@devframes/next 0.7.16 → 0.8.1

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { CreateDevServerOptions } from "devframe/adapters/dev";
-import { ConnectionMeta, DevframeDefinition, DevframeHost, DevframeStorageScope } from "devframe/types";
+import { ConnectionMeta, DevframeDefinition, DevframeHost, DevframeNodeContext, DevframeStorageScope } from "devframe/types";
 //#region src/config.d.ts
 /**
  * Minimal shape of the bits of `next.config` this helper reads/writes, so the
@@ -45,9 +45,11 @@ interface CreateDevframeNextHandlerOptions {
   /** Flag bag forwarded to `def.setup(ctx, { flags })`. */
   flags?: Record<string, unknown>;
   /**
-   * Whether the side-car runs its own auth gate. Defaults to `false`: this is a
-   * hosted adapter and the Next app owns authentication. Pass `true` for
-   * devframe's interactive gate or a handler for a custom scheme.
+   * Whether the side-car runs its own auth gate. **Gates by default** (defers
+   * to `createDevServer` — devframe's interactive OTP unless the definition's
+   * `cli.auth` opts out), so the side-car socket isn't silently reachable by
+   * anything that can open it. Pass `false` to opt out for a single-user
+   * localhost host, or a handler for a custom scheme.
    */
   auth?: CreateDevServerOptions['auth'];
   /** Origin the Next app is reachable at, for docks needing an absolute URL. */
@@ -125,6 +127,20 @@ interface CreateDevframeNextHostOptions {
    */
   connectionMeta?: ConnectionMeta;
 }
+interface DevframeNextHostMcpOptions {
+  /** Name reported in the MCP handshake. Default: `'devframe (next)'`. */
+  serverName?: string;
+  /** Version reported in the MCP handshake. Default: `'0.0.0'`. */
+  serverVersion?: string;
+  /** Expose shared-state keys as MCP resources / `devframe:state:read`. Default: `true`. */
+  exposeSharedState?: boolean | ((key: string) => boolean);
+  /**
+   * Origin allow-list beyond the loopback default. `false` disables the
+   * origin gate entirely. Note the MCP route rejects `Origin`-less requests
+   * (see `createMcpFetchHandler`).
+   */
+  allowedOrigins?: readonly string[] | false;
+}
 interface DevframeNextHost {
   /**
    * The {@link DevframeHost} to hand to `createHubContext` / `createHostContext`.
@@ -152,6 +168,20 @@ interface DevframeNextHost {
    * `503` so a racing client retries rather than caching a wrong endpoint.
    */
   setConnectionMeta: (meta: ConnectionMeta) => void;
+  /**
+   * Serve an MCP Streamable-HTTP endpoint at `path` **in-process** — on the
+   * Next app's own origin, through the same catch-all route as the SPAs (the
+   * `/_next/mcp` shape). Built on `createMcpFetchHandler` from
+   * `devframe/adapters/mcp` (imported lazily: `@modelcontextprotocol/server`
+   * stays an optional peer). Advertise the path in the connection meta
+   * (`mcp: { path }` — same origin, no port) and register the instance via
+   * `registerDevframeInstance` so `devframe connect` can discover it.
+   *
+   * @experimental
+   */
+  mountMcp: (ctx: DevframeNodeContext, path: string, options?: DevframeNextHostMcpOptions) => Promise<{
+    dispose: () => Promise<void>;
+  }>;
 }
 /**
  * Build a Node-runtime {@link DevframeHost} for a Next.js App Router app that
@@ -170,4 +200,4 @@ interface DevframeNextHost {
  */
 declare function createDevframeNextHost(options: CreateDevframeNextHostOptions): DevframeNextHost;
 //#endregion
-export { type CreateDevframeNextHandlerOptions, type CreateDevframeNextHostOptions, type DevframeNextConfig, type DevframeNextHandler, type DevframeNextHost, createDevframeNextHandler, createDevframeNextHost, withDevframe };
+export { type CreateDevframeNextHandlerOptions, type CreateDevframeNextHostOptions, type DevframeNextConfig, type DevframeNextHandler, type DevframeNextHost, type DevframeNextHostMcpOptions, createDevframeNextHandler, createDevframeNextHost, withDevframe };

package/dist/index.mjs

@@ -55,6 +55,7 @@ function stripTrailingSlash(base) {
 function createDevframeNextHost(options) {
 	const app = new H3();
 	const metaBases = /* @__PURE__ */ new Set();
+	const mcpMounts = /* @__PURE__ */ new Map();
 	let connectionMeta = options.connectionMeta;
 	const host = {
 		mountStatic(base, distDir) {
@@ -70,6 +71,8 @@ function createDevframeNextHost(options) {
 	};
 	async function fetch(request) {
 		const { pathname } = new URL(request.url);
+		const mcp = mcpMounts.get(stripTrailingSlash(pathname));
+		if (mcp) return mcp.fetch(request);
 		if (pathname.endsWith(META_SUFFIX) && metaBases.has(pathname.slice(0, -META_SUFFIX.length))) {
 			if (!connectionMeta) return new Response(null, { status: 503 });
 			return Response.json(connectionMeta);
@@ -83,6 +86,21 @@ function createDevframeNextHost(options) {
 		fetch,
 		setConnectionMeta(meta) {
 			connectionMeta = meta;
+		},
+		async mountMcp(ctx, path, mcpOptions = {}) {
+			const { createMcpFetchHandler } = await import("devframe/adapters/mcp");
+			const handler = createMcpFetchHandler(ctx, {
+				serverName: mcpOptions.serverName ?? "devframe (next)",
+				serverVersion: mcpOptions.serverVersion ?? "0.0.0",
+				exposeSharedState: mcpOptions.exposeSharedState ?? true,
+				allowedOrigins: mcpOptions.allowedOrigins
+			});
+			const key = stripTrailingSlash(path);
+			mcpMounts.set(key, handler);
+			return { dispose: async () => {
+				mcpMounts.delete(key);
+				await handler.dispose();
+			} };
 		}
 	};
 }
@@ -141,7 +159,7 @@ function createDevframeNextHandler(def, options = {}) {
 			port,
 			flags: options.flags,
 			openBrowser: false,
-			auth: options.auth ?? false,
+			auth: options.auth,
 			mcp: options.mcp
 		});
 		const mcpMeta = resolveMcpConnectionMeta(def, options.mcp, port);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@devframes/next",
   "type": "module",
-  "version": "0.7.16",
+  "version": "0.8.1",
   "description": "Next.js host integration for Devframe — serve mounted devframe SPAs and connection meta from an App Router route (experimental)",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",
@@ -37,7 +37,7 @@
   "peerDependencies": {
     "next": "^14.0.0 || ^15.0.0 || ^16.0.0",
     "react": "^18.0.0 || ^19.0.0",
-    "devframe": "0.7.16"
+    "devframe": "0.8.1"
   },
   "peerDependenciesMeta": {
     "next": {
@@ -55,7 +55,7 @@
     "@types/react": "^19.2.17",
     "react": "^19.2.8",
     "tsdown": "^0.22.14",
-    "devframe": "0.7.16"
+    "devframe": "0.8.1"
   },
   "scripts": {
     "build": "tsdown",