devframe 0.8.2 → 0.9.0-beta.10

package/dist/constants.d.mts

@@ -1,7 +1,4 @@
 //#region src/constants.d.ts
-declare const DEVFRAME_MOUNT_PATH = "/__devframe/";
-declare const DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH = "/__devframe";
-declare const DEVFRAME_DIRNAME = "__devframe";
 declare const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
 /**
  * Global key holding the serializable connection prepared by
@@ -16,7 +13,23 @@ declare const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
  * both HTTP and WS, and a host server (Vite, etc.) can mount the WS upgrade
  * handler here without colliding with its own routes (HMR, asset serving).
  */
-declare const DEVFRAME_WS_ROUTE = "__devframe_ws";
+declare const DEVFRAME_WS_ROUTE = "__ws";
+/**
+ * Route the SSE RPC endpoint is bound to, relative to a devframe's base
+ * path. A single method-dispatched route: `GET` opens the event stream
+ * (server→client), `POST` carries RPC frames (client→server). Sits next to
+ * `__connection.json` so the deployed SPA reaches it on the same origin it
+ * loaded from — the transport for hosts and proxies where the WebSocket
+ * upgrade isn't available.
+ */
+declare const DEVFRAME_SSE_ROUTE = "__sse";
+/**
+ * Request header carrying the SSE session id on every RPC `POST`. The
+ * server mints the id as the stream's first event (`event: session`);
+ * the client echoes it here so the POST joins that stream's birpc
+ * channel. Mirrors birpc's own SSE helpers for wire compatibility.
+ */
+declare const DEVFRAME_SSE_SESSION_HEADER = "x-birpc-session";
 /**
  * Route the Streamable-HTTP MCP endpoint is bound to, relative to a
  * devframe's base path. Sits next to `__connection.json` and the WS route
@@ -26,7 +39,6 @@ declare const DEVFRAME_WS_ROUTE = "__devframe_ws";
 declare const DEVFRAME_MCP_ROUTE = "__mcp";
 declare const DEVFRAME_RPC_DUMP_MANIFEST_FILENAME = "__rpc-dump/index.json";
 declare const DEVFRAME_DOCK_IMPORTS_FILENAME = "__client-imports.js";
-declare const DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID = "/__devframe-client-imports.js";
 declare const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
 /**
  * URL fragment / query parameter name carrying the remote dock
@@ -57,6 +69,15 @@ declare const DEVFRAME_AUTH_TOKEN_QUERY_PARAM = "devframe_auth_token";
 declare const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
 /** Token that authorizes an external viewer origin registration. */
 declare const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
+/**
+ * `postMessage` type the remote-assets fallback page posts to `window.parent`
+ * on load. That page is what a devframe serves (with a 502) when its client
+ * assets can be reached neither locally nor through their CDN provider — the
+ * message lets an embedding viewer replace the bare page with its own UI
+ * (`@devframes/hub-ui` does, in its iframe view). Payload shape:
+ * `RemoteAssetsErrorMessage` (`devframe/types`).
+ */
+declare const DEVFRAME_REMOTE_ASSETS_ERROR_MESSAGE_TYPE = "devframe:remote-assets-error";
 /**
  * Prefix that marks an RPC method as callable before a connection is
  * trusted. This is the *only* rule the pre-trust gate applies — there is no
@@ -68,9 +89,9 @@ declare const ANONYMOUS_RPC_PREFIX = "anonymous:";
 /**
  * Whether `name` is callable before a connection is trusted, i.e. it starts
  * with {@link ANONYMOUS_RPC_PREFIX}. Used by the resolver gate in
- * `startHttpAndWs` (via an `authorize` function) and by host adapters that
+ * the RPC server binding (via an `authorize` function) and by host adapters that
  * implement their own transport.
  */
 declare function isAnonymousRpcMethod(name: string): boolean;
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_MCP_ROUTE, DEVFRAME_OTP_URL_PARAM, DEVFRAME_REMOTE_ASSETS_ERROR_MESSAGE_TYPE, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_SSE_ROUTE, DEVFRAME_SSE_SESSION_HEADER, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/constants.mjs

