@noodleseed/one 0.164.0 → 0.166.0

package/node_modules/@noodle-borg/wire-contracts/dist/control-plane.js

@@ -1,6 +1,8 @@
 /** Strict service-output contracts for control-plane reads and mutations (ADR 0128). */
 import { z } from 'zod';
 import { accessModeSchema } from './access-mode.js';
+/** Effective authority enforcing caller authentication for one deployment. */
+export const deploymentAuthenticationSchema = z.enum(['none', 'platform', 'customer']);
 function containsC0OrDel(value) {
     for (let index = 0; index < value.length; index += 1) {
         const codeUnit = value.charCodeAt(index);
@@ -46,6 +48,7 @@ export const accessUpdateResponseSchema = z
         deploymentId: z.string().min(1),
         serverVersion: z.string().min(1).optional(),
         accessMode: accessModeSchema,
+        authentication: deploymentAuthenticationSchema.optional(),
         ownerSubject: deploymentOwnerSubjectSchema.optional(),
     })
         .strict(),
@@ -53,6 +56,7 @@ export const accessUpdateResponseSchema = z
     previousOwnerSubject: deploymentOwnerSubjectSchema.optional(),
     accessChanged: z.boolean(),
     ownerChanged: z.boolean(),
+    policyChanged: z.boolean().optional(),
     changed: z.boolean(),
 })
     .strict()
@@ -65,11 +69,19 @@ export const accessUpdateResponseSchema = z
             message: 'owner-only access requires a current owner subject',
         });
     }
-    if (value.changed !== (value.accessChanged || value.ownerChanged)) {
+    if ((value.deployment.authentication === undefined) !== (value.policyChanged === undefined)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['policyChanged'],
+            message: 'authentication and policyChanged must be present together',
+        });
+    }
+    if (value.changed !==
+        (value.accessChanged || value.ownerChanged || (value.policyChanged ?? false))) {
         context.addIssue({
             code: 'custom',
             path: ['changed'],
-            message: 'changed must equal accessChanged || ownerChanged',
+            message: 'changed must equal accessChanged || ownerChanged || policyChanged',
         });
     }
 });
@@ -90,12 +102,14 @@ export const accessUpdateClientResponseSchema = z
         deploymentId: z.string().min(1),
         serverVersion: z.string().min(1).optional(),
         accessMode: accessModeSchema,
+        authentication: deploymentAuthenticationSchema.optional(),
         ownerSubject: deploymentOwnerSubjectSchema.optional(),
     }),
     previousAccessMode: accessModeSchema,
     previousOwnerSubject: deploymentOwnerSubjectSchema.optional(),
     accessChanged: z.boolean().optional(),
     ownerChanged: z.boolean().optional(),
+    policyChanged: z.boolean().optional(),
     changed: z.boolean(),
 })
     .superRefine((value, context) => {
@@ -107,6 +121,20 @@ export const accessUpdateClientResponseSchema = z
             message: 'accessChanged and ownerChanged must be present together',
         });
     }
+    if ((value.deployment.authentication === undefined) !== (value.policyChanged === undefined)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['policyChanged'],
+            message: 'authentication and policyChanged must be present together',
+        });
+    }
+    if (value.policyChanged !== undefined && !modernComponents) {
+        context.addIssue({
+            code: 'custom',
+            path: ['policyChanged'],
+            message: 'policyChanged requires accessChanged and ownerChanged',
+        });
+    }
     if (modernComponents &&
         value.deployment.accessMode === 'owner-only' &&
         value.deployment.ownerSubject === undefined) {
@@ -116,11 +144,13 @@ export const accessUpdateClientResponseSchema = z
             message: 'owner-only access requires a current owner subject',
         });
     }
-    if (modernComponents && value.changed !== (value.accessChanged || value.ownerChanged)) {
+    if (modernComponents &&
+        value.changed !==
+            (value.accessChanged || value.ownerChanged || (value.policyChanged ?? false))) {
         context.addIssue({
             code: 'custom',
             path: ['changed'],
-            message: 'changed must equal accessChanged || ownerChanged',
+            message: 'changed must equal accessChanged || ownerChanged || policyChanged',
         });
     }
 })

package/node_modules/@noodle-borg/wire-contracts/dist/index.d.ts

@@ -384,4 +384,5 @@ export * from './application-activity.js';
 export * from './application-connections.js';
 export * from './application-onboarding.js';
 export * from './billing-catalog.js';
+export * from './operation-coordination.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/wire-contracts/dist/index.js

@@ -226,4 +226,5 @@ export * from './application-activity.js';
 export * from './application-connections.js';
 export * from './application-onboarding.js';
 export * from './billing-catalog.js';
+export * from './operation-coordination.js';
 //# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/wire-contracts/dist/operation-coordination.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+export declare const OperationCoordinationListRequestSchema: z.ZodObject<{
+    limit: z.ZodOptional<z.ZodNumber>;
+    beforeResource: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const OperationCoordinationResolveRequestSchema: z.ZodObject<{
+    resource: z.ZodString;
+    token: z.ZodUUID;
+    reason: z.ZodString;
+}, z.core.$strict>;
+export declare const OperationCoordinationListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        records: z.ZodArray<z.ZodObject<{
+            resource: z.ZodString;
+            token: z.ZodUUID;
+            reference: z.ZodString;
+            operationDigest: z.ZodString;
+            startedAt: z.ZodISODateTime;
+            deadline: z.ZodISODateTime;
+            state: z.ZodEnum<{
+                unknown: "unknown";
+                executing: "executing";
+            }>;
+        }, z.core.$strict>>;
+        nextBeforeResource: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const OperationCoordinationListClientResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        records: z.ZodArray<z.ZodObject<{
+            resource: z.ZodString;
+            token: z.ZodUUID;
+            reference: z.ZodString;
+            operationDigest: z.ZodString;
+            startedAt: z.ZodISODateTime;
+            deadline: z.ZodISODateTime;
+            state: z.ZodEnum<{
+                unknown: "unknown";
+                executing: "executing";
+            }>;
+        }, z.core.$strip>>;
+        nextBeforeResource: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const OperationCoordinationResolveResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        resolved: z.ZodLiteral<true>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const OperationCoordinationResolveClientResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        resolved: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+//# sourceMappingURL=operation-coordination.d.ts.map

package/node_modules/@noodle-borg/wire-contracts/dist/operation-coordination.js

@@ -0,0 +1,51 @@
+import { z } from 'zod';
+const ResourceSchema = z.string().regex(/^[a-f0-9]{64}$/);
+export const OperationCoordinationListRequestSchema = z.strictObject({
+    limit: z.number().int().min(1).max(100).optional(),
+    beforeResource: ResourceSchema.optional(),
+});
+export const OperationCoordinationResolveRequestSchema = z.strictObject({
+    resource: ResourceSchema,
+    token: z.uuid(),
+    reason: z
+        .string()
+        .trim()
+        .min(1)
+        .max(256)
+        .regex(/^[^\p{Cc}\p{Zl}\p{Zp}]*$/u),
+});
+const RecordSchema = z.strictObject({
+    resource: ResourceSchema,
+    token: z.uuid(),
+    reference: z
+        .string()
+        .regex(/^[A-Za-z0-9._:@/-]{1,256}$/)
+        .refine((value) => !value.includes('://')),
+    operationDigest: ResourceSchema,
+    startedAt: z.iso.datetime(),
+    deadline: z.iso.datetime(),
+    state: z.enum(['executing', 'unknown']),
+});
+export const OperationCoordinationListResponseSchema = z.strictObject({
+    ok: z.literal(true),
+    data: z.strictObject({
+        records: z.array(RecordSchema).max(100),
+        nextBeforeResource: ResourceSchema.optional(),
+    }),
+});
+export const OperationCoordinationListClientResponseSchema = z.object({
+    ok: z.literal(true),
+    data: z.object({
+        records: z.array(z.object(RecordSchema.shape)).max(100),
+        nextBeforeResource: ResourceSchema.optional(),
+    }),
+});
+export const OperationCoordinationResolveResponseSchema = z.strictObject({
+    ok: z.literal(true),
+    data: z.strictObject({ resolved: z.literal(true) }),
+});
+export const OperationCoordinationResolveClientResponseSchema = z.object({
+    ok: z.literal(true),
+    data: z.object({ resolved: z.literal(true) }),
+});
+//# sourceMappingURL=operation-coordination.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.164.0",
+  "version": "0.166.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",
@@ -235,7 +235,7 @@
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
     "@noodle-borg/admission-limits": "0.0.0",
-    "@noodle-borg/agent-kit": "0.101.0",
+    "@noodle-borg/agent-kit": "0.102.0",
     "@noodle-borg/app-audit": "0.0.0",
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/assistant-gateway": "0.0.0",