@noodleseed/one 0.186.1 → 0.188.0

package/node_modules/@noodle-borg/assistant-gateway/dist/channel-coordinator.js

@@ -11,7 +11,8 @@ export async function requireChannel(tx, id) {
 }
 export async function channelBlocked(tx, id, participant, now) {
     const block = await channelValue(tx, id, `block:${participant}`);
-    return !!block && (block.until === null || block.until > now);
+    const optout = await channelValue(tx, id, `optout:${participant}`);
+    return optout?.blocked === true || (!!block && (block.until === null || block.until > now));
 }
 export async function requireChannelLive(tx, id) {
     const binding = await requireChannel(tx, id);
@@ -38,6 +39,8 @@ async function mutation(tx, id, key, input, now, work) {
 }
 /** Validates a channel's provider fields and names the asset its binding will own. */
 function configuredAsset(input) {
+    if (input.channel === 'sms')
+        return channelAssetKey('sms', input.phoneNumber);
     if (input.channel === 'instagram')
         return channelAssetKey('instagram', input.instagramAccountId);
     const meta = input.provider === 'meta';
@@ -47,6 +50,8 @@ function configuredAsset(input) {
     return channelAssetKey('whatsapp', input.phoneNumberId);
 }
 function configuredBinding(input, id, state) {
+    if (input.channel === 'sms')
+        return { ...input, id, provider: 'twilio', ...state };
     if (input.channel === 'instagram')
         return { ...input, id, provider: 'meta', ...state };
     const { provider, channel: _whatsapp, ...configured } = input;
@@ -216,6 +221,20 @@ export class ChannelCoordinator {
             })).map((row) => row.value);
         });
     }
+    async optouts(id, after) {
+        return this.store.transaction([id], async (tx) => {
+            await requireChannel(tx, id);
+            const rows = await tx.list(id, {
+                kind: 'optout',
+                limit: 100,
+                ...(after ? { after: `optout:${after}` } : {}),
+            });
+            return rows.map((row) => ({
+                participantId: row.id.slice('optout:'.length),
+                ...row.value,
+            }));
+        });
+    }
     async events(id, after) {
         return this.store.transaction([id], async (tx) => {
             await requireChannel(tx, id);

package/node_modules/@noodle-borg/assistant-gateway/dist/channel-inbox.js

@@ -63,7 +63,22 @@ export async function receiveChannelMessages(store, id, messages, now, retention
             if ((await channelCounter(tx, id, 'ingress', now, CHANNEL_DAY_MS)) >= 10_000)
                 throw new ChannelError('ingress_capacity');
             const participantId = channelParticipantId(binding, message.address);
-            const code = await refusal(tx, binding, message, participantId, pending, now);
+            let code = await refusal(tx, binding, message, participantId, pending, now);
+            if (binding.channel === 'sms' &&
+                message.control &&
+                message.eventAt >= now - CHANNEL_RETENTION_MS &&
+                message.eventAt <= now + 60_000) {
+                if (message.control !== 'help') {
+                    const key = `optout:${participantId}`;
+                    const prior = await channelValue(tx, id, key);
+                    // Older callbacks cannot undo a newer preference; STOP wins equal-second timestamps.
+                    if (!prior ||
+                        message.eventAt > prior.at ||
+                        (message.eventAt === prior.at && message.control === 'stop'))
+                        await tx.put(id, channelRow(key, 'optout', { at: message.eventAt, blocked: message.control === 'stop' }, now));
+                }
+                code = `provider_${message.control}`;
+            }
             const sequence = ((await channelValue(tx, id, 'sequence')) ?? 0) + 1;
             await tx.put(id, channelRow('sequence', 'counter', sequence, now));
             const eventId = `e_${String(sequence).padStart(20, '0')}`;

package/node_modules/@noodle-borg/assistant-gateway/dist/channel-store.d.ts

@@ -1,7 +1,7 @@
 /** Private channel journal. Each binding is a transaction/lease authority, not a browser session. */
 export interface ChannelRow {
     readonly id: string;
-    readonly kind: 'binding' | 'asset' | 'participant' | 'event' | 'counter' | 'spend' | 'block' | 'mutation' | 'interaction';
+    readonly kind: 'binding' | 'asset' | 'participant' | 'event' | 'counter' | 'spend' | 'block' | 'optout' | 'mutation' | 'interaction';
     readonly state?: string;
     readonly updatedAt: number;
     readonly expiresAt?: number;

package/node_modules/@noodle-borg/assistant-gateway/dist/channel-types.d.ts

@@ -28,7 +28,7 @@ export type ChannelCapability = {
     readonly name: string;
 };
 /** One binding per channel per environment; each channel owns its own provider asset. */
-export declare const CHANNEL_KINDS: readonly ["whatsapp", "instagram"];
+export declare const CHANNEL_KINDS: readonly ["whatsapp", "instagram", "sms"];
 export type ChannelKind = (typeof CHANNEL_KINDS)[number];
 export interface ChannelBindingBase {
     readonly id: string;
@@ -68,7 +68,14 @@ export interface InstagramBinding extends ChannelBindingBase {
     readonly instagramAccountId: string;
     readonly pageId: string;
 }
-export type ChannelBinding = WhatsAppBinding | InstagramBinding;
+export interface SmsBinding extends ChannelBindingBase {
+    readonly channel: 'sms';
+    readonly provider: 'twilio';
+    readonly accountSid: string;
+    readonly phoneNumberSid: string;
+    readonly phoneNumber: string;
+}
+export type ChannelBinding = WhatsAppBinding | InstagramBinding | SmsBinding;
 type ChannelConfigureBase = Pick<ChannelBindingBase, 'tenant' | 'apiKeySecret' | 'deploymentId' | 'capabilities' | 'supportEmail'> & {
     readonly limits?: ChannelLimitsInput | undefined;
 };
@@ -79,7 +86,8 @@ export type WhatsAppConfigure = ChannelConfigureBase & Pick<WhatsAppBinding, 'ph
     readonly provider?: ChannelProvider | undefined;
 };
 export type InstagramConfigure = ChannelConfigureBase & Pick<InstagramBinding, 'channel' | 'instagramAccountId' | 'pageId'>;
-export type ChannelConfigure = WhatsAppConfigure | InstagramConfigure;
+export type SmsConfigure = ChannelConfigureBase & Pick<SmsBinding, 'channel' | 'accountSid' | 'phoneNumberSid' | 'phoneNumber'>;
+export type ChannelConfigure = WhatsAppConfigure | InstagramConfigure | SmsConfigure;
 export interface ChannelAddress {
     readonly kind: 'phone' | 'opaque';
     readonly value: string;
@@ -130,6 +138,8 @@ export interface ChannelEvent {
     readonly code?: string;
 }
 export interface ChannelInbound {
+    /** Authenticated provider opt-out control, never model input. */
+    readonly control?: 'stop' | 'start' | 'help';
     readonly providerId: string;
     readonly address: ChannelAddress;
     readonly eventAt: number;
@@ -179,6 +189,27 @@ export declare function publicChannelBinding(binding: ChannelBinding): {
     actor: string;
     readyRevision?: number | undefined;
     readyAt?: number | undefined;
+} | {
+    channel: "sms";
+    provider: "twilio";
+    accountSid: string;
+    phoneNumberSid: string;
+    phoneNumber: string;
+    id: string;
+    tenant: TenantRef;
+    apiKeySecret: string;
+    deploymentId: string;
+    capabilities: readonly ChannelCapability[];
+    supportEmail: string;
+    revision: number;
+    generation: number;
+    state: "paused" | "enabled" | "disconnected";
+    limits: ChannelLimits;
+    createdAt: number;
+    updatedAt: number;
+    actor: string;
+    readyRevision?: number | undefined;
+    readyAt?: number | undefined;
 } | {
     provider: ChannelProvider;
     phoneNumberId: string;

package/node_modules/@noodle-borg/assistant-gateway/dist/channel-types.js

@@ -15,7 +15,7 @@ export const CHANNEL_DEFAULT_LIMITS = Object.freeze({
     dailyMicroUsd: 20_000_000,
 });
 /** One binding per channel per environment; each channel owns its own provider asset. */
-export const CHANNEL_KINDS = ['whatsapp', 'instagram'];
+export const CHANNEL_KINDS = ['whatsapp', 'instagram', 'sms'];
 export class ChannelError extends Error {
     code;
     constructor(code) {
@@ -39,7 +39,11 @@ export function channelAssetKey(channel, assetId) {
         : `asset:${channel}:${channelDigest(assetId)}`;
 }
 export function channelBindingAsset(binding) {
-    return channelAssetKey(binding.channel, binding.channel === 'whatsapp' ? binding.phoneNumberId : binding.instagramAccountId);
+    return channelAssetKey(binding.channel, binding.channel === 'sms'
+        ? binding.phoneNumber
+        : binding.channel === 'whatsapp'
+            ? binding.phoneNumberId
+            : binding.instagramAccountId);
 }
 export function channelParticipantId(binding, address) {
     return `p_${createHmac('sha256', Buffer.from(binding.indexKey, 'base64'))
@@ -80,7 +84,7 @@ export async function writeChannelEvent(tx, scope, event, now) {
 }
 /** WhatsApp rows are stored without `channel`, byte-identical to rows written before Instagram. */
 function storedChannelBinding(binding) {
-    if (binding.channel === 'instagram')
+    if (binding.channel !== 'whatsapp')
         return binding;
     const { channel: _whatsapp, ...stored } = binding;
     return stored;
@@ -91,7 +95,9 @@ export function channelBindingRow(binding, now) {
 /** Rows written before Instagram carry no `channel`; they are WhatsApp. Nothing is written back. */
 export function readChannelBinding(stored) {
     const binding = stored;
-    return binding.channel === 'instagram' ? binding : { ...binding, channel: 'whatsapp' };
+    return binding.channel === 'instagram' || binding.channel === 'sms'
+        ? binding
+        : { ...binding, channel: 'whatsapp' };
 }
 export function publicChannelBinding(binding) {
     const { indexKey: _privateIndexKey, credentialDigest: _credentialDigest, ...visible } = storedChannelBinding(binding);

package/node_modules/@noodle-borg/authoring/dist/assistant.d.ts

@@ -224,7 +224,7 @@ export interface PublicWebsiteAccess {
 }
 export interface PublicMessagingInput {
     /** One surface per channel; the operator binds each channel's account separately. */
-    readonly channel: 'whatsapp' | 'instagram';
+    readonly channel: 'whatsapp' | 'instagram' | 'sms';
     readonly capabilities: readonly CapabilityRef[];
     readonly instructions?: string;
     /** @see AuthenticatedWebsiteInput.history */

package/node_modules/@noodle-borg/authoring/dist/assistant.js

@@ -9,7 +9,7 @@ export function publicMessaging(input) {
             throw new Error(`publicMessaging does not accept ${key}`);
         }
     }
-    if (input.channel !== 'whatsapp' && input.channel !== 'instagram')
+    if (input.channel !== 'whatsapp' && input.channel !== 'instagram' && input.channel !== 'sms')
         throw new Error('Unsupported public messaging channel');
     return {
         kind: 'messaging',

package/node_modules/@noodle-borg/authoring/dist/server.d.ts

@@ -137,6 +137,12 @@ export interface ToolOptions {
     readonly description: string;
     /** Verified caller claims required to invoke this tool; discovery is restricted by default. */
     readonly authorization?: ToolAuthorizationOptions;
+    /**
+     * Let anonymous callers of a public or mixed MCP app run this tool although it can change something.
+     * By default they must sign in for any tool not marked `readOnly()`. Use it for low-risk handoffs such
+     * as a contact or callback request; never on a tool that reads `user` or declares `authorization`.
+     */
+    readonly anonymous?: 'allowed';
     /** Designate this ordinary zero-input MCP tool as the application context provider. */
     readonly contextProvider?: true;
     readonly input: JsonSchema | z.ZodType;

package/node_modules/@noodle-borg/authoring/dist/server.js

@@ -145,6 +145,7 @@ class ServerBuilder {
                         },
                     }
                     : {}),
+                ...(tool.options.anonymous === 'allowed' ? { anonymous: 'allowed' } : {}),
                 ...(tool.options.contextProvider ? { contextProvider: true } : {}),
                 inputSchema: toJsonSchema(tool.options.input, 'input'),
                 ...(tool.options.output ? { outputSchema: toJsonSchema(tool.options.output) } : {}),

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-channels.js

@@ -86,6 +86,32 @@ export const CHANNELS_COMMAND = {
     arguments: [],
     flags: [],
     subcommands: [
+        group('sms', 'Configure a Twilio SMS number and control two-way text messaging.', operations(leaf('configure', 'Save a paused SMS binding using a managed Twilio Auth Token reference.', [
+            revision,
+            ...mutation,
+            flag('account-sid', 'Twilio Account SID (AC...).'),
+            flag('phone-number-sid', 'Twilio IncomingPhoneNumber SID (PN...).'),
+            flag('phone-number', 'Business sending number in E.164 format.'),
+            flag('api-key-secret', 'Managed secret name for the Twilio account Auth Token.'),
+            flag('capabilities', 'Comma-separated knowledge:name or tool:name selections.'),
+            flag('support-email', 'Contact shown when an answer cannot be completed.'),
+            ...limits,
+        ]), [
+            leaf('block', 'Block locally; Twilio opt-outs remain separately enforced.', [
+                participant,
+                blockScope,
+                flag('phone-stdin', 'Read a phone number securely from standard input.', 'boolean'),
+                flag('until', 'Expiry as an ISO timestamp.'),
+                flag('indefinite', 'Retain this block until removed.', 'boolean'),
+                ...mutation,
+            ]),
+            leaf('unblock', 'Remove a local block; does not override a recipient opt-out.', [
+                participant,
+                blockScope,
+                flag('phone-stdin', 'Supply the number if retained context expired.', 'boolean'),
+                ...mutation,
+            ]),
+        ])),
         group('whatsapp', 'Configure a 360dialog or Meta Cloud API number, test readiness, and control public messaging.', operations(leaf('configure', 'Save a paused binding using managed secret references.', [
             revision,
             ...mutation,

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-solution-conversations.js

@@ -31,7 +31,7 @@ const paging = (maximum) => [
         type: 'string',
         value: '<channel>',
         summary: 'Only conversations from this channel.',
-        constraints: { choices: ['website', 'whatsapp', 'instagram'] },
+        constraints: { choices: ['website', 'whatsapp', 'instagram', 'sms'] },
     },
     {
         ...OPTIONAL_FLAG,

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-solution-history.js

@@ -59,6 +59,7 @@ export const SOLUTION_HISTORY = {
                         channel('signed-in-customers', 'Record signed-in customers.'),
                         channel('whatsapp', 'Record WhatsApp conversations.'),
                         channel('instagram', 'Record Instagram DM conversations.'),
+                        channel('sms', 'Record SMS conversations.'),
                         {
                             ...OPTIONAL_FLAG,
                             required: true,

package/node_modules/@noodle-borg/compiler/dist/artifact/catalog-emission.js

@@ -51,6 +51,9 @@ export function emitCatalogArtifactSurfaces({ manifest, catalog, structuralAmbie
                     },
                 }
                 : {}),
+            ...('anonymous' in s.tool && s.tool.anonymous === 'allowed'
+                ? { anonymous: 'allowed' }
+                : {}),
             inputSchema,
             ...(s.outputSchema ? { outputSchema: withDialect(s.outputSchema) } : {}),
             ...(s.tool.annotations ? { annotations: s.tool.annotations } : {}),

package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts

@@ -136,6 +136,11 @@ export interface ArtifactTool {
     readonly title?: string;
     readonly description: string;
     readonly authorization?: ArtifactToolAuthorization;
+    /**
+     * Anonymous callers of a public or mixed MCP app may run this tool although it is not read-only.
+     * Without it, such a tool asks anonymous MCP callers to sign in first.
+     */
+    readonly anonymous?: 'allowed';
     readonly inputSchema: JsonSchema;
     readonly outputSchema?: JsonSchema;
     readonly annotations?: Record<string, unknown>;

package/node_modules/@noodle-borg/compiler/dist/artifact/version.d.ts

@@ -65,7 +65,8 @@
 /** `0.21.0`: protected tools may opt into public descriptor discovery without execution permission. */
 /** `0.22.0`: governed public-page extraction declarations and ordinary generated tools. */
 /** `0.23.0`: bounded `collect` interaction metadata keyed by opener tool (ADR 0240); never MCP-visible. */
-export declare const ARTIFACT_SCHEMA_VERSION = "0.23.0";
+/** `0.24.0`: tools may carry `anonymous: 'allowed'`, opening a non-read-only tool to anonymous MCP callers. */
+export declare const ARTIFACT_SCHEMA_VERSION = "0.24.0";
 /** mimeType for an MCP Apps UI resource (SEP-1865). Widgets are served under this profile. */
 export declare const MCP_APP_MIME_TYPE = "text/html;profile=mcp-app";
 //# sourceMappingURL=version.d.ts.map

package/node_modules/@noodle-borg/compiler/dist/artifact/version.js

@@ -65,7 +65,8 @@
 /** `0.21.0`: protected tools may opt into public descriptor discovery without execution permission. */
 /** `0.22.0`: governed public-page extraction declarations and ordinary generated tools. */
 /** `0.23.0`: bounded `collect` interaction metadata keyed by opener tool (ADR 0240); never MCP-visible. */
-export const ARTIFACT_SCHEMA_VERSION = '0.23.0';
+/** `0.24.0`: tools may carry `anonymous: 'allowed'`, opening a non-read-only tool to anonymous MCP callers. */
+export const ARTIFACT_SCHEMA_VERSION = '0.24.0';
 /** mimeType for an MCP Apps UI resource (SEP-1865). Widgets are served under this profile. */
 export const MCP_APP_MIME_TYPE = 'text/html;profile=mcp-app';
 //# sourceMappingURL=version.js.map

