devframe 0.9.0-beta.1 → 0.9.0-beta.10

package/dist/{devframe-Bdd9YXTy.d.mts → devframe-DJMg0WLe.d.mts}

@@ -1,10 +1,11 @@
-import { d as RpcFunctionsCollectorBase } from "./index-DSCq4M4q.mjs";
-import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-CnJSgRVa.mjs";
-import { d as DevframeRpcConnection, u as DevframeNodeRpcSessionMeta } from "./ws-server-Ces08fjP.mjs";
+import { d as RpcFunctionsCollectorBase } from "./index-tdrk1bzV.mjs";
+import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-Djq7CBXh.mjs";
+import { d as DevframeRpcConnection, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
+import { m as defineDiagnostics } from "./nostics-SPGDgHEP.mjs";
+import { a as RemoteAssetsStore, o as StaticAssetsSource } from "./remote-assets-Bg4gCUZ_.mjs";
 import { CAC } from "cac";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 import { BirpcReturn } from "birpc";
-import { Diagnostic, DiagnosticDefinition, defineDiagnostics } from "nostics";
 //#region src/adapters/flags.d.ts
 /**
  * Schema map for typed CLI flags. Keys are flag names in camelCase —
@@ -119,9 +120,6 @@ interface EventEmitter<Events extends EventsMap> {
  * Serializable description of an agent-exposed tool. This is the shape
  * returned by the agent host manifest and surfaced over the wire by
  * the `devframe:agent:list-tools` introspection RPC.
- *
- * @experimental The agent-native surface is experimental and may change
- * without a major version bump until it stabilizes.
  */
 interface AgentTool {
   /** Stable identifier. For RPC-backed tools, matches the RPC name. */
@@ -159,8 +157,6 @@ interface AgentTool {
 /**
  * Input accepted by `DevframeAgentHost.registerTool()`. Handler is
  * stripped from the serializable `AgentTool` projection.
- *
- * @experimental
  */
 interface AgentToolInput {
   id: string;
@@ -191,8 +187,6 @@ interface AgentToolInput {
 /**
  * Serializable description of an agent-readable resource. Resources
  * surface structured or textual snapshots of devframe state.
- *
- * @experimental
  */
 interface AgentResource {
   id: string;
@@ -205,8 +199,6 @@ interface AgentResource {
 }
 /**
  * Input accepted by `DevframeAgentHost.registerResource()`.
- *
- * @experimental
  */
 interface AgentResourceInput {
   id: string;
@@ -220,8 +212,6 @@ interface AgentResourceInput {
 }
 /**
  * Payload returned by `AgentResourceInput.read`. Either `text` or `json` must be set.
- *
- * @experimental
  */
 interface AgentResourceContent {
   text?: string;
@@ -231,8 +221,6 @@ interface AgentResourceContent {
 }
 /**
  * Unified view of the agent-exposed surface.
- *
- * @experimental
  */
 interface AgentManifest {
   tools: readonly AgentTool[];
@@ -240,8 +228,6 @@ interface AgentManifest {
 }
 /**
  * Handle returned by `registerTool` / `registerResource`.
- *
- * @experimental
  */
 interface AgentHandle {
   unregister: () => void;
@@ -256,14 +242,10 @@ interface AgentHandle {
  * Providers should namespace tool ids like any other tool; on an id
  * collision the earlier source wins (registered tools, then RPC tools,
  * then providers in registration order).
- *
- * @experimental
  */
 type AgentToolProvider = () => readonly AgentToolInput[];
 /**
  * Handle returned by `registerToolProvider`.
- *
- * @experimental
  */
 interface AgentToolProviderHandle extends AgentHandle {
   /**
@@ -275,8 +257,6 @@ interface AgentToolProviderHandle extends AgentHandle {
 }
 /**
  * Events emitted by `DevframeAgentHost`.
- *
- * @experimental
  */
 interface DevframeAgentHostEvents {
   'agent:tool:registered': (tool: AgentTool) => void;
@@ -294,9 +274,6 @@ interface DevframeAgentHostEvents {
  * RPC functions flagged with `agent` and plugin-registered tools /
  * resources. Consumed by protocol adapters such as the devframe MCP
  * adapter.
- *
- * @experimental The agent-native surface is experimental and may change
- * without a major version bump until it stabilizes.
  */
 interface DevframeAgentHost {
   readonly events: EventEmitter<DevframeAgentHostEvents>;
@@ -859,14 +836,6 @@ interface RpcStreamingHost {
 }
 //#endregion
 //#region src/types/diagnostics.d.ts
-/**
- * A diagnostics definition object built with `defineDiagnostics`. Typed as
- * `unknown` because each integration's definition has a distinct narrow shape
- * (e.g. specific code keys like `DF0001` / `MYP0001`), and TypeScript's mapped
- * types don't allow assigning a narrow-keyed result to a generically-keyed
- * one. The host stores them in a heterogeneous registry.
