veryfront 0.1.1237 → 0.1.1239

package/esm/src/server/handlers/dev/projects/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/projects/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAEf,aAAa,EACd,MAAM,gBAAgB,CAAC;AAUxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAajF,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;gBAE5B,QAAQ,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC;IAKnD,QAAQ,EAAE,eAAe,CAevB;cAEiB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO;IAOrE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAmDxE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/projects/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAEf,aAAa,EACd,MAAM,gBAAgB,CAAC;AAUxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAcjF,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;gBAE5B,QAAQ,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC;IAKnD,QAAQ,EAAE,eAAe,CAevB;cAEiB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO;IAQrE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAmDxE"}

package/esm/src/server/handlers/dev/projects/index.js

@@ -10,6 +10,7 @@ import { handleProjectsAPI } from "./api.js";
 import { handleProjectsUI } from "./ui-handler.js";
 import { createDevNotFoundResponse } from "../shared/not-found-response.js";
 import { createDevUiAssetsUnavailableResponse, omitHeadResponseBody, } from "../shared/dev-ui-bundle-response.js";
+import { isTrustedLocalControlRequest } from "../../../../security/http/local-control-request.js";
 const PROJECTS_ALLOWED_METHODS = "GET, HEAD";
 function cancelRejectedRequestBody(req) {
     try {
@@ -44,6 +45,8 @@ export class ProjectsHandler extends BaseHandler {
     shouldHandle(req, ctx) {
         if (!this.metadata.enabled?.(ctx))
             return false;
+        if (!isTrustedLocalControlRequest(req))
+            return false;
         const { pathname } = new URL(req.url);
         return pathname === "/" || pathname.startsWith("/_projects");
     }

package/esm/src/server/handlers/request/agent-stream.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-stream.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/agent-stream.handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAGpF,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,wCAAwC,CAAC;AAchD,OAAO,EACL,4BAA4B,EAE7B,MAAM,2CAA2C,CAAC;AAkBnD,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAG/B,MAAM,oCAAoC,CAAC;AAQ5C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAuBnG,MAAM,WAAW,sBACf,SAAQ,yBAAyB,EAAE,+BAA+B;IAClE,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACnE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACnF,0BAA0B,CAAC,EAAE,4BAA4B,CAAC;CAC3D;AAED,KAAK,yBAAyB,GAAG,IAAI,CACnC,0BAA0B,EAC1B,mBAAmB,GAAG,4BAA4B,GAAG,uBAAuB,CAC7E,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,CACzC,GAAG,EAAE,cAAc,EACnB,aAAa,EAAE,yBAAyB,EACxC,cAAc,EAAE,yBAAyB,EACzC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAomBrC,qBAAa,kBAAmB,SAAQ,WAAW;IASrC,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,QAAQ,EAAE,eAAe,CAMvB;gBAE2B,IAAI,GAAE,sBAAoC;IAIvE,OAAO,CAAC,sBAAsB;IAsBxB,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA0QxE"}
+{"version":3,"file":"agent-stream.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/agent-stream.handler.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAGpF,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,wCAAwC,CAAC;AAchD,OAAO,EACL,4BAA4B,EAE7B,MAAM,2CAA2C,CAAC;AAkBnD,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAG/B,MAAM,oCAAoC,CAAC;AAQ5C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AAwBnG,MAAM,WAAW,sBACf,SAAQ,yBAAyB,EAAE,+BAA+B;IAClE,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACnE,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACnF,0BAA0B,CAAC,EAAE,4BAA4B,CAAC;CAC3D;AAED,KAAK,yBAAyB,GAAG,IAAI,CACnC,0BAA0B,EAC1B,mBAAmB,GAAG,4BAA4B,GAAG,uBAAuB,CAC7E,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,CACzC,GAAG,EAAE,cAAc,EACnB,aAAa,EAAE,yBAAyB,EACxC,cAAc,EAAE,yBAAyB,EACzC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAumBrC,qBAAa,kBAAmB,SAAQ,WAAW;IASrC,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,QAAQ,EAAE,eAAe,CAMvB;gBAE2B,IAAI,GAAE,sBAAoC;IAIvE,OAAO,CAAC,sBAAsB;IAsBxB,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CA+QxE"}

package/esm/src/server/handlers/request/agent-stream.handler.js

@@ -22,7 +22,7 @@ import { isServerShuttingDown } from "../../shutdown-state.js";
 import { getHostEnv } from "../../../platform/compat/process.js";
 import { resolveVeryfrontApiBaseUrlFromHostEnv } from "../../../platform/cloud/resolver.js";
 import { serverLogger } from "../../../utils/index.js";
-import { EnvironmentVariableCache, fetchProjectEnvVars, filterRuntimeProjectEnv, ProjectEnvironmentIdentityResolver, runWithProjectEnv, } from "../../project-env/index.js";
+import { EnvironmentVariableCache, fetchProjectEnvVars, filterRuntimeProjectEnv, ProjectEnvironmentIdentityResolver, runWithProjectEnv, unwrapReplayedProjectEnvironmentFailure, } from "../../project-env/index.js";
 import { getHostedConfig } from "../../../config/loader.js";
 import { prepareDeclarativeConfigContext } from "../../../config/declarative-evaluator.js";
 import { normalizeSourceIntegrationPolicy } from "../../../integrations/source-policy.js";
@@ -55,7 +55,7 @@ const STUDIO_RUNTIME_REMOTE_TOOL_NAMES = new Set([
 // Per-environment env var cache shared across all agent stream requests (60s TTL)
 const _agentEnvVarCache = new EnvironmentVariableCache(({ environmentId, token, projectSlug }, signal) => {
     return fetchProjectEnvVars(resolveVeryfrontApiBaseUrlFromHostEnv(), projectSlug, environmentId, token, signal);
-});
+}, 60_000, 100, { markFailureReplays: true });
 const _environmentIdentityResolver = new ProjectEnvironmentIdentityResolver();
 function mergeAllowedRemoteTools(current, requestedToolNames) {
     const allowed = new Set(Array.isArray(current) && current.every((toolName) => typeof toolName === "string")
@@ -627,7 +627,10 @@ export class AgentStreamHandler extends BaseHandler {
             });
             return await runWithVerifiedCacheApiCredential(verifiedClaims, runWithAgentSourceContext);
         }
-        catch (error) {
+        catch (caught) {
+            // The first negative-cache failure owns diagnostics. Replays retain the
+            // original error for response construction but must not repeat reports.
+            const { error, replayed } = unwrapReplayedProjectEnvironmentFailure(caught);
             if (error instanceof InternalAgentRequestBodyTooLargeError) {
                 return this.respond(builder.json({ error: error.message }, error.status));
             }
@@ -647,7 +650,7 @@ export class AgentStreamHandler extends BaseHandler {
                 const response = errorToResponse(error, new URL(req.url).pathname);
                 // errorToResponse strips `detail` from 5xx bodies, so the log and the
                 // reported event are the only places it survives.
-                if (response.status >= 500) {
+                if (response.status >= 500 && !replayed) {
                     const cause = describeErrorCause(error.cause);
                     logger.error("Internal agent stream request failed", {
                         projectId: ctx.projectId,
@@ -674,26 +677,28 @@ export class AgentStreamHandler extends BaseHandler {
                 }
                 return this.respond(applyBuilderHeaders(response, builder.headers));
             }
-            this.logWarn("Internal agent stream request failed", {
-                error: error instanceof Error ? error.message : String(error),
-                projectId: ctx.projectId,
-                projectSlug: ctx.projectSlug,
-            });
-            logger.error("Internal agent stream handler failed", {
-                projectId: ctx.projectId,
-                projectSlug: ctx.projectSlug,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            // Unexpected failures have no slug or detail, so the captured stack is
-            // the only real diagnostic.
-            reportHandlerFailure(error, {
-                boundary: "agent.stream.handler",
-                method: req.method,
-                status: HTTP_INTERNAL_SERVER_ERROR,
-                runId: safeRunId(req),
-                projectId: ctx.projectId,
-                projectSlug: ctx.projectSlug,
-            });
+            if (!replayed) {
+                this.logWarn("Internal agent stream request failed", {
+                    error: error instanceof Error ? error.message : String(error),
+                    projectId: ctx.projectId,
+                    projectSlug: ctx.projectSlug,
+                });
+                logger.error("Internal agent stream handler failed", {
+                    projectId: ctx.projectId,
+                    projectSlug: ctx.projectSlug,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                // Unexpected failures have no slug or detail, so the captured stack is
+                // the only real diagnostic.
+                reportHandlerFailure(error, {
+                    boundary: "agent.stream.handler",
+                    method: req.method,
+                    status: HTTP_INTERNAL_SERVER_ERROR,
+                    runId: safeRunId(req),
+                    projectId: ctx.projectId,
+                    projectSlug: ctx.projectSlug,
+                });
+            }
             return this.respond(builder.json({ error: "Internal agent stream failed" }, 500));
         }
     }

package/esm/src/server/index.d.ts

@@ -21,9 +21,9 @@
  * @see docs/security.md
  */
 import "../../_dnt.polyfills.js";
-import { DevServer, type DevServerOptions, type FileWatcherMetrics, type RouteDirectory, startDevServer } from "./dev-server.js";
+import { DevServer, type DevServerHandler, type DevServerOptions, type FileWatcherMetrics, type RouteDirectory, startDevServer } from "./dev-server.js";
 import { type DiscoveryOptions, type ServerHandle, startProductionServer, type StartProductionServerOptions } from "./production-server.js";
-export { DevServer, startDevServer, startProductionServer };
+export { DevServer, type DevServerHandler, startDevServer, startProductionServer };
 export { gracefullyShutdownProductionServer, type GracefulProductionShutdownOptions, } from "./graceful-shutdown.js";
 export { createVeryfrontServer, type CreateVeryfrontServerOptions, type NodeVeryfrontServiceServer, startNodeVeryfrontServer, type StartNodeVeryfrontServerOptions, startVeryfrontServer, type StartVeryfrontServerOptions, type VeryfrontServiceServer, type VeryfrontServiceServerFetch, type VeryfrontServiceServerLogger, type VeryfrontServiceServerModule, type VeryfrontServiceServerModuleResponse, type VeryfrontServiceServerRuntime, type VeryfrontServiceServerRuntimeKind, } from "./service-server.js";
 export type { DevServerOptions, DiscoveryOptions, FileWatcherMetrics, RouteDirectory, ServerHandle, StartProductionServerOptions, };
@@ -88,7 +88,7 @@ export interface VeryfrontServer {
     url: string;
 }
 /** Web API request handler with WebSocket upgrade and HMR helpers. */
-export type VeryfrontHandler = ((req: Request) => Promise<Response>) & {
+export type VeryfrontHandler = ((req: Request, nativeContext?: unknown) => Promise<Response>) & {
     /**
      * Attach WebSocket upgrade handling to a Node.js HTTP server.
      * Required for HMR live reload when using an external server like Hono, Express, etc.

package/esm/src/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,yBAAyB,CAAC;AAKjC,OAAO,EACL,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,qBAAqB,EACrB,KAAK,4BAA4B,EAClC,MAAM,wBAAwB,CAAC;AAqBhC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;AAC5D,OAAO,EACL,kCAAkC,EAClC,KAAK,iCAAiC,GACvC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,oCAAoC,EACzC,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,GACvC,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,4BAA4B,GAC7B,CAAC;AACF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,qCAAqC,CAAC;AAC1F,OAAO,EACL,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAElC,uEAAuE;AACvE,UAAU,iBAAiB;IACzB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,0CAA0C;AAC1C,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,iDAAiD;AACjD,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB;IACnE,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C,oFAAoF;IACpF,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,0BAA0B,CAAC;AAElF,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,kCAAkC;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IACrE;;;OAGG;IACH,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC;;;;OAIG;IACH,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,IAAI,CAAC;IACpC,yEAAyE;IACzE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAiEF,wEAAwE;AACxE,wBAAsB,aAAa,CACjC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACxF,OAAO,CAAC,gBAAgB,CAAC,CAuQ3B;AAED;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAkD1B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,yBAAyB,CAAC;AAKjC,OAAO,EACL,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,cAAc,EACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,qBAAqB,EACrB,KAAK,4BAA4B,EAClC,MAAM,wBAAwB,CAAC;AAsBhC,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,cAAc,EAAE,qBAAqB,EAAE,CAAC;AACnF,OAAO,EACL,kCAAkC,EAClC,KAAK,iCAAiC,GACvC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,oCAAoC,EACzC,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,GACvC,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,4BAA4B,GAC7B,CAAC;AACF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,qCAAqC,CAAC;AAC1F,OAAO,EACL,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAElC,uEAAuE;AACvE,UAAU,iBAAiB;IACzB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,0CAA0C;AAC1C,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,iDAAiD;AACjD,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB;IACnE,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C,oFAAoF;IACpF,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,0BAA0B,CAAC;AAElF,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,kCAAkC;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sEAAsE;AACtE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAC9F;;;OAGG;IACH,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC;;;;OAIG;IACH,UAAU,EAAE,CAAC,EAAE,EAAE,SAAS,KAAK,IAAI,CAAC;IACpC,yEAAyE;IACzE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC;AAkEF,wEAAwE;AACxE,wBAAsB,aAAa,CACjC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACxF,OAAO,CAAC,gBAAgB,CAAC,CA0Q3B;AAED;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAkD1B"}

package/esm/src/server/index.js

@@ -26,6 +26,7 @@ import { DevServer, startDevServer, } from "./dev-server.js";
 import { startProductionServer, } from "./production-server.js";
 import { runtime } from "../platform/adapters/detect.js";
 import { isWebSocketUpgradeResponse } from "../platform/adapters/base.js";
+import { recordHandlerRequestPeer } from "../platform/adapters/runtime/shared/request-peer.js";
 import { cwd } from "../platform/compat/process.js";
 import { bootstrapProd } from "./bootstrap.js";
 import { createVeryfrontHandler } from "./runtime-handler/index.js";
@@ -54,11 +55,12 @@ export { HOSTED_ENVIRONMENT_NAMES, isHostedEnvironmentName, parseProjectDomain,
  * ```ts
  * import { Hono } from "hono"
  * import { serve } from "@hono/node-server"
+ * import type { HttpBindings } from "@hono/node-server"
  * import { createHandler } from "veryfront"
  *
- * const app = new Hono()
+ * const app = new Hono<{ Bindings: HttpBindings }>()
  * const handler = await createHandler()
- * app.all("*", (c) => handler(c.req.raw))
+ * app.all("*", (c) => handler(c.req.raw, c.env.incoming))
  * const server = serve({ fetch: app.fetch, port: 3000 })
  * handler.upgrade(server)
  * ```
@@ -111,7 +113,10 @@ export async function createHandler(options = {}) {
         const adapter = await runtime.get();
         const bootstrap = await bootstrapProd(projectDir, adapter);
         const internalHandler = createVeryfrontHandler(projectDir, bootstrap.adapter, { projectDir });
-        const handler = async (req) => toNativeResponse(await internalHandler(req));
+        const handler = async (req, info) => {
+            recordHandlerRequestPeer(req, info);
+            return toNativeResponse(await internalHandler(req));
+        };
         const dispose = createRetryableHandlerDisposer(async () => {
             await bootstrap.dispose?.();
         });
@@ -136,14 +141,14 @@ export async function createHandler(options = {}) {
     const internalFetch = devServer.handler;
     const nodeWebSocketServerProvider = devServer.nodeWebSocketServerProvider;
     let disposalStarted = false;
-    const fetch = async (req) => {
+    const fetch = async (req, info) => {
         if (disposalStarted) {
             return new _NativeResponse("Handler is shutting down", {
                 status: 503,
                 headers: { "cache-control": "no-store" },
             });
         }
-        return toNativeResponse(await internalFetch(req));
+        return toNativeResponse(await internalFetch(req, info));
     };
     const hmrRateLimiter = new RateLimiter(HMR_MAX_MESSAGES_PER_MINUTE);
     const nodeUpgradeLifecycle = new NodeUpgradeLifecycle();

package/esm/src/server/node-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-handler.d.ts","sourceRoot":"","sources":["../../../src/src/server/node-handler.ts"],"names":[],"mappings":"AAEA,sEAAsE;AACtE,wBAAgB,aAAa,CAC3B,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GACtD,CAAC,GAAG,EAAE,OAAO,WAAW,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,WAAW,EAAE,cAAc,KAAK,IAAI,CAyE7F"}
+{"version":3,"file":"node-handler.d.ts","sourceRoot":"","sources":["../../../src/src/server/node-handler.ts"],"names":[],"mappings":"AAGA,sEAAsE;AACtE,wBAAgB,aAAa,CAC3B,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,GACtD,CAAC,GAAG,EAAE,OAAO,WAAW,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,WAAW,EAAE,cAAc,KAAK,IAAI,CA4E7F"}

package/esm/src/server/node-handler.js

@@ -1,4 +1,5 @@
 import { serverLogger } from "../utils/index.js";
+import { recordNodeIncomingRequestPeer } from "../platform/adapters/runtime/shared/request-peer.js";
 /** Convert a Web API request handler into a Node.js HTTP listener. */
 export function toNodeHandler(handler) {
     return async (req, res) => {
@@ -22,7 +23,9 @@ export function toNodeHandler(handler) {
             };
             if (body)
                 init.duplex = "half";
-            const response = await handler(new Request(url.toString(), init));
+            const request = new Request(url.toString(), init);
+            recordNodeIncomingRequestPeer(request, req);
+            const response = await handler(request);
             if (response.status === 101)
                 return;
             const outHeaders = {};

package/esm/src/server/production-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"production-server.d.ts","sourceRoot":"","sources":["../../../src/src/server/production-server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA4BrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAoFtE,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,oFAAoF;IACpF,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,sFAAsF;IACtF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,4BAA6B,SAAQ,aAAa;IACjE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;;;;;;;;OASG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,gCAAgC;AAChC,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,YAAY,CAAC,CA6LvB"}
+{"version":3,"file":"production-server.d.ts","sourceRoot":"","sources":["../../../src/src/server/production-server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA4BrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAqFtE,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,aAAa;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,oFAAoF;IACpF,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC,sFAAsF;IACtF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,4BAA6B,SAAQ,aAAa;IACjE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;;;;;;;;OASG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,gCAAgC;AAChC,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,YAAY,CAAC,CA6LvB"}

package/esm/src/server/production-server.js

@@ -21,6 +21,7 @@ import { HOST_PROJECT_EXECUTION_OVERRIDE_ENV, isHostProjectExecutionOverrideEnab
 import { isSharedProjectRuntime } from "../security/project-locality.js";
 import { getIsolationPosture } from "../security/sandbox/worker-pool.js";
 import { runStartupDiscovery } from "./startup-discovery.js";
+import { runRequestInterceptor } from "../platform/adapters/runtime/shared/request-peer.js";
 const serverLog = logger.component("server");
 const globalLog = logger.component("global");
 /** Default port when PORT / VERYFRONT_PORT env vars are not set */
@@ -187,7 +188,7 @@ export function startProductionServer(options) {
                     const isWebSocketUpgrade = req.headers.get("upgrade")?.toLowerCase() === "websocket";
                     if (isWebSocketUpgrade)
                         return coreHandler(req);
-                    return coreHandler(await requestInterceptor(req));
+                    return coreHandler(await runRequestInterceptor(req, requestInterceptor));
                 }, { ready: coreHandler.ready })
                 : coreHandler;
             let resolveListenReady;

package/esm/src/server/project-env/cache.d.ts

@@ -6,6 +6,10 @@ export interface ProjectEnvironmentScope {
     environmentId: string;
     token: string;
 }
+export declare function unwrapReplayedProjectEnvironmentFailure(error: unknown): {
+    error: unknown;
+    replayed: boolean;
+};
 type Fetcher = (scope: ProjectEnvironmentScope, signal: AbortSignal) => Promise<Record<string, string>>;
 export interface EnvironmentVariableCacheOptions {
     /** Maximum time allowed for one cache-owned upstream fetch. */
@@ -14,9 +18,18 @@ export interface EnvironmentVariableCacheOptions {
     maxInflight?: number;
     /** Maximum number of distinct upstream fetches for one canonical project. */
     maxInflightPerProject?: number;
+    /**
+     * How long a failed fetch is rethrown before the upstream is retried.
+     * Collapses per-request refetch storms during a persistent upstream refusal
+     * without ever serving stale or empty data. Zero disables negative caching.
+     */
+    failureTtlMs?: number;
+    /** Mark replayed failures so an error boundary can suppress duplicate reporting. */
+    markFailureReplays?: boolean;
 }
 export declare class EnvironmentVariableCache {
     private cache;
+    private failures;
     private inflight;
     private inflightByProject;
     private fetcher;
@@ -25,6 +38,8 @@ export declare class EnvironmentVariableCache {
     private fetchTimeoutMs;
     private maxInflight;
     private maxInflightPerProject;
+    private failureTtlMs;
+    private markFailureReplays;
     private globalEpoch;
     private environmentEpochs;
     constructor(fetcher: Fetcher, ttlMs?: number, maxEntries?: number, options?: EnvironmentVariableCacheOptions);
@@ -37,6 +52,8 @@ export declare class EnvironmentVariableCache {
     private addInflight;
     private removeInflight;
     private invalidateInflight;
+    /** Evict oldest recorded failures when they exceed maxEntries. */
+    private evictFailuresIfNeeded;
     /** Evict oldest entries when cache exceeds maxEntries. */
     private evictIfNeeded;
 }

package/esm/src/server/project-env/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/cache.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,uBAAuB;IACtC,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAQD,KAAK,OAAO,GAAG,CACb,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAErC,MAAM,WAAW,+BAA+B;IAC9C,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAqGD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,iBAAiB,CAA6B;gBAGpD,OAAO,EAAE,OAAO,EAChB,KAAK,SAAS,EACd,UAAU,SAAsB,EAChC,OAAO,GAAE,+BAAoC;IAmBzC,GAAG,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA4C1E,UAAU,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;YAyB1B,KAAK;IAwDnB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,kBAAkB;IAK1B,0DAA0D;IAC1D,OAAO,CAAC,aAAa;CAUtB"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/cache.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,uBAAuB;IACtC,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAwBD,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,OAAO,GACb;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAWvC;AAED,KAAK,OAAO,GAAG,CACb,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAErC,MAAM,WAAW,+BAA+B;IAC9C,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAsGD,qBAAa,wBAAwB;IACnC,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,QAAQ,CAAmC;IACnD,OAAO,CAAC,QAAQ,CAAoC;IACpD,OAAO,CAAC,iBAAiB,CAA6B;IACtD,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,kBAAkB,CAAU;IACpC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,iBAAiB,CAA6B;gBAGpD,OAAO,EAAE,OAAO,EAChB,KAAK,SAAS,EACd,UAAU,SAAsB,EAChC,OAAO,GAAE,+BAAoC;IAwBzC,GAAG,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA+D1E,UAAU,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;YA8B1B,KAAK;IAyEnB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,kBAAkB;IAK1B,kEAAkE;IAClE,OAAO,CAAC,qBAAqB;IAW7B,0DAA0D;IAC1D,OAAO,CAAC,aAAa;CAUtB"}

