@noodleseed/one 0.152.0 → 0.153.0

package/node_modules/@noodle-borg/observability/dist/request-events-postgres.js

@@ -207,7 +207,9 @@ function rowToEvent(row) {
         ...(row.deployment_id !== null ? { deploymentId: row.deployment_id } : {}),
         ...(row.server_version !== null ? { serverVersion: row.server_version } : {}),
         ...(row.sdk_protocol_version !== null ? { sdkProtocolVersion: row.sdk_protocol_version } : {}),
-        ...(row.protocol_era !== null ? { protocolEra: row.protocol_era } : {}),
+        ...(row.protocol_era !== null
+            ? { protocolEra: row.protocol_era }
+            : {}),
         ...(row.session_id !== null ? { sessionId: row.session_id } : {}),
         ...(row.client_name !== null ? { clientName: row.client_name } : {}),
         ...(row.client_version !== null ? { clientVersion: row.client_version } : {}),

package/node_modules/@noodle-borg/plugin-distribution/dist/openai-submission-render.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
 import { deterministicZip, skillSlug, } from '@noodle-borg/agent-packaging';
-export const OPENAI_SUBMISSION_SCHEMA = 'https://developers.openai.com/apps-sdk/schemas/chatgpt-app-submission.v1.json';
+const OPENAI_SUBMISSION_SCHEMA = 'https://developers.openai.com/apps-sdk/schemas/chatgpt-app-submission.v1.json';
 export function renderOpenAiSubmissionArtifacts(input, options, markdown) {
     const slug = skillSlug(input.appPackage.app.name);
     const skillArchivePath = `submission/${slug}-skill.zip`;

package/node_modules/@noodle-borg/protocol/dist/index.d.ts

@@ -9,6 +9,6 @@ export { handleStatelessHttp } from './stateless.js';
 export { evaluateToolAuthorization, filterAuthorizedTools, TOOL_AUTHORIZATION_DENIED, type ToolAuthorizationCaller, type ToolAuthorizationDecision, type ToolAuthorizationRuleClass, toolAuthorizationRuleClass, toolAuthorizationRuleFingerprint, } from './tool-authorization.js';
 export { toolRequiresConfirmation } from './tool-confirmation.js';
 export { createDualEraMcpHandler, createPlatformDualEraMcpHandler, } from './v2/handler.js';
-export { type McpProtocolEra, MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, type ServedMcpProtocolVersion, } from './v2/versions.js';
+export { LEGACY_MCP_PROTOCOL_VERSION, type McpProtocolEra, type McpProtocolMode, MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, type ServedMcpProtocolVersion, } from './v2/versions.js';
 export { injectWidgetBridge } from './widget/inject.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/index.js

@@ -8,6 +8,6 @@ export { handleStatelessHttp } from './stateless.js';
 export { evaluateToolAuthorization, filterAuthorizedTools, TOOL_AUTHORIZATION_DENIED, toolAuthorizationRuleClass, toolAuthorizationRuleFingerprint, } from './tool-authorization.js';
 export { toolRequiresConfirmation } from './tool-confirmation.js';
 export { createDualEraMcpHandler, createPlatformDualEraMcpHandler, } from './v2/handler.js';
-export { MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, } from './v2/versions.js';
+export { LEGACY_MCP_PROTOCOL_VERSION, MODERN_MCP_PROTOCOL_VERSION, SERVED_MCP_PROTOCOL_VERSIONS, } from './v2/versions.js';
 export { injectWidgetBridge } from './widget/inject.js';
 //# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/protocol/dist/interaction-envelope.js

@@ -32,7 +32,7 @@ export function toolUsesPortableInteractionArgument(tool) {
         typeof properties === 'object' &&
         Object.hasOwn(properties, '__noodleInteraction'));
 }
-export function interactionResponsesFromMeta(value) {
+function interactionResponsesFromMeta(value) {
     if (value === null || typeof value !== 'object' || Array.isArray(value))
         return {};
     const noodle = value.noodle;
@@ -43,7 +43,7 @@ export function interactionResponsesFromMeta(value) {
         return {};
     return parseElicitationResponses(interaction.responses);
 }
-export function parseElicitationResponses(value) {
+function parseElicitationResponses(value) {
     if (value === null || typeof value !== 'object' || Array.isArray(value))
         return {};
     const responses = {};

package/node_modules/@noodle-borg/protocol/dist/jsonrpc.d.ts

@@ -16,5 +16,5 @@ export interface JsonRpcErrorObject {
     readonly message: string;
     readonly data?: unknown;
 }
-export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, TOOL_AUTHORIZATION_DENIED, } from './error-codes.js';
+export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, } from './error-codes.js';
 //# sourceMappingURL=jsonrpc.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/jsonrpc.js

@@ -11,5 +11,5 @@ export const JSON_RPC = {
     INVALID_PARAMS: -32602,
     INTERNAL_ERROR: -32603,
 };
-export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, TOOL_AUTHORIZATION_DENIED, } from './error-codes.js';
+export { LEGACY_MCP_ERROR, RESOURCE_NOT_FOUND, } from './error-codes.js';
 //# sourceMappingURL=jsonrpc.js.map

package/node_modules/@noodle-borg/protocol/dist/mapping.d.ts

@@ -54,8 +54,6 @@ export declare function mapToolsList(artifact: RuntimeArtifact, caller?: ToolAut
     readonly knowledgeTools?: boolean;
     readonly intentCapture?: boolean;
 }): ToolsListResult;
-/** Generated `search_<name>` descriptors (ADR 0202 D4); listed only when the port is live. */
-export declare function knowledgeToolDescriptors(artifact: RuntimeArtifact, intentCapture?: boolean): ToolsListResult['tools'];
 /**
  * Map a successful tool output to a `tools/call` result. Structured (object) output is returned as
  * `structuredContent` and also serialized into a text block (the spec asks for both, for clients
@@ -63,7 +61,7 @@ export declare function knowledgeToolDescriptors(artifact: RuntimeArtifact, inte
  */
 export declare function mapToolOutput(output: unknown): ToolsCallResult;
 export declare function redactWidgetLinkedOutput(output: unknown): unknown;
-export interface ResourceDescriptor {
+interface ResourceDescriptor {
     readonly uri: string;
     readonly name: string;
     readonly title?: string;
@@ -75,7 +73,7 @@ export interface ResourceDescriptor {
 export interface ResourcesListResult {
     readonly resources: readonly ResourceDescriptor[];
 }
-export interface ResourceTemplateDescriptor {
+interface ResourceTemplateDescriptor {
     readonly uriTemplate: string;
     readonly name: string;
     readonly title?: string;
@@ -108,12 +106,12 @@ export declare function mapResourceTemplatesList(artifact: RuntimeArtifact): Res
  * anything else → a JSON-serialized text content.
  */
 export declare function mapResourceContents(uri: string, mimeType: string | undefined, output: unknown, meta?: Readonly<Record<string, unknown>>, widgetDomain?: WidgetDomainProjection): ReadResourceResult;
-export interface PromptArgumentDescriptor {
+interface PromptArgumentDescriptor {
     readonly name: string;
     readonly description?: string;
     readonly required?: boolean;
 }
-export interface PromptDescriptor {
+interface PromptDescriptor {
     readonly name: string;
     readonly title?: string;
     readonly description?: string;

package/node_modules/@noodle-borg/protocol/dist/mapping.js

@@ -74,7 +74,7 @@ export function mapToolsList(artifact, caller, options) {
     };
 }
 /** Generated `search_<name>` descriptors (ADR 0202 D4); listed only when the port is live. */
-export function knowledgeToolDescriptors(artifact, intentCapture = false) {
+function knowledgeToolDescriptors(artifact, intentCapture = false) {
     return (artifact.server.knowledge ?? []).map((component) => ({
         name: component.generatedTool.name,
         description: component.generatedTool.description,

