@mondaydotcomorg/atp-server 0.19.11 → 0.19.13

package/dist/index.js

@@ -5,8 +5,7 @@ import { createServer as createServer$1 } from 'http';
 import { ProvenanceMode, ToolOperationType, ToolSensitivityLevel, CallbackType, ToolOperation, ExecutionStatus, sanitizeInput, MAX_CODE_SIZE, ExecutionErrorCode } from '@mondaydotcomorg/atp-protocol';
 import { getProvenance, createProvenanceProxy, ProvenanceSource, setProvenanceExecutionId, SecurityPolicyEngine, createTrackingRuntime, registerProvenanceMetadata, instrumentCode, captureProvenanceSnapshot, cleanupProvenanceForExecution, clearProvenanceExecutionId, DynamicPolicyRegistry, getProvenanceForPrimitive, computeDigest, verifyProvenanceHints, restoreProvenanceSnapshot, markPrimitiveTainted, ProvenanceMode as ProvenanceMode$1, issueProvenanceToken } from '@mondaydotcomorg/atp-provenance';
 export { ProvenanceMode, ProvenanceSecurityError, ProvenanceSource, SecurityPolicyEngine, auditSensitiveAccess, blockLLMRecipients, blockLLMRecipientsWithApproval, canRead, captureProvenanceState, cleanupProvenanceForExecution, clearProvenanceExecutionId, createCustomPolicy, createProvenanceProxy, createTrackingRuntime, getAllProvenance, getBuiltInPolicies, getBuiltInPoliciesWithApproval, getProvenance, getProvenanceForPrimitive, hasProvenance, instrumentCode, isPrimitiveTainted, markPrimitiveTainted, preventDataExfiltration, preventDataExfiltrationWithApproval, requireUserOrigin, requireUserOriginWithApproval, restoreProvenanceState, setProvenanceExecutionId } from '@mondaydotcomorg/atp-provenance';
-import { randomBytes } from 'crypto';
-import { nanoid } from 'nanoid';
+import crypto, { randomBytes, randomUUID } from 'crypto';
 import jwt from 'jsonwebtoken';
 import ivm from 'isolated-vm';
 import { AsyncLocalStorage } from 'async_hooks';
@@ -6822,7 +6821,7 @@ var ClientSessionManager = class {
     return jwt.sign({
       clientId,
       type: "client",
-      jti: nanoid()
+      jti: randomUUID()
     }, this.jwtSecret, {
       expiresIn: 3600
     });
@@ -9084,7 +9083,7 @@ function handleExecutionError(error, pauseError, context, executionId, callbackH
       executionId,
       status: ExecutionStatus.PAUSED,
       needsCallbacks: batchErr.calls.map((call) => ({
-        id: nanoid(),
+        id: randomUUID(),
         type: call.type,
         operation: call.operation,
         payload: call.payload
@@ -9352,7 +9351,7 @@ var SandboxExecutor = class {
     this.compiler = compiler;
   }
   async execute(code, config, clientId, resumeData) {
-    const executionId = resumeData?.executionId || nanoid();
+    const executionId = resumeData?.executionId || randomUUID();
     return runInExecutionContext(executionId, async () => {
       return await this.executeInContext(executionId, clientId || "anonymous", code, config, resumeData);
     });
@@ -10866,7 +10865,7 @@ async function handleHTTPRequest(req, res, deps, responseHeaders) {
             path: ctx.path
           });
         }
-        handleError(res, error, nanoid(), headers);
+        handleError(res, error, randomUUID(), headers);
       } catch (handlerError) {
         try {
           if (!res.headersSent) {
@@ -10951,7 +10950,7 @@ async function handleInit(ctx, sessionManager, auditSink) {
   const result = await sessionManager.initClient(request || {});
   if (auditSink) {
     const event = {
-      eventId: nanoid(),
+      eventId: randomUUID(),
       timestamp: Date.now(),
       clientId: result.clientId,
       eventType: "client_init",
@@ -11200,7 +11199,7 @@ async function handleExecute(ctx, executor, stateManager, config, auditSink, ses
   }
   const onToolCall = auditSink ? (event) => {
     const auditEvent = {
-      eventId: nanoid(),
+      eventId: crypto.randomUUID(),
       timestamp: Date.now(),
       clientId: ctx.clientId || "anonymous",
       eventType: "tool_call",
@@ -11231,11 +11230,16 @@ async function handleExecute(ctx, executor, stateManager, config, auditSink, ses
     provenanceMode: requestConfig.provenanceMode || config.execution.provenanceMode || ProvenanceMode.NONE,
     securityPolicies: config.execution.securityPolicies || [],
     provenanceHints: requestConfig.provenanceHints,
-    requestContext: requestConfig.requestContext,
+    requestContext: {
+      ...requestConfig.requestContext,
+      headers: ctx.headers,
+      path: ctx.path,
+      method: ctx.method
+    },
     onToolCall
   };
   let hintMap;
-  const prelimExecutionId = nanoid();
+  const prelimExecutionId = crypto.randomUUID();
   if (executionConfig.provenanceHints && executionConfig.provenanceHints.length > 0 && executionConfig.provenanceMode !== ProvenanceMode.NONE && ctx.cache) {
     try {
       if (executionConfig.provenanceHints.length > 1e3) {
@@ -11270,7 +11274,7 @@ async function handleExecute(ctx, executor, stateManager, config, auditSink, ses
   const startTime = Date.now();
   if (auditSink) {
     const startEvent = {
-      eventId: nanoid(),
+      eventId: crypto.randomUUID(),
       timestamp: startTime,
       clientId: ctx.clientId || "anonymous",
       eventType: "execution",
@@ -11336,7 +11340,7 @@ async function handleExecute(ctx, executor, stateManager, config, auditSink, ses
   }
   if (auditSink) {
     const endEvent = {
-      eventId: nanoid(),
+      eventId: crypto.randomUUID(),
       timestamp: Date.now(),
       clientId: ctx.clientId || "anonymous",
       eventType: "execution",
@@ -11399,7 +11403,7 @@ function tagCallbackResult(callbackRecord, result, provenanceMode) {
     }
     if (typeof value === "string" || typeof value === "number") {
       const metadata = {
-        id: nanoid(),
+        id: randomUUID(),
         source,
         readers: {
           type: "public"
@@ -21767,9 +21771,12 @@ var AgentToolProtocolServer = class {
       targetGroup = {
         name: groupName,
         type: "custom",
+        description: definition.groupDescription,
         functions: []
       };
       this.apiGroups.push(targetGroup);
+    } else if (definition.groupDescription && !targetGroup.description) {
+      targetGroup.description = definition.groupDescription;
     }
     targetGroup.functions.push({
       name,