@noodleseed/agent-kit 0.23.0 → 0.24.0

package/manifest.json

@@ -1,9 +1,9 @@
 {
-  "packageVersion": "0.23.0",
+  "packageVersion": "0.24.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "14feeaa845c5c982e020173b800ecfa825038ac7e5b6d6c242244204f2f478a9",
+      "sha256": "0554c0c35261c583a8024b6762a2540ad6e6627f73d6d22867eae497db7b88d2",
       "agentTarget": "codex"
     },
     {
@@ -13,7 +13,7 @@
     },
     {
       "path": "skills/codex/references/cli-commands.md",
-      "sha256": "3a6df9f9a1311843d929c06698a87695fe8e4197d4c6ca64b2768c2990386557",
+      "sha256": "abcd6d76e1c9e22e3104b04ca2eb436a0ee19ee114648689a7ba43e164007b34",
       "agentTarget": "codex"
     },
     {
@@ -33,7 +33,7 @@
     },
     {
       "path": "skills/codex/references/embedded-assistant.md",
-      "sha256": "3e96c4f322cadbd509957781005060a8526c8e60e610bcb7246edc1e86349bf9",
+      "sha256": "9eebab3471ae21b3b3ed5755f8151b297ed39e1bc08d6bcd7cdc1d75afce2f11",
       "agentTarget": "codex"
     },
     {
@@ -63,7 +63,7 @@
     },
     {
       "path": "skills/codex/references/deploy-and-ops.md",
-      "sha256": "1b359a78e76ad6a71003a3d235685019cd2e1e2bbabd95ec520761d9915a2259",
+      "sha256": "d029cb301ae2d06337f573a356c98106f283a1ef8f5f905fb63fe4d4bdf5c599",
       "agentTarget": "codex"
     },
     {
@@ -253,7 +253,7 @@
     },
     {
       "path": "skills/codex/examples/customer-auth/README.md",
-      "sha256": "ae55e8c5e88216a3a3b1f57084f16e7af0edbf1e5b35ade7be5d5394887347ae",
+      "sha256": "f0955609ac8a880d76e5f18fc4319d6de88e4e0d8623519a12afb111095fc057",
       "agentTarget": "codex"
     },
     {
@@ -268,12 +268,12 @@
     },
     {
       "path": "skills/codex/examples/customer-auth/src/server.ts",
-      "sha256": "549dd7d0ccfb2fff7b0f3ce23194145e7364f5fc337a27e2b6d50b3dd7fb264d",
+      "sha256": "cdd95b74a3e219db2eb9bad9b0c128720d8b8e030d5acd8163e46dd65e79bdf6",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/examples/customer-auth/test/server.test.ts",
-      "sha256": "97e9f00f102ea65f74dd9bca93090eb961af431a8c1285c80028dfae191476d9",
+      "sha256": "bd46358f4abfd797903fc748797e0082faf0d2be906ede0ae5df0cb5f278a2db",
       "agentTarget": "codex"
     },
     {
@@ -378,7 +378,7 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "3f37fbed3225a691bac9b2f03a533d827479f01c6bfb3abf8b76c262af6ae7c2",
+      "sha256": "bc68fdca977ae01b9b0b02b075fbbe8fabf863d875fd539efd5f241390fc57d9",
       "agentTarget": "claude-code"
     },
     {
@@ -388,7 +388,7 @@
     },
     {
       "path": "skills/claude-code/references/cli-commands.md",
-      "sha256": "3a6df9f9a1311843d929c06698a87695fe8e4197d4c6ca64b2768c2990386557",
+      "sha256": "abcd6d76e1c9e22e3104b04ca2eb436a0ee19ee114648689a7ba43e164007b34",
       "agentTarget": "claude-code"
     },
     {
@@ -408,7 +408,7 @@
     },
     {
       "path": "skills/claude-code/references/embedded-assistant.md",
-      "sha256": "3e96c4f322cadbd509957781005060a8526c8e60e610bcb7246edc1e86349bf9",
+      "sha256": "9eebab3471ae21b3b3ed5755f8151b297ed39e1bc08d6bcd7cdc1d75afce2f11",
       "agentTarget": "claude-code"
     },
     {
@@ -438,7 +438,7 @@
     },
     {
       "path": "skills/claude-code/references/deploy-and-ops.md",
-      "sha256": "1b359a78e76ad6a71003a3d235685019cd2e1e2bbabd95ec520761d9915a2259",
+      "sha256": "d029cb301ae2d06337f573a356c98106f283a1ef8f5f905fb63fe4d4bdf5c599",
       "agentTarget": "claude-code"
     },
     {
@@ -628,7 +628,7 @@
     },
     {
       "path": "skills/claude-code/examples/customer-auth/README.md",
-      "sha256": "ae55e8c5e88216a3a3b1f57084f16e7af0edbf1e5b35ade7be5d5394887347ae",
+      "sha256": "f0955609ac8a880d76e5f18fc4319d6de88e4e0d8623519a12afb111095fc057",
       "agentTarget": "claude-code"
     },
     {
@@ -643,12 +643,12 @@
     },
     {
       "path": "skills/claude-code/examples/customer-auth/src/server.ts",
-      "sha256": "549dd7d0ccfb2fff7b0f3ce23194145e7364f5fc337a27e2b6d50b3dd7fb264d",
+      "sha256": "cdd95b74a3e219db2eb9bad9b0c128720d8b8e030d5acd8163e46dd65e79bdf6",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/examples/customer-auth/test/server.test.ts",
-      "sha256": "97e9f00f102ea65f74dd9bca93090eb961af431a8c1285c80028dfae191476d9",
+      "sha256": "bd46358f4abfd797903fc748797e0082faf0d2be906ede0ae5df0cb5f278a2db",
       "agentTarget": "claude-code"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
-version: 0.23.0
+version: 0.24.0
 hash: b4fc528d406e2149
 ---
 

package/skills/claude-code/examples/customer-auth/README.md

@@ -137,9 +137,15 @@ noodle variables set FIREBASE_AUTH_DOMAIN your-firebase-project.firebaseapp.com
 noodle check --target embedded-assistant src/server.ts
 ```
 
-Assistant origins are exact and HTTPS-only. A local embedding application must serve itself over HTTPS and
-declare an origin such as `https://localhost:3000`; `noodle dev` does not provide TLS for that separate web
-application.
+Assistant origins are exact. Production embedding origins must use HTTPS; plain HTTP is accepted only for
+loopback development origins such as `http://localhost:3000`, `http://127.0.0.1:3000`, or
+`http://[::1]:3000`. `noodle dev` serves the MCP project, not that separate embedding application.
+
+The assistant's panel, launcher, status header, composer, and message treatment are configured through the
+bounded `presentation` object in `src/server.ts`. The Atlas-style product treatment is the supported
+customization ceiling. These primitives derive their colors from the shared server `branding` block and
+require no edits to `@noodleseed/assistant`; raw HTML, CSS, inline SVG, renderer class names, and callbacks
+are intentionally not accepted in deployment configuration.
 
 Create the backend credential after deployment. The CLI writes it to a mode-0600 file and never prints the
 secret:

package/skills/claude-code/examples/customer-auth/src/server.ts

@@ -101,6 +101,15 @@ export default server(
         welcomeHeading: 'How can I help with Noodle Seed?',
         composerPlaceholder: 'Ask about your apps…',
       },
+      presentation: {
+        panel: { surface: 'glass', elevation: 'soft', border: 'subtle' },
+        launcher: { icon: 'brand-mark', status: 'session', effect: 'pulse' },
+        header: {
+          mark: 'status',
+          badge: { text: 'Workspace online', tone: 'success', indicator: true },
+        },
+        composer: { leadingIcon: 'brand-mark', shape: 'pill' },
+      },
       suggestedPrompts: ['Show my organizations', 'List the apps in my organization'],
     }),
   },

package/skills/claude-code/examples/customer-auth/test/server.test.ts

@@ -8,9 +8,16 @@ describe('customer-auth example', () => {
     expect(manifest.server.assistant).toMatchObject({
       model: { kind: 'openai-compatible', apiKey: 'ASSISTANT_MODEL_API_KEY' },
       layout: { mode: 'floating' },
+      presentation: {
+        panel: { surface: 'glass', elevation: 'soft', border: 'subtle' },
+        launcher: { icon: 'brand-mark', status: 'session', effect: 'pulse' },
+        header: { mark: 'status', badge: { text: 'Workspace online', tone: 'success' } },
+      },
     });
     expect(
-      manifest.server.assistant?.allowedOrigins.every((origin) => origin.startsWith('https://')),
+      manifest.server.assistant?.allowedOrigins.every(
+        (origin) => origin.startsWith('https://') || origin.startsWith('http://localhost:'),
+      ),
     ).toBe(true);
     expect(manifest.server.branding).toMatchObject({
       name: 'Noodle Seed Assistant',

package/skills/claude-code/references/cli-commands.md

@@ -86,6 +86,7 @@ Every `noodle` command, grouped by area. Local authoring commands (`validate`, `
 | Command | What it does |
 | :-- | :-- |
 | `noodle audit` | Operator governance audit status and event queries. |
+| `noodle billing` | Super-admin preview of the explicit legacy billing-account migration without writing data (`billing migration preview`). |
 | `noodle logs` | View service/deployment logs. |
 | `noodle metrics` | MCP analytics for a deployed server (volume, sessions, latency percentiles, two-tier errors, tools, clients). Agents: `noodle metrics --agent-output` for a health verdict + next actions. |
 | `noodle events` | The per-request MCP event stream with status/tool/client filters; `--session <id>` replays one session in order. Agents: add `--json` and filter (`--status tool_error\|mcp_error`) when debugging. |

package/skills/claude-code/references/deploy-and-ops.md

@@ -59,6 +59,10 @@ Once deployed, register the server as a tool in a host with `noodle connect <hos
 
 Manage runtime config with `noodle secrets` / `noodle variables` (scoped org/app/env). Operators use `noodle logs`, `noodle audit`, and `noodle policy` for logs, governance audit, and policy.
 
+## Billing migration preview
+
+`noodle billing migration preview [--file <mapping.json>]` is a super-admin, read-only inventory and validation command for legacy organizations. It never creates billing accounts, links organizations, or changes entitlements, and there is no apply command. Keep real mapping files outside the repository. The versioned file must classify production apps for every organization: `linkState: "unlinked"` selects a current owner subject under the fixed hosted issuer `https://accounts.google.com`, while `linkState: "linked"` asserts the exact current billing-account ID and link version. Inventory apps with `noodle apps list --archived --json` so archive state is visible. A blocked preview exits 1 even though the JSON response is a successful preview envelope; inspect `data.preview.blockers` and resolve every blocker before a future cutover workflow exists.
+
 ## Agent-safe CLI recipes
 
 Use explicit flags in headless runs so commands never wait for a prompt:
@@ -74,6 +78,7 @@ noodle validate --json
 noodle test --json
 noodle deploy --json
 noodle smoke --json
+noodle billing migration preview --json
 noodle agents doctor --json
 ```
 

package/skills/claude-code/references/embedded-assistant.md

@@ -4,6 +4,7 @@
 
 - Architecture
 - Author and validate
+- Customize the presentation
 - Configure and deploy
 - Access modes and customer auth
 - Create the backend client
@@ -56,6 +57,33 @@ noodle check --target embedded-assistant --json
 
 Use `noodle commands --json` before proposing command flags; do not invent flags from memory.
 
+## Customize the presentation
+
+Keep identity and semantic light/dark colors in the one server-level `branding` block. Put assistant-only structure in the bounded `presentation` object; it accepts curated primitives rather than raw HTML, CSS, SVG, class names, or callbacks:
+
+```ts
+assistant: embeddedAssistant({
+  model, allowedOrigins,
+  layout: { panelWidth: 520, panelMinHeight: 540, panelMaxHeight: 740, edgeOffset: 24 },
+  behavior: { showTimestamps: true },
+  labels: { composerPlaceholder: "Message Acme Support…", sessionReady: "Acme support is online" },
+  presentation: {
+    panel: { surface: "solid", elevation: "dramatic", border: "strong", radius: 20 },
+    launcher: { icon: "chat", size: "lg", status: "session", effect: "pulse" },
+    header: {
+      mark: "status",
+      badge: { text: "Online", tone: "success", indicator: true },
+    },
+    composer: { leadingIcon: "brand-mark", sendIcon: "paper-plane", shape: "rounded" },
+    messages: { userStyle: "accent", assistantStyle: "bubble" },
+  },
+}),
+```
+
+The Atlas-style product treatment above is the maximum deployment-configurable presentation. The bounded surface covers panel treatment, launcher icon/size/session pulse, header mark/status badge, composer controls, and message treatment; it does not accept custom header actions, structured empty-state layouts, footers, spectacle variants/effects, or tenant code.
+
+Omitted fields retain the polished Halo-derived baseline. Precedence is host slots/public `--ns-assistant-*` variables for application-specific integration, then the deployed semantic presentation, then the built-in defaults. Prefer `server.ts` configuration first so every embedding app receives the same assistant after redeploy; use slots only for behavior or content that is genuinely owned by that particular host page.
+
 ## Configure and deploy
 
 Local MCP authoring and tests need no account, but an external browser embed needs an active assistant-enabled deployment before a backend client can be created. Set the model values on the target org/app/env, then deploy:

package/skills/codex/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
-version: 0.23.0
+version: 0.24.0
 hash: cd25535e1d6dbf4f
 ---
 

package/skills/codex/examples/customer-auth/README.md

@@ -137,9 +137,15 @@ noodle variables set FIREBASE_AUTH_DOMAIN your-firebase-project.firebaseapp.com
 noodle check --target embedded-assistant src/server.ts
 ```
 
-Assistant origins are exact and HTTPS-only. A local embedding application must serve itself over HTTPS and
-declare an origin such as `https://localhost:3000`; `noodle dev` does not provide TLS for that separate web
-application.
+Assistant origins are exact. Production embedding origins must use HTTPS; plain HTTP is accepted only for
+loopback development origins such as `http://localhost:3000`, `http://127.0.0.1:3000`, or
+`http://[::1]:3000`. `noodle dev` serves the MCP project, not that separate embedding application.
+
+The assistant's panel, launcher, status header, composer, and message treatment are configured through the
+bounded `presentation` object in `src/server.ts`. The Atlas-style product treatment is the supported
+customization ceiling. These primitives derive their colors from the shared server `branding` block and
+require no edits to `@noodleseed/assistant`; raw HTML, CSS, inline SVG, renderer class names, and callbacks
+are intentionally not accepted in deployment configuration.
 
 Create the backend credential after deployment. The CLI writes it to a mode-0600 file and never prints the
 secret:

package/skills/codex/examples/customer-auth/src/server.ts

@@ -101,6 +101,15 @@ export default server(
         welcomeHeading: 'How can I help with Noodle Seed?',
         composerPlaceholder: 'Ask about your apps…',
       },
+      presentation: {
+        panel: { surface: 'glass', elevation: 'soft', border: 'subtle' },
+        launcher: { icon: 'brand-mark', status: 'session', effect: 'pulse' },
+        header: {
+          mark: 'status',
+          badge: { text: 'Workspace online', tone: 'success', indicator: true },
+        },
+        composer: { leadingIcon: 'brand-mark', shape: 'pill' },
+      },
       suggestedPrompts: ['Show my organizations', 'List the apps in my organization'],
     }),
   },

package/skills/codex/examples/customer-auth/test/server.test.ts

@@ -8,9 +8,16 @@ describe('customer-auth example', () => {
     expect(manifest.server.assistant).toMatchObject({
       model: { kind: 'openai-compatible', apiKey: 'ASSISTANT_MODEL_API_KEY' },
       layout: { mode: 'floating' },
+      presentation: {
+        panel: { surface: 'glass', elevation: 'soft', border: 'subtle' },
+        launcher: { icon: 'brand-mark', status: 'session', effect: 'pulse' },
+        header: { mark: 'status', badge: { text: 'Workspace online', tone: 'success' } },
+      },
     });
     expect(
-      manifest.server.assistant?.allowedOrigins.every((origin) => origin.startsWith('https://')),
+      manifest.server.assistant?.allowedOrigins.every(
+        (origin) => origin.startsWith('https://') || origin.startsWith('http://localhost:'),
+      ),
     ).toBe(true);
     expect(manifest.server.branding).toMatchObject({
       name: 'Noodle Seed Assistant',

package/skills/codex/references/cli-commands.md

@@ -86,6 +86,7 @@ Every `noodle` command, grouped by area. Local authoring commands (`validate`, `
 | Command | What it does |
 | :-- | :-- |
 | `noodle audit` | Operator governance audit status and event queries. |
+| `noodle billing` | Super-admin preview of the explicit legacy billing-account migration without writing data (`billing migration preview`). |
 | `noodle logs` | View service/deployment logs. |
 | `noodle metrics` | MCP analytics for a deployed server (volume, sessions, latency percentiles, two-tier errors, tools, clients). Agents: `noodle metrics --agent-output` for a health verdict + next actions. |
 | `noodle events` | The per-request MCP event stream with status/tool/client filters; `--session <id>` replays one session in order. Agents: add `--json` and filter (`--status tool_error\|mcp_error`) when debugging. |

package/skills/codex/references/deploy-and-ops.md

@@ -59,6 +59,10 @@ Once deployed, register the server as a tool in a host with `noodle connect <hos
 
 Manage runtime config with `noodle secrets` / `noodle variables` (scoped org/app/env). Operators use `noodle logs`, `noodle audit`, and `noodle policy` for logs, governance audit, and policy.
 
+## Billing migration preview
+
+`noodle billing migration preview [--file <mapping.json>]` is a super-admin, read-only inventory and validation command for legacy organizations. It never creates billing accounts, links organizations, or changes entitlements, and there is no apply command. Keep real mapping files outside the repository. The versioned file must classify production apps for every organization: `linkState: "unlinked"` selects a current owner subject under the fixed hosted issuer `https://accounts.google.com`, while `linkState: "linked"` asserts the exact current billing-account ID and link version. Inventory apps with `noodle apps list --archived --json` so archive state is visible. A blocked preview exits 1 even though the JSON response is a successful preview envelope; inspect `data.preview.blockers` and resolve every blocker before a future cutover workflow exists.
+
 ## Agent-safe CLI recipes
 
 Use explicit flags in headless runs so commands never wait for a prompt:
@@ -74,6 +78,7 @@ noodle validate --json
 noodle test --json
 noodle deploy --json
 noodle smoke --json
+noodle billing migration preview --json
 noodle agents doctor --json
 ```
 

package/skills/codex/references/embedded-assistant.md

@@ -4,6 +4,7 @@
 
 - Architecture
 - Author and validate
+- Customize the presentation
 - Configure and deploy
 - Access modes and customer auth
 - Create the backend client
@@ -56,6 +57,33 @@ noodle check --target embedded-assistant --json
 
 Use `noodle commands --json` before proposing command flags; do not invent flags from memory.
 
+## Customize the presentation
+
+Keep identity and semantic light/dark colors in the one server-level `branding` block. Put assistant-only structure in the bounded `presentation` object; it accepts curated primitives rather than raw HTML, CSS, SVG, class names, or callbacks:
+
+```ts
+assistant: embeddedAssistant({
+  model, allowedOrigins,
+  layout: { panelWidth: 520, panelMinHeight: 540, panelMaxHeight: 740, edgeOffset: 24 },
+  behavior: { showTimestamps: true },
+  labels: { composerPlaceholder: "Message Acme Support…", sessionReady: "Acme support is online" },
+  presentation: {
+    panel: { surface: "solid", elevation: "dramatic", border: "strong", radius: 20 },
+    launcher: { icon: "chat", size: "lg", status: "session", effect: "pulse" },
+    header: {
+      mark: "status",
+      badge: { text: "Online", tone: "success", indicator: true },
+    },
+    composer: { leadingIcon: "brand-mark", sendIcon: "paper-plane", shape: "rounded" },
+    messages: { userStyle: "accent", assistantStyle: "bubble" },
+  },
+}),
+```
+
+The Atlas-style product treatment above is the maximum deployment-configurable presentation. The bounded surface covers panel treatment, launcher icon/size/session pulse, header mark/status badge, composer controls, and message treatment; it does not accept custom header actions, structured empty-state layouts, footers, spectacle variants/effects, or tenant code.
+
+Omitted fields retain the polished Halo-derived baseline. Precedence is host slots/public `--ns-assistant-*` variables for application-specific integration, then the deployed semantic presentation, then the built-in defaults. Prefer `server.ts` configuration first so every embedding app receives the same assistant after redeploy; use slots only for behavior or content that is genuinely owned by that particular host page.
+
 ## Configure and deploy
 
 Local MCP authoring and tests need no account, but an external browser embed needs an active assistant-enabled deployment before a backend client can be created. Set the model values on the target org/app/env, then deploy: