@noodleseed/agent-kit 0.37.0 → 0.39.0

package/manifest.json

@@ -1,19 +1,19 @@
 {
-  "packageVersion": "0.37.0",
+  "packageVersion": "0.39.0",
   "files": [
     {
       "path": "skills/codex/SKILL.md",
-      "sha256": "f2ddee1369a4855613526eb5368ce0eae364f85efa1067639050695bf4bbfa49",
+      "sha256": "7cae6cd35f745b34253d759eaf51e4664ec2d3f0553a74bb2d4c21d613de06f1",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/sdk-surface.md",
-      "sha256": "ff74db13656d8ca9c932225eb841ad76206e41d72253c3897f109c0f9710c5ea",
+      "sha256": "539e46421c322837ff5a0dc30c602b9ad1b73e5da1ffd28229dcce9f0dfd12fa",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/cli-commands.md",
-      "sha256": "f5adf195aab7ebf4c9de84e21feb99d6d5e9f0c8034fb44ef53d2ed24bd58b63",
+      "sha256": "6769d9c38708e7546de5c024fade6a4940d9c8c493c762700f6f44ff98908c02",
       "agentTarget": "codex"
     },
     {
@@ -33,7 +33,7 @@
     },
     {
       "path": "skills/codex/references/authoring-workflow.md",
-      "sha256": "9f7c6fda964d2c54aca10141332c95f82dcaae6d53f6ae32f120e9dc8b0224a0",
+      "sha256": "a7cd7f62d922e573ce8c4fa36320f9f0902673981a69264a48505c2e20c08a43",
       "agentTarget": "codex"
     },
     {
@@ -98,12 +98,12 @@
     },
     {
       "path": "skills/codex/references/examples.md",
-      "sha256": "98a1ce82b038000798240b7ca4ca0ce2c43a4e6589fd6b59590afe30c102aa56",
+      "sha256": "c74de358c682b611831353727520ca952b056cd57406a2d3468ea173296cd6cd",
       "agentTarget": "codex"
     },
     {
       "path": "skills/codex/references/feedback.md",
-      "sha256": "890bb6d9af2a150ef243728f310036fb76c3c27e420a0d7c5feb62fa456b4f00",
+      "sha256": "6de79daaf21b353a5af45a6f1117afdaa760c42b98bfa677d89577257bfcee7e",
       "agentTarget": "codex"
     },
     {
@@ -381,9 +381,39 @@
       "sha256": "29acd34abc3452647c912d06b55a27f6600a4fe42b68d94b3ea822d34bfe3842",
       "agentTarget": "codex"
     },
+    {
+      "path": "skills/codex/examples/google-bigquery/README.md",
+      "sha256": "3db7a4706cc76279dee7ae7f894f0d8c099adff160f6738be659ee1993bd537b",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/google-bigquery/noodle.json",
+      "sha256": "66b26e70d81f3aa8330d2aef30a356f1b911db029eba5441aeca3911fa1e6b36",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/google-bigquery/package.json",
+      "sha256": "a0c6bd5dea7c579285b8ab737d6c893d960451ef75d26546c5d393eade87e118",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/google-bigquery/src/server.ts",
+      "sha256": "e7497ec6f45020367e2b11874e19a5f749317bfdc2acfe5b24d6c3401745e937",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/google-bigquery/test/server.test.ts",
+      "sha256": "feb43be4a59b25f16f984095e3df7b930f6a6730147eed01d6bdd1cfdf63d5a7",
+      "agentTarget": "codex"
+    },
+    {
+      "path": "skills/codex/examples/google-bigquery/vitest.config.ts",
+      "sha256": "5f03aa24fa3d1e014a82ab8d4cbd3c1267f9e2848c79632b3a21780e193f2765",
+      "agentTarget": "codex"
+    },
     {
       "path": "skills/codex/examples/hello/README.md",
-      "sha256": "82fbbaa49e6eae064fffb4ea59a45a17cf350075780ff3e386b92b7f72a8201d",
+      "sha256": "447908ce83e98acf30f17b44197dff54eb4e504c62fae12e697b1acb755c0bb8",
       "agentTarget": "codex"
     },
     {
@@ -433,17 +463,17 @@
     },
     {
       "path": "skills/claude-code/SKILL.md",
-      "sha256": "f2ddee1369a4855613526eb5368ce0eae364f85efa1067639050695bf4bbfa49",
+      "sha256": "7cae6cd35f745b34253d759eaf51e4664ec2d3f0553a74bb2d4c21d613de06f1",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/sdk-surface.md",
-      "sha256": "ff74db13656d8ca9c932225eb841ad76206e41d72253c3897f109c0f9710c5ea",
+      "sha256": "539e46421c322837ff5a0dc30c602b9ad1b73e5da1ffd28229dcce9f0dfd12fa",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/cli-commands.md",
-      "sha256": "f5adf195aab7ebf4c9de84e21feb99d6d5e9f0c8034fb44ef53d2ed24bd58b63",
+      "sha256": "6769d9c38708e7546de5c024fade6a4940d9c8c493c762700f6f44ff98908c02",
       "agentTarget": "claude-code"
     },
     {
@@ -463,7 +493,7 @@
     },
     {
       "path": "skills/claude-code/references/authoring-workflow.md",
-      "sha256": "9f7c6fda964d2c54aca10141332c95f82dcaae6d53f6ae32f120e9dc8b0224a0",
+      "sha256": "a7cd7f62d922e573ce8c4fa36320f9f0902673981a69264a48505c2e20c08a43",
       "agentTarget": "claude-code"
     },
     {
@@ -528,12 +558,12 @@
     },
     {
       "path": "skills/claude-code/references/examples.md",
-      "sha256": "98a1ce82b038000798240b7ca4ca0ce2c43a4e6589fd6b59590afe30c102aa56",
+      "sha256": "c74de358c682b611831353727520ca952b056cd57406a2d3468ea173296cd6cd",
       "agentTarget": "claude-code"
     },
     {
       "path": "skills/claude-code/references/feedback.md",
-      "sha256": "890bb6d9af2a150ef243728f310036fb76c3c27e420a0d7c5feb62fa456b4f00",
+      "sha256": "6de79daaf21b353a5af45a6f1117afdaa760c42b98bfa677d89577257bfcee7e",
       "agentTarget": "claude-code"
     },
     {
@@ -811,9 +841,39 @@
       "sha256": "29acd34abc3452647c912d06b55a27f6600a4fe42b68d94b3ea822d34bfe3842",
       "agentTarget": "claude-code"
     },
+    {
+      "path": "skills/claude-code/examples/google-bigquery/README.md",
+      "sha256": "3db7a4706cc76279dee7ae7f894f0d8c099adff160f6738be659ee1993bd537b",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/google-bigquery/noodle.json",
+      "sha256": "66b26e70d81f3aa8330d2aef30a356f1b911db029eba5441aeca3911fa1e6b36",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/google-bigquery/package.json",
+      "sha256": "a0c6bd5dea7c579285b8ab737d6c893d960451ef75d26546c5d393eade87e118",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/google-bigquery/src/server.ts",
+      "sha256": "e7497ec6f45020367e2b11874e19a5f749317bfdc2acfe5b24d6c3401745e937",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/google-bigquery/test/server.test.ts",
+      "sha256": "feb43be4a59b25f16f984095e3df7b930f6a6730147eed01d6bdd1cfdf63d5a7",
+      "agentTarget": "claude-code"
+    },
+    {
+      "path": "skills/claude-code/examples/google-bigquery/vitest.config.ts",
+      "sha256": "5f03aa24fa3d1e014a82ab8d4cbd3c1267f9e2848c79632b3a21780e193f2765",
+      "agentTarget": "claude-code"
+    },
     {
       "path": "skills/claude-code/examples/hello/README.md",
-      "sha256": "82fbbaa49e6eae064fffb4ea59a45a17cf350075780ff3e386b92b7f72a8201d",
+      "sha256": "447908ce83e98acf30f17b44197dff54eb4e504c62fae12e697b1acb755c0bb8",
       "agentTarget": "claude-code"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.37.0",
+  "version": "0.39.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
 ---
 
-<!-- noodle-skill version:0.37.0 hash:75dd0f6f85b04858 -->
+<!-- noodle-skill version:0.39.0 hash:75dd0f6f85b04858 -->
 
 # Noodle Seed
 

package/skills/claude-code/examples/google-bigquery/README.md

@@ -0,0 +1,101 @@
+# Google BigQuery — keyless deployed-server authentication
+
+This flagship owns the Google Workload Identity Federation capability slot: a deployed Noodle Seed server
+calls BigQuery with hourly short-lived Google credentials and never uploads or stores a service-account JSON
+key. The same `googleWorkloadIdentity(...)` connection works for other Google REST APIs when their connector
+operations declare the exact Google OAuth scopes and `https://*.googleapis.com` audience they require.
+
+The developer authors only TypeScript:
+
+```ts
+const google = connection(
+  'customer_google_cloud',
+  googleWorkloadIdentity({
+    provider: variable('GOOGLE_WIF_PROVIDER'),
+    access: {
+      kind: 'serviceAccountImpersonation',
+      serviceAccount: variable('GOOGLE_SERVICE_ACCOUNT'),
+    },
+  }),
+);
+
+use: {
+  bigquery: bind(bigquery, { profile: 'google_wif', connection: google }),
+}
+```
+
+`GOOGLE_WIF_PROVIDER` is the non-secret provider resource
+`projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL/providers/PROVIDER`.
+`GOOGLE_SERVICE_ACCOUNT` is the non-secret email of the customer service account that Google will
+impersonate. The private key does not exist in Noodle.
+
+## Complete operator setup
+
+After creating or joining the target Noodle organization, prepare the environment's stable workload identity.
+This can run before the first deploy and prints copyable Google Cloud and managed-variable commands:
+
+```sh
+noodle auth google prepare \
+  --org acme \
+  --app google-bigquery \
+  --env prod \
+  --project-number 123456789012 \
+  --pool noodle-prod \
+  --provider google-bigquery \
+  --service-account bigquery-reader@customer-project.iam.gserviceaccount.com
+```
+
+The command asks for every Google-specific value Noodle cannot infer, creates no Google resources itself,
+and prints:
+
+- the required API-enablement, workload-pool, and OIDC-provider commands;
+- the exact issuer, attribute mapping, tenant condition, and federated principal URI;
+- the least-privilege `roles/iam.workloadIdentityUser` service-account binding;
+- the exact `noodle variables set ... --runtime cloud` commands.
+
+In the customer project, grant the service account only the data permissions the server needs. For this
+read-only example, use dataset-level `roles/bigquery.dataViewer` and project-level
+`roles/bigquery.jobUser` so it can create query jobs; do not grant project Owner or Editor.
+
+After applying the printed Google and Noodle commands, deploy the authored server and validate a real token
+exchange without running the `query_bigquery` business tool:
+
+```sh
+noodle deploy --access owner-only
+noodle auth google doctor --org acme --app google-bigquery --env prod
+```
+
+The broker signs a one-hour RS256 OIDC subject token with the platform signing key, exchanges it only at
+Google STS, optionally calls IAM Credentials `generateAccessToken`, and caches the final binding-scoped token
+until five minutes before expiry. Revocation immediately stops Noodle from issuing or reusing credentials:
+
+```sh
+noodle auth google revoke --org acme --app google-bigquery --env prod
+```
+
+An already-issued Google token can remain usable until its short expiry. Remove the customer-side IAM
+principal binding as defense in depth. Re-preparing after revocation creates a new subject, so the old
+Google IAM binding cannot silently become valid again.
+
+## Direct federation instead of impersonation
+
+Where the target Google API supports direct federated principals, omit the service account:
+
+```ts
+googleWorkloadIdentity({
+  provider: variable('GOOGLE_WIF_PROVIDER'),
+  access: { kind: 'direct' },
+});
+```
+
+Run `noodle auth google prepare` without `--service-account`, then grant the printed federated principal the
+least-privilege role directly on the target resource.
+
+## Local validation
+
+Compilation and tests need no Google credentials:
+
+```sh
+noodle validate
+noodle test
+```

