theokit 0.62.0 → 0.62.1

package/dist/{actions-virtual-module-PBYOQTLB.js → actions-virtual-module-AT6HNADR.js}

@@ -1,5 +1,5 @@
 import "./chunk-Q3UE7WIM.js";
-import "./chunk-CY5WKIM5.js";
+import "./chunk-2BYN7WTW.js";
 import "./chunk-EYRWD2AB.js";
 import "./chunk-5GZROLDV.js";
 import "./chunk-5AGNZXHJ.js";
@@ -24,7 +24,7 @@ import "./chunk-DV34VG3N.js";
 import "./chunk-V6Y2SMRG.js";
 import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
-import "./chunk-JI365DWM.js";
+import "./chunk-ICXXHV4V.js";
 import "./chunk-YSJOZEI6.js";
 import "./chunk-Z4PJMZLM.js";
 import "./chunk-UMNXCU3K.js";
@@ -234,4 +234,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-PBYOQTLB.js.map
+//# sourceMappingURL=actions-virtual-module-AT6HNADR.js.map

package/dist/{actions-virtual-module-LXENSB3L.js → actions-virtual-module-XJ6J6T4C.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-UZFOWYAQ.js";
-import "./chunk-YVHQ35RT.js";
+import "./chunk-USN554EK.js";
+import "./chunk-UETVDZBE.js";
 import "./chunk-L4TB6FXQ.js";
 import "./chunk-VV2VU3LJ.js";
 import "./chunk-5VLP3GQ2.js";
@@ -218,4 +218,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-LXENSB3L.js.map
+//# sourceMappingURL=actions-virtual-module-XJ6J6T4C.js.map

package/dist/adapters/agent-mount.js

@@ -1,6 +1,6 @@
 import {
   mountAgent
-} from "../chunk-CY5WKIM5.js";
+} from "../chunk-2BYN7WTW.js";
 import "../chunk-P6OS7652.js";
 import "../chunk-ENRT6DAU.js";
 import "../chunk-PVNMLZ5G.js";
@@ -12,7 +12,7 @@ import {
 } from "../chunk-KDP2HURW.js";
 import {
   resolveProvider
-} from "../chunk-JI365DWM.js";
+} from "../chunk-ICXXHV4V.js";
 import "../chunk-UMNXCU3K.js";
 import "../chunk-SOYOYGWY.js";
 import "../chunk-ZWN3AODA.js";

package/dist/{agent-YNHEKPD6.js → agent-G525PHCO.js}

@@ -3,8 +3,8 @@ import "tsx/esm";
 import {
   agentCommand,
   createAgentSsrLoader
-} from "./chunk-4LQKAWZJ.js";
-import "./chunk-YVHQ35RT.js";
+} from "./chunk-F2LYXOHK.js";
+import "./chunk-UETVDZBE.js";
 import "./chunk-5NNFO7R7.js";
 import "./chunk-Z7CJHDLS.js";
 import "./chunk-3QPVEJ7D.js";
@@ -12,4 +12,4 @@ export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=agent-YNHEKPD6.js.map
+//# sourceMappingURL=agent-G525PHCO.js.map

package/dist/{app-typed-client-VZN2ISQX.js → app-typed-client-5B3IOU45.js}

@@ -1,7 +1,7 @@
 import {
   scanControllerModules
 } from "./chunk-Q3UE7WIM.js";
-import "./chunk-CY5WKIM5.js";
+import "./chunk-2BYN7WTW.js";
 import "./chunk-EYRWD2AB.js";
 import "./chunk-5GZROLDV.js";
 import "./chunk-5AGNZXHJ.js";
@@ -28,7 +28,7 @@ import {
 import "./chunk-V6Y2SMRG.js";
 import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
-import "./chunk-JI365DWM.js";
+import "./chunk-ICXXHV4V.js";
 import "./chunk-YSJOZEI6.js";
 import "./chunk-Z4PJMZLM.js";
 import "./chunk-UMNXCU3K.js";
@@ -427,4 +427,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-VZN2ISQX.js.map
+//# sourceMappingURL=app-typed-client-5B3IOU45.js.map

package/dist/{app-typed-client-Z5AKRLSU.js → app-typed-client-NTNYNJTW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-UZFOWYAQ.js";
-import "./chunk-YVHQ35RT.js";
+import "./chunk-USN554EK.js";
+import "./chunk-UETVDZBE.js";
 import {
   scanControllerModules
 } from "./chunk-L4TB6FXQ.js";
@@ -411,4 +411,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-Z5AKRLSU.js.map
+//# sourceMappingURL=app-typed-client-NTNYNJTW.js.map

package/dist/{build-TFH2T26B.js → build-CZAM7K6J.js}

@@ -554,7 +554,7 @@ async function buildCommand(options) {
 `);
 }
 async function runAdapterBuild(target, config, cwd) {
-  const { theoPluginAsync } = await import("./vite-plugin-675YOCHV.js");
+  const { theoPluginAsync } = await import("./vite-plugin-VLDOBVIS.js");
   const { default: react } = await import("@vitejs/plugin-react");
   const ctx = {
     // `react()` may return Plugin or Plugin[] depending on version; spread the
@@ -676,4 +676,4 @@ function relativize3(absPath, root) {
 export {
   buildCommand
 };
-//# sourceMappingURL=build-TFH2T26B.js.map
+//# sourceMappingURL=build-CZAM7K6J.js.map

package/dist/{chunk-CY5WKIM5.js → chunk-2BYN7WTW.js}

@@ -15,7 +15,7 @@ import {
 } from "./chunk-ZDCCILMP.js";
 import {
   processSingleton
-} from "./chunk-JI365DWM.js";
+} from "./chunk-ICXXHV4V.js";
 import {
   newSpanId,
   newTraceId
@@ -817,4 +817,4 @@ export {
   parseAgentRequestBody,
   mountAgent
 };
-//# sourceMappingURL=chunk-CY5WKIM5.js.map
+//# sourceMappingURL=chunk-2BYN7WTW.js.map

package/dist/{chunk-BAXPERIV.js → chunk-DRLYKXDD.js}

@@ -25,10 +25,10 @@ import {
   parseAgentRequestBody,
   readAgentPolicy,
   subjectFromContext
-} from "./chunk-UZFOWYAQ.js";
+} from "./chunk-USN554EK.js";
 import {
   getApprovalRegistry
-} from "./chunk-YVHQ35RT.js";
+} from "./chunk-UETVDZBE.js";
 import {
   sendError,
   validateCsrfRequest
@@ -867,4 +867,4 @@ export {
   applyNonceToInlineScripts,
   setupSsrDevMiddleware
 };
-//# sourceMappingURL=chunk-BAXPERIV.js.map
+//# sourceMappingURL=chunk-DRLYKXDD.js.map

package/dist/{chunk-PGYYVOM3.js → chunk-DVJRDY3H.js}

@@ -12,7 +12,7 @@ import {
   serveMatchedAuxRoute,
   serveThroughPluginLifecycle,
   setupSsrDevMiddleware
-} from "./chunk-BAXPERIV.js";
+} from "./chunk-DRLYKXDD.js";
 import {
   resolveTheoRootDir
 } from "./chunk-FDOOBTXJ.js";
@@ -38,11 +38,11 @@ import {
   mountAgent,
   readAgentPolicy,
   writeWebResponseToServerResponse
-} from "./chunk-UZFOWYAQ.js";
+} from "./chunk-USN554EK.js";
 import {
   getApprovalRegistry,
   resolveProvider
-} from "./chunk-YVHQ35RT.js";
+} from "./chunk-UETVDZBE.js";
 import {
   createWebRequestSource,
   dispatchControllerRequest,
@@ -2179,19 +2179,19 @@ async function theoPluginAsync(rootOrOptions) {
       })
     );
   }
-  const { appTypedClientPlugin } = await import("./app-typed-client-Z5AKRLSU.js");
+  const { appTypedClientPlugin } = await import("./app-typed-client-NTNYNJTW.js");
   const appClientPlugin = appTypedClientPlugin({
     cwd: projectRoot,
     serverDir: serverDirAbs,
     distDir: resolve5(projectRoot, ".theokit")
   });
-  const { actionsVirtualModule } = await import("./actions-virtual-module-LXENSB3L.js");
+  const { actionsVirtualModule } = await import("./actions-virtual-module-XJ6J6T4C.js");
   const actionsPlugin = actionsVirtualModule({
     serverDir: serverDirAbs,
     distDir: resolve5(projectRoot, ".theokit")
   });
   const { agentsTypedClientPlugin } = await import("./agents-typed-client-D4OA2TXB.js");
-  const { generateManifest } = await import("./internal-api-HXKRFUXR.js");
+  const { generateManifest } = await import("./internal-api-UBBHEPVE.js");
   const agentsClientPlugin = agentsTypedClientPlugin({
     projectRoot,
     agentsDir: agentsDirName,
@@ -2208,7 +2208,7 @@ async function theoPluginAsync(rootOrOptions) {
   const controllerTransformPlugin = controllerSwcTransformPlugin({
     serverDir: serverDirAbs
   });
-  const { serverOnlyImportBoundary } = await import("./server-boundary-6PGQB5XT.js");
+  const { serverOnlyImportBoundary } = await import("./server-boundary-JP6VHXAX.js");
   const serverBoundaryPlugin = serverOnlyImportBoundary({
     projectRoot,
     serverDir: serverDirAbs
@@ -2383,4 +2383,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-PGYYVOM3.js.map
+//# sourceMappingURL=chunk-DVJRDY3H.js.map

package/dist/{chunk-UK2WVX5G.js → chunk-EB5TYC2Y.js}

@@ -32,7 +32,7 @@ import {
   securitySchema,
   storageSchema,
   uploadSchema
-} from "./chunk-CY5WKIM5.js";
+} from "./chunk-2BYN7WTW.js";
 import {
   broadcastToDevtools
 } from "./chunk-OIGJOYX6.js";
@@ -100,7 +100,7 @@ import {
 } from "./chunk-YOIVCCZT.js";
 import {
   resolveProvider
-} from "./chunk-JI365DWM.js";
+} from "./chunk-ICXXHV4V.js";
 import {
   generateNonce
 } from "./chunk-Z4PJMZLM.js";
@@ -3507,19 +3507,19 @@ async function theoPluginAsync(rootOrOptions) {
       })
     );
   }
-  const { appTypedClientPlugin } = await import("./app-typed-client-VZN2ISQX.js");
+  const { appTypedClientPlugin } = await import("./app-typed-client-5B3IOU45.js");
   const appClientPlugin = appTypedClientPlugin({
     cwd: projectRoot,
     serverDir: serverDirAbs,
     distDir: resolve10(projectRoot, ".theokit")
   });
-  const { actionsVirtualModule } = await import("./actions-virtual-module-PBYOQTLB.js");
+  const { actionsVirtualModule } = await import("./actions-virtual-module-AT6HNADR.js");
   const actionsPlugin = actionsVirtualModule({
     serverDir: serverDirAbs,
     distDir: resolve10(projectRoot, ".theokit")
   });
   const { agentsTypedClientPlugin } = await import("./agents-typed-client-PVUZU65B.js");
-  const { generateManifest } = await import("./internal-api-D4LIZ3S6.js");
+  const { generateManifest } = await import("./internal-api-G25P4TP2.js");
   const agentsClientPlugin = agentsTypedClientPlugin({
     projectRoot,
     agentsDir: agentsDirName,
@@ -3536,7 +3536,7 @@ async function theoPluginAsync(rootOrOptions) {
   const controllerTransformPlugin = controllerSwcTransformPlugin({
     serverDir: serverDirAbs
   });
-  const { serverOnlyImportBoundary } = await import("./server-boundary-QHWMBDKT.js");
+  const { serverOnlyImportBoundary } = await import("./server-boundary-A5JNZ4ND.js");
   const serverBoundaryPlugin = serverOnlyImportBoundary({
     projectRoot,
     serverDir: serverDirAbs
@@ -3719,4 +3719,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-UK2WVX5G.js.map
+//# sourceMappingURL=chunk-EB5TYC2Y.js.map

package/dist/{chunk-4LQKAWZJ.js → chunk-F2LYXOHK.js}

@@ -3,7 +3,7 @@ import "tsx/esm";
 import {
   getApprovalRegistry,
   resolveProvider
-} from "./chunk-YVHQ35RT.js";
+} from "./chunk-UETVDZBE.js";
 import {
   scanAgents
 } from "./chunk-5NNFO7R7.js";
@@ -178,7 +178,7 @@ async function agentCommand(name, message, deps = {}) {
 async function createAgentSsrLoader(projectRoot) {
   const { createServer } = await import("vite");
   const react = (await import("@vitejs/plugin-react")).default;
-  const { theoPluginAsync } = await import("./vite-plugin-675YOCHV.js");
+  const { theoPluginAsync } = await import("./vite-plugin-VLDOBVIS.js");
   const { loadConfig } = await import("./load-config-VMKOV44Y.js");
   const config = await loadConfig(projectRoot);
   const theoPlugins = await theoPluginAsync({
@@ -212,4 +212,4 @@ export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=chunk-4LQKAWZJ.js.map
+//# sourceMappingURL=chunk-F2LYXOHK.js.map

package/dist/{chunk-JI365DWM.js → chunk-ICXXHV4V.js}

@@ -104,9 +104,10 @@ function declaredPluginProviderFor(modelId, plugins) {
     const profile = modelProviderProfileOf(plugin);
     if (profile === void 0) continue;
     if (profile.name !== prefix && !(profile.aliases ?? []).includes(prefix)) continue;
+    const needsCredential = profile.authType !== "none" && profile.envVars.length > 0;
     return {
       name: profile.name,
-      ...profile.envVars.length > 0 ? { envKey: profile.envVars[0] } : {},
+      ...needsCredential ? { envKey: profile.envVars[0] } : {},
       baseUrl: profile.baseUrl,
       // Last in the priority walk, and reachable only through the declared branch anyway: a plugin
       // provider must never win a BARE model id away from an entry this project declares.
@@ -182,4 +183,4 @@ export {
   resolveProvider,
   tryResolveProvider
 };
-//# sourceMappingURL=chunk-JI365DWM.js.map
+//# sourceMappingURL=chunk-ICXXHV4V.js.map

package/dist/{chunk-JI365DWM.js.map → chunk-ICXXHV4V.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/server/_internal/process-singleton.ts","../src/server/agent/provider-resolver.ts"],"mappings":";AAgCA,IAAM,YAAY;AASX,SAAS,iBAAmC,KAAa,SAAqB;AACnF,QAAM,OAAO,uBAAO,IAAI,YAAY,GAAG;AACvC,QAAM,OAAO;AAEb,QAAM,WAAW,KAAK,IAAI;AAC1B,MAAI,aAAa,OAAW,QAAO;AAEnC,QAAM,UAAU,QAAQ;AACxB,OAAK,IAAI,IAAI;AACb,SAAO;AACT;;;ACuDA,IAAM,mBAAyC;AAAA,EAC7C;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,UAAU;AAAA,EACZ;AACF;AAYA,SAAS,aAAmC;AAC1C,SAAO,iBAAiB,qBAAqB,MAAM,CAAC,GAAG,gBAAgB,CAAC;AAC1E;AAUA,IAAM,YAAY,oBAAI,IAAY;AAmC3B,SAAS,iBAAiB,YAAsC;AAErE,QAAM,WAAW,WAAW;AAC5B,QAAM,MAAM,SAAS,UAAU,CAAC,MAAM,EAAE,SAAS,WAAW,IAAI;AAChE,MAAI,OAAO,EAAG,UAAS,GAAG,IAAI;AAAA,MACzB,UAAS,KAAK,UAAU;AAC/B;AAOO,SAAS,wBAA8B;AAC5C,QAAM,WAAW,WAAW;AAC5B,WAAS,SAAS;AAClB,WAAS,KAAK,GAAG,gBAAgB;AACnC;AAOO,SAAS,gBAA+C;AAC7D,SAAO,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AACjE;AASA,SAAS,SACP,MACA,KACA,SACM;AACN,MAAI,UAAU,IAAI,KAAK,IAAI,EAAG;AAC9B,YAAU,IAAI,KAAK,IAAI;AACvB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,OAAO,sBAAsB,KAAK,IAAI,KAAK,GAAG,YAAY,MAAM,YAAY,UAAU,IAAI,CAAC;AACjG,MAAI,SAAS,SAAU,SAAQ,SAAS,IAAI;AAAA,MAIvC,SAAQ,KAAK,IAAI;AACxB;AAQA,SAAS,UAAU,MAAkC;AACnD,MAAI,KAAK,eAAe,OAAW,QAAO,KAAK;AAC/C,QAAM,WAAW,QAAQ,IAAI,KAAK,UAAU;AAC5C,SAAO,aAAa,UAAa,SAAS,SAAS,IAAI,WAAW,KAAK;AACzE;AAaA,SAAS,WACP,SACA,YACgC;AAChC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AACjC,SAAO,WAAW,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACjD;AASA,SAAS,iBAAiB,SAAiD;AACzE,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAaA,SAAS,YACP,UACA,SACA,YACQ;AACR,QAAM,UAAU,WAAW;AAAA,IACzB,CAAC,MACC,EAAE,YAAY,QACd,EAAE,SAAS,SAAS,QACpB,EAAE,WAAW,WACZ,QAAQ,IAAI,EAAE,MAAM,KAAK,IAAI,SAAS;AAAA,EAC3C;AACA,MAAI,SAAS,WAAW,OAAW,QAAO;AAC1C,SACE,aAAa,QAAQ,IAAI,IAAI,OAAO,yBAAyB,QAAQ,IAAI,KACrE,QAAQ,MAAM,gBAAgB,QAAQ,IAAI;AAElD;AAKA,SAAS,gBAAgB,MAAwD;AAC/E,SAAO,KAAK,WAAW;AACzB;AA+BA,IAAM,kBAAkB;AA6BxB,SAAS,0BACP,SACA,SACgC;AAChC,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AAEjC,aAAW,UAAU,SAAS;AAC5B,UAAM,UAAU,uBAAuB,MAAM;AAC7C,QAAI,YAAY,OAAW;AAG3B,QAAI,QAAQ,SAAS,UAAU,EAAE,QAAQ,WAAW,CAAC,GAAG,SAAS,MAAM,EAAG;AAC1E,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,GAAI,QAAQ,QAAQ,SAAS,IAAI,EAAE,QAAQ,QAAQ,QAAQ,CAAC,EAAE,IAAI,CAAC;AAAA,MACnE,SAAS,QAAQ;AAAA;AAAA;AAAA,MAGjB,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,uBAAuB,QAAkD;AAChF,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAY;AAClB,MAAI,UAAU,SAAS,iBAAkB,QAAO;AAChD,QAAM,UAAU,UAAU;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,KAAM,QAAO;AAC5D,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY,SAAU,QAAO;AAChF,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,EAAG,QAAO;AAC1C,SAAO;AACT;AAeO,SAAS,gBAAgB,SAAkB,SAA4C;AAC5F,QAAM,SAAS,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGvE,QAAM,WACJ,YAAY,SACR,SACC,WAAW,SAAS,MAAM,KAAK,0BAA0B,SAAS,SAAS,OAAO;AACzF,MAAI,aAAa,UAAa,YAAY,QAAW;AACnD,QAAI,SAAS,WAAW,QAAW;AACjC,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,iBAAiB,SAAS,UAAU,QAAQ,EAAE;AAAA,IACtF;AACA,UAAM,SAAS,QAAQ,IAAI,SAAS,MAAM;AAC1C,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,SAAS,UAAU,QAAQ,EAAE;AAAA,IACrE;AAOA,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,wBAAwB,SAAS,IAAI,UAAU,SAAS,MAAM,oBACtE,SAAS,MAAM,GAAG,YAAY,UAAU,SAAS,MAAM,CAAC;AAAA,IACnE;AAAA,EACF;AAcA,QAAM,qBAAqB,aAAa,SAAY,iBAAiB,OAAO,IAAI;AAChF,MAAI,uBAAuB,QAAW;AACpC,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,OAAO,CAAC,wBAAwB,kBAAkB,qDACxC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,gDACf,kBAAkB;AAAA,IACpE;AAAA,EACF;AAIA,QAAM,eAAe,OAAO,OAAO,eAAe;AAElD,aAAW,QAAQ,cAAc;AAC/B,UAAM,SAAS,QAAQ,IAAI,KAAK,MAAM;AACtC,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,MAAM,mBAAmB,OAAO;AACzC,aAAO;AAAA,QACL,MAAM,KAAK;AAAA,QACX;AAAA,QACA,SAAS,UAAU,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAQA,QAAM,UAAU,aAAa,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM;AAC7D,QAAM,IAAI;AAAA,IACR,6DAA6D,OAAO;AAAA,EAEtE;AACF;AAQO,SAAS,mBAAmB,SAA2C;AAC5E,MAAI;AACF,WAAO,gBAAgB,OAAO;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../src/server/_internal/process-singleton.ts","../src/server/agent/provider-resolver.ts"],"mappings":";AAgCA,IAAM,YAAY;AASX,SAAS,iBAAmC,KAAa,SAAqB;AACnF,QAAM,OAAO,uBAAO,IAAI,YAAY,GAAG;AACvC,QAAM,OAAO;AAEb,QAAM,WAAW,KAAK,IAAI;AAC1B,MAAI,aAAa,OAAW,QAAO;AAEnC,QAAM,UAAU,QAAQ;AACxB,OAAK,IAAI,IAAI;AACb,SAAO;AACT;;;ACuDA,IAAM,mBAAyC;AAAA,EAC7C;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,UAAU;AAAA,EACZ;AACF;AAYA,SAAS,aAAmC;AAC1C,SAAO,iBAAiB,qBAAqB,MAAM,CAAC,GAAG,gBAAgB,CAAC;AAC1E;AAUA,IAAM,YAAY,oBAAI,IAAY;AAmC3B,SAAS,iBAAiB,YAAsC;AAErE,QAAM,WAAW,WAAW;AAC5B,QAAM,MAAM,SAAS,UAAU,CAAC,MAAM,EAAE,SAAS,WAAW,IAAI;AAChE,MAAI,OAAO,EAAG,UAAS,GAAG,IAAI;AAAA,MACzB,UAAS,KAAK,UAAU;AAC/B;AAOO,SAAS,wBAA8B;AAC5C,QAAM,WAAW,WAAW;AAC5B,WAAS,SAAS;AAClB,WAAS,KAAK,GAAG,gBAAgB;AACnC;AAOO,SAAS,gBAA+C;AAC7D,SAAO,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AACjE;AASA,SAAS,SACP,MACA,KACA,SACM;AACN,MAAI,UAAU,IAAI,KAAK,IAAI,EAAG;AAC9B,YAAU,IAAI,KAAK,IAAI;AACvB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,OAAO,sBAAsB,KAAK,IAAI,KAAK,GAAG,YAAY,MAAM,YAAY,UAAU,IAAI,CAAC;AACjG,MAAI,SAAS,SAAU,SAAQ,SAAS,IAAI;AAAA,MAIvC,SAAQ,KAAK,IAAI;AACxB;AAQA,SAAS,UAAU,MAAkC;AACnD,MAAI,KAAK,eAAe,OAAW,QAAO,KAAK;AAC/C,QAAM,WAAW,QAAQ,IAAI,KAAK,UAAU;AAC5C,SAAO,aAAa,UAAa,SAAS,SAAS,IAAI,WAAW,KAAK;AACzE;AAaA,SAAS,WACP,SACA,YACgC;AAChC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AACjC,SAAO,WAAW,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACjD;AASA,SAAS,iBAAiB,SAAiD;AACzE,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAaA,SAAS,YACP,UACA,SACA,YACQ;AACR,QAAM,UAAU,WAAW;AAAA,IACzB,CAAC,MACC,EAAE,YAAY,QACd,EAAE,SAAS,SAAS,QACpB,EAAE,WAAW,WACZ,QAAQ,IAAI,EAAE,MAAM,KAAK,IAAI,SAAS;AAAA,EAC3C;AACA,MAAI,SAAS,WAAW,OAAW,QAAO;AAC1C,SACE,aAAa,QAAQ,IAAI,IAAI,OAAO,yBAAyB,QAAQ,IAAI,KACrE,QAAQ,MAAM,gBAAgB,QAAQ,IAAI;AAElD;AAKA,SAAS,gBAAgB,MAAwD;AAC/E,SAAO,KAAK,WAAW;AACzB;AA+BA,IAAM,kBAAkB;AA6BxB,SAAS,0BACP,SACA,SACgC;AAChC,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AAEjC,aAAW,UAAU,SAAS;AAC5B,UAAM,UAAU,uBAAuB,MAAM;AAC7C,QAAI,YAAY,OAAW;AAG3B,QAAI,QAAQ,SAAS,UAAU,EAAE,QAAQ,WAAW,CAAC,GAAG,SAAS,MAAM,EAAG;AAE1E,UAAM,kBAAkB,QAAQ,aAAa,UAAU,QAAQ,QAAQ,SAAS;AAChF,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,GAAI,kBAAkB,EAAE,QAAQ,QAAQ,QAAQ,CAAC,EAAE,IAAI,CAAC;AAAA,MACxD,SAAS,QAAQ;AAAA;AAAA;AAAA,MAGjB,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,uBAAuB,QAAkD;AAChF,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAY;AAClB,MAAI,UAAU,SAAS,iBAAkB,QAAO;AAChD,QAAM,UAAU,UAAU;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,KAAM,QAAO;AAC5D,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY,SAAU,QAAO;AAChF,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,EAAG,QAAO;AAC1C,SAAO;AACT;AAsBO,SAAS,gBAAgB,SAAkB,SAA4C;AAC5F,QAAM,SAAS,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGvE,QAAM,WACJ,YAAY,SACR,SACC,WAAW,SAAS,MAAM,KAAK,0BAA0B,SAAS,SAAS,OAAO;AACzF,MAAI,aAAa,UAAa,YAAY,QAAW;AACnD,QAAI,SAAS,WAAW,QAAW;AACjC,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,iBAAiB,SAAS,UAAU,QAAQ,EAAE;AAAA,IACtF;AACA,UAAM,SAAS,QAAQ,IAAI,SAAS,MAAM;AAC1C,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,SAAS,UAAU,QAAQ,EAAE;AAAA,IACrE;AAOA,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,wBAAwB,SAAS,IAAI,UAAU,SAAS,MAAM,oBACtE,SAAS,MAAM,GAAG,YAAY,UAAU,SAAS,MAAM,CAAC;AAAA,IACnE;AAAA,EACF;AAcA,QAAM,qBAAqB,aAAa,SAAY,iBAAiB,OAAO,IAAI;AAChF,MAAI,uBAAuB,QAAW;AACpC,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,OAAO,CAAC,wBAAwB,kBAAkB,qDACxC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,gDACf,kBAAkB;AAAA,IACpE;AAAA,EACF;AAIA,QAAM,eAAe,OAAO,OAAO,eAAe;AAElD,aAAW,QAAQ,cAAc;AAC/B,UAAM,SAAS,QAAQ,IAAI,KAAK,MAAM;AACtC,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,MAAM,mBAAmB,OAAO;AACzC,aAAO;AAAA,QACL,MAAM,KAAK;AAAA,QACX;AAAA,QACA,SAAS,UAAU,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAQA,QAAM,UAAU,aAAa,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM;AAC7D,QAAM,IAAI;AAAA,IACR,6DAA6D,OAAO;AAAA,EAEtE;AACF;AAQO,SAAS,mBAAmB,SAA2C;AAC5E,MAAI;AACF,WAAO,gBAAgB,OAAO;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-YVHQ35RT.js → chunk-UETVDZBE.js}

@@ -93,9 +93,10 @@ function declaredPluginProviderFor(modelId, plugins) {
     const profile = modelProviderProfileOf(plugin);
     if (profile === void 0) continue;
     if (profile.name !== prefix && !(profile.aliases ?? []).includes(prefix)) continue;
+    const needsCredential = profile.authType !== "none" && profile.envVars.length > 0;
     return {
       name: profile.name,
-      ...profile.envVars.length > 0 ? { envKey: profile.envVars[0] } : {},
+      ...needsCredential ? { envKey: profile.envVars[0] } : {},
       baseUrl: profile.baseUrl,
       // Last in the priority walk, and reachable only through the declared branch anyway: a plugin
       // provider must never win a BARE model id away from an entry this project declares.
@@ -217,4 +218,4 @@ export {
   getApprovalRegistry,
   resolveProvider
 };
-//# sourceMappingURL=chunk-YVHQ35RT.js.map
+//# sourceMappingURL=chunk-UETVDZBE.js.map

