veryfront 0.1.48 → 0.1.49

package/esm/src/server/runtime-handler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAwF7D,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAkbnF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAwF7D,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAuanF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}

package/esm/src/server/runtime-handler/index.js

@@ -210,31 +210,24 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                 // proceeding would cause cryptic 500s deep in the rendering pipeline.
                 if (isProxyMode && !isLightweightPath(url.pathname) && !isWebSocketPath(url.pathname)) {
                     const token = req.headers.get("x-token");
-                    if (!headers.projectSlug) {
-                        logger.error("Missing required x-project-slug header in proxy mode", {
-                            pathname: url.pathname,
-                            domain,
-                            host: req.headers.get("host"),
-                            forwardedHost: req.headers.get("x-forwarded-host"),
-                        });
-                        endContentMetrics({
-                            requestId: lifecycle.requestId,
-                            pathname: url.pathname,
-                            mode: "proxy",
-                        });
-                        completeRequestTracking(lifecycle.requestId, 502, false);
-                        completeIsolatedRequest(headers.projectSlug, lifecycle.shouldCheckIsolation, false);
-                        endRequestTracing(spanInfo.span, 502);
-                        return new dntShim.Response(JSON.stringify({
+                    const missingHeader = !headers.projectSlug
+                        ? {
                             error: "Missing project context",
                             detail: "x-project-slug header is required in proxy mode",
-                        }), { status: 502, headers: { "Content-Type": "application/json" } });
-                    }
-                    if (!token) {
-                        logger.error("Missing required x-token header in proxy mode", {
+                        }
+                        : !token
+                            ? {
+                                error: "Missing authentication context",
+                                detail: "x-token header is required in proxy mode",
+                            }
+                            : null;
+                    if (missingHeader) {
+                        logger.error(missingHeader.detail, {
                             pathname: url.pathname,
                             domain,
                             projectSlug: headers.projectSlug,
+                            host: req.headers.get("host"),
+                            forwardedHost: req.headers.get("x-forwarded-host"),
                         });
                         endContentMetrics({
                             requestId: lifecycle.requestId,
@@ -244,10 +237,7 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                         completeRequestTracking(lifecycle.requestId, 502, false);
                         completeIsolatedRequest(headers.projectSlug, lifecycle.shouldCheckIsolation, false);
                         endRequestTracing(spanInfo.span, 502);
-                        return new dntShim.Response(JSON.stringify({
-                            error: "Missing authentication context",
-                            detail: "x-token header is required in proxy mode",
-                        }), { status: 502, headers: { "Content-Type": "application/json" } });
+                        return new dntShim.Response(JSON.stringify(missingHeader), { status: 502, headers: { "Content-Type": "application/json" } });
                     }
                 }
                 const executeHandler = async () => {

package/esm/src/server/shared/renderer/memory/pressure.d.ts

@@ -13,12 +13,5 @@
  *
  * @module server/shared/renderer/memory/pressure
  */
-export type MemoryPressureLevel = "normal" | "warning" | "high" | "critical";
-export declare function getMemoryPressure(): {
-    level: MemoryPressureLevel;
-    heapUsedPercent: number;
-};
 export declare function shouldRejectDueToMemory(): boolean;
-export declare function getCacheTTLMultiplier(): number;
-export declare function shouldEvictAggressively(): boolean;
 //# sourceMappingURL=pressure.d.ts.map

package/esm/src/server/shared/renderer/memory/pressure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pressure.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/shared/renderer/memory/pressure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;AAqB7E,wBAAgB,iBAAiB,IAAI;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAQ3F;AAED,wBAAgB,uBAAuB,IAAI,OAAO,CAMjD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAM9C;AAED,wBAAgB,uBAAuB,IAAI,OAAO,CAGjD"}
+{"version":3,"file":"pressure.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/shared/renderer/memory/pressure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwCH,wBAAgB,uBAAuB,IAAI,OAAO,CAMjD"}

package/esm/src/server/shared/renderer/memory/pressure.js

@@ -34,7 +34,7 @@ const THRESHOLDS = {
     HIGH: parseEnvThreshold("MEMORY_HIGH_THRESHOLD", 75),
     CRITICAL: parseEnvThreshold("MEMORY_CRITICAL_THRESHOLD", 80),
 };
-export function getMemoryPressure() {
+function getMemoryPressure() {
     const { heapUsedPercent } = getHeapStats();
     if (heapUsedPercent >= THRESHOLDS.CRITICAL)
         return { level: "critical", heapUsedPercent };
@@ -51,15 +51,3 @@ export function shouldRejectDueToMemory() {
     rendererLog.warn("Rejecting request - memory critical", { heapUsedPercent });
     return true;
 }
-export function getCacheTTLMultiplier() {
-    const { level } = getMemoryPressure();
-    if (level === "warning")
-        return 0.5;
-    if (level === "high" || level === "critical")
-        return 0.25;
-    return 1.0;
-}
-export function shouldEvictAggressively() {
-    const { level } = getMemoryPressure();
-    return level === "high" || level === "critical";
-}

package/esm/src/server/utils/domain-lookup.d.ts

@@ -15,10 +15,6 @@ export interface DomainLookupConfig {
 }
 export declare function lookupProjectByDomain(domain: string, config: DomainLookupConfig): Promise<DomainLookupResult | null>;
 export declare function clearDomainCache(): void;
-export declare function getDomainCacheStats(): {
-    size: number;
-    maxSize: number;
-};
 /**
  * Inject a CacheRepository for testing or distributed caching.
  * Call with null to restore default Map-based caching.

package/esm/src/server/utils/domain-lookup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domain-lookup.d.ts","sourceRoot":"","sources":["../../../../src/src/server/utils/domain-lookup.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAMnE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAmED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA4BpC;AA4FD,wBAAgB,gBAAgB,IAAI,IAAI,CAOvC;AAED,wBAAgB,mBAAmB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAEvE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAErF;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,kBAAkB,GAAG,IAAI,GAChC,SAAS,GAAG,YAAY,GAAG,SAAS,CAatC"}
+{"version":3,"file":"domain-lookup.d.ts","sourceRoot":"","sources":["../../../../src/src/server/utils/domain-lookup.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAMnE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAmED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA4BpC;AA4FD,wBAAgB,gBAAgB,IAAI,IAAI,CAOvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAErF;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,kBAAkB,GAAG,IAAI,GAChC,SAAS,GAAG,YAAY,GAAG,SAAS,CAatC"}

package/esm/src/server/utils/domain-lookup.js

@@ -144,9 +144,6 @@ export function clearDomainCache() {
         void injectedCacheRepo.clear();
     logger.debug("Cache cleared");
 }
-export function getDomainCacheStats() {
-    return { size: domainCache.size, maxSize: DOMAIN_CACHE_MAX_ENTRIES };
-}
 /**
  * Inject a CacheRepository for testing or distributed caching.
  * Call with null to restore default Map-based caching.

package/esm/src/skill/allowed-tools.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Allowed-Tools Enforcement
+ *
+ * Dual-layer enforcement for skill tool access restrictions.
+ * Layer 1: Filter tool definitions before sending to model (planning-time)
+ * Layer 2: Check individual tool calls at execution time
+ *
+ * @module
+ */
+/**
+ * Check if a tool name matches a single allowed-tools pattern.
+ *
+ * Supports:
+ * - Exact match: "Read" matches "Read"
+ * - Prefix wildcard: "api:*" matches "api:list-users"
+ */
+export declare function matchesAllowedTool(toolName: string, pattern: string): boolean;
+/** Minimal tool definition shape for filtering */
+export interface FilterableToolDefinition {
+    name: string;
+    description: string;
+    parameters: unknown;
+}
+/**
+ * Layer 1: Filter tool definitions before sending to model.
+ *
+ * Removes tools not in the allowed list. Always-allowed tools
+ * (skill system tools) pass through regardless.
+ *
+ * @param tools - Full list of tool definitions
+ * @param allowedTools - Allowed tool patterns, or undefined for no restrictions
+ * @returns Filtered tool definitions
+ */
+export declare function filterToolsForSkill<T extends FilterableToolDefinition>(tools: T[], allowedTools: string[] | undefined): T[];
+/**
+ * Layer 2: Check if a specific tool call is allowed at execution time.
+ *
+ * @param toolName - Name of the tool being called
+ * @param allowedTools - Allowed tool patterns, or undefined for no restrictions
+ * @returns true if the tool call is allowed
+ */
+export declare function isToolAllowedBySkill(toolName: string, allowedTools: string[] | undefined): boolean;
+/**
+ * Validate allowed-tool patterns at parse time.
+ *
+ * Ensures each pattern matches the expected format.
+ * Rejects unsupported patterns with a descriptive error (fail closed).
+ *
+ * @param patterns - Array of tool patterns to validate
+ * @returns Validated patterns (same array if all valid)
+ * @throws If any pattern is invalid
+ */
+export declare function validateAllowedToolPatterns(patterns: string[]): string[];
+//# sourceMappingURL=allowed-tools.d.ts.map

package/esm/src/skill/allowed-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-tools.d.ts","sourceRoot":"","sources":["../../../src/src/skill/allowed-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAc7E;AAED,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,wBAAwB,EACpE,KAAK,EAAE,CAAC,EAAE,EACV,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,GACjC,CAAC,EAAE,CASL;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EAAE,GAAG,SAAS,GACjC,OAAO,CAIT;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAaxE"}

package/esm/src/skill/allowed-tools.js

@@ -0,0 +1,87 @@
+/**
+ * Allowed-Tools Enforcement
+ *
+ * Dual-layer enforcement for skill tool access restrictions.
+ * Layer 1: Filter tool definitions before sending to model (planning-time)
+ * Layer 2: Check individual tool calls at execution time
+ *
+ * @module
+ */
+import { SKILL_ALLOWED_TOOL_PATTERN_REGEX, SKILL_TOOL_IDS } from "./types.js";
+import { createError, toError } from "../errors/veryfront-error.js";
+/**
+ * Check if a tool name matches a single allowed-tools pattern.
+ *
+ * Supports:
+ * - Exact match: "Read" matches "Read"
+ * - Prefix wildcard: "api:*" matches "api:list-users"
+ */
+export function matchesAllowedTool(toolName, pattern) {
+    // Invalid patterns always fail (fail closed)
+    if (!SKILL_ALLOWED_TOOL_PATTERN_REGEX.test(pattern)) {
+        return false;
+    }
+    // Prefix wildcard
+    if (pattern.endsWith(":*")) {
+        const prefix = pattern.slice(0, -1); // keep the colon: "api:"
+        return toolName.startsWith(prefix);
+    }
+    // Exact match
+    return toolName === pattern;
+}
+/**
+ * Layer 1: Filter tool definitions before sending to model.
+ *
+ * Removes tools not in the allowed list. Always-allowed tools
+ * (skill system tools) pass through regardless.
+ *
+ * @param tools - Full list of tool definitions
+ * @param allowedTools - Allowed tool patterns, or undefined for no restrictions
+ * @returns Filtered tool definitions
+ */
+export function filterToolsForSkill(tools, allowedTools) {
+    if (allowedTools === undefined) {
+        return tools;
+    }
+    return tools.filter((tool) => {
+        if (SKILL_TOOL_IDS.has(tool.name))
+            return true;
+        return allowedTools.some((pattern) => matchesAllowedTool(tool.name, pattern));
+    });
+}
+/**
+ * Layer 2: Check if a specific tool call is allowed at execution time.
+ *
+ * @param toolName - Name of the tool being called
+ * @param allowedTools - Allowed tool patterns, or undefined for no restrictions
+ * @returns true if the tool call is allowed
+ */
+export function isToolAllowedBySkill(toolName, allowedTools) {
+    if (allowedTools === undefined)
+        return true;
+    if (SKILL_TOOL_IDS.has(toolName))
+        return true;
+    return allowedTools.some((pattern) => matchesAllowedTool(toolName, pattern));
+}
+/**
+ * Validate allowed-tool patterns at parse time.
+ *
+ * Ensures each pattern matches the expected format.
+ * Rejects unsupported patterns with a descriptive error (fail closed).
+ *
+ * @param patterns - Array of tool patterns to validate
+ * @returns Validated patterns (same array if all valid)
+ * @throws If any pattern is invalid
+ */
+export function validateAllowedToolPatterns(patterns) {
+    for (const pattern of patterns) {
+        if (!SKILL_ALLOWED_TOOL_PATTERN_REGEX.test(pattern)) {
+            throw toError(createError({
+                type: "agent",
+                message: `Invalid allowed-tools pattern "${pattern}". ` +
+                    `Only exact tool IDs (e.g. "Read") and prefix wildcards (e.g. "api:*") are supported.`,
+            }));
+        }
+    }
+    return patterns;
+}

package/esm/src/skill/executor.d.ts

@@ -0,0 +1,28 @@
+import type { SkillScriptExecutor, SkillScriptExecutorInput, SkillScriptResult } from "./types.js";
+/**
+ * Detect the runtime command for a script based on file extension.
+ */
+export declare function detectRuntime(scriptPath: string): {
+    command: string;
+    args: string[];
+};
+/**
+ * Local script executor using runCommand() from the compat layer.
+ */
+export declare class LocalScriptExecutor implements SkillScriptExecutor {
+    execute(input: SkillScriptExecutorInput): Promise<SkillScriptResult>;
+}
+/**
+ * Cloud script executor using sandbox.
+ * Requires SANDBOX_AUTH_TOKEN environment variable.
+ */
+export declare class CloudScriptExecutor implements SkillScriptExecutor {
+    execute(input: SkillScriptExecutorInput): Promise<SkillScriptResult>;
+}
+/**
+ * Get the appropriate script executor.
+ * Checks SANDBOX_AUTH_TOKEN on every call so request-scoped env overlays
+ * (e.g. project-env AsyncLocalStorage) are respected.
+ */
+export declare function getSkillScriptExecutor(): SkillScriptExecutor;
+//# sourceMappingURL=executor.d.ts.map

package/esm/src/skill/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/src/skill/executor.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAoEnG;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAqBrF;AAED;;GAEG;AACH,qBAAa,mBAAoB,YAAW,mBAAmB;IACvD,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAsB3E;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,mBAAmB;IACvD,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA+D3E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,mBAAmB,CAE5D"}

package/esm/src/skill/executor.js

@@ -0,0 +1,187 @@
+/**
+ * Skill Script Executor
+ *
+ * Executes skill scripts using cross-runtime subprocess execution.
+ *
+ * @module
+ */
+import * as dntShim from "../../_dnt.shims.js";
+import { getEnv, runCommand } from "../platform/compat/process.js";
+import { isDeno } from "../platform/compat/runtime.js";
+import { extname } from "../platform/compat/path/index.js";
+import { readTextFile } from "../platform/compat/fs.js";
+import { createError, toError } from "../errors/veryfront-error.js";
+const DEFAULT_SCRIPT_TIMEOUT_MS = 60_000;
+const MAX_SCRIPT_TIMEOUT_MS = 300_000;
+const TIMEOUT_EXIT_CODE = 124;
+const ENV_KEY_REGEX = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const TIMEOUT_SENTINEL = Symbol("skill-script-timeout");
+function resolveTimeoutMs(timeoutMs) {
+    if (timeoutMs === undefined || !Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+        return DEFAULT_SCRIPT_TIMEOUT_MS;
+    }
+    return Math.min(Math.floor(timeoutMs), MAX_SCRIPT_TIMEOUT_MS);
+}
+async function withTimeout(promise, timeoutMs) {
+    let timeoutId;
+    const timeoutPromise = new Promise((resolve) => {
+        timeoutId = dntShim.setTimeout(() => resolve(TIMEOUT_SENTINEL), timeoutMs);
+    });
+    try {
+        return await Promise.race([promise, timeoutPromise]);
+    }
+    finally {
+        if (timeoutId)
+            clearTimeout(timeoutId);
+    }
+}
+function timeoutResult(timeoutMs) {
+    return {
+        stdout: "",
+        stderr: `Script execution timed out after ${timeoutMs}ms`,
+        exitCode: TIMEOUT_EXIT_CODE,
+    };
+}
+function shellEscapeArg(value) {
+    return `'${value.replaceAll("'", "'\"'\"'")}'`;
+}
+function buildShellCommand(parts) {
+    return parts.map(shellEscapeArg).join(" ");
+}
+function formatEnvAssignments(env) {
+    if (!env)
+        return [];
+    return Object.entries(env).map(([key, value]) => {
+        if (!ENV_KEY_REGEX.test(key)) {
+            throw toError(createError({
+                type: "agent",
+                message: `Invalid environment variable name: "${key}"`,
+            }));
+        }
+        return `${key}=${value}`;
+    });
+}
+function createSandboxScriptPath(scriptPath) {
+    const ext = extname(scriptPath) || ".sh";
+    const suffix = Math.random().toString(36).slice(2, 10);
+    return `/tmp/veryfront-skill-script-${Date.now()}-${suffix}${ext}`;
+}
+/**
+ * Detect the runtime command for a script based on file extension.
+ */
+export function detectRuntime(scriptPath) {
+    const ext = extname(scriptPath).toLowerCase();
+    switch (ext) {
+        case ".py":
+            return { command: "python3", args: [scriptPath] };
+        case ".sh":
+            return { command: "bash", args: [scriptPath] };
+        case ".js":
+            return { command: "node", args: [scriptPath] };
+        case ".ts":
+            if (isDeno) {
+                return {
+                    command: "deno",
+                    args: ["run", "--allow-read", "--allow-env", "--allow-net", "--allow-write", scriptPath],
+                };
+            }
+            return { command: "npx", args: ["tsx", scriptPath] };
+        default:
+            return { command: scriptPath, args: [] };
+    }
+}
+/**
+ * Local script executor using runCommand() from the compat layer.
+ */
+export class LocalScriptExecutor {
+    async execute(input) {
+        const timeoutMs = resolveTimeoutMs(input.timeoutMs);
+        const { command, args: runtimeArgs } = detectRuntime(input.scriptPath);
+        const allArgs = [...runtimeArgs, ...(input.args ?? [])];
+        // Remove the script path from args if it's already the command
+        const finalArgs = command === input.scriptPath ? (input.args ?? []) : allArgs;
+        const result = await runCommand(command, {
+            args: finalArgs,
+            cwd: input.cwd,
+            env: input.env,
+            capture: true,
+            timeoutMs,
+        });
+        return {
+            stdout: result.stdout ?? "",
+            stderr: result.stderr ?? "",
+            exitCode: result.code,
+        };
+    }
+}
+/**
+ * Cloud script executor using sandbox.
+ * Requires SANDBOX_AUTH_TOKEN environment variable.
+ */
+export class CloudScriptExecutor {
+    async execute(input) {
+        const timeoutMs = resolveTimeoutMs(input.timeoutMs);
+        // NOTE: In SSR contexts, getEnv() reads through the project-env overlay
+        // (AsyncLocalStorage-backed). If the token is set at host level only,
+        // the overlay may not surface it. Ensure SANDBOX_AUTH_TOKEN is available
+        // in the request-scoped environment when running under SSR.
+        const authToken = getEnv("SANDBOX_AUTH_TOKEN");
+        if (!authToken) {
+            throw toError(createError({
+                type: "agent",
+                message: "Cloud script execution requires SANDBOX_AUTH_TOKEN environment variable",
+            }));
+        }
+        // Lazy import to avoid bundling sandbox in non-cloud environments
+        const { Sandbox } = await import("../sandbox/index.js");
+        const sandbox = await Sandbox.create({ authToken });
+        try {
+            const sandboxScriptPath = createSandboxScriptPath(input.scriptPath);
+            const scriptContent = input.scriptContent ?? await readTextFile(input.scriptPath);
+            await sandbox.writeFiles([{ path: sandboxScriptPath, content: scriptContent }]);
+            await sandbox.executeCommand(buildShellCommand(["chmod", "+x", sandboxScriptPath]));
+            const { command, args: runtimeArgs } = detectRuntime(sandboxScriptPath);
+            const allArgs = [...runtimeArgs, ...(input.args ?? [])];
+            const finalArgs = command === sandboxScriptPath ? (input.args ?? []) : allArgs;
+            const envAssignments = formatEnvAssignments(input.env);
+            const commandParts = envAssignments.length > 0
+                ? ["env", ...envAssignments, command, ...finalArgs]
+                : [command, ...finalArgs];
+            const cmdString = buildShellCommand(commandParts);
+            const commandPromise = sandbox.executeCommand(cmdString);
+            const result = await withTimeout(commandPromise, timeoutMs);
+            if (result === TIMEOUT_SENTINEL) {
+                // Kill any running processes before returning — withTimeout only
+                // races the timer, it doesn't terminate the sandbox command.
+                try {
+                    await sandbox.executeCommand("kill -9 -1 2>/dev/null || true");
+                }
+                catch {
+                    // Best-effort kill; sandbox.close() in finally will clean up.
+                }
+                return timeoutResult(timeoutMs);
+            }
+            return {
+                stdout: result.stdout,
+                stderr: result.stderr,
+                exitCode: result.exitCode,
+            };
+        }
+        finally {
+            try {
+                await sandbox.close();
+            }
+            catch {
+                // Best-effort cleanup.
+            }
+        }
+    }
+}
+/**
+ * Get the appropriate script executor.
+ * Checks SANDBOX_AUTH_TOKEN on every call so request-scoped env overlays
+ * (e.g. project-env AsyncLocalStorage) are respected.
+ */
+export function getSkillScriptExecutor() {
+    return getEnv("SANDBOX_AUTH_TOKEN") ? new CloudScriptExecutor() : new LocalScriptExecutor();
+}

package/esm/src/skill/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Agent Skills
+ *
+ * Public API for the agent skills system.
+ * Skills are project-level capabilities defined as SKILL.md files
+ * following the agentskills.io specification.
+ *
+ * @module
+ */
+export type { ActiveSkillContext, Skill, SkillContent, SkillMetadata, SkillScriptExecutor, SkillScriptExecutorInput, SkillScriptResult, } from "./types.js";
+export { SKILL_ALLOWED_TOOL_PATTERN_REGEX, SKILL_ASSETS_DIR, SKILL_DESCRIPTION_MAX_LENGTH, SKILL_MD_FILENAME, SKILL_NAME_REGEX, SKILL_REFERENCES_DIR, SKILL_SCRIPTS_DIR, SKILL_TOOL_IDS, } from "./types.js";
+export { getAllSkills, getSkill, registerSkill, skillRegistry } from "./registry.js";
+export { parseSkillFrontmatter, validateSkillMetadata } from "./parser.js";
+export { listSkillSubdir, validateSkillPath } from "./path-safety.js";
+export { createExecuteSkillScriptTool, createLoadSkillReferenceTool, createLoadSkillTool, } from "./tools.js";
+export { getSkillScriptExecutor } from "./executor.js";
+export { buildSkillManifestPrompt } from "./prompt-augmentation.js";
+export { filterToolsForSkill, isToolAllowedBySkill, validateAllowedToolPatterns, } from "./allowed-tools.js";
+//# sourceMappingURL=index.d.ts.map

package/esm/src/skill/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/src/skill/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EACV,kBAAkB,EAClB,KAAK,EACL,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gCAAgC,EAChC,gBAAgB,EAChB,4BAA4B,EAC5B,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGrF,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAG3E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGtE,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAGpE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC"}

package/esm/src/skill/index.js

@@ -0,0 +1,24 @@
+/**
+ * Agent Skills
+ *
+ * Public API for the agent skills system.
+ * Skills are project-level capabilities defined as SKILL.md files
+ * following the agentskills.io specification.
+ *
+ * @module
+ */
+export { SKILL_ALLOWED_TOOL_PATTERN_REGEX, SKILL_ASSETS_DIR, SKILL_DESCRIPTION_MAX_LENGTH, SKILL_MD_FILENAME, SKILL_NAME_REGEX, SKILL_REFERENCES_DIR, SKILL_SCRIPTS_DIR, SKILL_TOOL_IDS, } from "./types.js";
+// Registry
+export { getAllSkills, getSkill, registerSkill, skillRegistry } from "./registry.js";
+// Parser
+export { parseSkillFrontmatter, validateSkillMetadata } from "./parser.js";
+// Path Safety
+export { listSkillSubdir, validateSkillPath } from "./path-safety.js";
+// Tools
+export { createExecuteSkillScriptTool, createLoadSkillReferenceTool, createLoadSkillTool, } from "./tools.js";
+// Executor
+export { getSkillScriptExecutor } from "./executor.js";
+// Prompt
+export { buildSkillManifestPrompt } from "./prompt-augmentation.js";
+// Allowed-Tools
+export { filterToolsForSkill, isToolAllowedBySkill, validateAllowedToolPatterns, } from "./allowed-tools.js";

package/esm/src/skill/parser.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Skill frontmatter parser
+ *
+ * Parses SKILL.md files with YAML frontmatter.
+ * Primary parser: gray-matter shim (#std/front-matter/yaml.ts)
+ * Fallback: regex + line-by-line parser
+ *
+ * @module
+ */
+import { type SkillMetadata } from "./types.js";
+/** Result of parsing a SKILL.md file */
+export interface ParsedSkillContent {
+    frontmatter: Record<string, unknown>;
+    body: string;
+}
+/**
+ * Parse SKILL.md content into frontmatter + body.
+ *
+ * Uses gray-matter shim as primary parser with a regex fallback
+ * for environments where gray-matter is not available.
+ */
+export declare function parseSkillFrontmatter(content: string): Promise<ParsedSkillContent>;
+/**
+ * Validate and normalize parsed frontmatter into SkillMetadata.
+ *
+ * @param frontmatter - Parsed frontmatter object
+ * @param directoryName - Directory name used as fallback for skill name
+ */
+export declare function validateSkillMetadata(frontmatter: Record<string, unknown>, directoryName: string): SkillMetadata;
+//# sourceMappingURL=parser.d.ts.map

package/esm/src/skill/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../../src/src/skill/parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AAEpB,wCAAwC;AACxC,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAYxF;AA+BD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,aAAa,EAAE,MAAM,GACpB,aAAa,CAiDf"}