@noodleseed/one 0.151.1 → 0.153.0

package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts

@@ -74,8 +74,8 @@ export interface WidgetUiMeta {
      */
     readonly visibility?: readonly ('model' | 'app')[];
 }
-export type WidgetPermissionGrant = Readonly<Record<string, never>>;
-export interface WidgetPermissions {
+type WidgetPermissionGrant = Readonly<Record<string, never>>;
+interface WidgetPermissions {
     readonly camera?: WidgetPermissionGrant;
     readonly microphone?: WidgetPermissionGrant;
     readonly geolocation?: WidgetPermissionGrant;
@@ -150,6 +150,7 @@ export interface ArtifactStateHandle {
     readonly version: string;
     readonly scope: ArtifactStateHandleScope;
     readonly ttlSeconds?: number;
+    readonly claimOnAuthentication?: true;
 }
 export interface ArtifactState {
     readonly handles: Readonly<Record<string, ArtifactStateHandle>>;
@@ -164,14 +165,14 @@ export interface ArtifactServerContext {
         readonly fulfilment: ArtifactFulfilment;
     };
 }
-export interface ArtifactOidcAuth {
+interface ArtifactOidcAuth {
     readonly kind?: 'oidc' | undefined;
     readonly issuer: string;
     readonly audience: string;
     readonly claims?: ArtifactAuthClaimMap | undefined;
     readonly routing?: ArtifactCustomerAuthRouting | undefined;
 }
-export interface ArtifactFederatedOidcAuth {
+interface ArtifactFederatedOidcAuth {
     readonly kind: 'federatedOidc';
     readonly issuers: readonly {
         readonly issuer: string;
@@ -185,7 +186,7 @@ export interface ArtifactCustomerAuthRouting {
         readonly claim: string;
     }>>;
 }
-export interface ArtifactBridgeAuth {
+interface ArtifactBridgeAuth {
     readonly kind: 'bridge';
     readonly provider: string;
     readonly verifyUrl?: string | undefined;
@@ -203,8 +204,8 @@ export interface ArtifactBridgeAuth {
     readonly authMethod?: 'client_secret_basic' | 'client_secret_post' | undefined;
     readonly user?: ArtifactAuthClaimMap | undefined;
 }
-export type ArtifactAuth = ArtifactOidcAuth | ArtifactFederatedOidcAuth | ArtifactBridgeAuth;
-export interface ArtifactAuthClaimMap {
+type ArtifactAuth = ArtifactOidcAuth | ArtifactFederatedOidcAuth | ArtifactBridgeAuth;
+interface ArtifactAuthClaimMap {
     readonly id?: string | undefined;
     readonly email?: string | undefined;
     readonly name?: string | undefined;
@@ -284,7 +285,7 @@ export interface ArtifactServer {
     };
     readonly state?: ArtifactState;
 }
-export interface ArtifactBrandTheme {
+interface ArtifactBrandTheme {
     readonly surface?: string | undefined;
     readonly surfaceRaised?: string | undefined;
     readonly surfaceMuted?: string | undefined;
@@ -301,19 +302,19 @@ export interface ArtifactBrandTheme {
     readonly danger?: string | undefined;
     readonly code?: string | undefined;
 }
-export interface ArtifactSource {
+interface ArtifactSource {
     readonly manifestName: string;
     /** Application version retained for artifact compatibility. */
     readonly manifestVersion: string;
     /** Core manifest language version that produced this internal artifact. */
     readonly coreVersion?: '1' | '2';
 }
-export interface ArtifactCapabilities {
+interface ArtifactCapabilities {
     readonly tools: readonly string[];
     readonly resources?: readonly string[];
     readonly prompts?: readonly string[];
 }
-export interface ArtifactRequirements {
+interface ArtifactRequirements {
     readonly capabilities?: readonly CapabilityRequirementName[];
 }
 export type ArtifactConnectionSource = {

package/node_modules/@noodle-borg/compiler/dist/artifact/version.d.ts

@@ -47,8 +47,11 @@
  * endpoint claim mappings, resolved operation references may carry ordinary/action endpoint dependency
  * keys, and artifacts carry only endpoint policies. Resolved customer URLs remain request-private runtime
  * state.
+ *
+ * `0.16.0` (Anonymous-to-authenticated onboarding): additive — finite caller-scoped state handles may
+ * opt into atomic ownership adoption when a single-use assistant sign-in ticket is spent.
  */
-export declare const ARTIFACT_SCHEMA_VERSION = "0.15.0";
+export declare const ARTIFACT_SCHEMA_VERSION = "0.16.0";
 /** mimeType for an MCP Apps UI resource (SEP-1865). Widgets are served under this profile. */
 export declare const MCP_APP_MIME_TYPE = "text/html;profile=mcp-app";
 //# sourceMappingURL=version.d.ts.map

package/node_modules/@noodle-borg/compiler/dist/artifact/version.js

@@ -47,8 +47,11 @@
  * endpoint claim mappings, resolved operation references may carry ordinary/action endpoint dependency
  * keys, and artifacts carry only endpoint policies. Resolved customer URLs remain request-private runtime
  * state.
+ *
+ * `0.16.0` (Anonymous-to-authenticated onboarding): additive — finite caller-scoped state handles may
+ * opt into atomic ownership adoption when a single-use assistant sign-in ticket is spent.
  */
-export const ARTIFACT_SCHEMA_VERSION = '0.15.0';
+export const ARTIFACT_SCHEMA_VERSION = '0.16.0';
 /** mimeType for an MCP Apps UI resource (SEP-1865). Widgets are served under this profile. */
 export const MCP_APP_MIME_TYPE = 'text/html;profile=mcp-app';
 //# sourceMappingURL=version.js.map

package/node_modules/@noodle-borg/compiler/dist/compile.d.ts

@@ -1,7 +1,6 @@
 import { type HostedAssetOptions, type LocalAssetOptions } from './assets.js';
 import type { ConnectorCatalog } from './catalog/types.js';
 import type { CompileError, CompileResult } from './errors.js';
-export type { StructuralTool } from './artifact/catalog-emission.js';
 export interface CompileOptions {
     /**
      * Connector catalog used to resolve operation references. When supplied, the compiler resolves

package/node_modules/@noodle-borg/compiler/dist/fulfilment-structural.d.ts

@@ -14,7 +14,7 @@ export interface StructOp {
  * A structurally-validated flow step with parsed expressions; connector refs resolve later. The Core v1
  * verb set is `operation` + `map` + portable `elicit`; `compute` remains reserved (ADR 0150).
  */
-export type StructStep = {
+type StructStep = {
     readonly id: string;
     readonly kind: 'operation';
     readonly cond?: CondNode;

package/node_modules/@noodle-borg/compiler/dist/manifest/expression.d.ts

@@ -20,12 +20,12 @@ import type { CompileError } from '../errors.js';
  * Roots an expression may read. Manifest expressions use `input`/`steps`; other contexts (e.g. connector
  * request/response mapping) pass their own allowed-roots set to {@link parseValue}/{@link parseCondition}.
  */
-export type ExprRoot = string;
-export interface PathSegmentProp {
+type ExprRoot = string;
+interface PathSegmentProp {
     readonly kind: 'prop';
     readonly name: string;
 }
-export interface PathSegmentIndex {
+interface PathSegmentIndex {
     readonly kind: 'index';
     readonly value: number;
 }
@@ -37,17 +37,17 @@ export interface PathNode {
     readonly segments: readonly PathSegment[];
 }
 /** A literal value (boolean/number/string/null), type-preserving at runtime. */
-export interface LiteralNode {
+interface LiteralNode {
     readonly kind: 'literal';
     readonly value: string | number | boolean | null;
 }
-export type TemplatePartText = {
+type TemplatePartText = {
     readonly kind: 'text';
     readonly value: string;
 };
-export type TemplatePart = TemplatePartText | PathNode | LiteralNode;
+type TemplatePart = TemplatePartText | PathNode | LiteralNode;
 /** String interpolation; always produces a string at runtime (docs/SPEC.md "Evaluation Rules"). */
-export interface TemplateNode {
+interface TemplateNode {
     readonly kind: 'template';
     readonly parts: readonly TemplatePart[];
 }
@@ -76,8 +76,8 @@ export interface CoalesceNode {
     readonly right: ExprNode;
 }
 declare const FUNCTION_NAMES: readonly ["coalesce", "equals", "lower", "upper", "formatCurrency", "formatNumber", "formatDateTime", "formatRelativeTime", "formatUnit", "formatPlural", "urlEncode"];
-export type FunctionName = (typeof FUNCTION_NAMES)[number];
-export interface FunctionNode {
+type FunctionName = (typeof FUNCTION_NAMES)[number];
+interface FunctionNode {
     readonly kind: 'function';
     readonly name: FunctionName;
     readonly args: readonly ExprNode[];
@@ -85,26 +85,26 @@ export interface FunctionNode {
 /** A value-position expression node (the result of {@link parseValue}). */
 export type ExprNode = PathNode | LiteralNode | TemplateNode | ArrayNode | ObjectNode | CoalesceNode | FunctionNode;
 /** Operand of an equality comparison: a path or a literal. */
-export type Comparable = PathNode | LiteralNode;
-export interface CompareNode {
+type Comparable = PathNode | LiteralNode;
+interface CompareNode {
     readonly kind: 'cond';
     readonly op: 'eq' | 'neq';
     readonly left: Comparable;
     readonly right: Comparable;
 }
-export interface LogicalNode {
+interface LogicalNode {
     readonly kind: 'cond';
     readonly op: 'and' | 'or';
     readonly left: CondNode;
     readonly right: CondNode;
 }
-export interface NotNode {
+interface NotNode {
     readonly kind: 'cond';
     readonly op: 'not';
     readonly operand: CondNode;
 }
 /** Truthiness of a path used as a bare `if` condition (e.g. `${input.is_active}`). */
-export interface TruthyNode {
+interface TruthyNode {
     readonly kind: 'truthy';
     readonly operand: PathNode;
 }

package/node_modules/@noodle-borg/compiler/dist/manifest/naming.d.ts

@@ -3,8 +3,6 @@
  * lowercase letters, numbers, and underscores (docs/SPEC.md "Naming Rules").
  */
 export declare const NAME_PATTERN: RegExp;
-/** Connector operation reference: `<connector>.<operation>`, each segment a valid name. */
-export declare const OPERATION_REF_PATTERN: RegExp;
 export declare function isValidName(name: string): boolean;
 /** Split `<connector>.<operation>` into parts, or return null if it is not well-formed. */
 export declare function parseOperationRef(ref: string): {

package/node_modules/@noodle-borg/compiler/dist/manifest/naming.js

@@ -4,7 +4,7 @@
  */
 export const NAME_PATTERN = /^[a-z0-9_]+$/;
 /** Connector operation reference: `<connector>.<operation>`, each segment a valid name. */
-export const OPERATION_REF_PATTERN = /^[a-z0-9_]+\.[a-z0-9_]+$/;
+const OPERATION_REF_PATTERN = /^[a-z0-9_]+\.[a-z0-9_]+$/;
 export function isValidName(name) {
     return NAME_PATTERN.test(name);
 }

package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts

@@ -25,6 +25,7 @@ export declare const manifestV1Schema: z.ZodObject<{
                 caller: "caller";
             }>>;
             ttlSeconds: z.ZodOptional<z.ZodNumber>;
+            claimOnAuthentication: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     requires: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
@@ -549,6 +550,7 @@ export declare const manifestV2Schema: z.ZodObject<{
                 caller: "caller";
             }>>;
             ttlSeconds: z.ZodOptional<z.ZodNumber>;
+            claimOnAuthentication: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     requires: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
@@ -1199,6 +1201,7 @@ export declare const manifestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 caller: "caller";
             }>>;
             ttlSeconds: z.ZodOptional<z.ZodNumber>;
+            claimOnAuthentication: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     requires: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
@@ -1722,6 +1725,7 @@ export declare const manifestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 caller: "caller";
             }>>;
             ttlSeconds: z.ZodOptional<z.ZodNumber>;
+            claimOnAuthentication: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     requires: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodBoolean>>;

package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js

@@ -490,8 +490,27 @@ const stateHandleSchema = z
         .positive()
         .max(60 * 60 * 24 * 30)
         .optional(),
+    claimOnAuthentication: z.literal(true).optional(),
 })
-    .strict();
+    .strict()
+    .superRefine((handle, ctx) => {
+    if (handle.claimOnAuthentication !== true)
+        return;
+    if (handle.scope !== 'caller') {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['scope'],
+            message: 'claimOnAuthentication requires an explicit caller scope',
+        });
+    }
+    if (handle.ttlSeconds === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['ttlSeconds'],
+            message: 'claimOnAuthentication requires a finite ttlSeconds',
+        });
+    }
+});
 const stateSchema = z
     .object({
     handles: z

package/node_modules/@noodle-borg/compiler/dist/manifest/website-projection.d.ts

@@ -17,7 +17,7 @@ import type { CompileError } from '../errors.js';
  * re-derived per call, because a new `ArtifactTool` field would be a Core surface change under ADR 0150.
  * ADR 0055's third class — a declared anonymous fallback — stays reserved, not produced.
  */
-export interface AssistantSurfaceInput {
+interface AssistantSurfaceInput {
     readonly mode: 'authenticated' | 'public' | 'mixed';
     readonly capabilities?: readonly {
         readonly kind: string;
@@ -39,4 +39,5 @@ export interface WebsiteProjectionSurfaces {
 /** A tool touches identity when it reads `${user}` or requires verified claims (ADR 0185). */
 export declare function anonymousBehavior(tool: ArtifactTool): 'public-safe' | 'requires-identity';
 export declare function validateWebsiteProjection(assistant: AssistantProjectionInput | undefined, surfaces: WebsiteProjectionSurfaces): readonly CompileError[];
+export {};
 //# sourceMappingURL=website-projection.d.ts.map

package/node_modules/@noodle-borg/compiler/dist/state-handles.js

@@ -27,6 +27,7 @@ export function compileState(manifest, schemasMap, errors) {
             version: handle.version,
             scope: handle.scope ?? 'deployment',
             ...(handle.ttlSeconds !== undefined ? { ttlSeconds: handle.ttlSeconds } : {}),
+            ...(handle.claimOnAuthentication === true ? { claimOnAuthentication: true } : {}),
         };
     }
     return { handles };

package/node_modules/@noodle-borg/compiler/package.json

@@ -28,8 +28,6 @@
     "@noodle-borg/uri-template": "0.0.0",
     "@noodle-borg/knowledge": "0.0.0",
     "@noodle-borg/capabilities": "0.0.0",
-    "react": "^19.2.7",
-    "react-dom": "^19.2.7",
     "tailwindcss": "^4.3.1",
     "tldts": "^7.4.9",
     "yaml": "^2.9.0",
@@ -37,7 +35,6 @@
   },
   "devDependencies": {
     "@types/node": "^24.13.1",
-    "@types/react": "^19.2.17",
-    "@types/react-dom": "^19.2.3"
+    "ajv": "^8.20.0"
   }
 }

package/node_modules/@noodle-borg/connector-defs/dist/credential-profiles.js

@@ -1,5 +1,5 @@
 /** Project catalog operation credential metadata without adding it to compatibility signatures. */
-export function operationCredentials(def) {
+function operationCredentials(def) {
     const requirements = {};
     for (const [name, operation] of Object.entries(def.operations)) {
         const credentials = operation.credentials;

package/node_modules/@noodle-borg/connector-defs/dist/schema.d.ts

@@ -5,11 +5,6 @@ declare const credentialProfileSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"apiKey">;
     header: z.ZodString;
 }, z.core.$strict>], "kind">;
-declare const operationCredentialsSchema: z.ZodObject<{
-    profiles: z.ZodArray<z.ZodString>;
-    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    audience: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
 /**
  * A declarative downstream auth scheme: the scheme plus the *name* of the secret the broker should mint.
  * Branches are `.strict()`, so an inline `value`/`token` key fails to parse — secrets can only be
@@ -1739,6 +1734,5 @@ export type ComputeOperationDef = z.infer<typeof computeOperationSchema>;
 export type McpOperationDef = z.infer<typeof mcpOperationSchema>;
 export type HttpAuthDef = z.infer<typeof httpAuthSchema>;
 export type CredentialProfileDef = z.infer<typeof credentialProfileSchema>;
-export type OperationCredentialsDef = z.infer<typeof operationCredentialsSchema>;
 export {};
 //# sourceMappingURL=schema.d.ts.map

