devframe 0.10.0 → 0.10.1

package/dist/{_shared-Dy1UBMUN.d.mts → _shared-D1ebaX_J.d.mts}

@@ -1,5 +1,5 @@
-import { B as DevframeDefinition, Q as McpSetting, V as DevframeDeploymentKind, Wt as DevframeAgentHost, X as McpAuthorization, t as ConnectionMeta } from "./context-CTAxz9ec.mjs";
-import { t as AgenticMcpModule } from "./agentic-D4QQQUjE.mjs";
+import { B as DevframeDefinition, Q as McpSetting, V as DevframeDeploymentKind, Wt as DevframeAgentHost, X as McpAuthorization, t as ConnectionMeta } from "./context--tVkJw3W.mjs";
+import { t as AgenticMcpModule } from "./agentic-DLqHMOyN.mjs";
 //#region src/adapters/_shared.d.ts
 /**
  * Resolve the mount base path for a devframe's SPA. Hosted adapters

package/dist/adapters/build.d.mts

@@ -1,4 +1,4 @@
-import { B as DevframeDefinition, K as DevframeSnapshotRpcEntry, o as DevframeNodeContext } from "../context-CTAxz9ec.mjs";
+import { B as DevframeDefinition, K as DevframeSnapshotRpcEntry, o as DevframeNodeContext } from "../context--tVkJw3W.mjs";
 import { o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
 //#region src/adapters/build.d.ts
 export interface CreateBuildOptions {

package/dist/adapters/build.mjs

@@ -2,7 +2,7 @@ import { s as colors } from "../nostics-D0PvLZsn.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME } from "../constants.mjs";
 import { n as collectStaticRpcDump, t as writeStaticRpcDump } from "../write-DoXJzGUH.mjs";
 import { t as diagnostics } from "../diagnostics-Cx4_VjlG.mjs";
-import { t as createHostContext } from "../context-C141q8H4.mjs";
+import { t as createHostContext } from "../context-BqpgC5tq.mjs";
 import { t as resolveStaticAssetsSource } from "../remote-assets-B9MeWmW6.mjs";
 import { t as createH3DevframeHost } from "../host-h3-BROI6SQ4.mjs";
 import fs from "node:fs/promises";

package/dist/adapters/cac.d.mts

@@ -1,4 +1,4 @@
-import { B as DevframeDefinition, Mt as InferCliFlags, Nt as defineCliFlags, Pt as parseCliFlags, Q as McpSetting, jt as CliFlagsSchema } from "../context-CTAxz9ec.mjs";
+import { B as DevframeDefinition, Mt as InferCliFlags, Nt as defineCliFlags, Pt as parseCliFlags, Q as McpSetting, jt as CliFlagsSchema } from "../context--tVkJw3W.mjs";
 import { CAC } from "cac";
 import { H3 } from "h3";
 //#region src/adapters/cac.d.ts

package/dist/adapters/cac.mjs

@@ -1,7 +1,7 @@
 import { s as colors } from "../nostics-D0PvLZsn.mjs";
 import { i as resolveDevServerPort, s as importAgenticMcp } from "../_shared-B2PZsp-J.mjs";
 import { createBuild } from "./build.mjs";
-import { t as createDevServer } from "../dev-DM1mIlgi.mjs";
+import { t as createDevServer } from "../dev-BTbLJekh.mjs";
 import process from "node:process";
 import cac$1 from "cac";
 //#region src/adapters/flags.ts

package/dist/adapters/dev.d.mts

@@ -1,9 +1,9 @@
-import { At as DevframeAuthHandler, B as DevframeDefinition, J as DevframeSseOptions, Q as McpSetting, Y as DevframeWsOptions, s as DevframeNodeRpcSession } from "../context-CTAxz9ec.mjs";
+import { At as DevframeAuthHandler, B as DevframeDefinition, J as DevframeSseOptions, Q as McpSetting, Y as DevframeWsOptions, s as DevframeNodeRpcSession } from "../context--tVkJw3W.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "../session-r6PDixP6.mjs";
 import { o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
 import { n as WsOriginRegistry } from "../ws-server-y2R76aSW.mjs";
-import { c as StartedServer } from "../instance-shell-DOZSxst6.mjs";
-import { c as resolveMcpConnectionMeta, o as resolveDevServerPort, t as ResolveDevServerPortOptions } from "../_shared-Dy1UBMUN.mjs";
+import { c as StartedServer } from "../instance-shell-CXnpSuK7.mjs";
+import { c as resolveMcpConnectionMeta, o as resolveDevServerPort, t as ResolveDevServerPortOptions } from "../_shared-D1ebaX_J.mjs";
 import { H3 } from "h3";
 //#region src/adapters/dev.d.ts
 export interface CreateDevServerOptions {

package/dist/adapters/dev.mjs

@@ -1,3 +1,3 @@
 import { i as resolveDevServerPort, o as resolveMcpConnectionMeta } from "../_shared-B2PZsp-J.mjs";
-import { t as createDevServer } from "../dev-DM1mIlgi.mjs";
+import { t as createDevServer } from "../dev-BTbLJekh.mjs";
 export { createDevServer, resolveDevServerPort, resolveMcpConnectionMeta };

package/dist/adapters/embedded.d.mts

@@ -1,4 +1,4 @@
-import { B as DevframeDefinition, o as DevframeNodeContext } from "../context-CTAxz9ec.mjs";
+import { B as DevframeDefinition, o as DevframeNodeContext } from "../context--tVkJw3W.mjs";
 //#region src/adapters/embedded.d.ts
 export interface CreateEmbeddedOptions {
   /** Target context the devframe is registered into. Required. */

package/dist/adapters/initiate.d.mts

@@ -1,8 +1,8 @@
-import { At as DevframeAuthHandler, B as DevframeDefinition, Dt as DevframeStorageScope, J as DevframeSseOptions, Q as McpSetting, Y as DevframeWsOptions, o as DevframeNodeContext, s as DevframeNodeRpcSession, t as ConnectionMeta } from "../context-CTAxz9ec.mjs";
+import { At as DevframeAuthHandler, B as DevframeDefinition, Dt as DevframeStorageScope, J as DevframeSseOptions, Q as McpSetting, Y as DevframeWsOptions, o as DevframeNodeContext, s as DevframeNodeRpcSession, t as ConnectionMeta } from "../context--tVkJw3W.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "../session-r6PDixP6.mjs";
 import { o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
 import { n as WsOriginRegistry } from "../ws-server-y2R76aSW.mjs";
-import { c as StartedServer, f as DevframeInstanceRecord } from "../instance-shell-DOZSxst6.mjs";
+import { c as StartedServer, f as DevframeInstanceRecord } from "../instance-shell-CXnpSuK7.mjs";
 import { H3 } from "h3";
 import { Buffer } from "node:buffer";
 import { IncomingMessage, Server, ServerResponse } from "node:http";

package/dist/adapters/initiate.mjs

@@ -1,2 +1,2 @@
-import { n as getInstanceInternals, r as initDevframe } from "../dev-DM1mIlgi.mjs";
+import { n as getInstanceInternals, r as initDevframe } from "../dev-BTbLJekh.mjs";
 export { getInstanceInternals, initDevframe };

package/dist/adapters/mcp.d.mts

@@ -1,4 +1,4 @@
-import { F as CreateMcpServerOptions, I as McpConnectionInfo, L as McpFetchHandler, P as CreateMcpFetchHandlerOptions, R as McpServerHandle } from "../context-CTAxz9ec.mjs";
-import { n as MountMcpHttpOptions, r as MountedMcpHttp } from "../agentic-D4QQQUjE.mjs";
+import { F as CreateMcpServerOptions, I as McpConnectionInfo, L as McpFetchHandler, P as CreateMcpFetchHandlerOptions, R as McpServerHandle } from "../context--tVkJw3W.mjs";
+import { n as MountMcpHttpOptions, r as MountedMcpHttp } from "../agentic-DLqHMOyN.mjs";
 import { createMcpFetchHandler, createMcpServer, mountMcpHttp } from "@devframes/agentic/mcp";
 export { type CreateMcpFetchHandlerOptions, type CreateMcpServerOptions, type McpConnectionInfo, type McpFetchHandler, type McpServerHandle, type MountMcpHttpOptions, type MountedMcpHttp, createMcpFetchHandler, createMcpServer, mountMcpHttp };

package/dist/{agentic-D4QQQUjE.d.mts → agentic-DLqHMOyN.d.mts}

@@ -1,4 +1,4 @@
-import { B as DevframeDefinition, F as CreateMcpServerOptions, L as McpFetchHandler, P as CreateMcpFetchHandlerOptions, R as McpServerHandle, o as DevframeNodeContext } from "./context-CTAxz9ec.mjs";
+import { B as DevframeDefinition, F as CreateMcpServerOptions, L as McpFetchHandler, P as CreateMcpFetchHandlerOptions, R as McpServerHandle, o as DevframeNodeContext } from "./context--tVkJw3W.mjs";
 import { H3 } from "h3";
 //#region src/node/agentic.d.ts
 /**

package/dist/browser-agent-Pu-FLk6I.mjs

@@ -0,0 +1,26 @@
+//#region src/client/browser-agent.ts
+const REGISTRY_KEY = Symbol.for("devframe:browser-agent-registry");
+const { tools, listeners } = globalThis[REGISTRY_KEY] ??= {
+	tools: /* @__PURE__ */ new Map(),
+	listeners: /* @__PURE__ */ new Set()
+};
+function notifyChanged() {
+	for (const listener of listeners) listener();
+}
+function registerBrowserAgentTool(tool) {
+	const key = Symbol(tool.id);
+	tools.set(key, tool);
+	notifyChanged();
+	return () => {
+		if (tools.delete(key)) notifyChanged();
+	};
+}
+function listBrowserAgentTools() {
+	return [...tools.values()];
+}
+function onBrowserAgentToolsChanged(listener) {
+	listeners.add(listener);
+	return () => listeners.delete(listener);
+}
+//#endregion
+export { onBrowserAgentToolsChanged as n, registerBrowserAgentTool as r, listBrowserAgentTools as t };

package/dist/browser-agent-rpc-BXhoSh1z.mjs

@@ -0,0 +1,70 @@
+import { nanoid } from "./utils/nanoid.mjs";
+import { n as onBrowserAgentToolsChanged, t as listBrowserAgentTools } from "./browser-agent-Pu-FLk6I.mjs";
+//#region src/client/client-id.ts
+const CLIENT_ID_STORAGE_KEY = "devframe:client-id";
+let memoryClientId;
+/**
+* This browser tab's stable client id: one nanoid per tab, persisted in
+* `sessionStorage` so it survives page reloads and RPC reconnects. The node
+* side uses it to tell connected tabs apart across reconnects (see #394).
+*
+* Tab duplication copies `sessionStorage`, so two tabs can briefly share an id
+* until per-tab disambiguation lands with the wider tab-metadata work.
+*/
+function resolveClientId(win = globalThis.window) {
+	try {
+		const storage = win?.sessionStorage;
+		if (storage) {
+			let id = storage.getItem(CLIENT_ID_STORAGE_KEY);
+			if (!id) {
+				id = nanoid();
+				storage.setItem(CLIENT_ID_STORAGE_KEY, id);
+			}
+			return id;
+		}
+	} catch {}
+	memoryClientId ??= nanoid();
+	return memoryClientId;
+}
+//#endregion
+//#region src/client/browser-agent-rpc.ts
+/** Mirror this document's browser-agent registry over its existing RPC connection. */
+function setupBrowserAgentRpcBridge(rpc) {
+	rpc.client.register({
+		name: "devframe:agent:invoke-client-tool",
+		type: "action",
+		jsonSerializable: true,
+		handler: async (id, args) => {
+			const tool = listBrowserAgentTools().find((tool) => tool.id === id);
+			if (!tool) throw new Error(`[devframe/agent] browser tool "${id}" not found`);
+			return await tool.invoke(args);
+		}
+	});
+	let queued = false;
+	let disposed = false;
+	let lastSyncedCount = 0;
+	const sync = () => {
+		if (queued || disposed) return;
+		queued = true;
+		queueMicrotask(async () => {
+			queued = false;
+			if (disposed) return;
+			const manifests = listBrowserAgentTools().map(({ invoke: _, ...manifest }) => manifest);
+			if (manifests.length === 0 && lastSyncedCount === 0) return;
+			lastSyncedCount = manifests.length;
+			await rpc.callOptional("devframe:agent:sync-client-tools", resolveClientId(), manifests).catch(() => {});
+		});
+	};
+	const stopTools = onBrowserAgentToolsChanged(sync);
+	const stopConnection = rpc.events.on("connection:status", (status) => {
+		if (status === "connected") sync();
+	});
+	sync();
+	return () => {
+		disposed = true;
+		stopTools();
+		stopConnection();
+	};
+}
+//#endregion
+export { setupBrowserAgentRpcBridge };

package/dist/client/index.d.mts

@@ -1,7 +1,7 @@
 import { i as BirpcReturn, r as BirpcOptions } from "../index-Bia1vKjL.mjs";
 import { f as RpcCacheManager, p as RpcCacheOptions } from "../index-DuEm0sDH.mjs";
 import { h as RpcFunctionDefinition, w as RpcFunctionsCollector } from "../types-BmDbfHCx.mjs";
-import { Ct as DevframeRpcClientFunctions, Kt as EventEmitter, at as DevframeServiceScopeOf, b as StreamSink, bt as ScopedSharedStates, d as RpcSharedStateHost, k as SharedState, lt as DevframeServicesState, pt as DevframeSettings, rt as DevframeServiceMeta, t as ConnectionMeta, u as RpcSharedStateGetOptions, vt as ScopedRpcFn, wt as DevframeRpcServerFunctions, xt as SettingsForNamespace, y as StreamReader, yt as ScopedServerFunctions } from "../context-CTAxz9ec.mjs";
+import { Ct as DevframeRpcClientFunctions, Kt as EventEmitter, at as DevframeServiceScopeOf, b as StreamSink, bt as ScopedSharedStates, d as RpcSharedStateHost, k as SharedState, lt as DevframeServicesState, pt as DevframeSettings, rt as DevframeServiceMeta, t as ConnectionMeta, u as RpcSharedStateGetOptions, vt as ScopedRpcFn, wt as DevframeRpcServerFunctions, xt as SettingsForNamespace, y as StreamReader, yt as ScopedServerFunctions } from "../context--tVkJw3W.mjs";
 import { t as SseRpcChannelOptions } from "../sse-client-DNdscfu_.mjs";
 import { t as WsRpcChannelOptions } from "../ws-client-6Mrz6eC4.mjs";
 //#region src/client/connection.d.ts

package/dist/client/index.mjs

@@ -1,4 +1,4 @@
-import { n as defineDiagnostics, r as DEVFRAME_EVENTS, t as createBirpc } from "../dist-Bw3EbMj4.mjs";
+import { a as defineDiagnostics, i as createBirpc, n as argsToJsonSchema, o as DEVFRAME_EVENTS, r as resolveAgentSafety, t as toolInputToRpcArgs } from "../tool-input-BAQXvvqL.mjs";
 import { t as hash } from "../hash-DdPnc4k3.mjs";
 import { createEventEmitter } from "../utils/events.mjs";
 import { withBase, withProtocol } from "../utils/url.mjs";
@@ -1669,83 +1669,6 @@ function createScopedClientContext(rpc, namespace) {
 	};
 }
 //#endregion
-//#region src/agent/to-json-schema.ts
-const FALLBACK_OBJECT_SCHEMA = Object.freeze({
-	type: "object",
-	additionalProperties: true
-});
-/**
-* Convert a Standard Schema to JSON Schema for the agent/MCP surface.
-*
-* Devframe stays validator-neutral, so conversion uses the schema's own
-* [Standard JSON Schema](https://standardschema.dev/) converter
-* (`~standard.jsonSchema`) when the validator provides one; zod 4 does,
-* for example. Validators without a native converter (e.g. valibot) degrade
-* to a permissive object schema rather than pulling in a converter library.
-*/
-function safeToJsonSchema(schema) {
-	const standard = schema["~standard"];
-	if (standard.jsonSchema) try {
-		return standard.jsonSchema.input({ target: "draft-2020-12" });
-	} catch {
-		return FALLBACK_OBJECT_SCHEMA;
-	}
-	return FALLBACK_OBJECT_SCHEMA;
-}
-/**
-* JSON Schema for an RPC function's positional args on the agent/MCP
-* surface. Each positional arg is advertised under `arg0` / `arg1` / …,
-* matching how the agent bridge coerces the incoming object payload back
-* into positional arguments.
-*
-* Returns `{ type: 'object', properties: {} }` when there are no args.
-* @internal
-*/
-function argsToJsonSchema(args) {
-	if (!args || args.length === 0) return {
-		type: "object",
-		properties: {}
-	};
-	const properties = {};
-	const required = [];
-	for (let i = 0; i < args.length; i++) {
-		const key = `arg${i}`;
-		properties[key] = safeToJsonSchema(args[i]);
-		required.push(key);
-	}
-	return {
-		type: "object",
-		properties,
-		required,
-		additionalProperties: false
-	};
-}
-//#endregion
-//#region src/tool-input.ts
-/**
-* Convert an object-shaped tool input into positional arguments.
-*
-* Tool schemas expose positional parameters as `arg0`, `arg1`, and so on.
-* Arrays pass through for callers that already provide positional arguments.
-*/
-function collectPositionalArgs(input, argumentCount) {
-	if (Array.isArray(input)) return input;
-	if (input === void 0 || input === null) return [];
-	if (typeof input !== "object") return void 0;
-	const record = input;
-	if (argumentCount != null) return Array.from({ length: argumentCount }, (_, index) => record[`arg${index}`]);
-	if ("arg0" in record) {
-		const positional = [];
-		while (`arg${positional.length}` in record) positional.push(record[`arg${positional.length}`]);
-		return positional;
-	}
-	return Object.keys(record).length === 0 ? [] : void 0;
-}
-/** Convert tool input for an RPC, preserving an untyped payload as arg 0. */
-function toolInputToRpcArgs(input, argumentCount) {
-	return collectPositionalArgs(input, argumentCount) ?? [input];
-}
-//#endregion
 //#region src/client/webmcp.ts
 /**
 * The page's WebMCP model context, when the browser (or a polyfill)
@@ -1786,14 +1709,15 @@ function registerWebMcpTools(clientRpc, options = {}) {
 			return;
 		}
 		const controller = new AbortController();
+		const safety = resolveAgentSafety(def.type, agent);
 		const result = modelContext.registerTool({
 			name,
 			description: agent.description,
 			inputSchema: argsToJsonSchema(def.args),
 			annotations: {
 				title: agent.title ?? def.name,
-				readOnlyHint: resolveSafety(def, agent) === "read",
-				destructiveHint: resolveSafety(def, agent) === "destructive"
+				readOnlyHint: safety === "read",
+				destructiveHint: safety === "destructive"
 			},
 			execute: (args) => executeRpcTool(def, clientRpc.context, args)
 		}, { signal: controller.signal });
@@ -1823,11 +1747,6 @@ function registerWebMcpTools(clientRpc, options = {}) {
 		registered.clear();
 	};
 }
-function resolveSafety(def, agent) {
-	if (agent.safety) return agent.safety;
-	const type = def.type ?? "query";
-	return type === "static" || type === "query" ? "read" : "action";
-}
 async function executeRpcTool(def, context, args) {
 	try {
 		const positional = toolInputToRpcArgs(args, def.args?.length);
@@ -1902,6 +1821,8 @@ async function getDevframeRpcClient(options = {}) {
 	const context = { rpc: void 0 };
 	const clientRpc = new RpcFunctionsCollectorBase(context);
 	const disposeWebMcp = options.webmcp === false ? void 0 : registerWebMcpTools(clientRpc);
+	let disposeBrowserAgentBridge;
+	let closed = false;
 	async function fetchJsonFromBases(path) {
 		const candidates = [resolvedBaseURL, ...bases.filter((base) => base !== resolvedBaseURL)].filter((x) => x != null);
 		const errors = [];
@@ -1956,7 +1877,9 @@ async function getDevframeRpcClient(options = {}) {
 	}
 	/** Release authentication and transport resources even if another disposer fails. */
 	function closeRpcClient() {
+		closed = true;
 		try {
+			disposeBrowserAgentBridge?.();
 			disposeWebMcp?.();
 		} finally {
 			try {
@@ -2067,6 +1990,9 @@ async function getDevframeRpcClient(options = {}) {
 	}, () => {
 		bootstrapAuthSettled = true;
 	});
+	if (connectionMeta.mcp) import("../browser-agent-rpc-BXhoSh1z.mjs").then(({ setupBrowserAgentRpcBridge }) => {
+		if (!closed) disposeBrowserAgentBridge = setupBrowserAgentRpcBridge(rpc);
+	}).catch(() => {});
 	if (authChannel) authChannel.onmessage = (event) => {
 		if (event.data?.type === "auth-update" && event.data.authToken) rpc.requestTrustWithToken(event.data.authToken);
 	};

package/dist/{context-CTAxz9ec.d.mts → context--tVkJw3W.d.mts}

@@ -500,11 +500,23 @@ interface DevframeHost {
  */
 type DevframeStorageScope = 'workspace' | 'project' | 'global';
 //#endregion
+//#region src/client/browser-agent.d.ts
+interface BrowserAgentToolManifest {
+  id: string;
+  title?: string;
+  description: string;
+  safety: 'read' | 'action' | 'destructive';
+  tags?: readonly string[];
+  inputSchema?: unknown;
+}
+//#endregion
 //#region src/types/rpc-augments.d.ts
 /**
  * To be extended
  */
 interface DevframeRpcClientFunctions {
+  /** Invoke a tool registered in this browser document. @internal */
+  'devframe:agent:invoke-client-tool': (id: string, args: Record<string, unknown>) => Promise<unknown>;
   /**
    * Server→client notification that this connection's auth token has been
    * revoked. The client drops to untrusted on receipt. Broadcast by
@@ -556,6 +568,8 @@ interface DevframeRpcClientFunctions {
  * To be extended
  */
 interface DevframeRpcServerFunctions {
+  /** Replace this connection's browser-agent tool manifest, tagged with the calling tab's stable client id. @internal */
+  'devframe:agent:sync-client-tools': (clientId: string, tools: BrowserAgentToolManifest[]) => Promise<void>;
   /**
    * Authenticate a connection with a previously-issued bearer token; resolves
    * whether the connection is now trusted. The interactive handler is provided
@@ -1400,6 +1414,11 @@ interface DevframeDockDefaults {
    * host wiring; a URL or bare specifier passes through untouched.
    */
   clientScript?: {
+    /**
+     * Initialize after RPC trust without waiting for dock activation.
+     * @default false
+     */
+    eager?: boolean;
     /** An absolute filesystem path, a served URL, or a bare npm specifier. */
     importFrom: string;
     /**

package/dist/{context-C141q8H4.mjs → context-BqpgC5tq.mjs}

@@ -5,7 +5,7 @@ import { defineRpcFunction } from "./index.mjs";
 import { t as DEVFRAME_EVENTS } from "./events-BV4Dj59a.mjs";
 import { DEVFRAME_SERVICES_STATE_KEY } from "./constants.mjs";
 import { t as diagnostics$1 } from "./diagnostics-Cx4_VjlG.mjs";
-import { r as createEventEmitter, t as DevframeAgentHost } from "./host-agent-ZSKgzMVu.mjs";
+import { r as createEventEmitter, t as DevframeAgentHost } from "./host-agent-mIbQ6Qi5.mjs";
 import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-B9MeWmW6.mjs";
 import { a as satisfiesVersionRange, n as expandResolveFrom, r as importServicePackage, t as deepMergeOptionSets } from "./services-install-D5YUwFXW.mjs";
 import { t as createStorage } from "./storage-CHD1IkqU.mjs";
@@ -32,6 +32,46 @@ var DevframeDiagnosticsHost = class {
 	}
 };
 //#endregion
+//#region src/node/client-agent.ts
+const states = /* @__PURE__ */ new WeakMap();
+function getState(context) {
+	let state = states.get(context);
+	if (state) return state;
+	const sessions = /* @__PURE__ */ new Map();
+	state = {
+		sessions,
+		notifyChanged: context.agent.registerToolProvider(() => {
+			const tools = /* @__PURE__ */ new Map();
+			for (const { session, tools: manifests } of sessions.values()) for (const manifest of manifests) {
+				if (tools.has(manifest.id)) continue;
+				tools.set(manifest.id, {
+					...manifest,
+					handler: (args) => session.rpc.$callRaw({
+						method: "devframe:agent:invoke-client-tool",
+						args: [manifest.id, args]
+					})
+				});
+			}
+			return [...tools.values()];
+		}).notifyChanged
+	};
+	states.set(context, state);
+	return state;
+}
+function syncClientAgentTools(context, session, clientId, tools) {
+	const state = getState(context);
+	state.sessions.set(session.meta, {
+		session,
+		clientId,
+		tools
+	});
+	state.notifyChanged();
+}
+function removeClientAgentSession(context, meta) {
+	const state = states.get(context);
+	if (state?.sessions.delete(meta)) state.notifyChanged();
+}
+//#endregion
 //#region src/node/rpc-shared-state.ts
 const debug$2 = createDebug("devframe:rpc:state:changed");
 const debugSubscribe = createDebug("devframe:rpc:state:subscribe");
@@ -764,6 +804,7 @@ var RpcFunctionsHostImpl = class extends RpcFunctionsCollectorBase {
 	*/
 	_emitSessionDisconnected(meta) {
 		this.streaming._onSessionDisconnected(meta);
+		removeClientAgentSession(this.context, meta);
 	}
 	async invokeLocal(method, ...args) {
 		if (!this.definitions.has(method)) throw diagnostics$1.DF0006({ name: String(method) });
@@ -1124,6 +1165,15 @@ const BUILTIN_AGENT_RPC = [
 				return await ctx.agent.read(id);
 			} };
 		}
+	}),
+	defineRpcFunction({
+		name: "devframe:agent:sync-client-tools",
+		type: "action",
+		jsonSerializable: true,
+		setup: (context) => ({ handler(clientId, tools) {
+			const session = context.rpc.getCurrentRpcSession();
+			if (session) syncClientAgentTools(context, session, clientId, tools);
+		} })
 	})
 ];
 //#endregion

package/dist/{context-B4BKPuaa.d.mts → context-D3qBv0IX.d.mts}

@@ -1,4 +1,4 @@
-import { k as SharedState, o as DevframeNodeContext } from "./context-CTAxz9ec.mjs";
+import { k as SharedState, o as DevframeNodeContext } from "./context--tVkJw3W.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{dev-DM1mIlgi.mjs → dev-BTbLJekh.mjs}

@@ -1,6 +1,6 @@
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
 import { t as diagnostics } from "./diagnostics-Cx4_VjlG.mjs";
-import { t as createHostContext } from "./context-C141q8H4.mjs";
+import { t as createHostContext } from "./context-BqpgC5tq.mjs";
 import { t as resolveStaticAssetsSource } from "./remote-assets-B9MeWmW6.mjs";
 import { a as resolveMcpConfig, c as joinURL, d as withoutLeadingSlash, i as resolveDevServerPort, l as withBase, n as normalizeBasePath, r as resolveBasePath, s as importAgenticMcp, t as loadAutoMcpAdapter } from "./_shared-B2PZsp-J.mjs";
 import { t as createH3DevframeHost } from "./host-h3-BROI6SQ4.mjs";

package/dist/{host-agent-ZSKgzMVu.mjs → host-agent-mIbQ6Qi5.mjs}

@@ -39,6 +39,17 @@ function createEventEmitter() {
 	};
 }
 //#endregion
+//#region src/agent/safety.ts
+/**
+* An agent tool's safety classification: the explicit `agent.safety`, else
+* inferred from the function `type` (`static`/`query` are read-only, the rest
+* mutate). Shared by every agent surface (MCP host, WebMCP, in-page bridge).
+*/
+function resolveAgentSafety(type, agent) {
+	if (agent.safety) return agent.safety;
+	return type === "static" || type === "query" || type == null ? "read" : "action";
+}
+//#endregion
 //#region src/tool-input.ts
 /**
 * Convert an object-shaped tool input into positional arguments.
@@ -243,8 +254,7 @@ var DevframeAgentHost = class {
 			const agent = def.agent;
 			if (!agent) continue;
 			if (!agent.description || typeof agent.description !== "string") throw diagnostics.DF0014({ name });
-			const type = def.type ?? "query";
-			const safety = agent.safety ?? inferSafety(type);
+			const safety = resolveAgentSafety(def.type, agent);
 			out.push({
 				id: name,
 				kind: "rpc",
@@ -263,9 +273,5 @@ var DevframeAgentHost = class {
 		if (def?.agent) return def;
 	}
 };
-function inferSafety(type) {
-	if (type === "static" || type === "query") return "read";
-	return "action";
-}
 //#endregion
 export { toolInputToCommandArgs as n, createEventEmitter as r, DevframeAgentHost as t };

package/dist/in-page-channel/index.d.mts

@@ -1,5 +1,5 @@
-import { D as InferArgsType, E as Thenable, O as InferReturnType, T as RpcReturnSchema, n as RpcArgsSchema } from "../types-BmDbfHCx.mjs";
-import { Kt as EventEmitter, k as SharedState } from "../context-CTAxz9ec.mjs";
+import { D as InferArgsType, E as Thenable, O as InferReturnType, T as RpcReturnSchema, m as RpcFunctionAgentOptions, n as RpcArgsSchema } from "../types-BmDbfHCx.mjs";
+import { Kt as EventEmitter, k as SharedState } from "../context--tVkJw3W.mjs";
 //#region src/in-page-channel/types.d.ts
 /**
  * The shared contract of one in-page channel, declared once (usually in a
@@ -48,11 +48,15 @@ type ProtocolHandler<F> = F extends ((...args: any[]) => any) ? (...args: FnArgs
  * fan-out), `action` performs, `query` requests data (the default).
  */
 type InPageFunctionType = 'action' | 'event' | 'query';
-interface InPageFunctionDefinitionBase<NAME extends string> {
+interface InPageDefinitionBase<NAME extends string> {
   name: NAME;
   jsonSerializable?: boolean;
 }
-interface InPageEventFunctionDefinition<NAME extends string, HANDLER> extends InPageFunctionDefinitionBase<NAME> {
+interface InPageFunctionDefinitionBase<NAME extends string> extends InPageDefinitionBase<NAME> {
+  /** Expose this function through DevFrame's browser-to-node agent bridge. */
+  agent?: RpcFunctionAgentOptions;
+}
+interface InPageEventFunctionDefinition<NAME extends string, HANDLER> extends InPageDefinitionBase<NAME> {
   type: 'event';
   handler?: HANDLER;
 }
@@ -79,7 +83,8 @@ type InPageFunctionDefinitionHandler<ARGS extends any[], RETURN, AS extends RpcA
  * An in-page channel function definition: the `defineRpcFunction` authoring
  * shape (`name`, `type`, Standard-Schema `args`/`returns`,
  * `jsonSerializable`, `handler`) narrowed to the browser: there is no
- * `dump`/`snapshot`/`cacheable`/`agent`. When `jsonSerializable` is `true`,
+ * `dump`/`snapshot`/`cacheable`. An optional `agent` exposes the function to
+ * DevFrame's browser-to-node agent bridge. When `jsonSerializable` is `true`,
  * payloads are strictly validated at the receiving endpoint and misshapen
  * values reject the call with a descriptive `InPageChannelError` instead of
  * a cryptic `DataCloneError` in the port. Event definitions may omit their
@@ -91,14 +96,18 @@ type InPageFunctionDefinition<NAME extends string, TYPE extends InPageFunctionTy
  *
  * @internal
  */
-interface InPageFunctionOptionBase {
+interface InPageDefinitionOptionBase {
   /** Optional Standard Schema array validating the arguments. */
   args?: RpcArgsSchema;
   /** Optional Standard Schema validating the resolved return value. */
   returns?: RpcReturnSchema;
   jsonSerializable?: boolean;
 }
-interface InPageEventFunctionOption<F> extends InPageFunctionOptionBase {
+interface InPageFunctionOptionBase extends InPageDefinitionOptionBase {
+  /** Expose this function through DevFrame's browser-to-node agent bridge. */
+  agent?: RpcFunctionAgentOptions;
+}
+interface InPageEventFunctionOption<F> extends InPageDefinitionOptionBase {
   type?: 'event';
   handler?: ProtocolHandler<F>;
 }

