devframe 0.8.0 → 0.8.2

package/dist/adapters/build.d.mts

@@ -1,4 +1,4 @@
-import { r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { r as DevframeDefinition } from "../devframe-mQ4qZAuo.mjs";
 //#region src/adapters/build.d.ts
 interface CreateBuildOptions {
   /** Output directory. Defaults to `dist-static`. */

package/dist/adapters/build.mjs

@@ -3,8 +3,8 @@ import { n as colors } from "../diagnostics-reporter-CsIG85Q5.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME } from "../constants.mjs";
 import { n as strictJsonStringify } from "../serialization-C8Mnw9hK.mjs";
 import { n as structuredCloneStringify } from "../structured-clone-CbAV5rFI.mjs";
-import { n as createHostContext, t as createH3DevframeHost } from "../host-h3-Kz7t5Xab.mjs";
-import { t as diagnostics } from "../diagnostics-B5-qHeqD.mjs";
+import { n as createHostContext, t as createH3DevframeHost } from "../host-h3-D2hYZvDK.mjs";
+import { t as diagnostics } from "../diagnostics-D7wM2cwM.mjs";
 import { n as resolveBasePath } from "../_shared-bWRzeSa0.mjs";
 import { existsSync } from "node:fs";
 import { dirname, resolve } from "pathe";

package/dist/adapters/cac.d.mts

@@ -1,4 +1,4 @@
-import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema, r as DevframeDefinition } from "../devframe-mQ4qZAuo.mjs";
 import { CAC } from "cac";
 import { H3 } from "h3";
 //#region src/adapters/cac.d.ts

package/dist/adapters/cac.mjs

@@ -1,2 +1,2 @@
-import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-B-R_tDGJ.mjs";
+import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-D4_9ok0z.mjs";
 export { createCac, defineCliFlags, parseCliFlags };

package/dist/adapters/cli.d.mts

@@ -1,4 +1,4 @@
-import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema } from "../devframe-Dsjn_Xtq.mjs";
+import { Ft as InferCliFlags, It as defineCliFlags, Lt as parseCliFlags, Pt as CliFlagsSchema } from "../devframe-mQ4qZAuo.mjs";
 import { CacHandle, CreateCacOptions, createCac } from "./cac.mjs";
 //#region src/adapters/cli.d.ts
 /** @deprecated Use `createCac` from `devframe/adapters/cac` instead. */

package/dist/adapters/cli.mjs

@@ -1,4 +1,4 @@
-import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-B-R_tDGJ.mjs";
+import { n as defineCliFlags, r as parseCliFlags, t as createCac } from "../cac-D4_9ok0z.mjs";
 //#region src/adapters/cli.ts
 /** @deprecated Use `createCac` from `devframe/adapters/cac` instead. */
 const createCli = createCac;

package/dist/adapters/dev.d.mts

@@ -1,5 +1,7 @@
-import { _ as ConnectionMeta, d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeWsOptions } from "../devframe-Dsjn_Xtq.mjs";
-import { n as StartedServer } from "../server-VLQJouOO.mjs";
+import { W as DevframeNodeRpcSession, _ as ConnectionMeta, d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeWsOptions } from "../devframe-mQ4qZAuo.mjs";
+import { n as DevframeNodeRpcSessionMeta } from "../ws-server-uKQcClcJ.mjs";
+import { n as StartedServer } from "../server-UHWae43Q.mjs";
+import { Peer } from "crossws";
 import { H3 } from "h3";
 //#region src/adapters/dev.d.ts
 interface CreateDevServerOptions {
@@ -68,6 +70,17 @@ interface CreateDevServerOptions {
    * {@link McpRouteOptions}.
    */
   mcp?: boolean | McpRouteOptions;
+  /**
+   * Called once per new WS connection, right after its session is created.
+   * Forwarded verbatim to the underlying `startHttpAndWs`.
+   */
+  onPeerConnect?: (peer: Peer, session: DevframeNodeRpcSession) => void;
+  /**
+   * Called once per closed WS connection, right after its session's
+   * disconnect bookkeeping runs. Forwarded verbatim to the underlying
+   * `startHttpAndWs`.
+   */
+  onPeerDisconnect?: (peer: Peer, meta: DevframeNodeRpcSessionMeta) => void;
   /**
    * Called once the WS server is bound. Devframe stays headless
    * otherwise — wire this if you want a startup banner.

