devframe 0.7.16 → 0.8.1

package/dist/client/index.mjs

@@ -20,11 +20,14 @@ const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
 const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
 const DEVFRAME_RPC_DUMP_MANIFEST_FILENAME = "__rpc-dump/index.json";
 /**
-* Page-URL query parameter carrying a one-time authentication code (OTP) for
-* "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
-* the client reads the code, exchanges it for a token, and strips the parameter
-* from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
-* `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+* Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+* for "magic link" auth. A host can print a link like
+* `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+* token, and strips the parameter from the URL. The code rides the fragment
+* (never the query string) so the browser never transmits it to the server,
+* keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+* (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+* (or `connectDevframe`'s `otpParam`).
 */
 const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -35,6 +38,10 @@ const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 * trusted before its own `anonymous:devframe:auth` handshake call arrives.
 */
 const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 //#endregion
 //#region src/utils/diagnostics-reporter.ts
 const formatAnsi = ansiFormatter(colors);
@@ -68,6 +75,14 @@ const diagnostics = defineDiagnostics({
 		DF0028: {
 			why: (p) => `Function "${p.name}" with type "${p.type}" cannot use \`snapshot: true\`. Only "query" functions support this sugar; "static" functions have equivalent default behavior already.`,
 			fix: "Remove `snapshot: true`, or change the function type to `query`."
+		},
+		DF0043: {
+			why: (p) => `RPC function "${p.name}" received an invalid argument at position ${p.index}: ${p.issues}`,
+			fix: "Pass a value that satisfies the `args` schema declared for this function."
+		},
+		DF0044: {
+			why: (p) => `RPC function "${p.name}" returned a value that failed its \`returns\` schema: ${p.issues}`,
+			fix: "Make the handler return a value that satisfies the `returns` schema, or relax the schema."
 		}
 	}
 });
@@ -92,6 +107,70 @@ function isPlainErrorShape(value) {
 	return typeof value === "object" && value !== null && typeof value.message === "string" && typeof value.name === "string";
 }
 //#endregion
+//#region src/rpc/validate-io.ts
+/**
+* Run a single [Standard Schema](https://standardschema.dev) validator,
+* awaiting the result when the validator is asynchronous.
+*/
+async function runStandardSchema(schema, value) {
+	const result = schema["~standard"].validate(value);
+	return result instanceof Promise ? await result : result;
+}
+/**
+* Render Standard Schema issues into a single human-readable line for a
+* diagnostic message, prefixing each with its dotted path when present.
+*/
+function formatIssues(issues) {
+	return issues.map((issue) => {
+		const path = issue.path?.map((segment) => typeof segment === "object" ? segment.key : segment).join(".");
+		return path ? `${path}: ${issue.message}` : issue.message;
+	}).join("; ");
+}
+/**
+* Validate positional arguments against their declared schemas. Only
+* indices with a schema are checked; extra arguments pass through
+* untouched. Throws `DF0038` on the first failing argument.
+*
+* Validation guards the payload without rewriting it: the original values
+* are handed to the handler unchanged, so a schema that describes a subset
+* of an object never silently strips the sender's extra fields (and any
+* declared transforms stay a purely type-level concern).
+*
+* @internal
+*/
+async function validateRpcArgs(name, argsSchema, args) {
+	const original = args.slice();
+	if (!argsSchema || argsSchema.length === 0) return original;
+	for (let index = 0; index < argsSchema.length; index++) {
+		const schema = argsSchema[index];
+		if (!schema) continue;
+		const result = await runStandardSchema(schema, args[index]);
+		if (result.issues) throw diagnostics.DF0043({
+			name,
+			index,
+			issues: formatIssues(result.issues)
+		});
+	}
+	return original;
+}
+/**
+* Validate a handler's resolved return value against its declared schema.
+* Throws `DF0039` when the value fails the schema, otherwise returns the
+* original value unchanged (guard-only, never rewriting the payload — see
+* {@link validateRpcArgs}). Passes through when no return schema is set.
+*
+* @internal
+*/
+async function validateRpcReturn(name, returnSchema, value) {
+	if (!returnSchema) return value;
+	const result = await runStandardSchema(returnSchema, value);
+	if (result.issues) throw diagnostics.DF0044({
+		name,
+		issues: formatIssues(result.issues)
+	});
+	return value;
+}
+//#endregion
 //#region src/rpc/handler.ts
 async function getRpcResolvedSetupResult(definition, context) {
 	if (!definition.setup) return {};
@@ -118,10 +197,22 @@ async function getRpcResolvedSetupResult(definition, context) {
 	return await definition.__promise;
 }
 async function getRpcHandler(definition, context) {
-	if (definition.handler) return definition.handler;
-	const result = await getRpcResolvedSetupResult(definition, context);
-	if (!result.handler) throw diagnostics.DF0024({ name: definition.name });
-	return result.handler;
+	let handler = definition.handler;
+	if (!handler) {
+		const result = await getRpcResolvedSetupResult(definition, context);
+		if (!result.handler) throw diagnostics.DF0024({ name: definition.name });
+		handler = result.handler;
+	}
+	const argsSchema = definition.args;
+	const returnSchema = definition.returns;
+	if (!argsSchema && !returnSchema) return handler;
+	const inner = handler;
+	const validating = async (...args) => {
+		const validatedArgs = await validateRpcArgs(definition.name, argsSchema, args);
+		const output = await inner(...validatedArgs);
+		return await validateRpcReturn(definition.name, returnSchema, output);
+	};
+	return validating;
 }
 //#endregion
 //#region src/rpc/cache.ts
@@ -344,6 +435,21 @@ function storeAuthToken(token) {
 }
 //#endregion
 //#region src/client/connection.ts
+/**
+* Allow an external viewer to connect by registering its browser origin with
+* the Devframe host. Returns `false` if the host did not provide an origin
+* registration token.
+*/
+async function registerDevframeViewerOrigin(connection, origin = globalThis.location?.origin) {
+	const token = connection.connectionMeta.viewerOriginToken;
+	if (!token || !origin) return false;
+	const url = new URL(connection.metaBaseUrl);
+	url.searchParams.set(DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, origin);
+	url.searchParams.set(DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, token);
+	const response = await fetch(url, { cache: "no-store" });
+	if (!response.ok) throw new Error(`Failed to register external viewer origin (${response.status}).`);
+	return true;
+}
 function resolveMetaBaseUrl(baseURL) {
 	const metaPath = withBase(DEVFRAME_CONNECTION_META_FILENAME, baseURL);
 	try {
@@ -446,12 +552,14 @@ function isCallableStatus(status) {
 //#endregion
 //#region src/client/otp.ts
 /**
-* Read a one-time authentication code (OTP) from the current page URL's query
-* string, without side effects. Returns `undefined` when the parameter is absent.
+* Read a one-time authentication code (OTP) from the current page URL's
+* fragment, without side effects. Returns `undefined` when the parameter is
+* absent.
 */
 function readOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 	try {
-		return new URLSearchParams(globalThis.location?.search).get(param) || void 0;
+		const hash = globalThis.location?.hash?.replace(/^#/, "") ?? "";
+		return new URLSearchParams(hash).get(param) || void 0;
 	} catch {
 		return;
 	}
@@ -459,16 +567,18 @@ function readOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 function stripParamFromUrl(param) {
 	try {
 		const url = new URL(globalThis.location.href);
-		if (!url.searchParams.has(param)) return;
-		url.searchParams.delete(param);
+		const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+		if (!fragment.has(param)) return;
+		fragment.delete(param);
+		url.hash = fragment.toString();
 		globalThis.history?.replaceState(globalThis.history.state, "", url.href);
 	} catch {}
 }
 /**
-* Read the one-time code from the page URL and remove it from the address bar
-* (and the current history entry), so the single-use code isn't left in the
-* URL, browser history, or a `Referer`. Returns the code, or `undefined` when
-* absent.
+* Read the one-time code from the page URL fragment and remove it from the
+* address bar (and the current history entry), so the single-use code isn't
+* left in the URL, browser history, or a `Referer`. Returns the code, or
+* `undefined` when absent.
 */
 function consumeOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 	const code = readOtpFromUrl(param);
@@ -2504,4 +2614,4 @@ async function getDevframeRpcClient(options = {}) {
 //#region src/client/index.ts
 const connectDevframe = getDevframeRpcClient;
 //#endregion
-export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };
+export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, registerDevframeViewerOrigin, resolveWsUrl, setupDevframeConnection };

