theokit 0.68.0 → 0.70.0

package/README.md

@@ -38,6 +38,27 @@ Node `>= 22.12.0`. Peers: `react`, `react-dom`, `react-router`, `zod`, and — w
 | `server/ws/chat.ts` | `ws://…/ws/chat` |
 | `server/middleware/01-cors.ts` | request middleware, in filename order |
 
+### `next` is supported on one of the two paths
+
+A middleware receives `(request, context, next)`. What `next` does depends on which runner is
+executing it, and the two differ today:
+
+| path | `next` |
+|---|---|
+| `executeWebRequest` — the Web runner | runs the rest of the chain **and the route**, so code after `await next()` observes the route's response |
+| `server/middleware/*.ts` — the file-scan runner | **refuses.** It runs BEFORE routing, so there is no downstream to await |
+
+The file-scan path throws `MiddlewareNextUnavailableError`, naming the alternative. It used to
+accept the call and continue silently, which meant the code after `await next()` never ran and
+nothing said so.
+
+**This is a real limitation, not a bug being hidden.** Closing it means either folding the
+file-scan path so the chain wraps the route, or retiring this contract for a single one; both are
+large and the choice is open — `docs/adr/0003` § *AMENDED 2026-09-21* records what each costs.
+
+Write a `server/middleware/*.ts` middleware that returns a `Response` to answer the request, or
+returns nothing to continue. Use the Web path when you need code to run after the route.
+
 ## Authoring surfaces
 
 Every surface is a fluent builder whose `.build()` is a compile error while a required link is

package/dist/{actions-virtual-module-SE44BKR4.js → actions-virtual-module-ICWX5PZ2.js}

@@ -1,12 +1,12 @@
-import "./chunk-GDF2XQOO.js";
-import "./chunk-GAJOZJWD.js";
+import "./chunk-JMN4COMK.js";
+import "./chunk-SX7ZAHNE.js";
 import "./chunk-WSOAN4KN.js";
 import "./chunk-ENSFCKP6.js";
-import "./chunk-Q7T3UQ4L.js";
+import "./chunk-KOG5K26V.js";
+import "./chunk-4D4YVXHR.js";
 import "./chunk-P6OS7652.js";
 import "./chunk-ZDUO4IYN.js";
-import "./chunk-7L7LQ2GU.js";
-import "./chunk-ENRT6DAU.js";
+import "./chunk-IDWN2OSG.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
 import "./chunk-PVNMLZ5G.js";
@@ -18,8 +18,8 @@ import "./chunk-TNI4MARH.js";
 import "./chunk-4ERYQBL6.js";
 import {
   scanServerActionsEnriched
-} from "./chunk-GP6OJBXP.js";
-import "./chunk-KDP2HURW.js";
+} from "./chunk-CPXIYCAY.js";
+import "./chunk-FHQP23Z5.js";
 import "./chunk-DV34VG3N.js";
 import "./chunk-V6Y2SMRG.js";
 import "./chunk-ACKBVBUI.js";
@@ -234,4 +234,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-SE44BKR4.js.map
+//# sourceMappingURL=actions-virtual-module-ICWX5PZ2.js.map

package/dist/{actions-virtual-module-3OPYLD76.js → actions-virtual-module-LY6VGJZ2.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-G2NWAVGG.js";
-import "./chunk-UETVDZBE.js";
+import "./chunk-5XXXJ6DT.js";
+import "./chunk-BINRCILF.js";
 import "./chunk-QD5X56I3.js";
 import "./chunk-WSMLSIS5.js";
 import "./chunk-MS4A7N77.js";
 import "./chunk-C27VRUVN.js";
 import "./chunk-7UZZHCRN.js";
-import "./chunk-BCFA6LHL.js";
-import "./chunk-5NNFO7R7.js";
+import "./chunk-GVJFVBCJ.js";
+import "./chunk-R7G2B2WH.js";
 import {
   scanServerActionsEnriched
 } from "./chunk-NO6HA4FG.js";
@@ -218,4 +218,4 @@ export const actions = manifest
 export {
   actionsVirtualModule
 };
-//# sourceMappingURL=actions-virtual-module-3OPYLD76.js.map
+//# sourceMappingURL=actions-virtual-module-LY6VGJZ2.js.map

