@cloudwarriors-ai/rlm 0.1.5

package/dist/infrastructure/persistence/schema.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Drizzle schema for RLM sessions
+ *
+ * This schema can be used with Drizzle ORM to persist sessions
+ * to a database (PostgreSQL, SQLite, etc.)
+ *
+ * Usage in consuming projects (e.g., Hermes):
+ *
+ * import { rlmSessionsSchema, rlmCallsSchema } from '@cloudwarriors-ai/rlm';
+ * import { pgTable } from 'drizzle-orm/pg-core';
+ *
+ * export const rlmSessions = pgTable('rlm_sessions', rlmSessionsSchema);
+ * export const rlmCalls = pgTable('rlm_calls', rlmCallsSchema);
+ */
+/**
+ * Session status enum values
+ */
+export declare const SESSION_STATUSES: readonly ["pending", "running", "completed", "failed", "cancelled", "timeout"];
+/**
+ * Schema definition for rlm_sessions table
+ * To be used with Drizzle's table creation
+ */
+export interface RLMSessionRow {
+    id: string;
+    query: string;
+    status: (typeof SESSION_STATUSES)[number];
+    currentDepth: number;
+    configJson: string;
+    contextJson: string;
+    totalTokens: number;
+    costUsd: number;
+    llmCalls: number;
+    recursiveCalls: number;
+    maxDepthReached: number;
+    executionTimeMs: number;
+    traceJson: string;
+    createdAt: Date;
+    startedAt: Date | null;
+    completedAt: Date | null;
+    resultJson: string | null;
+    error: string | null;
+    cancellationRequested: boolean;
+}
+/**
+ * Schema definition for rlm_calls table (individual LLM calls)
+ */
+export interface RLMCallRow {
+    id: string;
+    sessionId: string;
+    parentCallId: string | null;
+    depth: number;
+    query: string;
+    contextSize: number;
+    model: string;
+    promptTokens: number;
+    completionTokens: number;
+    totalTokens: number;
+    cost: number;
+    generatedCode: string | null;
+    codeExecutionSuccess: boolean | null;
+    codeOutput: string | null;
+    codeError: string | null;
+    result: string | null;
+    error: string | null;
+    startedAt: Date;
+    completedAt: Date | null;
+    executionTimeMs: number | null;
+}
+/**
+ * Column definitions for use with Drizzle
+ * These can be spread into a pgTable or sqliteTable call
+ */
+export declare const rlmSessionColumns: {
+    readonly id: "text(\"id\").primaryKey()";
+    readonly query: "text(\"query\").notNull()";
+    readonly status: "text(\"status\").notNull().$type<SessionStatus>()";
+    readonly currentDepth: "integer(\"current_depth\").notNull().default(0)";
+    readonly configJson: "text(\"config_json\").notNull()";
+    readonly contextJson: "text(\"context_json\").notNull()";
+    readonly totalTokens: "integer(\"total_tokens\").notNull().default(0)";
+    readonly costUsd: "real(\"cost_usd\").notNull().default(0)";
+    readonly llmCalls: "integer(\"llm_calls\").notNull().default(0)";
+    readonly recursiveCalls: "integer(\"recursive_calls\").notNull().default(0)";
+    readonly maxDepthReached: "integer(\"max_depth_reached\").notNull().default(0)";
+    readonly executionTimeMs: "integer(\"execution_time_ms\").notNull().default(0)";
+    readonly traceJson: "text(\"trace_json\").notNull()";
+    readonly createdAt: "timestamp(\"created_at\").notNull().defaultNow()";
+    readonly startedAt: "timestamp(\"started_at\")";
+    readonly completedAt: "timestamp(\"completed_at\")";
+    readonly resultJson: "text(\"result_json\")";
+    readonly error: "text(\"error\")";
+    readonly cancellationRequested: "boolean(\"cancellation_requested\").notNull().default(false)";
+};
+export declare const rlmCallColumns: {
+    readonly id: "text(\"id\").primaryKey()";
+    readonly sessionId: "text(\"session_id\").notNull().references(() => rlmSessions.id)";
+    readonly parentCallId: "text(\"parent_call_id\")";
+    readonly depth: "integer(\"depth\").notNull()";
+    readonly query: "text(\"query\").notNull()";
+    readonly contextSize: "integer(\"context_size\").notNull()";
+    readonly model: "text(\"model\").notNull()";
+    readonly promptTokens: "integer(\"prompt_tokens\").notNull()";
+    readonly completionTokens: "integer(\"completion_tokens\").notNull()";
+    readonly totalTokens: "integer(\"total_tokens\").notNull()";
+    readonly cost: "real(\"cost\").notNull()";
+    readonly generatedCode: "text(\"generated_code\")";
+    readonly codeExecutionSuccess: "boolean(\"code_execution_success\")";
+    readonly codeOutput: "text(\"code_output\")";
+    readonly codeError: "text(\"code_error\")";
+    readonly result: "text(\"result\")";
+    readonly error: "text(\"error\")";
+    readonly startedAt: "timestamp(\"started_at\").notNull()";
+    readonly completedAt: "timestamp(\"completed_at\")";
+    readonly executionTimeMs: "integer(\"execution_time_ms\")";
+};
+/**
+ * SQL migration for creating RLM tables (PostgreSQL)
+ */
+export declare const CREATE_TABLES_SQL = "\n-- RLM Sessions table\nCREATE TABLE IF NOT EXISTS rlm_sessions (\n  id TEXT PRIMARY KEY,\n  query TEXT NOT NULL,\n  status TEXT NOT NULL CHECK (status IN ('pending', 'running', 'completed', 'failed', 'cancelled', 'timeout')),\n  current_depth INTEGER NOT NULL DEFAULT 0,\n  config_json TEXT NOT NULL,\n  context_json TEXT NOT NULL,\n  total_tokens INTEGER NOT NULL DEFAULT 0,\n  cost_usd REAL NOT NULL DEFAULT 0,\n  llm_calls INTEGER NOT NULL DEFAULT 0,\n  recursive_calls INTEGER NOT NULL DEFAULT 0,\n  max_depth_reached INTEGER NOT NULL DEFAULT 0,\n  execution_time_ms INTEGER NOT NULL DEFAULT 0,\n  trace_json TEXT NOT NULL,\n  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,\n  started_at TIMESTAMP,\n  completed_at TIMESTAMP,\n  result_json TEXT,\n  error TEXT,\n  cancellation_requested BOOLEAN NOT NULL DEFAULT FALSE\n);\n\n-- RLM Calls table\nCREATE TABLE IF NOT EXISTS rlm_calls (\n  id TEXT PRIMARY KEY,\n  session_id TEXT NOT NULL REFERENCES rlm_sessions(id) ON DELETE CASCADE,\n  parent_call_id TEXT REFERENCES rlm_calls(id),\n  depth INTEGER NOT NULL,\n  query TEXT NOT NULL,\n  context_size INTEGER NOT NULL,\n  model TEXT NOT NULL,\n  prompt_tokens INTEGER NOT NULL,\n  completion_tokens INTEGER NOT NULL,\n  total_tokens INTEGER NOT NULL,\n  cost REAL NOT NULL,\n  generated_code TEXT,\n  code_execution_success BOOLEAN,\n  code_output TEXT,\n  code_error TEXT,\n  result TEXT,\n  error TEXT,\n  started_at TIMESTAMP NOT NULL,\n  completed_at TIMESTAMP,\n  execution_time_ms INTEGER\n);\n\n-- Indexes\nCREATE INDEX IF NOT EXISTS idx_rlm_sessions_status ON rlm_sessions(status);\nCREATE INDEX IF NOT EXISTS idx_rlm_sessions_created_at ON rlm_sessions(created_at DESC);\nCREATE INDEX IF NOT EXISTS idx_rlm_calls_session_id ON rlm_calls(session_id);\nCREATE INDEX IF NOT EXISTS idx_rlm_calls_parent_id ON rlm_calls(parent_call_id);\n";
+//# sourceMappingURL=schema.d.ts.map

package/dist/infrastructure/persistence/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/persistence/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB,gFAOnB,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1C,YAAY,EAAE,MAAM,CAAC;IAGrB,UAAU,EAAE,MAAM,CAAC;IAGnB,WAAW,EAAE,MAAM,CAAC;IAGpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IAGxB,SAAS,EAAE,MAAM,CAAC;IAGlB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAGzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IAGd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IAGd,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IAGb,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAGzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;CAoBpB,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;CAqBjB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iBAAiB,s0DAqD7B,CAAC"}

package/dist/infrastructure/persistence/schema.js

@@ -0,0 +1,130 @@
+/**
+ * Drizzle schema for RLM sessions
+ *
+ * This schema can be used with Drizzle ORM to persist sessions
+ * to a database (PostgreSQL, SQLite, etc.)
+ *
+ * Usage in consuming projects (e.g., Hermes):
+ *
+ * import { rlmSessionsSchema, rlmCallsSchema } from '@cloudwarriors-ai/rlm';
+ * import { pgTable } from 'drizzle-orm/pg-core';
+ *
+ * export const rlmSessions = pgTable('rlm_sessions', rlmSessionsSchema);
+ * export const rlmCalls = pgTable('rlm_calls', rlmCallsSchema);
+ */
+/**
+ * Session status enum values
+ */
+export const SESSION_STATUSES = [
+    'pending',
+    'running',
+    'completed',
+    'failed',
+    'cancelled',
+    'timeout',
+];
+/**
+ * Column definitions for use with Drizzle
+ * These can be spread into a pgTable or sqliteTable call
+ */
+export const rlmSessionColumns = {
+    id: 'text("id").primaryKey()',
+    query: 'text("query").notNull()',
+    status: 'text("status").notNull().$type<SessionStatus>()',
+    currentDepth: 'integer("current_depth").notNull().default(0)',
+    configJson: 'text("config_json").notNull()',
+    contextJson: 'text("context_json").notNull()',
+    totalTokens: 'integer("total_tokens").notNull().default(0)',
+    costUsd: 'real("cost_usd").notNull().default(0)',
+    llmCalls: 'integer("llm_calls").notNull().default(0)',
+    recursiveCalls: 'integer("recursive_calls").notNull().default(0)',
+    maxDepthReached: 'integer("max_depth_reached").notNull().default(0)',
+    executionTimeMs: 'integer("execution_time_ms").notNull().default(0)',
+    traceJson: 'text("trace_json").notNull()',
+    createdAt: 'timestamp("created_at").notNull().defaultNow()',
+    startedAt: 'timestamp("started_at")',
+    completedAt: 'timestamp("completed_at")',
+    resultJson: 'text("result_json")',
+    error: 'text("error")',
+    cancellationRequested: 'boolean("cancellation_requested").notNull().default(false)',
+};
+export const rlmCallColumns = {
+    id: 'text("id").primaryKey()',
+    sessionId: 'text("session_id").notNull().references(() => rlmSessions.id)',
+    parentCallId: 'text("parent_call_id")',
+    depth: 'integer("depth").notNull()',
+    query: 'text("query").notNull()',
+    contextSize: 'integer("context_size").notNull()',
+    model: 'text("model").notNull()',
+    promptTokens: 'integer("prompt_tokens").notNull()',
+    completionTokens: 'integer("completion_tokens").notNull()',
+    totalTokens: 'integer("total_tokens").notNull()',
+    cost: 'real("cost").notNull()',
+    generatedCode: 'text("generated_code")',
+    codeExecutionSuccess: 'boolean("code_execution_success")',
+    codeOutput: 'text("code_output")',
+    codeError: 'text("code_error")',
+    result: 'text("result")',
+    error: 'text("error")',
+    startedAt: 'timestamp("started_at").notNull()',
+    completedAt: 'timestamp("completed_at")',
+    executionTimeMs: 'integer("execution_time_ms")',
+};
+/**
+ * SQL migration for creating RLM tables (PostgreSQL)
+ */
+export const CREATE_TABLES_SQL = `
+-- RLM Sessions table
+CREATE TABLE IF NOT EXISTS rlm_sessions (
+  id TEXT PRIMARY KEY,
+  query TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'running', 'completed', 'failed', 'cancelled', 'timeout')),
+  current_depth INTEGER NOT NULL DEFAULT 0,
+  config_json TEXT NOT NULL,
+  context_json TEXT NOT NULL,
+  total_tokens INTEGER NOT NULL DEFAULT 0,
+  cost_usd REAL NOT NULL DEFAULT 0,
+  llm_calls INTEGER NOT NULL DEFAULT 0,
+  recursive_calls INTEGER NOT NULL DEFAULT 0,
+  max_depth_reached INTEGER NOT NULL DEFAULT 0,
+  execution_time_ms INTEGER NOT NULL DEFAULT 0,
+  trace_json TEXT NOT NULL,
+  created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  started_at TIMESTAMP,
+  completed_at TIMESTAMP,
+  result_json TEXT,
+  error TEXT,
+  cancellation_requested BOOLEAN NOT NULL DEFAULT FALSE
+);
+
+-- RLM Calls table
+CREATE TABLE IF NOT EXISTS rlm_calls (
+  id TEXT PRIMARY KEY,
+  session_id TEXT NOT NULL REFERENCES rlm_sessions(id) ON DELETE CASCADE,
+  parent_call_id TEXT REFERENCES rlm_calls(id),
+  depth INTEGER NOT NULL,
+  query TEXT NOT NULL,
+  context_size INTEGER NOT NULL,
+  model TEXT NOT NULL,
+  prompt_tokens INTEGER NOT NULL,
+  completion_tokens INTEGER NOT NULL,
+  total_tokens INTEGER NOT NULL,
+  cost REAL NOT NULL,
+  generated_code TEXT,
+  code_execution_success BOOLEAN,
+  code_output TEXT,
+  code_error TEXT,
+  result TEXT,
+  error TEXT,
+  started_at TIMESTAMP NOT NULL,
+  completed_at TIMESTAMP,
+  execution_time_ms INTEGER
+);
+
+-- Indexes
+CREATE INDEX IF NOT EXISTS idx_rlm_sessions_status ON rlm_sessions(status);
+CREATE INDEX IF NOT EXISTS idx_rlm_sessions_created_at ON rlm_sessions(created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_rlm_calls_session_id ON rlm_calls(session_id);
+CREATE INDEX IF NOT EXISTS idx_rlm_calls_parent_id ON rlm_calls(parent_call_id);
+`;
+//# sourceMappingURL=schema.js.map

package/dist/infrastructure/persistence/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/infrastructure/persistence/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;IACX,SAAS;CACD,CAAC;AA8EX;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,EAAE,EAAE,yBAAyB;IAC7B,KAAK,EAAE,yBAAyB;IAChC,MAAM,EAAE,iDAAiD;IACzD,YAAY,EAAE,+CAA+C;IAC7D,UAAU,EAAE,+BAA+B;IAC3C,WAAW,EAAE,gCAAgC;IAC7C,WAAW,EAAE,8CAA8C;IAC3D,OAAO,EAAE,uCAAuC;IAChD,QAAQ,EAAE,2CAA2C;IACrD,cAAc,EAAE,iDAAiD;IACjE,eAAe,EAAE,mDAAmD;IACpE,eAAe,EAAE,mDAAmD;IACpE,SAAS,EAAE,8BAA8B;IACzC,SAAS,EAAE,gDAAgD;IAC3D,SAAS,EAAE,yBAAyB;IACpC,WAAW,EAAE,2BAA2B;IACxC,UAAU,EAAE,qBAAqB;IACjC,KAAK,EAAE,eAAe;IACtB,qBAAqB,EAAE,4DAA4D;CAC3E,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,EAAE,EAAE,yBAAyB;IAC7B,SAAS,EAAE,+DAA+D;IAC1E,YAAY,EAAE,wBAAwB;IACtC,KAAK,EAAE,4BAA4B;IACnC,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,mCAAmC;IAChD,KAAK,EAAE,yBAAyB;IAChC,YAAY,EAAE,oCAAoC;IAClD,gBAAgB,EAAE,wCAAwC;IAC1D,WAAW,EAAE,mCAAmC;IAChD,IAAI,EAAE,wBAAwB;IAC9B,aAAa,EAAE,wBAAwB;IACvC,oBAAoB,EAAE,mCAAmC;IACzD,UAAU,EAAE,qBAAqB;IACjC,SAAS,EAAE,oBAAoB;IAC/B,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,eAAe;IACtB,SAAS,EAAE,mCAAmC;IAC9C,WAAW,EAAE,2BAA2B;IACxC,eAAe,EAAE,8BAA8B;CACvC,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDhC,CAAC"}

package/dist/infrastructure/sandbox/ast-validator.d.ts

@@ -0,0 +1,23 @@
+import type { ValidationResult } from '../../domain/interfaces/code-executor.js';
+/**
+ * AST-based code validator for Python
+ * Note: This is a heuristic validator using regex patterns.
+ * For production use, consider using a real Python AST parser.
+ */
+export declare class ASTValidator {
+    private readonly strictMode;
+    constructor(strictMode?: boolean);
+    /**
+     * Validate Python code for safety
+     */
+    validate(code: string): ValidationResult;
+    private checkImports;
+    private checkBuiltins;
+    private checkAttributes;
+    private checkFileSystemAccess;
+    private checkNetworkAccess;
+    private checkShellExecution;
+    private checkInfiniteLoopRisk;
+    private createError;
+}
+//# sourceMappingURL=ast-validator.d.ts.map

package/dist/infrastructure/sandbox/ast-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-validator.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/sandbox/ast-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAwC,MAAM,0CAA0C,CAAC;AAkHvH;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;gBAEzB,UAAU,UAAO;IAI7B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB;IAyCxC,OAAO,CAAC,YAAY;IAwBpB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,qBAAqB;IAsB7B,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,WAAW;CAQpB"}

package/dist/infrastructure/sandbox/ast-validator.js

@@ -0,0 +1,249 @@
+/**
+ * Forbidden module imports
+ */
+const FORBIDDEN_IMPORTS = new Set([
+    'os',
+    'sys',
+    'subprocess',
+    'socket',
+    'requests',
+    'urllib',
+    'http',
+    'ftplib',
+    'smtplib',
+    'telnetlib',
+    'shutil',
+    'pathlib',
+    'glob',
+    'tempfile',
+    'pickle',
+    'marshal',
+    'shelve',
+    'dbm',
+    'sqlite3',
+    'ctypes',
+    'multiprocessing',
+    'threading',
+    'asyncio',
+    'signal',
+    'resource',
+    'pty',
+    'tty',
+    'termios',
+    'fcntl',
+    'pipes',
+    'posix',
+    'pwd',
+    'grp',
+    'crypt',
+    'spwd',
+    'syslog',
+]);
+/**
+ * Allowed module imports
+ */
+const ALLOWED_IMPORTS = new Set([
+    'json',
+    're',
+    'collections',
+    'itertools',
+    'functools',
+    'math',
+    'random',
+    'string',
+    'textwrap',
+    'difflib',
+    'heapq',
+    'bisect',
+    'copy',
+    'pprint',
+    'typing',
+    'dataclasses',
+    'enum',
+]);
+/**
+ * Forbidden built-in functions
+ */
+const FORBIDDEN_BUILTINS = new Set([
+    'exec',
+    'eval',
+    'compile',
+    '__import__',
+    'open',
+    'input',
+    'breakpoint',
+    'memoryview',
+    'globals',
+    'locals',
+    'vars',
+    'dir',
+    'getattr',
+    'setattr',
+    'delattr',
+    'hasattr',
+]);
+/**
+ * Forbidden attribute access patterns
+ */
+const FORBIDDEN_ATTRIBUTES = [
+    '__class__',
+    '__bases__',
+    '__subclasses__',
+    '__mro__',
+    '__globals__',
+    '__code__',
+    '__builtins__',
+    '__import__',
+    '__loader__',
+    '__spec__',
+];
+/**
+ * Patterns that might indicate infinite loops
+ */
+const INFINITE_LOOP_PATTERNS = [
+    /while\s+True\s*:/,
+    /while\s+1\s*:/,
+    /for\s+\w+\s+in\s+iter\s*\(/,
+];
+/**
+ * AST-based code validator for Python
+ * Note: This is a heuristic validator using regex patterns.
+ * For production use, consider using a real Python AST parser.
+ */
+export class ASTValidator {
+    strictMode;
+    constructor(strictMode = true) {
+        this.strictMode = strictMode;
+    }
+    /**
+     * Validate Python code for safety
+     */
+    validate(code) {
+        const errors = [];
+        const warnings = [];
+        const lines = code.split('\n');
+        for (let lineNum = 0; lineNum < lines.length; lineNum++) {
+            const line = lines[lineNum];
+            const lineNumber = lineNum + 1;
+            // Check imports
+            this.checkImports(line, lineNumber, errors);
+            // Check forbidden builtins
+            this.checkBuiltins(line, lineNumber, errors);
+            // Check forbidden attributes
+            this.checkAttributes(line, lineNumber, errors);
+            // Check for file system access
+            this.checkFileSystemAccess(line, lineNumber, errors);
+            // Check for network access
+            this.checkNetworkAccess(line, lineNumber, errors);
+            // Check for shell execution
+            this.checkShellExecution(line, lineNumber, errors);
+            // Check for infinite loops (warning only)
+            if (this.checkInfiniteLoopRisk(line)) {
+                warnings.push(`Line ${lineNumber}: Potential infinite loop pattern detected`);
+            }
+        }
+        return {
+            valid: errors.length === 0,
+            errors,
+            warnings,
+        };
+    }
+    checkImports(line, lineNumber, errors) {
+        // Check 'import X' pattern
+        const importMatch = line.match(/^\s*import\s+(\w+)/);
+        if (importMatch) {
+            const moduleName = importMatch[1];
+            if (FORBIDDEN_IMPORTS.has(moduleName)) {
+                errors.push(this.createError(lineNumber, 0, `Forbidden import: ${moduleName}`, 'FORBIDDEN_IMPORT'));
+            }
+            else if (this.strictMode && !ALLOWED_IMPORTS.has(moduleName)) {
+                errors.push(this.createError(lineNumber, 0, `Import not in allowlist: ${moduleName}`, 'FORBIDDEN_IMPORT'));
+            }
+        }
+        // Check 'from X import Y' pattern
+        const fromImportMatch = line.match(/^\s*from\s+(\w+)/);
+        if (fromImportMatch) {
+            const moduleName = fromImportMatch[1];
+            if (FORBIDDEN_IMPORTS.has(moduleName)) {
+                errors.push(this.createError(lineNumber, 0, `Forbidden import: ${moduleName}`, 'FORBIDDEN_IMPORT'));
+            }
+            else if (this.strictMode && !ALLOWED_IMPORTS.has(moduleName)) {
+                errors.push(this.createError(lineNumber, 0, `Import not in allowlist: ${moduleName}`, 'FORBIDDEN_IMPORT'));
+            }
+        }
+    }
+    checkBuiltins(line, lineNumber, errors) {
+        for (const builtin of FORBIDDEN_BUILTINS) {
+            const pattern = new RegExp(`\\b${builtin}\\s*\\(`);
+            if (pattern.test(line)) {
+                errors.push(this.createError(lineNumber, 0, `Forbidden builtin: ${builtin}()`, 'FORBIDDEN_BUILTIN'));
+            }
+        }
+    }
+    checkAttributes(line, lineNumber, errors) {
+        for (const attr of FORBIDDEN_ATTRIBUTES) {
+            if (line.includes(attr)) {
+                errors.push(this.createError(lineNumber, 0, `Forbidden attribute access: ${attr}`, 'FORBIDDEN_ATTRIBUTE'));
+            }
+        }
+    }
+    checkFileSystemAccess(line, lineNumber, errors) {
+        const fsPatterns = [
+            /\bopen\s*\(/,
+            /\.read\s*\(/,
+            /\.write\s*\(/,
+            /\.readlines\s*\(/,
+            /Path\s*\(/,
+            /pathlib\./,
+        ];
+        for (const pattern of fsPatterns) {
+            if (pattern.test(line)) {
+                // Skip if it's a method on a known safe object
+                if (line.includes('json.') || line.includes('StringIO')) {
+                    continue;
+                }
+                errors.push(this.createError(lineNumber, 0, 'File system access is not allowed', 'FILE_SYSTEM_ACCESS'));
+                break;
+            }
+        }
+    }
+    checkNetworkAccess(line, lineNumber, errors) {
+        const networkPatterns = [
+            /requests\./,
+            /urllib\./,
+            /socket\./,
+            /http\./,
+            /\.get\s*\(\s*['"]https?:/,
+            /\.post\s*\(\s*['"]https?:/,
+        ];
+        for (const pattern of networkPatterns) {
+            if (pattern.test(line)) {
+                errors.push(this.createError(lineNumber, 0, 'Network access is not allowed', 'NETWORK_ACCESS'));
+                break;
+            }
+        }
+    }
+    checkShellExecution(line, lineNumber, errors) {
+        const shellPatterns = [
+            /subprocess\./,
+            /os\.system\s*\(/,
+            /os\.popen\s*\(/,
+            /os\.exec/,
+            /os\.spawn/,
+            /Popen\s*\(/,
+        ];
+        for (const pattern of shellPatterns) {
+            if (pattern.test(line)) {
+                errors.push(this.createError(lineNumber, 0, 'Shell execution is not allowed', 'SHELL_EXECUTION'));
+                break;
+            }
+        }
+    }
+    checkInfiniteLoopRisk(line) {
+        return INFINITE_LOOP_PATTERNS.some((pattern) => pattern.test(line));
+    }
+    createError(line, column, message, code) {
+        return { line, column, message, code };
+    }
+}
+//# sourceMappingURL=ast-validator.js.map

package/dist/infrastructure/sandbox/ast-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-validator.js","sourceRoot":"","sources":["../../../src/infrastructure/sandbox/ast-validator.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,IAAI;IACJ,KAAK;IACL,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,MAAM;IACN,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,KAAK;IACL,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,WAAW;IACX,SAAS;IACT,QAAQ;IACR,UAAU;IACV,KAAK;IACL,KAAK;IACL,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,OAAO;IACP,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,IAAI;IACJ,aAAa;IACb,WAAW;IACX,WAAW;IACX,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,MAAM;CACP,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,MAAM;IACN,SAAS;IACT,YAAY;IACZ,MAAM;IACN,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,MAAM;IACN,KAAK;IACL,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,SAAS;IACT,aAAa;IACb,UAAU;IACV,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,UAAU;CACX,CAAC;AAEF;;GAEG;AACH,MAAM,sBAAsB,GAAG;IAC7B,kBAAkB;IAClB,eAAe;IACf,4BAA4B;CAC7B,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACN,UAAU,CAAU;IAErC,YAAY,UAAU,GAAG,IAAI;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAY;QACnB,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE/B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;YAE/B,gBAAgB;YAChB,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAE5C,2BAA2B;YAC3B,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAE7C,6BAA6B;YAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAE/C,+BAA+B;YAC/B,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAErD,2BAA2B;YAC3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAElD,4BAA4B;YAC5B,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAEnD,0CAA0C;YAC1C,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,QAAQ,UAAU,4CAA4C,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAyB;QAC9E,2BAA2B;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACrD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;YACnC,IAAI,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,qBAAqB,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACtG,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,4BAA4B,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAE,CAAC;YACvC,IAAI,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,qBAAqB,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACtG,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,4BAA4B,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAyB;QAC/E,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,sBAAsB,OAAO,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAyB;QACjF,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,+BAA+B,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAyB;QACvF,MAAM,UAAU,GAAG;YACjB,aAAa;YACb,aAAa;YACb,cAAc;YACd,kBAAkB;YAClB,WAAW;YACX,WAAW;SACZ,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,+CAA+C;gBAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,mCAAmC,EAAE,oBAAoB,CAAC,CAAC,CAAC;gBACxG,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAyB;QACpF,MAAM,eAAe,GAAG;YACtB,YAAY;YACZ,UAAU;YACV,UAAU;YACV,QAAQ;YACR,0BAA0B;YAC1B,2BAA2B;SAC5B,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,+BAA+B,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBAChG,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,IAAY,EAAE,UAAkB,EAAE,MAAyB;QACrF,MAAM,aAAa,GAAG;YACpB,cAAc;YACd,iBAAiB;YACjB,gBAAgB;YAChB,UAAU;YACV,WAAW;YACX,YAAY;SACb,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,gCAAgC,EAAE,iBAAiB,CAAC,CAAC,CAAC;gBAClG,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,IAAY;QACxC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,WAAW,CACjB,IAAY,EACZ,MAAc,EACd,OAAe,EACf,IAAyB;QAEzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;CACF"}

package/dist/infrastructure/sandbox/index.d.ts

@@ -0,0 +1,4 @@
+export { ASTValidator } from './ast-validator.js';
+export { ProcessManager, PythonProcess, type SpawnOptions, type PythonProcessCommand, } from './process-manager.js';
+export { PythonExecutor, type PythonExecutorConfig } from './python-executor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/infrastructure/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,cAAc,EACd,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,oBAAoB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/infrastructure/sandbox/index.js

@@ -0,0 +1,4 @@
+export { ASTValidator } from './ast-validator.js';
+export { ProcessManager, PythonProcess, } from './process-manager.js';
+export { PythonExecutor } from './python-executor.js';
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infrastructure/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,cAAc,EACd,aAAa,GAGd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAA6B,MAAM,sBAAsB,CAAC"}