devframe 0.9.0-beta.9 → 0.9.1

package/dist/{diagnostics-DOQPnQmX.mjs → diagnostics-Di8ytitn.mjs}

@@ -137,6 +137,30 @@ const diagnostics = defineDiagnostics({
 		DF0065: {
 			why: (p) => `Invalid remote-assets ${p.field} "${p.value}".`,
 			fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path."
+		},
+		DF0066: {
+			why: (p) => `Service "${p.package}" is already installed — keeping the first installation and ignoring this one's options.`,
+			fix: "Option sets only merge before `ctx.services.ready()` fires. Install the service (or declare it in `DevframeDefinition.services`) before the barrier so its options join the merge."
+		},
+		DF0067: {
+			why: (p) => `Failed to import the required service package "${p.package}": ${p.reason}`,
+			fix: "Install the service package next to whoever declares it (a plugin declaring it in `services` should list it in its own dependencies), or drop `required: true` to degrade gracefully when it is absent."
+		},
+		DF0068: {
+			why: (p) => `The installed service "${p.package}@${p.installed}" does not satisfy the required range "${p.required}".`,
+			fix: "Align the installed service package with the range its declarer requires, or drop `required: true` to downgrade the mismatch to a warning."
+		},
+		DF0069: {
+			why: (p) => `The installed service "${p.package}@${p.installed}" does not satisfy the declared range "${p.required}" — installing it anyway.`,
+			fix: "The advertised meta carries the real version, so clients can gate on it. Align the installed service package with the declared range to silence this warning."
+		},
+		DF0070: {
+			why: (p) => `Invalid service "${p.package}": ${p.reason}`,
+			fix: "A service package's default export must be a factory returning a `DevframeServiceDefinition` — an object with `package`, `version`, `scope`, and a `setup` function."
+		},
+		DF0071: {
+			why: (p) => `Deferred service installation failed while flushing on the first client connection: ${p.reason}`,
+			fix: "Call `ctx.services.ready()` explicitly after every devframe's setup has run (the first-party adapters do) so installation errors surface at startup instead of at connect time."
 		}
 	}
 });

package/dist/{_shared-CKZPvSrN.mjs → dist-CZXfGEkd.mjs}

@@ -1,9 +1,7 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
-import "./constants.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import "node:fs/promises";
 import { createServer } from "node:net";
 import { networkInterfaces } from "node:os";
-import { cleanDoubleSlashes, withLeadingSlash, withTrailingSlash, withoutLeadingSlash } from "ufo";
 //#region ../../node_modules/.pnpm/get-port-please@3.2.0/node_modules/get-port-please/dist/index.mjs
 var dist_exports = /* @__PURE__ */ __exportAll({
 	checkPort: () => checkPort,
@@ -227,68 +225,4 @@ async function checkPort(port, host = process.env.HOST, verbose) {
 	return port;
 }
 //#endregion
-//#region src/adapters/_shared.ts
-const DEFAULT_PORT = 9999;
-/**
-* Resolve the mount base path for a devframe's SPA. Hosted adapters
-* (`vite`, `embedded`) default to `/__<id>/` so they don't collide
-* with the host app; standalone adapters (`cli`, `build`)
-* default to `/` because they own the origin.
-*
-* The devframe author can override with `basePath` on the definition.
-*/
-function resolveBasePath(def, kind) {
-	if (def.basePath) return normalizeBasePath(def.basePath);
-	return kind === "standalone" ? "/" : `/__${def.id}/`;
-}
-function normalizeBasePath(base) {
-	return cleanDoubleSlashes(withTrailingSlash(withLeadingSlash(base)));
-}
-/**
-* Resolve the listening port for `createDevServer` (and `createHandler`'s
-* side-car tiers), honoring the definition's `cli.port` / `cli.portRange` /
-* `cli.random` settings. Exposed separately so authors who run their own
-* argv parsing can resolve a port up-front (to print it, log it, etc.)
-* before starting the server.
-*/
-async function resolveDevServerPort(def, options = {}) {
-	const host = options.host ?? def.cli?.host ?? "localhost";
-	const portOptions = {
-		port: options.defaultPort ?? def.cli?.port ?? DEFAULT_PORT,
-		host
-	};
-	if (def.cli?.portRange) portOptions.portRange = def.cli.portRange;
-	if (def.cli?.random) portOptions.random = def.cli.random;
-	return getPort(portOptions);
-}
-/**
-* Normalize the `cli.mcp` / `mcp` option (`boolean | McpRouteOptions`) into
-* concrete options, or `undefined` when the MCP route is disabled.
-*/
-function resolveMcpConfig(mcp) {
-	if (!mcp) return void 0;
-	return mcp === true ? {} : mcp;
-}
-/**
-* Resolve the `mcp` entry a `__connection.json` should advertise for a dev
-* server started with the given `mcp` option (falling back to `def.cli?.mcp`,
-* exactly like `createDevServer`), or `undefined` when the route is
-* disabled.
-*
-* Hosted bridges that hand-roll their connection meta pass the side-car
-* `port`: the advertised path becomes absolute (the side-car mounts at `/`)
-* and the client dials `<page-host>:<port><path>`. Without `port` the path
-* stays relative, resolved against `__connection.json`'s own location (the
-* same-server default).
-*/
-function resolveMcpConnectionMeta(def, mcp, port) {
-	const config = resolveMcpConfig(mcp ?? def.cli?.mcp);
-	if (!config) return void 0;
-	const route = withoutLeadingSlash(config.path ?? "__mcp");
-	return port != null ? {
-		path: withLeadingSlash(route),
-		port
-	} : { path: route };
-}
-//#endregion
-export { dist_exports as a, resolveMcpConnectionMeta as i, resolveBasePath as n, resolveDevServerPort as r, normalizeBasePath as t };
+export { getPort as n, dist_exports as t };

package/dist/events-DKfSmoTj.mjs

@@ -0,0 +1,65 @@
+//#region src/events.ts
+/**
+* Centralized registry of the core devframe event names — the node-side host
+* bus events, the client RPC connection events, and the server→client
+* broadcast notifications — so these names live in one place instead of
+* scattered string literals.
+*
+* **Keep this in sync with [`docs/guide/events.md`](../../../docs/guide/events.md)**
+* (the "Core devframe events" section): every name here appears in that page's
+* tables, and every name there resolves to an entry here. Add, rename, or
+* remove a name in both places in the same change, and reference
+* `DEVFRAME_EVENTS.*` from call sites instead of re-typing a literal.
+*
+* This map covers **notifications** (events, broadcasts). The request/response
+* RPC endpoints of the shared-state, streaming, and auth-handshake protocols
+* (`devframe:rpc:server-state:*`, `devframe:streaming:subscribe`,
+* `anonymous:devframe:auth`, …) are defined at their handlers and typed in
+* `types/rpc-augments.ts`; they aren't events and stay out of this map.
+*
+* The `EventEmitter` maps (`RpcClientEvents`, `DevframeAgentHostEvents`) and the
+* `DevframeRpcClientFunctions` augmentation declare these names as type-level
+* keys (a literal is unavoidable in a type position); those declarations mirror
+* this map and move with it.
+*/
+const DEVFRAME_EVENTS = {
+	/**
+	* Node-side host `EventEmitter` events. The agent host (`ctx.agent.events`)
+	* emits these as its tool/resource surface changes; protocol adapters (e.g.
+	* MCP) subscribe to re-publish their manifest.
+	*/
+	bus: {
+		agentManifestChanged: "agent:manifest:changed",
+		agentToolRegistered: "agent:tool:registered",
+		agentToolUnregistered: "agent:tool:unregistered",
+		agentResourceRegistered: "agent:resource:registered",
+		agentResourceUnregistered: "agent:resource:unregistered"
+	},
+	/**
+	* Client-side RPC connection `EventEmitter` events (`rpc.events`) a UI
+	* subscribes to for connection lifecycle and error surfacing.
+	*/
+	client: {
+		isTrustedUpdated: "rpc:is-trusted:updated",
+		error: "rpc:error",
+		connectionStatus: "connection:status",
+		connectionError: "connection:error"
+	},
+	/**
+	* Broadcast notifications the server pushes to clients (server → client),
+	* `devframe:` prefix. The paired request methods (subscribe/get/set/…) are
+	* RPC endpoints, not events, and are omitted deliberately.
+	*/
+	broadcast: {
+		authRevoked: "devframe:auth:revoked",
+		clientStateUpdated: "devframe:rpc:client-state:updated",
+		clientStatePatch: "devframe:rpc:client-state:patch",
+		streamingChunk: "devframe:streaming:chunk",
+		streamingEnd: "devframe:streaming:end",
+		streamingUploadCancel: "devframe:streaming:upload-cancel"
+	},
+	/** `postMessage` channels the runtime posts across window boundaries. */
+	postMessage: { remoteAssetsError: "devframe:remote-assets-error" }
+};
+//#endregion
+export { DEVFRAME_EVENTS as t };

