@noodleseed/agent-kit 0.26.0 → 0.28.0

package/manifest.json

@@ -1,9 +1,9 @@
 {
-  "packageVersion": "0.26.0",
+  "packageVersion": "0.28.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "49a9f988ee0abf92640cc2bcb27204e6eff3a042378a4bf1a38c93671b72d943",
+      "sha256": "46a6304e7263dc8d466e8a63cbfa8e236e81c12d32ac248d75114ea07696baae",
       "agentTarget": "codex"
     },
     {
@@ -23,7 +23,7 @@
     },
     {
       "path": "skills/codex/references/compile-errors.md",
-      "sha256": "d67bafe1aea7fb38c374a61cbebfa7af11eb5f3bdb8552ddb367918a2d415294",
+      "sha256": "f3e791d3eb7b95641791b9e63efd03852aa517d9b29e535f447fed3080fd61e4",
       "agentTarget": "codex"
     },
     {
@@ -33,7 +33,7 @@
     },
     {
       "path": "skills/codex/references/embedded-assistant.md",
-      "sha256": "3909d5b6e2f556105a332ae8688225104627e6001d3bd05e8dd14d1585d32f0c",
+      "sha256": "16ef1df5ad641f6b36fa9530f920c3588f77f929c4d609fe4aeffd0dc11abc94",
       "agentTarget": "codex"
     },
     {
@@ -48,7 +48,7 @@
     },
     {
       "path": "skills/codex/references/widgets-and-apps.md",
-      "sha256": "3aee540c20e23f73d78b4ab1dc8b7dba9b71cf213c8570431190cf6ef48506e6",
+      "sha256": "921d05b7f7a8044f4b9c4f8816972839eb792499b99f095ff1fbcda89a2b48b3",
       "agentTarget": "codex"
     },
     {
@@ -228,7 +228,7 @@
     },
     {
       "path": "skills/codex/examples/acme-tasks/src/server.ts",
-      "sha256": "769982ba567460af08d79517d6bf259ce4e8f7882cd3525fadbd5b22639e08ff",
+      "sha256": "514cca681ffd5f686364cb2d3b8ab27c9145b1aa1e2bf22d665fa1935ac55ce6",
       "agentTarget": "codex"
     },
     {
@@ -268,7 +268,7 @@
     },
     {
       "path": "skills/codex/examples/customer-auth/src/server.ts",
-      "sha256": "517e7e1b744e7aa7758c70c0f53e79588b9b92641af18acd487e0a9a1d6e5c4a",
+      "sha256": "cbc7647ad0c67860020f9b5a7ebbb1ac8ca817d619184821fbcbf7970291f05a",
       "agentTarget": "codex"
     },
     {
@@ -278,7 +278,7 @@
     },
     {
       "path": "skills/codex/examples/food-ordering/README.md",
-      "sha256": "1e8a08868efa70fe79bacc02d27effa5a65fbb5b497e76a7ce1268586ec559dc",
+      "sha256": "41fdd5b9ca345a5f0daf4633cb53e65f11d1f211f283f6ba902db3366f872809",
       "agentTarget": "codex"
     },
     {
@@ -378,7 +378,7 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "b8ab63da424b86234affee76b69c470d2f68d7fc820d50399014bd5130e36619",
+      "sha256": "0c0dd5641e72b641a87e4814eb6d0b8e46e3c9bb23abfe213763a2a36777f6d5",
       "agentTarget": "claude-code"
     },
     {
@@ -398,7 +398,7 @@
     },
     {
       "path": "skills/claude-code/references/compile-errors.md",
-      "sha256": "d67bafe1aea7fb38c374a61cbebfa7af11eb5f3bdb8552ddb367918a2d415294",
+      "sha256": "f3e791d3eb7b95641791b9e63efd03852aa517d9b29e535f447fed3080fd61e4",
       "agentTarget": "claude-code"
     },
     {
@@ -408,7 +408,7 @@
     },
     {
       "path": "skills/claude-code/references/embedded-assistant.md",
-      "sha256": "3909d5b6e2f556105a332ae8688225104627e6001d3bd05e8dd14d1585d32f0c",
+      "sha256": "16ef1df5ad641f6b36fa9530f920c3588f77f929c4d609fe4aeffd0dc11abc94",
       "agentTarget": "claude-code"
     },
     {
@@ -423,7 +423,7 @@
     },
     {
       "path": "skills/claude-code/references/widgets-and-apps.md",
-      "sha256": "3aee540c20e23f73d78b4ab1dc8b7dba9b71cf213c8570431190cf6ef48506e6",
+      "sha256": "921d05b7f7a8044f4b9c4f8816972839eb792499b99f095ff1fbcda89a2b48b3",
       "agentTarget": "claude-code"
     },
     {
@@ -603,7 +603,7 @@
     },
     {
       "path": "skills/claude-code/examples/acme-tasks/src/server.ts",
-      "sha256": "769982ba567460af08d79517d6bf259ce4e8f7882cd3525fadbd5b22639e08ff",
+      "sha256": "514cca681ffd5f686364cb2d3b8ab27c9145b1aa1e2bf22d665fa1935ac55ce6",
       "agentTarget": "claude-code"
     },
     {
@@ -643,7 +643,7 @@
     },
     {
       "path": "skills/claude-code/examples/customer-auth/src/server.ts",
-      "sha256": "517e7e1b744e7aa7758c70c0f53e79588b9b92641af18acd487e0a9a1d6e5c4a",
+      "sha256": "cbc7647ad0c67860020f9b5a7ebbb1ac8ca817d619184821fbcbf7970291f05a",
       "agentTarget": "claude-code"
     },
     {
@@ -653,7 +653,7 @@
     },
     {
       "path": "skills/claude-code/examples/food-ordering/README.md",
-      "sha256": "1e8a08868efa70fe79bacc02d27effa5a65fbb5b497e76a7ce1268586ec559dc",
+      "sha256": "41fdd5b9ca345a5f0daf4633cb53e65f11d1f211f283f6ba902db3366f872809",
       "agentTarget": "claude-code"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.26.0",
+  "version": "0.28.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
-version: 0.26.0
+version: 0.28.0
 hash: b4fc528d406e2149
 ---
 

package/skills/claude-code/examples/acme-tasks/src/server.ts

@@ -55,6 +55,7 @@ export default server(
   [
     // Flow 2 — Prioritize / Today: render the list so the human triages and the model can speak to it.
     tool('list_today', {
+      title: 'Show today’s tasks',
       description: 'Show today’s Acme Tasks and render the task-list widget.',
       annotations: readOnly,
       input: z.object({ focus: z.string().default('today') }),
@@ -86,11 +87,12 @@ export default server(
     }),
     // Flow 1 — Capture: add a task from natural language ("remind me to email the vendor").
     tool('add_task', {
+      title: 'Add a task',
       description: 'Capture a new Acme task with a title and priority.',
       annotations: localWrite,
       input: z.object({
-        title: z.string(),
-        priority: priority.default('medium'),
+        title: z.string().meta({ title: 'Task' }),
+        priority: priority.default('medium').meta({ title: 'Priority' }),
       }),
       output: z.object({
         status: z.string(),
@@ -105,11 +107,12 @@ export default server(
     }),
     // Flow 3 — Complete: mark a task done. Model-visible so the model can complete on request.
     tool('complete_task', {
-      description: 'Mark an Acme task complete. Pass the task id and its title.',
+      title: 'Complete task',
+      description: 'This will mark the selected task complete for everyone using Acme Tasks.',
       annotations: confirmedWrite,
       input: z.object({
-        task: z.string(),
-        title: z.string().min(1),
+        task: z.string().meta({ title: 'Task ID' }),
+        title: z.string().min(1).meta({ title: 'Task' }),
       }),
       output: z.object({
         status: z.string(),
@@ -122,12 +125,13 @@ export default server(
     }),
     // Flow 2 helper (widget-only): re-prioritize a task from the list widget.
     tool('set_priority', {
+      title: 'Change task priority',
       visibility: ['app'],
       description: 'Re-prioritize a task from the list widget.',
       annotations: widgetWrite,
       input: z.object({
-        task: z.string(),
-        priority,
+        task: z.string().meta({ title: 'Task ID' }),
+        priority: priority.meta({ title: 'New priority' }),
       }),
       output: z.object({
         status: z.string(),