package/dist/adapters/dev.mjs

@@ -1,2 +1,2 @@
-import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-D4M7Veo7.mjs";
+import { n as resolveDevServerPort, r as resolveMcpConnectionMeta, t as createDevServer } from "../dev-Bc49u3qg.mjs";
 export { createDevServer, resolveDevServerPort, resolveMcpConnectionMeta };

package/dist/adapters/embedded.d.mts

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-mQ4qZAuo.mjs";
 //#region src/adapters/embedded.d.ts
 interface CreateEmbeddedOptions {
   /** Target context the devframe is registered into. Required. */

package/dist/adapters/mcp.d.mts

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { b as DevframeNodeContext, r as DevframeDefinition } from "../devframe-mQ4qZAuo.mjs";
 import "@modelcontextprotocol/server";
 //#region src/adapters/mcp/build-server.d.ts
 interface CreateMcpServerOptions {
@@ -47,7 +47,12 @@ interface CreateMcpFetchHandlerOptions {
   exposeSharedState: boolean | ((key: string) => boolean);
   /**
    * Origin allow-list beyond the loopback default. `false` disables the
-   * origin gate entirely. Default: loopback-only (mirrors the WS transport).
+   * origin gate entirely. Default: loopback-only.
+   *
+   * Unlike the WS transport, the MCP route does **not** allow `Origin`-less
+   * requests: a route-based endpoint is reachable by any local process, so a
+   * request must carry an `Origin` that passes the gate. Native clients
+   * (e.g. `devframe connect`) send their loopback origin explicitly.
    */
   allowedOrigins?: readonly string[] | false;
 }
@@ -71,9 +76,10 @@ interface McpFetchHandler {
  * and MCP server (built from the shared, live `ctx` via
  * `buildMcpServerFromContext`), correlated by the `Mcp-Session-Id` header: an
  * `initialize` POST spins up a session; later requests route to it; a `DELETE`
- * (or client disconnect) tears it down. The origin gate applies devframe's
- * loopback-default DNS-rebinding protection (identical semantics to the WS
- * upgrade's `isAllowedOrigin`).
+ * (or client disconnect) tears it down. The origin gate guards every request:
+ * loopback-default DNS-rebinding protection that — unlike the WS upgrade's
+ * `isAllowedOrigin` — also rejects `Origin`-less requests, so a route-based
+ * endpoint isn't reachable by an arbitrary local process.
  *
  * @experimental
  */

package/dist/adapters/mcp.mjs

@@ -1,2 +1,2 @@
-import { n as createMcpServer, t as createMcpFetchHandler } from "../fetch-BZyK4v6W.mjs";
+import { n as createMcpServer, t as createMcpFetchHandler } from "../fetch-BKaD0Vb3.mjs";
 export { createMcpFetchHandler, createMcpServer };

package/dist/{cac-B-R_tDGJ.mjs → cac-D4_9ok0z.mjs}

@@ -1,6 +1,6 @@
 import { n as colors } from "./diagnostics-reporter-CsIG85Q5.mjs";
 import { createBuild } from "./adapters/build.mjs";
-import { n as resolveDevServerPort, t as createDevServer } from "./dev-D4M7Veo7.mjs";
+import { n as resolveDevServerPort, t as createDevServer } from "./dev-Bc49u3qg.mjs";
 import process from "node:process";
 import cac$1 from "cac";
 //#region src/adapters/flags.ts

package/dist/cli/main.mjs

@@ -1,5 +1,5 @@
-import { t as diagnostics } from "../diagnostics-B5-qHeqD.mjs";
-import { n as probeDevframeOrigin, t as listLiveDevframeInstances } from "../instance-registry-D6fxYu36.mjs";
+import { t as diagnostics } from "../diagnostics-D7wM2cwM.mjs";
+import { n as probeDevframeOrigin, t as listLiveDevframeInstances } from "../instance-registry-BnnA2Eoh.mjs";
 import { t as toAgentToolName } from "../agent-tool-name-C3b5vEwJ.mjs";
 import { Diagnostic } from "nostics";
 import process from "node:process";
@@ -200,7 +200,8 @@ async function call(sdk, options, args) {
 	});
 }
 async function withInstanceClient(sdk, url, fn) {
-	const transport = new sdk.StreamableHTTPClientTransport(new URL(url));
+	const origin = new URL(url).origin;
+	const transport = new sdk.StreamableHTTPClientTransport(new URL(url), { requestInit: { headers: { origin } } });
 	const client = new sdk.Client({
 		name: "devframe-connect",
 		version: "0.0.0"

