@noodleseed/agent-kit 0.21.1 → 0.23.0

package/manifest.json

@@ -1,14 +1,14 @@
 {
-  "packageVersion": "0.21.1",
+  "packageVersion": "0.23.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "4a48b0a357c2dfab02ff191d68a9ebb47ad8396a63f476a0f60ba69cc7b943ad",
+      "sha256": "14feeaa845c5c982e020173b800ecfa825038ac7e5b6d6c242244204f2f478a9",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/sdk-surface.md",
-      "sha256": "0916b1f4df01053c424b46eeb4e8ee0910709d66b956c4d19da77d5abc4b046b",
+      "sha256": "23b901198b1d6a2cb5c140810b2fc4d58b7008c2afb2fdd57a8e2993333a7600",
       "agentTarget": "codex"
     },
     {
@@ -23,17 +23,17 @@
     },
     {
       "path": "skills/codex/references/compile-errors.md",
-      "sha256": "1039e245421e8c128cf1a81cf7a3ce809b0149478917040abebc124ffcb60423",
+      "sha256": "1ed667250f8f14625012bd8e931812c5d80bac323fa2f39a79ec83dc119fc385",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/authoring-workflow.md",
-      "sha256": "b4ca23d7545c8e96dbfee6a4cf2235d4eadfb27302e453fe631031041a17a8c6",
+      "sha256": "3f4767bfe361090e172c7554f1121fe415e618f3a90304498535d177b0c633be",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/embedded-assistant.md",
-      "sha256": "687666010deb32bb605ccc23aeac8778fd1d02c53d7d8e232b6d0b8aeef77668",
+      "sha256": "3e96c4f322cadbd509957781005060a8526c8e60e610bcb7246edc1e86349bf9",
       "agentTarget": "codex"
     },
     {
@@ -48,7 +48,7 @@
     },
     {
       "path": "skills/codex/references/widgets-and-apps.md",
-      "sha256": "69ff229945465793e6c9ae10e5185fc3b5e59b9fb508f03a81ab8d2a12b39efc",
+      "sha256": "7e77eb1520883ad8bd0492fcefae97dfdb0e5bbe9351a7c554d19ee1f7c087cc",
       "agentTarget": "codex"
     },
     {
@@ -78,7 +78,7 @@
     },
     {
       "path": "skills/codex/references/examples.md",
-      "sha256": "bd19dead1f7b1b6610a53694a06569d3c71d149bd6c72c4a1c94c83ded13a34f",
+      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
       "agentTarget": "codex"
     },
     {
@@ -118,7 +118,7 @@
     },
     {
       "path": "skills/codex/examples/acme-bistro/src/server.ts",
-      "sha256": "3f707b40fdf84ab2e8738367a2e0cccaf075a07aa945801ffb3a534f98ee1dcd",
+      "sha256": "35b735b5451499dad7b5bba9f4a0e0e57cc579d1ca8bcdd75317a044ed72c91b",
       "agentTarget": "codex"
     },
     {
@@ -173,7 +173,7 @@
     },
     {
       "path": "skills/codex/examples/acme-discovery/src/server.ts",
-      "sha256": "3a8d1285b375b6e650db95033af0f1cb0c8f5468a6a454e4cbcc8aaae7f6ff9d",
+      "sha256": "0d5a6c50a126b379ffcc67b5089665e079f2aa5f7ddb1c6a5a99d6a6d37669e4",
       "agentTarget": "codex"
     },
     {
@@ -228,7 +228,7 @@
     },
     {
       "path": "skills/codex/examples/acme-tasks/src/server.ts",
-      "sha256": "3876daf95af0e55d245e641b5e91a7cdd40bdccb6a4f0bd50c65a462ac98d37d",
+      "sha256": "769982ba567460af08d79517d6bf259ce4e8f7882cd3525fadbd5b22639e08ff",
       "agentTarget": "codex"
     },
     {
@@ -243,7 +243,7 @@
     },
     {
       "path": "skills/codex/examples/acme-tasks/test/server.test.ts",
-      "sha256": "b170fb0963c21c804949dead018b9ce15deae0ecaa014abab19b4a7a05f42070",
+      "sha256": "1a6c729cceae3cf5ac5fea9081eb61c686a0a72c8a90539e5b0dee4307a4ff81",
       "agentTarget": "codex"
     },
     {
@@ -251,9 +251,34 @@
       "sha256": "c486293ce4a0d38450f61533da17e419ca9fa490ef9577e8404f4fd700797747",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/examples/customer-auth/README.md",
+      "sha256": "ae55e8c5e88216a3a3b1f57084f16e7af0edbf1e5b35ade7be5d5394887347ae",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/noodle.json",
+      "sha256": "15824af8846e8da4f9d14c28216ff95076dfc9f9964fcf127f441d44517d0eea",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/package.json",
+      "sha256": "bfbc1e9aa5f3c7f5449a6ade8ff78876f46ce77b7b867f26bdb556edee3171db",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/src/server.ts",
+      "sha256": "549dd7d0ccfb2fff7b0f3ce23194145e7364f5fc337a27e2b6d50b3dd7fb264d",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/customer-auth/test/server.test.ts",
+      "sha256": "97e9f00f102ea65f74dd9bca93090eb961af431a8c1285c80028dfae191476d9",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/examples/food-ordering/README.md",
-      "sha256": "4d42dfbaf46ee8003ae84b3ef79c9d2a8b716943b85e2e9329fa875007019524",
+      "sha256": "1e8a08868efa70fe79bacc02d27effa5a65fbb5b497e76a7ce1268586ec559dc",
       "agentTarget": "codex"
     },
     {
@@ -268,12 +293,12 @@
     },
     {
       "path": "skills/codex/examples/food-ordering/src/helpers.ts",
-      "sha256": "9d8a510ddfe3892340446dcadd6e40e3f88ea9f5b82ff780fc743771656f3e5b",
+      "sha256": "91f8dec747e4eb050c2e8dc8c22679443f22468c7fe7cf821e97f42eadb629e5",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/examples/food-ordering/src/server.ts",
-      "sha256": "6e8c4c17e6f3a7867232880e1a8d0e45428ebfd3938282d6bec7d8542ae7d712",
+      "sha256": "55942f7b6424ea6019479ab2df98afd0d5c33e154acddaf6638cf78d144da639",
       "agentTarget": "codex"
     },
     {
@@ -283,7 +308,7 @@
     },
     {
       "path": "skills/codex/examples/food-ordering/src/views/ordering-flow.tsx",
-      "sha256": "81f8247c4a6370b5075279ac8cd54ddb669b5995c8fa385f4784720b99cb6203",
+      "sha256": "57690826caf1c7d4cd6da95a82fc8df3be1106f0de75716a3ccbb4dece2a953e",
       "agentTarget": "codex"
     },
     {
@@ -293,7 +318,7 @@
     },
     {
       "path": "skills/codex/examples/food-ordering/test/server.test.ts",
-      "sha256": "e2f2fc0462073ba188c4a70251dafb029d7b3ae585275312c5fa55ba54127fc2",
+      "sha256": "6819457eed88b302d8369a24dc22581066d25c9092dca3a1141366665e246e52",
       "agentTarget": "codex"
     },
     {
@@ -353,12 +378,12 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "23754f0386b77f112249ca8b948b479792895303f0257ab0961cbbb81a857693",
+      "sha256": "3f37fbed3225a691bac9b2f03a533d827479f01c6bfb3abf8b76c262af6ae7c2",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/sdk-surface.md",
-      "sha256": "0916b1f4df01053c424b46eeb4e8ee0910709d66b956c4d19da77d5abc4b046b",
+      "sha256": "23b901198b1d6a2cb5c140810b2fc4d58b7008c2afb2fdd57a8e2993333a7600",
       "agentTarget": "claude-code"
     },
     {
@@ -373,17 +398,17 @@
     },
     {
       "path": "skills/claude-code/references/compile-errors.md",
-      "sha256": "1039e245421e8c128cf1a81cf7a3ce809b0149478917040abebc124ffcb60423",
+      "sha256": "1ed667250f8f14625012bd8e931812c5d80bac323fa2f39a79ec83dc119fc385",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/authoring-workflow.md",
-      "sha256": "b4ca23d7545c8e96dbfee6a4cf2235d4eadfb27302e453fe631031041a17a8c6",
+      "sha256": "3f4767bfe361090e172c7554f1121fe415e618f3a90304498535d177b0c633be",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/embedded-assistant.md",
-      "sha256": "687666010deb32bb605ccc23aeac8778fd1d02c53d7d8e232b6d0b8aeef77668",
+      "sha256": "3e96c4f322cadbd509957781005060a8526c8e60e610bcb7246edc1e86349bf9",
       "agentTarget": "claude-code"
     },
     {
@@ -398,7 +423,7 @@
     },
     {
       "path": "skills/claude-code/references/widgets-and-apps.md",
-      "sha256": "69ff229945465793e6c9ae10e5185fc3b5e59b9fb508f03a81ab8d2a12b39efc",
+      "sha256": "7e77eb1520883ad8bd0492fcefae97dfdb0e5bbe9351a7c554d19ee1f7c087cc",
       "agentTarget": "claude-code"
     },
     {
@@ -428,7 +453,7 @@
     },
     {
       "path": "skills/claude-code/references/examples.md",
-      "sha256": "bd19dead1f7b1b6610a53694a06569d3c71d149bd6c72c4a1c94c83ded13a34f",
+      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
       "agentTarget": "claude-code"
     },
     {
@@ -468,7 +493,7 @@
     },
     {
       "path": "skills/claude-code/examples/acme-bistro/src/server.ts",
-      "sha256": "3f707b40fdf84ab2e8738367a2e0cccaf075a07aa945801ffb3a534f98ee1dcd",
+      "sha256": "35b735b5451499dad7b5bba9f4a0e0e57cc579d1ca8bcdd75317a044ed72c91b",
       "agentTarget": "claude-code"
     },
     {
@@ -523,7 +548,7 @@
     },
     {
       "path": "skills/claude-code/examples/acme-discovery/src/server.ts",
-      "sha256": "3a8d1285b375b6e650db95033af0f1cb0c8f5468a6a454e4cbcc8aaae7f6ff9d",
+      "sha256": "0d5a6c50a126b379ffcc67b5089665e079f2aa5f7ddb1c6a5a99d6a6d37669e4",
       "agentTarget": "claude-code"
     },
     {
@@ -578,7 +603,7 @@
     },
     {
       "path": "skills/claude-code/examples/acme-tasks/src/server.ts",
-      "sha256": "3876daf95af0e55d245e641b5e91a7cdd40bdccb6a4f0bd50c65a462ac98d37d",
+      "sha256": "769982ba567460af08d79517d6bf259ce4e8f7882cd3525fadbd5b22639e08ff",
       "agentTarget": "claude-code"
     },
     {
@@ -593,7 +618,7 @@
     },
     {
       "path": "skills/claude-code/examples/acme-tasks/test/server.test.ts",
-      "sha256": "b170fb0963c21c804949dead018b9ce15deae0ecaa014abab19b4a7a05f42070",
+      "sha256": "1a6c729cceae3cf5ac5fea9081eb61c686a0a72c8a90539e5b0dee4307a4ff81",
       "agentTarget": "claude-code"
     },
     {
@@ -601,9 +626,34 @@
       "sha256": "c486293ce4a0d38450f61533da17e419ca9fa490ef9577e8404f4fd700797747",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/examples/customer-auth/README.md",
+      "sha256": "ae55e8c5e88216a3a3b1f57084f16e7af0edbf1e5b35ade7be5d5394887347ae",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/noodle.json",
+      "sha256": "15824af8846e8da4f9d14c28216ff95076dfc9f9964fcf127f441d44517d0eea",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/package.json",
+      "sha256": "bfbc1e9aa5f3c7f5449a6ade8ff78876f46ce77b7b867f26bdb556edee3171db",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/src/server.ts",
+      "sha256": "549dd7d0ccfb2fff7b0f3ce23194145e7364f5fc337a27e2b6d50b3dd7fb264d",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/customer-auth/test/server.test.ts",
+      "sha256": "97e9f00f102ea65f74dd9bca93090eb961af431a8c1285c80028dfae191476d9",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/examples/food-ordering/README.md",
-      "sha256": "4d42dfbaf46ee8003ae84b3ef79c9d2a8b716943b85e2e9329fa875007019524",
+      "sha256": "1e8a08868efa70fe79bacc02d27effa5a65fbb5b497e76a7ce1268586ec559dc",
       "agentTarget": "claude-code"
     },
     {
@@ -618,12 +668,12 @@
     },
     {
       "path": "skills/claude-code/examples/food-ordering/src/helpers.ts",
-      "sha256": "9d8a510ddfe3892340446dcadd6e40e3f88ea9f5b82ff780fc743771656f3e5b",
+      "sha256": "91f8dec747e4eb050c2e8dc8c22679443f22468c7fe7cf821e97f42eadb629e5",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/examples/food-ordering/src/server.ts",
-      "sha256": "6e8c4c17e6f3a7867232880e1a8d0e45428ebfd3938282d6bec7d8542ae7d712",
+      "sha256": "55942f7b6424ea6019479ab2df98afd0d5c33e154acddaf6638cf78d144da639",
       "agentTarget": "claude-code"
     },
     {
@@ -633,7 +683,7 @@
     },
     {
       "path": "skills/claude-code/examples/food-ordering/src/views/ordering-flow.tsx",
-      "sha256": "81f8247c4a6370b5075279ac8cd54ddb669b5995c8fa385f4784720b99cb6203",
+      "sha256": "57690826caf1c7d4cd6da95a82fc8df3be1106f0de75716a3ccbb4dece2a953e",
       "agentTarget": "claude-code"
     },
     {
@@ -643,7 +693,7 @@
     },
     {
       "path": "skills/claude-code/examples/food-ordering/test/server.test.ts",
-      "sha256": "e2f2fc0462073ba188c4a70251dafb029d7b3ae585275312c5fa55ba54127fc2",
+      "sha256": "6819457eed88b302d8369a24dc22581066d25c9092dca3a1141366665e246e52",
       "agentTarget": "claude-code"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.21.1",
+  "version": "0.23.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
-version: 0.21.1
+version: 0.23.0
 hash: b4fc528d406e2149
 ---
 

package/skills/claude-code/examples/acme-bistro/src/server.ts

@@ -29,7 +29,7 @@ const menuItemOutput = z.object({
 // Tool annotations for host planners: the menu read is read-only; cart edits are local writes; checkout
 // opens an external (payment) link.
 const readOnly = annotations.readOnly();
-const localWrite = annotations.localAction({ destructive: false });
+const localWrite = annotations.localAction({ destructive: false, confirm: false });
 const openLink = annotations.openAction();
 
 export default server(

package/skills/claude-code/examples/acme-discovery/src/server.ts

@@ -83,7 +83,7 @@ const discoverInput = z.object({
 // shortlisting is a local non-destructive write.
 const readOnly = annotations.readOnly();
 const openLink = annotations.openAction();
-const localWrite = annotations.localAction({ destructive: false });
+const localWrite = annotations.localAction({ destructive: false, confirm: false });
 
 const destinationOutput = z.object({
   id: z.string(),

package/skills/claude-code/examples/acme-tasks/src/server.ts

@@ -28,6 +28,8 @@ const priority = z.enum(['high', 'medium', 'low']);
 // non-destructive writes.
 const readOnly = annotations.readOnly();
 const localWrite = annotations.localAction({ destructive: false });
+const confirmedWrite = annotations.localAction({ destructive: false, confirm: true });
+const widgetWrite = annotations.localAction({ destructive: false, confirm: false });
 
 const taskOutput = z.object({
   id: z.string(),
@@ -104,7 +106,7 @@ export default server(
     // Flow 3 — Complete: mark a task done. Model-visible so the model can complete on request.
     tool('complete_task', {
       description: 'Mark an Acme task complete. Pass the task id and its title.',
-      annotations: localWrite,
+      annotations: confirmedWrite,
       input: z.object({
         task: z.string(),
         title: z.string().min(1),
@@ -122,7 +124,7 @@ export default server(
     tool('set_priority', {
       visibility: ['app'],
       description: 'Re-prioritize a task from the list widget.',
-      annotations: localWrite,
+      annotations: widgetWrite,
       input: z.object({
         task: z.string(),
         priority,

package/skills/claude-code/examples/acme-tasks/test/server.test.ts

@@ -19,4 +19,13 @@ describe('acme-tasks example', () => {
     const text = JSON.stringify(await app.toManifest());
     expect(text).toMatch(/"tasks":\[\{"id":"email_vendor".*"priority":"high"/);
   });
+
+  it('opts the conversational completion action into runtime confirmation', async () => {
+    const manifest = await app.toManifest();
+    const completeTask = manifest.tools.find((candidate) => candidate.name === 'complete_task');
+    const addTask = manifest.tools.find((candidate) => candidate.name === 'add_task');
+
+    expect(completeTask?.annotations?.confirm).toBe(true);
+    expect(addTask?.annotations).not.toHaveProperty('confirm');
+  });
 });

package/skills/claude-code/examples/customer-auth/README.md

@@ -0,0 +1,237 @@
+# Customer Auth - NoodleSeed.com Firebase customer identity
+
+This curated example owns the customer/end-user authentication with Firebase bridge capability slot. It is
+the NoodleSeed.com dogfood app for proving that a SaaS app can protect an MCP endpoint with its own customer
+identity provider while still using the generic Noodle Seed authoring API.
+
+It also owns the embedded-assistant showcase: the same authenticated MCP surface can be dropped into the
+SaaS web application as a fully customer-branded assistant with independent light and dark themes. The
+assistant loads the active deployment's instructions and model-visible tools rather than installing a stale
+second skill bundle. Interactive MCP Apps widgets continue to render in supported external hosts; the
+initial embedded surface renders text and native tool confirmations.
+
+The public developer entrypoint is [`src/server.ts`](src/server.ts). It declares `customerAuth.firebase(...)` with
+the NoodleSeed.com Firebase project and Firebase Web App public config. It exposes a deliberately small MCP
+surface for org discovery:
+
+- `list_my_organizations` lists the NoodleSeed.com organizations the signed-in customer belongs to (no
+  arguments — the org set comes from the verified customer session).
+- `list_org_apps` lists apps for one of those organizations through the dev app API.
+
+The two tools chain: `list_my_organizations` surfaces the `org_id`s the customer can act on, and
+`list_org_apps` takes one of those `org_id`s. There is no NoodleSeed-specific SDK helper. The downstream API
+is an ordinary authored HTTP connector.
+
+During MCP OAuth login, Noodle Cloud hosts the Firebase bridge page at
+`https://cloud.noodleseed.dev/oauth/customer/firebase/authorize`. The customer app does not add an
+authorization route. The SaaS operator only configures Firebase Auth to allow the Noodle Cloud origin, and
+Noodle Cloud signs the customer in with Firebase before posting the Firebase ID token back to its own bridge
+callback.
+
+## How delegated customer credentials are used
+
+The example has two declarations that work together:
+
+```ts
+auth: customerAuth.firebase({
+  projectId: variable('FIREBASE_PROJECT_ID'),
+  apiKey: variable('FIREBASE_WEB_API_KEY'),
+  authDomain: variable('FIREBASE_AUTH_DOMAIN'),
+  user: {
+    id: 'sub',
+    email: 'email',
+    name: 'name',
+    tenant: 'firebase.tenant',
+    orgs: 'claims.orgs',
+    roles: 'claims.roles',
+  },
+}),
+```
+
+That protects the MCP endpoint with the SaaS customer's Firebase identity. The connector then opts into
+delegated customer credentials:
+
+```ts
+auth: {
+  kind: 'delegatedSessionCookie',
+  provider: 'firebase',
+  sessionUrl: `${noodleseedApiOrigin}/api/auth/session`,
+  tokenField: 'idToken',
+},
+```
+
+Tool code calls the connector normally:
+
+```ts
+fulfil({ input, connectors }) {
+  const apps = connectors.app_api.listOrgApps({
+    org_id: input.org_id,
+    skip: input.skip,
+    limit: input.limit,
+  });
+
+  return { result: apps.result };
+}
+```
+
+At runtime, Noodle Seed verifies the Firebase customer during MCP OAuth, stores that customer's delegated
+Firebase refresh token in the credential broker, and refreshes a short-lived Firebase ID token only when a
+connector-backed tool calls the NoodleSeed.com API. For this app API, the broker exchanges that ID token at
+the existing Next.js `/api/auth/session` route and sends the resulting session cookie to the API. The MCP
+access token remains a Noodle-issued resource-bound token and is never sent to the downstream API.
+
+## Delegated downstream auth for your own API (token exchange)
+
+The Firebase path above only works for Firebase-session downstreams. When the downstream is **your own
+API** with its own token issuance, use `delegatedTokenExchange` instead
+([ADR 0152](../../docs/decisions/0152-delegated-token-exchange-connector-auth.md)): the platform signs a
+short-lived, JWKS-verifiable assertion of the signed-in user and exchanges it (RFC 8693) at a token
+endpoint you implement, which mints your own user-scoped token — so your API enforces its own per-user
+authorization on every call. It works for identities from `customerAuth.bridge(...)` and from embedded
+assistant sessions, with no per-user OAuth enrollment.
+
+```ts
+auth: {
+  kind: 'delegatedTokenExchange',
+  tokenUrl: 'https://app.example.com/api/assistant/oauth/token', // origin must be in allowedOrigins
+  clientId: variable('EXAMPLE_DELEG_CLIENT_ID'),
+  clientSecret: secret('EXAMPLE_DELEG_CLIENT_SECRET'),
+  scopes: ['time_off'],
+},
+```
+
+Your endpoint authenticates the broker's client credential, verifies the `subject_token` JWT against the
+platform issuer JWKS (claims include the verified `sub`, `email`, `name`, declared session `claims`,
+`tenant`, and `deployment`), mints a short-lived user-scoped token, and returns the standard
+`{ access_token, token_type, expires_in }` response. The exact wire contract and a copyable endpoint
+implementation live in [docs/spec/connectors.md](../../docs/spec/connectors.md) and the Agent Kit
+authoring-workflow reference ("Delegated downstream auth"). `noodle auth doctor` reports each declared
+exchange endpoint.
+
+## Validate
+
+```bash
+noodle auth doctor examples/customer-auth/src/server.ts
+noodle validate examples/customer-auth/src/server.ts
+```
+
+## Run locally
+
+```bash
+noodle dev examples/customer-auth/src/server.ts --app noodleseed-customer-auth
+```
+
+## Configuration
+
+The embedded assistant uses a customer-supplied OpenAI Chat Completions-compatible endpoint. Configure its
+managed values at the Noodle deployment environment; none of these values belongs in the customer web
+application environment, and the API key never reaches the browser:
+
+```bash
+noodle variables set ASSISTANT_MODEL_BASE_URL https://model.example.com/v1 --scope env
+noodle variables set ASSISTANT_MODEL your-model --scope env
+noodle secrets set ASSISTANT_MODEL_API_KEY --scope env
+noodle variables set FIREBASE_PROJECT_ID your-firebase-project --scope env
+noodle variables set FIREBASE_WEB_API_KEY your-firebase-web-api-key --scope env
+noodle variables set FIREBASE_AUTH_DOMAIN your-firebase-project.firebaseapp.com --scope env
+noodle check --target embedded-assistant src/server.ts
+```
+
+Assistant origins are exact and HTTPS-only. A local embedding application must serve itself over HTTPS and
+declare an origin such as `https://localhost:3000`; `noodle dev` does not provide TLS for that separate web
+application.
+
+Create the backend credential after deployment. The CLI writes it to a mode-0600 file and never prints the
+secret:
+
+```bash
+noodle assistant clients create --name web --org noodleseed --app customer-auth --env prod
+```
+
+Only the Noodle service URL, assistant client ID, and assistant client secret belong in the authenticated
+customer backend. The model URL, model name, and model API key remain managed by the Noodle deployment.
+
+The customer's authenticated backend calls `createAssistantSession(...)` from
+`@noodleseed/assistant/server`, passing the already-verified user and browser origin. The browser then uses
+the returned short-lived session through the Web Component or React wrapper:
+
+```bash
+pnpm add @noodleseed/assistant
+```
+
+```tsx
