@noodleseed/agent-kit 0.34.0 → 0.36.0

package/manifest.json

@@ -1,14 +1,14 @@
 {
-  "packageVersion": "0.34.0",
+  "packageVersion": "0.36.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "6b00524e90bc7ddc31e615ff1ebb90836aead8503ed711bbd3fab45e9ac115fc",
+      "sha256": "9a355585df5a510e9adc84382de469424b0691917e7ef58bfa1ca953493984db",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/sdk-surface.md",
-      "sha256": "769ac9217397298ec8b25236a008d11a84406a7fab6584ae929e5eacc2054cdc",
+      "sha256": "ff74db13656d8ca9c932225eb841ad76206e41d72253c3897f109c0f9710c5ea",
       "agentTarget": "codex"
     },
     {
@@ -23,27 +23,37 @@
     },
     {
       "path": "skills/codex/references/compile-errors.md",
-      "sha256": "1c9c3e58f1263838484d033ef9aa4a0efd6a1696091fd5c1b41686e1b87ac41a",
+      "sha256": "786dcbb3a06b4f7826726ea59b76515b9907d31c2c3dd4e6f81198ad85ec9184",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/references/build-an-mcp-server.md",
+      "sha256": "05dfa0df90e21a6a403806883e326caefb2dd5acec1c762b891b6e778327fd48",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/authoring-workflow.md",
-      "sha256": "5e64b735675bacdff9e893c03c6a30751844325854540e8952a1092cf57b1b98",
+      "sha256": "9f7c6fda964d2c54aca10141332c95f82dcaae6d53f6ae32f120e9dc8b0224a0",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/embedded-assistant.md",
-      "sha256": "5147837446ccde5937da5deee2a19d54c207858e02e18db919105a9fcbe0dc68",
+      "sha256": "f09563513b34f75b55318838f247bdd5e238fb56d7023ea96c4175bcb8774553",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/connect-an-api.md",
-      "sha256": "b2ab03691502794d0e8b328d81a906636c9a65623abeddd51ce9658a4542fc4b",
+      "sha256": "c267092dc35141adeeddba6e5af4ebff71df2640cbb7b4c2e3b902d2b33a03ae",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/references/build-an-mcp-app.md",
+      "sha256": "71b80632a2f87b63849ff44a86ce03f883aaedf2c52441ea1030f343c160dbd3",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/experience-design.md",
-      "sha256": "40c5d7081f4c81cca5a7a2cfabe2e0fa8818eaabfd0214539765b70b6750d3cb",
+      "sha256": "dff779f01ff24984e1d24459620b2c9807bcfdb98ba8cb29f7467c7eb529ea30",
       "agentTarget": "codex"
     },
     {
@@ -56,29 +66,39 @@
       "sha256": "08e44784a0d838c322d443eae6b35d5c75b4252a0975db835ef504535e25584a",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/references/verify-and-recover.md",
+      "sha256": "22b6a93faa0e20dc874ced541f2d453716892035a36e4278353c1b4150537fe3",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/references/troubleshooting.md",
       "sha256": "238a8d0f4ff8635ed8b0bc63db734634c44ba82e78a3851dc50c85486e1fb942",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/references/inspect-hosted.md",
+      "sha256": "944ea95b9e9e65c7ff9027b47bbc0c21ca1a81806d4126774cf869eb4b206b93",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/references/deploy-and-ops.md",
-      "sha256": "d7e69158ba8e2b92cccea183c55cb42b1be091516a5a4ea9af94c900d285aa15",
+      "sha256": "1f74050942433f8f6a163243bc5a631c286c27612834739798798445e392ea92",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/publishing.md",
-      "sha256": "fb0be4c9c9bc9fd68f4e7ed8e9b7e4c8677c415130d441c28590ba0df6cb5aae",
+      "sha256": "b8e2ef715b51f70154e1210086cccb9e7165d95cd40a374546482679f355cff8",
       "agentTarget": "codex"
     },
     {
-      "path": "skills/codex/references/chatgpt-compliance.md",
-      "sha256": "b0d70446be90a3e76396207ff32e7dc9561f25f43fc313d80cc9d9afc12e9b99",
+      "path": "skills/codex/references/app-directory-compliance.md",
+      "sha256": "77a30c9af09c05502c2245795d49e3487a6b1b0c7a70e26aa0996b7d670dfce8",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/examples.md",
-      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
+      "sha256": "98a1ce82b038000798240b7ca4ca0ce2c43a4e6589fd6b59590afe30c102aa56",
       "agentTarget": "codex"
     },
     {
@@ -88,7 +108,7 @@
     },
     {
       "path": "skills/codex/examples/acme-bistro/README.md",
-      "sha256": "2bcf803ea2407479ddc70644a79ad503335880fd8439ed673b17c8d50e7cb59f",
+      "sha256": "b364c7db64afad1788ad321681f7e41bcc5f1c328829adeb12c78601d1522fbb",
       "agentTarget": "codex"
     },
     {
@@ -258,7 +278,7 @@
     },
     {
       "path": "skills/codex/examples/customer-auth/README.md",
-      "sha256": "ce422b235866a21ab805e42fede54489b896db8171fa080d8465c31705c56eb0",
+      "sha256": "e836885125aa31a5586509858ae5ebfabd23c6d5c931d1abd7cb62521a3fbc49",
       "agentTarget": "codex"
     },
     {
@@ -331,6 +351,36 @@
       "sha256": "d1c579d0987aeb67fc08a351f81c619eb02cadbd664ed77b8bab00573acc768a",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/README.md",
+      "sha256": "eeee6f15435702d24131f7d7e64b05e41fe65cd467bd7b37d97a0c6aa2af46a6",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/noodle.json",
+      "sha256": "9f3c9cb28f0ff26757e022fecdc9bcaa008e77bbccc6949df0cc879af5ebf166",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/package.json",
+      "sha256": "d0fb8fd281954915e105d1949e079ff9919e04204da520fd7b41c6320750e467",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/src/server.ts",
+      "sha256": "2bb185b724ea69b02be94b2694a6864ee878065889973b3b52ad9293eab3e88e",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/test/server.test.ts",
+      "sha256": "b248a6fbda6e7d30aadd316e4e244aff963ca4a31fcd08977675ef6653ad0ff5",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/vitest.config.ts",
+      "sha256": "29acd34abc3452647c912d06b55a27f6600a4fe42b68d94b3ea822d34bfe3842",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/examples/hello/README.md",
       "sha256": "82fbbaa49e6eae064fffb4ea59a45a17cf350075780ff3e386b92b7f72a8201d",
@@ -383,12 +433,12 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "fe1c89cb5087de6dd67a02754a7b7553d42c26501b795ec243659e66c0585c7d",
+      "sha256": "9a355585df5a510e9adc84382de469424b0691917e7ef58bfa1ca953493984db",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/sdk-surface.md",
-      "sha256": "769ac9217397298ec8b25236a008d11a84406a7fab6584ae929e5eacc2054cdc",
+      "sha256": "ff74db13656d8ca9c932225eb841ad76206e41d72253c3897f109c0f9710c5ea",
       "agentTarget": "claude-code"
     },
     {
@@ -403,27 +453,37 @@
     },
     {
       "path": "skills/claude-code/references/compile-errors.md",
-      "sha256": "1c9c3e58f1263838484d033ef9aa4a0efd6a1696091fd5c1b41686e1b87ac41a",
+      "sha256": "786dcbb3a06b4f7826726ea59b76515b9907d31c2c3dd4e6f81198ad85ec9184",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/references/build-an-mcp-server.md",
+      "sha256": "05dfa0df90e21a6a403806883e326caefb2dd5acec1c762b891b6e778327fd48",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/authoring-workflow.md",
-      "sha256": "5e64b735675bacdff9e893c03c6a30751844325854540e8952a1092cf57b1b98",
+      "sha256": "9f7c6fda964d2c54aca10141332c95f82dcaae6d53f6ae32f120e9dc8b0224a0",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/embedded-assistant.md",
-      "sha256": "5147837446ccde5937da5deee2a19d54c207858e02e18db919105a9fcbe0dc68",
+      "sha256": "f09563513b34f75b55318838f247bdd5e238fb56d7023ea96c4175bcb8774553",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/connect-an-api.md",
-      "sha256": "b2ab03691502794d0e8b328d81a906636c9a65623abeddd51ce9658a4542fc4b",
+      "sha256": "c267092dc35141adeeddba6e5af4ebff71df2640cbb7b4c2e3b902d2b33a03ae",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/references/build-an-mcp-app.md",
+      "sha256": "71b80632a2f87b63849ff44a86ce03f883aaedf2c52441ea1030f343c160dbd3",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/experience-design.md",
-      "sha256": "40c5d7081f4c81cca5a7a2cfabe2e0fa8818eaabfd0214539765b70b6750d3cb",
+      "sha256": "dff779f01ff24984e1d24459620b2c9807bcfdb98ba8cb29f7467c7eb529ea30",
       "agentTarget": "claude-code"
     },
     {
@@ -436,29 +496,39 @@
       "sha256": "08e44784a0d838c322d443eae6b35d5c75b4252a0975db835ef504535e25584a",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/references/verify-and-recover.md",
+      "sha256": "22b6a93faa0e20dc874ced541f2d453716892035a36e4278353c1b4150537fe3",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/references/troubleshooting.md",
       "sha256": "238a8d0f4ff8635ed8b0bc63db734634c44ba82e78a3851dc50c85486e1fb942",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/references/inspect-hosted.md",
+      "sha256": "944ea95b9e9e65c7ff9027b47bbc0c21ca1a81806d4126774cf869eb4b206b93",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/references/deploy-and-ops.md",
-      "sha256": "d7e69158ba8e2b92cccea183c55cb42b1be091516a5a4ea9af94c900d285aa15",
+      "sha256": "1f74050942433f8f6a163243bc5a631c286c27612834739798798445e392ea92",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/publishing.md",
-      "sha256": "fb0be4c9c9bc9fd68f4e7ed8e9b7e4c8677c415130d441c28590ba0df6cb5aae",
+      "sha256": "b8e2ef715b51f70154e1210086cccb9e7165d95cd40a374546482679f355cff8",
       "agentTarget": "claude-code"
     },
     {
-      "path": "skills/claude-code/references/chatgpt-compliance.md",
-      "sha256": "b0d70446be90a3e76396207ff32e7dc9561f25f43fc313d80cc9d9afc12e9b99",
+      "path": "skills/claude-code/references/app-directory-compliance.md",
+      "sha256": "77a30c9af09c05502c2245795d49e3487a6b1b0c7a70e26aa0996b7d670dfce8",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/examples.md",
-      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
+      "sha256": "98a1ce82b038000798240b7ca4ca0ce2c43a4e6589fd6b59590afe30c102aa56",
       "agentTarget": "claude-code"
     },
     {
@@ -468,7 +538,7 @@
     },
     {
       "path": "skills/claude-code/examples/acme-bistro/README.md",
-      "sha256": "2bcf803ea2407479ddc70644a79ad503335880fd8439ed673b17c8d50e7cb59f",
+      "sha256": "b364c7db64afad1788ad321681f7e41bcc5f1c328829adeb12c78601d1522fbb",
       "agentTarget": "claude-code"
     },
     {
@@ -638,7 +708,7 @@
     },
     {
       "path": "skills/claude-code/examples/customer-auth/README.md",
-      "sha256": "ce422b235866a21ab805e42fede54489b896db8171fa080d8465c31705c56eb0",
+      "sha256": "e836885125aa31a5586509858ae5ebfabd23c6d5c931d1abd7cb62521a3fbc49",
       "agentTarget": "claude-code"
     },
     {
@@ -711,6 +781,36 @@
       "sha256": "d1c579d0987aeb67fc08a351f81c619eb02cadbd664ed77b8bab00573acc768a",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/README.md",
+      "sha256": "eeee6f15435702d24131f7d7e64b05e41fe65cd467bd7b37d97a0c6aa2af46a6",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/noodle.json",
+      "sha256": "9f3c9cb28f0ff26757e022fecdc9bcaa008e77bbccc6949df0cc879af5ebf166",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/package.json",
+      "sha256": "d0fb8fd281954915e105d1949e079ff9919e04204da520fd7b41c6320750e467",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/src/server.ts",
+      "sha256": "2bb185b724ea69b02be94b2694a6864ee878065889973b3b52ad9293eab3e88e",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/test/server.test.ts",
+      "sha256": "b248a6fbda6e7d30aadd316e4e244aff963ca4a31fcd08977675ef6653ad0ff5",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/vitest.config.ts",
+      "sha256": "29acd34abc3452647c912d06b55a27f6600a4fe42b68d94b3ea822d34bfe3842",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/examples/hello/README.md",
       "sha256": "82fbbaa49e6eae064fffb4ea59a45a17cf350075780ff3e386b92b7f72a8201d",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.34.0",
+  "version": "0.36.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,55 +3,73 @@ name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
 ---
 
