theokit 0.70.2 → 0.72.0

package/dist/{bun-KRUAWYRW.js → bun-NKVHOFSJ.js}

@@ -5,18 +5,20 @@ import {
 } from "./chunk-V5SSTT3C.js";
 import {
   deployedEntryPreamble
-} from "./chunk-XG6SQUEP.js";
+} from "./chunk-IB5VIXLR.js";
 import {
   agentsDirLiteral,
   deployedAgentsFragment,
+  deployedRateLimitFragment,
   deployedRuntimeConfigFragment,
   deployedTraceFragment,
   describeDeployedSecurityHeaders,
+  rateLimitCheckFragment,
   serverDirLiteral
-} from "./chunk-FFGP2LGQ.js";
+} from "./chunk-C5CAL3DX.js";
 import {
   nodeAdapter
-} from "./chunk-KI4DOTN4.js";
+} from "./chunk-G7U7FQVC.js";
 import "./chunk-WSMLSIS5.js";
 import {
   assertServicesUnsupported,
@@ -26,107 +28,6 @@ import {
 // src/adapters/bun.ts
 import { mkdirSync, writeFileSync } from "fs";
 import { resolve } from "path";
-
-// src/adapters/deployed-rate-limit.ts
-var UnserialisableRateLimitError = class extends Error {
-  constructor(target, reason, ways) {
-    super(
-      [
-        `Refusing to build for \`${target}\`: theo.config.ts declares a rate limit this target cannot carry.`,
-        ``,
-        `  ${reason}`,
-        ``,
-        `  Ways forward:`,
-        ...ways.map((w) => `    \u2022 ${w}`),
-        ``,
-        `  This refuses rather than dropping the key, because a rate limit that silently does not`,
-        `  apply looks exactly like one that does (usetheokit/theokit#461, #508).`
-      ].join("\n")
-    );
-    this.target = target;
-    this.reason = reason;
-  }
-  target;
-  reason;
-  name = "UnserialisableRateLimitError";
-};
-function bakeableRateLimit(rateLimit, target) {
-  if (rateLimit === void 0) return void 0;
-  const cfg = rateLimit;
-  if (typeof cfg.keyBy === "function") {
-    throw new UnserialisableRateLimitError(
-      target,
-      "`security.rateLimit.keyBy` is a function, and a deployed entry has no literal for a closure.",
-      [
-        "use `keyBy: 'ip'` (the default), which this target resolves from the connection",
-        "build for `node` and run `theokit start`, which can call the function"
-      ]
-    );
-  }
-  if (cfg.keyBy === "session" || cfg.keyBy === "user") {
-    throw new UnserialisableRateLimitError(
-      target,
-      `\`security.rateLimit.keyBy: '${cfg.keyBy}'\` needs a resolved session, and the limit runs before routing.`,
-      [
-        "use `keyBy: 'ip'`, which is resolvable at that point",
-        "build for `node` and run `theokit start`"
-      ]
-    );
-  }
-  if (cfg.routes !== void 0) {
-    throw new UnserialisableRateLimitError(
-      target,
-      "`security.rateLimit.routes` needs the matched route, which is decided after the limit runs here.",
-      [
-        "declare a single global limit (`windowMs` + `max`)",
-        "build for `node` and run `theokit start`, which applies per-route limits"
-      ]
-    );
-  }
-  const windowMs = cfg.windowMs;
-  const max = cfg.max;
-  if (typeof windowMs !== "number" || typeof max !== "number") return void 0;
-  return { windowMs, max };
-}
-function deployedRateLimitFragment(rateLimit, target, addressExpression) {
-  const baked = bakeableRateLimit(rateLimit, target);
-  if (baked === void 0) return [];
-  return [
-    `// #508 \u2014 the limit the app declared, carried as a literal because a deployed entry has no`,
-    `// theo.config.ts to read. The counter lives in this process, which outlives a request here.`,
-    `const RATE_LIMIT = createRateLimiterWeb({ windowMs: ${baked.windowMs}, max: ${baked.max} })`,
-    ``,
-    `/**`,
-    ` * The caller's address, from the connection rather than from a header.`,
-    ` *`,
-    ` * A header a client can set is a key a client can choose, which makes the bucket theirs to`,
-    ` * split. An unresolved address falls back to one shared bucket \u2014 rare here, since that only`,
-    ` * happens for a connection already gone, and the same fallback \`theokit start\` uses.`,
-    ` */`,
-    `function callerAddress(request, server) {`,
-    `  return ${addressExpression} ?? 'unknown'`,
-    `}`,
-    ``,
-    `/** The 429 a limited caller gets, carrying the limiter's own headers. */`,
-    `function rateLimited(result) {`,
-    `  return new Response(JSON.stringify({ error: { code: 'RATE_LIMITED', message: 'Too many requests' } }), {`,
-    `    status: 429,`,
-    `    headers: { 'Content-Type': 'application/json', ...result.headers },`,
-    `  })`,
-    `}`
-  ];
-}
-function rateLimitCheckFragment(rateLimit, indent) {
-  if (rateLimit === void 0) return [];
-  return [
-    `${indent}const limit = RATE_LIMIT(callerAddress(request, server))`,
-    `${indent}if (limit.limited) {`,
-    `${indent}  return withCors(request, withSecurityHeaders(rateLimited(limit), SECURITY_HEADERS))`,
-    `${indent}}`
-  ];
-}
-
-// src/adapters/bun.ts
 var RUNTIME_GUARDS = [
   `// EC-1: dev-mode guard`,
   `if (process.env.NODE_ENV !== 'production') {`,
@@ -347,6 +248,8 @@ var bunAdapter = {
     // already receives `server`, whose `requestIP` gives the peer address without a header.
