noodleseed-cli 0.1.4

package/node_modules/@noodle-borg/compute/dist/quickjs-engine.js

@@ -0,0 +1,271 @@
+import { getQuickJS, newAsyncContext, shouldInterruptAfterDeadline, } from 'quickjs-emscripten';
+import { ComputeError, digestSource, } from './engine.js';
+/**
+ * The first {@link ComputeEngine} backend: a QuickJS interpreter compiled to WebAssembly
+ * (`quickjs-emscripten`). It runs tenant-authored JavaScript with **no ambient authority** — a fresh
+ * QuickJS runtime per invocation, configured with nothing injected (no `fetch`, `console`, `process`,
+ * `require`, or other host bindings), nondeterministic globals removed (`Date`, `Math.random`), and hard,
+ * fail-closed bounds (wall-clock timeout, memory cap, output-size cap).
+ *
+ * The unit of code is **a JavaScript expression that evaluates to a function** `fn(input) -> output`
+ * (e.g. `(input) => { ... }`). Input is JSON-marshaled in, output JSON-marshaled out — the boundary never
+ * shares object references. When a host is provided, `callOperation` is the only injected capability and
+ * routes through the runtime's policy/broker/connector path.
+ *
+ * "Interpreter, code-as-data" is the dev-mode backend; the production AOT backend (extism/wasmtime, true
+ * instruction-fuel) plugs in behind the same {@link ComputeEngine} interface
+ * ([ADR 0014](../../../docs/decisions/0014-compute-engine-interface.md)).
+ */
+export class QuickJsComputeEngine {
+    kind = 'interpreter';
+    #sources = new Map();
+    #wasm;
+    /** Hash and retain the source. (An AOT backend would emit and store a WASM module here instead.) */
+    async compile(source) {
+        return this.registerSource(source);
+    }
+    /**
+     * Synchronous content-addressing for the interpreter backend (hash + retain). Lets a synchronous
+     * caller (the connector-catalog compiler) register sources without going async; the AOT backend, whose
+     * compile genuinely does work, exposes only the async {@link compile}.
+     */
+    registerSource(source) {
+        const digest = digestSource(source);
+        this.#sources.set(digest, source);
+        return { digest, engine: 'interpreter' };
+    }
+    async instantiate(module) {
+        const source = this.#sources.get(module.digest);
+        if (source === undefined) {
+            throw new ComputeError('unknown_module', `no source registered for module ${module.digest}`);
+        }
+        this.#wasm ??= await getQuickJS();
+        return new QuickJsComputeInstance(this.#wasm, source);
+    }
+}
+/** A runnable instance: each {@link invoke} spins a fresh, disposable QuickJS runtime for isolation. */
+class QuickJsComputeInstance {
+    #wasm;
+    #source;
+    constructor(wasm, source) {
+        this.#wasm = wasm;
+        this.#source = source;
+    }
+    async invoke(input, limits, host) {
+        if (host)
+            return this.invokeWithHost(input, limits, host);
+        const runtime = this.#wasm.newRuntime();
+        runtime.setMemoryLimit(limits.memoryBytes);
+        runtime.setInterruptHandler(shouldInterruptAfterDeadline(Date.now() + limits.timeoutMs));
+        const context = runtime.newContext();
+        try {
+            const wrapper = buildWrapper(this.#source, input);
+            const result = context.evalCode(wrapper, 'module.js');
+            if (result.error) {
+                const described = describeError(context, result.error);
+                result.error.dispose();
+                throw classifyError(described);
+            }
+            const out = readResult(context, result.value, limits.maxOutputBytes);
+            result.value.dispose();
+            return out;
+        }
+        finally {
+            context.dispose();
+            runtime.dispose();
+        }
+    }
+    dispose() {
+        // No retained per-instance resources; runtimes are created and disposed per invoke.
+    }
+    async invokeWithHost(input, limits, host) {
+        const context = await newAsyncContext();
+        const runtime = context.runtime;
+        runtime.setMemoryLimit(limits.memoryBytes);
+        runtime.setInterruptHandler(shouldInterruptAfterDeadline(Date.now() + limits.timeoutMs));
+        try {
+            installHostCall(context, host, limits);
+            const result = await context.evalCodeAsync(buildWrapper(this.#source, input, true), 'module.js');
+            if (result.error) {
+                const described = describeError(context, result.error);
+                result.error.dispose();
+                throw classifyError(described);
+            }
+            const pendingResult = context.resolvePromise(result.value);
+            await drainPendingJobs(runtime, context);
+            const resolved = await pendingResult;
+            result.value.dispose();
+            if (resolved.error) {
+                const described = describeError(context, resolved.error);
+                resolved.error.dispose();
+                throw classifyError(described);
+            }
+            const out = readResult(context, resolved.value, limits.maxOutputBytes);
+            resolved.value.dispose();
+            return out;
+        }
+        finally {
+            context.setProp(context.global, '__hostCallOperation', context.undefined);
+            context.dispose();
+            runtime.dispose();
+        }
+    }
+}
+async function drainPendingJobs(runtime, context) {
+    while (runtime.hasPendingJob()) {
+        const jobs = await runtime.executePendingJobs();
+        if (jobs.error) {
+            const described = describeError(context, jobs.error);
+            jobs.error.dispose();
+            throw classifyError(described);
+        }
+    }
+}
+/**
+ * Build the script run inside the sandbox. The handler source is wrapped as an expression, called with
+ * the JSON-marshaled input, and its result re-serialized to a string. A prelude removes nondeterministic
+ * globals so "deterministic by default" holds for the future resume/idempotency model
+ * ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md)).
+ */
+function buildWrapper(source, input, hostEnabled = false) {
+    const callOperationPrelude = hostEnabled
+        ? `
+var callOperation = function(name, args) {
+  var __hostEnvelope = JSON.parse(globalThis.__hostCallOperation(String(name), JSON.stringify(args ?? {})));
+  if (!__hostEnvelope.ok) {
+    var __err = new Error(__hostEnvelope.error.message || "host call failed");
+    __err.name = __hostEnvelope.error.code || "host_call_failed";
+    __err.code = __hostEnvelope.error.code;
+    __err.path = __hostEnvelope.error.path;
+    throw __err;
+  }
+  return __hostEnvelope.output;
+};
+`
+        : '';
+    const handlerArgs = hostEnabled
+        ? `${jsLiteral(input ?? null)}, { callOperation: callOperation }`
+        : jsLiteral(input ?? null);
+    const bodyPrefix = `"use strict";
+delete globalThis.Date;
+delete Math.random;
+${callOperationPrelude}
+var __handler = (${source});
+if (typeof __handler !== "function") { throw new TypeError("compute module must evaluate to a function"); }`;
+    if (hostEnabled) {
+        return `${bodyPrefix}
+Promise.resolve(__handler(${handlerArgs})).then(function(__value) {
+  var __out = JSON.stringify(__value);
+  return (typeof __out === "string") ? __out : "null";
+});`;
+    }
+    return `${bodyPrefix}
+var __out = JSON.stringify(__handler(${handlerArgs}));
+(typeof __out === "string") ? __out : "null";`;
+}
+function installHostCall(context, host, limits) {
+    let calls = 0;
+    const fn = context.newAsyncifiedFunction('__hostCallOperation', async (nameHandle, argsJsonHandle) => {
+        const envelope = async () => {
+            if (calls >= limits.maxHostCalls) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'host_call_denied',
+                        message: 'host call budget exceeded',
+                    },
+                };
+            }
+            calls += 1;
+            const name = context.getString(nameHandle);
+            let args;
+            try {
+                args = JSON.parse(context.getString(argsJsonHandle));
+            }
+            catch {
+                return {
+                    ok: false,
+                    error: { code: 'host_call_denied', message: 'host call arguments must be JSON' },
+                };
+            }
+            if (args === null || typeof args !== 'object' || Array.isArray(args)) {
+                return {
+                    ok: false,
+                    error: { code: 'host_call_denied', message: 'host call arguments must be an object' },
+                };
+            }
+            try {
+                return {
+                    ok: true,
+                    output: await host.callOperation(name, args),
+                };
+            }
+            catch (error) {
+                const err = error;
+                return {
+                    ok: false,
+                    error: {
+                        code: typeof err.code === 'string' ? err.code : 'host_call_failed',
+                        message: typeof err.message === 'string' && err.message !== ''
+                            ? err.message.slice(0, 256)
+                            : 'host call failed',
+                        ...(typeof err.path === 'string' ? { path: err.path } : {}),
+                    },
+                };
+            }
+        };
+        return context.newString(JSON.stringify(await envelope()));
+    });
+    context.setProp(context.global, '__hostCallOperation', fn);
+    fn.dispose();
+}
+/** Read the string completion value, enforcing the output-size cap, and parse it as JSON. */
+function readResult(context, value, maxOutputBytes) {
+    const text = context.getString(value);
+    if (Buffer.byteLength(text, 'utf8') > maxOutputBytes) {
+        throw new ComputeError('output_too_large', 'compute output exceeds the size limit');
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new ComputeError('invalid_output', 'compute output is not valid JSON');
+    }
+}
+/** Extract a bounded `{ name, message }` from a sandbox error handle without leaking host state. */
+function describeError(context, handle) {
+    let dumped;
+    try {
+        dumped = context.dump(handle);
+    }
+    catch {
+        return { name: 'Error', message: 'sandbox error' };
+    }
+    if (dumped !== null && typeof dumped === 'object') {
+        const o = dumped;
+        const name = typeof o.name === 'string' ? o.name : 'Error';
+        const message = typeof o.message === 'string' ? o.message : '';
+        return { name, message };
+    }
+    return { name: 'Error', message: String(dumped) };
+}
+/** Map a sandbox error to a stable {@link ComputeError} code; truncate the relayed message. */
+function classifyError(described) {
+    const lower = described.message.toLowerCase();
+    if (lower.includes('interrupted')) {
+        return new ComputeError('timeout', 'compute exceeded its time budget');
+    }
+    if (lower.includes('out of memory')) {
+        return new ComputeError('memory', 'compute exceeded its memory limit');
+    }
+    if (described.name === 'host_call_denied' || described.name === 'host_call_failed') {
+        return new ComputeError(described.name, described.message.slice(0, 256) || 'host call failed');
+    }
+    const detail = `${described.name}: ${described.message}`.slice(0, 256);
+    return new ComputeError('runtime_error', detail);
+}
+/** Embed a JSON-safe value as a JavaScript literal, escaping the line/paragraph separators. */
+function jsLiteral(value) {
+    return JSON.stringify(value).replace(/[\u2028\u2029]/g, (c) => c === '\u2028' ? '\\u2028' : '\\u2029');
+}
+//# sourceMappingURL=quickjs-engine.js.map

package/node_modules/@noodle-borg/compute/dist/quickjs-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-engine.js","sourceRoot":"","sources":["../src/quickjs-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,eAAe,EAKf,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,YAAY,EAKZ,YAAY,GACb,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,oBAAoB;IACtB,IAAI,GAAG,aAAsB,CAAC;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,CAAgC;IAErC,oGAAoG;IACpG,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,cAAc,CAAC,MAAc;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAqB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,mCAAmC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,KAAK,KAAK,MAAM,UAAU,EAAE,CAAC;QAClC,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;CACF;AAED,wGAAwG;AACxG,MAAM,sBAAsB;IACjB,KAAK,CAAoB;IACzB,OAAO,CAAS;IAEzB,YAAY,IAAuB,EAAE,MAAc;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAc,EAAE,MAAqB,EAAE,IAAkB;QACpE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAE1D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACxC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,OAAO,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAEzF,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAEtD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YACrE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,oFAAoF;IACtF,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,KAAc,EACd,MAAqB,EACrB,IAAiB;QAEjB,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,OAAO,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAEzF,IAAI,CAAC;YACH,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CACxC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EACvC,WAAW,CACZ,CAAC;YAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3D,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACzD,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;YACvE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,GAAG,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC1E,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAuC,EACvC,OAA4B;IAE5B,OAAO,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAc,EAAE,KAAc,EAAE,WAAW,GAAG,KAAK;IACvE,MAAM,oBAAoB,GAAG,WAAW;QACtC,CAAC,CAAC;;;;;;;;;;;;CAYL;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,oCAAoC;QACjE,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG;;;EAGnB,oBAAoB;mBACH,MAAM;4GACmF,CAAC;IAC3G,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,GAAG,UAAU;4BACI,WAAW;;;IAGnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,UAAU;uCACiB,WAAW;8CACJ,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CACtB,OAA4B,EAC5B,IAAiB,EACjB,MAAqB;IAErB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,EAAE,GAAG,OAAO,CAAC,qBAAqB,CACtC,qBAAqB,EACrB,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,KAAK,IAA2B,EAAE;YACjD,IAAI,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACjC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,2BAA2B;qBACrC;iBACF,CAAC;YACJ,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;YAEX,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,EAAE;iBACjF,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE;iBACtF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAA+B,CAAC;iBACxE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,KAA8D,CAAC;gBAC3E,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB;wBAClE,OAAO,EACL,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE;4BACnD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;4BAC3B,CAAC,CAAC,kBAAkB;wBACxB,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5D;iBACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CACF,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC3D,EAAE,CAAC,OAAO,EAAE,CAAC;AACf,CAAC;AASD,6FAA6F;AAC7F,SAAS,UAAU,CACjB,OAAuB,EACvB,KAAoB,EACpB,cAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;QACrD,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,aAAa,CACpB,OAAuB,EACvB,MAAqB;IAErB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CAAC,SAA4C;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnF,OAAO,IAAI,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,kBAAkB,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvE,OAAO,IAAI,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,+FAA+F;AAC/F,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5D,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACvC,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/compute/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@noodle-borg/compute",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@noodle-borg/compiler": "0.0.0",
+    "@noodle-borg/runtime": "0.0.0",
+    "quickjs-emscripten": "^0.32.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0"
+  }
+}

package/node_modules/@noodle-borg/connector-defs/dist/compile.d.ts

@@ -0,0 +1,46 @@
+import { type CatalogConnector } from '@noodle-borg/compiler';
+import { type Connector } from '@noodle-borg/runtime';
+/** A connector-definition compile error (structurally compatible with the compiler's `CompileError`). */
+export interface ConnectorCompileError {
+    readonly code: string;
+    readonly path: string;
+    readonly message: string;
+}
+/**
+ * A binding from a connector operation to the *named* secret its auth scheme needs. It carries the
+ * reference only — never a value. The deploy plane joins these with out-of-band secret values to build a
+ * credential broker; the runtime and the operation signature never see auth or secret refs.
+ */
+export interface SecretBinding {
+    readonly connectorId: string;
+    readonly connectorVersion: string;
+    /** `undefined` => the connector-level default auth (applies to any op without its own scheme). */
+    readonly operation?: string;
+    readonly secretRef: string;
+}
+export type CompileConnectorsResult = {
+    readonly ok: true;
+    readonly catalog: CatalogConnector[];
+    readonly connectors: Connector[];
+    /** Secret references declared by connector auth schemes; empty when no connector declares auth. */
+    readonly secretBindings: SecretBinding[];
+} | {
+    readonly ok: false;
+    readonly errors: ConnectorCompileError[];
+};
+/**
+ * Compile a declarative connector-catalog document (YAML or JSON) into:
+ *   - `catalog`: `CatalogConnector[]` — operation signatures fed to the manifest compiler's catalog so
+ *     signature-hash resolution is unchanged; and
+ *   - `connectors`: `Connector[]` — the runnable connectors. An **HTTP** connector maps request/response
+ *     with the declared `${...}` expressions; a **compute** connector runs sandboxed JavaScript through
+ *     `@noodle-borg/compute` (ADR 0004 / ADR 0014). Both are plain `Connector`s, so the runtime resolves
+ *     and invokes them identically; and
+ *   - `secretBindings`: the named secret references declared by HTTP connector `auth` schemes (ADR 0015).
+ *     They carry references only — never values — for the deploy plane to join with out-of-band secrets.
+ *
+ * A compute connector may call declared catalog operations only through the runtime-supplied host ABI
+ * ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md) `callOperation`).
+ */
+export declare function compileConnectors(source: string): CompileConnectorsResult;
+//# sourceMappingURL=compile.d.ts.map

package/node_modules/@noodle-borg/connector-defs/dist/compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,gBAAgB,EAOtB,MAAM,uBAAuB,CAAC;AAc/B,OAAO,EAAE,KAAK,SAAS,EAAiC,MAAM,sBAAsB,CAAC;AAWrF,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;IACjC,mGAAmG;IACnG,QAAQ,CAAC,cAAc,EAAE,aAAa,EAAE,CAAC;CAC1C,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAA;CAAE,CAAC;AAKrE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,CA0CzE"}

package/node_modules/@noodle-borg/connector-defs/dist/compile.js

@@ -0,0 +1,289 @@
+import { computeSignatureHash, parseValue, } from '@noodle-borg/compiler';
+import { CodeConnector, DEFAULT_LIMITS, QuickJsComputeEngine, } from '@noodle-borg/compute';
+import { HttpConnector, } from '@noodle-borg/connector-http';
+import { evaluateValue } from '@noodle-borg/runtime';
+import { parse as parseYaml } from 'yaml';
+import { connectorFileSchema } from './schema.js';
+const REQUEST_ROOTS = new Set(['args']);
+const RESPONSE_ROOTS = new Set(['args', 'response']);
+/**
+ * Compile a declarative connector-catalog document (YAML or JSON) into:
+ *   - `catalog`: `CatalogConnector[]` — operation signatures fed to the manifest compiler's catalog so
+ *     signature-hash resolution is unchanged; and
+ *   - `connectors`: `Connector[]` — the runnable connectors. An **HTTP** connector maps request/response
+ *     with the declared `${...}` expressions; a **compute** connector runs sandboxed JavaScript through
+ *     `@noodle-borg/compute` (ADR 0004 / ADR 0014). Both are plain `Connector`s, so the runtime resolves
+ *     and invokes them identically; and
+ *   - `secretBindings`: the named secret references declared by HTTP connector `auth` schemes (ADR 0015).
+ *     They carry references only — never values — for the deploy plane to join with out-of-band secrets.
+ *
+ * A compute connector may call declared catalog operations only through the runtime-supplied host ABI
+ * ([ADR 0004](../../../docs/decisions/0004-code-as-sandboxed-connector.md) `callOperation`).
+ */
+export function compileConnectors(source) {
+    let raw;
+    try {
+        raw = parseYaml(source);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            errors: [{ code: 'invalid_yaml', path: '', message: error.message }],
+        };
+    }
+    const parsed = connectorFileSchema.safeParse(raw);
+    if (!parsed.success) {
+        return {
+            ok: false,
+            errors: parsed.error.issues.map((issue) => ({
+                code: 'invalid_connector',
+                path: issue.path.join('.'),
+                message: issue.message,
+            })),
+        };
+    }
+    const errors = [];
+    const catalog = [];
+    const connectors = [];
+    const secretBindings = [];
+    const targets = buildTargetIndex(parsed.data.connectors, errors);
+    // One shared sandbox engine per compile: every compute operation registers its source here, keyed by
+    // content digest, so the CodeConnectors built below can resolve their modules at invoke time.
+    const computeEngine = new QuickJsComputeEngine();
+    for (const def of parsed.data.connectors) {
+        if ('http' in def) {
+            compileHttpConnector(def, errors, catalog, connectors, secretBindings);
+        }
+        else {
+            compileComputeConnector(def, computeEngine, targets, errors, catalog, connectors);
+        }
+    }
+    if (errors.length > 0)
+        return { ok: false, errors };
+    return { ok: true, catalog, connectors, secretBindings };
+}
+/** Compile one HTTP connector: signatures into the catalog, a runnable `HttpConnector` with `${...}` mapping. */
+function compileHttpConnector(def, errors, catalog, connectors, secretBindings) {
+    const operations = {};
+    const signatures = {};
+    for (const [opName, op] of Object.entries(def.operations)) {
+        const base = `connectors.${def.id}.operations.${opName}`;
+        const signature = toSignature(op.type, op.input, op.output);
+        signatures[opName] = signature;
+        const requestAst = op.request
+            ? compileExprMap(op.request, REQUEST_ROOTS, `${base}.request`, errors)
+            : undefined;
+        const responseAst = op.response
+            ? compileExprMap(op.response, RESPONSE_ROOTS, `${base}.response`, errors)
+            : undefined;
+        operations[opName] = buildOperation(op, signature, requestAst, responseAst);
+        // Per-operation auth declares its own secret reference (overrides any connector-level default).
+        if (op.auth) {
+            secretBindings.push({
+                connectorId: def.id,
+                connectorVersion: def.version,
+                operation: opName,
+                secretRef: op.auth.secret,
+            });
+        }
+    }
+    catalog.push({
+        id: def.id,
+        version: def.version,
+        kind: def.kind ?? 'custom',
+        operations: signatures,
+    });
+    // Connector-level default auth binds every operation that doesn't carry its own scheme.
+    if (def.http.auth) {
+        secretBindings.push({
+            connectorId: def.id,
+            connectorVersion: def.version,
+            secretRef: def.http.auth.secret,
+        });
+    }
+    const config = {
+        id: def.id,
+        version: def.version,
+        baseUrl: def.http.baseUrl,
+        ...(def.http.allowedOrigins ? { allowedOrigins: def.http.allowedOrigins } : {}),
+        ...(def.http.auth ? { auth: toAuthScheme(def.http.auth) } : {}),
+        operations,
+    };
+    connectors.push(new HttpConnector(config));
+}
+/**
+ * Strip a declarative auth def down to the runtime `HttpAuthScheme` the connector applies — dropping the
+ * `secret` *reference*. The reference lives only in the {@link SecretBinding} table; the runtime scheme
+ * carries the shape (bearer / api-key header), and the broker supplies the token at invoke time.
+ */
+function toAuthScheme(auth) {
+    return auth.kind === 'bearer' ? { kind: 'bearer' } : { kind: 'apiKey', header: auth.header };
+}
+/**
+ * Compile one compute connector: register each operation's code with the shared sandbox engine (producing
+ * a content-addressed module) and emit a `CodeConnector`. The catalog signatures are identical to what
+ * `CodeConnector.signature()` reports, so signature-hash parity (ADR 0002) holds; the module digest and
+ * limits never enter the signature.
+ */
+function compileComputeConnector(def, engine, targets, errors, catalog, connectors) {
+    const signatures = {};
+    const operations = {};
+    for (const [opName, op] of Object.entries(def.operations)) {
+        const base = `connectors.${def.id}.operations.${opName}`;
+        const signature = toSignature(op.type, op.input, op.output);
+        signatures[opName] = signature;
+        const limits = {
+            timeoutMs: op.limits?.timeoutMs ?? DEFAULT_LIMITS.timeoutMs,
+            memoryBytes: op.limits?.memoryBytes ?? DEFAULT_LIMITS.memoryBytes,
+            maxOutputBytes: op.limits?.maxOutputBytes ?? DEFAULT_LIMITS.maxOutputBytes,
+            maxHostCalls: op.limits?.maxHostCalls ?? DEFAULT_LIMITS.maxHostCalls,
+        };
+        const calls = compileCalls(op, targets, `${base}.calls`, errors);
+        operations[opName] = {
+            signature,
+            module: engine.registerSource(op.code),
+            limits,
+            ...(calls ? { calls } : {}),
+        };
+    }
+    catalog.push({
+        id: def.id,
+        version: def.version,
+        kind: def.kind ?? 'custom',
+        operations: signatures,
+    });
+    connectors.push(new CodeConnector({ id: def.id, version: def.version, engine, operations }));
+}
+function buildTargetIndex(defs, errors) {
+    const byId = new Map();
+    for (const def of defs) {
+        const signatures = {};
+        for (const [opName, op] of Object.entries(def.operations)) {
+            signatures[opName] = toSignature(op.type, op.input, op.output);
+        }
+        if (byId.has(def.id)) {
+            byId.set(def.id, 'ambiguous');
+            errors.push({
+                code: 'duplicate_connector_id',
+                path: `connectors.${def.id}`,
+                message: `connector id "${def.id}" appears more than once; compute call targets would be ambiguous`,
+            });
+        }
+        else {
+            byId.set(def.id, { id: def.id, version: def.version, operations: signatures });
+        }
+    }
+    return { byId };
+}
+function compileCalls(op, targets, prefix, errors) {
+    if (!op.calls)
+        return undefined;
+    const calls = {};
+    for (const [localName, target] of Object.entries(op.calls)) {
+        if (!/^[a-z0-9_]+$/.test(localName)) {
+            errors.push({
+                code: 'invalid_call_name',
+                path: `${prefix}.${localName}`,
+                message: `call name "${localName}" must use lowercase letters, numbers, and underscores`,
+            });
+            continue;
+        }
+        const parsed = parseCallTarget(target);
+        if (!parsed) {
+            errors.push({
+                code: 'invalid_call_target',
+                path: `${prefix}.${localName}`,
+                message: `call target "${target}" must be "<connectorId>.<operation>"`,
+            });
+            continue;
+        }
+        const entry = targets.byId.get(parsed.connectorId);
+        if (!entry) {
+            errors.push({
+                code: 'unknown_call_connector',
+                path: `${prefix}.${localName}`,
+                message: `call target connector "${parsed.connectorId}" is not declared`,
+            });
+            continue;
+        }
+        if (entry === 'ambiguous') {
+            errors.push({
+                code: 'ambiguous_call_connector',
+                path: `${prefix}.${localName}`,
+                message: `call target connector "${parsed.connectorId}" is ambiguous`,
+            });
+            continue;
+        }
+        const signature = entry.operations[parsed.operation];
+        if (!signature) {
+            errors.push({
+                code: 'unknown_call_operation',
+                path: `${prefix}.${localName}`,
+                message: `call target operation "${parsed.operation}" is not declared on "${parsed.connectorId}"`,
+            });
+            continue;
+        }
+        calls[localName] = {
+            resolved: true,
+            alias: parsed.connectorId,
+            connectorId: entry.id,
+            connectorVersion: entry.version,
+            operation: parsed.operation,
+            signatureHash: computeSignatureHash(parsed.operation, signature),
+        };
+    }
+    return Object.keys(calls).length > 0 ? calls : undefined;
+}
+function parseCallTarget(target) {
+    const parts = target.split('.');
+    if (parts.length !== 2 || parts[0] === '' || parts[1] === '')
+        return null;
+    return { connectorId: parts[0], operation: parts[1] };
+}
+/** Build an `OperationSignature` from the declared type and input/output field maps. */
+function toSignature(type, input, output) {
+    return {
+        type,
+        input: (input ?? {}),
+        output: (output ?? {}),
+    };
+}
+/** Build a runnable `HttpOperation` whose body/response mapping evaluate the compiled expression ASTs. */
+function buildOperation(op, signature, requestAst, responseAst) {
+    return {
+        method: op.method ?? 'GET',
+        path: op.path,
+        ...(op.query ? { query: op.query } : {}),
+        signature,
+        ...(op.auth ? { auth: toAuthScheme(op.auth) } : {}),
+        ...(requestAst ? { body: (args) => evalMap(requestAst, { args }) } : {}),
+        ...(responseAst
+            ? { mapResponse: (json, args) => evalMap(responseAst, { args, response: json }) }
+            : {}),
+    };
+}
+/** Parse each field of a mapping into an expression AST under the given roots; collect parse errors. */
+function compileExprMap(map, roots, prefix, errors) {
+    const out = {};
+    for (const [field, value] of Object.entries(map)) {
+        const result = parseValue(value, `${prefix}.${field}`, roots);
+        if (result.errors.length > 0) {
+            errors.push(...result.errors.map((e) => ({ code: e.code, path: e.path, message: e.message })));
+        }
+        else {
+            out[field] = result.node;
+        }
+    }
+    return out;
+}
+/** Evaluate every value in a compiled expression map against the scope; omit `undefined` results. */
+function evalMap(map, scope) {
+    const out = {};
+    for (const [field, node] of Object.entries(map)) {
+        const value = evaluateValue(node, scope, field);
+        if (value !== undefined)
+            out[field] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=compile.js.map