docs(auth): use the @default jsdoc tag for the auth option defaults

Convert the prose "Default: x" notes on the auth-related options introduced
in this branch (`simpleAuth`, `otpParam`, `cli.auth`) to the `@default` tag,
matching the convention used elsewhere in the definition types.

Author: antfubot

packages/devframe/src/client/rpc.ts

@@ -62,7 +62,9 @@ export interface DevframeRpcClientOptions {
    * (OTP) for "magic link" auth (e.g. a link the dev server prints). When
    * present, the client exchanges the code for a token and removes the parameter
    * from the URL. Set `false` to disable — e.g. integrations that drive their
-   * own authentication via `authenticateWithUrlOtp`. Default: `'devframe_otp'`.
+   * own authentication via `authenticateWithUrlOtp`.
+   *
+   * @default 'devframe_otp'
    */
   otpParam?: string | false
   /**
@@ -74,7 +76,9 @@ export interface DevframeRpcClientOptions {
    * block `prompt()` in cross-origin frames anyway.
    *
    * Set `false` to drive your own auth UI (a hub sets this on the plugin
-   * connections it manages, alongside supplying the token). Default: `true`.
+   * connections it manages, alongside supplying the token).
+   *
+   * @default true
    */
   simpleAuth?: boolean
   wsOptions?: Partial<WsRpcChannelOptions>

packages/devframe/src/types/devframe.ts

@@ -111,8 +111,8 @@ export interface DevframeCliOptions {
   /**
    * Authentication for the standalone dev server.
    *
-   *   - `undefined` / `true` (default) — the standalone adapters (`cli` /
-   *     `spa` / served `build`) auto-wire devframe's interactive OTP auth
+   *   - `undefined` / `true` — the standalone adapters (`cli` / `spa` /
+   *     served `build`) auto-wire devframe's interactive OTP auth
    *     (`createInteractiveAuth`): an untrusted client can only reach
    *     `anonymous:` methods until it exchanges the printed one-time code.
    *     The adapter prints the code + magic-link banner once the server is
@@ -126,6 +126,8 @@ export interface DevframeCliOptions {
    *
    * Hosted adapters (`vite`, `embedded`) ignore this and defer to the host's
    * auth; `@vitejs/devtools` honors the equivalent `devtools.clientAuth`.
+   *
+   * @default true
    */
   auth?: boolean | DevframeAuthHandler
   /**