     "rateLimit"
   ],
+  // B-257 — a long-lived process: the in-process counter survives between requests.
+  enforcesRateLimit: "always",
   build(config, cwd, ctx) {
     return buildBun(config, cwd, {}, ctx);
   }
@@ -356,4 +259,4 @@ export {
   bunAdapter,
   renderBunEntry
 };
-//# sourceMappingURL=bun-KRUAWYRW.js.map
+//# sourceMappingURL=bun-NKVHOFSJ.js.map

package/dist/bun-NKVHOFSJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/bun.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * Bun deploy adapter. Writes to `cwd/.theokit/bun/`. Build-time.\n */\nimport { mkdirSync, writeFileSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nimport type { TheoConfig } from '../config/schema.js'\nimport type { SecurityHeadersConfig } from '../core/contracts/security-headers.js'\nimport { assertServicesUnsupported, readManifest } from '../services/index.js'\n\nimport { deployedAgentsFragment } from './deployed-agents.js'\nimport { type DeployedCorsOptions } from './deployed-cors.js'\nimport { type DeployedCsrfOptions } from './deployed-csrf.js'\nimport { planDeployedPlugins } from './deployed-plugins-module.js'\nimport { deployedEntryPreamble } from './deployed-preamble.js'\nimport {\n  deployedRateLimitFragment,\n  rateLimitCheckFragment,\n  type DeployedRateLimitOptions,\n} from './deployed-rate-limit.js'\nimport {\n  deployedRuntimeConfigFragment,\n  agentsDirLiteral,\n  serverDirLiteral,\n  type DeployedRuntimeConfigOptions,\n  type DeployedAgentsDirOptions,\n  type DeployedServerDirOptions,\n} from './deployed-runtime-config.js'\nimport { deployedTraceFragment } from './deployed-trace.js'\nimport { nodeAdapter } from './node.js'\nimport { describeDeployedSecurityHeaders } from './security-headers.js'\nimport type { AdapterBuildContext, DeployAdapter } from './types.js'\n\nexport interface BunBuildDeps {\n  runNodeBuild?: (config: TheoConfig, cwd: string, ctx?: AdapterBuildContext) => Promise<void>\n  writeEntry?: (path: string, content: string) => void\n  ensureDir?: (path: string) => void\n}\n\n/**\n * The module-scope refusals: this entry is production-only and Bun-only.\n *\n * Extracted from `renderBunEntry` when adding the configured-directory literal pushed it past the\n * per-function line budget. They are a cohesive block — three checks that all refuse to start —\n * and lifting them keeps the budget a signal about the renderer rather than about its preamble.\n */\nconst RUNTIME_GUARDS: readonly string[] = [\n  `// EC-1: dev-mode guard`,\n  `if (process.env.NODE_ENV !== 'production') {`,\n  `  console.error('TheoBunAdapter is production-only. Use \\\\'theokit dev\\\\' (Node) for development.')`,\n  `  process.exit(1)`,\n  `}`,\n  ``,\n  `// Version check: Bun >= 1.1`,\n  `if (typeof Bun === 'undefined') {`,\n  `  console.error('TheoBunAdapter must run inside Bun. Got Node.js or unknown runtime.')`,\n  `  process.exit(1)`,\n  `}`,\n  `{`,\n  `  const [maj, min] = (Bun.version ?? '0.0').split('.').map(Number)`,\n  `  if (maj < 1 || (maj === 1 && min < 1)) {`,\n  `    console.error('TheoBunAdapter requires Bun >= 1.1; got ' + Bun.version)`,\n  `    process.exit(1)`,\n  `  }`,\n  `}`,\n]\n\nexport function renderBunEntry(\n  port: number,\n  opts: {\n    ssrStreaming?: boolean\n    securityHeaders?: SecurityHeadersConfig\n  } & DeployedAgentsDirOptions &\n    DeployedCsrfOptions &\n    DeployedRuntimeConfigOptions &\n    DeployedServerDirOptions &\n    DeployedCorsOptions &\n    DeployedRateLimitOptions = {},\n): string {\n  const streamingComment = opts.ssrStreaming\n    ? `// T2.3 — ssrStreaming on; renderStreamingWeb may be consumed by app code`\n    : `// (ssrStreaming off)`\n  const runtimeConfig = deployedRuntimeConfigFragment(opts)\n  const agentsFragment = deployedAgentsFragment(\n    {\n      kind: 'scan',\n      projectRoot: 'cwd',\n      loadModule: 'loadModule',\n      serverDir: 'serverDir',\n      agentsDirLiteral: agentsDirLiteral(opts),\n    },\n    {\n      pathname: 'pathname',\n      // B-185 — bound only when the runtime-config fragment declared the const, which is\n      // exactly when a plugins module was emitted. Referencing it otherwise would emit an\n      // identifier the entry never declares.