npm - @frontmcp/plugin-codecall - Versions diffs - 1.9.1 → 1.9.3 - Mend

@frontmcp/plugin-codecall 1.9.1 → 1.9.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (21) hide show

package/codecall.plugin.d.ts +14 -2
package/codecall.plugin.d.ts.map +1 -1
package/codecall.types.d.ts.map +1 -1
package/esm/index.mjs +233 -49
package/esm/package.json +6 -6
package/index.js +228 -50
package/package.json +6 -6
package/providers/code-call.config.d.ts +7 -2
package/providers/code-call.config.d.ts.map +1 -1
package/security/script-policy.d.ts +13 -0
package/security/script-policy.d.ts.map +1 -0
package/services/enclave.service.d.ts.map +1 -1
package/services/tool-search.service.d.ts.map +1 -1
package/tools/describe.schema.d.ts +1 -1
package/tools/describe.schema.d.ts.map +1 -1
package/tools/describe.tool.d.ts.map +1 -1
package/tools/execute.schema.d.ts +4 -1
package/tools/execute.schema.d.ts.map +1 -1
package/tools/search.schema.d.ts +6 -2
package/tools/search.schema.d.ts.map +1 -1
package/tools/search.tool.d.ts.map +1 -1

package/codecall.plugin.d.ts CHANGED Viewed

@@ -1,4 +1,4 @@
-import { DynamicPlugin, type FlowCtxOf, type ProviderType } from '@frontmcp/sdk';
+import { DynamicPlugin, type FlowCtxOf, type ProviderType, type ToolType } from '@frontmcp/sdk';
 import { type CodeCallPluginOptions, type CodeCallPluginOptionsInput } from './codecall.types';
 export default class CodeCallPlugin extends DynamicPlugin<CodeCallPluginOptions, CodeCallPluginOptionsInput> {
     options: CodeCallPluginOptions;
@@ -10,13 +10,18 @@ export default class CodeCallPlugin extends DynamicPlugin<CodeCallPluginOptions,
      * without touching the plugin decorator.
      */
     static dynamicProviders(options: CodeCallPluginOptionsInput): ProviderType[];
+    /**
+     * The CodeCall meta-tools. `codecall:search` and `codecall:execute` describe the `topK` and the
+     * script limits these options give, since the model plans its calls from those descriptions.
+     */
+    static dynamicTools(options: CodeCallPluginOptionsInput): ToolType[];
     /**
      * Hook into list_tools to enforce CodeCall modes:
      *
      * Modes:
      * - codecall_only: Hide all tools from list_tools except CodeCall meta-tools.
      *                  All other tools must be discovered via codecall:search.
-     * - codecall_opt_in: Show all tools in list_tools. Tools opt-in to CodeCall via metadata.
+     * - codecall_opt_in: Show tools in list_tools unless they set visibleInListTools: false. Tools opt-in to CodeCall via metadata.
      * - metadata_driven: Use per-tool metadata.codecall to control visibility in list_tools.
      *
      * CodeCall meta-tools (codecall:search, codecall:describe, codecall:execute, codecall:invoke)
@@ -42,6 +47,13 @@ export default class CodeCallPlugin extends DynamicPlugin<CodeCallPluginOptions,
      * has no CodeCall plugin of its own.
      */
     refuseDirectCallOfHiddenTool(flowCtx: FlowCtxOf<'tools:call-tool'>): Promise<void>;
+    /**
+     * Whether a client may call the tool directly: it is listed, and a tool the SDK keeps out of `tools/list`
+     * (`visibility: 'hidden'`) also opts in with `visibleInListTools: true`, in every mode.
+     */
+    private isDirectlyCallable;
+    /** Whether the tool's app is one `appIds` puts under `codecall_only`; every app is, without `appIds`. */
+    private managesApp;
     /** Whether this instance's direct-call gate runs for the tool, so the listing hides only what that gate refuses. */
     private judges;
     private tryGetScope;

package/codecall.plugin.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"codecall.plugin.d.ts","sourceRoot":"","sources":["../src/codecall.plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,aAAa,~~EAQb~~,KAAK,SAAS,EAEd,KAAK,YAAY,~~EAElB~~,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAEhC,MAAM,kBAAkB,CAAC;~~AAsC1B~~,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;IAC1G,OAAO,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAiB;IAEtC,OAAO,CAAC,SAAS;gBAOL,OAAO,GAAE,0BAA+B;IAMpD;;;OAGG;WACa,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,YAAY,EAAE;~~IAsDrF~~;;;;;;;;;;;;;OAaG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAsB5D;;;;;;;;;;;;;;;OAeG;IAEG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAUxE,oHAAoH;IACpH,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,WAAW;IAQnB;;;;;;;;;OASG;IAEH,OAAO,CAAC,qBAAqB;~~IA4C7B~~;;;OAGG;IAEH,OAAO,CAAC,cAAc;IAStB;;OAEG;IAEH,OAAO,CAAC,mBAAmB;CAG5B"}
1	+ {"version":3,"file":"codecall.plugin.d.ts","sourceRoot":"","sources":["../src/codecall.plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,aAAa,EAUb,KAAK,SAAS,EAEd,KAAK,YAAY,EAEjB,KAAK,QAAQ,EACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAEhC,MAAM,kBAAkB,CAAC;AAuC1B,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;IAC1G,OAAO,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAiB;IAEtC,OAAO,CAAC,SAAS;gBAOL,OAAO,GAAE,0BAA+B;IAMpD;;;OAGG;WACa,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,YAAY,EAAE;IAuDrF;;;OAGG;WACa,YAAY,CAAC,OAAO,EAAE,0BAA0B,GAAG,QAAQ,EAAE;IAwB7E;;;;;;;;;;;;;OAaG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAsB5D;;;;;;;;;;;;;;;OAeG;IAEG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAUxE;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAO1B,yGAAyG;IACzG,OAAO,CAAC,UAAU;IAOlB,oHAAoH;IACpH,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,WAAW;IAQnB;;;;;;;;;OASG;IAEH,OAAO,CAAC,qBAAqB;IAyB7B;;;OAGG;IAEH,OAAO,CAAC,cAAc;IAStB;;OAEG;IAEH,OAAO,CAAC,mBAAmB;CAG5B"}

package/codecall.types.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"codecall.types.d.ts","sourceRoot":"","sources":["../src/codecall.types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAIvC;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACtD,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,0BAA0B,KAAK,OAAO,CAAC;AAajF,eAAO,MAAM,kBAAkB;;;;GAEJ,CAAC;AAE5B,eAAO,MAAM,sBAAsB;;;;;GAAkF,CAAC;AAOtH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;~~iCA0DA~~,CAAC;AAErC,eAAO,MAAM,gCAAgC;;;;gCAgB3C,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;GAA2C,CAAC;AAGhF,eAAO,MAAM,4BAA4B;;;;;iCA8BqC,CAAC;AAW/E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA6CtC,CAAC;AAEN,eAAO,MAAM,4BAA4B;;;;;;;;iCAyDpC,CAAC;AAGN,QAAA,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAqDrC,CAAC;AAgBH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAAqE,CAAC;AAK9G,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,OAAO,CAAC;YACf,MAAM,CAAC,EAAE,OAAO,CAAC;SAClB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAIF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,0BAA0B;QAClC;;;WAGG;QACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;KACjC;CACF"}
1	+ {"version":3,"file":"codecall.types.d.ts","sourceRoot":"","sources":["../src/codecall.types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAIvC;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACtD,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACtD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,yBAAyB,KAAK,OAAO,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,0BAA0B,KAAK,OAAO,CAAC;AAajF,eAAO,MAAM,kBAAkB;;;;GAEJ,CAAC;AAE5B,eAAO,MAAM,sBAAsB;;;;;GAAkF,CAAC;AAOtH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;iCA2DA,CAAC;AAErC,eAAO,MAAM,gCAAgC;;;;gCAgB3C,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;GAA2C,CAAC;AAGhF,eAAO,MAAM,4BAA4B;;;;;iCA8BqC,CAAC;AAW/E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA6CtC,CAAC;AAEN,eAAO,MAAM,4BAA4B;;;;;;;;iCAyDpC,CAAC;AAGN,QAAA,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAqDrC,CAAC;AAgBH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAAqE,CAAC;AAK9G,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;KACf,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,OAAO,CAAC;YACf,MAAM,CAAC,EAAE,OAAO,CAAC;SAClB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AAIF,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,0BAA0B;QAClC;;;WAGG;QACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;KACjC;CACF"}

