theokit 0.48.13 → 0.50.0

package/dist/index.d.ts

@@ -183,6 +183,10 @@ declare const theoConfigSchema: z.ZodObject<{
             tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
+    observability: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        provider: z.ZodOptional<z.ZodCustom<unknown, unknown>>;
+    }, z.core.$strip>>;
     devtools: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodObject<{
         position: z.ZodOptional<z.ZodEnum<{
             "top-left": "top-left";

package/dist/index.js

@@ -8,31 +8,42 @@ import {
   scanRoutes,
   theoConfigSchema,
   theoPlugin
-} from "./chunk-GXEX4CBH.js";
+} from "./chunk-JIKNR5LX.js";
+import "./chunk-VQPHPQ5L.js";
 import "./chunk-SSYDEKWF.js";
+import "./chunk-SL7YUHPV.js";
 import "./chunk-OIGJOYX6.js";
-import "./chunk-OJLL4YD6.js";
-import "./chunk-XR74JD4M.js";
-import "./chunk-XALU5LCU.js";
+import "./chunk-WOBSEO75.js";
+import "./chunk-4X6H2BXP.js";
+import "./chunk-OGLS76RN.js";
+import "./chunk-RWNYIU6A.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
-import "./chunk-KD5G3YXI.js";
+import "./chunk-MCTC6HSE.js";
+import "./chunk-72DMJBXI.js";
 import "./chunk-VSLTKX5L.js";
 import "./chunk-TNI4MARH.js";
-import "./chunk-7LVM22VG.js";
-import "./chunk-YGAXV5HR.js";
+import "./chunk-OQCRCXCP.js";
+import "./chunk-6J4JWHDJ.js";
 import "./chunk-DV34VG3N.js";
-import "./chunk-FB2HBNIC.js";
-import "./chunk-MTEWLGVY.js";
-import "./chunk-OLGPYOLO.js";
+import "./chunk-L4VFNFDL.js";
+import "./chunk-BX6EUYHU.js";
+import "./chunk-BPYMC7SU.js";
+import "./chunk-IRQGAC4L.js";
+import "./chunk-P6OS7652.js";
 import "./chunk-AVQU5CQF.js";
 import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
 import "./chunk-YOIVCCZT.js";
-import "./chunk-6E5WKMDS.js";
-import "./chunk-JA2ZAT5Q.js";
+import "./chunk-3PBAN2YE.js";
+import "./chunk-YSJOZEI6.js";
+import "./chunk-Z4PJMZLM.js";
+import "./chunk-UMNXCU3K.js";
 import "./chunk-52PDWL5S.js";
-import "./chunk-U267AOWS.js";
+import "./chunk-5K4TDLRG.js";
+import "./chunk-ZWN3AODA.js";
+import "./chunk-D4VP2QPR.js";
+import "./chunk-YN4W7LCX.js";
 import "./chunk-XTHN6JBX.js";
 
 // src/config/define-config.ts

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config/define-config.ts","../src/config/config-builder.ts","../src/config/validate-structure.ts","../src/core/errors.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,SAAS,aAAaA,SAAkD;AAC7E,SAAOA;AACT;;;ACiCA,SAAS,kBAAkB,MAA0C;AACnE,QAAM,QAAQ,CAAC,UACb,kBAAkB,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC;AACzC,SAAO;AAAA,IACL,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,QAAQ,CAAC,UAAU,MAAM,EAAE,QAAQ,MAAM,CAAC;AAAA,IAC1C,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,SAAS,CAAC,UAAU,MAAM,EAAE,SAAS,MAAM,CAAC;AAAA,IAC5C,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,KAAK,CAAC,UAAU,MAAM,EAAE,KAAK,MAAM,CAAC;AAAA,IACpC,KAAK,CAAC,YAAY,MAAM,OAAO;AAAA,IAC/B,OAAO,MAAM,aAAa,IAAI;AAAA,EAChC;AACF;AAKO,SAAS,SAAwB;AACtC,SAAO,kBAAkB,CAAC,CAAC;AAC7B;;;AC5DA,SAAS,kBAAkB;AAC3B,SAAS,YAAY;;;ACLd,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1B;AAAA,EACA;AAAA,EAEhB,YAAY,QAAkB,SAAiB;AAC7C,UAAM,aAAa,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI;AAE1D;AAAA,MACE;AAAA;AAAA,UACa,OAAO;AAAA;AAAA,KACjB,aAAa;AAAA,EAAc,UAAU;AAAA,IAAO;AAAA,IACjD;AAEA,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AACF;;;ADHA,IAAM,iBAAmC;AAAA,EACvC;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAIO,SAAS,yBAAyB,SAAiB,SAAS,OAAa;AAC9E,MAAI,CAAC,WAAW,OAAO,GAAG;AACxB,UAAM,IAAI,iBAAiB,CAAC,qCAAqC,OAAO,EAAE,GAAG,OAAO;AAAA,EACtF;AAEA,QAAM,SAAmB,CAAC;AAE1B,QAAM,eAAiC;AAAA,IACrC,EAAE,MAAM,QAAQ,cAAc,+BAA+B,MAAM,IAAI;AAAA,EACzE;AAEA,aAAW,QAAQ,cAAc;AAC/B,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,aAAW,QAAQ,gBAAgB;AACjC,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,GAAG;AACrB,UAAM,IAAI,iBAAiB,QAAQ,OAAO;AAAA,EAC5C;AACF;","names":["config"]}
+{"version":3,"sources":["../src/config/define-config.ts","../src/config/config-builder.ts","../src/config/validate-structure.ts","../src/core/errors.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,SAAS,aAAaA,SAAkD;AAC7E,SAAOA;AACT;;;ACiCA,SAAS,kBAAkB,MAA0C;AACnE,QAAM,QAAQ,CAAC,UACb,kBAAkB,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC;AACzC,SAAO;AAAA,IACL,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,QAAQ,CAAC,UAAU,MAAM,EAAE,QAAQ,MAAM,CAAC;AAAA,IAC1C,WAAW,CAAC,UAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AAAA,IAChD,SAAS,CAAC,UAAU,MAAM,EAAE,SAAS,MAAM,CAAC;AAAA,IAC5C,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,MAAM,CAAC,UAAU,MAAM,EAAE,MAAM,MAAM,CAAC;AAAA,IACtC,KAAK,CAAC,UAAU,MAAM,EAAE,KAAK,MAAM,CAAC;AAAA,IACpC,KAAK,CAAC,YAAY,MAAM,OAAO;AAAA,IAC/B,OAAO,MAAM,aAAa,IAAI;AAAA,EAChC;AACF;AAKO,SAAS,SAAwB;AACtC,SAAO,kBAAkB,CAAC,CAAC;AAC7B;;;AC5DA,SAAS,kBAAkB;AAC3B,SAAS,YAAY;;;ACLd,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1B;AAAA,EACA;AAAA,EAEhB,YAAY,QAAkB,SAAiB;AAC7C,UAAM,aAAa,OAAO,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,EAAE,KAAK,IAAI;AAE1D;AAAA,MACE;AAAA;AAAA,UACa,OAAO;AAAA;AAAA,KACjB,aAAa;AAAA,EAAc,UAAU;AAAA,IAAO;AAAA,IACjD;AAEA,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AACF;;;ADHA,IAAM,iBAAmC;AAAA,EACvC;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,cAAc;AAAA,EAChB;AACF;AAIO,SAAS,yBAAyB,SAAiB,SAAS,OAAa;AAC9E,MAAI,CAAC,WAAW,OAAO,GAAG;AACxB,UAAM,IAAI,iBAAiB,CAAC,qCAAqC,OAAO,EAAE,GAAG,OAAO;AAAA,EACtF;AAEA,QAAM,SAAmB,CAAC;AAE1B,QAAM,eAAiC;AAAA,IACrC,EAAE,MAAM,QAAQ,cAAc,+BAA+B,MAAM,IAAI;AAAA,EACzE;AAEA,aAAW,QAAQ,cAAc;AAC/B,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,aAAW,QAAQ,gBAAgB;AACjC,QAAI,CAAC,WAAW,KAAK,SAAS,KAAK,IAAI,CAAC,GAAG;AACzC,aAAO,KAAK,KAAK,YAAY;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,GAAG;AACrB,UAAM,IAAI,iBAAiB,QAAQ,OAAO;AAAA,EAC5C;AACF;","names":["config"]}