package/dist/{host-agent-xLCSe65D.mjs → host-agent-BDdcOXhG.mjs}

@@ -1,4 +1,5 @@
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 //#region src/utils/events.ts
 /**
 * Create event emitter.
@@ -90,7 +91,7 @@ var DevframeAgentHost = class {
 	constructor(context) {
 		this.context = context;
 		this._rpcUnsubscribe = context.rpc.onChanged(() => {
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		});
 	}
 	registerTool(input) {
@@ -100,28 +101,28 @@ var DevframeAgentHost = class {
 			tool,
 			handler: input.handler
 		});
-		this.events.emit("agent:tool:registered", tool);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentToolRegistered, tool);
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		return { unregister: () => this.unregisterTool(tool.id) };
 	}
 	unregisterTool(id) {
 		const existed = this.tools.delete(id);
 		if (existed) {
-			this.events.emit("agent:tool:unregistered", id);
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentToolUnregistered, id);
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		}
 		return existed;
 	}
 	registerToolProvider(provider) {
 		this.providers.add(provider);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		const notifyChanged = () => {
-			if (this.providers.has(provider)) this.events.emit("agent:manifest:changed");
+			if (this.providers.has(provider)) this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		};
 		return {
 			notifyChanged,
 			unregister: () => {
-				if (this.providers.delete(provider)) this.events.emit("agent:manifest:changed");
+				if (this.providers.delete(provider)) this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 			}
 		};
 	}
@@ -138,15 +139,15 @@ var DevframeAgentHost = class {
 			resource,
 			read: input.read
 		});
-		this.events.emit("agent:resource:registered", resource);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentResourceRegistered, resource);
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		return { unregister: () => this.unregisterResource(resource.id) };
 	}
 	unregisterResource(id) {
 		const existed = this.resources.delete(id);
 		if (existed) {
-			this.events.emit("agent:resource:unregistered", id);
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentResourceUnregistered, id);
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		}
 		return existed;
 	}

package/dist/{http-8Kpkap4_.mjs → http-BbHCU5Zs.mjs}

@@ -1,12 +1,13 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import { t as Diagnostic } from "./nostics-CzECRXpE.mjs";
-import { i as isAllowedOrigin } from "./ws-server-BiUne4K7.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { t as createHostContext } from "./context-CEe4PBz1.mjs";
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
+import { i as isAllowedOrigin } from "./ws-server-BdSLrhxE.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
+import { t as createHostContext } from "./context-Bdkakk8S.mjs";
 import { t as toAgentToolName } from "./agent-tool-name-EgfoFO8C.mjs";
 import { randomUUID } from "node:crypto";
-import { join } from "pathe";
 import process from "node:process";
+import { join } from "pathe";
 import { homedir } from "node:os";
 import { defineHandler } from "h3";
 import { Server, WebStandardStreamableHTTPServerTransport, isInitializeRequest } from "@modelcontextprotocol/server";
@@ -172,7 +173,7 @@ function buildMcpServerFromContext(ctx, options) {
 	const notify = (method) => {
 		server.notification({ method }).catch(() => {});
 	};
-	const offManifest = ctx.agent.events.on("agent:manifest:changed", () => {
+	const offManifest = ctx.agent.events.on(DEVFRAME_EVENTS.bus.agentManifestChanged, () => {
 		notify("notifications/tools/list_changed");
 		notify("notifications/resources/list_changed");
 	});
@@ -210,7 +211,9 @@ async function createMcpServer(definition, options = {}) {
 			}
 		}
 	});
+	for (const input of definition.services ?? []) ctx.services.install(input, { resolveFrom: definition.packageName });
 	await definition.setup(ctx);
+	await ctx.services.ready();
 	const { server, dispose } = buildMcpServerFromContext(ctx, {
 		serverName: options.serverName ?? `${definition.id} (devframe)`,
 		serverVersion: options.serverVersion ?? definition.version ?? "0.0.0",

package/dist/{index-CB-fSUyn.d.mts → index-BKFT9-jA.d.mts}

@@ -1,5 +1,5 @@
-import { R as DevframeNodeRpcSession, g as DevframeNodeContext, lt as SharedState } from "./devframe-DJMg0WLe.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-B3YUu_95.mjs";
+import { _ as DevframeNodeRpcSession, g as DevframeNodeContext, gt as SharedState } from "./devframe-BlLEZR-x.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-dqyXS6o3.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { A as ScopedServerFunctions, B as RpcFunctionsHost, C as DevframeScopedStreamingHost, Ct as DevframeAgentHost, D as ScopedBroadcastOptions, Dt as EventsMap, E as DevframeSettingsStore, Et as EventUnsubscribe, F as DevframeStorageScope, G as RpcStreamingHost, H as RpcSharedStateHost, I as DevframeDiagnosticsHost, J as DevframeRpcSharedStates, K as DevframeRpcClientFunctions, L as DevframeDiagnosticsLogger, M as SettingsForNamespace, N as DevframeViewHost, O as ScopedClientFunctions, P as DevframeHost, R as DevframeNodeRpcSession, S as DevframeScopedNodeRpc, St as AgentToolProviderHandle, T as DevframeSettingsRegistry, Tt as EventEmitter, U as RpcStreamingChannel, V as RpcSharedStateGetOptions, W as RpcStreamingChannelOptions, _ as DevframeServiceId, _t as AgentResourceContent, a as DevframeDuplicationStrategy, b as DevframeServicesRegistry, bt as AgentToolInput, c as DevframeWsOptions, d as ConnectionMeta, f as ConnectionMetaSse, g as DevframeNodeContext, gt as AgentResource, h as DevframeConnectionConfigsRegistry, ht as AgentManifest, i as DevframeDockDefaults, j as ScopedSharedStates, k as ScopedRpcFn, l as McpRouteOptions, m as DevframeCapabilities, mt as AgentHandle, n as DevframeDefinition, o as DevframeSetupInfo, p as ConnectionMetaWebsocket, q as DevframeRpcServerFunctions, r as DevframeDeploymentKind, s as DevframeSseOptions, t as DevframeCliOptions, v as DevframeServiceOf, vt as AgentResourceInput, w as DevframeSettings, wt as DevframeAgentHostEvents, x as DevframeScopedNodeContext, xt as AgentToolProvider, y as DevframeServicesHost, yt as AgentTool, z as RpcBroadcastOptions } from "./devframe-DJMg0WLe.mjs";
+import { $ as DevframeStorageScope, A as DevframeServiceId, At as DevframeAgentHost, B as DevframeScopedNodeRpc, C as RpcStreamingChannelOptions, Ct as AgentResource, D as DevframeRpcSharedStates, Dt as AgentToolInput, E as DevframeRpcServerFunctions, Et as AgentTool, F as DevframeServicesHost, G as ScopedBroadcastOptions, H as DevframeSettings, I as DevframeServicesRegistry, J as ScopedServerFunctions, K as ScopedClientFunctions, L as DevframeServicesScopeRegistry, M as DevframeServiceMeta, Mt as EventEmitter, N as DevframeServiceOf, Nt as EventUnsubscribe, O as DevframeServiceDefinition, Ot as AgentToolProvider, P as DevframeServiceScopeOf, Pt as EventsMap, Q as DevframeHost, R as DevframeServicesState, S as RpcStreamingChannel, St as AgentManifest, T as DevframeRpcClientFunctions, Tt as AgentResourceInput, U as DevframeSettingsRegistry, V as DevframeScopedStreamingHost, W as DevframeSettingsStore, X as SettingsForNamespace, Y as ScopedSharedStates, Z as DevframeViewHost, _ as DevframeNodeRpcSession, a as DevframeDuplicationStrategy, b as RpcSharedStateGetOptions, c as DevframeWsOptions, d as ConnectionMeta, et as DevframeDiagnosticsHost, f as ConnectionMetaSse, g as DevframeNodeContext, h as DevframeConnectionConfigsRegistry, i as DevframeDockDefaults, j as DevframeServiceInput, jt as DevframeAgentHostEvents, k as DevframeServiceDescriptor, kt as AgentToolProviderHandle, l as McpRouteOptions, m as DevframeCapabilities, n as DevframeDefinition, o as DevframeSetupInfo, p as ConnectionMetaWebsocket, q as ScopedRpcFn, r as DevframeDeploymentKind, s as DevframeSseOptions, t as DevframeCliOptions, tt as DevframeDiagnosticsLogger, v as RpcBroadcastOptions, w as RpcStreamingHost, wt as AgentResourceContent, x as RpcSharedStateHost, xt as AgentHandle, y as RpcFunctionsHost, z as DevframeScopedNodeContext } from "./devframe-BlLEZR-x.mjs";
 import "./index-tdrk1bzV.mjs";
 import { C as RpcFunctionType, T as RpcReturnSchema, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-Djq7CBXh.mjs";
 import { d as DevframeRpcConnection, f as DevframeRpcConnectionRequest, p as DevframeRpcTransportKind, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
@@ -12,4 +12,4 @@ declare const defineRpcFunction: <NAME extends string, TYPE extends RpcFunctionT
  */
 declare function defineDevframe(d: DevframeDefinition): DevframeDefinition;
 //#endregion
-export { type AgentHandle, type AgentManifest, type AgentResource, type AgentResourceContent, type AgentResourceInput, type AgentTool, type AgentToolInput, type AgentToolProvider, type AgentToolProviderHandle, type ConnectionMeta, type ConnectionMetaSse, type ConnectionMetaWebsocket, type DevframeAgentHost, type DevframeAgentHostEvents, type DevframeCapabilities, type DevframeCliOptions, type DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, type DevframeDefinition, type DevframeDeploymentKind, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockDefaults, type DevframeDuplicationStrategy, type DevframeHost, type DevframeNodeContext, type DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, type DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeRpcTransportKind, type DevframeScopedNodeContext, type DevframeScopedNodeRpc, type DevframeScopedStreamingHost, type DevframeServiceId, type DevframeServiceOf, type DevframeServicesHost, type DevframeServicesRegistry, type DevframeSettings, type DevframeSettingsRegistry, type DevframeSettingsStore, type DevframeSetupInfo, type DevframeSseOptions, type DevframeStorageScope, type DevframeViewHost, type DevframeWsOptions, type EventEmitter, type EventUnsubscribe, type EventsMap, type McpRouteOptions, type RemoteAssets, type RemoteAssetsErrorMessage, type RemoteAssetsProvider, type RemoteAssetsProviderCustom, type RemoteAssetsStore, type RpcBroadcastOptions, type RpcFunctionAgentOptions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, type ScopedBroadcastOptions, type ScopedClientFunctions, type ScopedRpcFn, type ScopedServerFunctions, type ScopedSharedStates, type SettingsForNamespace, type StaticAssetsSource, defineDevframe, defineRpcFunction };
+export { type AgentHandle, type AgentManifest, type AgentResource, type AgentResourceContent, type AgentResourceInput, type AgentTool, type AgentToolInput, type AgentToolProvider, type AgentToolProviderHandle, type ConnectionMeta, type ConnectionMetaSse, type ConnectionMetaWebsocket, type DevframeAgentHost, type DevframeAgentHostEvents, type DevframeCapabilities, type DevframeCliOptions, type DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, type DevframeDefinition, type DevframeDeploymentKind, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockDefaults, type DevframeDuplicationStrategy, type DevframeHost, type DevframeNodeContext, type DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, type DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeRpcTransportKind, type DevframeScopedNodeContext, type DevframeScopedNodeRpc, type DevframeScopedStreamingHost, type DevframeServiceDefinition, type DevframeServiceDescriptor, type DevframeServiceId, type DevframeServiceInput, type DevframeServiceMeta, type DevframeServiceOf, type DevframeServiceScopeOf, type DevframeServicesHost, type DevframeServicesRegistry, type DevframeServicesScopeRegistry, type DevframeServicesState, type DevframeSettings, type DevframeSettingsRegistry, type DevframeSettingsStore, type DevframeSetupInfo, type DevframeSseOptions, type DevframeStorageScope, type DevframeViewHost, type DevframeWsOptions, type EventEmitter, type EventUnsubscribe, type EventsMap, type McpRouteOptions, type RemoteAssets, type RemoteAssetsErrorMessage, type RemoteAssetsProvider, type RemoteAssetsProviderCustom, type RemoteAssetsStore, type RpcBroadcastOptions, type RpcFunctionAgentOptions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, type ScopedBroadcastOptions, type ScopedClientFunctions, type ScopedRpcFn, type ScopedServerFunctions, type ScopedSharedStates, type SettingsForNamespace, type StaticAssetsSource, defineDevframe, defineRpcFunction };

