mongo.do 0.1.0 → 0.1.1

package/dist/mcp/sandbox/miniflare-evaluator.js

@@ -1,379 +0,0 @@
-/**
- * Miniflare Fallback Evaluator
- *
- * Provides a fallback sandbox evaluator for CLI/local development when
- * Worker Loader is not available. Uses Miniflare to create isolated V8
- * contexts with:
- * - Network isolation (outboundService throws)
- * - Database access through DB_PROXY service binding
- * - Console.log capture
- * - Timeout enforcement
- *
- * This is the fallback for CLI/local development when Worker Loader is not available.
- */
-import { randomUUID } from 'crypto';
-/**
- * Check if Miniflare is available in the current environment
- */
-export async function isMiniflareAvailable() {
-    try {
-        // Try to dynamically import Miniflare
-        await import('miniflare');
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Create a Miniflare Evaluator for executing code in an isolated sandbox.
- *
- * This is the fallback evaluator for CLI/local development when the Worker Loader
- * binding is not available.
- *
- * @param dbAccess - Database access provider for DB_PROXY binding
- * @param code - The user code to execute
- * @param options - Optional configuration
- * @returns MiniflareEvaluator instance with execute() and dispose() methods
- *
- * @example
- * ```typescript
- * const evaluator = await createMiniflareEvaluator(
- *   dbAccess,
- *   'return await db.collection("users").find()'
- * );
- * try {
- *   const result = await evaluator.execute();
- *   if (result.success) {
- *     console.log('Result:', result.value);
- *   }
- * } finally {
- *   await evaluator.dispose();
- * }
- * ```
- */
-export async function createMiniflareEvaluator(dbAccess, code, options = {}) {
-    const workerId = options.id ?? `miniflare-sandbox-${randomUUID()}`;
-    const timeout = options.timeout ?? 30000;
-    let disposed = false;
-    // Import Miniflare dynamically to allow graceful degradation
-    let Miniflare;
-    try {
-        const miniflareModule = await import('miniflare');
-        Miniflare = miniflareModule.Miniflare;
-    }
-    catch {
-        // Return a stub evaluator if Miniflare is not available
-        return {
-            async execute() {
-                return {
-                    success: false,
-                    error: 'Miniflare is not available. Install miniflare package to use the fallback evaluator.',
-                    logs: [],
-                };
-            },
-            async dispose() {
-                // Nothing to dispose
-            },
-        };
-    }
-    // Generate sandbox code that wraps user code with db API
-    const sandboxCode = generateMiniflareWrappedCode(code);
-    // Create Miniflare instance with sandbox configuration
-    const mf = new Miniflare({
-        name: workerId,
-        script: sandboxCode,
-        modules: true,
-        compatibilityDate: '2025-06-01',
-        compatibilityFlags: ['nodejs_compat'],
-        serviceBindings: {
-            DB_PROXY: async (request) => {
-                // Route DB_PROXY calls through our proxy
-                const proxy = dbAccess.getProxy();
-                return proxy.fetch(request);
-            },
-        },
-    });
-    return {
-        async execute() {
-            if (disposed) {
-                return {
-                    success: false,
-                    error: 'Evaluator has been disposed',
-                    logs: [],
-                };
-            }
-            try {
-                // Create timeout promise
-                const timeoutPromise = new Promise((_, reject) => {
-                    setTimeout(() => {
-                        reject(new Error(`Sandbox execution timed out after ${timeout}ms`));
-                    }, timeout);
-                });
-                // Execute the code via Miniflare
-                const executePromise = mf.dispatchFetch('http://internal/evaluate', {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                });
-                const response = await Promise.race([executePromise, timeoutPromise]);
-                const result = await response.json();
-                const evalResult = {
-                    success: result.success,
-                    logs: result.logs ?? [],
-                };
-                if (result.value !== undefined) {
-                    evalResult.value = result.value;
-                }
-                if (result.error) {
-                    evalResult.error = result.error;
-                }
-                return evalResult;
-            }
-            catch (error) {
-                return {
-                    success: false,
-                    error: error instanceof Error ? error.message : 'Execution failed',
-                    logs: [],
-                };
-            }
-        },
-        async dispose() {
-            if (!disposed) {
-                disposed = true;
-                await mf.dispose();
-            }
-        },
-    };
-}
-/**
- * Generate wrapped sandbox code for Miniflare execution
- */
-function generateMiniflareWrappedCode(userCode) {
-    return `
-export default {
-  async fetch(request, env) {
-    // Capture console output
-    const logs = [];
-    const originalLog = console.log;
-    console.log = (...args) => {
-      logs.push(
-        args.map(a =>
-          typeof a === 'object' ? JSON.stringify(a) : String(a)
-        ).join(' ')
-      );
-    };
-
-    // Expose db API that routes through DB_PROXY service binding
-    const db = {
-      collection: (name) => ({
-        find: async (filter) => {
-          const res = await env.DB_PROXY.fetch('http://internal/find', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter: filter || {} })
-          });
-          return res.json();
-        },
-        findOne: async (filter) => {
-          const res = await env.DB_PROXY.fetch('http://internal/findOne', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter: filter || {} })
-          });
-          return res.json();
-        },
-        insertOne: async (doc) => {
-          const res = await env.DB_PROXY.fetch('http://internal/insertOne', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, document: doc })
-          });
-          return res.json();
-        },
-        insertMany: async (docs) => {
-          const res = await env.DB_PROXY.fetch('http://internal/insertMany', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, documents: docs })
-          });
-          return res.json();
-        },
-        updateOne: async (filter, update) => {
-          const res = await env.DB_PROXY.fetch('http://internal/updateOne', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter, update })
-          });
-          return res.json();
-        },
-        updateMany: async (filter, update) => {
-          const res = await env.DB_PROXY.fetch('http://internal/updateMany', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter, update })
-          });
-          return res.json();
-        },
-        deleteOne: async (filter) => {
-          const res = await env.DB_PROXY.fetch('http://internal/deleteOne', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter })
-          });
-          return res.json();
-        },
-        deleteMany: async (filter) => {
-          const res = await env.DB_PROXY.fetch('http://internal/deleteMany', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter })
-          });
-          return res.json();
-        },
-        aggregate: async (pipeline) => {
-          const res = await env.DB_PROXY.fetch('http://internal/aggregate', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, pipeline })
-          });
-          return res.json();
-        },
-        countDocuments: async (filter) => {
-          const res = await env.DB_PROXY.fetch('http://internal/countDocuments', {
-            method: 'POST',
-            body: JSON.stringify({ collection: name, filter: filter || {} })
-          });
-          return res.json();
-        }
-      }),
-      listCollections: async () => {
-        const res = await env.DB_PROXY.fetch('http://internal/listCollections', {
-          method: 'POST',
-          body: JSON.stringify({})
-        });
-        return res.json();
-      },
-      listDatabases: async () => {
-        const res = await env.DB_PROXY.fetch('http://internal/listDatabases', {
-          method: 'POST',
-          body: JSON.stringify({})
-        });
-        return res.json();
-      }
-    };
-
-    try {
-      const result = await (async function() {
-        ${userCode}
-      })();
-
-      // Restore console.log
-      console.log = originalLog;
-
-      return new Response(JSON.stringify({ success: true, value: result, logs }), {
-        headers: { 'Content-Type': 'application/json' }
-      });
-    } catch (error) {
-      // Restore console.log
-      console.log = originalLog;
-
-      return new Response(JSON.stringify({
-        success: false,
-        error: error.message || String(error),
-        logs
-      }), {
-        headers: { 'Content-Type': 'application/json' }
-      });
-    }
-  }
-};
-`;
-}
-/**
- * Create a mock DatabaseAccess for testing the Miniflare evaluator.
- * This is similar to createMockDbAccess in worker-evaluator but returns
- * the interface expected by createMiniflareEvaluator.
- *
- * @param mockData - Mock data to return from database operations
- * @returns Mock DatabaseAccess and operation capture utilities
- */
-export function createMockMiniflareDbAccess(mockData = {}) {
-    const capturedOperations = [];
-    let mockIdCounter = 0;
-    const proxy = {
-        async fetch(request) {
-            const req = typeof request === 'string' ? new Request(request) : request;
-            const url = new URL(req.url);
-            const operation = url.pathname.slice(1); // Remove leading /
-            let params = {};
-            if (req.method === 'POST') {
-                params = await req.json();
-            }
-            capturedOperations.push({ operation, params });
-            // Handle operations based on the URL path
-            switch (operation) {
-                case 'find': {
-                    const p = params;
-                    return Response.json(mockData[p.collection] ?? []);
-                }
-                case 'findOne': {
-                    const p = params;
-                    const docs = mockData[p.collection] ?? [];
-                    return Response.json(docs[0] ?? null);
-                }
-                case 'countDocuments': {
-                    const p = params;
-                    return Response.json((mockData[p.collection] ?? []).length);
-                }
-                case 'listCollections': {
-                    return Response.json(Object.keys(mockData));
-                }
-                case 'insertOne': {
-                    mockIdCounter++;
-                    return Response.json({
-                        insertedId: `mock-${mockIdCounter}`
-                    });
-                }
-                case 'insertMany': {
-                    const p = params;
-                    const documents = p.documents ?? [];
-                    const insertedIds = documents.map(() => {
-                        mockIdCounter++;
-                        return `mock-${mockIdCounter}`;
-                    });
-                    return Response.json({ insertedIds });
-                }
-                case 'updateOne': {
-                    return Response.json({
-                        matchedCount: 1,
-                        modifiedCount: 1
-                    });
-                }
-                case 'updateMany': {
-                    return Response.json({
-                        matchedCount: 1,
-                        modifiedCount: 1
-                    });
-                }
-                case 'deleteOne': {
-                    return Response.json({
-                        deletedCount: 1
-                    });
-                }
-                case 'deleteMany': {
-                    return Response.json({
-                        deletedCount: 1
-                    });
-                }
-                case 'aggregate': {
-                    const p = params;
-                    // For mock purposes, just return the collection data
-                    return Response.json(mockData[p.collection] ?? []);
-                }
-                default: {
-                    // Default response for unknown operations
-                    return Response.json({ ok: true });
-                }
-            }
-        }
-    };
-    const dbAccess = {
-        getProxy: () => proxy
-    };
-    return {
-        dbAccess,
-        getCapturedOperations: () => capturedOperations
-    };
-}
-//# sourceMappingURL=miniflare-evaluator.js.map

package/dist/mcp/sandbox/miniflare-evaluator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"miniflare-evaluator.js","sourceRoot":"","sources":["../../../src/mcp/sandbox/miniflare-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAanC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,sCAAsC;QACtC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAwB,EACxB,IAAY,EACZ,UAA4B,EAAE;IAE9B,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,IAAI,qBAAqB,UAAU,EAAE,EAAE,CAAA;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAA;IACxC,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,6DAA6D;IAC7D,IAAI,SAA+C,CAAA;IACnD,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACjD,SAAS,GAAG,eAAe,CAAC,SAAS,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,OAAO;YACL,KAAK,CAAC,OAAO;gBACX,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,sFAAsF;oBAC7F,IAAI,EAAE,EAAE;iBACT,CAAA;YACH,CAAC;YACD,KAAK,CAAC,OAAO;gBACX,qBAAqB;YACvB,CAAC;SACF,CAAA;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAA;IAEtD,uDAAuD;IACvD,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC;QACvB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,IAAI;QACb,iBAAiB,EAAE,YAAY;QAC/B,kBAAkB,EAAE,CAAC,eAAe,CAAC;QACrC,eAAe,EAAE;YACf,QAAQ,EAAE,KAAK,EAAE,OAAgB,EAAqB,EAAE;gBACtD,yCAAyC;gBACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;gBACjC,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;SACF;KACF,CAAC,CAAA;IAEF,OAAO;QACL,KAAK,CAAC,OAAO;YACX,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,6BAA6B;oBACpC,IAAI,EAAE,EAAE;iBACT,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,yBAAyB;gBACzB,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBACtD,UAAU,CAAC,GAAG,EAAE;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,OAAO,IAAI,CAAC,CAAC,CAAA;oBACrE,CAAC,EAAE,OAAO,CAAC,CAAA;gBACb,CAAC,CAAC,CAAA;gBAEF,iCAAiC;gBACjC,MAAM,cAAc,GAAG,EAAE,CAAC,aAAa,CAAC,0BAA0B,EAAE;oBAClE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;gBAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAA;gBACrE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAqB,CAAA;gBAEvD,MAAM,UAAU,GAAoB;oBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;iBACxB,CAAA;gBACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/B,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;gBACjC,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;gBACjC,CAAC;gBACD,OAAO,UAAU,CAAA;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;oBAClE,IAAI,EAAE,EAAE;iBACT,CAAA;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;YACpB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,QAAgB;IACpD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA0GC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;CAuBjB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,WAAsC,EAAE;IAIlF,MAAM,kBAAkB,GAAkD,EAAE,CAAA;IAC5E,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,KAAK,GAAY;QACrB,KAAK,CAAC,KAAK,CAAC,OAAyB;YACnC,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,mBAAmB;YAE3D,IAAI,MAAM,GAA4B,EAAE,CAAA;YACxC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAA;YACtD,CAAC;YAED,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;YAE9C,0CAA0C;YAC1C,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBAED,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;oBACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;gBACvC,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;gBAC7D,CAAC;gBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAC7C,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,aAAa,EAAE,CAAA;oBACf,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,UAAU,EAAE,QAAQ,aAAa,EAAE;qBACpC,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,CAAC,GAAG,MAAmC,CAAA;oBAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,CAAA;oBACnC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;wBACrC,aAAa,EAAE,CAAA;wBACf,OAAO,QAAQ,aAAa,EAAE,CAAA;oBAChC,CAAC,CAAC,CAAA;oBACF,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;gBACvC,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;wBACf,aAAa,EAAE,CAAC;qBACjB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;wBACf,aAAa,EAAE,CAAC;qBACjB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;qBAChB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;qBAChB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,qDAAqD;oBACrD,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBAED,OAAO,CAAC,CAAC,CAAC;oBACR,0CAA0C;oBAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAA;IAED,MAAM,QAAQ,GAAmB;QAC/B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;KACtB,CAAA;IAED,OAAO;QACL,QAAQ;QACR,qBAAqB,EAAE,GAAG,EAAE,CAAC,kBAAkB;KAChD,CAAA;AACH,CAAC"}

package/dist/mcp/sandbox/template.d.ts

@@ -1,48 +0,0 @@
-/**
- * Sandbox Code Template
- *
- * Generates sandboxed worker code that wraps user code with:
- * 1. db API that routes through DB_PROXY binding
- * 2. console.log capture
- * 3. Error handling
- */
-/**
- * Generate sandboxed worker code that wraps user code with:
- * 1. db API that routes through DB_PROXY binding
- * 2. console.log capture
- * 3. Error handling
- */
-export declare function generateSandboxCode(userCode: string): string;
-/**
- * Type definitions exposed to sandbox for TypeScript support
- */
-export declare const SANDBOX_TYPE_DEFINITIONS = "\ndeclare const db: {\n  collection(name: string): {\n    find(filter?: object): Promise<Document[]>;\n    findOne(filter?: object): Promise<Document | null>;\n    insertOne(doc: object): Promise<{ insertedId: string }>;\n    insertMany(docs: object[]): Promise<{ insertedIds: string[] }>;\n    updateOne(filter: object, update: object): Promise<{ modifiedCount: number }>;\n    updateMany(filter: object, update: object): Promise<{ modifiedCount: number }>;\n    deleteOne(filter: object): Promise<{ deletedCount: number }>;\n    deleteMany(filter: object): Promise<{ deletedCount: number }>;\n    aggregate(pipeline: object[]): Promise<Document[]>;\n    countDocuments(filter?: object): Promise<number>;\n  };\n  listCollections(): Promise<string[]>;\n  listDatabases(): Promise<string[]>;\n};\n\ntype Document = Record<string, unknown>;\n";
-/**
- * Sandbox execution result interface
- */
-export interface SandboxResult {
-    success: boolean;
-    value?: unknown;
-    error?: string;
-    logs: string[];
-}
-/**
- * Validates that user code doesn't contain dangerous patterns
- * that could escape the sandbox
- */
-export declare function validateUserCode(userCode: string): {
-    valid: boolean;
-    error?: string;
-};
-/**
- * Escapes user code for safe embedding in template
- */
-export declare function escapeUserCode(userCode: string): string;
-/**
- * Generate a complete sandboxed module with validation and escaping
- */
-export declare function generateSafeSandboxCode(userCode: string): {
-    code: string;
-    error?: string;
-};
-//# sourceMappingURL=template.d.ts.map

package/dist/mcp/sandbox/template.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../../src/mcp/sandbox/template.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAuD5D;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB,80BAmBpC,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAwBrF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAc1F"}

package/dist/mcp/sandbox/template.js

@@ -1,147 +0,0 @@
-/**
- * Sandbox Code Template
- *
- * Generates sandboxed worker code that wraps user code with:
- * 1. db API that routes through DB_PROXY binding
- * 2. console.log capture
- * 3. Error handling
- */
-/**
- * Generate sandboxed worker code that wraps user code with:
- * 1. db API that routes through DB_PROXY binding
- * 2. console.log capture
- * 3. Error handling
- */
-export function generateSandboxCode(userCode) {
-    return `
-    export default {
-      async evaluate(env) {
-        // Capture console output
-        const logs = [];
-        const originalLog = console.log;
-        console.log = (...args) => {
-          logs.push(
-            args.map(a =>
-              typeof a === 'object' ? JSON.stringify(a) : String(a)
-            ).join(' ')
-          );
-        };
-
-        // Expose db API that routes through DB_PROXY
-        const db = {
-          collection: (name) => ({
-            find: (filter) => env.DB_PROXY.find(name, filter || {}),
-            findOne: (filter) => env.DB_PROXY.findOne(name, filter || {}),
-            insertOne: (doc) => env.DB_PROXY.insertOne(name, doc),
-            insertMany: (docs) => env.DB_PROXY.insertMany(name, docs),
-            updateOne: (filter, update) => env.DB_PROXY.updateOne(name, filter, update),
-            updateMany: (filter, update) => env.DB_PROXY.updateMany(name, filter, update),
-            deleteOne: (filter) => env.DB_PROXY.deleteOne(name, filter),
-            deleteMany: (filter) => env.DB_PROXY.deleteMany(name, filter),
-            aggregate: (pipeline) => env.DB_PROXY.aggregate(name, pipeline),
-            countDocuments: (filter) => env.DB_PROXY.countDocuments(name, filter || {})
-          }),
-          listCollections: () => env.DB_PROXY.listCollections(),
-          listDatabases: () => env.DB_PROXY.listDatabases()
-        };
-
-        try {
-          const result = await (async function() {
-            ${userCode}
-          })();
-
-          // Restore console.log
-          console.log = originalLog;
-
-          return { success: true, value: result, logs };
-        } catch (error) {
-          // Restore console.log
-          console.log = originalLog;
-
-          return {
-            success: false,
-            error: error.message || String(error),
-            logs
-          };
-        }
-      }
-    };
-  `;
-}
-/**
- * Type definitions exposed to sandbox for TypeScript support
- */
-export const SANDBOX_TYPE_DEFINITIONS = `
-declare const db: {
-  collection(name: string): {
-    find(filter?: object): Promise<Document[]>;
-    findOne(filter?: object): Promise<Document | null>;
-    insertOne(doc: object): Promise<{ insertedId: string }>;
-    insertMany(docs: object[]): Promise<{ insertedIds: string[] }>;
-    updateOne(filter: object, update: object): Promise<{ modifiedCount: number }>;
-    updateMany(filter: object, update: object): Promise<{ modifiedCount: number }>;
-    deleteOne(filter: object): Promise<{ deletedCount: number }>;
-    deleteMany(filter: object): Promise<{ deletedCount: number }>;
-    aggregate(pipeline: object[]): Promise<Document[]>;
-    countDocuments(filter?: object): Promise<number>;
-  };
-  listCollections(): Promise<string[]>;
-  listDatabases(): Promise<string[]>;
-};
-
-type Document = Record<string, unknown>;
-`;
-/**
- * Validates that user code doesn't contain dangerous patterns
- * that could escape the sandbox
- */
-export function validateUserCode(userCode) {
-    // Check for attempts to access dangerous globals
-    const dangerousPatterns = [
-        /\bprocess\b/, // Node.js process object
-        /\brequire\b/, // CommonJS require
-        /\bimport\s*\(/, // Dynamic import
-        /\b__dirname\b/, // Node.js path globals
-        /\b__filename\b/,
-        /\beval\b\s*\(/, // Direct eval calls
-        /\bFunction\b\s*\(/, // Function constructor
-        /\bglobalThis\b/, // Global object access
-        /\bself\b\./, // Worker global access
-    ];
-    for (const pattern of dangerousPatterns) {
-        if (pattern.test(userCode)) {
-            return {
-                valid: false,
-                error: `Code contains potentially dangerous pattern: ${pattern.source}`,
-            };
-        }
-    }
-    return { valid: true };
-}
-/**
- * Escapes user code for safe embedding in template
- */
-export function escapeUserCode(userCode) {
-    // Replace template literal delimiters that could break the template
-    return userCode
-        .replace(/\\/g, '\\\\')
-        .replace(/`/g, '\\`')
-        .replace(/\$\{/g, '\\${');
-}
-/**
- * Generate a complete sandboxed module with validation and escaping
- */
-export function generateSafeSandboxCode(userCode) {
-    const validation = validateUserCode(userCode);
-    if (!validation.valid) {
-        const result = { code: '' };
-        if (validation.error) {
-            result.error = validation.error;
-        }
-        return result;
-    }
-    const escapedCode = escapeUserCode(userCode);
-    const code = generateSandboxCode(escapedCode);
-    return { code };
-}
-//# sourceMappingURL=template.js.map

package/dist/mcp/sandbox/template.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"template.js","sourceRoot":"","sources":["../../../src/mcp/sandbox/template.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkCK,QAAQ;;;;;;;;;;;;;;;;;;;GAmBnB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;CAmBvC,CAAC;AAYF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,iDAAiD;IACjD,MAAM,iBAAiB,GAAG;QACxB,aAAa,EAAY,yBAAyB;QAClD,aAAa,EAAY,mBAAmB;QAC5C,eAAe,EAAU,iBAAiB;QAC1C,eAAe,EAAU,uBAAuB;QAChD,gBAAgB;QAChB,eAAe,EAAU,oBAAoB;QAC7C,mBAAmB,EAAM,uBAAuB;QAChD,gBAAgB,EAAS,uBAAuB;QAChD,YAAY,EAAa,uBAAuB;KACjD,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,gDAAgD,OAAO,CAAC,MAAM,EAAE;aACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,oEAAoE;IACpE,OAAO,QAAQ;SACZ,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAqC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9D,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAE9C,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}