devframe 0.7.15 → 0.7.16

package/dist/adapters/build.d.mts

@@ -1,4 +1,4 @@
-import { r as DevframeDefinition } from "../devframe-BADsX91-.mjs";
+import { r as DevframeDefinition } from "../devframe-Ckhf3kFw.mjs";
 //#region src/adapters/build.d.ts
 interface CreateBuildOptions {
   /** Output directory. Defaults to `dist-static`. */
@@ -17,6 +17,13 @@ interface CreateBuildOptions {
    * minified. Set `true` when you need to diff / read the dumps by hand.
    */
   pretty?: boolean;
+  /**
+   * Proceed even when the definition declares `capabilities.build: false`.
+   * `createCac` already skips registering the `build` subcommand for such
+   * a definition — this only matters for a caller invoking `createBuild`
+   * directly, bypassing the CLI.
+   */
+  force?: boolean;
 }
 /**
  * Produce a self-contained static deploy of a devframe:

package/dist/adapters/build.mjs

@@ -3,7 +3,8 @@ import { n as colors } from "../diagnostics-reporter-CsIG85Q5.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME } from "../constants.mjs";
 import { n as strictJsonStringify } from "../serialization-DpLXCy13.mjs";
 import { n as structuredCloneStringify } from "../structured-clone-CbAV5rFI.mjs";
-import { n as createHostContext, t as createH3DevframeHost } from "../host-h3-SjwRTwkE.mjs";
+import { a as diagnostics } from "../storage-gEnj9ASQ.mjs";
+import { n as createHostContext, t as createH3DevframeHost } from "../host-h3-CgOetlNE.mjs";
 import { n as resolveBasePath } from "../_shared-bWRzeSa0.mjs";
 import { existsSync } from "node:fs";
 import { dirname, resolve } from "pathe";
@@ -24,6 +25,7 @@ import fs$1 from "node:fs/promises";
 *     works at `/`, `/devframe/`, or any base, no rewriting required.
 */
 async function createBuild(d, options = {}) {
+	if (d.capabilities?.build === false && !options.force) throw diagnostics.DF0042({ id: d.id });
 	const outDir = resolve(options.outDir ?? "dist-static");
 	const distDir = options.distDir ?? d.cli?.distDir;
 	if (!distDir) throw new Error(`[devframe] createBuild: no distDir for "${d.id}". Set \`cli.distDir\` on the definition or pass it as an option.`);

package/dist/adapters/cac.d.mts

@@ -1,4 +1,4 @@
-import { Ft as parseCliFlags, Mt as CliFlagsSchema, Nt as InferCliFlags, Pt as defineCliFlags, r as DevframeDefinition } from "../devframe-BADsX91-.mjs";
+import { Ft as parseCliFlags, Mt as CliFlagsSchema, Nt as InferCliFlags, Pt as defineCliFlags, r as DevframeDefinition } from "../devframe-Ckhf3kFw.mjs";
 import { CAC } from "cac";
 import { H3 } from "h3";
 //#region src/adapters/cac.d.ts

package/dist/adapters/cac.mjs

@@ -1,2 +1,2 @@
-import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-CjF0haJ6.mjs";
+import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-CPaOy3LD.mjs";
 export { createCac, defineCliFlags, parseCliFlags };

package/dist/adapters/cli.d.mts

@@ -1,4 +1,4 @@
-import { Ft as parseCliFlags, Mt as CliFlagsSchema, Nt as InferCliFlags, Pt as defineCliFlags } from "../devframe-BADsX91-.mjs";
+import { Ft as parseCliFlags, Mt as CliFlagsSchema, Nt as InferCliFlags, Pt as defineCliFlags } from "../devframe-Ckhf3kFw.mjs";
 import { CacHandle, CreateCacOptions, createCac } from "./cac.mjs";
 //#region src/adapters/cli.d.ts
 /** @deprecated Use `createCac` from `devframe/adapters/cac` instead. */

package/dist/adapters/cli.mjs

@@ -1,4 +1,4 @@
-import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-CjF0haJ6.mjs";
+import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-CPaOy3LD.mjs";
 //#region src/adapters/cli.ts
 /** @deprecated Use `createCac` from `devframe/adapters/cac` instead. */
 const createCli = createCac;

package/dist/adapters/dev.d.mts

@@ -1,5 +1,5 @@
-import { _ as ConnectionMeta, d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeWsOptions } from "../devframe-BADsX91-.mjs";
-import { n as StartedServer } from "../server-Bu5iB3aV.mjs";
+import { _ as ConnectionMeta, d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeWsOptions } from "../devframe-Ckhf3kFw.mjs";
+import { n as StartedServer } from "../server-B0wiP_Oi.mjs";
 import { H3 } from "h3";
 //#region src/adapters/dev.d.ts
 interface CreateDevServerOptions {

package/dist/adapters/dev.mjs

@@ -1,2 +1,2 @@
-import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-OJFr4rx8.mjs";
+import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-BCeaQuGE.mjs";
 export { createDevServer, resolveDevServerPort, resolveMcpConnectionMeta };

package/dist/adapters/embedded.d.mts

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-BADsX91-.mjs";
+import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-Ckhf3kFw.mjs";
 //#region src/adapters/embedded.d.ts
 interface CreateEmbeddedOptions {
   /** Target context the devframe is registered into. Required. */

package/dist/adapters/mcp.d.mts

@@ -1,4 +1,4 @@
-import { r as DevframeDefinition } from "../devframe-BADsX91-.mjs";
+import { r as DevframeDefinition } from "../devframe-Ckhf3kFw.mjs";
 import "@modelcontextprotocol/sdk/server/index.js";
 //#region src/adapters/mcp/build-server.d.ts
 interface CreateMcpServerOptions {

package/dist/adapters/mcp.mjs

@@ -1,2 +1,2 @@
-import { n as createMcpServer } from "../build-server-cANnMwg0.mjs";
+import { n as createMcpServer } from "../build-server-C7vTKjiQ.mjs";
 export { createMcpServer };

package/dist/{build-server-cANnMwg0.mjs → build-server-C7vTKjiQ.mjs}

@@ -1,5 +1,5 @@
-import { a as diagnostics } from "./storage-D_Xy9v1l.mjs";
-import { n as createHostContext } from "./host-h3-SjwRTwkE.mjs";
+import { a as diagnostics } from "./storage-gEnj9ASQ.mjs";
+import { n as createHostContext } from "./host-h3-CgOetlNE.mjs";
 import { Diagnostic } from "nostics";
 import { join } from "pathe";
 import process from "node:process";

package/dist/{cac-CjF0haJ6.mjs → cac-CPaOy3LD.mjs}

@@ -1,6 +1,6 @@
 import { n as colors } from "./diagnostics-reporter-CsIG85Q5.mjs";
 import { createBuild } from "./adapters/build.mjs";
-import { n as resolveDevServerPort, t as createDevServer } from "./dev-OJFr4rx8.mjs";
+import { n as resolveDevServerPort, t as createDevServer } from "./dev-BCeaQuGE.mjs";
 import process from "node:process";
 import cac from "cac";
 import { safeParse } from "valibot";
@@ -111,7 +111,7 @@ function createCac(d, options = {}) {
 			onReady: options.onReady
 		});
 	});
-	cli.command("build", "Build a self-contained static deploy of the devframe").option("--out-dir <outDir>", "Output directory", { default: "dist-static" }).option("--base <base>", "URL base", { default: "/" }).option("--pretty", "Pretty-print dump JSON (larger on disk)").action(async (flags) => {
+	if (d.capabilities?.build !== false) cli.command("build", "Build a self-contained static deploy of the devframe").option("--out-dir <outDir>", "Output directory", { default: "dist-static" }).option("--base <base>", "URL base", { default: "/" }).option("--pretty", "Pretty-print dump JSON (larger on disk)").action(async (flags) => {
 		await createBuild(d, {
 			outDir: flags.outDir,
 			base: flags.base,

package/dist/client/index.d.mts

@@ -1,9 +1,42 @@
-import { $ as DevframeRpcServerFunctions, F as ScopedSharedStates, I as SettingsForNamespace, J as RpcSharedStateHost, N as ScopedRpcFn, O as DevframeSettings, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, _ as ConnectionMeta, at as StreamReader, ht as SharedState, kt as EventEmitter, ot as StreamSink, q as RpcSharedStateGetOptions } from "../devframe-BADsX91-.mjs";
+import { $ as DevframeRpcServerFunctions, F as ScopedSharedStates, I as SettingsForNamespace, J as RpcSharedStateHost, N as ScopedRpcFn, O as DevframeSettings, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, _ as ConnectionMeta, at as StreamReader, ht as SharedState, kt as EventEmitter, ot as StreamSink, q as RpcSharedStateGetOptions } from "../devframe-Ckhf3kFw.mjs";
 import { _ as RpcFunctionDefinition, w as RpcFunctionsCollector } from "../types-CrzNxXKq.mjs";
 import { C as RpcCacheManager, w as RpcCacheOptions } from "../index-DgsLFhZg.mjs";
 import { t as WsRpcChannelOptions } from "../ws-client-DSXiI2h7.mjs";
 import { BirpcOptions, BirpcReturn } from "birpc";
 //#region src/client/connection.d.ts
+interface DevframeConnection {
+  /** Server-advertised transport and serialization metadata. */
+  connectionMeta: ConnectionMeta;
+  /**
+   * Absolute URL of the `__connection.json` that produced
+   * {@link connectionMeta}. Relative transport paths and side-car ports are
+   * resolved from this URL, rather than from an external viewer's location.
+   */
+  metaBaseUrl: string;
+  /** Previously issued bearer token, when the connection is already trusted. */
+  authToken?: string;
+}
+interface SetupDevframeConnectionOptions {
+  /** Reuse a complete connection prepared in another viewer or JavaScript realm. */
+  connection?: DevframeConnection;
+  /** Use a pre-known descriptor while deriving its source URL from `baseURL`. */
+  connectionMeta?: ConnectionMeta;
+  /** Base URL, or fallback list, used to locate `__connection.json`. */
+  baseURL?: string | string[];
+  /** Override the locally stored auth token. */
+  authToken?: string;
+}
+/**
+ * Return connection information previously prepared in this window or an
+ * accessible parent window.
+ */
+declare function getDevframeConnection(): DevframeConnection | undefined;
+/**
+ * Prepare the connection information shared by a devframe client and external
+ * viewers. Reuses an explicit or previously prepared connection before
+ * fetching `__connection.json` from the configured base URLs.
+ */
+declare function setupDevframeConnection(options?: SetupDevframeConnectionOptions): Promise<DevframeConnection>;
 /**
  * The connection lifecycle of a devframe client, as a single value a UI can
  * render from. Derived from the transport (WebSocket open/close/error) and the
@@ -183,9 +216,7 @@ interface RpcClientEvents {
    */
   'rpc:error': (error: Error, method: string) => void;
 }
-interface DevframeRpcClientOptions {
-  connectionMeta?: ConnectionMeta;
-  baseURL?: string | string[];
+interface DevframeRpcClientOptions extends SetupDevframeConnectionOptions {
   /**
    * The auth token to use for the client
    */
@@ -250,7 +281,12 @@ interface DevframeRpcClient {
    */
   readonly connectionError: Error | null;
   /**
-   * The connection meta
+   * The complete connection used by this client, including the metadata source
+   * URL external viewers use to resolve relative resources.
+   */
+  readonly connection: DevframeConnection;
+  /**
+   * The server-advertised connection metadata.
    */
   readonly connectionMeta: ConnectionMeta;
   /**
@@ -376,4 +412,4 @@ declare function createClientSettings<T extends Record<string, any> = Record<str
 //#region src/client/index.d.ts
 declare const connectDevframe: typeof getDevframeRpcClient;
 //#endregion
-export { DevframeClientRpcHost, DevframeConnectionError, DevframeConnectionErrorKind, DevframeConnectionStatus, DevframeRpcClient, DevframeRpcClientCall, DevframeRpcClientCallEvent, DevframeRpcClientCallOptional, DevframeRpcClientMode, DevframeRpcClientOptions, DevframeRpcContext, DevframeScopedClientContext, DevframeScopedClientRpc, DevframeScopedClientStreamingHost, RpcClientEvents, RpcStreamingClientHost, StreamingSubscribeOptions, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeRpcClient, isCallableStatus, readOtpFromUrl };
+export { DevframeClientRpcHost, DevframeConnection, DevframeConnectionError, DevframeConnectionErrorKind, DevframeConnectionStatus, DevframeRpcClient, DevframeRpcClientCall, DevframeRpcClientCallEvent, DevframeRpcClientCallOptional, DevframeRpcClientMode, DevframeRpcClientOptions, DevframeRpcContext, DevframeScopedClientContext, DevframeScopedClientRpc, DevframeScopedClientStreamingHost, RpcClientEvents, RpcStreamingClientHost, SetupDevframeConnectionOptions, StreamingSubscribeOptions, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };

package/dist/client/index.mjs

@@ -12,6 +12,12 @@ import { withBase, withProtocol } from "ufo";
 import { createBirpc } from "birpc";
 //#region src/constants.ts
 const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
+/**
+* Global key holding the serializable connection prepared by
+* `setupDevframeConnection()`. External viewers can use this key to read the
+* connection from another JavaScript realm.
+*/
+const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
 const DEVFRAME_RPC_DUMP_MANIFEST_FILENAME = "__rpc-dump/index.json";
 /**
 * Page-URL query parameter carrying a one-time authentication code (OTP) for
@@ -289,6 +295,155 @@ function formatPath(parent, key) {
 	return key;
 }
 //#endregion
+//#region src/client/connection-storage.ts
+const CONNECTION_META_KEY = "__DEVFRAME_CONNECTION_META__";
+const CONNECTION_AUTH_TOKEN_KEY = "__DEVFRAME_CONNECTION_AUTH_TOKEN__";
+function readFromWindows(key) {
+	const getters = [
+		() => window?.[key],
+		() => globalThis?.[key],
+		() => parent.window?.[key]
+	];
+	for (const getter of getters) try {
+		const value = getter();
+		if (value) return value;
+	} catch {}
+}
+function readStoredConnection() {
+	return readFromWindows(DEVFRAME_CONNECTION_KEY);
+}
+function readStoredConnectionMeta() {
+	return readFromWindows(CONNECTION_META_KEY);
+}
+function readStoredAuthToken(userAuthToken) {
+	if (userAuthToken) return userAuthToken;
+	try {
+		const token = localStorage.getItem(CONNECTION_AUTH_TOKEN_KEY);
+		if (token) return token;
+	} catch {}
+	return readFromWindows(CONNECTION_AUTH_TOKEN_KEY);
+}
+function storeConnection(connection) {
+	globalThis[DEVFRAME_CONNECTION_KEY] = connection;
+	globalThis[CONNECTION_META_KEY] = {
+		...connection.connectionMeta,
+		baseUrl: connection.metaBaseUrl
+	};
+	if (connection.authToken) storeAuthToken(connection.authToken);
+}
+function storeAuthToken(token) {
+	try {
+		localStorage.setItem(CONNECTION_AUTH_TOKEN_KEY, token);
+	} catch {}
+	globalThis[CONNECTION_AUTH_TOKEN_KEY] = token;
+	const connection = readStoredConnection();
+	if (connection) globalThis[DEVFRAME_CONNECTION_KEY] = {
+		...connection,
+		authToken: token
+	};
+}
+//#endregion
+//#region src/client/connection.ts
+function resolveMetaBaseUrl(baseURL) {
+	const metaPath = withBase(DEVFRAME_CONNECTION_META_FILENAME, baseURL);
+	try {
+		return new URL(metaPath, globalThis.location?.href).href;
+	} catch {
+		return metaPath;
+	}
+}
+function withAuthToken(connection, authToken) {
+	return authToken && authToken !== connection.authToken ? {
+		...connection,
+		authToken
+	} : connection;
+}
+/**
+* Return connection information previously prepared in this window or an
+* accessible parent window.
+*/
+function getDevframeConnection() {
+	const connection = readStoredConnection();
+	if (connection) return withAuthToken(connection, readStoredAuthToken() ?? connection.authToken ?? connection.connectionMeta.authToken);
+	const connectionMeta = readStoredConnectionMeta();
+	if (!connectionMeta) return void 0;
+	return {
+		connectionMeta,
+		metaBaseUrl: connectionMeta.baseUrl ?? resolveMetaBaseUrl("./"),
+		authToken: readStoredAuthToken(connectionMeta.authToken)
+	};
+}
+/**
+* Prepare the connection information shared by a devframe client and external
+* viewers. Reuses an explicit or previously prepared connection before
+* fetching `__connection.json` from the configured base URLs.
+*/
+async function setupDevframeConnection(options = {}) {
+	if (options.connection) {
+		const connection = withAuthToken(options.connection, readStoredAuthToken(options.authToken ?? options.connection.authToken ?? options.connection.connectionMeta.authToken));
+		storeConnection(connection);
+		return connection;
+	}
+	const bases = Array.isArray(options.baseURL) ? options.baseURL : [options.baseURL ?? "./"];
+	if (options.connectionMeta) {
+		const connection = {
+			connectionMeta: options.connectionMeta,
+			metaBaseUrl: resolveMetaBaseUrl(bases[0] ?? "./"),
+			authToken: readStoredAuthToken(options.authToken ?? options.connectionMeta.authToken)
+		};
+		storeConnection(connection);
+		return connection;
+	}
+	const existing = getDevframeConnection();
+	if (existing) {
+		const connection = withAuthToken(existing, readStoredAuthToken(options.authToken ?? existing.authToken ?? existing.connectionMeta.authToken));
+		storeConnection(connection);
+		return connection;
+	}
+	const errors = [];
+	for (const base of bases) {
+		const metaPath = withBase(DEVFRAME_CONNECTION_META_FILENAME, base);
+		const metaUrl = resolveMetaBaseUrl(base);
+		try {
+			const response = await fetch(metaPath);
+			if (!response.ok) throw new Error(`Failed to fetch connection meta from ${metaUrl}: ${response.status}`);
+			const connectionMeta = await response.json();
+			const connection = {
+				connectionMeta,
+				metaBaseUrl: response.url || metaUrl,
+				authToken: readStoredAuthToken(options.authToken ?? connectionMeta.authToken)
+			};
+			storeConnection(connection);
+			return connection;
+		} catch (error) {
+			errors.push(error);
+		}
+	}
+	throw new Error(`Failed to get connection meta from ${bases.join(", ")}`, { cause: errors });
+}
+/**
+* The error rejected from `rpc.call(...)` (and carried on
+* `rpc.connectionError`) when a call cannot be served because the connection is
+* down, the client is unauthorized, or a call timed out. Its `kind` lets a UI
+* tailor its message and recovery affordance without string-matching.
+*/
+var DevframeConnectionError = class extends Error {
+	name = "DevframeConnectionError";
+	kind;
+	constructor(kind, message, options) {
+		super(message, options);
+		this.kind = kind;
+	}
+};
+/**
+* Whether a status means calls can be attempted. `connecting` counts because
+* the transport queues outgoing calls until the socket opens; the terminal
+* failure states short-circuit calls so a stuck socket never hangs the UI.
+*/
+function isCallableStatus(status) {
+	return status === "connected" || status === "connecting";
+}
+//#endregion
 //#region src/client/otp.ts
 /**
 * Read a one-time authentication code (OTP) from the current page URL's query
@@ -1868,30 +2023,6 @@ function parseUA(uastringOrExtensions, extensions) {
 	};
 }
 //#endregion
-//#region src/client/connection.ts
-/**
-* The error rejected from `rpc.call(...)` (and carried on
-* `rpc.connectionError`) when a call cannot be served because the connection is
-* down, the client is unauthorized, or a call timed out. Its `kind` lets a UI
-* tailor its message and recovery affordance without string-matching.
-*/
-var DevframeConnectionError = class extends Error {
-	name = "DevframeConnectionError";
-	kind;
-	constructor(kind, message, options) {
-		super(message, options);
-		this.kind = kind;
-	}
-};
-/**
-* Whether a status means calls can be attempted. `connecting` counts because
-* the transport queues outgoing calls until the socket opens; the terminal
-* failure states short-circuit calls so a stuck socket never hangs the UI.
-*/
-function isCallableStatus(status) {
-	return status === "connected" || status === "connecting";
-}
-//#endregion
 //#region src/client/rpc-ws.ts
 /**
 * Resolve a {@link ConnectionMeta.websocket} descriptor into a concrete
@@ -1906,7 +2037,6 @@ function isCallableStatus(status) {
 * endpoint, e.g. a side-car server on its own port.
 */
 function resolveWsUrl(websocket, metaBaseUrl, loc) {
-	const wsProtocol = loc.protocol === "https:" ? "wss:" : "ws:";
 	const base = (() => {
 		try {
 			return new URL(metaBaseUrl, loc.href);
@@ -1914,9 +2044,10 @@ function resolveWsUrl(websocket, metaBaseUrl, loc) {
 			return new URL(loc.href);
 		}
 	})();
+	const wsProtocol = base.protocol === "https:" ? "wss:" : "ws:";
 	if (websocket && typeof websocket === "object") {
 		if (websocket.host != null || websocket.port != null) {
-			const host = websocket.host ?? `${loc.hostname}:${websocket.port}`;
+			const host = websocket.host ?? `${base.hostname}:${websocket.port}`;
 			const target = new URL(websocket.path ?? "/", `${wsProtocol}//${host}`);
 			target.protocol = wsProtocol;
 			return target.href;
@@ -1925,7 +2056,7 @@ function resolveWsUrl(websocket, metaBaseUrl, loc) {
 		target.protocol = wsProtocol;
 		return target.href;
 	}
-	if (typeof websocket === "number") return `${wsProtocol}//${loc.hostname}:${websocket}`;
+	if (typeof websocket === "number") return `${wsProtocol}//${base.hostname}:${websocket}`;
 	const str = websocket ?? "";
 	if (/^wss?:\/\//i.test(str)) return str;
 	if (/^https?:\/\//i.test(str)) return withProtocol(str, /^https/i.test(str) ? "wss://" : "ws://");
@@ -2210,78 +2341,21 @@ function createScopedClientContext(rpc, namespace) {
 }
 //#endregion
 //#region src/client/rpc.ts
-const CONNECTION_META_KEY = "__DEVFRAME_CONNECTION_META__";
-const CONNECTION_AUTH_TOKEN_KEY = "__DEVFRAME_CONNECTION_AUTH_TOKEN__";
-function getStoredAuthToken(userAuthToken) {
-	const getters = [
-		() => userAuthToken,
-		() => localStorage.getItem(CONNECTION_AUTH_TOKEN_KEY) ?? void 0,
-		() => window?.[CONNECTION_AUTH_TOKEN_KEY],
-		() => globalThis?.[CONNECTION_AUTH_TOKEN_KEY],
-		() => parent.window?.[CONNECTION_AUTH_TOKEN_KEY]
-	];
-	for (const getter of getters) try {
-		const value = getter();
-		if (value) return value;
-	} catch {}
-}
-function persistAuthToken(token) {
-	try {
-		localStorage.setItem(CONNECTION_AUTH_TOKEN_KEY, token);
-	} catch {}
-	globalThis[CONNECTION_AUTH_TOKEN_KEY] = token;
-}
-function findConnectionMetaFromWindows() {
-	const getters = [
-		() => window?.[CONNECTION_META_KEY],
-		() => globalThis?.[CONNECTION_META_KEY],
-		() => parent.window?.[CONNECTION_META_KEY]
-	];
-	for (const getter of getters) try {
-		const value = getter();
-		if (value) return value;
-	} catch {}
-}
 async function getDevframeRpcClient(options = {}) {
 	const { baseURL = "./", rpcOptions = {}, cacheOptions = false } = options;
 	const events = createEventEmitter();
 	const bases = Array.isArray(baseURL) ? baseURL : [baseURL];
-	let connectionMeta = options.connectionMeta || findConnectionMetaFromWindows();
+	let connection = await setupDevframeConnection(options);
+	const { connectionMeta, metaBaseUrl, authToken } = connection;
 	let resolvedBaseURL = bases[0] ?? "./";
-	const inheritedMetaBaseUrl = options.connectionMeta ? void 0 : connectionMeta?.baseUrl;
-	function resolveMetaBaseUrl() {
-		if (inheritedMetaBaseUrl) return inheritedMetaBaseUrl;
-		const metaPath = withBase(DEVFRAME_CONNECTION_META_FILENAME, resolvedBaseURL);
-		try {
-			return new URL(metaPath, globalThis.location?.href).href;
-		} catch {
-			return metaPath;
-		}
-	}
-	if (!connectionMeta) {
-		const errors = [];
-		for (const base of bases) try {
-			const response = await fetch(withBase(DEVFRAME_CONNECTION_META_FILENAME, base));
-			if (!response.ok) throw new Error(`Failed to fetch connection meta: ${response.status}`);
-			connectionMeta = await response.json();
-			resolvedBaseURL = base;
-			globalThis[CONNECTION_META_KEY] = {
-				...connectionMeta,
-				baseUrl: resolveMetaBaseUrl()
-			};
-			break;
-		} catch (e) {
-			errors.push(e);
-		}
-		if (!connectionMeta) throw new Error(`Failed to get connection meta from ${bases.join(", ")}`, { cause: errors });
-	}
+	try {
+		resolvedBaseURL = new URL(".", metaBaseUrl).href;
+	} catch {}
 	const cacheManager = new RpcCacheManager({
 		functions: [],
 		...typeof options.cacheOptions === "object" ? options.cacheOptions : {}
 	});
 	const context = { rpc: void 0 };
-	const authToken = getStoredAuthToken(options.authToken || connectionMeta.authToken);
-	if (authToken) persistAuthToken(authToken);
 	const clientRpc = new RpcFunctionsCollectorBase(context);
 	async function fetchJsonFromBases(path) {
 		const candidates = [resolvedBaseURL, ...bases.filter((base) => base !== resolvedBaseURL)].filter((x) => x != null);
@@ -2299,7 +2373,7 @@ async function getDevframeRpcClient(options = {}) {
 	const mode = connectionMeta.backend === "static" ? await createStaticRpcClientMode({ fetchJsonFromBases }) : createWsRpcClientMode({
 		authToken,
 		connectionMeta,
-		metaBaseUrl: resolveMetaBaseUrl(),
+		metaBaseUrl,
 		events,
 		clientRpc,
 		callTimeout: options.callTimeout,
@@ -2339,17 +2413,28 @@ async function getDevframeRpcClient(options = {}) {
 		get connectionError() {
 			return mode.connectionError;
 		},
+		get connection() {
+			return connection;
+		},
 		connectionMeta,
 		ensureTrusted: mode.ensureTrusted,
 		requestTrust: mode.requestTrust,
 		requestTrustWithToken: async (token) => {
-			persistAuthToken(token);
+			storeAuthToken(token);
+			connection = {
+				...connection,
+				authToken: token
+			};
 			return mode.requestTrustWithToken(token);
 		},
 		requestTrustWithCode: async (code) => {
 			const token = await mode.requestTrustWithCode(code);
 			if (!token) return false;
-			persistAuthToken(token);
+			storeAuthToken(token);
+			connection = {
+				...connection,
+				authToken: token
+			};
 			try {
 				authChannel?.postMessage({
 					type: "auth-update",
@@ -2419,4 +2504,4 @@ async function getDevframeRpcClient(options = {}) {
 //#region src/client/index.ts
 const connectDevframe = getDevframeRpcClient;
 //#endregion
-export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeRpcClient, isCallableStatus, readOtpFromUrl };
+export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };

package/dist/constants.d.mts

@@ -3,6 +3,12 @@ declare const DEVFRAME_MOUNT_PATH = "/__devframe/";
 declare const DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH = "/__devframe";
 declare const DEVFRAME_DIRNAME = "__devframe";
 declare const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
+/**
+ * Global key holding the serializable connection prepared by
+ * `setupDevframeConnection()`. External viewers can use this key to read the
+ * connection from another JavaScript realm.
+ */
+declare const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
 /**
  * Route the WebSocket RPC endpoint is bound to, relative to a devframe's
  * base path. Sits next to `__connection.json` so the deployed SPA can reach
@@ -60,4 +66,4 @@ declare const ANONYMOUS_RPC_PREFIX = "anonymous:";
  */
 declare function isAnonymousRpcMethod(name: string): boolean;
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/constants.mjs

@@ -4,6 +4,12 @@ const DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH = "/__devframe";
 const DEVFRAME_DIRNAME = "__devframe";
 const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
 /**
+* Global key holding the serializable connection prepared by
+* `setupDevframeConnection()`. External viewers can use this key to read the
+* connection from another JavaScript realm.
+*/
+const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
+/**
 * Route the WebSocket RPC endpoint is bound to, relative to a devframe's
 * base path. Sits next to `__connection.json` so the deployed SPA can reach
 * it on the same origin it loaded from — the dev server shares one port for
@@ -62,4 +68,4 @@ function isAnonymousRpcMethod(name) {
 	return name.startsWith(ANONYMOUS_RPC_PREFIX);
 }
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/{context-C_bqRR0i.d.mts → context-CzqPrJSz.d.mts}

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, ht as SharedState } from "./devframe-BADsX91-.mjs";
+import { b as DevframeNodeContext, ht as SharedState } from "./devframe-Ckhf3kFw.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{context-C1Gr2BGB.mjs → context-DY72brRI.mjs}

@@ -1,4 +1,4 @@
-import { t as createStorage } from "./storage-D_Xy9v1l.mjs";
+import { t as createStorage } from "./storage-gEnj9ASQ.mjs";
 import { i as randomToken, n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-BtQDKTp7.mjs";
 import { join } from "pathe";
 //#region src/node/hub-internals/context.ts

package/dist/{dev-OJFr4rx8.mjs → dev-BCeaQuGE.mjs}

@@ -1,7 +1,7 @@
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
-import { a as diagnostics } from "./storage-D_Xy9v1l.mjs";
-import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-SjwRTwkE.mjs";
-import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-BFsuZI9e.mjs";
+import { a as diagnostics } from "./storage-gEnj9ASQ.mjs";
+import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-CgOetlNE.mjs";
+import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-DykHCza_.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "./_shared-bWRzeSa0.mjs";
 import { t as open } from "./open-Deb5xmIT.mjs";
 import { mountStaticHandler } from "./utils/serve-static.mjs";
@@ -294,7 +294,7 @@ async function createDevServer(def, options = {}) {
 		const mcpPath = joinURL(basePath, mcpRoute);
 		let mountMcpHttp;
 		try {
-			({mountMcpHttp} = await import("./http-B2P55ZXg.mjs"));
+			({mountMcpHttp} = await import("./http-_pPbryTQ.mjs"));
 		} catch (error) {
 			const reason = error instanceof Error ? error.message : String(error);
 			throw diagnostics.DF0017({