package/dist/in-page-channel/index.mjs

@@ -1,14 +1,21 @@
-import { n as defineDiagnostics, r as DEVFRAME_EVENTS, t as createBirpc } from "../dist-Bw3EbMj4.mjs";
+import { a as defineDiagnostics, i as createBirpc, n as argsToJsonSchema, o as DEVFRAME_EVENTS, r as resolveAgentSafety, t as toolInputToRpcArgs } from "../tool-input-BAQXvvqL.mjs";
 import { createEventEmitter } from "../utils/events.mjs";
 import { t as createSharedState } from "../shared-state-eQVYHNqA.mjs";
 import { nanoid } from "../utils/nanoid.mjs";
+import { r as registerBrowserAgentTool } from "../browser-agent-Pu-FLk6I.mjs";
 //#region src/in-page-channel/diagnostics.ts
 const diagnostics = /* #__PURE__ */ defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
-	codes: { DF0077: {
-		why: (p) => `In-page channel function "${p.name}" is not registered on this endpoint.`,
-		fix: "Declare the function in this endpoint's `functions` option."
-	} }
+	codes: {
+		DF0077: {
+			why: (p) => `In-page channel function "${p.name}" is not registered on this endpoint.`,
+			fix: "Declare the function in this endpoint's `functions` option."
+		},
+		DF0080: {
+			why: (p) => `In-page channel function "${p.name}" has \`agent\` set but \`jsonSerializable\` is \`false\`; MCP requires JSON-serializable data.`,
+			fix: "Remove `jsonSerializable: false`, or remove `agent` to keep it channel-only."
+		}
+	}
 });
 //#endregion
 //#region src/in-page-channel/protocol.ts
@@ -172,17 +179,16 @@ function channelMethod(type, name) {
 	return `devframe:in-page:${type === "event" ? "event" : "function"}:${name}`;
 }
 const FUNCTION_METHOD_PREFIX = channelMethod("function", "");
-/**
-* An endpoint's local function table, resolved by name when the remote side
-* calls in. Each handler is wrapped with the receive pipeline: deserialize
-* hook, `jsonSerializable` enforcement, Standard-Schema argument validation,
-* then serialize hook + `jsonSerializable` enforcement on the result.
-*/
 function createLocalFunctionRegistry(codec) {
 	const definitions = /* @__PURE__ */ new Map();
 	const listeners = /* @__PURE__ */ new Map();
 	return {
+		definitions,
 		register(definition) {
+			if ("agent" in definition && definition.agent) {
+				if (definition.jsonSerializable === false) throw diagnostics.DF0080({ name: definition.name });
+				definition.jsonSerializable = true;
+			}
 			definitions.set(channelMethod(definition.type, definition.name), definition);
 		},
 		registerInternal(method, handler) {
@@ -236,6 +242,27 @@ function resolveLocalHandler(name, registries) {
 		throw diagnostics.DF0077({ name: name.slice(FUNCTION_METHOD_PREFIX.length) });
 	};
 }
+/** Register an endpoint's local agent functions for browser-backed transports. */
+function registerInPageAgentTools(channelName, registry) {
+	const disposals = [];
+	for (const definition of registry.definitions.values()) {
+		if (definition.type === "event" || !("agent" in definition) || !definition.agent) continue;
+		const agent = definition.agent;
+		disposals.push(registerBrowserAgentTool({
+			id: `${channelName}:${definition.name}`,
+			title: agent.title ?? definition.name,
+			description: agent.description,
+			safety: resolveAgentSafety(definition.type, agent),
+			tags: agent.tags,
+			inputSchema: argsToJsonSchema(definition.args),
+			invoke: (args) => {
+				const positional = toolInputToRpcArgs(args, definition.args?.length);
+				return registry.resolve(channelMethod(definition.type, definition.name))(...positional);
+			}
+		}));
+	}
+	return () => disposals.forEach((dispose) => dispose());
+}
 function wrapPostError(error) {
 	if (error instanceof DOMException && error.name === "DataCloneError") return new InPageChannelError("not-cloneable", `a payload could not be structured-cloned across the in-page channel: ${error.message}. Strip non-cloneable values (functions, DOM nodes, framework reactivity proxies) before sending: declare the function \`jsonSerializable: true\` for a precise error, or provide a \`serialize\` hook.`, { cause: error });
 	return error;
@@ -512,6 +539,7 @@ function createPageScriptChannel(options) {
 		name: eventName,
 		type: "event"
 	});
+	const disposeAgentTools = registerInPageAgentTools(name, registry);
 	const stateHost = createPageScriptStateHost(function* () {
 		for (const peer of peers.values()) yield {
 			subscribedStates: peer.subscribedStates,
@@ -637,6 +665,7 @@ function createPageScriptChannel(options) {
 		close: () => {
 			if (closed) return;
 			closed = true;
+			disposeAgentTools();
 			win?.removeEventListener("message", onWindowMessage);
 			for (const id of [...peers.keys()]) removePeer(id, {
 				bye: true,
@@ -687,6 +716,7 @@ function connectPanelChannel(options) {
 		name: eventName,
 		type: "event"
 	});
+	const disposeAgentTools = registerInPageAgentTools(name, registry);
 	let status = "connecting";
 	let attached;
 	let pageScriptInfo;
@@ -870,6 +900,7 @@ function connectPanelChannel(options) {
 		close: () => {
 			if (status === "closed") return;
 			setStatus("closed");
+			disposeAgentTools();
 			stopTimers();
 			win?.removeEventListener("message", onWindowMessage);
 			attached?.dispose({

package/dist/{index-CcPSKbxb.d.mts → index-D-2IdY1I.d.mts}

@@ -1,5 +1,5 @@
-import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-CTAxz9ec.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-B4BKPuaa.mjs";
+import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context--tVkJw3W.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-D3qBv0IX.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { C as RpcFunctionType, T as RpcReturnSchema, h as RpcFunctionDefinition, m as RpcFunctionAgentOptions, n as RpcArgsSchema } from "./types-BmDbfHCx.mjs";
-import { $ as DevframeServiceDefinition, B as DevframeDefinition, Bt as AgentTool, Ct as DevframeRpcClientFunctions, Dt as DevframeStorageScope, Et as DevframeHost, F as CreateMcpServerOptions, Ft as AgentHandle, G as DevframeSetupInfo, Gt as DevframeAgentHostEvents, H as DevframeDockDefaults, Ht as AgentToolProvider, I as McpConnectionInfo, It as AgentManifest, J as DevframeSseOptions, Jt as EventsMap, K as DevframeSnapshotRpcEntry, Kt as EventEmitter, L as McpFetchHandler, Lt as AgentResource, Ot as DevframeDiagnosticsHost, P as CreateMcpFetchHandlerOptions, Q as McpSetting, R as McpServerHandle, Rt as AgentResourceContent, St as DevframeViewHost, Tt as DevframeRpcSharedStates, U as DevframeDuplicationStrategy, Ut as AgentToolProviderHandle, V as DevframeDeploymentKind, Vt as AgentToolInput, W as DevframeRpcOptions, Wt as DevframeAgentHost, X as McpAuthorization, Y as DevframeWsOptions, Z as McpRouteOptions, _t as ScopedClientFunctions, a as DevframeConnectionConfigsRegistry, at as DevframeServiceScopeOf, bt as ScopedSharedStates, c as RpcBroadcastOptions, ct as DevframeServicesScopeRegistry, d as RpcSharedStateHost, dt as DevframeScopedNodeRpc, et as DevframeServiceDescriptor, f as RpcStreamingChannel, ft as DevframeScopedStreamingHost, gt as ScopedBroadcastOptions, ht as DevframeSettingsStore, i as DevframeCapabilities, it as DevframeServiceOf, kt as DevframeDiagnosticsLogger, l as RpcFunctionsHost, lt as DevframeServicesState, m as RpcStreamingHost, mt as DevframeSettingsRegistry, n as ConnectionMetaSse, nt as DevframeServiceInput, o as DevframeNodeContext, ot as DevframeServicesHost, p as RpcStreamingChannelOptions, pt as DevframeSettings, q as DevframeSnapshotRpcInputs, qt as EventUnsubscribe, r as ConnectionMetaWebsocket, rt as DevframeServiceMeta, s as DevframeNodeRpcSession, st as DevframeServicesRegistry, t as ConnectionMeta, tt as DevframeServiceId, u as RpcSharedStateGetOptions, ut as DevframeScopedNodeContext, vt as ScopedRpcFn, wt as DevframeRpcServerFunctions, xt as SettingsForNamespace, yt as ScopedServerFunctions, z as DevframeCliOptions, zt as AgentResourceInput } from "./context-CTAxz9ec.mjs";
+import { $ as DevframeServiceDefinition, B as DevframeDefinition, Bt as AgentTool, Ct as DevframeRpcClientFunctions, Dt as DevframeStorageScope, Et as DevframeHost, F as CreateMcpServerOptions, Ft as AgentHandle, G as DevframeSetupInfo, Gt as DevframeAgentHostEvents, H as DevframeDockDefaults, Ht as AgentToolProvider, I as McpConnectionInfo, It as AgentManifest, J as DevframeSseOptions, Jt as EventsMap, K as DevframeSnapshotRpcEntry, Kt as EventEmitter, L as McpFetchHandler, Lt as AgentResource, Ot as DevframeDiagnosticsHost, P as CreateMcpFetchHandlerOptions, Q as McpSetting, R as McpServerHandle, Rt as AgentResourceContent, St as DevframeViewHost, Tt as DevframeRpcSharedStates, U as DevframeDuplicationStrategy, Ut as AgentToolProviderHandle, V as DevframeDeploymentKind, Vt as AgentToolInput, W as DevframeRpcOptions, Wt as DevframeAgentHost, X as McpAuthorization, Y as DevframeWsOptions, Z as McpRouteOptions, _t as ScopedClientFunctions, a as DevframeConnectionConfigsRegistry, at as DevframeServiceScopeOf, bt as ScopedSharedStates, c as RpcBroadcastOptions, ct as DevframeServicesScopeRegistry, d as RpcSharedStateHost, dt as DevframeScopedNodeRpc, et as DevframeServiceDescriptor, f as RpcStreamingChannel, ft as DevframeScopedStreamingHost, gt as ScopedBroadcastOptions, ht as DevframeSettingsStore, i as DevframeCapabilities, it as DevframeServiceOf, kt as DevframeDiagnosticsLogger, l as RpcFunctionsHost, lt as DevframeServicesState, m as RpcStreamingHost, mt as DevframeSettingsRegistry, n as ConnectionMetaSse, nt as DevframeServiceInput, o as DevframeNodeContext, ot as DevframeServicesHost, p as RpcStreamingChannelOptions, pt as DevframeSettings, q as DevframeSnapshotRpcInputs, qt as EventUnsubscribe, r as ConnectionMetaWebsocket, rt as DevframeServiceMeta, s as DevframeNodeRpcSession, st as DevframeServicesRegistry, t as ConnectionMeta, tt as DevframeServiceId, u as RpcSharedStateGetOptions, ut as DevframeScopedNodeContext, vt as ScopedRpcFn, wt as DevframeRpcServerFunctions, xt as SettingsForNamespace, yt as ScopedServerFunctions, z as DevframeCliOptions, zt as AgentResourceInput } from "./context--tVkJw3W.mjs";
 import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
 import { a as RemoteAssetsStore, i as RemoteAssetsProviderCustom, n as RemoteAssetsErrorMessage, o as StaticAssetsSource, r as RemoteAssetsProvider, t as RemoteAssets } from "./remote-assets-eBvSKZMS.mjs";
 import { i as DevframeDefineDiagnosticsOptions } from "./nostics-DWvukRwa.mjs";

package/dist/{instance-shell-DOZSxst6.d.mts → instance-shell-CXnpSuK7.d.mts}

@@ -1,8 +1,8 @@
 import { n as BirpcGroup } from "./index-Bia1vKjL.mjs";
-import { At as DevframeAuthHandler, Ct as DevframeRpcClientFunctions, J as DevframeSseOptions, Y as DevframeWsOptions, o as DevframeNodeContext, s as DevframeNodeRpcSession, t as ConnectionMeta, wt as DevframeRpcServerFunctions } from "./context-CTAxz9ec.mjs";
+import { At as DevframeAuthHandler, Ct as DevframeRpcClientFunctions, J as DevframeSseOptions, Y as DevframeWsOptions, o as DevframeNodeContext, s as DevframeNodeRpcSession, t as ConnectionMeta, wt as DevframeRpcServerFunctions } from "./context--tVkJw3W.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
 import { n as WsOriginRegistry } from "./ws-server-y2R76aSW.mjs";
-import "./index-CcPSKbxb.mjs";
+import "./index-D-2IdY1I.mjs";
 import { H3 } from "h3";
 import { NodeAdapter } from "crossws/adapters/node";
 import { Buffer } from "node:buffer";

package/dist/internal/index.d.mts

@@ -1,11 +1,11 @@
 import { t as StandardSchemaV1 } from "../index-CeEtxDmK.mjs";
 import { g as RpcFunctionDefinitionAny } from "../types-BmDbfHCx.mjs";
-import { Bt as AgentTool, Et as DevframeHost, Ft as AgentHandle, Gt as DevframeAgentHostEvents, Ht as AgentToolProvider, It as AgentManifest, Kt as EventEmitter, Lt as AgentResource, Rt as AgentResourceContent, Ut as AgentToolProviderHandle, Vt as AgentToolInput, Wt as DevframeAgentHost$1, o as DevframeNodeContext, zt as AgentResourceInput } from "../context-CTAxz9ec.mjs";
+import { Bt as AgentTool, Et as DevframeHost, Ft as AgentHandle, Gt as DevframeAgentHostEvents, Ht as AgentToolProvider, It as AgentManifest, Kt as EventEmitter, Lt as AgentResource, Rt as AgentResourceContent, Ut as AgentToolProviderHandle, Vt as AgentToolInput, Wt as DevframeAgentHost$1, o as DevframeNodeContext, zt as AgentResourceInput } from "../context--tVkJw3W.mjs";
 import { a as RemoteAssetsStore } from "../remote-assets-eBvSKZMS.mjs";
-import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, g as registerDevframeInstance, h as probeDevframeOrigin, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-DOZSxst6.mjs";
-import { i as importAgenticMcp, n as MountMcpHttpOptions, r as MountedMcpHttp, t as AgenticMcpModule } from "../agentic-D4QQQUjE.mjs";
-import { a as resolveBasePath, i as normalizeBasePath, n as ResolvedMcpConfig, r as loadAutoMcpAdapter, s as resolveMcpConfig } from "../_shared-Dy1UBMUN.mjs";
-import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-rLrwFEcw.mjs";
+import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, g as registerDevframeInstance, h as probeDevframeOrigin, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-CXnpSuK7.mjs";
+import { i as importAgenticMcp, n as MountMcpHttpOptions, r as MountedMcpHttp, t as AgenticMcpModule } from "../agentic-DLqHMOyN.mjs";
+import { a as resolveBasePath, i as normalizeBasePath, n as ResolvedMcpConfig, r as loadAutoMcpAdapter, s as resolveMcpConfig } from "../_shared-D1ebaX_J.mjs";
+import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-B6n9MQsc.mjs";
 //#region src/agent/stringify.d.ts
 /**
  * JSON-coercing serializer for MCP text payloads.

package/dist/internal/index.mjs

@@ -1,7 +1,7 @@
 import { t as Diagnostic } from "../nostics-D0PvLZsn.mjs";
 import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-B1W3zH3L.mjs";
 import { t as diagnostics } from "../diagnostics-Cx4_VjlG.mjs";
-import { n as toolInputToCommandArgs, t as DevframeAgentHost } from "../host-agent-ZSKgzMVu.mjs";
+import { n as toolInputToCommandArgs, t as DevframeAgentHost } from "../host-agent-mIbQ6Qi5.mjs";
 import { a as resolveMcpConfig, n as normalizeBasePath, r as resolveBasePath, s as importAgenticMcp, t as loadAutoMcpAdapter } from "../_shared-B2PZsp-J.mjs";
 import { t as importRuntimeModule } from "../import-runtime-module-BzlEQ9PI.mjs";
 import { t as createH3DevframeHost } from "../host-h3-BROI6SQ4.mjs";

