@noodleseed/agent-kit 0.73.0 → 0.75.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.73.0",
+  "version": "0.75.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.75.0 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/claude-code/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.75.0 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/claude-code/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.75.0 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/claude-code/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.75.0 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/claude-code/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.75.0 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/claude-code/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.75.0 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/claude-code/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.75.0 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/claude-code/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.75.0 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/claude-code/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.75.0 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/claude-code/examples/acme-discovery/src/server.ts

@@ -200,8 +200,12 @@ const shortlistGetaway = tool('shortlist_getaway', {
 });
 
 // Grounding beyond the catalog: two controlled files answer policy/pricing/support questions with
-// citations, and Acme's live public site stays current through its search provider — no sync job,
-// no handwritten search tool. One declaration, one generated `search_destinations` capability.
+// citations, and Acme's live public site is crawled on deploy and re-crawled on the declared
+// refresh cadence — no sync job, no handwritten search tool. One declaration, one generated
+// `search_destinations` capability. The managed crawler and index are the defaults; a component
+// can instead bring its own via `crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })`
+// and `index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })`
+// — the code names the config, `noodle secrets|variables set` supplies the values.
 const destinations = knowledge('destinations', {
   title: 'Acme Getaways destinations',
   description: 'Public destination, pricing, cancellation, and support information.',
@@ -216,6 +220,7 @@ const destinations = knowledge('destinations', {
     site({
       origin: 'https://getaways.acme.example',
       include: ['/destinations/**', '/pricing', '/support'],
+      refresh: '12h',
     }),
   ],
 });

package/skills/claude-code/examples/food-ordering/README.md

@@ -158,6 +158,27 @@ hosted readiness. If it is interrupted, rerun the same command to resume the unf
 duplicate deployment. Use `--access org-members` for an org-wide internal demo. This example has no
 connector secrets and does not include tokens, caller-key mechanisms, or `.env.noodle` values.
 
+### Publish an immutable host archive
+
+Only when this demo is intentionally being prepared for an external directory, deploy it with exact public
+access and use the returned deployment ID to publish the matching local source:
+
+```sh
+noodle deploy --org demo --app food-ordering --env prod --access public
+noodle distributions publish <deployment-id> src/server.ts --target openai --category "Food & Drink"
+noodle distributions list <deployment-id> --target openai
+noodle distributions readiness <distribution-id> --status ready --note "Archive and review evidence checked"
+noodle distributions release <distribution-id> --visibility private
+noodle distributions grant <distribution-id> --expires-in 900
+noodle distributions download <distribution-id> --output food-ordering-openai.zip
+```
+
+Publish fails if local `src/server.ts` no longer compiles to that deployment's package snapshot. Readiness is
+an explicit operator claim, the private release keeps anonymous discovery off, and the grant prints one
+sensitive exact-version reviewer URL. Record `noodle distributions review` only after a human observes the
+real portal state. Public Noodle delivery, rollback, deprecation, and terminal revocation are separate explicit
+actions; none submits to a directory or claims acceptance.
+
 ## Demo Assets
 
 The packaged demo images live under `assets/`. The current app uses `assets/noodle-bowl.jpg` as the server

package/skills/claude-code/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.75.0 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/claude-code/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.75.0 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/claude-code/references/authoring-workflow.md

@@ -420,12 +420,14 @@ const product = knowledge('product', {
     file('./knowledge/faq.txt', { title: 'FAQ' }),
   ],
   sites: [
-    site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'] }),
+    site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'], refresh: '6h' }),
   ],
 });
 ```
 
-The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app and the provider keeps live-site content current. Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
+The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app, crawls declared sites, and re-crawls them on the `refresh` cadence (`15m`–`7d`, default daily; `noodle knowledge refresh <name>` crawls on demand). Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
+
+The managed crawler and managed index are the defaults and need no configuration. A component may instead bring its own crawler (`crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })` or `tavily(...)`) and/or its own index (`index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })` or `meilisearch({ host: variable(...), apiKey: secret(...) })`). The code declares only config names; operators supply values with `noodle secrets set` / `noodle variables set`, and deploy preflight fails closed naming any unset reference.
 
 ## Boundaries
 

package/skills/claude-code/references/cli-commands.md

@@ -59,6 +59,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | `noodle apps` | List or inspect hosted apps for an org (`apps list`/`apps inspect <app>`). |
 | `noodle envs` | List or inspect environments for an app (`envs list`/`envs inspect <env>`). |
 | `noodle deployments` | List or inspect individual deployments (`deployments list`/`deployments inspect <id>`). |
+| `noodle distributions` | Publish immutable host archives, record their lifecycle, and operate bounded delivery. |
 | `noodle service` | Query hosted service capabilities. |
 | `noodle login` | Authenticate with Noodle Seed Cloud. |
 | `noodle logout` | Clear saved credentials. |
@@ -86,7 +87,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | Command | What it does |
 | :-- | :-- |
 | `noodle audit` | Operator governance audit status and event queries. |
-| `noodle knowledge` | Operator-only knowledge components: list and status (ADR 0202). |
+| `noodle knowledge` | Operator-only knowledge components: list, status, and refresh (ADR 0202). |
 | `noodle logs` | View service/deployment logs. |
 | `noodle metrics` | MCP analytics for a deployed server (volume, sessions, latency percentiles, two-tier errors, tools, clients). Agents: `noodle metrics --agent-output` for a health verdict + next actions. |
 | `noodle events` | The per-request MCP event stream with status/tool/client filters; `--session <id>` replays one session in order. Agents: add `--json` and filter (`--status tool_error\|mcp_error`) when debugging. |

package/skills/claude-code/references/embedded-assistant.md

@@ -84,6 +84,8 @@ At most one public surface (`public` or `mixed`) and at most one authenticated s
 
 A public surface **must** declare `capabilities`: the exact positive allowlist it may reach. It is required by the type, and it is the whole externally reachable surface — a reviewer should read it in one screenful. Anything absent stays private, and a capability added to the server later is excluded until someone lists it. `authenticatedWebsite` may also take `capabilities` to narrow the in-app surface; omitted, it projects the whole server.
 
+A public `embedId` Web Component automatically attaches bounded anonymous same-origin Markdown page context, never DOM text. It is untrusted and nonpersistent, falls back to the URL alone on failure, yields to explicit `pageContext`, and never runs for authenticated or headless clients.
+
 ### Mixed surfaces: let a visitor sign in mid-conversation
 
 Add `signIn: true` to a public surface when some capabilities need a signed-in visitor. The surface becomes `mixed`: anonymous visitors start immediately, an identity-dependent capability stays **visible** so the assistant can offer it, and reaching for it raises a sign-in prompt instead of executing.

package/skills/claude-code/references/publishing.md

@@ -8,6 +8,7 @@ Directory requirements evolve. Identify the requested directory first and verify
 
 - Shared readiness gate
 - Distribution metadata source
+- Hosted immutable distribution
 - Directory-specific evidence
 - Submission boundary
 
@@ -35,6 +36,22 @@ Local or repository testing and public-directory submission are distinct packagi
 
 When an export reports `uploadArtifacts`, treat its output archive as an outer review kit. Extract it, follow the generated instructions, and upload only the named inner artifacts to their matching fields. Never substitute the outer kit for a nested single-purpose upload.
 
+## Hosted immutable distribution
+
+Publishing a deployment-bound archive is a hosted mutation. Run it only when the current request explicitly authorizes that exact deployment and target: `noodle distributions publish <deployment-id> [server.ts] --target <target>`. The command compiles local TypeScript and requires its package snapshot to exactly match the selected deployment before it uploads anything. It uses the endpoint and package identity returned by the service; never substitute a local URL or a different deployment.
+
+Use `noodle distributions list <deployment-id>` to discover immutable versions, `noodle distributions inspect <distribution-id>` to inspect one, and `noodle distributions download <distribution-id> --output <archive.zip>` to retrieve its exact archive. Download verifies the service length and digest before an atomic local write; a failed verification must leave no output file.
+
+Lifecycle and delivery are separate mutations. Run `readiness`, `review`, `release`, `rollback`, `deprecate`, `revoke`, or `grant` only when the request explicitly authorizes that exact distribution and action. Inspect first when the active state or version is not already known.
+
+Set readiness from evidence you can verify. Record `review` only from a real human-observed host status; never infer submission, approval, or publication from a generated archive or a successful Noodle command, and never put reviewer credentials or secrets in feedback.
+
+`release --visibility private` creates or advances a stable Noodle channel without anonymous discovery; `release --visibility public` enables Noodle public delivery only. Both still require the underlying MCP deployment to use exact public access. Neither action publishes to an external directory.
+
+`grant` returns one short-lived, exact-version bearer URL. Treat the complete URL as a secret, disclose it only to the authorized reviewer, and do not paste it into source, logs, issues, or durable docs. `rollback` moves only the channel pointer to an older ready version; `deprecate` stops delivery and `revoke` is terminal.
+
+A hosted archive is still a submission candidate. Creating, listing, inspecting, downloading, releasing, or granting it does not submit it to an external directory, satisfy review, or publish a host listing.
+
 ## Directory-specific evidence
 
 Read the selected directory’s current official submission documentation at review time. Record each additional requirement separately from the shared checklist, including listing fields, identity verification, test credentials, screenshots, policy declarations, review limits, and appeal or resubmission steps. Never project one directory’s requirements onto another.

package/skills/claude-code/references/sdk-surface.md

@@ -53,18 +53,22 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 
 ### Other
 
+- `algolia`
 - `authenticatedWebsite`
 - `clientCredentials`
 - `customerEndpoint`
 - `embeddedAssistant`
 - `externalExchange`
 - `file`
+- `firecrawl`
 - `gmailConnector`
 - `knowledge`
 - `managedSecret`
+- `meilisearch`
 - `openAICompatible`
 - `publicWebsite`
 - `site`
+- `tavily`
 
 ## Authoring signatures
 

package/skills/claude-code/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.75.0 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/claude-code/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.75.0 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/claude-code/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.75.0 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications
 

package/skills/codex/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.75.0 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/codex/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.75.0 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/codex/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.75.0 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/codex/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.75.0 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/codex/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.75.0 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/codex/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.75.0 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/codex/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.75.0 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/codex/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.75.0 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/codex/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.75.0 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/codex/examples/acme-discovery/src/server.ts

@@ -200,8 +200,12 @@ const shortlistGetaway = tool('shortlist_getaway', {
 });
 
 // Grounding beyond the catalog: two controlled files answer policy/pricing/support questions with
-// citations, and Acme's live public site stays current through its search provider — no sync job,
-// no handwritten search tool. One declaration, one generated `search_destinations` capability.
+// citations, and Acme's live public site is crawled on deploy and re-crawled on the declared
+// refresh cadence — no sync job, no handwritten search tool. One declaration, one generated
+// `search_destinations` capability. The managed crawler and index are the defaults; a component
+// can instead bring its own via `crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })`
+// and `index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })`
+// — the code names the config, `noodle secrets|variables set` supplies the values.
 const destinations = knowledge('destinations', {
   title: 'Acme Getaways destinations',
   description: 'Public destination, pricing, cancellation, and support information.',
@@ -216,6 +220,7 @@ const destinations = knowledge('destinations', {
     site({
       origin: 'https://getaways.acme.example',
       include: ['/destinations/**', '/pricing', '/support'],
+      refresh: '12h',
     }),
   ],
 });

package/skills/codex/examples/food-ordering/README.md

@@ -158,6 +158,27 @@ hosted readiness. If it is interrupted, rerun the same command to resume the unf
 duplicate deployment. Use `--access org-members` for an org-wide internal demo. This example has no
 connector secrets and does not include tokens, caller-key mechanisms, or `.env.noodle` values.
 
+### Publish an immutable host archive
+
+Only when this demo is intentionally being prepared for an external directory, deploy it with exact public
+access and use the returned deployment ID to publish the matching local source:
+
+```sh
+noodle deploy --org demo --app food-ordering --env prod --access public
+noodle distributions publish <deployment-id> src/server.ts --target openai --category "Food & Drink"
+noodle distributions list <deployment-id> --target openai
+noodle distributions readiness <distribution-id> --status ready --note "Archive and review evidence checked"
+noodle distributions release <distribution-id> --visibility private
+noodle distributions grant <distribution-id> --expires-in 900
+noodle distributions download <distribution-id> --output food-ordering-openai.zip
+```
+
+Publish fails if local `src/server.ts` no longer compiles to that deployment's package snapshot. Readiness is
+an explicit operator claim, the private release keeps anonymous discovery off, and the grant prints one
+sensitive exact-version reviewer URL. Record `noodle distributions review` only after a human observes the
+real portal state. Public Noodle delivery, rollback, deprecation, and terminal revocation are separate explicit
+actions; none submits to a directory or claims acceptance.
+
 ## Demo Assets
 
 The packaged demo images live under `assets/`. The current app uses `assets/noodle-bowl.jpg` as the server

package/skills/codex/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.75.0 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/codex/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.75.0 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/codex/references/authoring-workflow.md

@@ -420,12 +420,14 @@ const product = knowledge('product', {
     file('./knowledge/faq.txt', { title: 'FAQ' }),
   ],
   sites: [
-    site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'] }),
+    site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'], refresh: '6h' }),
   ],
 });
 ```
 
-The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app and the provider keeps live-site content current. Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
+The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app, crawls declared sites, and re-crawls them on the `refresh` cadence (`15m`–`7d`, default daily; `noodle knowledge refresh <name>` crawls on demand). Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
+
+The managed crawler and managed index are the defaults and need no configuration. A component may instead bring its own crawler (`crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })` or `tavily(...)`) and/or its own index (`index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })` or `meilisearch({ host: variable(...), apiKey: secret(...) })`). The code declares only config names; operators supply values with `noodle secrets set` / `noodle variables set`, and deploy preflight fails closed naming any unset reference.
 
 ## Boundaries
 

package/skills/codex/references/cli-commands.md

@@ -59,6 +59,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | `noodle apps` | List or inspect hosted apps for an org (`apps list`/`apps inspect <app>`). |
 | `noodle envs` | List or inspect environments for an app (`envs list`/`envs inspect <env>`). |
 | `noodle deployments` | List or inspect individual deployments (`deployments list`/`deployments inspect <id>`). |
+| `noodle distributions` | Publish immutable host archives, record their lifecycle, and operate bounded delivery. |
 | `noodle service` | Query hosted service capabilities. |
 | `noodle login` | Authenticate with Noodle Seed Cloud. |
 | `noodle logout` | Clear saved credentials. |
@@ -86,7 +87,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
 | Command | What it does |
 | :-- | :-- |
 | `noodle audit` | Operator governance audit status and event queries. |
-| `noodle knowledge` | Operator-only knowledge components: list and status (ADR 0202). |
+| `noodle knowledge` | Operator-only knowledge components: list, status, and refresh (ADR 0202). |
 | `noodle logs` | View service/deployment logs. |
 | `noodle metrics` | MCP analytics for a deployed server (volume, sessions, latency percentiles, two-tier errors, tools, clients). Agents: `noodle metrics --agent-output` for a health verdict + next actions. |
 | `noodle events` | The per-request MCP event stream with status/tool/client filters; `--session <id>` replays one session in order. Agents: add `--json` and filter (`--status tool_error\|mcp_error`) when debugging. |

package/skills/codex/references/embedded-assistant.md

@@ -84,6 +84,8 @@ At most one public surface (`public` or `mixed`) and at most one authenticated s
 
 A public surface **must** declare `capabilities`: the exact positive allowlist it may reach. It is required by the type, and it is the whole externally reachable surface — a reviewer should read it in one screenful. Anything absent stays private, and a capability added to the server later is excluded until someone lists it. `authenticatedWebsite` may also take `capabilities` to narrow the in-app surface; omitted, it projects the whole server.
 
+A public `embedId` Web Component automatically attaches bounded anonymous same-origin Markdown page context, never DOM text. It is untrusted and nonpersistent, falls back to the URL alone on failure, yields to explicit `pageContext`, and never runs for authenticated or headless clients.
+
 ### Mixed surfaces: let a visitor sign in mid-conversation
 
 Add `signIn: true` to a public surface when some capabilities need a signed-in visitor. The surface becomes `mixed`: anonymous visitors start immediately, an identity-dependent capability stays **visible** so the assistant can offer it, and reaching for it raises a sign-in prompt instead of executing.

package/skills/codex/references/publishing.md

@@ -8,6 +8,7 @@ Directory requirements evolve. Identify the requested directory first and verify
 
 - Shared readiness gate
 - Distribution metadata source
+- Hosted immutable distribution
 - Directory-specific evidence
 - Submission boundary
 
@@ -35,6 +36,22 @@ Local or repository testing and public-directory submission are distinct packagi
 
 When an export reports `uploadArtifacts`, treat its output archive as an outer review kit. Extract it, follow the generated instructions, and upload only the named inner artifacts to their matching fields. Never substitute the outer kit for a nested single-purpose upload.
 
+## Hosted immutable distribution
+
+Publishing a deployment-bound archive is a hosted mutation. Run it only when the current request explicitly authorizes that exact deployment and target: `noodle distributions publish <deployment-id> [server.ts] --target <target>`. The command compiles local TypeScript and requires its package snapshot to exactly match the selected deployment before it uploads anything. It uses the endpoint and package identity returned by the service; never substitute a local URL or a different deployment.
+
+Use `noodle distributions list <deployment-id>` to discover immutable versions, `noodle distributions inspect <distribution-id>` to inspect one, and `noodle distributions download <distribution-id> --output <archive.zip>` to retrieve its exact archive. Download verifies the service length and digest before an atomic local write; a failed verification must leave no output file.
+
+Lifecycle and delivery are separate mutations. Run `readiness`, `review`, `release`, `rollback`, `deprecate`, `revoke`, or `grant` only when the request explicitly authorizes that exact distribution and action. Inspect first when the active state or version is not already known.
+
+Set readiness from evidence you can verify. Record `review` only from a real human-observed host status; never infer submission, approval, or publication from a generated archive or a successful Noodle command, and never put reviewer credentials or secrets in feedback.
+
+`release --visibility private` creates or advances a stable Noodle channel without anonymous discovery; `release --visibility public` enables Noodle public delivery only. Both still require the underlying MCP deployment to use exact public access. Neither action publishes to an external directory.
+
+`grant` returns one short-lived, exact-version bearer URL. Treat the complete URL as a secret, disclose it only to the authorized reviewer, and do not paste it into source, logs, issues, or durable docs. `rollback` moves only the channel pointer to an older ready version; `deprecate` stops delivery and `revoke` is terminal.
+
+A hosted archive is still a submission candidate. Creating, listing, inspecting, downloading, releasing, or granting it does not submit it to an external directory, satisfy review, or publish a host listing.
+
 ## Directory-specific evidence
 
 Read the selected directory’s current official submission documentation at review time. Record each additional requirement separately from the shared checklist, including listing fields, identity verification, test credentials, screenshots, policy declarations, review limits, and appeal or resubmission steps. Never project one directory’s requirements onto another.

package/skills/codex/references/sdk-surface.md

@@ -53,18 +53,22 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 
 ### Other
 
+- `algolia`
 - `authenticatedWebsite`
 - `clientCredentials`
 - `customerEndpoint`
 - `embeddedAssistant`
 - `externalExchange`
 - `file`
+- `firecrawl`
 - `gmailConnector`
 - `knowledge`
 - `managedSecret`
+- `meilisearch`
 - `openAICompatible`
 - `publicWebsite`
 - `site`
+- `tavily`
 
 ## Authoring signatures
 

package/skills/codex/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.75.0 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/codex/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.75.0 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/codex/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.73.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.75.0 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications