@noodleseed/agent-kit 0.72.0 → 0.74.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.72.0",
+  "version": "0.74.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.74.0 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/claude-code/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.74.0 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/claude-code/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.74.0 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/claude-code/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.74.0 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/claude-code/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.74.0 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/claude-code/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.74.0 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/claude-code/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.74.0 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/claude-code/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.74.0 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/claude-code/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.74.0 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/claude-code/examples/food-ordering/README.md

@@ -20,7 +20,7 @@ private customer data.
 | Durable cart state | `server(..., { state: { handles: { cart } }, use: { state } })` with caller scope and revision checks |
 | React app runtime kit | `@noodleseed/one/react` supplies app flow, shell/nav/view, async state, form, quantity, choice, and handoff primitives |
 | Multi-step widget flow | One React shell navigates stores, menu, item customization, cart, review, and handoff views through `useAppFlow` |
-| Invocation context | `server.context` sets locale/time-zone defaults, derives an ambient service area/date, and makes the same snapshot available to tools and the reserved `noodle_context` MCP adapter |
+| Invocation context | `server.context` sets locale/time-zone defaults, derives an ambient service area/date, and exposes optional host-supplied coordinates to tools and the reserved `noodle_context` MCP adapter; location is an untrusted convenience hint, never an authorization signal or a substitute for explicit input |
 | Structured missing input | `plan_order` uses `ctx.elicit` to collect a fulfilment method and date through embedded/headless forms, standard bidirectional elicitation, a linked MCP App form, or an exact structured conversational retry on stateless hosts |
 | Model-visible widget state | `useUpdateModelContext` publishes one cohesive replacement snapshot when supported; `useWidgetLifecycle` auto-publishes mounted/cancelled/dismissed and reports author-owned submitted milestones for future context (not host-presentation proof), while the user-triggered submit pairs `useSendFollowUpMessage` for an immediate reply |
 | Handoff | `handoff.allowedDomains` allows only `https://orders.example.com` checkout URLs |
@@ -158,6 +158,27 @@ hosted readiness. If it is interrupted, rerun the same command to resume the unf
 duplicate deployment. Use `--access org-members` for an org-wide internal demo. This example has no
 connector secrets and does not include tokens, caller-key mechanisms, or `.env.noodle` values.
 
+### Publish an immutable host archive
+
+Only when this demo is intentionally being prepared for an external directory, deploy it with exact public
+access and use the returned deployment ID to publish the matching local source:
+
+```sh
+noodle deploy --org demo --app food-ordering --env prod --access public
+noodle distributions publish <deployment-id> src/server.ts --target openai --category "Food & Drink"
+noodle distributions list <deployment-id> --target openai
+noodle distributions readiness <distribution-id> --status ready --note "Archive and review evidence checked"
+noodle distributions release <distribution-id> --visibility private
+noodle distributions grant <distribution-id> --expires-in 900
+noodle distributions download <distribution-id> --output food-ordering-openai.zip
+```
+
+Publish fails if local `src/server.ts` no longer compiles to that deployment's package snapshot. Readiness is
+an explicit operator claim, the private release keeps anonymous discovery off, and the grant prints one
+sensitive exact-version reviewer URL. Record `noodle distributions review` only after a human observes the
+real portal state. Public Noodle delivery, rollback, deprecation, and terminal revocation are separate explicit
+actions; none submits to a directory or claims acceptance.
+
 ## Demo Assets
 
 The packaged demo images live under `assets/`. The current app uses `assets/noodle-bowl.jpg` as the server

package/skills/claude-code/examples/food-ordering/src/server.ts

@@ -366,6 +366,10 @@ export default server(
         featuredItems: z.array(menuItemShape).max(20),
         localDate: z.string(),
         serviceArea: z.string(),
+        location: z.object({
+          latitude: z.number().optional(),
+          longitude: z.number().optional(),
+        }),
         fallback: z.string(),
       }),
       fulfil: ({ input, context }) => ({
@@ -375,6 +379,10 @@ export default server(
         featuredItems: menu,
         localDate: context.temporal.localDate,
         serviceArea: context.ambient.serviceArea,
+        location: {
+          latitude: context.location.latitude.optional(),
+          longitude: context.location.longitude.optional(),
+        },
         fallback: 'Open stores: Harbor Noodles (Noodles), Garden Wraps (Vegetarian).',
       }),
       viewTitle: 'Food ordering',

