@frontmcp/plugin-codecall 1.0.4 → 1.1.0

package/esm/index.mjs

@@ -19,7 +19,7 @@ import {
 } from "@frontmcp/sdk";
 
 // plugins/plugin-codecall/src/codecall.types.ts
-import { z } from "zod";
+import { z } from "@frontmcp/lazy-zod";
 var directCallsFilterSchema = z.custom((val) => typeof val === "function", {
   message: "filter must be a function with signature (tool: DirectCallsFilterToolInfo) => boolean"
 });
@@ -1349,7 +1349,7 @@ EnclaveService = __decorateClass([
 import { Tool, ToolContext } from "@frontmcp/sdk";
 
 // plugins/plugin-codecall/src/tools/search.schema.ts
-import { z as z2 } from "zod";
+import { z as z2 } from "@frontmcp/lazy-zod";
 var searchToolDescription = `Find tools by splitting user request into atomic actions.
 
 DECOMPOSE: "delete users and send email" \u2192 queries: ["delete user", "send email"]
@@ -1486,61 +1486,86 @@ SearchTool = __decorateClass([
 ], SearchTool);
 
 // plugins/plugin-codecall/src/tools/describe.tool.ts
+import { toJSONSchema, z as z4, ZodType } from "@frontmcp/lazy-zod";
 import { Tool as Tool2, ToolContext as ToolContext2 } from "@frontmcp/sdk";
-import { toJSONSchema } from "zod/v4";
-import { z as z4, ZodType } from "zod";
 
-// plugins/plugin-codecall/src/tools/describe.schema.ts
-import { z as z3 } from "zod";
-import { ToolAnnotationsSchema } from "@frontmcp/protocol";
-var describeToolDescription = `Get input/output schemas for tools from search results.
-
-INPUT: toolNames: string[] - tool names from search
-OUTPUT per tool: inputSchema (JSON Schema), outputSchema (JSON Schema), usageExamples (up to 5 callTool examples)
-
-IMPORTANT: If notFound array is non-empty \u2192 re-search with corrected queries.
-FLOW: search \u2192 describe \u2192 execute/invoke`;
-var describeToolInputSchema = {
-  toolNames: z3.array(z3.string()).min(1).superRefine((toolNames, ctx) => {
-    const seen = /* @__PURE__ */ new Set();
-    const duplicates = /* @__PURE__ */ new Set();
-    for (const name of toolNames) {
-      if (seen.has(name)) {
-        duplicates.add(name);
-      }
-      seen.add(name);
-    }
-    if (duplicates.size > 0) {
-      ctx.addIssue({
-        code: z3.ZodIssueCode.custom,
-        message: `Duplicate tool names are not allowed: ${Array.from(duplicates).join(", ")}`
-      });
-    }
-  }).describe(
-    'Array of unique tool names (from codecall:search results) to fetch their detailed schemas and usage examples. Example: ["users:list", "billing:getInvoice"]'
-  )
+// plugins/plugin-codecall/src/errors/tool-call.errors.ts
+var TOOL_CALL_ERROR_CODES = {
+  NOT_FOUND: "NOT_FOUND",
+  VALIDATION: "VALIDATION",
+  EXECUTION: "EXECUTION",
+  TIMEOUT: "TIMEOUT",
+  ACCESS_DENIED: "ACCESS_DENIED",
+  SELF_REFERENCE: "SELF_REFERENCE"
 };
-var describeToolOutputSchema = z3.object({
-  tools: z3.array(
-    z3.object({
-      name: z3.string().describe("Tool name to be used in callTool() within codecall:execute scripts"),
-      appId: z3.string().describe("The app ID this tool belongs to"),
-      description: z3.string().describe("Detailed description of what this tool does"),
-      inputSchema: z3.record(z3.string(), z3.unknown()).nullable().describe("JSON Schema object describing the tool input parameters"),
-      outputSchema: z3.record(z3.string(), z3.unknown()).nullable().describe("JSON Schema object describing the tool output structure"),
-      annotations: ToolAnnotationsSchema.optional().describe("MCP tool annotations (metadata)"),
-      usageExamples: z3.array(
-        z3.object({
-          description: z3.string().describe("Description of what this example demonstrates"),
-          code: z3.string().describe(
-            'JavaScript code example showing how to call this tool using callTool(). Format: const result = await callTool("tool:name", { ...params });'
-          )
-        })
-      ).max(5).describe("Up to 5 practical examples of how to use this tool in a codecall:execute script")
-    })
-  ).describe("Array of tool descriptions with schemas and usage examples"),
-  notFound: z3.array(z3.string()).optional().describe("Tool names that were requested but not found in the index. Check these for typos.")
-});
+function createToolCallError(code, toolName, rawMessage) {
+  const sanitizedMessage = getSanitizedMessage(code, toolName, rawMessage);
+  return Object.freeze({
+    code,
+    message: sanitizedMessage,
+    toolName
+  });
+}
+function getSanitizedMessage(code, toolName, rawMessage) {
+  switch (code) {
+    case TOOL_CALL_ERROR_CODES.NOT_FOUND:
+      return `Tool "${toolName}" was not found`;
+    case TOOL_CALL_ERROR_CODES.VALIDATION:
+      return rawMessage ? sanitizeValidationMessage(rawMessage) : `Input validation failed for tool "${toolName}"`;
+    case TOOL_CALL_ERROR_CODES.EXECUTION:
+      return `Tool "${toolName}" execution failed`;
+    case TOOL_CALL_ERROR_CODES.TIMEOUT:
+      return `Tool "${toolName}" execution timed out`;
+    case TOOL_CALL_ERROR_CODES.ACCESS_DENIED:
+      return `Access denied for tool "${toolName}"`;
+    case TOOL_CALL_ERROR_CODES.SELF_REFERENCE:
+      return `Cannot call CodeCall tools from within AgentScript`;
+    default:
+      return `An error occurred while calling "${toolName}"`;
+  }
+}
+function sanitizeValidationMessage(message) {
+  let sanitized = message.replace(/(?:\/[\w.-]+)+|(?:[A-Za-z]:\\[\w\\.-]+)+/g, "[path]");
+  sanitized = sanitized.replace(/\bat line \d+/gi, "");
+  sanitized = sanitized.replace(/\bline \d+/gi, "");
+  sanitized = sanitized.replace(/:\d+:\d+/g, "");
+  sanitized = sanitized.replace(/\n\s*at .*/g, "");
+  if (sanitized.length > 200) {
+    sanitized = sanitized.substring(0, 200) + "...";
+  }
+  return sanitized.trim();
+}
+var SelfReferenceError = class extends Error {
+  code = TOOL_CALL_ERROR_CODES.SELF_REFERENCE;
+  toolName;
+  constructor(toolName) {
+    super(`Self-reference attack: Attempted to call CodeCall tool "${toolName}" from within AgentScript`);
+    this.name = "SelfReferenceError";
+    this.toolName = toolName;
+    Object.freeze(this);
+  }
+};
+
+// plugins/plugin-codecall/src/security/self-reference-guard.ts
+var CODECALL_TOOL_PREFIX = "codecall:";
+var BLOCKED_CODECALL_TOOLS = Object.freeze(
+  /* @__PURE__ */ new Set(["codecall:search", "codecall:describe", "codecall:execute", "codecall:invoke"])
+);
+function isBlockedSelfReference(toolName) {
+  const normalizedName = toolName.toLowerCase().trim();
+  if (normalizedName.startsWith(CODECALL_TOOL_PREFIX)) {
+    return true;
+  }
+  if (BLOCKED_CODECALL_TOOLS.has(toolName)) {
+    return true;
+  }
+  return false;
+}
+function assertNotSelfReference(toolName) {
+  if (isBlockedSelfReference(toolName)) {
+    throw new SelfReferenceError(toolName);
+  }
+}
 
 // plugins/plugin-codecall/src/utils/describe.utils.ts
 var INTENT_PATTERNS = {
@@ -1830,83 +1855,57 @@ function extractResultFromCallToolResult(mcpResult) {
   return content;
 }
 
-// plugins/plugin-codecall/src/errors/tool-call.errors.ts
-var TOOL_CALL_ERROR_CODES = {
-  NOT_FOUND: "NOT_FOUND",
-  VALIDATION: "VALIDATION",
-  EXECUTION: "EXECUTION",
-  TIMEOUT: "TIMEOUT",
-  ACCESS_DENIED: "ACCESS_DENIED",
-  SELF_REFERENCE: "SELF_REFERENCE"
-};
-function createToolCallError(code, toolName, rawMessage) {
-  const sanitizedMessage = getSanitizedMessage(code, toolName, rawMessage);
-  return Object.freeze({
-    code,
-    message: sanitizedMessage,
-    toolName
-  });
-}
-function getSanitizedMessage(code, toolName, rawMessage) {
-  switch (code) {
-    case TOOL_CALL_ERROR_CODES.NOT_FOUND:
-      return `Tool "${toolName}" was not found`;
-    case TOOL_CALL_ERROR_CODES.VALIDATION:
-      return rawMessage ? sanitizeValidationMessage(rawMessage) : `Input validation failed for tool "${toolName}"`;
-    case TOOL_CALL_ERROR_CODES.EXECUTION:
-      return `Tool "${toolName}" execution failed`;
-    case TOOL_CALL_ERROR_CODES.TIMEOUT:
-      return `Tool "${toolName}" execution timed out`;
-    case TOOL_CALL_ERROR_CODES.ACCESS_DENIED:
-      return `Access denied for tool "${toolName}"`;
-    case TOOL_CALL_ERROR_CODES.SELF_REFERENCE:
-      return `Cannot call CodeCall tools from within AgentScript`;
-    default:
-      return `An error occurred while calling "${toolName}"`;
-  }
-}
-function sanitizeValidationMessage(message) {
-  let sanitized = message.replace(/(?:\/[\w.-]+)+|(?:[A-Za-z]:\\[\w\\.-]+)+/g, "[path]");
-  sanitized = sanitized.replace(/\bat line \d+/gi, "");
-  sanitized = sanitized.replace(/\bline \d+/gi, "");
-  sanitized = sanitized.replace(/:\d+:\d+/g, "");
-  sanitized = sanitized.replace(/\n\s*at .*/g, "");
-  if (sanitized.length > 200) {
-    sanitized = sanitized.substring(0, 200) + "...";
-  }
-  return sanitized.trim();
-}
-var SelfReferenceError = class extends Error {
-  code = TOOL_CALL_ERROR_CODES.SELF_REFERENCE;
-  toolName;
-  constructor(toolName) {
-    super(`Self-reference attack: Attempted to call CodeCall tool "${toolName}" from within AgentScript`);
-    this.name = "SelfReferenceError";
-    this.toolName = toolName;
-    Object.freeze(this);
-  }
-};
+// plugins/plugin-codecall/src/tools/describe.schema.ts
+import { z as z3 } from "@frontmcp/lazy-zod";
+import { ToolAnnotationsSchema } from "@frontmcp/protocol";
+var describeToolDescription = `Get input/output schemas for tools from search results.
 
-// plugins/plugin-codecall/src/security/self-reference-guard.ts
-var CODECALL_TOOL_PREFIX = "codecall:";
-var BLOCKED_CODECALL_TOOLS = Object.freeze(
-  /* @__PURE__ */ new Set(["codecall:search", "codecall:describe", "codecall:execute", "codecall:invoke"])
-);
-function isBlockedSelfReference(toolName) {
-  const normalizedName = toolName.toLowerCase().trim();
-  if (normalizedName.startsWith(CODECALL_TOOL_PREFIX)) {
-    return true;
-  }
-  if (BLOCKED_CODECALL_TOOLS.has(toolName)) {
-    return true;
-  }
-  return false;
-}
-function assertNotSelfReference(toolName) {
-  if (isBlockedSelfReference(toolName)) {
-    throw new SelfReferenceError(toolName);
-  }
-}
+INPUT: toolNames: string[] - tool names from search
+OUTPUT per tool: inputSchema (JSON Schema), outputSchema (JSON Schema), usageExamples (up to 5 callTool examples)
+
+IMPORTANT: If notFound array is non-empty \u2192 re-search with corrected queries.
+FLOW: search \u2192 describe \u2192 execute/invoke`;
+var describeToolInputSchema = {
+  toolNames: z3.array(z3.string()).min(1).superRefine((toolNames, ctx) => {
+    const seen = /* @__PURE__ */ new Set();
+    const duplicates = /* @__PURE__ */ new Set();
+    for (const name of toolNames) {
+      if (seen.has(name)) {
+        duplicates.add(name);
+      }
+      seen.add(name);
+    }
+    if (duplicates.size > 0) {
+      ctx.addIssue({
+        code: z3.ZodIssueCode.custom,
+        message: `Duplicate tool names are not allowed: ${Array.from(duplicates).join(", ")}`
+      });
+    }
+  }).describe(
+    'Array of unique tool names (from codecall:search results) to fetch their detailed schemas and usage examples. Example: ["users:list", "billing:getInvoice"]'
+  )
+};
+var describeToolOutputSchema = z3.object({
+  tools: z3.array(
+    z3.object({
+      name: z3.string().describe("Tool name to be used in callTool() within codecall:execute scripts"),
+      appId: z3.string().describe("The app ID this tool belongs to"),
+      description: z3.string().describe("Detailed description of what this tool does"),
+      inputSchema: z3.record(z3.string(), z3.unknown()).nullable().describe("JSON Schema object describing the tool input parameters"),
+      outputSchema: z3.record(z3.string(), z3.unknown()).nullable().describe("JSON Schema object describing the tool output structure"),
+      annotations: ToolAnnotationsSchema.optional().describe("MCP tool annotations (metadata)"),
+      usageExamples: z3.array(
+        z3.object({
+          description: z3.string().describe("Description of what this example demonstrates"),
+          code: z3.string().describe(
+            'JavaScript code example showing how to call this tool using callTool(). Format: const result = await callTool("tool:name", { ...params });'
+          )
+        })
+      ).max(5).describe("Up to 5 practical examples of how to use this tool in a codecall:execute script")
+    })
+  ).describe("Array of tool descriptions with schemas and usage examples"),
+  notFound: z3.array(z3.string()).optional().describe("Tool names that were requested but not found in the index. Check these for typos.")
+});
 
 // plugins/plugin-codecall/src/tools/describe.tool.ts
 var DescribeTool = class extends ToolContext2 {
@@ -2080,7 +2079,7 @@ DescribeTool = __decorateClass([
 import { Tool as Tool3, ToolContext as ToolContext3 } from "@frontmcp/sdk";
 
 // plugins/plugin-codecall/src/tools/execute.schema.ts
-import { z as z5 } from "zod";
+import { z as z5 } from "@frontmcp/lazy-zod";
 var MIN_EXECUTE_SCRIPT_LENGTH = 'return callTool("a",{})'.length;
 var executeToolDescription = `Execute AgentScript (safe JS subset) for multi-tool orchestration.
 
@@ -2463,7 +2462,7 @@ ExecuteTool = __decorateClass([
 import { Tool as Tool4, ToolContext as ToolContext4 } from "@frontmcp/sdk";
 
 // plugins/plugin-codecall/src/tools/invoke.schema.ts
-import { z as z6 } from "zod";
+import { z as z6 } from "@frontmcp/lazy-zod";
 import { CallToolResultSchema } from "@frontmcp/protocol";
 var invokeToolDescription = `Call ONE tool directly. Returns standard MCP CallToolResult.
 

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -47,12 +47,12 @@
   "dependencies": {
     "@enclave-vm/core": "^2.13.0",
     "vectoriadb": "^2.2.0",
-    "@frontmcp/protocol": "1.0.4",
-    "@frontmcp/sdk": "1.0.4",
-    "zod": "^4.0.0"
+    "@frontmcp/protocol": "1.1.0",
+    "@frontmcp/sdk": "1.1.0"
   },
   "peerDependencies": {
-    "@frontmcp/plugin-cache": "1.0.4"
+    "@frontmcp/plugin-cache": "1.1.0",
+    "@frontmcp/lazy-zod": "1.1.0"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"