veryfront 0.1.1239 → 0.1.1241

package/esm/src/server/services/static/static-file.service.js

@@ -45,31 +45,54 @@ export class StaticFileService {
     getManifestLoading() {
         return injectedDeps?.manifestLoading ?? StaticFileService.manifestLoading;
     }
-    getFileSystem(options) {
+    resolveBuildOutputRoot(options) {
+        return resolve(options.projectDir, options.buildOutDir || "dist");
+    }
+    getFileSystems(options) {
         if (this.fsRepo)
-            return this.fsRepo;
+            return { buildOutput: this.fsRepo, project: this.fsRepo };
         const projectRoot = resolve(options.projectDir);
-        const secureFs = createSecureFs({
+        const projectSecureFs = createSecureFs({
             baseDir: projectRoot,
             adapter: options.adapter,
             context: "static-serving",
         });
-        // StaticFileService keeps absolute paths in candidates and results, while
-        // SecureFs exposes a base-directory-scoped namespace. Adapt that boundary
-        // explicitly so the static policy can continue rejecting absolute input.
-        const toProjectPath = (path) => relative(projectRoot, resolve(path));
+        const adaptSecureFs = (secureFs, root) => {
+            const toScopedPath = (path) => relative(root, resolve(path));
+            return {
+                readFile: (path) => secureFs.readFile(toScopedPath(path)),
+                readFileBytes: (path) => secureFs.readFileBytes(toScopedPath(path)),
+                stat: (path) => secureFs.stat(toScopedPath(path)),
+            };
+        };
+        // Keep public files under the project policy. A configured build output can
+        // live beside or outside the project, so give that trusted artifact root an
+        // independent boundary instead of expressing it as ../ paths from the project.
+        const project = adaptSecureFs(projectSecureFs, projectRoot);
+        const buildOutputRoot = this.resolveBuildOutputRoot(options);
+        if (isWithinDirectory(buildOutputRoot, projectRoot)) {
+            // Refuse to widen static serving when a malformed output root contains
+            // the project. The project policy still permits only dist and public.
+            return { buildOutput: project, project };
+        }
+        const buildOutputSecureFs = createSecureFs({
+            baseDir: buildOutputRoot,
+            adapter: options.adapter,
+            context: "internal",
+            validationOptions: { checkExists: true },
+        });
         return {
-            readFile: (path) => secureFs.readFile(toProjectPath(path)),
-            readFileBytes: (path) => secureFs.readFileBytes(toProjectPath(path)),
-            stat: (path) => secureFs.stat(toProjectPath(path)),
+            buildOutput: adaptSecureFs(buildOutputSecureFs, buildOutputRoot),
+            project,
         };
     }
     async resolveFile(requestPath, options) {
-        const fs = this.getFileSystem(options);
+        const fileSystems = this.getFileSystems(options);
         const normalizedPath = requestPath === "/" ? "/index.html" : requestPath;
-        const candidates = await this.buildCandidates(normalizedPath, options, fs);
+        const candidates = await this.buildCandidates(normalizedPath, options, fileSystems.buildOutput);
         const unexpectedErrors = [];
         for (const candidate of candidates) {
+            const fs = candidate.source === "public" ? fileSystems.project : fileSystems.buildOutput;
             const result = await this.tryResolveCandidate(candidate, requestPath, options, fs, unexpectedErrors);
             if (result)
                 return result;
@@ -93,22 +116,25 @@ export class StaticFileService {
             if (manifestPath)
                 addCandidate(manifestPath, "manifest");
         }
+        const buildOutputRoot = this.resolveBuildOutputRoot(options);
+        const publicRoot = resolve(options.projectDir, "public");
         const dirs = options.isLocalProject && !options.isPreviewMode
-            ? ["public"]
-            : ["dist", "public"];
-        for (const dir of dirs) {
-            const root = joinPath(options.projectDir, dir);
+            ? [{ root: publicRoot, source: "public" }]
+            : [
+                { root: buildOutputRoot, source: "dist" },
+                { root: publicRoot, source: "public" },
+            ];
+        for (const { root, source } of dirs) {
             const absPath = normalizePath(joinPath(root, normalizedPath));
             if (isWithinDirectory(root, absPath))
-                addCandidate(absPath, dir);
+                addCandidate(absPath, source);
         }
         if (this.shouldProbeIndexPage(normalizedPath)) {
             const indexPath = `${normalizedPath.replace(/\/$/, "")}/index.html`;
-            for (const dir of dirs) {
-                const root = joinPath(options.projectDir, dir);
+            for (const { root, source } of dirs) {
                 const absPath = normalizePath(joinPath(root, indexPath));
                 if (isWithinDirectory(root, absPath))
-                    addCandidate(absPath, dir);
+                    addCandidate(absPath, source);
             }
         }
         return candidates;
@@ -169,8 +195,8 @@ export class StaticFileService {
         return index.assets.get(normalized) ?? null;
     }
     async loadManifestIndex(options, fs) {
-        const cacheKey = options.projectDir;
-        const distRoot = joinPath(options.projectDir, "dist");
+        const distRoot = this.resolveBuildOutputRoot(options);
+        const cacheKey = distRoot;
         const manifestPath = joinPath(distRoot, "_veryfront/manifest.json");
         let stat;
         try {

package/esm/src/server/shared/browser-module-bundler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-module-bundler.d.ts","sourceRoot":"","sources":["../../../../src/src/server/shared/browser-module-bundler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAgB7D,OAAO,KAAK,EAEV,4BAA4B,EAC7B,MAAM,0CAA0C,CAAC;AAuBlD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,wBAAwB,EAAE,MAAM,CAAC;IACjC,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,iCAAiC,GAAG,OAAO,CACrD,IAAI,CACF,yBAAyB,EACvB,iBAAiB,GACjB,wBAAwB,GACxB,gBAAgB,GAChB,qBAAqB,GACrB,eAAe,CAClB,CACF,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,oCAAoC,EAAE,QAAQ,CAAC,yBAAyB,CASjF,CAAC;AAEL,yEAAyE;AACzE,eAAO,MAAM,qCAAqC,IAAI,CAAC;AACvD,+EAA+E;AAC/E,eAAO,MAAM,iCAAiC,KAAK,CAAC;AAEpD,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;AAE/E,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,8BAA8B;gBAApC,IAAI,EAAE,8BAA8B,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAED,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAED,6EAA6E;AAC7E,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,KAAK,CAAC,EAAE,OAAO;CAI5B;AAED,kFAAkF;AAClF,qBAAa,oCAAqC,SAAQ,KAAK;;CAK9D;AAkBD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,uBAAuB,CAAC,EAAE,4BAA4B,CAAC;IACvD,8EAA8E;IAC9E,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,sFAAsF;IACtF,MAAM,CAAC,EAAE,iCAAiC,CAAC;CAC5C;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAKxF;AAED,KAAK,oBAAoB,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,gBAAgB,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;CAChF;AAED,MAAM,MAAM,uCAAuC,GAAG,IAAI,CACxD,2BAA2B,EACzB,QAAQ,GACR,oBAAoB,GACpB,2BAA2B,GAC3B,+BAA+B,GAC/B,yBAAyB,CAC5B,CAAC;AAEF,MAAM,WAAW,oCAAqC,SACpD,IAAI,CACF,2BAA2B,EAC3B,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAC/C;IACD,oFAAoF;IACpF,SAAS,CAAC,EAAE,uCAAuC,CAAC;CACrD;AA8iBD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CAkN9B;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,OAAO,CAAC,CA2DlB"}
+{"version":3,"file":"browser-module-bundler.d.ts","sourceRoot":"","sources":["../../../../src/src/server/shared/browser-module-bundler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAgB7D,OAAO,KAAK,EAEV,4BAA4B,EAC7B,MAAM,0CAA0C,CAAC;AAwBlD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,wBAAwB,EAAE,MAAM,CAAC;IACjC,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,iCAAiC,GAAG,OAAO,CACrD,IAAI,CACF,yBAAyB,EACvB,iBAAiB,GACjB,wBAAwB,GACxB,gBAAgB,GAChB,qBAAqB,GACrB,eAAe,CAClB,CACF,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,oCAAoC,EAAE,QAAQ,CAAC,yBAAyB,CASjF,CAAC;AAEL,yEAAyE;AACzE,eAAO,MAAM,qCAAqC,IAAI,CAAC;AACvD,+EAA+E;AAC/E,eAAO,MAAM,iCAAiC,KAAK,CAAC;AAEpD,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;AAE/E,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,8BAA8B;gBAApC,IAAI,EAAE,8BAA8B,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAED,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAED,6EAA6E;AAC7E,qBAAa,+BAAgC,SAAQ,KAAK;gBAC5C,KAAK,CAAC,EAAE,OAAO;CAI5B;AAED,kFAAkF;AAClF,qBAAa,oCAAqC,SAAQ,KAAK;;CAK9D;AAkBD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,uBAAuB,CAAC,EAAE,4BAA4B,CAAC;IACvD,8EAA8E;IAC9E,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,sFAAsF;IACtF,MAAM,CAAC,EAAE,iCAAiC,CAAC;CAC5C;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAKxF;AAED,KAAK,oBAAoB,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,YAAY,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,gBAAgB,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;CAChF;AAED,MAAM,MAAM,uCAAuC,GAAG,IAAI,CACxD,2BAA2B,EACzB,QAAQ,GACR,oBAAoB,GACpB,2BAA2B,GAC3B,+BAA+B,GAC/B,yBAAyB,CAC5B,CAAC;AAEF,MAAM,WAAW,oCAAqC,SACpD,IAAI,CACF,2BAA2B,EAC3B,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAC/C;IACD,oFAAoF;IACpF,SAAS,CAAC,EAAE,uCAAuC,CAAC;CACrD;AA8iBD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,mBAAmB,CAAC,CA2N9B;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,OAAO,CAAC,CA2DlB"}

