devframe 0.9.0 → 0.9.2

package/dist/{diagnostics-DOQPnQmX.mjs → diagnostics-DI1HGj2I.mjs}

@@ -137,6 +137,26 @@ const diagnostics = defineDiagnostics({
 		DF0065: {
 			why: (p) => `Invalid remote-assets ${p.field} "${p.value}".`,
 			fix: "A remote-assets `package` must be a valid npm package name and `version` an exact semver version (e.g. `1.2.3`) — they are interpolated into CDN URLs and the cache path."
+		},
+		DF0066: {
+			why: (p) => `Service "${p.package}" is already installed — keeping the first installation and ignoring this one's options.`,
+			fix: "Option sets only merge before `ctx.services.ready()` fires. Install the service (or declare it in `DevframeDefinition.services`) before the barrier so its options join the merge."
+		},
+		DF0067: {
+			why: (p) => `Failed to import the required service package "${p.package}": ${p.reason}`,
+			fix: "Install the service package next to whoever declares it (a plugin declaring it in `services` should list it in its own dependencies), or drop `required: true` to degrade gracefully when it is absent."
+		},
+		DF0068: {
+			why: (p) => `The installed service "${p.package}@${p.installed}" does not satisfy the required range "${p.required}".`,
+			fix: "Align the installed service package with the range its declarer requires, or drop `required: true` to downgrade the mismatch to a warning."
+		},
+		DF0069: {
+			why: (p) => `The installed service "${p.package}@${p.installed}" does not satisfy the declared range "${p.required}" — installing it anyway.`,
+			fix: "The advertised meta carries the real version, so clients can gate on it. Align the installed service package with the declared range to silence this warning."
+		},
+		DF0070: {
+			why: (p) => `Invalid service "${p.package}": ${p.reason}`,
+			fix: "A service package's default export must be a factory returning a `DevframeServiceDefinition` — an object with `package`, `version`, `scope`, and a `setup` function."
 		}
 	}
 });

package/dist/{dist-eNI9qM_I.mjs → dist-CZXfGEkd.mjs}

@@ -1,4 +1,4 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import "node:fs/promises";
 import { createServer } from "node:net";
 import { networkInterfaces } from "node:os";

package/dist/events-DKfSmoTj.mjs

@@ -0,0 +1,65 @@
+//#region src/events.ts
+/**
+* Centralized registry of the core devframe event names — the node-side host
+* bus events, the client RPC connection events, and the server→client
+* broadcast notifications — so these names live in one place instead of
+* scattered string literals.
+*
+* **Keep this in sync with [`docs/guide/events.md`](../../../docs/guide/events.md)**
+* (the "Core devframe events" section): every name here appears in that page's
+* tables, and every name there resolves to an entry here. Add, rename, or
+* remove a name in both places in the same change, and reference
+* `DEVFRAME_EVENTS.*` from call sites instead of re-typing a literal.
+*
+* This map covers **notifications** (events, broadcasts). The request/response
+* RPC endpoints of the shared-state, streaming, and auth-handshake protocols
+* (`devframe:rpc:server-state:*`, `devframe:streaming:subscribe`,
+* `anonymous:devframe:auth`, …) are defined at their handlers and typed in
+* `types/rpc-augments.ts`; they aren't events and stay out of this map.
+*
+* The `EventEmitter` maps (`RpcClientEvents`, `DevframeAgentHostEvents`) and the
+* `DevframeRpcClientFunctions` augmentation declare these names as type-level
+* keys (a literal is unavoidable in a type position); those declarations mirror
+* this map and move with it.
+*/
+const DEVFRAME_EVENTS = {
+	/**
+	* Node-side host `EventEmitter` events. The agent host (`ctx.agent.events`)
+	* emits these as its tool/resource surface changes; protocol adapters (e.g.
+	* MCP) subscribe to re-publish their manifest.
+	*/
+	bus: {
+		agentManifestChanged: "agent:manifest:changed",
+		agentToolRegistered: "agent:tool:registered",
+		agentToolUnregistered: "agent:tool:unregistered",
+		agentResourceRegistered: "agent:resource:registered",
+		agentResourceUnregistered: "agent:resource:unregistered"
+	},
+	/**
+	* Client-side RPC connection `EventEmitter` events (`rpc.events`) a UI
+	* subscribes to for connection lifecycle and error surfacing.
+	*/
+	client: {
+		isTrustedUpdated: "rpc:is-trusted:updated",
+		error: "rpc:error",
+		connectionStatus: "connection:status",
+		connectionError: "connection:error"
+	},
+	/**
+	* Broadcast notifications the server pushes to clients (server → client),
+	* `devframe:` prefix. The paired request methods (subscribe/get/set/…) are
+	* RPC endpoints, not events, and are omitted deliberately.
+	*/
+	broadcast: {
+		authRevoked: "devframe:auth:revoked",
+		clientStateUpdated: "devframe:rpc:client-state:updated",
+		clientStatePatch: "devframe:rpc:client-state:patch",
+		streamingChunk: "devframe:streaming:chunk",
+		streamingEnd: "devframe:streaming:end",
+		streamingUploadCancel: "devframe:streaming:upload-cancel"
+	},
+	/** `postMessage` channels the runtime posts across window boundaries. */
+	postMessage: { remoteAssetsError: "devframe:remote-assets-error" }
+};
+//#endregion
+export { DEVFRAME_EVENTS as t };

