veryfront 0.1.246 → 0.1.248

package/esm/src/workflow/claude-code/workspace-sync.d.ts

@@ -77,7 +77,11 @@ export declare class WorkspaceSync {
      */
     detectChanges(): Promise<FileChange[]>;
     /**
-     * Recursively walk directory and detect changes
+     * Recursively walk directory and detect changes.
+     *
+     * SECURITY: Uses lstat (not stat) and skips any symlink it finds, so a
+     * symlink planted inside the workspace cannot cause us to descend into —
+     * or read the contents of — files outside the workspace (VULN-FS-4).
      */
     private walkAndDetect;
     /**
@@ -91,7 +95,18 @@ export declare class WorkspaceSync {
         onUpload?: (path: string, content: string, type: FileChange["type"]) => Promise<void>;
     }): Promise<UploadResult>;
     /**
-     * Safely resolve a path within the workspace, preventing path traversal attacks
+     * Safely resolve a path within the workspace, preventing path traversal
+     * and symlink-based escapes (VULN-FS-4).
+     *
+     * - Rejects NUL bytes outright.
+     * - Rejects any intermediate path segment that is a symlink.
+     * - Re-checks containment by realpath-ing the parent directory after the
+     *   segment walk, so a symlink that resolves through a non-symlink directory
+     *   chain still cannot escape the workspace.
+     *
+     * Note: this deliberately rejects ALL symlinks inside the workspace — even
+     * those whose targets remain within it — because the race window between
+     * resolution and use is not worth the complexity for our use-case.
      */
     private resolveSafePath;
     /**

package/esm/src/workflow/claude-code/workspace-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-sync.d.ts","sourceRoot":"","sources":["../../../../src/src/workflow/claude-code/workspace-sync.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AASzD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IAEd,oCAAoC;IACpC,MAAM,EAAE,qBAAqB,CAAC;IAE9B,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IAErB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IAExB,6BAA6B;IAC7B,eAAe,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,QAAQ,EAAE,UAAU,EAAE,CAAC;IAEvB,kCAAkC;IAClC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/C,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8CD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,EAAE,eAAe;IAgBnC;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAiGhD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAwC5C;;OAEG;YACW,aAAa;IAyC3B;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,GAAE;QACP,8CAA8C;QAC9C,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KACrB,OAAO,CAAC,IAAI,CAAC,CAAC;KACf,GACL,OAAO,CAAC,YAAY,CAAC;IA6CxB;;OAEG;IACH,OAAO,CAAC,eAAe;IAgBvB;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7C;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7D;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWhD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAE1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,mBAAmB,CAAC;CACjC,CAAC,CAkBD"}
+{"version":3,"file":"workspace-sync.d.ts","sourceRoot":"","sources":["../../../../src/src/workflow/claude-code/workspace-sync.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAUzD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IAEd,oCAAoC;IACpC,MAAM,EAAE,qBAAqB,CAAC;IAE9B,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IAErB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IAExB,6BAA6B;IAC7B,eAAe,EAAE,MAAM,CAAC;IAExB,oDAAoD;IACpD,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,QAAQ,EAAE,UAAU,EAAE,CAAC;IAEvB,kCAAkC;IAClC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/C,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8CD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,WAAW,CAAS;gBAEhB,MAAM,EAAE,eAAe;IAgBnC;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAiGhD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAwC5C;;;;;;OAMG;YACW,aAAa;IAiD3B;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,GAAE;QACP,8CAA8C;QAC9C,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KACrB,OAAO,CAAC,IAAI,CAAC,CAAC;KACf,GACL,OAAO,CAAC,YAAY,CAAC;IA6CxB;;;;;;;;;;;;;OAaG;YACW,eAAe;IAiF7B;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7C;;OAEG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7D;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWhD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB/B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,aAAa,CAE1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,mBAAmB,CAAC;CACjC,CAAC,CAkBD"}