package/dist/{chunk-YVHQ35RT.js.map → chunk-UETVDZBE.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/server/_internal/process-singleton.ts","../src/server/agent/provider-resolver.ts","../src/server/agent/approval-registry.ts"],"sourcesContent":["/**\n * One object per PROCESS, whatever the bundler did to the module holding it.\n *\n * ## The defect this exists to remove\n *\n * A module-level `let x` gives one instance per **module instance**, and a bundler is free to place\n * the same source in more than one chunk. When it does, each chunk gets its own `x` and any state\n * written through one is invisible through the other.\n *\n * Measured in this repository's own `dist` (usetheokit/theokit#401) by grepping the built chunks for\n * each module's marker: `provider-resolver` lands in two chunks, and `approval-registry` in two.\n * Neither copy is redundant — one of the provider chunks is tree-shaken to `resolveProvider` and\n * does not carry `resetProviderRegistry` at all, which is precisely how the halves diverge: an\n * application calling `registerProvider` — public API, with a documented self-hosting example —\n * mutated the array in one chunk while `theokit start` resolved against the array in the other.\n *\n * The second is worse in kind, because `approval-registry.ts` states the requirement in its own\n * source: *\"the approval a request awaits and the approval the route resolves MUST be the same\n * object, so a single instance per process is not a convenience but a correctness requirement.\"* A\n * chunk boundary can break that silently, and the symptom would be a HITL pause that never resumes.\n *\n * ## Why `globalThis` and not better chunking\n *\n * Chunking is a bundler heuristic that changes between versions and with the shape of the import\n * graph. A fix that depends on tsup continuing to place this module in exactly one chunk is a fix\n * that holds until someone adds an import. `Symbol.for` gives a key that is equal across every\n * module instance in the realm, so identity stops depending on the build at all.\n *\n * @internal\n */\n\n/** Namespaced so a key cannot collide with an unrelated global. */\nconst NAMESPACE = 'theokit.singleton.'\n\n/**\n * The object registered under `key`, creating it with `factory` the first time.\n *\n * `factory` runs at most once per process. A later call with the same key returns what the first\n * call built and never replaces it — replacing it is the same defect wearing a different hat, since\n * two callers would again hold different objects.\n */\nexport function processSingleton<T extends object>(key: string, factory: () => T): T {\n  const slot = Symbol.for(NAMESPACE + key)\n  const host = globalThis as unknown as Record<symbol, T | undefined>\n\n  const existing = host[slot]\n  if (existing !== undefined) return existing\n\n  const created = factory()\n  host[slot] = created\n  return created\n}\n","import { processSingleton } from '../_internal/process-singleton.js'\n\n/**\n * Provider Resolver — Strategy + Registry pattern (FAANG-grade).\n *\n * Inspiration: Dapr Conversation Registry (`dapr/pkg/components/conversation/registry.go`)\n * + Encore Manager provider array (`encore/runtimes/go/pubsub/manager_internal.go`).\n *\n * Principle: provider routing is the FRAMEWORK's responsibility, not the consumer's — but the\n * consumer still gets to SAY which provider it wants, and it says so in the model id.\n *\n * `provider/model` is the convention every agent in this ecosystem already writes\n * (`anthropic/claude-sonnet-4-6`, `openrouter/anthropic/claude-haiku-4.5`), and it is the one the\n * SDK routes on. Until theokit#326 this resolver ignored it entirely and picked by env-var\n * priority, so an agent that declared `anthropic/...` was handed an OpenRouter key whenever one\n * happened to be present — and every turn failed with `auth_failed (HTTP 401)` against a provider\n * nobody asked for. The declared provider now wins; priority is the fallback for a bare model id.\n *\n * Wire protocol: OpenAI Chat Completions (universal — implemented by every\n * os providers: OpenRouter, Groq, Mistral, Together, Anthropic via proxy, etc).\n *\n * Resolution by priority (FIRST match wins):\n *   1. OPENROUTER_API_KEY → baseUrl=openrouter.ai (multi-model gateway)\n *   2. OPENAI_API_KEY     → baseUrl=api.openai.com\n *   3. ANTHROPIC_API_KEY  → direct Anthropic (Messages API, not OpenAI-compat)\n *\n * Escape hatch: an explicit `options.apiKey` OVERRIDES auto-resolution\n * (the consumer can force a specific provider if it wants to).\n */\n\n/**\n * Provider configuration descriptor — Registry entry shape.\n *\n * @public\n */\nexport interface ProviderDescriptor {\n  /** Stable name used internally — not exposed on the wire. */\n  name: string\n  /**\n   * Environment variable that holds the API key for this provider.\n   *\n   * **Absent means the provider needs no credential** — a model running on the developer's own\n   * machine has nothing to authenticate against. Such a provider is reachable ONLY when a model id\n   * names it (`ollama/llama3.2`); it never participates in the priority walk, because the walk\n   * reads \"this variable is set\" as \"a human configured this provider\", and a keyless entry offers\n   * no equivalent signal. Including it would route every bare model id to localhost the moment no\n   * cloud key was set (usetheokit/theokit#407).\n   */\n  envKey?: string\n  /** Base URL for the provider's OpenAI-compatible (or native) API. */\n  baseUrl: string\n  /**\n   * Environment variable that OVERRIDES {@link baseUrl} when set.\n   *\n   * Scoped honestly: every caller inside this framework takes `.apiKey` from the resolved provider\n   * and discards `.baseUrl` (`cli/commands/start/handlers.ts`, `vite-plugin/api-middleware.ts`,\n   * `cli/commands/agent.ts`), so the endpoint a request actually reaches is chosen by the SDK, from\n   * its own profile — which reads `OLLAMA_HOST` itself. This field therefore does not redirect\n   * traffic today.\n   *\n   * It exists so that the `baseUrl` this function REPORTS agrees with where the request goes, for\n   * the consumers that read it — `resolveProvider` is public API, and a reported endpoint that\n   * contradicts the real one is a debugging trap rather than a harmless inaccuracy.\n   */\n  baseUrlEnv?: string\n  /**\n   * True when this provider is a GATEWAY — it serves other providers' catalogs under their own\n   * model ids, reachable by prefixing its name (`openrouter/openai/gpt-4o-mini`).\n   *\n   * It changes nothing about resolution. It exists so the refusal below can name a model id that\n   * would work instead of only the variable that is missing (#554): a scaffold shipping\n   * `openai/gpt-4o-mini` and an `.env.example` asking for `OPENROUTER_API_KEY` produced an error\n   * naming `OPENAI_API_KEY` — the one key the reader was never told to get — while the key they had\n   * serves that exact id through the gateway.\n   *\n   * Deliberately NOT a licence to substitute. Every caller here takes `.apiKey` and discards\n   * `.baseUrl`; the SDK picks the endpoint from the model id (measured: `openai/gpt-4o-mini` →\n   * `api.openai.com`, `openrouter/openai/gpt-4o-mini` → `openrouter.ai`). Handing an OpenRouter key\n   * to a request bound for OpenAI is #326 exactly, so the caller changes the id and the routing\n   * follows — the framework does not change it for them.\n   */\n  gateway?: boolean\n  /** Resolution priority (lower = higher priority). FIRST match wins. */\n  priority: number\n}\n\n/**\n * Resolved provider configuration — output of `resolveProvider()`.\n *\n * @public\n */\nexport interface ResolvedProvider {\n  name: string\n  apiKey: string\n  baseUrl: string\n}\n\n/**\n * Default provider registry. Order = priority (first = highest).\n *\n * Adding a new provider:\n *   1. Append entry below (or register via `registerProvider()`).\n *   2. Set `envKey` matching the user's env var convention.\n *   3. Set `baseUrl` to the OpenAI-compat endpoint (or native if not compat).\n *   4. Provider name used in telemetry/logs only — never wire-exposed.\n */\nconst DEFAULT_REGISTRY: ProviderDescriptor[] = [\n  {\n    name: 'openrouter',\n    envKey: 'OPENROUTER_API_KEY',\n    baseUrl: 'https://openrouter.ai/api/v1',\n    gateway: true,\n    priority: 1,\n  },\n  {\n    name: 'openai',\n    envKey: 'OPENAI_API_KEY',\n    baseUrl: 'https://api.openai.com/v1',\n    priority: 2,\n  },\n  {\n    name: 'anthropic',\n    envKey: 'ANTHROPIC_API_KEY',\n    baseUrl: 'https://api.anthropic.com',\n    priority: 3,\n  },\n  {\n    // Mirrors the profile `@theokit/sdk` already ships for this provider — same default host, same\n    // override variable — so the two cannot disagree about where ollama is listening. The SDK is\n    // what dials it (see `baseUrlEnv`); this entry's job is to stop the resolver from rejecting the\n    // model before the SDK is ever reached. No `envKey`: see that field's doc comment for why the\n    // absence also keeps this entry out of the priority walk.\n    name: 'ollama',\n    baseUrl: 'http://localhost:11434',\n    baseUrlEnv: 'OLLAMA_HOST',\n    priority: 100,\n  },\n]\n\n/**\n * Runtime registry — copy of DEFAULT_REGISTRY mutable via registerProvider().\n * Sorted by priority on every resolve (stable, O(n log n) — n <= ~10 providers).\n *\n * Held per PROCESS rather than per module instance (usetheokit/theokit#401). As a module-level\n * `const` it was one array per chunk, and the bundler emits this module into two of them: an\n * application calling `registerProvider` mutated one array while `theokit start` resolved against\n * another, so the call had no effect and the resulting error listed the defaults while the\n * registered provider sat in an object nobody read.\n */\nfunction registryOf(): ProviderDescriptor[] {\n  return processSingleton('provider-registry', () => [...DEFAULT_REGISTRY])\n}\n\n/**\n * Providers already announced, so a boot line does not become a per-request line.\n *\n * theokit#326 — resolution was silent on success. `resolveProvider` returns `{ name, apiKey,\n * baseUrl }` and every call site consumes only the key, so an operator could only learn which\n * provider was selected from an error message: exactly when it has already failed, and never in\n * the case that hurts most — a stale key that resolves cleanly and 401s at the provider.\n */\nconst announced = new Set<string>()\n\n/** Test-only reset, so announcement state does not leak between cases. @public */\nexport function resetProviderAnnouncements(): void {\n  announced.clear()\n}\n\n/** Where the announcement goes, and what it may contain. @public */\nexport interface ResolveOptions {\n  /** Receives one line per provider, at most once. NEVER receives the key. */\n  announce?: (line: string) => void\n  /**\n   * The plugins the agent declared (`compiled.plugins`), consulted for a `model-provider` one when\n   * this project's registry does not know the model's prefix (#579).\n   *\n   * Absent ⇒ registry-only, byte-unchanged. This is what keeps `.plugins(Provider.builtins())`\n   * meaning something at resolution time without making every SDK builtin nameable by every app.\n   */\n  plugins?: readonly unknown[]\n}\n\n/**\n * Register a new provider (Registry pattern — runtime extension point).\n * Useful for self-hosted endpoints or custom providers without touching theokit src.\n *\n * @example\n * registerProvider({\n *   name: 'self-hosted',\n *   envKey: 'SELF_HOSTED_API_KEY',\n *   baseUrl: 'https://llm.internal.acme.com/v1',\n *   priority: 0, // highest priority\n * })\n *\n * @public\n */\nexport function registerProvider(descriptor: ProviderDescriptor): void {\n  // Idempotent — replace existing by name.\n  const registry = registryOf()\n  const idx = registry.findIndex((p) => p.name === descriptor.name)\n  if (idx >= 0) registry[idx] = descriptor\n  else registry.push(descriptor)\n}\n\n/**\n * Reset registry to DEFAULT_REGISTRY (test-only / dev escape hatch).\n *\n * @public\n */\nexport function resetProviderRegistry(): void {\n  const registry = registryOf()\n  registry.length = 0\n  registry.push(...DEFAULT_REGISTRY)\n}\n\n/**\n * Get current registry snapshot (read-only — inspection).\n *\n * @public\n */\nexport function listProviders(): readonly ProviderDescriptor[] {\n  return [...registryOf()].sort((a, b) => a.priority - b.priority)\n}\n\n/**\n * Says which provider was selected, once.\n *\n * Carries the provider, HOW it was chosen, and the variable the credential came from — never the\n * credential. Which env var holds it is what an operator needs to fix a mis-selection; the value\n * is what a log must never hold.\n */\nfunction announce(\n  desc: ProviderDescriptor,\n  how: 'declared by the model' | 'by env priority',\n  options: ResolveOptions | undefined,\n): void {\n  if (announced.has(desc.name)) return\n  announced.add(desc.name)\n  const source = desc.envKey ?? 'none (this provider takes no credential)'\n  const line = `[theokit] provider=${desc.name} (${how}) source=${source} baseUrl=${baseUrlOf(desc)}`\n  if (options?.announce) options.announce(line)\n  // `warn` rather than `info` because the repo's lint rule allows only `warn`/`error` — and this\n  // line is closer to a warning in spirit anyway: it is the one chance an operator gets to notice\n  // that the provider serving their agents is not the one they expected.\n  else console.warn(line)\n}\n\n/**\n * Where this provider is listening, after any environment override.\n *\n * One function so the announcement line and the resolved config can never name different hosts —\n * an operator reading a log to find out where requests went must be reading the truth.\n */\nfunction baseUrlOf(desc: ProviderDescriptor): string {\n  if (desc.baseUrlEnv === undefined) return desc.baseUrl\n  const override = process.env[desc.baseUrlEnv]\n  return override !== undefined && override.length > 0 ? override : desc.baseUrl\n}\n\n/**\n * The provider a model id declares, or `undefined` when it declares none.\n *\n * `provider/model` and `gateway/provider/model` both resolve on the FIRST segment: a gateway is a\n * provider from the framework's point of view (it holds the credential), and everything after it\n * is the upstream namespace the gateway itself routes on.\n *\n * A bare id (`gpt-4o-mini`, `qwen2.5:3b`) declares nothing, and an unregistered prefix is treated\n * the same way rather than as an error — a project may legitimately point a custom id at a\n * registered provider's endpoint, and refusing it here would break that before it reached the SDK.\n */\nfunction providerOf(\n  modelId: string | undefined,\n  registered: readonly ProviderDescriptor[],\n): ProviderDescriptor | undefined {\n  const prefix = declaredPrefixOf(modelId)\n  if (prefix === undefined) return undefined\n  return registered.find((p) => p.name === prefix)\n}\n\n/**\n * The provider name a model id declares, registered or not.\n *\n * Split out of {@link providerOf} because the two questions differ exactly where the error message\n * used to go wrong: \"which registered provider is this?\" answers `undefined` both for a bare id and\n * for `groq/…`, and the resolver needs to tell those apart to say something true about the second.\n */\nfunction declaredPrefixOf(modelId: string | undefined): string | undefined {\n  if (modelId === undefined) return undefined\n  const slash = modelId.indexOf('/')\n  if (slash <= 0) return undefined\n  return modelId.slice(0, slash)\n}\n\n/**\n * The rest of the refusal: how to reach this model with a credential that IS present.\n *\n * A credentialed gateway serves the declared provider's catalog under the same id, so prefixing it\n * turns an unreachable model into a reachable one — and that string is what the reader needs, not\n * the abstract advice to \"change the prefix\". When no gateway is credentialed the sentence stays\n * exactly as it was: naming a gateway with no key would trade one dead end for another.\n *\n * A gateway is never offered for a model already routed through one — `openrouter/openrouter/…` is\n * not a thing — which is what excluding `declared` itself accomplishes.\n */\nfunction gatewayHint(\n  declared: ProviderDescriptor,\n  modelId: string,\n  registered: readonly ProviderDescriptor[],\n): string {\n  const gateway = registered.find(\n    (p) =>\n      p.gateway === true &&\n      p.name !== declared.name &&\n      p.envKey !== undefined &&\n      (process.env[p.envKey] ?? '').length > 0,\n  )\n  if (gateway?.envKey === undefined) return `, or change the model's provider prefix`\n  return (\n    `, or use \"${gateway.name}/${modelId}\" to route it through ${gateway.name} ` +\n    `(${gateway.envKey} is set, and ${gateway.name} serves this model id)`\n  )\n}\n\n/** A provider that authenticates — the only kind the priority walk may select. */\ntype CredentialedProvider = ProviderDescriptor & { envKey: string }\n\nfunction takesCredential(desc: ProviderDescriptor): desc is CredentialedProvider {\n  return desc.envKey !== undefined\n}\n\n/**\n * Resolve the provider for a model.\n *\n * When `modelId` declares a registered provider (`anthropic/…`), THAT provider's key is\n * required — no substitution. Otherwise the registry is walked by priority, first match wins.\n *\n * @returns ResolvedProvider with apiKey + baseUrl + name\n * @throws Error if NO provider env var is set (actionable message)\n *\n * @public\n */\n/**\n * What a keyless provider reports as its key.\n *\n * This was `''` until #501, on the reasoning that an empty string is the honest value for a\n * provider that needs no credential. The reasoning was sound and the value was wrong: the SDK's\n * `createLocalAgent` calls `resolveApiKey`, which treats `''` as ABSENT, falls back to\n * `THEOKIT_API_KEY` — which nobody sets for a local model — and throws `missing_api_key` before it\n * ever looks at the provider. So #407 opened the registry door and every keyless provider,\n * including the builtin `ollama`, still could not serve a turn.\n *\n * `'local'` is the SDK's own sentinel (`LOCAL_RUNTIME_MOCK_KEY`, `internal/auth/api-key-validator`).\n * It is not a placeholder credential and does not become one: `validateApiKeyShape` short-circuits\n * on it, and `mergeExplicitApiKey` excludes it from the credential pools, so it never reaches a\n * provider as an `authorization` header. That was the objection the old comment raised against any\n * non-empty value, and it is the reason this specific value is the one that answers it — measured\n * against @theokit/sdk 4.52.1, where `apiKey: ''` throws `missing_api_key` and `apiKey: 'local'`\n * builds the agent.\n */\nconst KEYLESS_API_KEY = 'local'\n\n/**\n * The provider a MODEL-PROVIDER PLUGIN THE AGENT DECLARED serves `modelId` with (#579).\n *\n * ## Why the agent's plugins and not the SDK's catalogue\n *\n * The first version of this asked `Provider.forModel` — the SDK's global builtin lookup — and that\n * is wrong in a way the suite caught immediately: `tests/unit/unregistered-prefix-is-refused-not-\n * rerouted.test.ts` uses `openai-chatgpt/gpt-5.4` as its example of a prefix that MUST be refused\n * (#503), because a turn must never succeed against a provider nobody named. Consulting the\n * catalogue makes every one of the SDK's 44 builtins nameable by any app, whether or not it asked\n * for them — the exact permissiveness #503 exists to forbid, reintroduced one level down.\n *\n * `.plugins(Provider.builtins())` IS the app naming them. So the question is not \"does the SDK know\n * this prefix\" but \"did this agent declare a provider that serves it\", and the answer is already in\n * `compiled.plugins`, which the caller passes in. An app that declared nothing keeps getting the\n * refusal, unchanged.\n *\n * ## The shape it reads\n *\n * A `model-provider` plugin carries `profile: { name, envVars, baseUrl }`. `envVars[0]` is the\n * credential when the profile names one; naming none means the provider does not authenticate by\n * environment — Codex refreshes OAuth per request inside the profile's own `transform.fetch` — and\n * that is the keyless class `ProviderDescriptor.envKey` already describes for `ollama` (#407).\n *\n * Structural, never imported: `@theokit/sdk` is an optional peer, and this module must keep\n * resolving its own four entries without it. The plugins arrive as `unknown` and are narrowed here.\n */\nfunction declaredPluginProviderFor(\n  modelId: string,\n  plugins: readonly unknown[] | undefined,\n): ProviderDescriptor | undefined {\n  if (plugins === undefined) return undefined\n  const prefix = declaredPrefixOf(modelId)\n  if (prefix === undefined) return undefined\n\n  for (const plugin of plugins) {\n    const profile = modelProviderProfileOf(plugin)\n    if (profile === undefined) continue\n    // The profile's own name, plus the aliases it declares — the SDK routes on both, and reading\n    // only `name` would refuse `codex/...` for a profile that lists it as an alias of itself.\n    if (profile.name !== prefix && !(profile.aliases ?? []).includes(prefix)) continue\n    return {\n      name: profile.name,\n      ...(profile.envVars.length > 0 ? { envKey: profile.envVars[0] } : {}),\n      baseUrl: profile.baseUrl,\n      // Last in the priority walk, and reachable only through the declared branch anyway: a plugin\n      // provider must never win a BARE model id away from an entry this project declares.\n      priority: Number.MAX_SAFE_INTEGER,\n    }\n  }\n  return undefined\n}\n\n/** The `profile` of a value that is a model-provider plugin, or `undefined` for anything else. */\nfunction modelProviderProfileOf(plugin: unknown): ProviderProfileLike | undefined {\n  if (typeof plugin !== 'object' || plugin === null) return undefined\n  const candidate = plugin as { kind?: unknown; profile?: unknown }\n  if (candidate.kind !== 'model-provider') return undefined\n  const profile = candidate.profile\n  if (typeof profile !== 'object' || profile === null) return undefined\n  const shape = profile as Partial<ProviderProfileLike>\n  if (typeof shape.name !== 'string' || typeof shape.baseUrl !== 'string') return undefined\n  if (!Array.isArray(shape.envVars)) return undefined\n  return shape as ProviderProfileLike\n}\n\n/**\n * The fields of the SDK's `ProviderProfile` this module reads.\n *\n * Structural rather than imported: importing the SDK's type would make an optional peer a\n * build-time dependency of a module that must work without it.\n */\ninterface ProviderProfileLike {\n  name: string\n  envVars: readonly string[]\n  baseUrl: string\n  aliases?: readonly string[]\n}\n\nexport function resolveProvider(modelId?: string, options?: ResolveOptions): ResolvedProvider {\n  const sorted = [...registryOf()].sort((a, b) => a.priority - b.priority)\n\n  // The local registry first, the SDK's builtins as the fallback for a prefix it does not know.\n  const declared =\n    modelId === undefined\n      ? undefined\n      : (providerOf(modelId, sorted) ?? declaredPluginProviderFor(modelId, options?.plugins))\n  if (declared !== undefined && modelId !== undefined) {\n    if (declared.envKey === undefined) {\n      announce(declared, 'declared by the model', options)\n      return { name: declared.name, apiKey: KEYLESS_API_KEY, baseUrl: baseUrlOf(declared) }\n    }\n    const apiKey = process.env[declared.envKey]\n    if (apiKey && apiKey.length > 0) {\n      announce(declared, 'declared by the model', options)\n      return { name: declared.name, apiKey, baseUrl: baseUrlOf(declared) }\n    }\n    // Deliberately NOT falling back to another provider's key. Silently substituting one is how\n    // theokit#326 produced a 401 nobody could attribute: the request went somewhere the agent\n    // never named. Say which variable is missing and stop.\n    //\n    // #554 — but say it usefully. \"change the model's provider prefix\" is true and unactionable:\n    // it does not say which prefix, and the reader may already hold a key that serves this model.\n    throw new Error(\n      `Model \"${modelId}\" declares provider \"${declared.name}\", but ${declared.envKey} is not set. ` +\n        `Set ${declared.envKey}${gatewayHint(declared, modelId, sorted)}.`,\n    )\n  }\n\n  // A prefix the registry does not know is a CHOICE, not a silence — refuse before the walk.\n  //\n  // `providerOf` returns `undefined` for an unregistered prefix, which is indistinguishable from a\n  // bare model id, so the priority walk below used to claim the turn and the \"not registered\" error\n  // further down became unreachable for anyone holding a key. The visible cost was a confusing\n  // message; the real one was a turn that SUCCEEDED against a provider nobody named — different\n  // endpoint, different account billed, prompt delivered to a vendor the operator had routed away\n  // from, announced only by a `console.warn` that fires once per process (#503).\n  //\n  // #326 settled the principle for a registered provider: declared wins, priority is the fallback\n  // for a bare model id. This extends it to the case #326 did not reach — an unregistered prefix is\n  // not a bare model id either.\n  const unregisteredPrefix = declared === undefined ? declaredPrefixOf(modelId) : undefined\n  if (unregisteredPrefix !== undefined) {\n    throw new Error(\n      `Model \"${String(modelId)}\" declares provider \"${unregisteredPrefix}\", which is not registered. ` +\n        `Registered providers: ${sorted.map((p) => p.name).join(', ')}. ` +\n        `Register it with registerProvider({ name: '${unregisteredPrefix}', … }), or use a registered prefix.`,\n    )\n  }\n\n  // Only providers that take a credential. A keyless entry is reachable exclusively through the\n  // declared branch above; see `ProviderDescriptor.envKey` for why the walk cannot include it.\n  const credentialed = sorted.filter(takesCredential)\n\n  for (const desc of credentialed) {\n    const apiKey = process.env[desc.envKey]\n    if (apiKey && apiKey.length > 0) {\n      announce(desc, 'by env priority', options)\n      return {\n        name: desc.name,\n        apiKey,\n        baseUrl: baseUrlOf(desc),\n      }\n    }\n  }\n\n  // Nothing resolved, and the model id declared nothing — the unregistered-prefix case was refused\n  // above the walk, which is where it belongs (#503). This message is for the bare-id case only.\n  //\n  // It used to live here and it was the right message in the wrong place: reachable exactly when\n  // the operator had no keys at all, which is the case that needed it least (usetheokit/theokit#407\n  // is why the message exists; #503 is why it moved).\n  const envKeys = credentialed.map((p) => p.envKey).join(' OR ')\n  throw new Error(\n    `No LLM provider API key found in environment. Set one of: ${envKeys}. ` +\n      `Get a free OpenRouter key at https://openrouter.ai/keys (recommended — one key, many models).`,\n  )\n}\n\n/**\n * Try to resolve — does NOT throw. Returns null if no provider available.\n * Useful for graceful degradation (e.g., mock mode).\n *\n * @public\n */\nexport function tryResolveProvider(modelId?: string): ResolvedProvider | null {\n  try {\n    return resolveProvider(modelId)\n  } catch {\n    return null\n  }\n}\n","/**\n * M4 (theokit-ai-first) — the in-process HITL approval registry.\n *\n * The HITL plugin's `awaitApproval` calls `register(approvalId)` and awaits the returned Promise\n * (this is what genuinely PAUSES the SDK run — the SDK `pre_tool_call` hook is awaited). The\n * approve route calls `resolve(approvalId, approved)` to settle it. A per-approval timeout settles\n * the Promise deterministically per the `@HumanInTheLoop` `onTimeout` policy so a hung approval\n * never leaks the paused stream.\n *\n * Single-process contract (ADR 0038 / plan Drawback 2): a multi-instance deploy needs a shared\n * registry — the interface is injectable so a durable impl (Redis, etc.) slots in without touching\n * the harness. We do NOT build a durable store now (YAGNI).\n */\n// The timeout policy vocabulary is owned by the `@HumanInTheLoop` decorator (DRY / G12) — reuse it\n// rather than re-declaring the union, so the two can never drift.\nimport type { TimeoutAction } from '@theokit/agents'\n\nimport { processSingleton } from '../_internal/process-singleton.js'\n\nexport interface RegisterOptions {\n  /** Milliseconds before the approval auto-settles per `onTimeout`. */\n  timeoutMs: number\n  /**\n   * What a timeout means. Only `'proceed'` auto-approves; `'abort'` and `'retry'` both deny — the\n   * registry does NOT implement retry semantics (a timed-out `'retry'` is a deny, not a re-prompt).\n   */\n  onTimeout: TimeoutAction\n  /** M14 — the gated tool name, surfaced by `list()` (optional; absent for legacy callers). */\n  toolName?: string\n  /** M14 — the approval question, surfaced by `list()` (optional). */\n  question?: string\n  /**\n   * Who the run belongs to — the `RouteSubject.id` admitted for it (B-016).\n   *\n   * Absent when the run had no identity to record, which is the `'public'` agent path:\n   * `admitAgentRequest` deliberately does not resolve a subject when the policy is absent or\n   * `'public'`, so there is nothing to attribute the approval to. Absent therefore means \"no owner\n   * was established\", never \"anyone\", and the caller must branch on the difference — a rule that\n   * refused when it is absent would start turning public agents away.\n   *\n   * Deliberately NOT surfaced by `list()`: that listing feeds a UI, and owner ids are identity.\n   */\n  owner?: string\n  /**\n   * M20 — an optional JSON-schema descriptor of the custom payload the approver may attach. Carried\n   * verbatim into `list()` + the `approval_required` event so the UI knows what to collect. Kept as\n   * a plain JSON object (not a live Zod schema) so the registry stays serializable and SDK-free.\n   */\n  payloadSchema?: Record<string, unknown>\n}\n\n/**\n * M20 — a settled HITL decision. `approved` is the allow/deny bit (backward-compatible with the\n * legacy boolean); `reason` + `payload` are the optional approver-attached extras that surface to\n * the model (on denial, via the veto message) and to the app/UI.\n */\nexport interface ApprovalDecision {\n  approved: boolean\n  reason?: string\n  payload?: unknown\n  /**\n   * What settled this, when it was not a person (usetheokit/theokit#393).\n   *\n   * Absent means the decision arrived through `resolve()` — a human, or whatever the application\n   * wired to that route. `'timeout'` means the window closed with nobody deciding and `onTimeout`\n   * was applied.\n   *\n   * The distinction is the whole point of a HITL gate: without it an expired approval and an\n   * explicit deny are byte-identical on the wire, and the sentence the caller gets — \"denied by\n   * human approver\" — asserts a fact that did not happen. It is marked on the ALLOW side too:\n   * `onTimeout: 'proceed'` permits the tool BECAUSE nobody answered, and recording that as a plain\n   * approval is the same fabrication with the opposite sign.\n   *\n   * One member rather than `timedOut: boolean`, because the question is what settled it; a second\n   * cause (a cancel, a shutdown) joins the union instead of adding another boolean.\n   */\n  settledBy?: 'timeout'\n}\n\n/** M14 — a pending approval as surfaced by {@link ApprovalRegistry.list}. */\nexport interface PendingApproval {\n  approvalId: string\n  toolName?: string\n  question?: string\n  /** Epoch millis when the pending approval auto-settles (registeredAt + timeoutMs). */\n  expiresAt: number\n  /** M20 — the declared custom-payload schema, if the gated tool declares one. */\n  payloadSchema?: Record<string, unknown>\n}\n\nexport interface ApprovalRegistry {\n  /**\n   * Register a pending approval; the returned Promise settles with the full {@link ApprovalDecision}\n   * on `resolve` or timeout (M20 — was a bare boolean pre-M20).\n   */\n  register(approvalId: string, opts: RegisterOptions): Promise<ApprovalDecision>\n  /**\n   * Settle a pending approval. Accepts a full {@link ApprovalDecision} OR a bare boolean (coerced to\n   * `{ approved }` — backward-compatible). Returns false if the id is unknown or already settled.\n   */\n  resolve(approvalId: string, decision: boolean | ApprovalDecision): boolean\n  /** M14 — list the currently-pending approvals (process-wide; single-process contract). */\n  list(): PendingApproval[]\n  /**\n   * Who owns the pending approval `approvalId`, or `undefined` (B-016).\n   *\n   * `undefined` covers three cases the caller treats identically — never registered, already\n   * settled, and registered without an owner — because in all three there is nothing to compare a\n   * caller against.\n   */\n  ownerOf(approvalId: string): string | undefined\n}\n\ninterface Pending {\n  settle: (decision: ApprovalDecision) => void\n  timer: ReturnType<typeof setTimeout>\n  info: PendingApproval\n  /** Held beside `info` rather than inside it, so `list()` cannot leak it (B-016). */\n  owner?: string\n}\n\n/**\n * The one process-wide registry the stream mount (`mountAgent`) and the approve route share.\n *\n * The in-process impl holds LIVE Promise resolvers in memory — the approval a request awaits and\n * the approval the route resolves MUST be the same object, so a single instance per process is not\n * a convenience but a correctness requirement. Lazily created; a durable/multi-instance deploy\n * swaps this accessor for a shared-store impl (ADR 0038 / plan Drawback 2) without touching callers.\n * Tests use {@link createInProcessApprovalRegistry} directly — never this singleton.\n */\nexport function getApprovalRegistry(): ApprovalRegistry {\n  // Per PROCESS, not per module instance (usetheokit/theokit#401). The paragraph above calls a\n  // single instance \"not a convenience but a correctness requirement\", and a module-level `let`\n  // does not deliver that: it gives one instance per MODULE INSTANCE, and this module is emitted\n  // into two chunks of the published bundle. A run awaiting an approval and the route resolving it\n  // could hold different objects, and the symptom would be a HITL pause that never resumes.\n  return processSingleton('approval-registry', () => createInProcessApprovalRegistry())\n}\n\nexport function createInProcessApprovalRegistry(): ApprovalRegistry {\n  const pending = new Map<string, Pending>()\n\n  return {\n    register(approvalId, opts) {\n      return new Promise<ApprovalDecision>((resolve) => {\n        const settle = (decision: ApprovalDecision): void => {\n          const entry = pending.get(approvalId)\n          if (!entry) return\n          clearTimeout(entry.timer)\n          pending.delete(approvalId)\n          resolve(decision)\n        }\n        // 'proceed' → allow on timeout; 'abort'/'retry' → deny on timeout.\n        const timer = setTimeout(() => {\n          settle({\n            approved: opts.onTimeout === 'proceed',\n            settledBy: 'timeout',\n            // Every value in this sentence was already here and none of it used to survive the\n            // settle. `onTimeout` is named because all three of its values reach this line and two\n            // of them deny — an operator who wrote `'retry'` and got a denial had nothing to read\n            // that mentioned retry.\n            reason: `no decision within ${String(opts.timeoutMs)} ms; onTimeout: '${opts.onTimeout}' was applied`,\n          })\n        }, opts.timeoutMs)\n        const info: PendingApproval = {\n          approvalId,\n          toolName: opts.toolName,\n          question: opts.question,\n          expiresAt: Date.now() + opts.timeoutMs,\n          ...(opts.payloadSchema !== undefined ? { payloadSchema: opts.payloadSchema } : {}),\n        }\n        pending.set(approvalId, {\n          settle,\n          timer,\n          info,\n          ...(opts.owner !== undefined ? { owner: opts.owner } : {}),\n        })\n      })\n    },\n    resolve(approvalId, decision) {\n      const entry = pending.get(approvalId)\n      if (!entry) return false\n      // M20 — coerce the legacy bare-boolean form to a decision object.\n      entry.settle(typeof decision === 'boolean' ? { approved: decision } : decision)\n      return true\n    },\n    list() {\n      return [...pending.values()].map((p) => p.info)\n    },\n    ownerOf(approvalId) {\n      // `settle` deletes the entry, so an approval that has been answered or timed out reports no\n      // owner — which is what stops a later registration of the same id from inheriting one.\n      return pending.get(approvalId)?.owner\n    },\n  }\n}\n"],"mappings":";;;;AAgCA,IAAM,YAAY;AASX,SAAS,iBAAmC,KAAa,SAAqB;AACnF,QAAM,OAAO,uBAAO,IAAI,YAAY,GAAG;AACvC,QAAM,OAAO;AAEb,QAAM,WAAW,KAAK,IAAI;AAC1B,MAAI,aAAa,OAAW,QAAO;AAEnC,QAAM,UAAU,QAAQ;AACxB,OAAK,IAAI,IAAI;AACb,SAAO;AACT;;;ACuDA,IAAM,mBAAyC;AAAA,EAC7C;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,UAAU;AAAA,EACZ;AACF;AAYA,SAAS,aAAmC;AAC1C,SAAO,iBAAiB,qBAAqB,MAAM,CAAC,GAAG,gBAAgB,CAAC;AAC1E;AAUA,IAAM,YAAY,oBAAI,IAAY;AAsElC,SAAS,SACP,MACA,KACA,SACM;AACN,MAAI,UAAU,IAAI,KAAK,IAAI,EAAG;AAC9B,YAAU,IAAI,KAAK,IAAI;AACvB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,OAAO,sBAAsB,KAAK,IAAI,KAAK,GAAG,YAAY,MAAM,YAAY,UAAU,IAAI,CAAC;AACjG,MAAI,SAAS,SAAU,SAAQ,SAAS,IAAI;AAAA,MAIvC,SAAQ,KAAK,IAAI;AACxB;AAQA,SAAS,UAAU,MAAkC;AACnD,MAAI,KAAK,eAAe,OAAW,QAAO,KAAK;AAC/C,QAAM,WAAW,QAAQ,IAAI,KAAK,UAAU;AAC5C,SAAO,aAAa,UAAa,SAAS,SAAS,IAAI,WAAW,KAAK;AACzE;AAaA,SAAS,WACP,SACA,YACgC;AAChC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AACjC,SAAO,WAAW,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACjD;AASA,SAAS,iBAAiB,SAAiD;AACzE,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAaA,SAAS,YACP,UACA,SACA,YACQ;AACR,QAAM,UAAU,WAAW;AAAA,IACzB,CAAC,MACC,EAAE,YAAY,QACd,EAAE,SAAS,SAAS,QACpB,EAAE,WAAW,WACZ,QAAQ,IAAI,EAAE,MAAM,KAAK,IAAI,SAAS;AAAA,EAC3C;AACA,MAAI,SAAS,WAAW,OAAW,QAAO;AAC1C,SACE,aAAa,QAAQ,IAAI,IAAI,OAAO,yBAAyB,QAAQ,IAAI,KACrE,QAAQ,MAAM,gBAAgB,QAAQ,IAAI;AAElD;AAKA,SAAS,gBAAgB,MAAwD;AAC/E,SAAO,KAAK,WAAW;AACzB;AA+BA,IAAM,kBAAkB;AA6BxB,SAAS,0BACP,SACA,SACgC;AAChC,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AAEjC,aAAW,UAAU,SAAS;AAC5B,UAAM,UAAU,uBAAuB,MAAM;AAC7C,QAAI,YAAY,OAAW;AAG3B,QAAI,QAAQ,SAAS,UAAU,EAAE,QAAQ,WAAW,CAAC,GAAG,SAAS,MAAM,EAAG;AAC1E,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,GAAI,QAAQ,QAAQ,SAAS,IAAI,EAAE,QAAQ,QAAQ,QAAQ,CAAC,EAAE,IAAI,CAAC;AAAA,MACnE,SAAS,QAAQ;AAAA;AAAA;AAAA,MAGjB,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,uBAAuB,QAAkD;AAChF,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAY;AAClB,MAAI,UAAU,SAAS,iBAAkB,QAAO;AAChD,QAAM,UAAU,UAAU;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,KAAM,QAAO;AAC5D,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY,SAAU,QAAO;AAChF,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,EAAG,QAAO;AAC1C,SAAO;AACT;AAeO,SAAS,gBAAgB,SAAkB,SAA4C;AAC5F,QAAM,SAAS,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGvE,QAAM,WACJ,YAAY,SACR,SACC,WAAW,SAAS,MAAM,KAAK,0BAA0B,SAAS,SAAS,OAAO;AACzF,MAAI,aAAa,UAAa,YAAY,QAAW;AACnD,QAAI,SAAS,WAAW,QAAW;AACjC,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,iBAAiB,SAAS,UAAU,QAAQ,EAAE;AAAA,IACtF;AACA,UAAM,SAAS,QAAQ,IAAI,SAAS,MAAM;AAC1C,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,SAAS,UAAU,QAAQ,EAAE;AAAA,IACrE;AAOA,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,wBAAwB,SAAS,IAAI,UAAU,SAAS,MAAM,oBACtE,SAAS,MAAM,GAAG,YAAY,UAAU,SAAS,MAAM,CAAC;AAAA,IACnE;AAAA,EACF;AAcA,QAAM,qBAAqB,aAAa,SAAY,iBAAiB,OAAO,IAAI;AAChF,MAAI,uBAAuB,QAAW;AACpC,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,OAAO,CAAC,wBAAwB,kBAAkB,qDACxC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,gDACf,kBAAkB;AAAA,IACpE;AAAA,EACF;AAIA,QAAM,eAAe,OAAO,OAAO,eAAe;AAElD,aAAW,QAAQ,cAAc;AAC/B,UAAM,SAAS,QAAQ,IAAI,KAAK,MAAM;AACtC,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,MAAM,mBAAmB,OAAO;AACzC,aAAO;AAAA,QACL,MAAM,KAAK;AAAA,QACX;AAAA,QACA,SAAS,UAAU,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAQA,QAAM,UAAU,aAAa,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM;AAC7D,QAAM,IAAI;AAAA,IACR,6DAA6D,OAAO;AAAA,EAEtE;AACF;;;ACpYO,SAAS,sBAAwC;AAMtD,SAAO,iBAAiB,qBAAqB,MAAM,gCAAgC,CAAC;AACtF;AAEO,SAAS,kCAAoD;AAClE,QAAM,UAAU,oBAAI,IAAqB;AAEzC,SAAO;AAAA,IACL,SAAS,YAAY,MAAM;AACzB,aAAO,IAAI,QAA0B,CAAC,YAAY;AAChD,cAAM,SAAS,CAAC,aAAqC;AACnD,gBAAM,QAAQ,QAAQ,IAAI,UAAU;AACpC,cAAI,CAAC,MAAO;AACZ,uBAAa,MAAM,KAAK;AACxB,kBAAQ,OAAO,UAAU;AACzB,kBAAQ,QAAQ;AAAA,QAClB;AAEA,cAAM,QAAQ,WAAW,MAAM;AAC7B,iBAAO;AAAA,YACL,UAAU,KAAK,cAAc;AAAA,YAC7B,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,YAKX,QAAQ,sBAAsB,OAAO,KAAK,SAAS,CAAC,oBAAoB,KAAK,SAAS;AAAA,UACxF,CAAC;AAAA,QACH,GAAG,KAAK,SAAS;AACjB,cAAM,OAAwB;AAAA,UAC5B;AAAA,UACA,UAAU,KAAK;AAAA,UACf,UAAU,KAAK;AAAA,UACf,WAAW,KAAK,IAAI,IAAI,KAAK;AAAA,UAC7B,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,QAClF;AACA,gBAAQ,IAAI,YAAY;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QAC1D,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,YAAY,UAAU;AAC5B,YAAM,QAAQ,QAAQ,IAAI,UAAU;AACpC,UAAI,CAAC,MAAO,QAAO;AAEnB,YAAM,OAAO,OAAO,aAAa,YAAY,EAAE,UAAU,SAAS,IAAI,QAAQ;AAC9E,aAAO;AAAA,IACT;AAAA,IACA,OAAO;AACL,aAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAChD;AAAA,IACA,QAAQ,YAAY;AAGlB,aAAO,QAAQ,IAAI,UAAU,GAAG;AAAA,IAClC;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/server/_internal/process-singleton.ts","../src/server/agent/provider-resolver.ts","../src/server/agent/approval-registry.ts"],"sourcesContent":["/**\n * One object per PROCESS, whatever the bundler did to the module holding it.\n *\n * ## The defect this exists to remove\n *\n * A module-level `let x` gives one instance per **module instance**, and a bundler is free to place\n * the same source in more than one chunk. When it does, each chunk gets its own `x` and any state\n * written through one is invisible through the other.\n *\n * Measured in this repository's own `dist` (usetheokit/theokit#401) by grepping the built chunks for\n * each module's marker: `provider-resolver` lands in two chunks, and `approval-registry` in two.\n * Neither copy is redundant — one of the provider chunks is tree-shaken to `resolveProvider` and\n * does not carry `resetProviderRegistry` at all, which is precisely how the halves diverge: an\n * application calling `registerProvider` — public API, with a documented self-hosting example —\n * mutated the array in one chunk while `theokit start` resolved against the array in the other.\n *\n * The second is worse in kind, because `approval-registry.ts` states the requirement in its own\n * source: *\"the approval a request awaits and the approval the route resolves MUST be the same\n * object, so a single instance per process is not a convenience but a correctness requirement.\"* A\n * chunk boundary can break that silently, and the symptom would be a HITL pause that never resumes.\n *\n * ## Why `globalThis` and not better chunking\n *\n * Chunking is a bundler heuristic that changes between versions and with the shape of the import\n * graph. A fix that depends on tsup continuing to place this module in exactly one chunk is a fix\n * that holds until someone adds an import. `Symbol.for` gives a key that is equal across every\n * module instance in the realm, so identity stops depending on the build at all.\n *\n * @internal\n */\n\n/** Namespaced so a key cannot collide with an unrelated global. */\nconst NAMESPACE = 'theokit.singleton.'\n\n/**\n * The object registered under `key`, creating it with `factory` the first time.\n *\n * `factory` runs at most once per process. A later call with the same key returns what the first\n * call built and never replaces it — replacing it is the same defect wearing a different hat, since\n * two callers would again hold different objects.\n */\nexport function processSingleton<T extends object>(key: string, factory: () => T): T {\n  const slot = Symbol.for(NAMESPACE + key)\n  const host = globalThis as unknown as Record<symbol, T | undefined>\n\n  const existing = host[slot]\n  if (existing !== undefined) return existing\n\n  const created = factory()\n  host[slot] = created\n  return created\n}\n","import { processSingleton } from '../_internal/process-singleton.js'\n\n/**\n * Provider Resolver — Strategy + Registry pattern (FAANG-grade).\n *\n * Inspiration: Dapr Conversation Registry (`dapr/pkg/components/conversation/registry.go`)\n * + Encore Manager provider array (`encore/runtimes/go/pubsub/manager_internal.go`).\n *\n * Principle: provider routing is the FRAMEWORK's responsibility, not the consumer's — but the\n * consumer still gets to SAY which provider it wants, and it says so in the model id.\n *\n * `provider/model` is the convention every agent in this ecosystem already writes\n * (`anthropic/claude-sonnet-4-6`, `openrouter/anthropic/claude-haiku-4.5`), and it is the one the\n * SDK routes on. Until theokit#326 this resolver ignored it entirely and picked by env-var\n * priority, so an agent that declared `anthropic/...` was handed an OpenRouter key whenever one\n * happened to be present — and every turn failed with `auth_failed (HTTP 401)` against a provider\n * nobody asked for. The declared provider now wins; priority is the fallback for a bare model id.\n *\n * Wire protocol: OpenAI Chat Completions (universal — implemented by every\n * os providers: OpenRouter, Groq, Mistral, Together, Anthropic via proxy, etc).\n *\n * Resolution by priority (FIRST match wins):\n *   1. OPENROUTER_API_KEY → baseUrl=openrouter.ai (multi-model gateway)\n *   2. OPENAI_API_KEY     → baseUrl=api.openai.com\n *   3. ANTHROPIC_API_KEY  → direct Anthropic (Messages API, not OpenAI-compat)\n *\n * Escape hatch: an explicit `options.apiKey` OVERRIDES auto-resolution\n * (the consumer can force a specific provider if it wants to).\n */\n\n/**\n * Provider configuration descriptor — Registry entry shape.\n *\n * @public\n */\nexport interface ProviderDescriptor {\n  /** Stable name used internally — not exposed on the wire. */\n  name: string\n  /**\n   * Environment variable that holds the API key for this provider.\n   *\n   * **Absent means the provider needs no credential** — a model running on the developer's own\n   * machine has nothing to authenticate against. Such a provider is reachable ONLY when a model id\n   * names it (`ollama/llama3.2`); it never participates in the priority walk, because the walk\n   * reads \"this variable is set\" as \"a human configured this provider\", and a keyless entry offers\n   * no equivalent signal. Including it would route every bare model id to localhost the moment no\n   * cloud key was set (usetheokit/theokit#407).\n   */\n  envKey?: string\n  /** Base URL for the provider's OpenAI-compatible (or native) API. */\n  baseUrl: string\n  /**\n   * Environment variable that OVERRIDES {@link baseUrl} when set.\n   *\n   * Scoped honestly: every caller inside this framework takes `.apiKey` from the resolved provider\n   * and discards `.baseUrl` (`cli/commands/start/handlers.ts`, `vite-plugin/api-middleware.ts`,\n   * `cli/commands/agent.ts`), so the endpoint a request actually reaches is chosen by the SDK, from\n   * its own profile — which reads `OLLAMA_HOST` itself. This field therefore does not redirect\n   * traffic today.\n   *\n   * It exists so that the `baseUrl` this function REPORTS agrees with where the request goes, for\n   * the consumers that read it — `resolveProvider` is public API, and a reported endpoint that\n   * contradicts the real one is a debugging trap rather than a harmless inaccuracy.\n   */\n  baseUrlEnv?: string\n  /**\n   * True when this provider is a GATEWAY — it serves other providers' catalogs under their own\n   * model ids, reachable by prefixing its name (`openrouter/openai/gpt-4o-mini`).\n   *\n   * It changes nothing about resolution. It exists so the refusal below can name a model id that\n   * would work instead of only the variable that is missing (#554): a scaffold shipping\n   * `openai/gpt-4o-mini` and an `.env.example` asking for `OPENROUTER_API_KEY` produced an error\n   * naming `OPENAI_API_KEY` — the one key the reader was never told to get — while the key they had\n   * serves that exact id through the gateway.\n   *\n   * Deliberately NOT a licence to substitute. Every caller here takes `.apiKey` and discards\n   * `.baseUrl`; the SDK picks the endpoint from the model id (measured: `openai/gpt-4o-mini` →\n   * `api.openai.com`, `openrouter/openai/gpt-4o-mini` → `openrouter.ai`). Handing an OpenRouter key\n   * to a request bound for OpenAI is #326 exactly, so the caller changes the id and the routing\n   * follows — the framework does not change it for them.\n   */\n  gateway?: boolean\n  /** Resolution priority (lower = higher priority). FIRST match wins. */\n  priority: number\n}\n\n/**\n * Resolved provider configuration — output of `resolveProvider()`.\n *\n * @public\n */\nexport interface ResolvedProvider {\n  name: string\n  apiKey: string\n  baseUrl: string\n}\n\n/**\n * Default provider registry. Order = priority (first = highest).\n *\n * Adding a new provider:\n *   1. Append entry below (or register via `registerProvider()`).\n *   2. Set `envKey` matching the user's env var convention.\n *   3. Set `baseUrl` to the OpenAI-compat endpoint (or native if not compat).\n *   4. Provider name used in telemetry/logs only — never wire-exposed.\n */\nconst DEFAULT_REGISTRY: ProviderDescriptor[] = [\n  {\n    name: 'openrouter',\n    envKey: 'OPENROUTER_API_KEY',\n    baseUrl: 'https://openrouter.ai/api/v1',\n    gateway: true,\n    priority: 1,\n  },\n  {\n    name: 'openai',\n    envKey: 'OPENAI_API_KEY',\n    baseUrl: 'https://api.openai.com/v1',\n    priority: 2,\n  },\n  {\n    name: 'anthropic',\n    envKey: 'ANTHROPIC_API_KEY',\n    baseUrl: 'https://api.anthropic.com',\n    priority: 3,\n  },\n  {\n    // Mirrors the profile `@theokit/sdk` already ships for this provider — same default host, same\n    // override variable — so the two cannot disagree about where ollama is listening. The SDK is\n    // what dials it (see `baseUrlEnv`); this entry's job is to stop the resolver from rejecting the\n    // model before the SDK is ever reached. No `envKey`: see that field's doc comment for why the\n    // absence also keeps this entry out of the priority walk.\n    name: 'ollama',\n    baseUrl: 'http://localhost:11434',\n    baseUrlEnv: 'OLLAMA_HOST',\n    priority: 100,\n  },\n]\n\n/**\n * Runtime registry — copy of DEFAULT_REGISTRY mutable via registerProvider().\n * Sorted by priority on every resolve (stable, O(n log n) — n <= ~10 providers).\n *\n * Held per PROCESS rather than per module instance (usetheokit/theokit#401). As a module-level\n * `const` it was one array per chunk, and the bundler emits this module into two of them: an\n * application calling `registerProvider` mutated one array while `theokit start` resolved against\n * another, so the call had no effect and the resulting error listed the defaults while the\n * registered provider sat in an object nobody read.\n */\nfunction registryOf(): ProviderDescriptor[] {\n  return processSingleton('provider-registry', () => [...DEFAULT_REGISTRY])\n}\n\n/**\n * Providers already announced, so a boot line does not become a per-request line.\n *\n * theokit#326 — resolution was silent on success. `resolveProvider` returns `{ name, apiKey,\n * baseUrl }` and every call site consumes only the key, so an operator could only learn which\n * provider was selected from an error message: exactly when it has already failed, and never in\n * the case that hurts most — a stale key that resolves cleanly and 401s at the provider.\n */\nconst announced = new Set<string>()\n\n/** Test-only reset, so announcement state does not leak between cases. @public */\nexport function resetProviderAnnouncements(): void {\n  announced.clear()\n}\n\n/** Where the announcement goes, and what it may contain. @public */\nexport interface ResolveOptions {\n  /** Receives one line per provider, at most once. NEVER receives the key. */\n  announce?: (line: string) => void\n  /**\n   * The plugins the agent declared (`compiled.plugins`), consulted for a `model-provider` one when\n   * this project's registry does not know the model's prefix (#579).\n   *\n   * Absent ⇒ registry-only, byte-unchanged. This is what keeps `.plugins(Provider.builtins())`\n   * meaning something at resolution time without making every SDK builtin nameable by every app.\n   */\n  plugins?: readonly unknown[]\n}\n\n/**\n * Register a new provider (Registry pattern — runtime extension point).\n * Useful for self-hosted endpoints or custom providers without touching theokit src.\n *\n * @example\n * registerProvider({\n *   name: 'self-hosted',\n *   envKey: 'SELF_HOSTED_API_KEY',\n *   baseUrl: 'https://llm.internal.acme.com/v1',\n *   priority: 0, // highest priority\n * })\n *\n * @public\n */\nexport function registerProvider(descriptor: ProviderDescriptor): void {\n  // Idempotent — replace existing by name.\n  const registry = registryOf()\n  const idx = registry.findIndex((p) => p.name === descriptor.name)\n  if (idx >= 0) registry[idx] = descriptor\n  else registry.push(descriptor)\n}\n\n/**\n * Reset registry to DEFAULT_REGISTRY (test-only / dev escape hatch).\n *\n * @public\n */\nexport function resetProviderRegistry(): void {\n  const registry = registryOf()\n  registry.length = 0\n  registry.push(...DEFAULT_REGISTRY)\n}\n\n/**\n * Get current registry snapshot (read-only — inspection).\n *\n * @public\n */\nexport function listProviders(): readonly ProviderDescriptor[] {\n  return [...registryOf()].sort((a, b) => a.priority - b.priority)\n}\n\n/**\n * Says which provider was selected, once.\n *\n * Carries the provider, HOW it was chosen, and the variable the credential came from — never the\n * credential. Which env var holds it is what an operator needs to fix a mis-selection; the value\n * is what a log must never hold.\n */\nfunction announce(\n  desc: ProviderDescriptor,\n  how: 'declared by the model' | 'by env priority',\n  options: ResolveOptions | undefined,\n): void {\n  if (announced.has(desc.name)) return\n  announced.add(desc.name)\n  const source = desc.envKey ?? 'none (this provider takes no credential)'\n  const line = `[theokit] provider=${desc.name} (${how}) source=${source} baseUrl=${baseUrlOf(desc)}`\n  if (options?.announce) options.announce(line)\n  // `warn` rather than `info` because the repo's lint rule allows only `warn`/`error` — and this\n  // line is closer to a warning in spirit anyway: it is the one chance an operator gets to notice\n  // that the provider serving their agents is not the one they expected.\n  else console.warn(line)\n}\n\n/**\n * Where this provider is listening, after any environment override.\n *\n * One function so the announcement line and the resolved config can never name different hosts —\n * an operator reading a log to find out where requests went must be reading the truth.\n */\nfunction baseUrlOf(desc: ProviderDescriptor): string {\n  if (desc.baseUrlEnv === undefined) return desc.baseUrl\n  const override = process.env[desc.baseUrlEnv]\n  return override !== undefined && override.length > 0 ? override : desc.baseUrl\n}\n\n/**\n * The provider a model id declares, or `undefined` when it declares none.\n *\n * `provider/model` and `gateway/provider/model` both resolve on the FIRST segment: a gateway is a\n * provider from the framework's point of view (it holds the credential), and everything after it\n * is the upstream namespace the gateway itself routes on.\n *\n * A bare id (`gpt-4o-mini`, `qwen2.5:3b`) declares nothing, and an unregistered prefix is treated\n * the same way rather than as an error — a project may legitimately point a custom id at a\n * registered provider's endpoint, and refusing it here would break that before it reached the SDK.\n */\nfunction providerOf(\n  modelId: string | undefined,\n  registered: readonly ProviderDescriptor[],\n): ProviderDescriptor | undefined {\n  const prefix = declaredPrefixOf(modelId)\n  if (prefix === undefined) return undefined\n  return registered.find((p) => p.name === prefix)\n}\n\n/**\n * The provider name a model id declares, registered or not.\n *\n * Split out of {@link providerOf} because the two questions differ exactly where the error message\n * used to go wrong: \"which registered provider is this?\" answers `undefined` both for a bare id and\n * for `groq/…`, and the resolver needs to tell those apart to say something true about the second.\n */\nfunction declaredPrefixOf(modelId: string | undefined): string | undefined {\n  if (modelId === undefined) return undefined\n  const slash = modelId.indexOf('/')\n  if (slash <= 0) return undefined\n  return modelId.slice(0, slash)\n}\n\n/**\n * The rest of the refusal: how to reach this model with a credential that IS present.\n *\n * A credentialed gateway serves the declared provider's catalog under the same id, so prefixing it\n * turns an unreachable model into a reachable one — and that string is what the reader needs, not\n * the abstract advice to \"change the prefix\". When no gateway is credentialed the sentence stays\n * exactly as it was: naming a gateway with no key would trade one dead end for another.\n *\n * A gateway is never offered for a model already routed through one — `openrouter/openrouter/…` is\n * not a thing — which is what excluding `declared` itself accomplishes.\n */\nfunction gatewayHint(\n  declared: ProviderDescriptor,\n  modelId: string,\n  registered: readonly ProviderDescriptor[],\n): string {\n  const gateway = registered.find(\n    (p) =>\n      p.gateway === true &&\n      p.name !== declared.name &&\n      p.envKey !== undefined &&\n      (process.env[p.envKey] ?? '').length > 0,\n  )\n  if (gateway?.envKey === undefined) return `, or change the model's provider prefix`\n  return (\n    `, or use \"${gateway.name}/${modelId}\" to route it through ${gateway.name} ` +\n    `(${gateway.envKey} is set, and ${gateway.name} serves this model id)`\n  )\n}\n\n/** A provider that authenticates — the only kind the priority walk may select. */\ntype CredentialedProvider = ProviderDescriptor & { envKey: string }\n\nfunction takesCredential(desc: ProviderDescriptor): desc is CredentialedProvider {\n  return desc.envKey !== undefined\n}\n\n/**\n * Resolve the provider for a model.\n *\n * When `modelId` declares a registered provider (`anthropic/…`), THAT provider's key is\n * required — no substitution. Otherwise the registry is walked by priority, first match wins.\n *\n * @returns ResolvedProvider with apiKey + baseUrl + name\n * @throws Error if NO provider env var is set (actionable message)\n *\n * @public\n */\n/**\n * What a keyless provider reports as its key.\n *\n * This was `''` until #501, on the reasoning that an empty string is the honest value for a\n * provider that needs no credential. The reasoning was sound and the value was wrong: the SDK's\n * `createLocalAgent` calls `resolveApiKey`, which treats `''` as ABSENT, falls back to\n * `THEOKIT_API_KEY` — which nobody sets for a local model — and throws `missing_api_key` before it\n * ever looks at the provider. So #407 opened the registry door and every keyless provider,\n * including the builtin `ollama`, still could not serve a turn.\n *\n * `'local'` is the SDK's own sentinel (`LOCAL_RUNTIME_MOCK_KEY`, `internal/auth/api-key-validator`).\n * It is not a placeholder credential and does not become one: `validateApiKeyShape` short-circuits\n * on it, and `mergeExplicitApiKey` excludes it from the credential pools, so it never reaches a\n * provider as an `authorization` header. That was the objection the old comment raised against any\n * non-empty value, and it is the reason this specific value is the one that answers it — measured\n * against @theokit/sdk 4.52.1, where `apiKey: ''` throws `missing_api_key` and `apiKey: 'local'`\n * builds the agent.\n */\nconst KEYLESS_API_KEY = 'local'\n\n/**\n * The provider a MODEL-PROVIDER PLUGIN THE AGENT DECLARED serves `modelId` with (#579).\n *\n * ## Why the agent's plugins and not the SDK's catalogue\n *\n * The first version of this asked `Provider.forModel` — the SDK's global builtin lookup — and that\n * is wrong in a way the suite caught immediately: `tests/unit/unregistered-prefix-is-refused-not-\n * rerouted.test.ts` uses `openai-chatgpt/gpt-5.4` as its example of a prefix that MUST be refused\n * (#503), because a turn must never succeed against a provider nobody named. Consulting the\n * catalogue makes every one of the SDK's 44 builtins nameable by any app, whether or not it asked\n * for them — the exact permissiveness #503 exists to forbid, reintroduced one level down.\n *\n * `.plugins(Provider.builtins())` IS the app naming them. So the question is not \"does the SDK know\n * this prefix\" but \"did this agent declare a provider that serves it\", and the answer is already in\n * `compiled.plugins`, which the caller passes in. An app that declared nothing keeps getting the\n * refusal, unchanged.\n *\n * ## The shape it reads\n *\n * A `model-provider` plugin carries `profile: { name, envVars, baseUrl }`. `envVars[0]` is the\n * credential when the profile names one; naming none means the provider does not authenticate by\n * environment — Codex refreshes OAuth per request inside the profile's own `transform.fetch` — and\n * that is the keyless class `ProviderDescriptor.envKey` already describes for `ollama` (#407).\n *\n * Structural, never imported: `@theokit/sdk` is an optional peer, and this module must keep\n * resolving its own four entries without it. The plugins arrive as `unknown` and are narrowed here.\n */\nfunction declaredPluginProviderFor(\n  modelId: string,\n  plugins: readonly unknown[] | undefined,\n): ProviderDescriptor | undefined {\n  if (plugins === undefined) return undefined\n  const prefix = declaredPrefixOf(modelId)\n  if (prefix === undefined) return undefined\n\n  for (const plugin of plugins) {\n    const profile = modelProviderProfileOf(plugin)\n    if (profile === undefined) continue\n    // The profile's own name, plus the aliases it declares — the SDK routes on both, and reading\n    // only `name` would refuse `codex/...` for a profile that lists it as an alias of itself.\n    if (profile.name !== prefix && !(profile.aliases ?? []).includes(prefix)) continue\n    // `authType`, not the length of `envVars` — see the docblock above (#585).\n    const needsCredential = profile.authType !== 'none' && profile.envVars.length > 0\n    return {\n      name: profile.name,\n      ...(needsCredential ? { envKey: profile.envVars[0] } : {}),\n      baseUrl: profile.baseUrl,\n      // Last in the priority walk, and reachable only through the declared branch anyway: a plugin\n      // provider must never win a BARE model id away from an entry this project declares.\n      priority: Number.MAX_SAFE_INTEGER,\n    }\n  }\n  return undefined\n}\n\n/** The `profile` of a value that is a model-provider plugin, or `undefined` for anything else. */\nfunction modelProviderProfileOf(plugin: unknown): ProviderProfileLike | undefined {\n  if (typeof plugin !== 'object' || plugin === null) return undefined\n  const candidate = plugin as { kind?: unknown; profile?: unknown }\n  if (candidate.kind !== 'model-provider') return undefined\n  const profile = candidate.profile\n  if (typeof profile !== 'object' || profile === null) return undefined\n  const shape = profile as Partial<ProviderProfileLike>\n  if (typeof shape.name !== 'string' || typeof shape.baseUrl !== 'string') return undefined\n  if (!Array.isArray(shape.envVars)) return undefined\n  return shape as ProviderProfileLike\n}\n\n/**\n * The fields of the SDK's `ProviderProfile` this module reads.\n *\n * Structural rather than imported: importing the SDK's type would make an optional peer a\n * build-time dependency of a module that must work without it.\n */\ninterface ProviderProfileLike {\n  name: string\n  envVars: readonly string[]\n  baseUrl: string\n  aliases?: readonly string[]\n  /**\n   * How the provider authenticates. `'none'` means it does not, whatever `envVars` names (#585).\n   *\n   * Optional here although the SDK's own type requires it: this module narrows a plugin from\n   * `unknown`, so a value arriving without the field is representable and must not be assumed.\n   */\n  authType?: string\n}\n\nexport function resolveProvider(modelId?: string, options?: ResolveOptions): ResolvedProvider {\n  const sorted = [...registryOf()].sort((a, b) => a.priority - b.priority)\n\n  // The local registry first, the SDK's builtins as the fallback for a prefix it does not know.\n  const declared =\n    modelId === undefined\n      ? undefined\n      : (providerOf(modelId, sorted) ?? declaredPluginProviderFor(modelId, options?.plugins))\n  if (declared !== undefined && modelId !== undefined) {\n    if (declared.envKey === undefined) {\n      announce(declared, 'declared by the model', options)\n      return { name: declared.name, apiKey: KEYLESS_API_KEY, baseUrl: baseUrlOf(declared) }\n    }\n    const apiKey = process.env[declared.envKey]\n    if (apiKey && apiKey.length > 0) {\n      announce(declared, 'declared by the model', options)\n      return { name: declared.name, apiKey, baseUrl: baseUrlOf(declared) }\n    }\n    // Deliberately NOT falling back to another provider's key. Silently substituting one is how\n    // theokit#326 produced a 401 nobody could attribute: the request went somewhere the agent\n    // never named. Say which variable is missing and stop.\n    //\n    // #554 — but say it usefully. \"change the model's provider prefix\" is true and unactionable:\n    // it does not say which prefix, and the reader may already hold a key that serves this model.\n    throw new Error(\n      `Model \"${modelId}\" declares provider \"${declared.name}\", but ${declared.envKey} is not set. ` +\n        `Set ${declared.envKey}${gatewayHint(declared, modelId, sorted)}.`,\n    )\n  }\n\n  // A prefix the registry does not know is a CHOICE, not a silence — refuse before the walk.\n  //\n  // `providerOf` returns `undefined` for an unregistered prefix, which is indistinguishable from a\n  // bare model id, so the priority walk below used to claim the turn and the \"not registered\" error\n  // further down became unreachable for anyone holding a key. The visible cost was a confusing\n  // message; the real one was a turn that SUCCEEDED against a provider nobody named — different\n  // endpoint, different account billed, prompt delivered to a vendor the operator had routed away\n  // from, announced only by a `console.warn` that fires once per process (#503).\n  //\n  // #326 settled the principle for a registered provider: declared wins, priority is the fallback\n  // for a bare model id. This extends it to the case #326 did not reach — an unregistered prefix is\n  // not a bare model id either.\n  const unregisteredPrefix = declared === undefined ? declaredPrefixOf(modelId) : undefined\n  if (unregisteredPrefix !