theokit 0.60.0 → 0.61.0

package/dist/{actions-virtual-module-DNOALUTX.js → actions-virtual-module-345YHSEB.js}

@@ -1,12 +1,12 @@
-import "./chunk-WOANPZBT.js";
-import "./chunk-DMODPX7P.js";
+import "./chunk-Q3UE7WIM.js";
+import "./chunk-H2X5T45M.js";
 import "./chunk-EYRWD2AB.js";
 import "./chunk-5GZROLDV.js";
-import "./chunk-JW5UFKQ3.js";
+import "./chunk-5AGNZXHJ.js";
 import "./chunk-P6OS7652.js";
 import "./chunk-ZDUO4IYN.js";
 import "./chunk-D4VP2QPR.js";
-import "./chunk-YN4W7LCX.js";
+import "./chunk-ENRT6DAU.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
 import "./chunk-PVNMLZ5G.js";
@@ -234,4 +234,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-DNOALUTX.js.map
+//# sourceMappingURL=actions-virtual-module-345YHSEB.js.map

package/dist/{actions-virtual-module-UE5H42GP.js → actions-virtual-module-XI5IGBF4.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-GZ5YHD5H.js";
+import "./chunk-KVZQJ3ZM.js";
 import "./chunk-WFIAYPBH.js";
 import "./chunk-L4TB6FXQ.js";
 import "./chunk-VV2VU3LJ.js";
@@ -218,4 +218,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-UE5H42GP.js.map
+//# sourceMappingURL=actions-virtual-module-XI5IGBF4.js.map

package/dist/adapters/agent-mount.d.ts

@@ -1,4 +1,4 @@
-import { a as RouteSubject, R as RoutePolicy } from '../route-policy-BxOycCDq.js';
+import { a as RouteSubject, R as RoutePolicy } from '../route-policy-BHXQDzBF.js';
 import { C as CsrfMode } from '../csrf-Dgot9qSM.js';
 export { r as resolveProvider } from '../provider-resolver-1aWi_WSz.js';
 export { s as scanAgents } from '../agent-scan-BZa-pagG.js';

package/dist/adapters/agent-mount.js

@@ -1,8 +1,8 @@
 import {
   mountAgent
-} from "../chunk-DMODPX7P.js";
+} from "../chunk-H2X5T45M.js";
 import "../chunk-P6OS7652.js";
-import "../chunk-YN4W7LCX.js";
+import "../chunk-ENRT6DAU.js";
 import "../chunk-PVNMLZ5G.js";
 import "../chunk-ZDCCILMP.js";
 import "../chunk-CHTAWXC2.js";

package/dist/{agent-VWPSEDXD.js → agent-L45EZWPV.js}

@@ -3,7 +3,7 @@ import "tsx/esm";
 import {
   agentCommand,
   createAgentSsrLoader
-} from "./chunk-IZTOGKLS.js";
+} from "./chunk-YXEKPMDK.js";
 import "./chunk-WFIAYPBH.js";
 import "./chunk-5NNFO7R7.js";
 import "./chunk-Z7CJHDLS.js";
@@ -12,4 +12,4 @@ export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=agent-VWPSEDXD.js.map
+//# sourceMappingURL=agent-L45EZWPV.js.map

package/dist/{app-typed-client-MKTSLES3.js → app-typed-client-B7QIRDSP.js}

@@ -1,14 +1,14 @@
 import {
   scanControllerModules
-} from "./chunk-WOANPZBT.js";
-import "./chunk-DMODPX7P.js";
+} from "./chunk-Q3UE7WIM.js";
+import "./chunk-H2X5T45M.js";
 import "./chunk-EYRWD2AB.js";
 import "./chunk-5GZROLDV.js";
-import "./chunk-JW5UFKQ3.js";
+import "./chunk-5AGNZXHJ.js";
 import "./chunk-P6OS7652.js";
 import "./chunk-ZDUO4IYN.js";
 import "./chunk-D4VP2QPR.js";
-import "./chunk-YN4W7LCX.js";
+import "./chunk-ENRT6DAU.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
 import "./chunk-PVNMLZ5G.js";
@@ -427,4 +427,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-MKTSLES3.js.map
+//# sourceMappingURL=app-typed-client-B7QIRDSP.js.map

package/dist/{app-typed-client-4KLNKET6.js → app-typed-client-GVP4V4X3.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-GZ5YHD5H.js";
+import "./chunk-KVZQJ3ZM.js";
 import "./chunk-WFIAYPBH.js";
 import {
   scanControllerModules
@@ -411,4 +411,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-4KLNKET6.js.map
+//# sourceMappingURL=app-typed-client-GVP4V4X3.js.map

package/dist/{build-RG54DH3F.js → build-22OMF3NG.js}

@@ -3,7 +3,7 @@ import "tsx/esm";
 import {
   describeControllerArtifacts,
   emitControllerArtifacts
-} from "./chunk-KZ3PXNPT.js";
+} from "./chunk-MIPHNT4J.js";
 import {
   validateProjectStructure
 } from "./chunk-GEQJAFSV.js";
@@ -554,7 +554,7 @@ async function buildCommand(options) {
 `);
 }
 async function runAdapterBuild(target, config, cwd) {
-  const { theoPluginAsync } = await import("./vite-plugin-BG5K3L46.js");
+  const { theoPluginAsync } = await import("./vite-plugin-37OQ5RDR.js");
   const { default: react } = await import("@vitejs/plugin-react");
   const ctx = {
     // `react()` may return Plugin or Plugin[] depending on version; spread the
@@ -676,4 +676,4 @@ function relativize3(absPath, root) {
 export {
   buildCommand
 };
-//# sourceMappingURL=build-RG54DH3F.js.map
+//# sourceMappingURL=build-22OMF3NG.js.map

package/dist/{chunk-KQ27YDLG.js → chunk-4BQIJ4HE.js}

@@ -1,10 +1,10 @@
 import {
   validateRouteInput
-} from "./chunk-JW5UFKQ3.js";
+} from "./chunk-5AGNZXHJ.js";
 import {
   evaluateRoutePolicy,
   subjectFromContext
-} from "./chunk-YN4W7LCX.js";
+} from "./chunk-ENRT6DAU.js";
 
 // src/server/http/error-pages.ts
 import { closeSync, fstatSync, openSync, readFileSync } from "node:fs";
@@ -270,4 +270,4 @@ export {
   callProcedure,
   createOpenApiHandler
 };
-//# sourceMappingURL=chunk-KQ27YDLG.js.map
+//# sourceMappingURL=chunk-4BQIJ4HE.js.map

package/dist/{chunk-JW5UFKQ3.js → chunk-5AGNZXHJ.js}

@@ -12,7 +12,7 @@ import {
 import {
   evaluateRoutePolicy,
   subjectFromContext
-} from "./chunk-YN4W7LCX.js";
+} from "./chunk-ENRT6DAU.js";
 import {
   DuplicateContextKeyError,
   createOutbox,
@@ -1702,4 +1702,4 @@ export {
   createCorsHandler,
   createCorsWebHandler
 };
-//# sourceMappingURL=chunk-JW5UFKQ3.js.map
+//# sourceMappingURL=chunk-5AGNZXHJ.js.map

package/dist/{chunk-ETKLM6UN.js → chunk-6R6UR64X.js}

@@ -12,7 +12,7 @@ import {
   serveMatchedAuxRoute,
   serveThroughPluginLifecycle,
   setupSsrDevMiddleware
-} from "./chunk-XES7ZE2K.js";
+} from "./chunk-L2NSHQOY.js";
 import {
   resolveTheoRootDir
 } from "./chunk-FDOOBTXJ.js";
@@ -38,7 +38,7 @@ import {
   mountAgent,
   readAgentPolicy,
   writeWebResponseToServerResponse
-} from "./chunk-GZ5YHD5H.js";
+} from "./chunk-KVZQJ3ZM.js";
 import {
   getApprovalRegistry,
   resolveProvider
@@ -2179,19 +2179,19 @@ async function theoPluginAsync(rootOrOptions) {
       })
     );
   }
-  const { appTypedClientPlugin } = await import("./app-typed-client-4KLNKET6.js");
+  const { appTypedClientPlugin } = await import("./app-typed-client-GVP4V4X3.js");
   const appClientPlugin = appTypedClientPlugin({
     cwd: projectRoot,
     serverDir: serverDirAbs,
     distDir: resolve5(projectRoot, ".theokit")
   });
-  const { actionsVirtualModule } = await import("./actions-virtual-module-UE5H42GP.js");
+  const { actionsVirtualModule } = await import("./actions-virtual-module-XI5IGBF4.js");
   const actionsPlugin = actionsVirtualModule({
     serverDir: serverDirAbs,
     distDir: resolve5(projectRoot, ".theokit")
   });
   const { agentsTypedClientPlugin } = await import("./agents-typed-client-D4OA2TXB.js");
-  const { generateManifest } = await import("./internal-api-UM77XDXN.js");
+  const { generateManifest } = await import("./internal-api-QKWTQ2Q7.js");
   const agentsClientPlugin = agentsTypedClientPlugin({
     projectRoot,
     agentsDir: agentsDirName,
@@ -2208,7 +2208,7 @@ async function theoPluginAsync(rootOrOptions) {
   const controllerTransformPlugin = controllerSwcTransformPlugin({
     serverDir: serverDirAbs
   });
-  const { serverOnlyImportBoundary } = await import("./server-boundary-X52AMCKI.js");
+  const { serverOnlyImportBoundary } = await import("./server-boundary-7BRS2CWI.js");
   const serverBoundaryPlugin = serverOnlyImportBoundary({
     projectRoot,
     serverDir: serverDirAbs
@@ -2383,4 +2383,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-ETKLM6UN.js.map
+//# sourceMappingURL=chunk-6R6UR64X.js.map

