@frontmcp/plugin-codecall 1.5.6 → 1.6.0

package/README.md

@@ -13,8 +13,8 @@ npm install @frontmcp/plugin-codecall @frontmcp/plugin-cache
 ## Usage
 
 ```typescript
-import { CodeCallPlugin } from '@frontmcp/plugin-codecall';
 import { CachePlugin } from '@frontmcp/plugin-cache';
+import { CodeCallPlugin } from '@frontmcp/plugin-codecall';
 import { FrontMcp } from '@frontmcp/sdk';
 
 const app = new FrontMcp({

package/codecall.symbol.d.ts

@@ -38,6 +38,17 @@ export interface ResolvedCodeCallVmOptions {
     maxSanitizeDepth: number;
     maxSanitizeProperties: number;
 }
+/**
+ * A tool's public description as handed to sandboxed scripts. Schemas are plain JSON Schema
+ * documents, never the registry's declared schema objects, and are `null` when the tool has
+ * no schema to advertise.
+ */
+export interface CodeCallToolDescription {
+    name: string;
+    description?: string;
+    inputSchema: Record<string, unknown> | null;
+    outputSchema: Record<string, unknown> | null;
+}
 /**
  * Environment available to code running inside the VM.
  * The plugin is responsible for wiring this to the underlying tool pipeline.
@@ -58,12 +69,14 @@ export interface CodeCallVmEnvironment {
      * - Security guard errors (self-reference, access control) are NEVER catchable
      */
     callTool: <TInput, TResult>(name: string, input: TInput, options?: CallToolOptions) => Promise<TResult | ToolCallResult<TResult>>;
-    getTool: (name: string) => {
-        name: string;
-        description?: string;
-        inputSchema: unknown;
-        outputSchema?: unknown | null;
-    } | undefined;
+    /**
+     * Look up a tool's public description.
+     *
+     * Returns `undefined` when the tool is unknown, is a CodeCall meta-tool, falls outside the
+     * script's `allowedTools` whitelist, or when its schemas have no plain JSON form (a circular
+     * schema, for example) — callers cannot distinguish "not visible" from "not projectable".
+     */
+    getTool: (name: string) => CodeCallToolDescription | undefined;
     console?: Console;
     mcpLog?: (level: 'debug' | 'info' | 'warn' | 'error', message: string, metadata?: Record<string, unknown>) => void;
     mcpNotify?: (event: string, payload: Record<string, unknown>) => void;

package/codecall.symbol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codecall.symbol.d.ts","sourceRoot":"","sources":["../src/codecall.symbol.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,sBAAsB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,YAAY,CAAC;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAChE;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;;OAaG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,eAAe,KACtB,OAAO,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAClB;QACE,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;KAC/B,GACD,SAAS,CAAC;IAEd,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEnH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEtE;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/G;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEhF;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAEnC;;OAEG;IACH,aAAa,IAAI,MAAM,CAAC;IAExB;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B"}
+{"version":3,"file":"codecall.symbol.d.ts","sourceRoot":"","sources":["../src/codecall.symbol.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,sBAAsB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,YAAY,CAAC;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAChE;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;;OAaG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,eAAe,KACtB,OAAO,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhD;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,uBAAuB,GAAG,SAAS,CAAC;IAE/D,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEnH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAEtE;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/G;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEhF;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAEnC;;OAEG;IACH,aAAa,IAAI,MAAM,CAAC;IAExB;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B"}

package/esm/index.mjs

@@ -2289,6 +2289,17 @@ function generateSmartExample(toolName, inputSchema, description) {
   }
 }
 
+// plugins/plugin-codecall/src/utils/plain-json.ts
+function toPlainJson(value) {
+  try {
+    const serialized = JSON.stringify(value);
+    if (serialized === void 0) return void 0;
+    return JSON.parse(serialized);
+  } catch {
+    return void 0;
+  }
+}
+
 // plugins/plugin-codecall/src/utils/mcp-result.ts
 function extractResultFromCallToolResult(mcpResult) {
   if (mcpResult.isError) {
@@ -2309,7 +2320,7 @@ function extractResultFromCallToolResult(mcpResult) {
       return content[0].text;
     }
   }
-  return content;
+  return toPlainJson(content);
 }
 
 // plugins/plugin-codecall/src/tools/describe.schema.ts
@@ -2701,15 +2712,17 @@ var ExecuteTool = class extends ToolContext5 {
       },
       getTool: (name) => {
         try {
+          if (isBlockedSelfReference(name)) return void 0;
+          if (allowedToolSet && !allowedToolSet.has(name)) return void 0;
           const tools = this.scope.tools.getTools(true);
           const tool = tools.find((t) => t.name === name || t.fullName === name);
           if (!tool) return void 0;
-          return {
+          return toPlainJson({
             name: tool.name,
             description: tool.metadata?.description,
-            inputSchema: tool.rawInputSchema,
-            outputSchema: tool.outputSchema
-          };
+            inputSchema: tool.getInputJsonSchema?.() ?? null,
+            outputSchema: tool.getOutputJsonSchema?.() ?? null
+          });
         } catch {
           return void 0;
         }

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.5.6",
+  "version": "1.6.0",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -48,14 +48,14 @@
     }
   },
   "dependencies": {
-    "@enclave-vm/core": "^2.15.0",
-    "@frontmcp/protocol": "1.5.6",
-    "@frontmcp/sdk": "1.5.6",
+    "@enclave-vm/core": "^2.15.1",
+    "@frontmcp/protocol": "1.6.0",
+    "@frontmcp/sdk": "1.6.0",
     "vectoriadb": "^2.3.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.5.6",
-    "@frontmcp/plugin-cache": "1.5.6"
+    "@frontmcp/lazy-zod": "1.6.0",
+    "@frontmcp/plugin-cache": "1.6.0"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/index.js

@@ -2326,6 +2326,17 @@ function generateSmartExample(toolName, inputSchema, description) {
   }
 }
 
+// plugins/plugin-codecall/src/utils/plain-json.ts
+function toPlainJson(value) {
+  try {
+    const serialized = JSON.stringify(value);
+    if (serialized === void 0) return void 0;
+    return JSON.parse(serialized);
+  } catch {
+    return void 0;
+  }
+}
+
 // plugins/plugin-codecall/src/utils/mcp-result.ts
 function extractResultFromCallToolResult(mcpResult) {
   if (mcpResult.isError) {
@@ -2346,7 +2357,7 @@ function extractResultFromCallToolResult(mcpResult) {
       return content[0].text;
     }
   }
-  return content;
+  return toPlainJson(content);
 }
 
 // plugins/plugin-codecall/src/tools/describe.schema.ts
@@ -2738,15 +2749,17 @@ var ExecuteTool = class extends import_sdk7.ToolContext {
       },
       getTool: (name) => {
         try {
+          if (isBlockedSelfReference(name)) return void 0;
+          if (allowedToolSet && !allowedToolSet.has(name)) return void 0;
           const tools = this.scope.tools.getTools(true);
           const tool = tools.find((t) => t.name === name || t.fullName === name);
           if (!tool) return void 0;
-          return {
+          return toPlainJson({
             name: tool.name,
             description: tool.metadata?.description,
-            inputSchema: tool.rawInputSchema,
-            outputSchema: tool.outputSchema
-          };
+            inputSchema: tool.getInputJsonSchema?.() ?? null,
+            outputSchema: tool.getOutputJsonSchema?.() ?? null
+          });
         } catch {
           return void 0;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.5.6",
+  "version": "1.6.0",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -48,14 +48,14 @@
     }
   },
   "dependencies": {
-    "@enclave-vm/core": "^2.15.0",
-    "@frontmcp/protocol": "1.5.6",
-    "@frontmcp/sdk": "1.5.6",
+    "@enclave-vm/core": "^2.15.1",
+    "@frontmcp/protocol": "1.6.0",
+    "@frontmcp/sdk": "1.6.0",
     "vectoriadb": "^2.3.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.5.6",
-    "@frontmcp/plugin-cache": "1.5.6"
+    "@frontmcp/lazy-zod": "1.6.0",
+    "@frontmcp/plugin-cache": "1.6.0"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/tools/execute.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.tool.d.ts","sourceRoot":"","sources":["../../src/tools/execute.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAclD,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAyC1B,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAC5C,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAgPvE"}
+{"version":3,"file":"execute.tool.d.ts","sourceRoot":"","sources":["../../src/tools/execute.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAclD,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAyC1B,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAC5C,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAqPvE"}

package/utils/index.d.ts

@@ -1,4 +1,5 @@
 export * from './build-tool-namespaces';
 export * from './describe.utils';
 export * from './mcp-result';
+export * from './plain-json';
 //# sourceMappingURL=index.d.ts.map

package/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAEA,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAEA,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/utils/mcp-result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-result.d.ts","sourceRoot":"","sources":["../../src/utils/mcp-result.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CA4BlF"}
+{"version":3,"file":"mcp-result.d.ts","sourceRoot":"","sources":["../../src/utils/mcp-result.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CA6BlF"}

package/utils/plain-json.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Serialize a value into a fresh, plain JSON structure.
+ *
+ * The result is a JSON projection, not a copy: prototypes, methods, `undefined` members and
+ * anything else without a JSON form are gone, and Dates become strings. Callers therefore
+ * name the shape they expect (`toPlainJson<MyShape>(value)`) rather than inheriting the
+ * input's type, which would over-promise. Returns `undefined` when the value has no JSON
+ * representation at all.
+ */
+export declare function toPlainJson<T = unknown>(value: unknown): T | undefined;
+//# sourceMappingURL=plain-json.d.ts.map

package/utils/plain-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain-json.d.ts","sourceRoot":"","sources":["../../src/utils/plain-json.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,GAAG,SAAS,CAQtE"}