noodleseed-cli 0.1.4

package/node_modules/@noodle-borg/runtime/dist/eval/evaluate.d.ts

@@ -0,0 +1,39 @@
+import type { CondNode, ExprNode } from '@noodle-borg/compiler';
+/**
+ * The data an expression may read, keyed by root name. Manifest expressions are evaluated with
+ * `{ input, steps }` (`steps` is `{}` for single-operation fulfilment); other contexts pass their own
+ * roots (e.g. connector request/response mapping uses `{ args }` / `{ args, response }`). Only the roots
+ * present here are reachable — an expression can never reach process environment, filesystem, network,
+ * globals, secrets, or inbound tokens (docs/SPEC.md "Expression language").
+ */
+export type EvalScope = Readonly<Record<string, unknown>>;
+/** Reasons evaluation fails. The path locates the offending expression without leaking values. */
+export type ExpressionEvalErrorCode = 'output_too_large' | 'invalid_node';
+/**
+ * Raised when AST evaluation cannot complete. Carries a stable code and the expression's field
+ * path; never the resolved value (docs/SPEC.md: "identify the expression path without leaking
+ * sensitive values").
+ */
+export declare class ExpressionEvalError extends Error {
+    readonly code: ExpressionEvalErrorCode;
+    readonly path: string | undefined;
+    constructor(code: ExpressionEvalErrorCode, message: string, path?: string);
+}
+/**
+ * Evaluate a value expression against the scope. Walks the AST the compiler already produced — it
+ * never parses strings and never uses `eval`/`Function` (docs/SPEC.md "Expression language").
+ *
+ * - `literal` returns its value verbatim (type preserved).
+ * - `path` resolves `root` + segments; a missing or non-indexable segment yields `undefined`.
+ * - `template` concatenates its parts into a string (interpolation always produces a string).
+ * - `array` / `object` build the structured value, evaluating each item/field expression; object
+ *   entries whose value resolves to `undefined` are omitted (mirroring top-level mapping behavior).
+ */
+export declare function evaluateValue(node: ExprNode, scope: EvalScope, path?: string): unknown;
+/**
+ * Evaluate a boolean condition (a step `if`) against the scope. Equality is strict; logical `and`
+ * and `or` short-circuit; `truthy` applies JS truthiness to a resolved path. Built for the flow
+ * slice; single-operation fulfilment carries no conditions.
+ */
+export declare function evaluateCondition(node: CondNode, scope: EvalScope, path?: string): boolean;
+//# sourceMappingURL=evaluate.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/eval/evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../src/eval/evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAyB,MAAM,uBAAuB,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1D,kGAAkG;AAClG,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,GAAG,cAAc,CAAC;AAE1E;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEtB,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAM1E;AAKD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAqCtF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAsB1F"}

package/node_modules/@noodle-borg/runtime/dist/eval/evaluate.js

@@ -0,0 +1,117 @@
+/**
+ * Raised when AST evaluation cannot complete. Carries a stable code and the expression's field
+ * path; never the resolved value (docs/SPEC.md: "identify the expression path without leaking
+ * sensitive values").
+ */
+export class ExpressionEvalError extends Error {
+    code;
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = 'ExpressionEvalError';
+        this.code = code;
+        this.path = path;
+    }
+}
+/** Upper bound on a single interpolated string, guarding against runaway template output. */
+const MAX_STRING_LENGTH = 1 << 20; // 1 MiB
+/**
+ * Evaluate a value expression against the scope. Walks the AST the compiler already produced — it
+ * never parses strings and never uses `eval`/`Function` (docs/SPEC.md "Expression language").
+ *
+ * - `literal` returns its value verbatim (type preserved).
+ * - `path` resolves `root` + segments; a missing or non-indexable segment yields `undefined`.
+ * - `template` concatenates its parts into a string (interpolation always produces a string).
+ * - `array` / `object` build the structured value, evaluating each item/field expression; object
+ *   entries whose value resolves to `undefined` are omitted (mirroring top-level mapping behavior).
+ */
+export function evaluateValue(node, scope, path) {
+    switch (node.kind) {
+        case 'literal':
+            return node.value;
+        case 'path':
+            return resolvePath(node, scope);
+        case 'template': {
+            let out = '';
+            for (const part of node.parts) {
+                out += part.kind === 'text' ? part.value : stringify(evaluateValue(part, scope, path));
+                if (out.length > MAX_STRING_LENGTH) {
+                    throw new ExpressionEvalError('output_too_large', 'template output exceeds the size limit', path);
+                }
+            }
+            return out;
+        }
+        case 'array':
+            return node.items.map((item) => evaluateValue(item, scope, path));
+        case 'object': {
+            const out = {};
+            for (const entry of node.entries) {
+                const value = evaluateValue(entry.value, scope, path);
+                if (value !== undefined)
+                    out[entry.key] = value;
+            }
+            return out;
+        }
+        case 'coalesce': {
+            const left = evaluateValue(node.left, scope, path);
+            return left === null || left === undefined ? evaluateValue(node.right, scope, path) : left;
+        }
+        default:
+            throw new ExpressionEvalError('invalid_node', `unsupported expression node`, path);
+    }
+}
+/**
+ * Evaluate a boolean condition (a step `if`) against the scope. Equality is strict; logical `and`
+ * and `or` short-circuit; `truthy` applies JS truthiness to a resolved path. Built for the flow
+ * slice; single-operation fulfilment carries no conditions.
+ */
+export function evaluateCondition(node, scope, path) {
+    if (node.kind === 'truthy') {
+        return Boolean(resolvePath(node.operand, scope));
+    }
+    switch (node.op) {
+        case 'eq':
+            return evaluateValue(node.left, scope, path) === evaluateValue(node.right, scope, path);
+        case 'neq':
+            return evaluateValue(node.left, scope, path) !== evaluateValue(node.right, scope, path);
+        case 'and':
+            return (evaluateCondition(node.left, scope, path) && evaluateCondition(node.right, scope, path));
+        case 'or':
+            return (evaluateCondition(node.left, scope, path) || evaluateCondition(node.right, scope, path));
+        case 'not':
+            return !evaluateCondition(node.operand, scope, path);
+        default:
+            throw new ExpressionEvalError('invalid_node', 'unsupported condition node', path);
+    }
+}
+/** Resolve a path expression to its value, or `undefined` if any segment is missing. */
+function resolvePath(node, scope) {
+    let current = scope[node.root];
+    for (const segment of node.segments) {
+        if (current === null || current === undefined)
+            return undefined;
+        current = step(current, segment);
+    }
+    return current;
+}
+/** Read one path segment. Uses own-property access only, so no prototype chain is reachable. */
+function step(current, segment) {
+    if (segment.kind === 'index') {
+        return Array.isArray(current) ? current[segment.value] : undefined;
+    }
+    if (current === null || typeof current !== 'object' || !Object.hasOwn(current, segment.name)) {
+        return undefined;
+    }
+    return current[segment.name];
+}
+/** Coerce an interpolated value to a string deterministically. */
+function stringify(value) {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'object')
+        return JSON.stringify(value);
+    return String(value);
+}
+//# sourceMappingURL=evaluate.js.map

package/node_modules/@noodle-borg/runtime/dist/eval/evaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.js","sourceRoot":"","sources":["../../src/eval/evaluate.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAA0B;IAC9B,IAAI,CAAqB;IAElC,YAAY,IAA6B,EAAE,OAAe,EAAE,IAAa;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,6FAA6F;AAC7F,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ;AAE3C;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,KAAgB,EAAE,IAAa;IAC3E,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClC,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBACvF,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;oBACnC,MAAM,IAAI,mBAAmB,CAC3B,kBAAkB,EAClB,wCAAwC,EACxC,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,KAAK,KAAK,SAAS;oBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAClD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACnD,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,CAAC;QACD;YACE,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,6BAA6B,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,KAAgB,EAAE,IAAa;IAC/E,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1F,KAAK,KAAK;YACR,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1F,KAAK,KAAK;YACR,OAAO,CACL,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CACxF,CAAC;QACJ,KAAK,IAAI;YACP,OAAO,CACL,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CACxF,CAAC;QACJ,KAAK,KAAK;YACR,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD;YACE,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,IAAc,EAAE,KAAgB;IACnD,IAAI,OAAO,GAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gGAAgG;AAChG,SAAS,IAAI,CAAC,OAAgB,EAAE,OAAoB;IAClD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAQ,OAAmC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,kEAAkE;AAClE,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/execute.d.ts