package/dist/hash-DdPnc4k3.mjs

@@ -0,0 +1,360 @@
+//#region ../../node_modules/.pnpm/ohash@2.0.12/node_modules/ohash/dist/_chunks/is-equal.mjs
+function serialize(input) {
+	if (typeof input === "string") return `'${input}'`;
+	return new Serializer().serialize(input);
+}
+const asciiOrder = " _-,;:!?.'\"()[]{}@*/\\&#%`^+<=>|~$0123456789abcdefghijklmnopqrstuvwxyz";
+const asciiWeights = /*@__PURE__*/ (function() {
+	const weights = /* @__PURE__ */ new Uint8Array(128);
+	for (let i = 0; i < 69; i++) weights[asciiOrder.charCodeAt(i)] = i + 1;
+	for (let code = 65; code <= 90; code++) weights[code] = weights[code + 32];
+	return weights;
+})();
+function compareStrings(a, b) {
+	if (a === b) return 0;
+	const length = Math.min(a.length, b.length);
+	let tieBreaker = 0;
+	for (let i = 0; i < length; i++) {
+		const codeA = a.charCodeAt(i);
+		const codeB = b.charCodeAt(i);
+		if (codeA === codeB) continue;
+		const weightA = codeA < 128 && asciiWeights[codeA] ? asciiWeights[codeA] : codeA + 128;
+		const weightB = codeB < 128 && asciiWeights[codeB] ? asciiWeights[codeB] : codeB + 128;
+		if (weightA !== weightB) return weightA < weightB ? -1 : 1;
+		if (tieBreaker === 0) tieBreaker = codeA > codeB ? -1 : 1;
+	}
+	if (a.length !== b.length) return a.length < b.length ? -1 : 1;
+	return tieBreaker;
+}
+const Serializer = /*@__PURE__*/ (function() {
+	class Serializer {
+		#context = /* @__PURE__ */ new Map();
+		compare(a, b) {
+			const typeA = typeof a;
+			const typeB = typeof b;
+			if (typeA === "string" && typeB === "string") return compareStrings(a, b);
+			if (typeA === "number" && typeB === "number") return a - b;
+			return compareStrings(this.serialize(a, true), this.serialize(b, true));
+		}
+		serialize(value, noQuotes) {
+			if (value === null) return "null";
+			switch (typeof value) {
+				case "string": return noQuotes ? value : `'${value}'`;
+				case "bigint": return `${value}n`;
+				case "object": return this.$object(value);
+				case "function": return this.$function(value);
+			}
+			return String(value);
+		}
+		serializeObject(object) {
+			const objString = Object.prototype.toString.call(object);
+			if (objString !== "[object Object]") return this.serializeBuiltInType(objString.length < 10 ? `unknown:${objString}` : objString.slice(8, -1), object);
+			const constructor = object.constructor;
+			const objName = constructor === Object || constructor === void 0 ? "" : constructor.name;
+			if (objName !== "" && globalThis[objName] === constructor) return this.serializeBuiltInType(objName, object);
+			if ("toJSON" in object && typeof object.toJSON === "function") {
+				const json = object.toJSON();
+				return objName + (json !== null && typeof json === "object" ? this.$object(json) : `(${this.serialize(json)})`);
+			}
+			const keys = Object.keys(object).sort(compareStrings);
+			let content = `${objName}{`;
+			for (let i = 0; i < keys.length; i++) {
+				const key = keys[i];
+				content += `${key}:${this.serialize(object[key])}`;
+				if (i < keys.length - 1) content += ",";
+			}
+			return content + "}";
+		}
+		serializeBuiltInType(type, object) {
+			const handler = this["$" + type];
+			if (handler) return handler.call(this, object);
+			if (typeof object.entries === "function") return this.serializeObjectEntries(type, object.entries());
+			throw new Error(`Cannot serialize ${type}`);
+		}
+		serializeObjectEntries(type, entries) {
+			const sortedEntries = Array.from(entries).sort((a, b) => this.compare(a[0], b[0]));
+			let content = `${type}{`;
+			for (let i = 0; i < sortedEntries.length; i++) {
+				const [key, value] = sortedEntries[i];
+				content += `${this.serialize(key, true)}:${this.serialize(value)}`;
+				if (i < sortedEntries.length - 1) content += ",";
+			}
+			return content + "}";
+		}
+		$object(object) {
+			let content = this.#context.get(object);
+			if (content === void 0) {
+				this.#context.set(object, `#${this.#context.size}`);
+				content = this.serializeObject(object);
+				this.#context.set(object, content);
+			}
+			return content;
+		}
+		$function(fn) {
+			const fnStr = Function.prototype.toString.call(fn);
+			if (fnStr.slice(-15) === "[native code] }") return `${fn.name || ""}()[native]`;
+			return `${fn.name}(${fn.length})${fnStr.replace(/\s*\n\s*/g, "")}`;
+		}
+		$Array(arr) {
+			let content = "[";
+			for (let i = 0; i < arr.length; i++) {
+				content += this.serialize(arr[i]);
+				if (i < arr.length - 1) content += ",";
+			}
+			return content + "]";
+		}
+		$Date(date) {
+			try {
+				return `Date(${date.toISOString()})`;
+			} catch {
+				return `Date(null)`;
+			}
+		}
+		$ArrayBuffer(arr) {
+			return `ArrayBuffer[${new Uint8Array(arr).join(",")}]`;
+		}
+		$Set(set) {
+			return `Set${this.$Array(Array.from(set).sort((a, b) => this.compare(a, b)))}`;
+		}
+		$Map(map) {
+			return this.serializeObjectEntries("Map", map.entries());
+		}
+	}
+	for (const type of [
+		"Error",
+		"RegExp",
+		"URL"
+	]) Serializer.prototype["$" + type] = function(val) {
+		return `${type}(${val})`;
+	};
+	for (const type of [
+		"Int8Array",
+		"Uint8Array",
+		"Uint8ClampedArray",
+		"Int16Array",
+		"Uint16Array",
+		"Int32Array",
+		"Uint32Array",
+		"Float32Array",
+		"Float64Array"
+	]) Serializer.prototype["$" + type] = function(arr) {
+		return `${type}[${arr.join(",")}]`;
+	};
+	for (const type of ["BigInt64Array", "BigUint64Array"]) Serializer.prototype["$" + type] = function(arr) {
+		return `${type}[${arr.join("n,")}${arr.length > 0 ? "n" : ""}]`;
+	};
+	return Serializer;
+})();
+//#endregion
+//#region ../../node_modules/.pnpm/ohash@2.0.12/node_modules/ohash/dist/crypto/js/index.mjs
+const H = [
+	1779033703,
+	-1150833019,
+	1013904242,
+	-1521486534,
+	1359893119,
+	-1694144372,
+	528734635,
+	1541459225
+];
+const K = [
+	1116352408,
+	1899447441,
+	-1245643825,
+	-373957723,
+	961987163,
+	1508970993,
+	-1841331548,
+	-1424204075,
+	-670586216,
+	310598401,
+	607225278,
+	1426881987,
+	1925078388,
+	-2132889090,
+	-1680079193,
+	-1046744716,
+	-459576895,
+	-272742522,
+	264347078,
+	604807628,
+	770255983,
+	1249150122,
+	1555081692,
+	1996064986,
+	-1740746414,
+	-1473132947,
+	-1341970488,
+	-1084653625,
+	-958395405,
+	-710438585,
+	113926993,
+	338241895,
+	666307205,
+	773529912,
+	1294757372,
+	1396182291,
+	1695183700,
+	1986661051,
+	-2117940946,
+	-1838011259,
+	-1564481375,
+	-1474664885,
+	-1035236496,
+	-949202525,
+	-778901479,
+	-694614492,
+	-200395387,
+	275423344,
+	430227734,
+	506948616,
+	659060556,
+	883997877,
+	958139571,
+	1322822218,
+	1537002063,
+	1747873779,
+	1955562222,
+	2024104815,
+	-2067236844,
+	-1933114872,
+	-1866530822,
+	-1538233109,
+	-1090935817,
+	-965641998
+];
+const base64KeyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+const W = [];
+var SHA256 = class {
+	_data = new WordArray();
+	_hash = new WordArray([...H]);
+	_nDataBytes = 0;
+	_minBufferSize = 0;
+	finalize(messageUpdate) {
+		if (messageUpdate) this._append(messageUpdate);
+		const nBitsTotal = this._nDataBytes * 8;
+		const nBitsLeft = this._data.sigBytes * 8;
+		this._data.words[nBitsLeft >>> 5] |= 128 << 24 - nBitsLeft % 32;
+		this._data.words[(nBitsLeft + 64 >>> 9 << 4) + 14] = Math.floor(nBitsTotal / 4294967296);
+		this._data.words[(nBitsLeft + 64 >>> 9 << 4) + 15] = nBitsTotal;
+		this._data.sigBytes = this._data.words.length * 4;
+		this._process();
+		return this._hash;
+	}
+	_doProcessBlock(M, offset) {
+		const H = this._hash.words;
+		let a = H[0];
+		let b = H[1];
+		let c = H[2];
+		let d = H[3];
+		let e = H[4];
+		let f = H[5];
+		let g = H[6];
+		let h = H[7];
+		for (let i = 0; i < 64; i++) {
+			if (i < 16) W[i] = M[offset + i] | 0;
+			else {
+				const gamma0x = W[i - 15];
+				const gamma0 = (gamma0x << 25 | gamma0x >>> 7) ^ (gamma0x << 14 | gamma0x >>> 18) ^ gamma0x >>> 3;
+				const gamma1x = W[i - 2];
+				const gamma1 = (gamma1x << 15 | gamma1x >>> 17) ^ (gamma1x << 13 | gamma1x >>> 19) ^ gamma1x >>> 10;
+				W[i] = gamma0 + W[i - 7] + gamma1 + W[i - 16];
+			}
+			const ch = e & f ^ ~e & g;
+			const maj = a & b ^ a & c ^ b & c;
+			const sigma0 = (a << 30 | a >>> 2) ^ (a << 19 | a >>> 13) ^ (a << 10 | a >>> 22);
+			const sigma1 = (e << 26 | e >>> 6) ^ (e << 21 | e >>> 11) ^ (e << 7 | e >>> 25);
+			const t1 = h + sigma1 + ch + K[i] + W[i];
+			const t2 = sigma0 + maj;
+			h = g;
+			g = f;
+			f = e;
+			e = d + t1 | 0;
+			d = c;
+			c = b;
+			b = a;
+			a = t1 + t2 | 0;
+		}
+		H[0] = H[0] + a | 0;
+		H[1] = H[1] + b | 0;
+		H[2] = H[2] + c | 0;
+		H[3] = H[3] + d | 0;
+		H[4] = H[4] + e | 0;
+		H[5] = H[5] + f | 0;
+		H[6] = H[6] + g | 0;
+		H[7] = H[7] + h | 0;
+	}
+	_append(data) {
+		if (typeof data === "string") data = WordArray.fromUtf8(data);
+		this._data.concat(data);
+		this._nDataBytes += data.sigBytes;
+	}
+	_process(doFlush) {
+		let processedWords;
+		let nBlocksReady = this._data.sigBytes / 64;
+		if (doFlush) nBlocksReady = Math.ceil(nBlocksReady);
+		else nBlocksReady = Math.max((nBlocksReady | 0) - this._minBufferSize, 0);
+		const nWordsReady = nBlocksReady * 16;
+		const nBytesReady = Math.min(nWordsReady * 4, this._data.sigBytes);
+		if (nWordsReady) {
+			for (let offset = 0; offset < nWordsReady; offset += 16) this._doProcessBlock(this._data.words, offset);
+			processedWords = this._data.words.splice(0, nWordsReady);
+			this._data.sigBytes -= nBytesReady;
+		}
+		return new WordArray(processedWords, nBytesReady);
+	}
+};
+var WordArray = class WordArray {
+	words;
+	sigBytes;
+	constructor(words, sigBytes) {
+		words = this.words = words || [];
+		this.sigBytes = sigBytes === void 0 ? words.length * 4 : sigBytes;
+	}
+	static fromUtf8(input) {
+		const str = unescape(encodeURIComponent(input));
+		const strlen = str.length;
+		const words = [];
+		for (let i = 0; i < strlen; i++) words[i >>> 2] |= (str.charCodeAt(i) & 255) << 24 - i % 4 * 8;
+		return new WordArray(words, strlen);
+	}
+	toBase64() {
+		const base64Chars = [];
+		for (let i = 0; i < this.sigBytes; i += 3) {
+			const byte1 = this.words[i >>> 2] >>> 24 - i % 4 * 8 & 255;
+			const byte2 = this.words[i + 1 >>> 2] >>> 24 - (i + 1) % 4 * 8 & 255;
+			const byte3 = this.words[i + 2 >>> 2] >>> 24 - (i + 2) % 4 * 8 & 255;
+			const triplet = byte1 << 16 | byte2 << 8 | byte3;
+			for (let j = 0; j < 4 && i * 8 + j * 6 < this.sigBytes * 8; j++) base64Chars.push(base64KeyStr.charAt(triplet >>> 6 * (3 - j) & 63));
+		}
+		return base64Chars.join("");
+	}
+	concat(wordArray) {
+		this.words[this.sigBytes >>> 2] &= 4294967295 << 32 - this.sigBytes % 4 * 8;
+		this.words.length = Math.ceil(this.sigBytes / 4);
+		if (this.sigBytes % 4) for (let i = 0; i < wordArray.sigBytes; i++) {
+			const thatByte = wordArray.words[i >>> 2] >>> 24 - i % 4 * 8 & 255;
+			this.words[this.sigBytes + i >>> 2] |= thatByte << 24 - (this.sigBytes + i) % 4 * 8;
+		}
+		else for (let j = 0; j < wordArray.sigBytes; j += 4) this.words[this.sigBytes + j >>> 2] = wordArray.words[j >>> 2];
+		this.sigBytes += wordArray.sigBytes;
+	}
+};
+function digest(message) {
+	return new SHA256().finalize(message).toBase64();
+}
+//#endregion
+//#region ../../node_modules/.pnpm/ohash@2.0.12/node_modules/ohash/dist/index.mjs
+function hash$1(input) {
+	return digest(serialize(input));
+}
+//#endregion
+//#region src/utils/hash.ts
+/**
+* Stable, deterministic hash of any structured-cloneable value.
+*/
+function hash(value) {
+	return hash$1(value);
+}
+//#endregion
+export { hash as t };

package/dist/{host-agent-xLCSe65D.mjs → host-agent-DVDLqjvj.mjs}

@@ -1,4 +1,5 @@
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
+import { t as diagnostics } from "./diagnostics-DI1HGj2I.mjs";
 //#region src/utils/events.ts
 /**
 * Create event emitter.
@@ -90,7 +91,7 @@ var DevframeAgentHost = class {
 	constructor(context) {
 		this.context = context;
 		this._rpcUnsubscribe = context.rpc.onChanged(() => {
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		});
 	}
 	registerTool(input) {
@@ -100,28 +101,28 @@ var DevframeAgentHost = class {
 			tool,
 			handler: input.handler
 		});
-		this.events.emit("agent:tool:registered", tool);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentToolRegistered, tool);
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		return { unregister: () => this.unregisterTool(tool.id) };
 	}
 	unregisterTool(id) {
 		const existed = this.tools.delete(id);
 		if (existed) {
-			this.events.emit("agent:tool:unregistered", id);
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentToolUnregistered, id);
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		}
 		return existed;
 	}
 	registerToolProvider(provider) {
 		this.providers.add(provider);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		const notifyChanged = () => {
-			if (this.providers.has(provider)) this.events.emit("agent:manifest:changed");
+			if (this.providers.has(provider)) this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		};
 		return {
 			notifyChanged,
 			unregister: () => {
-				if (this.providers.delete(provider)) this.events.emit("agent:manifest:changed");
+				if (this.providers.delete(provider)) this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 			}
 		};
 	}
@@ -138,15 +139,15 @@ var DevframeAgentHost = class {
 			resource,
 			read: input.read
 		});
-		this.events.emit("agent:resource:registered", resource);
-		this.events.emit("agent:manifest:changed");
+		this.events.emit(DEVFRAME_EVENTS.bus.agentResourceRegistered, resource);
+		this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		return { unregister: () => this.unregisterResource(resource.id) };
 	}
 	unregisterResource(id) {
 		const existed = this.resources.delete(id);
 		if (existed) {
-			this.events.emit("agent:resource:unregistered", id);
-			this.events.emit("agent:manifest:changed");
+			this.events.emit(DEVFRAME_EVENTS.bus.agentResourceUnregistered, id);
+			this.events.emit(DEVFRAME_EVENTS.bus.agentManifestChanged);
 		}
 		return existed;
 	}

package/dist/{http-DYpK0cUi.mjs → http-POepPnaQ.mjs}

@@ -1,12 +1,13 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
 import { t as Diagnostic } from "./nostics-CzECRXpE.mjs";
+import { t as DEVFRAME_EVENTS } from "./events-DKfSmoTj.mjs";
 import { i as isAllowedOrigin } from "./ws-server-BdSLrhxE.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { t as createHostContext } from "./context-CEe4PBz1.mjs";
+import { t as diagnostics } from "./diagnostics-DI1HGj2I.mjs";
+import { t as createHostContext } from "./context-riPPHGiu.mjs";
 import { t as toAgentToolName } from "./agent-tool-name-EgfoFO8C.mjs";
 import { randomUUID } from "node:crypto";
-import { join } from "pathe";
 import process from "node:process";
+import { join } from "pathe";
 import { homedir } from "node:os";
 import { defineHandler } from "h3";
 import { Server, WebStandardStreamableHTTPServerTransport, isInitializeRequest } from "@modelcontextprotocol/server";
@@ -172,7 +173,7 @@ function buildMcpServerFromContext(ctx, options) {
 	const notify = (method) => {
 		server.notification({ method }).catch(() => {});
 	};
-	const offManifest = ctx.agent.events.on("agent:manifest:changed", () => {
+	const offManifest = ctx.agent.events.on(DEVFRAME_EVENTS.bus.agentManifestChanged, () => {
 		notify("notifications/tools/list_changed");
 		notify("notifications/resources/list_changed");
 	});
@@ -208,8 +209,11 @@ async function createMcpServer(definition, options = {}) {
 				if (scope === "project") return join(process.cwd(), `node_modules/.${definition.id}/devframe`);
 				return join(homedir(), `.${definition.id}/devframe`);
 			}
-		}
+		},
+		importMetaUrl: definition.importMetaUrl
 	});
+	for (const input of definition.services ?? []) ctx.services.install(input, { resolveFrom: definition.importMetaUrl });
+	await ctx.services.ready();
 	await definition.setup(ctx);
 	const { server, dispose } = buildMcpServerFromContext(ctx, {
 		serverName: options.serverName ?? `${definition.id} (devframe)`,

