devframe 0.9.0 → 0.9.1

package/dist/{diagnostics-DOQPnQmX.mjs → diagnostics-Di8ytitn.mjs}

@@ -137,6 +137,30 @@ const diagnostics = defineDiagnostics({
 		DF0065: {
 			why: (p) => `Invalid remote-assets ${p.field} "${p.value}".`,
 			fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path."
+		},
+		DF0066: {
+			why: (p) => `Service "${p.package}" is already installed — keeping the first installation and ignoring this one's options.`,
+			fix: "Option sets only merge before `ctx.services.ready()` fires. Install the service (or declare it in `DevframeDefinition.services`) before the barrier so its options join the merge."
+		},
+		DF0067: {
+			why: (p) => `Failed to import the required service package "${p.package}": ${p.reason}`,
+			fix: "Install the service package next to whoever declares it (a plugin declaring it in `services` should list it in its own dependencies), or drop `required: true` to degrade gracefully when it is absent."
+		},
+		DF0068: {
+			why: (p) => `The installed service "${p.package}@${p.installed}" does not satisfy the required range "${p.required}".`,
+			fix: "Align the installed service package with the range its declarer requires, or drop `required: true` to downgrade the mismatch to a warning."
+		},
+		DF0069: {
+			why: (p) => `The installed service "${p.package}@${p.installed}" does not satisfy the declared range "${p.required}" — installing it anyway.`,
+			fix: "The advertised meta carries the real version, so clients can gate on it. Align the installed service package with the declared range to silence this warning."
+		},
+		DF0070: {
+			why: (p) => `Invalid service "${p.package}": ${p.reason}`,
+			fix: "A service package's default export must be a factory returning a `DevframeServiceDefinition` — an object with `package`, `version`, `scope`, and a `setup` function."
+		},
+		DF0071: {
+			why: (p) => `Deferred service installation failed while flushing on the first client connection: ${p.reason}`,
+			fix: "Call `ctx.services.ready()` explicitly after every devframe's setup has run (the first-party adapters do) so installation errors surface at startup instead of at connect time."
 		}
 	}
 });

package/dist/{dist-eNI9qM_I.mjs → dist-CZXfGEkd.mjs}

@@ -1,4 +1,4 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import "node:fs/promises";
 import { createServer } from "node:net";
 import { networkInterfaces } from "node:os";

package/dist/events-DKfSmoTj.mjs

@@ -0,0 +1,65 @@
+//#region src/events.ts
+/**
+* Centralized registry of the core devframe event names — the node-side host
+* bus events, the client RPC connection events, and the server→client
+* broadcast notifications — so these names live in one place instead of
+* scattered string literals.
+*
+* **Keep this in sync with [`docs/guide/events.md`](../../../docs/guide/events.md)**
+* (the "Core devframe events" section): every name here appears in that page's
+* tables, and every name there resolves to an entry here. Add, rename, or
+* remove a name in both places in the same change, and reference
+* `DEVFRAME_EVENTS.*` from call sites instead of re-typing a literal.
+*
+* This map covers **notifications** (events, broadcasts). The request/response
+* RPC endpoints of the shared-state, streaming, and auth-handshake protocols
+* (`devframe:rpc:server-state:*`, `devframe:streaming:subscribe`,
+* `anonymous:devframe:auth`, …) are defined at their handlers and typed in
+* `types/rpc-augments.ts`; they aren't events and stay out of this map.
+*
+* The `EventEmitter` maps (`RpcClientEvents`, `DevframeAgentHostEvents`) and the
+* `DevframeRpcClientFunctions` augmentation declare these names as type-level
+* keys (a literal is unavoidable in a type position); those declarations mirror
+* this map and move with it.
+*/
+const DEVFRAME_EVENTS = {
+	/**
+	* Node-side host `EventEmitter` events. The agent host (`ctx.agent.events`)
+	* emits these as its tool/resource surface changes; protocol adapters (e.g.
+	* MCP) subscribe to re-publish their manifest.
+	*/
+	bus: {
+		agentManifestChanged: "agent:manifest:changed",
+		agentToolRegistered: "agent:tool:registered",
+		agentToolUnregistered: "agent:tool:unregistered",
+		agentResourceRegistered: "agent:resource:registered",
+		agentResourceUnregistered: "agent:resource:unregistered"
+	},
+	/**
+	* Client-side RPC connection `EventEmitter` events (`rpc.events`) a UI
+	* subscribes to for connection lifecycle and error surfacing.
+	*/
+	client: {
+		isTrustedUpdated: "rpc:is-trusted:updated",
+		error: "rpc:error",
+		connectionStatus: "connection:status",
+		connectionError: "connection:error"
+	},
+	/**
+	* Broadcast notifications the server pushes to clients (server → client),
+	* `devframe:` prefix. The paired request methods (subscribe/get/set/…) are
+	* RPC endpoints, not events, and are omitted deliberately.
+	*/
+	broadcast: {
+		authRevoked: "devframe:auth:revoked",
+		clientStateUpdated: "devframe:rpc:client-state:updated",
+		clientStatePatch: "devframe:rpc:client-state:patch",
+		streamingChunk: "devframe:streaming:chunk",
+		streamingEnd: "devframe:streaming:end",
+		streamingUploadCancel: "devframe:streaming:upload-cancel"
+	},
+	/** `postMessage` channels the runtime posts across window boundaries. */
+	postMessage: { remoteAssetsError: "devframe:remote-assets-error" }
+};
+//#endregion
+export { DEVFRAME_EVENTS as t };

package/dist/{host-agent-xLCSe65D.mjs → host-agent-BDdcOXhG.mjs}

@@ -1,4 +1,5 @@
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 //#region src/utils/events.ts
 /**
 * Create event emitter.
@@ -90,7 +91,7 @@ var DevframeAgentHost = class {
 	constructor(context) {
 		this.context = context;
 		this._rpcUnsubscribe = context.rpc.onChanged(() => {
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		});
 	}
 	registerTool(input) {
@@ -100,28 +101,28 @@ var DevframeAgentHost = class {
 			tool,
 			handler: input.handler
 		});
-		this.events.emit("agent:tool:registered", tool);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentToolRegistered, tool);
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		return { unregister: () => this.unregisterTool(tool.id) };
 	}
 	unregisterTool(id) {
 		const existed = this.tools.delete(id);
 		if (existed) {
-			this.events.emit("agent:tool:unregistered", id);
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentToolUnregistered, id);
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		}
 		return existed;
 	}
 	registerToolProvider(provider) {
 		this.providers.add(provider);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		const notifyChanged = () => {
-			if (this.providers.has(provider)) this.events.emit("agent:manifest:changed");
+			if (this.providers.has(provider)) this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		};
 		return {
 			notifyChanged,
 			unregister: () => {
-				if (this.providers.delete(provider)) this.events.emit("agent:manifest:changed");
+				if (this.providers.delete(provider)) this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 			}
 		};
 	}
@@ -138,15 +139,15 @@ var DevframeAgentHost = class {
 			resource,
 			read: input.read
 		});
-		this.events.emit("agent:resource:registered", resource);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentResourceRegistered, resource);
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		return { unregister: () => this.unregisterResource(resource.id) };
 	}
 	unregisterResource(id) {
 		const existed = this.resources.delete(id);
 		if (existed) {
-			this.events.emit("agent:resource:unregistered", id);
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentResourceUnregistered, id);
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		}
 		return existed;
 	}

package/dist/{http-DYpK0cUi.mjs → http-BbHCU5Zs.mjs}

@@ -1,12 +1,13 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import { t as Diagnostic } from "./nostics-CzECRXpE.mjs";
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
 import { i as isAllowedOrigin } from "./ws-server-BdSLrhxE.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { t as createHostContext } from "./context-CEe4PBz1.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
+import { t as createHostContext } from "./context-Bdkakk8S.mjs";
 import { t as toAgentToolName } from "./agent-tool-name-EgfoFO8C.mjs";
 import { randomUUID } from "node:crypto";
-import { join } from "pathe";
 import process from "node:process";
+import { join } from "pathe";
 import { homedir } from "node:os";
 import { defineHandler } from "h3";
 import { Server, WebStandardStreamableHTTPServerTransport, isInitializeRequest } from "@modelcontextprotocol/server";
@@ -172,7 +173,7 @@ function buildMcpServerFromContext(ctx, options) {
 	const notify = (method) => {
 		server.notification({ method }).catch(() => {});
 	};
-	const offManifest = ctx.agent.events.on("agent:manifest:changed", () => {
+	const offManifest = ctx.agent.events.on(DEVFRAME_EVENTS.bus.agentManifestChanged, () => {
 		notify("notifications/tools/list_changed");
 		notify("notifications/resources/list_changed");
 	});
@@ -210,7 +211,9 @@ async function createMcpServer(definition, options = {}) {
 			}
 		}
 	});
+	for (const input of definition.services ?? []) ctx.services.install(input, { resolveFrom: definition.packageName });
 	await definition.setup(ctx);
+	await ctx.services.ready();
 	const { server, dispose } = buildMcpServerFromContext(ctx, {
 		serverName: options.serverName ?? `${definition.id} (devframe)`,
 		serverVersion: options.serverVersion ?? definition.version ?? "0.0.0",

package/dist/{index-CB-fSUyn.d.mts → index-BKFT9-jA.d.mts}

@@ -1,5 +1,5 @@
-import { R as DevframeNodeRpcSession, g as DevframeNodeContext, lt as SharedState } from "./devframe-DJMg0WLe.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-B3YUu_95.mjs";
+import { _ as DevframeNodeRpcSession, g as DevframeNodeContext, gt as SharedState } from "./devframe-BlLEZR-x.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-dqyXS6o3.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { A as ScopedServerFunctions, B as RpcFunctionsHost, C as DevframeScopedStreamingHost, Ct as DevframeAgentHost, D as ScopedBroadcastOptions, Dt as EventsMap, E as DevframeSettingsStore, Et as EventUnsubscribe, F as DevframeStorageScope, G as RpcStreamingHost, H as RpcSharedStateHost, I as DevframeDiagnosticsHost, J as DevframeRpcSharedStates, K as DevframeRpcClientFunctions, L as DevframeDiagnosticsLogger, M as SettingsForNamespace, N as DevframeViewHost, O as ScopedClientFunctions, P as DevframeHost, R as DevframeNodeRpcSession, S as DevframeScopedNodeRpc, St as AgentToolProviderHandle, T as DevframeSettingsRegistry, Tt as EventEmitter, U as RpcStreamingChannel, V as RpcSharedStateGetOptions, W as RpcStreamingChannelOptions, _ as DevframeServiceId, _t as AgentResourceContent, a as DevframeDuplicationStrategy, b as DevframeServicesRegistry, bt as AgentToolInput, c as DevframeWsOptions, d as ConnectionMeta, f as ConnectionMetaSse, g as DevframeNodeContext, gt as AgentResource, h as DevframeConnectionConfigsRegistry, ht as AgentManifest, i as DevframeDockDefaults, j as ScopedSharedStates, k as ScopedRpcFn, l as McpRouteOptions, m as DevframeCapabilities, mt as AgentHandle, n as DevframeDefinition, o as DevframeSetupInfo, p as ConnectionMetaWebsocket, q as DevframeRpcServerFunctions, r as DevframeDeploymentKind, s as DevframeSseOptions, t as DevframeCliOptions, v as DevframeServiceOf, vt as AgentResourceInput, w as DevframeSettings, wt as DevframeAgentHostEvents, x as DevframeScopedNodeContext, xt as AgentToolProvider, y as DevframeServicesHost, yt as AgentTool, z as RpcBroadcastOptions } from "./devframe-DJMg0WLe.mjs";
+import { $ as DevframeStorageScope, A as DevframeServiceId, At as DevframeAgentHost, B as DevframeScopedNodeRpc, C as RpcStreamingChannelOptions, Ct as AgentResource, D as DevframeRpcSharedStates, Dt as AgentToolInput, E as DevframeRpcServerFunctions, Et as AgentTool, F as DevframeServicesHost, G as ScopedBroadcastOptions, H as DevframeSettings, I as DevframeServicesRegistry, J as ScopedServerFunctions, K as ScopedClientFunctions, L as DevframeServicesScopeRegistry, M as DevframeServiceMeta, Mt as EventEmitter, N as DevframeServiceOf, Nt as EventUnsubscribe, O as DevframeServiceDefinition, Ot as AgentToolProvider, P as DevframeServiceScopeOf, Pt as EventsMap, Q as DevframeHost, R as DevframeServicesState, S as RpcStreamingChannel, St as AgentManifest, T as DevframeRpcClientFunctions, Tt as AgentResourceInput, U as DevframeSettingsRegistry, V as DevframeScopedStreamingHost, W as DevframeSettingsStore, X as SettingsForNamespace, Y as ScopedSharedStates, Z as DevframeViewHost, _ as DevframeNodeRpcSession, a as DevframeDuplicationStrategy, b as RpcSharedStateGetOptions, c as DevframeWsOptions, d as ConnectionMeta, et as DevframeDiagnosticsHost, f as ConnectionMetaSse, g as DevframeNodeContext, h as DevframeConnectionConfigsRegistry, i as DevframeDockDefaults, j as DevframeServiceInput, jt as DevframeAgentHostEvents, k as DevframeServiceDescriptor, kt as AgentToolProviderHandle, l as McpRouteOptions, m as DevframeCapabilities, n as DevframeDefinition, o as DevframeSetupInfo, p as ConnectionMetaWebsocket, q as ScopedRpcFn, r as DevframeDeploymentKind, s as DevframeSseOptions, t as DevframeCliOptions, tt as DevframeDiagnosticsLogger, v as RpcBroadcastOptions, w as RpcStreamingHost, wt as AgentResourceContent, x as RpcSharedStateHost, xt as AgentHandle, y as RpcFunctionsHost, z as DevframeScopedNodeContext } from "./devframe-BlLEZR-x.mjs";
 import "./index-tdrk1bzV.mjs";
 import { C as RpcFunctionType, T as RpcReturnSchema, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-Djq7CBXh.mjs";
 import { d as DevframeRpcConnection, f as DevframeRpcConnectionRequest, p as DevframeRpcTransportKind, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
@@ -12,4 +12,4 @@ declare const defineRpcFunction: <NAME extends string, TYPE extends RpcFunctionT
  */
 declare function defineDevframe(d: DevframeDefinition): DevframeDefinition;
 //#endregion
-export { type AgentHandle, type AgentManifest, type AgentResource, type AgentResourceContent, type AgentResourceInput, type AgentTool, type AgentToolInput, type AgentToolProvider, type AgentToolProviderHandle, type ConnectionMeta, type ConnectionMetaSse, type ConnectionMetaWebsocket, type DevframeAgentHost, type DevframeAgentHostEvents, type DevframeCapabilities, type DevframeCliOptions, type DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, type DevframeDefinition, type DevframeDeploymentKind, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockDefaults, type DevframeDuplicationStrategy, type DevframeHost, type DevframeNodeContext, type DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, type DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeRpcTransportKind, type DevframeScopedNodeContext, type DevframeScopedNodeRpc, type DevframeScopedStreamingHost, type DevframeServiceId, type DevframeServiceOf, type DevframeServicesHost, type DevframeServicesRegistry, type DevframeSettings, type DevframeSettingsRegistry, type DevframeSettingsStore, type DevframeSetupInfo, type DevframeSseOptions, type DevframeStorageScope, type DevframeViewHost, type DevframeWsOptions, type EventEmitter, type EventUnsubscribe, type EventsMap, type McpRouteOptions, type RemoteAssets, type RemoteAssetsErrorMessage, type RemoteAssetsProvider, type RemoteAssetsProviderCustom, type RemoteAssetsStore, type RpcBroadcastOptions, type RpcFunctionAgentOptions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, type ScopedBroadcastOptions, type ScopedClientFunctions, type ScopedRpcFn, type ScopedServerFunctions, type ScopedSharedStates, type SettingsForNamespace, type StaticAssetsSource, defineDevframe, defineRpcFunction };
+export { type AgentHandle, type AgentManifest, type AgentResource, type AgentResourceContent, type AgentResourceInput, type AgentTool, type AgentToolInput, type AgentToolProvider, type AgentToolProviderHandle, type ConnectionMeta, type ConnectionMetaSse, type ConnectionMetaWebsocket, type DevframeAgentHost, type DevframeAgentHostEvents, type DevframeCapabilities, type DevframeCliOptions, type DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, type DevframeDefinition, type DevframeDeploymentKind, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockDefaults, type DevframeDuplicationStrategy, type DevframeHost, type DevframeNodeContext, type DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, type DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeRpcTransportKind, type DevframeScopedNodeContext, type DevframeScopedNodeRpc, type DevframeScopedStreamingHost, type DevframeServiceDefinition, type DevframeServiceDescriptor, type DevframeServiceId, type DevframeServiceInput, type DevframeServiceMeta, type DevframeServiceOf, type DevframeServiceScopeOf, type DevframeServicesHost, type DevframeServicesRegistry, type DevframeServicesScopeRegistry, type DevframeServicesState, type DevframeSettings, type DevframeSettingsRegistry, type DevframeSettingsStore, type DevframeSetupInfo, type DevframeSseOptions, type DevframeStorageScope, type DevframeViewHost, type DevframeWsOptions, type EventEmitter, type EventUnsubscribe, type EventsMap, type McpRouteOptions, type RemoteAssets, type RemoteAssetsErrorMessage, type RemoteAssetsProvider, type RemoteAssetsProviderCustom, type RemoteAssetsStore, type RpcBroadcastOptions, type RpcFunctionAgentOptions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, type ScopedBroadcastOptions, type ScopedClientFunctions, type ScopedRpcFn, type ScopedServerFunctions, type ScopedSharedStates, type SettingsForNamespace, type StaticAssetsSource, defineDevframe, defineRpcFunction };

