noodleseed-cli 0.1.14 → 0.1.16

package/node_modules/@noodle-borg/protocol/dist/widget/bootstrap.js

@@ -81,6 +81,18 @@ export const WIDGET_BOOTSTRAP_SOURCE = `
       if (v !== undefined && v !== null) el.textContent = String(v);
     }
   }
+  function collectState(el) {
+    const state = {};
+    const root = (el && el.closest && el.closest('form')) || document;
+    for (const input of root.querySelectorAll('[data-state-name]')) {
+      const name = input.getAttribute('data-state-name');
+      if (!name) continue;
+      if (input.type === 'checkbox') state[name] = Boolean(input.checked);
+      else state[name] = input.value;
+    }
+    globalThis.__noodleState = state;
+    return state;
+  }
   function fromResult(r) {
     if (!r) return null;
     if (r.structuredContent != null) return r.structuredContent;
@@ -106,14 +118,55 @@ export const WIDGET_BOOTSTRAP_SOURCE = `
       el.disabled = false; el.removeAttribute('aria-busy');
     }
   }
+  function status(msg) {
+    let el = document.querySelector('[data-noodle-error]');
+    if (!el) {
+      el = document.createElement('div');
+      el.setAttribute('data-noodle-error', '');
+      el.setAttribute('role', 'status');
+      el.style.marginTop = '8px';
+      el.style.color = 'var(--color-text-danger, #b42318)';
+      document.body.appendChild(el);
+    }
+    el.textContent = msg;
+  }
+  function caps() {
+    try { return app.getHostCapabilities && app.getHostCapabilities(); } catch (e) { return {}; }
+  }
+  function supported(action) {
+    const c = caps() || {};
+    if (action === 'call') return c.tools !== false && typeof app.callServerTool === 'function';
+    if (action === 'open') return c.openLink !== false && typeof app.openLink === 'function';
+    if (action === 'display') return c.displayMode !== false && typeof app.requestDisplayMode === 'function';
+    if (action === 'download') return c.downloadFile !== false && typeof app.downloadFile === 'function';
+    if (action === 'send') return c.message !== false && typeof app.sendMessage === 'function';
+    if (action === 'context') return c.modelContext !== false && typeof app.updateModelContext === 'function';
+    return true;
+  }
+  function applyCapabilities() {
+    for (const el of document.querySelectorAll('[data-action]')) {
+      const action = el.getAttribute('data-action');
+      if (!supported(action)) {
+        el.disabled = true;
+        el.setAttribute('aria-disabled', 'true');
+        el.setAttribute('title', 'Action is not supported by this host');
+      } else if (el.getAttribute('aria-busy') !== 'true') {
+        el.disabled = false;
+        el.removeAttribute('aria-disabled');
+        if (el.getAttribute('title') === 'Action is not supported by this host') el.removeAttribute('title');
+      }
+    }
+  }
 
   // CSP-safe declarative actions (no inline handlers). A [data-action] element drives the host bridge:
   //   send|context → conversation;  call → server tools/call (re-binds the result in place);
   //   open → external link;  display → display mode;  download → host-mediated file export.
   function actOnce(el) {
     const action = el.getAttribute('data-action');
+    if (!supported(action)) { status('Action is not supported by this host.'); return; }
     const text = el.getAttribute('data-action-text') || el.textContent || '';
     const data = globalThis.__noodleData;
+    const actionData = Object.assign({}, data || {}, { result: data || {}, input: globalThis.__noodleInput || {}, state: collectState(el) });
     try {
       if (action === 'send') {
         app.sendMessage({ role: 'user', content: [{ type: 'text', text }] });
@@ -124,11 +177,11 @@ export const WIDGET_BOOTSTRAP_SOURCE = `
         if (!name) return;
         let args = {};
         const raw = el.getAttribute('data-action-args');
-        if (raw) { try { args = resolveArgs(JSON.parse(raw), data); } catch (e) { args = {}; } }
+        if (raw) { try { args = resolveArgs(JSON.parse(raw), actionData); } catch (e) { args = {}; } }
         el.disabled = true; el.setAttribute('aria-busy', 'true');
         Promise.resolve(app.callServerTool({ name, arguments: args }))
           .then((r) => bind(fromResult(r)))
-          .catch(() => {})
+          .catch(() => { status('Action failed. Check the tool result or host permissions.'); })
           .then(() => { el.disabled = false; el.removeAttribute('aria-busy'); });
       } else if (action === 'open') {
         const url = el.getAttribute('data-action-href');
@@ -146,6 +199,9 @@ export const WIDGET_BOOTSTRAP_SOURCE = `
     } catch (e) {}
   }
   function wireActions() {
+    for (const form of document.querySelectorAll('form')) {
+      form.addEventListener('submit', (event) => event.preventDefault());
+    }
     for (const el of document.querySelectorAll('[data-action]')) {
       el.addEventListener('click', () => actOnce(el));
     }
@@ -155,11 +211,12 @@ export const WIDGET_BOOTSTRAP_SOURCE = `
   app.ontoolresult = (p) => bind(fromResult(p));
   app.ontoolinput = (p) => bindInput(p && p.arguments);
   app.ontoolcancelled = () => clearBusy();
-  app.onhostcontextchanged = theme;
+  app.onhostcontextchanged = (p) => { theme(p); applyCapabilities(); };
   app.onteardown = () => { try { clearBusy(); } catch (e) {} return {}; };
   wireActions();
   try { await app.connect(); } catch (e) {}
   try { theme(app.getHostContext && app.getHostContext()); } catch (e) {}
+  try { applyCapabilities(); } catch (e) {}
 })();
 `;
 //# sourceMappingURL=bootstrap.js.map

package/node_modules/@noodle-borg/protocol/dist/widget/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/widget/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6I9C,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/widget/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsM9C,CAAC"}

package/node_modules/@noodle-borg/service/package.json

@@ -32,7 +32,6 @@
     "@noodle-borg/protocol": "0.0.0",
     "@noodle-borg/runtime": "0.0.0",
     "@noodle-borg/transport-http": "0.0.0",
-    "express": "^5.2.1",
     "jose": "^6.2.3"
   },
   "devDependencies": {

package/node_modules/cors/package.json

@@ -23,7 +23,6 @@
   "devDependencies": {
     "after": "0.8.2",
     "eslint": "7.30.0",
-    "express": "4.21.2",
     "mocha": "9.2.2",
     "nyc": "15.1.0",
     "supertest": "6.1.3"

package/node_modules/cross-spawn/node_modules/.bin/node-which

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/which@2.0.2/node_modules/which/node_modules:/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/which@2.0.2/node_modules:/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/which@2.0.2/node_modules/which/node_modules:/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/which@2.0.2/node_modules:/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../../../../../which@2.0.2/node_modules/which/bin/node-which" "$@"
+else
+  exec node  "$basedir/../../../../../which@2.0.2/node_modules/which/bin/node-which" "$@"
+fi
+# cmd-shim-target=/private/tmp/noodle-publish-0.1.16-clean/node_modules/.pnpm/which@2.0.2/node_modules/which/bin/node-which

package/node_modules/which/CHANGELOG.md

@@ -0,0 +1,166 @@
+# Changes
+
+
+## 2.0.2
+
+* Rename bin to `node-which`
+
+## 2.0.1
+
+* generate changelog and publish on version bump
+* enforce 100% test coverage
+* Promise interface
+
+## 2.0.0
+
+* Parallel tests, modern JavaScript, and drop support for node < 8
+
+## 1.3.1
+
+* update deps
+* update travis
+
+## v1.3.0
+
+* Add nothrow option to which.sync
+* update tap
+
+## v1.2.14
+
+* appveyor: drop node 5 and 0.x
+* travis-ci: add node 6, drop 0.x
+
+## v1.2.13
+
+* test: Pass missing option to pass on windows
+* update tap
+* update isexe to 2.0.0
+* neveragain.tech pledge request
+
+## v1.2.12
+
+* Removed unused require
+
+## v1.2.11
+
+* Prevent changelog script from being included in package
+
+## v1.2.10
+
+* Use env.PATH only, not env.Path
+
+## v1.2.9
+
+* fix for paths starting with ../
+* Remove unused `is-absolute` module
+
+## v1.2.8
+
+* bullet items in changelog that contain (but don't start with) #
+
+## v1.2.7
+
+* strip 'update changelog' changelog entries out of changelog
+
+## v1.2.6
+
+* make the changelog bulleted
+
+## v1.2.5
+
+* make a changelog, and keep it up to date
+* don't include tests in package
+* Properly handle relative-path executables
+* appveyor
+* Attach error code to Not Found error
+* Make tests pass on Windows
+
+## v1.2.4
+
+* Fix typo
+
+## v1.2.3
+
+* update isexe, fix regression in pathExt handling
+
+## v1.2.2
+
+* update deps, use isexe module, test windows
+
+## v1.2.1
+
+* Sometimes windows PATH entries are quoted
+* Fixed a bug in the check for group and user mode bits. This bug was introduced during refactoring for supporting strict mode.
+* doc cli
+
+## v1.2.0
+
+* Add support for opt.all and -as cli flags
+* test the bin
+* update travis
+* Allow checking for multiple programs in bin/which
+* tap 2
+
+## v1.1.2
+
+* travis
+* Refactored and fixed undefined error on Windows
+* Support strict mode
+
+## v1.1.1
+
+* test +g exes against secondary groups, if available
+* Use windows exe semantics on cygwin & msys
+* cwd should be first in path on win32, not last
+* Handle lower-case 'env.Path' on Windows
+* Update docs
+* use single-quotes
+
+## v1.1.0
+
+* Add tests, depend on is-absolute
+
+## v1.0.9
+
+* which.js: root is allowed to execute files owned by anyone
+
+## v1.0.8
+
+* don't use graceful-fs
+
+## v1.0.7
+
+* add license to package.json
+
+## v1.0.6
+
+* isc license
+
+## 1.0.5
+
+* Awful typo
+
+## 1.0.4
+
+* Test for path absoluteness properly
+* win: Allow '' as a pathext if cmd has a . in it
+
+## 1.0.3
+
+* Remove references to execPath
+* Make `which.sync()` work on Windows by honoring the PATHEXT variable.
+* Make `isExe()` always return true on Windows.
+* MIT
+
+## 1.0.2
+
+* Only files can be exes
+
+## 1.0.1
+
+* Respect the PATHEXT env for win32 support
+* should 0755 the bin
+* binary
+* guts
+* package
+* 1st

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "noodleseed-cli",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers.",
   "license": "Apache-2.0",
@@ -44,97 +44,44 @@
     "@noodle-borg/runtime",
     "@noodle-borg/service",
     "@noodle-borg/transport-http",
-    "accepts",
     "ajv",
     "ajv-formats",
-    "body-parser",
     "bytes",
-    "call-bind-apply-helpers",
-    "call-bound",
-    "content-disposition",
     "content-type",
-    "cookie",
-    "cookie-signature",
     "cors",
     "cross-spawn",
-    "debug",
     "depd",
-    "dunder-proto",
-    "ee-first",
-    "encodeurl",
-    "es-define-property",
-    "es-errors",
-    "es-object-atoms",
-    "escape-html",
-    "etag",
     "eventsource",
     "eventsource-parser",
-    "express",
-    "express-rate-limit",
     "fast-deep-equal",
     "fast-uri",
-    "finalhandler",
-    "forwarded",
-    "fresh",
-    "function-bind",
-    "get-intrinsic",
-    "get-proto",
-    "gopd",
-    "has-symbols",
-    "hasown",
     "hono",
     "http-errors",
     "iconv-lite",
     "inherits",
-    "ip-address",
     "ipaddr.js",
-    "is-promise",
     "isexe",
     "jose",
     "json-schema-traverse",
     "json-schema-typed",
-    "math-intrinsics",
-    "media-typer",
-    "merge-descriptors",
-    "mime-db",
-    "mime-types",
-    "ms",
-    "negotiator",
     "object-assign",
-    "object-inspect",
-    "on-finished",
-    "once",
-    "parseurl",
     "path-key",
-    "path-to-regexp",
     "pkce-challenge",
-    "proxy-addr",
-    "qs",
     "quickjs-emscripten",
     "quickjs-emscripten-core",
-    "range-parser",
     "raw-body",
     "require-from-string",
-    "router",
     "safer-buffer",
-    "send",
-    "serve-static",
     "setprototypeof",
     "shebang-command",
     "shebang-regex",
-    "side-channel",
-    "side-channel-list",
-    "side-channel-map",
-    "side-channel-weakmap",
     "statuses",
     "toidentifier",
-    "type-is",
     "typescript",
     "undici",
     "unpipe",
     "vary",
     "which",
-    "wrappy",
     "yaml",
     "zod",
     "zod-to-json-schema"
@@ -168,8 +115,6 @@
     "cross-spawn": "7.0.6",
     "eventsource": "3.0.7",
     "eventsource-parser": "3.1.0",
-    "express": "5.2.1",
-    "express-rate-limit": "8.5.2",
     "hono": "4.12.24",
     "ipaddr.js": "2.4.0",
     "jose": "6.2.3",

package/node_modules/accepts/HISTORY.md

@@ -1,250 +0,0 @@
-2.0.0 / 2024-08-31
-==================
-
-  * Drop node <18 support
-  * deps: mime-types@^3.0.0
-  * deps: negotiator@^1.0.0
-
-1.3.8 / 2022-02-02
-==================
-
-  * deps: mime-types@~2.1.34
-    - deps: mime-db@~1.51.0
-  * deps: negotiator@0.6.3
-
-1.3.7 / 2019-04-29
-==================
-
-  * deps: negotiator@0.6.2
-    - Fix sorting charset, encoding, and language with extra parameters
-
-1.3.6 / 2019-04-28
-==================
-
-  * deps: mime-types@~2.1.24
-    - deps: mime-db@~1.40.0
-
-1.3.5 / 2018-02-28
-==================
-
-  * deps: mime-types@~2.1.18
-    - deps: mime-db@~1.33.0
-
-1.3.4 / 2017-08-22
-==================
-
-  * deps: mime-types@~2.1.16
-    - deps: mime-db@~1.29.0
-
-1.3.3 / 2016-05-02
-==================
-
-  * deps: mime-types@~2.1.11
-    - deps: mime-db@~1.23.0
-  * deps: negotiator@0.6.1
-    - perf: improve `Accept` parsing speed
-    - perf: improve `Accept-Charset` parsing speed
-    - perf: improve `Accept-Encoding` parsing speed
-    - perf: improve `Accept-Language` parsing speed
-
-1.3.2 / 2016-03-08
-==================
-
-  * deps: mime-types@~2.1.10
-    - Fix extension of `application/dash+xml`
-    - Update primary extension for `audio/mp4`
-    - deps: mime-db@~1.22.0
-
-1.3.1 / 2016-01-19
-==================
-
-  * deps: mime-types@~2.1.9
-    - deps: mime-db@~1.21.0
-
-1.3.0 / 2015-09-29
-==================
-
-  * deps: mime-types@~2.1.7
-    - deps: mime-db@~1.19.0
-  * deps: negotiator@0.6.0
-    - Fix including type extensions in parameters in `Accept` parsing
-    - Fix parsing `Accept` parameters with quoted equals
-    - Fix parsing `Accept` parameters with quoted semicolons
-    - Lazy-load modules from main entry point
-    - perf: delay type concatenation until needed
-    - perf: enable strict mode
-    - perf: hoist regular expressions
-    - perf: remove closures getting spec properties
-    - perf: remove a closure from media type parsing
-    - perf: remove property delete from media type parsing
-
-1.2.13 / 2015-09-06
-===================
-
-  * deps: mime-types@~2.1.6
-    - deps: mime-db@~1.18.0
-
-1.2.12 / 2015-07-30
-===================
-
-  * deps: mime-types@~2.1.4
-    - deps: mime-db@~1.16.0
-
-1.2.11 / 2015-07-16
-===================
-
-  * deps: mime-types@~2.1.3
-    - deps: mime-db@~1.15.0
-
-1.2.10 / 2015-07-01
-===================
-
-  * deps: mime-types@~2.1.2
-    - deps: mime-db@~1.14.0
-
-1.2.9 / 2015-06-08
-==================
-
-  * deps: mime-types@~2.1.1
-    - perf: fix deopt during mapping
-
-1.2.8 / 2015-06-07
-==================
-
-  * deps: mime-types@~2.1.0
-    - deps: mime-db@~1.13.0
-  * perf: avoid argument reassignment & argument slice
-  * perf: avoid negotiator recursive construction
-  * perf: enable strict mode
-  * perf: remove unnecessary bitwise operator
-
-1.2.7 / 2015-05-10
-==================
-
-  * deps: negotiator@0.5.3
-    - Fix media type parameter matching to be case-insensitive
-
-1.2.6 / 2015-05-07
-==================
-
-  * deps: mime-types@~2.0.11
-    - deps: mime-db@~1.9.1
-  * deps: negotiator@0.5.2
-    - Fix comparing media types with quoted values
-    - Fix splitting media types with quoted commas
-
-1.2.5 / 2015-03-13
-==================
-
-  * deps: mime-types@~2.0.10
-    - deps: mime-db@~1.8.0
-
-1.2.4 / 2015-02-14
-==================
-
-  * Support Node.js 0.6
-  * deps: mime-types@~2.0.9
-    - deps: mime-db@~1.7.0
-  * deps: negotiator@0.5.1
-    - Fix preference sorting to be stable for long acceptable lists
-
-1.2.3 / 2015-01-31
-==================
-
-  * deps: mime-types@~2.0.8
-    - deps: mime-db@~1.6.0
-
-1.2.2 / 2014-12-30
-==================
-
-  * deps: mime-types@~2.0.7
-    - deps: mime-db@~1.5.0
-
-1.2.1 / 2014-12-30
-==================
-
-  * deps: mime-types@~2.0.5
-    - deps: mime-db@~1.3.1
-
-1.2.0 / 2014-12-19
-==================
-
-  * deps: negotiator@0.5.0
-    - Fix list return order when large accepted list
-    - Fix missing identity encoding when q=0 exists
-    - Remove dynamic building of Negotiator class
-
-1.1.4 / 2014-12-10
-==================
-
-  * deps: mime-types@~2.0.4
-    - deps: mime-db@~1.3.0
-
-1.1.3 / 2014-11-09
-==================
-
-  * deps: mime-types@~2.0.3
-    - deps: mime-db@~1.2.0
-
-1.1.2 / 2014-10-14
-==================
-
-  * deps: negotiator@0.4.9
-    - Fix error when media type has invalid parameter
-
-1.1.1 / 2014-09-28
-==================
-
-  * deps: mime-types@~2.0.2
-    - deps: mime-db@~1.1.0
-  * deps: negotiator@0.4.8
-    - Fix all negotiations to be case-insensitive
-    - Stable sort preferences of same quality according to client order
-
-1.1.0 / 2014-09-02
-==================
-
-  * update `mime-types`
-
-1.0.7 / 2014-07-04
-==================
-
-  * Fix wrong type returned from `type` when match after unknown extension
-
-1.0.6 / 2014-06-24
-==================
-
-  * deps: negotiator@0.4.7
-
-1.0.5 / 2014-06-20
-==================
-
- * fix crash when unknown extension given
-
-1.0.4 / 2014-06-19
-==================
-
-  * use `mime-types`
-
-1.0.3 / 2014-06-11
-==================
-
-  * deps: negotiator@0.4.6
-    - Order by specificity when quality is the same
-
-1.0.2 / 2014-05-29
-==================
-
-  * Fix interpretation when header not in request
-  * deps: pin negotiator@0.4.5
-
-1.0.1 / 2014-01-18
-==================
-
-  * Identity encoding isn't always acceptable
-  * deps: negotiator@~0.4.0
-
-1.0.0 / 2013-12-27
-==================
-
-  * Genesis