@noodleseed/one 0.189.0 → 0.190.0

package/node_modules/@noodle-borg/assistant-gateway/package.json

@@ -42,7 +42,7 @@
     "@noodle-borg/module-audit": "0.0.0",
     "@noodle-borg/protocol": "0.0.0",
     "@noodle-borg/runtime": "0.0.0",
-    "@noodleseed/assistant": "1.38.0",
+    "@noodleseed/assistant": "1.39.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/node_modules/@noodle-borg/transport-http/dist/handler.js

@@ -124,6 +124,9 @@ export function createMcpRouter(lookup, options = {}) {
                 ...(route?.kind === 'tenant' && route.publicResourceUrl !== undefined
                     ? { publicResourceUrl: route.publicResourceUrl }
                     : {}),
+                ...(route?.kind === 'tenant' && route.clientAddress !== undefined
+                    ? { clientAddress: route.clientAddress }
+                    : {}),
             }, routeId, maxBody, options.allowedOrigins, tenant);
         })()).then(() => logRequest(logger, logId, req, res, start));
     };

package/node_modules/@noodle-borg/transport-http/dist/routing.d.ts

@@ -10,6 +10,8 @@ type ParsedRoute = {
     readonly ref: TenantRouteRef;
     readonly logId: string;
     readonly publicResourceUrl?: string;
+    /** The caller address the edge Worker observed; present only on edge-authenticated routes. */
+    readonly clientAddress?: string;
 } | {
     readonly kind: 'deployment';
     readonly deploymentId: string;

package/node_modules/@noodle-borg/transport-http/dist/routing.js

@@ -15,6 +15,7 @@ export async function resolveRoute(req, pathname, publicTenantRouting) {
         const ref = await publicTenantRouting.resolveTenant(publicRef);
         if (ref === undefined)
             return { ok: true, route: null };
+        const clientAddress = header(req, 'x-noodle-client-address');
         return {
             ok: true,
             route: {
@@ -22,6 +23,7 @@ export async function resolveRoute(req, pathname, publicTenantRouting) {
                 ref,
                 logId: tenantLogId(ref),
                 publicResourceUrl: canonicalPublicResourceUrl(forwardedHost),
+                ...(clientAddress !== undefined ? { clientAddress } : {}),
             },
         };
     }

package/node_modules/@noodle-borg/transport-http/dist/serve-request.js

@@ -1,5 +1,5 @@
 import { randomUUID } from 'node:crypto';
-import { trustedPublicAdmission } from '@noodle-borg/admission-limits/portable';
+import { clientAddressBucket, trustedPublicAdmission, } from '@noodle-borg/admission-limits/portable';
 import { createDualEraMcpHandler, handleStatelessHttp, JSON_RPC, } from '@noodle-borg/protocol';
 import { admissionContexts, requestsInvocationContext } from './admission-context.js';
 import { authorizeIdentityMode, authorizeMixedMode, authorizePublicServiceMode, canonicalResourceUrl, isIdentityMode, } from './identity-authorization.js';
@@ -134,6 +134,7 @@ export async function serveRequest(req, res, target, auth, routeId, maxBody, all
         ...(auth.accessMode !== undefined ? { accessMode: auth.accessMode } : {}),
         ...(req.socket.remoteAddress !== undefined ? { remoteAddress: req.socket.remoteAddress } : {}),
     });
+    const callerNetwork = clientAddressBucket(auth.clientAddress);
     for (const context of contexts) {
         const decision = auth.admissionGate
             ? await auth.admissionGate(context)
@@ -148,6 +149,7 @@ export async function serveRequest(req, res, target, auth, routeId, maxBody, all
             ...(context.env !== undefined ? { env: context.env } : {}),
             ...(context.serverVersion !== undefined ? { serverVersion: context.serverVersion } : {}),
             ...(context.accessMode !== undefined ? { accessMode: context.accessMode } : {}),
+            ...(callerNetwork !== undefined ? { callerNetwork } : {}),
             decision: decision.allow ? 'allow' : 'deny',
             ...(decision.reason !== undefined ? { reason: decision.reason } : {}),
         });

package/node_modules/@noodleseed/assistant/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/assistant",
-  "version": "1.38.0",
+  "version": "1.39.0",
   "description": "Embed the Noodle Seed customer-branded assistant in your web app with managed or framework-owned UI, a framework-neutral MCP App host, a DOM-free client, and a backend session helper. Authoring and deploying the server is @noodleseed/one.",
   "license": "Apache-2.0",
   "repository": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.189.0",
+  "version": "0.190.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",