devframe 1.2.6 → 1.3.1

package/dist/{context-dOWXVHc6.d.mts → context-BNxFOPbX.d.mts}

@@ -373,6 +373,228 @@ interface DevframeAuthHandler {
   buildOpenUrl?: (url: string) => string;
 }
 //#endregion
+//#region src/types/mcp.d.ts
+/**
+ * The MCP adapter surface, typed here so `devframe` (which probes for and
+ * lazily loads `@devframes/agentic`) and `@devframes/agentic/mcp` (which
+ * implements it) share one contract without a type-level dependency cycle.
+ * None of these shapes reference the MCP SDK: the SDK is an implementation
+ * detail of `@devframes/agentic`, freely swappable behind this surface.
+ * The h3-bound `mountMcpHttp` shapes live in `node/agentic.ts` (exported via
+ * `devframe/internal`) instead: `devframe/types` must stay lib-neutral, and
+ * h3's declarations are not.
+ */
+interface CreateMcpServerOptions {
+  /**
+   * Transport to use. `createMcpServer` itself runs `'stdio'` (a standalone
+   * process with its own host context); the Streamable-HTTP transport is
+   * served route-based by the dev server instead; see `mountMcpHttp` and
+   * the `mcp` option on `createDevServer` / `createCac`'s `--mcp` flag.
+   */
+  transport?: 'stdio';
+  /**
+   * Expose shared-state keys as MCP resources.
+   * - `true` (default): every key the host publishes
+   * - `false`: none
+   * - `(key) => boolean`: filter
+   */
+  exposeSharedState?: boolean | ((key: string) => boolean);
+  /**
+   * Usage guidance sent as `instructions` in the MCP `initialize` (and
+   * `server/discover`) result. Omitted or empty sends no instructions.
+   */
+  instructions?: string;
+  /**
+   * Resource templates served through `resources/templates/list`, and read
+   * through `resources/read`. Omitted or empty keeps the resources unchanged.
+   */
+  resourceTemplates?: McpResourceTemplate[];
+  /**
+   * Host subscription for resource-list changes; each `notify()` sends
+   * `notifications/resources/list_changed`. See {@link McpResourcesChangedHook}.
+   */
+  onResourcesChanged?: McpResourcesChangedHook;
+  /**
+   * Prompt templates served through `prompts/list` and `prompts/get`.
+   * Omitted or empty declares no `prompts` capability.
+   */
+  prompts?: McpPrompt[];
+  /** Override the name reported in the MCP handshake. */
+  serverName?: string;
+  /** Override the version reported in the MCP handshake. Defaults to `definition.version ?? '0.0.0'`. */
+  serverVersion?: string;
+  /** Called once the transport is connected. */
+  onReady?: (info: {
+    transport: 'stdio';
+  }) => void;
+}
+/**
+ * One MCP content block in a tool result. Attach blocks to a tool's return
+ * value with `withMcpContent` (from `devframe`) to send them in place of the
+ * default JSON text block. `data` is base64.
+ */
+type McpContentBlock = {
+  type: 'text';
+  text: string;
+} | {
+  type: 'image';
+  data: string;
+  mimeType: string;
+} | {
+  type: 'audio';
+  data: string;
+  mimeType: string;
+};
+interface McpServerHandle {
+  stop: () => Promise<void>;
+}
+interface CreateMcpFetchHandlerOptions {
+  /** Name reported in the MCP handshake. */
+  serverName: string;
+  /** Version reported in the MCP handshake. */
+  serverVersion: string;
+  /** Expose shared-state keys as MCP resources; see {@link CreateMcpServerOptions.exposeSharedState}. */
+  exposeSharedState: boolean | ((key: string) => boolean);
+  /** Usage guidance for the handshake; see {@link CreateMcpServerOptions.instructions}. */
+  instructions?: string;
+  /** Resource templates; see {@link CreateMcpServerOptions.resourceTemplates}. */
+  resourceTemplates?: McpResourceTemplate[];
+  /** Host subscription for resource-list changes; see {@link CreateMcpServerOptions.onResourcesChanged}. */
+  onResourcesChanged?: McpResourcesChangedHook;
+  /** Prompt templates; see {@link CreateMcpServerOptions.prompts}. */
+  prompts?: McpPrompt[];
+  /**
+   * Optional identity check, layered on top of the origin gate and checked
+   * **after** it: a bearer token string (matched in constant time against
+   * `Authorization: Bearer <token>`), a `(request) => boolean` callback, or
+   * `false` (the default) for origin-only, trusting same-machine callers. A
+   * callback governs identity only and cannot relax the origin gate. See
+   * {@link McpAuthorization}.
+   */
+  authorization?: McpAuthorization;
+  /**
+   * Origin allow-list beyond the loopback default. `false` disables the
+   * origin gate entirely. Default: loopback-only.
+   *
+   * Unlike the WS transport, the MCP route does **not** allow `Origin`-less
+   * requests: a route-based endpoint is reachable by any local process, so a
+   * request must carry an `Origin` that passes the gate. Native clients
