devframe 0.6.0-beta.2 → 0.6.0-beta.3

package/dist/{storage-l2ezeend.mjs → storage-yrUZaiib.mjs}

@@ -2,6 +2,7 @@ import { t as devframeReporter } from "./diagnostics-reporter-CsIG85Q5.mjs";
 import { defineDiagnostics } from "nostics";
 import fs from "node:fs";
 import { dirname } from "pathe";
+import process$1 from "node:process";
 import { destr } from "destr";
 //#region src/node/diagnostics.ts
 const diagnostics = defineDiagnostics({
@@ -46,6 +47,14 @@ const diagnostics = defineDiagnostics({
 		DF0034: {
 			why: (p) => `Scoped RPC registration for namespace "${p.namespace}" received an already-namespaced function name "${p.name}".`,
 			fix: "A scoped context auto-namespaces ids. Pass a bare name without a \":\" separator (e.g. `register({ name: \"get-cwd\" })`), or use the unscoped `ctx.base.rpc.register` for a fully-qualified name."
+		},
+		DF0035: {
+			why: (p) => `Failed to persist storage file: ${p.filepath}`,
+			fix: "Check that the storage directory is writable and has free space."
+		},
+		DF0036: {
+			why: (p) => `RPC call to "${p.name}" was rejected: the caller is not authorized.`,
+			fix: "Complete the auth handshake (or connect with a static/pre-shared token) before calling a trusted method. Untrusted callers may only call `anonymous:`-prefixed methods — see `isAnonymousRpcMethod`."
 		}
 	}
 });
@@ -89,7 +98,7 @@ function createEventEmitter() {
 	};
 }
 //#endregion
-//#region ../../node_modules/.pnpm/immer@11.1.8/node_modules/immer/dist/immer.mjs
+//#region ../../node_modules/.pnpm/immer@11.1.11/node_modules/immer/dist/immer.mjs
 var NOTHING = Symbol.for("immer-nothing");
 var DRAFTABLE = Symbol.for("immer-draftable");
 var DRAFT_STATE = Symbol.for("immer-state");
@@ -439,6 +448,21 @@ function createProxyProxy(base, parent) {
 var objectTraps = {
 	get(state, prop) {
 		if (prop === DRAFT_STATE) return state;
+		if (prop === "constructor" || prop === "__proto__") {
+			const value2 = latest(state)[prop];
+			return new Proxy(value2 || {}, {
+				get: (target, key) => {
+					if (key === "__proto__" || key === "prototype") return Object.freeze(/* @__PURE__ */ Object.create(null));
+					return Reflect.get(target, key);
+				},
+				set: () => {
+					return true;
+				},
+				apply: (target, thisArg, args) => {
+					return Reflect.apply(target, thisArg, args);
+				}
+			});
+		}
 		let arrayPlugin = state.scope_.arrayMethodsPlugin_;
 		const isArrayWithStringProp = state.type_ === 1 && typeof prop === "string";
 		if (isArrayWithStringProp) {
@@ -458,12 +482,14 @@ var objectTraps = {
 		return value;
 	},
 	has(state, prop) {
+		if (prop === "constructor" || prop === "__proto__" || prop === "prototype") return false;
 		return prop in latest(state);
 	},
 	ownKeys(state) {
 		return Reflect.ownKeys(latest(state));
 	},
 	set(state, prop, value) {
+		if (prop === "constructor" || prop === "__proto__" || prop === "prototype") return true;
 		const desc = getDescriptorFromProto(latest(state), prop);
 		if (desc?.set) {
 			desc.set.call(state.draft_, value);
@@ -481,7 +507,7 @@ var objectTraps = {
 			prepareCopy(state);
 			markChanged(state);
 		}
-		if (state.copy_[prop] === value && (value !== void 0 || prop in state.copy_) || Number.isNaN(value) && Number.isNaN(state.copy_[prop])) return true;
+		if (state.copy_[prop] === value && (value !== void 0 || has(state.copy_, prop, state.type_)) || Number.isNaN(value) && Number.isNaN(state.copy_[prop])) return true;
 		state.copy_[prop] = value;
 		state.assigned_.set(prop, true);
 		handleCrossReference(state, prop, value);
@@ -992,6 +1018,19 @@ function nanoid(size = 21) {
 }
 //#endregion
 //#region src/utils/shared-state.ts
+/**
+* Upper bound on retained syncIds. Loop echoes arrive near-immediately, so a
+* generous window preserves de-dup while capping memory on long-lived,
+* frequently-mutated states (e.g. a 1s terminal poll).
+*/
+const MAX_SYNC_IDS = 1e3;
+function rememberSyncId(syncIds, syncId) {
+	syncIds.add(syncId);
+	if (syncIds.size > MAX_SYNC_IDS) {
+		const oldest = syncIds.values().next().value;
+		if (oldest !== void 0) syncIds.delete(oldest);
+	}
+}
 function createSharedState(options) {
 	const { enablePatches: enablePatches$1 = false } = options;
 	const events = createEventEmitter();
@@ -1004,12 +1043,12 @@ function createSharedState(options) {
 			if (syncIds.has(syncId)) return;
 			enablePatches();
 			state = applyPatches(state, patches);
-			syncIds.add(syncId);
+			rememberSyncId(syncIds, syncId);
 			events.emit("updated", state, void 0, syncId);
 		},
 		mutate: (fn, syncId = nanoid()) => {
 			if (syncIds.has(syncId)) return;
-			syncIds.add(syncId);
+			rememberSyncId(syncIds, syncId);
 			if (enablePatches$1) {
 				const [newState, patches] = produceWithPatches(state, fn);
 				state = newState;
@@ -1132,8 +1171,18 @@ function createStorage(options) {
 		enablePatches: false
 	});
 	state.on("updated", debounce((newState) => {
-		fs.mkdirSync(dirname(options.filepath), { recursive: true });
-		fs.writeFileSync(options.filepath, `${JSON.stringify(newState, null, 2)}\n`);
+		try {
+			const dir = dirname(options.filepath);
+			fs.mkdirSync(dir, { recursive: true });
+			const tmp = `${options.filepath}.${process$1.pid}.tmp`;
+			fs.writeFileSync(tmp, `${JSON.stringify(newState, null, 2)}\n`);
+			fs.renameSync(tmp, options.filepath);
+		} catch (error) {
+			diagnostics.DF0035({
+				filepath: options.filepath,
+				cause: error
+			}, { method: "error" });
+		}
 	}, debounceTime));
 	return state;
 }