package/dist/{index-CB-fSUyn.d.mts → index-Dipgo9ji.d.mts}

@@ -1,5 +1,5 @@
-import { R as DevframeNodeRpcSession, g as DevframeNodeContext, lt as SharedState } from "./devframe-DJMg0WLe.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-B3YUu_95.mjs";
+import { _ as DevframeNodeRpcSession, g as DevframeNodeContext, gt as SharedState } from "./devframe-mbfgpQQC.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-al99DDJ8.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { A as ScopedServerFunctions, B as RpcFunctionsHost, C as DevframeScopedStreamingHost, Ct as DevframeAgentHost, D as ScopedBroadcastOptions, Dt as EventsMap, E as DevframeSettingsStore, Et as EventUnsubscribe, F as DevframeStorageScope, G as RpcStreamingHost, H as RpcSharedStateHost, I as DevframeDiagnosticsHost, J as DevframeRpcSharedStates, K as DevframeRpcClientFunctions, L as DevframeDiagnosticsLogger, M as SettingsForNamespace, N as DevframeViewHost, O as ScopedClientFunctions, P as DevframeHost, R as DevframeNodeRpcSession, S as DevframeScopedNodeRpc, St as AgentToolProviderHandle, T as DevframeSettingsRegistry, Tt as EventEmitter, U as RpcStreamingChannel, V as RpcSharedStateGetOptions, W as RpcStreamingChannelOptions, _ as DevframeServiceId, _t as AgentResourceContent, a as DevframeDuplicationStrategy, b as DevframeServicesRegistry, bt as AgentToolInput, c as DevframeWsOptions, d as ConnectionMeta, f as ConnectionMetaSse, g as DevframeNodeContext, gt as AgentResource, h as DevframeConnectionConfigsRegistry, ht as AgentManifest, i as DevframeDockDefaults, j as ScopedSharedStates, k as ScopedRpcFn, l as McpRouteOptions, m as DevframeCapabilities, mt as AgentHandle, n as DevframeDefinition, o as DevframeSetupInfo, p as ConnectionMetaWebsocket, q as DevframeRpcServerFunctions, r as DevframeDeploymentKind, s as DevframeSseOptions, t as DevframeCliOptions, v as DevframeServiceOf, vt as AgentResourceInput, w as DevframeSettings, wt as DevframeAgentHostEvents, x as DevframeScopedNodeContext, xt as AgentToolProvider, y as DevframeServicesHost, yt as AgentTool, z as RpcBroadcastOptions } from "./devframe-DJMg0WLe.mjs";
+import { $ as DevframeStorageScope, A as DevframeServiceId, At as DevframeAgentHost, B as DevframeScopedNodeRpc, C as RpcStreamingChannelOptions, Ct as AgentResource, D as DevframeRpcSharedStates, Dt as AgentToolInput, E as DevframeRpcServerFunctions, Et as AgentTool, F as DevframeServicesHost, G as ScopedBroadcastOptions, H as DevframeSettings, I as DevframeServicesRegistry, J as ScopedServerFunctions, K as ScopedClientFunctions, L as DevframeServicesScopeRegistry, M as DevframeServiceMeta, Mt as EventEmitter, N as DevframeServiceOf, Nt as EventUnsubscribe, O as DevframeServiceDefinition, Ot as AgentToolProvider, P as DevframeServiceScopeOf, Pt as EventsMap, Q as DevframeHost, R as DevframeServicesState, S as RpcStreamingChannel, St as AgentManifest, T as DevframeRpcClientFunctions, Tt as AgentResourceInput, U as DevframeSettingsRegistry, V as DevframeScopedStreamingHost, W as DevframeSettingsStore, X as SettingsForNamespace, Y as ScopedSharedStates, Z as DevframeViewHost, _ as DevframeNodeRpcSession, a as DevframeDuplicationStrategy, b as RpcSharedStateGetOptions, c as DevframeWsOptions, d as ConnectionMeta, et as DevframeDiagnosticsHost, f as ConnectionMetaSse, g as DevframeNodeContext, h as DevframeConnectionConfigsRegistry, i as DevframeDockDefaults, j as DevframeServiceInput, jt as DevframeAgentHostEvents, k as DevframeServiceDescriptor, kt as AgentToolProviderHandle, l as McpRouteOptions, m as DevframeCapabilities, n as DevframeDefinition, o as DevframeSetupInfo, p as ConnectionMetaWebsocket, q as ScopedRpcFn, r as DevframeDeploymentKind, s as DevframeSseOptions, t as DevframeCliOptions, tt as DevframeDiagnosticsLogger, v as RpcBroadcastOptions, w as RpcStreamingHost, wt as AgentResourceContent, x as RpcSharedStateHost, xt as AgentHandle, y as RpcFunctionsHost, z as DevframeScopedNodeContext } from "./devframe-mbfgpQQC.mjs";
 import "./index-tdrk1bzV.mjs";
 import { C as RpcFunctionType, T as RpcReturnSchema, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-Djq7CBXh.mjs";
 import { d as DevframeRpcConnection, f as DevframeRpcConnectionRequest, p as DevframeRpcTransportKind, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
@@ -12,4 +12,4 @@ declare const defineRpcFunction: <NAME extends string, TYPE extends RpcFunctionT
  */
 declare function defineDevframe(d: DevframeDefinition): DevframeDefinition;
 //#endregion
-export { type AgentHandle, type AgentManifest, type AgentResource, type AgentResourceContent, type AgentResourceInput, type AgentTool, type AgentToolInput, type AgentToolProvider, type AgentToolProviderHandle, type ConnectionMeta, type ConnectionMetaSse, type ConnectionMetaWebsocket, type DevframeAgentHost, type DevframeAgentHostEvents, type DevframeCapabilities, type DevframeCliOptions, type DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, type DevframeDefinition, type DevframeDeploymentKind, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockDefaults, type DevframeDuplicationStrategy, type DevframeHost, type DevframeNodeContext, type DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, type DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeRpcTransportKind, type DevframeScopedNodeContext, type DevframeScopedNodeRpc, type DevframeScopedStreamingHost, type DevframeServiceId, type DevframeServiceOf, type DevframeServicesHost, type DevframeServicesRegistry, type DevframeSettings, type DevframeSettingsRegistry, type DevframeSettingsStore, type DevframeSetupInfo, type DevframeSseOptions, type DevframeStorageScope, type DevframeViewHost, type DevframeWsOptions, type EventEmitter, type EventUnsubscribe, type EventsMap, type McpRouteOptions, type RemoteAssets, type RemoteAssetsErrorMessage, type RemoteAssetsProvider, type RemoteAssetsProviderCustom, type RemoteAssetsStore, type RpcBroadcastOptions, type RpcFunctionAgentOptions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, type ScopedBroadcastOptions, type ScopedClientFunctions, type ScopedRpcFn, type ScopedServerFunctions, type ScopedSharedStates, type SettingsForNamespace, type StaticAssetsSource, defineDevframe, defineRpcFunction };
+export { type AgentHandle, type AgentManifest, type AgentResource, type AgentResourceContent, type AgentResourceInput, type AgentTool, type AgentToolInput, type AgentToolProvider, type AgentToolProviderHandle, type ConnectionMeta, type ConnectionMetaSse, type ConnectionMetaWebsocket, type DevframeAgentHost, type DevframeAgentHostEvents, type DevframeCapabilities, type DevframeCliOptions, type DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, type DevframeDefinition, type DevframeDeploymentKind, type DevframeDiagnosticsHost, type DevframeDiagnosticsLogger, type DevframeDockDefaults, type DevframeDuplicationStrategy, type DevframeHost, type DevframeNodeContext, type DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, type DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcServerFunctions, type DevframeRpcSharedStates, type DevframeRpcTransportKind, type DevframeScopedNodeContext, type DevframeScopedNodeRpc, type DevframeScopedStreamingHost, type DevframeServiceDefinition, type DevframeServiceDescriptor, type DevframeServiceId, type DevframeServiceInput, type DevframeServiceMeta, type DevframeServiceOf, type DevframeServiceScopeOf, type DevframeServicesHost, type DevframeServicesRegistry, type DevframeServicesScopeRegistry, type DevframeServicesState, type DevframeSettings, type DevframeSettingsRegistry, type DevframeSettingsStore, type DevframeSetupInfo, type DevframeSseOptions, type DevframeStorageScope, type DevframeViewHost, type DevframeWsOptions, type EventEmitter, type EventUnsubscribe, type EventsMap, type McpRouteOptions, type RemoteAssets, type RemoteAssetsErrorMessage, type RemoteAssetsProvider, type RemoteAssetsProviderCustom, type RemoteAssetsStore, type RpcBroadcastOptions, type RpcFunctionAgentOptions, type RpcFunctionsHost, type RpcSharedStateGetOptions, type RpcSharedStateHost, type RpcStreamingChannel, type RpcStreamingChannelOptions, type RpcStreamingHost, type ScopedBroadcastOptions, type ScopedClientFunctions, type ScopedRpcFn, type ScopedServerFunctions, type ScopedSharedStates, type SettingsForNamespace, type StaticAssetsSource, defineDevframe, defineRpcFunction };

package/dist/{instance-registry-WvQkt42E.mjs → instance-registry-Dy28drtm.mjs}

@@ -1,8 +1,8 @@
-import { n as __exportAll } from "./rolldown-runtime-JspESFgx.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { join } from "pathe";
+import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
+import { t as diagnostics } from "./diagnostics-DI1HGj2I.mjs";
 import process from "node:process";
+import { join } from "pathe";
+import { mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 //#region src/node/instance-registry.ts
 var instance_registry_exports = /* @__PURE__ */ __exportAll({

package/dist/{instance-shell-CMFyszWJ.mjs → instance-shell-GqTY93gC.mjs}

@@ -1,6 +1,6 @@
 import "./constants.mjs";
-import { t as diagnostics } from "./diagnostics-DOQPnQmX.mjs";
-import { t as getInternalContext } from "./context-xdynGSLP.mjs";
+import { t as diagnostics } from "./diagnostics-DI1HGj2I.mjs";
+import { t as getInternalContext } from "./context-af2w_F0_.mjs";
 import { createInteractiveAuth } from "./recipes/interactive-auth.mjs";
 import { createServer } from "node:http";
 import process from "node:process";
@@ -197,7 +197,7 @@ function createInstanceShell(options) {
 		const origin = currentOrigin();
 		if (!cfg || registerPromise || !origin || !meta) return;
 		const resolvedMeta = meta;
-		registerPromise = import("./instance-registry-WvQkt42E.mjs").then((n) => n.t).then(({ registerDevframeInstance }) => {
+		registerPromise = import("./instance-registry-Dy28drtm.mjs").then((n) => n.t).then(({ registerDevframeInstance }) => {
 			let port = 0;
 			try {
 				const url = new URL(origin);
@@ -257,7 +257,7 @@ function createInstanceShell(options) {
 	let resolvedAuth = false;
 	let corePromise;
 	function ensureCore() {
-		corePromise ??= import("./rpc-core-DMTe-hLo.mjs").then((n) => n.n).then(({ createContextRpcServer }) => createContextRpcServer({
+		corePromise ??= import("./rpc-core-DRYnbxdD.mjs").then((n) => n.n).then(({ createContextRpcServer }) => createContextRpcServer({
 			context: ctx,
 			auth: resolvedAuth,
 			onPeerConnect: options.onPeerConnect,
@@ -298,7 +298,7 @@ function createInstanceShell(options) {
 			allowedOrigins: options.allowedOrigins
 		});
 		if (ws.port != null) return await start(ws.port);
-		const { getPort } = await import("./dist-eNI9qM_I.mjs").then((n) => n.t);
+		const { getPort } = await import("./dist-CZXfGEkd.mjs").then((n) => n.t);
 		let lastError;
 		for (let attempt = 0; attempt < 3; attempt++) {
 			const port = attempt === 0 && options.resolveSidecarPort ? await options.resolveSidecarPort(sidecarHost) : await getPort({

package/dist/{instance-shell-CljiKq1c.d.mts → instance-shell-mU5j5xWn.d.mts}

@@ -1,6 +1,6 @@
-import { K as DevframeRpcClientFunctions, R as DevframeNodeRpcSession, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, q as DevframeRpcServerFunctions, s as DevframeSseOptions, u as DevframeAuthHandler } from "./devframe-DJMg0WLe.mjs";
+import { E as DevframeRpcServerFunctions, T as DevframeRpcClientFunctions, _ as DevframeNodeRpcSession, c as DevframeWsOptions, d as ConnectionMeta, g as DevframeNodeContext, s as DevframeSseOptions, u as DevframeAuthHandler } from "./devframe-mbfgpQQC.mjs";
 import { d as DevframeRpcConnection, n as WsOriginRegistry, u as DevframeNodeRpcSessionMeta } from "./ws-server-D1d3QM9f.mjs";
-import "./index-CB-fSUyn.mjs";
+import "./index-Dipgo9ji.mjs";
 import { BirpcGroup } from "birpc";
 import { NodeAdapter } from "crossws/adapters/node";
 import { Buffer } from "node:buffer";