+import { NoodleAssistant } from '@noodleseed/assistant/react';
+
+<NoodleAssistant
+  sessionEndpoint="/api/noodle-assistant/session"
+  theme="auto"
+  onSessionExpired={() => console.info('Assistant session renewed')}
+/>;
+```
+
+`theme="auto"` follows the SaaS application. The server-level `branding` block is inherited by both MCP App
+widgets and the assistant; documented `--ns-assistant-*` semantic CSS variables remain the final integration
+escape hatch. There is no second assistant branding declaration.
+The end-user UI contains only customer branding.
+Text streams progressively. Expired turns re-exchange through the authenticated backend and retry once;
+consent-bound tool confirmations never replay automatically.
+
+The Firebase project ID is required because Firebase ID tokens use the project ID as the token audience and
+issuer suffix. The runtime verifies `aud` against the project ID and `iss` against
+`https://securetoken.google.com/<projectId>`.
+
+The Firebase Web API key and auth domain are public Firebase browser configuration. They let the Noodle
+Cloud-hosted bridge initialize Firebase Auth for this customer project; they are not server secrets. Keep
+them out of source with `variable(...)`, restrict the Firebase key to the expected browser origins and APIs,
+and use `secret(...)` only for credentials that must never reach a browser.
+
+The `noodleseed_app_api` connector currently points at the NoodleSeed.com dev app surface:
+
+```text
+https://dev.noodleseed.com
+```
+
+When the customer app moves from `dev.noodleseed.com` to `app.noodleseed.com`, update the connector's
+`noodleseedApiOrigin` constant to the production API origin that serves the same paths.
+
+The connector uses delegated Firebase customer credentials. During the customer OAuth bridge, Noodle Seed
+verifies the Firebase ID token, stores the Firebase refresh token through the credential broker, and refreshes
+a Firebase ID token when the connector calls the NoodleSeed.com app API. The broker then exchanges that ID
+token for the app's existing Next.js session cookie. There is no shared `NOODLESEED_APP_API_TOKEN` for this
+example.
+
+Firebase Auth must list `cloud.noodleseed.dev` as an authorized domain before browser sign-in works in
+production.
+
+## Deploy customer-protected to Noodle Seed Cloud
+
+```bash
+noodle deploy examples/customer-auth/src/server.ts \
+  --org noodleseed \
+  --app customer-auth \
+  --env prod \
+  --access customers
+```
+
+Endpoint:
+
+```text
+https://cloud.noodleseed.dev/o/noodleseed/customer-auth/mcp
+```
+
+## MCP Primitives
+
+- Tool `list_my_organizations`: calls `GET /api/organizations` and returns the organizations the signed-in
+  customer is a member of. Takes no arguments; the org set is scoped by the verified customer session.
+- Tool `list_org_apps`: calls `GET /api/organizations/{org_id}/apps` for one organization `org_id`.
+
+## Auth boundary
+
+Firebase ID-token verification is handled by Noodle Seed's generic Firebase bridge adapter during OAuth
+issuance. The MCP client receives a Noodle-issued, resource-bound access token marked as a Firebase customer
+identity; raw Firebase tokens and inbound MCP bearer tokens are never forwarded to tools, connectors,
+widgets, or downstream systems.
+
+The connector-backed tools use the credential broker to turn the signed-in Firebase customer session into the
+same session-cookie credential that the existing NoodleSeed.com Next.js API already expects. The inbound MCP
+bearer token is never used as an app API credential.

package/skills/claude-code/examples/customer-auth/noodle.json

@@ -0,0 +1,4 @@
+{
+  "entrypoint": "src/server.ts",
+  "name": "customer-auth"
+}

package/skills/claude-code/examples/customer-auth/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "customer-auth",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "validate": "noodle validate",
+    "dev": "noodle dev",
+    "deploy": "noodle deploy"
+  },
+  "devDependencies": {
+    "@noodleseed/one": "latest",
+    "vitest": "latest"
+  }
+}