@noodleseed/one 0.66.0 → 0.68.0

package/node_modules/@noodle-borg/agent-kit/dist/skill-server-playbook-ref.js

@@ -0,0 +1,61 @@
+// Outcome-first product playbook for the build-server route. It owns behavioral sequencing and
+// evidence requirements; syntax and exhaustive SDK detail stay in the existing technical refs.
+export function renderBuildAnMcpServerReference() {
+    return [
+        '# Outcome',
+        '',
+        'Deliver the smallest useful Noodle Seed MCP server that turns a real user intent into a safe, typed result. Author only the configured TypeScript entrypoint, normally `src/server.ts`; keep the public authoring surface TypeScript-only and never hand-author generated manifests or connector IR.',
+        '',
+        '## Use when',
+        '',
+        '- The user asks to create or extend a headless MCP server, tools, resources, prompts, or connector-backed behavior.',
+        '- The requested result is primarily model-facing and does not require a widget or host-visible UI.',
+        '',
+        '## Do not use when',
+        '',
+        '- The primary outcome is an MCP App, widget, or visual interaction; select the App route.',
+        '- The task is only to diagnose existing failures, deploy, publish, embed, or report feedback; select that dedicated route.',
+        '- The idea has no conversational fit: static content, a dashboard, deep navigation, or a full existing app port should be narrowed to the few actions that are better said than clicked.',
+        '',
+        '## Required inputs',
+        '',
+        'Establish only the inputs needed for the requested stopping point. Follow `references/authoring-workflow.md` for the canonical discovery paths. Do not guess or invent a private schema, endpoint, authentication model, eligibility rule, or approval flow. If a required input is unavailable, state exactly what evidence is missing and stop before fabricating behavior.',
+        '',
+        '## Workflow',
+        '',
+        '1. **Confirm conversational fit.** Name one to three focused jobs where saying the request is easier than navigating the underlying system, and identify the data or action the model cannot provide by itself.',
+        '2. **Define the product contract.** For each job, write the user phrase, the intent-shaped tool or resource, its minimal typed input, the useful output, read/write effect, and backing operation. Design for user intent, not a 1:1 API endpoint wrapper.',
+        '3. **Choose the smallest implementation.** Use native tools, resources, or prompts for local/static behavior; add a connector only when external data or actions are required. Keep response output small and model-readable.',
+        '4. **Author in TypeScript.** Follow `references/authoring-workflow.md` for connector and flow patterns and `references/sdk-surface.md` for exact builders. These are this route’s complete canonical support set; use the router lookup catalog only when observed evidence names a different concern.',
+        '5. **Validate and repair.** Run `noodle validate --json`. Parse `error.errors[]`, repair the cited `path`, and rerun validation. Consult the lookup catalog only for the specific reported error code; do not open another reference speculatively.',
+        '6. **Run the local smoke.** After validation succeeds, run `noodle test --json` and repair any failure at that evidence layer.',
+        '7. **Prove external behavior.** For connector-backed reads, set credentials through the effective local target and run a safe representative `noodle tools call`. Confirm populated mapped fields from real output, not merely successful registration.',
+        '8. **Stop at the requested boundary.** Do not add an App, host test, hosted environment, publication work, or deployment unless the user requested that outcome. Deploy only when the selected route or the user explicitly requires it.',
+        '',
+        '## Verification evidence',
+        '',
+        'Report evidence as a ladder and claim only levels actually exercised:',
+        '',
+        '- **Authoring:** the requested TypeScript behavior exists with typed inputs and outputs.',
+        '- **Compilation:** `noodle validate --json` returned success.',
+        '- **Local smoke:** `noodle test --json` returned success.',
+        '- **Connector reality:** a representative safe read via `noodle tools call` returned populated mapped fields. This is required for connector-backed work.',
+        '- **Higher levels:** explicitly report host, deployment, and production checks as not run unless they were separately requested and evidenced.',
+        '',
+        '## Recovery paths',
+        '',
+        '- Validation failure: fix each structured error at its reported path, rerun validation, then resume at the next unproven layer.',
+        '- Tool registers but returns empty or `undefined` fields: inspect one sanitized real response, correct `${response...}` mappings, and rerun the same read.',
+        '- Credential unavailable: verify `secret(...)` naming and the effective local target; never inline or print the secret.',
+        '- Missing product input: ask for the smallest concrete example, schema, or rule that unblocks the selected job. Do not widen the build to compensate.',
+        '- Repeated failure at the same layer: stop after two evidence-backed repair attempts with the same failure signature and report the command, sanitized error, evidence already proven, and exact next action.',
+        '',
+        '## Stop conditions',
+        '',
+        '- Stop complete when the requested behavior passes validation and local smoke, and every connector-backed read has real-output evidence.',
+        "- Stop at the user's requested boundary; do not deploy unless the user requested deployment.",
+        '- Stop blocked when progress requires unavailable credentials, private schemas, external approval, or a live write the user has not approved.',
+        '- In the handoff, name what changed, what passed, what was not run, and any remaining risk without upgrading local evidence into a hosted or production claim.',
+    ].join('\n');
+}
+//# sourceMappingURL=skill-server-playbook-ref.js.map

package/node_modules/@noodle-borg/agent-kit/dist/skill-server-playbook-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-server-playbook-ref.js","sourceRoot":"","sources":["../src/skill-server-playbook-ref.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,+FAA+F;AAE/F,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,WAAW;QACX,EAAE;QACF,sSAAsS;QACtS,EAAE;QACF,aAAa;QACb,EAAE;QACF,qHAAqH;QACrH,oGAAoG;QACpG,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,2FAA2F;QAC3F,4HAA4H;QAC5H,0LAA0L;QAC1L,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,+WAA+W;QAC/W,EAAE;QACF,aAAa;QACb,EAAE;QACF,iNAAiN;QACjN,4PAA4P;QAC5P,+NAA+N;QAC/N,wSAAwS;QACxS,qPAAqP;QACrP,gIAAgI;QAChI,yPAAyP;QACzP,0OAA0O;QAC1O,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,uEAAuE;QACvE,EAAE;QACF,0FAA0F;QAC1F,+DAA+D;QAC/D,2DAA2D;QAC3D,2JAA2J;QAC3J,gJAAgJ;QAChJ,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,iIAAiI;QACjI,4JAA4J;QAC5J,yHAAyH;QACzH,uJAAuJ;QACvJ,+MAA+M;QAC/M,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,0IAA0I;QAC1I,8FAA8F;QAC9F,+IAA+I;QAC/I,gKAAgK;KACjK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/agent-kit/dist/skill-verification-ref.d.ts

@@ -0,0 +1,2 @@
+export declare function renderVerifyAndRecoverReference(): string;
+//# sourceMappingURL=skill-verification-ref.d.ts.map

package/node_modules/@noodle-borg/agent-kit/dist/skill-verification-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-verification-ref.d.ts","sourceRoot":"","sources":["../src/skill-verification-ref.ts"],"names":[],"mappings":"AAGA,wBAAgB,+BAA+B,IAAI,MAAM,CAoExD"}

package/node_modules/@noodle-borg/agent-kit/dist/skill-verification-ref.js

@@ -0,0 +1,72 @@
+// Verification and recovery behavior for the diagnostic route. This file owns evidence ordering,
+// bounded repair, and completion claims; symptom catalogs remain in the technical references.
+export function renderVerifyAndRecoverReference() {
+    return [
+        '# Outcome',
+        '',
+        'Identify the first failing evidence layer, repair only that layer, rerun it, and report the highest level actually proven. A successful lower layer must never be presented as proof of a higher one.',
+        '',
+        '## Use when',
+        '',
+        '- The user asks to validate, test, diagnose, recover, or establish whether a local or hosted Noodle Seed project works.',
+        '- A command, connector, App, host integration, deployment, or production check is failing or has uncertain evidence.',
+        '',
+        '## Do not use when',
+        '',
+        '- The primary request is to design or build a new product capability; select its build route and use this playbook only if evidence fails.',
+        '- The user asks for a higher-risk external action rather than diagnosis. This route does not grant deployment, publication, live-write, or merge authority.',
+        '',
+        '## Required inputs',
+        '',
+        'Capture the requested evidence level, the exact command or user-visible symptom, sanitized machine output, the environment/target, and the last known passing layer. Do not broaden the goal beyond the level the user asked to prove.',
+        '',
+        '## Workflow',
+        '',
+        'Use this ordered evidence ladder. Start at the last known passing layer or the lowest plausible failure; never jump upward over an unproven dependency:',
+        '',
+        '1. **Compile** — the TypeScript build and authoring import surface are valid.',
+        '2. **Validate** — `noodle validate --json` accepts the Noodle contract.',
+        '3. **Local smoke** — `noodle test --json` starts the local runtime and exercises registration.',
+        '4. **Real API** — a representative safe `noodle tools call` proves connector credentials, transport, observed mapping, and populated data.',
+        '5. **App compliance** — `noodle check --json` and local devtools prove the App contract and intended states.',
+        '6. **Host** — the requested host connects, invokes the expected capability, and renders useful fallback/UI behavior.',
+        '7. **Deploy** — the requested hosted revision and configuration exist and report healthy at the deployment layer.',
+        '8. **Production health** — the live production endpoint and requested user journey are observed on the intended revision.',
+        '',
+        'For the first failing layer:',
+        '',
+        '1. Read the process exit code or status first. If machine JSON exists, parse it before reading human prose or editing files.',
+        '2. For validation envelopes, inspect every `error.errors[]` item and repair the field at its reported `path`. Use `references/agent-contract.md` for the envelope and `references/compile-errors.md` for the named error code.',
+        '3. Form one evidence-backed cause from the observed output. If the two canonical supports do not cover it, select one matching symptom from the router lookup catalog; do not scan every recovery path.',
+        '4. Make the smallest in-scope repair. Do not freeform re-edit adjacent code, change credentials, redeploy, or add product behavior without evidence and authority.',
+        '5. Rerun only the same evidence layer that failed. Once it passes, continue upward only to the user-requested level.',
+        '6. Stop after two evidence-backed repair attempts with the same failure signature, or immediately when the next action requires new authority or external state.',
+        '',
+        '## Verification evidence',
+        '',
+        'Report a compact ledger for every exercised layer: command/action, target, result, and the evidence it establishes. Claim only the highest contiguous passing layer.',
+        '',
+        '- Compile success does not prove runtime behavior.',
+        '- Validation and local smoke do not prove a real API mapping or credential path.',
+        '- Local evidence does not prove hosted or host behavior.',
+        '- Deployment existence does not prove production health or a user journey.',
+        '- Report every requested but unperformed or blocked higher layer as not run, with the reason.',
+        '',
+        '## Recovery paths',
+        '',
+        '- Compile/validation: repair the exact import, schema, or reported path, then rerun that command without freeform changes.',
+        '- Local boot/smoke: use the structured startup error to correct the effective target, config, or entrypoint before retrying.',
+        '- Real API: distinguish authentication, reachability, legitimate empty results, and broken response mappings before changing code.',
+        '- App: repair the cited contract or state in `noodle check --json`, then confirm it in devtools before attempting a host.',
+        '- Host/deployment/production: confirm revision, target, identity, and configuration independently; do not infer one from another.',
+        '- Repeated external failure: preserve passing evidence and report the sanitized failure, required authority or external state, owner, and exact next action.',
+        '',
+        '## Stop conditions',
+        '',
+        '- Stop complete when the user-requested evidence level and every dependency below it pass in the current target.',
+        '- Stop blocked when progress requires credentials, approval, host access, deployment authority, production access, or an external-state change not available in scope.',
+        '- Stop after two evidence-backed repair attempts with the same failure signature at one layer; do not hide repetition behind unrelated edits.',
+        '- Never claim fixed or working without rerunning the failed layer, and never upgrade compile, local, deployment, or stale historical evidence into a stronger claim.',
+    ].join('\n');
+}
+//# sourceMappingURL=skill-verification-ref.js.map

package/node_modules/@noodle-borg/agent-kit/dist/skill-verification-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-verification-ref.js","sourceRoot":"","sources":["../src/skill-verification-ref.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,8FAA8F;AAE9F,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,WAAW;QACX,EAAE;QACF,uMAAuM;QACvM,EAAE;QACF,aAAa;QACb,EAAE;QACF,yHAAyH;QACzH,sHAAsH;QACtH,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,4IAA4I;QAC5I,6JAA6J;QAC7J,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,wOAAwO;QACxO,EAAE;QACF,aAAa;QACb,EAAE;QACF,yJAAyJ;QACzJ,EAAE;QACF,+EAA+E;QAC/E,yEAAyE;QACzE,gGAAgG;QAChG,4IAA4I;QAC5I,8GAA8G;QAC9G,sHAAsH;QACtH,mHAAmH;QACnH,2HAA2H;QAC3H,EAAE;QACF,8BAA8B;QAC9B,EAAE;QACF,8HAA8H;QAC9H,gOAAgO;QAChO,yMAAyM;QACzM,oKAAoK;QACpK,sHAAsH;QACtH,kKAAkK;QAClK,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,sKAAsK;QACtK,EAAE;QACF,oDAAoD;QACpD,kFAAkF;QAClF,0DAA0D;QAC1D,4EAA4E;QAC5E,+FAA+F;QAC/F,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,4HAA4H;QAC5H,8HAA8H;QAC9H,oIAAoI;QACpI,2HAA2H;QAC3H,mIAAmI;QACnI,8JAA8J;QAC9J,EAAE;QACF,oBAAoB;QACpB,EAAE;QACF,kHAAkH;QAClH,wKAAwK;QACxK,+IAA+I;QAC/I,sKAAsK;KACvK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/agent-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodle-borg/agent-kit",
-  "version": "0.33.0",
+  "version": "0.34.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.66.0",
+  "version": "0.68.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",