veryfront 0.1.1232 → 0.1.1233

package/README.md

@@ -10,6 +10,11 @@ Veryfront Code is a full-stack framework for building AI-powered applications an
 
 It gives you agents, tools, workflows, and a complete React rendering stack in a single framework. Veryfront Code runs on Node.js, Deno, and Bun, and can be deployed anywhere or shipped through the Veryfront platform with built-in preview environments and production hosting.
 
+Veryfront Code is an Apache-2.0 open-source framework that works standalone.
+Develop and evaluate locally, self-host in your own cloud or on-premises
+environment, or use Veryfront Cloud for managed platform services. A Veryfront
+account is not required for local development or self-hosting.
+
 <p align="center">
   <img src="./assets/banner.svg" alt="Veryfront" width="100%">
 </p>

package/esm/cli/app/actions.js

@@ -69,7 +69,7 @@ export function createLauncher(host) {
     }
     return {
         openInBrowser(project, port) {
-            return open(`http://${project.slug}.veryfront.me:${port}`, (url) => `Opened ${url}`);
+            return open(`http://${project.slug}.localhost:${port}`, (url) => `Opened ${url}`);
         },
         openInStudio(project) {
             return open(`https://veryfront.com/projects/${project.slug}`, () => `Opened Studio for ${project.slug}`);

package/esm/cli/app/shell.js

@@ -53,7 +53,7 @@ export function createApp(config) {
     state = setTemplates(TEMPLATES)(state);
     state = updateServer({
         port: config.port,
-        url: `http://veryfront.me:${config.port}`,
+        url: `http://localhost:${config.port}`,
     })(state);
     state = updateMCP({
         enabled: config.mcpPort !== undefined,
@@ -304,9 +304,9 @@ export function createApp(config) {
     function start() {
         running = true;
         if (!isInteractiveMode) {
-            console.log(`Server running on http://veryfront.me:${config.port}`);
+            console.log(`Server running on http://localhost:${config.port}`);
             if (config.mcpPort)
-                console.log(`MCP available at http://veryfront.me:${config.mcpPort}/mcp`);
+                console.log(`MCP available at http://localhost:${config.mcpPort}/mcp`);
             return;
         }
         write(screen.altOn + cursor.hide);

package/esm/cli/app/state.js

@@ -8,7 +8,7 @@ export function createInitialState() {
         previousView: null,
         server: {
             running: false,
-            url: "http://veryfront.me:8080",
+            url: "http://localhost:8080",
             port: 8080,
             errors: 0,
             warnings: 0,

package/esm/cli/app/views/dashboard.js

@@ -42,7 +42,7 @@ function hasRemoteProjects(state) {
 function renderStatus(state) {
     const lines = [`  ✓ Server ready at ${brand(state.server.url)}`];
     if (state.mcp.enabled && state.mcp.transport === "http" && state.mcp.httpPort !== undefined) {
-        lines.push(`  ✓ MCP ready at ${brand(`http://veryfront.me:${state.mcp.httpPort}/mcp`)}`);
+        lines.push(`  ✓ MCP ready at ${brand(`http://localhost:${state.mcp.httpPort}/mcp`)}`);
     }
     const { errors, warnings } = state.server;
     if (errors > 0 || warnings > 0) {

package/esm/cli/app/views/help.js

@@ -44,7 +44,7 @@ export function renderHelpView(state) {
         lines.push(`    ${dim('"mcpServers": {')}`);
         lines.push(`    ${dim('  "veryfront": {')}`);
         lines.push(`    ${dim('    "type": "url",')}`);
-        lines.push(`    ${dim(`    "url": "http://veryfront.me:${state.mcp.httpPort}/mcp"`)}`);
+        lines.push(`    ${dim(`    "url": "http://localhost:${state.mcp.httpPort}/mcp"`)}`);
         lines.push(`    ${dim("  }")}`);
         lines.push(`    ${dim("}")}`);
         lines.push("");

package/esm/cli/commands/deploy/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAoDxB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAqDxB,CAAC"}

package/esm/cli/commands/deploy/command-help.js

@@ -49,5 +49,6 @@ export const deployHelp = {
         "With --project, promotes only: the working directory is never pushed, so the selected project directory's push receipt must already name that project",
         "Creates a new release from the resolved branch",
         "Verifies the target environment points to the created deployment before succeeding",
+        "Warns when only the environment's access gate answered the readiness probe, so the app itself was never observed serving",
     ],
 };

package/esm/cli/commands/deploy/command.js

@@ -101,13 +101,15 @@ async function deployCommandHuman(options) {
         progressText = next;
         spinner.update(next);
     };
-    let warning = null;
+    // Collected, not overwritten: a deploy can raise more than one warning, and
+    // the one an operator most needs is not reliably the last.
+    const warnings = [];
     let outcome;
     try {
         outcome = await deployRunner(options).execute(toDeployRequest(options), {
             onEvent(event) {
                 if (event.kind === "warning") {
-                    warning = event.message;
+                    warnings.push(event.message);
                     return;
                 }
                 updateProgress(deployProgressText(event, env, verbose));
@@ -145,8 +147,8 @@ async function deployCommandHuman(options) {
         logInfo(`  Source digest: ${result.sourceDigest}`);
         logInfo(`  Control plane: ${result.controlPlane}`);
     }
-    if (warning)
-        logWarning(warning);
+    for (const message of warnings)
+        logWarning(message);
     if (verbose) {
         const { getPostDeployTips } = await import("../../help/tips.js");
         console.log(getPostDeployTips());

package/esm/cli/commands/dev/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,OAAO,EAAE,WA0BrB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,OAAO,EAAE,WAqCrB,CAAC"}

package/esm/cli/commands/dev/command-help.js

@@ -6,7 +6,7 @@ export const devHelp = {
     options: [
         {
             flag: "--port <number>",
-            description: "Port to run on",
+            description: "Port to run on (also reads PORT env var)",
             default: "3000",
         },
         {
@@ -21,7 +21,18 @@ export const devHelp = {
     examples: [
         "veryfront dev",
         "veryfront dev --port 8080",
+        "PORT=3001 veryfront dev",
         "veryfront dev --open",
         "veryfront dev --no-hmr",
     ],
+    notes: [
+        "Port selection priority (highest to lowest):",
+        "  1. --port / -p flag",
+        "  2. PORT env var",
+        "  3. VERYFRONT_PORT env var",
+        "  4. Default: 3000",
+        "",
+        "When the requested port is taken, the server falls forward to the next",
+        "free port. Open the URL the CLI prints to reach the running server.",
+    ],
 };

package/esm/cli/commands/dev/command.d.ts

@@ -6,6 +6,14 @@ import { type RemoteProject } from "../../sync/index.js";
 import { type PushOptions } from "../push/index.js";
 export interface DevOptions {
     port: number;
+    /**
+     * True when the port was set explicitly by a `--port` / `-p` flag or by a
+     * valid `PORT` / `VERYFRONT_PORT` env var.  When false (or absent) the port
+     * value fell through to the hardcoded default and `config.dev.port` should
+     * take precedence.  Defaults to `port !== DEFAULT_DEV_PORT` for callers that
+     * do not set this field, preserving backward-compatible behaviour.
+     */
+    portExplicit?: boolean;
     projectDir: string;
     hmr?: boolean;
     open?: boolean;

package/esm/cli/commands/dev/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmBH,OAAO,EAAE,KAAK,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAK1F,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,wBAAsB,cAAc,CAClC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAQvE;AAED,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,GACrB,WAAW,CAEb;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAClC,OAAO,CAAC;IAAE,MAAM,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBtC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE,MAAM,EACrB,KAAK,GAAE,MAAM,OAAO,CAAC,IAAI,CAAuB,EAChD,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAmB,GAC1D,OAAO,CAAC,OAAO,CAAC,CAIlB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAyRzE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmBH,OAAO,EAAE,KAAK,YAAY,EAA2B,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM1F,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,wBAAsB,cAAc,CAClC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAQvE;AAED,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,aAAa,GACrB,WAAW,CAEb;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAClC,OAAO,CAAC;IAAE,MAAM,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBtC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,0BAA0B,CAC9C,aAAa,EAAE,MAAM,EACrB,KAAK,GAAE,MAAM,OAAO,CAAC,IAAI,CAAuB,EAChD,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAmB,GAC1D,OAAO,CAAC,OAAO,CAAC,CAIlB;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6SzE"}

package/esm/cli/commands/dev/command.js

@@ -4,7 +4,7 @@
 import { compileAllMDX, watchMDX } from "../../../src/build/index.js";
 import { CONFIG_NOT_FOUND, PORT_IN_USE } from "../../../src/errors/index.js";
 import { join } from "../../../src/platform/compat/path/index.js";
-import { runtime } from "../../../src/platform/index.js";
+import { getEnv, runtime } from "../../../src/platform/index.js";
 import { getConfig } from "../../../src/config/index.js";
 import { getEnvironmentConfig } from "../../../src/config/index.js";
 import { startDevServer } from "../../../src/server/index.js";
@@ -25,6 +25,7 @@ import { createStagedPushOptions, pushCommand } from "../push/index.js";
 import { createProjectSelector } from "./project-selector.js";
 import { createDevLogController } from "./log-controller.js";
 import { findAvailablePort, isPortAvailable, isPortInUseError } from "./port-fallback.js";
+import { listInferenceOptions } from "./inference-status.js";
 function authStatus(identity) {
     return isApiKeyIdentity(identity)
         ? "Authenticated with an API key"
@@ -99,7 +100,7 @@ export async function clearLocalCachesIfPortFree(requestedPort, clear = clearAll
 }
 export function devCommand(options) {
     return withSpan("cli.command.dev", async () => {
-        const { port, projectDir, hmr = true, open = false, demoMode = false, clearLocalCaches = false, } = options;
+        const { port, portExplicit, projectDir, hmr = true, open = false, demoMode = false, clearLocalCaches = false, } = options;
         const startTime = Date.now();
         let doneResolve;
         const done = new Promise((resolve) => {
@@ -120,7 +121,14 @@ export function devCommand(options) {
             throw error;
         }
         const DEFAULT_DEV_PORT = 3000;
-        const finalPort = port !== DEFAULT_DEV_PORT ? port : (config?.dev?.port ?? port);
+        // Use `portExplicit` when provided so that `PORT=3000` is honoured even
+        // though 3000 equals the default — the old sentinel `port !== 3000` would
+        // silently discard an explicit env-var request that happens to equal the
+        // default value.  Fall back to the sentinel for callers that predate this
+        // field.
+        const finalPort = (portExplicit ?? port !== DEFAULT_DEV_PORT)
+            ? port
+            : (config?.dev?.port ?? port);
         const enableHMR = config?.dev?.hmr !== false && hmr;
         if (clearLocalCaches)
             await clearLocalCachesIfPortFree(finalPort);
@@ -247,13 +255,25 @@ export function devCommand(options) {
                 stop: shutdown,
             };
         }
-        const serverUrl = `http://veryfront.me:${boundPort}`;
+        const serverUrl = `http://localhost:${boundPort}`;
         const elapsed = Date.now() - startTime;
         console.log();
         console.log(`  ✓ Ready in ${formatDuration(elapsed)}`);
         console.log(`  ${brand(serverUrl)}`);
+        const inferenceOptions = listInferenceOptions({
+            apiToken: runtimeAuth.apiToken,
+            projectSlug: runtimeAuth.projectSlug,
+            openaiApiKey: getEnv("OPENAI_API_KEY"),
+            openaiBaseUrl: getEnv("OPENAI_BASE_URL"),
+            anthropicApiKey: getEnv("ANTHROPIC_API_KEY"),
+            googleApiKey: getEnv("GOOGLE_API_KEY") ?? getEnv("GOOGLE_GENERATIVE_AI_API_KEY"),
+            mistralApiKey: getEnv("MISTRAL_API_KEY"),
+        });
+        if (inferenceOptions.length > 0) {
+            console.log(`  ${dim("Inference")} ${brand(inferenceOptions.join(", "))}`);
+        }
         if (mcpServer && isVerbose()) {
-            console.log(`  ${dim("MCP")} ${brand(`http://veryfront.me:${mcpPort}/mcp`)}`);
+            console.log(`  ${dim("MCP")} ${brand(`http://localhost:${mcpPort}/mcp`)}`);
         }
         if (isTTY()) {
             console.log(devShortcuts());

package/esm/cli/commands/dev/handler.d.ts

@@ -2,7 +2,7 @@
  * Dev command handler
  */
 import type { ParsedArgs } from "../../shared/types.js";
-export declare const parseDevArgs: (args: ParsedArgs) => import("../../shared/args.js").SafeParseResult<import("../../../src/extensions/schema/schema-validator.js").InferShape<{
+declare const parseDevArgsBase: (args: ParsedArgs) => import("../../shared/args.js").SafeParseResult<import("../../../src/extensions/schema/schema-validator.js").InferShape<{
     port: import("../../../src/internal-agents/schema.js").Schema<number>;
     project: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     hmr: import("../../../src/internal-agents/schema.js").Schema<boolean>;
@@ -10,5 +10,11 @@ export declare const parseDevArgs: (args: ParsedArgs) => import("../../shared/ar
     open: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     debug: import("../../../src/internal-agents/schema.js").Schema<boolean>;
 }>>;
+/**
+ * Parses dev command arguments, honouring `PORT` / `VERYFRONT_PORT` as
+ * lower-precedence defaults when no explicit `--port` / `-p` is given.
+ */
+export declare const parseDevArgs: typeof parseDevArgsBase;
 export declare function handleDevCommand(args: ParsedArgs): Promise<void>;
+export {};
 //# sourceMappingURL=handler.d.ts.map

package/esm/cli/commands/dev/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAexD,eAAO,MAAM,YAAY;;;;;;;GAOvB,CAAC;AAwBH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA6BtE"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAmFxD,QAAA,MAAM,gBAAgB;;;;;;;GAOpB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,OAAO,gBAajC,CAAC;AAwBF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDtE"}

package/esm/cli/commands/dev/handler.js

@@ -3,12 +3,80 @@
  */
 import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import { isAbsolute, join } from "../../../src/platform/compat/path/index.js";
-import { cwd, setEnv } from "../../../src/platform/index.js";
+import { cwd, getEnv, setEnv } from "../../../src/platform/index.js";
 import { createFileSystem } from "../../../src/platform/index.js";
-import { cliLogger, DEFAULT_DEV_SERVER_PORT, showHeader } from "../../utils/index.js";
+import { cliLogger, DEFAULT_DEV_SERVER_PORT, logWarning, showHeader } from "../../utils/index.js";
 import { refreshLoggerConfig } from "../../../src/utils/index.js";
 import { createArgParser, parseArgsOrThrow } from "../../shared/args.js";
 import { ensureCliBundlerContracts } from "../../shared/default-contracts.js";
+/**
+ * Parse a port from an env var string.  Returns `undefined` when the var is
+ * absent, empty, not an all-digit integer, or outside the valid port range
+ * 1–65535.  Invalid values emit a warning so the developer sees exactly what
+ * was rejected rather than getting a silent fallback.
+ *
+ * `Number.parseInt("3001abc")` silently returns 3001, so this function requires
+ * the entire trimmed string to be digits before converting — no prefix parsing.
+ */
+function parsePortEnv(name) {
+    const raw = getEnv(name);
+    if (raw === undefined)
+        return undefined;
+    const trimmed = raw.trim();
+    if (trimmed === "")
+        return undefined;
+    if (!/^\d+$/.test(trimmed)) {
+        logWarning(`${name}=${JSON.stringify(raw)} is not a valid port number; ignoring`);
+        return undefined;
+    }
+    const port = Number(trimmed);
+    if (port < 1 || port > 65535) {
+        logWarning(`${name}=${port} is outside the valid port range (1-65535); ignoring`);
+        return undefined;
+    }
+    return port;
+}
+/**
+ * Read a numeric port from an env var, returning `fallback` when the var is
+ * absent or contains a value that fails strict validation (non-integer string,
+ * trailing garbage, or a value outside the 1-65535 range).
+ */
+function readPortEnv(name, fallback) {
+    return parsePortEnv(name) ?? fallback;
+}
+/**
+ * Returns true when the named env var holds a valid port number (all-digit
+ * string within 1–65535).  This is a pure predicate — it never emits warnings,
+ * because those were already emitted by `parsePortEnv` during arg parsing.
+ * Used to determine whether the port came from an explicit env var rather than
+ * falling through to the hardcoded default.
+ */
+function isValidPortEnv(name) {
+    const raw = getEnv(name);
+    if (!raw)
+        return false;
+    const t = raw.trim();
+    if (!/^\d+$/.test(t))
+        return false;
+    const n = Number(t);
+    return n >= 1 && n <= 65535;
+}
+/**
+ * The default port to use for `veryfront dev`, resolved from env vars.
+ *
+ * Priority (highest → lowest):
+ *   1. `--port` / `-p` flag — explicit, handled by `parseDevArgs`
+ *   2. `PORT`              — the near-universal PaaS / framework convention
+ *   3. `VERYFRONT_PORT`   — Veryfront-specific override
+ *   4. 3000               — hardcoded default
+ *
+ * This matches how `veryfront serve` handles the same env vars, and how
+ * Next.js, Vite, Create React App, Heroku, and Railway all treat `PORT`.
+ */
+function getDefaultDevPort() {
+    const veryfrontPort = readPortEnv("VERYFRONT_PORT", DEFAULT_DEV_SERVER_PORT);
+    return readPortEnv("PORT", veryfrontPort);
+}
 const getDevArgsSchema = defineSchema((v) => v.object({
     port: v.number().default(DEFAULT_DEV_SERVER_PORT),
     project: v.string().optional(),
@@ -18,7 +86,7 @@ const getDevArgsSchema = defineSchema((v) => v.object({
     debug: v.boolean().default(false),
 }));
 const DevArgsSchema = lazySchema(getDevArgsSchema);
-export const parseDevArgs = createArgParser(DevArgsSchema, {
+const parseDevArgsBase = createArgParser(DevArgsSchema, {
     port: { keys: ["port", "p"], type: "number" },
     project: { keys: ["project"], type: "string" },
     hmr: { keys: ["hmr"], type: "boolean" },
@@ -26,6 +94,24 @@ export const parseDevArgs = createArgParser(DevArgsSchema, {
     open: { keys: ["open"], type: "boolean" },
     debug: { keys: ["debug", "d"], type: "boolean" },
 });
+/**
+ * Parses dev command arguments, honouring `PORT` / `VERYFRONT_PORT` as
+ * lower-precedence defaults when no explicit `--port` / `-p` is given.
+ */
+export const parseDevArgs = (args) => {
+    const result = parseDevArgsBase(args);
+    if (!result.success)
+        return result;
+    return {
+        success: true,
+        data: {
+            ...result.data,
+            port: args.port === undefined && args.p === undefined
+                ? getDefaultDevPort()
+                : result.data.port,
+        },
+    };
+};
 async function resolveProjectDir(projectArg) {
     if (projectArg) {
         const projectDir = isAbsolute(projectArg) ? projectArg : join(cwd(), projectArg);
@@ -45,6 +131,26 @@ async function resolveProjectDir(projectArg) {
 export async function handleDevCommand(args) {
     const opts = parseArgsOrThrow(parseDevArgs, "dev", args);
     showHeader();
+    // Warn when `PORT` is set but `--port` overrides it. The developer set an
+    // env var that the server is not going to use, and silent divergence is the
+    // original defect this fixes. Only `PORT` is surfaced here (not
+    // `VERYFRONT_PORT`) because `PORT` is the near-universal convention that
+    // developers arriving from Next.js, Vite, Heroku, and Railway expect to work.
+    //
+    // `portExplicit` is also used to carry provenance into devCommand so that
+    // `PORT=3000` is honoured even when 3000 equals the hardcoded default — the
+    // sentinel `port !== 3000` check in devCommand must not swallow an explicit
+    // env var that happens to equal the default value.
+    const portExplicit = args.port !== undefined ||
+        args.p !== undefined ||
+        isValidPortEnv("PORT") ||
+        isValidPortEnv("VERYFRONT_PORT");
+    if (args.port !== undefined || args.p !== undefined) {
+        const portFromEnv = parsePortEnv("PORT");
+        if (portFromEnv !== undefined && opts.port !== portFromEnv) {
+            logWarning(`PORT=${portFromEnv} is set but --port ${opts.port} takes precedence`);
+        }
+    }
     await ensureCliBundlerContracts();
     const projectDir = await resolveProjectDir(opts.project);
     // Enable verbose logging when --debug flag is passed
@@ -56,6 +162,7 @@ export async function handleDevCommand(args) {
     const { devCommand } = await import("./index.js");
     const { done } = await devCommand({
         port: opts.port,
+        portExplicit,
         projectDir,
         hmr: opts.hmr && !opts.noHmr,
         open: opts.open,

package/esm/cli/commands/dev/inference-status.d.ts

@@ -0,0 +1,12 @@
+export interface InferenceEnvironment {
+    apiToken?: string;
+    projectSlug?: string;
+    openaiApiKey?: string;
+    openaiBaseUrl?: string;
+    anthropicApiKey?: string;
+    googleApiKey?: string;
+    mistralApiKey?: string;
+}
+/** Return the inference paths the current dev process can use without exposing credentials. */
+export declare function listInferenceOptions(environment: InferenceEnvironment): string[];
+//# sourceMappingURL=inference-status.d.ts.map

package/esm/cli/commands/dev/inference-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-status.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/inference-status.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,oBAAoB,GAAG,MAAM,EAAE,CAgBhF"}

package/esm/cli/commands/dev/inference-status.js

@@ -0,0 +1,20 @@
+function isSet(value) {
+    return Boolean(value?.trim());
+}
+/** Return the inference paths the current dev process can use without exposing credentials. */
+export function listInferenceOptions(environment) {
+    const options = [];
+    if (isSet(environment.apiToken) && isSet(environment.projectSlug)) {
+        options.push("Veryfront Cloud AI Gateway");
+    }
+    if (isSet(environment.openaiApiKey)) {
+        options.push(isSet(environment.openaiBaseUrl) ? "OpenAI-compatible service" : "OpenAI direct");
+    }
+    if (isSet(environment.anthropicApiKey))
+        options.push("Anthropic direct");
+    if (isSet(environment.googleApiKey))
+        options.push("Google direct");
+    if (isSet(environment.mistralApiKey))
+        options.push("Mistral direct");
+    return options;
+}

package/esm/cli/commands/login/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/login/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,SAAS,EAAE,WAmCvB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/login/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,SAAS,EAAE,WAoCvB,CAAC"}

package/esm/cli/commands/login/command-help.js

@@ -32,5 +32,6 @@ export const loginHelp = {
         "Without options, prompts for authentication method",
         "OAuth methods open browser for authentication",
         "Token is stored in ~/.config/veryfront/token",
+        "Exits 1 when no credential was obtained, so scripts can gate on it",
     ],
 };

package/esm/cli/commands/mcp/command-help.js

@@ -17,7 +17,7 @@ export const mcpHelp = {
         "The CLI MCP server is development-only. Production start does not expose vf_* tools.",
         "",
         "Claude Code setup (~/.claude.json):",
-        `  "mcpServers": { "veryfront": { "url": "http://veryfront.me:${DEFAULT_DEV_MCP_PORT}/mcp" } }`,
+        `  "mcpServers": { "veryfront": { "url": "http://localhost:${DEFAULT_DEV_MCP_PORT}/mcp" } }`,
         "",
         "Available tools:",
         "  • vf_list_local_projects  - Discover projects on filesystem",

package/esm/cli/commands/whoami/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/whoami/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAWxB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/whoami/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAYxB,CAAC"}

package/esm/cli/commands/whoami/command-help.js

@@ -8,5 +8,6 @@ export const whoamiHelp = {
     notes: [
         "Shows the authenticated user or API-key credential type",
         "Checks both environment variable and stored token",
+        "Exits 0 when a credential validates and 1 when none does, so scripts can gate on it",
     ],
 };

package/esm/cli/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgDH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,gBAAgB,CAA8B;gBAE1C,MAAM,GAAE,eAAoB;IAWxC,KAAK,IAAI,IAAI;IAiBP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,OAAO,CAAC,SAAS;IAyHjB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,mBAAmB;IAuD3B,OAAO,CAAC,mBAAmB;IAiJ3B,OAAO,CAAC,iBAAiB;IAiCzB,OAAO,CAAC,gBAAgB;CAwCzB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,CAIrE;AAED,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/cli/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiDH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,gBAAgB,CAA8B;gBAE1C,MAAM,GAAE,eAAoB;IAWxC,KAAK,IAAI,IAAI;IAiBP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,OAAO,CAAC,SAAS;IAyHjB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,mBAAmB;IAuD3B,OAAO,CAAC,mBAAmB;IAiJ3B,OAAO,CAAC,iBAAiB;IAiCzB,OAAO,CAAC,gBAAgB;CAwCzB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,CAIrE;AAED,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC"}

package/esm/cli/mcp/server.js

@@ -16,11 +16,12 @@ import { zodToJsonSchema } from "../../src/tool/schema/index.js";
 import { allTools, getTool, setServerStartTime } from "./tools.js";
 import { startStdioJsonRpc } from "./stdio.js";
 import { buildInitializeResult, errorResponse, internalError, invalidRequestError, JsonRpcError, JSONRPCRequestSchema, parseError, PromptsGetParamsSchema, ResourcesReadParamsSchema, successResponse, ToolsCallParamsSchema, } from "./jsonrpc.js";
+// Exact loopback origins only. `localhost` is the hostname the CLI prints.
+// Project subdomains were never admitted here and still are not.
 const ALLOWED_HTTP_ORIGIN_HOSTS = new Set([
     "localhost",
     "127.0.0.1",
     "[::1]",
-    "veryfront.me",
 ]);
 function isAllowedHttpOrigin(origin) {
     if (!origin)

package/esm/cli/mcp/tools/deploy-tool.d.ts

@@ -4,7 +4,8 @@
  * Creates a release from a branch and deploys it to an environment through
  * Deploy Execution (`DeployProject.execute`), the same module behind the
  * `vf deploy` CLI command. Success means the deployment is verified and the
- * environment URL is reachable.
+ * environment URL resolves. Read `urlVerification` to tell whether the app
+ * itself answered (`served`) or only its access gate did (`gated`).
  */
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import type { MCPTool } from "../../../src/mcp/index.js";

package/esm/cli/mcp/tools/deploy-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy-tool.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/tools/deploy-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAGzD,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,QAAA,MAAM,qBAAqB;;;;GAY1B,CAAC;AAGF,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,CAAC;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG,YAAY,CAAC,GAClC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA+C9B;AAED,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,CAoB5E,CAAC"}
+{"version":3,"file":"deploy-tool.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/tools/deploy-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAGzD,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,2CAA2C,CAAC;AACpG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,QAAA,MAAM,qBAAqB;;;;GAY1B,CAAC;AAGF,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,CAAC;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG,YAAY,CAAC,GAClC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,kBAAkB,EACzB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA+C9B;AAED,eAAO,MAAM,eAAe,EAAE,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,CAuB5E,CAAC"}

package/esm/cli/mcp/tools/deploy-tool.js

@@ -4,7 +4,8 @@
  * Creates a release from a branch and deploys it to an environment through
  * Deploy Execution (`DeployProject.execute`), the same module behind the
  * `vf deploy` CLI command. Success means the deployment is verified and the
- * environment URL is reachable.
+ * environment URL resolves. Read `urlVerification` to tell whether the app
+ * itself answered (`served`) or only its access gate did (`gated`).
  */
 import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import { getEnvironmentConfig } from "../../../src/config/index.js";
@@ -76,7 +77,10 @@ export const vfTriggerDeploy = {
         "Requires a successful vf push from the current project, then creates and verifies a release " +
         "from the specified branch, deploys it to the target environment, waits for release assets " +
         "and environment readiness, and returns the deployment evidence including the live URL. " +
-        "Success means the environment is verified and reachable. " +
+        "Success means the deployment is verified and the environment URL resolves. " +
+        "Check the returned urlVerification field to tell what the readiness probe established: " +
+        "'served' means the app itself answered, 'gated' means only its access gate answered so the " +
+        "app was never observed, and 'unprobed' means the project has no static page route to check. " +
         "Requires a valid API token (set VERYFRONT_API_TOKEN or run 'veryfront login'). " +
         "Do not use for local builds; use vf_build instead. " +
         "Do not use for running tests before deploy; use vf_run_tests instead.",

package/esm/cli/mcp/tools/dev-tools.js

@@ -63,7 +63,7 @@ export const vfGetDebugContext = {
     description: "Use this when you need the dev server's debug context including project slug, environment, request context mode, and multi-project configuration. Returns project info and server mode. Do not use for error details — use vf_get_errors instead.",
     inputSchema: getDebugContextInput,
     execute: (input) => withSpan("cli.mcp.tool.vf_get_debug_context", async () => {
-        const host = input.project ? `${input.project}.veryfront.me` : "veryfront.me";
+        const host = input.project ? `${input.project}.localhost` : "localhost";
         const url = `http://${host}:${input.port}/_vf_debug/context`;
         try {
             const response = await fetch(url);

package/esm/cli/mcp/tools.js

@@ -113,7 +113,7 @@ export function createVfGetStatus(env = getEnvironmentConfig()) {
             const port = env.port ?? DEFAULT_MCP_PORT;
             return {
                 running: true,
-                url: `http://veryfront.me:${port}`,
+                url: `http://localhost:${port}`,
                 port,
                 errorCount: counts.compile + counts.runtime + counts.bundle,
                 warningCount: logs.query({ level: "warn" }).length,

package/esm/cli/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAsHpD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyIlE"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/cli/router.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAyHpD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAyIlE"}