@noodleseed/one 0.152.0 → 0.154.0

package/node_modules/@noodle-borg/service/dist/external-credential-exchange.d.ts

@@ -77,6 +77,5 @@ export declare function exchangeExternalCredential(input: {
     readonly config: ExternalCredentialProviderConfig;
     readonly nowMs: number;
 }): Promise<ExternalCredentialExchangeResponse>;
-export declare function validateExternalCredentialProviderEndpoint(config: ExternalCredentialProviderConfig): URL;
 export {};
 //# sourceMappingURL=external-credential-exchange.d.ts.map

package/node_modules/@noodle-borg/service/dist/external-credential-exchange.js

@@ -111,7 +111,7 @@ export async function exchangeExternalCredential(input) {
     }
     return externalCredentialExchangeResponseSchema.parse(await readBoundedJson(response, EXTERNAL_CREDENTIAL_EXCHANGE_MAX_RESPONSE_BYTES));
 }
-export function validateExternalCredentialProviderEndpoint(config) {
+function validateExternalCredentialProviderEndpoint(config) {
     if (!isVisibleBoundedUrlText(config.endpoint) || !isVisibleBoundedUrlText(config.allowedOrigin)) {
         throw new Error('external credential provider endpoint is not allowed');
     }

package/node_modules/@noodle-borg/service/dist/http-util.js

@@ -1,75 +1,4 @@
-import { gunzipSync } from 'node:zlib';
-import { effectiveProto } from '@noodle-borg/transport-http';
-export async function readBody(req, max) {
-    const body = await readBodyBuffer(req, max);
-    return body.ok ? { ok: true, text: body.buffer.toString('utf8') } : body;
-}
-async function readBodyBuffer(req, max) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of req) {
-        const buf = chunk;
-        size += buf.length;
-        if (size > max)
-            return { ok: false, receivedBytes: size, maxBytes: max };
-        chunks.push(buf);
-    }
-    return { ok: true, buffer: Buffer.concat(chunks) };
-}
-/** Read exact request bytes for signature-verified provider webhooks. */
-export function readRawBody(req, max) {
-    return readBodyBuffer(req, max);
-}
-export async function readDeployBody(req, max) {
-    const encoding = (req.headers['content-encoding'] ?? 'identity').trim().toLowerCase();
-    if (encoding !== 'identity' && encoding !== 'gzip') {
-        return { ok: false, status: 415, error: `unsupported content encoding "${encoding}"` };
-    }
-    const body = await readBodyBuffer(req, max);
-    if (!body.ok) {
-        return {
-            ok: false,
-            status: 413,
-            error: `${encoding === 'gzip' ? 'compressed deploy' : 'deploy'} request exceeds the ${body.maxBytes} byte limit (received at least ${body.receivedBytes} bytes)`,
-            receivedBytes: body.receivedBytes,
-            maxBytes: body.maxBytes,
-        };
-    }
-    if (encoding === 'identity') {
-        return { ok: true, text: body.buffer.toString('utf8'), encoding };
-    }
-    try {
-        const expanded = gunzipSync(body.buffer, { maxOutputLength: max });
-        return { ok: true, text: expanded.toString('utf8'), encoding };
-    }
-    catch (error) {
-        const code = error instanceof Error && 'code' in error ? String(error.code) : '';
-        if (code === 'ERR_BUFFER_TOO_LARGE') {
-            return {
-                ok: false,
-                status: 413,
-                error: `expanded deploy request exceeds the ${max} byte limit`,
-                maxBytes: max,
-            };
-        }
-        return { ok: false, status: 400, error: 'invalid gzip deploy request' };
-    }
-}
-export async function readJsonBody(req, max) {
-    const body = await readBody(req, max);
-    if (!body.ok)
-        return { ok: false, status: 413, error: 'request body too large' };
-    try {
-        return { ok: true, value: JSON.parse(body.text) };
-    }
-    catch (error) {
-        return { ok: false, status: 400, error: `invalid JSON: ${error.message}` };
-    }
-}
-export function sendJson(res, status, body) {
-    res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' });
-    res.end(JSON.stringify(body));
-}
+import { effectiveProto, sendJson, } from '@noodle-borg/transport-http';
 /**
  * Log a thrown route error (redacted to name/message/short-stack — never a body, key, or secret) and
  * answer 500 if the response hasn't already started. The shared catch tail for async route handlers so

package/node_modules/@noodle-borg/service/dist/managed-config-expressions.d.ts

@@ -1,5 +1,4 @@
 import type { TenantAuthConfig, TenantBridgeAuthConfig } from './store.js';
-export declare function managedVariableNamesInString(value: string): readonly string[];
 export declare function resolveManagedVariablesInString(value: string, variables: Readonly<Record<string, string>>): string;
 export declare function serverAuthVariableBindings(auth: TenantAuthConfig | undefined): readonly string[];
 export declare function resolveTenantBridgeAuthVariables(auth: TenantBridgeAuthConfig, variables: Readonly<Record<string, string>>): TenantBridgeAuthConfig;

package/node_modules/@noodle-borg/service/dist/managed-config-expressions.js

@@ -1,5 +1,5 @@
 const MANAGED_VARIABLE_RE = /\$\{env\.([A-Za-z0-9_]+)\}/g;
-export function managedVariableNamesInString(value) {
+function managedVariableNamesInString(value) {
     const names = new Set();
     for (const match of value.matchAll(MANAGED_VARIABLE_RE)) {
         if (match[1] !== undefined)

package/node_modules/@noodle-borg/service/dist/oauth/customer-bridge.js

@@ -1,7 +1,7 @@
 import { renderOAuthPage } from './branding.js';
 const FIREBASE_AUTHORIZE_PATH = '/oauth/customer/firebase/authorize';
 const FIREBASE_CALLBACK_PATH = '/oauth/customer/firebase/callback';
-export const MICROSOFT_CALLBACK_PATH = '/oauth/customer/microsoft/callback';
+const MICROSOFT_CALLBACK_PATH = '/oauth/customer/microsoft/callback';
 const MICROSOFT_REQUIRED_SCOPES = ['openid', 'profile', 'email', 'offline_access'];
 export function bridgeAuthorizeUrl(auth, input) {
     const issuer = trimTrailingSlash(input.issuer);

package/node_modules/@noodle-borg/service/dist/oauth/developer-grant.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { capabilitiesForDeveloperResource, isDeveloperCapability, isDeveloperResource, } from '@noodle-borg/developer-mcp';
-export const DEVELOPER_GRANT_VERSION = 2;
-export const DEVELOPER_GRANT_ACCESS_MODEL = 'live_user';
+const DEVELOPER_GRANT_VERSION = 2;
+const DEVELOPER_GRANT_ACCESS_MODEL = 'live_user';
 export class InMemoryDeveloperGrantStore {
     #records = new Map();
     #now;

package/node_modules/@noodle-borg/service/dist/observability-runtime.js

@@ -1,6 +1,5 @@
 import { InMemoryIntentCaptureSettingsStore, InMemoryIntentEventStore, InMemoryRequestEventStore, } from '@noodle-borg/observability';
-import { applySecurityHeaders, enforceHttps, } from '@noodle-borg/transport-http';
-import { sendJson } from './http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
 import { dispatchAnalyticsReads } from './routes/analytics-dispatch.js';
 import { dispatchIntentCaptureRoutes } from './routes/intent-capture-dispatch.js';
 export function createObservabilityStores(options) {
@@ -11,7 +10,7 @@ export function createObservabilityStores(options) {
         new Set(options.intentCapturePreviewOrgs ?? []),
     ];
 }
-export async function resolveIntentMode(target, ref, previewOrgs, settings) {
+async function resolveIntentMode(target, ref, previewOrgs, settings) {
     if (target === undefined)
         return undefined;
     const resolved = ref ??

package/node_modules/@noodle-borg/service/dist/registry-targets.js

@@ -36,7 +36,7 @@ export function servedTargetFor(record, served, customerVerifierFactory) {
             : {}),
     };
 }
-export class MissingCustomerAuthError extends Error {
+class MissingCustomerAuthError extends Error {
     deploymentId;
     constructor(deploymentId) {
         super('customers access mode requires server.auth');
@@ -54,7 +54,7 @@ export function tryServedTargetFor(record, served, customerVerifierFactory) {
         throw error;
     }
 }
-export function servedTargetMatchesRecord(target, record) {
+function servedTargetMatchesRecord(target, record) {
     const expectedOwner = record.accessMode === 'owner-only' ? deploymentOwnerSubject(record) : undefined;
     const expectedMembership = record.accessMode === 'org-members' ? record.orgMembershipSources : undefined;
     return (target.deploymentId === record.deploymentId &&
@@ -98,7 +98,7 @@ function sameStrings(left, right) {
             left.length === right.length &&
             left.every((value, index) => value === right[index])));
 }
-export function customerTargetFields(auth, customerVerifierFactory) {
+function customerTargetFields(auth, customerVerifierFactory) {
     if (auth.kind === 'bridge') {
         return {
             verifyToken: customerVerifierFactory?.(auth) ?? denyAllCustomerToken,

package/node_modules/@noodle-borg/service/dist/routes/access-mode.js

@@ -1,7 +1,3 @@
-import { accessModeSchema } from '@noodle-borg/wire-contracts';
-export function isAccessMode(value) {
-    return accessModeSchema.safeParse(value).success;
-}
 export function isIdentityAccessMode(accessMode) {
     return (accessMode === 'owner-only' ||
         accessMode === 'org-members' ||

package/node_modules/@noodle-borg/service/dist/routes/access.js

@@ -1,6 +1,6 @@
 import { normalizeServerVersion } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { accessUpdateRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { deploymentOwnerSubject } from '../registry-helpers.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/alerts.js

@@ -1,12 +1,13 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { AlertRuleResponseSchema, AlertRulesListResponseSchema } from '@noodle-borg/wire-contracts';
 import { buildAlertWebhookPayload, deliverAlertWebhook, validateAlertWebhookUrl, } from '../alert-webhook.js';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { ALERT_METRICS, ALERT_WINDOWS_MINUTES, MAX_ALERT_RULES_PER_ENV, } from '../store/alert-rules.js';
 import { sendContract } from './apps.js';
 import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';
 /** Redact a webhook URL to its origin — path/query (where tokens live) never leave the service. */
-export function redactWebhookUrl(url) {
+function redactWebhookUrl(url) {
     try {
         return `${new URL(url).origin}/…`;
     }

package/node_modules/@noodle-borg/service/dist/routes/analytics.js

@@ -1,5 +1,6 @@
 import { aggregateRequestEvents, parseRequestEventQuery } from '@noodle-borg/observability';
-import { normalizedTimestamps, sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
+import { normalizedTimestamps } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 /**
  * Tenant analytics read routes (ADR 0121 Stage B): `metrics` (aggregated), `events` (the stream), and

package/node_modules/@noodle-borg/service/dist/routes/app-purge-reconciliation.js

@@ -0,0 +1,72 @@
+import { AppPurgeReconciliationError, } from '@noodle-borg/control-plane/portable';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { APP_PURGE_RECONCILIATION_MAX_CANDIDATES, AppPurgeReconciliationApplyRequestSchema, AppPurgeReconciliationApplyResponseSchema, AppPurgeReconciliationPreviewRequestSchema, AppPurgeReconciliationPreviewResponseSchema, } from '@noodle-borg/wire-contracts';
+import { sendForbidden } from '../http-util.js';
+import { authorizeControlPlane } from './control-plane.js';
+const UNAVAILABLE = {
+    ok: false,
+    code: 'app_purge_reconciliation_unavailable',
+    error: 'app purge reconciliation is unavailable',
+};
+/** Super-admin-only, exact-set historical repair boundary from ADR 0225. */
+export async function handleAppPurgeReconciliationRoute(req, res, deps, action) {
+    const identity = await authorizeControlPlane(req, res, deps.gate, { requireIdentity: true });
+    if (identity === false)
+        return;
+    if (!identity.superAdmin)
+        return sendForbidden(res, 'super-admin required');
+    const url = new URL(req.url ?? '/', 'http://localhost');
+    if (url.search !== '') {
+        return sendJson(res, 400, { ok: false, error: 'query parameters are not supported' });
+    }
+    const contentType = req.headers['content-type']?.split(';', 1)[0]?.trim().toLowerCase();
+    if (contentType !== 'application/json') {
+        return sendJson(res, 415, { ok: false, error: 'content type must be application/json' });
+    }
+    const body = await readJsonBody(req, deps.maxBody);
+    if (!body.ok)
+        return sendJson(res, body.status, { ok: false, error: body.error });
+    const parsed = action === 'preview'
+        ? AppPurgeReconciliationPreviewRequestSchema.safeParse(body.value)
+        : AppPurgeReconciliationApplyRequestSchema.safeParse(body.value);
+    if (!parsed.success) {
+        return sendJson(res, 400, { ok: false, error: 'invalid app purge reconciliation request' });
+    }
+    if (deps.operator === undefined || !/^[0-9a-f]{40}$/.test(deps.releaseSha)) {
+        return sendJson(res, 503, UNAVAILABLE);
+    }
+    try {
+        const now = deps.clock?.() ?? new Date();
+        if (action === 'preview') {
+            const request = AppPurgeReconciliationPreviewRequestSchema.parse(parsed.data);
+            const artifact = await deps.operator.preview({
+                releaseSha: deps.releaseSha,
+                limit: request.limit ?? APP_PURGE_RECONCILIATION_MAX_CANDIDATES,
+                now,
+            });
+            return sendJson(res, 200, AppPurgeReconciliationPreviewResponseSchema.parse({ ok: true, artifact }));
+        }
+        const request = AppPurgeReconciliationApplyRequestSchema.parse(parsed.data);
+        const response = await deps.operator.apply({
+            request,
+            actor: {
+                subject: identity.subject,
+                ...(identity.email === undefined ? {} : { email: identity.email }),
+            },
+            currentReleaseSha: deps.releaseSha,
+            now,
+        });
+        return sendJson(res, 200, AppPurgeReconciliationApplyResponseSchema.parse(response));
+    }
+    catch (error) {
+        if (error instanceof AppPurgeReconciliationError) {
+            return sendJson(res, 409, {
+                ok: false,
+                code: error.code,
+                error: 'app purge reconciliation request conflicts with current state',
+            });
+        }
+        return sendJson(res, 503, UNAVAILABLE);
+    }
+}
+//# sourceMappingURL=app-purge-reconciliation.js.map

package/node_modules/@noodle-borg/service/dist/routes/apps.js

@@ -1,5 +1,5 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { AppResponseSchema, AppsListResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 import { appWithEndpointUrl } from './endpoint-enrichment.js';
 const MAX_APPS_LIMIT = 500;

package/node_modules/@noodle-borg/service/dist/routes/archive.js

@@ -1,5 +1,6 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { CustomerAuthAudienceConflictError } from '../customer-auth-audience-binding.js';
-import { sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { respondDeploymentActivationError } from './deployment-activation-response.js';
 import { canManageMembers } from './org-admin.js';

package/node_modules/@noodle-borg/service/dist/routes/asset-control-plane.js

@@ -1,5 +1,6 @@
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { AssetPlanError } from '../assets.js';
-import { baseFromRequest, readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { baseFromRequest, sendForbidden } from '../http-util.js';
 import { parsePreparedAssets } from './assets.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssetPreflight(req, res, options, maxBody, tenant, gate, controlPlane, audit) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-appearance.js

@@ -1,5 +1,6 @@
 import { assistantAppearanceOverrideSchema, assistantBrowserConfiguration, resolveAssistantAppearanceConfiguration, } from '@noodle-borg/assistant-gateway/portable';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssistantAppearance(req, res, tenant, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-clients.js

@@ -1,4 +1,5 @@
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleAssistantClients(req, res, tenant, id, action, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-doctor.js

@@ -3,7 +3,8 @@ import { probeAssistantModelBoundary } from '@noodle-borg/assistant-gateway/mode
 import { assistantCustomerIssuer, completeElevation, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
 import { guardedFetch } from '@noodle-borg/connector-http';
 import { tenantMcpUrl } from '@noodle-borg/module';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { resolveAssistantModelBinding } from './assistant-model-binding.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-elevation.js

@@ -1,8 +1,8 @@
 import { completeElevation, publicSurfaceOf } from '@noodle-borg/assistant-gateway/portable';
 import { anonymousBehavior } from '@noodle-borg/compiler';
 import { claimableStateHandleNames } from '@noodle-borg/runtime';
+import { sendJson } from '@noodle-borg/transport-http';
 import { assistantSessionResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 function isMixed(surface) {
     return surface?.mode === 'mixed';
 }

package/node_modules/@noodle-borg/service/dist/routes/assistant-embeds.js

@@ -1,6 +1,7 @@
 import { ADMISSION_DEFAULTS, clamp } from '@noodle-borg/admission-limits/portable';
 import { assistantEmbedOperatorView, parsePublicEmbedBudget, publicSurfaceOf, surfaceEnvelope, } from '@noodle-borg/assistant-gateway/portable';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
+import { sendForbidden } from '../http-util.js';
 import { now } from './assistant-route-http.js';
 import { authorizeControlPlane } from './control-plane.js';
 /**

package/node_modules/@noodle-borg/service/dist/routes/assistant-interaction-replay.js

@@ -1,5 +1,5 @@
 import { assistantInteractionTool, assistantViewAvailableData, auditAssistantInteraction, recoverableAssistantView, } from '@noodle-borg/assistant-gateway/portable';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 import { now } from './assistant.js';
 import { assistantInteractionScope } from './assistant-interaction-resolution.js';
 import { endInteractionSse, writeInputRequested, writeInteractionError, writeInteractionResolved, writeInteractionSseHeaders, writeToolCompleted, writeToolProposed, writeViewAvailable, } from './assistant-interaction-stream.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-interactions.js

@@ -1,6 +1,6 @@
 import { AssistantInteractionCapacityError, assistantConfirmationReview, assistantConfirmationTransition, assistantInputTransition, assistantInteractionTool, assistantPreparedArgumentReview, assistantPreparedToolContinuation, assistantSafeOutput, assistantToolContinuation, assistantViewAvailableData, auditAssistantInteraction, recoverableAssistantView, withAssistantSessionExecutionAuthority, } from '@noodle-borg/assistant-gateway/portable';
 import { executePreparedTool, executeToolInteractive, resumeTool, resumeToolPreparation, } from '@noodle-borg/runtime';
-import { readJsonBody, sendJson } from '../http-util.js';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { applyBrowserCors, authenticateSession, now, } from './assistant.js';
 import { replayOrConflict, writeUnknownOutcome } from './assistant-interaction-replay.js';
 import { parseInteractionResponse, validateInputContent } from './assistant-interaction-request.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-public-configuration.js

@@ -1,5 +1,5 @@
 import { authorizePublicConfiguration, effectiveAssistantBrowserConfiguration, publicEmbedTenant, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 import { applyBrowserCors } from './assistant-route-http.js';
 /** Browser-safe first paint for a public launcher; never mints a session or spends admission. */
 export async function handlePublicAssistantConfiguration(req, res, embedId, deps) {

package/node_modules/@noodle-borg/service/dist/routes/assistant-public-session.js

@@ -2,8 +2,8 @@ import { randomBytes } from 'node:crypto';
 import { ADMISSION_DEFAULTS, clientAddressBucket } from '@noodle-borg/admission-limits/portable';
 import { effectiveAssistantBrowserConfiguration, mintPublicSession, publicEmbedTenant, publicSurfaceOf, } from '@noodle-borg/assistant-gateway/portable';
 import { assistantSessionUsageRequestEvent, captureAssistantUsage, captureRefusedAssistantSession, } from '@noodle-borg/observability';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { assistantSessionResponseSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { applyBrowserCors, assistantSessionEndpoints, now } from './assistant-route-http.js';
 /**
  * The transport half of anonymous session minting. Every decision — which refusal, in which order, and

package/node_modules/@noodle-borg/service/dist/routes/assistant-route-http.js

@@ -1,3 +1,4 @@
+import { bearerToken } from '@noodle-borg/transport-http';
 import { sendForbidden, sendUnauthorized } from '../http-util.js';
 export function handleAssistantPreflight(req, res) {
     const origin = typeof req.headers.origin === 'string' ? req.headers.origin : 'null';
@@ -11,13 +12,13 @@ export function handleAssistantPreflight(req, res) {
     res.end();
 }
 export async function authenticateSession(req, res, deps) {
-    const match = /^Bearer\s+(.+)$/i.exec(req.headers.authorization ?? '');
-    if (!match?.[1]) {
+    const token = bearerToken(req.headers.authorization);
+    if (token === null) {
         applyBrowserCors(req, res);
         sendUnauthorized(res, 'invalid assistant session');
         return undefined;
     }
-    const session = await deps.store.getSession(match[1], now(deps));
+    const session = await deps.store.getSession(token, now(deps));
     if (!session) {
         applyBrowserCors(req, res);
         sendUnauthorized(res, 'invalid assistant session');

package/node_modules/@noodle-borg/service/dist/routes/assistant-sandbox.js

@@ -7,7 +7,7 @@
  * `contract/v1/assistant-sandbox-document.html` and to the published client's srcdoc fallback; any
  * relay-protocol change is a coordinated contract event, never a local edit.
  */
-export const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
+const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
 let inner;
 const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
 // Re-announce until the host acknowledges with the resource: when this document is hosted

package/node_modules/@noodle-borg/service/dist/routes/assistant-suggestions.js

@@ -1,7 +1,7 @@
 import { ADMISSION_DEFAULTS } from '@noodle-borg/admission-limits/portable';
 import { parseAssistantContextPreferences, resolveInvocationContextSnapshot, surfaceEnvelope, withAssistantSessionExecutionAuthority, } from '@noodle-borg/assistant-gateway/portable';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { assistantSuggestionsRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { generateInitialAssistantSuggestions } from './assistant-agent.js';
 import { applyBrowserCors, authenticateSession, now } from './assistant-route-http.js';
 import { sessionScopedTarget } from './assistant-session-target.js';

package/node_modules/@noodle-borg/service/dist/routes/assistant-usage.js

@@ -1,5 +1,6 @@
 import { ASSISTANT_USAGE_METHOD, aggregateAssistantUsage } from '@noodle-borg/observability';
-import { normalizedTimestamps, sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
+import { normalizedTimestamps } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 const WINDOWS_MS = new Map([
     ['24h', 24 * 60 * 60 * 1000],

package/node_modules/@noodle-borg/service/dist/routes/assistant.js

@@ -6,8 +6,9 @@ import { tenantMcpUrl } from '@noodle-borg/module';
 import { assistantAppToolCallRecorder, assistantRefusedTurnUsageRequestEvent, assistantSessionUsageRequestEvent, assistantTurnNumber, assistantTurnUsageRequestEvent, captureAssistantUsage, } from '@noodle-borg/observability';
 import { mapExecutionError, mapResourceContents, mapResourcesList, mapToolOutput, mapToolsList, } from '@noodle-borg/protocol';
 import { executeResource } from '@noodle-borg/runtime';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { assistantMessageTurnRequestSchema, assistantResumeTurnRequestSchema, assistantSessionResponseSchema, } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendForbidden, sendJson, sendUnauthorized } from '../http-util.js';
+import { sendForbidden, sendUnauthorized } from '../http-util.js';
 import { createAssistantTurnStats, runAgentTurn } from './assistant-agent.js';
 import { elevateAssistantSession } from './assistant-elevation.js';
 import { executeAssistantKnowledgeSearch, findAssistantKnowledgeComponent, resolveAssistantKnowledge, } from './assistant-knowledge.js';

package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js

@@ -1,5 +1,5 @@
-import { applySecurityHeaders, enforceHttps } from '@noodle-borg/transport-http';
-import { baseFromRequest, normalizeServiceBase, sendJson } from '../http-util.js';
+import { applySecurityHeaders, enforceHttps, sendJson, } from '@noodle-borg/transport-http';
+import { baseFromRequest, normalizeServiceBase } from '../http-util.js';
 /** Provider-neutral discovery and its shipped Google-named compatibility route share exact bytes. */
 export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
     if (req.method !== 'GET' || (url.pathname !== '/v1/auth' && url.pathname !== '/v1/auth/google')) {

package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.js

@@ -1,7 +1,7 @@
 import { bearerToken } from '@noodle-borg/control-plane/portable';
 import { normalizeServerVersion, tenantMcpUrl } from '@noodle-borg/module';
 import { freezeCustomerRoutes, resolveCustomerRouteBinding, } from '@noodle-borg/runtime';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 /** Verify one real customer identity and probe delegated bindings without calling business APIs. */
 export async function handleLiveAuthDoctor(req, res, registry, tenant, options) {
     let serverVersion;

package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js

@@ -54,7 +54,7 @@ function encodedConfigRouteRef(kind, encodedScope, encodedName, searchParams, re
         return invalidConfigRouteRef(kind, encodedName, reveal);
     }
 }
-export function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
+function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
     let safeScope;
     try {
         safeScope = validateConfigScope(scope);

package/node_modules/@noodle-borg/service/dist/routes/config-values.js

@@ -1,7 +1,8 @@
 import { DEVELOPER_CLI_PATH } from '@noodle-borg/developer-mcp';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { configValueSetRequestSchema, EffectiveConfigResponseSchema, formatWireError, RevealSecretResponseSchema, } from '@noodle-borg/wire-contracts';
 import { projectEffectiveConfig, } from '../config-value-projection.js';
-import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { sendForbidden } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 export async function handleConfigValues(req, res, gate, controlPlane, configStore, registry, maxBody, ref, audit, developerGrants) {
     const identity = await authorizeControlPlane(req, res, gate, {

package/node_modules/@noodle-borg/service/dist/routes/control-plane.js

@@ -2,10 +2,10 @@ import { cspFaultsInManifest } from '@noodle-borg/compiler';
 import { ensurePersonalWorkspace } from '@noodle-borg/control-plane/portable';
 import { DEVELOPER_ASSISTANT_PATH, DEVELOPER_CLI_PATH, } from '@noodle-borg/developer-mcp';
 import { normalizeServerVersion } from '@noodle-borg/module';
-import { noopLogger } from '@noodle-borg/transport-http';
-import { deployRequestSchema, formatWireError, } from '@noodle-borg/wire-contracts';
+import { noopLogger, readDeployBody, sendJson } from '@noodle-borg/transport-http';
+import { deployRequestSchema, formatWireError, WhoamiIdentityResponseSchema, } from '@noodle-borg/wire-contracts';
 import { authorizeDeveloperGrant, } from '../auth/developer-grant-guard.js';
-import { baseFromRequest, readDeployBody, sendForbidden, sendJson, sendUnauthorized, } from '../http-util.js';
+import { baseFromRequest, sendForbidden, sendUnauthorized } from '../http-util.js';
 import { endpointUrlOptionsForOrg } from '../mcp-public-routing.js';
 import { manifestUsesUserRoot } from '../registry-access.js';
 import { isIdentityAccessMode } from './access-mode.js';
@@ -14,7 +14,6 @@ import { provisionPublicEmbed } from './deploy-public-embed.js';
 import { respondDeploymentActivationError } from './deployment-activation-response.js';
 import { tenantMcpUrl } from './endpoint-enrichment.js';
 import { canManageMembers } from './org-admin.js';
-export { handleConfigValues } from './config-values.js';
 export async function handleDeploy(req, res, registry, options, maxBody, tenant, gate, controlPlane, audit) {
     // GHD-3: a GitHub run deploys with a run-scoped token on x-noodle-run-token — NOT a control-plane
     // identity. When that header is present the human control-plane auth (bearer + org membership) is
@@ -444,7 +443,7 @@ export async function authorizeDeploymentOwnerSelection(res, controlPlane, org,
     }
     return { ok: true, ownerSubject: requestedOwnerSubject };
 }
-export async function handleWhoami(req, res, gate, controlPlane, options = {}) {
+export async function handleWhoami(req, res, gate, controlPlane, options = {}, scope) {
     // Identity introspection names no org or environment, so no grant context can describe it.
     const identity = await authorizeControlPlane(req, res, gate, {
         requireIdentity: true,
@@ -452,6 +451,19 @@ export async function handleWhoami(req, res, gate, controlPlane, options = {}) {
     });
     if (identity === false)
         return;
+    if (scope === 'identity') {
+        const response = WhoamiIdentityResponseSchema.parse({
+            ok: true,
+            data: {
+                identity: {
+                    subject: identity.subject,
+                    email: identity.email,
+                    superAdmin: identity.superAdmin,
+                },
+            },
+        });
+        return sendJson(res, 200, response);
+    }
     if (!identity.superAdmin && options.controlPlaneSignupMode === 'public') {
         await ensurePersonalWorkspace(controlPlane, identity);
     }

package/node_modules/@noodle-borg/service/dist/routes/deploy-preflight.js

@@ -1,6 +1,6 @@
 import { cspFaultsInManifest } from '@noodle-borg/compiler';
+import { readDeployBody, sendJson } from '@noodle-borg/transport-http';
 import { deployPreflightRequestSchema, formatWireError } from '@noodle-borg/wire-contracts';
-import { readDeployBody, sendJson } from '../http-util.js';
 import { manifestUsesUserRoot } from '../registry-access.js';
 import { isIdentityAccessMode } from './access-mode.js';
 import { authorizeDeploymentOwnerSelection, authorizeTenantControl, developerGrantRouteAccess, } from './control-plane.js';

package/node_modules/@noodle-borg/service/dist/routes/deployment-activation-response.js

@@ -1,5 +1,5 @@
 import { DeploymentActivationError } from '@noodle-borg/module';
-import { sendJson } from '../http-util.js';
+import { sendJson } from '@noodle-borg/transport-http';
 /** Translate provider-neutral activation failures without exposing commercial account details. */
 export async function respondDeploymentActivationError(res, error, context) {
     if (!(error instanceof DeploymentActivationError))

package/node_modules/@noodle-borg/service/dist/routes/deployment-lock.js

@@ -1,6 +1,6 @@
 import { normalizeServerVersion } from '@noodle-borg/module';
+import { readJsonBody, sendJson } from '@noodle-borg/transport-http';
 import { deploymentLockRequestSchema } from '@noodle-borg/wire-contracts';
-import { readJsonBody, sendJson } from '../http-util.js';
 import { authorizeControlPlane } from './control-plane.js';
 import { canManageMembers } from './org-admin.js';
 export async function handleDeploymentLockUpdate(req, res, registry, gate, controlPlane, audit, maxBody, tenant) {

package/node_modules/@noodle-borg/service/dist/routes/deployment-package.js

@@ -1,7 +1,7 @@
 import { sha256Canonical } from '@noodle-borg/app-package';
+import { sendJson } from '@noodle-borg/transport-http';
 import { DeploymentPackageResponseShapeSchema } from '@noodle-borg/wire-contracts';
 import { parseAppPackageSnapshot } from '../app-package-snapshot.js';
-import { sendJson } from '../http-util.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 const PACKAGE_UNAVAILABLE = {
     code: 'package_unavailable',

package/node_modules/@noodle-borg/service/dist/routes/deployments.js

@@ -1,5 +1,5 @@
+import { sendJson } from '@noodle-borg/transport-http';
 import { DeploymentResponseSchema } from '@noodle-borg/wire-contracts';
-import { sendJson } from '../http-util.js';
 import { sendContract } from './apps.js';
 import { authorizeTenantControl, developerGrantRouteAccess } from './control-plane.js';
 import { withEndpointUrl } from './endpoint-enrichment.js';