@noodleseed/one 0.151.1 → 0.153.0

package/node_modules/@noodle-borg/protocol/dist/v2/versions.js

@@ -8,4 +8,6 @@ export const SERVED_MCP_PROTOCOL_VERSIONS = [
     '2024-10-07',
 ];
 export const MODERN_MCP_PROTOCOL_VERSION = SERVED_MCP_PROTOCOL_VERSIONS[0];
+/** The newest revision served through the legacy (v1 SDK) path. */
+export const LEGACY_MCP_PROTOCOL_VERSION = SERVED_MCP_PROTOCOL_VERSIONS[1];
 //# sourceMappingURL=versions.js.map

package/node_modules/@noodle-borg/protocol/dist/widget/domain-projection.d.ts

@@ -1,8 +1,9 @@
-export type WidgetHostKind = 'claude' | 'generic';
+type WidgetHostKind = 'claude' | 'generic';
 export interface WidgetDomainProjection {
     readonly host: WidgetHostKind;
     readonly mcpServerUrl?: string;
 }
 export declare function claudeWidgetDomain(mcpServerUrl: string): string | undefined;
 export declare function projectWidgetResourceMeta(meta: Readonly<Record<string, unknown>>, projection?: WidgetDomainProjection): Readonly<Record<string, unknown>>;
+export {};
 //# sourceMappingURL=domain-projection.d.ts.map

package/node_modules/@noodle-borg/protocol/package.json

@@ -24,7 +24,6 @@
   "dependencies": {
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/uri-template": "0.0.0",
-    "@modelcontextprotocol/core": "2.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@noodle-borg/compiler": "0.0.0",

package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts

@@ -34,14 +34,14 @@ export declare function credentialUnavailableErrorSnapshot(value: unknown): Cred
  * to business backends (docs/SPEC.md "Auth And Identity").
  */
 export type DownstreamCredential = BearerDownstreamCredential | CookieDownstreamCredential;
-export interface BearerDownstreamCredential {
+interface BearerDownstreamCredential {
     readonly kind?: 'bearer';
     /** Opaque secret material the connector presents to its backing system. */
     readonly token: string;
     /** Optional scope marker, for the broker's own bookkeeping. */
     readonly scope?: string;
 }
-export interface CookieDownstreamCredential {
+interface CookieDownstreamCredential {
     readonly kind: 'cookie';
     /** Cookie header value scoped by the broker to the connector's allowed downstream origin. */
     readonly cookie: string;

package/node_modules/@noodle-borg/runtime/dist/index.d.ts

@@ -18,6 +18,7 @@ export { AllowAllPolicy } from './policy/allow-all.js';
 export type { PolicyContext, PolicyDecision, PolicyGate } from './policy/types.js';
 export { type ConfirmationActionReview, type ConfirmationPreparationResult, type ConfirmationReview, type ConnectorFailureAttribution, type ElicitationRequest, type ElicitationResponse, type ExecutionError, type ExecutionErrorCode, type ExecutionResult, type InteractiveExecutionResult, isConfirmationRequired, isInputRequired, isInputRequiredForConfirmation, type PreparedOperationAction, type PreparedToolContinuation, type ToolContinuation, type ToolPreparationContinuation, } from './result.js';
 export { splitResultMeta } from './result-meta.js';
+export { type CallerStateAdoptionInput, type CallerStateAdoptionResult, claimableStateHandleNames, } from './state-handle-ownership.js';
 export { assertExpectedStateRevision, assertNoSecretValue, assertSchemaValue, assertStateHandleNotCompleted, COMPLETE_STATE_OPERATION, createMutableStateHandleRecord, createStateConnector, InMemoryStateHandleStore, type MutableStateHandleRecord, PATCH_STATE_OPERATION, READ_STATE_OPERATION, STATE_CONNECTOR_ID, STATE_CONNECTOR_VERSION, STATE_OPERATION_SIGNATURES, StateConnector, type StateHandleRecord, type StateHandleStore, type StateInput, type StateMutationInput, type StatePatchInput, stateHandleRecordForMutation, toPublicStateHandleRecord, } from './state-handles.js';
 export type { ToolDispatchContext, ToolDispatchDecision, ToolDispatchHook, } from './tool-dispatch.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/index.js

@@ -15,5 +15,6 @@ export { resolveManagedOrigins, } from './managed-origins.js';
 export { AllowAllPolicy } from './policy/allow-all.js';
 export { isConfirmationRequired, isInputRequired, isInputRequiredForConfirmation, } from './result.js';
 export { splitResultMeta } from './result-meta.js';
+export { claimableStateHandleNames, } from './state-handle-ownership.js';
 export { assertExpectedStateRevision, assertNoSecretValue, assertSchemaValue, assertStateHandleNotCompleted, COMPLETE_STATE_OPERATION, createMutableStateHandleRecord, createStateConnector, InMemoryStateHandleStore, PATCH_STATE_OPERATION, READ_STATE_OPERATION, STATE_CONNECTOR_ID, STATE_CONNECTOR_VERSION, STATE_OPERATION_SIGNATURES, StateConnector, stateHandleRecordForMutation, toPublicStateHandleRecord, } from './state-handles.js';
 //# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/runtime/dist/state-handle-ownership.d.ts

@@ -0,0 +1,21 @@
+import type { ArtifactState } from '@noodle-borg/compiler';
+export interface CallerStateAdoptionInput {
+    readonly deploymentId: string;
+    readonly handles: readonly string[];
+    readonly sourceCallerSubject: string;
+    readonly targetCallerSubject: string;
+    /** The old anonymous session's absolute expiry; redirects never extend its authority. */
+    readonly redirectExpiresAt: Date;
+    readonly now: Date;
+}
+export type CallerStateAdoptionResult = {
+    readonly ok: true;
+    readonly adoptedHandles: readonly string[];
+    readonly adoptedRecords: number;
+} | {
+    readonly ok: false;
+    readonly reason: 'state_key_conflict';
+};
+/** The canonical sorted declaration projection stored on an elevation ticket. */
+export declare function claimableStateHandleNames(state: ArtifactState | undefined): readonly string[];
+//# sourceMappingURL=state-handle-ownership.d.ts.map

package/node_modules/@noodle-borg/runtime/dist/state-handle-ownership.js

@@ -0,0 +1,10 @@
+/** The canonical sorted declaration projection stored on an elevation ticket. */
+export function claimableStateHandleNames(state) {
+    if (state === undefined)
+        return [];
+    return Object.entries(state.handles)
+        .filter(([, handle]) => handle.claimOnAuthentication === true)
+        .map(([name]) => name)
+        .sort();
+}
+//# sourceMappingURL=state-handle-ownership.js.map

package/node_modules/@noodle-borg/runtime/package.json

@@ -12,6 +12,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./postgres": {
+      "types": "./dist/postgres.d.ts",
+      "import": "./dist/postgres.js"
     }
   },
   "files": [
@@ -26,6 +30,7 @@
     "@noodle-borg/module": "0.0.0"
   },
   "devDependencies": {
-    "@types/node": "^24.13.1"
+    "@types/node": "^24.13.1",
+    "@types/pg": "^8.20.0"
   }
 }

package/node_modules/@noodle-borg/service/dist/app-package-snapshot.d.ts

@@ -1,9 +1,8 @@
 import { type ProductSkillPackageInput, type RenderedProductSkillBundleV1 } from '@noodle-borg/agent-kit';
-import { type AppPackageArtifactV1, type AppPackageSnapshotV1, appPackageSnapshotV1Schema } from '@noodle-borg/app-package';
+import { type AppPackageArtifactV1, type AppPackageSnapshotV1 } from '@noodle-borg/app-package';
 import type { DeployError } from './registry-types.js';
 import type { DeployRecord } from './store.js';
 export type { AppPackageSnapshotV1 };
-export { appPackageSnapshotV1Schema };
 export type AppPackageRenderer = (input: ProductSkillPackageInput) => RenderedProductSkillBundleV1;
 export declare class AppPackageSnapshotError extends Error {
     readonly deployError: DeployError;