package/dist/adapters/agent-mount.d.ts

@@ -1,9 +1,14 @@
 import { a as RouteSubject, R as RoutePolicy } from '../route-policy-BHXQDzBF.js';
 import { C as CsrfMode } from '../csrf-Dgot9qSM.js';
 export { r as resolveProvider } from '../provider-resolver-Cc9C3-Rb.js';
-export { s as scanAgents } from '../agent-scan-BZa-pagG.js';
-import 'node:http';
+import { A as AgentNode } from '../agent-scan-BLXaFL6R.js';
+export { s as scanAgents } from '../agent-scan-BLXaFL6R.js';
+import { IncomingMessage, ServerResponse } from 'node:http';
+import { P as PluginRunner } from '../plugin-runner-BVMOSxvb.js';
+import { L as LoadModule } from '../module-loader-DCip7NoL.js';
 import '../audit-log-BQWM5YLG.js';
+import '../plugin-types-BUVfUQ0V.js';
+import 'vite';
 
 /**
  * ADR 0001, applied to the agent surface (usetheokit/theokit#365).
@@ -132,4 +137,187 @@ interface MountAgentOptions {
  */
 declare function mountAgent(mod: unknown, request: Request, apiKey: string | ApiKeyResolver, { source, csrfMode, projectRoot, agentName, policy, resolveSubject, }?: MountAgentOptions): Promise<Response>;
 
-export { mountAgent };
+/** Dependencies the aux dispatcher needs from its caller (dev or prod). */
+interface AuxRouteDeps {
+    /** Discovered agents (from `scanAgents`). */
+    agents: readonly AgentNode[];
+    /** Load an agent module from its file path (dev: vite loader; prod: dynamic import). */
+    loadModule: (filePath: string) => Promise<unknown>;
+    /** Absolute base URL (`http(s)://host`) for the agent-card endpoint URLs. */
+    baseUrl: string;
+    /**
+     * M34 (#97) — CSRF enforcement mode for the MCP route. `POST /api/agents/<name>/mcp` drives the
+     * agent (spends LLM tokens), so a cross-origin POST MUST be rejected in `'strict'` — parity with
+     * the agent-run route (`mount-agent.ts:83-91`). Defaults to `'strict'` (safe-by-default); a caller
+     * that already gated upstream may pass `'off'`.
+     */
+    csrfMode?: CsrfMode;
+    /**
+     * M39 — lazily resolve the provider apiKey. Required only for the thread
+     * follow-up route (which drives the agent); resolved on demand so non-agent
+     * aux routes (card, approvals, stream) never need a provider key.
+     *
+     * theokit#328 — it receives the model the agent declares, so the credential matches the provider
+     * the agent asked for. It was called with no argument, before the module was even compiled, so
+     * an agent declaring `anthropic/…` was handed whichever key env priority found first.
+     */
+    resolveApiKey?: ApiKeyResolver;
+    /**
+     * Who is asking (usetheokit/theokit#365). Invoked ONLY from {@link serveMatchedAuxRoute}, and only
+     * when the matched path's agent declares a policy — so the application's `createContext` never
+     * runs for a url this dispatcher merely declines. {@link matchAgentAuxRoute} is not given it, for
+     * the same reason it is not given the request body: deciding must cost nothing.
+     */
+    resolveSubject?: AgentSubjectResolver;
+}
+/**
+ * One aux route, already decided. Carries what the match resolved so the serve half re-derives
+ * nothing: the agent node it looked up, and for MCP the module it had to open in order to answer
+ * the opt-in question at all.
+ */
+type AgentAuxRoute = {
+    readonly kind: 'card';
+    readonly agent: AgentNode;
+} | {
+    readonly kind: 'approvals';
+    readonly agent: AgentNode;
+} | {
+    readonly kind: 'run-stream';
+    readonly agent: AgentNode;
+    readonly runId: string;
+} | {
+    readonly kind: 'thread-stream';
+    readonly agent: AgentNode;
+    readonly sessionId: string;
+} | {
+    readonly kind: 'thread-message';
+    readonly agent: AgentNode;
+    readonly sessionId: string;
+} | {
+    readonly kind: 'mcp';
+    readonly agent: AgentNode;
+    readonly mod: unknown;
+};
+/**
+ * Does this dispatcher own `urlPath`? Returns the matched route, or `null` to fall through (not an
+ * aux path, wrong method, unknown agent, or an agent that did not opt into MCP).
+ *
+ * theokit#400 — this function is where the "convert only on a path you are about to answer" rule
+ * now lives, and it is enforced by the signature rather than by discipline: it is handed a method
+ * and a url and has no request to convert. Converting in order to decide is what drained the Node
+ * body stream on every path this dispatcher declined, so an ordinary `POST /api/…` file route then
+ * waited forever for an `'end'` that had already fired — no status, no timeout, no response.
+ *
+ * The one branch that does real work here is MCP, which must open the module to read its
+ * `export const mcp` opt-in. That is deliberate: a match that could still fall through would hand
+ * the caller a request it had already started a lifecycle for, and the span opened for it would
+ * either double-count or never close.
+ */
+declare function matchAgentAuxRoute(method: string, urlPath: string, deps: AuxRouteDeps): Promise<AgentAuxRoute | null>;
+/**
+ * Answer a route {@link matchAgentAuxRoute} already claimed. Always returns a `Response` — every
+ * fall-through was decided upstream, which is what lets a caller open a request span before this
+ * runs and be sure something will close it.
+ */
+declare function serveMatchedAuxRoute(route: AgentAuxRoute, request: Request, deps: AuxRouteDeps): Promise<Response>;
+
+/**
+ * Who is asking, on the Node dispatch path that serves the agent endpoints
+ * (usetheokit/theokit#365).
+ *
+ * `executeRoute` answers this with `subjectFromContext(ctx)`, where `ctx` is the run context built
+ * from the application's `server/context.ts` plus plugin decorations. The agent branches build no
+ * such context — which is why `mountAgent`'s `subject` option had nowhere to come from and every
+ * caller left it out. This builds the same context from the same two sources, so the agent surface
+ * reads identity from the seam the routes already read it from rather than from a second one.
+ *
+ * ## Why it returns a resolver instead of a subject
+ *
+ * `tryServeAgentAux` runs for EVERY url, including the ones it does not own. Resolving eagerly
+ * there would execute the application's `createContext` twice on every route request — once in the
+ * aux branch that falls through, once in the route executor. So callers get a memoized thunk and
+ * invoke it only on a path they are about to answer, which is the same discipline theokit#400
+ * imposed on `source.toRequest()` for the same dispatcher.
+ *
+ * ## What `createContext` can read here, and what it cannot (usetheokit/theokit#415)
+ *
+ * **Headers and cookies: yes. The request body: no.**
+ *
+ * This used to state the opposite as a MUST — "invoke it before converting the request to a Web
+ * `Request`" — and no caller could honour it. The laziness argued for directly above is what makes
+ * it unsatisfiable: the invocation necessarily happens INSIDE the handler, and the handler is
+ * entered after `serveThroughPluginLifecycle` has already called `source.toRequest()` at the top of
+ * its bracket. `incomingMessageToWebRequest` attaches the Node readable as the request body
+ * (`body: webStream, duplex: 'half'`), so by the time an application's `createContext` receives
+ * that `IncomingMessage`, the stream is consumed.
+ *
+ * The contract was written for an EAGER resolver and kept when the resolver became lazy. Both
+ * decisions were right on their own; the sentence joining them was not, and it pointed callers at
+ * something impossible while implying a capability that does not exist.
+ *
+ * Practically this costs little — identity is overwhelmingly a header or a cookie, and both survive
+ * the conversion untouched. What it costs an application that resolves identity from the BODY is an
+ * empty read or a wait for an `'end'` that already fired, which is why saying so plainly matters
+ * more than the frequency suggests.
+ *
+ * Restoring body access would mean resolving eagerly — running the application's `createContext`
+ * twice on every route request, which is exactly what the laziness exists to prevent — or buffering
+ * every agent request body to replay it, which is a cost paid by every caller for a case almost
+ * none has.
+ */
+
+/** What {@link createAgentSubjectResolver} needs in order to build the run context. */
+interface AgentSubjectSources {
+    req: IncomingMessage;
+    res: ServerResponse;
+    loadModule: LoadModule;
+    /** The app's `server/` directory. Absent ⇒ there is no `context.ts` to consult. */
+    serverDir: string | undefined;
+    pluginRunner: PluginRunner | undefined;
+}
+/**
+ * Build a memoized resolver for the caller's identity.
+ *
+ * Decorations are applied ON TOP of the factory's result, matching `executeRoute`: a plugin
+ * decoration wins only where `context.ts` did not set the same key.
+ *
+ * A `createContext` that throws is not swallowed — an application whose identity resolution is
+ * broken must not be treated as an anonymous caller, because that reads as a clean refusal and
+ * hides the fault. The throw reaches the branch's own error handler and becomes a 500.
+ */
+declare function createAgentSubjectResolver(sources: AgentSubjectSources): () => Promise<RouteSubject | null>;
+/**
+ * The app's `createContext`, as a host that is not Node sees it.
+ *
+ * Deliberately NOT `middleware-runner`'s `ContextFactory`, which types its argument as
+ * `IncomingMessage`/`ServerResponse`. Those are exactly right for the dev path and wrong here: on
+ * every deploy target the pair is what `createWebShim` synthesises over a Web `Request`. Widening
+ * to `unknown` says what is actually true at this boundary rather than casting a lie past the
+ * type system — the app's own `createContext` is typed by the app, and a generated fragment is the
+ * one caller that cannot promise it Node objects.
+ */
+type HostContextFactory = (args: {
+    request: unknown;
+    response: unknown;
+}) => unknown;
+/**
+ * The half that CALLS an already-resolved context factory (B-185, ADR 0014).
+ *
+ * {@link createAgentSubjectResolver} does two things: it LOCATES `context.ts` on a filesystem —
+ * `existsSync` plus `loadModule`, inside `createServerContext` — and then CALLS what it found. A
+ * deploy target with no filesystem can do the second and not the first, so the generator bakes the
+ * module as a static import (the way routes, agents and plugins already are) and hands the factory
+ * here directly.
+ *
+ * Measured before this existed: passing `serverDir: undefined` to the resolver above takes its
+ * `produced = {}` branch, never touches `req`/`res`/`loadModule`, and returns
+ * `subjectFromContext({})` — which is null for every caller. Satisfying its types would have
+ * satisfied nothing.
+ *
+ * `request`/`response` are whatever the host has. On every deploy target that is the
+ * `ShimRequest`/`ShimResponse` pair `createWebShim` synthesises over a Web `Request`, which is the
+ * same contract routes on those targets have crossed since they were baked.
+ */
+declare function createSubjectResolverFromFactory(createContext: HostContextFactory | undefined, request: unknown, response: unknown, pluginRunner?: PluginRunner): () => Promise<RouteSubject | null>;
+
+export { createAgentSubjectResolver, createSubjectResolverFromFactory, matchAgentAuxRoute, mountAgent, serveMatchedAuxRoute };

package/dist/adapters/agent-mount.js

@@ -1,15 +1,26 @@
+import {
+  createAgentSubjectResolver,
+  createSubjectResolverFromFactory,
+  matchAgentAuxRoute,
+  serveMatchedAuxRoute
+} from "../chunk-3NAKOWTX.js";
 import {
   mountAgent
-} from "../chunk-GAJOZJWD.js";
+} from "../chunk-SX7ZAHNE.js";
+import "../chunk-4D4YVXHR.js";
 import "../chunk-P6OS7652.js";
-import "../chunk-ENRT6DAU.js";
+import "../chunk-IDWN2OSG.js";
 import "../chunk-PVNMLZ5G.js";
 import "../chunk-ZDCCILMP.js";
 import "../chunk-CHTAWXC2.js";
 import "../chunk-AVQU5CQF.js";
 import {
   scanAgents
-} from "../chunk-KDP2HURW.js";
+} from "../chunk-FHQP23Z5.js";
+import "../chunk-V6Y2SMRG.js";
+import "../chunk-ACKBVBUI.js";
+import "../chunk-IZ3TIL6K.js";
+import "../chunk-TQEE36VD.js";
 import {
   resolveProvider
 } from "../chunk-ICXXHV4V.js";
@@ -18,8 +29,12 @@ import "../chunk-SOYOYGWY.js";
 import "../chunk-ZWN3AODA.js";
 import "../chunk-XTHN6JBX.js";
 export {
+  createAgentSubjectResolver,
+  createSubjectResolverFromFactory,
+  matchAgentAuxRoute,
   mountAgent,
   resolveProvider,
-  scanAgents
+  scanAgents,
+  serveMatchedAuxRoute
 };
 //# sourceMappingURL=agent-mount.js.map

package/dist/adapters/security-headers.d.ts

@@ -57,6 +57,22 @@ export { b as buildSecurityHeaders } from '../security-headers-vris2MQq.js';
  * (`cli/commands/start/index.ts`). An app with no security block gets the same
  * baseline deployed as it gets locally.
  */
+/**
+ * The two declarations every deploy entry emits to carry the security baseline.
+ *
+ * Four adapters wrote these same two lines — `netlify`, `vercel`, `aws-lambda`, `deno-deploy` —
+ * each under a comment naming its own host's static-asset boundary. The COMMENT differs and is
+ * meant to; the declarations do not.
+ *
+ * Extracted after SonarCloud's duplication gate failed a PR at 4.0% against a 3% ceiling and named
+ * this as the largest repeated block among the changed files. The gate was measuring something
+ * real: a literal renderer and a builder call, copied four times, is four places to update when
+ * either changes.
+ *
+ * Returns the lines rather than a joined string, because every caller splices them into an array
+ * of emitted lines.
+ */
+declare function securityHeadersDeclarations(config: SecurityHeadersConfig | undefined): string[];
 declare function renderSecurityHeadersConfigLiteral(headers: SecurityHeadersConfig | undefined): string;
 /**
  * Put the headers on a response, without overruling the handler.
@@ -129,4 +145,4 @@ interface DeployedSecurityHeaderLimits {
  */
 declare function describeDeployedSecurityHeaders(limits: DeployedSecurityHeaderLimits): string;
 
-export { type DeployedSecurityHeaderLimits, describeDeployedSecurityHeaders, renderSecurityHeadersConfigLiteral, withSecurityHeaders };
+export { type DeployedSecurityHeaderLimits, describeDeployedSecurityHeaders, renderSecurityHeadersConfigLiteral, securityHeadersDeclarations, withSecurityHeaders };

package/dist/adapters/security-headers.js

@@ -7,6 +7,12 @@ import {
 import "../chunk-XTHN6JBX.js";
 
 // src/adapters/security-headers.ts
+function securityHeadersDeclarations(config) {
+  return [
+    `const SECURITY_HEADERS_CONFIG = ${renderSecurityHeadersConfigLiteral(config)}`,
+    `const SECURITY_HEADERS = buildSecurityHeaders(SECURITY_HEADERS_CONFIG, { production: true })`
+  ];
+}
 function renderSecurityHeadersConfigLiteral(headers) {
   return JSON.stringify(headers ?? {});
 }
@@ -59,6 +65,7 @@ export {
   describeDeployedSecurityHeaders,
   generateNonce,
   renderSecurityHeadersConfigLiteral,
+  securityHeadersDeclarations,
   withSecurityHeaders
 };
 //# sourceMappingURL=security-headers.js.map

