@noodleseed/agent-kit 0.82.0 → 0.83.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/agent-kit",
-  "version": "0.82.0",
+  "version": "0.83.0",
   "private": false,
   "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
   "license": "Apache-2.0",

package/skills/claude-code/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.83.0 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/claude-code/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.83.0 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/claude-code/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.83.0 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/claude-code/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.83.0 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/claude-code/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.83.0 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/claude-code/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.83.0 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/claude-code/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.83.0 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/claude-code/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.83.0 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/claude-code/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.83.0 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/claude-code/examples/acme-discovery/README.md

@@ -26,6 +26,9 @@ access: publicWebsite({
 ```
 
 There is no second tool set and no second app — one `server.ts`, projected onto another front door.
+The flagship selects `model: noodleManaged()`, so an enrolled hosted deployment needs no customer model
+endpoint, name, or key and its artifact remains provider-neutral. Sponsored beta enrollment is exact to the
+org/app/environment and fails closed outside that cohort; `openAICompatible(...)` remains the BYO alternative.
 The surface `instructions` add only the website-specific voice and goal; shared product truth stays in
 `server.instructions`. This public guidance is injected into public assistant turns, never MCP
 `initialize` or another assistant surface.
@@ -105,5 +108,6 @@ noodle deploy --access owner-only
 noodle open
 ```
 
-This example has no connector secrets and does not include tokens, caller-key mechanisms, or
-`.env.noodle` values. All destinations, prices, and URLs are fictional.
+This example has no connector or model secrets and does not include tokens, caller-key mechanisms, or
+`.env.noodle` values. Hosted `noodleManaged()` inference requires Noodle to enroll the exact target before
+serving; local validation and tool calls do not. All destinations, prices, and URLs are fictional.

package/skills/claude-code/examples/acme-discovery/src/server.ts

@@ -3,13 +3,11 @@ import {
   embeddedAssistant,
   file,
   knowledge,
-  openAICompatible,
+  noodleManaged,
   publicWebsite,
-  secret,
   server,
   site,
   tool,
-  variable,
   z,
 } from '@noodleseed/one';
 
@@ -249,11 +247,7 @@ export default server(
     // one glance, and closed by default when a tool is added to the server later. The knowledge
     // component projects its generated search capability the same way a tool does.
     assistant: embeddedAssistant({
-      model: openAICompatible({
-        baseUrl: variable('ASSISTANT_MODEL_BASE_URL'),
-        model: variable('ASSISTANT_MODEL'),
-        apiKey: secret('ASSISTANT_MODEL_API_KEY'),
-      }),
+      model: noodleManaged(),
       access: publicWebsite({
         origins: ['https://getaways.acme.example'],
         capabilities: [destinations, discoverGetaways, createHandoff, shortlistGetaway],

package/skills/claude-code/examples/acme-discovery/test/server.test.ts

@@ -24,6 +24,7 @@ describe('acme-discovery example', () => {
 
   it('gives the public website a consultative surface-specific goal', async () => {
     const manifest = await app.toManifest();
+    expect(manifest.server.assistant?.model).toEqual({ kind: 'noodle-managed' });
     expect(manifest.server.assistant?.surfaces?.[0]?.instructions).toContain(
       'friendly, consultative travel guide',
     );

package/skills/claude-code/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.83.0 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/claude-code/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.83.0 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/claude-code/references/embedded-assistant.md

@@ -29,7 +29,8 @@ Keep every credential and identity layer separate:
 | Owner | Values | Destination |
 | --- | --- | --- |
 | Noodle operator | Login, selected org/app/env | Plugin-managed CLI profile and explicit target; never the SaaS runtime |
-| Noodle deployment | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY` | `noodle variables set` / `noodle secrets set`; never the SaaS environment |
+| Noodle-managed model | No authored provider, model id, URL, or key | Hosted operator state; available only when Noodle has enrolled the exact org/app/env |
+| Operator-provided model | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY` | `noodle variables set` / `noodle secrets set`; never the SaaS environment |
 | Connector/delegated exchange | Connector credentials and any customer-owned token-exchange client | Noodle managed configuration plus the matching customer backend secret manager |
 | SaaS backend | `NOODLE_SERVICE_URL`, `NOODLE_ASSISTANT_CLIENT_ID`, `NOODLE_ASSISTANT_CLIENT_SECRET`, `PUBLIC_APP_ORIGIN` | Backend-only environment or secret manager; never browser code or public-prefixed variables |
 | Browser | Short-lived assistant session only | In memory; never a client secret, model key, connector credential, or raw application session |
@@ -48,11 +49,7 @@ Use the same server tools in the embed; do not create a second tool set. Declare
 branding: { name: "Acme", accent: "#3157D5" },
 context: { defaults: { locale: "en-GB", timeZone: "Europe/London" } },
 assistant: embeddedAssistant({
-  model: openAICompatible({
-    baseUrl: variable("ASSISTANT_MODEL_BASE_URL"),
-    model: variable("ASSISTANT_MODEL"),
-    apiKey: secret("ASSISTANT_MODEL_API_KEY"),
-  }),
+  model: noodleManaged(),
   access: authenticatedWebsite({
     origins: ["http://localhost:3000", "https://app.example.com"],
   }),
@@ -60,6 +57,8 @@ assistant: embeddedAssistant({
 }),
 ```
 
+`noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY") })`; that remains the portable BYO path.
+
 Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS. For a public surface it also prints a process-local Embed ID and script; mount that script on the separately running loopback website to test anonymous mint, chat, widgets, and confirmation. The local ID is ephemeral, while a hosted deploy provisions the stable ID behind durable admission counters.
 
 ## Product workflow guidance
@@ -166,7 +165,7 @@ Local MCP authoring and tests need no account, but an external browser embed nee
 noodle deploy --org <org> --app <app> --env <env>
 ```
 
-Deploy preflights the complete target before upload. In an interactive terminal it collects all missing model variables and secrets, then continues. In a non-interactive run it reports every missing name and safe `noodle variables set ... --from-env` / `noodle secrets set ... --from-env` action; perform every action and repeat the same deploy command. Values never appear in the preflight report or resume state. Do not put these model values in the embedding SaaS environment. A production deployment may omit a local origin; include a loopback origin only when local browser integration is required.
+Deploy preflights the complete target before upload. `noodleManaged()` has no customer model variables or secrets; enrollment is hosted operator state and an unenrolled target fails closed at serving time. `openAICompatible()` preflight collects or reports every missing model variable and secret with safe `noodle variables set ... --from-env` / `noodle secrets set ... --from-env` actions. Values never appear in the preflight report or resume state. Do not put BYO model values in the embedding SaaS environment. A production deployment may omit a local origin; include a loopback origin only when local browser integration is required.
 
 ## Access modes and customer auth
 

package/skills/claude-code/references/sdk-surface.md

@@ -65,6 +65,7 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 - `knowledge`
 - `managedSecret`
 - `meilisearch`
+- `noodleManaged`
 - `openAICompatible`
 - `publicWebsite`
 - `site`

package/skills/claude-code/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.83.0 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/claude-code/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.83.0 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/claude-code/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.83.0 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications
 

package/skills/codex/SKILL.md

@@ -3,7 +3,7 @@ name: noodle-seed
 description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:13ddce01769caae4 -->
+<!-- noodle-skill version:0.83.0 hash:13ddce01769caae4 -->
 
 # Noodle Seed
 

package/skills/codex/authoring-mcp-servers/SKILL.md

@@ -3,7 +3,7 @@ name: authoring-mcp-servers
 description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:11523cb33b9473c0 -->
+<!-- noodle-skill version:0.83.0 hash:11523cb33b9473c0 -->
 
 # authoring-mcp-servers
 

package/skills/codex/building-mcp-apps/SKILL.md

@@ -3,7 +3,7 @@ name: building-mcp-apps
 description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:9fd67d4d24328e15 -->
+<!-- noodle-skill version:0.83.0 hash:9fd67d4d24328e15 -->
 
 # building-mcp-apps
 

package/skills/codex/connecting-apis-to-mcp/SKILL.md

@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
 description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:21bbd3ec441ffd30 -->
+<!-- noodle-skill version:0.83.0 hash:21bbd3ec441ffd30 -->
 
 # connecting-apis-to-mcp
 

package/skills/codex/creating-product-agent-guides/SKILL.md

@@ -3,7 +3,7 @@ name: creating-product-agent-guides
 description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:0fa48a82fe836cf0 -->
+<!-- noodle-skill version:0.83.0 hash:0fa48a82fe836cf0 -->
 
 # creating-product-agent-guides
 

package/skills/codex/debugging-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
 description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:aa715bae12041d7c -->
+<!-- noodle-skill version:0.83.0 hash:aa715bae12041d7c -->
 
 # debugging-mcp-delivery
 

package/skills/codex/deploying-mcp-services/SKILL.md

@@ -3,7 +3,7 @@ name: deploying-mcp-services
 description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:93e735b7ffb45df1 -->
+<!-- noodle-skill version:0.83.0 hash:93e735b7ffb45df1 -->
 
 # deploying-mcp-services
 

package/skills/codex/designing-mcp-products/SKILL.md

@@ -3,7 +3,7 @@ name: designing-mcp-products
 description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:78a6f181b61f92f1 -->
+<!-- noodle-skill version:0.83.0 hash:78a6f181b61f92f1 -->
 
 # designing-mcp-products
 

package/skills/codex/embedding-mcp-assistants/SKILL.md

@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
 description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:cc54a67f21c0ecdb -->
+<!-- noodle-skill version:0.83.0 hash:cc54a67f21c0ecdb -->
 
 # embedding-mcp-assistants
 

package/skills/codex/examples/acme-discovery/README.md

@@ -26,6 +26,9 @@ access: publicWebsite({
 ```
 
 There is no second tool set and no second app — one `server.ts`, projected onto another front door.
+The flagship selects `model: noodleManaged()`, so an enrolled hosted deployment needs no customer model
+endpoint, name, or key and its artifact remains provider-neutral. Sponsored beta enrollment is exact to the
+org/app/environment and fails closed outside that cohort; `openAICompatible(...)` remains the BYO alternative.
 The surface `instructions` add only the website-specific voice and goal; shared product truth stays in
 `server.instructions`. This public guidance is injected into public assistant turns, never MCP
 `initialize` or another assistant surface.
@@ -105,5 +108,6 @@ noodle deploy --access owner-only
 noodle open
 ```
 
-This example has no connector secrets and does not include tokens, caller-key mechanisms, or
-`.env.noodle` values. All destinations, prices, and URLs are fictional.
+This example has no connector or model secrets and does not include tokens, caller-key mechanisms, or
+`.env.noodle` values. Hosted `noodleManaged()` inference requires Noodle to enroll the exact target before
+serving; local validation and tool calls do not. All destinations, prices, and URLs are fictional.

package/skills/codex/examples/acme-discovery/src/server.ts

@@ -3,13 +3,11 @@ import {
   embeddedAssistant,
   file,
   knowledge,
-  openAICompatible,
+  noodleManaged,
   publicWebsite,
-  secret,
   server,
   site,
   tool,
-  variable,
   z,
 } from '@noodleseed/one';
 
@@ -249,11 +247,7 @@ export default server(
     // one glance, and closed by default when a tool is added to the server later. The knowledge
     // component projects its generated search capability the same way a tool does.
     assistant: embeddedAssistant({
-      model: openAICompatible({
-        baseUrl: variable('ASSISTANT_MODEL_BASE_URL'),
-        model: variable('ASSISTANT_MODEL'),
-        apiKey: secret('ASSISTANT_MODEL_API_KEY'),
-      }),
+      model: noodleManaged(),
       access: publicWebsite({
         origins: ['https://getaways.acme.example'],
         capabilities: [destinations, discoverGetaways, createHandoff, shortlistGetaway],

package/skills/codex/examples/acme-discovery/test/server.test.ts

@@ -24,6 +24,7 @@ describe('acme-discovery example', () => {
 
   it('gives the public website a consultative surface-specific goal', async () => {
     const manifest = await app.toManifest();
+    expect(manifest.server.assistant?.model).toEqual({ kind: 'noodle-managed' });
     expect(manifest.server.assistant?.surfaces?.[0]?.instructions).toContain(
       'friendly, consultative travel guide',
     );

package/skills/codex/executing-noodle-plans/SKILL.md

@@ -3,7 +3,7 @@ name: executing-noodle-plans
 description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:6a9f132ddb79352e -->
+<!-- noodle-skill version:0.83.0 hash:6a9f132ddb79352e -->
 
 # Execute a Noodle Seed implementation plan
 

package/skills/codex/publishing-mcp-integrations/SKILL.md

@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
 description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:efffbf82007f935d -->
+<!-- noodle-skill version:0.83.0 hash:efffbf82007f935d -->
 
 # publishing-mcp-integrations
 

package/skills/codex/references/embedded-assistant.md

@@ -29,7 +29,8 @@ Keep every credential and identity layer separate:
 | Owner | Values | Destination |
 | --- | --- | --- |
 | Noodle operator | Login, selected org/app/env | Plugin-managed CLI profile and explicit target; never the SaaS runtime |
-| Noodle deployment | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY` | `noodle variables set` / `noodle secrets set`; never the SaaS environment |
+| Noodle-managed model | No authored provider, model id, URL, or key | Hosted operator state; available only when Noodle has enrolled the exact org/app/env |
+| Operator-provided model | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY` | `noodle variables set` / `noodle secrets set`; never the SaaS environment |
 | Connector/delegated exchange | Connector credentials and any customer-owned token-exchange client | Noodle managed configuration plus the matching customer backend secret manager |
 | SaaS backend | `NOODLE_SERVICE_URL`, `NOODLE_ASSISTANT_CLIENT_ID`, `NOODLE_ASSISTANT_CLIENT_SECRET`, `PUBLIC_APP_ORIGIN` | Backend-only environment or secret manager; never browser code or public-prefixed variables |
 | Browser | Short-lived assistant session only | In memory; never a client secret, model key, connector credential, or raw application session |
@@ -48,11 +49,7 @@ Use the same server tools in the embed; do not create a second tool set. Declare
 branding: { name: "Acme", accent: "#3157D5" },
 context: { defaults: { locale: "en-GB", timeZone: "Europe/London" } },
 assistant: embeddedAssistant({
-  model: openAICompatible({
-    baseUrl: variable("ASSISTANT_MODEL_BASE_URL"),
-    model: variable("ASSISTANT_MODEL"),
-    apiKey: secret("ASSISTANT_MODEL_API_KEY"),
-  }),
+  model: noodleManaged(),
   access: authenticatedWebsite({
     origins: ["http://localhost:3000", "https://app.example.com"],
   }),
@@ -60,6 +57,8 @@ assistant: embeddedAssistant({
 }),
 ```
 
+`noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY") })`; that remains the portable BYO path.
+
 Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS. For a public surface it also prints a process-local Embed ID and script; mount that script on the separately running loopback website to test anonymous mint, chat, widgets, and confirmation. The local ID is ephemeral, while a hosted deploy provisions the stable ID behind durable admission counters.
 
 ## Product workflow guidance
@@ -166,7 +165,7 @@ Local MCP authoring and tests need no account, but an external browser embed nee
 noodle deploy --org <org> --app <app> --env <env>
 ```
 
-Deploy preflights the complete target before upload. In an interactive terminal it collects all missing model variables and secrets, then continues. In a non-interactive run it reports every missing name and safe `noodle variables set ... --from-env` / `noodle secrets set ... --from-env` action; perform every action and repeat the same deploy command. Values never appear in the preflight report or resume state. Do not put these model values in the embedding SaaS environment. A production deployment may omit a local origin; include a loopback origin only when local browser integration is required.
+Deploy preflights the complete target before upload. `noodleManaged()` has no customer model variables or secrets; enrollment is hosted operator state and an unenrolled target fails closed at serving time. `openAICompatible()` preflight collects or reports every missing model variable and secret with safe `noodle variables set ... --from-env` / `noodle secrets set ... --from-env` actions. Values never appear in the preflight report or resume state. Do not put BYO model values in the embedding SaaS environment. A production deployment may omit a local origin; include a loopback origin only when local browser integration is required.
 
 ## Access modes and customer auth
 

package/skills/codex/references/sdk-surface.md

@@ -65,6 +65,7 @@ Platform helper connectors are explicit subpath imports from `@noodleseed/one/pl
 - `knowledge`
 - `managedSecret`
 - `meilisearch`
+- `noodleManaged`
 - `openAICompatible`
 - `publicWebsite`
 - `site`

package/skills/codex/reporting-noodle-feedback/SKILL.md

@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
 description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:0f404109f4845683 -->
+<!-- noodle-skill version:0.83.0 hash:0f404109f4845683 -->
 
 # reporting-noodle-feedback
 

package/skills/codex/verifying-mcp-delivery/SKILL.md

@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
 description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:6ef6ef551e26b78e -->
+<!-- noodle-skill version:0.83.0 hash:6ef6ef551e26b78e -->
 
 # verifying-mcp-delivery
 

package/skills/codex/wrapping-existing-applications/SKILL.md

@@ -3,7 +3,7 @@ name: wrapping-existing-applications
 description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
 ---
 
-<!-- noodle-skill version:0.82.0 hash:eccc3c158dcafba8 -->
+<!-- noodle-skill version:0.83.0 hash:eccc3c158dcafba8 -->
 
 # wrapping-existing-applications