package/dist/{instance-registry-WvQkt42E.mjs → instance-registry-CHunhMi5.mjs}

@@ -1,8 +1,8 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { join } from "pathe";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 import process from "node:process";
+import { join } from "pathe";
+import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/node/instance-registry.ts
 var instance_registry_exports = /* @__PURE__ */ __exportAll({

package/dist/{instance-shell-CljiKq1c.d.mts → instance-shell-0iw-cQ5V.d.mts}

@@ -1,6 +1,6 @@
-import { K as DevframeRpcClientFunctions, R as DevframeNodeRpcSession, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, q as DevframeRpcServerFunctions, s as DevframeSseOptions, u as DevframeAuthHandler } from "./devframe-DJMg0WLe.mjs";
+import { E as DevframeRpcServerFunctions, T as DevframeRpcClientFunctions, _ as DevframeNodeRpcSession, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, s as DevframeSseOptions, u as DevframeAuthHandler } from "./devframe-BlLEZR-x.mjs";
 import { d as DevframeRpcConnection, n as WsOriginRegistry, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
-import "./index-CB-fSUyn.mjs";
+import "./index-BKFT9-jA.mjs";
 import { BirpcGroup } from "birpc";
 import { NodeAdapter } from "crossws/adapters/node";
 import { Buffer } from "node:buffer";

package/dist/{instance-shell-CMFyszWJ.mjs → instance-shell-DbDoozNM.mjs}

@@ -1,6 +1,6 @@
 import "./constants.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { t as getInternalContext } from "./context-xdynGSLP.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
+import { t as getInternalContext } from "./context-CXhjygJU.mjs";
 import { createInteractiveAuth } from "./recipes/interactive-auth.mjs";
 import { createServer } from "node:http";
 import process from "node:process";
@@ -197,7 +197,7 @@ function createInstanceShell(options) {
 		const origin = currentOrigin();
 		if (!cfg || registerPromise || !origin || !meta) return;
 		const resolvedMeta = meta;
-		registerPromise = import("./instance-registry-WvQkt42E.mjs").then((n) => n.t).then(({ registerDevframeInstance }) => {
+		registerPromise = import("./instance-registry-CHunhMi5.mjs").then((n) => n.t).then(({ registerDevframeInstance }) => {
 			let port = 0;
 			try {
 				const url = new URL(origin);
@@ -257,7 +257,7 @@ function createInstanceShell(options) {
 	let resolvedAuth = false;
 	let corePromise;
 	function ensureCore() {
-		corePromise ??= import("./rpc-core-DMTe-hLo.mjs").then((n) => n.n).then(({ createContextRpcServer }) => createContextRpcServer({
+		corePromise ??= import("./rpc-core-Dru9uoM0.mjs").then((n) => n.n).then(({ createContextRpcServer }) => createContextRpcServer({
 			context: ctx,
 			auth: resolvedAuth,
 			onPeerConnect: options.onPeerConnect,
@@ -298,7 +298,7 @@ function createInstanceShell(options) {
 			allowedOrigins: options.allowedOrigins
 		});
 		if (ws.port != null) return await start(ws.port);
-		const { getPort } = await import("./dist-eNI9qM_I.mjs").then((n) => n.t);
+		const { getPort } = await import("./dist-CZXfGEkd.mjs").then((n) => n.t);
 		let lastError;
 		for (let attempt = 0; attempt < 3; attempt++) {
 			const port = attempt === 0 && options.resolveSidecarPort ? await options.resolveSidecarPort(sidecarHost) : await getPort({

package/dist/internal/index.d.mts

@@ -1,9 +1,9 @@
-import { Ct as DevframeAgentHost$1, P as DevframeHost, St as AgentToolProviderHandle, Tt as EventEmitter, _t as AgentResourceContent, bt as AgentToolInput, g as DevframeNodeContext, gt as AgentResource, ht as AgentManifest, mt as AgentHandle, vt as AgentResourceInput, wt as DevframeAgentHostEvents, xt as AgentToolProvider, yt as AgentTool } from "../devframe-DJMg0WLe.mjs";
+import { At as DevframeAgentHost$1, Ct as AgentResource, Dt as AgentToolInput, Et as AgentTool, Mt as EventEmitter, Ot as AgentToolProvider, Q as DevframeHost, St as AgentManifest, Tt as AgentResourceInput, g as DevframeNodeContext, jt as DevframeAgentHostEvents, kt as AgentToolProviderHandle, wt as AgentResourceContent, xt as AgentHandle } from "../devframe-BlLEZR-x.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-Djq7CBXh.mjs";
 import { a as RemoteAssetsStore } from "../remote-assets-Bg4gCUZ_.mjs";
-import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-CljiKq1c.mjs";
-import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-BPmX9fqK.mjs";
-import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-Cc4lucI0.mjs";
+import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-0iw-cQ5V.mjs";
+import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-DqbKCAew.mjs";
+import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-CR8o34O9.mjs";
 //#region src/node/agent-args.d.ts
 /**
  * How {@link coerceAgentPositionalArgs} treats an args object that carries
@@ -280,6 +280,48 @@ declare const diagnostics: import("nostics").Diagnostics<{
     }) => string;
     readonly fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path.";
   };
+  readonly DF0066: {
+    readonly why: (p: {
+      package: string;
+    }) => string;
+    readonly fix: "Option sets only merge before `ctx.services.ready()` fires. Install the service (or declare it in `DevframeDefinition.services`) before the barrier so its options join the merge.";
+  };
+  readonly DF0067: {
+    readonly why: (p: {
+      package: string;
+      reason: string;
+    }) => string;
+    readonly fix: "Install the service package next to whoever declares it (a plugin declaring it in `services` should list it in its own dependencies), or drop `required: true` to degrade gracefully when it is absent.";
+  };
+  readonly DF0068: {
+    readonly why: (p: {
+      package: string;
+      required: string;
+      installed: string;
+    }) => string;
+    readonly fix: "Align the installed service package with the range its declarer requires, or drop `required: true` to downgrade the mismatch to a warning.";
+  };
+  readonly DF0069: {
+    readonly why: (p: {
+      package: string;
+      required: string;
+      installed: string;
+    }) => string;
+    readonly fix: "The advertised meta carries the real version, so clients can gate on it. Align the installed service package with the declared range to silence this warning.";
+  };
+  readonly DF0070: {
+    readonly why: (p: {
+      package: string;
+      reason: string;
+    }) => string;
+    readonly fix: "A service package's default export must be a factory returning a `DevframeServiceDefinition` — an object with `package`, `version`, `scope`, and a `setup` function.";
+  };
+  readonly DF0071: {
+    readonly why: (p: {
+      reason: string;
+    }) => string;
+    readonly fix: "Call `ctx.services.ready()` explicitly after every devframe's setup has run (the first-party adapters do) so installation errors surface at startup instead of at connect time.";
+  };
 }, readonly [(d: import("nostics").Diagnostic, { method }?: {
   method?: "log" | "warn" | "error";
 }) => void]>;

package/dist/internal/index.mjs

@@ -1,9 +1,9 @@
 import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-0K-o5MYW.mjs";
-import { t as diagnostics } from "../diagnostics-DOQPnQmX.mjs";
-import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-xLCSe65D.mjs";
-import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CbZ_yhbz.mjs";
-import { t as createH3DevframeHost } from "../host-h3-Crkzm42q.mjs";
-import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-WvQkt42E.mjs";
-import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-CMFyszWJ.mjs";
-import { t as createContextRpcServer } from "../rpc-core-DMTe-hLo.mjs";
+import { t as diagnostics } from "../diagnostics-Di8ytitn.mjs";
+import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-BDdcOXhG.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-BM3PdYli.mjs";
+import { t as createH3DevframeHost } from "../host-h3-fRbF9yor.mjs";
+import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-CHunhMi5.mjs";
+import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-DbDoozNM.mjs";
+import { t as createContextRpcServer } from "../rpc-core-Dru9uoM0.mjs";
 export { DevframeAgentHost, coerceAgentPositionalArgs, createContextRpcServer, createH3DevframeHost, createInstanceShell, createRpcWireCodec, diagnostics, listLiveDevframeInstances, normalizeBasePath, normalizeHttpServerUrl, peekRpcWireFrame, registerDevframeInstance, resolveBasePath, resolveInstanceRegister, samePath };

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { u as DevframeAuthHandler } from "../devframe-DJMg0WLe.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-CB-fSUyn.mjs";
+import { u as DevframeAuthHandler } from "../devframe-BlLEZR-x.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, o as revokeActiveConnectionsForToken, r as getTempAuthCode, s as revokeAuthToken, t as buildOtpAuthUrl } from "../index-BKFT9-jA.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/auth.mjs

@@ -1,3 +1,3 @@
-import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-DZbJ7Cl0.mjs";
-import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-Cc1IeSmQ.mjs";
+import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "../revoke-3Q6aDKWk.mjs";
+import { a as verifyAuthToken, i as refreshTempAuthCode, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-CK9LjrnT.mjs";
 export { buildOtpAuthUrl, exchangeTempAuthCode, getTempAuthCode, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,3 +1,3 @@
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-B3YUu_95.mjs";
-import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-BPmX9fqK.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-dqyXS6o3.mjs";
+import { n as normalizeBasePath, r as resolveBasePath } from "../_shared-DqbKCAew.mjs";
 export { type DevframeInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/hub-internals.mjs