package/dist/{instance-registry-WvQkt42E.mjs → instance-registry-CHunhMi5.mjs}

@@ -1,8 +1,8 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { join } from "pathe";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 import process from "node:process";
+import { join } from "pathe";
+import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/node/instance-registry.ts
 var instance_registry_exports = /* @__PURE__ */ __exportAll({

package/dist/{instance-shell-CljiKq1c.d.mts → instance-shell-0iw-cQ5V.d.mts}

@@ -1,6 +1,6 @@
-import { K as DevframeRpcClientFunctions, R as DevframeNodeRpcSession, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, q as DevframeRpcServerFunctions, s as DevframeSseOptions, u as DevframeAuthHandler } from "./devframe-DJMg0WLe.mjs";
+import { E as DevframeRpcServerFunctions, T as DevframeRpcClientFunctions, _ as DevframeNodeRpcSession, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, s as DevframeSseOptions, u as DevframeAuthHandler } from "./devframe-BlLEZR-x.mjs";
 import { d as DevframeRpcConnection, n as WsOriginRegistry, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
-import "./index-CB-fSUyn.mjs";
+import "./index-BKFT9-jA.mjs";
 import { BirpcGroup } from "birpc";
 import { NodeAdapter } from "crossws/adapters/node";
 import { Buffer } from "node:buffer";

package/dist/{instance-shell-XvN5USg4.mjs → instance-shell-DbDoozNM.mjs}

@@ -1,6 +1,6 @@
 import "./constants.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { t as getInternalContext } from "./context-xdynGSLP.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
+import { t as getInternalContext } from "./context-CXhjygJU.mjs";
 import { createInteractiveAuth } from "./recipes/interactive-auth.mjs";
 import { createServer } from "node:http";
 import process from "node:process";
@@ -197,7 +197,7 @@ function createInstanceShell(options) {
 		const origin = currentOrigin();
 		if (!cfg || registerPromise || !origin || !meta) return;
 		const resolvedMeta = meta;
-		registerPromise = import("./instance-registry-WvQkt42E.mjs").then((n) => n.t).then(({ registerDevframeInstance }) => {
+		registerPromise = import("./instance-registry-CHunhMi5.mjs").then((n) => n.t).then(({ registerDevframeInstance }) => {
 			let port = 0;
 			try {
 				const url = new URL(origin);
@@ -257,7 +257,7 @@ function createInstanceShell(options) {
 	let resolvedAuth = false;
 	let corePromise;
 	function ensureCore() {
-		corePromise ??= import("./rpc-core-DMTe-hLo.mjs").then((n) => n.n).then(({ createContextRpcServer }) => createContextRpcServer({
+		corePromise ??= import("./rpc-core-Dru9uoM0.mjs").then((n) => n.n).then(({ createContextRpcServer }) => createContextRpcServer({
 			context: ctx,
 			auth: resolvedAuth,
 			onPeerConnect: options.onPeerConnect,
@@ -298,7 +298,7 @@ function createInstanceShell(options) {
 			allowedOrigins: options.allowedOrigins
 		});
 		if (ws.port != null) return await start(ws.port);
-		const { getPort } = await import("./_shared-CKZPvSrN.mjs").then((n) => n.a);
+		const { getPort } = await import("./dist-CZXfGEkd.mjs").then((n) => n.t);
 		let lastError;
 		for (let attempt = 0; attempt < 3; attempt++) {
 			const port = attempt === 0 && options.resolveSidecarPort ? await options.resolveSidecarPort(sidecarHost) : await getPort({

package/dist/internal/index.d.mts

@@ -1,9 +1,9 @@
-import { Ct as DevframeAgentHost$1, P as DevframeHost, St as AgentToolProviderHandle, Tt as EventEmitter, _t as AgentResourceContent, bt as AgentToolInput, g as DevframeNodeContext, gt as AgentResource, ht as AgentManifest, mt as AgentHandle, vt as AgentResourceInput, wt as DevframeAgentHostEvents, xt as AgentToolProvider, yt as AgentTool } from "../devframe-DJMg0WLe.mjs";
+import { At as DevframeAgentHost$1, Ct as AgentResource, Dt as AgentToolInput, Et as AgentTool, Mt as EventEmitter, Ot as AgentToolProvider, Q as DevframeHost, St as AgentManifest, Tt as AgentResourceInput, g as DevframeNodeContext, jt as DevframeAgentHostEvents, kt as AgentToolProviderHandle, wt as AgentResourceContent, xt as AgentHandle } from "../devframe-BlLEZR-x.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-Djq7CBXh.mjs";
 import { a as RemoteAssetsStore } from "../remote-assets-Bg4gCUZ_.mjs";
-import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-CljiKq1c.mjs";
-import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-BPmX9fqK.mjs";
-import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-Cc4lucI0.mjs";
+import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-0iw-cQ5V.mjs";
+import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-DqbKCAew.mjs";
+import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-CR8o34O9.mjs";
 //#region src/node/agent-args.d.ts
 /**
  * How {@link coerceAgentPositionalArgs} treats an args object that carries
@@ -280,6 +280,48 @@ declare const diagnostics: import("nostics").Diagnostics<{
     }) => string;
     readonly fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path.";
   };
+  readonly DF0066: {
+    readonly why: (p: {
+      package: string;
+    }) => string;
+    readonly fix: "Option sets only merge before `ctx.services.ready()` fires. Install the service (or declare it in `DevframeDefinition.services`) before the barrier so its options join the merge.";
+  };
+  readonly DF0067: {
+    readonly why: (p: {
+      package: string;
+      reason: string;
+    }) => string;
+    readonly fix: "Install the service package next to whoever declares it (a plugin declaring it in `services` should list it in its own dependencies), or drop `required: true` to degrade gracefully when it is absent.";
+  };
+  readonly DF0068: {
+    readonly why: (p: {
+      package: string;
+      required: string;
+      installed: string;
+    }) => string;
+    readonly fix: "Align the installed service package with the range its declarer requires, or drop `required: true` to downgrade the mismatch to a warning.";
+  };
+  readonly DF0069: {
+    readonly why: (p: {
+      package: string;
+      required: string;
+      installed: string;
+    }) => string;
+    readonly fix: "The advertised meta carries the real version, so clients can gate on it. Align the installed service package with the declared range to silence this warning.";
+  };
+  readonly DF0070: {
+    readonly why: (p: {
+      package: string;
+      reason: string;
+    }) => string;
+    readonly fix: "A service package's default export must be a factory returning a `DevframeServiceDefinition` — an object with `package`, `version`, `scope`, and a `setup` function.";
+  };
+  readonly DF0071: {
+    readonly why: (p: {
+      reason: string;
+    }) => string;
+    readonly fix: "Call `ctx.services.ready()` explicitly after every devframe's setup has run (the first-party adapters do) so installation errors surface at startup instead of at connect time.";
+  };
 }, readonly [(d: import("nostics").Diagnostic, { method }?: {
   method?: "log" | "warn" | "error";
 }) => void]>;
@@ -364,7 +406,6 @@ declare function normalizeHttpServerUrl(host: string, port: number | string): st
  * The per-connection `serialize`/`deserialize` pair for a live RPC wire.
  *
  * @internal
- * implementations; not part of the stable public API.
  */
 interface RpcWireCodec {
   serialize: (msg: any) => string;
@@ -380,7 +421,6 @@ interface RpcWireCodec {
  * don't collide across connections.
  *
  * @internal
- * implementations; not part of the stable public API.
  */
 declare function createRpcWireCodec(definitions?: ReadonlyMap<string, Pick<RpcFunctionDefinitionAny, 'jsonSerializable'>>): RpcWireCodec;
 /**
@@ -390,7 +430,6 @@ declare function createRpcWireCodec(definitions?: ReadonlyMap<string, Pick<RpcFu
  * handed to birpc proper.
  *
  * @internal
- * implementations; not part of the stable public API.
  */
 declare function peekRpcWireFrame(raw: string): {
   t?: string;

