mongo.do 0.1.0

package/dist/mcp/sandbox/miniflare-evaluator.js

@@ -0,0 +1,379 @@
+/**
+ * Miniflare Fallback Evaluator
+ *
+ * Provides a fallback sandbox evaluator for CLI/local development when
+ * Worker Loader is not available. Uses Miniflare to create isolated V8
+ * contexts with:
+ * - Network isolation (outboundService throws)
+ * - Database access through DB_PROXY service binding
+ * - Console.log capture
+ * - Timeout enforcement
+ *
+ * This is the fallback for CLI/local development when Worker Loader is not available.
+ */
+import { randomUUID } from 'crypto';
+/**
+ * Check if Miniflare is available in the current environment
+ */
+export async function isMiniflareAvailable() {
+    try {
+        // Try to dynamically import Miniflare
+        await import('miniflare');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Create a Miniflare Evaluator for executing code in an isolated sandbox.
+ *
+ * This is the fallback evaluator for CLI/local development when the Worker Loader
+ * binding is not available.
+ *
+ * @param dbAccess - Database access provider for DB_PROXY binding
+ * @param code - The user code to execute
+ * @param options - Optional configuration
+ * @returns MiniflareEvaluator instance with execute() and dispose() methods
+ *
+ * @example
+ * ```typescript
+ * const evaluator = await createMiniflareEvaluator(
+ *   dbAccess,
+ *   'return await db.collection("users").find()'
+ * );
+ * try {
+ *   const result = await evaluator.execute();
+ *   if (result.success) {
+ *     console.log('Result:', result.value);
+ *   }
+ * } finally {
+ *   await evaluator.dispose();
+ * }
+ * ```
+ */
+export async function createMiniflareEvaluator(dbAccess, code, options = {}) {
+    const workerId = options.id ?? `miniflare-sandbox-${randomUUID()}`;
+    const timeout = options.timeout ?? 30000;
+    let disposed = false;
+    // Import Miniflare dynamically to allow graceful degradation
+    let Miniflare;
+    try {
+        const miniflareModule = await import('miniflare');
+        Miniflare = miniflareModule.Miniflare;
+    }
+    catch {
+        // Return a stub evaluator if Miniflare is not available
+        return {
+            async execute() {
+                return {
+                    success: false,
+                    error: 'Miniflare is not available. Install miniflare package to use the fallback evaluator.',
+                    logs: [],
+                };
+            },
+            async dispose() {
+                // Nothing to dispose
+            },
+        };
+    }
+    // Generate sandbox code that wraps user code with db API
+    const sandboxCode = generateMiniflareWrappedCode(code);
+    // Create Miniflare instance with sandbox configuration
+    const mf = new Miniflare({
+        name: workerId,
+        script: sandboxCode,
+        modules: true,
+        compatibilityDate: '2025-06-01',
+        compatibilityFlags: ['nodejs_compat'],
+        serviceBindings: {
+            DB_PROXY: async (request) => {
+                // Route DB_PROXY calls through our proxy
+                const proxy = dbAccess.getProxy();
+                return proxy.fetch(request);
+            },
+        },
+    });
+    return {
+        async execute() {
+            if (disposed) {
+                return {
+                    success: false,
+                    error: 'Evaluator has been disposed',
+                    logs: [],
+                };
+            }
+            try {
+                // Create timeout promise
+                const timeoutPromise = new Promise((_, reject) => {
+                    setTimeout(() => {
+                        reject(new Error(`Sandbox execution timed out after ${timeout}ms`));
+                    }, timeout);
+                });
+                // Execute the code via Miniflare
+                const executePromise = mf.dispatchFetch('http://internal/evaluate', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                });
+                const response = await Promise.race([executePromise, timeoutPromise]);
+                const result = await response.json();
+                const evalResult = {
+                    success: result.success,
+                    logs: result.logs ?? [],
+                };
+                if (result.value !== undefined) {
+                    evalResult.value = result.value;
+                }
+                if (result.error) {
+                    evalResult.error = result.error;
+                }
+                return evalResult;
+            }
+            catch (error) {
+                return {
+                    success: false,
+                    error: error instanceof Error ? error.message : 'Execution failed',
+                    logs: [],
+                };
+            }
+        },
+        async dispose() {
+            if (!disposed) {
+                disposed = true;
+                await mf.dispose();
+            }
+        },
+    };
+}
+/**
+ * Generate wrapped sandbox code for Miniflare execution
+ */
+function generateMiniflareWrappedCode(userCode) {
+    return `
+export default {
+  async fetch(request, env) {
+    // Capture console output
+    const logs = [];
+    const originalLog = console.log;
+    console.log = (...args) => {
+      logs.push(
+        args.map(a =>
+          typeof a === 'object' ? JSON.stringify(a) : String(a)
+        ).join(' ')
+      );
+    };
+
+    // Expose db API that routes through DB_PROXY service binding
+    const db = {
+      collection: (name) => ({
+        find: async (filter) => {
+          const res = await env.DB_PROXY.fetch('http://internal/find', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter: filter || {} })
+          });
+          return res.json();
+        },
+        findOne: async (filter) => {
+          const res = await env.DB_PROXY.fetch('http://internal/findOne', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter: filter || {} })
+          });
+          return res.json();
+        },
+        insertOne: async (doc) => {
+          const res = await env.DB_PROXY.fetch('http://internal/insertOne', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, document: doc })
+          });
+          return res.json();
+        },
+        insertMany: async (docs) => {
+          const res = await env.DB_PROXY.fetch('http://internal/insertMany', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, documents: docs })
+          });
+          return res.json();
+        },
+        updateOne: async (filter, update) => {
+          const res = await env.DB_PROXY.fetch('http://internal/updateOne', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter, update })
+          });
+          return res.json();
+        },
+        updateMany: async (filter, update) => {
+          const res = await env.DB_PROXY.fetch('http://internal/updateMany', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter, update })
+          });
+          return res.json();
+        },
+        deleteOne: async (filter) => {
+          const res = await env.DB_PROXY.fetch('http://internal/deleteOne', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter })
+          });
+          return res.json();
+        },
+        deleteMany: async (filter) => {
+          const res = await env.DB_PROXY.fetch('http://internal/deleteMany', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter })
+          });
+          return res.json();
+        },
+        aggregate: async (pipeline) => {
+          const res = await env.DB_PROXY.fetch('http://internal/aggregate', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, pipeline })
+          });
+          return res.json();
+        },
+        countDocuments: async (filter) => {
+          const res = await env.DB_PROXY.fetch('http://internal/countDocuments', {
+            method: 'POST',
+            body: JSON.stringify({ collection: name, filter: filter || {} })
+          });
+          return res.json();
+        }
+      }),
+      listCollections: async () => {
+        const res = await env.DB_PROXY.fetch('http://internal/listCollections', {
+          method: 'POST',
+          body: JSON.stringify({})
+        });
+        return res.json();
+      },
+      listDatabases: async () => {
+        const res = await env.DB_PROXY.fetch('http://internal/listDatabases', {
+          method: 'POST',
+          body: JSON.stringify({})
+        });
+        return res.json();
+      }
+    };
+
+    try {
+      const result = await (async function() {
+        ${userCode}
+      })();
+
+      // Restore console.log
+      console.log = originalLog;
+
+      return new Response(JSON.stringify({ success: true, value: result, logs }), {
+        headers: { 'Content-Type': 'application/json' }
+      });
+    } catch (error) {
+      // Restore console.log
+      console.log = originalLog;
+
+      return new Response(JSON.stringify({
+        success: false,
+        error: error.message || String(error),
+        logs
+      }), {
+        headers: { 'Content-Type': 'application/json' }
+      });
+    }
+  }
+};
+`;
+}
+/**
+ * Create a mock DatabaseAccess for testing the Miniflare evaluator.
+ * This is similar to createMockDbAccess in worker-evaluator but returns
+ * the interface expected by createMiniflareEvaluator.
+ *
+ * @param mockData - Mock data to return from database operations
+ * @returns Mock DatabaseAccess and operation capture utilities
+ */
+export function createMockMiniflareDbAccess(mockData = {}) {
+    const capturedOperations = [];
+    let mockIdCounter = 0;
+    const proxy = {
+        async fetch(request) {
+            const req = typeof request === 'string' ? new Request(request) : request;
+            const url = new URL(req.url);
+            const operation = url.pathname.slice(1); // Remove leading /
+            let params = {};
+            if (req.method === 'POST') {
+                params = await req.json();
+            }
+            capturedOperations.push({ operation, params });
+            // Handle operations based on the URL path
+            switch (operation) {
+                case 'find': {
+                    const p = params;
+                    return Response.json(mockData[p.collection] ?? []);
+                }
+                case 'findOne': {
+                    const p = params;
+                    const docs = mockData[p.collection] ?? [];
+                    return Response.json(docs[0] ?? null);
+                }
+                case 'countDocuments': {
+                    const p = params;
+                    return Response.json((mockData[p.collection] ?? []).length);
+                }
+                case 'listCollections': {
+                    return Response.json(Object.keys(mockData));
+                }
+                case 'insertOne': {
+                    mockIdCounter++;
+                    return Response.json({
+                        insertedId: `mock-${mockIdCounter}`
+                    });
+                }
+                case 'insertMany': {
+                    const p = params;
+                    const documents = p.documents ?? [];
+                    const insertedIds = documents.map(() => {
+                        mockIdCounter++;
+                        return `mock-${mockIdCounter}`;
+                    });
+                    return Response.json({ insertedIds });
+                }
+                case 'updateOne': {
+                    return Response.json({
+                        matchedCount: 1,
+                        modifiedCount: 1
+                    });
+                }
+                case 'updateMany': {
+                    return Response.json({
+                        matchedCount: 1,
+                        modifiedCount: 1
+                    });
+                }
+                case 'deleteOne': {
+                    return Response.json({
+                        deletedCount: 1
+                    });
+                }
+                case 'deleteMany': {
+                    return Response.json({
+                        deletedCount: 1
+                    });
+                }
+                case 'aggregate': {
+                    const p = params;
+                    // For mock purposes, just return the collection data
+                    return Response.json(mockData[p.collection] ?? []);
+                }
+                default: {
+                    // Default response for unknown operations
+                    return Response.json({ ok: true });
+                }
+            }
+        }
+    };
+    const dbAccess = {
+        getProxy: () => proxy
+    };
+    return {
+        dbAccess,
+        getCapturedOperations: () => capturedOperations
+    };
+}
+//# sourceMappingURL=miniflare-evaluator.js.map

package/dist/mcp/sandbox/miniflare-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"miniflare-evaluator.js","sourceRoot":"","sources":["../../../src/mcp/sandbox/miniflare-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAanC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,sCAAsC;QACtC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACzB,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAwB,EACxB,IAAY,EACZ,UAA4B,EAAE;IAE9B,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,IAAI,qBAAqB,UAAU,EAAE,EAAE,CAAA;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAA;IACxC,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,6DAA6D;IAC7D,IAAI,SAA+C,CAAA;IACnD,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QACjD,SAAS,GAAG,eAAe,CAAC,SAAS,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,OAAO;YACL,KAAK,CAAC,OAAO;gBACX,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,sFAAsF;oBAC7F,IAAI,EAAE,EAAE;iBACT,CAAA;YACH,CAAC;YACD,KAAK,CAAC,OAAO;gBACX,qBAAqB;YACvB,CAAC;SACF,CAAA;IACH,CAAC;IAED,yDAAyD;IACzD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAA;IAEtD,uDAAuD;IACvD,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC;QACvB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,IAAI;QACb,iBAAiB,EAAE,YAAY;QAC/B,kBAAkB,EAAE,CAAC,eAAe,CAAC;QACrC,eAAe,EAAE;YACf,QAAQ,EAAE,KAAK,EAAE,OAAgB,EAAqB,EAAE;gBACtD,yCAAyC;gBACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;gBACjC,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;SACF;KACF,CAAC,CAAA;IAEF,OAAO;QACL,KAAK,CAAC,OAAO;YACX,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,6BAA6B;oBACpC,IAAI,EAAE,EAAE;iBACT,CAAA;YACH,CAAC;YAED,IAAI,CAAC;gBACH,yBAAyB;gBACzB,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBACtD,UAAU,CAAC,GAAG,EAAE;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,OAAO,IAAI,CAAC,CAAC,CAAA;oBACrE,CAAC,EAAE,OAAO,CAAC,CAAA;gBACb,CAAC,CAAC,CAAA;gBAEF,iCAAiC;gBACjC,MAAM,cAAc,GAAG,EAAE,CAAC,aAAa,CAAC,0BAA0B,EAAE;oBAClE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;gBAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAA;gBACrE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAqB,CAAA;gBAEvD,MAAM,UAAU,GAAoB;oBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;iBACxB,CAAA;gBACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/B,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;gBACjC,CAAC;gBACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;gBACjC,CAAC;gBACD,OAAO,UAAU,CAAA;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;oBAClE,IAAI,EAAE,EAAE;iBACT,CAAA;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;YACpB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CAAC,QAAgB;IACpD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA0GC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;CAuBjB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,WAAsC,EAAE;IAIlF,MAAM,kBAAkB,GAAkD,EAAE,CAAA;IAC5E,IAAI,aAAa,GAAG,CAAC,CAAA;IAErB,MAAM,KAAK,GAAY;QACrB,KAAK,CAAC,KAAK,CAAC,OAAyB;YACnC,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,mBAAmB;YAE3D,IAAI,MAAM,GAA4B,EAAE,CAAA;YACxC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAA;YACtD,CAAC;YAED,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;YAE9C,0CAA0C;YAC1C,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBAED,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;oBACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;gBACvC,CAAC;gBAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;gBAC7D,CAAC;gBAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAC7C,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,aAAa,EAAE,CAAA;oBACf,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,UAAU,EAAE,QAAQ,aAAa,EAAE;qBACpC,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,CAAC,GAAG,MAAmC,CAAA;oBAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,CAAA;oBACnC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;wBACrC,aAAa,EAAE,CAAA;wBACf,OAAO,QAAQ,aAAa,EAAE,CAAA;oBAChC,CAAC,CAAC,CAAA;oBACF,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;gBACvC,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;wBACf,aAAa,EAAE,CAAC;qBACjB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;wBACf,aAAa,EAAE,CAAC;qBACjB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;qBAChB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,OAAO,QAAQ,CAAC,IAAI,CAAC;wBACnB,YAAY,EAAE,CAAC;qBAChB,CAAC,CAAA;gBACJ,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,CAAC,GAAG,MAAgC,CAAA;oBAC1C,qDAAqD;oBACrD,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpD,CAAC;gBAED,OAAO,CAAC,CAAC,CAAC;oBACR,0CAA0C;oBAC1C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAA;IAED,MAAM,QAAQ,GAAmB;QAC/B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;KACtB,CAAA;IAED,OAAO;QACL,QAAQ;QACR,qBAAqB,EAAE,GAAG,EAAE,CAAC,kBAAkB;KAChD,CAAA;AACH,CAAC"}

package/dist/mcp/sandbox/template.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Sandbox Code Template
+ *
+ * Generates sandboxed worker code that wraps user code with:
+ * 1. db API that routes through DB_PROXY binding
+ * 2. console.log capture
+ * 3. Error handling
+ */
+/**
+ * Generate sandboxed worker code that wraps user code with:
+ * 1. db API that routes through DB_PROXY binding
+ * 2. console.log capture
+ * 3. Error handling
+ */
+export declare function generateSandboxCode(userCode: string): string;
+/**
+ * Type definitions exposed to sandbox for TypeScript support
+ */
+export declare const SANDBOX_TYPE_DEFINITIONS = "\ndeclare const db: {\n  collection(name: string): {\n    find(filter?: object): Promise<Document[]>;\n    findOne(filter?: object): Promise<Document | null>;\n    insertOne(doc: object): Promise<{ insertedId: string }>;\n    insertMany(docs: object[]): Promise<{ insertedIds: string[] }>;\n    updateOne(filter: object, update: object): Promise<{ modifiedCount: number }>;\n    updateMany(filter: object, update: object): Promise<{ modifiedCount: number }>;\n    deleteOne(filter: object): Promise<{ deletedCount: number }>;\n    deleteMany(filter: object): Promise<{ deletedCount: number }>;\n    aggregate(pipeline: object[]): Promise<Document[]>;\n    countDocuments(filter?: object): Promise<number>;\n  };\n  listCollections(): Promise<string[]>;\n  listDatabases(): Promise<string[]>;\n};\n\ntype Document = Record<string, unknown>;\n";
+/**
+ * Sandbox execution result interface
+ */
+export interface SandboxResult {
+    success: boolean;
+    value?: unknown;
+    error?: string;
+    logs: string[];
+}
+/**
+ * Validates that user code doesn't contain dangerous patterns
+ * that could escape the sandbox
+ */
+export declare function validateUserCode(userCode: string): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Escapes user code for safe embedding in template
+ */
+export declare function escapeUserCode(userCode: string): string;
+/**
+ * Generate a complete sandboxed module with validation and escaping
+ */
+export declare function generateSafeSandboxCode(userCode: string): {
+    code: string;
+    error?: string;
+};
+//# sourceMappingURL=template.d.ts.map

package/dist/mcp/sandbox/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../../src/mcp/sandbox/template.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAuD5D;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB,80BAmBpC,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAwBrF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAc1F"}

package/dist/mcp/sandbox/template.js

@@ -0,0 +1,147 @@
+/**
+ * Sandbox Code Template
+ *
+ * Generates sandboxed worker code that wraps user code with:
+ * 1. db API that routes through DB_PROXY binding
+ * 2. console.log capture
+ * 3. Error handling
+ */
+/**
+ * Generate sandboxed worker code that wraps user code with:
+ * 1. db API that routes through DB_PROXY binding
+ * 2. console.log capture
+ * 3. Error handling
+ */
+export function generateSandboxCode(userCode) {
+    return `
+    export default {
+      async evaluate(env) {
+        // Capture console output
+        const logs = [];
+        const originalLog = console.log;
+        console.log = (...args) => {
+          logs.push(
+            args.map(a =>
+              typeof a === 'object' ? JSON.stringify(a) : String(a)
+            ).join(' ')
+          );
+        };
+
+        // Expose db API that routes through DB_PROXY
+        const db = {
+          collection: (name) => ({
+            find: (filter) => env.DB_PROXY.find(name, filter || {}),
+            findOne: (filter) => env.DB_PROXY.findOne(name, filter || {}),
+            insertOne: (doc) => env.DB_PROXY.insertOne(name, doc),
+            insertMany: (docs) => env.DB_PROXY.insertMany(name, docs),
+            updateOne: (filter, update) => env.DB_PROXY.updateOne(name, filter, update),
+            updateMany: (filter, update) => env.DB_PROXY.updateMany(name, filter, update),
+            deleteOne: (filter) => env.DB_PROXY.deleteOne(name, filter),
+            deleteMany: (filter) => env.DB_PROXY.deleteMany(name, filter),
+            aggregate: (pipeline) => env.DB_PROXY.aggregate(name, pipeline),
+            countDocuments: (filter) => env.DB_PROXY.countDocuments(name, filter || {})
+          }),
+          listCollections: () => env.DB_PROXY.listCollections(),
+          listDatabases: () => env.DB_PROXY.listDatabases()
+        };
+
+        try {
+          const result = await (async function() {
+            ${userCode}
+          })();
+
+          // Restore console.log
+          console.log = originalLog;
+
+          return { success: true, value: result, logs };
+        } catch (error) {
+          // Restore console.log
+          console.log = originalLog;
+
+          return {
+            success: false,
+            error: error.message || String(error),
+            logs
+          };
+        }
+      }
+    };
+  `;
+}
+/**
+ * Type definitions exposed to sandbox for TypeScript support
+ */
+export const SANDBOX_TYPE_DEFINITIONS = `
+declare const db: {
+  collection(name: string): {
+    find(filter?: object): Promise<Document[]>;
+    findOne(filter?: object): Promise<Document | null>;
+    insertOne(doc: object): Promise<{ insertedId: string }>;
+    insertMany(docs: object[]): Promise<{ insertedIds: string[] }>;
+    updateOne(filter: object, update: object): Promise<{ modifiedCount: number }>;
+    updateMany(filter: object, update: object): Promise<{ modifiedCount: number }>;
+    deleteOne(filter: object): Promise<{ deletedCount: number }>;
+    deleteMany(filter: object): Promise<{ deletedCount: number }>;
+    aggregate(pipeline: object[]): Promise<Document[]>;
+    countDocuments(filter?: object): Promise<number>;
+  };
+  listCollections(): Promise<string[]>;
+  listDatabases(): Promise<string[]>;
+};
+
+type Document = Record<string, unknown>;
+`;
+/**
+ * Validates that user code doesn't contain dangerous patterns
+ * that could escape the sandbox
+ */
+export function validateUserCode(userCode) {
+    // Check for attempts to access dangerous globals
+    const dangerousPatterns = [
+        /\bprocess\b/, // Node.js process object
+        /\brequire\b/, // CommonJS require
+        /\bimport\s*\(/, // Dynamic import
+        /\b__dirname\b/, // Node.js path globals
+        /\b__filename\b/,
+        /\beval\b\s*\(/, // Direct eval calls
+        /\bFunction\b\s*\(/, // Function constructor
+        /\bglobalThis\b/, // Global object access
+        /\bself\b\./, // Worker global access
+    ];
+    for (const pattern of dangerousPatterns) {
+        if (pattern.test(userCode)) {
+            return {
+                valid: false,
+                error: `Code contains potentially dangerous pattern: ${pattern.source}`,
+            };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Escapes user code for safe embedding in template
+ */
+export function escapeUserCode(userCode) {
+    // Replace template literal delimiters that could break the template
+    return userCode
+        .replace(/\\/g, '\\\\')
+        .replace(/`/g, '\\`')
+        .replace(/\$\{/g, '\\${');
+}
+/**
+ * Generate a complete sandboxed module with validation and escaping
+ */
+export function generateSafeSandboxCode(userCode) {
+    const validation = validateUserCode(userCode);
+    if (!validation.valid) {
+        const result = { code: '' };
+        if (validation.error) {
+            result.error = validation.error;
+        }
+        return result;
+    }
+    const escapedCode = escapeUserCode(userCode);
+    const code = generateSandboxCode(escapedCode);
+    return { code };
+}
+//# sourceMappingURL=template.js.map

package/dist/mcp/sandbox/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../../src/mcp/sandbox/template.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkCK,QAAQ;;;;;;;;;;;;;;;;;;;GAmBnB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;CAmBvC,CAAC;AAYF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,iDAAiD;IACjD,MAAM,iBAAiB,GAAG;QACxB,aAAa,EAAY,yBAAyB;QAClD,aAAa,EAAY,mBAAmB;QAC5C,eAAe,EAAU,iBAAiB;QAC1C,eAAe,EAAU,uBAAuB;QAChD,gBAAgB;QAChB,eAAe,EAAU,oBAAoB;QAC7C,mBAAmB,EAAM,uBAAuB;QAChD,gBAAgB,EAAS,uBAAuB;QAChD,YAAY,EAAa,uBAAuB;KACjD,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,gDAAgD,OAAO,CAAC,MAAM,EAAE;aACxE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,oEAAoE;IACpE,OAAO,QAAQ;SACZ,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAqC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9D,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAE9C,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}