noodleseed-cli 0.1.4

package/node_modules/@noodle-borg/compiler/dist/uri-template.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Minimal URI-template support for MCP resources. We support **only** the RFC 6570 *simple* `{var}`
+ * form — the shape MCP examples use (`tickets://{id}`, `users://{userId}/posts/{postId}`). Operator
+ * forms (`{+var}`, `{#var}`, `{?q}`, `{var*}`, `{var:3}`, …) are rejected at compile time so behavior
+ * stays predictable and bounded.
+ *
+ * A variable matches a single path segment (`[^/]+`); a template with no `{var}` is a fixed URI. Matching
+ * is anchored and uses non-backtracking segment classes, so it is linear in the input length.
+ */
+export interface FixedUri {
+    readonly kind: 'fixed';
+    readonly uri: string;
+}
+export interface TemplateUri {
+    readonly kind: 'template';
+    readonly variables: readonly string[];
+    /** Match a concrete URI against this template; returns the extracted variables, or `null` on no match. */
+    match(uri: string): Record<string, string> | null;
+}
+export type ParsedUri = FixedUri | TemplateUri;
+export type ParseUriResult = {
+    readonly ok: true;
+    readonly value: ParsedUri;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/**
+ * Parse a resource `uri` into a fixed URI or a `{var}` template matcher. Returns an error string for an
+ * unsupported template (operator forms, duplicate/empty variables, or an out-of-bounds template).
+ */
+export declare function parseUriTemplate(uri: string): ParseUriResult;
+//# sourceMappingURL=uri-template.d.ts.map

package/node_modules/@noodle-borg/compiler/dist/uri-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uri-template.d.ts","sourceRoot":"","sources":["../src/uri-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,0GAA0G;IAC1G,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CACnD;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE/C,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAOnD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CA4D5D"}

package/node_modules/@noodle-borg/compiler/dist/uri-template.js

@@ -0,0 +1,83 @@
+/**
+ * Minimal URI-template support for MCP resources. We support **only** the RFC 6570 *simple* `{var}`
+ * form — the shape MCP examples use (`tickets://{id}`, `users://{userId}/posts/{postId}`). Operator
+ * forms (`{+var}`, `{#var}`, `{?q}`, `{var*}`, `{var:3}`, …) are rejected at compile time so behavior
+ * stays predictable and bounded.
+ *
+ * A variable matches a single path segment (`[^/]+`); a template with no `{var}` is a fixed URI. Matching
+ * is anchored and uses non-backtracking segment classes, so it is linear in the input length.
+ */
+/** Bounds (defense in depth against pathological templates). */
+const MAX_URI_LENGTH = 2048;
+const MAX_VARIABLES = 16;
+/** A simple `{var}` name: letters, digits, underscores. */
+const SIMPLE_VAR = /^[A-Za-z0-9_]+$/;
+/** Escape a literal slice of the template for safe inclusion in the matcher regex. */
+function escapeRegExp(literal) {
+    return literal.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Parse a resource `uri` into a fixed URI or a `{var}` template matcher. Returns an error string for an
+ * unsupported template (operator forms, duplicate/empty variables, or an out-of-bounds template).
+ */
+export function parseUriTemplate(uri) {
+    if (uri.length > MAX_URI_LENGTH) {
+        return { ok: false, error: `uri is too long (max ${MAX_URI_LENGTH} characters)` };
+    }
+    const variables = [];
+    let pattern = '';
+    let cursor = 0;
+    const re = /\{([^}]*)\}/g;
+    let m = re.exec(uri);
+    while (m !== null) {
+        const expression = m[1] ?? '';
+        if (!SIMPLE_VAR.test(expression)) {
+            return {
+                ok: false,
+                error: `unsupported URI template expression "{${expression}}"; only the simple {var} form is supported`,
+            };
+        }
+        if (variables.includes(expression)) {
+            return { ok: false, error: `duplicate template variable "${expression}"` };
+        }
+        if (variables.length >= MAX_VARIABLES) {
+            return { ok: false, error: `too many template variables (max ${MAX_VARIABLES})` };
+        }
+        variables.push(expression);
+        pattern += escapeRegExp(uri.slice(cursor, m.index));
+        pattern += '([^/]+)';
+        cursor = m.index + m[0].length;
+        m = re.exec(uri);
+    }
+    if (variables.length === 0) {
+        return { ok: true, value: { kind: 'fixed', uri } };
+    }
+    pattern += escapeRegExp(uri.slice(cursor));
+    const matcher = new RegExp(`^${pattern}$`);
+    const captured = variables.slice();
+    return {
+        ok: true,
+        value: {
+            kind: 'template',
+            variables: captured,
+            match(concrete) {
+                if (concrete.length > MAX_URI_LENGTH)
+                    return null;
+                const result = matcher.exec(concrete);
+                if (!result)
+                    return null;
+                const out = {};
+                for (const [i, name] of captured.entries()) {
+                    try {
+                        out[name] = decodeURIComponent(result[i + 1] ?? '');
+                    }
+                    catch {
+                        return null;
+                    }
+                }
+                return out;
+            },
+        },
+    };
+}
+//# sourceMappingURL=uri-template.js.map

package/node_modules/@noodle-borg/compiler/dist/uri-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uri-template.js","sourceRoot":"","sources":["../src/uri-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,gEAAgE;AAChE,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,2DAA2D;AAC3D,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAoBrC,sFAAsF;AACtF,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,cAAc,cAAc,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,EAAE,GAAG,cAAc,CAAC;IAC1B,IAAI,CAAC,GAA2B,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,yCAAyC,UAAU,6CAA6C;aACxG,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,UAAU,GAAG,EAAE,CAAC;QAC7E,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,aAAa,GAAG,EAAE,CAAC;QACpF,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,SAAS,CAAC;QACrB,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;IAEnC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,QAAQ;YACnB,KAAK,CAAC,QAAgB;gBACpB,IAAI,QAAQ,CAAC,MAAM,GAAG,cAAc;oBAAE,OAAO,IAAI,CAAC;gBAClD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC;gBACzB,MAAM,GAAG,GAA2B,EAAE,CAAC;gBACvC,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,GAAG,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/compiler/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@noodle-borg/compiler",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "noodle-compile": "./dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "schema": "node dist/schema-export.js"
+  },
+  "dependencies": {
+    "yaml": "^2.9.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0"
+  }
+}

package/node_modules/@noodle-borg/compute/dist/code-connector.d.ts

@@ -0,0 +1,45 @@
+import type { OperationSignature } from '@noodle-borg/compiler';
+import type { Connector, ConnectorCall } from '@noodle-borg/runtime';
+import { type ComputeEngine, type ComputeLimits, type ComputeModule } from './engine.js';
+export interface CodeOperationCallRef {
+    readonly resolved: true;
+    readonly alias: string;
+    readonly connectorId: string;
+    readonly connectorVersion: string;
+    readonly operation: string;
+    readonly signatureHash: string;
+}
+/** One sandboxed-code operation: its declared signature and the content-addressed module that fulfils it. */
+export interface CodeOperation {
+    readonly signature: OperationSignature;
+    readonly module: ComputeModule;
+    /** Per-operation resource bounds; falls back to {@link DEFAULT_LIMITS}. */
+    readonly limits?: ComputeLimits;
+    /** Host operations this compute operation is allowed to call, keyed by sandbox-local name. */
+    readonly calls?: Readonly<Record<string, CodeOperationCallRef>>;
+}
+export interface CodeConnectorConfig {
+    readonly id: string;
+    readonly version: string;
+    readonly engine: ComputeEngine;
+    readonly operations: Readonly<Record<string, CodeOperation>>;
+}
+/**
+ * A connector whose operations run tenant-authored JavaScript in a {@link ComputeEngine} sandbox — the
+ * "code as a sandboxed connector operation" escape hatch
+ * ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md)). It is a plain {@link Connector},
+ * so it resolves and invokes through the runtime exactly like any other connector: typed args in (already
+ * validated against the signature), typed output out (validated by the runtime), policy gate + broker
+ * around it. Declared host calls are the only outbound capability: sandbox-local names map to resolved
+ * connector operations and are mediated by the runtime host
+ * ([ADR 0014](../../../docs/decisions/0014-compute-engine-interface.md)).
+ */
+export declare class CodeConnector implements Connector {
+    #private;
+    readonly id: string;
+    readonly version: string;
+    constructor(config: CodeConnectorConfig);
+    signature(operation: string): OperationSignature | undefined;
+    invoke(call: ConnectorCall): Promise<unknown>;
+}
+//# sourceMappingURL=code-connector.d.ts.map

package/node_modules/@noodle-borg/compute/dist/code-connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-connector.d.ts","sourceRoot":"","sources":["../src/code-connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAqB,MAAM,sBAAsB,CAAC;AACxF,OAAO,EACL,KAAK,aAAa,EAGlB,KAAK,aAAa,EAClB,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,6GAA6G;AAC7G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;CAC9D;AAED;;;;;;;;;GASG;AACH,qBAAa,aAAc,YAAW,SAAS;;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAIb,MAAM,EAAE,mBAAmB;IAOvC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAItD,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;CAcpD"}

package/node_modules/@noodle-borg/compute/dist/code-connector.js

@@ -0,0 +1,53 @@
+import { ComputeError, DEFAULT_LIMITS, } from './engine.js';
+/**
+ * A connector whose operations run tenant-authored JavaScript in a {@link ComputeEngine} sandbox — the
+ * "code as a sandboxed connector operation" escape hatch
+ * ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md)). It is a plain {@link Connector},
+ * so it resolves and invokes through the runtime exactly like any other connector: typed args in (already
+ * validated against the signature), typed output out (validated by the runtime), policy gate + broker
+ * around it. Declared host calls are the only outbound capability: sandbox-local names map to resolved
+ * connector operations and are mediated by the runtime host
+ * ([ADR 0014](../../../docs/decisions/0014-compute-engine-interface.md)).
+ */
+export class CodeConnector {
+    id;
+    version;
+    #engine;
+    #operations;
+    constructor(config) {
+        this.id = config.id;
+        this.version = config.version;
+        this.#engine = config.engine;
+        this.#operations = config.operations;
+    }
+    signature(operation) {
+        return this.#operations[operation]?.signature;
+    }
+    async invoke(call) {
+        const op = this.#operations[call.operation];
+        if (!op)
+            throw new Error(`connector "${this.id}" has no operation "${call.operation}"`);
+        const instance = await this.#engine.instantiate(op.module);
+        try {
+            return await instance.invoke(call.args, op.limits ?? DEFAULT_LIMITS, op.calls ? computeHost(op.calls, call.host) : undefined);
+        }
+        finally {
+            instance.dispose();
+        }
+    }
+}
+function computeHost(calls, host) {
+    return {
+        callOperation(name, args) {
+            if (!host) {
+                throw new ComputeError('host_call_failed', 'host call unavailable');
+            }
+            const ref = calls[name];
+            if (!ref) {
+                throw new ComputeError('host_call_denied', `host call "${name}" is not declared`);
+            }
+            return host.callOperation(ref, args, `host.${name}`);
+        },
+    };
+}
+//# sourceMappingURL=code-connector.js.map

package/node_modules/@noodle-borg/compute/dist/code-connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-connector.js","sourceRoot":"","sources":["../src/code-connector.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,YAAY,EAIZ,cAAc,GACf,MAAM,aAAa,CAAC;AA4BrB;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAa;IACf,EAAE,CAAS;IACX,OAAO,CAAS;IAChB,OAAO,CAAgB;IACvB,WAAW,CAA0C;IAE9D,YAAY,MAA2B;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;IACvC,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,EAAE,uBAAuB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,MAAM,CAC1B,IAAI,CAAC,IAAI,EACT,EAAE,CAAC,MAAM,IAAI,cAAc,EAC3B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,SAAS,WAAW,CAClB,KAAqD,EACrD,IAAmC;IAEnC,OAAO;QACL,aAAa,CAAC,IAAI,EAAE,IAAI;YACtB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,cAAc,IAAI,mBAAmB,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/compute/dist/engine.d.ts

@@ -0,0 +1,73 @@
+/**
+ * The execution backend for sandboxed tenant code. The interface is **AOT-shaped**: code is treated as a
+ * **content-addressed compiled module** (`compile` → a digest; `instantiate` → a runnable instance), even
+ * though the first backend ([`QuickJsComputeEngine`](./quickjs-engine.ts)) interprets the source rather
+ * than ahead-of-time compiling it to WebAssembly. A production AOT backend (extism/wasmtime,
+ * [ADR 0010](../../../docs/decisions/0010-wasm-sandbox-compute-step.md)) drops in behind this same port —
+ * yielding dev-mode = interpreter, prod-mode = AOT
+ * ([ADR 0014](../../../docs/decisions/0014-compute-engine-interface.md)).
+ *
+ * The security core ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md)): a backend
+ * grants **no ambient authority** — the sandbox sees only its typed `input`, never the network,
+ * filesystem, process environment, clock, randomness, secrets, connector credentials, or inbound tokens.
+ * Execution is bounded and fails closed (timeout, memory cap, output-size cap).
+ */
+export interface ComputeEngine {
+    readonly kind: 'interpreter' | 'aot';
+    /** Content-address a source unit. An AOT backend emits a WASM module here; the interpreter just hashes. */
+    compile(source: string): Promise<ComputeModule>;
+    /** Resolve a compiled module to a runnable instance. */
+    instantiate(module: ComputeModule): Promise<ComputeInstance>;
+}
+/**
+ * A handle to a compiled code unit. Carries only the **digest** (content hash) — never the source — so a
+ * runtime artifact that references it stays reviewable as data
+ * ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md)). The digest must **not** enter
+ * an operation's signature hash.
+ */
+export interface ComputeModule {
+    readonly digest: string;
+    readonly engine: 'interpreter' | 'aot';
+}
+/** A runnable instance of a compiled module. */
+export interface ComputeInstance {
+    /** Run the module against `input` under the given resource limits; resolves with the JSON output. */
+    invoke(input: unknown, limits: ComputeLimits, host?: ComputeHost): Promise<unknown>;
+    /** Release any retained resources. */
+    dispose(): void;
+}
+/** Host capability available to sandboxed code when a compute operation declares outbound calls. */
+export interface ComputeHost {
+    callOperation(name: string, args: Readonly<Record<string, unknown>>): Promise<unknown>;
+}
+/** Resource bounds for a single sandboxed execution. All bounds fail closed. */
+export interface ComputeLimits {
+    /** Wall-clock budget; an over-running (e.g. infinite-looping) script is interrupted. */
+    readonly timeoutMs: number;
+    /** Hard cap on the sandbox heap, in bytes. */
+    readonly memoryBytes: number;
+    /** Hard cap on the serialized output, in bytes. */
+    readonly maxOutputBytes: number;
+    /** Maximum number of host-mediated connector calls one sandbox invocation may make. */
+    readonly maxHostCalls: number;
+}
+/**
+ * Conservative defaults for pure (non-suspending, no-outbound) compute. Instruction-fuel metering is a
+ * property of the future AOT/wasmtime backend; the interpreter bounds wall-clock + memory + output only.
+ */
+export declare const DEFAULT_LIMITS: ComputeLimits;
+/** Reasons a sandboxed execution fails. The code is stable; the message never carries host state. */
+export type ComputeErrorCode = 'unknown_module' | 'timeout' | 'memory' | 'output_too_large' | 'host_call_denied' | 'host_call_failed' | 'invalid_output' | 'runtime_error';
+/**
+ * Raised when a sandboxed execution cannot complete. Carries a stable code and an optional path; the
+ * sandbox holds no host secrets (deny-by-default), so a bounded sandbox-internal message is safe to relay,
+ * but the host never injects its own values or source into it.
+ */
+export declare class ComputeError extends Error {
+    readonly code: ComputeErrorCode;
+    readonly path: string | undefined;
+    constructor(code: ComputeErrorCode, message: string, path?: string);
+}
+/** Content-address a source string as `sha256:<hex>` — the module digest. */
+export declare function digestSource(source: string): string;
+//# sourceMappingURL=engine.d.ts.map

package/node_modules/@noodle-borg/compute/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,KAAK,CAAC;IACrC,2GAA2G;IAC3G,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChD,wDAAwD;IACxD,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC9D;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,KAAK,CAAC;CACxC;AAED,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,qGAAqG;IACrG,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,sCAAsC;IACtC,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,oGAAoG;AACpG,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxF;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8CAA8C;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,aAK5B,CAAC;AAEF,qGAAqG;AACrG,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,SAAS,GACT,QAAQ,GACR,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,eAAe,CAAC;AAEpB;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEtB,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAMnE;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/node_modules/@noodle-borg/compute/dist/engine.js

@@ -0,0 +1,31 @@
+import { createHash } from 'node:crypto';
+/**
+ * Conservative defaults for pure (non-suspending, no-outbound) compute. Instruction-fuel metering is a
+ * property of the future AOT/wasmtime backend; the interpreter bounds wall-clock + memory + output only.
+ */
+export const DEFAULT_LIMITS = {
+    timeoutMs: 1_000,
+    memoryBytes: 16 << 20, // 16 MiB
+    maxOutputBytes: 256 << 10, // 256 KiB
+    maxHostCalls: 16,
+};
+/**
+ * Raised when a sandboxed execution cannot complete. Carries a stable code and an optional path; the
+ * sandbox holds no host secrets (deny-by-default), so a bounded sandbox-internal message is safe to relay,
+ * but the host never injects its own values or source into it.
+ */
+export class ComputeError extends Error {
+    code;
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = 'ComputeError';
+        this.code = code;
+        this.path = path;
+    }
+}
+/** Content-address a source string as `sha256:<hex>` — the module digest. */
+export function digestSource(source) {
+    return `sha256:${createHash('sha256').update(source, 'utf8').digest('hex')}`;
+}
+//# sourceMappingURL=engine.js.map

package/node_modules/@noodle-borg/compute/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA4DzC;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,SAAS,EAAE,KAAK;IAChB,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS;IAChC,cAAc,EAAE,GAAG,IAAI,EAAE,EAAE,UAAU;IACrC,YAAY,EAAE,EAAE;CACjB,CAAC;AAaF;;;;GAIG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,IAAI,CAAqB;IAElC,YAAY,IAAsB,EAAE,OAAe,EAAE,IAAa;QAChE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/E,CAAC"}

package/node_modules/@noodle-borg/compute/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { CodeConnector, type CodeConnectorConfig, type CodeOperation, type CodeOperationCallRef, } from './code-connector.js';
+export { type ComputeEngine, ComputeError, type ComputeErrorCode, type ComputeHost, type ComputeInstance, type ComputeLimits, type ComputeModule, DEFAULT_LIMITS, digestSource, } from './engine.js';
+export { QuickJsComputeEngine } from './quickjs-engine.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/compute/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,aAAa,EAClB,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}

package/node_modules/@noodle-borg/compute/dist/index.js

@@ -0,0 +1,4 @@
+export { CodeConnector, } from './code-connector.js';
+export { ComputeError, DEFAULT_LIMITS, digestSource, } from './engine.js';
+export { QuickJsComputeEngine } from './quickjs-engine.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/compute/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAId,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,YAAY,EAMZ,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}

package/node_modules/@noodle-borg/compute/dist/quickjs-engine.d.ts

@@ -0,0 +1,31 @@
+import { type ComputeEngine, type ComputeInstance, type ComputeModule } from './engine.js';
+/**
+ * The first {@link ComputeEngine} backend: a QuickJS interpreter compiled to WebAssembly
+ * (`quickjs-emscripten`). It runs tenant-authored JavaScript with **no ambient authority** — a fresh
+ * QuickJS runtime per invocation, configured with nothing injected (no `fetch`, `console`, `process`,
+ * `require`, or other host bindings), nondeterministic globals removed (`Date`, `Math.random`), and hard,
+ * fail-closed bounds (wall-clock timeout, memory cap, output-size cap).
+ *
+ * The unit of code is **a JavaScript expression that evaluates to a function** `fn(input) -> output`
+ * (e.g. `(input) => { ... }`). Input is JSON-marshaled in, output JSON-marshaled out — the boundary never
+ * shares object references. When a host is provided, `callOperation` is the only injected capability and
+ * routes through the runtime's policy/broker/connector path.
+ *
+ * "Interpreter, code-as-data" is the dev-mode backend; the production AOT backend (extism/wasmtime, true
+ * instruction-fuel) plugs in behind the same {@link ComputeEngine} interface
+ * ([ADR 0014](../../../docs/decisions/0014-compute-engine-interface.md)).
+ */
+export declare class QuickJsComputeEngine implements ComputeEngine {
+    #private;
+    readonly kind: "interpreter";
+    /** Hash and retain the source. (An AOT backend would emit and store a WASM module here instead.) */
+    compile(source: string): Promise<ComputeModule>;
+    /**
+     * Synchronous content-addressing for the interpreter backend (hash + retain). Lets a synchronous
+     * caller (the connector-catalog compiler) register sources without going async; the AOT backend, whose
+     * compile genuinely does work, exposes only the async {@link compile}.
+     */
+    registerSource(source: string): ComputeModule;
+    instantiate(module: ComputeModule): Promise<ComputeInstance>;
+}
+//# sourceMappingURL=quickjs-engine.d.ts.map

package/node_modules/@noodle-borg/compute/dist/quickjs-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-engine.d.ts","sourceRoot":"","sources":["../src/quickjs-engine.ts"],"names":[],"mappings":"AASA,OAAO,EACL,KAAK,aAAa,EAGlB,KAAK,eAAe,EAEpB,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,oBAAqB,YAAW,aAAa;;IACxD,QAAQ,CAAC,IAAI,EAAG,aAAa,CAAU;IAIvC,oGAAoG;IAC9F,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIrD;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa;IAMvC,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;CAQnE"}