veryfront 0.1.645 → 0.1.646

package/esm/src/server/handlers/request/agent-stream.handler.js

@@ -73,6 +73,28 @@ function mergeAllowedRemoteTools(current, requestedToolNames) {
     }
     return [...allowed].sort();
 }
+function getVeryfrontApiMcpPolicy(agent) {
+    const requestedToolNames = new Set();
+    const deniedToolNames = new Set();
+    let allowAll = false;
+    for (const server of agent.config.mcpServers ?? []) {
+        if (!("kind" in server) || server.kind !== "veryfront-api") {
+            continue;
+        }
+        for (const toolName of server.toolPolicy?.deny ?? []) {
+            deniedToolNames.add(toolName);
+        }
+        if (server.toolPolicy?.allow) {
+            for (const toolName of server.toolPolicy.allow) {
+                requestedToolNames.add(toolName);
+            }
+        }
+        else {
+            allowAll = true;
+        }
+    }
+    return { allowAll, requestedToolNames: [...requestedToolNames], deniedToolNames };
+}
 function hasVeryfrontPlatformRemoteToolSource(remoteTools) {
     return remoteTools?.some((source) => source.id === VERYFRONT_PLATFORM_REMOTE_TOOL_SOURCE_ID) ??
         false;
@@ -85,11 +107,12 @@ function createStaticRemoteToolSource(source, toolDefinitions) {
     };
 }
 async function withVeryfrontPlatformRemoteTools(input) {
+    const veryfrontApiMcpPolicy = getVeryfrontApiMcpPolicy(input.agent);
     const requestedToolNames = getRequestedUnresolvedBooleanToolNames({
         agent: input.agent,
         availableToolNames: input.availableToolNames,
-    });
-    if (requestedToolNames.length === 0 || !input.token) {
+    }).concat(veryfrontApiMcpPolicy.requestedToolNames);
+    if ((!veryfrontApiMcpPolicy.allowAll && requestedToolNames.length === 0) || !input.token) {
         return input.agent;
     }
     const apiUrl = getHostEnv("VERYFRONT_API_URL") ?? "https://api.veryfront.com";
@@ -114,24 +137,26 @@ async function withVeryfrontPlatformRemoteTools(input) {
         ? new Set(platformToolDefinitions.map((tool) => tool.name))
         : null;
     const requestedPlatformToolNames = platformToolNames
-        ? requestedToolNames.filter((toolName) => platformToolNames.has(toolName))
-        : requestedToolNames;
+        ? (veryfrontApiMcpPolicy.allowAll ? [...platformToolNames] : requestedToolNames).filter((toolName) => platformToolNames.has(toolName) && !veryfrontApiMcpPolicy.deniedToolNames.has(toolName))
+        : requestedToolNames.filter((toolName) => !veryfrontApiMcpPolicy.deniedToolNames.has(toolName));
     if (requestedPlatformToolNames.length === 0) {
         return input.agent;
     }
-    const remoteTools = input.agent.config.remoteTools ?? [];
+    const runtimeRemoteToolConfig = input.agent.config;
+    const remoteTools = runtimeRemoteToolConfig.__vfRemoteToolSources ?? [];
     const platformRemoteToolSources = hasVeryfrontPlatformRemoteToolSource(remoteTools) ? [] : [
         platformToolDefinitions
             ? createStaticRemoteToolSource(platformRemoteToolSource, platformToolDefinitions)
             : platformRemoteToolSource,
     ];
+    const runtimeConfig = {
+        ...input.agent.config,
+        __vfAllowedRemoteTools: mergeAllowedRemoteTools(runtimeRemoteToolConfig.__vfAllowedRemoteTools, requestedPlatformToolNames),
+        __vfRemoteToolSources: [...remoteTools, ...platformRemoteToolSources],
+    };
     return {
         ...input.agent,
-        config: {
-            ...input.agent.config,
-            allowedRemoteTools: mergeAllowedRemoteTools(input.agent.config.allowedRemoteTools, requestedPlatformToolNames),
-            remoteTools: [...remoteTools, ...platformRemoteToolSources],
-        },
+        config: runtimeConfig,
     };
 }
 function buildAgentStreamEnv(input) {

package/esm/src/skill/prompt-augmentation.d.ts

@@ -10,7 +10,7 @@ import type { Skill } from "./types.js";
  * Build the skill manifest prompt section for an agent's system prompt.
  *
  * Lists all available skills with their descriptions and instructions
- * on how to use the skill tools (load-skill, load-skill-reference, execute-skill-script).
+ * on how to use the skill tools (load_skill, load_skill_reference, execute_skill_script).
  *
  * @param skills - Map of resolved skills for the agent
  * @returns Prompt section string, or empty string if no skills

package/esm/src/skill/prompt-augmentation.js

@@ -9,7 +9,7 @@
  * Build the skill manifest prompt section for an agent's system prompt.
  *
  * Lists all available skills with their descriptions and instructions
- * on how to use the skill tools (load-skill, load-skill-reference, execute-skill-script).
+ * on how to use the skill tools (load_skill, load_skill_reference, execute_skill_script).
  *
  * @param skills - Map of resolved skills for the agent
  * @returns Prompt section string, or empty string if no skills
@@ -20,7 +20,7 @@ export function buildSkillManifestPrompt(skills) {
     const lines = [
         "## Available Skills",
         "",
-        "You have access to skills via tool calling. IMPORTANT: You MUST call the load-skill tool (not write it as text) to activate a skill before performing skill-related tasks.",
+        "You have access to skills via tool calling. IMPORTANT: You MUST call the load_skill tool (not write it as text) to activate a skill before performing skill-related tasks.",
         "",
     ];
     for (const [id, skill] of skills) {
@@ -29,8 +29,8 @@ export function buildSkillManifestPrompt(skills) {
     lines.push("");
     lines.push("### Skill Tools (call these as tools, never write them as text)");
     lines.push("");
-    lines.push("- load-skill: Call with { skillId } to load a skill's full instructions and available references/resources/scripts");
-    lines.push("- load-skill-reference: Call with { skillId, reference } to read a file from the skill's references/, resources/, or assets/ directory");
-    lines.push("- execute-skill-script: Call with { skillId, script, args?, env?, timeoutMs? } to execute a script");
+    lines.push("- load_skill: Call with { skillId } to load a skill's full instructions and available references/resources/scripts");
+    lines.push("- load_skill_reference: Call with { skillId, reference } to read a file from the skill's references/, resources/, or assets/ directory");
+    lines.push("- execute_skill_script: Call with { skillId, script, args?, env?, timeoutMs? } to execute a script");
     return lines.join("\n");
 }

package/esm/src/skill/tools.d.ts

@@ -2,25 +2,25 @@
  * Skill Tools
  *
  * Three tools exposed to agents for interacting with skills:
- * - load-skill: Load a skill's full instructions
- * - load-skill-reference: Read a reference file from a skill
- * - execute-skill-script: Execute a script from a skill
+ * - load_skill: Load a skill's full instructions
+ * - load_skill_reference: Read a reference file from a skill
+ * - execute_skill_script: Execute a script from a skill
  *
  * @module
  */
 import type { Tool } from "../tool/index.js";
 /**
- * Create the load-skill tool.
+ * Create the load_skill tool.
  * Loads a skill's full instructions, available references, and scripts.
  */
 export declare function createLoadSkillTool(): Tool;
 /**
- * Create the load-skill-reference tool.
+ * Create the load_skill_reference tool.
  * Reads a reference file from a skill's references/, resources/, or assets/ directory.
  */
 export declare function createLoadSkillReferenceTool(): Tool;
 /**
- * Create the execute-skill-script tool.
+ * Create the execute_skill_script tool.
  * Executes a script from a skill's scripts/ directory.
  */
 export declare function createExecuteSkillScriptTool(): Tool;

package/esm/src/skill/tools.js

@@ -2,9 +2,9 @@
  * Skill Tools
  *
  * Three tools exposed to agents for interacting with skills:
- * - load-skill: Load a skill's full instructions
- * - load-skill-reference: Read a reference file from a skill
- * - execute-skill-script: Execute a script from a skill
+ * - load_skill: Load a skill's full instructions
+ * - load_skill_reference: Read a reference file from a skill
+ * - execute_skill_script: Execute a script from a skill
  *
  * @module
  */
@@ -52,23 +52,23 @@ async function readSkillFile(skill, path) {
 }
 function buildSkillAvailabilityNote(references, scripts) {
     if (scripts.length === 0 && references.length === 0) {
-        return "This skill has no scripts or reference files. Do NOT call execute-skill-script or load-skill-reference.";
+        return "This skill has no scripts or reference files. Do NOT call execute_skill_script or load_skill_reference.";
     }
     if (scripts.length === 0) {
-        return "This skill has no scripts. Do NOT call execute-skill-script.";
+        return "This skill has no scripts. Do NOT call execute_skill_script.";
     }
     if (references.length === 0) {
-        return "This skill has no reference files. Do NOT call load-skill-reference.";
+        return "This skill has no reference files. Do NOT call load_skill_reference.";
     }
     return undefined;
 }
 /**
- * Create the load-skill tool.
+ * Create the load_skill tool.
  * Loads a skill's full instructions, available references, and scripts.
  */
 export function createLoadSkillTool() {
     return tool({
-        id: "load-skill",
+        id: "load_skill",
         description: "Load a skill's full instructions. Returns the skill's markdown instructions, " +
             "allowed tools policy, and lists of available reference files and scripts.",
         inputSchema: getLoadSkillInputSchema(),
@@ -86,7 +86,7 @@ export function createLoadSkillTool() {
             const content = await readSkillFile(skill, skillMdPath);
             // Parse frontmatter to get instructions
             const parsed = await parseSkillFrontmatter(content);
-            // List available files the agent can load through load-skill-reference.
+            // List available files the agent can load through load_skill_reference.
             const [references, resources, scripts] = await Promise.all([
                 listSkillSubdir(skill.rootPath, SKILL_REFERENCES_DIR, skill.fsAdapter),
                 listSkillSubdir(skill.rootPath, SKILL_RESOURCES_DIR, skill.fsAdapter),
@@ -105,12 +105,12 @@ export function createLoadSkillTool() {
     });
 }
 /**
- * Create the load-skill-reference tool.
+ * Create the load_skill_reference tool.
  * Reads a reference file from a skill's references/, resources/, or assets/ directory.
  */
 export function createLoadSkillReferenceTool() {
     return tool({
-        id: "load-skill-reference",
+        id: "load_skill_reference",
         description: "Read a reference file from a skill. Only files in the skill's " +
             "references/, resources/, and assets/ directories are accessible.",
         inputSchema: getLoadSkillReferenceInputSchema(),
@@ -130,12 +130,12 @@ export function createLoadSkillReferenceTool() {
     });
 }
 /**
- * Create the execute-skill-script tool.
+ * Create the execute_skill_script tool.
  * Executes a script from a skill's scripts/ directory.
  */
 export function createExecuteSkillScriptTool() {
     return tool({
-        id: "execute-skill-script",
+        id: "execute_skill_script",
         description: "Execute a script from a skill's scripts/ directory. Returns stdout, stderr, and exit code.",
         inputSchema: getExecuteSkillScriptInputSchema(),
         execute: async (input) => {

package/esm/src/skill/types.d.ts

@@ -37,7 +37,7 @@ export interface SkillMetadata {
     /** Arbitrary key-value metadata */
     metadata?: Record<string, string>;
 }
-/** Full skill content returned by load-skill tool */
+/** Full skill content returned by load_skill tool */
 export interface SkillContent {
     /** Markdown instructions (body after frontmatter) */
     instructions: string;

package/esm/src/skill/types.js

@@ -17,9 +17,9 @@ export const SKILL_DESCRIPTION_MAX_LENGTH = 1024;
 export const SKILL_MD_FILENAME = "SKILL.md";
 /** Tool IDs that belong to the skill system (single source of truth) */
 export const SKILL_TOOL_IDS = new Set([
-    "load-skill",
-    "load-skill-reference",
-    "execute-skill-script",
+    "load_skill",
+    "load_skill_reference",
+    "execute_skill_script",
 ]);
 /** Conventional subdirectory names */
 export const SKILL_SCRIPTS_DIR = "scripts";

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.645";
+export declare const VERSION = "0.1.646";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.645";
+export const VERSION = "0.1.646";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.645",
+  "version": "0.1.646",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",