@noodleseed/agent-kit 0.74.0 → 0.75.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. package/manifest.json +267 -267
  2. package/package.json +1 -1
  3. package/skills/claude-code/SKILL.md +1 -1
  4. package/skills/claude-code/authoring-mcp-servers/SKILL.md +1 -1
  5. package/skills/claude-code/building-mcp-apps/SKILL.md +1 -1
  6. package/skills/claude-code/connecting-apis-to-mcp/SKILL.md +1 -1
  7. package/skills/claude-code/creating-product-agent-guides/SKILL.md +1 -1
  8. package/skills/claude-code/debugging-mcp-delivery/SKILL.md +1 -1
  9. package/skills/claude-code/deploying-mcp-services/SKILL.md +1 -1
  10. package/skills/claude-code/designing-mcp-products/SKILL.md +1 -1
  11. package/skills/claude-code/embedding-mcp-assistants/SKILL.md +1 -1
  12. package/skills/claude-code/examples/acme-discovery/src/server.ts +7 -2
  13. package/skills/claude-code/executing-noodle-plans/SKILL.md +1 -1
  14. package/skills/claude-code/publishing-mcp-integrations/SKILL.md +1 -1
  15. package/skills/claude-code/references/authoring-workflow.md +4 -2
  16. package/skills/claude-code/references/cli-commands.md +1 -1
  17. package/skills/claude-code/references/embedded-assistant.md +2 -0
  18. package/skills/claude-code/references/sdk-surface.md +4 -0
  19. package/skills/claude-code/reporting-noodle-feedback/SKILL.md +1 -1
  20. package/skills/claude-code/verifying-mcp-delivery/SKILL.md +1 -1
  21. package/skills/claude-code/wrapping-existing-applications/SKILL.md +1 -1
  22. package/skills/codex/SKILL.md +1 -1
  23. package/skills/codex/authoring-mcp-servers/SKILL.md +1 -1
  24. package/skills/codex/building-mcp-apps/SKILL.md +1 -1
  25. package/skills/codex/connecting-apis-to-mcp/SKILL.md +1 -1
  26. package/skills/codex/creating-product-agent-guides/SKILL.md +1 -1
  27. package/skills/codex/debugging-mcp-delivery/SKILL.md +1 -1
  28. package/skills/codex/deploying-mcp-services/SKILL.md +1 -1
  29. package/skills/codex/designing-mcp-products/SKILL.md +1 -1
  30. package/skills/codex/embedding-mcp-assistants/SKILL.md +1 -1
  31. package/skills/codex/examples/acme-discovery/src/server.ts +7 -2
  32. package/skills/codex/executing-noodle-plans/SKILL.md +1 -1
  33. package/skills/codex/publishing-mcp-integrations/SKILL.md +1 -1
  34. package/skills/codex/references/authoring-workflow.md +4 -2
  35. package/skills/codex/references/cli-commands.md +1 -1
  36. package/skills/codex/references/embedded-assistant.md +2 -0
  37. package/skills/codex/references/sdk-surface.md +4 -0
  38. package/skills/codex/reporting-noodle-feedback/SKILL.md +1 -1
  39. package/skills/codex/verifying-mcp-delivery/SKILL.md +1 -1
  40. package/skills/codex/wrapping-existing-applications/SKILL.md +1 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@noodleseed/agent-kit",
3
- "version": "0.74.0",
3
+ "version": "0.75.0",
4
4
  "private": false,
5
5
  "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
6
6
  "license": "Apache-2.0",
@@ -3,7 +3,7 @@ name: noodle-seed
3
3
  description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:13ddce01769caae4 -->
6
+ <!-- noodle-skill version:0.75.0 hash:13ddce01769caae4 -->
7
7
 
8
8
  # Noodle Seed
9
9
 
@@ -3,7 +3,7 @@ name: authoring-mcp-servers
3
3
  description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:11523cb33b9473c0 -->
6
+ <!-- noodle-skill version:0.75.0 hash:11523cb33b9473c0 -->
7
7
 
8
8
  # authoring-mcp-servers
9
9
 
@@ -3,7 +3,7 @@ name: building-mcp-apps
3
3
  description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:9fd67d4d24328e15 -->
6
+ <!-- noodle-skill version:0.75.0 hash:9fd67d4d24328e15 -->
7
7
 
8
8
  # building-mcp-apps
9
9
 
@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
3
3
  description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:21bbd3ec441ffd30 -->
6
+ <!-- noodle-skill version:0.75.0 hash:21bbd3ec441ffd30 -->
7
7
 
8
8
  # connecting-apis-to-mcp
9
9
 
@@ -3,7 +3,7 @@ name: creating-product-agent-guides
3
3
  description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:0fa48a82fe836cf0 -->
6
+ <!-- noodle-skill version:0.75.0 hash:0fa48a82fe836cf0 -->
7
7
 
8
8
  # creating-product-agent-guides
9
9
 
@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
3
3
  description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:aa715bae12041d7c -->
6
+ <!-- noodle-skill version:0.75.0 hash:aa715bae12041d7c -->
7
7
 
8
8
  # debugging-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: deploying-mcp-services
3
3
  description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:93e735b7ffb45df1 -->
6
+ <!-- noodle-skill version:0.75.0 hash:93e735b7ffb45df1 -->
7
7
 
8
8
  # deploying-mcp-services
9
9
 
@@ -3,7 +3,7 @@ name: designing-mcp-products
3
3
  description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:78a6f181b61f92f1 -->
6
+ <!-- noodle-skill version:0.75.0 hash:78a6f181b61f92f1 -->
7
7
 
8
8
  # designing-mcp-products
9
9
 
@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
3
3
  description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:cc54a67f21c0ecdb -->
6
+ <!-- noodle-skill version:0.75.0 hash:cc54a67f21c0ecdb -->
7
7
 
8
8
  # embedding-mcp-assistants
9
9
 
@@ -200,8 +200,12 @@ const shortlistGetaway = tool('shortlist_getaway', {
200
200
  });
201
201
 
202
202
  // Grounding beyond the catalog: two controlled files answer policy/pricing/support questions with
203
- // citations, and Acme's live public site stays current through its search provider no sync job,
204
- // no handwritten search tool. One declaration, one generated `search_destinations` capability.
203
+ // citations, and Acme's live public site is crawled on deploy and re-crawled on the declared
204
+ // refresh cadence — no sync job, no handwritten search tool. One declaration, one generated
205
+ // `search_destinations` capability. The managed crawler and index are the defaults; a component
206
+ // can instead bring its own via `crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })`
207
+ // and `index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })`
208
+ // — the code names the config, `noodle secrets|variables set` supplies the values.
205
209
  const destinations = knowledge('destinations', {
206
210
  title: 'Acme Getaways destinations',
207
211
  description: 'Public destination, pricing, cancellation, and support information.',
@@ -216,6 +220,7 @@ const destinations = knowledge('destinations', {
216
220
  site({
217
221
  origin: 'https://getaways.acme.example',
218
222
  include: ['/destinations/**', '/pricing', '/support'],
223
+ refresh: '12h',
219
224
  }),
220
225
  ],
221
226
  });
@@ -3,7 +3,7 @@ name: executing-noodle-plans
3
3
  description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:6a9f132ddb79352e -->
6
+ <!-- noodle-skill version:0.75.0 hash:6a9f132ddb79352e -->
7
7
 
8
8
  # Execute a Noodle Seed implementation plan
9
9
 
@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
3
3
  description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:efffbf82007f935d -->
6
+ <!-- noodle-skill version:0.75.0 hash:efffbf82007f935d -->
7
7
 
8
8
  # publishing-mcp-integrations
9
9
 
@@ -420,12 +420,14 @@ const product = knowledge('product', {
420
420
  file('./knowledge/faq.txt', { title: 'FAQ' }),
421
421
  ],
422
422
  sites: [
423
- site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'] }),
423
+ site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'], refresh: '6h' }),
424
424
  ],
425
425
  });
426
426
  ```
427
427
 
428
- The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app and the provider keeps live-site content current. Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
428
+ The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app, crawls declared sites, and re-crawls them on the `refresh` cadence (`15m`–`7d`, default daily; `noodle knowledge refresh <name>` crawls on demand). Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
429
+
430
+ The managed crawler and managed index are the defaults and need no configuration. A component may instead bring its own crawler (`crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })` or `tavily(...)`) and/or its own index (`index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })` or `meilisearch({ host: variable(...), apiKey: secret(...) })`). The code declares only config names; operators supply values with `noodle secrets set` / `noodle variables set`, and deploy preflight fails closed naming any unset reference.
429
431
 
430
432
  ## Boundaries
431
433
 
@@ -87,7 +87,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
87
87
  | Command | What it does |
88
88
  | :-- | :-- |
89
89
  | `noodle audit` | Operator governance audit status and event queries. |
90
- | `noodle knowledge` | Operator-only knowledge components: list and status (ADR 0202). |
90
+ | `noodle knowledge` | Operator-only knowledge components: list, status, and refresh (ADR 0202). |
91
91
  | `noodle logs` | View service/deployment logs. |
92
92
  | `noodle metrics` | MCP analytics for a deployed server (volume, sessions, latency percentiles, two-tier errors, tools, clients). Agents: `noodle metrics --agent-output` for a health verdict + next actions. |
93
93
  | `noodle events` | The per-request MCP event stream with status/tool/client filters; `--session <id>` replays one session in order. Agents: add `--json` and filter (`--status tool_error\|mcp_error`) when debugging. |
@@ -84,6 +84,8 @@ At most one public surface (`public` or `mixed`) and at most one authenticated s
84
84
 
85
85
  A public surface **must** declare `capabilities`: the exact positive allowlist it may reach. It is required by the type, and it is the whole externally reachable surface — a reviewer should read it in one screenful. Anything absent stays private, and a capability added to the server later is excluded until someone lists it. `authenticatedWebsite` may also take `capabilities` to narrow the in-app surface; omitted, it projects the whole server.
86
86
 
87
+ A public `embedId` Web Component automatically attaches bounded anonymous same-origin Markdown page context, never DOM text. It is untrusted and nonpersistent, falls back to the URL alone on failure, yields to explicit `pageContext`, and never runs for authenticated or headless clients.
88
+
87
89
  ### Mixed surfaces: let a visitor sign in mid-conversation
88
90
 
89
91
  Add `signIn: true` to a public surface when some capabilities need a signed-in visitor. The surface becomes `mixed`: anonymous visitors start immediately, an identity-dependent capability stays **visible** so the assistant can offer it, and reaching for it raises a sign-in prompt instead of executing.
@@ -53,18 +53,22 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
53
53
 
54
54
  ### Other
55
55
 
56
+ - `algolia`
56
57
  - `authenticatedWebsite`
57
58
  - `clientCredentials`
58
59
  - `customerEndpoint`
59
60
  - `embeddedAssistant`
60
61
  - `externalExchange`
61
62
  - `file`
63
+ - `firecrawl`
62
64
  - `gmailConnector`
63
65
  - `knowledge`
64
66
  - `managedSecret`
67
+ - `meilisearch`
65
68
  - `openAICompatible`
66
69
  - `publicWebsite`
67
70
  - `site`
71
+ - `tavily`
68
72
 
69
73
  ## Authoring signatures
70
74
 
@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
3
3
  description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:0f404109f4845683 -->
6
+ <!-- noodle-skill version:0.75.0 hash:0f404109f4845683 -->
7
7
 
8
8
  # reporting-noodle-feedback
9
9
 
@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
3
3
  description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:6ef6ef551e26b78e -->
6
+ <!-- noodle-skill version:0.75.0 hash:6ef6ef551e26b78e -->
7
7
 
8
8
  # verifying-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: wrapping-existing-applications
3
3
  description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:eccc3c158dcafba8 -->
6
+ <!-- noodle-skill version:0.75.0 hash:eccc3c158dcafba8 -->
7
7
 
8
8
  # wrapping-existing-applications
9
9
 
@@ -3,7 +3,7 @@ name: noodle-seed
3
3
  description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:13ddce01769caae4 -->
6
+ <!-- noodle-skill version:0.75.0 hash:13ddce01769caae4 -->
7
7
 
8
8
  # Noodle Seed
9
9
 
@@ -3,7 +3,7 @@ name: authoring-mcp-servers
3
3
  description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:11523cb33b9473c0 -->
6
+ <!-- noodle-skill version:0.75.0 hash:11523cb33b9473c0 -->
7
7
 
8
8
  # authoring-mcp-servers
9
9
 
@@ -3,7 +3,7 @@ name: building-mcp-apps
3
3
  description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:9fd67d4d24328e15 -->
6
+ <!-- noodle-skill version:0.75.0 hash:9fd67d4d24328e15 -->
7
7
 
8
8
  # building-mcp-apps
9
9
 
@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
3
3
  description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:21bbd3ec441ffd30 -->
6
+ <!-- noodle-skill version:0.75.0 hash:21bbd3ec441ffd30 -->
7
7
 
8
8
  # connecting-apis-to-mcp
9
9
 
@@ -3,7 +3,7 @@ name: creating-product-agent-guides
3
3
  description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:0fa48a82fe836cf0 -->
6
+ <!-- noodle-skill version:0.75.0 hash:0fa48a82fe836cf0 -->
7
7
 
8
8
  # creating-product-agent-guides
9
9
 
@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
3
3
  description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:aa715bae12041d7c -->
6
+ <!-- noodle-skill version:0.75.0 hash:aa715bae12041d7c -->
7
7
 
8
8
  # debugging-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: deploying-mcp-services
3
3
  description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:93e735b7ffb45df1 -->
6
+ <!-- noodle-skill version:0.75.0 hash:93e735b7ffb45df1 -->
7
7
 
8
8
  # deploying-mcp-services
9
9
 
@@ -3,7 +3,7 @@ name: designing-mcp-products
3
3
  description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:78a6f181b61f92f1 -->
6
+ <!-- noodle-skill version:0.75.0 hash:78a6f181b61f92f1 -->
7
7
 
8
8
  # designing-mcp-products
9
9
 
@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
3
3
  description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:cc54a67f21c0ecdb -->
6
+ <!-- noodle-skill version:0.75.0 hash:cc54a67f21c0ecdb -->
7
7
 
8
8
  # embedding-mcp-assistants
9
9
 
@@ -200,8 +200,12 @@ const shortlistGetaway = tool('shortlist_getaway', {
200
200
  });
201
201
 
202
202
  // Grounding beyond the catalog: two controlled files answer policy/pricing/support questions with
203
- // citations, and Acme's live public site stays current through its search provider no sync job,
204
- // no handwritten search tool. One declaration, one generated `search_destinations` capability.
203
+ // citations, and Acme's live public site is crawled on deploy and re-crawled on the declared
204
+ // refresh cadence — no sync job, no handwritten search tool. One declaration, one generated
205
+ // `search_destinations` capability. The managed crawler and index are the defaults; a component
206
+ // can instead bring its own via `crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })`
207
+ // and `index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })`
208
+ // — the code names the config, `noodle secrets|variables set` supplies the values.
205
209
  const destinations = knowledge('destinations', {
206
210
  title: 'Acme Getaways destinations',
207
211
  description: 'Public destination, pricing, cancellation, and support information.',
@@ -216,6 +220,7 @@ const destinations = knowledge('destinations', {
216
220
  site({
217
221
  origin: 'https://getaways.acme.example',
218
222
  include: ['/destinations/**', '/pricing', '/support'],
223
+ refresh: '12h',
219
224
  }),
220
225
  ],
221
226
  });
@@ -3,7 +3,7 @@ name: executing-noodle-plans
3
3
  description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:6a9f132ddb79352e -->
6
+ <!-- noodle-skill version:0.75.0 hash:6a9f132ddb79352e -->
7
7
 
8
8
  # Execute a Noodle Seed implementation plan
9
9
 
@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
3
3
  description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:efffbf82007f935d -->
6
+ <!-- noodle-skill version:0.75.0 hash:efffbf82007f935d -->
7
7
 
8
8
  # publishing-mcp-integrations
9
9
 
@@ -420,12 +420,14 @@ const product = knowledge('product', {
420
420
  file('./knowledge/faq.txt', { title: 'FAQ' }),
421
421
  ],
422
422
  sites: [
423
- site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'] }),
423
+ site({ origin: 'https://www.acme.example', include: ['/docs/**', '/pricing'], refresh: '6h' }),
424
424
  ],
425
425
  });
426
426
  ```
427
427
 
428
- The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app and the provider keeps live-site content current. Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
428
+ The compiler validates and hashes every document at build time (bad extensions, root escapes, symlinks, oversize, and non-UTF-8 fail `noodle validate` with the exact path); deployment publishes versioned files transactionally with the app, crawls declared sites, and re-crawls them on the `refresh` cadence (`15m`–`7d`, default daily; `noodle knowledge refresh <name>` crawls on demand). Component names are lowercase snake-case; each component implies exactly one generated bounded search capability with cited results.
429
+
430
+ The managed crawler and managed index are the defaults and need no configuration. A component may instead bring its own crawler (`crawler: firecrawl({ apiKey: secret('FIRECRAWL_API_KEY') })` or `tavily(...)`) and/or its own index (`index: algolia({ appId: variable('ALGOLIA_APP_ID'), apiKey: secret('ALGOLIA_API_KEY') })` or `meilisearch({ host: variable(...), apiKey: secret(...) })`). The code declares only config names; operators supply values with `noodle secrets set` / `noodle variables set`, and deploy preflight fails closed naming any unset reference.
429
431
 
430
432
  ## Boundaries
431
433
 
@@ -87,7 +87,7 @@ Developer-facing `noodle` commands, grouped by area. Local authoring commands (`
87
87
  | Command | What it does |
88
88
  | :-- | :-- |
89
89
  | `noodle audit` | Operator governance audit status and event queries. |
90
- | `noodle knowledge` | Operator-only knowledge components: list and status (ADR 0202). |
90
+ | `noodle knowledge` | Operator-only knowledge components: list, status, and refresh (ADR 0202). |
91
91
  | `noodle logs` | View service/deployment logs. |
92
92
  | `noodle metrics` | MCP analytics for a deployed server (volume, sessions, latency percentiles, two-tier errors, tools, clients). Agents: `noodle metrics --agent-output` for a health verdict + next actions. |
93
93
  | `noodle events` | The per-request MCP event stream with status/tool/client filters; `--session <id>` replays one session in order. Agents: add `--json` and filter (`--status tool_error\|mcp_error`) when debugging. |
@@ -84,6 +84,8 @@ At most one public surface (`public` or `mixed`) and at most one authenticated s
84
84
 
85
85
  A public surface **must** declare `capabilities`: the exact positive allowlist it may reach. It is required by the type, and it is the whole externally reachable surface — a reviewer should read it in one screenful. Anything absent stays private, and a capability added to the server later is excluded until someone lists it. `authenticatedWebsite` may also take `capabilities` to narrow the in-app surface; omitted, it projects the whole server.
86
86
 
87
+ A public `embedId` Web Component automatically attaches bounded anonymous same-origin Markdown page context, never DOM text. It is untrusted and nonpersistent, falls back to the URL alone on failure, yields to explicit `pageContext`, and never runs for authenticated or headless clients.
88
+
87
89
  ### Mixed surfaces: let a visitor sign in mid-conversation
88
90
 
89
91
  Add `signIn: true` to a public surface when some capabilities need a signed-in visitor. The surface becomes `mixed`: anonymous visitors start immediately, an identity-dependent capability stays **visible** so the assistant can offer it, and reaching for it raises a sign-in prompt instead of executing.
@@ -53,18 +53,22 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
53
53
 
54
54
  ### Other
55
55
 
56
+ - `algolia`
56
57
  - `authenticatedWebsite`
57
58
  - `clientCredentials`
58
59
  - `customerEndpoint`
59
60
  - `embeddedAssistant`
60
61
  - `externalExchange`
61
62
  - `file`
63
+ - `firecrawl`
62
64
  - `gmailConnector`
63
65
  - `knowledge`
64
66
  - `managedSecret`
67
+ - `meilisearch`
65
68
  - `openAICompatible`
66
69
  - `publicWebsite`
67
70
  - `site`
71
+ - `tavily`
68
72
 
69
73
  ## Authoring signatures
70
74
 
@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
3
3
  description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:0f404109f4845683 -->
6
+ <!-- noodle-skill version:0.75.0 hash:0f404109f4845683 -->
7
7
 
8
8
  # reporting-noodle-feedback
9
9
 
@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
3
3
  description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:6ef6ef551e26b78e -->
6
+ <!-- noodle-skill version:0.75.0 hash:6ef6ef551e26b78e -->
7
7
 
8
8
  # verifying-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: wrapping-existing-applications
3
3
  description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.74.0 hash:eccc3c158dcafba8 -->
6
+ <!-- noodle-skill version:0.75.0 hash:eccc3c158dcafba8 -->
7
7
 
8
8
  # wrapping-existing-applications
9
9