package/dist/constants.d.mts

@@ -35,11 +35,14 @@ declare const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
  */
 declare const REMOTE_CONNECTION_KEY = "devframe-remote-connection";
 /**
- * Page-URL query parameter carrying a one-time authentication code (OTP) for
- * "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
- * the client reads the code, exchanges it for a token, and strips the parameter
- * from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
- * `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+ * Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+ * for "magic link" auth. A host can print a link like
+ * `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+ * token, and strips the parameter from the URL. The code rides the fragment
+ * (never the query string) so the browser never transmits it to the server,
+ * keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+ * (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+ * (or `connectDevframe`'s `otpParam`).
  */
 declare const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -50,6 +53,10 @@ declare const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
  * trusted before its own `anonymous:devframe:auth` handshake call arrives.
  */
 declare const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+declare const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+declare const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
  * Prefix that marks an RPC method as callable before a connection is
  * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -66,4 +73,4 @@ declare const ANONYMOUS_RPC_PREFIX = "anonymous:";
  */
 declare function isAnonymousRpcMethod(name: string): boolean;
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/constants.mjs

@@ -35,11 +35,14 @@ const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
 */
 const REMOTE_CONNECTION_KEY = "devframe-remote-connection";
 /**
-* Page-URL query parameter carrying a one-time authentication code (OTP) for
-* "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
-* the client reads the code, exchanges it for a token, and strips the parameter
-* from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
-* `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+* Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+* for "magic link" auth. A host can print a link like
+* `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+* token, and strips the parameter from the URL. The code rides the fragment
+* (never the query string) so the browser never transmits it to the server,
+* keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+* (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+* (or `connectDevframe`'s `otpParam`).
 */
 const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -50,6 +53,10 @@ const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 * trusted before its own `anonymous:devframe:auth` handshake call arrives.
 */
 const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
 * Prefix that marks an RPC method as callable before a connection is
 * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -68,4 +75,4 @@ function isAnonymousRpcMethod(name) {
 	return name.startsWith(ANONYMOUS_RPC_PREFIX);
 }
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/{context-DY72brRI.mjs → context-CQefP2jR.mjs}

@@ -1,5 +1,6 @@
-import { t as createStorage } from "./storage-gEnj9ASQ.mjs";
-import { i as randomToken, n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-BtQDKTp7.mjs";
+import { n as randomToken } from "./crypto-token-XCqTSMg9.mjs";
+import { t as createStorage } from "./storage-Dzoc3NVC.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-DZbJ7Cl0.mjs";
 import { join } from "pathe";
 //#region src/node/hub-internals/context.ts
 const internalContextMap = /* @__PURE__ */ new WeakMap();

package/dist/{context-CzqPrJSz.d.mts → context-DFzmxCLa.d.mts}

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, ht as SharedState } from "./devframe-Ckhf3kFw.mjs";
+import { b as DevframeNodeContext, ht as SharedState } from "./devframe-qgCKL683.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{revoke-BtQDKTp7.mjs → crypto-token-XCqTSMg9.mjs}

@@ -42,38 +42,4 @@ function timingSafeEqual(a, b) {
 	return mismatch === 0;
 }
 //#endregion
-//#region src/node/auth/revoke.ts
-/**
-* Flip `isTrusted` to false on any live WS clients connected with `token`
-* and broadcast the `auth:revoked` event so they can react.
-*
-* Shared between persisted-auth revocation and remote-dock token revocation.
-*/
-async function revokeActiveConnectionsForToken(context, token) {
-	const rpcHost = context.rpc;
-	if (!rpcHost?._rpcGroup) return;
-	const affectedSessionIds = /* @__PURE__ */ new Set();
-	for (const client of rpcHost._rpcGroup.clients) if (client.$meta.clientAuthToken === token) {
-		affectedSessionIds.add(client.$meta.id);
-		client.$meta.isTrusted = false;
-		client.$meta.clientAuthToken = void 0;
-	}
-	if (affectedSessionIds.size === 0) return;
-	await rpcHost.broadcast({
-		method: "devframe:auth:revoked",
-		args: [],
-		filter: (client) => affectedSessionIds.has(client.$meta.id)
-	});
-}
-/**
-* Revoke an auth token: remove from storage and notify all connected clients
-* using this token that they are no longer trusted.
-*/
-async function revokeAuthToken(context, storage, token) {
-	storage.mutate((state) => {
-		delete state.trusted[token];
-	});
-	await revokeActiveConnectionsForToken(context, token);
-}
-//#endregion
-export { timingSafeEqual as a, randomToken as i, revokeAuthToken as n, randomDigits as r, revokeActiveConnectionsForToken as t };
+export { randomToken as n, timingSafeEqual as r, randomDigits as t };

package/dist/{dev-BCeaQuGE.mjs → dev-BSHFZGZr.mjs}

@@ -1,7 +1,8 @@
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
-import { a as diagnostics } from "./storage-gEnj9ASQ.mjs";
-import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-CgOetlNE.mjs";
-import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-DykHCza_.mjs";
+import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-Kz7t5Xab.mjs";
+import { t as diagnostics } from "./diagnostics-B5-qHeqD.mjs";
+import { r as registerDevframeInstance } from "./instance-registry-D6fxYu36.mjs";
+import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-CXaDDUl0.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "./_shared-bWRzeSa0.mjs";
 import { t as open } from "./open-Deb5xmIT.mjs";
 import { mountStaticHandler } from "./utils/serve-static.mjs";
@@ -294,7 +295,7 @@ async function createDevServer(def, options = {}) {
 		const mcpPath = joinURL(basePath, mcpRoute);
 		let mountMcpHttp;
 		try {
-			({mountMcpHttp} = await import("./http-_pPbryTQ.mjs"));
+			({mountMcpHttp} = await import("./http-Dvgxujcu.mjs"));
 		} catch (error) {
 			const reason = error instanceof Error ? error.message : String(error);
 			throw diagnostics.DF0017({
@@ -344,13 +345,23 @@ async function createDevServer(def, options = {}) {
 			await maybeOpenBrowser(def, flags, `${info.origin}${basePath}`, options.openBrowser, authHandler);
 		}
 	});
-	if (mcpDispose) {
-		const closeServer = started.close;
-		started.close = async () => {
-			await mcpDispose();
-			await closeServer();
-		};
-	}
+	const registration = registerDevframeInstance({
+		pid: process$1.pid,
+		port: started.port,
+		origin: normalizeHttpServerUrl(host, started.port),
+		basePath,
+		id: def.id,
+		name: def.name,
+		rootDir: process$1.cwd(),
+		mcp: mcpConfig ? { path: joinURL(basePath, withoutLeadingSlash(mcpConfig.path ?? "__mcp")) } : null,
+		startedAt: Date.now()
+	});
+	const closeServer = started.close;
+	started.close = async () => {
+		registration.unregister();
+		await mcpDispose?.();
+		await closeServer();
+	};
 	return started;
 }
 /**

package/dist/{devframe-Ckhf3kFw.d.mts → devframe-qgCKL683.d.mts}

@@ -1,8 +1,8 @@
-import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-CrzNxXKq.mjs";
-import { S as RpcFunctionsCollectorBase } from "./index-DgsLFhZg.mjs";
-import { t as DevframeNodeRpcSessionMeta } from "./ws-server-9-wn7MNQ.mjs";
+import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-CnJSgRVa.mjs";
+import { w as RpcFunctionsCollectorBase } from "./index-Dbw1p5ch.mjs";
+import { n as DevframeNodeRpcSessionMeta } from "./ws-server-J-zkiOyp.mjs";
 import { CAC } from "cac";
-import { GenericSchema, InferOutput } from "valibot";
+import { StandardSchemaV1 } from "@standard-schema/spec";
 import { Peer } from "crossws";
 import { BirpcReturn } from "birpc";
 import { Diagnostic, DiagnosticDefinition, defineDiagnostics } from "nostics";
@@ -10,11 +10,12 @@ import { Diagnostic, DiagnosticDefinition, defineDiagnostics } from "nostics";
 /**
  * Schema map for typed CLI flags. Keys are flag names in camelCase —
  * this matches CAC's parsed-flag output ( `--no-open` → `noOpen` ). Each
- * value is a valibot schema used to both (a) derive the CAC option type
- * when the flag is registered and (b) validate / coerce the parsed
- * value before it's forwarded to `setup(ctx, { flags })`.
+ * value is any [Standard Schema](https://standardschema.dev/) validator
+ * (valibot, zod, arktype, devframe's built-in `s`, …) used to both (a)
+ * derive the CAC option type when the flag is registered and (b) validate
+ * the parsed value before it's forwarded to `setup(ctx, { flags })`.
  */
-type CliFlagsSchema = Record<string, GenericSchema>;
+type CliFlagsSchema = Record<string, StandardSchemaV1>;
 /**
  * Identity helper that preserves the literal schema-map type — use this
  * so `InferCliFlags<typeof myFlags>` resolves to the right object shape.
@@ -37,8 +38,8 @@ type CliFlagsSchema = Record<string, GenericSchema>;
  */
 declare function defineCliFlags<T extends CliFlagsSchema>(flags: T): T;
 /** Extract the parsed-output type from a {@link CliFlagsSchema}. */
-type InferCliFlags<T extends CliFlagsSchema> = { [K in keyof T]: InferOutput<T[K]>; };
-/** Validate and coerce the raw cac-parsed bag against a {@link CliFlagsSchema}. */
+type InferCliFlags<T extends CliFlagsSchema> = { [K in keyof T]: StandardSchemaV1.InferOutput<T[K]>; };
+/** Validate the raw cac-parsed bag against a {@link CliFlagsSchema}. */
 declare function parseCliFlags(schema: CliFlagsSchema, raw: Record<string, unknown>): {
   flags: Record<string, unknown>;
   issues?: string[];
@@ -138,6 +139,14 @@ interface AgentTool {
   tags?: readonly string[];
   /** Present for `kind === 'rpc'` — points to the RPC function name. */
   rpcName?: string;
+  /**
+   * Positional Standard Schemas describing a `kind: 'tool'` entry's
+   * arguments — carried on the tool itself (mirroring how `rpcName` defers
+   * an RPC-backed tool's schemas to `ctx.rpc.definitions`) so consumers
+   * (e.g. the MCP adapter) convert Standard Schema → JSON Schema on demand,
+   * same as RPC `args`.
+   */
+  args?: readonly StandardSchemaV1[];
   /** JSON Schema describing the input (positional args synthesized to an object). */
   inputSchema?: unknown;
   /** JSON Schema describing the output. */
@@ -160,6 +169,17 @@ interface AgentToolInput {
   description: string;
   safety?: 'read' | 'action' | 'destructive';
   tags?: readonly string[];
+  /**
+   * Positional Standard Schemas describing the tool's arguments — the same
+   * shape RPC definitions carry (any [Standard Schema](https://standardschema.dev/)
+   * validator: valibot, zod, arktype, devframe's built-in `s` builder, …).
+   * Each is advertised under `arg0` / `arg1` / … on the tool's JSON-Schema
+   * input, matching how the agent bridge coerces the incoming payload back
+   * into positional arguments. Purely descriptive: the handler still
+   * receives the caller's args object as-is.
+   */
+  args?: readonly StandardSchemaV1[];
+  /** Raw JSON-Schema input override. Prefer {@link args}. */
