devframe 0.8.0 → 0.8.1

package/dist/adapters/build.d.mts

@@ -1,4 +1,4 @@
-import { r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { r as DevframeDefinition } from "../devframe-qgCKL683.mjs";
 //#region src/adapters/build.d.ts
 interface CreateBuildOptions {
   /** Output directory. Defaults to `dist-static`. */

package/dist/adapters/cac.d.mts

@@ -1,4 +1,4 @@
-import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema, r as DevframeDefinition } from "../devframe-qgCKL683.mjs";
 import { CAC } from "cac";
 import { H3 } from "h3";
 //#region src/adapters/cac.d.ts

package/dist/adapters/cac.mjs

@@ -1,2 +1,2 @@
-import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-B-R_tDGJ.mjs";
+import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-B1LM3zit.mjs";
 export { createCac, defineCliFlags, parseCliFlags };

package/dist/adapters/cli.d.mts

@@ -1,4 +1,4 @@
-import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema } from "../devframe-Dsjn_Xtq.mjs";
+import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema } from "../devframe-qgCKL683.mjs";
 import { CacHandle, CreateCacOptions, createCac } from "./cac.mjs";
 //#region src/adapters/cli.d.ts
 /** @deprecated Use `createCac` from `devframe/adapters/cac` instead. */

package/dist/adapters/cli.mjs

@@ -1,4 +1,4 @@
-import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-B-R_tDGJ.mjs";
+import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-B1LM3zit.mjs";
 //#region src/adapters/cli.ts
 /** @deprecated Use `createCac` from `devframe/adapters/cac` instead. */
 const createCli = createCac;

package/dist/adapters/dev.d.mts

@@ -1,5 +1,5 @@
-import { _ as ConnectionMeta, d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeWsOptions } from "../devframe-Dsjn_Xtq.mjs";
-import { n as StartedServer } from "../server-VLQJouOO.mjs";
+import { _ as ConnectionMeta, d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeWsOptions } from "../devframe-qgCKL683.mjs";
+import { n as StartedServer } from "../server-E9z4ZWbd.mjs";
 import { H3 } from "h3";
 //#region src/adapters/dev.d.ts
 interface CreateDevServerOptions {

package/dist/adapters/dev.mjs

@@ -1,2 +1,2 @@
-import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-D4M7Veo7.mjs";
+import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-BSHFZGZr.mjs";
 export { createDevServer, resolveDevServerPort, resolveMcpConnectionMeta };

package/dist/adapters/embedded.d.mts

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-qgCKL683.mjs";
 //#region src/adapters/embedded.d.ts
 interface CreateEmbeddedOptions {
   /** Target context the devframe is registered into. Required. */

package/dist/adapters/mcp.d.mts

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-qgCKL683.mjs";
 import "@modelcontextprotocol/server";
 //#region src/adapters/mcp/build-server.d.ts
 interface CreateMcpServerOptions {
@@ -47,7 +47,12 @@ interface CreateMcpFetchHandlerOptions {
   exposeSharedState: boolean | ((key: string) => boolean);
   /**
    * Origin allow-list beyond the loopback default. `false` disables the
-   * origin gate entirely. Default: loopback-only (mirrors the WS transport).
+   * origin gate entirely. Default: loopback-only.
+   *
+   * Unlike the WS transport, the MCP route does **not** allow `Origin`-less
+   * requests: a route-based endpoint is reachable by any local process, so a
+   * request must carry an `Origin` that passes the gate. Native clients
+   * (e.g. `devframe connect`) send their loopback origin explicitly.
    */
   allowedOrigins?: readonly string[] | false;
 }
@@ -71,9 +76,10 @@ interface McpFetchHandler {
  * and MCP server (built from the shared, live `ctx` via
  * `buildMcpServerFromContext`), correlated by the `Mcp-Session-Id` header: an
  * `initialize` POST spins up a session; later requests route to it; a `DELETE`
- * (or client disconnect) tears it down. The origin gate applies devframe's
- * loopback-default DNS-rebinding protection (identical semantics to the WS
- * upgrade's `isAllowedOrigin`).
+ * (or client disconnect) tears it down. The origin gate guards every request:
+ * loopback-default DNS-rebinding protection that — unlike the WS upgrade's
+ * `isAllowedOrigin` — also rejects `Origin`-less requests, so a route-based
+ * endpoint isn't reachable by an arbitrary local process.
  *
  * @experimental
  */

package/dist/adapters/mcp.mjs

@@ -1,2 +1,2 @@
-import { n as createMcpServer, t as createMcpFetchHandler } from "../fetch-BZyK4v6W.mjs";
+import { n as createMcpServer, t as createMcpFetchHandler } from "../fetch-CK0S253E.mjs";
 export { createMcpFetchHandler, createMcpServer };

package/dist/{cac-B-R_tDGJ.mjs → cac-B1LM3zit.mjs}

@@ -1,6 +1,6 @@
 import { n as colors } from "./diagnostics-reporter-CsIG85Q5.mjs";
 import { createBuild } from "./adapters/build.mjs";
-import { n as resolveDevServerPort, t as createDevServer } from "./dev-D4M7Veo7.mjs";
+import { n as resolveDevServerPort, t as createDevServer } from "./dev-BSHFZGZr.mjs";
 import process from "node:process";
 import cac$1 from "cac";
 //#region src/adapters/flags.ts

package/dist/cli/main.mjs

@@ -200,7 +200,8 @@ async function call(sdk, options, args) {
 	});
 }
 async function withInstanceClient(sdk, url, fn) {
-	const transport = new sdk.StreamableHTTPClientTransport(new URL(url));
+	const origin = new URL(url).origin;
+	const transport = new sdk.StreamableHTTPClientTransport(new URL(url), { requestInit: { headers: { origin } } });
 	const client = new sdk.Client({
 		name: "devframe-connect",
 		version: "0.0.0"

package/dist/client/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as DevframeRpcServerFunctions, F as ScopedSharedStates, I as SettingsForNamespace, J as RpcSharedStateHost, N as ScopedRpcFn, O as DevframeSettings, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, _ as ConnectionMeta, at as StreamReader, ht as SharedState, jt as EventEmitter, ot as StreamSink, q as RpcSharedStateGetOptions } from "../devframe-Dsjn_Xtq.mjs";
+import { $ as DevframeRpcServerFunctions, F as ScopedSharedStates, I as SettingsForNamespace, J as RpcSharedStateHost, N as ScopedRpcFn, O as DevframeSettings, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, _ as ConnectionMeta, at as StreamReader, ht as SharedState, jt as EventEmitter, ot as StreamSink, q as RpcSharedStateGetOptions } from "../devframe-qgCKL683.mjs";
 import { _ as RpcFunctionDefinition, w as RpcFunctionsCollector } from "../types-CnJSgRVa.mjs";
 import { E as RpcCacheOptions, T as RpcCacheManager } from "../index-Dbw1p5ch.mjs";
 import { t as WsRpcChannelOptions } from "../ws-client-B6Tnr0ic.mjs";
@@ -26,6 +26,12 @@ interface SetupDevframeConnectionOptions {
   /** Override the locally stored auth token. */
   authToken?: string;
 }
+/**
+ * Allow an external viewer to connect by registering its browser origin with
+ * the Devframe host. Returns `false` if the host did not provide an origin
+ * registration token.
+ */
+declare function registerDevframeViewerOrigin(connection: DevframeConnection, origin?: any): Promise<boolean>;
 /**
  * Return connection information previously prepared in this window or an
  * accessible parent window.
@@ -377,15 +383,16 @@ declare function getDevframeRpcClient(options?: DevframeRpcClientOptions): Promi
 //#endregion
 //#region src/client/otp.d.ts
 /**
- * Read a one-time authentication code (OTP) from the current page URL's query
- * string, without side effects. Returns `undefined` when the parameter is absent.
+ * Read a one-time authentication code (OTP) from the current page URL's
+ * fragment, without side effects. Returns `undefined` when the parameter is
+ * absent.
  */
 declare function readOtpFromUrl(param?: string): string | undefined;
 /**
- * Read the one-time code from the page URL and remove it from the address bar
- * (and the current history entry), so the single-use code isn't left in the
- * URL, browser history, or a `Referer`. Returns the code, or `undefined` when
- * absent.
+ * Read the one-time code from the page URL fragment and remove it from the
+ * address bar (and the current history entry), so the single-use code isn't
+ * left in the URL, browser history, or a `Referer`. Returns the code, or
+ * `undefined` when absent.
  */
 declare function consumeOtpFromUrl(param?: string): string | undefined;
 /**
@@ -402,6 +409,28 @@ declare function authenticateWithUrlOtp(rpc: Pick<DevframeRpcClient, 'isTrusted'
   param?: string;
 }): Promise<boolean>;
 //#endregion
+//#region src/client/rpc-ws.d.ts
+/** Minimal subset of `window.location` needed to resolve a WS URL. */
+interface WsUrlLocation {
+  protocol: string;
+  host: string;
+  hostname: string;
+  href: string;
+}
+/**
+ * Resolve a {@link ConnectionMeta.websocket} descriptor into a concrete
+ * `ws(s)://` URL.
+ *
+ * The object / relative-path forms connect to the page's own origin (only the
+ * `http`→`ws` protocol swap is applied), resolving the path against where
+ * `__connection.json` was loaded. This is deliberately host-agnostic so the
+ * connection survives a reverse proxy that changes the domain or port — the
+ * client trusts its own location, never a server-baked hostname. An explicit
+ * `port`/`host` (or a full `ws(s)://` URL string) opts into a cross-origin
+ * endpoint, e.g. a side-car server on its own port.
+ */
+declare function resolveWsUrl(websocket: ConnectionMeta['websocket'], metaBaseUrl: string, loc: WsUrlLocation): string;
+//#endregion
 //#region src/client/settings.d.ts
 /**
  * Build the client-side `settings` surface for a scope namespace. Mirrors
@@ -412,4 +441,4 @@ declare function createClientSettings<T extends Record<string, any> = Record<str
 //#region src/client/index.d.ts
 declare const connectDevframe: typeof getDevframeRpcClient;
 //#endregion
-export { DevframeClientRpcHost, DevframeConnection, DevframeConnectionError, DevframeConnectionErrorKind, DevframeConnectionStatus, DevframeRpcClient, DevframeRpcClientCall, DevframeRpcClientCallEvent, DevframeRpcClientCallOptional, DevframeRpcClientMode, DevframeRpcClientOptions, DevframeRpcContext, DevframeScopedClientContext, DevframeScopedClientRpc, DevframeScopedClientStreamingHost, RpcClientEvents, RpcStreamingClientHost, SetupDevframeConnectionOptions, StreamingSubscribeOptions, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };
+export { DevframeClientRpcHost, DevframeConnection, DevframeConnectionError, DevframeConnectionErrorKind, DevframeConnectionStatus, DevframeRpcClient, DevframeRpcClientCall, DevframeRpcClientCallEvent, DevframeRpcClientCallOptional, DevframeRpcClientMode, DevframeRpcClientOptions, DevframeRpcContext, DevframeScopedClientContext, DevframeScopedClientRpc, DevframeScopedClientStreamingHost, RpcClientEvents, RpcStreamingClientHost, SetupDevframeConnectionOptions, StreamingSubscribeOptions, type WsUrlLocation, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, registerDevframeViewerOrigin, resolveWsUrl, setupDevframeConnection };

package/dist/client/index.mjs

@@ -20,11 +20,14 @@ const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
 const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
 const DEVFRAME_RPC_DUMP_MANIFEST_FILENAME = "__rpc-dump/index.json";
 /**
-* Page-URL query parameter carrying a one-time authentication code (OTP) for
-* "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
-* the client reads the code, exchanges it for a token, and strips the parameter
-* from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
-* `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+* Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+* for "magic link" auth. A host can print a link like
+* `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+* token, and strips the parameter from the URL. The code rides the fragment
+* (never the query string) so the browser never transmits it to the server,
+* keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+* (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+* (or `connectDevframe`'s `otpParam`).
 */
 const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -35,6 +38,10 @@ const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 * trusted before its own `anonymous:devframe:auth` handshake call arrives.
 */
 const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 //#endregion
 //#region src/utils/diagnostics-reporter.ts
 const formatAnsi = ansiFormatter(colors);
@@ -428,6 +435,21 @@ function storeAuthToken(token) {
 }
 //#endregion
 //#region src/client/connection.ts
+/**
+* Allow an external viewer to connect by registering its browser origin with
+* the Devframe host. Returns `false` if the host did not provide an origin
+* registration token.
+*/
+async function registerDevframeViewerOrigin(connection, origin = globalThis.location?.origin) {
+	const token = connection.connectionMeta.viewerOriginToken;
+	if (!token || !origin) return false;
+	const url = new URL(connection.metaBaseUrl);
+	url.searchParams.set(DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, origin);
+	url.searchParams.set(DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, token);
+	const response = await fetch(url, { cache: "no-store" });
+	if (!response.ok) throw new Error(`Failed to register external viewer origin (${response.status}).`);
+	return true;
+}
 function resolveMetaBaseUrl(baseURL) {
 	const metaPath = withBase(DEVFRAME_CONNECTION_META_FILENAME, baseURL);
 	try {
@@ -530,12 +552,14 @@ function isCallableStatus(status) {
 //#endregion
 //#region src/client/otp.ts
 /**
-* Read a one-time authentication code (OTP) from the current page URL's query
-* string, without side effects. Returns `undefined` when the parameter is absent.
+* Read a one-time authentication code (OTP) from the current page URL's
+* fragment, without side effects. Returns `undefined` when the parameter is
+* absent.
 */
 function readOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 	try {
-		return new URLSearchParams(globalThis.location?.search).get(param) || void 0;
+		const hash = globalThis.location?.hash?.replace(/^#/, "") ?? "";
+		return new URLSearchParams(hash).get(param) || void 0;
 	} catch {
 		return;
 	}
@@ -543,16 +567,18 @@ function readOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 function stripParamFromUrl(param) {
 	try {
 		const url = new URL(globalThis.location.href);
-		if (!url.searchParams.has(param)) return;
-		url.searchParams.delete(param);
+		const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+		if (!fragment.has(param)) return;
+		fragment.delete(param);
+		url.hash = fragment.toString();
 		globalThis.history?.replaceState(globalThis.history.state, "", url.href);
 	} catch {}
 }
 /**
-* Read the one-time code from the page URL and remove it from the address bar
-* (and the current history entry), so the single-use code isn't left in the
-* URL, browser history, or a `Referer`. Returns the code, or `undefined` when
-* absent.
+* Read the one-time code from the page URL fragment and remove it from the
+* address bar (and the current history entry), so the single-use code isn't
+* left in the URL, browser history, or a `Referer`. Returns the code, or
+* `undefined` when absent.
 */
 function consumeOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 	const code = readOtpFromUrl(param);
@@ -2588,4 +2614,4 @@ async function getDevframeRpcClient(options = {}) {
 //#region src/client/index.ts
 const connectDevframe = getDevframeRpcClient;
 //#endregion
-export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };
+export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, registerDevframeViewerOrigin, resolveWsUrl, setupDevframeConnection };

package/dist/constants.d.mts

@@ -35,11 +35,14 @@ declare const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
  */
 declare const REMOTE_CONNECTION_KEY = "devframe-remote-connection";
 /**
- * Page-URL query parameter carrying a one-time authentication code (OTP) for
- * "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
- * the client reads the code, exchanges it for a token, and strips the parameter
- * from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
- * `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+ * Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+ * for "magic link" auth. A host can print a link like
+ * `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+ * token, and strips the parameter from the URL. The code rides the fragment
+ * (never the query string) so the browser never transmits it to the server,
+ * keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+ * (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+ * (or `connectDevframe`'s `otpParam`).
  */
 declare const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -50,6 +53,10 @@ declare const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
  * trusted before its own `anonymous:devframe:auth` handshake call arrives.
  */
 declare const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+declare const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+declare const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
  * Prefix that marks an RPC method as callable before a connection is
  * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -66,4 +73,4 @@ declare const ANONYMOUS_RPC_PREFIX = "anonymous:";
  */
 declare function isAnonymousRpcMethod(name: string): boolean;
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/constants.mjs

@@ -35,11 +35,14 @@ const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
 */
 const REMOTE_CONNECTION_KEY = "devframe-remote-connection";
 /**
-* Page-URL query parameter carrying a one-time authentication code (OTP) for
-* "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
-* the client reads the code, exchanges it for a token, and strips the parameter
-* from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
-* `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+* Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+* for "magic link" auth. A host can print a link like
+* `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+* token, and strips the parameter from the URL. The code rides the fragment
+* (never the query string) so the browser never transmits it to the server,
+* keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+* (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+* (or `connectDevframe`'s `otpParam`).
 */
 const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -50,6 +53,10 @@ const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 * trusted before its own `anonymous:devframe:auth` handshake call arrives.
 */
 const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
 * Prefix that marks an RPC method as callable before a connection is
 * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -68,4 +75,4 @@ function isAnonymousRpcMethod(name) {
 	return name.startsWith(ANONYMOUS_RPC_PREFIX);
 }
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/{context-C9Cgm1hP.mjs → context-CQefP2jR.mjs}

@@ -1,5 +1,6 @@
+import { n as randomToken } from "./crypto-token-XCqTSMg9.mjs";
 import { t as createStorage } from "./storage-Dzoc3NVC.mjs";
-import { i as randomToken, n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-BtQDKTp7.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-DZbJ7Cl0.mjs";
 import { join } from "pathe";
 //#region src/node/hub-internals/context.ts
 const internalContextMap = /* @__PURE__ */ new WeakMap();

package/dist/{context-7BbaIUSI.d.mts → context-DFzmxCLa.d.mts}

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, ht as SharedState } from "./devframe-Dsjn_Xtq.mjs";
+import { b as DevframeNodeContext, ht as SharedState } from "./devframe-qgCKL683.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{revoke-BtQDKTp7.mjs → crypto-token-XCqTSMg9.mjs}

@@ -42,38 +42,4 @@ function timingSafeEqual(a, b) {
 	return mismatch === 0;
 }
 //#endregion
-//#region src/node/auth/revoke.ts
-/**
-* Flip `isTrusted` to false on any live WS clients connected with `token`
-* and broadcast the `auth:revoked` event so they can react.
-*
-* Shared between persisted-auth revocation and remote-dock token revocation.
-*/
-async function revokeActiveConnectionsForToken(context, token) {
-	const rpcHost = context.rpc;
-	if (!rpcHost?._rpcGroup) return;
-	const affectedSessionIds = /* @__PURE__ */ new Set();
-	for (const client of rpcHost._rpcGroup.clients) if (client.$meta.clientAuthToken === token) {
-		affectedSessionIds.add(client.$meta.id);
-		client.$meta.isTrusted = false;
-		client.$meta.clientAuthToken = void 0;
-	}
-	if (affectedSessionIds.size === 0) return;
-	await rpcHost.broadcast({
-		method: "devframe:auth:revoked",
-		args: [],
-		filter: (client) => affectedSessionIds.has(client.$meta.id)
-	});
-}
-/**
-* Revoke an auth token: remove from storage and notify all connected clients
-* using this token that they are no longer trusted.
-*/
-async function revokeAuthToken(context, storage, token) {
-	storage.mutate((state) => {
-		delete state.trusted[token];
-	});
-	await revokeActiveConnectionsForToken(context, token);
-}
-//#endregion
-export { timingSafeEqual as a, randomToken as i, revokeAuthToken as n, randomDigits as r, revokeActiveConnectionsForToken as t };
+export { randomToken as n, timingSafeEqual as r, randomDigits as t };

package/dist/{dev-D4M7Veo7.mjs → dev-BSHFZGZr.mjs}

@@ -2,7 +2,7 @@ import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
 import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-Kz7t5Xab.mjs";
 import { t as diagnostics } from "./diagnostics-B5-qHeqD.mjs";
 import { r as registerDevframeInstance } from "./instance-registry-D6fxYu36.mjs";
-import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-CcAPxuoT.mjs";
+import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-CXaDDUl0.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "./_shared-bWRzeSa0.mjs";
 import { t as open } from "./open-Deb5xmIT.mjs";
 import { mountStaticHandler } from "./utils/serve-static.mjs";
@@ -295,7 +295,7 @@ async function createDevServer(def, options = {}) {
 		const mcpPath = joinURL(basePath, mcpRoute);
 		let mountMcpHttp;
 		try {
-			({mountMcpHttp} = await import("./http-BghOqfTD.mjs"));
+			({mountMcpHttp} = await import("./http-Dvgxujcu.mjs"));
 		} catch (error) {
 			const reason = error instanceof Error ? error.message : String(error);
 			throw diagnostics.DF0017({

package/dist/{devframe-Dsjn_Xtq.d.mts → devframe-qgCKL683.d.mts}

@@ -1,6 +1,6 @@
 import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-CnJSgRVa.mjs";
 import { w as RpcFunctionsCollectorBase } from "./index-Dbw1p5ch.mjs";
-import { t as DevframeNodeRpcSessionMeta } from "./ws-server-D_Vjtums.mjs";
+import { n as DevframeNodeRpcSessionMeta } from "./ws-server-J-zkiOyp.mjs";
 import { CAC } from "cac";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 import { Peer } from "crossws";
@@ -1414,6 +1414,15 @@ interface ConnectionMeta {
    * > from a publicly reachable static `__connection.json`.
    */
   authToken?: string;
+  /**
+   * Session-scoped token that lets a trusted external viewer register its
+   * browser origin before opening the WebSocket. The host includes it in the
+   * connection metadata, which the viewer obtains through the host page.
+   *
+   * Treat this as a bearer credential. Keep connection metadata containing the
+   * token same-origin until the requesting origin has been verified.
+   */
+  viewerOriginToken?: string;
 }
 //#endregion
 //#region src/types/utils.d.ts

package/dist/{fetch-BZyK4v6W.mjs → fetch-CK0S253E.mjs}

@@ -457,9 +457,10 @@ function parseResourceUri(uri) {
 * and MCP server (built from the shared, live `ctx` via
 * `buildMcpServerFromContext`), correlated by the `Mcp-Session-Id` header: an
 * `initialize` POST spins up a session; later requests route to it; a `DELETE`
-* (or client disconnect) tears it down. The origin gate applies devframe's
-* loopback-default DNS-rebinding protection (identical semantics to the WS
-* upgrade's `isAllowedOrigin`).
+* (or client disconnect) tears it down. The origin gate guards every request:
+* loopback-default DNS-rebinding protection that — unlike the WS upgrade's
+* `isAllowedOrigin` — also rejects `Origin`-less requests, so a route-based
+* endpoint isn't reachable by an arbitrary local process.
 *
 * @experimental
 */
@@ -503,7 +504,7 @@ function createMcpFetchHandler(ctx, options) {
 	}
 	async function handle(req) {
 		const origin = req.headers.get("origin") ?? void 0;
-		if (allowedOrigins !== false && !isAllowedOrigin(origin, allowedOrigins ?? [])) return new Response("Forbidden: origin not allowed", { status: 403 });
+		if (allowedOrigins !== false && (origin === void 0 || !isAllowedOrigin(origin, allowedOrigins ?? []))) return new Response("Forbidden: origin required", { status: 403 });
 		const sessionId = req.headers.get("mcp-session-id") ?? void 0;
 		let session = sessionId ? sessions.get(sessionId) : void 0;
 		if (!session && req.method === "POST") {

package/dist/helpers/vite.d.mts

@@ -1,4 +1,4 @@
-import { d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition } from "../devframe-qgCKL683.mjs";
 //#region src/helpers/vite.d.ts
 interface ViteDevBridgeOptions {
   /**
@@ -31,16 +31,17 @@ interface ViteDevBridgeOptions {
     flags?: Record<string, unknown>;
   };
   /**
-   * Whether the bridged devframe runs its own auth gate. This is a **hosted**
-   * adapter — the devframe shares the host app's origin and the host owns
-   * authentication — so it defaults to `false`: the plugin's own gate never
-   * fires and its `cli.auth` default is ignored (matching devframe's
-   * hosted-deployment contract). Pass `true` to force devframe's interactive
-   * OTP gate on, or a {@link DevframeAuthHandler} to install a custom scheme.
-   * Only applies in bridge mode (`devMiddleware`); the static-mount mode
+   * Whether the bridged devframe runs its own auth gate. The side-car RPC
+   * server is reachable by anything that can open its socket, so it **gates by
+   * default**: when unset, authentication resolves through `createDevServer`
+   * (devframe's interactive OTP gate unless the definition's `cli.auth` opts
+   * out), and the side-car prints its code/link banner to stdout. Pass a
+   * {@link DevframeAuthHandler} to install a custom scheme, or `false` to opt
+   * out for a single-user localhost host that owns the trust boundary another
+   * way. Only applies in bridge mode (`devMiddleware`); the static-mount mode
    * starts no RPC server.
    *
-   * @default false
+   * @default gated (devframe's interactive OTP, unless `cli.auth` opts out)
    */
   auth?: boolean | DevframeAuthHandler;
   /**
@@ -84,11 +85,11 @@ interface DevframeVitePlugin {
  *     host-served SPA can discover the WS endpoint via
  *     {@link connectDevframe}.
  *
- * As a hosted adapter the bridge defers authentication to the host: its
- * side-car RPC server runs with the plugin's own auth gate **off** by
- * default (ignoring `def.cli?.auth`), so a plugin mounted this way never
- * triggers its standalone OTP prompt. Opt back in per-mount with
- * `options.auth` (`true` for devframe's interactive gate, or a handler).
+ * The side-car RPC server **gates by default** (devframe's interactive OTP
+ * unless the definition's `cli.auth` opts out), printing its code/link banner
+ * to stdout, so a bridged devframe isn't silently reachable by anything that
+ * can open its socket. Pass `options.auth: false` to opt out for a single-user
+ * localhost host, or a {@link DevframeAuthHandler} for a custom scheme.
  *
  * Use bridge mode when integrating with frameworks that own the SPA
  * (Nuxt, Astro, SolidStart, plain Vite apps). For the all-in-one

package/dist/helpers/vite.mjs

@@ -2,7 +2,7 @@ import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_WS_ROUTE } from "../constan
 import { t as diagnostics } from "../diagnostics-B5-qHeqD.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-bWRzeSa0.mjs";
 import { serveStaticNodeMiddleware } from "../utils/serve-static.mjs";
-import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-D4M7Veo7.mjs";
+import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-BSHFZGZr.mjs";
 import { resolve } from "pathe";
 //#region src/helpers/vite.ts
 /**
@@ -19,11 +19,11 @@ import { resolve } from "pathe";
 *     host-served SPA can discover the WS endpoint via
 *     {@link connectDevframe}.
 *
-* As a hosted adapter the bridge defers authentication to the host: its
-* side-car RPC server runs with the plugin's own auth gate **off** by
-* default (ignoring `def.cli?.auth`), so a plugin mounted this way never
-* triggers its standalone OTP prompt. Opt back in per-mount with
-* `options.auth` (`true` for devframe's interactive gate, or a handler).
+* The side-car RPC server **gates by default** (devframe's interactive OTP
+* unless the definition's `cli.auth` opts out), printing its code/link banner
+* to stdout, so a bridged devframe isn't silently reachable by anything that
+* can open its socket. Pass `options.auth: false` to opt out for a single-user
+* localhost host, or a {@link DevframeAuthHandler} for a custom scheme.
 *
 * Use bridge mode when integrating with frameworks that own the SPA
 * (Nuxt, Astro, SolidStart, plain Vite apps). For the all-in-one
@@ -58,7 +58,7 @@ function viteDevBridge(d, options = {}) {
 					port,
 					flags: mw.flags,
 					openBrowser: false,
-					auth: options.auth ?? false,
+					auth: options.auth,
 					mcp: options.mcp
 				});
 			} catch (e) {

package/dist/{http-BghOqfTD.mjs → http-Dvgxujcu.mjs}

@@ -1,4 +1,4 @@
-import { t as createMcpFetchHandler } from "./fetch-BZyK4v6W.mjs";
+import { t as createMcpFetchHandler } from "./fetch-CK0S253E.mjs";
 import { defineHandler } from "h3";
 //#region src/adapters/mcp/http.ts
 /**

package/dist/{index-CeBbry0R.d.mts → index-B7RgLw--.d.mts}

@@ -1,5 +1,5 @@
-import { W as DevframeNodeRpcSession, b as DevframeNodeContext, ht as SharedState } from "./devframe-Dsjn_Xtq.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-7BbaIUSI.mjs";
+import { W as DevframeNodeRpcSession, b as DevframeNodeContext, ht as SharedState } from "./devframe-qgCKL683.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-DFzmxCLa.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`
@@ -28,10 +28,15 @@ declare function getTempAuthCode(): string;
  */
 declare function refreshTempAuthCode(): string;
 /**
- * Build a "magic link" authentication URL that embeds a one-time code (OTP) as
- * a query parameter. Opening it authenticates the client without typing — print
- * it on startup (devframe stays headless, so the host prints its own banner).
- * Defaults to the current code; the link is subject to the same TTL.
+ * Build a "magic link" authentication URL that embeds a one-time code (OTP) in
+ * the URL **fragment**. Opening it authenticates the client without typing —
+ * print it on startup (devframe stays headless, so the host prints its own
+ * banner). Defaults to the current code; the link is subject to the same TTL.
+ *
+ * The code rides the fragment (`#devframe_otp=…`), not the query string, so it
+ * is never sent to the server, written to an access log, or leaked in a
+ * `Referer` header — the browser client reads it locally (see
+ * `consumeOtpFromUrl`). Any existing fragment parameters are preserved.
  */
 declare function buildOtpAuthUrl(baseUrl: string, code?: string): string;
 /**

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as DevframeAgentHostEvents, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as AgentToolProvider, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, Mt as EventUnsubscribe, N as ScopedRpcFn, Nt as EventsMap, O as DevframeSettings, Ot as AgentToolProviderHandle, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventEmitter, k as DevframeSettingsRegistry, kt as DevframeAgentHost, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "./devframe-Dsjn_Xtq.mjs";
+import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as DevframeAgentHostEvents, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as AgentToolProvider, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, Mt as EventUnsubscribe, N as ScopedRpcFn, Nt as EventsMap, O as DevframeSettings, Ot as AgentToolProviderHandle, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventEmitter, k as DevframeSettingsRegistry, kt as DevframeAgentHost, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "./devframe-qgCKL683.mjs";
 import { C as RpcFunctionType, T as RpcReturnSchema, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-CnJSgRVa.mjs";
 import "./index-Dbw1p5ch.mjs";
-import { t as DevframeNodeRpcSessionMeta } from "./ws-server-D_Vjtums.mjs";
+import { n as DevframeNodeRpcSessionMeta } from "./ws-server-J-zkiOyp.mjs";
 //#region src/define.d.ts
 declare const defineRpcFunction: <NAME extends string, TYPE extends RpcFunctionType, ARGS extends any[], RETURN = void, const AS extends RpcArgsSchema | undefined = undefined, const RS extends RpcReturnSchema | undefined = undefined>(definition: RpcFunctionDefinition<NAME, TYPE, ARGS, RETURN, AS, RS, DevframeNodeContext>) => RpcFunctionDefinition<NAME, TYPE, ARGS, RETURN, AS, RS, DevframeNodeContext>;
 //#endregion

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { p as DevframeAuthHandler } from "../devframe-Dsjn_Xtq.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-CeBbry0R.mjs";
+import { p as DevframeAuthHandler } from "../devframe-qgCKL683.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-B7RgLw--.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/auth.mjs

@@ -1,3 +1,3 @@
-import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-BtQDKTp7.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-WX3HT5a3.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-DZbJ7Cl0.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-BeUHDDjk.mjs";
 export { buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,5 +1,5 @@
-import { i as DevframeDeploymentKind, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-7BbaIUSI.mjs";
+import { i as DevframeDeploymentKind, r as DevframeDefinition } from "../devframe-qgCKL683.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-DFzmxCLa.mjs";
 //#region src/adapters/_shared.d.ts
 /**
  * Resolve the mount base path for a devframe's SPA. Hosted adapters

package/dist/node/hub-internals.mjs

@@ -1,3 +1,3 @@
-import { n as internalContextMap, t as getInternalContext } from "../context-C9Cgm1hP.mjs";
+import { n as internalContextMap, t as getInternalContext } from "../context-CQefP2jR.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-bWRzeSa0.mjs";
 export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,7 +1,7 @@
-import { At as DevframeAgentHostEvents, C as DevframeServicesHost, Ct as AgentResourceContent, Dt as AgentToolProvider, Et as AgentToolInput, H as DevframeDiagnosticsHost$1, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost$1, O as DevframeSettings, Ot as AgentToolProviderHandle, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, Z as RpcStreamingHost, b as DevframeNodeContext, bt as AgentHandle, ht as SharedState, jt as EventEmitter, kt as DevframeAgentHost$1, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest } from "../devframe-Dsjn_Xtq.mjs";
+import { At as DevframeAgentHostEvents, C as DevframeServicesHost, Ct as AgentResourceContent, Dt as AgentToolProvider, Et as AgentToolInput, H as DevframeDiagnosticsHost$1, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost$1, O as DevframeSettings, Ot as AgentToolProviderHandle, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, Z as RpcStreamingHost, b as DevframeNodeContext, bt as AgentHandle, ht as SharedState, jt as EventEmitter, kt as DevframeAgentHost$1, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest } from "../devframe-qgCKL683.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-CnJSgRVa.mjs";
 import "../index-Dbw1p5ch.mjs";
-import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-VLQJouOO.mjs";
+import { n as StartedServer, r as startHttpAndWs, t as StartHttpAndWsOptions } from "../server-E9z4ZWbd.mjs";
 import { BirpcGroup } from "birpc";
 //#region src/node/agent-args.d.ts
 /**
@@ -232,6 +232,26 @@ interface DevframeInstanceRegistration {
 declare function registerDevframeInstance(record: DevframeInstanceRecord, options?: {
   instancesDir?: string;
 }): DevframeInstanceRegistration;
+/**
+ * Read the registry and split records into live and dead by probing each
+ * one's `__connection.json`, deleting dead records (prune-on-read). Live
+ * records carry the dialable origin the probe confirmed (a `localhost`
+ * record may come back as `127.0.0.1` / `[::1]`).
+ *
+ * A liveness probe only proves *something* answers on the record's port, so
+ * records left behind by killed processes shadow the server currently bound
+ * there: per `(port, basePath)` only the newest record survives, older
+ * ghosts are pruned with the dead.
+ *
+ * @experimental
+ */
+declare function listLiveDevframeInstances(options?: {
+  instancesDir?: string;
+  timeoutMs?: number;
+}): Promise<{
+  live: DevframeInstanceRecord[];
+  pruned: DevframeInstanceRecord[];
+}>;
 //#endregion
 //#region src/node/rpc-shared-state.d.ts
 declare function createRpcSharedStateServerHost(rpc: RpcFunctionsHost): RpcSharedStateHost;
@@ -278,4 +298,4 @@ declare function toDialableHost(host: string): string;
 declare function formatHostForUrl(host: string): string;
 declare function normalizeHttpServerUrl(host: string, port: number | string): string;
 //#endregion
-export { AgentArgsFallback, CreateH3DevframeHostOptions, CreateHostContextOptions, CreateStorageOptions, DevframeAgentHost, DevframeDiagnosticsHost, type DevframeInstanceRecord, type DevframeInstanceRegistration, DevframeServicesHostImpl, DevframeViewHost, type RpcFunctionsHost, StartHttpAndWsOptions, StartedServer, coerceAgentPositionalArgs, createH3DevframeHost, createHostContext, createNodeSettings, createRpcSharedStateServerHost, createRpcStreamingServerHost, createScopedNodeContext, createStorage, formatHostForUrl, isObject, normalizeHttpServerUrl, registerDevframeInstance, startHttpAndWs, toDialableHost };
+export { AgentArgsFallback, CreateH3DevframeHostOptions, CreateHostContextOptions, CreateStorageOptions, DevframeAgentHost, DevframeDiagnosticsHost, type DevframeInstanceRecord, type DevframeInstanceRegistration, DevframeServicesHostImpl, DevframeViewHost, type RpcFunctionsHost, StartHttpAndWsOptions, StartedServer, coerceAgentPositionalArgs, createH3DevframeHost, createHostContext, createNodeSettings, createRpcSharedStateServerHost, createRpcStreamingServerHost, createScopedNodeContext, createStorage, formatHostForUrl, isObject, listLiveDevframeInstances, normalizeHttpServerUrl, registerDevframeInstance, startHttpAndWs, toDialableHost };

package/dist/node/index.mjs

@@ -1,5 +1,5 @@
 import { a as DevframeViewHost, c as createRpcSharedStateServerHost, d as coerceAgentPositionalArgs, i as createNodeSettings, l as DevframeDiagnosticsHost, n as createHostContext, o as DevframeServicesHostImpl, r as createScopedNodeContext, s as createRpcStreamingServerHost, t as createH3DevframeHost, u as DevframeAgentHost } from "../host-h3-Kz7t5Xab.mjs";
 import { t as createStorage } from "../storage-Dzoc3NVC.mjs";
-import { r as registerDevframeInstance } from "../instance-registry-D6fxYu36.mjs";
-import { a as toDialableHost, i as normalizeHttpServerUrl, n as formatHostForUrl, r as isObject, t as startHttpAndWs } from "../server-CcAPxuoT.mjs";
-export { DevframeAgentHost, DevframeDiagnosticsHost, DevframeServicesHostImpl, DevframeViewHost, coerceAgentPositionalArgs, createH3DevframeHost, createHostContext, createNodeSettings, createRpcSharedStateServerHost, createRpcStreamingServerHost, createScopedNodeContext, createStorage, formatHostForUrl, isObject, normalizeHttpServerUrl, registerDevframeInstance, startHttpAndWs, toDialableHost };
+import { r as registerDevframeInstance, t as listLiveDevframeInstances } from "../instance-registry-D6fxYu36.mjs";
+import { a as toDialableHost, i as normalizeHttpServerUrl, n as formatHostForUrl, r as isObject, t as startHttpAndWs } from "../server-CXaDDUl0.mjs";
+export { DevframeAgentHost, DevframeDiagnosticsHost, DevframeServicesHostImpl, DevframeViewHost, coerceAgentPositionalArgs, createH3DevframeHost, createHostContext, createNodeSettings, createRpcSharedStateServerHost, createRpcStreamingServerHost, createScopedNodeContext, createStorage, formatHostForUrl, isObject, listLiveDevframeInstances, normalizeHttpServerUrl, registerDevframeInstance, startHttpAndWs, toDialableHost };

package/dist/recipes/common-rpc-functions.d.mts

@@ -1,4 +1,4 @@
-import "../devframe-Dsjn_Xtq.mjs";
+import "../devframe-qgCKL683.mjs";
 import { E as Thenable, S as RpcFunctionSetupResult, c as RpcDump, g as RpcFunctionAgentOptions } from "../types-CnJSgRVa.mjs";
 import "../index-Dbw1p5ch.mjs";
 import { t as SimpleSchema } from "../simple-schema-BDzLeJDk.mjs";

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { b as DevframeNodeContext, p as DevframeAuthHandler } from "../devframe-Dsjn_Xtq.mjs";
-import "../index-CeBbry0R.mjs";
+import { b as DevframeNodeContext, p as DevframeAuthHandler } from "../devframe-qgCKL683.mjs";
+import "../index-B7RgLw--.mjs";
 //#region src/recipes/interactive-auth.d.ts
 interface CreateInteractiveAuthOptions {
   /**

package/dist/recipes/interactive-auth.mjs

@@ -1,8 +1,8 @@
 import { n as colors } from "../diagnostics-reporter-CsIG85Q5.mjs";
 import { isAnonymousRpcMethod } from "../constants.mjs";
 import { n as defineRpcFunction } from "../define-BLWPsH6y.mjs";
-import { t as getInternalContext } from "../context-C9Cgm1hP.mjs";
-import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-WX3HT5a3.mjs";
+import { t as getInternalContext } from "../context-CQefP2jR.mjs";
+import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-BeUHDDjk.mjs";
 import { t as s } from "../simple-schema-DQPZrAaZ.mjs";
 //#region src/recipes/interactive-auth.ts
 function defaultBanner(info) {
@@ -107,16 +107,24 @@ function createInteractiveAuth(context, options = {}) {
 	}
 	function onConnect(peer, session) {
 		let token;
+		let requestOrigin;
 		try {
 			token = new URL(peer.request?.url ?? "", "http://localhost").searchParams.get("devframe_auth_token") ?? void 0;
 		} catch {}
+		try {
+			requestOrigin = peer.request?.headers?.get?.("origin") ?? void 0;
+		} catch {}
 		if (!token) return;
 		if (isStaticToken(token)) {
 			session.meta.clientAuthToken = token;
 			session.meta.isTrusted = true;
 			return;
 		}
-		verifyAuthToken(token, session, storage);
+		if (verifyAuthToken(token, session, storage)) return;
+		if (internal.isRemoteTokenTrusted(token, requestOrigin)) {
+			session.meta.clientAuthToken = token;
+			session.meta.isTrusted = true;
+		}
 	}
 	function buildOpenUrl(url) {
 		return buildOtpAuthUrl(url);

package/dist/revoke-DZbJ7Cl0.mjs

@@ -0,0 +1,35 @@
+//#region src/node/auth/revoke.ts
+/**
+* Flip `isTrusted` to false on any live WS clients connected with `token`
+* and broadcast the `auth:revoked` event so they can react.
+*
+* Shared between persisted-auth revocation and remote-dock token revocation.
+*/
+async function revokeActiveConnectionsForToken(context, token) {
+	const rpcHost = context.rpc;
+	if (!rpcHost?._rpcGroup) return;
+	const affectedSessionIds = /* @__PURE__ */ new Set();
+	for (const client of rpcHost._rpcGroup.clients) if (client.$meta.clientAuthToken === token) {
+		affectedSessionIds.add(client.$meta.id);
+		client.$meta.isTrusted = false;
+		client.$meta.clientAuthToken = void 0;
+	}
+	if (affectedSessionIds.size === 0) return;
+	await rpcHost.broadcast({
+		method: "devframe:auth:revoked",
+		args: [],
+		filter: (client) => affectedSessionIds.has(client.$meta.id)
+	});
+}
+/**
+* Revoke an auth token: remove from storage and notify all connected clients
+* using this token that they are no longer trusted.
+*/
+async function revokeAuthToken(context, storage, token) {
+	storage.mutate((state) => {
+		delete state.trusted[token];
+	});
+	await revokeActiveConnectionsForToken(context, token);
+}
+//#endregion
+export { revokeAuthToken as n, revokeActiveConnectionsForToken as t };

package/dist/rpc/transports/ws-server.d.mts

@@ -1,2 +1,2 @@
-import { a as isAllowedOrigin, i as attachWsRpcTransport, n as WsRpcTransport, o as isLoopbackHostname, r as WsRpcTransportOptions, t as DevframeNodeRpcSessionMeta } from "../../ws-server-D_Vjtums.mjs";
-export { DevframeNodeRpcSessionMeta, WsRpcTransport, WsRpcTransportOptions, attachWsRpcTransport, isAllowedOrigin, isLoopbackHostname };
+import { a as WsRpcTransportOptions, c as isAllowedOrigin, i as WsRpcTransport, l as isLoopbackHostname, n as DevframeNodeRpcSessionMeta, o as attachWsRpcTransport, r as WsOriginRegistry, s as createWsOriginRegistry, t as CreateWsOriginRegistryOptions } from "../../ws-server-J-zkiOyp.mjs";
+export { CreateWsOriginRegistryOptions, DevframeNodeRpcSessionMeta, WsOriginRegistry, WsRpcTransport, WsRpcTransportOptions, attachWsRpcTransport, createWsOriginRegistry, isAllowedOrigin, isLoopbackHostname };

package/dist/rpc/transports/ws-server.mjs

@@ -1,9 +1,52 @@
+import "../../constants.mjs";
 import { n as strictJsonStringify } from "../../serialization-C8Mnw9hK.mjs";
 import { n as structuredCloneStringify, t as structuredCloneParse } from "../../structured-clone-CbAV5rFI.mjs";
+import { n as randomToken, r as timingSafeEqual } from "../../crypto-token-XCqTSMg9.mjs";
 import { createServer } from "node:http";
 import { createServer as createServer$1 } from "node:https";
 import crossws from "crossws/adapters/node";
 //#region src/rpc/transports/ws-server.ts
+/**
+* Create a live, token-protected origin allowlist for external browser
+* viewers. Pass it to {@link WsRpcTransportOptions.allowedOrigins}, then use
+* `registerFromUrl()` in the connection metadata handler to authorize a
+* viewer without sharing a mutable array or disabling DNS-rebinding protection.
+*/
+function createWsOriginRegistry(options = {}) {
+	const token = randomToken();
+	const origins = new Set(options.allowedOrigins ?? []);
+	function normalizeOrigin(origin) {
+		if (!origin) return;
+		try {
+			const url = new URL(origin);
+			const normalized = url.origin === "null" ? `${url.protocol}//${url.host}` : url.origin;
+			return origin === normalized ? normalized : void 0;
+		} catch {}
+	}
+	function registerOrigin(origin, candidateToken) {
+		const normalized = normalizeOrigin(origin);
+		if (!normalized || !candidateToken || !timingSafeEqual(token, candidateToken)) return false;
+		if (options.validateOrigin && !options.validateOrigin(normalized)) return false;
+		origins.add(normalized);
+		return true;
+	}
+	return {
+		token,
+		registerFromUrl(url) {
+			let parsed;
+			try {
+				parsed = new URL(url, "http://localhost");
+			} catch {
+				return;
+			}
+			const origin = parsed.searchParams.get("devframe_viewer_origin") ?? void 0;
+			return registerOrigin(origin, parsed.searchParams.get("devframe_viewer_origin_token") ?? void 0) ? origin : void 0;
+		},
+		isAllowed(origin) {
+			return isAllowedOrigin(origin, [...origins]);
+		}
+	};
+}
 let sessionId = 0;
 const EMPTY_DEFS = /* @__PURE__ */ new Map();
 function NOOP() {}
@@ -32,6 +75,9 @@ function isAllowedOrigin(origin, allowedOrigins) {
 		return false;
 	}
 }
+function isWsOriginRegistry(value) {
+	return !!value && !Array.isArray(value);
+}
 /**
 * Route `upgrade` events on a server to the crossws adapter, optionally
 * filtered to a single `path`. Non-matching requests are left untouched so
@@ -55,7 +101,8 @@ function routeUpgrades(server, ws, path, destroyUnmatched, allowedOrigins) {
 				return;
 			}
 		}
-		if (allowedOrigins !== false && !isAllowedOrigin(req.headers.origin, allowedOrigins ?? [])) {
+		const originAllowed = isWsOriginRegistry(allowedOrigins) ? allowedOrigins.isAllowed(req.headers.origin) : isAllowedOrigin(req.headers.origin, allowedOrigins || []);
+		if (allowedOrigins !== false && !originAllowed) {
 			socket.write("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n");
 			socket.destroy();
 			return;
@@ -164,4 +211,4 @@ function attachWsRpcTransport(rpcGroup, options = {}) {
 	};
 }
 //#endregion
-export { attachWsRpcTransport, isAllowedOrigin, isLoopbackHostname };
+export { attachWsRpcTransport, createWsOriginRegistry, isAllowedOrigin, isLoopbackHostname };

package/dist/{server-CcAPxuoT.mjs → server-CXaDDUl0.mjs}

@@ -1,7 +1,7 @@
 import { createRpcServer } from "./rpc/server.mjs";
 import { attachWsRpcTransport } from "./rpc/transports/ws-server.mjs";
 import { t as diagnostics } from "./diagnostics-B5-qHeqD.mjs";
-import { t as getInternalContext } from "./context-C9Cgm1hP.mjs";
+import { t as getInternalContext } from "./context-CQefP2jR.mjs";
 import { createServer } from "node:http";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { H3, toNodeHandler } from "h3";

package/dist/{server-VLQJouOO.d.mts → server-E9z4ZWbd.d.mts}

@@ -1,5 +1,6 @@
-import { $ as DevframeRpcServerFunctions, Q as DevframeRpcClientFunctions, W as DevframeNodeRpcSession, _ as ConnectionMeta, b as DevframeNodeContext, p as DevframeAuthHandler } from "./devframe-Dsjn_Xtq.mjs";
-import "./index-CeBbry0R.mjs";
+import { $ as DevframeRpcServerFunctions, Q as DevframeRpcClientFunctions, W as DevframeNodeRpcSession, _ as ConnectionMeta, b as DevframeNodeContext, p as DevframeAuthHandler } from "./devframe-qgCKL683.mjs";
+import { r as WsOriginRegistry } from "./ws-server-J-zkiOyp.mjs";
+import "./index-B7RgLw--.mjs";
 import { Peer } from "crossws";
 import { BirpcGroup, EventOptions } from "birpc";
 import { NodeAdapter } from "crossws/adapters/node";
@@ -91,7 +92,7 @@ interface StartHttpAndWsOptions {
    * from another host. Pass `false` to disable origin checking entirely
    * (not recommended). Default: loopback-only.
    */
-  allowedOrigins?: readonly string[] | false;
+  allowedOrigins?: readonly string[] | WsOriginRegistry | false;
   /**
    * Called once the WS server is bound so callers can mount static
    * handlers whose origin depends on the resolved port, or print their

package/dist/{state-WX3HT5a3.mjs → state-BeUHDDjk.mjs}

@@ -1,5 +1,5 @@
 import { DEVFRAME_OTP_URL_PARAM } from "./constants.mjs";
-import { a as timingSafeEqual, i as randomToken, r as randomDigits } from "./revoke-BtQDKTp7.mjs";
+import { n as randomToken, r as timingSafeEqual, t as randomDigits } from "./crypto-token-XCqTSMg9.mjs";
 //#region src/node/auth/state.ts
 /** Number of decimal digits in a human-typed one-time authentication code. */
 const TEMP_AUTH_CODE_LENGTH = 6;
@@ -37,14 +37,21 @@ function refreshTempAuthCode() {
 	return tempAuthCode;
 }
 /**
-* Build a "magic link" authentication URL that embeds a one-time code (OTP) as
-* a query parameter. Opening it authenticates the client without typing — print
-* it on startup (devframe stays headless, so the host prints its own banner).
-* Defaults to the current code; the link is subject to the same TTL.
+* Build a "magic link" authentication URL that embeds a one-time code (OTP) in
+* the URL **fragment**. Opening it authenticates the client without typing —
+* print it on startup (devframe stays headless, so the host prints its own
+* banner). Defaults to the current code; the link is subject to the same TTL.
+*
+* The code rides the fragment (`#devframe_otp=…`), not the query string, so it
+* is never sent to the server, written to an access log, or leaked in a
+* `Referer` header — the browser client reads it locally (see
+* `consumeOtpFromUrl`). Any existing fragment parameters are preserved.
 */
 function buildOtpAuthUrl(baseUrl, code = tempAuthCode) {
 	const url = new URL(baseUrl);
-	url.searchParams.set(DEVFRAME_OTP_URL_PARAM, code);
+	const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+	fragment.set(DEVFRAME_OTP_URL_PARAM, code);
+	url.hash = fragment.toString();
 	return url.href;
 }
 /**

package/dist/types/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as DevframeAgentHostEvents, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as AgentToolProvider, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, Mt as EventUnsubscribe, N as ScopedRpcFn, Nt as EventsMap, O as DevframeSettings, Ot as AgentToolProviderHandle, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventEmitter, k as DevframeSettingsRegistry, kt as DevframeAgentHost, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "../devframe-Dsjn_Xtq.mjs";
+import { $ as DevframeRpcServerFunctions, A as DevframeSettingsStore, At as DevframeAgentHostEvents, B as DevframeDefineDiagnosticsOptions, C as DevframeServicesHost, Ct as AgentResourceContent, D as DevframeScopedStreamingHost, Dt as AgentToolProvider, E as DevframeScopedNodeRpc, Et as AgentToolInput, F as ScopedSharedStates, G as RpcBroadcastOptions, H as DevframeDiagnosticsHost, I as SettingsForNamespace, J as RpcSharedStateHost, K as RpcFunctionsHost, L as DevframeViewHost, M as ScopedClientFunctions, Mt as EventUnsubscribe, N as ScopedRpcFn, Nt as EventsMap, O as DevframeSettings, Ot as AgentToolProviderHandle, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, R as DevframeHost, S as DevframeServiceOf, St as AgentResource, T as DevframeScopedNodeContext, Tt as AgentTool, U as DevframeDiagnosticsLogger, V as DevframeDiagnosticsDefinition, W as DevframeNodeRpcSession, X as RpcStreamingChannelOptions, Y as RpcStreamingChannel, Z as RpcStreamingHost, _ as ConnectionMeta, a as DevframeDockDefaults, b as DevframeNodeContext, bt as AgentHandle, c as DevframeSetupInfo, d as McpRouteOptions, et as DevframeRpcSharedStates, f as defineDevframe, g as Thenable, h as PartialWithoutId, i as DevframeDeploymentKind, j as ScopedBroadcastOptions, jt as EventEmitter, k as DevframeSettingsRegistry, kt as DevframeAgentHost, l as DevframeSpaOptions, m as EntriesToObject, n as DevframeCliOptions, o as DevframeDuplicationStrategy, q as RpcSharedStateGetOptions, r as DevframeDefinition, s as DevframeRuntime, t as DevframeBrowserContext, u as DevframeWsOptions, v as ConnectionMetaWebsocket, w as DevframeServicesRegistry, wt as AgentResourceInput, x as DevframeServiceId, xt as AgentManifest, y as DevframeCapabilities, z as DevframeStorageScope } from "../devframe-qgCKL683.mjs";
 import { g as RpcFunctionAgentOptions } from "../types-CnJSgRVa.mjs";
-import { t as DevframeNodeRpcSessionMeta } from "../ws-server-D_Vjtums.mjs";
+import { n as DevframeNodeRpcSessionMeta } from "../ws-server-J-zkiOyp.mjs";
 export { AgentHandle, AgentManifest, AgentResource, AgentResourceContent, AgentResourceInput, AgentTool, AgentToolInput, AgentToolProvider, AgentToolProviderHandle, ConnectionMeta, ConnectionMetaWebsocket, DevframeAgentHost, DevframeAgentHostEvents, DevframeBrowserContext, DevframeCapabilities, DevframeCliOptions, DevframeDefineDiagnosticsOptions, DevframeDefinition, DevframeDeploymentKind, DevframeDiagnosticsDefinition, DevframeDiagnosticsHost, DevframeDiagnosticsLogger, DevframeDockDefaults, DevframeDuplicationStrategy, DevframeHost, DevframeNodeContext, DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, DevframeRpcClientFunctions, DevframeRpcServerFunctions, DevframeRpcSharedStates, DevframeRuntime, DevframeScopedNodeContext, DevframeScopedNodeRpc, DevframeScopedStreamingHost, DevframeServiceId, DevframeServiceOf, DevframeServicesHost, DevframeServicesRegistry, DevframeSettings, DevframeSettingsRegistry, DevframeSettingsStore, DevframeSetupInfo, DevframeSpaOptions, DevframeStorageScope, DevframeViewHost, DevframeWsOptions, EntriesToObject, EventEmitter, EventUnsubscribe, EventsMap, McpRouteOptions, PartialWithoutId, RpcBroadcastOptions, type RpcFunctionAgentOptions, RpcFunctionsHost, RpcSharedStateGetOptions, RpcSharedStateHost, RpcStreamingChannel, RpcStreamingChannelOptions, RpcStreamingHost, ScopedBroadcastOptions, ScopedClientFunctions, ScopedRpcFn, ScopedServerFunctions, ScopedSharedStates, SettingsForNamespace, Thenable, defineDevframe };

package/dist/utils/events.d.mts

@@ -1,4 +1,4 @@
-import { Nt as EventsMap, jt as EventEmitter } from "../devframe-Dsjn_Xtq.mjs";
+import { Nt as EventsMap, jt as EventEmitter } from "../devframe-qgCKL683.mjs";
 //#region src/utils/events.d.ts
 /**
  * Create event emitter.

package/dist/utils/shared-state.d.mts

@@ -1,2 +1,2 @@
-import { _t as SharedStateOptions, dt as ImmutableArray, ft as ImmutableMap, gt as SharedStateEvents, ht as SharedState, mt as ImmutableSet, pt as ImmutableObject, ut as Immutable, vt as SharedStatePatch, yt as createSharedState } from "../devframe-Dsjn_Xtq.mjs";
+import { _t as SharedStateOptions, dt as ImmutableArray, ft as ImmutableMap, gt as SharedStateEvents, ht as SharedState, mt as ImmutableSet, pt as ImmutableObject, ut as Immutable, vt as SharedStatePatch, yt as createSharedState } from "../devframe-qgCKL683.mjs";
 export { Immutable, ImmutableArray, ImmutableMap, ImmutableObject, ImmutableSet, SharedState, SharedStateEvents, SharedStateOptions, SharedStatePatch, createSharedState };

package/dist/utils/streaming-channel.d.mts

@@ -1,2 +1,2 @@
-import { at as StreamReader, ct as createStreamReader, it as StreamErrorPayload, lt as createStreamSink, nt as CreateStreamReaderOptions, ot as StreamSink, rt as CreateStreamSinkOptions, st as StreamSinkEvents, tt as BufferedChunk } from "../devframe-Dsjn_Xtq.mjs";
+import { at as StreamReader, ct as createStreamReader, it as StreamErrorPayload, lt as createStreamSink, nt as CreateStreamReaderOptions, ot as StreamSink, rt as CreateStreamSinkOptions, st as StreamSinkEvents, tt as BufferedChunk } from "../devframe-qgCKL683.mjs";
 export { BufferedChunk, CreateStreamReaderOptions, CreateStreamSinkOptions, StreamErrorPayload, StreamReader, StreamSink, StreamSinkEvents, createStreamReader, createStreamSink };

package/dist/{ws-server-D_Vjtums.d.mts → ws-server-J-zkiOyp.d.mts}

@@ -62,7 +62,7 @@ interface WsRpcTransportOptions {
    * Pass `false` to disable origin checking entirely (not recommended).
    * Default: loopback-only.
    */
-  allowedOrigins?: readonly string[] | false;
+  allowedOrigins?: readonly string[] | WsOriginRegistry | false;
   /**
    * RPC function definitions, used by the per-call wire serializer to
    * dispatch between strict-JSON and structured-clone encoding based
@@ -79,6 +79,27 @@ interface WsRpcTransportOptions {
   /** Override the default per-call deserializer. Most callers should leave this unset. */
   deserialize?: ChannelOptions['deserialize'];
 }
+interface CreateWsOriginRegistryOptions {
+  /** Origins allowed before any external viewers are registered. */
+  allowedOrigins?: readonly string[];
+  /** Additional validation to run after the registration token is verified. */
+  validateOrigin?: (origin: string) => boolean;
+}
+interface WsOriginRegistry {
+  /** Registration token to include in connection metadata. */
+  readonly token: string;
+  /** Read and register an origin from a connection bootstrap URL. */
+  registerFromUrl: (url: string) => string | undefined;
+  /** Check whether an origin is currently allowed. */
+  isAllowed: (origin: string | undefined) => boolean;
+}
+/**
+ * Create a live, token-protected origin allowlist for external browser
+ * viewers. Pass it to {@link WsRpcTransportOptions.allowedOrigins}, then use
+ * `registerFromUrl()` in the connection metadata handler to authorize a
+ * viewer without sharing a mutable array or disabling DNS-rebinding protection.
+ */
+declare function createWsOriginRegistry(options?: CreateWsOriginRegistryOptions): WsOriginRegistry;
 interface WsRpcTransport {
   /**
    * The crossws node adapter driving the socket — exposes the connected
@@ -115,4 +136,4 @@ declare function isAllowedOrigin(origin: string | undefined, allowedOrigins: rea
  */
 declare function attachWsRpcTransport<ClientFunctions extends object, ServerFunctions extends object>(rpcGroup: BirpcGroup<ClientFunctions, ServerFunctions, false>, options?: WsRpcTransportOptions): WsRpcTransport;
 //#endregion
-export { isAllowedOrigin as a, attachWsRpcTransport as i, WsRpcTransport as n, isLoopbackHostname as o, WsRpcTransportOptions as r, DevframeNodeRpcSessionMeta as t };
+export { WsRpcTransportOptions as a, isAllowedOrigin as c, WsRpcTransport as i, isLoopbackHostname as l, DevframeNodeRpcSessionMeta as n, attachWsRpcTransport as o, WsOriginRegistry as r, createWsOriginRegistry as s, CreateWsOriginRegistryOptions as t };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devframe",
   "type": "module",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Framework for building generic devframes",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",

package/skills/devframe/SKILL.md

@@ -569,10 +569,11 @@ RPC handlers run with the full privileges of the host process, so the boundary t
 - **`auth` defaults to `true`** — dev-mode connections must authenticate before calls are accepted. Devframe ships the node primitives (`exchangeTempAuthCode`, `verifyAuthToken` in `devframe/node/auth`); the host adapter (e.g. Vite DevTools) provides the interactive `devframe:anonymous:auth` + `devframe:auth:exchange` handlers and auth UI.
 - **`auth: false` trusts every reachable connection.** Use it only for single-user `localhost` tools. Never combine it with a non-loopback bind host, a tunnel, or a shared/CI environment. The default bind host is already `localhost`.
 - **Authentication** exchanges a 6-digit one-time code (shown in the developer's terminal) for a node-issued bearer token via `requestTrustWithCode(code)`. The code is single-use, expires in 5 min, compared in constant time, and rotates after repeated failures — show it only in the terminal, never over the network.
-- **Magic-link (optional):** print `buildOtpAuthUrl(origin)` — `<origin>/?devframe_otp=<code>`. `connectDevframe` reads the code, exchanges it, and strips it from the URL. Integrations can opt out (`otpParam: false`) and drive it via the exposed `authenticateWithUrlOtp(rpc)` / `consumeOtpFromUrl()` client utilities. Only the single-use code rides the URL, never the bearer; treat the printed link like the code itself. The standalone CLI's `--open` does this automatically via `DevframeAuthHandler.buildOpenUrl` — the launched tab already carries the OTP, no prompt needed.
+- **Magic-link (optional):** print `buildOtpAuthUrl(origin)` — `<origin>/#devframe_otp=<code>`. The code rides the URL **fragment**, which the browser never sends to the server, so it stays out of access logs and `Referer`. `connectDevframe` reads the code, exchanges it, and strips it from the URL. Integrations can opt out (`otpParam: false`) and drive it via the exposed `authenticateWithUrlOtp(rpc)` / `consumeOtpFromUrl()` client utilities. Only the single-use code rides the URL, never the bearer; treat the printed link like the code itself. The standalone CLI's `--open` does this automatically via `DevframeAuthHandler.buildOpenUrl` — the launched tab already carries the OTP, no prompt needed.
 - **Tokens are secrets.** The bearer token rides the WS URL (`?devframe_auth_token=…`) — serve over `wss://`/`https://` beyond loopback. Never log the token or code, never bake them into build output. Revoke via `revokeAuthToken(...)`; clients drop to untrusted on `devframe:auth:revoked`.
 - **Authorize handlers.** Any trusted client can call any registered function — validate inputs, and mark state-changing functions `type: 'destructive'` so MCP/agent clients prompt first.
-- **Origin-lock remote docks** (`originLock`) so a dock token is honored only from its expected origin.
+- **Origin-lock remote docks** (`originLock`, on by default) so a dock's session token is honored only on a connection whose `Origin` matches the dock — the connect-time gate enforces it.
+- **The MCP route requires an Origin.** The route-based MCP server (`cli.mcp`, `viteDevBridge`/Next handler `mcp`, `createMcpFetchHandler`) rejects `Origin`-less requests — a request must carry a loopback (or allow-listed) `Origin`, so it isn't reachable by an arbitrary local process. `devframe connect` sends each instance's own loopback origin automatically.
 
 See [Security](https://devfra.me/security) for the full reference.