-<!-- noodle-skill version:0.34.0 hash:a26379cb2c3369a6 -->
+<!-- noodle-skill version:0.36.0 hash:75dd0f6f85b04858 -->
 
 # Noodle Seed
 
 Build, validate, test, deploy, and operate Noodle Seed MCP servers and apps authored in TypeScript with the `noodle` CLI. Author from the configured entrypoint (usually `server.ts`); keep the authoring surface TypeScript-only.
 
-Use this skill for project-local Noodle Seed authoring in Claude Code; preserve generated/user instruction boundaries.
+Use this skill for project-local Noodle Seed authoring in the active coding host; preserve generated and user instruction boundaries.
+
+If the request is unrelated to the Noodle MCP surface, stop here: follow the project's normal instructions and run no Noodle lifecycle commands.
 
 **Installed-plugin execution.** When this skill is supplied by the Noodle Developer plugin, preserve the managed invocation path established by the plugin bootstrap and invoke every `noodle` command through that host bundle's managed launcher. Do not install or update a global CLI. Noodle guides and operates the lifecycle; you write and test the application source in the user's project.
 
-## Golden path
+## Route the request
+
+Choose exactly one primary route from the user outcome below. Read that primary reference in full, then begin the work. Read supporting references only when the primary workflow sends you there or the named evidence exposes that concern. Stop discovery once the route is selected.
+
+Apply this precedence when wording overlaps: diagnosis of an existing failure takes the verification route; an MCP App/UI outcome takes the App route; external API integration from credentials, a URL, or an API specification takes precedence over generic server building; hosted inspection is the read-only route; hosted mutation requires the explicitly requested deployment route.
+
+Negative routing examples: “Inspect hosted logs/status” → `inspect-hosted` (read-only). “Prepare for deployment” → the applicable build or verification route and stop with a handoff; preparation does not authorize `link`, hosted config, deployment, rollback, host writes, or submission. “Keep this local” → a build or verification route, never a hosted route.
 
-This CLI is agent-native: the cold-agent-path commands speak the `--json` envelope (hosted admin/ops commands are still being normalized). Drive the loop by parsing machine state, not human prose. The full envelope, exit codes, and output modes are in `references/agent-contract.md`.
+| User outcome | Primary reference | Supporting references only when needed | Done when |
+| :--- | :--- | :--- | :--- |
+| Create or extend a headless MCP server whose external API contract is already modeled | `references/build-an-mcp-server.md` | `references/authoring-workflow.md`, `references/sdk-surface.md` | The requested server behavior is locally validated and tested; connector reads have real-output evidence. |
+| Connect a real API when credentials or an API specification are available | `references/connect-an-api.md` | `references/authoring-workflow.md` | A representative live read returns populated, intentionally mapped fields without exposing credentials. |
+| Build or change an MCP App, widget, or host-visible UI | `references/build-an-mcp-app.md` | `references/experience-design.md`, `references/widgets-and-apps.md` | The UI has a stated user benefit, passes the requested checks, and degrades to useful text. |
+| Validate, test, diagnose, or recover a failing local or hosted project | `references/verify-and-recover.md` | `references/agent-contract.md`, `references/compile-errors.md` | The failing evidence layer is repaired and rerun, or the remaining blocker and exact next action are reported. |
+| Inspect or diagnose hosted status, logs, metrics, events, or deployment metadata read-only | `references/inspect-hosted.md` | None | The requested hosted evidence is reported without changing target, configuration, access, or deployment state. |
+| Deploy, configure, connect with writes, change access, or roll back a hosted MCP service when explicitly requested | `references/deploy-and-ops.md` | `references/cli-commands.md` | The requested hosted state is evidenced without claiming unperformed host or production checks. |
+| Embed a Noodle assistant in an existing SaaS or web application | `references/embedded-assistant.md` | `references/authoring-workflow.md` | The requested embed boundary works with verified identity and credential separation at the tested level. |
+| Prepare or submit an integration to a host directory | `references/publishing.md` | `references/app-directory-compliance.md` | The requested submission evidence is complete and any host-review uncertainty is explicit. |
+| Report a Noodle Seed bug, documentation gap, or product improvement | `references/feedback.md` | None | A sanitized command is shown to the user and is submitted only after explicit approval. |
 
-**Discover the skill first.** Before authoring anything, read this whole `SKILL.md` and scan the `## References` index below (including `references/examples.md`) so you build from the shipped patterns — connectors that return live lists, secret scoping, widgets, testing — instead of rediscovering them. Open the references your task touches in full.
+## Common machine loop
 
-Before authoring, design the experience — the funnel/handoff boundary, tools, widgets, display modes, and grounding — see `references/experience-design.md`. Then run the loop:
+The cold-agent commands speak the `--json` envelope. Parse machine state instead of scraping human prose; `references/agent-contract.md` owns the envelope and exit codes.
 
-1. **Discover** — `noodle commands --json`: every command, subcommand, flag, and exit code (don't read source).
-2. **Author** — edit `src/server.ts` (the configured entrypoint); follow the capability recipe in `references/sdk-surface.md` and `references/examples.md`.
-3. **Validate** — `noodle validate --json`; on failure `{ok:false,error:{code,message,fix,next,errors:[{code,path,message}]}}` — the per-field detail is in `error.errors[]`.
-4. **Repair** — fix each `error.errors[]` entry at its `path`, then re-run `noodle validate --json`; `noodle validate --fix-prompt` emits ready-to-apply repair prose. Never freeform re-edit (see `references/compile-errors.md`).
-5. **Smoke** — `noodle test --json`: local compile plus a loopback MCP smoke.
-6. **Prove real output** — `validate`/`test` prove a connector tool *compiles and registers*, not that its response mapping returns data. Set the secret on the same effective local target with `noodle secrets set <NAME> --runtime local --from-env <ENV>` (see `references/connect-an-api.md`), then run a live read — `noodle tools call <read_tool> --args '{...}'` executes the connector against the real API in-process — and confirm the mapped fields are populated, not `undefined`, before trusting it. Only run a live write if it is safe/approved.
-7. **Apps/widgets/embed** — `noodle check --json` (add `--target chatgpt|claude|embedded-assistant`), then `noodle devtools`; use `references/widgets-and-apps.md` for MCP Apps and `references/embedded-assistant.md` for a SaaS embed.
-8. **Deploy** — `noodle deploy`; auth fails clean with `error.next` = `noodle login` (see `references/deploy-and-ops.md`).
-9. **Wire into a host** — `noodle connect <codex|claude-code|chatgpt>` (prove it in a real host per `references/test-in-hosts.md`; debug symptoms with `references/troubleshooting.md`).
-10. **Health** — `noodle metrics --agent-output`: a health verdict plus the exact next command per attention item.
+1. **Discover** — use `noodle commands --json` when the required command or flags are uncertain; don't read CLI source.
+2. **Author** — for build routes, edit the configured TypeScript entrypoint, usually `src/server.ts`.
+3. **Validate** — run `noodle validate --json`; repair each `error.errors[]` item at its `path`, then re-run `noodle validate --json`.
+4. **Smoke** — run `noodle test --json` after validation passes.
+5. **Prove the requested level** — connector routes require a safe live read with `noodle tools call`; App routes require `noodle check --json` and `noodle devtools`; hosted or host actions run only when the selected route and current user request authorize that exact level.
+6. **Report evidence** — claim only the highest level actually exercised and name anything not run.
 
-## References
+## Reference lookup catalog
 
-Scan all of these during discovery; open in full the ones your task touches:
+This is a lookup catalog, not a discovery checklist. Return here only when the selected primary route names a missing technical detail:
 
 - `references/agent-contract.md` — the `--json` envelope, exit codes, and the three output modes.
 - `references/sdk-surface.md` — what to import from `@noodleseed/one` and which builder to use.
 - `references/cli-commands.md` — every `noodle` command, grouped by area.
 - `references/compile-errors.md` — fix `noodle validate` errors by code.
-- `references/authoring-workflow.md` — input paths (scrape / OpenAPI import / user interview), the fit check, the validate→test→dev repair loop, connectors, and secrets/variables.
-- `references/embedded-assistant.md` — HTTPS origins, managed model config, deploy-before-client sequencing, backend session exchange, browser mounting, and credential boundaries.
-- `references/connect-an-api.md` — given an API key: secure it, probe the live API to learn the real shape, model the connector, and prove real output before building.
-- `references/experience-design.md` — design the app experience before authoring: funnel/handoff boundary, grounding, two-users, display modes, and the wireframe/UX spec.
-- `references/widgets-and-apps.md` — MCP Apps, React `view` widgets, the widget hook surface, output shaping, and CSP.
-- `references/test-in-hosts.md` — connect and test in ChatGPT (developer mode), Claude, agent hosts, and MCP Inspector.
-- `references/troubleshooting.md` — runtime symptom → cause → fix, in-host and hosted.
-- `references/deploy-and-ops.md` — login/link/deploy/status/access and hosted operations.
-- `references/publishing.md` — submit to the ChatGPT apps directory and Claude connectors directory.
-- `references/chatgpt-compliance.md` — the OpenAI Apps SDK pre-submission checklist (beyond the metadata gate): conversational value, helpful-UI-only, in-chat completion, UI guidelines, domain guardrails, privacy.
+- `references/build-an-mcp-server.md` — outcome-first workflow for a focused, tested, model-facing MCP product.
+- `references/authoring-workflow.md` — input paths, fit checks, connector patterns, authentication, tool design, testing, and managed config.
+- `references/embedded-assistant.md` — HTTPS origins, managed model config, deploy sequencing, session exchange, browser mounting, and credential boundaries.
+- `references/connect-an-api.md` — secure credentials, probe the live API, model the observed shape, and prove real output.
+- `references/build-an-mcp-app.md` — product-fit, output-boundary, fallback, and evidence workflow for an MCP App.
+- `references/experience-design.md` — design an app experience: funnel boundary, grounding, two users, display modes, and wireframe.
+- `references/widgets-and-apps.md` — MCP Apps, typed views, widget hooks, output shaping, and CSP.
+- `references/test-in-hosts.md` — connect and test in real MCP hosts and protocol inspection clients.
+- `references/verify-and-recover.md` — ordered evidence ladder, bounded repair, and honest completion claims.
+- `references/troubleshooting.md` — runtime symptom to cause and fix, locally and hosted.
+- `references/inspect-hosted.md` — read-only hosted status, logs, metrics, events, and deployment diagnosis.
+- `references/deploy-and-ops.md` — explicitly authorized hosted link, config, deploy, access, connection writes, and rollback.
+- `references/publishing.md` — prepare and submit to app and connector directories.
+- `references/app-directory-compliance.md` — the pre-submission experience and policy checklist.
 - `references/examples.md` — flagship example index and a canonical `server.ts`.
-- `references/feedback.md` — draft sanitized product feedback, show the user the exact command, and submit only after explicit user approval.
+- `references/feedback.md` — draft sanitized product feedback and submit only with user approval.
 
 ## Product feedback
 
@@ -62,6 +80,7 @@ When you discover a bug, missing capability, misleading doc, or improvement idea
 - Keep secrets, bearer tokens, refresh tokens, static access keys, `.env.noodle` values, and `~/.noodle/config.json` out of prompts, logs, docs, tests, and generated files.
 - Do not hand-author manifest JSON/YAML, runtime artifacts, connector IR, or hosted asset metadata.
 - Do not add static data-plane credential paths; hosted access is identity-based.
+- Hosted mutation is opt-in. Run `link`, hosted secret/variable/config/access changes, deploy, rollback, host configuration writes, or directory submission only when the current user request explicitly authorizes the exact mutation and target. An inspect, prepare, validate, test, or local-only request grants no such authority; stop and ask before crossing that boundary.
 
 ## Customization
 

package/skills/claude-code/examples/acme-bistro/README.md

@@ -9,7 +9,7 @@ the app). It pairs a view-backed `tool` menu/cart with app-only `tool` cart help
 Capability slot: **end-to-end in-chat transaction + payment-only handoff**, plus a worked **design-first**
 deliverable set (`design/` — a UX Document, a single-file HTML wireframe with an embedded OpenAI Apps SDK
 compliance audit, and a Recommended API contract). It sets the quality bar the `noodle-seed` skill's
-`references/experience-design.md` and `references/chatgpt-compliance.md` teach. (Distinct from
+`references/experience-design.md` and `references/app-directory-compliance.md` teach. (Distinct from
 `food-ordering`, which is the broad widget-composition proof; this one owns the design-first end-to-end +
 compliance exemplar.)
 

package/skills/claude-code/examples/customer-auth/README.md

@@ -29,6 +29,13 @@ callback.
 
 ## How delegated customer credentials are used
 
+This flagship uses the legacy Firebase provider bridge because it is runnable today. That is distinct from
+Core-v2 account-selecting connector aliases: those declare catalog `credentialProfiles` and bind each alias
+with `bind(connector, { profile, connection })`. Hosted bound `managedSecret(...)` connections are runnable;
+bound `externalExchange()` and `clientCredentials(...)` currently compile as portable metadata but fail
+closed before secret or network access until their provider slice lands. Do not replace this example's
+working delegated-session-cookie path with either unsupported bound exchange source.
+
 The example has two declarations that work together:
 
 ```ts

package/skills/claude-code/examples/gmail-multi-account/README.md

@@ -0,0 +1,46 @@
+# Gmail multi-account automation
+
+**Owns:** The flagship proof that one reusable connector can be bound to multiple independently
+authenticated accounts inside one MCP server.
+
+This fictional example binds `gmailConnector()` twice through separate `externalExchange()` logical
+connections. Public tools always accept `accounts: [...]`; reads accept either account or the canonical
+personal-then-work pair, while mutations accept exactly one account and require runtime confirmation.
+
+Capability slot: **reusable connector + independently authenticated multi-account bindings**. It is distinct
+from `customer-auth`, which owns authentication of the MCP caller rather than downstream connector accounts.
+
+The labels `personal@example.com` and `work@example.com` are static display labels, not provider identities.
+The deployment-owned credential provider maps each logical connection to its real Google authorization.
+No Google client, provider account id, token, or real email address belongs in this project.
+
+## Safety and API boundary
+
+- Search, message/thread reads, draft reads, and vacation-setting reads may target one or both accounts.
+- Draft creation/update/send, label changes, archive, raw send, trash, and vacation updates target one account.
+- Every mutation is prepared against the exact selected binding and must be confirmed before dispatch.
+- `send_message.raw` and draft `raw` are RFC 2822 MIME bytes encoded with base64url. This example does not
+  pretend that `to`/`subject`/`body` strings are sufficient to encode Unicode MIME correctly.
+- Vacation `startTime`/`endTime` schemas enforce only digit-shaped 1–19 character epoch-millisecond strings.
+  When both are supplied, Gmail's backend remains authoritative for the required `startTime < endTime`
+  relationship; this example does not claim cross-field JSON Schema validation.
+- Trash is reversible. Permanent message/thread/draft deletion, delegation, forwarding/sharing settings,
+  and unrestricted raw HTTP requests are intentionally absent.
+
+## Local checks
+
+```sh
+noodle validate
+noodle test
+```
+
+The committed tests compile hermetic fake connector responses. They never contact Gmail or load OAuth
+credentials. A real deployment additionally needs an operator-provided external credential exchange
+endpoint for each logical connection.
+
+## Personal automation skill
+
+The source skill is [`skills/personal-email-automation/SKILL.md`](skills/personal-email-automation/SKILL.md).
+Validate it with the standard skill validator before distribution. The source skill is shipped as part of
+this example; canonical export of an app and its skill as an installable Codex plugin remains roadmap work
+and is not currently provided by Noodle Seed.

package/skills/claude-code/examples/gmail-multi-account/noodle.json

@@ -0,0 +1,4 @@
+{
+  "entrypoint": "src/server.ts",
+  "name": "gmail-multi-account"
+}

package/skills/claude-code/examples/gmail-multi-account/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "gmail-multi-account",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "validate": "noodle validate",
+    "dev": "noodle dev",
+    "deploy": "noodle deploy"
+  },
+  "devDependencies": {
+    "@noodleseed/one": "latest",
+    "vitest": "latest"
+  }
+}