@noodleseed/agent-kit 0.78.0 → 0.79.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.78.0",
+  "version": "0.79.1",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.79.1 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/claude-code/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.79.1 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/claude-code/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.79.1 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/claude-code/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.79.1 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/claude-code/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.79.1 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/claude-code/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.79.1 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/claude-code/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.79.1 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/claude-code/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.79.1 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/claude-code/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.79.1 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/claude-code/examples/customer-auth/README.md

@@ -23,6 +23,23 @@ The tools chain: `list_my_organizations` surfaces the `org_id`s the customer can
 `list_org_apps` takes one of those ids, and `archive_org_app` accepts the selected app id. Tool code remains
 independent of the selected origin.
 
+The server also declares one typed `agentGuide` for those product workflows. The deployed embedded assistant
+uses it automatically: each turn keeps only complete workflows supported by the verified session's roles,
+scopes, and model-visible tools. An organization member can receive organization/app review guidance, while
+only an administrator with `org_apps:write` receives the complete archive workflow and its confirmation
+boundary. The guide stays server-side, so the Web Component, React renderer, headless hook, and public client
+need no new option and receive no raw skill content. See
+[using a product guide at runtime](https://docs.noodleseed.dev/docs/guides/product-agent-guides#use-the-guide-at-runtime)
+for the public behavior guide.
+
+A skill-aware external agent connected directly to the same tenant MCP URL receives the same
+complete-workflow filtering through the modern draft MCP Skills extension. Members and administrators may
+therefore receive different `SKILL.md` and MCP-surface bytes, each with matching caller-specific digests.
+This reuses the configured customer OAuth boundary; it does not require a second skill installation or auth
+system, and it is not a claim that every external host currently implements the draft extension. The
+same [runtime guide](https://docs.noodleseed.dev/docs/guides/product-agent-guides#use-the-guide-at-runtime)
+explains this preview boundary.
+
 ## Declare the customer endpoint
 
 `customerEndpoint` names one private routing authority and bounds the origins an IdP may select:

package/skills/claude-code/examples/customer-auth/src/server.ts

@@ -70,6 +70,60 @@ const noodleseedApi = connector('noodleseed_app_api')
     },
   });
 
+const CUSTOMER_AUTH_AGENT_GUIDE = {
+  description:
+    'Use the signed-in customer context to discover organizations, review their Noodle Seed apps, and archive a selected app when authorized.',
+  useWhen: [
+    'A signed-in customer asks which organizations or apps they can access.',
+    'An organization administrator asks to archive one selected app.',
+  ],
+  workflows: [
+    {
+      id: 'find_organizations',
+      title: 'Find the customer organizations',
+      intent: 'Ground later organization-scoped work in the verified customer membership.',
+      steps: [
+        {
+          capability: { kind: 'tool', name: 'list_my_organizations' },
+          guidance: 'Use an organization identifier returned by this read in later steps.',
+        },
+      ],
+    },
+    {
+      id: 'review_organization_apps',
+      title: 'Review apps in one organization',
+      steps: [
+        { capability: { kind: 'tool', name: 'list_my_organizations' } },
+        {
+          capability: { kind: 'tool', name: 'list_org_apps' },
+          guidance: 'List apps only for an organization returned for the signed-in customer.',
+        },
+      ],
+    },
+    {
+      id: 'archive_organization_app',
+      title: 'Archive one organization app',
+      steps: [
+        { capability: { kind: 'tool', name: 'list_my_organizations' } },
+        { capability: { kind: 'tool', name: 'list_org_apps' } },
+        {
+          capability: { kind: 'tool', name: 'archive_org_app' },
+          guidance: 'Archive only the exact app the customer selected after confirmation.',
+        },
+      ],
+    },
+  ],
+  boundaries: [
+    'Never infer an organization or app identifier that was not returned for the signed-in customer.',
+    'Never claim an app was archived until the confirmed action succeeds.',
+  ],
+  examples: [
+    { prompt: 'Which organizations can I access?', workflow: 'find_organizations' },
+    { prompt: 'Show me the apps in this organization.', workflow: 'review_organization_apps' },
+    { prompt: 'Archive the app I selected.', workflow: 'archive_organization_app' },
+  ],
+} as const;
+
 export default server(
   'noodleseed_customer_auth',
   {
@@ -87,6 +141,7 @@ export default server(
       },
     },
     use: { app_api: noodleseedApi },
+    agentGuide: CUSTOMER_AUTH_AGENT_GUIDE,
     interactions: { confirmationFallback: 'host' },
     auth: customerAuth.oidc({
       issuer: 'https://id.noodleseed.dev',

package/skills/claude-code/examples/customer-auth/test/server.test.ts

@@ -42,6 +42,23 @@ describe('customer-auth example', () => {
       },
     });
     expect(manifest.server.interactions).toEqual({ confirmationFallback: 'host' });
+    expect(manifest.server.agentGuide?.workflows.map((workflow) => workflow.id)).toEqual([
+      'find_organizations',
+      'review_organization_apps',
+      'archive_organization_app',
+    ]);
+    expect(
+      manifest.server.agentGuide?.workflows.find(
+        (workflow) => workflow.id === 'archive_organization_app',
+      )?.steps,
+    ).toEqual([
+      { capability: { kind: 'tool', name: 'list_my_organizations' } },
+      { capability: { kind: 'tool', name: 'list_org_apps' } },
+      {
+        capability: { kind: 'tool', name: 'archive_org_app' },
+        guidance: 'Archive only the exact app the customer selected after confirmation.',
+      },
+    ]);
     const catalog = app.toConnectorCatalog();
     expect(catalog?.connectors).toHaveLength(1);
     expect(catalog?.connectors[0]?.http).toMatchObject({

package/skills/claude-code/examples/hello/src/server.ts

@@ -1,5 +1,7 @@
 import { annotations, server, tool, z } from '@noodleseed/one';
 
+// Customer apps stay on the public SDK; @noodle-borg/* packages are runtime implementation details.
+
 export default server(
   'hello',
   {

package/skills/claude-code/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.79.1 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/claude-code/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.79.1 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/claude-code/references/authoring-workflow.md

@@ -431,4 +431,4 @@ The managed crawler and managed index are the defaults and need no configuration
 
 ## Boundaries
 
-Do not hand-author manifest JSON/YAML, runtime artifacts, connector IR, or hosted asset metadata. Do not read or copy secrets, bearer tokens, refresh tokens, static access keys, `.env`, `.env.noodle`, or `~/.noodle/config.json`. Hosted access is identity-based — do not add static data-plane credential paths.
+Import public app authoring only from `@noodleseed/one` (and its documented `/react` or `/platform` subpaths). Packages and subpaths under `@noodle-borg/*` are runtime implementation details, including `/portable` boundaries, and must never appear in customer `server.ts` code. Do not hand-author manifest JSON/YAML, runtime artifacts, connector IR, or hosted asset metadata. Do not read or copy secrets, bearer tokens, refresh tokens, static access keys, `.env`, `.env.noodle`, or `~/.noodle/config.json`. Hosted access is identity-based — do not add static data-plane credential paths.

package/skills/claude-code/references/embedded-assistant.md

@@ -5,6 +5,7 @@
 - Architecture
 - Choose the host experience
 - Author and validate
+- Product workflow guidance
 - Customize the presentation
 - Configure and deploy
 - Access modes and customer auth
@@ -61,6 +62,14 @@ assistant: embeddedAssistant({
 
 Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS.
 
+## Product workflow guidance
+
+Decide whether the product needs `agentGuide` even when the builder does not name it. Multiple permission-gated capabilities, ordered multi-tool work, product-specific grounding, and consequential boundaries are strong signals. Keep `server.instructions` concise and global; put workflow triggers, ordering, and permission-specific prose in the guide. Global guide description, use cases, and boundaries must be safe for every exposed assistant surface.
+
+After deployment, the embedded assistant automatically projects the typed guide into compact server-side model context on every turn. It keeps only complete workflows supported by that session surface and by the exact model-visible tools allowed for the backend-verified roles and scopes. A member and an administrator can therefore receive different workflow guidance from the same deployment. Mixed anonymous sessions retain only the explicitly selected surface and sign-in workflows; the next turn is reprojected after successful elevation.
+
+No renderer prop, browser package field, or second skill installation is required. The managed Web Component, React component, headless hook, and public client all share the same server-side turn path. Raw guide content and generated skill files never enter session responses or browser events. Missing, incompatible, empty, or oversize guidance is omitted without changing the tool surface or breaking an otherwise valid turn.
+
 ### Surfaces: one assistant, every front door
 
 A product usually has more than one front door — a marketing site and a signed-in app. One assistant (one brand, one model, one UI) projects onto both; pass `access` an array and each surface owns its own origins and allowlist:

package/skills/claude-code/references/product-agent-guides.md

@@ -20,7 +20,7 @@ Make the judgment from the user’s stated outcome and grounded product evidence
 
 Noodle workflow skills teach a coding agent how to build and operate Noodle projects. The generated app product skill is team-local guidance for using one product. A marketplace plugin is a separate host distribution bundle.
 
-A host-neutral distribution metadata and archive framework now exists, but per-app marketplace plugin generation is not available until a target adapter lands, and customer-agent distribution is not available. If the user asks for either, explain the boundary and stop at the proven local App Package, product-skill, and metadata work. Do not claim a target bundle, submission, hosted distribution, or customer-agent projection.
+Host-neutral distribution metadata, available target adapters, local exports, and deployment-bound archives are separate projections from the guide; use the live command catalog for exact target availability, and never claim that an export submitted or published itself. The deployed embedded assistant automatically consumes a compact authorization-aware guide projection. A direct external agent connected to the tenant MCP URL can discover the deployment skill through the modern draft MCP Skills extension when its host supports that extension; this is protocol delivery, not evidence of host support or marketplace installation.
 
 ## Creation workflow
 
@@ -38,7 +38,11 @@ The guide contains `description`, `useWhen`, named `workflows`, optional `bounda
 
 Keep identifiers within 200 characters and prose within 4,000 characters. A guide has at most 32 `useWhen` entries, 32 workflows, 64 steps per workflow, 64 boundaries, and 64 examples. The compiler rejects an App Package whose bounded derived MCP surface would still exceed its artifact ceiling.
 
-Use `server.instructions` for a concise live MCP-session primer. Noodle-owned workflow skills teach how to build and operate Noodle projects; a product guide teaches agents how to use this one deployed product. Compilation validates references and produces an App Package sibling while the RuntimeArtifact deliberately omits guide prose.
+Use `server.instructions` for concise global behavior that applies to every turn and caller. Put product workflow ordering, triggers, and workflow-specific permission guidance in `agentGuide`; global description, `useWhen`, and boundaries must be safe for every assistant surface. Noodle-owned workflow skills teach how to build and operate Noodle projects; a product guide teaches agents how to use this one deployed product. Compilation validates references and produces an App Package sibling while the RuntimeArtifact deliberately omits guide prose.
+
+For a deployed embedded assistant, Noodle automatically derives bounded server-side model guidance from that App Package. Each turn retains only complete workflows supported by the session surface and the exact model-visible tools allowed for the verified roles and scopes. All managed, React, headless, and public-client renderers benefit without a new browser option; raw guide and skill files never enter the browser response. An unavailable or oversize projection is omitted without widening tools or failing the turn.
+
+For a direct modern MCP connection, use the deployment tenant MCP URL and its existing OAuth flow; do not install a second skill or create another auth integration. `skills/list`, `skills/get`, and the related `resources/read` files are rebuilt from the same deployment package for the verified caller. Only complete workflows backed by currently authorized, model-visible tools and available resources or prompts survive; app-only helpers and forbidden tools stay out of both the workflow body and MCP-surface reference. The response is private with zero freshness, and each file has a caller-specific SHA-256 digest. A role or scope change can therefore change the next response and its digest, allowing a supporting host to require fresh approval. Legacy MCP clients and modern hosts without Skills support continue to use the ordinary capability surface.
 
 ## Local lifecycle
 

package/skills/claude-code/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.79.1 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/claude-code/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.79.1 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/claude-code/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.79.1 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications
 

package/skills/codex/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.79.1 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/codex/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.79.1 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/codex/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.79.1 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/codex/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.79.1 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/codex/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.79.1 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/codex/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.79.1 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/codex/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.79.1 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/codex/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.79.1 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/codex/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.79.1 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/codex/examples/customer-auth/README.md

@@ -23,6 +23,23 @@ The tools chain: `list_my_organizations` surfaces the `org_id`s the customer can
 `list_org_apps` takes one of those ids, and `archive_org_app` accepts the selected app id. Tool code remains
 independent of the selected origin.
 
+The server also declares one typed `agentGuide` for those product workflows. The deployed embedded assistant
+uses it automatically: each turn keeps only complete workflows supported by the verified session's roles,
+scopes, and model-visible tools. An organization member can receive organization/app review guidance, while
+only an administrator with `org_apps:write` receives the complete archive workflow and its confirmation
+boundary. The guide stays server-side, so the Web Component, React renderer, headless hook, and public client
+need no new option and receive no raw skill content. See
+[using a product guide at runtime](https://docs.noodleseed.dev/docs/guides/product-agent-guides#use-the-guide-at-runtime)
+for the public behavior guide.
+
+A skill-aware external agent connected directly to the same tenant MCP URL receives the same
+complete-workflow filtering through the modern draft MCP Skills extension. Members and administrators may
+therefore receive different `SKILL.md` and MCP-surface bytes, each with matching caller-specific digests.
+This reuses the configured customer OAuth boundary; it does not require a second skill installation or auth
+system, and it is not a claim that every external host currently implements the draft extension. The
+same [runtime guide](https://docs.noodleseed.dev/docs/guides/product-agent-guides#use-the-guide-at-runtime)
+explains this preview boundary.
+
 ## Declare the customer endpoint
 
 `customerEndpoint` names one private routing authority and bounds the origins an IdP may select:

package/skills/codex/examples/customer-auth/src/server.ts

@@ -70,6 +70,60 @@ const noodleseedApi = connector('noodleseed_app_api')
     },
   });
 
+const CUSTOMER_AUTH_AGENT_GUIDE = {
+  description:
+    'Use the signed-in customer context to discover organizations, review their Noodle Seed apps, and archive a selected app when authorized.',
+  useWhen: [
+    'A signed-in customer asks which organizations or apps they can access.',
+    'An organization administrator asks to archive one selected app.',
+  ],
+  workflows: [
+    {
+      id: 'find_organizations',
+      title: 'Find the customer organizations',
+      intent: 'Ground later organization-scoped work in the verified customer membership.',
+      steps: [
+        {
+          capability: { kind: 'tool', name: 'list_my_organizations' },
+          guidance: 'Use an organization identifier returned by this read in later steps.',
+        },
+      ],
+    },
+    {
+      id: 'review_organization_apps',
+      title: 'Review apps in one organization',
+      steps: [
+        { capability: { kind: 'tool', name: 'list_my_organizations' } },
+        {
+          capability: { kind: 'tool', name: 'list_org_apps' },
+          guidance: 'List apps only for an organization returned for the signed-in customer.',
+        },
+      ],
+    },
+    {
+      id: 'archive_organization_app',
+      title: 'Archive one organization app',
+      steps: [
+        { capability: { kind: 'tool', name: 'list_my_organizations' } },
+        { capability: { kind: 'tool', name: 'list_org_apps' } },
+        {
+          capability: { kind: 'tool', name: 'archive_org_app' },
+          guidance: 'Archive only the exact app the customer selected after confirmation.',
+        },
+      ],
+    },
+  ],
+  boundaries: [
+    'Never infer an organization or app identifier that was not returned for the signed-in customer.',
+    'Never claim an app was archived until the confirmed action succeeds.',
+  ],
+  examples: [
+    { prompt: 'Which organizations can I access?', workflow: 'find_organizations' },
+    { prompt: 'Show me the apps in this organization.', workflow: 'review_organization_apps' },
+    { prompt: 'Archive the app I selected.', workflow: 'archive_organization_app' },
+  ],
+} as const;
+
 export default server(
   'noodleseed_customer_auth',
   {
@@ -87,6 +141,7 @@ export default server(
       },
     },
     use: { app_api: noodleseedApi },
+    agentGuide: CUSTOMER_AUTH_AGENT_GUIDE,
     interactions: { confirmationFallback: 'host' },
     auth: customerAuth.oidc({
       issuer: 'https://id.noodleseed.dev',

package/skills/codex/examples/customer-auth/test/server.test.ts

@@ -42,6 +42,23 @@ describe('customer-auth example', () => {
       },
     });
     expect(manifest.server.interactions).toEqual({ confirmationFallback: 'host' });
+    expect(manifest.server.agentGuide?.workflows.map((workflow) => workflow.id)).toEqual([
+      'find_organizations',
+      'review_organization_apps',
+      'archive_organization_app',
+    ]);
+    expect(
+      manifest.server.agentGuide?.workflows.find(
+        (workflow) => workflow.id === 'archive_organization_app',
+      )?.steps,
+    ).toEqual([
+      { capability: { kind: 'tool', name: 'list_my_organizations' } },
+      { capability: { kind: 'tool', name: 'list_org_apps' } },
+      {
+        capability: { kind: 'tool', name: 'archive_org_app' },
+        guidance: 'Archive only the exact app the customer selected after confirmation.',
+      },
+    ]);
     const catalog = app.toConnectorCatalog();
     expect(catalog?.connectors).toHaveLength(1);
     expect(catalog?.connectors[0]?.http).toMatchObject({

package/skills/codex/examples/hello/src/server.ts

@@ -1,5 +1,7 @@
 import { annotations, server, tool, z } from '@noodleseed/one';
 
+// Customer apps stay on the public SDK; @noodle-borg/* packages are runtime implementation details.
+
 export default server(
   'hello',
   {

package/skills/codex/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.79.1 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/codex/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.78.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.79.1 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/codex/references/authoring-workflow.md

@@ -431,4 +431,4 @@ The managed crawler and managed index are the defaults and need no configuration
 
 ## Boundaries
 
-Do not hand-author manifest JSON/YAML, runtime artifacts, connector IR, or hosted asset metadata. Do not read or copy secrets, bearer tokens, refresh tokens, static access keys, `.env`, `.env.noodle`, or `~/.noodle/config.json`. Hosted access is identity-based — do not add static data-plane credential paths.
+Import public app authoring only from `@noodleseed/one` (and its documented `/react` or `/platform` subpaths). Packages and subpaths under `@noodle-borg/*` are runtime implementation details, including `/portable` boundaries, and must never appear in customer `server.ts` code. Do not hand-author manifest JSON/YAML, runtime artifacts, connector IR, or hosted asset metadata. Do not read or copy secrets, bearer tokens, refresh tokens, static access keys, `.env`, `.env.noodle`, or `~/.noodle/config.json`. Hosted access is identity-based — do not add static data-plane credential paths.

package/skills/codex/references/embedded-assistant.md

@@ -5,6 +5,7 @@
 - Architecture
 - Choose the host experience
 - Author and validate
+- Product workflow guidance
 - Customize the presentation
 - Configure and deploy
 - Access modes and customer auth
@@ -61,6 +62,14 @@ assistant: embeddedAssistant({
 
 Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS.
 
+## Product workflow guidance
+
+Decide whether the product needs `agentGuide` even when the builder does not name it. Multiple permission-gated capabilities, ordered multi-tool work, product-specific grounding, and consequential boundaries are strong signals. Keep `server.instructions` concise and global; put workflow triggers, ordering, and permission-specific prose in the guide. Global guide description, use cases, and boundaries must be safe for every exposed assistant surface.
+
+After deployment, the embedded assistant automatically projects the typed guide into compact server-side model context on every turn. It keeps only complete workflows supported by that session surface and by the exact model-visible tools allowed for the backend-verified roles and scopes. A member and an administrator can therefore receive different workflow guidance from the same deployment. Mixed anonymous sessions retain only the explicitly selected surface and sign-in workflows; the next turn is reprojected after successful elevation.
+
+No renderer prop, browser package field, or second skill installation is required. The managed Web Component, React component, headless hook, and public client all share the same server-side turn path. Raw guide content and generated skill files never enter session responses or browser events. Missing, incompatible, empty, or oversize guidance is omitted without changing the tool surface or breaking an otherwise valid turn.
+
 ### Surfaces: one assistant, every front door
 
 A product usually has more than one front door — a marketing site and a signed-in app. One assistant (one brand, one model, one UI) projects onto both; pass `access` an array and each surface owns its own origins and allowlist: