veryfront 0.1.498 → 0.1.500

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.498",
+  "version": "0.1.500",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -185,6 +185,10 @@
       "import": "./esm/src/extensions/interfaces/index.js",
       "types": "./esm/src/extensions/interfaces/index.d.ts"
     },
+    "./extensions/llm": {
+      "import": "./esm/src/extensions/llm/index.js",
+      "types": "./esm/src/extensions/llm/index.d.ts"
+    },
     "./testing": {
       "import": "./esm/src/testing/index.js",
       "types": "./esm/src/testing/index.d.ts"
@@ -259,6 +263,7 @@
     "@types/hast": "3.0.3",
     "@types/mdast": "4.0.3",
     "@types/unist": "3.0.2",
+    "bash-tool": "^1.3.16",
     "class-variance-authority": "0.7.1",
     "es-module-lexer": "2.0.0",
     "esbuild": "0.27.4",

package/src/cli/auth/provider-store.ts

@@ -1,5 +1,5 @@
 /**
- * Provider-namespaced token storage for AI provider API keys.
+ * Provider-namespaced token storage for LLM provider API keys.
  *
  * Stores API keys as plaintext with 0600 permissions in
  * ~/.config/veryfront/tokens/<provider>. Same security model

package/src/cli/commands/doctor/ai-checks.ts

@@ -46,7 +46,7 @@ export async function checkAIConfig(projectDir: string): Promise<DiagnosticResul
     results.push({
       status: "warn",
       name: "AI Providers",
-      message: "No AI providers configured",
+      message: "No LLM providers configured",
     });
     return results;
   }

package/src/cli/skills/core-skills.ts

@@ -75,7 +75,7 @@ Create a new Veryfront application with proper structure and conventions.
         provider: {
           type: "string",
           default: "anthropic",
-          description: "AI provider to configure",
+          description: "LLM provider to configure",
         },
       },
     },

package/src/deno.js

@@ -1,17 +1,17 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.498",
+  "version": "0.1.500",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "workspace": [
     "./cli",
-    "./extensions/ext-anthropic",
+    "./extensions/ext-llm-anthropic",
+    "./extensions/ext-llm-google",
+    "./extensions/ext-llm-openai",
     "./extensions/ext-babel",
-    "./extensions/ext-google",
     "./extensions/ext-jwt",
     "./extensions/ext-mdx",
     "./extensions/ext-node-compat",
-    "./extensions/ext-openai",
     "./extensions/ext-opentelemetry",
     "./extensions/ext-esbuild",
     "./extensions/ext-redis",
@@ -70,6 +70,7 @@ export default {
     "./embedding": "./src/embedding/index.ts",
     "./extensions": "./src/extensions/index.ts",
     "./extensions/interfaces": "./src/extensions/interfaces/index.ts",
+    "./extensions/llm": "./src/extensions/llm/index.ts",
     "./testing": "./src/testing/index.ts",
     "./testing/assert": "./src/testing/assert.ts",
     "./testing/bdd": "./src/testing/bdd.ts",
@@ -274,7 +275,9 @@ export default {
     "veryfront/chat/conversation": "./src/chat/conversation.ts",
     "veryfront/chat/message-prep": "./src/chat/message-prep.ts",
     "veryfront/chat/final-step-fallback": "./src/chat/final-step-fallback.ts",
-    "veryfront/chat/provider-errors": "./src/chat/provider-errors.ts"
+    "veryfront/chat/provider-errors": "./src/chat/provider-errors.ts",
+    "bash-tool": "npm:bash-tool@1.3.16",
+    "just-bash": "npm:just-bash@2.14.5"
   },
   "compilerOptions": {
     "jsx": "react-jsx",
@@ -372,6 +375,7 @@ export default {
     "start-split": "deno task generate && deno run --allow-all cli/main.ts serve --split",
     "start-split:binary": "deno task generate && deno run --allow-all cli/main.ts serve --split --binary",
     "sbom": "deno run --allow-read --allow-write scripts/build/generate-sbom.ts",
+    "submit-deps": "deno run --allow-read --allow-env --allow-net=api.github.com scripts/security/submit-dependency-snapshot.ts",
     "audit": "deno run --allow-read --allow-run --allow-write scripts/security/audit-npm.ts"
   },
   "lint": {

package/src/extensions/{ext-anthropic → ext-llm-anthropic}/src/anthropic-provider.ts

@@ -1,14 +1,14 @@
 /**
- * Anthropic provider — implements the {@link AIProvider} contract for
+ * Anthropic provider — implements the {@link LLMProvider} contract for
  * Anthropic's Messages API (direct + via Veryfront Cloud / Bedrock-compatible
  * proxies).
  *
  * Ported from `src/provider/runtime-loader.ts` as part of PR 12.
  *
- * @module extensions/ext-anthropic/anthropic-provider
+ * @module extensions/ext-llm-anthropic/anthropic-provider
  */
 
-import type { AIProvider, AIProviderConfig } from "../../../src/extensions/interfaces/index.js";
+import type { LLMProvider, LLMProviderConfig } from "../../../src/extensions/llm/index.js";
 import type { ModelRuntime } from "../../../src/provider/types.js";
 import {
   buildProviderError,
@@ -1207,10 +1207,10 @@ export function createAnthropicModelRuntime(
   };
 }
 
-export class AnthropicProvider implements AIProvider {
+export class AnthropicProvider implements LLMProvider {
   readonly id = "anthropic";
 
-  createModel(modelId: string, config: AIProviderConfig): ModelRuntime {
+  createModel(modelId: string, config: LLMProviderConfig): ModelRuntime {
     return createAnthropicModelRuntime(
       {
         apiKey: config.credential,

package/src/extensions/ext-llm-anthropic/src/index.ts

@@ -0,0 +1,34 @@
+/**
+ * @veryfront/ext-llm-anthropic — registers the Anthropic provider into the
+ * core `LLMProviderRegistry`.
+ *
+ * @module extensions/ext-llm-anthropic
+ */
+
+import type { ExtensionFactory } from "../../../src/extensions/index.js";
+import type { LLMProviderRegistry } from "../../../src/extensions/llm/index.js";
+import { LLMProviderRegistryName } from "../../../src/extensions/llm/index.js";
+import { AnthropicProvider } from "./anthropic-provider.js";
+
+const extAnthropic: ExtensionFactory = () => {
+  const provider = new AnthropicProvider();
+  let registryRef: LLMProviderRegistry | undefined;
+  return {
+    name: "ext-llm-anthropic",
+    version: "0.1.0",
+    capabilities: [{ type: "contract", name: "LLMProvider:anthropic" }],
+    setup(ctx) {
+      const registry = ctx.require<LLMProviderRegistry>(LLMProviderRegistryName);
+      registry.register(provider);
+      registryRef = registry;
+      ctx.logger.info("[ext-llm-anthropic] Anthropic provider registered");
+    },
+    teardown() {
+      registryRef?.unregister(provider.id);
+      registryRef = undefined;
+    },
+  };
+};
+
+export default extAnthropic;
+export { AnthropicProvider };

package/src/extensions/{ext-google → ext-llm-google}/src/google-provider.ts

@@ -1,13 +1,13 @@
 /**
- * Google provider — implements the {@link AIProvider} contract for Google's
+ * Google provider — implements the {@link LLMProvider} contract for Google's
  * Generative Language API (direct + via Veryfront Cloud).
  *
  * Ported from `src/provider/runtime-loader.ts` as part of PR 13.
  *
- * @module extensions/ext-google/google-provider
+ * @module extensions/ext-llm-google/google-provider
  */
 
-import type { AIProvider, AIProviderConfig } from "../../../src/extensions/interfaces/index.js";
+import type { LLMProvider, LLMProviderConfig } from "../../../src/extensions/llm/index.js";
 import type { EmbeddingRuntime, ModelRuntime } from "../../../src/provider/types.js";
 import {
   buildProviderError,
@@ -858,10 +858,10 @@ export function createGoogleEmbeddingRuntime(
   };
 }
 
-export class GoogleProvider implements AIProvider {
+export class GoogleProvider implements LLMProvider {
   readonly id = "google";
 
-  createModel(modelId: string, config: AIProviderConfig): ModelRuntime {
+  createModel(modelId: string, config: LLMProviderConfig): ModelRuntime {
     return createGoogleModelRuntime(
       {
         apiKey: config.credential,
@@ -873,7 +873,7 @@ export class GoogleProvider implements AIProvider {
     );
   }
 
-  createEmbedding(modelId: string, config: AIProviderConfig): EmbeddingRuntime {
+  createEmbedding(modelId: string, config: LLMProviderConfig): EmbeddingRuntime {
     return createGoogleEmbeddingRuntime(
       {
         apiKey: config.credential,

package/src/extensions/ext-llm-google/src/index.ts

@@ -0,0 +1,31 @@
+/**
+ * @veryfront/ext-llm-google — registers the Google provider into the
+ * core `LLMProviderRegistry`.
+ *
+ * @module extensions/ext-llm-google
+ */
+
+import type { ExtensionFactory } from "../../../src/extensions/index.js";
+import type { LLMProviderRegistry } from "../../../src/extensions/llm/index.js";
+import { LLMProviderRegistryName } from "../../../src/extensions/llm/index.js";
+import { GoogleProvider } from "./google-provider.js";
+
+const extGoogle: ExtensionFactory = () => {
+  const provider = new GoogleProvider();
+  return {
+    name: "ext-llm-google",
+    version: "0.1.0",
+    capabilities: [{ type: "contract", name: "LLMProvider:google" }],
+    setup(ctx) {
+      const registry = ctx.require<LLMProviderRegistry>(LLMProviderRegistryName);
+      registry.register(provider);
+      ctx.logger.info("[ext-llm-google] Google provider registered");
+    },
+    teardown() {
+      // No resources to release.
+    },
+  };
+};
+
+export default extGoogle;
+export { GoogleProvider };

package/src/extensions/ext-llm-openai/src/index.ts

@@ -0,0 +1,33 @@
+/**
+ * @veryfront/ext-llm-openai — registers the OpenAI provider into the
+ * core `LLMProviderRegistry`.
+ *
+ * @module extensions/ext-llm-openai
+ */
+
+import type { ExtensionFactory } from "../../../src/extensions/index.js";
+import type { LLMProviderRegistry } from "../../../src/extensions/llm/index.js";
+import { LLMProviderRegistryName } from "../../../src/extensions/llm/index.js";
+import { OpenAIProvider } from "./openai-provider.js";
+
+const extOpenAI: ExtensionFactory = () => {
+  const provider = new OpenAIProvider();
+  let registry: LLMProviderRegistry | undefined;
+  return {
+    name: "ext-llm-openai",
+    version: "0.1.0",
+    capabilities: [{ type: "contract", name: "LLMProvider:openai" }],
+    setup(ctx) {
+      registry = ctx.require<LLMProviderRegistry>(LLMProviderRegistryName);
+      registry.register(provider);
+      ctx.logger.info("[ext-llm-openai] OpenAI provider registered");
+    },
+    teardown() {
+      registry?.unregister(provider.id);
+      registry = undefined;
+    },
+  };
+};
+
+export default extOpenAI;
+export { OpenAIProvider };

package/src/extensions/{ext-openai → ext-llm-openai}/src/openai-provider.ts

@@ -1,14 +1,14 @@
 /**
- * OpenAI provider — implements the {@link AIProvider} contract for OpenAI,
+ * OpenAI provider — implements the {@link LLMProvider} contract for OpenAI,
  * OpenAI-compatible endpoints (Azure OpenAI, Moonshot AI), and OpenAI's
  * Responses API.
  *
  * Ported from `src/provider/runtime-loader.ts` as part of PR 11.
  *
- * @module extensions/ext-openai/openai-provider
+ * @module extensions/ext-llm-openai/openai-provider
  */
 
-import type { AIProvider, AIProviderConfig } from "../../../src/extensions/interfaces/index.js";
+import type { LLMProvider, LLMProviderConfig } from "../../../src/extensions/llm/index.js";
 import type { EmbeddingRuntime, ModelRuntime } from "../../../src/provider/types.js";
 import {
   buildProviderError,
@@ -1467,10 +1467,10 @@ export function createOpenAIEmbeddingRuntime(
   };
 }
 
-export class OpenAIProvider implements AIProvider {
+export class OpenAIProvider implements LLMProvider {
   readonly id = "openai";
 
-  createModel(modelId: string, config: AIProviderConfig): ModelRuntime {
+  createModel(modelId: string, config: LLMProviderConfig): ModelRuntime {
     return createOpenAIModelRuntime(
       {
         apiKey: config.credential,
@@ -1482,7 +1482,7 @@ export class OpenAIProvider implements AIProvider {
     );
   }
 
-  createEmbedding(modelId: string, config: AIProviderConfig): EmbeddingRuntime {
+  createEmbedding(modelId: string, config: LLMProviderConfig): EmbeddingRuntime {
     return createOpenAIEmbeddingRuntime(
       {
         apiKey: config.credential,
@@ -1494,7 +1494,7 @@ export class OpenAIProvider implements AIProvider {
     );
   }
 
