@noodleseed/one 0.93.0 → 0.95.0

package/node_modules/@noodle-borg/runtime/dist/operation-credential.js

@@ -0,0 +1,58 @@
+import { credentialUnavailableErrorSnapshot } from './broker/types.js';
+/** Acquire a connector credential using only the URL-blind customer route binding. */
+export async function acquireOperationCredential(ref, deps, customerRoute) {
+    try {
+        const credential = await deps.broker.getCredential({
+            connectorId: ref.connectorId,
+            connectorVersion: ref.connectorVersion,
+            operation: ref.operation,
+            ...(ref.credentialBinding ?? {}),
+            ...(deps.tenantId !== undefined ? { tenantId: deps.tenantId } : {}),
+            ...(deps.deploymentId !== undefined ? { deploymentId: deps.deploymentId } : {}),
+            ...(deps.caller !== undefined ? { caller: deps.caller } : {}),
+            ...(deps.customerIssuer !== undefined ? { customerIssuer: deps.customerIssuer } : {}),
+            ...(customerRoute === undefined
+                ? {}
+                : {
+                    route: {
+                        key: customerRoute.key,
+                        fingerprint: customerRoute.fingerprint,
+                    },
+                }),
+        });
+        return { ok: true, credential };
+    }
+    catch (error) {
+        const message = `credential unavailable for operation "${ref.operation}"`;
+        const snapshot = credentialUnavailableErrorSnapshot(error);
+        if (snapshot?.reason === 'connector_route_unavailable') {
+            return {
+                ok: false,
+                error: {
+                    code: 'connector_route_unavailable',
+                    message: 'Customer connector route is unavailable.',
+                },
+            };
+        }
+        if (snapshot !== undefined) {
+            return {
+                ok: false,
+                error: {
+                    code: 'credential_unavailable',
+                    message,
+                    reason: snapshot.reason,
+                    ...(snapshot.fix === undefined ? {} : { fix: snapshot.fix }),
+                    ...(snapshot.next === undefined ? {} : { next: snapshot.next }),
+                },
+            };
+        }
+        return {
+            ok: false,
+            error: {
+                code: 'credential_unavailable',
+                message,
+            },
+        };
+    }
+}
+//# sourceMappingURL=operation-credential.js.map

package/node_modules/@noodle-borg/runtime/dist/operation-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-credential.js","sourceRoot":"","sources":["../src/operation-credential.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AAY9F,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAyB,EACzB,IAAiB,EACjB,aAAiD;IAEjD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACjD,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,aAAa,KAAK,SAAS;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,GAAG,EAAE,aAAa,CAAC,GAAG;wBACtB,WAAW,EAAE,aAAa,CAAC,WAAW;qBACvC;iBACF,CAAC;SACP,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,yCAAyC,GAAG,CAAC,SAAS,GAAG,CAAC;QAC1E,MAAM,QAAQ,GAAG,kCAAkC,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,MAAM,KAAK,6BAA6B,EAAE,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,0CAA0C;iBACpD;aACF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,OAAO;oBACP,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;oBAC5D,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;iBAChE;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,OAAO;aACR;SACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/operation-execution.d.ts

@@ -0,0 +1,34 @@
+import type { ExprMap, OperationSignature, ResolvedOperationRef } from '@noodle-borg/compiler';
+import { type ConnectorCallHost } from './connector/types.js';
+import { type EvalScope } from './eval/evaluate.js';
+import type { ExecuteDeps } from './execute.js';
+import type { PolicyGate } from './policy/types.js';
+import type { ConfirmationActionReview, ExecutionError, ExecutionResult, PreparedOperationAction } from './result.js';
+import { type ToolDispatchHook } from './tool-dispatch.js';
+/**
+ * Run one connector operation end to end: resolve the connector, verify the signature has not
+ * drifted, gate with policy, evaluate + validate arguments, mint a downstream credential, invoke,
+ * redact, and validate the output. Shared by single-operation fulfilment and flow operation steps.
+ */
+/** @internal Shared with the suspension-aware flow executor. */
+export declare function runOperation(ref: ResolvedOperationRef | {
+    resolved: false;
+}, argsAst: ExprMap, scope: EvalScope, toolName: string, deps: ExecuteDeps, policy: PolicyGate, host: ConnectorCallHost, env: Record<string, string>, argsPath: string, outputPath: string, reviewedAction?: PreparedOperationAction, beforeDispatch?: ToolDispatchHook): Promise<ExecutionResult>;
+type PreparedOperationActionResult = {
+    readonly ok: true;
+    readonly action: PreparedOperationAction;
+    readonly review: ConfirmationActionReview;
+    readonly signature: OperationSignature;
+} | {
+    readonly ok: false;
+    readonly error: ExecutionError;
+};
+/** Resolve and validate an operation without policy, credentials, connector I/O, or side effects. */
+export declare function prepareOperationAction(ref: ResolvedOperationRef | {
+    resolved: false;
+}, argsAst: ExprMap, scope: EvalScope, deps: ExecuteDeps, argsPath: string, additionalOperationCount?: number): PreparedOperationActionResult;
+/** @internal Shared with the suspension-aware flow executor. */
+export declare function createHost(toolName: string, deps: ExecuteDeps, policy: PolicyGate, env: Record<string, string>, callStack: string[], beforeDispatch?: ToolDispatchHook): ConnectorCallHost;
+export declare function fail(code: ExecutionError['code'], message: string, pathOrDetails?: string | Pick<ExecutionError, 'reason' | 'fix' | 'next'>): ExecutionResult;
+export {};
+//# sourceMappingURL=operation-execution.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/operation-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-execution.d.ts","sourceRoot":"","sources":["../src/operation-execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE/F,OAAO,EAAE,KAAK,iBAAiB,EAA8B,MAAM,sBAAsB,CAAC;AAM1F,OAAO,EAAE,KAAK,SAAS,EAAuB,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAGhD,OAAO,KAAK,EAAiB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,KAAK,EACV,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE9E;;;;GAIG;AACH,gEAAgE;AAChE,wBAAsB,YAAY,CAChC,GAAG,EAAE,oBAAoB,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,EAC/C,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,uBAAuB,EACxC,cAAc,CAAC,EAAE,gBAAgB,GAChC,OAAO,CAAC,eAAe,CAAC,CAqC1B;AAED,KAAK,6BAA6B,GAC9B;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;CACxC,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3D,qGAAqG;AACrG,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,oBAAoB,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAA;CAAE,EAC/C,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,wBAAwB,SAAI,GAC3B,6BAA6B,CA8E/B;AA2ID,gEAAgE;AAChE,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,SAAS,EAAE,MAAM,EAAE,EACnB,cAAc,CAAC,EAAE,gBAAgB,GAChC,iBAAiB,CAyCnB;AAkDD,wBAAgB,IAAI,CAClB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAC5B,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC,GACvE,eAAe,CAKjB"}

package/node_modules/@noodle-borg/runtime/dist/operation-execution.js

@@ -0,0 +1,280 @@
+import { sanitizeConnectorFailureDetails } from './connector/failure-details.js';
+import { isConnectorInvocationError } from './connector/types.js';
+import { preflightOperationCustomerRoutes, resolveCustomerActionRouteBindings, resolveCustomerConnectorRoute, } from './customer-routing.js';
+import { ExpressionEvalError } from './eval/evaluate.js';
+import { acquireOperationCredential } from './operation-credential.js';
+import { checkSignature, evalExprMap, validateAgainstSchema } from './operation-validation.js';
+import { samePreparedAction } from './prepared-action-match.js';
+import { splitResultMeta } from './result-meta.js';
+import { cloneRoutedOutput } from './routed-output-guard.js';
+import { admitToolDispatch } from './tool-dispatch.js';
+/**
+ * Run one connector operation end to end: resolve the connector, verify the signature has not
+ * drifted, gate with policy, evaluate + validate arguments, mint a downstream credential, invoke,
+ * redact, and validate the output. Shared by single-operation fulfilment and flow operation steps.
+ */
+/** @internal Shared with the suspension-aware flow executor. */
+export async function runOperation(ref, argsAst, scope, toolName, deps, policy, host, env, argsPath, outputPath, reviewedAction, beforeDispatch) {
+    const prepared = prepareOperationAction(ref, argsAst, scope, deps, argsPath);
+    if (!prepared.ok) {
+        if (reviewedAction !== undefined && prepared.error.code === 'connector_route_unavailable') {
+            return fail('invalid_continuation', 'Customer connector route no longer matches the prepared action.');
+        }
+        return { ok: false, error: prepared.error };
+    }
+    if (ref.resolved === true) {
+        const routeError = preflightOperationCustomerRoutes(ref, deps.customerRoutes);
+        if (routeError !== null)
+            return { ok: false, error: routeError };
+    }
+    if (reviewedAction !== undefined && !samePreparedAction(prepared.action, reviewedAction)) {
+        return fail('invalid_continuation', 'prepared connector arguments no longer match the reviewed action', argsPath);
+    }
+    if (ref.resolved !== true)
+        return fail('shape_only_artifact', 'operation reference is unresolved');
+    return invokeOperation(ref, prepared.action.arguments, prepared.signature, toolName, deps, policy, host, env, argsPath, outputPath, beforeDispatch);
+}
+/** Resolve and validate an operation without policy, credentials, connector I/O, or side effects. */
+export function prepareOperationAction(ref, argsAst, scope, deps, argsPath, additionalOperationCount = 0) {
+    if (ref.resolved !== true) {
+        return {
+            ok: false,
+            error: { code: 'shape_only_artifact', message: 'operation reference is unresolved' },
+        };
+    }
+    const connector = deps.connectors.resolve(ref);
+    if (!connector) {
+        return {
+            ok: false,
+            error: {
+                code: 'connector_unavailable',
+                message: `no connector for ${ref.connectorId}@${ref.connectorVersion}`,
+            },
+        };
+    }
+    const signature = connector.signature(ref.operation);
+    const drift = checkSignature(ref, signature);
+    if (drift)
+        return { ok: false, error: drift };
+    const exactSignature = signature;
+    let evaluated;
+    try {
+        evaluated = evalExprMap(argsAst, scope, argsPath);
+    }
+    catch (error) {
+        if (error instanceof ExpressionEvalError) {
+            return {
+                ok: false,
+                error: error.path === undefined
+                    ? { code: 'expression_error', message: error.message }
+                    : { code: 'expression_error', message: error.message, path: error.path },
+            };
+        }
+        throw error;
+    }
+    const argError = validateAgainstSchema(evaluated, exactSignature.input, argsPath, 'arg_invalid', 'argument');
+    if (argError)
+        return { ok: false, error: argError };
+    const customerRoutes = resolveCustomerActionRouteBindings(deps.customerRoutes, ref, exactSignature.type);
+    if (customerRoutes === null) {
+        return {
+            ok: false,
+            error: {
+                code: 'connector_route_unavailable',
+                message: 'Customer connector route is unavailable.',
+            },
+        };
+    }
+    const action = {
+        connectorId: ref.connectorId,
+        connectorVersion: ref.connectorVersion,
+        operation: ref.operation,
+        ...(ref.credentialBinding ?? {}),
+        arguments: evaluated,
+    };
+    return {
+        ok: true,
+        signature: exactSignature,
+        action: {
+            ...action,
+            ...(customerRoutes.length === 0 ? {} : { customerRoutes }),
+        },
+        review: {
+            ...action,
+            inputSchema: exactSignature.input,
+            additionalOperationCount,
+        },
+    };
+}
+/**
+ * Invoke a resolved connector operation with already-evaluated arguments. This is the shared path for
+ * manifest operation steps and host-mediated sandbox calls.
+ */
+async function invokeOperation(ref, args, sig, toolName, deps, policy, host, env, argsPath, outputPath, beforeDispatch) {
+    const callKey = operationKey(ref);
+    if (hostCallStack(host).includes(callKey)) {
+        return fail('circular_call_dependency', `circular connector operation call detected at ${callKey}`, outputPath);
+    }
+    hostCallStack(host).push(callKey);
+    try {
+        const connector = deps.connectors.resolve(ref);
+        if (!connector) {
+            return fail('connector_unavailable', `no connector for ${ref.connectorId}@${ref.connectorVersion}`);
+        }
+        const customerRoute = resolveCustomerConnectorRoute(deps.customerRoutes, ref);
+        if (customerRoute === null) {
+            return fail('connector_route_unavailable', 'Customer connector route is unavailable.');
+        }
+        const context = {
+            toolName,
+            connectorId: ref.connectorId,
+            connectorVersion: ref.connectorVersion,
+            operation: ref.operation,
+            ...(ref.credentialBinding ?? {}),
+            ...(deps.tenantId !== undefined ? { tenantId: deps.tenantId } : {}),
+            ...(deps.deploymentId !== undefined ? { deploymentId: deps.deploymentId } : {}),
+        };
+        let decision;
+        try {
+            decision = await policy.before(context);
+        }
+        catch {
+            return fail('policy_error', 'policy before hook failed');
+        }
+        if (!decision.allow)
+            return fail('policy_denied', decision.reason);
+        const acquired = await acquireOperationCredential(ref, deps, customerRoute);
+        if (!acquired.ok)
+            return { ok: false, error: acquired.error };
+        const { credential } = acquired;
+        let connectorArgs;
+        try {
+            connectorArgs = structuredClone(args);
+        }
+        catch {
+            return fail('arg_invalid', 'connector arguments could not be safely isolated', argsPath);
+        }
+        const admissionError = await admitToolDispatch(beforeDispatch, { toolName });
+        if (admissionError !== null)
+            return { ok: false, error: admissionError };
+        let output;
+        try {
+            output = await connector.invoke({
+                operation: ref.operation,
+                args: connectorArgs,
+                env,
+                credential,
+                ...(ref.credentialBinding === undefined
+                    ? {}
+                    : { credentialPresentation: ref.credentialBinding.presentation }),
+                ...(deps.caller !== undefined ? { caller: deps.caller } : {}),
+                ...(customerRoute === undefined ? {} : { route: customerRoute }),
+                host,
+            });
+        }
+        catch (error) {
+            const hostCall = hostCallErrorSnapshot(error);
+            if (hostCall !== undefined) {
+                return fail(hostCall.code, hostCall.message, hostCall.path);
+            }
+            if (isConnectorInvocationError(error)) {
+                deps.trace?.record({
+                    kind: 'connector',
+                    connectorId: ref.connectorId,
+                    connectorVersion: ref.connectorVersion,
+                    operation: ref.operation,
+                    ...sanitizeConnectorFailureDetails(error, {
+                        includeResponseExcerpt: customerRoute === undefined,
+                    }),
+                });
+            }
+            // Normalize connector failures; never surface backend internals or credentials.
+            return fail('connector_error', `connector failed for operation "${ref.operation}"`);
+        }
+        if (customerRoute !== undefined) {
+            const cloned = cloneRoutedOutput(output, customerRoute.baseUrl);
+            if (!cloned.ok) {
+                return fail('connector_error', `connector failed for operation "${ref.operation}"`);
+            }
+            output = cloned.value;
+        }
+        let redacted;
+        try {
+            redacted = await policy.after(context, output);
+        }
+        catch {
+            return fail('policy_error', 'policy after hook failed');
+        }
+        // Projection metadata is a reserved runtime envelope, not part of the connector's visible output
+        // contract. Validate the visible value deeply while preserving policy-processed metadata for the
+        // flow/result projection channel.
+        const outputError = validateAgainstSchema(splitResultMeta(redacted).visible, sig.output, outputPath, 'output_invalid', 'output field');
+        if (outputError)
+            return { ok: false, error: outputError };
+        return { ok: true, output: redacted };
+    }
+    finally {
+        hostCallStack(host).pop();
+    }
+}
+/** @internal Shared with the suspension-aware flow executor. */
+export function createHost(toolName, deps, policy, env, callStack, beforeDispatch) {
+    const host = {
+        [CALL_STACK]: callStack,
+        async callOperation(ref, args, path) {
+            const connector = deps.connectors.resolve(ref);
+            if (!connector)
+                throw new HostCallError('connector_unavailable', 'connector unavailable');
+            const signature = connector.signature(ref.operation);
+            const drift = checkSignature(ref, signature);
+            if (drift)
+                throw new HostCallError(drift.code, drift.message, drift.path);
+            const sig = signature;
+            const argError = validateAgainstSchema(args, sig.input, `${path}.args`, 'arg_invalid', 'argument');
+            if (argError)
+                throw new HostCallError(argError.code, argError.message, argError.path);
+            const result = await invokeOperation(ref, args, sig, toolName, deps, policy, this, env, `${path}.args`, `${path}.output`, beforeDispatch);
+            if (!result.ok) {
+                throw new HostCallError(result.error.code, result.error.message, result.error.path);
+            }
+            return result.output;
+        },
+    };
+    return host;
+}
+const CALL_STACK = Symbol('noodle.connectorCallStack');
+function operationKey(ref) {
+    return JSON.stringify([ref.connectorId, ref.connectorVersion, ref.operation]);
+}
+function hostCallStack(host) {
+    return host[CALL_STACK];
+}
+/** Internal control-flow error used to carry normalized runtime failures into host-call callbacks. */
+const hostCallErrors = new WeakMap();
+class HostCallError extends Error {
+    code;
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = 'HostCallError';
+        this.code = code;
+        this.path = path;
+        hostCallErrors.set(this, Object.freeze({
+            code,
+            message,
+            ...(path === undefined ? {} : { path }),
+        }));
+    }
+}
+function hostCallErrorSnapshot(value) {
+    return (typeof value === 'object' && value !== null) || typeof value === 'function'
+        ? hostCallErrors.get(value)
+        : undefined;
+}
+export function fail(code, message, pathOrDetails) {
+    if (typeof pathOrDetails === 'string') {
+        return { ok: false, error: { code, message, path: pathOrDetails } };
+    }
+    return { ok: false, error: { code, message, ...pathOrDetails } };
+}
+//# sourceMappingURL=operation-execution.js.map

package/node_modules/@noodle-borg/runtime/dist/operation-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-execution.js","sourceRoot":"","sources":["../src/operation-execution.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAA0B,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAkB,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAE/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAOhE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAyB,MAAM,oBAAoB,CAAC;AAE9E;;;;GAIG;AACH,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAA+C,EAC/C,OAAgB,EAChB,KAAgB,EAChB,QAAgB,EAChB,IAAiB,EACjB,MAAkB,EAClB,IAAuB,EACvB,GAA2B,EAC3B,QAAgB,EAChB,UAAkB,EAClB,cAAwC,EACxC,cAAiC;IAEjC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B,EAAE,CAAC;YAC1F,OAAO,IAAI,CACT,sBAAsB,EACtB,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,gCAAgC,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9E,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QACzF,OAAO,IAAI,CACT,sBAAsB,EACtB,kEAAkE,EAClE,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;QACvB,OAAO,IAAI,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC;IAC1E,OAAO,eAAe,CACpB,GAAG,EACH,QAAQ,CAAC,MAAM,CAAC,SAAS,EACzB,QAAQ,CAAC,SAAS,EAClB,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,EACH,QAAQ,EACR,UAAU,EACV,cAAc,CACf,CAAC;AACJ,CAAC;AAWD,qGAAqG;AACrG,MAAM,UAAU,sBAAsB,CACpC,GAA+C,EAC/C,OAAgB,EAChB,KAAgB,EAChB,IAAiB,EACjB,QAAgB,EAChB,wBAAwB,GAAG,CAAC;IAE5B,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,mCAAmC,EAAE;SACrF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oBAAoB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,gBAAgB,EAAE;aACvE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9C,MAAM,cAAc,GAAG,SAA+B,CAAC;IACvD,IAAI,SAAkC,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,KAAK,CAAC,IAAI,KAAK,SAAS;oBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;oBACtD,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;aAC7E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CACpC,SAAS,EACT,cAAc,CAAC,KAAK,EACpB,QAAQ,EACR,aAAa,EACb,UAAU,CACX,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpD,MAAM,cAAc,GAAG,kCAAkC,CACvD,IAAI,CAAC,cAAc,EACnB,GAAG,EACH,cAAc,CAAC,IAAI,CACpB,CAAC;IACF,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,0CAA0C;aACpD;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAChC,SAAS,EAAE,SAAS;KACrB,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,cAAc;QACzB,MAAM,EAAE;YACN,GAAG,MAAM;YACT,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;SAC3D;QACD,MAAM,EAAE;YACN,GAAG,MAAM;YACT,WAAW,EAAE,cAAc,CAAC,KAAK;YACjC,wBAAwB;SACzB;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAyB,EACzB,IAAuC,EACvC,GAAuB,EACvB,QAAgB,EAChB,IAAiB,EACjB,MAAkB,EAClB,IAAuB,EACvB,GAA2B,EAC3B,QAAgB,EAChB,UAAkB,EAClB,cAAiC;IAEjC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CACT,0BAA0B,EAC1B,iDAAiD,OAAO,EAAE,EAC1D,UAAU,CACX,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CACT,uBAAuB,EACvB,oBAAoB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9E,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,6BAA6B,EAAE,0CAA0C,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,OAAO,GAAkB;YAC7B,QAAQ;YACR,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC;QAEF,IAAI,QAAmD,CAAC;QACxD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;QAChC,IAAI,aAAgD,CAAC;QACrD,IAAI,CAAC;YACH,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,aAAa,EAAE,kDAAkD,EAAE,QAAQ,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAEzE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;gBAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,IAAI,EAAE,aAAa;gBACnB,GAAG;gBACH,UAAU;gBACV,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,GAAG,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC;gBACnE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;gBAChE,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;oBACjB,IAAI,EAAE,WAAW;oBACjB,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,GAAG,+BAA+B,CAAC,KAAK,EAAE;wBACxC,sBAAsB,EAAE,aAAa,KAAK,SAAS;qBACpD,CAAC;iBACH,CAAC,CAAC;YACL,CAAC;YACD,gFAAgF;YAChF,OAAO,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,CAAC;QAED,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAC1D,CAAC;QAED,iGAAiG;QACjG,iGAAiG;QACjG,kCAAkC;QAClC,MAAM,WAAW,GAAG,qBAAqB,CACvC,eAAe,CAAC,QAAQ,CAAC,CAAC,OAAO,EACjC,GAAG,CAAC,MAAM,EACV,UAAU,EACV,gBAAgB,EAChB,cAAc,CACf,CAAC;QACF,IAAI,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAE1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,IAAiB,EACjB,MAAkB,EAClB,GAA2B,EAC3B,SAAmB,EACnB,cAAiC;IAEjC,MAAM,IAAI,GAA4D;QACpE,CAAC,UAAU,CAAC,EAAE,SAAS;QACvB,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;YAE1F,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7C,IAAI,KAAK;gBAAE,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,SAA+B,CAAC;YAE5C,MAAM,QAAQ,GAAG,qBAAqB,CACpC,IAAI,EACJ,GAAG,CAAC,KAAK,EACT,GAAG,IAAI,OAAO,EACd,aAAa,EACb,UAAU,CACX,CAAC;YACF,IAAI,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEtF,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,EACH,IAAI,EACJ,GAAG,EACH,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,EACH,GAAG,IAAI,OAAO,EACd,GAAG,IAAI,SAAS,EAChB,cAAc,CACf,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAG,MAAM,CAAC,2BAA2B,CAAC,CAAC;AAEvD,SAAS,YAAY,CAAC,GAAyB;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,aAAa,CAAC,IAAuB;IAC5C,OAAQ,IAAuD,CAAC,UAAU,CAAC,CAAC;AAC9E,CAAC;AAED,sGAAsG;AACtG,MAAM,cAAc,GAAG,IAAI,OAAO,EAO/B,CAAC;AAEJ,MAAM,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAyB;IAC7B,IAAI,CAAqB;IAElC,YAAY,IAA4B,EAAE,OAAe,EAAE,IAAa;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,cAAc,CAAC,GAAG,CAChB,IAAI,EACJ,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI;YACJ,OAAO;YACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;SACxC,CAAC,CACH,CAAC;IACJ,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,KAAc;IAEd,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU;QACjF,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,IAAI,CAClB,IAA4B,EAC5B,OAAe,EACf,aAAwE;IAExE,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,CAAC;AACnE,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/operation-validation.d.ts

@@ -0,0 +1,21 @@
+import { type ExprMap, type JsonSchema, type OperationSignature, type ResolvedOperationRef } from '@noodle-borg/compiler';
+import { type EvalScope } from './eval/evaluate.js';
+import type { ExecutionError } from './result.js';
+/** Verify the connector's live signature matches the hash the artifact was compiled against. */
+export declare function checkSignature(ref: ResolvedOperationRef, signature: OperationSignature | undefined): ExecutionError | null;
+/** Evaluate every value in an expression map; omit any key that resolves to `undefined`. */
+/** @internal Shared with the suspension-aware flow executor. */
+export declare function evalExprMap(map: ExprMap, scope: EvalScope, prefix: string): Record<string, unknown>;
+/** Validate operation I/O with the same complete JSON Schema contract advertised to clients. */
+/** @internal Shared with the ambient-context executor; not exported from the package barrel. */
+export declare function validateAgainstSchema(value: unknown, schema: JsonSchema, pathPrefix: string, code: 'arg_invalid' | 'output_invalid', noun: string): ExecutionError | null;
+/** Validate accepted interactive input and apply schema defaults on a defensive copy. */
+/** @internal Shared by both confirmation and non-confirmation continuation kernels. */
+export declare function validateAgainstSchemaWithDefaults(value: unknown, schema: JsonSchema, pathPrefix: string, code: 'arg_invalid' | 'output_invalid', noun: string): {
+    readonly ok: true;
+    readonly value: unknown;
+} | {
+    readonly ok: false;
+    readonly error: ExecutionError;
+};
+//# sourceMappingURL=operation-validation.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/operation-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-validation.d.ts","sourceRoot":"","sources":["../src/operation-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,OAAO,EACZ,KAAK,UAAU,EAEf,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAG1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,gGAAgG;AAChG,wBAAgB,cAAc,CAC5B,GAAG,EAAE,oBAAoB,EACzB,SAAS,EAAE,kBAAkB,GAAG,SAAS,GACxC,cAAc,GAAG,IAAI,CAevB;AAED,4FAA4F;AAC5F,gEAAgE;AAChE,wBAAgB,WAAW,CACzB,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,gGAAgG;AAChG,gGAAgG;AAChG,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,aAAa,GAAG,gBAAgB,EACtC,IAAI,EAAE,MAAM,GACX,cAAc,GAAG,IAAI,CAQvB;AAED,yFAAyF;AACzF,uFAAuF;AACvF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,aAAa,GAAG,gBAAgB,EACtC,IAAI,EAAE,MAAM,GAEV;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,CAYzD"}

package/node_modules/@noodle-borg/runtime/dist/operation-validation.js

@@ -0,0 +1,72 @@
+import { computeSignatureHash, validateJsonSchema, validateJsonSchemaWithDefaults, } from '@noodle-borg/compiler';
+import { evaluateValue } from './eval/evaluate.js';
+/** Verify the connector's live signature matches the hash the artifact was compiled against. */
+export function checkSignature(ref, signature) {
+    if (!signature) {
+        return {
+            code: 'signature_drift',
+            message: `connector has no operation "${ref.operation}"`,
+        };
+    }
+    const actual = computeSignatureHash(ref.operation, signature);
+    if (actual !== ref.signatureHash) {
+        return {
+            code: 'signature_drift',
+            message: `operation "${ref.operation}" signature has drifted from the compiled artifact`,
+        };
+    }
+    return null;
+}
+/** Evaluate every value in an expression map; omit any key that resolves to `undefined`. */
+/** @internal Shared with the suspension-aware flow executor. */
+export function evalExprMap(map, scope, prefix) {
+    const out = {};
+    for (const [key, node] of Object.entries(map)) {
+        const value = evaluateValue(node, scope, `${prefix}.${key}`);
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+/** Validate operation I/O with the same complete JSON Schema contract advertised to clients. */
+/** @internal Shared with the ambient-context executor; not exported from the package barrel. */
+export function validateAgainstSchema(value, schema, pathPrefix, code, noun) {
+    const issue = validateJsonSchema(schema, value)[0];
+    if (issue === undefined)
+        return null;
+    return {
+        code,
+        path: issue.path.length === 0 ? pathPrefix : `${pathPrefix}.${issue.path}`,
+        message: runtimeValidationMessage(noun, issue),
+    };
+}
+/** Validate accepted interactive input and apply schema defaults on a defensive copy. */
+/** @internal Shared by both confirmation and non-confirmation continuation kernels. */
+export function validateAgainstSchemaWithDefaults(value, schema, pathPrefix, code, noun) {
+    const validated = validateJsonSchemaWithDefaults(schema, value);
+    const issue = validated.issues[0];
+    if (issue === undefined)
+        return { ok: true, value: validated.value };
+    return {
+        ok: false,
+        error: {
+            code,
+            path: issue.path.length === 0 ? pathPrefix : `${pathPrefix}.${issue.path}`,
+            message: runtimeValidationMessage(noun, issue),
+        },
+    };
+}
+function runtimeValidationMessage(noun, issue) {
+    const field = issue.path.split('.').at(-1);
+    if (issue.keyword === 'required' && field !== undefined) {
+        return `missing required ${noun} "${field}"`;
+    }
+    if (issue.keyword === 'type' && issue.path.length === 0) {
+        return `${noun} container must be a non-null object`;
+    }
+    if (issue.keyword === 'type' && field !== undefined) {
+        return `${noun} "${field}" ${issue.message.replace(/^expected /, 'expects ')}`;
+    }
+    return `${noun}${field === undefined ? '' : ` "${field}"`} ${issue.message}`;
+}
+//# sourceMappingURL=operation-validation.js.map

package/node_modules/@noodle-borg/runtime/dist/operation-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-validation.js","sourceRoot":"","sources":["../src/operation-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EAMpB,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAkB,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnE,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAC5B,GAAyB,EACzB,SAAyC;IAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,+BAA+B,GAAG,CAAC,SAAS,GAAG;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,cAAc,GAAG,CAAC,SAAS,oDAAoD;SACzF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,gEAAgE;AAChE,MAAM,UAAU,WAAW,CACzB,GAAY,EACZ,KAAgB,EAChB,MAAc;IAEd,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,gGAAgG;AAChG,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,MAAkB,EAClB,UAAkB,EAClB,IAAsC,EACtC,IAAY;IAEZ,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE;QAC1E,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,uFAAuF;AACvF,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,MAAkB,EAClB,UAAkB,EAClB,IAAsC,EACtC,IAAY;IAIZ,MAAM,SAAS,GAAG,8BAA8B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;IACrE,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE;YAC1E,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC;SAC/C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY,EAAE,KAAgC;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO,oBAAoB,IAAI,KAAK,KAAK,GAAG,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,IAAI,sCAAsC,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,GAAG,IAAI,KAAK,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AAC/E,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.d.ts

@@ -0,0 +1,3 @@
+import type { PreparedOperationAction } from './result.js';
+export declare function samePreparedAction(prepared: PreparedOperationAction, reviewed: PreparedOperationAction): boolean;
+//# sourceMappingURL=prepared-action-match.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-action-match.d.ts","sourceRoot":"","sources":["../src/prepared-action-match.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE3D,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAyBT"}

package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.js

@@ -0,0 +1,50 @@
+export function samePreparedAction(prepared, reviewed) {
+    if (prepared.connectorId !== reviewed.connectorId ||
+        prepared.connectorVersion !== reviewed.connectorVersion ||
+        prepared.operation !== reviewed.operation) {
+        return false;
+    }
+    for (const key of [
+        'bindingId',
+        'connectionId',
+        'connectionConfigRevision',
+        'profile',
+        'requiredAudience',
+    ]) {
+        if (prepared[key] !== reviewed[key])
+            return false;
+    }
+    if (!sameJsonValue(prepared.requiredScopes, reviewed.requiredScopes))
+        return false;
+    if (!sameJsonValue(prepared.presentation, reviewed.presentation))
+        return false;
+    if (!sameJsonValue(prepared.customerRoutes, reviewed.customerRoutes))
+        return false;
+    try {
+        return sameJsonValue(prepared.arguments, reviewed.arguments);
+    }
+    catch {
+        return false;
+    }
+}
+/** Compare persisted JSON values structurally; PostgreSQL JSONB does not preserve object key order. */
+function sameJsonValue(left, right) {
+    if (Object.is(left, right))
+        return true;
+    if (left === null || right === null || typeof left !== 'object' || typeof right !== 'object') {
+        return false;
+    }
+    if (Array.isArray(left) || Array.isArray(right)) {
+        return (Array.isArray(left) &&
+            Array.isArray(right) &&
+            left.length === right.length &&
+            left.every((value, index) => sameJsonValue(value, right[index])));
+    }
+    const leftRecord = left;
+    const rightRecord = right;
+    const leftKeys = Object.keys(leftRecord);
+    const rightKeys = Object.keys(rightRecord);
+    return (leftKeys.length === rightKeys.length &&
+        leftKeys.every((key) => Object.hasOwn(rightRecord, key) && sameJsonValue(leftRecord[key], rightRecord[key])));
+}
+//# sourceMappingURL=prepared-action-match.js.map

