@noodleseed/one 0.92.0 → 0.94.0

package/node_modules/@noodle-borg/runtime/dist/customer-routing.js

@@ -0,0 +1,135 @@
+import { createHash } from 'node:crypto';
+import { normalizeCustomerEndpointPolicy, resolveCustomerEndpointBaseUrl, } from '@noodle-borg/compiler';
+/**
+ * Validate and freeze only the endpoint claims declared by one runtime artifact.
+ *
+ * Invalid claims deliberately become an indistinguishable unavailable state. This function never throws
+ * and never retains the caller-owned raw claim map.
+ */
+export function freezeCustomerRoutes(declarations, raw) {
+    const endpoints = Object.create(null);
+    let keys;
+    try {
+        keys = Object.keys(declarations ?? {}).sort();
+    }
+    catch {
+        return frozenRoutes(endpoints);
+    }
+    for (const key of keys) {
+        let policy;
+        try {
+            policy = frozenPolicy(normalizeCustomerEndpointPolicy(declarations?.[key]));
+            const value = raw !== undefined && Object.hasOwn(raw, key) ? raw[key] : undefined;
+            const resolved = resolveCustomerEndpointBaseUrl(value, policy);
+            endpoints[key] = Object.freeze(resolved.ok
+                ? { available: true, baseUrl: resolved.baseUrl, policy }
+                : { available: false, policy });
+        }
+        catch {
+            endpoints[key] = Object.freeze(policy === undefined ? { available: false } : { available: false, policy });
+        }
+    }
+    return frozenRoutes(endpoints);
+}
+function frozenRoutes(endpoints) {
+    return Object.freeze({
+        endpoints: Object.freeze(endpoints),
+    });
+}
+/**
+ * Resolve the connector-specific safe route from an immutable request snapshot.
+ *
+ * `undefined` means the operation is static; `null` means its declared customer route is unavailable.
+ */
+export function resolveCustomerConnectorRoute(routes, ref) {
+    const key = ref.customerEndpoint;
+    if (key === undefined)
+        return undefined;
+    const route = routes?.endpoints[key];
+    if (route?.available !== true)
+        return null;
+    const binding = resolveCustomerRouteBinding(routes, {
+        connectorId: ref.connectorId,
+        connectorVersion: ref.connectorVersion,
+        key,
+    });
+    if (binding === null)
+        return null;
+    return Object.freeze({
+        ...binding,
+        baseUrl: route.baseUrl,
+    });
+}
+/** Fail closed when any customer endpoint reachable from one fulfilment is unavailable. */
+export function preflightFulfilmentCustomerRoutes(fulfilment, routes) {
+    const refs = fulfilment.kind === 'operation'
+        ? [fulfilment.operationRef]
+        : fulfilment.steps.flatMap((step) => (step.kind === 'operation' ? [step.operationRef] : []));
+    for (const ref of refs) {
+        if (ref.resolved === true && !operationCustomerRoutesAvailable(ref, routes)) {
+            return unavailableCustomerRouteError();
+        }
+    }
+    return null;
+}
+/** Check one operation and every connector-declared nested endpoint before dispatch. */
+export function preflightOperationCustomerRoutes(ref, routes) {
+    return operationCustomerRoutesAvailable(ref, routes) ? null : unavailableCustomerRouteError();
+}
+function operationCustomerRoutesAvailable(ref, routes) {
+    try {
+        const keys = new Set(ref.customerEndpointDependencies ?? []);
+        if (ref.customerEndpoint !== undefined)
+            keys.add(ref.customerEndpoint);
+        for (const key of keys) {
+            if (routes?.endpoints[key]?.available !== true)
+                return false;
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function unavailableCustomerRouteError() {
+    return {
+        code: 'connector_route_unavailable',
+        message: 'Customer connector route is unavailable.',
+    };
+}
+/** Resolve only the URL-blind route cache/probe binding for one connector and endpoint. */
+export function resolveCustomerRouteBinding(routes, requirement) {
+    const route = routes?.endpoints[requirement.key];
+    if (route?.available !== true)
+        return null;
+    return Object.freeze({
+        key: requirement.key,
+        fingerprint: routeFingerprint(requirement, requirement.key, route.baseUrl, route.policy),
+    });
+}
+function frozenPolicy(policy) {
+    if ('allowedHttpsOrigins' in policy) {
+        return Object.freeze({
+            allowedHttpsOrigins: Object.freeze([...policy.allowedHttpsOrigins]),
+        });
+    }
+    return Object.freeze({