   inputSchema?: unknown;
   outputSchema?: unknown;
   examples?: readonly {
@@ -227,6 +247,33 @@ interface AgentManifest {
 interface AgentHandle {
   unregister: () => void;
 }
+/**
+ * A lazy source of agent tools, queried at `list()` / `getTool()` /
+ * `invoke()` time — the same on-demand projection the host applies to
+ * `agent`-flagged RPC definitions. Use a provider when tools *derive from*
+ * other state (a command registry, a plugin catalog): the underlying state
+ * stays the single source of truth and nothing needs to be kept in sync.
+ *
+ * Providers should namespace tool ids like any other tool; on an id
+ * collision the earlier source wins (registered tools, then RPC tools,
+ * then providers in registration order).
+ *
+ * @experimental
+ */
+type AgentToolProvider = () => readonly AgentToolInput[];
+/**
+ * Handle returned by `registerToolProvider`.
+ *
+ * @experimental
+ */
+interface AgentToolProviderHandle extends AgentHandle {
+  /**
+   * Signal that the provider's tool set changed. Fires
+   * `agent:manifest:changed` so protocol adapters (e.g. MCP) emit
+   * `tools/list_changed`.
+   */
+  notifyChanged: () => void;
+}
 /**
  * Events emitted by `DevframeAgentHost`.
  *
@@ -262,6 +309,11 @@ interface DevframeAgentHost {
   registerTool: (tool: AgentToolInput) => AgentHandle;
   /** Unregister a previously registered tool by id. */
   unregisterTool: (id: string) => boolean;
+  /**
+   * Register a lazy tool source, queried on demand — see
+   * {@link AgentToolProvider}.
+   */
+  registerToolProvider: (provider: AgentToolProvider) => AgentToolProviderHandle;
   /** Register a readable resource. */
   registerResource: (resource: AgentResourceInput) => AgentHandle;
   /** Unregister a previously registered resource by id. */
@@ -1362,6 +1414,15 @@ interface ConnectionMeta {
    * > from a publicly reachable static `__connection.json`.
    */
   authToken?: string;
+  /**
+   * Session-scoped token that lets a trusted external viewer register its
+   * browser origin before opening the WebSocket. The host includes it in the
+   * connection metadata, which the viewer obtains through the host page.
+   *
+   * Treat this as a bearer credential. Keep connection metadata containing the
+   * token same-origin until the requesting origin has been verified.
+   */
+  viewerOriginToken?: string;
 }
 //#endregion
 //#region src/types/utils.d.ts
@@ -1579,10 +1640,11 @@ interface DevframeCliOptions {
    */
   configure?: (cli: CAC) => void;
   /**
-   * Typed CLI flags for the default `dev` command, backed by valibot
-   * schemas. The adapter registers matching `--kebab-key` options on
-   * CAC, validates the parsed values, and forwards the typed bag to
-   * `setup(ctx, { flags })`.
+   * Typed CLI flags for the default `dev` command, backed by any
+   * [Standard Schema](https://standardschema.dev/) validator (valibot,
+   * zod, arktype, or devframe's built-in `s`). The adapter registers
+   * matching `--kebab-key` options on CAC, validates the parsed values,
+   * and forwards the typed bag to `setup(ctx, { flags })`.
    *
    * Use {@link defineCliFlags} to preserve the literal schema-map
    * shape, and {@link InferCliFlags} to recover the typed output at the
@@ -1737,4 +1799,4 @@ interface DevframeDefinition {
 }
 declare function defineDevframe(d: DevframeDefinition): DevframeDefinition;
 //#endregion
-export { DevframeRpcServerFunctions as $, DevframeSettingsStore as A, EventUnsubscribe as At, DevframeDefineDiagnosticsOptions as B, DevframeServicesHost as C, AgentResourceContent as Ct, DevframeScopedStreamingHost as D, DevframeAgentHost as Dt, DevframeScopedNodeRpc as E, AgentToolInput as Et, ScopedSharedStates as F, parseCliFlags as Ft, RpcBroadcastOptions as G, DevframeDiagnosticsHost as H, SettingsForNamespace as I, RpcSharedStateHost as J, RpcFunctionsHost as K, DevframeViewHost as L, ScopedClientFunctions as M, CliFlagsSchema as Mt, ScopedRpcFn as N, InferCliFlags as Nt, DevframeSettings as O, DevframeAgentHostEvents as Ot, ScopedServerFunctions as P, defineCliFlags as Pt, DevframeRpcClientFunctions as Q, DevframeHost as R, DevframeServiceOf as S, AgentResource as St, DevframeScopedNodeContext as T, AgentTool as Tt, DevframeDiagnosticsLogger as U, DevframeDiagnosticsDefinition as V, DevframeNodeRpcSession as W, RpcStreamingChannelOptions as X, RpcStreamingChannel as Y, RpcStreamingHost as Z, ConnectionMeta as _, SharedStateOptions as _t, DevframeDockDefaults as a, StreamReader as at, DevframeNodeContext as b, AgentHandle as bt, DevframeSetupInfo as c, createStreamReader as ct, McpRouteOptions as d, ImmutableArray as dt, DevframeRpcSharedStates as et, defineDevframe as f, ImmutableMap as ft, Thenable as g, SharedStateEvents as gt, PartialWithoutId as h, SharedState as ht, DevframeDeploymentKind as i, StreamErrorPayload as it, ScopedBroadcastOptions as j, EventsMap as jt, DevframeSettingsRegistry as k, EventEmitter as kt, DevframeSpaOptions as l, createStreamSink as lt, EntriesToObject as m, ImmutableSet as mt, DevframeCliOptions as n, CreateStreamReaderOptions as nt, DevframeDuplicationStrategy as o, StreamSink as ot, DevframeAuthHandler as p, ImmutableObject as pt, RpcSharedStateGetOptions as q, DevframeDefinition as r, CreateStreamSinkOptions as rt, DevframeRuntime as s, StreamSinkEvents as st, DevframeBrowserContext as t, BufferedChunk as tt, DevframeWsOptions as u, Immutable as ut, ConnectionMetaWebsocket as v, SharedStatePatch as vt, DevframeServicesRegistry as w, AgentResourceInput as wt, DevframeServiceId as x, AgentManifest as xt, DevframeCapabilities as y, createSharedState as yt, DevframeStorageScope as z };
+export { DevframeRpcServerFunctions as $, DevframeSettingsStore as A, DevframeAgentHostEvents as At, DevframeDefineDiagnosticsOptions as B, DevframeServicesHost as C, AgentResourceContent as Ct, DevframeScopedStreamingHost as D, AgentToolProvider as Dt, DevframeScopedNodeRpc as E, AgentToolInput as Et, ScopedSharedStates as F, InferCliFlags as Ft, RpcBroadcastOptions as G, DevframeDiagnosticsHost as H, SettingsForNamespace as I, defineCliFlags as It, RpcSharedStateHost as J, RpcFunctionsHost as K, DevframeViewHost as L, parseCliFlags as Lt, ScopedClientFunctions as M, EventUnsubscribe as Mt, ScopedRpcFn as N, EventsMap as Nt, DevframeSettings as O, AgentToolProviderHandle as Ot, ScopedServerFunctions as P, CliFlagsSchema as Pt, DevframeRpcClientFunctions as Q, DevframeHost as R, DevframeServiceOf as S, AgentResource as St, DevframeScopedNodeContext as T, AgentTool as Tt, DevframeDiagnosticsLogger as U, DevframeDiagnosticsDefinition as V, DevframeNodeRpcSession as W, RpcStreamingChannelOptions as X, RpcStreamingChannel as Y, RpcStreamingHost as Z, ConnectionMeta as _, SharedStateOptions as _t, DevframeDockDefaults as a, StreamReader as at, DevframeNodeContext as b, AgentHandle as bt, DevframeSetupInfo as c, createStreamReader as ct, McpRouteOptions as d, ImmutableArray as dt, DevframeRpcSharedStates as et, defineDevframe as f, ImmutableMap as ft, Thenable as g, SharedStateEvents as gt, PartialWithoutId as h, SharedState as ht, DevframeDeploymentKind as i, StreamErrorPayload as it, ScopedBroadcastOptions as j, EventEmitter as jt, DevframeSettingsRegistry as k, DevframeAgentHost as kt, DevframeSpaOptions as l, createStreamSink as lt, EntriesToObject as m, ImmutableSet as mt, DevframeCliOptions as n, CreateStreamReaderOptions as nt, DevframeDuplicationStrategy as o, StreamSink as ot, DevframeAuthHandler as p, ImmutableObject as pt, RpcSharedStateGetOptions as q, DevframeDefinition as r, CreateStreamSinkOptions as rt, DevframeRuntime as s, StreamSinkEvents as st, DevframeBrowserContext as t, BufferedChunk as tt, DevframeWsOptions as u, Immutable as ut, ConnectionMetaWebsocket as v, SharedStatePatch as vt, DevframeServicesRegistry as w, AgentResourceInput as wt, DevframeServiceId as x, AgentManifest as xt, DevframeCapabilities as y, createSharedState as yt, DevframeStorageScope as z };