package/esm/src/workflow/claude-code/workspace-sync.js

@@ -12,8 +12,9 @@
 import * as dntShim from "../../../_dnt.shims.js";
 import { logger as baseLogger } from "../../utils/index.js";
 import { api } from "../api.js";
-import { join, relative, resolve } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
+import { dirname, join, relative, resolve } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
 import { INITIALIZATION_ERROR, INVALID_ARGUMENT, SECURITY_VIOLATION } from "../../errors/index.js";
+import { isWithinDirectory } from "../../utils/path-utils.js";
 const logger = baseLogger.component("workspace-sync");
 /** Maximum file size for workspace sync (10 MB) */
 const MAX_WORKSPACE_FILE_SIZE = 10 * 1024 * 1024;
@@ -136,8 +137,8 @@ export class WorkspaceSync {
                 const hash = await checksum(content);
                 this.fileChecksums.set(path, hash);
                 // Write to local filesystem (use safe path resolution)
-                const localPath = this.resolveSafePath(path);
-                const dir = localPath.substring(0, localPath.lastIndexOf("/"));
+                const localPath = await this.resolveSafePath(path);
+                const dir = dirname(localPath);
                 await dntShim.Deno.mkdir(dir, { recursive: true });
                 await dntShim.Deno.writeTextFile(localPath, content);
                 filesDownloaded++;
@@ -188,7 +189,7 @@ export class WorkspaceSync {
         // Check for deleted files
         for (const [path, originalHash] of this.fileChecksums) {
             try {
-                const localPath = this.resolveSafePath(path);
+                const localPath = await this.resolveSafePath(path);
                 await dntShim.Deno.stat(localPath);
             }
             catch (_) {
@@ -206,17 +207,28 @@ export class WorkspaceSync {
         return changes;
     }
     /**
-     * Recursively walk directory and detect changes
+     * Recursively walk directory and detect changes.
+     *
+     * SECURITY: Uses lstat (not stat) and skips any symlink it finds, so a
+     * symlink planted inside the workspace cannot cause us to descend into —
+     * or read the contents of — files outside the workspace (VULN-FS-4).
      */
     async walkAndDetect(localPath, relativePath, changes) {
-        const stat = await dntShim.Deno.stat(localPath);
+        const stat = await dntShim.Deno.lstat(localPath);
+        // Ignore symlinks outright — we never treat them as real files here.
+        if (stat.isSymlink) {
+            if (this.config.debug) {
+                logger.info("Skipping symlink during change detection", { localPath });
+            }
+            return;
+        }
         if (stat.isDirectory) {
             for await (const entry of dntShim.Deno.readDir(localPath)) {
                 await this.walkAndDetect(`${localPath}/${entry.name}`, `${relativePath}/${entry.name}`, changes);
             }
             return;
         }
-        // It's a file - check for changes
+        // It's a regular file - check for changes
         const content = await dntShim.Deno.readTextFile(localPath);
         const newHash = await checksum(content);
         const originalHash = this.fileChecksums.get(relativePath);
@@ -258,7 +270,7 @@ export class WorkspaceSync {
                 continue;
             }
             try {
-                const localPath = this.resolveSafePath(change.path);
+                const localPath = await this.resolveSafePath(change.path);
                 const content = await dntShim.Deno.readTextFile(localPath);
                 if (options.onUpload) {
                     await options.onUpload(change.path, content, change.type);
@@ -287,34 +299,109 @@ export class WorkspaceSync {
         };
     }
     /**
-     * Safely resolve a path within the workspace, preventing path traversal attacks
+     * Safely resolve a path within the workspace, preventing path traversal
+     * and symlink-based escapes (VULN-FS-4).
+     *
+     * - Rejects NUL bytes outright.
+     * - Rejects any intermediate path segment that is a symlink.
+     * - Re-checks containment by realpath-ing the parent directory after the
+     *   segment walk, so a symlink that resolves through a non-symlink directory
+     *   chain still cannot escape the workspace.
+     *
+     * Note: this deliberately rejects ALL symlinks inside the workspace — even
+     * those whose targets remain within it — because the race window between
+     * resolution and use is not worth the complexity for our use-case.
      */
-    resolveSafePath(path) {
-        // Normalize the input path
+    async resolveSafePath(path) {
+        // Reject NUL bytes — they confuse filesystem APIs and are never legitimate.
+        if (path.includes("\0")) {
+            throw SECURITY_VIOLATION.create({ detail: `NUL byte in path` });
+        }
+        // Workspace-relative paths only. A single leading "/" is the canonical
+        // API form for "the project root" (e.g. "/src/foo.ts") and is accepted;
+        // anything that syntactically looks like a system-absolute path beyond
+        // that one-slash convention is rejected.
+        //
+        // - Windows drive letters (C:\...) — rejected.
+        // - UNC paths (//host/share) — rejected.
+        // - Unix absolute paths with a leading slash are treated as
+        //   workspace-relative, but any component that tries to escape the
+        //   workspace is still caught by the traversal / realpath checks below.
+        if (/^[A-Za-z]:[\\/]/.test(path)) {
+            throw SECURITY_VIOLATION.create({ detail: `Absolute path not allowed: ${path}` });
+        }
+        if (path.startsWith("//")) {
+            throw SECURITY_VIOLATION.create({ detail: `Absolute path not allowed: ${path}` });
+        }
+        // Normalize the input path (treat leading "/" as workspace-relative).
         const normalizedPath = path.startsWith("/") ? path.slice(1) : path;
-        // Resolve the full path
+        // Empty path resolves to the workspace dir itself — writing to it would
+        // clobber the workspace as a regular file. Reject explicitly.
+        if (normalizedPath === "") {
+            throw SECURITY_VIOLATION.create({ detail: `Empty path not allowed` });
+        }
+        // Resolve the full path lexically first (catches literal "..").
         const fullPath = resolve(join(this.workspaceDir, normalizedPath));
-        // Verify the resolved path is within the workspace
         const relativePath = relative(this.workspaceDir, fullPath);
-        if (relativePath.startsWith("..") || !relativePath || relativePath === "..") {
+        if (!relativePath || relativePath.startsWith("..") || relativePath === "..") {
             throw SECURITY_VIOLATION.create({ detail: `Path traversal detected: ${path}` });
         }
+        // Walk each segment and reject any existing symlink along the way.
+        // A segment that does not yet exist is fine — it will be created later.
+        const relSegments = relativePath === "" ? [] : relativePath.split(/[\\/]/).filter(Boolean);
+        let cursor = this.workspaceDir;
+        for (const seg of relSegments) {
+            cursor = join(cursor, seg);
+            try {
+                const info = await dntShim.Deno.lstat(cursor);
+                if (info.isSymlink) {
+                    throw SECURITY_VIOLATION.create({
+                        detail: `Refusing to traverse symlink: ${cursor}`,
+                    });
+                }
+            }
+            catch (e) {
+                if (e instanceof dntShim.Deno.errors.NotFound) {
+                    // Segment doesn't exist yet — the rest of the chain will be
+                    // created under a verified-non-symlink parent, so stop walking.
+                    break;
+                }
+                throw e;
+            }
+        }
+        // Final containment check against the realpath of the parent directory,
+        // to defeat any symlink-in-parent we might have missed (e.g. one that
+        // appeared mid-walk). If the parent doesn't exist yet, that's fine —
+        // the segment walk above already proved every existing ancestor is real.
+        try {
+            const parentReal = await dntShim.Deno.realPath(dirname(fullPath));
+            const workspaceReal = await dntShim.Deno.realPath(this.workspaceDir);
+            if (!isWithinDirectory(workspaceReal, parentReal)) {
+                throw SECURITY_VIOLATION.create({
+                    detail: `Resolved parent outside workspace: ${parentReal}`,
+                });
+            }
+        }
+        catch (e) {
+            if (!(e instanceof dntShim.Deno.errors.NotFound))
+                throw e;
+        }
         return fullPath;
     }
     /**
      * Read a file from the workspace
      */
     async readFile(path) {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         return await dntShim.Deno.readTextFile(localPath);
     }
     /**
      * Write a file to the workspace
      */
     async writeFile(path, content) {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         // Ensure directory exists
-        const dir = localPath.substring(0, localPath.lastIndexOf("/"));
+        const dir = dirname(localPath);
         await dntShim.Deno.mkdir(dir, { recursive: true });
         await dntShim.Deno.writeTextFile(localPath, content);
     }
@@ -322,7 +409,7 @@ export class WorkspaceSync {
      * Delete a file from the workspace
      */
     async deleteFile(path) {
-        const localPath = this.resolveSafePath(path);
+        const localPath = await this.resolveSafePath(path);
         await dntShim.Deno.remove(localPath);
     }
     /**
@@ -330,7 +417,7 @@ export class WorkspaceSync {
      */
     async fileExists(path) {
         try {
-            const localPath = this.resolveSafePath(path);
+            const localPath = await this.resolveSafePath(path);
             await dntShim.Deno.stat(localPath);
             return true;
         }

package/esm/src/workflow/schemas/workflow.schema.d.ts

@@ -19,11 +19,11 @@ export declare const WorkflowStatusSchema: z.ZodEnum<{
  * Node status schema
  */
 export declare const NodeStatusSchema: z.ZodEnum<{
-    skipped: "skipped";
     failed: "failed";
     pending: "pending";
     completed: "completed";
     running: "running";
+    skipped: "skipped";
 }>;
 /**
  * Workflow node type schema
@@ -74,11 +74,11 @@ export declare const LoopExecutionContextSchema: z.ZodObject<{
 export declare const NodeStateSchema: z.ZodObject<{
     nodeId: z.ZodString;
     status: z.ZodEnum<{
-        skipped: "skipped";
         failed: "failed";
         pending: "pending";
         completed: "completed";
         running: "running";
+        skipped: "skipped";
     }>;
     input: z.ZodOptional<z.ZodUnknown>;
     output: z.ZodOptional<z.ZodUnknown>;
@@ -106,11 +106,11 @@ export declare const CheckpointSchema: z.ZodObject<{
     nodeStates: z.ZodRecord<z.ZodString, z.ZodObject<{
         nodeId: z.ZodString;
         status: z.ZodEnum<{
-            skipped: "skipped";
             failed: "failed";
             pending: "pending";
             completed: "completed";
             running: "running";
+            skipped: "skipped";
         }>;
         input: z.ZodOptional<z.ZodUnknown>;
         output: z.ZodOptional<z.ZodUnknown>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.246",
+  "version": "0.1.248",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -192,15 +192,7 @@
     "@babel/parser": "7.29.2",
     "@babel/traverse": "7.29.0",
     "@babel/types": "7.29.0",
-    "@kreuzberg/wasm": "4.5.2",
     "@mdx-js/mdx": "3.1.1",
-    "@opentelemetry/api": "1.9.0",
-    "@opentelemetry/context-async-hooks": "2.6.0",
-    "@opentelemetry/core": "2.6.0",
-    "@opentelemetry/exporter-trace-otlp-http": "0.213.0",
-    "@opentelemetry/resources": "2.6.0",
-    "@opentelemetry/sdk-trace-base": "2.6.0",
-    "@opentelemetry/semantic-conventions": "1.40.0",
     "@types/hast": "3.0.3",
     "@types/mdast": "4.0.3",
     "@types/unist": "3.0.2",

package/src/cli/shared/server-startup.ts

@@ -99,6 +99,14 @@ export async function startCliProductionServer(
     signal: options.signal,
     defaultProjectSlug: options.defaultProjectSlug,
     defaultProjectId: options.defaultProjectId,
+    // Do NOT register a `localProjects` mapping here. `vf serve` and the
+    // compiled binary are production deployments, and `isLocalProject: true`
+    // flips `isDev` on in security headers (suppressing CSP) and in the SSR
+    // error overlay (exposing absolute paths and stack traces) — the exact
+    // dev-surface leak VULN-SRV-1 / VULN-SRV-2 was closing. The strategy
+    // narrowing in `client-module-strategy.ts` already routes hydration
+    // through `/_veryfront/rsc/module?` for non-local deployments, so no
+    // `localProjects` entry is required for the compiled binary to work.
   };
   return await startProductionServer(serverOptions);
 }

package/src/deno.js

@@ -1,10 +1,12 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.246",
+  "version": "0.1.248",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "workspace": [
-    "./extensions/ext-redis"
+    "./extensions/ext-redis",
+    "./extensions/ext-opentelemetry",
+    "./extensions/ext-node-compat"
   ],
   "exclude": [
     "npm/",
@@ -267,21 +269,12 @@ export default {
     "tailwindcss/plugin": "https://esm.sh/tailwindcss@4.2.2/plugin",
     "tailwindcss/defaultTheme": "https://esm.sh/tailwindcss@4.2.2/defaultTheme",
     "tailwindcss/colors": "https://esm.sh/tailwindcss@4.2.2/colors",
-    "@opentelemetry/api": "npm:@opentelemetry/api@1.9.0",
-    "@opentelemetry/core": "npm:@opentelemetry/core@2.6.0",
-    "@opentelemetry/context-async-hooks": "npm:@opentelemetry/context-async-hooks@2.6.0",
-    "@opentelemetry/sdk-trace-base": "npm:@opentelemetry/sdk-trace-base@2.6.0",
-    "@opentelemetry/exporter-trace-otlp-http": "npm:@opentelemetry/exporter-trace-otlp-http@0.213.0",
-    "@opentelemetry/resources": "npm:@opentelemetry/resources@2.6.0",
-    "@opentelemetry/semantic-conventions": "npm:@opentelemetry/semantic-conventions@1.40.0",
     "@babel/parser": "npm:@babel/parser@7.29.2",
     "@babel/traverse": "npm:@babel/traverse@7.29.0",
     "@babel/generator": "npm:@babel/generator@7.29.1",
     "@babel/types": "npm:@babel/types@7.29.0",
     "class-variance-authority": "npm:class-variance-authority@0.7.1",
-    "tailwind-merge": "npm:tailwind-merge@3.5.0",
-    "@kreuzberg/wasm": "npm:@kreuzberg/wasm@4.5.2",
-    "#kreuzberg-wasm-glue": "npm:@kreuzberg/wasm@4.5.2/dist/pkg/kreuzberg_wasm.js"
+    "tailwind-merge": "npm:tailwind-merge@3.5.0"
   },
   "compilerOptions": {
     "jsx": "react-jsx",

package/src/src/agent/durable.ts

@@ -142,6 +142,15 @@ export type ConversationRunAppendFailureOutcome =
   | "resumed"
   | "stopped"
   | "retry_scheduled";
+export type ConversationRunAppendExecutionOutcome =
+  | "resumed"
+  | "stopped"
+  | "retry_scheduled";
+export type ConversationRunBatchFlushOutcome =
+  | "flushed"
+  | "resumed"
+  | "stopped"
+  | "retry_scheduled";
 
 export const CreateConversationRunAcceptedSchema = z
   .object({
@@ -223,6 +232,8 @@ export type AppendConversationRunEventsResponse = z.infer<
   typeof AppendConversationRunEventsResponseSchema
 >;
 
+const DEFAULT_MAX_CONVERSATION_RUN_BATCH_BYTES = 512 * 1024;
+
 const ConversationRunErrorSchema = z.object({
   detail: z.string().min(1).optional(),
   error: z.string().min(1).optional(),
@@ -531,6 +542,232 @@ export async function recoverConversationRunAppendFailure(input: {
   };
 }
 
+export async function recoverConversationRunAppendExecution(input: {
+  error: unknown;
+  authToken: string;
+  apiUrl: string;
+  conversationId: string;
+  runId: string;
+  latestEventId: number;
+  latestExternalEventSequence: number;
+  remainingEvents: unknown[];
+  pendingEvents: unknown[];
+  cursorResyncsThisFlush: number;
+  consecutiveFailures: number;
+  maxCursorResyncsPerFlush: number;
+  abortSignal?: AbortSignal;
+}): Promise<
+  | {
+    outcome: "resumed";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+  }
+  | {
+    outcome: "stopped";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    disableReason?: "cursor_resyncs_exhausted" | "non_appendable" | "ignorable_append_rejection";
+  }
+  | {
+    outcome: "retry_scheduled";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+    errorMessage: string;
+  }
+> {
+  const recovered = await recoverConversationRunAppendFailure({
+    error: input.error,
+    authToken: input.authToken,
+    apiUrl: input.apiUrl,
+    conversationId: input.conversationId,
+    runId: input.runId,
+    latestEventId: input.latestEventId,
+    latestExternalEventSequence: input.latestExternalEventSequence,
+    cursorResyncsThisFlush: input.cursorResyncsThisFlush,
+    maxCursorResyncsPerFlush: input.maxCursorResyncsPerFlush,
+    abortSignal: input.abortSignal,
+  });
+
+  if (recovered.outcome === "resumed") {
+    return {
+      outcome: "resumed",
+      latestEventId: recovered.latestEventId,
+      latestExternalEventSequence: recovered.latestExternalEventSequence,
+      pendingEvents: [...input.remainingEvents, ...input.pendingEvents],
+      consecutiveFailures: 0,
+    };
+  }
+
+  if (recovered.outcome === "stopped") {
+    return {
+      outcome: "stopped",
+      latestEventId: recovered.latestEventId,
+      latestExternalEventSequence: recovered.latestExternalEventSequence,
+      ...(recovered.disableReason ? { disableReason: recovered.disableReason } : {}),
+    };
+  }
+
+  return {
+    outcome: "retry_scheduled",
+    latestEventId: recovered.latestEventId,
+    latestExternalEventSequence: recovered.latestExternalEventSequence,
+    pendingEvents: [...input.remainingEvents, ...input.pendingEvents],
+    consecutiveFailures: input.consecutiveFailures + 1,
+    errorMessage: recovered.errorMessage ?? "Conversation run append failed",
+  };
+}
+
+function getConversationRunEventJsonByteLength(event: unknown): number {
+  return new TextEncoder().encode(JSON.stringify(event)).byteLength;
+}
+
+function buildConversationRunEventBatches(input: {
+  events: unknown[];
+  maxEventsPerBatch: number;
+  maxBatchPayloadBytes?: number;
+}): unknown[][] {
+  const maxBatchPayloadBytes = input.maxBatchPayloadBytes ??
+    DEFAULT_MAX_CONVERSATION_RUN_BATCH_BYTES;
+  const batches: unknown[][] = [];
+  let currentBatch: unknown[] = [];
+  let currentBatchBytes = 0;
+
+  for (const event of input.events) {
+    const eventBytes = getConversationRunEventJsonByteLength(event);
+
+    if (
+      currentBatch.length > 0 &&
+      (currentBatch.length >= input.maxEventsPerBatch ||
+        currentBatchBytes + eventBytes > maxBatchPayloadBytes)
+    ) {
+      batches.push(currentBatch);
+      currentBatch = [];
+      currentBatchBytes = 0;
+    }
+
+    currentBatch.push(event);
+    currentBatchBytes += eventBytes;
+  }
+
+  if (currentBatch.length > 0) {
+    batches.push(currentBatch);
+  }
+
+  return batches;
+}
+
+export async function flushConversationRunEventBatches(input: {
+  authToken: string;
+  apiUrl: string;
+  conversationId: string;
+  runId: string;
+  latestEventId: number;
+  latestExternalEventSequence: number;
+  events: unknown[];
+  pendingEvents?: unknown[];
+  maxEventsPerBatch: number;
+  maxBatchPayloadBytes?: number;
+  cursorResyncsThisFlush?: number;
+  consecutiveFailures?: number;
+  maxCursorResyncsPerFlush: number;
+  abortSignal?: AbortSignal;
+}): Promise<
+  | {
+    outcome: "flushed";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+  }
+  | {
+    outcome: "resumed" | "retry_scheduled";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    pendingEvents: unknown[];
+    consecutiveFailures: number;
+    errorMessage?: string;
+  }
+  | {
+    outcome: "stopped";
+    latestEventId: number;
+    latestExternalEventSequence: number;
+    disableReason?: "cursor_resyncs_exhausted" | "non_appendable" | "ignorable_append_rejection";
+  }
+> {
+  const batches = buildConversationRunEventBatches({
+    events: input.events,
+    maxEventsPerBatch: input.maxEventsPerBatch,
+    maxBatchPayloadBytes: input.maxBatchPayloadBytes,
+  });
+
+  let latestEventId = input.latestEventId;
+  let latestExternalEventSequence = input.latestExternalEventSequence;
+
+  for (let batchIndex = 0; batchIndex < batches.length; batchIndex += 1) {
+    const batch = batches[batchIndex];
+    if (!batch) {
+      continue;
+    }
+    try {
+      const response = await appendConversationRunEvents({
+        authToken: input.authToken,
+        apiUrl: input.apiUrl,
+        conversationId: input.conversationId,
+        runId: input.runId,
+        expectedPreviousExternalEventSequence: latestExternalEventSequence,
+        events: batch,
+        abortSignal: input.abortSignal,
+      });
+      latestEventId = response.latestEventId;
+      latestExternalEventSequence = response.latestExternalEventSequence;
+    } catch (error) {
+      const recovered = await recoverConversationRunAppendExecution({
+        error,
+        authToken: input.authToken,
+        apiUrl: input.apiUrl,
+        conversationId: input.conversationId,
+        runId: input.runId,
+        latestEventId,
+        latestExternalEventSequence,
+        remainingEvents: batches.slice(batchIndex).flat(),
+        pendingEvents: input.pendingEvents ?? [],
+        cursorResyncsThisFlush: input.cursorResyncsThisFlush ?? 0,
+        consecutiveFailures: input.consecutiveFailures ?? 0,
+        maxCursorResyncsPerFlush: input.maxCursorResyncsPerFlush,
+        abortSignal: input.abortSignal,
+      });
+
+      if (recovered.outcome === "stopped") {
+        return {
+          outcome: "stopped",
+          latestEventId: recovered.latestEventId,
+          latestExternalEventSequence: recovered.latestExternalEventSequence,
+          ...(recovered.disableReason ? { disableReason: recovered.disableReason } : {}),
+        };
+      }
+
+      return {
+        outcome: recovered.outcome,
+        latestEventId: recovered.latestEventId,
+        latestExternalEventSequence: recovered.latestExternalEventSequence,
+        pendingEvents: recovered.pendingEvents,
+        consecutiveFailures: recovered.consecutiveFailures,
+        ...(recovered.outcome === "retry_scheduled"
+          ? { errorMessage: recovered.errorMessage }
+          : {}),
+      };
+    }
+  }
+
+  return {
+    outcome: "flushed",
+    latestEventId,
+    latestExternalEventSequence,
+  };
+}
+
 async function waitForConversationRunPoll(
   ms: number,
   abortSignal?: AbortSignal,

package/src/src/agent/index.ts

@@ -220,8 +220,10 @@ export {
   CompleteConversationRunResponseSchema,
   type ConversationAgentRunUsage,
   type ConversationRunAppendCursorResyncResult,
+  type ConversationRunAppendExecutionOutcome,
   type ConversationRunAppendFailureOutcome,
   type ConversationRunAppendRecoveryOutcome,
+  type ConversationRunBatchFlushOutcome,
   type ConversationRunProjection,
   ConversationRunProjectionSchema,
   ConversationRunStatusSchema,
@@ -230,6 +232,7 @@ export {
   ConversationRunTerminalStateError,
   createConversationAgentRun,
   finalizeConversationAgentRun,
+  flushConversationRunEventBatches,
   getConversationRun,
   isActiveConversationRunStatus,
   isAppendableConversationRunProjection,
@@ -237,6 +240,7 @@ export {
   isIgnorableConversationRunAppendError,
   monitorConversationRunStatus,
   parseAppendConversationRunEventsErrorBody,
+  recoverConversationRunAppendExecution,
   recoverConversationRunAppendFailure,
   recoverConversationRunCursorMismatch,
   resolveConversationRunTargets,

package/src/src/cache/backends/factory.ts

@@ -1,7 +1,7 @@
 import { logger as baseLogger } from "../../utils/index.js";
 import { withSpan } from "../../observability/tracing/otlp-setup.js";
 import { SpanNames } from "../../observability/tracing/span-names.js";
-import type { Span } from "@opentelemetry/api";
+import type { Span } from "../../observability/tracing/api-shim.js";
 import { getEnv } from "../../platform/compat/process.js";
 import type { CacheBackend } from "../types.js";
 import {

package/src/src/cache/backends/redis.ts

@@ -1,7 +1,7 @@
 import { logger as baseLogger } from "../../utils/index.js";
 import { withSpan } from "../../observability/tracing/otlp-setup.js";
 import { SpanNames } from "../../observability/tracing/span-names.js";
-import type { Span } from "@opentelemetry/api";
+import type { Span } from "../../observability/tracing/api-shim.js";
 import {
   getRedisClient,
   isRedisConfigured,