@frontmcp/plugins 0.6.0 → 0.6.2

package/src/codecall/services/audit-logger.service.js

@@ -1,322 +0,0 @@
-"use strict";
-// file: libs/plugins/src/codecall/services/audit-logger.service.ts
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuditLoggerService = exports.AUDIT_EVENT_TYPES = void 0;
-const tslib_1 = require("tslib");
-const sdk_1 = require("@frontmcp/sdk");
-/**
- * Audit event types for CodeCall operations.
- */
-exports.AUDIT_EVENT_TYPES = {
-    /** Script execution started */
-    EXECUTION_START: 'codecall:execution:start',
-    /** Script execution completed successfully */
-    EXECUTION_SUCCESS: 'codecall:execution:success',
-    /** Script execution failed */
-    EXECUTION_FAILURE: 'codecall:execution:failure',
-    /** Script execution timed out */
-    EXECUTION_TIMEOUT: 'codecall:execution:timeout',
-    /** Tool call initiated from script */
-    TOOL_CALL_START: 'codecall:tool:call:start',
-    /** Tool call completed successfully */
-    TOOL_CALL_SUCCESS: 'codecall:tool:call:success',
-    /** Tool call failed */
-    TOOL_CALL_FAILURE: 'codecall:tool:call:failure',
-    /** Self-reference attack blocked */
-    SECURITY_SELF_REFERENCE: 'codecall:security:self-reference',
-    /** Tool access denied */
-    SECURITY_ACCESS_DENIED: 'codecall:security:access-denied',
-    /** AST validation failed (blocked code pattern) */
-    SECURITY_AST_BLOCKED: 'codecall:security:ast-blocked',
-    /** Search performed */
-    SEARCH_PERFORMED: 'codecall:search:performed',
-    /** Tool described */
-    DESCRIBE_PERFORMED: 'codecall:describe:performed',
-    /** Direct invoke performed */
-    INVOKE_PERFORMED: 'codecall:invoke:performed',
-};
-/**
- * Audit Logger Service
- *
- * Provides centralized audit logging for all CodeCall operations.
- * Uses the SDK event emitter pattern for integration with external systems.
- *
- * Security considerations:
- * - NEVER logs full scripts (only hashes)
- * - NEVER logs tool inputs/outputs (only metadata)
- * - NEVER logs sensitive error details (only sanitized messages)
- * - All events include execution ID for correlation
- */
-let AuditLoggerService = class AuditLoggerService {
-    listeners = new Set();
-    executionCounter = 0;
-    /**
-     * Subscribe to audit events.
-     *
-     * @param listener - Function to call when events occur
-     * @returns Unsubscribe function
-     */
-    subscribe(listener) {
-        this.listeners.add(listener);
-        return () => {
-            this.listeners.delete(listener);
-        };
-    }
-    /**
-     * Generate a unique execution ID.
-     */
-    generateExecutionId() {
-        const timestamp = Date.now().toString(36);
-        const counter = (++this.executionCounter).toString(36).padStart(4, '0');
-        const random = Math.random().toString(36).substring(2, 8);
-        return `exec_${timestamp}_${counter}_${random}`;
-    }
-    /**
-     * Log execution start.
-     */
-    logExecutionStart(executionId, script) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.EXECUTION_START,
-            timestamp: new Date().toISOString(),
-            executionId,
-            data: {
-                scriptHash: this.hashScript(script),
-                scriptLength: script.length,
-            },
-        });
-    }
-    /**
-     * Log execution success.
-     */
-    logExecutionSuccess(executionId, script, durationMs, toolCallCount) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.EXECUTION_SUCCESS,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                scriptHash: this.hashScript(script),
-                scriptLength: script.length,
-                toolCallCount,
-            },
-        });
-    }
-    /**
-     * Log execution failure.
-     */
-    logExecutionFailure(executionId, script, durationMs, error) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.EXECUTION_FAILURE,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                scriptHash: this.hashScript(script),
-                scriptLength: script.length,
-                error: this.sanitizeError(error),
-            },
-        });
-    }
-    /**
-     * Log execution timeout.
-     */
-    logExecutionTimeout(executionId, script, durationMs) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.EXECUTION_TIMEOUT,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                scriptHash: this.hashScript(script),
-                scriptLength: script.length,
-            },
-        });
-    }
-    /**
-     * Log tool call start.
-     */
-    logToolCallStart(executionId, toolName, callDepth) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.TOOL_CALL_START,
-            timestamp: new Date().toISOString(),
-            executionId,
-            data: {
-                toolName,
-                callDepth,
-            },
-        });
-    }
-    /**
-     * Log tool call success.
-     */
-    logToolCallSuccess(executionId, toolName, callDepth, durationMs) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.TOOL_CALL_SUCCESS,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                toolName,
-                callDepth,
-            },
-        });
-    }
-    /**
-     * Log tool call failure.
-     */
-    logToolCallFailure(executionId, toolName, callDepth, durationMs, errorCode) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.TOOL_CALL_FAILURE,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                toolName,
-                callDepth,
-                errorCode,
-            },
-        });
-    }
-    /**
-     * Log security event: self-reference blocked.
-     */
-    logSecuritySelfReference(executionId, toolName) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.SECURITY_SELF_REFERENCE,
-            timestamp: new Date().toISOString(),
-            executionId,
-            data: {
-                blocked: toolName,
-                reason: 'Self-reference attack: attempted to call CodeCall tool from within AgentScript',
-            },
-        });
-    }
-    /**
-     * Log security event: access denied.
-     */
-    logSecurityAccessDenied(executionId, toolName, reason) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.SECURITY_ACCESS_DENIED,
-            timestamp: new Date().toISOString(),
-            executionId,
-            data: {
-                blocked: toolName,
-                reason: this.sanitizeError(reason),
-            },
-        });
-    }
-    /**
-     * Log security event: AST validation blocked.
-     */
-    logSecurityAstBlocked(executionId, pattern, reason) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.SECURITY_AST_BLOCKED,
-            timestamp: new Date().toISOString(),
-            executionId,
-            data: {
-                blocked: pattern,
-                reason: this.sanitizeError(reason),
-            },
-        });
-    }
-    /**
-     * Log search operation.
-     */
-    logSearch(executionId, query, resultCount, durationMs) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.SEARCH_PERFORMED,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                queryLength: query.length,
-                resultCount,
-            },
-        });
-    }
-    /**
-     * Log describe operation.
-     */
-    logDescribe(executionId, toolNames, durationMs) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.DESCRIBE_PERFORMED,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                toolCount: toolNames.length,
-                toolNames: toolNames.slice(0, 10), // Limit to first 10 for audit
-            },
-        });
-    }
-    /**
-     * Log invoke operation.
-     */
-    logInvoke(executionId, toolName, success, durationMs) {
-        this.emit({
-            type: exports.AUDIT_EVENT_TYPES.INVOKE_PERFORMED,
-            timestamp: new Date().toISOString(),
-            executionId,
-            durationMs,
-            data: {
-                toolName,
-                success,
-            },
-        });
-    }
-    /**
-     * Emit an audit event to all listeners.
-     */
-    emit(event) {
-        // Freeze the event to prevent modification
-        const frozenEvent = Object.freeze({ ...event, data: Object.freeze({ ...event.data }) });
-        for (const listener of this.listeners) {
-            try {
-                listener(frozenEvent);
-            }
-            catch {
-                // Never let listener errors propagate
-            }
-        }
-    }
-    /**
-     * Create a simple hash of the script for identification.
-     * Uses a fast, non-cryptographic hash for performance.
-     */
-    hashScript(script) {
-        let hash = 0;
-        for (let i = 0; i < script.length; i++) {
-            const char = script.charCodeAt(i);
-            hash = (hash << 5) - hash + char;
-            hash = hash & hash; // Convert to 32bit integer
-        }
-        return `sh_${(hash >>> 0).toString(16).padStart(8, '0')}`;
-    }
-    /**
-     * Sanitize error messages to remove sensitive information.
-     */
-    sanitizeError(error) {
-        if (!error)
-            return 'Unknown error';
-        // Remove file paths
-        let sanitized = error.replace(/(?:\/[\w.-]+)+|(?:[A-Za-z]:\\[\w\\.-]+)+/g, '[path]');
-        // Remove line numbers
-        sanitized = sanitized.replace(/:\d+:\d+/g, '');
-        // Remove stack traces
-        sanitized = sanitized.replace(/\n\s*at .*/g, '');
-        // Truncate
-        if (sanitized.length > 200) {
-            sanitized = sanitized.substring(0, 200) + '...';
-        }
-        return sanitized.trim();
-    }
-};
-exports.AuditLoggerService = AuditLoggerService;
-exports.AuditLoggerService = AuditLoggerService = tslib_1.__decorate([
-    (0, sdk_1.Provider)({
-        name: 'codecall:audit-logger',
-        scope: sdk_1.ProviderScope.GLOBAL,
-    })
-], AuditLoggerService);
-exports.default = AuditLoggerService;
-//# sourceMappingURL=audit-logger.service.js.map

package/src/codecall/services/audit-logger.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-logger.service.js","sourceRoot":"","sources":["../../../../src/codecall/services/audit-logger.service.ts"],"names":[],"mappings":";AAAA,mEAAmE;;;;AAEnE,uCAAwD;AAExD;;GAEG;AACU,QAAA,iBAAiB,GAAG;IAC/B,+BAA+B;IAC/B,eAAe,EAAE,0BAA0B;IAC3C,8CAA8C;IAC9C,iBAAiB,EAAE,4BAA4B;IAC/C,8BAA8B;IAC9B,iBAAiB,EAAE,4BAA4B;IAC/C,iCAAiC;IACjC,iBAAiB,EAAE,4BAA4B;IAE/C,sCAAsC;IACtC,eAAe,EAAE,0BAA0B;IAC3C,uCAAuC;IACvC,iBAAiB,EAAE,4BAA4B;IAC/C,uBAAuB;IACvB,iBAAiB,EAAE,4BAA4B;IAE/C,oCAAoC;IACpC,uBAAuB,EAAE,kCAAkC;IAC3D,yBAAyB;IACzB,sBAAsB,EAAE,iCAAiC;IACzD,mDAAmD;IACnD,oBAAoB,EAAE,+BAA+B;IAErD,uBAAuB;IACvB,gBAAgB,EAAE,2BAA2B;IAC7C,qBAAqB;IACrB,kBAAkB,EAAE,6BAA6B;IACjD,8BAA8B;IAC9B,gBAAgB,EAAE,2BAA2B;CACrC,CAAC;AAgFX;;;;;;;;;;;GAWG;AAKI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACrB,SAAS,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC/C,gBAAgB,GAAG,CAAC,CAAC;IAE7B;;;;;OAKG;IACH,SAAS,CAAC,QAA4B;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,QAAQ,SAAS,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,WAAmB,EAAE,MAAc;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,eAAe;YACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,IAAI,EAAE;gBACJ,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBACnC,YAAY,EAAE,MAAM,CAAC,MAAM;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,WAAmB,EAAE,MAAc,EAAE,UAAkB,EAAE,aAAqB;QAChG,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBACnC,YAAY,EAAE,MAAM,CAAC,MAAM;gBAC3B,aAAa;aACd;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,WAAmB,EAAE,MAAc,EAAE,UAAkB,EAAE,KAAa;QACxF,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBACnC,YAAY,EAAE,MAAM,CAAC,MAAM;gBAC3B,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;aACjC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,WAAmB,EAAE,MAAc,EAAE,UAAkB;QACzE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBACnC,YAAY,