theokit 0.53.0 → 0.54.0

package/dist/{load-config-4ATXQUN3.js → load-config-BKUAMGO5.js}

@@ -3,14 +3,14 @@ import "tsx/esm";
 import {
   deepMerge,
   loadConfig
-} from "./chunk-QTHVHNJJ.js";
+} from "./chunk-HA35FS7U.js";
 import "./chunk-3QPVEJ7D.js";
 import "./chunk-U5PWXS3J.js";
-import "./chunk-FH3SQR6P.js";
+import "./chunk-4OTIXAUY.js";
 import "./chunk-ZNZISJDZ.js";
-import "./chunk-VI7ZANB3.js";
+import "./chunk-OSBGZYXZ.js";
 export {
   deepMerge,
   loadConfig
 };
-//# sourceMappingURL=load-config-4ATXQUN3.js.map
+//# sourceMappingURL=load-config-BKUAMGO5.js.map

package/dist/{match-DmGgxjIU.d.ts → match-Dw4CNXJH.d.ts}

@@ -31,6 +31,14 @@ interface ServerRouteNode {
      * compatibility with manifests generated before G1. Empty array means the
      * file has no HTTP exports (util-only); undefined means "not detected". */
     methods?: string[];
+    /**
+     * The subset of `methods` whose policy is the literal `'public'` (ADR 0001).
+     *
+     * `undefined` means "not detected" — a manifest built before the field existed — and is NOT the
+     * same as `[]`, which means "detected, and nothing is public". `public-exposure-gate.ts` depends
+     * on that distinction: reading absence as safety is the failure it exists to prevent.
+     */
+    publicMethods?: string[];
 }
 declare function compilePattern(routePath: string): {
     pattern: RegExp;

package/dist/{mcp-OZACRG7O.js → mcp-2RQCKWQR.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   createAgentSsrLoader
-} from "./chunk-Y5E7VFNJ.js";
+} from "./chunk-SIGUGCBS.js";
 import {
   extractAppResources,
   handleMcpJsonRpc
@@ -10,7 +10,7 @@ import {
 import "./chunk-5YPXXSYY.js";
 import {
   scanAgents
-} from "./chunk-6AM7HIRM.js";
+} from "./chunk-5NNFO7R7.js";
 import "./chunk-Z7CJHDLS.js";
 import "./chunk-3QPVEJ7D.js";
 
@@ -46,7 +46,7 @@ async function serveMcpStdio(mod, name, appResources, streams) {
 // src/cli/commands/mcp.ts
 async function mcpCommand(name, deps = {}) {
   const projectRoot = deps.projectRoot ?? process.cwd();
-  const agentsDir = deps.agentsDir ?? (await (await import("./load-config-4ATXQUN3.js")).loadConfig(projectRoot)).agentsDir;
+  const agentsDir = deps.agentsDir ?? (await (await import("./load-config-BKUAMGO5.js")).loadConfig(projectRoot)).agentsDir;
   const agent = scanAgents(projectRoot, agentsDir).find((a) => a.name === name);
   if (!agent) {
     const names = scanAgents(projectRoot, agentsDir).map((a) => a.name).join(", ");
@@ -75,4 +75,4 @@ async function mcpCommand(name, deps = {}) {
 export {
   mcpCommand
 };
-//# sourceMappingURL=mcp-OZACRG7O.js.map
+//# sourceMappingURL=mcp-2RQCKWQR.js.map

package/dist/{observability-bootstrap-M2WSDIDV.js → observability-bootstrap-H4NSILXD.js}

@@ -4,13 +4,13 @@ import {
   _resetObservabilityAdapter,
   createObservabilityPluginFromConfig,
   getObservabilityAdapter
-} from "./chunk-GSIOWE5B.js";
+} from "./chunk-5VLP3GQ2.js";
 import "./chunk-C27VRUVN.js";
 import "./chunk-7UZZHCRN.js";
-import "./chunk-VI7ZANB3.js";
+import "./chunk-OSBGZYXZ.js";
 export {
   _resetObservabilityAdapter,
   createObservabilityPluginFromConfig,
   getObservabilityAdapter
 };
-//# sourceMappingURL=observability-bootstrap-M2WSDIDV.js.map
+//# sourceMappingURL=observability-bootstrap-H4NSILXD.js.map

package/dist/{openapi-2IBBOS3Q.js → openapi-PKDDJ7M2.js}

@@ -6,18 +6,18 @@ import {
 } from "./chunk-47VNWTL4.js";
 import {
   generateManifest
-} from "./chunk-XLLW46MB.js";
-import "./chunk-6AM7HIRM.js";
-import "./chunk-YYOBMOO4.js";
+} from "./chunk-2HWWJTOH.js";
+import "./chunk-5NNFO7R7.js";
+import "./chunk-NO6HA4FG.js";
 import "./chunk-Z7CJHDLS.js";
 import {
   loadConfig
-} from "./chunk-QTHVHNJJ.js";
+} from "./chunk-HA35FS7U.js";
 import "./chunk-3QPVEJ7D.js";
 import "./chunk-U5PWXS3J.js";
-import "./chunk-FH3SQR6P.js";
+import "./chunk-4OTIXAUY.js";
 import "./chunk-ZNZISJDZ.js";
-import "./chunk-VI7ZANB3.js";
+import "./chunk-OSBGZYXZ.js";
 
 // src/cli/commands/openapi.ts
 import { mkdtempSync, rmSync } from "fs";
@@ -84,4 +84,4 @@ function emitOpenApiInMemory(manifest, config) {
 export {
   openapiCommand
 };
-//# sourceMappingURL=openapi-2IBBOS3Q.js.map
+//# sourceMappingURL=openapi-PKDDJ7M2.js.map

package/dist/{preview-DCJPTZVW.js → preview-J57QZNTO.js}

@@ -4,8 +4,8 @@ import "tsx/esm";
 // src/cli/commands/preview.ts
 async function defaultSteps() {
   const [{ buildCommand }, { startCommand }] = await Promise.all([
-    import("./build-IVLQ5TUQ.js"),
-    import("./start-WILEDDW2.js")
+    import("./build-JH53TZJI.js"),
+    import("./start-3F4LVHWS.js")
   ]);
   return {
     build: (opts) => buildCommand(opts),
@@ -20,4 +20,4 @@ async function previewCommand(options = {}, steps) {
 export {
   previewCommand
 };
-//# sourceMappingURL=preview-DCJPTZVW.js.map
+//# sourceMappingURL=preview-J57QZNTO.js.map

package/dist/{routes-PP5PHHLR.js → routes-A2YLFEYC.js}

@@ -7,16 +7,16 @@ import {
   scanServerActions,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-YYOBMOO4.js";
+} from "./chunk-NO6HA4FG.js";
 import "./chunk-Z7CJHDLS.js";
 import {
   loadConfig
-} from "./chunk-QTHVHNJJ.js";
+} from "./chunk-HA35FS7U.js";
 import "./chunk-3QPVEJ7D.js";
 import "./chunk-U5PWXS3J.js";
-import "./chunk-FH3SQR6P.js";
+import "./chunk-4OTIXAUY.js";
 import "./chunk-ZNZISJDZ.js";
-import "./chunk-VI7ZANB3.js";
+import "./chunk-OSBGZYXZ.js";
 
 // src/cli/commands/routes.ts
 import { resolve, relative } from "path";
@@ -64,4 +64,4 @@ async function routesCommand() {
 export {
   routesCommand
 };
-//# sourceMappingURL=routes-PP5PHHLR.js.map
+//# sourceMappingURL=routes-A2YLFEYC.js.map

package/dist/{schema-SOAD43RQ.js → schema-WKTNTGX6.js}

@@ -2,14 +2,14 @@
 import "tsx/esm";
 import {
   theoConfigSchema
-} from "./chunk-FH3SQR6P.js";
+} from "./chunk-4OTIXAUY.js";
 import "./chunk-ZNZISJDZ.js";
 import {
   cacheSchema,
   corsSchema,
   securityHeadersSchema,
   storageSchema
-} from "./chunk-VI7ZANB3.js";
+} from "./chunk-OSBGZYXZ.js";
 export {
   cacheSchema,
   corsSchema,
@@ -17,4 +17,4 @@ export {
   storageSchema,
   theoConfigSchema
 };
-//# sourceMappingURL=schema-SOAD43RQ.js.map
+//# sourceMappingURL=schema-WKTNTGX6.js.map

package/dist/{schemas-4AXHQMV3.js → schemas-QCMSKQDK.js}

@@ -10,7 +10,7 @@ import {
   securitySchema,
   storageSchema,
   uploadSchema
-} from "./chunk-VI7ZANB3.js";
+} from "./chunk-OSBGZYXZ.js";
 export {
   cacheSchema,
   corsSchema,
@@ -22,4 +22,4 @@ export {
   storageSchema,
   uploadSchema
 };
-//# sourceMappingURL=schemas-4AXHQMV3.js.map
+//# sourceMappingURL=schemas-QCMSKQDK.js.map

package/dist/server/http/index.d.ts

@@ -1,11 +1,11 @@
-export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as BatchPayload, d as BatchRequestItem, e as BatchResponse, f as BatchResultItem, C as CookieOptions, h as CorsConfig, i as CorsHandler, j as CorsOrigin, k as CorsWebHandler, l as CustomErrorPages, E as ExecuteActionOptions, m as ExecuteRouteContext, F as FileTooLargeError, H as HandleBatchOptions, M as MAX_ERROR_HTML_BYTES, n as MiddlewareResult, N as NotFoundError, p as ProcedureInputError, q as ProcedureOutputError, S as STRIPPED_HEADERS, u as SendErrorInput, v as SendErrorOptions, T as TRACE_HEADER, w as TRACE_PARENT_HEADER, x as TheoError, W as W3CTraceContext, _ as _resetMiddlewareCacheForTests, z as appendCookieToHeaders, A as appendDeleteCookieToHeaders, D as callProcedure, G as createCorsHandler, I as createCorsWebHandler, J as createOpenApiHandler, K as createServerContext, L as deleteCookie, Q as envelopeCodeToStatus, V as executeAction, X as executeRoute, Y as executeWebRequest, Z as extractTraceId, $ as extractTraceIdFromRequest, a0 as extractW3CTraceContext, a1 as fromUnknown, a2 as getCookie, a3 as getCookieFromRequest, a4 as handleBatchRequest, a5 as handleRequestError, a6 as handleWebRequestError, a7 as jsonTransformer, a8 as loadCustomErrorPages, a9 as matchesOrigin, aa as parseCookieHeader, ab as parseRequestBody, ac as parseTraceparent, ad as parseTraceparentContext, ae as resolveTransformer, af as runMiddlewareAndContext, ag as sendError, ah as sendJson, ai as serializeCookie, aj as serveStaticFile, ak as serverErrorToEnvelope, al as setCookie, am as superjsonTransformer, an as validateRouteInput } from '../../index-C8YN9dpF.js';
+export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as BatchPayload, d as BatchRequestItem, e as BatchResponse, f as BatchResultItem, C as CookieOptions, h as CorsConfig, i as CorsHandler, j as CorsOrigin, k as CorsWebHandler, l as CustomErrorPages, E as ExecuteActionOptions, m as ExecuteRouteContext, F as FileTooLargeError, H as HandleBatchOptions, M as MAX_ERROR_HTML_BYTES, n as MiddlewareResult, N as NotFoundError, p as ProcedureInputError, q as ProcedureOutputError, S as STRIPPED_HEADERS, u as SendErrorInput, v as SendErrorOptions, T as TRACE_HEADER, w as TRACE_PARENT_HEADER, x as TheoError, W as W3CTraceContext, _ as _resetMiddlewareCacheForTests, z as appendCookieToHeaders, A as appendDeleteCookieToHeaders, D as callProcedure, G as createCorsHandler, I as createCorsWebHandler, J as createOpenApiHandler, K as createServerContext, L as deleteCookie, Q as envelopeCodeToStatus, V as executeAction, X as executeRoute, Y as executeWebRequest, Z as extractTraceId, $ as extractTraceIdFromRequest, a0 as extractW3CTraceContext, a1 as fromUnknown, a2 as getCookie, a3 as getCookieFromRequest, a4 as handleBatchRequest, a5 as handleRequestError, a6 as handleWebRequestError, a7 as jsonTransformer, a8 as loadCustomErrorPages, a9 as matchesOrigin, aa as parseCookieHeader, ab as parseRequestBody, ac as parseTraceparent, ad as parseTraceparentContext, ae as resolveTransformer, af as runMiddlewareAndContext, ag as sendError, ah as sendJson, ai as serializeCookie, aj as serveStaticFile, ak as serverErrorToEnvelope, al as setCookie, am as superjsonTransformer, an as validateRouteInput } from '../../index-ADEV6pen.js';
 export { A as ActionError, b as ActionInputError, f as extractUniversalIssues, i as isActionError, d as isInputError } from '../../action-protocol-tGm3NKRg.js';
 import '../../error-envelope-DG47lt8E.js';
 import 'node:http';
 import '../../plugin-types-BUVfUQ0V.js';
 import '../../plugin-runner-BVMOSxvb.js';
 import '../../job-backend-CgC8Xf33.js';
-import '../../match-DmGgxjIU.js';
+import '../../match-Dw4CNXJH.js';
 import 'vite';
 import '../../csrf-Dgot9qSM.js';
 import '../../audit-log-BQWM5YLG.js';

package/dist/server/http/index.js

@@ -6,7 +6,7 @@ import {
   createOpenApiHandler,
   loadCustomErrorPages,
   serveStaticFile
-} from "../../chunk-YZCD3DWE.js";
+} from "../../chunk-AI7GBBRB.js";
 import {
   jsonTransformer,
   resolveTransformer,
@@ -31,7 +31,7 @@ import {
   sendError,
   sendJson,
   validateRouteInput
-} from "../../chunk-5BOKW3GX.js";
+} from "../../chunk-FVFYACYK.js";
 import {
   ActionError,
   ActionInputError,

package/dist/server/index.d.ts

@@ -4,10 +4,10 @@ export { W as WebSocketHandler, a as WebSocketHandlerWeb, b as WebSocketLike } f
 export { C as CustomTool, D as DefineAgentToolSpec, T as ToolContextMessage, a as ToolHandlerContext, b as ToolTransform, c as applyTransform } from '../define-agent-tool-CizaYZwU.js';
 export { A as AccessDecision, R as RoutePolicy, b as RoutePolicyInput, a as RouteSubject, e as evaluateRoutePolicy, r as requireOwner, s as subjectFromContext } from '../route-policy-BxOycCDq.js';
 export { H as HEALTH_PATH, a as HealthRouteConfig, b as READY_PATH, c as ReadyRouteConfig, d as ReservedResponse, R as ReservedRoutes, e as defineHealthRoute, f as defineReadyRoute, s as serveReservedRoute } from '../health-route-C0hk64_U.js';
-export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as BatchPayload, d as BatchRequestItem, e as BatchResponse, f as BatchResultItem, g as BodyParserOptions, C as CookieOptions, h as CorsConfig, i as CorsHandler, j as CorsOrigin, k as CorsWebHandler, l as CustomErrorPages, E as ExecuteActionOptions, m as ExecuteRouteContext, F as FileTooLargeError, H as HandleBatchOptions, M as MAX_ERROR_HTML_BYTES, n as MiddlewareResult, N as NotFoundError, O as OpenApiDocsOptions, P as ParsedBody, o as ProcedureInput, p as ProcedureInputError, q as ProcedureOutputError, R as RawRouteInput, r as RouteInputChannel, s as RouteInputSchemas, t as RouteInputValidation, S as STRIPPED_HEADERS, u as SendErrorInput, v as SendErrorOptions, T as TRACE_HEADER, w as TRACE_PARENT_HEADER, x as TheoError, y as TheoTransformer, U as UploadedFile, W as W3CTraceContext, _ as _resetMiddlewareCacheForTests, z as appendCookieToHeaders, A as appendDeleteCookieToHeaders, D as callProcedure, G as createCorsHandler, I as createCorsWebHandler, J as createOpenApiHandler, K as createServerContext, L as deleteCookie, Q as envelopeCodeToStatus, V as executeAction, X as executeRoute, Y as executeWebRequest, Z as extractTraceId, $ as extractTraceIdFromRequest, a0 as extractW3CTraceContext, a1 as fromUnknown, a2 as getCookie, a3 as getCookieFromRequest, a4 as handleBatchRequest, a5 as handleRequestError, a6 as handleWebRequestError, a7 as jsonTransformer, a8 as loadCustomErrorPages, a9 as matchesOrigin, aa as parseCookieHeader, ab as parseRequestBody, ac as parseTraceparent, ad as parseTraceparentContext, ae as resolveTransformer, af as runMiddlewareAndContext, ag as sendError, ah as sendJson, ai as serializeCookie, aj as serveStaticFile, ak as serverErrorToEnvelope, al as setCookie, am as superjsonTransformer, an as validateRouteInput } from '../index-C8YN9dpF.js';
+export { B as BATCH_PATH, a as BatchExecuteFn, b as BatchPathConflictError, c as BatchPayload, d as BatchRequestItem, e as BatchResponse, f as BatchResultItem, g as BodyParserOptions, C as CookieOptions, h as CorsConfig, i as CorsHandler, j as CorsOrigin, k as CorsWebHandler, l as CustomErrorPages, E as ExecuteActionOptions, m as ExecuteRouteContext, F as FileTooLargeError, H as HandleBatchOptions, M as MAX_ERROR_HTML_BYTES, n as MiddlewareResult, N as NotFoundError, O as OpenApiDocsOptions, P as ParsedBody, o as ProcedureInput, p as ProcedureInputError, q as ProcedureOutputError, R as RawRouteInput, r as RouteInputChannel, s as RouteInputSchemas, t as RouteInputValidation, S as STRIPPED_HEADERS, u as SendErrorInput, v as SendErrorOptions, T as TRACE_HEADER, w as TRACE_PARENT_HEADER, x as TheoError, y as TheoTransformer, U as UploadedFile, W as W3CTraceContext, _ as _resetMiddlewareCacheForTests, z as appendCookieToHeaders, A as appendDeleteCookieToHeaders, D as callProcedure, G as createCorsHandler, I as createCorsWebHandler, J as createOpenApiHandler, K as createServerContext, L as deleteCookie, Q as envelopeCodeToStatus, V as executeAction, X as executeRoute, Y as executeWebRequest, Z as extractTraceId, $ as extractTraceIdFromRequest, a0 as extractW3CTraceContext, a1 as fromUnknown, a2 as getCookie, a3 as getCookieFromRequest, a4 as handleBatchRequest, a5 as handleRequestError, a6 as handleWebRequestError, a7 as jsonTransformer, a8 as loadCustomErrorPages, a9 as matchesOrigin, aa as parseCookieHeader, ab as parseRequestBody, ac as parseTraceparent, ad as parseTraceparentContext, ae as resolveTransformer, af as runMiddlewareAndContext, ag as sendError, ah as sendJson, ai as serializeCookie, aj as serveStaticFile, ak as serverErrorToEnvelope, al as setCookie, am as superjsonTransformer, an as validateRouteInput } from '../index-ADEV6pen.js';
 export { A as ActionError, a as ActionErrorCode, b as ActionInputError, e as ActionManifestEntry, c as ActionResult, S as SerializedActionResult, U as UniversalZodIssue, f as extractUniversalIssues, i as isActionError, d as isInputError } from '../action-protocol-tGm3NKRg.js';
 export { ACTION_SCHEMAS_DIR, ActionNode, ActionScanError, LoadedManifest, ManifestAction, ManifestAgent, ManifestRoute, ManifestWebSocket, TheoManifest, WebSocketRouteNode, _resetRouteScanCacheForTests, compareRouteSpecificity, generateManifest, loadManifest, scanMiddlewares, scanServerActions, scanServerActionsEnriched, scanServerRoutes, scanWebSocketRoutes, writeManifest } from './scan/index.js';
-export { L as LoadModule, S as ServerRouteNode, c as compilePattern, a as createProductionLoader, b as createViteLoader, m as matchRoute } from '../match-DmGgxjIU.js';
+export { L as LoadModule, S as ServerRouteNode, c as compilePattern, a as createProductionLoader, b as createViteLoader, m as matchRoute } from '../match-Dw4CNXJH.js';
 export { AcpToolConfig, AppResource, AppResourceInput, ChannelMessage, ChannelWebhookConfig, CodeModeApi, CodeModeConfig, CodeModePermission, CodeModePermissionDeniedError, McpResourceContents, McpResourceDescriptor, NodeAcpTransport, Sandbox, StdioStreams, VendorAgentClient, VendorAgentToolConfig, WorkflowLike, WorkflowToolConfig, buildResourceDescriptors, createACPTool, createCodeMode, createVendorAgentTool, createWorkflowTool, defineAppResource, extractAppResources, handleChannelWebhook, handleMcpStdioLine, isChannelPath, parseChannelPath, readAppResource, serveMcpStdio } from './agent/index.js';
 export { InProcessApprovalRequest, InProcessApprovalRequiredError, InProcessAwaitApproval, StreamAgentTurnDeps, StreamAgentTurnInProcessInput, streamAgentTurnInProcess } from '@theokit/agents';
 export { P as ProviderDescriptor, R as ResolvedProvider, l as listProviders, a as registerProvider, b as resetProviderRegistry, r as resolveProvider, t as tryResolveProvider } from '../provider-resolver-Dx6QuWrw.js';

