@frontmcp/plugin-codecall 1.7.2 → 1.8.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.7.2",
+  "version": "1.8.1",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,13 +49,13 @@
   },
   "dependencies": {
     "@enclave-vm/core": "^2.15.2",
-    "@frontmcp/protocol": "1.7.2",
-    "@frontmcp/sdk": "1.7.2",
+    "@frontmcp/protocol": "1.8.1",
+    "@frontmcp/sdk": "1.8.1",
     "vectoriadb": "^2.3.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.7.2",
-    "@frontmcp/plugin-cache": "1.7.2"
+    "@frontmcp/lazy-zod": "1.8.1",
+    "@frontmcp/plugin-cache": "1.8.1"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/security/codecall-tool-policy.d.ts

@@ -0,0 +1,141 @@
+import type { CodeCallMode, CodeCallToolMetadata, DirectCallsFilterFn, IncludeToolsFilterFn, IncludeToolsFilterToolInfo } from '../codecall.types';
+/** An owner in a registry entry's lineage: an app, adapter, plugin or the scope. */
+interface CodeCallPolicyOwner {
+    kind?: string;
+    id?: string;
+}
+/** A registry entry as the policy reads it: a `ToolEntry`, or anything shaped like one. */
+export interface CodeCallPolicyEntry {
+    name: string;
+    fullName: string;
+    owner?: CodeCallPolicyOwner;
+    metadata?: {
+        description?: string;
+        tags?: string[];
+        hideFromDiscovery?: boolean;
+        visibility?: string;
+        codecall?: CodeCallToolMetadata;
+    };
+}
+/** The policy's view of one tool. Build it with `toCodeCallPolicyTool`. */
+export interface CodeCallPolicyTool {
+    /** The tool's own name: the `name` search indexes and `includeTools` receives. */
+    name: string;
+    /** The qualified `<owner>:<name>` spelling, which the flow dispatches as well. */
+    fullName?: string;
+    /**
+     * Further spellings, such as the name the caller asked for.
+     *
+     * The namespace rules deny under every spelling, because judging one lets another through.
+     * No allow decision ever reads an alias.
+     */
+    aliases?: string[];
+    appId?: string;
+    description?: string;
+    tags?: string[];
+    hidden?: boolean;
+    codecall?: CodeCallToolMetadata;
+}
+export interface CodeCallPolicyConfig {
+    mode: CodeCallMode;
+    includeTools?: IncludeToolsFilterFn;
+}
+/** The `directCalls` options, which narrow `codecall:invoke` beyond the base policy. */
+export interface CodeCallDirectCallsConfig {
+    enabled: boolean;
+    allowedTools?: string[];
+    filter?: DirectCallsFilterFn;
+}
+export type CodeCallPolicyDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: string;
+};
+/** A decision that also carries the entry it was made for, so callers use that exact entry. */
+export type CodeCallToolAccess<T> = {
+    allowed: true;
+    entry: T;
+} | {
+    allowed: false;
+    reason: string;
+};
+/**
+ * The app a tool belongs to, found anywhere in its lineage in the scope's tool registry.
+ *
+ * A tool an app's adapter or plugin provides is owned by that adapter or plugin, so reading only
+ * `owner` gave it no app, and an `includeTools: (t) => t.appId !== 'admin'` filter let it through.
+ */
+export declare function codeCallAppIdOf(scope: unknown, entry: CodeCallPolicyEntry): string | undefined;
+/**
+ * Build the policy subject for a registry entry.
+ *
+ * Search indexing, `describe` and execution all build their subject here, so none of them can
+ * judge a different name than the others. Pass the scope so `appId` names the app of a tool its
