devframe 0.9.18 → 0.9.20

package/dist/{index-pIVt92jP.d.mts → index-CiA6C705.d.mts}

@@ -1,4 +1,4 @@
-import { C as RpcFunctionType, S as RpcFunctionSetupResult, T as RpcReturnSchema, _ as RpcFunctionDefinition, i as RpcArgsSchema, v as RpcFunctionDefinitionAny, w as RpcFunctionsCollector } from "./types-Dq4i156u.mjs";
+import { D as RpcReturnSchema, E as RpcFunctionsCollector, T as RpcFunctionType, _ as RpcFunctionDefinition, i as RpcArgsSchema, v as RpcFunctionDefinitionAny, w as RpcFunctionSetupResult } from "./types-D2vGd7-2.mjs";
 //#region src/rpc/cache.d.ts
 interface RpcCacheOptions {
   functions: string[];
@@ -30,7 +30,7 @@ declare class RpcFunctionsCollectorBase<LocalFunctions extends Record<string, an
   readonly functions: LocalFunctions;
   private readonly _onChanged;
   constructor(context: SetupContext);
-  register(fn: RpcFunctionDefinition<string, any, any, any, any, any, SetupContext>, force?: boolean): void;
+  register(fnDef: RpcFunctionDefinition<string, any, any, any, any, any, SetupContext>, force?: boolean): void;
   update(fn: RpcFunctionDefinition<string, any, any, any, any, any, SetupContext>, force?: boolean): void;
   onChanged(fn: (id?: string) => void): () => void;
   getHandler<T extends keyof LocalFunctions>(name: T): Promise<LocalFunctions[T]>;

package/dist/{index-Ces7aTOQ.d.mts → index-r6NstVmM.d.mts}

@@ -1,5 +1,5 @@
-import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-DLzIyQCZ.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-3y_PeZKl.mjs";
+import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-BLHBDQcZ.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-BA5FPz7K.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`

package/dist/index.d.mts

@@ -1,6 +1,6 @@
-import "./index-pIVt92jP.mjs";
-import { C as RpcFunctionType, T as RpcReturnSchema, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-Dq4i156u.mjs";
-import { $ as DevframeServiceOf, At as AgentHandle, B as DevframeSetupInfo, Bt as DevframeAgentHostEvents, Ct as DevframeDiagnosticsHost, F as DevframeDefinition, Ft as AgentTool, G as McpAuthorization, H as DevframeSnapshotRpcInputs, Ht as EventUnsubscribe, I as DevframeDeploymentKind, It as AgentToolInput, J as DevframeServiceDefinition, K as McpRouteOptions, L as DevframeDockDefaults, Lt as AgentToolProvider, Mt as AgentResource, Nt as AgentResourceContent, P as DevframeCliOptions, Pt as AgentResourceInput, Q as DevframeServiceMeta, R as DevframeDuplicationStrategy, Rt as AgentToolProviderHandle, St as DevframeStorageScope, U as DevframeSseOptions, Ut as EventsMap, V as DevframeSnapshotRpcEntry, Vt as EventEmitter, W as DevframeWsOptions, X as DevframeServiceId, Y as DevframeServiceDescriptor, Z as DevframeServiceInput, _t as DevframeViewHost, a as DevframeConnectionConfigsRegistry, at as DevframeScopedNodeContext, bt as DevframeRpcSharedStates, c as RpcBroadcastOptions, ct as DevframeSettings, d as RpcSharedStateHost, dt as ScopedBroadcastOptions, et as DevframeServiceScopeOf, f as RpcStreamingChannel, ft as ScopedClientFunctions, gt as SettingsForNamespace, ht as ScopedSharedStates, i as DevframeCapabilities, it as DevframeServicesState, jt as AgentManifest, l as RpcFunctionsHost, lt as DevframeSettingsRegistry, m as RpcStreamingHost, mt as ScopedServerFunctions, n as ConnectionMetaSse, nt as DevframeServicesRegistry, o as DevframeNodeContext, ot as DevframeScopedNodeRpc, p as RpcStreamingChannelOptions, pt as ScopedRpcFn, q as McpSetting, r as ConnectionMetaWebsocket, rt as DevframeServicesScopeRegistry, s as DevframeNodeRpcSession, st as DevframeScopedStreamingHost, t as ConnectionMeta, tt as DevframeServicesHost, u as RpcSharedStateGetOptions, ut as DevframeSettingsStore, vt as DevframeRpcClientFunctions, wt as DevframeDiagnosticsLogger, xt as DevframeHost, yt as DevframeRpcServerFunctions, z as DevframeRpcOptions, zt as DevframeAgentHost } from "./context-DLzIyQCZ.mjs";
+import "./index-CiA6C705.mjs";
+import { D as RpcReturnSchema, T as RpcFunctionType, _ as RpcFunctionDefinition, g as RpcFunctionAgentOptions, i as RpcArgsSchema } from "./types-D2vGd7-2.mjs";
+import { $ as DevframeServiceOf, At as AgentHandle, B as DevframeSetupInfo, Bt as DevframeAgentHostEvents, Ct as DevframeDiagnosticsHost, F as DevframeDefinition, Ft as AgentTool, G as McpAuthorization, H as DevframeSnapshotRpcInputs, Ht as EventUnsubscribe, I as DevframeDeploymentKind, It as AgentToolInput, J as DevframeServiceDefinition, K as McpRouteOptions, L as DevframeDockDefaults, Lt as AgentToolProvider, Mt as AgentResource, Nt as AgentResourceContent, P as DevframeCliOptions, Pt as AgentResourceInput, Q as DevframeServiceMeta, R as DevframeDuplicationStrategy, Rt as AgentToolProviderHandle, St as DevframeStorageScope, U as DevframeSseOptions, Ut as EventsMap, V as DevframeSnapshotRpcEntry, Vt as EventEmitter, W as DevframeWsOptions, X as DevframeServiceId, Y as DevframeServiceDescriptor, Z as DevframeServiceInput, _t as DevframeViewHost, a as DevframeConnectionConfigsRegistry, at as DevframeScopedNodeContext, bt as DevframeRpcSharedStates, c as RpcBroadcastOptions, ct as DevframeSettings, d as RpcSharedStateHost, dt as ScopedBroadcastOptions, et as DevframeServiceScopeOf, f as RpcStreamingChannel, ft as ScopedClientFunctions, gt as SettingsForNamespace, ht as ScopedSharedStates, i as DevframeCapabilities, it as DevframeServicesState, jt as AgentManifest, l as RpcFunctionsHost, lt as DevframeSettingsRegistry, m as RpcStreamingHost, mt as ScopedServerFunctions, n as ConnectionMetaSse, nt as DevframeServicesRegistry, o as DevframeNodeContext, ot as DevframeScopedNodeRpc, p as RpcStreamingChannelOptions, pt as ScopedRpcFn, q as McpSetting, r as ConnectionMetaWebsocket, rt as DevframeServicesScopeRegistry, s as DevframeNodeRpcSession, st as DevframeScopedStreamingHost, t as ConnectionMeta, tt as DevframeServicesHost, u as RpcSharedStateGetOptions, ut as DevframeSettingsStore, vt as DevframeRpcClientFunctions, wt as DevframeDiagnosticsLogger, xt as DevframeHost, yt as DevframeRpcServerFunctions, z as DevframeRpcOptions, zt as DevframeAgentHost } from "./context-BLHBDQcZ.mjs";
 import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
 import { a as RemoteAssetsStore, i as RemoteAssetsProviderCustom, n as RemoteAssetsErrorMessage, o as StaticAssetsSource, r as RemoteAssetsProvider, t as RemoteAssets } from "./remote-assets-eBvSKZMS.mjs";
 import { i as DevframeDefineDiagnosticsOptions } from "./nostics-0sKe5HIj.mjs";

package/dist/{instance-shell-BQXr8n68.d.mts → instance-shell-C6Vg97lg.d.mts}

@@ -1,7 +1,7 @@
-import { Tt as DevframeAuthHandler, U as DevframeSseOptions, W as DevframeWsOptions, o as DevframeNodeContext, s as DevframeNodeRpcSession, t as ConnectionMeta, vt as DevframeRpcClientFunctions, yt as DevframeRpcServerFunctions } from "./context-DLzIyQCZ.mjs";
+import { Tt as DevframeAuthHandler, U as DevframeSseOptions, W as DevframeWsOptions, o as DevframeNodeContext, s as DevframeNodeRpcSession, t as ConnectionMeta, vt as DevframeRpcClientFunctions, yt as DevframeRpcServerFunctions } from "./context-BLHBDQcZ.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
-import { n as WsOriginRegistry } from "./ws-server-9ztvkeJ0.mjs";
-import "./index-Ces7aTOQ.mjs";
+import { n as WsOriginRegistry } from "./ws-server-BB8jhxeT.mjs";
+import "./index-r6NstVmM.mjs";
 import { BirpcGroup } from "birpc";
 import { H3 } from "h3";
 import { NodeAdapter } from "crossws/adapters/node";

package/dist/{instance-shell-370Oee9K.mjs → instance-shell-yfrM3_vK.mjs}

@@ -1,5 +1,5 @@
 import "./constants.mjs";
-import { r as validateOriginCandidate } from "./origin-DZit9g29.mjs";
+import { i as validateOriginCandidate } from "./origin-D_eBKEzr.mjs";
 import { t as diagnostics } from "./diagnostics-DZA6KQ_Z.mjs";
 import { t as getInternalContext } from "./context-jXO5vzjH.mjs";
 import { createInteractiveAuth } from "./recipes/interactive-auth.mjs";

package/dist/internal/index.d.mts

@@ -1,9 +1,9 @@
-import { v as RpcFunctionDefinitionAny } from "../types-Dq4i156u.mjs";
-import { At as AgentHandle, Bt as DevframeAgentHostEvents, F as DevframeDefinition, Ft as AgentTool, It as AgentToolInput, Lt as AgentToolProvider, Mt as AgentResource, Nt as AgentResourceContent, Pt as AgentResourceInput, Rt as AgentToolProviderHandle, Vt as EventEmitter, jt as AgentManifest, o as DevframeNodeContext, xt as DevframeHost, zt as DevframeAgentHost$1 } from "../context-DLzIyQCZ.mjs";
+import { v as RpcFunctionDefinitionAny } from "../types-D2vGd7-2.mjs";
+import { At as AgentHandle, Bt as DevframeAgentHostEvents, F as DevframeDefinition, Ft as AgentTool, It as AgentToolInput, Lt as AgentToolProvider, Mt as AgentResource, Nt as AgentResourceContent, Pt as AgentResourceInput, Rt as AgentToolProviderHandle, Vt as EventEmitter, jt as AgentManifest, o as DevframeNodeContext, xt as DevframeHost, zt as DevframeAgentHost$1 } from "../context-BLHBDQcZ.mjs";
 import { a as RemoteAssetsStore, o as StaticAssetsSource } from "../remote-assets-eBvSKZMS.mjs";
-import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-BQXr8n68.mjs";
-import { a as resolveBasePath, i as normalizeBasePath, n as ResolvedMcpConfig, r as loadAutoMcpAdapter, s as resolveMcpConfig } from "../_shared-CkLpdx6I.mjs";
-import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-Clo3kHfo.mjs";
+import { a as InstanceShellInit, c as StartedServer, d as samePath, f as DevframeInstanceRecord, h as registerDevframeInstance, i as InstanceShellApi, l as createInstanceShell, m as listLiveDevframeInstances, n as InstanceRegisterConfig, o as InstanceShellInternals, p as DevframeInstanceRegistration, r as InstanceShell, s as InstanceWsTier, t as CreateInstanceShellOptions, u as resolveInstanceRegister } from "../instance-shell-C6Vg97lg.mjs";
+import { a as resolveBasePath, i as normalizeBasePath, n as ResolvedMcpConfig, r as loadAutoMcpAdapter, s as resolveMcpConfig } from "../_shared-BIUet_Jh.mjs";
+import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as ContextRpcServer } from "../rpc-core-BlL-Ip8n.mjs";
 //#region src/client-assets.d.ts
 /**
  * Resolve a definition's client assets source: the built SPA served as its
@@ -17,34 +17,6 @@ import { n as CreateContextRpcServerOptions, r as createContextRpcServer, t as C
  */
 export declare function resolveClientAssets(d: DevframeDefinition): StaticAssetsSource | undefined;
 //#endregion
-//#region src/node/agent-args.d.ts
-/**
- * How {@link coerceAgentPositionalArgs} treats an args object that carries
- * neither declared schemas nor `arg0`/`arg1`/… keys:
- *
- * - `'wrap'`: pass the object itself as the single positional argument.
- *   RPC-backed tools use this: an untyped RPC may take one raw object.
- * - `'drop'`: call with zero arguments. Command-backed tools use this:
- *   a handler's positional parameters come solely from its declared
- *   `agent.args` schemas, so undeclared payload is ignored.
- */
-type AgentArgsFallback = 'wrap' | 'drop';
-/**
- * Map the args payload an agent surface receives (MCP sends an object
- * keyed `arg0`/`arg1`/…, matching the schema the adapter advertises) onto
- * a handler's positional parameters. Shared by the agent host's RPC
- * bridge and the hub's command-derived tools so the coercion cannot
- * drift between them.
- *
- * - an array passes through as-is
- * - `null`/`undefined` become a zero-argument call
- * - with declared schemas, each schema reads its own `argN` key, in order
- * - without schemas, `arg0`/`arg1`/… keys are collected when present
- * - an empty object becomes a zero-argument call
- * - anything else follows the {@link AgentArgsFallback}
- */
-export declare function coerceAgentPositionalArgs(args: unknown, schemas: readonly unknown[] | undefined, fallback?: AgentArgsFallback): unknown[];
-//#endregion
 //#region src/node/diagnostics.d.ts
 /**
  * DF00xx codes are allocated across packages (e.g. @devframes/json-render
@@ -478,4 +450,12 @@ export declare function peekRpcWireFrame(raw: string): {
   i?: string;
 };
 //#endregion
+//#region src/tool-input.d.ts
+/** Convert tool input for a command, whose arguments must be declared. */
+export declare function toolInputToCommandArgs(input: unknown, argumentCount?: number): unknown[];
+/** @deprecated Use {@link toolInputToRpcArgs} or {@link toolInputToCommandArgs}. */
+type AgentArgsFallback = 'wrap' | 'drop';
+/** @deprecated Use {@link toolInputToRpcArgs} or {@link toolInputToCommandArgs}. */
+export declare function coerceAgentPositionalArgs(input: unknown, schemas: readonly unknown[] | undefined, fallback?: AgentArgsFallback): unknown[];
+//#endregion
 export { type AgentArgsFallback, type ContextRpcServer, type CreateContextRpcServerOptions, type CreateInstanceShellOptions, type DevframeInstanceRecord, type DevframeInstanceRegistration, type InstanceRegisterConfig, type InstanceShell, type InstanceShellApi, type InstanceShellInit, type InstanceShellInternals, type InstanceWsTier, type ResolvedMcpConfig, type RpcWireCodec, type StartedServer, createContextRpcServer, createInstanceShell, listLiveDevframeInstances, loadAutoMcpAdapter, normalizeBasePath, registerDevframeInstance, resolveBasePath, resolveInstanceRegister, resolveMcpConfig, samePath };

package/dist/internal/index.mjs

@@ -1,10 +1,10 @@
 import { t as resolveClientAssets } from "../client-assets-DNdhagGm.mjs";
-import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-BHGt0sSs.mjs";
+import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../wire-codec-B1W3zH3L.mjs";
 import { t as diagnostics } from "../diagnostics-DZA6KQ_Z.mjs";
-import { n as coerceAgentPositionalArgs, t as DevframeAgentHost } from "../host-agent-CKqSTEX9.mjs";
+import { n as coerceAgentPositionalArgs, r as toolInputToCommandArgs, t as DevframeAgentHost } from "../host-agent-C3MBpNCd.mjs";
 import { a as resolveMcpConfig, n as normalizeBasePath, r as resolveBasePath, s as importRuntimeModule, t as loadAutoMcpAdapter } from "../_shared-U8D-xzrp.mjs";
 import { t as createH3DevframeHost } from "../host-h3-BROI6SQ4.mjs";
 import { i as registerDevframeInstance, n as listLiveDevframeInstances } from "../instance-registry-DCq762YJ.mjs";
-import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-370Oee9K.mjs";
+import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, r as samePath, t as createInstanceShell } from "../instance-shell-yfrM3_vK.mjs";
 import { t as createContextRpcServer } from "../rpc-core-CvkU23bQ.mjs";
-export { DevframeAgentHost, coerceAgentPositionalArgs, createContextRpcServer, createH3DevframeHost, createInstanceShell, createRpcWireCodec, diagnostics, importRuntimeModule, listLiveDevframeInstances, loadAutoMcpAdapter, normalizeBasePath, normalizeHttpServerUrl, peekRpcWireFrame, registerDevframeInstance, resolveBasePath, resolveClientAssets, resolveInstanceRegister, resolveMcpConfig, samePath };
+export { DevframeAgentHost, coerceAgentPositionalArgs, createContextRpcServer, createH3DevframeHost, createInstanceShell, createRpcWireCodec, diagnostics, importRuntimeModule, listLiveDevframeInstances, loadAutoMcpAdapter, normalizeBasePath, normalizeHttpServerUrl, peekRpcWireFrame, registerDevframeInstance, resolveBasePath, resolveClientAssets, resolveInstanceRegister, resolveMcpConfig, samePath, toolInputToCommandArgs };

package/dist/node/auth.d.mts

@@ -1,3 +1,3 @@
-import { Tt as DevframeAuthHandler } from "../context-DLzIyQCZ.mjs";
-import { a as getTempAuthCodeInfo, c as revokeActiveConnectionsForToken, i as getTempAuthCode, l as revokeAuthToken, n as describeUA, o as refreshTempAuthCode, r as exchangeTempAuthCode, s as verifyAuthToken, t as buildOtpAuthUrl } from "../index-Ces7aTOQ.mjs";
+import { Tt as DevframeAuthHandler } from "../context-BLHBDQcZ.mjs";
+import { a as getTempAuthCodeInfo, c as revokeActiveConnectionsForToken, i as getTempAuthCode, l as revokeAuthToken, n as describeUA, o as refreshTempAuthCode, r as exchangeTempAuthCode, s as verifyAuthToken, t as buildOtpAuthUrl } from "../index-r6NstVmM.mjs";
 export { DevframeAuthHandler, buildOtpAuthUrl, describeUA, exchangeTempAuthCode, getTempAuthCode, getTempAuthCodeInfo, refreshTempAuthCode, revokeActiveConnectionsForToken, revokeAuthToken, verifyAuthToken };

package/dist/node/hub-internals.d.mts

@@ -1,3 +1,3 @@
-import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-3y_PeZKl.mjs";
-import { a as resolveBasePath, i as normalizeBasePath } from "../_shared-CkLpdx6I.mjs";
+import { a as internalContextMap, i as getInternalContext, n as InternalAnonymousAuthStorage, r as RemoteTokenRecord, t as DevframeInternalContext } from "../context-BA5FPz7K.mjs";
+import { a as resolveBasePath, i as normalizeBasePath } from "../_shared-BIUet_Jh.mjs";
 export { type DevframeInternalContext, type InternalAnonymousAuthStorage, type RemoteTokenRecord, getInternalContext, internalContextMap, normalizeBasePath, resolveBasePath };

package/dist/node/index.d.mts

@@ -1,6 +1,6 @@
-import "../index-pIVt92jP.mjs";
-import { v as RpcFunctionDefinitionAny } from "../types-Dq4i156u.mjs";
-import { k as SharedState, l as RpcFunctionsHost, o as DevframeNodeContext, xt as DevframeHost } from "../context-DLzIyQCZ.mjs";
+import "../index-CiA6C705.mjs";
+import { v as RpcFunctionDefinitionAny } from "../types-D2vGd7-2.mjs";
+import { k as SharedState, l as RpcFunctionsHost, o as DevframeNodeContext, xt as DevframeHost } from "../context-BLHBDQcZ.mjs";
 import { BirpcGroup } from "birpc";
 //#region src/node/context.d.ts
 export interface CreateHostContextOptions {

package/dist/node/index.mjs

@@ -1,3 +1,3 @@
-import { t as createHostContext } from "../context-Cdj9z9m2.mjs";
+import { t as createHostContext } from "../context-BLXXjoBW.mjs";
 import { t as createStorage } from "../storage-B70AXK64.mjs";
 export { createHostContext, createStorage };

package/dist/{origin-DGDH8BI9.d.mts → origin-CY6BBHOy.d.mts}

@@ -22,6 +22,19 @@
  * those DNS names.
  */
 declare function isLoopbackHostname(hostname: string): boolean;
+/**
+ * Whether `address` is a loopback peer address as reported by a socket
+ * (`net.Socket.remoteAddress`): the IPv6 loopback `::1`, an IPv4 literal in
+ * `127.0.0.0/8`, or an IPv4-mapped IPv6 form of one (`::ffff:127.0.0.1`).
+ *
+ * Unlike {@link isLoopbackHostname} this takes a raw address, not a hostname:
+ * it never accepts a `localhost`-style name (a socket peer is always a literal
+ * address) and understands the IPv4-mapped IPv6 form the OS hands back on a
+ * dual-stack listener. Used to prove a same-machine caller from the connected
+ * peer, which a client cannot forge, rather than from the `Origin` header,
+ * which it can.
+ */
+declare function isLoopbackAddress(address: string): boolean;
 /**
  * Default origin policy for a localhost dev tool: allow requests with no
  * `Origin` header (native, non-browser clients), allow any loopback origin
@@ -42,4 +55,4 @@ declare function isAllowedOrigin(origin: string | undefined, allowedOrigins: rea
  */
 declare function validateOriginCandidate(candidate: string, allowedOrigins?: readonly string[]): string | undefined;
 //#endregion
-export { isLoopbackHostname as n, validateOriginCandidate as r, isAllowedOrigin as t };
+export { validateOriginCandidate as i, isLoopbackAddress as n, isLoopbackHostname as r, isAllowedOrigin as t };

package/dist/{origin-DZit9g29.mjs → origin-D_eBKEzr.mjs}

@@ -26,6 +26,26 @@ function isLoopbackHostname(hostname) {
 	if (h === "localhost" || h.endsWith(".localhost") || h === "::1") return true;
 	return isLoopbackIPv4(h);
 }
+/**
+* Whether `address` is a loopback peer address as reported by a socket
+* (`net.Socket.remoteAddress`): the IPv6 loopback `::1`, an IPv4 literal in
+* `127.0.0.0/8`, or an IPv4-mapped IPv6 form of one (`::ffff:127.0.0.1`).
+*
+* Unlike {@link isLoopbackHostname} this takes a raw address, not a hostname:
+* it never accepts a `localhost`-style name (a socket peer is always a literal
+* address) and understands the IPv4-mapped IPv6 form the OS hands back on a
+* dual-stack listener. Used to prove a same-machine caller from the connected
+* peer, which a client cannot forge, rather than from the `Origin` header,
+* which it can.
+*/
+function isLoopbackAddress(address) {
+	let h = address.trim().replace(/^\[|\]$/g, "");
+	const zone = h.indexOf("%");
+	if (zone !== -1) h = h.slice(0, zone);
+	if (h === "::1") return true;
+	const mapped = /^::ffff:(.+)$/i.exec(h);
+	return isLoopbackIPv4(mapped ? mapped[1] : h);
+}
 /** A canonical dotted-decimal IPv4 literal in `127.0.0.0/8`. */
 function isLoopbackIPv4(hostname) {
 	const octets = hostname.split(".");
@@ -77,4 +97,4 @@ function validateOriginCandidate(candidate, allowedOrigins) {
 	if (isLoopbackHostname(url.hostname) || allowedOrigins?.includes(canonical)) return canonical;
 }
 //#endregion
-export { isLoopbackHostname as n, validateOriginCandidate as r, isAllowedOrigin as t };
+export { validateOriginCandidate as i, isLoopbackAddress as n, isLoopbackHostname as r, isAllowedOrigin as t };

package/dist/recipes/common-rpc-functions.d.mts

@@ -1,6 +1,5 @@
-import "../index-pIVt92jP.mjs";
-import { E as Thenable, S as RpcFunctionSetupResult, c as RpcDump, g as RpcFunctionAgentOptions } from "../types-Dq4i156u.mjs";
-import "../context-DLzIyQCZ.mjs";
+import "../index-CiA6C705.mjs";
+import { S as RpcFunctionDefinitionWithSchemas } from "../types-D2vGd7-2.mjs";
 import { SimpleSchema } from "../utils/simple-schema.mjs";
 //#region src/recipes/common-rpc-functions.d.ts
 /**
@@ -38,21 +37,7 @@ export declare const KNOWN_EDITORS: KnownEditor[];
  * host-level installation shared by every plugin and feature-detectable from
  * clients, with workspace-root path containment on top of the editor gating.
  */
-export declare const openInEditor: {
-  name: "devframe:open-in-editor";
-  type?: "action" | undefined;
-  cacheable?: boolean;
-  args: readonly [SimpleSchema<string, string>, SimpleSchema<KnownEditor | undefined, KnownEditor | undefined>];
-  returns: SimpleSchema<void, void>;
-  jsonSerializable?: boolean;
-  agent?: RpcFunctionAgentOptions;
-  setup?: ((context: undefined) => Thenable<RpcFunctionSetupResult<[string, KnownEditor | undefined], Thenable<void>>>) | undefined;
-  handler?: ((args_0: string, args_1: KnownEditor | undefined) => Thenable<void>) | undefined;
-  dump?: RpcDump<[string, KnownEditor | undefined], Thenable<void>, undefined> | undefined;
-  snapshot?: boolean;
-  __cache?: WeakMap<object, Thenable<RpcFunctionSetupResult<[string, KnownEditor | undefined], Thenable<void>>>> | undefined;
-  __promise?: Thenable<RpcFunctionSetupResult<[string, KnownEditor | undefined], Thenable<void>>> | undefined;
-};
+export declare const openInEditor: RpcFunctionDefinitionWithSchemas<"devframe:open-in-editor", "action", readonly [SimpleSchema<string, string>, SimpleSchema<KnownEditor | undefined, KnownEditor | undefined>], SimpleSchema<void, void>, undefined>;
 /**
  * Prebuilt RPC action that reveals a path in the OS file explorer.
  *
@@ -68,21 +53,7 @@ export declare const openInEditor: {
  * host-level installation shared by every plugin and feature-detectable from
  * clients, with workspace-root path containment.
  */
-export declare const openInFinder: {
-  name: "devframe:open-in-finder";
-  type?: "action" | undefined;
-  cacheable?: boolean;
-  args: readonly [SimpleSchema<string, string>];
-  returns: SimpleSchema<void, void>;
-  jsonSerializable?: boolean;
-  agent?: RpcFunctionAgentOptions;
-  setup?: ((context: undefined) => Thenable<RpcFunctionSetupResult<[string], Thenable<void>>>) | undefined;
-  handler?: ((args_0: string) => Thenable<void>) | undefined;
-  dump?: RpcDump<[string], Thenable<void>, undefined> | undefined;
-  snapshot?: boolean;
-  __cache?: WeakMap<object, Thenable<RpcFunctionSetupResult<[string], Thenable<void>>>> | undefined;
-  __promise?: Thenable<RpcFunctionSetupResult<[string], Thenable<void>>> | undefined;
-};
+export declare const openInFinder: RpcFunctionDefinitionWithSchemas<"devframe:open-in-finder", "action", readonly [SimpleSchema<string, string>], SimpleSchema<void, void>, undefined>;
 /**
  * Convenience array bundling both helpers so callers can register them
  * in a single `forEach`.
@@ -95,33 +66,5 @@ export declare const openInFinder: {
  *
  * @deprecated Use the `@devframes/service-open` wire service instead.
  */
-export declare const commonRpcFunctions: readonly [{
-  name: "devframe:open-in-editor";
-  type?: "action" | undefined;
-  cacheable?: boolean;
-  args: readonly [SimpleSchema<string, string>, SimpleSchema<KnownEditor | undefined, KnownEditor | undefined>];
-  returns: SimpleSchema<void, void>;
-  jsonSerializable?: boolean;
-  agent?: RpcFunctionAgentOptions;
-  setup?: ((context: undefined) => Thenable<RpcFunctionSetupResult<[string, KnownEditor | undefined], Thenable<void>>>) | undefined;
-  handler?: ((args_0: string, args_1: KnownEditor | undefined) => Thenable<void>) | undefined;
-  dump?: RpcDump<[string, KnownEditor | undefined], Thenable<void>, undefined> | undefined;
-  snapshot?: boolean;
-  __cache?: WeakMap<object, Thenable<RpcFunctionSetupResult<[string, KnownEditor | undefined], Thenable<void>>>> | undefined;
-  __promise?: Thenable<RpcFunctionSetupResult<[string, KnownEditor | undefined], Thenable<void>>> | undefined;
-}, {
-  name: "devframe:open-in-finder";
-  type?: "action" | undefined;
-  cacheable?: boolean;
-  args: readonly [SimpleSchema<string, string>];
-  returns: SimpleSchema<void, void>;
-  jsonSerializable?: boolean;
-  agent?: RpcFunctionAgentOptions;
-  setup?: ((context: undefined) => Thenable<RpcFunctionSetupResult<[string], Thenable<void>>>) | undefined;
-  handler?: ((args_0: string) => Thenable<void>) | undefined;
-  dump?: RpcDump<[string], Thenable<void>, undefined> | undefined;
-  snapshot?: boolean;
-  __cache?: WeakMap<object, Thenable<RpcFunctionSetupResult<[string], Thenable<void>>>> | undefined;
-  __promise?: Thenable<RpcFunctionSetupResult<[string], Thenable<void>>> | undefined;
-}];
+export declare const commonRpcFunctions: readonly [RpcFunctionDefinitionWithSchemas<"devframe:open-in-editor", "action", readonly [SimpleSchema<string, string>, SimpleSchema<KnownEditor | undefined, KnownEditor | undefined>], SimpleSchema<void, void>, undefined>, RpcFunctionDefinitionWithSchemas<"devframe:open-in-finder", "action", readonly [SimpleSchema<string, string>], SimpleSchema<void, void>, undefined>];
 //#endregion

package/dist/recipes/interactive-auth.d.mts

@@ -1,5 +1,5 @@
-import { Tt as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "../context-DLzIyQCZ.mjs";
-import "../index-Ces7aTOQ.mjs";
+import { Tt as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "../context-BLHBDQcZ.mjs";
+import "../index-r6NstVmM.mjs";
 import { ColorFn } from "../utils/colors.mjs";
 //#region src/recipes/interactive-auth.d.ts
 export interface CreateInteractiveAuthOptions {

package/dist/{remote-assets-DMFzLSoH.mjs → remote-assets-D0StJVLp.mjs}

@@ -8,7 +8,7 @@ import { createReadStream, existsSync } from "node:fs";
 import { Buffer } from "node:buffer";
 import { Readable } from "node:stream";
 import { lookup } from "mrmime";
-//#region ../../node_modules/.pnpm/obug@2.1.4/node_modules/obug/dist/core.js
+//#region ../../node_modules/.pnpm/obug@3.0.0/node_modules/obug/dist/core.js
 /**
 * Coerce `value`.
 */
@@ -37,15 +37,16 @@ function matchesTemplate(search, template) {
 	let templateIndex = 0;
 	let starIndex = -1;
 	let matchIndex = 0;
-	while (searchIndex < search.length) if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) if (template[templateIndex] === "*") {
-		starIndex = templateIndex;
-		matchIndex = searchIndex;
-		templateIndex++;
-	} else {
-		searchIndex++;
-		templateIndex++;
-	}
-	else if (starIndex !== -1) {
+	while (searchIndex < search.length) if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
+		if (template[templateIndex] === "*") {
+			starIndex = templateIndex;
+			matchIndex = searchIndex;
+			templateIndex++;
+		} else {
+			searchIndex++;
+			templateIndex++;
+		}
+	} else if (starIndex !== -1) {
 		templateIndex = starIndex + 1;
 		matchIndex++;
 		searchIndex = matchIndex;
@@ -63,7 +64,7 @@ function createDebug$1(namespace, options) {
 	let enableOverride;
 	let namespacesCache;
 	let enabledCache;
-	const debug = (...args) => {
+	const debug = ((...args) => {
 		if (!debug.enabled) return;
 		const curr = Date.now();
 		const diff = curr - (prevTime || curr);
@@ -85,7 +86,7 @@ function createDebug$1(namespace, options) {
 		});
 		options.formatArgs.call(debug, diff, args);
 		debug.log(...args);
-	};
+	});
 	debug.extend = function(namespace, delimiter = ":") {
 		return createDebug$1(this.namespace + delimiter + namespace, {
 			useColors: this.useColors,
@@ -135,7 +136,7 @@ function enabled(name) {
 	return false;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/obug@2.1.4/node_modules/obug/dist/node.js
+//#region ../../node_modules/.pnpm/obug@3.0.0/node_modules/obug/dist/ansi.js
 let env = {};
 try {
 	process.env.DEBUG;
@@ -254,10 +255,10 @@ function formatArgs(diff, args) {
 	const { namespace: name, useColors } = this;
 	if (useColors) {
 		const c = this.color;
-		const colorCode = `\u001B[3${c < 8 ? c : `8;5;${c}`}`;
-		const prefix = `  ${colorCode};1m${name} \u001B[0m`;
+		const colorCode = `\u{1B}[3${c < 8 ? c : `8;5;${c}`}`;
+		const prefix = `  ${colorCode};1m${name} \u{1B}[0m`;
 		args[0] = prefix + args[0].split("\n").join(`\n${prefix}`);
-		args.push(`${colorCode}m+${this.humanize(diff)}\u001B[0m`);
+		args.push(`${colorCode}m+${this.humanize(diff)}\u{1B}[0m`);
 	} else args[0] = `${getDate()}${name} ${args[0]}`;
 }
 function log(...args) {

package/dist/rpc/dump.d.mts

@@ -1,4 +1,4 @@
-import { h as RpcDumpStore, l as RpcDumpClientOptions, m as RpcDumpRecordError, n as BirpcReturn, o as RpcDefinitionsToFunctions, u as RpcDumpCollectionOptions, v as RpcFunctionDefinitionAny } from "../types-Dq4i156u.mjs";
+import { h as RpcDumpStore, l as RpcDumpClientOptions, m as RpcDumpRecordError, n as BirpcReturn, o as RpcDefinitionsToFunctions, u as RpcDumpCollectionOptions, v as RpcFunctionDefinitionAny } from "../types-D2vGd7-2.mjs";
 //#region src/rpc/dump/collect.d.ts
 export declare function dumpFunctions<T extends readonly RpcFunctionDefinitionAny[]>(definitions: T, context?: any, options?: RpcDumpCollectionOptions): Promise<RpcDumpStore<RpcDefinitionsToFunctions<T>>>;
 /**

package/dist/rpc/dump.mjs

@@ -1,2 +1,2 @@
-import { a as getDefinitionsWithDumps, i as dumpFunctions, n as collectStaticRpcDump, o as reviveDumpError, r as createClientFromDump, s as serializeDumpError, t as writeStaticRpcDump } from "../write-D2AJqVT8.mjs";
+import { a as getDefinitionsWithDumps, i as dumpFunctions, n as collectStaticRpcDump, o as reviveDumpError, r as createClientFromDump, s as serializeDumpError, t as writeStaticRpcDump } from "../write-DoXJzGUH.mjs";
 export { collectStaticRpcDump, createClientFromDump, dumpFunctions, getDefinitionsWithDumps, reviveDumpError, serializeDumpError, writeStaticRpcDump };

package/dist/rpc/index.d.mts

@@ -1,3 +1,3 @@
-import { a as STRUCTURED_CLONE_PREFIX, c as getRpcResolvedSetupResult, d as RpcFunctionsCollectorBase, f as RpcCacheManager, i as validateRpcReturn, l as createDefineWrapperWithContext, n as validateDefinitions, o as strictJsonStringify, p as RpcCacheOptions, r as validateRpcArgs, s as getRpcHandler, t as validateDefinition, u as defineRpcFunction } from "../index-pIVt92jP.mjs";
-import { C as RpcFunctionType, E as Thenable, S as RpcFunctionSetupResult, T as RpcReturnSchema, _ as RpcFunctionDefinition, a as RpcDefinitionsFilter, b as RpcFunctionDefinitionBase, c as RpcDump, d as RpcDumpDefinition, f as RpcDumpGetter, g as RpcFunctionAgentOptions, h as RpcDumpStore, i as RpcArgsSchema, l as RpcDumpClientOptions, m as RpcDumpRecordError, n as BirpcReturn, o as RpcDefinitionsToFunctions, p as RpcDumpRecord, r as EntriesToObject, s as RpcDefinitionsToFunctionsWithNamespace, t as BirpcFn, u as RpcDumpCollectionOptions, v as RpcFunctionDefinitionAny, w as RpcFunctionsCollector, x as RpcFunctionDefinitionToFunction, y as RpcFunctionDefinitionAnyWithContext } from "../types-Dq4i156u.mjs";
-export { type BirpcFn, type BirpcReturn, EntriesToObject, RpcArgsSchema, RpcCacheManager, RpcCacheOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcDefinitionsToFunctionsWithNamespace, RpcDump, RpcDumpClientOptions, RpcDumpCollectionOptions, RpcDumpDefinition, RpcDumpGetter, RpcDumpRecord, RpcDumpRecordError, RpcDumpStore, RpcFunctionAgentOptions, RpcFunctionDefinition, RpcFunctionDefinitionAny, RpcFunctionDefinitionAnyWithContext, RpcFunctionDefinitionBase, RpcFunctionDefinitionToFunction, RpcFunctionSetupResult, RpcFunctionType, RpcFunctionsCollector, RpcFunctionsCollectorBase, RpcReturnSchema, STRUCTURED_CLONE_PREFIX, Thenable, createDefineWrapperWithContext, defineRpcFunction, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions, validateRpcArgs, validateRpcReturn };
+import { a as STRUCTURED_CLONE_PREFIX, c as getRpcResolvedSetupResult, d as RpcFunctionsCollectorBase, f as RpcCacheManager, i as validateRpcReturn, l as createDefineWrapperWithContext, n as validateDefinitions, o as strictJsonStringify, p as RpcCacheOptions, r as validateRpcArgs, s as getRpcHandler, t as validateDefinition, u as defineRpcFunction } from "../index-CiA6C705.mjs";
+import { C as RpcFunctionDefinitionWithoutSchemas, D as RpcReturnSchema, E as RpcFunctionsCollector, O as Thenable, S as RpcFunctionDefinitionWithSchemas, T as RpcFunctionType, _ as RpcFunctionDefinition, a as RpcDefinitionsFilter, b as RpcFunctionDefinitionBase, c as RpcDump, d as RpcDumpDefinition, f as RpcDumpGetter, g as RpcFunctionAgentOptions, h as RpcDumpStore, i as RpcArgsSchema, l as RpcDumpClientOptions, m as RpcDumpRecordError, n as BirpcReturn, o as RpcDefinitionsToFunctions, p as RpcDumpRecord, r as EntriesToObject, s as RpcDefinitionsToFunctionsWithNamespace, t as BirpcFn, u as RpcDumpCollectionOptions, v as RpcFunctionDefinitionAny, w as RpcFunctionSetupResult, x as RpcFunctionDefinitionToFunction, y as RpcFunctionDefinitionAnyWithContext } from "../types-D2vGd7-2.mjs";
+export { type BirpcFn, type BirpcReturn, EntriesToObject, RpcArgsSchema, RpcCacheManager, RpcCacheOptions, RpcDefinitionsFilter, RpcDefinitionsToFunctions, RpcDefinitionsToFunctionsWithNamespace, RpcDump, RpcDumpClientOptions, RpcDumpCollectionOptions, RpcDumpDefinition, RpcDumpGetter, RpcDumpRecord, RpcDumpRecordError, RpcDumpStore, RpcFunctionAgentOptions, RpcFunctionDefinition, RpcFunctionDefinitionAny, RpcFunctionDefinitionAnyWithContext, RpcFunctionDefinitionBase, RpcFunctionDefinitionToFunction, RpcFunctionDefinitionWithSchemas, RpcFunctionDefinitionWithoutSchemas, RpcFunctionSetupResult, RpcFunctionType, RpcFunctionsCollector, RpcFunctionsCollectorBase, RpcReturnSchema, STRUCTURED_CLONE_PREFIX, Thenable, createDefineWrapperWithContext, defineRpcFunction, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions, validateRpcArgs, validateRpcReturn };

package/dist/rpc/index.mjs

@@ -1,5 +1,5 @@
-import { a as validateRpcArgs, i as getRpcResolvedSetupResult, n as validateDefinitions, o as validateRpcReturn, r as getRpcHandler, s as hash, t as validateDefinition } from "../validation-CfV1s0SF.mjs";
-import { n as strictJsonStringify, r as diagnostics, t as STRUCTURED_CLONE_PREFIX } from "../serialization-DFg5sUt6.mjs";
+import { a as validateRpcArgs, c as hash, i as getRpcResolvedSetupResult, n as validateDefinitions, o as validateRpcReturn, r as getRpcHandler, s as ensureAgentJsonSerializable, t as validateDefinition } from "../validation-BzxTTYaV.mjs";
+import { n as strictJsonStringify, r as diagnostics, t as STRUCTURED_CLONE_PREFIX } from "../serialization-BhuOoL80.mjs";
 import { n as defineRpcFunction, t as createDefineWrapperWithContext } from "../define-BLWPsH6y.mjs";
 //#region src/rpc/cache.ts
 /**
@@ -71,15 +71,15 @@ var RpcFunctionsCollectorBase = class {
 			}
 		});
 	}
-	register(fn, force = false) {
-		if (this.definitions.has(fn.name) && !force) throw diagnostics.DF0021({ name: fn.name });
-		assertAgentJsonSerializable(fn);
-		this.definitions.set(fn.name, fn);
-		this._onChanged.forEach((cb) => cb(fn.name));
+	register(fnDef, force = false) {
+		if (this.definitions.has(fnDef.name) && !force) throw diagnostics.DF0021({ name: fnDef.name });
+		ensureAgentJsonSerializable(fnDef);
+		this.definitions.set(fnDef.name, fnDef);
+		this._onChanged.forEach((cb) => cb(fnDef.name));
 	}
 	update(fn, force = false) {
 		if (!this.definitions.has(fn.name) && !force) throw diagnostics.DF0022({ name: fn.name });
-		assertAgentJsonSerializable(fn);
+		ensureAgentJsonSerializable(fn);
 		this.definitions.set(fn.name, fn);
 		this._onChanged.forEach((cb) => cb(fn.name));
 	}
@@ -111,8 +111,5 @@ var RpcFunctionsCollectorBase = class {
 		return Array.from(this.definitions.keys());
 	}
 };
-function assertAgentJsonSerializable(fn) {
-	if (fn.agent && fn.jsonSerializable !== true) throw diagnostics.DF0019({ name: fn.name });
-}
 //#endregion
 export { RpcCacheManager, RpcFunctionsCollectorBase, STRUCTURED_CLONE_PREFIX, createDefineWrapperWithContext, defineRpcFunction, getRpcHandler, getRpcResolvedSetupResult, strictJsonStringify, validateDefinition, validateDefinitions, validateRpcArgs, validateRpcReturn };

package/dist/rpc/transports/sse-client.d.mts

@@ -1,2 +1,2 @@
-import { n as createSseRpcChannel, t as SseRpcChannelOptions } from "../../sse-client-BQ4jS3eO.mjs";
+import { n as createSseRpcChannel, t as SseRpcChannelOptions } from "../../sse-client-BcbYwXdD.mjs";
 export { SseRpcChannelOptions, createSseRpcChannel };

package/dist/rpc/transports/sse-client.mjs

@@ -1,5 +1,5 @@
 import { DEVFRAME_AUTH_TOKEN_QUERY_PARAM, DEVFRAME_SSE_SESSION_HEADER } from "../../constants.mjs";
-import { t as createRpcWireCodec } from "../../wire-codec-BHGt0sSs.mjs";
+import { t as createRpcWireCodec } from "../../wire-codec-B1W3zH3L.mjs";
 //#region src/rpc/transports/sse-client.ts
 function NOOP() {}
 /** Split the next complete SSE frame (up to a blank line) off the buffer. */

package/dist/rpc/transports/sse-server.d.mts

@@ -1,6 +1,6 @@
-import { v as RpcFunctionDefinitionAny } from "../../types-Dq4i156u.mjs";
+import { v as RpcFunctionDefinitionAny } from "../../types-D2vGd7-2.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "../../session-r6PDixP6.mjs";
-import { n as WsOriginRegistry } from "../../ws-server-9ztvkeJ0.mjs";
+import { n as WsOriginRegistry } from "../../ws-server-BB8jhxeT.mjs";
 import { BirpcGroup } from "birpc";
 //#region src/rpc/transports/sse-server.d.ts
 export interface SseRpcTransportOptions {

package/dist/rpc/transports/sse-server.mjs

@@ -1,6 +1,6 @@
 import { DEVFRAME_SSE_SESSION_HEADER } from "../../constants.mjs";
-import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../../wire-codec-BHGt0sSs.mjs";
-import { t as isAllowedOrigin } from "../../origin-DZit9g29.mjs";
+import { n as peekRpcWireFrame, t as createRpcWireCodec } from "../../wire-codec-B1W3zH3L.mjs";
+import { t as isAllowedOrigin } from "../../origin-D_eBKEzr.mjs";
 import { t as createRpcSessionMeta } from "../../session-DPfj6zQG.mjs";
 //#region src/rpc/transports/sse-server.ts
 const SSE_STREAM_HEADERS = {

package/dist/rpc/transports/ws-bun.d.mts

@@ -1,5 +1,5 @@
-import { n as WsOriginRegistry } from "../../ws-server-9ztvkeJ0.mjs";
-import { t as ContextRpcServer } from "../../rpc-core-Clo3kHfo.mjs";
+import { n as WsOriginRegistry } from "../../ws-server-BB8jhxeT.mjs";
+import { t as ContextRpcServer } from "../../rpc-core-BlL-Ip8n.mjs";
 //#region src/rpc/transports/ws-bun.d.ts
 export interface AttachBunWsTransportOptions {
   /** Same contract as `WsRpcTransportOptions.allowedOrigins`. */

package/dist/rpc/transports/ws-bun.mjs

@@ -1,4 +1,4 @@
-import { t as isAllowedOrigin } from "../../origin-DZit9g29.mjs";
+import { t as isAllowedOrigin } from "../../origin-D_eBKEzr.mjs";
 import { createWsRpcPeerHooks } from "./ws-server.mjs";
 //#region src/rpc/transports/ws-bun.ts
 /**

package/dist/rpc/transports/ws-client.d.mts

@@ -1,2 +1,2 @@
-import { n as createWsRpcChannel, t as WsRpcChannelOptions } from "../../ws-client-Xpxt0oPA.mjs";
+import { n as createWsRpcChannel, t as WsRpcChannelOptions } from "../../ws-client-CNpP6Ium.mjs";
 export { WsRpcChannelOptions, createWsRpcChannel };

package/dist/rpc/transports/ws-client.mjs

@@ -1,5 +1,5 @@
 import { DEVFRAME_AUTH_TOKEN_QUERY_PARAM } from "../../constants.mjs";
-import { t as createRpcWireCodec } from "../../wire-codec-BHGt0sSs.mjs";
+import { t as createRpcWireCodec } from "../../wire-codec-B1W3zH3L.mjs";
 //#region src/rpc/transports/ws-client.ts
 function NOOP() {}
 const EMPTY_DEFS = /* @__PURE__ */ new Map();

package/dist/rpc/transports/ws-deno.d.mts

@@ -1,5 +1,5 @@
-import { n as WsOriginRegistry } from "../../ws-server-9ztvkeJ0.mjs";
-import { t as ContextRpcServer } from "../../rpc-core-Clo3kHfo.mjs";
+import { n as WsOriginRegistry } from "../../ws-server-BB8jhxeT.mjs";
+import { t as ContextRpcServer } from "../../rpc-core-BlL-Ip8n.mjs";
 //#region src/rpc/transports/ws-deno.d.ts
 export interface AttachDenoWsTransportOptions {
   /** Same contract as `WsRpcTransportOptions.allowedOrigins`. */

package/dist/rpc/transports/ws-deno.mjs

@@ -1,4 +1,4 @@
-import { t as isAllowedOrigin } from "../../origin-DZit9g29.mjs";
+import { t as isAllowedOrigin } from "../../origin-D_eBKEzr.mjs";
 import { createWsRpcPeerHooks } from "./ws-server.mjs";
 //#region src/rpc/transports/ws-deno.ts
 /**

package/dist/rpc/transports/ws-server.d.mts

@@ -1,4 +1,4 @@
 import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "../../session-r6PDixP6.mjs";
-import { n as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-DGDH8BI9.mjs";
-import { a as attachWsRpcTransport, i as WsRpcTransportOptions, n as WsOriginRegistry, o as createWsOriginRegistry, r as WsRpcTransport, s as createWsRpcPeerHooks, t as CreateWsOriginRegistryOptions } from "../../ws-server-9ztvkeJ0.mjs";
+import { r as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-CY6BBHOy.mjs";
+import { a as attachWsRpcTransport, i as WsRpcTransportOptions, n as WsOriginRegistry, o as createWsOriginRegistry, r as WsRpcTransport, s as createWsRpcPeerHooks, t as CreateWsOriginRegistryOptions } from "../../ws-server-BB8jhxeT.mjs";
 export { CreateWsOriginRegistryOptions, type DevframeNodeRpcSessionMeta, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcTransportKind, type DevframeWsPeer, WsOriginRegistry, WsRpcTransport, WsRpcTransportOptions, attachWsRpcTransport, createWsOriginRegistry, createWsRpcPeerHooks, isAllowedOrigin, isLoopbackHostname };

package/dist/rpc/transports/ws-server.mjs

@@ -1,6 +1,6 @@
 import "../../constants.mjs";
-import { t as createRpcWireCodec } from "../../wire-codec-BHGt0sSs.mjs";
-import { n as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-DZit9g29.mjs";
+import { t as createRpcWireCodec } from "../../wire-codec-B1W3zH3L.mjs";
+import { r as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-D_eBKEzr.mjs";
 import { t as createRpcSessionMeta } from "../../session-DPfj6zQG.mjs";
 import { n as randomToken, r as timingSafeEqual } from "../../crypto-token-TVbGGFuj.mjs";
 import { createServer } from "node:http";

package/dist/{rpc-core-Clo3kHfo.d.mts → rpc-core-BlL-Ip8n.d.mts}

@@ -1,7 +1,7 @@
-import { Tt as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession, vt as DevframeRpcClientFunctions, yt as DevframeRpcServerFunctions } from "./context-DLzIyQCZ.mjs";
+import { Tt as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession, vt as DevframeRpcClientFunctions, yt as DevframeRpcServerFunctions } from "./context-BLHBDQcZ.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
-import "./ws-server-9ztvkeJ0.mjs";
-import "./index-Ces7aTOQ.mjs";
+import "./ws-server-BB8jhxeT.mjs";
+import "./index-r6NstVmM.mjs";
 import { BirpcGroup, EventOptions } from "birpc";
 //#region src/node/rpc-core.d.ts
 interface CreateContextRpcServerOptions {

package/dist/{serialization-DFg5sUt6.mjs → serialization-BhuOoL80.mjs}

@@ -4,8 +4,8 @@ const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
 	codes: {
 		DF0019: {
-			why: (p) => `RPC function "${p.name}" has \`agent\` set but \`jsonSerializable\` is not \`true\`; MCP requires JSON-serializable data.`,
-			fix: "Set `jsonSerializable: true` if the payload is JSON-safe, or remove `agent` to keep it RPC-only."
+			why: (p) => `RPC function "${p.name}" has \`agent\` set but \`jsonSerializable\` is \`false\`; MCP requires JSON-serializable data.`,
+			fix: "Remove `jsonSerializable: false`, or remove `agent` to keep it RPC-only."
 		},
 		DF0020: {
 			why: (p) => `RPC function "${p.name}" declares \`jsonSerializable: true\` but the value at "${p.path}" is a ${p.type}.`,