@@ -1,7 +1,4 @@
 //#region src/constants.ts
-const DEVFRAME_MOUNT_PATH = "/__devframe/";
-const DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH = "/__devframe";
-const DEVFRAME_DIRNAME = "__devframe";
 const DEVFRAME_CONNECTION_META_FILENAME = "__connection.json";
 /**
 * Global key holding the serializable connection prepared by
@@ -16,7 +13,23 @@ const DEVFRAME_CONNECTION_KEY = "__DEVFRAME_CONNECTION__";
 * both HTTP and WS, and a host server (Vite, etc.) can mount the WS upgrade
 * handler here without colliding with its own routes (HMR, asset serving).
 */
-const DEVFRAME_WS_ROUTE = "__devframe_ws";
+const DEVFRAME_WS_ROUTE = "__ws";
+/**
+* Route the SSE RPC endpoint is bound to, relative to a devframe's base
+* path. A single method-dispatched route: `GET` opens the event stream
+* (server→client), `POST` carries RPC frames (client→server). Sits next to
+* `__connection.json` so the deployed SPA reaches it on the same origin it
+* loaded from — the transport for hosts and proxies where the WebSocket
+* upgrade isn't available.
+*/
+const DEVFRAME_SSE_ROUTE = "__sse";
+/**
+* Request header carrying the SSE session id on every RPC `POST`. The
+* server mints the id as the stream's first event (`event: session`);
+* the client echoes it here so the POST joins that stream's birpc
+* channel. Mirrors birpc's own SSE helpers for wire compatibility.
+*/
+const DEVFRAME_SSE_SESSION_HEADER = "x-birpc-session";
 /**
 * Route the Streamable-HTTP MCP endpoint is bound to, relative to a
 * devframe's base path. Sits next to `__connection.json` and the WS route
@@ -26,7 +39,6 @@ const DEVFRAME_WS_ROUTE = "__devframe_ws";
 const DEVFRAME_MCP_ROUTE = "__mcp";
 const DEVFRAME_RPC_DUMP_MANIFEST_FILENAME = "__rpc-dump/index.json";
 const DEVFRAME_DOCK_IMPORTS_FILENAME = "__client-imports.js";
-const DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID = "/__devframe-client-imports.js";
 const DEVFRAME_RPC_DUMP_DIRNAME = "__rpc-dump";
 /**
 * URL fragment / query parameter name carrying the remote dock
@@ -58,6 +70,15 @@ const DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM = "devframe_viewer_origin";
 /** Token that authorizes an external viewer origin registration. */
 const DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM = "devframe_viewer_origin_token";
 /**
+* `postMessage` type the remote-assets fallback page posts to `window.parent`
+* on load. That page is what a devframe serves (with a 502) when its client
+* assets can be reached neither locally nor through their CDN provider — the
+* message lets an embedding viewer replace the bare page with its own UI
+* (`@devframes/hub-ui` does, in its iframe view). Payload shape:
+* `RemoteAssetsErrorMessage` (`devframe/types`).
+*/
+const DEVFRAME_REMOTE_ASSETS_ERROR_MESSAGE_TYPE = "devframe:remote-assets-error";
+/**
 * Prefix that marks an RPC method as callable before a connection is
 * trusted. This is the *only* rule the pre-trust gate applies — there is no
 * per-method allowlist. Any handshake method a host adapter needs to reach
@@ -68,11 +89,11 @@ const ANONYMOUS_RPC_PREFIX = "anonymous:";
 /**
 * Whether `name` is callable before a connection is trusted, i.e. it starts
 * with {@link ANONYMOUS_RPC_PREFIX}. Used by the resolver gate in
-* `startHttpAndWs` (via an `authorize` function) and by host adapters that
+* the RPC server binding (via an `authorize` function) and by host adapters that
 * implement their own transport.
 */
 function isAnonymousRpcMethod(name) {
 	return name.startsWith(ANONYMOUS_RPC_PREFIX);
 }
 //#endregion
-export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DIRNAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_DOCK_IMPORTS_VIRTUAL_ID, DEVFRAME_MCP_ROUTE, DEVFRAME_MOUNT_PATH, DEVFRAME_MOUNT_PATH_NO_TRAILING_SLASH, DEVFRAME_OTP_URL_PARAM, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };
+export { ANONYMOUS_RPC_PREFIX, DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_CONNECTION_KEY, DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_DOCK_IMPORTS_FILENAME, DEVFRAME_MCP_ROUTE, DEVFRAME_OTP_URL_PARAM, DEVFRAME_REMOTE_ASSETS_ERROR_MESSAGE_TYPE, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME, DEVFRAME_SSE_ROUTE, DEVFRAME_SSE_SESSION_HEADER, DEVFRAME_VIEWER_ORIGIN_QUERY_PARAM, DEVFRAME_VIEWER_ORIGIN_TOKEN_QUERY_PARAM, DEVFRAME_WS_ROUTE, REMOTE_CONNECTION_KEY, isAnonymousRpcMethod };

package/dist/{context-DoSozfvx.d.mts → context-B3YUu_95.d.mts}

@@ -1,4 +1,4 @@
-import { b as DevframeNodeContext, ht as SharedState } from "./devframe-mQ4qZAuo.mjs";
+import { g as DevframeNodeContext, lt as SharedState } from "./devframe-DJMg0WLe.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {
@@ -44,6 +44,24 @@ interface DevframeInternalContext {
     /** Full `ws://` or `wss://` URL with host and port. */
     url: string;
   };
+  /**
+   * Set {@link DevframeInternalContext.wsEndpoint} and notify subscribers —
+   * the WS-binding tiers (side-car, shared-server, and the `unbound` tier's
+   * `attach()`) call this once the socket is bound (or `undefined` once torn
+   * down) instead of assigning the field directly, so anything that already
+   * projected the endpoint (a hub's remote-dock URLs, registered before an
+   * async bind resolves) gets a chance to re-project it.
+   */
+  setWsEndpoint: (endpoint: {
+    url: string;
+  } | undefined) => void;
+  /**
+   * Subscribe to every {@link DevframeInternalContext.setWsEndpoint} call.
+   * Returns an unsubscribe function. The hub context uses this to refresh
+   * the `devframe:docks` shared state so a remote dock registered before the
+   * WS port resolves still ends up with a live connection URL.
+   */
+  onWsEndpointChange: (cb: () => void) => () => void;
 }
 declare const internalContextMap: WeakMap<DevframeNodeContext, DevframeInternalContext>;
 declare function getInternalContext(context: DevframeNodeContext): DevframeInternalContext;