devframe 0.1.21 → 0.2.0

package/dist/node/index.d.mts

@@ -1,53 +1,12 @@
-import { $ as AgentHandle, P as SharedState, Q as DevToolsDiagnosticsLogger, U as DevToolsRpcClientFunctions, W as DevToolsRpcServerFunctions, Y as DevToolsHost, Z as DevToolsDiagnosticsHost$1, at as AgentToolInput, ct as EventEmitter, d as DevToolsNodeContext, et as AgentManifest, f as DevToolsNodeRpcSession, g as RpcSharedStateHost, it as AgentTool, m as RpcFunctionsHost$1, nt as AgentResourceContent, ot as DevToolsAgentHost$1, p as RpcBroadcastOptions, rt as AgentResourceInput, st as DevToolsAgentHostEvents, tt as AgentResource, y as RpcStreamingHost, z as DevToolsViewHost$1 } from "../devtool-CNvLs2_Y.mjs";
-import { g as RpcFunctionsCollectorBase } from "../index-CuLRIMto.mjs";
-import { g as RpcFunctionDefinitionAny } from "../types-C5OVe4AC.mjs";
-import { t as DevToolsNodeRpcSessionMeta } from "../ws-server-C7LnhOHi.mjs";
-import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-BAqOajx_.mjs";
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevToolsInternalContext } from "../context-internal-saIAfNVw.mjs";
+import { $ as AgentResourceContent, J as DevToolsDiagnosticsHost$1, K as DevToolsHost, P as SharedState, Q as AgentResource, U as DevToolsRpcClientFunctions, W as DevToolsRpcServerFunctions, X as AgentHandle, Y as DevToolsDiagnosticsLogger, Z as AgentManifest, at as EventEmitter, d as DevToolsNodeContext, et as AgentResourceInput, f as DevToolsNodeRpcSession, g as RpcSharedStateHost, it as DevToolsAgentHostEvents, m as RpcFunctionsHost$1, nt as AgentToolInput, p as RpcBroadcastOptions, rt as DevToolsAgentHost$1, tt as AgentTool, y as RpcStreamingHost, z as DevToolsViewHost$1 } from "../devframe-R5Ex5K5L.mjs";
+import { f as RpcFunctionsCollectorBase } from "../index-DB2Ie0Or.mjs";
+import { g as RpcFunctionDefinitionAny } from "../types-4rdUEi2R.mjs";
+import { t as DevToolsNodeRpcSessionMeta } from "../ws-server-DjvlwLuM.mjs";
+import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-DzKz023G.mjs";
 import { createLogger, defineDiagnostics } from "logs-sdk";
 import { BirpcGroup } from "birpc";
 import { AsyncLocalStorage } from "node:async_hooks";
 
-//#region src/node/auth-revoke.d.ts
-/**
- * Flip `isTrusted` to false on any live WS clients connected with `token`
- * and broadcast the `auth:revoked` event so they can react.
- *
- * Shared between persisted-auth revocation and remote-dock token revocation.
- */
-declare function revokeActiveConnectionsForToken(context: DevToolsNodeContext, token: string): Promise<void>;
-/**
- * Revoke an auth token: remove from storage and notify all connected clients
- * using this token that they are no longer trusted.
- */
-declare function revokeAuthToken(context: DevToolsNodeContext, storage: SharedState<InternalAnonymousAuthStorage>, token: string): Promise<void>;
-//#endregion
-//#region src/node/auth-state.d.ts
-interface PendingAuthRequest {
-  clientAuthToken: string;
-  session: DevToolsNodeRpcSession;
-  ua: string;
-  origin: string;
-  resolve: (result: {
-    isTrusted: boolean;
-  }) => void;
-  abortController: AbortController;
-  timeout: ReturnType<typeof setTimeout>;
-}
-declare function getTempAuthToken(): string;
-declare function refreshTempAuthToken(): string;
-declare function getPendingAuth(): PendingAuthRequest | null;
-declare function setPendingAuth(request: PendingAuthRequest | null): void;
-/**
- * Abort and clean up any existing pending auth request.
- */
-declare function abortPendingAuth(): void;
-/**
- * Consume the temp auth ID: verify it matches, trust the pending client, and clean up.
- * Returns the client's authToken if successful, null otherwise.
- */
-declare function consumeTempAuthToken(id: string, storage: SharedState<InternalAnonymousAuthStorage>): string | null;
-//#endregion
 //#region src/node/context.d.ts
 interface CreateHostContextOptions {
   cwd: string;
@@ -62,20 +21,19 @@ interface CreateHostContextOptions {
   builtinRpcDeclarations?: readonly RpcFunctionDefinitionAny[];
 }
 /**
- * Framework-neutral core of the DevTools node context. Wires the RPC
- * host, view (HTTP file-serving) host, diagnostics, and agent
- * subsystems plus the JSON-render factory. Hub-level subsystems
- * (`docks`, `terminals`, `messages`, `commands`) are owned by
- * `@vitejs/devtools-kit` — its `createKitContext` wraps this and
- * attaches them when the devtool is mounted into a multi-integration
- * hub.
+ * Framework- and build-tool-agnostic core of the DevTools node context.
+ * Wires the RPC host, view (HTTP file-serving) host, diagnostics, and
+ * agent subsystems. Host adapters can wrap this to augment `ctx` with
+ * extra surfaces — for example, `@vitejs/devtools-kit`'s
+ * `createKitContext` attaches `docks`, `terminals`, `messages`,
+ * `commands`, and `createJsonRenderer` when mounted into Vite DevTools.
  */
 declare function createHostContext(options: CreateHostContextOptions): Promise<DevToolsNodeContext>;
 //#endregion
 //#region src/node/host-agent.d.ts
 /**
  * Framework-neutral host aggregating the agent-exposed surface of a
- * devtool. Auto-discovers RPC functions with an `agent` field from
+ * devframe. Auto-discovers RPC functions with an `agent` field from
  * `ctx.rpc.definitions`, and accepts plugin-registered tools /
  * resources via `registerTool` / `registerResource`.
  *
@@ -246,4 +204,4 @@ declare function createStorage<T extends object>(options: CreateStorageOptions<T
 declare function isObject(value: unknown): value is Record<string, any>;
 declare function normalizeHttpServerUrl(host: string, port: number | string): string;
 //#endregion
-export { CreateH3DevToolsHostOptions, CreateHostContextOptions, CreateStorageOptions, DevToolsAgentHost, DevToolsDiagnosticsHost, DevToolsInternalContext, DevToolsViewHost, InternalAnonymousAuthStorage, PendingAuthRequest, RemoteTokenRecord, RpcFunctionsHost, StartHttpAndWsOptions, StartedServer, StaticRpcDumpCollection, StaticRpcDumpFile, StaticRpcDumpManifest, StaticRpcDumpManifestQueryEntry, StaticRpcDumpManifestStaticEntry, StaticRpcDumpManifestValue, StaticRpcDumpSerialization, abortPendingAuth, collectStaticRpcDump, consumeTempAuthToken, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, getInternalContext, getPendingAuth, getTempAuthToken, internalContextMap, isObject, normalizeHttpServerUrl, refreshTempAuthToken, revokeActiveConnectionsForToken, revokeAuthToken, setPendingAuth, startHttpAndWs };
+export { CreateH3DevToolsHostOptions, CreateHostContextOptions, CreateStorageOptions, DevToolsAgentHost, DevToolsDiagnosticsHost, DevToolsViewHost, RpcFunctionsHost, StartHttpAndWsOptions, StartedServer, StaticRpcDumpCollection, StaticRpcDumpFile, StaticRpcDumpManifest, StaticRpcDumpManifestQueryEntry, StaticRpcDumpManifestStaticEntry, StaticRpcDumpManifestValue, StaticRpcDumpSerialization, collectStaticRpcDump, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, isObject, normalizeHttpServerUrl, startHttpAndWs };

package/dist/node/index.mjs

@@ -1,65 +1,9 @@
-import { t as import_dist } from "../human-id-BLoGo_e5.mjs";
-import { a as revokeAuthToken, i as revokeActiveConnectionsForToken, n as internalContextMap, r as createStorage, t as getInternalContext } from "../context-internal-Dx_NoSv1.mjs";
-import { a as createRpcSharedStateServerHost, i as createRpcStreamingServerHost, n as DevToolsViewHost, o as DevToolsDiagnosticsHost, r as RpcFunctionsHost, s as DevToolsAgentHost, t as createHostContext } from "../context-BJ4r2SmR.mjs";
-import { t as createH3DevToolsHost } from "../host-h3-9jeHcltx.mjs";
-import { t as startHttpAndWs } from "../server-CBsxXIH5.mjs";
-import { t as collectStaticRpcDump } from "../static-dump-D5VH8Iqk.mjs";
+import { a as createRpcSharedStateServerHost, i as createRpcStreamingServerHost, n as DevToolsViewHost, o as DevToolsDiagnosticsHost, r as RpcFunctionsHost, s as DevToolsAgentHost, t as createHostContext } from "../context-BBi2IQDm.mjs";
+import { t as createH3DevToolsHost } from "../host-h3-Dz8YnFgu.mjs";
+import { t as startHttpAndWs } from "../server-DOk4grlJ.mjs";
+import { t as collectStaticRpcDump } from "../static-dump-C67bCuse.mjs";
+import { t as createStorage } from "../storage-CNvfBGQ5.mjs";
 import { isIP } from "node:net";
-//#region src/node/auth-state.ts
-let pendingAuth = null;
-let tempAuthToken = generateTempId();
-function generateTempId() {
-	return (0, import_dist.humanId)({
-		separator: "-",
-		capitalize: false
-	});
-}
-function getTempAuthToken() {
-	return tempAuthToken;
-}
-function refreshTempAuthToken() {
-	tempAuthToken = generateTempId();
-	return tempAuthToken;
-}
-function getPendingAuth() {
-	return pendingAuth;
-}
-function setPendingAuth(request) {
-	pendingAuth = request;
-}
-/**
-* Abort and clean up any existing pending auth request.
-*/
-function abortPendingAuth() {
-	if (pendingAuth) {
-		pendingAuth.abortController.abort();
-		clearTimeout(pendingAuth.timeout);
-		pendingAuth = null;
-	}
-}
-/**
-* Consume the temp auth ID: verify it matches, trust the pending client, and clean up.
-* Returns the client's authToken if successful, null otherwise.
-*/
-function consumeTempAuthToken(id, storage) {
-	if (id !== tempAuthToken || !pendingAuth) return null;
-	const { clientAuthToken, session, ua, origin, resolve } = pendingAuth;
-	storage.mutate((state) => {
-		state.trusted[clientAuthToken] = {
-			authToken: clientAuthToken,
-			ua,
-			origin,
-			timestamp: Date.now()
-		};
-	});
-	session.meta.clientAuthToken = clientAuthToken;
-	session.meta.isTrusted = true;
-	resolve({ isTrusted: true });
-	abortPendingAuth();
-	refreshTempAuthToken();
-	return clientAuthToken;
-}
-//#endregion
 //#region src/node/utils.ts
 function isObject(value) {
 	return Object.prototype.toString.call(value) === "[object Object]";
@@ -68,4 +12,4 @@ function normalizeHttpServerUrl(host, port) {
 	return `http://${host === "127.0.0.1" ? "localhost" : isIP(host) === 6 ? `[${host}]` : host}:${port}`;
 }
 //#endregion
-export { DevToolsAgentHost, DevToolsDiagnosticsHost, DevToolsViewHost, RpcFunctionsHost, abortPendingAuth, collectStaticRpcDump, consumeTempAuthToken, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, getInternalContext, getPendingAuth, getTempAuthToken, internalContextMap, isObject, normalizeHttpServerUrl, refreshTempAuthToken, revokeActiveConnectionsForToken, revokeAuthToken, setPendingAuth, startHttpAndWs };
+export { DevToolsAgentHost, DevToolsDiagnosticsHost, DevToolsViewHost, RpcFunctionsHost, collectStaticRpcDump, createH3DevToolsHost, createHostContext, createRpcSharedStateServerHost, createRpcStreamingServerHost, createStorage, isObject, normalizeHttpServerUrl, startHttpAndWs };

package/dist/node/internal.d.mts

@@ -0,0 +1,16 @@
+import { i as DevframeDeploymentKind, r as DevframeDefinition } from "../devframe-R5Ex5K5L.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevToolsInternalContext } from "../context-DRa0wGsC.mjs";
+
+//#region src/adapters/_shared.d.ts
+/**
+ * Resolve the mount base path for a devframe's SPA. Hosted adapters
+ * (`vite`, `embedded`) default to `/__<id>/` so they don't collide
+ * with the host app; standalone adapters (`cli`, `spa`, `build`)
+ * default to `/` because they own the origin.
+ *
+ * The devframe author can override with `basePath` on the definition.
+ */
+declare function resolveBasePath(def: DevframeDefinition, kind: DevframeDeploymentKind): string;
+declare function normalizeBasePath(base: string): string;
+//#endregion
+export { type DevToolsInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/internal.mjs

@@ -0,0 +1,50 @@
+import { t as createStorage } from "../storage-CNvfBGQ5.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-DIMz1r7-.mjs";
+import { t as humanId } from "../human-id-adtUWQLr.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-BrKv3CYt.mjs";
+import { join } from "pathe";
+//#region src/node/internal/context.ts
+const internalContextMap = /* @__PURE__ */ new WeakMap();
+function getInternalContext(context) {
+	if (!internalContextMap.has(context)) {
+		const storage = createStorage({
+			filepath: join(context.host.getStorageDir("global"), "auth.json"),
+			initialValue: { trusted: {} }
+		});
+		const remoteTokens = /* @__PURE__ */ new Map();
+		function revokeRemoteToken(token) {
+			if (!remoteTokens.delete(token)) return;
+			revokeActiveConnectionsForToken(context, token);
+		}
+		const internalContext = {
+			storage: { auth: storage },
+			revokeAuthToken: (token) => revokeAuthToken(context, storage, token),
+			remoteTokens,
+			allocateRemoteToken(dockId, origin, originLock) {
+				const token = humanId();
+				remoteTokens.set(token, {
+					dockId,
+					origin,
+					originLock
+				});
+				return token;
+			},
+			revokeRemoteToken,
+			revokeRemoteTokensForDock(dockId) {
+				const tokensToRevoke = [];
+				for (const [token, record] of remoteTokens) if (record.dockId === dockId) tokensToRevoke.push(token);
+				for (const token of tokensToRevoke) revokeRemoteToken(token);
+			},
+			isRemoteTokenTrusted(token, requestOrigin) {
+				const record = remoteTokens.get(token);
+				if (!record) return false;
+				if (!record.originLock) return true;
+				return !!requestOrigin && record.origin === requestOrigin;
+			}
+		};
+		internalContextMap.set(context, internalContext);
+	}
+	return internalContextMap.get(context);
+}
+//#endregion
+export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/{open-Dede_w9r.mjs → open-B2ah1IKK.mjs}

@@ -2,12 +2,12 @@ import { promisify } from "node:util";
 import fs from "node:fs";
 import os from "node:os";
 import process from "node:process";
-import fs$1, { constants } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import childProcess, { execFile } from "node:child_process";
+import fs$1, { constants } from "node:fs/promises";
 import { Buffer } from "node:buffer";
-//#region ../../../node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js
+//#region ../../node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js
 let isDockerCached;
 function hasDockerEnv() {
 	try {
@@ -29,7 +29,7 @@ function isDocker() {
 	return isDockerCached;
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
+//#region ../../node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js
 let cachedResult;
 const hasContainerEnv = () => {
 	try {
@@ -44,7 +44,7 @@ function isInsideContainer() {
 	return cachedResult;
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/is-wsl@3.1.0/node_modules/is-wsl/index.js
+//#region ../../node_modules/.pnpm/is-wsl@3.1.1/node_modules/is-wsl/index.js
 const isWsl = () => {
 	if (process.platform !== "linux") return false;
 	if (os.release().toLowerCase().includes("microsoft")) {
@@ -52,14 +52,14 @@ const isWsl = () => {
 		return true;
 	}
 	try {
-		return fs.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isInsideContainer() : false;
-	} catch {
-		return false;
-	}
+		if (fs.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft")) return !isInsideContainer();
+	} catch {}
+	if (fs.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop") || fs.existsSync("/run/WSL")) return !isInsideContainer();
+	return false;
 };
 var is_wsl_default = process.env.__IS_WSL_TEST__ ? isWsl : isWsl();
 //#endregion
-//#region ../../../node_modules/.pnpm/powershell-utils@0.1.0/node_modules/powershell-utils/index.js
+//#region ../../node_modules/.pnpm/powershell-utils@0.1.0/node_modules/powershell-utils/index.js
 const execFile$2 = promisify(childProcess.execFile);
 const powerShellPath$1 = () => `${process.env.SYSTEMROOT || process.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;
 const executePowerShell = async (command, options = {}) => {
@@ -80,7 +80,7 @@ executePowerShell.argumentsPrefix = [
 executePowerShell.encodeCommand = (command) => Buffer.from(command, "utf16le").toString("base64");
 executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;
 //#endregion
-//#region ../../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js
+//#region ../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js
 function parseMountPointFromConfig(content) {
 	for (const line of content.split("\n")) {
 		if (/^\s*#/.test(line)) continue;
@@ -90,7 +90,7 @@ function parseMountPointFromConfig(content) {
 	}
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
+//#region ../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js
 const execFile$1 = promisify(childProcess.execFile);
 const wslDrivesMountPoint = (() => {
 	const defaultMountPoint = "/mnt/";
@@ -143,7 +143,7 @@ const convertWslPathToWindows = async (path) => {
 	}
 };
 //#endregion
-//#region ../../../node_modules/.pnpm/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js
+//#region ../../node_modules/.pnpm/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js
 function defineLazyProperty(object, propertyName, valueGetter) {
 	const define = (value) => Object.defineProperty(object, propertyName, {
 		value,
@@ -165,7 +165,7 @@ function defineLazyProperty(object, propertyName, valueGetter) {
 	return object;
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/default-browser-id@5.0.1/node_modules/default-browser-id/index.js
+//#region ../../node_modules/.pnpm/default-browser-id@5.0.1/node_modules/default-browser-id/index.js
 const execFileAsync$3 = promisify(execFile);
 async function defaultBrowserId() {
 	if (process.platform !== "darwin") throw new Error("macOS only");
@@ -179,7 +179,7 @@ async function defaultBrowserId() {
 	return browserId;
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/run-applescript@7.1.0/node_modules/run-applescript/index.js
+//#region ../../node_modules/.pnpm/run-applescript@7.1.0/node_modules/run-applescript/index.js
 const execFileAsync$2 = promisify(execFile);
 async function runAppleScript(script, { humanReadableOutput = true, signal } = {}) {
 	if (process.platform !== "darwin") throw new Error("macOS only");
@@ -194,12 +194,12 @@ async function runAppleScript(script, { humanReadableOutput = true, signal } = {
 	return stdout.trim();
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/bundle-name@4.1.0/node_modules/bundle-name/index.js
+//#region ../../node_modules/.pnpm/bundle-name@4.1.0/node_modules/bundle-name/index.js
 async function bundleName(bundleId) {
 	return runAppleScript(`tell application "Finder" to set app_path to application file id "${bundleId}" as string\ntell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`);
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/default-browser@5.4.0/node_modules/default-browser/windows.js
+//#region ../../node_modules/.pnpm/default-browser@5.5.0/node_modules/default-browser/windows.js
 const execFileAsync$1 = promisify(execFile);
 const windowsBrowserProgIds = {
 	MSEdgeHTM: {
@@ -279,12 +279,17 @@ async function defaultBrowser$1(_execFileAsync = execFileAsync$1) {
 	const match = /ProgId\s*REG_SZ\s*(?<id>\S+)/.exec(stdout);
 	if (!match) throw new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);
 	const { id } = match.groups;
-	const browser = windowsBrowserProgIds[id];
-	if (!browser) throw new UnknownBrowserError(`Unknown browser ID: ${id}`);
-	return browser;
+	const dotIndex = id.lastIndexOf(".");
+	const hyphenIndex = id.lastIndexOf("-");
+	const baseIdByDot = dotIndex === -1 ? void 0 : id.slice(0, dotIndex);
+	const baseIdByHyphen = hyphenIndex === -1 ? void 0 : id.slice(0, hyphenIndex);
+	return windowsBrowserProgIds[id] ?? windowsBrowserProgIds[baseIdByDot] ?? windowsBrowserProgIds[baseIdByHyphen] ?? {
+		name: id,
+		id
+	};
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/default-browser@5.4.0/node_modules/default-browser/index.js
+//#region ../../node_modules/.pnpm/default-browser@5.5.0/node_modules/default-browser/index.js
 const execFileAsync = promisify(execFile);
 const titleize = (string) => string.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
 async function defaultBrowser() {
@@ -311,10 +316,10 @@ async function defaultBrowser() {
 	throw new Error("Only macOS, Linux, and Windows are supported");
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js
+//#region ../../node_modules/.pnpm/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js
 const isInSsh = Boolean(process.env.SSH_CONNECTION || process.env.SSH_CLIENT || process.env.SSH_TTY);
 //#endregion
-//#region ../../../node_modules/.pnpm/open@11.0.0/node_modules/open/index.js
+//#region ../../node_modules/.pnpm/open@11.0.0/node_modules/open/index.js
 const fallbackAttemptSymbol = Symbol("fallbackAttempt");
 const __dirname = import.meta.url ? path.dirname(fileURLToPath(import.meta.url)) : "";
 const localXdgOpenPath = path.join(__dirname, "xdg-open");
@@ -475,7 +480,7 @@ const baseOpen = async (options) => {
 		});
 	});
 };
-const open = (target, options) => {
+const open$1 = (target, options) => {
 	if (typeof target !== "string") throw new TypeError("Expected a `target`");
 	return baseOpen({
 		...options,
@@ -530,4 +535,13 @@ defineLazyProperty(apps, "edge", () => detectPlatformBinary({
 }, { wsl: "/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe" }));
 defineLazyProperty(apps, "safari", () => detectPlatformBinary({ darwin: "Safari" }));
 //#endregion
-export { open as default };
+//#region src/utils/open.ts
+/**
+* Open a URL, file, or other target in its default OS handler
+* (browser for URLs, Finder/Explorer for paths, etc.).
+*/
+async function open(target, options) {
+	await open$1(target, options);
+}
+//#endregion
+export { open as t };

package/dist/recipes/open-helpers.d.mts

@@ -1,17 +1,16 @@
-import { b as RpcFunctionSetupResult, m as RpcFunctionAgentOptions, s as RpcDump, w as Thenable } from "../types-C5OVe4AC.mjs";
+import { b as RpcFunctionSetupResult, m as RpcFunctionAgentOptions, s as RpcDump, w as Thenable } from "../types-4rdUEi2R.mjs";
 import * as v from "valibot";
 
 //#region src/recipes/open-helpers.d.ts
 /**
- * Prebuilt RPC action that opens a file in the user's configured editor
- * via [`launch-editor`](https://www.npmjs.com/package/launch-editor).
+ * Prebuilt RPC action that opens a file in the user's configured editor.
  *
  * Registered name: `devframe:open-in-editor`.
  *
  * ```ts
  * import { openInEditor } from 'devframe/recipes/open-helpers'
  *
- * defineDevtool({
+ * defineDevframe({
  *   id: 'my-tool',
  *   name: 'My Tool',
  *   setup(ctx) {
@@ -19,9 +18,6 @@ import * as v from "valibot";
  *   },
  * })
  * ```
- *
- * Requires `launch-editor` to be installed by the consumer (declared as
- * an optional peer dependency on devframe).
  */
 declare const openInEditor: {
   name: "devframe:open-in-editor";
@@ -39,8 +35,7 @@ declare const openInEditor: {
   __promise?: Thenable<RpcFunctionSetupResult<[string], void>> | undefined;
 };
 /**
- * Prebuilt RPC action that reveals a path in the OS file explorer via
- * [`open`](https://www.npmjs.com/package/open).
+ * Prebuilt RPC action that reveals a path in the OS file explorer.
  *
  * Registered name: `devframe:open-in-finder`.
  *

package/dist/recipes/open-helpers.mjs

@@ -1,16 +1,17 @@
-import { n as defineRpcFunction } from "../define-Bb4zh-Dc.mjs";
+import { n as defineRpcFunction } from "../define-CW9gLnyG.mjs";
+import { t as launchEditor } from "../launch-editor-CX_n_0SS.mjs";
+import { t as open } from "../open-B2ah1IKK.mjs";
 import * as v from "valibot";
 //#region src/recipes/open-helpers.ts
 /**
-* Prebuilt RPC action that opens a file in the user's configured editor
-* via [`launch-editor`](https://www.npmjs.com/package/launch-editor).
+* Prebuilt RPC action that opens a file in the user's configured editor.
 *
 * Registered name: `devframe:open-in-editor`.
 *
 * ```ts
 * import { openInEditor } from 'devframe/recipes/open-helpers'
 *
-* defineDevtool({
+* defineDevframe({
 *   id: 'my-tool',
 *   name: 'My Tool',
 *   setup(ctx) {
@@ -18,9 +19,6 @@ import * as v from "valibot";
 *   },
 * })
 * ```
-*
-* Requires `launch-editor` to be installed by the consumer (declared as
-* an optional peer dependency on devframe).
 */
 const openInEditor = defineRpcFunction({
 	name: "devframe:open-in-editor",
@@ -29,13 +27,11 @@ const openInEditor = defineRpcFunction({
 	args: [v.string()],
 	returns: v.void(),
 	async handler(filename) {
-		const mod = await import("launch-editor");
-		(mod.default ?? mod)(filename);
+		launchEditor(filename);
 	}
 });
 /**
-* Prebuilt RPC action that reveals a path in the OS file explorer via
-* [`open`](https://www.npmjs.com/package/open).
+* Prebuilt RPC action that reveals a path in the OS file explorer.
 *
 * Registered name: `devframe:open-in-finder`.
 *
@@ -52,7 +48,6 @@ const openInFinder = defineRpcFunction({
 	args: [v.string()],
 	returns: v.void(),
 	async handler(path) {
-		const { default: open } = await import("../open-Dede_w9r.mjs");
 		await open(path);
 	}
 });

package/dist/revoke-DIMz1r7-.mjs

@@ -0,0 +1,35 @@
+//#region src/node/auth/revoke.ts
+/**
+* Flip `isTrusted` to false on any live WS clients connected with `token`
+* and broadcast the `auth:revoked` event so they can react.
+*
+* Shared between persisted-auth revocation and remote-dock token revocation.
+*/
+async function revokeActiveConnectionsForToken(context, token) {
+	const rpcHost = context.rpc;
+	if (!rpcHost?._rpcGroup) return;
+	const affectedSessionIds = /* @__PURE__ */ new Set();
+	for (const client of rpcHost._rpcGroup.clients) if (client.$meta.clientAuthToken === token) {
+		affectedSessionIds.add(client.$meta.id);
+		client.$meta.isTrusted = false;
+		client.$meta.clientAuthToken = void 0;
+	}
+	if (affectedSessionIds.size === 0) return;
+	await rpcHost.broadcast({
+		method: "devframe:auth:revoked",
+		args: [],
+		filter: (client) => affectedSessionIds.has(client.$meta.id)
+	});
+}
+/**
+* Revoke an auth token: remove from storage and notify all connected clients
+* using this token that they are no longer trusted.
+*/
+async function revokeAuthToken(context, storage, token) {
+	storage.mutate((state) => {
+		delete state.trusted[token];
+	});
+	await revokeActiveConnectionsForToken(context, token);
+}
+//#endregion
+export { revokeAuthToken as n, revokeActiveConnectionsForToken as t };

package/dist/rpc/index.d.mts

@@ -1,3 +1,3 @@
-import { _ as RpcCacheManager, a as structuredCloneDeserialize, c as structuredCloneStringify, d as createClientFromDump, f as dumpFunctions, g as RpcFunctionsCollectorBase, h as defineRpcFunction, i as strictJsonStringify, l as getRpcHandler, m as createDefineWrapperWithContext, n as validateDefinitions, o as structuredCloneParse, p as getDefinitionsWithDumps, r as STRUCTURED_CLONE_PREFIX, s as structuredCloneSerialize, t as validateDefinition, u as getRpcResolvedSetupResult, v as RpcCacheOptions } from "../index-CuLRIMto.mjs";
-import { C as RpcReturnSchema, S as RpcFunctionsCollector, _ as RpcFunctionDefinitionAnyWithContext, a as RpcDefinitionsFilter, b as RpcFunctionSetupResult, c as RpcDumpClientOptions, d as RpcDumpGetter, f as RpcDumpRecord, g as RpcFunctionDefinitionAny, h as RpcFunctionDefinition, i as RpcArgsSchema, l as RpcDumpCollectionOptions, m as RpcFunctionAgentOptions, n as BirpcReturn, o as RpcDefinitionsToFunctions, p as RpcDumpStore, r as EntriesToObject, s as RpcDump, t as BirpcFn, u as RpcDumpDefinition, v as RpcFunctionDefinitionBase, w as Thenable, x as RpcFunctionType, y as RpcFunctionDefinitionToFunction } from "../types-C5OVe4AC.mjs";
-export { BirpcFn, BirpcReturn, EntriesToObject, RpcArgsSchema, RpcCacheManager, RpcCacheOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcDump, RpcDumpClientOptions, RpcDumpCollectionOptions, RpcDumpDefinition, RpcDumpGetter, RpcDumpRecord, RpcDumpStore, RpcFunctionAgentOptions, RpcFunctionDefinition, RpcFunctionDefinitionAny, RpcFunctionDefinitionAnyWithContext, RpcFunctionDefinitionBase, RpcFunctionDefinitionToFunction, RpcFunctionSetupResult, RpcFunctionType, RpcFunctionsCollector, RpcFunctionsCollectorBase, RpcReturnSchema, STRUCTURED_CLONE_PREFIX, Thenable, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, structuredCloneDeserialize, structuredCloneParse, structuredCloneSerialize, structuredCloneStringify, validateDefinition, validateDefinitions };
+import { a as getRpcHandler, c as dumpFunctions, d as defineRpcFunction, f as RpcFunctionsCollectorBase, i as strictJsonStringify, l as getDefinitionsWithDumps, m as RpcCacheOptions, n as validateDefinitions, o as getRpcResolvedSetupResult, p as RpcCacheManager, r as STRUCTURED_CLONE_PREFIX, s as createClientFromDump, t as validateDefinition, u as createDefineWrapperWithContext } from "../index-DB2Ie0Or.mjs";
+import { C as RpcReturnSchema, S as RpcFunctionsCollector, _ as RpcFunctionDefinitionAnyWithContext, a as RpcDefinitionsFilter, b as RpcFunctionSetupResult, c as RpcDumpClientOptions, d as RpcDumpGetter, f as RpcDumpRecord, g as RpcFunctionDefinitionAny, h as RpcFunctionDefinition, i as RpcArgsSchema, l as RpcDumpCollectionOptions, m as RpcFunctionAgentOptions, n as BirpcReturn, o as RpcDefinitionsToFunctions, p as RpcDumpStore, r as EntriesToObject, s as RpcDump, t as BirpcFn, u as RpcDumpDefinition, v as RpcFunctionDefinitionBase, w as Thenable, x as RpcFunctionType, y as RpcFunctionDefinitionToFunction } from "../types-4rdUEi2R.mjs";
+export { BirpcFn, BirpcReturn, EntriesToObject, RpcArgsSchema, RpcCacheManager, RpcCacheOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcDump, RpcDumpClientOptions, RpcDumpCollectionOptions, RpcDumpDefinition, RpcDumpGetter, RpcDumpRecord, RpcDumpStore, RpcFunctionAgentOptions, RpcFunctionDefinition, RpcFunctionDefinitionAny, RpcFunctionDefinitionAnyWithContext, RpcFunctionDefinitionBase, RpcFunctionDefinitionToFunction, RpcFunctionSetupResult, RpcFunctionType, RpcFunctionsCollector, RpcFunctionsCollectorBase, RpcReturnSchema, STRUCTURED_CLONE_PREFIX, Thenable, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions };

package/dist/rpc/index.mjs

@@ -1,4 +1,4 @@
-import { a as validateDefinitions, c as getRpcResolvedSetupResult, i as validateDefinition, l as RpcCacheManager, n as dumpFunctions, o as RpcFunctionsCollectorBase, r as getDefinitionsWithDumps, s as getRpcHandler, t as createClientFromDump } from "../rpc-INbWfHoX.mjs";
-import { a as structuredCloneSerialize, i as structuredCloneParse, n as strictJsonStringify, o as structuredCloneStringify, r as structuredCloneDeserialize, t as STRUCTURED_CLONE_PREFIX } from "../serialization-DwKi05Pn.mjs";
-import { n as defineRpcFunction, t as createDefineWrapperWithContext } from "../define-Bb4zh-Dc.mjs";
-export { RpcCacheManager, RpcFunctionsCollectorBase, STRUCTURED_CLONE_PREFIX, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, structuredCloneDeserialize, structuredCloneParse, structuredCloneSerialize, structuredCloneStringify, validateDefinition, validateDefinitions };
+import { a as validateDefinitions, c as getRpcResolvedSetupResult, i as validateDefinition, l as RpcCacheManager, n as dumpFunctions, o as RpcFunctionsCollectorBase, r as getDefinitionsWithDumps, s as getRpcHandler, t as createClientFromDump } from "../rpc-DAzoVCR0.mjs";
+import { n as strictJsonStringify, t as STRUCTURED_CLONE_PREFIX } from "../serialization-CwO31axa.mjs";
+import { n as defineRpcFunction, t as createDefineWrapperWithContext } from "../define-CW9gLnyG.mjs";
+export { RpcCacheManager, RpcFunctionsCollectorBase, STRUCTURED_CLONE_PREFIX, createClientFromDump, createDefineWrapperWithContext, defineRpcFunction, dumpFunctions, getDefinitionsWithDumps, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions };

package/dist/rpc/transports/ws-client.d.mts

@@ -1,2 +1,2 @@
-import { n as createWsRpcChannel, t as WsRpcChannelOptions } from "../../ws-client-CjPuPFbA.mjs";
+import { n as createWsRpcChannel, t as WsRpcChannelOptions } from "../../ws-client-Bavoya6-.mjs";
 export { WsRpcChannelOptions, createWsRpcChannel };

package/dist/rpc/transports/ws-client.mjs

@@ -1,4 +1,5 @@
-import { i as structuredCloneParse, n as strictJsonStringify, o as structuredCloneStringify } from "../../serialization-DwKi05Pn.mjs";
+import { n as strictJsonStringify } from "../../serialization-CwO31axa.mjs";
+import { i as structuredCloneStringify, n as structuredCloneParse } from "../../structured-clone-CD2l4fI3.mjs";
 //#region src/rpc/transports/ws-client.ts
 function NOOP() {}
 const EMPTY_DEFS = /* @__PURE__ */ new Map();

package/dist/rpc/transports/ws-server.d.mts

@@ -1,2 +1,2 @@
-import { n as WsRpcTransportOptions, r as attachWsRpcTransport, t as DevToolsNodeRpcSessionMeta } from "../../ws-server-C7LnhOHi.mjs";
+import { n as WsRpcTransportOptions, r as attachWsRpcTransport, t as DevToolsNodeRpcSessionMeta } from "../../ws-server-DjvlwLuM.mjs";
 export { DevToolsNodeRpcSessionMeta, WsRpcTransportOptions, attachWsRpcTransport };

package/dist/rpc/transports/ws-server.mjs

@@ -1,4 +1,5 @@
-import { i as structuredCloneParse, n as strictJsonStringify, o as structuredCloneStringify } from "../../serialization-DwKi05Pn.mjs";
+import { n as strictJsonStringify } from "../../serialization-CwO31axa.mjs";
+import { i as structuredCloneStringify, n as structuredCloneParse } from "../../structured-clone-CD2l4fI3.mjs";
 import { createServer } from "node:https";
 import { WebSocketServer } from "ws";
 //#region src/rpc/transports/ws-server.ts

package/dist/{rpc-INbWfHoX.mjs → rpc-DAzoVCR0.mjs}

@@ -1,5 +1,5 @@
-import { c as logger } from "./serialization-DwKi05Pn.mjs";
-import { hash } from "ohash";
+import { t as hash } from "./hash-CIBte1yS.mjs";
+import { i as logger } from "./serialization-CwO31axa.mjs";
 //#region src/rpc/cache.ts
 /**
 * @experimental API is expected to change.
@@ -56,6 +56,7 @@ async function getRpcHandler(definition, context) {
 //#endregion
 //#region src/rpc/collector.ts
 var RpcFunctionsCollectorBase = class {
+	context;
 	definitions = /* @__PURE__ */ new Map();
 	functions;
 	_onChanged = [];
@@ -128,7 +129,7 @@ function assertAgentJsonSerializable(fn) {
 	if (fn.agent && fn.jsonSerializable !== true) throw logger.DF0019({ name: fn.name }).throw();
 }
 //#endregion
-//#region ../../../node_modules/.pnpm/yocto-queue@1.2.2/node_modules/yocto-queue/index.js
+//#region ../../node_modules/.pnpm/yocto-queue@1.2.2/node_modules/yocto-queue/index.js
 var Node = class {
 	value;
 	next;
@@ -186,7 +187,7 @@ var Queue = class {
 	}
 };
 //#endregion
-//#region ../../../node_modules/.pnpm/p-limit@7.3.0/node_modules/p-limit/index.js
+//#region ../../node_modules/.pnpm/p-limit@7.3.0/node_modules/p-limit/index.js
 function pLimit(concurrency) {
 	let rejectOnClear = false;
 	if (typeof concurrency === "object") ({concurrency, rejectOnClear = false} = concurrency);

package/dist/{serialization-DwKi05Pn.mjs → serialization-CwO31axa.mjs}

@@ -1,5 +1,4 @@
 import { consoleReporter, createLogger, defineDiagnostics, plainFormatter } from "logs-sdk";
-import { deserialize as structuredCloneDeserialize, parse as structuredCloneParse, serialize as structuredCloneSerialize, stringify as structuredCloneStringify } from "structured-clone-es";
 //#region src/rpc/diagnostics.ts
 const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
@@ -109,4 +108,4 @@ function formatPath(parent, key) {
 	return key;
 }
 //#endregion
-export { structuredCloneSerialize as a, logger as c, structuredCloneParse as i, strictJsonStringify as n, structuredCloneStringify as o, structuredCloneDeserialize as r, diagnostics as s, STRUCTURED_CLONE_PREFIX as t };
+export { logger as i, strictJsonStringify as n, diagnostics as r, STRUCTURED_CLONE_PREFIX as t };