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { At as DevframeAuthHandler } from "../context-CTAxz9ec.mjs";
-import { a as getTempAuthCodeInfo, c as revokeActiveConnectionsForToken, i as getTempAuthCode, l as revokeAuthToken, n as describeUA, o as refreshTempAuthCode, r as exchangeTempAuthCode, s as verifyAuthToken, t as buildOtpAuthUrl } from "../index-CcPSKbxb.mjs";
+import { At as DevframeAuthHandler } from "../context--tVkJw3W.mjs";
+import { a as getTempAuthCodeInfo, c as revokeActiveConnectionsForToken, i as getTempAuthCode, l as revokeAuthToken, n as describeUA, o as refreshTempAuthCode, r as exchangeTempAuthCode, s as verifyAuthToken, t as buildOtpAuthUrl } from "../index-D-2IdY1I.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, describeUA, exchangeTempAuthCode, getTempAuthCode, getTempAuthCodeInfo, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,3 +1,3 @@
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-B4BKPuaa.mjs";
-import { a as resolveBasePath, i as normalizeBasePath } from "../_shared-Dy1UBMUN.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-D3qBv0IX.mjs";
+import { a as resolveBasePath, i as normalizeBasePath } from "../_shared-D1ebaX_J.mjs";
 export { type DevframeInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,5 +1,5 @@
 import { g as RpcFunctionDefinitionAny } from "../types-BmDbfHCx.mjs";
-import { Et as DevframeHost, k as SharedState, l as RpcFunctionsHost, o as DevframeNodeContext } from "../context-CTAxz9ec.mjs";
+import { Et as DevframeHost, k as SharedState, l as RpcFunctionsHost, o as DevframeNodeContext } from "../context--tVkJw3W.mjs";
 //#region src/node/context.d.ts
 export interface CreateHostContextOptions {
   cwd: string;

package/dist/node/index.mjs

@@ -1,3 +1,3 @@
-import { t as createHostContext } from "../context-C141q8H4.mjs";
+import { t as createHostContext } from "../context-BqpgC5tq.mjs";
 import { t as createStorage } from "../storage-CHD1IkqU.mjs";
 export { createHostContext, createStorage };

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { At as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "../context-CTAxz9ec.mjs";
-import "../index-CcPSKbxb.mjs";
+import { At as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "../context--tVkJw3W.mjs";
+import "../index-D-2IdY1I.mjs";
 import { ColorFn } from "../utils/colors.mjs";
 //#region src/recipes/interactive-auth.d.ts
 export interface CreateInteractiveAuthOptions {

package/dist/rpc/transports/ws-bun.d.mts

@@ -1,5 +1,5 @@
 import { n as WsOriginRegistry } from "../../ws-server-y2R76aSW.mjs";
-import { t as ContextRpcServer } from "../../rpc-core-rLrwFEcw.mjs";
+import { t as ContextRpcServer } from "../../rpc-core-B6n9MQsc.mjs";
 //#region src/rpc/transports/ws-bun.d.ts
 export interface AttachBunWsTransportOptions {
   /** Same contract as `WsRpcTransportOptions.allowedOrigins`. */

package/dist/rpc/transports/ws-deno.d.mts

@@ -1,5 +1,5 @@
 import { n as WsOriginRegistry } from "../../ws-server-y2R76aSW.mjs";
-import { t as ContextRpcServer } from "../../rpc-core-rLrwFEcw.mjs";
+import { t as ContextRpcServer } from "../../rpc-core-B6n9MQsc.mjs";
 //#region src/rpc/transports/ws-deno.d.ts
 export interface AttachDenoWsTransportOptions {
   /** Same contract as `WsRpcTransportOptions.allowedOrigins`. */

package/dist/{rpc-core-rLrwFEcw.d.mts → rpc-core-B6n9MQsc.d.mts}

@@ -1,8 +1,8 @@
 import { n as BirpcGroup, o as EventOptions } from "./index-Bia1vKjL.mjs";
-import { At as DevframeAuthHandler, Ct as DevframeRpcClientFunctions, o as DevframeNodeContext, s as DevframeNodeRpcSession, wt as DevframeRpcServerFunctions } from "./context-CTAxz9ec.mjs";
+import { At as DevframeAuthHandler, Ct as DevframeRpcClientFunctions, o as DevframeNodeContext, s as DevframeNodeRpcSession, wt as DevframeRpcServerFunctions } from "./context--tVkJw3W.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
 import "./ws-server-y2R76aSW.mjs";
-import "./index-CcPSKbxb.mjs";
+import "./index-D-2IdY1I.mjs";
 //#region src/node/rpc-core.d.ts
 interface CreateContextRpcServerOptions {
   context: DevframeNodeContext;

package/dist/{dist-Bw3EbMj4.mjs → tool-input-BAQXvvqL.mjs}

@@ -302,4 +302,92 @@ function createBirpc($functions, options) {
 	return rpc;
 }
 //#endregion
-export { defineDiagnostics$1 as n, DEVFRAME_EVENTS as r, createBirpc as t };
+//#region src/agent/safety.ts
+/**
+* An agent tool's safety classification: the explicit `agent.safety`, else
+* inferred from the function `type` (`static`/`query` are read-only, the rest
+* mutate). Shared by every agent surface (MCP host, WebMCP, in-page bridge).
+*/
+function resolveAgentSafety(type, agent) {
+	if (agent.safety) return agent.safety;
+	return type === "static" || type === "query" || type == null ? "read" : "action";
+}
+//#endregion
+//#region src/agent/to-json-schema.ts
+const FALLBACK_OBJECT_SCHEMA = Object.freeze({
+	type: "object",
+	additionalProperties: true
+});
+/**
+* Convert a Standard Schema to JSON Schema for the agent/MCP surface.
+*
+* Devframe stays validator-neutral, so conversion uses the schema's own
+* [Standard JSON Schema](https://standardschema.dev/) converter
+* (`~standard.jsonSchema`) when the validator provides one; zod 4 does,
+* for example. Validators without a native converter (e.g. valibot) degrade
+* to a permissive object schema rather than pulling in a converter library.
+*/
+function safeToJsonSchema(schema) {
+	const standard = schema["~standard"];
+	if (standard.jsonSchema) try {
+		return standard.jsonSchema.input({ target: "draft-2020-12" });
+	} catch {
+		return FALLBACK_OBJECT_SCHEMA;
+	}
+	return FALLBACK_OBJECT_SCHEMA;
+}
+/**
+* JSON Schema for an RPC function's positional args on the agent/MCP
+* surface. Each positional arg is advertised under `arg0` / `arg1` / …,
+* matching how the agent bridge coerces the incoming object payload back
+* into positional arguments.
+*
+* Returns `{ type: 'object', properties: {} }` when there are no args.
+* @internal
+*/
+function argsToJsonSchema(args) {
+	if (!args || args.length === 0) return {
+		type: "object",
+		properties: {}
+	};
+	const properties = {};
+	const required = [];
+	for (let i = 0; i < args.length; i++) {
+		const key = `arg${i}`;
+		properties[key] = safeToJsonSchema(args[i]);
+		required.push(key);
+	}
+	return {
+		type: "object",
+		properties,
+		required,
+		additionalProperties: false
+	};
+}
+//#endregion
+//#region src/tool-input.ts
+/**
+* Convert an object-shaped tool input into positional arguments.
+*
+* Tool schemas expose positional parameters as `arg0`, `arg1`, and so on.
+* Arrays pass through for callers that already provide positional arguments.
+*/
+function collectPositionalArgs(input, argumentCount) {
+	if (Array.isArray(input)) return input;
+	if (input === void 0 || input === null) return [];
+	if (typeof input !== "object") return void 0;
+	const record = input;
+	if (argumentCount != null) return Array.from({ length: argumentCount }, (_, index) => record[`arg${index}`]);
+	if ("arg0" in record) {
+		const positional = [];
+		while (`arg${positional.length}` in record) positional.push(record[`arg${positional.length}`]);
+		return positional;
+	}
+	return Object.keys(record).length === 0 ? [] : void 0;
+}
+/** Convert tool input for an RPC, preserving an untyped payload as arg 0. */
+function toolInputToRpcArgs(input, argumentCount) {
+	return collectPositionalArgs(input, argumentCount) ?? [input];
+}
+//#endregion
+export { defineDiagnostics$1 as a, createBirpc as i, argsToJsonSchema as n, DEVFRAME_EVENTS as o, resolveAgentSafety as r, toolInputToRpcArgs as t };

package/dist/types/index.d.mts

@@ -1,5 +1,5 @@
 import { m as RpcFunctionAgentOptions } from "../types-BmDbfHCx.mjs";
-import { $ as DevframeServiceDefinition, B as DevframeDefinition, Bt as AgentTool, Ct as DevframeRpcClientFunctions, Dt as DevframeStorageScope, Et as DevframeHost, F as CreateMcpServerOptions, Ft as AgentHandle, G as DevframeSetupInfo, Gt as DevframeAgentHostEvents, H as DevframeDockDefaults, Ht as AgentToolProvider, I as McpConnectionInfo, It as AgentManifest, J as DevframeSseOptions, Jt as EventsMap, K as DevframeSnapshotRpcEntry, Kt as EventEmitter, L as McpFetchHandler, Lt as AgentResource, Ot as DevframeDiagnosticsHost, P as CreateMcpFetchHandlerOptions, Q as McpSetting, R as McpServerHandle, Rt as AgentResourceContent, St as DevframeViewHost, Tt as DevframeRpcSharedStates, U as DevframeDuplicationStrategy, Ut as AgentToolProviderHandle, V as DevframeDeploymentKind, Vt as AgentToolInput, W as DevframeRpcOptions, Wt as DevframeAgentHost, X as McpAuthorization, Y as DevframeWsOptions, Z as McpRouteOptions, _t as ScopedClientFunctions, a as DevframeConnectionConfigsRegistry, at as DevframeServiceScopeOf, bt as ScopedSharedStates, c as RpcBroadcastOptions, ct as DevframeServicesScopeRegistry, d as RpcSharedStateHost, dt as DevframeScopedNodeRpc, et as DevframeServiceDescriptor, f as RpcStreamingChannel, ft as DevframeScopedStreamingHost, gt as ScopedBroadcastOptions, ht as DevframeSettingsStore, i as DevframeCapabilities, it as DevframeServiceOf, kt as DevframeDiagnosticsLogger, l as RpcFunctionsHost, lt as DevframeServicesState, m as RpcStreamingHost, mt as DevframeSettingsRegistry, n as ConnectionMetaSse, nt as DevframeServiceInput, o as DevframeNodeContext, ot as DevframeServicesHost, p as RpcStreamingChannelOptions, pt as DevframeSettings, q as DevframeSnapshotRpcInputs, qt as EventUnsubscribe, r as ConnectionMetaWebsocket, rt as DevframeServiceMeta, s as DevframeNodeRpcSession, st as DevframeServicesRegistry, t as ConnectionMeta, tt as DevframeServiceId, u as RpcSharedStateGetOptions, ut as DevframeScopedNodeContext, vt as ScopedRpcFn, wt as DevframeRpcServerFunctions, xt as SettingsForNamespace, yt as ScopedServerFunctions, z as DevframeCliOptions, zt as AgentResourceInput } from "../context-CTAxz9ec.mjs";
+import { $ as DevframeServiceDefinition, B as DevframeDefinition, Bt as AgentTool, Ct as DevframeRpcClientFunctions, Dt as DevframeStorageScope, Et as DevframeHost, F as CreateMcpServerOptions, Ft as AgentHandle, G as DevframeSetupInfo, Gt as DevframeAgentHostEvents, H as DevframeDockDefaults, Ht as AgentToolProvider, I as McpConnectionInfo, It as AgentManifest, J as DevframeSseOptions, Jt as EventsMap, K as DevframeSnapshotRpcEntry, Kt as EventEmitter, L as McpFetchHandler, Lt as AgentResource, Ot as DevframeDiagnosticsHost, P as CreateMcpFetchHandlerOptions, Q as McpSetting, R as McpServerHandle, Rt as AgentResourceContent, St as DevframeViewHost, Tt as DevframeRpcSharedStates, U as DevframeDuplicationStrategy, Ut as AgentToolProviderHandle, V as DevframeDeploymentKind, Vt as AgentToolInput, W as DevframeRpcOptions, Wt as DevframeAgentHost, X as McpAuthorization, Y as DevframeWsOptions, Z as McpRouteOptions, _t as ScopedClientFunctions, a as DevframeConnectionConfigsRegistry, at as DevframeServiceScopeOf, bt as ScopedSharedStates, c as RpcBroadcastOptions, ct as DevframeServicesScopeRegistry, d as RpcSharedStateHost, dt as DevframeScopedNodeRpc, et as DevframeServiceDescriptor, f as RpcStreamingChannel, ft as DevframeScopedStreamingHost, gt as ScopedBroadcastOptions, ht as DevframeSettingsStore, i as DevframeCapabilities, it as DevframeServiceOf, kt as DevframeDiagnosticsLogger, l as RpcFunctionsHost, lt as DevframeServicesState, m as RpcStreamingHost, mt as DevframeSettingsRegistry, n as ConnectionMetaSse, nt as DevframeServiceInput, o as DevframeNodeContext, ot as DevframeServicesHost, p as RpcStreamingChannelOptions, pt as DevframeSettings, q as DevframeSnapshotRpcInputs, qt as EventUnsubscribe, r as ConnectionMetaWebsocket, rt as DevframeServiceMeta, s as DevframeNodeRpcSession, st as DevframeServicesRegistry, t as ConnectionMeta, tt as DevframeServiceId, u as RpcSharedStateGetOptions, ut as DevframeScopedNodeContext, vt as ScopedRpcFn, wt as DevframeRpcServerFunctions, xt as SettingsForNamespace, yt as ScopedServerFunctions, z as DevframeCliOptions, zt as AgentResourceInput } from "../context--tVkJw3W.mjs";
 import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "../session-r6PDixP6.mjs";
 import { a as RemoteAssetsStore, i as RemoteAssetsProviderCustom, n as RemoteAssetsErrorMessage, o as StaticAssetsSource, r as RemoteAssetsProvider, t as RemoteAssets } from "../remote-assets-eBvSKZMS.mjs";
 import { i as DevframeDefineDiagnosticsOptions } from "../nostics-DWvukRwa.mjs";

package/dist/utils/events.d.mts

@@ -1,4 +1,4 @@
-import { Jt as EventsMap, Kt as EventEmitter } from "../context-CTAxz9ec.mjs";
+import { Jt as EventsMap, Kt as EventEmitter } from "../context--tVkJw3W.mjs";
 //#region src/utils/events.d.ts
 /**
  * Create event emitter.

package/dist/utils/shared-state.d.mts

@@ -1,2 +1,2 @@
-import { A as SharedStateEvents, D as ImmutableObject, E as ImmutableMap, M as SharedStatePatch, N as createSharedState, O as ImmutableSet, T as ImmutableArray, j as SharedStateOptions, k as SharedState, w as Immutable } from "../context-CTAxz9ec.mjs";
+import { A as SharedStateEvents, D as ImmutableObject, E as ImmutableMap, M as SharedStatePatch, N as createSharedState, O as ImmutableSet, T as ImmutableArray, j as SharedStateOptions, k as SharedState, w as Immutable } from "../context--tVkJw3W.mjs";
 export { Immutable, ImmutableArray, ImmutableMap, ImmutableObject, ImmutableSet, SharedState, SharedStateEvents, SharedStateOptions, SharedStatePatch, createSharedState };

package/dist/utils/streaming-channel.d.mts

@@ -1,2 +1,2 @@
-import { C as createStreamSink, S as createStreamReader, _ as CreateStreamSinkOptions, b as StreamSink, g as CreateStreamReaderOptions, h as BufferedChunk, v as StreamErrorPayload, x as StreamSinkEvents, y as StreamReader } from "../context-CTAxz9ec.mjs";
+import { C as createStreamSink, S as createStreamReader, _ as CreateStreamSinkOptions, b as StreamSink, g as CreateStreamReaderOptions, h as BufferedChunk, v as StreamErrorPayload, x as StreamSinkEvents, y as StreamReader } from "../context--tVkJw3W.mjs";
 export { BufferedChunk, CreateStreamReaderOptions, CreateStreamSinkOptions, StreamErrorPayload, StreamReader, StreamSink, StreamSinkEvents, createStreamReader, createStreamSink };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devframe",
   "type": "module",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Framework for building one portable devtool integration that runs in any viewer.",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",
@@ -77,7 +77,7 @@
     "skills"
   ],
   "peerDependencies": {
-    "@devframes/agentic": "0.10.0",
+    "@devframes/agentic": "0.10.1",
     "cac": "^7.0.0"
   },
   "peerDependenciesMeta": {
@@ -95,7 +95,7 @@
     "pathe": "^2.0.3"
   },
   "devDependencies": {
-    "@devframes/agentic": "0.10.0",
+    "@devframes/agentic": "0.10.1",
     "@standard-schema/spec": "^1.1.0",
     "birpc": "^4.2.0",
     "cac": "^7.0.0",