veryfront 0.1.1190 → 0.1.1191

package/esm/cli/commands/serve/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/command.ts"],"names":[],"mappings":"AAUA,KAAK,oBAAoB,GAAG;IAC1B,uBAAuB,EAAE,CACvB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KAC1B,MAAM,GAAG,SAAS,CAAC;IACxB,sBAAsB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,gBAAgB,CAAC,EAAE,CACjB,SAAS,EAAE,SAAS,GAAG,OAAO,EAC9B,KAAK,EAAE,OAAO,KACX,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,uBAAuB,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACzE,sBAAsB,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IACvE,uBAAuB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,YAAY,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,4BAA4B,CAAC,CAAC,EAClD,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,CAAC,CAAC,CAqBZ;AAoCD,wBAAsB,sCAAsC,CAAC,CAAC,EAC5D,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,QAAQ,EAAE,oBAAoB,EAC9B,sBAAsB,GAAE,MAAM,OAAO,CAAC,IAAI,CAA6B,EACvE,uBAAuB,GAAE,MAAM,OAAO,CAAC,OAAO,CAA2B,GACxE,OAAO,CAAC,CAAC,CAAC,CAMZ;AAwFD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAgFf;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,EACrB,YAAY,GAAE,wBAA6B,GAC1C,OAAO,CAAC,IAAI,CAAC,CAcf"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/command.ts"],"names":[],"mappings":"AAWA,KAAK,oBAAoB,GAAG;IAC1B,uBAAuB,EAAE,CACvB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KAC1B,MAAM,GAAG,SAAS,CAAC;IACxB,sBAAsB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,gBAAgB,CAAC,EAAE,CACjB,SAAS,EAAE,SAAS,GAAG,OAAO,EAC9B,KAAK,EAAE,OAAO,KACX,IAAI,CAAC;CACX,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE,CAAC;AAEF,KAAK,sBAAsB,GAAG;IAC5B,uBAAuB,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACzE,sBAAsB,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IACvE,uBAAuB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,YAAY,CAAC;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,4BAA4B,CAAC,CAAC,EAClD,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,CAAC,CAAC,CAqBZ;AAoCD,wBAAsB,sCAAsC,CAAC,CAAC,EAC5D,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACzB,QAAQ,EAAE,oBAAoB,EAC9B,sBAAsB,GAAE,MAAM,OAAO,CAAC,IAAI,CAA6B,EACvE,uBAAuB,GAAE,MAAM,OAAO,CAAC,OAAO,CAA2B,GACxE,OAAO,CAAC,CAAC,CAAC,CAMZ;AA2DD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,YAAY,EACrB,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAgFf;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,EACrB,YAAY,GAAE,wBAA6B,GAC1C,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/esm/cli/commands/serve/command.js

@@ -5,6 +5,7 @@ import { exitProcess, registerTerminationSignals, showHeader } from "../../utils
 import { generateDefaultProjectId } from "../../utils/project.js";
 import { startCliProductionServer } from "../../shared/server-startup.js";
 import { ensureCliBundlerContracts } from "../../shared/default-contracts.js";
+import { runStandaloneProxyRuntime } from "./proxy-runtime.js";
 const STARTUP_ERROR_FLUSH_TIMEOUT_MS = 2_000;
 export async function runWithStartupErrorReporting(startup, reporter, options = {}) {
     const flushTimeoutMs = options.flushTimeoutMs ?? STARTUP_ERROR_FLUSH_TIMEOUT_MS;
@@ -75,30 +76,10 @@ async function runSplit(options) {
     });
 }
 async function runProxy(options) {
-    showHeader();
-    cliLogger.info(`Starting proxy server on ${options.bindAddress}:${options.port}`);
-    const { setEnv } = await import("../../../src/platform/index.js");
-    setEnv("PORT", String(options.port));
-    setEnv("HOST", options.bindAddress);
-    const { activateStandaloneProxyCacheExtension, registerStandaloneProxyCacheExtensionTeardown, } = await import("./proxy-extension-composition.js");
-    const extensionLoader = await activateStandaloneProxyCacheExtension();
-    const teardownCacheExtension = await registerStandaloneProxyCacheExtensionTeardown(extensionLoader);
-    // DenoHttpServer.serve() blocks until the server stops,
-    // so this import keeps the process alive.
-    try {
-        await import("../../../src/proxy/main.js");
-    }
-    catch (error) {
-        try {
-            await teardownCacheExtension();
-        }
-        catch (cleanupError) {
-            cliLogger.error("Failed to clean up proxy extensions after startup failure", cleanupError);
-        }
-        throw error;
-    }
-    // Keep the process alive (Deno.serve returns immediately in compiled binaries)
-    await new Promise(() => { });
+    await runStandaloneProxyRuntime({
+        bindAddress: options.bindAddress,
+        port: options.port,
+    });
 }
 function createDeferredProductionStartupErrorReporter() {
     let sentryModule;