package/dist/internal/index.mjs

@@ -1,9 +1,9 @@
-import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-GsoRxIsD.mjs";
-import { t as diagnostics } from "../diagnostics-DOQPnQmX.mjs";
-import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-xLCSe65D.mjs";
-import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CKZPvSrN.mjs";
-import { t as createH3DevframeHost } from "../host-h3-Crkzm42q.mjs";
-import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-WvQkt42E.mjs";
-import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-XvN5USg4.mjs";
-import { t as createContextRpcServer } from "../rpc-core-DMTe-hLo.mjs";
+import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-0K-o5MYW.mjs";
+import { t as diagnostics } from "../diagnostics-Di8ytitn.mjs";
+import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-BDdcOXhG.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-BM3PdYli.mjs";
+import { t as createH3DevframeHost } from "../host-h3-fRbF9yor.mjs";
+import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-CHunhMi5.mjs";
+import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-DbDoozNM.mjs";
+import { t as createContextRpcServer } from "../rpc-core-Dru9uoM0.mjs";
 export { DevframeAgentHost, coerceAgentPositionalArgs, createContextRpcServer, createH3DevframeHost, createInstanceShell, createRpcWireCodec, diagnostics, listLiveDevframeInstances, normalizeBasePath, normalizeHttpServerUrl, peekRpcWireFrame, registerDevframeInstance, resolveBasePath, resolveInstanceRegister, samePath };

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { u as DevframeAuthHandler } from "../devframe-DJMg0WLe.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-CB-fSUyn.mjs";
+import { u as DevframeAuthHandler } from "../devframe-BlLEZR-x.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-BKFT9-jA.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/auth.mjs

@@ -1,3 +1,3 @@
-import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-DZbJ7Cl0.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-Cc1IeSmQ.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-3Q6aDKWk.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-CK9LjrnT.mjs";
 export { buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,3 +1,3 @@
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-B3YUu_95.mjs";
-import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-BPmX9fqK.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-dqyXS6o3.mjs";
+import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-DqbKCAew.mjs";
 export { type DevframeInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/hub-internals.mjs

