@noodleseed/one 0.169.0 → 0.171.0

package/node_modules/@noodle-borg/service/dist/service.js

@@ -2,6 +2,7 @@ import { InMemoryDailyCounterStore } from '@noodle-borg/admission-limits/portabl
 import { InMemoryAssistantAppearanceSettingsStore, InMemoryAssistantStore, } from '@noodle-borg/assistant-gateway/portable';
 import { allowAllGate, InMemoryControlPlaneStore } from '@noodle-borg/control-plane/portable';
 import { dispatchKnowledgeRequest } from '@noodle-borg/knowledge-operations/portable';
+import { capabilityOperatorRoute } from '@noodle-borg/managed-capabilities';
 import { OPENAI_APPS_CHALLENGE_PATH } from '@noodle-borg/module';
 import { applySecurityHeaders, createMcpRouter, enforceHttps, noopLogger, sendJson, } from '@noodle-borg/transport-http';
 import { AnonymousConsumerLimiter, createAdmissionGate } from './admission.js';
@@ -10,9 +11,11 @@ import { createApplicationServingRuntime } from './application-runtime-target.js
 import { createArchivePreflight } from './archive-preflight.js';
 import { ArchiveSweeper, resolveArchiveRetentionDays } from './archive-sweeper.js';
 import { serveLocalAsset } from './assets.js';
+import { assistantRouteDependencies } from './assistant-composition.js';
 import { resolveBuildInfo, serviceInfoPayload } from './build-info.js';
 import { createBusinessInformationRuntime, resolvePrivateInstallationDefinition, } from './business-information-runtime.js';
 import { serviceCapabilityReport } from './capabilities.js';
+import { createWhatsAppRuntime } from './channels/composition.js';
 import { rejectIncompatibleCli } from './client-compatibility.js';
 import { createDataPlaneMembershipAuthorizer } from './data-plane-membership.js';
 import { DEVELOPER_MCP_PATH, handleDeveloperMcpRequest } from './developer-mcp/mount.js';
@@ -49,6 +52,7 @@ import { dispatchProtectedResourceMetadata } from './routes/protected-resource-m
 import { dispatchResourceReads } from './routes/resource-read-dispatch.js';
 import { handleRollback } from './routes/rollback.js';
 import { createServicePrincipalDispatcher } from './routes/service-principals-dispatch.js';
+import { dispatchWhatsAppRoutes } from './routes/whatsapp.js';
 import { servicePrincipalDataPlaneHooks } from './service-principal-data-plane.js';
 import { InMemoryAlertRuleStore } from './store/alert-rules.js';
 import { StdoutAuditSink } from './store/audit.js';
@@ -163,7 +167,12 @@ export function createServiceHandler(registry, options = {}) {
     });
     archiveSweeper.maybeSweep();
     const moduleRouteDeps = {
-        routes: moduleHost.routes,
+        routes: [
+            ...moduleHost.routes,
+            ...(options.capabilities === undefined
+                ? []
+                : [capabilityOperatorRoute(options.capabilities)]),
+        ],
         logger,
         gate,
         controlPlane,
@@ -175,6 +184,23 @@ export function createServiceHandler(registry, options = {}) {
             ? {}
             : { developerGrants: options.developerGrantStore }),
     };
+    const assistantDeps = assistantRouteDependencies(options, {
+        registry,
+        resolveRuntimeTarget,
+        store: assistantStore,
+        appearance: assistantAppearance,
+        gate,
+        controlPlane,
+        audit: activeAudit,
+        maxBody,
+        serviceBase: (request) => options.publicBaseUrl ?? baseFromRequest(request, tls),
+        logger,
+    });
+    const whatsapp = createWhatsAppRuntime(options.whatsapp, assistantDeps, {
+        allowance: moduleHost.resolveActivityHistoryAllowance,
+        installations: businessInformationStore,
+        activity,
+    });
     return (req, res) => {
         const url = new URL(req.url ?? '/', 'http://localhost');
         // Liveness/readiness probes: un-gated and **not** HTTPS-enforced — Cloud Run's internal probe is plain
@@ -206,7 +232,7 @@ export function createServiceHandler(registry, options = {}) {
         // post-deploy smoke can confirm exactly which commit is live. Non-sensitive fields only.
         if (req.method === 'GET' && url.pathname === '/v1/service/info') {
             applySecurityHeaders(res, tls);
-            return sendJson(res, 200, serviceInfoPayload(buildInfo, options.developerMcp === true));
+            return sendJson(res, 200, serviceInfoPayload(buildInfo, options.developerMcp === true, whatsapp !== undefined));
         }
         if (url.pathname.startsWith('/v1/') && rejectIncompatibleCli(req, res, buildInfo, tls))
             return;
@@ -279,6 +305,7 @@ export function createServiceHandler(registry, options = {}) {
         if (businessInformationStore !== undefined &&
             options.businessInformationEnabled !== false &&
             dispatchBusinessInformationRoutes(req, res, url, {
+                ...(whatsapp ? { readWhatsApp: whatsapp.projection.bind(whatsapp) } : {}),
                 store: businessInformationStore,
                 ...(businessOnboarding ? { businessOnboarding } : {}),
                 activateInstallation,
@@ -324,38 +351,15 @@ export function createServiceHandler(registry, options = {}) {
             })) {
             return;
         }
+        if (url.pathname.includes('/channels/whatsapp')) {
+            applySecurityHeaders(res, tls);
+            if (enforceHttps(req, res, tls))
+                return;
+            if (dispatchWhatsAppRoutes(req, res, url, whatsapp, options.developerGrantStore))
+                return;
+        }
         if (dispatchAssistantRoutes(req, res, url, {
-            registry,
-            resolveRuntimeTarget,
-            store: assistantStore,
-            appearance: assistantAppearance,
-            ...(options.publicEmbeds !== undefined ? { publicEmbeds: options.publicEmbeds } : {}),
-            ...(options.elevations !== undefined ? { elevations: options.elevations } : {}),
-            ...(options.elevationCoordinator !== undefined
-                ? { elevationCoordinator: options.elevationCoordinator }
-                : {}),
-            ...(options.admissionCounters !== undefined
-                ? { admissionCounters: options.admissionCounters }
-                : {}),
-            ...(options.admissionEnvelope !== undefined
-                ? { admissionEnvelope: options.admissionEnvelope }
-                : {}),
-            gate,
-            controlPlane,
-            audit: activeAudit,
-            maxBody,
-            serviceBase: (request) => options.publicBaseUrl ?? baseFromRequest(request, tls),
-            ...(options.assistantModelFetch !== undefined
-                ? { modelFetch: options.assistantModelFetch }
-                : {}),
-            ...(options.managedAssistantModelResolver !== undefined
-                ? { managedModelResolver: options.managedAssistantModelResolver }
-                : {}),
-            ...(options.captureRequestEvent !== undefined
-                ? { captureRequestEvent: options.captureRequestEvent }
-                : {}),
-            ...(options.clock !== undefined ? { clock: options.clock } : {}),
-            logger,
+            ...assistantDeps,
             applySecurityHeaders,
             enforceHttps,
             sendJson,

package/node_modules/@noodle-borg/service/dist/web-capabilities.js

@@ -0,0 +1,39 @@
+import { CapabilityError } from '@noodle-borg/managed-capabilities';
+import { evaluateToolAuthorization } from '@noodle-borg/protocol';
+import { WebCapabilityConnector } from '@noodle-borg/runtime';
+export function deploymentWebConnector(artifact, tenant, deploymentId, service) {
+    if (!artifact.server.capabilities?.length)
+        return undefined;
+    return new WebCapabilityConnector(artifact.server.capabilities, async (declaration, request, call) => {
+        if (service === undefined ||
+            deploymentId === undefined ||
+            call.execution === undefined ||
+            call.capabilityBudget === undefined) {
+            throw new CapabilityError('capability_unavailable');
+        }
+        return service.execute(declaration, request, {
+            tenant,
+            deploymentId,
+            executionId: call.execution.id,
+            authorized: evaluateToolAuthorization(declaration.authorization === undefined
+                ? undefined
+                : {
+                    ...(declaration.authorization.discovery === 'public'
+                        ? { discovery: 'public' }
+                        : {}),
+                    ...(declaration.authorization.requiredScopes === undefined
+                        ? {}
+                        : { requiredScopes: declaration.authorization.requiredScopes }),
+                    ...(declaration.authorization.allowedRoles === undefined
+                        ? {}
+                        : { allowedRoles: declaration.authorization.allowedRoles }),
+                }, call.caller).allow,
+            anonymous: call.caller === undefined || call.caller.identityKind === 'anonymous',
+            ...(call.caller === undefined ? {} : { subject: call.caller.subject }),
+            ...(call.publicAdmission === undefined ? {} : { network: call.publicAdmission.network }),
+            budget: call.capabilityBudget,
+            ...(call.signal === undefined ? {} : { signal: call.signal }),
+        });
+    });
+}
+//# sourceMappingURL=web-capabilities.js.map

package/node_modules/@noodle-borg/service/package.json

@@ -37,9 +37,10 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
+    "@noodle-borg/managed-capabilities": "0.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@noodle-borg/admission-limits": "0.0.0",
-    "@noodle-borg/agent-kit": "0.104.0",
+    "@noodle-borg/agent-kit": "0.106.0",
     "@noodle-borg/app-package": "0.0.0",
     "@noodle-borg/assistant-gateway": "0.0.0",
     "@noodle-borg/auth": "0.0.0",
@@ -51,6 +52,7 @@
     "@noodle-borg/developer-mcp": "0.0.0",
     "@noodle-borg/external-credential-provider": "0.0.0",
     "@noodle-borg/knowledge": "0.0.0",
+    "@noodle-borg/knowledge-crawl": "0.0.0",
     "@noodle-borg/knowledge-operations": "0.0.0",
     "@noodle-borg/module": "0.0.0",
     "@noodle-borg/module-audit": "0.0.0",

package/node_modules/@noodle-borg/wire-contracts/dist/application-channels.d.ts

@@ -37,6 +37,17 @@ export declare const ApplicationChannelsProjectionSchema: z.ZodObject<{
             }, z.core.$strict>>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
+    whatsapp: z.ZodOptional<z.ZodObject<{
+        status: z.ZodEnum<{
+            unavailable: "unavailable";
+            ready: "ready";
+            paused: "paused";
+        }>;
+        bindingId: z.ZodOptional<z.ZodString>;
+        revision: z.ZodOptional<z.ZodNumber>;
+        capabilities: z.ZodArray<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ApplicationChannelsProjection = z.infer<typeof ApplicationChannelsProjectionSchema>;
 export declare const ApplicationChannelsResponseSchema: z.ZodObject<{
@@ -79,6 +90,17 @@ export declare const ApplicationChannelsResponseSchema: z.ZodObject<{
                 }, z.core.$strict>>;
             }, z.core.$strict>>;
         }, z.core.$strict>;
+        whatsapp: z.ZodOptional<z.ZodObject<{
+            status: z.ZodEnum<{
+                unavailable: "unavailable";
+                ready: "ready";
+                paused: "paused";
+            }>;
+            bindingId: z.ZodOptional<z.ZodString>;
+            revision: z.ZodOptional<z.ZodNumber>;
+            capabilities: z.ZodArray<z.ZodString>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strict>;
 }, z.core.$strict>;
 export declare const ApplicationChannelsClientResponseSchema: z.ZodObject<{
@@ -97,6 +119,17 @@ export declare const ApplicationChannelsClientResponseSchema: z.ZodObject<{
             url: z.ZodOptional<z.ZodURL>;
             accessMode: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
+        whatsapp: z.ZodOptional<z.ZodObject<{
+            status: z.ZodEnum<{
+                unavailable: "unavailable";
+                ready: "ready";
+                paused: "paused";
+            }>;
+            bindingId: z.ZodOptional<z.ZodString>;
+            revision: z.ZodOptional<z.ZodNumber>;
+            capabilities: z.ZodArray<z.ZodString>;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
         assistant: z.ZodObject<{
             status: z.ZodEnum<{
                 unavailable: "unavailable";

package/node_modules/@noodle-borg/wire-contracts/dist/application-channels.js

@@ -39,6 +39,13 @@ const assistant = z
     usage: usage.optional(),
 })
     .strict();
+const whatsapp = z.strictObject({
+    status,
+    bindingId: z.string().max(256).optional(),
+    revision: z.number().int().positive().optional(),
+    capabilities: z.array(z.string().max(256)).max(64),
+    reason: z.string().max(200).optional(),
+});
 export const ApplicationChannelsProjectionSchema = z
     .object({
     revision: z.number().int().positive(),
@@ -47,6 +54,7 @@ export const ApplicationChannelsProjectionSchema = z
     deploymentId: z.string().min(1).max(256).optional(),
     mcp,
     assistant,
+    whatsapp: whatsapp.optional(),
 })
     .strict();
 export const ApplicationChannelsResponseSchema = z
@@ -57,6 +65,7 @@ export const ApplicationChannelsClientResponseSchema = z
     ok: z.literal(true),
     data: ApplicationChannelsProjectionSchema.extend({
         mcp: mcp.strip(),
+        whatsapp: whatsapp.strip().optional(),
         assistant: assistant
             .extend({
             usage: usage

package/node_modules/@noodle-borg/wire-contracts/dist/index.d.ts

@@ -385,6 +385,7 @@ export declare const configValuesListResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 /** Render a wire-schema failure as one actionable line (first issue, dotted path first). */
 export declare function formatWireError(error: z.ZodError): string;
+export * from '@noodle-borg/managed-capabilities/contracts';
 export * from './application-activity.js';
 export * from './application-connections.js';
 export * from './application-onboarding.js';
@@ -392,4 +393,5 @@ export * from './billing-catalog.js';
 export * from './deployment-deletion.js';
 export * from './operation-coordination.js';
 export { MIXED_CUSTOMER_AUTH_FEATURE_VERSION, type ServiceInfoClientResponse, type ServiceInfoResponse, serviceInfoClientResponseSchema, serviceInfoResponseSchema, } from './service-info.js';
+export * from './whatsapp.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/wire-contracts/dist/index.js

@@ -224,6 +224,7 @@ export function formatWireError(error) {
     const path = issue.path.map(String).join('.');
     return path === '' ? issue.message : `"${path}": ${issue.message}`;
 }
+export * from '@noodle-borg/managed-capabilities/contracts';
 export * from './application-activity.js';
 export * from './application-connections.js';
 export * from './application-onboarding.js';
@@ -231,4 +232,5 @@ export * from './billing-catalog.js';
 export * from './deployment-deletion.js';
 export * from './operation-coordination.js';
 export { MIXED_CUSTOMER_AUTH_FEATURE_VERSION, serviceInfoClientResponseSchema, serviceInfoResponseSchema, } from './service-info.js';
+export * from './whatsapp.js';
 //# sourceMappingURL=index.js.map

package/node_modules/@noodle-borg/wire-contracts/dist/service-info.d.ts

@@ -7,6 +7,7 @@ export declare const serviceInfoResponseSchema: z.ZodObject<{
     }, z.core.$strict>>;
     features: z.ZodObject<{
         mixedCustomerAuth: z.ZodLiteral<1>;
+        whatsapp: z.ZodOptional<z.ZodLiteral<1>>;
     }, z.core.$strict>;
     ok: z.ZodLiteral<true>;
     status: z.ZodLiteral<"ok">;
@@ -25,6 +26,7 @@ export declare const serviceInfoClientResponseSchema: z.ZodObject<{
     }, z.core.$strip>>;
     features: z.ZodOptional<z.ZodObject<{
         mixedCustomerAuth: z.ZodOptional<z.ZodNumber>;
+        whatsapp: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
     ok: z.ZodLiteral<true>;
     status: z.ZodLiteral<"ok">;

package/node_modules/@noodle-borg/wire-contracts/dist/service-info.js

@@ -15,12 +15,20 @@ const buildInfoShape = {
 export const serviceInfoResponseSchema = z.strictObject({
     ...buildInfoShape,
     developerPlugin: z.strictObject({ mcpCapabilityVersion: z.string().min(1) }).optional(),
-    features: z.strictObject({ mixedCustomerAuth: z.literal(MIXED_CUSTOMER_AUTH_FEATURE_VERSION) }),
+    features: z.strictObject({
+        mixedCustomerAuth: z.literal(MIXED_CUSTOMER_AUTH_FEATURE_VERSION),
+        whatsapp: z.literal(1).optional(),
+    }),
 });
 /** Older services may omit features; future fields are stripped at each structured metadata layer. */
 export const serviceInfoClientResponseSchema = z.object({
     ...buildInfoShape,
     developerPlugin: z.object({ mcpCapabilityVersion: z.string().min(1) }).optional(),
-    features: z.object({ mixedCustomerAuth: z.number().int().positive().optional() }).optional(),
+    features: z
+        .object({
+        mixedCustomerAuth: z.number().int().positive().optional(),
+        whatsapp: z.number().int().positive().optional(),
+    })
+        .optional(),
 });
 //# sourceMappingURL=service-info.js.map