHA,IAAM,iBAAmC;AAAA,EACvC;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAIO,SAAS,yBAAyB,SAAiB,SAAS,OAAa;AAC9E,MAAI,CAAC,WAAW,OAAO,GAAG;AACxB,UAAM,IAAI,iBAAiB,CAAC,qCAAqC,OAAO,EAAE,GAAG,OAAO;AAAA,EACtF;AAEA,QAAM,SAAmB,CAAC;AAE1B,QAAM,eAAiC;AAAA,IACrC,EAAE,MAAM,QAAQ,cAAc,+BAA+B,MAAM,IAAI;AAAA,EACzE;AAEA,aAAW,QAAQ,cAAc;AAC/B,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,aAAW,QAAQ,gBAAgB;AACjC,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,GAAG;AACrB,UAAM,IAAI,iBAAiB,QAAQ,OAAO;AAAA,EAC5C;AACF;","names":["config"]}

package/dist/{internal-api-C5UJG3E2.js → internal-api-REGN3WMX.js}

@@ -1,8 +1,7 @@
 import {
   dispatchControllerRequest,
-  mountAgent,
-  resolveProvider
-} from "./chunk-EIRQM55C.js";
+  mountAgent
+} from "./chunk-OJLL4YD6.js";
 import {
   BATCH_PATH,
   TRACE_HEADER,
@@ -13,7 +12,7 @@ import {
   handleBatchRequest,
   incomingMessageToHandlerRequest,
   sendError
-} from "./chunk-37ZO643S.js";
+} from "./chunk-XALU5LCU.js";
 import "./chunk-47FFT43U.js";
 import {
   findSuggestion
@@ -51,7 +50,10 @@ import {
 import "./chunk-OLGPYOLO.js";
 import "./chunk-AVQU5CQF.js";
 import "./chunk-ACKBVBUI.js";
-import "./chunk-7SABX4DJ.js";
+import "./chunk-IZ3TIL6K.js";
+import {
+  resolveProvider
+} from "./chunk-6E5WKMDS.js";
 import {
   generateNonce
 } from "./chunk-JA2ZAT5Q.js";
@@ -89,4 +91,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-C5UJG3E2.js.map
+//# sourceMappingURL=internal-api-REGN3WMX.js.map

package/dist/{internal-api-XAQ7H73N.js → internal-api-XQA2L663.js}

@@ -21,7 +21,7 @@ import {
   findSuggestion,
   generateNonce,
   mountAgent
-} from "./chunk-VPV7WABO.js";
+} from "./chunk-VTJMND23.js";
 import {
   resolveProvider
 } from "./chunk-6GGWS7J3.js";
@@ -45,7 +45,7 @@ import {
   scanWebSocketRoutes
 } from "./chunk-MNIQ5F3Y.js";
 import "./chunk-A7JBF5FO.js";
-import "./chunk-XTM32FF6.js";
+import "./chunk-VQIUTCK2.js";
 export {
   BATCH_PATH,
   CSP_REPORT_PATH,
@@ -78,4 +78,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-XAQ7H73N.js.map
+//# sourceMappingURL=internal-api-XQA2L663.js.map

package/dist/{mcp-TJIUDFY2.js → mcp-CO4AGAXV.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   createAgentSsrLoader
-} from "./chunk-B7XHGEDH.js";
+} from "./chunk-O5W7XSUX.js";
 import {
   extractAppResources,
   handleMcpJsonRpc
@@ -75,4 +75,4 @@ async function mcpCommand(name, deps = {}) {
 export {
   mcpCommand
 };
-//# sourceMappingURL=mcp-TJIUDFY2.js.map
+//# sourceMappingURL=mcp-CO4AGAXV.js.map

package/dist/server/agent/index.d.ts

@@ -5,6 +5,95 @@ export { InProcessApprovalRequest, InProcessApprovalRequiredError, InProcessAwai
 import { CustomTool as CustomTool$1 } from '@theokit/sdk';
 import { V as VerifyFn } from '../../webhook-types-CNUZY7o1.js';
 
+/**
+ * Provider Resolver — Strategy + Registry pattern (FAANG-grade).
+ *
+ * Inspiration: Dapr Conversation Registry (`dapr/pkg/components/conversation/registry.go`)
+ * + Encore Manager provider array (`encore/runtimes/go/pubsub/manager_internal.go`).
+ *
+ * Principle: provider routing is the FRAMEWORK's responsibility, not the consumer's.
+ * The consumer template uses a plain `model: { id: 'gpt-4o-mini' }` — no conditionals.
+ *
+ * Wire protocol: OpenAI Chat Completions (universal — implemented by every
+ * os providers: OpenRouter, Groq, Mistral, Together, Anthropic via proxy, etc).
+ *
+ * Resolution by priority (FIRST match wins):
+ *   1. OPENROUTER_API_KEY → baseUrl=openrouter.ai (multi-model gateway)
+ *   2. OPENAI_API_KEY     → baseUrl=api.openai.com
+ *   3. ANTHROPIC_API_KEY  → direct Anthropic (Messages API, not OpenAI-compat)
+ *
+ * Escape hatch: an explicit `options.apiKey` OVERRIDES auto-resolution
+ * (the consumer can force a specific provider if it wants to).
+ */
+/**
+ * Provider configuration descriptor — Registry entry shape.
+ *
+ * @public
+ */
+interface ProviderDescriptor {
+    /** Stable name used internally — not exposed on the wire. */
+    name: string;
+    /** Environment variable that holds the API key for this provider. */
+    envKey: string;
+    /** Base URL for the provider's OpenAI-compatible (or native) API. */
+    baseUrl: string;
+    /** Resolution priority (lower = higher priority). FIRST match wins. */
+    priority: number;
+}
+/**
+ * Resolved provider configuration — output of `resolveProvider()`.
+ *
+ * @public
+ */
+interface ResolvedProvider {
+    name: string;
+    apiKey: string;
+    baseUrl: string;
+}
+/**
+ * Register a new provider (Registry pattern — runtime extension point).
+ * Useful for self-hosted endpoints or custom providers without touching theokit src.
+ *
+ * @example
+ * registerProvider({
+ *   name: 'self-hosted',
+ *   envKey: 'SELF_HOSTED_API_KEY',
+ *   baseUrl: 'https://llm.internal.acme.com/v1',
+ *   priority: 0, // highest priority
+ * })
+ *
+ * @public
+ */
+declare function registerProvider(descriptor: ProviderDescriptor): void;
+/**
+ * Reset registry to DEFAULT_REGISTRY (test-only / dev escape hatch).
+ *
+ * @public
+ */
+declare function resetProviderRegistry(): void;
+/**
+ * Get current registry snapshot (read-only — inspection).
+ *
+ * @public
+ */
+declare function listProviders(): readonly ProviderDescriptor[];
+/**
+ * Resolve provider from env vars by priority. FIRST env var found wins.
+ *
+ * @returns ResolvedProvider with apiKey + baseUrl + name
+ * @throws Error if NO provider env var is set (actionable message)
+ *
+ * @public
+ */
+declare function resolveProvider(): ResolvedProvider;
+/**
+ * Try to resolve — does NOT throw. Returns null if no provider available.
+ * Useful for graceful degradation (e.g., mock mode).
+ *
+ * @public
+ */
+declare function tryResolveProvider(): ResolvedProvider | null;
+
 /**
  * M26 (ADR-0041) — `createWorkflowTool`: wrap an SDK `Workflow` as a `CustomTool`.
  *
@@ -320,4 +409,4 @@ interface StdioStreams {
  */
 declare function serveMcpStdio(mod: unknown, name: string, appResources: readonly AppResource[], streams: StdioStreams): Promise<void>;
 
-export { type AcpToolConfig, type AppResource, type AppResourceInput, type ChannelMessage, type ChannelWebhookConfig, type CodeModeApi, type CodeModeConfig, type CodeModePermission, CodeModePermissionDeniedError, type McpResourceContents, type McpResourceDescriptor, NodeAcpTransport, type Sandbox, type StdioStreams, type VendorAgentClient, type VendorAgentToolConfig, type WorkflowLike, type WorkflowToolConfig, buildResourceDescriptors, createACPTool, createCodeMode, createVendorAgentTool, createWorkflowTool, defineAppResource, extractAppResources, handleChannelWebhook, handleMcpStdioLine, isChannelPath, parseChannelPath, readAppResource, serveMcpStdio };
+export { type AcpToolConfig, type AppResource, type AppResourceInput, type ChannelMessage, type ChannelWebhookConfig, type CodeModeApi, type CodeModeConfig, type CodeModePermission, CodeModePermissionDeniedError, type McpResourceContents, type McpResourceDescriptor, NodeAcpTransport, type ProviderDescriptor, type ResolvedProvider, type Sandbox, type StdioStreams, type VendorAgentClient, type VendorAgentToolConfig, type WorkflowLike, type WorkflowToolConfig, buildResourceDescriptors, createACPTool, createCodeMode, createVendorAgentTool, createWorkflowTool, defineAppResource, extractAppResources, handleChannelWebhook, handleMcpStdioLine, isChannelPath, listProviders, parseChannelPath, readAppResource, registerProvider, resetProviderRegistry, resolveProvider, serveMcpStdio, tryResolveProvider };

package/dist/server/agent/index.js

@@ -12,13 +12,20 @@ import {
   parseChannelPath,
   serveMcpStdio,
   streamAgentTurnInProcess
-} from "../../chunk-FZG3JYB3.js";
+} from "../../chunk-7ZOQN7UH.js";
 import {
   buildResourceDescriptors,
   defineAppResource,
   extractAppResources,
   readAppResource
 } from "../../chunk-YOIVCCZT.js";
+import {
+  listProviders,
+  registerProvider,
+  resetProviderRegistry,
+  resolveProvider,
+  tryResolveProvider
+} from "../../chunk-6E5WKMDS.js";
 import "../../chunk-SAFGDIPQ.js";
 import "../../chunk-XTHN6JBX.js";
 export {
@@ -35,9 +42,14 @@ export {
   handleChannelWebhook,
   handleMcpStdioLine,
   isChannelPath,
+  listProviders,
   parseChannelPath,
   readAppResource,
+  registerProvider,
+  resetProviderRegistry,
+  resolveProvider,
   serveMcpStdio,
-  streamAgentTurnInProcess
+  streamAgentTurnInProcess,
+  tryResolveProvider
 };
 //# sourceMappingURL=index.js.map

package/dist/server/cost/index.d.ts

@@ -1,4 +1,5 @@
 import { d as StorageAdapter } from '../../storage-types-DsDTCPbp.js';
+export { InMemoryUsageStorage as NeutralUsageStorage } from '@theokit/agents/usage';
 
 /**
  * Cost tracking types (R0.5.11).

package/dist/server/cost/index.js

@@ -1,11 +1,13 @@
 import {
   InMemoryUsageStorage,
+  InMemoryUsageStorage2,
   trackAgentRun,
   trackAgentTools
-} from "../../chunk-SEELKQUM.js";
+} from "../../chunk-Y2KHTD2W.js";
 import "../../chunk-XTHN6JBX.js";
 export {
   InMemoryUsageStorage,
+  InMemoryUsageStorage2 as NeutralUsageStorage,
   trackAgentRun,
   trackAgentTools
 };

package/dist/server/http/index.js

@@ -24,7 +24,7 @@ import {
   runMiddlewareAndContext,
   sendError,
   sendJson
-} from "../../chunk-37ZO643S.js";
+} from "../../chunk-XALU5LCU.js";
 import "../../chunk-47FFT43U.js";
 import "../../chunk-KD5G3YXI.js";
 import "../../chunk-FB2HBNIC.js";
@@ -38,7 +38,7 @@ import {
   TheoError,
   fromUnknown,
   serverErrorToEnvelope
-} from "../../chunk-7SABX4DJ.js";
+} from "../../chunk-IZ3TIL6K.js";
 import {
   appendCookieToHeaders,
   appendDeleteCookieToHeaders,

package/dist/server/index.d.ts

@@ -7,8 +7,11 @@ export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as
 export { ActionNode, ActionScanError, LoadedManifest, ManifestAction, ManifestAgent, ManifestRoute, ManifestWebSocket, TheoManifest, WebSocketRouteNode, generateManifest, loadManifest, scanMiddlewares, scanServerActions, scanServerActionsEnriched, scanServerRoutes, scanWebSocketRoutes, writeManifest } from './scan/index.js';
 export { L as LoadModule, S as ServerRouteNode, c as compilePattern, a as createProductionLoader, b as createViteLoader, m as matchRoute } from '../match-CfbEFRG4.js';
 import { T as TheoErrorEnvelope, a as TheoErrorCode, V as ValidationFieldsExt } from '../error-envelope-DG47lt8E.js';
+export { AcpToolConfig, AppResource, AppResourceInput, ChannelMessage, ChannelWebhookConfig, CodeModeApi, CodeModeConfig, CodeModePermission, CodeModePermissionDeniedError, McpResourceContents, McpResourceDescriptor, NodeAcpTransport, ProviderDescriptor, ResolvedProvider, Sandbox, StdioStreams, VendorAgentClient, VendorAgentToolConfig, WorkflowLike, WorkflowToolConfig, buildResourceDescriptors, createACPTool, createCodeMode, createVendorAgentTool, createWorkflowTool, defineAppResource, extractAppResources, handleChannelWebhook, handleMcpStdioLine, isChannelPath, listProviders, parseChannelPath, readAppResource, registerProvider, resetProviderRegistry, resolveProvider, serveMcpStdio, tryResolveProvider } from './agent/index.js';
+export { InProcessApprovalRequest, InProcessApprovalRequiredError, InProcessAwaitApproval, StreamAgentTurnDeps, StreamAgentTurnInProcessInput, streamAgentTurnInProcess } from '@theokit/agents';
 export { AuthRequiredError, BackupCode, BackupCodeOptions, OidcMetadata, PkceChallenge, SessionConfig, SessionManager, SessionManagerWeb, SessionMeta, ThrottleOptions, ThrottleState, TotpAlgorithm, TotpOptions, TotpUriOptions, VerifyTotpOptions, _resetKeyCacheForTests, assertProductionSecret, checkThrottle, clearOidcCache, createSessionManager, createSessionManagerWeb, decrypt, discoverOidcProvider, encrypt, generateBackupCodes, generateNonce, generateOAuthState, generatePkceChallenge, generateTotp, generateTotpSecret, pkceChallengeFromVerifier, recordAttempt, requireAuth, rotateIfNeeded, rotateIfNeededWeb, totpUri, verifyBackupCode, verifyOAuthState, verifyTotp } from './auth/index.js';
 export { InMemoryUsageStorage, ToolHookEvent, ToolUsageRecord, TrackAgentRunInput, TrackAgentRunOptions, TrackAgentToolsHooks, TrackAgentToolsOptions, UsageQuery, UsageRecord, UsageResult, UsageStorageAdapter, trackAgentRun, trackAgentTools } from './cost/index.js';
+export { InMemoryUsageStorage as NeutralUsageStorage } from '@theokit/agents/usage';
 export { CRON_MANIFEST_SCHEMA_VERSION, CronConcurrencyPolicy, CronContext, CronDefinition, CronManifest, CronManifestEntry, CronNode, CronOptions, CronScheduler, DuplicateCronNameError, ExistingConfigUnparseableError, buildCronManifest, convertToAwsCron, createCronScheduler, defineCron, scanCronDirs, scanCrons, translateCronToAws, translateCronToCloudflare, translateCronToDeno, translateCronToVercel, validateCronSchedule, writeCronManifest } from './cron/index.js';
 export { DuplicateContextKeyError, DuplicateJobNameError, EnqueueOptions, InMemoryJobBackend, InMemoryJobBackendOptions, JOB_MANIFEST_SCHEMA_VERSION, JobContext, JobDefinition, JobManifest, JobManifestEntry, JobNode, JobOptions, JobRegistry, JobRunner, Outbox, OutboxFlushOptions, PostgresJobBackend, PostgresJobBackendOptions, QueueClient, buildJobManifest, createJobRunner, createOutbox, createOutboxDispatcher, createQueueClient, defineJob, scanJobs, writeJobManifest } from './jobs/index.js';
 export { J as JobBackend, a as JobEnqueueInput, b as JobLease, N as NonRetryableError } from '../job-backend-CgC8Xf33.js';
@@ -29,11 +32,10 @@ export { G as GenericFactory, a as PoolLike, P as PostgresDatabaseConfig, c as R
 export { BodyTooLargeError, DEFAULT_MAX_BODY_BYTES, RawBodyResult, ReadRawBodyOptions, defineWebhook, dispatchWebhook, readRawBody, timingSafeEqual } from './webhook/index.js';
 export { D as DefineWebhookOptions, V as VerifyFn, a as VerifyResult, W as WebhookContext, b as WebhookDefinition } from '../webhook-types-CNUZY7o1.js';
 import { z } from 'zod';
-export { AcpToolConfig, AppResource, AppResourceInput, ChannelMessage, ChannelWebhookConfig, CodeModeApi, CodeModeConfig, CodeModePermission, CodeModePermissionDeniedError, McpResourceContents, McpResourceDescriptor, NodeAcpTransport, Sandbox, StdioStreams, VendorAgentClient, VendorAgentToolConfig, WorkflowLike, WorkflowToolConfig, buildResourceDescriptors, createACPTool, createCodeMode, createVendorAgentTool, createWorkflowTool, defineAppResource, extractAppResources, handleChannelWebhook, handleMcpStdioLine, isChannelPath, parseChannelPath, readAppResource, serveMcpStdio } from './agent/index.js';
-export { InProcessApprovalRequest, InProcessApprovalRequiredError, InProcessAwaitApproval, StreamAgentTurnDeps, StreamAgentTurnInProcessInput, streamAgentTurnInProcess } from '@theokit/agents';
 import { IncomingMessage } from 'node:http';
 import { W as WebOnRequestHook, b as WebPreHandlerHook, c as WebOnResponseHook, d as WebOnErrorHook } from '../plugin-types-D69-lJZ9.js';
 export { e as HookName, H as HookResult, O as OnErrorHook, f as OnRequestHook, g as OnResponseHook, P as PluginContext, h as PluginErrorContext, i as PreHandlerHook, R as RunHookOptions, a as TheoApp, T as TheoPlugin } from '../plugin-types-D69-lJZ9.js';
+export { ComposeInstructionsOptions, ComposedInstructions, ConfigLayer, ContextPressure, ContextPressureThresholdError, ContextPressureThresholds, CustomCommand, CustomCommandsResult, DEFAULT_CONTEXT_PRESSURE_THRESHOLDS, InstructionBlock, InstructionSource, InstructionTree, InstructionTreeBudget, LayerOutOfOrderError, LayeredConfig, LayeredConfigInput, LayeredConfigResult, LoadCustomCommandsInput, LoadInstructionTreeInput, ParsedFrontmatter, PrecedenceReport, ProvenancePerKey, TrustRecord, TrustStore, TrustStorePermissionsError, composeInstructions, contextPressure, effectiveContextWindow, frontmatterValue, loadCustomCommands, loadInstructionTree, splitFrontmatter } from '@theokit/agents/config';
 export { a as ServiceDefinition, S as ServicesConfig, b as ServicesConfigInput, c as ServicesConfigOutput } from '../schema-BpH6ivDY.js';
 import '@theokit/presenter/wire';
 import 'vite';

package/dist/server/index.js

@@ -61,7 +61,7 @@ import {
   resolveTransformer,
   superjsonTransformer,
   validateRouteInput
-} from "../chunk-U3H53IIN.js";
+} from "../chunk-FO55VGMQ.js";
 import {
   ActionError,
   ActionInputError,
@@ -88,7 +88,7 @@ import {
   runMiddlewareAndContext,
   sendError,
   sendJson
-} from "../chunk-37ZO643S.js";
+} from "../chunk-XALU5LCU.js";
 import {
   DuplicateContextKeyError,
   createOutbox,
@@ -176,7 +176,7 @@ import {
   TheoError,
   fromUnknown,
   serverErrorToEnvelope
-} from "../chunk-7SABX4DJ.js";
+} from "../chunk-IZ3TIL6K.js";
 import {
   CodeModePermissionDeniedError,
   InProcessApprovalRequiredError,
@@ -191,13 +191,20 @@ import {
   parseChannelPath,
   serveMcpStdio,
   streamAgentTurnInProcess
-} from "../chunk-FZG3JYB3.js";
+} from "../chunk-7ZOQN7UH.js";
 import {
   buildResourceDescriptors,
   defineAppResource,
   extractAppResources,
   readAppResource
 } from "../chunk-YOIVCCZT.js";
+import {
+  listProviders,
+  registerProvider,
+  resetProviderRegistry,
+  resolveProvider,
+  tryResolveProvider
+} from "../chunk-6E5WKMDS.js";
 import {
   AuthRequiredError,
   _resetKeyCacheForTests,
@@ -239,9 +246,10 @@ import {
 } from "../chunk-JA2ZAT5Q.js";
 import {
   InMemoryUsageStorage,
+  InMemoryUsageStorage2,
   trackAgentRun,
   trackAgentTools
-} from "../chunk-SEELKQUM.js";
+} from "../chunk-Y2KHTD2W.js";
 import {
   CRON_MANIFEST_SCHEMA_VERSION,
   DuplicateCronNameError,
@@ -1179,6 +1187,18 @@ var CTX_WRITERS = {
 };
 