@@ -1,3 +1,3 @@
-import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CKZPvSrN.mjs";
-import { n as internalContextMap, t as getInternalContext } from "../context-xdynGSLP.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-BM3PdYli.mjs";
+import { n as internalContextMap, t as getInternalContext } from "../context-CXhjygJU.mjs";
 export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { B as RpcFunctionsHost, P as DevframeHost, g as DevframeNodeContext, lt as SharedState } from "../devframe-DJMg0WLe.mjs";
+import { Q as DevframeHost, g as DevframeNodeContext, gt as SharedState, y as RpcFunctionsHost } from "../devframe-BlLEZR-x.mjs";
 import "../index-tdrk1bzV.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-Djq7CBXh.mjs";
 import { BirpcGroup } from "birpc";

package/dist/node/index.mjs

@@ -1,3 +1,3 @@
-import { t as createHostContext } from "../context-CEe4PBz1.mjs";
-import { t as createStorage } from "../storage-CYye7P7L.mjs";
+import { t as createHostContext } from "../context-Bdkakk8S.mjs";
+import { t as createStorage } from "../storage-D4a99Ung.mjs";
 export { createHostContext, createStorage };

package/dist/recipes/common-rpc-functions.d.mts

@@ -1,4 +1,4 @@
-import "../devframe-DJMg0WLe.mjs";
+import "../devframe-BlLEZR-x.mjs";
 import "../index-tdrk1bzV.mjs";
 import { E as Thenable, S as RpcFunctionSetupResult, c as RpcDump, g as RpcFunctionAgentOptions } from "../types-Djq7CBXh.mjs";
 import { SimpleSchema } from "../utils/simple-schema.mjs";

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { g as DevframeNodeContext, u as DevframeAuthHandler } from "../devframe-DJMg0WLe.mjs";
-import "../index-CB-fSUyn.mjs";
+import { g as DevframeNodeContext, u as DevframeAuthHandler } from "../devframe-BlLEZR-x.mjs";
+import "../index-BKFT9-jA.mjs";
 //#region src/recipes/interactive-auth.d.ts
 interface CreateInteractiveAuthOptions {
   /**

package/dist/recipes/interactive-auth.mjs

@@ -1,8 +1,8 @@
 import { s as colors } from "../nostics-CzECRXpE.mjs";
 import { n as defineRpcFunction } from "../define-BLWPsH6y.mjs";
 import { isAnonymousRpcMethod } from "../constants.mjs";
-import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-Cc1IeSmQ.mjs";
-import { t as getInternalContext } from "../context-xdynGSLP.mjs";
+import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-CK9LjrnT.mjs";
+import { t as getInternalContext } from "../context-CXhjygJU.mjs";
 import { t as s } from "../simple-schema-DQPZrAaZ.mjs";
 //#region src/recipes/interactive-auth.ts
 function defaultBanner(info) {

package/dist/{remote-assets-nTTxY2MU.mjs → remote-assets-DRfY2RjX.mjs}

@@ -1,13 +1,13 @@
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 import { createRequire } from "node:module";
 import { isatty } from "node:tty";
 import { formatWithOptions, inspect } from "node:util";
+import { dirname, extname, join, normalize, sep } from "pathe";
 import { createReadStream, existsSync } from "node:fs";
 import { Buffer } from "node:buffer";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { Readable } from "node:stream";
 import { lookup } from "mrmime";
-import { dirname, extname, join, normalize, sep } from "pathe";
 //#region ../../node_modules/.pnpm/obug@2.1.4/node_modules/obug/dist/core.js
 /**
 * Coerce `value`.
@@ -315,9 +315,10 @@ const CACHE_CONTROL_HEADER = "no-store";
 function flattenTree(nodes, style) {
 	const out = [];
 	const walk = (list, prefix) => {
-		for (const node of list) if (style === "path") if (node.type === "file") out.push((node.path ?? "").replace(/^\//, ""));
-		else walk(node.files ?? [], "");
-		else if (node.type === "file") out.push(prefix + (node.name ?? ""));
+		for (const node of list) if (style === "path") {
+			if (node.type === "file") out.push((node.path ?? "").replace(/^\//, ""));
+			else walk(node.files ?? [], "");
+		} else if (node.type === "file") out.push(prefix + (node.name ?? ""));
 		else if (node.files) walk(node.files, `${prefix}${node.name}/`);
 	};
 	walk(nodes, "");

package/dist/{revoke-DZbJ7Cl0.mjs → revoke-3Q6aDKWk.mjs}

@@ -1,3 +1,4 @@
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
 //#region src/node/auth/revoke.ts
 /**
 * Flip `isTrusted` to false on any live WS clients connected with `token`
@@ -16,7 +17,7 @@ async function revokeActiveConnectionsForToken(context, token) {
 	}
 	if (affectedSessionIds.size === 0) return;
 	await rpcHost.broadcast({
-		method: "devframe:auth:revoked",
+		method: DEVFRAME_EVENTS.broadcast.authRevoked,
 		args: [],
 		filter: (client) => affectedSessionIds.has(client.$meta.id)
 	});

package/dist/{rolldown-runtime-JspESFgx.mjs → rolldown-runtime-B4iAMlE-.mjs}

@@ -26,7 +26,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));