package/node_modules/@noodle-borg/connector-http/dist/http-connector.d.ts

@@ -16,8 +16,7 @@ export type HttpAuthScheme = {
 } | {
     readonly kind: 'cookie';
 };
-export type { HttpRetryCategory, HttpRetryPolicy } from './http-response.js';
-export interface HttpOperationResilience {
+interface HttpOperationResilience {
     readonly timeoutMs?: number;
     readonly retry?: HttpRetryPolicy;
 }
@@ -148,4 +147,5 @@ export declare class HttpConnector implements Connector {
     signature(operation: string): OperationSignature | undefined;
     invoke(call: ConnectorCall): Promise<unknown>;
 }
+export {};
 //# sourceMappingURL=http-connector.d.ts.map

package/node_modules/@noodle-borg/connector-http/dist/http-response.d.ts

@@ -1,5 +1,5 @@
 import { type DnsLookup } from './ssrf.js';
-export type HttpRetryCategory = 'timeout' | 'network_error' | 'rate_limited' | 'upstream_5xx';
+type HttpRetryCategory = 'timeout' | 'network_error' | 'rate_limited' | 'upstream_5xx';
 export interface HttpRetryPolicy {
     readonly maxAttempts?: number;
     readonly baseDelayMs?: number;
@@ -24,4 +24,5 @@ export interface ResponseFetchOptions {
     readonly lookup?: DnsLookup;
 }
 export declare function fetchResponseWithResilience(url: URL, op: ResponseOperation, init: RequestInit, options: ResponseFetchOptions): Promise<unknown>;
+export {};
 //# sourceMappingURL=http-response.d.ts.map

package/node_modules/@noodle-borg/connector-http/dist/mcp/config.js

@@ -1,7 +1,7 @@
 import { ConnectorInvocationError } from '@noodle-borg/runtime';
 const VARIABLE = /^\$\{env\.([A-Za-z0-9_]+)\}$/;
 const MAX_RESPONSE_BYTES = 6 * 1024 * 1024;
-export const DEFAULT_RESPONSE_BYTES = 1 << 20;
+const DEFAULT_RESPONSE_BYTES = 1 << 20;
 export function isVariable(value) {
     return VARIABLE.test(value);
 }

package/node_modules/@noodle-borg/control-plane/dist/deploy-auth.d.ts

@@ -1,6 +1,5 @@
 import type { IncomingMessage } from 'node:http';
 import type { ControlPlaneIdentity } from './contracts.js';
-export type { ControlPlaneIdentity } from './contracts.js';
 export type ControlPlaneAuthResult = {
     readonly ok: true;
     readonly identity?: ControlPlaneIdentity;

package/node_modules/@noodle-borg/developer-mcp/dist/widgets/shared.js

@@ -5,7 +5,7 @@ export function WidgetHeader(props) {
 export function Panel(props) {
     return (_jsxs("section", { className: "panel", children: [_jsxs("header", { className: "panel-header", children: [_jsx("h2", { children: props.title }), props.description === undefined ? null : _jsx("p", { children: props.description })] }), props.children] }));
 }
-export function StatusBadge(props) {
+function StatusBadge(props) {
     return (_jsxs("p", { className: "status-badge", role: "status", children: [_jsx("span", { className: "visually-hidden", "data-status-label": "", children: "Status:" }), ' ', _jsx("span", { "data-bind": props.path, children: "Loading" })] }));
 }
 export function BoundValue(props) {

package/node_modules/@noodle-borg/knowledge-operations/dist/crawl-lifecycle.d.ts

@@ -22,7 +22,7 @@ export declare class InMemoryCrawlStateStore implements CrawlStateStore {
     put(tenant: KnowledgeTenantRef, componentName: string, state: SiteCrawlState): Promise<void>;
 }
 /** A provider config reference by name (variable()/secret() doctrine) — never a value. */
-export interface ProviderConfigRef {
+interface ProviderConfigRef {
     readonly kind: 'variable' | 'secret';
     readonly name: string;
 }
@@ -68,4 +68,5 @@ export declare function runDueCrawls(deps: CrawlDeps, servedComponents: () => Pr
 }[]>, at: number): Promise<void>;
 /** Serve the crawled corpus: the bundled index over the site revision, hits remapped to `site`. */
 export declare function searchSiteCorpus(hooks: KnowledgeDeployHooks, tenant: KnowledgeTenantRef, componentName: string, request: SearchRequest): Promise<readonly SearchHit[]>;
+export {};
 //# sourceMappingURL=crawl-lifecycle.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/package.json

@@ -28,8 +28,7 @@
   "dependencies": {
     "@noodle-borg/knowledge": "0.0.0",
     "@noodle-borg/knowledge-crawl": "0.0.0",
-    "@noodle-borg/wire-contracts": "0.0.0",
-    "zod": "^4.4.3"
+    "@noodle-borg/wire-contracts": "0.0.0"
   },
   "devDependencies": {
     "@types/node": "^24.13.1",

package/node_modules/@noodle-borg/observability/dist/request-events-postgres.js

@@ -207,7 +207,9 @@ function rowToEvent(row) {
         ...(row.deployment_id !== null ? { deploymentId: row.deployment_id } : {}),
         ...(row.server_version !== null ? { serverVersion: row.server_version } : {}),
         ...(row.sdk_protocol_version !== null ? { sdkProtocolVersion: row.sdk_protocol_version } : {}),
-        ...(row.protocol_era !== null ? { protocolEra: row.protocol_era } : {}),
+        ...(row.protocol_era !== null
+            ? { protocolEra: row.protocol_era }
+            : {}),
         ...(row.session_id !== null ? { sessionId: row.session_id } : {}),
         ...(row.client_name !== null ? { clientName: row.client_name } : {}),
         ...(row.client_version !== null ? { clientVersion: row.client_version } : {}),

package/node_modules/@noodle-borg/plugin-distribution/dist/openai-submission-render.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
 import { deterministicZip, skillSlug, } from '@noodle-borg/agent-packaging';
-export const OPENAI_SUBMISSION_SCHEMA = 'https://developers.openai.com/apps-sdk/schemas/chatgpt-app-submission.v1.json';
+const OPENAI_SUBMISSION_SCHEMA = 'https://developers.openai.com/apps-sdk/schemas/chatgpt-app-submission.v1.json';
 export function renderOpenAiSubmissionArtifacts(input, options, markdown) {
     const slug = skillSlug(input.appPackage.app.name);
     const skillArchivePath = `submission/${slug}-skill.zip`;

package/node_modules/@noodle-borg/protocol/dist/index.d.ts

@@ -9,6 +9,6 @@ export { handleStatelessHttp } from './stateless.js';
 export { evaluateToolAuthorization, filterAuthorizedTools, TOOL_AUTHORIZATION_DENIED, type ToolAuthorizationCaller, type ToolAuthorizationDecision, type ToolAuthorizationRuleClass, toolAuthorizationRuleClass, toolAuthorizationRuleFingerprint, } from './tool-authorization.js';
 export { toolRequiresConfirmation } from './tool-confirmation.js';
 export { createDualEraMcpHandler, createPlatformDualEraMcpHandler, } from './v2/handler.js';
-export { type McpProtocolEra, MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, type ServedMcpProtocolVersion, } from './v2/versions.js';
+export { LEGACY_MCP_PROTOCOL_VERSION, type McpProtocolEra, type McpProtocolMode, MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, type ServedMcpProtocolVersion, } from './v2/versions.js';
 export { injectWidgetBridge } from './widget/inject.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/index.js

@@ -8,6 +8,6 @@ export { handleStatelessHttp } from './stateless.js';
 export { evaluateToolAuthorization, filterAuthorizedTools, TOOL_AUTHORIZATION_DENIED, toolAuthorizationRuleClass, toolAuthorizationRuleFingerprint, } from './tool-authorization.js';
 export { toolRequiresConfirmation } from './tool-confirmation.js';
 export { createDualEraMcpHandler, createPlatformDualEraMcpHandler, } from './v2/handler.js';
-export { MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, } from './v2/versions.js';
+export { LEGACY_MCP_PROTOCOL_VERSION, MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, } from './v2/versions.js';
 export { injectWidgetBridge } from './widget/inject.js';
 //# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/protocol/dist/interaction-envelope.js

@@ -32,7 +32,7 @@ export function toolUsesPortableInteractionArgument(tool) {
         typeof properties === 'object' &&
         Object.hasOwn(properties, '__noodleInteraction'));
 }
-export function interactionResponsesFromMeta(value) {
+function interactionResponsesFromMeta(value) {
     if (value === null || typeof value !== 'object' || Array.isArray(value))
         return {};
     const noodle = value.noodle;
@@ -43,7 +43,7 @@ export function interactionResponsesFromMeta(value) {
         return {};
     return parseElicitationResponses(interaction.responses);
 }
-export function parseElicitationResponses(value) {
+function parseElicitationResponses(value) {
     if (value === null || typeof value !== 'object' || Array.isArray(value))
         return {};
     const responses = {};

package/node_modules/@noodle-borg/protocol/dist/jsonrpc.d.ts

@@ -16,5 +16,5 @@ export interface JsonRpcErrorObject {
     readonly message: string;
     readonly data?: unknown;
 }
-export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, TOOL_AUTHORIZATION_DENIED, } from './error-codes.js';
+export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, } from './error-codes.js';
 //# sourceMappingURL=jsonrpc.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/jsonrpc.js

@@ -11,5 +11,5 @@ export const JSON_RPC = {
     INVALID_PARAMS: -32602,
     INTERNAL_ERROR: -32603,
 };
-export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, TOOL_AUTHORIZATION_DENIED, } from './error-codes.js';
+export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, } from './error-codes.js';
 //# sourceMappingURL=jsonrpc.js.map

package/node_modules/@noodle-borg/protocol/dist/mapping.d.ts

@@ -54,8 +54,6 @@ export declare function mapToolsList(artifact: RuntimeArtifact, caller?: ToolAut
     readonly knowledgeTools?: boolean;
     readonly intentCapture?: boolean;
 }): ToolsListResult;
-/** Generated `search_<name>` descriptors (ADR 0202 D4); listed only when the port is live. */
-export declare function knowledgeToolDescriptors(artifact: RuntimeArtifact, intentCapture?: boolean): ToolsListResult['tools'];
 /**
  * Map a successful tool output to a `tools/call` result. Structured (object) output is returned as
  * `structuredContent` and also serialized into a text block (the spec asks for both, for clients
@@ -63,7 +61,7 @@ export declare function knowledgeToolDescriptors(artifact: RuntimeArtifact, inte
  */
 export declare function mapToolOutput(output: unknown): ToolsCallResult;
 export declare function redactWidgetLinkedOutput(output: unknown): unknown;
-export interface ResourceDescriptor {
+interface ResourceDescriptor {
     readonly uri: string;
     readonly name: string;
     readonly title?: string;
@@ -75,7 +73,7 @@ export interface ResourceDescriptor {
 export interface ResourcesListResult {
     readonly resources: readonly ResourceDescriptor[];
 }
-export interface ResourceTemplateDescriptor {
+interface ResourceTemplateDescriptor {
     readonly uriTemplate: string;
     readonly name: string;
     readonly title?: string;
@@ -108,12 +106,12 @@ export declare function mapResourceTemplatesList(artifact: RuntimeArtifact): Res
  * anything else → a JSON-serialized text content.
  */
 export declare function mapResourceContents(uri: string, mimeType: string | undefined, output: unknown, meta?: Readonly<Record<string, unknown>>, widgetDomain?: WidgetDomainProjection): ReadResourceResult;
-export interface PromptArgumentDescriptor {
+interface PromptArgumentDescriptor {
     readonly name: string;
     readonly description?: string;
     readonly required?: boolean;
 }
-export interface PromptDescriptor {
+interface PromptDescriptor {
     readonly name: string;
     readonly title?: string;
     readonly description?: string;

package/node_modules/@noodle-borg/protocol/dist/mapping.js

@@ -74,7 +74,7 @@ export function mapToolsList(artifact, caller, options) {
     };
 }
 /** Generated `search_<name>` descriptors (ADR 0202 D4); listed only when the port is live. */
-export function knowledgeToolDescriptors(artifact, intentCapture = false) {
+function knowledgeToolDescriptors(artifact, intentCapture = false) {
     return (artifact.server.knowledge ?? []).map((component) => ({
         name: component.generatedTool.name,
         description: component.generatedTool.description,

package/node_modules/@noodle-borg/protocol/dist/observation.d.ts

@@ -19,15 +19,6 @@ export interface ProtocolObservation {
     /** Safe connector failure attribution projected from the execution error (#1309); scalars only. */
     readonly connector?: ConnectorFailureAttribution;
 }
-/**
- * The analytics `errorKind` for an execution error: the stable code, refined with the allowlisted
- * `reason` when one exists (`connector_error.timeout`). Analytics-only — the wire's structured
- * reasons are gated separately (and more narrowly) in `execution-error-mapping.ts`.
- */
-export declare function executionErrorKind(error: {
-    readonly code: string;
-    readonly reason?: string;
-}): string;
 /** The observation slice carried by an execution error, ready to spread into an observe call. */
 export declare function executionErrorObservation(error: {
     readonly code: string;

package/node_modules/@noodle-borg/protocol/dist/observation.js

@@ -3,7 +3,7 @@
  * `reason` when one exists (`connector_error.timeout`). Analytics-only — the wire's structured
  * reasons are gated separately (and more narrowly) in `execution-error-mapping.ts`.
  */
-export function executionErrorKind(error) {
+function executionErrorKind(error) {
     return error.reason === undefined ? error.code : `${error.code}.${error.reason}`;
 }
 /** The observation slice carried by an execution error, ready to spread into an observe call. */

package/node_modules/@noodle-borg/protocol/dist/v2/handler.d.ts

@@ -1,11 +1,12 @@
 import { type McpHttpHandler, type McpServerFactory } from '@modelcontextprotocol/server';
 import type { ProtocolRequestContext, ServedArtifact } from '../sdk-server.js';
+import { type McpProtocolMode } from './versions.js';
 /**
  * The single Noodle MCP entry: SDK-owned era classification/dispatch with a narrow Noodle response seam.
  */
 export declare function createDualEraMcpHandler(target: ServedArtifact, context?: ProtocolRequestContext): McpHttpHandler;
 /** Platform-wide SDK v2 handler used by artifact and first-party MCP surfaces alike. */
 export declare function createPlatformDualEraMcpHandler(factory: McpServerFactory, platformOptions?: {
-    readonly protocolMode?: 'dual' | 'legacy-only';
+    readonly protocolMode?: McpProtocolMode;
 }): McpHttpHandler;
 //# sourceMappingURL=handler.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/v2/versions.d.ts

@@ -3,4 +3,8 @@ export declare const SERVED_MCP_PROTOCOL_VERSIONS: readonly ["2026-07-28", "2025
 export type ServedMcpProtocolVersion = (typeof SERVED_MCP_PROTOCOL_VERSIONS)[number];
 export type McpProtocolEra = 'legacy' | 'modern';
 export declare const MODERN_MCP_PROTOCOL_VERSION: "2026-07-28";
+/** The newest revision served through the legacy (v1 SDK) path. */
+export declare const LEGACY_MCP_PROTOCOL_VERSION: "2025-11-25";
+/** Origin-wide rollout gate: serve both eras, or answer modern requests with method-not-found. */
+export type McpProtocolMode = 'dual' | 'legacy-only';
 //# sourceMappingURL=versions.d.ts.map