devframe 0.9.17 → 0.9.19

package/dist/{_shared-CkLpdx6I.d.mts → _shared-BIUet_Jh.d.mts}

@@ -1,4 +1,4 @@
-import { F as DevframeDefinition, G as McpAuthorization, I as DevframeDeploymentKind, q as McpSetting, t as ConnectionMeta, zt as DevframeAgentHost } from "./context-DLzIyQCZ.mjs";
+import { F as DevframeDefinition, G as McpAuthorization, I as DevframeDeploymentKind, q as McpSetting, t as ConnectionMeta, zt as DevframeAgentHost } from "./context-BLHBDQcZ.mjs";
 //#region src/adapters/_shared.d.ts
 /**
  * Resolve the mount base path for a devframe's SPA. Hosted adapters

package/dist/adapters/build.d.mts

@@ -1,4 +1,4 @@
-import { F as DevframeDefinition, V as DevframeSnapshotRpcEntry, o as DevframeNodeContext } from "../context-DLzIyQCZ.mjs";
+import { F as DevframeDefinition, V as DevframeSnapshotRpcEntry, o as DevframeNodeContext } from "../context-BLHBDQcZ.mjs";
 import { o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
 //#region src/adapters/build.d.ts
 export interface CreateBuildOptions {

package/dist/adapters/build.mjs

@@ -1,10 +1,10 @@
 import { s as colors } from "../nostics-D0PvLZsn.mjs";
 import { t as resolveClientAssets } from "../client-assets-DNdhagGm.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME, DEVFRAME_RPC_DUMP_MANIFEST_FILENAME } from "../constants.mjs";
-import { n as collectStaticRpcDump, t as writeStaticRpcDump } from "../write-D2AJqVT8.mjs";
+import { n as collectStaticRpcDump, t as writeStaticRpcDump } from "../write-DoXJzGUH.mjs";
 import { t as diagnostics } from "../diagnostics-DZA6KQ_Z.mjs";
-import { t as createHostContext } from "../context-Cdj9z9m2.mjs";
-import { t as resolveStaticAssetsSource } from "../remote-assets-DMFzLSoH.mjs";
+import { t as createHostContext } from "../context-BLXXjoBW.mjs";
+import { t as resolveStaticAssetsSource } from "../remote-assets-D0StJVLp.mjs";
 import { t as createH3DevframeHost } from "../host-h3-BROI6SQ4.mjs";
 import fs from "node:fs/promises";
 import { resolve } from "pathe";

package/dist/adapters/cac.d.mts

@@ -1,4 +1,4 @@
-import { Dt as InferCliFlags, Et as CliFlagsSchema, F as DevframeDefinition, Ot as defineCliFlags, kt as parseCliFlags, q as McpSetting } from "../context-DLzIyQCZ.mjs";
+import { Dt as InferCliFlags, Et as CliFlagsSchema, F as DevframeDefinition, Ot as defineCliFlags, kt as parseCliFlags, q as McpSetting } from "../context-BLHBDQcZ.mjs";
 import { CAC } from "cac";
 import { H3 } from "h3";
 //#region src/adapters/cac.d.ts

package/dist/adapters/cac.mjs

@@ -1,7 +1,7 @@
 import { s as colors } from "../nostics-D0PvLZsn.mjs";
 import { i as resolveDevServerPort, s as importRuntimeModule } from "../_shared-U8D-xzrp.mjs";
 import { createBuild } from "./build.mjs";
-import { t as createDevServer } from "../dev-DpfkCVqo.mjs";
+import { t as createDevServer } from "../dev-DbWecpjA.mjs";
 import process from "node:process";
 import cac$1 from "cac";
 //#region src/adapters/flags.ts

package/dist/adapters/dev.d.mts

@@ -1,9 +1,9 @@
-import { F as DevframeDefinition, Tt as DevframeAuthHandler, U as DevframeSseOptions, W as DevframeWsOptions, q as McpSetting, s as DevframeNodeRpcSession } from "../context-DLzIyQCZ.mjs";
+import { F as DevframeDefinition, Tt as DevframeAuthHandler, U as DevframeSseOptions, W as DevframeWsOptions, q as McpSetting, s as DevframeNodeRpcSession } from "../context-BLHBDQcZ.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "../session-r6PDixP6.mjs";
 import { o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
-import { n as WsOriginRegistry } from "../ws-server-9ztvkeJ0.mjs";
-import { c as StartedServer } from "../instance-shell-BQXr8n68.mjs";
-import { c as resolveMcpConnectionMeta, o as resolveDevServerPort, t as ResolveDevServerPortOptions } from "../_shared-CkLpdx6I.mjs";
+import { n as WsOriginRegistry } from "../ws-server-BB8jhxeT.mjs";
+import { c as StartedServer } from "../instance-shell-C6Vg97lg.mjs";
+import { c as resolveMcpConnectionMeta, o as resolveDevServerPort, t as ResolveDevServerPortOptions } from "../_shared-BIUet_Jh.mjs";
 import { H3 } from "h3";
 //#region src/adapters/dev.d.ts
 export interface CreateDevServerOptions {

package/dist/adapters/dev.mjs

@@ -1,3 +1,3 @@
 import { i as resolveDevServerPort, o as resolveMcpConnectionMeta } from "../_shared-U8D-xzrp.mjs";
-import { t as createDevServer } from "../dev-DpfkCVqo.mjs";
+import { t as createDevServer } from "../dev-DbWecpjA.mjs";
 export { createDevServer, resolveDevServerPort, resolveMcpConnectionMeta };

package/dist/adapters/embedded.d.mts

@@ -1,4 +1,4 @@
-import { F as DevframeDefinition, o as DevframeNodeContext } from "../context-DLzIyQCZ.mjs";
+import { F as DevframeDefinition, o as DevframeNodeContext } from "../context-BLHBDQcZ.mjs";
 //#region src/adapters/embedded.d.ts
 export interface CreateEmbeddedOptions {
   /** Target context the devframe is registered into. Required. */

package/dist/adapters/initiate.d.mts

@@ -1,8 +1,8 @@
-import { F as DevframeDefinition, St as DevframeStorageScope, Tt as DevframeAuthHandler, U as DevframeSseOptions, W as DevframeWsOptions, o as DevframeNodeContext, q as McpSetting, s as DevframeNodeRpcSession, t as ConnectionMeta } from "../context-DLzIyQCZ.mjs";
+import { F as DevframeDefinition, St as DevframeStorageScope, Tt as DevframeAuthHandler, U as DevframeSseOptions, W as DevframeWsOptions, o as DevframeNodeContext, q as McpSetting, s as DevframeNodeRpcSession, t as ConnectionMeta } from "../context-BLHBDQcZ.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "../session-r6PDixP6.mjs";
 import { o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
-import { n as WsOriginRegistry } from "../ws-server-9ztvkeJ0.mjs";
-import { c as StartedServer, f as DevframeInstanceRecord } from "../instance-shell-BQXr8n68.mjs";
+import { n as WsOriginRegistry } from "../ws-server-BB8jhxeT.mjs";
+import { c as StartedServer, f as DevframeInstanceRecord } from "../instance-shell-C6Vg97lg.mjs";
 import { H3 } from "h3";
 import { Buffer } from "node:buffer";
 import { IncomingMessage, Server, ServerResponse } from "node:http";

package/dist/adapters/initiate.mjs

@@ -1,2 +1,2 @@
-import { n as getInstanceInternals, r as initDevframe } from "../dev-DpfkCVqo.mjs";
+import { n as getInstanceInternals, r as initDevframe } from "../dev-DbWecpjA.mjs";
 export { getInstanceInternals, initDevframe };

package/dist/adapters/mcp.d.mts

@@ -1,4 +1,4 @@
-import { F as DevframeDefinition, G as McpAuthorization, o as DevframeNodeContext } from "../context-DLzIyQCZ.mjs";
+import { F as DevframeDefinition, G as McpAuthorization, o as DevframeNodeContext } from "../context-BLHBDQcZ.mjs";
 import { H3 } from "h3";
 import "@modelcontextprotocol/server";
 //#region src/adapters/mcp/build-server.d.ts

package/dist/adapters/mcp.mjs

@@ -3,7 +3,7 @@ import { t as DEVFRAME_EVENTS } from "../events-BV4Dj59a.mjs";
 import { t as isAllowedOrigin } from "../origin-DZit9g29.mjs";
 import { r as timingSafeEqual } from "../crypto-token-TVbGGFuj.mjs";
 import { t as diagnostics } from "../diagnostics-DZA6KQ_Z.mjs";
-import { t as createHostContext } from "../context-Cdj9z9m2.mjs";
+import { t as createHostContext } from "../context-BLXXjoBW.mjs";
 import { t as toAgentToolName } from "../agent-tool-name-DGzeuWcO.mjs";
 import { join } from "pathe";
 import process from "node:process";

package/dist/client/index.d.mts

@@ -1,8 +1,8 @@
-import { f as RpcCacheManager, p as RpcCacheOptions } from "../index-pIVt92jP.mjs";
-import { _ as RpcFunctionDefinition, w as RpcFunctionsCollector } from "../types-Dq4i156u.mjs";
-import { Q as DevframeServiceMeta, Vt as EventEmitter, b as StreamSink, ct as DevframeSettings, d as RpcSharedStateHost, et as DevframeServiceScopeOf, gt as SettingsForNamespace, ht as ScopedSharedStates, it as DevframeServicesState, k as SharedState, mt as ScopedServerFunctions, pt as ScopedRpcFn, t as ConnectionMeta, u as RpcSharedStateGetOptions, vt as DevframeRpcClientFunctions, y as StreamReader, yt as DevframeRpcServerFunctions } from "../context-DLzIyQCZ.mjs";
-import { t as SseRpcChannelOptions } from "../sse-client-BQ4jS3eO.mjs";
-import { t as WsRpcChannelOptions } from "../ws-client-Xpxt0oPA.mjs";
+import { f as RpcCacheManager, p as RpcCacheOptions } from "../index-CiA6C705.mjs";
+import { E as RpcFunctionsCollector, _ as RpcFunctionDefinition } from "../types-D2vGd7-2.mjs";
+import { Q as DevframeServiceMeta, Vt as EventEmitter, b as StreamSink, ct as DevframeSettings, d as RpcSharedStateHost, et as DevframeServiceScopeOf, gt as SettingsForNamespace, ht as ScopedSharedStates, it as DevframeServicesState, k as SharedState, mt as ScopedServerFunctions, pt as ScopedRpcFn, t as ConnectionMeta, u as RpcSharedStateGetOptions, vt as DevframeRpcClientFunctions, y as StreamReader, yt as DevframeRpcServerFunctions } from "../context-BLHBDQcZ.mjs";
+import { t as SseRpcChannelOptions } from "../sse-client-BcbYwXdD.mjs";
+import { t as WsRpcChannelOptions } from "../ws-client-CNpP6Ium.mjs";
 import { BirpcOptions, BirpcReturn } from "birpc";
 //#region src/client/connection.d.ts
 export interface DevframeConnection {

package/dist/client/index.mjs

@@ -99,8 +99,8 @@ const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
 	codes: {
 		DF0019: {
-			why: (p) => `RPC function "${p.name}" has \`agent\` set but \`jsonSerializable\` is not \`true\`; MCP requires JSON-serializable data.`,
-			fix: "Set `jsonSerializable: true` if the payload is JSON-safe, or remove `agent` to keep it RPC-only."
+			why: (p) => `RPC function "${p.name}" has \`agent\` set but \`jsonSerializable\` is \`false\`; MCP requires JSON-serializable data.`,
+			fix: "Remove `jsonSerializable: false`, or remove `agent` to keep it RPC-only."
 		},
 		DF0020: {
 			why: (p) => `RPC function "${p.name}" declares \`jsonSerializable: true\` but the value at "${p.path}" is a ${p.type}.`,
@@ -131,6 +131,19 @@ const diagnostics = defineDiagnostics({
 	}
 });
 //#endregion
+//#region src/rpc/agent-json-serialization.ts
+/**
+* Prevents using a coding-agent-exposed RPC function that is explicitly
+* marked as non-serializable, and marks these functions as serializable by
+* default.
+*
+* @internal
+*/
+function ensureAgentJsonSerializable(fnDef) {
+	if (fnDef.agent && fnDef.jsonSerializable === false) throw diagnostics.DF0019({ name: fnDef.name });
+	if (fnDef.agent && !fnDef.jsonSerializable) fnDef.jsonSerializable = true;
+}
+//#endregion
 //#region src/rpc/validate-io.ts
 /**
 * Run a single [Standard Schema](https://standardschema.dev) validator,
@@ -270,15 +283,15 @@ var RpcFunctionsCollectorBase = class {
 			}
 		});
 	}
-	register(fn, force = false) {
-		if (this.definitions.has(fn.name) && !force) throw diagnostics.DF0021({ name: fn.name });
-		assertAgentJsonSerializable(fn);
-		this.definitions.set(fn.name, fn);
-		this._onChanged.forEach((cb) => cb(fn.name));
+	register(fnDef, force = false) {
+		if (this.definitions.has(fnDef.name) && !force) throw diagnostics.DF0021({ name: fnDef.name });
+		ensureAgentJsonSerializable(fnDef);
+		this.definitions.set(fnDef.name, fnDef);
+		this._onChanged.forEach((cb) => cb(fnDef.name));
 	}
 	update(fn, force = false) {
 		if (!this.definitions.has(fn.name) && !force) throw diagnostics.DF0022({ name: fn.name });
-		assertAgentJsonSerializable(fn);
+		ensureAgentJsonSerializable(fn);
 		this.definitions.set(fn.name, fn);
 		this._onChanged.forEach((cb) => cb(fn.name));
 	}
@@ -310,9 +323,6 @@ var RpcFunctionsCollectorBase = class {
 		return Array.from(this.definitions.keys());
 	}
 };
-function assertAgentJsonSerializable(fn) {
-	if (fn.agent && fn.jsonSerializable !== true) throw diagnostics.DF0019({ name: fn.name });
-}
 //#endregion
 //#region src/rpc/serialization.ts
 /**
@@ -1089,14 +1099,17 @@ function createLiveRpcClientMode(options) {
 	async function ensureTrusted(timeout = 6e4) {
 		if (isTrusted) trustedPromise.resolve(true);
 		if (timeout <= 0) return trustedPromise.promise;
-		let clear = () => {};
-		await Promise.race([trustedPromise.promise.then(clear), new Promise((resolve, reject) => {
-			const id = setTimeout(() => {
-				reject(/* @__PURE__ */ new Error("[devframe] Timeout waiting for rpc to be trusted"));
-			}, timeout);
-			clear = () => clearTimeout(id);
-		})]);
-		return isTrusted;
+		let timer;
+		try {
+			await Promise.race([trustedPromise.promise, new Promise((_, reject) => {
+				timer = setTimeout(() => {
+					reject(/* @__PURE__ */ new Error("[devframe] Timeout waiting for rpc to be trusted"));
+				}, timeout);
+			})]);
+			return isTrusted;
+		} finally {
+			clearTimeout(timer);
+		}
 	}
 	return {
 		transport,
@@ -1709,39 +1722,29 @@ function argsToJsonSchema(args) {
 	};
 }
 //#endregion
-//#region src/node/agent-args.ts
+//#region src/tool-input.ts
 /**
-* Map the args payload an agent surface receives (MCP sends an object
-* keyed `arg0`/`arg1`/…, matching the schema the adapter advertises) onto
-* a handler's positional parameters. Shared by the agent host's RPC
-* bridge and the hub's command-derived tools so the coercion cannot
-* drift between them.
+* Convert an object-shaped tool input into positional arguments.
 *
-* - an array passes through as-is
-* - `null`/`undefined` become a zero-argument call
-* - with declared schemas, each schema reads its own `argN` key, in order
-* - without schemas, `arg0`/`arg1`/… keys are collected when present
-* - an empty object becomes a zero-argument call
-* - anything else follows the {@link AgentArgsFallback}
+* Tool schemas expose positional parameters as `arg0`, `arg1`, and so on.
+* Arrays pass through for callers that already provide positional arguments.
 */
-function coerceAgentPositionalArgs(args, schemas, fallback = "wrap") {
-	if (Array.isArray(args)) return args;
-	if (args === void 0 || args === null) return [];
-	if (typeof args === "object") {
-		const obj = args;
-		if (schemas && schemas.length) return schemas.map((_, i) => obj[`arg${i}`]);
-		if ("arg0" in obj) {
-			const out = [];
-			let i = 0;
-			while (`arg${i}` in obj) {
-				out.push(obj[`arg${i}`]);
-				i++;
-			}
-			return out;
-		}
-		if (Object.keys(obj).length === 0) return [];
-	}
-	return fallback === "drop" ? [] : [args];
+function collectPositionalArgs(input, argumentCount) {
+	if (Array.isArray(input)) return input;
+	if (input === void 0 || input === null) return [];
+	if (typeof input !== "object") return void 0;
+	const record = input;
+	if (argumentCount != null) return Array.from({ length: argumentCount }, (_, index) => record[`arg${index}`]);
+	if ("arg0" in record) {
+		const positional = [];
+		while (`arg${positional.length}` in record) positional.push(record[`arg${positional.length}`]);
+		return positional;
+	}
+	return Object.keys(record).length === 0 ? [] : void 0;
+}
+/** Convert tool input for an RPC, preserving an untyped payload as arg 0. */
+function toolInputToRpcArgs(input, argumentCount) {
+	return collectPositionalArgs(input, argumentCount) ?? [input];
 }
 //#endregion
 //#region src/client/webmcp.ts
@@ -1828,7 +1831,7 @@ function resolveSafety(def, agent) {
 }
 async function executeRpcTool(def, context, args) {
 	try {
-		const positional = coerceAgentPositionalArgs(args, def.args, "wrap");
+		const positional = toolInputToRpcArgs(args, def.args?.length);
 		return { content: [{
 			type: "text",
 			text: stringifyResult(await (await getRpcHandler(def, context))(...positional))
@@ -1952,6 +1955,18 @@ async function getDevframeRpcClient(options = {}) {
 			return bootstrapAuthPromise.then(() => fn(...args));
 		});
 	}
+	/** Release authentication and transport resources even if another disposer fails. */
+	function closeRpcClient() {
+		try {
+			disposeWebMcp?.();
+		} finally {
+			try {
+				authChannel?.close();
+			} finally {
+				mode.close?.();
+			}
+		}
+	}
 	const rpc = {
 		events,
 		get isTrusted() {
@@ -2006,10 +2021,7 @@ async function getDevframeRpcClient(options = {}) {
 		streaming: void 0,
 		cacheManager,
 		scope: void 0,
-		close: () => {
-			disposeWebMcp?.();
-			mode.close?.();
-		}
+		close: closeRpcClient
 	};
 	rpc.sharedState = createRpcSharedStateClientHost(rpc);
 	rpc.streaming = createRpcStreamingClientHost(rpc);

package/dist/{context-3y_PeZKl.d.mts → context-BA5FPz7K.d.mts}

@@ -1,4 +1,4 @@
-import { k as SharedState, o as DevframeNodeContext } from "./context-DLzIyQCZ.mjs";
+import { k as SharedState, o as DevframeNodeContext } from "./context-BLHBDQcZ.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{context-DLzIyQCZ.d.mts → context-BLHBDQcZ.d.mts}

@@ -1,5 +1,5 @@
-import { d as RpcFunctionsCollectorBase } from "./index-pIVt92jP.mjs";
-import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-Dq4i156u.mjs";
+import { d as RpcFunctionsCollectorBase } from "./index-CiA6C705.mjs";
+import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-D2vGd7-2.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
 import { a as RemoteAssetsStore, o as StaticAssetsSource } from "./remote-assets-eBvSKZMS.mjs";
 import { m as defineDiagnostics } from "./nostics-0sKe5HIj.mjs";

package/dist/{context-Cdj9z9m2.mjs → context-BLXXjoBW.mjs}

@@ -1,12 +1,12 @@
 import { i as defineDiagnostics } from "./nostics-D0PvLZsn.mjs";
-import { r as diagnostics } from "./serialization-DFg5sUt6.mjs";
+import { r as diagnostics } from "./serialization-BhuOoL80.mjs";
 import { RpcFunctionsCollectorBase } from "./rpc/index.mjs";
 import { defineRpcFunction } from "./index.mjs";
 import { t as DEVFRAME_EVENTS } from "./events-BV4Dj59a.mjs";
 import { DEVFRAME_SERVICES_STATE_KEY } from "./constants.mjs";
 import { t as diagnostics$1 } from "./diagnostics-DZA6KQ_Z.mjs";
-import { r as createEventEmitter, t as DevframeAgentHost } from "./host-agent-CKqSTEX9.mjs";
-import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-DMFzLSoH.mjs";
+import { i as createEventEmitter, t as DevframeAgentHost } from "./host-agent-C3MBpNCd.mjs";
+import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-D0StJVLp.mjs";
 import { i as satisfiesVersionRange, n as expandResolveFrom, r as importServicePackage, t as deepMergeOptionSets } from "./services-install-Ben4yh52.mjs";
 import { t as createStorage } from "./storage-B70AXK64.mjs";
 import { join } from "pathe";

package/dist/{dev-DpfkCVqo.mjs → dev-DbWecpjA.mjs}

@@ -1,8 +1,8 @@
 import { t as resolveClientAssets } from "./client-assets-DNdhagGm.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
 import { t as diagnostics } from "./diagnostics-DZA6KQ_Z.mjs";
-import { t as createHostContext } from "./context-Cdj9z9m2.mjs";
-import { t as resolveStaticAssetsSource } from "./remote-assets-DMFzLSoH.mjs";
+import { t as createHostContext } from "./context-BLXXjoBW.mjs";
+import { t as resolveStaticAssetsSource } from "./remote-assets-D0StJVLp.mjs";
 import { a as resolveMcpConfig, i as resolveDevServerPort, n as normalizeBasePath, r as resolveBasePath, s as importRuntimeModule, t as loadAutoMcpAdapter } from "./_shared-U8D-xzrp.mjs";
 import { t as createH3DevframeHost } from "./host-h3-BROI6SQ4.mjs";
 import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, t as createInstanceShell } from "./instance-shell-370Oee9K.mjs";

package/dist/{host-agent-CKqSTEX9.mjs → host-agent-C3MBpNCd.mjs}

@@ -39,39 +39,38 @@ function createEventEmitter() {
 	};
 }
 //#endregion
-//#region src/node/agent-args.ts
+//#region src/tool-input.ts
 /**
-* Map the args payload an agent surface receives (MCP sends an object
-* keyed `arg0`/`arg1`/…, matching the schema the adapter advertises) onto
-* a handler's positional parameters. Shared by the agent host's RPC
-* bridge and the hub's command-derived tools so the coercion cannot
-* drift between them.
+* Convert an object-shaped tool input into positional arguments.
 *
-* - an array passes through as-is
-* - `null`/`undefined` become a zero-argument call
-* - with declared schemas, each schema reads its own `argN` key, in order
-* - without schemas, `arg0`/`arg1`/… keys are collected when present
-* - an empty object becomes a zero-argument call
-* - anything else follows the {@link AgentArgsFallback}
+* Tool schemas expose positional parameters as `arg0`, `arg1`, and so on.
+* Arrays pass through for callers that already provide positional arguments.
 */
-function coerceAgentPositionalArgs(args, schemas, fallback = "wrap") {
-	if (Array.isArray(args)) return args;
-	if (args === void 0 || args === null) return [];
-	if (typeof args === "object") {
-		const obj = args;
-		if (schemas && schemas.length) return schemas.map((_, i) => obj[`arg${i}`]);
-		if ("arg0" in obj) {
-			const out = [];
-			let i = 0;
-			while (`arg${i}` in obj) {
-				out.push(obj[`arg${i}`]);
-				i++;
-			}
-			return out;
-		}
-		if (Object.keys(obj).length === 0) return [];
+function collectPositionalArgs(input, argumentCount) {
+	if (Array.isArray(input)) return input;
+	if (input === void 0 || input === null) return [];
+	if (typeof input !== "object") return void 0;
+	const record = input;
+	if (argumentCount != null) return Array.from({ length: argumentCount }, (_, index) => record[`arg${index}`]);
+	if ("arg0" in record) {
+		const positional = [];
+		while (`arg${positional.length}` in record) positional.push(record[`arg${positional.length}`]);
+		return positional;
 	}
-	return fallback === "drop" ? [] : [args];
+	return Object.keys(record).length === 0 ? [] : void 0;
+}
+/** Convert tool input for an RPC, preserving an untyped payload as arg 0. */
+function toolInputToRpcArgs(input, argumentCount) {
+	return collectPositionalArgs(input, argumentCount) ?? [input];
+}
+/** Convert tool input for a command, whose arguments must be declared. */
+function toolInputToCommandArgs(input, argumentCount) {
+	return collectPositionalArgs(input, argumentCount) ?? [];
+}
+/** @deprecated Use {@link toolInputToRpcArgs} or {@link toolInputToCommandArgs}. */
+function coerceAgentPositionalArgs(input, schemas, fallback = "wrap") {
+	const argumentCount = schemas?.length;
+	return fallback === "drop" ? toolInputToCommandArgs(input, argumentCount) : toolInputToRpcArgs(input, argumentCount);
 }
 //#endregion
 //#region src/node/host-agent.ts
@@ -192,7 +191,7 @@ var DevframeAgentHost = class {
 		if (plain?.handler) return await plain.handler(args);
 		const rpcDef = this._findRpcDefinition(id);
 		if (rpcDef) {
-			const positional = coerceAgentPositionalArgs(args, rpcDef.args, "wrap");
+			const positional = toolInputToRpcArgs(args, rpcDef.args?.length);
 			return await this.context.rpc.invokeLocal(id, ...positional);
 		}
 		const provided = this._collectProviderTools().find((t) => t.tool.id === id);
@@ -274,4 +273,4 @@ function inferSafety(type) {
 	return "action";
 }
 //#endregion
-export { coerceAgentPositionalArgs as n, createEventEmitter as r, DevframeAgentHost as t };
+export { createEventEmitter as i, coerceAgentPositionalArgs as n, toolInputToCommandArgs as r, DevframeAgentHost as t };

package/dist/in-page-channel/index.d.mts

@@ -1,5 +1,5 @@
-import { D as InferArgsType, E as Thenable, O as InferReturnType, T as RpcReturnSchema, i as RpcArgsSchema } from "../types-Dq4i156u.mjs";
-import { Vt as EventEmitter, k as SharedState } from "../context-DLzIyQCZ.mjs";
+import { A as InferReturnType, D as RpcReturnSchema, O as Thenable, i as RpcArgsSchema, k as InferArgsType } from "../types-D2vGd7-2.mjs";
+import { Vt as EventEmitter, k as SharedState } from "../context-BLHBDQcZ.mjs";
 import { BirpcReturn } from "birpc";
 //#region src/in-page-channel/types.d.ts
 /**
@@ -199,7 +199,7 @@ interface ConnectPanelChannelOptions<Protocol extends InPageChannelProtocol = In
   window?: Window | false;
   /**
    * Windows the hello is posted to. Defaults to the panel's ancestor chain
-   * plus its `opener`, the places a same-tab page script can live. When
+   * plus those windows' openers, the places a page script can live. When
    * empty and no `transport` is given, the endpoint stays `connecting` and
    * warns once.
    */
@@ -363,7 +363,7 @@ export declare function createPageScriptChannel<P extends InPageChannelProtocol>
  * Connect the panel endpoint of an in-page channel.
  *
  * The panel initiates: it posts a versioned hello to every window a
- * same-tab page script can live in (its ancestor chain and its `opener`),
+ * page script can live in (its ancestor chain and those windows' openers),
  * retrying with backoff until one answers with a dedicated port, so boot
  * order never matters, and a reload of either side is just a re-handshake
  * (`WindowProxy` references survive navigations). While `connecting`,

package/dist/in-page-channel/index.mjs

@@ -60,8 +60,8 @@ function resolveAllowedOrigins(allowedOrigins, win) {
 	return origin && origin !== "null" ? [origin] : ["*"];
 }
 /**
-* Default handshake targets of a panel: its ancestor chain plus its
-* `opener`, every same-tab window a page script can live in. `WindowProxy`
+* Default handshake targets of a panel: its ancestor chain plus the
+* `opener` of each window, including a popup containing the panel iframe. `WindowProxy`
 * references stay valid across navigations, so hellos posted to these reach
 * a page script even after the host page reloads.
 */
@@ -74,9 +74,9 @@ function defaultHandshakeTargets(win) {
 			current = current.parent;
 		}
 	} catch {}
-	try {
-		const opener = win.opener;
-		if (opener && opener !== win) targets.push(opener);
+	for (const current of [win, ...targets]) try {
+		const opener = current.opener;
+		if (opener && opener !== win && !targets.includes(opener)) targets.push(opener);
 	} catch {}
 	return targets;
 }
@@ -186,6 +186,12 @@ function createLocalFunctionRegistry(codec) {
 		register(definition) {
 			definitions.set(channelMethod(definition.type, definition.name), definition);
 		},
+		registerInternal(method, handler) {
+			definitions.set(method, {
+				name: method,
+				handler
+			});
+		},
 		on(name, listener) {
 			const key = channelMethod("event", name);
 			let registered = listeners.get(key);
@@ -202,12 +208,7 @@ function createLocalFunctionRegistry(codec) {
 		resolve(name) {
 			const definition = definitions.get(name);
 			const registered = listeners.get(name);
-			if (!definition && !registered?.size) {
-				if (name.startsWith(FUNCTION_METHOD_PREFIX)) return () => {
-					throw diagnostics.DF0077({ name: name.slice(FUNCTION_METHOD_PREFIX.length) });
-				};
-				return;
-			}
+			if (!definition && !registered?.size) return void 0;
 			return async (...rawArgs) => {
 				const args = codec.deserialize ? rawArgs.map(codec.deserialize) : rawArgs;
 				if (definition?.jsonSerializable) assertJsonSerializable(args, "its arguments", definition.name);
@@ -221,6 +222,21 @@ function createLocalFunctionRegistry(codec) {
 		}
 	};
 }
+/**
+* Consult each registry in order and, only once none owns the name, fall back
+* to the coded "not registered" error for a `function:` call (events stay
+* silent). The fallback lives here, after every registry, so chaining a
+* state registry ahead of the user registry never masks a real handler.
+*/
+function resolveLocalHandler(name, registries) {
+	for (const registry of registries) {
+		const handler = registry(name);
+		if (handler) return handler;
+	}
+	if (name.startsWith(FUNCTION_METHOD_PREFIX)) return () => {
+		throw diagnostics.DF0077({ name: name.slice(FUNCTION_METHOD_PREFIX.length) });
+	};
+}
 function wrapPostError(error) {
 	if (error instanceof DOMException && error.name === "DataCloneError") return new InPageChannelError("not-cloneable", `a payload could not be structured-cloned across the in-page channel: ${error.message}. Strip non-cloneable values (functions, DOM nodes, framework reactivity proxies) before sending: declare the function \`jsonSerializable: true\` for a precise error, or provide a \`serialize\` hook.`, { cause: error });
 	return error;
@@ -539,12 +555,9 @@ function createPageScriptChannel(options) {
 			}
 		});
 		const stateRegistry = createLocalFunctionRegistry(codec);
-		for (const [name, handler] of Object.entries(internal.internalHandlers)) stateRegistry.register({
-			name,
-			handler
-		});
+		for (const [method, handler] of Object.entries(internal.internalHandlers)) stateRegistry.registerInternal(method, handler);
 		internal.attached = attachChannelPort(port, {
-			resolveLocal: (fnName) => stateRegistry.resolve(fnName) ?? registry.resolve(fnName),
+			resolveLocal: (fnName) => resolveLocalHandler(fnName, [stateRegistry.resolve, registry.resolve]),
 			onControl: (kind) => {
 				if (kind === "ping") internal.attached.postControl("pong");
 			},
@@ -643,7 +656,7 @@ const DEFAULT_EVENT_BUFFER_LIMIT = 64;
 * Connect the panel endpoint of an in-page channel.
 *
 * The panel initiates: it posts a versioned hello to every window a
-* same-tab page script can live in (its ancestor chain and its `opener`),
+* page script can live in (its ancestor chain and those windows' openers),
 * retrying with backoff until one answers with a dedicated port, so boot
 * order never matters, and a reload of either side is just a re-handshake
 * (`WindowProxy` references survive navigations). While `connecting`,
@@ -697,10 +710,7 @@ function connectPanelChannel(options) {
 		call: (method, args) => enqueueCall(method, serializeArgs(codec, args))
 	});
 	const stateRegistry = createLocalFunctionRegistry(codec);
-	for (const [name, handler] of Object.entries(stateHost.handlers)) stateRegistry.register({
-		name,
-		handler
-	});
+	for (const [method, handler] of Object.entries(stateHost.handlers)) stateRegistry.registerInternal(method, handler);
 	function sendEventNow(method, args) {
 		attached?.rpc.$callRaw({
 			method,
@@ -746,7 +756,7 @@ function connectPanelChannel(options) {
 			reason: "the panel adopted a newer port"
 		});
 		attached = attachChannelPort(port, {
-			resolveLocal: (fnName) => stateRegistry.resolve(fnName) ?? registry.resolve(fnName),
+			resolveLocal: (fnName) => resolveLocalHandler(fnName, [stateRegistry.resolve, registry.resolve]),
 			onControl: (kind) => {
 				if (kind === "ping") attached?.postControl("pong");
 			},