package/esm/cli/commands/serve/proxy-extension-composition.d.ts

@@ -2,13 +2,14 @@
  * Standalone proxy extension composition.
  *
  * This CLI/deployment boundary activates provider implementations before the
- * provider-neutral proxy runtime is imported. Core consumes only the
- * `TokenCacheStore` contract published by the extension loader.
+ * provider-neutral proxy runtime is imported. Core consumes the
+ * `TokenCacheStore` contract and the Redis runtime provider published by the
+ * extension loader.
  */
 import { ExtensionLoader } from "../../../src/extensions/index.js";
 import { type RegisterProxyShutdownHook } from "../../../src/proxy/shutdown-hooks.js";
-/** Start explicit standalone cache composition with a pinned lifecycle promise. */
-export declare function activateStandaloneProxyCacheExtension(): Promise<ExtensionLoader | null>;
+/** Start explicit standalone proxy extension composition. */
+export declare function activateStandaloneProxyExtensions(): Promise<ExtensionLoader | null>;
 /** Register exactly-once provider teardown with the proxy's shutdown owner. */
-export declare function registerStandaloneProxyCacheExtensionTeardown(loader: ExtensionLoader | null, registerHook?: RegisterProxyShutdownHook): Promise<() => Promise<void>>;
+export declare function registerStandaloneProxyExtensionTeardown(loader: ExtensionLoader | null, registerHook?: RegisterProxyShutdownHook): Promise<() => Promise<void>>;
 //# sourceMappingURL=proxy-extension-composition.d.ts.map

package/esm/cli/commands/serve/proxy-extension-composition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-extension-composition.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/proxy-extension-composition.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAyB,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAG1F,OAAO,EAEL,KAAK,yBAAyB,EAE/B,MAAM,sCAAsC,CAAC;AAsE9C,mFAAmF;AACnF,wBAAgB,qCAAqC,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAEvF;AA2DD,+EAA+E;AAC/E,wBAAgB,6CAA6C,CAC3D,MAAM,EAAE,eAAe,GAAG,IAAI,EAC9B,YAAY,GAAE,yBAAqD,GAClE,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAI9B"}
+{"version":3,"file":"proxy-extension-composition.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/proxy-extension-composition.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAyB,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAG1F,OAAO,EAEL,KAAK,yBAAyB,EAE/B,MAAM,sCAAsC,CAAC;AAqG9C,6DAA6D;AAC7D,wBAAgB,iCAAiC,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAEnF;AA2DD,+EAA+E;AAC/E,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,eAAe,GAAG,IAAI,EAC9B,YAAY,GAAE,yBAAqD,GAClE,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAI9B"}

package/esm/cli/commands/serve/proxy-extension-composition.js

@@ -2,13 +2,14 @@
  * Standalone proxy extension composition.
  *
  * This CLI/deployment boundary activates provider implementations before the
- * provider-neutral proxy runtime is imported. Core consumes only the
- * `TokenCacheStore` contract published by the extension loader.
+ * provider-neutral proxy runtime is imported. Core consumes the
+ * `TokenCacheStore` contract and the Redis runtime provider published by the
+ * extension loader.
  */
-import { cliLogger } from "../../utils/index.js";
+import { cliLogger } from "../../../src/utils/logger/index.js";
 import { ExtensionLoader } from "../../../src/extensions/index.js";
 import { importFirstPartyExtensionModule } from "../../../src/extensions/first-party-import.js";
-import { getEnv } from "../../../src/platform/index.js";
+import { getEnv, setEnv } from "../../../src/platform/compat/process/env.js";
 import { createProxyShutdownAggregateError, registerProxyShutdownHook, } from "../../../src/proxy/shutdown-hooks.js";
 // This module is evaluated before extension activation. Pin promises created
 // by the later teardown path so extension code cannot replace Promise species
@@ -29,29 +30,57 @@ function pinCompositionPromise(promise) {
 const resolvedBeforeExtensionActivation = pinCompositionPromise(new NativePromise((resolve) => resolve()));
 const CACHE_EXTENSION_SOURCE_DIRECTORY = "ext-cache-redis";
 const CACHE_EXTENSION_PACKAGE_NAME = "@veryfront/ext-cache-redis";
+const REDIS_EXTENSION_SOURCE_DIRECTORY = "ext-redis";
+const REDIS_EXTENSION_PACKAGE_NAME = "@veryfront/ext-redis";
 /**
- * Activate the standalone proxy's explicitly selected cache extension.
- * Memory mode performs no extension import. The returned loader owns provider
- * teardown; the proxy borrows its registered `TokenCacheStore`.
+ * Activate the standalone proxy's explicitly selected cache and Redis runtime
+ * providers. The returned loader owns provider teardown.
  */
-async function activateStandaloneProxyCacheExtensionInternal() {
+async function activateStandaloneProxyExtensionsInternal() {
     const cacheType = getEnv("CACHE_TYPE") || "memory";
-    if (cacheType !== "memory" && cacheType !== "extension") {
-        throw new NativeTypeError("CACHE_TYPE must be memory or extension");
+    if (cacheType !== "memory" && cacheType !== "extension" && cacheType !== "redis") {
+        throw new NativeTypeError(`CACHE_TYPE must be memory, extension, or redis (received "${cacheType}")`);
     }
-    if (cacheType === "memory")
-        return null;
-    const module = await importFirstPartyExtensionModule(CACHE_EXTENSION_SOURCE_DIRECTORY, CACHE_EXTENSION_PACKAGE_NAME);
-    if (typeof module.default !== "function") {
-        throw new NativeTypeError(`${CACHE_EXTENSION_PACKAGE_NAME} must export an ExtensionFactory`);
+    const selected = [];
+    if (cacheType === "extension" || cacheType === "redis") {
+        selected.push({
+            origin: "standalone proxy cache selection",
+            packageName: CACHE_EXTENSION_PACKAGE_NAME,
+            sourceDirectory: CACHE_EXTENSION_SOURCE_DIRECTORY,
+        });
+    }
+    if (getEnv("REDIS_URL")) {
+        selected.push({
+            origin: "standalone proxy routing invalidation",
+            packageName: REDIS_EXTENSION_PACKAGE_NAME,
+            sourceDirectory: REDIS_EXTENSION_SOURCE_DIRECTORY,
+        });
     }
+    if (selected.length === 0)
+        return null;
+    const extensions = await NativePromise.all(selected.map(async (definition) => {
+        const module = await importFirstPartyExtensionModule(definition.sourceDirectory, definition.packageName);
+        if (typeof module.default !== "function") {
+            throw new NativeTypeError(`${definition.packageName} must export an ExtensionFactory`);
+        }
+        return {
+            extension: module.default(),
+            source: "config",
+            origin: definition.origin,
+        };
+    }));
     const loader = new ExtensionLoader(cliLogger);
     try {
-        await loader.setupAll([{
-                extension: module.default(),
-                source: "config",
-                origin: "standalone proxy cache selection",
-            }], {});
+        await loader.setupAll(extensions, {});
+        // Keep the chart compatible with older universal binaries during rollout.
+        // This shared boundary translates the legacy value only after the
+        // extension-backed store is registered. The downstream cache validators
+        // (src/proxy/cache/index.ts, src/proxy/cache/extension-store.ts) accept
+        // only "memory" and "extension", so this translation must complete before
+        // the proxy runtime is imported. TODO: remove this rollout shim once the
+        // hosted charts stop passing CACHE_TYPE=redis.
+        if (cacheType === "redis")
+            setEnv("CACHE_TYPE", "extension");
         return loader;
     }
     catch (error) {
@@ -59,16 +88,16 @@ async function activateStandaloneProxyCacheExtensionInternal() {
             await loader.teardownAll();
         }
         catch (cleanupError) {
-            cliLogger.error("Failed to clean up standalone proxy cache extension", cleanupError);
+            cliLogger.error("Failed to clean up standalone proxy extensions", cleanupError);
         }
         throw error;
     }
 }
-/** Start explicit standalone cache composition with a pinned lifecycle promise. */
-export function activateStandaloneProxyCacheExtension() {
-    return pinCompositionPromise(activateStandaloneProxyCacheExtensionInternal());
+/** Start explicit standalone proxy extension composition. */
+export function activateStandaloneProxyExtensions() {
+    return pinCompositionPromise(activateStandaloneProxyExtensionsInternal());
 }
-async function registerStandaloneProxyCacheExtensionTeardownInternal(loader, registerHook) {
+async function registerStandaloneProxyExtensionTeardownInternal(loader, registerHook) {
     if (!loader)
         return () => resolvedBeforeExtensionActivation;
     let teardownPromise = null;
@@ -90,7 +119,7 @@ async function registerStandaloneProxyCacheExtensionTeardownInternal(loader, reg
             await teardown();
         }
         catch (cleanupError) {
-            throw createProxyShutdownAggregateError([error, cleanupError], "Failed to register and clean up standalone proxy cache extension teardown");
+            throw createProxyShutdownAggregateError([error, cleanupError], "Failed to register and clean up standalone proxy extension teardown");
         }
         throw error;
     }
@@ -109,7 +138,7 @@ async function registerStandaloneProxyCacheExtensionTeardownInternal(loader, reg
         }
         catch (teardownError) {
             if (disposalFailed) {
-                throw createProxyShutdownAggregateError([disposalError, teardownError], "Failed to unregister and tear down standalone proxy cache extension");
+                throw createProxyShutdownAggregateError([disposalError, teardownError], "Failed to unregister and tear down standalone proxy extensions");
             }
             throw teardownError;
         }
@@ -118,6 +147,6 @@ async function registerStandaloneProxyCacheExtensionTeardownInternal(loader, reg
     })());
 }
 /** Register exactly-once provider teardown with the proxy's shutdown owner. */
-export function registerStandaloneProxyCacheExtensionTeardown(loader, registerHook = registerProxyShutdownHook) {
-    return pinCompositionPromise(registerStandaloneProxyCacheExtensionTeardownInternal(loader, registerHook));
+export function registerStandaloneProxyExtensionTeardown(loader, registerHook = registerProxyShutdownHook) {
+    return pinCompositionPromise(registerStandaloneProxyExtensionTeardownInternal(loader, registerHook));
 }

package/esm/cli/commands/serve/proxy-runtime.d.ts

@@ -0,0 +1,17 @@
+import { activateStandaloneProxyExtensions, registerStandaloneProxyExtensionTeardown } from "./proxy-extension-composition.js";
+export interface StandaloneProxyRuntimeOptions {
+    bindAddress?: string;
+    port?: number;
+}
+interface StandaloneProxyRuntimeDependencies {
+    activateExtensions?: typeof activateStandaloneProxyExtensions;
+    keepAlive?: () => Promise<void>;
+    loadProxy?: () => Promise<unknown>;
+    registerTeardown?: typeof registerStandaloneProxyExtensionTeardown;
+}
+/** Create the never-settling promise that owns the standalone process lifetime. */
+export declare function createStandaloneProxyKeepAlivePromise(): Promise<void>;
+/** Start the standalone proxy with the same lifecycle in CLI and dedicated binaries. */
+export declare function runStandaloneProxyRuntime(options?: StandaloneProxyRuntimeOptions, dependencies?: StandaloneProxyRuntimeDependencies): Promise<void>;
+export {};
+//# sourceMappingURL=proxy-runtime.d.ts.map

package/esm/cli/commands/serve/proxy-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-runtime.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/serve/proxy-runtime.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,kCAAkC,CAAC;AAE1C,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,UAAU,kCAAkC;IAC1C,kBAAkB,CAAC,EAAE,OAAO,iCAAiC,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,gBAAgB,CAAC,EAAE,OAAO,wCAAwC,CAAC;CACpE;AAMD,mFAAmF;AACnF,wBAAgB,qCAAqC,IAAI,OAAO,CAAC,IAAI,CAAC,CAErE;AAWD,wFAAwF;AACxF,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE,6BAAkC,EAC3C,YAAY,GAAE,kCAAuC,GACpD,OAAO,CAAC,IAAI,CAAC,CA8Bf"}

package/esm/cli/commands/serve/proxy-runtime.js

@@ -0,0 +1,54 @@
+import { getEnv, setEnv } from "../../../src/platform/compat/process/env.js";
+import { cliLogger } from "../../../src/utils/logger/index.js";
+import denoConfig from "../../../deno.js";
+import { isJsonMode } from "../../shared/json-output.js";
+import { bold, brand, dim } from "../../ui/colors.js";
+import { activateStandaloneProxyExtensions, registerStandaloneProxyExtensionTeardown, } from "./proxy-extension-composition.js";
+// Capture the constructor before extension activation so extension-owned
+// global mutations cannot break the CLI-owned process lifetime promise.
+const NativePromise = Promise;
+/** Create the never-settling promise that owns the standalone process lifetime. */
+export function createStandaloneProxyKeepAlivePromise() {
+    return new NativePromise(() => { });
+}
+function showProxyHeader() {
+    if (isJsonMode())
+        return;
+    const version = typeof denoConfig.version === "string" ? denoConfig.version : "0.0.0";
+    // Preserve the existing `veryfront serve --mode=proxy` output while the
+    // dedicated binary shares this runtime with the universal CLI.
+    console.log(`${bold(brand("Veryfront"))} ${dim(`(v${version})`)}`);
+    console.log();
+}
+/** Start the standalone proxy with the same lifecycle in CLI and dedicated binaries. */
+export async function runStandaloneProxyRuntime(options = {}, dependencies = {}) {
+    if (options.port !== undefined)
+        setEnv("PORT", String(options.port));
+    if (options.bindAddress !== undefined)
+        setEnv("HOST", options.bindAddress);
+    const port = getEnv("PORT") || "8080";
+    const bindAddress = getEnv("HOST") || "0.0.0.0";
+    showProxyHeader();
+    cliLogger.info(`Starting proxy server on ${bindAddress}:${port}`);
+    const activateExtensions = dependencies.activateExtensions ??
+        activateStandaloneProxyExtensions;
+    const registerTeardown = dependencies.registerTeardown ??
+        registerStandaloneProxyExtensionTeardown;
+    const extensionLoader = await activateExtensions();
+    const teardownExtensions = await registerTeardown(extensionLoader);
+    try {
+        await (dependencies.loadProxy ?? (() => import("../../../src/proxy/main.js")))();
+    }
+    catch (error) {
+        try {
+            await teardownExtensions();
+        }
+        catch (cleanupError) {
+            cliLogger.error("Failed to clean up proxy extensions after startup failure", cleanupError);
+        }
+        throw error;
+    }
+    // Deno.serve returns after binding in compiled binaries, while the proxy's
+    // signal handlers own shutdown and extension teardown.
+    await (dependencies.keepAlive ?? createStandaloneProxyKeepAlivePromise)();
+}

package/esm/cli/mcp/dev-server-client.d.ts

@@ -9,6 +9,7 @@ export interface DevServerClientOptions {
 }
 export declare class DevServerClient {
     private baseUrl;
+    private dashboardSession?;
     constructor(options: DevServerClientOptions);
     getLiveErrors(type?: string): Promise<unknown>;
     getLiveLogs(options?: {
@@ -20,6 +21,11 @@ export declare class DevServerClient {
     }): Promise<unknown>;
     getStats(): Promise<unknown>;
     triggerHmr(path?: string): Promise<unknown>;
+    private mutate;
     private pull;
+    private readSuccessBody;
+    private throwForHttpError;
+    private ensureDashboardMutationSession;
+    private fetchWithRetries;
 }
 //# sourceMappingURL=dev-server-client.d.ts.map

package/esm/cli/mcp/dev-server-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-server-client.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/dev-server-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,sBAAsB;IAI3C,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK9C,WAAW,CAAC,OAAO,CAAC,EAAE;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAapB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAI5B,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAQ7B,IAAI;CAqBnB"}
+{"version":3,"file":"dev-server-client.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/dev-server-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2DH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,gBAAgB,CAAC,CAA8C;gBAE3D,OAAO,EAAE,sBAAsB;IAI3C,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK9C,WAAW,CAAC,OAAO,CAAC,EAAE;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAapB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAI5B,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAI7B,MAAM;YAmCN,IAAI;YAMJ,eAAe;YAWf,iBAAiB;YAcjB,8BAA8B;YAqB9B,gBAAgB;CAoB/B"}

package/esm/cli/mcp/dev-server-client.js

@@ -5,10 +5,56 @@
  * LogBuffer, and HMR data over HTTP from the user's running `veryfront` process.
  */
 import { REQUEST_TIMEOUT_MS } from "../shared/constants.js";
+import { DASHBOARD_CSRF_HEADER_NAME, DASHBOARD_SESSION_PATH, } from "../../src/extensions/dev-ui/protocol.js";
 const MAX_RETRIES = 2;
 const RETRY_DELAYS_MS = [200, 500];
+const MAX_ERROR_BODY_BYTES = 2_048;
+const MAX_ERROR_DETAIL_CHARS = 512;
+async function readErrorBodyPrefix(response, maxBytes) {
+    const body = response.body;
+    if (!body)
+        return { text: "", truncated: false };
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let remaining = maxBytes;
+    let text = "";
+    let completed = false;
+    let truncated = false;
+    try {
+        while (remaining > 0) {
+            const { done, value } = await reader.read();
+            if (done) {
+                completed = true;
+                text += decoder.decode();
+                break;
+            }
+            const selected = value.byteLength <= remaining ? value : value.subarray(0, remaining);
+            text += decoder.decode(selected, { stream: true });
+            remaining -= selected.byteLength;
+            if (selected.byteLength < value.byteLength) {
+                truncated = true;
+                break;
+            }
+        }
+        if (!completed && remaining === 0)
+            truncated = true;
+    }
+    finally {
+        if (!completed) {
+            try {
+                void reader.cancel().catch(() => { });
+            }
+            catch {
+                // Response-stream cancellation is best-effort cleanup.
+            }
+        }
+        reader.releaseLock();
+    }
+    return { text, truncated };
+}
 export class DevServerClient {
     baseUrl;
+    dashboardSession;
     constructor(options) {
         this.baseUrl = `http://localhost:${options.port}`;
     }
@@ -35,21 +81,87 @@ export class DevServerClient {
         return this.pull("/_dev/api/stats");
     }
     triggerHmr(path) {
-        return this.pull("/_dev/api/hmr-trigger", {
+        return this.mutate("/_dev/api/hmr-trigger", JSON.stringify(path ? { path } : {}));
+    }
+    async mutate(path, body) {
+        const buildInit = (session) => ({
             method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify(path ? { path } : {}),
+            headers: {
+                "Content-Type": "application/json",
+                "Cookie": session.cookieHeader,
+                [DASHBOARD_CSRF_HEADER_NAME]: session.csrfToken,
+            },
+            body,
         });
+        const session = await this.ensureDashboardMutationSession();
+        let response = await this.fetchWithRetries(path, buildInit(session));
+        // The server's dashboard session token lives for its process lifetime, so
+        // a dev-server restart while this MCP process stays up invalidates the
+        // cached credential and yields HTTP 403. Discard the stale session,
+        // re-bootstrap once, and retry the mutation exactly once.
+        if (response.status === 403) {
+            try {
+                await response.body?.cancel();
+            }
+            catch {
+                // Response-stream cancellation is best-effort cleanup.
+            }
+            this.dashboardSession = undefined;
+            const freshSession = await this.ensureDashboardMutationSession();
+            response = await this.fetchWithRetries(path, buildInit(freshSession));
+        }
+        await this.throwForHttpError(path, response);
+        return await this.readSuccessBody(response);
     }
     async pull(path, init) {
+        const response = await this.fetchWithRetries(path, init);
+        await this.throwForHttpError(path, response);
+        return await this.readSuccessBody(response);
+    }
+    async readSuccessBody(response) {
+        const mediaType = response.headers.get("content-type")
+            ?.split(";", 1)[0]
+            ?.trim()
+            .toLowerCase();
+        if (mediaType === "application/json" || mediaType?.endsWith("+json")) {
+            return await response.json();
+        }
+        return await response.text();
+    }
+    async throwForHttpError(path, response) {
+        if (response.ok)
+            return;
+        const { text, truncated } = await readErrorBodyPrefix(response, MAX_ERROR_BODY_BYTES);
+        const normalized = text.replace(/\s+/g, " ").trim();
+        const detail = normalized.slice(0, MAX_ERROR_DETAIL_CHARS);
+        const suffix = truncated || normalized.length > MAX_ERROR_DETAIL_CHARS ? "…" : "";
+        throw new Error(`Dev server request ${path} failed with HTTP ${response.status}${detail ? `: ${detail}${suffix}` : ""}`);
+    }
+    async ensureDashboardMutationSession() {
+        if (this.dashboardSession)
+            return this.dashboardSession;
+        const response = await this.fetchWithRetries(DASHBOARD_SESSION_PATH, { method: "GET" });
+        await this.throwForHttpError(DASHBOARD_SESSION_PATH, response);
+        const setCookie = response.headers.get("set-cookie");
+        const cookiePair = setCookie?.split(";", 1)[0]?.trim();
+        const separator = cookiePair?.indexOf("=") ?? -1;
+        if (!cookiePair || separator <= 0) {
+            throw new Error("Dev server did not issue a dashboard session");
+        }
+        this.dashboardSession = {
+            cookieHeader: cookiePair,
+            csrfToken: cookiePair.slice(separator + 1),
+        };
+        return this.dashboardSession;
+    }
+    async fetchWithRetries(path, init) {
         let lastError;
         for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
             try {
-                const response = await fetch(`${this.baseUrl}${path}`, {
+                return await fetch(`${this.baseUrl}${path}`, {
                     ...init,
                     signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
                 });
-                return await response.json();
             }
             catch (error) {
                 lastError = error;

package/esm/cli/shared/config.d.ts

@@ -6,6 +6,14 @@
  */
 import type { InferSchema } from "../../src/extensions/schema/index.js";
 import { type EnvironmentConfig } from "../../src/config/index.js";
+/**
+ * Classify failures from an idempotent API read conservatively.
+ *
+ * A structured HTTP status is authoritative: authentication, validation, and
+ * other client failures must not become retryable merely because an attached
+ * cause resembles a connection error.
+ */
+export declare function isRetryableApiReadError(error: unknown): boolean;
 export declare const getVeryfrontConfigSchema: () => import("../../src/internal-agents/schema.js").Schema<import("../../src/extensions/schema/schema-validator.js").InferShape<{
     projectSlug: import("../../src/internal-agents/schema.js").Schema<string | undefined>;
     /** List of project slugs for multi-project pull */
@@ -79,8 +87,14 @@ export declare const resolveConfig: (projectDir?: string, env?: EnvironmentConfi
  */
 export declare const resolveConfigWithAuth: (projectDir?: string, env?: EnvironmentConfig) => Promise<ResolvedConfig>;
 export declare function resolveConfigWithAuthDetails(projectDir?: string, env?: EnvironmentConfig): Promise<ResolvedConfigDetails>;
+export interface ApiReadOptions {
+    /** Abort the in-flight HTTP request when this signal fires. */
+    signal?: AbortSignal;
+    /** Use `none` when a higher-level polling loop owns retry timing. */
+    retryPolicy?: "default" | "none";
+}
 export interface ApiClient {
-    get<T>(path: string, params?: Record<string, string>): Promise<T>;
+    get<T>(path: string, params?: Record<string, string>, options?: ApiReadOptions): Promise<T>;
     post<T>(path: string, body?: unknown): Promise<T>;
     put<T>(path: string, body?: unknown): Promise<T>;
     patch<T>(path: string, body?: unknown): Promise<T>;

package/esm/cli/shared/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAGxE,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,2BAA2B,CAAC;AAwBzF,eAAO,MAAM,wBAAwB;;IAGjC,mDAAmD;;;;GAKtD,CAAC;AACF,eAAO,MAAM,qBAAqB;;IAN9B,mDAAmD;;;;GAMkB,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC;AAEvF,eAAO,MAAM,uBAAuB;;;;;;GAQnC,CAAC;AACF,eAAO,MAAM,oBAAoB;;;;;;GAAsC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAUrF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,2BAA2B,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,sBAAsB,EAAE,sBAAsB,CAAC;CAChD;AAED,eAAO,MAAM,mCAAmC,yGAKtC,CAAC;AAEX,MAAM,MAAM,+BAA+B,GAAG,OAAO,mCAAmC,CAAC,MAAM,CAAC,CAAC;AAsDjG,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAExF;AAED,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAatF;AAyBD,wBAAgB,kCAAkC,IAC9C;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,+BAA+B,CAAA;CAAE,GAC5D,SAAS,CAMZ;AAgID,eAAO,MAAM,aAAa,gBAJG,MAAM,QAAQ,iBAAiB,KAAG,OAAO,CAAC,cAAc,CAI7B,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gBAZL,MAAM,QAAQ,iBAAiB,KAAG,OAAO,CAAC,cAAc,CAYtB,CAAC;AAEhE,wBAAgB,4BAA4B,CAC1C,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,iBAAiB,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAEhC;AAUD,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACrC;AAED,eAAO,MAAM,iBAAiB;;;;;;;;GAU7B,CAAC;AACF,eAAO,MAAM,cAAc;;;;;;;;GAAgC,CAAC;AAC5D,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAEzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAuHjE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/cli/shared/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAGxE,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,2BAA2B,CAAC;AAkBzF;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK/D;AAQD,eAAO,MAAM,wBAAwB;;IAGjC,mDAAmD;;;;GAKtD,CAAC;AACF,eAAO,MAAM,qBAAqB;;IAN9B,mDAAmD;;;;GAMkB,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC;AAEvF,eAAO,MAAM,uBAAuB;;;;;;GAQnC,CAAC;AACF,eAAO,MAAM,oBAAoB;;;;;;GAAsC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAUrF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,2BAA2B,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,sBAAsB,EAAE,sBAAsB,CAAC;CAChD;AAED,eAAO,MAAM,mCAAmC,yGAKtC,CAAC;AAEX,MAAM,MAAM,+BAA+B,GAAG,OAAO,mCAAmC,CAAC,MAAM,CAAC,CAAC;AAsDjG,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAExF;AAED,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAatF;AAyBD,wBAAgB,kCAAkC,IAC9C;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,+BAA+B,CAAA;CAAE,GAC5D,SAAS,CAMZ;AAgID,eAAO,MAAM,aAAa,gBAJG,MAAM,QAAQ,iBAAiB,KAAG,OAAO,CAAC,cAAc,CAI7B,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,gBAZL,MAAM,QAAQ,iBAAiB,KAAG,OAAO,CAAC,cAAc,CAYtB,CAAC;AAEhE,wBAAgB,4BAA4B,CAC1C,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,iBAAiB,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAEhC;AAUD,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,WAAW,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,CAAC,EACH,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjD,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACrC;AAED,eAAO,MAAM,iBAAiB;;;;;;;;GAU7B,CAAC;AACF,eAAO,MAAM,cAAc;;;;;;;;GAAgC,CAAC;AAC5D,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAEzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAyHjE"}

