veryfront/extensions

Import

import {
  assertImageOptimizationEngine,
  assertSystemReadCapability,
  auditCapabilities,
  captureImageOptimizationEngine,
  captureRedisRuntimeProvider,
  composeAbortSignals,
} from "veryfront/extensions";

Examples

import { orchestrateExtensions } from "veryfront/extensions";

const loader = await orchestrateExtensions({
  projectDir: Deno.cwd(),
  config,
  logger,
});

// Later, on shutdown:
await loader.teardownAll();

Exports

Components

Name	Description	Source
`CIRCULAR_DEPENDENCY_ERROR`	Shared circular dependency error value.	source
`EXTENSION_CONFLICT_ERROR`	Shared extension conflict error value.	source
`EXTENSION_VALIDATION_ERROR`	Shared extension validation error value.	source
`ImageOptimizationEngineName`	Registry name used for the image optimization extension contract.	source
`MAX_IMAGE_OPTIMIZATION_ENGINE_IDENTITY_CHARACTERS`	Maximum stable implementation identity accepted across the boundary.	source
`MISSING_EXTENSION_ERROR`	Shared missing extension error value.	source
`RedisRuntimeProviderName`	Registry name used by the Redis runtime extension.	source
`SandboxShellToolsProviderName`	Render sandbox shell tools provider name.	source

Functions

Name	Description	Source
`assertImageOptimizationEngine`	Validate an implementation received through the dynamic contract registry.	source
`assertSystemReadCapability`	Validate the bounded scope required by a `system:read` capability.	source
`auditCapabilities`	Log capabilities for a named extension at startup.	source
`captureImageOptimizationEngine`	Capture dynamic properties once so one run cannot split across mutations.	source
`captureRedisRuntimeProvider`	Validate and snapshot a provider before core invokes extension-owned code. Accessors are rejected so registration cannot execute code during capture.	source
`composeAbortSignals`	Compose cancellation sources without depending on a mutable host `AbortSignal.any` implementation. The first source to abort owns the exact propagated reason, and listeners on every remaining source are detached immediately.	source
`detectConflicts`	Detect contract conflicts between resolved extensions.	source
`discoverLocalExtensions`	Find `*.extension.ts` files in the project root.	source
`discoverPackageExtensions`	Discover auto-activated package extensions without exposing identity internals.	source
`discoverProjectExtensions`	Discover project extension paths without exposing identity internals.	source
`formatCapabilities`	Format capabilities as human-readable strings for logging.	source
`getRecommendation`	Return recommendation.	source
`isSupportedDenoSystemReadApi`		source
`loadExtensionFactory`	Dynamically import an extension factory from `path` and resolve it.	source
`mapToDenoPermissions`	Map capabilities to Deno CLI permission flags.	source
`mergeExtensions`	Merge extensions from all four sources in priority order.	source
`orchestrateExtensions`	Run the full extension pipeline against a resolved project config.	source
`parsePackageMetadata`	Parse veryfront extension metadata from a package.json-like object.	source
`resolve`	Resolve path segments to an absolute path.	source
`tryResolve`	Try to resolve.	source
`validateExtension`	Validate the shape of an extension object. Returns an array of issue descriptions (empty array = valid).	source

Classes

Name	Description	Source
`ExtensionLoader`	Implement extension loader.	source

Types

Name	Description	Source
`Capability`	Declares a system capability an extension requires. Object-based for extensibility — scoping fields vary by type.	source
`ConflictInfo`	Information about a contract conflict between extensions.	source
`CreateSandboxShellToolsInput`	Input payload for create sandbox shell tools.	source
`DiscoveredPackageExtension`	A package extension whose manifest is bound to one physical import target.	source
`Extension`	Public API contract for extension.	source
`ExtensionActivationMode`	Controls whether installation alone may activate an extension package.	source
`ExtensionConfigEntry`	Entry shape for extension config.	source
`ExtensionContext`	Context for extension.	source
`ExtensionContractMetadata`	Public API contract for extension contract metadata.	source
`ExtensionFactory`	Public API contract for extension factory.	source
`ExtensionLogger`	Public API contract for extension logger.	source
`ExtensionSource`	Public API contract for extension source.	source
`ImageOptimizationEngine`	Image decoder, resizer, and encoder implemented by an explicit extension.	source
`ImageOptimizationFormat`	Formats core can request from an image optimization engine.	source
`ImageOptimizationRequest`	Immutable byte-oriented request supplied by core.	source
`ImageOptimizationResult`	Portable result returned by an image optimization engine.	source
`ImageOptimizationVariantResult`	One encoded output returned by an image optimization engine.	source
`OrchestrateOptions`	Options for `orchestrateExtensions`.	source
`PackageMetadata`	Metadata extracted from a package.json that declares itself as a veryfront extension.	source
`RedisRuntimeProvider`	Optional Redis runtime implementation supplied by an extension.	source
`ResolvedExtension`	Public API contract for resolved extension.	source
`SandboxShellClient`	Public API contract for sandbox shell client.	source
`SandboxShellToolDefinition`	Definition for sandbox shell tool.	source
`SandboxShellToolExecute`	Public API contract for sandbox shell tool execute.	source
`SandboxShellToolSet`	Public API contract for sandbox shell tool set.	source
`SandboxShellToolsProvider`	Public API contract for sandbox shell tools provider.	source

Deep imports

These import paths group focused functionality under this module. Each is a separate barrel; import only what you need.

`veryfront/extensions/auth`

Auth contracts, including the required generation-owned, fail-closed React Server Action authorization provider.

import {
  createRscActionAuthorizationProvider,
  RSC_ACTION_AUTHORIZATION_MAX_ARGUMENT_ARRAY_LENGTH,
  snapshotRscActionAuthorizationProvider,
} from "veryfront/extensions/auth";

Components

Name	Description	Source
`RSC_ACTION_AUTHORIZATION_MAX_ARGUMENT_ARRAY_LENGTH`	Maximum length of any one dense argument array: 50,000.	source
`RSC_ACTION_AUTHORIZATION_MAX_ARGUMENT_DEPTH`	Maximum nested container depth in the detached authorization argument graph: 64.	source
`RSC_ACTION_AUTHORIZATION_MAX_ARGUMENT_NODES`	Maximum values in the complete detached authorization argument graph: 50,000.	source
`RSC_ACTION_AUTHORIZATION_MAX_ARGUMENT_PROPERTIES`	Maximum aggregate array elements and record properties in the argument graph: 100,000.	source
`RSC_ACTION_AUTHORIZATION_TERMINATION_GRACE_MS`	Cooperative-cancellation grace: 1,000 ms before a non-settling generation is quarantined.	source
`RSC_ACTION_AUTHORIZATION_TIMEOUT_MS`	Default deadline for one asynchronous authorization decision: 30 seconds.	source
`RSC_ACTION_MAX_TOP_LEVEL_ARGUMENTS`	Maximum top-level arguments in one Server Action request: 50.	source
`RscActionAuthorizationProviderName`	Generation-owned contract name registered by an application-selected authorization extension.	source

Functions

Name	Description	Source
`createRscActionAuthorizationProvider`	Create immutable provider registration metadata from a standalone authorizer.	source
`snapshotRscActionAuthorizationProvider`	Capture an exact `{ authorize }` extension registration without invoking accessors or retaining mutable provider metadata.	source

Types

Name	Description	Source
`AuthProvider`	AuthProvider contract interface.	source
`RscActionAuthorizationArray`	Immutable dense data-only array with stable index and iteration semantics.	source
`RscActionAuthorizationContext`	Detached immutable action metadata and bounded JSON-compatible arguments.	source
`RscActionAuthorizationHeaders`	Immutable null-prototype lowercase header snapshot; it contains no request body.	source
`RscActionAuthorizationProvider`	Required generation-owned Server Action authorization contract. An absent, malformed, retiring, failed, or non-cooperative provider returns 503 with `Cache-Control: no-store`; core has no allow-all fallback.	source
`RscActionAuthorizationRecord`	Immutable null-prototype data-only record; absent properties resolve to `undefined`.	source
`RscActionAuthorizationRequest`	Immutable, bodyless request metadata detached from the mutable request object.	source
`RscActionAuthorizationValue`	JSON-compatible, data-only value domain; numbers are always finite.	source
`RscActionAuthorize`	Decide one Server Action invocation. `true` invokes the action and `false` returns 403. Throwing, rejecting, timing out, or returning a non-boolean fails closed with 503; the action is never loaded before authorization.	source
`SignOptions`	Options for signing a token.	source
`TokenHeader`	The parsed, unverified header of a JWT.	source
`TokenPayload`	Payload data stored within a signed token.	source
`VerifyOptions`	Options for verifying a token.	source

`veryfront/extensions/bundler`

Bundler category barrel - Bundler contract, module lexer, and resolver helper.

import { build, context, getBundler } from "veryfront/extensions/bundler";

Functions

Name	Description	Source
`build`	Convenience wrapper: `bundler.bundle(opts)`.	source
`context`	Create an incremental build context (watch/rebuild mode).	source
`getBundler`	Resolve the registered `Bundler` contract. Throws if no extension provides it.	source
`stop`	Stop the bundler. Optional - extension teardown will also call this. Provided so tests that previously called `esbuild.stop()` keep working.	source
`transform`	Convenience wrapper that mirrors esbuild’s `transform(code, options)` positional signature so call-sites migrating off esbuild keep their shape.	source

Types

Name	Description	Source
`BuildContext`	Incremental/rebuild context produced by `Bundler.context`.	source
`BuildFailure`	Failure thrown by `Bundler.bundle` or `Bundler.transform`.	source
`BuildOptions`	Options passed to `Bundler.bundle`.	source
`BuildResult`	Result returned from `Bundler.bundle`.	source
`BundleOptions`	Options passed to `Bundler.bundle`.	source
`BundleOutput`	A single output file produced by a bundle operation.	source
`Bundler`	Bundler contract interface.	source
`BundleResult`	Result returned from `Bundler.bundle`.	source
`BundlerMessage`	A diagnostic message (error or warning) from a bundler.	source
`BundlerMessageLocation`	Location of an error or warning in source.	source
`BundlerPlugin`	A bundler plugin that hooks into the build pipeline.	source
`BundlerPluginBuild`	Build context exposed to bundler plugins.	source
`ImportSpecifier`	A single import specifier position record, matching the shape produced by `es-module-lexer`.	source
`Loader`	Loader hint for source files. Mirrors esbuild’s `Loader` type.	source
`Message`	A diagnostic message (error or warning) from a bundler.	source
`Metafile`	Dependency-graph metadata produced by a bundler when `metafile: true`.	source
`MetafileInput`	Input file entry in a `Metafile`.	source
`MetafileOutput`	Output file entry in a `Metafile`.	source
`ModuleLexer`	Module lexer contract interface.	source
`OnLoadArgs`	Arguments passed to an `onLoad` callback.	source
`OnLoadResult`	Result returned from an `onLoad` callback.	source
`OnResolveArgs`	Arguments passed to an `onResolve` callback.	source
`OnResolveResult`	Result returned from an `onResolve` callback.	source
`Plugin`	A bundler plugin that hooks into the build pipeline.	source
`PluginBuild`	Build context exposed to bundler plugins.	source
`ResolveResult`	Result returned from an `onResolve` callback.	source
`StdinOptions`	In-memory source input for `BundleOptions.stdin`.	source
`TransformOptions`	Options passed to `Bundler.transform`.	source
`TransformResult`	Result returned from `Bundler.transform`.	source

`veryfront/extensions/cache`

Cache category barrel - generic cache and proxy-grade token cache.

import type { CacheStore, TokenCacheEntry, TokenCacheStats } from "veryfront/extensions/cache";

Types

Name	Description	Source
`CacheStore`	CacheStore contract interface.	source
`TokenCacheEntry`	A cache entry stored by `TokenCacheStore`.	source
`TokenCacheStats`	Aggregate usage statistics for a `TokenCacheStore`.	source
`TokenCacheStore`	TokenCacheStore contract interface.	source

`veryfront/extensions/compat`

Compat category barrel - optional native runtime services.

import type {
  DocumentExtractionOptions,
  DocumentExtractionProgress,
  DocumentExtractionProgressEvent,
} from "veryfront/extensions/compat";

Types

Name	Description	Source
`DocumentExtractionOptions`		source
`DocumentExtractionProgress`		source
`DocumentExtractionProgressEvent`		source
`DocumentExtractor`	Document extraction contract.	source
`KreuzbergExtractor`	Shape returned by the kreuzberg document-extraction module.	source
`SqliteDatabase`	Minimal interface for a SQLite database connection, compatible with `better-sqlite3`’s `Database` shape as consumed by `SqliteKv`.	source
`SqliteStatement`	Minimal interface for a prepared SQLite statement, compatible with `better-sqlite3`’s `Statement` shape.	source
`SqliteStore`	SQLite-backed storage contract.	source

`veryfront/extensions/content`

Content category barrel for the MDX/Markdown content processor contract.

import type {
  CompilationMode,
  CompilationTarget,
  ContentCompileOptions,
} from "veryfront/extensions/content";

Types

Name	Description	Source
`CompilationMode`	Compilation mode. Dev surfaces extra diagnostics.	source
`CompilationTarget`	Where the output is destined: server-side RSC or browser bundle.	source
`ContentCompileOptions`	Options for `ContentProcessor.compileMdx` and `ContentProcessor.compileMarkdown`.	source
`ContentPlugin`	Opaque unified-compatible plugin entry. Kept as an unknown-typed value or tuple so the contract surface doesn’t require consumers to depend on the `unified` package directly. Callers cast to the plugin-list shape they need.	source
`ContentProcessingResult`	Processing result returned by the content pipeline.	source
`ContentProcessor`	ContentProcessor contract for MDX/Markdown processing.	source

`veryfront/extensions/contracts`

Contract registry - runtime resolution of extension-provided implementations.

import { register, reset, resolve } from "veryfront/extensions/contracts";

Functions

Name	Description	Source
`register`	Register.	source
`reset`	Reset.	source
`resolve`	Resolve path segments to an absolute path.	source
`tryResolve`	Try to resolve.	source
`unregister`	Unregister.	source

`veryfront/extensions/css`

CSS category barrel - CSS compilation and optimization contracts.

import {
  assertCSSOptimizationEngine,
  assertCSSProcessor,
  assertCSSPurgingEngine,
} from "veryfront/extensions/css";

Components

Name	Description	Source
`CSSOptimizationEngineName`	Registry name used for the CSS optimization extension contract.	source
`CSSProcessorName`	Registry name used for the CSS compiler extension contract.	source
`CSSPurgingEngineName`		source
`MAX_CSS_OPTIMIZATION_ENGINE_IDENTITY_CHARACTERS`	Maximum stable implementation identity accepted across the runtime boundary.	source
`MAX_CSS_PROCESSOR_DEFAULT_STYLESHEET_CHARACTERS`		source
`MAX_CSS_PROCESSOR_IDENTITY_CHARACTERS`		source
`MAX_CSS_PURGING_ENGINE_IDENTITY_CHARACTERS`		source

Functions

Name	Description	Source
`assertCSSOptimizationEngine`	Validate an implementation received through the dynamic contract registry.	source
`assertCSSProcessor`	Validate an implementation received through the dynamic extension registry.	source
`assertCSSPurgingEngine`		source
`captureCSSCompiler`	Capture a compiler method once so accessors and later mutation cannot redirect a build.	source
`captureCSSOptimizationEngine`	Capture dynamic properties once so later mutation or accessors cannot change the implementation that core invokes.	source
`captureCSSProcessor`	Capture the complete processor surface once. A registry or implementation mutation can therefore affect only a subsequently acquired operation.	source
`captureCSSPurgingEngine`	Capture identity and method once so registry mutation cannot split a run.	source

Types

Name	Description	Source
`CSSCompiler`	Stateful compiler returned by `CSSProcessor.compile`.	source
`CSSOptimizationEngine`	Parser-backed CSS optimization contract.	source
`CSSOptimizationRequest`	Immutable optimization request supplied by core.	source
`CSSOptimizationResult`	Portable output returned by a CSS optimization engine.	source
`CSSProcessor`	CSSProcessor contract interface.	source
`CSSPurgeContentSource`		source
`CSSPurgingEngine`		source
`CSSPurgingRequest`		source
`CSSPurgingResult`		source

`veryfront/extensions/database`

Database category barrel - DatabaseClient contract.

import type { DatabaseClient, QueryResult } from "veryfront/extensions/database";

Types

Name	Description	Source
`DatabaseClient`	DatabaseClient contract interface.	source
`QueryResult`	Result returned from `DatabaseClient.query`.	source

`veryfront/extensions/dev-ui`

Contracts and protocol constants for extension-owned local development UIs.

import {
  createDevUiAssetProvider,
  getDashboardSessionCookieName,
  snapshotDevUiAssetProvider,
} from "veryfront/extensions/dev-ui";

Components

Name	Description	Source
`DASHBOARD_CSRF_COOKIE_NAME`	Stable prefix for port-scoped privileged dashboard session cookies.	source
`DASHBOARD_CSRF_HEADER_NAME`	Shared request header carrying the shell’s session-bound CSRF token.	source
`DASHBOARD_CSRF_META_NAME`	Shared metadata name used to pass the CSRF token into the extension UI.	source
`DASHBOARD_CSRF_TOKEN_PATTERN`	A 32-byte token encoded as unpadded base64url.	source
`DASHBOARD_SESSION_PATH`	Asset-independent endpoint used by trusted headless development clients.	source
`DEV_UI_KIND_ATTRIBUTE`	Stable shell identity consumed by the extension-owned shared bundle.	source
`DevUiAssetProviderName`		source
`MAX_DEV_UI_BUNDLE_BYTES`		source

Functions

Name	Description	Source
`createDevUiAssetProvider`		source
`getDashboardSessionCookieName`	Derive the host cookie name for one concrete development-server listener.	source
`snapshotDevUiAssetProvider`		source
`validateDevUiBundle`		source

Types

Name	Description	Source
`DevUiAssetProvider`	One self-contained browser bundle mounts dashboard or projects by shell identity.	source
`DevUiKind`		source

`veryfront/extensions/dev-ui/protocol`

Stable prefix for port-scoped privileged dashboard session cookies.

import {
  DASHBOARD_CSRF_COOKIE_NAME,
  DASHBOARD_CSRF_HEADER_NAME,
  getDashboardSessionCookieName,
} from "veryfront/extensions/dev-ui/protocol";

Components

Name	Description	Source
`DASHBOARD_CSRF_COOKIE_NAME`	Stable prefix for port-scoped privileged dashboard session cookies.	source
`DASHBOARD_CSRF_HEADER_NAME`	Shared request header carrying the shell’s session-bound CSRF token.	source
`DASHBOARD_CSRF_META_NAME`	Shared metadata name used to pass the CSRF token into the extension UI.	source
`DASHBOARD_CSRF_TOKEN_PATTERN`	A 32-byte token encoded as unpadded base64url.	source
`DASHBOARD_SESSION_PATH`	Asset-independent endpoint used by trusted headless development clients.	source
`DEV_UI_KIND_ATTRIBUTE`	Stable shell identity consumed by the extension-owned shared bundle.	source

Functions

Name	Description	Source
`getDashboardSessionCookieName`	Derive the host cookie name for one concrete development-server listener.	source

Types

Name	Description	Source
`DevUiKind`		source

`veryfront/extensions/distributed`

Provider-neutral contracts for optional distributed runtime infrastructure.

import {
  captureRedisRuntimeProvider,
  RedisRuntimeProviderName,
} from "veryfront/extensions/distributed";

Components

Name	Description	Source
`RedisRuntimeProviderName`	Registry name used by the Redis runtime extension.	source

Functions

Name	Description	Source
`captureRedisRuntimeProvider`	Validate and snapshot a provider before core invokes extension-owned code. Accessors are rejected so registration cannot execute code during capture.	source

Types

Name	Description	Source
`NodeRedisClient`	Structural node-redis client surface used by the platform adapter.	source
`NodeRedisModule`	Structural module surface used by the platform Redis adapter.	source
`RedisClient`	Structural client surface used by core cache features.	source
`RedisClientHandle`	Independently owned Redis connection returned to a core feature.	source
`RedisClientOptions`	Connection options accepted by the stable core Redis client facade.	source
`RedisEventPublisherConfig`	Redis Pub/Sub publisher configuration.	source
`RedisEventPublisherImplementation`	Redis-backed event publisher/subscriber implementation.	source
`RedisRuntimeProvider`	Optional Redis runtime implementation supplied by an extension.	source

`veryfront/extensions/distributed/agent-memory-support`

Provider-neutral agent-memory contracts shared with memory extensions.

import { estimateTokens } from "veryfront/extensions/distributed/agent-memory-support";

Functions

Name	Description	Source
`estimateTokens`		source

Types

Name	Description	Source
`Memory`	Public API contract for memory.	source
`MemoryConfigBase`	************************ Memory Interface	source
`MemoryStats`	Public API contract for memory stats.	source
`MinimalMessage`		source

`veryfront/extensions/distributed/cache-support`

Provider-neutral cache helpers shared with distributed store extensions.

import {
  assertCacheBatchSize,
  assertCacheReadMaximumBytes,
  assertCacheValueWithinLimit,
} from "veryfront/extensions/distributed/cache-support";

Components

Name	Description	Source
`DEFAULT_CACHE_TTL_SECONDS`	Shared default used when a CacheBackend caller omits a TTL.	source
`MAX_CACHE_REVISION_LENGTH`	Maximum number of code units in a cache revision identifier.	source
`MAX_REVISIONED_CACHE_SOURCE_KEY_LENGTH`	Maximum source-key length before the reserved namespace is added.	source
`REVISIONED_CACHE_KEY_PREFIX`	Reserved logical-key namespace for revisioned Veryfront cache entries.	source

Functions

Name	Description	Source
`assertCacheBatchSize`	Enforce the cache subsystem’s shared per-operation batch bound.	source
`assertCacheReadMaximumBytes`	Validate one caller-supplied cache payload byte ceiling.	source
`assertCacheValueWithinLimit`	Verify a string payload without allocating an encoded copy.	source
`buildBatchResults`	Build a `Map` of batch results by resolving each key in order.	source
`buildRevisionedCacheKey`	Add the reserved versioned namespace to one valid source key.	source
`escapeCacheGlobLiteral`	Escape the wildcard syntax shared by cache backend pattern operations.	source
`expiresImmediately`		source
`isRevisionedCacheBackend`	Test whether a backend exposes the complete atomic revision capability.	source
`isRevisionedCacheKey`	Test whether a key belongs to the valid revisioned-key builder image.	source
`parseSerializedCachePayload`	Reject oversized or malformed JSON before constructing an untrusted object graph.	source
`registerOwnedDistributedCacheKeyPrefix`	Register an opaque namespace without making it eligible for project invalidation.	source
`registerRenderDistributedCacheNamespace`	Register a namespace containing render-cache keys.	source
`requireCacheExchangeResult`	Validate a provider-returned compare-exchange result.	source
`requirePositiveIntegerCacheTtlSeconds`	Validate a constructor-level TTL for whole-second cache protocols.	source
`resolveIntegerCacheTtlSeconds`	Resolve a TTL for protocols that accept only whole seconds. Positive fractions round up so integer conversion never expires an entry earlier than requested; non-positive values retain their immediate-expiry meaning.	source
`serializeCachePayload`	Serialize using the origin-compatible payload shape.	source
`snapshotCacheRevisionResult`	Validate and detach a provider-returned revision snapshot.	source
`stripOwnedDistributedCacheKeyPrefix`		source
`validateDistributedCacheKeyPrefix`		source

Classes

Name	Description	Source
`CacheValueTooLargeError`	Deterministic overflow from an exact bounded cache read.	source

Types

Name	Description	Source
`CacheBackend`	Provides storage operations for memory, disk, API, and extension-backed distributed caches. All cache backends must implement this interface.	source
`CachePayload`		source
`CacheRevisionMutation`	Atomic mutation applied when an expected cache revision still matches.	source
`CacheRevisionSnapshot`	Serialized logical value and the revision that observed it.	source
`CacheStoreStats`		source
`DistributedCacheAdministration`	Narrow administrative surface used by cache diagnostics and invalidation.	source
`DistributedCacheKeyListing`	Immutable bounded cache listing with explicit completeness.	source
`DistributedCacheListOptions`	Bounded provider-neutral cache listing request.	source
`RenderCacheStore`		source
`RevisionedCacheBackend`	Cache backend with the complete atomic revision capability.	source

`veryfront/extensions/distributed/rate-limit-support`

Provider-neutral rate-limit helpers shared with store extensions.

import {
  requireRateLimitKey,
  requireRateLimitWindowMs,
  unrefTimer,
} from "veryfront/extensions/distributed/rate-limit-support";

Components

Name	Description	Source
`MAX_RATE_LIMIT_KEY_LENGTH`	Maximum UTF-16 code units accepted by a rate-limit key.	source
`MAX_TIMER_DELAY_MS`	Largest delay supported consistently by JavaScript timer implementations.	source
`REDIS_RATE_LIMIT_INCREMENT_WITH_TTL_SCRIPT`	Atomic Redis script that increments a counter and assigns its TTL.	source

Functions

Name	Description	Source
`requireRateLimitKey`		source
`requireRateLimitWindowMs`		source
`unrefTimer`	Unreference a timer to prevent it from keeping the process alive	source

Types

Name	Description	Source
`RateLimitEntry`		source
`RateLimitStore`	Public API contract for rate limit store.	source

`veryfront/extensions/distributed/routing-invalidation-support`

Provider-neutral routing-invalidation primitives shared with extensions.

import {
  hasProjectIdentityControlCharacters,
  isCanonicalOpaqueProjectIdentifier,
  parseProxyRoutingInvalidationEvent,
} from "veryfront/extensions/distributed/routing-invalidation-support";

Functions

Name	Description	Source
`hasProjectIdentityControlCharacters`	Whether a string contains a Unicode Cc control code point.	source
`isCanonicalOpaqueProjectIdentifier`	Whether a value is a bounded, exact opaque identifier.	source
`parseProxyRoutingInvalidationEvent`		source

Types

Name	Description	Source
`ProxyRoutingInvalidationEvent`		source
`ProxyRoutingInvalidationPublisher`		source
`ProxyRoutingInvalidationPublishResult`		source

`veryfront/extensions/eval`

Eval category barrel: eval report exporter contracts.

import {
  createEvalReportExporterRegistry,
  EvalReportExporterRegistryName,
  redactEvalReportForExport,
} from "veryfront/extensions/eval";

Components

Name	Description	Source
`EvalReportExporterRegistryName`	Contract name used for `resolve()` / `provide()`.	source
`EvalReportRedactedValue`	Sentinel used when record payload fields are removed for external export.	source

Functions

Name	Description	Source
`createEvalReportExporterRegistry`	Create an eval report exporter registry.	source
`redactEvalReportForExport`	Create an eval report copy with external-export redaction applied.	source

Types

Name	Description	Source
`EvalReportExportContext`	Context passed to eval report exporters.	source
`EvalReportExporter`	Vendor or backend implementation that receives sanitized eval reports.	source
`EvalReportExporterRegistry`	Registry contract. Single impl created at bootstrap.	source
`EvalReportExportFailure`	Failed exporter result. Failures are captured so later exporters still run.	source
`EvalReportExportReceipt`	Optional receipt returned by a vendor exporter.	source
`EvalReportExportRedaction`	Redaction policy applied before reports leave the process.	source
`EvalReportExportResult`	Result for one exporter invocation.	source
`EvalReportExportSuccess`	Successful exporter result.	source
`EvalReportExportTraceContext`	Trace correlation fields that connect eval exports to runtime spans.	source

`veryfront/extensions/first-party-import`

Resolve first-party extension implementations without making the root npm package statically depend on every extension dependency. Source and compiled-binary builds can load the workspace extension sources. npm builds should load the separate @veryfront/ext-* packages installed by the consuming service or app.

import {
  firstPartyExtensionSourceSpecifiers,
  importFirstPartyExtensionModule,
  isMissingFirstPartyExtensionModule,
} from "veryfront/extensions/first-party-import";

Functions

Name	Description	Source
`firstPartyExtensionSourceSpecifiers`		source
`importFirstPartyExtensionModule`		source
`isMissingFirstPartyExtensionModule`	Classify a dynamic-import failure as “the extension module itself is not installed” as opposed to a real load failure inside an installed extension.	source

Types

Name	Description	Source
`FirstPartyExtensionImportOptions`	Optional non-root entry point for a first-party extension import.	source

`veryfront/extensions/image`

Image extension contracts.

import {
  assertImageOptimizationEngine,
  captureImageOptimizationEngine,
  ImageOptimizationEngineName,
} from "veryfront/extensions/image";

Components

Name	Description	Source
`ImageOptimizationEngineName`	Registry name used for the image optimization extension contract.	source
`MAX_IMAGE_OPTIMIZATION_ENGINE_IDENTITY_CHARACTERS`	Maximum stable implementation identity accepted across the boundary.	source

Functions

Name	Description	Source
`assertImageOptimizationEngine`	Validate an implementation received through the dynamic contract registry.	source
`captureImageOptimizationEngine`	Capture dynamic properties once so one run cannot split across mutations.	source

Types

Name	Description	Source
`ImageOptimizationEngine`	Image decoder, resizer, and encoder implemented by an explicit extension.	source
`ImageOptimizationFormat`	Formats core can request from an image optimization engine.	source
`ImageOptimizationRequest`	Immutable byte-oriented request supplied by core.	source
`ImageOptimizationResult`	Portable result returned by an image optimization engine.	source
`ImageOptimizationVariantResult`	One encoded output returned by an image optimization engine.	source

`veryfront/extensions/llm`

LLM category barrel - provider, embedding, and registry contracts. Interfaces re-exported with export type { ... } because Deno --no-check transpiles each file in isolation and would otherwise emit a runtime value re-export that fails ESM resolution. Reserve plain export { ... } for runtime values.

import { createLLMProviderRegistry, LLMProviderRegistryName } from "veryfront/extensions/llm";

Components

Name	Description	Source
`LLMProviderRegistryName`	Contract name used for `resolve()` / `provide()`.	source

Functions

Name	Description	Source
`createLLMProviderRegistry`	Create llmprovider registry.	source

Types

Name	Description	Source
`EmbeddingOptions`	Options passed to `EmbeddingProvider.embed`.	source
`EmbeddingProvider`	EmbeddingProvider contract interface.	source
`EmbeddingResult`	Result returned from `EmbeddingProvider.embed`.	source
`LLMProvider`	An LLM provider implementation. Extensions register one of these with the `LLMProviderRegistry` during setup(). `createModel` is required; `createEmbedding` and `createResponses` are optional and absent on providers that don’t support them.	source
`LLMProviderConfig`	Config passed to any provider’s create* method.	source
`LLMProviderRegistry`	Registry contract. Single impl created at bootstrap.	source

`veryfront/extensions/observability`

Observability category barrel: tracing and Node telemetry contracts.

import {
  ApplicationErrorReporterInitializerName,
  NodeTelemetryProviderName,
} from "veryfront/extensions/observability";

Components

Name	Description	Source
`ApplicationErrorReporterInitializerName`	Contract name used when an application composes a reporter through extensions.	source
`NodeTelemetryProviderName`	Contract interface for Node.js OpenTelemetry runtime bootstrap.	source

Types

Name	Description	Source
`ApplicationErrorContext`	Sanitized context attached when a runtime reports an application error.	source
`ApplicationErrorReporter`	Provider-neutral application error capture and flush interface.	source
`ApplicationErrorReporterInitializationContext`	Runtime context passed to an explicitly selected reporter initializer.	source
`ApplicationErrorReporterInitializer`	Application-composition contract for an error-reporting implementation.	source
`ApplicationErrorReporterSession`	Reporter and cleanup ownership returned by an application-selected initializer.	source
`NodeTelemetryInitializeOptions`	Options accepted by node telemetry initialize.	source
`NodeTelemetryInstrumentationConfig`	Configuration used by node telemetry instrumentation.	source
`NodeTelemetryLogger`	Public API contract for node telemetry logger.	source
`NodeTelemetryLogRecord`	Structured log record shape accepted by the telemetry provider.	source
`NodeTelemetryLogRecordEmitter`	Emits a structured logger record into the active telemetry pipeline.	source
`NodeTelemetryProcessTarget`	Public API contract for node telemetry process target.	source
`NodeTelemetryProvider`	Initializes Node-specific OpenTelemetry SDK behavior.	source
`SpanData`	Data describing a single trace span.	source
`TracerProvider`	Minimal TracerProvider interface for the contract. Structurally compatible with both the core shim and the real OTel SDK.	source
`TracingExporter`	TracingExporter contract interface.	source

`veryfront/extensions/parser`

Parser category barrel: CodeParser (AST traversal), SkillDocumentParser (Skill frontmatter decoding), and YamlParser (general YAML decoding) contracts.

import {
  createSkillDocumentParserProvider,
  createYamlParserProvider,
  snapshotSkillDocumentParserProvider,
} from "veryfront/extensions/parser";

Components

Name	Description	Source
`SkillDocumentParserProviderName`	Stable runtime identifier for the Skill document parser contract.	source
`YamlParserProviderName`	Stable runtime identifier for the general YAML parser contract.	source

Functions

Name	Description	Source
`createSkillDocumentParserProvider`	Create immutable provider registration metadata from a standalone parser.	source
`createYamlParserProvider`	Create immutable provider registration metadata from a standalone parser.	source
`snapshotSkillDocumentParserProvider`	Capture one immutable provider generation without retaining its mutable registration object or invoking extension-owned accessors or Proxy traps.	source
`snapshotYamlParserProvider`	Capture one immutable provider generation.	source

Types

Name	Description	Source
`ASTNode`	A single node in an abstract syntax tree.	source
`CodeParser`	Public API contract for code parser.	source
`FunctionDirectiveOptions`	Options for a parser-owned function directive check.	source
`GenerateOptions`	Options passed to `CodeParser.generate`.	source
`GenerateResult`	Result returned from `CodeParser.generate`.	source
`InjectJsxNodePositionsOptions`	Options for `CodeParser.injectJsxNodePositions`.	source
`NodePath`	Wrapper providing traversal context for a visited node.	source
`ParseOptions`	Options passed to `CodeParser.parse`.	source
`SkillDocumentParserProvider`	Dependency-free contract implemented by Skill YAML parser extensions.	source
`TraverseVisitor`	Visitor callbacks keyed by node type.	source
`YamlParseOptions`	Decoding options, named after the `@std/yaml` options the framework’s call sites already pass so that repointing a call site is a specifier change.	source
`YamlParserProvider`	Dependency-free contract implemented by YAML parser extensions.	source

`veryfront/extensions/rendering`

Contracts for extension-owned rendering implementations.

import {
  createIsolatedSsrRendererProvider,
  snapshotIsolatedSsrRendererProvider,
  validateIsolatedSsrRendererModuleUrl,
} from "veryfront/extensions/rendering";

Components

Name	Description	Source
`IsolatedSsrRendererProviderName`		source
`MAX_ISOLATED_SSR_RENDERER_READ_ROOTS`		source
`MAX_ISOLATED_SSR_RENDERER_URL_CHARACTERS`		source

Functions

Name	Description	Source
`createIsolatedSsrRendererProvider`	Create immutable registration metadata for an extension factory.	source
`snapshotIsolatedSsrRendererProvider`	Snapshot an extension-owned provider without invoking accessors or retaining mutable provider metadata.	source
`validateIsolatedSsrRendererModuleUrl`	Validate one worker renderer module URL without resolving or importing it.	source

Types

Name	Description	Source
`IsolatedSsrRenderer`		source
`IsolatedSsrRendererModule`		source
`IsolatedSsrRendererProvider`		source

`veryfront/extensions/sandbox`

Sandbox category barrel.

import { SandboxShellToolsProviderName } from "veryfront/extensions/sandbox";

Components

Name	Description	Source
`SandboxShellToolsProviderName`	Render sandbox shell tools provider name.	source

Types

Name	Description	Source
`CreateSandboxShellToolsInput`	Input payload for create sandbox shell tools.	source
`SandboxShellClient`	Public API contract for sandbox shell client.	source
`SandboxShellToolDefinition`	Definition for sandbox shell tool.	source
`SandboxShellToolExecute`	Public API contract for sandbox shell tool execute.	source
`SandboxShellToolSet`	Public API contract for sandbox shell tool set.	source
`SandboxShellToolsProvider`	Public API contract for sandbox shell tools provider.	source

`veryfront/extensions/schema`

Schema category barrel - SchemaValidator contract and inference helpers.

import type { InferInput, InferSchema, InferShape } from "veryfront/extensions/schema";

Types

Name	Description	Source
`InferInput`	Extracts the inferred input type from a `Schema<T>`.	source
`InferSchema`	Extracts the inferred output type `T` from a `Schema<T>`.	source
`InferShape`	Maps a raw object shape to its inferred object type, preserving optionality.	source
`JsonSchema`		source
`JsonSchemaValidationFailure`	Failed validation of an input against a compiled JSON Schema.	source
`JsonSchemaValidationFunction`	Compiled, reusable JSON Schema validation function.	source
`JsonSchemaValidationIssue`	Stable validation issue copied from a JSON Schema validator result.	source
`JsonSchemaValidationResult`	Result returned by a compiled JSON Schema validator.	source
`JsonSchemaValidationSuccess`	Successful validation of an input against a compiled JSON Schema.	source
`RefinementCtx`	Context passed to a `superRefine` callback. Provides `addIssue` to emit one or more validation issues and `path` to locate the current value.	source
`Schema`	An opaque schema definition that validates and infers type `T`.	source
`SchemaFactory`	Factory type accepted by `defineSchema`.	source
`SchemaValidator`	SchemaValidator contract interface.	source
`SchemaValidatorCoerce`	Namespace for `coerce.*` constructors - accepts input in any form and coerces to the target type before validation.	source
`ValidationFailure`	Failed validation outcome.	source
`ValidationIssue`	A single validation issue with location context.	source
`ValidationResult`	Discriminated union of validation outcomes.	source
`ValidationSuccess`	Successful validation outcome.	source

`veryfront/extensions/types`

Core types for the veryfront extension system.

import type { Capability, Extension, ExtensionConfigEntry } from "veryfront/extensions/types";

Types

Name	Description	Source
`Capability`	Declares a system capability an extension requires. Object-based for extensibility — scoping fields vary by type.	source
`Extension`	Public API contract for extension.	source
`ExtensionConfigEntry`	Entry shape for extension config.	source
`ExtensionContext`	Context for extension.	source
`ExtensionContractMetadata`	Public API contract for extension contract metadata.	source
`ExtensionFactory`	Public API contract for extension factory.	source
`ExtensionLogger`	Public API contract for extension logger.	source
`ExtensionSource`	Public API contract for extension source.	source
`PackageContractMetadata`		source
`ResolvedExtension`	Public API contract for resolved extension.	source

`veryfront/extensions/websocket`

Contracts for extension-owned Node.js WebSocket implementations.

import {
  captureNodeWebSocketServer,
  createNodeWebSocketServerProvider,
  snapshotNodeWebSocketServerProvider,
} from "veryfront/extensions/websocket";

Components

Name	Description	Source
`NODE_WEBSOCKET_SERVER_PROVIDER_MISSING_MESSAGE`		source
`NODE_WEBSOCKET_SERVER_PROVIDER_PACKAGE`		source
`NodeWebSocketServerProviderName`		source

Functions

Name	Description	Source
`captureNodeWebSocketServer`	Capture one server instance without retaining mutable method lookups. The underlying implementation remains the receiver because protocol engines legitimately keep mutable transport state on their instance.	source
`createNodeWebSocketServerProvider`	Create immutable registration metadata from a standalone factory.	source
`snapshotNodeWebSocketServerProvider`	Capture a provider generation without retaining its mutable registration object or invoking extension-owned accessors.	source

Types

Name	Description	Source
`NodeWebSocketConnection`	Minimal connection surface consumed by core’s runtime-neutral adapter.	source
`NodeWebSocketMessageData`		source
`NodeWebSocketServer`	Minimal server surface used by upgrade and shutdown ownership.	source
`NodeWebSocketServerOptions`	Exact no-server options supplied by core for an existing HTTP listener.	source
`NodeWebSocketServerProvider`		source

​Import

​Examples

​Exports

​Components

​Functions

​Classes

​Types

​Deep imports

​veryfront/extensions/auth

​Components

​Functions

​Types

​veryfront/extensions/bundler

​Functions

​Types

​veryfront/extensions/cache

​Types

​veryfront/extensions/compat

​Types

​veryfront/extensions/content

​Types

​veryfront/extensions/contracts

​Functions

​veryfront/extensions/css

​Components

​Functions

​Types

​veryfront/extensions/database

​Types

​veryfront/extensions/dev-ui

​Components

​Functions

​Types

​veryfront/extensions/dev-ui/protocol

​Components

​Functions

​Types

​veryfront/extensions/distributed

​Components

​Functions

​Types

​veryfront/extensions/distributed/agent-memory-support

​Functions

​Types

​veryfront/extensions/distributed/cache-support

​Components

​Functions

​Classes

​Types

​veryfront/extensions/distributed/rate-limit-support

​Components

​Functions

​Types

​veryfront/extensions/distributed/routing-invalidation-support

​Functions

​Types

​veryfront/extensions/eval

​Components

​Functions

​Types

​veryfront/extensions/first-party-import

​Functions

​Types

​veryfront/extensions/image

​Components

​Functions

​Types

​veryfront/extensions/llm

​Components

​Functions

​Types

​veryfront/extensions/observability

​Components

​Types

​veryfront/extensions/parser

​Components

​Functions

​Types

​veryfront/extensions/rendering

​Components

Import

Examples

Exports

Components

Functions

Classes

Types

Deep imports

`veryfront/extensions/auth`

Components

Functions

Types

`veryfront/extensions/bundler`

Functions

Types

`veryfront/extensions/cache`

Types

`veryfront/extensions/compat`

Types

`veryfront/extensions/content`

Types

`veryfront/extensions/contracts`

Functions

`veryfront/extensions/css`

Components

Functions

Types

`veryfront/extensions/database`

Types

`veryfront/extensions/dev-ui`

Components

Functions

Types

`veryfront/extensions/dev-ui/protocol`

Components

Functions

Types

`veryfront/extensions/distributed`

Components

Functions

Types

`veryfront/extensions/distributed/agent-memory-support`

Functions

Types

`veryfront/extensions/distributed/cache-support`

Components

Functions

Classes

Types

`veryfront/extensions/distributed/rate-limit-support`

Components

Functions

Types

`veryfront/extensions/distributed/routing-invalidation-support`

Functions

Types

`veryfront/extensions/eval`

Components

Functions

Types

`veryfront/extensions/first-party-import`

Functions

Types

`veryfront/extensions/image`

Components

Functions

Types

`veryfront/extensions/llm`

Components

Functions

Types

`veryfront/extensions/observability`

Components

Types

`veryfront/extensions/parser`

Components

Functions

Types

`veryfront/extensions/rendering`

Components