+   * (e.g. `devframe connect`) send their loopback origin explicitly.
+   */
+  allowedOrigins?: readonly string[] | false;
+}
+/** Connection facts a host knows about a request beyond the `Request` itself. */
+interface McpConnectionInfo {
+  /**
+   * The connecting peer's remote address (a node socket's `remoteAddress`),
+   * used to prove a same-machine caller when the endpoint relies on the
+   * loopback origin default with no identity check. A host that can resolve a
+   * trustworthy peer address (the h3/node mount) supplies it; when it's
+   * omitted the origin gate stays the only locality signal.
+   */
+  remoteAddress?: string;
+}
+interface McpFetchHandler {
+  /**
+   * WHATWG-`fetch` handler for the MCP endpoint. Hand every method
+   * (POST/GET/DELETE) on the endpoint's path to it; routing by path is the
+   * host's job. Pass {@link McpConnectionInfo} when the host can resolve the
+   * peer address so the default trust boundary can enforce same-machine
+   * locality.
+   */
+  fetch: (request: Request, connection?: McpConnectionInfo) => Promise<Response>;
+  /** Tear down the handler (aborts in-flight exchanges, drops the change bridge). */
+  dispose: () => Promise<void>;
+}
+/** One concrete resource that an {@link McpResourceTemplate} lists in `resources/list`. */
+interface McpResourceTemplateEntry {
+  /** The resource URI. It SHOULD match the `uriTemplate` of its template, so `resources/read` finds it. */
+  uri: string;
+  name: string;
+  /** Human-readable name for display. */
+  title?: string;
+  description?: string;
+  /** Defaults to the `mimeType` of the template. */
+  mimeType?: string;
+}
+/**
+ * What an {@link McpResourceTemplate} returns from `read`, sent as the
+ * `resources/read` result: `text` as is, or else `json` as JSON text.
+ */
+interface McpResourceTemplateContent {
+  text?: string;
+  json?: unknown;
+  /** Defaults to the `mimeType` of the template, then `application/json`. */
+  mimeType?: string;
+}
+/**
+ * A resource template the MCP server lists in `resources/templates/list` and
+ * reads in `resources/read`. The `uriTemplate` uses RFC 6570 level 1 only:
+ * plain `{name}` expressions, with text between any two of them. Each
+ * expression matches a non-empty value with no `/`, and its value is
+ * percent-decoded.
+ *
+ * `list` and `read` get the node context of the devframe (or of the hub), so
+ * they can read live state such as `ctx.rpc.sharedState` or `ctx.agent`. The
+ * route options are resolved before `setup()` runs, so a template cannot
+ * capture that context in a closure.
+ */
+interface McpResourceTemplate {
+  /** RFC 6570 level 1 URI template, e.g. `my-tool://file/{path}`. Anything else throws `DF0084`. */
+  uriTemplate: string;
+  name: string;
+  /** Human-readable name for display. */
+  title?: string;
+  description?: string;
+  /** MIME type of every resource the template stands for. */
+  mimeType?: string;
+  /** The concrete resources the template stands for right now. They are added to `resources/list`. */
+  list?: (ctx: DevframeNodeContext) => McpResourceTemplateEntry[] | Promise<McpResourceTemplateEntry[]>;
+  /** Read one resource: `params` holds the decoded value of each `{name}`, `uri` the requested URI. */
+  read: (params: Record<string, string>, uri: string, ctx: DevframeNodeContext) => McpResourceTemplateContent | Promise<McpResourceTemplateContent>;
+}
+/**
+ * A host subscription for resource-list changes. Call `notify()` each time
+ * the resources change; the MCP server then sends
+ * `notifications/resources/list_changed`. Return a function that removes the
+ * subscription; the MCP server calls it on teardown.
+ */
+type McpResourcesChangedHook = (notify: () => void, ctx: DevframeNodeContext) => () => void;
+/** One argument of an {@link McpPrompt}. */
+interface McpPromptArgument {
+  name: string;
+  description?: string;
+  /** `prompts/get` answers invalid params when a required argument is missing or empty. */
+  required?: boolean;
+}
+/** One message of the answer to `prompts/get`. */
+interface McpPromptMessage {
+  role: 'user' | 'assistant';
+  content: {
+    type: 'text';
+    text: string;
+  };
+}
+/** What an {@link McpPrompt} returns from `get`, sent as the `prompts/get` result. */
+interface McpPromptResult {
+  description?: string;
+  messages: McpPromptMessage[];
+}
+/**
+ * A prompt template the MCP server lists in `prompts/list` and builds in
+ * `prompts/get`. A coding agent usually offers it to the user as a slash
+ * command. Each `name` is used once; a repeated name throws `DF0085`.
+ */
+interface McpPrompt {
+  name: string;
+  /** Human-readable name for display. */
+  title?: string;
+  description?: string;
+  arguments?: McpPromptArgument[];
+  /** Build the messages from the arguments the coding agent sent. */
+  get: (args: Record<string, string>) => McpPromptResult | Promise<McpPromptResult>;
+}
+//#endregion
 //#region src/types/diagnostics.d.ts
 /**
  * The shared diagnostics lookup exposed by the host. A `Proxy` that resolves
@@ -509,6 +731,13 @@ interface BrowserAgentToolManifest {
   tags?: readonly string[];
   inputSchema?: unknown;
 }
+/** What a connected document reports about itself alongside its tool manifest. */
+interface BrowserAgentClientInfo {
+  url: string;
+  title: string;
+  visible: boolean;
+  focused: boolean;
+}
 //#endregion
 //#region src/types/rpc-augments.d.ts
 /**
@@ -573,7 +802,7 @@ interface DevframeRpcServerFunctions {
   /** Methods eligible for automatic client caching. @internal */
   'devframe:rpc:cacheable-functions': () => Promise<string[]>;
   /** Replace this connection's browser-agent tool manifest, tagged with the calling tab's stable client id. @internal */
-  'devframe:agent:sync-client-tools': (clientId: string, tools: BrowserAgentToolManifest[]) => Promise<void>;
+  'devframe:agent:sync-client-tools': (clientId: string, tools: BrowserAgentToolManifest[], info: BrowserAgentClientInfo) => Promise<void>;
   /**
    * Authenticate a connection with a previously-issued bearer token; resolves
    * whether the connection is now trusted. The interactive handler is provided
@@ -809,8 +1038,8 @@ interface DevframeSettingsStore<T extends Record<string, any> = Record<string, a
 /**
  * The two settings scopes available on a scoped context.
  *
- *   - `project`: per-workspace state, persisted under the host's
- *     `workspace` storage dir. Project-local settings.
+ *   - `project`: per-checkout state, persisted under the
+ *     `project` storage dir. Project-local settings.
  *   - `global`:  per-user state, persisted under the host's `global`
  *     storage dir. Machine-wide preferences.
  */
@@ -1296,6 +1525,28 @@ interface McpRouteOptions {
    * Omitted or empty sends no instructions.
    */
   instructions?: string;
+  /**
+   * Resource templates the route serves through MCP
+   * `resources/templates/list`. `resources/read` tries them after the
+   * registered resources and the shared-state resources (a
+   * `devframe://resource/` or `devframe://state/` URI never reaches them);
+   * the first template whose `uriTemplate` matches the URI reads it. `resources/list` adds the
+   * entries each template's `list` returns. Omitted or empty keeps the
+   * resources unchanged.
+   */
+  resourceTemplates?: McpResourceTemplate[];
+  /**
+   * Host subscription for resource-list changes. Call `notify()` each time
+   * the resources change (for example, the entries of a resource template);
+   * the route then sends `notifications/resources/list_changed`. Return a
+   * function that removes the subscription; the route calls it on teardown.
+   */
+  onResourcesChanged?: McpResourcesChangedHook;
+  /**
+   * Prompt templates the route serves through MCP `prompts/list` and
+   * `prompts/get`. Omitted or empty declares no `prompts` capability.
+   */
+  prompts?: McpPrompt[];
 }
 interface DevframeCliOptions {
   /** Binary name; default: the devframe's `id`. */
@@ -1597,119 +1848,6 @@ type DevframeSnapshotRpcEntry = string | {
   inputs: DevframeSnapshotRpcInputs;
 };
 //#endregion
-//#region src/types/mcp.d.ts
-/**
- * The MCP adapter surface, typed here so `devframe` (which probes for and
- * lazily loads `@devframes/agentic`) and `@devframes/agentic/mcp` (which
- * implements it) share one contract without a type-level dependency cycle.
- * None of these shapes reference the MCP SDK: the SDK is an implementation
- * detail of `@devframes/agentic`, freely swappable behind this surface.
- * The h3-bound `mountMcpHttp` shapes live in `node/agentic.ts` (exported via
- * `devframe/internal`) instead: `devframe/types` must stay lib-neutral, and
- * h3's declarations are not.
- */
-interface CreateMcpServerOptions {
-  /**
-   * Transport to use. `createMcpServer` itself runs `'stdio'` (a standalone
-   * process with its own host context); the Streamable-HTTP transport is
-   * served route-based by the dev server instead; see `mountMcpHttp` and
-   * the `mcp` option on `createDevServer` / `createCac`'s `--mcp` flag.
-   */
-  transport?: 'stdio';
-  /**
-   * Expose shared-state keys as MCP resources.
-   * - `true` (default): every key the host publishes
-   * - `false`: none
-   * - `(key) => boolean`: filter
-   */
-  exposeSharedState?: boolean | ((key: string) => boolean);
-  /**
-   * Usage guidance sent as `instructions` in the MCP `initialize` (and
-   * `server/discover`) result. Omitted or empty sends no instructions.
-   */
-  instructions?: string;
-  /** Override the name reported in the MCP handshake. */
-  serverName?: string;
-  /** Override the version reported in the MCP handshake. Defaults to `definition.version ?? '0.0.0'`. */
-  serverVersion?: string;
-  /** Called once the transport is connected. */
-  onReady?: (info: {
-    transport: 'stdio';
-  }) => void;
-}
-/**
- * One MCP content block in a tool result. Attach blocks to a tool's return
- * value with `withMcpContent` (from `devframe`) to send them in place of the
- * default JSON text block. `data` is base64.
- */
-type McpContentBlock = {
-  type: 'text';
-  text: string;
-} | {
-  type: 'image';
-  data: string;
-  mimeType: string;
-} | {
-  type: 'audio';
-  data: string;
-  mimeType: string;
-};
-interface McpServerHandle {
-  stop: () => Promise<void>;
-}
-interface CreateMcpFetchHandlerOptions {
-  /** Name reported in the MCP handshake. */
-  serverName: string;
-  /** Version reported in the MCP handshake. */
-  serverVersion: string;
-  /** Expose shared-state keys as MCP resources; see {@link CreateMcpServerOptions.exposeSharedState}. */
-  exposeSharedState: boolean | ((key: string) => boolean);
-  /** Usage guidance for the handshake; see {@link CreateMcpServerOptions.instructions}. */
-  instructions?: string;
-  /**
-   * Optional identity check, layered on top of the origin gate and checked
-   * **after** it: a bearer token string (matched in constant time against
-   * `Authorization: Bearer <token>`), a `(request) => boolean` callback, or
-   * `false` (the default) for origin-only, trusting same-machine callers. A
-   * callback governs identity only and cannot relax the origin gate. See
-   * {@link McpAuthorization}.
-   */
-  authorization?: McpAuthorization;
-  /**
-   * Origin allow-list beyond the loopback default. `false` disables the
-   * origin gate entirely. Default: loopback-only.
-   *
-   * Unlike the WS transport, the MCP route does **not** allow `Origin`-less
-   * requests: a route-based endpoint is reachable by any local process, so a
-   * request must carry an `Origin` that passes the gate. Native clients
-   * (e.g. `devframe connect`) send their loopback origin explicitly.
-   */
-  allowedOrigins?: readonly string[] | false;
-}
-/** Connection facts a host knows about a request beyond the `Request` itself. */
-interface McpConnectionInfo {
-  /**
-   * The connecting peer's remote address (a node socket's `remoteAddress`),
-   * used to prove a same-machine caller when the endpoint relies on the
-   * loopback origin default with no identity check. A host that can resolve a
-   * trustworthy peer address (the h3/node mount) supplies it; when it's
-   * omitted the origin gate stays the only locality signal.
-   */
-  remoteAddress?: string;
-}
-interface McpFetchHandler {
-  /**
-   * WHATWG-`fetch` handler for the MCP endpoint. Hand every method
-   * (POST/GET/DELETE) on the endpoint's path to it; routing by path is the
-   * host's job. Pass {@link McpConnectionInfo} when the host can resolve the
-   * peer address so the default trust boundary can enforce same-machine
-   * locality.
-   */
-  fetch: (request: Request, connection?: McpConnectionInfo) => Promise<Response>;
-  /** Tear down the handler (aborts in-flight exchanges, drops the change bridge). */
-  dispose: () => Promise<void>;
-}
-//#endregion
 //#region src/utils/shared-state.d.ts
 type ImmutablePrimitive = undefined | null | boolean | string | number | Function;
 type Immutable<T> = T extends ImmutablePrimitive ? T : T extends Array<infer U> ? ImmutableArray<U> : T extends Map<infer K, infer V> ? ImmutableMap<K, V> : T extends Set<infer M> ? ImmutableSet<M> : ImmutableObject<T>;
@@ -2311,4 +2449,4 @@ interface ConnectionMeta {
  */
 interface DevframeConnectionConfigsRegistry {}
 //#endregion
-export { McpSetting as $, SharedStateEvents as A, DevframeDiagnosticsLogger as At, DevframeCliOptions as B, AgentResourceInput as Bt, createStreamSink as C, DevframeViewHost as Ct, ImmutableObject as D, DevframeHost as Dt, ImmutableMap as E, DevframeRpcSharedStates as Et, CreateMcpServerOptions as F, parseCliFlags as Ft, DevframeRpcOptions as G, DevframeAgentHost as Gt, DevframeDeploymentKind as H, AgentToolInput as Ht, McpConnectionInfo as I, AgentHandle as It, DevframeSnapshotRpcInputs as J, EventUnsubscribe as Jt, DevframeSetupInfo as K, DevframeAgentHostEvents as Kt, McpContentBlock as L, AgentManifest as Lt, SharedStatePatch as M, CliFlagsSchema as Mt, createSharedState as N, InferCliFlags as Nt, ImmutableSet as O, DevframeStorageScope as Ot, CreateMcpFetchHandlerOptions as P, defineCliFlags as Pt, McpRouteOptions as Q, McpFetchHandler as R, AgentResource as Rt, createStreamReader as S, SettingsForNamespace as St, ImmutableArray as T, DevframeRpcServerFunctions as Tt, DevframeDockDefaults as U, AgentToolProvider as Ut, DevframeDefinition as V, AgentTool as Vt, DevframeDuplicationStrategy as W, AgentToolProviderHandle as Wt, DevframeWsOptions as X, DevframeSseOptions as Y, EventsMap as Yt, McpAuthorization as Z, CreateStreamSinkOptions as _, ScopedBroadcastOptions as _t, DevframeConnectionConfigsRegistry as a, DevframeServiceOf as at, StreamSink as b, ScopedServerFunctions as bt, RpcBroadcastOptions as c, DevframeServicesRegistry as ct, RpcSharedStateHost as d, DevframeScopedNodeContext as dt, DevframeServiceDefinition as et, RpcStreamingChannel as f, DevframeScopedNodeRpc as ft, CreateStreamReaderOptions as g, DevframeSettingsStore as gt, BufferedChunk as h, DevframeSettingsRegistry as ht, DevframeCapabilities as i, DevframeServiceMeta as it, SharedStateOptions as j, DevframeAuthHandler as jt, SharedState as k, DevframeDiagnosticsHost as kt, RpcFunctionsHost as l, DevframeServicesScopeRegistry as lt, RpcStreamingHost as m, DevframeSettings as mt, ConnectionMetaSse as n, DevframeServiceId as nt, DevframeNodeContext as o, DevframeServiceScopeOf as ot, RpcStreamingChannelOptions as p, DevframeScopedStreamingHost as pt, DevframeSnapshotRpcEntry as q, EventEmitter as qt, ConnectionMetaWebsocket as r, DevframeServiceInput as rt, DevframeNodeRpcSession as s, DevframeServicesHost as st, ConnectionMeta as t, DevframeServiceDescriptor as tt, RpcSharedStateGetOptions as u, DevframeServicesState as ut, StreamErrorPayload as v, ScopedClientFunctions as vt, Immutable as w, DevframeRpcClientFunctions as wt, StreamSinkEvents as x, ScopedSharedStates as xt, StreamReader as y, ScopedRpcFn as yt, McpServerHandle as z, AgentResourceContent as zt };
+export { DevframeServiceOf as $, AgentToolProviderHandle as $t, SharedStateEvents as A, McpFetchHandler as At, DevframeSetupInfo as B, DevframeAuthHandler as Bt, createStreamSink as C, DevframeStorageScope as Ct, ImmutableObject as D, CreateMcpServerOptions as Dt, ImmutableMap as E, CreateMcpFetchHandlerOptions as Et, DevframeDefinition as F, McpResourceTemplate as Ft, McpAuthorization as G, AgentHandle as Gt, DevframeSnapshotRpcInputs as H, InferCliFlags as Ht, DevframeDeploymentKind as I, McpResourceTemplateContent as It, DevframeServiceDefinition as J, AgentResourceContent as Jt, McpRouteOptions as K, AgentManifest as Kt, DevframeDockDefaults as L, McpResourceTemplateEntry as Lt, SharedStatePatch as M, McpPromptArgument as Mt, createSharedState as N, McpPromptMessage as Nt, ImmutableSet as O, McpConnectionInfo as Ot, DevframeCliOptions as P, McpPromptResult as Pt, DevframeServiceMeta as Q, AgentToolProvider as Qt, DevframeDuplicationStrategy as R, McpResourcesChangedHook as Rt, createStreamReader as S, DevframeHost as St, ImmutableArray as T, DevframeDiagnosticsLogger as Tt, DevframeSseOptions as U, defineCliFlags as Ut, DevframeSnapshotRpcEntry as V, CliFlagsSchema as Vt, DevframeWsOptions as W, parseCliFlags as Wt, DevframeServiceId as X, AgentTool as Xt, DevframeServiceDescriptor as Y, AgentResourceInput as Yt, DevframeServiceInput as Z, AgentToolInput as Zt, CreateStreamSinkOptions as _, DevframeViewHost as _t, DevframeConnectionConfigsRegistry as a, DevframeScopedNodeContext as at, StreamSink as b, DevframeRpcSharedStates as bt, RpcBroadcastOptions as c, DevframeSettings as ct, RpcSharedStateHost as d, ScopedBroadcastOptions as dt, DevframeAgentHost as en, DevframeServiceScopeOf as et, RpcStreamingChannel as f, ScopedClientFunctions as ft, CreateStreamReaderOptions as g, SettingsForNamespace as gt, BufferedChunk as h, ScopedSharedStates as ht, DevframeCapabilities as i, EventsMap as in, DevframeServicesState as it, SharedStateOptions as j, McpPrompt as jt, SharedState as k, McpContentBlock as kt, RpcFunctionsHost as l, DevframeSettingsRegistry as lt, RpcStreamingHost as m, ScopedServerFunctions as mt, ConnectionMetaSse as n, EventEmitter as nn, DevframeServicesRegistry as nt, DevframeNodeContext as o, DevframeScopedNodeRpc as ot, RpcStreamingChannelOptions as p, ScopedRpcFn as pt, McpSetting as q, AgentResource as qt, ConnectionMetaWebsocket as r, EventUnsubscribe as rn, DevframeServicesScopeRegistry as rt, DevframeNodeRpcSession as s, DevframeScopedStreamingHost as st, ConnectionMeta as t, DevframeAgentHostEvents as tn, DevframeServicesHost as tt, RpcSharedStateGetOptions as u, DevframeSettingsStore as ut, StreamErrorPayload as v, DevframeRpcClientFunctions as vt, Immutable as w, DevframeDiagnosticsHost as wt, StreamSinkEvents as x, BrowserAgentClientInfo as xt, StreamReader as y, DevframeRpcServerFunctions as yt, DevframeRpcOptions as z, McpServerHandle as zt };

package/dist/{context-CeD8-IZA.mjs → context-CAJ5V017.mjs}

@@ -4,10 +4,10 @@ import { RpcFunctionsCollectorBase } from "./rpc/index.mjs";
 import { defineRpcFunction } from "./index.mjs";
 import { t as DEVFRAME_EVENTS } from "./events-0wDwalmL.mjs";
 import { DEVFRAME_SERVICES_STATE_KEY } from "./constants.mjs";
-import { t as diagnostics$1 } from "./diagnostics-Dngy7cNp.mjs";
-import { r as createEventEmitter, t as DevframeAgentHost } from "./host-agent-DB1yECaG.mjs";
-import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-DoZ1AMpq.mjs";
-import { t as createStorage } from "./storage-BQy9865B.mjs";
+import { t as diagnostics$1 } from "./diagnostics-E_PvUPsA.mjs";
+import { i as DevframeAgentHost, n as removeClientAgentSession, o as createEventEmitter, r as syncClientAgentTools } from "./client-agent-iBkMYxqn.mjs";
+import { n as createDebug, t as resolveStaticAssetsSource } from "./remote-assets-B-n83kUY.mjs";
+import { t as createStorage } from "./storage-CWI9PZ-5.mjs";
 import { a as satisfiesVersionRange, n as expandResolveFrom, r as importServicePackage, t as deepMergeOptionSets } from "./services-install-D5YUwFXW.mjs";
 import { isAbsolute, join, relative } from "pathe";
 import { createSharedState } from "devframe/utils/shared-state";
@@ -32,46 +32,6 @@ var DevframeDiagnosticsHost = class {
 	}
 };
 //#endregion
-//#region src/node/client-agent.ts
-const states = /* @__PURE__ */ new WeakMap();
-function getState(context) {
-	let state = states.get(context);
-	if (state) return state;
-	const sessions = /* @__PURE__ */ new Map();
-	state = {
-		sessions,
-		notifyChanged: context.agent.registerToolProvider(() => {
-			const tools = /* @__PURE__ */ new Map();
-			for (const { session, tools: manifests } of sessions.values()) for (const manifest of manifests) {
-				if (tools.has(manifest.id)) continue;
-				tools.set(manifest.id, {
-					...manifest,
-					handler: (args) => session.rpc.$callRaw({
-						method: "devframe:agent:invoke-client-tool",
-						args: [manifest.id, args]
-					})
-				});
-			}
-			return [...tools.values()];
-		}).notifyChanged
-	};
-	states.set(context, state);
-	return state;
-}
-function syncClientAgentTools(context, session, clientId, tools) {
-	const state = getState(context);
-	state.sessions.set(session.meta, {
-		session,
-		clientId,
-		tools
-	});
-	state.notifyChanged();
-}
-function removeClientAgentSession(context, meta) {
-	const state = states.get(context);
-	if (state?.sessions.delete(meta)) state.notifyChanged();
-}
-//#endregion
 //#region src/node/rpc-shared-state.ts
 const debug$2 = createDebug("devframe:rpc:state:changed");
 const debugSubscribe = createDebug("devframe:rpc:state:subscribe");
@@ -1261,9 +1221,9 @@ const BUILTIN_AGENT_RPC = [
 		name: "devframe:agent:sync-client-tools",
 		type: "action",
 		jsonSerializable: true,
-		setup: (context) => ({ handler(clientId, tools) {
+		setup: (context) => ({ handler(clientId, tools, info) {
 			const session = context.rpc.getCurrentRpcSession();
-			if (session) syncClientAgentTools(context, session, clientId, tools);
+			if (session) syncClientAgentTools(context, session, clientId, tools, info);
 		} })
 	})
 ];