package/esm/cli/shared/config.js

@@ -22,6 +22,19 @@ const API_MAX_RETRIES = 3;
 function isTransientStatus(status) {
     return status === 502 || status === 503 || status === 504;
 }
+/**
+ * Classify failures from an idempotent API read conservatively.
+ *
+ * A structured HTTP status is authoritative: authentication, validation, and
+ * other client failures must not become retryable merely because an attached
+ * cause resembles a connection error.
+ */
+export function isRetryableApiReadError(error) {
+    const status = typeof error === "object" && error !== null
+        ? error.status
+        : undefined;
+    return typeof status === "number" ? isTransientStatus(status) : isRetryableConnectionError(error);
+}
 /** Sleep for `ms` milliseconds plus a random jitter up to 20% of `ms`. */
 function sleepWithJitter(ms) {
     const jitter = Math.floor(ms * 0.2 * Math.random());
@@ -282,9 +295,10 @@ export function createApiClient(config) {
             return message;
         return `${message}. VERYFRONT_API_TOKEN was loaded from a project .env file. For management commands, run 'veryfront login' and remove or rename the project runtime token, or pass a management token explicitly in the shell.`;
     }
-    async function requestOnce(method, url, body) {
+    async function requestOnce(method, url, body, signal) {
         const response = await fetch(url, {
             method,
+            ...(signal ? { signal } : {}),
             headers: {
                 Authorization: `Bearer ${apiToken}`,
                 "Content-Type": "application/json",
@@ -317,30 +331,25 @@ export function createApiClient(config) {
     function isIdempotent(method) {
         return method === "GET" || method === "HEAD" || method === "PUT";
     }
-    async function request(method, path, body, params) {
+    async function request(method, path, body, params, options = {}) {
         const url = new URL(`${apiUrl}${path}`);
         for (const [key, value] of Object.entries(params ?? {})) {
             url.searchParams.set(key, value);
         }
         const urlStr = url.toString();
         let lastError;
-        for (let attempt = 0; attempt < API_MAX_RETRIES; attempt++) {
+        const maxAttempts = options.retryPolicy === "none" ? 1 : API_MAX_RETRIES;
+        for (let attempt = 0; attempt < maxAttempts; attempt++) {
             try {
-                return await requestOnce(method, urlStr, body);
+                return await requestOnce(method, urlStr, body, options.signal);
             }
             catch (error) {
                 lastError = error;
-                const status = error.status;
-                const isTransient = status !== undefined
-                    ? isTransientStatus(status)
-                    : isRetryableConnectionError(error);
                 const isRefused = isConnectionRefusedError(error);
-                // Idempotent: retry on transient HTTP status or any retryable connection error.
+                // Idempotent: retry on transient HTTP status or status-less retryable connection errors.
                 // Non-idempotent: retry only on connection-refused (request never reached server).
-                const shouldRetry = isIdempotent(method)
-                    ? (isTransient || isRetryableConnectionError(error))
-                    : isRefused;
-                if (!shouldRetry || attempt >= API_MAX_RETRIES - 1) {
+                const shouldRetry = isIdempotent(method) ? isRetryableApiReadError(error) : isRefused;
+                if (!shouldRetry || attempt >= maxAttempts - 1) {
                     throw error;
                 }
                 await sleepWithJitter(API_RETRY_DELAYS_MS[attempt]);
@@ -350,8 +359,8 @@ export function createApiClient(config) {
         throw lastError;
     }
     return {
-        get(path, params) {
-            return request("GET", path, undefined, params);
+        get(path, params, options) {
+            return request("GET", path, undefined, params, options);
         },
         post(path, body) {
             return request("POST", path, body);

package/esm/cli/shared/deployment/control-plane.d.ts

@@ -1,5 +1,4 @@
 import type { ApiClient, ResolvedConfig } from "../config.js";
-import type { ReleaseAssetManifestResponse } from "../../../src/release-assets/index.js";
 export interface DeployProjectRecord {
     id: string;
     slug: string;
@@ -43,6 +42,10 @@ export interface DeployReleaseFile {
     path: string;
     content: string;
 }
+export type DeployReleaseAssetManifestBody = object | string | number | boolean;
+export interface DeployReleaseAssetManifestReadOptions {
+    signal?: AbortSignal;
+}
 export interface DeployControlPlane {
     readonly controlPlane: string;
     getProject(reference: string): Promise<DeployProjectRecord>;
@@ -53,7 +56,11 @@ export interface DeployControlPlane {
     }): Promise<DeployRelease>;
     getRelease(reference: string, releaseId: string): Promise<DeployRelease>;
     listReleaseFiles(reference: string, releaseId: string): AsyncIterable<DeployReleaseFile>;
-    getReleaseAssetManifest(projectSlug: string, releaseId: string): Promise<ReleaseAssetManifestResponse | null>;
+    /**
+     * Performs one manifest read and returns null only while it does not exist.
+     * The caller owns polling and retry timing.
+     */
+    getReleaseAssetManifest(projectSlug: string, releaseId: string, options?: DeployReleaseAssetManifestReadOptions): Promise<DeployReleaseAssetManifestBody | null>;
     createDeployment(reference: string, input: {
         releaseId: string;
         environmentId: string;