+ * adapters or plugins provide.
+ */
+export declare function toCodeCallPolicyTool(entry: CodeCallPolicyEntry, requestedName?: string, scope?: unknown): CodeCallPolicyTool;
+/** The object `includeTools` and `directCalls.filter` receive, wherever the policy runs. */
+export declare function toToolFilterInfo(tool: CodeCallPolicyTool): IncludeToolsFilterToolInfo;
+/**
+ * Decide whether CodeCall may reach `tool`.
+ *
+ * Discovery and execution both call this. A tool the policy denies must be absent from
+ * search results AND rejected at `callTool` — hiding it from search is not authorization.
+ */
+export declare function checkCodeCallToolPolicy(tool: CodeCallPolicyTool, config: CodeCallPolicyConfig): CodeCallPolicyDecision;
+/**
+ * A tool the policy cannot evaluate is denied.
+ *
+ * `callTool` receives a bare string, so a name matching no resolvable tool would otherwise
+ * skip every metadata-driven check above and fall straight through to `tools:call-tool`.
+ */
+export declare function denyUnknownTool(name: string): {
+    allowed: false;
+    reason: string;
+};
+interface ResolvableEntry {
+    name: string;
+    fullName: string;
+}
+/**
+ * Resolve a tool name exactly as `call-tool.flow.ts` `findTool` does.
+ *
+ * MUST mirror that stage. The policy has to evaluate the same entry the flow will execute:
+ * resolve more narrowly and legitimate remote-app tools get denied; resolve more loosely and
+ * a tool reachable only through the flow's fallback escapes the policy entirely. The flow
+ * applies three steps, and so does this —
+ *   1. the scope registry,
+ *   2. a hyphen <-> underscore alias (issue #408),
+ *   3. remote app registries, for tools whose subscription has not yet propagated.
+ */
+export declare function resolveCodeCallTool<T extends ResolvableEntry>(scope: unknown, name: string): T | undefined;
+/**
+ * Apply the `directCalls` options to a `codecall:invoke` request.
+ *
+ * These options were declared in the plugin schema and read by nothing, so `codecall:invoke`
+ * proxied the entire registry regardless of how an operator configured it. They narrow the
+ * base policy; they never widen it.
+ */
+export declare function checkDirectCallPolicy(tool: CodeCallPolicyTool, directCalls: CodeCallDirectCallsConfig | undefined): CodeCallPolicyDecision;
+interface PolicyConfigReader {
+    get(key: string): unknown;
+}
+/** Read the base policy options from the plugin config. */
+export declare function readCodeCallPolicyConfig(config: PolicyConfigReader): CodeCallPolicyConfig;
+/**
+ * Resolve a tool name and decide whether CodeCall may reach it.
+ *
+ * The one entry point for the meta-tools: `codecall:execute` calls it for every `callTool`
+ * and `getTool`, `codecall:describe` for every name it is asked about, and `codecall:invoke`
+ * for its single target with `directCall: true`. Sharing it is the point — the advisory
+ * existed because execution and discovery each had their own answer.
+ *
+ * An allow decision carries the resolved entry. Callers describe or run that entry rather than
+ * looking the name up again, which could land on a different tool than the one judged.
+ */
+export declare function checkCodeCallToolAccess<T extends CodeCallPolicyEntry = CodeCallPolicyEntry>(scope: unknown, config: PolicyConfigReader, name: string, options?: {
+    directCall?: boolean;
+}): CodeCallToolAccess<T>;
+export {};
+//# sourceMappingURL=codecall-tool-policy.d.ts.map

package/security/codecall-tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecall-tool-policy.d.ts","sourceRoot":"","sources":["../../src/security/codecall-tool-policy.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC3B,MAAM,mBAAmB,CAAC;AAK3B,oFAAoF;AACpF,UAAU,mBAAmB;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,2FAA2F;AAC3F,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,CAAC,EAAE;QACT,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;KACjC,CAAC;CACH;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAED,wFAAwF;AACxF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,MAAM,MAAM,sBAAsB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5F,+FAA+F;AAC/F,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAYrG;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAI9F;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,mBAAmB,EAC1B,aAAa,CAAC,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,OAAO,GACd,kBAAkB,CAcpB;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,GAAG,0BAA0B,CAQrF;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,oBAAoB,GAC3B,sBAAsB,CA4CxB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAEhF;AAED,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAWD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAwB1G;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,kBAAkB,EACxB,WAAW,EAAE,yBAAyB,GAAG,SAAS,GACjD,sBAAsB,CAmBxB;AAED,UAAU,kBAAkB;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B;AAED,2DAA2D;AAC3D,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAQzF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,mBAAmB,GAAG,mBAAmB,EACzF,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,kBAAkB,CAAC,CAAC,CAAC,CAkBvB"}

package/security/index.d.ts

@@ -1,3 +1,3 @@
+export * from './codecall-tool-policy';
 export * from './self-reference-guard';
-export * from './tool-access-control.service';
 //# sourceMappingURL=index.d.ts.map

package/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAEA,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAEA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC"}

package/services/enclave.service.d.ts

@@ -14,6 +14,13 @@ export interface EnclaveExecutionResult {
         toolName?: string;
         toolInput?: unknown;
         details?: unknown;
+        /**
+         * Distinct AST-validation issue codes, for the `codecall:security:ast-blocked` audit event.
+         *
+         * The enclave reports structured `issues` alongside the human-readable message; this branch
+         * used to discard them, which left the audit event with prose where a pattern belongs.
+         */
+        blockedPatterns?: string[];
         [key: string]: unknown;
     };
     logs: string[];

package/services/enclave.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enclave.service.d.ts","sourceRoot":"","sources":["../../src/services/enclave.service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,oBAAoB,CAAC;AAE3F,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;;;;;;;GAQG;AACH;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASpD;AAOD,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,MAAM,EAAE,cAAc;IAOlC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAgGhG;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAuEzB"}
+{"version":3,"file":"enclave.service.d.ts","sourceRoot":"","sources":["../../src/services/enclave.service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,oBAAoB,CAAC;AAE3F,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;;;;;;;GAQG;AACH;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASpD;AAOD,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,MAAM,EAAE,cAAc;IAOlC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAgGhG;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAgFzB"}

package/services/index.d.ts

@@ -1,6 +1,5 @@
 export * from './audit-logger.service';
 export * from './output-sanitizer';
-export * from './error-enrichment.service';
 export * from './tool-search.service';
 export * from './synonym-expansion.service';
 export { default as EnclaveService } from './enclave.service';

package/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAEA,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAEA,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC"}

package/services/tool-search.service.d.ts

@@ -1,7 +1,7 @@
-import { ToolEntry, ScopeEntry } from '@frontmcp/sdk';
-import type { EmbeddingStrategy, CodeCallEmbeddingOptions, CodeCallMode } from '../codecall.types';
-import type { ToolSearch, ToolSearchResult as SymbolToolSearchResult, ToolSearchOptions as SymbolToolSearchOptions } from '../codecall.symbol';
-import { SynonymExpansionConfig } from './synonym-expansion.service';
+import { type ScopeEntry, type ToolEntry } from '@frontmcp/sdk';
+import type { ToolSearchOptions as SymbolToolSearchOptions, ToolSearchResult as SymbolToolSearchResult, ToolSearch } from '../codecall.symbol';
+import type { CodeCallEmbeddingOptions, CodeCallMode, EmbeddingStrategy } from '../codecall.types';
+import { type SynonymExpansionConfig } from './synonym-expansion.service';
 /**
  * Search result for tool search
  */
@@ -123,19 +123,11 @@ export declare class ToolSearchService implements ToolSearch {
      */
     private handleToolChange;
     /**
-     * Determines if a tool should be indexed in the search database.
-     * Filters based on:
-     * - Excludes codecall:* meta-tools (they should not be searchable)
-     * - Excludes tools with hideFromDiscovery: true (system tools like sendElicitationResult)
-     * - Mode-based filtering (codecall_only, codecall_opt_in, metadata_driven)
-     * - Per-tool metadata.codecall.enabledInCodeCall
-     * - Custom includeTools filter function
+     * Whether a tool belongs in the search index: exactly when CodeCall may execute it.
+     * The decision is `codecall:execute`'s own, so search cannot show a tool execution refuses
+     * or hide one it runs (GHSA-6w3j-82v5-6qrr).
      */
     private shouldIndexTool;
-    /**
-     * Extract CodeCall-specific metadata from a tool.
-     */
-    private getCodeCallMetadata;
     /**
      * Initializes the search service by indexing all tools from the registry.
      * NOTE: This method is now a no-op. Initialization is handled reactively

package/services/tool-search.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-search.service.d.ts","sourceRoot":"","sources":["../../src/services/tool-search.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtD,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACxB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,IAAI,sBAAsB,EAC1C,iBAAiB,IAAI,uBAAuB,EAC7C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA2B,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAoM9F;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,KAAK,OAAO,CAAC;AAEd;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B;;OAEG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAE5C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;OAGG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG,CAAC,sBAAsB,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAM;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAElD,OAAO,CAAC,QAAQ,CAAyD;IACzE,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,KAAK,CAAa;IAC1B,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,cAAc,CAAwC;IAG9D,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,mBAAmB,CAA6B;IACxD,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAS;gBAEb,MAAM,EAAE,uBAAuB,YAAK,EAAE,KAAK,EAAE,UAAU;IAgEnE;;;OAGG;YACW,gBAAgB;IAO9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAQtB;;OAEG;YACW,gBAAgB;IAqD9B;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IAiEvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAK3B;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC;;OAEG;IACH,OAAO,IAAI,IAAI;IAwBf;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;OAGG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IA4CrG;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;IAQ3B;;OAEG;IACH,aAAa,IAAI,MAAM;IAQvB;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQlC;;OAEG;IACH,KAAK,IAAI,IAAI;IAKb;;OAEG;IACH,WAAW,IAAI,iBAAiB;IAIhC;;OAEG;IACH,aAAa,IAAI,OAAO;CAGzB"}
+{"version":3,"file":"tool-search.service.d.ts","sourceRoot":"","sources":["../../src/services/tool-search.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,KAAK,EACV,iBAAiB,IAAI,uBAAuB,EAC5C,gBAAgB,IAAI,sBAAsB,EAC1C,UAAU,EACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAoMnG;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,KAAK,OAAO,CAAC;AAEd;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B;;OAEG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAE5C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;OAGG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG,CAAC,sBAAsB,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAM;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAElD,OAAO,CAAC,QAAQ,CAAyD;IACzE,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,KAAK,CAAa;IAC1B,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,cAAc,CAAwC;IAG9D,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,mBAAmB,CAA6B;IACxD,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAS;gBAEb,MAAM,EAAE,uBAAuB,YAAK,EAAE,KAAK,EAAE,UAAU;IAgEnE;;;OAGG;YACW,gBAAgB;IAO9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAQtB;;OAEG;YACW,gBAAgB;IAqD9B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC;;OAEG;IACH,OAAO,IAAI,IAAI;IAwBf;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;OAGG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKpB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IA4CrG;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;IAQ3B;;OAEG;IACH,aAAa,IAAI,MAAM;IAQvB;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQlC;;OAEG;IACH,KAAK,IAAI,IAAI;IAKb;;OAEG;IACH,WAAW,IAAI,iBAAiB;IAIhC;;OAEG;IACH,aAAa,IAAI,OAAO;CAGzB"}

package/tools/describe.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"describe.tool.d.ts","sourceRoot":"","sources":["../../src/tools/describe.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAkB,MAAM,eAAe,CAAC;AAIlE,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAuB3B,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IAC7C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA2DpE;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAuBtB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAkDpB;;OAEG;IACH,OAAO,CAAC,YAAY;IA6BpB;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;CAyBzB"}
+{"version":3,"file":"describe.tool.d.ts","sourceRoot":"","sources":["../../src/tools/describe.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAkB,MAAM,eAAe,CAAC;AAMlE,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAuB3B,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IAC7C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgEpE;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAuBtB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAkDpB;;OAEG;IACH,OAAO,CAAC,YAAY;IA6BpB;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;CAyBzB"}

package/tools/execute.tool.d.ts

@@ -1,6 +1,15 @@
 import { ToolContext } from '@frontmcp/sdk';
 import { type CodeCallExecuteResult, type ExecuteToolInput } from './execute.schema';
 export default class ExecuteTool extends ToolContext {
+    /**
+     * Resolve the server-side CodeCall policy for a tool name (GHSA-6w3j-82v5-6qrr).
+     *
+     * Shares its decision with discovery and with `codecall:invoke`, so the three cannot
+     * diverge. A name matching no registered tool is denied rather than passed through —
+     * otherwise it would skip every metadata-driven check and reach `tools:call-tool`
+     * unexamined.
+     */
+    private checkToolPolicy;
     execute(input: ExecuteToolInput): Promise<CodeCallExecuteResult>;
 }
 //# sourceMappingURL=execute.tool.d.ts.map

package/tools/execute.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.tool.d.ts","sourceRoot":"","sources":["../../src/tools/execute.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAclD,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAyC1B,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAC5C,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAqPvE"}
+{"version":3,"file":"execute.tool.d.ts","sourceRoot":"","sources":["../../src/tools/execute.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAkB,MAAM,eAAe,CAAC;AAuBlE,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAyC1B,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,WAAW;IAClD;;;;;;;OAOG;IACH,OAAO,CAAC,eAAe;IAIjB,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA4UvE"}

package/tools/invoke.tool.d.ts

@@ -6,6 +6,8 @@ import { InvokeToolInput, InvokeToolOutput } from './invoke.schema';
  *
  * Security Considerations:
  * - Self-reference blocking: Cannot invoke codecall:* tools
+ * - Shares the CodeCall access policy with `codecall:execute`, so a tool withheld from
+ *   scripts is not reachable by naming it here instead (GHSA-6w3j-82v5-6qrr)
  * - All middleware (auth, PII, rate limiting) applies via normal tool execution
  */
 export default class InvokeTool extends ToolContext {

package/tools/invoke.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke.tool.d.ts","sourceRoot":"","sources":["../../src/tools/invoke.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EACL,eAAe,EAEf,gBAAgB,EAGjB,MAAM,iBAAiB,CAAC;AAazB;;;;;;;GAOG;AAeH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAkCjE"}
+{"version":3,"file":"invoke.tool.d.ts","sourceRoot":"","sources":["../../src/tools/invoke.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAKlD,OAAO,EAEL,eAAe,EAEf,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AAYzB;;;;;;;;;GASG;AAeH,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAwDjE"}

package/tools/search-knowledge.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-knowledge.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-knowledge.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAIL,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,2BAA2B,CAAC;AA6BnC,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,WAAW;IACpD,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAgFnF"}
+{"version":3,"file":"search-knowledge.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-knowledge.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,WAAW,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EAIL,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,2BAA2B,CAAC;AA6BnC,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,WAAW;IACpD,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAiFnF"}

package/tools/search-skills.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-skills.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-skills.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAmChC,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,WAAW;IACjD,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAiH7E"}
+{"version":3,"file":"search-skills.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-skills.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,WAAW,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,wBAAwB,CAAC;AAmChC,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,WAAW;IACjD,OAAO,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAkH7E"}

package/tools/search.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,eAAe,EAEf,gBAAgB,EAGjB,MAAM,iBAAiB,CAAC;AA8BzB,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAyFjE"}
+{"version":3,"file":"search.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlD,OAAO,EAEL,eAAe,EAEf,gBAAgB,EAEjB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAgGjE"}

package/security/tool-access-control.service.d.ts

@@ -1,105 +0,0 @@
-import type { AuthInfo } from '@frontmcp/protocol';
-/**
- * Tool access control modes:
- * - whitelist: Only explicitly allowed tools can be called (most secure)
- * - blacklist: All tools allowed except explicitly blocked (default, more flexible)
- * - dynamic: Evaluate access per-call based on custom function
- */
-export type ToolAccessMode = 'whitelist' | 'blacklist' | 'dynamic';
-/**
- * Tool access policy configuration.
- */
-export interface ToolAccessPolicy {
-    /**
-     * Access control mode.
-     * @default 'blacklist'
-     */
-    mode: ToolAccessMode;
-    /**
-     * Tools explicitly allowed (for whitelist mode).
-     * Supports exact names and glob patterns (e.g., 'users:*').
-     */
-    whitelist?: string[];
-    /**
-     * Tools explicitly blocked (for blacklist mode).
-     * Supports exact names and glob patterns (e.g., 'admin:*').
-     */
-    blacklist?: string[];
-    /**
-     * Pattern-based rules that apply in addition to whitelist/blacklist.
-     */
-    patterns?: {
-        allow?: string[];
-        deny?: string[];
-    };
-    /**
-     * Custom evaluator function for dynamic mode.
-     * Called for each tool access request.
-     */
-    evaluator?: (context: ToolAccessContext) => Promise<ToolAccessDecision>;
-}
-/**
- * Context provided to the access evaluator.
- */
-export interface ToolAccessContext {
-    toolName: string;
-    authInfo?: AuthInfo;
-    executionId?: string;
-    callDepth: number;
-    timestamp: number;
-}
-/**
- * Decision from the access control check.
- */
-export interface ToolAccessDecision {
-    allowed: boolean;
-    reason?: string;
-}
-/**
- * Tool Access Control Service
- *
- * Provides centralized access control for tool calls within CodeCall.
- * Implements a layered security model:
- *
- * 1. Self-reference blocking (handled separately in self-reference-guard.ts)
- * 2. Default blacklist (always enforced)
- * 3. User-configured whitelist/blacklist
- * 4. Pattern matching (glob patterns)
- * 5. Dynamic evaluation (if configured)
- */
-export declare class ToolAccessControlService {
-    private readonly policy;
-    private readonly whitelistSet;
-    private readonly blacklistSet;
-    private readonly allowPatterns;
-    private readonly denyPatterns;
-    constructor(policy?: ToolAccessPolicy);
-    /**
-     * Check if a tool can be accessed.
-     *
-     * @param toolName - The tool being accessed
-     * @param context - Optional access context for dynamic evaluation
-     * @returns Decision indicating if access is allowed
-     */
-    checkAccess(toolName: string, context?: Partial<ToolAccessContext>): Promise<ToolAccessDecision>;
-    private checkWhitelistMode;
-    private checkBlacklistMode;
-    private checkDynamicMode;
-    /**
-     * Check if a tool name matches any entry in a set (supports glob patterns).
-     */
-    private isInSet;
-    /**
-     * Convert a glob pattern to a RegExp.
-     * Supports: * (any characters), ? (single character)
-     *
-     * Security: Prevents ReDoS by limiting pattern complexity and using non-greedy matching.
-     */
-    private globToRegex;
-    /**
-     * Get the current policy configuration (for debugging/testing).
-     */
-    getPolicy(): Readonly<ToolAccessPolicy>;
-}
-export default ToolAccessControlService;
-//# sourceMappingURL=tool-access-control.service.d.ts.map

package/security/tool-access-control.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-access-control.service.d.ts","sourceRoot":"","sources":["../../src/security/tool-access-control.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,IAAI,EAAE,cAAc,CAAC;IAErB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAErB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAErB;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IAEF;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACzE;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAeD;;;;;;;;;;;GAWG;AACH,qBAIa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAW;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAW;gBAE5B,MAAM,CAAC,EAAE,gBAAgB;IAWrC;;;;;;OAMG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAsCxF,kBAAkB;YAqBlB,kBAAkB;YAelB,gBAAgB;IAS9B;;OAEG;IACH,OAAO,CAAC,OAAO;IAmBf;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAenB;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC;CAGxC;AAED,eAAe,wBAAwB,CAAC"}

package/services/error-enrichment.service.d.ts

@@ -1,95 +0,0 @@
-/**
- * Error categories for classification.
- */
-export declare const ERROR_CATEGORIES: {
-    /** Script syntax or parsing error */
-    readonly SYNTAX: "syntax";
-    /** AST validation blocked dangerous code */
-    readonly SECURITY: "security";
-    /** Script exceeded timeout */
-    readonly TIMEOUT: "timeout";
-    /** Tool not found */
-    readonly TOOL_NOT_FOUND: "tool_not_found";
-    /** Tool access denied */
-    readonly TOOL_ACCESS_DENIED: "tool_access_denied";
-    /** Tool validation error */
-    readonly TOOL_VALIDATION: "tool_validation";
-    /** Tool execution error */
-    readonly TOOL_EXECUTION: "tool_execution";
-    /** Runtime error in script */
-    readonly RUNTIME: "runtime";
-    /** Unknown error */
-    readonly UNKNOWN: "unknown";
-};
-export type ErrorCategory = (typeof ERROR_CATEGORIES)[keyof typeof ERROR_CATEGORIES];
-/**
- * Enriched error with actionable suggestions.
- */
-export interface EnrichedError {
-    /** Error category */
-    category: ErrorCategory;
-    /** User-friendly error message */
-    message: string;
-    /** Actionable suggestions for fixing the error */
-    suggestions: string[];
-    /** Related documentation links */
-    docs?: string[];
-    /** Example of correct usage (if applicable) */
-    example?: string;
-    /** Original error code (if available) */
-    code?: string;
-    /** Whether the error is recoverable */
-    recoverable: boolean;
-}
-/**
- * Error Enrichment Service
- *
- * Transforms raw errors into user-friendly, actionable error messages.
- * Provides suggestions for fixing common errors and links to documentation.
- *
- * Security: Never exposes internal details, only provides helpful guidance.
- */
-export declare class ErrorEnrichmentService {
-    /**
-     * Enrich an error with category, suggestions, and examples.
-     *
-     * @param error - The error to enrich (Error object, string, or unknown)
-     * @param context - Optional context for more specific suggestions
-     * @returns Enriched error with actionable information
-     */
-    enrich(error: unknown, context?: {
-        toolName?: string;
-        scriptSnippet?: string;
-    }): EnrichedError;
-    /**
-     * Enrich a tool-specific error.
-     */
-    enrichToolError(toolName: string, errorCode: string, rawMessage?: string): EnrichedError;
-    /**
-     * Create a brief error summary for logging.
-     */
-    summarize(error: unknown): string;
-    /**
-     * Extract error message from various error types.
-     */
-    private extractMessage;
-    /**
-     * Extract error code if available.
-     */
-    private extractCode;
-    /**
-     * Format error message for user consumption.
-     * Removes technical details while keeping useful information.
-     */
-    private formatMessage;
-    /**
-     * Get a human-readable prefix for error category.
-     */
-    private getCategoryPrefix;
-    /**
-     * Contextualize suggestions based on context.
-     */
-    private contextualizeSuggestions;
-}
-export default ErrorEnrichmentService;
-//# sourceMappingURL=error-enrichment.service.d.ts.map

package/services/error-enrichment.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"error-enrichment.service.d.ts","sourceRoot":"","sources":["../../src/services/error-enrichment.service.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,eAAO,MAAM,gBAAgB;IAC3B,qCAAqC;;IAErC,4CAA4C;;IAE5C,8BAA8B;;IAE9B,qBAAqB;;IAErB,yBAAyB;;IAEzB,4BAA4B;;IAE5B,2BAA2B;;IAE3B,8BAA8B;;IAE9B,oBAAoB;;CAEZ,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,QAAQ,EAAE,aAAa,CAAC;IACxB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;CACtB;AAkKD;;;;;;;GAOG;AACH,qBAIa,sBAAsB;IACjC;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,aAAa;IAiC9F;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa;IA+ExF;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAKjC;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;OAEG;IACH,OAAO,CAAC,WAAW;IAOnB;;;OAGG;IACH,OAAO,CAAC,aAAa;IA6BrB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAuBzB;;OAEG;IACH,OAAO,CAAC,wBAAwB;CAOjC;AAED,eAAe,sBAAsB,CAAC"}