@noodleseed/one 0.152.0 → 0.153.0

package/node_modules/@noodle-borg/service/dist/routes/assistant-interactions.js

@@ -1,6 +1,6 @@
 import { AssistantInteractionCapacityError, assistantConfirmationReview, assistantConfirmationTransition, assistantInputTransition, assistantInteractionTool, assistantPreparedArgumentReview, assistantPreparedToolContinuation, assistantSafeOutput, assistantToolContinuation, assistantViewAvailableData, auditAssistantInteraction, recoverableAssistantView, withAssistantSessionExecutionAuthority, } from '@noodle-borg/assistant-gateway/portable';
 import { executePreparedTool, executeToolInteractive, resumeTool, resumeToolPreparation, } from '@noodle-borg/runtime';
-import { readJsonBody, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { applyBrowserCors, authenticateSession, now, } from './assistant.js';
 import { replayOrConflict, writeUnknownOutcome } from './assistant-interaction-replay.js';
 import { parseInteractionResponse, validateInputContent } from './assistant-interaction-request.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-public-configuration.js

@@ -1,5 +1,5 @@
 import { authorizePublicConfiguration, effectiveAssistantBrowserConfiguration, publicEmbedTenant, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 import { applyBrowserCors } from './assistant-route-http.js';
 /** Browser-safe first paint for a public launcher; never mints a session or spends admission. */
 export async function handlePublicAssistantConfiguration(req, res, embedId, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-public-session.js

@@ -2,8 +2,8 @@ import { randomBytes } from 'node:crypto';
 import { ADMISSION_DEFAULTS, clientAddressBucket } from '@noodle-borg/admission-limits/portable';
 import { effectiveAssistantBrowserConfiguration, mintPublicSession, publicEmbedTenant, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
 import { assistantSessionUsageRequestEvent, captureAssistantUsage, captureRefusedAssistantSession, } from '@noodle-borg/observability';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { assistantSessionResponseSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { applyBrowserCors, assistantSessionEndpoints, now } from './assistant-route-http.js';
 /**
  * The transport half of anonymous session minting. Every decision — which refusal, in which order, and

package/node_modules/@noodle-borg/service/dist/routes/assistant-route-http.js

@@ -1,3 +1,4 @@
+import { bearerToken } from '@noodle-borg/transport-http';
 import { sendForbidden, sendUnauthorized } from '../http-util.js';
 export function handleAssistantPreflight(req, res) {
     const origin = typeof req.headers.origin === 'string' ? req.headers.origin : 'null';
@@ -11,13 +12,13 @@ export function handleAssistantPreflight(req, res) {
     res.end();
 }
 export async function authenticateSession(req, res, deps) {
-    const match = /^Bearer\s+(.+)$/i.exec(req.headers.authorization ?? '');
-    if (!match?.[1]) {
+    const token = bearerToken(req.headers.authorization);
+    if (token === null) {
         applyBrowserCors(req, res);
         sendUnauthorized(res, 'invalid assistant session');
         return undefined;
     }
-    const session = await deps.store.getSession(match[1], now(deps));
+    const session = await deps.store.getSession(token, now(deps));
     if (!session) {
         applyBrowserCors(req, res);
         sendUnauthorized(res, 'invalid assistant session');

package/node_modules/@noodle-borg/service/dist/routes/assistant-sandbox.js

@@ -7,7 +7,7 @@
  * `contract/v1/assistant-sandbox-document.html` and to the published client's srcdoc fallback; any
  * relay-protocol change is a coordinated contract event, never a local edit.
  */
-export const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
+const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
 let inner;
 const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
 // Re-announce until the host acknowledges with the resource: when this document is hosted

package/node_modules/@noodle-borg/service/dist/routes/assistant-suggestions.js

@@ -1,7 +1,7 @@
 import { ADMISSION_DEFAULTS } from '@noodle-borg/admission-limits/portable';
 import { parseAssistantContextPreferences, resolveInvocationContextSnapshot, surfaceEnvelope, withAssistantSessionExecutionAuthority, } from '@noodle-borg/assistant-gateway/portable';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { assistantSuggestionsRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { generateInitialAssistantSuggestions } from './assistant-agent.js';
 import { applyBrowserCors, authenticateSession, now } from './assistant-route-http.js';
 import { sessionScopedTarget } from './assistant-session-target.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-usage.js

@@ -1,5 +1,6 @@
 import { ASSISTANT_USAGE_METHOD, aggregateAssistantUsage } from '@noodle-borg/observability';
-import { normalizedTimestamps, sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
+import { normalizedTimestamps } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 const WINDOWS_MS = new Map([
     ['24h', 24 * 60 * 60 * 1000],

package/node_modules/@noodle-borg/service/dist/routes/assistant.js

@@ -6,8 +6,9 @@ import { tenantMcpUrl } from '@noodle-borg/module';
 import { assistantAppToolCallRecorder, assistantRefusedTurnUsageRequestEvent, assistantSessionUsageRequestEvent, assistantTurnNumber, assistantTurnUsageRequestEvent, captureAssistantUsage, } from '@noodle-borg/observability';
 import { mapExecutionError, mapResourceContents, mapResourcesList, mapToolOutput, mapToolsList, } from '@noodle-borg/protocol';
 import { executeResource } from '@noodle-borg/runtime';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { assistantMessageTurnRequestSchema, assistantResumeTurnRequestSchema, assistantSessionResponseSchema, } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendForbidden, sendJson, sendUnauthorized } from '../http-util.js';
+import { sendForbidden, sendUnauthorized } from '../http-util.js';
 import { createAssistantTurnStats, runAgentTurn } from './assistant-agent.js';
 import { elevateAssistantSession } from './assistant-elevation.js';
 import { executeAssistantKnowledgeSearch, findAssistantKnowledgeComponent, resolveAssistantKnowledge, } from './assistant-knowledge.js';

package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js

@@ -1,5 +1,5 @@
-import { applySecurityHeaders, enforceHttps } from '@noodle-borg/transport-http';
-import { baseFromRequest, normalizeServiceBase, sendJson } from '../http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
+import { baseFromRequest, normalizeServiceBase } from '../http-util.js';
 /** Provider-neutral discovery and its shipped Google-named compatibility route share exact bytes. */
 export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
     if (req.method !== 'GET' || (url.pathname !== '/v1/auth' && url.pathname !== '/v1/auth/google')) {

package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.js

@@ -1,7 +1,7 @@
 import { bearerToken } from '@noodle-borg/control-plane/portable';
 import { normalizeServerVersion, tenantMcpUrl } from '@noodle-borg/module';
 import { freezeCustomerRoutes, resolveCustomerRouteBinding, } from '@noodle-borg/runtime';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 /** Verify one real customer identity and probe delegated bindings without calling business APIs. */
 export async function handleLiveAuthDoctor(req, res, registry, tenant, options) {
     let serverVersion;

package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js

@@ -54,7 +54,7 @@ function encodedConfigRouteRef(kind, encodedScope, encodedName, searchParams, re
         return invalidConfigRouteRef(kind, encodedName, reveal);
     }
 }
-export function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
+function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
     let safeScope;
     try {
         safeScope = validateConfigScope(scope);

package/node_modules/@noodle-borg/service/dist/routes/config-values.js

@@ -1,7 +1,8 @@
 import { DEVELOPER_CLI_PATH } from '@noodle-borg/developer-mcp';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { configValueSetRequestSchema, EffectiveConfigResponseSchema, formatWireError, RevealSecretResponseSchema, } from '@noodle-borg/wire-contracts';
 import { projectEffectiveConfig, } from '../config-value-projection.js';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleConfigValues(req, res, gate, controlPlane, configStore, registry, maxBody, ref, audit, developerGrants) {
     const identity = await authorizeControlPlane(req, res, gate, {

package/node_modules/@noodle-borg/service/dist/routes/control-plane.js

@@ -2,10 +2,10 @@ import { cspFaultsInManifest } from '@noodle-borg/compiler';
 import { ensurePersonalWorkspace } from '@noodle-borg/control-plane/portable';
 import { DEVELOPER_ASSISTANT_PATH, DEVELOPER_CLI_PATH, } from '@noodle-borg/developer-mcp';
 import { normalizeServerVersion } from '@noodle-borg/module';
-import { noopLogger } from '@noodle-borg/transport-http';
+import { noopLogger, readDeployBody, sendJson } from '@noodle-borg/transport-http';
 import { deployRequestSchema, formatWireError, } from '@noodle-borg/wire-contracts';
 import { authorizeDeveloperGrant, } from '../auth/developer-grant-guard.js';
-import { baseFromRequest, readDeployBody, sendForbidden, sendJson, sendUnauthorized, } from '../http-util.js';
+import { baseFromRequest, sendForbidden, sendUnauthorized } from '../http-util.js';
 import { endpointUrlOptionsForOrg } from '../mcp-public-routing.js';
 import { manifestUsesUserRoot } from '../registry-access.js';
 import { isIdentityAccessMode } from './access-mode.js';
@@ -14,7 +14,6 @@ import { provisionPublicEmbed } from './deploy-public-embed.js';
 import { respondDeploymentActivationError } from './deployment-activation-response.js';
 import { tenantMcpUrl } from './endpoint-enrichment.js';
 import { canManageMembers } from './org-admin.js';
-export { handleConfigValues } from './config-values.js';
 export async function handleDeploy(req, res, registry, options, maxBody, tenant, gate, controlPlane, audit) {
     // GHD-3: a GitHub run deploys with a run-scoped token on x-noodle-run-token — NOT a control-plane
     // identity. When that header is present the human control-plane auth (bearer + org membership) is

package/node_modules/@noodle-borg/service/dist/routes/deploy-preflight.js

@@ -1,6 +1,6 @@
 import { cspFaultsInManifest } from '@noodle-borg/compiler';
+import { readDeployBody, sendJson } from '@noodle-borg/transport-http';
 import { deployPreflightRequestSchema, formatWireError } from '@noodle-borg/wire-contracts';
-import { readDeployBody, sendJson } from '../http-util.js';
 import { manifestUsesUserRoot } from '../registry-access.js';
 import { isIdentityAccessMode } from './access-mode.js';
 import { authorizeDeploymentOwnerSelection, authorizeTenantControl, developerGrantRouteAccess, } from './control-plane.js';

package/node_modules/@noodle-borg/service/dist/routes/deployment-activation-response.js

@@ -1,5 +1,5 @@
 import { DeploymentActivationError } from '@noodle-borg/module';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 /** Translate provider-neutral activation failures without exposing commercial account details. */
 export async function respondDeploymentActivationError(res, error, context) {
     if (!(error instanceof DeploymentActivationError))

package/node_modules/@noodle-borg/service/dist/routes/deployment-lock.js

@@ -1,6 +1,6 @@
 import { normalizeServerVersion } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { deploymentLockRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';
 export async function handleDeploymentLockUpdate(req, res, registry, gate, controlPlane, audit, maxBody, tenant) {

package/node_modules/@noodle-borg/service/dist/routes/deployment-package.js

@@ -1,7 +1,7 @@
 import { sha256Canonical } from '@noodle-borg/app-package';
+import { sendJson } from '@noodle-borg/transport-http';
 import { DeploymentPackageResponseShapeSchema } from '@noodle-borg/wire-contracts';
 import { parseAppPackageSnapshot } from '../app-package-snapshot.js';
-import { sendJson } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 const PACKAGE_UNAVAILABLE = {
     code: 'package_unavailable',

package/node_modules/@noodle-borg/service/dist/routes/deployments.js

@@ -1,5 +1,5 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { DeploymentResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 import { sendContract } from './apps.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 import { withEndpointUrl } from './endpoint-enrichment.js';

package/node_modules/@noodle-borg/service/dist/routes/diagnostics.js

@@ -1,5 +1,6 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { inspectServiceDeployment } from '../developer-mcp/inspection.js';
-import { baseFromRequest, sendJson } from '../http-util.js';
+import { baseFromRequest } from '../http-util.js';
 import { endpointUrlOptionsForOrg } from '../mcp-public-routing.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 export async function handleInspect(req, res, registry, gate, controlPlane, tenant, options) {

package/node_modules/@noodle-borg/service/dist/routes/environment-production.js

@@ -1,5 +1,6 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { ProductionEnvironmentRequestSchema, ProductionEnvironmentResponseSchema, } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { sendContract } from './apps.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/envs.js

