veryfront 0.1.862 → 0.1.864

package/esm/cli/auth/callback-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"callback-server.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/callback-server.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAoUD,wBAAsB,mBAAmB,CACvC,aAAa,GAAE,MAA8B,EAC7C,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAGzB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}
+{"version":3,"file":"callback-server.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/callback-server.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA6UD,wBAAsB,mBAAmB,CACvC,aAAa,GAAE,MAA8B,EAC7C,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,cAAc,CAAC,CAGzB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/esm/cli/auth/callback-server.js

@@ -155,19 +155,26 @@ function headerOrigin(value) {
         return null;
     }
 }
-function hasCrossOriginHeader(headers, url) {
+function hasCrossOriginOriginHeader(headers, url) {
     const expectedOrigin = url.origin;
     const origin = headers.get("origin");
     if (origin && headerOrigin(origin) !== expectedOrigin)
         return true;
+    return false;
+}
+function hasCrossOriginRefererHeader(headers, url) {
+    const expectedOrigin = url.origin;
     const referer = headers.get("referer");
     if (referer && headerOrigin(referer) !== expectedOrigin)
         return true;
     return false;
 }
 function handleCallback(url, headers, options = {}) {
-    if (hasCrossOriginHeader(headers, url))
+    if (hasCrossOriginOriginHeader(headers, url))
         return callbackError("Invalid callback origin");
+    if (!options.expectedState && hasCrossOriginRefererHeader(headers, url)) {
+        return callbackError("Invalid callback origin");
+    }
     if (options.expectedState && url.searchParams.get("state") !== options.expectedState) {
         return callbackError("Invalid OAuth state");
     }

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.862",
+    "version": "0.1.864",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {

package/esm/src/agent/runtime/load-skill-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-skill-tool.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/load-skill-tool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAchD,OAAO,KAAK,EAEV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAG7B,yDAAyD;AACzD,eAAO,MAAM,oCAAoC,2mBACqP,CAAC;AAEvS,mDAAmD;AACnD,eAAO,MAAM,8BAA8B,wsBAC2f,CAAC;AAcviB,2CAA2C;AAC3C,MAAM,MAAM,2BAA2B,GAAG,0BAA0B,GAAG;IACrE,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAClE,6BAA6B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;CACrF,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjE,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjG,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAClE,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEvF,mDAAmD;AACnD,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,2BAA2B,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,YAAY,CAAC,EAAE,4BAA4B,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC,CAAC;AAEF,eAAO,MAAM,kCAAkC;;;GAS9C,CAAC;AAKF,iDAAiD;AACjD,MAAM,MAAM,yBAAyB,GAAG,WAAW,CACjD,UAAU,CAAC,OAAO,kCAAkC,CAAC,CACtD,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,mCAAmC,GAAG;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,0BAA0B,GAClC,0BAA0B,GAC1B,mCAAmC,GACnC,2BAA2B,CAAC;AAkThC,sCAAsC;AACtC,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CA8C7D"}
+{"version":3,"file":"load-skill-tool.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/load-skill-tool.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAehD,OAAO,KAAK,EAEV,0BAA0B,EAC1B,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAG7B,yDAAyD;AACzD,eAAO,MAAM,oCAAoC,2mBACqP,CAAC;AAEvS,mDAAmD;AACnD,eAAO,MAAM,8BAA8B,wsBAC2f,CAAC;AAcviB,2CAA2C;AAC3C,MAAM,MAAM,2BAA2B,GAAG,0BAA0B,GAAG;IACrE,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAClE,6BAA6B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC;CACrF,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjE,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjG,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAClE,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEvF,mDAAmD;AACnD,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,2BAA2B,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,yBAAyB,CAAC;IAC9C,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,YAAY,CAAC,EAAE,4BAA4B,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC,CAAC;AAEF,eAAO,MAAM,kCAAkC;;;GAS9C,CAAC;AAKF,iDAAiD;AACjD,MAAM,MAAM,yBAAyB,GAAG,WAAW,CACjD,UAAU,CAAC,OAAO,kCAAkC,CAAC,CACtD,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,mCAAmC,GAAG;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,4CAA4C;AAC5C,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,0BAA0B,GAClC,0BAA0B,GAC1B,mCAAmC,GACnC,2BAA2B,CAAC;AAkThC,sCAAsC;AACtC,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,IAAI,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CAiE7D"}

package/esm/src/agent/runtime/load-skill-tool.js

@@ -1,5 +1,5 @@
 import { defineSchema, lazySchema } from "../../schemas/index.js";
-import { tool } from "../../tool/index.js";
+import { zodToJsonSchema } from "../../tool/schema/zod-json-schema.js";
 import { LOAD_SKILL_CONTINUE_SAME_TURN, LOAD_SKILL_DELEGATION_THRESHOLD, LOAD_SKILL_OVERRIDE_FORWARDING, LOAD_SKILL_ROOT_OWNERSHIP, LOAD_SKILL_TOOL_INTERSECTION, LOAD_SKILL_USE_ALLOWED_TOOLS, } from "../conversation/delegation-policy.js";
 import { listRuntimeBuiltinSkillReferences, readRuntimeBuiltinSkill, readRuntimeBuiltinSkillReferenceFile, } from "./builtin-skill-files.js";
 import { buildRuntimeLoadedSkillResponse, normalizeRuntimeSkillReferencePath, } from "./skill-metadata.js";
@@ -227,43 +227,57 @@ async function loadRuntimeSkillBody(options, skillId) {
 /** Create runtime load skill tool. */
 export function createRuntimeLoadSkillTool(options) {
     const builtinStore = getBuiltinStore(options);
-    return tool({
+    async function execute({ skillId, file }) {
+        let parsed;
+        try {
+            parsed = buildRuntimeLoadSkillInputSchema(options).parse({ skillId, file });
+        }
+        catch (error) {
+            throw new Error(`Tool "load_skill" input validation failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        skillId = parsed.skillId;
+        file = parsed.file;
+        if (file) {
+            return await loadRuntimeSkillReferenceFile(options, skillId, file);
+        }
+        const loadedSkillResponses = options.context.loadedSkillResponses ??= {};
+        const loadedSkillKey = buildRuntimeSkillCacheKey(options.context, skillId);
+        const loadedResponse = loadedSkillResponses[loadedSkillKey];
+        if (loadedResponse) {
+            return buildAlreadyLoadedSkillResponse(skillId, loadedResponse);
+        }
+        const projectSkill = await loadRuntimeSkillBody(options, skillId);
+        if (projectSkill) {
+            const response = buildLoadedSkillResponse({
+                options,
+                skillId,
+                instructions: projectSkill.instructions,
+                references: projectSkill.references,
+            });
+            loadedSkillResponses[loadedSkillKey] = response;
+            return response;
+        }
+        const localContent = builtinStore.readSkill(options.skillsDir, skillId);
+        if (localContent) {
+            const response = buildLoadedSkillResponse({
+                options,
+                skillId,
+                instructions: localContent,
+                references: builtinStore.listReferences(options.skillsDir, skillId),
+            });
+            loadedSkillResponses[loadedSkillKey] = response;
+            return response;
+        }
+        return buildMissingSkillError(options, skillId);
+    }
+    return {
         id: "load_skill",
+        type: "function",
         description: buildRuntimeLoadSkillDescription(options),
-        inputSchema: buildRuntimeLoadSkillInputSchema(options),
-        execute: async ({ skillId, file }) => {
-            if (file) {
-                return await loadRuntimeSkillReferenceFile(options, skillId, file);
-            }
-            const loadedSkillResponses = options.context.loadedSkillResponses ??= {};
-            const loadedSkillKey = buildRuntimeSkillCacheKey(options.context, skillId);
-            const loadedResponse = loadedSkillResponses[loadedSkillKey];
-            if (loadedResponse) {
-                return buildAlreadyLoadedSkillResponse(skillId, loadedResponse);
-            }
-            const projectSkill = await loadRuntimeSkillBody(options, skillId);
-            if (projectSkill) {
-                const response = buildLoadedSkillResponse({
-                    options,
-                    skillId,
-                    instructions: projectSkill.instructions,
-                    references: projectSkill.references,
-                });
-                loadedSkillResponses[loadedSkillKey] = response;
-                return response;
-            }
-            const localContent = builtinStore.readSkill(options.skillsDir, skillId);
-            if (localContent) {
-                const response = buildLoadedSkillResponse({
-                    options,
-                    skillId,
-                    instructions: localContent,
-                    references: builtinStore.listReferences(options.skillsDir, skillId),
-                });
-                loadedSkillResponses[loadedSkillKey] = response;
-                return response;
-            }
-            return buildMissingSkillError(options, skillId);
+        inputSchema: runtimeLoadSkillToolInputSchema,
+        get inputSchemaJson() {
+            return zodToJsonSchema(buildRuntimeLoadSkillInputSchema(options));
         },
-    });
+        execute,
+    };
 }

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.862";
+export declare const VERSION = "0.1.864";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.862";
+export const VERSION = "0.1.864";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.862",
+  "version": "0.1.864",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",