 // src/server/index.ts
+import { LayeredConfig, LayerOutOfOrderError } from "@theokit/agents/config";
+import { TrustStore, TrustStorePermissionsError } from "@theokit/agents/config";
+import { loadCustomCommands } from "@theokit/agents/config";
+import { frontmatterValue, splitFrontmatter } from "@theokit/agents/config";
+import { loadInstructionTree } from "@theokit/agents/config";
+import { composeInstructions } from "@theokit/agents/config";
+import {
+  DEFAULT_CONTEXT_PRESSURE_THRESHOLDS,
+  ContextPressureThresholdError,
+  contextPressure,
+  effectiveContextWindow
+} from "@theokit/agents/config";
 if (typeof globalThis !== "undefined") {
   const WARN_KEY = "__theokit_server_umbrella_warn_emitted__";
   const g = globalThis;
@@ -1212,7 +1232,9 @@ export {
   ChannelManager,
   CodeModePermissionDeniedError,
   ConsoleObservabilityAdapter,
+  ContextPressureThresholdError,
   CsrfReadinessStore,
+  DEFAULT_CONTEXT_PRESSURE_THRESHOLDS,
   DEFAULT_CSP,
   DEFAULT_EXCLUDED_QUERY_PARAMS,
   DEFAULT_MAX_BODY_BYTES,
@@ -1233,7 +1255,10 @@ export {
   InvalidPluginShapeError,
   JOB_MANIFEST_SCHEMA_VERSION,
   JsonStdoutSink,
+  LayerOutOfOrderError,
+  LayeredConfig,
   MAX_ERROR_HTML_BYTES,
+  InMemoryUsageStorage2 as NeutralUsageStorage,
   NodeAcpTransport,
   NonRetryableError,
   NoopObservabilityAdapter,
@@ -1252,6 +1277,8 @@ export {
   TRACE_PARENT_HEADER,
   TheoCloudObservabilityAdapter,
   TheoError,
+  TrustStore,
+  TrustStorePermissionsError,
   _resetCacheEngine,
   _resetEnvCache,
   _resetKeyCacheForTests,
@@ -1272,6 +1299,8 @@ export {
   clearOidcCache,
   compilePattern,
   compileRouteRules,
+  composeInstructions,
+  contextPressure,
   convertToAwsCron,
   createACPTool,
   createCacheEngine,
@@ -1317,6 +1346,7 @@ export {
   deserializeResponse,
   discoverOidcProvider,
   dispatchWebhook,
+  effectiveContextWindow,
   encrypt,
   enforceCsrf,
   envelopeCodeToStatus,
@@ -1329,6 +1359,7 @@ export {
   extractUniversalIssues,
   findSuggestion,
   fromUnknown,
+  frontmatterValue,
   generateBackupCodes,
   generateManifest,
   generateNonce,
@@ -1356,8 +1387,11 @@ export {
   isInputError,
   jsonTransformer,
   levenshtein,
+  listProviders,
+  loadCustomCommands,
   loadCustomErrorPages,
   loadEnv,
+  loadInstructionTree,
   loadManifest,
   logRequest,
   matchDisallowed,
@@ -1376,8 +1410,11 @@ export {
   readAppResource,
   readRawBody,
   recordAttempt,
+  registerProvider,
   requireAuth,
+  resetProviderRegistry,
   resolveAdapter,
+  resolveProvider,
   resolveRouteRule,
   resolveTransformer,
   revalidatePath,
@@ -1405,6 +1442,7 @@ export {
   serveStaticFile,
   serverErrorToEnvelope,
   setCookie,
+  splitFrontmatter,
   streamAgentTurnInProcess,
   superjsonTransformer,
   timingSafeEqual,
@@ -1416,6 +1454,7 @@ export {
   translateCronToCloudflare,
   translateCronToDeno,
   translateCronToVercel,
+  tryResolveProvider,
   uiMessageStreamResponse,
   updateTag,
   useDatabase,