package/dist/{index-pIVt92jP.d.mts → index-CiA6C705.d.mts}

@@ -1,4 +1,4 @@
-import { C as RpcFunctionType, S as RpcFunctionSetupResult, T as RpcReturnSchema, _ as RpcFunctionDefinition, i as RpcArgsSchema, v as RpcFunctionDefinitionAny, w as RpcFunctionsCollector } from "./types-Dq4i156u.mjs";
+import { D as RpcReturnSchema, E as RpcFunctionsCollector, T as RpcFunctionType, _ as RpcFunctionDefinition, i as RpcArgsSchema, v as RpcFunctionDefinitionAny, w as RpcFunctionSetupResult } from "./types-D2vGd7-2.mjs";
 //#region src/rpc/cache.d.ts
 interface RpcCacheOptions {
   functions: string[];
@@ -30,7 +30,7 @@ declare class RpcFunctionsCollectorBase<LocalFunctions extends Record<string, an
   readonly functions: LocalFunctions;
   private readonly _onChanged;
   constructor(context: SetupContext);
-  register(fn: RpcFunctionDefinition<string, any, any, any, any, any, SetupContext>, force?: boolean): void;
+  register(fnDef: RpcFunctionDefinition<string, any, any, any, any, any, SetupContext>, force?: boolean): void;
   update(fn: RpcFunctionDefinition<string, any, any, any, any, any, SetupContext>, force?: boolean): void;
   onChanged(fn: (id?: string) => void): () => void;
   getHandler<T extends keyof LocalFunctions>(name: T): Promise<LocalFunctions[T]>;

package/dist/{index-Ces7aTOQ.d.mts → index-r6NstVmM.d.mts}

@@ -1,5 +1,5 @@
-import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-DLzIyQCZ.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-3y_PeZKl.mjs";
+import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-BLHBDQcZ.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-BA5FPz7K.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`