package/node_modules/@noodle-borg/protocol/dist/observation.d.ts

@@ -19,15 +19,6 @@ export interface ProtocolObservation {
     /** Safe connector failure attribution projected from the execution error (#1309); scalars only. */
     readonly connector?: ConnectorFailureAttribution;
 }
-/**
- * The analytics `errorKind` for an execution error: the stable code, refined with the allowlisted
- * `reason` when one exists (`connector_error.timeout`). Analytics-only — the wire's structured
- * reasons are gated separately (and more narrowly) in `execution-error-mapping.ts`.
- */
-export declare function executionErrorKind(error: {
-    readonly code: string;
-    readonly reason?: string;
-}): string;
 /** The observation slice carried by an execution error, ready to spread into an observe call. */
 export declare function executionErrorObservation(error: {
     readonly code: string;

package/node_modules/@noodle-borg/protocol/dist/observation.js

@@ -3,7 +3,7 @@
  * `reason` when one exists (`connector_error.timeout`). Analytics-only — the wire's structured
  * reasons are gated separately (and more narrowly) in `execution-error-mapping.ts`.
  */
-export function executionErrorKind(error) {
+function executionErrorKind(error) {
     return error.reason === undefined ? error.code : `${error.code}.${error.reason}`;
 }
 /** The observation slice carried by an execution error, ready to spread into an observe call. */

package/node_modules/@noodle-borg/protocol/dist/v2/handler.d.ts

@@ -1,11 +1,12 @@
 import { type McpHttpHandler, type McpServerFactory } from '@modelcontextprotocol/server';
 import type { ProtocolRequestContext, ServedArtifact } from '../sdk-server.js';
+import { type McpProtocolMode } from './versions.js';
 /**
  * The single Noodle MCP entry: SDK-owned era classification/dispatch with a narrow Noodle response seam.
  */
 export declare function createDualEraMcpHandler(target: ServedArtifact, context?: ProtocolRequestContext): McpHttpHandler;
 /** Platform-wide SDK v2 handler used by artifact and first-party MCP surfaces alike. */
 export declare function createPlatformDualEraMcpHandler(factory: McpServerFactory, platformOptions?: {
-    readonly protocolMode?: 'dual' | 'legacy-only';
+    readonly protocolMode?: McpProtocolMode;
 }): McpHttpHandler;
 //# sourceMappingURL=handler.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/v2/versions.d.ts

@@ -3,4 +3,8 @@ export declare const SERVED_MCP_PROTOCOL_VERSIONS: readonly ["2026-07-28", "2025
 export type ServedMcpProtocolVersion = (typeof SERVED_MCP_PROTOCOL_VERSIONS)[number];
 export type McpProtocolEra = 'legacy' | 'modern';
 export declare const MODERN_MCP_PROTOCOL_VERSION: "2026-07-28";
+/** The newest revision served through the legacy (v1 SDK) path. */
+export declare const LEGACY_MCP_PROTOCOL_VERSION: "2025-11-25";
+/** Origin-wide rollout gate: serve both eras, or answer modern requests with method-not-found. */
+export type McpProtocolMode = 'dual' | 'legacy-only';
 //# sourceMappingURL=versions.d.ts.map

package/node_modules/@noodle-borg/protocol/dist/v2/versions.js

@@ -8,4 +8,6 @@ export const SERVED_MCP_PROTOCOL_VERSIONS = [
     '2024-10-07',
 ];
 export const MODERN_MCP_PROTOCOL_VERSION = SERVED_MCP_PROTOCOL_VERSIONS[0];
+/** The newest revision served through the legacy (v1 SDK) path. */
+export const LEGACY_MCP_PROTOCOL_VERSION = SERVED_MCP_PROTOCOL_VERSIONS[1];
 //# sourceMappingURL=versions.js.map

package/node_modules/@noodle-borg/protocol/dist/widget/domain-projection.d.ts

@@ -1,8 +1,9 @@
-export type WidgetHostKind = 'claude' | 'generic';
+type WidgetHostKind = 'claude' | 'generic';
 export interface WidgetDomainProjection {
     readonly host: WidgetHostKind;
     readonly mcpServerUrl?: string;
 }
 export declare function claudeWidgetDomain(mcpServerUrl: string): string | undefined;
 export declare function projectWidgetResourceMeta(meta: Readonly<Record<string, unknown>>, projection?: WidgetDomainProjection): Readonly<Record<string, unknown>>;
+export {};
 //# sourceMappingURL=domain-projection.d.ts.map

package/node_modules/@noodle-borg/protocol/package.json

@@ -24,7 +24,6 @@
   "dependencies": {
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/uri-template": "0.0.0",
-    "@modelcontextprotocol/core": "2.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@noodle-borg/compiler": "0.0.0",

package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts

@@ -34,14 +34,14 @@ export declare function credentialUnavailableErrorSnapshot(value: unknown): Cred
  * to business backends (docs/SPEC.md "Auth And Identity").
  */
 export type DownstreamCredential = BearerDownstreamCredential | CookieDownstreamCredential;
-export interface BearerDownstreamCredential {
+interface BearerDownstreamCredential {
     readonly kind?: 'bearer';
     /** Opaque secret material the connector presents to its backing system. */
     readonly token: string;
     /** Optional scope marker, for the broker's own bookkeeping. */
     readonly scope?: string;
 }
-export interface CookieDownstreamCredential {
+interface CookieDownstreamCredential {
     readonly kind: 'cookie';
     /** Cookie header value scoped by the broker to the connector's allowed downstream origin. */
     readonly cookie: string;

package/node_modules/@noodle-borg/service/dist/app-package-snapshot.d.ts

@@ -1,9 +1,8 @@
 import { type ProductSkillPackageInput, type RenderedProductSkillBundleV1 } from '@noodle-borg/agent-kit';
-import { type AppPackageArtifactV1, type AppPackageSnapshotV1, appPackageSnapshotV1Schema } from '@noodle-borg/app-package';
+import { type AppPackageArtifactV1, type AppPackageSnapshotV1 } from '@noodle-borg/app-package';
 import type { DeployError } from './registry-types.js';
 import type { DeployRecord } from './store.js';
 export type { AppPackageSnapshotV1 };
-export { appPackageSnapshotV1Schema };
 export type AppPackageRenderer = (input: ProductSkillPackageInput) => RenderedProductSkillBundleV1;
 export declare class AppPackageSnapshotError extends Error {
     readonly deployError: DeployError;

package/node_modules/@noodle-borg/service/dist/app-package-snapshot.js

@@ -1,6 +1,5 @@
 import { ProductSkillRenderError, renderProductSkillBundle, validateRenderedProductSkillFiles, } from '@noodle-borg/agent-kit';
-import { appPackageSnapshotV1Schema, createAppPackageSnapshotV1, parseAppPackageSnapshotV1, } from '@noodle-borg/app-package';
-export { appPackageSnapshotV1Schema };
+import { createAppPackageSnapshotV1, parseAppPackageSnapshotV1, } from '@noodle-borg/app-package';
 export class AppPackageSnapshotError extends Error {
     deployError;
     constructor(deployError) {

package/node_modules/@noodle-borg/service/dist/archive-preflight.js

@@ -1,4 +1,4 @@
-import { sendJson } from './http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 export function createArchivePreflight(registry) {
     return async (ref, _req, res) => {
         let archivedAt;

package/node_modules/@noodle-borg/service/dist/assets.js

@@ -1,6 +1,6 @@
 import { createHash, randomBytes } from 'node:crypto';
 import { readFile } from 'node:fs/promises';
-import { sendJson } from './http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 export { AssetPlanError, } from '@noodle-borg/module';
 export class InMemoryAssetStore {
     #objects = new Map();

package/node_modules/@noodle-borg/service/dist/assistant-bindings.js

@@ -2,7 +2,7 @@ import { serverAuthVariableBindings } from './managed-config-expressions.js';
 import { missingSecretErrors, missingVariableErrors } from './registry-helpers.js';
 import { serverAuthSecretBindings } from './server-auth-bindings.js';
 const VARIABLE = /\$\{env\.([A-Za-z0-9_]+)\}/g;
-export function assistantSecretBindings(assistant) {
+function assistantSecretBindings(assistant) {
     return assistant?.model.kind === 'openai-compatible'
         ? [
             {
@@ -14,7 +14,7 @@ export function assistantSecretBindings(assistant) {
         ]
         : [];
 }
-export function assistantVariableBindings(assistant) {
+function assistantVariableBindings(assistant) {
     if (!assistant)
         return [];
     if (assistant.model.kind !== 'openai-compatible')

package/node_modules/@noodle-borg/service/dist/client-compatibility.js

@@ -1,6 +1,5 @@
-import { applySecurityHeaders } from '@noodle-borg/transport-http';
+import { applySecurityHeaders, sendJson } from '@noodle-borg/transport-http';
 import { cliCompatibilityError } from './build-info.js';
-import { sendJson } from './http-util.js';
 export function rejectIncompatibleCli(req, res, buildInfo, tls) {
     const error = cliCompatibilityError(buildInfo, req.headers['x-noodle-cli-version']);
     if (!error)

package/node_modules/@noodle-borg/service/dist/developer-mcp/mount.js

@@ -2,9 +2,9 @@ import { createHash, randomUUID } from 'node:crypto';
 import { bearerToken } from '@noodle-borg/control-plane/portable';
 import { createDeveloperMcpServer, DEVELOPER_MCP_PATH, developerMcpContextSchema, environmentNameSchema, tenantSlugSchema, } from '@noodle-borg/developer-mcp';
 import { createPlatformDualEraMcpHandler } from '@noodle-borg/protocol';
-import { applySecurityHeaders, enforceHttps, toWebRequest, writeWebResponse, } from '@noodle-borg/transport-http';
+import { applySecurityHeaders, enforceHttps, readJsonBody, sendJson, toWebRequest, writeWebResponse, } from '@noodle-borg/transport-http';
 import { activeDeveloperGrantForIdentity } from '../auth/developer-grant-guard.js';
-import { baseFromRequest, normalizeServiceBase, readJsonBody, sendJson } from '../http-util.js';
+import { baseFromRequest, normalizeServiceBase } from '../http-util.js';
 import { ServiceDeveloperControlPlane } from './control-plane-adapter.js';
 export { DEVELOPER_MCP_PATH };
 const DEVELOPER_MCP_SCOPES = ['cloud:read'];

package/node_modules/@noodle-borg/service/dist/external-credential-exchange.d.ts

@@ -77,6 +77,5 @@ export declare function exchangeExternalCredential(input: {
     readonly config: ExternalCredentialProviderConfig;
     readonly nowMs: number;
 }): Promise<ExternalCredentialExchangeResponse>;
-export declare function validateExternalCredentialProviderEndpoint(config: ExternalCredentialProviderConfig): URL;
 export {};
 //# sourceMappingURL=external-credential-exchange.d.ts.map

package/node_modules/@noodle-borg/service/dist/external-credential-exchange.js

@@ -111,7 +111,7 @@ export async function exchangeExternalCredential(input) {
     }
     return externalCredentialExchangeResponseSchema.parse(await readBoundedJson(response, EXTERNAL_CREDENTIAL_EXCHANGE_MAX_RESPONSE_BYTES));
 }
-export function validateExternalCredentialProviderEndpoint(config) {
+function validateExternalCredentialProviderEndpoint(config) {
     if (!isVisibleBoundedUrlText(config.endpoint) || !isVisibleBoundedUrlText(config.allowedOrigin)) {
         throw new Error('external credential provider endpoint is not allowed');
     }

