devframe 0.9.20 → 0.10.1

package/dist/{context-BLHBDQcZ.d.mts → context--tVkJw3W.d.mts}

@@ -1,10 +1,10 @@
-import { d as RpcFunctionsCollectorBase } from "./index-CiA6C705.mjs";
-import { _ as RpcFunctionDefinition, v as RpcFunctionDefinitionAny } from "./types-D2vGd7-2.mjs";
+import { i as BirpcReturn } from "./index-Bia1vKjL.mjs";
+import { d as RpcFunctionsCollectorBase } from "./index-DuEm0sDH.mjs";
+import { t as StandardSchemaV1 } from "./index-CeEtxDmK.mjs";
+import { g as RpcFunctionDefinitionAny, h as RpcFunctionDefinition } from "./types-BmDbfHCx.mjs";
 import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
 import { a as RemoteAssetsStore, o as StaticAssetsSource } from "./remote-assets-eBvSKZMS.mjs";
-import { m as defineDiagnostics } from "./nostics-0sKe5HIj.mjs";
-import { BirpcReturn } from "birpc";
-import { StandardSchemaV1 } from "@standard-schema/spec";
+import { h as defineDiagnostics } from "./nostics-DWvukRwa.mjs";
 import { CAC } from "cac";
 //#region src/types/events.d.ts
 interface EventsMap {
@@ -500,11 +500,23 @@ interface DevframeHost {
  */
 type DevframeStorageScope = 'workspace' | 'project' | 'global';
 //#endregion
+//#region src/client/browser-agent.d.ts
+interface BrowserAgentToolManifest {
+  id: string;
+  title?: string;
+  description: string;
+  safety: 'read' | 'action' | 'destructive';
+  tags?: readonly string[];
+  inputSchema?: unknown;
+}
+//#endregion
 //#region src/types/rpc-augments.d.ts
 /**
  * To be extended
  */
 interface DevframeRpcClientFunctions {
+  /** Invoke a tool registered in this browser document. @internal */
+  'devframe:agent:invoke-client-tool': (id: string, args: Record<string, unknown>) => Promise<unknown>;
   /**
    * Server→client notification that this connection's auth token has been
    * revoked. The client drops to untrusted on receipt. Broadcast by
@@ -556,6 +568,8 @@ interface DevframeRpcClientFunctions {
  * To be extended
  */
 interface DevframeRpcServerFunctions {
+  /** Replace this connection's browser-agent tool manifest, tagged with the calling tab's stable client id. @internal */
+  'devframe:agent:sync-client-tools': (clientId: string, tools: BrowserAgentToolManifest[]) => Promise<void>;
   /**
    * Authenticate a connection with a previously-issued bearer token; resolves
    * whether the connection is now trusted. The interactive handler is provided
@@ -1204,17 +1218,20 @@ interface DevframeSseOptions {
 type McpAuthorization = string | ((request: Request) => boolean | Promise<boolean>) | false;
 /**
  * The route-based MCP setting accepted everywhere a host mounts a devframe
- * (`cli.mcp`, `initDevframe` / `initHub` / `createDevServer` options, the
- * framework kits):
+ * (`initDevframe` / `initHub` / `createDevServer` options, `createCac` /
+ * `--mcp`, the framework kits):
  *
  * - `'auto'`, the default: mount the route when the devframe exposes an
  *   agent surface (an `agent`-flagged RPC function, or a tool / resource /
- *   provider registered on `ctx.agent`). An empty agent surface mounts
- *   nothing and loads no MCP code.
- * - `true`: always mount at the default `__mcp` route.
- * - `false`: never mount.
- * - {@link McpRouteOptions}: always mount, with a custom route path, origin
- *   allow-list, or {@link McpAuthorization} identity check.
+ *   provider registered on `ctx.agent`) AND the optional `@devframes/agentic`
+ *   peer (the MCP adapter and SDK) is installed. An empty agent surface
+ *   mounts nothing and loads no MCP code; a non-empty one without the peer
+ *   warns once (DF0078) and mounts nothing.
+ * - `true`: always mount at the default `__mcp` route; a missing
+ *   `@devframes/agentic` throws DF0079.
+ * - `false`: never mount, and never probe or warn.
+ * - {@link McpRouteOptions}: always mount (like `true`), with a custom route
+ *   path, origin allow-list, or {@link McpAuthorization} identity check.
  *
  * A mounted route trusts same-machine callers by default (the loopback
  * origin gate), exactly like `mcp: true`.
@@ -1298,36 +1315,6 @@ interface DevframeCliOptions {
    * @default true
    */
   auth?: boolean | DevframeAuthHandler;
-  /**
-   * Expose a route-based MCP server alongside the standalone dev server,
-   * speaking the MCP Streamable-HTTP transport at `/__mcp` (relative to the
-   * base path). It surfaces the same `ctx.agent` tools + shared-state
-   * resources as the stdio `mcp` command, but against the live server.
-   *
-   * Defaults to `'auto'`: the route mounts once the devframe exposes an
-   * agent surface (an `agent`-flagged RPC, a registered tool / resource).
-   * See {@link McpSetting} for the full contract, and
-   * {@link McpRouteOptions} for the route path, origin allow-list, and
-   * {@link McpAuthorization} identity check.
-   *
-   * The `--mcp` / `--no-mcp` CLI flags override this per run. Whether to expose
-   * MCP is a hosting decision, so programmatic hosts pass it to
-   * `initDevframe` / `initHub` / `createDevServer` instead.
-   *
-   * @deprecated Whether to expose MCP is a hosting decision, not a capability
-   * of the tool. Pass `mcp` to `createCac` (or the programmatic host) instead.
-   * This field is still read as a fallback, and will be removed in a future
-   * release.
-   */
-  mcp?: McpSetting;
-  /**
-   * Author's SPA dist, served as the devframe's UI.
-   *
-   * @deprecated Moved to the top-level {@link DevframeDefinition.clientAssets}.
-   * Set `clientAssets` on the definition instead. This field is still read as a
-   * fallback when `clientAssets` is unset, so existing definitions keep working.
-   */
-  distDir?: StaticAssetsSource;
   /**
    * How the browser reaches the RPC WebSocket. Defaults to sharing the HTTP
    * port on the `__ws` route. See {@link DevframeWsOptions} for the
@@ -1427,6 +1414,11 @@ interface DevframeDockDefaults {
    * host wiring; a URL or bare specifier passes through untouched.
    */
   clientScript?: {
+    /**
+     * Initialize after RPC trust without waiting for dock activation.
+     * @default false
+     */
+    eager?: boolean;
     /** An absolute filesystem path, a served URL, or a bare npm specifier. */
     importFrom: string;
     /**
@@ -1545,8 +1537,7 @@ interface DevframeDefinition {
    * ship inside the node package.
    *
    * Consumed by every adapter that serves the UI (`dev`, `build`, `vite`,
-   * `next`, and the hub install path). When unset, the deprecated
-   * {@link DevframeCliOptions.distDir} is read as a fallback.
+   * `next`, and the hub install path).
    */
   clientAssets?: StaticAssetsSource;
   /** RPC-level configuration for this devframe (see {@link DevframeRpcOptions}). */
@@ -1583,6 +1574,95 @@ type DevframeSnapshotRpcEntry = string | {
   inputs: DevframeSnapshotRpcInputs;
 };
 //#endregion
+//#region src/types/mcp.d.ts
+/**
+ * The MCP adapter surface, typed here so `devframe` (which probes for and
+ * lazily loads `@devframes/agentic`) and `@devframes/agentic/mcp` (which
+ * implements it) share one contract without a type-level dependency cycle.
+ * None of these shapes reference the MCP SDK: the SDK is an implementation
+ * detail of `@devframes/agentic`, freely swappable behind this surface.
+ * The h3-bound `mountMcpHttp` shapes live in `node/agentic.ts` (exported via
+ * `devframe/internal`) instead: `devframe/types` must stay lib-neutral, and
+ * h3's declarations are not.
+ */
+interface CreateMcpServerOptions {
+  /**
+   * Transport to use. `createMcpServer` itself runs `'stdio'` (a standalone
+   * process with its own host context); the Streamable-HTTP transport is
+   * served route-based by the dev server instead; see `mountMcpHttp` and
+   * the `mcp` option on `createDevServer` / `createCac`'s `--mcp` flag.
+   */
+  transport?: 'stdio';
+  /**
+   * Expose shared-state keys as MCP resources.
+   * - `true` (default): every key the host publishes
+   * - `false`: none
+   * - `(key) => boolean`: filter
+   */
+  exposeSharedState?: boolean | ((key: string) => boolean);
+  /** Override the name reported in the MCP handshake. */
+  serverName?: string;
+  /** Override the version reported in the MCP handshake. Defaults to `definition.version ?? '0.0.0'`. */
+  serverVersion?: string;
+  /** Called once the transport is connected. */
+  onReady?: (info: {
+    transport: 'stdio';
+  }) => void;
+}
+interface McpServerHandle {
+  stop: () => Promise<void>;
+}
+interface CreateMcpFetchHandlerOptions {
+  /** Name reported in the MCP handshake. */
+  serverName: string;
+  /** Version reported in the MCP handshake. */
+  serverVersion: string;
+  /** Expose shared-state keys as MCP resources; see {@link CreateMcpServerOptions.exposeSharedState}. */
+  exposeSharedState: boolean | ((key: string) => boolean);
+  /**
+   * Optional identity check, layered on top of the origin gate and checked
+   * **after** it: a bearer token string (matched in constant time against
+   * `Authorization: Bearer <token>`), a `(request) => boolean` callback, or
+   * `false` (the default) for origin-only, trusting same-machine callers. A
+   * callback governs identity only and cannot relax the origin gate. See
+   * {@link McpAuthorization}.
+   */
+  authorization?: McpAuthorization;
+  /**
+   * Origin allow-list beyond the loopback default. `false` disables the
+   * origin gate entirely. Default: loopback-only.
+   *
+   * Unlike the WS transport, the MCP route does **not** allow `Origin`-less
+   * requests: a route-based endpoint is reachable by any local process, so a
+   * request must carry an `Origin` that passes the gate. Native clients
+   * (e.g. `devframe connect`) send their loopback origin explicitly.
+   */
+  allowedOrigins?: readonly string[] | false;
+}
+/** Connection facts a host knows about a request beyond the `Request` itself. */
+interface McpConnectionInfo {
+  /**
+   * The connecting peer's remote address (a node socket's `remoteAddress`),
+   * used to prove a same-machine caller when the endpoint relies on the
+   * loopback origin default with no identity check. A host that can resolve a
+   * trustworthy peer address (the h3/node mount) supplies it; when it's
+   * omitted the origin gate stays the only locality signal.
+   */
+  remoteAddress?: string;
+}
+interface McpFetchHandler {
+  /**
+   * WHATWG-`fetch` handler for the MCP endpoint. Hand every method
+   * (POST/GET/DELETE) on the endpoint's path to it; routing by path is the
+   * host's job. Pass {@link McpConnectionInfo} when the host can resolve the
+   * peer address so the default trust boundary can enforce same-machine
+   * locality.
+   */
+  fetch: (request: Request, connection?: McpConnectionInfo) => Promise<Response>;
+  /** Tear down the handler (aborts in-flight exchanges, drops the change bridge). */
+  dispose: () => Promise<void>;
+}
+//#endregion
 //#region src/utils/shared-state.d.ts
 type ImmutablePrimitive = undefined | null | boolean | string | number | Function;
 type Immutable<T> = T extends ImmutablePrimitive ? T : T extends Array<infer U> ? ImmutableArray<U> : T extends Map<infer K, infer V> ? ImmutableMap<K, V> : T extends Set<infer M> ? ImmutableSet<M> : ImmutableObject<T>;
@@ -2089,7 +2169,7 @@ interface ConnectionMeta {
   sse?: string | ConnectionMetaSse;
   /**
    * Present when the dev server exposes a route-based MCP endpoint
-   * (`cli.mcp`). Advertises the MCP Streamable-HTTP route so in-browser
+   * (the host's `mcp` setting). Advertises the MCP Streamable-HTTP route so in-browser
    * tooling (e.g. an MCP inspector) can discover it without guessing the
    * path. `path` is relative to `__connection.json`'s location, like the
    * WebSocket `path`. `port` is set when the endpoint lives on a side-car
@@ -2184,4 +2264,4 @@ interface ConnectionMeta {
  */
 interface DevframeConnectionConfigsRegistry {}
 //#endregion
-export { DevframeServiceOf as $, SharedStateEvents as A, AgentHandle as At, DevframeSetupInfo as B, DevframeAgentHostEvents as Bt, createStreamSink as C, DevframeDiagnosticsHost as Ct, ImmutableObject as D, InferCliFlags as Dt, ImmutableMap as E, CliFlagsSchema as Et, DevframeDefinition as F, AgentTool as Ft, McpAuthorization as G, DevframeSnapshotRpcInputs as H, EventUnsubscribe as Ht, DevframeDeploymentKind as I, AgentToolInput as It, DevframeServiceDefinition as J, McpRouteOptions as K, DevframeDockDefaults as L, AgentToolProvider as Lt, SharedStatePatch as M, AgentResource as Mt, createSharedState as N, AgentResourceContent as Nt, ImmutableSet as O, defineCliFlags as Ot, DevframeCliOptions as P, AgentResourceInput as Pt, DevframeServiceMeta as Q, DevframeDuplicationStrategy as R, AgentToolProviderHandle as Rt, createStreamReader as S, DevframeStorageScope as St, ImmutableArray as T, DevframeAuthHandler as Tt, DevframeSseOptions as U, EventsMap as Ut, DevframeSnapshotRpcEntry as V, EventEmitter as Vt, DevframeWsOptions as W, DevframeServiceId as X, DevframeServiceDescriptor as Y, DevframeServiceInput as Z, CreateStreamSinkOptions as _, DevframeViewHost as _t, DevframeConnectionConfigsRegistry as a, DevframeScopedNodeContext as at, StreamSink as b, DevframeRpcSharedStates as bt, RpcBroadcastOptions as c, DevframeSettings as ct, RpcSharedStateHost as d, ScopedBroadcastOptions as dt, DevframeServiceScopeOf as et, RpcStreamingChannel as f, ScopedClientFunctions as ft, CreateStreamReaderOptions as g, SettingsForNamespace as gt, BufferedChunk as h, ScopedSharedStates as ht, DevframeCapabilities as i, DevframeServicesState as it, SharedStateOptions as j, AgentManifest as jt, SharedState as k, parseCliFlags as kt, RpcFunctionsHost as l, DevframeSettingsRegistry as lt, RpcStreamingHost as m, ScopedServerFunctions as mt, ConnectionMetaSse as n, DevframeServicesRegistry as nt, DevframeNodeContext as o, DevframeScopedNodeRpc as ot, RpcStreamingChannelOptions as p, ScopedRpcFn as pt, McpSetting as q, ConnectionMetaWebsocket as r, DevframeServicesScopeRegistry as rt, DevframeNodeRpcSession as s, DevframeScopedStreamingHost as st, ConnectionMeta as t, DevframeServicesHost as tt, RpcSharedStateGetOptions as u, DevframeSettingsStore as ut, StreamErrorPayload as v, DevframeRpcClientFunctions as vt, Immutable as w, DevframeDiagnosticsLogger as wt, StreamSinkEvents as x, DevframeHost as xt, StreamReader as y, DevframeRpcServerFunctions as yt, DevframeRpcOptions as z, DevframeAgentHost as zt };