package/skills/claude-code/examples/customer-auth/src/server.ts

@@ -115,11 +115,12 @@ export default server(
   },
   [
     tool('list_org_apps', {
+      title: 'List organization apps',
       description: 'List NoodleSeed.com apps for an organization from the dev app API.',
       input: z.object({
-        org_id: z.string(),
-        skip: z.number().int().min(0).optional(),
-        limit: z.number().int().min(1).max(100).optional(),
+        org_id: z.string().meta({ title: 'Organization' }),
+        skip: z.number().int().min(0).optional().meta({ title: 'Starting item' }),
+        limit: z.number().int().min(1).max(100).optional().meta({ title: 'Maximum results' }),
       }),
       output: z.object({
         result: z.unknown(),
@@ -137,6 +138,7 @@ export default server(
       },
     }),
     tool('list_my_organizations', {
+      title: 'List my organizations',
       description: 'List the NoodleSeed.com organizations the signed-in customer belongs to.',
       contextProvider: true,
       input: z.object({}),

package/skills/claude-code/examples/food-ordering/README.md

@@ -32,6 +32,10 @@ error/retry, and success states must remain readable without nested vertical scr
 
 Like the comprehensive default `noodle init my-app` scaffold, this flagship keeps the server feature-rich
 while making each individual widget view focused; server capability breadth and screen density are separate.
+The compiled initial widget should normally remain under the 1 MiB performance recommendation; Noodle Seed's
+hard ceilings are 10 MiB per compiled widget and 20 MiB across one deployment. Run `noodle check` to see raw
+and gzip-estimated sizes, and keep menu images or large live datasets in assets/resources and app-only tools
+rather than embedding them into the initial HTML bundle.
 
 ## Local Author Loop
 

package/skills/claude-code/references/compile-errors.md

@@ -51,6 +51,8 @@ Run `noodle validate` (add `--json` for the machine-readable envelope, `--fix-pr
 | `duplicate_widget_tool` | A tool is bound to more than one widget; bind each tool to a single widget. |
 | `invalid_widget_binding` | Fix the `data-bind`/binding expression in the widget; it does not resolve against the tool output. |
 | `invalid_widget_state_handle` | Correct the state handle reference; declare it under `server(..., { state: { handles } })` and reference it by its declared name. |
+| `widget_html_too_large` | Reduce the compiled widget below 10 MiB UTF-8 (or raw HTML below 256 KiB) by moving large media and dynamic data into hosted resources or bounded app-only tools. |
+| `widget_html_total_too_large` | Reduce aggregate widget HTML below 20 MiB UTF-8; share or externalize large payloads instead of duplicating them across initial widget resources. |
 | `invalid_asset` | Fix the `asset("./path")` reference; the file must exist and be a supported asset type. |
 | `invalid_capability_requirement` | Correct the declared capability/permission requirement to a supported value. |
 | `state_secret_field` | Remove the secret-shaped field from widget/handle state; secrets must never be stored in state or sent to widgets. |

package/skills/claude-code/references/embedded-assistant.md

@@ -59,7 +59,7 @@ Use `noodle commands --json` before proposing command flags; do not invent flags
 
 ## Customize the presentation
 
-Keep identity and semantic light/dark colors in the one server-level `branding` block. Put assistant-only structure in the bounded `presentation` object; it accepts curated primitives rather than raw HTML, CSS, SVG, class names, or callbacks:
+Keep portable identity and semantic light/dark colors in the one server-level `branding` block. Put assistant-only structure in the bounded `presentation` object; it accepts curated primitives rather than raw HTML, CSS, SVG, class names, or callbacks:
 
 ```ts
 assistant: embeddedAssistant({
@@ -82,7 +82,9 @@ assistant: embeddedAssistant({
 
 The Atlas-style product treatment above is the maximum deployment-configurable presentation. The bounded surface covers panel treatment, launcher icon/size/session pulse, header mark/status badge, composer controls, and message treatment; it does not accept custom header actions, structured empty-state layouts, footers, spectacle variants/effects, or tenant code.
 
-Omitted fields retain the polished Halo-derived baseline. Precedence is host slots/public `--ns-assistant-*` variables for application-specific integration, then the deployed semantic presentation, then the built-in defaults. Prefer `server.ts` configuration first so every embedding app receives the same assistant after redeploy; use slots only for behavior or content that is genuinely owned by that particular host page.
+Omitted fields retain the quiet premium baseline. For exact application-owned color roles, pass the typed React `appearance={{ light: { panel: { surface, text, border }, composer: {...}, confirmation: {...}, primaryButton: {...} }, dark: {...} }}` prop or assign the same object to `element.appearance`. It covers canvas, panel, header, messages, composer, suggestions, confirmation, buttons, launcher, code, and the MCP App frame. Exact colors are preserved and low contrast emits `assistant-appearance-warning`. Precedence is host appearance object, host slots/public `--ns-assistant-*` variables, deployed semantic presentation, then defaults. Prefer `server.ts` configuration first so every embedding app receives the same assistant after redeploy.
+
+Give every business action a portable `tool(..., { title: "Complete task", description: "This will mark the task complete for everyone.", input: z.object({ task: z.string().meta({ title: "Task" }) }) })` title. The standard confirmation uses the tool title/description plus schema field `title`, `description`, and `format`; it shows Confirm and Don't proceed and keeps technical action details secondary. Do not put JSON or implementation names in business-facing copy.
 
 ## Configure and deploy
 

package/skills/claude-code/references/widgets-and-apps.md

@@ -22,6 +22,8 @@ Generated widgets, official examples, and agent-authored MCP Apps must start wit
 
 The default composition rule is: build the smallest useful conversational surface. Inline has one purpose, one primary action, and at most two visible actions. Use progressive disclosure or a later conversational turn for secondary detail; request fullscreen only when the user asks or the task genuinely needs it. Never use nested scrolling. At 280px and wider, the widget must remain one-column, readable, touch-safe, and free of horizontal overflow. Remove secondary chrome before shrinking essential content.
 
+Treat 1 MiB of uncompressed UTF-8 HTML as the recommended initial React-widget budget, not a compatibility wall. Noodle Seed accepts up to 10 MiB per compiled widget and 20 MiB across a deployment; `noodle check` reports raw and gzip-estimated sizes. Keep large media and dynamic datasets in hosted assets/resources or bounded app-only tool responses instead of inflating the initial widget resource.
+
 Every production widget handles loading, empty, partial, stale, error, retry, and success states. Prefill fields from known tool results and choose safe, reversible defaults; preserve the user’s work across rerenders, and never preselect a consequential action. Use public React primitives and branding tokens. Never author against `ns-*`, `nsr-*`, or example-local `--nw-*` classes/tokens; those are implementation details, not alternate design systems.
 
 ## React hook surface

package/skills/codex/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
-version: 0.26.0
+version: 0.28.0
 hash: cd25535e1d6dbf4f
 ---
 

package/skills/codex/examples/acme-tasks/src/server.ts

@@ -55,6 +55,7 @@ export default server(
   [
     // Flow 2 — Prioritize / Today: render the list so the human triages and the model can speak to it.
     tool('list_today', {
+      title: 'Show today’s tasks',
       description: 'Show today’s Acme Tasks and render the task-list widget.',
       annotations: readOnly,
       input: z.object({ focus: z.string().default('today') }),
@@ -86,11 +87,12 @@ export default server(
     }),
     // Flow 1 — Capture: add a task from natural language ("remind me to email the vendor").
     tool('add_task', {
+      title: 'Add a task',
       description: 'Capture a new Acme task with a title and priority.',
       annotations: localWrite,
       input: z.object({
-        title: z.string(),
-        priority: priority.default('medium'),
+        title: z.string().meta({ title: 'Task' }),
+        priority: priority.default('medium').meta({ title: 'Priority' }),
       }),
       output: z.object({
         status: z.string(),
@@ -105,11 +107,12 @@ export default server(
     }),
     // Flow 3 — Complete: mark a task done. Model-visible so the model can complete on request.
     tool('complete_task', {
-      description: 'Mark an Acme task complete. Pass the task id and its title.',
+      title: 'Complete task',
+      description: 'This will mark the selected task complete for everyone using Acme Tasks.',
       annotations: confirmedWrite,
       input: z.object({
-        task: z.string(),
-        title: z.string().min(1),
+        task: z.string().meta({ title: 'Task ID' }),
+        title: z.string().min(1).meta({ title: 'Task' }),
       }),
       output: z.object({
         status: z.string(),
@@ -122,12 +125,13 @@ export default server(
     }),
     // Flow 2 helper (widget-only): re-prioritize a task from the list widget.
     tool('set_priority', {
+      title: 'Change task priority',
       visibility: ['app'],
       description: 'Re-prioritize a task from the list widget.',
       annotations: widgetWrite,
       input: z.object({
-        task: z.string(),
-        priority,
+        task: z.string().meta({ title: 'Task ID' }),
+        priority: priority.meta({ title: 'New priority' }),
       }),
       output: z.object({
         status: z.string(),

package/skills/codex/examples/customer-auth/src/server.ts

@@ -115,11 +115,12 @@ export default server(
   },
   [
     tool('list_org_apps', {
+      title: 'List organization apps',
       description: 'List NoodleSeed.com apps for an organization from the dev app API.',
       input: z.object({
-        org_id: z.string(),
-        skip: z.number().int().min(0).optional(),
-        limit: z.number().int().min(1).max(100).optional(),
+        org_id: z.string().meta({ title: 'Organization' }),
+        skip: z.number().int().min(0).optional().meta({ title: 'Starting item' }),
+        limit: z.number().int().min(1).max(100).optional().meta({ title: 'Maximum results' }),
       }),
       output: z.object({
         result: z.unknown(),
@@ -137,6 +138,7 @@ export default server(
       },
     }),
     tool('list_my_organizations', {
+      title: 'List my organizations',
       description: 'List the NoodleSeed.com organizations the signed-in customer belongs to.',
       contextProvider: true,
       input: z.object({}),

package/skills/codex/examples/food-ordering/README.md

@@ -32,6 +32,10 @@ error/retry, and success states must remain readable without nested vertical scr
 
 Like the comprehensive default `noodle init my-app` scaffold, this flagship keeps the server feature-rich
 while making each individual widget view focused; server capability breadth and screen density are separate.
+The compiled initial widget should normally remain under the 1 MiB performance recommendation; Noodle Seed's
+hard ceilings are 10 MiB per compiled widget and 20 MiB across one deployment. Run `noodle check` to see raw
+and gzip-estimated sizes, and keep menu images or large live datasets in assets/resources and app-only tools
+rather than embedding them into the initial HTML bundle.
 
 ## Local Author Loop
 

package/skills/codex/references/compile-errors.md

@@ -51,6 +51,8 @@ Run `noodle validate` (add `--json` for the machine-readable envelope, `--fix-pr
 | `duplicate_widget_tool` | A tool is bound to more than one widget; bind each tool to a single widget. |
 | `invalid_widget_binding` | Fix the `data-bind`/binding expression in the widget; it does not resolve against the tool output. |
 | `invalid_widget_state_handle` | Correct the state handle reference; declare it under `server(..., { state: { handles } })` and reference it by its declared name. |
+| `widget_html_too_large` | Reduce the compiled widget below 10 MiB UTF-8 (or raw HTML below 256 KiB) by moving large media and dynamic data into hosted resources or bounded app-only tools. |
+| `widget_html_total_too_large` | Reduce aggregate widget HTML below 20 MiB UTF-8; share or externalize large payloads instead of duplicating them across initial widget resources. |
 | `invalid_asset` | Fix the `asset("./path")` reference; the file must exist and be a supported asset type. |
 | `invalid_capability_requirement` | Correct the declared capability/permission requirement to a supported value. |
 | `state_secret_field` | Remove the secret-shaped field from widget/handle state; secrets must never be stored in state or sent to widgets. |

package/skills/codex/references/embedded-assistant.md

@@ -59,7 +59,7 @@ Use `noodle commands --json` before proposing command flags; do not invent flags
 
 ## Customize the presentation
 
-Keep identity and semantic light/dark colors in the one server-level `branding` block. Put assistant-only structure in the bounded `presentation` object; it accepts curated primitives rather than raw HTML, CSS, SVG, class names, or callbacks:
+Keep portable identity and semantic light/dark colors in the one server-level `branding` block. Put assistant-only structure in the bounded `presentation` object; it accepts curated primitives rather than raw HTML, CSS, SVG, class names, or callbacks:
 
 ```ts
 assistant: embeddedAssistant({
@@ -82,7 +82,9 @@ assistant: embeddedAssistant({
 
 The Atlas-style product treatment above is the maximum deployment-configurable presentation. The bounded surface covers panel treatment, launcher icon/size/session pulse, header mark/status badge, composer controls, and message treatment; it does not accept custom header actions, structured empty-state layouts, footers, spectacle variants/effects, or tenant code.
 
-Omitted fields retain the polished Halo-derived baseline. Precedence is host slots/public `--ns-assistant-*` variables for application-specific integration, then the deployed semantic presentation, then the built-in defaults. Prefer `server.ts` configuration first so every embedding app receives the same assistant after redeploy; use slots only for behavior or content that is genuinely owned by that particular host page.
+Omitted fields retain the quiet premium baseline. For exact application-owned color roles, pass the typed React `appearance={{ light: { panel: { surface, text, border }, composer: {...}, confirmation: {...}, primaryButton: {...} }, dark: {...} }}` prop or assign the same object to `element.appearance`. It covers canvas, panel, header, messages, composer, suggestions, confirmation, buttons, launcher, code, and the MCP App frame. Exact colors are preserved and low contrast emits `assistant-appearance-warning`. Precedence is host appearance object, host slots/public `--ns-assistant-*` variables, deployed semantic presentation, then defaults. Prefer `server.ts` configuration first so every embedding app receives the same assistant after redeploy.
+
+Give every business action a portable `tool(..., { title: "Complete task", description: "This will mark the task complete for everyone.", input: z.object({ task: z.string().meta({ title: "Task" }) }) })` title. The standard confirmation uses the tool title/description plus schema field `title`, `description`, and `format`; it shows Confirm and Don't proceed and keeps technical action details secondary. Do not put JSON or implementation names in business-facing copy.
 
 ## Configure and deploy
 

package/skills/codex/references/widgets-and-apps.md

@@ -22,6 +22,8 @@ Generated widgets, official examples, and agent-authored MCP Apps must start wit
 
 The default composition rule is: build the smallest useful conversational surface. Inline has one purpose, one primary action, and at most two visible actions. Use progressive disclosure or a later conversational turn for secondary detail; request fullscreen only when the user asks or the task genuinely needs it. Never use nested scrolling. At 280px and wider, the widget must remain one-column, readable, touch-safe, and free of horizontal overflow. Remove secondary chrome before shrinking essential content.
 
+Treat 1 MiB of uncompressed UTF-8 HTML as the recommended initial React-widget budget, not a compatibility wall. Noodle Seed accepts up to 10 MiB per compiled widget and 20 MiB across a deployment; `noodle check` reports raw and gzip-estimated sizes. Keep large media and dynamic datasets in hosted assets/resources or bounded app-only tool responses instead of inflating the initial widget resource.
+
 Every production widget handles loading, empty, partial, stale, error, retry, and success states. Prefill fields from known tool results and choose safe, reversible defaults; preserve the user’s work across rerenders, and never preselect a consequential action. Use public React primitives and branding tokens. Never author against `ns-*`, `nsr-*`, or example-local `--nw-*` classes/tokens; those are implementation details, not alternate design systems.
 
 ## React hook surface