veryfront 0.1.75 → 0.1.77

package/src/cli/shared/project-source-context.ts

@@ -0,0 +1,96 @@
+import { getConfig, type VeryfrontConfig } from "../../src/config/index.js";
+import {
+  enhanceAdapterWithFS,
+  getEnv,
+  isExtendedFSAdapter,
+  runtime,
+  type RuntimeAdapter,
+} from "../../src/platform/index.js";
+
+interface ProxyProjectSourceContext {
+  projectSlug: string;
+  token: string;
+  projectId?: string;
+  branchRef?: string | null;
+}
+
+export interface ProjectSourceExecutionContext {
+  adapter: RuntimeAdapter;
+  config: VeryfrontConfig;
+  projectDir: string;
+  projectId?: string;
+  proxyContext?: ProxyProjectSourceContext;
+}
+
+function getProxyProjectSourceContext(): ProxyProjectSourceContext | null {
+  const projectSlug = getEnv("VERYFRONT_PROJECT_SLUG")?.trim();
+  const token = getEnv("VERYFRONT_API_TOKEN")?.trim();
+
+  if (!projectSlug || !token) {
+    return null;
+  }
+
+  const projectId = getEnv("VERYFRONT_PROJECT_ID")?.trim();
+  const branchRef = getEnv("VERYFRONT_BRANCH_REF")?.trim();
+
+  return {
+    projectSlug,
+    token,
+    projectId: projectId || undefined,
+    branchRef: branchRef || null,
+  };
+}
+
+async function loadProjectConfig(
+  projectDir: string,
+  adapter: RuntimeAdapter,
+  proxyContext?: ProxyProjectSourceContext,
+): Promise<VeryfrontConfig> {
+  const cacheKey = proxyContext?.projectId ?? proxyContext?.projectSlug;
+  return await getConfig(projectDir, adapter, cacheKey ? { cacheKey } : undefined);
+}
+
+export async function withProjectSourceContext<T>(
+  projectDir: string,
+  run: (context: ProjectSourceExecutionContext) => Promise<T>,
+): Promise<T> {
+  const baseAdapter = await runtime.get();
+  const initialConfig = await getConfig(projectDir, baseAdapter);
+  const adapter = await enhanceAdapterWithFS(baseAdapter, initialConfig, projectDir);
+  const proxyContext = getProxyProjectSourceContext();
+
+  if (
+    proxyContext &&
+    isExtendedFSAdapter(adapter.fs) &&
+    adapter.fs.isMultiProjectMode()
+  ) {
+    return await adapter.fs.runWithContext(
+      proxyContext.projectSlug,
+      proxyContext.token,
+      async () => {
+        const config = await loadProjectConfig(projectDir, adapter, proxyContext);
+        return await run({
+          adapter,
+          config,
+          projectDir,
+          projectId: proxyContext.projectId,
+          proxyContext,
+        });
+      },
+      proxyContext.projectId,
+      {
+        productionMode: false,
+        branch: proxyContext.branchRef ?? null,
+      },
+    );
+  }
+
+  const config = await loadProjectConfig(projectDir, adapter);
+  return await run({
+    adapter,
+    config,
+    projectDir,
+    projectId: proxyContext?.projectId,
+    proxyContext: proxyContext ?? undefined,
+  });
+}

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.75",
+  "version": "0.1.77",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "exclude": [
@@ -32,6 +32,7 @@ export default {
     "./workflow/discovery": "./src/workflow/discovery/index.ts",
     "./prompt": "./src/prompt/index.ts",
     "./resource": "./src/resource/index.ts",
+    "./jobs": "./src/jobs/index.ts",
     "./mcp": "./src/mcp/index.ts",
     "./middleware": "./src/middleware/index.ts",
     "./utils": "./src/utils/index.ts",
@@ -61,6 +62,7 @@ export default {
     "veryfront/components/ai": "./src/react/components/ai/index.ts",
     "veryfront/sandbox": "./src/sandbox/index.ts",
     "veryfront/embedding": "./src/embedding/index.ts",
+    "veryfront/jobs": "./src/jobs/index.ts",
     "veryfront/agent/react": "./src/agent/react/index.ts",
     "veryfront/agent/testing": "./src/agent/testing/index.ts",
     "veryfront/agent/middleware": "./src/agent/middleware/index.ts",
@@ -112,6 +114,7 @@ export default {
     "#cli/shared/types": "./cli/shared/types.ts",
     "#cli/shared/constants": "./cli/shared/constants.ts",
     "#cli/shared/config": "./cli/shared/config.ts",
+    "#cli/shared/project-source-context": "./cli/shared/project-source-context.ts",
     "#cli/shared/slug": "./cli/shared/slug.ts",
     "#cli/shared/reserve-slug": "./cli/shared/reserve-slug.ts",
     "#cli/shared/server-startup": "./cli/shared/server-startup.ts",
@@ -134,6 +137,7 @@ export default {
     "#veryfront/react": "./src/react/index.ts",
     "#veryfront/rendering": "./src/rendering/index.ts",
     "#veryfront/resource": "./src/resource/index.ts",
+    "#veryfront/jobs": "./src/jobs/index.ts",
     "#veryfront/routing": "./src/routing/index.ts",
     "#veryfront/security": "./src/security/index.ts",
     "#veryfront/skill": "./src/skill/index.ts",
@@ -253,6 +257,7 @@ export default {
     "tailwindcss/colors": "https://esm.sh/tailwindcss@4.1.8/colors",
     "redis": "npm:redis@4.6.13",
     "pg": "npm:pg",
+    "jose": "npm:jose@5.9.6",
     "@opentelemetry/api": "npm:@opentelemetry/api@1",
     "@opentelemetry/core": "npm:@opentelemetry/core@1",
     "@opentelemetry/context-async-hooks": "npm:@opentelemetry/context-async-hooks@1",
@@ -290,11 +295,11 @@ export default {
   "tasks": {
     "setup": "deno run --allow-all scripts/setup.ts",
     "generate": "deno run -A scripts/build/generate-templates-manifest.ts && deno run -A scripts/build/generate-dev-ui-manifest.ts && deno run -A scripts/build/prebundle-client-scripts.ts && deno run -A scripts/build/prebundle-bridge.ts",
-    "start": "deno task generate && deno run --allow-all cli/main.ts",
-    "start:headless": "deno task generate && deno run --allow-all cli/main.ts --headless",
-    "proxy": "deno task generate && deno run --allow-all cli/main.ts serve --mode=proxy",
+    "start": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts",
+    "start:headless": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts --headless",
+    "proxy": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts serve --mode=proxy",
     "dev": "deno task generate && deno run --allow-all cli/main.ts dev",
-    "production": "deno task generate && deno run --allow-all cli/main.ts serve --mode=production",
+    "production": "deno task generate && deno run --allow-read --allow-write --allow-net --allow-env --allow-run --allow-sys --unstable-worker-options --unstable-net cli/main.ts serve --mode=production",
     "build:prepare": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run -A scripts/build/prepare-framework-sources.ts",
     "build": "deno task build:prepare && deno run -A scripts/build/compile-binary.ts --output ./bin/veryfront",
     "build:npm": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run -A scripts/build/build-npm-dnt.ts",
@@ -309,11 +314,12 @@ export default {
     "test:coverage:integration": "rm -rf coverage && VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --fail-fast --allow-all --coverage=coverage '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' tests --unstable-worker-options --unstable-net || exit 1",
     "coverage:report": "deno coverage coverage --include=src/ --exclude=tests --exclude=src/**/*_test.ts --exclude=src/**/*_test.tsx --exclude=src/**/*.test.ts --exclude=src/**/*.test.tsx --lcov > coverage/lcov.info && deno run --allow-read scripts/lint/check-coverage.ts 80",
     "coverage:html": "deno coverage coverage --include=src/ --exclude=tests --exclude=src/**/*_test.ts --exclude=src/**/*_test.tsx --exclude=src/**/*.test.ts --exclude=src/**/*.test.tsx --html",
+    "bench": "VF_DISABLE_LRU_INTERVAL=1 NODE_ENV=production LOG_FORMAT=text deno bench --no-check --allow-all --unstable-worker-options --unstable-net $(find src -name '*.bench.ts')",
     "clean": "rm -rf .cache/",
     "lint": "DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/",
     "fmt": "deno fmt src/ cli/",
     "fmt:check": "deno fmt --check src/ cli/",
-    "typecheck": "deno task generate && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/modules/index.ts src/proxy/main.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/mcp/index.ts src/provider/index.ts",
+    "typecheck": "deno task generate && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/modules/index.ts src/proxy/main.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/jobs/index.ts src/mcp/index.ts src/provider/index.ts",
     "verify": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task docs:validate && deno task typecheck && deno task test && deno task test:e2e:binary",
     "verify:quick": "deno task generate && deno fmt --check src/ cli/ && DENO_NO_PACKAGE_JSON=1 deno lint src/ cli/ && deno task lint:style && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task docs:validate && deno task typecheck",
     "docs": "rm -rf docs/reference && deno run --allow-read --allow-write --allow-run scripts/docs/generate-api-reference.ts",

package/src/src/data/server-data-fetcher.ts

@@ -6,7 +6,10 @@ import { TimeoutError, withTimeoutThrow } from "../rendering/utils/stream-utils.
 import { withSpan } from "../observability/tracing/otlp-setup.js";
 import { CircuitBreakerOpen, getCircuitBreaker } from "../utils/circuit-breaker.js";
 import { getWorkerPool, isDataIsolationEnabled } from "../security/sandbox/worker-pool.js";
-import type { WorkerResponse } from "../security/sandbox/worker-types.js";
+import {
+  MAX_WORKER_BODY_BYTES,
+  type WorkerResponse,
+} from "../security/sandbox/worker-types.js";
 
 /**
  * Options for isolated data fetching through Worker pool.
@@ -110,7 +113,32 @@ export class ServerDataFetcher {
     context: DataContext,
   ): Promise<DataResult> {
     const pool = getWorkerPool();
-    const body = context.request?.body ? new Uint8Array(await context.request.arrayBuffer()) : null;
+    let body: Uint8Array | null = null;
+    if (context.request?.body) {
+      // Fast path: reject before buffering if Content-Length is known
+      const contentLength = context.request.headers?.get("content-length");
+      if (contentLength) {
+        const bytes = parseInt(contentLength, 10);
+        if (bytes > MAX_WORKER_BODY_BYTES) {
+          throw new Error(
+            `Request body too large for isolated data fetch (${
+              (bytes / 1024 / 1024).toFixed(1)
+            } MB, limit ${MAX_WORKER_BODY_BYTES / 1024 / 1024} MB)`,
+          );
+        }
+      }
+
+      body = new Uint8Array(await context.request.arrayBuffer());
+
+      // Fallback: check actual size for chunked/streaming bodies
+      if (body.byteLength > MAX_WORKER_BODY_BYTES) {
+        throw new Error(
+          `Request body too large for isolated data fetch (${
+            (body.byteLength / 1024 / 1024).toFixed(1)
+          } MB, limit ${MAX_WORKER_BODY_BYTES / 1024 / 1024} MB)`,
+        );
+      }
+    }
 
     const workerResponse: WorkerResponse = await pool.execute(
       projectDir,

package/src/src/jobs/index.ts

@@ -0,0 +1,85 @@
+/**
+ * Jobs module for durable project-scoped background execution.
+ *
+ * Provides a public SDK surface for one-off jobs, cron jobs, batch summaries,
+ * job target discovery, and the canonical split between user-visible `events`
+ * and raw debugging `logs`.
+ *
+ * @module
+ *
+ * @example
+ * ```ts
+ * import { VeryfrontJobsClient } from "veryfront/jobs";
+ *
+ * const jobs = new VeryfrontJobsClient({
+ *   authToken: process.env.VERYFRONT_API_TOKEN,
+ *   projectReference: "my-project",
+ * });
+ *
+ * const job = await jobs.create({
+ *   name: "Ingest 1 file",
+ *   target: "task:knowledge-ingest",
+ *   config: {
+ *     file_count: 1,
+ *     upload_ids: ["00000000-0000-0000-0000-000000000000"],
+ *   },
+ * });
+ *
+ * const events = await jobs.events(job.id);
+ * ```
+ */
+import "../../_dnt.polyfills.js";
+
+
+export {
+  type CreateCronJobInput,
+  type CreateJobInput,
+  createJobsClient,
+  type ListBatchJobsOptions,
+  type ListCronJobsOptions,
+  type ListJobEventsOptions,
+  type ListJobsOptions,
+  type ProjectScopedOptions,
+  type UpdateCronJobInput,
+  VeryfrontJobsClient,
+  type VeryfrontJobsClientConfig,
+} from "./jobs-client.js";
+export {
+  type CronJob,
+  CronJobSchema,
+  type CronJobStatus,
+  CronJobStatusSchema,
+  type Job,
+  type JobBatch,
+  type JobBatchResult,
+  JobBatchResultSchema,
+  JobBatchSchema,
+  type JobBatchStatusCounts,
+  JobBatchStatusCountsSchema,
+  type JobEvent,
+  JobEventSchema,
+  type JobEventsResponse,
+  JobEventsResponseSchema,
+  type JobLogsResponse,
+  JobLogsResponseSchema,
+  type JobResult,
+  JobResultSchema,
+  JobSchema,
+  type JobStatus,
+  JobStatusSchema,
+  type JobTargetDefinition,
+  JobTargetDefinitionSchema,
+  type JobTargetDefinitionsResponse,
+  JobTargetDefinitionsResponseSchema,
+  type KnowledgeIngestBatchSource,
+  KnowledgeIngestBatchSourceSchema,
+  type KnowledgeIngestFileResult,
+  KnowledgeIngestFileResultSchema,
+  PageInfoSchema,
+  type PaginatedCronJobsResponse,
+  PaginatedCronJobsResponseSchema,
+  type PaginatedJobsResponse,
+  PaginatedJobsResponseSchema,
+  type ReservedJobTargetFamily,
+  ReservedJobTargetFamilySchema,
+} from "./schemas.js";