package/esm/index.mjs CHANGED Viewed

@@ -14,9 +14,11 @@ import CachePlugin from "@frontmcp/plugin-cache";
 import {
   DynamicPlugin,
   FrontMcpLogger,
+  FrontMcpToolTokens,
   isEntryGatedBy,
   ListToolsHook,
   Plugin,
+  resolveToolVisibility,
   ScopeEntry,
   ToolHook,
   ToolNotFoundError
@@ -47,7 +49,8 @@ var codeCallVmOptionsSchema = z.object({
    */
   timeoutMs: z.number().positive().optional(),
   /**
-   * Allow loop constructs (for, while, do-while)
+   * Allow `for` loops besides `for-of`; false refuses every loop but `for-of` before the script runs.
+   * The sandbox always refuses `while`, `do-while` and `for-in`.
    * Defaults vary by preset
    */
   allowLoops: z.boolean().optional(),
@@ -67,8 +70,8 @@ var codeCallVmOptionsSchema = z.object({
    */
   disabledGlobals: z.array(z.string()).optional(),
   /**
-   * Allow console.log/warn/error
-   * Defaults vary by preset
+   * @deprecated Has no effect: scripts never get `console`, and one that uses it is refused before it runs.
+   * Scripts log with `mcpLog(level, message)`.
    */
   allowConsole: z.boolean().optional(),
   /**
@@ -232,15 +235,15 @@ var codeCallPluginOptionsObjectSchema = z.object({
    */
   appIds: z.array(z.string()).optional(),
   /**
-   * Default number of tools to return in search results
+   * Search results per query when a `codecall:search` call names no `topK`
    * @default 8
    */
   topK: z.number().positive().default(8),
   /**
-   * Maximum number of tool definitions to include
+   * Most tool definitions one `codecall:describe` call returns; a call that would describe more is refused
    * @default 8
    */
-  maxDefinitions: z.number().positive().default(8),
+  maxDefinitions: z.number().int().positive().default(8),
   /**
    * Optional filter function for including tools.
    * Signature: (tool: IncludeToolsFilterToolInfo) => boolean
@@ -278,7 +281,7 @@ var DEFAULT_PLUGIN_OPTIONS = {
 var codeCallPluginOptionsSchema = codeCallPluginOptionsObjectSchema.prefault(DEFAULT_PLUGIN_OPTIONS);
 // plugins/plugin-codecall/src/providers/code-call.config.ts
-import { Provider, ProviderScope, BaseConfig } from "@frontmcp/sdk";
+import { BaseConfig, Provider, ProviderScope } from "@frontmcp/sdk";
 var CodeCallConfig = class extends BaseConfig {
   constructor(options = {}) {
     const parsedConfig = codeCallPluginOptionsSchema.parse(options);
@@ -293,6 +296,10 @@ CodeCallConfig = __decorateClass([
     scope: ProviderScope.GLOBAL
   })
 ], CodeCallConfig);
+var MAX_ITERATIONS_PER_LOOP = 1e4;
+function maxToolCallsOf(vmOptions) {
+  return vmOptions.maxSteps || 100;
+}
 function resolveVmOptions(vmOptions) {
   const preset = vmOptions?.preset ?? "secure";
   const base = presetDefaults(preset);
@@ -1525,13 +1532,9 @@ var ToolSearchService = class _ToolSearchService {
         defaultSimilarityThreshold: this.config.defaultSimilarityThreshold
       });
     }
-    if (config.synonymExpansion === false) {
-      this.synonymService = null;
-    } else if (this.strategy === "tfidf") {
-      const synonymConfig = typeof config.synonymExpansion === "object" ? config.synonymExpansion : {};
-      if (synonymConfig.enabled !== false) {
-        this.synonymService = new SynonymExpansionService(synonymConfig);
-      }
+    const synonymExpansion = config.synonymExpansion ?? embeddingOptions.synonymExpansion;
+    if (this.strategy === "tfidf" && synonymExpansion !== false && synonymExpansion?.enabled !== false) {
+      this.synonymService = new SynonymExpansionService(synonymExpansion ?? {});
     }
     this.subscriptionPromise = new Promise((resolve, reject) => {
       this.subscriptionResolve = resolve;
@@ -1829,6 +1832,111 @@ import {
 } from "@enclave-vm/core";
 import { Provider as Provider3, ProviderScope as ProviderScope3 } from "@frontmcp/sdk";
+// plugins/plugin-codecall/src/security/script-policy.ts
+import {
+  ForbiddenLoopRule,
+  JSAstValidator,
+  ValidationSeverity
+} from "@enclave-vm/ast";
+var AGENTSCRIPT_PARSE_OPTIONS = {
+  ecmaVersion: "latest",
+  sourceType: "script",
+  allowReturnOutsideFunction: true,
+  allowAwaitOutsideFunction: true
+};
+var PARSE_ATTEMPTS = [
+  { wrap: (code) => code, parseOptions: AGENTSCRIPT_PARSE_OPTIONS, lineOffset: 0 },
+  { wrap: (code) => code, parseOptions: { ...AGENTSCRIPT_PARSE_OPTIONS, sourceType: "module" }, lineOffset: 0 },
+  {
+    wrap: (code) => `async function __temp__() {
+${code}
+}`,
+    parseOptions: AGENTSCRIPT_PARSE_OPTIONS,
+    lineOffset: 1
+  }
+];
+var NON_REFERENCE_KEYS = /* @__PURE__ */ new Set(["type", "loc", "start", "end", "range", "label"]);
+function isAstNode(value) {
+  return typeof value === "object" && value !== null && typeof value.type === "string";
+}
+function isPropertyName(parent, key) {
+  if (!parent || parent["computed"]) return false;
+  if (parent.type === "MemberExpression") return key === "property";
+  return key === "key" && ["Property", "MethodDefinition", "PropertyDefinition"].includes(parent.type);
+}
+function visitIdentifierReferences(node, visit, parent, key = "") {
+  if (node.type === "Identifier") {
+    if (!isPropertyName(parent, key)) visit(node);
+    return;
+  }
+  for (const [childKey, child] of Object.entries(node)) {
+    if (NON_REFERENCE_KEYS.has(childKey)) continue;
+    const children = Array.isArray(child) ? child : [child];
+    for (const childNode of children) {
+      if (isAstNode(childNode)) visitIdentifierReferences(childNode, visit, node, childKey);
+    }
+  }
+}
+var DisallowedGlobalsRule = class {
+  constructor(messages) {
+    this.messages = messages;
+  }
+  messages;
+  name = "codecall-disallowed-globals";
+  description = "Globals CodeCall scripts may not use";
+  defaultSeverity = ValidationSeverity.ERROR;
+  enabledByDefault = true;
+  validate(context) {
+    visitIdentifierReferences(context.ast, (identifier) => {
+      const message = identifier.name === void 0 ? void 0 : this.messages.get(identifier.name);
+      if (message === void 0) return;
+      context.report({
+        code: "DISALLOWED_IDENTIFIER",
+        message,
+        location: identifier.loc ? { line: identifier.loc.start.line, column: identifier.loc.start.column } : void 0,
+        data: { identifier: identifier.name }
+      });
+    });
+  }
+};
+function disallowedGlobalMessages({ disabledBuiltins, disabledGlobals }) {
+  return new Map([
+    ...disabledBuiltins.map((name) => [name, `${name} is disabled by vm.disabledBuiltins`]),
+    ...disabledGlobals.map((name) => [name, `${name} is disabled by vm.disabledGlobals`]),
+    ["console", "console is not available in CodeCall scripts; use mcpLog(level, message)"]
+  ]);
+}
+function scriptPolicyRules(options) {
+  const rules = [new DisallowedGlobalsRule(disallowedGlobalMessages(options))];
+  if (!options.allowLoops) {
+    rules.push(
+      new ForbiddenLoopRule({
+        allowFor: false,
+        allowForOf: true,
+        allowWhile: false,
+        allowDoWhile: false,
+        allowForIn: false,
+        message: "Only for-of loops are allowed (vm.allowLoops is false)"
+      })
+    );
+  }
+  return rules;
+}
+async function findScriptPolicyIssues(code, options) {
+  const validator = new JSAstValidator(scriptPolicyRules(options));
+  for (const attempt of PARSE_ATTEMPTS) {
+    const result = await validator.validate(attempt.wrap(code), {
+      parseOptions: attempt.parseOptions,
+      preScan: { enabled: false }
+    });
+    if (result.parseError) continue;
+    return result.issues.map(
+      (issue) => issue.location && attempt.lineOffset > 0 ? { ...issue, location: { ...issue.location, line: issue.location.line - attempt.lineOffset } } : issue
+    );
+  }
+  return [];
+}
 // plugins/plugin-codecall/src/utils/build-tool-namespaces.ts
 var IDENT_RE = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
 var PROTOTYPE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
@@ -2087,6 +2195,11 @@ function toolFailureName(error) {
   const name = error && typeof error === "object" ? error.name : void 0;
   return typeof name === "string" && name ? name.slice(0, 128) : "ToolError";
 }
+var ITERATION_LIMIT_PREFIX = "Maximum iteration limit exceeded";
+var ITERATION_LIMIT_ERROR = {
+  name: "Error",
+  message: `${ITERATION_LIMIT_PREFIX} (${MAX_ITERATIONS_PER_LOOP}). This limit prevents infinite loops.`
+};
 var PARSE_FAILURE_PREFIX = "Failed to parse AgentScript code: ";
 var PARSE_POSITION_RE = /\((\d+):(\d+)\)$/;
 function parseFailureOf(message) {
@@ -2133,6 +2246,22 @@ var EnclaveService = class {
         throw new ScriptTooLargeError(code.length, maxLength);
       }
     }
+    const policyIssues = await findScriptPolicyIssues(code, this.vmOptions);
+    if (policyIssues.length > 0) {
+      return {
+        success: false,
+        error: {
+          message: `AgentScript validation failed:
+${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.location.line})` : ""}: ${issue.message}`).join("\n")}`,
+          name: "ValidationError",
+          code: "VALIDATION_ERROR",
+          blockedPatterns: [...new Set(policyIssues.map((issue) => issue.code))]
+        },
+        logs,
+        timedOut: false,
+        stats: { duration: 0, toolCallCount: 0, iterationCount: 0 }
+      };
+    }
     const toolFailures = [];
     const toolHandler = async (toolName, args) => {
       try {
@@ -2180,8 +2309,8 @@ var EnclaveService = class {
     };
     const options = {
       timeout: this.vmOptions.timeoutMs,
-      maxToolCalls: this.vmOptions.maxSteps || 100,
-      maxIterations: 1e4,
+      maxToolCalls: maxToolCallsOf(this.vmOptions),
+      maxIterations: MAX_ITERATIONS_PER_LOOP,
       maxSanitizeDepth: this.vmOptions.maxSanitizeDepth,
       maxSanitizeProperties: this.vmOptions.maxSanitizeProperties,
       toolHandler,
@@ -2218,7 +2347,9 @@ var EnclaveService = class {
     if (result.success) {
       return { success: true, result: result.value, logs, timedOut: false, stats };
     }
-    const error = result.error ?? { name: "Error", message: "Script execution failed" };
+    const reportedError = result.error ?? { name: "Error", message: "Script execution failed" };
+    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === reportedError.message && failure.name === reportedError.name);
+    const error = !toolFailure && reportedError.message?.startsWith(ITERATION_LIMIT_PREFIX) ? { ...reportedError, ...ITERATION_LIMIT_ERROR } : reportedError;
     if (error.code === "ENCLAVE_ERROR" && error.message?.startsWith(PARSE_FAILURE_PREFIX)) {
       const { message, location } = parseFailureOf(error.message);
       return {
@@ -2229,7 +2360,6 @@ var EnclaveService = class {
         stats
       };
     }
-    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === error.message && failure.name === error.name);
     if (toolFailure) {
       return {
         success: false,
@@ -2300,7 +2430,9 @@ import { getCallSurface, Tool, ToolContext } from "@frontmcp/sdk";
 // plugins/plugin-codecall/src/tools/search.schema.ts
 import { z as z2 } from "@frontmcp/lazy-zod";
-var searchToolDescription = `Find tools by splitting user request into atomic actions.
+var DEFAULT_MIN_RELEVANCE_SCORE = 0.1;
+function buildSearchToolDescription(topK) {
+  return `Find tools by splitting user request into atomic actions.
 DECOMPOSE: "delete users and send email" \u2192 queries: ["delete user", "send email"]
 DECOMPOSE: "get order and refund" \u2192 queries: ["get order", "calculate refund"]
@@ -2312,18 +2444,20 @@ INPUT:
 - queries: string[] (required) - atomic action phrases, max 10
 - appIds?: string[] - filter by app
 - excludeToolNames?: string[] - skip known tools
-- topK?: number (default 5) - results per query
-- minRelevanceScore?: number (default 0.3) - minimum match threshold
+- topK?: number (default ${topK}) - results per query
+- minRelevanceScore?: number (default ${DEFAULT_MIN_RELEVANCE_SCORE}) - minimum match threshold
 OUTPUT: Flat deduplicated tool list. relevanceScore: 0.5+=good, 0.7+=strong match.
 FLOW: search \u2192 describe \u2192 execute/invoke`;
+}
+var searchToolDescription = buildSearchToolDescription(codeCallPluginOptionsSchema.parse({}).topK);
 var searchToolInputSchema = {
   queries: z2.array(z2.string().min(2).max(256)).min(1).max(10).describe("Atomic action queries. Split complex requests into simple actions."),
   appIds: z2.array(z2.string()).max(10).optional().describe("Filter by app IDs"),
   excludeToolNames: z2.array(z2.string()).max(50).optional().describe("Skip already-known tool names"),
-  topK: z2.number().int().positive().max(50).optional().default(10).describe("Results per query (default 10)"),
-  minRelevanceScore: z2.number().min(0).max(1).optional().default(0.1).describe("Minimum relevance threshold (default 0.1)")
+  topK: z2.number().int().positive().max(50).optional().describe("Results per query (defaults to the server's CodeCall topK, 8 unless configured)"),
+  minRelevanceScore: z2.number().min(0).max(1).optional().default(DEFAULT_MIN_RELEVANCE_SCORE).describe(`Minimum relevance threshold (default ${DEFAULT_MIN_RELEVANCE_SCORE})`)
 };
 var searchToolOutputSchema = z2.object({
   tools: z2.array(
@@ -2348,7 +2482,7 @@ var searchToolOutputSchema = z2.object({
 // plugins/plugin-codecall/src/tools/search.tool.ts
 var SearchTool = class extends ToolContext {
   async execute(input) {
-    const { queries, appIds, excludeToolNames = [], topK = 5, minRelevanceScore = 0.3 } = input;
+    const { queries, appIds, excludeToolNames = [], topK, minRelevanceScore = DEFAULT_MIN_RELEVANCE_SCORE } = input;
     const searchService = this.get(ToolSearchService);
     const warnings = [];
     const audit = this.tryGet(AuditLoggerService);
@@ -2730,7 +2864,7 @@ SearchKnowledgeTool = __decorateClass([
 // plugins/plugin-codecall/src/tools/describe.tool.ts
 import { toJSONSchema, z as z6, ZodType } from "@frontmcp/lazy-zod";
-import { getCallSurface as getCallSurface2, Tool as Tool4, ToolContext as ToolContext4 } from "@frontmcp/sdk";
+import { getCallSurface as getCallSurface2, InvalidInputError, Tool as Tool4, ToolContext as ToolContext4 } from "@frontmcp/sdk";
 // plugins/plugin-codecall/src/utils/describe.utils.ts
 var INTENT_PATTERNS = {
@@ -3144,7 +3278,7 @@ import { z as z5 } from "@frontmcp/lazy-zod";
 import { ToolAnnotationsSchema } from "@frontmcp/protocol";
 var describeToolDescription = `Get input/output schemas for tools from search results.
-INPUT: toolNames: string[] - tool names from search
+INPUT: toolNames: string[] - tool names from search, at most the server's maxDefinitions (8 unless configured) per call
 OUTPUT per tool: inputSchema (JSON Schema), outputSchema (JSON Schema), usageExamples (up to 5 callTool examples)
 IMPORTANT: If notFound array is non-empty \u2192 re-search with corrected queries.
@@ -3198,9 +3332,10 @@ var DescribeTool = class extends ToolContext4 {
     const audit = this.tryGet(AuditLoggerService);
     const executionId = audit ? audit.generateExecutionId() : "";
     const startedAt = Date.now();
+    const config = this.get(CodeCallConfig);
+    const maxDefinitions = config.get("maxDefinitions");
     const tools = [];
     const notFound = [];
-    const config = this.get(CodeCallConfig);
     const surface = getCallSurface2();
     for (const toolName of toolNames) {
       if (isBlockedSelfReference(toolName)) {
@@ -3214,6 +3349,11 @@ var DescribeTool = class extends ToolContext4 {
         continue;
       }
       const tool = access.entry;
+      if (tools.length >= maxDefinitions) {
+        throw new InvalidInputError(
+          `codecall:describe describes at most ${maxDefinitions} tools per call; describe the rest in another call`
+        );
+      }
       const appId = this.extractAppId(tool);
       const inputSchema = this.getInputSchema(tool);
       const outputSchema = this.toJsonSchema(tool.rawOutputSchema ?? tool.outputSchema);
@@ -3372,7 +3512,15 @@ import { getCallSurface as getCallSurface3, Tool as Tool5, ToolContext as ToolCo
 // plugins/plugin-codecall/src/tools/execute.schema.ts
 import { z as z7 } from "@frontmcp/lazy-zod";
 var MIN_EXECUTE_SCRIPT_LENGTH = 'return callTool("a",{})'.length;
-var executeToolDescription = `Execute AgentScript (safe JS subset) for multi-tool orchestration.
+var ALWAYS_BLOCKED_NAMES = ["eval", "require", "fetch", "setTimeout", "process", "globalThis"];
+function buildExecuteToolDescription(vmOptions) {
+  const loops = vmOptions.allowLoops ? "for, for-of" : "for-of";
+  const blockedLoops = vmOptions.allowLoops ? "while, do-while" : "while, do-while, for";
+  const blockedNames = /* @__PURE__ */ new Set([...ALWAYS_BLOCKED_NAMES, ...vmOptions.disabledBuiltins, ...vmOptions.disabledGlobals]);
+  const namespaces = ["Math", "JSON"].filter((name) => !blockedNames.has(name)).map((name) => `${name}.*, `);
+  const timeoutSeconds = vmOptions.timeoutMs / 1e3;
+  const maxToolCalls = maxToolCallsOf(vmOptions);
+  return `Execute AgentScript (safe JS subset) for multi-tool orchestration.
 API: await callTool(name, args, opts?)
 - Default: throws on error
@@ -3387,12 +3535,14 @@ for (const u of users.items) {
 }
 return results;
-ALLOWED: for, for-of, arrow fn, map/filter/reduce/find, Math.*, JSON.*, if/else, destructuring, spread, template literals
-BLOCKED: while, do-while, function decl, eval, require, fetch, setTimeout, process, globalThis
+ALLOWED: ${loops}, arrow fn, map/filter/reduce/find, ${namespaces.join("")}if/else, destructuring, spread, template literals
+BLOCKED: ${blockedLoops}, console (use mcpLog), function decl, ${[...blockedNames].join(", ")}
 ERRORS: NOT_FOUND | VALIDATION | EXECUTION | TIMEOUT | ACCESS_DENIED
 STATUS: ok | syntax_error | illegal_access | runtime_error | tool_error | timeout
-LIMITS: 10K iter/loop, 30s timeout, 100 calls max`;
+LIMITS: ${MAX_ITERATIONS_PER_LOOP} iterations per loop, ${timeoutSeconds}s timeout, ${maxToolCalls} tool calls`;
+}
+var executeToolDescription = buildExecuteToolDescription(resolveVmOptions());
 var executeToolInputSchema = {
   script: z7.string().min(MIN_EXECUTE_SCRIPT_LENGTH).max(100 * 1024).describe(
     "JavaScript code to execute in the sandbox. Must return a value (implicitly or via explicit return). Use callTool(name, input) to invoke tools."
@@ -3899,6 +4049,7 @@ var CodeCallPlugin = class extends DynamicPlugin {
           return new ToolSearchService(
             {
               embeddingOptions: parsedOptions.embedding,
+              defaultTopK: parsedOptions.topK,
               mode: parsedOptions.mode,
               includeTools: parsedOptions["includeTools"]
             },
@@ -3908,6 +4059,35 @@ var CodeCallPlugin = class extends DynamicPlugin {
       }
     ];
   }
+  /**
+   * The CodeCall meta-tools. `codecall:search` and `codecall:execute` describe the `topK` and the
+   * script limits these options give, since the model plans its calls from those descriptions.
+   */
+  static dynamicTools(options) {
+    const config = new CodeCallConfig(codeCallPluginOptionsSchema.parse(options)).getAll();
+    class ConfiguredSearchTool extends SearchTool {
+    }
+    class ConfiguredExecuteTool extends ExecuteTool {
+    }
+    Reflect.defineMetadata(
+      FrontMcpToolTokens.description,
+      buildSearchToolDescription(config.topK),
+      ConfiguredSearchTool
+    );
+    Reflect.defineMetadata(
+      FrontMcpToolTokens.description,
+      buildExecuteToolDescription(config.resolvedVm),
+      ConfiguredExecuteTool
+    );
+    return [
+      ConfiguredSearchTool,
+      SearchSkillsTool,
+      SearchKnowledgeTool,
+      DescribeTool,
+      ConfiguredExecuteTool,
+      InvokeTool
+    ];
+  }
   async adjustListTools(flowCtx) {
     const logger = this.getLogger();
     const { resolvedTools } = flowCtx.state;
@@ -3927,11 +4107,28 @@ var CodeCallPlugin = class extends DynamicPlugin {
   async refuseDirectCallOfHiddenTool(flowCtx) {
     const { tool } = flowCtx.state;
     if (!tool || tool.owner?.kind === "scope") return;
-    if (this.shouldShowInListTools(tool, this.options.mode)) return;
+    if (this.isDirectlyCallable(tool)) return;
     if (isInProcessDispatch(callContextOf(flowCtx))) return;
     this.getLogger().verbose("refused a direct tools/call of a tool CodeCall hides", { tool: tool.fullName });
     throw new ToolNotFoundError(flowCtx.state.input?.name ?? tool.name);
   }
+  /**
+   * Whether a client may call the tool directly: it is listed, and a tool the SDK keeps out of `tools/list`
+   * (`visibility: 'hidden'`) also opts in with `visibleInListTools: true`, in every mode.
+   */
+  isDirectlyCallable(tool) {
+    if (!this.managesApp(tool)) return true;
+    if (!this.shouldShowInListTools(tool, this.options.mode)) return false;
+    if (resolveToolVisibility(tool.metadata) !== "hidden") return true;
+    return this.getCodeCallMetadata(tool)?.visibleInListTools === true;
+  }
+  /** Whether the tool's app is one `appIds` puts under `codecall_only`; every app is, without `appIds`. */
+  managesApp(tool) {
+    const managedAppIds = this.options.appIds;
+    if (this.options.mode !== "codecall_only" || !managedAppIds || managedAppIds.length === 0) return true;
+    const toolOwnerAppId = tool.owner?.kind === "app" ? tool.owner.id : void 0;
+    return toolOwnerAppId !== void 0 && managedAppIds.includes(toolOwnerAppId);
+  }
   /** Whether this instance's direct-call gate runs for the tool, so the listing hides only what that gate refuses. */
   judges(scope, entry) {
     return !scope?.hooks || isEntryGatedBy(scope, entry, this);
@@ -3959,23 +4156,11 @@ var CodeCallPlugin = class extends DynamicPlugin {
     }
     const codecallMeta = this.getCodeCallMetadata(tool);
     switch (mode) {
-      case "codecall_only": {
-        const managedAppIds = this.options.appIds;
-        if (managedAppIds && managedAppIds.length > 0) {
-          const toolOwnerAppId = tool.owner?.kind === "app" ? tool.owner.id : void 0;
-          if (!toolOwnerAppId || !managedAppIds.includes(toolOwnerAppId)) {
-            return true;
-          }
-        }
-        return codecallMeta?.visibleInListTools === true;
-      }
+      case "codecall_only":
+        return !this.managesApp(tool) || codecallMeta?.visibleInListTools === true;
       case "codecall_opt_in":
-        return true;
       case "metadata_driven":
-        if (codecallMeta?.visibleInListTools === false) {
-          return false;
-        }
-        return true;
+        return codecallMeta?.visibleInListTools !== false;
       default:
         return true;
     }
@@ -4006,8 +4191,7 @@ CodeCallPlugin = __decorateClass([
     name: "codecall",
     description: "CodeCall plugin: AgentScript-based meta-tools for orchestrating MCP tools",
     providers: [],
-    plugins: [CachePlugin],
-    tools: [SearchTool, SearchSkillsTool, SearchKnowledgeTool, DescribeTool, ExecuteTool, InvokeTool]
+    plugins: [CachePlugin]
   })
 ], CodeCallPlugin);
 export {

package/esm/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -50,14 +50,14 @@
   "dependencies": {
     "@enclave-vm/ast": "^2.16.0",
     "@enclave-vm/core": "^2.16.0",
-    "@frontmcp/protocol": "1.9.1",
-    "@frontmcp/sdk": "1.9.1",
+    "@frontmcp/protocol": "1.9.3",
+    "@frontmcp/sdk": "1.9.3",
     "acorn": "^8.15.0",
-    "vectoriadb": "^2.3.2"
+    "vectoriadb": "^2.3.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.1",
-    "@frontmcp/plugin-cache": "1.9.1"
+    "@frontmcp/lazy-zod": "1.9.3",
+    "@frontmcp/plugin-cache": "1.9.3"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/index.js CHANGED Viewed

@@ -83,7 +83,8 @@ var codeCallVmOptionsSchema = import_lazy_zod.z.object({
    */
   timeoutMs: import_lazy_zod.z.number().positive().optional(),
   /**
-   * Allow loop constructs (for, while, do-while)
+   * Allow `for` loops besides `for-of`; false refuses every loop but `for-of` before the script runs.
+   * The sandbox always refuses `while`, `do-while` and `for-in`.
    * Defaults vary by preset
    */
   allowLoops: import_lazy_zod.z.boolean().optional(),
@@ -103,8 +104,8 @@ var codeCallVmOptionsSchema = import_lazy_zod.z.object({
    */
   disabledGlobals: import_lazy_zod.z.array(import_lazy_zod.z.string()).optional(),
   /**
-   * Allow console.log/warn/error
-   * Defaults vary by preset
+   * @deprecated Has no effect: scripts never get `console`, and one that uses it is refused before it runs.
+   * Scripts log with `mcpLog(level, message)`.
    */
   allowConsole: import_lazy_zod.z.boolean().optional(),
   /**
@@ -268,15 +269,15 @@ var codeCallPluginOptionsObjectSchema = import_lazy_zod.z.object({
    */
   appIds: import_lazy_zod.z.array(import_lazy_zod.z.string()).optional(),
   /**
-   * Default number of tools to return in search results
+   * Search results per query when a `codecall:search` call names no `topK`
    * @default 8
    */
   topK: import_lazy_zod.z.number().positive().default(8),
   /**
-   * Maximum number of tool definitions to include
+   * Most tool definitions one `codecall:describe` call returns; a call that would describe more is refused
    * @default 8
    */
-  maxDefinitions: import_lazy_zod.z.number().positive().default(8),
+  maxDefinitions: import_lazy_zod.z.number().int().positive().default(8),
   /**
    * Optional filter function for including tools.
    * Signature: (tool: IncludeToolsFilterToolInfo) => boolean
@@ -329,6 +330,10 @@ CodeCallConfig = __decorateClass([
     scope: import_sdk.ProviderScope.GLOBAL
   })
 ], CodeCallConfig);
+var MAX_ITERATIONS_PER_LOOP = 1e4;
+function maxToolCallsOf(vmOptions) {
+  return vmOptions.maxSteps || 100;
+}
 function resolveVmOptions(vmOptions) {
   const preset = vmOptions?.preset ?? "secure";
   const base = presetDefaults(preset);
@@ -1561,13 +1566,9 @@ var ToolSearchService = class _ToolSearchService {
         defaultSimilarityThreshold: this.config.defaultSimilarityThreshold
       });
     }
-    if (config.synonymExpansion === false) {
-      this.synonymService = null;
-    } else if (this.strategy === "tfidf") {
-      const synonymConfig = typeof config.synonymExpansion === "object" ? config.synonymExpansion : {};
-      if (synonymConfig.enabled !== false) {
-        this.synonymService = new SynonymExpansionService(synonymConfig);
-      }
+    const synonymExpansion = config.synonymExpansion ?? embeddingOptions.synonymExpansion;
+    if (this.strategy === "tfidf" && synonymExpansion !== false && synonymExpansion?.enabled !== false) {
+      this.synonymService = new SynonymExpansionService(synonymExpansion ?? {});
     }
     this.subscriptionPromise = new Promise((resolve, reject) => {
       this.subscriptionResolve = resolve;
@@ -1863,6 +1864,107 @@ var ToolSearchService = class _ToolSearchService {
 var import_core = require("@enclave-vm/core");
 var import_sdk4 = require("@frontmcp/sdk");
+// plugins/plugin-codecall/src/security/script-policy.ts
+var import_ast = require("@enclave-vm/ast");
+var AGENTSCRIPT_PARSE_OPTIONS = {
+  ecmaVersion: "latest",
+  sourceType: "script",
+  allowReturnOutsideFunction: true,
+  allowAwaitOutsideFunction: true
+};
+var PARSE_ATTEMPTS = [
+  { wrap: (code) => code, parseOptions: AGENTSCRIPT_PARSE_OPTIONS, lineOffset: 0 },
+  { wrap: (code) => code, parseOptions: { ...AGENTSCRIPT_PARSE_OPTIONS, sourceType: "module" }, lineOffset: 0 },
+  {
+    wrap: (code) => `async function __temp__() {
+${code}
+}`,
+    parseOptions: AGENTSCRIPT_PARSE_OPTIONS,
+    lineOffset: 1
+  }
+];
+var NON_REFERENCE_KEYS = /* @__PURE__ */ new Set(["type", "loc", "start", "end", "range", "label"]);
+function isAstNode(value) {
+  return typeof value === "object" && value !== null && typeof value.type === "string";
+}
+function isPropertyName(parent, key) {
+  if (!parent || parent["computed"]) return false;
+  if (parent.type === "MemberExpression") return key === "property";
+  return key === "key" && ["Property", "MethodDefinition", "PropertyDefinition"].includes(parent.type);
+}
+function visitIdentifierReferences(node, visit, parent, key = "") {
+  if (node.type === "Identifier") {
+    if (!isPropertyName(parent, key)) visit(node);
+    return;
+  }
+  for (const [childKey, child] of Object.entries(node)) {
+    if (NON_REFERENCE_KEYS.has(childKey)) continue;
+    const children = Array.isArray(child) ? child : [child];
+    for (const childNode of children) {
+      if (isAstNode(childNode)) visitIdentifierReferences(childNode, visit, node, childKey);
+    }
+  }
+}
+var DisallowedGlobalsRule = class {
+  constructor(messages) {
+    this.messages = messages;
+  }
+  messages;
+  name = "codecall-disallowed-globals";
+  description = "Globals CodeCall scripts may not use";
+  defaultSeverity = import_ast.ValidationSeverity.ERROR;
+  enabledByDefault = true;
+  validate(context) {
+    visitIdentifierReferences(context.ast, (identifier) => {
+      const message = identifier.name === void 0 ? void 0 : this.messages.get(identifier.name);
+      if (message === void 0) return;
+      context.report({
+        code: "DISALLOWED_IDENTIFIER",
+        message,
+        location: identifier.loc ? { line: identifier.loc.start.line, column: identifier.loc.start.column } : void 0,
+        data: { identifier: identifier.name }
+      });
+    });
+  }
+};
+function disallowedGlobalMessages({ disabledBuiltins, disabledGlobals }) {
+  return new Map([
+    ...disabledBuiltins.map((name) => [name, `${name} is disabled by vm.disabledBuiltins`]),
+    ...disabledGlobals.map((name) => [name, `${name} is disabled by vm.disabledGlobals`]),
+    ["console", "console is not available in CodeCall scripts; use mcpLog(level, message)"]
+  ]);
+}
+function scriptPolicyRules(options) {
+  const rules = [new DisallowedGlobalsRule(disallowedGlobalMessages(options))];
+  if (!options.allowLoops) {
+    rules.push(
+      new import_ast.ForbiddenLoopRule({
+        allowFor: false,
+        allowForOf: true,
+        allowWhile: false,
+        allowDoWhile: false,
+        allowForIn: false,
+        message: "Only for-of loops are allowed (vm.allowLoops is false)"
+      })
+    );
+  }
+  return rules;
+}
+async function findScriptPolicyIssues(code, options) {
+  const validator = new import_ast.JSAstValidator(scriptPolicyRules(options));
+  for (const attempt of PARSE_ATTEMPTS) {
+    const result = await validator.validate(attempt.wrap(code), {
+      parseOptions: attempt.parseOptions,
+      preScan: { enabled: false }
+    });
+    if (result.parseError) continue;
+    return result.issues.map(
+      (issue) => issue.location && attempt.lineOffset > 0 ? { ...issue, location: { ...issue.location, line: issue.location.line - attempt.lineOffset } } : issue
+    );
+  }
+  return [];
+}
 // plugins/plugin-codecall/src/utils/build-tool-namespaces.ts
 var IDENT_RE = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
 var PROTOTYPE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
@@ -1997,7 +2099,7 @@ function toSandboxToolNamespaces(namespaces, reservedGlobals = []) {
 }
 // plugins/plugin-codecall/src/utils/script-lines.ts
-var import_ast = require("@enclave-vm/ast");
+var import_ast2 = require("@enclave-vm/ast");
 var acorn = __toESM(require("acorn"));
 var PARSE_OPTIONS = { ecmaVersion: "latest", locations: true };
 var NON_CHILD_KEYS = /* @__PURE__ */ new Set(["type", "loc", "start", "end", "range"]);
@@ -2038,8 +2140,8 @@ function parseBody(code, sourceType) {
 }
 function treesOf(script) {
   try {
-    const wrap = !(0, import_ast.isWrappedInMain)(script);
-    const printed = parseBody((0, import_ast.transformAgentScript)(script, { wrapInMain: wrap }), "script");
+    const wrap = !(0, import_ast2.isWrappedInMain)(script);
+    const printed = parseBody((0, import_ast2.transformAgentScript)(script, { wrapInMain: wrap }), "script");
     const { body, offset } = parseScript(script);
     if (!wrap) return { printed, script: body, offset };
     const main = printed[0]?.["body"];
@@ -2121,6 +2223,11 @@ function toolFailureName(error) {
   const name = error && typeof error === "object" ? error.name : void 0;
   return typeof name === "string" && name ? name.slice(0, 128) : "ToolError";
 }
+var ITERATION_LIMIT_PREFIX = "Maximum iteration limit exceeded";
+var ITERATION_LIMIT_ERROR = {
+  name: "Error",
+  message: `${ITERATION_LIMIT_PREFIX} (${MAX_ITERATIONS_PER_LOOP}). This limit prevents infinite loops.`
+};
 var PARSE_FAILURE_PREFIX = "Failed to parse AgentScript code: ";
 var PARSE_POSITION_RE = /\((\d+):(\d+)\)$/;
 function parseFailureOf(message) {
@@ -2167,6 +2274,22 @@ var EnclaveService = class {
         throw new ScriptTooLargeError(code.length, maxLength);
       }
     }
+    const policyIssues = await findScriptPolicyIssues(code, this.vmOptions);
+    if (policyIssues.length > 0) {
+      return {
+        success: false,
+        error: {
+          message: `AgentScript validation failed:
+${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.location.line})` : ""}: ${issue.message}`).join("\n")}`,
+          name: "ValidationError",
+          code: "VALIDATION_ERROR",
+          blockedPatterns: [...new Set(policyIssues.map((issue) => issue.code))]
+        },
+        logs,
+        timedOut: false,
+        stats: { duration: 0, toolCallCount: 0, iterationCount: 0 }
+      };
+    }
     const toolFailures = [];
     const toolHandler = async (toolName, args) => {
       try {
@@ -2214,8 +2337,8 @@ var EnclaveService = class {
     };
     const options = {
       timeout: this.vmOptions.timeoutMs,
-      maxToolCalls: this.vmOptions.maxSteps || 100,
-      maxIterations: 1e4,
+      maxToolCalls: maxToolCallsOf(this.vmOptions),
+      maxIterations: MAX_ITERATIONS_PER_LOOP,
       maxSanitizeDepth: this.vmOptions.maxSanitizeDepth,
       maxSanitizeProperties: this.vmOptions.maxSanitizeProperties,
       toolHandler,
@@ -2252,7 +2375,9 @@ var EnclaveService = class {
     if (result.success) {
       return { success: true, result: result.value, logs, timedOut: false, stats };
     }
-    const error = result.error ?? { name: "Error", message: "Script execution failed" };
+    const reportedError = result.error ?? { name: "Error", message: "Script execution failed" };
+    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === reportedError.message && failure.name === reportedError.name);
+    const error = !toolFailure && reportedError.message?.startsWith(ITERATION_LIMIT_PREFIX) ? { ...reportedError, ...ITERATION_LIMIT_ERROR } : reportedError;
     if (error.code === "ENCLAVE_ERROR" && error.message?.startsWith(PARSE_FAILURE_PREFIX)) {
       const { message, location } = parseFailureOf(error.message);
       return {
@@ -2263,7 +2388,6 @@ var EnclaveService = class {
         stats
       };
     }
-    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === error.message && failure.name === error.name);
     if (toolFailure) {
       return {
         success: false,
@@ -2334,7 +2458,9 @@ var import_sdk5 = require("@frontmcp/sdk");
 // plugins/plugin-codecall/src/tools/search.schema.ts
 var import_lazy_zod2 = require("@frontmcp/lazy-zod");
-var searchToolDescription = `Find tools by splitting user request into atomic actions.
+var DEFAULT_MIN_RELEVANCE_SCORE = 0.1;
+function buildSearchToolDescription(topK) {
+  return `Find tools by splitting user request into atomic actions.
 DECOMPOSE: "delete users and send email" \u2192 queries: ["delete user", "send email"]
 DECOMPOSE: "get order and refund" \u2192 queries: ["get order", "calculate refund"]
@@ -2346,18 +2472,20 @@ INPUT:
 - queries: string[] (required) - atomic action phrases, max 10
 - appIds?: string[] - filter by app
 - excludeToolNames?: string[] - skip known tools
-- topK?: number (default 5) - results per query
-- minRelevanceScore?: number (default 0.3) - minimum match threshold
+- topK?: number (default ${topK}) - results per query
+- minRelevanceScore?: number (default ${DEFAULT_MIN_RELEVANCE_SCORE}) - minimum match threshold
 OUTPUT: Flat deduplicated tool list. relevanceScore: 0.5+=good, 0.7+=strong match.
 FLOW: search \u2192 describe \u2192 execute/invoke`;
+}
+var searchToolDescription = buildSearchToolDescription(codeCallPluginOptionsSchema.parse({}).topK);
 var searchToolInputSchema = {
   queries: import_lazy_zod2.z.array(import_lazy_zod2.z.string().min(2).max(256)).min(1).max(10).describe("Atomic action queries. Split complex requests into simple actions."),
   appIds: import_lazy_zod2.z.array(import_lazy_zod2.z.string()).max(10).optional().describe("Filter by app IDs"),
   excludeToolNames: import_lazy_zod2.z.array(import_lazy_zod2.z.string()).max(50).optional().describe("Skip already-known tool names"),
-  topK: import_lazy_zod2.z.number().int().positive().max(50).optional().default(10).describe("Results per query (default 10)"),
-  minRelevanceScore: import_lazy_zod2.z.number().min(0).max(1).optional().default(0.1).describe("Minimum relevance threshold (default 0.1)")
+  topK: import_lazy_zod2.z.number().int().positive().max(50).optional().describe("Results per query (defaults to the server's CodeCall topK, 8 unless configured)"),
+  minRelevanceScore: import_lazy_zod2.z.number().min(0).max(1).optional().default(DEFAULT_MIN_RELEVANCE_SCORE).describe(`Minimum relevance threshold (default ${DEFAULT_MIN_RELEVANCE_SCORE})`)
 };
 var searchToolOutputSchema = import_lazy_zod2.z.object({
   tools: import_lazy_zod2.z.array(
@@ -2382,7 +2510,7 @@ var searchToolOutputSchema = import_lazy_zod2.z.object({
 // plugins/plugin-codecall/src/tools/search.tool.ts
 var SearchTool = class extends import_sdk5.ToolContext {
   async execute(input) {
-    const { queries, appIds, excludeToolNames = [], topK = 5, minRelevanceScore = 0.3 } = input;
+    const { queries, appIds, excludeToolNames = [], topK, minRelevanceScore = DEFAULT_MIN_RELEVANCE_SCORE } = input;
     const searchService = this.get(ToolSearchService);
     const warnings = [];
     const audit = this.tryGet(AuditLoggerService);
@@ -3178,7 +3306,7 @@ var import_lazy_zod5 = require("@frontmcp/lazy-zod");
 var import_protocol = require("@frontmcp/protocol");
 var describeToolDescription = `Get input/output schemas for tools from search results.
-INPUT: toolNames: string[] - tool names from search
+INPUT: toolNames: string[] - tool names from search, at most the server's maxDefinitions (8 unless configured) per call
 OUTPUT per tool: inputSchema (JSON Schema), outputSchema (JSON Schema), usageExamples (up to 5 callTool examples)
 IMPORTANT: If notFound array is non-empty \u2192 re-search with corrected queries.
@@ -3232,9 +3360,10 @@ var DescribeTool = class extends import_sdk8.ToolContext {
     const audit = this.tryGet(AuditLoggerService);
     const executionId = audit ? audit.generateExecutionId() : "";
     const startedAt = Date.now();
+    const config = this.get(CodeCallConfig);
+    const maxDefinitions = config.get("maxDefinitions");
     const tools = [];
     const notFound = [];
-    const config = this.get(CodeCallConfig);
     const surface = (0, import_sdk8.getCallSurface)();
     for (const toolName of toolNames) {
       if (isBlockedSelfReference(toolName)) {
@@ -3248,6 +3377,11 @@ var DescribeTool = class extends import_sdk8.ToolContext {
         continue;
       }
       const tool = access.entry;
+      if (tools.length >= maxDefinitions) {
+        throw new import_sdk8.InvalidInputError(
+          `codecall:describe describes at most ${maxDefinitions} tools per call; describe the rest in another call`
+        );
+      }
       const appId = this.extractAppId(tool);
       const inputSchema = this.getInputSchema(tool);
       const outputSchema = this.toJsonSchema(tool.rawOutputSchema ?? tool.outputSchema);
@@ -3406,7 +3540,15 @@ var import_sdk9 = require("@frontmcp/sdk");
 // plugins/plugin-codecall/src/tools/execute.schema.ts
 var import_lazy_zod7 = require("@frontmcp/lazy-zod");
 var MIN_EXECUTE_SCRIPT_LENGTH = 'return callTool("a",{})'.length;
-var executeToolDescription = `Execute AgentScript (safe JS subset) for multi-tool orchestration.
+var ALWAYS_BLOCKED_NAMES = ["eval", "require", "fetch", "setTimeout", "process", "globalThis"];
+function buildExecuteToolDescription(vmOptions) {
+  const loops = vmOptions.allowLoops ? "for, for-of" : "for-of";
+  const blockedLoops = vmOptions.allowLoops ? "while, do-while" : "while, do-while, for";
+  const blockedNames = /* @__PURE__ */ new Set([...ALWAYS_BLOCKED_NAMES, ...vmOptions.disabledBuiltins, ...vmOptions.disabledGlobals]);
+  const namespaces = ["Math", "JSON"].filter((name) => !blockedNames.has(name)).map((name) => `${name}.*, `);
+  const timeoutSeconds = vmOptions.timeoutMs / 1e3;
+  const maxToolCalls = maxToolCallsOf(vmOptions);
+  return `Execute AgentScript (safe JS subset) for multi-tool orchestration.
 API: await callTool(name, args, opts?)
 - Default: throws on error
@@ -3421,12 +3563,14 @@ for (const u of users.items) {
 }
 return results;
-ALLOWED: for, for-of, arrow fn, map/filter/reduce/find, Math.*, JSON.*, if/else, destructuring, spread, template literals
-BLOCKED: while, do-while, function decl, eval, require, fetch, setTimeout, process, globalThis
+ALLOWED: ${loops}, arrow fn, map/filter/reduce/find, ${namespaces.join("")}if/else, destructuring, spread, template literals
+BLOCKED: ${blockedLoops}, console (use mcpLog), function decl, ${[...blockedNames].join(", ")}
 ERRORS: NOT_FOUND | VALIDATION | EXECUTION | TIMEOUT | ACCESS_DENIED
 STATUS: ok | syntax_error | illegal_access | runtime_error | tool_error | timeout
-LIMITS: 10K iter/loop, 30s timeout, 100 calls max`;
+LIMITS: ${MAX_ITERATIONS_PER_LOOP} iterations per loop, ${timeoutSeconds}s timeout, ${maxToolCalls} tool calls`;
+}
+var executeToolDescription = buildExecuteToolDescription(resolveVmOptions());
 var executeToolInputSchema = {
   script: import_lazy_zod7.z.string().min(MIN_EXECUTE_SCRIPT_LENGTH).max(100 * 1024).describe(
     "JavaScript code to execute in the sandbox. Must return a value (implicitly or via explicit return). Use callTool(name, input) to invoke tools."
@@ -3933,6 +4077,7 @@ var CodeCallPlugin = class extends import_sdk11.DynamicPlugin {
           return new ToolSearchService(
             {
               embeddingOptions: parsedOptions.embedding,
+              defaultTopK: parsedOptions.topK,
               mode: parsedOptions.mode,
               includeTools: parsedOptions["includeTools"]
             },
@@ -3942,6 +4087,35 @@ var CodeCallPlugin = class extends import_sdk11.DynamicPlugin {
       }
     ];
   }
+  /**
+   * The CodeCall meta-tools. `codecall:search` and `codecall:execute` describe the `topK` and the
+   * script limits these options give, since the model plans its calls from those descriptions.
+   */
+  static dynamicTools(options) {
+    const config = new CodeCallConfig(codeCallPluginOptionsSchema.parse(options)).getAll();
+    class ConfiguredSearchTool extends SearchTool {
+    }
+    class ConfiguredExecuteTool extends ExecuteTool {
+    }
+    Reflect.defineMetadata(
+      import_sdk11.FrontMcpToolTokens.description,
+      buildSearchToolDescription(config.topK),
+      ConfiguredSearchTool
+    );
+    Reflect.defineMetadata(
+      import_sdk11.FrontMcpToolTokens.description,
+      buildExecuteToolDescription(config.resolvedVm),
+      ConfiguredExecuteTool
+    );
+    return [
+      ConfiguredSearchTool,
+      SearchSkillsTool,
+      SearchKnowledgeTool,
+      DescribeTool,
+      ConfiguredExecuteTool,
+      InvokeTool
+    ];
+  }
   async adjustListTools(flowCtx) {
     const logger = this.getLogger();
     const { resolvedTools } = flowCtx.state;
@@ -3961,11 +4135,28 @@ var CodeCallPlugin = class extends import_sdk11.DynamicPlugin {
   async refuseDirectCallOfHiddenTool(flowCtx) {
     const { tool } = flowCtx.state;
     if (!tool || tool.owner?.kind === "scope") return;
-    if (this.shouldShowInListTools(tool, this.options.mode)) return;
+    if (this.isDirectlyCallable(tool)) return;
     if (isInProcessDispatch(callContextOf(flowCtx))) return;
     this.getLogger().verbose("refused a direct tools/call of a tool CodeCall hides", { tool: tool.fullName });
     throw new import_sdk11.ToolNotFoundError(flowCtx.state.input?.name ?? tool.name);
   }
+  /**
+   * Whether a client may call the tool directly: it is listed, and a tool the SDK keeps out of `tools/list`
+   * (`visibility: 'hidden'`) also opts in with `visibleInListTools: true`, in every mode.
+   */
+  isDirectlyCallable(tool) {
+    if (!this.managesApp(tool)) return true;
+    if (!this.shouldShowInListTools(tool, this.options.mode)) return false;
+    if ((0, import_sdk11.resolveToolVisibility)(tool.metadata) !== "hidden") return true;
+    return this.getCodeCallMetadata(tool)?.visibleInListTools === true;
+  }
+  /** Whether the tool's app is one `appIds` puts under `codecall_only`; every app is, without `appIds`. */
+  managesApp(tool) {
+    const managedAppIds = this.options.appIds;
+    if (this.options.mode !== "codecall_only" || !managedAppIds || managedAppIds.length === 0) return true;
+    const toolOwnerAppId = tool.owner?.kind === "app" ? tool.owner.id : void 0;
+    return toolOwnerAppId !== void 0 && managedAppIds.includes(toolOwnerAppId);
+  }
   /** Whether this instance's direct-call gate runs for the tool, so the listing hides only what that gate refuses. */
   judges(scope, entry) {
     return !scope?.hooks || (0, import_sdk11.isEntryGatedBy)(scope, entry, this);
@@ -3993,23 +4184,11 @@ var CodeCallPlugin = class extends import_sdk11.DynamicPlugin {
     }
     const codecallMeta = this.getCodeCallMetadata(tool);
     switch (mode) {
-      case "codecall_only": {
-        const managedAppIds = this.options.appIds;
-        if (managedAppIds && managedAppIds.length > 0) {
-          const toolOwnerAppId = tool.owner?.kind === "app" ? tool.owner.id : void 0;
-          if (!toolOwnerAppId || !managedAppIds.includes(toolOwnerAppId)) {
-            return true;
-          }
-        }
-        return codecallMeta?.visibleInListTools === true;
-      }
+      case "codecall_only":
+        return !this.managesApp(tool) || codecallMeta?.visibleInListTools === true;
       case "codecall_opt_in":
-        return true;
       case "metadata_driven":
-        if (codecallMeta?.visibleInListTools === false) {
-          return false;
-        }
-        return true;
+        return codecallMeta?.visibleInListTools !== false;
       default:
         return true;
     }
@@ -4040,8 +4219,7 @@ CodeCallPlugin = __decorateClass([
     name: "codecall",
     description: "CodeCall plugin: AgentScript-based meta-tools for orchestrating MCP tools",
     providers: [],
-    plugins: [import_plugin_cache.default],
-    tools: [SearchTool, SearchSkillsTool, SearchKnowledgeTool, DescribeTool, ExecuteTool, InvokeTool]
+    plugins: [import_plugin_cache.default]
   })
 ], CodeCallPlugin);
 // Annotate the CommonJS export names for ESM import in node:

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -50,14 +50,14 @@
   "dependencies": {
     "@enclave-vm/ast": "^2.16.0",
     "@enclave-vm/core": "^2.16.0",
-    "@frontmcp/protocol": "1.9.1",
-    "@frontmcp/sdk": "1.9.1",
+    "@frontmcp/protocol": "1.9.3",
+    "@frontmcp/sdk": "1.9.3",
     "acorn": "^8.15.0",
-    "vectoriadb": "^2.3.2"
+    "vectoriadb": "^2.3.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.1",
-    "@frontmcp/plugin-cache": "1.9.1"
+    "@frontmcp/lazy-zod": "1.9.3",
+    "@frontmcp/plugin-cache": "1.9.3"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/providers/code-call.config.d.ts CHANGED Viewed

@@ -1,6 +1,6 @@
 import { BaseConfig } from '@frontmcp/sdk';
-import { CodeCallPluginOptions } from '../codecall.types';
-import { ResolvedCodeCallVmOptions } from '../codecall.symbol';
+import { type ResolvedCodeCallVmOptions } from '../codecall.symbol';
+import { type CodeCallPluginOptions, type CodeCallVmOptions } from '../codecall.types';
 /**
  * CodeCall configuration provider with convict-like API
  * Extends BaseConfig to provide type-safe dotted path access
@@ -27,4 +27,9 @@ export default class CodeCallConfig extends BaseConfig<CodeCallPluginOptions & {
 }> {
     constructor(options?: Partial<CodeCallPluginOptions>);
 }
+/** Iterations the sandbox allows each loop of a script; not configurable. */
+export declare const MAX_ITERATIONS_PER_LOOP = 10000;
+/** Tool calls a script may make: `vm.maxSteps`, else 100. */
+export declare function maxToolCallsOf(vmOptions: ResolvedCodeCallVmOptions): number;
+export declare function resolveVmOptions(vmOptions?: CodeCallVmOptions): ResolvedCodeCallVmOptions;
 //# sourceMappingURL=code-call.config.d.ts.map

package/providers/code-call.config.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"code-call.config.d.ts","sourceRoot":"","sources":["../../src/providers/code-call.config.ts"],"names":[],"mappings":"AAEA,OAAO,~~EAA2B~~,UAAU,~~EAAE~~,MAAM,eAAe,CAAC;~~AACpE~~,OAAO,~~EACL~~,~~qBAAqB~~,~~EAItB~~,MAAM,~~mBAAmB~~,CAAC;~~AAC3B~~,OAAO,~~EAAE~~,~~yBAAyB~~,~~EAAE~~,MAAM,~~oBAAoB~~,CAAC;~~AAE/D~~;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,UAAU,CACpD,qBAAqB,GAAG;IAAE,UAAU,EAAE,yBAAyB,CAAA;CAAE,CAClE;gBACa,OAAO,GAAE,OAAO,CAAC,qBAAqB,CAAM;CASzD"}
1	+ {"version":3,"file":"code-call.config.d.ts","sourceRoot":"","sources":["../../src/providers/code-call.config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAA2B,MAAM,eAAe,CAAC;AAEpE,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EAEvB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,UAAU,CACpD,qBAAqB,GAAG;IAAE,UAAU,EAAE,yBAAyB,CAAA;CAAE,CAClE;gBACa,OAAO,GAAE,OAAO,CAAC,qBAAqB,CAAM;CASzD;AAED,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAE7C,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,SAAS,EAAE,yBAAyB,GAAG,MAAM,CAE3E;AAID,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,iBAAiB,GAAG,yBAAyB,CAWzF"}

package/security/script-policy.d.ts ADDED Viewed

@@ -0,0 +1,13 @@
+import { type ValidationIssue } from '@enclave-vm/ast';
+import type { ResolvedCodeCallVmOptions } from '../codecall.symbol';
+type ScriptPolicyOptions = Pick<ResolvedCodeCallVmOptions, 'allowLoops' | 'disabledBuiltins' | 'disabledGlobals'>;
+/**
+ * The places a script uses a loop `vm.allowLoops: false` turns off, a global `vm.disabledBuiltins` or
+ * `vm.disabledGlobals` lists, or `console`, which the sandbox never gives a script, in the script's
+ * own lines. The sandbox takes no option for these, so CodeCall checks before it runs the script,
+ * parsing it the way the sandbox does. A script none of those parses accept is left to the sandbox,
+ * which fails on the same parse and reports the syntax error.
+ */
+export declare function findScriptPolicyIssues(code: string, options: ScriptPolicyOptions): Promise<ValidationIssue[]>;
+export {};
+//# sourceMappingURL=script-policy.d.ts.map

package/security/script-policy.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"script-policy.d.ts","sourceRoot":"","sources":["../../src/security/script-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,KAAK,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,kBAAkB,GAAG,iBAAiB,CAAC,CAAC;AA2GlH;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAenH"}

package/services/enclave.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"enclave.service.d.ts","sourceRoot":"","sources":["../../src/services/enclave.service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,oBAAoB,CAAC;AAE3F,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;~~AAIhE~~;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,kGAAkG;QAClG,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;~~AAkDD~~;;;;;;;;GAQG;AACH;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASpD;AAOD,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,MAAM,EAAE,cAAc;IAOlC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;~~IAwGhG~~;;OAEG;IACH,OAAO,CAAC,gBAAgB;~~CAyFzB~~"}
1	+ {"version":3,"file":"enclave.service.d.ts","sourceRoot":"","sources":["../../src/services/enclave.service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,oBAAoB,CAAC;AAE3F,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;AAMhE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,kGAAkG;QAClG,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AA2DD;;;;;;;;GAQG;AACH;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASpD;AAOD,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,MAAM,EAAE,cAAc;IAOlC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA0HhG;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAgGzB"}

package/services/tool-search.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"tool-search.service.d.ts","sourceRoot":"","sources":["../../src/services/tool-search.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,KAAK,EACV,iBAAiB,IAAI,uBAAuB,EAC5C,gBAAgB,IAAI,sBAAsB,EAC1C,UAAU,EACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,wBAAwB,EACxB,YAAY,EACZ,iBAAiB,EACjB,0BAA0B,EAC3B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAoMnG;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,0BAA0B,KAAK,OAAO,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B;;OAEG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAE5C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;OAGG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG,CAAC,sBAAsB,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAM;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAElD,OAAO,CAAC,QAAQ,CAAyD;IACzE,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,KAAK,CAAa;IAC1B,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,cAAc,CAAwC;IAG9D,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,mBAAmB,CAA6B;IACxD,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAS;IACzB,+FAA+F;IAC/F,OAAO,CAAC,kBAAkB,CAAkE;gBAEhF,MAAM,EAAE,uBAAuB,YAAK,EAAE,KAAK,EAAE,UAAU;~~IAgEnE~~;;;OAGG;YACW,gBAAgB;IAO9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAQtB;;OAEG;YACW,gBAAgB;IAuD9B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC;;OAEG;IACH,OAAO,IAAI,IAAI;IAwBf;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;OAGG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKpB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAiDrG;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;IAQ3B;;OAEG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAWvC;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO;IAMpD;;OAEG;IACH,KAAK,IAAI,IAAI;IAMb;;OAEG;IACH,WAAW,IAAI,iBAAiB;IAIhC;;OAEG;IACH,aAAa,IAAI,OAAO;CAGzB"}
1	+ {"version":3,"file":"tool-search.service.d.ts","sourceRoot":"","sources":["../../src/services/tool-search.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAEhE,OAAO,KAAK,EACV,iBAAiB,IAAI,uBAAuB,EAC5C,gBAAgB,IAAI,sBAAsB,EAC1C,UAAU,EACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,wBAAwB,EACxB,YAAY,EACZ,iBAAiB,EACjB,0BAA0B,EAC3B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAoMnG;;GAEG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,0BAA0B,KAAK,OAAO,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B;;OAEG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAE5C;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC;;;OAGG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB;;OAEG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG,CAAC,sBAAsB,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAClD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAO;IACvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAM;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAQ;IAElD,OAAO,CAAC,QAAQ,CAAyD;IACzE,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAGZ;IACF,OAAO,CAAC,KAAK,CAAa;IAC1B,OAAO,CAAC,WAAW,CAAC,CAAa;IACjC,OAAO,CAAC,cAAc,CAAwC;IAG9D,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,mBAAmB,CAA6B;IACxD,OAAO,CAAC,kBAAkB,CAA2C;IACrE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,QAAQ,CAAS;IACzB,+FAA+F;IAC/F,OAAO,CAAC,kBAAkB,CAAkE;gBAEhF,MAAM,EAAE,uBAAuB,YAAK,EAAE,KAAK,EAAE,UAAU;IA2DnE;;;OAGG;YACW,gBAAgB;IAO9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAU9B;;OAEG;IACH,OAAO,CAAC,cAAc;IAQtB;;OAEG;YACW,gBAAgB;IAuD9B;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;OAKG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC;;OAEG;IACH,OAAO,IAAI,IAAI;IAwBf;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAkE7B;;;OAGG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKpB;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAiDrG;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;IAQ3B;;OAEG;IACH,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAWvC;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO;IAMpD;;OAEG;IACH,KAAK,IAAI,IAAI;IAMb;;OAEG;IACH,WAAW,IAAI,iBAAiB;IAIhC;;OAEG;IACH,aAAa,IAAI,OAAO;CAGzB"}

package/tools/describe.schema.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import { z } from '@frontmcp/lazy-zod';
-export declare const describeToolDescription = "Get input/output schemas for tools from search results.\n\nINPUT: toolNames: string[] - tool names from search\nOUTPUT per tool: inputSchema (JSON Schema), outputSchema (JSON Schema), usageExamples (up to 5 callTool examples)\n\nIMPORTANT: If notFound array is non-empty \u2192 re-search with corrected queries.\nFLOW: search \u2192 describe \u2192 execute/invoke";
+export declare const describeToolDescription = "Get input/output schemas for tools from search results.\n\nINPUT: toolNames: string[] - tool names from search, at most the server's maxDefinitions (8 unless configured) per call\nOUTPUT per tool: inputSchema (JSON Schema), outputSchema (JSON Schema), usageExamples (up to 5 callTool examples)\n\nIMPORTANT: If notFound array is non-empty \u2192 re-search with corrected queries.\nFLOW: search \u2192 describe \u2192 execute/invoke";
 export declare const describeToolInputSchema: {
     toolNames: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
 };

package/tools/describe.schema.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"describe.schema.d.ts","sourceRoot":"","sources":["../../src/tools/describe.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,eAAO,MAAM,uBAAuB,~~gXAMK~~,CAAC;AAE1C,eAAO,MAAM,uBAAuB;;CAuBnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAErF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;gCAoCnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
1	+ {"version":3,"file":"describe.schema.d.ts","sourceRoot":"","sources":["../../src/tools/describe.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,eAAO,MAAM,uBAAuB,obAMK,CAAC;AAE1C,eAAO,MAAM,uBAAuB;;CAuBnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAErF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;gCAoCnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/tools/describe.tool.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"describe.tool.d.ts","sourceRoot":"","sources":["../../src/tools/describe.tool.ts"],"names":[],"mappings":"AAEA,OAAO,~~EAAwB~~,WAAW,EAAkB,MAAM,eAAe,CAAC;~~AAMlF~~,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAuB3B,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IAC7C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;~~IAkEpE~~;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAuBtB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAkDpB;;OAEG;IACH,OAAO,CAAC,YAAY;IA6BpB;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;CAyBzB"}
1	+ {"version":3,"file":"describe.tool.d.ts","sourceRoot":"","sources":["../../src/tools/describe.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2C,WAAW,EAAkB,MAAM,eAAe,CAAC;AAMrG,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAuB3B,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,WAAW;IAC7C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwEpE;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAuBtB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IAkDpB;;OAEG;IACH,OAAO,CAAC,YAAY;IA6BpB;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;CAyBzB"}

package/tools/execute.schema.d.ts CHANGED Viewed

@@ -1,5 +1,8 @@
 import { z } from '@frontmcp/lazy-zod';
-export declare const executeToolDescription = "Execute AgentScript (safe JS subset) for multi-tool orchestration.\n\nAPI: await callTool(name, args, opts?)\n- Default: throws on error\n- Safe mode: { throwOnError: false } \u2192 returns { success, data?, error? }\n\nEXAMPLE:\nconst users = await callTool('users:list', { active: true });\nconst results = [];\nfor (const u of users.items) {\n  const orders = await callTool('orders:list', { userId: u.id });\n  results.push({ id: u.id, total: orders.items.reduce((s,o) => s + o.amount, 0) });\n}\nreturn results;\n\nALLOWED: for, for-of, arrow fn, map/filter/reduce/find, Math.*, JSON.*, if/else, destructuring, spread, template literals\nBLOCKED: while, do-while, function decl, eval, require, fetch, setTimeout, process, globalThis\n\nERRORS: NOT_FOUND | VALIDATION | EXECUTION | TIMEOUT | ACCESS_DENIED\nSTATUS: ok | syntax_error | illegal_access | runtime_error | tool_error | timeout\nLIMITS: 10K iter/loop, 30s timeout, 100 calls max";
+import type { ResolvedCodeCallVmOptions } from '../codecall.symbol';
+/** The `codecall:execute` description for the server's resolved `vm` options. */
+export declare function buildExecuteToolDescription(vmOptions: ResolvedCodeCallVmOptions): string;
+export declare const executeToolDescription: string;
 export declare const executeToolInputSchema: {
     script: import("@frontmcp/lazy-zod").ZodString;
     allowedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;

package/tools/execute.schema.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"execute.schema.d.ts","sourceRoot":"","sources":["../../src/tools/execute.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;~~AAKvC~~,eAAO,MAAM,sBAAsB,~~o7BAoBe~~,CAAC;~~AAEnD~~,eAAO,MAAM,sBAAsB;;;CAclC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC;AAkDnF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;gCAIjC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;gCAG1C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;gCAG5C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;gCAG3C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;gCAGxC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;gCAGtC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAOlC,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,yBAAyB,GACzB,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,GACvB,qBAAqB,CAAC"}
1	+ {"version":3,"file":"execute.schema.d.ts","sourceRoot":"","sources":["../../src/tools/execute.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AASpE,iFAAiF;AACjF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,yBAAyB,GAAG,MAAM,CA4BxF;AAED,eAAO,MAAM,sBAAsB,QAAkD,CAAC;AAEtF,eAAO,MAAM,sBAAsB;;;CAclC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC;AAkDnF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;gCAIjC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;gCAG1C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;gCAG5C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;gCAG3C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;gCAGxC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;gCAGtC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAOlC,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,yBAAyB,GACzB,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,GACvB,qBAAqB,CAAC"}

package/tools/search.schema.d.ts CHANGED Viewed

@@ -1,10 +1,14 @@
 import { z } from '@frontmcp/lazy-zod';
-export declare const searchToolDescription = "Find tools by splitting user request into atomic actions.\n\nDECOMPOSE: \"delete users and send email\" \u2192 queries: [\"delete user\", \"send email\"]\nDECOMPOSE: \"get order and refund\" \u2192 queries: [\"get order\", \"calculate refund\"]\n\nAVOID RE-SEARCHING: Use excludeToolNames for already-discovered tools.\nRE-SEARCH WHEN: describe fails (typo?) OR execute returns tool_not_found.\n\nINPUT:\n- queries: string[] (required) - atomic action phrases, max 10\n- appIds?: string[] - filter by app\n- excludeToolNames?: string[] - skip known tools\n- topK?: number (default 5) - results per query\n- minRelevanceScore?: number (default 0.3) - minimum match threshold\n\nOUTPUT: Flat deduplicated tool list. relevanceScore: 0.5+=good, 0.7+=strong match.\n\nFLOW: search \u2192 describe \u2192 execute/invoke";
+/** The `minRelevanceScore` a `codecall:search` call that names none is given. */
+export declare const DEFAULT_MIN_RELEVANCE_SCORE = 0.1;
+/** The `codecall:search` description for a server whose `topK` is `topK`. */
+export declare function buildSearchToolDescription(topK: number): string;
+export declare const searchToolDescription: string;
 export declare const searchToolInputSchema: {
     queries: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
     appIds: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
     excludeToolNames: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
-    topK: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+    topK: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
     minRelevanceScore: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
 };
 export type SearchToolInput = z.infer<z.ZodObject<typeof searchToolInputSchema>>;

package/tools/search.schema.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"search.schema.d.ts","sourceRoot":"","sources":["../../src/tools/search.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;~~AAEvC~~,eAAO,MAAM,qBAAqB,~~kzBAiBO~~,CAAC;~~AAE1C~~,eAAO,MAAM,qBAAqB;;;;;;~~CAgBjC~~,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAEjF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;gCAsBjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
1	+ {"version":3,"file":"search.schema.d.ts","sourceRoot":"","sources":["../../src/tools/search.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAIvC,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmB/D;AAED,eAAO,MAAM,qBAAqB,QAAyE,CAAC;AAE5G,eAAO,MAAM,qBAAqB;;;;;;CAsBjC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAEjF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;gCAsBjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/tools/search.tool.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"search.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlE,OAAO,~~EAIL~~,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuGjE"}
1	+ {"version":3,"file":"search.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlE,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuGjE"}