@noodleseed/one 0.68.0 → 0.69.1

package/node_modules/@noodle-borg/runtime/dist/broker/map.js

@@ -1,10 +1,25 @@
-const SEP = '\u0000';
+import { CredentialUnavailableError, credentialBindingDescriptorFromRequest, } from './types.js';
 /**
  * Build the lookup key for a connector operation. With `operation`, it keys an exact
  * `(connectorId, operation)` entry; without, it keys the connector-level default.
  */
 function entryKey(connectorId, operation) {
-    return operation === undefined ? connectorId : `${connectorId}${SEP}${operation}`;
+    return JSON.stringify(['legacy', connectorId, operation ?? null]);
+}
+function bindingEntryKey(input) {
+    return JSON.stringify([
+        'binding',
+        input.connectorId,
+        input.connectorVersion,
+        input.operation,
+        input.bindingId,
+        input.connectionId,
+        input.connectionConfigRevision,
+        input.profile,
+        input.presentation.kind === 'bearer' ? ['bearer'] : ['apiKey', input.presentation.header],
+        [...input.requiredScopes].sort(),
+        input.requiredAudience ?? null,
+    ]);
 }
 /**
  * A service-credential broker backed by a resolved map. It resolves a {@link DownstreamCredential} by
@@ -14,10 +29,11 @@ function entryKey(connectorId, operation) {
  *
  * It holds only already-resolved `{token}` values — it has no knowledge of auth schemes or secret names.
  * Managed deployments use a tenant-aware broker instead; this map broker remains useful for tests/static
- * embeddings. It never rejects: an unbound operation simply gets the empty-token fallback.
+ * embeddings. Legacy unbound operations get the empty-token fallback. Binding-scoped requests require
+ * the complete compiled descriptor and fail closed; they never fall back to legacy connector keys.
  *
- * The {@link CredentialBroker} port is unchanged, so managed config and tenant scoping layer on top by
- * changing the broker implementation — not the port the runtime depends on.
+ * The broker method boundary remains `getCredential(request)`, so managed config and tenant scoping layer
+ * on top through the broker implementation rather than a separate runtime credential path.
  */
 export class MapServiceBroker {
     #byKey;
@@ -27,11 +43,25 @@ export class MapServiceBroker {
         this.#fallback = fallback;
     }
     getCredential(request) {
+        let descriptor;
+        try {
+            descriptor = credentialBindingDescriptorFromRequest(request);
+        }
+        catch (error) {
+            return Promise.reject(error);
+        }
+        if (descriptor !== undefined) {
+            const exactBinding = this.#byKey.get(bindingEntryKey(descriptor));
+            return exactBinding === undefined
+                ? Promise.reject(new CredentialUnavailableError('credential_not_configured'))
+                : Promise.resolve(exactBinding);
+        }
         const exact = this.#byKey.get(entryKey(request.connectorId, request.operation));
         const connectorDefault = this.#byKey.get(entryKey(request.connectorId));
         return Promise.resolve(exact ?? connectorDefault ?? this.#fallback);
     }
     /** Build the map key for `(connectorId, operation?)`; exported so callers can populate the entries. */
     static key = entryKey;
+    static bindingKey = bindingEntryKey;
 }
 //# sourceMappingURL=map.js.map