package/dist/adapters/security-headers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/security-headers.ts"],"mappings":";;;;;;;;;AA8EO,SAAS,mCACd,SACQ;AACR,SAAO,KAAK,UAAU,WAAW,CAAC,CAAC;AACrC;AAyBO,SAAS,oBAAoB,UAAoB,SAA2C;AACjG,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,CAAC,SAAS,QAAQ,IAAI,GAAG,EAAG,UAAS,QAAQ,IAAI,KAAK,KAAK;AAAA,EACjE;AACA,SAAO;AACT;AAgDO,SAAS,gCAAgC,QAA8C;AAC5F,QAAM,UAAU,qBAAqB,OAAO,mBAAmB,CAAC,GAAG,EAAE,YAAY,KAAK,CAAC;AACvF,QAAM,QAAQ,OAAO,KAAK,OAAO;AACjC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,SAAS,OAAO,MAAM;AAAA,EAC/B;AAEA,QAAM,QAAQ;AAAA,IACZ,iDAA4C,OAAO,MAAM,eAAe,MAAM,KAAK,IAAI,CAAC;AAAA,EAC1F;AACA,QAAM,WAAW,MAAM,KAAK,CAAC,SAAS,KAAK,WAAW,yBAAyB,CAAC;AAChF,MAAI,YAAY,CAAC,OAAO,YAAY;AAClC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,oBAAoB,uBAAuB;AACpD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,oBAAoB,sBAAsB;AACnD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}
+{"version":3,"sources":["../../src/adapters/security-headers.ts"],"mappings":";;;;;;;;;AA6FO,SAAS,4BAA4B,QAAqD;AAC/F,SAAO;AAAA,IACL,mCAAmC,mCAAmC,MAAM,CAAC;AAAA,IAC7E;AAAA,EACF;AACF;AAEO,SAAS,mCACd,SACQ;AACR,SAAO,KAAK,UAAU,WAAW,CAAC,CAAC;AACrC;AAyBO,SAAS,oBAAoB,UAAoB,SAA2C;AACjG,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,CAAC,SAAS,QAAQ,IAAI,GAAG,EAAG,UAAS,QAAQ,IAAI,KAAK,KAAK;AAAA,EACjE;AACA,SAAO;AACT;AAgDO,SAAS,gCAAgC,QAA8C;AAC5F,QAAM,UAAU,qBAAqB,OAAO,mBAAmB,CAAC,GAAG,EAAE,YAAY,KAAK,CAAC;AACvF,QAAM,QAAQ,OAAO,KAAK,OAAO;AACjC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,SAAS,OAAO,MAAM;AAAA,EAC/B;AAEA,QAAM,QAAQ;AAAA,IACZ,iDAA4C,OAAO,MAAM,eAAe,MAAM,KAAK,IAAI,CAAC;AAAA,EAC1F;AACA,QAAM,WAAW,MAAM,KAAK,CAAC,SAAS,KAAK,WAAW,yBAAyB,CAAC;AAChF,MAAI,YAAY,CAAC,OAAO,YAAY;AAClC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,oBAAoB,uBAAuB;AACpD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,oBAAoB,sBAAsB;AACnD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/{agent-UBDDP2L5.js → agent-7DQ3TKJY.js}

@@ -3,13 +3,13 @@ import "tsx/esm";
 import {
   agentCommand,
   createAgentSsrLoader
-} from "./chunk-FYYKMPST.js";
-import "./chunk-UETVDZBE.js";
-import "./chunk-5NNFO7R7.js";
+} from "./chunk-MLF25NC4.js";
+import "./chunk-BINRCILF.js";
+import "./chunk-R7G2B2WH.js";
 import "./chunk-Z7CJHDLS.js";
 import "./chunk-3QPVEJ7D.js";
 export {
   agentCommand,
   createAgentSsrLoader
 };
-//# sourceMappingURL=agent-UBDDP2L5.js.map
+//# sourceMappingURL=agent-7DQ3TKJY.js.map

package/dist/agent-scan-BLXaFL6R.d.ts

@@ -0,0 +1,12 @@
+/**
+ * A discovered agent file. `name` is the client-facing key; `agentPath` is the mounted
+ * SSE route (M0/M1 `UIMessageStream`).
+ */
+interface AgentNode {
+    filePath: string;
+    agentPath: string;
+    name: string;
+}
+declare function scanAgents(projectRoot: string, configured?: string): AgentNode[];
+
+export { type AgentNode as A, scanAgents as s };

package/dist/{app-typed-client-BE3PV3JY.js → app-typed-client-2S76VTMB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import "tsx/esm";
-import "./chunk-G2NWAVGG.js";
-import "./chunk-UETVDZBE.js";
+import "./chunk-5XXXJ6DT.js";
+import "./chunk-BINRCILF.js";
 import {
   scanControllerModules
 } from "./chunk-QD5X56I3.js";
@@ -11,8 +11,8 @@ import "./chunk-C27VRUVN.js";
 import "./chunk-7UZZHCRN.js";
 import {
   generateManifest
-} from "./chunk-BCFA6LHL.js";
-import "./chunk-5NNFO7R7.js";
+} from "./chunk-GVJFVBCJ.js";
+import "./chunk-R7G2B2WH.js";
 import {
   HTTP_METHODS
 } from "./chunk-NO6HA4FG.js";
@@ -411,4 +411,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-BE3PV3JY.js.map
+//# sourceMappingURL=app-typed-client-2S76VTMB.js.map

package/dist/{app-typed-client-RAFEBA7S.js → app-typed-client-6YQREFRS.js}

@@ -1,14 +1,14 @@
 import {
   scanControllerModules
-} from "./chunk-GDF2XQOO.js";
-import "./chunk-GAJOZJWD.js";
+} from "./chunk-JMN4COMK.js";
+import "./chunk-SX7ZAHNE.js";
 import "./chunk-WSOAN4KN.js";
 import "./chunk-ENSFCKP6.js";
-import "./chunk-Q7T3UQ4L.js";
+import "./chunk-KOG5K26V.js";
+import "./chunk-4D4YVXHR.js";
 import "./chunk-P6OS7652.js";
 import "./chunk-ZDUO4IYN.js";
-import "./chunk-7L7LQ2GU.js";
-import "./chunk-ENRT6DAU.js";
+import "./chunk-IDWN2OSG.js";
 import "./chunk-47FFT43U.js";
 import "./chunk-NTDN54XO.js";
 import "./chunk-PVNMLZ5G.js";
@@ -20,8 +20,8 @@ import "./chunk-TNI4MARH.js";
 import "./chunk-4ERYQBL6.js";
 import {
   generateManifest
-} from "./chunk-GP6OJBXP.js";
-import "./chunk-KDP2HURW.js";
+} from "./chunk-CPXIYCAY.js";
+import "./chunk-FHQP23Z5.js";
 import {
   HTTP_METHODS
 } from "./chunk-DV34VG3N.js";
@@ -427,4 +427,4 @@ export {
   generateClientDts,
   shouldReemitForFile
 };
-//# sourceMappingURL=app-typed-client-RAFEBA7S.js.map
+//# sourceMappingURL=app-typed-client-6YQREFRS.js.map

