veryfront 0.1.757 → 0.1.758

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.757",
+    "version": "0.1.758",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": "P2D",

package/esm/src/agent/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAGlB,KAAK,OAAO,EAGZ,KAAK,QAAQ,EAGd,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAiD/D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,8BAA8B,EAC9B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,sBAAsB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,+BAA+B,GACrC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,iBAAiB,GACvB,MAAM,+BAA+B,CAAC;AAgDvC,+BAA+B;AAC/B,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAEzB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;YAS7B,qBAAqB;YA2BrB,mBAAmB;YAsBnB,gBAAgB;IAS9B;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,CAAC;IAqDzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;KAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAqItC;;OAEG;YACW,gBAAgB;IAmS9B;;;;OAIG;YACW,yBAAyB;IA6ZvC;;OAEG;YACW,eAAe;IAgC7B;;OAEG;YACW,mBAAmB;IAOjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAGlB,KAAK,OAAO,EAGZ,KAAK,QAAQ,EAGd,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAiD/D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,8BAA8B,EAC9B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,sBAAsB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC5E,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,EAChC,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,KAAK,+BAA+B,GACrC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,iBAAiB,GACvB,MAAM,+BAA+B,CAAC;AAgDvC,+BAA+B;AAC/B,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAEzB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;YAS7B,qBAAqB;YA2BrB,mBAAmB;YAsBnB,gBAAgB;IAS9B;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,CAAC;IAqDzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;KAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAyJtC;;OAEG;YACW,gBAAgB;IAmS9B;;;;OAIG;YACW,yBAAyB;IA6ZvC;;OAEG;YACW,eAAe;IAgC7B;;OAEG;YACW,mBAAmB;IAOjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,sBAAsB;IAc9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}

package/esm/src/agent/runtime/index.js

@@ -206,6 +206,13 @@ export class AgentRuntime {
             platform: detectPlatform(),
         };
         const chain = new MiddlewareChain(this.config.middleware);
+        // Hold the in-flight agent-loop promise so stream cancellation can detach a
+        // no-op rejection handler. When the client cancels, we abort the shared
+        // signal; the loop (model fetch / tool execution) then rejects with an
+        // AbortError. The `start` body awaits it, but cancellation can land after
+        // that await settles, leaving the rejection without a consumer — fatal as
+        // an unhandled rejection under Deno (#2334).
+        let inFlight;
         return new ReadableStream({
             start: async (controller) => {
                 try {
@@ -226,7 +233,8 @@ export class AgentRuntime {
                             model: effectiveModel,
                         },
                     });
-                    const response = await chain.execute(agentContext, () => this.executeAgentLoopStreaming(systemPrompt, memoryMessages, controller, encoder, callbacks, textPartId, toolContext, context, resolvedModelString, languageModel, transport.headers, transport.providerOptions, maxOutputTokensOverride, streamAbortSignal, requestedModel));
+                    inFlight = chain.execute(agentContext, () => this.executeAgentLoopStreaming(systemPrompt, memoryMessages, controller, encoder, callbacks, textPartId, toolContext, context, resolvedModelString, languageModel, transport.headers, transport.providerOptions, maxOutputTokensOverride, streamAbortSignal, requestedModel));
+                    const response = await inFlight;
                     throwIfAborted(streamAbortSignal);
                     callbacks?.onFinish?.(response);
                     throwIfAborted(streamAbortSignal);
@@ -251,7 +259,19 @@ export class AgentRuntime {
                 }
             },
             cancel(reason) {
-                streamAbortController.abort(reason);
+                // The client disconnected (e.g. the Chat Stop button). Treat this as a
+                // clean stop: detach a no-op handler from the in-flight loop so the
+                // AbortError it throws when we abort the shared signal cannot surface as
+                // an unhandled rejection, then abort. Guard the abort itself so a
+                // synchronous signal-abort rejection can never escape here (#2334).
+                inFlight?.catch(() => { });
+                try {
+                    streamAbortController.abort(reason);
+                }
+                catch {
+                    // Aborting an already-aborted controller, or a synchronous reject
+                    // from a signal consumer, is a no-op for cancellation purposes.
+                }
             },
         });
     }

package/esm/src/agent/streaming/tool-execution-data-event-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-execution-data-event-bridge.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/streaming/tool-execution-data-event-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,mEAAmE;AACnE,MAAM,MAAM,+BAA+B,GAAG,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;AAEtF,iEAAiE;AACjE,MAAM,MAAM,uCAAuC,GAAG;IACpD,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,OAAO,EAAE,+BAA+B,KAAK,IAAI,CAAC;CACtE,CAAC;AA6BF,sDAAsD;AACtD,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,uCAAuC,GAC7C,cAAc,CAAC,UAAU,CAAC,CA+C5B"}
+{"version":3,"file":"tool-execution-data-event-bridge.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/streaming/tool-execution-data-event-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAElE,mEAAmE;AACnE,MAAM,MAAM,+BAA+B,GAAG,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;AAEtF,iEAAiE;AACjE,MAAM,MAAM,uCAAuC,GAAG;IACpD,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC,gBAAgB,EAAE,CAAC,OAAO,EAAE,+BAA+B,KAAK,IAAI,CAAC;CACtE,CAAC;AA6BF,sDAAsD;AACtD,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,uCAAuC,GAC7C,cAAc,CAAC,UAAU,CAAC,CAwD5B"}

package/esm/src/agent/streaming/tool-execution-data-event-bridge.js

@@ -57,7 +57,17 @@ export function createToolExecutionDataEventBridgeStream(input) {
             })();
         },
         async cancel(reason) {
-            await baseReader?.cancel(reason);
+            // Cancellation is best-effort teardown (the client disconnected / hit
+            // Stop). Forwarding the cancel to the base reader can reject — e.g. the
+            // upstream agent runtime aborts an in-flight signal whose rejection
+            // surfaces through the cancel chain. Swallow it so it does not escape as
+            // an unhandled rejection, which is fatal under Deno (#2334).
+            try {
+                await baseReader?.cancel(reason);
+            }
+            catch {
+                // Stream is being torn down; a failed cancel is a clean stop here.
+            }
         },
     });
 }

package/esm/src/platform/compat/process/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/env.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAoBF,oDAAoD;AACpD,wBAAgB,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmB5C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS1D;AAqCD,kEAAkE;AAClE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWtD;AAKD,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAOpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAUpE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,UAAQ,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAmBT;AAED,gBAAgB;AAChB,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAgBvD;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAgB3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAS/D"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/env.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAoBF,oDAAoD;AACpD,wBAAgB,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmB5C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAoB1D;AAqCD,kEAAkE;AAClE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWtD;AAKD,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAOpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAUpE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,UAAQ,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAmBT;AAED,gBAAgB;AAChB,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAgBvD;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAgB3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAS/D"}

package/esm/src/platform/compat/process/env.js

@@ -41,8 +41,19 @@ export function getHostEnv(key) {
     if (overlayResult.hasValue) {
         return overlayResult.value;
     }
-    if (IS_DENO)
-        return dntShim.Deno.env.get(key);
+    if (IS_DENO) {
+        try {
+            return dntShim.Deno.env.get(key);
+        }
+        catch {
+            // Under a tightened env permission allowlist (project isolation workers),
+            // reading a non-allowlisted variable throws NotCapable. Treat it as absent
+            // to match the prior `env: true` behavior where reads never threw, so
+            // optional-variable lookups degrade to undefined instead of crashing the
+            // request.
+            return undefined;
+        }
+    }
     if (runtimeProcess)
         return runtimeProcess.env[key];
     return undefined;

package/esm/src/security/sandbox/worker-egress-guard.d.ts

@@ -11,5 +11,25 @@ export declare function isInternalEgressOverrideEnabled(value: string | undefine
 export declare function isInternalEgressIp(address: string): boolean;
 export declare function assertWorkerEgressAllowed(target: string | URL | Request, options?: WorkerEgressGuardOptions): Promise<void>;
 export declare function assertWorkerHostEgressAllowed(hostname: string, options?: WorkerEgressGuardOptions): Promise<void>;
+/** Dependencies for {@link guardedEgressFetch} (injectable for tests). */
+export interface GuardedEgressFetchDeps {
+    /** Underlying fetch implementation (defaults to the global `fetch`). */
+    fetchImpl?: typeof fetch;
+    /** Egress options applied to the initial URL and every redirect hop. */
+    options?: WorkerEgressGuardOptions;
+}
+/**
+ * Egress-checked fetch that re-validates EVERY redirect hop.
+ *
+ * The platform `fetch` follows 3xx redirects transparently, so checking only the
+ * initial URL lets a public host redirect to an internal address (loopback,
+ * RFC1918, link-local, cloud metadata) that the guard never sees. This forces
+ * `redirect: "manual"` on the underlying fetch and re-runs the egress check on
+ * each `Location` before following it. The caller's redirect intent is honored:
+ * `manual` returns the redirect unfollowed, `error` throws, `follow` (default)
+ * follows manually after re-checking. Credential headers are stripped on a
+ * cross-origin hop, matching the platform fetch the guard wraps.
+ */
+export declare function guardedEgressFetch(input: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1], deps?: GuardedEgressFetchDeps): Promise<Response>;
 export declare function installWorkerEgressGuard(options?: WorkerEgressGuardOptions): void;
 //# sourceMappingURL=worker-egress-guard.d.ts.map

package/esm/src/security/sandbox/worker-egress-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-egress-guard.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-egress-guard.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,mCAAmC,2CAA2C,CAAC;AAE5F,qBAAa,wBAAyB,SAAQ,KAAK;IACxC,IAAI,SAA8B;CAC5C;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAExE,MAAM,WAAW,wBAAwB;IACvC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAWD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAWlF;AAuDD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK3D;AA4CD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC9B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAgBD,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CA+CrF"}
+{"version":3,"file":"worker-egress-guard.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-egress-guard.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,mCAAmC,2CAA2C,CAAC;AAE5F,qBAAa,wBAAyB,SAAQ,KAAK;IACxC,IAAI,SAA8B;CAC5C;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAExE,MAAM,WAAW,wBAAwB;IACvC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAWD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAWlF;AAuDD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK3D;AA4CD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC9B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,6BAA6B,CACjD,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAmBD,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,wEAAwE;IACxE,OAAO,CAAC,EAAE,wBAAwB,CAAC;CACpC;AASD;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAClC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAClC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,QAAQ,CAAC,CAqGnB;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAmDrF"}

package/esm/src/security/sandbox/worker-egress-guard.js

@@ -160,6 +160,115 @@ function getAllowInternalEgress() {
         return false;
     }
 }
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const MAX_EGRESS_REDIRECTS = 20;
+/** A request body that can be safely replayed across a body-preserving redirect. */
+function isReplayableBody(body) {
+    return body == null || typeof body === "string" ||
+        body instanceof Uint8Array || body instanceof ArrayBuffer ||
+        body instanceof URLSearchParams;
+}
+/**
+ * Egress-checked fetch that re-validates EVERY redirect hop.
+ *
+ * The platform `fetch` follows 3xx redirects transparently, so checking only the
+ * initial URL lets a public host redirect to an internal address (loopback,
+ * RFC1918, link-local, cloud metadata) that the guard never sees. This forces
+ * `redirect: "manual"` on the underlying fetch and re-runs the egress check on
+ * each `Location` before following it. The caller's redirect intent is honored:
+ * `manual` returns the redirect unfollowed, `error` throws, `follow` (default)
+ * follows manually after re-checking. Credential headers are stripped on a
+ * cross-origin hop, matching the platform fetch the guard wraps.
+ */
+export async function guardedEgressFetch(input, init, deps = {}) {
+    const doFetch = deps.fetchImpl ?? fetch;
+    const options = deps.options ?? {};
+    const requestedRedirect = init?.redirect ??
+        (input instanceof Request ? input.redirect : "follow");
+    let url = input instanceof Request
+        ? input.url
+        : input instanceof URL
+            ? input.href
+            : String(input);
+    let method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
+    const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : undefined));
+    let body;
+    if (init?.body != null) {
+        body = init.body;
+    }
+    else if (input instanceof Request && input.body) {
+        body = new Uint8Array(await input.arrayBuffer());
+    }
+    // Preserve request-level options (notably `signal`, so aborts keep working)
+    // that would otherwise be dropped when the caller passes a Request object
+    // rather than an init bag, and that must persist across every redirect hop.
+    const reqInput = input instanceof Request ? input : undefined;
+    const carryInit = {
+        signal: init?.signal ?? reqInput?.signal,
+        credentials: init?.credentials ?? reqInput?.credentials,
+        cache: init?.cache ?? reqInput?.cache,
+        mode: init?.mode ?? reqInput?.mode,
+        referrer: init?.referrer ?? reqInput?.referrer,
+        referrerPolicy: init?.referrerPolicy ?? reqInput?.referrerPolicy,
+        keepalive: init?.keepalive ?? reqInput?.keepalive,
+    };
+    for (let hop = 0;; hop++) {
+        await assertWorkerEgressAllowed(url, options);
+        const response = await doFetch(url, {
+            ...init,
+            ...carryInit,
+            method,
+            headers,
+            body,
+            redirect: "manual",
+        });
+        if (!REDIRECT_STATUSES.has(response.status))
+            return response;
+        const location = response.headers.get("location");
+        if (!location)
+            return response;
+        if (requestedRedirect === "manual")
+            return response;
+        if (requestedRedirect === "error") {
+            throw new WorkerEgressBlockedError("Worker egress: unexpected redirect with redirect mode 'error'");
+        }
+        if (hop >= MAX_EGRESS_REDIRECTS) {
+            throw new WorkerEgressBlockedError("Worker network egress blocked: exceeded maximum redirect count");
+        }
+        const nextUrl = new URL(location, url);
+        // Only follow redirects to http(s). The platform fetch treats a redirect to
+        // any other scheme as a network error; following e.g. file:// here would let
+        // an attacker-controlled redirect turn a network fetch into a local file
+        // read, since assertWorkerEgressAllowed no-ops for hostless (non-network)
+        // URLs.
+        if (nextUrl.protocol !== "http:" && nextUrl.protocol !== "https:") {
+            throw new WorkerEgressBlockedError(`Worker network egress blocked: redirect to non-http(s) scheme ${nextUrl.protocol}`);
+        }
+        // Cross-origin redirect: strip credential-bearing headers, matching the
+        // platform fetch this guard replaces, so a redirect target cannot receive
+        // the caller's Authorization/Cookie.
+        if (nextUrl.origin !== new URL(url).origin) {
+            headers.delete("authorization");
+            headers.delete("cookie");
+            headers.delete("proxy-authorization");
+        }
+        url = nextUrl.href;
+        // Standard fetch redirect method/body rules: 303, and 301/302 for a
+        // non-GET/HEAD method, downgrade to GET and drop the body; 307/308 preserve.
+        const downgrades = response.status === 303 ||
+            ((response.status === 301 || response.status === 302) &&
+                method !== "GET" && method !== "HEAD");
+        if (downgrades) {
+            method = "GET";
+            body = undefined;
+            headers.delete("content-length");
+            headers.delete("content-type");
+        }
+        else if (!isReplayableBody(body)) {
+            throw new WorkerEgressBlockedError("Worker network egress blocked: cannot safely follow a body-preserving redirect");
+        }
+    }
+}
 export function installWorkerEgressGuard(options = {}) {
     const globalRecord = dntShim.dntGlobalThis;
     if (globalRecord[guardInstalled])
@@ -170,8 +279,12 @@ export function installWorkerEgressGuard(options = {}) {
     };
     const originalFetch = globalThis.fetch.bind(dntShim.dntGlobalThis);
     const fetchWrapper = async (input, init) => {
-        await assertWorkerEgressAllowed(input, baseOptions);
-        return await originalFetch(input, init);
+        // guardedEgressFetch checks the initial URL and re-checks every redirect hop,
+        // so a public host cannot redirect into an internal address.
+        return await guardedEgressFetch(input, init, {
+            fetchImpl: originalFetch,
+            options: baseOptions,
+        });
     };
     Object.defineProperty(fetchWrapper, guardedFetch, { value: true });
     globalThis.fetch = fetchWrapper;

package/esm/src/transforms/mdx/esm-module-loader/cache/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/src/transforms/mdx/esm-module-loader/cache/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAI5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAI9D,eAAO,MAAM,kBAAkB,wBAE7B,CAAC;AA2HH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAsBvF;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAezE;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAQD,2DAA2D;AAC3D,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAElD;AAuBD,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CA0ElE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,SAAwB,GACnC,IAAI,CAgBN;AAOD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAevD;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAc1D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAIzD;AAmBD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EAAE,oDAAoD;AAC3E,eAAe,CAAC,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,EAChE,YAAY,SAAwB,GACnC,OAAO,CAAC,iBAAiB,CAAC,CA+J5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/src/transforms/mdx/esm-module-loader/cache/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAI5D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAK9D,eAAO,MAAM,kBAAkB,wBAE7B,CAAC;AA6IH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAsBvF;AAED,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAezE;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAQD,2DAA2D;AAC3D,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAElD;AAuBD,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CA0ElE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,SAAwB,GACnC,IAAI,CAgBN;AAOD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAevD;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAc1D;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAIzD;AAmBD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EAAE,oDAAoD;AAC3E,eAAe,CAAC,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,EAChE,YAAY,SAAwB,GACnC,OAAO,CAAC,iBAAiB,CAAC,CA+J5B"}

package/esm/src/transforms/mdx/esm-module-loader/cache/index.js

@@ -18,9 +18,26 @@ import { ensureMdxModuleDependencies } from "../module-fetcher/dependency-recove
 export { getLocalFs } from "./local-fs.js";
 import { getLocalFs } from "./local-fs.js";
 const MAX_VERIFIED_MODULE_DEPS = 2_000;
+const MAX_MODULE_PATH_CACHE_ENTRIES = 500;
 export const verifiedModuleDeps = new LRUCache({
     maxEntries: MAX_VERIFIED_MODULE_DEPS,
 });
+class BoundedModulePathCache extends Map {
+    maxEntries;
+    constructor(maxEntries) {
+        super();
+        this.maxEntries = maxEntries;
+    }
+    set(key, value) {
+        if (!this.has(key) && this.size >= this.maxEntries) {
+            const oldestKey = this.keys().next().value;
+            if (oldestKey !== undefined) {
+                this.delete(oldestKey);
+            }
+        }
+        return super.set(key, value);
+    }
+}
 /**
  * Check if cached code has file:// paths from a different environment.
  * Checks both HTTP bundle paths and MDX ESM cache paths.
@@ -125,6 +142,7 @@ function getModulePathCacheEntryCount() {
 registerCache("mdx-esm-path-caches", () => ({
     name: "mdx-esm-path-caches",
     entries: getModulePathCacheEntryCount(),
+    maxEntries: MAX_MODULE_PATH_CACHE_ENTRIES * Math.max(1, modulePathCaches.size),
     cacheDirs: modulePathCaches.size,
 }));
 registerCache("mdx-esm-verified-deps", () => ({
@@ -136,7 +154,7 @@ export async function getModulePathCache(cacheDir) {
     const existing = modulePathCaches.get(cacheDir);
     if (existing && modulePathCacheLoaded.has(cacheDir))
         return existing;
-    const cache = existing ?? new Map();
+    const cache = existing ?? new BoundedModulePathCache(MAX_MODULE_PATH_CACHE_ENTRIES);
     modulePathCaches.set(cacheDir, cache);
     const indexPath = join(cacheDir, "_index.json");
     try {

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.757";
+export declare const VERSION = "0.1.758";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.757";
+export const VERSION = "0.1.758";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.757",
+  "version": "0.1.758",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",