package/skills/claude-code/examples/food-ordering/test/server.test.ts

@@ -78,6 +78,8 @@ describe('food-ordering example', () => {
     expect(JSON.stringify(tools.get('open_ordering'))).toContain('featuredItems');
     expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.temporal.localDate}');
     expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.ambient.serviceArea}');
+    expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.location.latitude}');
+    expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.location.longitude}');
     expect(JSON.stringify(tools.get('sync_cart'))).toContain('revision');
     expect(tools.get('sync_cart')?.annotations?.confirm).toBe(false);
     expect(tools.get('prepare_checkout')?.annotations?.confirm).toBe(false);
@@ -111,7 +113,7 @@ describe('food-ordering example', () => {
     const distribution = app.toDistributionMetadata();
     expect(distribution).toMatchObject({
       schemaVersion: 1,
-      listing: { summary: expect.stringContaining('Browse local food') },
+      listing: { summary: 'Build a pickup noodle order.' },
       assets: {
         icon: { alt: 'Food Ordering noodle bowl' },
         screenshots: [

package/skills/claude-code/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.74.0 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/claude-code/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.74.0 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/claude-code/references/authoring-workflow.md

@@ -341,6 +341,8 @@ context: {
 
 Ambient providers are recorded as fulfilment data at author time, may call read-only connector operations only, and have a declared output schema. Later fulfilments read `${context.temporal.localDate}`, `${context.temporal.timeZone}`, `${context.ambient.defaultTeamId}`, and `${context.ambientStatus}`. If ambient resolution fails, the status is `unavailable`; never invent the missing business facts. Ambient/model-visible context is capped at 16 KiB serialized JSON, depth 8, and 128 entries per container; credential-shaped keys are rejected.
 
+Direct MCP tool calls may also expose an optional, untrusted client hint as `${context.location.latitude}` and `${context.location.longitude}`, with optional `${context.location.city}`, `${context.location.region}`, `${context.location.country}`, and `${context.location.timeZone}`. Noodle exposes location only when the host supplies one complete, finite, in-range coordinate pair. Treat it as a proximity convenience only: never use it for authentication, authorization, policy, compliance, or delivery-address proof. An explicit tool input must override the hint. When location is absent and the operation needs it, ask the user or return a structured location-required result; never substitute a fixed default location.
+
 ## Ask for structured missing input
 
 Use `ctx.elicit` inside a tool fulfilment when execution needs one bounded value from the user. The call records an `elicit` flow step and returns its symbolic scope; it does not prompt at author time:

package/skills/claude-code/references/cli-commands.md

@@ -59,6 +59,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | `noodle apps` | List or inspect hosted apps for an org (`apps list`/`apps inspect <app>`). |
 | `noodle envs` | List or inspect environments for an app (`envs list`/`envs inspect <env>`). |
 | `noodle deployments` | List or inspect individual deployments (`deployments list`/`deployments inspect <id>`). |
+| `noodle distributions` | Publish immutable host archives, record their lifecycle, and operate bounded delivery. |
 | `noodle service` | Query hosted service capabilities. |
 | `noodle login` | Authenticate with Noodle Seed Cloud. |
 | `noodle logout` | Clear saved credentials. |

package/skills/claude-code/references/publishing.md

@@ -8,6 +8,7 @@ Directory requirements evolve. Identify the requested directory first and verify
 
 - Shared readiness gate
 - Distribution metadata source
+- Hosted immutable distribution
 - Directory-specific evidence
 - Submission boundary
 
@@ -35,6 +36,22 @@ Local or repository testing and public-directory submission are distinct packagi
 
 When an export reports `uploadArtifacts`, treat its output archive as an outer review kit. Extract it, follow the generated instructions, and upload only the named inner artifacts to their matching fields. Never substitute the outer kit for a nested single-purpose upload.
 
