veryfront 0.1.62 → 0.1.64

package/esm/src/server/handlers/dev/framework-candidates.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"framework-candidates.generated.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/dev/framework-candidates.generated.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAkkKjD,CAAC"}
+{"version":3,"file":"framework-candidates.generated.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/dev/framework-candidates.generated.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAmkKjD,CAAC"}

package/esm/src/server/handlers/dev/framework-candidates.generated.js

@@ -3058,10 +3058,10 @@ export const FRAMEWORK_CANDIDATES = [
     "html:",
     "html>",
     "https://ai-sdk.dev/elements)",
-    "https://esm.sh/mermaid@11",
-    "https://esm.sh/react-markdown@9?external=react",
-    "https://esm.sh/rehype-highlight@7?target=es2022",
-    "https://esm.sh/remark-gfm@4?target=es2022",
+    "https://esm.sh/mermaid@11.4.1?pin=v135",
+    "https://esm.sh/react-markdown@9.0.3?external=react",
+    "https://esm.sh/rehype-highlight@7.0.2?target=es2022",
+    "https://esm.sh/remark-gfm@4.0.1?target=es2022",
     "hydration",
     "i)",
     "icon",
@@ -4006,6 +4006,7 @@ export const FRAMEWORK_CANDIDATES = [
     "persistThreads],",
     "pickers,",
     "pill",
+    "pin=v135",
     "pl-2",
     "pl-2.5",
     "pl-3",

package/esm/src/server/handlers/preview/markdown-html-generator.js

@@ -76,7 +76,7 @@ export function generateMarkdownHtml(options) {
   ${studioScript}
 
   <script type="module">
-    import mermaid from 'https://esm.sh/mermaid@11';
+    import mermaid from 'https://esm.sh/mermaid@11.4.1?pin=v135';
 
     function getMermaidTheme() {
       return document.documentElement.dataset.theme === 'dark' ? 'dark' : 'default';

package/esm/src/server/handlers/request/api/api-handler-wrapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-handler-wrapper.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/api/api-handler-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAEf,aAAa,EACd,MAAM,gBAAgB,CAAC;AAqGxB,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,OAAO,CAAiE;IAChF,OAAO,CAAC,WAAW,CAA8B;IAEjD,QAAQ,EAAE,eAAe,CAGvB;gBAGA,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,uCAAuC,EAAE,cAAc;IAOnE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IA6C/E,OAAO,CAAC,iBAAiB;CA4D1B"}
+{"version":3,"file":"api-handler-wrapper.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/api/api-handler-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAEf,aAAa,EACd,MAAM,gBAAgB,CAAC;AAiBxB,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,OAAO,CAAiE;IAChF,OAAO,CAAC,WAAW,CAA8B;IAEjD,QAAQ,EAAE,eAAe,CAGvB;gBAGA,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,uCAAuC,EAAE,cAAc;IAOnE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IA6C/E,OAAO,CAAC,iBAAiB;CA4D1B"}

package/esm/src/server/handlers/request/api/api-handler-wrapper.js

@@ -2,80 +2,7 @@ import { BaseHandler } from "../../response/base.js";
 import { getApiHandler } from "./pages-api-handler.js";
 import { PRIORITY_MEDIUM_API } from "../../../../utils/constants/index.js";
 import { withSpan } from "../../../../observability/tracing/otlp-setup.js";
-import { serverLogger } from "../../../../utils/index.js";
-const logger = serverLogger.component("api-wrapper");
-/**
- * Tracks in-flight and completed AI discovery per project+release.
- *
- * Key: `{projectSlug}:{releaseId}` for production, `{projectSlug}:preview` for preview.
- * This ensures a new deployment triggers re-discovery of agents/tools.
- *
- * Using a Map<string, Promise> deduplicates concurrent requests and
- * allows retry on failure (the key is deleted if discovery rejects).
- */
-const discoveredProjects = new Map();
-/** Build a discovery cache key that incorporates the release/version. */
-function discoveryKey(ctx) {
-    const slug = ctx.projectSlug ?? ctx.projectDir;
-    const version = ctx.releaseId ?? "preview";
-    return `${slug}:${version}`;
-}
-/**
- * Run AI discovery (agents, tools) for a project if not already done.
- * Must be called within a runWithContext scope so the VFS can resolve
- * the correct remote project files and the agent registry uses the
- * correct project scope.
- */
-async function ensureProjectDiscovery(ctx) {
-    const key = discoveryKey(ctx);
-    const existing = discoveredProjects.get(key);
-    if (existing)
-        return existing;
-    const promise = (async () => {
-        const { discoverAll } = await import("../../../../discovery/index.js");
-        const { agentRegistry } = await import("../../../../agent/composition/composition.js");
-        const { toolRegistry } = await import("../../../../tool/registry.js");
-        // Clear stale entries for this project scope before re-discovery.
-        // This prevents agents/tools removed in a new release from lingering.
-        agentRegistry.clear();
-        toolRegistry.clear();
-        const result = await discoverAll({
-            baseDir: ctx.projectDir,
-            fsAdapter: ctx.adapter.fs,
-            verbose: false,
-        });
-        const logData = {
-            projectSlug: ctx.projectSlug,
-            releaseId: ctx.releaseId,
-            agents: result.agents.size,
-            tools: result.tools.size,
-            errors: result.errors.length,
-        };
-        if (result.agents.size === 0 && result.tools.size === 0) {
-            logger.warn("AI discovery found 0 agents and 0 tools", {
-                ...logData,
-                errorMessages: result.errors.map((e) => e.error.message).slice(0, 5),
-                baseDir: ctx.projectDir,
-            });
-        }
-        else {
-            logger.info("AI discovery completed", logData);
-        }
-    })();
-    discoveredProjects.set(key, promise);
-    try {
-        await promise;
-    }
-    catch (error) {
-        // Allow retry on next request
-        discoveredProjects.delete(key);
-        logger.warn("AI discovery failed (will retry)", {
-            projectSlug: ctx.projectSlug,
-            error: error instanceof Error ? error.message : String(error),
-            stack: error instanceof Error ? error.stack : undefined,
-        });
-    }
-}
+import { ensureProjectDiscovery } from "./project-discovery.js";
 export class ApiHandlerWrapper extends BaseHandler {
     projectDir;
     adapter;

package/esm/src/server/handlers/request/api/project-discovery.d.ts

@@ -0,0 +1,9 @@
+import type { HandlerContext } from "../../types.js";
+/**
+ * Run AI discovery (agents, tools) for a project if not already done.
+ * Must be called within a runWithContext scope so the VFS can resolve
+ * the correct remote project files and the agent registry uses the
+ * correct project scope.
+ */
+export declare function ensureProjectDiscovery(ctx: HandlerContext): Promise<void>;
+//# sourceMappingURL=project-discovery.d.ts.map

package/esm/src/server/handlers/request/api/project-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-discovery.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/api/project-discovery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAsBrD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAwD/E"}

package/esm/src/server/handlers/request/api/project-discovery.js

@@ -0,0 +1,74 @@
+import { serverLogger } from "../../../../utils/index.js";
+const logger = serverLogger.component("api-wrapper");
+/**
+ * Tracks in-flight and completed AI discovery per project+release.
+ *
+ * Key: `{projectSlug}:{releaseId}` for production, `{projectSlug}:preview` for preview.
+ * This ensures a new deployment triggers re-discovery of agents/tools.
+ *
+ * Using a Map<string, Promise> deduplicates concurrent requests and
+ * allows retry on failure (the key is deleted if discovery rejects).
+ */
+const discoveredProjects = new Map();
+/** Build a discovery cache key that incorporates the release/version. */
+function discoveryKey(ctx) {
+    const slug = ctx.projectSlug ?? ctx.projectDir;
+    const version = ctx.releaseId ?? "preview";
+    return `${slug}:${version}`;
+}
+/**
+ * Run AI discovery (agents, tools) for a project if not already done.
+ * Must be called within a runWithContext scope so the VFS can resolve
+ * the correct remote project files and the agent registry uses the
+ * correct project scope.
+ */
+export async function ensureProjectDiscovery(ctx) {
+    const key = discoveryKey(ctx);
+    const existing = discoveredProjects.get(key);
+    if (existing)
+        return existing;
+    const promise = (async () => {
+        const { discoverAll } = await import("../../../../discovery/index.js");
+        const { agentRegistry } = await import("../../../../agent/composition/composition.js");
+        const { toolRegistry } = await import("../../../../tool/registry.js");
+        // Clear stale entries for this project scope before re-discovery.
+        // This prevents agents/tools removed in a new release from lingering.
+        agentRegistry.clear();
+        toolRegistry.clear();
+        const result = await discoverAll({
+            baseDir: ctx.projectDir,
+            fsAdapter: ctx.adapter.fs,
+            verbose: false,
+        });
+        const logData = {
+            projectSlug: ctx.projectSlug,
+            releaseId: ctx.releaseId,
+            agents: result.agents.size,
+            tools: result.tools.size,
+            errors: result.errors.length,
+        };
+        if (result.agents.size === 0 && result.tools.size === 0) {
+            logger.warn("AI discovery found 0 agents and 0 tools", {
+                ...logData,
+                errorMessages: result.errors.map((e) => e.error.message).slice(0, 5),
+                baseDir: ctx.projectDir,
+            });
+        }
+        else {
+            logger.info("AI discovery completed", logData);
+        }
+    })();
+    discoveredProjects.set(key, promise);
+    try {
+        await promise;
+    }
+    catch (error) {
+        // Allow retry on next request
+        discoveredProjects.delete(key);
+        logger.warn("AI discovery failed (will retry)", {
+            projectSlug: ctx.projectSlug,
+            error: error instanceof Error ? error.message : String(error),
+            stack: error instanceof Error ? error.stack : undefined,
+        });
+    }
+}

package/esm/src/server/handlers/request/channel-assistants.handler.d.ts

@@ -0,0 +1,11 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerResult } from "../types.js";
+import { type ChannelInvokeDeps } from "../../../channels/invoke.js";
+export declare class ChannelAssistantsHandler extends BaseHandler {
+    private readonly deps;
+    metadata: HandlerMetadata;
+    constructor(deps?: ChannelInvokeDeps);
+    handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult>;
+}
+//# sourceMappingURL=channel-assistants.handler.d.ts.map

package/esm/src/server/handlers/request/channel-assistants.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-assistants.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/channel-assistants.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAEL,KAAK,iBAAiB,EAIvB,MAAM,6BAA6B,CAAC;AASrC,qBAAa,wBAAyB,SAAQ,WAAW;IAO3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,QAAQ,EAAE,eAAe,CAIvB;gBAE2B,IAAI,GAAE,iBAA4C;IAIzE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAgEhF"}

package/esm/src/server/handlers/request/channel-assistants.handler.js

@@ -0,0 +1,71 @@
+import { BaseHandler } from "../response/base.js";
+import { ChannelAssistantsRequestSchema, defaultChannelInvokeDeps, listChannelAssistants, verifyDispatchJws, } from "../../../channels/invoke.js";
+import { HTTP_INTERNAL_SERVER_ERROR, PRIORITY_MEDIUM_API, } from "../../../utils/constants/index.js";
+const DISPATCH_JWS_HEADER = "x-veryfront-dispatch-jws";
+const MAX_DISPATCH_SIGNATURE_AGE_SECONDS = 60;
+export class ChannelAssistantsHandler extends BaseHandler {
+    deps;
+    metadata = {
+        name: "ChannelAssistantsHandler",
+        priority: PRIORITY_MEDIUM_API,
+        patterns: [{ pattern: "/channels/assistants", exact: true, method: "POST" }],
+    };
+    constructor(deps = defaultChannelInvokeDeps) {
+        super();
+        this.deps = deps;
+    }
+    async handle(req, ctx) {
+        if (!this.shouldHandle(req, ctx)) {
+            return this.continue();
+        }
+        return this.withProxyContext(ctx, async () => {
+            const builder = this.createResponseBuilder(ctx)
+                .withCORS(req, ctx.securityConfig?.cors)
+                .withSecurity(ctx.securityConfig ?? undefined, req);
+            const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+            if (!publicKeyPem) {
+                this.logWarn("Missing CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY for channel assistants endpoint");
+                return this.respond(builder.json({ error: "Channel dispatch verification is not configured" }, HTTP_INTERNAL_SERVER_ERROR));
+            }
+            const projectSlug = ctx.projectSlug;
+            if (!projectSlug) {
+                this.logWarn("Channel assistants request arrived without resolved project slug");
+                return this.respond(builder.json({ error: "Project context is unavailable" }, 400));
+            }
+            const dispatchJws = req.headers.get(DISPATCH_JWS_HEADER);
+            if (!dispatchJws) {
+                return this.respond(builder.json({ error: "Missing dispatch signature" }, 401));
+            }
+            const rawBody = await req.text();
+            try {
+                await verifyDispatchJws(dispatchJws, rawBody, {
+                    audience: projectSlug,
+                    expectedProjectId: ctx.projectId,
+                    publicKeyPem,
+                    maxAgeSeconds: MAX_DISPATCH_SIGNATURE_AGE_SECONDS,
+                });
+            }
+            catch (error) {
+                this.logWarn("Channel assistants signature verification failed", {
+                    error: error instanceof Error ? error.message : String(error),
+                    projectSlug,
+                    projectId: ctx.projectId,
+                });
+                return this.respond(builder.json({ error: "Invalid dispatch signature" }, 401));
+            }
+            try {
+                ChannelAssistantsRequestSchema.parse(JSON.parse(rawBody));
+            }
+            catch (error) {
+                this.logWarn("Channel assistants request validation failed", {
+                    error: error instanceof Error ? error.message : String(error),
+                    projectSlug,
+                    projectId: ctx.projectId,
+                });
+                return this.respond(builder.json({ error: "Invalid channel assistants request" }, 400));
+            }
+            const response = await listChannelAssistants(ctx, this.deps);
+            return this.respond(builder.json(response, 200));
+        });
+    }
+}

package/esm/src/server/handlers/request/channel-invoke.handler.d.ts

@@ -0,0 +1,11 @@
+import * as dntShim from "../../../../_dnt.shims.js";
+import { BaseHandler } from "../response/base.js";
+import type { HandlerContext, HandlerMetadata, HandlerResult } from "../types.js";
+import { type ChannelInvokeDeps } from "../../../channels/invoke.js";
+export declare class ChannelInvokeHandler extends BaseHandler {
+    private readonly deps;
+    metadata: HandlerMetadata;
+    constructor(deps?: ChannelInvokeDeps);
+    handle(req: dntShim.Request, ctx: HandlerContext): Promise<HandlerResult>;
+}
+//# sourceMappingURL=channel-invoke.handler.d.ts.map

package/esm/src/server/handlers/request/channel-invoke.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-invoke.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/channel-invoke.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EACL,KAAK,iBAAiB,EAKvB,MAAM,6BAA6B,CAAC;AASrC,qBAAa,oBAAqB,SAAQ,WAAW;IAOvC,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,QAAQ,EAAE,eAAe,CAIvB;gBAE2B,IAAI,GAAE,iBAA4C;IAIzE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAiEhF"}

package/esm/src/server/handlers/request/channel-invoke.handler.js

@@ -0,0 +1,72 @@
+import { BaseHandler } from "../response/base.js";
+import { ChannelInvokeRequestSchema, defaultChannelInvokeDeps, executeChannelInvoke, verifyDispatchJws, } from "../../../channels/invoke.js";
+import { HTTP_INTERNAL_SERVER_ERROR, PRIORITY_MEDIUM_API, } from "../../../utils/constants/index.js";
+const DISPATCH_JWS_HEADER = "x-veryfront-dispatch-jws";
+const MAX_DISPATCH_SIGNATURE_AGE_SECONDS = 60;
+export class ChannelInvokeHandler extends BaseHandler {
+    deps;
+    metadata = {
+        name: "ChannelInvokeHandler",
+        priority: PRIORITY_MEDIUM_API,
+        patterns: [{ pattern: "/channels/invoke", exact: true, method: "POST" }],
+    };
+    constructor(deps = defaultChannelInvokeDeps) {
+        super();
+        this.deps = deps;
+    }
+    async handle(req, ctx) {
+        if (!this.shouldHandle(req, ctx)) {
+            return this.continue();
+        }
+        return this.withProxyContext(ctx, async () => {
+            const builder = this.createResponseBuilder(ctx)
+                .withCORS(req, ctx.securityConfig?.cors)
+                .withSecurity(ctx.securityConfig ?? undefined, req);
+            const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+            if (!publicKeyPem) {
+                this.logWarn("Missing CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY for channel invoke endpoint");
+                return this.respond(builder.json({ error: "Channel dispatch verification is not configured" }, HTTP_INTERNAL_SERVER_ERROR));
+            }
+            const projectSlug = ctx.projectSlug;
+            if (!projectSlug) {
+                this.logWarn("Channel invoke request arrived without resolved project slug");
+                return this.respond(builder.json({ error: "Project context is unavailable" }, 400));
+            }
+            const dispatchJws = req.headers.get(DISPATCH_JWS_HEADER);
+            if (!dispatchJws) {
+                return this.respond(builder.json({ error: "Missing dispatch signature" }, 401));
+            }
+            const rawBody = await req.text();
+            try {
+                await verifyDispatchJws(dispatchJws, rawBody, {
+                    audience: projectSlug,
+                    expectedProjectId: ctx.projectId,
+                    publicKeyPem,
+                    maxAgeSeconds: MAX_DISPATCH_SIGNATURE_AGE_SECONDS,
+                });
+            }
+            catch (error) {
+                this.logWarn("Channel invoke signature verification failed", {
+                    error: error instanceof Error ? error.message : String(error),
+                    projectSlug,
+                    projectId: ctx.projectId,
+                });
+                return this.respond(builder.json({ error: "Invalid dispatch signature" }, 401));
+            }
+            let payload;
+            try {
+                payload = ChannelInvokeRequestSchema.parse(JSON.parse(rawBody));
+            }
+            catch (error) {
+                this.logWarn("Channel invoke request validation failed", {
+                    error: error instanceof Error ? error.message : String(error),
+                    projectSlug,
+                    projectId: ctx.projectId,
+                });
+                return this.respond(builder.json({ error: "Invalid channel invoke request" }, 400));
+            }
+            const response = await executeChannelInvoke(payload, ctx, this.deps);
+            return this.respond(builder.json(response, 200));
+        });
+    }
+}

package/esm/src/server/runtime-handler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAwF7D,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAuanF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA0F7D,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAyanF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}

package/esm/src/server/runtime-handler/index.js

@@ -42,6 +42,8 @@ import { HMRHandler } from "../handlers/preview/hmr.handler.js";
 import { MarkdownPreviewHandler } from "../handlers/preview/markdown-preview.handler.js";
 import { OpenAPIHandler } from "../handlers/request/openapi.handler.js";
 import { OpenAPIDocsHandler } from "../handlers/request/openapi-docs.handler.js";
+import { ChannelAssistantsHandler } from "../handlers/request/channel-assistants.handler.js";
+import { ChannelInvokeHandler } from "../handlers/request/channel-invoke.handler.js";
 import { DevDashboardHandler } from "../handlers/dev/dashboard/index.js";
 import { ProjectsHandler } from "../handlers/dev/projects/index.js";
 // Extracted modules
@@ -123,6 +125,8 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
         new DebugContextHandler(),
         new OpenAPIHandler(),
         new OpenAPIDocsHandler(),
+        new ChannelAssistantsHandler(),
+        new ChannelInvokeHandler(),
         new DevDashboardHandler(),
         new ProjectsHandler(),
         new StudioBridgeModulesHandler(),

package/esm/src/transforms/md/compiler/md-compiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"md-compiler.d.ts","sourceRoot":"","sources":["../../../../../src/src/transforms/md/compiler/md-compiler.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,6BAA6B,CAAC;AAoDrC,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,GAAE,iBAA4B,EACrC,QAAQ,CAAC,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,gBAAgB,CAAC,CA2E3B"}
+{"version":3,"file":"md-compiler.d.ts","sourceRoot":"","sources":["../../../../../src/src/transforms/md/compiler/md-compiler.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,6BAA6B,CAAC;AAoDrC,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,GAAE,iBAA4B,EACrC,QAAQ,CAAC,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,OAAO,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAmG3B"}

package/esm/src/transforms/md/compiler/md-compiler.js

@@ -5,6 +5,8 @@ import remarkFrontmatter from "remark-frontmatter";
 import remarkRehype from "remark-rehype";
 import rehypeStarryNight from "rehype-starry-night";
 import rehypeSlug from "rehype-slug";
+import rehypeRaw from "rehype-raw";
+import rehypeSanitize, { defaultSchema } from "rehype-sanitize";
 import rehypeStringify from "rehype-stringify";
 import { visit } from "unist-util-visit";
 import { toString } from "mdast-util-to-string";
@@ -62,11 +64,33 @@ export function compileMarkdownRuntime(_mode, _projectDir, content, frontmatter,
                 .use(remarkRehype, { allowDangerousHtml: true })
                 .use(rehypeStarryNight)
                 .use(rehypeSlug);
+            // Parse raw HTML nodes into proper elements before sanitizing.
+            pipeline.use(rehypeRaw);
+            // Add node positions after rehype-raw so attributes survive re-parsing.
             if (studioEmbed && filePath) {
                 pipeline.use(rehypeNodePositions, { filePath });
             }
+            // Extend the sanitize schema in studio embed mode to preserve
+            // data-node-* attributes used for element-to-source mapping.
+            const sanitizeSchema = studioEmbed
+                ? {
+                    ...defaultSchema,
+                    attributes: {
+                        ...defaultSchema.attributes,
+                        "*": [
+                            ...(defaultSchema.attributes?.["*"] ?? []),
+                            "data-node-file",
+                            "data-node-name",
+                            "data-node-line",
+                            "data-node-column",
+                            "data-node-source",
+                        ],
+                    },
+                }
+                : defaultSchema;
             const result = await pipeline
-                .use(rehypeStringify, { allowDangerousHtml: true })
+                .use(rehypeSanitize, sanitizeSchema)
+                .use(rehypeStringify)
                 .process(body);
             const html = String(result);
             logger.debug("Compiled markdown:", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.62",
+  "version": "0.1.64",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -151,6 +151,8 @@
     "react-dom": "19.1.1",
     "redis": "4.6.13",
     "rehype-highlight": "7.0.2",
+    "rehype-raw": "7.0.0",
+    "rehype-sanitize": "6.0.0",
     "rehype-slug": "6.0.0",
     "rehype-starry-night": "2.2.0",
     "rehype-stringify": "10.0.1",