devframe 0.1.20 → 0.1.22

package/dist/node/index.d.mts

@@ -1,100 +1,12 @@
-import { $ as DevToolsRpcServerFunctions, $t as AgentManifest, Bt as DevToolsDiagnosticsHost$1, Dt as DevToolsDockUserEntry, Et as DevToolsDockHost$1, G as DevToolsChildProcessExecuteOptions, Gt as DevToolsCommandHandle, I as SharedState, J as DevToolsTerminalSession, Jt as DevToolsCommandsHost$1, K as DevToolsChildProcessTerminalSession, Q as DevToolsRpcClientFunctions, Qt as AgentHandle, St as DevToolsDockEntry, U as PartialWithoutId, V as DevToolsViewHost$1, Vt as DevToolsDiagnosticsLogger, Xt as DevToolsServerCommandEntry, Y as DevToolsTerminalSessionBase, Z as DevToolsDocksUserSettings, Zt as DevToolsServerCommandInput, an as DevToolsAgentHost$1, bt as ClientScriptEntry, d as DevToolsNodeContext, dt as DevToolsMessageEntry, en as AgentResource, g as RpcFunctionsHost$1, h as RpcBroadcastOptions, ht as DevToolsMessageHandle, in as AgentToolInput, m as DevToolsNodeRpcSession, nn as AgentResourceInput, on as DevToolsAgentHostEvents, pt as DevToolsMessageEntryInput, q as DevToolsTerminalHost$1, rn as AgentTool, sn as EventEmitter, tn as AgentResourceContent, v as RpcSharedStateHost, vt as DevToolsMessagesHost$1, x as RpcStreamingHost, yt as DevToolsHost } from "../devtool-Bm6zZAw5.mjs";
-import { g as RpcFunctionsCollectorBase } from "../index-BCo03GEF.mjs";
-import { g as RpcFunctionDefinitionAny } from "../types-ag029cAe.mjs";
-import { t as DevToolsNodeRpcSessionMeta } from "../ws-server-VQqESKAs.mjs";
-import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-DksyT-um.mjs";
+import { D as RpcStreamingHost, H as SharedState, Q as DevToolsRpcServerFunctions, S as RpcFunctionsHost$1, Z as DevToolsRpcClientFunctions, at as AgentManifest, b as DevToolsNodeRpcSession, ct as AgentResourceInput, dt as DevToolsAgentHost$1, et as DevToolsHost, ft as DevToolsAgentHostEvents, it as AgentHandle, lt as AgentTool, nt as DevToolsDiagnosticsHost$1, ot as AgentResource, pt as EventEmitter, q as DevToolsViewHost$1, rt as DevToolsDiagnosticsLogger, st as AgentResourceContent, ut as AgentToolInput, w as RpcSharedStateHost, x as RpcBroadcastOptions, y as DevToolsNodeContext } from "../devframe-DulcIxwu.mjs";
+import { f as RpcFunctionsCollectorBase } from "../index-DB2Ie0Or.mjs";
+import { g as RpcFunctionDefinitionAny } from "../types-4rdUEi2R.mjs";
+import { t as DevToolsNodeRpcSessionMeta } from "../ws-server-DjvlwLuM.mjs";
+import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-zKEDxgqD.mjs";
 import { createLogger, defineDiagnostics } from "logs-sdk";
 import { BirpcGroup } from "birpc";
 import { AsyncLocalStorage } from "node:async_hooks";
 