-  createResponses(modelId: string, config: AIProviderConfig): ModelRuntime {
+  createResponses(modelId: string, config: LLMProviderConfig): ModelRuntime {
     return createOpenAIResponsesRuntime(
       {
         apiKey: config.credential,

package/src/src/agent/agent-service-server.ts

@@ -2,6 +2,8 @@ import {
   createVeryfrontServer,
   type NodeVeryfrontServiceServer,
   startNodeVeryfrontServer,
+  startVeryfrontServer,
+  type VeryfrontServiceServer,
   type VeryfrontServiceServerLogger,
   type VeryfrontServiceServerRuntime,
 } from "../server/service-server.js";
@@ -26,7 +28,15 @@ export type StartNodeAgentServiceServerOptions = CreateAgentServiceServerRuntime
   hardShutdownTimeoutMs?: number;
 };
 
+export type StartAgentServiceServerOptions = CreateAgentServiceServerRuntimeOptions & {
+  port: number;
+  bindAddress?: string;
+  signals?: readonly NodeJS.Signals[];
+  hardShutdownTimeoutMs?: number;
+};
+
 export type NodeAgentServiceServer = NodeVeryfrontServiceServer;
+export type AgentServiceServer = VeryfrontServiceServer | NodeVeryfrontServiceServer;
 
 function getAgentServiceServerName(
   options: CreateAgentServiceServerRuntimeOptions,
@@ -70,3 +80,19 @@ export async function startNodeAgentServiceServer(
   await server.ready;
   return server;
 }
+
+export async function startAgentServiceServer(
+  options: StartAgentServiceServerOptions,
+): Promise<AgentServiceServer> {
+  const runtime = createAgentServiceServerRuntime(options);
+  const server = await startVeryfrontServer({
+    runtime,
+    port: options.port,
+    bindAddress: options.bindAddress,
+    logger: options.logger,
+    signals: options.signals,
+    hardShutdownTimeoutMs: options.hardShutdownTimeoutMs,
+  });
+  await server.ready;
+  return server;
+}

package/src/src/agent/hosted-agent-service-runtime.ts

@@ -27,7 +27,9 @@ import type { ParsedHostedChatRequest } from "./hosted-chat-request-parser.js";
 import type { AgUiResumeValue } from "./ag-ui-tool-shared.js";
 import type { RuntimeAgentMarkdownDefinition } from "./runtime-agent-definition.js";
 import {
+  type AgentServiceServer,
   type NodeAgentServiceServer,
+  startAgentServiceServer,
   startNodeAgentServiceServer,
 } from "./agent-service-server.js";
 import type { VeryfrontServiceServerLogger } from "../server/service-server.js";
@@ -115,6 +117,15 @@ export type StartNodeAgentServiceOptions<
   TConfig extends AgentServiceRuntimeConfig = AgentServiceRuntimeConfig,
 > = StartNodeHostedAgentServiceOptions<TExecution, TConfig>;
 
+export type StartAgentServiceRuntimeOptions<
+  TExecution extends object,
+  TConfig extends AgentServiceRuntimeConfig = AgentServiceRuntimeConfig,
+> = CreateAgentServiceRuntimeOptions<TExecution, TConfig> & {
+  bindAddress?: string;
+  hardShutdownTimeoutMs?: number;
+  signals?: readonly NodeJS.Signals[];
+};
+
 export type StartNodeHostedAgentServiceResult<
   TExecution extends object,
   TConfig extends HostedAgentServiceRuntimeConfig = HostedAgentServiceRuntimeConfig,
@@ -127,6 +138,13 @@ export type StartNodeAgentServiceResult<
   TConfig extends AgentServiceRuntimeConfig = AgentServiceRuntimeConfig,
 > = StartNodeHostedAgentServiceResult<TExecution, TConfig>;
 
+export type StartAgentServiceRuntimeResult<
+  TExecution extends object,
+  TConfig extends AgentServiceRuntimeConfig = AgentServiceRuntimeConfig,
+> = AgentServiceRuntimeBundle<TExecution, TConfig> & {
+  server: AgentServiceServer;
+};
+
 function defaultTrace<TResult>(
   _operationName: string,
   operation: () => Promise<TResult>,
@@ -236,3 +254,27 @@ export async function startNodeAgentService<
 ): Promise<StartNodeAgentServiceResult<TExecution, TConfig>> {
   return startNodeHostedAgentService(options);
 }
+
+export async function startAgentServiceRuntime<
+  TExecution extends object,
+  TConfig extends AgentServiceRuntimeConfig = AgentServiceRuntimeConfig,
+>(
+  options: StartAgentServiceRuntimeOptions<TExecution, TConfig>,
+): Promise<StartAgentServiceRuntimeResult<TExecution, TConfig>> {
+  const bundle = createAgentServiceRuntime(options);
+  const server = await startAgentServiceServer({
+    runtime: bundle.runtime,
+    serviceName: options.serviceName,
+    lifecycle: bundle.lifecycle,
+    port: bundle.config.PORT,
+    bindAddress: options.bindAddress,
+    signals: options.signals,
+    logger: options.logger,
+    hardShutdownTimeoutMs: options.hardShutdownTimeoutMs,
+  });
+
+  return {
+    ...bundle,
+    server,
+  };
+}

package/src/src/agent/hosted-stream-terminal-error.ts

@@ -5,7 +5,7 @@ import { parseProviderError } from "../chat/provider-errors.js";
 const EMPTY_RESPONSE_TERMINAL_ERROR_CODE = "EMPTY_RESPONSE";
 const EMPTY_RESPONSE_TERMINAL_ERROR_MESSAGE = "Assistant completed without producing a response";
 const EXTERNAL_SERVICE_ERROR_CODE = "EXTERNAL_SERVICE_ERROR";
-const EXTERNAL_SERVICE_ERROR_MESSAGE = "AI provider service error";
+const EXTERNAL_SERVICE_ERROR_MESSAGE = "LLM provider service error";
 const STREAM_ERROR_TERMINAL_ERROR_CODE = "STREAM_ERROR";
 
 export type HostedStreamTerminalError = {

package/src/src/agent/index.ts

@@ -252,10 +252,13 @@ export {
   type NormalizedAgentServiceContract,
 } from "./agent-service.js";
 export {
+  type AgentServiceServer,
   type AgentServiceServerLifecycle,
   createAgentServiceServerRuntime,
   type CreateAgentServiceServerRuntimeOptions,
   type NodeAgentServiceServer,
+  startAgentServiceServer,
+  type StartAgentServiceServerOptions,
   startNodeAgentServiceServer,
   type StartNodeAgentServiceServerOptions,
 } from "./agent-service-server.js";
@@ -316,6 +319,9 @@ export {
   type HostedAgentServiceRuntimeConfig,
   type HostedAgentServiceRuntimeLogger,
   type HostedAgentServiceRuntimeTrace,
+  startAgentServiceRuntime,
+  type StartAgentServiceRuntimeOptions,
+  type StartAgentServiceRuntimeResult,
   startNodeAgentService,
   type StartNodeAgentServiceOptions,
   type StartNodeAgentServiceResult,
@@ -323,6 +329,16 @@ export {
   type StartNodeHostedAgentServiceOptions,
   type StartNodeHostedAgentServiceResult,
 } from "./hosted-agent-service-runtime.js";
+export {
+  createNodeVeryfrontCloudAgentServiceRuntime,
+  type NodeVeryfrontCloudAgentServiceOptions,
+  type NodeVeryfrontCloudAgentServicePreparedExecution,
+  type NodeVeryfrontCloudAgentServiceProcessTarget,
+  runNodeVeryfrontCloudAgentServiceMain,
+  startAgentService,
+  startNodeVeryfrontCloudAgentService,
+  type VeryfrontCloudAgentServiceOptions,
+} from "./veryfront-cloud-agent-service.js";
 export {
   type AgentServiceConfig,
   type AgentServiceConfigInput,

package/src/src/agent/runtime-agent-definition-files.ts

@@ -1,5 +1,5 @@
 import { existsSync, readFileSync } from "node:fs";
-import { resolve } from "node:path";
+import { basename, resolve } from "node:path";
 import { z } from "zod";
 import {
   parseRuntimeAgentMarkdownDefinition,
@@ -45,15 +45,20 @@ export function resolveRuntimeAgentDefinitionsDir(
 ): string {
   const parsedInput = resolveRuntimeAgentDefinitionsDirInputSchema.parse(input);
   const fileName = getRuntimeAgentDefinitionFileName(parsedInput);
-  const firstCandidate = resolve(parsedInput.baseDir, "../agents");
+  const firstCandidate = resolve(parsedInput.baseDir, "agents");
+  const sourceLayoutCandidate = resolve(parsedInput.baseDir, "../agents");
   const candidates = [
     firstCandidate,
+    sourceLayoutCandidate,
     resolve(parsedInput.baseDir, "../../agents"),
     resolve(parsedInput.baseDir, "../../../agents"),
   ];
+  const fallbackCandidate = basename(parsedInput.baseDir) === "src"
+    ? sourceLayoutCandidate
+    : firstCandidate;
 
   return candidates.find((candidate) => hasRuntimeAgentDefinitionFile(candidate, fileName)) ??
-    firstCandidate;
+    fallbackCandidate;
 }
 
 export function resolveRuntimeAgentMarkdownDefinitionFilePath(