package/esm/src/server/project-env/cache.js

@@ -11,9 +11,28 @@ import * as dntShim from "../../../_dnt.shims.js";
 import { createProjectEnvSnapshot } from "./snapshot.js";
 import { isErrorAcrossRealms } from "../../platform/compat/error-introspection.js";
 import { CACHE_ERROR, SERVICE_OVERLOADED, TIMEOUT_ERROR, } from "../../errors/index.js";
+const replayedProjectEnvironmentFailures = new WeakMap();
+class ReplayedProjectEnvironmentFailure extends Error {
+    constructor(error) {
+        super("Project environment request reused a cached failure");
+        this.name = "ReplayedProjectEnvironmentFailure";
+        replayedProjectEnvironmentFailures.set(this, error);
+    }
+}
+export function unwrapReplayedProjectEnvironmentFailure(error) {
+    if (typeof error === "object" && error !== null &&
+        replayedProjectEnvironmentFailures.has(error)) {
+        return {
+            error: replayedProjectEnvironmentFailures.get(error),
+            replayed: true,
+        };
+    }
+    return { error, replayed: false };
+}
 /** Max number of scoped environments to cache. Evicts oldest entry when exceeded. */
 const DEFAULT_MAX_ENTRIES = 100;
 const DEFAULT_FETCH_TIMEOUT_MS = 10_000;
+const DEFAULT_FAILURE_TTL_MS = 5_000;
 const DEFAULT_MAX_INFLIGHT = 100;
 const DEFAULT_MAX_INFLIGHT_PER_PROJECT = 10;
 const encodeText = TextEncoder.prototype.encode;
@@ -86,6 +105,7 @@ function invalidatedError() {
 }
 export class EnvironmentVariableCache {
     cache = new Map();
+    failures = new Map();
     inflight = new Map();
     inflightByProject = new Map();
     fetcher;
@@ -94,6 +114,8 @@ export class EnvironmentVariableCache {
     fetchTimeoutMs;
     maxInflight;
     maxInflightPerProject;
+    failureTtlMs;
+    markFailureReplays;
     globalEpoch = 0;
     environmentEpochs = new Map();
     constructor(fetcher, ttlMs = 60_000, maxEntries = DEFAULT_MAX_ENTRIES, options = {}) {
@@ -103,6 +125,8 @@ export class EnvironmentVariableCache {
         this.fetchTimeoutMs = positiveInteger(options.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS, "fetchTimeoutMs");
         this.maxInflight = positiveInteger(options.maxInflight ?? DEFAULT_MAX_INFLIGHT, "maxInflight");
         this.maxInflightPerProject = positiveInteger(options.maxInflightPerProject ?? DEFAULT_MAX_INFLIGHT_PER_PROJECT, "maxInflightPerProject");
+        this.failureTtlMs = nonNegativeInteger(options.failureTtlMs ?? DEFAULT_FAILURE_TTL_MS, "failureTtlMs");
+        this.markFailureReplays = options.markFailureReplays === true;
     }
     async get(scope) {
         const normalizedScope = normalizeScope(scope);
@@ -121,8 +145,26 @@ export class EnvironmentVariableCache {
         // Deduplicate only requests with exactly the same canonical identity and
         // credential principal. A shared environment ID is never sufficient.
         const existing = this.inflight.get(key);
-        if (existing)
-            return existing.promise;
+        if (existing) {
+            if (!this.markFailureReplays)
+                return existing.promise;
+            return existing.promise.catch((error) => {
+                throw new ReplayedProjectEnvironmentFailure(error);
+            });
+        }
+        // Rethrow a recent upstream failure instead of starting another fetch so a
+        // persistent refusal produces one upstream fetch per TTL window instead of
+        // one per request. Still fails closed: no stale or empty data is served.
+        const failure = this.failures.get(key);
+        if (failure) {
+            if (now - failure.failedAt < this.failureTtlMs) {
+                if (this.markFailureReplays) {
+                    throw new ReplayedProjectEnvironmentFailure(failure.error);
+                }
+                throw failure.error;
+            }
+            this.failures.delete(key);
+        }
         this.assertAdmission(normalizedScope.projectSlug);
         const controller = new AbortController();
         const start = Promise.withResolvers();
@@ -146,6 +188,7 @@ export class EnvironmentVariableCache {
             this.globalEpoch++;
             this.environmentEpochs.clear();
             this.cache.clear();
+            this.failures.clear();
             for (const entry of [...this.inflight.values()]) {
                 this.invalidateInflight(entry);
             }
@@ -156,6 +199,10 @@ export class EnvironmentVariableCache {
             if (entry.environmentId === environmentId)
                 this.cache.delete(key);
         }
+        for (const [key, failure] of this.failures) {
+            if (failure.environmentId === environmentId)
+                this.failures.delete(key);
+        }
         for (const entry of [...this.inflight.values()]) {
             if (entry.environmentId === environmentId)
                 this.invalidateInflight(entry);
@@ -198,6 +245,7 @@ export class EnvironmentVariableCache {
             if (!this.isCurrentEpoch(scope.environmentId, entry.epoch)) {
                 throw invalidatedError();
             }
+            this.failures.delete(entry.key);
             this.cache.delete(entry.key);
             this.cache.set(entry.key, {
                 vars,
@@ -207,6 +255,21 @@ export class EnvironmentVariableCache {
             this.evictIfNeeded();
             return vars;
         }
+        catch (error) {
+            // Record only failures from the current epoch: invalidated work must not
+            // poison the newer epoch with its cancellation error.
+            if (this.failureTtlMs > 0 &&
+                this.isCurrentEpoch(scope.environmentId, entry.epoch)) {
+                this.failures.delete(entry.key);
+                this.failures.set(entry.key, {
+                    error,
+                    failedAt: Date.now(),
+                    environmentId: scope.environmentId,
+                });
+                this.evictFailuresIfNeeded();
+            }
+            throw error;
+        }
         finally {
             clearTimeout(timeoutId);
             removeAbortListener();
@@ -252,6 +315,19 @@ export class EnvironmentVariableCache {
         this.removeInflight(entry);
         entry.controller.abort(invalidatedError());
     }
+    /** Evict oldest recorded failures when they exceed maxEntries. */
+    evictFailuresIfNeeded() {
+        if (this.failures.size <= this.maxEntries)
+            return;
+        const excess = this.failures.size - this.maxEntries;
+        let removed = 0;
+        for (const key of this.failures.keys()) {
+            if (removed >= excess)
+                break;
+            this.failures.delete(key);
+            removed++;
+        }
+    }
     /** Evict oldest entries when cache exceeds maxEntries. */
     evictIfNeeded() {
         if (this.cache.size <= this.maxEntries)

package/esm/src/server/project-env/fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAqBH,2EAA2E;AAC3E,eAAO,MAAM,8BAA8B,QAAkB,CAAC;AAsG9D,iBAAe,yBAAyB,CACtC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC,CA2BnB;AAkBD;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAyEjC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B;;CAE7B,CAAC"}
+{"version":3,"file":"fetcher.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA0BH,2EAA2E;AAC3E,eAAO,MAAM,8BAA8B,QAAkB,CAAC;AAoH9D,iBAAe,yBAAyB,CACtC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC,CA2BnB;AAkBD;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiFjC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B;;CAE7B,CAAC"}

package/esm/src/server/project-env/fetcher.js

@@ -3,12 +3,12 @@
  *
  * @module server/project-env/fetcher
  */
-import { encodeBase64, getBaseLogger } from "../../utils/index.js";
+import { getBaseLogger } from "../../utils/index.js";
 import { readResponseTextPrefix } from "../../utils/response-body.js";
-import { AUTHENTICATION_REQUIRED, isVeryfrontError, NETWORK_ERROR, PERMISSION_DENIED, } from "../../errors/index.js";
-import { getHostEnv } from "../../platform/compat/process.js";
+import { AUTHENTICATION_REQUIRED, CONFIG_INVALID, isVeryfrontError, NETWORK_ERROR, PERMISSION_DENIED, } from "../../errors/index.js";
 import { isErrorAcrossRealms } from "../../platform/compat/error-introspection.js";
 import { createProjectEnvSnapshot } from "./snapshot.js";
+import { getMissingProjectEnvInternalCredentialDetail, getProjectEnvInternalAuthorization, requiresProjectEnvInternalAuthorization, } from "./internal-authorization.js";
 const baseLogger = getBaseLogger("PROJECT-ENV");
 const logger = baseLogger.component("project-env");
 /** Max env vars per request. API enforces a hard cap of 100. */
@@ -47,7 +47,17 @@ async function readBoundedEnvironmentResponse(response, signal) {
     }
     return text;
 }
-function parseEnvironmentResponse(text) {
+function maskedEnvironmentError(source) {
+    if (source === "management") {
+        // The management endpoint masks every value by contract. Reaching a masked
+        // value here means the host has no internal credentials configured, so the
+        // refusal must state the operator-actionable cause.
+        return invalidEnvironmentResponse("Refusing masked environment variable response: the management endpoint masks values by contract " +
+            "and VERYFRONT_API_INTERNAL_USER/VERYFRONT_API_INTERNAL_PASS are not configured on this host");
+    }
+    return invalidEnvironmentResponse("Refusing masked environment variable response: the internal endpoint returned a masked value");
+}
+function parseEnvironmentResponse(text, source) {
     let body;
     try {
         body = JSON.parse(text);
@@ -81,7 +91,7 @@ function parseEnvironmentResponse(text) {
         }
         keys.add(key);
         if (value === MASKED_ENV_VALUE) {
-            throw invalidEnvironmentResponse("Refusing masked environment variable response");
+            throw maskedEnvironmentError(source);
         }
         result[key] = value;
     }
@@ -92,13 +102,6 @@ function parseEnvironmentResponse(text) {
         throw invalidEnvironmentResponse("Project environment response violated runtime limits", cause);
     }
 }
-function getInternalAuthorization() {
-    const username = getHostEnv("VERYFRONT_API_INTERNAL_USER");
-    const password = getHostEnv("VERYFRONT_API_INTERNAL_PASS");
-    if (!username || !password)
-        return undefined;
-    return `Basic ${encodeBase64(`${username}:${password}`)}`;
-}
 async function fetchEnvironmentVariables(url, authorization, projectSlug, environmentId, signal, headers = {}) {
     try {
         const requestHeaders = new Headers(headers);
@@ -171,7 +174,14 @@ export async function fetchProjectEnvVars(apiBaseUrl, projectSlug, environmentId
     }
     // Do not even materialize the host credential until the tenant credential
     // has proved access to this canonical project/environment pair.
-    const internalAuthorization = getInternalAuthorization();
+    const internalAuthorization = getProjectEnvInternalAuthorization();
+    if (!internalAuthorization && requiresProjectEnvInternalAuthorization()) {
+        discardResponseBody(response);
+        throw CONFIG_INVALID.create({
+            detail: getMissingProjectEnvInternalCredentialDetail() ??
+                "Internal project environment authorization is unavailable in hosted proxy mode",
+        });
+    }
     if (internalAuthorization) {
         discardResponseBody(response);
         response = await fetchEnvironmentVariables(internalUrl, internalAuthorization, projectSlug, environmentId, signal, { "x-project-slug": projectSlug });
@@ -186,7 +196,7 @@ export async function fetchProjectEnvVars(apiBaseUrl, projectSlug, environmentId
         throw NETWORK_ERROR.create({ detail: "Internal project environment request failed" });
     }
     try {
-        const result = parseEnvironmentResponse(await readBoundedEnvironmentResponse(response, signal));
+        const result = parseEnvironmentResponse(await readBoundedEnvironmentResponse(response, signal), internalAuthorization ? "internal" : "management");
         logger.debug("Fetched env vars", {
             projectSlug,
             environmentId,

package/esm/src/server/project-env/index.d.ts

@@ -4,7 +4,7 @@
  * @module server/project-env
  */
 export { getProjectEnv, getProjectEnvSnapshot, isProjectEnvActive, runWithProjectEnv, } from "./storage.js";
-export { EnvironmentVariableCache, type EnvironmentVariableCacheOptions, type ProjectEnvironmentScope, } from "./cache.js";
+export { EnvironmentVariableCache, type EnvironmentVariableCacheOptions, type ProjectEnvironmentScope, unwrapReplayedProjectEnvironmentFailure, } from "./cache.js";
 export { filterRuntimeProjectEnv, filterSharedRuntimeProjectEnv } from "./reserved-env.js";
 export { fetchProjectEnvVars } from "./fetcher.js";
 export { type NamedProjectEnvironmentScope, ProductionEnvironmentResolver, type ProductionEnvironmentScope, ProjectEnvironmentIdentityResolver, } from "./production-environment-resolver.js";

package/esm/src/server/project-env/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,GAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,KAAK,4BAA4B,EACjC,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,kCAAkC,GACnC,MAAM,sCAAsC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC5B,uCAAuC,GACxC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,KAAK,4BAA4B,EACjC,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,kCAAkC,GACnC,MAAM,sCAAsC,CAAC"}

package/esm/src/server/project-env/index.js

@@ -4,7 +4,7 @@
  * @module server/project-env
  */
 export { getProjectEnv, getProjectEnvSnapshot, isProjectEnvActive, runWithProjectEnv, } from "./storage.js";
-export { EnvironmentVariableCache, } from "./cache.js";
+export { EnvironmentVariableCache, unwrapReplayedProjectEnvironmentFailure, } from "./cache.js";
 export { filterRuntimeProjectEnv, filterSharedRuntimeProjectEnv } from "./reserved-env.js";
 export { fetchProjectEnvVars } from "./fetcher.js";
 export { ProductionEnvironmentResolver, ProjectEnvironmentIdentityResolver, } from "./production-environment-resolver.js";

package/esm/src/server/project-env/internal-authorization.d.ts

@@ -0,0 +1,7 @@
+/** Whether project env reads require the hosted runtime's internal API credential. */
+export declare function requiresProjectEnvInternalAuthorization(): boolean;
+/** Name the missing hosted runtime credentials without exposing their values. */
+export declare function getMissingProjectEnvInternalCredentialDetail(): string | undefined;
+/** Build the internal API authorization header when both credentials are present. */
+export declare function getProjectEnvInternalAuthorization(): string | undefined;
+//# sourceMappingURL=internal-authorization.d.ts.map

package/esm/src/server/project-env/internal-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-authorization.d.ts","sourceRoot":"","sources":["../../../../src/src/server/project-env/internal-authorization.ts"],"names":[],"mappings":"AAQA,sFAAsF;AACtF,wBAAgB,uCAAuC,IAAI,OAAO,CAKjE;AAED,iFAAiF;AACjF,wBAAgB,4CAA4C,IAAI,MAAM,GAAG,SAAS,CAQjF;AAED,qFAAqF;AACrF,wBAAgB,kCAAkC,IAAI,MAAM,GAAG,SAAS,CAKvE"}