package/dist/{aws-lambda-R76PWR27.js → aws-lambda-OCJM5YGB.js}

@@ -1,14 +1,18 @@
 #!/usr/bin/env node
 import "tsx/esm";
 import {
-  deployedCorsFragment,
-  deployedCsrfFragment,
+  deployedEntryPreamble
+} from "./chunk-XG6SQUEP.js";
+import {
+  JSON_NOT_FOUND_RESPONSE,
+  agentsDirLiteral,
+  deployedAgentsFragment,
   deployedRuntimeConfigFragment,
   deployedTraceFragment,
   describeDeployedSecurityHeaders,
-  renderSecurityHeadersConfigLiteral,
+  scannedFromLoaderCache,
   serverDirLiteral
-} from "./chunk-6B3CMPE4.js";
+} from "./chunk-FFGP2LGQ.js";
 import {
   nodeAdapter
 } from "./chunk-KI4DOTN4.js";
@@ -59,7 +63,7 @@ function responseToLambdaResultV2(statusCode, headers, body) {
     isBase64Encoded: isBinary
   };
 }
-function awsLambdaHandlerFragment(runtimeSpread) {
+function awsLambdaHandlerFragment(runtimeSpread, agentsBranch, agentsHostBypass) {
   return [
     `// #382 \u2014 this target is DELISTED for response streaming, by construction.`,
     `// The Lambda v2 result object below carries \`body\` as a string, so the`,
@@ -119,7 +123,7 @@ function awsLambdaHandlerFragment(runtimeSpread) {
     `}`,
     ``,
     `async function routeRequest(event, path) {`,
-    `  if (!path.startsWith('/api/')) {`,
+    `  if (!path.startsWith('/api/')${agentsHostBypass}) {`,
     `    return new Response(`,
     `      'Static assets must be served from CloudFront or a separate static host.',`,
     `      { status: 404, headers: { 'content-type': 'text/plain' } },`,
@@ -129,15 +133,18 @@ function awsLambdaHandlerFragment(runtimeSpread) {
     `  if (!routesCache) routesCache = scanServerRoutes(serverDir)`,
     `  if (!loaderCache) loaderCache = createProductionLoader()`,
     ``,
+    // B-235 — hoisted above the agents branch, which names `request` like every other host's.
+    // It was declared below `matchRoute`, and an agent path never reaches a route match. Building
+    // it here costs nothing new: the outer handler already built one for the CORS matcher, and
+    // `eventV2ToRequest` reads a body the event already carries, so there is no stream to drain
+    // twice.
+    `  const request = eventV2ToRequest(event)`,
+    ``,
+    ...agentsBranch,
+    ``,
     `  const match = matchRoute(path, routesCache)`,
-    `  if (!match) {`,
-    `    return new Response(JSON.stringify({ error: { code: 'NOT_FOUND' } }), {`,
-    `      status: 404,`,
-    `      headers: { 'content-type': 'application/json' },`,
-    `    })`,
-    `  }`,
+    `  if (!match) return ${JSON_NOT_FOUND_RESPONSE}`,
     ``,
-    `  const request = eventV2ToRequest(event)`,
     `  const { req, res, toResponse } = createWebShim(request)`,
     ...deployedTraceFragment("request", "  "),
     `  const method = request.method.toUpperCase()`,
@@ -147,6 +154,10 @@ function awsLambdaHandlerFragment(runtimeSpread) {
 }
 function renderAwsLambdaEntry(opts = {}) {
   const runtimeConfig = deployedRuntimeConfigFragment(opts);
+  const agentsFragment = deployedAgentsFragment(scannedFromLoaderCache(agentsDirLiteral(opts)), {
+    pathname: "path",
+    notFound: JSON_NOT_FOUND_RESPONSE
+  });
   return [
     `// Generated by Theo \u2014 AWS Lambda Adapter`,
     `// Use with API Gateway HTTP API v2 (default).`,
@@ -166,14 +177,7 @@ function renderAwsLambdaEntry(opts = {}) {
     `// theo.config.ts to read. Non-API paths 404 here and the document is served`,
     `// from CloudFront or another static host, so this covers the API and not the`,
     `// page (usetheokit/theokit#412).`,
-    `const SECURITY_HEADERS_CONFIG = ${renderSecurityHeadersConfigLiteral(opts.securityHeaders)}`,
-    `const SECURITY_HEADERS = buildSecurityHeaders(SECURITY_HEADERS_CONFIG, { production: true })`,
-    ``,
-    ...runtimeConfig.imports,
-    ...runtimeConfig.declarations,
-    ...deployedCsrfFragment(opts),
-    ``,
-    ...deployedCorsFragment(opts.cors, "aws-lambda"),
+    ...deployedEntryPreamble(runtimeConfig, agentsFragment, opts, "aws-lambda"),
     ``,
     `function eventV2ToRequest(event) {`,
     `  const method = event.requestContext?.http?.method ?? 'GET'`,
@@ -196,7 +200,11 @@ function renderAwsLambdaEntry(opts = {}) {
     `  })`,
     `}`,
     ``,
-    ...awsLambdaHandlerFragment(runtimeConfig.executeRouteSpread)
+    ...awsLambdaHandlerFragment(
+      runtimeConfig.executeRouteSpread,
+      agentsFragment.branch,
+      agentsFragment.hostBypass
+    )
   ].join("\n");
 }
 async function buildAwsLambda(config, cwd, deps = {}, ctx) {
@@ -213,6 +221,10 @@ async function buildAwsLambda(config, cwd, deps = {}, ctx) {
   ensureDir(outputDir);
   const entry = renderAwsLambdaEntry({
     securityHeaders: config.security?.headers,
+    // B-235 — pillar (a): the option existed and no build passed it, so a project with a
+    // configured agents directory got the default `agents` on this target. Same defect
+    // B-185 fixed for bun and deno, one target over.
+    agentsDir: config.agentsDir,
     csrf: config.security?.csrf,
     disallowed: config.security?.disallowed,
     cors: config.security?.cors,
@@ -259,4 +271,4 @@ export {
   renderAwsLambdaEntry,
   responseToLambdaResultV2
 };
-//# sourceMappingURL=aws-lambda-R76PWR27.js.map
+//# sourceMappingURL=aws-lambda-OCJM5YGB.js.map