package/dist/{info-XW7HGUPH.js → info-Y55RWS42.js}

@@ -2,13 +2,15 @@
 import "tsx/esm";
 import {
   scanRoutes
-} from "./chunk-IEES3CHD.js";
+} from "./chunk-47MM2JUK.js";
 import {
   loadConfig
-} from "./chunk-S433N3CT.js";
-import "./chunk-HBU2GIMZ.js";
-import "./chunk-GVW5EKEU.js";
-import "./chunk-7VPQHEAJ.js";
+} from "./chunk-QTHVHNJJ.js";
+import "./chunk-3QPVEJ7D.js";
+import "./chunk-U5PWXS3J.js";
+import "./chunk-FH3SQR6P.js";
+import "./chunk-ZNZISJDZ.js";
+import "./chunk-VI7ZANB3.js";
 
 // src/cli/commands/info.ts
 import { existsSync, readFileSync } from "fs";
@@ -101,4 +103,4 @@ export {
   buildInfo,
   infoCommand
 };
-//# sourceMappingURL=info-XW7HGUPH.js.map
+//# sourceMappingURL=info-Y55RWS42.js.map

package/dist/{info-XW7HGUPH.js.map → info-Y55RWS42.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/commands/info.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nimport { loadConfig } from '../../config/load-config.js'\nimport { scanRoutes } from '../../router/scan.js'\n\ninterface RuntimeInfo {\n  name: 'node' | 'bun' | 'deno' | 'unknown'\n  version: string\n}\n\ninterface PackageJsonMinimal {\n  name?: string\n  version?: string\n}\n\ninterface ConfigSummary {\n  ok: boolean\n  summary: string\n}\n\ninterface BuildInfoDeps {\n  cwd: string\n  readPackageJson?: () => PackageJsonMinimal | null\n  detectRuntime?: () => RuntimeInfo\n  loadConfig?: () => Promise<ConfigSummary>\n  countRoutes?: () => number\n}\n\nfunction defaultDetectRuntime(): RuntimeInfo {\n  const g = globalThis as { Bun?: { version: string }; Deno?: { version: { deno: string } } }\n  if (g.Bun?.version) {\n    return { name: 'bun', version: g.Bun.version }\n  }\n  if (g.Deno?.version) {\n    return { name: 'deno', version: g.Deno.version.deno }\n  }\n  if (typeof process !== 'undefined' && process.versions.node) {\n    return { name: 'node', version: process.versions.node }\n  }\n  return { name: 'unknown', version: '?' }\n}\n\nfunction defaultReadPackageJson(cwd: string): PackageJsonMinimal | null {\n  const path = resolve(cwd, 'package.json')\n  if (!existsSync(path)) return null\n  try {\n    const raw = readFileSync(path, 'utf-8')\n    const parsed = JSON.parse(raw) as PackageJsonMinimal\n    return parsed\n  } catch {\n    return null\n  }\n}\n\nasync function defaultLoadConfig(cwd: string): Promise<ConfigSummary> {\n  try {\n    await loadConfig(cwd)\n    return { ok: true, summary: 'config OK' }\n  } catch (err) {\n    return { ok: false, summary: (err as Error).message }\n  }\n}\n\nfunction defaultCountRoutes(cwd: string): number {\n  const appDir = resolve(cwd, 'app')\n  if (!existsSync(appDir)) return 0\n  const tree = scanRoutes(appDir)\n  let count = 0\n  function walk(node: { page?: string; children: { page?: string; children: unknown[] }[] }): void {\n    if (node.page) count++\n    for (const child of node.children) walk(child as never)\n  }\n  walk(tree)\n  return count\n}\n\nexport async function buildInfo(deps: BuildInfoDeps): Promise<string> {\n  const cwd = deps.cwd\n  const readPkg = deps.readPackageJson ?? (() => defaultReadPackageJson(cwd))\n  const runtime = (deps.detectRuntime ?? defaultDetectRuntime)()\n  const loadCfg = deps.loadConfig ?? (() => defaultLoadConfig(cwd))\n  const countRts = deps.countRoutes ?? (() => defaultCountRoutes(cwd))\n\n  const pkg = readPkg()\n  const config = await loadCfg()\n\n  let routesCount = 0\n  let scanError: string | null = null\n  try {\n    routesCount = countRts()\n  } catch (err) {\n    scanError = (err as Error).message\n  }\n\n  const projectLine = pkg?.name ? `${pkg.name}@${pkg.version ?? '?'}` : '(missing)'\n\n  const configLine = config.ok ? 'OK' : `INVALID — ${config.summary}`\n\n  const routesLine = scanError ? `Scan failed: ${scanError}` : `Routes: ${routesCount}`\n\n  return [\n    `# Theo info`,\n    ``,\n    `## Project`,\n    `Project: ${projectLine}`,\n    ``,\n    `## Runtime`,\n    `${runtime.name} ${runtime.version}`,\n    ``,\n    `## Config`,\n    `Config: ${configLine}`,\n    ``,\n    `## App`,\n    routesLine,\n    ``,\n  ].join('\\n')\n}\n\nexport async function infoCommand(): Promise<void> {\n  const cwd = process.cwd()\n  const output = await buildInfo({ cwd })\n  console.log(output)\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,eAAe;AA4BxB,SAAS,uBAAoC;AAC3C,QAAM,IAAI;AACV,MAAI,EAAE,KAAK,SAAS;AAClB,WAAO,EAAE,MAAM,OAAO,SAAS,EAAE,IAAI,QAAQ;AAAA,EAC/C;AACA,MAAI,EAAE,MAAM,SAAS;AACnB,WAAO,EAAE,MAAM,QAAQ,SAAS,EAAE,KAAK,QAAQ,KAAK;AAAA,EACtD;AACA,MAAI,OAAO,YAAY,eAAe,QAAQ,SAAS,MAAM;AAC3D,WAAO,EAAE,MAAM,QAAQ,SAAS,QAAQ,SAAS,KAAK;AAAA,EACxD;AACA,SAAO,EAAE,MAAM,WAAW,SAAS,IAAI;AACzC;AAEA,SAAS,uBAAuB,KAAwC;AACtE,QAAM,OAAO,QAAQ,KAAK,cAAc;AACxC,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI;AACF,UAAM,MAAM,aAAa,MAAM,OAAO;AACtC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,KAAqC;AACpE,MAAI;AACF,UAAM,WAAW,GAAG;AACpB,WAAO,EAAE,IAAI,MAAM,SAAS,YAAY;AAAA,EAC1C,SAAS,KAAK;AACZ,WAAO,EAAE,IAAI,OAAO,SAAU,IAAc,QAAQ;AAAA,EACtD;AACF;AAEA,SAAS,mBAAmB,KAAqB;AAC/C,QAAM,SAAS,QAAQ,KAAK,KAAK;AACjC,MAAI,CAAC,WAAW,MAAM,EAAG,QAAO;AAChC,QAAM,OAAO,WAAW,MAAM;AAC9B,MAAI,QAAQ;AACZ,WAAS,KAAK,MAAmF;AAC/F,QAAI,KAAK,KAAM;AACf,eAAW,SAAS,KAAK,SAAU,MAAK,KAAc;AAAA,EACxD;AACA,OAAK,IAAI;AACT,SAAO;AACT;AAEA,eAAsB,UAAU,MAAsC;AACpE,QAAM,MAAM,KAAK;AACjB,QAAM,UAAU,KAAK,oBAAoB,MAAM,uBAAuB,GAAG;AACzE,QAAM,WAAW,KAAK,iBAAiB,sBAAsB;AAC7D,QAAM,UAAU,KAAK,eAAe,MAAM,kBAAkB,GAAG;AAC/D,QAAM,WAAW,KAAK,gBAAgB,MAAM,mBAAmB,GAAG;AAElE,QAAM,MAAM,QAAQ;AACpB,QAAM,SAAS,MAAM,QAAQ;AAE7B,MAAI,cAAc;AAClB,MAAI,YAA2B;AAC/B,MAAI;AACF,kBAAc,SAAS;AAAA,EACzB,SAAS,KAAK;AACZ,gBAAa,IAAc;AAAA,EAC7B;AAEA,QAAM,cAAc,KAAK,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,WAAW,GAAG,KAAK;AAEtE,QAAM,aAAa,OAAO,KAAK,OAAO,kBAAa,OAAO,OAAO;AAEjE,QAAM,aAAa,YAAY,gBAAgB,SAAS,KAAK,WAAW,WAAW;AAEnF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,WAAW;AAAA,IACvB;AAAA,IACA;AAAA,IACA,GAAG,QAAQ,IAAI,IAAI,QAAQ,OAAO;AAAA,IAClC;AAAA,IACA;AAAA,IACA,WAAW,UAAU;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,cAA6B;AACjD,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,SAAS,MAAM,UAAU,EAAE,IAAI,CAAC;AACtC,UAAQ,IAAI,MAAM;AACpB;","names":[]}
+{"version":3,"sources":["../src/cli/commands/info.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nimport { loadConfig } from '../../config/load-config.js'\nimport { scanRoutes } from '../../router/scan.js'\n\ninterface RuntimeInfo {\n  name: 'node' | 'bun' | 'deno' | 'unknown'\n  version: string\n}\n\ninterface PackageJsonMinimal {\n  name?: string\n  version?: string\n}\n\ninterface ConfigSummary {\n  ok: boolean\n  summary: string\n}\n\ninterface BuildInfoDeps {\n  cwd: string\n  readPackageJson?: () => PackageJsonMinimal | null\n  detectRuntime?: () => RuntimeInfo\n  loadConfig?: () => Promise<ConfigSummary>\n  countRoutes?: () => number\n}\n\nfunction defaultDetectRuntime(): RuntimeInfo {\n  const g = globalThis as { Bun?: { version: string }; Deno?: { version: { deno: string } } }\n  if (g.Bun?.version) {\n    return { name: 'bun', version: g.Bun.version }\n  }\n  if (g.Deno?.version) {\n    return { name: 'deno', version: g.Deno.version.deno }\n  }\n  if (typeof process !== 'undefined' && process.versions.node) {\n    return { name: 'node', version: process.versions.node }\n  }\n  return { name: 'unknown', version: '?' }\n}\n\nfunction defaultReadPackageJson(cwd: string): PackageJsonMinimal | null {\n  const path = resolve(cwd, 'package.json')\n  if (!existsSync(path)) return null\n  try {\n    const raw = readFileSync(path, 'utf-8')\n    const parsed = JSON.parse(raw) as PackageJsonMinimal\n    return parsed\n  } catch {\n    return null\n  }\n}\n\nasync function defaultLoadConfig(cwd: string): Promise<ConfigSummary> {\n  try {\n    await loadConfig(cwd)\n    return { ok: true, summary: 'config OK' }\n  } catch (err) {\n    return { ok: false, summary: (err as Error).message }\n  }\n}\n\nfunction defaultCountRoutes(cwd: string): number {\n  const appDir = resolve(cwd, 'app')\n  if (!existsSync(appDir)) return 0\n  const tree = scanRoutes(appDir)\n  let count = 0\n  function walk(node: { page?: string; children: { page?: string; children: unknown[] }[] }): void {\n    if (node.page) count++\n    for (const child of node.children) walk(child as never)\n  }\n  walk(tree)\n  return count\n}\n\nexport async function buildInfo(deps: BuildInfoDeps): Promise<string> {\n  const cwd = deps.cwd\n  const readPkg = deps.readPackageJson ?? (() => defaultReadPackageJson(cwd))\n  const runtime = (deps.detectRuntime ?? defaultDetectRuntime)()\n  const loadCfg = deps.loadConfig ?? (() => defaultLoadConfig(cwd))\n  const countRts = deps.countRoutes ?? (() => defaultCountRoutes(cwd))\n\n  const pkg = readPkg()\n  const config = await loadCfg()\n\n  let routesCount = 0\n  let scanError: string | null = null\n  try {\n    routesCount = countRts()\n  } catch (err) {\n    scanError = (err as Error).message\n  }\n\n  const projectLine = pkg?.name ? `${pkg.name}@${pkg.version ?? '?'}` : '(missing)'\n\n  const configLine = config.ok ? 'OK' : `INVALID — ${config.summary}`\n\n  const routesLine = scanError ? `Scan failed: ${scanError}` : `Routes: ${routesCount}`\n\n  return [\n    `# Theo info`,\n    ``,\n    `## Project`,\n    `Project: ${projectLine}`,\n    ``,\n    `## Runtime`,\n    `${runtime.name} ${runtime.version}`,\n    ``,\n    `## Config`,\n    `Config: ${configLine}`,\n    ``,\n    `## App`,\n    routesLine,\n    ``,\n  ].join('\\n')\n}\n\nexport async function infoCommand(): Promise<void> {\n  const cwd = process.cwd()\n  const output = await buildInfo({ cwd })\n  console.log(output)\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,eAAe;AA4BxB,SAAS,uBAAoC;AAC3C,QAAM,IAAI;AACV,MAAI,EAAE,KAAK,SAAS;AAClB,WAAO,EAAE,MAAM,OAAO,SAAS,EAAE,IAAI,QAAQ;AAAA,EAC/C;AACA,MAAI,EAAE,MAAM,SAAS;AACnB,WAAO,EAAE,MAAM,QAAQ,SAAS,EAAE,KAAK,QAAQ,KAAK;AAAA,EACtD;AACA,MAAI,OAAO,YAAY,eAAe,QAAQ,SAAS,MAAM;AAC3D,WAAO,EAAE,MAAM,QAAQ,SAAS,QAAQ,SAAS,KAAK;AAAA,EACxD;AACA,SAAO,EAAE,MAAM,WAAW,SAAS,IAAI;AACzC;AAEA,SAAS,uBAAuB,KAAwC;AACtE,QAAM,OAAO,QAAQ,KAAK,cAAc;AACxC,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI;AACF,UAAM,MAAM,aAAa,MAAM,OAAO;AACtC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,KAAqC;AACpE,MAAI;AACF,UAAM,WAAW,GAAG;AACpB,WAAO,EAAE,IAAI,MAAM,SAAS,YAAY;AAAA,EAC1C,SAAS,KAAK;AACZ,WAAO,EAAE,IAAI,OAAO,SAAU,IAAc,QAAQ;AAAA,EACtD;AACF;AAEA,SAAS,mBAAmB,KAAqB;AAC/C,QAAM,SAAS,QAAQ,KAAK,KAAK;AACjC,MAAI,CAAC,WAAW,MAAM,EAAG,QAAO;AAChC,QAAM,OAAO,WAAW,MAAM;AAC9B,MAAI,QAAQ;AACZ,WAAS,KAAK,MAAmF;AAC/F,QAAI,KAAK,KAAM;AACf,eAAW,SAAS,KAAK,SAAU,MAAK,KAAc;AAAA,EACxD;AACA,OAAK,IAAI;AACT,SAAO;AACT;AAEA,eAAsB,UAAU,MAAsC;AACpE,QAAM,MAAM,KAAK;AACjB,QAAM,UAAU,KAAK,oBAAoB,MAAM,uBAAuB,GAAG;AACzE,QAAM,WAAW,KAAK,iBAAiB,sBAAsB;AAC7D,QAAM,UAAU,KAAK,eAAe,MAAM,kBAAkB,GAAG;AAC/D,QAAM,WAAW,KAAK,gBAAgB,MAAM,mBAAmB,GAAG;AAElE,QAAM,MAAM,QAAQ;AACpB,QAAM,SAAS,MAAM,QAAQ;AAE7B,MAAI,cAAc;AAClB,MAAI,YAA2B;AAC/B,MAAI;AACF,kBAAc,SAAS;AAAA,EACzB,SAAS,KAAK;AACZ,gBAAa,IAAc;AAAA,EAC7B;AAEA,QAAM,cAAc,KAAK,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,WAAW,GAAG,KAAK;AAEtE,QAAM,aAAa,OAAO,KAAK,OAAO,kBAAa,OAAO,OAAO;AAEjE,QAAM,aAAa,YAAY,gBAAgB,SAAS,KAAK,WAAW,WAAW;AAEnF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,WAAW;AAAA,IACvB;AAAA,IACA;AAAA,IACA,GAAG,QAAQ,IAAI,IAAI,QAAQ,OAAO;AAAA,IAClC;AAAA,IACA;AAAA,IACA,WAAW,UAAU;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,cAA6B;AACjD,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,SAAS,MAAM,UAAU,EAAE,IAAI,CAAC;AACtC,UAAQ,IAAI,MAAM;AACpB;","names":[]}

package/dist/{internal-api-V5L65YSJ.js → internal-api-IP35YU3G.js}

@@ -4,7 +4,6 @@ import {
   BATCH_PATH,
   CSP_REPORT_PATH,
   CsrfReadinessStore,
-  TRACE_HEADER,
   applySecurityHeaders,
   createCorsHandler,
   createPluginRunnerFromConfig,
@@ -12,39 +11,50 @@ import {
   createViteLoader,
   executeAction,
   executeRoute,
-  extractTraceId,
   findSuggestion,
-  generateNonce,
   handleBatchRequest,
   handleCspReport,
   handleCsrfReadiness,
   mountAgent
-} from "./chunk-BIVCP6X5.js";
+} from "./chunk-C62IZEJI.js";
 import {
   resolveProvider
-} from "./chunk-6GGWS7J3.js";
+} from "./chunk-5YPXXSYY.js";
 import {
   dispatchControllerRequest,
   incomingMessageToHandlerRequest,
-  logRequest,
   sendError
-} from "./chunk-T5C46IIU.js";
+} from "./chunk-HWBRS4DZ.js";
+import {
+  generateNonce
+} from "./chunk-RPET332G.js";
+import {
+  TRACE_HEADER,
+  extractTraceId
+} from "./chunk-7PM6K5EV.js";
+import {
+  logRequest
+} from "./chunk-2AMLGJJA.js";
 import {
   generateManifest
-} from "./chunk-ZB7D62OA.js";
+} from "./chunk-KUZVRJ7M.js";
 import {
   scanAgents
-} from "./chunk-LNVMHQ2Z.js";
+} from "./chunk-EVZKNA2W.js";
 import {
+  ACTION_SCHEMAS_DIR,
   matchRoute,
   scanServerActions,
   scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-BMHS4WAN.js";
-import "./chunk-A7JBF5FO.js";
+} from "./chunk-XS7EX55U.js";
+import "./chunk-FD4ZDTQ6.js";
+import "./chunk-U5PWXS3J.js";
+import "./chunk-VI7ZANB3.js";
 import "./chunk-VQIUTCK2.js";
 export {
+  ACTION_SCHEMAS_DIR,
   BATCH_PATH,
   CSP_REPORT_PATH,
   CsrfReadinessStore,
@@ -76,4 +86,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-V5L65YSJ.js.map
+//# sourceMappingURL=internal-api-IP35YU3G.js.map

package/dist/{internal-api-WEOSTMSN.js → internal-api-OPU456AT.js}

@@ -1,25 +1,28 @@
 import {
-  dispatchControllerRequest,
+  dispatchControllerRequest
+} from "./chunk-SL7YUHPV.js";
+import {
   mountAgent
-} from "./chunk-OJLL4YD6.js";
+} from "./chunk-WOBSEO75.js";
 import {
   BATCH_PATH,
-  TRACE_HEADER,
   createCorsHandler,
   executeAction,
   executeRoute,
-  extractTraceId,
   handleBatchRequest,
   incomingMessageToHandlerRequest,
   sendError
-} from "./chunk-XALU5LCU.js";
+} from "./chunk-RWNYIU6A.js";
 import "./chunk-47FFT43U.js";
 import {
   findSuggestion
 } from "./chunk-NTDN54XO.js";
+import "./chunk-MCTC6HSE.js";
 import {
+  TRACE_HEADER,
+  extractTraceId,
   logRequest
-} from "./chunk-KD5G3YXI.js";
+} from "./chunk-72DMJBXI.js";
 import {
   createPluginRunnerFromConfig
 } from "./chunk-VSLTKX5L.js";
@@ -28,38 +31,49 @@ import {
 } from "./chunk-TNI4MARH.js";
 import {
   createViteLoader
-} from "./chunk-7LVM22VG.js";
+} from "./chunk-OQCRCXCP.js";
 import {
+  ACTION_SCHEMAS_DIR,
   generateManifest,
   matchRoute,
-  scanAgents,
   scanServerActions,
   scanServerActionsEnriched,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-YGAXV5HR.js";
+} from "./chunk-6J4JWHDJ.js";
 import "./chunk-DV34VG3N.js";
-import "./chunk-FB2HBNIC.js";
+import {
+  scanAgents
+} from "./chunk-L4VFNFDL.js";
+import "./chunk-BX6EUYHU.js";
 import {
   CSP_REPORT_PATH,
   CsrfReadinessStore,
   applySecurityHeaders,
   handleCspReport,
   handleCsrfReadiness
-} from "./chunk-MTEWLGVY.js";
-import "./chunk-OLGPYOLO.js";
+} from "./chunk-BPYMC7SU.js";
+import "./chunk-IRQGAC4L.js";
+import "./chunk-P6OS7652.js";
 import "./chunk-AVQU5CQF.js";
 import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
 import {
   resolveProvider
-} from "./chunk-6E5WKMDS.js";
+} from "./chunk-3PBAN2YE.js";
+import "./chunk-YSJOZEI6.js";
 import {
   generateNonce
-} from "./chunk-JA2ZAT5Q.js";
-import "./chunk-U267AOWS.js";
+} from "./chunk-Z4PJMZLM.js";
+import "./chunk-UMNXCU3K.js";
+import "./chunk-52PDWL5S.js";
+import "./chunk-5K4TDLRG.js";
+import "./chunk-ZWN3AODA.js";
+import "./chunk-D4VP2QPR.js";
+import "./chunk-YN4W7LCX.js";
 import "./chunk-XTHN6JBX.js";
 export {
+  ACTION_SCHEMAS_DIR,
   BATCH_PATH,
   CSP_REPORT_PATH,
   CsrfReadinessStore,
@@ -91,4 +105,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-WEOSTMSN.js.map
+//# sourceMappingURL=internal-api-OPU456AT.js.map

package/dist/internal-api-OPU456AT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"mappings":"","names":[]}

package/dist/load-config-4ATXQUN3.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import {
+  deepMerge,
+  loadConfig
+} from "./chunk-QTHVHNJJ.js";
+import "./chunk-3QPVEJ7D.js";
+import "./chunk-U5PWXS3J.js";
+import "./chunk-FH3SQR6P.js";
+import "./chunk-ZNZISJDZ.js";
+import "./chunk-VI7ZANB3.js";
+export {
+  deepMerge,
+  loadConfig
+};
+//# sourceMappingURL=load-config-4ATXQUN3.js.map

package/dist/match-DmGgxjIU.d.ts

@@ -0,0 +1,44 @@
+import { ViteDevServer } from 'vite';
+
+type LoadModule = (path: string) => Promise<Record<string, unknown>>;
+declare function createViteLoader(vite: ViteDevServer): LoadModule;
+/**
+ * The loader `theokit start` uses to read user-authored modules off disk.
+ *
+ * It delegates to {@link importUserModule} rather than calling `import()` itself
+ * (usetheokit/theokit#418). The raw call worked only because the CLI bin starts with
+ * `import "tsx/esm"`, registering a global ESM hook — so this function depended on a side effect it
+ * never performed, from a module it does not reference. Any caller that reached it another way (a
+ * test booting the real handler, an app embedding the framework) got
+ * `ERR_UNKNOWN_FILE_EXTENSION` for a `.ts` file, or `__filename is not defined in ES module scope`
+ * from tsx's CJS output.
+ *
+ * That was invisible above Node 22.18, where native type stripping loads the file regardless, which
+ * is how it survived on a project declaring `engines.node: ">=22.12.0"`.
+ *
+ * Production is unchanged in cost: `importUserModule` tries the native import FIRST, so with the
+ * hook registered it takes exactly the path this used to take, and the fallback only runs where the
+ * raw call would have thrown.
+ */
+declare function createProductionLoader(): LoadModule;
+
+interface ServerRouteNode {
+    filePath: string;
+    routePath: string;
+    paramNames: string[];
+    pattern: RegExp;
+    /** HTTP methods (uppercase) the route file exports. Optional for backward
+     * compatibility with manifests generated before G1. Empty array means the
+     * file has no HTTP exports (util-only); undefined means "not detected". */
+    methods?: string[];
+}
+declare function compilePattern(routePath: string): {
+    pattern: RegExp;
+    paramNames: string[];
+};
+declare function matchRoute(url: string, routes: ServerRouteNode[]): {
+    route: ServerRouteNode;
+    params: Record<string, string>;
+} | null;
+
+export { type LoadModule as L, type ServerRouteNode as S, createProductionLoader as a, createViteLoader as b, compilePattern as c, matchRoute as m };

package/dist/{mcp-ULUFJNSZ.js → mcp-5LLNAGKA.js}

@@ -2,17 +2,17 @@
 import "tsx/esm";
 import {
   createAgentSsrLoader
-} from "./chunk-PXFXSFJL.js";
+} from "./chunk-NZ5JU6D3.js";
 import {
   extractAppResources,
   handleMcpJsonRpc
 } from "./chunk-2CVV6CNN.js";
-import "./chunk-HBU2GIMZ.js";
-import "./chunk-6GGWS7J3.js";
+import "./chunk-5YPXXSYY.js";
 import {
   scanAgents
-} from "./chunk-LNVMHQ2Z.js";
-import "./chunk-A7JBF5FO.js";
+} from "./chunk-EVZKNA2W.js";
+import "./chunk-FD4ZDTQ6.js";
+import "./chunk-3QPVEJ7D.js";
 
 // src/cli/commands/mcp.ts
 import { createInterface } from "readline";
@@ -46,7 +46,7 @@ async function serveMcpStdio(mod, name, appResources, streams) {
 // src/cli/commands/mcp.ts
 async function mcpCommand(name, deps = {}) {
   const projectRoot = deps.projectRoot ?? process.cwd();
-  const agentsDir = deps.agentsDir ?? (await (await import("./load-config-VKD6LKWU.js")).loadConfig(projectRoot)).agentsDir;
+  const agentsDir = deps.agentsDir ?? (await (await import("./load-config-4ATXQUN3.js")).loadConfig(projectRoot)).agentsDir;
   const agent = scanAgents(projectRoot, agentsDir).find((a) => a.name === name);
   if (!agent) {
     const names = scanAgents(projectRoot, agentsDir).map((a) => a.name).join(", ");
@@ -75,4 +75,4 @@ async function mcpCommand(name, deps = {}) {
 export {
   mcpCommand
 };
-//# sourceMappingURL=mcp-ULUFJNSZ.js.map
+//# sourceMappingURL=mcp-5LLNAGKA.js.map

package/dist/netlify-C2IRCZKI.js

@@ -0,0 +1,245 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import {
+  deployedCorsFragment,
+  deployedCsrfFragment,
+  deployedRuntimeConfigFragment,
+  deployedTraceFragment,
+  describeDeployedSecurityHeaders,
+  renderSecurityHeadersConfigLiteral
+} from "./chunk-E43VJ3E5.js";
+import {
+  nodeAdapter
+} from "./chunk-KI4DOTN4.js";
+import {
+  buildSecurityHeaders
+} from "./chunk-RPET332G.js";
+import {
+  assertServicesUnsupported,
+  readManifest
+} from "./chunk-ZNZISJDZ.js";
+
+// src/adapters/netlify.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { resolve } from "path";
+var NetlifyConflictError = class extends Error {
+  constructor(path, currentTo) {
+    super(
+      `netlify.toml has a conflicting redirect: "${path}" \u2192 "${currentTo}". Remove it manually or edit it to point to "/.netlify/functions/theo" before running the Netlify adapter again.`
+    );
+    this.name = "NetlifyConflictError";
+  }
+};
+function renderNetlifyFunction(opts = {}) {
+  const runtimeConfig = deployedRuntimeConfigFragment(opts);
+  return [
+    `// Generated by Theo \u2014 Netlify Functions adapter`,
+    `import { resolve } from 'node:path'`,
+    `import { scanServerRoutes, matchRoute, executeRoute, createProductionLoader, extractTraceIdFromRequest, TRACE_HEADER, createCorsWebHandler } from 'theokit/server'`,
+    `import { createWebShim } from 'theokit/adapters/web-shim'`,
+    `import { buildSecurityHeaders, withSecurityHeaders } from 'theokit/adapters/security-headers'`,
+    ``,
+    `const cwd = process.cwd()`,
+    `const serverDir = resolve(cwd, 'server')`,
+    `let routesCache = null`,
+    `let loaderCache = null`,
+    ``,
+    `// #410 \u2014 the security baseline \`theokit start\` puts on every response,`,
+    `// carried here as a literal because the deployed function has no`,
+    `// theo.config.ts to read. The netlify.toml redirect routes only /api/* here,`,
+    `// so this covers the API and not the document Netlify's static host serves`,
+    `// (usetheokit/theokit#412).`,
+    `const SECURITY_HEADERS_CONFIG = ${renderSecurityHeadersConfigLiteral(opts.securityHeaders)}`,
+    `const SECURITY_HEADERS = buildSecurityHeaders(SECURITY_HEADERS_CONFIG, { production: true })`,
+    ``,
+    ...runtimeConfig.imports,
+    ...runtimeConfig.declarations,
+    ...deployedCsrfFragment(opts),
+    ``,
+    ...deployedCorsFragment(opts.cors, "netlify"),
+    ``,
+    `export default async (request, context) => {`,
+    `  // #409 \u2014 the preflight is answered BEFORE anything routes: an OPTIONS the router`,
+    `  // handles is an OPTIONS the browser never gets a CORS answer to.`,
+    `  const preflight = corsPreflight(request)`,
+    `  if (preflight !== null) return withSecurityHeaders(preflight, SECURITY_HEADERS)`,
+    `  return withCors(request, withSecurityHeaders(await handleRequest(request), SECURITY_HEADERS))`,
+    `}`,
+    ``,
+    `async function handleRequest(request) {`,
+    `  const url = new URL(request.url)`,
+    `  if (!url.pathname.startsWith('/api/')) {`,
+    `    return new Response('Not Found', { status: 404 })`,
+    `  }`,
+    ``,
+    `  if (!routesCache) routesCache = scanServerRoutes(serverDir)`,
+    `  if (!loaderCache) loaderCache = createProductionLoader()`,
+    ``,
+    `  const match = matchRoute(url.pathname, routesCache)`,
+    `  if (!match) {`,
+    `    return new Response(JSON.stringify({ error: { code: 'NOT_FOUND' } }), {`,
+    `      status: 404,`,
+    `      headers: { 'content-type': 'application/json' },`,
+    `    })`,
+    `  }`,
+    ``,
+    `  const { req, res, toResponse } = createWebShim(request)`,
+    ...deployedTraceFragment("request", "  "),
+    `  const method = request.method.toUpperCase()`,
+    `  // #382 \u2014 the run is not awaited: toResponse() settles at the headers and`,
+    `  // carries a live body, so Netlify streams while the handler writes.`,
+    `  return toResponse(executeRoute({ route: match.route, method, params: match.params, req, res, loadModule: loaderCache, serverDir, requestId, ...CSRF_CONFIG, ${runtimeConfig.executeRouteSpread} }))`,
+    `}`
+  ].join("\n");
+}
+var THEO_REDIRECT_FROM = "/api/*";
+var THEO_REDIRECT_TO = "/.netlify/functions/theo";
+function parseRedirectBlocks(lines) {
+  const blocks = [];
+  let current = null;
+  for (let i = 0; i < lines.length; i++) {
+    const trimmed = lines[i].trim();
+    if (trimmed === "[[redirects]]") {
+      if (current) {
+        current.endLine = i - 1;
+        blocks.push(current);
+      }
+      current = { startLine: i, endLine: i };
+      continue;
+    }
+    if (current && /^\[(\[|[^[])/.test(trimmed)) {
+      current.endLine = i - 1;
+      blocks.push(current);
+      current = null;
+    }
+    if (current) {
+      const fromMatch = /^from\s*=\s*"([^"]+)"/.exec(trimmed);
+      if (fromMatch) current.from = fromMatch[1];
+      const toMatch = /^to\s*=\s*"([^"]+)"/.exec(trimmed);
+      if (toMatch) current.to = toMatch[1];
+      current.endLine = i;
+    }
+  }
+  if (current) blocks.push(current);
+  return blocks;
+}
+var THEO_REDIRECT_TARGET = [
+  "[[redirects]]",
+  '  from = "/api/*"',
+  '  to = "/.netlify/functions/theo"',
+  "  status = 200",
+  "  force = true"
+].join("\n");
+var THEO_HEADERS_MARKER = "# Generated by Theo \u2014 security baseline (usetheokit/theokit#412)";
+function renderHeadersBlock(securityHeaders) {
+  const values = buildSecurityHeaders(securityHeaders ?? {}, { production: true });
+  return [
+    THEO_HEADERS_MARKER,
+    "[[headers]]",
+    '  for = "/*"',
+    "  [headers.values]",
+    ...Object.entries(values).map(([k, v]) => `    ${k} = ${JSON.stringify(v)}`)
+  ].join("\n");
+}
+function withoutGeneratedHeaders(source) {
+  const lines = source.split(/\r?\n/);
+  const start = lines.indexOf(THEO_HEADERS_MARKER);
+  if (start < 0) return source;
+  const opensSection = (line) => (line ?? "").startsWith("[");
+  let end = start + 1;
+  while (end < lines.length && !opensSection(lines[end])) end += 1;
+  end += 1;
+  while (end < lines.length && !opensSection(lines[end])) end += 1;
+  return [...lines.slice(0, start), ...lines.slice(end)].join("\n").replace(/\n{3,}/gu, "\n\n");
+}
+function mergeNetlifyToml(existing, securityHeaders) {
+  const headersBlock = renderHeadersBlock(securityHeaders);
+  if (existing === null || existing.trim().length === 0) {
+    return `${THEO_REDIRECT_TARGET}
+
+${headersBlock}
+`;
+  }
+  existing = withoutGeneratedHeaders(existing);
+  const blocks = parseRedirectBlocks(existing.split(/\r?\n/));
+  for (const b of blocks) {
+    if (b.from !== THEO_REDIRECT_FROM) continue;
+    if (b.to === THEO_REDIRECT_TO) {
+      const sep2 = existing.endsWith("\n") ? "" : "\n";
+      return `${existing}${sep2}
+${headersBlock}
+`;
+    }
+    throw new NetlifyConflictError(b.from, b.to ?? "(unknown)");
+  }
+  const sep = existing.endsWith("\n") ? "" : "\n";
+  return `${existing}${sep}
+${THEO_REDIRECT_TARGET}
+
+${headersBlock}
+`;
+}
+async function buildNetlify(config, cwd, deps = {}, ctx) {
+  assertServicesUnsupported("netlify", readManifest(cwd));
+  const runNodeBuild = deps.runNodeBuild ?? nodeAdapter.build.bind(nodeAdapter);
+  await runNodeBuild(config, cwd, ctx);
+  const ensureDir = deps.ensureDir ?? ((p) => mkdirSync(p, { recursive: true }));
+  const writeFile = deps.writeFile ?? ((p, c) => {
+    writeFileSync(p, c);
+  });
+  const readTomlIfExists = deps.readTomlIfExists ?? (() => {
+    const p = resolve(cwd, "netlify.toml");
+    return existsSync(p) ? readFileSync(p, "utf-8") : null;
+  });
+  const fnDir = resolve(cwd, ".netlify/functions");
+  ensureDir(fnDir);
+  writeFile(
+    resolve(fnDir, "theo.mjs"),
+    renderNetlifyFunction({
+      securityHeaders: config.security?.headers,
+      csrf: config.security?.csrf,
+      disallowed: config.security?.disallowed,
+      cors: config.security?.cors,
+      // #425 — a selector, not a transformer, so it rides as a literal like the values above.
+      serialization: config.serialization
+    })
+  );
+  const existingToml = readTomlIfExists();
+  const merged = mergeNetlifyToml(existingToml, config.security?.headers);
+  writeFile(resolve(cwd, "netlify.toml"), merged);
+  console.log("\n  \u2713 Netlify output \u2192 .netlify/functions/theo.mjs + netlify.toml");
+  console.log(
+    `${describeDeployedSecurityHeaders({
+      target: "netlify",
+      securityHeaders: config.security?.headers,
+      mintsNonce: false,
+      documentHeaders: "platform-configured"
+    })}
+`
+  );
+}
+var netlifyAdapter = {
+  name: "netlify",
+  streamsResponses: true,
+  // #409 / #410 — the generated entry calls `executeRoute` with routes, loader
+  // and serverDir only. CSRF, route policy, file middleware and Zod validation
+  // still run because they live inside `executeRoute`; none of the remaining
+  // configurable concerns reach it. Declared explicitly rather than omitted so
+  // the gap is a statement in the source and not an absence.
+  //
+  // `securityHeaders` IS applied -- to every response this function returns.
+  // The document is served by Netlify's static host and does not pass through
+  // it (usetheokit/theokit#412).
+  appliesConfig: ["securityHeaders", "csrf", "disallowed", "cors", "serialization"],
+  build(config, cwd, ctx) {
+    return buildNetlify(config, cwd, {}, ctx);
+  }
+};
+export {
+  NetlifyConflictError,
+  buildNetlify,
+  mergeNetlifyToml,
+  netlifyAdapter,
+  renderNetlifyFunction
+};
+//# sourceMappingURL=netlify-C2IRCZKI.js.map