+export { DevframeServiceDefinition as $, SharedStateEvents as A, DevframeAuthHandler as At, DevframeDefinition as B, AgentTool as Bt, createStreamSink as C, DevframeRpcClientFunctions as Ct, ImmutableObject as D, DevframeStorageScope as Dt, ImmutableMap as E, DevframeHost as Et, CreateMcpServerOptions as F, AgentHandle as Ft, DevframeSetupInfo as G, DevframeAgentHostEvents as Gt, DevframeDockDefaults as H, AgentToolProvider as Ht, McpConnectionInfo as I, AgentManifest as It, DevframeSseOptions as J, EventsMap as Jt, DevframeSnapshotRpcEntry as K, EventEmitter as Kt, McpFetchHandler as L, AgentResource as Lt, SharedStatePatch as M, InferCliFlags as Mt, createSharedState as N, defineCliFlags as Nt, ImmutableSet as O, DevframeDiagnosticsHost as Ot, CreateMcpFetchHandlerOptions as P, parseCliFlags as Pt, McpSetting as Q, McpServerHandle as R, AgentResourceContent as Rt, createStreamReader as S, DevframeViewHost as St, ImmutableArray as T, DevframeRpcSharedStates as Tt, DevframeDuplicationStrategy as U, AgentToolProviderHandle as Ut, DevframeDeploymentKind as V, AgentToolInput as Vt, DevframeRpcOptions as W, DevframeAgentHost as Wt, McpAuthorization as X, DevframeWsOptions as Y, McpRouteOptions as Z, CreateStreamSinkOptions as _, ScopedClientFunctions as _t, DevframeConnectionConfigsRegistry as a, DevframeServiceScopeOf as at, StreamSink as b, ScopedSharedStates as bt, RpcBroadcastOptions as c, DevframeServicesScopeRegistry as ct, RpcSharedStateHost as d, DevframeScopedNodeRpc as dt, DevframeServiceDescriptor as et, RpcStreamingChannel as f, DevframeScopedStreamingHost as ft, CreateStreamReaderOptions as g, ScopedBroadcastOptions as gt, BufferedChunk as h, DevframeSettingsStore as ht, DevframeCapabilities as i, DevframeServiceOf as it, SharedStateOptions as j, CliFlagsSchema as jt, SharedState as k, DevframeDiagnosticsLogger as kt, RpcFunctionsHost as l, DevframeServicesState as lt, RpcStreamingHost as m, DevframeSettingsRegistry as mt, ConnectionMetaSse as n, DevframeServiceInput as nt, DevframeNodeContext as o, DevframeServicesHost as ot, RpcStreamingChannelOptions as p, DevframeSettings as pt, DevframeSnapshotRpcInputs as q, EventUnsubscribe as qt, ConnectionMetaWebsocket as r, DevframeServiceMeta as rt, DevframeNodeRpcSession as s, DevframeServicesRegistry as st, ConnectionMeta as t, DevframeServiceId as tt, RpcSharedStateGetOptions as u, DevframeScopedNodeContext as ut, StreamErrorPayload as v, ScopedRpcFn as vt, Immutable as w, DevframeRpcServerFunctions as wt, StreamSinkEvents as x, SettingsForNamespace as xt, StreamReader as y, ScopedServerFunctions as yt, DevframeCliOptions as z, AgentResourceInput as zt };

package/dist/{context-BLXXjoBW.mjs → context-BqpgC5tq.mjs}

@@ -4,11 +4,11 @@ import { RpcFunctionsCollectorBase } from "./rpc/index.mjs";
 import { defineRpcFunction } from "./index.mjs";
 import { t as DEVFRAME_EVENTS } from "./events-BV4Dj59a.mjs";
 import { DEVFRAME_SERVICES_STATE_KEY } from "./constants.mjs";
-import { t as diagnostics$1 } from "./diagnostics-DZA6KQ_Z.mjs";
-import { i as createEventEmitter, t as DevframeAgentHost } from "./host-agent-C3MBpNCd.mjs";
-import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-D0StJVLp.mjs";
-import { i as satisfiesVersionRange, n as expandResolveFrom, r as importServicePackage, t as deepMergeOptionSets } from "./services-install-Ben4yh52.mjs";
-import { t as createStorage } from "./storage-B70AXK64.mjs";
+import { t as diagnostics$1 } from "./diagnostics-Cx4_VjlG.mjs";
+import { r as createEventEmitter, t as DevframeAgentHost } from "./host-agent-mIbQ6Qi5.mjs";
+import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-B9MeWmW6.mjs";
+import { a as satisfiesVersionRange, n as expandResolveFrom, r as importServicePackage, t as deepMergeOptionSets } from "./services-install-D5YUwFXW.mjs";
+import { t as createStorage } from "./storage-CHD1IkqU.mjs";
 import { join } from "pathe";
 import { createSharedState } from "devframe/utils/shared-state";
 import process from "node:process";
@@ -32,6 +32,46 @@ var DevframeDiagnosticsHost = class {
 	}
 };
 //#endregion
+//#region src/node/client-agent.ts
+const states = /* @__PURE__ */ new WeakMap();
+function getState(context) {
+	let state = states.get(context);
+	if (state) return state;
+	const sessions = /* @__PURE__ */ new Map();
+	state = {
+		sessions,
+		notifyChanged: context.agent.registerToolProvider(() => {
+			const tools = /* @__PURE__ */ new Map();
+			for (const { session, tools: manifests } of sessions.values()) for (const manifest of manifests) {
+				if (tools.has(manifest.id)) continue;
+				tools.set(manifest.id, {
+					...manifest,
+					handler: (args) => session.rpc.$callRaw({
+						method: "devframe:agent:invoke-client-tool",
+						args: [manifest.id, args]
+					})
+				});
+			}
+			return [...tools.values()];
+		}).notifyChanged
+	};
+	states.set(context, state);
+	return state;
+}
+function syncClientAgentTools(context, session, clientId, tools) {
+	const state = getState(context);
+	state.sessions.set(session.meta, {
+		session,
+		clientId,
+		tools
+	});
+	state.notifyChanged();
+}
+function removeClientAgentSession(context, meta) {
+	const state = states.get(context);
+	if (state?.sessions.delete(meta)) state.notifyChanged();
+}
+//#endregion
 //#region src/node/rpc-shared-state.ts
 const debug$2 = createDebug("devframe:rpc:state:changed");
 const debugSubscribe = createDebug("devframe:rpc:state:subscribe");
@@ -764,6 +804,7 @@ var RpcFunctionsHostImpl = class extends RpcFunctionsCollectorBase {
 	*/
 	_emitSessionDisconnected(meta) {
 		this.streaming._onSessionDisconnected(meta);
+		removeClientAgentSession(this.context, meta);
 	}
 	async invokeLocal(method, ...args) {
 		if (!this.definitions.has(method)) throw diagnostics$1.DF0006({ name: String(method) });
@@ -1124,6 +1165,15 @@ const BUILTIN_AGENT_RPC = [
 				return await ctx.agent.read(id);
 			} };
 		}
+	}),
+	defineRpcFunction({
+		name: "devframe:agent:sync-client-tools",
+		type: "action",
+		jsonSerializable: true,
+		setup: (context) => ({ handler(clientId, tools) {
+			const session = context.rpc.getCurrentRpcSession();
+			if (session) syncClientAgentTools(context, session, clientId, tools);
+		} })
 	})
 ];
 //#endregion

package/dist/{context-jXO5vzjH.mjs → context-CHpyLX8W.mjs}

@@ -1,5 +1,5 @@
 import { n as randomToken } from "./crypto-token-TVbGGFuj.mjs";
-import { t as createStorage } from "./storage-B70AXK64.mjs";
+import { t as createStorage } from "./storage-CHD1IkqU.mjs";
 import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-cqztiCX4.mjs";
 import { join } from "pathe";
 //#region src/node/hub-internals/context.ts

package/dist/{context-BA5FPz7K.d.mts → context-D3qBv0IX.d.mts}

@@ -1,4 +1,4 @@
-import { k as SharedState, o as DevframeNodeContext } from "./context-BLHBDQcZ.mjs";
+import { k as SharedState, o as DevframeNodeContext } from "./context--tVkJw3W.mjs";
 //#region src/node/hub-internals/context.d.ts
 interface InternalAnonymousAuthStorage {
   trusted: Record<string, {

package/dist/{dev-BdKKOH8S.mjs → dev-BTbLJekh.mjs}

@@ -1,17 +1,15 @@
-import { t as resolveClientAssets } from "./client-assets-DNdhagGm.mjs";
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