@@ -1,3 +1,3 @@
-import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-CbZ_yhbz.mjs";
-import { n as internalContextMap, t as getInternalContext } from "../context-xdynGSLP.mjs";
+import { n as resolveBasePath, t as normalizeBasePath } from "../_shared-BM3PdYli.mjs";
+import { n as internalContextMap, t as getInternalContext } from "../context-CXhjygJU.mjs";
 export { getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { B as RpcFunctionsHost, P as DevframeHost, g as DevframeNodeContext, lt as SharedState } from "../devframe-DJMg0WLe.mjs";
+import { Q as DevframeHost, g as DevframeNodeContext, gt as SharedState, y as RpcFunctionsHost } from "../devframe-BlLEZR-x.mjs";
 import "../index-tdrk1bzV.mjs";
 import { v as RpcFunctionDefinitionAny } from "../types-Djq7CBXh.mjs";
 import { BirpcGroup } from "birpc";

package/dist/node/index.mjs

@@ -1,3 +1,3 @@
-import { t as createHostContext } from "../context-CEe4PBz1.mjs";
-import { t as createStorage } from "../storage-CYye7P7L.mjs";
+import { t as createHostContext } from "../context-Bdkakk8S.mjs";
+import { t as createStorage } from "../storage-D4a99Ung.mjs";
 export { createHostContext, createStorage };

package/dist/recipes/common-rpc-functions.d.mts

@@ -1,4 +1,4 @@
-import "../devframe-DJMg0WLe.mjs";
+import "../devframe-BlLEZR-x.mjs";
 import "../index-tdrk1bzV.mjs";
 import { E as Thenable, S as RpcFunctionSetupResult, c as RpcDump, g as RpcFunctionAgentOptions } from "../types-Djq7CBXh.mjs";
 import { SimpleSchema } from "../utils/simple-schema.mjs";

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { g as DevframeNodeContext, u as DevframeAuthHandler } from "../devframe-DJMg0WLe.mjs";
-import "../index-CB-fSUyn.mjs";
+import { g as DevframeNodeContext, u as DevframeAuthHandler } from "../devframe-BlLEZR-x.mjs";
+import "../index-BKFT9-jA.mjs";
 //#region src/recipes/interactive-auth.d.ts
 interface CreateInteractiveAuthOptions {
   /**

package/dist/recipes/interactive-auth.mjs

@@ -1,8 +1,8 @@
 import { s as colors } from "../nostics-CzECRXpE.mjs";
 import { n as defineRpcFunction } from "../define-BLWPsH6y.mjs";
 import { isAnonymousRpcMethod } from "../constants.mjs";
-import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-Cc1IeSmQ.mjs";
-import { t as getInternalContext } from "../context-xdynGSLP.mjs";
+import { a as verifyAuthToken, n as exchangeTempAuthCode, r as getTempAuthCode, t as buildOtpAuthUrl } from "../state-CK9LjrnT.mjs";
+import { t as getInternalContext } from "../context-CXhjygJU.mjs";
 import { t as s } from "../simple-schema-DQPZrAaZ.mjs";
 //#region src/recipes/interactive-auth.ts
 function defaultBanner(info) {

package/dist/{remote-assets-nTTxY2MU.mjs → remote-assets-DRfY2RjX.mjs}

@@ -1,13 +1,13 @@
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 import { createRequire } from "node:module";
 import { isatty } from "node:tty";
 import { formatWithOptions, inspect } from "node:util";
+import { dirname, extname, join, normalize, sep } from "pathe";
 import { createReadStream, existsSync } from "node:fs";
 import { Buffer } from "node:buffer";
 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import { Readable } from "node:stream";
 import { lookup } from "mrmime";
-import { dirname, extname, join, normalize, sep } from "pathe";
 //#region ../../node_modules/.pnpm/obug@2.1.4/node_modules/obug/dist/core.js
 /**
 * Coerce `value`.
@@ -315,9 +315,10 @@ const CACHE_CONTROL_HEADER = "no-store";
 function flattenTree(nodes, style) {
 	const out = [];
 	const walk = (list, prefix) => {
-		for (const node of list) if (style === "path") if (node.type === "file") out.push((node.path ?? "").replace(/^\//, ""));
-		else walk(node.files ?? [], "");
-		else if (node.type === "file") out.push(prefix + (node.name ?? ""));
+		for (const node of list) if (style === "path") {
+			if (node.type === "file") out.push((node.path ?? "").replace(/^\//, ""));
+			else walk(node.files ?? [], "");
+		} else if (node.type === "file") out.push(prefix + (node.name ?? ""));
 		else if (node.files) walk(node.files, `${prefix}${node.name}/`);
 	};
 	walk(nodes, "");

package/dist/{revoke-DZbJ7Cl0.mjs → revoke-3Q6aDKWk.mjs}

@@ -1,3 +1,4 @@
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
 //#region src/node/auth/revoke.ts
 /**
 * Flip `isTrusted` to false on any live WS clients connected with `token`
@@ -16,7 +17,7 @@ async function revokeActiveConnectionsForToken(context, token) {
 	}
 	if (affectedSessionIds.size === 0) return;
 	await rpcHost.broadcast({
-		method: "devframe:auth:revoked",
+		method: DEVFRAME_EVENTS.broadcast.authRevoked,
 		args: [],
 		filter: (client) => affectedSessionIds.has(client.$meta.id)
 	});

package/dist/{rolldown-runtime-JspESFgx.mjs → rolldown-runtime-B4iAMlE-.mjs}

@@ -26,7 +26,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));

package/dist/rpc/transports/ws-bun.d.mts

@@ -1,5 +1,5 @@
 import { n as WsOriginRegistry } from "../../ws-server-D1d3QM9f.mjs";
-import { t as ContextRpcServer } from "../../rpc-core-Cc4lucI0.mjs";
+import { t as ContextRpcServer } from "../../rpc-core-CR8o34O9.mjs";
 //#region src/rpc/transports/ws-bun.d.ts
 interface AttachBunWsTransportOptions {
   /** Same contract as `WsRpcTransportOptions.allowedOrigins`. */

package/dist/{rpc-core-Cc4lucI0.d.mts → rpc-core-CR8o34O9.d.mts}

@@ -1,6 +1,6 @@
-import { K as DevframeRpcClientFunctions, R as DevframeNodeRpcSession, g as DevframeNodeContext, q as DevframeRpcServerFunctions, u as DevframeAuthHandler } from "./devframe-DJMg0WLe.mjs";
+import { E as DevframeRpcServerFunctions, T as DevframeRpcClientFunctions, _ as DevframeNodeRpcSession, g as DevframeNodeContext, u as DevframeAuthHandler } from "./devframe-BlLEZR-x.mjs";
 import { d as DevframeRpcConnection, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
-import "./index-CB-fSUyn.mjs";
+import "./index-BKFT9-jA.mjs";
 import { BirpcGroup, EventOptions } from "birpc";
 //#region src/node/rpc-core.d.ts
 interface CreateContextRpcServerOptions {

package/dist/{rpc-core-DMTe-hLo.mjs → rpc-core-Dru9uoM0.mjs}

@@ -1,6 +1,6 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import { createRpcServer } from "./rpc/server.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/node/rpc-core.ts
 var rpc_core_exports = /* @__PURE__ */ __exportAll({ createContextRpcServer: () => createContextRpcServer });
@@ -58,14 +58,21 @@ function createContextRpcServer(options) {
 			return { isTrusted: true };
 		}
 	});
-	const onConnected = authHandler || options.onPeerConnect ? (connection, meta) => {
+	const onConnected = (connection, meta) => {
+		Promise.resolve().then(() => context.services.ready?.()).catch((error) => {
+			const reason = error instanceof Error ? error.message : String(error);
+			diagnostics.DF0071({
+				reason,
+				cause: error
+			}, { method: "error" });
+		});
 		const session = {
 			meta,
 			rpc: rpcGroup.clients.find((client) => client.$meta === meta)
 		};
 		authHandler?.onConnect(connection, session);
 		options.onPeerConnect?.(connection, session);
-	} : void 0;
+	};
 	const onDisconnected = (connection, meta) => {
 		options.onPeerDisconnect?.(connection, meta);
 		rpcHost._emitSessionDisconnected(meta);

package/dist/{state-Cc1IeSmQ.mjs → state-CK9LjrnT.mjs}

@@ -1191,7 +1191,7 @@ const TEMP_AUTH_CODE_LENGTH = 6;
 * 6-digit code only has ~20 bits of entropy, so a short lifetime plus the
 * attempt cap below are what keep it brute-force resistant.
 */
-const TEMP_AUTH_CODE_TTL = 5 * 6e4;
+const TEMP_AUTH_CODE_TTL = 3e5;
 /** Failed attempts allowed against a single code before it is rotated. */
 const TEMP_AUTH_MAX_ATTEMPTS = 5;
 let tempAuthCode = generateTempCode();

package/dist/{storage-CYye7P7L.mjs → storage-D4a99Ung.mjs}

@@ -1,8 +1,8 @@
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as diagnostics } from "./diagnostics-Di8ytitn.mjs";
 import { createSharedState } from "devframe/utils/shared-state";
-import fs from "node:fs";
-import { dirname } from "pathe";
 import process from "node:process";
+import { dirname } from "pathe";
+import fs from "node:fs";
 //#region ../../node_modules/.pnpm/perfect-debounce@2.1.0/node_modules/perfect-debounce/dist/index.mjs
 const DEBOUNCE_DEFAULTS = { trailing: true };
 /**