EAAE,MAAM,CAAC,MAAM;aAC5B;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,WAAmB,EAAE,QAAgB,EAAE,SAAiB;QACvE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,eAAe;YACvC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,IAAI,EAAE;gBACJ,QAAQ;gBACR,SAAS;aACV;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,WAAmB,EAAE,QAAgB,EAAE,SAAiB,EAAE,UAAkB;QAC7F,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,QAAQ;gBACR,SAAS;aACV;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,kBAAkB,CAChB,WAAmB,EACnB,QAAgB,EAChB,SAAiB,EACjB,UAAkB,EAClB,SAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,QAAQ;gBACR,SAAS;gBACT,SAAS;aACV;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,WAAmB,EAAE,QAAgB;QAC5D,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,uBAAuB;YAC/C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,gFAAgF;aACzF;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,WAAmB,EAAE,QAAgB,EAAE,MAAc;QAC3E,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,sBAAsB;YAC9C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,WAAmB,EAAE,OAAe,EAAE,MAAc;QACxE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,oBAAoB;YAC5C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,IAAI,EAAE;gBACJ,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,WAAmB,EAAE,KAAa,EAAE,WAAmB,EAAE,UAAkB;QACnF,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,gBAAgB;YACxC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,WAAW,EAAE,KAAK,CAAC,MAAM;gBACzB,WAAW;aACZ;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,WAAmB,EAAE,SAAmB,EAAE,UAAkB;QACtE,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,kBAAkB;YAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,SAAS,EAAE,SAAS,CAAC,MAAM;gBAC3B,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,8BAA8B;aAClE;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,WAAmB,EAAE,QAAgB,EAAE,OAAgB,EAAE,UAAkB;QACnF,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,yBAAiB,CAAC,gBAAgB;YACxC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,UAAU;YACV,IAAI,EAAE;gBACJ,QAAQ;gBACR,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,IAAI,CAAC,KAAiB;QAC5B,2CAA2C;QAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAExF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,WAAW,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,UAAU,CAAC,MAAc;QAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YACjC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,2BAA2B;QACjD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,eAAe,CAAC;QAEnC,oBAAoB;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,2CAA2C,EAAE,QAAQ,CAAC,CAAC;QAErF,sBAAsB;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE/C,sBAAsB;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAEjD,WAAW;QACX,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC3B,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;QAClD,CAAC;QAED,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;CACF,CAAA;AAnSY,gDAAkB;6BAAlB,kBAAkB;IAJ9B,IAAA,cAAQ,EAAC;QACR,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,mBAAa,CAAC,MAAM;KAC5B,CAAC;GACW,kBAAkB,CAmS9B;AAED,kBAAe,kBAAkB,CAAC","sourcesContent":["// file: libs/plugins/src/codecall/services/audit-logger.service.ts\n\nimport { Provider, ProviderScope } from '@frontmcp/sdk';\n\n/**\n * Audit event types for CodeCall operations.\n */\nexport const AUDIT_EVENT_TYPES = {\n  /** Script execution started */\n  EXECUTION_START: 'codecall:execution:start',\n  /** Script execution completed successfully */\n  EXECUTION_SUCCESS: 'codecall:execution:success',\n  /** Script execution failed */\n  EXECUTION_FAILURE: 'codecall:execution:failure',\n  /** Script execution timed out */\n  EXECUTION_TIMEOUT: 'codecall:execution:timeout',\n\n  /** Tool call initiated from script */\n  TOOL_CALL_START: 'codecall:tool:call:start',\n  /** Tool call completed successfully */\n  TOOL_CALL_SUCCESS: 'codecall:tool:call:success',\n  /** Tool call failed */\n  TOOL_CALL_FAILURE: 'codecall:tool:call:failure',\n\n  /** Self-reference attack blocked */\n  SECURITY_SELF_REFERENCE: 'codecall:security:self-reference',\n  /** Tool access denied */\n  SECURITY_ACCESS_DENIED: 'codecall:security:access-denied',\n  /** AST validation failed (blocked code pattern) */\n  SECURITY_AST_BLOCKED: 'codecall:security:ast-blocked',\n\n  /** Search performed */\n  SEARCH_PERFORMED: 'codecall:search:performed',\n  /** Tool described */\n  DESCRIBE_PERFORMED: 'codecall:describe:performed',\n  /** Direct invoke performed */\n  INVOKE_PERFORMED: 'codecall:invoke:performed',\n} as const;\n\nexport type AuditEventType = (typeof AUDIT_EVENT_TYPES)[keyof typeof AUDIT_EVENT_TYPES];\n\n/**\n * Base audit event structure.\n */\nexport interface AuditEvent {\n  /** Event type */\n  type: AuditEventType;\n  /** ISO timestamp */\n  timestamp: string;\n  /** Unique execution ID for correlation */\n  executionId: string;\n  /** Duration in milliseconds (if applicable) */\n  durationMs?: number;\n  /** Additional event-specific data */\n  data?: Record<string, unknown>;\n}\n\n/**\n * Execution audit event with script details.\n */\nexport interface ExecutionAuditEvent extends AuditEvent {\n  type:\n    | typeof AUDIT_EVENT_TYPES.EXECUTION_START\n    | typeof AUDIT_EVENT_TYPES.EXECUTION_SUCCESS\n    | typeof AUDIT_EVENT_TYPES.EXECUTION_FAILURE\n    | typeof AUDIT_EVENT_TYPES.EXECUTION_TIMEOUT;\n  data: {\n    /** Script hash (NOT the full script - security!) */\n    scriptHash: string;\n    /** Script length in characters */\n    scriptLength: number;\n    /** Number of tool calls made */\n    toolCallCount?: number;\n    /** Error message (sanitized) if failed */\n    error?: string;\n  };\n}\n\n/**\n * Tool call audit event.\n */\nexport interface ToolCallAuditEvent extends AuditEvent {\n  type:\n    | typeof AUDIT_EVENT_TYPES.TOOL_CALL_START\n    | typeof AUDIT_EVENT_TYPES.TOOL_CALL_SUCCESS\n    | typeof AUDIT_EVENT_TYPES.TOOL_CALL_FAILURE;\n  data: {\n    /** Tool name */\n    toolName: string;\n    /** Call depth (nested calls) */\n    callDepth: number;\n    /** Error code if failed */\n    errorCode?: string;\n  };\n}\n\n/**\n * Security audit event.\n */\nexport interface SecurityAuditEvent extends AuditEvent {\n  type:\n    | typeof AUDIT_EVENT_TYPES.SECURITY_SELF_REFERENCE\n    | typeof AUDIT_EVENT_TYPES.SECURITY_ACCESS_DENIED\n    | typeof AUDIT_EVENT_TYPES.SECURITY_AST_BLOCKED;\n  data: {\n    /** What was blocked */\n    blocked: string;\n    /** Reason for blocking */\n    reason: string;\n  };\n}\n\n/**\n * Audit event listener function type.\n */\nexport type AuditEventListener = (event: AuditEvent) => void;\n\n/**\n * Audit Logger Service\n *\n * Provides centralized audit logging for all CodeCall operations.\n * Uses the SDK event emitter pattern for integration with external systems.\n *\n * Security considerations:\n * - NEVER logs full scripts (only hashes)\n * - NEVER logs tool inputs/outputs (only metadata)\n * - NEVER logs sensitive error details (only sanitized messages)\n * - All events include execution ID for correlation\n */\n@Provider({\n  name: 'codecall:audit-logger',\n  scope: ProviderScope.GLOBAL,\n})\nexport class AuditLoggerService {\n  private listeners: Set<AuditEventListener> = new Set();\n  private executionCounter = 0;\n\n  /**\n   * Subscribe to audit events.\n   *\n   * @param listener - Function to call when events occur\n   * @returns Unsubscribe function\n   */\n  subscribe(listener: AuditEventListener): () => void {\n    this.listeners.add(listener);\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /**\n   * Generate a unique execution ID.\n   */\n  generateExecutionId(): string {\n    const timestamp = Date.now().toString(36);\n    const counter = (++this.executionCounter).toString(36).padStart(4, '0');\n    const random = Math.random().toString(36).substring(2, 8);\n    return `exec_${timestamp}_${counter}_${random}`;\n  }\n\n  /**\n   * Log execution start.\n   */\n  logExecutionStart(executionId: string, script: string): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.EXECUTION_START,\n      timestamp: new Date().toISOString(),\n      executionId,\n      data: {\n        scriptHash: this.hashScript(script),\n        scriptLength: script.length,\n      },\n    });\n  }\n\n  /**\n   * Log execution success.\n   */\n  logExecutionSuccess(executionId: string, script: string, durationMs: number, toolCallCount: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.EXECUTION_SUCCESS,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        scriptHash: this.hashScript(script),\n        scriptLength: script.length,\n        toolCallCount,\n      },\n    });\n  }\n\n  /**\n   * Log execution failure.\n   */\n  logExecutionFailure(executionId: string, script: string, durationMs: number, error: string): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.EXECUTION_FAILURE,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        scriptHash: this.hashScript(script),\n        scriptLength: script.length,\n        error: this.sanitizeError(error),\n      },\n    });\n  }\n\n  /**\n   * Log execution timeout.\n   */\n  logExecutionTimeout(executionId: string, script: string, durationMs: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.EXECUTION_TIMEOUT,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        scriptHash: this.hashScript(script),\n        scriptLength: script.length,\n      },\n    });\n  }\n\n  /**\n   * Log tool call start.\n   */\n  logToolCallStart(executionId: string, toolName: string, callDepth: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.TOOL_CALL_START,\n      timestamp: new Date().toISOString(),\n      executionId,\n      data: {\n        toolName,\n        callDepth,\n      },\n    });\n  }\n\n  /**\n   * Log tool call success.\n   */\n  logToolCallSuccess(executionId: string, toolName: string, callDepth: number, durationMs: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.TOOL_CALL_SUCCESS,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        toolName,\n        callDepth,\n      },\n    });\n  }\n\n  /**\n   * Log tool call failure.\n   */\n  logToolCallFailure(\n    executionId: string,\n    toolName: string,\n    callDepth: number,\n    durationMs: number,\n    errorCode: string,\n  ): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.TOOL_CALL_FAILURE,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        toolName,\n        callDepth,\n        errorCode,\n      },\n    });\n  }\n\n  /**\n   * Log security event: self-reference blocked.\n   */\n  logSecuritySelfReference(executionId: string, toolName: string): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.SECURITY_SELF_REFERENCE,\n      timestamp: new Date().toISOString(),\n      executionId,\n      data: {\n        blocked: toolName,\n        reason: 'Self-reference attack: attempted to call CodeCall tool from within AgentScript',\n      },\n    });\n  }\n\n  /**\n   * Log security event: access denied.\n   */\n  logSecurityAccessDenied(executionId: string, toolName: string, reason: string): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.SECURITY_ACCESS_DENIED,\n      timestamp: new Date().toISOString(),\n      executionId,\n      data: {\n        blocked: toolName,\n        reason: this.sanitizeError(reason),\n      },\n    });\n  }\n\n  /**\n   * Log security event: AST validation blocked.\n   */\n  logSecurityAstBlocked(executionId: string, pattern: string, reason: string): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.SECURITY_AST_BLOCKED,\n      timestamp: new Date().toISOString(),\n      executionId,\n      data: {\n        blocked: pattern,\n        reason: this.sanitizeError(reason),\n      },\n    });\n  }\n\n  /**\n   * Log search operation.\n   */\n  logSearch(executionId: string, query: string, resultCount: number, durationMs: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.SEARCH_PERFORMED,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        queryLength: query.length,\n        resultCount,\n      },\n    });\n  }\n\n  /**\n   * Log describe operation.\n   */\n  logDescribe(executionId: string, toolNames: string[], durationMs: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.DESCRIBE_PERFORMED,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        toolCount: toolNames.length,\n        toolNames: toolNames.slice(0, 10), // Limit to first 10 for audit\n      },\n    });\n  }\n\n  /**\n   * Log invoke operation.\n   */\n  logInvoke(executionId: string, toolName: string, success: boolean, durationMs: number): void {\n    this.emit({\n      type: AUDIT_EVENT_TYPES.INVOKE_PERFORMED,\n      timestamp: new Date().toISOString(),\n      executionId,\n      durationMs,\n      data: {\n        toolName,\n        success,\n      },\n    });\n  }\n\n  /**\n   * Emit an audit event to all listeners.\n   */\n  private emit(event: AuditEvent): void {\n    // Freeze the event to prevent modification\n    const frozenEvent = Object.freeze({ ...event, data: Object.freeze({ ...event.data }) });\n\n    for (const listener of this.listeners) {\n      try {\n        listener(frozenEvent);\n      } catch {\n        // Never let listener errors propagate\n      }\n    }\n  }\n\n  /**\n   * Create a simple hash of the script for identification.\n   * Uses a fast, non-cryptographic hash for performance.\n   */\n  private hashScript(script: string): string {\n    let hash = 0;\n    for (let i = 0; i < script.length; i++) {\n      const char = script.charCodeAt(i);\n      hash = (hash << 5) - hash + char;\n      hash = hash & hash; // Convert to 32bit integer\n    }\n    return `sh_${(hash >>> 0).toString(16).padStart(8, '0')}`;\n  }\n\n  /**\n   * Sanitize error messages to remove sensitive information.\n   */\n  private sanitizeError(error: string): string {\n    if (!error) return 'Unknown error';\n\n    // Remove file paths\n    let sanitized = error.replace(/(?:\\/[\\w.-]+)+|(?:[A-Za-z]:\\\\[\\w\\\\.-]+)+/g, '[path]');\n\n    // Remove line numbers\n    sanitized = sanitized.replace(/:\\d+:\\d+/g, '');\n\n    // Remove stack traces\n    sanitized = sanitized.replace(/\\n\\s*at .*/g, '');\n\n    // Truncate\n    if (sanitized.length > 200) {\n      sanitized = sanitized.substring(0, 200) + '...';\n    }\n\n    return sanitized.trim();\n  }\n}\n\nexport default AuditLoggerService;\n"]}

package/src/codecall/services/enclave.service.js

@@ -1,214 +0,0 @@
-"use strict";
-// file: libs/plugins/src/codecall/services/enclave.service.ts
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScriptTooLargeError = void 0;
-const tslib_1 = require("tslib");
-const sdk_1 = require("@frontmcp/sdk");
-const enclave_vm_1 = require("enclave-vm");
-/**
- * Service for executing AgentScript code using enclave-vm
- *
- * This service wraps the Enclave class and provides:
- * - Safe AgentScript execution with AST validation
- * - Automatic code transformation (callTool -> __safe_callTool)
- * - Runtime limits (timeout, iterations, tool calls)
- * - Tool call integration with FrontMCP pipeline
- */
-/**
- * Error thrown when script exceeds maximum length and sidecar is disabled
- */
-class ScriptTooLargeError extends Error {
-    code = 'SCRIPT_TOO_LARGE';
-    scriptLength;
-    maxLength;
-    constructor(scriptLength, maxLength) {
-        super(`Script length (${scriptLength} characters) exceeds maximum allowed length (${maxLength} characters). ` +
-            `Enable sidecar to handle large data, or reduce script size.`);
-        this.name = 'ScriptTooLargeError';
-        this.scriptLength = scriptLength;
-        this.maxLength = maxLength;
-    }
-}
-exports.ScriptTooLargeError = ScriptTooLargeError;
-let EnclaveService = class EnclaveService {
-    vmOptions;
-    sidecarOptions;
-    constructor(config) {
-        // Use getAll() to avoid deep type instantiation with DottedPath<T>
-        const all = config.getAll();
-        this.vmOptions = all.resolvedVm;
-        this.sidecarOptions = all.sidecar;
-    }
-    /**
-     * Execute AgentScript code in the enclave
-     *
-     * @param code - The AgentScript code to execute (raw, not transformed)
-     * @param environment - The VM environment with callTool, getTool, etc.
-     * @returns Execution result with success/error and logs
-     * @throws ScriptTooLargeError if script exceeds max length and sidecar is disabled
-     */
-    async execute(code, environment) {
-        const logs = [];
-        // Validate script length when sidecar is disabled
-        if (!this.sidecarOptions.enabled && this.sidecarOptions.maxScriptLengthWhenDisabled !== null) {
-            const maxLength = this.sidecarOptions.maxScriptLengthWhenDisabled;
-            if (code.length > maxLength) {
-                throw new ScriptTooLargeError(code.length, maxLength);
-            }
-        }
-        // Create tool handler that bridges to CodeCallVmEnvironment
-        const toolHandler = async (toolName, args) => {
-            return environment.callTool(toolName, args);
-        };
-        // Build sidecar configuration if enabled
-        const sidecar = this.sidecarOptions.enabled
-            ? {
-                enabled: true,
-                maxTotalSize: this.sidecarOptions.maxTotalSize,
-                maxReferenceSize: this.sidecarOptions.maxReferenceSize,
-                extractionThreshold: this.sidecarOptions.extractionThreshold,
-                maxResolvedSize: this.sidecarOptions.maxResolvedSize,
-                allowComposites: this.sidecarOptions.allowComposites,
-            }
-            : undefined;
-        // Create enclave with configuration from CodeCallConfig
-        const enclave = new enclave_vm_1.Enclave({
-            timeout: this.vmOptions.timeoutMs,
-            maxToolCalls: this.vmOptions.maxSteps || 100,
-            maxIterations: 10000,
-            toolHandler,
-            validate: true,
-            transform: true,
-            sidecar,
-            // Allow functions in globals since we intentionally provide getTool, mcpLog, mcpNotify, and console
-            allowFunctionsInGlobals: true,
-            globals: {
-                // Provide getTool as a custom global
-                getTool: environment.getTool,
-                // Provide logging functions if available
-                ...(environment.mcpLog
-                    ? {
-                        mcpLog: (level, message, metadata) => {
-                            environment.mcpLog(level, message, metadata);
-                            logs.push(`[mcp:${level}] ${message}`);
-                        },
-                    }
-                    : {}),
-                ...(environment.mcpNotify
-                    ? {
-                        mcpNotify: (event, payload) => {
-                            environment.mcpNotify(event, payload);
-                            logs.push(`[notify] ${event}`);
-                        },
-                    }
-                    : {}),
-                // Provide console if allowed
-                ...(this.vmOptions.allowConsole
-                    ? {
-                        console: {
-                            log: (...args) => {
-                                const message = args.map((arg) => String(arg)).join(' ');
-                                logs.push(`[log] ${message}`);
-                            },
-                            warn: (...args) => {
-                                const message = args.map((arg) => String(arg)).join(' ');
-                                logs.push(`[warn] ${message}`);
-                            },
-                            error: (...args) => {
-                                const message = args.map((arg) => String(arg)).join(' ');
-                                logs.push(`[error] ${message}`);
-                            },
-                        },
-                    }
-                    : {}),
-            },
-        });
-        try {
-            const result = await enclave.run(code);
-            return this.mapEnclaveResult(result, logs);
-        }
-        finally {
-            enclave.dispose();
-        }
-    }
-    /**
-     * Map Enclave ExecutionResult to EnclaveExecutionResult
-     */
-    mapEnclaveResult(result, logs) {
-        if (result.success) {
-            return {
-                success: true,
-                result: result.value,
-                logs,
-                timedOut: false,
-                stats: {
-                    duration: result.stats.duration,
-                    toolCallCount: result.stats.toolCallCount,
-                    iterationCount: result.stats.iterationCount,
-                },
-            };
-        }
-        // Handle error cases
-        const error = result.error;
-        const timedOut = error.message?.includes('timed out') || error.code === 'TIMEOUT';
-        // Check if it's a validation error
-        if (error.code === 'VALIDATION_ERROR') {
-            return {
-                success: false,
-                error: {
-                    message: error.message,
-                    name: 'ValidationError',
-                    code: error.code,
-                },
-                logs,
-                timedOut: false,
-            };
-        }
-        // Check if it's a tool error (has toolName in the error data)
-        const errorData = error.data;
-        const toolName = errorData?.['toolName'];
-        if (toolName) {
-            return {
-                success: false,
-                error: {
-                    message: error.message,
-                    name: error.name,
-                    stack: error.stack,
-                    code: error.code,
-                    toolName,
-                    toolInput: errorData?.['toolInput'],
-                    details: errorData?.['details'],
-                },
-                logs,
-                timedOut,
-            };
-        }
-        // Generic error
-        return {
-            success: false,
-            error: {
-                message: error.message,
-                name: error.name,
-                stack: error.stack,
-                code: error.code,
-            },
-            logs,
-            timedOut,
-            stats: {
-                duration: result.stats.duration,
-                toolCallCount: result.stats.toolCallCount,
-                iterationCount: result.stats.iterationCount,
-            },
-        };
-    }
-};
-EnclaveService = tslib_1.__decorate([
-    (0, sdk_1.Provider)({
-        name: 'codecall:enclave',
-        description: 'Executes AgentScript code in a secure enclave',
-        scope: sdk_1.ProviderScope.GLOBAL,
-    }),
-    tslib_1.__metadata("design:paramtypes", [Function])
-], EnclaveService);
-exports.default = EnclaveService;
-//# sourceMappingURL=enclave.service.js.map

package/src/codecall/services/enclave.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enclave.service.js","sourceRoot":"","sources":["../../../../src/codecall/services/enclave.service.ts"],"names":[],"mappings":";AAAA,8DAA8D;;;;AAE9D,uCAAwD;AACxD,2CAA2G;AA8B3G;;;;;;;;GAQG;AACH;;GAEG;AACH,MAAa,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,kBAAkB,CAAC;IAC1B,YAAY,CAAS;IACrB,SAAS,CAAS;IAE3B,YAAY,YAAoB,EAAE,SAAiB;QACjD,KAAK,CACH,kBAAkB,YAAY,gDAAgD,SAAS,gBAAgB;YACrG,6DAA6D,CAChE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAdD,kDAcC;AAOc,IAAM,cAAc,GAApB,MAAM,cAAc;IAChB,SAAS,CAA4B;IACrC,cAAc,CAAyB;IAExD,YAAY,MAAsB;QAChC,mEAAmE;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,WAAkC;QAC5D,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,kDAAkD;QAClD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,2BAA2B,KAAK,IAAI,EAAE,CAAC;YAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,2BAA2B,CAAC;YAClE,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,MAAM,WAAW,GAAgB,KAAK,EAAE,QAAgB,EAAE,IAA6B,EAAE,EAAE;YACzF,OAAO,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC;QAEF,yCAAyC;QACzC,MAAM,OAAO,GAAwC,IAAI,CAAC,cAAc,CAAC,OAAO;YAC9E,CAAC,CAAC;gBACE,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,YAAY;gBAC9C,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,gBAAgB;gBACtD,mBAAmB,EAAE,IAAI,CAAC,cAAc,CAAC,mBAAmB;gBAC5D,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe;gBACpD,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,eAAe;aACrD;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,wDAAwD;QACxD,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC;YAC1B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS;YACjC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,GAAG;YAC5C,aAAa,EAAE,KAAK;YACpB,WAAW;YACX,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;YACf,OAAO;YACP,oGAAoG;YACpG,uBAAuB,EAAE,IAAI;YAC7B,OAAO,EAAE;gBACP,qCAAqC;gBACrC,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,yCAAyC;gBACzC,GAAG,CAAC,WAAW,CAAC,MAAM;oBACpB,CAAC,CAAC;wBACE,MAAM,EAAE,CACN,KAA0C,EAC1C,OAAe,EACf,QAAkC,EAClC,EAAE;4BACF,WAAW,CAAC,MAAO,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;4BAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;wBACzC,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,WAAW,CAAC,SAAS;oBACvB,CAAC,CAAC;wBACE,SAAS,EAAE,CAAC,KAAa,EAAE,OAAgC,EAAE,EAAE;4BAC7D,WAAW,CAAC,SAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;4BACvC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;wBACjC,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,6BAA6B;gBAC7B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY;oBAC7B,CAAC,CAAC;wBACE,OAAO,EAAE;4BACP,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gCAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCACzD,IAAI,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;4BAChC,CAAC;4BACD,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gCAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCACzD,IAAI,CAAC,IAAI,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;4BACjC,CAAC;4BACD,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gCAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gCACzD,IAAI,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;4BAClC,CAAC;yBACF;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAU,IAAI,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,MAAgC,EAAE,IAAc;QACvE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,IAAI;gBACJ,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE;oBACL,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;oBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;oBACzC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;iBAC5C;aACF,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAM,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;QAElF,mCAAmC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB;gBACD,IAAI;gBACJ,QAAQ,EAAE,KAAK;aAChB,CAAC;QACJ,CAAC;QAED,8DAA8D;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,IAA2C,CAAC;QACpE,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,UAAU,CAAuB,CAAC;QAC/D,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ;oBACR,SAAS,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC;oBACnC,OAAO,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC;iBAChC;gBACD,IAAI;gBACJ,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB;YACD,IAAI;YACJ,QAAQ;YACR,KAAK,EAAE;gBACL,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;gBACzC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;aAC5C;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AA1LoB,cAAc;IALlC,IAAA,cAAQ,EAAC;QACR,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,+CAA+C;QAC5D,KAAK,EAAE,mBAAa,CAAC,MAAM;KAC5B,CAAC;;GACmB,cAAc,CA0LlC;kBA1LoB,cAAc","sourcesContent":["// file: libs/plugins/src/codecall/services/enclave.service.ts\n\nimport { Provider, ProviderScope } from '@frontmcp/sdk';\nimport { Enclave, type ExecutionResult, type ToolHandler, type ReferenceSidecarOptions } from 'enclave-vm';\nimport type CodeCallConfig from '../providers/code-call.config';\nimport type { CodeCallVmEnvironment, ResolvedCodeCallVmOptions } from '../codecall.symbol';\nimport type { CodeCallSidecarOptions } from '../codecall.types';\n\n/**\n * Result from enclave execution - maps to existing VmExecutionResult interface\n */\nexport interface EnclaveExecutionResult {\n  success: boolean;\n  result?: unknown;\n  error?: {\n    message: string;\n    name: string;\n    stack?: string;\n    code?: string;\n    toolName?: string;\n    toolInput?: unknown;\n    details?: unknown;\n    [key: string]: unknown;\n  };\n  logs: string[];\n  timedOut: boolean;\n  stats?: {\n    duration: number;\n    toolCallCount: number;\n    iterationCount: number;\n  };\n}\n\n/**\n * Service for executing AgentScript code using enclave-vm\n *\n * This service wraps the Enclave class and provides:\n * - Safe AgentScript execution with AST validation\n * - Automatic code transformation (callTool -> __safe_callTool)\n * - Runtime limits (timeout, iterations, tool calls)\n * - Tool call integration with FrontMCP pipeline\n */\n/**\n * Error thrown when script exceeds maximum length and sidecar is disabled\n */\nexport class ScriptTooLargeError extends Error {\n  readonly code = 'SCRIPT_TOO_LARGE';\n  readonly scriptLength: number;\n  readonly maxLength: number;\n\n  constructor(scriptLength: number, maxLength: number) {\n    super(\n      `Script length (${scriptLength} characters) exceeds maximum allowed length (${maxLength} characters). ` +\n        `Enable sidecar to handle large data, or reduce script size.`,\n    );\n    this.name = 'ScriptTooLargeError';\n    this.scriptLength = scriptLength;\n    this.maxLength = maxLength;\n  }\n}\n\n@Provider({\n  name: 'codecall:enclave',\n  description: 'Executes AgentScript code in a secure enclave',\n  scope: ProviderScope.GLOBAL,\n})\nexport default class EnclaveService {\n  private readonly vmOptions: ResolvedCodeCallVmOptions;\n  private readonly sidecarOptions: CodeCallSidecarOptions;\n\n  constructor(config: CodeCallConfig) {\n    // Use getAll() to avoid deep type instantiation with DottedPath<T>\n    const all = config.getAll();\n    this.vmOptions = all.resolvedVm;\n    this.sidecarOptions = all.sidecar;\n  }\n\n  /**\n   * Execute AgentScript code in the enclave\n   *\n   * @param code - The AgentScript code to execute (raw, not transformed)\n   * @param environment - The VM environment with callTool, getTool, etc.\n   * @returns Execution result with success/error and logs\n   * @throws ScriptTooLargeError if script exceeds max length and sidecar is disabled\n   */\n  async execute(code: string, environment: CodeCallVmEnvironment): Promise<EnclaveExecutionResult> {\n    const logs: string[] = [];\n\n    // Validate script length when sidecar is disabled\n    if (!this.sidecarOptions.enabled && this.sidecarOptions.maxScriptLengthWhenDisabled !== null) {\n      const maxLength = this.sidecarOptions.maxScriptLengthWhenDisabled;\n      if (code.length > maxLength) {\n        throw new ScriptTooLargeError(code.length, maxLength);\n      }\n    }\n\n    // Create tool handler that bridges to CodeCallVmEnvironment\n    const toolHandler: ToolHandler = async (toolName: string, args: Record<string, unknown>) => {\n      return environment.callTool(toolName, args);\n    };\n\n    // Build sidecar configuration if enabled\n    const sidecar: ReferenceSidecarOptions | undefined = this.sidecarOptions.enabled\n      ? {\n          enabled: true,\n          maxTotalSize: this.sidecarOptions.maxTotalSize,\n          maxReferenceSize: this.sidecarOptions.maxReferenceSize,\n          extractionThreshold: this.sidecarOptions.extractionThreshold,\n          maxResolvedSize: this.sidecarOptions.maxResolvedSize,\n          allowComposites: this.sidecarOptions.allowComposites,\n        }\n      : undefined;\n\n    // Create enclave with configuration from CodeCallConfig\n    const enclave = new Enclave({\n      timeout: this.vmOptions.timeoutMs,\n      maxToolCalls: this.vmOptions.maxSteps || 100,\n      maxIterations: 10000,\n      toolHandler,\n      validate: true,\n      transform: true,\n      sidecar,\n      // Allow functions in globals since we intentionally provide getTool, mcpLog, mcpNotify, and console\n      allowFunctionsInGlobals: true,\n      globals: {\n        // Provide getTool as a custom global\n        getTool: environment.getTool,\n        // Provide logging functions if available\n        ...(environment.mcpLog\n          ? {\n              mcpLog: (\n                level: 'debug' | 'info' | 'warn' | 'error',\n                message: string,\n                metadata?: Record<string, unknown>,\n              ) => {\n                environment.mcpLog!(level, message, metadata);\n                logs.push(`[mcp:${level}] ${message}`);\n              },\n            }\n          : {}),\n        ...(environment.mcpNotify\n          ? {\n              mcpNotify: (event: string, payload: Record<string, unknown>) => {\n                environment.mcpNotify!(event, payload);\n                logs.push(`[notify] ${event}`);\n              },\n            }\n          : {}),\n        // Provide console if allowed\n        ...(this.vmOptions.allowConsole\n          ? {\n              console: {\n                log: (...args: unknown[]) => {\n                  const message = args.map((arg) => String(arg)).join(' ');\n                  logs.push(`[log] ${message}`);\n                },\n                warn: (...args: unknown[]) => {\n                  const message = args.map((arg) => String(arg)).join(' ');\n                  logs.push(`[warn] ${message}`);\n                },\n                error: (...args: unknown[]) => {\n                  const message = args.map((arg) => String(arg)).join(' ');\n                  logs.push(`[error] ${message}`);\n                },\n              },\n            }\n          : {}),\n      },\n    });\n\n    try {\n      const result = await enclave.run<unknown>(code);\n      return this.mapEnclaveResult(result, logs);\n    } finally {\n      enclave.dispose();\n    }\n  }\n\n  /**\n   * Map Enclave ExecutionResult to EnclaveExecutionResult\n   */\n  private mapEnclaveResult(result: ExecutionResult<unknown>, logs: string[]): EnclaveExecutionResult {\n    if (result.success) {\n      return {\n        success: true,\n        result: result.value,\n        logs,\n        timedOut: false,\n        stats: {\n          duration: result.stats.duration,\n          toolCallCount: result.stats.toolCallCount,\n          iterationCount: result.stats.iterationCount,\n        },\n      };\n    }\n\n    // Handle error cases\n    const error = result.error!;\n    const timedOut = error.message?.includes('timed out') || error.code === 'TIMEOUT';\n\n    // Check if it's a validation error\n    if (error.code === 'VALIDATION_ERROR') {\n      return {\n        success: false,\n        error: {\n          message: error.message,\n          name: 'ValidationError',\n          code: error.code,\n        },\n        logs,\n        timedOut: false,\n      };\n    }\n\n    // Check if it's a tool error (has toolName in the error data)\n    const errorData = error.data as Record<string, unknown> | undefined;\n    const toolName = errorData?.['toolName'] as string | undefined;\n    if (toolName) {\n      return {\n        success: false,\n        error: {\n          message: error.message,\n          name: error.name,\n          stack: error.stack,\n          code: error.code,\n          toolName,\n          toolInput: errorData?.['toolInput'],\n          details: errorData?.['details'],\n        },\n        logs,\n        timedOut,\n      };\n    }\n\n    // Generic error\n    return {\n      success: false,\n      error: {\n        message: error.message,\n        name: error.name,\n        stack: error.stack,\n        code: error.code,\n      },\n      logs,\n      timedOut,\n      stats: {\n        duration: result.stats.duration,\n        toolCallCount: result.stats.toolCallCount,\n        iterationCount: result.stats.iterationCount,\n      },\n    };\n  }\n}\n"]}