package/dist/{chunk-YN4W7LCX.js → chunk-ENRT6DAU.js}

@@ -1,6 +1,11 @@
 // src/core/contracts/route-policy.ts
 function subjectFromContext(context) {
   if (context === null || typeof context !== "object") return null;
+  if (typeof context.getRequest === "function" && !("subject" in context)) {
+    throw new TypeError(
+      "subjectFromContext was given a controller ExecutionContext, which carries no subject \u2014 it would answer null for every caller and a guard built on that denies everyone. Read the subject from the request instead (e.g. your session manager over `context.getRequest()`), or use `@Public()` when the route is genuinely open."
+    );
+  }
   const candidate = context.subject;
   if (candidate === null || candidate === void 0 || typeof candidate !== "object") return null;
   const id = candidate.id;
@@ -28,4 +33,4 @@ export {
   evaluateRoutePolicy,
   requireOwner
 };
-//# sourceMappingURL=chunk-YN4W7LCX.js.map
+//# sourceMappingURL=chunk-ENRT6DAU.js.map

package/dist/chunk-ENRT6DAU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/contracts/route-policy.ts"],"mappings":";AAyDO,SAAS,mBAAmB,SAAuC;AACxE,MAAI,YAAY,QAAQ,OAAO,YAAY,SAAU,QAAO;AAI5D,MACE,OAAQ,QAAqC,eAAe,cAC5D,EAAE,aAAa,UACf;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IAIF;AAAA,EACF;AACA,QAAM,YAAa,QAAkC;AACrD,MAAI,cAAc,QAAQ,cAAc,UAAa,OAAO,cAAc,SAAU,QAAO;AAC3F,QAAM,KAAM,UAA+B;AAC3C,SAAO,OAAO,OAAO,YAAY,GAAG,SAAS,IAAK,YAA6B;AACjF;AAoBA,eAAsB,oBACpB,QACA,OACyB;AACzB,MAAI,WAAW,OAAW,QAAO,EAAE,SAAS,KAAK;AACjD,MAAI,WAAW,SAAU,QAAO,EAAE,SAAS,KAAK;AAEhD,QAAM,UAAU,MAAM,OAAO,KAAK;AAClC,MAAI,OAAO,YAAY,WAAW;AAChC,WAAO,UAAU,EAAE,SAAS,KAAK,IAAI,EAAE,SAAS,OAAO,QAAQ,gCAAgC;AAAA,EACjG;AACA,SAAO;AACT;AASO,SAAS,aACd,SACA,SACgB;AAChB,MAAI,YAAY,KAAM,QAAO,EAAE,SAAS,OAAO,QAAQ,oBAAoB;AAC3E,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,GAAG;AAIvD,WAAO,EAAE,SAAS,OAAO,QAAQ,iCAAiC;AAAA,EACpE;AACA,SAAO,QAAQ,OAAO,UAClB,EAAE,SAAS,KAAK,IAChB,EAAE,SAAS,OAAO,QAAQ,qCAAqC;AACrE;","names":[]}

package/dist/{chunk-DMODPX7P.js → chunk-H2X5T45M.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-P6OS7652.js";
 import {
   evaluateRoutePolicy
-} from "./chunk-YN4W7LCX.js";
+} from "./chunk-ENRT6DAU.js";
 import {
   createObservabilityPlugin,
   requestTrace,
@@ -805,4 +805,4 @@ export {
   parseAgentRequestBody,
   mountAgent
 };
-//# sourceMappingURL=chunk-DMODPX7P.js.map
+//# sourceMappingURL=chunk-H2X5T45M.js.map

package/dist/{chunk-GZ5YHD5H.js → chunk-KVZQJ3ZM.js}

@@ -209,6 +209,11 @@ function isAuthRequiredError(err) {
 // src/core/contracts/route-policy.ts
 function subjectFromContext(context) {
   if (context === null || typeof context !== "object") return null;
+  if (typeof context.getRequest === "function" && !("subject" in context)) {
+    throw new TypeError(
+      "subjectFromContext was given a controller ExecutionContext, which carries no subject \u2014 it would answer null for every caller and a guard built on that denies everyone. Read the subject from the request instead (e.g. your session manager over `context.getRequest()`), or use `@Public()` when the route is genuinely open."
+    );
+  }
   const candidate = context.subject;
   if (candidate === null || candidate === void 0 || typeof candidate !== "object") return null;
   const id = candidate.id;
@@ -2616,4 +2621,4 @@ export {
   CsrfReadinessStore,
   applySecurityHeaders
 };
-//# sourceMappingURL=chunk-GZ5YHD5H.js.map
+//# sourceMappingURL=chunk-KVZQJ3ZM.js.map