devframe 0.9.0-beta.4 → 0.9.0-beta.6

package/dist/{_shared-CGPVmXUM.mjs → _shared-CKZPvSrN.mjs}

@@ -1,5 +1,6 @@
 import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
 import "./constants.mjs";
+import "node:fs/promises";
 import { createServer } from "node:net";
 import { networkInterfaces } from "node:os";
 import { cleanDoubleSlashes, withLeadingSlash, withTrailingSlash, withoutLeadingSlash } from "ufo";
@@ -231,7 +232,7 @@ const DEFAULT_PORT = 9999;
 /**
 * Resolve the mount base path for a devframe's SPA. Hosted adapters
 * (`vite`, `embedded`) default to `/__<id>/` so they don't collide
-* with the host app; standalone adapters (`cli`, `spa`, `build`)
+* with the host app; standalone adapters (`cli`, `build`)
 * default to `/` because they own the origin.
 *
 * The devframe author can override with `basePath` on the definition.

package/dist/{_shared-Bm8p4-fD.d.mts → _shared-QkI6ljJS.d.mts}

@@ -1,9 +1,9 @@
-import { _ as ConnectionMeta, f as McpRouteOptions, i as DevframeDeploymentKind, r as DevframeDefinition } from "./devframe-5oblos7I.mjs";
+import { d as ConnectionMeta, l as McpRouteOptions, n as DevframeDefinition, r as DevframeDeploymentKind } from "./devframe-Cfx6doi4.mjs";
 //#region src/adapters/_shared.d.ts
 /**
  * Resolve the mount base path for a devframe's SPA. Hosted adapters
  * (`vite`, `embedded`) default to `/__<id>/` so they don't collide
- * with the host app; standalone adapters (`cli`, `spa`, `build`)
+ * with the host app; standalone adapters (`cli`, `build`)
  * default to `/` because they own the origin.
  *
  * The devframe author can override with `basePath` on the definition.

package/dist/adapters/build.d.mts

@@ -1,16 +1,16 @@
-import { r as DevframeDefinition } from "../devframe-5oblos7I.mjs";
+import { n as DevframeDefinition } from "../devframe-Cfx6doi4.mjs";
+import { a as StaticAssetsSource } from "../remote-assets-DclsYyoL.mjs";
 //#region src/adapters/build.d.ts
 interface CreateBuildOptions {
   /** Output directory. Defaults to `dist-static`. */
   outDir?: string;
-  /** Absolute URL base the output is served from (default: `/`). */
-  base?: string;
   /**
-   * Override the SPA dist directory to copy into `outDir`. When omitted
-   * the adapter reads `devframe.cli?.distDir` — authors typically set this
-   * once on the definition itself.
+   * Override the SPA dist to copy into `outDir` — a local directory or a
+   * remote-assets declaration (materialized in full at build time). When
+   * omitted the adapter reads `devframe.cli?.distDir` — authors typically
+   * set this once on the definition itself.
    */
-  distDir?: string;
+  distDir?: StaticAssetsSource;
   /**
    * Pretty-print RPC dump JSON files. Defaults to `false` so payload
    * shards (which can be multiple MB for graph-heavy tools) ship
@@ -32,11 +32,9 @@ interface CreateBuildOptions {
  *   - Copy the author's SPA dist into `<outDir>/`.
  *   - Write `<outDir>/__connection.json` (`{ backend: 'static' }`) and the
  *     sharded RPC dump under `<outDir>/__rpc-dump/` so the deployed SPA
- *     discovers both via relative paths from `document.baseURI`.
- *   - When `def.spa` is configured, also write `<outDir>/spa-loader.json`
- *     describing the SPA's data-loader mode (`'query'` / `'upload'` /
- *     `'none'`). The output is mount-path agnostic — the same bundle
- *     works at `/`, `/devframe/`, or any base, no rewriting required.
+ *     discovers both via relative paths from `document.baseURI`. The
+ *     output is mount-path agnostic — the same bundle works at `/`,
+ *     `/devframe/`, or any base, no rewriting required.
  */
 declare function createBuild(d: DevframeDefinition, options?: CreateBuildOptions): Promise<void>;
 //#endregion

package/dist/adapters/build.mjs

@@ -3,14 +3,14 @@ import { n as strictJsonStringify } from "../serialization-BHY8M5NQ.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_RPC_DUMP_DIRNAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME } from "../constants.mjs";
 import { t as collectStaticRpcDump } from "../static-CvjkO8QE.mjs";
 import { n as structuredCloneStringify } from "../structured-clone-CbAV5rFI.mjs";
-import { t as diagnostics } from "../diagnostics-C7IGWppM.mjs";
-import { t as createHostContext } from "../context-b6iSomtv.mjs";
-import { n as resolveBasePath } from "../_shared-CGPVmXUM.mjs";
-import { t as createH3DevframeHost } from "../host-h3-CzCZwtuV.mjs";
+import { t as diagnostics } from "../diagnostics-DEuH3P5O.mjs";
+import { t as createHostContext } from "../context-D0HD0F7C.mjs";
+import { resolveStaticAssetsSource } from "../utils/remote-assets.mjs";
+import { t as createH3DevframeHost } from "../host-h3-Crkzm42q.mjs";
 import { existsSync } from "node:fs";
+import fs$1 from "node:fs/promises";
 import { dirname, resolve } from "pathe";
 import process from "node:process";
-import fs$1 from "node:fs/promises";
 //#region src/adapters/build.ts
 /**
 * Produce a self-contained static deploy of a devframe:
@@ -19,28 +19,33 @@ import fs$1 from "node:fs/promises";
 *   - Copy the author's SPA dist into `<outDir>/`.
 *   - Write `<outDir>/__connection.json` (`{ backend: 'static' }`) and the
 *     sharded RPC dump under `<outDir>/__rpc-dump/` so the deployed SPA
-*     discovers both via relative paths from `document.baseURI`.
-*   - When `def.spa` is configured, also write `<outDir>/spa-loader.json`
-*     describing the SPA's data-loader mode (`'query'` / `'upload'` /
-*     `'none'`). The output is mount-path agnostic — the same bundle
-*     works at `/`, `/devframe/`, or any base, no rewriting required.
+*     discovers both via relative paths from `document.baseURI`. The
+*     output is mount-path agnostic — the same bundle works at `/`,
+*     `/devframe/`, or any base, no rewriting required.
 */
 async function createBuild(d, options = {}) {
 	if (d.capabilities?.build === false && !options.force) throw diagnostics.DF0042({ id: d.id });
 	const outDir = resolve(options.outDir ?? "dist-static");
-	const distDir = options.distDir ?? d.cli?.distDir;
-	if (!distDir) throw new Error(`[devframe] createBuild: no distDir for "${d.id}". Set \`cli.distDir\` on the definition or pass it as an option.`);
+	const distSource = options.distDir ?? d.cli?.distDir;
+	if (!distSource) throw new Error(`[devframe] createBuild: no distDir for "${d.id}". Set \`cli.distDir\` on the definition or pass it as an option.`);
 	if (existsSync(outDir)) await fs$1.rm(outDir, { recursive: true });
 	await fs$1.mkdir(outDir, { recursive: true });
-	console.log(colors.cyan`[devframe] copying SPA from ${distDir} -> ${outDir}`);
-	await fs$1.cp(distDir, outDir, { recursive: true });
+	const host = createH3DevframeHost({
+		origin: "http://localhost",
+		appName: d.id
+	});
+	const resolved = resolveStaticAssetsSource(distSource, host.getStorageDir("project"));
+	if (typeof resolved === "string") {
+		console.log(colors.cyan`[devframe] copying SPA from ${resolved} -> ${outDir}`);
+		await fs$1.cp(resolved, outDir, { recursive: true });
+	} else {
+		console.log(colors.cyan`[devframe] materializing SPA from ${resolved.assets.package}@${resolved.assets.version} -> ${outDir}`);
+		await resolved.materialize(outDir);
+	}
 	const ctx = await createHostContext({
 		cwd: process.cwd(),
 		mode: "build",
-		host: createH3DevframeHost({
-			origin: "http://localhost",
-			appName: d.id
-		})
+		host
 	});
 	await d.setup(ctx);
 	await fs$1.mkdir(resolve(outDir, DEVFRAME_RPC_DUMP_DIRNAME), { recursive: true });
@@ -60,15 +65,6 @@ async function createBuild(d, options = {}) {
 		await fs$1.writeFile(fullpath, file.serialization === "json" && indent != null ? JSON.stringify(JSON.parse(text), null, indent) : text, "utf-8");
 	}
 	await fs$1.writeFile(resolve(outDir, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME), JSON.stringify(dump.manifest, null, 2), "utf-8");
-	if (d.spa) {
-		const base = options.base ?? resolveBasePath(d, "standalone");
-		const spaLoader = {
-			version: 1,
-			mode: d.spa.loader ?? "none",
-			base
-		};
-		await fs$1.writeFile(resolve(outDir, "spa-loader.json"), JSON.stringify(spaLoader, null, 2), "utf-8");
-	}
 	console.log(colors.green`[devframe] built "${d.id}" -> ${outDir}`);
 }
 //#endregion

package/dist/adapters/cac.d.mts

@@ -1,4 +1,4 @@
-import { It as CliFlagsSchema, Lt as InferCliFlags, Rt as defineCliFlags, r as DevframeDefinition, zt as parseCliFlags } from "../devframe-5oblos7I.mjs";
+import { At as InferCliFlags, Mt as parseCliFlags, jt as defineCliFlags, kt as CliFlagsSchema, n as DevframeDefinition } from "../devframe-Cfx6doi4.mjs";
 import { CAC } from "cac";
 import { H3 } from "h3";
 //#region src/adapters/cac.d.ts

package/dist/adapters/cac.mjs

@@ -1,7 +1,7 @@
 import { n as colors } from "../diagnostics-reporter-CsIG85Q5.mjs";
-import { r as resolveDevServerPort } from "../_shared-CGPVmXUM.mjs";
+import { r as resolveDevServerPort } from "../_shared-CKZPvSrN.mjs";
 import { createBuild } from "./build.mjs";
-import { t as createDevServer } from "../dev-4xjiynUD.mjs";
+import { t as createDevServer } from "../dev-QEuT8SOF.mjs";
 import process from "node:process";
 import cac$1 from "cac";
 //#region src/adapters/flags.ts
@@ -117,10 +117,9 @@ function createCac(d, options = {}) {
 			onReady: options.onReady
 		});
 	});
-	if (d.capabilities?.build !== false) cli.command("build", "Build a self-contained static deploy of the devframe").option("--out-dir <outDir>", "Output directory", { default: "dist-static" }).option("--base <base>", "URL base", { default: "/" }).option("--pretty", "Pretty-print dump JSON (larger on disk)").action(async (flags) => {
+	if (d.capabilities?.build !== false) cli.command("build", "Build a self-contained static deploy of the devframe").option("--out-dir <outDir>", "Output directory", { default: "dist-static" }).option("--pretty", "Pretty-print dump JSON (larger on disk)").action(async (flags) => {
 		await createBuild(d, {
 			outDir: flags.outDir,
-			base: flags.base,
 			pretty: flags.pretty
 		});
 	});

package/dist/adapters/dev.d.mts

@@ -1,7 +1,8 @@
-import { K as DevframeNodeRpcSession, d as DevframeWsOptions, f as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeSseOptions } from "../devframe-5oblos7I.mjs";
-import { d as DevframeRpcConnection, u as DevframeNodeRpcSessionMeta } from "../ws-server-D1d3QM9f.mjs";
-import { c as StartedServer } from "../instance-shell-B-BSVp37.mjs";
-import { a as resolveMcpConnectionMeta, i as resolveDevServerPort, t as ResolveDevServerPortOptions } from "../_shared-Bm8p4-fD.mjs";
+import { c as DevframeWsOptions, l as McpRouteOptions, n as DevframeDefinition, s as DevframeSseOptions, u as DevframeAuthHandler, z as DevframeNodeRpcSession } from "../devframe-Cfx6doi4.mjs";
+import { d as DevframeRpcConnection, n as WsOriginRegistry, u as DevframeNodeRpcSessionMeta } from "../ws-server-D1d3QM9f.mjs";
+import { a as StaticAssetsSource } from "../remote-assets-DclsYyoL.mjs";
+import { c as StartedServer } from "../instance-shell-D_UA0Idz.mjs";
+import { a as resolveMcpConnectionMeta, i as resolveDevServerPort, t as ResolveDevServerPortOptions } from "../_shared-QkI6ljJS.mjs";
 import { H3 } from "h3";
 //#region src/adapters/dev.d.ts
 interface CreateDevServerOptions {
@@ -26,7 +27,7 @@ interface CreateDevServerOptions {
    * is expected to be hosted elsewhere (e.g. by a parent Vite/Nuxt
    * dev server via `devframeViteBridge` from `@devframes/vite`).
    */
-  distDir?: string;
+  distDir?: StaticAssetsSource;
   /**
    * Override the SPA mount path. Defaults to
    * `resolveBasePath(def, 'standalone')` (i.e. `def.basePath` or `/`).
@@ -39,6 +40,13 @@ interface CreateDevServerOptions {
    * clients connect over the SSE endpoint instead (`backend: 'sse'`).
    */
   ws?: DevframeWsOptions | false;
+  /**
+   * Extra origins to accept on the WS upgrade beyond the loopback default.
+   * Add your LAN/tunnel origin here when reaching the tool from another
+   * host. Pass `false` to disable origin checking entirely (not
+   * recommended). Default: loopback-only.
+   */
+  allowedOrigins?: readonly string[] | WsOriginRegistry | false;
   /**
    * Override the SSE RPC endpoint control (`def.cli?.sse`) — enabled by
    * default at `<base>__sse`. Pass `false` to disable, or a
@@ -97,6 +105,12 @@ interface CreateDevServerOptions {
     port: number;
     app: H3;
   }) => void | Promise<void>;
+  /**
+   * Proceed even when the definition declares `capabilities.dev: false`.
+   * `createDevServer` otherwise refuses such a definition (`DF0058`) — this
+   * only matters for a caller invoking it directly, bypassing the CLI.
+   */
+  force?: boolean;
 }
 /**
  * Start a devframe dev server for a {@link DevframeDefinition} —

package/dist/adapters/dev.mjs

@@ -1,3 +1,3 @@
-import { i as resolveMcpConnectionMeta, r as resolveDevServerPort } from "../_shared-CGPVmXUM.mjs";
-import { t as createDevServer } from "../dev-4xjiynUD.mjs";
+import { i as resolveMcpConnectionMeta, r as resolveDevServerPort } from "../_shared-CKZPvSrN.mjs";
+import { t as createDevServer } from "../dev-QEuT8SOF.mjs";
 export { createDevServer, resolveDevServerPort, resolveMcpConnectionMeta };

package/dist/adapters/embedded.d.mts

@@ -1,4 +1,4 @@
-import { S as DevframeNodeContext, r as DevframeDefinition } from "../devframe-5oblos7I.mjs";
+import { g as DevframeNodeContext, n as DevframeDefinition } from "../devframe-Cfx6doi4.mjs";
 //#region src/adapters/embedded.d.ts
 interface CreateEmbeddedOptions {
   /** Target context the devframe is registered into. Required. */

package/dist/adapters/initiate.d.mts

@@ -1,6 +1,7 @@
-import { K as DevframeNodeRpcSession, S as DevframeNodeContext, V as DevframeStorageScope, _ as ConnectionMeta, d as DevframeWsOptions, f as McpRouteOptions, p as DevframeAuthHandler, r as DevframeDefinition, u as DevframeSseOptions } from "../devframe-5oblos7I.mjs";
+import { F as DevframeStorageScope, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, l as McpRouteOptions, n as DevframeDefinition, s as DevframeSseOptions, u as DevframeAuthHandler, z as DevframeNodeRpcSession } from "../devframe-Cfx6doi4.mjs";
 import { d as DevframeRpcConnection, n as WsOriginRegistry, u as DevframeNodeRpcSessionMeta } from "../ws-server-D1d3QM9f.mjs";
-import { c as StartedServer, f as DevframeInstanceRecord } from "../instance-shell-B-BSVp37.mjs";
+import { a as StaticAssetsSource } from "../remote-assets-DclsYyoL.mjs";
+import { c as StartedServer, f as DevframeInstanceRecord } from "../instance-shell-D_UA0Idz.mjs";
 import { Buffer } from "node:buffer";
 import { IncomingMessage, Server, ServerResponse } from "node:http";
 import { Duplex } from "node:stream";
@@ -22,7 +23,7 @@ interface InitDevframeOptions {
    * **bridge mode**: only `__connection.json`, the WS endpoint, and the MCP
    * route (when enabled) are served; the SPA is hosted elsewhere.
    */
-  distDir?: string | false;
+  distDir?: StaticAssetsSource | false;
   /**
    * Share the host's `node:http` server for the WebSocket RPC endpoint: the
    * upgrade listener binds to `<base>__ws` on this server, so no extra port

package/dist/adapters/initiate.mjs

@@ -1,2 +1,2 @@
-import { n as getInstanceInternals, r as initDevframe } from "../dev-4xjiynUD.mjs";
+import { n as getInstanceInternals, r as initDevframe } from "../dev-QEuT8SOF.mjs";
 export { getInstanceInternals, initDevframe };

package/dist/adapters/mcp.d.mts

@@ -1,4 +1,4 @@
-import { S as DevframeNodeContext, r as DevframeDefinition } from "../devframe-5oblos7I.mjs";
+import { g as DevframeNodeContext, n as DevframeDefinition } from "../devframe-Cfx6doi4.mjs";
 import { H3 } from "h3";
 import "@modelcontextprotocol/server";
 //#region src/adapters/mcp/build-server.d.ts

package/dist/adapters/mcp.mjs

@@ -1,2 +1,2 @@
-import { i as createMcpServer, n as mountMcpHttp, r as createMcpFetchHandler } from "../http-Z0w9baEe.mjs";
+import { i as createMcpServer, n as mountMcpHttp, r as createMcpFetchHandler } from "../http-CVwj7b4g.mjs";
 export { createMcpFetchHandler, createMcpServer, mountMcpHttp };

package/dist/cli/main.mjs

@@ -1,5 +1,5 @@
-import { t as diagnostics } from "../diagnostics-C7IGWppM.mjs";
-import { n as listLiveDevframeInstances, r as probeDevframeOrigin } from "../instance-registry-Du_hbx-j.mjs";
+import { t as diagnostics } from "../diagnostics-DEuH3P5O.mjs";
+import { n as listLiveDevframeInstances, r as probeDevframeOrigin } from "../instance-registry-M2p-z6xE.mjs";
 import { t as toAgentToolName } from "../agent-tool-name-EgfoFO8C.mjs";
 import { Diagnostic } from "nostics";
 import process from "node:process";

package/dist/client/index.d.mts

@@ -1,4 +1,4 @@
-import { A as DevframeSettings, F as ScopedRpcFn, I as ScopedServerFunctions, L as ScopedSharedStates, Nt as EventEmitter, R as SettingsForNamespace, X as RpcSharedStateHost, Y as RpcSharedStateGetOptions, _ as ConnectionMeta, _t as SharedState, ct as StreamSink, et as DevframeRpcClientFunctions, st as StreamReader, tt as DevframeRpcServerFunctions } from "../devframe-5oblos7I.mjs";
+import { A as ScopedServerFunctions, Et as EventEmitter, H as RpcSharedStateGetOptions, J as DevframeRpcServerFunctions, M as SettingsForNamespace, U as RpcSharedStateHost, d as ConnectionMeta, et as StreamReader, j as ScopedSharedStates, k as ScopedRpcFn, q as DevframeRpcClientFunctions, tt as StreamSink, ut as SharedState, w as DevframeSettings } from "../devframe-Cfx6doi4.mjs";
 import { f as RpcCacheManager, p as RpcCacheOptions } from "../index-tdrk1bzV.mjs";
 import { _ as RpcFunctionDefinition, w as RpcFunctionsCollector } from "../types-Djq7CBXh.mjs";
 import { t as SseRpcChannelOptions } from "../sse-client-CFBOIaUi.mjs";