@stackmemoryai/stackmemory 0.5.57 → 0.5.59

package/dist/src/integrations/linear/webhook.js

@@ -0,0 +1,291 @@
+import { fileURLToPath as __fileURLToPath } from 'url';
+import { dirname as __pathDirname } from 'path';
+const __filename = __fileURLToPath(import.meta.url);
+const __dirname = __pathDirname(__filename);
+import { logger } from "../../core/monitoring/logger.js";
+import { IntegrationError, ErrorCode } from "../../core/errors/index.js";
+import crypto from "crypto";
+function getEnv(key, defaultValue) {
+  const value = process.env[key];
+  if (value === void 0) {
+    if (defaultValue !== void 0) return defaultValue;
+    throw new IntegrationError(
+      `Environment variable ${key} is required`,
+      ErrorCode.LINEAR_WEBHOOK_FAILED
+    );
+  }
+  return value;
+}
+function getOptionalEnv(key) {
+  return process.env[key];
+}
+class LinearWebhookHandler {
+  syncEngine;
+  taskStore;
+  webhookSecret;
+  constructor(webhookSecret) {
+    this.webhookSecret = webhookSecret || process.env["LINEAR_WEBHOOK_SECRET"];
+  }
+  /**
+   * Set the sync engine for processing webhooks
+   */
+  setSyncEngine(syncEngine) {
+    this.syncEngine = syncEngine;
+  }
+  /**
+   * Set the task store for direct updates
+   */
+  setTaskStore(taskStore) {
+    this.taskStore = taskStore;
+  }
+  /**
+   * Verify webhook signature
+   */
+  verifySignature(body, signature) {
+    if (!this.webhookSecret) {
+      logger.warn("No webhook secret configured, skipping verification");
+      return true;
+    }
+    const hmac = crypto.createHmac("sha256", this.webhookSecret);
+    hmac.update(body);
+    const expectedSignature = hmac.digest("hex");
+    return signature === expectedSignature;
+  }
+  /**
+   * Validate webhook payload structure
+   */
+  validateWebhookPayload(payload) {
+    if (!payload || typeof payload !== "object") return null;
+    const p = payload;
+    if (!p.action || typeof p.action !== "string") return null;
+    if (!p.type || typeof p.type !== "string") return null;
+    if (!p.data || typeof p.data !== "object") return null;
+    if (!p.data.id || typeof p.data.id !== "string") return null;
+    if (p.data.title && typeof p.data.title === "string") {
+      p.data.title = p.data.title.substring(0, 500);
+    }
+    if (p.data.description && typeof p.data.description === "string") {
+      p.data.description = p.data.description.substring(0, 5e3);
+    }
+    return p;
+  }
+  /**
+   * Process incoming webhook
+   */
+  async processWebhook(payload) {
+    const validatedPayload = this.validateWebhookPayload(payload);
+    if (!validatedPayload) {
+      logger.error("Invalid webhook payload received");
+      throw new IntegrationError(
+        "Invalid webhook payload",
+        ErrorCode.LINEAR_WEBHOOK_FAILED
+      );
+    }
+    logger.info("Processing Linear webhook", {
+      action: validatedPayload.action,
+      type: validatedPayload.type,
+      id: validatedPayload.data.id
+    });
+    payload = validatedPayload;
+    if (payload.type !== "Issue") {
+      logger.info(`Ignoring webhook for type: ${payload.type}`);
+      return;
+    }
+    switch (payload.action) {
+      case "create":
+        await this.handleIssueCreated(payload);
+        break;
+      case "update":
+        await this.handleIssueUpdated(payload);
+        break;
+      case "remove":
+        await this.handleIssueRemoved(payload);
+        break;
+      default:
+        logger.warn(`Unknown webhook action: ${payload.action}`);
+    }
+  }
+  /**
+   * Handle issue created in Linear
+   */
+  async handleIssueCreated(payload) {
+    logger.info("Linear issue created", {
+      identifier: payload.data.identifier
+    });
+    if (!this.shouldSyncIssue(payload.data)) {
+      return;
+    }
+    logger.info("Would create StackMemory task for Linear issue", {
+      identifier: payload.data.identifier,
+      title: payload.data.title
+    });
+    if (this.taskStore) {
+      try {
+        const taskId = this.taskStore.createTask({
+          frameId: "linear-import",
+          // Special frame for Linear imports
+          title: payload.data.title || "Untitled Linear Issue",
+          description: payload.data.description || "",
+          priority: this.mapLinearPriorityToStackMemory(payload.data.priority),
+          assignee: payload.data.assignee?.email,
+          tags: payload.data.labels?.map((l) => l.name) || []
+        });
+        this.storeMapping(taskId, payload.data.id);
+        logger.info("Created StackMemory task from Linear issue", {
+          stackmemoryId: taskId,
+          linearId: payload.data.id
+        });
+      } catch (error) {
+        logger.error("Failed to create task from Linear issue", {
+          error: error instanceof Error ? error.message : String(error)
+        });
+      }
+    }
+  }
+  /**
+   * Handle issue updated in Linear
+   */
+  async handleIssueUpdated(payload) {
+    logger.info("Linear issue updated", {
+      identifier: payload.data.identifier
+    });
+    if (!this.syncEngine) {
+      logger.warn("No sync engine configured, cannot process update");
+      return;
+    }
+    const mapping = this.findMappingByLinearId(payload.data.id);
+    if (!mapping) {
+      logger.info("No mapping found for Linear issue", { id: payload.data.id });
+      return;
+    }
+    const task = this.taskStore?.getTask(mapping.stackmemoryId);
+    if (!task) {
+      logger.warn("StackMemory task not found", { id: mapping.stackmemoryId });
+      return;
+    }
+    let newStatus;
+    if (payload.data.state) {
+      const mappedStatus = this.mapLinearStateToStatus(payload.data.state);
+      if (mappedStatus !== task.status) {
+        newStatus = mappedStatus;
+      }
+    }
+    if (payload.data.completedAt) {
+      newStatus = "completed";
+    }
+    if (newStatus) {
+      this.taskStore?.updateTaskStatus(
+        mapping.stackmemoryId,
+        newStatus,
+        "Linear webhook update"
+      );
+      logger.info("Updated StackMemory task status from webhook", {
+        taskId: mapping.stackmemoryId,
+        newStatus
+      });
+    }
+    if (payload.data.title && payload.data.title !== task.title) {
+      logger.info(
+        "Task title changed in Linear but not updated in StackMemory",
+        {
+          taskId: mapping.stackmemoryId,
+          oldTitle: task.title,
+          newTitle: payload.data.title
+        }
+      );
+    }
+  }
+  /**
+   * Handle issue removed in Linear
+   */
+  async handleIssueRemoved(payload) {
+    logger.info("Linear issue removed", {
+      identifier: payload.data.identifier
+    });
+    const mapping = this.findMappingByLinearId(payload.data.id);
+    if (!mapping) {
+      logger.info("No mapping found for removed Linear issue");
+      return;
+    }
+    this.taskStore?.updateTaskStatus(
+      mapping.stackmemoryId,
+      "cancelled",
+      "Linear issue deleted"
+    );
+    logger.info("Marked StackMemory task as cancelled due to Linear deletion", {
+      taskId: mapping.stackmemoryId
+    });
+  }
+  /**
+   * Check if we should sync this issue
+   */
+  shouldSyncIssue(issue) {
+    if (!issue.title) {
+      return false;
+    }
+    if (issue.state?.type === "canceled" || issue.state?.type === "archived") {
+      return false;
+    }
+    return true;
+  }
+  /**
+   * Find mapping by Linear ID
+   */
+  findMappingByLinearId(linearId) {
+    const mapping = this.taskMappings.get(linearId);
+    if (mapping) {
+      return { stackmemoryId: mapping, linearId };
+    }
+    return null;
+  }
+  // In-memory task mappings (Linear ID -> StackMemory ID)
+  taskMappings = /* @__PURE__ */ new Map();
+  /**
+   * Store mapping between Linear and StackMemory IDs
+   */
+  storeMapping(stackmemoryId, linearId) {
+    this.taskMappings.set(linearId, stackmemoryId);
+  }
+  /**
+   * Map Linear priority to StackMemory priority
+   */
+  mapLinearPriorityToStackMemory(priority) {
+    if (!priority) return "medium";
+    if (priority <= 1) return "urgent";
+    if (priority === 2) return "high";
+    if (priority === 3) return "medium";
+    return "low";
+  }
+  /**
+   * Map Linear state to StackMemory status
+   */
+  mapLinearStateToStatus(state) {
+    const stateType = state.type?.toLowerCase() || state.name?.toLowerCase();
+    switch (stateType) {
+      case "backlog":
+      case "unstarted":
+        return "pending";
+      case "started":
+      case "in progress":
+        return "in_progress";
+      case "completed":
+      case "done":
+        return "completed";
+      case "canceled":
+      case "cancelled":
+        return "cancelled";
+      default:
+        return "pending";
+    }
+  }
+  /**
+   * Map Linear priority to StackMemory priority
+   */
+  mapLinearPriorityToPriority(priority) {
+    return 5 - priority;
+  }
+}
+export {
+  LinearWebhookHandler
+};
+//# sourceMappingURL=webhook.js.map

package/dist/src/integrations/linear/webhook.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/integrations/linear/webhook.ts"],
+  "sourcesContent": ["/**\n * Linear Webhook Handler\n * Processes incoming webhooks from Linear for real-time sync\n */\n\nimport { logger } from '../../core/monitoring/logger.js';\nimport { IntegrationError, ErrorCode } from '../../core/errors/index.js';\nimport { LinearSyncEngine } from './sync.js';\nimport { LinearTaskManager } from '../../features/tasks/linear-task-manager.js';\nimport crypto from 'crypto';\n// Type-safe environment variable access\nfunction getEnv(key: string, defaultValue?: string): string {\n  const value = process.env[key];\n  if (value === undefined) {\n    if (defaultValue !== undefined) return defaultValue;\n    throw new IntegrationError(\n      `Environment variable ${key} is required`,\n      ErrorCode.LINEAR_WEBHOOK_FAILED\n    );\n  }\n  return value;\n}\n\nfunction getOptionalEnv(key: string): string | undefined {\n  return process.env[key];\n}\n\nexport interface LinearWebhookPayload {\n  action: 'create' | 'update' | 'remove';\n  createdAt: string;\n  data: {\n    id: string;\n    identifier: string;\n    title?: string;\n    description?: string;\n    state?: {\n      id: string;\n      name: string;\n      type: string;\n    };\n    priority?: number;\n    assignee?: {\n      id: string;\n      name: string;\n      email: string;\n    };\n    team?: {\n      id: string;\n      key: string;\n      name: string;\n    };\n    labels?: Array<{\n      id: string;\n      name: string;\n      color: string;\n    }>;\n    dueDate?: string;\n    completedAt?: string;\n    updatedAt: string;\n  };\n  type: 'Issue' | 'Comment' | 'Project' | 'Cycle';\n  url: string;\n  webhookId: string;\n  webhookTimestamp: number;\n}\n\nexport class LinearWebhookHandler {\n  private syncEngine?: LinearSyncEngine;\n  private taskStore?: LinearTaskManager;\n  private webhookSecret?: string;\n\n  constructor(webhookSecret?: string) {\n    this.webhookSecret = webhookSecret || process.env['LINEAR_WEBHOOK_SECRET'];\n  }\n\n  /**\n   * Set the sync engine for processing webhooks\n   */\n  setSyncEngine(syncEngine: LinearSyncEngine): void {\n    this.syncEngine = syncEngine;\n  }\n\n  /**\n   * Set the task store for direct updates\n   */\n  setTaskStore(taskStore: LinearTaskManager): void {\n    this.taskStore = taskStore;\n  }\n\n  /**\n   * Verify webhook signature\n   */\n  verifySignature(body: string, signature: string): boolean {\n    if (!this.webhookSecret) {\n      logger.warn('No webhook secret configured, skipping verification');\n      return true; // Allow in development\n    }\n\n    const hmac = crypto.createHmac('sha256', this.webhookSecret);\n    hmac.update(body);\n    const expectedSignature = hmac.digest('hex');\n\n    return signature === expectedSignature;\n  }\n\n  /**\n   * Validate webhook payload structure\n   */\n  private validateWebhookPayload(\n    payload: unknown\n  ): LinearWebhookPayload | null {\n    if (!payload || typeof payload !== 'object') return null;\n\n    const p = payload as any;\n\n    // Validate required fields\n    if (!p.action || typeof p.action !== 'string') return null;\n    if (!p.type || typeof p.type !== 'string') return null;\n    if (!p.data || typeof p.data !== 'object') return null;\n    if (!p.data.id || typeof p.data.id !== 'string') return null;\n\n    // Sanitize string fields to prevent injection\n    if (p.data.title && typeof p.data.title === 'string') {\n      p.data.title = p.data.title.substring(0, 500); // Limit length\n    }\n    if (p.data.description && typeof p.data.description === 'string') {\n      p.data.description = p.data.description.substring(0, 5000); // Limit length\n    }\n\n    return p as LinearWebhookPayload;\n  }\n\n  /**\n   * Process incoming webhook\n   */\n  async processWebhook(payload: LinearWebhookPayload): Promise<void> {\n    // Validate payload first\n    const validatedPayload = this.validateWebhookPayload(payload);\n    if (!validatedPayload) {\n      logger.error('Invalid webhook payload received');\n      throw new IntegrationError(\n        'Invalid webhook payload',\n        ErrorCode.LINEAR_WEBHOOK_FAILED\n      );\n    }\n\n    logger.info('Processing Linear webhook', {\n      action: validatedPayload.action,\n      type: validatedPayload.type,\n      id: validatedPayload.data.id,\n    });\n\n    payload = validatedPayload;\n\n    // Only process Issue webhooks for now\n    if (payload.type !== 'Issue') {\n      logger.info(`Ignoring webhook for type: ${payload.type}`);\n      return;\n    }\n\n    switch (payload.action) {\n      case 'create':\n        await this.handleIssueCreated(payload);\n        break;\n      case 'update':\n        await this.handleIssueUpdated(payload);\n        break;\n      case 'remove':\n        await this.handleIssueRemoved(payload);\n        break;\n      default:\n        logger.warn(`Unknown webhook action: ${payload.action}`);\n    }\n  }\n\n  /**\n   * Handle issue created in Linear\n   */\n  private async handleIssueCreated(\n    payload: LinearWebhookPayload\n  ): Promise<void> {\n    logger.info('Linear issue created', {\n      identifier: payload.data.identifier,\n    });\n\n    // Check if we should sync this issue\n    if (!this.shouldSyncIssue(payload.data)) {\n      return;\n    }\n\n    // For now, just log it - full implementation would create a StackMemory task\n    logger.info('Would create StackMemory task for Linear issue', {\n      identifier: payload.data.identifier,\n      title: payload.data.title,\n    });\n\n    // Create a StackMemory task from Linear issue\n    if (this.taskStore) {\n      try {\n        const taskId = this.taskStore.createTask({\n          frameId: 'linear-import', // Special frame for Linear imports\n          title: payload.data.title || 'Untitled Linear Issue',\n          description: payload.data.description || '',\n          priority: this.mapLinearPriorityToStackMemory(payload.data.priority),\n          assignee: payload.data.assignee?.email,\n          tags: payload.data.labels?.map((l: any) => l.name) || [],\n        });\n\n        // Store mapping for future syncing\n        this.storeMapping(taskId, payload.data.id);\n\n        logger.info('Created StackMemory task from Linear issue', {\n          stackmemoryId: taskId,\n          linearId: payload.data.id,\n        });\n      } catch (error: unknown) {\n        logger.error('Failed to create task from Linear issue', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n  }\n\n  /**\n   * Handle issue updated in Linear\n   */\n  private async handleIssueUpdated(\n    payload: LinearWebhookPayload\n  ): Promise<void> {\n    logger.info('Linear issue updated', {\n      identifier: payload.data.identifier,\n    });\n\n    if (!this.syncEngine) {\n      logger.warn('No sync engine configured, cannot process update');\n      return;\n    }\n\n    // Find mapped StackMemory task\n    const mapping = this.findMappingByLinearId(payload.data.id);\n    if (!mapping) {\n      logger.info('No mapping found for Linear issue', { id: payload.data.id });\n      return;\n    }\n\n    // Check for conflicts\n    const task = this.taskStore?.getTask(mapping.stackmemoryId);\n    if (!task) {\n      logger.warn('StackMemory task not found', { id: mapping.stackmemoryId });\n      return;\n    }\n\n    // Update the task based on Linear changes\n    let newStatus:\n      | 'pending'\n      | 'in_progress'\n      | 'completed'\n      | 'cancelled'\n      | undefined;\n\n    if (payload.data.state) {\n      const mappedStatus = this.mapLinearStateToStatus(payload.data.state) as\n        | 'pending'\n        | 'in_progress'\n        | 'completed'\n        | 'cancelled';\n      if (mappedStatus !== task.status) {\n        newStatus = mappedStatus;\n      }\n    }\n\n    if (payload.data.completedAt) {\n      newStatus = 'completed';\n    }\n\n    // Update status if changed\n    if (newStatus) {\n      this.taskStore?.updateTaskStatus(\n        mapping.stackmemoryId,\n        newStatus,\n        'Linear webhook update'\n      );\n      logger.info('Updated StackMemory task status from webhook', {\n        taskId: mapping.stackmemoryId,\n        newStatus,\n      });\n    }\n\n    // For other properties, we'd need to implement a more complete update method\n    // For now, log what changed\n    if (payload.data.title && payload.data.title !== task.title) {\n      logger.info(\n        'Task title changed in Linear but not updated in StackMemory',\n        {\n          taskId: mapping.stackmemoryId,\n          oldTitle: task.title,\n          newTitle: payload.data.title,\n        }\n      );\n    }\n  }\n\n  /**\n   * Handle issue removed in Linear\n   */\n  private async handleIssueRemoved(\n    payload: LinearWebhookPayload\n  ): Promise<void> {\n    logger.info('Linear issue removed', {\n      identifier: payload.data.identifier,\n    });\n\n    const mapping = this.findMappingByLinearId(payload.data.id);\n    if (!mapping) {\n      logger.info('No mapping found for removed Linear issue');\n      return;\n    }\n\n    // Mark the StackMemory task as cancelled\n    this.taskStore?.updateTaskStatus(\n      mapping.stackmemoryId,\n      'cancelled',\n      'Linear issue deleted'\n    );\n\n    logger.info('Marked StackMemory task as cancelled due to Linear deletion', {\n      taskId: mapping.stackmemoryId,\n    });\n  }\n\n  /**\n   * Check if we should sync this issue\n   */\n  private shouldSyncIssue(issue: LinearWebhookPayload['data']): boolean {\n    // Add your filtering logic here\n    // For example, only sync issues from specific teams or with certain labels\n\n    // Skip issues without a title\n    if (!issue.title) {\n      return false;\n    }\n\n    // Skip archived/cancelled issues\n    if (issue.state?.type === 'canceled' || issue.state?.type === 'archived') {\n      return false;\n    }\n\n    return true;\n  }\n\n  /**\n   * Find mapping by Linear ID\n   */\n  private findMappingByLinearId(\n    linearId: string\n  ): { stackmemoryId: string; linearId: string } | null {\n    // Use in-memory mapping for now\n    // In production, this would query a database\n    const mapping = this.taskMappings.get(linearId);\n    if (mapping) {\n      return { stackmemoryId: mapping, linearId };\n    }\n    return null;\n  }\n\n  // In-memory task mappings (Linear ID -> StackMemory ID)\n  private taskMappings = new Map<string, string>();\n\n  /**\n   * Store mapping between Linear and StackMemory IDs\n   */\n  private storeMapping(stackmemoryId: string, linearId: string): void {\n    this.taskMappings.set(linearId, stackmemoryId);\n    // In production, persist to database\n  }\n\n  /**\n   * Map Linear priority to StackMemory priority\n   */\n  private mapLinearPriorityToStackMemory(\n    priority: number | undefined\n  ): 'low' | 'medium' | 'high' | 'urgent' {\n    if (!priority) return 'medium';\n    if (priority <= 1) return 'urgent';\n    if (priority === 2) return 'high';\n    if (priority === 3) return 'medium';\n    return 'low';\n  }\n\n  /**\n   * Map Linear state to StackMemory status\n   */\n  private mapLinearStateToStatus(state: {\n    type?: string;\n    name?: string;\n  }): string {\n    const stateType = state.type?.toLowerCase() || state.name?.toLowerCase();\n\n    switch (stateType) {\n      case 'backlog':\n      case 'unstarted':\n        return 'pending';\n      case 'started':\n      case 'in progress':\n        return 'in_progress';\n      case 'completed':\n      case 'done':\n        return 'completed';\n      case 'canceled':\n      case 'cancelled':\n        return 'cancelled';\n      default:\n        return 'pending';\n    }\n  }\n\n  /**\n   * Map Linear priority to StackMemory priority\n   */\n  private mapLinearPriorityToPriority(priority: number): number {\n    // Linear uses 0-4, StackMemory uses 1-5\n    return 5 - priority;\n  }\n}\n"],
+  "mappings": ";;;;AAKA,SAAS,cAAc;AACvB,SAAS,kBAAkB,iBAAiB;AAG5C,OAAO,YAAY;AAEnB,SAAS,OAAO,KAAa,cAA+B;AAC1D,QAAM,QAAQ,QAAQ,IAAI,GAAG;AAC7B,MAAI,UAAU,QAAW;AACvB,QAAI,iBAAiB,OAAW,QAAO;AACvC,UAAM,IAAI;AAAA,MACR,wBAAwB,GAAG;AAAA,MAC3B,UAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,KAAiC;AACvD,SAAO,QAAQ,IAAI,GAAG;AACxB;AAyCO,MAAM,qBAAqB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,eAAwB;AAClC,SAAK,gBAAgB,iBAAiB,QAAQ,IAAI,uBAAuB;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKA,cAAc,YAAoC;AAChD,SAAK,aAAa;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,WAAoC;AAC/C,SAAK,YAAY;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAgB,MAAc,WAA4B;AACxD,QAAI,CAAC,KAAK,eAAe;AACvB,aAAO,KAAK,qDAAqD;AACjE,aAAO;AAAA,IACT;AAEA,UAAM,OAAO,OAAO,WAAW,UAAU,KAAK,aAAa;AAC3D,SAAK,OAAO,IAAI;AAChB,UAAM,oBAAoB,KAAK,OAAO,KAAK;AAE3C,WAAO,cAAc;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,uBACN,SAC6B;AAC7B,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AAEpD,UAAM,IAAI;AAGV,QAAI,CAAC,EAAE,UAAU,OAAO,EAAE,WAAW,SAAU,QAAO;AACtD,QAAI,CAAC,EAAE,QAAQ,OAAO,EAAE,SAAS,SAAU,QAAO;AAClD,QAAI,CAAC,EAAE,QAAQ,OAAO,EAAE,SAAS,SAAU,QAAO;AAClD,QAAI,CAAC,EAAE,KAAK,MAAM,OAAO,EAAE,KAAK,OAAO,SAAU,QAAO;AAGxD,QAAI,EAAE,KAAK,SAAS,OAAO,EAAE,KAAK,UAAU,UAAU;AACpD,QAAE,KAAK,QAAQ,EAAE,KAAK,MAAM,UAAU,GAAG,GAAG;AAAA,IAC9C;AACA,QAAI,EAAE,KAAK,eAAe,OAAO,EAAE,KAAK,gBAAgB,UAAU;AAChE,QAAE,KAAK,cAAc,EAAE,KAAK,YAAY,UAAU,GAAG,GAAI;AAAA,IAC3D;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eAAe,SAA8C;AAEjE,UAAM,mBAAmB,KAAK,uBAAuB,OAAO;AAC5D,QAAI,CAAC,kBAAkB;AACrB,aAAO,MAAM,kCAAkC;AAC/C,YAAM,IAAI;AAAA,QACR;AAAA,QACA,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO,KAAK,6BAA6B;AAAA,MACvC,QAAQ,iBAAiB;AAAA,MACzB,MAAM,iBAAiB;AAAA,MACvB,IAAI,iBAAiB,KAAK;AAAA,IAC5B,CAAC;AAED,cAAU;AAGV,QAAI,QAAQ,SAAS,SAAS;AAC5B,aAAO,KAAK,8BAA8B,QAAQ,IAAI,EAAE;AACxD;AAAA,IACF;AAEA,YAAQ,QAAQ,QAAQ;AAAA,MACtB,KAAK;AACH,cAAM,KAAK,mBAAmB,OAAO;AACrC;AAAA,MACF,KAAK;AACH,cAAM,KAAK,mBAAmB,OAAO;AACrC;AAAA,MACF,KAAK;AACH,cAAM,KAAK,mBAAmB,OAAO;AACrC;AAAA,MACF;AACE,eAAO,KAAK,2BAA2B,QAAQ,MAAM,EAAE;AAAA,IAC3D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,mBACZ,SACe;AACf,WAAO,KAAK,wBAAwB;AAAA,MAClC,YAAY,QAAQ,KAAK;AAAA,IAC3B,CAAC;AAGD,QAAI,CAAC,KAAK,gBAAgB,QAAQ,IAAI,GAAG;AACvC;AAAA,IACF;AAGA,WAAO,KAAK,kDAAkD;AAAA,MAC5D,YAAY,QAAQ,KAAK;AAAA,MACzB,OAAO,QAAQ,KAAK;AAAA,IACtB,CAAC;AAGD,QAAI,KAAK,WAAW;AAClB,UAAI;AACF,cAAM,SAAS,KAAK,UAAU,WAAW;AAAA,UACvC,SAAS;AAAA;AAAA,UACT,OAAO,QAAQ,KAAK,SAAS;AAAA,UAC7B,aAAa,QAAQ,KAAK,eAAe;AAAA,UACzC,UAAU,KAAK,+BAA+B,QAAQ,KAAK,QAAQ;AAAA,UACnE,UAAU,QAAQ,KAAK,UAAU;AAAA,UACjC,MAAM,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAW,EAAE,IAAI,KAAK,CAAC;AAAA,QACzD,CAAC;AAGD,aAAK,aAAa,QAAQ,QAAQ,KAAK,EAAE;AAEzC,eAAO,KAAK,8CAA8C;AAAA,UACxD,eAAe;AAAA,UACf,UAAU,QAAQ,KAAK;AAAA,QACzB,CAAC;AAAA,MACH,SAAS,OAAgB;AACvB,eAAO,MAAM,2CAA2C;AAAA,UACtD,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC9D,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,mBACZ,SACe;AACf,WAAO,KAAK,wBAAwB;AAAA,MAClC,YAAY,QAAQ,KAAK;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,KAAK,YAAY;AACpB,aAAO,KAAK,kDAAkD;AAC9D;AAAA,IACF;AAGA,UAAM,UAAU,KAAK,sBAAsB,QAAQ,KAAK,EAAE;AAC1D,QAAI,CAAC,SAAS;AACZ,aAAO,KAAK,qCAAqC,EAAE,IAAI,QAAQ,KAAK,GAAG,CAAC;AACxE;AAAA,IACF;AAGA,UAAM,OAAO,KAAK,WAAW,QAAQ,QAAQ,aAAa;AAC1D,QAAI,CAAC,MAAM;AACT,aAAO,KAAK,8BAA8B,EAAE,IAAI,QAAQ,cAAc,CAAC;AACvE;AAAA,IACF;AAGA,QAAI;AAOJ,QAAI,QAAQ,KAAK,OAAO;AACtB,YAAM,eAAe,KAAK,uBAAuB,QAAQ,KAAK,KAAK;AAKnE,UAAI,iBAAiB,KAAK,QAAQ;AAChC,oBAAY;AAAA,MACd;AAAA,IACF;AAEA,QAAI,QAAQ,KAAK,aAAa;AAC5B,kBAAY;AAAA,IACd;AAGA,QAAI,WAAW;AACb,WAAK,WAAW;AAAA,QACd,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AACA,aAAO,KAAK,gDAAgD;AAAA,QAC1D,QAAQ,QAAQ;AAAA,QAChB;AAAA,MACF,CAAC;AAAA,IACH;AAIA,QAAI,QAAQ,KAAK,SAAS,QAAQ,KAAK,UAAU,KAAK,OAAO;AAC3D,aAAO;AAAA,QACL;AAAA,QACA;AAAA,UACE,QAAQ,QAAQ;AAAA,UAChB,UAAU,KAAK;AAAA,UACf,UAAU,QAAQ,KAAK;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,mBACZ,SACe;AACf,WAAO,KAAK,wBAAwB;AAAA,MAClC,YAAY,QAAQ,KAAK;AAAA,IAC3B,CAAC;AAED,UAAM,UAAU,KAAK,sBAAsB,QAAQ,KAAK,EAAE;AAC1D,QAAI,CAAC,SAAS;AACZ,aAAO,KAAK,2CAA2C;AACvD;AAAA,IACF;AAGA,SAAK,WAAW;AAAA,MACd,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAEA,WAAO,KAAK,+DAA+D;AAAA,MACzE,QAAQ,QAAQ;AAAA,IAClB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAgB,OAA8C;AAKpE,QAAI,CAAC,MAAM,OAAO;AAChB,aAAO;AAAA,IACT;AAGA,QAAI,MAAM,OAAO,SAAS,cAAc,MAAM,OAAO,SAAS,YAAY;AACxE,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,sBACN,UACoD;AAGpD,UAAM,UAAU,KAAK,aAAa,IAAI,QAAQ;AAC9C,QAAI,SAAS;AACX,aAAO,EAAE,eAAe,SAAS,SAAS;AAAA,IAC5C;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,eAAe,oBAAI,IAAoB;AAAA;AAAA;AAAA;AAAA,EAKvC,aAAa,eAAuB,UAAwB;AAClE,SAAK,aAAa,IAAI,UAAU,aAAa;AAAA,EAE/C;AAAA;AAAA;AAAA;AAAA,EAKQ,+BACN,UACsC;AACtC,QAAI,CAAC,SAAU,QAAO;AACtB,QAAI,YAAY,EAAG,QAAO;AAC1B,QAAI,aAAa,EAAG,QAAO;AAC3B,QAAI,aAAa,EAAG,QAAO;AAC3B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAAuB,OAGpB;AACT,UAAM,YAAY,MAAM,MAAM,YAAY,KAAK,MAAM,MAAM,YAAY;AAEvE,YAAQ,WAAW;AAAA,MACjB,KAAK;AAAA,MACL,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,4BAA4B,UAA0B;AAE5D,WAAO,IAAI;AAAA,EACb;AACF;",
+  "names": []
+}

package/dist/src/integrations/mcp/handlers/code-execution-handlers.js

@@ -0,0 +1,266 @@
+import { fileURLToPath as __fileURLToPath } from 'url';
+import { dirname as __pathDirname } from 'path';
+const __filename = __fileURLToPath(import.meta.url);
+const __dirname = __pathDirname(__filename);
+import { spawn } from "child_process";
+import { promises as fs } from "fs";
+import { join } from "path";
+import { tmpdir } from "os";
+import { randomBytes } from "crypto";
+const MAX_OUTPUT_SIZE = 5e4;
+const EXECUTION_TIMEOUT = 3e4;
+class CodeExecutionHandler {
+  allowedLanguages = ["python", "javascript", "typescript"];
+  sandboxDir;
+  constructor() {
+    this.sandboxDir = join(tmpdir(), "stackmemory-sandbox");
+    this.ensureSandboxDir();
+  }
+  async ensureSandboxDir() {
+    try {
+      await fs.mkdir(this.sandboxDir, { recursive: true });
+    } catch (error) {
+      console.error("Failed to create sandbox directory:", error);
+    }
+  }
+  /**
+   * Execute code in a controlled environment
+   */
+  async executeCode(params) {
+    const { language, code, workingDirectory, timeout = EXECUTION_TIMEOUT } = params;
+    if (!this.allowedLanguages.includes(language.toLowerCase())) {
+      return {
+        success: false,
+        stdout: "",
+        stderr: `Language '${language}' is not allowed. Use: ${this.allowedLanguages.join(", ")}`,
+        exitCode: 1,
+        truncated: false
+      };
+    }
+    const tempFile = join(
+      this.sandboxDir,
+      `code_${randomBytes(8).toString("hex")}.${this.getFileExtension(language)}`
+    );
+    try {
+      await fs.writeFile(tempFile, code, "utf-8");
+      const result = await this.runCode(language, tempFile, workingDirectory || this.sandboxDir, timeout);
+      await fs.unlink(tempFile).catch(() => {
+      });
+      return result;
+    } catch (error) {
+      return {
+        success: false,
+        stdout: "",
+        stderr: `Execution error: ${error instanceof Error ? error.message : String(error)}`,
+        exitCode: 1,
+        truncated: false
+      };
+    }
+  }
+  /**
+   * Run code with appropriate interpreter
+   */
+  async runCode(language, filePath, workingDirectory, timeout) {
+    const command = this.getCommand(language);
+    const args = this.getArgs(language, filePath);
+    return new Promise((resolve) => {
+      let stdout = "";
+      let stderr = "";
+      let truncated = false;
+      const child = spawn(command, args, {
+        cwd: workingDirectory,
+        env: {
+          ...process.env,
+          PYTHONDONTWRITEBYTECODE: "1",
+          // Don't create .pyc files
+          NODE_ENV: "sandbox"
+        }
+      });
+      const timeoutId = setTimeout(() => {
+        child.kill("SIGTERM");
+        stderr += "\n[Process killed due to timeout]";
+      }, timeout);
+      child.stdout.on("data", (data) => {
+        stdout += data.toString();
+        if (stdout.length > MAX_OUTPUT_SIZE) {
+          truncated = true;
+          child.kill("SIGTERM");
+        }
+      });
+      child.stderr.on("data", (data) => {
+        stderr += data.toString();
+        if (stderr.length > MAX_OUTPUT_SIZE) {
+          truncated = true;
+          child.kill("SIGTERM");
+        }
+      });
+      child.on("close", async (code) => {
+        clearTimeout(timeoutId);
+        let outputFile;
+        if (truncated) {
+          outputFile = join(this.sandboxDir, `output_${randomBytes(8).toString("hex")}.txt`);
+          await fs.writeFile(outputFile, stdout + "\n---STDERR---\n" + stderr, "utf-8").catch(() => {
+          });
+        }
+        resolve({
+          success: code === 0,
+          stdout: truncated ? stdout.slice(0, MAX_OUTPUT_SIZE) + "\n[Output truncated]" : stdout,
+          stderr: truncated ? stderr.slice(0, MAX_OUTPUT_SIZE) + "\n[Output truncated]" : stderr,
+          exitCode: code,
+          truncated,
+          outputFile
+        });
+      });
+      child.on("error", (error) => {
+        clearTimeout(timeoutId);
+        resolve({
+          success: false,
+          stdout: "",
+          stderr: `Failed to start process: ${error.message}`,
+          exitCode: null,
+          truncated: false
+        });
+      });
+    });
+  }
+  /**
+   * Get file extension for language
+   */
+  getFileExtension(language) {
+    switch (language.toLowerCase()) {
+      case "python":
+        return "py";
+      case "javascript":
+        return "js";
+      case "typescript":
+        return "ts";
+      default:
+        return "txt";
+    }
+  }
+  /**
+   * Get command for language
+   */
+  getCommand(language) {
+    switch (language.toLowerCase()) {
+      case "python":
+        return "python3";
+      case "javascript":
+        return "node";
+      case "typescript":
+        return "npx";
+      default:
+        return "echo";
+    }
+  }
+  /**
+   * Get arguments for language
+   */
+  getArgs(language, filePath) {
+    switch (language.toLowerCase()) {
+      case "python":
+        return [filePath];
+      case "javascript":
+        return [filePath];
+      case "typescript":
+        return ["tsx", filePath];
+      default:
+        return ["Unsupported language"];
+    }
+  }
+  /**
+   * Validate code for dangerous patterns
+   */
+  validateCode(code) {
+    const warnings = [];
+    const dangerousPatterns = [
+      { pattern: /import\s+os/i, message: "Importing os module detected" },
+      { pattern: /import\s+subprocess/i, message: "Subprocess module detected" },
+      { pattern: /exec\s*\(/i, message: "exec() function detected" },
+      { pattern: /eval\s*\(/i, message: "eval() function detected" },
+      { pattern: /__import__/i, message: "__import__ detected" },
+      { pattern: /open\s*\([^)]*['"]\//i, message: "Absolute path file access detected" },
+      { pattern: /require\s*\([^)]*child_process/i, message: "child_process module detected" },
+      { pattern: /require\s*\([^)]*fs/i, message: "fs module access detected" }
+    ];
+    for (const { pattern, message } of dangerousPatterns) {
+      if (pattern.test(code)) {
+        warnings.push(message);
+      }
+    }
+    return {
+      safe: warnings.length === 0,
+      warnings
+    };
+  }
+  /**
+   * Get sandbox status
+   */
+  async getSandboxStatus() {
+    try {
+      const files = await fs.readdir(this.sandboxDir);
+      let totalSize = 0;
+      for (const file of files) {
+        const stat = await fs.stat(join(this.sandboxDir, file));
+        totalSize += stat.size;
+      }
+      return {
+        sandboxDir: this.sandboxDir,
+        tempFiles: files.length,
+        totalSize
+      };
+    } catch {
+      return {
+        sandboxDir: this.sandboxDir,
+        tempFiles: 0,
+        totalSize: 0
+      };
+    }
+  }
+  /**
+   * Clean sandbox directory
+   */
+  async cleanSandbox() {
+    try {
+      const files = await fs.readdir(this.sandboxDir);
+      for (const file of files) {
+        await fs.unlink(join(this.sandboxDir, file)).catch(() => {
+        });
+      }
+    } catch (error) {
+      console.error("Failed to clean sandbox:", error);
+    }
+  }
+}
+const codeExecutionHandlers = {
+  "code.execute": async (params) => {
+    const handler = new CodeExecutionHandler();
+    const validation = handler.validateCode(params.code);
+    if (!validation.safe && !params.force) {
+      return {
+        error: "Code validation failed",
+        warnings: validation.warnings,
+        hint: "Add force: true to execute anyway"
+      };
+    }
+    return await handler.executeCode(params);
+  },
+  "code.validate": async (params) => {
+    const handler = new CodeExecutionHandler();
+    return handler.validateCode(params.code);
+  },
+  "code.sandbox_status": async () => {
+    const handler = new CodeExecutionHandler();
+    return await handler.getSandboxStatus();
+  },
+  "code.clean_sandbox": async () => {
+    const handler = new CodeExecutionHandler();
+    await handler.cleanSandbox();
+    return { success: true, message: "Sandbox cleaned" };
+  }
+};
+export {
+  CodeExecutionHandler,
+  codeExecutionHandlers
+};
+//# sourceMappingURL=code-execution-handlers.js.map

package/dist/src/integrations/mcp/handlers/code-execution-handlers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/integrations/mcp/handlers/code-execution-handlers.ts"],
+  "sourcesContent": ["/**\n * Code Execution MCP Handlers\n * Provides controlled Python/JavaScript code execution with safety measures\n */\n\nimport { spawn } from 'child_process';\nimport { promises as fs } from 'fs';\nimport { join } from 'path';\nimport { tmpdir } from 'os';\nimport { randomBytes } from 'crypto';\n\ninterface ExecutionResult {\n  success: boolean;\n  stdout: string;\n  stderr: string;\n  exitCode: number | null;\n  truncated: boolean;\n  outputFile?: string;\n}\n\nconst MAX_OUTPUT_SIZE = 50000; // Maximum output size before truncation\nconst EXECUTION_TIMEOUT = 30000; // 30 seconds timeout\n\nexport class CodeExecutionHandler {\n  private readonly allowedLanguages = ['python', 'javascript', 'typescript'];\n  private readonly sandboxDir: string;\n\n  constructor() {\n    // Create a sandbox directory for code execution\n    this.sandboxDir = join(tmpdir(), 'stackmemory-sandbox');\n    this.ensureSandboxDir();\n  }\n\n  private async ensureSandboxDir(): Promise<void> {\n    try {\n      await fs.mkdir(this.sandboxDir, { recursive: true });\n    } catch (error) {\n      console.error('Failed to create sandbox directory:', error);\n    }\n  }\n\n  /**\n   * Execute code in a controlled environment\n   */\n  async executeCode(params: {\n    language: string;\n    code: string;\n    workingDirectory?: string;\n    timeout?: number;\n  }): Promise<ExecutionResult> {\n    const { language, code, workingDirectory, timeout = EXECUTION_TIMEOUT } = params;\n\n    // Validate language\n    if (!this.allowedLanguages.includes(language.toLowerCase())) {\n      return {\n        success: false,\n        stdout: '',\n        stderr: `Language '${language}' is not allowed. Use: ${this.allowedLanguages.join(', ')}`,\n        exitCode: 1,\n        truncated: false,\n      };\n    }\n\n    // Create temporary file for code\n    const tempFile = join(\n      this.sandboxDir,\n      `code_${randomBytes(8).toString('hex')}.${this.getFileExtension(language)}`\n    );\n\n    try {\n      // Write code to temporary file\n      await fs.writeFile(tempFile, code, 'utf-8');\n\n      // Execute code\n      const result = await this.runCode(language, tempFile, workingDirectory || this.sandboxDir, timeout);\n\n      // Clean up temp file\n      await fs.unlink(tempFile).catch(() => {});\n\n      return result;\n    } catch (error) {\n      return {\n        success: false,\n        stdout: '',\n        stderr: `Execution error: ${error instanceof Error ? error.message : String(error)}`,\n        exitCode: 1,\n        truncated: false,\n      };\n    }\n  }\n\n  /**\n   * Run code with appropriate interpreter\n   */\n  private async runCode(\n    language: string,\n    filePath: string,\n    workingDirectory: string,\n    timeout: number\n  ): Promise<ExecutionResult> {\n    const command = this.getCommand(language);\n    const args = this.getArgs(language, filePath);\n\n    return new Promise((resolve) => {\n      let stdout = '';\n      let stderr = '';\n      let truncated = false;\n\n      const child = spawn(command, args, {\n        cwd: workingDirectory,\n        env: {\n          ...process.env,\n          PYTHONDONTWRITEBYTECODE: '1', // Don't create .pyc files\n          NODE_ENV: 'sandbox',\n        },\n      });\n\n      // Set timeout\n      const timeoutId = setTimeout(() => {\n        child.kill('SIGTERM');\n        stderr += '\\n[Process killed due to timeout]';\n      }, timeout);\n\n      child.stdout.on('data', (data) => {\n        stdout += data.toString();\n        if (stdout.length > MAX_OUTPUT_SIZE) {\n          truncated = true;\n          child.kill('SIGTERM');\n        }\n      });\n\n      child.stderr.on('data', (data) => {\n        stderr += data.toString();\n        if (stderr.length > MAX_OUTPUT_SIZE) {\n          truncated = true;\n          child.kill('SIGTERM');\n        }\n      });\n\n      child.on('close', async (code) => {\n        clearTimeout(timeoutId);\n\n        // If output is truncated, save to file\n        let outputFile: string | undefined;\n        if (truncated) {\n          outputFile = join(this.sandboxDir, `output_${randomBytes(8).toString('hex')}.txt`);\n          await fs.writeFile(outputFile, stdout + '\\n---STDERR---\\n' + stderr, 'utf-8').catch(() => {});\n        }\n\n        resolve({\n          success: code === 0,\n          stdout: truncated ? stdout.slice(0, MAX_OUTPUT_SIZE) + '\\n[Output truncated]' : stdout,\n          stderr: truncated ? stderr.slice(0, MAX_OUTPUT_SIZE) + '\\n[Output truncated]' : stderr,\n          exitCode: code,\n          truncated,\n          outputFile,\n        });\n      });\n\n      child.on('error', (error) => {\n        clearTimeout(timeoutId);\n        resolve({\n          success: false,\n          stdout: '',\n          stderr: `Failed to start process: ${error.message}`,\n          exitCode: null,\n          truncated: false,\n        });\n      });\n    });\n  }\n\n  /**\n   * Get file extension for language\n   */\n  private getFileExtension(language: string): string {\n    switch (language.toLowerCase()) {\n      case 'python':\n        return 'py';\n      case 'javascript':\n        return 'js';\n      case 'typescript':\n        return 'ts';\n      default:\n        return 'txt';\n    }\n  }\n\n  /**\n   * Get command for language\n   */\n  private getCommand(language: string): string {\n    switch (language.toLowerCase()) {\n      case 'python':\n        return 'python3';\n      case 'javascript':\n        return 'node';\n      case 'typescript':\n        return 'npx';\n      default:\n        return 'echo';\n    }\n  }\n\n  /**\n   * Get arguments for language\n   */\n  private getArgs(language: string, filePath: string): string[] {\n    switch (language.toLowerCase()) {\n      case 'python':\n        return [filePath];\n      case 'javascript':\n        return [filePath];\n      case 'typescript':\n        return ['tsx', filePath];\n      default:\n        return ['Unsupported language'];\n    }\n  }\n\n  /**\n   * Validate code for dangerous patterns\n   */\n  validateCode(code: string): { safe: boolean; warnings: string[] } {\n    const warnings: string[] = [];\n    const dangerousPatterns = [\n      { pattern: /import\\s+os/i, message: 'Importing os module detected' },\n      { pattern: /import\\s+subprocess/i, message: 'Subprocess module detected' },\n      { pattern: /exec\\s*\\(/i, message: 'exec() function detected' },\n      { pattern: /eval\\s*\\(/i, message: 'eval() function detected' },\n      { pattern: /__import__/i, message: '__import__ detected' },\n      { pattern: /open\\s*\\([^)]*['\"]\\//i, message: 'Absolute path file access detected' },\n      { pattern: /require\\s*\\([^)]*child_process/i, message: 'child_process module detected' },\n      { pattern: /require\\s*\\([^)]*fs/i, message: 'fs module access detected' },\n    ];\n\n    for (const { pattern, message } of dangerousPatterns) {\n      if (pattern.test(code)) {\n        warnings.push(message);\n      }\n    }\n\n    return {\n      safe: warnings.length === 0,\n      warnings,\n    };\n  }\n\n  /**\n   * Get sandbox status\n   */\n  async getSandboxStatus(): Promise<{\n    sandboxDir: string;\n    tempFiles: number;\n    totalSize: number;\n  }> {\n    try {\n      const files = await fs.readdir(this.sandboxDir);\n      let totalSize = 0;\n\n      for (const file of files) {\n        const stat = await fs.stat(join(this.sandboxDir, file));\n        totalSize += stat.size;\n      }\n\n      return {\n        sandboxDir: this.sandboxDir,\n        tempFiles: files.length,\n        totalSize,\n      };\n    } catch {\n      return {\n        sandboxDir: this.sandboxDir,\n        tempFiles: 0,\n        totalSize: 0,\n      };\n    }\n  }\n\n  /**\n   * Clean sandbox directory\n   */\n  async cleanSandbox(): Promise<void> {\n    try {\n      const files = await fs.readdir(this.sandboxDir);\n      for (const file of files) {\n        await fs.unlink(join(this.sandboxDir, file)).catch(() => {});\n      }\n    } catch (error) {\n      console.error('Failed to clean sandbox:', error);\n    }\n  }\n}\n\n// Export MCP tool handlers\nexport const codeExecutionHandlers = {\n  'code.execute': async (params: any) => {\n    const handler = new CodeExecutionHandler();\n    \n    // Validate code before execution\n    const validation = handler.validateCode(params.code);\n    if (!validation.safe && !params.force) {\n      return {\n        error: 'Code validation failed',\n        warnings: validation.warnings,\n        hint: 'Add force: true to execute anyway',\n      };\n    }\n\n    return await handler.executeCode(params);\n  },\n\n  'code.validate': async (params: any) => {\n    const handler = new CodeExecutionHandler();\n    return handler.validateCode(params.code);\n  },\n\n  'code.sandbox_status': async () => {\n    const handler = new CodeExecutionHandler();\n    return await handler.getSandboxStatus();\n  },\n\n  'code.clean_sandbox': async () => {\n    const handler = new CodeExecutionHandler();\n    await handler.cleanSandbox();\n    return { success: true, message: 'Sandbox cleaned' };\n  },\n};"],
+  "mappings": ";;;;AAKA,SAAS,aAAa;AACtB,SAAS,YAAY,UAAU;AAC/B,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAW5B,MAAM,kBAAkB;AACxB,MAAM,oBAAoB;AAEnB,MAAM,qBAAqB;AAAA,EACf,mBAAmB,CAAC,UAAU,cAAc,YAAY;AAAA,EACxD;AAAA,EAEjB,cAAc;AAEZ,SAAK,aAAa,KAAK,OAAO,GAAG,qBAAqB;AACtD,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEA,MAAc,mBAAkC;AAC9C,QAAI;AACF,YAAM,GAAG,MAAM,KAAK,YAAY,EAAE,WAAW,KAAK,CAAC;AAAA,IACrD,SAAS,OAAO;AACd,cAAQ,MAAM,uCAAuC,KAAK;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAY,QAKW;AAC3B,UAAM,EAAE,UAAU,MAAM,kBAAkB,UAAU,kBAAkB,IAAI;AAG1E,QAAI,CAAC,KAAK,iBAAiB,SAAS,SAAS,YAAY,CAAC,GAAG;AAC3D,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ,aAAa,QAAQ,0BAA0B,KAAK,iBAAiB,KAAK,IAAI,CAAC;AAAA,QACvF,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,IACF;AAGA,UAAM,WAAW;AAAA,MACf,KAAK;AAAA,MACL,QAAQ,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,IAAI,KAAK,iBAAiB,QAAQ,CAAC;AAAA,IAC3E;AAEA,QAAI;AAEF,YAAM,GAAG,UAAU,UAAU,MAAM,OAAO;AAG1C,YAAM,SAAS,MAAM,KAAK,QAAQ,UAAU,UAAU,oBAAoB,KAAK,YAAY,OAAO;AAGlG,YAAM,GAAG,OAAO,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAExC,aAAO;AAAA,IACT,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,QAAQ,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QAClF,UAAU;AAAA,QACV,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,QACZ,UACA,UACA,kBACA,SAC0B;AAC1B,UAAM,UAAU,KAAK,WAAW,QAAQ;AACxC,UAAM,OAAO,KAAK,QAAQ,UAAU,QAAQ;AAE5C,WAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAI,SAAS;AACb,UAAI,SAAS;AACb,UAAI,YAAY;AAEhB,YAAM,QAAQ,MAAM,SAAS,MAAM;AAAA,QACjC,KAAK;AAAA,QACL,KAAK;AAAA,UACH,GAAG,QAAQ;AAAA,UACX,yBAAyB;AAAA;AAAA,UACzB,UAAU;AAAA,QACZ;AAAA,MACF,CAAC;AAGD,YAAM,YAAY,WAAW,MAAM;AACjC,cAAM,KAAK,SAAS;AACpB,kBAAU;AAAA,MACZ,GAAG,OAAO;AAEV,YAAM,OAAO,GAAG,QAAQ,CAAC,SAAS;AAChC,kBAAU,KAAK,SAAS;AACxB,YAAI,OAAO,SAAS,iBAAiB;AACnC,sBAAY;AACZ,gBAAM,KAAK,SAAS;AAAA,QACtB;AAAA,MACF,CAAC;AAED,YAAM,OAAO,GAAG,QAAQ,CAAC,SAAS;AAChC,kBAAU,KAAK,SAAS;AACxB,YAAI,OAAO,SAAS,iBAAiB;AACnC,sBAAY;AACZ,gBAAM,KAAK,SAAS;AAAA,QACtB;AAAA,MACF,CAAC;AAED,YAAM,GAAG,SAAS,OAAO,SAAS;AAChC,qBAAa,SAAS;AAGtB,YAAI;AACJ,YAAI,WAAW;AACb,uBAAa,KAAK,KAAK,YAAY,UAAU,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM;AACjF,gBAAM,GAAG,UAAU,YAAY,SAAS,qBAAqB,QAAQ,OAAO,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC9F;AAEA,gBAAQ;AAAA,UACN,SAAS,SAAS;AAAA,UAClB,QAAQ,YAAY,OAAO,MAAM,GAAG,eAAe,IAAI,yBAAyB;AAAA,UAChF,QAAQ,YAAY,OAAO,MAAM,GAAG,eAAe,IAAI,yBAAyB;AAAA,UAChF,UAAU;AAAA,UACV;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAED,YAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,qBAAa,SAAS;AACtB,gBAAQ;AAAA,UACN,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,QAAQ,4BAA4B,MAAM,OAAO;AAAA,UACjD,UAAU;AAAA,UACV,WAAW;AAAA,QACb,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAiB,UAA0B;AACjD,YAAQ,SAAS,YAAY,GAAG;AAAA,MAC9B,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAW,UAA0B;AAC3C,YAAQ,SAAS,YAAY,GAAG;AAAA,MAC9B,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT,KAAK;AACH,eAAO;AAAA,MACT;AACE,eAAO;AAAA,IACX;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,QAAQ,UAAkB,UAA4B;AAC5D,YAAQ,SAAS,YAAY,GAAG;AAAA,MAC9B,KAAK;AACH,eAAO,CAAC,QAAQ;AAAA,MAClB,KAAK;AACH,eAAO,CAAC,QAAQ;AAAA,MAClB,KAAK;AACH,eAAO,CAAC,OAAO,QAAQ;AAAA,MACzB;AACE,eAAO,CAAC,sBAAsB;AAAA,IAClC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,MAAqD;AAChE,UAAM,WAAqB,CAAC;AAC5B,UAAM,oBAAoB;AAAA,MACxB,EAAE,SAAS,gBAAgB,SAAS,+BAA+B;AAAA,MACnE,EAAE,SAAS,wBAAwB,SAAS,6BAA6B;AAAA,MACzE,EAAE,SAAS,cAAc,SAAS,2BAA2B;AAAA,MAC7D,EAAE,SAAS,cAAc,SAAS,2BAA2B;AAAA,MAC7D,EAAE,SAAS,eAAe,SAAS,sBAAsB;AAAA,MACzD,EAAE,SAAS,yBAAyB,SAAS,qCAAqC;AAAA,MAClF,EAAE,SAAS,mCAAmC,SAAS,gCAAgC;AAAA,MACvF,EAAE,SAAS,wBAAwB,SAAS,4BAA4B;AAAA,IAC1E;AAEA,eAAW,EAAE,SAAS,QAAQ,KAAK,mBAAmB;AACpD,UAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,iBAAS,KAAK,OAAO;AAAA,MACvB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,MAAM,SAAS,WAAW;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBAIH;AACD,QAAI;AACF,YAAM,QAAQ,MAAM,GAAG,QAAQ,KAAK,UAAU;AAC9C,UAAI,YAAY;AAEhB,iBAAW,QAAQ,OAAO;AACxB,cAAM,OAAO,MAAM,GAAG,KAAK,KAAK,KAAK,YAAY,IAAI,CAAC;AACtD,qBAAa,KAAK;AAAA,MACpB;AAEA,aAAO;AAAA,QACL,YAAY,KAAK;AAAA,QACjB,WAAW,MAAM;AAAA,QACjB;AAAA,MACF;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,QACL,YAAY,KAAK;AAAA,QACjB,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eAA8B;AAClC,QAAI;AACF,YAAM,QAAQ,MAAM,GAAG,QAAQ,KAAK,UAAU;AAC9C,iBAAW,QAAQ,OAAO;AACxB,cAAM,GAAG,OAAO,KAAK,KAAK,YAAY,IAAI,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC7D;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,4BAA4B,KAAK;AAAA,IACjD;AAAA,EACF;AACF;AAGO,MAAM,wBAAwB;AAAA,EACnC,gBAAgB,OAAO,WAAgB;AACrC,UAAM,UAAU,IAAI,qBAAqB;AAGzC,UAAM,aAAa,QAAQ,aAAa,OAAO,IAAI;AACnD,QAAI,CAAC,WAAW,QAAQ,CAAC,OAAO,OAAO;AACrC,aAAO;AAAA,QACL,OAAO;AAAA,QACP,UAAU,WAAW;AAAA,QACrB,MAAM;AAAA,MACR;AAAA,IACF;AAEA,WAAO,MAAM,QAAQ,YAAY,MAAM;AAAA,EACzC;AAAA,EAEA,iBAAiB,OAAO,WAAgB;AACtC,UAAM,UAAU,IAAI,qBAAqB;AACzC,WAAO,QAAQ,aAAa,OAAO,IAAI;AAAA,EACzC;AAAA,EAEA,uBAAuB,YAAY;AACjC,UAAM,UAAU,IAAI,qBAAqB;AACzC,WAAO,MAAM,QAAQ,iBAAiB;AAAA,EACxC;AAAA,EAEA,sBAAsB,YAAY;AAChC,UAAM,UAAU,IAAI,qBAAqB;AACzC,UAAM,QAAQ,aAAa;AAC3B,WAAO,EAAE,SAAS,MAAM,SAAS,kBAAkB;AAAA,EACrD;AACF;",
+  "names": []
+}