@@ -0,0 +1,47 @@
+import { type RuntimeArtifact } from '@noodle-borg/compiler';
+import type { CredentialBroker } from './broker/types.js';
+import type { ConnectorRegistry } from './connector/types.js';
+import type { PolicyGate } from './policy/types.js';
+import type { ExecutionError, ExecutionResult } from './result.js';
+/**
+ * The collaborators the runtime needs to fulfil a tool call. Note there is deliberately no inbound
+ * token here: the execution plane never sees or forwards an MCP/OAuth bearer token — downstream
+ * credentials come only from the broker (docs/SPEC.md "Auth And Identity";
+ * [ADR 0005](../../../docs/decisions/0005-runtime-execution-boundary.md)).
+ */
+export interface ExecuteDeps {
+    readonly connectors: ConnectorRegistry;
+    readonly broker: CredentialBroker;
+    readonly policy?: PolicyGate;
+}
+/**
+ * Execute a tool call against a resolved runtime artifact.
+ *
+ * Phase 1 executes single-operation fulfilment and **non-suspending flows** (ordered `operation`
+ * and `map` steps with `if` skipping). A flow containing an `elicit` step would suspend, which is a
+ * later slice — such a flow is declined up front (`unsupported_fulfilment`) rather than run partway
+ * and abandoned. `input` is assumed already validated against the tool's input schema by the
+ * protocol adapter; the runtime independently validates evaluated connector arguments against the
+ * operation signature as defense in depth.
+ */
+export declare function executeTool(artifact: RuntimeArtifact, toolName: string, input: unknown, deps: ExecuteDeps): Promise<ExecutionResult>;
+/**
+ * Execute a resource read against a resolved artifact. `input` is the resource's variable scope — the
+ * variables extracted from a templated URI, or `{}` for a fixed resource (the protocol adapter does the
+ * URI match and passes them here). Resources reuse the exact tool fulfilment engine; the protocol layer
+ * maps the returned value to MCP resource `contents`.
+ */
+export declare function executeResource(artifact: RuntimeArtifact, resourceName: string, input: unknown, deps: ExecuteDeps): Promise<ExecutionResult>;
+/**
+ * Execute a prompt against a resolved artifact. `args` is the supplied prompt-arguments map (the
+ * fulfilment's `input` scope). Prompts reuse the tool fulfilment engine; the protocol layer maps the
+ * returned value to MCP prompt `messages`.
+ */
+export declare function executePrompt(artifact: RuntimeArtifact, promptName: string, args: unknown, deps: ExecuteDeps): Promise<ExecutionResult>;
+/** Internal control-flow error used to carry normalized runtime failures into host-call callbacks. */
+export declare class HostCallError extends Error {
+    readonly code: ExecutionError['code'];
+    readonly path: string | undefined;
+    constructor(code: ExecutionError['code'], message: string, path?: string);
+}
+//# sourceMappingURL=execute.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAqB,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAQjF,OAAO,KAAK,EAAiB,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAKnE;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,eAAe,EACzB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,eAAe,CAAC,CAS1B;AAqPD,sGAAsG;AACtG,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEtB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAMzE"}

package/node_modules/@noodle-borg/runtime/dist/execute.js

@@ -0,0 +1,297 @@
+import { computeSignatureHash, } from '@noodle-borg/compiler';
+import { ExpressionEvalError, evaluateCondition, evaluateValue, } from './eval/evaluate.js';
+import { AllowAllPolicy } from './policy/allow-all.js';
+/**
+ * Execute a tool call against a resolved runtime artifact.
+ *
+ * Phase 1 executes single-operation fulfilment and **non-suspending flows** (ordered `operation`
+ * and `map` steps with `if` skipping). A flow containing an `elicit` step would suspend, which is a
+ * later slice — such a flow is declined up front (`unsupported_fulfilment`) rather than run partway
+ * and abandoned. `input` is assumed already validated against the tool's input schema by the
+ * protocol adapter; the runtime independently validates evaluated connector arguments against the
+ * operation signature as defense in depth.
+ */
+export async function executeTool(artifact, toolName, input, deps) {
+    if (artifact.resolution !== 'resolved') {
+        return fail('shape_only_artifact', 'runtime refuses to serve a shape-only artifact');
+    }
+    const tool = artifact.tools.find((t) => t.name === toolName);
+    if (!tool)
+        return fail('unknown_tool', `no tool named "${toolName}"`);
+    return runFulfilment(tool.fulfilment, input, toolName, deps);
+}
+/**
+ * Execute a resource read against a resolved artifact. `input` is the resource's variable scope — the
+ * variables extracted from a templated URI, or `{}` for a fixed resource (the protocol adapter does the
+ * URI match and passes them here). Resources reuse the exact tool fulfilment engine; the protocol layer
+ * maps the returned value to MCP resource `contents`.
+ */
+export async function executeResource(artifact, resourceName, input, deps) {
+    if (artifact.resolution !== 'resolved') {
+        return fail('shape_only_artifact', 'runtime refuses to serve a shape-only artifact');
+    }
+    const resource = artifact.resources?.find((r) => r.name === resourceName);
+    if (!resource)
+        return fail('unknown_resource', `no resource named "${resourceName}"`);
+    return runFulfilment(resource.fulfilment, input, resourceName, deps);
+}
+/**
+ * Execute a prompt against a resolved artifact. `args` is the supplied prompt-arguments map (the
+ * fulfilment's `input` scope). Prompts reuse the tool fulfilment engine; the protocol layer maps the
+ * returned value to MCP prompt `messages`.
+ */
+export async function executePrompt(artifact, promptName, args, deps) {
+    if (artifact.resolution !== 'resolved') {
+        return fail('shape_only_artifact', 'runtime refuses to serve a shape-only artifact');
+    }
+    const prompt = artifact.prompts?.find((p) => p.name === promptName);
+    if (!prompt)
+        return fail('unknown_prompt', `no prompt named "${promptName}"`);
+    return runFulfilment(prompt.fulfilment, args, promptName, deps);
+}
+/**
+ * Run a normalized fulfilment (single operation or non-suspending flow) against an `input` scope. Shared
+ * by {@link executeTool}, {@link executeResource}, and {@link executePrompt}: the execution semantics are
+ * identical across all three primitives; only where `input` comes from and how the output is mapped differ
+ * (the latter at the protocol layer). `label` names the invoker for the policy context.
+ */
+async function runFulfilment(fulfilment, input, label, deps) {
+    const policy = deps.policy ?? new AllowAllPolicy();
+    const host = createHost(label, deps, policy);
+    if (fulfilment.kind === 'operation') {
+        const { operationRef, args } = fulfilment;
+        return runOperation(operationRef, args, { input, steps: {} }, label, deps, policy, host, 'args', 'output');
+    }
+    return runFlow(fulfilment, input, label, deps, policy, host);
+}
+/**
+ * Execute a non-suspending flow: run each eligible step in declared order, thread step outputs into
+ * the `steps` scope, then evaluate the `output` mapping. A flow with an `elicit` step is declined
+ * before any step runs, so a flow that cannot complete this phase produces no side effect.
+ */
+async function runFlow(flow, input, toolName, deps, policy, host) {
+    if (flow.steps.some((step) => step.kind === 'elicit')) {
+        return fail('unsupported_fulfilment', 'flow fulfilment with elicitation is not yet executable');
+    }
+    const steps = {};
+    try {
+        for (const step of flow.steps) {
+            const scope = { input, steps };
+            if (step.if && !evaluateCondition(step.if, scope, `steps.${step.id}.if`)) {
+                continue; // a false `if` marks the step skipped (it produces no output)
+            }
+            if (step.kind === 'operation') {
+                const result = await runOperation(step.operationRef, step.args, scope, toolName, deps, policy, host, `steps.${step.id}.args`, `steps.${step.id}.output`);
+                if (!result.ok)
+                    return result;
+                steps[step.id] = result.output;
+            }
+            else if (step.kind === 'map') {
+                steps[step.id] = evalExprMap(step.value, scope, `steps.${step.id}`);
+            }
+            else {
+                // Unreachable: elicit steps are declined above. Defensive only.
+                return fail('unsupported_fulfilment', `flow step "${step.id}" is not executable`);
+            }
+        }
+        return { ok: true, output: evalExprMap(flow.output, { input, steps }, 'output') };
+    }
+    catch (err) {
+        if (err instanceof ExpressionEvalError)
+            return fail('expression_error', err.message, err.path);
+        throw err;
+    }
+}
+/**
+ * Run one connector operation end to end: resolve the connector, verify the signature has not
+ * drifted, gate with policy, evaluate + validate arguments, mint a downstream credential, invoke,
+ * redact, and validate the output. Shared by single-operation fulfilment and flow operation steps.
+ */
+async function runOperation(ref, argsAst, scope, toolName, deps, policy, host, argsPath, outputPath) {
+    if (ref.resolved !== true) {
+        return fail('shape_only_artifact', 'operation reference is unresolved');
+    }
+    const connector = deps.connectors.resolve(ref);
+    if (!connector) {
+        return fail('connector_unavailable', `no connector for ${ref.connectorId}@${ref.connectorVersion}`);
+    }
+    const signature = connector.signature(ref.operation);
+    const drift = checkSignature(ref, signature);
+    if (drift)
+        return { ok: false, error: drift };
+    // `checkSignature` guarantees a signature when it returns no error.
+    const sig = signature;
+    let evaluated;
+    try {
+        evaluated = evalExprMap(argsAst, scope, argsPath);
+    }
+    catch (err) {
+        if (err instanceof ExpressionEvalError)
+            return fail('expression_error', err.message, err.path);
+        throw err;
+    }
+    const argError = validateFields(evaluated, sig.input, argsPath, 'arg_invalid', 'argument');
+    if (argError)
+        return { ok: false, error: argError };
+    return invokeOperation(ref, evaluated, sig, toolName, deps, policy, host, outputPath);
+}
+/**
+ * Invoke a resolved connector operation with already-evaluated arguments. This is the shared path for
+ * manifest operation steps and host-mediated sandbox calls.
+ */
+async function invokeOperation(ref, args, sig, toolName, deps, policy, host, outputPath) {
+    const connector = deps.connectors.resolve(ref);
+    if (!connector) {
+        return fail('connector_unavailable', `no connector for ${ref.connectorId}@${ref.connectorVersion}`);
+    }
+    const context = {
+        toolName,
+        connectorId: ref.connectorId,
+        connectorVersion: ref.connectorVersion,
+        operation: ref.operation,
+    };
+    let decision;
+    try {
+        decision = await policy.before(context);
+    }
+    catch {
+        return fail('policy_error', 'policy before hook failed');
+    }
+    if (!decision.allow)
+        return fail('policy_denied', decision.reason);
+    let credential;
+    try {
+        credential = await deps.broker.getCredential({
+            connectorId: ref.connectorId,
+            connectorVersion: ref.connectorVersion,
+            operation: ref.operation,
+        });
+    }
+    catch {
+        return fail('credential_unavailable', `credential unavailable for operation "${ref.operation}"`);
+    }
+    let output;
+    try {
+        output = await connector.invoke({ operation: ref.operation, args, credential, host });
+    }
+    catch {
+        // Normalize connector failures; never surface backend internals or credentials.
+        return fail('connector_error', `connector failed for operation "${ref.operation}"`);
+    }
+    let redacted;
+    try {
+        redacted = await policy.after(context, output);
+    }
+    catch {
+        return fail('policy_error', 'policy after hook failed');
+    }
+    const outputError = validateFields(redacted, sig.output, outputPath, 'output_invalid', 'output field');
+    if (outputError)
+        return { ok: false, error: outputError };
+    return { ok: true, output: redacted };
+}
+function createHost(toolName, deps, policy) {
+    return {
+        async callOperation(ref, args, path) {
+            const connector = deps.connectors.resolve(ref);
+            if (!connector)
+                throw new HostCallError('connector_unavailable', 'connector unavailable');
+            const signature = connector.signature(ref.operation);
+            const drift = checkSignature(ref, signature);
+            if (drift)
+                throw new HostCallError(drift.code, drift.message, drift.path);
+            const sig = signature;
+            const argError = validateFields(args, sig.input, `${path}.args`, 'arg_invalid', 'argument');
+            if (argError)
+                throw new HostCallError(argError.code, argError.message, argError.path);
+            const result = await invokeOperation(ref, args, sig, toolName, deps, policy, this, `${path}.output`);
+            if (!result.ok) {
+                throw new HostCallError(result.error.code, result.error.message, result.error.path);
+            }
+            return result.output;
+        },
+    };
+}
+/** Internal control-flow error used to carry normalized runtime failures into host-call callbacks. */
+export class HostCallError extends Error {
+    code;
+    path;
+    constructor(code, message, path) {
+        super(message);
+        this.name = 'HostCallError';
+        this.code = code;
+        this.path = path;
+    }
+}
+/** Verify the connector's live signature matches the hash the artifact was compiled against. */
+function checkSignature(ref, signature) {
+    if (!signature) {
+        return {
+            code: 'signature_drift',
+            message: `connector has no operation "${ref.operation}"`,
+        };
+    }
+    const actual = computeSignatureHash(ref.operation, signature);
+    if (actual !== ref.signatureHash) {
+        return {
+            code: 'signature_drift',
+            message: `operation "${ref.operation}" signature has drifted from the compiled artifact`,
+        };
+    }
+    return null;
+}
+/** Evaluate every value in an expression map; omit any key that resolves to `undefined`. */
+function evalExprMap(map, scope, prefix) {
+    const out = {};
+    for (const [key, node] of Object.entries(map)) {
+        const value = evaluateValue(node, scope, `${prefix}.${key}`);
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+/** Validate a value against an operation field list: required presence + primitive type match. */
+function validateFields(value, fields, pathPrefix, code, noun) {
+    const isObject = value !== null && typeof value === 'object' && !Array.isArray(value);
+    if (!isObject && Object.keys(fields).length > 0) {
+        return { code, path: pathPrefix, message: `${noun} container must be a non-null object` };
+    }
+    const record = isObject ? value : {};
+    for (const [name, spec] of Object.entries(fields)) {
+        const present = Object.hasOwn(record, name) && record[name] !== undefined;
+        if (spec.required && !present) {
+            return { code, path: `${pathPrefix}.${name}`, message: `missing required ${noun} "${name}"` };
+        }
+        if (present && !fieldTypeMatches(record[name], spec.type)) {
+            return {
+                code,
+                path: `${pathPrefix}.${name}`,
+                message: `${noun} "${name}" expects ${spec.type}`,
+            };
+        }
+    }
+    return null;
+}
+/** Whether a runtime value satisfies a JSON Schema field type. Unknown types are not rejected. */
+function fieldTypeMatches(value, fieldType) {
+    switch (fieldType) {
+        case 'string':
+            return typeof value === 'string';
+        case 'number':
+            return typeof value === 'number';
+        case 'integer':
+            return typeof value === 'number' && Number.isInteger(value);
+        case 'boolean':
+            return typeof value === 'boolean';
+        case 'array':
+            return Array.isArray(value);
+        case 'object':
+            return value !== null && typeof value === 'object' && !Array.isArray(value);
+        default:
+            return true;
+    }
+}
+function fail(code, message, path) {
+    return { ok: false, error: path === undefined ? { code, message } : { code, message, path } };
+}
+//# sourceMappingURL=execute.js.map

package/node_modules/@noodle-borg/runtime/dist/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../src/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,GAMrB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAEL,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAmBvD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAyB,EACzB,QAAgB,EAChB,KAAc,EACd,IAAiB;IAEjB,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,cAAc,EAAE,kBAAkB,QAAQ,GAAG,CAAC,CAAC;IAEtE,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAyB,EACzB,YAAoB,EACpB,KAAc,EACd,IAAiB;IAEjB,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,sBAAsB,YAAY,GAAG,CAAC,CAAC;IAEtF,OAAO,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAyB,EACzB,UAAkB,EAClB,IAAa,EACb,IAAiB;IAEjB,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,oBAAoB,UAAU,GAAG,CAAC,CAAC;IAE9E,OAAO,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,UAA8B,EAC9B,KAAc,EACd,KAAa,EACb,IAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC;QAC1C,OAAO,YAAY,CACjB,YAAY,EACZ,IAAI,EACJ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EACpB,KAAK,EACL,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,MAAM,EACN,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,OAAO,CACpB,IAAoB,EACpB,KAAc,EACd,QAAgB,EAChB,IAAiB,EACjB,MAAkB,EAClB,IAAuB;IAEvB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,wBAAwB,EAAE,wDAAwD,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;gBACzE,SAAS,CAAC,8DAA8D;YAC1E,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,IAAI,EACT,KAAK,EACL,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,SAAS,IAAI,CAAC,EAAE,OAAO,EACvB,SAAS,IAAI,CAAC,EAAE,SAAS,CAC1B,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YACjC,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,gEAAgE;gBAChE,OAAO,IAAI,CAAC,wBAAwB,EAAE,cAAc,IAAI,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CACzB,GAA+C,EAC/C,OAAgB,EAChB,KAAgB,EAChB,QAAgB,EAChB,IAAiB,EACjB,MAAkB,EAClB,IAAuB,EACvB,QAAgB,EAChB,UAAkB;IAElB,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CACT,uBAAuB,EACvB,oBAAoB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9C,oEAAoE;IACpE,MAAM,GAAG,GAAG,SAA+B,CAAC;IAE5C,IAAI,SAAkC,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,mBAAmB;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;IAC3F,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAEpD,OAAO,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAyB,EACzB,IAAuC,EACvC,GAAuB,EACvB,QAAgB,EAChB,IAAiB,EACjB,MAAkB,EAClB,IAAuB,EACvB,UAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CACT,uBAAuB,EACvB,oBAAoB,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAkB;QAC7B,QAAQ;QACR,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;IAEF,IAAI,QAAmD,CAAC;IACxD,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEnE,IAAI,UAAkE,CAAC;IACvE,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAC3C,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;YACtC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CACT,wBAAwB,EACxB,yCAAyC,GAAG,CAAC,SAAS,GAAG,CAC1D,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAChC,QAAQ,EACR,GAAG,CAAC,MAAM,EACV,UAAU,EACV,gBAAgB,EAChB,cAAc,CACf,CAAC;IACF,IAAI,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAE1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,IAAiB,EAAE,MAAkB;IACzE,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;YAE1F,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7C,IAAI,KAAK;gBAAE,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,SAA+B,CAAC;YAE5C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,OAAO,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;YAC5F,IAAI,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEtF,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,EACH,IAAI,EACJ,GAAG,EACH,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,GAAG,IAAI,SAAS,CACjB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,sGAAsG;AACtG,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAyB;IAC7B,IAAI,CAAqB;IAElC,YAAY,IAA4B,EAAE,OAAe,EAAE,IAAa;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,gGAAgG;AAChG,SAAS,cAAc,CACrB,GAAyB,EACzB,SAAyC;IAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,+BAA+B,GAAG,CAAC,SAAS,GAAG;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,cAAc,GAAG,CAAC,SAAS,oDAAoD;SACzF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,SAAS,WAAW,CAAC,GAAY,EAAE,KAAgB,EAAE,MAAc;IACjE,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kGAAkG;AAClG,SAAS,cAAc,CACrB,KAAc,EACd,MAAgD,EAChD,UAAkB,EAClB,IAAsC,EACtC,IAAY;IAEZ,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,sCAAsC,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;QAC1E,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,oBAAoB,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,GAAG,UAAU,IAAI,IAAI,EAAE;gBAC7B,OAAO,EAAE,GAAG,IAAI,KAAK,IAAI,aAAa,IAAI,CAAC,IAAI,EAAE;aAClD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,SAAS,gBAAgB,CAAC,KAAc,EAAE,SAAiB;IACzD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAA4B,EAAE,OAAe,EAAE,IAAa;IACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AAChG,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { MapServiceBroker } from './broker/map.js';
+export { type MasterKeyProvider, type SealedSecret, type SealedSecretV1, type SealedSecretV2, SecretBox, SecretDecryptError, type StaticMasterKey, staticMasterKeyProvider, type WrappingMasterKey, } from './broker/secret-box.js';
+export { StaticServiceBroker } from './broker/static.js';
+export type { CredentialBroker, CredentialRequest, DownstreamCredential } from './broker/types.js';
+export { InMemoryConnector, InMemoryConnectorRegistry, type InMemoryOperation, type OperationHandler, } from './connector/in-memory.js';
+export type { Connector, ConnectorCall, ConnectorCallHost, ConnectorRegistry, } from './connector/types.js';
+export { type EvalScope, ExpressionEvalError, type ExpressionEvalErrorCode, evaluateCondition, evaluateValue, } from './eval/evaluate.js';
+export { type ExecuteDeps, executePrompt, executeResource, executeTool } from './execute.js';
+export { AllowAllPolicy } from './policy/allow-all.js';
+export type { PolicyContext, PolicyDecision, PolicyGate } from './policy/types.js';
+export type { ExecutionError, ExecutionErrorCode, ExecutionResult } from './result.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,SAAS,EACT,kBAAkB,EAClB,KAAK,eAAe,EACpB,uBAAuB,EACvB,KAAK,iBAAiB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,SAAS,EACd,mBAAmB,EACnB,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACnF,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/index.js

@@ -0,0 +1,8 @@
+export { MapServiceBroker } from './broker/map.js';
+export { SecretBox, SecretDecryptError, staticMasterKeyProvider, } from './broker/secret-box.js';
+export { StaticServiceBroker } from './broker/static.js';
+export { InMemoryConnector, InMemoryConnectorRegistry, } from './connector/in-memory.js';
+export { ExpressionEvalError, evaluateCondition, evaluateValue, } from './eval/evaluate.js';
+export { executePrompt, executeResource, executeTool } from './execute.js';
+export { AllowAllPolicy } from './policy/allow-all.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/runtime/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAKL,SAAS,EACT,kBAAkB,EAElB,uBAAuB,GAExB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EACL,iBAAiB,EACjB,yBAAyB,GAG1B,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EAEL,mBAAmB,EAEnB,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAoB,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/node_modules/@noodle-borg/runtime/dist/policy/allow-all.d.ts

@@ -0,0 +1,10 @@
+import type { PolicyContext, PolicyDecision, PolicyGate } from './types.js';
+/**
+ * The default Phase 1 policy: allow every call and redact nothing. It exists so the execution
+ * pipeline always runs gates in the right order; Phase 4 replaces it with real enforcement.
+ */
+export declare class AllowAllPolicy implements PolicyGate {
+    before(_context: PolicyContext): Promise<PolicyDecision>;
+    after(_context: PolicyContext, output: unknown): Promise<unknown>;
+}
+//# sourceMappingURL=allow-all.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/policy/allow-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-all.d.ts","sourceRoot":"","sources":["../../src/policy/allow-all.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5E;;;GAGG;AACH,qBAAa,cAAe,YAAW,UAAU;IAC/C,MAAM,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAIxD,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;CAGlE"}

package/node_modules/@noodle-borg/runtime/dist/policy/allow-all.js

@@ -0,0 +1,13 @@
+/**
+ * The default Phase 1 policy: allow every call and redact nothing. It exists so the execution
+ * pipeline always runs gates in the right order; Phase 4 replaces it with real enforcement.
+ */
+export class AllowAllPolicy {
+    before(_context) {
+        return Promise.resolve({ allow: true });
+    }
+    after(_context, output) {
+        return Promise.resolve(output);
+    }
+}
+//# sourceMappingURL=allow-all.js.map

package/node_modules/@noodle-borg/runtime/dist/policy/allow-all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allow-all.js","sourceRoot":"","sources":["../../src/policy/allow-all.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,cAAc;IACzB,MAAM,CAAC,QAAuB;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,QAAuB,EAAE,MAAe;QAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;CACF"}

package/node_modules/@noodle-borg/runtime/dist/policy/types.d.ts

@@ -0,0 +1,25 @@
+/** Identifies the call a policy decision applies to. */
+export interface PolicyContext {
+    readonly toolName: string;
+    readonly connectorId: string;
+    readonly connectorVersion: string;
+    readonly operation: string;
+}
+/** The outcome of a pre-execution policy check. */
+export type PolicyDecision = {
+    readonly allow: true;
+} | {
+    readonly allow: false;
+    readonly reason: string;
+};
+/**
+ * The gate around connector execution. `before` runs the pre-execution checks (auth, scopes,
+ * quotas, rate limits, tenant binding) and `after` redacts the result (docs/SPEC.md "Policy And
+ * Security"). Phase 1 ships a no-op implementation; the real gates land in Phase 4. The seam fixes
+ * the before → connector → after ordering now.
+ */
+export interface PolicyGate {
+    before(context: PolicyContext): Promise<PolicyDecision>;
+    after(context: PolicyContext, output: unknown): Promise<unknown>;
+}
+//# sourceMappingURL=types.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/policy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/policy/types.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,mDAAmD;AACnD,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACxB;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE"}

package/node_modules/@noodle-borg/runtime/dist/policy/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map