package/skills/claude-code/examples/google-bigquery/noodle.json

@@ -0,0 +1,4 @@
+{
+  "entrypoint": "src/server.ts",
+  "name": "google-bigquery"
+}

package/skills/claude-code/examples/google-bigquery/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "google-bigquery",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "validate": "noodle validate",
+    "dev": "noodle dev",
+    "deploy": "noodle deploy"
+  },
+  "devDependencies": {
+    "@noodleseed/one": "latest",
+    "vitest": "latest"
+  }
+}

package/skills/claude-code/examples/google-bigquery/src/server.ts

@@ -0,0 +1,112 @@
+import {
+  annotations,
+  bind,
+  connection,
+  connector,
+  googleWorkloadIdentity,
+  server,
+  tool,
+  variable,
+  z,
+} from '@noodleseed/one';
+
+const BIGQUERY_ORIGIN = 'https://bigquery.googleapis.com';
+const BIGQUERY_READONLY = 'https://www.googleapis.com/auth/bigquery.readonly';
+
+const bigquery = connector('google_bigquery')
+  .version('1.0.0')
+  .http({
+    baseUrl: BIGQUERY_ORIGIN,
+    allowedOrigins: [BIGQUERY_ORIGIN],
+    credentialProfiles: { google_wif: { kind: 'bearer' } },
+    operations: {
+      query: {
+        type: 'read',
+        method: 'POST',
+        path: '/bigquery/v2/projects/${args.project_id}/queries',
+        input: z.object({
+          project_id: z.string().min(1),
+          query: z.string().min(1),
+          max_results: z.number().int().min(1).max(1000).optional(),
+        }),
+        output: z.object({
+          job_complete: z.boolean().optional(),
+          schema: z.unknown().optional(),
+          rows: z.array(z.unknown()).optional(),
+          total_rows: z.string().optional(),
+        }),
+        request: {
+          query: '${args.query}',
+          useLegacySql: false,
+          maxResults: '${args.max_results}',
+        },
+        response: {
+          job_complete: '${response.jobComplete}',
+          schema: '${response.schema}',
+          rows: '${response.rows}',
+          total_rows: '${response.totalRows}',
+        },
+        credentials: {
+          profiles: ['google_wif'],
+          scopes: [BIGQUERY_READONLY],
+          audience: BIGQUERY_ORIGIN,
+        },
+      },
+    },
+  });
+
+const google = connection(
+  'customer_google_cloud',
+  googleWorkloadIdentity({
+    provider: variable('GOOGLE_WIF_PROVIDER'),
+    access: {
+      kind: 'serviceAccountImpersonation',
+      serviceAccount: variable('GOOGLE_SERVICE_ACCOUNT'),
+    },
+  }),
+);
+
+export default server(
+  'google_bigquery',
+  {
+    title: 'Google BigQuery Reader',
+    version: '1.0.0',
+    use: {
+      bigquery: bind(bigquery, { profile: 'google_wif', connection: google }),
+    },
+    instructions:
+      'Run read-only GoogleSQL queries in the configured customer BigQuery project. Never invent project, dataset, or table names.',
+  },
+  [
+    tool('query_bigquery', {
+      title: 'Query BigQuery',
+      description:
+        'Run one read-only GoogleSQL query in an explicitly named Google Cloud project and return the typed BigQuery rows.',
+      input: z.object({
+        project_id: z.string().min(1).meta({ title: 'Google Cloud project' }),
+        query: z.string().min(1).meta({ title: 'GoogleSQL query' }),
+        max_results: z.number().int().min(1).max(1000).optional(),
+      }),
+      output: z.object({
+        job_complete: z.boolean(),
+        schema: z.unknown().optional(),
+        rows: z.array(z.unknown()),
+        total_rows: z.string().optional(),
+      }),
+      annotations: annotations.readOnly(),
+      fulfil({ input, connectors }) {
+        const result = connectors.bigquery.query({
+          project_id: input.project_id,
+          query: input.query,
+          max_results: input.max_results,
+        });
+        return {
+          job_complete: result.job_complete,
+          schema: result.schema.optional(),
+          rows: result.rows,
+          total_rows: result.total_rows.optional(),
+        };
+      },
+    }),
+  ],
+);

