veryfront 0.1.776 → 0.1.778

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.776",
+    "version": "0.1.778",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/agent/runtime/skill-policy-enforcement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-policy-enforcement.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-policy-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAO3C,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iCAAiC,CAAC;AAIzC,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAO/C,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B;IACD,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACxC,8BAA8B,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACtE,CAeA;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIlE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAyBxE;AAOD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAQjF;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,GACtC,MAAM,EAAE,GAAG,SAAS,CAStB;AAED,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,GACtC,MAAM,EAAE,GAAG,SAAS,CA0BtB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,iBAAiB,CAsBnB"}
+{"version":3,"file":"skill-policy-enforcement.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-policy-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAO3C,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iCAAiC,CAAC;AAIzC,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAO/C,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B;IACD,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACxC,8BAA8B,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACtE,CAeA;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIlE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAyBxE;AAOD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAQjF;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,GACtC,MAAM,EAAE,GAAG,SAAS,CAStB;AAED,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,GACtC,MAAM,EAAE,GAAG,SAAS,CAiCtB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,iBAAiB,CAsBnB"}

package/esm/src/agent/runtime/skill-policy-enforcement.js

@@ -81,7 +81,14 @@ export function narrowPolicyAfterSubmittedForm(activeSkillId, activeSkillPolicy)
     if (activeSkillId === "plan" ||
         activeSkillId === "create-agent" ||
         activeSkillId === "create-agentic-workflow") {
-        return activeSkillPolicy.filter((allowedToolName) => ["studio_suggestions", "create_file", "update_file"].includes(allowedToolName));
+        return activeSkillPolicy.filter((allowedToolName) => [
+            "studio_suggestions",
+            "list_files",
+            "get_file",
+            "search_files",
+            "create_file",
+            "update_file",
+        ].includes(allowedToolName));
     }
     return activeSkillPolicy.filter((allowedToolName) => allowedToolName !== FORM_INPUT_TOOL_ID);
 }

package/esm/src/observability/request-profiler.d.ts

@@ -11,6 +11,10 @@ export interface RequestProfileRecord {
     totalMs: number;
     phases: Record<string, number>;
 }
+export interface RequestProfileContextUpdate {
+    projectSlug?: string;
+    requestMode?: string;
+}
 export declare function isRequestProfilingEnabled(pathname?: string): boolean;
 export declare function runWithRequestProfiling<T>(options: {
     category: string;
@@ -21,7 +25,10 @@ export declare function runWithRequestProfiling<T>(options: {
 }, fn: () => Promise<T>): Promise<T>;
 export declare function profilePhase<T>(name: string, fn: () => Promise<T>): Promise<T>;
 export declare function profileSyncPhase<T>(name: string, fn: () => T): T;
-export declare function finalizeRequestProfiling(status?: number): void;
+export declare function updateRequestProfileContext(update: RequestProfileContextUpdate): void;
+export declare function finalizeRequestProfiling(status?: number): RequestProfileRecord | null;
+export declare function buildServerTimingHeader(record: RequestProfileRecord): string;
+export declare function withServerTimingHeader(response: Response, record: RequestProfileRecord | null): Response;
 export declare function snapshotRequestProfiles(): {
     enabled: boolean;
     last_sequence: number;

package/esm/src/observability/request-profiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-profiler.d.ts","sourceRoot":"","sources":["../../../src/src/observability/request-profiler.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAgCD,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAIpE;AAED,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,EACD,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAWpF;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAWhE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAoB9D;AAED,wBAAgB,uBAAuB,IAAI;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAMA;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAG3C"}
+{"version":3,"file":"request-profiler.d.ts","sourceRoot":"","sources":["../../../src/src/observability/request-profiler.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA0CD,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAIpE;AAED,wBAAsB,uBAAuB,CAAC,CAAC,EAC7C,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,EACD,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAWpF;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAWhE;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAMrF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAsBrF;AAUD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAQ5E;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,oBAAoB,GAAG,IAAI,GAClC,QAAQ,CAiBV;AAED,wBAAgB,uBAAuB,IAAI;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAMA;AAED,wBAAgB,oBAAoB,IAAI,IAAI,CAG3C"}

package/esm/src/observability/request-profiler.js

@@ -10,14 +10,22 @@ function roundMs(value) {
 function shouldEnableProfiling() {
     return getEnv("VERYFRONT_ENABLE_PERF_PROFILING") === "1";
 }
+function shouldEnableServerTiming() {
+    return getEnv("VERYFRONT_ENABLE_SERVER_TIMING") === "1";
+}
+function isHtmlPath(pathname) {
+    return !pathname.startsWith("/_") && !pathname.startsWith("/api/") &&
+        !/\.[a-zA-Z0-9]+$/.test(pathname);
+}
 function shouldProfilePath(pathname) {
     return pathname.startsWith("/bench/") ||
         pathname.startsWith("/api/bench/") ||
         pathname.startsWith("/_vf_styles/") ||
-        pathname.startsWith("/_vf_modules/");
+        pathname.startsWith("/_vf_modules/") ||
+        (shouldEnableServerTiming() && isHtmlPath(pathname));
 }
 export function isRequestProfilingEnabled(pathname) {
-    if (!shouldEnableProfiling())
+    if (!shouldEnableProfiling() && !shouldEnableServerTiming())
         return false;
     if (!pathname)
         return true;
@@ -60,10 +68,19 @@ export function profileSyncPhase(name, fn) {
         session.phases.set(name, roundMs((session.phases.get(name) ?? 0) + duration));
     }
 }
-export function finalizeRequestProfiling(status) {
+export function updateRequestProfileContext(update) {
     const session = storage.getStore();
     if (!session)
         return;
+    if (update.projectSlug !== undefined)
+        session.projectSlug = update.projectSlug;
+    if (update.requestMode !== undefined)
+        session.requestMode = update.requestMode;
+}
+export function finalizeRequestProfiling(status) {
+    const session = storage.getStore();
+    if (!session)
+        return null;
     const record = {
         sequence: ++sequence,
         category: session.category,
@@ -80,10 +97,42 @@ export function finalizeRequestProfiling(status) {
     records.push(record);
     while (records.length > MAX_RECORDS)
         records.shift();
+    return record;
+}
+function sanitizeMetricName(name) {
+    return name.replace(/[^A-Za-z0-9!#$%&'*+\-.^_`|~]/g, "_");
+}
+function formatDuration(value) {
+    return Math.max(0, roundMs(value)).toFixed(2);
+}
+export function buildServerTimingHeader(record) {
+    const metrics = [`total;dur=${formatDuration(record.totalMs)}`];
+    for (const [name, duration] of Object.entries(record.phases).slice(0, 20)) {
+        metrics.push(`${sanitizeMetricName(name)};dur=${formatDuration(duration)}`);
+    }
+    return metrics.join(", ");
+}
+export function withServerTimingHeader(response, record) {
+    if (!record || !shouldEnableServerTiming())
+        return response;
+    const value = buildServerTimingHeader(record);
+    try {
+        response.headers.set("Server-Timing", value);
+        return response;
+    }
+    catch {
+        const headers = new Headers(response.headers);
+        headers.set("Server-Timing", value);
+        return new Response(response.body, {
+            status: response.status,
+            statusText: response.statusText,
+            headers,
+        });
+    }
 }
 export function snapshotRequestProfiles() {
     return {
-        enabled: shouldEnableProfiling(),
+        enabled: shouldEnableProfiling() || shouldEnableServerTiming(),
         last_sequence: sequence,
         records: [...records],
     };

package/esm/src/server/runtime-handler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAgCpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAiErE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,msBAmChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA2CD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAibnE;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/server/runtime-handler/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAmCpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAiErE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAMtF,2CAA2C;AAC3C,eAAO,MAAM,aAAa,msBAmChB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AA2CD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,mBAAwB,GAC7B;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuB5D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CAC/C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,qBAAsC,GAC3C,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAqcnE;AAGD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC"}

package/esm/src/server/runtime-handler/index.js

@@ -22,7 +22,7 @@ import { CsrfHandler } from "../../security/http/csrf/csrf-handler.js";
 import { CorsHandler } from "../handlers/response/cors.js";
 import { HealthHandler } from "../handlers/monitoring/health.handler.js";
 import { MetricsHandler } from "../handlers/monitoring/metrics.handler.js";
-import { finalizeRequestProfiling, runWithRequestProfiling, } from "../../observability/request-profiler.js";
+import { finalizeRequestProfiling, profilePhase, runWithRequestProfiling, updateRequestProfileContext, withServerTimingHeader, } from "../../observability/request-profiler.js";
 import { ClientLogHandler } from "../handlers/monitoring/client-log.handler.js";
 import { MemoryDebugHandler } from "../handlers/monitoring/memory.handler.js";
 import { DevEndpointsHandler } from "../handlers/dev/endpoints.handler.js";
@@ -338,30 +338,39 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                         return new Response(JSON.stringify(proxyGuardError), { status: 502, headers: { "Content-Type": "application/json" } });
                     }
                 }
+                const profileCategory = url.pathname.startsWith("/_vf_styles/")
+                    ? "css"
+                    : url.pathname.startsWith("/_vf_modules/")
+                        ? "module"
+                        : url.pathname.startsWith("/api/")
+                            ? "api"
+                            : "html";
+                let requestProfileRecord = null;
                 const executeHandler = async () => {
                     // Fast rejection of vulnerability scanner probes before any async work
                     if (SCANNER_PATH_PATTERN.test(url.pathname)) {
                         return new Response("Not Found", { status: 404 });
                     }
-                    await readyPromise;
-                    await timeAsync("security:load", async () => {
+                    await profilePhase("runtime.ready", () => readyPromise);
+                    await timeAsync("security:load", () => profilePhase("runtime.security_load", async () => {
                         if (isProxyMode)
                             return;
                         await securityLoader.ensureLoaded();
-                    });
-                    await timeAsync("config:load", async () => {
+                    }));
+                    await timeAsync("config:load", () => profilePhase("runtime.config_load", async () => {
                         await configPromise;
-                    });
+                    }));
                     const reqCtx = createRequestContext(req);
                     const wsSlugOverride = url.searchParams.get("x-project-slug") || undefined;
                     // Resolve project from various sources
-                    const projectRes = await resolveProject(req, url, headers, {
+                    const projectRes = await profilePhase("runtime.resolve_project", () => resolveProject(req, url, headers, {
                         config,
                         reqCtx,
                         defaultProjectSlug: opts.defaultProjectSlug,
                         defaultProjectId: opts.defaultProjectId,
                         wsSlugOverride,
-                    });
+                    }));
+                    updateRequestProfileContext({ projectSlug: projectRes.projectSlug });
                     setProjectAttributes(spanInfo.span, projectRes.projectSlug, projectRes.proxyEnv);
                     // Handle projects discovery UI
                     if (shouldHandleProjectsUI(url.pathname, projectRes.projectSlug, projectRes.parsedDomain)) {
@@ -373,7 +382,7 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                     // Note: `x-project-path` is NOT forwarded via `headers.projectPath` anymore;
                     // `resolveAdapter` reads it directly from `req` and only honours it when the
                     // request is proxy-trusted (see isProxyTrusted).
-                    const adapterRes = await resolveAdapter({
+                    const adapterRes = await profilePhase("runtime.resolve_adapter", () => resolveAdapter({
                         req,
                         projectDir,
                         adapter,
@@ -387,7 +396,7 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                         environmentName: projectRes.environmentName,
                         parsedDomain: projectRes.parsedDomain,
                         isProxyMode,
-                    });
+                    }));
                     // Resolve environment and validate
                     const host = req.headers.get("x-forwarded-host") || req.headers.get("host") || url.host;
                     const envRes = resolveEnvironment({
@@ -406,6 +415,7 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                     if (envRes.errorResponse) {
                         return envRes.errorResponse;
                     }
+                    updateRequestProfileContext({ requestMode: envRes.resolvedEnvironment });
                     const skipRenderEnrichedContext = shouldSkipEnrichedContext(url.pathname);
                     // Build handler context
                     const ctx = buildHandlerContext({
@@ -435,10 +445,12 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                         headers.environmentId &&
                         reqCtx.token &&
                         projectRes.projectSlug) {
-                        envVarsForRequest = await envVarCache.get(headers.environmentId, reqCtx.token, projectRes.projectSlug);
+                        const environmentId = headers.environmentId;
+                        const projectSlug = projectRes.projectSlug;
+                        envVarsForRequest = await profilePhase("runtime.load_env_vars", () => envVarCache.get(environmentId, reqCtx.token, projectSlug));
                         logDebug("[runtime-handler] Project env vars fetched", {
-                            projectSlug: projectRes.projectSlug,
-                            environmentId: headers.environmentId,
+                            projectSlug,
+                            environmentId,
                             count: Object.keys(envVarsForRequest).length,
                         });
                     }
@@ -448,36 +460,15 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                     // reqCtx.token indicates the request came through the proxy with auth.
                     // Without it (standalone / test), host env must remain accessible.
                     const shouldIsolateEnv = !adapterRes.isLocalProject && !!reqCtx.token;
-                    const response = await runWithRequestProfiling({
-                        category: url.pathname.startsWith("/_vf_styles/")
-                            ? "css"
-                            : url.pathname.startsWith("/_vf_modules/")
-                                ? "module"
-                                : url.pathname.startsWith("/api/")
-                                    ? "api"
-                                    : "html",
-                        method: req.method,
-                        pathname: url.pathname,
-                        projectSlug: projectRes.projectSlug,
-                        requestMode: envRes.resolvedEnvironment,
-                    }, async () => {
-                        let routedResponse;
-                        try {
-                            routedResponse = await withSpan(SpanNames.HANDLER_EXECUTE, () => {
-                                if (shouldIsolateEnv) {
-                                    return runWithProjectEnv(envVarsForRequest, executeRoute);
-                                }
-                                return executeRoute();
-                            }, {
-                                "handler.project_slug": projectRes.projectSlug || "unknown",
-                                "handler.path": url.pathname,
-                                "handler.method": req.method,
-                            });
-                            return routedResponse;
-                        }
-                        finally {
-                            finalizeRequestProfiling(routedResponse?.status);
+                    const response = await withSpan(SpanNames.HANDLER_EXECUTE, () => profilePhase("handler.execute", () => {
+                        if (shouldIsolateEnv) {
+                            return runWithProjectEnv(envVarsForRequest, executeRoute);
                         }
+                        return executeRoute();
+                    }), {
+                        "handler.project_slug": projectRes.projectSlug || "unknown",
+                        "handler.path": url.pathname,
+                        "handler.method": req.method,
                     });
                     if (response)
                         return response;
@@ -491,7 +482,22 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                     });
                     return errorToRFC9457Response(noHandlerError, ctx, req);
                 };
-                const { response, error } = await withRequestTimeout(() => executeWithTracingContext(spanInfo, executeHandler), url.pathname, req.method);
+                const { response, error } = await withRequestTimeout(() => runWithRequestProfiling({
+                    category: profileCategory,
+                    method: req.method,
+                    pathname: url.pathname,
+                    projectSlug: headers.projectSlug,
+                    requestMode: headers.environment,
+                }, async () => {
+                    let profiledResponse;
+                    try {
+                        profiledResponse = await executeWithTracingContext(spanInfo, executeHandler);
+                        return profiledResponse;
+                    }
+                    finally {
+                        requestProfileRecord = finalizeRequestProfiling(profiledResponse?.status);
+                    }
+                }), url.pathname, req.method);
                 endRequestTracing(spanInfo.span, response.status, error);
                 endContentMetrics({
                     requestId: lifecycle.requestId,
@@ -501,7 +507,7 @@ export function createVeryfrontHandler(projectDir, adapter, opts = { projectDir
                 const isTimeout = response.status === HTTP_GATEWAY_TIMEOUT;
                 completeRequestTracking(lifecycle.requestId, response.status, isTimeout);
                 completeIsolatedRequest(headers.projectSlug, lifecycle.shouldCheckIsolation, isTimeout);
-                return response;
+                return withServerTimingHeader(response, requestProfileRecord);
             }
             finally {
                 endRequestLifecycle(lifecycle);

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.776";
+export declare const VERSION = "0.1.778";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.776";
+export const VERSION = "0.1.778";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.776",
+  "version": "0.1.778",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",