package/node_modules/@noodle-borg/service/dist/app-package-snapshot.js

@@ -1,6 +1,5 @@
 import { ProductSkillRenderError, renderProductSkillBundle, validateRenderedProductSkillFiles, } from '@noodle-borg/agent-kit';
-import { appPackageSnapshotV1Schema, createAppPackageSnapshotV1, parseAppPackageSnapshotV1, } from '@noodle-borg/app-package';
-export { appPackageSnapshotV1Schema };
+import { createAppPackageSnapshotV1, parseAppPackageSnapshotV1, } from '@noodle-borg/app-package';
 export class AppPackageSnapshotError extends Error {
     deployError;
     constructor(deployError) {

package/node_modules/@noodle-borg/service/dist/archive-preflight.js

@@ -1,4 +1,4 @@
-import { sendJson } from './http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 export function createArchivePreflight(registry) {
     return async (ref, _req, res) => {
         let archivedAt;

package/node_modules/@noodle-borg/service/dist/assets.js

@@ -1,6 +1,6 @@
 import { createHash, randomBytes } from 'node:crypto';
 import { readFile } from 'node:fs/promises';
-import { sendJson } from './http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 export { AssetPlanError, } from '@noodle-borg/module';
 export class InMemoryAssetStore {
     #objects = new Map();

package/node_modules/@noodle-borg/service/dist/assistant-bindings.js

@@ -2,7 +2,7 @@ import { serverAuthVariableBindings } from './managed-config-expressions.js';
 import { missingSecretErrors, missingVariableErrors } from './registry-helpers.js';
 import { serverAuthSecretBindings } from './server-auth-bindings.js';
 const VARIABLE = /\$\{env\.([A-Za-z0-9_]+)\}/g;
-export function assistantSecretBindings(assistant) {
+function assistantSecretBindings(assistant) {
     return assistant?.model.kind === 'openai-compatible'
         ? [
             {
@@ -14,7 +14,7 @@ export function assistantSecretBindings(assistant) {
         ]
         : [];
 }
-export function assistantVariableBindings(assistant) {
+function assistantVariableBindings(assistant) {
     if (!assistant)
         return [];
     if (assistant.model.kind !== 'openai-compatible')

package/node_modules/@noodle-borg/service/dist/client-compatibility.js

@@ -1,6 +1,5 @@
-import { applySecurityHeaders } from '@noodle-borg/transport-http';
+import { applySecurityHeaders, sendJson } from '@noodle-borg/transport-http';
 import { cliCompatibilityError } from './build-info.js';
-import { sendJson } from './http-util.js';
 export function rejectIncompatibleCli(req, res, buildInfo, tls) {
     const error = cliCompatibilityError(buildInfo, req.headers['x-noodle-cli-version']);
     if (!error)

package/node_modules/@noodle-borg/service/dist/developer-mcp/mount.js

@@ -2,9 +2,9 @@ import { createHash, randomUUID } from 'node:crypto';
 import { bearerToken } from '@noodle-borg/control-plane/portable';
 import { createDeveloperMcpServer, DEVELOPER_MCP_PATH, developerMcpContextSchema, environmentNameSchema, tenantSlugSchema, } from '@noodle-borg/developer-mcp';
 import { createPlatformDualEraMcpHandler } from '@noodle-borg/protocol';
-import { applySecurityHeaders, enforceHttps, toWebRequest, writeWebResponse, } from '@noodle-borg/transport-http';
+import { applySecurityHeaders, enforceHttps, readJsonBody, sendJson, toWebRequest, writeWebResponse, } from '@noodle-borg/transport-http';
 import { activeDeveloperGrantForIdentity } from '../auth/developer-grant-guard.js';
-import { baseFromRequest, normalizeServiceBase, readJsonBody, sendJson } from '../http-util.js';
+import { baseFromRequest, normalizeServiceBase } from '../http-util.js';
 import { ServiceDeveloperControlPlane } from './control-plane-adapter.js';
 export { DEVELOPER_MCP_PATH };
 const DEVELOPER_MCP_SCOPES = ['cloud:read'];

package/node_modules/@noodle-borg/service/dist/external-credential-exchange.d.ts

@@ -77,6 +77,5 @@ export declare function exchangeExternalCredential(input: {
     readonly config: ExternalCredentialProviderConfig;
     readonly nowMs: number;
 }): Promise<ExternalCredentialExchangeResponse>;
-export declare function validateExternalCredentialProviderEndpoint(config: ExternalCredentialProviderConfig): URL;
 export {};
 //# sourceMappingURL=external-credential-exchange.d.ts.map

package/node_modules/@noodle-borg/service/dist/external-credential-exchange.js

@@ -111,7 +111,7 @@ export async function exchangeExternalCredential(input) {
     }
     return externalCredentialExchangeResponseSchema.parse(await readBoundedJson(response, EXTERNAL_CREDENTIAL_EXCHANGE_MAX_RESPONSE_BYTES));
 }
-export function validateExternalCredentialProviderEndpoint(config) {
+function validateExternalCredentialProviderEndpoint(config) {
     if (!isVisibleBoundedUrlText(config.endpoint) || !isVisibleBoundedUrlText(config.allowedOrigin)) {
         throw new Error('external credential provider endpoint is not allowed');
     }

package/node_modules/@noodle-borg/service/dist/http-util.js

@@ -1,75 +1,4 @@
-import { gunzipSync } from 'node:zlib';
-import { effectiveProto } from '@noodle-borg/transport-http';
-export async function readBody(req, max) {
-    const body = await readBodyBuffer(req, max);
-    return body.ok ? { ok: true, text: body.buffer.toString('utf8') } : body;
-}
-async function readBodyBuffer(req, max) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of req) {
-        const buf = chunk;
-        size += buf.length;
-        if (size > max)
-            return { ok: false, receivedBytes: size, maxBytes: max };
-        chunks.push(buf);
-    }
-    return { ok: true, buffer: Buffer.concat(chunks) };
-}
-/** Read exact request bytes for signature-verified provider webhooks. */
-export function readRawBody(req, max) {
-    return readBodyBuffer(req, max);
-}
-export async function readDeployBody(req, max) {
-    const encoding = (req.headers['content-encoding'] ?? 'identity').trim().toLowerCase();
-    if (encoding !== 'identity' && encoding !== 'gzip') {
-        return { ok: false, status: 415, error: `unsupported content encoding "${encoding}"` };
-    }
-    const body = await readBodyBuffer(req, max);
-    if (!body.ok) {
-        return {
-            ok: false,
-            status: 413,
-            error: `${encoding === 'gzip' ? 'compressed deploy' : 'deploy'} request exceeds the ${body.maxBytes} byte limit (received at least ${body.receivedBytes} bytes)`,
-            receivedBytes: body.receivedBytes,
-            maxBytes: body.maxBytes,
-        };
-    }
-    if (encoding === 'identity') {
-        return { ok: true, text: body.buffer.toString('utf8'), encoding };
-    }
-    try {
-        const expanded = gunzipSync(body.buffer, { maxOutputLength: max });
-        return { ok: true, text: expanded.toString('utf8'), encoding };
-    }
-    catch (error) {
-        const code = error instanceof Error && 'code' in error ? String(error.code) : '';
-        if (code === 'ERR_BUFFER_TOO_LARGE') {
-            return {
-                ok: false,
-                status: 413,
-                error: `expanded deploy request exceeds the ${max} byte limit`,
-                maxBytes: max,
-            };
-        }
-        return { ok: false, status: 400, error: 'invalid gzip deploy request' };
-    }
-}
-export async function readJsonBody(req, max) {
-    const body = await readBody(req, max);
-    if (!body.ok)
-        return { ok: false, status: 413, error: 'request body too large' };
-    try {
-        return { ok: true, value: JSON.parse(body.text) };
-    }
-    catch (error) {
-        return { ok: false, status: 400, error: `invalid JSON: ${error.message}` };
-    }
-}
-export function sendJson(res, status, body) {
-    res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' });
-    res.end(JSON.stringify(body));
-}
+import { effectiveProto, sendJson, } from '@noodle-borg/transport-http';
 /**
  * Log a thrown route error (redacted to name/message/short-stack — never a body, key, or secret) and
  * answer 500 if the response hasn't already started. The shared catch tail for async route handlers so

package/node_modules/@noodle-borg/service/dist/managed-config-expressions.d.ts

@@ -1,5 +1,4 @@
 import type { TenantAuthConfig, TenantBridgeAuthConfig } from './store.js';
-export declare function managedVariableNamesInString(value: string): readonly string[];
 export declare function resolveManagedVariablesInString(value: string, variables: Readonly<Record<string, string>>): string;
 export declare function serverAuthVariableBindings(auth: TenantAuthConfig | undefined): readonly string[];
 export declare function resolveTenantBridgeAuthVariables(auth: TenantBridgeAuthConfig, variables: Readonly<Record<string, string>>): TenantBridgeAuthConfig;

package/node_modules/@noodle-borg/service/dist/managed-config-expressions.js

@@ -1,5 +1,5 @@
 const MANAGED_VARIABLE_RE = /\$\{env\.([A-Za-z0-9_]+)\}/g;
-export function managedVariableNamesInString(value) {
+function managedVariableNamesInString(value) {
     const names = new Set();
     for (const match of value.matchAll(MANAGED_VARIABLE_RE)) {
         if (match[1] !== undefined)

package/node_modules/@noodle-borg/service/dist/oauth/customer-bridge.js

@@ -1,7 +1,7 @@
 import { renderOAuthPage } from './branding.js';
 const FIREBASE_AUTHORIZE_PATH = '/oauth/customer/firebase/authorize';
 const FIREBASE_CALLBACK_PATH = '/oauth/customer/firebase/callback';
-export const MICROSOFT_CALLBACK_PATH = '/oauth/customer/microsoft/callback';
+const MICROSOFT_CALLBACK_PATH = '/oauth/customer/microsoft/callback';
 const MICROSOFT_REQUIRED_SCOPES = ['openid', 'profile', 'email', 'offline_access'];
 export function bridgeAuthorizeUrl(auth, input) {
     const issuer = trimTrailingSlash(input.issuer);

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { capabilitiesForDeveloperResource, isDeveloperCapability, isDeveloperResource, } from '@noodle-borg/developer-mcp';
-export const DEVELOPER_GRANT_VERSION = 2;
-export const DEVELOPER_GRANT_ACCESS_MODEL = 'live_user';
+const DEVELOPER_GRANT_VERSION = 2;
+const DEVELOPER_GRANT_ACCESS_MODEL = 'live_user';
 export class InMemoryDeveloperGrantStore {
     #records = new Map();
     #now;

package/node_modules/@noodle-borg/service/dist/observability-runtime.js

@@ -1,6 +1,5 @@
 import { InMemoryIntentCaptureSettingsStore, InMemoryIntentEventStore, InMemoryRequestEventStore, } from '@noodle-borg/observability';
-import { applySecurityHeaders, enforceHttps, } from '@noodle-borg/transport-http';
-import { sendJson } from './http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
 import { dispatchAnalyticsReads } from './routes/analytics-dispatch.js';
 import { dispatchIntentCaptureRoutes } from './routes/intent-capture-dispatch.js';
 export function createObservabilityStores(options) {
@@ -11,7 +10,7 @@ export function createObservabilityStores(options) {
         new Set(options.intentCapturePreviewOrgs ?? []),
     ];
 }
-export async function resolveIntentMode(target, ref, previewOrgs, settings) {
+async function resolveIntentMode(target, ref, previewOrgs, settings) {
     if (target === undefined)
         return undefined;
     const resolved = ref ??

package/node_modules/@noodle-borg/service/dist/registry-targets.js

@@ -36,7 +36,7 @@ export function servedTargetFor(record, served, customerVerifierFactory) {
             : {}),
     };
 }
-export class MissingCustomerAuthError extends Error {
+class MissingCustomerAuthError extends Error {
     deploymentId;
     constructor(deploymentId) {
         super('customers access mode requires server.auth');
@@ -54,7 +54,7 @@ export function tryServedTargetFor(record, served, customerVerifierFactory) {
         throw error;
     }
 }
-export function servedTargetMatchesRecord(target, record) {
+function servedTargetMatchesRecord(target, record) {
     const expectedOwner = record.accessMode === 'owner-only' ? deploymentOwnerSubject(record) : undefined;
     const expectedMembership = record.accessMode === 'org-members' ? record.orgMembershipSources : undefined;
     return (target.deploymentId === record.deploymentId &&
@@ -98,7 +98,7 @@ function sameStrings(left, right) {
             left.length === right.length &&
             left.every((value, index) => value === right[index])));
 }
-export function customerTargetFields(auth, customerVerifierFactory) {
+function customerTargetFields(auth, customerVerifierFactory) {
     if (auth.kind === 'bridge') {
         return {
             verifyToken: customerVerifierFactory?.(auth) ?? denyAllCustomerToken,

package/node_modules/@noodle-borg/service/dist/routes/access-mode.js

@@ -1,7 +1,3 @@
-import { accessModeSchema } from '@noodle-borg/wire-contracts';
-export function isAccessMode(value) {
-    return accessModeSchema.safeParse(value).success;
-}
 export function isIdentityAccessMode(accessMode) {
     return (accessMode === 'owner-only' ||
         accessMode === 'org-members' ||

package/node_modules/@noodle-borg/service/dist/routes/access.js

@@ -1,6 +1,6 @@
 import { normalizeServerVersion } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { accessUpdateRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { deploymentOwnerSubject } from '../registry-helpers.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/alerts.js

@@ -1,12 +1,13 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { AlertRuleResponseSchema, AlertRulesListResponseSchema } from '@noodle-borg/wire-contracts';
 import { buildAlertWebhookPayload, deliverAlertWebhook, validateAlertWebhookUrl, } from '../alert-webhook.js';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { ALERT_METRICS, ALERT_WINDOWS_MINUTES, MAX_ALERT_RULES_PER_ENV, } from '../store/alert-rules.js';
 import { sendContract } from './apps.js';
 import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';
 /** Redact a webhook URL to its origin — path/query (where tokens live) never leave the service. */
-export function redactWebhookUrl(url) {
+function redactWebhookUrl(url) {
     try {
         return `${new URL(url).origin}/…`;
     }

package/node_modules/@noodle-borg/service/dist/routes/analytics.js

@@ -1,5 +1,6 @@
 import { aggregateRequestEvents, parseRequestEventQuery } from '@noodle-borg/observability';
-import { normalizedTimestamps, sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
+import { normalizedTimestamps } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 /**
  * Tenant analytics read routes (ADR 0121 Stage B): `metrics` (aggregated), `events` (the stream), and

package/node_modules/@noodle-borg/service/dist/routes/apps.js

@@ -1,5 +1,5 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { AppResponseSchema, AppsListResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 import { appWithEndpointUrl } from './endpoint-enrichment.js';
 const MAX_APPS_LIMIT = 500;

package/node_modules/@noodle-borg/service/dist/routes/archive.js

@@ -1,5 +1,6 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { CustomerAuthAudienceConflictError } from '../customer-auth-audience-binding.js';
-import { sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { respondDeploymentActivationError } from './deployment-activation-response.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/asset-control-plane.js

@@ -1,5 +1,6 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { AssetPlanError } from '../assets.js';
-import { baseFromRequest, readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { baseFromRequest, sendForbidden } from '../http-util.js';
 import { parsePreparedAssets } from './assets.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssetPreflight(req, res, options, maxBody, tenant, gate, controlPlane, audit) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-agent.js

@@ -1,6 +1,6 @@
 import { ADMISSION_DEFAULTS } from '@noodle-borg/admission-limits/portable';
 import { assistantCoreModelMessages, assistantTurnModelContextMessages, requestAssistantSuggestedPrompts, requestModelCompletion, resolveAssistantContextProviderModelResult, } from '@noodle-borg/assistant-gateway/model-runtime';
-import { assistantGuideModelContext, assistantModelToolOncePerSession, assistantModelToolRequiredWhenVisible, assistantOmittedToolResult, assistantViewAvailableData, dispatchAssistantTool, projectAssistantGuide, publicSurfaceOf, remainingTurnTokens, selectAssistantModelTools, toolTouchesDelegatedAuth, withAssistantSessionExecutionAuthority, } from '@noodle-borg/assistant-gateway/portable';
+import { assistantGuideModelContext, assistantModelToolOncePerSession, assistantModelToolRequiredWhenVisible, assistantOmittedToolResult, assistantViewAvailableData, dispatchAssistantTool, projectAssistantGuide, publicSurfaceOf, recoverableAssistantView, remainingTurnTokens, selectAssistantModelTools, toolTouchesDelegatedAuth, withAssistantSessionExecutionAuthority, } from '@noodle-borg/assistant-gateway/portable';
 import { validateJsonSchemaWithDefaults } from '@noodle-borg/compiler';
 import { guardedFetch } from '@noodle-borg/connector-http';
 import { evaluateToolAuthorization } from '@noodle-borg/protocol';
@@ -207,6 +207,9 @@ export async function runAgentTurn(target, session, message, context, deps, emit
                 tool,
                 session,
                 assistant,
+                ...(target.served.artifact.server.state === undefined
+                    ? {}
+                    : { state: target.served.artifact.server.state }),
                 elevations: deps.elevations,
                 ...(delegatedKeys !== undefined && delegatedKeys.size > 0
                     ? {
@@ -269,8 +272,10 @@ export async function runAgentTurn(target, session, message, context, deps, emit
                 result: dispatch.output,
                 arguments: args,
             }, (failure) => deps.logger?.warn('assistant.view.unresolved', { ...failure }));
-            if (view)
+            if (view) {
+                await deps.store.replaceLatestView(session.id, recoverableAssistantView(view));
                 emit({ event: 'view_available', data: { ...view } });
+            }
             messages.push({
                 role: 'tool',
                 tool_call_id: call.id,

package/node_modules/@noodle-borg/service/dist/routes/assistant-appearance.js

@@ -1,5 +1,6 @@
 import { assistantAppearanceOverrideSchema, assistantBrowserConfiguration, resolveAssistantAppearanceConfiguration, } from '@noodle-borg/assistant-gateway/portable';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssistantAppearance(req, res, tenant, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-clients.js

@@ -1,4 +1,5 @@
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssistantClients(req, res, tenant, id, action, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-doctor.js

@@ -3,7 +3,8 @@ import { probeAssistantModelBoundary } from '@noodle-borg/assistant-gateway/mode
 import { assistantCustomerIssuer, completeElevation, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
 import { guardedFetch } from '@noodle-borg/connector-http';
 import { tenantMcpUrl } from '@noodle-borg/module';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { resolveAssistantModelBinding } from './assistant-model-binding.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-elevation.js

@@ -1,7 +1,8 @@
 import { completeElevation, publicSurfaceOf } from '@noodle-borg/assistant-gateway/portable';
 import { anonymousBehavior } from '@noodle-borg/compiler';
+import { claimableStateHandleNames } from '@noodle-borg/runtime';
+import { sendJson } from '@noodle-borg/transport-http';
 import { assistantSessionResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 function isMixed(surface) {
     return surface?.mode === 'mixed';
 }
@@ -16,6 +17,7 @@ const ELEVATION_REFUSAL_MESSAGES = {
     elevation_tenant_mismatch: 'sign-in ticket belongs to a different tenant',
     elevation_session_unavailable: 'the conversation behind this sign-in is no longer available',
     elevation_already_signed_in: 'this conversation is already signed in',
+    elevation_state_conflict: 'the signed-in account already has state at the same key; restart or resolve that draft first',
 };
 /**
  * Decide whether this call is an elevation instead of an execution.
@@ -40,6 +42,7 @@ export async function interceptForElevation(input) {
         sessionId: input.session.id,
         tenant: input.session.tenant,
         tool: input.tool.name,
+        claimableStateHandles: claimableStateHandleNames(input.state),
         now: input.now,
     });
     return {
@@ -84,7 +87,7 @@ export async function elevateAssistantSession(res, deps, input) {
             code: 'elevation_unavailable',
         });
     }
-    const elevated = await completeElevation({
+    const request = {
         continuation: input.signInTicket,
         tenant: input.client.tenant,
         caller: input.caller,
@@ -95,11 +98,14 @@ export async function elevateAssistantSession(res, deps, input) {
         ...(input.customerRouting ? { customerRouting: input.customerRouting } : {}),
         ...(input.boundSurface ? { boundSurface: input.boundSurface } : {}),
         resume: input.resume,
-    }, {
-        elevations: deps.elevations,
-        elevateSession: (request) => deps.store.elevateSession(request),
-        now: () => deps.clock?.() ?? new Date(),
-    });
+    };
+    const elevated = deps.elevationCoordinator
+        ? await deps.elevationCoordinator.complete(request)
+        : await completeElevation(request, {
+            elevations: deps.elevations,
+            elevateSession: (elevation) => deps.store.elevateSession(elevation),
+            now: () => deps.clock?.() ?? new Date(),
+        });
     if (!elevated.ok) {
         await deps.audit.emit({
             eventType: 'assistant.session.elevation_refused',
@@ -137,7 +143,8 @@ export async function elevateAssistantSession(res, deps, input) {
         endpoints: input.endpoints,
         ...(input.configuration ? { configuration: input.configuration } : {}),
         // The armed hint: the widget answers with one { resume: true } turn on the turns endpoint.
-        ...(input.resume ? { resume: { tool: elevated.tool } } : {}),
+        ...(elevated.resumeArmed ? { resume: { tool: elevated.tool } } : {}),
+        continuedAfterAuthentication: true,
     };
     assistantSessionResponseSchema.parse(body);
     return sendJson(res, 200, body);

package/node_modules/@noodle-borg/service/dist/routes/assistant-embeds.js

@@ -1,6 +1,7 @@
 import { ADMISSION_DEFAULTS, clamp } from '@noodle-borg/admission-limits/portable';
 import { assistantEmbedOperatorView, parsePublicEmbedBudget, publicSurfaceOf, surfaceEnvelope, } from '@noodle-borg/assistant-gateway/portable';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 /**

package/node_modules/@noodle-borg/service/dist/routes/assistant-interaction-replay.js

@@ -1,5 +1,5 @@
-import { assistantInteractionTool, assistantViewAvailableData, auditAssistantInteraction, } from '@noodle-borg/assistant-gateway/portable';
-import { sendJson } from '../http-util.js';
+import { assistantInteractionTool, assistantViewAvailableData, auditAssistantInteraction, recoverableAssistantView, } from '@noodle-borg/assistant-gateway/portable';
+import { sendJson } from '@noodle-borg/transport-http';
 import { now } from './assistant.js';
 import { assistantInteractionScope } from './assistant-interaction-resolution.js';
 import { endInteractionSse, writeInputRequested, writeInteractionError, writeInteractionResolved, writeInteractionSseHeaders, writeToolCompleted, writeToolProposed, writeViewAvailable, } from './assistant-interaction-stream.js';
@@ -71,8 +71,10 @@ export async function replayOrConflict(res, deps, session, interaction, action)
                 replayed: true,
             }, (failure) => deps.logger?.warn('assistant.view.unresolved', { ...failure }))
             : undefined;
-        if (view)
+        if (view) {
+            await deps.store.replaceLatestView(session.id, recoverableAssistantView(view));
             writeViewAvailable(res, view);
+        }
     }
     else if (current.status === 'failed') {
         writeInteractionError(res, current.publicOutcome.code, false);