veryfront 0.1.1213 → 0.1.1215

package/esm/src/server/handlers/request/csp-report.handler.d.ts

@@ -0,0 +1,56 @@
+/**
+ * CSP Violation Report Handler
+ *
+ * Receives the reports the platform CSP asks browsers to send, and writes them
+ * to the server log.
+ *
+ * Without this the report-only floor is inert at the platform level: it does
+ * not enforce, so it protects nothing, and with no reporting endpoint the
+ * violations it names reach only whoever happens to open devtools on the
+ * affected page. That leaves the enforcement rollout with no instrument --
+ * no way to answer "which projects would break if we enforced?" short of
+ * breaking them and waiting for complaints, which is how the floor shipped
+ * the first time.
+ *
+ * Endpoint: POST /_vf/csp-report
+ */
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerResult } from "../types.js";
+export interface NormalizedViolation {
+    documentUri?: string;
+    effectiveDirective?: string;
+    blockedUri?: string;
+    disposition?: string;
+    statusCode?: number;
+}
+/**
+ * Two wire formats reach this path and both are still in the field: the legacy
+ * `application/csp-report` body with a single `csp-report` key, and the
+ * Reporting API's `application/reports+json` array. Normalize to one shape so
+ * the log has a single schema regardless of which browser sent it.
+ */
+export declare function normalizeReports(payload: unknown): NormalizedViolation[];
+/**
+ * Per-window budget for log records.
+ *
+ * Charged per record rather than per request: one admission covering a whole
+ * batch would let a sender post {@link MAX_REPORTS_PER_REQUEST} violations at a
+ * time and write 16x the ceiling. The endpoint is unauthenticated, so this bound
+ * is the only thing protecting the log stream.
+ *
+ * Separate from the handler so the arithmetic can be tested as arithmetic,
+ * rather than by intercepting log output.
+ */
+export declare function createLogWindow(maxPerWindow?: number, windowMs?: number): {
+    /** @returns how many of `lines` may be written, and what the previous window swallowed */
+    reserve: (now: number, lines: number) => {
+        allowed: number;
+        dropped: number;
+    };
+};
+export declare class CspReportHandler extends BaseHandler {
+    #private;
+    metadata: HandlerMetadata;
+    handle(req: Request, ctx: HandlerContext): Promise<HandlerResult>;
+}
+//# sourceMappingURL=csp-report.handler.d.ts.map

package/esm/src/server/handlers/request/csp-report.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp-report.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/csp-report.handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAkDnG,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAYD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,mBAAmB,EAAE,CA6BxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,YAAY,GAAE,MAA8B,EAC5C,QAAQ,GAAE,MAAsB,GAC/B;IACD,0FAA0F;IAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/E,CAuBA;AAED,qBAAa,gBAAiB,SAAQ,WAAW;;IAC/C,QAAQ,EAAE,eAAe,CAIvB;IAOa,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA6CjF"}

package/esm/src/server/handlers/request/csp-report.handler.js

@@ -0,0 +1,189 @@
+/**
+ * CSP Violation Report Handler
+ *
+ * Receives the reports the platform CSP asks browsers to send, and writes them
+ * to the server log.
+ *
+ * Without this the report-only floor is inert at the platform level: it does
+ * not enforce, so it protects nothing, and with no reporting endpoint the
+ * violations it names reach only whoever happens to open devtools on the
+ * affected page. That leaves the enforcement rollout with no instrument --
+ * no way to answer "which projects would break if we enforced?" short of
+ * breaking them and waiting for complaints, which is how the floor shipped
+ * the first time.
+ *
+ * Endpoint: POST /_vf/csp-report
+ */
+import { BaseHandler } from "../response/base.js";
+import { HTTP_NO_CONTENT, PRIORITY_HIGH } from "../../../utils/constants/index.js";
+import { serverLogger } from "../../../utils/logger/logger.js";
+import { CSP_REPORT_PATH } from "../../../security/http/csp-report-endpoint.js";
+import { isRequestBodyTooLargeError, readBodyWithLimit } from "../../../security/index.js";
+const logger = serverLogger.component("csp-report");
+/**
+ * Reports come from browsers, unauthenticated, and anyone can post whatever
+ * they like to this path. Nothing here is trusted: the body is read against a
+ * byte budget rather than buffered whole, every logged field is truncated, and
+ * the response is always 204 so a hostile poster learns nothing about what was
+ * accepted.
+ */
+const MAX_BODY_BYTES = 64 * 1024;
+const MAX_FIELD_LENGTH = 512;
+const MAX_REPORTS_PER_REQUEST = 16;
+/**
+ * A busy project can emit violations on every page view. Logging each one would
+ * let a single misconfigured site drown the log stream, so each handler keeps a
+ * ceiling per window and records how many it dropped.
+ */
+const LOG_WINDOW_MS = 60_000;
+const MAX_LOGGED_PER_WINDOW = 100;
+/** Control characters a poster could use to forge extra log records (CWE-117). */
+// deno-lint-ignore no-control-regex -- intentionally matching control chars to strip them
+const LOG_CONTROL_CHARS = /[\x00-\x1f\x7f-\x9f]/g;
+function readField(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const stripped = value.replace(LOG_CONTROL_CHARS, "");
+    if (stripped.length === 0)
+        return undefined;
+    return stripped.length > MAX_FIELD_LENGTH ? `${stripped.slice(0, MAX_FIELD_LENGTH)}…` : stripped;
+}
+/**
+ * Same as {@link readField}, minus the query string. A violating URL carries
+ * whatever the page was called with, which can include session identifiers and
+ * personal data; the origin and path are what identify the violation.
+ */
+function readUri(value) {
+    const field = readField(value);
+    if (field === undefined)
+        return undefined;
+    const cut = field.search(/[?#]/);
+    return cut === -1 ? field : field.slice(0, cut);
+}
+function readStatusCode(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+function readRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/**
+ * Two wire formats reach this path and both are still in the field: the legacy
+ * `application/csp-report` body with a single `csp-report` key, and the
+ * Reporting API's `application/reports+json` array. Normalize to one shape so
+ * the log has a single schema regardless of which browser sent it.
+ */
+export function normalizeReports(payload) {
+    const fromBody = (body) => ({
+        // Each field has a legacy hyphenated spelling and a Reporting API
+        // camel-case one, and `violated-directive` is deprecated in favour of
+        // `effective-directive`. Reading only one spelling silently loses the
+        // directive and status, which is the data the rollout decision needs.
+        documentUri: readUri(body["document-uri"] ?? body.documentURL),
+        effectiveDirective: readField(body["effective-directive"] ?? body.effectiveDirective ?? body["violated-directive"]),
+        blockedUri: readUri(body["blocked-uri"] ?? body.blockedURL),
+        disposition: readField(body.disposition),
+        statusCode: readStatusCode(body["status-code"] ?? body.statusCode),
+    });
+    if (Array.isArray(payload)) {
+        // Filter before taking the first N: a batch may carry other report types,
+        // and slicing first would discard violations queued behind them.
+        return payload
+            .filter((entry) => readRecord(entry)?.type === "csp-violation")
+            .slice(0, MAX_REPORTS_PER_REQUEST)
+            .map((entry) => fromBody(readRecord(readRecord(entry)?.body) ?? {}));
+    }
+    const record = readRecord(payload);
+    if (!record)
+        return [];
+    const legacy = readRecord(record["csp-report"]);
+    return legacy ? [fromBody(legacy)] : [];
+}
+/**
+ * Per-window budget for log records.
+ *
+ * Charged per record rather than per request: one admission covering a whole
+ * batch would let a sender post {@link MAX_REPORTS_PER_REQUEST} violations at a
+ * time and write 16x the ceiling. The endpoint is unauthenticated, so this bound
+ * is the only thing protecting the log stream.
+ *
+ * Separate from the handler so the arithmetic can be tested as arithmetic,
+ * rather than by intercepting log output.
+ */
+export function createLogWindow(maxPerWindow = MAX_LOGGED_PER_WINDOW, windowMs = LOG_WINDOW_MS) {
+    let startedAt = 0;
+    let logged = 0;
+    let droppedInWindow = 0;
+    return {
+        reserve(now, lines) {
+            let dropped = 0;
+            if (now - startedAt >= windowMs) {
+                dropped = droppedInWindow;
+                startedAt = now;
+                logged = 0;
+                droppedInWindow = 0;
+            }
+            const allowed = Math.min(lines, Math.max(0, maxPerWindow - logged));
+            logged += allowed;
+            droppedInWindow += lines - allowed;
+            return { allowed, dropped };
+        },
+    };
+}
+export class CspReportHandler extends BaseHandler {
+    metadata = {
+        name: "CspReportHandler",
+        priority: PRIORITY_HIGH,
+        patterns: [{ pattern: CSP_REPORT_PATH, exact: true, method: "POST" }],
+    };
+    // Instance state rather than module state: one handler is built per registry,
+    // so production behaviour is the same, and each test gets a fresh window
+    // without the handler having to export a reset hook it does not otherwise need.
+    #logWindow = createLogWindow();
+    async handle(req, ctx) {
+        if (!this.shouldHandle(req, ctx))
+            return this.continue();
+        if (req.method !== "POST")
+            return this.continue();
+        // Always 204, whatever the body turned out to be. A browser has nothing to
+        // do with an error, and a hostile poster should learn nothing from one.
+        const accepted = this.respond(new Response(null, { status: HTTP_NO_CONTENT }));
+        let raw;
+        try {
+            // Shared reader: Content-Length is an early hint only, the streamed byte
+            // count is authoritative, and tiny transport chunks are coalesced so
+            // chunk metadata cannot grow independently of the limit.
+            raw = await readBodyWithLimit(req, MAX_BODY_BYTES);
+        }
+        catch (error) {
+            if (!isRequestBodyTooLargeError(error)) {
+                logger.debug("Unreadable CSP report body", { projectSlug: ctx.projectSlug });
+            }
+            return accepted;
+        }
+        if (raw.length === 0)
+            return accepted;
+        let payload;
+        try {
+            payload = JSON.parse(raw);
+        }
+        catch {
+            return accepted;
+        }
+        const violations = normalizeReports(payload);
+        if (violations.length === 0)
+            return accepted;
+        const { allowed, dropped } = this.#logWindow.reserve(Date.now(), violations.length);
+        if (allowed === 0)
+            return accepted;
+        for (const violation of violations.slice(0, allowed)) {
+            logger.warn("CSP violation reported", {
+                projectSlug: ctx.projectSlug,
+                ...violation,
+                ...(dropped > 0 ? { droppedSincePreviousWindow: dropped } : {}),
+            });
+        }
+        return accepted;
+    }
+}

package/esm/src/server/runtime-handler/index.d.ts

@@ -13,7 +13,7 @@ import type { Handler } from "../../types/index.js";
 import { ApiHandlerWrapper } from "../handlers/request/api/index.js";
 export { parseProxyEnvironment, type ProxyEnvironment } from "./proxy-environment.js";
 /** Handler names in registration order. */
-export declare const HANDLER_NAMES: readonly ["AuthHandler", "CsrfHandler", "HMRHandler", "CorsHandler", "HealthHandler", "MetricsHandler", "MemoryDebugHandler", "ClientLogHandler", "DevEndpointsHandler", "StylesCSSHandler", "DebugContextHandler", "OpenAPIHandler", "OpenAPIDocsHandler", "InternalAgentsListHandler", "PublicAgentsListHandler", "PublicAgentMetadataHandler", "AgentStreamHandler", "AgentRunResumeHandler", "AgentRunCancelHandler", "ProjectRunExecuteHandler", "ChannelInvokeHandler", "DevDashboardHandler", "ProjectsHandler", "StudioBridgeModulesHandler", "ProdHydrationModuleHandler", "CSSHandler", "DevFileHandler", "SnippetHandler", "StaticHandler", "LibModulesHandler", "RSCHandler", "ModuleHandler", "ApiHandlerWrapper", "MarkdownPreviewHandler", "SSRHandler", "NotFoundHandler"];
+export declare const HANDLER_NAMES: readonly ["AuthHandler", "CsrfHandler", "HMRHandler", "CorsHandler", "HealthHandler", "MetricsHandler", "MemoryDebugHandler", "ClientLogHandler", "DevEndpointsHandler", "StylesCSSHandler", "DebugContextHandler", "OpenAPIHandler", "OpenAPIDocsHandler", "InternalAgentsListHandler", "PublicAgentsListHandler", "PublicAgentMetadataHandler", "AgentStreamHandler", "AgentRunResumeHandler", "AgentRunCancelHandler", "ProjectRunExecuteHandler", "ChannelInvokeHandler", "DevDashboardHandler", "ProjectsHandler", "StudioBridgeModulesHandler", "ProdHydrationModuleHandler", "CSSHandler", "DevFileHandler", "SnippetHandler", "CspReportHandler", "StaticHandler", "LibModulesHandler", "RSCHandler", "ModuleHandler", "ApiHandlerWrapper", "MarkdownPreviewHandler", "SSRHandler", "NotFoundHandler"];
 /** Union of all registered handler names. */
 export type HandlerName = (typeof HANDLER_NAMES)[number];
 /**

package/esm/src/server/runtime-handler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAqCpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA6ErE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,4vBAqChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA2DD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C,4EAA4E;IAC5E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CA+ZnE;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAsCpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA6ErE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,gxBAsChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA4DD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C,4EAA4E;IAC5E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CA+ZnE;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}

package/esm/src/server/runtime-handler/index.js

@@ -31,6 +31,7 @@ import { DevFileHandler } from "../handlers/dev/files/index.js";
 import { DebugContextHandler } from "../handlers/dev/debug-context.handler.js";
 import { StylesCSSHandler } from "../handlers/dev/styles-css.handler.js";
 import { StudioBridgeModulesHandler } from "../handlers/studio/bridge-modules.handler.js";
+import { CspReportHandler } from "../handlers/request/csp-report.handler.js";
 import { StaticHandler } from "../handlers/request/static.handler.js";
 import { SnippetHandler } from "../handlers/request/snippet.handler.js";
 import { LibModulesHandler } from "../handlers/request/lib-modules.handler.js";
@@ -104,6 +105,7 @@ export const HANDLER_NAMES = [
     "CSSHandler",
     "DevFileHandler",
     "SnippetHandler",
+    "CspReportHandler",
     "StaticHandler",
     "LibModulesHandler",
     "RSCHandler",
@@ -156,6 +158,7 @@ const handlerFactories = {
     CSSHandler: () => new CSSHandler(),
     DevFileHandler: () => new DevFileHandler(),
     SnippetHandler: () => new SnippetHandler(),
+    CspReportHandler: () => new CspReportHandler(),
     StaticHandler: () => new StaticHandler(),
     LibModulesHandler: () => new LibModulesHandler(),
     RSCHandler: () => new RSCHandler(),

package/esm/src/server/runtime-handler/project-runtime-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-runtime-context.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/project-runtime-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAKhF,KAAK,kBAAkB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,KAAK,qBAAqB,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACtE,KAAK,qBAAqB,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,KAAK,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;AAC5E,KAAK,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;AAC3E,KAAK,4BAA4B,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC1E,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAEnF,KAAK,sBAAsB,GAAG;IAC5B,GAAG,CAAC,KAAK,EAAE;QACT,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrC,CAAC;AAEF,KAAK,sBAAsB,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7E,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,qBAAqB,CAAC;IACtC,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,sBAAsB,EAAE,OAAO,CAAC;KACjC,CAAC;IACF,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,oBAAoB,CAAC;IACpC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,qBAAqB,CAAC;IACtC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,eAAe,EAAE,yBAAyB,CAAC;IAC3C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,qBAAqB,CAAC;IACtC,WAAW,EAAE,OAAO,CAAC;IACrB,4EAA4E;IAC5E,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,sBAAsB,CAAC;IACpC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,qBAAqB,CAAC,EAAE,CAAC,WAAW,EAAE,4BAA4B,KAAK,IAAI,CAAC;IAC5E,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,wBAAwB,CAAC;IAClC,WAAW,EAAE,4BAA4B,CAAC;IAC1C,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,uBAAuB,EAAE,uBAAuB,CAAC;CAClD;AAED,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,oBAAoB;IAC5B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,sBAAsB,CAAC,CA8CjC;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,yBAAyB,CAAC,CAcpC;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,+BAA+B,CAAC,CAwN1C"}
+{"version":3,"file":"project-runtime-context.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/project-runtime-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM3D,OAAO,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAKhF,KAAK,kBAAkB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,KAAK,qBAAqB,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACtE,KAAK,qBAAqB,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACrE,KAAK,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;AAC5E,KAAK,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;AAC3E,KAAK,4BAA4B,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC1E,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAEnF,KAAK,sBAAsB,GAAG;IAC5B,GAAG,CAAC,KAAK,EAAE;QACT,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrC,CAAC;AAEF,KAAK,sBAAsB,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7E,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,qBAAqB,CAAC;IACtC,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;QAClC,sBAAsB,EAAE,OAAO,CAAC;KACjC,CAAC;IACF,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE,oBAAoB,CAAC;IACpC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,qBAAqB,CAAC;IACtC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,eAAe,EAAE,yBAAyB,CAAC;IAC3C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,cAAc,EAAE,qBAAqB,CAAC;IACtC,WAAW,EAAE,OAAO,CAAC;IACrB,4EAA4E;IAC5E,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,UAAU,EAAE;QACV,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,sBAAsB,CAAC;IACpC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,qBAAqB,CAAC,EAAE,CAAC,WAAW,EAAE,4BAA4B,KAAK,IAAI,CAAC;IAC5E,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,wBAAwB,CAAC;IAClC,WAAW,EAAE,4BAA4B,CAAC;IAC1C,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,uBAAuB,EAAE,uBAAuB,CAAC;CAClD;AAED,UAAU,mBAAmB;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,oBAAoB;IAC5B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,sBAAsB,CAAC,CA8CjC;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,yBAAyB,CAAC,CAcpC;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,+BAA+B,CAAC,CAqQ1C"}

