@noodleseed/agent-kit 0.21.0 → 0.22.0

package/manifest.json

@@ -1,9 +1,9 @@
 {
-  "packageVersion": "0.21.0",
+  "packageVersion": "0.22.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "09469929851e57fae24fc411a173d0e356aabacb3743beed81232d03e2cc44dd",
+      "sha256": "854f9f274724ac7eeb5bdeb933f83b36cbcbeb3643e0de806ecc33fce89da832",
       "agentTarget": "codex"
     },
     {
@@ -28,12 +28,12 @@
     },
     {
       "path": "skills/codex/references/authoring-workflow.md",
-      "sha256": "b4ca23d7545c8e96dbfee6a4cf2235d4eadfb27302e453fe631031041a17a8c6",
+      "sha256": "a2389c7cdbb28a817b8e5b616b625c02fed25fc017845349892c6e1b546a71c0",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/embedded-assistant.md",
-      "sha256": "db1eec6f6eed10b6525efc721b22756ff769b0234358821c15deb45cd61b39fb",
+      "sha256": "e72fbea15298b980ccd876ced45f9e0b17b472859e1f5731283d7677ed9b0f13",
       "agentTarget": "codex"
     },
     {
@@ -78,7 +78,7 @@
     },
     {
       "path": "skills/codex/references/examples.md",
-      "sha256": "bd19dead1f7b1b6610a53694a06569d3c71d149bd6c72c4a1c94c83ded13a34f",
+      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
       "agentTarget": "codex"
     },
     {
@@ -251,6 +251,31 @@
       "sha256": "c486293ce4a0d38450f61533da17e419ca9fa490ef9577e8404f4fd700797747",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/examples/customer-auth/README.md",
+      "sha256": "ae55e8c5e88216a3a3b1f57084f16e7af0edbf1e5b35ade7be5d5394887347ae",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/noodle.json",
+      "sha256": "15824af8846e8da4f9d14c28216ff95076dfc9f9964fcf127f441d44517d0eea",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/package.json",
+      "sha256": "bfbc1e9aa5f3c7f5449a6ade8ff78876f46ce77b7b867f26bdb556edee3171db",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/src/server.ts",
+      "sha256": "549dd7d0ccfb2fff7b0f3ce23194145e7364f5fc337a27e2b6d50b3dd7fb264d",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/test/server.test.ts",
+      "sha256": "97e9f00f102ea65f74dd9bca93090eb961af431a8c1285c80028dfae191476d9",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/examples/food-ordering/README.md",
       "sha256": "4d42dfbaf46ee8003ae84b3ef79c9d2a8b716943b85e2e9329fa875007019524",
@@ -318,7 +343,7 @@
     },
     {
       "path": "skills/codex/examples/hello/src/server.ts",
-      "sha256": "f5ac538d951adc4f18b2c14205f4f710e7920da2ea911444d52adeab8f801521",
+      "sha256": "5b7dd35428128cfe0f506054e80b060d8a87ef157b03d2ce94d304b14df6e521",
       "agentTarget": "codex"
     },
     {
@@ -353,7 +378,7 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "e31b696b0bcf72de525e0c28ceba8c4d44bd2ce5c6522476a0c33ffc8cb6d677",
+      "sha256": "6b0569348845fc943f50fe9a4ba408034316c9f8bf4867734b41bfba494f8310",
       "agentTarget": "claude-code"
     },
     {
@@ -378,12 +403,12 @@
     },
     {
       "path": "skills/claude-code/references/authoring-workflow.md",
-      "sha256": "b4ca23d7545c8e96dbfee6a4cf2235d4eadfb27302e453fe631031041a17a8c6",
+      "sha256": "a2389c7cdbb28a817b8e5b616b625c02fed25fc017845349892c6e1b546a71c0",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/embedded-assistant.md",
-      "sha256": "db1eec6f6eed10b6525efc721b22756ff769b0234358821c15deb45cd61b39fb",
+      "sha256": "e72fbea15298b980ccd876ced45f9e0b17b472859e1f5731283d7677ed9b0f13",
       "agentTarget": "claude-code"
     },
     {
@@ -428,7 +453,7 @@
     },
     {
       "path": "skills/claude-code/references/examples.md",
-      "sha256": "bd19dead1f7b1b6610a53694a06569d3c71d149bd6c72c4a1c94c83ded13a34f",
+      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
       "agentTarget": "claude-code"
     },
     {
@@ -601,6 +626,31 @@
       "sha256": "c486293ce4a0d38450f61533da17e419ca9fa490ef9577e8404f4fd700797747",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/examples/customer-auth/README.md",
+      "sha256": "ae55e8c5e88216a3a3b1f57084f16e7af0edbf1e5b35ade7be5d5394887347ae",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/noodle.json",
+      "sha256": "15824af8846e8da4f9d14c28216ff95076dfc9f9964fcf127f441d44517d0eea",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/package.json",
+      "sha256": "bfbc1e9aa5f3c7f5449a6ade8ff78876f46ce77b7b867f26bdb556edee3171db",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/src/server.ts",
+      "sha256": "549dd7d0ccfb2fff7b0f3ce23194145e7364f5fc337a27e2b6d50b3dd7fb264d",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/test/server.test.ts",
+      "sha256": "97e9f00f102ea65f74dd9bca93090eb961af431a8c1285c80028dfae191476d9",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/examples/food-ordering/README.md",
       "sha256": "4d42dfbaf46ee8003ae84b3ef79c9d2a8b716943b85e2e9329fa875007019524",
@@ -668,7 +718,7 @@
     },
     {
       "path": "skills/claude-code/examples/hello/src/server.ts",
-      "sha256": "f5ac538d951adc4f18b2c14205f4f710e7920da2ea911444d52adeab8f801521",
+      "sha256": "5b7dd35428128cfe0f506054e80b060d8a87ef157b03d2ce94d304b14df6e521",
       "agentTarget": "claude-code"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
-version: 0.21.0
+version: 0.22.0
 hash: b4fc528d406e2149
 ---
 

package/skills/claude-code/examples/customer-auth/README.md

@@ -0,0 +1,237 @@
+# Customer Auth - NoodleSeed.com Firebase customer identity
+
+This curated example owns the customer/end-user authentication with Firebase bridge capability slot. It is
+the NoodleSeed.com dogfood app for proving that a SaaS app can protect an MCP endpoint with its own customer
+identity provider while still using the generic Noodle Seed authoring API.
+
+It also owns the embedded-assistant showcase: the same authenticated MCP surface can be dropped into the
+SaaS web application as a fully customer-branded assistant with independent light and dark themes. The
+assistant loads the active deployment's instructions and model-visible tools rather than installing a stale
+second skill bundle. Interactive MCP Apps widgets continue to render in supported external hosts; the
+initial embedded surface renders text and native tool confirmations.
+
+The public developer entrypoint is [`src/server.ts`](src/server.ts). It declares `customerAuth.firebase(...)` with
+the NoodleSeed.com Firebase project and Firebase Web App public config. It exposes a deliberately small MCP
+surface for org discovery:
+
+- `list_my_organizations` lists the NoodleSeed.com organizations the signed-in customer belongs to (no
+  arguments — the org set comes from the verified customer session).
+- `list_org_apps` lists apps for one of those organizations through the dev app API.
+
+The two tools chain: `list_my_organizations` surfaces the `org_id`s the customer can act on, and
+`list_org_apps` takes one of those `org_id`s. There is no NoodleSeed-specific SDK helper. The downstream API
+is an ordinary authored HTTP connector.
+
+During MCP OAuth login, Noodle Cloud hosts the Firebase bridge page at
+`https://cloud.noodleseed.dev/oauth/customer/firebase/authorize`. The customer app does not add an
+authorization route. The SaaS operator only configures Firebase Auth to allow the Noodle Cloud origin, and
+Noodle Cloud signs the customer in with Firebase before posting the Firebase ID token back to its own bridge
+callback.
+
+## How delegated customer credentials are used
+
+The example has two declarations that work together:
+
+```ts
+auth: customerAuth.firebase({
+  projectId: variable('FIREBASE_PROJECT_ID'),
+  apiKey: variable('FIREBASE_WEB_API_KEY'),
+  authDomain: variable('FIREBASE_AUTH_DOMAIN'),
+  user: {
+    id: 'sub',
+    email: 'email',
+    name: 'name',
+    tenant: 'firebase.tenant',
+    orgs: 'claims.orgs',
+    roles: 'claims.roles',
+  },
+}),
+```
+
+That protects the MCP endpoint with the SaaS customer's Firebase identity. The connector then opts into
+delegated customer credentials:
+
+```ts
+auth: {
+  kind: 'delegatedSessionCookie',
+  provider: 'firebase',
+  sessionUrl: `${noodleseedApiOrigin}/api/auth/session`,
+  tokenField: 'idToken',
+},
+```
+
+Tool code calls the connector normally:
+
+```ts
+fulfil({ input, connectors }) {
+  const apps = connectors.app_api.listOrgApps({
+    org_id: input.org_id,
+    skip: input.skip,
+    limit: input.limit,
+  });
+
+  return { result: apps.result };
+}
+```
+
+At runtime, Noodle Seed verifies the Firebase customer during MCP OAuth, stores that customer's delegated
+Firebase refresh token in the credential broker, and refreshes a short-lived Firebase ID token only when a
+connector-backed tool calls the NoodleSeed.com API. For this app API, the broker exchanges that ID token at
+the existing Next.js `/api/auth/session` route and sends the resulting session cookie to the API. The MCP
+access token remains a Noodle-issued resource-bound token and is never sent to the downstream API.
+
+## Delegated downstream auth for your own API (token exchange)
+
+The Firebase path above only works for Firebase-session downstreams. When the downstream is **your own
+API** with its own token issuance, use `delegatedTokenExchange` instead
+([ADR 0152](../../docs/decisions/0152-delegated-token-exchange-connector-auth.md)): the platform signs a
+short-lived, JWKS-verifiable assertion of the signed-in user and exchanges it (RFC 8693) at a token
+endpoint you implement, which mints your own user-scoped token — so your API enforces its own per-user
+authorization on every call. It works for identities from `customerAuth.bridge(...)` and from embedded
+assistant sessions, with no per-user OAuth enrollment.
+
+```ts
+auth: {
+  kind: 'delegatedTokenExchange',
+  tokenUrl: 'https://app.example.com/api/assistant/oauth/token', // origin must be in allowedOrigins
+  clientId: variable('EXAMPLE_DELEG_CLIENT_ID'),
+  clientSecret: secret('EXAMPLE_DELEG_CLIENT_SECRET'),
+  scopes: ['time_off'],
+},
+```
+
+Your endpoint authenticates the broker's client credential, verifies the `subject_token` JWT against the
+platform issuer JWKS (claims include the verified `sub`, `email`, `name`, declared session `claims`,
+`tenant`, and `deployment`), mints a short-lived user-scoped token, and returns the standard
+`{ access_token, token_type, expires_in }` response. The exact wire contract and a copyable endpoint
+implementation live in [docs/spec/connectors.md](../../docs/spec/connectors.md) and the Agent Kit
+authoring-workflow reference ("Delegated downstream auth"). `noodle auth doctor` reports each declared
+exchange endpoint.
+
+## Validate
+
+```bash
+noodle auth doctor examples/customer-auth/src/server.ts
+noodle validate examples/customer-auth/src/server.ts
+```
+
+## Run locally
+
+```bash
+noodle dev examples/customer-auth/src/server.ts --app noodleseed-customer-auth
+```
+
+## Configuration
+
+The embedded assistant uses a customer-supplied OpenAI Chat Completions-compatible endpoint. Configure its
+managed values at the Noodle deployment environment; none of these values belongs in the customer web
+application environment, and the API key never reaches the browser:
+
+```bash
+noodle variables set ASSISTANT_MODEL_BASE_URL https://model.example.com/v1 --scope env
+noodle variables set ASSISTANT_MODEL your-model --scope env
+noodle secrets set ASSISTANT_MODEL_API_KEY --scope env
+noodle variables set FIREBASE_PROJECT_ID your-firebase-project --scope env
+noodle variables set FIREBASE_WEB_API_KEY your-firebase-web-api-key --scope env
+noodle variables set FIREBASE_AUTH_DOMAIN your-firebase-project.firebaseapp.com --scope env
+noodle check --target embedded-assistant src/server.ts
+```
+
+Assistant origins are exact and HTTPS-only. A local embedding application must serve itself over HTTPS and
+declare an origin such as `https://localhost:3000`; `noodle dev` does not provide TLS for that separate web
+application.
+
+Create the backend credential after deployment. The CLI writes it to a mode-0600 file and never prints the
+secret:
+
+```bash
+noodle assistant clients create --name web --org noodleseed --app customer-auth --env prod
+```
+
+Only the Noodle service URL, assistant client ID, and assistant client secret belong in the authenticated
+customer backend. The model URL, model name, and model API key remain managed by the Noodle deployment.
+
+The customer's authenticated backend calls `createAssistantSession(...)` from
+`@noodleseed/assistant/server`, passing the already-verified user and browser origin. The browser then uses
+the returned short-lived session through the Web Component or React wrapper:
+
+```bash
+pnpm add @noodleseed/assistant
+```
+
+```tsx
+import { NoodleAssistant } from '@noodleseed/assistant/react';
+
+<NoodleAssistant
+  sessionEndpoint="/api/noodle-assistant/session"
+  theme="auto"
+  onSessionExpired={() => console.info('Assistant session renewed')}
+/>;
+```
+
+`theme="auto"` follows the SaaS application. The server-level `branding` block is inherited by both MCP App
+widgets and the assistant; documented `--ns-assistant-*` semantic CSS variables remain the final integration
+escape hatch. There is no second assistant branding declaration.
+The end-user UI contains only customer branding.
+Text streams progressively. Expired turns re-exchange through the authenticated backend and retry once;
+consent-bound tool confirmations never replay automatically.
+
+The Firebase project ID is required because Firebase ID tokens use the project ID as the token audience and
+issuer suffix. The runtime verifies `aud` against the project ID and `iss` against
+`https://securetoken.google.com/<projectId>`.
+
+The Firebase Web API key and auth domain are public Firebase browser configuration. They let the Noodle
+Cloud-hosted bridge initialize Firebase Auth for this customer project; they are not server secrets. Keep
+them out of source with `variable(...)`, restrict the Firebase key to the expected browser origins and APIs,
+and use `secret(...)` only for credentials that must never reach a browser.
+
+The `noodleseed_app_api` connector currently points at the NoodleSeed.com dev app surface:
+
+```text
+https://dev.noodleseed.com
+```
+
+When the customer app moves from `dev.noodleseed.com` to `app.noodleseed.com`, update the connector's
+`noodleseedApiOrigin` constant to the production API origin that serves the same paths.
+
+The connector uses delegated Firebase customer credentials. During the customer OAuth bridge, Noodle Seed
+verifies the Firebase ID token, stores the Firebase refresh token through the credential broker, and refreshes
+a Firebase ID token when the connector calls the NoodleSeed.com app API. The broker then exchanges that ID
+token for the app's existing Next.js session cookie. There is no shared `NOODLESEED_APP_API_TOKEN` for this
+example.
+
+Firebase Auth must list `cloud.noodleseed.dev` as an authorized domain before browser sign-in works in
+production.
+
+## Deploy customer-protected to Noodle Seed Cloud
+
+```bash
+noodle deploy examples/customer-auth/src/server.ts \
+  --org noodleseed \
+  --app customer-auth \
+  --env prod \
+  --access customers
+```
+
+Endpoint:
+
+```text
+https://cloud.noodleseed.dev/o/noodleseed/customer-auth/mcp
+```
+
+## MCP Primitives
+
+- Tool `list_my_organizations`: calls `GET /api/organizations` and returns the organizations the signed-in
+  customer is a member of. Takes no arguments; the org set is scoped by the verified customer session.
+- Tool `list_org_apps`: calls `GET /api/organizations/{org_id}/apps` for one organization `org_id`.
+
+## Auth boundary
+
+Firebase ID-token verification is handled by Noodle Seed's generic Firebase bridge adapter during OAuth
+issuance. The MCP client receives a Noodle-issued, resource-bound access token marked as a Firebase customer
+identity; raw Firebase tokens and inbound MCP bearer tokens are never forwarded to tools, connectors,
+widgets, or downstream systems.
+
+The connector-backed tools use the credential broker to turn the signed-in Firebase customer session into the
+same session-cookie credential that the existing NoodleSeed.com Next.js API already expects. The inbound MCP
+bearer token is never used as an app API credential.

package/skills/claude-code/examples/customer-auth/noodle.json

@@ -0,0 +1,4 @@
+{
+  "entrypoint": "src/server.ts",
+  "name": "customer-auth"
+}

package/skills/claude-code/examples/customer-auth/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "customer-auth",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "validate": "noodle validate",
+    "dev": "noodle dev",
+    "deploy": "noodle deploy"
+  },
+  "devDependencies": {
+    "@noodleseed/one": "latest",
+    "vitest": "latest"
+  }
+}

package/skills/claude-code/examples/customer-auth/src/server.ts

@@ -0,0 +1,145 @@
+import {
+  annotations,
+  connector,
+  customerAuth,
+  embeddedAssistant,
+  openAICompatible,
+  secret,
+  server,
+  tool,
+  variable,
+  z,
+} from '@noodleseed/one';
+
+const noodleseedApiOrigin = 'https://dev.noodleseed.com';
+
+const noodleseedApi = connector('noodleseed_app_api')
+  .version('1.0.0')
+  .http({
+    baseUrl: noodleseedApiOrigin,
+    allowedOrigins: [noodleseedApiOrigin],
+    auth: {
+      kind: 'delegatedSessionCookie',
+      provider: 'firebase',
+      sessionUrl: `${noodleseedApiOrigin}/api/auth/session`,
+      tokenField: 'idToken',
+    },
+    operations: {
+      list_org_apps: {
+        type: 'read',
+        method: 'GET',
+        path: '/api/organizations/${args.org_id}/apps',
+        query: ['skip', 'limit'],
+        input: z.object({
+          org_id: z.string(),
+          skip: z.number().optional(),
+          limit: z.number().optional(),
+        }),
+        output: z.object({ result: z.unknown().optional() }),
+        response: {
+          result: '${response}',
+        },
+      },
+      list_organizations: {
+        type: 'read',
+        method: 'GET',
+        path: '/api/organizations',
+        output: z.object({ organizations: z.array(z.unknown()).optional() }),
+        response: {
+          organizations: '${response.organizations}',
+        },
+      },
+    },
+  });
+
+export default server(
+  'noodleseed_customer_auth',
+  {
+    title: 'NoodleSeed.com Customer Auth',
+    version: '1.0.0',
+    branding: {
+      name: 'Noodle Seed Assistant',
+      accent: '#E85D24',
+      surface: '#FFFFFF',
+      surfaceDark: '#171310',
+      colorScheme: 'auto',
+      theme: {
+        light: { accentText: '#FFFFFF', text: '#1C1714' },
+        dark: { accent: '#FF8A4C', accentText: '#1C100A', text: '#FFF8F2' },
+      },
+    },
+    use: { app_api: noodleseedApi },
+    auth: customerAuth.firebase({
+      projectId: variable('FIREBASE_PROJECT_ID'),
+      apiKey: variable('FIREBASE_WEB_API_KEY'),
+      authDomain: variable('FIREBASE_AUTH_DOMAIN'),
+      user: {
+        id: 'sub',
+        email: 'email',
+        name: 'name',
+        tenant: 'firebase.tenant',
+        orgs: 'claims.orgs',
+        roles: 'claims.roles',
+      },
+    }),
+    instructions:
+      'Customer-authenticated demo. Firebase proves the customer identity, while read-only NoodleSeed.com API calls use broker-managed delegated Firebase customer credentials.',
+    assistant: embeddedAssistant({
+      model: openAICompatible({
+        baseUrl: variable('ASSISTANT_MODEL_BASE_URL'),
+        model: variable('ASSISTANT_MODEL'),
+        apiKey: secret('ASSISTANT_MODEL_API_KEY'),
+      }),
+      // Production origins are exact HTTPS; http://localhost:<port> is allowed for local development.
+      allowedOrigins: [
+        'https://app.noodleseed.com',
+        'https://dev.noodleseed.com',
+        'http://localhost:3000',
+      ],
+      layout: { mode: 'floating', position: 'bottom-right', panelWidth: 420 },
+      labels: {
+        welcomeHeading: 'How can I help with Noodle Seed?',
+        composerPlaceholder: 'Ask about your apps…',
+      },
+      suggestedPrompts: ['Show my organizations', 'List the apps in my organization'],
+    }),
+  },
+  [
+    tool('list_org_apps', {
+      description: 'List NoodleSeed.com apps for an organization from the dev app API.',
+      input: z.object({
+        org_id: z.string(),
+        skip: z.number().int().min(0).optional(),
+        limit: z.number().int().min(1).max(100).optional(),
+      }),
+      output: z.object({
+        result: z.unknown(),
+      }),
+      annotations: annotations.readOnly(),
+      fulfil({ input, connectors }) {
+        const apps = connectors.app_api.listOrgApps({
+          org_id: input.org_id,
+          skip: input.skip,
+          limit: input.limit,
+        });
+        return {
+          result: apps.result,
+        };
+      },
+    }),
+    tool('list_my_organizations', {
+      description: 'List the NoodleSeed.com organizations the signed-in customer belongs to.',
+      input: z.object({}),
+      output: z.object({
+        organizations: z.array(z.unknown()),
+      }),
+      annotations: annotations.readOnly(),
+      fulfil({ connectors }) {
+        const organizations = connectors.app_api.listOrganizations();
+        return {
+          organizations: organizations.organizations,
+        };
+      },
+    }),
+  ],
+);

package/skills/claude-code/examples/customer-auth/test/server.test.ts

@@ -0,0 +1,25 @@
+import { describe, expect, it } from 'vitest';
+import app from '../src/server.js';
+
+describe('customer-auth example', () => {
+  it('exports a customer-authenticated, customer-branded embedded assistant', async () => {
+    expect(typeof app.toManifest).toBe('function');
+    const manifest = await app.toManifest();
+    expect(manifest.server.assistant).toMatchObject({
+      model: { kind: 'openai-compatible', apiKey: 'ASSISTANT_MODEL_API_KEY' },
+      layout: { mode: 'floating' },
+    });
+    expect(
+      manifest.server.assistant?.allowedOrigins.every((origin) => origin.startsWith('https://')),
+    ).toBe(true);
+    expect(manifest.server.branding).toMatchObject({
+      name: 'Noodle Seed Assistant',
+      colorScheme: 'auto',
+    });
+    expect(manifest.server.auth).toMatchObject({
+      projectId: '${env.FIREBASE_PROJECT_ID}',
+      apiKey: '${env.FIREBASE_WEB_API_KEY}',
+      authDomain: '${env.FIREBASE_AUTH_DOMAIN}',
+    });
+  });
+});

package/skills/claude-code/examples/hello/src/server.ts

@@ -1,4 +1,4 @@
-import { server, tool, z } from '@noodleseed/one';
+import { annotations, server, tool, z } from '@noodleseed/one';
 
 export default server(
   'hello',
@@ -22,6 +22,8 @@ export default server(
       output: z.object({
         message: z.string(),
       }),
+      // Read-only, closed-world: assistant surfaces run this without a consent prompt.
+      annotations: annotations.readOnly(),
       fulfil: ({ input }) => {
         return { message: `Hello, ${input.name}!` };
       },