kemdicode-mcp 1.15.0

package/dist/mpc/types.d.ts

@@ -0,0 +1,213 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * MPC (Multi-Party Computation) Type Definitions
+ *
+ * Types for Shamir Secret Sharing based threshold cryptography
+ * for secure secret distribution among agents.
+ */
+/**
+ * Individual share from Shamir Secret Sharing
+ */
+export interface MpcShare {
+    /** Unique share identifier */
+    id: string;
+    /** Index of this share (1-based for Shamir) */
+    index: number;
+    /** The share data (hex-encoded) */
+    data: string;
+    /** Agent ID this share is assigned to */
+    agentId: string;
+    /** Secret ID this share belongs to */
+    secretId: string;
+    /** Session ID */
+    sessionId: string;
+    /** When the share was created */
+    createdAt: number;
+    /** Optional encryption metadata */
+    encrypted?: boolean;
+    /** IV if encrypted */
+    iv?: string;
+}
+/**
+ * Metadata about a shared secret
+ */
+export interface MpcSecretMetadata {
+    /** Unique secret identifier */
+    id: string;
+    /** Session this secret belongs to */
+    sessionId: string;
+    /** Total number of shares created */
+    totalShares: number;
+    /** Minimum shares required to reconstruct */
+    threshold: number;
+    /** Agent IDs holding shares */
+    holders: string[];
+    /** Who created/split the secret */
+    creatorAgentId: string;
+    /** When the secret was split */
+    createdAt: number;
+    /** Optional TTL in seconds */
+    ttl?: number;
+    /** Human-readable label */
+    label?: string;
+    /** Optional tags for categorization */
+    tags?: string[];
+    /** Secret type hint */
+    secretType?: 'api-key' | 'password' | 'private-key' | 'generic';
+    /** Hash of original secret for verification */
+    verificationHash?: string;
+}
+/**
+ * Configuration for splitting a secret
+ */
+export interface MpcSplitConfig {
+    /** The secret to split */
+    secret: string;
+    /** Total number of shares to create */
+    totalShares: number;
+    /** Minimum shares needed to reconstruct */
+    threshold: number;
+    /** Session ID */
+    sessionId: string;
+    /** Agent who is splitting */
+    creatorAgentId: string;
+    /** Optional label */
+    label?: string;
+    /** Optional TTL in seconds */
+    ttl?: number;
+    /** Optional tags */
+    tags?: string[];
+    /** Secret type hint */
+    secretType?: MpcSecretMetadata['secretType'];
+}
+/**
+ * Result of splitting a secret
+ */
+export interface MpcSplitResult {
+    /** The secret metadata */
+    metadata: MpcSecretMetadata;
+    /** Generated shares (not yet distributed) */
+    shares: MpcShare[];
+}
+/**
+ * Distribution assignment
+ */
+export interface MpcDistribution {
+    /** Secret ID */
+    secretId: string;
+    /** Share index to agent mapping */
+    assignments: Array<{
+        shareIndex: number;
+        agentId: string;
+    }>;
+}
+/**
+ * Request to collect shares for reconstruction
+ */
+export interface MpcReconstructRequest {
+    /** Secret ID to reconstruct */
+    secretId: string;
+    /** Session ID */
+    sessionId: string;
+    /** Agent requesting reconstruction */
+    requestingAgentId: string;
+    /** Agent IDs to request shares from */
+    targetAgentIds?: string[];
+}
+/**
+ * Result of reconstruction attempt
+ */
+export interface MpcReconstructResult {
+    /** Whether reconstruction succeeded */
+    success: boolean;
+    /** The reconstructed secret (if successful) */
+    secret?: string;
+    /** Number of shares collected */
+    sharesCollected: number;
+    /** Threshold required */
+    thresholdRequired: number;
+    /** Error message if failed */
+    error?: string;
+}
+/**
+ * Status of a secret
+ */
+export interface MpcSecretStatus {
+    /** Secret metadata */
+    metadata: MpcSecretMetadata;
+    /** Distribution status per agent */
+    distribution: Array<{
+        agentId: string;
+        shareIndex: number;
+        delivered: boolean;
+        acknowledgedAt?: number;
+    }>;
+    /** Whether enough shares exist to reconstruct */
+    reconstructable: boolean;
+    /** Agents that have acknowledged receipt */
+    acknowledgedCount: number;
+}
+/**
+ * MPC-specific message types for inter-agent communication
+ */
+export type MpcMessageType = 'mpc-share-request' | 'mpc-share-response' | 'mpc-share-delivery' | 'mpc-share-acknowledgment' | 'mpc-reconstruct-request' | 'mpc-reconstruct-contribution';
+/**
+ * MPC share request message
+ */
+export interface MpcShareRequestMessage {
+    type: 'mpc-share-request';
+    secretId: string;
+    requestingAgentId: string;
+    reason?: string;
+}
+/**
+ * MPC share response message
+ */
+export interface MpcShareResponseMessage {
+    type: 'mpc-share-response';
+    secretId: string;
+    shareIndex: number;
+    shareData: string;
+    fromAgentId: string;
+}
+/**
+ * Redis key patterns for MPC
+ */
+export declare const MPC_KEYS: {
+    /** Share storage: mpc:shares:{sessionId}:{secretId}:{agentId} */
+    readonly share: (sessionId: string, secretId: string, agentId: string) => string;
+    /** Secret metadata: mpc:secrets:{sessionId}:{secretId} */
+    readonly secret: (sessionId: string, secretId: string) => string;
+    /** Agent's secrets index: mpc:index:agent:{agentId} */
+    readonly agentIndex: (agentId: string) => string;
+    /** Session's secrets index: mpc:index:session:{sessionId} */
+    readonly sessionIndex: (sessionId: string) => string;
+    /** Pending share requests: mpc:pending:{secretId} */
+    readonly pending: (secretId: string) => string;
+};
+/**
+ * Agent roles allowed to perform MPC operations
+ */
+export declare const MPC_ALLOWED_ROLES: {
+    readonly split: readonly ["supervisor", "coordinator"];
+    readonly distribute: readonly ["supervisor", "coordinator"];
+    readonly reconstruct: readonly ["supervisor", "coordinator"];
+    readonly viewStatus: readonly ["supervisor", "coordinator", "worker", "specialist"];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/mpc/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mpc/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sBAAsB;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mCAAmC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,uBAAuB;IACvB,UAAU,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;IAChE,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,uBAAuB;IACvB,UAAU,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,6CAA6C;IAC7C,MAAM,EAAE,QAAQ,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,WAAW,EAAE,KAAK,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uCAAuC;IACvC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,oCAAoC;IACpC,YAAY,EAAE,KAAK,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH,iDAAiD;IACjD,eAAe,EAAE,OAAO,CAAC;IACzB,4CAA4C;IAC5C,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,oBAAoB,GACpB,0BAA0B,GAC1B,yBAAyB,GACzB,8BAA8B,CAAC;AAEnC;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ;IACnB,iEAAiE;gCAC9C,MAAM,YAAY,MAAM,WAAW,MAAM;IAG5D,0DAA0D;iCACtC,MAAM,YAAY,MAAM;IAE5C,uDAAuD;mCACjC,MAAM;IAE5B,6DAA6D;uCACnC,MAAM;IAEhC,qDAAqD;iCACjC,MAAM;CAClB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAC"}

package/dist/mpc/types.js

@@ -0,0 +1,42 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Redis key patterns for MPC
+ */
+export const MPC_KEYS = {
+    /** Share storage: mpc:shares:{sessionId}:{secretId}:{agentId} */
+    share: (sessionId, secretId, agentId) => `mpc:shares:${sessionId}:${secretId}:${agentId}`,
+    /** Secret metadata: mpc:secrets:{sessionId}:{secretId} */
+    secret: (sessionId, secretId) => `mpc:secrets:${sessionId}:${secretId}`,
+    /** Agent's secrets index: mpc:index:agent:{agentId} */
+    agentIndex: (agentId) => `mpc:index:agent:${agentId}`,
+    /** Session's secrets index: mpc:index:session:{sessionId} */
+    sessionIndex: (sessionId) => `mpc:index:session:${sessionId}`,
+    /** Pending share requests: mpc:pending:{secretId} */
+    pending: (secretId) => `mpc:pending:${secretId}`,
+};
+/**
+ * Agent roles allowed to perform MPC operations
+ */
+export const MPC_ALLOWED_ROLES = {
+    split: ['supervisor', 'coordinator'],
+    distribute: ['supervisor', 'coordinator'],
+    reconstruct: ['supervisor', 'coordinator'],
+    viewStatus: ['supervisor', 'coordinator', 'worker', 'specialist'],
+};
+//# sourceMappingURL=types.js.map

package/dist/mpc/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mpc/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA+LH;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,iEAAiE;IACjE,KAAK,EAAE,CAAC,SAAiB,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE,CAC9D,cAAc,SAAS,IAAI,QAAQ,IAAI,OAAO,EAAE;IAElD,0DAA0D;IAC1D,MAAM,EAAE,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,CAAC,eAAe,SAAS,IAAI,QAAQ,EAAE;IAEvF,uDAAuD;IACvD,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,mBAAmB,OAAO,EAAE;IAE7D,6DAA6D;IAC7D,YAAY,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,qBAAqB,SAAS,EAAE;IAErE,qDAAqD;IACrD,OAAO,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,eAAe,QAAQ,EAAE;CAChD,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,CAAU;IAC7C,UAAU,EAAE,CAAC,YAAY,EAAE,aAAa,CAAU;IAClD,WAAW,EAAE,CAAC,YAAY,EAAE,aAAa,CAAU;IACnD,UAAU,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAU;CAClE,CAAC"}

package/dist/recursive/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Recursive Tool Invocation Module
+ *
+ * Allows agents to safely invoke MCP tools from within tools.
+ *
+ * @module recursive
+ */
+export * from './types.js';
+export * from './tool-invoker.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/recursive/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/recursive/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC"}

package/dist/recursive/index.js

@@ -0,0 +1,27 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Recursive Tool Invocation Module
+ *
+ * Allows agents to safely invoke MCP tools from within tools.
+ *
+ * @module recursive
+ */
+export * from './types.js';
+export * from './tool-invoker.js';
+//# sourceMappingURL=index.js.map

package/dist/recursive/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/recursive/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC"}

package/dist/recursive/tool-invoker.d.ts

@@ -0,0 +1,51 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import { ToolInvocationRequest, ToolInvocationResult, InvocationContext, InvocationPolicy, SafetyCheckResult } from './types.js';
+/**
+ * Check if invocation is allowed
+ */
+export declare function checkSafety(request: ToolInvocationRequest, policy?: InvocationPolicy): Promise<SafetyCheckResult>;
+/**
+ * Invoke a tool
+ */
+export declare function invokeTool(request: ToolInvocationRequest, policy?: InvocationPolicy): Promise<ToolInvocationResult>;
+/**
+ * Invoke multiple tools in batch
+ */
+export declare function invokeBatch(requests: ToolInvocationRequest[], policy?: InvocationPolicy, parallel?: boolean): Promise<ToolInvocationResult[]>;
+/**
+ * Get invocation log for an agent
+ */
+export declare function getInvocationLog(agentId: string, limit?: number): Promise<Array<{
+    invocationId: string;
+    toolName: string;
+    success: boolean;
+    error?: string;
+    duration: number;
+    depth: number;
+    timestamp: number;
+}>>;
+/**
+ * Get current invocation context for an agent
+ */
+export declare function getCurrentContext(agentId: string): InvocationContext | null;
+/**
+ * Clear invocation context (for cleanup)
+ */
+export declare function clearContext(agentId: string): void;
+//# sourceMappingURL=tool-invoker.d.ts.map

package/dist/recursive/tool-invoker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-invoker.d.ts","sourceRoot":"","sources":["../../src/recursive/tool-invoker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EAOlB,MAAM,YAAY,CAAC;AAyBpB;;GAEG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,qBAAqB,EAC9B,MAAM,GAAE,gBAAiC,GACxC,OAAO,CAAC,iBAAiB,CAAC,CAiF5B;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,qBAAqB,EAC9B,MAAM,GAAE,gBAAiC,GACxC,OAAO,CAAC,oBAAoB,CAAC,CAyI/B;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,qBAAqB,EAAE,EACjC,MAAM,GAAE,gBAAiC,EACzC,QAAQ,GAAE,OAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAajC;AAyBD;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAW,GACjB,OAAO,CACR,KAAK,CAAC;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CACH,CAMA;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE3E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAElD"}

package/dist/recursive/tool-invoker.js

@@ -0,0 +1,293 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * Tool Invoker
+ *
+ * Safe recursive tool invocation with rate limiting and depth control.
+ *
+ * @module recursive/tool-invoker
+ */
+import { getSharedRedis } from '../infrastructure/redis/connection.js';
+import { v4 as uuidv4 } from 'uuid';
+import { Logger } from '../utils/logger.js';
+import { getToolByName, executeTool } from '../tools/registry.js';
+import { DEFAULT_POLICY, RECURSIVE_KEYS, INVOCATION_TTL, RATE_LIMIT_WINDOW, MAX_LOG_ENTRIES, } from './types.js';
+/** Current invocation context (per-request) */
+const contextStack = new Map();
+const getRedis = getSharedRedis;
+/**
+ * Read and normalize rate limit entry from Redis.
+ * Resets the window if expired.
+ */
+async function getRateLimitEntry(agentId) {
+    const client = await getRedis();
+    const rateLimitKey = RECURSIVE_KEYS.rateLimit(agentId);
+    const data = await client.get(rateLimitKey);
+    let entry = { count: 0, windowStart: Date.now() };
+    if (data) {
+        entry = JSON.parse(data);
+        if (Date.now() - entry.windowStart > RATE_LIMIT_WINDOW) {
+            entry = { count: 0, windowStart: Date.now() };
+        }
+    }
+    return entry;
+}
+/**
+ * Check if invocation is allowed
+ */
+export async function checkSafety(request, policy = DEFAULT_POLICY) {
+    // Check if tool is blocked
+    if (policy.blockedTools.includes(request.toolName)) {
+        return {
+            allowed: false,
+            reason: `Tool '${request.toolName}' cannot be invoked recursively`,
+        };
+    }
+    // Check if tool exists
+    const tool = getToolByName(request.toolName);
+    if (!tool) {
+        return {
+            allowed: false,
+            reason: `Tool '${request.toolName}' not found`,
+        };
+    }
+    // Check depth
+    const context = contextStack.get(request.agentId);
+    const currentDepth = context ? context.currentDepth + 1 : 1;
+    if (currentDepth > policy.maxDepth) {
+        return {
+            allowed: false,
+            reason: `Maximum invocation depth (${policy.maxDepth}) exceeded`,
+            currentDepth,
+        };
+    }
+    // Prevent invoke-tool/invoke-batch from being called recursively more than 2 levels deep
+    // This allows: Agent -> invoke-tool -> SubAgent -> invoke-tool -> Tool
+    // But prevents: Agent -> invoke-tool -> ... -> invoke-tool (depth 3+)
+    if ((request.toolName === 'invoke-tool' || request.toolName === 'invoke-batch') &&
+        currentDepth > 2) {
+        return {
+            allowed: false,
+            reason: `Recursive tool invocation limited to depth 2 (current: ${currentDepth})`,
+            currentDepth,
+        };
+    }
+    // Check rate limit
+    const rateEntry = await getRateLimitEntry(request.agentId);
+    const resetIn = RATE_LIMIT_WINDOW - (Date.now() - rateEntry.windowStart);
+    if (rateEntry.count >= policy.maxInvocationsPerMinute) {
+        return {
+            allowed: false,
+            reason: 'Rate limit exceeded',
+            rateLimit: {
+                current: rateEntry.count,
+                max: policy.maxInvocationsPerMinute,
+                resetIn,
+            },
+        };
+    }
+    const rateLimit = {
+        current: rateEntry.count,
+        max: policy.maxInvocationsPerMinute,
+        resetIn,
+    };
+    // Check if approval required
+    if (policy.requiresApproval.includes(request.toolName)) {
+        return {
+            allowed: true,
+            requiresSupervisorApproval: true,
+            currentDepth,
+            rateLimit,
+        };
+    }
+    return {
+        allowed: true,
+        currentDepth,
+        rateLimit,
+    };
+}
+/**
+ * Invoke a tool
+ */
+export async function invokeTool(request, policy = DEFAULT_POLICY) {
+    const startTime = Date.now();
+    const invocationId = request.invocationId || uuidv4();
+    // Safety check
+    const safety = await checkSafety(request, policy);
+    if (!safety.allowed) {
+        return {
+            invocationId,
+            success: false,
+            error: safety.reason,
+            duration: Date.now() - startTime,
+            depth: safety.currentDepth || 0,
+        };
+    }
+    if (safety.requiresSupervisorApproval) {
+        // For now, we'll allow but log a warning
+        Logger.warn(`invoke-tool: ${request.toolName} requires approval, proceeding anyway`);
+    }
+    const client = await getRedis();
+    try {
+        // Update rate limit
+        const rateEntry = await getRateLimitEntry(request.agentId);
+        rateEntry.count++;
+        const rateLimitKey = RECURSIVE_KEYS.rateLimit(request.agentId);
+        await client.setex(rateLimitKey, 120, JSON.stringify(rateEntry));
+        // Set up context
+        const parentContext = contextStack.get(request.agentId);
+        const context = {
+            rootInvocationId: parentContext?.rootInvocationId || invocationId,
+            currentDepth: (parentContext?.currentDepth || 0) + 1,
+            chain: [...(parentContext?.chain || []), invocationId],
+            startTime,
+        };
+        contextStack.set(request.agentId, context);
+        // Store invocation data
+        await client.setex(RECURSIVE_KEYS.invocation(invocationId), INVOCATION_TTL, JSON.stringify({
+            ...request,
+            invocationId,
+            depth: context.currentDepth,
+            startTime,
+        }));
+        // Get and execute tool
+        const tool = getToolByName(request.toolName);
+        if (!tool) {
+            throw new Error(`Tool '${request.toolName}' not found`);
+        }
+        const result = await executeTool(request.toolName, request.args);
+        const duration = Date.now() - startTime;
+        // Log invocation
+        await logInvocation(request.agentId, {
+            invocationId,
+            toolName: request.toolName,
+            success: true,
+            duration,
+            depth: context.currentDepth,
+            timestamp: startTime,
+        });
+        // Restore parent context
+        if (parentContext) {
+            contextStack.set(request.agentId, parentContext);
+        }
+        else {
+            contextStack.delete(request.agentId);
+        }
+        Logger.debug(`invoke-tool: ${request.toolName} completed in ${duration}ms at depth ${context.currentDepth}`);
+        // Try to parse as JSON, otherwise return as string
+        let parsedResult;
+        try {
+            parsedResult = JSON.parse(result);
+        }
+        catch {
+            // Result is not JSON (e.g., ping returns plain text)
+            parsedResult = result;
+        }
+        return {
+            invocationId,
+            success: true,
+            result: parsedResult,
+            duration,
+            depth: context.currentDepth,
+        };
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        const duration = Date.now() - startTime;
+        // Log failed invocation
+        await logInvocation(request.agentId, {
+            invocationId,
+            toolName: request.toolName,
+            success: false,
+            error: errorMessage,
+            duration,
+            depth: safety.currentDepth || 0,
+            timestamp: startTime,
+        });
+        // Restore context
+        const parentContext = contextStack.get(request.agentId);
+        if (parentContext && parentContext.currentDepth > 0) {
+            contextStack.set(request.agentId, {
+                ...parentContext,
+                currentDepth: parentContext.currentDepth - 1,
+            });
+        }
+        else {
+            contextStack.delete(request.agentId);
+        }
+        Logger.error(`invoke-tool error: ${errorMessage}`);
+        return {
+            invocationId,
+            success: false,
+            error: errorMessage,
+            duration,
+            depth: safety.currentDepth || 0,
+        };
+    }
+}
+/**
+ * Invoke multiple tools in batch
+ */
+export async function invokeBatch(requests, policy = DEFAULT_POLICY, parallel = true) {
+    if (parallel) {
+        return Promise.all(requests.map((r) => invokeTool(r, policy)));
+    }
+    else {
+        const results = [];
+        for (const request of requests) {
+            const result = await invokeTool(request, policy);
+            results.push(result);
+            // Stop on first error if sequential
+            if (!result.success)
+                break;
+        }
+        return results;
+    }
+}
+/**
+ * Log an invocation
+ */
+async function logInvocation(agentId, entry) {
+    const client = await getRedis();
+    const logKey = RECURSIVE_KEYS.log(agentId);
+    await client.lpush(logKey, JSON.stringify(entry));
+    await client.ltrim(logKey, 0, MAX_LOG_ENTRIES - 1);
+    await client.expire(logKey, INVOCATION_TTL);
+}
+/**
+ * Get invocation log for an agent
+ */
+export async function getInvocationLog(agentId, limit = 20) {
+    const client = await getRedis();
+    const logKey = RECURSIVE_KEYS.log(agentId);
+    const entries = await client.lrange(logKey, 0, limit - 1);
+    return entries.map((e) => JSON.parse(e));
+}
+/**
+ * Get current invocation context for an agent
+ */
+export function getCurrentContext(agentId) {
+    return contextStack.get(agentId) || null;
+}
+/**
+ * Clear invocation context (for cleanup)
+ */
+export function clearContext(agentId) {
+    contextStack.delete(agentId);
+}
+//# sourceMappingURL=tool-invoker.js.map