veryfront 0.1.1003 → 0.1.1005

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1003",
+    "version": "0.1.1005",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/discovery/transpiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transpiler.d.ts","sourceRoot":"","sources":["../../../src/src/discovery/transpiler.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AA6IvD;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAwGlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}
+{"version":3,"file":"transpiler.d.ts","sourceRoot":"","sources":["../../../src/src/discovery/transpiler.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AA4MvD;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAgIlB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}

package/esm/src/discovery/transpiler.js

@@ -27,7 +27,50 @@ import * as evalMod from "../eval/index.js";
 import * as metricsMod from "../metrics/index.js";
 import * as schemasMod from "../schemas/index.js";
 import * as chatUploadsMod from "../chat/upload-handler.js";
+// Keyed by entry file + entry source hash; each entry additionally records the
+// bundled dependency contents it was built from and is only served while those
+// still match (see findCachedModuleWithFreshDeps).
 const transpileCache = new Map();
+const textEncoder = new TextEncoder();
+async function hashSource(source) {
+    const digest = await dntShim.crypto.subtle.digest("SHA-256", textEncoder.encode(source));
+    return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+/**
+ * Returns the first cached module whose recorded bundled-dependency contents
+ * still match what the current adapter serves. esbuild inlines relative
+ * imports into the bundle, so an unchanged entry file does not guarantee an
+ * unchanged module: a dependency edited by a new release (or differing between
+ * two projects that share the same entry source) must invalidate the entry.
+ */
+async function findCachedModuleWithFreshDeps(entries, context) {
+    const hashByPath = new Map();
+    for (const entry of entries) {
+        let depsMatch = true;
+        for (const dep of entry.deps) {
+            let hash = hashByPath.get(dep.path);
+            if (!hashByPath.has(dep.path)) {
+                try {
+                    const content = context.fsAdapter
+                        ? await context.fsAdapter.readFile(dep.path)
+                        : await createFileSystem().readTextFile(dep.path);
+                    hash = await hashSource(content);
+                }
+                catch {
+                    hash = undefined;
+                }
+                hashByPath.set(dep.path, hash);
+            }
+            if (hash === undefined || hash !== dep.hash) {
+                depsMatch = false;
+                break;
+            }
+        }
+        if (depsMatch)
+            return entry.module;
+    }
+    return undefined;
+}
 // Setup veryfront modules as globals for compiled binary support
 let veryfrontGlobalsInitialized = false;
 /**
@@ -57,7 +100,7 @@ async function ensureVeryfrontGlobals() {
 /**
  * Create an esbuild plugin for resolving files via fsAdapter
  */
-function createFsAdapterPlugin(fsAdapter) {
+function createFsAdapterPlugin(fsAdapter, onDependencyLoaded) {
     const existsCache = new Map();
     async function checkExists(filePath) {
         const cached = existsCache.get(filePath);
@@ -108,6 +151,7 @@ function createFsAdapterPlugin(fsAdapter) {
             build.onLoad({ filter: /.*/, namespace: "fsadapter" }, wrapWithCurrentContext(async (args) => {
                 try {
                     const content = await fsAdapter.readFile(args.path);
+                    onDependencyLoaded?.(args.path, content);
                     return {
                         contents: content,
                         loader: getEsbuildLoader(args.path),
@@ -131,9 +175,6 @@ function createFsAdapterPlugin(fsAdapter) {
  * Import and transpile a module for discovery
  */
 export async function importModule(file, context) {
-    const cached = transpileCache.get(file);
-    if (cached)
-        return cached;
     // Ensure veryfront modules are available as globals for compiled binaries
     await ensureVeryfrontGlobals();
     const filePath = file.replace("file://", "");
@@ -149,6 +190,20 @@ export async function importModule(file, context) {
             cause: error,
         });
     }
+    // The cache key must include the source content: a shared hosted runtime
+    // process serves many projects and releases, and the same relative path
+    // (e.g. "tools/foo.ts") recurs across them. A path-only key keeps serving
+    // the stale module after a deploy and can hand one project's module to
+    // another project's discovery. The entry hash alone is still not enough —
+    // bundled relative imports are inlined into the module — so cached entries
+    // are only served after their recorded dependency contents re-verify.
+    const cacheKey = `${file} ${await hashSource(source)}`;
+    const cachedEntries = transpileCache.get(cacheKey);
+    if (cachedEntries) {
+        const cached = await findCachedModuleWithFreshDeps(cachedEntries, context);
+        if (cached)
+            return cached;
+    }
     const loader = getEsbuildLoader(filePath);
     await ensureDefaultBundlerContracts();
     const { build } = await import("../extensions/bundler/index.js");
@@ -160,8 +215,16 @@ export async function importModule(file, context) {
     const relativeImports = isDeno && !isDenoCompiled && !hasFsAdapter
         ? [...source.matchAll(/from\s+["'](\.\.[^"']+)["']/g)].map((m) => m[1]).filter(Boolean)
         : [];
-    // Use fsAdapter plugin whenever a VFS adapter is available (regardless of runtime)
-    const plugins = hasFsAdapter ? [createFsAdapterPlugin(context.fsAdapter)] : [];
+    // Use fsAdapter plugin whenever a VFS adapter is available (regardless of
+    // runtime), recording every bundled dependency for cache re-validation.
+    const bundledDeps = [];
+    const plugins = hasFsAdapter
+        ? [
+            createFsAdapterPlugin(context.fsAdapter, (path, content) => {
+                bundledDeps.push({ path, content });
+            }),
+        ]
+        : [];
     const result = await build({
         bundle: true,
         write: false,
@@ -218,7 +281,10 @@ export async function importModule(file, context) {
         const moduleUrl = pathHelper.toFileUrl(tempFile);
         moduleUrl.searchParams.set("v", String(Date.now()));
         const module = await import(moduleUrl.href);
-        transpileCache.set(file, module);
+        const deps = await Promise.all(bundledDeps.map(async ({ path, content }) => ({ path, hash: await hashSource(content) })));
+        const entries = transpileCache.get(cacheKey) ?? [];
+        entries.push({ deps, module });
+        transpileCache.set(cacheKey, entries);
         return module;
     }
     finally {

package/esm/src/internal-agents/run-stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/run-stream.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,IAAI,OAAO,EAC5B,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EACV,+BAA+B,EAC/B,8BAA8B,EAC/B,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EAAmB,KAAK,IAAI,EAAgB,MAAM,kBAAkB,CAAC;AAU5E,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAsCxD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,sBAAsB,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IAC5C,mBAAmB,CAAC,EAAE;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,cAAc,CAAC,EAAE,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;IACnE,8BAA8B,CAAC,EAAE,CAC/B,KAAK,EAAE,+BAA+B,KACnC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAClC;QACH,MAAM,EAAE,CACN,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;SAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,KACtB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C,CAAC;CACH;AAoCD,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,oBAAoB,EAC3B,cAAc,EAAE,sBAAsB,EACtC,2BAA2B,CAAC,EAAE,MAAM,EAAE,EACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;;cAsFrD;AA2KD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,QAAQ,CAAC,CAkUnB"}
+{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/run-stream.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,IAAI,OAAO,EAC5B,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EACV,+BAA+B,EAC/B,8BAA8B,EAC/B,MAAM,qBAAqB,CAAC;AAU7B,OAAO,EAAmB,KAAK,IAAI,EAAgB,MAAM,kBAAkB,CAAC;AAU5E,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAsCxD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,sBAAsB,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IAC5C,mBAAmB,CAAC,EAAE;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,cAAc,CAAC,EAAE,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;IACnE,8BAA8B,CAAC,EAAE,CAC/B,KAAK,EAAE,+BAA+B,KACnC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAClC;QACH,MAAM,EAAE,CACN,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;SAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,KACtB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C,CAAC;CACH;AAoCD,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,oBAAoB,EAC3B,cAAc,EAAE,sBAAsB,EACtC,2BAA2B,CAAC,EAAE,MAAM,EAAE,EACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;;cAsFrD;AAyOD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,QAAQ,CAAC,CAoVnB"}