package/esm/src/server/runtime-handler/project-runtime-context.js

@@ -2,6 +2,9 @@ import { getBaseLogger } from "../../utils/index.js";
 import { getHostEnv } from "../../platform/compat/process.js";
 import { prepareDeclarativeConfigContext } from "../../config/declarative-evaluator.js";
 import { deriveSecurityContext } from "../../security/http/config.js";
+import { getDerivedCspOrigins } from "../../security/http/derived-csp-cache.js";
+import { resolveStyleContentVersion } from "../../html/styles-builder/content-version.js";
+import { isExtendedFSAdapter } from "../../platform/adapters/index.js";
 import { normalizeSourceIntegrationPolicy } from "../../integrations/source-policy.js";
 import { createRequestContext } from "../context/request-context.js";
 import { isProxyTrusted } from "../utils/proxy-trust.js";
@@ -157,11 +160,55 @@ export async function resolveProjectRuntimeContext(input) {
     // deliberately config-less control-plane path config-less: those endpoints
     // authenticate their signed operation envelope and do not expose an
     // application/browser surface.
+    // Origins the project's own source references, so a project that never wrote
+    // a `security.csp` still loads its own images, video and fonts. Only passive
+    // directives are derived; see security/http/derived-csp-origins.ts for why
+    // script-src is not.
+    //
+    // Runs inside runWithContext, not after it. MultiProjectFSAdapter resolves
+    // the tenant from AsyncLocalStorage, and outside that context it either
+    // throws -- swallowed by getAllSourceFiles into an empty list that would then
+    // be cached forever -- or falls back to a default adapter, which would derive
+    // one project's origins from another's source.
+    //
+    // Derived for config-less projects too. Those are the ones this exists for:
+    // a project with no veryfront.config.* is exactly the project that never
+    // declared a policy, and gating on config would leave it on the bare floor.
+    //
+    // Excluded on the deferred path. Those control-plane endpoints authenticate a
+    // signed operation envelope, expose no browser surface, and deliberately read
+    // no outer source -- deriving there would both serve nothing and break that
+    // guarantee.
+    const derivedCsp = input.isProxyMode && projectRes.projectSlug && reqCtx.token &&
+        adapterRes.configOutcome !== "deferred"
+        ? await deriveProjectCspOrigins({
+            adapter: adapterRes.adapter,
+            projectSlug: projectRes.projectSlug,
+            projectId: projectRes.projectId,
+            token: reqCtx.token,
+            releaseId: envRes.releaseId,
+            // Same precedence as the hosted config source context above. If the two
+            // disagree, derivation reads a different branch than the one that
+            // produced the config, and the origins describe content other than the
+            // page being served.
+            branch: reqCtx.branch ?? projectRes.parsedDomain?.branch,
+            environmentName: projectRes.environmentName,
+        })
+        : undefined;
     const requestSecurity = input.isProxyMode && adapterRes.config !== undefined
         ? deriveSecurityContext(adapterRes.config, {
             productionDefaults: envRes.resolvedEnvironment === "production",
+            derivedCsp,
         })
-        : undefined;
+        // A hosted project with no config file still gets its own security context
+        // rather than the process-wide one: defaults plus whatever its source
+        // implies. `deferred` control-plane requests keep the config-less shape.
+        : input.isProxyMode && projectRes.projectSlug && adapterRes.configOutcome === "hosted-absent"
+            ? deriveSecurityContext(undefined, {
+                productionDefaults: envRes.resolvedEnvironment === "production",
+                derivedCsp,
+            })
+            : undefined;
     // Falling back here substitutes the process-wide security config for the
     // project's, which serves a 200 whose CSP is the platform floor rather than
     // the project's policy. The response looks correct, so nothing downstream
@@ -307,3 +354,52 @@ function createProxyGuard(req, isProxyMode, headers, proxyTrusted, identityHeade
         }),
     };
 }
+/**
+ * Derive a project's passive CSP origins inside its own adapter context.
+ *
+ * The source read and the snapshot identity are both taken under
+ * `runWithContext`, because the multi-project adapter selects the tenant from
+ * AsyncLocalStorage and silently yields nothing -- or the wrong project --
+ * without it.
+ */
+async function deriveProjectCspOrigins(args) {
+    if (!isExtendedFSAdapter(args.adapter.fs) || !args.adapter.fs.runWithContext)
+        return undefined;
+    const fs = args.adapter.fs;
+    const run = async () => {
+        const underlying = typeof fs.getUnderlyingAdapter === "function"
+            ? fs.getUnderlyingAdapter()
+            : undefined;
+        if (!underlying || typeof underlying.getAllSourceFiles !== "function")
+            return undefined;
+        // Branch and environment content versions are stable while the content
+        // under them changes, so the adapter's snapshot generation is what actually
+        // moves when a preview is pushed to. Without it a preview would serve a
+        // derivation from before the push until the entry is evicted.
+        const snapshot = typeof underlying.getSourceSnapshotVersion === "function"
+            ? underlying.getSourceSnapshotVersion()
+            : 0;
+        const contentVersion = `${resolveStyleContentVersion(underlying.getContentContext?.() ?? null, {
+            releaseId: args.releaseId,
+            branch: args.branch,
+            environmentName: args.environmentName,
+        })}@${snapshot}`;
+        return await getDerivedCspOrigins({
+            projectScope: args.projectSlug,
+            contentVersion,
+            loadSourceFiles: () => underlying.getAllSourceFiles(),
+        });
+    };
+    try {
+        return await fs.runWithContext(args.projectSlug, args.token, run, args.projectId, {
+            productionMode: Boolean(args.releaseId),
+            releaseId: args.releaseId ?? null,
+            branch: args.branch ?? null,
+            environmentName: args.environmentName ?? null,
+        });
+    }
+    catch {
+        // Never fail a response over a CSP nicety.
+        return undefined;
+    }
+}

package/esm/src/server/utils/domain-parser.d.ts

@@ -11,6 +11,15 @@ export interface ParsedDomain {
  * Extract project slug and branch from domain/host header
  */
 export declare function parseProjectDomain(host: string): ParsedDomain;
+/**
+ * Whether the host is a hosted veryfront domain (veryfront.com / veryfront.org)
+ * rather than one of the local development domains.
+ *
+ * The two differ in what a project-less host means. Locally it means "no project
+ * chosen yet" and the project chooser answers; hosted it means the domain names
+ * no project at all and nothing can answer.
+ */
+export declare function isHostedVeryfrontDomain(host: string): boolean;
 /**
  * Check if a domain is a valid veryfront domain (includes veryfront.me and lvh.me for local dev)
  */

package/esm/src/server/utils/domain-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-parser.d.ts","sourceRoot":"","sources":["../../../../src/src/server/utils/domain-parser.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;IACzE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AA0DD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA6G7D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA2BpD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAIrC"}
+{"version":3,"file":"domain-parser.d.ts","sourceRoot":"","sources":["../../../../src/src/server/utils/domain-parser.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;IACzE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,yFAAyF;IACzF,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AA0DD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA6G7D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA2BpD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAIrC"}

package/esm/src/server/utils/domain-parser.js

@@ -114,6 +114,17 @@ export function parseProjectDomain(host) {
     // and erases the environment from the URL, which the product decision requires.
     return createParsedDomain(null, null, null, false, false);
 }
+/**
+ * Whether the host is a hosted veryfront domain (veryfront.com / veryfront.org)
+ * rather than one of the local development domains.
+ *
+ * The two differ in what a project-less host means. Locally it means "no project
+ * chosen yet" and the project chooser answers; hosted it means the domain names
+ * no project at all and nothing can answer.
+ */
+export function isHostedVeryfrontDomain(host) {
+    return new RegExp(`^(?:.+\\.)?(${PROD_DOMAINS})$`, "i").test(stripPort(host));
+}
 /**
  * Check if a domain is a valid veryfront domain (includes veryfront.me and lvh.me for local dev)
  */

package/esm/src/skill/allowed-tools.d.ts

@@ -1,9 +1,14 @@
 /**
- * Allowed-Tools Enforcement
+ * Skill Tool Availability
  *
- * Dual-layer enforcement for skill tool access restrictions.
- * Layer 1: Filter tool definitions before sending to model (planning-time)
- * Layer 2: Check individual tool calls at execution time
+ * Gates the skill infrastructure tools by what the active skill actually
+ * advertises: `load_skill_reference` needs a reference file, and
+ * `execute_skill_script` needs a script. Ordinary tools are never gated here.
+ *
+ * A skill's `allowed-tools` frontmatter is deliberately *not* enforced. The
+ * Agent Skills specification defines that field as pre-approval: tools the
+ * agent may run without prompting, not an authorization boundary. See
+ * veryfront/veryfront-issue-inbox#406.
  *
  * @module
  */
@@ -14,49 +19,20 @@ export type SkillToolAvailability = {
     readonly scripts?: readonly string[];
 };
 /**
- * Check if a tool name matches a single allowed-tools pattern.
- *
- * Supports:
- * - Exact match: "Read" matches "Read"
- * - Prefix wildcard: "api:*" matches "api:list-users"
- */
-export declare function matchesAllowedTool(toolName: string, pattern: string): boolean;
-/**
- * Layer 1: Filter tool definitions before sending to model.
+ * Filter tool definitions before sending them to the model.
  *
- * Removes tools not in the allowed list. `load_skill` remains available for
- * skill navigation. File-backed skill tools also require an advertised file.
+ * Only skill infrastructure tools are affected; every other tool passes
+ * through untouched.
  *
  * @param tools - Full list of tool definitions
- * @param allowedTools - Allowed tool patterns, or undefined for no restrictions
+ * @param skillToolAvailability - Files the active skill advertises
  * @returns Filtered tool definitions
  */
 export declare function filterToolsForSkill<T extends {
     name: string;
-}>(tools: T[], allowedTools: string[] | undefined, skillToolAvailability?: SkillToolAvailability): T[];
-/**
- * Layer 2: Check if a specific tool call is allowed at execution time.
- *
- * @param toolName - Name of the tool being called
- * @param allowedTools - Allowed tool patterns, or undefined for no restrictions
- * @returns true if the tool call is allowed
- */
-export declare function isToolAllowedBySkill(toolName: string, allowedTools: string[] | undefined, skillToolAvailability?: SkillToolAvailability): boolean;
-/** Filter provider-native or other name-only tool inventories through the same policy boundary. */
-export declare function filterToolNamesForSkill(toolNames: readonly string[], allowedTools: string[] | undefined, skillToolAvailability?: SkillToolAvailability): string[];
-/**
- * Validate allowed-tool patterns at parse time.
- *
- * Ensures each pattern matches the expected format.
- * Rejects unsupported patterns with a descriptive error (fail closed).
- *
- * @param patterns - Array of tool patterns to validate
- * @returns A detached mutable copy of the validated patterns
- * @throws If any pattern is invalid
- */
-export declare function validateAllowedToolPatterns(patterns: string[]): string[];
-/** Validate bounded allowed-tool patterns at filesystem and runtime trust boundaries. */
-export declare function validateStrictAllowedToolPatterns(patterns: string[]): string[];
-/** Validate, detach, and freeze an active authorization policy. */
-export declare function snapshotAllowedToolPatterns(patterns: readonly string[]): string[];
+}>(tools: T[], skillToolAvailability?: SkillToolAvailability): T[];
+/** Check whether a specific tool call is available at execution time. */
+export declare function isSkillToolAvailable(toolName: string, skillToolAvailability?: SkillToolAvailability): boolean;
+/** Filter provider-native or other name-only tool inventories through the same boundary. */
+export declare function filterToolNamesForSkill(toolNames: readonly string[], skillToolAvailability?: SkillToolAvailability): string[];
 //# sourceMappingURL=allowed-tools.d.ts.map

package/esm/src/skill/allowed-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"allowed-tools.d.ts","sourceRoot":"","sources":["../../../src/src/skill/allowed-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,qFAAqF;AACrF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC;AAoEF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAc7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAC5D,KAAK,EAAE,CAAC,EAAE,EACV,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,EAClC,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,CAAC,EAAE,CAsBL;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,EAClC,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,OAAO,CAMT;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,EAClC,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,MAAM,EAAE,CAUV;AASD;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAExE;AAED,yFAAyF;AACzF,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAE9E;AAED,mEAAmE;AACnE,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEjF"}
+{"version":3,"file":"allowed-tools.d.ts","sourceRoot":"","sources":["../../../src/src/skill/allowed-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,qFAAqF;AACrF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC;AA+BF;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAC5D,KAAK,EAAE,CAAC,EAAE,EACV,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,CAAC,EAAE,CAQL;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,OAAO,CAET;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,MAAM,EAAE,CAIV"}