package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-action-match.js","sourceRoot":"","sources":["../src/prepared-action-match.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAChC,QAAiC,EACjC,QAAiC;IAEjC,IACE,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAC7C,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;QACvD,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,GAAG,IAAI;QAChB,WAAW;QACX,cAAc;QACd,0BAA0B;QAC1B,SAAS;QACT,kBAAkB;KACV,EAAE,CAAC;QACX,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,IAAa,EAAE,KAAc;IAClD,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACnB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAyC,CAAC;IAC7D,MAAM,WAAW,GAAG,KAA0C,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,CACL,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QACpC,QAAQ,CAAC,KAAK,CACZ,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAC7F,CACF,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/result.d.ts

@@ -1,6 +1,7 @@
 import type { CredentialProfile } from '@noodle-borg/compiler';
+import type { CustomerRouteBinding } from './customer-routing.js';
 /** Why a tool call could not be fulfilled. Protocol and embedded adapters map this internal contract. */
-export type ExecutionErrorCode = 'shape_only_artifact' | 'unknown_tool' | 'unknown_resource' | 'unknown_prompt' | 'unsupported_fulfilment' | 'connector_unavailable' | 'credential_unavailable' | 'signature_drift' | 'policy_denied' | 'policy_error' | 'dispatch_denied' | 'usage_limit_exceeded' | 'duplicate_execution_suppressed' | 'execution_admission_error' | 'execution_cancelled' | 'arg_invalid' | 'invalid_continuation' | 'invalid_elicitation_flow' | 'invalid_confirmation_flow' | 'expression_error' | 'circular_call_dependency' | 'connector_error' | 'output_invalid';
+export type ExecutionErrorCode = 'shape_only_artifact' | 'unknown_tool' | 'unknown_resource' | 'unknown_prompt' | 'unsupported_fulfilment' | 'connector_unavailable' | 'connector_route_unavailable' | 'credential_unavailable' | 'signature_drift' | 'policy_denied' | 'policy_error' | 'dispatch_denied' | 'usage_limit_exceeded' | 'duplicate_execution_suppressed' | 'execution_admission_error' | 'execution_cancelled' | 'arg_invalid' | 'invalid_continuation' | 'invalid_elicitation_flow' | 'invalid_confirmation_flow' | 'expression_error' | 'circular_call_dependency' | 'connector_error' | 'output_invalid';
 /** A typed execution failure. `path` locates the offending field/expression when applicable and
  * never carries a sensitive value. */
 export interface ExecutionError {
@@ -95,8 +96,7 @@ export interface PreparedToolContinuation {
     /** Exact first connector invocation approved by the user; absent for a pure flow. */
     readonly reviewedAction?: PreparedOperationAction;
 }
-/** Exact connector invocation bound into a prepared confirmation continuation. */
-export interface PreparedOperationAction {
+interface OperationActionIdentity {
     readonly connectorId: string;
     readonly connectorVersion: string;
     readonly operation: string;
@@ -109,8 +109,13 @@ export interface PreparedOperationAction {
     readonly requiredAudience?: string;
     readonly arguments: Readonly<Record<string, unknown>>;
 }
-/** Server-side data from which an adapter can construct a safely redacted action review. */
-export interface ConfirmationActionReview extends PreparedOperationAction {
+/** Exact connector invocation bound into a private prepared confirmation continuation. */
+export interface PreparedOperationAction extends OperationActionIdentity {
+    /** URL-blind bindings for routed action calls, including transitive connector calls. */
+    readonly customerRoutes?: readonly CustomerRouteBinding[];
+}
+/** Server-side data from which an adapter can construct a safely redacted public action review. */
+export interface ConfirmationActionReview extends OperationActionIdentity {
     readonly inputSchema: Readonly<Record<string, unknown>>;
     /** Later connector calls may depend on this action's output and are disclosed, not pre-resolved. */
     readonly additionalOperationCount: number;