veryfront 0.1.75 → 0.1.76

package/esm/src/server/handlers/request/internal-tasks-list.handler.js

@@ -0,0 +1,72 @@
+import { PRIORITY_MEDIUM_API } from "../../../utils/constants/index.js";
+import { ZodError } from "zod";
+import { ControlPlaneTasksListRequestSchema, defaultRuntimeTaskDiscoveryDeps, listRuntimeTasks, } from "../../../task/control-plane.js";
+import { ControlPlaneRequestError, verifyControlPlaneRequest, } from "../../../internal-agents/control-plane-auth.js";
+import { INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES, InternalAgentRequestBodyTooLargeError, readInternalAgentRequestBody, } from "../../../internal-agents/request-body.js";
+import { BaseHandler } from "../response/base.js";
+export class InternalTasksListHandler extends BaseHandler {
+    deps;
+    metadata = {
+        name: "InternalTasksListHandler",
+        priority: PRIORITY_MEDIUM_API,
+        patterns: [{ pattern: "/internal/tasks/list", exact: true, method: "POST" }],
+    };
+    constructor(deps = defaultRuntimeTaskDiscoveryDeps) {
+        super();
+        this.deps = deps;
+    }
+    async handle(req, ctx) {
+        if (!this.shouldHandle(req, ctx)) {
+            return this.continue();
+        }
+        return this.withProxyContext(ctx, async () => {
+            const builder = this.createResponseBuilder(ctx)
+                .withCORS(req, ctx.securityConfig?.cors)
+                .withSecurity(ctx.securityConfig ?? undefined, req);
+            try {
+                const rawBody = await readInternalAgentRequestBody(req, INTERNAL_AGENT_CONTROL_PLANE_MAX_BODY_BYTES);
+                const payload = ControlPlaneTasksListRequestSchema.parse(JSON.parse(rawBody));
+                const claims = await verifyControlPlaneRequest(req, ctx, rawBody, {
+                    expectedSubject: payload.requestId,
+                    expectedSurface: payload.surface,
+                });
+                if (payload.projectId !== claims.project_id ||
+                    (ctx.projectId !== undefined && payload.projectId !== ctx.projectId)) {
+                    this.logWarn("Internal tasks list request body did not match signed claims", {
+                        projectSlug: ctx.projectSlug,
+                        projectId: ctx.projectId,
+                        requestId: payload.requestId,
+                        signedRequestId: claims.sub,
+                        surface: payload.surface,
+                        signedSurface: claims.surface,
+                    });
+                    return this.respond(builder.json({ error: "Invalid control-plane signature" }, 401));
+                }
+                const response = await listRuntimeTasks(ctx, this.deps);
+                return this.respond(builder.json(response, 200));
+            }
+            catch (error) {
+                if (error instanceof InternalAgentRequestBodyTooLargeError) {
+                    return this.respond(builder.json({ error: error.message }, error.status));
+                }
+                if (error instanceof ControlPlaneRequestError) {
+                    this.logWarn("Internal tasks list signature verification failed", {
+                        error: error.message,
+                        projectSlug: ctx.projectSlug,
+                        projectId: ctx.projectId,
+                    });
+                    return this.respond(builder.json({ error: error.message }, error.status));
+                }
+                if (error instanceof SyntaxError || error instanceof ZodError) {
+                    this.logWarn("Internal tasks list request validation failed", {
+                        error: error instanceof Error ? error.message : String(error),
+                        projectSlug: ctx.projectSlug,
+                        projectId: ctx.projectId,
+                    });
+                    return this.respond(builder.json({ error: "Invalid internal tasks request" }, 400));
+                }
+                throw error;
+            }
+        });
+    }
+}

package/esm/src/server/runtime-handler/index.d.ts

@@ -14,7 +14,7 @@ import type { Handler } from "../../types/index.js";
 import { ApiHandlerWrapper } from "../handlers/request/api/index.js";
 export { parseProxyEnvironment, type ProxyEnvironment } from "./proxy-environment.js";
 /** Handler names in registration order. */
-export declare const HANDLER_NAMES: readonly ["AuthHandler", "CsrfHandler", "HMRHandler", "CorsHandler", "HealthHandler", "MetricsHandler", "MemoryDebugHandler", "ClientLogHandler", "DevEndpointsHandler", "StylesCSSHandler", "DebugContextHandler", "OpenAPIHandler", "OpenAPIDocsHandler", "InternalAgentsListHandler", "AgentStreamHandler", "AgentRunResumeHandler", "AgentRunCancelHandler", "ChannelInvokeHandler", "DevDashboardHandler", "ProjectsHandler", "StudioBridgeModulesHandler", "CSSHandler", "DevFileHandler", "SnippetHandler", "StaticHandler", "LibModulesHandler", "RSCHandler", "ModuleHandler", "ApiHandlerWrapper", "MarkdownPreviewHandler", "SSRHandler", "NotFoundHandler"];
+export declare const HANDLER_NAMES: readonly ["AuthHandler", "CsrfHandler", "HMRHandler", "CorsHandler", "HealthHandler", "MetricsHandler", "MemoryDebugHandler", "ClientLogHandler", "DevEndpointsHandler", "StylesCSSHandler", "DebugContextHandler", "OpenAPIHandler", "OpenAPIDocsHandler", "InternalAgentsListHandler", "InternalTasksListHandler", "AgentStreamHandler", "AgentRunResumeHandler", "AgentRunCancelHandler", "ChannelInvokeHandler", "DevDashboardHandler", "ProjectsHandler", "StudioBridgeModulesHandler", "CSSHandler", "DevFileHandler", "SnippetHandler", "StaticHandler", "LibModulesHandler", "RSCHandler", "ModuleHandler", "ApiHandlerWrapper", "MarkdownPreviewHandler", "SSRHandler", "NotFoundHandler"];
 /** Union of all registered handler names. */
 export type HandlerName = (typeof HANDLER_NAMES)[number];
 /**

package/esm/src/server/runtime-handler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AA0BpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA8DrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,yoBAiChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAyCD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAsYnF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAQlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AA0BpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AA+DrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,qqBAkChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAsYnF;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}

package/esm/src/server/runtime-handler/index.js

@@ -43,6 +43,7 @@ import { MarkdownPreviewHandler } from "../handlers/preview/markdown-preview.han
 import { OpenAPIHandler } from "../handlers/request/openapi.handler.js";
 import { OpenAPIDocsHandler } from "../handlers/request/openapi-docs.handler.js";
 import { InternalAgentsListHandler } from "../handlers/request/internal-agents-list.handler.js";
+import { InternalTasksListHandler } from "../handlers/request/internal-tasks-list.handler.js";
 import { AgentStreamHandler } from "../handlers/request/agent-stream.handler.js";
 import { AgentRunResumeHandler } from "../handlers/request/agent-run-resume.handler.js";
 import { AgentRunCancelHandler } from "../handlers/request/agent-run-cancel.handler.js";
@@ -83,6 +84,7 @@ export const HANDLER_NAMES = [
     "OpenAPIHandler",
     "OpenAPIDocsHandler",
     "InternalAgentsListHandler",
+    "InternalTasksListHandler",
     "AgentStreamHandler",
     "AgentRunResumeHandler",
     "AgentRunCancelHandler",
@@ -118,6 +120,7 @@ const handlerFactories = {
     OpenAPIHandler: () => new OpenAPIHandler(),
     OpenAPIDocsHandler: () => new OpenAPIDocsHandler(),
     InternalAgentsListHandler: () => new InternalAgentsListHandler(),
+    InternalTasksListHandler: () => new InternalTasksListHandler(),
     AgentStreamHandler: () => new AgentStreamHandler(),
     AgentRunResumeHandler: () => new AgentRunResumeHandler(),
     AgentRunCancelHandler: () => new AgentRunCancelHandler(),

package/esm/src/task/control-plane.d.ts

@@ -0,0 +1,105 @@
+import type { HandlerContext } from "../types/index.js";
+import { z } from "zod";
+import { discoverTasks, type TaskDiscoveryOptions } from "./discovery.js";
+export declare const ControlPlaneTasksListRequestSchema: z.ZodObject<{
+    requestId: z.ZodString;
+    projectId: z.ZodString;
+    surface: z.ZodEnum<["studio", "channels", "a2a", "mcp"]>;
+}, "strip", z.ZodTypeAny, {
+    requestId: string;
+    projectId: string;
+    surface: "mcp" | "studio" | "channels" | "a2a";
+}, {
+    requestId: string;
+    projectId: string;
+    surface: "mcp" | "studio" | "channels" | "a2a";
+}>;
+export declare const RuntimeTaskSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    target: z.ZodString;
+    sourcePath: z.ZodString;
+    inputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    outputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    schedulable: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    description: string | null;
+    name: string;
+    id: string;
+    target: string;
+    sourcePath: string;
+    outputSchema: Record<string, unknown> | null;
+    inputSchema: Record<string, unknown> | null;
+    schedulable: boolean;
+}, {
+    description: string | null;
+    name: string;
+    id: string;
+    target: string;
+    sourcePath: string;
+    outputSchema: Record<string, unknown> | null;
+    inputSchema: Record<string, unknown> | null;
+    schedulable: boolean;
+}>;
+export declare const RuntimeTaskListResponseSchema: z.ZodObject<{
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        target: z.ZodString;
+        sourcePath: z.ZodString;
+        inputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        outputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        schedulable: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }, {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    tasks: {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }[];
+}, {
+    tasks: {
+        description: string | null;
+        name: string;
+        id: string;
+        target: string;
+        sourcePath: string;
+        outputSchema: Record<string, unknown> | null;
+        inputSchema: Record<string, unknown> | null;
+        schedulable: boolean;
+    }[];
+}>;
+export type ControlPlaneTasksListRequest = z.infer<typeof ControlPlaneTasksListRequestSchema>;
+export type RuntimeTask = z.infer<typeof RuntimeTaskSchema>;
+export type RuntimeTaskListResponse = z.infer<typeof RuntimeTaskListResponseSchema>;
+export interface RuntimeTaskDiscoveryDeps {
+    discoverTasks: (options: TaskDiscoveryOptions) => ReturnType<typeof discoverTasks>;
+}
+export declare const defaultRuntimeTaskDiscoveryDeps: RuntimeTaskDiscoveryDeps;
+export declare function listRuntimeTasks(ctx: HandlerContext, deps?: RuntimeTaskDiscoveryDeps): Promise<RuntimeTaskListResponse>;
+//# sourceMappingURL=control-plane.d.ts.map

package/esm/src/task/control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../../src/src/task/control-plane.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,eAAO,MAAM,kCAAkC;;;;;;;;;;;;EAI7C,CAAC;AAIH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAExC,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,MAAM,WAAW,wBAAwB;IACvC,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;CACpF;AAED,eAAO,MAAM,+BAA+B,EAAE,wBAE7C,CAAC;AAUF,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,cAAc,EACnB,IAAI,GAAE,wBAA0D,GAC/D,OAAO,CAAC,uBAAuB,CAAC,CAwBlC"}

package/esm/src/task/control-plane.js

@@ -0,0 +1,52 @@
+import { ControlPlaneSurfaceSchema } from "../channels/control-plane.js";
+import { z } from "zod";
+import { discoverTasks } from "./discovery.js";
+export const ControlPlaneTasksListRequestSchema = z.object({
+    requestId: z.string().min(1),
+    projectId: z.string().min(1),
+    surface: ControlPlaneSurfaceSchema,
+});
+const JsonSchemaRecordSchema = z.record(z.unknown());
+export const RuntimeTaskSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    description: z.string().nullable(),
+    target: z.string().min(1),
+    sourcePath: z.string().min(1),
+    inputSchema: JsonSchemaRecordSchema.nullable(),
+    outputSchema: JsonSchemaRecordSchema.nullable(),
+    schedulable: z.boolean(),
+});
+export const RuntimeTaskListResponseSchema = z.object({
+    tasks: z.array(RuntimeTaskSchema),
+});
+export const defaultRuntimeTaskDiscoveryDeps = {
+    discoverTasks,
+};
+function normalizeJsonSchema(value) {
+    if (value == null || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    return value;
+}
+export async function listRuntimeTasks(ctx, deps = defaultRuntimeTaskDiscoveryDeps) {
+    const discovery = await deps.discoverTasks({
+        projectDir: ctx.projectDir,
+        adapter: ctx.adapter,
+        config: ctx.config,
+        debug: ctx.debug ?? false,
+    });
+    const tasks = discovery.tasks
+        .map((task) => RuntimeTaskSchema.parse({
+        id: task.id,
+        name: task.name,
+        description: task.definition.description ?? null,
+        target: `task:${task.id}`,
+        sourcePath: task.filePath,
+        inputSchema: normalizeJsonSchema(task.definition.inputSchema),
+        outputSchema: normalizeJsonSchema(task.definition.outputSchema),
+        schedulable: task.definition.schedulable ?? true,
+    }))
+        .sort((left, right) => left.name.localeCompare(right.name));
+    return RuntimeTaskListResponseSchema.parse({ tasks });
+}

package/esm/src/task/types.d.ts

@@ -24,6 +24,12 @@ export interface TaskDefinition {
     name?: string;
     /** Task description */
     description?: string;
+    /** Optional JSON-schema-like input contract surfaced in APIs/UIs */
+    inputSchema?: Record<string, unknown>;
+    /** Optional JSON-schema-like output contract surfaced in APIs/UIs */
+    outputSchema?: Record<string, unknown>;
+    /** Whether this task can be scheduled via cron jobs */
+    schedulable?: boolean;
     /** The function to execute */
     run: (ctx: TaskContext) => Promise<unknown> | unknown;
 }

package/esm/src/task/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/task/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/src/task/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,uDAAuD;IACvD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.75",
+  "version": "0.1.76",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",
@@ -76,6 +76,9 @@
     "./resource": {
       "import": "./esm/src/resource/index.js"
     },
+    "./jobs": {
+      "import": "./esm/src/jobs/index.js"
+    },
     "./mcp": {
       "import": "./esm/src/mcp/index.js"
     },
@@ -149,6 +152,7 @@
     "esbuild": "0.20.2",
     "github-slugger": "2.0.0",
     "gray-matter": "4.0.3",
+    "jose": "5.9.6",
     "mdast-util-to-string": "4.0.0",
     "mime-types": "2.1.35",
     "react": "19.1.1",

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.75",
+  "version": "0.1.76",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "exclude": [
@@ -32,6 +32,7 @@ export default {
     "./workflow/discovery": "./src/workflow/discovery/index.ts",
     "./prompt": "./src/prompt/index.ts",
     "./resource": "./src/resource/index.ts",
+    "./jobs": "./src/jobs/index.ts",
     "./mcp": "./src/mcp/index.ts",
     "./middleware": "./src/middleware/index.ts",
     "./utils": "./src/utils/index.ts",
@@ -61,6 +62,7 @@ export default {
     "veryfront/components/ai": "./src/react/components/ai/index.ts",
     "veryfront/sandbox": "./src/sandbox/index.ts",
     "veryfront/embedding": "./src/embedding/index.ts",
+    "veryfront/jobs": "./src/jobs/index.ts",
     "veryfront/agent/react": "./src/agent/react/index.ts",
     "veryfront/agent/testing": "./src/agent/testing/index.ts",
     "veryfront/agent/middleware": "./src/agent/middleware/index.ts",
@@ -134,6 +136,7 @@ export default {
     "#veryfront/react": "./src/react/index.ts",
     "#veryfront/rendering": "./src/rendering/index.ts",
     "#veryfront/resource": "./src/resource/index.ts",
+    "#veryfront/jobs": "./src/jobs/index.ts",
     "#veryfront/routing": "./src/routing/index.ts",
     "#veryfront/security": "./src/security/index.ts",
     "#veryfront/skill": "./src/skill/index.ts",
@@ -253,6 +256,7 @@ export default {
     "tailwindcss/colors": "https://esm.sh/tailwindcss@4.1.8/colors",
     "redis": "npm:redis@4.6.13",
     "pg": "npm:pg",
+    "jose": "npm:jose@5.9.6",
     "@opentelemetry/api": "npm:@opentelemetry/api@1",
     "@opentelemetry/core": "npm:@opentelemetry/core@1",
     "@opentelemetry/context-async-hooks": "npm:@opentelemetry/context-async-hooks@1",
@@ -290,11 +294,11 @@ export default {
   "tasks": {
     "setup": "deno run --allow-all scripts/setup.ts",
     "generate": "deno run -A scripts/build/generate-templates-manifest.ts && deno run -A scripts/build/generate-dev-ui-manifest.ts && deno run -A scripts/build/prebundle-client-scripts.ts && deno run -A scripts/build/prebundle-bridge.ts",
-    "start": "deno task generate && deno run --allow-all cli/main.ts",
-    "start:headless": "deno task generate && deno run --allow-all cli/main.ts --headless",
-    "proxy": "deno task generate && deno run --allow-all cli/main.ts serve --mode=proxy",
+    "start": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts",
+    "start:headless": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts --headless",
+    "proxy": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts serve --mode=proxy",
     "dev": "deno task generate && deno run --allow-all cli/main.ts dev",
-    "production": "deno task generate && deno run --allow-all cli/main.ts serve --mode=production",
+    "production": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts serve --mode=production",
     "build:prepare": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run -A scripts/build/prepare-framework-sources.ts",
     "build": "deno task build:prepare && deno run -A scripts/build/compile-binary.ts --output ./bin/veryfront",
     "build:npm": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run -A scripts/build/build-npm-dnt.ts",
@@ -309,11 +313,12 @@ export default {
     "test:coverage:integration": "rm -rf coverage && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --fail-fast --allow-all --coverage=coverage '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' tests --unstable-worker-options --unstable-net || exit 1",
     "coverage:report": "deno coverage coverage --include=src/ --exclude=tests --exclude=src/**/*_test.ts --exclude=src/**/*_test.tsx --exclude=src/**/*.test.ts --exclude=src/**/*.test.tsx --lcov > coverage/lcov.info && deno run --allow-read scripts/lint/check-coverage.ts 80",
     "coverage:html": "deno coverage coverage --include=src/ --exclude=tests --exclude=src/**/*_test.ts --exclude=src/**/*_test.tsx --exclude=src/**/*.test.ts --exclude=src/**/*.test.tsx --html",
+    "bench": "VF_DISABLE_LRU_INTERVAL=1 NODE_ENV=production LOG_FORMAT=text deno bench --no-check --allow-all --unstable-worker-options --unstable-net $(find src -name '*.bench.ts')",
     "clean": "rm -rf .cache/",
     "lint": "DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/",
     "fmt": "deno fmt src/ cli/",
     "fmt:check": "deno fmt --check src/ cli/",
-    "typecheck": "deno task generate && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/modules/index.ts src/proxy/main.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/mcp/index.ts src/provider/index.ts",
+    "typecheck": "deno task generate && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/modules/index.ts src/proxy/main.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/jobs/index.ts src/mcp/index.ts src/provider/index.ts",
     "verify": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task docs:validate && deno task typecheck && deno task test && deno task test:e2e:binary",
     "verify:quick": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task docs:validate && deno task typecheck",
     "docs": "rm -rf docs/reference && deno run --allow-read --allow-write --allow-run scripts/docs/generate-api-reference.ts",

package/src/src/data/server-data-fetcher.ts

@@ -6,7 +6,10 @@ import { TimeoutError, withTimeoutThrow } from "../rendering/utils/stream-utils.
 import { withSpan } from "../observability/tracing/otlp-setup.js";
 import { CircuitBreakerOpen, getCircuitBreaker } from "../utils/circuit-breaker.js";
 import { getWorkerPool, isDataIsolationEnabled } from "../security/sandbox/worker-pool.js";
-import type { WorkerResponse } from "../security/sandbox/worker-types.js";
+import {
+  MAX_WORKER_BODY_BYTES,
+  type WorkerResponse,
+} from "../security/sandbox/worker-types.js";
 
 /**
  * Options for isolated data fetching through Worker pool.
@@ -110,7 +113,32 @@ export class ServerDataFetcher {
     context: DataContext,
   ): Promise<DataResult> {
     const pool = getWorkerPool();
-    const body = context.request?.body ? new Uint8Array(await context.request.arrayBuffer()) : null;
+    let body: Uint8Array | null = null;
+    if (context.request?.body) {
+      // Fast path: reject before buffering if Content-Length is known
+      const contentLength = context.request.headers?.get("content-length");
+      if (contentLength) {
+        const bytes = parseInt(contentLength, 10);
+        if (bytes > MAX_WORKER_BODY_BYTES) {
+          throw new Error(
+            `Request body too large for isolated data fetch (${
+              (bytes / 1024 / 1024).toFixed(1)
+            } MB, limit ${MAX_WORKER_BODY_BYTES / 1024 / 1024} MB)`,
+          );
+        }
+      }
+
+      body = new Uint8Array(await context.request.arrayBuffer());
+
+      // Fallback: check actual size for chunked/streaming bodies
+      if (body.byteLength > MAX_WORKER_BODY_BYTES) {
+        throw new Error(
+          `Request body too large for isolated data fetch (${
+            (body.byteLength / 1024 / 1024).toFixed(1)
+          } MB, limit ${MAX_WORKER_BODY_BYTES / 1024 / 1024} MB)`,
+        );
+      }
+    }
 
     const workerResponse: WorkerResponse = await pool.execute(
       projectDir,

package/src/src/jobs/index.ts

@@ -0,0 +1,85 @@
+/**
+ * Jobs module for durable project-scoped background execution.
+ *
+ * Provides a public SDK surface for one-off jobs, cron jobs, batch summaries,
+ * job target discovery, and the canonical split between user-visible `events`
+ * and raw debugging `logs`.
+ *
+ * @module
+ *
+ * @example
+ * ```ts
+ * import { VeryfrontJobsClient } from "veryfront/jobs";
+ *
+ * const jobs = new VeryfrontJobsClient({
+ *   authToken: process.env.VERYFRONT_API_TOKEN,
+ *   projectReference: "my-project",
+ * });
+ *
+ * const job = await jobs.create({
+ *   name: "Ingest 1 file",
+ *   target: "task:knowledge-ingest",
+ *   config: {
+ *     file_count: 1,
+ *     upload_ids: ["00000000-0000-0000-0000-000000000000"],
+ *   },
+ * });
+ *
+ * const events = await jobs.events(job.id);
+ * ```
+ */
+import "../../_dnt.polyfills.js";
+
+
+export {
+  type CreateCronJobInput,
+  type CreateJobInput,
+  createJobsClient,
+  type ListBatchJobsOptions,
+  type ListCronJobsOptions,
+  type ListJobEventsOptions,
+  type ListJobsOptions,
+  type ProjectScopedOptions,
+  type UpdateCronJobInput,
+  VeryfrontJobsClient,
+  type VeryfrontJobsClientConfig,
+} from "./jobs-client.js";
+export {
+  type CronJob,
+  CronJobSchema,
+  type CronJobStatus,
+  CronJobStatusSchema,
+  type Job,
+  type JobBatch,
+  type JobBatchResult,
+  JobBatchResultSchema,
+  JobBatchSchema,
+  type JobBatchStatusCounts,
+  JobBatchStatusCountsSchema,
+  type JobEvent,
+  JobEventSchema,
+  type JobEventsResponse,
+  JobEventsResponseSchema,
+  type JobLogsResponse,
+  JobLogsResponseSchema,
+  type JobResult,
+  JobResultSchema,
+  JobSchema,
+  type JobStatus,
+  JobStatusSchema,
+  type JobTargetDefinition,
+  JobTargetDefinitionSchema,
+  type JobTargetDefinitionsResponse,
+  JobTargetDefinitionsResponseSchema,
+  type KnowledgeIngestBatchSource,
+  KnowledgeIngestBatchSourceSchema,
+  type KnowledgeIngestFileResult,
+  KnowledgeIngestFileResultSchema,
+  PageInfoSchema,
+  type PaginatedCronJobsResponse,
+  PaginatedCronJobsResponseSchema,
+  type PaginatedJobsResponse,
+  PaginatedJobsResponseSchema,
+  type ReservedJobTargetFamily,
+  ReservedJobTargetFamilySchema,
+} from "./schemas.js";