theokit 0.48.13 → 0.50.0

package/dist/chunk-M2WC5MF7.js

@@ -0,0 +1,127 @@
+#!/usr/bin/env node
+import "tsx/esm";
+
+// src/adapters/deployed-agents.ts
+var EMPTY = { imports: [], declarations: [], branch: [] };
+var AGENT_PREFIX = "/api/agents/";
+function deployedAgentsFragment(source, host = {}) {
+  if (source === void 0) return EMPTY;
+  if (source.kind === "baked" && source.agents.length === 0) return EMPTY;
+  const pathname = host.pathname ?? "url.pathname";
+  const notFound = host.notFound ?? "notFoundResponse()";
+  const prefix = host.importPrefix ?? "";
+  const resolution = source.kind === "baked" ? bakedResolution(source.agents) : scannedResolution(source);
+  return {
+    imports: [
+      // `theokit/adapters/agent-mount`, not `theokit/server`: `mount-agent` is deliberately not on
+      // the app-facing surface (ADR 0041), and a generated entry is not an app. See that module.
+      `import { mountAgent, resolveProvider${source.kind === "scan" ? ", scanAgents" : ""} } from '${prefix}theokit/adapters/agent-mount'`,
+      ...resolution.imports
+    ],
+    declarations: resolution.declarations,
+    branch: [
+      `    // #367 \u2014 the agent convention owns this prefix. It is answered BEFORE the file-route`,
+      `    // table because an agent matches no file route: falling through is how a deployed`,
+      `    // \`/api/agents/<name>\` used to 404 on every target.`,
+      `    if (${pathname}.startsWith(${JSON.stringify(AGENT_PREFIX)})) {`,
+      `      const agentName = ${pathname}.slice(${String(AGENT_PREFIX.length)}).split('/')[0]`,
+      ...resolution.lookup,
+      `      // A name nobody scanned is a 404, exactly like any other unknown path. Handing`,
+      `      // \`undefined\` to mountAgent would surface as a 500 for what is a routing miss.`,
+      `      if (mod === undefined) return ${notFound}`,
+      `      const agentResponse = await mountAgent(mod, request, (model) => resolveProvider(model).apiKey, {`,
+      `        agentName,`,
+      `        ...CSRF_CONFIG,`,
+      `      })`,
+      host.wrapSecurityHeaders === true ? `      return withSecurityHeaders(agentResponse, SECURITY_HEADERS)` : `      return agentResponse`,
+      `    }`
+    ]
+  };
+}
+function bakedResolution(agents) {
+  const varOf = (index) => `__theoAgent${String(index)}`;
+  return {
+    imports: agents.map(
+      (agent, index) => `import * as ${varOf(index)} from '../../${agent.filePath}'`
+    ),
+    declarations: [
+      `// #367 \u2014 the app's agents, keyed by NAME because that is what the URL carries, what the`,
+      `// access policy is judged under, and what the run's spans are labelled with (#406).`,
+      `const agents = {`,
+      ...agents.map((agent, index) => `  ${JSON.stringify(agent.name)}: ${varOf(index)},`),
+      `}`
+    ],
+    lookup: [
+      `      const mod = Object.prototype.hasOwnProperty.call(agents, agentName)`,
+      `        ? agents[agentName]`,
+      `        : undefined`
+    ]
+  };
+}
+function scannedResolution(source) {
+  return {
+    imports: [],
+    declarations: [
+      `// #367 \u2014 scanned on first use and cached, the same shape this entry already gives routes.`,
+      `// Baking would tie an agent's existence to a rebuild on a target that has a filesystem.`,
+      `let agentsCache = null`
+    ],
+    lookup: [
+      ...source.ensureLoader === void 0 ? [] : [`      ${source.ensureLoader}`],
+      `      if (!agentsCache) agentsCache = scanAgents(${source.projectRoot})`,
+      `      const agentNode = agentsCache.find((a) => a.name === agentName)`,
+      `      const mod = agentNode === undefined ? undefined : await ${source.loadModule}(agentNode.filePath)`
+    ]
+  };
+}
+
+// src/adapters/deployed-plugins-module.ts
+var UnbakeablePluginError = class extends Error {
+  constructor(index, name, target) {
+    super(
+      `plugins[${index}] ("${name}") cannot be carried to the ${target} target: it is a constructed plugin, and a closure has no literal a generated entry could hold. Declare it by module specifier instead \u2014 plugins: ['./src/plugins/${name}.ts'] \u2014 so the build can emit a static import for it. Both forms work locally; only the specifier survives a deploy.`
+    );
+    this.name = "UnbakeablePluginError";
+  }
+};
+var MODULE_FILENAME = "theo.plugins.mjs";
+function planDeployedPlugins(plugins, target) {
+  if (plugins === void 0 || plugins.length === 0) return void 0;
+  const specifiers = plugins.map((entry, index) => {
+    if (typeof entry === "string") return entry;
+    throw new UnbakeablePluginError(index, nameOf(entry), target);
+  });
+  const vars = specifiers.map((_, i) => `__theoPlugin${String(i)}`);
+  return {
+    moduleSpecifier: `./${MODULE_FILENAME}`,
+    specifiers,
+    source: [
+      `// Generated by Theo \u2014 the plugins the deployed entry registers (usetheokit/theokit#425).`,
+      `//`,
+      `// Static imports, resolved on the build machine. A constructed plugin has no literal, which`,
+      `// is why the config declares these by module specifier and why this file can exist at all.`,
+      ...specifiers.map((s, i) => `import ${vars[i]} from '${entrySpecifier(s)}'`),
+      ``,
+      `// Order is DECLARED order, because plugin order is hook order.`,
+      `export default { plugins: [${vars.join(", ")}] }`,
+      ``
+    ].join("\n")
+  };
+}
+function entrySpecifier(specifier) {
+  if (!specifier.startsWith(".")) return specifier;
+  return `../../${specifier.replace(/^\.\/+/, "")}`;
+}
+function nameOf(entry) {
+  if (entry != null && typeof entry === "object") {
+    const named = entry.name;
+    if (typeof named === "string" && named.length > 0) return named;
+  }
+  return "unnamed";
+}
+
+export {
+  deployedAgentsFragment,
+  planDeployedPlugins
+};
+//# sourceMappingURL=chunk-M2WC5MF7.js.map

