@devframes/hub 0.9.11 → 0.9.15

package/dist/{assemble-BvY5jfgi.mjs → assemble-B-ISfDe5.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveClientModuleSpecifier } from "./remote-url-UClKLQ5_.mjs";
-import { v as prepareDevframe, y as diagnostics } from "./context-Cdrtg-Kk.mjs";
+import { v as prepareDevframe, y as diagnostics } from "./context-C7AFekjP.mjs";
 import { joinURL, withTrailingSlash } from "ufo";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_MCP_ROUTE, DEVFRAME_WS_ROUTE } from "devframe/constants";
 import { existsSync } from "node:fs";

package/dist/client/index.d.mts

@@ -17,7 +17,7 @@ export * from "devframe/client";
  * viewer. With neither, it stays unchanged, since a page import map may
  * still cover it.
  */
-declare function resolveClientModuleSpecifier(specifier: string, options?: {
+export declare function resolveClientModuleSpecifier(specifier: string, options?: {
   resolveClientModule?: (specifier: string) => string | undefined;
   template?: string;
   metaBaseUrl?: string;
@@ -28,13 +28,13 @@ declare function resolveClientModuleSpecifier(specifier: string, options?: {
  * declared specifier, `specifier` what was actually imported (after
  * {@link resolveClientModuleSpecifier}).
  */
-declare function clientScriptFailureHint(importFrom: string, specifier: string): string;
+export declare function clientScriptFailureHint(importFrom: string, specifier: string): string;
 //#endregion
 //#region src/client/renderers.d.ts
 /**
  * Options handed to a dock renderer when the client host mounts a dock entry.
  */
-interface DockRendererMountOptions<Entry extends DevframeDockEntry = DevframeDockEntry> {
+export interface DockRendererMountOptions<Entry extends DevframeDockEntry = DevframeDockEntry> {
   /** The dock entry being rendered (carries the entry's serializable payload). */
   entry: Entry;
   /**
@@ -50,7 +50,7 @@ interface DockRendererMountOptions<Entry extends DevframeDockEntry = DevframeDoc
   context: DevframeClientContext;
 }
 /** A mounted renderer instance the host can tear down. */
-interface DockRendererInstance {
+export interface DockRendererInstance {
   /** Tear down the mounted UI and release its subscriptions. */
   dispose?: () => void;
 }
@@ -66,14 +66,14 @@ interface DockRendererInstance {
  * e.g. `@devframes/json-render/hub` exports
  * `JsonRenderDockRenderer = DockRenderer<DevframeJsonRenderDockEntry>`.
  */
-type DockRenderer<Entry extends DevframeDockEntry = DevframeDockEntry> = (options: DockRendererMountOptions<Entry>) => DockRendererInstance | Promise<DockRendererInstance>;
+export type DockRenderer<Entry extends DevframeDockEntry = DevframeDockEntry> = (options: DockRendererMountOptions<Entry>) => DockRendererInstance | Promise<DockRendererInstance>;
 /**
  * The outcome of {@link DockRenderersContext.mount}. A missing renderer is an
  * expected, non-exceptional state: a viewer renders its "no renderer for this
  * dock type" fallback from `missing-renderer`, and its error variant (with a
  * retry affordance) from `load-error`.
  */
-type DockRendererMountResult = {
+export type DockRendererMountResult = {
   status: 'mounted';
   dispose: () => void;
 } | {
@@ -89,7 +89,7 @@ type DockRendererMountResult = {
  * hub's renderer manifest) into a container it owns; the host tracks the
  * instance and disposes it when the entry deactivates.
  */
-interface DockRenderersContext {
+export interface DockRenderersContext {
   /**
    * Register a renderer for a dock `type`. Returns an unregister function.
    * Accepts a renderer narrowed to any specific entry variant (e.g. a
@@ -125,9 +125,9 @@ interface DockRenderersContext {
  * convention: the module's `importName` export (default `'default'`) is a
  * ready {@link DockRenderer}.
  */
-type DockRendererManifest = Record<string, ClientScriptEntry>;
+export type DockRendererManifest = Record<string, ClientScriptEntry>;
 /** Options for {@link createDockRenderersContext}. */
-interface CreateDockRenderersContextOptions {
+export interface CreateDockRenderersContextOptions {
   /** The assembled client context handed to renderers at mount. */
   context: () => DevframeClientContext;
   /** Renderers registered locally at boot; these win over manifest modules. */
@@ -148,10 +148,10 @@ interface CreateDockRenderersContextOptions {
  * (`@devframes/hub-ui`) both delegate here so local-first resolution, lazy
  * manifest imports, and the typed mount result behave identically everywhere.
  */
-declare function createDockRenderersContext(options: CreateDockRenderersContextOptions): DockRenderersContext;
+export declare function createDockRenderersContext(options: CreateDockRenderersContextOptions): DockRenderersContext;
 //#endregion
 //#region src/client/docks.d.ts
-interface DockPanelStorage {
+export interface DockPanelStorage {
   mode: 'float' | 'edge';
   width: number;
   height: number;
@@ -170,7 +170,7 @@ interface DockPanelStorage {
  * the same dev server each keep their own selection rather than fighting over a
  * shared one. Every field is serializable.
  */
-interface DockSessionStorage {
+export interface DockSessionStorage {
   /** Whether the dock panel is open. */
   open: boolean;
   /** The currently selected dock entry id, or `null` when nothing is open. */
@@ -203,8 +203,8 @@ interface DockSessionStorage {
    */
   groupLastChildIds?: Record<string, string>;
 }
-type DockClientType = 'embedded' | 'standalone';
-interface DocksContext extends DevframeRpcContext {
+export type DockClientType = 'embedded' | 'standalone';
+export interface DocksContext extends DevframeRpcContext {
   /**
    * Type of the client environment
    *
@@ -241,7 +241,7 @@ interface DocksContext extends DevframeRpcContext {
    */
   readonly renderers: DockRenderersContext;
 }
-interface DocksConnectionContext {
+export interface DocksConnectionContext {
   /** The current connection status. */
   readonly status: DevframeConnectionStatus;
   /** The most recent connection-level error, or `null` when healthy. */
@@ -252,18 +252,18 @@ interface DocksConnectionContext {
    */
   readonly events: EventEmitter<RpcClientEvents$1>;
 }
-interface WhenClauseContext {
+export interface WhenClauseContext {
   /**
    * Get the current when-clause context snapshot.
    * Returns a reactive object with built-in variables and any custom plugin variables.
    */
   readonly context: WhenContext;
 }
-type DevframeClientContext = DocksContext;
-interface DocksPanelEvents {
+export type DevframeClientContext = DocksContext;
+export interface DocksPanelEvents {
   'panel:state:changed': (panelState: DevframeDockPanelState) => void;
 }
-interface DocksPanelContext {
+export interface DocksPanelContext {
   /** The current panel state snapshot. */
   readonly state: DevframeDockPanelState;
   /** Subscribe to panel state changes after the current snapshot. */
@@ -289,7 +289,7 @@ interface DocksPanelContext {
    */
   consumeBootRoute?: (id: string) => string | null;
 }
-interface DocksEntriesContext {
+export interface DocksEntriesContext {
   selectedId: string | null;
   selectedRoute: string | null;
   readonly selected: DevframeDockEntry | null;
@@ -341,7 +341,7 @@ interface DocksEntriesContext {
    */
   update: (entry: DevframeDockUserEntry) => void;
 }
-interface DockRegistration<T extends DevframeDockEntry = DevframeDockEntry> {
+export interface DockRegistration<T extends DevframeDockEntry = DevframeDockEntry> {
   /**
    * Patch the registered client dock in place. The `id` is immutable, so passing
    * a differing `id` throws.
@@ -350,7 +350,7 @@ interface DockRegistration<T extends DevframeDockEntry = DevframeDockEntry> {
   /** Remove the client dock from the local merge. */
   dispose: () => void;
 }
-interface DockEntryState {
+export interface DockEntryState {
   entryMeta: DevframeDockEntry;
   readonly isActive: boolean;
   domElements: {
@@ -359,14 +359,14 @@ interface DockEntryState {
   };
   events: EventEmitter<DockEntryStateEvents>;
 }
-interface DockEntryStateEvents {
+export interface DockEntryStateEvents {
   'entry:activated': () => void;
   'entry:deactivated': () => void;
   'entry:updated': (newMeta: DevframeDockUserEntry) => void;
   'dom:panel:mounted': (panel: HTMLDivElement) => void;
   'dom:iframe:mounted': (iframe: HTMLIFrameElement) => void;
 }
-interface CommandsContext {
+export interface CommandsContext {
   /**
    * All commands (server + client)
    */
@@ -415,7 +415,7 @@ interface CommandsContext {
 /**
  * Context for client scripts running in dock entries
  */
-interface DockClientScriptContext extends DocksContext {
+export interface DockClientScriptContext extends DocksContext {
   /**
    * The state of the current dock entry
    */
@@ -432,13 +432,13 @@ declare const CLIENT_CONTEXT_KEY = "__DEVFRAME_HUB_CLIENT_CONTEXT__";
 /**
  * Get the global Devframe client context, or `undefined` if not yet initialized.
  */
-declare function getDevframeClientContext(): DevframeClientContext | undefined;
+export declare function getDevframeClientContext(): DevframeClientContext | undefined;
 /**
  * Publish the global Devframe client context (or clear it with `undefined`).
  * Called by {@link import('./host').createDevframeClientRuntime}; a dock client
  * script or a hub UI provider reads it back with {@link getDevframeClientContext}.
  */
-declare function setDevframeClientContext(ctx: DevframeClientContext | undefined): void;
+export declare function setDevframeClientContext(ctx: DevframeClientContext | undefined): void;
 //#endregion
 //#region src/client/dock-resources.d.ts
 /**
@@ -446,9 +446,9 @@ declare function setDevframeClientContext(ctx: DevframeClientContext | undefined
  * dock entry. This keeps root-relative and dot-relative paths on the host
  * server when an external viewer renders the hub.
  */
-declare function resolveDockUrl(url: string, connection: DevframeConnection): string;
+export declare function resolveDockUrl(url: string, connection: DevframeConnection): string;
 /** Resolve URL-backed dock icons while preserving Iconify names and data URLs. */
-declare function resolveDockIcon(icon: DevframeDockEntryIcon, connection: DevframeConnection): DevframeDockEntryIcon;
+export declare function resolveDockIcon(icon: DevframeDockEntryIcon, connection: DevframeConnection): DevframeDockEntryIcon;
 //#endregion
 //#region src/client/frame-location.d.ts
 /**
@@ -481,12 +481,12 @@ declare function resolveDockIcon(icon: DevframeDockEntryIcon, connection: Devfra
  * so the caller keeps the last URL it knew.
  */
 /** The minimal `history` surface the watcher wraps. Injectable for tests. */
-interface FrameLocationHistory {
+export interface FrameLocationHistory {
   pushState: (...args: any[]) => void;
   replaceState: (...args: any[]) => void;
 }
 /** The minimal frame-window surface the watcher reads and subscribes to. */
-interface FrameLocationWindow {
+export interface FrameLocationWindow {
   readonly location: {
     readonly href: string;
   };
@@ -500,12 +500,12 @@ interface FrameLocationWindow {
   removeEventListener: (type: 'popstate' | 'hashchange', listener: () => void) => void;
 }
 /** The minimal iframe surface the watcher needs. Injectable for tests. */
-interface FrameLocationTarget {
+export interface FrameLocationTarget {
   readonly contentWindow: FrameLocationWindow | null;
   addEventListener: (type: 'load', listener: () => void) => void;
   removeEventListener: (type: 'load', listener: () => void) => void;
 }
-interface WatchFrameLocationOptions {
+export interface WatchFrameLocationOptions {
   /** The live iframe whose location is tracked. */
   iframe: FrameLocationTarget;
   /** Called with the frame's `location.href` on each observed change. */
@@ -521,7 +521,7 @@ interface WatchFrameLocationOptions {
  * detaches every listener and restores any wrapped `history` method, leaving the
  * embedded page as it was found.
  */
-declare function watchFrameLocation(options: WatchFrameLocationOptions): () => void;
+export declare function watchFrameLocation(options: WatchFrameLocationOptions): () => void;
 //#endregion
 //#region src/client/frame-nav.d.ts
 /**
@@ -544,11 +544,11 @@ declare function watchFrameLocation(options: WatchFrameLocationOptions): () => v
  * decoupled, so the embedded app takes no hub/RPC dependency, only the shim.
  */
 /** `postMessage` channel tag shared by both halves of the protocol. */
-declare const FRAME_NAV_CHANNEL: string;
+export declare const FRAME_NAV_CHANNEL: string;
 /** Protocol version. */
-declare const FRAME_NAV_VERSION = 1;
+export declare const FRAME_NAV_VERSION = 1;
 /** Envelope every frame-nav message carries. */
-interface FrameNavEnvelope {
+export interface FrameNavEnvelope {
   channel: typeof FRAME_NAV_CHANNEL;
   v: typeof FRAME_NAV_VERSION;
   frameId: string;
@@ -559,7 +559,7 @@ interface FrameNavEnvelope {
  * One tab in the manifest the shim reports. Maps directly onto a dock entry, so
  * a materialized member dock is first-class.
  */
-interface FrameTab {
+export interface FrameTab {
   /** Unique within the frame. The member dock id becomes `<frameId>:<id>`. */
   id: string;
   title: string;
@@ -579,7 +579,7 @@ interface FrameTab {
   groupId?: string;
 }
 /** Host → frame message payloads (without the {@link FrameNavEnvelope}). */
-type FrameNavHostPayload = {
+export type FrameNavHostPayload = {
   type: 'hello';
 } | {
   type: 'navigate';
@@ -587,11 +587,11 @@ type FrameNavHostPayload = {
   navTarget: NavTarget;
 };
 /** Host → frame messages. */
-type FrameNavHostMessage = FrameNavEnvelope & {
+export type FrameNavHostMessage = FrameNavEnvelope & {
   from: 'host';
 } & FrameNavHostPayload;
 /** Frame → host messages. */
-type FrameNavFrameMessage = FrameNavEnvelope & {
+export type FrameNavFrameMessage = FrameNavEnvelope & {
   from: 'frame';
 } & ({
   type: 'ready';
@@ -607,11 +607,11 @@ type FrameNavFrameMessage = FrameNavEnvelope & {
   navTarget?: NavTarget;
 });
 /** Minimal window surface the adapter listens on (injectable for tests). */
-interface FrameNavListenTarget {
+export interface FrameNavListenTarget {
   addEventListener: (type: 'message', listener: (ev: MessageEvent) => void) => void;
   removeEventListener: (type: 'message', listener: (ev: MessageEvent) => void) => void;
 }
-interface FrameNavClientOptions {
+export interface FrameNavClientOptions {
   /** The shared frame id (defaults to the anchor's, else the anchor id). */
   frameId: string;
   /** The anchor iframe dock entry, supplying url/icon/groupId defaults. */
@@ -630,7 +630,7 @@ interface FrameNavClientOptions {
   /** @default 3000 */
   handshakeTimeoutMs?: number;
 }
-interface FrameNavClient {
+export interface FrameNavClient {
   /** Whether the shim has completed its `ready` handshake. */
   readonly ready: boolean;
   /** The tab id currently shown in the frame, or `null`. */
@@ -642,10 +642,10 @@ interface FrameNavClient {
  * exposing readiness/current state and a `dispose()` that removes every member
  * dock it registered and detaches its listener.
  */
-declare function attachFrameNavClient(options: FrameNavClientOptions): FrameNavClient;
+export declare function attachFrameNavClient(options: FrameNavClientOptions): FrameNavClient;
 //#endregion
 //#region src/client/host.d.ts
-interface DevframeClientRuntimeOptions {
+export interface DevframeClientRuntimeOptions {
   /**
    * An already-connected RPC client. When omitted, one is created via
    * `connectDevframe(connect)`, so pass `connect.baseURL` to point at the hub's
@@ -707,7 +707,7 @@ interface DevframeClientRuntimeOptions {
    */
   categoryOrder?: Record<string, number>;
 }
-interface DevframeClientRuntime {
+export interface DevframeClientRuntime {
   /** The assembled, globally-registered client context. */
   context: DevframeClientContext;
   /** Tear down listeners and stop tracking newly-registered client scripts. */
@@ -723,16 +723,16 @@ interface DevframeClientRuntime {
  * A hub UI provider keeps rendering its own dock UI (reading the same shared state); this
  * runtime is what gives plugin client scripts a live host context to run in.
  */
-declare function createDevframeClientRuntime(options?: DevframeClientRuntimeOptions): Promise<DevframeClientRuntime>;
+export declare function createDevframeClientRuntime(options?: DevframeClientRuntimeOptions): Promise<DevframeClientRuntime>;
 /** @deprecated Renamed; use {@link DevframeClientRuntimeOptions}. */
-type DevframeClientHostOptions = DevframeClientRuntimeOptions;
+export type DevframeClientHostOptions = DevframeClientRuntimeOptions;
 /** @deprecated Renamed; use {@link DevframeClientRuntime}. */
-type DevframeClientHost = DevframeClientRuntime;
+export type DevframeClientHost = DevframeClientRuntime;
 /** @deprecated Renamed; use {@link createDevframeClientRuntime}. */
-declare const createDevframeClientHost: typeof createDevframeClientRuntime;
+export declare const createDevframeClientHost: typeof createDevframeClientRuntime;
 //#endregion
 //#region src/client/messages.d.ts
-interface MessagesClientOptions {
+export interface MessagesClientOptions {
   /**
    * Default fields merged beneath every `add()` input. The client host passes
    * `{ category: entry.id }` to scope a dock client script's messages to its
@@ -746,20 +746,20 @@ interface MessagesClientOptions {
  * returned by `add` proxies `update`/`dismiss` back through the same RPCs, so a
  * dock client script reports into the very feed the server writes to.
  */
-declare function createMessagesClient(rpc: DevframeRpcClient, options?: MessagesClientOptions): DevframeMessagesClient;
+export declare function createMessagesClient(rpc: DevframeRpcClient, options?: MessagesClientOptions): DevframeMessagesClient;
 //#endregion
 //#region src/remote-url.d.ts
 /** Remove the remote connection descriptor from a URL before displaying or copying it. */
-declare function stripRemoteConnectionFromUrl(input: string): string;
+export declare function stripRemoteConnectionFromUrl(input: string): string;
 //#endregion
 //#region src/client/remote.d.ts
-type ConnectRemoteDevframeOptions = Omit<DevframeRpcClientOptions, 'connectionMeta' | 'authToken'>;
+export type ConnectRemoteDevframeOptions = Omit<DevframeRpcClientOptions, 'connectionMeta' | 'authToken'>;
 /**
  * Build an external viewer URL from an existing trusted Devframe connection.
  * Returns the original URL if the connection has no auth token, does not use
  * WebSockets, or has an invalid metadata URL.
  */
-declare function buildRemoteDevframeUrl(url: string, connection: DevframeConnection): string;
+export declare function buildRemoteDevframeUrl(url: string, connection: DevframeConnection): string;
 /**
  * Parse a {@link RemoteConnectionInfo} descriptor from the current page's URL
  * (or a provided URL/string). Checks the URL fragment first, then the query.
@@ -767,7 +767,7 @@ declare function buildRemoteDevframeUrl(url: string, connection: DevframeConnect
  * Returns `null` if no descriptor is present.
  * Throws if the descriptor is malformed or its schema version is unsupported.
  */
-declare function parseRemoteConnection(input?: string): RemoteConnectionInfo | null;
+export declare function parseRemoteConnection(input?: string): RemoteConnectionInfo | null;
 /**
  * One-liner for a hosted Devframe page: reads the connection descriptor from
  * the current URL and returns a connected {@link DevframeRpcClient}.
@@ -777,6 +777,6 @@ declare function parseRemoteConnection(input?: string): RemoteConnectionInfo | n
  *
  * @throws if no descriptor is present in the URL.
  */
-declare function connectRemoteDevframe(options?: ConnectRemoteDevframeOptions): Promise<DevframeRpcClient>;
+export declare function connectRemoteDevframe(options?: ConnectRemoteDevframeOptions): Promise<DevframeRpcClient>;
 //#endregion
-export { CLIENT_CONTEXT_KEY, CommandsContext, ConnectRemoteDevframeOptions, CreateDockRenderersContextOptions, DevframeClientContext, DevframeClientHost, DevframeClientHostOptions, type DevframeClientRpcHost, DevframeClientRuntime, DevframeClientRuntimeOptions, DockClientScriptContext, DockClientType, DockEntryState, DockEntryStateEvents, DockPanelStorage, DockRegistration, DockRenderer, DockRendererInstance, DockRendererManifest, DockRendererMountOptions, DockRendererMountResult, DockRenderersContext, DockSessionStorage, DocksConnectionContext, DocksContext, DocksEntriesContext, DocksPanelContext, DocksPanelEvents, FRAME_NAV_CHANNEL, FRAME_NAV_VERSION, FrameLocationHistory, FrameLocationTarget, FrameLocationWindow, FrameNavClient, FrameNavClientOptions, FrameNavEnvelope, FrameNavFrameMessage, FrameNavHostMessage, FrameNavHostPayload, FrameNavListenTarget, FrameTab, MessagesClientOptions, type RpcClientEvents, WatchFrameLocationOptions, WhenClauseContext, attachFrameNavClient, buildRemoteDevframeUrl, clientScriptFailureHint, connectRemoteDevframe, createDevframeClientHost, createDevframeClientRuntime, createDockRenderersContext, createMessagesClient, getDevframeClientContext, parseRemoteConnection, resolveClientModuleSpecifier, resolveDockIcon, resolveDockUrl, setDevframeClientContext, stripRemoteConnectionFromUrl, watchFrameLocation };
+export { CLIENT_CONTEXT_KEY, type DevframeClientRpcHost, type RpcClientEvents };

package/dist/client/index.mjs

@@ -129,7 +129,9 @@ function watchFrameLocation(options) {
 			});
 		}
 		detach = () => {
-			for (const off of listeners) off();
+			for (const unsubscribe of listeners) try {
+				unsubscribe();
+			} catch {}
 		};
 	}
 	function onLoad() {

package/dist/{context-Cdrtg-Kk.mjs → context-C7AFekjP.mjs}

@@ -48,8 +48,8 @@ const diagnostics = defineDiagnostics({
 			fix: "A hub exposes one aggregate MCP endpoint over every mounted devframe, so per-devframe `mcp` settings are ignored. Drop `mcp: false` from `initHub` (the `'auto'` default mounts the aggregate route once agent tools exist) to surface this devframe's tools, or drop `mcp` from the devframe to silence this warning."
 		},
 		DF8006: {
-			why: (p) => `A static hub build can only write mounts under its own base: "${p.urlBase}" escapes "${p.base}".`,
-			fix: "buildHub maps each mount base to a directory under its `outDir`, so every mount must live under the hub base. Drop the `basePath` override (or the `ctx.install` base) that points outside it, or move the hub `base` up so it contains the mount."
+			why: (p) => `A static hub build writes each mount either under its base ("${p.base}") or as an absolute-path sibling of it, but "${p.urlBase}" is neither.`,
+			fix: "buildHub maps a mount under the hub base into its `outDir`, and any other mount to the deploy root (`outDir`'s parent) by its absolute path. Give the mount an absolute base (starting with `/`) so it resolves to one of those."
 		},
 		DF8100: {
 			why: (p) => `Dock with id "${p.id}" is already registered`,
@@ -162,29 +162,6 @@ async function resolvePageScriptClientScript(ctx, clientScript, base) {
 	};
 }
 /**
-* Framework-neutral primitive backing {@link DevframeHubContext.install} -
-* installs a {@link DevframeDefinition} as a dock inside a hub-aware context:
-* serves the devframe's SPA at the resolved base path, synthesizes an iframe
-* dock entry from the definition's metadata, and runs the definition's
-* `setup(ctx)`. Reach for it through `ctx.install(devframe)` rather than
-* calling it directly.
-*
-* Framework kits wrap `ctx.install` with their own plugin/middleware
-* machinery, e.g. `@vitejs/devtools-kit`'s `createPluginFromDevframe`
-* returns a Vite `Plugin` whose `devtools.setup` ultimately delegates here.
-*/
-/**
-* Phase one of an install: run the duplication guard, serve the SPA + meta,
-* register the iframe dock, and queue the definition's declarative wire
-* services, everything up to (but not including) `setup(ctx)`. Returns a
-* deferred setup thunk, or `null` when the devframe was deduplicated.
-*
-* The hub's initial batch uses this to collect every devframe's services
-* across the whole hub, `ready()` them once, and only then run the setups,
-* so services are ready before any setup, and a plugin can consume a service
-* another plugin declared regardless of mount order.
-*/
-/**
 * Serve a devframe's SPA (and the hub's connection meta) under `base`, if the
 * definition ships client assets.
 */
@@ -792,7 +769,8 @@ var DevframeTerminalsHost = class {
 				const result = await reader.read();
 				if (isDisposed() || result.done) break;
 				sessionBuffer.push(result.value);
-				if (sessionBuffer.length > TERMINAL_BUFFER_LIMIT) sessionBuffer.splice(0, sessionBuffer.length - TERMINAL_BUFFER_LIMIT);
+				if (sessionBuffer.length === 1001) sessionBuffer.shift();
+				else if (sessionBuffer.length > TERMINAL_BUFFER_LIMIT) sessionBuffer.splice(0, sessionBuffer.length - TERMINAL_BUFFER_LIMIT);
 				sink?.write(result.value);
 			}
 			if (!isDisposed() && sink && !sink.closed) sink.close();

package/dist/index.d.mts

@@ -3,13 +3,13 @@ import { A as DevframeViewIframe, C as DevframeDockUserEntry, D as DevframeViewB
 import { S as RpcStreamingHost, _ as RpcFunctionsHost, a as DevframeHost, b as RpcStreamingChannel, c as DevframeRpcServerFunctions, d as EventEmitter, f as EventUnsubscribe, g as RpcDefinitionsToFunctions, h as RpcDefinitionsFilter, i as DevframeDiagnosticsLogger, l as DevframeRpcSharedStates, m as RpcBroadcastOptions, n as DevframeCapabilities, o as DevframeNodeRpcSession, p as EventsMap, r as DevframeDiagnosticsHost, s as DevframeRpcClientFunctions, t as ConnectionMeta, u as DevframeViewHost, v as RpcSharedStateGetOptions, x as RpcStreamingChannelOptions, y as RpcSharedStateHost } from "./index-Dv8iu9St.mjs";
 import { WhenContext, WhenExpression } from "devframe/utils/when";
 //#region src/define.d.ts
-declare const defineHubRpcFunction: <NAME extends string, TYPE extends import("devframe/rpc").RpcFunctionType, ARGS extends any[], RETURN = void, const AS extends import("devframe/rpc").RpcArgsSchema | undefined = undefined, const RS extends import("devframe/rpc").RpcReturnSchema | undefined = undefined>(definition: import("devframe/rpc").RpcFunctionDefinition<NAME, TYPE, ARGS, RETURN, AS, RS, DevframeHubContext>) => import("devframe/rpc").RpcFunctionDefinition<NAME, TYPE, ARGS, RETURN, AS, RS, DevframeHubContext>;
-declare function defineCommand<const W extends string = ''>(command: Omit<DevframeServerCommandInput, 'when'> & {
+export declare const defineHubRpcFunction: <NAME extends string, TYPE extends import("devframe/rpc").RpcFunctionType, ARGS extends any[], RETURN = void, const AS extends import("devframe/rpc").RpcArgsSchema | undefined = undefined, const RS extends import("devframe/rpc").RpcReturnSchema | undefined = undefined>(definition: import("devframe/rpc").RpcFunctionDefinition<NAME, TYPE, ARGS, RETURN, AS, RS, DevframeHubContext>) => import("devframe/rpc").RpcFunctionDefinition<NAME, TYPE, ARGS, RETURN, AS, RS, DevframeHubContext>;
+export declare function defineCommand<const W extends string = ''>(command: Omit<DevframeServerCommandInput, 'when'> & {
   when?: WhenExpression<WhenContext, W>;
 }): DevframeServerCommandInput;
-declare function defineDockEntry<const T extends DevframeDockUserEntry, const W extends string = '', const V extends string = ''>(entry: Omit<T, 'when' | 'visibility'> & {
+export declare function defineDockEntry<const T extends DevframeDockUserEntry, const W extends string = '', const V extends string = ''>(entry: Omit<T, 'when' | 'visibility'> & {
   when?: WhenExpression<WhenContext, W>;
   visibility?: WhenExpression<WhenContext, V>;
 }): T;
 //#endregion
-export { type ClientScriptEntry, type ConnectionMeta, type CreateHubContextOptions, type DevframeCapabilities, type DevframeChildProcessExecuteOptions, type DevframeChildProcessOutput, type DevframeChildProcessResult, type DevframeChildProcessTerminalSession, type DevframeClientCommand, type DevframeCommandAgentOptions, type DevframeCommandBase, type DevframeCommandEntry, type DevframeCommandHandle, type DevframeCommandKeybinding, type DevframeCommandShortcutOverrides, type DevframeCommandsHost, type DevframeCommandsHostEvents, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockActivation, type DevframeDockBadgeVariant, type DevframeDockEntriesGrouped, type DevframeDockEntry, type DevframeDockEntryBase, type DevframeDockEntryCategory, type DevframeDockEntryIcon, type DevframeDockEntryRegistry, type DevframeDockPanelState, type DevframeDockUserEntry, type DevframeDocksActiveState, type DevframeDocksHost, type DevframeDocksUserSettings, type DevframeHost, type DevframeHubContext, type DevframeMessageAction, type DevframeMessageActivateAction, type DevframeMessageCommandAction, type DevframeMessageElementPosition, type DevframeMessageEntry, type DevframeMessageEntryFrom, type DevframeMessageEntryInput, type DevframeMessageFilePosition, type DevframeMessageHandle, type DevframeMessageLevel, type DevframeMessageShortcutInput, type DevframeMessagesClient, type DevframeMessagesHost, type DevframeMessagesLevelShortcuts, type DevframeMessagesListDelta, type DevframeNodeRpcSession, type DevframePtyExecuteOptions, type DevframePtyOutput, type DevframePtyResult, type DevframePtyTerminalSession, type DevframeRpcClientFunctions, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeServerCommandEntry, type DevframeServerCommandInput, type DevframeTerminalSession, type DevframeTerminalSessionBase, type DevframeTerminalStatus, type DevframeTerminalsHost, type DevframeViewAction, type DevframeViewBuiltin, type DevframeViewCustomRender, type DevframeViewGroup, type DevframeViewHost, type DevframeViewIframe, type DevframeViewLauncher, type DevframeViewLauncherStatus, type EventEmitter, type EventUnsubscribe, type EventsMap, type FrameSubTabsConfig, type NavTarget, type RemoteConnectionInfo, type RemoteDockOptions, type RpcBroadcastOptions, type RpcDefinitionsFilter, type RpcDefinitionsToFunctions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, defineCommand, defineDockEntry, defineHubRpcFunction };
+export type { ClientScriptEntry, ConnectionMeta, CreateHubContextOptions, DevframeCapabilities, DevframeChildProcessExecuteOptions, DevframeChildProcessOutput, DevframeChildProcessResult, DevframeChildProcessTerminalSession, DevframeClientCommand, DevframeCommandAgentOptions, DevframeCommandBase, DevframeCommandEntry, DevframeCommandHandle, DevframeCommandKeybinding, DevframeCommandShortcutOverrides, DevframeCommandsHost, DevframeCommandsHostEvents, DevframeDiagnosticsHost, DevframeDiagnosticsLogger, DevframeDockActivation, DevframeDockBadgeVariant, DevframeDockEntriesGrouped, DevframeDockEntry, DevframeDockEntryBase, DevframeDockEntryCategory, DevframeDockEntryIcon, DevframeDockEntryRegistry, DevframeDockPanelState, DevframeDockUserEntry, DevframeDocksActiveState, DevframeDocksHost, DevframeDocksUserSettings, DevframeHost, DevframeHubContext, DevframeMessageAction, DevframeMessageActivateAction, DevframeMessageCommandAction, DevframeMessageElementPosition, DevframeMessageEntry, DevframeMessageEntryFrom, DevframeMessageEntryInput, DevframeMessageFilePosition, DevframeMessageHandle, DevframeMessageLevel, DevframeMessageShortcutInput, DevframeMessagesClient, DevframeMessagesHost, DevframeMessagesLevelShortcuts, DevframeMessagesListDelta, DevframeNodeRpcSession, DevframePtyExecuteOptions, DevframePtyOutput, DevframePtyResult, DevframePtyTerminalSession, DevframeRpcClientFunctions, DevframeRpcServerFunctions, DevframeRpcSharedStates, DevframeServerCommandEntry, DevframeServerCommandInput, DevframeTerminalSession, DevframeTerminalSessionBase, DevframeTerminalStatus, DevframeTerminalsHost, DevframeViewAction, DevframeViewBuiltin, DevframeViewCustomRender, DevframeViewGroup, DevframeViewHost, DevframeViewIframe, DevframeViewLauncher, DevframeViewLauncherStatus, EventEmitter, EventUnsubscribe, EventsMap, FrameSubTabsConfig, NavTarget, RemoteConnectionInfo, RemoteDockOptions, RpcBroadcastOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcFunctionsHost, RpcSharedStateGetOptions, RpcSharedStateHost, RpcStreamingChannel, RpcStreamingChannelOptions, RpcStreamingHost };

package/dist/node/build.d.mts

@@ -2,12 +2,15 @@ import { n as DevframeHubContext, t as CreateHubContextOptions } from "../contex
 import { DevframeHubUi, DevframesInput, DockRendererRegistration } from "./initiate.mjs";
 import { DevframeServiceInput, DevframeStorageScope } from "devframe/types";
 //#region src/node/build.d.ts
-interface BuildHubOptions {
+export interface BuildHubOptions {
   /**
    * Output directory the hub subtree is written into. It corresponds to the
    * hub {@link BuildHubOptions.base} at serve time: building with
    * `base: '/__devframes/'` into `dist/__devframes` makes the deployed app's
-   * `dist/` servable as-is by any static file server.
+   * `dist/` servable as-is by any static file server. A mount served outside
+   * the hub base (a devframe SPA or asset dir kept as a sibling of it) is
+   * written to this directory's parent (the deploy root) by its absolute path,
+   * so `dist/` still serves the whole layout.
    */
   outDir: string;
   /**
@@ -88,6 +91,5 @@ interface BuildHubOptions {
  * Reads work from the baked dump; live writes (messages, terminals, commands
  * execution) have no server and degrade to no-ops in the clients.
  */
-declare function buildHub(options: BuildHubOptions): Promise<void>;
-//#endregion
-export { BuildHubOptions, buildHub };
+export declare function buildHub(options: BuildHubOptions): Promise<void>;
+//#endregion

package/dist/node/build.mjs

@@ -1,6 +1,6 @@
 import { a as normalizeHubBase, i as DOCK_RENDERERS_STATE_KEY } from "../constants-Da23JxCZ.mjs";
-import { t as createHubContext, y as diagnostics } from "../context-Cdrtg-Kk.mjs";
-import { i as resolveRendererRegistrations, n as renderClientImportsModule, r as resolveDevframesInput, t as mountDevframes } from "../assemble-BvY5jfgi.mjs";
+import { t as createHubContext, y as diagnostics } from "../context-C7AFekjP.mjs";
+import { i as resolveRendererRegistrations, n as renderClientImportsModule, r as resolveDevframesInput, t as mountDevframes } from "../assemble-B-ISfDe5.mjs";
 import { joinURL } from "ufo";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DOCK_IMPORTS_FILENAME } from "devframe/constants";
 import { existsSync } from "node:fs";
@@ -45,13 +45,22 @@ async function buildHub(options) {
 	await options.ui?.setup?.(ctx);
 	if (options.clean !== false && existsSync(outDir)) await fs.rm(outDir, { recursive: true });
 	await fs.mkdir(outDir, { recursive: true });
-	/** Map a hub-base-relative URL base to its on-disk location under `outDir`. */
+	/**
+	* Map a served URL base to its on-disk location. A base under the hub
+	* {@link base} writes into the hub subtree at `outDir` (so `outDir`
+	* corresponds to the hub base). A base outside it is a deploy-root sibling:
+	* `outDir`'s parent is the deploy root, and the base resolves under it by its
+	* absolute path. This is the layout Vite DevTools serves, where devframe SPAs
+	* and assets sit beside `/__devtools/` rather than under it.
+	*/
+	const deployRoot = dirname(outDir);
 	const resolveOutPath = (urlBase) => {
-		if (!urlBase.startsWith(base)) throw diagnostics.DF8006({
+		if (urlBase.startsWith(base)) return resolve(outDir, urlBase.slice(base.length));
+		if (!urlBase.startsWith("/")) throw diagnostics.DF8006({
 			urlBase,
 			base
 		});
-		return resolve(outDir, urlBase.slice(base.length));
+		return resolve(deployRoot, urlBase.slice(1));
 	};
 	await copyBuildStatics(ctx, resolveOutPath);
 	await publishRendererManifest(ctx, rendererRegistrations, base, outDir);

package/dist/node/index.d.mts

@@ -3,7 +3,7 @@ import { C as DevframeDockUserEntry, T as DevframeDocksHost$1, _ as DevframeDock
 import { RpcFunctionDefinitionAny } from "devframe/rpc";
 import { SharedState } from "devframe/utils/shared-state";
 //#region src/node/host-commands.d.ts
-declare class DevframeCommandsHost implements DevframeCommandsHost$1 {
+export declare class DevframeCommandsHost implements DevframeCommandsHost$1 {
   readonly context: DevframeHubContext;
   readonly commands: DevframeCommandsHost$1['commands'];
   readonly events: DevframeCommandsHost$1['events'];
@@ -34,7 +34,7 @@ declare class DevframeCommandsHost implements DevframeCommandsHost$1 {
 }
 //#endregion
 //#region src/node/host-docks.d.ts
-declare class DevframeDocksHost implements DevframeDocksHost$1 {
+export declare class DevframeDocksHost implements DevframeDocksHost$1 {
   readonly context: DevframeHubContext;
   readonly views: DevframeDocksHost$1['views'];
   readonly events: DevframeDocksHost$1['events'];
@@ -64,7 +64,7 @@ declare class DevframeDocksHost implements DevframeDocksHost$1 {
 }
 //#endregion
 //#region src/node/host-messages.d.ts
-declare class DevframeMessagesHost implements DevframeMessagesHost$1 {
+export declare class DevframeMessagesHost implements DevframeMessagesHost$1 {
   readonly context: DevframeHubContext;
   readonly entries: DevframeMessagesHost$1['entries'];
   readonly events: DevframeMessagesHost$1['events'];
@@ -105,7 +105,7 @@ type PartialWithoutId<T extends {
 }> = Partial<T> & {
   id: string;
 };
-declare class DevframeTerminalsHost implements DevframeTerminalsHost$1 {
+export declare class DevframeTerminalsHost implements DevframeTerminalsHost$1 {
   readonly context: DevframeHubContext;
   readonly sessions: DevframeTerminalsHost$1['sessions'];
   readonly events: DevframeTerminalsHost$1['events'];
@@ -144,7 +144,7 @@ declare class DevframeTerminalsHost implements DevframeTerminalsHost$1 {
  * Pairs with the `devframe:commands` shared state: clients read the list
  * from the shared state and dispatch by id via this RPC.
  */
-declare const hubCommandsExecute: {
+export declare const hubCommandsExecute: {
   name: "hub:commands:execute";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -168,7 +168,7 @@ declare const hubCommandsExecute: {
  * context, whose `messages` client dispatches through these built-ins so a
  * dock client script can report into the same feed the server writes to.
  */
-declare const hubMessagesAdd: {
+export declare const hubMessagesAdd: {
   name: "hub:messages:add";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -184,7 +184,7 @@ declare const hubMessagesAdd: {
   __promise?: import("devframe/rpc").Thenable<import("devframe/rpc").RpcFunctionSetupResult<[input: DevframeMessageEntryInput], Promise<DevframeMessageEntry>>> | undefined;
 };
 /** `hub:messages:update`: Patch a message by id; returns the updated entry (or `undefined`). */
-declare const hubMessagesUpdate: {
+export declare const hubMessagesUpdate: {
   name: "hub:messages:update";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -200,7 +200,7 @@ declare const hubMessagesUpdate: {
   __promise?: import("devframe/rpc").Thenable<import("devframe/rpc").RpcFunctionSetupResult<[id: string, patch: Partial<DevframeMessageEntryInput>], Promise<DevframeMessageEntry | undefined>>> | undefined;
 };
 /** `hub:messages:remove`: Remove a message by id. */
-declare const hubMessagesRemove: {
+export declare const hubMessagesRemove: {
   name: "hub:messages:remove";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -216,7 +216,7 @@ declare const hubMessagesRemove: {
   __promise?: import("devframe/rpc").Thenable<import("devframe/rpc").RpcFunctionSetupResult<[id: string], Promise<void>>> | undefined;
 };
 /** `hub:messages:clear`: Remove every message. */
-declare const hubMessagesClear: {
+export declare const hubMessagesClear: {
   name: "hub:messages:clear";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -236,7 +236,7 @@ declare const hubMessagesClear: {
  * via `ctx.terminals.startPtySession`. Lets a hub-aware terminal UI (e.g. the
  * terminals plugin) drive a session owned by another plugin.
  */
-declare const hubTerminalsWrite: {
+export declare const hubTerminalsWrite: {
   name: "hub:terminals:write";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -252,7 +252,7 @@ declare const hubTerminalsWrite: {
   __promise?: import("devframe/rpc").Thenable<import("devframe/rpc").RpcFunctionSetupResult<[id: string, data: string], Promise<void>>> | undefined;
 };
 /** `hub:terminals:resize`: Resize an interactive PTY session by id. */
-declare const hubTerminalsResize: {
+export declare const hubTerminalsResize: {
   name: "hub:terminals:resize";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -273,7 +273,7 @@ declare const hubTerminalsResize: {
  * child-process and interactive PTY sessions, letting a hub-aware terminal UI
  * force-kill a session owned by another plugin.
  */
-declare const hubTerminalsTerminate: {
+export declare const hubTerminalsTerminate: {
   name: "hub:terminals:terminate";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -293,7 +293,7 @@ declare const hubTerminalsTerminate: {
  * sessions registered with `restartable: false`, whose lifecycle is owned
  * elsewhere.
  */
-declare const hubTerminalsRestart: {
+export declare const hubTerminalsRestart: {
   name: "hub:terminals:restart";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -313,7 +313,7 @@ declare const hubTerminalsRestart: {
  * and drop it from the registry, disposing its output stream. Lets a hub-aware
  * terminal UI discard a stopped aggregated session.
  */
-declare const hubTerminalsRemove: {
+export declare const hubTerminalsRemove: {
   name: "hub:terminals:remove";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -340,7 +340,7 @@ declare const hubTerminalsRemove: {
  * and mirrors it into the `devframe:docks:active` shared state (a dock that
  * mounts in response still converges on it).
  */
-declare const hubDocksActivate: {
+export declare const hubDocksActivate: {
   name: "hub:docks:activate";
   type?: "action" | undefined;
   cacheable?: boolean;
@@ -376,7 +376,7 @@ declare const hubDocksActivate: {
  * array via `CreateHubContextOptions.builtinRpcDeclarations`; the hub's
  * list is prepended automatically.
  */
-declare const builtinHubRpcDeclarations: readonly RpcFunctionDefinitionAny[];
+export declare const builtinHubRpcDeclarations: readonly RpcFunctionDefinitionAny[];
 //#endregion
 //#region src/node/utils.d.ts
 /**
@@ -386,6 +386,6 @@ declare const builtinHubRpcDeclarations: readonly RpcFunctionDefinitionAny[];
  *
  * @experimental Prefer a proper importable module for production use.
  */
-declare function createSimpleClientScript(fn: string | ((ctx: any) => void)): ClientScriptEntry;
+export declare function createSimpleClientScript(fn: string | ((ctx: any) => void)): ClientScriptEntry;
 //#endregion
-export { CreateHubContextOptions, DevframeCommandsHost, DevframeDocksHost, DevframeHubContext, DevframeMessagesHost, DevframeTerminalsHost, HubMountedFrame, type InstallDevframeOptions, builtinHubRpcDeclarations, createHubContext, createSimpleClientScript, hubCommandsExecute, hubDocksActivate, hubMessagesAdd, hubMessagesClear, hubMessagesRemove, hubMessagesUpdate, hubTerminalsRemove, hubTerminalsResize, hubTerminalsRestart, hubTerminalsTerminate, hubTerminalsWrite };
+export { CreateHubContextOptions, DevframeHubContext, HubMountedFrame, type InstallDevframeOptions, createHubContext };

package/dist/node/index.mjs

@@ -1,4 +1,4 @@
-import { _ as DevframeCommandsHost, a as hubMessagesAdd, c as hubMessagesUpdate, d as hubTerminalsRestart, f as hubTerminalsTerminate, g as DevframeDocksHost, h as DevframeMessagesHost, i as hubDocksActivate, l as hubTerminalsRemove, m as DevframeTerminalsHost, n as builtinHubRpcDeclarations, o as hubMessagesClear, p as hubTerminalsWrite, r as hubCommandsExecute, s as hubMessagesRemove, t as createHubContext, u as hubTerminalsResize } from "../context-Cdrtg-Kk.mjs";
+import { _ as DevframeCommandsHost, a as hubMessagesAdd, c as hubMessagesUpdate, d as hubTerminalsRestart, f as hubTerminalsTerminate, g as DevframeDocksHost, h as DevframeMessagesHost, i as hubDocksActivate, l as hubTerminalsRemove, m as DevframeTerminalsHost, n as builtinHubRpcDeclarations, o as hubMessagesClear, p as hubTerminalsWrite, r as hubCommandsExecute, s as hubMessagesRemove, t as createHubContext, u as hubTerminalsResize } from "../context-C7AFekjP.mjs";
 import "ufo";
 import "node:fs";
 import "node:process";

package/dist/node/initiate.d.mts

@@ -1,6 +1,7 @@
 import { a as InstallDevframeOptions, n as DevframeHubContext, t as CreateHubContextOptions } from "../context-BmHQp89a.mjs";
 import { r as DEVFRAMES_HUB_BASE } from "../constants-Bz4yclHo.mjs";
 import { DevframeInstanceRecord } from "devframe/internal";
+import { AuthBannerFunction } from "devframe/recipes/interactive-auth";
 import { ConnectionMeta, DevframeDefinition, DevframeServiceInput, DevframeSseOptions, DevframeStorageScope, DevframeWsOptions, McpSetting } from "devframe/types";
 import { DevframeAuthHandler } from "devframe/node/auth";
 import { WsOriginRegistry } from "devframe/rpc/transports/ws-server";
@@ -9,7 +10,7 @@ import { IncomingMessage, Server, ServerResponse } from "node:http";
 import { Duplex } from "node:stream";
 //#region src/node/initiate.d.ts
 /** A `devframes` entry with per-mount dock customization. */
-interface HubDevframeEntry {
+export interface HubDevframeEntry {
   devframe: DevframeDefinition;
   /** Per-mount overrides for the auto-synthesized iframe dock entry. */
   dock?: InstallDevframeOptions['dock'];
@@ -30,7 +31,7 @@ type Arrayable<T> = T | readonly T[];
  * returning this shape, e.g. `jsonRenderUiRenderer()` from
  * `@devframes/json-render-ui/hub`.
  */
-interface DockRendererRegistration {
+export interface DockRendererRegistration {
   /** Dock `type` this renderer handles (e.g. `'json-render'`). */
   type: string;
   /** Absolute path of the prebuilt, self-contained browser ES module. */
@@ -49,7 +50,7 @@ interface DockRendererRegistration {
  * Vite DevTools or any community viewer supplies its own object to the same
  * slot and reuses all the infrastructure.
  */
-interface DevframeHubUi {
+export interface DevframeHubUi {
   /**
    * A standalone viewer SPA (built with relative asset paths) served at the
    * hub base itself; open `<base>` in a tab and the devtools are there.
@@ -86,9 +87,20 @@ interface DevframeHubUi {
    * The hub stays policy-free about what the UI writes.
    */
   setup?: (ctx: DevframeHubContext) => void | Promise<void>;
+  /**
+   * The interactive OTP banner (auth code + magic-link URL) to print when
+   * {@link InitHubOptions.auth} is left at its default. A node-side
+   * counterpart to `setup`'s browser-facing branding: the reference UI's
+   * `createUi()` derives one from its own `branding.productName` via
+   * `createAuthBanner` (see `devframe/recipes/interactive-auth`), so the
+   * printed code matches the rebranded viewer without the caller wiring
+   * `auth` themselves. Ignored once `auth` is set explicitly - a `false` or
+   * a full {@link DevframeAuthHandler} both mean the caller owns the banner.
+   */
+  authBanner?: AuthBannerFunction;
 }
-type DevframesInput = Array<DevframeDefinition | HubDevframeEntry | Thenable<Arrayable<DevframeDefinition | HubDevframeEntry | null | undefined>> | (() => Thenable<Arrayable<DevframeDefinition | HubDevframeEntry | null | undefined>>)>;
-interface InitHubOptions {
+export type DevframesInput = Array<DevframeDefinition | HubDevframeEntry | Thenable<Arrayable<DevframeDefinition | HubDevframeEntry | null | undefined>> | (() => Thenable<Arrayable<DevframeDefinition | HubDevframeEntry | null | undefined>>)>;
+export interface InitHubOptions {
   /**
    * Name for the hub instance, used in logs and diagnostics, and mcp server.
    */
@@ -244,7 +256,7 @@ interface InitHubOptions {
   /** Destroy off-route upgrades on a shared `server` devframe's adapter owns outright. */
   destroyUnmatchedUpgrades?: boolean;
 }
-interface HubInstance {
+export interface HubInstance {
   /**
    * The normalized mount base this hub answers under (leading and trailing
    * slash, e.g. `/__devframes/`). Reference it when wiring the mount (route
@@ -297,6 +309,6 @@ interface HubInstance {
  * {@link InitHubOptions.ws}), or waits for the host to hand upgrades over
  * through {@link HubInstance.attach}.
  */
-declare function initHub(options: InitHubOptions): HubInstance;
+export declare function initHub(options: InitHubOptions): HubInstance;
 //#endregion
-export { DEVFRAMES_HUB_BASE, DevframeHubUi, DevframesInput, DockRendererRegistration, HubDevframeEntry, HubInstance, InitHubOptions, initHub };
+export { DEVFRAMES_HUB_BASE };

package/dist/node/initiate.mjs

@@ -1,12 +1,13 @@
 import { a as normalizeHubBase, i as DOCK_RENDERERS_STATE_KEY, r as DEVFRAMES_HUB_BASE } from "../constants-Da23JxCZ.mjs";
-import { t as createHubContext, y as diagnostics } from "../context-Cdrtg-Kk.mjs";
-import { i as resolveRendererRegistrations, n as renderClientImportsModule, r as resolveDevframesInput, t as mountDevframes } from "../assemble-BvY5jfgi.mjs";
+import { t as createHubContext, y as diagnostics } from "../context-C7AFekjP.mjs";
+import { i as resolveRendererRegistrations, n as renderClientImportsModule, r as resolveDevframesInput, t as mountDevframes } from "../assemble-B-ISfDe5.mjs";
 import { joinURL, withoutLeadingSlash } from "ufo";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_MCP_ROUTE } from "devframe/constants";
 import { readFile } from "node:fs/promises";
 import process from "node:process";
 import { createH3DevframeHost, createInstanceShell, importRuntimeModule, loadAutoMcpAdapter, resolveInstanceRegister, resolveMcpConfig } from "devframe/internal";
 import { resolve } from "pathe";
+import { createInteractiveAuth } from "devframe/recipes/interactive-auth";
 import { mountStaticHandler } from "devframe/utils/serve-static";
 import { H3 } from "h3";
 //#region src/node/initiate.ts
@@ -81,7 +82,14 @@ function initHub(options) {
 		app,
 		host: options.host,
 		origin: options.origin,
-		auth: options.auth,
+		/**
+		* `false`/an explicit handler are the caller's own call, passed through
+		* as-is; `true`/unset both mean "gate with the defaults", so the handler
+		* is built lazily from `ctx` either way, taking the UI slot's
+		* `authBanner` (e.g. `createUi()`'s branded box) without the caller
+		* wiring `auth` themselves.
+		*/
+		auth: options.auth === false || typeof options.auth === "object" ? options.auth : (ctx) => createInteractiveAuth(ctx, { banner: options.ui?.authBanner }),
 		server: options.server,
 		ws: options.ws,
 		sse: options.sse,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@devframes/hub",
   "type": "module",
-  "version": "0.9.11",
+  "version": "0.9.15",
   "description": "Hub layer that orchestrates devframe docks, terminals, messages, and commands on any host.",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",
@@ -35,24 +35,24 @@
     "dist"
   ],
   "peerDependencies": {
-    "devframe": "0.9.11"
+    "devframe": "0.9.15"
   },
   "dependencies": {
     "@standard-schema/spec": "^1.1.0",
     "destr": "^2.0.5",
-    "h3": "^2.0.1-rc.29",
+    "h3": "^2.0.1-rc.31",
     "pathe": "^2.0.3",
     "perfect-debounce": "^2.1.0",
-    "tinyexec": "^1.3.0",
+    "tinyexec": "^1.3.1",
     "ufo": "^1.6.4",
     "zigpty": "^0.2.1"
   },
   "devDependencies": {
-    "@types/node": "^26.4.0",
-    "devframe": "0.9.11",
+    "@types/node": "^26.5.0",
+    "devframe": "0.9.15",
     "get-port-please": "^3.2.0",
     "mlly": "^1.8.2",
-    "tsdown": "^0.22.14",
+    "tsdown": "^0.23.0",
     "valibot": "^1.4.2"
   },
   "scripts": {