veryfront 0.1.536 → 0.1.537

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.536",
+  "version": "0.1.537",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "workspace": [
@@ -331,8 +331,8 @@ export default {
     "fmt": "deno fmt src/ cli/ react/",
     "fmt:check": "deno fmt --check src/ cli/ react/",
     "typecheck": "deno task generate && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/modules/index.ts src/proxy/main.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/agent/service/route-export.check.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/jobs/index.ts src/mcp/index.ts src/provider/index.ts",
-    "verify": "deno task generate && deno fmt --check src/ cli/ react/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ react/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task lint:core-deps && deno task lint:dependency-boundaries && deno task lint:extension-contracts && deno task docs:validate && deno task typecheck && deno task test && deno task test:e2e:binary",
-    "verify:quick": "deno task generate && deno fmt --check src/ cli/ react/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ react/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task lint:core-deps && deno task lint:dependency-boundaries && deno task lint:extension-contracts && deno task docs:validate && deno task typecheck",
+    "verify": "deno task generate && deno fmt --check src/ cli/ react/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ react/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task lint:core-deps && deno task lint:dependency-boundaries && deno task lint:extension-contracts && deno task lint:extension-capabilities && deno task docs:validate && deno task typecheck && deno task test && deno task test:e2e:binary",
+    "verify:quick": "deno task generate && deno fmt --check src/ cli/ react/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ react/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-zod && deno task lint:core-deps && deno task lint:dependency-boundaries && deno task lint:extension-contracts && deno task lint:extension-capabilities && deno task docs:validate && deno task typecheck",
     "docs": "rm -rf docs/reference && deno run --allow-read --allow-write --allow-run scripts/docs/generate-api-reference.ts",
     "docs:copy": "rm -rf ../../docs/docs/code/reference && cp -r docs/reference/ ../../docs/docs/code/reference/",
     "docs:validate": "deno run --allow-read scripts/docs/validate-api-reference.ts",
@@ -342,6 +342,7 @@ export default {
     "lint:core-deps": "deno run --allow-read scripts/lint/audit-core-deps.ts",
     "lint:dependency-boundaries": "deno run --allow-read scripts/lint/audit-dependency-boundaries.ts",
     "lint:extension-contracts": "deno run --allow-read --allow-env --allow-sys scripts/lint/audit-extension-contracts.ts",
+    "lint:extension-capabilities": "deno run --allow-read --allow-env --allow-sys scripts/lint/audit-extension-capabilities.ts",
     "lint:ban-console": "deno run --allow-read scripts/lint/ban-console.ts",
     "lint:ban-deep-imports": "deno run --allow-read scripts/lint/ban-deep-imports.ts",
     "lint:imports": "deno run --allow-read scripts/lint/no-cross-boundary-relative-imports.ts",
@@ -355,7 +356,7 @@ export default {
     "lint:wildcard-exports": "deno run --allow-read scripts/lint/ban-wildcard-exports.ts",
     "lint:deps": "deno run --allow-read scripts/lint/audit-deps.ts",
     "lint:barrel-jsdoc": "deno run --allow-read scripts/lint/check-barrel-jsdoc.ts",
-    "test:scripts": "deno test --config=scripts/test.deno.json --no-check --allow-read --allow-write scripts/build/generate-sbom.test.ts scripts/build/npm-react-shims.test.ts scripts/lint/audit-core-deps.test.ts scripts/lint/audit-dependency-boundaries.test.ts scripts/lint/audit-extension-contracts.test.ts scripts/lint/audit-deps.test.ts scripts/security/audit-npm.test.ts scripts/security/submit-dependency-snapshot.test.ts",
+    "test:scripts": "deno test --config=scripts/test.deno.json --no-check --allow-read --allow-write scripts/build/generate-sbom.test.ts scripts/build/npm-react-shims.test.ts scripts/lint/audit-core-deps.test.ts scripts/lint/audit-dependency-boundaries.test.ts scripts/lint/audit-extension-capabilities.test.ts scripts/lint/audit-extension-contracts.test.ts scripts/lint/audit-deps.test.ts scripts/security/audit-npm.test.ts scripts/security/submit-dependency-snapshot.test.ts",
     "test:cross-runtime": "deno run --allow-all src/platform/compat/cross-runtime.test.ts",
     "test:node": "node ./tests/node/run-tests.mjs 'src/**/*.test.ts'",
     "test:bun": "node ./tests/bun/run-tests.mjs src/",

package/src/extensions/ext-sandbox-shell-tools/src/index.ts

@@ -30,7 +30,9 @@ const extSandboxShellTools: ExtensionFactory = () => ({
   contracts: {
     provides: [SandboxShellToolsProviderName],
   },
-  capabilities: [],
+  capabilities: [
+    { type: "sandbox:execute", tools: ["bash"] },
+  ],
   setup(ctx) {
     ctx.provide(SandboxShellToolsProviderName, provider);
     ctx.logger.info("[ext-sandbox-shell-tools] Sandbox shell tools provider registered");

package/src/src/agent/runtime/provider-tool-compat.ts

@@ -20,6 +20,8 @@ export interface ProviderToolCompatOptions {
 }
 
 const OPENAI_MAX_TOOLS = 128;
+const PROVIDER_TOOL_PROPERTY_KEY_PATTERN = /^[a-zA-Z0-9_.-]{1,64}$/;
+
 const GOOGLE_UNSUPPORTED_SCHEMA_KEYS = new Set([
   "$id",
   "$ref",
@@ -51,7 +53,7 @@ export function getProviderToolProfile(model?: string): ProviderToolProfile {
   }
 
   if (provider === "anthropic") {
-    return { provider: "anthropic", sanitizeSchema: false };
+    return { provider: "anthropic", sanitizeSchema: true };
   }
 
   if (provider === "moonshot") {
@@ -184,6 +186,44 @@ function getGoogleCompatibleSchemaType(type: unknown): unknown {
   return nonNullTypes.length === 1 ? nonNullTypes[0] : undefined;
 }
 
+function sanitizeProviderSchemaPropertyKeys(value: unknown): unknown {
+  if (Array.isArray(value)) {
+    return value.map((item) => sanitizeProviderSchemaPropertyKeys(item));
+  }
+
+  if (!isPlainRecord(value)) {
+    return value;
+  }
+
+  const sanitized: Record<string, unknown> = {};
+  const rawProperties = isPlainRecord(value.properties) ? value.properties : undefined;
+  const retainedPropertyNames = rawProperties ? new Set<string>() : undefined;
+
+  for (const [key, child] of Object.entries(value)) {
+    if (key === "properties" && rawProperties) {
+      const properties: Record<string, unknown> = {};
+      for (const [propertyName, propertySchema] of Object.entries(rawProperties)) {
+        if (!PROVIDER_TOOL_PROPERTY_KEY_PATTERN.test(propertyName)) continue;
+        retainedPropertyNames?.add(propertyName);
+        properties[propertyName] = sanitizeProviderSchemaPropertyKeys(propertySchema);
+      }
+      sanitized.properties = properties;
+      continue;
+    }
+
+    if (key === "required" && Array.isArray(child)) {
+      sanitized.required = retainedPropertyNames
+        ? child.filter((item) => typeof item === "string" && retainedPropertyNames.has(item))
+        : child.filter((item) => typeof item === "string");
+      continue;
+    }
+
+    sanitized[key] = sanitizeProviderSchemaPropertyKeys(child);
+  }
+
+  return sanitized;
+}
+
 function sanitizeGoogleSchemaValue(value: unknown): unknown {
   if (Array.isArray(value)) {
     return value.map((item) => sanitizeGoogleSchemaValue(item));
@@ -254,5 +294,11 @@ export function sanitizeProviderToolSchema(
   const profile = getProviderToolProfile(options.model);
   if (!profile.sanitizeSchema) return schema;
 
-  return sanitizeGoogleSchemaValue(schema) as JsonSchema;
+  const propertyKeySafeSchema = sanitizeProviderSchemaPropertyKeys(schema);
+
+  if (profile.provider === "google") {
+    return sanitizeGoogleSchemaValue(propertyKeySafeSchema) as JsonSchema;
+  }
+
+  return propertyKeySafeSchema as JsonSchema;
 }