veryfront 0.1.67 → 0.1.70

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.67",
+    "version": "0.1.70",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "exclude": [

package/esm/src/agent/factory.d.ts

@@ -1,3 +1,8 @@
-import type { Agent, AgentConfig } from "./types.js";
+import type { Agent, AgentConfig, AgentMiddleware } from "./types.js";
 export declare function agent(config: AgentConfig): Agent;
+/**
+ * Resolve the middleware array for an agent, prepending security middleware
+ * unless explicitly opted out with `security: false`.
+ */
+export declare function resolveSecurityMiddleware(config: Pick<AgentConfig, "security" | "middleware">): AgentMiddleware[];
 //# sourceMappingURL=factory.d.ts.map

package/esm/src/agent/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/src/agent/factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EAKZ,MAAM,YAAY,CAAC;AA8CpB,wBAAgB,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAyMhD"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/src/agent/factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,eAAe,EAKhB,MAAM,YAAY,CAAC;AA+CpB,wBAAgB,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CA4MhD;AAcD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,YAAY,CAAC,GACnD,eAAe,EAAE,CAcnB"}

package/esm/src/agent/factory.js

@@ -9,6 +9,7 @@ import { createExecuteSkillScriptTool, createLoadSkillReferenceTool, createLoadS
 import { agentRegistry } from "./composition/index.js";
 import { agentLogger } from "../utils/logger/logger.js";
 import { createError, toError } from "../errors/veryfront-error.js";
+import { COMMON_BLOCKED_PATTERNS, securityMiddleware } from "./middleware/security/validator.js";
 import { withSpan } from "../observability/tracing/otlp-setup.js";
 import { resolveConfiguredAgentModel } from "./runtime/model-resolution.js";
 const STREAMING_HEADERS = {
@@ -90,6 +91,7 @@ export function agent(config) {
             return `${basePrompt}\n\n${buildSkillManifestPrompt(currentSkills)}`;
         }
         : originalSystem;
+    const resolvedMiddleware = resolveSecurityMiddleware(config);
     const platform = detectPlatform();
     const compatibility = validatePlatformCompatibility({
         maxSteps: config.maxSteps,
@@ -110,6 +112,7 @@ export function agent(config) {
         ...publicConfig,
         tools: mergedToolsConfig,
         system: augmentedSystem,
+        middleware: resolvedMiddleware,
     });
     const agentInstance = {
         id,
@@ -171,7 +174,34 @@ export function agent(config) {
 // Register on globalThis so compiled-binary runtime shim can delegate to the
 // real factory. External temp-file modules can't import from the embedded
 // binary FS, so they use globalThis bridges instead.
-dntShim.dntGlobalThis.__vfAgentFactory = agent;
+if (!("__vfAgentFactory" in dntShim.dntGlobalThis)) {
+    Object.defineProperty(dntShim.dntGlobalThis, "__vfAgentFactory", {
+        value: agent,
+        writable: false,
+        enumerable: false,
+        configurable: false,
+    });
+}
+/**
+ * Resolve the middleware array for an agent, prepending security middleware
+ * unless explicitly opted out with `security: false`.
+ */
+export function resolveSecurityMiddleware(config) {
+    if (config.security === false)
+        return config.middleware ?? [];
+    return [
+        securityMiddleware({
+            input: {
+                maxLength: 50_000,
+                blockedPatterns: COMMON_BLOCKED_PATTERNS.promptInjection,
+            },
+            output: {
+                filterPII: true,
+            },
+        }),
+        ...(config.middleware ?? []),
+    ];
+}
 let agentIdCounter = 0;
 function generateAgentId() {
     return `agent_${Date.now()}_${agentIdCounter++}`;

package/esm/src/agent/types.d.ts

@@ -45,6 +45,8 @@ export interface AgentConfig {
      * and registers the skill tools.
      */
     skills?: true | string[];
+    /** Set to false to disable the default security middleware */
+    security?: false;
 }
 export type ResolvedAgentConfig = AgentConfig & {
     model: ModelString;

package/esm/src/agent/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/agent/types.ts"],"names":[],"mappings":"AAAA;;4BAE4B;AAC5B,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAG/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAG3D,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,YAAY,EACZ,OAAO,EACP,WAAW,EACX,aAAa,EACb,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAGjC,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,UAAU,CAAC,EAAE;QACX,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,0EAA0E;IAC1E,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,CAAC;AAGvE,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,KAC/B,OAAO,CAAC,aAAa,CAAC,CAAC;AAG5B,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,CAK7D;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,IAAI,oBAAoB,CAExE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,IAAI,qBAAqB,CAE1E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAS5E;AAED,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,OAAO,CAAC,EAAE;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,QAAQ,CAAC;CACtB;AAED,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAE5B,QAAQ,CAAC,KAAK,EAAE;QACd,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,qGAAqG;QACrG,KAAK,CAAC,EAAE,WAAW,CAAC;QACpB,iEAAiE;QACjE,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,MAAM,CAAC,KAAK,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,qGAAqG;QACrG,KAAK,CAAC,EAAE,WAAW,CAAC;QACpB,iEAAiE;QACjE,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;KACnC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE/B,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7D,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAE7B,cAAc,IAAI,OAAO,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/agent/types.ts"],"names":[],"mappings":"AAAA;;4BAE4B;AAC5B,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAG/C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAG3D,YAAY,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,YAAY,EACZ,OAAO,EACP,WAAW,EACX,aAAa,EACb,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAGjC,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,UAAU,CAAC,EAAE;QACX,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,0EAA0E;IAC1E,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,CAAC;AAGvE,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,KAC/B,OAAO,CAAC,aAAa,CAAC,CAAC;AAG5B,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,CAK7D;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,IAAI,oBAAoB,CAExE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,IAAI,qBAAqB,CAE1E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAS5E;AAED,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,CAAC,OAAO,CAAC,EAAE;QAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,QAAQ,CAAC;CACtB;AAED,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAE5B,QAAQ,CAAC,KAAK,EAAE;QACd,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,qGAAqG;QACrG,KAAK,CAAC,EAAE,WAAW,CAAC;QACpB,iEAAiE;QACjE,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,MAAM,CAAC,KAAK,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,qGAAqG;QACrG,KAAK,CAAC,EAAE,WAAW,CAAC;QACpB,iEAAiE;QACjE,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;KACnC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE/B,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7D,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAE7B,cAAc,IAAI,OAAO,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IAEH,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B"}

package/esm/src/build/binary-plugin-includes.d.ts

@@ -0,0 +1,5 @@
+declare const BINARY_TAILWIND_PLUGIN_PACKAGES: readonly ["tailwindcss-animate@1.0.7", "@tailwindcss/typography@0.5.19", "@tailwindcss/forms@0.5.11", "tailwind-scrollbar-hide@2.0.0", "daisyui@5.5.14"];
+export declare function getTailwindPluginBundleUrl(packageName: string): string;
+export declare function getBinaryPluginBundleIncludes(): string[];
+export { BINARY_TAILWIND_PLUGIN_PACKAGES };
+//# sourceMappingURL=binary-plugin-includes.d.ts.map

package/esm/src/build/binary-plugin-includes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-plugin-includes.d.ts","sourceRoot":"","sources":["../../../src/src/build/binary-plugin-includes.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,+BAA+B,0JAM3B,CAAC;AAEX,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,6BAA6B,IAAI,MAAM,EAAE,CAExD;AAED,OAAO,EAAE,+BAA+B,EAAE,CAAC"}

package/esm/src/build/binary-plugin-includes.js

@@ -0,0 +1,14 @@
+const BINARY_TAILWIND_PLUGIN_PACKAGES = [
+    "tailwindcss-animate@1.0.7",
+    "@tailwindcss/typography@0.5.19",
+    "@tailwindcss/forms@0.5.11",
+    "tailwind-scrollbar-hide@2.0.0",
+    "daisyui@5.5.14",
+];
+export function getTailwindPluginBundleUrl(packageName) {
+    return `https://esm.sh/${packageName}?bundle&external=tailwindcss&target=denonext`;
+}
+export function getBinaryPluginBundleIncludes() {
+    return BINARY_TAILWIND_PLUGIN_PACKAGES.map(getTailwindPluginBundleUrl);
+}
+export { BINARY_TAILWIND_PLUGIN_PACKAGES };

package/esm/src/html/styles-builder/plugin-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../../../src/src/html/styles-builder/plugin-loader.ts"],"names":[],"mappings":"AAuGA;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA0D/E;AAED,wBAAsB,UAAU,CAC9B,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC,CAmClB"}
+{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../../../src/src/html/styles-builder/plugin-loader.ts"],"names":[],"mappings":"AAwGA;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA0D/E;AAED,wBAAsB,UAAU,CAC9B,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAC/B,OAAO,CAAC,OAAO,CAAC,CAmClB"}

package/esm/src/html/styles-builder/plugin-loader.js

@@ -12,6 +12,7 @@ import defaultTheme from "tailwindcss/defaultTheme";
 import colors from "tailwindcss/colors";
 import { serverLogger } from "../../utils/index.js";
 import { getErrorBySlug, IMPORT_RESOLUTION_ERROR, NETWORK_ERROR, VeryfrontError, } from "../../errors/index.js";
+import { getTailwindPluginBundleUrl } from "../../build/binary-plugin-includes.js";
 const logger = serverLogger.component("tailwind");
 // Provide localStorage shim for plugins that use util-deprecate (which checks localStorage)
 // This prevents "LocalStorage is not supported in this context" errors in Deno.
@@ -88,7 +89,7 @@ async function importBundledModule(code) {
  * dynamic imports from URLs. Fetches bundled code, rewrites imports, loads via temp file.
  */
 export async function loadModuleFromEsmSh(packageName) {
-    const stubUrl = `https://esm.sh/${packageName}?bundle&external=tailwindcss&target=denonext`;
+    const stubUrl = getTailwindPluginBundleUrl(packageName);
     logger.debug("Fetching esm.sh stub", { url: stubUrl });
     const stubResponse = await dntShim.fetch(stubUrl);
     if (!stubResponse.ok) {

package/esm/src/internal-agents/control-plane-auth.d.ts

@@ -4,6 +4,7 @@ export declare class ControlPlaneRequestError extends Error {
     readonly status: number;
     constructor(status: number, message: string);
 }
+export declare function getControlPlaneVerificationPublicKey(ctx: HandlerContext): string | undefined;
 export declare function verifyControlPlaneRequest(req: dntShim.Request, ctx: HandlerContext, rawBody: string, options?: {
     expectedSubject?: string;
     expectedSurface?: "studio" | "channels" | "a2a" | "mcp";

package/esm/src/internal-agents/control-plane-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane-auth.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/control-plane-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQxD,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK5C;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC;CACpD;;;;;;;;;GAsDP"}
+{"version":3,"file":"control-plane-auth.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/control-plane-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAG/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQxD,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK5C;AAED,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAM5F;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,OAAO,CAAC,OAAO,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IACP,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC;CACpD;;;;;;;;;GAsDP"}

package/esm/src/internal-agents/control-plane-auth.js

@@ -1,4 +1,5 @@
 import { verifyControlPlaneJws } from "../channels/control-plane.js";
+import { getHostEnv } from "../platform/compat/process.js";
 import { serverLogger } from "../utils/index.js";
 import { HTTP_INTERNAL_SERVER_ERROR } from "../utils/constants/index.js";
 const CONTROL_PLANE_JWS_HEADER = "x-veryfront-control-plane-jws";
@@ -12,8 +13,15 @@ export class ControlPlaneRequestError extends Error {
         this.name = "ControlPlaneRequestError";
     }
 }
+export function getControlPlaneVerificationPublicKey(ctx) {
+    // Project env overlays intentionally hide host secrets from request-scoped reads.
+    // Control-plane verification is framework-owned config, so it must fall back to
+    // the host environment when the runtime adapter env is overlay-aware.
+    return ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY") ??
+        getHostEnv("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+}
 export async function verifyControlPlaneRequest(req, ctx, rawBody, options = {}) {
-    const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+    const publicKeyPem = getControlPlaneVerificationPublicKey(ctx);
     if (!publicKeyPem) {
         throw new ControlPlaneRequestError(HTTP_INTERNAL_SERVER_ERROR, "Control-plane verification is not configured");
     }

package/esm/src/security/http/base-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/security/http/base-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAClD,OAAO,KAAK,EACV,OAAO,EACP,cAAc,EACd,eAAe,EACf,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,qBAAqB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,eAAe,CAAC;IAChF,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,aAAa,CAAC;IAC3F,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,KAAK,IAAI,CAAC;IAC3F,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5C,QAAQ,EAAE,MAAM,aAAa,CAAC;CAC/B;AAED,8BAAsB,WAAY,YAAW,OAAO;IAClD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAEnC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAMxC;IAEF,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAElF,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO;IAY1E,OAAO,CAAC,cAAc;IAmBtB,SAAS,CAAC,qBAAqB,CAC7B,GAAG,EAAE,cAAc,EACnB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,eAAe;IAWlB,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,IAAI;IAKhG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI;IAIhG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI;IAIhG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAKjD,SAAS,CAAC,QAAQ,IAAI,aAAa;IAInC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa;IAIhG,SAAS,CAAC,gBAAgB,CAAC,CAAC,EAC1B,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC,CAAC,CAAC;CAuDd"}
+{"version":3,"file":"base-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/security/http/base-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAClD,OAAO,KAAK,EACV,OAAO,EACP,cAAc,EACd,eAAe,EACf,aAAa,EAEd,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,qBAAqB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,eAAe,CAAC;IAChF,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,aAAa,CAAC;IAC3F,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,KAAK,IAAI,CAAC;IAC3F,eAAe,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC;IAC5C,QAAQ,EAAE,MAAM,aAAa,CAAC;CAC/B;AAED,8BAAsB,WAAY,YAAW,OAAO;IAClD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAEnC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAMxC;IAEF,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAElF,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO;IAY1E,OAAO,CAAC,cAAc;IAmBtB,SAAS,CAAC,qBAAqB,CAC7B,GAAG,EAAE,cAAc,EACnB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,eAAe;IAWlB,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,IAAI;IAKhG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI;IAIhG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,IAAI;IAIhG,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAKjD,SAAS,CAAC,QAAQ,IAAI,aAAa;IAInC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa;IAIhG,SAAS,CAAC,gBAAgB,CAAC,CAAC,EAC1B,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC,CAAC,CAAC;CAwDd"}

package/esm/src/security/http/base-handler.js

@@ -66,6 +66,7 @@ export class BaseHandler {
         return { response, continue: false, metadata };
     }
     withProxyContext(ctx, fn, options = {}) {
+        const effectiveToken = ctx.proxyToken || ctx.adapter.env.get("VERYFRONT_API_TOKEN") || "";
         const fsWrapper = ctx.adapter.fs;
         if (typeof fsWrapper.setRequestBranch === "function") {
             try {
@@ -76,7 +77,7 @@ export class BaseHandler {
             }
         }
         const requireToken = options.requireToken ?? false;
-        if (!ctx.projectSlug || (requireToken && !ctx.proxyToken))
+        if (!ctx.projectSlug || (requireToken && !effectiveToken))
             return fn();
         if (fsWrapper.isMultiProjectMode?.()) {
             const isProduction = (ctx.resolvedEnvironment ?? ctx.requestContext?.mode) === "production";
@@ -87,10 +88,10 @@ export class BaseHandler {
                 releaseId: ctx.releaseId,
                 branch,
             }, ctx);
-            return fsWrapper.runWithContext(ctx.projectSlug, ctx.proxyToken ?? "", fn, ctx.projectId, { productionMode: isProduction, releaseId: ctx.releaseId, branch });
+            return fsWrapper.runWithContext(ctx.projectSlug, effectiveToken, fn, ctx.projectId, { productionMode: isProduction, releaseId: ctx.releaseId, branch });
         }
-        if (typeof fsWrapper.setRequestToken === "function" && ctx.proxyToken) {
-            fsWrapper.setRequestToken(ctx.proxyToken);
+        if (typeof fsWrapper.setRequestToken === "function" && effectiveToken) {
+            fsWrapper.setRequestToken(effectiveToken);
         }
         return runWithCacheBatching(fn);
     }

package/esm/src/server/handlers/request/channel-invoke.handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-invoke.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/channel-invoke.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EACL,KAAK,iBAAiB,EAKvB,MAAM,6BAA6B,CAAC;AASrC,qBAAa,oBAAqB,SAAQ,WAAW;IAOvC,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,QAAQ,EAAE,eAAe,CAIvB;gBAE2B,IAAI,GAAE,iBAA4C;IAIzE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAiEhF"}
+{"version":3,"file":"channel-invoke.handler.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/request/channel-invoke.handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAmB,aAAa,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EACL,KAAK,iBAAiB,EAKvB,MAAM,6BAA6B,CAAC;AAUrC,qBAAa,oBAAqB,SAAQ,WAAW;IAOvC,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,QAAQ,EAAE,eAAe,CAIvB;gBAE2B,IAAI,GAAE,iBAA4C;IAIzE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;CAiEhF"}

package/esm/src/server/handlers/request/channel-invoke.handler.js

@@ -1,5 +1,6 @@
 import { BaseHandler } from "../response/base.js";
 import { ChannelInvokeRequestSchema, defaultChannelInvokeDeps, executeChannelInvoke, verifyDispatchJws, } from "../../../channels/invoke.js";
+import { getControlPlaneVerificationPublicKey } from "../../../internal-agents/control-plane-auth.js";
 import { HTTP_INTERNAL_SERVER_ERROR, PRIORITY_MEDIUM_API, } from "../../../utils/constants/index.js";
 const DISPATCH_JWS_HEADER = "x-veryfront-dispatch-jws";
 const MAX_DISPATCH_SIGNATURE_AGE_SECONDS = 60;
@@ -22,7 +23,7 @@ export class ChannelInvokeHandler extends BaseHandler {
             const builder = this.createResponseBuilder(ctx)
                 .withCORS(req, ctx.securityConfig?.cors)
                 .withSecurity(ctx.securityConfig ?? undefined, req);
-            const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+            const publicKeyPem = getControlPlaneVerificationPublicKey(ctx);
             if (!publicKeyPem) {
                 this.logWarn("Missing CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY for channel invoke endpoint");
                 return this.respond(builder.json({ error: "Channel dispatch verification is not configured" }, HTTP_INTERNAL_SERVER_ERROR));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.67",
+  "version": "0.1.70",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",

package/scripts/postinstall-lib.js

@@ -0,0 +1,79 @@
+import { createHash } from "node:crypto";
+import { createReadStream, existsSync, unlinkSync } from "node:fs";
+import https from "node:https";
+
+export function computeFileHash(filePath) {
+  return new Promise((resolve, reject) => {
+    const hash = createHash("sha256");
+    const stream = createReadStream(filePath);
+    stream.on("data", (chunk) => hash.update(chunk));
+    stream.on("end", () => resolve(hash.digest("hex")));
+    stream.on("error", reject);
+  });
+}
+
+export function downloadText(url, maxRedirects = 5) {
+  return new Promise((resolve, reject) => {
+    function follow(currentUrl, redirectCount) {
+      if (redirectCount > maxRedirects) {
+        return reject(new Error("Too many redirects"));
+      }
+      let settled = false;
+      https.get(currentUrl, (response) => {
+        const { statusCode = 0, headers } = response;
+        if (statusCode >= 301 && statusCode <= 308 && statusCode !== 304) {
+          response.resume();
+          const location = headers.location;
+          if (!location) return reject(new Error("Redirect missing Location"));
+          try { return follow(new URL(location, currentUrl).toString(), redirectCount + 1); }
+          catch { return reject(new Error(`Invalid redirect URL: ${location}`)); }
+        }
+        if (statusCode !== 200) {
+          response.resume();
+          return reject(new Error(`HTTP ${statusCode}`));
+        }
+        const MAX_CHECKSUM_SIZE = 1024;
+        let data = "";
+        response.on("data", (chunk) => {
+          data += chunk;
+          if (!settled && data.length > MAX_CHECKSUM_SIZE) {
+            settled = true;
+            response.destroy();
+            reject(new Error("Checksum file too large"));
+          }
+        });
+        response.on("end", () => { if (!settled) resolve(data); });
+      }).on("error", (err) => { if (!settled) reject(err); });
+    }
+    follow(url, 0);
+  });
+}
+
+export async function verifyChecksum(filePath, checksumUrl, downloadFn = downloadText) {
+  let checksumText;
+  try {
+    checksumText = await downloadFn(checksumUrl);
+  } catch (err) {
+    if (err.message === "HTTP 404") {
+      console.warn("⚠️  No checksum file available — skipping verification");
+      return;
+    }
+    throw new Error(`Failed to fetch checksum: ${err.message}`);
+  }
+
+  // Checksum file format: "<hash>  <filename>" or just "<hash>"
+  const expectedHash = checksumText.trim().split(/\s+/)[0].toLowerCase();
+  if (!/^[0-9a-f]{64}$/.test(expectedHash)) {
+    throw new Error(`Invalid checksum format: ${expectedHash}`);
+  }
+  const actualHash = await computeFileHash(filePath);
+
+  if (actualHash !== expectedHash) {
+    try { if (existsSync(filePath)) unlinkSync(filePath); } catch {}
+    throw new Error(
+      `Checksum mismatch!\n   Expected: ${expectedHash}\n   Actual:   ${actualHash}`
+    );
+  }
+
+  console.log("✅ Checksum verified");
+}

package/scripts/postinstall.js

@@ -11,6 +11,7 @@ import { fileURLToPath } from "node:url";
 import https from "node:https";
 import os from "node:os";
 import { readFileSync } from "node:fs";
+import { verifyChecksum } from "./postinstall-lib.js";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const platform = os.platform();
@@ -85,7 +86,7 @@ function downloadBinary(url, dest, maxRedirects = 5) {
 
         const file = createWriteStream(dest);
         response.pipe(file);
-        file.on('finish', () => { file.close(); resolve(); });
+        file.on('finish', () => { file.close(() => resolve()); });
         file.on("error", (err) => {
           try { if (existsSync(dest)) unlinkSync(dest); }
           catch (e) { console.warn("   Warning: Failed to clean up partial download:", e.message); }
@@ -103,6 +104,10 @@ async function install() {
     console.log(`⬇️  Downloading binary from ${url}...`);
     await downloadBinary(url, binPath);
 
+    // Verify binary integrity
+    const checksumUrl = `${baseUrl}/${binaryName}.sha256`;
+    await verifyChecksum(binPath, checksumUrl);
+
     // Make binary executable (Unix systems)
     if (platform !== "win32") {
       chmodSync(binPath, 0o755);
@@ -114,6 +119,8 @@ async function install() {
     console.log('   npx veryfront create my-app');
 
   } catch (error) {
+    // Clean up unverified binary so the JS fallback is used instead
+    try { if (existsSync(binPath)) unlinkSync(binPath); } catch {}
     // Graceful fallback - bundled JS CLI will be used instead
     console.warn("⚠️  Binary download failed:", error.message);
     console.warn("   Falling back to bundled JavaScript CLI (slower startup)");

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.67",
+  "version": "0.1.70",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "exclude": [

package/src/src/agent/factory.ts

@@ -2,6 +2,7 @@ import * as dntShim from "../../_dnt.shims.js";
 import type {
   Agent,
   AgentConfig,
+  AgentMiddleware,
   AgentResponse,
   AgentStreamResult,
   Message,
@@ -24,6 +25,7 @@ import {
 import { agentRegistry } from "./composition/index.js";
 import { agentLogger } from "../utils/logger/logger.js";
 import { createError, toError } from "../errors/veryfront-error.js";
+import { COMMON_BLOCKED_PATTERNS, securityMiddleware } from "./middleware/security/validator.js";
 import { withSpan } from "../observability/tracing/otlp-setup.js";
 import { resolveConfiguredAgentModel } from "./runtime/model-resolution.js";
 
@@ -118,6 +120,8 @@ export function agent(config: AgentConfig): Agent {
     }
     : originalSystem;
 
+  const resolvedMiddleware = resolveSecurityMiddleware(config);
+
   const platform = detectPlatform();
   const compatibility = validatePlatformCompatibility(
     {
@@ -148,6 +152,7 @@ export function agent(config: AgentConfig): Agent {
     ...publicConfig,
     tools: mergedToolsConfig,
     system: augmentedSystem,
+    middleware: resolvedMiddleware,
   });
 
   const agentInstance: Agent = {
@@ -258,7 +263,36 @@ export function agent(config: AgentConfig): Agent {
 // Register on globalThis so compiled-binary runtime shim can delegate to the
 // real factory. External temp-file modules can't import from the embedded
 // binary FS, so they use globalThis bridges instead.
-(dntShim.dntGlobalThis as Record<string, unknown>).__vfAgentFactory = agent;
+if (!("__vfAgentFactory" in dntShim.dntGlobalThis)) {
+  Object.defineProperty(dntShim.dntGlobalThis, "__vfAgentFactory", {
+    value: agent,
+    writable: false,
+    enumerable: false,
+    configurable: false,
+  });
+}
+
+/**
+ * Resolve the middleware array for an agent, prepending security middleware
+ * unless explicitly opted out with `security: false`.
+ */
+export function resolveSecurityMiddleware(
+  config: Pick<AgentConfig, "security" | "middleware">,
+): AgentMiddleware[] {
+  if (config.security === false) return config.middleware ?? [];
+  return [
+    securityMiddleware({
+      input: {
+        maxLength: 50_000,
+        blockedPatterns: COMMON_BLOCKED_PATTERNS.promptInjection,
+      },
+      output: {
+        filterPII: true,
+      },
+    }),
+    ...(config.middleware ?? []),
+  ];
+}
 
 let agentIdCounter = 0;
 

package/src/src/agent/types.ts

@@ -78,6 +78,8 @@ export interface AgentConfig {
    * and registers the skill tools.
    */
   skills?: true | string[];
+  /** Set to false to disable the default security middleware */
+  security?: false;
 }
 
 export type ResolvedAgentConfig = AgentConfig & { model: ModelString };

package/src/src/build/binary-plugin-includes.ts

@@ -0,0 +1,17 @@
+const BINARY_TAILWIND_PLUGIN_PACKAGES = [
+  "tailwindcss-animate@1.0.7",
+  "@tailwindcss/typography@0.5.19",
+  "@tailwindcss/forms@0.5.11",
+  "tailwind-scrollbar-hide@2.0.0",
+  "daisyui@5.5.14",
+] as const;
+
+export function getTailwindPluginBundleUrl(packageName: string): string {
+  return `https://esm.sh/${packageName}?bundle&external=tailwindcss&target=denonext`;
+}
+
+export function getBinaryPluginBundleIncludes(): string[] {
+  return BINARY_TAILWIND_PLUGIN_PACKAGES.map(getTailwindPluginBundleUrl);
+}
+
+export { BINARY_TAILWIND_PLUGIN_PACKAGES };

package/src/src/html/styles-builder/plugin-loader.ts

@@ -20,6 +20,7 @@ import {
   NETWORK_ERROR,
   VeryfrontError,
 } from "../../errors/index.js";
+import { getTailwindPluginBundleUrl } from "../../build/binary-plugin-includes.js";
 
 const logger = serverLogger.component("tailwind");
 
@@ -108,7 +109,7 @@ async function importBundledModule(code: string): Promise<unknown> {
  * dynamic imports from URLs. Fetches bundled code, rewrites imports, loads via temp file.
  */
 export async function loadModuleFromEsmSh(packageName: string): Promise<unknown> {
-  const stubUrl = `https://esm.sh/${packageName}?bundle&external=tailwindcss&target=denonext`;
+  const stubUrl = getTailwindPluginBundleUrl(packageName);
   logger.debug("Fetching esm.sh stub", { url: stubUrl });
 
   const stubResponse = await dntShim.fetch(stubUrl);

package/src/src/internal-agents/control-plane-auth.ts

@@ -1,5 +1,6 @@
 import * as dntShim from "../../_dnt.shims.js";
 import { verifyControlPlaneJws } from "../channels/control-plane.js";
+import { getHostEnv } from "../platform/compat/process.js";
 import type { HandlerContext } from "../types/index.js";
 import { serverLogger } from "../utils/index.js";
 import { HTTP_INTERNAL_SERVER_ERROR } from "../utils/constants/index.js";
@@ -18,6 +19,14 @@ export class ControlPlaneRequestError extends Error {
   }
 }
 
+export function getControlPlaneVerificationPublicKey(ctx: HandlerContext): string | undefined {
+  // Project env overlays intentionally hide host secrets from request-scoped reads.
+  // Control-plane verification is framework-owned config, so it must fall back to
+  // the host environment when the runtime adapter env is overlay-aware.
+  return ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY") ??
+    getHostEnv("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+}
+
 export async function verifyControlPlaneRequest(
   req: dntShim.Request,
   ctx: HandlerContext,
@@ -27,7 +36,7 @@ export async function verifyControlPlaneRequest(
     expectedSurface?: "studio" | "channels" | "a2a" | "mcp";
   } = {},
 ) {
-  const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+  const publicKeyPem = getControlPlaneVerificationPublicKey(ctx);
   if (!publicKeyPem) {
     throw new ControlPlaneRequestError(
       HTTP_INTERNAL_SERVER_ERROR,

package/src/src/security/http/base-handler.ts

@@ -108,6 +108,7 @@ export abstract class BaseHandler implements Handler {
     fn: () => Promise<T>,
     options: { requireToken?: boolean } = {},
   ): Promise<T> {
+    const effectiveToken = ctx.proxyToken || ctx.adapter.env.get("VERYFRONT_API_TOKEN") || "";
     const fsWrapper = ctx.adapter.fs as {
       setRequestToken?: (t: string) => void;
       setRequestBranch?: (b: string | null) => void;
@@ -130,7 +131,7 @@ export abstract class BaseHandler implements Handler {
     }
 
     const requireToken = options.requireToken ?? false;
-    if (!ctx.projectSlug || (requireToken && !ctx.proxyToken)) return fn();
+    if (!ctx.projectSlug || (requireToken && !effectiveToken)) return fn();
 
     if (fsWrapper.isMultiProjectMode?.()) {
       const isProduction = (ctx.resolvedEnvironment ?? ctx.requestContext?.mode) === "production";
@@ -149,15 +150,15 @@ export abstract class BaseHandler implements Handler {
 
       return fsWrapper.runWithContext!(
         ctx.projectSlug,
-        ctx.proxyToken ?? "",
+        effectiveToken,
         fn,
         ctx.projectId,
         { productionMode: isProduction, releaseId: ctx.releaseId, branch },
       );
     }
 
-    if (typeof fsWrapper.setRequestToken === "function" && ctx.proxyToken) {
-      fsWrapper.setRequestToken(ctx.proxyToken);
+    if (typeof fsWrapper.setRequestToken === "function" && effectiveToken) {
+      fsWrapper.setRequestToken(effectiveToken);
     }
 
     return runWithCacheBatching(fn);

package/src/src/server/handlers/request/channel-invoke.handler.ts

@@ -8,6 +8,7 @@ import {
   executeChannelInvoke,
   verifyDispatchJws,
 } from "../../../channels/invoke.js";
+import { getControlPlaneVerificationPublicKey } from "../../../internal-agents/control-plane-auth.js";
 import {
   HTTP_INTERNAL_SERVER_ERROR,
   PRIORITY_MEDIUM_API,
@@ -37,7 +38,7 @@ export class ChannelInvokeHandler extends BaseHandler {
         .withCORS(req, ctx.securityConfig?.cors)
         .withSecurity(ctx.securityConfig ?? undefined, req);
 
-      const publicKeyPem = ctx.adapter.env.get("CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY");
+      const publicKeyPem = getControlPlaneVerificationPublicKey(ctx);
       if (!publicKeyPem) {
         this.logWarn("Missing CHANNEL_DISPATCH_SIGNING_PUBLIC_KEY for channel invoke endpoint");
         return this.respond(