package/dist/types/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as ScopedServerFunctions, G as DevframeScopedNodeContext, H as EntriesToObject, J as DevframeSettings, K as DevframeScopedNodeRpc, Q as ScopedClientFunctions, S as RpcStreamingHost, St as EventsMap, U as PartialWithoutId, W as Thenable, X as DevframeSettingsStore, Y as DevframeSettingsRegistry, Z as ScopedBroadcastOptions, _ as RpcFunctionsHost, _t as AgentToolInput, a as DevframeDuplicationStrategy, at as DevframeRpcSharedStates, b as RpcStreamingChannel, bt as EventEmitter, c as DevframeSpaOptions, ct as DevframeDiagnosticsDefinition, d as ConnectionMeta, dt as AgentHandle, et as ScopedSharedStates, f as ConnectionMetaWebsocket, ft as AgentManifest, g as RpcBroadcastOptions, gt as AgentTool, h as DevframeNodeRpcSession, ht as AgentResourceInput, i as DevframeDeploymentKind, it as DevframeRpcServerFunctions, l as DevframeWsOptions, lt as DevframeDiagnosticsHost, m as DevframeNodeContext, mt as AgentResourceContent, n as DevframeCliOptions, nt as DevframeViewHost, o as DevframeRuntime, ot as DevframeHost, p as DevframeCapabilities, pt as AgentResource, q as DevframeScopedStreamingHost, r as DevframeDefinition, rt as DevframeRpcClientFunctions, s as DevframeSetupInfo, st as DevframeDefineDiagnosticsOptions, t as DevframeBrowserContext, tt as SettingsForNamespace, u as defineDevframe, ut as DevframeDiagnosticsLogger, v as RpcSharedStateGetOptions, vt as DevframeAgentHost, x as RpcStreamingChannelOptions, xt as EventUnsubscribe, y as RpcSharedStateHost, yt as DevframeAgentHostEvents } from "../devframe-D-gr9sBx.mjs";
+import { $ as ScopedServerFunctions, G as DevframeScopedNodeContext, H as EntriesToObject, J as DevframeSettings, K as DevframeScopedNodeRpc, Q as ScopedClientFunctions, S as RpcStreamingHost, St as EventsMap, U as PartialWithoutId, W as Thenable, X as DevframeSettingsStore, Y as DevframeSettingsRegistry, Z as ScopedBroadcastOptions, _ as RpcFunctionsHost, _t as AgentToolInput, a as DevframeDuplicationStrategy, at as DevframeRpcSharedStates, b as RpcStreamingChannel, bt as EventEmitter, c as DevframeSpaOptions, ct as DevframeDiagnosticsDefinition, d as ConnectionMeta, dt as AgentHandle, et as ScopedSharedStates, f as ConnectionMetaWebsocket, ft as AgentManifest, g as RpcBroadcastOptions, gt as AgentTool, h as DevframeNodeRpcSession, ht as AgentResourceInput, i as DevframeDeploymentKind, it as DevframeRpcServerFunctions, l as DevframeWsOptions, lt as DevframeDiagnosticsHost, m as DevframeNodeContext, mt as AgentResourceContent, n as DevframeCliOptions, nt as DevframeViewHost, o as DevframeRuntime, ot as DevframeHost, p as DevframeCapabilities, pt as AgentResource, q as DevframeScopedStreamingHost, r as DevframeDefinition, rt as DevframeRpcClientFunctions, s as DevframeSetupInfo, st as DevframeDefineDiagnosticsOptions, t as DevframeBrowserContext, tt as SettingsForNamespace, u as defineDevframe, ut as DevframeDiagnosticsLogger, v as RpcSharedStateGetOptions, vt as DevframeAgentHost, x as RpcStreamingChannelOptions, xt as EventUnsubscribe, y as RpcSharedStateHost, yt as DevframeAgentHostEvents } from "../devframe-DgvncQy2.mjs";