package/dist/client/index.d.mts

@@ -1,4 +1,4 @@
-import { $ as DevframeRpcServerFunctions, F as ScopedSharedStates, I as SettingsForNamespace, J as RpcSharedStateHost, N as ScopedRpcFn, O as DevframeSettings, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, _ as ConnectionMeta, at as StreamReader, ht as SharedState, jt as EventEmitter, ot as StreamSink, q as RpcSharedStateGetOptions } from "../devframe-Dsjn_Xtq.mjs";
+import { $ as DevframeRpcServerFunctions, F as ScopedSharedStates, I as SettingsForNamespace, J as RpcSharedStateHost, N as ScopedRpcFn, O as DevframeSettings, P as ScopedServerFunctions, Q as DevframeRpcClientFunctions, _ as ConnectionMeta, at as StreamReader, ht as SharedState, jt as EventEmitter, ot as StreamSink, q as RpcSharedStateGetOptions } from "../devframe-mQ4qZAuo.mjs";
 import { _ as RpcFunctionDefinition, w as RpcFunctionsCollector } from "../types-CnJSgRVa.mjs";
 import { E as RpcCacheOptions, T as RpcCacheManager } from "../index-Dbw1p5ch.mjs";
 import { t as WsRpcChannelOptions } from "../ws-client-B6Tnr0ic.mjs";
@@ -26,6 +26,12 @@ interface SetupDevframeConnectionOptions {
   /** Override the locally stored auth token. */
   authToken?: string;
 }
+/**
+ * Allow an external viewer to connect by registering its browser origin with
+ * the Devframe host. Returns `false` if the host did not provide an origin
+ * registration token.
+ */
+declare function registerDevframeViewerOrigin(connection: DevframeConnection, origin?: any): Promise<boolean>;
 /**
  * Return connection information previously prepared in this window or an
  * accessible parent window.
@@ -377,15 +383,16 @@ declare function getDevframeRpcClient(options?: DevframeRpcClientOptions): Promi
 //#endregion
 //#region src/client/otp.d.ts
 /**
- * Read a one-time authentication code (OTP) from the current page URL's query
- * string, without side effects. Returns `undefined` when the parameter is absent.
+ * Read a one-time authentication code (OTP) from the current page URL's
+ * fragment, without side effects. Returns `undefined` when the parameter is
+ * absent.
  */
 declare function readOtpFromUrl(param?: string): string | undefined;
 /**
- * Read the one-time code from the page URL and remove it from the address bar
- * (and the current history entry), so the single-use code isn't left in the
- * URL, browser history, or a `Referer`. Returns the code, or `undefined` when
- * absent.
+ * Read the one-time code from the page URL fragment and remove it from the
+ * address bar (and the current history entry), so the single-use code isn't
+ * left in the URL, browser history, or a `Referer`. Returns the code, or
+ * `undefined` when absent.
  */
 declare function consumeOtpFromUrl(param?: string): string | undefined;
 /**
@@ -402,6 +409,28 @@ declare function authenticateWithUrlOtp(rpc: Pick<DevframeRpcClient, 'isTrusted'
   param?: string;
 }): Promise<boolean>;
 //#endregion
+//#region src/client/rpc-ws.d.ts
+/** Minimal subset of `window.location` needed to resolve a WS URL. */
+interface WsUrlLocation {
+  protocol: string;
+  host: string;
+  hostname: string;
+  href: string;
+}
+/**
+ * Resolve a {@link ConnectionMeta.websocket} descriptor into a concrete
+ * `ws(s)://` URL.
+ *
+ * The object / relative-path forms connect to the page's own origin (only the
+ * `http`→`ws` protocol swap is applied), resolving the path against where
+ * `__connection.json` was loaded. This is deliberately host-agnostic so the
+ * connection survives a reverse proxy that changes the domain or port — the
+ * client trusts its own location, never a server-baked hostname. An explicit
+ * `port`/`host` (or a full `ws(s)://` URL string) opts into a cross-origin
+ * endpoint, e.g. a side-car server on its own port.
+ */
+declare function resolveWsUrl(websocket: ConnectionMeta['websocket'], metaBaseUrl: string, loc: WsUrlLocation): string;
+//#endregion
 //#region src/client/settings.d.ts
 /**
  * Build the client-side `settings` surface for a scope namespace. Mirrors
@@ -412,4 +441,4 @@ declare function createClientSettings<T extends Record<string, any> = Record<str
 //#region src/client/index.d.ts
 declare const connectDevframe: typeof getDevframeRpcClient;
 //#endregion
-export { DevframeClientRpcHost, DevframeConnection, DevframeConnectionError, DevframeConnectionErrorKind, DevframeConnectionStatus, DevframeRpcClient, DevframeRpcClientCall, DevframeRpcClientCallEvent, DevframeRpcClientCallOptional, DevframeRpcClientMode, DevframeRpcClientOptions, DevframeRpcContext, DevframeScopedClientContext, DevframeScopedClientRpc, DevframeScopedClientStreamingHost, RpcClientEvents, RpcStreamingClientHost, SetupDevframeConnectionOptions, StreamingSubscribeOptions, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };
+export { DevframeClientRpcHost, DevframeConnection, DevframeConnectionError, DevframeConnectionErrorKind, DevframeConnectionStatus, DevframeRpcClient, DevframeRpcClientCall, DevframeRpcClientCallEvent, DevframeRpcClientCallOptional, DevframeRpcClientMode, DevframeRpcClientOptions, DevframeRpcContext, DevframeScopedClientContext, DevframeScopedClientRpc, DevframeScopedClientStreamingHost, RpcClientEvents, RpcStreamingClientHost, SetupDevframeConnectionOptions, StreamingSubscribeOptions, type WsUrlLocation, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, registerDevframeViewerOrigin, resolveWsUrl, setupDevframeConnection };

package/dist/client/index.mjs

@@ -20,11 +20,14 @@ const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
 const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
 const DEVFRAME_RPC_DUMP_MANIFEST_FILENAME = "__rpc-dump/index.json";
 /**
-* Page-URL query parameter carrying a one-time authentication code (OTP) for
-* "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
-* the client reads the code, exchanges it for a token, and strips the parameter
-* from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
-* `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+* Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+* for "magic link" auth. A host can print a link like
+* `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+* token, and strips the parameter from the URL. The code rides the fragment
+* (never the query string) so the browser never transmits it to the server,
+* keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+* (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+* (or `connectDevframe`'s `otpParam`).
 */
 const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -35,6 +38,10 @@ const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 * trusted before its own `anonymous:devframe:auth` handshake call arrives.
 */
 const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 //#endregion
 //#region src/utils/diagnostics-reporter.ts
 const formatAnsi = ansiFormatter(colors);
@@ -428,6 +435,21 @@ function storeAuthToken(token) {
 }
 //#endregion
 //#region src/client/connection.ts
+/**
+* Allow an external viewer to connect by registering its browser origin with
+* the Devframe host. Returns `false` if the host did not provide an origin
+* registration token.
+*/
+async function registerDevframeViewerOrigin(connection, origin = globalThis.location?.origin) {
+	const token = connection.connectionMeta.viewerOriginToken;
+	if (!token || !origin) return false;
+	const url = new URL(connection.metaBaseUrl);
+	url.searchParams.set(DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, origin);
+	url.searchParams.set(DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, token);
+	const response = await fetch(url, { cache: "no-store" });
+	if (!response.ok) throw new Error(`Failed to register external viewer origin (${response.status}).`);
+	return true;
+}
 function resolveMetaBaseUrl(baseURL) {
 	const metaPath = withBase(DEVFRAME_CONNECTION_META_FILENAME, baseURL);
 	try {
@@ -530,12 +552,14 @@ function isCallableStatus(status) {
 //#endregion
 //#region src/client/otp.ts
 /**
-* Read a one-time authentication code (OTP) from the current page URL's query
-* string, without side effects. Returns `undefined` when the parameter is absent.
+* Read a one-time authentication code (OTP) from the current page URL's
+* fragment, without side effects. Returns `undefined` when the parameter is
+* absent.
 */
 function readOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 	try {
-		return new URLSearchParams(globalThis.location?.search).get(param) || void 0;
+		const hash = globalThis.location?.hash?.replace(/^#/, "") ?? "";
+		return new URLSearchParams(hash).get(param) || void 0;
 	} catch {
 		return;
 	}
@@ -543,16 +567,18 @@ function readOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 function stripParamFromUrl(param) {
 	try {
 		const url = new URL(globalThis.location.href);
-		if (!url.searchParams.has(param)) return;
-		url.searchParams.delete(param);
+		const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+		if (!fragment.has(param)) return;
+		fragment.delete(param);
+		url.hash = fragment.toString();
 		globalThis.history?.replaceState(globalThis.history.state, "", url.href);
 	} catch {}
 }
 /**
-* Read the one-time code from the page URL and remove it from the address bar
-* (and the current history entry), so the single-use code isn't left in the
-* URL, browser history, or a `Referer`. Returns the code, or `undefined` when
-* absent.
+* Read the one-time code from the page URL fragment and remove it from the
+* address bar (and the current history entry), so the single-use code isn't
+* left in the URL, browser history, or a `Referer`. Returns the code, or
+* `undefined` when absent.
 */
 function consumeOtpFromUrl(param = DEVFRAME_OTP_URL_PARAM) {
 	const code = readOtpFromUrl(param);
@@ -2588,4 +2614,4 @@ async function getDevframeRpcClient(options = {}) {
 //#region src/client/index.ts
 const connectDevframe = getDevframeRpcClient;
 //#endregion
-export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, setupDevframeConnection };
+export { DevframeConnectionError, authenticateWithUrlOtp, connectDevframe, consumeOtpFromUrl, createClientSettings, createRpcStreamingClientHost, createScopedClientContext, getDevframeConnection, getDevframeRpcClient, isCallableStatus, readOtpFromUrl, registerDevframeViewerOrigin, resolveWsUrl, setupDevframeConnection };

package/dist/constants.d.mts

@@ -35,11 +35,14 @@ declare const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
  */
 declare const REMOTE_CONNECTION_KEY = "devframe-remote-connection";
 /**
- * Page-URL query parameter carrying a one-time authentication code (OTP) for
- * "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
- * the client reads the code, exchanges it for a token, and strips the parameter
- * from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
- * `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+ * Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+ * for "magic link" auth. A host can print a link like
+ * `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+ * token, and strips the parameter from the URL. The code rides the fragment
+ * (never the query string) so the browser never transmits it to the server,
+ * keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+ * (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+ * (or `connectDevframe`'s `otpParam`).
  */
 declare const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -50,6 +53,10 @@ declare const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
  * trusted before its own `anonymous:devframe:auth` handshake call arrives.
  */
 declare const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+declare const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+declare const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
  * Prefix that marks an RPC method as callable before a connection is
  * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -66,4 +73,4 @@ declare const ANONYMOUS_RPC_PREFIX = "anonymous:";
  */
 declare function isAnonymousRpcMethod(name: string): boolean;
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/constants.mjs

@@ -35,11 +35,14 @@ const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
 */
 const REMOTE_CONNECTION_KEY = "devframe-remote-connection";
 /**
-* Page-URL query parameter carrying a one-time authentication code (OTP) for
-* "magic link" auth. A host can print a link like `<origin>/?devframe_otp=<code>`;
-* the client reads the code, exchanges it for a token, and strips the parameter
-* from the URL. See `buildOtpAuthUrl` (node) and the `authenticateWithUrlOtp` /
-* `consumeOtpFromUrl` client utilities (or `connectDevframe`'s `otpParam`).
+* Page-URL **fragment** parameter carrying a one-time authentication code (OTP)
+* for "magic link" auth. A host can print a link like
+* `<origin>/#devframe_otp=<code>`; the client reads the code, exchanges it for a
+* token, and strips the parameter from the URL. The code rides the fragment
+* (never the query string) so the browser never transmits it to the server,
+* keeping it out of access logs and `Referer` headers. See `buildOtpAuthUrl`
+* (node) and the `authenticateWithUrlOtp` / `consumeOtpFromUrl` client utilities
+* (or `connectDevframe`'s `otpParam`).
 */
 const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 /**
@@ -50,6 +53,10 @@ const DEVFRAME_OTP_URL_PARAM = "devframe_otp";
 * trusted before its own `anonymous:devframe:auth` handshake call arrives.
 */
 const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
+/** External viewer origin requested during connection bootstrap. */
+const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
+/** Token that authorizes an external viewer origin registration. */
+const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
 * Prefix that marks an RPC method as callable before a connection is
 * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -68,4 +75,4 @@ function isAnonymousRpcMethod(name) {
 	return name.startsWith(ANONYMOUS_RPC_PREFIX);
 }
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/{context-C9Cgm1hP.mjs → context-CBg8iRbQ.mjs}

@@ -1,5 +1,6 @@
-import { t as createStorage } from "./storage-Dzoc3NVC.mjs";
-import { i as randomToken, n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-BtQDKTp7.mjs";
+import { n as randomToken } from "./crypto-token-XCqTSMg9.mjs";
+import { t as createStorage } from "./storage-CTNVbuFB.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-DZbJ7Cl0.mjs";
 import { join } from "pathe";
 //#region src/node/hub-internals/context.ts
 const internalContextMap = /* @__PURE__ */ new WeakMap();

package/dist/{context-7BbaIUSI.d.mts → context-DoSozfvx.d.mts}

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, ht as SharedState } from "./devframe-Dsjn_Xtq.mjs";
+import { b as DevframeNodeContext, ht as SharedState } from "./devframe-mQ4qZAuo.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{revoke-BtQDKTp7.mjs → crypto-token-XCqTSMg9.mjs}

@@ -42,38 +42,4 @@ function timingSafeEqual(a, b) {
 	return mismatch === 0;
 }
 //#endregion
-//#region src/node/auth/revoke.ts
-/**
-* Flip `isTrusted` to false on any live WS clients connected with `token`
-* and broadcast the `auth:revoked` event so they can react.
-*
-* Shared between persisted-auth revocation and remote-dock token revocation.
-*/
-async function revokeActiveConnectionsForToken(context, token) {
-	const rpcHost = context.rpc;
-	if (!rpcHost?._rpcGroup) return;
-	const affectedSessionIds = /* @__PURE__ */ new Set();
-	for (const client of rpcHost._rpcGroup.clients) if (client.$meta.clientAuthToken === token) {
-		affectedSessionIds.add(client.$meta.id);
-		client.$meta.isTrusted = false;
-		client.$meta.clientAuthToken = void 0;
-	}
-	if (affectedSessionIds.size === 0) return;
-	await rpcHost.broadcast({
-		method: "devframe:auth:revoked",
-		args: [],
-		filter: (client) => affectedSessionIds.has(client.$meta.id)
-	});
-}
-/**
-* Revoke an auth token: remove from storage and notify all connected clients
-* using this token that they are no longer trusted.
-*/
-async function revokeAuthToken(context, storage, token) {
-	storage.mutate((state) => {
-		delete state.trusted[token];
-	});
-	await revokeActiveConnectionsForToken(context, token);
-}
-//#endregion
-export { timingSafeEqual as a, randomToken as i, revokeAuthToken as n, randomDigits as r, revokeActiveConnectionsForToken as t };
+export { randomToken as n, timingSafeEqual as r, randomDigits as t };

package/dist/{dev-D4M7Veo7.mjs → dev-Bc49u3qg.mjs}

@@ -1,8 +1,8 @@
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
-import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-Kz7t5Xab.mjs";
-import { t as diagnostics } from "./diagnostics-B5-qHeqD.mjs";
-import { r as registerDevframeInstance } from "./instance-registry-D6fxYu36.mjs";
-import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-CcAPxuoT.mjs";
+import { n as createHostContext, t as createH3DevframeHost } from "./host-h3-D2hYZvDK.mjs";
+import { t as diagnostics } from "./diagnostics-D7wM2cwM.mjs";
+import { r as registerDevframeInstance } from "./instance-registry-BnnA2Eoh.mjs";
+import { i as normalizeHttpServerUrl, t as startHttpAndWs } from "./server-CD8XmBXl.mjs";
 import { n as resolveBasePath, t as normalizeBasePath } from "./_shared-bWRzeSa0.mjs";
 import { t as open } from "./open-Deb5xmIT.mjs";
 import { mountStaticHandler } from "./utils/serve-static.mjs";
@@ -295,7 +295,7 @@ async function createDevServer(def, options = {}) {
 		const mcpPath = joinURL(basePath, mcpRoute);
 		let mountMcpHttp;
 		try {
-			({mountMcpHttp} = await import("./http-BghOqfTD.mjs"));
+			({mountMcpHttp} = await import("./http-C4T68YV6.mjs"));
 		} catch (error) {
 			const reason = error instanceof Error ? error.message : String(error);
 			throw diagnostics.DF0017({
@@ -339,6 +339,8 @@ async function createDevServer(def, options = {}) {
 		path: bindPath,
 		wsPort,
 		auth: resolvedAuth,
+		onPeerConnect: options.onPeerConnect,
+		onPeerDisconnect: options.onPeerDisconnect,
 		onReady: async (info) => {
 			authHandler?.printBanner();
 			await options.onReady?.(info);

package/dist/{devframe-Dsjn_Xtq.d.mts → devframe-mQ4qZAuo.d.mts}

@@ -1,6 +1,6 @@
 import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-CnJSgRVa.mjs";
 import { w as RpcFunctionsCollectorBase } from "./index-Dbw1p5ch.mjs";
-import { t as DevframeNodeRpcSessionMeta } from "./ws-server-D_Vjtums.mjs";
+import { n as DevframeNodeRpcSessionMeta } from "./ws-server-uKQcClcJ.mjs";
 import { CAC } from "cac";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 import { Peer } from "crossws";
@@ -1414,6 +1414,15 @@ interface ConnectionMeta {
    * > from a publicly reachable static `__connection.json`.
    */
   authToken?: string;
+  /**
+   * Session-scoped token that lets a trusted external viewer register its
+   * browser origin before opening the WebSocket. The host includes it in the
+   * connection metadata, which the viewer obtains through the host page.
+   *
+   * Treat this as a bearer credential. Keep connection metadata containing the
+   * token same-origin until the requesting origin has been verified.
+   */
+  viewerOriginToken?: string;
 }
 //#endregion
 //#region src/types/utils.d.ts

package/dist/{diagnostics-B5-qHeqD.mjs → diagnostics-D7wM2cwM.mjs}

@@ -87,6 +87,10 @@ const diagnostics = defineDiagnostics({
 		DF0051: {
 			why: (p) => `The devframe instance on port ${p.port} has no MCP endpoint.`,
 			fix: "Restart the instance with the --mcp flag (or set `cli.mcp: true` on its definition) to expose its tools, then list instances again."
+		},
+		DF0052: {
+			why: (p) => `Failed to listen on ${p.host}:${p.port}: ${p.reason}`,
+			fix: "The port is likely already taken by another process (often a previous devframe instance). Free it, or pick another via `--port`, `cli.port` / `cli.portRange` on the definition, or `devMiddleware.port` on `viteDevBridge`. The original node error is available as `error.cause`."
 		}
 	}
 });

package/dist/{fetch-BZyK4v6W.mjs → fetch-BKaD0Vb3.mjs}

@@ -1,6 +1,6 @@
 import { isAllowedOrigin } from "./rpc/transports/ws-server.mjs";
-import { n as createHostContext } from "./host-h3-Kz7t5Xab.mjs";
-import { t as diagnostics } from "./diagnostics-B5-qHeqD.mjs";
+import { n as createHostContext } from "./host-h3-D2hYZvDK.mjs";
+import { t as diagnostics } from "./diagnostics-D7wM2cwM.mjs";
 import { t as toAgentToolName } from "./agent-tool-name-C3b5vEwJ.mjs";
 import { randomUUID } from "node:crypto";
 import { Diagnostic } from "nostics";
@@ -457,9 +457,10 @@ function parseResourceUri(uri) {
 * and MCP server (built from the shared, live `ctx` via
 * `buildMcpServerFromContext`), correlated by the `Mcp-Session-Id` header: an
 * `initialize` POST spins up a session; later requests route to it; a `DELETE`
-* (or client disconnect) tears it down. The origin gate applies devframe's
-* loopback-default DNS-rebinding protection (identical semantics to the WS
-* upgrade's `isAllowedOrigin`).
+* (or client disconnect) tears it down. The origin gate guards every request:
+* loopback-default DNS-rebinding protection that — unlike the WS upgrade's
+* `isAllowedOrigin` — also rejects `Origin`-less requests, so a route-based
+* endpoint isn't reachable by an arbitrary local process.
 *
 * @experimental
 */
@@ -503,7 +504,7 @@ function createMcpFetchHandler(ctx, options) {
 	}
 	async function handle(req) {
 		const origin = req.headers.get("origin") ?? void 0;
-		if (allowedOrigins !== false && !isAllowedOrigin(origin, allowedOrigins ?? [])) return new Response("Forbidden: origin not allowed", { status: 403 });
+		if (allowedOrigins !== false && (origin === void 0 || !isAllowedOrigin(origin, allowedOrigins ?? []))) return new Response("Forbidden: origin required", { status: 403 });
 		const sessionId = req.headers.get("mcp-session-id") ?? void 0;
 		let session = sessionId ? sessions.get(sessionId) : void 0;
 		if (!session && req.method === "POST") {

package/dist/helpers/vite.d.mts

@@ -1,4 +1,4 @@
-import { d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition } from "../devframe-Dsjn_Xtq.mjs";
+import { d as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition } from "../devframe-mQ4qZAuo.mjs";
 //#region src/helpers/vite.d.ts
 interface ViteDevBridgeOptions {
   /**
@@ -31,16 +31,17 @@ interface ViteDevBridgeOptions {
     flags?: Record<string, unknown>;
   };
   /**
-   * Whether the bridged devframe runs its own auth gate. This is a **hosted**
-   * adapter — the devframe shares the host app's origin and the host owns
-   * authentication — so it defaults to `false`: the plugin's own gate never
-   * fires and its `cli.auth` default is ignored (matching devframe's
-   * hosted-deployment contract). Pass `true` to force devframe's interactive
-   * OTP gate on, or a {@link DevframeAuthHandler} to install a custom scheme.
-   * Only applies in bridge mode (`devMiddleware`); the static-mount mode
+   * Whether the bridged devframe runs its own auth gate. The side-car RPC
+   * server is reachable by anything that can open its socket, so it **gates by
+   * default**: when unset, authentication resolves through `createDevServer`
+   * (devframe's interactive OTP gate unless the definition's `cli.auth` opts
+   * out), and the side-car prints its code/link banner to stdout. Pass a
+   * {@link DevframeAuthHandler} to install a custom scheme, or `false` to opt
+   * out for a single-user localhost host that owns the trust boundary another
+   * way. Only applies in bridge mode (`devMiddleware`); the static-mount mode
    * starts no RPC server.
    *
-   * @default false
+   * @default gated (devframe's interactive OTP, unless `cli.auth` opts out)
    */
   auth?: boolean | DevframeAuthHandler;
   /**
@@ -84,11 +85,11 @@ interface DevframeVitePlugin {
  *     host-served SPA can discover the WS endpoint via
  *     {@link connectDevframe}.
  *
- * As a hosted adapter the bridge defers authentication to the host: its
- * side-car RPC server runs with the plugin's own auth gate **off** by
- * default (ignoring `def.cli?.auth`), so a plugin mounted this way never
- * triggers its standalone OTP prompt. Opt back in per-mount with
- * `options.auth` (`true` for devframe's interactive gate, or a handler).
+ * The side-car RPC server **gates by default** (devframe's interactive OTP
+ * unless the definition's `cli.auth` opts out), printing its code/link banner
+ * to stdout, so a bridged devframe isn't silently reachable by anything that
+ * can open its socket. Pass `options.auth: false` to opt out for a single-user
+ * localhost host, or a {@link DevframeAuthHandler} for a custom scheme.
  *
  * Use bridge mode when integrating with frameworks that own the SPA
  * (Nuxt, Astro, SolidStart, plain Vite apps). For the all-in-one