veryfront 0.1.92 → 0.1.93

package/src/src/platform/adapters/veryfront-api-client/schemas/api.schema.ts

@@ -148,11 +148,13 @@ export const LookupDomainResponseSchema = z.object({
 });
 
 export const StyleArtifactResolveResponseSchema = z.object({
-  status: z.enum(["ready", "missing"]),
+  status: z.enum(["ready", "missing", "building", "failed"]),
   artifact_hash: z.string().optional(),
   asset_path: z.string().optional(),
   etag: z.string().optional(),
   content_type: z.string().optional(),
+  build_job_id: z.string().uuid().optional(),
+  failure_reason: z.string().optional(),
   updated_at: z.string().optional(),
 });
 
@@ -228,4 +230,10 @@ export const API_ENDPOINTS = {
     description:
       "Resolve metadata for the latest ready style artifact for a branch, environment, or release selector",
   },
+  ensureStyleArtifactBuild: {
+    method: "POST" as const,
+    path: "/projects/{projectRef}/style-artifacts/current/builds",
+    description:
+      "Ensure a background style artifact build exists for a branch, environment, or release selector",
+  },
 } as const;

package/src/src/rendering/styles.ts

@@ -0,0 +1,15 @@
+/**
+ * Public style artifact helpers used by CLI and worker entrypoints.
+ *
+ * @module rendering/styles
+ */
+
+export {
+  buildPreparedCSSArtifactFromFiles,
+  type PreparedCSSArtifactBuildResult,
+} from "../html/styles-builder/css-pregeneration.js";
+export {
+  createStyleScopeProfile,
+  type StyleScopeProfile,
+} from "../html/styles-builder/style-scope-profile.js";
+export { resolveStyleContentVersion } from "../html/styles-builder/content-version.js";

package/src/src/sandbox/index.ts

@@ -24,6 +24,7 @@ export {
   type CommandJobHeartbeatStatus,
   type CommandJobOutput,
   type CommandJobStatus,
+  type ExecOptions,
   type ExecResult,
   type ExecStreamEvent,
   Sandbox,

package/src/src/sandbox/sandbox.ts

@@ -19,6 +19,16 @@ import {
 import { getVeryfrontCloudAuthToken } from "../platform/cloud/resolver.js";
 import { getHostEnv } from "../platform/compat/process.js";
 
+/** Options for command execution: working directory, timeout, and environment variables. */
+export interface ExecOptions {
+  /** Working directory for the command. */
+  cwd?: string;
+  /** Timeout in seconds for the command. */
+  timeout_seconds?: number;
+  /** Additional environment variables for the command. */
+  env?: Record<string, string>;
+}
+
 /** Options for creating a sandbox session. */
 export interface SandboxOptions {
   /** Base URL of the Veryfront API. Defaults to VERYFRONT_API_URL env. */
@@ -242,12 +252,12 @@ export class Sandbox {
   }
 
   /** Execute a bash command in the sandbox and return buffered result. */
-  async executeCommand(command: string): Promise<ExecResult> {
+  async executeCommand(command: string, options?: ExecOptions): Promise<ExecResult> {
     let stdout = "";
     let stderr = "";
     let exitCode = 1;
 
-    for await (const event of this.executeStream(command)) {
+    for await (const event of this.executeStream(command, options)) {
       switch (event.type) {
         case "stdout":
           stdout += event.data ?? "";
@@ -265,14 +275,14 @@ export class Sandbox {
   }
 
   /** Execute a bash command with streaming output (NDJSON). */
-  async *executeStream(command: string): AsyncGenerator<ExecStreamEvent> {
+  async *executeStream(command: string, options?: ExecOptions): AsyncGenerator<ExecStreamEvent> {
     const res = await dntShim.fetch(`${this.endpoint}/exec`, {
       method: "POST",
       headers: {
         Authorization: `Bearer ${this.authToken}`,
         "Content-Type": "application/json",
       },
-      body: JSON.stringify({ command }),
+      body: JSON.stringify({ command, ...options }),
     });
 
     if (!res.ok) {
@@ -343,14 +353,14 @@ export class Sandbox {
   }
 
   /** Start an async command job in the sandbox. */
-  async startCommandJob(command: string): Promise<CommandJob> {
+  async startCommandJob(command: string, options?: ExecOptions): Promise<CommandJob> {
     const res = await dntShim.fetch(`${this.endpoint}/exec/jobs`, {
       method: "POST",
       headers: {
         Authorization: `Bearer ${this.authToken}`,
         "Content-Type": "application/json",
       },
-      body: JSON.stringify({ command }),
+      body: JSON.stringify({ command, ...options }),
     });
 
     if (!res.ok) {
@@ -399,6 +409,23 @@ export class Sandbox {
     };
   }
 
+  /** List all command jobs in the sandbox. */
+  async listCommandJobs(): Promise<CommandJob[]> {
+    const res = await dntShim.fetch(`${this.endpoint}/exec/jobs`, {
+      headers: { Authorization: `Bearer ${this.authToken}` },
+    });
+
+    if (!res.ok) {
+      throw REQUEST_ERROR.create({
+        detail: `List command jobs failed: ${res.status} ${await res.text()}`,
+      });
+    }
+
+    const json = await res.json();
+    const jobs = Array.isArray(json) ? json : (json.jobs ?? []);
+    return jobs.map((j: Record<string, unknown>) => Sandbox.mapCommandJob(j));
+  }
+
   /** Cancel an async command job. */
   async cancelCommandJob(jobId: string): Promise<CommandJob> {
     const res = await dntShim.fetch(`${this.endpoint}/exec/jobs/${jobId}/cancel`, {

package/src/src/security/http/base-handler.ts

@@ -7,6 +7,7 @@ import type {
   RoutePattern,
 } from "../../types/index.js";
 import { runWithCacheBatching } from "../../cache/request-cache-batcher.js";
+import { getHostEnv } from "../../platform/compat/process.js";
 import { serverLogger } from "../../utils/index.js";
 import { ResponseBuilder } from "./response/index.js";
 
@@ -78,7 +79,7 @@ export abstract class BaseHandler implements Handler {
   }
 
   protected logDebug(message: string, extra?: Record<string, unknown>, ctx?: HandlerContext): void {
-    if (!ctx?.debug && !ctx?.adapter.env.get("VERYFRONT_DEBUG")) return;
+    if (!ctx?.debug && !getHostEnv("VERYFRONT_DEBUG")) return;
     serverLogger.debug(`[${this.metadata.name}] ${message}`, extra ?? undefined);
   }
 
@@ -108,7 +109,9 @@ export abstract class BaseHandler implements Handler {
     fn: () => Promise<T>,
     options: { requireToken?: boolean } = {},
   ): Promise<T> {
-    const effectiveToken = ctx.proxyToken || ctx.adapter.env.get("VERYFRONT_API_TOKEN") || "";
+    // Framework-owned token: bypass project env overlay so proxy mode works
+    // when a remote project overlay is active.
+    const effectiveToken = ctx.proxyToken || getHostEnv("VERYFRONT_API_TOKEN") || "";
     const fsWrapper = ctx.adapter.fs as {
       setRequestToken?: (t: string) => void;
       setRequestBranch?: (b: string | null) => void;

package/src/src/server/context/request-context.ts

@@ -1,5 +1,5 @@
 import * as dntShim from "../../../_dnt.shims.js";
-import { getEnv } from "../../platform/compat/process.js";
+import { getHostEnv } from "../../platform/compat/process.js";
 import { parseProjectDomain } from "../utils/domain-parser.js";
 
 export interface RequestContext {
@@ -28,7 +28,9 @@ export function createRequestContext(req: dntShim.Request): RequestContext {
     : "production";
 
   return {
-    token: req.headers.get("x-token") ?? getEnv("VERYFRONT_API_TOKEN") ?? "",
+    // Framework-owned token: bypass project env overlay so proxy mode works
+    // when a remote project overlay is active.
+    token: req.headers.get("x-token") ?? getHostEnv("VERYFRONT_API_TOKEN") ?? "",
     slug: req.headers.get("x-project-slug") ?? parsed.slug ?? "",
     branch: parsed.branch,
     mode,

package/src/src/server/handlers/dev/styles-css.handler.ts

@@ -29,6 +29,7 @@ import { createStyleScopeProfile } from "../../../html/styles-builder/style-scop
 import { serverLogger } from "../../../utils/index.js";
 import type { ResolvedContentContext } from "../../../platform/adapters/fs/veryfront/types.js";
 import type {
+  EnsureStyleArtifactBuildInput,
   ResolveStyleArtifactInput,
   VeryfrontApiClient,
 } from "../../../platform/adapters/veryfront-api-client/index.js";
@@ -353,6 +354,9 @@ body::before {
       });
 
       if (resolved.status !== "ready" || !resolved.artifactHash) {
+        if (resolved.status !== "building") {
+          await this.ensureRemotePreparedCSSBuild(client, selector, styleProfileHash);
+        }
         return undefined;
       }
 
@@ -415,4 +419,31 @@ body::before {
       });
     }
   }
+
+  private shouldEnsureRemoteStyleArtifactBuild(selector: StyleArtifactSelectorContext): boolean {
+    return Boolean(selector.environmentName || selector.releaseId);
+  }
+
+  private async ensureRemotePreparedCSSBuild(
+    client: VeryfrontApiClient,
+    selector: StyleArtifactSelectorContext,
+    styleProfileHash: string,
+  ): Promise<void> {
+    if (!this.shouldEnsureRemoteStyleArtifactBuild(selector)) return;
+
+    try {
+      await client.ensureStyleArtifactBuild(
+        {
+          ...selector,
+          styleProfileHash,
+        } satisfies EnsureStyleArtifactBuildInput,
+      );
+    } catch (error) {
+      logger.debug("Failed to ensure remote prepared CSS build", {
+        selector,
+        styleProfileHash,
+        error: error instanceof Error ? error.message : String(error),
+      });
+    }
+  }
 }

package/src/src/server/handlers/preview/markdown-preview.handler.ts

@@ -16,7 +16,7 @@ import { HTTP_OK } from "../../../utils/constants/index.js";
 import { compileMarkdownRuntime } from "../../../transforms/md/compiler/md-compiler.js";
 import { extract } from "../../../platform/compat/std/front-matter-yaml.js";
 import { isExtendedFSAdapter } from "../../../platform/adapters/fs/wrapper.js";
-import { getEnv } from "../../../platform/compat/process.js";
+import { getHostEnv } from "../../../platform/compat/process.js";
 import { tryNotFoundFallback } from "../request/ssr/not-found-fallback.js";
 import { generateMarkdownHtml } from "./markdown-html-generator.js";
 import { validatePathSync } from "../../../security/index.js";
@@ -70,7 +70,9 @@ export class MarkdownPreviewHandler extends BaseHandler {
     const hasMultiProjectSupport = isExtendedFSAdapter(fsAdapter) && fsAdapter.isMultiProjectMode();
 
     if (ctx.projectSlug && hasMultiProjectSupport) {
-      const effectiveToken = ctx.proxyToken || getEnv("VERYFRONT_API_TOKEN") || "";
+      // Framework-owned token: bypass project env overlay so proxy mode works
+      // when a remote project overlay is active.
+      const effectiveToken = ctx.proxyToken || getHostEnv("VERYFRONT_API_TOKEN") || "";
       const branch = ctx.parsedDomain?.branch ?? null;
 
       return await fsAdapter.runWithContext(

package/src/src/server/handlers/request/css.handler.ts

@@ -10,7 +10,7 @@ import {
   extractCacheKeyContext,
   runWithCacheKeyContext,
 } from "../../../cache/cache-key-builder.js";
-import { getEnv } from "../../../platform/compat/process.js";
+import { getHostEnv } from "../../../platform/compat/process.js";
 import { runWithRequestContext } from "../../../platform/adapters/fs/veryfront/multi-project-adapter.js";
 
 /** Pattern to match hashed CSS URLs: /_vf/css/[8-char-hash].css */
@@ -50,7 +50,9 @@ export class CSSHandler extends BaseHandler {
     // the distributed API cache backend can't authenticate and silently returns
     // null — causing cross-pod cache misses. Wrap the lookup in request context
     // so the API backend can resolve the token and project.
-    const effectiveToken = ctx.proxyToken || getEnv("VERYFRONT_API_TOKEN") || "";
+    // Framework-owned token: bypass project env overlay so proxy mode works
+    // when a remote project overlay is active.
+    const effectiveToken = ctx.proxyToken || getHostEnv("VERYFRONT_API_TOKEN") || "";
     const lookup = () =>
       runWithCacheKeyContext(cacheCtx, () =>
         getCSSWithJITFallback(

package/src/src/server/handlers/request/ssr/ssr.handler.ts

@@ -19,7 +19,7 @@ import type {
 import { PRIORITY_LOW } from "../../../../utils/constants/index.js";
 import { generateNonce } from "../../../../security/http/response/security-handler.js";
 import { isExtendedFSAdapter } from "../../../../platform/adapters/fs/wrapper.js";
-import { getEnv } from "../../../../platform/compat/process.js";
+import { getHostEnv } from "../../../../platform/compat/process.js";
 import { shouldUseNoCacheHeadersFromHandler } from "../../../context/enriched-context.js";
 import { withSpan } from "../../../../observability/tracing/otlp-setup.js";
 import { serverLogger } from "../../../../utils/index.js";
@@ -117,7 +117,9 @@ export class SSRHandler extends BaseHandler {
       if (ctx.projectSlug && isExtended && fsAdapter.isMultiProjectMode()) {
         const prodMode = isProductionMode(ctx, url);
         const branch = ctx.parsedDomain?.branch ?? null;
-        const effectiveToken = ctx.proxyToken || getEnv("VERYFRONT_API_TOKEN") || "";
+        // Framework-owned token: bypass project env overlay so proxy mode works
+        // when a remote project overlay is active.
+        const effectiveToken = ctx.proxyToken || getHostEnv("VERYFRONT_API_TOKEN") || "";
 
         logger.debug("Using multi-project context", {
           projectSlug: ctx.projectSlug,

package/src/src/utils/version.ts

@@ -3,7 +3,7 @@ import { getEnv } from "../platform/compat/process.js";
 
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.92";
+export const VERSION = "0.1.93";
 
 export function normalizeVeryfrontVersion(version: string | undefined): string | undefined {
   if (!version) return undefined;