+## Hosted immutable distribution
+
+Publishing a deployment-bound archive is a hosted mutation. Run it only when the current request explicitly authorizes that exact deployment and target: `noodle distributions publish <deployment-id> [server.ts] --target <target>`. The command compiles local TypeScript and requires its package snapshot to exactly match the selected deployment before it uploads anything. It uses the endpoint and package identity returned by the service; never substitute a local URL or a different deployment.
+
+Use `noodle distributions list <deployment-id>` to discover immutable versions, `noodle distributions inspect <distribution-id>` to inspect one, and `noodle distributions download <distribution-id> --output <archive.zip>` to retrieve its exact archive. Download verifies the service length and digest before an atomic local write; a failed verification must leave no output file.
+
+Lifecycle and delivery are separate mutations. Run `readiness`, `review`, `release`, `rollback`, `deprecate`, `revoke`, or `grant` only when the request explicitly authorizes that exact distribution and action. Inspect first when the active state or version is not already known.
+
+Set readiness from evidence you can verify. Record `review` only from a real human-observed host status; never infer submission, approval, or publication from a generated archive or a successful Noodle command, and never put reviewer credentials or secrets in feedback.
+
+`release --visibility private` creates or advances a stable Noodle channel without anonymous discovery; `release --visibility public` enables Noodle public delivery only. Both still require the underlying MCP deployment to use exact public access. Neither action publishes to an external directory.
+
+`grant` returns one short-lived, exact-version bearer URL. Treat the complete URL as a secret, disclose it only to the authorized reviewer, and do not paste it into source, logs, issues, or durable docs. `rollback` moves only the channel pointer to an older ready version; `deprecate` stops delivery and `revoke` is terminal.
+
+A hosted archive is still a submission candidate. Creating, listing, inspecting, downloading, releasing, or granting it does not submit it to an external directory, satisfy review, or publish a host listing.
+
 ## Directory-specific evidence
 
 Read the selected directory’s current official submission documentation at review time. Record each additional requirement separately from the shared checklist, including listing fields, identity verification, test credentials, screenshots, policy declarations, review limits, and appeal or resubmission steps. Never project one directory’s requirements onto another.

package/skills/claude-code/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.74.0 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/claude-code/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.74.0 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/claude-code/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.74.0 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications
 

package/skills/codex/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.74.0 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/codex/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.74.0 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/codex/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.74.0 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/codex/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.74.0 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/codex/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.74.0 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/codex/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.74.0 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/codex/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.74.0 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/codex/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.74.0 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/codex/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.74.0 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/codex/examples/food-ordering/README.md

@@ -20,7 +20,7 @@ private customer data.
 | Durable cart state | `server(..., { state: { handles: { cart } }, use: { state } })` with caller scope and revision checks |
 | React app runtime kit | `@noodleseed/one/react` supplies app flow, shell/nav/view, async state, form, quantity, choice, and handoff primitives |
 | Multi-step widget flow | One React shell navigates stores, menu, item customization, cart, review, and handoff views through `useAppFlow` |
-| Invocation context | `server.context` sets locale/time-zone defaults, derives an ambient service area/date, and makes the same snapshot available to tools and the reserved `noodle_context` MCP adapter |
+| Invocation context | `server.context` sets locale/time-zone defaults, derives an ambient service area/date, and exposes optional host-supplied coordinates to tools and the reserved `noodle_context` MCP adapter; location is an untrusted convenience hint, never an authorization signal or a substitute for explicit input |
 | Structured missing input | `plan_order` uses `ctx.elicit` to collect a fulfilment method and date through embedded/headless forms, standard bidirectional elicitation, a linked MCP App form, or an exact structured conversational retry on stateless hosts |
 | Model-visible widget state | `useUpdateModelContext` publishes one cohesive replacement snapshot when supported; `useWidgetLifecycle` auto-publishes mounted/cancelled/dismissed and reports author-owned submitted milestones for future context (not host-presentation proof), while the user-triggered submit pairs `useSendFollowUpMessage` for an immediate reply |
 | Handoff | `handoff.allowedDomains` allows only `https://orders.example.com` checkout URLs |
@@ -158,6 +158,27 @@ hosted readiness. If it is interrupted, rerun the same command to resume the unf
 duplicate deployment. Use `--access org-members` for an org-wide internal demo. This example has no
 connector secrets and does not include tokens, caller-key mechanisms, or `.env.noodle` values.
 
+### Publish an immutable host archive
+
+Only when this demo is intentionally being prepared for an external directory, deploy it with exact public
+access and use the returned deployment ID to publish the matching local source:
+
+```sh
+noodle deploy --org demo --app food-ordering --env prod --access public
+noodle distributions publish <deployment-id> src/server.ts --target openai --category "Food & Drink"
+noodle distributions list <deployment-id> --target openai
+noodle distributions readiness <distribution-id> --status ready --note "Archive and review evidence checked"
+noodle distributions release <distribution-id> --visibility private
+noodle distributions grant <distribution-id> --expires-in 900
+noodle distributions download <distribution-id> --output food-ordering-openai.zip
+```
+
+Publish fails if local `src/server.ts` no longer compiles to that deployment's package snapshot. Readiness is
+an explicit operator claim, the private release keeps anonymous discovery off, and the grant prints one
+sensitive exact-version reviewer URL. Record `noodle distributions review` only after a human observes the
+real portal state. Public Noodle delivery, rollback, deprecation, and terminal revocation are separate explicit
+actions; none submits to a directory or claims acceptance.
+
 ## Demo Assets
 
 The packaged demo images live under `assets/`. The current app uses `assets/noodle-bowl.jpg` as the server

package/skills/codex/examples/food-ordering/src/server.ts

@@ -366,6 +366,10 @@ export default server(
         featuredItems: z.array(menuItemShape).max(20),
         localDate: z.string(),
         serviceArea: z.string(),
+        location: z.object({
+          latitude: z.number().optional(),
+          longitude: z.number().optional(),
+        }),
         fallback: z.string(),
       }),
       fulfil: ({ input, context }) => ({
@@ -375,6 +379,10 @@ export default server(
         featuredItems: menu,
         localDate: context.temporal.localDate,
         serviceArea: context.ambient.serviceArea,
+        location: {
+          latitude: context.location.latitude.optional(),
+          longitude: context.location.longitude.optional(),
+        },
         fallback: 'Open stores: Harbor Noodles (Noodles), Garden Wraps (Vegetarian).',
       }),
       viewTitle: 'Food ordering',

package/skills/codex/examples/food-ordering/test/server.test.ts

@@ -78,6 +78,8 @@ describe('food-ordering example', () => {
     expect(JSON.stringify(tools.get('open_ordering'))).toContain('featuredItems');
     expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.temporal.localDate}');
     expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.ambient.serviceArea}');
+    expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.location.latitude}');
+    expect(JSON.stringify(tools.get('open_ordering'))).toContain('${context.location.longitude}');
     expect(JSON.stringify(tools.get('sync_cart'))).toContain('revision');
     expect(tools.get('sync_cart')?.annotations?.confirm).toBe(false);
     expect(tools.get('prepare_checkout')?.annotations?.confirm).toBe(false);
@@ -111,7 +113,7 @@ describe('food-ordering example', () => {
     const distribution = app.toDistributionMetadata();
     expect(distribution).toMatchObject({
       schemaVersion: 1,
-      listing: { summary: expect.stringContaining('Browse local food') },
+      listing: { summary: 'Build a pickup noodle order.' },
       assets: {
         icon: { alt: 'Food Ordering noodle bowl' },
         screenshots: [

package/skills/codex/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.74.0 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/codex/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.74.0 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/codex/references/authoring-workflow.md

@@ -341,6 +341,8 @@ context: {
 
 Ambient providers are recorded as fulfilment data at author time, may call read-only connector operations only, and have a declared output schema. Later fulfilments read `${context.temporal.localDate}`, `${context.temporal.timeZone}`, `${context.ambient.defaultTeamId}`, and `${context.ambientStatus}`. If ambient resolution fails, the status is `unavailable`; never invent the missing business facts. Ambient/model-visible context is capped at 16 KiB serialized JSON, depth 8, and 128 entries per container; credential-shaped keys are rejected.
 
+Direct MCP tool calls may also expose an optional, untrusted client hint as `${context.location.latitude}` and `${context.location.longitude}`, with optional `${context.location.city}`, `${context.location.region}`, `${context.location.country}`, and `${context.location.timeZone}`. Noodle exposes location only when the host supplies one complete, finite, in-range coordinate pair. Treat it as a proximity convenience only: never use it for authentication, authorization, policy, compliance, or delivery-address proof. An explicit tool input must override the hint. When location is absent and the operation needs it, ask the user or return a structured location-required result; never substitute a fixed default location.
+
 ## Ask for structured missing input
 
 Use `ctx.elicit` inside a tool fulfilment when execution needs one bounded value from the user. The call records an `elicit` flow step and returns its symbolic scope; it does not prompt at author time:

package/skills/codex/references/cli-commands.md

@@ -59,6 +59,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | `noodle apps` | List or inspect hosted apps for an org (`apps list`/`apps inspect <app>`). |
 | `noodle envs` | List or inspect environments for an app (`envs list`/`envs inspect <env>`). |
 | `noodle deployments` | List or inspect individual deployments (`deployments list`/`deployments inspect <id>`). |
+| `noodle distributions` | Publish immutable host archives, record their lifecycle, and operate bounded delivery. |
 | `noodle service` | Query hosted service capabilities. |
 | `noodle login` | Authenticate with Noodle Seed Cloud. |
 | `noodle logout` | Clear saved credentials. |

package/skills/codex/references/publishing.md

@@ -8,6 +8,7 @@ Directory requirements evolve. Identify the requested directory first and verify
 
 - Shared readiness gate
 - Distribution metadata source
+- Hosted immutable distribution
 - Directory-specific evidence
 - Submission boundary
 
@@ -35,6 +36,22 @@ Local or repository testing and public-directory submission are distinct packagi
 
 When an export reports `uploadArtifacts`, treat its output archive as an outer review kit. Extract it, follow the generated instructions, and upload only the named inner artifacts to their matching fields. Never substitute the outer kit for a nested single-purpose upload.
 
+## Hosted immutable distribution
+
+Publishing a deployment-bound archive is a hosted mutation. Run it only when the current request explicitly authorizes that exact deployment and target: `noodle distributions publish <deployment-id> [server.ts] --target <target>`. The command compiles local TypeScript and requires its package snapshot to exactly match the selected deployment before it uploads anything. It uses the endpoint and package identity returned by the service; never substitute a local URL or a different deployment.
+
+Use `noodle distributions list <deployment-id>` to discover immutable versions, `noodle distributions inspect <distribution-id>` to inspect one, and `noodle distributions download <distribution-id> --output <archive.zip>` to retrieve its exact archive. Download verifies the service length and digest before an atomic local write; a failed verification must leave no output file.
+
+Lifecycle and delivery are separate mutations. Run `readiness`, `review`, `release`, `rollback`, `deprecate`, `revoke`, or `grant` only when the request explicitly authorizes that exact distribution and action. Inspect first when the active state or version is not already known.
+
+Set readiness from evidence you can verify. Record `review` only from a real human-observed host status; never infer submission, approval, or publication from a generated archive or a successful Noodle command, and never put reviewer credentials or secrets in feedback.
+
+`release --visibility private` creates or advances a stable Noodle channel without anonymous discovery; `release --visibility public` enables Noodle public delivery only. Both still require the underlying MCP deployment to use exact public access. Neither action publishes to an external directory.
+
+`grant` returns one short-lived, exact-version bearer URL. Treat the complete URL as a secret, disclose it only to the authorized reviewer, and do not paste it into source, logs, issues, or durable docs. `rollback` moves only the channel pointer to an older ready version; `deprecate` stops delivery and `revoke` is terminal.
+
+A hosted archive is still a submission candidate. Creating, listing, inspecting, downloading, releasing, or granting it does not submit it to an external directory, satisfy review, or publish a host listing.
+
 ## Directory-specific evidence
 
 Read the selected directory’s current official submission documentation at review time. Record each additional requirement separately from the shared checklist, including listing fields, identity verification, test credentials, screenshots, policy declarations, review limits, and appeal or resubmission steps. Never project one directory’s requirements onto another.

package/skills/codex/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.74.0 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/codex/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.74.0 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/codex/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.72.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.74.0 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications