devframe 1.3.1 → 1.3.3

package/dist/rpc/transports/ws-server.d.mts

@@ -1,4 +1,151 @@
-import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "../../session-r6PDixP6.mjs";
-import { r as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-CY6BBHOy.mjs";
-import { a as attachWsRpcTransport, i as WsRpcTransportOptions, n as WsOriginRegistry, o as createWsOriginRegistry, r as WsRpcTransport, s as createWsRpcPeerHooks, t as CreateWsOriginRegistryOptions } from "../../ws-server-y2R76aSW.mjs";
-export { CreateWsOriginRegistryOptions, type DevframeNodeRpcSessionMeta, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcTransportKind, type DevframeWsPeer, WsOriginRegistry, WsRpcTransport, WsRpcTransportOptions, attachWsRpcTransport, createWsOriginRegistry, createWsRpcPeerHooks, isAllowedOrigin, isLoopbackHostname };
+import { a as ChannelOptions, n as BirpcGroup } from "../../index-BKu9BxcT.mjs";
+import { g as RpcFunctionDefinitionAny } from "../../types-KZOyhez5.mjs";
+import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "../../session-Y9R6tqg4.mjs";
+import { isAllowedOrigin, isLoopbackHostname } from "../../utils/origin.mjs";
+import { Hooks } from "crossws";
+import { NodeAdapter } from "crossws/adapters/node";
+import { Buffer } from "node:buffer";
+import { IncomingMessage, Server } from "node:http";
+import { Server as Server$1, ServerOptions } from "node:https";
+import { AddressInfo } from "node:net";
+import { Duplex } from "node:stream";
+export interface WsRpcTransportOptions {
+  /**
+   * Attach to an existing HTTP(S) server, sharing its port. Combine with
+   * `path` to bind the WS endpoint to a single route so it coexists with
+   * other upgrade handlers on the same server (e.g. a Vite dev server's HMR
+   * socket). The shared server's lifecycle is owned by the caller; closing
+   * this transport detaches the upgrade listener without closing the server.
+   */
+  server?: Server | Server$1;
+  /**
+   * Port for the standalone WebSocket server. Defaults to `0`, which lets the
+   * operating system assign an available port.
+   */
+  port?: number;
+  /** Host for the standalone WebSocket server. Defaults to `localhost`. */
+  host?: string;
+  /**
+   * Restrict the WS endpoint to a single upgrade route (e.g. `/__ws`). When
+   * sharing a `server`, non-matching upgrade requests are left untouched for
+   * other listeners to handle, so devframe's socket can sit alongside
+   * framework sockets (Vite HMR, etc.).
+   */
+  path?: string;
+  /**
+   * Create the adapter without binding it to anything: no server is created,
+   * no port is bound, no `upgrade` listener is installed. The caller drives
+   * the socket itself through {@link WsRpcTransport.handleUpgrade} (from its
+   * own `upgrade` listener) or {@link WsRpcTransport.attach} (to bind a
+   * server later). Takes precedence over `server` / `port` / `https`.
+   */
+  unbound?: boolean;
+  /**
+   * Destroy upgrade requests that don't match `path` instead of leaving them
+   * for other listeners. Enable this when devframe owns the shared server
+   * outright (nothing else handles its upgrades), so an off-route client is
+   * rejected promptly rather than left hanging. Default: `false`
+   * (coexist-friendly); servers this transport creates itself always
+   * destroy unmatched upgrades.
+   */
+  destroyUnmatched?: boolean;
+  /** When set, a new https.Server is created and the WS endpoint is attached to it. */
+  https?: ServerOptions;
+  /**
+   * Extra origins to accept on the WS upgrade beyond the loopback default.
+   * Add your LAN/tunnel origin here when reaching the tool from another host.
+   * Pass `false` to disable origin checking entirely (not recommended).
+   * Default: loopback-only.
+   */
+  allowedOrigins?: readonly string[] | WsOriginRegistry | false;
+  /**
+   * RPC function definitions, used by the per-call wire serializer to
+   * dispatch between strict-JSON and structured-clone encoding based
+   * on each function's `jsonSerializable` flag.
+   *
+   * When omitted, all messages fall back to structured-clone: safe but
+   * loses dev-time validation for `jsonSerializable: true` declarations.
+   */
+  definitions?: ReadonlyMap<string, Pick<RpcFunctionDefinitionAny, 'jsonSerializable'>>;
+  onConnected?: (connection: DevframeRpcConnection, meta: DevframeNodeRpcSessionMeta) => void;
+  onDisconnected?: (connection: DevframeRpcConnection, meta: DevframeNodeRpcSessionMeta) => void;
+  /** Override the default per-call serializer. Most callers should leave this unset. */
+  serialize?: ChannelOptions['serialize'];
+  /** Override the default per-call deserializer. Most callers should leave this unset. */
+  deserialize?: ChannelOptions['deserialize'];
+}
+export interface CreateWsOriginRegistryOptions {
+  /** Origins allowed before any external viewers are registered. */
+  allowedOrigins?: readonly string[];
+  /** Additional validation to run after the registration token is verified. */
+  validateOrigin?: (origin: string) => boolean;
+}
+export interface WsOriginRegistry {
+  /** Registration token to include in connection metadata. */
+  readonly token: string;
+  /** Read and register an origin from a connection bootstrap URL. */
+  registerFromUrl: (url: string) => string | undefined;
+  /** Check whether an origin is currently allowed. */
+  isAllowed: (origin: string | undefined) => boolean;
+}
+/**
+ * Create a live, token-protected origin allowlist for external browser
+ * viewers. Pass it to {@link WsRpcTransportOptions.allowedOrigins}, then use
+ * `registerFromUrl()` in the connection metadata handler to authorize a
+ * viewer without sharing a mutable array or disabling DNS-rebinding protection.
+ */
+export declare function createWsOriginRegistry(options?: CreateWsOriginRegistryOptions): WsOriginRegistry;
+export interface WsRpcTransport {
+  /**
+   * The crossws node adapter driving the socket; exposes the connected
+   * `peers` and pub/sub. See https://crossws.h3.dev.
+   */
+  ws: NodeAdapter;
+  /** Resolves when the transport-owned server is listening. */
+  ready: Promise<void>;
+  /** Returns the bound address, or `null` when the server is not listening. */
+  address: () => AddressInfo | string | null;
+  /**
+   * Complete a `node:http` `upgrade` event on this transport, applying the
+   * same `path` filter and origin gate the transport's own listener uses.
+   * Wire it into a host server directly (`server.on('upgrade',
+   * transport.handleUpgrade)`) or call it from an existing listener.
+   */
+  handleUpgrade: (req: IncomingMessage, socket: Duplex, head: Buffer) => void;
+  /**
+   * Route a server's `upgrade` events to this transport, returning a detach
+   * function. Use it to bind an `unbound` transport once the host server
+   * exists; {@link WsRpcTransport.close} detaches every server attached this
+   * way (without closing them, since the caller owns their lifecycle).
+   */
+  attach: (server: Server | Server$1) => () => void;
+  /** Remove the upgrade listener from a shared `server` (a no-op otherwise). */
+  detach: () => void;
+  /**
+   * Tear the transport down deterministically: detach from a shared server,
+   * force-terminate every connected peer, and close any server this
+   * transport created itself (`port` / `https` modes).
+   */
+  close: () => Promise<void>;
+}
+/**
+ * The per-peer lifecycle hooks driving a devframe RPC WebSocket, shaped for
+ * any [crossws](https://crossws.h3.dev) adapter. {@link attachWsRpcTransport}
+ * feeds them to the Node adapter; runtime-specific attachments (e.g. Bun's
+ * fetch-upgrade adapter) reuse the same hooks so every transport speaks the
+ * identical wire protocol: one birpc channel per peer, per-method
+ * `jsonSerializable` dispatch between strict JSON and structured-clone.
+ */
+export declare function createWsRpcPeerHooks<ClientFunctions extends object, ServerFunctions extends object>(rpcGroup: BirpcGroup<ClientFunctions, ServerFunctions, false>, options?: Pick<WsRpcTransportOptions, 'onConnected' | 'onDisconnected' | 'definitions' | 'serialize' | 'deserialize'>): Partial<Hooks>;
+/**
+ * Attach a WebSocket transport to an existing RPC group, powered by
+ * [crossws](https://crossws.h3.dev). Either attach to an existing HTTP(S)
+ * `server` (sharing its port, optionally scoped to a `path`), or let this
+ * helper create a standalone server from `port` / `host` / `https`.
+ *
+ * Returns the crossws node adapter, standalone-server readiness/address
+ * accessors, `detach` (remove the upgrade listener from a shared `server`),
+ * and `close` (full deterministic teardown).
+ */
+export declare function attachWsRpcTransport<ClientFunctions extends object, ServerFunctions extends object>(rpcGroup: BirpcGroup<ClientFunctions, ServerFunctions, false>, options?: WsRpcTransportOptions): WsRpcTransport;
+export { type DevframeNodeRpcSessionMeta, type DevframeRpcConnection, type DevframeRpcConnectionRequest, type DevframeRpcTransportKind, type DevframeWsPeer, isAllowedOrigin, isLoopbackHostname };

package/dist/rpc/transports/ws-server.mjs

@@ -1,12 +1,12 @@
 import "../../constants.mjs";
-import { t as createRpcWireCodec } from "../../wire-codec-B1W3zH3L.mjs";
-import { n as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-DZit9g29.mjs";
-import { t as createRpcSessionMeta } from "../../session-DPfj6zQG.mjs";
-import { n as randomToken, r as timingSafeEqual } from "../../crypto-token-TVbGGFuj.mjs";
+import { n as randomToken, r as timingSafeEqual } from "../../crypto-token-CUhPE_ei.mjs";
+import { n as isLoopbackHostname, t as isAllowedOrigin } from "../../origin-Ck7mLbKU.mjs";
+import { t as createRpcWireCodec } from "../../wire-codec-BdngvzfH.mjs";
+import { t as createRpcSessionMeta } from "../../session-BjvoLH3r.mjs";
 import { createServer } from "node:http";
 import { createServer as createServer$1 } from "node:https";
 import crossws from "crossws/adapters/node";
-//#region src/rpc/transports/ws-server.ts
+// src/rpc/transports/ws-server.ts
 /**
 * Create a live, token-protected origin allowlist for external browser
 * viewers. Pass it to {@link WsRpcTransportOptions.allowedOrigins}, then use
@@ -229,5 +229,4 @@ function attachWsRpcTransport(rpcGroup, options = {}) {
 		}
 	};
 }
-//#endregion
 export { attachWsRpcTransport, createWsOriginRegistry, createWsRpcPeerHooks, isAllowedOrigin, isLoopbackHostname };

package/dist/{rpc-core-BLc5hm9X.mjs → rpc-core-BmDHiDR6.mjs}

@@ -1,9 +1,9 @@
-import { n as __exportAll } from "./rolldown-runtime-B4iAMlE-.mjs";
-import { n as getRpcResolvedSetupResult, t as getRpcHandler } from "./handler-DmaAfpGq.mjs";
+import { n as __exportAll } from "./rolldown-runtime-BVN1G_yT.mjs";
 import { createRpcServer } from "./rpc/server.mjs";
-import { t as diagnostics } from "./diagnostics-E_PvUPsA.mjs";
+import { n as getRpcResolvedSetupResult, t as getRpcHandler } from "./handler-DkLlj3-B.mjs";
+import { t as diagnostics } from "./diagnostics-DC1-WcvN.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
-//#region src/node/rpc-core.ts
+// src/node/rpc-core.ts
 var rpc_core_exports = /* @__PURE__ */ __exportAll({ createContextRpcServer: () => createContextRpcServer });
 /**
 * Bind a devframe context's registered RPC functions to a birpc group,
@@ -93,5 +93,4 @@ function createContextRpcServer(options) {
 		onDisconnected
 	};
 }
-//#endregion
 export { rpc_core_exports as n, createContextRpcServer as t };

package/dist/{rpc-core-CGTCla-R.d.mts → rpc-core-CblgPYJ_.d.mts}

@@ -1,9 +1,8 @@
-import { n as BirpcGroup, o as EventOptions } from "./index-Bia1vKjL.mjs";
-import { Bt as DevframeAuthHandler, o as DevframeNodeContext, s as DevframeNodeRpcSession, vt as DevframeRpcClientFunctions, yt as DevframeRpcServerFunctions } from "./context-BNxFOPbX.mjs";
-import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-r6PDixP6.mjs";
-import "./ws-server-y2R76aSW.mjs";
-import "./index-CxJatyA1.mjs";
-//#region src/node/rpc-core.d.ts
+import { n as BirpcGroup, o as EventOptions } from "./index-BKu9BxcT.mjs";
+import "./rpc/transports/ws-server.mjs";
+import { n as DevframeRpcConnection, t as DevframeNodeRpcSessionMeta } from "./session-Y9R6tqg4.mjs";
+import { B as DevframeNodeRpcSession, J as DevframeRpcClientFunctions, Y as DevframeRpcServerFunctions, k as DevframeAuthHandler, z as DevframeNodeContext } from "./index-BhUqJUHG.mjs";
+import "./node/auth.mjs";
 interface CreateContextRpcServerOptions {
   context: DevframeNodeContext;
   /**
@@ -45,5 +44,4 @@ interface ContextRpcServer {
  * `authorize` gate, and the `auth: false` auto-trust handshake shim.
  */
 declare function createContextRpcServer(options: CreateContextRpcServerOptions): ContextRpcServer;
-//#endregion
 export { CreateContextRpcServerOptions as n, createContextRpcServer as r, ContextRpcServer as t };

package/dist/{serialization-BhuOoL80.mjs → serialization-iiTQ7n21.mjs}

@@ -1,5 +1,5 @@
-import { i as defineDiagnostics } from "./nostics-D0PvLZsn.mjs";
-//#region src/rpc/diagnostics.ts
+import { i as defineDiagnostics } from "./nostics-InlX4tmd.mjs";
+// src/rpc/diagnostics.ts
 const diagnostics = defineDiagnostics({
 	docsBase: "https://devfra.me/errors",
 	codes: {
@@ -35,8 +35,7 @@ const diagnostics = defineDiagnostics({
 		}
 	}
 });
-//#endregion
-//#region src/rpc/serialization.ts
+// src/rpc/serialization.ts
 /**
 * Wire format used by the live RPC transports (WebSocket and SSE).
 *
@@ -112,5 +111,4 @@ function formatPath(parent, key) {
 	if (key === "") return "<root>";
 	return key;
 }
-//#endregion
 export { strictJsonStringify as n, diagnostics as r, STRUCTURED_CLONE_PREFIX as t };

package/dist/{services-install-D5YUwFXW.mjs → services-install-DCuDzMJ-.mjs}

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 import { isAbsolute, join } from "pathe";
 import { pathToFileURL } from "node:url";
-//#region src/node/services-install.ts
+// src/node/services-install.ts
 /**
 * Turn a `resolveFrom` value (a file path, a file URL like `import.meta.url`,
 * or a directory) into something `createRequire` accepts; a directory gets a
@@ -166,5 +166,4 @@ function deepMergeTwo(a, b) {
 function deepMergeOptionSets(sets) {
 	return sets.reduce((merged, set) => deepMergeTwo(merged, set));
 }
-//#endregion
 export { satisfiesVersionRange as a, resolveServicePackage as i, expandResolveFrom as n, importServicePackage as r, deepMergeOptionSets as t };

package/dist/{session-DPfj6zQG.mjs → session-BjvoLH3r.mjs}

@@ -1,4 +1,4 @@
-//#region src/rpc/transports/session.ts
+// src/rpc/transports/session.ts
 let sessionId = 0;
 /**
 * Mint the per-connection session meta every transport binding shares:
@@ -12,5 +12,4 @@ function createRpcSessionMeta() {
 		subscribedStates: /* @__PURE__ */ new Set()
 	};
 }
-//#endregion
 export { createRpcSessionMeta as t };

package/dist/{session-r6PDixP6.d.mts → session-Y9R6tqg4.d.mts}

@@ -1,4 +1,3 @@
-//#region src/rpc/transports/session.d.ts
 /**
  * Structural view of the crossws `Peer` backing a WebSocket RPC connection:
  * the transport-independent slice of its API (identity, send, pub/sub,
@@ -107,5 +106,4 @@ interface DevframeNodeRpcSessionMeta {
    */
   uploadingStreams?: Set<string>;
 }
-//#endregion
 export { DevframeWsPeer as a, DevframeRpcTransportKind as i, DevframeRpcConnection as n, DevframeRpcConnectionRequest as r, DevframeNodeRpcSessionMeta as t };

package/dist/{shared-state-Cc-Jrhma.mjs → shared-state-COV7NCbd.mjs}

@@ -1,6 +1,6 @@
 import { createEventEmitter } from "./utils/events.mjs";
 import { nanoid } from "./utils/nanoid.mjs";
-//#region ../../node_modules/.pnpm/immer@11.2.3/node_modules/immer/dist/immer.mjs
+// ../../node_modules/.pnpm/immer@11.2.9/node_modules/immer/dist/immer.mjs
 var NOTHING = Symbol.for("immer-nothing");
 var DRAFTABLE = Symbol.for("immer-draftable");
 var DRAFT_STATE = Symbol.for("immer-state");
@@ -449,7 +449,7 @@ function peek(draft, prop) {
 	return (state ? latest(state) : draft)[prop];
 }
 function isRelocatedBaseRef(state, prop, value) {
-	if (state.type_ !== 1 || !state.allIndicesReassigned_ || state.assigned_?.get(prop) || !isDraftable(value) || value[DRAFT_STATE]) return false;
+	if (state.type_ !== 1 || !state.allIndicesReassigned_ || !isDraftable(value) || value[DRAFT_STATE]) return false;
 	return state.baseRefs_.has(value);
 }
 function readPropFromProto(state, source, prop) {
@@ -667,7 +667,7 @@ function enablePatches() {
 			const proxyDraft = getProxyDraft(get(parentCopy, state.key_));
 			const valueAtKey = get(parentCopy, state.key_);
 			if (valueAtKey === void 0) return null;
-			if (valueAtKey !== state.draft_ && valueAtKey !== state.base_ && valueAtKey !== state.copy_) return null;
+			if (valueAtKey !== state.draft_ && valueAtKey !== state.copy_) return null;
 			if (proxyDraft != null && proxyDraft.base_ !== state.base_) return null;
 			const isSet2 = state.parent_.type_ === 3;
 			let key;
@@ -899,8 +899,7 @@ var immer = new Immer2();
 var produce = immer.produce;
 var produceWithPatches = /* @__PURE__ */ immer.produceWithPatches.bind(immer);
 var applyPatches = /* @__PURE__ */ immer.applyPatches.bind(immer);
-//#endregion
-//#region src/utils/shared-state.ts
+// src/utils/shared-state.ts
 /**
 * Upper bound on retained syncIds. Loop echoes arrive near-immediately, so a
 * generous window preserves de-dup while capping memory on long-lived,
@@ -948,5 +947,4 @@ function createSharedState(options) {
 		syncIds
 	};
 }
-//#endregion
 export { createSharedState as t };

package/dist/{state-W4wI6X5X.mjs → state-B_yjfeqo.mjs}

@@ -1,6 +1,6 @@
 import { DEVFRAME_OTP_URL_PARAM } from "./constants.mjs";
-import { n as randomToken, r as timingSafeEqual, t as randomDigits } from "./crypto-token-TVbGGFuj.mjs";
-//#region ../../node_modules/.pnpm/ua-parser-modern@0.1.1/node_modules/ua-parser-modern/dist/index.mjs
+import { n as randomToken, r as timingSafeEqual, t as randomDigits } from "./crypto-token-CUhPE_ei.mjs";
+// ../../node_modules/.pnpm/ua-parser-modern@0.1.1/node_modules/ua-parser-modern/dist/index.mjs
 const EMPTY = "";
 const UNKNOWN = "?";
 const MAJOR = "major";
@@ -1161,8 +1161,7 @@ function parseUA(uastringOrExtensions, extensions) {
 		}
 	};
 }
-//#endregion
-//#region src/node/auth/state.ts
+// src/node/auth/state.ts
 /**
 * Format a raw `navigator.userAgent` string into the short display label
 * shown for a trusted device (e.g. "Chrome 120 | macOS 14 desktop").
@@ -1308,5 +1307,4 @@ function exchangeTempAuthCode(code, session, info, storage) {
 	refreshTempAuthCode();
 	return authToken;
 }
-//#endregion
 export { getTempAuthCodeInfo as a, getTempAuthCode as i, describeUA as n, refreshTempAuthCode as o, exchangeTempAuthCode as r, verifyAuthToken as s, buildOtpAuthUrl as t };

package/dist/{storage-CWI9PZ-5.mjs → storage-DpJ52UB_.mjs}

@@ -1,9 +1,9 @@
-import { t as diagnostics } from "./diagnostics-E_PvUPsA.mjs";
+import { t as diagnostics } from "./diagnostics-DC1-WcvN.mjs";
 import { dirname } from "pathe";
 import { createSharedState } from "devframe/utils/shared-state";
 import fs from "node:fs";
 import process from "node:process";
-//#region ../../node_modules/.pnpm/perfect-debounce@2.1.0/node_modules/perfect-debounce/dist/index.mjs
+// ../../node_modules/.pnpm/perfect-debounce@2.1.0/node_modules/perfect-debounce/dist/index.mjs
 const DEBOUNCE_DEFAULTS = { trailing: true };
 /**
 Debounce functions
@@ -89,8 +89,7 @@ function debounce(fn, wait = 25, options = {}) {
 async function _applyPromised(fn, _this, args) {
 	return await fn.apply(_this, args);
 }
-//#endregion
-//#region src/node/storage.ts
+// src/node/storage.ts
 function safeJsonParse(text) {
 	return JSON.parse(text, (key, value) => {
 		if (key === "__proto__" || key === "constructor" && value && typeof value === "object" && "prototype" in value) return void 0;
@@ -133,5 +132,4 @@ function createStorage(options) {
 	}, debounceTime));
 	return state;
 }
-//#endregion
 export { createStorage as t };

package/dist/{structured-clone-CbAV5rFI.mjs → structured-clone-B1N_XQvA.mjs}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/structured-clone-es@2.0.1/node_modules/structured-clone-es/dist/index.mjs
+// ../../node_modules/.pnpm/structured-clone-es@2.0.1/node_modules/structured-clone-es/dist/index.mjs
 const env = typeof self === "object" ? self : globalThis;
 const SAFE_ERROR_NAMES = /* @__PURE__ */ new Set([
 	"Error",
@@ -218,8 +218,7 @@ function parse(str) {
 function stringify(any) {
 	return $stringify(serialize(any, options));
 }
-//#endregion
-//#region src/utils/structured-clone.ts
+// src/utils/structured-clone.ts
 /**
 * Serialize a structured-cloneable value to a single string. Equivalent
 * to `JSON.stringify(structuredCloneSerialize(value))`.
@@ -233,5 +232,4 @@ function structuredCloneStringify(value) {
 function structuredCloneParse(value) {
 	return parse(value);
 }
-//#endregion
 export { structuredCloneStringify as n, structuredCloneParse as t };

package/dist/{structured-clone-CgtQ61SA.mjs → structured-clone-D1dOCZvc.mjs}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/structured-clone-es@2.0.1/node_modules/structured-clone-es/dist/index.mjs
+// ../../node_modules/.pnpm/structured-clone-es@2.0.1/node_modules/structured-clone-es/dist/index.mjs
 const env = typeof self === "object" ? self : globalThis;
 const SAFE_ERROR_NAMES = /* @__PURE__ */ new Set([
 	"Error",
@@ -218,8 +218,7 @@ function parse(str) {
 function stringify(any) {
 	return $stringify(serialize(any, options));
 }
-//#endregion
-//#region src/utils/structured-clone.ts
+// src/utils/structured-clone.ts
 /**
 * Serialize a structured-cloneable value (`Map`, `Set`, `Date`, `BigInt`,
 * cycles, class instances, …) into a JSON-safe records array.
@@ -246,5 +245,4 @@ function structuredCloneStringify(value) {
 function structuredCloneParse(value) {
 	return parse(value);
 }
-//#endregion
 export { structuredCloneStringify as i, structuredCloneParse as n, structuredCloneSerialize as r, structuredCloneDeserialize as t };

package/dist/{tool-input-CES3Pc4y.mjs → tool-input-CcCgJ8jq.mjs}

@@ -1,7 +1,7 @@
 import { colors } from "./utils/colors.mjs";
 import { defineDiagnostics } from "nostics";
 import { ansiFormatter } from "nostics/formatters/ansi";
-//#region src/events.ts
+// src/events.ts
 /**
 * Centralized registry of the core devframe event names: the node-side host
 * bus events, the client RPC connection events, and the server→client
@@ -79,8 +79,7 @@ const DEVFRAME_EVENTS = {
 		inPageChannel: "devframe:in-page-channel"
 	}
 };
-//#endregion
-//#region src/utils/nostics.ts
+// src/utils/nostics.ts
 const formatAnsi = ansiFormatter(colors);
 /**
 * The reporter every {@link defineDiagnostics} call below wires in ahead of
@@ -105,8 +104,7 @@ function defineDiagnostics$1(options) {
 		reporters: [devframeReporter, ...options.reporters ?? []]
 	});
 }
-//#endregion
-//#region ../../node_modules/.pnpm/birpc@4.2.0/node_modules/birpc/dist/index.mjs
+// ../../node_modules/.pnpm/birpc@4.2.0/node_modules/birpc/dist/index.mjs
 function createPromiseWithResolvers() {
 	let resolve;
 	let reject;
@@ -302,8 +300,7 @@ function createBirpc($functions, options) {
 	_promiseInit = on(onMessage);
 	return rpc;
 }
-//#endregion
-//#region src/agent/safety.ts
+// src/agent/safety.ts
 /**
 * An agent tool's safety classification: the explicit `agent.safety`, else
 * inferred from the function `type` (`static`/`query` are read-only, the rest
@@ -313,8 +310,7 @@ function resolveAgentSafety(type, agent) {
 	if (agent.safety) return agent.safety;
 	return type === "static" || type === "query" || type == null ? "read" : "action";
 }
-//#endregion
-//#region src/agent/to-json-schema.ts
+// src/agent/to-json-schema.ts
 const FALLBACK_OBJECT_SCHEMA = Object.freeze({
 	type: "object",
 	additionalProperties: true
@@ -365,8 +361,7 @@ function argsToJsonSchema(args) {
 		additionalProperties: false
 	};
 }
-//#endregion
-//#region src/tool-input.ts
+// src/tool-input.ts
 /**
 * Convert an object-shaped tool input into positional arguments.
 *
@@ -390,5 +385,4 @@ function collectPositionalArgs(input, argumentCount) {
 function toolInputToRpcArgs(input, argumentCount) {
 	return collectPositionalArgs(input, argumentCount) ?? [input];
 }
-//#endregion
 export { defineDiagnostics$1 as a, createBirpc as i, argsToJsonSchema as n, DEVFRAME_EVENTS as o, resolveAgentSafety as r, toolInputToRpcArgs as t };

package/dist/types/index.d.mts

@@ -1,6 +1,6 @@
-import { m as RpcFunctionAgentOptions } from "../types-BmDbfHCx.mjs";
-import { $ as DevframeServiceOf, $t as AgentToolProviderHandle, At as McpFetchHandler, B as DevframeSetupInfo, Ct as DevframeStorageScope, Dt as CreateMcpServerOptions, Et as CreateMcpFetchHandlerOptions, F as DevframeDefinition, Ft as McpResourceTemplate, G as McpAuthorization, Gt as AgentHandle, H as DevframeSnapshotRpcInputs, I as DevframeDeploymentKind, It as McpResourceTemplateContent, J as DevframeServiceDefinition, Jt as AgentResourceContent, K as McpRouteOptions, Kt as AgentManifest, L as DevframeDockDefaults, Lt as McpResourceTemplateEntry, Mt as McpPromptArgument, Nt as McpPromptMessage, Ot as McpConnectionInfo, P as DevframeCliOptions, Pt as McpPromptResult, Q as DevframeServiceMeta, Qt as AgentToolProvider, R as DevframeDuplicationStrategy, Rt as McpResourcesChangedHook, St as DevframeHost, Tt as DevframeDiagnosticsLogger, U as DevframeSseOptions, V as DevframeSnapshotRpcEntry, W as DevframeWsOptions, X as DevframeServiceId, Xt as AgentTool, Y as DevframeServiceDescriptor, Yt as AgentResourceInput, Z as DevframeServiceInput, Zt as AgentToolInput, _t as DevframeViewHost, a as DevframeConnectionConfigsRegistry, at as DevframeScopedNodeContext, bt as DevframeRpcSharedStates, c as RpcBroadcastOptions, ct as DevframeSettings, d as RpcSharedStateHost, dt as ScopedBroadcastOptions, en as DevframeAgentHost, et as DevframeServiceScopeOf, f as RpcStreamingChannel, ft as ScopedClientFunctions, gt as SettingsForNamespace, ht as ScopedSharedStates, i as DevframeCapabilities, in as EventsMap, it as DevframeServicesState, jt as McpPrompt, kt as McpContentBlock, l as RpcFunctionsHost, lt as DevframeSettingsRegistry, m as RpcStreamingHost, mt as ScopedServerFunctions, n as ConnectionMetaSse, nn as EventEmitter, nt as DevframeServicesRegistry, o as DevframeNodeContext, ot as DevframeScopedNodeRpc, p as RpcStreamingChannelOptions, pt as ScopedRpcFn, q as McpSetting, qt as AgentResource, r as ConnectionMetaWebsocket, rn as EventUnsubscribe, rt as DevframeServicesScopeRegistry, s as DevframeNodeRpcSession, st as DevframeScopedStreamingHost, t as ConnectionMeta, tn as DevframeAgentHostEvents, tt as DevframeServicesHost, u as RpcSharedStateGetOptions, ut as DevframeSettingsStore, vt as DevframeRpcClientFunctions, wt as DevframeDiagnosticsHost, yt as DevframeRpcServerFunctions, z as DevframeRpcOptions, zt as McpServerHandle } from "../context-BNxFOPbX.mjs";
-import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "../session-r6PDixP6.mjs";
-import { a as RemoteAssetsStore, i as RemoteAssetsProviderCustom, n as RemoteAssetsErrorMessage, o as StaticAssetsSource, r as RemoteAssetsProvider, t as RemoteAssets } from "../remote-assets-eBvSKZMS.mjs";
-import { i as DevframeDefineDiagnosticsOptions } from "../nostics-DWvukRwa.mjs";
+import { m as RpcFunctionAgentOptions } from "../types-KZOyhez5.mjs";
+import { $ as DevframeServiceId, $t as AgentToolProviderHandle, B as DevframeNodeRpcSession, C as McpPromptResult, Ct as DevframeDiagnosticsHost, D as McpResourcesChangedHook, E as McpResourceTemplateEntry, F as ConnectionMetaSse, G as RpcStreamingChannel, Gt as AgentHandle, H as RpcFunctionsHost, I as ConnectionMetaWebsocket, J as DevframeRpcClientFunctions, Jt as AgentResourceContent, K as RpcStreamingChannelOptions, Kt as AgentManifest, L as DevframeCapabilities, O as McpServerHandle, P as ConnectionMeta, Q as DevframeServiceDescriptor, Qt as AgentToolProvider, R as DevframeConnectionConfigsRegistry, S as McpPromptMessage, St as DevframeStorageScope, T as McpResourceTemplateContent, U as RpcSharedStateGetOptions, V as RpcBroadcastOptions, W as RpcSharedStateHost, X as DevframeRpcSharedStates, Xt as AgentTool, Y as DevframeRpcServerFunctions, Yt as AgentResourceInput, Z as DevframeServiceDefinition, Zt as AgentToolInput, _ as McpConnectionInfo, _t as ScopedServerFunctions, a as DevframeDuplicationStrategy, at as DevframeServicesRegistry, b as McpPrompt, bt as DevframeViewHost, c as DevframeSnapshotRpcEntry, ct as DevframeScopedNodeContext, d as DevframeWsOptions, dt as DevframeSettings, en as DevframeAgentHost, et as DevframeServiceInput, f as McpAuthorization, ft as DevframeSettingsRegistry, g as CreateMcpServerOptions, gt as ScopedRpcFn, h as CreateMcpFetchHandlerOptions, ht as ScopedClientFunctions, i as DevframeDockDefaults, in as EventsMap, it as DevframeServicesHost, l as DevframeSnapshotRpcInputs, lt as DevframeScopedNodeRpc, m as McpSetting, mt as ScopedBroadcastOptions, n as DevframeDefinition, nn as EventEmitter, nt as DevframeServiceOf, o as DevframeRpcOptions, ot as DevframeServicesScopeRegistry, p as McpRouteOptions, pt as DevframeSettingsStore, q as RpcStreamingHost, qt as AgentResource, r as DevframeDeploymentKind, rn as EventUnsubscribe, rt as DevframeServiceScopeOf, s as DevframeSetupInfo, st as DevframeServicesState, t as DevframeCliOptions, tn as DevframeAgentHostEvents, tt as DevframeServiceMeta, u as DevframeSseOptions, ut as DevframeScopedStreamingHost, v as McpContentBlock, vt as ScopedSharedStates, w as McpResourceTemplate, wt as DevframeDiagnosticsLogger, x as McpPromptArgument, xt as DevframeHost, y as McpFetchHandler, yt as SettingsForNamespace, z as DevframeNodeContext } from "../index-BhUqJUHG.mjs";
+import { a as DevframeWsPeer, i as DevframeRpcTransportKind, n as DevframeRpcConnection, r as DevframeRpcConnectionRequest, t as DevframeNodeRpcSessionMeta } from "../session-Y9R6tqg4.mjs";
+import { DevframeDefineDiagnosticsOptions } from "../utils/nostics.mjs";
+import { a as RemoteAssetsStore, i as RemoteAssetsProviderCustom, n as RemoteAssetsErrorMessage, o as StaticAssetsSource, r as RemoteAssetsProvider, t as RemoteAssets } from "../remote-assets-5AQMHZnV.mjs";
 export { AgentHandle, AgentManifest, AgentResource, AgentResourceContent, AgentResourceInput, AgentTool, AgentToolInput, AgentToolProvider, AgentToolProviderHandle, ConnectionMeta, ConnectionMetaSse, ConnectionMetaWebsocket, CreateMcpFetchHandlerOptions, CreateMcpServerOptions, DevframeAgentHost, DevframeAgentHostEvents, DevframeCapabilities, DevframeCliOptions, DevframeConnectionConfigsRegistry, type DevframeDefineDiagnosticsOptions, DevframeDefinition, DevframeDeploymentKind, DevframeDiagnosticsHost, DevframeDiagnosticsLogger, DevframeDockDefaults, DevframeDuplicationStrategy, DevframeHost, DevframeNodeContext, DevframeNodeRpcSession, type DevframeNodeRpcSessionMeta, DevframeRpcClientFunctions, type DevframeRpcConnection, type DevframeRpcConnectionRequest, DevframeRpcOptions, DevframeRpcServerFunctions, DevframeRpcSharedStates, type DevframeRpcTransportKind, DevframeScopedNodeContext, DevframeScopedNodeRpc, DevframeScopedStreamingHost, DevframeServiceDefinition, DevframeServiceDescriptor, DevframeServiceId, DevframeServiceInput, DevframeServiceMeta, DevframeServiceOf, DevframeServiceScopeOf, DevframeServicesHost, DevframeServicesRegistry, DevframeServicesScopeRegistry, DevframeServicesState, DevframeSettings, DevframeSettingsRegistry, DevframeSettingsStore, DevframeSetupInfo, DevframeSnapshotRpcEntry, DevframeSnapshotRpcInputs, DevframeSseOptions, DevframeStorageScope, DevframeViewHost, DevframeWsOptions, type DevframeWsPeer, EventEmitter, EventUnsubscribe, EventsMap, McpAuthorization, McpConnectionInfo, McpContentBlock, McpFetchHandler, McpPrompt, McpPromptArgument, McpPromptMessage, McpPromptResult, McpResourceTemplate, McpResourceTemplateContent, McpResourceTemplateEntry, McpResourcesChangedHook, McpRouteOptions, McpServerHandle, McpSetting, RemoteAssets, RemoteAssetsErrorMessage, RemoteAssetsProvider, RemoteAssetsProviderCustom, RemoteAssetsStore, RpcBroadcastOptions, type RpcFunctionAgentOptions, RpcFunctionsHost, RpcSharedStateGetOptions, RpcSharedStateHost, RpcStreamingChannel, RpcStreamingChannelOptions, RpcStreamingHost, ScopedBroadcastOptions, ScopedClientFunctions, ScopedRpcFn, ScopedServerFunctions, ScopedSharedStates, SettingsForNamespace, StaticAssetsSource };

package/dist/{types-BmDbfHCx.d.mts → types-KZOyhez5.d.mts}

@@ -1,11 +1,9 @@
-import { t as StandardSchemaV1 } from "./index-CeEtxDmK.mjs";
-//#region src/rpc/utils.d.ts
+import { t as StandardSchemaV1 } from "./index-BIRF0E5l.mjs";
+import "./index-BKu9BxcT.mjs";
 /** Infers a TypeScript argument tuple from a Standard Schema array */
 type InferArgsType<S extends RpcArgsSchema | undefined> = S extends readonly [] ? [] : S extends readonly [infer H, ...infer T] ? H extends StandardSchemaV1 ? T extends readonly StandardSchemaV1[] ? [StandardSchemaV1.InferInput<H>, ...InferArgsType<T>] : never : never : never;
 /** Infers a TypeScript return type from a Standard Schema */
 type InferReturnType<S extends RpcReturnSchema | undefined> = S extends StandardSchemaV1 ? StandardSchemaV1.InferInput<S> : void;
-//#endregion
-//#region src/rpc/types.d.ts
 type Thenable<T> = T | Promise<T>;
 type EntriesToObject<T extends readonly [string, any][]> = { [K in T[number] as K[0]]: K[1]; };
 /**
@@ -257,5 +255,4 @@ type RpcDefinitionsToFunctionsWithNamespace<NS extends string, T extends readonl
 type RpcDefinitionsFilter<T extends readonly RpcFunctionDefinitionAny[], Type extends RpcFunctionType> = { [K in keyof T]: T[K] extends {
   type: Type;
 } ? T[K] : never; };
-//#endregion
 export { RpcFunctionType as C, InferArgsType as D, Thenable as E, InferReturnType as O, RpcFunctionSetupResult as S, RpcReturnSchema as T, RpcFunctionDefinitionAnyWithContext as _, RpcDefinitionsToFunctionsWithNamespace as a, RpcFunctionDefinitionWithSchemas as b, RpcDumpCollectionOptions as c, RpcDumpRecord as d, RpcDumpRecordError as f, RpcFunctionDefinitionAny as g, RpcFunctionDefinition as h, RpcDefinitionsToFunctions as i, RpcDumpDefinition as l, RpcFunctionAgentOptions as m, RpcArgsSchema as n, RpcDump as o, RpcDumpStore as p, RpcDefinitionsFilter as r, RpcDumpClientOptions as s, EntriesToObject as t, RpcDumpGetter as u, RpcFunctionDefinitionBase as v, RpcFunctionsCollector as w, RpcFunctionDefinitionWithoutSchemas as x, RpcFunctionDefinitionToFunction as y };

package/dist/utils/agent-tool-name.d.mts

@@ -1,4 +1,3 @@
-//#region src/utils/agent-tool-name.d.ts
 /**
  * Derive the wire-safe agent tool name for an internal tool id.
  *
@@ -19,5 +18,4 @@
  * that display a tool's id (e.g. the inspect plugin's agent view) can
  * import it too and show the name a client actually calls.
  */
-export declare function toAgentToolName(id: string): string;
-//#endregion
+export declare function toAgentToolName(id: string): string;

package/dist/utils/agent-tool-name.mjs

@@ -1,4 +1,4 @@
-//#region src/utils/agent-tool-name.ts
+// src/utils/agent-tool-name.ts
 /**
 * Maximum tool-name length several MCP clients enforce (the Anthropic API
 * pattern is `^[a-zA-Z0-9_-]{1,128}$`).
@@ -27,5 +27,4 @@ const MAX_TOOL_NAME_LENGTH = 128;
 function toAgentToolName(id) {
 	return id.replace(/[^\w-]+/g, "_").slice(0, MAX_TOOL_NAME_LENGTH);
 }
-//#endregion
 export { toAgentToolName };

package/dist/utils/colors.d.mts

@@ -1,4 +1,3 @@
-//#region src/utils/colors.d.ts
 /**
  * A colorizer, callable as a function (`colors.red('foo')`) or as a
  * tagged template (``colors.red`foo ${bar}` ``).
@@ -23,5 +22,4 @@ export interface Colors {
   reset: ColorFn;
   underline: ColorFn;
 }
-export declare const colors: Colors;
-//#endregion
+export declare const colors: Colors;

package/dist/utils/colors.mjs

@@ -1,4 +1,4 @@
-//#region src/utils/colors.ts
+// src/utils/colors.ts
 function makeColor(open, close) {
 	const o = `\x1B[${open}m`;
 	const c = `\x1B[${close}m`;
@@ -27,5 +27,4 @@ const colors = {
 	reset: makeColor(0, 0),
 	underline: makeColor(4, 24)
 };
-//#endregion
 export { colors };

package/dist/utils/crypto-token.d.mts

@@ -1,4 +1,3 @@
-//#region src/utils/crypto-token.d.ts
 /**
  * Generate a high-entropy, URL-safe (hex) random token suitable for use as a
  * bearer credential, e.g. the persistent client auth token or an ephemeral
@@ -19,5 +18,4 @@ export declare function randomDigits(length: number): string;
  * Length is treated as public (it short-circuits on differing lengths), which
  * is appropriate for fixed-length codes and tokens.
  */
-export declare function timingSafeEqual(a: string, b: string): boolean;
-//#endregion
+export declare function timingSafeEqual(a: string, b: string): boolean;

package/dist/utils/crypto-token.mjs

@@ -1,4 +1,4 @@
-//#region src/utils/crypto-token.ts
+// src/utils/crypto-token.ts
 const HEX = "0123456789abcdef";
 /**
 * Generate a high-entropy, URL-safe (hex) random token suitable for use as a
@@ -41,5 +41,4 @@ function timingSafeEqual(a, b) {
 	for (let i = 0; i < a.length; i++) mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
 	return mismatch === 0;
 }
-//#endregion
 export { randomDigits, randomToken, timingSafeEqual };

package/dist/utils/debounce.d.mts

@@ -1,4 +1,9 @@
-//#region ../../node_modules/.pnpm/perfect-debounce@2.1.0/node_modules/perfect-debounce/dist/index.d.mts
+/**
+ * Promise-aware debounce, bundled in so any integration can reuse it through
+ * `devframe/utils/debounce` without adding its own `perfect-debounce`
+ * dependency. Thin re-export of `perfect-debounce`'s `debounce`; the bytes
+ * live once in devframe's dist.
+ */
 //#region src/index.d.ts
 interface DebounceOptions {
   /**
@@ -46,5 +51,4 @@ for (const number of [1, 2, 3]) {
 ```
 */
 declare function debounce<ArgumentsT extends unknown[], ReturnT>(fn: (...args: ArgumentsT) => PromiseLike<ReturnT> | ReturnT, wait?: number, options?: DebounceOptions): DebouncedReturn<ArgumentsT, ReturnT>;
-//#endregion
 export { type DebounceOptions, type DebouncedReturn, debounce };