- */
-type DevframeDiagnosticsDefinition = ReturnType<typeof defineDiagnostics<any, any>>;
 /**
  * The shared diagnostics lookup exposed by the host. A `Proxy` that resolves
  * any registered code name to its `nostics` handle (a callable that builds
@@ -875,16 +844,6 @@ type DevframeDiagnosticsDefinition = ReturnType<typeof defineDiagnostics<any, an
  * integrations.
  */
 type DevframeDiagnosticsLogger = Record<string, any>;
-/**
- * Options accepted by the host's `defineDiagnostics()` factory — mirrors
- * `nostics`'s shape but the host pre-wires its ANSI console reporter, so
- * plugins typically omit `reporters`.
- */
-interface DevframeDefineDiagnosticsOptions<Codes extends Record<string, DiagnosticDefinition>> {
-  docsBase?: string | ((code: keyof Codes) => string | undefined);
-  codes: Codes;
-  reporters?: ReadonlyArray<(d: Diagnostic, o?: any) => void>;
-}
 /**
  * Host for structured diagnostics — a thin layer over `nostics` that lets
  * integrations register their own coded errors/warnings into a shared
@@ -927,21 +886,25 @@ interface DevframeDiagnosticsHost {
   register: (definitions: Record<string, unknown>) => void;
   /**
    * Build a typed diagnostics object with the host's ANSI console reporter
-   * pre-wired. Mirrors `nostics`'s `defineDiagnostics` so integrations don't
-   * need to take a direct dependency on `nostics`.
+   * pre-wired. The same `devframe/utils/nostics` `defineDiagnostics` every
+   * built-in plugin's module-level `diagnostics.ts` uses, so integrations
+   * don't need to take a direct dependency on `nostics`.
    */
-  defineDiagnostics: <const Codes extends Record<string, DiagnosticDefinition>>(options: DevframeDefineDiagnosticsOptions<Codes>) => ReturnType<typeof defineDiagnostics<Codes, any>>;
+  defineDiagnostics: typeof defineDiagnostics;
 }
 //#endregion
 //#region src/types/host.d.ts
 interface DevframeHost {
   /**
-   * Serve a static directory at the given URL base. Called by
-   * `DevframeViewHost.hostStatic`. Implementations map this to whatever
+   * Serve static assets at the given URL base — a local directory, or a
+   * resolved {@link RemoteAssetsStore} back-proxy. Called by
+   * `DevframeViewHost.hostStatic` (which normalizes `RemoteAssets`
+   * declarations into stores first). Implementations map this to whatever
    * the underlying runtime expects (Vite middleware, h3 handler, no-op
-   * for build snapshots).
+   * for build snapshots) — the shared engine in
+   * `devframe/utils/serve-static` accepts either shape.
    */
-  mountStatic: (base: string, distDir: string) => void | Promise<void>;
+  mountStatic: (base: string, source: string | RemoteAssetsStore) => void | Promise<void>;
   /**
    * Serve the host's connection meta (`__connection.json`) at the given URL
    * base, so a devframe SPA mounted there can discover the RPC/WS endpoint
@@ -1006,14 +969,17 @@ interface DevframeViewHost {
    */
   buildStaticDirs: {
     baseUrl: string;
-    distDir: string;
+    source: StaticAssetsSource;
   }[];
   /**
    * Helper to host static files
    * - In `dev` mode, it will register middleware to `viteServer.middlewares` to host the static files
    * - In `build` mode, it will copy the static files to the dist directory
+   *
+   * Accepts a local dist directory, or a {@link StaticAssetsSource} remote
+   * declaration served through devframe's caching CDN back-proxy.
    */
-  hostStatic: (baseUrl: string, distDir: string) => void;
+  hostStatic: (baseUrl: string, source: StaticAssetsSource) => void;
 }
 //#endregion
 //#region src/types/scope.d.ts
@@ -1303,8 +1269,6 @@ interface DevframeNodeContext {
   diagnostics: DevframeDiagnosticsHost;
   /**
    * Agent host — aggregates the agent-exposed surface of this devtool.
-   *
-   * @experimental
    */
   agent: DevframeAgentHost;
   /**
@@ -1316,6 +1280,22 @@ interface DevframeNodeContext {
    * absorb setup-order differences between provider and consumer.
    */
   services: DevframeServicesHost;
+  /**
+   * This context's own {@link ConnectionMeta.configs} — static, boot-time
+   * config a host publishes once through the connection handshake and every
+   * client reads read-only. A plain, **non-reactive** object: mutate it
+   * during `setup(ctx)` (a plugin sets its keys, a hub aggregates across
+   * every installed devframe), never during the session — it's serialized
+   * once, after setup, and changing it afterwards reaches no client.
+   *
+   * ```ts
+   * ctx.staticConfig.dock = {
+   *   ...ctx.staticConfig.dock,
+   *   categoryOrder: { ...ctx.staticConfig.dock?.categoryOrder, ...myOrder },
+   * }
+   * ```
+   */
+  staticConfig: Partial<DevframeConnectionConfigsRegistry>;
   /**
    * Create a namespace-scoped view of this context. The returned
    * `ctx.scope('my-plugin')` auto-namespaces every RPC id, shared-state
@@ -1406,7 +1386,7 @@ interface ConnectionMeta {
    * tooling (e.g. an MCP inspector) can discover it without guessing the
    * path. `path` is relative to `__connection.json`'s location, like the
    * WebSocket `path`. `port` is set when the endpoint lives on a side-car
-   * server on its own port (bridge mode — `viteDevBridge`,
+   * server on its own port (bridge mode — `devframeViteBridge`,
    * `@devframes/next`): the client combines the page hostname with `port`
    * and resolves `path` against that origin, mirroring
    * {@link ConnectionMetaWebsocket.port}.
@@ -1457,16 +1437,38 @@ interface ConnectionMeta {
    * token same-origin until the requesting origin has been verified.
    */
   viewerOriginToken?: string;
+  /**
+   * Static, host-declared configuration — baked in once at connect time and
+   * fixed for the life of the server (e.g. a hub's UI rebrand, or its
+   * aggregated dock-bar layout preferences). Read-only from the browser: a
+   * client only ever reads `rpc.connectionMeta.configs`, never writes to it.
+   *
+   * Contrast this with {@link DevframeSettingsRegistry} (`ctx.scope(ns).settings`)
+   * and a hub's `devframe:user-settings` shared-state key — both are
+   * mutable, user-editable, and synced bidirectionally over RPC for the
+   * life of the session. `configs` is the opposite: one-way, immutable,
+   * decided by whoever assembled the server.
+   *
+   * Each key is owned by one package, contributed via declaration merging:
+   *
+   * ```ts
+   * declare module 'devframe/types' {
+   *   interface DevframeConnectionConfigsRegistry {
+   *     'my-key': { some: 'shape' }
+   *   }
+   * }
+   * ```
+   */
+  configs?: Partial<DevframeConnectionConfigsRegistry>;
 }
-//#endregion
-//#region src/types/utils.d.ts
-type Thenable<T> = T | Promise<T>;
-type EntriesToObject<T extends readonly [string, any][]> = { [K in T[number] as K[0]]: K[1]; };
-type PartialWithoutId<T extends {
-  id: string;
-}> = Partial<Omit<T, 'id'>> & {
-  id: string;
-};
+/**
+ * Augmentation point for {@link ConnectionMeta.configs}. Empty by default —
+ * a package that wants to publish static, boot-time config through the
+ * connection handshake augments this interface with its own key (see
+ * {@link ConnectionMeta.configs} for the pattern). `@devframes/hub`
+ * augments it with `dock`; `@devframes/hub-ui` augments it with `ui`.
+ */
+interface DevframeConnectionConfigsRegistry {}
 //#endregion
 //#region src/node/auth/handler.d.ts
 /**
@@ -1519,12 +1521,11 @@ interface DevframeAuthHandler {
 }
 //#endregion
 //#region src/types/devframe.d.ts
-type DevframeRuntime = 'cli' | 'build' | 'spa' | 'vite' | 'embedded';
 /**
  * Classification of how a devframe is being deployed. Hosted adapters
  * (`vite`, `embedded`) share their origin with a host app and must
  * namespace their mount path under `/__<id>/`. Standalone adapters
- * (`cli`, `spa`, `build`) own the origin and default to `/`.
+ * (`cli`, `build`) own the origin and default to `/`.
  */
 type DevframeDeploymentKind = 'standalone' | 'hosted';
 /**
@@ -1601,9 +1602,6 @@ interface DevframeSseOptions {
  * the MCP Streamable-HTTP transport over the same origin as the SPA,
  * exposing the definition's `ctx.agent` tools + shared-state resources to
  * external MCP clients connected to the *running* server.
- *
- * @experimental The agent-native surface is experimental and may change
- * without a major version bump until it stabilizes.
  */
 interface McpRouteOptions {
   /**
@@ -1645,7 +1643,7 @@ interface DevframeCliOptions {
   /**
    * Authentication for the standalone dev server.
    *
-   *   - `undefined` / `true` — the standalone adapters (`cli` / `spa` /
+   *   - `undefined` / `true` — the standalone adapters (`cli` /
    *     served `build`) auto-wire devframe's interactive OTP auth
    *     (`createInteractiveAuth`): an untrusted client can only reach
    *     `anonymous:` methods until it exchanges the printed one-time code.
@@ -1676,12 +1674,15 @@ interface DevframeCliOptions {
    * - {@link McpRouteOptions} — customise the route path / allowed origins.
    *
    * The `--mcp` / `--no-mcp` CLI flags override this per run.
-   *
-   * @experimental
    */
   mcp?: boolean | McpRouteOptions;
-  /** Author's SPA dist directory (served as the devframe's UI). */
-  distDir?: string;
+  /**
+   * Author's SPA dist — served as the devframe's UI. A local directory, or
+   * a {@link StaticAssetsSource} remote declaration (`{ package, version }`)
+   * served through devframe's caching CDN back-proxy so the assets need not
+   * ship inside the node package.
+   */
+  distDir?: StaticAssetsSource;
   /**
    * How the browser reaches the RPC WebSocket. Defaults to sharing the HTTP
    * port on the `__ws` route. See {@link DevframeWsOptions} for the
@@ -1697,7 +1698,7 @@ interface DevframeCliOptions {
   sse?: boolean | DevframeSseOptions;
   /**
    * Capability-side CAC hook. Called with the CAC instance after the
-   * adapter registers its built-in commands (`build` / `spa` / `mcp`)
+   * adapter registers its built-in commands (`build` / `mcp`)
    * but before `createCac`'s own `configureCli` caller. Use this to
    * contribute tool-specific flags and subcommands from the definition
    * itself.
@@ -1738,7 +1739,7 @@ interface DevframeCliOptions {
  *
  * Every field is optional. `title` / `icon` default to the definition's
  * `name` / `icon` when omitted here; the rest are unset by default.
- * Standalone adapters (`cli` / `spa` / `build`) ignore this entirely.
+ * Standalone adapters (`cli` / `build`) ignore this entirely.
  */
 interface DevframeDockDefaults {
   /** Dock entry title. Defaults to the definition's `name`. */
@@ -1775,22 +1776,6 @@ interface DevframeDockDefaults {
   /** Id of the dock group this entry collapses under, if any. */
   groupId?: string;
 }
-interface DevframeSpaOptions {
-  base?: string;
-  /**
-   * How the deployed SPA loads its data.
-   * - `'query'` — read from URL search params.
-   * - `'upload'` — accept a file drag-drop.
-   * - `'none'`  — use the baked RPC dump only.
-   */
-  loader?: 'query' | 'upload' | 'none';
-}
-interface DevframeBrowserContext {
-  /**
-   * The connected RPC client (may be write-disabled in static/spa modes).
-   */
-  rpc: unknown;
-}
 /**
  * Runtime information threaded into `setup(ctx, info)`. Adapters
  * populate the fields that make sense for their deployment. In
@@ -1819,47 +1804,46 @@ interface DevframeDefinition {
    * Default dock attributes applied when a hub mounts this devframe as an
    * iframe dock entry. Consulted only by the hub install path (`ctx.install`),
    * which merge these beneath the per-mount `dock` overrides; standalone
-   * adapters (`cli` / `spa` / `build`) ignore it.
+   * adapters (`cli` / `build`) ignore it.
    *
    * @see {@link DevframeDockDefaults}
    */
   dock?: DevframeDockDefaults;
   /**
    * Mount path override. Defaults depend on the adapter:
-   * `/` for standalone (`cli` / `spa` / `build`), `/__<id>/` for hosted
+   * `/` for standalone (`cli` / `build`), `/__<id>/` for hosted
    * (`vite` / `embedded`).
    */
   basePath?: string;
   /**
    * How a hub reacts when another devframe sharing this one's `id` is
    * mounted onto the same hub. Consulted only by hub adapters
-   * (`ctx.install`); standalone adapters (`cli` / `spa` / `build`)
+   * (`ctx.install`); standalone adapters (`cli` / `build`)
    * ignore it.
    *
    * @default 'warn'
    */
   duplicationStrategy?: DevframeDuplicationStrategy;
   /**
-   * Declares which runtimes meaningfully support this devframe. Consulted
-   * by adapters that can act on a plain `false` before doing any work:
-   * `createCac` skips registering the `build` subcommand entirely when
-   * `capabilities.build` is `false` — useful for a devframe whose value is
-   * inherently live (e.g. it manages real files on disk), so a static
-   * export would only ever produce a broken, write-less shell of the tool.
-   * The `Record<string, boolean>` shape is reserved for finer-grained
-   * sub-capabilities and currently unconsumed by any adapter.
+   * Declares which runtimes meaningfully support this devframe. Adapters
+   * act on a `false` before doing any work:
+   *
+   * - `build: false` — `createCac` skips registering the `build` subcommand,
+   *   and `createBuild` refuses (throws `DF0042`) unless `{ force: true }`.
+   *   Useful for a devframe whose value is inherently live (e.g. it manages
+   *   real files on disk), so a static export would only ever produce a
+   *   broken, write-less shell of the tool.
+   * - `dev: false` — `createDevServer` refuses (throws `DF0058`) unless
+   *   `{ force: true }`. Useful for a devframe that only makes sense as a
+   *   static export (e.g. a report generator with nothing to serve live).
    */
   capabilities?: {
-    dev?: boolean | Record<string, boolean>;
-    build?: boolean | Record<string, boolean>;
-    spa?: boolean | Record<string, boolean>;
+    dev?: boolean;
+    build?: boolean;
   };
   /** Server-side setup — the primary entrypoint. Runs in every runtime. */
   setup: (ctx: DevframeNodeContext, info?: DevframeSetupInfo) => void | Promise<void>;
-  /** Browser-only setup for the SPA adapter (bundled into the client). */
-  setupBrowser?: (ctx: DevframeBrowserContext) => void | Promise<void>;
   cli?: DevframeCliOptions;
-  spa?: DevframeSpaOptions;
 }
 //#endregion
-export { DevframeRpcClientFunctions as $, DevframeSettingsRegistry as A, DevframeAgentHost as At, DevframeStorageScope as B, DevframeServiceOf as C, AgentResource as Ct, DevframeScopedNodeRpc as D, AgentToolInput as Dt, DevframeScopedNodeContext as E, AgentTool as Et, ScopedServerFunctions as F, CliFlagsSchema as Ft, DevframeNodeRpcSession as G, DevframeDiagnosticsDefinition as H, ScopedSharedStates as I, InferCliFlags as It, RpcSharedStateGetOptions as J, RpcBroadcastOptions as K, SettingsForNamespace as L, defineCliFlags as Lt, ScopedBroadcastOptions as M, EventEmitter as Mt, ScopedClientFunctions as N, EventUnsubscribe as Nt, DevframeScopedStreamingHost as O, AgentToolProvider as Ot, ScopedRpcFn as P, EventsMap as Pt, RpcStreamingHost as Q, DevframeViewHost as R, parseCliFlags as Rt, DevframeServiceId as S, AgentManifest as St, DevframeServicesRegistry as T, AgentResourceInput as Tt, DevframeDiagnosticsHost as U, DevframeDefineDiagnosticsOptions as V, DevframeDiagnosticsLogger as W, RpcStreamingChannel as X, RpcSharedStateHost as Y, RpcStreamingChannelOptions as Z, ConnectionMeta as _, SharedStateEvents as _t, DevframeDockDefaults as a, StreamErrorPayload as at, DevframeCapabilities as b, createSharedState as bt, DevframeSetupInfo as c, StreamSinkEvents as ct, DevframeWsOptions as d, Immutable as dt, DevframeRpcServerFunctions as et, McpRouteOptions as f, ImmutableArray as ft, Thenable as g, SharedState as gt, PartialWithoutId as h, ImmutableSet as ht, DevframeDeploymentKind as i, CreateStreamSinkOptions as it, DevframeSettingsStore as j, DevframeAgentHostEvents as jt, DevframeSettings as k, AgentToolProviderHandle as kt, DevframeSpaOptions as l, createStreamReader as lt, EntriesToObject as m, ImmutableObject as mt, DevframeCliOptions as n, BufferedChunk as nt, DevframeDuplicationStrategy as o, StreamReader as ot, DevframeAuthHandler as p, ImmutableMap as pt, RpcFunctionsHost as q, DevframeDefinition as r, CreateStreamReaderOptions as rt, DevframeRuntime as s, StreamSink as st, DevframeBrowserContext as t, DevframeRpcSharedStates as tt, DevframeSseOptions as u, createStreamSink as ut, ConnectionMetaSse as v, SharedStateOptions as vt, DevframeServicesHost as w, AgentResourceContent as wt, DevframeNodeContext as x, AgentHandle as xt, ConnectionMetaWebsocket as y, SharedStatePatch as yt, DevframeHost as z };
+export { StreamReader as $, ScopedServerFunctions as A, defineCliFlags as At, RpcFunctionsHost as B, DevframeScopedStreamingHost as C, DevframeAgentHost as Ct, ScopedBroadcastOptions as D, EventsMap as Dt, DevframeSettingsStore as E, EventUnsubscribe as Et, DevframeStorageScope as F, RpcStreamingHost as G, RpcSharedStateHost as H, DevframeDiagnosticsHost as I, DevframeRpcSharedStates as J, DevframeRpcClientFunctions as K, DevframeDiagnosticsLogger as L, SettingsForNamespace as M, DevframeViewHost as N, ScopedClientFunctions as O, CliFlagsSchema as Ot, DevframeHost as P, StreamErrorPayload as Q, DevframeNodeRpcSession as R, DevframeScopedNodeRpc as S, AgentToolProviderHandle as St, DevframeSettingsRegistry as T, EventEmitter as Tt, RpcStreamingChannel as U, RpcSharedStateGetOptions as V, RpcStreamingChannelOptions as W, CreateStreamReaderOptions as X, BufferedChunk as Y, CreateStreamSinkOptions as Z, DevframeServiceId as _, AgentResourceContent as _t, DevframeDuplicationStrategy as a, ImmutableArray as at, DevframeServicesRegistry as b, AgentToolInput as bt, DevframeWsOptions as c, ImmutableSet as ct, ConnectionMeta as d, SharedStateOptions as dt, StreamSink as et, ConnectionMetaSse as f, SharedStatePatch as ft, DevframeNodeContext as g, AgentResource as gt, DevframeConnectionConfigsRegistry as h, AgentManifest as ht, DevframeDockDefaults as i, Immutable as it, ScopedSharedStates as j, parseCliFlags as jt, ScopedRpcFn as k, InferCliFlags as kt, McpRouteOptions as l, SharedState as lt, DevframeCapabilities as m, AgentHandle as mt, DevframeDefinition as n, createStreamReader as nt, DevframeSetupInfo as o, ImmutableMap as ot, ConnectionMetaWebsocket as p, createSharedState as pt, DevframeRpcServerFunctions as q, DevframeDeploymentKind as r, createStreamSink as rt, DevframeSseOptions as s, ImmutableObject as st, DevframeCliOptions as t, StreamSinkEvents as tt, DevframeAuthHandler as u, SharedStateEvents as ut, DevframeServiceOf as v, AgentResourceInput as vt, DevframeSettings as w, DevframeAgentHostEvents as wt, DevframeScopedNodeContext as x, AgentToolProvider as xt, DevframeServicesHost as y, AgentTool as yt, RpcBroadcastOptions as z };

package/dist/{diagnostics-hwjXp_UV.mjs → diagnostics-CD8nlgll.mjs}

@@ -1,9 +1,7 @@
-import { t as devframeReporter } from "./diagnostics-reporter-CsIG85Q5.mjs";
-import { defineDiagnostics } from "nostics";
+import { i as defineDiagnostics } from "./nostics-CzECRXpE.mjs";
 //#region src/rpc/diagnostics.ts
 const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
-	reporters: [devframeReporter],
 	codes: {
 		DF0019: {
 			why: (p) => `RPC function "${p.name}" has \`agent\` set but \`jsonSerializable\` is not \`true\` — MCP requires JSON-serializable data.`,

package/dist/{diagnostics-DLYH5oD3.mjs → diagnostics-DOQPnQmX.mjs}

@@ -1,9 +1,7 @@
-import { t as devframeReporter } from "./diagnostics-reporter-CsIG85Q5.mjs";
-import { defineDiagnostics } from "nostics";
+import { i as defineDiagnostics } from "./nostics-CzECRXpE.mjs";
 //#region src/node/diagnostics.ts
 const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
-	reporters: [devframeReporter],
 	codes: {
 		DF0006: { why: (p) => `RPC function "${p.name}" is not registered` },
 		DF0007: { why: "AsyncLocalStorage is not set, it likely to be an internal bug of the Devframe foundation" },
@@ -38,7 +36,7 @@ const diagnostics = defineDiagnostics({
 		},
 		DF0033: {
 			why: (p) => `Failed to start dev RPC bridge for "${p.id}": ${p.reason}`,
-			fix: "Verify the bridge port is free and the devframe setup function does not throw. Pin a port via `cli.port` / `cli.portRange` on the definition, or via `devMiddleware.port` on `viteDevBridge`."
+			fix: "Verify the bridge port is free and the devframe setup function does not throw. Pin a port via `cli.port` / `cli.portRange` on the definition, or via `port` on `devframeViteBridge` (`@devframes/vite`)."
 		},
 		DF0034: {
 			why: (p) => `Scoped RPC registration for namespace "${p.namespace}" received an already-namespaced function name "${p.name}".`,
@@ -90,7 +88,7 @@ const diagnostics = defineDiagnostics({
 		},
 		DF0052: {
 			why: (p) => `Failed to listen on ${p.host}:${p.port}: ${p.reason}`,
-			fix: "The port is likely already taken by another process (often a previous devframe instance). Free it, or pick another via `--port`, `cli.port` / `cli.portRange` on the definition, or `devMiddleware.port` on `viteDevBridge`. The original node error is available as `error.cause`."
+			fix: "The port is likely already taken by another process (often a previous devframe instance). Free it, or pick another via `--port`, `cli.port` / `cli.portRange` on the definition, or `port` on `devframeViteBridge` (`@devframes/vite`). The original node error is available as `error.cause`."
 		},
 		DF0054: {
 			why: (p) => `connectionMeta() was called before initDevframe("${p.id}") finished initializing.`,
@@ -107,6 +105,38 @@ const diagnostics = defineDiagnostics({
 		DF0057: {
 			why: () => "This instance disables its WebSocket transport (`ws: false`), so there is no socket to drive upgrades into.",
 			fix: "Clients connect over the SSE endpoint instead — no upgrade wiring is needed. Remove `ws: false` if the instance should serve a WebSocket after all."
+		},
+		DF0058: {
+			why: (p) => `"${p.id}" declares \`capabilities.dev: false\` — it does not support a live dev server (its value is a static export only).`,
+			fix: "Pass `{ force: true }` to `createDevServer()` to run it anyway, or drop `capabilities.dev: false` on the definition."
+		},
+		DF0059: {
+			why: (p) => `Failed to fetch the file listing for "${p.package}@${p.version}" from ${p.provider}: ${p.reason}`,
+			fix: "Requests fall back to probing the provider per file. Check network access to the provider, or install the assets package locally so no listing is needed."
+		},
+		DF0060: {
+			why: (p) => `Failed to fetch a remote asset of "${p.package}" (${p.url}): ${p.reason}`,
+			fix: "Install the assets package locally (`npm install <package>`) to serve it with zero network, or check network access to the configured provider."
+		},
+		DF0061: {
+			why: (p) => `The locally installed "${p.package}@${p.installed}" is a different major version than the required "${p.required}".`,
+			fix: "Align the installed assets package with the version its node package declares — they are published in lockstep."
+		},
+		DF0062: {
+			why: (p) => `The locally installed "${p.package}@${p.installed}" differs from the required "${p.required}" — serving the installed one.`,
+			fix: "Install the exact declared version to serve byte-identical assets."
+		},
+		DF0063: {
+			why: (p) => `Failed to persist a remote asset into the cache at "${p.filepath}": ${p.reason}`,
+			fix: "The response was still served; only caching failed. Check that the cache directory is writable and has free space."
+		},
+		DF0064: {
+			why: (p) => `Failed to materialize the remote assets of "${p.package}@${p.version}": ${p.reason}`,
+			fix: "Static builds need every asset file up front. Install the assets package locally, or ensure the provider (and its file-listing API) is reachable during the build."
+		},
+		DF0065: {
+			why: (p) => `Invalid remote-assets ${p.field} "${p.value}".`,
+			fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path."
 		}
 	}
 });

package/dist/{dist-D8jAMwxU.mjs → dist-eNI9qM_I.mjs}

@@ -1,4 +1,5 @@
 import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import "node:fs/promises";
 import { createServer } from "node:net";
 import { networkInterfaces } from "node:os";
 //#region ../../node_modules/.pnpm/get-port-please@3.2.0/node_modules/get-port-please/dist/index.mjs

package/dist/{host-agent-CpbAoqBx.mjs → host-agent-xLCSe65D.mjs}

@@ -1,5 +1,43 @@
-import { t as diagnostics } from "./diagnostics-DLYH5oD3.mjs";
-import { i as createEventEmitter } from "./storage-BcmVEJRc.mjs";
+import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+//#region src/utils/events.ts
+/**
+* Create event emitter.
+*/
+function createEventEmitter() {
+	const _listeners = {};
+	function emit(event, ...args) {
+		const callbacks = _listeners[event] || [];
+		for (let i = 0, length = callbacks.length; i < length; i++) {
+			const callback = callbacks[i];
+			if (callback) callback(...args);
+		}
+	}
+	function emitOnce(event, ...args) {
+		emit(event, ...args);
+		delete _listeners[event];
+	}
+	function on(event, cb) {
+		(_listeners[event] ||= []).push(cb);
+		return () => {
+			_listeners[event] = _listeners[event]?.filter((i) => cb !== i);
+		};
+	}
+	function once(event, cb) {
+		const unsubscribe = on(event, ((...args) => {
+			unsubscribe();
+			return cb(...args);
+		}));
+		return unsubscribe;
+	}
+	return {
+		_listeners,
+		emit,
+		emitOnce,
+		on,
+		once
+	};
+}
+//#endregion
 //#region src/node/agent-args.ts
 /**
 * Map the args payload an agent surface receives (MCP sends an object
@@ -14,8 +52,6 @@ import { i as createEventEmitter } from "./storage-BcmVEJRc.mjs";
 * - without schemas, `arg0`/`arg1`/… keys are collected when present
 * - an empty object becomes a zero-argument call
 * - anything else follows the {@link AgentArgsFallback}
-*
-* @experimental
 */
 function coerceAgentPositionalArgs(args, schemas, fallback = "wrap") {
 	if (Array.isArray(args)) return args;
@@ -43,8 +79,6 @@ function coerceAgentPositionalArgs(args, schemas, fallback = "wrap") {
 * devframe. Auto-discovers RPC functions with an `agent` field from
 * `ctx.rpc.definitions`, and accepts plugin-registered tools /
 * resources via `registerTool` / `registerResource`.
-*
-* @experimental
 */
 var DevframeAgentHost = class {
 	context;
@@ -227,4 +261,4 @@ function inferSafety(type) {
 	return "action";
 }
 //#endregion
-export { coerceAgentPositionalArgs as n, DevframeAgentHost as t };
+export { coerceAgentPositionalArgs as n, createEventEmitter as r, DevframeAgentHost as t };

package/dist/{host-h3-CzCZwtuV.mjs → host-h3-Crkzm42q.mjs}

@@ -8,8 +8,8 @@ import { homedir } from "node:os";
 function createH3DevframeHost(options) {
 	const workspaceRoot = options.workspaceRoot ?? process.cwd();
 	return {
-		mountStatic(base, distDir) {
-			return options.mount?.(base, distDir);
+		mountStatic(base, source) {
+			return options.mount?.(base, source);
 		},
 		resolveOrigin() {
 			return typeof options.origin === "function" ? options.origin() : options.origin;

package/dist/{http-DLr_cJZ7.mjs → http-DYpK0cUi.mjs}

@@ -1,10 +1,10 @@
 import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
-import { i as isAllowedOrigin } from "./ws-server-Bk1hOG3X.mjs";
-import { t as diagnostics } from "./diagnostics-DLYH5oD3.mjs";
-import { t as createHostContext } from "./context-Du11TLcO.mjs";
-import { t as toAgentToolName } from "./agent-tool-name-C3b5vEwJ.mjs";
+import { t as Diagnostic } from "./nostics-CzECRXpE.mjs";
+import { i as isAllowedOrigin } from "./ws-server-BdSLrhxE.mjs";
+import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as createHostContext } from "./context-CEe4PBz1.mjs";
+import { t as toAgentToolName } from "./agent-tool-name-EgfoFO8C.mjs";
 import { randomUUID } from "node:crypto";
-import { Diagnostic } from "nostics";
 import { join } from "pathe";
 import process from "node:process";
 import { homedir } from "node:os";
@@ -190,9 +190,6 @@ function buildMcpServerFromContext(ctx, options) {
 /**
 * Build an MCP server over the agent surface of a devframe definition.
 * Currently supports `stdio` transport only.
-*
-* @experimental The agent-native surface is experimental and may change
-* without a major version bump until it stabilizes.
 */
 async function createMcpServer(definition, options = {}) {
 	const transport = options.transport ?? "stdio";
@@ -463,8 +460,6 @@ function parseResourceUri(uri) {
 * loopback-default DNS-rebinding protection that — unlike the WS upgrade's
 * `isAllowedOrigin` — also rejects `Origin`-less requests, so a route-based
 * endpoint isn't reachable by an arbitrary local process.
-*
-* @experimental
 */
 function createMcpFetchHandler(ctx, options) {
 	const sessions = /* @__PURE__ */ new Map();
@@ -547,8 +542,6 @@ var http_exports = /* @__PURE__ */ __exportAll({ mountMcpHttp: () => mountMcpHtt
 * legitimate MCP 404 (unknown session) isn't swallowed by h3's
 * "Response-with-404 falls through to the next handler" rule (which would
 * otherwise hand the request to the SPA static catch-all).
-*
-* @experimental
 */
 function mountMcpHttp(app, ctx, path, options) {
 	const handler = createMcpFetchHandler(ctx, options);