== undefined) {\n    throw new Error(\n      `Model \"${String(modelId)}\" declares provider \"${unregisteredPrefix}\", which is not registered. ` +\n        `Registered providers: ${sorted.map((p) => p.name).join(', ')}. ` +\n        `Register it with registerProvider({ name: '${unregisteredPrefix}', … }), or use a registered prefix.`,\n    )\n  }\n\n  // Only providers that take a credential. A keyless entry is reachable exclusively through the\n  // declared branch above; see `ProviderDescriptor.envKey` for why the walk cannot include it.\n  const credentialed = sorted.filter(takesCredential)\n\n  for (const desc of credentialed) {\n    const apiKey = process.env[desc.envKey]\n    if (apiKey && apiKey.length > 0) {\n      announce(desc, 'by env priority', options)\n      return {\n        name: desc.name,\n        apiKey,\n        baseUrl: baseUrlOf(desc),\n      }\n    }\n  }\n\n  // Nothing resolved, and the model id declared nothing — the unregistered-prefix case was refused\n  // above the walk, which is where it belongs (#503). This message is for the bare-id case only.\n  //\n  // It used to live here and it was the right message in the wrong place: reachable exactly when\n  // the operator had no keys at all, which is the case that needed it least (usetheokit/theokit#407\n  // is why the message exists; #503 is why it moved).\n  const envKeys = credentialed.map((p) => p.envKey).join(' OR ')\n  throw new Error(\n    `No LLM provider API key found in environment. Set one of: ${envKeys}. ` +\n      `Get a free OpenRouter key at https://openrouter.ai/keys (recommended — one key, many models).`,\n  )\n}\n\n/**\n * Try to resolve — does NOT throw. Returns null if no provider available.\n * Useful for graceful degradation (e.g., mock mode).\n *\n * @public\n */\nexport function tryResolveProvider(modelId?: string): ResolvedProvider | null {\n  try {\n    return resolveProvider(modelId)\n  } catch {\n    return null\n  }\n}\n","/**\n * M4 (theokit-ai-first) — the in-process HITL approval registry.\n *\n * The HITL plugin's `awaitApproval` calls `register(approvalId)` and awaits the returned Promise\n * (this is what genuinely PAUSES the SDK run — the SDK `pre_tool_call` hook is awaited). The\n * approve route calls `resolve(approvalId, approved)` to settle it. A per-approval timeout settles\n * the Promise deterministically per the `@HumanInTheLoop` `onTimeout` policy so a hung approval\n * never leaks the paused stream.\n *\n * Single-process contract (ADR 0038 / plan Drawback 2): a multi-instance deploy needs a shared\n * registry — the interface is injectable so a durable impl (Redis, etc.) slots in without touching\n * the harness. We do NOT build a durable store now (YAGNI).\n */\n// The timeout policy vocabulary is owned by the `@HumanInTheLoop` decorator (DRY / G12) — reuse it\n// rather than re-declaring the union, so the two can never drift.\nimport type { TimeoutAction } from '@theokit/agents'\n\nimport { processSingleton } from '../_internal/process-singleton.js'\n\nexport interface RegisterOptions {\n  /** Milliseconds before the approval auto-settles per `onTimeout`. */\n  timeoutMs: number\n  /**\n   * What a timeout means. Only `'proceed'` auto-approves; `'abort'` and `'retry'` both deny — the\n   * registry does NOT implement retry semantics (a timed-out `'retry'` is a deny, not a re-prompt).\n   */\n  onTimeout: TimeoutAction\n  /** M14 — the gated tool name, surfaced by `list()` (optional; absent for legacy callers). */\n  toolName?: string\n  /** M14 — the approval question, surfaced by `list()` (optional). */\n  question?: string\n  /**\n   * Who the run belongs to — the `RouteSubject.id` admitted for it (B-016).\n   *\n   * Absent when the run had no identity to record, which is the `'public'` agent path:\n   * `admitAgentRequest` deliberately does not resolve a subject when the policy is absent or\n   * `'public'`, so there is nothing to attribute the approval to. Absent therefore means \"no owner\n   * was established\", never \"anyone\", and the caller must branch on the difference — a rule that\n   * refused when it is absent would start turning public agents away.\n   *\n   * Deliberately NOT surfaced by `list()`: that listing feeds a UI, and owner ids are identity.\n   */\n  owner?: string\n  /**\n   * M20 — an optional JSON-schema descriptor of the custom payload the approver may attach. Carried\n   * verbatim into `list()` + the `approval_required` event so the UI knows what to collect. Kept as\n   * a plain JSON object (not a live Zod schema) so the registry stays serializable and SDK-free.\n   */\n  payloadSchema?: Record<string, unknown>\n}\n\n/**\n * M20 — a settled HITL decision. `approved` is the allow/deny bit (backward-compatible with the\n * legacy boolean); `reason` + `payload` are the optional approver-attached extras that surface to\n * the model (on denial, via the veto message) and to the app/UI.\n */\nexport interface ApprovalDecision {\n  approved: boolean\n  reason?: string\n  payload?: unknown\n  /**\n   * What settled this, when it was not a person (usetheokit/theokit#393).\n   *\n   * Absent means the decision arrived through `resolve()` — a human, or whatever the application\n   * wired to that route. `'timeout'` means the window closed with nobody deciding and `onTimeout`\n   * was applied.\n   *\n   * The distinction is the whole point of a HITL gate: without it an expired approval and an\n   * explicit deny are byte-identical on the wire, and the sentence the caller gets — \"denied by\n   * human approver\" — asserts a fact that did not happen. It is marked on the ALLOW side too:\n   * `onTimeout: 'proceed'` permits the tool BECAUSE nobody answered, and recording that as a plain\n   * approval is the same fabrication with the opposite sign.\n   *\n   * One member rather than `timedOut: boolean`, because the question is what settled it; a second\n   * cause (a cancel, a shutdown) joins the union instead of adding another boolean.\n   */\n  settledBy?: 'timeout'\n}\n\n/** M14 — a pending approval as surfaced by {@link ApprovalRegistry.list}. */\nexport interface PendingApproval {\n  approvalId: string\n  toolName?: string\n  question?: string\n  /** Epoch millis when the pending approval auto-settles (registeredAt + timeoutMs). */\n  expiresAt: number\n  /** M20 — the declared custom-payload schema, if the gated tool declares one. */\n  payloadSchema?: Record<string, unknown>\n}\n\nexport interface ApprovalRegistry {\n  /**\n   * Register a pending approval; the returned Promise settles with the full {@link ApprovalDecision}\n   * on `resolve` or timeout (M20 — was a bare boolean pre-M20).\n   */\n  register(approvalId: string, opts: RegisterOptions): Promise<ApprovalDecision>\n  /**\n   * Settle a pending approval. Accepts a full {@link ApprovalDecision} OR a bare boolean (coerced to\n   * `{ approved }` — backward-compatible). Returns false if the id is unknown or already settled.\n   */\n  resolve(approvalId: string, decision: boolean | ApprovalDecision): boolean\n  /** M14 — list the currently-pending approvals (process-wide; single-process contract). */\n  list(): PendingApproval[]\n  /**\n   * Who owns the pending approval `approvalId`, or `undefined` (B-016).\n   *\n   * `undefined` covers three cases the caller treats identically — never registered, already\n   * settled, and registered without an owner — because in all three there is nothing to compare a\n   * caller against.\n   */\n  ownerOf(approvalId: string): string | undefined\n}\n\ninterface Pending {\n  settle: (decision: ApprovalDecision) => void\n  timer: ReturnType<typeof setTimeout>\n  info: PendingApproval\n  /** Held beside `info` rather than inside it, so `list()` cannot leak it (B-016). */\n  owner?: string\n}\n\n/**\n * The one process-wide registry the stream mount (`mountAgent`) and the approve route share.\n *\n * The in-process impl holds LIVE Promise resolvers in memory — the approval a request awaits and\n * the approval the route resolves MUST be the same object, so a single instance per process is not\n * a convenience but a correctness requirement. Lazily created; a durable/multi-instance deploy\n * swaps this accessor for a shared-store impl (ADR 0038 / plan Drawback 2) without touching callers.\n * Tests use {@link createInProcessApprovalRegistry} directly — never this singleton.\n */\nexport function getApprovalRegistry(): ApprovalRegistry {\n  // Per PROCESS, not per module instance (usetheokit/theokit#401). The paragraph above calls a\n  // single instance \"not a convenience but a correctness requirement\", and a module-level `let`\n  // does not deliver that: it gives one instance per MODULE INSTANCE, and this module is emitted\n  // into two chunks of the published bundle. A run awaiting an approval and the route resolving it\n  // could hold different objects, and the symptom would be a HITL pause that never resumes.\n  return processSingleton('approval-registry', () => createInProcessApprovalRegistry())\n}\n\nexport function createInProcessApprovalRegistry(): ApprovalRegistry {\n  const pending = new Map<string, Pending>()\n\n  return {\n    register(approvalId, opts) {\n      return new Promise<ApprovalDecision>((resolve) => {\n        const settle = (decision: ApprovalDecision): void => {\n          const entry = pending.get(approvalId)\n          if (!entry) return\n          clearTimeout(entry.timer)\n          pending.delete(approvalId)\n          resolve(decision)\n        }\n        // 'proceed' → allow on timeout; 'abort'/'retry' → deny on timeout.\n        const timer = setTimeout(() => {\n          settle({\n            approved: opts.onTimeout === 'proceed',\n            settledBy: 'timeout',\n            // Every value in this sentence was already here and none of it used to survive the\n            // settle. `onTimeout` is named because all three of its values reach this line and two\n            // of them deny — an operator who wrote `'retry'` and got a denial had nothing to read\n            // that mentioned retry.\n            reason: `no decision within ${String(opts.timeoutMs)} ms; onTimeout: '${opts.onTimeout}' was applied`,\n          })\n        }, opts.timeoutMs)\n        const info: PendingApproval = {\n          approvalId,\n          toolName: opts.toolName,\n          question: opts.question,\n          expiresAt: Date.now() + opts.timeoutMs,\n          ...(opts.payloadSchema !== undefined ? { payloadSchema: opts.payloadSchema } : {}),\n        }\n        pending.set(approvalId, {\n          settle,\n          timer,\n          info,\n          ...(opts.owner !== undefined ? { owner: opts.owner } : {}),\n        })\n      })\n    },\n    resolve(approvalId, decision) {\n      const entry = pending.get(approvalId)\n      if (!entry) return false\n      // M20 — coerce the legacy bare-boolean form to a decision object.\n      entry.settle(typeof decision === 'boolean' ? { approved: decision } : decision)\n      return true\n    },\n    list() {\n      return [...pending.values()].map((p) => p.info)\n    },\n    ownerOf(approvalId) {\n      // `settle` deletes the entry, so an approval that has been answered or timed out reports no\n      // owner — which is what stops a later registration of the same id from inheriting one.\n      return pending.get(approvalId)?.owner\n    },\n  }\n}\n"],"mappings":";;;;AAgCA,IAAM,YAAY;AASX,SAAS,iBAAmC,KAAa,SAAqB;AACnF,QAAM,OAAO,uBAAO,IAAI,YAAY,GAAG;AACvC,QAAM,OAAO;AAEb,QAAM,WAAW,KAAK,IAAI;AAC1B,MAAI,aAAa,OAAW,QAAO;AAEnC,QAAM,UAAU,QAAQ;AACxB,OAAK,IAAI,IAAI;AACb,SAAO;AACT;;;ACuDA,IAAM,mBAAyC;AAAA,EAC7C;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,MAAM;AAAA,IACN,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,UAAU;AAAA,EACZ;AACF;AAYA,SAAS,aAAmC;AAC1C,SAAO,iBAAiB,qBAAqB,MAAM,CAAC,GAAG,gBAAgB,CAAC;AAC1E;AAUA,IAAM,YAAY,oBAAI,IAAY;AAsElC,SAAS,SACP,MACA,KACA,SACM;AACN,MAAI,UAAU,IAAI,KAAK,IAAI,EAAG;AAC9B,YAAU,IAAI,KAAK,IAAI;AACvB,QAAM,SAAS,KAAK,UAAU;AAC9B,QAAM,OAAO,sBAAsB,KAAK,IAAI,KAAK,GAAG,YAAY,MAAM,YAAY,UAAU,IAAI,CAAC;AACjG,MAAI,SAAS,SAAU,SAAQ,SAAS,IAAI;AAAA,MAIvC,SAAQ,KAAK,IAAI;AACxB;AAQA,SAAS,UAAU,MAAkC;AACnD,MAAI,KAAK,eAAe,OAAW,QAAO,KAAK;AAC/C,QAAM,WAAW,QAAQ,IAAI,KAAK,UAAU;AAC5C,SAAO,aAAa,UAAa,SAAS,SAAS,IAAI,WAAW,KAAK;AACzE;AAaA,SAAS,WACP,SACA,YACgC;AAChC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AACjC,SAAO,WAAW,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACjD;AASA,SAAS,iBAAiB,SAAiD;AACzE,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,MAAI,SAAS,EAAG,QAAO;AACvB,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAaA,SAAS,YACP,UACA,SACA,YACQ;AACR,QAAM,UAAU,WAAW;AAAA,IACzB,CAAC,MACC,EAAE,YAAY,QACd,EAAE,SAAS,SAAS,QACpB,EAAE,WAAW,WACZ,QAAQ,IAAI,EAAE,MAAM,KAAK,IAAI,SAAS;AAAA,EAC3C;AACA,MAAI,SAAS,WAAW,OAAW,QAAO;AAC1C,SACE,aAAa,QAAQ,IAAI,IAAI,OAAO,yBAAyB,QAAQ,IAAI,KACrE,QAAQ,MAAM,gBAAgB,QAAQ,IAAI;AAElD;AAKA,SAAS,gBAAgB,MAAwD;AAC/E,SAAO,KAAK,WAAW;AACzB;AA+BA,IAAM,kBAAkB;AA6BxB,SAAS,0BACP,SACA,SACgC;AAChC,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,SAAS,iBAAiB,OAAO;AACvC,MAAI,WAAW,OAAW,QAAO;AAEjC,aAAW,UAAU,SAAS;AAC5B,UAAM,UAAU,uBAAuB,MAAM;AAC7C,QAAI,YAAY,OAAW;AAG3B,QAAI,QAAQ,SAAS,UAAU,EAAE,QAAQ,WAAW,CAAC,GAAG,SAAS,MAAM,EAAG;AAE1E,UAAM,kBAAkB,QAAQ,aAAa,UAAU,QAAQ,QAAQ,SAAS;AAChF,WAAO;AAAA,MACL,MAAM,QAAQ;AAAA,MACd,GAAI,kBAAkB,EAAE,QAAQ,QAAQ,QAAQ,CAAC,EAAE,IAAI,CAAC;AAAA,MACxD,SAAS,QAAQ;AAAA;AAAA;AAAA,MAGjB,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,uBAAuB,QAAkD;AAChF,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,YAAY;AAClB,MAAI,UAAU,SAAS,iBAAkB,QAAO;AAChD,QAAM,UAAU,UAAU;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,KAAM,QAAO;AAC5D,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY,SAAU,QAAO;AAChF,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,EAAG,QAAO;AAC1C,SAAO;AACT;AAsBO,SAAS,gBAAgB,SAAkB,SAA4C;AAC5F,QAAM,SAAS,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAGvE,QAAM,WACJ,YAAY,SACR,SACC,WAAW,SAAS,MAAM,KAAK,0BAA0B,SAAS,SAAS,OAAO;AACzF,MAAI,aAAa,UAAa,YAAY,QAAW;AACnD,QAAI,SAAS,WAAW,QAAW;AACjC,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,iBAAiB,SAAS,UAAU,QAAQ,EAAE;AAAA,IACtF;AACA,UAAM,SAAS,QAAQ,IAAI,SAAS,MAAM;AAC1C,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,UAAU,yBAAyB,OAAO;AACnD,aAAO,EAAE,MAAM,SAAS,MAAM,QAAQ,SAAS,UAAU,QAAQ,EAAE;AAAA,IACrE;AAOA,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,wBAAwB,SAAS,IAAI,UAAU,SAAS,MAAM,oBACtE,SAAS,MAAM,GAAG,YAAY,UAAU,SAAS,MAAM,CAAC;AAAA,IACnE;AAAA,EACF;AAcA,QAAM,qBAAqB,aAAa,SAAY,iBAAiB,OAAO,IAAI;AAChF,MAAI,uBAAuB,QAAW;AACpC,UAAM,IAAI;AAAA,MACR,UAAU,OAAO,OAAO,CAAC,wBAAwB,kBAAkB,qDACxC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,gDACf,kBAAkB;AAAA,IACpE;AAAA,EACF;AAIA,QAAM,eAAe,OAAO,OAAO,eAAe;AAElD,aAAW,QAAQ,cAAc;AAC/B,UAAM,SAAS,QAAQ,IAAI,KAAK,MAAM;AACtC,QAAI,UAAU,OAAO,SAAS,GAAG;AAC/B,eAAS,MAAM,mBAAmB,OAAO;AACzC,aAAO;AAAA,QACL,MAAM,KAAK;AAAA,QACX;AAAA,QACA,SAAS,UAAU,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAQA,QAAM,UAAU,aAAa,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,MAAM;AAC7D,QAAM,IAAI;AAAA,IACR,6DAA6D,OAAO;AAAA,EAEtE;AACF;;;AC7YO,SAAS,sBAAwC;AAMtD,SAAO,iBAAiB,qBAAqB,MAAM,gCAAgC,CAAC;AACtF;AAEO,SAAS,kCAAoD;AAClE,QAAM,UAAU,oBAAI,IAAqB;AAEzC,SAAO;AAAA,IACL,SAAS,YAAY,MAAM;AACzB,aAAO,IAAI,QAA0B,CAAC,YAAY;AAChD,cAAM,SAAS,CAAC,aAAqC;AACnD,gBAAM,QAAQ,QAAQ,IAAI,UAAU;AACpC,cAAI,CAAC,MAAO;AACZ,uBAAa,MAAM,KAAK;AACxB,kBAAQ,OAAO,UAAU;AACzB,kBAAQ,QAAQ;AAAA,QAClB;AAEA,cAAM,QAAQ,WAAW,MAAM;AAC7B,iBAAO;AAAA,YACL,UAAU,KAAK,cAAc;AAAA,YAC7B,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,YAKX,QAAQ,sBAAsB,OAAO,KAAK,SAAS,CAAC,oBAAoB,KAAK,SAAS;AAAA,UACxF,CAAC;AAAA,QACH,GAAG,KAAK,SAAS;AACjB,cAAM,OAAwB;AAAA,UAC5B;AAAA,UACA,UAAU,KAAK;AAAA,UACf,UAAU,KAAK;AAAA,UACf,WAAW,KAAK,IAAI,IAAI,KAAK;AAAA,UAC7B,GAAI,KAAK,kBAAkB,SAAY,EAAE,eAAe,KAAK,cAAc,IAAI,CAAC;AAAA,QAClF;AACA,gBAAQ,IAAI,YAAY;AAAA,UACtB;AAAA,UACA;AAAA,UACA;AAAA,UACA,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QAC1D,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,YAAY,UAAU;AAC5B,YAAM,QAAQ,QAAQ,IAAI,UAAU;AACpC,UAAI,CAAC,MAAO,QAAO;AAEnB,YAAM,OAAO,OAAO,aAAa,YAAY,EAAE,UAAU,SAAS,IAAI,QAAQ;AAC9E,aAAO;AAAA,IACT;AAAA,IACA,OAAO;AACL,aAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,IAChD;AAAA,IACA,QAAQ,YAAY;AAGlB,aAAO,QAAQ,IAAI,UAAU,GAAG;AAAA,IAClC;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-UZFOWYAQ.js → chunk-USN554EK.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   getApprovalRegistry
-} from "./chunk-YVHQ35RT.js";
+} from "./chunk-UETVDZBE.js";
 import {
   createWebRequestSource,
   dispatchCsrfWarn,
@@ -2633,4 +2633,4 @@ export {
   CsrfReadinessStore,
   applySecurityHeaders
 };
-//# sourceMappingURL=chunk-UZFOWYAQ.js.map
+//# sourceMappingURL=chunk-USN554EK.js.map

package/dist/cli/index.js

@@ -15,12 +15,12 @@ function cliVersion() {
 // src/cli/index.ts
 var cli = cac("theokit");
 cli.command("dev", "Start development server").option("--port <port>", "Port number").action(async (options) => {
-  const { devCommand } = await import("../dev-FUQFN7PQ.js");
+  const { devCommand } = await import("../dev-GQ2CDBW2.js");
   await devCommand({ port: options.port ? Number(options.port) : void 0 });
 });
 cli.command("build", "Build for production").option("--target <target>", "Deploy target (node, vercel, cloudflare)").action(async (options) => {
   try {
-    const { buildCommand } = await import("../build-TFH2T26B.js");
+    const { buildCommand } = await import("../build-CZAM7K6J.js");
     await buildCommand({ target: options.target });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -32,7 +32,7 @@ cli.command("build", "Build for production").option("--target <target>", "Deploy
 });
 cli.command("start", "Start production server").option("--port <port>", "Port number").action(async (options) => {
   try {
-    const { startCommand } = await import("../start-K4O5J7JA.js");
+    const { startCommand } = await import("../start-JEYOON64.js");
     await startCommand({ port: options.port ? Number(options.port) : void 0 });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -44,7 +44,7 @@ cli.command("start", "Start production server").option("--port <port>", "Port nu
 });
 cli.command("preview", "Build for production, then serve it \u2014 one step (B-030)").option("--port <port>", "Port number").option("--target <target>", "Deploy target (node, vercel, cloudflare)").action(async (options) => {
   try {
-    const { previewCommand } = await import("../preview-CCL7SKCG.js");
+    const { previewCommand } = await import("../preview-3TLURUAL.js");
     await previewCommand({
       port: options.port ? Number(options.port) : void 0,
       target: options.target
@@ -77,7 +77,7 @@ cli.command(
   "Run an agent in the terminal (stream + tool calls + approval)"
 ).action(async (name, message) => {
   try {
-    const { agentCommand } = await import("../agent-YNHEKPD6.js");
+    const { agentCommand } = await import("../agent-G525PHCO.js");
     const { sawError } = await agentCommand(name, message);
     if (sawError) process.exit(1);
   } catch (err) {
@@ -108,7 +108,7 @@ cli.command("agent sessions gc", "Collect old transcripts for this project (dry
 });
 cli.command("mcp <agent>", "Serve an agent as an MCP server over stdio (for desktop MCP clients)").action(async (agent) => {
   try {
-    const { mcpCommand } = await import("../mcp-7MSZDEKX.js");
+    const { mcpCommand } = await import("../mcp-W2UGY4II.js");
     await mcpCommand(agent);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);

package/dist/{dev-FUQFN7PQ.js → dev-GQ2CDBW2.js}

@@ -11,14 +11,14 @@ import {
 } from "./chunk-KTMQUYED.js";
 import {
   theoPluginAsync
-} from "./chunk-PGYYVOM3.js";
-import "./chunk-BAXPERIV.js";
+} from "./chunk-DVJRDY3H.js";
+import "./chunk-DRLYKXDD.js";
 import "./chunk-2CVV6CNN.js";
 import "./chunk-3PWQQWT6.js";
 import "./chunk-FDOOBTXJ.js";
 import "./chunk-47MM2JUK.js";
-import "./chunk-UZFOWYAQ.js";
-import "./chunk-YVHQ35RT.js";
+import "./chunk-USN554EK.js";
+import "./chunk-UETVDZBE.js";
 import "./chunk-L4TB6FXQ.js";
 import "./chunk-VV2VU3LJ.js";
 import "./chunk-5VLP3GQ2.js";
@@ -128,4 +128,4 @@ export {
   devCommand,
   startDevServer
 };
-//# sourceMappingURL=dev-FUQFN7PQ.js.map
+//# sourceMappingURL=dev-GQ2CDBW2.js.map

package/dist/index.js

@@ -8,11 +8,11 @@ import {
   scanRoutes,
   theoConfigSchema,
   theoPlugin
-} from "./chunk-UK2WVX5G.js";
+} from "./chunk-EB5TYC2Y.js";
 import "./chunk-7NRFZBAL.js";
 import "./chunk-SSYDEKWF.js";
 import "./chunk-Q3UE7WIM.js";
-import "./chunk-CY5WKIM5.js";
+import "./chunk-2BYN7WTW.js";
 import "./chunk-OIGJOYX6.js";
 import "./chunk-U3SPBLJF.js";
 import "./chunk-EYRWD2AB.js";
@@ -39,7 +39,7 @@ import "./chunk-V6Y2SMRG.js";
 import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
 import "./chunk-YOIVCCZT.js";
-import "./chunk-JI365DWM.js";
+import "./chunk-ICXXHV4V.js";
 import "./chunk-YSJOZEI6.js";
 import "./chunk-Z4PJMZLM.js";
 import "./chunk-UMNXCU3K.js";

package/dist/{internal-api-D4LIZ3S6.js → internal-api-G25P4TP2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-Q3UE7WIM.js";
 import {
   mountAgent
-} from "./chunk-CY5WKIM5.js";
+} from "./chunk-2BYN7WTW.js";
 import {
   CSP_REPORT_PATH,
   CsrfReadinessStore,
@@ -64,7 +64,7 @@ import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
 import {
   resolveProvider
-} from "./chunk-JI365DWM.js";
+} from "./chunk-ICXXHV4V.js";
 import "./chunk-YSJOZEI6.js";
 import {
   generateNonce
@@ -107,4 +107,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-D4LIZ3S6.js.map
+//# sourceMappingURL=internal-api-G25P4TP2.js.map

package/dist/{internal-api-HXKRFUXR.js → internal-api-UBBHEPVE.js}

@@ -16,10 +16,10 @@ import {
   handleCspReport,
   handleCsrfReadiness,
   mountAgent
-} from "./chunk-UZFOWYAQ.js";
+} from "./chunk-USN554EK.js";
 import {
   resolveProvider
-} from "./chunk-YVHQ35RT.js";
+} from "./chunk-UETVDZBE.js";
 import {
   dispatchControllerRequest,
   incomingMessageToHandlerRequest,
@@ -87,4 +87,4 @@ export {
   scanWebSocketRoutes,
   sendError
 };
-//# sourceMappingURL=internal-api-HXKRFUXR.js.map
+//# sourceMappingURL=internal-api-UBBHEPVE.js.map

package/dist/{mcp-7MSZDEKX.js → mcp-W2UGY4II.js}

@@ -2,12 +2,12 @@
 import "tsx/esm";
 import {
   createAgentSsrLoader
-} from "./chunk-4LQKAWZJ.js";
+} from "./chunk-F2LYXOHK.js";
 import {
   extractAppResources,
   handleMcpJsonRpc
 } from "./chunk-2CVV6CNN.js";
-import "./chunk-YVHQ35RT.js";
+import "./chunk-UETVDZBE.js";
 import {
   scanAgents
 } from "./chunk-5NNFO7R7.js";
@@ -75,4 +75,4 @@ async function mcpCommand(name, deps = {}) {
 export {
   mcpCommand
 };
-//# sourceMappingURL=mcp-7MSZDEKX.js.map
+//# sourceMappingURL=mcp-W2UGY4II.js.map

package/dist/{preview-CCL7SKCG.js → preview-3TLURUAL.js}

@@ -4,8 +4,8 @@ import "tsx/esm";
 // src/cli/commands/preview.ts
 async function defaultSteps() {
   const [{ buildCommand }, { startCommand }] = await Promise.all([
-    import("./build-TFH2T26B.js"),
-    import("./start-K4O5J7JA.js")
+    import("./build-CZAM7K6J.js"),
+    import("./start-JEYOON64.js")
   ]);
   return {
     build: (opts) => buildCommand(opts),
@@ -20,4 +20,4 @@ async function previewCommand(options = {}, steps) {
 export {
   previewCommand
 };
-//# sourceMappingURL=preview-CCL7SKCG.js.map
+//# sourceMappingURL=preview-3TLURUAL.js.map

package/dist/server/agent/index.js

@@ -26,7 +26,7 @@ import {
   resetProviderRegistry,
   resolveProvider,
   tryResolveProvider
-} from "../../chunk-JI365DWM.js";
+} from "../../chunk-ICXXHV4V.js";
 import "../../chunk-XTHN6JBX.js";
 export {
   CodeModePermissionDeniedError,

package/dist/server/index.js

@@ -262,7 +262,7 @@ import {
   resetProviderRegistry,
   resolveProvider,
   tryResolveProvider
-} from "../chunk-JI365DWM.js";
+} from "../chunk-ICXXHV4V.js";
 import {
   AuthRequiredError,
   _resetKeyCacheForTests,

package/dist/{server-boundary-QHWMBDKT.js → server-boundary-A5JNZ4ND.js}

@@ -2,7 +2,7 @@ import {
   resolveTheoRootDir
 } from "./chunk-7NRFZBAL.js";
 import "./chunk-Q3UE7WIM.js";
-import "./chunk-CY5WKIM5.js";
+import "./chunk-2BYN7WTW.js";
 import "./chunk-EYRWD2AB.js";
 import "./chunk-5GZROLDV.js";
 import "./chunk-5AGNZXHJ.js";
@@ -27,7 +27,7 @@ import "./chunk-DV34VG3N.js";
 import "./chunk-V6Y2SMRG.js";
 import "./chunk-ACKBVBUI.js";
 import "./chunk-IZ3TIL6K.js";
-import "./chunk-JI365DWM.js";
+import "./chunk-ICXXHV4V.js";
 import "./chunk-YSJOZEI6.js";
 import "./chunk-Z4PJMZLM.js";
 import "./chunk-UMNXCU3K.js";
@@ -147,4 +147,4 @@ export {
   ServerOnlyImportError,
   serverOnlyImportBoundary
 };
-//# sourceMappingURL=server-boundary-QHWMBDKT.js.map
+//# sourceMappingURL=server-boundary-A5JNZ4ND.js.map

package/dist/{server-boundary-6PGQB5XT.js → server-boundary-JP6VHXAX.js}

@@ -3,8 +3,8 @@ import "tsx/esm";
 import {
   resolveTheoRootDir
 } from "./chunk-FDOOBTXJ.js";
-import "./chunk-UZFOWYAQ.js";
-import "./chunk-YVHQ35RT.js";
+import "./chunk-USN554EK.js";
+import "./chunk-UETVDZBE.js";
 import "./chunk-L4TB6FXQ.js";
 import "./chunk-VV2VU3LJ.js";
 import "./chunk-5VLP3GQ2.js";
@@ -131,4 +131,4 @@ export {
   ServerOnlyImportError,
   serverOnlyImportBoundary
 };
-//# sourceMappingURL=server-boundary-6PGQB5XT.js.map
+//# sourceMappingURL=server-boundary-JP6VHXAX.js.map

package/dist/{start-K4O5J7JA.js → start-JEYOON64.js}

@@ -25,7 +25,7 @@ import {
   resolveTransformer,
   serveMatchedAuxRoute,
   serveThroughPluginLifecycle
-} from "./chunk-BAXPERIV.js";
+} from "./chunk-DRLYKXDD.js";
 import "./chunk-2CVV6CNN.js";
 import {
   findRootDiv
@@ -41,11 +41,11 @@ import {
   mountAgent,
   readAgentPolicy,
   writeWebResponseToServerResponse
-} from "./chunk-UZFOWYAQ.js";
+} from "./chunk-USN554EK.js";
 import {
   getApprovalRegistry,
   resolveProvider
-} from "./chunk-YVHQ35RT.js";
+} from "./chunk-UETVDZBE.js";
 import {
   createWebRequestSource,
   dispatchControllerRequest,
@@ -1396,4 +1396,4 @@ export {
   resolveSsrEntry,
   startCommand
 };
-//# sourceMappingURL=start-K4O5J7JA.js.map
+//# sourceMappingURL=start-JEYOON64.js.map

package/dist/vite-plugin/index.js

@@ -5,11 +5,11 @@ import {
   defineTheoIntegration,
   theoPlugin,
   theoPluginAsync
-} from "../chunk-UK2WVX5G.js";
+} from "../chunk-EB5TYC2Y.js";
 import "../chunk-7NRFZBAL.js";
 import "../chunk-SSYDEKWF.js";
 import "../chunk-Q3UE7WIM.js";
-import "../chunk-CY5WKIM5.js";
+import "../chunk-2BYN7WTW.js";
 import "../chunk-OIGJOYX6.js";
 import "../chunk-U3SPBLJF.js";
 import "../chunk-EYRWD2AB.js";
@@ -36,7 +36,7 @@ import "../chunk-V6Y2SMRG.js";
 import "../chunk-ACKBVBUI.js";
 import "../chunk-IZ3TIL6K.js";
 import "../chunk-YOIVCCZT.js";
-import "../chunk-JI365DWM.js";
+import "../chunk-ICXXHV4V.js";
 import "../chunk-YSJOZEI6.js";
 import "../chunk-Z4PJMZLM.js";
 import "../chunk-UMNXCU3K.js";

package/dist/{vite-plugin-675YOCHV.js → vite-plugin-VLDOBVIS.js}

@@ -7,14 +7,14 @@ import {
   defineTheoIntegration,
   theoPlugin,
   theoPluginAsync
-} from "./chunk-PGYYVOM3.js";
-import "./chunk-BAXPERIV.js";
+} from "./chunk-DVJRDY3H.js";
+import "./chunk-DRLYKXDD.js";
 import "./chunk-2CVV6CNN.js";
 import "./chunk-3PWQQWT6.js";
 import "./chunk-FDOOBTXJ.js";
 import "./chunk-47MM2JUK.js";
-import "./chunk-UZFOWYAQ.js";
-import "./chunk-YVHQ35RT.js";
+import "./chunk-USN554EK.js";
+import "./chunk-UETVDZBE.js";
 import "./chunk-L4TB6FXQ.js";
 import "./chunk-VV2VU3LJ.js";
 import "./chunk-5VLP3GQ2.js";
@@ -40,4 +40,4 @@ export {
   theoPlugin,
   theoPluginAsync
 };
-//# sourceMappingURL=vite-plugin-675YOCHV.js.map
+//# sourceMappingURL=vite-plugin-VLDOBVIS.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "theokit",
-  "version": "0.62.0",
+  "version": "0.62.1",
   "description": "The TheoKit web framework — file-based routing, typed server surfaces, the Vite plugin, the CLI and the deploy adapters, around agents served from agents/*.ts.",
   "repository": {
     "type": "git",
@@ -150,8 +150,8 @@
     "typescript": "^5.9.3",
     "vite": "^7.0.0",
     "@theokit/agents": "^12.1.0",
-    "@theokit/http": "^1.2.0",
-    "@theokit/presenter": "^0.8.0"
+    "@theokit/presenter": "^0.8.0",
+    "@theokit/http": "^1.2.0"
   },
   "peerDependencies": {
     "@theokit/sdk": "^4.52.1",