@noodleseed/one 0.33.0 → 0.34.1

package/node_modules/@noodle-borg/service/dist/welcome-email.d.ts

@@ -0,0 +1,65 @@
+import type { Logger } from '@noodle-borg/transport-http';
+import type { ControlPlaneStore, WelcomeEmailRecord } from './store.js';
+export declare const WELCOME_EMAIL_SWEEP_INTERVAL_MS = 30000;
+export interface RenderedWelcomeEmail {
+    readonly subject: string;
+    readonly text: string;
+    readonly html: string;
+}
+export declare function renderWelcomeEmail(input?: {
+    readonly firstName?: string;
+}): RenderedWelcomeEmail;
+export interface InvitationEmailContent {
+    readonly inviterEmail: string;
+    readonly orgName: string;
+    readonly role: 'owner' | 'developer';
+    readonly acceptUrl: string;
+    readonly expiresAt: string;
+}
+export declare function renderInvitationEmail(input: InvitationEmailContent): RenderedWelcomeEmail;
+export interface InvitationEmailInput extends InvitationEmailContent {
+    readonly invitationId: string;
+    readonly email: string;
+}
+export interface InvitationEmailSender {
+    sendInvitation(input: InvitationEmailInput): Promise<{
+        readonly providerMessageId: string;
+    }>;
+}
+export interface WelcomeEmailSender {
+    send(input: Pick<WelcomeEmailRecord, 'subject' | 'email' | 'firstName'>): Promise<{
+        readonly providerMessageId: string;
+    }>;
+}
+export interface ResendEmailSenderOptions {
+    readonly apiKey: string;
+    readonly welcomeFrom: string;
+    readonly invitationFrom: string;
+    readonly welcomeReplyTo?: string;
+    readonly invitationReplyTo?: string;
+    readonly fetch?: typeof fetch;
+}
+export declare function resolveWelcomeEmailConfig(env: Readonly<Record<string, string | undefined>>): ResendEmailSenderOptions | undefined;
+export declare class ResendEmailSender implements WelcomeEmailSender, InvitationEmailSender {
+    #private;
+    constructor(options: ResendEmailSenderOptions);
+    send(input: Pick<WelcomeEmailRecord, 'subject' | 'email' | 'firstName'>): Promise<{
+        readonly providerMessageId: string;
+    }>;
+    sendInvitation(input: InvitationEmailInput): Promise<{
+        readonly providerMessageId: string;
+    }>;
+}
+export interface WelcomeEmailWorkerOptions {
+    readonly store: ControlPlaneStore;
+    readonly sender: WelcomeEmailSender;
+    readonly clock?: () => Date;
+    readonly logger?: Logger;
+}
+export declare class WelcomeEmailWorker {
+    #private;
+    constructor(options: WelcomeEmailWorkerOptions);
+    runOnce(): Promise<void>;
+}
+export declare function startWelcomeEmailWorker(options: WelcomeEmailWorkerOptions): NodeJS.Timeout;
+//# sourceMappingURL=welcome-email.d.ts.map

package/node_modules/@noodle-borg/service/dist/welcome-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome-email.d.ts","sourceRoot":"","sources":["../src/welcome-email.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAaxE,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1C,oBAAoB,CA4CtB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB,GAAG,oBAAoB,CA8BzF;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC;QAChF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAChD,wBAAwB,GAAG,SAAS,CAiBtC;AAED,qBAAa,iBAAkB,YAAW,kBAAkB,EAAE,qBAAqB;;gBAQrE,OAAO,EAAE,wBAAwB;IASvC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC;QACtF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;KACpC,CAAC;IAUF,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;CA0C7F;AAoCD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,kBAAkB;;gBAOjB,OAAO,EAAE,yBAAyB;IAOxC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgC/B;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAM1F"}

package/node_modules/@noodle-borg/service/dist/welcome-email.js

@@ -0,0 +1,243 @@
+import { createHash } from 'node:crypto';
+const DOCS_URL = 'https://docs.noodleseed.dev/docs/quickstart';
+const LOGO_URL = 'https://noodleseed.dev/noodle-seed-logo-light.svg';
+const RESEND_ENDPOINT = 'https://api.resend.com/emails';
+const DELIVERY_TIMEOUT_MS = 10_000;
+const LEASE_MS = 30_000;
+const BASE_RETRY_MS = 60_000;
+const MAX_RETRY_MS = 24 * 60 * 60 * 1000;
+const MAX_BATCH_SIZE = 25;
+const DEFAULT_WELCOME_FROM = 'Asad <asad@noodleseed.com>';
+const DEFAULT_INVITATION_FROM = 'Noodle Seed <hello@noodleseed.com>';
+export const WELCOME_EMAIL_SWEEP_INTERVAL_MS = 30_000;
+export function renderWelcomeEmail(input = {}) {
+    const subject = 'Welcome to Noodle Seed';
+    const greeting = input.firstName !== undefined ? `Hi ${plainText(input.firstName)},` : 'Hi,';
+    const text = `${greeting}
+
+I'm Asad, founder of Noodle Seed. I wanted to personally welcome you to the developer platform.
+
+We are building Noodle Seed so you can create and run production-grade AI apps, plugins, and MCP servers without stitching the infrastructure together yourself.
+
+The quickest way to get started is here:
+${DOCS_URL}
+
+If you get stuck, or simply want to share an idea, reply and tell me what you are building. I read every response.
+
+Welcome aboard,
+Asad - Co-Founder & CTO`;
+    const html = `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <title>${subject}</title>
+  </head>
+  <body style="margin:0;background:#f4f2ed;color:#171714;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;">
+    <div style="display:none;max-height:0;overflow:hidden;opacity:0;">A personal welcome from Asad, founder of Noodle Seed.</div>
+    <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="background:#f4f2ed;padding:32px 16px;">
+      <tr><td align="center">
+        <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="max-width:600px;background:#ffffff;border:1px solid #dedbd3;border-radius:16px;">
+          <tr><td style="padding:40px 40px 18px;"><img src="${LOGO_URL}" width="200" height="31" alt="Noodle Seed" style="display:block;width:200px;max-width:100%;height:auto;"></td></tr>
+          <tr><td style="padding:0 40px 40px;">
+            <h1 style="margin:0 0 24px;font-size:30px;line-height:1.2;letter-spacing:-0.03em;">Welcome to Noodle Seed</h1>
+            <p style="margin:0 0 18px;font-size:16px;line-height:1.65;">${escapeHtml(greeting)}</p>
+            <p style="margin:0 0 18px;font-size:16px;line-height:1.65;">I'm Asad, founder of Noodle Seed. I wanted to personally welcome you to the developer platform.</p>
+            <p style="margin:0 0 26px;font-size:16px;line-height:1.65;">We are building Noodle Seed so you can create and run production-grade AI apps, plugins, and MCP servers without stitching the infrastructure together yourself.</p>
+            <a href="${DOCS_URL}" style="display:inline-block;background:#171714;color:#ffffff;text-decoration:none;font-size:15px;font-weight:650;padding:13px 20px;border-radius:999px;">Open the developer docs</a>
+            <p style="margin:28px 0 18px;font-size:16px;line-height:1.65;">If you get stuck, or simply want to share an idea, reply and tell me what you are building. I read every response.</p>
+            <p style="margin:0;font-size:16px;line-height:1.65;">Welcome aboard,<br><strong>Asad</strong> <span style="color:#6b685f;">- Co-Founder &amp; CTO</span></p>
+          </td></tr>
+        </table>
+      </td></tr>
+    </table>
+  </body>
+</html>`;
+    return { subject, text, html };
+}
+export function renderInvitationEmail(input) {
+    const orgName = headerText(input.orgName);
+    const inviterEmail = headerText(input.inviterEmail);
+    const subject = `${displayNameFromEmail(inviterEmail)} invited you to ${orgName} on Noodle Seed`;
+    const text = `${inviterEmail} invited you to join ${orgName} as ${input.role} on Noodle Seed.
+
+Accept invitation:
+${input.acceptUrl}
+
+This invitation expires on ${input.expiresAt.slice(0, 10)}. If you were not expecting it, you can ignore this email.`;
+    const html = `<!doctype html>
+<html lang="en">
+  <head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(subject)}</title></head>
+  <body style="margin:0;background:#f4f2ed;color:#171714;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;">
+    <div style="display:none;max-height:0;overflow:hidden;opacity:0;">You have been invited to collaborate on Noodle Seed.</div>
+    <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="background:#f4f2ed;padding:32px 16px;"><tr><td align="center">
+      <table role="presentation" width="100%" cellspacing="0" cellpadding="0" style="max-width:600px;background:#ffffff;border:1px solid #dedbd3;border-radius:16px;">
+        <tr><td style="padding:40px 40px 18px;"><img src="${LOGO_URL}" width="200" height="31" alt="Noodle Seed" style="display:block;width:200px;max-width:100%;height:auto;"></td></tr>
+        <tr><td style="padding:0 40px 40px;">
+          <h1 style="margin:0 0 24px;font-size:30px;line-height:1.2;letter-spacing:-0.03em;">Join ${escapeHtml(orgName)}</h1>
+          <p style="margin:0 0 18px;font-size:16px;line-height:1.65;"><strong>${escapeHtml(inviterEmail)}</strong> invited you to join <strong>${escapeHtml(orgName)}</strong> as ${input.role}.</p>
+          <p style="margin:0 0 26px;font-size:16px;line-height:1.65;">Accept the invitation to collaborate on apps, deployments, and infrastructure in Noodle Seed.</p>
+          <a href="${escapeHtml(input.acceptUrl)}" style="display:inline-block;background:#171714;color:#ffffff;text-decoration:none;font-size:15px;font-weight:650;padding:13px 20px;border-radius:999px;">Accept invitation</a>
+          <p style="margin:28px 0 0;font-size:13px;line-height:1.6;color:#6b685f;">This invitation expires on ${escapeHtml(input.expiresAt.slice(0, 10))}. If you were not expecting it, you can ignore this email.</p>
+        </td></tr>
+      </table>
+    </td></tr></table>
+  </body>
+</html>`;
+    return { subject, text, html };
+}
+export function resolveWelcomeEmailConfig(env) {
+    const apiKey = env.RESEND_API_KEY?.trim();
+    const welcomeFrom = env.NOODLE_WELCOME_EMAIL_FROM?.trim();
+    const invitationFrom = env.NOODLE_INVITATION_EMAIL_FROM?.trim();
+    const welcomeReplyTo = env.NOODLE_WELCOME_EMAIL_REPLY_TO?.trim();
+    const invitationReplyTo = env.NOODLE_INVITATION_EMAIL_REPLY_TO?.trim();
+    if (!apiKey && !welcomeFrom && !invitationFrom && !welcomeReplyTo && !invitationReplyTo) {
+        return undefined;
+    }
+    if (!apiKey)
+        throw new Error('RESEND_API_KEY is required when transactional email is configured');
+    return {
+        apiKey,
+        welcomeFrom: welcomeFrom || DEFAULT_WELCOME_FROM,
+        invitationFrom: invitationFrom || DEFAULT_INVITATION_FROM,
+        ...(welcomeReplyTo ? { welcomeReplyTo } : {}),
+        ...(invitationReplyTo ? { invitationReplyTo } : {}),
+    };
+}
+export class ResendEmailSender {
+    #apiKey;
+    #welcomeFrom;
+    #invitationFrom;
+    #welcomeReplyTo;
+    #invitationReplyTo;
+    #fetch;
+    constructor(options) {
+        this.#apiKey = options.apiKey;
+        this.#welcomeFrom = options.welcomeFrom;
+        this.#invitationFrom = options.invitationFrom;
+        this.#welcomeReplyTo = options.welcomeReplyTo;
+        this.#invitationReplyTo = options.invitationReplyTo;
+        this.#fetch = options.fetch ?? globalThis.fetch;
+    }
+    async send(input) {
+        return this.#send(input.email, `welcome.${hash(input.subject)}`, renderWelcomeEmail(input.firstName !== undefined ? { firstName: input.firstName } : {}), this.#welcomeFrom, this.#welcomeReplyTo);
+    }
+    sendInvitation(input) {
+        return this.#send(input.email, `invitation.${hash(input.invitationId)}`, renderInvitationEmail(input), this.#invitationFrom, this.#invitationReplyTo);
+    }
+    async #send(recipient, idempotencyKey, content, from, replyTo) {