-import { t as diagnostics } from "./diagnostics-DZA6KQ_Z.mjs";
-import { t as createHostContext } from "./context-BLXXjoBW.mjs";
-import { t as resolveStaticAssetsSource } from "./remote-assets-D0StJVLp.mjs";
-import { a as resolveMcpConfig, i as resolveDevServerPort, n as normalizeBasePath, r as resolveBasePath, s as importRuntimeModule, t as loadAutoMcpAdapter } from "./_shared-U8D-xzrp.mjs";
+import { t as diagnostics } from "./diagnostics-Cx4_VjlG.mjs";
+import { t as createHostContext } from "./context-BqpgC5tq.mjs";
+import { t as resolveStaticAssetsSource } from "./remote-assets-B9MeWmW6.mjs";
+import { a as resolveMcpConfig, c as joinURL, d as withoutLeadingSlash, i as resolveDevServerPort, l as withBase, n as normalizeBasePath, r as resolveBasePath, s as importAgenticMcp, t as loadAutoMcpAdapter } from "./_shared-B2PZsp-J.mjs";
 import { t as createH3DevframeHost } from "./host-h3-BROI6SQ4.mjs";
-import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, t as createInstanceShell } from "./instance-shell-yfrM3_vK.mjs";
+import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, t as createInstanceShell } from "./instance-shell-wC2sfEU_.mjs";
 import { open } from "./utils/open.mjs";
 import { mountStaticHandler } from "./utils/serve-static.mjs";
 import { resolve } from "pathe";
 import { createServer } from "node:http";
 import process from "node:process";
-import { joinURL, withBase, withoutLeadingSlash } from "ufo";
 import { H3, toNodeHandler } from "h3";
 //#region src/adapters/initiate.ts
 const INSTANCE_INTERNALS = /* @__PURE__ */ new WeakMap();
@@ -38,7 +36,7 @@ function getInstanceInternals(handler) {
 */
 function initDevframe(def, options) {
 	const base = normalizeBasePath(options.base);
-	const distDir = options.distDir === false ? void 0 : options.distDir ?? resolveClientAssets(def);
+	const distDir = options.distDir === false ? void 0 : options.distDir ?? def.clientAssets;
 	const app = options.app ?? new H3();
 	const host = options.host ?? def.cli?.host ?? "localhost";
 	const shell = createInstanceShell({
@@ -88,7 +86,7 @@ function initDevframe(def, options) {
 			for (const input of def.services ?? []) context.services.install(input, { resolveFrom: def.importMetaUrl });
 			await context.services.ready();
 			await def.setup(context, setupInfo);
-			const mcp = await mountMcpRoute(app, context, def, base, options.mcp ?? def.cli?.mcp ?? "auto");
+			const mcp = await mountMcpRoute(app, context, def, base, options.mcp ?? "auto");
 			return {
 				context,
 				...mcp?.meta ? { mcp: mcp.meta } : {},
@@ -119,11 +117,14 @@ function initDevframe(def, options) {
 }
 /**
 * Mount the route-based MCP server at `<base>__mcp`, before the SPA static
-* catch-all so the exact route wins. The MCP SDK is pulled in dynamically
-* only when the route mounts, keeping it out of consumer bundles: `'auto'`
-* mounts once `setup()` left a non-empty agent surface (an empty surface
-* loads no MCP code); an explicit setting mounts unconditionally. The
-* resolved config is origin-only unless it opts into a bearer/callback.
+* catch-all so the exact route wins. The adapter (from the optional
+* `@devframes/agentic` peer) is pulled in dynamically only when the route
+* mounts, keeping it and the MCP SDK out of consumer bundles: `'auto'`
+* mounts once `setup()` left a non-empty agent surface AND the peer is
+* installed (an empty surface loads no MCP code; a non-empty one without the
+* peer warns once and mounts nothing); an explicit setting mounts
+* unconditionally, throwing DF0079 when the peer is absent. The resolved
+* config is origin-only unless it opts into a bearer/callback.
