@frontmcp/plugin-codecall 1.9.2 → 1.9.4

package/codecall.plugin.d.ts

@@ -1,4 +1,4 @@
-import { DynamicPlugin, type FlowCtxOf, type ProviderType } from '@frontmcp/sdk';
+import { DynamicPlugin, type FlowCtxOf, type ProviderType, type ToolType } from '@frontmcp/sdk';
 import { type CodeCallPluginOptions, type CodeCallPluginOptionsInput } from './codecall.types';
 export default class CodeCallPlugin extends DynamicPlugin<CodeCallPluginOptions, CodeCallPluginOptionsInput> {
     options: CodeCallPluginOptions;
@@ -10,6 +10,11 @@ export default class CodeCallPlugin extends DynamicPlugin<CodeCallPluginOptions,
      * without touching the plugin decorator.
      */
     static dynamicProviders(options: CodeCallPluginOptionsInput): ProviderType[];
+    /**
+     * The CodeCall meta-tools. `codecall:search` and `codecall:execute` describe the `topK` and the
+     * script limits these options give, since the model plans its calls from those descriptions.
+     */
+    static dynamicTools(options: CodeCallPluginOptionsInput): ToolType[];
     /**
      * Hook into list_tools to enforce CodeCall modes:
      *

package/codecall.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codecall.plugin.d.ts","sourceRoot":"","sources":["../src/codecall.plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,aAAa,EASb,KAAK,SAAS,EAEd,KAAK,YAAY,EAElB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAEhC,MAAM,kBAAkB,CAAC;AAsC1B,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;IAC1G,OAAO,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAiB;IAEtC,OAAO,CAAC,SAAS;gBAOL,OAAO,GAAE,0BAA+B;IAMpD;;;OAGG;WACa,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,YAAY,EAAE;IAuDrF;;;;;;;;;;;;;OAaG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAsB5D;;;;;;;;;;;;;;;OAeG;IAEG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAUxE;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAO1B,yGAAyG;IACzG,OAAO,CAAC,UAAU;IAOlB,oHAAoH;IACpH,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,WAAW;IAQnB;;;;;;;;;OASG;IAEH,OAAO,CAAC,qBAAqB;IAyB7B;;;OAGG;IAEH,OAAO,CAAC,cAAc;IAStB;;OAEG;IAEH,OAAO,CAAC,mBAAmB;CAG5B"}
+{"version":3,"file":"codecall.plugin.d.ts","sourceRoot":"","sources":["../src/codecall.plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,aAAa,EAUb,KAAK,SAAS,EAEd,KAAK,YAAY,EAEjB,KAAK,QAAQ,EACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAEhC,MAAM,kBAAkB,CAAC;AAuC1B,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;IAC1G,OAAO,EAAE,qBAAqB,CAAC;IAC/B,OAAO,CAAC,YAAY,CAAC,CAAiB;IAEtC,OAAO,CAAC,SAAS;gBAOL,OAAO,GAAE,0BAA+B;IAMpD;;;OAGG;WACa,gBAAgB,CAAC,OAAO,EAAE,0BAA0B,GAAG,YAAY,EAAE;IAuDrF;;;OAGG;WACa,YAAY,CAAC,OAAO,EAAE,0BAA0B,GAAG,QAAQ,EAAE;IAwB7E;;;;;;;;;;;;;OAaG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAsB5D;;;;;;;;;;;;;;;OAeG;IAEG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAUxE;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAO1B,yGAAyG;IACzG,OAAO,CAAC,UAAU;IAOlB,oHAAoH;IACpH,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,WAAW;IAQnB;;;;;;;;;OASG;IAEH,OAAO,CAAC,qBAAqB;IAyB7B;;;OAGG;IAEH,OAAO,CAAC,cAAc;IAStB;;OAEG;IAEH,OAAO,CAAC,mBAAmB;CAG5B"}

package/esm/index.mjs

@@ -14,6 +14,7 @@ import CachePlugin from "@frontmcp/plugin-cache";
 import {
   DynamicPlugin,
   FrontMcpLogger,
+  FrontMcpToolTokens,
   isEntryGatedBy,
   ListToolsHook,
   Plugin,
@@ -280,7 +281,7 @@ var DEFAULT_PLUGIN_OPTIONS = {
 var codeCallPluginOptionsSchema = codeCallPluginOptionsObjectSchema.prefault(DEFAULT_PLUGIN_OPTIONS);
 
 // plugins/plugin-codecall/src/providers/code-call.config.ts
-import { Provider, ProviderScope, BaseConfig } from "@frontmcp/sdk";
+import { BaseConfig, Provider, ProviderScope } from "@frontmcp/sdk";
 var CodeCallConfig = class extends BaseConfig {
   constructor(options = {}) {
     const parsedConfig = codeCallPluginOptionsSchema.parse(options);
@@ -295,6 +296,10 @@ CodeCallConfig = __decorateClass([
     scope: ProviderScope.GLOBAL
   })
 ], CodeCallConfig);
+var MAX_ITERATIONS_PER_LOOP = 1e4;
+function maxToolCallsOf(vmOptions) {
+  return vmOptions.maxSteps || 100;
+}
 function resolveVmOptions(vmOptions) {
   const preset = vmOptions?.preset ?? "secure";
   const base = presetDefaults(preset);
@@ -1872,26 +1877,38 @@ function visitIdentifierReferences(node, visit, parent, key = "") {
     }
   }
 }
-var GlobalConsoleRule = class {
-  name = "codecall-global-console";
-  description = "console is not available in CodeCall scripts";
+var DisallowedGlobalsRule = class {
+  constructor(messages) {
+    this.messages = messages;
+  }
+  messages;
+  name = "codecall-disallowed-globals";
+  description = "Globals CodeCall scripts may not use";
   defaultSeverity = ValidationSeverity.ERROR;
   enabledByDefault = true;
   validate(context) {
     visitIdentifierReferences(context.ast, (identifier) => {
-      if (identifier.name !== "console") return;
+      const message = identifier.name === void 0 ? void 0 : this.messages.get(identifier.name);
+      if (message === void 0) return;
       context.report({
         code: "DISALLOWED_IDENTIFIER",
-        message: "console is not available in CodeCall scripts; use mcpLog(level, message)",
+        message,
         location: identifier.loc ? { line: identifier.loc.start.line, column: identifier.loc.start.column } : void 0,
-        data: { identifier: "console" }
+        data: { identifier: identifier.name }
       });
     });
   }
 };
-function scriptPolicyRules({ allowLoops }) {
-  const rules = [new GlobalConsoleRule()];
-  if (!allowLoops) {
+function disallowedGlobalMessages({ disabledBuiltins, disabledGlobals }) {
+  return new Map([
+    ...disabledBuiltins.map((name) => [name, `${name} is disabled by vm.disabledBuiltins`]),
+    ...disabledGlobals.map((name) => [name, `${name} is disabled by vm.disabledGlobals`]),
+    ["console", "console is not available in CodeCall scripts; use mcpLog(level, message)"]
+  ]);
+}
+function scriptPolicyRules(options) {
+  const rules = [new DisallowedGlobalsRule(disallowedGlobalMessages(options))];
+  if (!options.allowLoops) {
     rules.push(
       new ForbiddenLoopRule({
         allowFor: false,
@@ -2178,6 +2195,11 @@ function toolFailureName(error) {
   const name = error && typeof error === "object" ? error.name : void 0;
   return typeof name === "string" && name ? name.slice(0, 128) : "ToolError";
 }
+var ITERATION_LIMIT_PREFIX = "Maximum iteration limit exceeded";
+var ITERATION_LIMIT_ERROR = {
+  name: "Error",
+  message: `${ITERATION_LIMIT_PREFIX} (${MAX_ITERATIONS_PER_LOOP}). This limit prevents infinite loops.`
+};
 var PARSE_FAILURE_PREFIX = "Failed to parse AgentScript code: ";
 var PARSE_POSITION_RE = /\((\d+):(\d+)\)$/;
 function parseFailureOf(message) {
@@ -2287,8 +2309,8 @@ ${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.l
     };
     const options = {
       timeout: this.vmOptions.timeoutMs,
-      maxToolCalls: this.vmOptions.maxSteps || 100,
-      maxIterations: 1e4,
+      maxToolCalls: maxToolCallsOf(this.vmOptions),
+      maxIterations: MAX_ITERATIONS_PER_LOOP,
       maxSanitizeDepth: this.vmOptions.maxSanitizeDepth,
       maxSanitizeProperties: this.vmOptions.maxSanitizeProperties,
       toolHandler,
@@ -2325,7 +2347,9 @@ ${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.l
     if (result.success) {
       return { success: true, result: result.value, logs, timedOut: false, stats };
     }
-    const error = result.error ?? { name: "Error", message: "Script execution failed" };
+    const reportedError = result.error ?? { name: "Error", message: "Script execution failed" };
+    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === reportedError.message && failure.name === reportedError.name);
+    const error = !toolFailure && reportedError.message?.startsWith(ITERATION_LIMIT_PREFIX) ? { ...reportedError, ...ITERATION_LIMIT_ERROR } : reportedError;
     if (error.code === "ENCLAVE_ERROR" && error.message?.startsWith(PARSE_FAILURE_PREFIX)) {
       const { message, location } = parseFailureOf(error.message);
       return {
@@ -2336,7 +2360,6 @@ ${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.l
         stats
       };
     }
-    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === error.message && failure.name === error.name);
     if (toolFailure) {
       return {
         success: false,
@@ -2407,7 +2430,9 @@ import { getCallSurface, Tool, ToolContext } from "@frontmcp/sdk";
 
 // plugins/plugin-codecall/src/tools/search.schema.ts
 import { z as z2 } from "@frontmcp/lazy-zod";
-var searchToolDescription = `Find tools by splitting user request into atomic actions.
+var DEFAULT_MIN_RELEVANCE_SCORE = 0.1;
+function buildSearchToolDescription(topK) {
+  return `Find tools by splitting user request into atomic actions.
 
 DECOMPOSE: "delete users and send email" \u2192 queries: ["delete user", "send email"]
 DECOMPOSE: "get order and refund" \u2192 queries: ["get order", "calculate refund"]
@@ -2419,18 +2444,20 @@ INPUT:
 - queries: string[] (required) - atomic action phrases, max 10
 - appIds?: string[] - filter by app
 - excludeToolNames?: string[] - skip known tools
-- topK?: number (default: the server's topK, 8 unless configured) - results per query
-- minRelevanceScore?: number (default 0.3) - minimum match threshold
+- topK?: number (default ${topK}) - results per query
+- minRelevanceScore?: number (default ${DEFAULT_MIN_RELEVANCE_SCORE}) - minimum match threshold
 
 OUTPUT: Flat deduplicated tool list. relevanceScore: 0.5+=good, 0.7+=strong match.
 
 FLOW: search \u2192 describe \u2192 execute/invoke`;
+}
+var searchToolDescription = buildSearchToolDescription(codeCallPluginOptionsSchema.parse({}).topK);
 var searchToolInputSchema = {
   queries: z2.array(z2.string().min(2).max(256)).min(1).max(10).describe("Atomic action queries. Split complex requests into simple actions."),
   appIds: z2.array(z2.string()).max(10).optional().describe("Filter by app IDs"),
   excludeToolNames: z2.array(z2.string()).max(50).optional().describe("Skip already-known tool names"),
   topK: z2.number().int().positive().max(50).optional().describe("Results per query (defaults to the server's CodeCall topK, 8 unless configured)"),
-  minRelevanceScore: z2.number().min(0).max(1).optional().default(0.1).describe("Minimum relevance threshold (default 0.1)")
+  minRelevanceScore: z2.number().min(0).max(1).optional().default(DEFAULT_MIN_RELEVANCE_SCORE).describe(`Minimum relevance threshold (default ${DEFAULT_MIN_RELEVANCE_SCORE})`)
 };
 var searchToolOutputSchema = z2.object({
   tools: z2.array(
@@ -2455,7 +2482,7 @@ var searchToolOutputSchema = z2.object({
 // plugins/plugin-codecall/src/tools/search.tool.ts
 var SearchTool = class extends ToolContext {
   async execute(input) {
-    const { queries, appIds, excludeToolNames = [], topK, minRelevanceScore = 0.3 } = input;
+    const { queries, appIds, excludeToolNames = [], topK, minRelevanceScore = DEFAULT_MIN_RELEVANCE_SCORE } = input;
     const searchService = this.get(ToolSearchService);
     const warnings = [];
     const audit = this.tryGet(AuditLoggerService);
@@ -3485,7 +3512,15 @@ import { getCallSurface as getCallSurface3, Tool as Tool5, ToolContext as ToolCo
 // plugins/plugin-codecall/src/tools/execute.schema.ts
 import { z as z7 } from "@frontmcp/lazy-zod";
 var MIN_EXECUTE_SCRIPT_LENGTH = 'return callTool("a",{})'.length;
-var executeToolDescription = `Execute AgentScript (safe JS subset) for multi-tool orchestration.
+var ALWAYS_BLOCKED_NAMES = ["eval", "require", "fetch", "setTimeout", "process", "globalThis"];
+function buildExecuteToolDescription(vmOptions) {
+  const loops = vmOptions.allowLoops ? "for, for-of" : "for-of";
+  const blockedLoops = vmOptions.allowLoops ? "while, do-while" : "while, do-while, for";
+  const blockedNames = /* @__PURE__ */ new Set([...ALWAYS_BLOCKED_NAMES, ...vmOptions.disabledBuiltins, ...vmOptions.disabledGlobals]);
+  const namespaces = ["Math", "JSON"].filter((name) => !blockedNames.has(name)).map((name) => `${name}.*, `);
+  const timeoutSeconds = vmOptions.timeoutMs / 1e3;
+  const maxToolCalls = maxToolCallsOf(vmOptions);
+  return `Execute AgentScript (safe JS subset) for multi-tool orchestration.
 
 API: await callTool(name, args, opts?)
 - Default: throws on error
@@ -3500,12 +3535,14 @@ for (const u of users.items) {
 }
 return results;
 
-ALLOWED: for-of, arrow fn, map/filter/reduce/find, Math.*, JSON.*, if/else, destructuring, spread, template literals
-BLOCKED: while, do-while, for (unless the server sets vm.allowLoops), console (use mcpLog), function decl, eval, require, fetch, setTimeout, process, globalThis
+ALLOWED: ${loops}, arrow fn, map/filter/reduce/find, ${namespaces.join("")}if/else, destructuring, spread, template literals
+BLOCKED: ${blockedLoops}, console (use mcpLog), function decl, ${[...blockedNames].join(", ")}
 
 ERRORS: NOT_FOUND | VALIDATION | EXECUTION | TIMEOUT | ACCESS_DENIED
 STATUS: ok | syntax_error | illegal_access | runtime_error | tool_error | timeout
-LIMITS: 10K iter/loop, 30s timeout, 100 calls max`;
+LIMITS: ${MAX_ITERATIONS_PER_LOOP} iterations per loop, ${timeoutSeconds}s timeout, ${maxToolCalls} tool calls`;
+}
+var executeToolDescription = buildExecuteToolDescription(resolveVmOptions());
 var executeToolInputSchema = {
   script: z7.string().min(MIN_EXECUTE_SCRIPT_LENGTH).max(100 * 1024).describe(
     "JavaScript code to execute in the sandbox. Must return a value (implicitly or via explicit return). Use callTool(name, input) to invoke tools."
@@ -4022,6 +4059,35 @@ var CodeCallPlugin = class extends DynamicPlugin {
       }
     ];
   }
+  /**
+   * The CodeCall meta-tools. `codecall:search` and `codecall:execute` describe the `topK` and the
+   * script limits these options give, since the model plans its calls from those descriptions.
+   */
+  static dynamicTools(options) {
+    const config = new CodeCallConfig(codeCallPluginOptionsSchema.parse(options)).getAll();
+    class ConfiguredSearchTool extends SearchTool {
+    }
+    class ConfiguredExecuteTool extends ExecuteTool {
+    }
+    Reflect.defineMetadata(
+      FrontMcpToolTokens.description,
+      buildSearchToolDescription(config.topK),
+      ConfiguredSearchTool
+    );
+    Reflect.defineMetadata(
+      FrontMcpToolTokens.description,
+      buildExecuteToolDescription(config.resolvedVm),
+      ConfiguredExecuteTool
+    );
+    return [
+      ConfiguredSearchTool,
+      SearchSkillsTool,
+      SearchKnowledgeTool,
+      DescribeTool,
+      ConfiguredExecuteTool,
+      InvokeTool
+    ];
+  }
   async adjustListTools(flowCtx) {
     const logger = this.getLogger();
     const { resolvedTools } = flowCtx.state;
@@ -4125,8 +4191,7 @@ CodeCallPlugin = __decorateClass([
     name: "codecall",
     description: "CodeCall plugin: AgentScript-based meta-tools for orchestrating MCP tools",
     providers: [],
-    plugins: [CachePlugin],
-    tools: [SearchTool, SearchSkillsTool, SearchKnowledgeTool, DescribeTool, ExecuteTool, InvokeTool]
+    plugins: [CachePlugin]
   })
 ], CodeCallPlugin);
 export {

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.9.2",
+  "version": "1.9.4",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -50,14 +50,14 @@
   "dependencies": {
     "@enclave-vm/ast": "^2.16.0",
     "@enclave-vm/core": "^2.16.0",
-    "@frontmcp/protocol": "1.9.2",
-    "@frontmcp/sdk": "1.9.2",
+    "@frontmcp/protocol": "1.9.4",
+    "@frontmcp/sdk": "1.9.4",
     "acorn": "^8.15.0",
     "vectoriadb": "^2.3.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.2",
-    "@frontmcp/plugin-cache": "1.9.2"
+    "@frontmcp/lazy-zod": "1.9.4",
+    "@frontmcp/plugin-cache": "1.9.4"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/index.js

@@ -330,6 +330,10 @@ CodeCallConfig = __decorateClass([
     scope: import_sdk.ProviderScope.GLOBAL
   })
 ], CodeCallConfig);
+var MAX_ITERATIONS_PER_LOOP = 1e4;
+function maxToolCallsOf(vmOptions) {
+  return vmOptions.maxSteps || 100;
+}
 function resolveVmOptions(vmOptions) {
   const preset = vmOptions?.preset ?? "secure";
   const base = presetDefaults(preset);
@@ -1901,26 +1905,38 @@ function visitIdentifierReferences(node, visit, parent, key = "") {
     }
   }
 }
-var GlobalConsoleRule = class {
-  name = "codecall-global-console";
-  description = "console is not available in CodeCall scripts";
+var DisallowedGlobalsRule = class {
+  constructor(messages) {
+    this.messages = messages;
+  }
+  messages;
+  name = "codecall-disallowed-globals";
+  description = "Globals CodeCall scripts may not use";
   defaultSeverity = import_ast.ValidationSeverity.ERROR;
   enabledByDefault = true;
   validate(context) {
     visitIdentifierReferences(context.ast, (identifier) => {
-      if (identifier.name !== "console") return;
+      const message = identifier.name === void 0 ? void 0 : this.messages.get(identifier.name);
+      if (message === void 0) return;
       context.report({
         code: "DISALLOWED_IDENTIFIER",
-        message: "console is not available in CodeCall scripts; use mcpLog(level, message)",
+        message,
         location: identifier.loc ? { line: identifier.loc.start.line, column: identifier.loc.start.column } : void 0,
-        data: { identifier: "console" }
+        data: { identifier: identifier.name }
       });
     });
   }
 };
-function scriptPolicyRules({ allowLoops }) {
-  const rules = [new GlobalConsoleRule()];
-  if (!allowLoops) {
+function disallowedGlobalMessages({ disabledBuiltins, disabledGlobals }) {
+  return new Map([
+    ...disabledBuiltins.map((name) => [name, `${name} is disabled by vm.disabledBuiltins`]),
+    ...disabledGlobals.map((name) => [name, `${name} is disabled by vm.disabledGlobals`]),
+    ["console", "console is not available in CodeCall scripts; use mcpLog(level, message)"]
+  ]);
+}
+function scriptPolicyRules(options) {
+  const rules = [new DisallowedGlobalsRule(disallowedGlobalMessages(options))];
+  if (!options.allowLoops) {
     rules.push(
       new import_ast.ForbiddenLoopRule({
         allowFor: false,
@@ -2207,6 +2223,11 @@ function toolFailureName(error) {
   const name = error && typeof error === "object" ? error.name : void 0;
   return typeof name === "string" && name ? name.slice(0, 128) : "ToolError";
 }
+var ITERATION_LIMIT_PREFIX = "Maximum iteration limit exceeded";
+var ITERATION_LIMIT_ERROR = {
+  name: "Error",
+  message: `${ITERATION_LIMIT_PREFIX} (${MAX_ITERATIONS_PER_LOOP}). This limit prevents infinite loops.`
+};
 var PARSE_FAILURE_PREFIX = "Failed to parse AgentScript code: ";
 var PARSE_POSITION_RE = /\((\d+):(\d+)\)$/;
 function parseFailureOf(message) {
@@ -2316,8 +2337,8 @@ ${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.l
     };
     const options = {
       timeout: this.vmOptions.timeoutMs,
-      maxToolCalls: this.vmOptions.maxSteps || 100,
-      maxIterations: 1e4,
+      maxToolCalls: maxToolCallsOf(this.vmOptions),
+      maxIterations: MAX_ITERATIONS_PER_LOOP,
       maxSanitizeDepth: this.vmOptions.maxSanitizeDepth,
       maxSanitizeProperties: this.vmOptions.maxSanitizeProperties,
       toolHandler,
@@ -2354,7 +2375,9 @@ ${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.l
     if (result.success) {
       return { success: true, result: result.value, logs, timedOut: false, stats };
     }
-    const error = result.error ?? { name: "Error", message: "Script execution failed" };
+    const reportedError = result.error ?? { name: "Error", message: "Script execution failed" };
+    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === reportedError.message && failure.name === reportedError.name);
+    const error = !toolFailure && reportedError.message?.startsWith(ITERATION_LIMIT_PREFIX) ? { ...reportedError, ...ITERATION_LIMIT_ERROR } : reportedError;
     if (error.code === "ENCLAVE_ERROR" && error.message?.startsWith(PARSE_FAILURE_PREFIX)) {
       const { message, location } = parseFailureOf(error.message);
       return {
@@ -2365,7 +2388,6 @@ ${policyIssues.map((issue) => `${issue.code}${issue.location ? ` (line ${issue.l
         stats
       };
     }
-    const toolFailure = [...toolFailures].reverse().find((failure) => failure.message === error.message && failure.name === error.name);
     if (toolFailure) {
       return {
         success: false,
@@ -2436,7 +2458,9 @@ var import_sdk5 = require("@frontmcp/sdk");
 
 // plugins/plugin-codecall/src/tools/search.schema.ts
 var import_lazy_zod2 = require("@frontmcp/lazy-zod");
-var searchToolDescription = `Find tools by splitting user request into atomic actions.
+var DEFAULT_MIN_RELEVANCE_SCORE = 0.1;
+function buildSearchToolDescription(topK) {
+  return `Find tools by splitting user request into atomic actions.
 
 DECOMPOSE: "delete users and send email" \u2192 queries: ["delete user", "send email"]
 DECOMPOSE: "get order and refund" \u2192 queries: ["get order", "calculate refund"]
@@ -2448,18 +2472,20 @@ INPUT:
 - queries: string[] (required) - atomic action phrases, max 10
 - appIds?: string[] - filter by app
 - excludeToolNames?: string[] - skip known tools
-- topK?: number (default: the server's topK, 8 unless configured) - results per query
-- minRelevanceScore?: number (default 0.3) - minimum match threshold
+- topK?: number (default ${topK}) - results per query
+- minRelevanceScore?: number (default ${DEFAULT_MIN_RELEVANCE_SCORE}) - minimum match threshold
 
 OUTPUT: Flat deduplicated tool list. relevanceScore: 0.5+=good, 0.7+=strong match.
 
 FLOW: search \u2192 describe \u2192 execute/invoke`;
+}
+var searchToolDescription = buildSearchToolDescription(codeCallPluginOptionsSchema.parse({}).topK);
 var searchToolInputSchema = {
   queries: import_lazy_zod2.z.array(import_lazy_zod2.z.string().min(2).max(256)).min(1).max(10).describe("Atomic action queries. Split complex requests into simple actions."),
   appIds: import_lazy_zod2.z.array(import_lazy_zod2.z.string()).max(10).optional().describe("Filter by app IDs"),
   excludeToolNames: import_lazy_zod2.z.array(import_lazy_zod2.z.string()).max(50).optional().describe("Skip already-known tool names"),
   topK: import_lazy_zod2.z.number().int().positive().max(50).optional().describe("Results per query (defaults to the server's CodeCall topK, 8 unless configured)"),
-  minRelevanceScore: import_lazy_zod2.z.number().min(0).max(1).optional().default(0.1).describe("Minimum relevance threshold (default 0.1)")
+  minRelevanceScore: import_lazy_zod2.z.number().min(0).max(1).optional().default(DEFAULT_MIN_RELEVANCE_SCORE).describe(`Minimum relevance threshold (default ${DEFAULT_MIN_RELEVANCE_SCORE})`)
 };
 var searchToolOutputSchema = import_lazy_zod2.z.object({
   tools: import_lazy_zod2.z.array(
@@ -2484,7 +2510,7 @@ var searchToolOutputSchema = import_lazy_zod2.z.object({
 // plugins/plugin-codecall/src/tools/search.tool.ts
 var SearchTool = class extends import_sdk5.ToolContext {
   async execute(input) {
-    const { queries, appIds, excludeToolNames = [], topK, minRelevanceScore = 0.3 } = input;
+    const { queries, appIds, excludeToolNames = [], topK, minRelevanceScore = DEFAULT_MIN_RELEVANCE_SCORE } = input;
     const searchService = this.get(ToolSearchService);
     const warnings = [];
     const audit = this.tryGet(AuditLoggerService);
@@ -3514,7 +3540,15 @@ var import_sdk9 = require("@frontmcp/sdk");
 // plugins/plugin-codecall/src/tools/execute.schema.ts
 var import_lazy_zod7 = require("@frontmcp/lazy-zod");
 var MIN_EXECUTE_SCRIPT_LENGTH = 'return callTool("a",{})'.length;
-var executeToolDescription = `Execute AgentScript (safe JS subset) for multi-tool orchestration.
+var ALWAYS_BLOCKED_NAMES = ["eval", "require", "fetch", "setTimeout", "process", "globalThis"];
+function buildExecuteToolDescription(vmOptions) {
+  const loops = vmOptions.allowLoops ? "for, for-of" : "for-of";
+  const blockedLoops = vmOptions.allowLoops ? "while, do-while" : "while, do-while, for";
+  const blockedNames = /* @__PURE__ */ new Set([...ALWAYS_BLOCKED_NAMES, ...vmOptions.disabledBuiltins, ...vmOptions.disabledGlobals]);
+  const namespaces = ["Math", "JSON"].filter((name) => !blockedNames.has(name)).map((name) => `${name}.*, `);
+  const timeoutSeconds = vmOptions.timeoutMs / 1e3;
+  const maxToolCalls = maxToolCallsOf(vmOptions);
+  return `Execute AgentScript (safe JS subset) for multi-tool orchestration.
 
 API: await callTool(name, args, opts?)
 - Default: throws on error
@@ -3529,12 +3563,14 @@ for (const u of users.items) {
 }
 return results;
 
-ALLOWED: for-of, arrow fn, map/filter/reduce/find, Math.*, JSON.*, if/else, destructuring, spread, template literals
-BLOCKED: while, do-while, for (unless the server sets vm.allowLoops), console (use mcpLog), function decl, eval, require, fetch, setTimeout, process, globalThis
+ALLOWED: ${loops}, arrow fn, map/filter/reduce/find, ${namespaces.join("")}if/else, destructuring, spread, template literals
+BLOCKED: ${blockedLoops}, console (use mcpLog), function decl, ${[...blockedNames].join(", ")}
 
 ERRORS: NOT_FOUND | VALIDATION | EXECUTION | TIMEOUT | ACCESS_DENIED
 STATUS: ok | syntax_error | illegal_access | runtime_error | tool_error | timeout
-LIMITS: 10K iter/loop, 30s timeout, 100 calls max`;
+LIMITS: ${MAX_ITERATIONS_PER_LOOP} iterations per loop, ${timeoutSeconds}s timeout, ${maxToolCalls} tool calls`;
+}
+var executeToolDescription = buildExecuteToolDescription(resolveVmOptions());
 var executeToolInputSchema = {
   script: import_lazy_zod7.z.string().min(MIN_EXECUTE_SCRIPT_LENGTH).max(100 * 1024).describe(
     "JavaScript code to execute in the sandbox. Must return a value (implicitly or via explicit return). Use callTool(name, input) to invoke tools."
@@ -4051,6 +4087,35 @@ var CodeCallPlugin = class extends import_sdk11.DynamicPlugin {
       }
     ];
   }
+  /**
+   * The CodeCall meta-tools. `codecall:search` and `codecall:execute` describe the `topK` and the
+   * script limits these options give, since the model plans its calls from those descriptions.
+   */
+  static dynamicTools(options) {
+    const config = new CodeCallConfig(codeCallPluginOptionsSchema.parse(options)).getAll();
+    class ConfiguredSearchTool extends SearchTool {
+    }
+    class ConfiguredExecuteTool extends ExecuteTool {
+    }
+    Reflect.defineMetadata(
+      import_sdk11.FrontMcpToolTokens.description,
+      buildSearchToolDescription(config.topK),
+      ConfiguredSearchTool
+    );
+    Reflect.defineMetadata(
+      import_sdk11.FrontMcpToolTokens.description,
+      buildExecuteToolDescription(config.resolvedVm),
+      ConfiguredExecuteTool
+    );
+    return [
+      ConfiguredSearchTool,
+      SearchSkillsTool,
+      SearchKnowledgeTool,
+      DescribeTool,
+      ConfiguredExecuteTool,
+      InvokeTool
+    ];
+  }
   async adjustListTools(flowCtx) {
     const logger = this.getLogger();
     const { resolvedTools } = flowCtx.state;
@@ -4154,8 +4219,7 @@ CodeCallPlugin = __decorateClass([
     name: "codecall",
     description: "CodeCall plugin: AgentScript-based meta-tools for orchestrating MCP tools",
     providers: [],
-    plugins: [import_plugin_cache.default],
-    tools: [SearchTool, SearchSkillsTool, SearchKnowledgeTool, DescribeTool, ExecuteTool, InvokeTool]
+    plugins: [import_plugin_cache.default]
   })
 ], CodeCallPlugin);
 // Annotate the CommonJS export names for ESM import in node:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-codecall",
-  "version": "1.9.2",
+  "version": "1.9.4",
   "description": "CodeCall plugin for FrontMCP - AgentScript-based meta-tools for orchestrating MCP tools",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -50,14 +50,14 @@
   "dependencies": {
     "@enclave-vm/ast": "^2.16.0",
     "@enclave-vm/core": "^2.16.0",
-    "@frontmcp/protocol": "1.9.2",
-    "@frontmcp/sdk": "1.9.2",
+    "@frontmcp/protocol": "1.9.4",
+    "@frontmcp/sdk": "1.9.4",
     "acorn": "^8.15.0",
     "vectoriadb": "^2.3.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.2",
-    "@frontmcp/plugin-cache": "1.9.2"
+    "@frontmcp/lazy-zod": "1.9.4",
+    "@frontmcp/plugin-cache": "1.9.4"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"

package/providers/code-call.config.d.ts

@@ -1,6 +1,6 @@
 import { BaseConfig } from '@frontmcp/sdk';
-import { CodeCallPluginOptions } from '../codecall.types';
-import { ResolvedCodeCallVmOptions } from '../codecall.symbol';
+import { type ResolvedCodeCallVmOptions } from '../codecall.symbol';
+import { type CodeCallPluginOptions, type CodeCallVmOptions } from '../codecall.types';
 /**
  * CodeCall configuration provider with convict-like API
  * Extends BaseConfig to provide type-safe dotted path access
@@ -27,4 +27,9 @@ export default class CodeCallConfig extends BaseConfig<CodeCallPluginOptions & {
 }> {
     constructor(options?: Partial<CodeCallPluginOptions>);
 }
+/** Iterations the sandbox allows each loop of a script; not configurable. */
+export declare const MAX_ITERATIONS_PER_LOOP = 10000;
+/** Tool calls a script may make: `vm.maxSteps`, else 100. */
+export declare function maxToolCallsOf(vmOptions: ResolvedCodeCallVmOptions): number;
+export declare function resolveVmOptions(vmOptions?: CodeCallVmOptions): ResolvedCodeCallVmOptions;
 //# sourceMappingURL=code-call.config.d.ts.map

package/providers/code-call.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code-call.config.d.ts","sourceRoot":"","sources":["../../src/providers/code-call.config.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2B,UAAU,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EACL,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,UAAU,CACpD,qBAAqB,GAAG;IAAE,UAAU,EAAE,yBAAyB,CAAA;CAAE,CAClE;gBACa,OAAO,GAAE,OAAO,CAAC,qBAAqB,CAAM;CASzD"}
+{"version":3,"file":"code-call.config.d.ts","sourceRoot":"","sources":["../../src/providers/code-call.config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAA2B,MAAM,eAAe,CAAC;AAEpE,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EAEvB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,UAAU,CACpD,qBAAqB,GAAG;IAAE,UAAU,EAAE,yBAAyB,CAAA;CAAE,CAClE;gBACa,OAAO,GAAE,OAAO,CAAC,qBAAqB,CAAM;CASzD;AAED,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAE7C,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,SAAS,EAAE,yBAAyB,GAAG,MAAM,CAE3E;AAID,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,iBAAiB,GAAG,yBAAyB,CAWzF"}

package/security/script-policy.d.ts

@@ -1,11 +1,12 @@
 import { type ValidationIssue } from '@enclave-vm/ast';
 import type { ResolvedCodeCallVmOptions } from '../codecall.symbol';
-type ScriptPolicyOptions = Pick<ResolvedCodeCallVmOptions, 'allowLoops'>;
+type ScriptPolicyOptions = Pick<ResolvedCodeCallVmOptions, 'allowLoops' | 'disabledBuiltins' | 'disabledGlobals'>;
 /**
- * The places a script uses a loop `vm.allowLoops: false` turns off, or `console`, which the sandbox
- * never gives a script, in the script's own lines. The sandbox takes no loop option, so CodeCall
- * checks before it runs the script, parsing it the way the sandbox does. A script none of those
- * parses accept is left to the sandbox, which fails on the same parse and reports the syntax error.
+ * The places a script uses a loop `vm.allowLoops: false` turns off, a global `vm.disabledBuiltins` or
+ * `vm.disabledGlobals` lists, or `console`, which the sandbox never gives a script, in the script's
+ * own lines. The sandbox takes no option for these, so CodeCall checks before it runs the script,
+ * parsing it the way the sandbox does. A script none of those parses accept is left to the sandbox,
+ * which fails on the same parse and reports the syntax error.
  */
 export declare function findScriptPolicyIssues(code: string, options: ScriptPolicyOptions): Promise<ValidationIssue[]>;
 export {};

package/security/script-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"script-policy.d.ts","sourceRoot":"","sources":["../../src/security/script-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,KAAK,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;AAgGzE;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAenH"}
+{"version":3,"file":"script-policy.d.ts","sourceRoot":"","sources":["../../src/security/script-policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,KAAK,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,YAAY,GAAG,kBAAkB,GAAG,iBAAiB,CAAC,CAAC;AA2GlH;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAenH"}

package/services/enclave.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enclave.service.d.ts","sourceRoot":"","sources":["../../src/services/enclave.service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,oBAAoB,CAAC;AAE3F,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;AAKhE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,kGAAkG;QAClG,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAkDD;;;;;;;;GAQG;AACH;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASpD;AAOD,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,MAAM,EAAE,cAAc;IAOlC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA0HhG;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAyFzB"}
+{"version":3,"file":"enclave.service.d.ts","sourceRoot":"","sources":["../../src/services/enclave.service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,qBAAqB,EAA6B,MAAM,oBAAoB,CAAC;AAE3F,OAAO,KAAK,cAAc,MAAM,+BAA+B,CAAC;AAMhE;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,kGAAkG;QAClG,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AA2DD;;;;;;;;GAQG;AACH;;GAEG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CASpD;AAOD,MAAM,CAAC,OAAO,OAAO,cAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;gBAE5C,MAAM,EAAE,cAAc;IAOlC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA0HhG;;OAEG;IACH,OAAO,CAAC,gBAAgB;CAgGzB"}

package/tools/execute.schema.d.ts

@@ -1,5 +1,8 @@
 import { z } from '@frontmcp/lazy-zod';
-export declare const executeToolDescription = "Execute AgentScript (safe JS subset) for multi-tool orchestration.\n\nAPI: await callTool(name, args, opts?)\n- Default: throws on error\n- Safe mode: { throwOnError: false } \u2192 returns { success, data?, error? }\n\nEXAMPLE:\nconst users = await callTool('users:list', { active: true });\nconst results = [];\nfor (const u of users.items) {\n  const orders = await callTool('orders:list', { userId: u.id });\n  results.push({ id: u.id, total: orders.items.reduce((s,o) => s + o.amount, 0) });\n}\nreturn results;\n\nALLOWED: for-of, arrow fn, map/filter/reduce/find, Math.*, JSON.*, if/else, destructuring, spread, template literals\nBLOCKED: while, do-while, for (unless the server sets vm.allowLoops), console (use mcpLog), function decl, eval, require, fetch, setTimeout, process, globalThis\n\nERRORS: NOT_FOUND | VALIDATION | EXECUTION | TIMEOUT | ACCESS_DENIED\nSTATUS: ok | syntax_error | illegal_access | runtime_error | tool_error | timeout\nLIMITS: 10K iter/loop, 30s timeout, 100 calls max";
+import type { ResolvedCodeCallVmOptions } from '../codecall.symbol';
+/** The `codecall:execute` description for the server's resolved `vm` options. */
+export declare function buildExecuteToolDescription(vmOptions: ResolvedCodeCallVmOptions): string;
+export declare const executeToolDescription: string;
 export declare const executeToolInputSchema: {
     script: import("@frontmcp/lazy-zod").ZodString;
     allowedTools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;

package/tools/execute.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.schema.d.ts","sourceRoot":"","sources":["../../src/tools/execute.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAKvC,eAAO,MAAM,sBAAsB,i/BAoBe,CAAC;AAEnD,eAAO,MAAM,sBAAsB;;;CAclC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC;AAkDnF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;gCAIjC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;gCAG1C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;gCAG5C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;gCAG3C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;gCAGxC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;gCAGtC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAOlC,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,yBAAyB,GACzB,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,GACvB,qBAAqB,CAAC"}
+{"version":3,"file":"execute.schema.d.ts","sourceRoot":"","sources":["../../src/tools/execute.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AASpE,iFAAiF;AACjF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,yBAAyB,GAAG,MAAM,CA4BxF;AAED,eAAO,MAAM,sBAAsB,QAAkD,CAAC;AAEtF,eAAO,MAAM,sBAAsB;;;CAclC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC;AAkDnF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;gCAIjC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;gCAG1C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;gCAG5C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;gCAG3C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;gCAGxC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;gCAGtC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAOlC,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,yBAAyB,GACzB,2BAA2B,GAC3B,0BAA0B,GAC1B,uBAAuB,GACvB,qBAAqB,CAAC"}

package/tools/search.schema.d.ts

@@ -1,5 +1,9 @@
 import { z } from '@frontmcp/lazy-zod';
-export declare const searchToolDescription = "Find tools by splitting user request into atomic actions.\n\nDECOMPOSE: \"delete users and send email\" \u2192 queries: [\"delete user\", \"send email\"]\nDECOMPOSE: \"get order and refund\" \u2192 queries: [\"get order\", \"calculate refund\"]\n\nAVOID RE-SEARCHING: Use excludeToolNames for already-discovered tools.\nRE-SEARCH WHEN: describe fails (typo?) OR execute returns tool_not_found.\n\nINPUT:\n- queries: string[] (required) - atomic action phrases, max 10\n- appIds?: string[] - filter by app\n- excludeToolNames?: string[] - skip known tools\n- topK?: number (default: the server's topK, 8 unless configured) - results per query\n- minRelevanceScore?: number (default 0.3) - minimum match threshold\n\nOUTPUT: Flat deduplicated tool list. relevanceScore: 0.5+=good, 0.7+=strong match.\n\nFLOW: search \u2192 describe \u2192 execute/invoke";
+/** The `minRelevanceScore` a `codecall:search` call that names none is given. */
+export declare const DEFAULT_MIN_RELEVANCE_SCORE = 0.1;
+/** The `codecall:search` description for a server whose `topK` is `topK`. */
+export declare function buildSearchToolDescription(topK: number): string;
+export declare const searchToolDescription: string;
 export declare const searchToolInputSchema: {
     queries: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
     appIds: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;

package/tools/search.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.schema.d.ts","sourceRoot":"","sources":["../../src/tools/search.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,eAAO,MAAM,qBAAqB,w1BAiBO,CAAC;AAE1C,eAAO,MAAM,qBAAqB;;;;;;CAsBjC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAEjF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;gCAsBjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"search.schema.d.ts","sourceRoot":"","sources":["../../src/tools/search.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAIvC,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAmB/D;AAED,eAAO,MAAM,qBAAqB,QAAyE,CAAC;AAE5G,eAAO,MAAM,qBAAqB;;;;;;CAsBjC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;AAEjF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;gCAsBjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/tools/search.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlE,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuGjE"}
+{"version":3,"file":"search.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search.tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlE,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AA6BzB,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IAC3C,OAAO,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuGjE"}