merge: origin/main into feat/agent-mcp-wave-phase-3

Resolves conflicts from #158 (knip integration):
- packages/hub/package.json: keep our @standard-schema/spec addition,
  take main's removal of the (knip-flagged unused) birpc dependency
- pnpm-lock.yaml: regenerated via `pnpm install --lockfile-only`

Also fixes two knip findings the merge exposed in this branch's own
new surface (unchecked by knip before it landed on main):
- instance-registry.ts: DEVFRAME_INSTANCES_DIR_ENV /
  DEVFRAME_DISABLE_INSTANCE_REGISTRY_ENV / resolveInstancesDir /
  probeDevframeInstance drop `export` — module-internal per the
  barrel's existing "read/probe/prune helpers stay internal" comment,
  nothing outside the file used them
- packages/next: DevframeNextHostMcpOptions (the `mountMcp` options
  type) now re-exported from the package barrel, alongside its sibling
  option types — a real gap, not a knip false positive

Author: antfubot

.github/workflows/ci.yml

@@ -12,6 +12,8 @@ permissions:
 jobs:
   unit-test:
     uses: sxzz/workflows/.github/workflows/unit-test.yml@main
+    with:
+      lint: pnpm run lint && pnpm run knip
 
   e2e:
     runs-on: ubuntu-latest

.gitignore

@@ -23,3 +23,6 @@ playwright/.cache
 blob-report
 .ecosystem
 storybook-static
+
+# Agent skills from npm packages (managed by skills-npm)
+**/skills/npm-*

AGENTS.md

@@ -24,6 +24,7 @@ pnpm dev          # tsdown --watch
 pnpm test         # pnpm build && vitest (api snapshot guards against stale dist)
 pnpm typecheck    # turbo run typecheck (per-package tsc --noEmit)
 pnpm lint --fix   # ESLint via @antfu/eslint-config
+pnpm knip         # unused files/dependencies/exports across every workspace
 pnpm start        # tsx src/index.ts
 ```
 
@@ -33,6 +34,8 @@ The `pnpm test` script intentionally runs `build` first so `tsnapi` snapshots co
 
 `pnpm typecheck` runs `scripts/verify-typecheck-coverage.ts` first — it fails the command (and CI, since CI just runs `pnpm typecheck`) if any workspace package has a `tsconfig.json` but no `typecheck` script, so a new package can't silently join the same blind spot. A package that genuinely can't typecheck yet needs a documented exception in that script, not a missing script.
 
+`pnpm knip` finds unused files, dependencies, and exports across every workspace (config in `knip.jsonc`). It runs against source directly — no prior build needed. Most workspaces need no configuration; `knip.jsonc` only carries per-workspace overrides for cases knip's defaults can't infer on their own: a package's non-`index.ts` `exports` subpaths (knip's package.json→`dist`→`src` source mapping needs a workspace `tsconfig.json` `outDir`, which conflicts with this repo's cross-workspace `src/*.ts` imports, so multi-entry packages list their `exports`-mapped entry files explicitly instead — keep that list in sync with each `tsdown.config.ts`), config files knip's plugins don't discover in a nested location (a Next.js app rooted below the workspace root, `storybook-solidjs-vite` not matching the Storybook plugin trigger), and dependencies referenced dynamically outside its static import graph (icon collections consumed by UnoCSS at build time, plugin packages loaded via a runtime `import()` string). Prefer fixing the underlying gap or a scoped `ignoreDependencies`/`entry` override over a blanket `ignore`.
+
 ## Conventions
 
 - RPC functions must use `defineRpcFunction`; always namespace IDs `devframes:plugin:<slug>:<fn-name>` (matching the plugin's `@devframes/plugin-<slug>` package name).
@@ -145,7 +148,7 @@ Range allocation:
 ## Before PRs
 
 ```sh
-pnpm lint && pnpm test && pnpm typecheck && pnpm build
+pnpm lint && pnpm knip && pnpm test && pnpm typecheck && pnpm build
 ```
 
 Follow conventional commits (`feat:`, `fix:`, etc.).

README.md

@@ -30,6 +30,10 @@ Framework-neutral foundation for building devframes.
   </a>
 </p>
 
+## Credits
+
+The `devframe connect` MCP connector (discovery + gateway tools + agent-steering errors) follows the architecture Vercel's [`next-devtools-mcp`](https://github.com/vercel/next-devtools-mcp) validated: the real MCP endpoint lives inside the framework, and a thin external connector discovers and proxies it.
+
 ## License
 
 [MIT](./LICENSE.md) License © [Anthony Fu](https://github.com/antfu)

design/uno.config.ts

@@ -49,5 +49,3 @@ export const designConfig = defineConfig({
     'z-drawer-content': 'z-[90]',
   },
 })
-
-export default designConfig

examples/files-inspector/tests/_utils.ts

@@ -19,7 +19,7 @@ import { resolve } from 'pathe'
 import devframe from '../src/devframe'
 
 const HERE = fileURLToPath(new URL('.', import.meta.url))
-export const CLIENT_DIST = resolve(HERE, '../dist/client')
+const CLIENT_DIST = resolve(HERE, '../dist/client')
 
 /**
  * Asserts the Preact client has been built. Tests boot a dev server

examples/json-render/package.json

@@ -23,8 +23,5 @@
     "@devframes/json-render-ui": "workspace:*",
     "cac": "catalog:deps",
     "devframe": "workspace:*"
-  },
-  "devDependencies": {
-    "get-port-please": "catalog:deps"
   }
 }

examples/next-devframe-hub/src/client/postcss.config.mjs

@@ -1,4 +1,3 @@
-/** @type {import('postcss-load-config').Config} */
 export default {
   plugins: {
     '@unocss/postcss': {},

examples/next-runtime-snapshot/package.json

@@ -25,7 +25,8 @@
     "devframe": "workspace:*",
     "next": "catalog:frontend",
     "react": "catalog:frontend",
-    "react-dom": "catalog:frontend"
+    "react-dom": "catalog:frontend",
+    "valibot": "catalog:deps"
   },
   "devDependencies": {
     "@types/react": "catalog:types",

examples/next-runtime-snapshot/src/client/app/components/connect.tsx

@@ -9,7 +9,7 @@ import { useMemo } from 'react'
 // bundle stays free of node-only server code.
 const NAMESPACE = 'example:next-runtime-snapshot'
 
-export type SnapshotCtx = DevframeScopedClientContext<typeof NAMESPACE>
+type SnapshotCtx = DevframeScopedClientContext<typeof NAMESPACE>
 
 interface ConnectionState {
   ctx: SnapshotCtx | null