package/node_modules/@noodle-borg/compiler/dist/compile.js

@@ -19,7 +19,7 @@ import { compileToolInteractions } from './manifest/interaction-validation.js';
 import { parseManifestDocument } from './manifest/parse-document.js';
 import { manifestSchema } from './manifest/schema.js';
 import { resolveSchemaUses } from './manifest/schema-refs.js';
-import { validateWebsiteProjection } from './manifest/website-projection.js';
+import { validateAnonymousTools, validateWebsiteProjection, } from './manifest/website-projection.js';
 import { compileState } from './state-handles.js';
 import { suggestionFields } from './suggest.js';
 import { expandWebCapabilities } from './web-capabilities.js';
@@ -418,6 +418,7 @@ export function compileManifest(raw, options = {}) {
         errors,
     });
     const toolInteractions = compileToolInteractions(manifest.tools, artifactTools, errors);
+    errors.push(...validateAnonymousTools(artifactTools));
     errors.push(...validateWebsiteProjection(manifest.server.assistant, {
         tools: artifactTools,
         resources: artifactResources,

package/node_modules/@noodle-borg/compiler/dist/errors.d.ts

@@ -1,7 +1,7 @@
 import type { AppPackageArtifactV1 } from '@noodle-borg/app-package';
 import type { RuntimeArtifact } from './artifact/types.js';
 import type { PackagedAsset } from './assets.js';
-export type CompileErrorCode = 'invalid_context_provider' | 'yaml_parse_error' | 'invalid_shape' | 'invalid_name' | 'duplicate_name' | 'reserved_name' | 'unsupported_manifest_version' | 'reserved_for_future_version' | 'invalid_operation_ref' | 'external_ref' | 'invalid_schema_ref' | 'unknown_schema_ref' | 'schema_ref_conflict' | 'invalid_expression' | 'expr_unknown_root' | 'expr_root_unavailable' | 'expr_operator_not_allowed' | 'expr_if_not_boolean' | 'unknown_step_ref' | 'forward_step_ref' | 'self_step_ref' | 'duplicate_step_id' | 'invalid_fulfilment' | 'invalid_elicitation_schema' | 'invalid_elicitation_flow' | 'invalid_confirmation_flow' | 'arg_type_mismatch' | 'ambient_context_action' | 'duplicate_resource' | 'duplicate_prompt' | 'duplicate_resource_uri' | 'unsupported_uri_template' | 'duplicate_widget' | 'unknown_widget_tool' | 'unknown_widget_action_tool' | 'duplicate_widget_tool' | 'invalid_widget_binding' | 'invalid_widget_state_handle' | 'widget_html_too_large' | 'widget_html_total_too_large' | 'invalid_asset' | 'invalid_capability_requirement' | 'state_secret_field' | 'invalid_knowledge' | 'knowledge_unhashed' | 'invalid_managed_collection' | 'invalid_variable_declaration' | 'invalid_managed_collection_source' | 'unknown_connector_alias' | 'connector_not_in_catalog' | 'unknown_operation' | 'connector_binding_required' | 'ambiguous_nested_connector_binding' | 'invalid_connector_call_graph' | 'unsupported_credential_profile' | 'credential_scope_mismatch' | 'credential_audience_mismatch' | 'customer_endpoint_auth_required' | 'customer_endpoint_mapping_required' | 'customer_endpoint_unknown_mapping' | 'customer_endpoint_bridge_unsupported' | 'assistant_messaging_unsupported' | 'assistant_capability_unknown' | 'assistant_public_user_reference' | 'assistant_public_effect_unconfirmed' | 'interaction_action_invalid' | 'interaction_field_unknown' | 'interaction_field_control_mismatch' | 'interaction_field_missing' | 'interaction_initial_value_unknown' | 'interaction_consent_invalid' | 'interaction_expiry_invalid' | 'channel_dependency_missing' | 'channel_requirement_unsupported' | 'customer_endpoint_action_unsupported' | 'customer_endpoint_surface_unsupported' | 'customer_endpoint_credential_source_unsupported' | 'customer_endpoint_policy_conflict' | 'customer_endpoint_routing_inconsistent' | 'unused_connector_alias' | 'arg_mismatch' | 'agent_guide_invalid' | 'agent_guide_duplicate_workflow' | 'agent_guide_duplicate_example' | 'agent_guide_example_workflow_missing' | 'agent_guide_capability_missing' | 'agent_guide_capability_kind' | 'app_package_sensitive_content';
+export type CompileErrorCode = 'invalid_context_provider' | 'yaml_parse_error' | 'invalid_shape' | 'invalid_name' | 'duplicate_name' | 'reserved_name' | 'unsupported_manifest_version' | 'reserved_for_future_version' | 'invalid_operation_ref' | 'external_ref' | 'invalid_schema_ref' | 'unknown_schema_ref' | 'schema_ref_conflict' | 'invalid_expression' | 'expr_unknown_root' | 'expr_root_unavailable' | 'expr_operator_not_allowed' | 'expr_if_not_boolean' | 'unknown_step_ref' | 'forward_step_ref' | 'self_step_ref' | 'duplicate_step_id' | 'invalid_fulfilment' | 'invalid_elicitation_schema' | 'invalid_elicitation_flow' | 'invalid_confirmation_flow' | 'arg_type_mismatch' | 'ambient_context_action' | 'duplicate_resource' | 'duplicate_prompt' | 'duplicate_resource_uri' | 'unsupported_uri_template' | 'duplicate_widget' | 'unknown_widget_tool' | 'unknown_widget_action_tool' | 'duplicate_widget_tool' | 'invalid_widget_binding' | 'invalid_widget_state_handle' | 'widget_html_too_large' | 'widget_html_total_too_large' | 'invalid_asset' | 'invalid_capability_requirement' | 'state_secret_field' | 'invalid_knowledge' | 'knowledge_unhashed' | 'invalid_managed_collection' | 'invalid_variable_declaration' | 'invalid_managed_collection_source' | 'unknown_connector_alias' | 'connector_not_in_catalog' | 'unknown_operation' | 'connector_binding_required' | 'ambiguous_nested_connector_binding' | 'invalid_connector_call_graph' | 'unsupported_credential_profile' | 'credential_scope_mismatch' | 'credential_audience_mismatch' | 'customer_endpoint_auth_required' | 'customer_endpoint_mapping_required' | 'customer_endpoint_unknown_mapping' | 'customer_endpoint_bridge_unsupported' | 'assistant_messaging_unsupported' | 'assistant_capability_unknown' | 'assistant_public_user_reference' | 'assistant_public_effect_unconfirmed' | 'tool_anonymous_requires_identity' | 'interaction_action_invalid' | 'interaction_field_unknown' | 'interaction_field_control_mismatch' | 'interaction_field_missing' | 'interaction_initial_value_unknown' | 'interaction_consent_invalid' | 'interaction_expiry_invalid' | 'channel_dependency_missing' | 'channel_requirement_unsupported' | 'customer_endpoint_action_unsupported' | 'customer_endpoint_surface_unsupported' | 'customer_endpoint_credential_source_unsupported' | 'customer_endpoint_policy_conflict' | 'customer_endpoint_routing_inconsistent' | 'unused_connector_alias' | 'arg_mismatch' | 'agent_guide_invalid' | 'agent_guide_duplicate_workflow' | 'agent_guide_duplicate_example' | 'agent_guide_example_workflow_missing' | 'agent_guide_capability_missing' | 'agent_guide_capability_kind' | 'app_package_sensitive_content';
 export interface CompileError {
     readonly code: CompileErrorCode;
     /** Dotted path to the offending location (e.g. `tools.1.name`); empty string for the document root. */

package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts

@@ -364,6 +364,7 @@ export declare const manifestV1Schema: z.ZodObject<{
                 channel: z.ZodEnum<{
                     whatsapp: "whatsapp";
                     instagram: "instagram";
+                    sms: "sms";
                 }>;
                 mode: z.ZodLiteral<"public">;
                 capabilities: z.ZodArray<z.ZodObject<{
@@ -874,6 +875,7 @@ export declare const manifestV2Schema: z.ZodObject<{
                 channel: z.ZodEnum<{
                     whatsapp: "whatsapp";
                     instagram: "instagram";
+                    sms: "sms";
                 }>;
                 mode: z.ZodLiteral<"public">;
                 capabilities: z.ZodArray<z.ZodObject<{
@@ -1278,6 +1280,7 @@ export declare const manifestV2Schema: z.ZodObject<{
                 seconds: z.ZodNumber;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodLiteral<"allowed">>;
     }, z.core.$strip>>;
     connectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         id: z.ZodString;
@@ -1678,6 +1681,7 @@ export declare const manifestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 channel: z.ZodEnum<{
                     whatsapp: "whatsapp";
                     instagram: "instagram";
+                    sms: "sms";
                 }>;
                 mode: z.ZodLiteral<"public">;
                 capabilities: z.ZodArray<z.ZodObject<{
@@ -2187,6 +2191,7 @@ export declare const manifestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 channel: z.ZodEnum<{
                     whatsapp: "whatsapp";
                     instagram: "instagram";
+                    sms: "sms";
                 }>;
                 mode: z.ZodLiteral<"public">;
                 capabilities: z.ZodArray<z.ZodObject<{
@@ -2591,6 +2596,7 @@ export declare const manifestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 seconds: z.ZodNumber;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodLiteral<"allowed">>;
     }, z.core.$strip>>;
     connectors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         id: z.ZodString;

package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js

@@ -122,6 +122,9 @@ const toolV2Schema = toolSchema.extend({
     // Additive optional field: a v1.x minor under ADR 0150. Bounded `collect` interaction metadata
     // (ADR 0240) an opener tool declares for one confirmed action; references are checked in compile().
     interaction: toolInteractionSchema.optional(),
+    // Additive optional field: anonymous callers of a public or mixed MCP app may run this tool although
+    // it is not read-only. Tools that read `${user}` or require claims are rejected in compile().
+    anonymous: z.literal('allowed').optional(),
 });
 /**
  * An MCP resource. Like a tool, it carries a `fulfilment` (it can return a constant or call connectors);
@@ -196,7 +199,7 @@ const embeddedAssistantSchema = z
         z
             .object({
             kind: z.literal('messaging'),
-            channel: z.enum(['whatsapp', 'instagram']),
+            channel: z.enum(['whatsapp', 'instagram', 'sms']),
             mode: z.literal('public'),
             capabilities: z.array(assistantCapabilitySchema),
             instructions: z.string().trim().min(1).max(MAX_SERVER_INSTRUCTIONS).optional(),

package/node_modules/@noodle-borg/compiler/dist/manifest/website-projection.d.ts

@@ -19,6 +19,7 @@ import type { CompileError } from '../errors.js';
  */
 interface AssistantSurfaceInput {
     readonly kind?: 'website' | 'messaging' | undefined;
+    readonly channel?: string | undefined;
     readonly mode: 'authenticated' | 'public' | 'mixed';
     readonly capabilities?: readonly {
         readonly kind: string;
@@ -45,6 +46,8 @@ export interface WebsiteProjectionSurfaces {
 }
 /** A tool touches identity when it reads `${user}` or requires verified claims (ADR 0185). */
 export declare function anonymousBehavior(tool: ArtifactTool): 'public-safe' | 'requires-identity';
+/** `anonymous: 'allowed'` cannot open a tool that needs to know who the caller is. */
+export declare function validateAnonymousTools(tools: readonly ArtifactTool[]): readonly CompileError[];
 export declare function validateWebsiteProjection(assistant: AssistantProjectionInput | undefined, surfaces: WebsiteProjectionSurfaces): readonly CompileError[];
 /** Resolved refs carry the connector id; a shape-only ref is looked up through its declared alias. */
 export declare function isNativeRecordsOperation(operation: OperationRef, connectors: WebsiteProjectionSurfaces['connectors']): boolean;

package/node_modules/@noodle-borg/compiler/dist/manifest/website-projection.js

@@ -6,6 +6,18 @@ export function anonymousBehavior(tool) {
         return 'requires-identity';
     return readsUser(tool.fulfilment) ? 'requires-identity' : 'public-safe';
 }
+/** `anonymous: 'allowed'` cannot open a tool that needs to know who the caller is. */
+export function validateAnonymousTools(tools) {
+    return tools.flatMap((tool, index) => tool.anonymous === 'allowed' && anonymousBehavior(tool) === 'requires-identity'
+        ? [
+            {
+                code: 'tool_anonymous_requires_identity',
+                path: `tools.${index}.anonymous`,
+                message: `tool "${tool.name}" reads the signed-in user or requires verified claims, so anonymous callers cannot run it; remove anonymous: 'allowed' or stop reading \${user}`,
+            },
+        ]
+        : []);
+}
 export function validateWebsiteProjection(assistant, surfaces) {
     if (assistant?.surfaces === undefined)
         return [];
@@ -43,7 +55,7 @@ export function validateWebsiteProjection(assistant, surfaces) {
             const path = `tools.${tool.name}`;
             if (surface.kind === 'messaging') {
                 const selected = new Set(surface.capabilities?.flatMap((entry) => (entry.kind === 'tool' ? [entry.name] : [])));
-                const requirement = messagingRequirement(tool, selected, surfaces);
+                const requirement = messagingRequirement(tool, selected, surfaces, surface.channel);
                 if (requirement !== undefined)
                     errors.push({ ...requirement, path });
             }
@@ -75,9 +87,18 @@ export function validateWebsiteProjection(assistant, surfaces) {
  * opener may carry a browser widget (the website keeps its React view) because the profile renders
  * the same block as natural collection. Anything else names the requirement it lacks.
  */
-function messagingRequirement(tool, selected, surfaces) {
+function messagingRequirement(tool, selected, surfaces, channel) {
     const operations = operationRefs(tool.fulfilment);
     const interaction = surfaces.interactions?.[tool.name];
+    if (channel === 'sms' &&
+        (interaction !== undefined ||
+            operations.length > 0 ||
+            tool.annotations?.readOnlyHint !== true ||
+            tool._meta?.ui !== undefined))
+        return {
+            code: 'channel_requirement_unsupported',
+            message: `"${tool.name}" requires an interaction not supported by the SMS question-answering profile`,
+        };
     if (interaction !== undefined && !selected.has(interaction.action)) {
         return {
             code: 'channel_dependency_missing',

package/node_modules/@noodle-borg/runtime/dist/connector/types.d.ts

@@ -92,7 +92,7 @@ export interface PublicAdmissionContext {
     readonly messaging?: string;
     readonly provenance?: {
         readonly kind: 'messaging';
-        readonly channel: 'whatsapp' | 'instagram';
+        readonly channel: 'whatsapp' | 'instagram' | 'sms';
     };
 }
 /** A single connector-operation invocation, fully resolved and credentialed by the runtime. */

package/node_modules/@noodle-borg/service/dist/application-history-settings.js

@@ -5,6 +5,7 @@ const WIRE_SOURCES = {
     signedInCustomers: 'signed_in_customers',
     whatsapp: 'whatsapp',
     instagram: 'instagram',
+    sms: 'sms',
 };
 /**
  * The surfaces the served application declared `history: false` on (ADR 0241 decision 11), so staff
@@ -58,6 +59,7 @@ export function historySettingsProjection(setting, allowance, revision, canEdit)
                 signedInCustomers: setting.sources.signed_in_customers,
                 whatsapp: setting.sources.whatsapp,
                 instagram: setting.sources.instagram,
+                sms: setting.sources.sms,
             },
         },
     };

package/node_modules/@noodle-borg/service/dist/build-info.js

@@ -7,6 +7,7 @@ export function serviceInfoPayload(buildInfo, developerMcp, channels = {}) {
         features: {
             mixedCustomerAuth: MIXED_CUSTOMER_AUTH_FEATURE_VERSION,
             ...(channels.whatsapp ? { whatsapp: 1 } : {}),
+            ...(channels.sms ? { sms: 1 } : {}),
             ...(channels.instagram ? { instagram: 1 } : {}),
         },
         ...(developerMcp

package/node_modules/@noodle-borg/service/dist/business-information/managed-solution-executable.js

@@ -66,6 +66,8 @@ export function managedSolutionManifest(definition, hostedPageOrigin) {
                 description: blueprint.description,
                 inputSchema,
                 outputSchema: RECORD_OPERATION_SIGNATURES.submit_record?.output,
+                // Lead capture stays open to anonymous MCP callers; native-record admission bounds it.
+                anonymous: 'allowed',
                 annotations: {
                     confirm: true,
                     readOnlyHint: false,

package/node_modules/@noodle-borg/service/dist/channels/composition.js

@@ -15,10 +15,11 @@ export async function createPostgresWhatsApp(pool, secretBox, options) {
     };
 }
 export function createWhatsAppRuntime(options, deps, history) {
-    if (!options)
+    if (!options.whatsapp)
         return undefined;
     return new WhatsAppRuntime({
-        ...options,
+        ...options.whatsapp,
+        publicBaseUrl: options.publicBaseUrl,
         ...(history.installations ? { installations: history.installations } : {}),
         ...(history.allowance
             ? {

package/node_modules/@noodle-borg/service/dist/channels/messaging-eligibility.js

@@ -6,7 +6,7 @@ import { isNativeRecordsOperation, } from '@noodle-borg/compiler';
  * its confirmed native-record action selected beside it; everything else names, as a channel error
  * code, the requirement the messaging profile lacks.
  */
-export function messagingProjectionIneligibility(artifact) {
+export function messagingProjectionIneligibility(artifact, channel = 'whatsapp') {
     const interactions = artifact.toolInteractions ?? {};
     const present = new Set(artifact.tools.map((tool) => tool.name));
     const actions = new Set(Object.entries(interactions)
@@ -14,6 +14,11 @@ export function messagingProjectionIneligibility(artifact) {
         .map(([, interaction]) => interaction.action));
     for (const tool of artifact.tools) {
         const interaction = interactions[tool.name];
+        if (channel === 'sms' &&
+            (interaction !== undefined ||
+                tool.annotations?.readOnlyHint !== true ||
+                tool._meta?.ui !== undefined))
+            return 'messaging_action_unsupported';
         if (interaction !== undefined && !present.has(interaction.action))
             return 'channel_dependency_missing';
         const operations = operationRefs(tool.fulfilment);

package/node_modules/@noodle-borg/service/dist/channels/reply-bound.js

@@ -3,6 +3,10 @@ const EXPAND = '\n\nAsk me to expand on any part.';
 const INSTAGRAM_BYTES = 1000;
 /** One reply within its channel's limit, cut on a character boundary and inviting a follow-up. */
 export function boundReply(channel, answer) {
+    if (channel === 'sms')
+        return answer.length <= 600
+            ? answer
+            : `${answer.slice(0, 530).replace(/[\uD800-\uDBFF]$/u, '')}${EXPAND}\nReply STOP to unsubscribe.`;
     if (channel === 'whatsapp')
         return answer.length <= 3500
             ? answer