veryfront 0.1.519 → 0.1.521

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/omap.ts

@@ -0,0 +1,30 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+import { isPlainObject } from "../_utils.js";
+
+function resolveYamlOmap(data: Record<string, unknown>[]): boolean {
+  const objectKeys = new Set();
+  for (const object of data) {
+    if (!isPlainObject(object)) return false;
+    const keys = Object.keys(object);
+    if (keys.length !== 1) return false;
+    for (const key of keys) {
+      if (objectKeys.has(key)) return false;
+      objectKeys.add(key);
+    }
+  }
+  return true;
+}
+
+export const omap: Type<"sequence", Record<PropertyKey, unknown>[]> = {
+  tag: "tag:yaml.org,2002:omap",
+  kind: "sequence",
+  resolve: resolveYamlOmap,
+  construct(data) {
+    return data;
+  },
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/pairs.ts

@@ -0,0 +1,22 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+import { isPlainObject } from "../_utils.js";
+
+function resolveYamlPairs(data: unknown[][]): boolean {
+  if (data === null) return true;
+  return data.every((it) => isPlainObject(it) && Object.keys(it).length === 1);
+}
+
+export const pairs: Type<"sequence"> = {
+  tag: "tag:yaml.org,2002:pairs",
+  construct(data: Record<string, unknown>[] | null): [string, unknown][] {
+    // Converts an array of objects into an array of key-value pairs.
+    return data?.flatMap(Object.entries) ?? [];
+  },
+  kind: "sequence",
+  resolve: resolveYamlPairs,
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/regexp.ts

@@ -0,0 +1,33 @@
+// Ported and adapted from js-yaml-js-types v1.0.0:
+// https://github.com/nodeca/js-yaml-js-types/tree/ac537e7bbdd3c2cbbd9882ca3919c520c2dc022b
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+
+const REGEXP = /^\/(?<regexp>[\s\S]+)\/(?<modifiers>[gismuy]*)$/;
+
+export const regexp: Type<"scalar", RegExp> = {
+  tag: "tag:yaml.org,2002:js/regexp",
+  kind: "scalar",
+  resolve(data: string | null): boolean {
+    if (data === null || !data.length) return false;
+
+    if (data.charAt(0) === "/") {
+      // Ensure regex is properly terminated
+      const groups = data.match(REGEXP)?.groups;
+      if (!groups) return false;
+      // Check no duplicate modifiers
+      const modifiers = groups.modifiers ?? "";
+      if (new Set(modifiers).size < modifiers.length) return false;
+    }
+
+    return true;
+  },
+  construct(data: string): RegExp {
+    const { regexp = data, modifiers = "" } = data.match(REGEXP)?.groups ?? {};
+    return new RegExp(regexp, modifiers);
+  },
+  predicate: (object: unknown): object is RegExp => object instanceof RegExp,
+  represent: (object: RegExp): string => object.toString(),
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/seq.ts

@@ -0,0 +1,13 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+
+export const seq: Type<"sequence", unknown[]> = {
+  tag: "tag:yaml.org,2002:seq",
+  kind: "sequence",
+  resolve: (): boolean => true,
+  construct: (data: unknown[] | null): unknown[] => data !== null ? data : [],
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/set.ts

@@ -0,0 +1,17 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+
+export const set: Type<"mapping", Record<PropertyKey, unknown>> = {
+  tag: "tag:yaml.org,2002:set",
+  kind: "mapping",
+  construct: (data: Record<string, unknown>): Record<string, unknown> =>
+    data !== null ? data : {},
+  resolve: (data: Record<string, unknown>): boolean => {
+    if (data === null) return true;
+    return Object.values(data).every((it) => it === null);
+  },
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/str.ts

@@ -0,0 +1,12 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+
+export const str: Type<"scalar", string> = {
+  tag: "tag:yaml.org,2002:str",
+  kind: "scalar",
+  resolve: (): boolean => true,
+  construct: (data: string | null): string => data !== null ? data : "",
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/timestamp.ts

@@ -0,0 +1,101 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+
+const YAML_DATE_REGEXP = new RegExp(
+  "^([0-9][0-9][0-9][0-9])" + // [1] year
+    "-([0-9][0-9])" + // [2] month
+    "-([0-9][0-9])$", // [3] day
+);
+
+const YAML_TIMESTAMP_REGEXP = new RegExp(
+  "^([0-9][0-9][0-9][0-9])" + // [1] year
+    "-([0-9][0-9]?)" + // [2] month
+    "-([0-9][0-9]?)" + // [3] day
+    "(?:[Tt]|[ \\t]+)" + // ...
+    "([0-9][0-9]?)" + // [4] hour
+    ":([0-9][0-9])" + // [5] minute
+    ":([0-9][0-9])" + // [6] second
+    "(?:\\.([0-9]*))?" + // [7] fraction
+    "(?:[ \\t]*(Z|([-+])([0-9][0-9]?)" + // [8] tz [9] tz_sign [10] tz_hour
+    "(?::([0-9][0-9]))?))?$", // [11] tz_minute
+);
+
+function resolveYamlTimestamp(data: string): boolean {
+  if (data === null) return false;
+  if (YAML_DATE_REGEXP.exec(data) !== null) return true;
+  if (YAML_TIMESTAMP_REGEXP.exec(data) !== null) return true;
+  return false;
+}
+
+function constructYamlTimestamp(data: string): Date {
+  let match = YAML_DATE_REGEXP.exec(data);
+  if (match === null) match = YAML_TIMESTAMP_REGEXP.exec(data);
+
+  if (match === null) {
+    throw new Error("Cannot construct YAML timestamp: date resolve error");
+  }
+
+  // match: [1] year [2] month [3] day
+
+  const year = +match[1]!;
+  const month = +match[2]! - 1; // JS month starts with 0
+  const day = +match[3]!;
+
+  if (!match[4]) {
+    // no hour
+    return new Date(Date.UTC(year, month, day));
+  }
+
+  // match: [4] hour [5] minute [6] second [7] fraction
+
+  const hour = +match[4];
+  const minute = +match[5]!;
+  const second = +match[6]!;
+
+  let fraction = 0;
+  if (match[7]) {
+    let partFraction = match[7].slice(0, 3);
+    while (partFraction.length < 3) {
+      // milli-seconds
+      partFraction += "0";
+    }
+    fraction = +partFraction;
+  }
+
+  // match: [8] tz [9] tz_sign [10] tz_hour [11] tz_minute
+
+  let delta = null;
+  if (match[9] && match[10]) {
+    const tzHour = +match[10];
+    const tzMinute = +(match[11] || 0);
+    delta = (tzHour * 60 + tzMinute) * 60000; // delta in milli-seconds
+    if (match[9] === "-") delta = -delta;
+  }
+
+  const date = new Date(
+    Date.UTC(year, month, day, hour, minute, second, fraction),
+  );
+
+  if (delta) date.setTime(date.getTime() - delta);
+
+  return date;
+}
+
+function representYamlTimestamp(date: Date): string {
+  return date.toISOString();
+}
+
+export const timestamp: Type<"scalar", Date> = {
+  tag: "tag:yaml.org,2002:timestamp",
+  construct: constructYamlTimestamp,
+  predicate(object): object is Date {
+    return object instanceof Date;
+  },
+  kind: "scalar",
+  represent: representYamlTimestamp,
+  resolve: resolveYamlTimestamp,
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type/undefined.ts

@@ -0,0 +1,23 @@
+// Ported and adapted from js-yaml-js-types v1.0.0:
+// https://github.com/nodeca/js-yaml-js-types/tree/ac537e7bbdd3c2cbbd9882ca3919c520c2dc022b
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+import type { Type } from "../_type.js";
+
+export const undefinedType: Type<"scalar", undefined> = {
+  tag: "tag:yaml.org,2002:js/undefined",
+  kind: "scalar",
+  resolve() {
+    return true;
+  },
+  construct() {
+    return undefined;
+  },
+  predicate(object) {
+    return typeof object === "undefined";
+  },
+  represent() {
+    return "";
+  },
+};

package/src/deps/jsr.io/@std/yaml/1.1.0/_type.ts

@@ -0,0 +1,49 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+// This module is browser compatible.
+
+/**
+ * The kind of YAML node.
+ */
+export type KindType = "sequence" | "scalar" | "mapping";
+/**
+ * The style variation for `styles` option of {@linkcode stringify}
+ */
+export type StyleVariant =
+  | "lowercase"
+  | "uppercase"
+  | "camelcase"
+  | "decimal"
+  | "binary"
+  | "octal"
+  | "hexadecimal";
+
+/**
+ * Function to convert data to a string for YAML serialization.
+ */
+export type RepresentFn<D> = (data: D, style?: StyleVariant) => string;
+
+/**
+ * A type definition for a YAML node.
+ */
+// deno-lint-ignore no-explicit-any
+export interface Type<K extends KindType, D = any> {
+  /** Tag to identify the type */
+  tag: string;
+  /** Kind of type */
+  kind: K;
+  /** Cast the type. Used to stringify */
+  predicate?: (data: unknown) => data is D;
+  /** Function to represent data. Used to stringify */
+  represent?: RepresentFn<D> | Record<string, RepresentFn<D>>;
+  /** Default style for the type. Used to stringify */
+  defaultStyle?: StyleVariant;
+  /** Function to test whether data can be resolved by this type. Used to parse */
+  // deno-lint-ignore no-explicit-any
+  resolve: (data: any) => boolean;
+  /** Function to construct data from string. Used to parse */
+  // deno-lint-ignore no-explicit-any
+  construct: (data: any) => D;
+}

package/src/deps/jsr.io/@std/yaml/1.1.0/_utils.ts

@@ -0,0 +1,16 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+
+export function isObject(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === "object";
+}
+
+export function isNegativeZero(i: number): boolean {
+  return i === 0 && Number.NEGATIVE_INFINITY === 1 / i;
+}
+
+export function isPlainObject(object: unknown): object is object {
+  return Object.prototype.toString.call(object) === "[object Object]";
+}

package/src/deps/jsr.io/@std/yaml/1.1.0/parse.ts

@@ -0,0 +1,125 @@
+// Ported from js-yaml v3.13.1:
+// https://github.com/nodeca/js-yaml/commit/665aadda42349dcae869f12040d9b10ef18d12da
+// Copyright 2011-2015 by Vitaly Puzrin. All rights reserved. MIT license.
+// Copyright 2018-2026 the Deno authors. MIT license.
+// This module is browser compatible.
+
+import { isEOL } from "./_chars.js";
+import { LoaderState } from "./_loader_state.js";
+import { SCHEMA_MAP, type SchemaType } from "./_schema.js";
+
+export type { SchemaType };
+
+/** Options for {@linkcode parse}. */
+export interface ParseOptions {
+  /**
+   * Name of the schema to use.
+   *
+   * @default {"default"}
+   */
+  schema?: SchemaType;
+  /**
+   * If `true`, duplicate keys will overwrite previous values. Otherwise,
+   * duplicate keys will throw a {@linkcode SyntaxError}.
+   *
+   * @default {false}
+   */
+  allowDuplicateKeys?: boolean;
+  /**
+   * If defined, a function to call on warning messages taking an
+   * {@linkcode Error} as its only argument.
+   */
+  onWarning?(error: Error): void;
+}
+
+function sanitizeInput(input: string) {
+  input = String(input);
+
+  if (input.length > 0) {
+    // Add trailing `\n` if not exists
+    if (!isEOL(input.charCodeAt(input.length - 1))) input += "\n";
+
+    // Strip BOM
+    if (input.charCodeAt(0) === 0xfeff) input = input.slice(1);
+  }
+
+  return input;
+}
+
+/**
+ * Parse and return a YAML string as a parsed YAML document object.
+ *
+ * Note: This does not support functions. Untrusted data is safe to parse.
+ *
+ * @example Usage
+ * ```ts
+ * import { parse } from "@std/yaml/parse";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const data = parse(`
+ * id: 1
+ * name: Alice
+ * `);
+ *
+ * assertEquals(data, { id: 1, name: "Alice" });
+ * ```
+ *
+ * @throws {SyntaxError} Throws error on invalid YAML.
+ * @param content YAML string to parse.
+ * @param options Parsing options.
+ * @returns Parsed document.
+ */
+export function parse(
+  content: string,
+  options: ParseOptions = {},
+): unknown {
+  content = sanitizeInput(content);
+  const state = new LoaderState(content, {
+    ...options,
+    schema: SCHEMA_MAP.get(options.schema!)!,
+  });
+  const documentGenerator = state.readDocuments();
+  const document = documentGenerator.next().value;
+  if (!documentGenerator.next().done) {
+    throw new SyntaxError(
+      "Found more than 1 document in the stream: expected a single document",
+    );
+  }
+  return document ?? null;
+}
+
+/**
+ * Same as {@linkcode parse}, but understands multi-document YAML sources, and
+ * returns multiple parsed YAML document objects.
+ *
+ * @example Usage
+ * ```ts
+ * import { parseAll } from "@std/yaml/parse";
+ * import { assertEquals } from "@std/assert";
+ *
+ * const data = parseAll(`
+ * ---
+ * id: 1
+ * name: Alice
+ * ---
+ * id: 2
+ * name: Bob
+ * ---
+ * id: 3
+ * name: Eve
+ * `);
+ * assertEquals(data, [ { id: 1, name: "Alice" }, { id: 2, name: "Bob" }, { id: 3, name: "Eve" }]);
+ * ```
+ *
+ * @param content YAML string to parse.
+ * @param options Parsing options.
+ * @returns Array of parsed documents.
+ */
+export function parseAll(content: string, options: ParseOptions = {}): unknown {
+  content = sanitizeInput(content);
+  const state = new LoaderState(content, {
+    ...options,
+    schema: SCHEMA_MAP.get(options.schema!)!,
+  });
+  return [...state.readDocuments()];
+}

package/src/extensions/ext-auth-jwt/src/index.ts

@@ -1,8 +1,8 @@
 /**
- * ext-auth-jwt — AuthProvider implementation backed by `jose`.
+ * ext-auth-jwt: AuthProvider implementation backed by `jose`.
  *
  * Provides the `AuthProvider` contract: sign / verify (HS256 by default),
- * verify-with-remote-JWKS, and decode-header.
+ * remote-JWKS verification, public-key verification, and header decoding.
  *
  * @module extensions/ext-auth-jwt
  */
@@ -12,6 +12,7 @@ import * as dntShim from "../../../_dnt.shims.js";
 import {
   createRemoteJWKSet,
   decodeProtectedHeader,
+  importSPKI,
   type JWTPayload,
   jwtVerify,
   type KeyLike,
@@ -83,6 +84,7 @@ function createAuthProvider(config: ExtJwtConfig): AuthProvider {
   // internal key cache with cooldown/rotation semantics, so reusing the
   // same resolver is required for the cache to be effective.
   const jwksResolvers = new Map<string, JwksResolver>();
+  const publicKeys = new Map<string, Promise<KeyLike>>();
 
   function getJwksResolver(jwksUrl: string): JwksResolver {
     const existing = jwksResolvers.get(jwksUrl);
@@ -92,6 +94,16 @@ function createAuthProvider(config: ExtJwtConfig): AuthProvider {
     return created;
   }
 
+  function getPublicKey(publicKeyPem: string, algorithm: string): Promise<KeyLike> {
+    const cacheKey = `${algorithm}:${publicKeyPem}`;
+    const existing = publicKeys.get(cacheKey);
+    if (existing) return existing;
+
+    const created = importSPKI(publicKeyPem, algorithm);
+    publicKeys.set(cacheKey, created);
+    return created;
+  }
+
   return {
     async sign(payload: TokenPayload, options?: SignOptions): Promise<string> {
       const secret = getSecret(config.secret);
@@ -136,6 +148,22 @@ function createAuthProvider(config: ExtJwtConfig): AuthProvider {
       return payload as TokenPayload;
     },
 
+    async verifyWithPublicKey(
+      token: string,
+      publicKeyPem: string,
+      options?: VerifyOptions,
+    ): Promise<TokenPayload> {
+      const algorithms = options?.algorithms ?? ["RS256"];
+      const algorithm = algorithms[0] ?? "RS256";
+      const publicKey = await getPublicKey(publicKeyPem, algorithm);
+      const { algorithms: _algorithms, ...rest } = options ?? {};
+      const { payload } = await jwtVerify(token, publicKey, {
+        ...rest,
+        algorithms,
+      });
+      return payload as TokenPayload;
+    },
+
     decode(token: string): TokenHeader | undefined {
       try {
         return decodeProtectedHeader(token) as TokenHeader;
@@ -161,7 +189,7 @@ const extJwt: ExtensionFactory = (config?: unknown) => {
     version: "0.1.0",
     capabilities: [
       { type: "contract", name: "AuthProvider" },
-      { type: "network", host: "*" },
+      { type: "net:outbound", hosts: ["*"] },
     ],
     provides: {
       AuthProvider: provider,

package/src/extensions/{ext-transform-mdx → ext-content-mdx}/src/compiler/markdown-compile.ts

@@ -12,10 +12,7 @@ import { visit } from "unist-util-visit";
 import { toString } from "mdast-util-to-string";
 import Slugger from "github-slugger";
 import type { Heading, Root as MdastRoot } from "@types/mdast";
-import type {
-  ContentCompileOptions,
-  ContentProcessingResult,
-} from "../../../../src/extensions/transform/index.js";
+import type { ContentCompileOptions, ContentProcessingResult } from "../../../../src/extensions/content/index.js";
 import { extractFrontmatter } from "../../../../src/transforms/mdx/compiler/frontmatter-extractor.js";
 import { isMarkdownPreview } from "../../../../src/transforms/md/utils.js";
 import { rehypeNodePositions } from "../plugins/rehype-node-positions.js";

package/src/extensions/{ext-transform-mdx → ext-content-mdx}/src/compiler/mdx-compile.ts

@@ -1,9 +1,6 @@
 import { compile } from "@mdx-js/mdx";
 import type { Pluggable } from "unified";
-import type {
-  ContentCompileOptions,
-  ContentProcessingResult,
-} from "../../../../src/extensions/transform/index.js";
+import type { ContentCompileOptions, ContentProcessingResult } from "../../../../src/extensions/content/index.js";
 import { extractFrontmatter } from "../../../../src/transforms/mdx/compiler/frontmatter-extractor.js";
 import { rewriteBodyImports, rewriteCompiledImports } from "../../../../src/transforms/mdx/compiler/import-rewriter.js";
 import { getRehypePlugins, getRemarkPlugins } from "../plugins/plugin-loader.js";
@@ -20,10 +17,19 @@ export async function compileMdx(options: ContentCompileOptions): Promise<Conten
     target = "server",
     baseUrl,
     studioEmbed,
+    outputFormat = "program",
+    remarkPlugins: additionalRemarkPlugins = [],
+    rehypePlugins: additionalRehypePlugins = [],
   } = options;
 
-  const remarkPlugins = getRemarkPlugins() as unknown as PluggableList;
-  const rehypePlugins = getRehypePlugins() as unknown as PluggableList;
+  const remarkPlugins = [
+    ...getRemarkPlugins(),
+    ...additionalRemarkPlugins,
+  ] as unknown as PluggableList;
+  const rehypePlugins = [
+    ...getRehypePlugins(),
+    ...additionalRehypePlugins,
+  ] as unknown as PluggableList;
 
   if (studioEmbed && filePath) {
     rehypePlugins.push([rehypeNodePositions, { filePath }] as unknown as Pluggable);
@@ -41,7 +47,7 @@ export async function compileMdx(options: ContentCompileOptions): Promise<Conten
     : extractedBody;
 
   const compiled = await compile(body, {
-    outputFormat: "program",
+    outputFormat,
     // Always false: @mdx-js/mdx development mode emits extra JSX
     // transforms that break the existing rendering pipeline.
     development: false,

package/src/extensions/{ext-transform-mdx → ext-content-mdx}/src/index.ts

@@ -1,5 +1,5 @@
 /**
- * ext-mdx: ContentProcessor implementation backed by MDX + remark/rehype.
+ * ext-content-mdx: ContentProcessor implementation backed by MDX + remark/rehype.
  *
  * Provides the `ContentProcessor` contract:
  *  - `compileMdx(options)` runs @mdx-js/mdx through Veryfront's remark +
@@ -14,7 +14,7 @@
  * core throws an actionable install message (see
  * `src/extensions/recommendations.ts`).
  *
- * @module extensions/ext-transform-mdx
+ * @module extensions/ext-content-mdx
  */
 
 import type { ExtensionFactory } from "../../../src/extensions/index.js";
@@ -23,7 +23,7 @@ import type {
   ContentPlugin,
   ContentProcessingResult,
   ContentProcessor,
-} from "../../../src/extensions/transform/index.js";
+} from "../../../src/extensions/content/index.js";
 import { compileMdx } from "./compiler/mdx-compile.js";
 import { compileMarkdown } from "./compiler/markdown-compile.js";
 import { getRehypePlugins, getRemarkPlugins } from "./plugins/plugin-loader.js";
@@ -46,12 +46,12 @@ class MdxContentProcessor implements ContentProcessor {
 const extMdx: ExtensionFactory = () => {
   const impl = new MdxContentProcessor();
   return {
-    name: "ext-transform-mdx",
+    name: "ext-content-mdx",
     version: "0.1.0",
     capabilities: [{ type: "contract", name: "ContentProcessor" }],
     setup(ctx) {
       ctx.provide("ContentProcessor", impl);
-      ctx.logger.info("[ext-mdx] ContentProcessor registered");
+      ctx.logger.info("[ext-content-mdx] ContentProcessor registered");
     },
     teardown() {
       // No resources to release.

package/src/extensions/ext-css-tailwind/src/index.ts

@@ -61,7 +61,7 @@ const extTailwind: ExtensionFactory = () => {
     version: "0.1.0",
     capabilities: [
       { type: "contract", name: "CSSProcessor" },
-      { type: "net", hosts: ["esm.sh"] },
+      { type: "net:outbound", hosts: ["esm.sh"] },
     ],
     setup(ctx) {
       installTailwindPluginShims();

package/src/extensions/ext-db-sqlite/src/index.ts

@@ -0,0 +1,45 @@
+/**
+ * ext-db-sqlite: SQLite-backed storage for Veryfront.
+ *
+ * Provides the `SqliteStore` contract via better-sqlite3.
+ *
+ * @module extensions/ext-db-sqlite
+ */
+
+import type { ExtensionFactory } from "../../../src/extensions/index.js";
+import type { SqliteDatabase, SqliteStore } from "../../../src/extensions/compat/index.js";
+
+async function loadSqliteDatabase(path?: string): Promise<SqliteDatabase> {
+  const mod = await import("better-sqlite3");
+  // deno-lint-ignore no-explicit-any
+  const DatabaseCtor = (mod as any).default ?? mod;
+  // deno-lint-ignore no-explicit-any
+  return new DatabaseCtor(path ?? ":memory:") as any as SqliteDatabase;
+}
+
+export class BetterSqliteStore implements SqliteStore {
+  openSqliteDatabase(path?: string): Promise<SqliteDatabase> {
+    return loadSqliteDatabase(path);
+  }
+}
+
+const extDbSqlite: ExtensionFactory = () => {
+  const store = new BetterSqliteStore();
+
+  return {
+    name: "ext-db-sqlite",
+    version: "0.1.0",
+    capabilities: [
+      { type: "contract", name: "SqliteStore" },
+      { type: "fs:read" },
+      { type: "fs:write" },
+    ],
+
+    setup(ctx) {
+      ctx.provide("SqliteStore", store);
+      ctx.logger.info("[ext-db-sqlite] SQLite store registered");
+    },
+  };
+};
+
+export default extDbSqlite;