From f1f345a718d4b57e8b15108f49ee7043ed06ec25 Mon Sep 17 00:00:00 2001
From: David Antoon <david@frontegg.com>
Date: Wed, 21 Oct 2026 21:55:20 +0300
Subject: [PATCH] fix(plugins,edge): declare @enclave-vm/ast ^2.17.0 where the
 bundled ReDoS check imports it

plugin-cache, plugin-dashboard and edge bundle @frontmcp/utils, whose ReDoS check imports @enclave-vm/ast/redos since #921, but didn't declare @enclave-vm/ast. They resolved whatever copy sat at the top of node_modules, and with 2.16.0 there (any project that pins Enclave 2.16) importing them failed with ERR_PACKAGE_PATH_NOT_EXPORTED. Declaring ^2.17.0 makes the package manager give them 2.17.0, nested when the project keeps 2.16.0.
---
 libs/edge/package.json                | 1 +
 plugins/plugin-cache/package.json     | 1 +
 plugins/plugin-dashboard/package.json | 3 +++
 yarn.lock                             | 3 +++
 4 files changed, 8 insertions(+)

diff --git a/libs/edge/package.json b/libs/edge/package.json
index f95156a1c..037860857 100644
--- a/libs/edge/package.json
+++ b/libs/edge/package.json
@@ -49,6 +49,7 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
+    "@enclave-vm/ast": "^2.17.0",
     "@frontmcp/plugin-skilled-openapi": "1.10.9"
   },
   "peerDependencies": {
diff --git a/plugins/plugin-cache/package.json b/plugins/plugin-cache/package.json
index 297ea8120..78401c47c 100644
--- a/plugins/plugin-cache/package.json
+++ b/plugins/plugin-cache/package.json
@@ -50,6 +50,7 @@
     }
   },
   "dependencies": {
+    "@enclave-vm/ast": "^2.17.0",
     "@frontmcp/sdk": "1.10.9",
     "@frontmcp/utils": "1.10.9",
     "ioredis": "^5.8.0"
diff --git a/plugins/plugin-dashboard/package.json b/plugins/plugin-dashboard/package.json
index 77ec5c6ad..d665e200d 100644
--- a/plugins/plugin-dashboard/package.json
+++ b/plugins/plugin-dashboard/package.json
@@ -53,6 +53,9 @@
     "@frontmcp/sdk": "1.10.9",
     "reflect-metadata": "^0.2.2"
   },
+  "dependencies": {
+    "@enclave-vm/ast": "^2.17.0"
+  },
   "peerDependencies": {
     "@frontmcp/lazy-zod": "1.10.9",
     "@frontmcp/sdk": "1.10.9"
diff --git a/yarn.lock b/yarn.lock
index 5ccaa97df..4d2a3fccd 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2443,6 +2443,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@frontmcp/edge@workspace:libs/edge"
   dependencies:
+    "@enclave-vm/ast": "npm:^2.17.0"
     "@frontmcp/plugin-skilled-openapi": "npm:1.10.9"
     "@types/node": "npm:^24.0.0"
     typescript: "npm:^5.0.0"
@@ -2540,6 +2541,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@frontmcp/plugin-cache@workspace:plugins/plugin-cache"
   dependencies:
+    "@enclave-vm/ast": "npm:^2.17.0"
     "@frontmcp/sdk": "npm:1.10.9"
     "@frontmcp/utils": "npm:1.10.9"
     ioredis: "npm:^5.8.0"
@@ -2574,6 +2576,7 @@ __metadata:
   version: 0.0.0-use.local
   resolution: "@frontmcp/plugin-dashboard@workspace:plugins/plugin-dashboard"
   dependencies:
+    "@enclave-vm/ast": "npm:^2.17.0"
     "@frontmcp/sdk": "npm:1.10.9"
     reflect-metadata: "npm:^0.2.2"
   peerDependencies: