@sudosandwich/limps 0.2.0

package/dist/rlm/recursion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recursion.d.ts","sourceRoot":"","sources":["../../src/rlm/recursion.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAEL,KAAK,cAAc,EAEnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAEvB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,OAAO,EAAE,cAAc,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,kEAAkE;IAClE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sDAAsD;IACtD,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAI7D;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAgF1B"}

package/dist/rlm/recursion.js

@@ -0,0 +1,113 @@
+/**
+ * Recursive sub-call handler for RLM queries.
+ * Feature #5: Recursive Sub-Call Handler (MCP Spec 2025-11-25)
+ *
+ * Processes filtered results from RLM queries using MCP Sampling with Tools.
+ * Enables server-side agent loops for recursive LLM processing.
+ */
+import { DepthLimitError } from '../utils/errors.js';
+import { parallelMap } from './parallel.js';
+import { createSamplingMessage, } from './sampling.js';
+/**
+ * Check if depth limit is exceeded and throw if so.
+ *
+ * @param context - Sub-call context
+ * @throws DepthLimitError if depth exceeds maxDepth
+ */
+export function checkDepthLimit(context) {
+    if (context.depth >= context.maxDepth) {
+        throw new DepthLimitError(context.maxDepth, context.depth);
+    }
+}
+/**
+ * Process sub-calls for items returned from RLM query code execution.
+ *
+ * This function:
+ * 1. Normalizes items to an array (handles single item)
+ * 2. Checks depth limit
+ * 3. Processes items in parallel with concurrency control
+ * 4. For each item, creates a sampling message with the prompt
+ * 5. Captures results and tool calls
+ * 6. Returns aggregated results in input order
+ *
+ * @param items - Items from code result (array or single item)
+ * @param prompt - Sub_query prompt to apply to each item
+ * @param options - Recursion options
+ * @returns Array of sub-call results in input order
+ *
+ * @example
+ * const results = await processSubCalls(
+ *   ['item1', 'item2', 'item3'],
+ *   'Summarize each item',
+ *   { maxDepth: 1, concurrency: 5 }
+ * );
+ */
+export async function processSubCalls(items, prompt, options) {
+    const { maxDepth = 1, concurrency = 5, timeout, tools, samplingClient } = options || {};
+    // Normalize items to array
+    const itemsArray = Array.isArray(items) ? items : [items];
+    if (itemsArray.length === 0) {
+        return [];
+    }
+    // Create sub-call context
+    const context = {
+        depth: 0, // Starting depth (will be incremented for nested calls)
+        maxDepth,
+    };
+    // Check depth limit before processing
+    checkDepthLimit(context);
+    // Process items in parallel
+    const parallelOptions = {
+        concurrency,
+        timeout,
+    };
+    const results = await parallelMap(itemsArray, async (item, index) => {
+        try {
+            // Build prompt with item context
+            const itemContext = JSON.stringify(item, null, 2);
+            const fullPrompt = `${prompt}\n\nContext:\n${itemContext}`;
+            // Create sampling request
+            const samplingRequest = {
+                messages: [{ role: 'user', content: fullPrompt }],
+                tools,
+                toolChoice: tools && tools.length > 0 ? 'auto' : 'none',
+                maxTokens: 2000, // Default max tokens for sub-calls
+            };
+            // Call sampling (will throw if client not available)
+            const response = await createSamplingMessage(samplingRequest, samplingClient);
+            // Build result
+            return {
+                success: true,
+                result: response.content,
+                index,
+                toolCalls: response.toolCalls,
+            };
+        }
+        catch (error) {
+            // Handle errors gracefully - don't throw, include in result
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            return {
+                success: false,
+                error: errorMessage,
+                index,
+            };
+        }
+    }, parallelOptions);
+    // Map parallel results to SubCallResult (they're already in the right format)
+    return results.map((result) => {
+        if (result.success) {
+            return result.value;
+        }
+        else {
+            // Find the index from the original items array
+            // Since parallelMap preserves order, we can use the result index
+            const index = results.indexOf(result);
+            return {
+                success: false,
+                error: result.error,
+                index,
+            };
+        }
+    });
+}
+//# sourceMappingURL=recursion.js.map

package/dist/rlm/recursion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recursion.js","sourceRoot":"","sources":["../../src/rlm/recursion.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAwB,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,qBAAqB,GAKtB,MAAM,eAAe,CAAC;AA8DvB;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAuB;IACrD,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA0B,EAC1B,MAAc,EACd,OAA0B;IAE1B,MAAM,EAAE,QAAQ,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAExF,2BAA2B;IAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE1D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAmB;QAC9B,KAAK,EAAE,CAAC,EAAE,wDAAwD;QAClE,QAAQ;KACT,CAAC;IAEF,sCAAsC;IACtC,eAAe,CAAC,OAAO,CAAC,CAAC;IAEzB,4BAA4B;IAC5B,MAAM,eAAe,GAAoB;QACvC,WAAW;QACX,OAAO;KACR,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,UAAU,EACV,KAAK,EAAE,IAAI,EAAE,KAAK,EAA0B,EAAE;QAC5C,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,GAAG,MAAM,iBAAiB,WAAW,EAAE,CAAC;YAE3D,0BAA0B;YAC1B,MAAM,eAAe,GAAoB;gBACvC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBACjD,KAAK;gBACL,UAAU,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACvD,SAAS,EAAE,IAAI,EAAE,mCAAmC;aACrD,CAAC;YAEF,qDAAqD;YACrD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;YAE9E,eAAe;YACf,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,OAAO;gBACxB,KAAK;gBACL,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4DAA4D;YAC5D,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE5E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY;gBACnB,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC,EACD,eAAe,CAChB,CAAC;IAEF,8EAA8E;IAC9E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,+CAA+C;YAC/C,iEAAiE;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/rlm/sampling.d.ts

@@ -0,0 +1,100 @@
+/**
+ * MCP Sampling with Tools wrapper for RLM sub-calls.
+ * Feature #5: Recursive Sub-Call Handler (MCP Spec 2025-11-25)
+ *
+ * Enables server-side agent loops using MCP Sampling with Tools (SEP-1577).
+ * This allows the server to invoke the LLM directly for sub-queries.
+ */
+/**
+ * Tool definition for sampling requests (JSON Schema 2020-12).
+ */
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: object;
+}
+/**
+ * Tool call result captured during sampling.
+ */
+export interface ToolCallResult {
+    name: string;
+    input: unknown;
+    output: unknown;
+}
+/**
+ * Sampling request matching MCP Spec 2025-11-25.
+ */
+export interface SamplingRequest {
+    messages: {
+        role: 'user' | 'assistant';
+        content: string;
+    }[];
+    tools?: ToolDefinition[];
+    toolChoice?: 'auto' | 'none' | {
+        type: 'tool';
+        name: string;
+    };
+    maxTokens?: number;
+    systemPrompt?: string;
+}
+/**
+ * Sampling response with content and tool calls.
+ */
+export interface SamplingResponse {
+    content: string;
+    toolCalls?: ToolCallResult[];
+    stopReason: 'end_turn' | 'tool_use' | 'max_tokens';
+}
+/**
+ * Client interface for MCP sampling capability.
+ * This abstraction allows for mocking in tests and future real client integration.
+ */
+export interface SamplingClient {
+    /**
+     * Create a sampling message (MCP createMessage request).
+     * @param request - Sampling request
+     * @returns Sampling response with content and tool calls
+     */
+    createMessage(request: SamplingRequest): Promise<SamplingResponse>;
+}
+/**
+ * Create a sampling message using the provided client.
+ *
+ * This is a wrapper around MCP Sampling with Tools (SEP-1577) that:
+ * - Formats the request according to MCP spec
+ * - Handles tool_use stop reason (executes tool, continues sampling)
+ * - Captures tool call results
+ * - Respects toolChoice setting
+ *
+ * @param request - Sampling request
+ * @param client - Optional sampling client (for testing/mocking)
+ * @returns Sampling response with content and tool calls
+ *
+ * @example
+ * const response = await createSamplingMessage({
+ *   messages: [{ role: 'user', content: 'Summarize this section' }],
+ *   tools: [{ name: 'analyze', description: '...', inputSchema: {...} }],
+ *   toolChoice: 'auto',
+ *   maxTokens: 1000
+ * }, mockClient);
+ */
+export declare function createSamplingMessage(request: SamplingRequest, client?: SamplingClient): Promise<SamplingResponse>;
+/**
+ * Mock sampling client for testing.
+ * Returns predictable responses based on request content.
+ */
+export declare class MockSamplingClient implements SamplingClient {
+    private stringResponses;
+    private regexResponses;
+    private defaultResponse?;
+    /**
+     * Set a default response generator.
+     */
+    setDefaultResponse(generator: (request: SamplingRequest) => SamplingResponse): void;
+    /**
+     * Set a specific response for a message content pattern.
+     */
+    setResponse(pattern: string | RegExp, response: SamplingResponse): void;
+    createMessage(request: SamplingRequest): Promise<SamplingResponse>;
+}
+//# sourceMappingURL=sampling.d.ts.map

package/dist/rlm/sampling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.d.ts","sourceRoot":"","sources":["../../src/rlm/sampling.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACpE;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,eAAe,EACxB,MAAM,CAAC,EAAE,cAAc,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAqB3B;AAED;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,eAAe,CAAuC;IAC9D,OAAO,CAAC,cAAc,CAAuD;IAC7E,OAAO,CAAC,eAAe,CAAC,CAAiD;IAEzE;;OAEG;IACH,kBAAkB,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,gBAAgB,GAAG,IAAI;IAInF;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAQjE,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA4BzE"}

package/dist/rlm/sampling.js

@@ -0,0 +1,96 @@
+/**
+ * MCP Sampling with Tools wrapper for RLM sub-calls.
+ * Feature #5: Recursive Sub-Call Handler (MCP Spec 2025-11-25)
+ *
+ * Enables server-side agent loops using MCP Sampling with Tools (SEP-1577).
+ * This allows the server to invoke the LLM directly for sub-queries.
+ */
+/**
+ * Create a sampling message using the provided client.
+ *
+ * This is a wrapper around MCP Sampling with Tools (SEP-1577) that:
+ * - Formats the request according to MCP spec
+ * - Handles tool_use stop reason (executes tool, continues sampling)
+ * - Captures tool call results
+ * - Respects toolChoice setting
+ *
+ * @param request - Sampling request
+ * @param client - Optional sampling client (for testing/mocking)
+ * @returns Sampling response with content and tool calls
+ *
+ * @example
+ * const response = await createSamplingMessage({
+ *   messages: [{ role: 'user', content: 'Summarize this section' }],
+ *   tools: [{ name: 'analyze', description: '...', inputSchema: {...} }],
+ *   toolChoice: 'auto',
+ *   maxTokens: 1000
+ * }, mockClient);
+ */
+export async function createSamplingMessage(request, client) {
+    // If no client provided, throw error (real implementation will get client from context)
+    if (!client) {
+        throw new Error('Sampling client not available. Sub-calls require MCP client with sampling capability.');
+    }
+    // Call the client's createMessage method
+    const response = await client.createMessage(request);
+    // The response should already include content and tool calls
+    // In a real implementation, if stopReason is 'tool_use', we would:
+    // 1. Execute the tool
+    // 2. Continue sampling with tool result
+    // 3. Repeat until stopReason is 'end_turn' or 'max_tokens'
+    //
+    // For now, we return the response as-is. The mock client can simulate
+    // this behavior for testing.
+    return response;
+}
+/**
+ * Mock sampling client for testing.
+ * Returns predictable responses based on request content.
+ */
+export class MockSamplingClient {
+    stringResponses = new Map();
+    regexResponses = [];
+    defaultResponse;
+    /**
+     * Set a default response generator.
+     */
+    setDefaultResponse(generator) {
+        this.defaultResponse = generator;
+    }
+    /**
+     * Set a specific response for a message content pattern.
+     */
+    setResponse(pattern, response) {
+        if (pattern instanceof RegExp) {
+            this.regexResponses.push({ regex: pattern, response });
+        }
+        else {
+            this.stringResponses.set(pattern, response);
+        }
+    }
+    async createMessage(request) {
+        const messageContent = request.messages[request.messages.length - 1]?.content || '';
+        // Check regex patterns first (more specific)
+        for (const { regex, response } of this.regexResponses) {
+            if (regex.test(messageContent)) {
+                return response;
+            }
+        }
+        // Check string patterns
+        for (const [pattern, response] of this.stringResponses.entries()) {
+            if (messageContent.includes(pattern)) {
+                return response;
+            }
+        }
+        // Use default response generator if available
+        if (this.defaultResponse) {
+            return this.defaultResponse(request);
+        }
+        // Default: return a simple response
+        return {
+            content: `Mock response for: ${messageContent.substring(0, 50)}...`,
+            stopReason: 'end_turn',
+        };
+    }
+}
+//# sourceMappingURL=sampling.js.map

package/dist/rlm/sampling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.js","sourceRoot":"","sources":["../../src/rlm/sampling.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAqDH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAwB,EACxB,MAAuB;IAEvB,wFAAwF;IACxF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAErD,6DAA6D;IAC7D,mEAAmE;IACnE,sBAAsB;IACtB,wCAAwC;IACxC,2DAA2D;IAC3D,EAAE;IACF,sEAAsE;IACtE,6BAA6B;IAE7B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IACtD,cAAc,GAAoD,EAAE,CAAC;IACrE,eAAe,CAAkD;IAEzE;;OAEG;IACH,kBAAkB,CAAC,SAAyD;QAC1E,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAwB,EAAE,QAA0B;QAC9D,IAAI,OAAO,YAAY,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAwB;QAC1C,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;QAEpF,6CAA6C;QAC7C,KAAK,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtD,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/B,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,oCAAoC;QACpC,OAAO;YACL,OAAO,EAAE,sBAAsB,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK;YACnE,UAAU,EAAE,UAAU;SACvB,CAAC;IACJ,CAAC;CACF"}

package/dist/rlm/sandbox.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Sandboxed JavaScript execution environment for RLM queries.
+ * Feature #1: RLM Environment Core
+ *
+ * Uses QuickJS via quickjs-emscripten for true sandboxing.
+ */
+/**
+ * Document representation in RLM environment.
+ */
+export interface DocVariable {
+    content: string;
+    metadata: {
+        path: string;
+        size: number;
+        lines: number;
+        modified: string;
+    };
+    path: string;
+}
+/**
+ * Sandbox configuration options.
+ */
+export interface SandboxOptions {
+    /** Execution timeout in ms (default: 5000) */
+    timeout?: number;
+    /** Memory limit in MB (default: 64) */
+    memoryLimit?: number;
+}
+/**
+ * Result of code execution.
+ */
+export interface ExecutionResult<T> {
+    result: T;
+    executionTimeMs: number;
+    memoryUsed?: number;
+}
+/**
+ * Timeout error thrown when execution exceeds time limit.
+ */
+export declare class TimeoutError extends Error {
+    constructor(timeoutMs: number);
+}
+/**
+ * Memory error thrown when execution exceeds memory limit.
+ */
+export declare class MemoryError extends Error {
+    constructor(limitMb: number);
+}
+/**
+ * Sandboxed RLM execution environment.
+ */
+export interface RlmEnvironment {
+    /**
+     * Execute JavaScript code with doc/docs variable available.
+     * @param code - JavaScript code to execute
+     * @returns Promise resolving to execution result
+     * @throws TimeoutError if execution exceeds timeout
+     * @throws MemoryError if execution exceeds memory limit
+     * @throws SecurityError if code attempts prohibited operations
+     */
+    execute<T>(code: string): Promise<ExecutionResult<T>>;
+    /**
+     * Release resources. Always call when done.
+     */
+    dispose(): void;
+}
+/**
+ * Create a sandboxed execution environment with document(s) loaded.
+ * @param doc - Single DocVariable or array for multi-query
+ * @param options - Sandbox configuration
+ */
+export declare function createEnvironment(doc: DocVariable | DocVariable[], options?: SandboxOptions): Promise<RlmEnvironment>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/rlm/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/rlm/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC;IACV,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,SAAS,EAAE,MAAM;CAQ9B;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;gBACxB,OAAO,EAAE,MAAM;CAQ5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;;OAOG;IACH,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtD;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;CACjB;AAuBD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,WAAW,GAAG,WAAW,EAAE,EAChC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,cAAc,CAAC,CA2HzB"}

package/dist/rlm/sandbox.js

@@ -0,0 +1,160 @@
+/**
+ * Sandboxed JavaScript execution environment for RLM queries.
+ * Feature #1: RLM Environment Core
+ *
+ * Uses QuickJS via quickjs-emscripten for true sandboxing.
+ */
+import { getQuickJS, shouldInterruptAfterDeadline, } from 'quickjs-emscripten';
+import { validateCode } from './security.js';
+import { getHelpersCode } from './helpers-inject.js';
+/**
+ * Timeout error thrown when execution exceeds time limit.
+ */
+export class TimeoutError extends Error {
+    constructor(timeoutMs) {
+        super(`Execution timeout after ${timeoutMs}ms`);
+        this.name = 'TimeoutError';
+        Object.setPrototypeOf(this, TimeoutError.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, TimeoutError);
+        }
+    }
+}
+/**
+ * Memory error thrown when execution exceeds memory limit.
+ */
+export class MemoryError extends Error {
+    constructor(limitMb) {
+        super(`Memory limit exceeded (${limitMb}MB)`);
+        this.name = 'MemoryError';
+        Object.setPrototypeOf(this, MemoryError.prototype);
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, MemoryError);
+        }
+    }
+}
+// Cached QuickJS module
+let quickJSModule = null;
+/**
+ * Get or initialize the QuickJS WASM module.
+ */
+async function getQuickJSModule() {
+    if (!quickJSModule) {
+        quickJSModule = await getQuickJS();
+    }
+    return quickJSModule;
+}
+/**
+ * Default sandbox options.
+ */
+const DEFAULT_OPTIONS = {
+    timeout: 5000,
+    memoryLimit: 64,
+};
+/**
+ * Create a sandboxed execution environment with document(s) loaded.
+ * @param doc - Single DocVariable or array for multi-query
+ * @param options - Sandbox configuration
+ */
+export async function createEnvironment(doc, options) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    const QuickJS = await getQuickJSModule();
+    // Create runtime with memory limit
+    const runtime = QuickJS.newRuntime();
+    runtime.setMemoryLimit(opts.memoryLimit * 1024 * 1024); // Convert MB to bytes
+    runtime.setMaxStackSize(1024 * 1024); // 1MB stack
+    // Create context
+    const context = runtime.newContext();
+    // Set up doc/docs globals
+    const isArray = Array.isArray(doc);
+    const docData = isArray ? doc : doc;
+    // Inject helper functions first
+    const helpersCode = getHelpersCode();
+    const helpersResult = context.evalCode(helpersCode);
+    if (helpersResult.error) {
+        const errorMsg = context.dump(helpersResult.error);
+        helpersResult.error.dispose();
+        context.dispose();
+        runtime.dispose();
+        throw new Error(`Failed to inject helpers: ${String(errorMsg)}`);
+    }
+    helpersResult.value.dispose();
+    // Inject the document data as JSON and parse it in the sandbox
+    const docJson = JSON.stringify(docData);
+    const setupCode = isArray
+        ? `const docs = ${docJson}; const doc = docs[0];`
+        : `const doc = ${docJson};`;
+    const setupResult = context.evalCode(setupCode);
+    if (setupResult.error) {
+        const errorMsg = context.dump(setupResult.error);
+        setupResult.error.dispose();
+        context.dispose();
+        runtime.dispose();
+        throw new Error(`Failed to initialize environment: ${String(errorMsg)}`);
+    }
+    setupResult.value.dispose();
+    let disposed = false;
+    return {
+        async execute(code) {
+            if (disposed) {
+                throw new Error('Environment has been disposed');
+            }
+            // Validate code for security
+            validateCode(code);
+            const startTime = performance.now();
+            // Set up interrupt handler for timeout
+            const deadline = Date.now() + opts.timeout;
+            runtime.setInterruptHandler(shouldInterruptAfterDeadline(deadline));
+            // Evaluate the code directly - QuickJS returns the last expression value
+            const result = context.evalCode(code);
+            const executionTimeMs = performance.now() - startTime;
+            // Check for errors
+            if (result.error) {
+                const errorDump = context.dump(result.error);
+                result.error.dispose();
+                // Handle the error dump - it could be an object with message property
+                let errorStr;
+                if (typeof errorDump === 'object' && errorDump !== null) {
+                    const errorObj = errorDump;
+                    errorStr = errorObj.message
+                        ? String(errorObj.message)
+                        : errorObj.name
+                            ? String(errorObj.name)
+                            : JSON.stringify(errorDump);
+                }
+                else {
+                    errorStr = String(errorDump);
+                }
+                // Check if it's an interrupt (timeout)
+                if (errorStr.includes('interrupted') ||
+                    errorStr.includes('InternalError') ||
+                    errorStr.includes('stack') // QuickJS throws stack overflow on interrupt
+                ) {
+                    throw new TimeoutError(opts.timeout);
+                }
+                // Check if it's a memory error
+                if (errorStr.includes('out of memory') ||
+                    errorStr.includes('memory') ||
+                    errorStr.includes('allocation')) {
+                    throw new MemoryError(opts.memoryLimit);
+                }
+                throw new Error(`Execution error: ${errorStr}`);
+            }
+            // Get result value
+            const value = context.dump(result.value);
+            result.value.dispose();
+            return {
+                result: value,
+                executionTimeMs,
+            };
+        },
+        dispose() {
+            if (!disposed) {
+                disposed = true;
+                context.dispose();
+                runtime.dispose();
+            }
+        },
+    };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/rlm/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/rlm/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,UAAU,EACV,4BAA4B,GAE7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAmCrD;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,SAAiB;QAC3B,KAAK,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,0BAA0B,OAAO,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAsBD,wBAAwB;AACxB,IAAI,aAAa,GAA6B,IAAI,CAAC;AAEnD;;GAEG;AACH,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,aAAa,GAAG,MAAM,UAAU,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,eAAe,GAA6B;IAChD,OAAO,EAAE,IAAI;IACb,WAAW,EAAE,EAAE;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAgC,EAChC,OAAwB;IAExB,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAEzC,mCAAmC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACrC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,sBAAsB;IAC9E,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY;IAElD,iBAAiB;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAErC,0BAA0B;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAEpC,gCAAgC;IAChC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACnD,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAE9B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO;QACvB,CAAC,CAAC,gBAAgB,OAAO,wBAAwB;QACjD,CAAC,CAAC,eAAe,OAAO,GAAG,CAAC;IAE9B,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjD,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAE5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,OAAO;QACL,KAAK,CAAC,OAAO,CAAI,IAAY;YAC3B,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YAED,6BAA6B;YAC7B,YAAY,CAAC,IAAI,CAAC,CAAC;YAEnB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEpC,uCAAuC;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;YAC3C,OAAO,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC;YAEpE,yEAAyE;YACzE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEtC,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEtD,mBAAmB;YACnB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAEvB,sEAAsE;gBACtE,IAAI,QAAgB,CAAC;gBACrB,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACxD,MAAM,QAAQ,GAAG,SAAoC,CAAC;oBACtD,QAAQ,GAAG,QAAQ,CAAC,OAAO;wBACzB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;wBAC1B,CAAC,CAAC,QAAQ,CAAC,IAAI;4BACb,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;4BACvB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,CAAC;gBAED,uCAAuC;gBACvC,IACE,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAChC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAClC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,6CAA6C;kBACxE,CAAC;oBACD,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC;gBAED,+BAA+B;gBAC/B,IACE,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;oBAClC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3B,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC/B,CAAC;oBACD,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;YAClD,CAAC;YAED,mBAAmB;YACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAM,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAEvB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,eAAe;aAChB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/rlm/security.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Security validation for RLM sandbox execution.
+ * Feature #6: Security Sandbox
+ *
+ * Blocks dangerous APIs and validates code before execution.
+ * This is defense-in-depth; isolated-vm provides true isolation.
+ */
+/**
+ * APIs that are blocked from sandbox execution.
+ * These are validated via static analysis before code runs.
+ */
+export declare const BLOCKED_APIS: readonly string[];
+/**
+ * Security error thrown when code contains prohibited operations.
+ */
+export declare class SecurityError extends Error {
+    readonly violation: string;
+    constructor(violation: string, message: string);
+}
+/**
+ * Pre-execution validation of code string.
+ * Scans for BLOCKED_APIS patterns and throws SecurityError if found.
+ *
+ * @param code - JavaScript code to validate
+ * @throws SecurityError if code contains blocked patterns
+ */
+export declare function validateCode(code: string): void;
+//# sourceMappingURL=security.d.ts.map

package/dist/rlm/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/rlm/security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAkBhC,CAAC;AAEX;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAa/C;AAqGD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAY/C"}