@frontmcp/plugin-codecall 0.0.1 → 0.7.0

package/codecall.plugin.d.ts

@@ -0,0 +1,42 @@
+import { DynamicPlugin, FlowCtxOf, ProviderType } from '@frontmcp/sdk';
+import { CodeCallPluginOptions, CodeCallPluginOptionsInput } from './codecall.types';
+export default class CodeCallPlugin extends DynamicPlugin<CodeCallPluginOptions, CodeCallPluginOptionsInput> {
+    options: CodeCallPluginOptions;
+    constructor(options?: CodeCallPluginOptionsInput);
+    /**
+     * Dynamic providers allow you to configure the plugin with custom options
+     * without touching the plugin decorator.
+     */
+    static dynamicProviders(options: CodeCallPluginOptionsInput): ProviderType[];
+    /**
+     * Hook into list_tools to enforce CodeCall modes:
+     *
+     * Modes:
+     * - codecall_only: Hide all tools from list_tools except CodeCall meta-tools.
+     *                  All other tools must be discovered via codecall:search.
+     * - codecall_opt_in: Show all tools in list_tools. Tools opt-in to CodeCall via metadata.
+     * - metadata_driven: Use per-tool metadata.codecall to control visibility in list_tools.
+     *
+     * CodeCall meta-tools (codecall:search, codecall:describe, codecall:execute, codecall:invoke)
+     * are ALWAYS visible regardless of mode.
+     */
+    adjustListTools(flowCtx: FlowCtxOf<'tools:list-tools'>): Promise<void>;
+    /**
+     * Determine if a tool should be visible in list_tools based on mode.
+     *
+     * @param tool - The tool entry to check
+     * @param mode - The current CodeCall mode
+     * @returns true if tool should be visible
+     */
+    private shouldShowInListTools;
+    /**
+     * Check if a tool is a CodeCall meta-tool.
+     * CodeCall meta-tools always remain visible.
+     */
+    private isCodeCallTool;
+    /**
+     * Extract CodeCall-specific metadata from a tool.
+     */
+    private getCodeCallMetadata;
+}
+//# sourceMappingURL=codecall.plugin.d.ts.map

package/codecall.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecall.plugin.d.ts","sourceRoot":"","sources":["../src/codecall.plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAyB,YAAY,EAAyB,MAAM,eAAe,CAAC;AAErH,OAAO,EAEL,qBAAqB,EACrB,0BAA0B,EAG3B,MAAM,kBAAkB,CAAC;AAgB1B,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;IAC1G,OAAO,EAAE,qBAAqB,CAAC;gBAEnB,OAAO,GAAE,0BAA+B;IAOpD;;;OAGG;WACa,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,YAAY,EAAE;IAuCrF;;;;;;;;;;;OAWG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAqB5D;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAkC7B;;;OAGG;IACH,OAAO,CAAC,cAAc;IAKtB;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAG5B"}

package/codecall.symbol.d.ts

@@ -0,0 +1,107 @@
+import { CodeCallVmPreset } from './codecall.types';
+import type { ToolCallResult, CallToolOptions } from './errors';
+export interface CodeCallAstValidationIssue {
+    kind: 'IllegalBuiltinAccess' | 'DisallowedGlobal' | 'DisallowedLoop' | 'ParseError';
+    message: string;
+    location?: {
+        line: number;
+        column: number;
+    };
+    identifier?: string;
+}
+export interface CodeCallAstValidationResult {
+    ok: boolean;
+    issues: CodeCallAstValidationIssue[];
+    transformedCode?: string;
+}
+/**
+ * Interface for the AST validator service
+ */
+export interface CodeCallAstValidator {
+    /**
+     * Validate a JavaScript script before execution
+     */
+    validate(script: string): Promise<CodeCallAstValidationResult>;
+}
+/**
+ * Resolved VM options with all defaults applied.
+ * Plugins compute this once and pass into providers.
+ */
+export interface ResolvedCodeCallVmOptions {
+    preset: CodeCallVmPreset;
+    timeoutMs: number;
+    allowLoops: boolean;
+    maxSteps?: number;
+    disabledBuiltins: string[];
+    disabledGlobals: string[];
+    allowConsole: boolean;
+}
+/**
+ * Environment available to code running inside the VM.
+ * The plugin is responsible for wiring this to the underlying tool pipeline.
+ */
+export interface CodeCallVmEnvironment {
+    /**
+     * Call a tool from within AgentScript.
+     *
+     * @param name - Tool name (e.g., 'users:list')
+     * @param input - Tool input arguments
+     * @param options - Optional behavior configuration
+     * @param options.throwOnError - When true (default), throws on error.
+     *                               When false, returns { success, data, error }.
+     *
+     * SECURITY NOTES:
+     * - Cannot call 'codecall:*' tools (self-reference blocked)
+     * - Errors are sanitized - no stack traces or internal details exposed
+     * - Security guard errors (self-reference, access control) are NEVER catchable
+     */
+    callTool: <TInput, TResult>(name: string, input: TInput, options?: CallToolOptions) => Promise<TResult | ToolCallResult<TResult>>;
+    getTool: (name: string) => {
+        name: string;
+        description?: string;
+        inputSchema: unknown;
+        outputSchema?: unknown | null;
+    } | undefined;
+    console?: Console;
+    mcpLog?: (level: 'debug' | 'info' | 'warn' | 'error', message: string, metadata?: Record<string, unknown>) => void;
+    mcpNotify?: (event: string, payload: Record<string, unknown>) => void;
+}
+/**
+ * Result from a tool search query
+ */
+export interface ToolSearchResult {
+    toolName: string;
+    appId?: string;
+    description: string;
+    relevanceScore: number;
+}
+/**
+ * Options for searching tools
+ */
+export interface ToolSearchOptions {
+    topK?: number;
+    appIds?: string[];
+    excludeToolNames?: string[];
+}
+/**
+ * Interface for the tool search service
+ */
+export interface ToolSearch {
+    /**
+     * Search for tools matching the query
+     */
+    search(query: string, options?: ToolSearchOptions): Promise<ToolSearchResult[]>;
+    /**
+     * Check if a tool exists in the index
+     */
+    hasTool(toolName: string): boolean;
+    /**
+     * Get the total number of indexed tools
+     */
+    getTotalCount(): number;
+    /**
+     * Initialize the search index with tools
+     */
+    initialize(): Promise<void>;
+}
+//# sourceMappingURL=codecall.symbol.d.ts.map

package/codecall.symbol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecall.symbol.d.ts","sourceRoot":"","sources":["../src/codecall.symbol.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,sBAAsB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,YAAY,CAAC;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAChE;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;;OAaG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,eAAe,KACtB,OAAO,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAClB;QACE,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;KAC/B,GACD,SAAS,CAAC;IAEd,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEnH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEhF;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAEnC;;OAEG;IACH,aAAa,IAAI,MAAM,CAAC;IAExB;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B"}

package/codecall.types.d.ts

@@ -0,0 +1,353 @@
+import { z } from 'zod';
+/**
+ * Tool info passed to the directCalls filter function
+ */
+export interface DirectCallsFilterToolInfo {
+    name: string;
+    appId?: string;
+    source?: string;
+    tags?: string[];
+}
+/**
+ * Tool info passed to the includeTools filter function
+ */
+export interface IncludeToolsFilterToolInfo {
+    name: string;
+    appId?: string;
+    source?: string;
+    description?: string;
+    tags?: string[];
+}
+/**
+ * Function type for directCalls filter
+ */
+export type DirectCallsFilterFn = (tool: DirectCallsFilterToolInfo) => boolean;
+/**
+ * Function type for includeTools filter
+ */
+export type IncludeToolsFilterFn = (tool: IncludeToolsFilterToolInfo) => boolean;
+export declare const codeCallModeSchema: z.ZodDefault<z.ZodEnum<{
+    codecall_only: "codecall_only";
+    codecall_opt_in: "codecall_opt_in";
+    metadata_driven: "metadata_driven";
+}>>;
+export declare const codeCallVmPresetSchema: z.ZodDefault<z.ZodEnum<{
+    locked_down: "locked_down";
+    secure: "secure";
+    balanced: "balanced";
+    experimental: "experimental";
+}>>;
+export declare const codeCallVmOptionsSchema: z.ZodDefault<z.ZodObject<{
+    preset: z.ZodDefault<z.ZodEnum<{
+        locked_down: "locked_down";
+        secure: "secure";
+        balanced: "balanced";
+        experimental: "experimental";
+    }>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    allowLoops: z.ZodOptional<z.ZodBoolean>;
+    maxSteps: z.ZodOptional<z.ZodNumber>;
+    disabledBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    disabledGlobals: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    allowConsole: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>>;
+export declare const codeCallDirectCallsOptionsSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    filter: z.ZodOptional<z.ZodCustom<DirectCallsFilterFn, DirectCallsFilterFn>>;
+}, z.core.$strip>;
+export declare const embeddingStrategySchema: z.ZodDefault<z.ZodEnum<{
+    tfidf: "tfidf";
+    ml: "ml";
+}>>;
+export declare const synonymExpansionConfigSchema: z.ZodDefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    additionalSynonyms: z.ZodOptional<z.ZodArray<z.ZodArray<z.ZodString>>>;
+    replaceDefaults: z.ZodDefault<z.ZodBoolean>;
+    maxExpansionsPerTerm: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>>;
+export declare const codeCallEmbeddingOptionsSchema: z.ZodPipe<z.ZodOptional<z.ZodObject<{
+    strategy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+        tfidf: "tfidf";
+        ml: "ml";
+    }>>>;
+    modelName: z.ZodOptional<z.ZodString>;
+    cacheDir: z.ZodOptional<z.ZodString>;
+    useHNSW: z.ZodOptional<z.ZodBoolean>;
+    synonymExpansion: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        additionalSynonyms: z.ZodOptional<z.ZodArray<z.ZodArray<z.ZodString>>>;
+        replaceDefaults: z.ZodDefault<z.ZodBoolean>;
+        maxExpansionsPerTerm: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>]>>;
+}, z.core.$strip>>, z.ZodTransform<{
+    strategy: "tfidf" | "ml";
+    modelName: string;
+    cacheDir: string;
+    useHNSW: boolean;
+    synonymExpansion: false | {
+        enabled: boolean;
+        replaceDefaults: boolean;
+        maxExpansionsPerTerm: number;
+    };
+}, {
+    strategy?: "tfidf" | "ml" | undefined;
+    modelName?: string | undefined;
+    cacheDir?: string | undefined;
+    useHNSW?: boolean | undefined;
+    synonymExpansion?: false | {
+        enabled: boolean;
+        replaceDefaults: boolean;
+        maxExpansionsPerTerm: number;
+        additionalSynonyms?: string[][] | undefined;
+    } | undefined;
+} | undefined>>;
+export declare const codeCallSidecarOptionsSchema: z.ZodDefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    maxTotalSize: z.ZodOptional<z.ZodNumber>;
+    maxReferenceSize: z.ZodOptional<z.ZodNumber>;
+    extractionThreshold: z.ZodOptional<z.ZodNumber>;
+    maxResolvedSize: z.ZodOptional<z.ZodNumber>;
+    allowComposites: z.ZodOptional<z.ZodBoolean>;
+    maxScriptLengthWhenDisabled: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strip>>;
+declare const codeCallPluginOptionsObjectSchema: z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<{
+        codecall_only: "codecall_only";
+        codecall_opt_in: "codecall_opt_in";
+        metadata_driven: "metadata_driven";
+    }>>;
+    topK: z.ZodDefault<z.ZodNumber>;
+    maxDefinitions: z.ZodDefault<z.ZodNumber>;
+    includeTools: z.ZodOptional<z.ZodCustom<IncludeToolsFilterFn, IncludeToolsFilterFn>>;
+    directCalls: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodBoolean;
+        allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        filter: z.ZodOptional<z.ZodCustom<DirectCallsFilterFn, DirectCallsFilterFn>>;
+    }, z.core.$strip>>;
+    vm: z.ZodDefault<z.ZodObject<{
+        preset: z.ZodDefault<z.ZodEnum<{
+            locked_down: "locked_down";
+            secure: "secure";
+            balanced: "balanced";
+            experimental: "experimental";
+        }>>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        allowLoops: z.ZodOptional<z.ZodBoolean>;
+        maxSteps: z.ZodOptional<z.ZodNumber>;
+        disabledBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        disabledGlobals: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowConsole: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    embedding: z.ZodPipe<z.ZodOptional<z.ZodObject<{
+        strategy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            tfidf: "tfidf";
+            ml: "ml";
+        }>>>;
+        modelName: z.ZodOptional<z.ZodString>;
+        cacheDir: z.ZodOptional<z.ZodString>;
+        useHNSW: z.ZodOptional<z.ZodBoolean>;
+        synonymExpansion: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            additionalSynonyms: z.ZodOptional<z.ZodArray<z.ZodArray<z.ZodString>>>;
+            replaceDefaults: z.ZodDefault<z.ZodBoolean>;
+            maxExpansionsPerTerm: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>]>>;
+    }, z.core.$strip>>, z.ZodTransform<{
+        strategy: "tfidf" | "ml";
+        modelName: string;
+        cacheDir: string;
+        useHNSW: boolean;
+        synonymExpansion: false | {
+            enabled: boolean;
+            replaceDefaults: boolean;
+            maxExpansionsPerTerm: number;
+        };
+    }, {
+        strategy?: "tfidf" | "ml" | undefined;
+        modelName?: string | undefined;
+        cacheDir?: string | undefined;
+        useHNSW?: boolean | undefined;
+        synonymExpansion?: false | {
+            enabled: boolean;
+            replaceDefaults: boolean;
+            maxExpansionsPerTerm: number;
+            additionalSynonyms?: string[][] | undefined;
+        } | undefined;
+    } | undefined>>;
+    sidecar: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxTotalSize: z.ZodOptional<z.ZodNumber>;
+        maxReferenceSize: z.ZodOptional<z.ZodNumber>;
+        extractionThreshold: z.ZodOptional<z.ZodNumber>;
+        maxResolvedSize: z.ZodOptional<z.ZodNumber>;
+        allowComposites: z.ZodOptional<z.ZodBoolean>;
+        maxScriptLengthWhenDisabled: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const codeCallPluginOptionsSchema: z.ZodPrefault<z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<{
+        codecall_only: "codecall_only";
+        codecall_opt_in: "codecall_opt_in";
+        metadata_driven: "metadata_driven";
+    }>>;
+    topK: z.ZodDefault<z.ZodNumber>;
+    maxDefinitions: z.ZodDefault<z.ZodNumber>;
+    includeTools: z.ZodOptional<z.ZodCustom<IncludeToolsFilterFn, IncludeToolsFilterFn>>;
+    directCalls: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodBoolean;
+        allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        filter: z.ZodOptional<z.ZodCustom<DirectCallsFilterFn, DirectCallsFilterFn>>;
+    }, z.core.$strip>>;
+    vm: z.ZodDefault<z.ZodObject<{
+        preset: z.ZodDefault<z.ZodEnum<{
+            locked_down: "locked_down";
+            secure: "secure";
+            balanced: "balanced";
+            experimental: "experimental";
+        }>>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        allowLoops: z.ZodOptional<z.ZodBoolean>;
+        maxSteps: z.ZodOptional<z.ZodNumber>;
+        disabledBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        disabledGlobals: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowConsole: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    embedding: z.ZodPipe<z.ZodOptional<z.ZodObject<{
+        strategy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            tfidf: "tfidf";
+            ml: "ml";
+        }>>>;
+        modelName: z.ZodOptional<z.ZodString>;
+        cacheDir: z.ZodOptional<z.ZodString>;
+        useHNSW: z.ZodOptional<z.ZodBoolean>;
+        synonymExpansion: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            additionalSynonyms: z.ZodOptional<z.ZodArray<z.ZodArray<z.ZodString>>>;
+            replaceDefaults: z.ZodDefault<z.ZodBoolean>;
+            maxExpansionsPerTerm: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>]>>;
+    }, z.core.$strip>>, z.ZodTransform<{
+        strategy: "tfidf" | "ml";
+        modelName: string;
+        cacheDir: string;
+        useHNSW: boolean;
+        synonymExpansion: false | {
+            enabled: boolean;
+            replaceDefaults: boolean;
+            maxExpansionsPerTerm: number;
+        };
+    }, {
+        strategy?: "tfidf" | "ml" | undefined;
+        modelName?: string | undefined;
+        cacheDir?: string | undefined;
+        useHNSW?: boolean | undefined;
+        synonymExpansion?: false | {
+            enabled: boolean;
+            replaceDefaults: boolean;
+            maxExpansionsPerTerm: number;
+            additionalSynonyms?: string[][] | undefined;
+        } | undefined;
+    } | undefined>>;
+    sidecar: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxTotalSize: z.ZodOptional<z.ZodNumber>;
+        maxReferenceSize: z.ZodOptional<z.ZodNumber>;
+        extractionThreshold: z.ZodOptional<z.ZodNumber>;
+        maxResolvedSize: z.ZodOptional<z.ZodNumber>;
+        allowComposites: z.ZodOptional<z.ZodBoolean>;
+        maxScriptLengthWhenDisabled: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export type CodeCallMode = z.infer<typeof codeCallModeSchema>;
+export type CodeCallVmPreset = z.infer<typeof codeCallVmPresetSchema>;
+export type CodeCallVmOptions = z.infer<typeof codeCallVmOptionsSchema>;
+export type CodeCallDirectCallsOptions = z.infer<typeof codeCallDirectCallsOptionsSchema>;
+export type EmbeddingStrategy = z.infer<typeof embeddingStrategySchema>;
+export type SynonymExpansionConfig = z.infer<typeof synonymExpansionConfigSchema>;
+export type CodeCallSidecarOptions = z.infer<typeof codeCallSidecarOptionsSchema>;
+export type CodeCallEmbeddingOptions = z.infer<typeof codeCallEmbeddingOptionsSchema>;
+export type CodeCallEmbeddingOptionsInput = z.input<typeof codeCallEmbeddingOptionsSchema>;
+/**
+ * Resolved options type (after parsing with defaults applied).
+ * Use this for internal plugin logic where all defaults are guaranteed.
+ */
+export type CodeCallPluginOptions = z.infer<typeof codeCallPluginOptionsSchema>;
+/**
+ * Input options type (what users provide to init()).
+ * All fields with defaults are optional.
+ */
+export type CodeCallPluginOptionsInput = z.input<typeof codeCallPluginOptionsObjectSchema>;
+/**
+ * Per-tool metadata used by CodeCall.
+ * This maps to `metadata.codecall` on tools.
+ */
+export interface CodeCallToolMetadata {
+    /**
+     * If true, this tool stays visible in `list_tools`
+     * even when CodeCall is hiding most tools.
+     */
+    visibleInListTools?: boolean;
+    /**
+     * Whether this tool can be used via CodeCall.
+     * Semantics depend on CodeCallMode (see README).
+     */
+    enabledInCodeCall?: boolean;
+    /** Optional extra indexing hints */
+    appId?: string;
+    source?: string;
+    tags?: string[];
+}
+export type CodeCallSearchInput = {
+    query: string;
+    topK?: number;
+    filter?: {
+        appIds?: string[];
+        tags?: string[];
+        includeOpenApi?: boolean;
+        includeInline?: boolean;
+    };
+};
+export type CodeCallSearchResult = {
+    tools: {
+        name: string;
+        description: string;
+        appId?: string;
+        source?: string;
+        score: number;
+    }[];
+};
+export type CodeCallDescribeInput = {
+    tools: string[];
+    max?: number;
+};
+export type CodeCallDescribeResult = {
+    tools: {
+        name: string;
+        description: string;
+        inputSchema: unknown;
+        outputSchema?: unknown | null;
+        examples?: {
+            input: unknown;
+            output?: unknown;
+        }[];
+    }[];
+};
+export type CodeCallExecuteInput = {
+    script: string;
+    /**
+     * Arbitrary, readonly context exposed as `codecallContext`.
+     */
+    context?: Record<string, unknown>;
+};
+declare global {
+    interface ExtendFrontMcpToolMetadata {
+        /**
+         * CodeCall-specific metadata, attached via `@Tool({ metadata: { codecall: ... } })`
+         * or whatever your decorator mapping is.
+         */
+        codecall?: CodeCallToolMetadata;
+    }
+}
+export {};
+//# sourceMappingURL=codecall.types.d.ts.map

package/codecall.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecall.types.d.ts","sourceRoot":"","sources":["../src/codecall.types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,0BAA0B,KAAK,OAAO,CAAC;AAajF,eAAO,MAAM,kBAAkB;;;;GAEJ,CAAC;AAE5B,eAAO,MAAM,sBAAsB;;;;;GAAkF,CAAC;AAOtH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;kBA4CA,CAAC;AAErC,eAAO,MAAM,gCAAgC;;;;iBAgB3C,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;GAA2C,CAAC;AAGhF,eAAO,MAAM,4BAA4B;;;;;kBA8BqC,CAAC;AAW/E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA6CtC,CAAC;AAEN,eAAO,MAAM,4BAA4B;;;;;;;;kBAyDpC,CAAC;AAGN,QAAA,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6CrC,CAAC;AAgBH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAqE,CAAC;AAK9G,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,OAAO,CAAC;YACf,MAAM,CAAC,EAAE,OAAO,CAAC;SAClB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAIF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,0BAA0B;QAClC;;;WAGG;QACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;KACjC;CACF"}

package/errors/index.d.ts

@@ -0,0 +1,2 @@
+export * from './tool-call.errors';
+//# sourceMappingURL=index.d.ts.map

package/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAEA,cAAc,oBAAoB,CAAC"}

package/errors/tool-call.errors.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Error codes exposed to AgentScript via result-based error handling.
+ * These are the ONLY error codes scripts can see - no internal details.
+ */
+export declare const TOOL_CALL_ERROR_CODES: {
+    readonly NOT_FOUND: "NOT_FOUND";
+    readonly VALIDATION: "VALIDATION";
+    readonly EXECUTION: "EXECUTION";
+    readonly TIMEOUT: "TIMEOUT";
+    readonly ACCESS_DENIED: "ACCESS_DENIED";
+    readonly SELF_REFERENCE: "SELF_REFERENCE";
+};
+export type ToolCallErrorCode = (typeof TOOL_CALL_ERROR_CODES)[keyof typeof TOOL_CALL_ERROR_CODES];
+/**
+ * Sanitized error structure exposed to AgentScript.
+ * Contains NO stack traces, NO internal details, NO sensitive information.
+ */
+export interface ToolCallError {
+    readonly code: ToolCallErrorCode;
+    readonly message: string;
+    readonly toolName: string;
+}
+/**
+ * Result type for callTool when throwOnError is false.
+ */
+export type ToolCallResult<T> = {
+    success: true;
+    data: T;
+} | {
+    success: false;
+    error: ToolCallError;
+};
+/**
+ * Options for callTool behavior.
+ */
+export interface CallToolOptions {
+    /**
+     * When true (default), errors are thrown and can be caught.
+     * When false, errors are returned as { success: false, error: ToolCallError }.
+     *
+     * SECURITY: Even when throwOnError is true, only sanitized errors are thrown.
+     * Internal security guard errors are NEVER exposed to scripts.
+     */
+    throwOnError?: boolean;
+}
+/**
+ * Creates a sanitized ToolCallError for script consumption.
+ * This function ensures no internal details leak to AgentScript.
+ */
+export declare function createToolCallError(code: ToolCallErrorCode, toolName: string, rawMessage?: string): ToolCallError;
+/**
+ * FATAL: Self-reference attack detected.
+ * This error is thrown internally and causes immediate execution termination.
+ * The script NEVER sees this error - it only sees the sanitized version.
+ */
+export declare class SelfReferenceError extends Error {
+    readonly code: "SELF_REFERENCE";
+    readonly toolName: string;
+    constructor(toolName: string);
+}
+/**
+ * Internal error for tool access denial.
+ * Only the sanitized version is exposed to scripts.
+ */
+export declare class ToolAccessDeniedError extends Error {
+    readonly code: "ACCESS_DENIED";
+    readonly toolName: string;
+    readonly reason: string;
+    constructor(toolName: string, reason: string);
+}
+/**
+ * Internal error for tool not found.
+ * Only the sanitized version is exposed to scripts.
+ */
+export declare class ToolNotFoundError extends Error {
+    readonly code: "NOT_FOUND";
+    readonly toolName: string;
+    constructor(toolName: string);
+}
+//# sourceMappingURL=tool-call.errors.d.ts.map

package/errors/tool-call.errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call.errors.d.ts","sourceRoot":"","sources":["../../src/errors/tool-call.errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;CAOxB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC;AAEnG;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC;AAEtG;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa,CASjH;AAwDD;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,mBAAwC;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAM7B;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,kBAAuC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO7C;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,cAAmC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAM7B"}