package/skills/claude-code/examples/google-bigquery/test/server.test.ts

@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest';
+import app from '../src/server.js';
+
+describe('Google BigQuery workload-identity flagship', () => {
+  it('binds a read-only Google operation to keyless service-account impersonation', async () => {
+    const manifest = await app.toManifest();
+    expect(manifest.connectors?.bigquery).toMatchObject({
+      id: 'google_bigquery',
+      binding: {
+        profile: 'google_wif',
+        connection: {
+          id: 'customer_google_cloud',
+          source: {
+            kind: 'googleWorkloadIdentity',
+            provider: '${env.GOOGLE_WIF_PROVIDER}',
+            access: {
+              kind: 'serviceAccountImpersonation',
+              serviceAccount: '${env.GOOGLE_SERVICE_ACCOUNT}',
+            },
+          },
+        },
+      },
+    });
+    expect(app.toConnectorCatalog()).toMatchObject({
+      connectors: [
+        {
+          credentialProfiles: { google_wif: { kind: 'bearer' } },
+          operations: {
+            query: {
+              credentials: {
+                profiles: ['google_wif'],
+                scopes: ['https://www.googleapis.com/auth/bigquery.readonly'],
+                audience: 'https://bigquery.googleapis.com',
+              },
+            },
+          },
+        },
+      ],
+    });
+    expect(JSON.stringify({ manifest, catalog: app.toConnectorCatalog() })).not.toMatch(
+      /private[_-]?key|client[_-]?secret|access[_-]?token/i,
+    );
+  });
+});

package/skills/claude-code/examples/google-bigquery/vitest.config.ts

@@ -0,0 +1,20 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      '@noodleseed/one': new URL('../../packages/authoring/src/index.ts', import.meta.url).pathname,
+      '@noodle-borg/capabilities': new URL(
+        '../../packages/capabilities/src/index.ts',
+        import.meta.url,
+      ).pathname,
+      '@noodle-borg/compiler': new URL('../../packages/compiler/src/index.ts', import.meta.url)
+        .pathname,
+      '@noodle-borg/connector-defs': new URL(
+        '../../packages/connector-defs/src/index.ts',
+        import.meta.url,
+      ).pathname,
+    },
+  },
+  test: { include: ['test/**/*.test.ts'] },
+});

package/skills/claude-code/examples/hello/README.md

@@ -9,6 +9,9 @@ When an installed Noodle Developer plugin drives this example, its skill runs th
 `noodle` commands through the plugin-managed, version-pinned launcher and isolated host profile.
 Do not install or update a global CLI: the coding agent writes and tests this source while Noodle
 guides and operates the validate, preview, deploy, inspect, and debug workflow.
+If that agent discovers a Noodle Seed product gap while working, the installed skill prepares a
+sanitized `noodle feedback` proposal, discovers current fields from `noodle commands --json`, and
+submits it only after showing the exact command and receiving explicit user approval.
 
 ```sh
 noodle dev examples/hello/src/server.ts --app hello

package/skills/claude-code/references/authoring-workflow.md

@@ -41,7 +41,7 @@ Tools record connector calls into a flow; recording is not execution. Do not bra
 
 HTTP connector auth variants: `bearer` (`{ kind: "bearer", secret: secret("API_TOKEN") }`), `apiKey` (`{ kind: "apiKey", header: "X-API-Key", secret: secret("API_KEY") }`), `clientCredentials`, `delegatedOAuth`, `delegatedSessionCookie`, and `delegatedTokenExchange` (per-user calls to your own API — see "Delegated downstream auth" below). Use managed `secret(...)` / `variable(...)` refs for all values that differ by org/app/env.
 
-When one connector needs independently selectable accounts, declare catalog `credentialProfiles` plus each operation’s accepted `credentials.profiles`, then bind each `server.use` alias with `bind(connector, { profile, connection: connection("logical_id", managedSecret(secret("NAME"), { scopes, audience })) })`. The alias is the stable account boundary; never put provider account ids, labels, or credential values in it. `gmailConnector()` is the curated Gmail catalog helper; reuse it under independent aliases and accept canonical `accounts` arrays in tools (one account for writes, or an explicitly ordered supported combination for reads). See the bundled `gmail-multi-account` flagship. Bound managed secrets are supported by hosted execution. `externalExchange()` is runnable only when the deployment operator injects an exact HTTPS provider endpoint/origin/audience and durable shared subject-pin store through service ports; Noodle sends a short-lived platform-signed deployment workload assertion and accepts only a bounded bearer response. Provider implementations must consume assertion replay ids through durable shared atomic storage across instances and restarts. There is intentionally no hosted enrollment or provider CRUD surface yet. The provider wire contract is public, but its conformance kit is workspace/source-only and is not an installable npm package. Bound `clientCredentials(...)` remains fail-closed until its provider slice lands.
+When one connector needs independently selectable accounts, declare catalog `credentialProfiles` plus each operation’s accepted `credentials.profiles`, then bind each `server.use` alias with `bind(connector, { profile, connection: connection("logical_id", managedSecret(secret("NAME"), { scopes, audience })) })`. The alias is the stable account boundary; never put provider account ids, labels, or credential values in it. `gmailConnector()` is the curated Gmail catalog helper; reuse it under independent aliases and accept canonical `accounts` arrays in tools (one account for writes, or an explicitly ordered supported combination for reads). See the bundled `gmail-multi-account` flagship. Bound managed secrets are supported by hosted execution. For deployed-server access to Google APIs, use `googleWorkloadIdentity({ provider: variable("GOOGLE_WIF_PROVIDER"), access: { kind: "direct" } })`, or add `serviceAccountImpersonation` with a managed service-account email. This is keyless Google Workload Identity Federation: exact Google scopes/audience come from the catalog operation, while `noodle auth google prepare|status|doctor|revoke` owns operator lifecycle. See the bundled `google-bigquery` flagship. `externalExchange()` is runnable only when the deployment operator injects an exact HTTPS provider endpoint/origin/audience and durable shared subject-pin store through service ports; Noodle sends a short-lived platform-signed deployment workload assertion and accepts only a bounded bearer response. Provider implementations must consume assertion replay ids through durable shared atomic storage across instances and restarts. There is intentionally no hosted enrollment or provider CRUD surface yet. The provider wire contract is public, but its conformance kit is workspace/source-only and is not an installable npm package. Bound `clientCredentials(...)` remains fail-closed until its provider slice lands.
 
 ## HTTP connector example (full server)
 

package/skills/claude-code/references/cli-commands.md

@@ -21,7 +21,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | `noodle setup` | Reconcile project config and local agent files (dry-run unless `--write`). |
 | `noodle doctor` | Check login, service, project, validation, and config. |
 | `noodle agents` | Manage AI agent skills and project context (`setup`/`context`/`doctor`). |
-| `noodle auth` | Diagnose customer OIDC/provider declarations; `--live` probes delegated credentials without a business-tool call. |
+| `noodle auth` | Use `auth google` for keyless Google workload identity; diagnose downstream credentials without a business-tool call. |
 | `noodle docs` | Export docs in an LLM-readable format. |
 | `noodle connect` | Print connection setup for an agent host (Claude Code, Codex, Cursor, etc.). |
 | `noodle import` | Import an OpenAPI spec into a starter `server.ts`. |

package/skills/claude-code/references/examples.md

@@ -16,6 +16,7 @@ Paths are relative to this skill directory. Assets (images/fonts) are omitted fr
 | `acme-bistro` | End-to-end ordering with a payment-only handoff; ships a gold-standard `design/` set (UX doc, wireframe with compliance audit, API contract). | `examples/acme-bistro/src/server.ts` + `design/` |
 | `customer-auth` | End-user (customer) auth via OIDC/Firebase bridge with delegated credentials. | `examples/customer-auth/src/server.ts` |
 | `gmail-multi-account` | One curated Gmail connector reused by two account bindings, canonical account arrays, exact mutation confirmation, and an accompanying personal-automation skill. | `examples/gmail-multi-account/src/server.ts` |
+| `google-bigquery` | Keyless Google Workload Identity Federation with optional service-account impersonation, a BigQuery REST connector, and complete developer/operator setup. | `examples/google-bigquery/src/server.ts` |
 
 ## In the repository only — `examples/<name>/` on GitHub
 

package/skills/claude-code/references/feedback.md

@@ -39,7 +39,7 @@ noodle feedback "resources list --json omits the truncated flag the docs promise
   --type fix --severity P2 --area cli --json
 ```
 
-This is an example only; build the exact command for the finding and show it before execution. The message is required (1–4000 chars). Pass `--json` and parse the envelope: success is `{ok:true,data:{reference,labels}}`; a `429` means the per-user hourly budget (5) is spent — report that it was not sent and never retry-loop. The CLI attaches only the disclosed light diagnostics automatically: CLI version, OS/platform, Node version. Nothing else is collected.
+This is an example only; build the exact command for the finding and show it before execution. Read `noodle feedback --help` for human-readable constraints or inspect `noodle commands --json` for the same machine-readable usage, enum, and length metadata instead of guessing accepted values. The message is required (1–4000 chars). Pass `--json` and parse the envelope: success is `{ok:true,data:{reference,labels}}`; a `429` means the per-user hourly budget (5) is spent — report that it was not sent and never retry-loop. The CLI attaches only the disclosed light diagnostics automatically: CLI version, OS/platform, Node version. Nothing else is collected.
 
 ## Choose the structured fields
 

package/skills/claude-code/references/sdk-surface.md

@@ -24,6 +24,9 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 ### Connectors & flows
 
 - `connector("id").version(...).http({...})` or `.compute(...)` — declarative data connectors.
+- `connection("logical_id", source)` — stable downstream-account/workload identity used by a connector binding.
+- `bind(connector, { profile, connection })` — bind one connector alias to an exact credential profile and logical connection.
+- `googleWorkloadIdentity({ provider: variable(...), access })` — keyless deployed-workload access to Google APIs through WIF; configure with `noodle auth google`.
 - `when(...)` — declarative conditions for recorded flows (no native branching on runtime values).
 
 ### Resources & prompts
@@ -50,9 +53,7 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 
 ### Other
 
-- `bind`
 - `clientCredentials`
-- `connection`
 - `embeddedAssistant`
 - `externalExchange`
 - `gmailConnector`

package/skills/codex/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
 ---
 
-<!-- noodle-skill version:0.37.0 hash:75dd0f6f85b04858 -->
+<!-- noodle-skill version:0.39.0 hash:75dd0f6f85b04858 -->
 