package/node_modules/@noodle-borg/service/dist/http-util.js

@@ -1,75 +1,4 @@
-import { gunzipSync } from 'node:zlib';
-import { effectiveProto } from '@noodle-borg/transport-http';
-export async function readBody(req, max) {
-    const body = await readBodyBuffer(req, max);
-    return body.ok ? { ok: true, text: body.buffer.toString('utf8') } : body;
-}
-async function readBodyBuffer(req, max) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of req) {
-        const buf = chunk;
-        size += buf.length;
-        if (size > max)
-            return { ok: false, receivedBytes: size, maxBytes: max };
-        chunks.push(buf);
-    }
-    return { ok: true, buffer: Buffer.concat(chunks) };
-}
-/** Read exact request bytes for signature-verified provider webhooks. */
-export function readRawBody(req, max) {
-    return readBodyBuffer(req, max);
-}
-export async function readDeployBody(req, max) {
-    const encoding = (req.headers['content-encoding'] ?? 'identity').trim().toLowerCase();
-    if (encoding !== 'identity' && encoding !== 'gzip') {
-        return { ok: false, status: 415, error: `unsupported content encoding "${encoding}"` };
-    }
-    const body = await readBodyBuffer(req, max);
-    if (!body.ok) {
-        return {
-            ok: false,
-            status: 413,
-            error: `${encoding === 'gzip' ? 'compressed deploy' : 'deploy'} request exceeds the ${body.maxBytes} byte limit (received at least ${body.receivedBytes} bytes)`,
-            receivedBytes: body.receivedBytes,
-            maxBytes: body.maxBytes,
-        };
-    }
-    if (encoding === 'identity') {
-        return { ok: true, text: body.buffer.toString('utf8'), encoding };
-    }
-    try {
-        const expanded = gunzipSync(body.buffer, { maxOutputLength: max });
-        return { ok: true, text: expanded.toString('utf8'), encoding };
-    }
-    catch (error) {
-        const code = error instanceof Error && 'code' in error ? String(error.code) : '';
-        if (code === 'ERR_BUFFER_TOO_LARGE') {
-            return {
-                ok: false,
-                status: 413,
-                error: `expanded deploy request exceeds the ${max} byte limit`,
-                maxBytes: max,
-            };
-        }
-        return { ok: false, status: 400, error: 'invalid gzip deploy request' };
-    }
-}
-export async function readJsonBody(req, max) {
-    const body = await readBody(req, max);
-    if (!body.ok)
-        return { ok: false, status: 413, error: 'request body too large' };
-    try {
-        return { ok: true, value: JSON.parse(body.text) };
-    }
-    catch (error) {
-        return { ok: false, status: 400, error: `invalid JSON: ${error.message}` };
-    }
-}
-export function sendJson(res, status, body) {
-    res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' });
-    res.end(JSON.stringify(body));
-}
+import { effectiveProto, sendJson, } from '@noodle-borg/transport-http';
 /**
  * Log a thrown route error (redacted to name/message/short-stack — never a body, key, or secret) and
  * answer 500 if the response hasn't already started. The shared catch tail for async route handlers so

package/node_modules/@noodle-borg/service/dist/managed-config-expressions.d.ts

@@ -1,5 +1,4 @@
 import type { TenantAuthConfig, TenantBridgeAuthConfig } from './store.js';
-export declare function managedVariableNamesInString(value: string): readonly string[];
 export declare function resolveManagedVariablesInString(value: string, variables: Readonly<Record<string, string>>): string;
 export declare function serverAuthVariableBindings(auth: TenantAuthConfig | undefined): readonly string[];
 export declare function resolveTenantBridgeAuthVariables(auth: TenantBridgeAuthConfig, variables: Readonly<Record<string, string>>): TenantBridgeAuthConfig;

package/node_modules/@noodle-borg/service/dist/managed-config-expressions.js

@@ -1,5 +1,5 @@
 const MANAGED_VARIABLE_RE = /\$\{env\.([A-Za-z0-9_]+)\}/g;
-export function managedVariableNamesInString(value) {
+function managedVariableNamesInString(value) {
     const names = new Set();
     for (const match of value.matchAll(MANAGED_VARIABLE_RE)) {
         if (match[1] !== undefined)

package/node_modules/@noodle-borg/service/dist/oauth/customer-bridge.js

@@ -1,7 +1,7 @@
 import { renderOAuthPage } from './branding.js';
 const FIREBASE_AUTHORIZE_PATH = '/oauth/customer/firebase/authorize';
 const FIREBASE_CALLBACK_PATH = '/oauth/customer/firebase/callback';
-export const MICROSOFT_CALLBACK_PATH = '/oauth/customer/microsoft/callback';
+const MICROSOFT_CALLBACK_PATH = '/oauth/customer/microsoft/callback';
 const MICROSOFT_REQUIRED_SCOPES = ['openid', 'profile', 'email', 'offline_access'];
 export function bridgeAuthorizeUrl(auth, input) {
     const issuer = trimTrailingSlash(input.issuer);

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { capabilitiesForDeveloperResource, isDeveloperCapability, isDeveloperResource, } from '@noodle-borg/developer-mcp';
-export const DEVELOPER_GRANT_VERSION = 2;
-export const DEVELOPER_GRANT_ACCESS_MODEL = 'live_user';
+const DEVELOPER_GRANT_VERSION = 2;
+const DEVELOPER_GRANT_ACCESS_MODEL = 'live_user';
 export class InMemoryDeveloperGrantStore {
     #records = new Map();
     #now;

package/node_modules/@noodle-borg/service/dist/observability-runtime.js

@@ -1,6 +1,5 @@
 import { InMemoryIntentCaptureSettingsStore, InMemoryIntentEventStore, InMemoryRequestEventStore, } from '@noodle-borg/observability';
-import { applySecurityHeaders, enforceHttps, } from '@noodle-borg/transport-http';
-import { sendJson } from './http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
 import { dispatchAnalyticsReads } from './routes/analytics-dispatch.js';
 import { dispatchIntentCaptureRoutes } from './routes/intent-capture-dispatch.js';
 export function createObservabilityStores(options) {
@@ -11,7 +10,7 @@ export function createObservabilityStores(options) {
         new Set(options.intentCapturePreviewOrgs ?? []),
     ];
 }
-export async function resolveIntentMode(target, ref, previewOrgs, settings) {
+async function resolveIntentMode(target, ref, previewOrgs, settings) {
     if (target === undefined)
         return undefined;
     const resolved = ref ??

package/node_modules/@noodle-borg/service/dist/registry-targets.js

@@ -36,7 +36,7 @@ export function servedTargetFor(record, served, customerVerifierFactory) {
             : {}),
     };
 }
-export class MissingCustomerAuthError extends Error {
+class MissingCustomerAuthError extends Error {
     deploymentId;
     constructor(deploymentId) {
         super('customers access mode requires server.auth');
@@ -54,7 +54,7 @@ export function tryServedTargetFor(record, served, customerVerifierFactory) {
         throw error;
     }
 }
-export function servedTargetMatchesRecord(target, record) {
+function servedTargetMatchesRecord(target, record) {
     const expectedOwner = record.accessMode === 'owner-only' ? deploymentOwnerSubject(record) : undefined;
     const expectedMembership = record.accessMode === 'org-members' ? record.orgMembershipSources : undefined;
     return (target.deploymentId === record.deploymentId &&
@@ -98,7 +98,7 @@ function sameStrings(left, right) {
             left.length === right.length &&
             left.every((value, index) => value === right[index])));
 }
-export function customerTargetFields(auth, customerVerifierFactory) {
+function customerTargetFields(auth, customerVerifierFactory) {
     if (auth.kind === 'bridge') {
         return {
             verifyToken: customerVerifierFactory?.(auth) ?? denyAllCustomerToken,

package/node_modules/@noodle-borg/service/dist/routes/access-mode.js

@@ -1,7 +1,3 @@
-import { accessModeSchema } from '@noodle-borg/wire-contracts';
-export function isAccessMode(value) {
-    return accessModeSchema.safeParse(value).success;
-}
 export function isIdentityAccessMode(accessMode) {
     return (accessMode === 'owner-only' ||
         accessMode === 'org-members' ||

package/node_modules/@noodle-borg/service/dist/routes/access.js

@@ -1,6 +1,6 @@
 import { normalizeServerVersion } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { accessUpdateRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { deploymentOwnerSubject } from '../registry-helpers.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/alerts.js

@@ -1,12 +1,13 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { AlertRuleResponseSchema, AlertRulesListResponseSchema } from '@noodle-borg/wire-contracts';
 import { buildAlertWebhookPayload, deliverAlertWebhook, validateAlertWebhookUrl, } from '../alert-webhook.js';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { ALERT_METRICS, ALERT_WINDOWS_MINUTES, MAX_ALERT_RULES_PER_ENV, } from '../store/alert-rules.js';
 import { sendContract } from './apps.js';
 import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';
 /** Redact a webhook URL to its origin — path/query (where tokens live) never leave the service. */
-export function redactWebhookUrl(url) {
+function redactWebhookUrl(url) {
     try {
         return `${new URL(url).origin}/…`;
     }

package/node_modules/@noodle-borg/service/dist/routes/analytics.js

@@ -1,5 +1,6 @@
 import { aggregateRequestEvents, parseRequestEventQuery } from '@noodle-borg/observability';
-import { normalizedTimestamps, sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
+import { normalizedTimestamps } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 /**
  * Tenant analytics read routes (ADR 0121 Stage B): `metrics` (aggregated), `events` (the stream), and

package/node_modules/@noodle-borg/service/dist/routes/apps.js

@@ -1,5 +1,5 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { AppResponseSchema, AppsListResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 import { appWithEndpointUrl } from './endpoint-enrichment.js';
 const MAX_APPS_LIMIT = 500;

package/node_modules/@noodle-borg/service/dist/routes/archive.js

@@ -1,5 +1,6 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { CustomerAuthAudienceConflictError } from '../customer-auth-audience-binding.js';
-import { sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { respondDeploymentActivationError } from './deployment-activation-response.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/asset-control-plane.js

@@ -1,5 +1,6 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { AssetPlanError } from '../assets.js';
-import { baseFromRequest, readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { baseFromRequest, sendForbidden } from '../http-util.js';
 import { parsePreparedAssets } from './assets.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssetPreflight(req, res, options, maxBody, tenant, gate, controlPlane, audit) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-appearance.js

@@ -1,5 +1,6 @@
 import { assistantAppearanceOverrideSchema, assistantBrowserConfiguration, resolveAssistantAppearanceConfiguration, } from '@noodle-borg/assistant-gateway/portable';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssistantAppearance(req, res, tenant, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-clients.js

@@ -1,4 +1,5 @@
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssistantClients(req, res, tenant, id, action, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-doctor.js

@@ -3,7 +3,8 @@ import { probeAssistantModelBoundary } from '@noodle-borg/assistant-gateway/mode
 import { assistantCustomerIssuer, completeElevation, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
 import { guardedFetch } from '@noodle-borg/connector-http';
 import { tenantMcpUrl } from '@noodle-borg/module';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { resolveAssistantModelBinding } from './assistant-model-binding.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-elevation.js

@@ -1,8 +1,8 @@
 import { completeElevation, publicSurfaceOf } from '@noodle-borg/assistant-gateway/portable';
 import { anonymousBehavior } from '@noodle-borg/compiler';
 import { claimableStateHandleNames } from '@noodle-borg/runtime';
+import { sendJson } from '@noodle-borg/transport-http';
 import { assistantSessionResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 function isMixed(surface) {
     return surface?.mode === 'mixed';
 }

package/node_modules/@noodle-borg/service/dist/routes/assistant-embeds.js

@@ -1,6 +1,7 @@
 import { ADMISSION_DEFAULTS, clamp } from '@noodle-borg/admission-limits/portable';
 import { assistantEmbedOperatorView, parsePublicEmbedBudget, publicSurfaceOf, surfaceEnvelope, } from '@noodle-borg/assistant-gateway/portable';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 /**

package/node_modules/@noodle-borg/service/dist/routes/assistant-interaction-replay.js

@@ -1,5 +1,5 @@
 import { assistantInteractionTool, assistantViewAvailableData, auditAssistantInteraction, recoverableAssistantView, } from '@noodle-borg/assistant-gateway/portable';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 import { now } from './assistant.js';
 import { assistantInteractionScope } from './assistant-interaction-resolution.js';
 import { endInteractionSse, writeInputRequested, writeInteractionError, writeInteractionResolved, writeInteractionSseHeaders, writeToolCompleted, writeToolProposed, writeViewAvailable, } from './assistant-interaction-stream.js';