devframe 0.9.19 → 0.10.0

package/dist/utils/launch-editor.mjs

@@ -707,6 +707,41 @@ var import_launch_editor = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMi
 	}
 	module.exports = launchEditor;
 })))(), 1);
+/** Runtime list of every {@link KnownEditor}. */
+const KNOWN_EDITORS = [
+	"atom",
+	"subl",
+	"sublime",
+	"sublime_text",
+	"wstorm",
+	"charm",
+	"zed",
+	"notepad++",
+	"vim",
+	"mvim",
+	"joe",
+	"gvim",
+	"emacs",
+	"emacsclient",
+	"rmate",
+	"mate",
+	"code",
+	"code-insiders",
+	"codium",
+	"vscodium",
+	"trae",
+	"antigravity",
+	"cursor",
+	"appcode",
+	"clion",
+	"idea",
+	"phpstorm",
+	"pycharm",
+	"rubymine",
+	"webstorm",
+	"goland",
+	"rider"
+];
 /**
 * Open a file in the user's editor.
 *
@@ -720,4 +755,4 @@ function launchEditor(target, editor) {
 	(0, import_launch_editor.default)(target, editor);
 }
 //#endregion
-export { launchEditor };
+export { KNOWN_EDITORS, launchEditor };

package/dist/utils/nostics.d.mts

@@ -1,2 +1,2 @@
-import { a as Diagnostic, c as DiagnosticHandle, d as Diagnostics, f as ansiFormatter, g as formatDiagnostic, h as defineProdDiagnostics, i as DevframeDefineDiagnosticsOptions, l as DiagnosticInit, m as defineDiagnostics, n as ConsoleMethod, o as DiagnosticCallParams, p as createConsoleReporter, r as ConsoleReporterOptions, s as DiagnosticDefinition, t as AnyDiagnosticReporter, u as DiagnosticReporter } from "../nostics-0sKe5HIj.mjs";
-export { type AnyDiagnosticReporter, type ConsoleMethod, type ConsoleReporterOptions, DevframeDefineDiagnosticsOptions, type Diagnostic, type DiagnosticCallParams, type DiagnosticDefinition, type DiagnosticHandle, type DiagnosticInit, type DiagnosticReporter, type Diagnostics, ansiFormatter, createConsoleReporter, defineDiagnostics, defineProdDiagnostics, formatDiagnostic };
+import { _ as formatDiagnostic, a as DevframeDiagnostics, c as DiagnosticDefinition, d as DiagnosticReporter, f as Diagnostics, g as defineProdDiagnostics, h as defineDiagnostics, i as DevframeDefineDiagnosticsOptions, l as DiagnosticHandle, m as createConsoleReporter, n as ConsoleMethod, o as Diagnostic, p as ansiFormatter, r as ConsoleReporterOptions, s as DiagnosticCallParams, t as AnyDiagnosticReporter, u as DiagnosticInit } from "../nostics-DWvukRwa.mjs";
+export { type AnyDiagnosticReporter, type ConsoleMethod, type ConsoleReporterOptions, DevframeDefineDiagnosticsOptions, DevframeDiagnostics, type Diagnostic, type DiagnosticCallParams, type DiagnosticDefinition, type DiagnosticHandle, type DiagnosticInit, type DiagnosticReporter, type Diagnostics, ansiFormatter, createConsoleReporter, defineDiagnostics, defineProdDiagnostics, formatDiagnostic };

package/dist/utils/origin.d.mts

@@ -1,2 +1,2 @@
-import { n as isLoopbackHostname, r as validateOriginCandidate, t as isAllowedOrigin } from "../origin-DGDH8BI9.mjs";
-export { isAllowedOrigin, isLoopbackHostname, validateOriginCandidate };
+import { i as validateOriginCandidate, n as isLoopbackAddress, r as isLoopbackHostname, t as isAllowedOrigin } from "../origin-CY6BBHOy.mjs";
+export { isAllowedOrigin, isLoopbackAddress, isLoopbackHostname, validateOriginCandidate };

package/dist/utils/origin.mjs

@@ -26,6 +26,26 @@ function isLoopbackHostname(hostname) {
 	if (h === "localhost" || h.endsWith(".localhost") || h === "::1") return true;
 	return isLoopbackIPv4(h);
 }
+/**
+* Whether `address` is a loopback peer address as reported by a socket
+* (`net.Socket.remoteAddress`): the IPv6 loopback `::1`, an IPv4 literal in
+* `127.0.0.0/8`, or an IPv4-mapped IPv6 form of one (`::ffff:127.0.0.1`).
+*
+* Unlike {@link isLoopbackHostname} this takes a raw address, not a hostname:
+* it never accepts a `localhost`-style name (a socket peer is always a literal
+* address) and understands the IPv4-mapped IPv6 form the OS hands back on a
+* dual-stack listener. Used to prove a same-machine caller from the connected
+* peer, which a client cannot forge, rather than from the `Origin` header,
+* which it can.
+*/
+function isLoopbackAddress(address) {
+	let h = address.trim().replace(/^\[|\]$/g, "");
+	const zone = h.indexOf("%");
+	if (zone !== -1) h = h.slice(0, zone);
+	if (h === "::1") return true;
+	const mapped = /^::ffff:(.+)$/i.exec(h);
+	return isLoopbackIPv4(mapped ? mapped[1] : h);
+}
 /** A canonical dotted-decimal IPv4 literal in `127.0.0.0/8`. */
 function isLoopbackIPv4(hostname) {
 	const octets = hostname.split(".");
@@ -77,4 +97,4 @@ function validateOriginCandidate(candidate, allowedOrigins) {
 	if (isLoopbackHostname(url.hostname) || allowedOrigins?.includes(canonical)) return canonical;
 }
 //#endregion
-export { isAllowedOrigin, isLoopbackHostname, validateOriginCandidate };
+export { isAllowedOrigin, isLoopbackAddress, isLoopbackHostname, validateOriginCandidate };

package/dist/utils/remote-assets.mjs

@@ -1,2 +1,2 @@
-import { t as resolveStaticAssetsSource } from "../remote-assets-D0StJVLp.mjs";
+import { t as resolveStaticAssetsSource } from "../remote-assets-B9MeWmW6.mjs";
 export { resolveStaticAssetsSource };

package/dist/utils/serve-static.mjs

@@ -1,9 +1,9 @@
 import { t as DEVFRAME_EVENTS } from "../events-BV4Dj59a.mjs";
+import { t as lookup } from "../mrmime-40h5OOIp.mjs";
 import { realpath, stat } from "node:fs/promises";
 import { extname, join, normalize, resolve, sep } from "pathe";
 import { createReadStream } from "node:fs";
 import { Readable } from "node:stream";
-import { lookup } from "mrmime";
 import { H3, defineHandler } from "h3";
 //#region src/utils/serve-static.ts
 const HTML_EXTENSIONS = [".html", ".htm"];

package/dist/utils/shared-state.d.mts

@@ -1,2 +1,2 @@
-import { A as SharedStateEvents, D as ImmutableObject, E as ImmutableMap, M as SharedStatePatch, N as createSharedState, O as ImmutableSet, T as ImmutableArray, j as SharedStateOptions, k as SharedState, w as Immutable } from "../context-BLHBDQcZ.mjs";
+import { A as SharedStateEvents, D as ImmutableObject, E as ImmutableMap, M as SharedStatePatch, N as createSharedState, O as ImmutableSet, T as ImmutableArray, j as SharedStateOptions, k as SharedState, w as Immutable } from "../context-CTAxz9ec.mjs";
 export { Immutable, ImmutableArray, ImmutableMap, ImmutableObject, ImmutableSet, SharedState, SharedStateEvents, SharedStateOptions, SharedStatePatch, createSharedState };

package/dist/utils/simple-schema.d.mts

@@ -1,4 +1,4 @@
-import { StandardSchemaV1 } from "@standard-schema/spec";
+import { t as StandardSchemaV1 } from "../index-CeEtxDmK.mjs";
 //#region src/utils/simple-schema.d.ts
 /**
  * A tiny, zero-dependency [Standard Schema](https://standardschema.dev/)
@@ -98,4 +98,5 @@ export declare const s: {
   readonly nullable: typeof nullable;
   readonly describe: typeof describe;
 };
-//#endregion
+//#endregion
+export type { StandardSchemaV1 };

package/dist/utils/streaming-channel.d.mts

@@ -1,2 +1,2 @@
-import { C as createStreamSink, S as createStreamReader, _ as CreateStreamSinkOptions, b as StreamSink, g as CreateStreamReaderOptions, h as BufferedChunk, v as StreamErrorPayload, x as StreamSinkEvents, y as StreamReader } from "../context-BLHBDQcZ.mjs";
+import { C as createStreamSink, S as createStreamReader, _ as CreateStreamSinkOptions, b as StreamSink, g as CreateStreamReaderOptions, h as BufferedChunk, v as StreamErrorPayload, x as StreamSinkEvents, y as StreamReader } from "../context-CTAxz9ec.mjs";
 export { BufferedChunk, CreateStreamReaderOptions, CreateStreamSinkOptions, StreamErrorPayload, StreamReader, StreamSink, StreamSinkEvents, createStreamReader, createStreamSink };

package/dist/utils/url.d.mts

@@ -0,0 +1,31 @@
+//#region src/utils/url.d.ts
+/**
+ * URL path-joining and slash-normalization helpers shared by the adapters,
+ * the RPC clients, and the hub's mount-path plumbing. In-house replacements
+ * for the handful of `ufo` functions devframe used, kept dependency-free and
+ * browser-safe (pure string operations, no `node:` imports).
+ */
+/** `input` with a leading `/` added when missing. */
+export declare function withLeadingSlash(input: string): string;
+/** `input` with a leading `/` removed; a bare `/` stays `/`. */
+export declare function withoutLeadingSlash(input: string): string;
+/** `input` with a trailing `/` added when missing. */
+export declare function withTrailingSlash(input: string): string;
+/** `input` with a trailing `/` removed; a bare `/` stays `/`. */
+export declare function withoutTrailingSlash(input: string): string;
+/** Collapses runs of `/` in every path portion, preserving `://`. */
+export declare function cleanDoubleSlashes(input: string): string;
+/**
+ * Joins path segments onto `base` with exactly one `/` at each seam.
+ * A segment's leading `/` or `./` is dropped; empty and bare-`/` segments
+ * are skipped; the last segment's trailing slash is preserved.
+ */
+export declare function joinURL(base: string, ...segments: string[]): string;
+/**
+ * Prefixes `input` with `base` unless it already carries the prefix or is an
+ * absolute URL with a protocol. An empty or `/` base is a no-op.
+ */
+export declare function withBase(input: string, base: string): string;
+/** Replaces (or adds) the protocol of `input`: `withProtocol(url, 'ws://')`. */
+export declare function withProtocol(input: string, protocol: string): string;
+//#endregion

package/dist/utils/url.mjs

@@ -0,0 +1,58 @@
+//#region src/utils/url.ts
+/**
+* URL path-joining and slash-normalization helpers shared by the adapters,
+* the RPC clients, and the hub's mount-path plumbing. In-house replacements
+* for the handful of `ufo` functions devframe used, kept dependency-free and
+* browser-safe (pure string operations, no `node:` imports).
+*/
+/** Matches an explicit protocol prefix: `http://`, `wss://`, `file://`, … */
+const PROTOCOL_RE = /^[\w+.-]{2,}:\/\//;
+/** `input` with a leading `/` added when missing. */
+function withLeadingSlash(input) {
+	return input.startsWith("/") ? input : `/${input}`;
+}
+/** `input` with a leading `/` removed; a bare `/` stays `/`. */
+function withoutLeadingSlash(input) {
+	return (input.startsWith("/") ? input.slice(1) : input) || "/";
+}
+/** `input` with a trailing `/` added when missing. */
+function withTrailingSlash(input) {
+	return input.endsWith("/") ? input : `${input}/`;
+}
+/** `input` with a trailing `/` removed; a bare `/` stays `/`. */
+function withoutTrailingSlash(input) {
+	return (input.endsWith("/") ? input.slice(0, -1) : input) || "/";
+}
+/** Collapses runs of `/` in every path portion, preserving `://`. */
+function cleanDoubleSlashes(input) {
+	return input.split("://").map((part) => part.replace(/\/{2,}/g, "/")).join("://");
+}
+/**
+* Joins path segments onto `base` with exactly one `/` at each seam.
+* A segment's leading `/` or `./` is dropped; empty and bare-`/` segments
+* are skipped; the last segment's trailing slash is preserved.
+*/
+function joinURL(base, ...segments) {
+	let url = base;
+	for (const segment of segments) {
+		if (!segment || segment === "/") continue;
+		url = url ? withTrailingSlash(url) + segment.replace(/^\.?\//, "") : segment;
+	}
+	return url;
+}
+/**
+* Prefixes `input` with `base` unless it already carries the prefix or is an
+* absolute URL with a protocol. An empty or `/` base is a no-op.
+*/
+function withBase(input, base) {
+	if (!base || base === "/" || PROTOCOL_RE.test(input)) return input;
+	const prefix = withoutTrailingSlash(base);
+	return input.startsWith(prefix) ? input : joinURL(prefix, input);
+}
+/** Replaces (or adds) the protocol of `input`: `withProtocol(url, 'ws://')`. */
+function withProtocol(input, protocol) {
+	const match = input.match(PROTOCOL_RE);
+	return protocol + (match ? input.slice(match[0].length) : input);
+}
+//#endregion
+export { cleanDoubleSlashes, joinURL, withBase, withLeadingSlash, withProtocol, withTrailingSlash, withoutLeadingSlash, withoutTrailingSlash };

package/dist/{ws-client-CNpP6Ium.d.mts → ws-client-6Mrz6eC4.d.mts}

@@ -1,5 +1,5 @@
-import { v as RpcFunctionDefinitionAny } from "./types-D2vGd7-2.mjs";
-import { ChannelOptions } from "birpc";
+import { a as ChannelOptions } from "./index-Bia1vKjL.mjs";
+import { g as RpcFunctionDefinitionAny } from "./types-BmDbfHCx.mjs";
 //#region src/rpc/transports/ws-client.d.ts
 interface WsRpcChannelOptions {
   url: string;

package/dist/{ws-server-BB8jhxeT.d.mts → ws-server-y2R76aSW.d.mts}

@@ -1,6 +1,6 @@
-import { v as RpcFunctionDefinitionAny } from "./types-D2vGd7-2.mjs";
+import { a as ChannelOptions, n as BirpcGroup } from "./index-Bia1vKjL.mjs";
+import { g as RpcFunctionDefinitionAny } from "./types-BmDbfHCx.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
-import { BirpcGroup, ChannelOptions } from "birpc";
 import { Hooks } from "crossws";
 import { NodeAdapter } from "crossws/adapters/node";
 import { Buffer } from "node:buffer";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devframe",
   "type": "module",
-  "version": "0.9.19",
+  "version": "0.10.0",
   "description": "Framework for building one portable devtool integration that runs in any viewer.",
   "author": "Anthony Fu <anthonyfu117@hotmail.com>",
   "license": "MIT",
@@ -33,7 +33,6 @@
     "./node": "./dist/node/index.mjs",
     "./node/auth": "./dist/node/auth.mjs",
     "./node/hub-internals": "./dist/node/hub-internals.mjs",
-    "./recipes/common-rpc-functions": "./dist/recipes/common-rpc-functions.mjs",
     "./recipes/interactive-auth": "./dist/recipes/interactive-auth.mjs",
     "./rpc": "./dist/rpc/index.mjs",
     "./rpc/client": "./dist/rpc/client.mjs",
@@ -49,6 +48,7 @@
     "./utils/agent-tool-name": "./dist/utils/agent-tool-name.mjs",
     "./utils/colors": "./dist/utils/colors.mjs",
     "./utils/crypto-token": "./dist/utils/crypto-token.mjs",
+    "./utils/debounce": "./dist/utils/debounce.mjs",
     "./utils/events": "./dist/utils/events.mjs",
     "./utils/get-port": "./dist/utils/get-port.mjs",
     "./utils/hash": "./dist/utils/hash.mjs",
@@ -63,6 +63,7 @@
     "./utils/shared-state": "./dist/utils/shared-state.mjs",
     "./utils/streaming-channel": "./dist/utils/streaming-channel.mjs",
     "./utils/structured-clone": "./dist/utils/structured-clone.mjs",
+    "./utils/url": "./dist/utils/url.mjs",
     "./utils/when": "./dist/utils/when.mjs",
     "./package.json": "./package.json"
   },
@@ -76,11 +77,11 @@
     "skills"
   ],
   "peerDependencies": {
-    "@modelcontextprotocol/client": "^2.0.0",
+    "@devframes/agentic": "0.10.0",
     "cac": "^7.0.0"
   },
   "peerDependenciesMeta": {
-    "@modelcontextprotocol/client": {
+    "@devframes/agentic": {
       "optional": true
     },
     "cac": {
@@ -88,23 +89,21 @@
     }
   },
   "dependencies": {
-    "@modelcontextprotocol/server": "^2.0.0",
-    "@standard-schema/spec": "^1.1.0",
-    "birpc": "^4.2.0",
     "crossws": "^0.4.12",
     "h3": "^2.0.1-rc.31",
-    "mrmime": "^2.0.1",
     "nostics": "^1.2.0",
-    "pathe": "^2.0.3",
-    "ufo": "^1.6.4"
+    "pathe": "^2.0.3"
   },
   "devDependencies": {
-    "@modelcontextprotocol/client": "^2.0.0",
+    "@devframes/agentic": "0.10.0",
+    "@standard-schema/spec": "^1.1.0",
+    "birpc": "^4.2.0",
     "cac": "^7.0.0",
     "get-port-please": "^3.2.0",
     "immer": "^11.1.18",
     "launch-editor": "^2.14.1",
     "mlly": "^1.8.2",
+    "mrmime": "^2.0.1",
     "obug": "^3.0.0",
     "ohash": "^2.0.12",
     "p-limit": "^7.3.2",

package/dist/_shared-U8D-xzrp.mjs

@@ -1,115 +0,0 @@
-import "./constants.mjs";
-import { r as importServicePackage } from "./services-install-Ben4yh52.mjs";
-import { n as getPort } from "./dist-CZXfGEkd.mjs";
-import { cleanDoubleSlashes, withLeadingSlash, withTrailingSlash, withoutLeadingSlash } from "ufo";
-//#region src/node/import-runtime-module.ts
-/**
-* Resolve and import a package at runtime without adding it to a consumer's
-* bundle graph. First-party adapters use this for modules whose code is
-* needed only when the matching feature is enabled (optional peers, and the
-* MCP adapter with the SDK behind it).
-*
-* @internal
-*/
-async function importRuntimeModule(specifier) {
-	return await importServicePackage(specifier, [import.meta.url]);
-}
-//#endregion
-//#region src/adapters/_shared.ts
-const DEFAULT_PORT = 9999;
-/**
-* Resolve the mount base path for a devframe's SPA. Hosted adapters
-* (`vite`, `embedded`) default to `/__<id>/` so they don't collide
-* with the host app; standalone adapters (`cli`, `build`)
-* default to `/` because they own the origin.
-*
-* The devframe author can override with `basePath` on the definition.
-*/
-function resolveBasePath(def, kind) {
-	if (def.basePath) return normalizeBasePath(def.basePath);
-	return kind === "standalone" ? "/" : `/__${def.id}/`;
-}
-function normalizeBasePath(base) {
-	return cleanDoubleSlashes(withTrailingSlash(withLeadingSlash(base)));
-}
-/**
-* Resolve the listening port for `createDevServer` (and `createHandler`'s
-* side-car tiers), honoring the definition's `cli.port` / `cli.portRange` /
-* `cli.random` settings. Exposed separately so authors who run their own
-* argv parsing can resolve a port up-front (to print it, log it, etc.)
-* before starting the server.
-*/
-async function resolveDevServerPort(def, options = {}) {
-	const host = options.host ?? def.cli?.host ?? "localhost";
-	const portOptions = {
-		port: options.defaultPort ?? def.cli?.port ?? DEFAULT_PORT,
-		host
-	};
-	if (def.cli?.portRange) portOptions.portRange = def.cli.portRange;
-	if (def.cli?.random) portOptions.random = def.cli.random;
-	return getPort(portOptions);
-}
-/**
-* Normalize an *explicit* `mcp` setting into a fully-resolved config, or
-* `undefined` when the MCP route is disabled. `'auto'` also resolves to
-* `undefined` here: whether it mounts depends on the live agent surface,
-* which only the mounting adapter can consult (through
-* {@link loadAutoMcpAdapter}) - static resolvers like
-* `resolveMcpConnectionMeta` treat it as unadvertisable.
-*
-* An enabled route trusts same-machine callers by default: the authorization
-* resolves to origin-only (`false`) unless the object config opts into a
-* bearer/callback identity check. An empty-string bearer is treated as no
-* bearer (origin-only) rather than a usable credential.
-*/
-function resolveMcpConfig(mcp) {
-	if (!mcp || mcp === "auto") return void 0;
-	if (mcp === true) return { authorization: false };
-	const authorization = typeof mcp.authorization === "string" && mcp.authorization.length === 0 ? false : mcp.authorization ?? false;
-	return {
-		...mcp.path !== void 0 ? { path: mcp.path } : {},
-		...mcp.allowedOrigins !== void 0 ? { allowedOrigins: mcp.allowedOrigins } : {},
-		authorization
-	};
-}
-/**
-* Resolve the `mcp: 'auto'` default at mount time: import the MCP adapter
-* when the devframe's agent surface is non-empty, or return `undefined`
-* (mount nothing) when the surface is empty - the zero-cost path, loading
-* no MCP code at all. The adapter (and the MCP SDK behind it) loads through
-* `importRuntimeModule`, so it never enters a consumer's bundle graph.
-*
-* Generic like `importRuntimeModule`: the caller names the module type
-* (`typeof import('devframe/adapters/mcp')`) so this shared helper carries
-* no type-level dependency on the MCP adapter.
-*/
-async function loadAutoMcpAdapter(agent) {
-	if (!agent.hasSurface()) return void 0;
-	return await importRuntimeModule("devframe/adapters/mcp");
-}
-/**
-* Resolve the `mcp` entry a `__connection.json` should advertise for a dev
-* server started with the given `mcp` option (falling back to `def.cli?.mcp`,
-* exactly like `createDevServer`), or `undefined` when the route is
-* disabled. `'auto'` (the omitted default) resolves at mount time against
-* the live agent surface, so hand-rolled meta advertises it only for an
-* explicit setting; the adapters advertise the actually-mounted route
-* themselves.
-*
-* Hosted bridges that hand-roll their connection meta pass the side-car
-* `port`: the advertised path becomes absolute (the side-car mounts at `/`)
-* and the client dials `<page-host>:<port><path>`. Without `port` the path
-* stays relative, resolved against `__connection.json`'s own location (the
-* same-server default).
-*/
-function resolveMcpConnectionMeta(def, mcp, port) {
-	const config = resolveMcpConfig(mcp ?? def.cli?.mcp);
-	if (!config) return void 0;
-	const route = withoutLeadingSlash(config.path ?? "__mcp");
-	return port != null ? {
-		path: withLeadingSlash(route),
-		port
-	} : { path: route };
-}
-//#endregion
-export { resolveMcpConfig as a, resolveDevServerPort as i, normalizeBasePath as n, resolveMcpConnectionMeta as o, resolveBasePath as r, importRuntimeModule as s, loadAutoMcpAdapter as t };

package/dist/agent-tool-name-DGzeuWcO.mjs

@@ -1,31 +0,0 @@
-//#region src/utils/agent-tool-name.ts
-/**
-* Maximum tool-name length several MCP clients enforce (the Anthropic API
-* pattern is `^[a-zA-Z0-9_-]{1,128}$`).
-*/
-const MAX_TOOL_NAME_LENGTH = 128;
-/**
-* Derive the wire-safe agent tool name for an internal tool id.
-*
-* Devframe tool ids are colon-namespaced: `devframe:<area>:<fn>` for
-* built-ins, `devframes:plugin:<slug>:<fn>` for plugin RPCs, and hub
-* command ids for command-derived tools. MCP clients constrain tool names
-* to `^[a-zA-Z0-9_-]{1,128}$`, so the agent/MCP boundary derives the wire
-* name automatically: every run of characters outside `[a-zA-Z0-9_-]`
-* becomes a single `_`, truncated to 128 characters. Internal ids never
-* change; resolution back to the id happens at the boundary.
-*
-* ```
-* devframe:state:read          → devframe_state_read
-* devframes:plugin:git:status  → devframes_plugin_git_status
-* ```
-*
-* A plain string transform with no node dependency, so browser-side UIs
-* that display a tool's id (e.g. the inspect plugin's agent view) can
-* import it too and show the name a client actually calls.
-*/
-function toAgentToolName(id) {
-	return id.replace(/[^\w-]+/g, "_").slice(0, MAX_TOOL_NAME_LENGTH);
-}
-//#endregion
-export { toAgentToolName as t };

package/dist/client-assets-DNdhagGm.mjs

@@ -1,16 +0,0 @@
-//#region src/client-assets.ts
-/**
-* Resolve a definition's client assets source: the built SPA served as its
-* UI. Prefers the top-level {@link DevframeDefinition.clientAssets} and falls
-* back to the deprecated `cli.distDir`, so both the new and legacy shapes
-* resolve. Returns `undefined` when neither is set (bridge mode, where the SPA is
-* hosted elsewhere).
-*
-* Internal: exposed to first-party integrations via `devframe/internal`, not
-* part of the stable public API.
-*/
-function resolveClientAssets(d) {
-	return d.clientAssets ?? d.cli?.distDir;
-}
-//#endregion
-export { resolveClientAssets as t };

package/dist/nostics-DD6gsDZA.mjs

@@ -1,108 +0,0 @@
-import { colors } from "./utils/colors.mjs";
-import { defineDiagnostics } from "nostics";
-import { ansiFormatter } from "nostics/formatters/ansi";
-//#region src/events.ts
-/**
-* Centralized registry of the core devframe event names: the node-side host
-* bus events, the client RPC connection events, and the server→client
-* broadcast notifications, so these names live in one place instead of
-* scattered string literals.
-*
-* **Keep this in sync with [`docs/content/8.references/3.events.md`](../../../docs/content/8.references/3.events.md)**
-* (the "Core devframe events" section): every name here appears in that page's
-* tables, and every name there resolves to an entry here. Add, rename, or
-* remove a name in both places in the same change, and reference
-* `DEVFRAME_EVENTS.*` from call sites instead of re-typing a literal.
-*
-* This map covers **notifications** (events, broadcasts). The request/response
-* RPC endpoints of the shared-state, streaming, and auth-handshake protocols
-* (`devframe:rpc:server-state:*`, `devframe:streaming:subscribe`,
-* `anonymous:devframe:auth`, …) are defined at their handlers and typed in
-* `types/rpc-augments.ts`; they aren't events and stay out of this map.
-*
-* The `EventEmitter` maps (`RpcClientEvents`, `DevframeAgentHostEvents`) and the
-* `DevframeRpcClientFunctions` augmentation declare these names as type-level
-* keys (a literal is unavoidable in a type position); those declarations mirror
-* this map and move with it.
-*/
-const DEVFRAME_EVENTS = {
-	/**
-	* Node-side host `EventEmitter` events. The agent host (`ctx.agent.events`)
-	* emits these as its tool/resource surface changes; protocol adapters (e.g.
-	* MCP) subscribe to re-publish their manifest.
-	*/
-	bus: {
-		agentManifestChanged: "agent:manifest:changed",
-		agentToolRegistered: "agent:tool:registered",
-		agentToolUnregistered: "agent:tool:unregistered",
-		agentResourceRegistered: "agent:resource:registered",
-		agentResourceUnregistered: "agent:resource:unregistered"
-	},
-	/**
-	* Client-side RPC connection `EventEmitter` events (`rpc.events`) a UI
-	* subscribes to for connection lifecycle and error surfacing.
-	*/
-	client: {
-		isTrustedUpdated: "rpc:is-trusted:updated",
-		error: "rpc:error",
-		connectionStatus: "connection:status",
-		connectionError: "connection:error"
-	},
-	/**
-	* Broadcast notifications the server pushes to clients (server → client),
-	* `devframe:` prefix. The paired request methods (subscribe/get/set/…) are
-	* RPC endpoints, not events, and are omitted deliberately.
-	*/
-	broadcast: {
-		authRevoked: "devframe:auth:revoked",
-		clientStateUpdated: "devframe:rpc:client-state:updated",
-		clientStatePatch: "devframe:rpc:client-state:patch",
-		streamingChunk: "devframe:streaming:chunk",
-		streamingEnd: "devframe:streaming:end",
-		streamingUploadCancel: "devframe:streaming:upload-cancel"
-	},
-	/**
-	* In-page channel notifications the page script pushes to its panels
-	* (page script → panel), `devframe:` prefix. The paired request methods
-	* (`devframe:in-page:page-state:subscribe`/`set`/`patch`) are call
-	* endpoints, not events, and are defined at their handlers
-	* (`in-page-channel/state.ts`).
-	*/
-	inPageChannel: {
-		panelStateUpdated: "devframe:in-page:panel-state:updated",
-		panelStatePatch: "devframe:in-page:panel-state:patch"
-	},
-	/** `postMessage` channels the runtime posts across window boundaries. */
-	postMessage: {
-		remoteAssetsError: "devframe:remote-assets-error",
-		inPageChannel: "devframe:in-page-channel"
-	}
-};
-//#endregion
-//#region src/utils/nostics.ts
-const formatAnsi = ansiFormatter(colors);
-/**
-* The reporter every {@link defineDiagnostics} call below wires in ahead of
-* any caller-supplied ones: prints the diagnostic through devframe's own
-* ANSI colors via `console[method]` (default `'warn'`).
-*/
-function devframeReporter(d, { method = "warn" } = {}) {
-	console[method](formatAnsi(d));
-}
-/**
-* Drop-in replacement for `nostics`'s `defineDiagnostics()` with devframe's
-* ANSI console reporter pre-wired ahead of any `reporters` passed in. Every
-* `diagnostics.ts` in devframe core, `@devframes/hub`, `@devframes/json-render`,
-* and the built-in plugins defines its codes through this instead of
-* `nostics`'s own `defineDiagnostics`; the reporter registration lives
-* here, once, so none of them need to build their own reporter (`colors`,
-* `ansiFormatter`) or take a direct dependency on `nostics` themselves.
-*/
-function defineDiagnostics$1(options) {
-	return defineDiagnostics({
-		...options,
-		reporters: [devframeReporter, ...options.reporters ?? []]
-	});
-}
-//#endregion
-export { DEVFRAME_EVENTS as n, defineDiagnostics$1 as t };