package/dist/{devframe-BADsX91-.d.mts → devframe-Ckhf3kFw.d.mts}

@@ -1713,6 +1713,16 @@ interface DevframeDefinition {
    * @default 'warn'
    */
   duplicationStrategy?: DevframeDuplicationStrategy;
+  /**
+   * Declares which runtimes meaningfully support this devframe. Consulted
+   * by adapters that can act on a plain `false` before doing any work:
+   * `createCac` skips registering the `build` subcommand entirely when
+   * `capabilities.build` is `false` — useful for a devframe whose value is
+   * inherently live (e.g. it manages real files on disk), so a static
+   * export would only ever produce a broken, write-less shell of the tool.
+   * The `Record<string, boolean>` shape is reserved for finer-grained
+   * sub-capabilities and currently unconsumed by any adapter.
+   */
   capabilities?: {
     dev?: boolean | Record<string, boolean>;
     build?: boolean | Record<string, boolean>;

package/dist/helpers/vite.d.mts

@@ -1,4 +1,4 @@
-import { d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition } from "../devframe-BADsX91-.mjs";
+import { d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition } from "../devframe-Ckhf3kFw.mjs";
 //#region src/helpers/vite.d.ts
 interface ViteDevBridgeOptions {
   /**

package/dist/helpers/vite.mjs

@@ -1,8 +1,8 @@
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_WS_ROUTE } from "../constants.mjs";
-import { a as diagnostics } from "../storage-D_Xy9v1l.mjs";
+import { a as diagnostics } from "../storage-gEnj9ASQ.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-bWRzeSa0.mjs";
 import { serveStaticNodeMiddleware } from "../utils/serve-static.mjs";
-import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-OJFr4rx8.mjs";
+import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-BCeaQuGE.mjs";
 import { resolve } from "pathe";
 //#region src/helpers/vite.ts
 /**

package/dist/{host-h3-SjwRTwkE.mjs → host-h3-CgOetlNE.mjs}

@@ -2,7 +2,7 @@ import { t as devframeReporter } from "./diagnostics-reporter-CsIG85Q5.mjs";
 import { t as diagnostics } from "./diagnostics-BXwBQmoN.mjs";
 import { RpcFunctionsCollectorBase } from "./rpc/index.mjs";
 import { defineRpcFunction } from "./index.mjs";
-import { a as diagnostics$1, i as createEventEmitter, n as createSharedState, r as nanoid, t as createStorage } from "./storage-D_Xy9v1l.mjs";
+import { a as diagnostics$1, i as createEventEmitter, n as createSharedState, r as nanoid, t as createStorage } from "./storage-gEnj9ASQ.mjs";
 import { defineDiagnostics } from "nostics";
 import { isatty } from "node:tty";
 import { formatWithOptions, inspect } from "node:util";

package/dist/{http-B2P55ZXg.mjs → http-_pPbryTQ.mjs}

@@ -1,5 +1,5 @@
 import { isAllowedOrigin } from "./rpc/transports/ws-server.mjs";
-import { t as buildMcpServerFromContext } from "./build-server-cANnMwg0.mjs";
+import { t as buildMcpServerFromContext } from "./build-server-C7vTKjiQ.mjs";
 import { randomUUID } from "node:crypto";
 import { defineHandler } from "h3";
 import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";

package/dist/{index-Brcd2V4t.d.mts → index-8dndvIxR.d.mts}

@@ -1,5 +1,5 @@
-import { W as DevframeNodeRpcSession, b as DevframeNodeContext, ht as SharedState } from "./devframe-BADsX91-.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-C_bqRR0i.mjs";
+import { W as DevframeNodeRpcSession, b as DevframeNodeContext, ht as SharedState } from "./devframe-Ckhf3kFw.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-CzqPrJSz.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as EventUnsubscribe, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as DevframeAgentHost, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, N as ScopedRpcFn, O as DevframeSettings, Ot as DevframeAgentHostEvents, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventsMap, k as DevframeSettingsRegistry, kt as EventEmitter, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "./devframe-BADsX91-.mjs";
+import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as EventUnsubscribe, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as DevframeAgentHost, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, N as ScopedRpcFn, O as DevframeSettings, Ot as DevframeAgentHostEvents, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventsMap, k as DevframeSettingsRegistry, kt as EventEmitter, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "./devframe-Ckhf3kFw.mjs";
 import { C as RpcFunctionType, T as RpcReturnSchema, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-CrzNxXKq.mjs";
 import "./index-DgsLFhZg.mjs";
 import { t as DevframeNodeRpcSessionMeta } from "./ws-server-9-wn7MNQ.mjs";

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { p as DevframeAuthHandler } from "../devframe-BADsX91-.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-Brcd2V4t.mjs";
+import { p as DevframeAuthHandler } from "../devframe-Ckhf3kFw.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-8dndvIxR.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,5 +1,5 @@
-import { i as DevframeDeploymentKind, r as DevframeDefinition } from "../devframe-BADsX91-.mjs";
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-C_bqRR0i.mjs";
+import { i as DevframeDeploymentKind, r as DevframeDefinition } from "../devframe-Ckhf3kFw.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-CzqPrJSz.mjs";
 //#region src/adapters/_shared.d.ts
 /**
  * Resolve the mount base path for a devframe's SPA. Hosted adapters

package/dist/node/hub-internals.mjs

@@ -1,3 +1,3 @@
-import { n as internalContextMap, t as getInternalContext } from "../context-C1Gr2BGB.mjs";
+import { n as internalContextMap, t as getInternalContext } from "../context-DY72brRI.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-bWRzeSa0.mjs";
 export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,7 +1,7 @@
-import { C as DevframeServicesHost, Ct as AgentResourceContent, Dt as DevframeAgentHost$1, Et as AgentToolInput, H as DevframeDiagnosticsHost$1, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost$1, O as DevframeSettings, Ot as DevframeAgentHostEvents, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, Z as RpcStreamingHost, b as DevframeNodeContext, bt as AgentHandle, ht as SharedState, kt as EventEmitter, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest } from "../devframe-BADsX91-.mjs";
+import { C as DevframeServicesHost, Ct as AgentResourceContent, Dt as DevframeAgentHost$1, Et as AgentToolInput, H as DevframeDiagnosticsHost$1, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost$1, O as DevframeSettings, Ot as DevframeAgentHostEvents, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, Z as RpcStreamingHost, b as DevframeNodeContext, bt as AgentHandle, ht as SharedState, kt as EventEmitter, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest } from "../devframe-Ckhf3kFw.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-CrzNxXKq.mjs";
 import "../index-DgsLFhZg.mjs";
-import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-Bu5iB3aV.mjs";
+import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-B0wiP_Oi.mjs";
 import { BirpcGroup } from "birpc";
 //#region src/node/context.d.ts
 interface CreateHostContextOptions {

package/dist/node/index.mjs

@@ -1,4 +1,4 @@
-import { t as createStorage } from "../storage-D_Xy9v1l.mjs";
-import { a as DevframeViewHost, c as createRpcSharedStateServerHost, i as createNodeSettings, l as DevframeDiagnosticsHost, n as createHostContext, o as DevframeServicesHostImpl, r as createScopedNodeContext, s as createRpcStreamingServerHost, t as createH3DevframeHost, u as DevframeAgentHost } from "../host-h3-SjwRTwkE.mjs";
-import { a as toDialableHost, i as normalizeHttpServerUrl, n as formatHostForUrl, r as isObject, t as startHttpAndWs } from "../server-BFsuZI9e.mjs";
+import { t as createStorage } from "../storage-gEnj9ASQ.mjs";
+import { a as DevframeViewHost, c as createRpcSharedStateServerHost, i as createNodeSettings, l as DevframeDiagnosticsHost, n as createHostContext, o as DevframeServicesHostImpl, r as createScopedNodeContext, s as createRpcStreamingServerHost, t as createH3DevframeHost, u as DevframeAgentHost } from "../host-h3-CgOetlNE.mjs";
+import { a as toDialableHost, i as normalizeHttpServerUrl, n as formatHostForUrl, r as isObject, t as startHttpAndWs } from "../server-DykHCza_.mjs";
 export { DevframeAgentHost, DevframeDiagnosticsHost, DevframeServicesHostImpl, DevframeViewHost, createH3DevframeHost, createHostContext, createNodeSettings, createRpcSharedStateServerHost, createRpcStreamingServerHost, createScopedNodeContext, createStorage, formatHostForUrl, isObject, normalizeHttpServerUrl, startHttpAndWs, toDialableHost };

package/dist/recipes/common-rpc-functions.d.mts

@@ -1,4 +1,4 @@
-import "../devframe-BADsX91-.mjs";
+import "../devframe-Ckhf3kFw.mjs";
 import { E as Thenable, S as RpcFunctionSetupResult, c as RpcDump, g as RpcFunctionAgentOptions } from "../types-CrzNxXKq.mjs";
 import "../index-DgsLFhZg.mjs";
 import * as v from "valibot";

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { b as DevframeNodeContext, p as DevframeAuthHandler } from "../devframe-BADsX91-.mjs";
-import "../index-Brcd2V4t.mjs";
+import { b as DevframeNodeContext, p as DevframeAuthHandler } from "../devframe-Ckhf3kFw.mjs";
+import "../index-8dndvIxR.mjs";
 //#region src/recipes/interactive-auth.d.ts
 interface CreateInteractiveAuthOptions {
   /**

package/dist/recipes/interactive-auth.mjs

@@ -1,7 +1,7 @@
 import { n as colors } from "../diagnostics-reporter-CsIG85Q5.mjs";
 import { isAnonymousRpcMethod } from "../constants.mjs";
 import { n as defineRpcFunction } from "../define-BLWPsH6y.mjs";
-import { t as getInternalContext } from "../context-C1Gr2BGB.mjs";
+import { t as getInternalContext } from "../context-DY72brRI.mjs";
 import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-WX3HT5a3.mjs";
 import * as v from "valibot";
 //#region src/recipes/interactive-auth.ts

package/dist/{server-Bu5iB3aV.d.mts → server-B0wiP_Oi.d.mts}

@@ -1,5 +1,5 @@
-import { $ as DevframeRpcServerFunctions, Q as DevframeRpcClientFunctions, W as DevframeNodeRpcSession, _ as ConnectionMeta, b as DevframeNodeContext, p as DevframeAuthHandler } from "./devframe-BADsX91-.mjs";
-import "./index-Brcd2V4t.mjs";
+import { $ as DevframeRpcServerFunctions, Q as DevframeRpcClientFunctions, W as DevframeNodeRpcSession, _ as ConnectionMeta, b as DevframeNodeContext, p as DevframeAuthHandler } from "./devframe-Ckhf3kFw.mjs";
+import "./index-8dndvIxR.mjs";
 import { Peer } from "crossws";
 import { BirpcGroup, EventOptions } from "birpc";
 import { NodeAdapter } from "crossws/adapters/node";

package/dist/{server-BFsuZI9e.mjs → server-DykHCza_.mjs}

@@ -1,7 +1,7 @@
 import { createRpcServer } from "./rpc/server.mjs";
 import { attachWsRpcTransport } from "./rpc/transports/ws-server.mjs";
-import { a as diagnostics } from "./storage-D_Xy9v1l.mjs";
-import { t as getInternalContext } from "./context-C1Gr2BGB.mjs";
+import { a as diagnostics } from "./storage-gEnj9ASQ.mjs";
+import { t as getInternalContext } from "./context-DY72brRI.mjs";
 import { createServer } from "node:http";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { H3, toNodeHandler } from "h3";

package/dist/{storage-D_Xy9v1l.mjs → storage-gEnj9ASQ.mjs}

@@ -59,6 +59,10 @@ const diagnostics = defineDiagnostics({
 		DF0037: {
 			why: (p) => `A service is already provided under "${p.id}".`,
 			fix: "Service ids are unique per context. Revoke the existing provider first (the `provide()` call returns a revoke function), or namespace the id with your plugin id to avoid collisions."
+		},
+		DF0042: {
+			why: (p) => `"${p.id}" declares \`capabilities.build: false\` — its static export is not meaningful (writes are excluded and any live-served data won't be there).`,
+			fix: "Pass `{ force: true }` to `createBuild()` if the degraded export is still useful to you, or drop `capabilities.build: false` on the definition."
 		}
 	}
 });

package/dist/types/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as EventUnsubscribe, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as DevframeAgentHost, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, N as ScopedRpcFn, O as DevframeSettings, Ot as DevframeAgentHostEvents, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventsMap, k as DevframeSettingsRegistry, kt as EventEmitter, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "../devframe-BADsX91-.mjs";
+import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as EventUnsubscribe, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as DevframeAgentHost, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, N as ScopedRpcFn, O as DevframeSettings, Ot as DevframeAgentHostEvents, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventsMap, k as DevframeSettingsRegistry, kt as EventEmitter, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "../devframe-Ckhf3kFw.mjs";
 import { g as RpcFunctionAgentOptions } from "../types-CrzNxXKq.mjs";
 import { t as DevframeNodeRpcSessionMeta } from "../ws-server-9-wn7MNQ.mjs";
 export { AgentHandle, AgentManifest, AgentResource, AgentResourceContent, AgentResourceInput, AgentTool, AgentToolInput, ConnectionMeta, ConnectionMetaWebsocket, DevframeAgentHost, DevframeAgentHostEvents, DevframeBrowserContext, DevframeCapabilities, DevframeCliOptions, DevframeDefineDiagnosticsOptions, DevframeDefinition, DevframeDeploymentKind, DevframeDiagnosticsDefinition, DevframeDiagnosticsHost, DevframeDiagnosticsLogger, DevframeDockDefaults, DevframeDuplicationStrategy, DevframeHost, DevframeNodeContext, DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, DevframeRpcClientFunctions, DevframeRpcServerFunctions, DevframeRpcSharedStates, DevframeRuntime, DevframeScopedNodeContext, DevframeScopedNodeRpc, DevframeScopedStreamingHost, DevframeServiceId, DevframeServiceOf, DevframeServicesHost, DevframeServicesRegistry, DevframeSettings, DevframeSettingsRegistry, DevframeSettingsStore, DevframeSetupInfo, DevframeSpaOptions, DevframeStorageScope, DevframeViewHost, DevframeWsOptions, EntriesToObject, EventEmitter, EventUnsubscribe, EventsMap, McpRouteOptions, PartialWithoutId, RpcBroadcastOptions, type RpcFunctionAgentOptions, RpcFunctionsHost, RpcSharedStateGetOptions, RpcSharedStateHost, RpcStreamingChannel, RpcStreamingChannelOptions, RpcStreamingHost, ScopedBroadcastOptions, ScopedClientFunctions, ScopedRpcFn, ScopedServerFunctions, ScopedSharedStates, SettingsForNamespace, Thenable, defineDevframe };

package/dist/utils/events.d.mts

@@ -1,4 +1,4 @@
-import { jt as EventsMap, kt as EventEmitter } from "../devframe-BADsX91-.mjs";
+import { jt as EventsMap, kt as EventEmitter } from "../devframe-Ckhf3kFw.mjs";
 //#region src/utils/events.d.ts
 /**
  * Create event emitter.

package/dist/utils/shared-state.d.mts

@@ -1,2 +1,2 @@
-import { _t as SharedStateOptions, dt as ImmutableArray, ft as ImmutableMap, gt as SharedStateEvents, ht as SharedState, mt as ImmutableSet, pt as ImmutableObject, ut as Immutable, vt as SharedStatePatch, yt as createSharedState } from "../devframe-BADsX91-.mjs";
+import { _t as SharedStateOptions, dt as ImmutableArray, ft as ImmutableMap, gt as SharedStateEvents, ht as SharedState, mt as ImmutableSet, pt as ImmutableObject, ut as Immutable, vt as SharedStatePatch, yt as createSharedState } from "../devframe-Ckhf3kFw.mjs";
 export { Immutable, ImmutableArray, ImmutableMap, ImmutableObject, ImmutableSet, SharedState, SharedStateEvents, SharedStateOptions, SharedStatePatch, createSharedState };

package/dist/utils/streaming-channel.d.mts

@@ -1,2 +1,2 @@
-import { at as StreamReader, ct as createStreamReader, it as StreamErrorPayload, lt as createStreamSink, nt as CreateStreamReaderOptions, ot as StreamSink, rt as CreateStreamSinkOptions, st as StreamSinkEvents, tt as BufferedChunk } from "../devframe-BADsX91-.mjs";
+import { at as StreamReader, ct as createStreamReader, it as StreamErrorPayload, lt as createStreamSink, nt as CreateStreamReaderOptions, ot as StreamSink, rt as CreateStreamSinkOptions, st as StreamSinkEvents, tt as BufferedChunk } from "../devframe-Ckhf3kFw.mjs";
 export { BufferedChunk, CreateStreamReaderOptions, CreateStreamSinkOptions, StreamErrorPayload, StreamReader, StreamSink, StreamSinkEvents, createStreamReader, createStreamSink };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devframe",
   "type": "module",
-  "version": "0.7.15",
+  "version": "0.7.16",
   "description": "Framework for building generic devframes",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",
@@ -106,33 +106,6 @@
     "whenexpr": "^0.1.2",
     "ws": "^8.21.1"
   },
-  "inlinedDependencies": {
-    "bundle-name": "4.1.0",
-    "default-browser": "5.5.0",
-    "default-browser-id": "5.0.1",
-    "define-lazy-prop": "3.0.0",
-    "get-port-please": "3.2.0",
-    "immer": "11.1.8",
-    "is-docker": "3.0.0",
-    "is-in-ssh": "1.0.0",
-    "is-inside-container": "1.0.0",
-    "is-wsl": "3.1.1",
-    "launch-editor": "2.13.2",
-    "obug": "2.1.1",
-    "ohash": "2.0.11",
-    "open": "11.0.0",
-    "p-limit": "7.3.0",
-    "perfect-debounce": "2.1.0",
-    "picocolors": "1.1.1",
-    "powershell-utils": "0.1.0",
-    "run-applescript": "7.1.0",
-    "shell-quote": "1.8.3",
-    "structured-clone-es": "2.0.0",
-    "ua-parser-modern": "0.1.1",
-    "whenexpr": "0.1.2",
-    "wsl-utils": "0.3.1",
-    "yocto-queue": "1.2.2"
-  },
   "scripts": {
     "build": "tsdown",
     "watch": "tsdown --watch",