+        allowedHttpsHostSuffixes: Object.freeze([...policy.allowedHttpsHostSuffixes]),
+    });
+}
+function routeFingerprint(ref, key, baseUrl, policy) {
+    const policyKind = 'allowedHttpsOrigins' in policy ? 'allowedHttpsOrigins' : 'allowedHttpsHostSuffixes';
+    const values = 'allowedHttpsOrigins' in policy ? policy.allowedHttpsOrigins : policy.allowedHttpsHostSuffixes;
+    const payload = [
+        'customer-route',
+        1,
+        ref.connectorId,
+        ref.connectorVersion,
+        key,
+        baseUrl,
+        policyKind,
+        [...values].sort(),
+    ];
+    return `sha256:${createHash('sha256').update(JSON.stringify(payload)).digest('hex')}`;
+}
+//# sourceMappingURL=customer-routing.js.map

package/node_modules/@noodle-borg/runtime/dist/customer-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-routing.js","sourceRoot":"","sources":["../src/customer-routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAGL,+BAA+B,EAE/B,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAiC/B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAA0E,EAC1E,GAAiD;IAEjD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAwC,CAAC;IAC7E,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,+BAA+B,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,QAAQ,GAAG,8BAA8B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/D,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAC5B,QAAQ,CAAC,EAAE;gBACT,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE;gBACxD,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CACjC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAC5B,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,SAA8C;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAwC,EACxC,GAAyB;IAEzB,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,2BAA2B,CAAC,MAAM,EAAE;QAClD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,GAAG;KACJ,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,OAAO;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iCAAiC,CAC/C,UAA8B,EAC9B,MAAwC;IAExC,MAAM,IAAI,GACR,UAAU,CAAC,IAAI,KAAK,WAAW;QAC7B,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;QAC3B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,gCAAgC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5E,OAAO,6BAA6B,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gCAAgC,CAC9C,GAAyB,EACzB,MAAwC;IAExC,OAAO,gCAAgC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,gCAAgC,CACvC,GAAyB,EACzB,MAAwC;IAExC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,SAAS,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,0CAA0C;KACpD,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,2BAA2B,CACzC,MAAwC,EACxC,WAAqC;IAErC,MAAM,KAAK,GAAG,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,WAAW,EAAE,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;KACzF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,MAA8B;IAClD,IAAI,qBAAqB,IAAI,MAAM,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAmE,EACnE,GAAW,EACX,OAAe,EACf,MAA8B;IAE9B,MAAM,UAAU,GACd,qBAAqB,IAAI,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACvF,MAAM,MAAM,GACV,qBAAqB,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC;IACjG,MAAM,OAAO,GAAG;QACd,gBAAgB;QAChB,CAAC;QACD,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,gBAAgB;QACpB,GAAG;QACH,OAAO;QACP,UAAU;QACV,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE;KACnB,CAAC;IACF,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxF,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/execute.d.ts

@@ -1,11 +1,13 @@
-import { type ArtifactFulfilment, type ExprMap, type JsonSchema, type OperationSignature, type ResolvedOperationRef, type RuntimeArtifact } from '@noodle-borg/compiler';
-import { type CredentialBroker } from './broker/types.js';
-import { type CallerIdentity, type ConnectorCallHost, type ConnectorRegistry, type ExecutionTraceSink } from './connector/types.js';
+import type { ArtifactFulfilment, RuntimeArtifact } from '@noodle-borg/compiler';
+import type { CredentialBroker } from './broker/types.js';
+import type { CallerIdentity, ConnectorRegistry, ExecutionTraceSink } from './connector/types.js';
+import type { FrozenCustomerRoutes } from './customer-routing.js';
 import { type EvalScope } from './eval/evaluate.js';
 import type { InvocationContext } from './invocation-context.js';
 import type { PolicyGate } from './policy/types.js';
-import type { ConfirmationActionReview, ExecutionError, ExecutionResult, PreparedOperationAction } from './result.js';
+import type { ExecutionResult } from './result.js';
 import { type ToolDispatchHook } from './tool-dispatch.js';
+export { createHost, evalExprMap, prepareOperationAction, runOperation, validateAgainstSchema, validateAgainstSchemaWithDefaults, } from './operation-execution.js';
 /**
  * The collaborators the runtime needs to fulfil a tool call. Note there is deliberately no inbound
  * token here: the execution plane never sees or forwards an MCP/OAuth bearer token — downstream
@@ -18,6 +20,10 @@ export interface ExecuteDeps {
     readonly policy?: PolicyGate;
     readonly env?: Record<string, string> | (() => Promise<Record<string, string>>);
     readonly caller?: CallerIdentity;
+    /** Verified customer IdP issuer, kept outside caller/expression scope for credential isolation. */
+    readonly customerIssuer?: string;
+    /** Request-local validated customer connector routes, kept separate from caller/expression scope. */
+    readonly customerRoutes?: FrozenCustomerRoutes;
     readonly tenantId?: string;
     readonly deploymentId?: string;
     /** Immutable facts resolved once for this invocation and exposed only through `${context...}`. */
@@ -68,49 +74,4 @@ export declare function runFulfilment(fulfilment: ArtifactFulfilment, input: unk
 export declare function scopeFor(input: unknown, steps: Record<string, unknown>, env: Record<string, string>, deps: ExecuteDeps): EvalScope;
 /** @internal Shared with the suspension-aware flow executor. */
 export declare function resolveEnv(deps: ExecuteDeps): Promise<Record<string, string>>;
-/**
- * Run one connector operation end to end: resolve the connector, verify the signature has not
- * drifted, gate with policy, evaluate + validate arguments, mint a downstream credential, invoke,
- * redact, and validate the output. Shared by single-operation fulfilment and flow operation steps.
- */
-/** @internal Shared with the suspension-aware flow executor. */
-export declare function runOperation(ref: ResolvedOperationRef | {
-    resolved: false;
-}, argsAst: ExprMap, scope: EvalScope, toolName: string, deps: ExecuteDeps, policy: PolicyGate, host: ConnectorCallHost, env: Record<string, string>, argsPath: string, outputPath: string, reviewedAction?: PreparedOperationAction, beforeDispatch?: ToolDispatchHook): Promise<ExecutionResult>;
-type PreparedOperationActionResult = {
-    readonly ok: true;
-    readonly action: ConfirmationActionReview;
-    readonly signature: OperationSignature;
-} | {
-    readonly ok: false;
-    readonly error: ExecutionError;
-};
-/** Resolve and validate an operation without policy, credentials, connector I/O, or side effects. */
-export declare function prepareOperationAction(ref: ResolvedOperationRef | {
-    resolved: false;
-}, argsAst: ExprMap, scope: EvalScope, deps: ExecuteDeps, argsPath: string, additionalOperationCount?: number): PreparedOperationActionResult;
-/** @internal Shared with the suspension-aware flow executor. */
-export declare function createHost(toolName: string, deps: ExecuteDeps, policy: PolicyGate, env: Record<string, string>, callStack: string[], beforeDispatch?: ToolDispatchHook): ConnectorCallHost;
-/** Internal control-flow error used to carry normalized runtime failures into host-call callbacks. */
-export declare class HostCallError extends Error {
-    readonly code: ExecutionError['code'];
-    readonly path: string | undefined;
-    constructor(code: ExecutionError['code'], message: string, path?: string);
-}
-/** Evaluate every value in an expression map; omit any key that resolves to `undefined`. */
-/** @internal Shared with the suspension-aware flow executor. */
-export declare function evalExprMap(map: ExprMap, scope: EvalScope, prefix: string): Record<string, unknown>;
-/** Validate operation I/O with the same complete JSON Schema contract advertised to clients. */
-/** @internal Shared with the ambient-context executor; not exported from the package barrel. */
-export declare function validateAgainstSchema(value: unknown, schema: JsonSchema, pathPrefix: string, code: 'arg_invalid' | 'output_invalid', noun: string): ExecutionError | null;
-/** Validate accepted interactive input and apply schema defaults on a defensive copy. */
-/** @internal Shared by both confirmation and non-confirmation continuation kernels. */
-export declare function validateAgainstSchemaWithDefaults(value: unknown, schema: JsonSchema, pathPrefix: string, code: 'arg_invalid' | 'output_invalid', noun: string): {
-    readonly ok: true;
-    readonly value: unknown;
-} | {
-    readonly ok: false;
-    readonly error: ExecutionError;
-};
-export {};
 //# sourceMappingURL=execute.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,OAAO,EACZ,KAAK,UAAU,EAEf,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,gBAAgB,EAA8B,MAAM,mBAAmB,CAAC;AACtF,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,iBAAiB,EAEtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,SAAS,EAIf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAiB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EACV,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAK5B;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,kGAAkG;IAClG,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;;GAKG;AACH,gGAAgG;AAChG,wBAAsB,aAAa,CACjC,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,cAAc,CAAC,EAAE,gBAAgB,GAChC,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAkED,gEAAgE;AAChE,wBAAgB,QAAQ,CACtB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,EAAE,WAAW,GAChB,SAAS,CAQX;AAED,gEAAgE;AAChE,wBAAsB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAGnF;AAED;;;;GAIG;AACH,gEAAgE;AAChE,wBAAsB,YAAY,CAChC,GAAG,EAAE,oBAAoB,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,EAC/C,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,uBAAuB,EACxC,cAAc,CAAC,EAAE,gBAAgB,GAChC,OAAO,CAAC,eAAe,CAAC,CAyB1B;AAED,KAAK,6BAA6B,GAC9B;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;CACxC,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3D,qGAAqG;AACrG,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,oBAAoB,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,EAC/C,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,wBAAwB,SAAI,GAC3B,6BAA6B,CAyD/B;AAkND,gEAAgE;AAChE,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,SAAS,EAAE,MAAM,EAAE,EACnB,cAAc,CAAC,EAAE,gBAAgB,GAChC,iBAAiB,CAyCnB;AAYD,sGAAsG;AACtG,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEtB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAMzE;AAuBD,4FAA4F;AAC5F,gEAAgE;AAChE,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,gGAAgG;AAChG,gGAAgG;AAChG,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,aAAa,GAAG,gBAAgB,EACtC,IAAI,EAAE,MAAM,GACX,cAAc,GAAG,IAAI,CAQvB;AAED,yFAAyF;AACzF,uFAAuF;AACvF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,aAAa,GAAG,gBAAgB,EACtC,IAAI,EAAE,MAAM,GAEV;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAYzD"}
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,KAAK,SAAS,EAA0C,MAAM,oBAAoB,CAAC;AAC5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,UAAU,EACV,WAAW,EACX,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,iCAAiC,GAClC,MAAM,0BAA0B,CAAC;AAKlC;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC,mGAAmG;IACnG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,qGAAqG;IACrG,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,kGAAkG;IAClG,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;;GAKG;AACH,gGAAgG;AAChG,wBAAsB,aAAa,CACjC,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,cAAc,CAAC,EAAE,gBAAgB,GAChC,OAAO,CAAC,eAAe,CAAC,CAkC1B;AAkED,gEAAgE;AAChE,wBAAgB,QAAQ,CACtB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,EAAE,WAAW,GAChB,SAAS,CAQX;AAED,gEAAgE;AAChE,wBAAsB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAGnF"}

package/node_modules/@noodle-borg/runtime/dist/execute.js

@@ -1,10 +1,11 @@
-import { computeSignatureHash, validateJsonSchema, validateJsonSchemaWithDefaults, } from '@noodle-borg/compiler';
-import { CredentialUnavailableError } from './broker/types.js';
-import { ConnectorInvocationError, } from './connector/types.js';
-import { ExpressionEvalError, evaluateCondition, evaluateValue, } from './eval/evaluate.js';
+import { preflightFulfilmentSignatures } from './connector-snapshot.js';
+import { preflightFulfilmentCustomerRoutes } from './customer-routing.js';
+import { ExpressionEvalError, evaluateCondition } from './eval/evaluate.js';
+import { createHost, evalExprMap, fail, runOperation } from './operation-execution.js';
 import { AllowAllPolicy } from './policy/allow-all.js';
 import { attachResultMeta, splitResultMeta } from './result-meta.js';
-import { admitSuccessfulToolResult, admitToolDispatch, latchToolDispatchAdmission, } from './tool-dispatch.js';
+import { admitSuccessfulToolResult, latchToolDispatchAdmission, } from './tool-dispatch.js';
+export { createHost, evalExprMap, prepareOperationAction, runOperation, validateAgainstSchema, validateAgainstSchemaWithDefaults, } from './operation-execution.js';
 /**
  * Execute a tool call against a resolved runtime artifact.
  *
@@ -61,6 +62,14 @@ export async function executePrompt(artifact, promptName, args, deps) {
  */
 /** @internal Shared with the ambient-context executor; not exported from the package barrel. */
 export async function runFulfilment(fulfilment, input, label, deps, beforeDispatch) {
+    if (fulfilment.kind === 'flow' && !fulfilment.steps.some((step) => step.kind === 'elicit')) {
+        const signatureError = preflightFulfilmentSignatures(fulfilment, deps.connectors);
+        if (signatureError !== null)
+            return { ok: false, error: signatureError };
+        const routeError = preflightFulfilmentCustomerRoutes(fulfilment, deps.customerRoutes);
+        if (routeError !== null)
+            return { ok: false, error: routeError };
+    }
     const policy = deps.policy ?? new AllowAllPolicy();
     const env = await resolveEnv(deps);
     const callStack = [];
@@ -135,362 +144,4 @@ export async function resolveEnv(deps) {
         return {};
     return typeof deps.env === 'function' ? deps.env() : deps.env;
 }
-/**
- * Run one connector operation end to end: resolve the connector, verify the signature has not
- * drifted, gate with policy, evaluate + validate arguments, mint a downstream credential, invoke,
- * redact, and validate the output. Shared by single-operation fulfilment and flow operation steps.
- */
-/** @internal Shared with the suspension-aware flow executor. */
-export async function runOperation(ref, argsAst, scope, toolName, deps, policy, host, env, argsPath, outputPath, reviewedAction, beforeDispatch) {
-    const prepared = prepareOperationAction(ref, argsAst, scope, deps, argsPath);
-    if (!prepared.ok)
-        return { ok: false, error: prepared.error };
-    if (reviewedAction !== undefined && !samePreparedAction(prepared.action, reviewedAction)) {
-        return fail('invalid_continuation', 'prepared connector arguments no longer match the reviewed action', argsPath);
-    }
-    if (ref.resolved !== true)
-        return fail('shape_only_artifact', 'operation reference is unresolved');
-    return invokeOperation(ref, prepared.action.arguments, prepared.signature, toolName, deps, policy, host, env, argsPath, outputPath, beforeDispatch);
-}
-/** Resolve and validate an operation without policy, credentials, connector I/O, or side effects. */
-export function prepareOperationAction(ref, argsAst, scope, deps, argsPath, additionalOperationCount = 0) {
-    if (ref.resolved !== true) {
-        return {
-            ok: false,
-            error: { code: 'shape_only_artifact', message: 'operation reference is unresolved' },
-        };
-    }
-    const connector = deps.connectors.resolve(ref);
-    if (!connector) {
-        return {
-            ok: false,
-            error: {
-                code: 'connector_unavailable',
-                message: `no connector for ${ref.connectorId}@${ref.connectorVersion}`,
-            },
-        };
-    }
-    const signature = connector.signature(ref.operation);
-    const drift = checkSignature(ref, signature);
-    if (drift)
-        return { ok: false, error: drift };
-    const exactSignature = signature;
-    let evaluated;
-    try {
-        evaluated = evalExprMap(argsAst, scope, argsPath);
-    }
-    catch (error) {
-        if (error instanceof ExpressionEvalError) {
-            return {
-                ok: false,
-                error: error.path === undefined
-                    ? { code: 'expression_error', message: error.message }
-                    : { code: 'expression_error', message: error.message, path: error.path },
-            };
-        }
-        throw error;
-    }
-    const argError = validateAgainstSchema(evaluated, exactSignature.input, argsPath, 'arg_invalid', 'argument');
-    if (argError)
-        return { ok: false, error: argError };
-    return {
-        ok: true,
-        signature: exactSignature,
-        action: {
-            connectorId: ref.connectorId,
-            connectorVersion: ref.connectorVersion,
-            operation: ref.operation,
-            ...(ref.credentialBinding ?? {}),
-            arguments: evaluated,
-            inputSchema: exactSignature.input,
-            additionalOperationCount,
-        },
-    };
-}
-function samePreparedAction(prepared, reviewed) {
-    if (prepared.connectorId !== reviewed.connectorId ||
-        prepared.connectorVersion !== reviewed.connectorVersion ||
-        prepared.operation !== reviewed.operation) {
-        return false;
-    }
-    for (const key of [
-        'bindingId',
-        'connectionId',
-        'connectionConfigRevision',
-        'profile',
-        'requiredAudience',
-    ]) {
-        if (prepared[key] !== reviewed[key])
-            return false;
-    }
-    if (!sameJsonValue(prepared.requiredScopes, reviewed.requiredScopes))
-        return false;
-    if (!sameJsonValue(prepared.presentation, reviewed.presentation))
-        return false;
-    try {
-        return sameJsonValue(prepared.arguments, reviewed.arguments);
-    }
-    catch {
-        return false;
-    }
-}
-/** Compare persisted JSON values structurally; PostgreSQL JSONB does not preserve object key order. */
-function sameJsonValue(left, right) {
-    if (Object.is(left, right))
-        return true;
-    if (left === null || right === null || typeof left !== 'object' || typeof right !== 'object') {
-        return false;
-    }
-    if (Array.isArray(left) || Array.isArray(right)) {
-        return (Array.isArray(left) &&
-            Array.isArray(right) &&
-            left.length === right.length &&
-            left.every((value, index) => sameJsonValue(value, right[index])));
-    }
-    const leftRecord = left;
-    const rightRecord = right;
-    const leftKeys = Object.keys(leftRecord);
-    const rightKeys = Object.keys(rightRecord);
-    return (leftKeys.length === rightKeys.length &&
-        leftKeys.every((key) => Object.hasOwn(rightRecord, key) && sameJsonValue(leftRecord[key], rightRecord[key])));
-}
-/**
- * Invoke a resolved connector operation with already-evaluated arguments. This is the shared path for
- * manifest operation steps and host-mediated sandbox calls.
- */
-async function invokeOperation(ref, args, sig, toolName, deps, policy, host, env, argsPath, outputPath, beforeDispatch) {
-    const callKey = operationKey(ref);
-    if (hostCallStack(host).includes(callKey)) {
-        return fail('circular_call_dependency', `circular connector operation call detected at ${callKey}`, outputPath);
-    }
-    hostCallStack(host).push(callKey);
-    try {
-        const connector = deps.connectors.resolve(ref);
-        if (!connector) {
-            return fail('connector_unavailable', `no connector for ${ref.connectorId}@${ref.connectorVersion}`);
-        }
-        const context = {
-            toolName,
-            connectorId: ref.connectorId,
-            connectorVersion: ref.connectorVersion,
-            operation: ref.operation,
-            ...(ref.credentialBinding ?? {}),
-            ...(deps.tenantId !== undefined ? { tenantId: deps.tenantId } : {}),
-            ...(deps.deploymentId !== undefined ? { deploymentId: deps.deploymentId } : {}),
-        };
-        let decision;
-        try {
-            decision = await policy.before(context);
-        }
-        catch {
-            return fail('policy_error', 'policy before hook failed');
-        }
-        if (!decision.allow)
-            return fail('policy_denied', decision.reason);
-        let credential;
-        try {
-            credential = await deps.broker.getCredential({
-                connectorId: ref.connectorId,
-                connectorVersion: ref.connectorVersion,
-                operation: ref.operation,
-                ...(ref.credentialBinding ?? {}),
-                ...(deps.tenantId !== undefined ? { tenantId: deps.tenantId } : {}),
-                ...(deps.deploymentId !== undefined ? { deploymentId: deps.deploymentId } : {}),
-                ...(deps.caller !== undefined ? { caller: deps.caller } : {}),
-            });
-        }
-        catch (error) {
-            if (error instanceof CredentialUnavailableError) {
-                return fail('credential_unavailable', `credential unavailable for operation "${ref.operation}"`, {
-                    reason: error.reason,
-                    ...(error.fix === undefined ? {} : { fix: error.fix }),
-                    ...(error.next === undefined ? {} : { next: error.next }),
-                });
-            }
-            return fail('credential_unavailable', `credential unavailable for operation "${ref.operation}"`);
-        }
-        let connectorArgs;
-        try {
-            connectorArgs = structuredClone(args);
-        }
-        catch {
-            return fail('arg_invalid', 'connector arguments could not be safely isolated', argsPath);
-        }
-        const admissionError = await admitToolDispatch(beforeDispatch, { toolName });
-        if (admissionError !== null)
-            return { ok: false, error: admissionError };
-        let output;
-        try {
-            output = await connector.invoke({
-                operation: ref.operation,
-                args: connectorArgs,
-                env,
-                credential,
-                ...(ref.credentialBinding === undefined
-                    ? {}
-                    : { credentialPresentation: ref.credentialBinding.presentation }),
-                ...(deps.caller !== undefined ? { caller: deps.caller } : {}),
-                host,
-            });
-        }
-        catch (error) {
-            if (error instanceof HostCallError) {
-                return fail(error.code, error.message, error.path);
-            }
-            if (error instanceof ConnectorInvocationError) {
-                deps.trace?.record({
-                    kind: 'connector',
-                    connectorId: ref.connectorId,
-                    connectorVersion: ref.connectorVersion,
-                    operation: ref.operation,
-                    ...(error.status !== undefined ? { status: error.status } : {}),
-                    ...(error.category !== undefined ? { category: error.category } : {}),
-                    ...(error.attempts !== undefined ? { attempts: error.attempts } : {}),
-                    ...(error.retryable !== undefined ? { retryable: error.retryable } : {}),
-                    ...(error.retryAfterMs !== undefined ? { retryAfterMs: error.retryAfterMs } : {}),
-                    ...(error.responseExcerpt !== undefined
-                        ? { responseExcerpt: error.responseExcerpt }
-                        : {}),
-                });
-            }
-            // Normalize connector failures; never surface backend internals or credentials.
-            return fail('connector_error', `connector failed for operation "${ref.operation}"`);
-        }
-        let redacted;
-        try {
-            redacted = await policy.after(context, output);
-        }
-        catch {
-            return fail('policy_error', 'policy after hook failed');
-        }
-        // Projection metadata is a reserved runtime envelope, not part of the connector's visible output
-        // contract. Validate the visible value deeply while preserving policy-processed metadata for the
-        // flow/result projection channel.
-        const outputError = validateAgainstSchema(splitResultMeta(redacted).visible, sig.output, outputPath, 'output_invalid', 'output field');
-        if (outputError)
-            return { ok: false, error: outputError };
-        return { ok: true, output: redacted };
-    }
-    finally {
-        hostCallStack(host).pop();
-    }
-}
-/** @internal Shared with the suspension-aware flow executor. */
-export function createHost(toolName, deps, policy, env, callStack, beforeDispatch) {
-    const host = {
-        [CALL_STACK]: callStack,
-        async callOperation(ref, args, path) {
-            const connector = deps.connectors.resolve(ref);
-            if (!connector)
-                throw new HostCallError('connector_unavailable', 'connector unavailable');
-            const signature = connector.signature(ref.operation);
-            const drift = checkSignature(ref, signature);
-            if (drift)
-                throw new HostCallError(drift.code, drift.message, drift.path);
-            const sig = signature;
-            const argError = validateAgainstSchema(args, sig.input, `${path}.args`, 'arg_invalid', 'argument');
-            if (argError)
-                throw new HostCallError(argError.code, argError.message, argError.path);
-            const result = await invokeOperation(ref, args, sig, toolName, deps, policy, this, env, `${path}.args`, `${path}.output`, beforeDispatch);
-            if (!result.ok) {
-                throw new HostCallError(result.error.code, result.error.message, result.error.path);
-            }
-            return result.output;
-        },
-    };
-    return host;
-}
-const CALL_STACK = Symbol('noodle.connectorCallStack');
-function operationKey(ref) {
-    return `${ref.connectorId}@${ref.connectorVersion}.${ref.operation}`;
-}
-function hostCallStack(host) {
-    return host[CALL_STACK];
-}
-/** Internal control-flow error used to carry normalized runtime failures into host-call callbacks. */
-export class HostCallError extends Error {
-    code;
-    path;
-    constructor(code, message, path) {
-        super(message);
-        this.name = 'HostCallError';
-        this.code = code;
-        this.path = path;
-    }
-}
-/** Verify the connector's live signature matches the hash the artifact was compiled against. */
-function checkSignature(ref, signature) {
-    if (!signature) {
-        return {
-            code: 'signature_drift',
-            message: `connector has no operation "${ref.operation}"`,
-        };
-    }
-    const actual = computeSignatureHash(ref.operation, signature);
-    if (actual !== ref.signatureHash) {
-        return {
-            code: 'signature_drift',
-            message: `operation "${ref.operation}" signature has drifted from the compiled artifact`,
-        };
-    }
-    return null;
-}
-/** Evaluate every value in an expression map; omit any key that resolves to `undefined`. */
-/** @internal Shared with the suspension-aware flow executor. */
-export function evalExprMap(map, scope, prefix) {
-    const out = {};
-    for (const [key, node] of Object.entries(map)) {
-        const value = evaluateValue(node, scope, `${prefix}.${key}`);
-        if (value !== undefined)
-            out[key] = value;
-    }
-    return out;
-}
-/** Validate operation I/O with the same complete JSON Schema contract advertised to clients. */
-/** @internal Shared with the ambient-context executor; not exported from the package barrel. */
-export function validateAgainstSchema(value, schema, pathPrefix, code, noun) {
-    const issue = validateJsonSchema(schema, value)[0];
-    if (issue === undefined)
-        return null;
-    return {
-        code,
-        path: issue.path.length === 0 ? pathPrefix : `${pathPrefix}.${issue.path}`,
-        message: runtimeValidationMessage(noun, issue),
-    };
-}
-/** Validate accepted interactive input and apply schema defaults on a defensive copy. */
-/** @internal Shared by both confirmation and non-confirmation continuation kernels. */
-export function validateAgainstSchemaWithDefaults(value, schema, pathPrefix, code, noun) {
-    const validated = validateJsonSchemaWithDefaults(schema, value);
-    const issue = validated.issues[0];
-    if (issue === undefined)
-        return { ok: true, value: validated.value };
-    return {
-        ok: false,
-        error: {
-            code,
-            path: issue.path.length === 0 ? pathPrefix : `${pathPrefix}.${issue.path}`,
-            message: runtimeValidationMessage(noun, issue),
-        },
-    };
-}
-function runtimeValidationMessage(noun, issue) {
-    const field = issue.path.split('.').at(-1);
-    if (issue.keyword === 'required' && field !== undefined) {
-        return `missing required ${noun} "${field}"`;
-    }
-    if (issue.keyword === 'type' && issue.path.length === 0) {
-        return `${noun} container must be a non-null object`;
-    }
-    if (issue.keyword === 'type' && field !== undefined) {
-        return `${noun} "${field}" ${issue.message.replace(/^expected /, 'expects ')}`;
-    }
-    return `${noun}${field === undefined ? '' : ` "${field}"`} ${issue.message}`;
-}
-function fail(code, message, pathOrDetails) {
-    if (typeof pathOrDetails === 'string') {
-        return { ok: false, error: { code, message, path: pathOrDetails } };
-    }
-    return { ok: false, error: { code, message, ...pathOrDetails } };
-}
 //# sourceMappingURL=execute.js.map