\n      pluginRunnerExpr:\n        opts.runtimeConfigModule === undefined ? undefined : 'await THEO_PLUGIN_RUNNER',\n    },\n  )\n  return [\n    `// Generated by Theo — Bun Adapter`,\n    `// Run: bun run .theokit/bun/server.mjs`,\n    `// Requires Bun >= 1.1`,\n    streamingComment,\n    ``,\n    ...RUNTIME_GUARDS,\n    ``,\n    `import { resolve, join } from 'node:path'`,\n    `import { existsSync } from 'node:fs'`,\n    `import { scanServerRoutes, matchRoute, executeRoute, createProductionLoader, extractTraceIdFromRequest, TRACE_HEADER, createCorsWebHandler${opts.rateLimit === undefined ? '' : ', createRateLimiterWeb'} } from 'theokit/server'`,\n    `import { createWebShim } from 'theokit/adapters/web-shim'`,\n    `import { buildSecurityHeaders, withSecurityHeaders } from 'theokit/adapters/security-headers'`,\n    `// T3.2 — WS bridge for Bun runtime`,\n    `import { createBunWsBridge } from 'theokit/adapters/ws-shim'`,\n    `import { scanWebSocketRoutes } from 'theokit/server'`,\n    ``,\n    `const cwd = process.cwd()`,\n    `const clientDir = resolve(cwd, '.theokit/client')`,\n    `const serverDir = resolve(cwd, ${serverDirLiteral(opts)})`,\n    `const port = process.env.PORT ? Number(process.env.PORT) : ${port}`,\n    ``,\n    `// #410 — the security baseline \\`theokit start\\` puts on every response,`,\n    `// carried here as a literal because the deployed process has no`,\n    `// theo.config.ts to read. Bun is the one Web target whose own handler serves`,\n    `// the HTML document (static file + SPA fallback below), so the document gets`,\n    `// these headers too -- with a nonce-less CSP, because that HTML was written`,\n    `// at build time and carries no nonce on its script tags (EC-4).`,\n    ...deployedEntryPreamble(runtimeConfig, agentsFragment, opts, 'bun'),\n    ``,\n    ...deployedRateLimitFragment(opts.rateLimit, 'bun', 'server.requestIP(request)?.address'),\n    ``,\n    `const routes = existsSync(serverDir) ? scanServerRoutes(serverDir) : []`,\n    `const wsRoutes = existsSync(serverDir) ? scanWebSocketRoutes(serverDir) : []`,\n    `const loadModule = createProductionLoader()`,\n    ``,\n    `// Bun WebSocket config — single handler dispatches to first ws route,`,\n    `// or a default no-op when none declared. Per-route routing happens above`,\n    `// (the upgrade decision is made in fetch handler before Bun.serve hands off).`,\n    `const wsBridge = wsRoutes.length > 0`,\n    `  ? createBunWsBridge({`,\n    `      onOpen: () => {},`,\n    `      onMessage: (ws, data) => { ws.send(data) },`,\n    `      onClose: () => {},`,\n    `    })`,\n    `  : { open: () => {}, message: () => {}, close: () => {} }`,\n    ``,\n    `function notFoundResponse() {`,\n    `  return new Response(JSON.stringify({ error: { code: 'NOT_FOUND', message: 'Route not found' } }), {`,\n    `    status: 404,`,\n    `    headers: { 'Content-Type': 'application/json' },`,\n    `  })`,\n    `}`,\n    ``,\n    `Bun.serve({`,\n    `  port,`,\n    `  websocket: wsBridge,`,\n    `  async fetch(request, server) {`,\n    `    // #409 — the preflight is answered BEFORE anything routes: an OPTIONS the router`,\n    `    // handles is an OPTIONS the browser never gets a CORS answer to.`,\n    `    const preflight = corsPreflight(request)`,\n    `    if (preflight !== null) return withSecurityHeaders(preflight, SECURITY_HEADERS)`,\n    ...rateLimitCheckFragment(opts.rateLimit, '    '),\n    `    return withCors(request, withSecurityHeaders(await handleRequest(request), SECURITY_HEADERS))`,\n    `  },`,\n    `})`,\n    ``,\n    ...bunHandleRequestFragment(runtimeConfig.executeRouteSpread, agentsFragment.branch),\n  ].join('\\n')\n}\n\n/**\n * The request handler, as generated source.\n *\n * Extracted for the reason `vercel.ts` extracts its own fragments: the emitter is one array\n * literal, so every line the entry gains counts against `max-lines-per-function`, and #410 added\n * the CSRF literal to an emitter that was already sitting exactly at the ceiling.\n */\nfunction bunHandleRequestFragment(runtimeSpread: string, agentBranch: readonly string[]): string[] {\n  return [\n    `async function handleRequest(request) {`,\n    `    const url = new URL(request.url)`,\n    `    const pathname = url.pathname`,\n    ``,\n    `    // 1) Static assets`,\n    `    const staticPath = pathname === '/' ? '/index.html' : pathname`,\n    `    const fullStatic = join(clientDir, staticPath)`,\n    `    if (existsSync(fullStatic)) {`,\n    `      const file = Bun.file(fullStatic)`,\n    `      if (await file.exists()) return new Response(file)`,\n    `    }`,\n    ``,\n    `    // 2) API routes through the full executeRoute pipeline via the shim`,\n    `    if (pathname.startsWith('/api/') || __theoIsAgentCardPath(pathname)) {`,\n    ...agentBranch,\n    ``,\n    `      const match = matchRoute(pathname, routes)`,\n    `      if (!match) return notFoundResponse()`,\n    `      const { req, res, toResponse } = createWebShim(request)`,\n    ...deployedTraceFragment('request', '      '),\n    `      const method = request.method.toUpperCase()`,\n    `      // #382 — not awaited: toResponse() settles at the headers and carries`,\n    `      // a live body, so Bun.serve streams while the handler writes.`,\n    `      return toResponse(executeRoute({ route: match.route, method, params: match.params, req, res, loadModule, serverDir, requestId, ...CSRF_CONFIG, ${runtimeSpread} }))`,\n    `    }`,\n    ``,\n    `    // 3) SPA fallback`,\n    `    const indexPath = join(clientDir, 'index.html')`,\n    `    if (existsSync(indexPath)) return new Response(Bun.file(indexPath))`,\n    ``,\n    `    return notFoundResponse()`,\n    `}`,\n    ``,\n    `console.log('Theo (Bun) listening on http://localhost:' + port)`,\n  ]\n}\n\nexport async function buildBun(\n  config: TheoConfig,\n  cwd: string,\n  deps: BunBuildDeps = {},\n  ctx?: AdapterBuildContext,\n): Promise<void> {\n  // Wave 2 (T2.2) — reject polyglot services on this adapter.\n  assertServicesUnsupported('bun', readManifest(cwd))\n\n  const runNodeBuild = deps.runNodeBuild ?? nodeAdapter.build.bind(nodeAdapter)\n  await runNodeBuild(config, cwd, ctx)\n\n  const outputDir = resolve(cwd, '.theokit/bun')\n  const ensureDir = deps.ensureDir ?? ((p: string) => mkdirSync(p, { recursive: true }))\n  ensureDir(outputDir)\n\n  const pluginsPlan = planDeployedPlugins(config.plugins, 'bun')\n  const entry = renderBunEntry(config.port, {\n    ssrStreaming: config.ssrStreaming,\n    securityHeaders: config.security?.headers,\n    csrf: config.security?.csrf,\n    disallowed: config.security?.disallowed,\n    cors: config.security?.cors,\n    // #425 — a selector, not a transformer, so it rides as a literal like the values above.\n    serialization: config.serialization,\n    // #425 — the ONE concern that is not a literal. A closure cannot be baked, so a plugin\n    // declared by module specifier is imported by the emitted module instead; a constructed one\n    // is refused by name at build time rather than dropped in silence.\n    runtimeConfigModule: pluginsPlan?.moduleSpecifier,\n    // #95 — the configured directories, which `build.ts:210` already threads into the Vite\n    // plugins. Without these two lines the literals above fall to their defaults and a project\n    // with a custom dir deploys an entry that resolves a directory it does not have.\n    serverDir: config.serverDir,\n    agentsDir: config.agentsDir,\n  })\n  const write =\n    deps.writeEntry ??\n    ((p, c) => {\n      writeFileSync(p, c)\n    })\n  if (pluginsPlan !== undefined) {\n    // Beside the entry, so the emitted import is a sibling. Written through the same seam as\n    // the entry so a test that captures one captures both (#425).\n    write(resolve(outputDir, 'theo.plugins.mjs'), pluginsPlan.source)\n  }\n  write(resolve(outputDir, 'server.mjs'), entry)\n\n  // eslint-disable-next-line no-console -- CLI build progress\n  console.log('\\n  ✓ Bun output → .theokit/bun/server.mjs')\n  // eslint-disable-next-line no-console -- CLI build progress\n  console.log(\n    `${describeDeployedSecurityHeaders({\n      target: 'bun',\n      securityHeaders: config.security?.headers,\n      // No deploy target other than the streamed Cloudflare worker renders HTML\n      // at request time, so none of the rest can mint a nonce.\n      mintsNonce: false,\n      // Bun serves `.theokit/client` itself, so the document DOES pass through\n      // the handler these headers are attached to.\n      documentHeaders: 'handler',\n    })}\\n`,\n  )\n}\n\nexport const bunAdapter: DeployAdapter = {\n  name: 'bun',\n  streamsResponses: true,\n  // #409 / #410 — the generated entry calls `executeRoute` with routes, loader\n  // and serverDir only. CSRF, route policy, file middleware and Zod validation\n  // still run because they live inside `executeRoute`; none of the remaining\n  // configurable concerns reach it. Declared explicitly rather than omitted so\n  // the gap is a statement in the source and not an absence.\n  //\n  // `securityHeaders` IS applied: the entry carries `security.headers` as a\n  // literal and puts the built baseline on every response, the served document\n  // included.\n  servesAgents: true,\n  appliesConfig: [\n    'securityHeaders',\n    'csrf',\n    'disallowed',\n    'cors',\n    'serialization',\n    'plugins',\n    // #508 — bun is the first Web target to ENFORCE a declared limit rather than refuse the\n    // build: `Bun.serve` is long-lived, so the in-process counter survives, and its handler\n    // already receives `server`, whose `requestIP` gives the peer address without a header.\n    'rateLimit',\n  ],\n  // B-257 — a long-lived process: the in-process counter survives between requests.\n  enforcesRateLimit: 'always',\n  build(config, cwd, ctx) {\n    return buildBun(config, cwd, {}, ctx)\n  },\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,SAAS,WAAW,qBAAqB;AACzC,SAAS,eAAe;AA0CxB,IAAM,iBAAoC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,eACd,MACA,OAQ6B,CAAC,GACtB;AACR,QAAM,mBAAmB,KAAK,eAC1B,mFACA;AACJ,QAAM,gBAAgB,8BAA8B,IAAI;AACxD,QAAM,iBAAiB;AAAA,IACrB;AAAA,MACE,MAAM;AAAA,MACN,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,kBAAkB,iBAAiB,IAAI;AAAA,IACzC;AAAA,IACA;AAAA,MACE,UAAU;AAAA;AAAA;AAAA;AAAA,MAIV,kBACE,KAAK,wBAAwB,SAAY,SAAY;AAAA,IACzD;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA,6IAA6I,KAAK,cAAc,SAAY,KAAK,wBAAwB;AAAA,IACzM;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,kCAAkC,iBAAiB,IAAI,CAAC;AAAA,IACxD,8DAA8D,IAAI;AAAA,IAClE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,sBAAsB,eAAe,gBAAgB,MAAM,KAAK;AAAA,IACnE;AAAA,IACA,GAAG,0BAA0B,KAAK,WAAW,OAAO,oCAAoC;AAAA,IACxF;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,uBAAuB,KAAK,WAAW,MAAM;AAAA,IAChD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,yBAAyB,cAAc,oBAAoB,eAAe,MAAM;AAAA,EACrF,EAAE,KAAK,IAAI;AACb;AASA,SAAS,yBAAyB,eAAuB,aAA0C;AACjG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG,sBAAsB,WAAW,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,IACA,wJAAwJ,aAAa;AAAA,IACrK;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,SACpB,QACA,KACA,OAAqB,CAAC,GACtB,KACe;AAEf,4BAA0B,OAAO,aAAa,GAAG,CAAC;AAElD,QAAM,eAAe,KAAK,gBAAgB,YAAY,MAAM,KAAK,WAAW;AAC5E,QAAM,aAAa,QAAQ,KAAK,GAAG;AAEnC,QAAM,YAAY,QAAQ,KAAK,cAAc;AAC7C,QAAM,YAAY,KAAK,cAAc,CAAC,MAAc,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACpF,YAAU,SAAS;AAEnB,QAAM,cAAc,oBAAoB,OAAO,SAAS,KAAK;AAC7D,QAAM,QAAQ,eAAe,OAAO,MAAM;AAAA,IACxC,cAAc,OAAO;AAAA,IACrB,iBAAiB,OAAO,UAAU;AAAA,IAClC,MAAM,OAAO,UAAU;AAAA,IACvB,YAAY,OAAO,UAAU;AAAA,IAC7B,MAAM,OAAO,UAAU;AAAA;AAAA,IAEvB,eAAe,OAAO;AAAA;AAAA;AAAA;AAAA,IAItB,qBAAqB,aAAa;AAAA;AAAA;AAAA;AAAA,IAIlC,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACpB,CAAC;AACD,QAAM,QACJ,KAAK,eACJ,CAAC,GAAG,MAAM;AACT,kBAAc,GAAG,CAAC;AAAA,EACpB;AACF,MAAI,gBAAgB,QAAW;AAG7B,UAAM,QAAQ,WAAW,kBAAkB,GAAG,YAAY,MAAM;AAAA,EAClE;AACA,QAAM,QAAQ,WAAW,YAAY,GAAG,KAAK;AAG7C,UAAQ,IAAI,sDAA4C;AAExD,UAAQ;AAAA,IACN,GAAG,gCAAgC;AAAA,MACjC,QAAQ;AAAA,MACR,iBAAiB,OAAO,UAAU;AAAA;AAAA;AAAA,MAGlC,YAAY;AAAA;AAAA;AAAA,MAGZ,iBAAiB;AAAA,IACnB,CAAC,CAAC;AAAA;AAAA,EACJ;AACF;AAEO,IAAM,aAA4B;AAAA,EACvC,MAAM;AAAA,EACN,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUlB,cAAc;AAAA,EACd,eAAe;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA;AAAA,EACF;AAAA;AAAA,EAEA,mBAAmB;AAAA,EACnB,MAAM,QAAQ,KAAK,KAAK;AACtB,WAAO,SAAS,QAAQ,KAAK,CAAC,GAAG,GAAG;AAAA,EACtC;AACF;","names":[]}

package/dist/{chunk-PGDBSK2L.js → chunk-7CHPOMP5.js}

@@ -26,7 +26,7 @@ import {
   parseAgentRequestBody,
   readAgentPolicy,
   subjectFromContext
-} from "./chunk-5XXXJ6DT.js";
+} from "./chunk-EZHDAVAF.js";
 import {
   getApprovalRegistry
 } from "./chunk-BINRCILF.js";
@@ -901,4 +901,4 @@ export {
   applyNonceToInlineScripts,
   setupSsrDevMiddleware
 };
-//# sourceMappingURL=chunk-PGDBSK2L.js.map
+//# sourceMappingURL=chunk-7CHPOMP5.js.map

package/dist/{chunk-FWEXQ2BR.js → chunk-BZ6DFSKG.js}

@@ -13,7 +13,7 @@ import {
   isAgentCardPath,
   matchAgentAuxRoute,
   serveMatchedAuxRoute
-} from "./chunk-3NAKOWTX.js";
+} from "./chunk-IVGQMV3S.js";
 import {
   admitAgentRequest,
   agentAccessDenied,
@@ -29,7 +29,7 @@ import {
   securitySchema,
   storageSchema,
   uploadSchema
-} from "./chunk-SX7ZAHNE.js";
+} from "./chunk-WBB3MEEN.js";
 import {
   broadcastToDevtools
 } from "./chunk-OIGJOYX6.js";
@@ -75,7 +75,7 @@ import {
 } from "./chunk-VSLTKX5L.js";
 import {
   createRateLimiter
-} from "./chunk-TNI4MARH.js";
+} from "./chunk-SFGGRC35.js";
 import {
   createViteLoader
 } from "./chunk-4ERYQBL6.js";
@@ -3024,19 +3024,19 @@ async function theoPluginAsync(rootOrOptions) {
   }
   const { assetsMapPlugin } = await import("./assets-map-CV2YZ3MY.js");
   const assetsMap = assetsMapPlugin({ appDir: resolve9(projectRoot, options.appDir ?? "app") });
-  const { appTypedClientPlugin } = await import("./app-typed-client-LIIPHLO6.js");
+  const { appTypedClientPlugin } = await import("./app-typed-client-6VIHSYJH.js");
   const appClientPlugin = appTypedClientPlugin({
     cwd: projectRoot,
     serverDir: serverDirAbs,
     distDir: resolve9(projectRoot, ".theokit")
   });
-  const { actionsVirtualModule } = await import("./actions-virtual-module-5LRBP6YK.js");
+  const { actionsVirtualModule } = await import("./actions-virtual-module-WP47EKD7.js");
   const actionsPlugin = actionsVirtualModule({
     serverDir: serverDirAbs,
     distDir: resolve9(projectRoot, ".theokit")
   });
   const { agentsTypedClientPlugin } = await import("./agents-typed-client-PVUZU65B.js");
-  const { generateManifest } = await import("./internal-api-TMLSNYMP.js");
+  const { generateManifest } = await import("./internal-api-3IZVNNGB.js");
   const agentsClientPlugin = agentsTypedClientPlugin({
     projectRoot,
     agentsDir: agentsDirName,
@@ -3053,7 +3053,7 @@ async function theoPluginAsync(rootOrOptions) {
   const controllerTransformPlugin = controllerSwcTransformPlugin({
     serverDir: serverDirAbs
   });
-  const { serverOnlyImportBoundary } = await import("./server-boundary-NZPP33G6.js");
+  const { serverOnlyImportBoundary } = await import("./server-boundary-WUKORSW2.js");
   const serverBoundaryPlugin = serverOnlyImportBoundary({
     projectRoot,
     serverDir: serverDirAbs
@@ -3237,4 +3237,4 @@ export {
   theoPluginAsync,
   theoPlugin
 };
-//# sourceMappingURL=chunk-FWEXQ2BR.js.map
+//# sourceMappingURL=chunk-BZ6DFSKG.js.map

package/dist/{chunk-FFGP2LGQ.js → chunk-C5CAL3DX.js}

@@ -390,6 +390,269 @@ function describeDeployedSecurityHeaders(limits) {
   return lines.join("\n");
 }
 
+// src/adapters/deployed-rate-limit.ts
+var UnserialisableRateLimitError = class extends Error {
+  constructor(target, reason, ways) {
+    super(
+      [
+        `Refusing to build for \`${target}\`: theo.config.ts declares a rate limit this target cannot carry.`,
+        ``,
+        `  ${reason}`,
+        ``,
+        `  Ways forward:`,
+        ...ways.map((w) => `    \u2022 ${w}`),
+        ``,
+        `  This refuses rather than dropping the key, because a rate limit that silently does not`,
+        `  apply looks exactly like one that does (usetheokit/theokit#461, #508).`
+      ].join("\n")
+    );
+    this.target = target;
+    this.reason = reason;
+  }
+  target;
+  reason;
+  name = "UnserialisableRateLimitError";
+};
+var IDENTIFIER = /^[A-Za-z_$][\w$]*$/;
+var NOT_BINDABLE = /* @__PURE__ */ new Set([
+  "await",
+  "break",
+  "case",
+  "catch",
+  "class",
+  "const",
+  "continue",
+  "debugger",
+  "default",
+  "delete",
+  "do",
+  "else",
+  "enum",
+  "export",
+  "extends",
+  "false",
+  "finally",
+  "for",
+  "function",
+  "if",
+  "import",
+  "in",
+  "instanceof",
+  "new",
+  "null",
+  "return",
+  "super",
+  "switch",
+  "this",
+  "throw",
+  "true",
+  "try",
+  "typeof",
+  "var",
+  "void",
+  "while",
+  "with",
+  "yield"
+]);
+function assertBakeableStore(store, target) {
+  if (store === void 0) return;
+  if (!isStoreShaped(store)) {
+    throw new UnserialisableRateLimitError(
+      target,
+      "`security.rateLimit.store` must be an object naming a module and a factory.",
+      [
+        "declare `store: { module: '@upstash/redis', factory: 'Redis' }`",
+        "omit `store` and let the build refuse this target, which is honest about not limiting"
+      ]
+    );
+  }
+  const { module: mod, factory } = store;
+  if (typeof mod !== "string" || mod.length === 0) {
+    throw new UnserialisableRateLimitError(
+      target,
+      "`security.rateLimit.store.module` must be the specifier the entry imports from.",
+      ["declare `module: '@upstash/redis'`", "omit `store`"]
+    );
+  }
+  if (typeof factory !== "string" || !IDENTIFIER.test(factory) || NOT_BINDABLE.has(factory)) {
+    throw new UnserialisableRateLimitError(
+      target,
+      "`security.rateLimit.store.factory` must be a plain identifier \u2014 it is written into the generated entry as `import { <factory> }`, where a quoted string would not parse, so it is validated rather than escaped. Anything else would put arbitrary source in every deployment this config builds.",
+      [
+        "name the export directly: `factory: 'Redis'`",
+        "omit `store` and let the build refuse this target"
+      ]
+    );
+  }
+  const { options } = store;
+  if (options !== void 0) {
+    if (typeof options !== "object" || options === null || Array.isArray(options)) {
+      throw new UnserialisableRateLimitError(
+        target,
+        "`security.rateLimit.store.options` must be an object of scalar values.",
+        [
+          "declare `options: { url: 'redis://\u2026', retries: 3 }`",
+          "omit `options` and configure the store inside the factory"
+        ]
+      );
+    }
+    const offending = Object.entries(options).find(
+      ([, v]) => typeof v !== "string" && typeof v !== "number" && typeof v !== "boolean"
+    );
+    if (offending !== void 0) {
+      throw new UnserialisableRateLimitError(
+        target,
+        `\`security.rateLimit.store.options.${offending[0]}\` must be a string, number or boolean.`,
+        [
+          "declare scalars only \u2014 strings, numbers and booleans",
+          "move anything else into the factory itself, which the generated entry calls at runtime"
+        ]
+      );
+    }
+  }
+}
+function isStoreShaped(store) {
+  return typeof store === "object" && store !== null && !Array.isArray(store);
+}
+function bakeableRateLimit(rateLimit, target) {
+  if (rateLimit === void 0) return void 0;
+  const cfg = rateLimit;
+  if (typeof cfg.keyBy === "function") {
+    throw new UnserialisableRateLimitError(
+      target,
+      "`security.rateLimit.keyBy` is a function, and a deployed entry has no literal for a closure.",
+      [
+        "use `keyBy: 'ip'` (the default), which this target resolves from the connection",
+        "build for `node` and run `theokit start`, which can call the function"
+      ]
+    );
+  }
+  if (cfg.keyBy === "session" || cfg.keyBy === "user") {
+    throw new UnserialisableRateLimitError(
+      target,
+      `\`security.rateLimit.keyBy: '${cfg.keyBy}'\` needs a resolved session, and the limit runs before routing.`,
+      [
+        "use `keyBy: 'ip'`, which is resolvable at that point",
+        "build for `node` and run `theokit start`"
+      ]
+    );
+  }
+  assertBakeableStore(cfg.store, target);
+  if (cfg.routes !== void 0) {
+    throw new UnserialisableRateLimitError(
+      target,
+      "`security.rateLimit.routes` needs the matched route, which is decided after the limit runs here.",
+      [
+        "declare a single global limit (`windowMs` + `max`)",
+        "build for `node` and run `theokit start`, which applies per-route limits"
+      ]
+    );
+  }
+  const windowMs = cfg.windowMs;
+  const max = cfg.max;
+  if (typeof windowMs !== "number" || typeof max !== "number") return void 0;
+  const trustProxy = cfg.trustProxy;
+  return {
+    windowMs,
+    max,
+    trustProxy: typeof trustProxy === "boolean" || typeof trustProxy === "number" ? trustProxy : false,
+    // Validated above — `module` and `options` are escaped at emit time, `factory` was checked
+    // against IDENTIFIER because it cannot be.
+    store: cfg.store
+  };
+}
+function deployedRateLimitFragment(rateLimit, target, addressExpression, params = "request, server", importPrefix = "") {
+  const baked = bakeableRateLimit(rateLimit, target);
+  if (baked === void 0) return [];
+  return [
+    `// #508 \u2014 the limit the app declared, carried as a literal because a deployed entry has no`,
+    `// theo.config.ts to read.`,
+    `//`,
+    `// WHERE THIS COUNTER LIVES, and it is not the same answer per target. On a long-lived server`,
+    `// (\`bun\`) the process outlives a request and the count holds. On a per-invocation or`,
+    `// per-isolate runtime \u2014 Cloudflare, AWS Lambda, Netlify, Vercel, Deno Deploy \u2014 it does not:`,
+    `// the limit is PER INSTANCE, and a caller spread across instances gets that many budgets.`,
+    `// The address is resolved correctly either way; the counting is what B-257 is about, and`,
+    `// \`theokit build\` refuses a declared limit on those five until it is.`,
+    // B-262 — ONE builder, one signature, always async. The emitter used to branch here:
+    // `createRateLimiterWeb` returns a value and `createDurableRateLimiterWeb` returns a Promise, so
+    // the CALL SITE had to know which it got and emit `await` or not. A call site whose shape changes
+    // with the config is what produced B-257's missing `await`, and `buildRateLimiter` removes the
+    // decision rather than documenting it.
+    `import { buildRateLimiter } from '${importPrefix}theokit/server/rate-limit'`,
+    ...baked.store === void 0 ? [
+      `const RATE_LIMIT = buildRateLimiter({ windowMs: ${baked.windowMs}, max: ${baked.max} }, undefined)`
+    ] : [
+      // B-257 — a durable counter, named by the app. `module` and the options are JSON literals;
+      // `factory` was validated against IDENTIFIER at bake time because it lands here as a bare
+      // identifier and no escape can make that safe.
+      //
+      // The limiter's own import is emitted HERE rather than by each adapter. See `importPrefix`.
+      `import { ${baked.store.factory} } from ${JSON.stringify(baked.store.module)}`,
+      `const RATE_LIMIT_STORE = new ${baked.store.factory}(${JSON.stringify(baked.store.options ?? {})})`,
+      `const RATE_LIMIT = buildRateLimiter(`,
+      `  { windowMs: ${baked.windowMs}, max: ${baked.max} },`,
+      `  RATE_LIMIT_STORE,`,
+      `)`
+    ],
+    ``,
+    `// How many proxies the deployment declared in front of it. \`client-ip.ts\` reads a forwarded`,
+    `// header only when this says one wrote it: the header is whatever the client typed, so`,
+    `// trusting it unasked lets anyone rotate a forged value past the limiter with one \`curl -H\`.`,
+    `const TRUST_PROXY = ${JSON.stringify(baked.trustProxy)}`,
+    ``,
+    `/**`,
+    ` * The caller's address, from the connection rather than from a header.`,
+    ` *`,
+    ` * A header a client can set is a key a client can choose, which makes the bucket theirs to`,
+    ` * split. An address this runtime cannot resolve returns \`undefined\`, and the caller answers`,
+    ` * 503 rather than keying on a constant: one shared bucket is a budget the first caller each`,
+    ` * window exhausts for everyone, which is worse than no limiting at all.`,
+    ` */`,
+    `const addr = (v) => (typeof v === 'string' && v.trim() !== '' ? v.trim() : undefined)`,
+    `function callerAddress(${params}) {`,
+    `  return addr(${addressExpression})`,
+    `}`,
+    ``,
+    `/** The 503 a caller this runtime cannot name gets, instead of everyone's shared bucket. */`,
+    `function unnamedCaller() {`,
+    `  return new Response(`,
+    `    JSON.stringify({ error: { code: 'CALLER_UNRESOLVED', message: ${JSON.stringify(
+      `${target} could not resolve the caller's address, and a rate limit keyed on a constant is a denial of service`
+    )} } }),`,
+    `    { status: 503, headers: { 'Content-Type': 'application/json' } },`,
+    `  )`,
+    `}`,
+    ``,
+    `/** The 429 a limited caller gets, carrying the limiter's own headers. */`,
+    `function rateLimited(result) {`,
+    `  return new Response(JSON.stringify({ error: { code: 'RATE_LIMITED', message: 'Too many requests' } }), {`,
+    `    status: 429,`,
+    `    headers: { 'Content-Type': 'application/json', ...result.headers },`,
+    `  })`,
+    `}`
+  ];
+}
+function rateLimitCheckFragment(rateLimit, indent, args = "request, server", refuse = "return withCors(request, withSecurityHeaders(rateLimited(limit), SECURITY_HEADERS))", refuseUnnamed = "return withCors(request, withSecurityHeaders(unnamedCaller(), SECURITY_HEADERS))") {
+  if (rateLimit === void 0) return [];
+  return [
+    `${indent}const caller = callerAddress(${args})`,
+    `${indent}if (caller === undefined) {`,
+    `${indent}  ${refuseUnnamed}`,
+    `${indent}}`,
+    // B-257 — the call side of the pair. `deployedRateLimitFragment` emits the DECLARATION; this
+    // emits the CALL, and the two branch on the same fact or the entry names a symbol it never
+    // declared. A durable limiter returns a promise; the sync facade does not.
+    // B-262 — `await` unconditionally. `buildRateLimiter` is always async, so this line no longer
+    // asks what the config declared. The conditional it replaces is where B-257's defect lived:
+    // a Promise read for `limited` is always `undefined`, always falsy, and every request passes.
+    `${indent}const limit = await RATE_LIMIT(caller)`,
+    `${indent}if (limit.limited) {`,
+    `${indent}  ${refuse}`,
+    `${indent}}`
+  ];
+}
+
 // src/adapters/deployed-runtime-config.ts
 function serverDirLiteral(opts) {
   return JSON.stringify(opts.serverDir ?? "server");
@@ -457,9 +720,11 @@ export {
   deployedCsrfFragment,
   securityHeadersDeclarations,
   describeDeployedSecurityHeaders,
+  deployedRateLimitFragment,
+  rateLimitCheckFragment,
   serverDirLiteral,
   agentsDirLiteral,
   deployedRuntimeConfigFragment,
   deployedTraceFragment
 };
-//# sourceMappingURL=chunk-FFGP2LGQ.js.map
+//# sourceMappingURL=chunk-C5CAL3DX.js.map