 */
 async function mountMcpRoute(app, context, def, base, setting) {
 	let module;
@@ -134,16 +135,7 @@ async function mountMcpRoute(app, context, def, base, setting) {
 	} else config = resolveMcpConfig(setting);
 	if (!config) return void 0;
 	const route = withoutLeadingSlash(config.path ?? "__mcp");
-	if (!module) try {
-		module = await importRuntimeModule("devframe/adapters/mcp");
-	} catch (error) {
-		const reason = error instanceof Error ? error.message : String(error);
-		throw diagnostics.DF0017({
-			transport: "http",
-			reason,
-			cause: error
-		});
-	}
+	module ??= await importAgenticMcp();
 	const mounted = module.mountMcpHttp(app, context, joinURL(base, route), {
 		serverName: `${def.id} (devframe)`,
 		serverVersion: def.version ?? "0.0.0",

package/dist/{diagnostics-DZA6KQ_Z.mjs → diagnostics-Cx4_VjlG.mjs}

@@ -68,8 +68,8 @@ const diagnostics = defineDiagnostics({
 			fix: "Discovery tooling (`devframe connect`) will not see this instance. Check that the registry directory is writable, point `DEVFRAME_INSTANCES_DIR` at a writable directory, or set `DEVFRAME_DISABLE_INSTANCE_REGISTRY=1` to opt out of registration."
 		},
 		DF0046: {
-			why: (p) => `\`devframe connect\` requires the optional peer dependency @modelcontextprotocol/client: ${p.reason}`,
-			fix: "Install it next to devframe (e.g. `npm install @modelcontextprotocol/client`) and run `devframe connect` again."
+			why: (p) => `\`devframe connect\` requires the optional peer dependency @devframes/agentic: ${p.reason}`,
+			fix: "Install it next to devframe (e.g. `npm install @devframes/agentic`) and run `devframe connect` again."
 		},
 		DF0047: {
 			why: (p) => `Agent tool "${p.id}" is hidden from the MCP surface: its wire name "${p.name}" collides with the tool "${p.existing}".`,
@@ -89,7 +89,7 @@ const diagnostics = defineDiagnostics({
 		},
 		DF0051: {
 			why: (p) => `The devframe instance on port ${p.port} has no MCP endpoint.`,
-			fix: "Restart the instance with the --mcp flag (or set `cli.mcp: true` on its definition) to expose its tools, then list instances again."
+			fix: "Restart the instance with the --mcp flag to expose its tools, then list instances again."
 		},
 		DF0052: {
 			why: (p) => `Failed to listen on ${p.host}:${p.port}: ${p.reason}`,
@@ -174,6 +174,14 @@ const diagnostics = defineDiagnostics({
 		DF0076: {
 			why: (p) => `\`attach\` / \`handleUpgrade\` drive a raw \`node:http\` upgrade into crossws's Node adapter, which refuses to run on ${p.runtime}.`,
 			fix: "On Bun/Deno, serve the advertised `__ws` route from `Bun.serve` / `Deno.serve` with `attachBunWsTransport` / `attachDenoWsTransport` (see the hub-deno example), or connect over the SSE endpoint instead."
+		},
+		DF0078: {
+			why: "This devframe exposes agent tools, but the MCP endpoint stays off: the optional peer \"@devframes/agentic\" is not installed.",
+			fix: "Install `@devframes/agentic` next to devframe to serve the MCP endpoint, or set `mcp: false` to opt out silently."
+		},
+		DF0079: {
+			why: (p) => `The \`mcp\` option is enabled, but the optional peer "@devframes/agentic" could not be loaded: ${p.reason}`,
+			fix: "Install `@devframes/agentic` next to devframe (the MCP adapter and the MCP SDK live there), or remove the explicit `mcp` setting."
 		}
 	}
 });