package/dist/{context-B-2gsJ6Z.mjs → context-D_jSSdME.mjs}

@@ -1,5 +1,5 @@
 import { n as randomToken } from "./crypto-token-TVbGGFuj.mjs";
-import { t as createStorage } from "./storage-BQy9865B.mjs";
+import { t as createStorage } from "./storage-CWI9PZ-5.mjs";
 import { n as revokeAuthToken, t as revokeActiveConnectionsForToken } from "./revoke-CeQUo6KI.mjs";
 import { join } from "pathe";
 //#region src/node/hub-internals/context.ts

package/dist/{dev-pIWWAGYd.mjs → dev-BKBjIpX3.mjs}

@@ -1,10 +1,10 @@
 import { DEVFRAME_CONNECTION_META_FILENAME } from "./constants.mjs";
-import { t as diagnostics } from "./diagnostics-Dngy7cNp.mjs";
-import { t as createHostContext } from "./context-CeD8-IZA.mjs";
-import { t as resolveStaticAssetsSource } from "./remote-assets-DoZ1AMpq.mjs";
-import { a as resolveMcpConfig, c as joinURL, d as withoutLeadingSlash, i as resolveDevServerPort, l as withBase, n as normalizeBasePath, r as resolveBasePath, s as importAgenticMcp, t as loadAutoMcpAdapter } from "./_shared-B6K2DKhb.mjs";
+import { t as diagnostics } from "./diagnostics-E_PvUPsA.mjs";
+import { t as createHostContext } from "./context-CAJ5V017.mjs";
+import { t as resolveStaticAssetsSource } from "./remote-assets-B-n83kUY.mjs";
+import { a as resolveMcpConfig, c as joinURL, d as withoutLeadingSlash, i as resolveDevServerPort, l as withBase, n as normalizeBasePath, r as resolveBasePath, s as importAgenticMcp, t as loadAutoMcpAdapter } from "./_shared-C61zPwIz.mjs";
 import { t as createH3DevframeHost } from "./host-h3-BROI6SQ4.mjs";
-import { i as normalizeHttpServerUrl, n as resolveInstanceRegister, t as createInstanceShell } from "./instance-shell-DyVmJA6B.mjs";
+import { a as isAddressInUse, i as normalizeHttpServerUrl, n as resolveInstanceRegister, o as listenWithLoopbackTwin, t as createInstanceShell } from "./instance-shell-m4sY2oTG.mjs";
 import { open } from "./utils/open.mjs";
 import { mountStaticHandler } from "./utils/serve-static.mjs";
 import { resolve } from "pathe";
@@ -141,6 +141,9 @@ async function mountMcpRoute(app, context, def, base, setting) {
 		serverVersion: def.version ?? "0.0.0",
 		exposeSharedState: config.exposeSharedState ?? true,
 		instructions: config.instructions,
+		resourceTemplates: config.resourceTemplates,
+		onResourcesChanged: config.onResourcesChanged,
+		prompts: config.prompts,
 		authorization: config.authorization,
 		allowedOrigins: config.allowedOrigins
 	});
@@ -172,28 +175,11 @@ async function mountMcpRoute(app, context, def, base, setting) {
 async function createDevServer(def, options = {}) {
 	if (def.capabilities?.dev === false && !options.force) throw diagnostics.DF0058({ id: def.id });
 	const host = options.host ?? def.cli?.host ?? "localhost";
-	const requestedPort = options.port ?? await resolveDevServerPort(def, { host });
 	const flags = options.flags ?? {};
 	const basePath = options.basePath ? normalizeBasePath(options.basePath) : resolveBasePath(def, "standalone");
 	const app = options.app ?? new H3();
 	const server = createServer(toNodeHandler(app));
-	try {
-		await new Promise((resolveListen, rejectListen) => {
-			const onError = (error) => rejectListen(error);
-			server.once("error", onError);
-			server.listen(requestedPort, host, () => {
-				server.removeListener("error", onError);
-				resolveListen();
-			});
-		});
-	} catch (error) {
-		throw diagnostics.DF0052({
-			host,
-			port: requestedPort,
-			reason: error instanceof Error ? error.message : String(error),
-			cause: error
-		});
-	}
+	const { requestedPort, closeLoopbackTwin } = await listenDevServer(server, def, host, options);
 	const address = server.address();
 	const port = typeof address === "object" && address ? address.port : requestedPort;
 	const origin = normalizeHttpServerUrl(host, port);
@@ -231,6 +217,7 @@ async function createDevServer(def, options = {}) {
 	try {
 		await devframe.ready;
 	} catch (error) {
+		await closeLoopbackTwin();
 		await new Promise((resolveClose) => server.close(() => resolveClose()));
 		throw error;
 	}
@@ -251,10 +238,43 @@ async function createDevServer(def, options = {}) {
 		connectionMeta: transport.connectionMeta,
 		async close() {
 			await devframe.close();
+			await closeLoopbackTwin();
 			await new Promise((resolveClose) => server.close(() => resolveClose()));
 		}
 	};
 }
+/**
+* Bind the dev server. `getPort` probes only `host`, so it can call a port
+* free while another process holds it on the other loopback address of
+* `localhost`. The twin bind catches that, and a port that was not pinned
+* moves to the next free one.
+*/
+async function listenDevServer(server, def, host, options) {
+	let requestedPort = options.port ?? await resolveDevServerPort(def, {
+		host,
+		defaultPort: options.defaultPort
+	});
+	for (let attempt = 1;; attempt++) try {
+		return {
+			requestedPort,
+			closeLoopbackTwin: await listenWithLoopbackTwin(server, requestedPort, host)
+		};
+	} catch (error) {
+		if (options.port == null && attempt < 3 && isAddressInUse(error)) {
+			requestedPort = await resolveDevServerPort(def, {
+				host,
+				defaultPort: requestedPort + 1
+			});
+			continue;
+		}
+		throw diagnostics.DF0052({
+			host,
+			port: requestedPort,
+			reason: error instanceof Error ? error.message : String(error),
+			cause: error
+		});
+	}
+}
 async function maybeOpenBrowser(def, flags, origin, override, authHandler) {
 	const flagsOpen = flags.open;
 	const cliOpen = def.cli?.open;

package/dist/{diagnostics-Dngy7cNp.mjs → diagnostics-E_PvUPsA.mjs}

@@ -186,6 +186,18 @@ const diagnostics = defineDiagnostics({
 		DF0081: {
 			why: (p) => `Tool "${p.name}" returned invalid MCP content blocks: ${p.reason}`,
 			fix: "Pass `withMcpContent` a non-empty array of `{ type: 'text', text }`, `{ type: 'image', data, mimeType }` or `{ type: 'audio', data, mimeType }` blocks, with string fields and base64 `data`."
+		},
+		DF0082: {
+			why: (p) => `Tool "${p.tool}" was addressed to client "${p.clientId}", but no connected browser tab has that id and the tool.${p.live.length ? ` Connected clients: ${p.live.join(", ")}.` : " No browser tab is connected."}`,
+			fix: "Re-list the connected clients (`devframe:agent:list-clients`) and retry with a live `client_id`, or omit `client_id` to target the most recently focused tab."
+		},
+		DF0084: {
+			why: (p) => `MCP resource template "${p.name}" has an invalid \`uriTemplate\` "${p.uriTemplate}": ${p.reason}`,
+			fix: "Use RFC 6570 level 1 only: plain `{name}` expressions made of letters, digits, `_` and `.`, with no operator (`+`, `#`, `/`, `?`, …), modifier (`:n`, `*`) or list of names, and no `{` or `}` outside an expression."
+		},
+		DF0085: {
+			why: (p) => `MCP prompt "${p.name}" is listed more than once.`,
+			fix: "Give each entry in `prompts` its own `name`. `prompts/get` finds a prompt by its name, so two prompts cannot share one."
 		}
 	}
 });

package/dist/in-page-channel/index.d.mts

@@ -1,5 +1,5 @@
 import { D as InferArgsType, E as Thenable, O as InferReturnType, T as RpcReturnSchema, m as RpcFunctionAgentOptions, n as RpcArgsSchema } from "../types-BmDbfHCx.mjs";
-import { k as SharedState, qt as EventEmitter } from "../context-dOWXVHc6.mjs";
+import { k as SharedState, nn as EventEmitter } from "../context-BNxFOPbX.mjs";
 //#region src/in-page-channel/types.d.ts
 /**
  * The shared contract of one in-page channel, declared once (usually in a

package/dist/in-page-channel/index.mjs

@@ -1,6 +1,6 @@
 import { a as defineDiagnostics, i as createBirpc, n as argsToJsonSchema, o as DEVFRAME_EVENTS, r as resolveAgentSafety, t as toolInputToRpcArgs } from "../tool-input-CES3Pc4y.mjs";
 import { createEventEmitter } from "../utils/events.mjs";
-import { t as createSharedState } from "../shared-state-Cow3u-_m.mjs";
+import { t as createSharedState } from "../shared-state-Cc-Jrhma.mjs";
 import { nanoid } from "../utils/nanoid.mjs";
 import { r as registerBrowserAgentTool } from "../browser-agent-Pu-FLk6I.mjs";
 //#region src/in-page-channel/diagnostics.ts

package/dist/{index-DVGcpYm7.d.mts → index-CxJatyA1.d.mts}

@@ -1,5 +1,5 @@
-import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-dOWXVHc6.mjs";
-import { n as InternalAnonymousAuthStorage } from "./context-O8NJzl93.mjs";
+import { k as SharedState, o as DevframeNodeContext, s as DevframeNodeRpcSession } from "./context-BNxFOPbX.mjs";
+import { n as InternalAnonymousAuthStorage } from "./context-BGJi0ITA.mjs";
 //#region src/node/auth/revoke.d.ts
 /**
  * Flip `isTrusted` to false on any live WS clients connected with `token`