package/dist/server/index.js

@@ -25,7 +25,7 @@ import {
   createOpenApiHandler,
   loadCustomErrorPages,
   serveStaticFile
-} from "../chunk-YZCD3DWE.js";
+} from "../chunk-AI7GBBRB.js";
 import {
   DuplicateJobNameError,
   InMemoryJobBackend,
@@ -86,7 +86,7 @@ import {
   sendError,
   sendJson,
   validateRouteInput
-} from "../chunk-5BOKW3GX.js";
+} from "../chunk-FVFYACYK.js";
 import {
   ActionError,
   ActionInputError,
@@ -160,7 +160,7 @@ import {
   scanServerRoutes,
   scanWebSocketRoutes,
   writeManifest
-} from "../chunk-VHB2FSPM.js";
+} from "../chunk-I2UN46ZX.js";
 import "../chunk-DV34VG3N.js";
 import "../chunk-IRASEXOG.js";
 import {

package/dist/server/scan/index.d.ts

@@ -1,5 +1,5 @@
-import { S as ServerRouteNode } from '../../match-DmGgxjIU.js';
-export { L as LoadModule, c as compilePattern, a as createProductionLoader, b as createViteLoader, m as matchRoute } from '../../match-DmGgxjIU.js';
+import { S as ServerRouteNode } from '../../match-Dw4CNXJH.js';
+export { L as LoadModule, c as compilePattern, a as createProductionLoader, b as createViteLoader, m as matchRoute } from '../../match-Dw4CNXJH.js';
 import { A as AgentNode } from '../../agent-scan-BZa-pagG.js';
 import 'vite';
 
@@ -114,6 +114,12 @@ interface ManifestRoute {
     /** HTTP methods (uppercase) the route file exports. Optional — manifests
      * generated before G1 omit this; loaders treat absence as "unknown". */
     methods?: string[];
+    /**
+     * The subset of `methods` declaring `policy('public')`. Optional for the same reason `methods`
+     * is: a manifest written before the field existed has none, and `public-exposure-gate.ts` reads
+     * that absence as "not measured" rather than as "nothing is public".
+     */
+    publicMethods?: string[];
 }
 interface ManifestAction {
     filePath: string;

package/dist/server/scan/index.js

@@ -17,7 +17,7 @@ import {
   scanServerRoutes,
   scanWebSocketRoutes,
   writeManifest
-} from "../../chunk-VHB2FSPM.js";
+} from "../../chunk-I2UN46ZX.js";
 import "../../chunk-DV34VG3N.js";
 import "../../chunk-IRASEXOG.js";
 import {

package/dist/{server-boundary-XRXVVUMO.js → server-boundary-4UIGB3G5.js}

@@ -1,9 +1,9 @@
 import {
   resolveTheoRootDir
 } from "./chunk-VQPHPQ5L.js";
-import "./chunk-VGE6AKEJ.js";
-import "./chunk-JUDNKBDQ.js";
-import "./chunk-5BOKW3GX.js";
+import "./chunk-DAE7BJ7H.js";
+import "./chunk-WX6NHGKS.js";
+import "./chunk-FVFYACYK.js";
 import "./chunk-ZDUO4IYN.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
@@ -15,7 +15,7 @@ import "./chunk-TNI4MARH.js";
 import "./chunk-OQCRCXCP.js";
 import {
   ACTION_SCHEMAS_DIR
-} from "./chunk-VHB2FSPM.js";
+} from "./chunk-I2UN46ZX.js";
 import "./chunk-DV34VG3N.js";
 import "./chunk-IRASEXOG.js";
 import "./chunk-BX6EUYHU.js";
@@ -147,4 +147,4 @@ export {
   ServerOnlyImportError,
   serverOnlyImportBoundary
 };
-//# sourceMappingURL=server-boundary-XRXVVUMO.js.map
+//# sourceMappingURL=server-boundary-4UIGB3G5.js.map

package/dist/{server-boundary-RNM25WWD.js → server-boundary-A2PUD4JV.js}

@@ -3,21 +3,21 @@ import "tsx/esm";
 import {
   resolveTheoRootDir
 } from "./chunk-FDOOBTXJ.js";
-import "./chunk-E53UIFH6.js";
+import "./chunk-IHAQUUT2.js";
 import "./chunk-5YPXXSYY.js";
 import "./chunk-MWWFXYW3.js";
 import "./chunk-RPET332G.js";
-import "./chunk-GSIOWE5B.js";
+import "./chunk-5VLP3GQ2.js";
 import "./chunk-C27VRUVN.js";
 import "./chunk-7UZZHCRN.js";
-import "./chunk-XLLW46MB.js";
-import "./chunk-6AM7HIRM.js";
+import "./chunk-2HWWJTOH.js";
+import "./chunk-5NNFO7R7.js";
 import {
   ACTION_SCHEMAS_DIR
-} from "./chunk-YYOBMOO4.js";
+} from "./chunk-NO6HA4FG.js";
 import "./chunk-Z7CJHDLS.js";
 import "./chunk-U5PWXS3J.js";
-import "./chunk-VI7ZANB3.js";
+import "./chunk-OSBGZYXZ.js";
 import "./chunk-VQIUTCK2.js";
 
 // src/vite-plugin/server-boundary.ts
@@ -131,4 +131,4 @@ export {
   ServerOnlyImportError,
   serverOnlyImportBoundary
 };
-//# sourceMappingURL=server-boundary-RNM25WWD.js.map
+//# sourceMappingURL=server-boundary-A2PUD4JV.js.map

package/dist/{start-WILEDDW2.js → start-3F4LVHWS.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-V7MTRM6Q.js";
 import {
   initCacheEngineFromConfig
-} from "./chunk-Q5L5EGWZ.js";
+} from "./chunk-NZDGV4YJ.js";
 import {
   preflightNodeAndBindings
 } from "./chunk-KTMQUYED.js";
@@ -25,7 +25,7 @@ import {
   resolveTransformer,
   serveMatchedAuxRoute,
   serveThroughPluginLifecycle
-} from "./chunk-2E7JLV7L.js";
+} from "./chunk-6VYF5PMG.js";
 import "./chunk-2CVV6CNN.js";
 import {
   findRootDiv
@@ -41,7 +41,7 @@ import {
   mountAgent,
   readAgentPolicy,
   writeWebResponseToServerResponse
-} from "./chunk-E53UIFH6.js";
+} from "./chunk-IHAQUUT2.js";
 import {
   getApprovalRegistry,
   resolveProvider
@@ -60,7 +60,7 @@ import {
   createObservabilityPluginFromConfig,
   extractTraceId,
   generateNewTraceContext
-} from "./chunk-GSIOWE5B.js";
+} from "./chunk-5VLP3GQ2.js";
 import {
   logRequest,
   warnOnce
@@ -68,27 +68,27 @@ import {
 import "./chunk-7UZZHCRN.js";
 import {
   loadManifest
-} from "./chunk-XLLW46MB.js";
+} from "./chunk-2HWWJTOH.js";
 import {
   scanAgents
-} from "./chunk-6AM7HIRM.js";
+} from "./chunk-5NNFO7R7.js";
 import {
   matchRoute,
   scanServerActions,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-YYOBMOO4.js";
+} from "./chunk-NO6HA4FG.js";
 import "./chunk-Z7CJHDLS.js";
 import {
   loadConfig
-} from "./chunk-QTHVHNJJ.js";
+} from "./chunk-HA35FS7U.js";
 import {
   loadEnv
 } from "./chunk-3QPVEJ7D.js";
 import "./chunk-U5PWXS3J.js";
-import "./chunk-FH3SQR6P.js";
+import "./chunk-4OTIXAUY.js";
 import "./chunk-ZNZISJDZ.js";
-import "./chunk-VI7ZANB3.js";
+import "./chunk-OSBGZYXZ.js";
 import "./chunk-VQIUTCK2.js";
 
 // src/cli/commands/start/index.ts
@@ -424,7 +424,7 @@ async function configureStorageManagerFromConfig(storageConfig) {
   if (storageConfig === void 0 || storageConfig === null) return;
   try {
     const { getStorageManager } = await import("./storage-manager-3O5PDO6O.js");
-    const { storageSchema } = await import("./schema-SOAD43RQ.js");
+    const { storageSchema } = await import("./schema-WKTNTGX6.js");
     const parsed = storageSchema.parse(storageConfig);
     getStorageManager().configure(parsed);
   } catch (err) {
@@ -503,7 +503,7 @@ function installGracefulShutdown(server) {
         });
       }
       try {
-        const { getObservabilityAdapter } = await import("./observability-bootstrap-M2WSDIDV.js");
+        const { getObservabilityAdapter } = await import("./observability-bootstrap-H4NSILXD.js");
         await getObservabilityAdapter()?.shutdown();
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -562,6 +562,63 @@ function loadRoutesAndActions(distDir, serverDir, agentsDir = "agents") {
   };
 }
 
+// src/cli/commands/start/public-exposure-gate.ts
+var MUTATING_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
+function isPubliclyBound(host) {
+  return !LOOPBACK_HOSTS.has(host.toLowerCase());
+}
+function unauthenticatedWrites(routes) {
+  const found = [];
+  for (const route of routes) {
+    for (const method of route.publicMethods ?? []) {
+      if (MUTATING_METHODS.has(method)) found.push({ routePath: route.routePath, method });
+    }
+  }
+  return found;
+}
+function cannotAnswer(routes) {
+  const anyDetected = routes.some((r) => r.publicMethods !== void 0);
+  if (anyDetected) return false;
+  return routes.some((r) => (r.methods ?? []).some((m) => MUTATING_METHODS.has(m)));
+}
+function refusalMessage(exposures, host) {
+  const list = exposures.map((e) => `    ${e.method} ${e.routePath}`).join("\n");
+  return [
+    exposures.length === 1 ? `Refusing to bind ${host}: 1 write route accepts unauthenticated requests.` : `Refusing to bind ${host}: ${String(exposures.length)} write routes accept unauthenticated requests.`,
+    "",
+    list,
+    "",
+    "  Each declares `policy('public')`, so anyone who can reach this address can call it.",
+    "  On a loopback bind that is a demo; on this one it is an open endpoint.",
+    "",
+    "  Resolve it one of two ways:",
+    "    \u2022 give each route a real policy \u2014 `policy(({ subject }) => subject !== null)`, or",
+    "      `requireOwner(subject, record.ownerId)` from `theokit/server/define`. A plugin hook",
+    "      establishes `ctx.subject`; the policy reads it.",
+    "    \u2022 decide otherwise, in writing: `security: { allowUnauthenticatedWrites: true }` in",
+    "      theo.config.ts. The routes stay open and the startup log keeps saying so."
+  ].join("\n");
+}
+function assessPublicExposure(input) {
+  if (!isPubliclyBound(input.target.host)) return { kind: "not-exposed" };
+  if (cannotAnswer(input.routes)) {
+    return {
+      kind: "unverified",
+      message: [
+        `Binding ${input.target.host} without checking whether its write routes are authenticated.`,
+        "  This manifest predates the check and records no policy kinds. Run `theo build` to",
+        "  regenerate it; until then the server starts, and this warning is the whole of what",
+        "  is known about the exposure."
+      ].join("\n")
+    };
+  }
+  const exposures = unauthenticatedWrites(input.routes);
+  if (exposures.length === 0) return { kind: "allowed" };
+  if (input.allowUnauthenticatedWrites) return { kind: "allowed-by-override", exposures };
+  return { kind: "refused", exposures, message: refusalMessage(exposures, input.target.host) };
+}
+
 // src/cli/commands/start/handlers.ts
 import { extname as extname2 } from "path";
 import { pathToFileURL } from "url";
@@ -1283,11 +1340,36 @@ async function startCommand(options) {
     createCronScheduler(cronDefinitions).start();
   }
   const listenTarget = resolveListenTarget(config.host);
+  const exposure = assessPublicExposure({
+    routes: cachedRoutes,
+    target: listenTarget,
+    allowUnauthenticatedWrites: config.security?.allowUnauthenticatedWrites ?? false
+  });
+  if (exposure.kind === "refused") {
+    console.error(`
+  ${exposure.message}
+`);
+    process.exitCode = 1;
+    return;
+  }
+  if (exposure.kind === "unverified") {
+    console.warn(`
+  ${exposure.message}
+`);
+  }
   server.listen(port, listenTarget.host, () => {
     console.log(`
   Theo production server`);
     console.log(`${describeListenTarget(listenTarget, port)}
 `);
+    if (exposure.kind === "allowed-by-override") {
+      const n = exposure.exposures.length;
+      console.warn(
+        `  security.allowUnauthenticatedWrites is on \u2014 ${String(n)} unauthenticated write ${n === 1 ? "route is" : "routes are"} reachable:`
+      );
+      for (const e of exposure.exposures) console.warn(`    ${e.method} ${e.routePath}`);
+      console.warn("");
+    }
     if (cronDefinitions.length > 0) {
       console.log(`  Crons: ${String(cronDefinitions.length)} scheduled in-process
 `);
@@ -1299,4 +1381,4 @@ export {
   resolveSsrEntry,
   startCommand
 };
-//# sourceMappingURL=start-WILEDDW2.js.map
+//# sourceMappingURL=start-3F4LVHWS.js.map