package/esm/src/server/shared/browser-module-bundler.js

@@ -6,6 +6,7 @@ import { createBareExternalPlugin, createHttpExternalPlugin, createRelativeFsPlu
 import { describeBrowserModuleBoundaryViolation, inspectBrowserModuleBoundary, } from "./browser-module-boundary.js";
 import { computeHash } from "../../utils/hash-utils.js";
 import { resolveRequestedDependencyPinningSnapshot } from "../../transforms/esm/package-registry.js";
+import { assertNoConfiguredCommonJsBrowserImports } from "../../transforms/import-rewriter/commonjs-policy.js";
 import { PermitSemaphore } from "../../utils/permit-semaphore.js";
 import { waitForSharedPromise } from "../../utils/singleflight.js";
 import { createAbortError, throwIfAborted } from "../../utils/abort.js";
@@ -568,6 +569,11 @@ export function bundleBrowserModuleWithMetadata(absPath, options) {
                 hasUseServerDirective(src))) {
             throw new BrowserModuleEntryRejectedError();
         }
+        await assertNoConfiguredCommonJsBrowserImports(src, {
+            filePath: absPath,
+            projectDir: options.projectDir,
+            serverExternalPackages: options.config?.build?.serverExternalPackages,
+        });
         const boundaryViolation = await inspectBrowserModuleBoundary(src, absPath);
         if (boundaryViolation) {
             throw new BrowserModuleBoundaryError(describeBrowserModuleBoundaryViolation(boundaryViolation));
@@ -600,11 +606,13 @@ export function bundleBrowserModuleWithMetadata(absPath, options) {
                     createRelativeFsPlugin(options.projectDir, tracked.adapter, {
                         enforceBrowserBoundaries: true,
                         readBrowserModule: tracked.readSource,
+                        serverExternalPackages: options.config?.build?.serverExternalPackages,
                     }),
                     createBareExternalPlugin({
                         importMapImports: importMap.imports,
                         projectDir: options.projectDir,
                         projectId: options.projectId ?? options.projectSlug,
+                        serverExternalPackages: options.config?.build?.serverExternalPackages,
                         dependencyPinningCacheKey,
                         dependencyPinningDependencies,
                         dependencyPinningSource,
@@ -612,6 +620,8 @@ export function bundleBrowserModuleWithMetadata(absPath, options) {
                     createHttpExternalPlugin({
                         moduleServerOrigin: options.moduleServerOrigin,
                         dependencyPinningCacheKey,
+                        projectDir: options.projectDir,
+                        serverExternalPackages: options.config?.build?.serverExternalPackages,
                     }),
                 ],
                 signal,

package/esm/src/server/utils/request-host.d.ts

@@ -12,4 +12,10 @@ export declare function parseForwardedHost(raw: string | null): string | undefin
  * proxy trust (see {@link isProxyTrusted}).
  */
 export declare function getEffectiveRequestHost(req: Request, url?: URL, trustProxy?: boolean): string;
+/**
+ * Resolve the browser-visible HTTP(S) origin at the trusted request boundary.
+ * Forwarded values are used only after the caller establishes proxy trust.
+ * Invalid trusted values return null so redirect policy checks fail closed.
+ */
+export declare function getEffectiveRequestOrigin(req: Request, url?: URL, trustProxy?: boolean): string | null;
 //# sourceMappingURL=request-host.d.ts.map

package/esm/src/server/utils/request-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-host.d.ts","sourceRoot":"","sources":["../../../../src/src/server/utils/request-host.ts"],"names":[],"mappings":"AAAA,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAKzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,GAAG,CAAC,EAAE,GAAG,EACT,UAAU,UAAQ,GACjB,MAAM,CAOR"}
+{"version":3,"file":"request-host.d.ts","sourceRoot":"","sources":["../../../../src/src/server/utils/request-host.ts"],"names":[],"mappings":"AAOA,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,GAAG,CAAC,EAAE,GAAG,EACT,UAAU,UAAQ,GACjB,MAAM,CAOR;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,GAAG,CAAC,EAAE,GAAG,EACT,UAAU,UAAQ,GACjB,MAAM,GAAG,IAAI,CAkCf"}

package/esm/src/server/utils/request-host.js

@@ -1,9 +1,12 @@
-export function parseForwardedHost(raw) {
+function parseFirstForwardedValue(raw) {
     if (!raw)
         return undefined;
     const first = raw.split(",")[0]?.trim();
     return first || undefined;
 }
+export function parseForwardedHost(raw) {
+    return parseFirstForwardedValue(raw);
+}
 /**
  * Resolve the effective request host.
  *
@@ -25,3 +28,41 @@ export function getEffectiveRequestHost(req, url, trustProxy = false) {
     return req.headers.get("host") ??
         (url ?? new URL(req.url)).host;
 }
+/**
+ * Resolve the browser-visible HTTP(S) origin at the trusted request boundary.
+ * Forwarded values are used only after the caller establishes proxy trust.
+ * Invalid trusted values return null so redirect policy checks fail closed.
+ */
+export function getEffectiveRequestOrigin(req, url, trustProxy = false) {
+    const requestUrl = url ?? new URL(req.url);
+    let protocol = requestUrl.protocol;
+    if (trustProxy) {
+        const rawForwardedProtocol = req.headers.get("x-forwarded-proto");
+        if (rawForwardedProtocol !== null) {
+            const forwardedProtocol = parseFirstForwardedValue(rawForwardedProtocol)?.toLowerCase()
+                .replace(/:$/, "");
+            if (forwardedProtocol !== "http" && forwardedProtocol !== "https")
+                return null;
+            protocol = `${forwardedProtocol}:`;
+        }
+    }
+    if (protocol !== "http:" && protocol !== "https:")
+        return null;
+    const host = getEffectiveRequestHost(req, requestUrl, trustProxy);
+    if (host.length === 0 || host.length > 2_048 || host.trim() !== host)
+        return null;
+    try {
+        const originUrl = new URL(`${protocol}//${host}`);
+        if (originUrl.username !== "" ||
+            originUrl.password !== "" ||
+            originUrl.pathname !== "/" ||
+            originUrl.search !== "" ||
+            originUrl.hash !== "") {
+            return null;
+        }
+        return originUrl.origin;
+    }
+    catch {
+        return null;
+    }
+}

package/esm/src/skill/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/src/skill/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAoCnE,OAAO,KAAK,EAGV,mBAAmB,EAIpB,MAAM,YAAY,CAAC;AAoCpB,KAAK,wBAAwB,GAAG;IAC9B,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,KAAK,SAAS,MAAM,EAAE,CAAC;CAC3F,CAAC;AA+XF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAgEhF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAsCzF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAAG,wBAA6B,GAC1E,IAAI,CA0DN"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/src/skill/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAqCnE,OAAO,KAAK,EAGV,mBAAmB,EAIpB,MAAM,YAAY,CAAC;AAoCpB,KAAK,wBAAwB,GAAG;IAC9B,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,KAAK,SAAS,MAAM,EAAE,CAAC;CAC3F,CAAC;AA+XF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAgEhF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAsCzF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAAG,wBAA6B,GAC1E,IAAI,CA0DN"}