@@ -1,5 +1,5 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { EnvResponseSchema, EnvsListResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 import { sendContract } from './apps.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 import { envWithEndpointUrl } from './endpoint-enrichment.js';

package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js

@@ -1,4 +1,4 @@
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 import { authorizeTenantControl } from './control-plane.js';
 export async function handleGoogleWorkloadIdentityDoctor(req, res, tenant, deps) {
     const identity = await authorizeTenantControl(req, res, deps.gate, deps.controlPlane, tenant.org);

package/node_modules/@noodle-borg/service/dist/routes/intent-capture.js

@@ -1,4 +1,5 @@
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';
 const RETENTION_DAYS = 14;

package/node_modules/@noodle-borg/service/dist/routes/logs.js

@@ -1,4 +1,5 @@
-import { normalizedTimestamps, sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
+import { normalizedTimestamps } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 /**
  * `GET /v1/orgs/{org}/apps/{app}/envs/{env}/logs` — the tenant-safe developer log surface (M3, ADR 0101).

package/node_modules/@noodle-borg/service/dist/routes/openai-apps-challenge.js

@@ -1,6 +1,5 @@
 import { OPENAI_APPS_CHALLENGE_PATH } from '@noodle-borg/module';
-import { applySecurityHeaders, enforceHttps } from '@noodle-borg/transport-http';
-import { sendJson } from '../http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
 import { trustedPublicOrgWellKnownFromRequest } from '../mcp-public-routing.js';
 export function handlePublicOpenAIAppsChallenge(req, res, options, tls, controlPlane) {
     applySecurityHeaders(res, tls);

package/node_modules/@noodle-borg/service/dist/routes/org-admin.js

@@ -1,7 +1,8 @@
 import { mcpSubdomainEndpointOptions } from '@noodle-borg/control-plane/portable';
 import { normalizePublicBaseDomain, OPENAI_APPS_CHALLENGE_PATH } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { OrgSummarySchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { hashToken, randomToken } from '../oauth/tokens.js';
 import { validateOrgRole, } from '../store.js';
 import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';

package/node_modules/@noodle-borg/service/dist/routes/org-domains.js

@@ -1,4 +1,5 @@
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { validateOrgMembershipDomain, } from '../store.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers, canViewMembers, emitOrgAudit } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/org-mcp-subdomain.js

@@ -1,7 +1,7 @@
 import { McpSubdomainCooldownError, McpSubdomainIdempotencyConflictError, McpSubdomainOwnerRequiredError, McpSubdomainUnavailableError, validateMcpSubdomain, } from '@noodle-borg/control-plane/portable';
 import { normalizePublicBaseDomain } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { McpSubdomainMutationRequestSchema, McpSubdomainMutationResponseSchema, McpSubdomainSettingResponseSchema, } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { emitAuditMirrors } from '../store/audit.js';
 import { authorizeControlPlane } from './control-plane.js';
 const IDEMPOTENCY_KEY = /^[A-Za-z0-9._:-]{8,256}$/;

package/node_modules/@noodle-borg/service/dist/routes/paths.js

@@ -1,6 +1,5 @@
 import { isAlertRuleId } from '../store/alert-rules.js';
 import { DEPLOYMENT_ID_PATTERN, validateDomain, validateSlug, validateTenantRef, } from '../store.js';
-export { configRouteRef, parseConfigPath, } from './config-values-paths.js';
 function matchPath(pathname, pattern, decode) {
     const match = pattern.exec(pathname);
     if (!match)
@@ -208,44 +207,6 @@ export function parseTenantSessionPath(pathname) {
 export function parseTenantAssistantUsagePath(pathname) {
     return matchPath(pathname, /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/assistant\/usage$/, tenantRef);
 }
-/** Match `/v1/orgs/{org}/apps/{app}/github/connection` (GHD-1 repository connection, GET/POST/DELETE). */
-export function parseGithubConnectionPath(pathname) {
-    return matchPath(pathname, /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/github\/connection$/, appRef);
-}
-/** Parse `/v1/orgs/{org}/apps/{app}/github/runs` (GHD-2, the deploy-runs read surface). */
-export function parseGithubRunsPath(pathname) {
-    return matchPath(pathname, /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/github\/runs$/, appRef);
-}
-/** Match the fixed path `/v1/github/install-url` (GHD-1). */
-export function isGithubInstallUrlPath(pathname) {
-    return pathname === '/v1/github/install-url';
-}
-/** Match the fixed path `/v1/github/installations/claim` (GHD-1). */
-export function isGithubInstallationClaimPath(pathname) {
-    return pathname === '/v1/github/installations/claim';
-}
-/** Parse `/v1/github/runs/{runId}/status` (GHD-C1, the trusted runner's transition report). */
-export function parseGithubRunStatusPath(pathname) {
-    const match = /^\/v1\/github\/runs\/([A-Za-z0-9_-]+)\/status$/.exec(pathname);
-    return match ? match[1] : undefined;
-}
-/** Parse `/v1/github/runs/{runId}/claim` (GHD-C3, Cloud Run builder credential claim). */
-export function parseGithubRunClaimPath(pathname) {
-    const match = /^\/v1\/github\/runs\/([A-Za-z0-9_-]+)\/claim$/.exec(pathname);
-    return match ? match[1] : undefined;
-}
-/** Match the fixed path `/v1/github/webhook` (GHD-2, the GitHub App's webhook receiver). */
-export function isGithubWebhookPath(pathname) {
-    return pathname === '/v1/github/webhook';
-}
-/** Match the fixed path `/v1/github/setup` (GHD-1.4, the GitHub App's configured Setup URL). */
-export function isGithubSetupPath(pathname) {
-    return pathname === '/v1/github/setup';
-}
-/** Match the fixed path `/v1/github/installations/pending` (GHD-1.4, the CLI's install poll target). */
-export function isGithubInstallationPendingPath(pathname) {
-    return pathname === '/v1/github/installations/pending';
-}
 export function parseTenantActionPath(pathname, action) {
     return matchPath(pathname, new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/envs/([^/]+)/${action}$`), tenantRef);
 }

package/node_modules/@noodle-borg/service/dist/routes/protected-resource-metadata.js

@@ -1,12 +1,12 @@
 import { protectedResourceMetadata } from '@noodle-borg/auth';
 import { parseLegacyTenantMcpPath } from '@noodle-borg/module';
-import { applySecurityHeaders, enforceHttps } from '@noodle-borg/transport-http';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
 import { DEVELOPER_MCP_PATH, developerMcpScopes } from '../developer-mcp/mount.js';
-import { baseFromRequest, sendJson } from '../http-util.js';
+import { baseFromRequest } from '../http-util.js';
 import { trustedMcpResourceFromRequest } from '../mcp-public-routing.js';
 import { authorizationMetadataForTenant } from '../registry-targets.js';
 /** Well-known prefix for OAuth 2.0 Protected Resource Metadata (RFC 9728). */
-export const PROTECTED_RESOURCE_METADATA_PREFIX = '/.well-known/oauth-protected-resource';
+const PROTECTED_RESOURCE_METADATA_PREFIX = '/.well-known/oauth-protected-resource';
 export function dispatchProtectedResourceMetadata(req, res, url, registry, controlPlane, options, tls) {
     if (req.method !== 'GET' || !url.pathname.startsWith(PROTECTED_RESOURCE_METADATA_PREFIX)) {
         return false;

package/node_modules/@noodle-borg/service/dist/routes/rollback.js

@@ -1,5 +1,6 @@
 import { rollbackDeploymentOperation } from '@noodle-borg/control-plane/portable';
-import { baseFromRequest, readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { baseFromRequest, sendForbidden } from '../http-util.js';
 import { endpointUrlOptionsForOrg } from '../mcp-public-routing.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 export async function handleRollback(req, res, registry, gate, controlPlane, audit, maxBody, tenant, options) {

package/node_modules/@noodle-borg/service/dist/routes/service-principals-dispatch.js

@@ -1,5 +1,4 @@
-import { applySecurityHeaders, enforceHttps, } from '@noodle-borg/transport-http';
-import { sendJson } from '../http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
 import { parseServicePrincipalPath } from './service-principal-paths.js';
 import { handleServicePrincipalRequest } from './service-principals.js';
 /** Bind the shared security front door when the optional service-principal runtime is configured. */
@@ -16,7 +15,7 @@ export function createServicePrincipalDispatcher(registry, runtime, deps) {
     });
 }
 /** Dispatch the exact service-principal route family before generic MCP/tenant fallback. */
-export function dispatchServicePrincipalRoutes(req, res, url, deps) {
+function dispatchServicePrincipalRoutes(req, res, url, deps) {
     const path = parseServicePrincipalPath(url.pathname);
     if (path === undefined)
         return false;

package/node_modules/@noodle-borg/service/dist/routes/service-principals.js

@@ -1,4 +1,4 @@
-import { readJsonBody, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { createClientSecret, digestClientSecret } from '../oauth/service-principal-credentials.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { createServicePrincipalCredentialSchema, createServicePrincipalGrantSchema, createServicePrincipalSchema, } from './service-principal-contracts.js';

package/node_modules/@noodle-borg/service/dist/service-config.d.ts

@@ -60,8 +60,8 @@ export interface ObservabilityConfig {
         readonly maxEventsPerExecution?: number;
     };
 }
-export declare const AGENCY_ORG_TEMPLATES: readonly ["small-business", "mid-market", "enterprise"];
-export type AgencyOrgTemplate = (typeof AGENCY_ORG_TEMPLATES)[number];
+declare const AGENCY_ORG_TEMPLATES: readonly ["small-business", "mid-market", "enterprise"];
+type AgencyOrgTemplate = (typeof AGENCY_ORG_TEMPLATES)[number];
 export type ServiceConfigSource = {
     readonly kind: 'none';
 } | {
@@ -92,4 +92,5 @@ export declare function resolveServiceConfigSource(input: {
     readonly ok: false;
     readonly error: string;
 };
+export {};
 //# sourceMappingURL=service-config.d.ts.map

package/node_modules/@noodle-borg/service/dist/service-config.js

@@ -2,7 +2,7 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { CAPABILITY_NAMES, isServiceProfileName, SERVICE_PROFILE_NAMES, } from '@noodle-borg/capabilities';
 import { parse as parseYaml } from 'yaml';
-export const AGENCY_ORG_TEMPLATES = ['small-business', 'mid-market', 'enterprise'];
+const AGENCY_ORG_TEMPLATES = ['small-business', 'mid-market', 'enterprise'];
 export function defineNoodleService(config) {
     return config;
 }

package/node_modules/@noodle-borg/service/dist/service.js

@@ -2,7 +2,7 @@ import { InMemoryAssistantAppearanceSettingsStore, InMemoryAssistantStore, } fro
 import { allowAllGate, InMemoryControlPlaneStore } from '@noodle-borg/control-plane/portable';
 import { dispatchKnowledgeRequest } from '@noodle-borg/knowledge-operations/portable';
 import { OPENAI_APPS_CHALLENGE_PATH } from '@noodle-borg/module';
-import { applySecurityHeaders, createMcpRouter, enforceHttps, noopLogger, } from '@noodle-borg/transport-http';
+import { applySecurityHeaders, createMcpRouter, enforceHttps, noopLogger, sendJson, } from '@noodle-borg/transport-http';
 import { AnonymousConsumerLimiter, createAdmissionGate } from './admission.js';
 import { createArchivePreflight } from './archive-preflight.js';
 import { ArchiveSweeper, resolveArchiveRetentionDays } from './archive-sweeper.js';
@@ -13,7 +13,7 @@ import { rejectIncompatibleCli } from './client-compatibility.js';
 import { createDataPlaneMembershipAuthorizer } from './data-plane-membership.js';
 import { DEVELOPER_MCP_PATH, handleDeveloperMcpRequest } from './developer-mcp/mount.js';
 import { createDeveloperMcpMountOptions } from './developer-mcp/service-options.js';
-import { baseFromRequest, respondRouteError, sendJson } from './http-util.js';
+import { baseFromRequest, respondRouteError } from './http-util.js';
 import { createMcpInvocationContextResolver } from './invocation-context.js';
 import { wireServiceKnowledge } from './knowledge-wiring.js';
 import * as mcp from './mcp-public-routing.js';

package/node_modules/@noodle-borg/service/dist/store/alert-rules.js

@@ -34,7 +34,7 @@ export function isAlertRuleId(id) {
  * validation of the webhook URL (https-only, loopback carve-out, private-IP rejection) is the
  * route's job (`validateAlertWebhookUrl`); the store only rejects structurally broken values.
  */
-export function validateCreateAlertRuleInput(input) {
+function validateCreateAlertRuleInput(input) {
     const orgSlug = validateSlug('org', input.orgSlug);
     const appSlug = validateSlug('app', input.appSlug);
     const environment = validateSlug('env', input.environment);

