@noodleseed/agent-kit 0.35.0 → 0.37.0

package/manifest.json

@@ -1,14 +1,14 @@
 {
-  "packageVersion": "0.35.0",
+  "packageVersion": "0.37.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "bc487708c97735979ce2179f27e82988233819b2264cbe53c69320dbc2630800",
+      "sha256": "f2ddee1369a4855613526eb5368ce0eae364f85efa1067639050695bf4bbfa49",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/sdk-surface.md",
-      "sha256": "769ac9217397298ec8b25236a008d11a84406a7fab6584ae929e5eacc2054cdc",
+      "sha256": "ff74db13656d8ca9c932225eb841ad76206e41d72253c3897f109c0f9710c5ea",
       "agentTarget": "codex"
     },
     {
@@ -23,7 +23,7 @@
     },
     {
       "path": "skills/codex/references/compile-errors.md",
-      "sha256": "1c9c3e58f1263838484d033ef9aa4a0efd6a1696091fd5c1b41686e1b87ac41a",
+      "sha256": "786dcbb3a06b4f7826726ea59b76515b9907d31c2c3dd4e6f81198ad85ec9184",
       "agentTarget": "codex"
     },
     {
@@ -33,12 +33,12 @@
     },
     {
       "path": "skills/codex/references/authoring-workflow.md",
-      "sha256": "5e64b735675bacdff9e893c03c6a30751844325854540e8952a1092cf57b1b98",
+      "sha256": "9f7c6fda964d2c54aca10141332c95f82dcaae6d53f6ae32f120e9dc8b0224a0",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/embedded-assistant.md",
-      "sha256": "5147837446ccde5937da5deee2a19d54c207858e02e18db919105a9fcbe0dc68",
+      "sha256": "7fc7dc9fa345c9e7f616d66d230db350a868db8e7fccb0b807354da218e85e0a",
       "agentTarget": "codex"
     },
     {
@@ -98,7 +98,7 @@
     },
     {
       "path": "skills/codex/references/examples.md",
-      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
+      "sha256": "98a1ce82b038000798240b7ca4ca0ce2c43a4e6589fd6b59590afe30c102aa56",
       "agentTarget": "codex"
     },
     {
@@ -278,7 +278,7 @@
     },
     {
       "path": "skills/codex/examples/customer-auth/README.md",
-      "sha256": "ce422b235866a21ab805e42fede54489b896db8171fa080d8465c31705c56eb0",
+      "sha256": "e836885125aa31a5586509858ae5ebfabd23c6d5c931d1abd7cb62521a3fbc49",
       "agentTarget": "codex"
     },
     {
@@ -351,6 +351,36 @@
       "sha256": "d1c579d0987aeb67fc08a351f81c619eb02cadbd664ed77b8bab00573acc768a",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/README.md",
+      "sha256": "eeee6f15435702d24131f7d7e64b05e41fe65cd467bd7b37d97a0c6aa2af46a6",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/noodle.json",
+      "sha256": "9f3c9cb28f0ff26757e022fecdc9bcaa008e77bbccc6949df0cc879af5ebf166",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/package.json",
+      "sha256": "d0fb8fd281954915e105d1949e079ff9919e04204da520fd7b41c6320750e467",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/src/server.ts",
+      "sha256": "2bb185b724ea69b02be94b2694a6864ee878065889973b3b52ad9293eab3e88e",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/test/server.test.ts",
+      "sha256": "b248a6fbda6e7d30aadd316e4e244aff963ca4a31fcd08977675ef6653ad0ff5",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/gmail-multi-account/vitest.config.ts",
+      "sha256": "29acd34abc3452647c912d06b55a27f6600a4fe42b68d94b3ea822d34bfe3842",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/examples/hello/README.md",
       "sha256": "82fbbaa49e6eae064fffb4ea59a45a17cf350075780ff3e386b92b7f72a8201d",
@@ -403,12 +433,12 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "bc487708c97735979ce2179f27e82988233819b2264cbe53c69320dbc2630800",
+      "sha256": "f2ddee1369a4855613526eb5368ce0eae364f85efa1067639050695bf4bbfa49",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/sdk-surface.md",
-      "sha256": "769ac9217397298ec8b25236a008d11a84406a7fab6584ae929e5eacc2054cdc",
+      "sha256": "ff74db13656d8ca9c932225eb841ad76206e41d72253c3897f109c0f9710c5ea",
       "agentTarget": "claude-code"
     },
     {
@@ -423,7 +453,7 @@
     },
     {
       "path": "skills/claude-code/references/compile-errors.md",
-      "sha256": "1c9c3e58f1263838484d033ef9aa4a0efd6a1696091fd5c1b41686e1b87ac41a",
+      "sha256": "786dcbb3a06b4f7826726ea59b76515b9907d31c2c3dd4e6f81198ad85ec9184",
       "agentTarget": "claude-code"
     },
     {
@@ -433,12 +463,12 @@
     },
     {
       "path": "skills/claude-code/references/authoring-workflow.md",
-      "sha256": "5e64b735675bacdff9e893c03c6a30751844325854540e8952a1092cf57b1b98",
+      "sha256": "9f7c6fda964d2c54aca10141332c95f82dcaae6d53f6ae32f120e9dc8b0224a0",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/embedded-assistant.md",
-      "sha256": "5147837446ccde5937da5deee2a19d54c207858e02e18db919105a9fcbe0dc68",
+      "sha256": "7fc7dc9fa345c9e7f616d66d230db350a868db8e7fccb0b807354da218e85e0a",
       "agentTarget": "claude-code"
     },
     {
@@ -498,7 +528,7 @@
     },
     {
       "path": "skills/claude-code/references/examples.md",
-      "sha256": "69ab3b0e85454f3d5df5f270b760216de7b1a69803a2f081447bc27bb634c524",
+      "sha256": "98a1ce82b038000798240b7ca4ca0ce2c43a4e6589fd6b59590afe30c102aa56",
       "agentTarget": "claude-code"
     },
     {
@@ -678,7 +708,7 @@
     },
     {
       "path": "skills/claude-code/examples/customer-auth/README.md",
-      "sha256": "ce422b235866a21ab805e42fede54489b896db8171fa080d8465c31705c56eb0",
+      "sha256": "e836885125aa31a5586509858ae5ebfabd23c6d5c931d1abd7cb62521a3fbc49",
       "agentTarget": "claude-code"
     },
     {
@@ -751,6 +781,36 @@
       "sha256": "d1c579d0987aeb67fc08a351f81c619eb02cadbd664ed77b8bab00573acc768a",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/README.md",
+      "sha256": "eeee6f15435702d24131f7d7e64b05e41fe65cd467bd7b37d97a0c6aa2af46a6",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/noodle.json",
+      "sha256": "9f3c9cb28f0ff26757e022fecdc9bcaa008e77bbccc6949df0cc879af5ebf166",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/package.json",
+      "sha256": "d0fb8fd281954915e105d1949e079ff9919e04204da520fd7b41c6320750e467",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/src/server.ts",
+      "sha256": "2bb185b724ea69b02be94b2694a6864ee878065889973b3b52ad9293eab3e88e",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/test/server.test.ts",
+      "sha256": "b248a6fbda6e7d30aadd316e4e244aff963ca4a31fcd08977675ef6653ad0ff5",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/gmail-multi-account/vitest.config.ts",
+      "sha256": "29acd34abc3452647c912d06b55a27f6600a4fe42b68d94b3ea822d34bfe3842",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/examples/hello/README.md",
       "sha256": "82fbbaa49e6eae064fffb4ea59a45a17cf350075780ff3e386b92b7f72a8201d",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.35.0",
+  "version": "0.37.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
 ---
 
-<!-- noodle-skill version:0.35.0 hash:75dd0f6f85b04858 -->
+<!-- noodle-skill version:0.37.0 hash:75dd0f6f85b04858 -->
 
 # Noodle Seed
 

package/skills/claude-code/examples/customer-auth/README.md

@@ -29,6 +29,13 @@ callback.
 
 ## How delegated customer credentials are used
 
+This flagship uses the legacy Firebase provider bridge because it is runnable today. That is distinct from
+Core-v2 account-selecting connector aliases: those declare catalog `credentialProfiles` and bind each alias
+with `bind(connector, { profile, connection })`. Hosted bound `managedSecret(...)` connections are runnable;
+bound `externalExchange()` and `clientCredentials(...)` currently compile as portable metadata but fail
+closed before secret or network access until their provider slice lands. Do not replace this example's
+working delegated-session-cookie path with either unsupported bound exchange source.
+
 The example has two declarations that work together:
 
 ```ts

package/skills/claude-code/examples/gmail-multi-account/README.md

@@ -0,0 +1,46 @@
+# Gmail multi-account automation
+
+**Owns:** The flagship proof that one reusable connector can be bound to multiple independently
+authenticated accounts inside one MCP server.
+
+This fictional example binds `gmailConnector()` twice through separate `externalExchange()` logical
+connections. Public tools always accept `accounts: [...]`; reads accept either account or the canonical
+personal-then-work pair, while mutations accept exactly one account and require runtime confirmation.
+
+Capability slot: **reusable connector + independently authenticated multi-account bindings**. It is distinct
+from `customer-auth`, which owns authentication of the MCP caller rather than downstream connector accounts.
+
+The labels `personal@example.com` and `work@example.com` are static display labels, not provider identities.
+The deployment-owned credential provider maps each logical connection to its real Google authorization.
+No Google client, provider account id, token, or real email address belongs in this project.
+
+## Safety and API boundary
+
+- Search, message/thread reads, draft reads, and vacation-setting reads may target one or both accounts.
+- Draft creation/update/send, label changes, archive, raw send, trash, and vacation updates target one account.
+- Every mutation is prepared against the exact selected binding and must be confirmed before dispatch.
+- `send_message.raw` and draft `raw` are RFC 2822 MIME bytes encoded with base64url. This example does not
+  pretend that `to`/`subject`/`body` strings are sufficient to encode Unicode MIME correctly.
+- Vacation `startTime`/`endTime` schemas enforce only digit-shaped 1–19 character epoch-millisecond strings.
+  When both are supplied, Gmail's backend remains authoritative for the required `startTime < endTime`
+  relationship; this example does not claim cross-field JSON Schema validation.
+- Trash is reversible. Permanent message/thread/draft deletion, delegation, forwarding/sharing settings,
+  and unrestricted raw HTTP requests are intentionally absent.
+
+## Local checks
+
+```sh
+noodle validate
+noodle test
+```
+
+The committed tests compile hermetic fake connector responses. They never contact Gmail or load OAuth
+credentials. A real deployment additionally needs an operator-provided external credential exchange
+endpoint for each logical connection.
+
+## Personal automation skill
+
+The source skill is [`skills/personal-email-automation/SKILL.md`](skills/personal-email-automation/SKILL.md).
+Validate it with the standard skill validator before distribution. The source skill is shipped as part of
+this example; canonical export of an app and its skill as an installable Codex plugin remains roadmap work
+and is not currently provided by Noodle Seed.

package/skills/claude-code/examples/gmail-multi-account/noodle.json

@@ -0,0 +1,4 @@
+{
+  "entrypoint": "src/server.ts",
+  "name": "gmail-multi-account"
+}

package/skills/claude-code/examples/gmail-multi-account/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "gmail-multi-account",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "validate": "noodle validate",
+    "dev": "noodle dev",
+    "deploy": "noodle deploy"
+  },
+  "devDependencies": {
+    "@noodleseed/one": "latest",
+    "vitest": "latest"
+  }
+}