-//#region src/node/context-internal.d.ts
-interface InternalAnonymousAuthStorage {
-  trusted: Record<string, {
-    authToken: string;
-    ua: string;
-    origin: string;
-    timestamp: number;
-  } | undefined>;
-}
-interface RemoteTokenRecord {
-  dockId: string;
-  /** Dock URL origin — matched against WS handshake `Origin` header when `originLock` is on. */
-  origin: string;
-  originLock: boolean;
-}
-interface DevToolsInternalContext {
-  storage: {
-    auth: SharedState<InternalAnonymousAuthStorage>;
-  };
-  /**
-   * Revoke an auth token: remove from storage and notify all connected clients
-   * using this token that they are no longer trusted.
-   */
-  revokeAuthToken: (token: string) => Promise<void>;
-  /**
-   * Session-only tokens issued to remote-UI iframe docks. Not persisted —
-   * regenerated on every dev-server restart.
-   */
-  remoteTokens: Map<string, RemoteTokenRecord>;
-  allocateRemoteToken: (dockId: string, origin: string, originLock: boolean) => string;
-  revokeRemoteToken: (token: string) => void;
-  revokeRemoteTokensForDock: (dockId: string) => void;
-  /**
-   * Returns true if `token` is a valid remote token and, when `originLock` is
-   * on, `requestOrigin` matches the recorded dock origin.
-   */
-  isRemoteTokenTrusted: (token: string, requestOrigin?: string) => boolean;
-  /**
-   * Populated by `createWsServer` once the WS port is bound. Consumed by the
-   * docks host when enriching remote iframe URLs with a connection descriptor.
-   */
-  wsEndpoint?: {
-    /** Full `ws://` or `wss://` URL with host and port. */url: string;
-  };
-}
-declare const internalContextMap: WeakMap<DevToolsNodeContext, DevToolsInternalContext>;
-declare function getInternalContext(context: DevToolsNodeContext): DevToolsInternalContext;
-//#endregion
-//#region src/node/auth-revoke.d.ts
-/**
- * Flip `isTrusted` to false on any live WS clients connected with `token`
- * and broadcast the `auth:revoked` event so they can react.
- *
- * Shared between persisted-auth revocation and remote-dock token revocation.
- */
-declare function revokeActiveConnectionsForToken(context: DevToolsNodeContext, token: string): Promise<void>;
-/**
- * Revoke an auth token: remove from storage and notify all connected clients
- * using this token that they are no longer trusted.
- */
-declare function revokeAuthToken(context: DevToolsNodeContext, storage: SharedState<InternalAnonymousAuthStorage>, token: string): Promise<void>;
-//#endregion
-//#region src/node/auth-state.d.ts
-interface PendingAuthRequest {
-  clientAuthToken: string;
-  session: DevToolsNodeRpcSession;
-  ua: string;
-  origin: string;
-  resolve: (result: {
-    isTrusted: boolean;
-  }) => void;
-  abortController: AbortController;
-  timeout: ReturnType<typeof setTimeout>;
-}
-declare function getTempAuthToken(): string;
-declare function refreshTempAuthToken(): string;
-declare function getPendingAuth(): PendingAuthRequest | null;
-declare function setPendingAuth(request: PendingAuthRequest | null): void;
-/**
- * Abort and clean up any existing pending auth request.
- */
-declare function abortPendingAuth(): void;
-/**
- * Consume the temp auth ID: verify it matches, trust the pending client, and clean up.
- * Returns the client's authToken if successful, null otherwise.
- */
-declare function consumeTempAuthToken(id: string, storage: SharedState<InternalAnonymousAuthStorage>): string | null;
-//#endregion
 //#region src/node/context.d.ts
 interface CreateHostContextOptions {
   cwd: string;
@@ -109,23 +21,20 @@ interface CreateHostContextOptions {
   builtinRpcDeclarations?: readonly RpcFunctionDefinitionAny[];
 }
 /**
- * Framework-neutral core of the DevTools node context. Wires the six
- * host subsystems, the JSON-render factory, and the standard shared-state
- * bookkeeping. Framework-specific extensions (Vite plugin scan, Vite
- * config/server fields, built-in RPCs like `open-in-editor`) layer on
- * top via wrapper functions such as kit's `createDevToolsContext`.
+ * Framework-neutral core of the DevTools node context. Wires the RPC
+ * host, view (HTTP file-serving) host, diagnostics, and agent
+ * subsystems. Hub-level subsystems (`docks`, `terminals`, `messages`,
+ * `commands`, `createJsonRenderer`) are owned by
+ * `@vitejs/devtools-kit` — its `createKitContext` wraps this and
+ * attaches them when the devframe is mounted into a multi-integration
+ * hub.
  */
 declare function createHostContext(options: CreateHostContextOptions): Promise<DevToolsNodeContext>;
 //#endregion
-//#region src/node/context-utils.d.ts
-declare const ContextUtils: {
-  createSimpleClientScript(fn: string | ((ctx: any) => void)): ClientScriptEntry;
-};
-//#endregion
 //#region src/node/host-agent.d.ts
 /**
  * Framework-neutral host aggregating the agent-exposed surface of a
- * devtool. Auto-discovers RPC functions with an `agent` field from
+ * devframe. Auto-discovers RPC functions with an `agent` field from
  * `ctx.rpc.definitions`, and accepts plugin-registered tools /
  * resources via `registerTool` / `registerResource`.
  *
@@ -156,20 +65,6 @@ declare class DevToolsAgentHost implements DevToolsAgentHost$1 {
   private _coercePositionalArgs;
 }
 //#endregion
-//#region src/node/host-commands.d.ts
-declare class DevToolsCommandsHost implements DevToolsCommandsHost$1 {
-  readonly context: DevToolsNodeContext;
-  readonly commands: DevToolsCommandsHost$1['commands'];
-  readonly events: DevToolsCommandsHost$1['events'];
-  constructor(context: DevToolsNodeContext);
-  register(command: DevToolsServerCommandInput): DevToolsCommandHandle;
-  unregister(id: string): boolean;
-  execute(id: string, ...args: any[]): Promise<unknown>;
-  list(): DevToolsServerCommandEntry[];
-  private findCommand;
-  private toSerializable;
-}
-//#endregion
 //#region src/node/host-diagnostics.d.ts
 declare class DevToolsDiagnosticsHost implements DevToolsDiagnosticsHost$1 {
   readonly context: DevToolsNodeContext;
@@ -183,30 +78,6 @@ declare class DevToolsDiagnosticsHost implements DevToolsDiagnosticsHost$1 {
   private _rebuild;
 }
 //#endregion
-//#region src/node/host-docks.d.ts
-declare class DevToolsDockHost implements DevToolsDockHost$1 {
-  readonly context: DevToolsNodeContext;
-  readonly views: DevToolsDockHost$1['views'];
-  readonly events: DevToolsDockHost$1['events'];
-  userSettings: SharedState<DevToolsDocksUserSettings>;
-  /** Dock-id → allocated remote token + resolved options. */
-  private readonly remoteDocks;
-  constructor(context: DevToolsNodeContext);
-  init(): Promise<void>;
-  values({
-    includeBuiltin
-  }?: {
-    includeBuiltin?: boolean;
-  }): DevToolsDockEntry[];
-  private projectView;
-  private resolveDevServerOrigin;
-  register<T extends DevToolsDockUserEntry>(view: T, force?: boolean): {
-    update: (patch: Partial<T>) => void;
-  };
-  update(view: DevToolsDockUserEntry): void;
-  private prepareRemoteRegistration;
-}
-//#endregion
 //#region src/node/host-functions.d.ts
 declare class RpcFunctionsHost extends RpcFunctionsCollectorBase<DevToolsRpcServerFunctions, DevToolsNodeContext> implements RpcFunctionsHost$1 {
   /**
@@ -264,50 +135,6 @@ interface CreateH3DevToolsHostOptions {
  */
 declare function createH3DevToolsHost(options: CreateH3DevToolsHostOptions): DevToolsHost;
 //#endregion
-//#region src/node/host-messages.d.ts
-declare class DevToolsMessagesHost implements DevToolsMessagesHost$1 {
-  readonly context: DevToolsNodeContext;
-  readonly entries: DevToolsMessagesHost$1['entries'];
-  readonly events: DevToolsMessagesHost$1['events'];
-  /** Tracks when each entry was last added or updated (monotonic) */
-  readonly lastModified: Map<string, number>;
-  /** Tracks recently removed entry IDs with their removal time */
-  readonly removals: Array<{
-    id: string;
-    time: number;
-  }>;
-  private _autoDeleteTimers;
-  private _clock;
-  private _tick;
-  constructor(context: DevToolsNodeContext);
-  add(input: DevToolsMessageEntryInput): Promise<DevToolsMessageHandle>;
-  update(id: string, patch: Partial<DevToolsMessageEntryInput>): Promise<DevToolsMessageEntry | undefined>;
-  remove(id: string): Promise<void>;
-  clear(): Promise<void>;
-  private _createHandle;
-}
-//#endregion
-//#region src/node/host-terminals.d.ts
-declare class DevToolsTerminalHost implements DevToolsTerminalHost$1 {
-  readonly context: DevToolsNodeContext;
-  readonly sessions: DevToolsTerminalHost$1['sessions'];
-  readonly events: DevToolsTerminalHost$1['events'];
-  private _boundStreams;
-  private _channel?;
-  constructor(context: DevToolsNodeContext);
-  /**
-   * Lazily acquire the streaming channel — `context.rpc` isn't assigned
-   * until after every host is constructed, so we can't grab it in the
-   * constructor.
-   */
-  private getStreamingChannel;
-  register(session: DevToolsTerminalSession): DevToolsTerminalSession;
-  update(patch: PartialWithoutId<DevToolsTerminalSession>): void;
-  remove(session: DevToolsTerminalSession): void;
-  private bindStream;
-  startChildProcess(executeOptions: DevToolsChildProcessExecuteOptions, terminal: Omit<DevToolsTerminalSessionBase, 'status'>): Promise<DevToolsChildProcessTerminalSession>;
-}
-//#endregion
 //#region src/node/host-views.d.ts
 declare class DevToolsViewHost implements DevToolsViewHost$1 {
   readonly context: DevToolsNodeContext;
@@ -378,4 +205,4 @@ declare function createStorage<T extends object>(options: CreateStorageOptions<T
 declare function isObject(value: unknown): value is Record<string, any>;
 declare function normalizeHttpServerUrl(host: string, port: number | string): string;
 //#endregion
-export { ContextUtils, CreateH3DevToolsHostOptions, CreateHostContextOptions, CreateStorageOptions, DevToolsAgentHost, DevToolsCommandsHost, DevToolsDiagnosticsHost, DevToolsDockHost, DevToolsInternalContext, DevToolsMessagesHost, DevToolsTerminalHost, DevToolsViewHost, InternalAnonymousAuthStorage, PendingAuthRequest, RemoteTokenRecord, RpcFunctionsHost, StartHttpAndWsOptions, StartedServer, StaticRpcDumpCollection, StaticRpcDumpFile, StaticRpcDumpManifest, StaticRpcDumpManifestQueryEntry, StaticRpcDumpManifestStaticEntry, StaticRpcDumpManifestValue, StaticRpcDumpSerialization, abortPendingAuth, collectStaticRpcDump, consumeTempAuthToken, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, getInternalContext, getPendingAuth, getTempAuthToken, internalContextMap, isObject, normalizeHttpServerUrl, refreshTempAuthToken, revokeActiveConnectionsForToken, revokeAuthToken, setPendingAuth, startHttpAndWs };
+export { CreateH3DevToolsHostOptions, CreateHostContextOptions, CreateStorageOptions, DevToolsAgentHost, DevToolsDiagnosticsHost, DevToolsViewHost, RpcFunctionsHost, StartHttpAndWsOptions, StartedServer, StaticRpcDumpCollection, StaticRpcDumpFile, StaticRpcDumpManifest, StaticRpcDumpManifestQueryEntry, StaticRpcDumpManifestStaticEntry, StaticRpcDumpManifestValue, StaticRpcDumpSerialization, collectStaticRpcDump, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, isObject, normalizeHttpServerUrl, startHttpAndWs };

package/dist/node/index.mjs

@@ -1,64 +1,9 @@
-import { t as import_dist } from "../human-id-CHS0s28X.mjs";
-import { _ as revokeActiveConnectionsForToken, a as RpcFunctionsHost, c as DevToolsDockHost, d as createStorage, f as DevToolsDiagnosticsHost, g as ContextUtils, i as DevToolsMessagesHost, l as getInternalContext, m as DevToolsAgentHost, n as DevToolsViewHost, o as createRpcStreamingServerHost, p as DevToolsCommandsHost, r as DevToolsTerminalHost, s as createRpcSharedStateServerHost, t as createHostContext, u as internalContextMap, v as revokeAuthToken } from "../context-BfvbAyGk.mjs";
-import { t as createH3DevToolsHost } from "../host-h3-BMvrFzIJ.mjs";
-import { t as startHttpAndWs } from "../server-qRRM8t3v.mjs";
-import { t as collectStaticRpcDump } from "../static-dump-C1aVSwxY.mjs";
+import { a as createRpcSharedStateServerHost, i as createRpcStreamingServerHost, n as DevToolsViewHost, o as DevToolsDiagnosticsHost, r as RpcFunctionsHost, s as DevToolsAgentHost, t as createHostContext } from "../context-DUibxhrR.mjs";
+import { t as createH3DevToolsHost } from "../host-h3-Dz8YnFgu.mjs";
+import { t as startHttpAndWs } from "../server-ma8-ZVyX.mjs";
+import { t as collectStaticRpcDump } from "../static-dump-D7AvjrgL.mjs";
+import { t as createStorage } from "../storage-CNC38eU-.mjs";
 import { isIP } from "node:net";
-//#region src/node/auth-state.ts
-let pendingAuth = null;
-let tempAuthToken = generateTempId();
-function generateTempId() {
-	return (0, import_dist.humanId)({
-		separator: "-",
-		capitalize: false
-	});
-}
-function getTempAuthToken() {
-	return tempAuthToken;
-}
-function refreshTempAuthToken() {
-	tempAuthToken = generateTempId();
-	return tempAuthToken;
-}
-function getPendingAuth() {
-	return pendingAuth;
-}
-function setPendingAuth(request) {
-	pendingAuth = request;
-}
-/**
-* Abort and clean up any existing pending auth request.
-*/
-function abortPendingAuth() {
-	if (pendingAuth) {
-		pendingAuth.abortController.abort();
-		clearTimeout(pendingAuth.timeout);
-		pendingAuth = null;
-	}
-}
-/**
-* Consume the temp auth ID: verify it matches, trust the pending client, and clean up.
-* Returns the client's authToken if successful, null otherwise.
-*/
-function consumeTempAuthToken(id, storage) {
-	if (id !== tempAuthToken || !pendingAuth) return null;
-	const { clientAuthToken, session, ua, origin, resolve } = pendingAuth;
-	storage.mutate((state) => {
-		state.trusted[clientAuthToken] = {
-			authToken: clientAuthToken,
-			ua,
-			origin,
-			timestamp: Date.now()
-		};
-	});
-	session.meta.clientAuthToken = clientAuthToken;
-	session.meta.isTrusted = true;
-	resolve({ isTrusted: true });
-	abortPendingAuth();
-	refreshTempAuthToken();
-	return clientAuthToken;
-}
-//#endregion
 //#region src/node/utils.ts
 function isObject(value) {
 	return Object.prototype.toString.call(value) === "[object Object]";
@@ -67,4 +12,4 @@ function normalizeHttpServerUrl(host, port) {
 	return `http://${host === "127.0.0.1" ? "localhost" : isIP(host) === 6 ? `[${host}]` : host}:${port}`;
 }
 //#endregion
-export { ContextUtils, DevToolsAgentHost, DevToolsCommandsHost, DevToolsDiagnosticsHost, DevToolsDockHost, DevToolsMessagesHost, DevToolsTerminalHost, DevToolsViewHost, RpcFunctionsHost, abortPendingAuth, collectStaticRpcDump, consumeTempAuthToken, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, getInternalContext, getPendingAuth, getTempAuthToken, internalContextMap, isObject, normalizeHttpServerUrl, refreshTempAuthToken, revokeActiveConnectionsForToken, revokeAuthToken, setPendingAuth, startHttpAndWs };
+export { DevToolsAgentHost, DevToolsDiagnosticsHost, DevToolsViewHost, RpcFunctionsHost, collectStaticRpcDump, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, isObject, normalizeHttpServerUrl, startHttpAndWs };

package/dist/node/internal.d.mts

@@ -0,0 +1,16 @@
+import { i as DevframeDeploymentKind, r as DevframeDefinition } from "../devframe-DulcIxwu.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevToolsInternalContext } from "../context-DBd794Rn.mjs";
+
+//#region src/adapters/_shared.d.ts
+/**
+ * Resolve the mount base path for a devframe's SPA. Hosted adapters
+ * (`vite`, `kit`, `embedded`) default to `/__<id>/` so they don't
+ * collide with the host app; standalone adapters (`cli`, `spa`,
+ * `build`) default to `/` because they own the origin.
+ *
+ * The devframe author can override with `basePath` on the definition.
+ */
+declare function resolveBasePath(def: DevframeDefinition, kind: DevframeDeploymentKind): string;
+declare function normalizeBasePath(base: string): string;
+//#endregion
+export { type DevToolsInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/internal.mjs

@@ -0,0 +1,50 @@
+import { t as createStorage } from "../storage-CNC38eU-.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-DIMz1r7-.mjs";
+import { t as humanId } from "../human-id-adtUWQLr.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-DcJX9-Az.mjs";
+import { join } from "pathe";
+//#region src/node/internal/context.ts
+const internalContextMap = /* @__PURE__ */ new WeakMap();
+function getInternalContext(context) {
+	if (!internalContextMap.has(context)) {
+		const storage = createStorage({
+			filepath: join(context.host.getStorageDir("global"), "auth.json"),
+			initialValue: { trusted: {} }
+		});
+		const remoteTokens = /* @__PURE__ */ new Map();
+		function revokeRemoteToken(token) {
+			if (!remoteTokens.delete(token)) return;
+			revokeActiveConnectionsForToken(context, token);
+		}
+		const internalContext = {
+			storage: { auth: storage },
+			revokeAuthToken: (token) => revokeAuthToken(context, storage, token),
+			remoteTokens,
+			allocateRemoteToken(dockId, origin, originLock) {
+				const token = humanId();
+				remoteTokens.set(token, {
+					dockId,
+					origin,
+					originLock
+				});
+				return token;
+			},
+			revokeRemoteToken,
+			revokeRemoteTokensForDock(dockId) {
+				const tokensToRevoke = [];
+				for (const [token, record] of remoteTokens) if (record.dockId === dockId) tokensToRevoke.push(token);
+				for (const token of tokensToRevoke) revokeRemoteToken(token);
+			},
+			isRemoteTokenTrusted(token, requestOrigin) {
+				const record = remoteTokens.get(token);
+				if (!record) return false;
+				if (!record.originLock) return true;
+				return !!requestOrigin && record.origin === requestOrigin;
+			}
+		};
+		internalContextMap.set(context, internalContext);
+	}
+	return internalContextMap.get(context);
+}
+//#endregion
+export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/{open-BtOOEldu.mjs → open-DmFp0qZA.mjs}

@@ -1,11 +1,11 @@
+import { promisify } from "node:util";
 import fs from "node:fs";
-import { fileURLToPath } from "node:url";
+import os from "node:os";
 import process from "node:process";
 import path from "node:path";
-import { promisify } from "node:util";
-import os from "node:os";
-import fs$1, { constants } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
 import childProcess, { execFile } from "node:child_process";
+import fs$1, { constants } from "node:fs/promises";
 import { Buffer } from "node:buffer";
 //#region ../../../node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js
 let isDockerCached;
@@ -475,7 +475,7 @@ const baseOpen = async (options) => {
 		});
 	});
 };
-const open = (target, options) => {
+const open$1 = (target, options) => {
 	if (typeof target !== "string") throw new TypeError("Expected a `target`");
 	return baseOpen({
 		...options,
@@ -530,4 +530,13 @@ defineLazyProperty(apps, "edge", () => detectPlatformBinary({
 }, { wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe" }));
 defineLazyProperty(apps, "safari", () => detectPlatformBinary({ darwin: "Safari" }));
 //#endregion
-export { open as default };
+//#region src/utils/open.ts
+/**
+* Open a URL, file, or other target in its default OS handler
+* (browser for URLs, Finder/Explorer for paths, etc.).
+*/
+async function open(target, options) {
+	await open$1(target, options);
+}
+//#endregion
+export { open as t };

package/dist/recipes/open-helpers.d.mts

@@ -1,17 +1,16 @@
-import { b as RpcFunctionSetupResult, m as RpcFunctionAgentOptions, s as RpcDump, w as Thenable } from "../types-ag029cAe.mjs";
+import { b as RpcFunctionSetupResult, m as RpcFunctionAgentOptions, s as RpcDump, w as Thenable } from "../types-4rdUEi2R.mjs";
 import * as v from "valibot";
 
 //#region src/recipes/open-helpers.d.ts
 /**
- * Prebuilt RPC action that opens a file in the user's configured editor
- * via [`launch-editor`](https://www.npmjs.com/package/launch-editor).
+ * Prebuilt RPC action that opens a file in the user's configured editor.
  *
  * Registered name: `devframe:open-in-editor`.
  *
  * ```ts
  * import { openInEditor } from 'devframe/recipes/open-helpers'
  *
- * defineDevtool({
+ * defineDevframe({
  *   id: 'my-tool',
  *   name: 'My Tool',
  *   setup(ctx) {
@@ -19,9 +18,6 @@ import * as v from "valibot";
  *   },
  * })
  * ```
- *
- * Requires `launch-editor` to be installed by the consumer (declared as
- * an optional peer dependency on devframe).
  */
 declare const openInEditor: {
   name: "devframe:open-in-editor";
@@ -39,8 +35,7 @@ declare const openInEditor: {
   __promise?: Thenable<RpcFunctionSetupResult<[string], void>> | undefined;
 };
 /**
- * Prebuilt RPC action that reveals a path in the OS file explorer via
- * [`open`](https://www.npmjs.com/package/open).
+ * Prebuilt RPC action that reveals a path in the OS file explorer.
  *
  * Registered name: `devframe:open-in-finder`.
  *

package/dist/recipes/open-helpers.mjs

@@ -1,16 +1,17 @@
-import { n as defineRpcFunction } from "../define-Bb4zh-Dc.mjs";
+import { n as defineRpcFunction } from "../define-CW9gLnyG.mjs";
+import { t as launchEditor } from "../launch-editor-KA_21J1T.mjs";
+import { t as open } from "../open-DmFp0qZA.mjs";
 import * as v from "valibot";
 //#region src/recipes/open-helpers.ts
 /**
-* Prebuilt RPC action that opens a file in the user's configured editor
-* via [`launch-editor`](https://www.npmjs.com/package/launch-editor).
+* Prebuilt RPC action that opens a file in the user's configured editor.
 *
 * Registered name: `devframe:open-in-editor`.
 *
 * ```ts
 * import { openInEditor } from 'devframe/recipes/open-helpers'
 *
-* defineDevtool({
+* defineDevframe({
 *   id: 'my-tool',
 *   name: 'My Tool',
 *   setup(ctx) {
@@ -18,9 +19,6 @@ import * as v from "valibot";
 *   },
 * })
 * ```
-*
-* Requires `launch-editor` to be installed by the consumer (declared as
-* an optional peer dependency on devframe).
 */
 const openInEditor = defineRpcFunction({
 	name: "devframe:open-in-editor",
@@ -29,13 +27,11 @@ const openInEditor = defineRpcFunction({
 	args: [v.string()],
 	returns: v.void(),
 	async handler(filename) {
-		const mod = await import("launch-editor");
-		(mod.default ?? mod)(filename);
+		launchEditor(filename);
 	}
 });
 /**
-* Prebuilt RPC action that reveals a path in the OS file explorer via
-* [`open`](https://www.npmjs.com/package/open).
+* Prebuilt RPC action that reveals a path in the OS file explorer.
 *
 * Registered name: `devframe:open-in-finder`.
 *
@@ -52,7 +48,6 @@ const openInFinder = defineRpcFunction({
 	args: [v.string()],
 	returns: v.void(),
 	async handler(path) {
-		const { default: open } = await import("../open-BtOOEldu.mjs");
 		await open(path);
 	}
 });

package/dist/revoke-DIMz1r7-.mjs

@@ -0,0 +1,35 @@
+//#region src/node/auth/revoke.ts
+/**
+* Flip `isTrusted` to false on any live WS clients connected with `token`
+* and broadcast the `auth:revoked` event so they can react.
+*
+* Shared between persisted-auth revocation and remote-dock token revocation.
+*/
+async function revokeActiveConnectionsForToken(context, token) {
+	const rpcHost = context.rpc;
+	if (!rpcHost?._rpcGroup) return;
+	const affectedSessionIds = /* @__PURE__ */ new Set();
+	for (const client of rpcHost._rpcGroup.clients) if (client.$meta.clientAuthToken === token) {
+		affectedSessionIds.add(client.$meta.id);
+		client.$meta.isTrusted = false;
+		client.$meta.clientAuthToken = void 0;
+	}
+	if (affectedSessionIds.size === 0) return;
+	await rpcHost.broadcast({
+		method: "devframe:auth:revoked",
+		args: [],
+		filter: (client) => affectedSessionIds.has(client.$meta.id)
+	});
+}
+/**
+* Revoke an auth token: remove from storage and notify all connected clients
+* using this token that they are no longer trusted.
+*/
+async function revokeAuthToken(context, storage, token) {
+	storage.mutate((state) => {
+		delete state.trusted[token];
+	});
+	await revokeActiveConnectionsForToken(context, token);
+}
+//#endregion
+export { revokeAuthToken as n, revokeActiveConnectionsForToken as t };

package/dist/rpc/index.d.mts

@@ -1,3 +1,3 @@
-import { _ as RpcCacheManager, a as structuredCloneDeserialize, c as structuredCloneStringify, d as createClientFromDump, f as dumpFunctions, g as RpcFunctionsCollectorBase, h as defineRpcFunction, i as strictJsonStringify, l as getRpcHandler, m as createDefineWrapperWithContext, n as validateDefinitions, o as structuredCloneParse, p as getDefinitionsWithDumps, r as STRUCTURED_CLONE_PREFIX, s as structuredCloneSerialize, t as validateDefinition, u as getRpcResolvedSetupResult, v as RpcCacheOptions } from "../index-BCo03GEF.mjs";
-import { C as RpcReturnSchema, S as RpcFunctionsCollector, _ as RpcFunctionDefinitionAnyWithContext, a as RpcDefinitionsFilter, b as RpcFunctionSetupResult, c as RpcDumpClientOptions, d as RpcDumpGetter, f as RpcDumpRecord, g as RpcFunctionDefinitionAny, h as RpcFunctionDefinition, i as RpcArgsSchema, l as RpcDumpCollectionOptions, m as RpcFunctionAgentOptions, n as BirpcReturn, o as RpcDefinitionsToFunctions, p as RpcDumpStore, r as EntriesToObject, s as RpcDump, t as BirpcFn, u as RpcDumpDefinition, v as RpcFunctionDefinitionBase, w as Thenable, x as RpcFunctionType, y as RpcFunctionDefinitionToFunction } from "../types-ag029cAe.mjs";
-export { BirpcFn, BirpcReturn, EntriesToObject, RpcArgsSchema, RpcCacheManager, RpcCacheOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcDump, RpcDumpClientOptions, RpcDumpCollectionOptions, RpcDumpDefinition, RpcDumpGetter, RpcDumpRecord, RpcDumpStore, RpcFunctionAgentOptions, RpcFunctionDefinition, RpcFunctionDefinitionAny, RpcFunctionDefinitionAnyWithContext, RpcFunctionDefinitionBase, RpcFunctionDefinitionToFunction, RpcFunctionSetupResult, RpcFunctionType, RpcFunctionsCollector, RpcFunctionsCollectorBase, RpcReturnSchema, STRUCTURED_CLONE_PREFIX, Thenable, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, structuredCloneDeserialize, structuredCloneParse, structuredCloneSerialize, structuredCloneStringify, validateDefinition, validateDefinitions };
+import { a as getRpcHandler, c as dumpFunctions, d as defineRpcFunction, f as RpcFunctionsCollectorBase, i as strictJsonStringify, l as getDefinitionsWithDumps, m as RpcCacheOptions, n as validateDefinitions, o as getRpcResolvedSetupResult, p as RpcCacheManager, r as STRUCTURED_CLONE_PREFIX, s as createClientFromDump, t as validateDefinition, u as createDefineWrapperWithContext } from "../index-DB2Ie0Or.mjs";
+import { C as RpcReturnSchema, S as RpcFunctionsCollector, _ as RpcFunctionDefinitionAnyWithContext, a as RpcDefinitionsFilter, b as RpcFunctionSetupResult, c as RpcDumpClientOptions, d as RpcDumpGetter, f as RpcDumpRecord, g as RpcFunctionDefinitionAny, h as RpcFunctionDefinition, i as RpcArgsSchema, l as RpcDumpCollectionOptions, m as RpcFunctionAgentOptions, n as BirpcReturn, o as RpcDefinitionsToFunctions, p as RpcDumpStore, r as EntriesToObject, s as RpcDump, t as BirpcFn, u as RpcDumpDefinition, v as RpcFunctionDefinitionBase, w as Thenable, x as RpcFunctionType, y as RpcFunctionDefinitionToFunction } from "../types-4rdUEi2R.mjs";
+export { BirpcFn, BirpcReturn, EntriesToObject, RpcArgsSchema, RpcCacheManager, RpcCacheOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcDump, RpcDumpClientOptions, RpcDumpCollectionOptions, RpcDumpDefinition, RpcDumpGetter, RpcDumpRecord, RpcDumpStore, RpcFunctionAgentOptions, RpcFunctionDefinition, RpcFunctionDefinitionAny, RpcFunctionDefinitionAnyWithContext, RpcFunctionDefinitionBase, RpcFunctionDefinitionToFunction, RpcFunctionSetupResult, RpcFunctionType, RpcFunctionsCollector, RpcFunctionsCollectorBase, RpcReturnSchema, STRUCTURED_CLONE_PREFIX, Thenable, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions };

package/dist/rpc/index.mjs

@@ -1,4 +1,4 @@
-import { a as validateDefinitions, c as getRpcResolvedSetupResult, i as validateDefinition, l as RpcCacheManager, n as dumpFunctions, o as RpcFunctionsCollectorBase, r as getDefinitionsWithDumps, s as getRpcHandler, t as createClientFromDump } from "../rpc-INbWfHoX.mjs";
-import { a as structuredCloneSerialize, i as structuredCloneParse, n as strictJsonStringify, o as structuredCloneStringify, r as structuredCloneDeserialize, t as STRUCTURED_CLONE_PREFIX } from "../serialization-DwKi05Pn.mjs";
-import { n as defineRpcFunction, t as createDefineWrapperWithContext } from "../define-Bb4zh-Dc.mjs";
-export { RpcCacheManager, RpcFunctionsCollectorBase, STRUCTURED_CLONE_PREFIX, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, structuredCloneDeserialize, structuredCloneParse, structuredCloneSerialize, structuredCloneStringify, validateDefinition, validateDefinitions };
+import { a as validateDefinitions, c as getRpcResolvedSetupResult, i as validateDefinition, l as RpcCacheManager, n as dumpFunctions, o as RpcFunctionsCollectorBase, r as getDefinitionsWithDumps, s as getRpcHandler, t as createClientFromDump } from "../rpc-CkZuoz-m.mjs";
+import { n as strictJsonStringify, t as STRUCTURED_CLONE_PREFIX } from "../serialization-CwO31axa.mjs";
+import { n as defineRpcFunction, t as createDefineWrapperWithContext } from "../define-CW9gLnyG.mjs";
+export { RpcCacheManager, RpcFunctionsCollectorBase, STRUCTURED_CLONE_PREFIX, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions };

package/dist/rpc/transports/ws-client.d.mts

@@ -1,2 +1,2 @@
-import { n as createWsRpcChannel, t as WsRpcChannelOptions } from "../../ws-client-DQySVfF_.mjs";
+import { n as createWsRpcChannel, t as WsRpcChannelOptions } from "../../ws-client-Bavoya6-.mjs";
 export { WsRpcChannelOptions, createWsRpcChannel };

package/dist/rpc/transports/ws-client.mjs

@@ -1,4 +1,5 @@
-import { i as structuredCloneParse, n as strictJsonStringify, o as structuredCloneStringify } from "../../serialization-DwKi05Pn.mjs";
+import { n as strictJsonStringify } from "../../serialization-CwO31axa.mjs";
+import { i as structuredCloneStringify, n as structuredCloneParse } from "../../structured-clone-DcDc2Dds.mjs";
 //#region src/rpc/transports/ws-client.ts
 function NOOP() {}
 const EMPTY_DEFS = /* @__PURE__ */ new Map();

package/dist/rpc/transports/ws-server.d.mts

@@ -1,2 +1,2 @@
-import { n as WsRpcTransportOptions, r as attachWsRpcTransport, t as DevToolsNodeRpcSessionMeta } from "../../ws-server-VQqESKAs.mjs";
+import { n as WsRpcTransportOptions, r as attachWsRpcTransport, t as DevToolsNodeRpcSessionMeta } from "../../ws-server-DjvlwLuM.mjs";
 export { DevToolsNodeRpcSessionMeta, WsRpcTransportOptions, attachWsRpcTransport };

package/dist/rpc/transports/ws-server.mjs

@@ -1,4 +1,5 @@
-import { i as structuredCloneParse, n as strictJsonStringify, o as structuredCloneStringify } from "../../serialization-DwKi05Pn.mjs";
+import { n as strictJsonStringify } from "../../serialization-CwO31axa.mjs";
+import { i as structuredCloneStringify, n as structuredCloneParse } from "../../structured-clone-DcDc2Dds.mjs";
 import { createServer } from "node:https";
 import { WebSocketServer } from "ws";
 //#region src/rpc/transports/ws-server.ts

package/dist/{rpc-INbWfHoX.mjs → rpc-CkZuoz-m.mjs}

@@ -1,5 +1,5 @@
-import { c as logger } from "./serialization-DwKi05Pn.mjs";
-import { hash } from "ohash";
+import { t as hash } from "./hash-BHZbo80D.mjs";
+import { i as logger } from "./serialization-CwO31axa.mjs";
 //#region src/rpc/cache.ts
 /**
 * @experimental API is expected to change.
@@ -56,6 +56,7 @@ async function getRpcHandler(definition, context) {
 //#endregion
 //#region src/rpc/collector.ts
 var RpcFunctionsCollectorBase = class {
+	context;
 	definitions = /* @__PURE__ */ new Map();
 	functions;
 	_onChanged = [];

package/dist/{serialization-DwKi05Pn.mjs → serialization-CwO31axa.mjs}

@@ -1,5 +1,4 @@
 import { consoleReporter, createLogger, defineDiagnostics, plainFormatter } from "logs-sdk";
-import { deserialize as structuredCloneDeserialize, parse as structuredCloneParse, serialize as structuredCloneSerialize, stringify as structuredCloneStringify } from "structured-clone-es";
 //#region src/rpc/diagnostics.ts
 const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
@@ -109,4 +108,4 @@ function formatPath(parent, key) {
 	return key;
 }
 //#endregion
-export { structuredCloneSerialize as a, logger as c, structuredCloneParse as i, strictJsonStringify as n, structuredCloneStringify as o, structuredCloneDeserialize as r, diagnostics as s, STRUCTURED_CLONE_PREFIX as t };
+export { logger as i, strictJsonStringify as n, diagnostics as r, STRUCTURED_CLONE_PREFIX as t };