package/node_modules/@noodle-borg/service/dist/store/audit.js

@@ -10,7 +10,7 @@ export { AUDIT_SCHEMA_VERSION, redactDetails } from '@noodle-borg/module';
  * to a marker, so a stray token-bearing object can never reach a stored row or a log line.
  */
 /** Build the canonical stored event from an input, stamping id, schema version, and timestamp. */
-export function toAuditEvent(input, id, createdAt) {
+function toAuditEvent(input, id, createdAt) {
     const details = redactDetails(input.details);
     return {
         id,

package/node_modules/@noodle-borg/service/dist/store/records.js

@@ -223,7 +223,7 @@ function compareAppSummaries(a, b) {
     return a.appSlug.localeCompare(b.appSlug);
 }
 /** Default + hard cap for a single `apps` list page (the route surfaces `truncated`, never drops silently). */
-export const DEFAULT_APPS_LIMIT = 200;
+const DEFAULT_APPS_LIMIT = 200;
 /** Cap an already-sorted {@link AppSummary} list at `limit` (default {@link DEFAULT_APPS_LIMIT}). */
 export function paginateAppSummaries(apps, limit) {
     const safeLimit = limit ?? DEFAULT_APPS_LIMIT;

package/node_modules/@noodle-borg/service/dist/store/validate.d.ts

@@ -1,5 +1,5 @@
 import type { ConfigScope, TenantRef } from '../store.js';
-export { DOMAIN_PATTERN, isSystemOwnedOrgSlug, OPENAI_APPS_CHALLENGE_MAX_LENGTH, SLUG_PATTERN, validateDomain, validateMcpSubdomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateUserOwnedOrgSlug, } from '@noodle-borg/control-plane/portable';
+export { DOMAIN_PATTERN, SLUG_PATTERN, validateDomain, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, } from '@noodle-borg/control-plane/portable';
 /** Minted deployment id shape (`mintDeploymentId`): a slug plus a short hex suffix; safe as a filename. */
 export declare const DEPLOYMENT_ID_PATTERN: RegExp;
 export declare const CONFIG_NAME_PATTERN: RegExp;

package/node_modules/@noodle-borg/service/dist/store/validate.js

@@ -4,7 +4,7 @@
  * import cycle through the store aggregate.
  */
 import { validateSlug } from '@noodle-borg/control-plane/portable';
-export { DOMAIN_PATTERN, isSystemOwnedOrgSlug, OPENAI_APPS_CHALLENGE_MAX_LENGTH, SLUG_PATTERN, validateDomain, validateMcpSubdomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateUserOwnedOrgSlug, } from '@noodle-borg/control-plane/portable';
+export { DOMAIN_PATTERN, SLUG_PATTERN, validateDomain, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, } from '@noodle-borg/control-plane/portable';
 /** Minted deployment id shape (`mintDeploymentId`): a slug plus a short hex suffix; safe as a filename. */
 export const DEPLOYMENT_ID_PATTERN = /^[a-z0-9-]+$/;
 export const CONFIG_NAME_PATTERN = /^[A-Za-z0-9_]+$/;

package/node_modules/@noodle-borg/service/dist/store.d.ts

@@ -11,7 +11,7 @@ export { type ConfigScope, type ConfigStore, type ConfigValueMetadata, InMemoryC
 export type { ProductionEnvironmentChange } from './store/environment-production.js';
 export { InMemoryArtifactStore } from './store/in-memory.js';
 export { JsonFileArtifactStore } from './store/json-file.js';
-export { CONFIG_NAME_PATTERN, DEPLOYMENT_ID_PATTERN, DOMAIN_PATTERN, OPENAI_APPS_CHALLENGE_MAX_LENGTH, SLUG_PATTERN, validateConfigName, validateConfigScope, validateDomain, validateMcpSubdomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validatePositiveInteger, validateSignupAllowlistKind, validateSlug, validateTenantRef, validateUserOwnedOrgSlug, } from './store/validate.js';
+export { CONFIG_NAME_PATTERN, DEPLOYMENT_ID_PATTERN, DOMAIN_PATTERN, SLUG_PATTERN, validateConfigName, validateConfigScope, validateDomain, validateOrgMembershipDomain, validateOrgRole, validatePositiveInteger, validateSignupAllowlistKind, validateSlug, validateTenantRef, } from './store/validate.js';
 /**
  * Secret values at rest. The compiled runtime keeps plaintext tokens in memory (the broker), but the
  * *persisted* form is a tagged envelope. `aes-256-gcm` (Slice 26, ADR 0028) holds an AES-256-GCM
@@ -92,7 +92,7 @@ export interface TenantOidcAuthConfig {
     readonly claims?: TenantAuthClaimMap | undefined;
     readonly routing?: ArtifactCustomerAuthRouting | undefined;
 }
-export interface TenantFederatedOidcAuthConfig {
+interface TenantFederatedOidcAuthConfig {
     readonly kind: 'federatedOidc';
     readonly issuers: readonly {
         readonly issuer: string;

package/node_modules/@noodle-borg/service/dist/store.js

@@ -4,5 +4,5 @@ export { InMemoryConfigStore, resolveConfigScope, scopeChain, } from './store/co
 // surface.
 export { InMemoryArtifactStore } from './store/in-memory.js';
 export { JsonFileArtifactStore } from './store/json-file.js';
-export { CONFIG_NAME_PATTERN, DEPLOYMENT_ID_PATTERN, DOMAIN_PATTERN, OPENAI_APPS_CHALLENGE_MAX_LENGTH, SLUG_PATTERN, validateConfigName, validateConfigScope, validateDomain, validateMcpSubdomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validatePositiveInteger, validateSignupAllowlistKind, validateSlug, validateTenantRef, validateUserOwnedOrgSlug, } from './store/validate.js';
+export { CONFIG_NAME_PATTERN, DEPLOYMENT_ID_PATTERN, DOMAIN_PATTERN, SLUG_PATTERN, validateConfigName, validateConfigScope, validateDomain, validateOrgMembershipDomain, validateOrgRole, validatePositiveInteger, validateSignupAllowlistKind, validateSlug, validateTenantRef, } from './store/validate.js';
 //# sourceMappingURL=store.js.map

package/node_modules/@noodle-borg/service/package.json

@@ -39,7 +39,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@noodle-borg/admission-limits": "0.0.0",
-    "@noodle-borg/agent-kit": "0.91.0",
+    "@noodle-borg/agent-kit": "0.92.0",
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/assistant-gateway": "0.0.0",
     "@noodle-borg/auth": "0.0.0",

package/node_modules/@noodle-borg/transport-http/dist/client-identity.js

@@ -38,7 +38,7 @@ const KNOWN_UA_FAMILIES = [
     [/mozilla|chrome|safari|firefox|edg/i, 'browser'],
 ];
 /** Bound a wire-supplied client identity scalar: printable, trimmed, and length-capped. */
-export function boundedClientScalar(value, max) {
+function boundedClientScalar(value, max) {
     if (value === undefined)
         return undefined;
     let cleaned = '';

package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts

@@ -1,6 +1,6 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { AccessMode, AdmissionGate, DataPlaneIdentityAuthorizer, IntentCaptureMode, IntentEventInput, OrgMembershipSource, OwnerTokenVerifier, RequestEventInput, TenantRouteRef } from '@noodle-borg/module';
-import { type ConfirmationNonceLedger, type ProtocolRequestContext, type RequestStateManager, type ServedArtifact } from '@noodle-borg/protocol';
+import { type ConfirmationNonceLedger, type McpProtocolMode, type ProtocolRequestContext, type RequestStateManager, type ServedArtifact } from '@noodle-borg/protocol';
 import { type TlsPosture } from './front-door.js';
 import { type Logger } from './logging.js';
 import { type PublicTenantRouting } from './routing.js';
@@ -10,7 +10,6 @@ export type { AccessMode, AdmissionCategory, AdmissionContext, AdmissionDecision
 export type { PublicTenantRouting } from './routing.js';
 /** Origins allowed to call the endpoint: an explicit list, a predicate, or undefined (allow any). */
 export type OriginPolicy = readonly string[] | ((origin: string) => boolean);
-export type McpProtocolMode = 'dual' | 'legacy-only';
 /** Validated, bounded coordinates from one host request. Never identity or policy input. */
 export interface InvocationClientLocationHint {
     readonly latitude: number;