package/node_modules/@noodle-borg/runtime/dist/broker/map.js.map

@@ -1 +1 @@
-{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/broker/map.ts"],"names":[],"mappings":"AAEA,MAAM,GAAG,GAAG,QAAQ,CAAC;AAErB;;;GAGG;AACH,SAAS,QAAQ,CAAC,WAAmB,EAAE,SAAkB;IACvD,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,GAAG,GAAG,SAAS,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAA4C;IAClD,SAAS,CAAuB;IAEzC,YACE,OAAkD,EAClD,WAAiC,EAAE,KAAK,EAAE,EAAE,EAAE;QAE9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,aAAa,CAAC,OAA0B;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,gBAAgB,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,uGAAuG;IACvG,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"map.js","sourceRoot":"","sources":["../../src/broker/map.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,0BAA0B,EAC1B,sCAAsC,GAEvC,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,SAAS,QAAQ,CAAC,WAAmB,EAAE,SAAkB;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAID,SAAS,eAAe,CAAC,KAAsB;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS;QACT,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,wBAAwB;QAC9B,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QACzF,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;QAChC,KAAK,CAAC,gBAAgB,IAAI,IAAI;KAC/B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAA4C;IAClD,SAAS,CAAuB;IAEzC,YACE,OAAkD,EAClD,WAAiC,EAAE,KAAK,EAAE,EAAE,EAAE;QAE9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,aAAa,CAAC,OAA0B;QACtC,IAAI,UAAmD,CAAC;QACxD,IAAI,CAAC;YACH,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;YAClE,OAAO,YAAY,KAAK,SAAS;gBAC/B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;gBAC7E,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,gBAAgB,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,uGAAuG;IACvG,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC;IACtB,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts

@@ -1,3 +1,4 @@
+import type { CredentialProfile } from '@noodle-borg/compiler';
 import type { CallerIdentity } from '../connector/types.js';
 /** Stable, non-secret reasons a credential lookup can fail. */
 export type CredentialUnavailableReason = 'caller_identity_not_customer' | 'caller_audience_missing' | 'caller_subject_missing' | 'credential_not_configured' | 'credential_exchange_failed';
@@ -41,13 +42,45 @@ export interface CredentialRequest {
     readonly connectorId: string;
     readonly connectorVersion: string;
     readonly operation: string;
+    readonly bindingId?: string;
+    readonly connectionId?: string;
+    readonly connectionConfigRevision?: string;
+    readonly profile?: string;
+    readonly presentation?: CredentialProfile;
+    readonly requiredScopes?: readonly string[];
+    readonly requiredAudience?: string;
+    /** Optional hosted execution identity; local and legacy invocation paths omit it. */
+    readonly tenantId?: string;
+    readonly deploymentId?: string;
     /** Verified end-user identity when the deployment authenticates a caller. */
     readonly caller?: CallerIdentity;
 }
+/** Complete immutable authorization descriptor for a compiled connector binding operation. */
+export interface CredentialBindingDescriptor {
+    readonly connectorId: string;
+    readonly connectorVersion: string;
+    readonly operation: string;
+    readonly bindingId: string;
+    readonly connectionId: string;
+    readonly connectionConfigRevision: string;
+    readonly profile: string;
+    readonly presentation: CredentialProfile;
+    readonly requiredScopes: readonly string[];
+    readonly requiredAudience?: string;
+}
+/**
+ * Return the complete immutable binding descriptor carried by a credential request.
+ * Requests with no binding metadata are legacy requests. If any binding metadata is present, every
+ * required field must be present so malformed binding calls can never fall through to legacy secrets.
+ */
+export declare function credentialBindingDescriptorFromRequest(request: CredentialRequest): CredentialBindingDescriptor | undefined;
 export interface DelegatedCredentialProbe {
     readonly connectorId: string;
     readonly operation?: string;
-    readonly authKind: 'delegatedOAuth' | 'delegatedSessionCookie' | 'delegatedTokenExchange';
+    readonly bindingId?: string;
+    readonly connectionId?: string;
+    readonly profile?: string;
+    readonly authKind: 'delegatedOAuth' | 'delegatedSessionCookie' | 'delegatedTokenExchange' | 'externalExchange';
     readonly ok: boolean;
     readonly reason?: CredentialUnavailableReason;
     readonly fix?: string;

package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/broker/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,MAAM,2BAA2B,GACnC,8BAA8B,GAC9B,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;gBAGhC,MAAM,EAAE,2BAA2B,EACnC,OAAO,GAAE,iCAAsC;CAQlD;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE3F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,wBAAwB,GAAG,wBAAwB,CAAC;IAC1F,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzE;;;OAGG;IACH,yBAAyB,CAAC,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC;CAClG"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/broker/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,MAAM,2BAA2B,GACnC,8BAA8B,GAC9B,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;gBAGhC,MAAM,EAAE,2BAA2B,EACnC,OAAO,GAAE,iCAAsC;CAQlD;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE3F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8FAA8F;AAC9F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,iBAAiB,GACzB,2BAA2B,GAAG,SAAS,CAkCzC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EACb,gBAAgB,GAChB,wBAAwB,GACxB,wBAAwB,GACxB,kBAAkB,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzE;;;OAGG;IACH,yBAAyB,CAAC,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC;CAClG"}

package/node_modules/@noodle-borg/runtime/dist/broker/types.js

@@ -16,4 +16,42 @@ export class CredentialUnavailableError extends Error {
             this.next = [...options.next];
     }
 }
+/**
+ * Return the complete immutable binding descriptor carried by a credential request.
+ * Requests with no binding metadata are legacy requests. If any binding metadata is present, every
+ * required field must be present so malformed binding calls can never fall through to legacy secrets.
+ */
+export function credentialBindingDescriptorFromRequest(request) {
+    const hasBindingMetadata = request.bindingId !== undefined ||
+        request.connectionId !== undefined ||
+        request.connectionConfigRevision !== undefined ||
+        request.profile !== undefined ||
+        request.presentation !== undefined ||
+        request.requiredScopes !== undefined ||
+        request.requiredAudience !== undefined;
+    if (!hasBindingMetadata)
+        return undefined;
+    if (request.bindingId === undefined ||
+        request.connectionId === undefined ||
+        request.connectionConfigRevision === undefined ||
+        request.profile === undefined ||
+        request.presentation === undefined ||
+        request.requiredScopes === undefined) {
+        throw new CredentialUnavailableError('credential_not_configured');
+    }
+    return {
+        connectorId: request.connectorId,
+        connectorVersion: request.connectorVersion,
+        operation: request.operation,
+        bindingId: request.bindingId,
+        connectionId: request.connectionId,
+        connectionConfigRevision: request.connectionConfigRevision,
+        profile: request.profile,
+        presentation: request.presentation,
+        requiredScopes: request.requiredScopes,
+        ...(request.requiredAudience === undefined
+            ? {}
+            : { requiredAudience: request.requiredAudience }),
+    };
+}
 //# sourceMappingURL=types.js.map

package/node_modules/@noodle-borg/runtime/dist/broker/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/broker/types.ts"],"names":[],"mappings":"AAeA;;;GAGG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,MAAM,CAA8B;IACpC,GAAG,CAAU;IACb,IAAI,CAAqB;IAElC,YACE,MAAmC,EACnC,UAA6C,EAAE;QAE/C,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACtD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;CACF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/broker/types.ts"],"names":[],"mappings":"AAgBA;;;GAGG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,MAAM,CAA8B;IACpC,GAAG,CAAU;IACb,IAAI,CAAqB;IAElC,YACE,MAAmC,EACnC,UAA6C,EAAE;QAE/C,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACtD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;CACF;AA2DD;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CACpD,OAA0B;IAE1B,MAAM,kBAAkB,GACtB,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,wBAAwB,KAAK,SAAS;QAC9C,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,cAAc,KAAK,SAAS;QACpC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,IAAI,CAAC,kBAAkB;QAAE,OAAO,SAAS,CAAC;IAC1C,IACE,OAAO,CAAC,SAAS,KAAK,SAAS;QAC/B,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,wBAAwB,KAAK,SAAS;QAC9C,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,cAAc,KAAK,SAAS,EACpC,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/confirmation-analysis.d.ts

@@ -0,0 +1,28 @@
+import type { ArtifactFulfilment } from '@noodle-borg/compiler';
+import type { EvalScope } from './eval/evaluate.js';
+import type { ExecuteToolDeps } from './execute.js';
+import type { ExecutionError } from './result.js';
+type FlowFulfilment = Extract<ArtifactFulfilment, {
+    kind: 'flow';
+}>;
+export type EligibleActionAnalysis = {
+    readonly ok: true;
+    readonly flowHasActions: boolean;
+    readonly eligibleIndexes: readonly number[];
+} | {
+    readonly ok: false;
+    readonly error: ExecutionError;
+};
+export type AdditionalOperationAnalysis = {
+    readonly ok: true;
+    readonly count: number;
+} | {
+    readonly ok: false;
+    readonly error: ExecutionError;
+};
+export declare function validateConfirmationFlow(flow: FlowFulfilment, deps: ExecuteToolDeps): ExecutionError | null;
+export declare function countTrailingEligibleOperations(flow: FlowFulfilment, selectedIndex: number, completedSteps: Readonly<Record<string, unknown>>, scope: EvalScope): AdditionalOperationAnalysis;
+/** Prove action cardinality without connector I/O before proposing or dispatching an action. */
+export declare function analyzeEligibleActions(flow: FlowFulfilment, startIndex: number, completedSteps: Readonly<Record<string, unknown>>, scope: EvalScope, deps: ExecuteToolDeps): EligibleActionAnalysis;
+export {};
+//# sourceMappingURL=confirmation-analysis.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/confirmation-analysis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-analysis.d.ts","sourceRoot":"","sources":["../src/confirmation-analysis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAY,MAAM,uBAAuB,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,KAAK,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEpE,MAAM,MAAM,sBAAsB,GAC9B;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3D,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3D,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,eAAe,GACpB,cAAc,GAAG,IAAI,CA+BvB;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,cAAc,EACpB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,KAAK,EAAE,SAAS,GACf,2BAA2B,CAiB7B;AAED,gGAAgG;AAChG,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,eAAe,GACpB,sBAAsB,CA6CxB"}

package/node_modules/@noodle-borg/runtime/dist/confirmation-analysis.js

@@ -0,0 +1,143 @@
+import { ExpressionEvalError, evaluateCondition } from './eval/evaluate.js';
+export function validateConfirmationFlow(flow, deps) {
+    let operationSeen = false;
+    let unconditionalActionSeen = false;
+    for (const step of flow.steps) {
+        if (step.kind === 'operation') {
+            operationSeen = true;
+            if (step.if === undefined && step.operationRef.resolved === true) {
+                const signature = deps.connectors
+                    .resolve(step.operationRef)
+                    ?.signature(step.operationRef.operation);
+                if (signature?.type === 'action') {
+                    if (unconditionalActionSeen) {
+                        return {
+                            code: 'invalid_confirmation_flow',
+                            message: 'confirmable flows cannot contain more than one unconditional action',
+                            path: `steps.${step.id}`,
+                        };
+                    }
+                    unconditionalActionSeen = true;
+                }
+            }
+        }
+        if (step.kind === 'elicit' && operationSeen) {
+            return {
+                code: 'invalid_elicitation_flow',
+                message: 'interactive flows must collect all elicited input before the first operation',
+                path: `steps.${step.id}`,
+            };
+        }
+    }
+    return null;
+}
+export function countTrailingEligibleOperations(flow, selectedIndex, completedSteps, scope) {
+    let count = 0;
+    for (let index = selectedIndex + 1; index < flow.steps.length; index += 1) {
+        const step = flow.steps[index];
+        if (step?.kind !== 'operation')
+            continue;
+        if (step.if === undefined || conditionUsesIncompleteStep(step.if, completedSteps)) {
+            count += 1;
+            continue;
+        }
+        try {
+            if (evaluateCondition(step.if, scope, `steps.${step.id}.if`))
+                count += 1;
+        }
+        catch (error) {
+            if (error instanceof ExpressionEvalError)
+                return expressionFailure(error);
+            throw error;
+        }
+    }
+    return { ok: true, count };
+}
+/** Prove action cardinality without connector I/O before proposing or dispatching an action. */
+export function analyzeEligibleActions(flow, startIndex, completedSteps, scope, deps) {
+    let flowHasActions = false;
+    const operationTypes = new Map();
+    for (const [index, step] of flow.steps.entries()) {
+        if (step.kind !== 'operation' || step.operationRef.resolved !== true)
+            continue;
+        const connector = deps.connectors.resolve(step.operationRef);
+        const signature = connector?.signature(step.operationRef.operation);
+        if (signature === undefined) {
+            return {
+                ok: false,
+                error: {
+                    code: 'signature_drift',
+                    message: `cannot prove confirmation safety for operation "${step.operationRef.operation}"`,
+                    path: `steps.${step.id}`,
+                },
+            };
+        }
+        operationTypes.set(index, signature.type);
+        if (signature.type === 'action')
+            flowHasActions = true;
+    }
+    const eligibleIndexes = [];
+    for (let index = startIndex; index < flow.steps.length; index += 1) {
+        const step = flow.steps[index];
+        if (step?.kind !== 'operation' || operationTypes.get(index) !== 'action')
+            continue;
+        if (step.if !== undefined && conditionUsesIncompleteStep(step.if, completedSteps)) {
+            return {
+                ok: false,
+                error: {
+                    code: 'invalid_confirmation_flow',
+                    message: 'a later action condition depends on an unreviewed operation result',
+                    path: `steps.${step.id}.if`,
+                },
+            };
+        }
+        try {
+            if (step.if === undefined || evaluateCondition(step.if, scope, `steps.${step.id}.if`)) {
+                eligibleIndexes.push(index);
+            }
+        }
+        catch (error) {
+            if (error instanceof ExpressionEvalError)
+                return expressionFailure(error);
+            throw error;
+        }
+    }
+    return { ok: true, flowHasActions, eligibleIndexes };
+}
+function expressionFailure(error) {
+    return {
+        ok: false,
+        error: {
+            code: 'expression_error',
+            message: error.message,
+            ...(error.path === undefined ? {} : { path: error.path }),
+        },
+    };
+}
+function conditionUsesIncompleteStep(condition, completedSteps) {
+    if (condition.kind === 'truthy') {
+        return pathUsesIncompleteStep(condition.operand, completedSteps);
+    }
+    if (condition.op === 'not') {
+        return conditionUsesIncompleteStep(condition.operand, completedSteps);
+    }
+    if (condition.op === 'and' || condition.op === 'or') {
+        return (conditionUsesIncompleteStep(condition.left, completedSteps) ||
+            conditionUsesIncompleteStep(condition.right, completedSteps));
+    }
+    return (pathUsesIncompleteStep(condition.left, completedSteps) ||
+        pathUsesIncompleteStep(condition.right, completedSteps));
+}
+function pathUsesIncompleteStep(node, completedSteps) {
+    if (node.kind !== 'path' || node.root !== 'steps')
+        return false;
+    const first = node.segments?.[0];
+    return (typeof first !== 'object' ||
+        first === null ||
+        !('kind' in first) ||
+        first.kind !== 'prop' ||
+        !('name' in first) ||
+        typeof first.name !== 'string' ||
+        !Object.hasOwn(completedSteps, first.name));
+}
+//# sourceMappingURL=confirmation-analysis.js.map

package/node_modules/@noodle-borg/runtime/dist/confirmation-analysis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-analysis.js","sourceRoot":"","sources":["../src/confirmation-analysis.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAkB5E,MAAM,UAAU,wBAAwB,CACtC,IAAoB,EACpB,IAAqB;IAErB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC9B,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACjE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU;qBAC9B,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;oBAC3B,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACjC,IAAI,uBAAuB,EAAE,CAAC;wBAC5B,OAAO;4BACL,IAAI,EAAE,2BAA2B;4BACjC,OAAO,EAAE,qEAAqE;4BAC9E,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,EAAE;yBACzB,CAAC;oBACJ,CAAC;oBACD,uBAAuB,GAAG,IAAI,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,EAAE,CAAC;YAC5C,OAAO;gBACL,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,8EAA8E;gBACvF,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,EAAE;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,IAAoB,EACpB,aAAqB,EACrB,cAAiD,EACjD,KAAgB;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,aAAa,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW;YAAE,SAAS;QACzC,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,2BAA2B,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;YAClF,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,UAAkB,EAClB,cAAiD,EACjD,KAAgB,EAChB,IAAqB;IAErB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC5D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,KAAK,IAAI;YAAE,SAAS;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,mDAAmD,IAAI,CAAC,YAAY,CAAC,SAAS,GAAG;oBAC1F,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,EAAE;iBACzB;aACF,CAAC;QACJ,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,cAAc,GAAG,IAAI,CAAC;IACzD,CAAC;IAED,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,IAAI,KAAK,GAAG,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,EAAE,IAAI,KAAK,WAAW,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,SAAS;QACnF,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,2BAA2B,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;YAClF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,oEAAoE;oBAC7E,IAAI,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK;iBAC5B;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;gBACtF,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA0B;IAE1B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;SAC1D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,SAAmB,EACnB,cAAiD;IAEjD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,sBAAsB,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC3B,OAAO,2BAA2B,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,IAAI,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,CACL,2BAA2B,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC;YAC3D,2BAA2B,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,CACL,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC;QACtD,sBAAsB,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAA+F,EAC/F,cAAiD;IAEjD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,KAAK,MAAM;QACrB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,CAC3C,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/confirmation-continuation.d.ts

@@ -0,0 +1,6 @@
+import type { RuntimeArtifact } from '@noodle-borg/compiler';
+import type { ConfirmationActionReview, ConfirmationPreparationResult, PreparedToolContinuation, ToolPreparationContinuation } from './result.js';
+export declare function confirmationRequired(artifact: RuntimeArtifact, toolName: string, input: unknown, nextStepIndex: number, completedSteps: Record<string, unknown>, elicited: Record<string, unknown>, env: Record<string, string>, action?: ConfirmationActionReview): ConfirmationPreparationResult;
+export declare function sameArtifact(artifact: RuntimeArtifact, continuation: ToolPreparationContinuation | PreparedToolContinuation): boolean;
+export declare function artifactIdentity(artifact: RuntimeArtifact): ToolPreparationContinuation['artifact'];
+//# sourceMappingURL=confirmation-continuation.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/confirmation-continuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-continuation.d.ts","sourceRoot":"","sources":["../src/confirmation-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,2BAA2B,EAC5B,MAAM,aAAa,CAAC;AAErB,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,MAAM,CAAC,EAAE,wBAAwB,GAChC,6BAA6B,CAwC/B;AAED,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,2BAA2B,GAAG,wBAAwB,GACnE,OAAO,CAQT;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,eAAe,GACxB,2BAA2B,CAAC,UAAU,CAAC,CAOzC"}

package/node_modules/@noodle-borg/runtime/dist/confirmation-continuation.js

@@ -0,0 +1,56 @@
+export function confirmationRequired(artifact, toolName, input, nextStepIndex, completedSteps, elicited, env, action) {
+    const reviewedAction = action === undefined
+        ? undefined
+        : {
+            connectorId: action.connectorId,
+            connectorVersion: action.connectorVersion,
+            operation: action.operation,
+            ...(action.bindingId !== undefined ? { bindingId: action.bindingId } : {}),
+            ...(action.connectionId !== undefined ? { connectionId: action.connectionId } : {}),
+            ...(action.connectionConfigRevision !== undefined
+                ? { connectionConfigRevision: action.connectionConfigRevision }
+                : {}),
+            ...(action.profile !== undefined ? { profile: action.profile } : {}),
+            ...(action.presentation !== undefined
+                ? { presentation: structuredClone(action.presentation) }
+                : {}),
+            ...(action.requiredScopes !== undefined
+                ? { requiredScopes: [...action.requiredScopes] }
+                : {}),
+            ...(action.requiredAudience !== undefined
+                ? { requiredAudience: action.requiredAudience }
+                : {}),
+            arguments: action.arguments,
+        };
+    return {
+        status: 'confirmation_required',
+        review: { input, elicited: { ...elicited }, ...(action !== undefined ? { action } : {}) },
+        continuation: {
+            kind: 'prepared_confirmation',
+            version: 1,
+            artifact: artifactIdentity(artifact),
+            toolName,
+            input,
+            nextStepIndex,
+            completedSteps: { ...completedSteps },
+            env: { ...env },
+            ...(reviewedAction !== undefined ? { reviewedAction } : {}),
+        },
+    };
+}
+export function sameArtifact(artifact, continuation) {
+    const expected = artifactIdentity(artifact);
+    return (expected.manifestName === continuation.artifact.manifestName &&
+        expected.manifestVersion === continuation.artifact.manifestVersion &&
+        expected.serverName === continuation.artifact.serverName &&
+        expected.serverVersion === continuation.artifact.serverVersion);
+}
+export function artifactIdentity(artifact) {
+    return {
+        manifestName: artifact.source.manifestName,
+        manifestVersion: artifact.source.manifestVersion,
+        serverName: artifact.server.name,
+        serverVersion: artifact.server.version,
+    };
+}
+//# sourceMappingURL=confirmation-continuation.js.map

package/node_modules/@noodle-borg/runtime/dist/confirmation-continuation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-continuation.js","sourceRoot":"","sources":["../src/confirmation-continuation.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,oBAAoB,CAClC,QAAyB,EACzB,QAAgB,EAChB,KAAc,EACd,aAAqB,EACrB,cAAuC,EACvC,QAAiC,EACjC,GAA2B,EAC3B,MAAiC;IAEjC,MAAM,cAAc,GAClB,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,MAAM,CAAC,wBAAwB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE,wBAAwB,EAAE,MAAM,CAAC,wBAAwB,EAAE;gBAC/D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACR,OAAO;QACL,MAAM,EAAE,uBAAuB;QAC/B,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACzF,YAAY,EAAE;YACZ,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;YACpC,QAAQ;YACR,KAAK;YACL,aAAa;YACb,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE;YACrC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE;YACf,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,QAAyB,EACzB,YAAoE;IAEpE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,CACL,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,QAAQ,CAAC,YAAY;QAC5D,QAAQ,CAAC,eAAe,KAAK,YAAY,CAAC,QAAQ,CAAC,eAAe;QAClE,QAAQ,CAAC,UAAU,KAAK,YAAY,CAAC,QAAQ,CAAC,UAAU;QACxD,QAAQ,CAAC,aAAa,KAAK,YAAY,CAAC,QAAQ,CAAC,aAAa,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAyB;IAEzB,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;QAC1C,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe;QAChD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAChC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO;KACvC,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/confirmation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confirmation.d.ts","sourceRoot":"","sources":["../src/confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGjF,OAAO,EAEL,KAAK,eAAe,EAMrB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAEV,6BAA6B,EAC7B,mBAAmB,EAEnB,0BAA0B,EAE1B,wBAAwB,EACxB,2BAA2B,EAC5B,MAAM,aAAa,CAAC;AAMrB;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,6BAA6B,CAAC,CAuBxC;AAED,mGAAmG;AACnG,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,2BAA2B,EACzC,QAAQ,EAAE,mBAAmB,EAC7B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,6BAA6B,CAAC,CAoCxC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,wBAAwB,EACtC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,0BAA0B,CAAC,CAwErC"}
+{"version":3,"file":"confirmation.d.ts","sourceRoot":"","sources":["../src/confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAcjF,OAAO,EAEL,KAAK,eAAe,EAOrB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EACV,6BAA6B,EAC7B,mBAAmB,EAEnB,0BAA0B,EAE1B,wBAAwB,EACxB,2BAA2B,EAC5B,MAAM,aAAa,CAAC;AAMrB;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,6BAA6B,CAAC,CA0BxC;AAED,mGAAmG;AACnG,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,2BAA2B,EACzC,QAAQ,EAAE,mBAAmB,EAC7B,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,6BAA6B,CAAC,CAuCxC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,wBAAwB,EACtC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,0BAA0B,CAAC,CA0GrC"}