veryfront 0.1.519 → 0.1.521

package/src/cli/mcp/tools/dev-tools.ts

@@ -4,7 +4,7 @@
 import * as dntShim from "../../../_dnt.shims.js";
 
 
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import { getEnvironmentConfig } from "../../../src/config/index.js";
 import { withSpan } from "../../../src/observability/tracing/otlp-setup.js";
@@ -27,7 +27,7 @@ const getHotReloadInput = defineSchema((v) =>
       ),
   })
 );
-const hotReloadInput = getHotReloadInput();
+const hotReloadInput = lazySchema(getHotReloadInput);
 
 type HotReloadInput = InferSchema<ReturnType<typeof getHotReloadInput>>;
 
@@ -74,7 +74,7 @@ const getGetDebugContextInput = defineSchema((v) =>
       .describe("Project slug to check (for multi-project mode)"),
   })
 );
-const getDebugContextInput = getGetDebugContextInput();
+const getDebugContextInput = lazySchema(getGetDebugContextInput);
 
 type GetDebugContextInput = InferSchema<ReturnType<typeof getGetDebugContextInput>>;
 
@@ -142,7 +142,7 @@ const getTriggerHmrInput = defineSchema((v) =>
     ),
   })
 );
-const triggerHmrInput = getTriggerHmrInput();
+const triggerHmrInput = lazySchema(getTriggerHmrInput);
 
 type TriggerHmrInput = InferSchema<ReturnType<typeof getTriggerHmrInput>>;
 
@@ -202,7 +202,7 @@ const getPreviewRouteInput = defineSchema((v) =>
       ),
   })
 );
-const previewRouteInput = getPreviewRouteInput();
+const previewRouteInput = lazySchema(getPreviewRouteInput);
 
 type PreviewRouteInput = InferSchema<ReturnType<typeof getPreviewRouteInput>>;
 
@@ -292,7 +292,7 @@ const getWaitForReadyInput = defineSchema((v) =>
       .describe("Polling interval in milliseconds (defaults to 500)"),
   })
 );
-const waitForReadyInput = getWaitForReadyInput();
+const waitForReadyInput = lazySchema(getWaitForReadyInput);
 
 type WaitForReadyInput = InferSchema<ReturnType<typeof getWaitForReadyInput>>;
 
@@ -356,7 +356,7 @@ const getGetFlywheelStatusInput = defineSchema((v) =>
     ),
   })
 );
-const getFlywheelStatusInput = getGetFlywheelStatusInput();
+const getFlywheelStatusInput = lazySchema(getGetFlywheelStatusInput);
 
 type GetFlywheelStatusInput = InferSchema<ReturnType<typeof getGetFlywheelStatusInput>>;
 

package/src/cli/mcp/tools/introspection-tools.ts

@@ -1,15 +1,15 @@
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { MCPTool } from "../../../src/mcp/index.js";
 import { generateCommandSchema, generateSchema } from "../../commands/schema/command.js";
 import type { CommandCategory } from "../../help/types.js";
 import { VERSION } from "../../utils/index.js";
 
-const getSchemaInput = defineSchema((v) =>
+const getSchemaInput = lazySchema(defineSchema((v) =>
   v.object({
     command: v.string().optional().describe("Get schema for a specific command"),
     category: v.string().optional().describe("Filter by category"),
   })
-)();
+));
 
 const vfGetSchema: MCPTool = {
   name: "vf_get_schema",
@@ -26,7 +26,7 @@ const vfGetSchema: MCPTool = {
   },
 };
 
-const getProjectInfoInput = defineSchema((v) => v.object({}))();
+const getProjectInfoInput = lazySchema(defineSchema((v) => v.object({})));
 
 const vfGetProjectInfo: MCPTool = {
   name: "vf_get_project_info",

package/src/cli/mcp/tools/project-tools.ts

@@ -2,7 +2,7 @@
  * MCP tools for project discovery and analysis.
  */
 
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import type { FileSystem } from "../../../src/platform/index.js";
 import { join } from "../../../src/platform/compat/path/index.js";
@@ -35,7 +35,7 @@ const getListRoutesInput = defineSchema((v) =>
     ),
   })
 );
-const listRoutesInput = getListRoutesInput();
+const listRoutesInput = lazySchema(getListRoutesInput);
 
 type ListRoutesInput = InferSchema<ReturnType<typeof getListRoutesInput>>;
 
@@ -79,7 +79,7 @@ const getGetProjectContextInput = defineSchema((v) =>
     ),
   })
 );
-const getProjectContextInput = getGetProjectContextInput();
+const getProjectContextInput = lazySchema(getGetProjectContextInput);
 
 type GetProjectContextInput = InferSchema<ReturnType<typeof getGetProjectContextInput>>;
 
@@ -197,7 +197,7 @@ const getGetComponentTreeInput = defineSchema((v) =>
     ),
   })
 );
-const getComponentTreeInput = getGetComponentTreeInput();
+const getComponentTreeInput = lazySchema(getGetComponentTreeInput);
 
 type GetComponentTreeInput = InferSchema<ReturnType<typeof getGetComponentTreeInput>>;
 
@@ -303,7 +303,7 @@ const getListLocalProjectsInput = defineSchema((v) =>
     ),
   })
 );
-const listLocalProjectsInput = getListLocalProjectsInput();
+const listLocalProjectsInput = lazySchema(getListLocalProjectsInput);
 
 type ListLocalProjectsInput = InferSchema<ReturnType<typeof getListLocalProjectsInput>>;
 

package/src/cli/mcp/tools/run-lint-tool.ts

@@ -7,7 +7,7 @@
 import * as dntShim from "../../../_dnt.shims.js";
 
 
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import type { MCPTool } from "../tools.js";
 import { type LintResult, parseLintJsonOutput } from "../../commands/lint/command.js";
@@ -19,7 +19,7 @@ const getRunLintInput = defineSchema((v) =>
     ),
   })
 );
-const runLintInput = getRunLintInput();
+const runLintInput = lazySchema(getRunLintInput);
 
 type RunLintInput = InferSchema<ReturnType<typeof getRunLintInput>>;
 

package/src/cli/mcp/tools/run-tests-tool.ts

@@ -7,7 +7,7 @@
 import * as dntShim from "../../../_dnt.shims.js";
 
 
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import type { MCPTool } from "../../../src/mcp/index.js";
 import { parseTestOutput, type TestResult } from "../../commands/test/command.js";
@@ -25,7 +25,7 @@ const getRunTestsInput = defineSchema((v) =>
     ),
   })
 );
-const runTestsInput = getRunTestsInput();
+const runTestsInput = lazySchema(getRunTestsInput);
 
 type RunTestsInput = InferSchema<ReturnType<typeof getRunTestsInput>>;
 
@@ -64,22 +64,34 @@ export async function executeTests(
 
   const child = cmd.spawn();
   const timeoutMs = input.timeout ?? 300000;
+  const outputPromise = child.output();
 
-  const result = await Promise.race([
-    child.output(),
-    new Promise<never>((_, reject) => {
-      const timer = dntShim.setTimeout(() => {
-        try {
-          child.kill();
-        } catch {
-          // Process may have already exited
-        }
-        reject(new Error(`Test execution timed out after ${timeoutMs}ms`));
-      }, timeoutMs);
-      // Don't prevent process exit while waiting
-      dntShim.Deno.unrefTimer(timer);
-    }),
-  ]);
+  let timerId: number | undefined;
+  const timeoutResult = "timeout";
+  const timeoutPromise = new Promise<typeof timeoutResult>((resolve) => {
+    timerId = dntShim.setTimeout(() => {
+      resolve(timeoutResult);
+    }, timeoutMs);
+    // Don't prevent process exit while waiting
+    dntShim.Deno.unrefTimer(timerId);
+  });
+
+  const result = await Promise.race([outputPromise, timeoutPromise]);
+
+  if (timerId !== undefined) {
+    clearTimeout(timerId);
+  }
+
+  if (result === timeoutResult) {
+    try {
+      child.kill();
+    } catch {
+      // Process may have already exited
+    }
+
+    await outputPromise.catch(() => undefined);
+    throw new Error(`Test execution timed out after ${timeoutMs}ms`);
+  }
 
   const stdout = new TextDecoder().decode(result.stdout);
   const stderr = new TextDecoder().decode(result.stderr);

package/src/cli/mcp/tools/scaffold-tools.ts

@@ -2,7 +2,7 @@
  * MCP tools for scaffolding and conventions.
  */
 
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import { join } from "../../../src/platform/compat/path/index.js";
 import { withSpan } from "../../../src/observability/tracing/otlp-setup.js";
@@ -83,15 +83,17 @@ export function ${componentName}({ children }: ${componentName}Props) {
 
 function generateToolTemplate(name: string): string {
   return `import { tool } from "veryfront/tool";
-import { defineSchema } from "veryfront/schemas";
+import { defineSchema, lazySchema } from "veryfront/schemas";
+
+const getParameters = defineSchema((v) => v.object({
+  // Add your parameters here
+  input: v.string().describe("Input parameter"),
+}));
 
 export default tool({
   id: "${name}",
   description: "Description of what this tool does",
-  parameters: defineSchema((v) => v.object({
-    // Add your parameters here
-    input: v.string().describe("Input parameter"),
-  }))(),
+  parameters: lazySchema(getParameters),
   execute: async ({ input }) => {
     // Implement your tool logic here
     return { result: input };
@@ -126,14 +128,16 @@ export default agent({
 
 function generatePromptTemplate(name: string): string {
   return `import { prompt } from "veryfront/prompt";
-import { defineSchema } from "veryfront/schemas";
+import { defineSchema, lazySchema } from "veryfront/schemas";
+
+const getArgsSchema = defineSchema((v) => v.object({
+  input: v.string().describe("User input"),
+}));
 
 export default prompt({
   id: "${name}",
   description: "Description of this prompt template",
-  argsSchema: defineSchema((v) => v.object({
-    input: v.string().describe("User input"),
-  }))(),
+  argsSchema: lazySchema(getArgsSchema),
   getContent: ({ input }) => [
     { role: "system", content: "Role: describe what this assistant should do and its limits." },
     { role: "user", content: input },
@@ -162,7 +166,7 @@ const getScaffoldInput = defineSchema((v) =>
     ),
   })
 );
-const scaffoldInput = getScaffoldInput();
+const scaffoldInput = lazySchema(getScaffoldInput);
 
 type ScaffoldInput = InferSchema<ReturnType<typeof getScaffoldInput>>;
 type ScaffoldType = ScaffoldInput["type"];
@@ -275,7 +279,7 @@ const getGetConventionsInput = defineSchema((v) =>
       .describe("Specific topic to get conventions for"),
   })
 );
-const getConventionsInput = getGetConventionsInput();
+const getConventionsInput = lazySchema(getGetConventionsInput);
 
 type GetConventionsInput = InferSchema<ReturnType<typeof getGetConventionsInput>>;
 
@@ -379,12 +383,16 @@ const CONVENTIONS: Record<string, Convention> = {
         explanation: "Tools in dedicated directory with descriptive names",
       },
       {
-        good: `export const searchTool = {
+        good: `const getParameters = defineSchema((v) => v.object({
+  query: v.string(),
+}));
+
+export const searchTool = {
   name: "search_docs",
-  parameters: defineSchema((v) => v.object({ query: v.string() }))(),
+  parameters: lazySchema(getParameters),
   execute: async ({ query }) => { /* ... */ }
 };`,
-        explanation: "Tool with defineSchema and typed execute function",
+        explanation: "Tool with lazy schema parameters and typed execute function",
       },
     ],
   },

package/src/cli/mcp/tools/skill-tools.ts

@@ -2,7 +2,7 @@
  * MCP tools for skill discovery and reference loading.
  */
 
-import { defineSchema } from "../../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import type { InferSchema } from "../../../src/extensions/schema/index.js";
 import { join } from "../../../src/platform/compat/path/index.js";
 import { cwd } from "../../../src/platform/index.js";
@@ -63,13 +63,13 @@ async function getSkillReferences(skillName: string): Promise<string[] | undefin
   return references.length ? references : undefined;
 }
 
-const getSkillsInput = defineSchema((v) =>
+const getSkillsInput = lazySchema(defineSchema((v) =>
   v.object({
     name: v.string().optional().describe(
       "Specific skill name to get full content for (omit for list of all skills)",
     ),
   })
-)();
+));
 
 type GetSkillsInput = InferSchema<typeof getSkillsInput>;
 
@@ -159,12 +159,12 @@ export const vfGetSkills: MCPTool<GetSkillsInput, GetSkillsResult> = {
     ),
 };
 
-const getSkillReferenceInput = defineSchema((v) =>
+const getSkillReferenceInput = lazySchema(defineSchema((v) =>
   v.object({
     skill: v.string().describe("Skill name"),
     reference: v.string().describe("Reference file path (e.g., 'references/ROUTES.md')"),
   })
-)();
+));
 
 type GetSkillReferenceInput = InferSchema<typeof getSkillReferenceInput>;
 

package/src/cli/mcp/tools.ts

@@ -2,7 +2,7 @@
  * MCP Tools for Veryfront Dev Server
  **************************/
 
-import { defineSchema } from "../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../src/schemas/index.js";
 import type { InferSchema } from "../../src/extensions/schema/index.js";
 import {
   type DevError,
@@ -48,7 +48,7 @@ const getGetErrorsInput = defineSchema((v) =>
     ),
   })
 );
-const getErrorsInput = getGetErrorsInput();
+const getErrorsInput = lazySchema(getGetErrorsInput);
 
 type GetErrorsInput = InferSchema<ReturnType<typeof getGetErrorsInput>>;
 
@@ -89,7 +89,7 @@ const getGetLogsInput = defineSchema((v) =>
     ),
   })
 );
-const getLogsInput = getGetLogsInput();
+const getLogsInput = lazySchema(getGetLogsInput);
 
 type GetLogsInput = InferSchema<ReturnType<typeof getGetLogsInput>>;
 
@@ -118,7 +118,7 @@ const getClearCacheInput = defineSchema((v) =>
     ),
   })
 );
-const clearCacheInput = getClearCacheInput();
+const clearCacheInput = lazySchema(getClearCacheInput);
 
 type ClearCacheInput = InferSchema<ReturnType<typeof getClearCacheInput>>;
 
@@ -159,7 +159,7 @@ export const vfClearCache: MCPTool<ClearCacheInput, ClearCacheOutput> = {
 };
 
 const getGetStatusInput = defineSchema((v) => v.object({}));
-const getStatusInput = getGetStatusInput();
+const getStatusInput = lazySchema(getGetStatusInput);
 
 type GetStatusInput = InferSchema<ReturnType<typeof getGetStatusInput>>;
 
@@ -214,7 +214,7 @@ const getClearErrorsInput = defineSchema((v) =>
     ),
   })
 );
-const clearErrorsInput = getClearErrorsInput();
+const clearErrorsInput = lazySchema(getClearErrorsInput);
 
 type ClearErrorsInput = InferSchema<ReturnType<typeof getClearErrorsInput>>;
 

package/src/cli/shared/config.ts

@@ -5,7 +5,7 @@
  * @module cli/shared/config
  */
 
-import { defineSchema } from "../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../src/schemas/index.js";
 import type { InferSchema } from "../../src/extensions/schema/index.js";
 import { join } from "../../src/platform/compat/path/index.js";
 import { createFileSystem, cwd, getEnv } from "../../src/platform/index.js";
@@ -24,7 +24,7 @@ export const getVeryfrontConfigSchema = defineSchema((v) =>
     apiUrl: v.string().optional(),
   })
 );
-export const VeryfrontConfigSchema = getVeryfrontConfigSchema();
+export const VeryfrontConfigSchema = lazySchema(getVeryfrontConfigSchema);
 export type VeryfrontConfig = InferSchema<ReturnType<typeof getVeryfrontConfigSchema>>;
 
 export const getResolvedConfigSchema = defineSchema((v) =>
@@ -34,7 +34,7 @@ export const getResolvedConfigSchema = defineSchema((v) =>
     projectSlug: v.string(),
   })
 );
-export const ResolvedConfigSchema = getResolvedConfigSchema();
+export const ResolvedConfigSchema = lazySchema(getResolvedConfigSchema);
 export type ResolvedConfig = InferSchema<ReturnType<typeof getResolvedConfigSchema>>;
 
 export async function readConfigFile(projectDir: string): Promise<VeryfrontConfig | null> {
@@ -190,7 +190,7 @@ export const getApiErrorSchema = defineSchema((v) =>
     code: v.string().optional(),
   })
 );
-export const ApiErrorSchema = getApiErrorSchema();
+export const ApiErrorSchema = lazySchema(getApiErrorSchema);
 export type ApiError = InferSchema<ReturnType<typeof getApiErrorSchema>>;
 
 export function createApiClient(config: ResolvedConfig): ApiClient {

package/src/cli/shared/ensure-content-processor.ts

@@ -1,7 +1,7 @@
 import { tryResolve } from "../../src/extensions/index.js";
 import { register } from "../../src/extensions/contracts.js";
-import type { ContentProcessor } from "../../src/extensions/transform/index.js";
-import { MdxContentProcessor } from "../../extensions/ext-transform-mdx/src/index.js";
+import type { ContentProcessor } from "../../src/extensions/content/index.js";
+import { MdxContentProcessor } from "../../extensions/ext-content-mdx/src/index.js";
 
 /**
  * The CLI ships ext-mdx baked in so the compiled binary can render MDX/Markdown

package/src/cli/shared/types.ts

@@ -1,8 +1,8 @@
-import { defineSchema } from "../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../src/schemas/index.js";
 import type { InferSchema } from "../../src/extensions/schema/index.js";
 
 export const getServerModeSchema = defineSchema((v) => v.enum(["combined", "proxy", "production"]));
-export const ServerModeSchema = getServerModeSchema();
+export const ServerModeSchema = lazySchema(getServerModeSchema);
 export type ServerMode = InferSchema<ReturnType<typeof getServerModeSchema>>;
 
 export interface ParsedArgs {

package/src/cli/skills/types.ts

@@ -1,4 +1,4 @@
-import { defineSchema } from "../../src/schemas/index.js";
+import { defineSchema, lazySchema } from "../../src/schemas/index.js";
 import type { InferSchema } from "../../src/extensions/schema/index.js";
 
 export const getSkillManifestSchema = defineSchema((v) =>
@@ -24,7 +24,7 @@ export const getSkillManifestSchema = defineSchema((v) =>
       .optional(),
   })
 );
-export const SkillManifestSchema = getSkillManifestSchema();
+export const SkillManifestSchema = lazySchema(getSkillManifestSchema);
 
 export type SkillManifest = InferSchema<ReturnType<typeof getSkillManifestSchema>>;
 

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.519",
+  "version": "0.1.521",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "workspace": [
@@ -12,11 +12,13 @@ export default {
     "./extensions/ext-bundler-esbuild",
     "./extensions/ext-cache-redis",
     "./extensions/ext-css-tailwind",
-    "./extensions/ext-node-compatibility",
+    "./extensions/ext-document-kreuzberg",
+    "./extensions/ext-db-sqlite",
     "./extensions/ext-parser-babel",
+    "./extensions/ext-sandbox-shell-tools",
     "./extensions/ext-tracing-opentelemetry",
-    "./extensions/ext-transform-mdx",
-    "./extensions/ext-zod"
+    "./extensions/ext-content-mdx",
+    "./extensions/ext-schema-zod"
   ],
   "exclude": [
     "npm/",
@@ -43,6 +45,7 @@ export default {
     "./markdown": "./src/markdown/index.ts",
     "./mdx": "./src/mdx/index.ts",
     "./agent": "./src/agent/index.ts",
+    "./agent/testing": "./src/agent/testing/index.ts",
     "./agent/conversation-bootstrap": "./src/agent/conversation/bootstrap.ts",
     "./agent/durable": "./src/agent/durable.ts",
     "./agent/invoke-agent-child-runs": "./src/agent/invoke-agent-child-runs.ts",
@@ -74,13 +77,15 @@ export default {
     "./extensions/auth": "./src/extensions/auth/index.ts",
     "./extensions/bundler": "./src/extensions/bundler/index.ts",
     "./extensions/cache": "./src/extensions/cache/index.ts",
+    "./extensions/content": "./src/extensions/content/index.ts",
+    "./extensions/contracts": "./src/extensions/contracts.ts",
     "./extensions/compat": "./src/extensions/compat/index.ts",
     "./extensions/css": "./src/extensions/css/index.ts",
     "./extensions/database": "./src/extensions/database/index.ts",
     "./extensions/parser": "./src/extensions/parser/index.ts",
+    "./extensions/sandbox": "./src/extensions/sandbox/index.ts",
     "./extensions/schema": "./src/extensions/schema/index.ts",
     "./extensions/tracing": "./src/extensions/tracing/index.ts",
-    "./extensions/transform": "./src/extensions/transform/index.ts",
     "./testing": "./src/testing/index.ts",
     "./testing/assert": "./src/testing/assert.ts",
     "./testing/bdd": "./src/testing/bdd.ts",
@@ -166,15 +171,16 @@ export default {
     "veryfront/extensions/llm": "./src/extensions/llm/index.ts",
     "veryfront/extensions/auth": "./src/extensions/auth/index.ts",
     "veryfront/extensions/bundler": "./src/extensions/bundler/index.ts",
+    "veryfront/extensions/cache": "./src/extensions/cache/index.ts",
+    "veryfront/extensions/content": "./src/extensions/content/index.ts",
     "veryfront/extensions/compat": "./src/extensions/compat/index.ts",
     "veryfront/extensions/contracts": "./src/extensions/contracts.ts",
     "veryfront/extensions/css": "./src/extensions/css/index.ts",
     "veryfront/extensions/database": "./src/extensions/database/index.ts",
     "veryfront/extensions/parser": "./src/extensions/parser/index.ts",
+    "veryfront/extensions/sandbox": "./src/extensions/sandbox/index.ts",
     "veryfront/extensions/schema": "./src/extensions/schema/index.ts",
     "veryfront/extensions/tracing": "./src/extensions/tracing/index.ts",
-    "veryfront/extensions/transform": "./src/extensions/transform/index.ts",
-    "jose": "npm:jose@5.9.6",
     "#veryfront": "./src/index.ts",
     "#veryfront/agent": "./src/agent/index.ts",
     "#veryfront/agent/react": "./src/agent/react/index.ts",
@@ -265,6 +271,7 @@ export default {
     "@std/fmt/colors": "jsr:@std/fmt/colors",
     "@std/testing": "jsr:@std/testing",
     "@std/testing/bdd": "jsr:@std/testing/bdd",
+    "@std/yaml/parse": "jsr:@std/yaml/parse",
     "@std/expect": "jsr:@std/expect",
     "@std/fs": "jsr:@std/fs",
     "@std/async": "jsr:@std/async",
@@ -277,25 +284,11 @@ export default {
     "react-dom/client": "https://esm.sh/react-dom@19.2.4/client?external=react&target=es2022&deps=csstype@3.2.3",
     "react/jsx-runtime": "https://esm.sh/react@19.2.4/jsx-runtime?external=react&target=es2022&deps=csstype@3.2.3",
     "react/jsx-dev-runtime": "https://esm.sh/react@19.2.4/jsx-dev-runtime?external=react&target=es2022&deps=csstype@3.2.3",
-    "@opentelemetry/api": "npm:@opentelemetry/api@1.9.1",
-    "@opentelemetry/auto-instrumentations-node": "npm:@opentelemetry/auto-instrumentations-node@0.76.0",
-    "@opentelemetry/exporter-trace-otlp-http": "npm:@opentelemetry/exporter-trace-otlp-http@0.218.0",
-    "@opentelemetry/resources": "npm:@opentelemetry/resources@2.7.1",
-    "@opentelemetry/sdk-node": "npm:@opentelemetry/sdk-node@0.218.0",
-    "@opentelemetry/sdk-trace-base": "npm:@opentelemetry/sdk-trace-base@2.7.1",
-    "@mdx-js/mdx": "npm:@mdx-js/mdx@3.1.1",
-    "gray-matter": "npm:gray-matter@4.0.3",
-    "zod": "npm:zod@4.3.6",
-    "unified": "npm:unified@11.0.5",
-    "class-variance-authority": "npm:class-variance-authority@0.7.1",
-    "tailwind-merge": "npm:tailwind-merge@3.5.0",
     "veryfront/schemas": "./src/schemas/index.ts",
     "veryfront/chat/conversation": "./src/chat/conversation.ts",
     "veryfront/chat/message-prep": "./src/chat/message-prep.ts",
     "veryfront/chat/final-step-fallback": "./src/chat/final-step-fallback.ts",
-    "veryfront/chat/provider-errors": "./src/chat/provider-errors.ts",
-    "bash-tool": "npm:bash-tool@1.3.16",
-    "just-bash": "npm:just-bash@2.14.5"
+    "veryfront/chat/provider-errors": "./src/chat/provider-errors.ts"
   },
   "compilerOptions": {
     "jsx": "react-jsx",
@@ -326,9 +319,9 @@ export default {
     "build": "deno task build:prepare && deno run -A scripts/build/compile-binary.ts --output ./bin/veryfront",
     "build:npm": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run -A scripts/build/build-npm-dnt.ts",
     "release": "deno run -A scripts/release.ts",
-    "test": "deno task generate && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --allow-all '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' --unstable-worker-options --unstable-net",
-    "test:unit": "deno task generate && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --allow-all --v8-flags=--max-old-space-size=8192 '--ignore=tests,src/workflow/__tests__' --unstable-worker-options --unstable-net $(find src cli -name '*.test.ts' ! -name '*.integration.test.ts')",
-    "test:integration": "deno task generate && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --allow-all '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' tests --unstable-worker-options --unstable-net",
+    "test": "deno task generate && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/schemas/_test-setup.ts --no-check --parallel --allow-all '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' --unstable-worker-options --unstable-net",
+    "test:unit": "deno task generate && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/schemas/_test-setup.ts --no-check --parallel --allow-all --v8-flags=--max-old-space-size=8192 '--ignore=tests,src/workflow/__tests__' --unstable-worker-options --unstable-net $(find src cli -name '*.test.ts' ! -name '*.integration.test.ts')",
+    "test:integration": "deno task generate && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/schemas/_test-setup.ts --no-check --parallel --allow-all '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' tests --unstable-worker-options --unstable-net",
     "test:integration:cli": "VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --allow-all --unstable-worker-options --unstable-net $(find cli -name '*.integration.test.ts')",
     "test:record": "VCR=record deno test --no-check --allow-all $(find cli -name '*.integration.test.ts' -path '*/commands/*')",
     "test:coverage": "rm -rf coverage && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --fail-fast --allow-all --coverage=coverage '--ignore=tests/integration/compiled-binary-e2e.test.ts' --unstable-worker-options --unstable-net || exit 1",
@@ -342,14 +335,15 @@ export default {
     "fmt": "deno fmt src/ cli/",
     "fmt:check": "deno fmt --check src/ cli/",
     "typecheck": "deno task generate && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/modules/index.ts src/proxy/main.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/agent/service/route-export.check.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/jobs/index.ts src/mcp/index.ts src/provider/index.ts",
-    "verify": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task docs:validate && deno task typecheck && deno task test && deno task test:e2e:binary",
-    "verify:quick": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task docs:validate && deno task typecheck",
+    "verify": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task lint:core-deps && deno task docs:validate && deno task typecheck && deno task test && deno task test:e2e:binary",
+    "verify:quick": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task lint:core-deps && deno task docs:validate && deno task typecheck",
     "docs": "rm -rf docs/reference && deno run --allow-read --allow-write --allow-run scripts/docs/generate-api-reference.ts",
     "docs:copy": "rm -rf ../../docs/docs/code/reference && cp -r docs/reference/ ../../docs/docs/code/reference/",
     "docs:validate": "deno run --allow-read scripts/docs/validate-api-reference.ts",
     "docs:verify-npm": "node scripts/docs/verify-npm-exports.mjs && node scripts/docs/verify-npm-node.mjs",
     "docs:check-links": "deno run -A scripts/lint/check-doc-links.ts",
     "lint:ban-zod": "deno run --allow-read scripts/lint/ban-zod-imports.ts",
+    "lint:core-deps": "deno run --allow-read scripts/lint/audit-core-deps.ts",
     "lint:ban-console": "deno run --allow-read scripts/lint/ban-console.ts",
     "lint:ban-deep-imports": "deno run --allow-read scripts/lint/ban-deep-imports.ts",
     "lint:imports": "deno run --allow-read scripts/lint/no-cross-boundary-relative-imports.ts",
@@ -363,7 +357,7 @@ export default {
     "lint:wildcard-exports": "deno run --allow-read scripts/lint/ban-wildcard-exports.ts",
     "lint:deps": "deno run --allow-read scripts/lint/audit-deps.ts",
     "lint:barrel-jsdoc": "deno run --allow-read scripts/lint/check-barrel-jsdoc.ts",
-    "test:scripts": "deno test --config=scripts/test.deno.json --no-check --allow-read scripts/build/generate-sbom.test.ts scripts/lint/audit-deps.test.ts",
+    "test:scripts": "deno test --config=scripts/test.deno.json --no-check --allow-read scripts/build/generate-sbom.test.ts scripts/lint/audit-core-deps.test.ts scripts/lint/audit-deps.test.ts scripts/security/audit-npm.test.ts scripts/security/submit-dependency-snapshot.test.ts",
     "test:cross-runtime": "deno run --allow-all src/platform/compat/cross-runtime.test.ts",
     "test:node": "node ./tests/node/run-tests.mjs 'src/**/*.test.ts'",
     "test:bun": "node ./tests/bun/run-tests.mjs src/",
@@ -389,6 +383,7 @@ export default {
     "start-split": "deno task generate && deno run --allow-all cli/main.ts serve --split",
     "start-split:binary": "deno task generate && deno run --allow-all cli/main.ts serve --split --binary",
     "sbom": "deno run --allow-read --allow-write scripts/build/generate-sbom.ts",
+    "sbom:all": "deno run --allow-read --allow-write scripts/build/generate-sbom.ts --all-manifests",
     "submit-deps": "deno run --allow-read --allow-env --allow-net=api.github.com scripts/security/submit-dependency-snapshot.ts",
     "audit": "deno run --allow-read --allow-run --allow-write scripts/security/audit-npm.ts"
   },