 # Noodle Seed
 

package/skills/codex/examples/google-bigquery/README.md

@@ -0,0 +1,101 @@
+# Google BigQuery — keyless deployed-server authentication
+
+This flagship owns the Google Workload Identity Federation capability slot: a deployed Noodle Seed server
+calls BigQuery with hourly short-lived Google credentials and never uploads or stores a service-account JSON
+key. The same `googleWorkloadIdentity(...)` connection works for other Google REST APIs when their connector
+operations declare the exact Google OAuth scopes and `https://*.googleapis.com` audience they require.
+
+The developer authors only TypeScript:
+
+```ts
+const google = connection(
+  'customer_google_cloud',
+  googleWorkloadIdentity({
+    provider: variable('GOOGLE_WIF_PROVIDER'),
+    access: {
+      kind: 'serviceAccountImpersonation',
+      serviceAccount: variable('GOOGLE_SERVICE_ACCOUNT'),
+    },
+  }),
+);
+
+use: {
+  bigquery: bind(bigquery, { profile: 'google_wif', connection: google }),
+}
+```
+
+`GOOGLE_WIF_PROVIDER` is the non-secret provider resource
+`projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL/providers/PROVIDER`.
+`GOOGLE_SERVICE_ACCOUNT` is the non-secret email of the customer service account that Google will
+impersonate. The private key does not exist in Noodle.
+
+## Complete operator setup
+
+After creating or joining the target Noodle organization, prepare the environment's stable workload identity.
+This can run before the first deploy and prints copyable Google Cloud and managed-variable commands:
+
+```sh
+noodle auth google prepare \
+  --org acme \
+  --app google-bigquery \
+  --env prod \
+  --project-number 123456789012 \
+  --pool noodle-prod \
+  --provider google-bigquery \
+  --service-account bigquery-reader@customer-project.iam.gserviceaccount.com
+```
+
+The command asks for every Google-specific value Noodle cannot infer, creates no Google resources itself,
+and prints:
+
+- the required API-enablement, workload-pool, and OIDC-provider commands;
+- the exact issuer, attribute mapping, tenant condition, and federated principal URI;
+- the least-privilege `roles/iam.workloadIdentityUser` service-account binding;
+- the exact `noodle variables set ... --runtime cloud` commands.
+
+In the customer project, grant the service account only the data permissions the server needs. For this
+read-only example, use dataset-level `roles/bigquery.dataViewer` and project-level
+`roles/bigquery.jobUser` so it can create query jobs; do not grant project Owner or Editor.
+
+After applying the printed Google and Noodle commands, deploy the authored server and validate a real token
+exchange without running the `query_bigquery` business tool:
+
+```sh
+noodle deploy --access owner-only
+noodle auth google doctor --org acme --app google-bigquery --env prod
+```
+
+The broker signs a one-hour RS256 OIDC subject token with the platform signing key, exchanges it only at
+Google STS, optionally calls IAM Credentials `generateAccessToken`, and caches the final binding-scoped token
+until five minutes before expiry. Revocation immediately stops Noodle from issuing or reusing credentials:
+
+```sh
+noodle auth google revoke --org acme --app google-bigquery --env prod
+```
+
+An already-issued Google token can remain usable until its short expiry. Remove the customer-side IAM
+principal binding as defense in depth. Re-preparing after revocation creates a new subject, so the old
+Google IAM binding cannot silently become valid again.
+
+## Direct federation instead of impersonation
+
+Where the target Google API supports direct federated principals, omit the service account:
+
+```ts
+googleWorkloadIdentity({
+  provider: variable('GOOGLE_WIF_PROVIDER'),
+  access: { kind: 'direct' },
+});
+```
+
+Run `noodle auth google prepare` without `--service-account`, then grant the printed federated principal the
+least-privilege role directly on the target resource.
+
+## Local validation
+
+Compilation and tests need no Google credentials:
+
+```sh
+noodle validate
+noodle test
+```

package/skills/codex/examples/google-bigquery/noodle.json

@@ -0,0 +1,4 @@
+{
+  "entrypoint": "src/server.ts",
+  "name": "google-bigquery"
+}

package/skills/codex/examples/google-bigquery/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "google-bigquery",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "test": "vitest run",
+    "validate": "noodle validate",
+    "dev": "noodle dev",
+    "deploy": "noodle deploy"
+  },
+  "devDependencies": {
+    "@noodleseed/one": "latest",
+    "vitest": "latest"
+  }
+}

package/skills/codex/examples/google-bigquery/src/server.ts

@@ -0,0 +1,112 @@
+import {
+  annotations,
+  bind,
+  connection,
+  connector,
+  googleWorkloadIdentity,
+  server,
+  tool,
+  variable,
+  z,
+} from '@noodleseed/one';
+
+const BIGQUERY_ORIGIN = 'https://bigquery.googleapis.com';
+const BIGQUERY_READONLY = 'https://www.googleapis.com/auth/bigquery.readonly';
+
+const bigquery = connector('google_bigquery')
+  .version('1.0.0')
+  .http({
+    baseUrl: BIGQUERY_ORIGIN,
+    allowedOrigins: [BIGQUERY_ORIGIN],
+    credentialProfiles: { google_wif: { kind: 'bearer' } },
+    operations: {
+      query: {
+        type: 'read',
+        method: 'POST',
+        path: '/bigquery/v2/projects/${args.project_id}/queries',
+        input: z.object({
+          project_id: z.string().min(1),
+          query: z.string().min(1),
+          max_results: z.number().int().min(1).max(1000).optional(),
+        }),
+        output: z.object({
+          job_complete: z.boolean().optional(),
+          schema: z.unknown().optional(),
+          rows: z.array(z.unknown()).optional(),
+          total_rows: z.string().optional(),
+        }),
+        request: {
+          query: '${args.query}',
+          useLegacySql: false,
+          maxResults: '${args.max_results}',
+        },
+        response: {
+          job_complete: '${response.jobComplete}',
+          schema: '${response.schema}',
+          rows: '${response.rows}',
+          total_rows: '${response.totalRows}',
+        },
+        credentials: {
+          profiles: ['google_wif'],
+          scopes: [BIGQUERY_READONLY],
+          audience: BIGQUERY_ORIGIN,
+        },
+      },
+    },
+  });
+
+const google = connection(
+  'customer_google_cloud',
+  googleWorkloadIdentity({
+    provider: variable('GOOGLE_WIF_PROVIDER'),
+    access: {
+      kind: 'serviceAccountImpersonation',
+      serviceAccount: variable('GOOGLE_SERVICE_ACCOUNT'),
+    },
+  }),
+);
+
+export default server(
+  'google_bigquery',
+  {
+    title: 'Google BigQuery Reader',
+    version: '1.0.0',
+    use: {
+      bigquery: bind(bigquery, { profile: 'google_wif', connection: google }),
+    },
+    instructions:
+      'Run read-only GoogleSQL queries in the configured customer BigQuery project. Never invent project, dataset, or table names.',
+  },
+  [
+    tool('query_bigquery', {
+      title: 'Query BigQuery',
+      description:
+        'Run one read-only GoogleSQL query in an explicitly named Google Cloud project and return the typed BigQuery rows.',
+      input: z.object({
+        project_id: z.string().min(1).meta({ title: 'Google Cloud project' }),
+        query: z.string().min(1).meta({ title: 'GoogleSQL query' }),
+        max_results: z.number().int().min(1).max(1000).optional(),
+      }),
+      output: z.object({
+        job_complete: z.boolean(),
+        schema: z.unknown().optional(),
+        rows: z.array(z.unknown()),
+        total_rows: z.string().optional(),
+      }),
+      annotations: annotations.readOnly(),
+      fulfil({ input, connectors }) {
+        const result = connectors.bigquery.query({
+          project_id: input.project_id,
+          query: input.query,
+          max_results: input.max_results,
+        });
+        return {
+          job_complete: result.job_complete,
+          schema: result.schema.optional(),
+          rows: result.rows,
+          total_rows: result.total_rows.optional(),
+        };
+      },
+    }),
+  ],
+);

package/skills/codex/examples/google-bigquery/test/server.test.ts

@@ -0,0 +1,44 @@
+import { describe, expect, it } from 'vitest';
+import app from '../src/server.js';
+
+describe('Google BigQuery workload-identity flagship', () => {
+  it('binds a read-only Google operation to keyless service-account impersonation', async () => {
+    const manifest = await app.toManifest();
+    expect(manifest.connectors?.bigquery).toMatchObject({
+      id: 'google_bigquery',
+      binding: {
+        profile: 'google_wif',
+        connection: {
+          id: 'customer_google_cloud',
+          source: {
+            kind: 'googleWorkloadIdentity',
+            provider: '${env.GOOGLE_WIF_PROVIDER}',
+            access: {
+              kind: 'serviceAccountImpersonation',
+              serviceAccount: '${env.GOOGLE_SERVICE_ACCOUNT}',
+            },
+          },
+        },
+      },
+    });
+    expect(app.toConnectorCatalog()).toMatchObject({
+      connectors: [
+        {
+          credentialProfiles: { google_wif: { kind: 'bearer' } },
+          operations: {
+            query: {
+              credentials: {
+                profiles: ['google_wif'],
+                scopes: ['https://www.googleapis.com/auth/bigquery.readonly'],
+                audience: 'https://bigquery.googleapis.com',
+              },
+            },
+          },
+        },
+      ],
+    });
+    expect(JSON.stringify({ manifest, catalog: app.toConnectorCatalog() })).not.toMatch(
+      /private[_-]?key|client[_-]?secret|access[_-]?token/i,
+    );
+  });
+});

package/skills/codex/examples/google-bigquery/vitest.config.ts

@@ -0,0 +1,20 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      '@noodleseed/one': new URL('../../packages/authoring/src/index.ts', import.meta.url).pathname,
+      '@noodle-borg/capabilities': new URL(
+        '../../packages/capabilities/src/index.ts',
+        import.meta.url,
+      ).pathname,
+      '@noodle-borg/compiler': new URL('../../packages/compiler/src/index.ts', import.meta.url)
+        .pathname,
+      '@noodle-borg/connector-defs': new URL(
+        '../../packages/connector-defs/src/index.ts',
+        import.meta.url,
+      ).pathname,
+    },
+  },
+  test: { include: ['test/**/*.test.ts'] },
+});

package/skills/codex/examples/hello/README.md

@@ -9,6 +9,9 @@ When an installed Noodle Developer plugin drives this example, its skill runs th
 `noodle` commands through the plugin-managed, version-pinned launcher and isolated host profile.
 Do not install or update a global CLI: the coding agent writes and tests this source while Noodle
 guides and operates the validate, preview, deploy, inspect, and debug workflow.
+If that agent discovers a Noodle Seed product gap while working, the installed skill prepares a
+sanitized `noodle feedback` proposal, discovers current fields from `noodle commands --json`, and
+submits it only after showing the exact command and receiving explicit user approval.
 
 ```sh
 noodle dev examples/hello/src/server.ts --app hello

package/skills/codex/references/authoring-workflow.md

@@ -41,7 +41,7 @@ Tools record connector calls into a flow; recording is not execution. Do not bra
 
 HTTP connector auth variants: `bearer` (`{ kind: "bearer", secret: secret("API_TOKEN") }`), `apiKey` (`{ kind: "apiKey", header: "X-API-Key", secret: secret("API_KEY") }`), `clientCredentials`, `delegatedOAuth`, `delegatedSessionCookie`, and `delegatedTokenExchange` (per-user calls to your own API — see "Delegated downstream auth" below). Use managed `secret(...)` / `variable(...)` refs for all values that differ by org/app/env.
 
-When one connector needs independently selectable accounts, declare catalog `credentialProfiles` plus each operation’s accepted `credentials.profiles`, then bind each `server.use` alias with `bind(connector, { profile, connection: connection("logical_id", managedSecret(secret("NAME"), { scopes, audience })) })`. The alias is the stable account boundary; never put provider account ids, labels, or credential values in it. `gmailConnector()` is the curated Gmail catalog helper; reuse it under independent aliases and accept canonical `accounts` arrays in tools (one account for writes, or an explicitly ordered supported combination for reads). See the bundled `gmail-multi-account` flagship. Bound managed secrets are supported by hosted execution. `externalExchange()` is runnable only when the deployment operator injects an exact HTTPS provider endpoint/origin/audience and durable shared subject-pin store through service ports; Noodle sends a short-lived platform-signed deployment workload assertion and accepts only a bounded bearer response. Provider implementations must consume assertion replay ids through durable shared atomic storage across instances and restarts. There is intentionally no hosted enrollment or provider CRUD surface yet. The provider wire contract is public, but its conformance kit is workspace/source-only and is not an installable npm package. Bound `clientCredentials(...)` remains fail-closed until its provider slice lands.
+When one connector needs independently selectable accounts, declare catalog `credentialProfiles` plus each operation’s accepted `credentials.profiles`, then bind each `server.use` alias with `bind(connector, { profile, connection: connection("logical_id", managedSecret(secret("NAME"), { scopes, audience })) })`. The alias is the stable account boundary; never put provider account ids, labels, or credential values in it. `gmailConnector()` is the curated Gmail catalog helper; reuse it under independent aliases and accept canonical `accounts` arrays in tools (one account for writes, or an explicitly ordered supported combination for reads). See the bundled `gmail-multi-account` flagship. Bound managed secrets are supported by hosted execution. For deployed-server access to Google APIs, use `googleWorkloadIdentity({ provider: variable("GOOGLE_WIF_PROVIDER"), access: { kind: "direct" } })`, or add `serviceAccountImpersonation` with a managed service-account email. This is keyless Google Workload Identity Federation: exact Google scopes/audience come from the catalog operation, while `noodle auth google prepare|status|doctor|revoke` owns operator lifecycle. See the bundled `google-bigquery` flagship. `externalExchange()` is runnable only when the deployment operator injects an exact HTTPS provider endpoint/origin/audience and durable shared subject-pin store through service ports; Noodle sends a short-lived platform-signed deployment workload assertion and accepts only a bounded bearer response. Provider implementations must consume assertion replay ids through durable shared atomic storage across instances and restarts. There is intentionally no hosted enrollment or provider CRUD surface yet. The provider wire contract is public, but its conformance kit is workspace/source-only and is not an installable npm package. Bound `clientCredentials(...)` remains fail-closed until its provider slice lands.
 
 ## HTTP connector example (full server)
 

package/skills/codex/references/cli-commands.md

@@ -21,7 +21,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | `noodle setup` | Reconcile project config and local agent files (dry-run unless `--write`). |
 | `noodle doctor` | Check login, service, project, validation, and config. |
 | `noodle agents` | Manage AI agent skills and project context (`setup`/`context`/`doctor`). |
-| `noodle auth` | Diagnose customer OIDC/provider declarations; `--live` probes delegated credentials without a business-tool call. |
+| `noodle auth` | Use `auth google` for keyless Google workload identity; diagnose downstream credentials without a business-tool call. |
 | `noodle docs` | Export docs in an LLM-readable format. |
 | `noodle connect` | Print connection setup for an agent host (Claude Code, Codex, Cursor, etc.). |
 | `noodle import` | Import an OpenAPI spec into a starter `server.ts`. |

package/skills/codex/references/examples.md

@@ -16,6 +16,7 @@ Paths are relative to this skill directory. Assets (images/fonts) are omitted fr
 | `acme-bistro` | End-to-end ordering with a payment-only handoff; ships a gold-standard `design/` set (UX doc, wireframe with compliance audit, API contract). | `examples/acme-bistro/src/server.ts` + `design/` |
 | `customer-auth` | End-user (customer) auth via OIDC/Firebase bridge with delegated credentials. | `examples/customer-auth/src/server.ts` |
 | `gmail-multi-account` | One curated Gmail connector reused by two account bindings, canonical account arrays, exact mutation confirmation, and an accompanying personal-automation skill. | `examples/gmail-multi-account/src/server.ts` |
+| `google-bigquery` | Keyless Google Workload Identity Federation with optional service-account impersonation, a BigQuery REST connector, and complete developer/operator setup. | `examples/google-bigquery/src/server.ts` |
 
 ## In the repository only — `examples/<name>/` on GitHub
 

package/skills/codex/references/feedback.md

@@ -39,7 +39,7 @@ noodle feedback "resources list --json omits the truncated flag the docs promise
   --type fix --severity P2 --area cli --json
 ```
 
-This is an example only; build the exact command for the finding and show it before execution. The message is required (1–4000 chars). Pass `--json` and parse the envelope: success is `{ok:true,data:{reference,labels}}`; a `429` means the per-user hourly budget (5) is spent — report that it was not sent and never retry-loop. The CLI attaches only the disclosed light diagnostics automatically: CLI version, OS/platform, Node version. Nothing else is collected.
+This is an example only; build the exact command for the finding and show it before execution. Read `noodle feedback --help` for human-readable constraints or inspect `noodle commands --json` for the same machine-readable usage, enum, and length metadata instead of guessing accepted values. The message is required (1–4000 chars). Pass `--json` and parse the envelope: success is `{ok:true,data:{reference,labels}}`; a `429` means the per-user hourly budget (5) is spent — report that it was not sent and never retry-loop. The CLI attaches only the disclosed light diagnostics automatically: CLI version, OS/platform, Node version. Nothing else is collected.
 
 ## Choose the structured fields
 

package/skills/codex/references/sdk-surface.md

@@ -24,6 +24,9 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 ### Connectors & flows
 
 - `connector("id").version(...).http({...})` or `.compute(...)` — declarative data connectors.
+- `connection("logical_id", source)` — stable downstream-account/workload identity used by a connector binding.
+- `bind(connector, { profile, connection })` — bind one connector alias to an exact credential profile and logical connection.
+- `googleWorkloadIdentity({ provider: variable(...), access })` — keyless deployed-workload access to Google APIs through WIF; configure with `noodle auth google`.
 - `when(...)` — declarative conditions for recorded flows (no native branching on runtime values).
 
 ### Resources & prompts
@@ -50,9 +53,7 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 
 ### Other
 
-- `bind`
 - `clientCredentials`
-- `connection`
 - `embeddedAssistant`
 - `externalExchange`
 - `gmailConnector`