+        const response = await this.#fetch(RESEND_ENDPOINT, {
+            method: 'POST',
+            redirect: 'error',
+            signal: AbortSignal.timeout(DELIVERY_TIMEOUT_MS),
+            headers: {
+                authorization: `Bearer ${this.#apiKey}`,
+                'content-type': 'application/json',
+                'idempotency-key': idempotencyKey,
+            },
+            body: JSON.stringify({
+                from,
+                to: [recipient],
+                ...(replyTo !== undefined ? { reply_to: replyTo } : {}),
+                ...content,
+            }),
+        });
+        if (!response.ok) {
+            throw new Error(`welcome email provider rejected request with status ${response.status}`);
+        }
+        const body = (await response.json());
+        if (typeof body.id !== 'string' || body.id.length === 0) {
+            throw new Error('welcome email provider returned an invalid response');
+        }
+        return { providerMessageId: body.id };
+    }
+}
+function hash(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function headerText(value) {
+    return value
+        .replace(/[\r\n]+/g, ' ')
+        .trim()
+        .slice(0, 200);
+}
+function plainText(value) {
+    return value
+        .replace(/[\r\n]+/g, ' ')
+        .trim()
+        .slice(0, 100);
+}
+function displayNameFromEmail(email) {
+    const local = email.split('@')[0] ?? 'A teammate';
+    const words = local.split(/[._-]+/).filter(Boolean);
+    if (words.length === 0)
+        return 'A teammate';
+    return words.map((word) => `${word[0]?.toUpperCase() ?? ''}${word.slice(1)}`).join(' ');
+}
+function escapeHtml(value) {
+    return value
+        .replaceAll('&', '&amp;')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&#39;');
+}
+export class WelcomeEmailWorker {
+    #store;
+    #sender;
+    #clock;
+    #logger;
+    #running = false;
+    constructor(options) {
+        this.#store = options.store;
+        this.#sender = options.sender;
+        this.#clock = options.clock ?? (() => new Date());
+        this.#logger = options.logger;
+    }
+    async runOnce() {
+        if (this.#running)
+            return;
+        this.#running = true;
+        try {
+            for (let processed = 0; processed < MAX_BATCH_SIZE; processed += 1) {
+                const record = await this.#store.claimWelcomeEmail({
+                    now: this.#clock(),
+                    leaseMs: LEASE_MS,
+                });
+                if (record === undefined)
+                    return;
+                try {
+                    const result = await this.#sender.send(record);
+                    await this.#store.markWelcomeEmailSent({
+                        subject: record.subject,
+                        providerMessageId: result.providerMessageId,
+                    });
+                    this.#logger?.info('welcome_email.delivered', { attempt: record.attemptCount });
+                }
+                catch {
+                    const delay = Math.min(BASE_RETRY_MS * 2 ** (record.attemptCount - 1), MAX_RETRY_MS);
+                    await this.#store.markWelcomeEmailFailed({
+                        subject: record.subject,
+                        nextAttemptAt: new Date(this.#clock().getTime() + delay),
+                    });
+                    this.#logger?.warn('welcome_email.delivery_failed', { attempt: record.attemptCount });
+                }
+            }
+        }
+        catch {
+            this.#logger?.warn('welcome_email.sweep_failed', { status: 500 });
+        }
+        finally {
+            this.#running = false;
+        }
+    }
+}
+export function startWelcomeEmailWorker(options) {
+    const worker = new WelcomeEmailWorker(options);
+    void worker.runOnce();
+    const timer = setInterval(() => void worker.runOnce(), WELCOME_EMAIL_SWEEP_INTERVAL_MS);
+    timer.unref?.();
+    return timer;
+}
+//# sourceMappingURL=welcome-email.js.map

package/node_modules/@noodle-borg/service/dist/welcome-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome-email.js","sourceRoot":"","sources":["../src/welcome-email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,QAAQ,GAAG,6CAA6C,CAAC;AAC/D,MAAM,QAAQ,GAAG,mDAAmD,CAAC;AACrE,MAAM,eAAe,GAAG,+BAA+B,CAAC;AACxD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAC1D,MAAM,uBAAuB,GAAG,oCAAoC,CAAC;AAErE,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAQtD,MAAM,UAAU,kBAAkB,CAChC,QAAyC,EAAE;IAE3C,MAAM,OAAO,GAAG,wBAAwB,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7F,MAAM,IAAI,GAAG,GAAG,QAAQ;;;;;;;EAOxB,QAAQ;;;;;wBAKc,CAAC;IACvB,MAAM,IAAI,GAAG;;;;;aAKF,OAAO;;;;;;;8DAO0C,QAAQ;;;0EAGI,UAAU,CAAC,QAAQ,CAAC;;;uBAGvE,QAAQ;;;;;;;;QAQvB,CAAC;IACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAUD,MAAM,UAAU,qBAAqB,CAAC,KAA6B;IACjE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,oBAAoB,CAAC,YAAY,CAAC,mBAAmB,OAAO,iBAAiB,CAAC;IACjG,MAAM,IAAI,GAAG,GAAG,YAAY,wBAAwB,OAAO,OAAO,KAAK,CAAC,IAAI;;;EAG5E,KAAK,CAAC,SAAS;;6BAEY,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4DAA4D,CAAC;IACpH,MAAM,IAAI,GAAG;;2GAE4F,UAAU,CAAC,OAAO,CAAC;;;;;4DAKlE,QAAQ;;oGAEgC,UAAU,CAAC,OAAO,CAAC;gFACvC,UAAU,CAAC,YAAY,CAAC,yCAAyC,UAAU,CAAC,OAAO,CAAC,gBAAgB,KAAK,CAAC,IAAI;;qBAEzK,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;gHACgE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;;;;;QAKhJ,CAAC;IACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AA0BD,MAAM,UAAU,yBAAyB,CACvC,GAAiD;IAEjD,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,cAAc,GAAG,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IAChE,MAAM,cAAc,GAAG,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,iBAAiB,GAAG,GAAG,CAAC,gCAAgC,EAAE,IAAI,EAAE,CAAC;IACvE,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAClG,OAAO;QACL,MAAM;QACN,WAAW,EAAE,WAAW,IAAI,oBAAoB;QAChD,cAAc,EAAE,cAAc,IAAI,uBAAuB;QACzD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,OAAO,CAAS;IAChB,YAAY,CAAS;IACrB,eAAe,CAAS;IACxB,eAAe,CAAqB;IACpC,kBAAkB,CAAqB;IACvC,MAAM,CAAe;IAE9B,YAAY,OAAiC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAkE;QAG3E,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,CAAC,KAAK,EACX,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAChC,kBAAkB,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACvF,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,eAAe,CACrB,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,KAA2B;QACxC,OAAO,IAAI,CAAC,KAAK,CACf,KAAK,CAAC,KAAK,EACX,cAAc,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EACxC,qBAAqB,CAAC,KAAK,CAAC,EAC5B,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,SAAiB,EACjB,cAAsB,EACtB,OAA6B,EAC7B,IAAY,EACZ,OAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;YAChD,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,EAAE;gBACvC,cAAc,EAAE,kBAAkB;gBAClC,iBAAiB,EAAE,cAAc;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,EAAE,EAAE,CAAC,SAAS,CAAC;gBACf,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,OAAO;aACX,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uDAAuD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;QAClE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACxC,CAAC;CACF;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC5C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC;AASD,MAAM,OAAO,kBAAkB;IACpB,MAAM,CAAoB;IAC1B,OAAO,CAAqB;IAC5B,MAAM,CAAa;IACnB,OAAO,CAAqB;IACrC,QAAQ,GAAG,KAAK,CAAC;IAEjB,YAAY,OAAkC;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,cAAc,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;oBACjD,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE;oBAClB,OAAO,EAAE,QAAQ;iBAClB,CAAC,CAAC;gBACH,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO;gBACjC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC/C,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;wBACrC,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;qBAC5C,CAAC,CAAC;oBACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;oBACrF,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC;wBACvC,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC;qBACzD,CAAC,CAAC;oBACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,+BAA+B,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAkC;IACxE,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAC;IACxF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/service/package.json

@@ -2,6 +2,7 @@
   "name": "@noodle-borg/service",
   "version": "0.0.0",
   "private": true,
+  "license": "Apache-2.0",
   "type": "module",
   "engines": {
     "node": ">=24"
@@ -37,6 +38,7 @@
     "@noodle-borg/protocol": "0.0.0",
     "@noodle-borg/runtime": "0.0.0",
     "@noodle-borg/transport-http": "0.0.0",
+    "@noodle-borg/wire-contracts": "0.0.0",
     "jose": "^6.2.3",
     "yaml": "^2.9.0",
     "zod": "^4.4.3"

package/node_modules/@noodle-borg/transport-http/dist/examples/serve-demo.js

@@ -16,7 +16,7 @@ import { HttpConnector } from '@noodle-borg/connector-http';
 import { InMemoryConnectorRegistry, } from '@noodle-borg/runtime';
 import { serveHttp } from '../index.js';
 const MANIFEST = `
-manifestVersion: "0.2"
+manifestVersion: "1"
 server:
   name: demo_chain
   version: 1.0.0

package/node_modules/@noodle-borg/transport-http/package.json

@@ -2,6 +2,7 @@
   "name": "@noodle-borg/transport-http",
   "version": "0.0.0",
   "private": true,
+  "license": "Apache-2.0",
   "type": "module",
   "engines": {
     "node": ">=24"

package/node_modules/@noodle-borg/wire-contracts/dist/assistant.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The Embedded Assistant v1 session-exchange wire contract (ADR 0151): the response the hosted
+ * service returns from `POST /v1/assistant/sessions`, consumed by every published
+ * `@noodleseed/assistant` widget in the wild. The service parses its response through this schema
+ * before sending; the widget package stays dependency-free, so its side of the drift gate pins the
+ * golden fixture `contract/v1/assistant-session-response.json` instead of importing this module.
+ *
+ * The service must remain wire-compatible with the oldest supported published widget; changing a
+ * required field here is a coordinated widget-major event with a new pinned fixture, never a local
+ * edit (ADR 0151).
+ */
+import { z } from 'zod';
+export declare const assistantSessionResponseSchema: z.ZodObject<{
+    token: z.ZodString;
+    expiresAt: z.ZodString;
+    endpoints: z.ZodObject<{
+        turns: z.ZodURL;
+        toolConfirmations: z.ZodURL;
+    }, z.core.$strip>;
+    configuration: z.ZodOptional<z.ZodObject<{
+        branding: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        assistant: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AssistantSessionResponse = z.infer<typeof assistantSessionResponseSchema>;
+//# sourceMappingURL=assistant.d.ts.map

package/node_modules/@noodle-borg/wire-contracts/dist/assistant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant.d.ts","sourceRoot":"","sources":["../src/assistant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,8BAA8B;;;;;;;;;;;iBAQzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/node_modules/@noodle-borg/wire-contracts/dist/assistant.js

@@ -0,0 +1,31 @@
+/**
+ * The Embedded Assistant v1 session-exchange wire contract (ADR 0151): the response the hosted
+ * service returns from `POST /v1/assistant/sessions`, consumed by every published
+ * `@noodleseed/assistant` widget in the wild. The service parses its response through this schema
+ * before sending; the widget package stays dependency-free, so its side of the drift gate pins the
+ * golden fixture `contract/v1/assistant-session-response.json` instead of importing this module.
+ *
+ * The service must remain wire-compatible with the oldest supported published widget; changing a
+ * required field here is a coordinated widget-major event with a new pinned fixture, never a local
+ * edit (ADR 0151).
+ */
+import { z } from 'zod';
+/**
+ * Theming/behavior payload forwarded to the widget. Advisory presentation data: the widget renders
+ * safe defaults when it is absent, so only its envelope is pinned — the branding/assistant contents
+ * belong to the authoring/appearance layer and may grow additively without a contract event.
+ */
+const assistantSessionConfigurationSchema = z.object({
+    branding: z.record(z.string(), z.unknown()).optional(),
+    assistant: z.record(z.string(), z.unknown()).optional(),
+});
+export const assistantSessionResponseSchema = z.object({
+    token: z.string().min(1),
+    expiresAt: z.string().min(1),
+    endpoints: z.object({
+        turns: z.url(),
+        toolConfirmations: z.url(),
+    }),
+    configuration: assistantSessionConfigurationSchema.optional(),
+});
+//# sourceMappingURL=assistant.js.map

package/node_modules/@noodle-borg/wire-contracts/dist/assistant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant.js","sourceRoot":"","sources":["../src/assistant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE;QACd,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE;KAC3B,CAAC;IACF,aAAa,EAAE,mCAAmC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC"}