package/dist/chunk-M2WC5MF7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/deployed-agents.ts","../src/adapters/deployed-plugins-module.ts"],"sourcesContent":["/**\n * Serving an agent from a generated deploy entry (usetheokit/theokit#367).\n *\n * ## The gap this closes\n *\n * `grep -rc \"agent\" packages/theo/src/adapters/*.ts` used to return nothing across 14 files. The\n * notion did not exist in this layer at all: every generated entry routes `/api/` exclusively\n * through `scanServerRoutes` + `executeRoute`, and an agent is a DIFFERENT scan served by a\n * DIFFERENT function — `scanAgents` + `mountAgent`. So `/api/agents/chat` matched no file route and\n * fell into `notFoundResponse()` on every target.\n *\n * For a framework whose stated reason to exist is \"the agent is a file, delivered by the same\n * pipeline that serves the page\", that is the gap which contradicts the sentence: the agent was\n * delivered by no pipeline at all outside a machine running `theokit start`.\n *\n * ## Why baking, and why `../../`\n *\n * A Worker has no filesystem to scan and no path to `import()`, which is the same reason routes are\n * baked (#369). The agent modules are resolved on the build machine and emitted as static imports,\n * relative to the entry's directory — every target that can do this writes two levels below the\n * project root, so the arithmetic is the one `renderBakedRoutes` already does.\n *\n * ## Which targets can do it\n *\n * Only the ones whose output is BUNDLED from the project: `cloudflare` (wrangler), `bun` and\n * `deno-deploy` resolve the emitted import against the app's own source tree. `vercel`, `netlify`\n * and `aws-lambda` receive a standalone function directory that never sees the app's modules, so\n * an agent cannot travel there by this road at all. Same split as plugins (#425), same cause.\n *\n * ## The table is keyed by NAME\n *\n * The URL carries the name, the access policy is judged under the name, and the run's spans are\n * labelled with it (#406). Keying by file path would make the lookup depend on the server's\n * directory layout — which changes per deploy, and which is exactly the value #406 removed from\n * telemetry for the same reason.\n */\n\n/** One agent, as `scanAgents` reports it. Structural, so the adapters need no `server/` import. */\nexport interface DeployedAgent {\n  /** Path relative to the project root — the specifier the static import uses. */\n  readonly filePath: string\n  /** The URL the agent answers on. */\n  readonly agentPath: string\n  /** The agent's NAME — what the URL carries, the policy is judged under, and spans are labelled. */\n  readonly name: string\n}\n\nexport interface DeployedAgentsFragment {\n  /** Top-level imports of the agent modules. */\n  readonly imports: string[]\n  /** Module-scope declarations — the name→module table. */\n  readonly declarations: string[]\n  /** The request-handler branch, to be emitted before the file-route table is consulted. */\n  readonly branch: string[]\n}\n\nconst EMPTY: DeployedAgentsFragment = { imports: [], declarations: [], branch: [] }\n\n/**\n * How the host entry names the things this branch has to use.\n *\n * The fragment is generated code injected into three entries that do NOT agree on their own\n * vocabulary — Bun reads `pathname`, Cloudflare reads `url.pathname`; Deno calls `notFound()`,\n * Cloudflare calls `notFoundResponse()`; Cloudflare wraps each branch in the security baseline\n * while Bun and Deno wrap once at the caller; Deno resolves npm packages with an `npm:` prefix.\n *\n * Naming those differences is what keeps this ONE fragment. The alternative — three near-identical\n * branches, one per adapter — is the copy that `serveThroughPluginLifecycle` was extracted to undo\n * after it had drifted five ways (#405).\n */\n/**\n * How the target REACHES its agent modules — and the two answers are genuinely different, not a\n * copy waiting to be merged.\n *\n * A Worker has no filesystem: its agents must be resolved on the build machine and emitted as\n * static imports, which is what `renderBakedRoutes` already does for routes there. Bun and Deno DO\n * have a filesystem and already scan their routes at request time; making them bake would couple an\n * agent's existence to a rebuild for no gain. The split mirrors the one routes already have on\n * exactly these targets, which is the argument for keeping it.\n */\nexport type DeployedAgentsSource =\n  | {\n      readonly kind: 'baked'\n      /** Scanned on the build machine, emitted as static imports. */\n      readonly agents: readonly DeployedAgent[]\n    }\n  | {\n      readonly kind: 'scan'\n      /** Expression yielding the project root at runtime. */\n      readonly projectRoot: string\n      /** Expression yielding the module loader the entry already builds. */\n      readonly loadModule: string\n      /**\n       * A statement that guarantees `loadModule` is usable, for a host that builds its loader\n       * lazily. Deno's `loaderCache` is created on the route path, which runs AFTER this branch —\n       * so without this the agent branch would call `null`.\n       */\n      readonly ensureLoader?: string\n    }\n\nexport interface DeployedAgentsHost {\n  /** Expression yielding the request path inside the handler. Default `url.pathname`. */\n  readonly pathname?: string\n  /** Call producing the 404 response. Default `notFoundResponse()`. */\n  readonly notFound?: string\n  /** Whether THIS branch applies the security baseline, or the caller already does. */\n  readonly wrapSecurityHeaders?: boolean\n  /** Prefix for bare package specifiers. Deno needs `npm:`; the others need nothing. */\n  readonly importPrefix?: string\n}\n\n/** The prefix the agent convention owns. Matches `handlers.ts`'s own `tryServeAgent`. */\nconst AGENT_PREFIX = '/api/agents/'\n\n/**\n * What a deployed entry needs in order to serve the app's agents.\n *\n * @param agents - the agents scanned on the build machine. Empty emits nothing at all.\n */\nexport function deployedAgentsFragment(\n  source: DeployedAgentsSource | undefined,\n  host: DeployedAgentsHost = {},\n): DeployedAgentsFragment {\n  if (source === undefined) return EMPTY\n  if (source.kind === 'baked' && source.agents.length === 0) return EMPTY\n\n  const pathname = host.pathname ?? 'url.pathname'\n  const notFound = host.notFound ?? 'notFoundResponse()'\n  const prefix = host.importPrefix ?? ''\n\n  const resolution =\n    source.kind === 'baked' ? bakedResolution(source.agents) : scannedResolution(source)\n\n  return {\n    imports: [\n      // `theokit/adapters/agent-mount`, not `theokit/server`: `mount-agent` is deliberately not on\n      // the app-facing surface (ADR 0041), and a generated entry is not an app. See that module.\n      `import { mountAgent, resolveProvider${source.kind === 'scan' ? ', scanAgents' : ''} } from '${prefix}theokit/adapters/agent-mount'`,\n      ...resolution.imports,\n    ],\n    declarations: resolution.declarations,\n    branch: [\n      `    // #367 — the agent convention owns this prefix. It is answered BEFORE the file-route`,\n      `    // table because an agent matches no file route: falling through is how a deployed`,\n      `    // \\`/api/agents/<name>\\` used to 404 on every target.`,\n      `    if (${pathname}.startsWith(${JSON.stringify(AGENT_PREFIX)})) {`,\n      `      const agentName = ${pathname}.slice(${String(AGENT_PREFIX.length)}).split('/')[0]`,\n      ...resolution.lookup,\n      `      // A name nobody scanned is a 404, exactly like any other unknown path. Handing`,\n      `      // \\`undefined\\` to mountAgent would surface as a 500 for what is a routing miss.`,\n      `      if (mod === undefined) return ${notFound}`,\n      `      const agentResponse = await mountAgent(mod, request, (model) => resolveProvider(model).apiKey, {`,\n      `        agentName,`,\n      `        ...CSRF_CONFIG,`,\n      `      })`,\n      host.wrapSecurityHeaders === true\n        ? `      return withSecurityHeaders(agentResponse, SECURITY_HEADERS)`\n        : `      return agentResponse`,\n      `    }`,\n    ],\n  }\n}\n\ninterface AgentResolution {\n  imports: string[]\n  declarations: string[]\n  /** Lines that must leave `mod` bound to the agent's module, or `undefined`. */\n  lookup: string[]\n}\n\n/** No filesystem: every agent module is a static import decided on the build machine. */\nfunction bakedResolution(agents: readonly DeployedAgent[]): AgentResolution {\n  const varOf = (index: number): string => `__theoAgent${String(index)}`\n  return {\n    imports: agents.map(\n      (agent, index) => `import * as ${varOf(index)} from '../../${agent.filePath}'`,\n    ),\n    declarations: [\n      `// #367 — the app's agents, keyed by NAME because that is what the URL carries, what the`,\n      `// access policy is judged under, and what the run's spans are labelled with (#406).`,\n      `const agents = {`,\n      ...agents.map((agent, index) => `  ${JSON.stringify(agent.name)}: ${varOf(index)},`),\n      `}`,\n    ],\n    lookup: [\n      `      const mod = Object.prototype.hasOwnProperty.call(agents, agentName)`,\n      `        ? agents[agentName]`,\n      `        : undefined`,\n    ],\n  }\n}\n\n/** A filesystem: scan once and load on demand, exactly as this entry already treats its routes. */\nfunction scannedResolution(source: {\n  projectRoot: string\n  loadModule: string\n  ensureLoader?: string\n}): AgentResolution {\n  return {\n    imports: [],\n    declarations: [\n      `// #367 — scanned on first use and cached, the same shape this entry already gives routes.`,\n      `// Baking would tie an agent's existence to a rebuild on a target that has a filesystem.`,\n      `let agentsCache = null`,\n    ],\n    lookup: [\n      ...(source.ensureLoader === undefined ? [] : [`      ${source.ensureLoader}`]),\n      `      if (!agentsCache) agentsCache = scanAgents(${source.projectRoot})`,\n      `      const agentNode = agentsCache.find((a) => a.name === agentName)`,\n      `      const mod = agentNode === undefined ? undefined : await ${source.loadModule}(agentNode.filePath)`,\n    ],\n  }\n}\n","/**\n * The plugins module a build writes beside a deployed entry (usetheokit/theokit#425).\n *\n * ## What it is for\n *\n * `config.plugins` used to reach no deployed target at all, so `onRequest`, `preHandler`,\n * `onResponse` and `onError` were dead on every Web-standards deployment while firing locally. The\n * reason was never the hook loop — `executeRoute` has always run it — but that a constructed\n * plugin closes over state, and there is no literal for a closure.\n *\n * A plugin declared as a module SPECIFIER can be carried, because the build can emit a static\n * import for it. That is the road `renderBakedRoutes` already takes for route modules (#369):\n * resolve on the build machine, emit a static specifier, let the target's bundler see through it.\n *\n * ## Why the specifier is `../../`\n *\n * Every target that can carry plugins writes its entry two levels below the project root —\n * `.theokit/cloudflare/`, `.theokit/bun/`, `.theokit/deno/` — and a declared specifier is relative\n * to that root. The same arithmetic `renderBakedRoutes` does for routes, for the same reason.\n *\n * ## Which targets can carry them at all\n *\n * Only the ones whose output is BUNDLED from the project: Cloudflare (wrangler), Bun and Deno all\n * resolve the emitted import against the app's own source tree. Vercel, Netlify and AWS Lambda\n * receive a standalone function directory and never see the app's modules, so for them a named\n * refusal — which `findUnappliedConfig` already prints — remains the honest answer, and this module\n * is not called.\n */\n\n/**\n * A plugin the build was asked to carry and cannot.\n *\n * Its own type because the alternative is the defect this whole issue is: hooks that do not fire\n * and nothing that says so. A target that CAN carry a named module but was handed a closure has\n * something actionable to say, so it says it at build time rather than at the first request\n * (`rules/three-target-parity.md` § 3 — refuse by name).\n */\nexport class UnbakeablePluginError extends Error {\n  constructor(index: number, name: string, target: string) {\n    super(\n      `plugins[${index}] (\"${name}\") cannot be carried to the ${target} target: it is a constructed ` +\n        `plugin, and a closure has no literal a generated entry could hold. Declare it by module ` +\n        `specifier instead — plugins: ['./src/plugins/${name}.ts'] — so the build can emit a ` +\n        `static import for it. Both forms work locally; only the specifier survives a deploy.`,\n    )\n    this.name = 'UnbakeablePluginError'\n  }\n}\n\nexport interface DeployedPluginsPlan {\n  /** The module source to write beside the entry. */\n  readonly source: string\n  /** What the entry imports it as — a sibling, because both are written to the same directory. */\n  readonly moduleSpecifier: string\n  /** The declared specifiers, in order, for the build to report. */\n  readonly specifiers: readonly string[]\n}\n\nconst MODULE_FILENAME = 'theo.plugins.mjs'\n\n/**\n * Plan the plugins module for a target that can carry one.\n *\n * @param plugins - the raw `config.plugins` array.\n * @param target - the deploy target, named in the refusal so the message says where it applies.\n * @returns `undefined` when the app declares no plugins, so an app carrying none emits nothing.\n * @throws UnbakeablePluginError when an entry is a constructed plugin rather than a specifier.\n */\nexport function planDeployedPlugins(\n  plugins: readonly unknown[] | undefined,\n  target: string,\n): DeployedPluginsPlan | undefined {\n  if (plugins === undefined || plugins.length === 0) return undefined\n\n  const specifiers = plugins.map((entry, index) => {\n    if (typeof entry === 'string') return entry\n    throw new UnbakeablePluginError(index, nameOf(entry), target)\n  })\n\n  const vars = specifiers.map((_, i) => `__theoPlugin${String(i)}`)\n\n  return {\n    moduleSpecifier: `./${MODULE_FILENAME}`,\n    specifiers,\n    source: [\n      `// Generated by Theo — the plugins the deployed entry registers (usetheokit/theokit#425).`,\n      `//`,\n      `// Static imports, resolved on the build machine. A constructed plugin has no literal, which`,\n      `// is why the config declares these by module specifier and why this file can exist at all.`,\n      ...specifiers.map((s, i) => `import ${vars[i]} from '${entrySpecifier(s)}'`),\n      ``,\n      `// Order is DECLARED order, because plugin order is hook order.`,\n      `export default { plugins: [${vars.join(', ')}] }`,\n      ``,\n    ].join('\\n'),\n  }\n}\n\n/**\n * How the emitted module names a declared specifier.\n *\n * A RELATIVE specifier is relative to the project root, and the module sits two levels below it, so\n * it is re-based — the arithmetic `renderBakedRoutes` does for routes. A BARE specifier is a package\n * and must be left alone: `../../my-plugin-pkg` is a path that does not exist, where\n * `my-plugin-pkg` is a dependency the target's bundler resolves from `node_modules` like any other.\n */\nfunction entrySpecifier(specifier: string): string {\n  if (!specifier.startsWith('.')) return specifier\n  return `../../${specifier.replace(/^\\.\\/+/, '')}`\n}\n\n/** The plugin's own name when it has one, so the refusal names the thing the author wrote. */\nfunction nameOf(entry: unknown): string {\n  if (entry != null && typeof entry === 'object') {\n    const named = (entry as { name?: unknown }).name\n    if (typeof named === 'string' && named.length > 0) return named\n  }\n  return 'unnamed'\n}\n"],"mappings":";;;;AAwDA,IAAM,QAAgC,EAAE,SAAS,CAAC,GAAG,cAAc,CAAC,GAAG,QAAQ,CAAC,EAAE;AAwDlF,IAAM,eAAe;AAOd,SAAS,uBACd,QACA,OAA2B,CAAC,GACJ;AACxB,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,OAAO,SAAS,WAAW,OAAO,OAAO,WAAW,EAAG,QAAO;AAElE,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,WAAW,KAAK,YAAY;AAClC,QAAM,SAAS,KAAK,gBAAgB;AAEpC,QAAM,aACJ,OAAO,SAAS,UAAU,gBAAgB,OAAO,MAAM,IAAI,kBAAkB,MAAM;AAErF,SAAO;AAAA,IACL,SAAS;AAAA;AAAA;AAAA,MAGP,uCAAuC,OAAO,SAAS,SAAS,iBAAiB,EAAE,YAAY,MAAM;AAAA,MACrG,GAAG,WAAW;AAAA,IAChB;AAAA,IACA,cAAc,WAAW;AAAA,IACzB,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,QAAQ,eAAe,KAAK,UAAU,YAAY,CAAC;AAAA,MAC9D,2BAA2B,QAAQ,UAAU,OAAO,aAAa,MAAM,CAAC;AAAA,MACxE,GAAG,WAAW;AAAA,MACd;AAAA,MACA;AAAA,MACA,uCAAuC,QAAQ;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK,wBAAwB,OACzB,sEACA;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAUA,SAAS,gBAAgB,QAAmD;AAC1E,QAAM,QAAQ,CAAC,UAA0B,cAAc,OAAO,KAAK,CAAC;AACpE,SAAO;AAAA,IACL,SAAS,OAAO;AAAA,MACd,CAAC,OAAO,UAAU,eAAe,MAAM,KAAK,CAAC,gBAAgB,MAAM,QAAQ;AAAA,IAC7E;AAAA,IACA,cAAc;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,OAAO,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,UAAU,MAAM,IAAI,CAAC,KAAK,MAAM,KAAK,CAAC,GAAG;AAAA,MACnF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGA,SAAS,kBAAkB,QAIP;AAClB,SAAO;AAAA,IACL,SAAS,CAAC;AAAA,IACV,cAAc;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,GAAI,OAAO,iBAAiB,SAAY,CAAC,IAAI,CAAC,SAAS,OAAO,YAAY,EAAE;AAAA,MAC5E,oDAAoD,OAAO,WAAW;AAAA,MACtE;AAAA,MACA,iEAAiE,OAAO,UAAU;AAAA,IACpF;AAAA,EACF;AACF;;;AC/KO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAC/C,YAAY,OAAe,MAAc,QAAgB;AACvD;AAAA,MACE,WAAW,KAAK,OAAO,IAAI,+BAA+B,MAAM,0KAEd,IAAI;AAAA,IAExD;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAWA,IAAM,kBAAkB;AAUjB,SAAS,oBACd,SACA,QACiC;AACjC,MAAI,YAAY,UAAa,QAAQ,WAAW,EAAG,QAAO;AAE1D,QAAM,aAAa,QAAQ,IAAI,CAAC,OAAO,UAAU;AAC/C,QAAI,OAAO,UAAU,SAAU,QAAO;AACtC,UAAM,IAAI,sBAAsB,OAAO,OAAO,KAAK,GAAG,MAAM;AAAA,EAC9D,CAAC;AAED,QAAM,OAAO,WAAW,IAAI,CAAC,GAAG,MAAM,eAAe,OAAO,CAAC,CAAC,EAAE;AAEhE,SAAO;AAAA,IACL,iBAAiB,KAAK,eAAe;AAAA,IACrC;AAAA,IACA,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,WAAW,IAAI,CAAC,GAAG,MAAM,UAAU,KAAK,CAAC,CAAC,UAAU,eAAe,CAAC,CAAC,GAAG;AAAA,MAC3E;AAAA,MACA;AAAA,MACA,8BAA8B,KAAK,KAAK,IAAI,CAAC;AAAA,MAC7C;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAUA,SAAS,eAAe,WAA2B;AACjD,MAAI,CAAC,UAAU,WAAW,GAAG,EAAG,QAAO;AACvC,SAAO,SAAS,UAAU,QAAQ,UAAU,EAAE,CAAC;AACjD;AAGA,SAAS,OAAO,OAAwB;AACtC,MAAI,SAAS,QAAQ,OAAO,UAAU,UAAU;AAC9C,UAAM,QAAS,MAA6B;AAC5C,QAAI,OAAO,UAAU,YAAY,MAAM,SAAS,EAAG,QAAO;AAAA,EAC5D;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-O3JIAU3V.js → chunk-MCTC6HSE.js}

@@ -1,14 +1,25 @@
+import {
+  extractW3CTraceContext
+} from "./chunk-72DMJBXI.js";
+import {
+  newSpanId,
+  newTraceId
+} from "./chunk-UMNXCU3K.js";
+
 // src/server/observability/span.ts
 var SpanImpl = class {
   data;
   ended = false;
-  constructor(name, attributes) {
+  constructor(name, attributes, context) {
     this.data = {
       name,
+      traceId: context?.traceId ?? newTraceId(),
+      spanId: context?.spanId ?? newSpanId(),
       attributes: {},
       status: "ok",
       startTimeMs: Date.now()
     };
+    if (context?.parentSpanId !== void 0) this.data.parentSpanId = context.parentSpanId;
     if (attributes) {
       for (const [k, v] of Object.entries(attributes)) {
         if (v !== void 0) this.data.attributes[k] = v;
@@ -50,33 +61,6 @@ var NoopSpan = class {
   }
 };
 
-// src/server/observability/adapters/noop.ts
-var NoopObservabilityAdapter = class {
-  name = "noop";
-  isShutdown = false;
-  startSpan(_name, _attributes) {
-    return new NoopSpan();
-  }
-  // Null Object: discarding the call IS the behaviour. An empty body is the honest
-  // implementation — a fabricated one would only hide that from the next reader.
-  /* eslint-disable @typescript-eslint/no-empty-function -- no-op adapter by design */
-  counter(_name, _value, _attributes) {
-  }
-  histogram(_name, _value, _attributes) {
-  }
-  log(_level, _message, _attributes) {
-  }
-  /* eslint-enable @typescript-eslint/no-empty-function */
-  // Not `async`: there is nothing to await, and declaring it so would claim otherwise.
-  flush() {
-    return Promise.resolve();
-  }
-  shutdown() {
-    this.isShutdown = true;
-    return Promise.resolve();
-  }
-};
-
 // src/server/observability/adapters/console.ts
 var ConsoleObservabilityAdapter = class {
   name = "console";
@@ -86,9 +70,9 @@ var ConsoleObservabilityAdapter = class {
   constructor(options = {}) {
     this.write = options.write ?? ((line) => process.stderr.write(line + "\n"));
   }
-  startSpan(name, attributes) {
+  startSpan(name, attributes, context) {
     if (this.isShutdown) return new NoopSpan();
-    const span = new SpanImpl(name, attributes);
+    const span = new SpanImpl(name, attributes, context);
     this.spans.push(span);
     return {
       setAttribute: (k, v) => {
@@ -150,21 +134,52 @@ var ConsoleObservabilityAdapter = class {
   }
 };
 
+// src/server/observability/adapters/noop.ts
+var NoopObservabilityAdapter = class {
+  name = "noop";
+  isShutdown = false;
+  startSpan(_name, _attributes) {
+    return new NoopSpan();
+  }
+  // Null Object: discarding the call IS the behaviour. An empty body is the honest
+  // implementation — a fabricated one would only hide that from the next reader.
+  /* eslint-disable @typescript-eslint/no-empty-function -- no-op adapter by design */
+  counter(_name, _value, _attributes) {
+  }
+  histogram(_name, _value, _attributes) {
+  }
+  log(_level, _message, _attributes) {
+  }
+  /* eslint-enable @typescript-eslint/no-empty-function */
+  // Not `async`: there is nothing to await, and declaring it so would claim otherwise.
+  flush() {
+    return Promise.resolve();
+  }
+  shutdown() {
+    this.isShutdown = true;
+    return Promise.resolve();
+  }
+};
+
 // src/server/observability/otlp-serializer.ts
 function paraValorOtlp(value) {
   switch (typeof value) {
     case "string":
       return { stringValue: value };
     case "number":
-      return { intValue: String(value) };
+      return Number.isInteger(value) ? { intValue: String(value) } : { doubleValue: value };
     default:
       return { boolValue: value };
   }
 }
 function serializeSpansToOtlp(spans, serviceName = "theokit") {
   const otlpSpans = spans.map((s) => ({
-    traceId: randomHex(32),
-    spanId: randomHex(16),
+    // #368 — read, never minted. This used to call `randomHex` for both, which
+    // gave every span a trace of its own and made a multi-span run unreadable at
+    // the collector. The ids now arrive on the span, decided when it started.
+    traceId: s.traceId,
+    spanId: s.spanId,
+    ...s.parentSpanId === void 0 ? {} : { parentSpanId: s.parentSpanId },
     name: s.name,
     kind: 2,
     // SPAN_KIND_SERVER
@@ -190,24 +205,36 @@ function serializeSpansToOtlp(spans, serviceName = "theokit") {
   };
   return new TextEncoder().encode(JSON.stringify(request));
 }
-function randomHex(length) {
-  const bytes = new Uint8Array(length / 2);
-  globalThis.crypto.getRandomValues(bytes);
-  return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
-}
 
 // src/server/observability/adapters/theo-cloud.ts
 var TheoCloudObservabilityAdapter = class {
   name = "theo-cloud";
   pendingSpans = [];
   isShutdown = false;
+  dropped = 0;
+  flushTimer;
   opts;
   constructor(options) {
-    this.opts = { flushIntervalMs: 5e3, ...options };
-  }
-  startSpan(name, attributes) {
+    this.opts = { flushIntervalMs: 5e3, maxPendingSpans: 1e4, ...options };
+    this.flushTimer = setInterval(() => {
+      void this.flush();
+    }, this.opts.flushIntervalMs);
+    this.flushTimer.unref();
+  }
+  /** How many spans were dropped because the buffer was full. */
+  droppedSpanCount() {
+    return this.dropped;
+  }
+  /**
+   * Whether the periodic flush is unref'd. A test seam: "the timer does not hold
+   * the process open" is otherwise only observable by hanging.
+   */
+  hasUnrefdFlushTimer() {
+    return !this.flushTimer.hasRef();
+  }
+  startSpan(name, attributes, context) {
     if (this.isShutdown) return new NoopSpan();
-    const span = new SpanImpl(name, attributes);
+    const span = new SpanImpl(name, attributes, context);
     return {
       setAttribute: (k, v) => {
         span.setAttribute(k, v);
@@ -217,6 +244,10 @@ var TheoCloudObservabilityAdapter = class {
       },
       end: () => {
         span.end();
+        if (this.pendingSpans.length >= this.opts.maxPendingSpans) {
+          this.pendingSpans.shift();
+          this.dropped++;
+        }
         this.pendingSpans.push(span.getData());
       }
     };
@@ -251,6 +282,7 @@ var TheoCloudObservabilityAdapter = class {
   }
   async shutdown() {
     if (this.isShutdown) return;
+    clearInterval(this.flushTimer);
     await this.flush();
     this.isShutdown = true;
   }
@@ -272,82 +304,104 @@ function resolveAdapter(options) {
   return new NoopObservabilityAdapter();
 }
 
+// src/server/observability/request-trace.ts
+var resolved = /* @__PURE__ */ new WeakMap();
+function requestTrace(request) {
+  const existing = resolved.get(request);
+  if (existing !== void 0) return existing;
+  const trace = resolve(request);
+  resolved.set(request, trace);
+  return trace;
+}
+function resolve(request) {
+  const inbound = extractW3CTraceContext(request);
+  if (inbound === void 0) return { traceId: newTraceId() };
+  if (inbound.parentSpanId === void 0) return { traceId: inbound.traceId };
+  return { traceId: inbound.traceId, parentSpanId: inbound.parentSpanId };
+}
+function recordOutermostSpan(request, spanId) {
+  const trace = requestTrace(request);
+  trace.outermostSpanId ??= spanId;
+}
+
 // src/server/observability/middleware.ts
-var activeSpans = /* @__PURE__ */ new Map();
-function createObservabilityPlugin(adapter) {
+var DEFAULT_MAX_ACTIVE_SPANS = 1024;
+function createObservabilityPlugin(adapter, options = {}) {
+  const maxActiveSpans = options.maxActiveSpans ?? DEFAULT_MAX_ACTIVE_SPANS;
+  const activeSpans = /* @__PURE__ */ new Map();
+  function evictUntilRoom() {
+    while (activeSpans.size >= maxActiveSpans) {
+      const oldest = activeSpans.keys().next();
+      if (oldest.done === true) return;
+      const span = activeSpans.get(oldest.value);
+      activeSpans.delete(oldest.value);
+      if (span === void 0) continue;
+      span.setAttribute("span.abandoned", true);
+      span.setStatus("error", "span abandoned: onResponse never fired for this request");
+      span.end();
+    }
+  }
+  function requestSpanContext(request) {
+    const trace = requestTrace(request);
+    const spanId = newSpanId();
+    recordOutermostSpan(request, spanId);
+    return trace.parentSpanId === void 0 ? { traceId: trace.traceId, spanId } : { traceId: trace.traceId, spanId, parentSpanId: trace.parentSpanId };
+  }
+  function claim(requestId) {
+    const span = activeSpans.get(requestId);
+    if (span === void 0) return void 0;
+    activeSpans.delete(requestId);
+    return span;
+  }
   return {
     name: "theokit:observability",
-    // NOT `async`: every hook here is synchronous work on an in-memory span map. Declaring them
-    // async would advertise awaiting that never happens (M56).
-    onRequest(ctx) {
-      const url = new URL(ctx.request.url, "http://localhost");
-      const span = adapter.startSpan("http.request", {
-        method: ctx.request.method,
-        path: url.pathname,
-        requestId: ctx.requestId
+    register(app) {
+      app.addHook("onRequest", (ctx) => {
+        evictUntilRoom();
+        const span = adapter.startSpan(
+          "http.request",
+          {
+            method: ctx.request.method,
+            // `ctx.request.url` is absolute, because that is what a Web `Request`
+            // carries (`plugin-types.ts` says so, at length, for this reason).
+            path: new URL(ctx.request.url).pathname,
+            requestId: ctx.requestId
+          },
+          requestSpanContext(ctx.request)
+        );
+        activeSpans.set(ctx.requestId, span);
       });
-      activeSpans.set(ctx.requestId, span);
-      return Promise.resolve();
-    },
-    onResponse(ctx) {
-      const span = activeSpans.get(ctx.requestId);
-      if (!span) return Promise.resolve();
-      activeSpans.delete(ctx.requestId);
-      if (ctx.response) {
-        span.setAttribute("status", ctx.response.statusCode);
-      }
-      span.setStatus("ok");
-      span.end();
-      adapter.counter("http.requests", 1, {
-        method: ctx.request.method,
-        status: ctx.response?.statusCode ?? 0
+      app.addHook("onResponse", (ctx) => {
+        const span = claim(ctx.requestId);
+        if (span === void 0) return;
+        const status = ctx.response.statusCode;
+        span.setAttribute("status", status);
+        span.setStatus("ok");
+        span.end();
+        adapter.counter("http.requests", 1, { method: ctx.request.method, status });
       });
-      return Promise.resolve();
-    },
-    onError(ctx) {
-      const span = activeSpans.get(ctx.requestId);
-      if (!span) return Promise.resolve();
-      activeSpans.delete(ctx.requestId);
-      const message = ctx.error instanceof Error ? ctx.error.message : "unknown error";
-      span.setAttribute("error", true);
-      span.setStatus("error", message);
-      span.end();
-      adapter.counter("http.errors", 1, {
-        method: ctx.request.method
+      app.addHook("onError", (ctx) => {
+        const span = claim(ctx.requestId);
+        if (span === void 0) return;
+        const message = ctx.error instanceof Error ? ctx.error.message : "unknown error";
+        span.setAttribute("error", true);
+        span.setStatus("error", message);
+        span.end();
+        adapter.counter("http.errors", 1, { method: ctx.request.method });
       });
-      return Promise.resolve();
     }
   };
 }
 
-// src/server/observability/define-adapter.ts
-function defineObservabilityAdapter(config) {
-  return {
-    name: config.name,
-    startSpan: (name, attrs) => config.startSpan(name, attrs),
-    counter: (name, value, attrs) => {
-      config.counter(name, value, attrs);
-    },
-    histogram: (name, value, attrs) => {
-      config.histogram(name, value, attrs);
-    },
-    log: (level, message, attrs) => {
-      config.log(level, message, attrs);
-    },
-    flush: () => config.flush(),
-    shutdown: () => config.shutdown()
-  };
-}
-
 export {
+  requestTrace,
   SpanImpl,
   NoopSpan,
-  NoopObservabilityAdapter,
   ConsoleObservabilityAdapter,
+  NoopObservabilityAdapter,
   serializeSpansToOtlp,
   TheoCloudObservabilityAdapter,
   resolveAdapter,
-  createObservabilityPlugin,
-  defineObservabilityAdapter
+  createObservabilityPlugin
 };
-//# sourceMappingURL=chunk-O3JIAU3V.js.map
+//# sourceMappingURL=chunk-MCTC6HSE.js.map

package/dist/chunk-MCTC6HSE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/observability/span.ts","../src/server/observability/adapters/console.ts","../src/server/observability/adapters/noop.ts","../src/server/observability/otlp-serializer.ts","../src/server/observability/adapters/theo-cloud.ts","../src/server/observability/adapter-registry.ts","../src/server/observability/request-trace.ts","../src/server/observability/middleware.ts"],"mappings":";;;;;;;;;AAgCO,IAAM,WAAN,MAAqC;AAAA,EACzB;AAAA,EACT,QAAQ;AAAA,EAEhB,YAAY,MAAc,YAA6B,SAA4B;AACjF,SAAK,OAAO;AAAA,MACV;AAAA,MACA,SAAS,SAAS,WAAW,WAAW;AAAA,MACxC,QAAQ,SAAS,UAAU,UAAU;AAAA,MACrC,YAAY,CAAC;AAAA,MACb,QAAQ;AAAA,MACR,aAAa,KAAK,IAAI;AAAA,IACxB;AACA,QAAI,SAAS,iBAAiB,OAAW,MAAK,KAAK,eAAe,QAAQ;AAC1E,QAAI,YAAY;AACd,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC/C,YAAI,MAAM,OAAW,MAAK,KAAK,WAAW,CAAC,IAAI;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAa,KAAa,OAAwC;AAChE,QAAI,CAAC,KAAK,MAAO,MAAK,KAAK,WAAW,GAAG,IAAI;AAAA,EAC/C;AAAA,EAEA,UAAU,QAAwB,SAAwB;AACxD,QAAI,CAAC,KAAK,OAAO;AACf,WAAK,KAAK,SAAS;AACnB,WAAK,KAAK,gBAAgB;AAAA,IAC5B;AAAA,EACF;AAAA,EAEA,MAAY;AACV,QAAI,KAAK,MAAO;AAChB,SAAK,QAAQ;AACb,SAAK,KAAK,YAAY,KAAK,IAAI;AAC/B,SAAK,KAAK,aAAa,KAAK,KAAK,YAAY,KAAK,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,UAAoB;AAClB,WAAO,EAAE,GAAG,KAAK,MAAM,YAAY,EAAE,GAAG,KAAK,KAAK,WAAW,EAAE;AAAA,EACjE;AAAA,EAEA,UAAmB;AACjB,WAAO,KAAK;AAAA,EACd;AACF;AAUO,IAAM,WAAN,MAAqC;AAAA;AAAA,EAE1C,eAAqB;AAAA,EAAC;AAAA;AAAA,EAEtB,YAAkB;AAAA,EAAC;AAAA;AAAA,EAEnB,MAAY;AAAA,EAAC;AACf;;;ACjFO,IAAM,8BAAN,MAAkE;AAAA,EAC9D,OAAO;AAAA,EACR;AAAA,EACA,aAAa;AAAA,EACb,QAAoB,CAAC;AAAA,EAE7B,YAAY,UAAiC,CAAC,GAAG;AAC/C,SAAK,QAAQ,QAAQ,UAAU,CAAC,SAAiB,QAAQ,OAAO,MAAM,OAAO,IAAI;AAAA,EACnF;AAAA,EAEA,UAAU,MAAc,YAA6B,SAAwC;AAC3F,QAAI,KAAK,WAAY,QAAO,IAAI,SAAS;AACzC,UAAM,OAAO,IAAI,SAAS,MAAM,YAAY,OAAO;AACnD,SAAK,MAAM,KAAK,IAAI;AACpB,WAAO;AAAA,MACL,cAAc,CAAC,GAAG,MAAM;AACtB,aAAK,aAAa,GAAG,CAAC;AAAA,MACxB;AAAA,MACA,WAAW,CAAC,GAAG,MAAM;AACnB,aAAK,UAAU,GAAG,CAAC;AAAA,MACrB;AAAA,MACA,KAAK,MAAM;AACT,aAAK,IAAI;AACT,aAAK,SAAS,KAAK,QAAQ,CAAC;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,QAAQ,MAAc,OAAe,YAAmC;AACtE,QAAI,KAAK,WAAY;AACrB,SAAK,KAAK;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR;AAAA,MACA,YAAY,cAAc,CAAC;AAAA,MAC3B,WAAW,KAAK,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,MAAc,OAAe,YAAmC;AACxE,QAAI,KAAK,WAAY;AACrB,SAAK,KAAK;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,MACR;AAAA,MACA,YAAY,cAAc,CAAC;AAAA,MAC3B,WAAW,KAAK,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,IACE,OACA,SACA,YACM;AACN,QAAI,KAAK,WAAY;AACrB,SAAK,KAAK,EAAE,MAAM,OAAO,OAAO,SAAS,YAAY,cAAc,CAAC,GAAG,WAAW,KAAK,IAAI,EAAE,CAAC;AAAA,EAChG;AAAA;AAAA,EAGA,QAAuB;AACrB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,WAA0B;AACxB,SAAK,aAAa;AAClB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEQ,SAAS,MAAsB;AACrC,SAAK,KAAK;AAAA,MACR,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,aAAa,KAAK,cAAc;AAAA,MAChC,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEQ,KAAK,QAAuC;AAClD,SAAK,MAAM,KAAK,UAAU,MAAM,CAAC;AAAA,EACnC;AACF;;;ACvFO,IAAM,2BAAN,MAA+D;AAAA,EAC3D,OAAO;AAAA,EACR,aAAa;AAAA,EAErB,UAAU,OAAe,aAA0C;AACjE,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ,OAAe,QAAgB,aAAoC;AAAA,EAAC;AAAA,EAC5E,UAAU,OAAe,QAAgB,aAAoC;AAAA,EAAC;AAAA,EAC9E,IACE,QACA,UACA,aACM;AAAA,EAAC;AAAA;AAAA;AAAA,EAIT,QAAuB;AACrB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA,EAEA,WAA0B;AACxB,SAAK,aAAa;AAClB,WAAO,QAAQ,QAAQ;AAAA,EACzB;AACF;;;ACaA,SAAS,cAAc,OAAsD;AAC3E,UAAQ,OAAO,OAAO;AAAA,IACpB,KAAK;AACH,aAAO,EAAE,aAAa,MAAM;AAAA,IAC9B,KAAK;AAUH,aAAO,OAAO,UAAU,KAAK,IAAI,EAAE,UAAU,OAAO,KAAK,EAAE,IAAI,EAAE,aAAa,MAAM;AAAA,IACtF;AACE,aAAO,EAAE,WAAW,MAAM;AAAA,EAC9B;AACF;AAGO,SAAS,qBAAqB,OAAmB,cAAc,WAAuB;AAC3F,QAAM,YAAwB,MAAM,IAAI,CAAC,OAAO;AAAA;AAAA;AAAA;AAAA,IAI9C,SAAS,EAAE;AAAA,IACX,QAAQ,EAAE;AAAA,IACV,GAAI,EAAE,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa;AAAA,IACvE,MAAM,EAAE;AAAA,IACR,MAAM;AAAA;AAAA,IACN,mBAAmB,OAAO,EAAE,cAAc,GAAS;AAAA,IACnD,iBAAiB,QAAQ,EAAE,aAAa,EAAE,eAAe,GAAS;AAAA,IAClE,YAAY,OAAO,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;AAAA,MAC9D;AAAA,MACA,OAAO,cAAc,KAAK;AAAA,IAC5B,EAAE;AAAA,IACF,QAAQ,EAAE,MAAM,EAAE,WAAW,OAAO,IAAI,GAAG,SAAS,EAAE,cAAc;AAAA,EACtE,EAAE;AAEF,QAAM,UAAqC;AAAA,IACzC,eAAe;AAAA,MACb;AAAA,QACE,YAAY;AAAA,UACV;AAAA,YACE,OAAO,EAAE,MAAM,aAAa,SAAS,QAAQ;AAAA,YAC7C,OAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,OAAO,CAAC;AACzD;;;ACzEO,IAAM,gCAAN,MAAoE;AAAA,EAChE,OAAO;AAAA,EACR,eAA2B,CAAC;AAAA,EAC5B,aAAa;AAAA,EACb,UAAU;AAAA,EACD;AAAA,EACA;AAAA,EAKjB,YAAY,SAAkC;AAC5C,SAAK,OAAO,EAAE,iBAAiB,KAAM,iBAAiB,KAAQ,GAAG,QAAQ;AAUzE,SAAK,aAAa,YAAY,MAAM;AAClC,WAAK,KAAK,MAAM;AAAA,IAClB,GAAG,KAAK,KAAK,eAAe;AAC5B,SAAK,WAAW,MAAM;AAAA,EACxB;AAAA;AAAA,EAGA,mBAA2B;AACzB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAA+B;AAC7B,WAAO,CAAC,KAAK,WAAW,OAAO;AAAA,EACjC;AAAA,EAEA,UAAU,MAAc,YAA6B,SAAwC;AAC3F,QAAI,KAAK,WAAY,QAAO,IAAI,SAAS;AACzC,UAAM,OAAO,IAAI,SAAS,MAAM,YAAY,OAAO;AACnD,WAAO;AAAA,MACL,cAAc,CAAC,GAAG,MAAM;AACtB,aAAK,aAAa,GAAG,CAAC;AAAA,MACxB;AAAA,MACA,WAAW,CAAC,GAAG,MAAM;AACnB,aAAK,UAAU,GAAG,CAAC;AAAA,MACrB;AAAA,MACA,KAAK,MAAM;AACT,aAAK,IAAI;AACT,YAAI,KAAK,aAAa,UAAU,KAAK,KAAK,iBAAiB;AACzD,eAAK,aAAa,MAAM;AACxB,eAAK;AAAA,QACP;AACA,aAAK,aAAa,KAAK,KAAK,QAAQ,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,QAAQ,OAAe,QAAgB,aAAoC;AAAA,EAAC;AAAA,EAC5E,UAAU,OAAe,QAAgB,aAAoC;AAAA,EAAC;AAAA,EAC9E,IACE,QACA,UACA,aACM;AAAA,EAAC;AAAA;AAAA,EAGT,MAAM,QAAuB;AAC3B,QAAI,KAAK,cAAc,KAAK,aAAa,WAAW,EAAG;AAEvD,UAAM,QAAQ,KAAK,aAAa,OAAO,CAAC;AACxC,UAAM,OAAO,qBAAqB,KAAK;AACvC,UAAM,UAAU,KAAK,KAAK,cAAc,WAAW;AAEnD,QAAI;AACF,YAAM,QAAQ,KAAK,KAAK,WAAW;AAAA,QACjC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,UAAU,KAAK,KAAK,KAAK;AAAA,QAC1C;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AAEZ,cAAQ;AAAA,QACN,yCAAyC,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,MAC/F;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,WAA0B;AAC9B,QAAI,KAAK,WAAY;AAIrB,kBAAc,KAAK,UAAU;AAC7B,UAAM,KAAK,MAAM;AACjB,SAAK,aAAa;AAAA,EACpB;AACF;;;AClHO,SAAS,eAAe,SAAsD;AAEnF,MAAI,QAAQ,QAAQ,UAAU;AAC5B,WAAO,QAAQ,OAAO;AAAA,EACxB;AAGA,QAAM,YAAY,QAAQ,IAAI;AAC9B,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,aAAa,QAAQ;AACvB,WAAO,IAAI,8BAA8B,EAAE,WAAW,OAAO,OAAO,CAAC;AAAA,EACvE;AAGA,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,WAAO,IAAI,4BAA4B;AAAA,EACzC;AAGA,SAAO,IAAI,yBAAyB;AACtC;;;ACkBA,IAAM,WAAW,oBAAI,QAA+B;AAS7C,SAAS,aAAa,SAAgC;AAC3D,QAAM,WAAW,SAAS,IAAI,OAAO;AACrC,MAAI,aAAa,OAAW,QAAO;AAEnC,QAAM,QAAQ,QAAQ,OAAO;AAC7B,WAAS,IAAI,SAAS,KAAK;AAC3B,SAAO;AACT;AAGA,SAAS,QAAQ,SAAgC;AAC/C,QAAM,UAAU,uBAAuB,OAAO;AAC9C,MAAI,YAAY,OAAW,QAAO,EAAE,SAAS,WAAW,EAAE;AAC1D,MAAI,QAAQ,iBAAiB,OAAW,QAAO,EAAE,SAAS,QAAQ,QAAQ;AAC1E,SAAO,EAAE,SAAS,QAAQ,SAAS,cAAc,QAAQ,aAAa;AACxE;AASO,SAAS,oBAAoB,SAAkB,QAAsB;AAC1E,QAAM,QAAQ,aAAa,OAAO;AAClC,QAAM,oBAAoB;AAC5B;;;ACnDA,IAAM,2BAA2B;AAO1B,SAAS,0BACd,SACA,UAAsC,CAAC,GAC3B;AACZ,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,cAAc,oBAAI,IAAwB;AAGhD,WAAS,iBAAuB;AAC9B,WAAO,YAAY,QAAQ,gBAAgB;AACzC,YAAM,SAAS,YAAY,KAAK,EAAE,KAAK;AACvC,UAAI,OAAO,SAAS,KAAM;AAC1B,YAAM,OAAO,YAAY,IAAI,OAAO,KAAK;AACzC,kBAAY,OAAO,OAAO,KAAK;AAC/B,UAAI,SAAS,OAAW;AACxB,WAAK,aAAa,kBAAkB,IAAI;AACxC,WAAK,UAAU,SAAS,yDAAyD;AACjF,WAAK,IAAI;AAAA,IACX;AAAA,EACF;AAuBA,WAAS,mBAAmB,SAAoC;AAC9D,UAAM,QAAQ,aAAa,OAAO;AAIlC,UAAM,SAAS,UAAU;AACzB,wBAAoB,SAAS,MAAM;AACnC,WAAO,MAAM,iBAAiB,SAC1B,EAAE,SAAS,MAAM,SAAS,OAAO,IACjC,EAAE,SAAS,MAAM,SAAS,QAAQ,cAAc,MAAM,aAAa;AAAA,EACzE;AAGA,WAAS,MAAM,WAA2C;AACxD,UAAM,OAAO,YAAY,IAAI,SAAS;AACtC,QAAI,SAAS,OAAW,QAAO;AAC/B,gBAAY,OAAO,SAAS;AAC5B,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,SAAS,KAAoB;AAC3B,UAAI,QAAQ,aAAa,CAAC,QAAuB;AAC/C,uBAAe;AACf,cAAM,OAAO,QAAQ;AAAA,UACnB;AAAA,UACA;AAAA,YACE,QAAQ,IAAI,QAAQ;AAAA;AAAA;AAAA,YAGpB,MAAM,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE;AAAA,YAC/B,WAAW,IAAI;AAAA,UACjB;AAAA,UACA,mBAAmB,IAAI,OAAO;AAAA,QAChC;AACA,oBAAY,IAAI,IAAI,WAAW,IAAI;AAAA,MACrC,CAAC;AAED,UAAI,QAAQ,cAAc,CAAC,QAAuB;AAChD,cAAM,OAAO,MAAM,IAAI,SAAS;AAChC,YAAI,SAAS,OAAW;AAExB,cAAM,SAAS,IAAI,SAAS;AAC5B,aAAK,aAAa,UAAU,MAAM;AAClC,aAAK,UAAU,IAAI;AACnB,aAAK,IAAI;AAIT,gBAAQ,QAAQ,iBAAiB,GAAG,EAAE,QAAQ,IAAI,QAAQ,QAAQ,OAAO,CAAC;AAAA,MAC5E,CAAC;AAED,UAAI,QAAQ,WAAW,CAAC,QAA4B;AAClD,cAAM,OAAO,MAAM,IAAI,SAAS;AAChC,YAAI,SAAS,OAAW;AAExB,cAAM,UAAU,IAAI,iBAAiB,QAAQ,IAAI,MAAM,UAAU;AACjE,aAAK,aAAa,SAAS,IAAI;AAC/B,aAAK,UAAU,SAAS,OAAO;AAC/B,aAAK,IAAI;AAET,gBAAQ,QAAQ,eAAe,GAAG,EAAE,QAAQ,IAAI,QAAQ,OAAO,CAAC;AAAA,MAClE,CAAC;AAAA,IACH;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-PXFXSFJL.js → chunk-NZ5JU6D3.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import {
-  loadEnv
-} from "./chunk-HBU2GIMZ.js";
 import {
   getApprovalRegistry,
   resolveProvider
-} from "./chunk-6GGWS7J3.js";
+} from "./chunk-5YPXXSYY.js";
 import {
   scanAgents
-} from "./chunk-LNVMHQ2Z.js";
+} from "./chunk-EVZKNA2W.js";
+import {
+  loadEnv
+} from "./chunk-3QPVEJ7D.js";
 
 // src/server/agent/run-terminal-agent.ts
 import {
@@ -145,7 +145,7 @@ async function agentCommand(name, message, deps = {}) {
     );
   }
   const projectRoot = deps.projectRoot ?? process.cwd();
-  const agentsDir = deps.agentsDir ?? (await (await import("./load-config-VKD6LKWU.js")).loadConfig(projectRoot)).agentsDir;
+  const agentsDir = deps.agentsDir ?? (await (await import("./load-config-4ATXQUN3.js")).loadConfig(projectRoot)).agentsDir;
   const agents = scanAgents(projectRoot, agentsDir);
   const agent = agents.find((a) => a.name === name);
   if (!agent) {
@@ -178,8 +178,8 @@ async function agentCommand(name, message, deps = {}) {
 async function createAgentSsrLoader(projectRoot) {
   const { createServer } = await import("vite");
   const react = (await import("@vitejs/plugin-react")).default;
-  const { theoPluginAsync } = await import("./vite-plugin-VPJFD4HK.js");
-  const { loadConfig } = await import("./load-config-VKD6LKWU.js");
+  const { theoPluginAsync } = await import("./vite-plugin-VKCT2LF2.js");
+  const { loadConfig } = await import("./load-config-4ATXQUN3.js");
   const config = await loadConfig(projectRoot);
   const theoPlugins = await theoPluginAsync({
     root: projectRoot,
@@ -212,4 +212,4 @@ export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=chunk-PXFXSFJL.js.map
+//# sourceMappingURL=chunk-NZ5JU6D3.js.map