 import { g as RpcFunctionAgentOptions } from "../types-DZEx4ffs.mjs";
 import { t as DevframeNodeRpcSessionMeta } from "../ws-server-Bc2wBHl-.mjs";
-export { AgentHandle, AgentManifest, AgentResource, AgentResourceContent, AgentResourceInput, AgentTool, AgentToolInput, ConnectionMeta, ConnectionMetaWebsocket, DevframeAgentHost, DevframeAgentHostEvents, DevframeBrowserContext, DevframeCapabilities, DevframeCliOptions, DevframeDefineDiagnosticsOptions, DevframeDefinition, DevframeDeploymentKind, DevframeDiagnosticsDefinition, DevframeDiagnosticsHost, DevframeDiagnosticsLogger, DevframeDuplicationStrategy, DevframeHost, DevframeNodeContext, DevframeNodeRpcSession, DevframeNodeRpcSessionMeta, DevframeRpcClientFunctions, DevframeRpcServerFunctions, DevframeRpcSharedStates, DevframeRuntime, DevframeScopedNodeContext, DevframeScopedNodeRpc, DevframeScopedStreamingHost, DevframeSettings, DevframeSettingsRegistry, DevframeSettingsStore, DevframeSetupInfo, DevframeSpaOptions, DevframeViewHost, DevframeWsOptions, EntriesToObject, EventEmitter, EventUnsubscribe, EventsMap, PartialWithoutId, RpcBroadcastOptions, RpcFunctionAgentOptions, RpcFunctionsHost, RpcSharedStateGetOptions, RpcSharedStateHost, RpcStreamingChannel, RpcStreamingChannelOptions, RpcStreamingHost, ScopedBroadcastOptions, ScopedClientFunctions, ScopedServerFunctions, ScopedSharedStates, SettingsForNamespace, Thenable, defineDevframe };
+export { AgentHandle, AgentManifest, AgentResource, AgentResourceContent, AgentResourceInput, AgentTool, AgentToolInput, ConnectionMeta, ConnectionMetaWebsocket, DevframeAgentHost, DevframeAgentHostEvents, DevframeBrowserContext, DevframeCapabilities, DevframeCliOptions, DevframeDefineDiagnosticsOptions, DevframeDefinition, DevframeDeploymentKind, DevframeDiagnosticsDefinition, DevframeDiagnosticsHost, DevframeDiagnosticsLogger, DevframeDuplicationStrategy, DevframeHost, DevframeNodeContext, DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, DevframeRpcClientFunctions, DevframeRpcServerFunctions, DevframeRpcSharedStates, DevframeRuntime, DevframeScopedNodeContext, DevframeScopedNodeRpc, DevframeScopedStreamingHost, DevframeSettings, DevframeSettingsRegistry, DevframeSettingsStore, DevframeSetupInfo, DevframeSpaOptions, DevframeViewHost, DevframeWsOptions, EntriesToObject, EventEmitter, EventUnsubscribe, EventsMap, PartialWithoutId, RpcBroadcastOptions, type RpcFunctionAgentOptions, RpcFunctionsHost, RpcSharedStateGetOptions, RpcSharedStateHost, RpcStreamingChannel, RpcStreamingChannelOptions, RpcStreamingHost, ScopedBroadcastOptions, ScopedClientFunctions, ScopedServerFunctions, ScopedSharedStates, SettingsForNamespace, Thenable, defineDevframe };

package/dist/utils/crypto-token.mjs

@@ -19,7 +19,7 @@ function randomToken(byteLength = 16) {
 */
 function randomDigits(length) {
 	const limit = 250;
-	const buf = new Uint8Array(1);
+	const buf = /* @__PURE__ */ new Uint8Array(1);
 	let out = "";
 	while (out.length < length) {
 		globalThis.crypto.getRandomValues(buf);

package/dist/utils/events.d.mts

@@ -1,4 +1,4 @@
-import { St as EventsMap, bt as EventEmitter } from "../devframe-D-gr9sBx.mjs";
+import { St as EventsMap, bt as EventEmitter } from "../devframe-DgvncQy2.mjs";
 
 //#region src/utils/events.d.ts
 /**

package/dist/utils/hash.mjs

@@ -1,2 +1,2 @@
-import { t as hash } from "../hash-DFc5WwhO.mjs";
+import { t as hash } from "../hash-PAfnyu2k.mjs";
 export { hash };

package/dist/utils/launch-editor.mjs

@@ -1,2 +1,2 @@
-import { t as launchEditor } from "../launch-editor-DPfltGA4.mjs";
+import { t as launchEditor } from "../launch-editor-DIzaS5EG.mjs";
 export { launchEditor };

package/dist/utils/open.mjs

@@ -1,2 +1,2 @@
-import { t as open } from "../open-Dusa2Zzd.mjs";
+import { t as open } from "../open-Deb5xmIT.mjs";
 export { open };

package/dist/utils/serve-static.mjs

@@ -143,7 +143,8 @@ function serveStaticNodeMiddleware(dir, options) {
 				res.end();
 				return;
 			}
-			const file = await resolveTarget(absDir, req.url ?? "/", opts.indexNames, opts.single);
+			const url = req.url ?? "/";
+			const file = await resolveTarget(absDir, url, opts.indexNames, opts.single);
 			if (!file) {
 				if (next) {
 					next();

package/dist/utils/shared-state.d.mts

@@ -1,2 +1,2 @@
-import { B as SharedStatePatch, F as ImmutableObject, I as ImmutableSet, L as SharedState, M as Immutable, N as ImmutableArray, P as ImmutableMap, R as SharedStateEvents, V as createSharedState, z as SharedStateOptions } from "../devframe-D-gr9sBx.mjs";
+import { B as SharedStatePatch, F as ImmutableObject, I as ImmutableSet, L as SharedState, M as Immutable, N as ImmutableArray, P as ImmutableMap, R as SharedStateEvents, V as createSharedState, z as SharedStateOptions } from "../devframe-DgvncQy2.mjs";
 export { Immutable, ImmutableArray, ImmutableMap, ImmutableObject, ImmutableSet, SharedState, SharedStateEvents, SharedStateOptions, SharedStatePatch, createSharedState };

package/dist/utils/shared-state.mjs

@@ -1,2 +1,2 @@
-import { t as createSharedState } from "../shared-state-D4PPieA0.mjs";
+import { t as createSharedState } from "../shared-state-QtMas0NG.mjs";
 export { createSharedState };

package/dist/utils/streaming-channel.d.mts

@@ -1,2 +1,2 @@
-import { A as createStreamReader, C as BufferedChunk, D as StreamReader, E as StreamErrorPayload, O as StreamSink, T as CreateStreamSinkOptions, j as createStreamSink, k as StreamSinkEvents, w as CreateStreamReaderOptions } from "../devframe-D-gr9sBx.mjs";
+import { A as createStreamReader, C as BufferedChunk, D as StreamReader, E as StreamErrorPayload, O as StreamSink, T as CreateStreamSinkOptions, j as createStreamSink, k as StreamSinkEvents, w as CreateStreamReaderOptions } from "../devframe-DgvncQy2.mjs";
 export { BufferedChunk, CreateStreamReaderOptions, CreateStreamSinkOptions, StreamErrorPayload, StreamReader, StreamSink, StreamSinkEvents, createStreamReader, createStreamSink };

package/dist/utils/when.d.mts

@@ -381,4 +381,4 @@ declare function evaluateWhen<T extends object, const E extends string>(expressi
  */
 declare function resolveContextValue<T extends Record<string, unknown>>(key: string, context: T): unknown;
 //#endregion
-export { EvaluateWhenOptions, WhenContext, type WhenExpression, evaluateWhen, resolveContextValue };
+export { EvaluateWhenOptions, WhenContext, WhenExpression, evaluateWhen, resolveContextValue };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devframe",
   "type": "module",
-  "version": "0.6.0-beta.2",
+  "version": "0.6.0-beta.3",
   "description": "Framework for building generic devframes",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",
@@ -31,6 +31,7 @@
     "./node": "./dist/node/index.mjs",
     "./node/auth": "./dist/node/auth.mjs",
     "./node/hub-internals": "./dist/node/hub-internals.mjs",
+    "./recipes/interactive-auth": "./dist/recipes/interactive-auth.mjs",
     "./recipes/open-helpers": "./dist/recipes/open-helpers.mjs",
     "./rpc": "./dist/rpc/index.mjs",
     "./rpc/client": "./dist/rpc/client.mjs",
@@ -69,32 +70,32 @@
     }
   },
   "dependencies": {
-    "@valibot/to-json-schema": "^1.7.0",
+    "@valibot/to-json-schema": "^1.7.1",
     "birpc": "^4.0.0",
     "cac": "^7.0.0",
-    "crossws": "^0.4.8",
+    "crossws": "^0.4.9",
     "destr": "^2.0.5",
     "h3": "2.0.1-rc.22",
     "mrmime": "^2.0.1",
     "nostics": "^1.1.4",
     "pathe": "^2.0.3",
     "ufo": "^1.6.4",
-    "valibot": "^1.4.1"
+    "valibot": "^1.4.2"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "get-port-please": "^3.2.0",
-    "immer": "^11.1.8",
-    "launch-editor": "^2.13.2",
+    "immer": "^11.1.11",
+    "launch-editor": "^2.14.1",
     "mlly": "^1.8.2",
-    "obug": "^2.1.1",
+    "obug": "^2.1.3",
     "ohash": "^2.0.11",
     "open": "^11.0.0",
     "p-limit": "^7.3.0",
     "perfect-debounce": "^2.1.0",
     "structured-clone-es": "^2.0.0",
-    "tinyglobby": "^0.2.16",
-    "tsdown": "^0.22.0",
+    "tinyglobby": "^0.2.17",
+    "tsdown": "^0.22.3",
     "ua-parser-modern": "^0.1.1",
     "whenexpr": "^0.1.2",
     "ws": "^8.21.0"

package/dist/{open-Dusa2Zzd.mjs → open-Deb5xmIT.mjs}

@@ -1,7 +1,7 @@
 import { promisify } from "node:util";
 import fs from "node:fs";
-import os from "node:os";
 import process from "node:process";
+import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import childProcess, { execFile } from "node:child_process";