package/esm/src/task/definition-snapshot.d.ts

@@ -0,0 +1,8 @@
+import type { TaskDefinition } from "./types.js";
+type TaskObject = Record<PropertyKey, unknown>;
+/** Validate and capture the task metadata that crosses discovery boundaries. */
+export declare function captureTaskDefinition(value: unknown): TaskDefinition;
+/** Identify structural task exports without executing accessors. */
+export declare function isTaskDefinitionCandidate(value: unknown): value is TaskObject;
+export {};
+//# sourceMappingURL=definition-snapshot.d.ts.map

package/esm/src/task/definition-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition-snapshot.d.ts","sourceRoot":"","sources":["../../../src/src/task/definition-snapshot.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA2BjD,KAAK,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AA0H/C,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAsCpE;AAED,oEAAoE;AACpE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAM7E"}

package/esm/src/task/definition-snapshot.js

@@ -0,0 +1,154 @@
+import { isProxyWithoutHooks } from "../platform/compat/error-introspection.js";
+import { captureScheduleIntegrationRequirementsConfig } from "../schedule/validation.js";
+import { snapshotBoundedJsonValue } from "../schemas/json-value.js";
+const TASK_DEFINITION_KEY_COVERAGE = {
+    name: true,
+    description: true,
+    inputSchema: true,
+    outputSchema: true,
+    integrationRequirements: true,
+    schedulable: true,
+    run: true,
+};
+const TASK_DEFINITION_KEYS = Object.keys(TASK_DEFINITION_KEY_COVERAGE);
+const MAX_TASK_PROTOTYPE_DEPTH = 32;
+const arrayIsArray = Array.isArray;
+const OBJECT_PROTOTYPE = Object.prototype;
+const hasOwn = Object.hasOwn;
+const objectCreate = Object.create;
+const objectDefineProperty = Object.defineProperty;
+const objectFreeze = Object.freeze;
+const objectValues = Object.values;
+const reflectApply = Reflect.apply;
+const reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;
+const reflectGetPrototypeOf = Reflect.getPrototypeOf;
+function defineArrayElement(target, index, value) {
+    objectDefineProperty(target, index, {
+        value,
+        enumerable: true,
+        configurable: true,
+        writable: true,
+    });
+}
+function fail(detail) {
+    throw new TypeError(detail);
+}
+function inspectTaskObject(value) {
+    if (typeof value !== "object" || value === null || arrayIsArray(value) ||
+        isProxyWithoutHooks(value)) {
+        fail("Task definition must be a non-Proxy object.");
+    }
+    return value;
+}
+function findTaskPropertyDescriptor(value, key) {
+    const visited = [];
+    let owner = value;
+    for (let depth = 0; owner !== null && owner !== OBJECT_PROTOTYPE; depth++) {
+        let repeated = false;
+        for (let index = 0; index < depth; index++) {
+            if (visited[index] === owner) {
+                repeated = true;
+                break;
+            }
+        }
+        if (depth >= MAX_TASK_PROTOTYPE_DEPTH || repeated ||
+            isProxyWithoutHooks(owner)) {
+            fail("Task definition has an invalid prototype chain.");
+        }
+        defineArrayElement(visited, depth, owner);
+        const descriptor = reflectGetOwnPropertyDescriptor(owner, key);
+        if (descriptor !== undefined)
+            return descriptor;
+        owner = reflectGetPrototypeOf(owner);
+    }
+    return undefined;
+}
+function inspectTaskDefinition(value) {
+    const task = inspectTaskObject(value);
+    const fields = objectCreate(null);
+    for (let index = 0; index < TASK_DEFINITION_KEYS.length; index++) {
+        const key = TASK_DEFINITION_KEYS[index];
+        const descriptor = findTaskPropertyDescriptor(task, key);
+        if (descriptor === undefined)
+            continue;
+        const inherited = !hasOwn(task, key);
+        if (!("value" in descriptor)) {
+            fail(inherited
+                ? `Task definition ${key} must resolve to a data property.`
+                : `Task definition ${key} must be a data property.`);
+        }
+        fields[key] = descriptor.value;
+    }
+    return fields;
+}
+function optionalString(value, label) {
+    if (value !== undefined && typeof value !== "string") {
+        fail(`${label} must be a string.`);
+    }
+    return value;
+}
+function optionalRecord(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "object" || value === null || arrayIsArray(value) ||
+        isProxyWithoutHooks(value)) {
+        fail(`${label} must be a non-Proxy object.`);
+    }
+    const snapshot = snapshotBoundedJsonValue(value);
+    if (snapshot.success && snapshot.value !== null &&
+        typeof snapshot.value === "object" && !arrayIsArray(snapshot.value)) {
+        return freezeJsonSnapshot(snapshot.value);
+    }
+    // Task schemas have always accepted the public Record<string, unknown>
+    // contract. Arbitrary schema instances can keep parser state keyed by object
+    // identity, so cloning them cannot preserve their public behavior. Retain
+    // those instances unchanged; JSON schemas still take the detached, deeply
+    // frozen snapshot path above.
+    return value;
+}
+function freezeJsonSnapshot(value) {
+    if (typeof value !== "object" || value === null)
+        return value;
+    const nestedValues = arrayIsArray(value) ? value : objectValues(value);
+    for (let index = 0; index < nestedValues.length; index++) {
+        freezeJsonSnapshot(nestedValues[index]);
+    }
+    objectFreeze(value);
+    return value;
+}
+/** Validate and capture the task metadata that crosses discovery boundaries. */
+export function captureTaskDefinition(value) {
+    const task = inspectTaskObject(value);
+    const fields = inspectTaskDefinition(task);
+    const run = fields.run;
+    if (typeof run !== "function")
+        fail("Task definition run must be a function.");
+    const runWithReceiver = (ctx) => reflectApply(run, task, [ctx]);
+    const name = optionalString(fields.name, "Task definition name");
+    const description = optionalString(fields.description, "Task definition description");
+    const inputSchema = optionalRecord(fields.inputSchema, "Task definition inputSchema");
+    const outputSchema = optionalRecord(fields.outputSchema, "Task definition outputSchema");
+    const schedulable = fields.schedulable;
+    if (schedulable !== undefined && typeof schedulable !== "boolean") {
+        fail("Task definition schedulable must be a boolean.");
+    }
+    const integrationRequirements = captureScheduleIntegrationRequirementsConfig(fields.integrationRequirements, "Task");
+    return objectFreeze({
+        ...(hasOwn(fields, "name") ? { name } : {}),
+        ...(hasOwn(fields, "description") ? { description } : {}),
+        ...(hasOwn(fields, "inputSchema") ? { inputSchema } : {}),
+        ...(hasOwn(fields, "outputSchema") ? { outputSchema } : {}),
+        ...(integrationRequirements === undefined ? {} : { integrationRequirements }),
+        ...(hasOwn(fields, "schedulable") ? { schedulable } : {}),
+        run: runWithReceiver,
+    });
+}
+/** Identify structural task exports without executing accessors. */
+export function isTaskDefinitionCandidate(value) {
+    try {
+        return findTaskPropertyDescriptor(inspectTaskObject(value), "run") !== undefined;
+    }
+    catch {
+        return false;
+    }
+}

package/esm/src/task/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/src/task/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAuBjD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,EAAE,EAAE,MAAM,CAAC;IAEX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IAEb,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IAEnB,0BAA0B;IAC1B,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,UAAU,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,OAAO,EAAE,cAAc,CAAC;IAExB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,eAAe,CAAC;IAEzB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,2BAA2B;IAC3B,KAAK,EAAE,cAAc,EAAE,CAAC;IAExB,0CAA0C;IAC1C,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAwHD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQvE;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAkE9B;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA0DhC"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/src/task/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAG1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAuBjD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,EAAE,EAAE,MAAM,CAAC;IAEX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IAEb,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IAEnB,0BAA0B;IAC1B,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,UAAU,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,OAAO,EAAE,cAAc,CAAC;IAExB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,eAAe,CAAC;IAEzB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,2BAA2B;IAC3B,KAAK,EAAE,cAAc,EAAE,CAAC;IAExB,0CAA0C;IAC1C,MAAM,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AA+ID;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQvE;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAsE9B;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAgEhC"}

package/esm/src/task/discovery.js

@@ -23,7 +23,7 @@ import { fromFileUrl, join } from "../platform/compat/path/index.js";
 import { logger as baseLogger } from "../utils/index.js";
 import { collectFiles } from "../utils/file-discovery.js";
 import { importDiscoveryModule } from "../discovery/module-import.js";
-import { isTaskDefinition } from "./types.js";
+import { captureTaskDefinition, isTaskDefinitionCandidate } from "./definition-snapshot.js";
 const logger = baseLogger.component("task-discovery");
 const TASK_FILE_EXTENSIONS = [".ts", ".tsx", ".js", ".jsx"];
 const TASK_IGNORE_PATTERNS = [
@@ -63,16 +63,29 @@ async function collectTaskFiles(baseDir, adapter) {
     return files.sort((left, right) => compareText(left.path.replaceAll("\\", "/"), right.path.replaceAll("\\", "/")));
 }
 function extractTaskExport(module) {
-    const defaultExport = module.default;
-    if (isTaskDefinition(defaultExport)) {
-        return { exportName: "default", definition: defaultExport };
-    }
-    for (const [exportName, value] of Object.entries(module)) {
-        if (exportName !== "default" && isTaskDefinition(value)) {
-            return { exportName, definition: value };
+    const errors = [];
+    const captureCandidate = (exportName, value) => {
+        if (!isTaskDefinitionCandidate(value))
+            return null;
+        try {
+            return { exportName, definition: captureTaskDefinition(value) };
         }
+        catch (error) {
+            errors.push(error);
+            return null;
+        }
+    };
+    const defaultTask = captureCandidate("default", module.default);
+    if (defaultTask !== null)
+        return { taskExport: defaultTask, errors };
+    for (const [exportName, value] of Object.entries(module)) {
+        if (exportName === "default")
+            continue;
+        const namedTask = captureCandidate(exportName, value);
+        if (namedTask !== null)
+            return { taskExport: namedTask, errors };
     }
-    return null;
+    return { taskExport: null, errors };
 }
 async function loadTaskFromFile(filePath, id, adapter, projectDir, allowHostProjectCodeExecution) {
     const module = await importDiscoveryModule(filePath, {
@@ -80,18 +93,21 @@ async function loadTaskFromFile(filePath, id, adapter, projectDir, allowHostProj
         projectDir,
         allowHostProjectCodeExecution,
     });
-    const taskExport = extractTaskExport(module);
+    const { taskExport, errors } = extractTaskExport(module);
     if (!taskExport)
-        return null;
+        return { task: null, errors };
     return {
-        id,
-        name: typeof taskExport.definition.name === "string" &&
-            taskExport.definition.name.trim().length > 0
-            ? taskExport.definition.name
-            : id,
-        filePath,
-        exportName: taskExport.exportName,
-        definition: taskExport.definition,
+        task: {
+            id,
+            name: typeof taskExport.definition.name === "string" &&
+                taskExport.definition.name.trim().length > 0
+                ? taskExport.definition.name
+                : id,
+            filePath,
+            exportName: taskExport.exportName,
+            definition: taskExport.definition,
+        },
+        errors,
     };
 }
 function finalizeTaskDiscoveryResult(tasks, errors) {
@@ -166,7 +182,11 @@ export async function discoverTasks(options) {
         }
         for (const file of files) {
             try {
-                const task = await loadTaskFromFile(file.path, deriveTaskId(file.path, baseDir), adapter, projectDir, allowHostProjectCodeExecution);
+                const loaded = await loadTaskFromFile(file.path, deriveTaskId(file.path, baseDir), adapter, projectDir, allowHostProjectCodeExecution);
+                for (const error of loaded.errors) {
+                    errors.push({ filePath: file.path, error: toErrorMessage(error) });
+                }
+                const task = loaded.task;
                 if (task) {
                     tasks.push(task);
                     logDiscoveredTask(task, debug);
@@ -212,7 +232,13 @@ export async function findTaskById(taskId, options) {
             if (id !== taskId)
                 continue;
             try {
-                const task = await loadTaskFromFile(file.path, id, adapter, projectDir, allowHostProjectCodeExecution);
+                const loaded = await loadTaskFromFile(file.path, id, adapter, projectDir, allowHostProjectCodeExecution);
+                if (debug) {
+                    for (const error of loaded.errors) {
+                        logger.warn(`Failed to load task export from ${file.path}: ${toErrorMessage(error)}`);
+                    }
+                }
+                const task = loaded.task;
                 if (task) {
                     matches.push(task);
                 }

package/esm/src/task/types.d.ts

@@ -5,6 +5,7 @@
  * Tasks are user-defined functions in `tasks/` that can run
  * locally via `veryfront task <name>` or in the cloud as runs and schedules.
  */
+import type { ScheduleIntegrationRequirementConfig } from "../schedule/types.js";
 /**
  * Context passed to task run() function
  */
@@ -32,6 +33,8 @@ export interface TaskDefinition {
     inputSchema?: Record<string, unknown>;
     /** Optional JSON-schema-like output contract surfaced in APIs/UIs */
     outputSchema?: Record<string, unknown>;
+    /** Explicit integration scopes and resources required by scheduled runs. */
+    integrationRequirements?: ScheduleIntegrationRequirementConfig[];
     /** Whether this task can be scheduled */
     schedulable?: boolean;
     /** The function to execute */

package/esm/src/task/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/task/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvD;AAgBD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAQxE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/task/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,sBAAsB,CAAC;AAGjF;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,4EAA4E;IAC5E,uBAAuB,CAAC,EAAE,oCAAoC,EAAE,CAAC;IACjE,yCAAyC;IACzC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAOxE"}

package/esm/src/task/types.js

@@ -5,26 +5,17 @@
  * Tasks are user-defined functions in `tasks/` that can run
  * locally via `veryfront task <name>` or in the cloud as runs and schedules.
  */
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isOptionalString(value) {
-    return value === undefined || typeof value === "string";
-}
-function isOptionalRecord(value) {
-    return value === undefined || isRecord(value);
-}
+import { captureTaskDefinition } from "./definition-snapshot.js";
 /**
  * Return true only when the runnable and every declared task metadata field
  * match the public `TaskDefinition` contract.
  */
 export function isTaskDefinition(value) {
-    if (!isRecord(value))
+    try {
+        captureTaskDefinition(value);
+        return true;
+    }
+    catch {
         return false;
-    return typeof value.run === "function" &&
-        isOptionalString(value.name) &&
-        isOptionalString(value.description) &&
-        isOptionalRecord(value.inputSchema) &&
-        isOptionalRecord(value.outputSchema) &&
-        (value.schedulable === undefined || typeof value.schedulable === "boolean");
+    }
 }

package/esm/src/tool/remote-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-mcp.d.ts","sourceRoot":"","sources":["../../../src/src/tool/remote-mcp.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAkB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAQzF,mDAAmD;AACnD,eAAO,MAAM,uCAAuC,QAAmB,CAAC;AACxE,mDAAmD;AACnD,eAAO,MAAM,kCAAkC,QAAkB,CAAC;AAIlE,8EAA8E;AAC9E,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,gEAAgE;AAChE,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAwBrD,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnF,oDAAoD;AACpD,MAAM,WAAW,yBAAyB;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,eAAe,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA45BD,kFAAkF;AAClF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,yBAAyB,GAChC,gBAAgB,CAElB;AAED,wEAAwE;AACxE,MAAM,WAAW,mCAAmC;IAClD,kEAAkE;IAClE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,oEAAoE;IACpE,YAAY,EAAE,OAAO,KAAK,CAAC;CAC5B;AAqCD;;;;;GAKG;AACH,wBAAgB,6CAA6C,CAC3D,OAAO,EAAE,mCAAmC,GAC3C,CAAC,MAAM,EAAE,yBAAyB,KAAK,gBAAgB,CAoBzD"}
+{"version":3,"file":"remote-mcp.d.ts","sourceRoot":"","sources":["../../../src/src/tool/remote-mcp.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAkB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAQzF,mDAAmD;AACnD,eAAO,MAAM,uCAAuC,QAAmB,CAAC;AACxE,mDAAmD;AACnD,eAAO,MAAM,kCAAkC,QAAkB,CAAC;AAIlE,8EAA8E;AAC9E,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,gEAAgE;AAChE,eAAO,MAAM,+BAA+B,OAAQ,CAAC;AAyBrD,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnF,oDAAoD;AACpD,MAAM,WAAW,yBAAyB;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE,eAAe,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAugCD,kFAAkF;AAClF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,yBAAyB,GAChC,gBAAgB,CAElB;AAED,wEAAwE;AACxE,MAAM,WAAW,mCAAmC;IAClD,kEAAkE;IAClE,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,oEAAoE;IACpE,YAAY,EAAE,OAAO,KAAK,CAAC;CAC5B;AAqCD;;;;;GAKG;AACH,wBAAgB,6CAA6C,CAC3D,OAAO,EAAE,mCAAmC,GAC3C,CAAC,MAAM,EAAE,yBAAyB,KAAK,gBAAgB,CAoBzD"}