devframe 0.9.0-beta.3 → 0.9.0-beta.5

package/dist/internal/index.d.mts

@@ -1,8 +1,9 @@
-import { At as AgentToolProviderHandle, B as DevframeHost, Ct as AgentManifest, Dt as AgentTool, Et as AgentResourceInput, Mt as DevframeAgentHostEvents, Nt as EventEmitter, Ot as AgentToolInput, S as DevframeNodeContext, St as AgentHandle, Tt as AgentResourceContent, jt as DevframeAgentHost$1, kt as AgentToolProvider, wt as AgentResource } from "../devframe-5oblos7I.mjs";
+import { Ct as AgentToolProviderHandle, Et as EventEmitter, P as DevframeHost, St as AgentToolProvider, Tt as DevframeAgentHostEvents, _t as AgentResource, bt as AgentTool, g as DevframeNodeContext, gt as AgentManifest, ht as AgentHandle, vt as AgentResourceContent, wt as DevframeAgentHost$1, xt as AgentToolInput, yt as AgentResourceInput } from "../devframe-Cfx6doi4.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-Djq7CBXh.mjs";
-import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-B-BSVp37.mjs";
-import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-Bm8p4-fD.mjs";
-import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-B4Qm66Qt.mjs";
+import { i as RemoteAssetsStore } from "../remote-assets-DclsYyoL.mjs";
+import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-D_UA0Idz.mjs";
+import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-QkI6ljJS.mjs";
+import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-C8JQ3p7A.mjs";
 import { Diagnostic } from "nostics";
 //#region src/node/agent-args.d.ts
 /**
@@ -225,6 +226,67 @@ declare const diagnostics: import("nostics").Diagnostics<{
     readonly why: () => string;
     readonly fix: "Clients connect over the SSE endpoint instead — no upgrade wiring is needed. Remove `ws: false` if the instance should serve a WebSocket after all.";
   };
+  readonly DF0058: {
+    readonly why: (p: {
+      id: string;
+    }) => string;
+    readonly fix: "Pass `{ force: true }` to `createDevServer()` to run it anyway, or drop `capabilities.dev: false` on the definition.";
+  };
+  readonly DF0059: {
+    readonly why: (p: {
+      package: string;
+      version: string;
+      provider: string;
+      reason: string;
+    }) => string;
+    readonly fix: "Requests fall back to probing the provider per file. Check network access to the provider, or install the assets package locally so no listing is needed.";
+  };
+  readonly DF0060: {
+    readonly why: (p: {
+      url: string;
+      package: string;
+      reason: string;
+    }) => string;
+    readonly fix: "Install the assets package locally (`npm install <package>`) to serve it with zero network, or check network access to the configured provider.";
+  };
+  readonly DF0061: {
+    readonly why: (p: {
+      package: string;
+      required: string;
+      installed: string;
+    }) => string;
+    readonly fix: "Align the installed assets package with the version its node package declares — they are published in lockstep.";
+  };
+  readonly DF0062: {
+    readonly why: (p: {
+      package: string;
+      required: string;
+      installed: string;
+    }) => string;
+    readonly fix: "Install the exact declared version to serve byte-identical assets.";
+  };
+  readonly DF0063: {
+    readonly why: (p: {
+      filepath: string;
+      reason: string;
+    }) => string;
+    readonly fix: "The response was still served; only caching failed. Check that the cache directory is writable and has free space.";
+  };
+  readonly DF0064: {
+    readonly why: (p: {
+      package: string;
+      version: string;
+      reason: string;
+    }) => string;
+    readonly fix: "Static builds need every asset file up front. Install the assets package locally, or ensure the provider (and its file-listing API) is reachable during the build.";
+  };
+  readonly DF0065: {
+    readonly why: (p: {
+      field: "package" | "version";
+      value: string;
+    }) => string;
+    readonly fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path.";
+  };
 }, readonly [typeof devframeReporter]>;
 //#endregion
 //#region src/node/host-agent.d.ts
@@ -264,8 +326,6 @@ declare class DevframeAgentHost implements DevframeAgentHost$1 {
 //#endregion
 //#region src/node/host-h3.d.ts
 interface CreateH3DevframeHostOptions {
-  /** The h3 app instance — registered once the CLI adapter lands. */
-  app?: unknown;
   /**
    * Host the standalone server listens on, e.g. `http://localhost:9999`.
    * Consumed by `resolveOrigin` for dock entries that need an absolute URL.
@@ -274,11 +334,13 @@ interface CreateH3DevframeHostOptions {
    */
   origin: string | (() => string);
   /**
-   * Register a static-file handler at `base` serving files from `distDir`.
-   * Wired into the h3 app once the CLI adapter lands (commit 5). For now
-   * the CLI isn't running, so the default is a no-op.
+   * Register a static-file handler at `base` serving files from `source` —
+   * a local directory or a resolved remote-assets back-proxy store (both
+   * accepted by `devframe/utils/serve-static`). `mountStatic` forwards to
+   * it; when omitted the host serves no SPA (bridge mode, where the SPA is
+   * hosted elsewhere).
    */
-  mount?: (base: string, distDir: string) => void | Promise<void>;
+  mount?: (base: string, source: string | RemoteAssetsStore) => void | Promise<void>;
   /**
    * Namespace for storage paths returned by `getStorageDir`. Workspace
    * state (committable) lives under `${workspaceRoot}/.devframe/`, project

package/dist/internal/index.mjs

@@ -1,9 +1,9 @@
 import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-9VhIKnyp.mjs";
-import { t as diagnostics } from "../diagnostics-C7IGWppM.mjs";
-import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-BBkKT27Q.mjs";
-import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CGPVmXUM.mjs";
-import { t as createH3DevframeHost } from "../host-h3-CzCZwtuV.mjs";
-import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-Du_hbx-j.mjs";
-import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-B0TwOxCl.mjs";
-import { t as createContextRpcServer } from "../rpc-core-Cva-0pw0.mjs";
+import { t as diagnostics } from "../diagnostics-DEuH3P5O.mjs";
+import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-C5HjzfBz.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CKZPvSrN.mjs";
+import { t as createH3DevframeHost } from "../host-h3-Crkzm42q.mjs";
+import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-M2p-z6xE.mjs";
+import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-DJ8s-MFw.mjs";
+import { t as createContextRpcServer } from "../rpc-core-IhcWl_xn.mjs";
 export { DevframeAgentHost, coerceAgentPositionalArgs, createContextRpcServer, createH3DevframeHost, createInstanceShell, createRpcWireCodec, diagnostics, listLiveDevframeInstances, normalizeBasePath, normalizeHttpServerUrl, peekRpcWireFrame, registerDevframeInstance, resolveBasePath, resolveInstanceRegister, samePath };

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { p as DevframeAuthHandler } from "../devframe-5oblos7I.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-BzDl02lt.mjs";
+import { u as DevframeAuthHandler } from "../devframe-Cfx6doi4.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-MYi1SZVL.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/auth.mjs

@@ -1,3 +1,3 @@
 import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-DZbJ7Cl0.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-BeUHDDjk.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-Cc1IeSmQ.mjs";
 export { buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,3 +1,3 @@
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-DV4uWieM.mjs";
-import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-Bm8p4-fD.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-CQkRTbAc.mjs";
+import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-QkI6ljJS.mjs";
 export { type DevframeInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/hub-internals.mjs

@@ -1,3 +1,3 @@
-import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CGPVmXUM.mjs";
-import { n as internalContextMap, t as getInternalContext } from "../context-CMSryXs-.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CKZPvSrN.mjs";
+import { n as internalContextMap, t as getInternalContext } from "../context-D0jErmlx.mjs";
 export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { B as DevframeHost, J as RpcFunctionsHost, S as DevframeNodeContext, _t as SharedState } from "../devframe-5oblos7I.mjs";
+import { P as DevframeHost, V as RpcFunctionsHost, g as DevframeNodeContext, ut as SharedState } from "../devframe-Cfx6doi4.mjs";
 import "../index-tdrk1bzV.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-Djq7CBXh.mjs";
 import { BirpcGroup } from "birpc";

package/dist/node/index.mjs

@@ -1,3 +1,3 @@
-import { t as createStorage } from "../storage-CaUVrBrG.mjs";
-import { t as createHostContext } from "../context-b6iSomtv.mjs";
+import { t as createHostContext } from "../context-D0HD0F7C.mjs";
+import { t as createStorage } from "../storage-BVuipbGS.mjs";
 export { createHostContext, createStorage };

package/dist/recipes/common-rpc-functions.d.mts

@@ -1,4 +1,4 @@
-import "../devframe-5oblos7I.mjs";
+import "../devframe-Cfx6doi4.mjs";
 import "../index-tdrk1bzV.mjs";
 import { E as Thenable, S as RpcFunctionSetupResult, c as RpcDump, g as RpcFunctionAgentOptions } from "../types-Djq7CBXh.mjs";
 import { SimpleSchema } from "../utils/simple-schema.mjs";

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { S as DevframeNodeContext, p as DevframeAuthHandler } from "../devframe-5oblos7I.mjs";
-import "../index-BzDl02lt.mjs";
+import { g as DevframeNodeContext, u as DevframeAuthHandler } from "../devframe-Cfx6doi4.mjs";
+import "../index-MYi1SZVL.mjs";
 //#region src/recipes/interactive-auth.d.ts
 interface CreateInteractiveAuthOptions {
   /**

package/dist/recipes/interactive-auth.mjs

@@ -1,8 +1,8 @@
 import { n as colors } from "../diagnostics-reporter-CsIG85Q5.mjs";
 import { n as defineRpcFunction } from "../define-BLWPsH6y.mjs";
 import { isAnonymousRpcMethod } from "../constants.mjs";
-import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-BeUHDDjk.mjs";
-import { t as getInternalContext } from "../context-CMSryXs-.mjs";
+import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-Cc1IeSmQ.mjs";
+import { t as getInternalContext } from "../context-D0jErmlx.mjs";
 import { t as s } from "../simple-schema-DQPZrAaZ.mjs";
 //#region src/recipes/interactive-auth.ts
 function defaultBanner(info) {

package/dist/remote-assets-DclsYyoL.d.mts

@@ -0,0 +1,106 @@
+//#region src/types/remote-assets.d.ts
+/**
+ * A version-locked pointer at browser assets published as their own npm
+ * package (e.g. `@devframes/plugin-git-client`), served through devframe's
+ * caching back-proxy instead of a directory shipped inside the node package.
+ *
+ * Resolution order at serve time:
+ *
+ *   1. The package installed locally (resolved from {@link resolveFrom})
+ *      — the zero-network / air-gap path. Version skew warns; a major
+ *      version mismatch throws.
+ *   2. The per-file cache under
+ *      `<storageDir project>/.remote-assets/<package>@<version>/`.
+ *   3. The CDN {@link provider} — each requested file streams through to
+ *      the browser while being written into the cache.
+ *
+ * Anywhere a static mount accepts a dist directory (`cli.distDir`,
+ * `hostStatic`, `mountStatic`) it also accepts this object — see
+ * {@link StaticAssetsSource}.
+ */
+interface RemoteAssets {
+  /** npm package name that ships the assets, e.g. `@devframes/plugin-git-client`. */
+  package: string;
+  /** Exact version to serve, e.g. `1.2.3`. Typically the host package's own version. */
+  version: string;
+  /**
+   * Subpath inside the package the served assets live under.
+   *
+   * @default 'dist'
+   */
+  path?: string;
+  /**
+   * CDN that mirrors npm and serves individual package files.
+   *
+   * @default 'jsdelivr'
+   */
+  provider?: RemoteAssetsProvider;
+  /**
+   * `import.meta.url` of the declaring module. When set, a locally
+   * installed copy of {@link package} is resolved from this module's own
+   * dependency graph first (works under pnpm's strict layout) and served
+   * with zero network. Omitting it skips the installed-package step —
+   * cache + CDN still work.
+   */
+  resolveFrom?: string;
+  /** Custom fetch implementation (proxies, tests). Defaults to the global `fetch`. */
+  fetch?: typeof globalThis.fetch;
+  /**
+   * Never touch the network: serve only from the locally installed package
+   * or files already in the cache.
+   *
+   * @default false
+   */
+  offline?: boolean;
+}
+/**
+ * Built-in CDN providers (`'jsdelivr'` — default, `'unpkg'`) or a custom
+ * provider for corp mirrors.
+ */
+type RemoteAssetsProvider = 'jsdelivr' | 'unpkg' | RemoteAssetsProviderCustom;
+/** A custom {@link RemoteAssets} CDN provider (e.g. an internal npm mirror). */
+interface RemoteAssetsProviderCustom {
+  /**
+   * Absolute URL serving `filePath` (package-relative, POSIX, no leading
+   * slash) of `pkg@version`.
+   */
+  fileUrl: (pkg: string, version: string, filePath: string) => string;
+  /**
+   * List every file path in `pkg@version` (package-relative, no leading
+   * slash). Powers request-path resolution (correct 404s / SPA fallback)
+   * and build-time materialization. When omitted, requests are resolved by
+   * probing {@link fileUrl} directly and builds cannot materialize from
+   * this provider.
+   */
+  listFiles?: (pkg: string, version: string, fetchImpl: typeof globalThis.fetch) => Promise<string[]>;
+}
+/**
+ * What every static-assets seam accepts: a local dist directory, or a
+ * {@link RemoteAssets} pointer served through the caching back-proxy.
+ */
+type StaticAssetsSource = string | RemoteAssets;
+/**
+ * A resolved, servable handle over a {@link RemoteAssets} declaration —
+ * produced by `resolveStaticAssetsSource()` (`devframe/utils/remote-assets`)
+ * and consumed by the static-serving engine (`devframe/utils/serve-static`).
+ */
+interface RemoteAssetsStore {
+  /** The declaration this store serves (with defaults applied). */
+  readonly assets: RemoteAssets & {
+    path: string;
+  };
+  /**
+   * Resolve a request path (relative to the mount base, SPA fallback to
+   * `index.html`) and return a `Response`: streamed from the cache when
+   * present, otherwise through the provider while being written into the
+   * cache. `null` on a miss (404); throws on provider/network failure.
+   */
+  serve: (urlPath: string) => Promise<Response | null>;
+  /**
+   * Download every listed file under `assets.path` into `targetDir`
+   * (paths relative to `assets.path`). Requires a provider file listing.
+   */
+  materialize: (targetDir: string) => Promise<void>;
+}
+//#endregion
+export { StaticAssetsSource as a, RemoteAssetsStore as i, RemoteAssetsProvider as n, RemoteAssetsProviderCustom as r, RemoteAssets as t };

package/dist/rpc/transports/ws-bun.d.mts

@@ -1,5 +1,5 @@
 import { n as WsOriginRegistry } from "../../ws-server-D1d3QM9f.mjs";
-import { t as ContextRpcServer } from "../../rpc-core-B4Qm66Qt.mjs";
+import { t as ContextRpcServer } from "../../rpc-core-C8JQ3p7A.mjs";
 //#region src/rpc/transports/ws-bun.d.ts
 interface AttachBunWsTransportOptions {
   /** Same contract as `WsRpcTransportOptions.allowedOrigins`. */

package/dist/{rpc-core-B4Qm66Qt.d.mts → rpc-core-C8JQ3p7A.d.mts}

@@ -1,6 +1,6 @@
-import { K as DevframeNodeRpcSession, S as DevframeNodeContext, et as DevframeRpcClientFunctions, p as DevframeAuthHandler, tt as DevframeRpcServerFunctions } from "./devframe-5oblos7I.mjs";
+import { J as DevframeRpcServerFunctions, g as DevframeNodeContext, q as DevframeRpcClientFunctions, u as DevframeAuthHandler, z as DevframeNodeRpcSession } from "./devframe-Cfx6doi4.mjs";
 import { d as DevframeRpcConnection, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
-import "./index-BzDl02lt.mjs";
+import "./index-MYi1SZVL.mjs";
 import { BirpcGroup, EventOptions } from "birpc";
 //#region src/node/rpc-core.d.ts
 interface CreateContextRpcServerOptions {

package/dist/{rpc-core-Cva-0pw0.mjs → rpc-core-IhcWl_xn.mjs}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
 import { createRpcServer } from "./rpc/server.mjs";
-import { t as diagnostics } from "./diagnostics-C7IGWppM.mjs";
+import { t as diagnostics } from "./diagnostics-DEuH3P5O.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/node/rpc-core.ts
 var rpc_core_exports = /* @__PURE__ */ __exportAll({ createContextRpcServer: () => createContextRpcServer });