package/esm/src/internal-agents/run-stream.js

@@ -7,6 +7,7 @@ import { createAgentServiceSandboxTools } from "../sandbox/index.js";
 import { tryResolve } from "../extensions/contracts.js";
 import { importFirstPartyExtensionModule } from "../extensions/first-party-import.js";
 import { SandboxShellToolsProviderName, } from "../extensions/sandbox/index.js";
+import { resolveHostedRuntimeAllowedToolNames } from "../agent/hosted/runtime-essential-tools.js";
 import { SKILL_TOOL_IDS } from "../skill/types.js";
 import { isToolVisibleTo, toolRegistry } from "../tool/index.js";
 import { defineSchema, lazySchema } from "../schemas/index.js";
@@ -209,6 +210,54 @@ function getAllowedRemoteToolNames(forwardedProps) {
     }
     return allowedTools.every((toolName) => typeof toolName === "string") ? allowedTools : [];
 }
+/**
+ * Reads the restrictive `runtimeOverrides.toolAllowlist` override.
+ *
+ * Unlike `runtimeOverrides.allowedTools` — which this path treats as an
+ * additive grant list (Studio forwards integration/studio tool names it wants
+ * attached on top of the agent's own surface) — `toolAllowlist` is a hard
+ * restriction: the model-visible tool set of the run is intersected with it.
+ * Scheduled automations declare it via schedule `input.runtimeOverrides` for
+ * defense in depth. Returns null when absent (no restriction); a present but
+ * malformed value fails closed to an empty allowlist.
+ */
+function getRuntimeToolAllowlist(forwardedProps) {
+    const runtimeOverrides = isRecord(forwardedProps?.runtimeOverrides)
+        ? forwardedProps.runtimeOverrides
+        : null;
+    if (!runtimeOverrides || !Object.hasOwn(runtimeOverrides, "toolAllowlist")) {
+        return null;
+    }
+    const toolAllowlist = runtimeOverrides.toolAllowlist;
+    if (!Array.isArray(toolAllowlist)) {
+        return new Set();
+    }
+    return new Set(toolAllowlist.filter((toolName) => typeof toolName === "string" && toolName.length > 0));
+}
+/**
+ * Intersects the merged run tool set with the restrictive tool allowlist.
+ * Skill runtime/delegation tools are preserved for skill-enabled agents,
+ * mirroring the hosted chat runtime's allowlist semantics.
+ */
+function applyRuntimeToolAllowlist(mergedTools, toolAllowlist, agent) {
+    if (!toolAllowlist || !mergedTools || mergedTools === true) {
+        return mergedTools;
+    }
+    const availableSkillIds = agent.config.skills === true
+        ? ["*"]
+        : Array.isArray(agent.config.skills)
+            ? agent.config.skills
+            : undefined;
+    const allowedToolNames = resolveHostedRuntimeAllowedToolNames({
+        allowedToolNames: toolAllowlist,
+        localToolNames: Object.keys(mergedTools),
+        ...(availableSkillIds ? { availableSkillIds } : {}),
+    });
+    if (!allowedToolNames) {
+        return mergedTools;
+    }
+    return Object.fromEntries(Object.entries(mergedTools).filter(([toolName]) => allowedToolNames.has(toolName)));
+}
 function getServerResolvedProjectToolNames(forwardedProps) {
     const runtimeOverrides = isRecord(forwardedProps?.runtimeOverrides)
         ? forwardedProps.runtimeOverrides
@@ -257,9 +306,21 @@ export async function createRuntimeAgentStreamResponse(input, agent, deps) {
     });
     const forwardedAllowedRemoteToolNames = getAllowedRemoteToolNames(input.forwardedProps);
     const sourceAllowedRemoteToolNames = getAgentAllowedRemoteToolNames(agent);
-    const allowedRemoteToolNames = forwardedAllowedRemoteToolNames === undefined
+    const grantedRemoteToolNames = forwardedAllowedRemoteToolNames === undefined
         ? undefined
         : mergeRemoteToolNames(sourceAllowedRemoteToolNames, forwardedAllowedRemoteToolNames);
+    // A restrictive toolAllowlist caps remote exposure too: it intersects the
+    // tightest existing remote filter (forwarded grants, else the agent source's
+    // own __vfAllowedRemoteTools), and with neither present it becomes the
+    // remote filter directly. It can only narrow what the agent's sources
+    // already expose, never add.
+    const runtimeToolAllowlist = getRuntimeToolAllowlist(input.forwardedProps);
+    const sourceRemoteFilterBase = Object.hasOwn(agent.config, "__vfAllowedRemoteTools")
+        ? sourceAllowedRemoteToolNames
+        : undefined;
+    const allowedRemoteToolNames = runtimeToolAllowlist === null
+        ? grantedRemoteToolNames
+        : (grantedRemoteToolNames ?? sourceRemoteFilterBase ?? [...runtimeToolAllowlist]).filter((toolName) => runtimeToolAllowlist.has(toolName));
     const forwardedIntegrationToolDefs = getForwardedIntegrationToolDefinitions(input.forwardedProps);
     const availableForwardedToolNames = forwardedIntegrationToolDefs?.map((tool) => tool.name);
     const sandboxTools = await buildProjectAgentSandboxTools({ agent, deps });
@@ -267,7 +328,7 @@ export async function createRuntimeAgentStreamResponse(input, agent, deps) {
         ...(deps.localTools ?? {}),
         ...(sandboxTools.tools ?? {}),
     };
-    const mergedTools = buildMergedTools(agent, input, deps.sessionManager, availableForwardedToolNames, Object.keys(availableLocalTools).length > 0 ? availableLocalTools : undefined);
+    const mergedTools = applyRuntimeToolAllowlist(buildMergedTools(agent, input, deps.sessionManager, availableForwardedToolNames, Object.keys(availableLocalTools).length > 0 ? availableLocalTools : undefined), runtimeToolAllowlist, agent);
     const runtimeAgent = {
         ...agent,
         config: {

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1003";
+export declare const VERSION = "0.1.1005";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1003";
+export const VERSION = "0.1.1005";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.1003",
+  "version": "0.1.1005",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",