@noodleseed/agent-kit 0.87.0 → 0.87.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (36) hide show
  1. package/manifest.json +263 -263
  2. package/package.json +1 -1
  3. package/skills/claude-code/SKILL.md +1 -1
  4. package/skills/claude-code/authoring-mcp-servers/SKILL.md +1 -1
  5. package/skills/claude-code/building-mcp-apps/SKILL.md +1 -1
  6. package/skills/claude-code/connecting-apis-to-mcp/SKILL.md +1 -1
  7. package/skills/claude-code/creating-product-agent-guides/SKILL.md +1 -1
  8. package/skills/claude-code/debugging-mcp-delivery/SKILL.md +1 -1
  9. package/skills/claude-code/deploying-mcp-services/SKILL.md +1 -1
  10. package/skills/claude-code/designing-mcp-products/SKILL.md +1 -1
  11. package/skills/claude-code/embedding-mcp-assistants/SKILL.md +1 -1
  12. package/skills/claude-code/examples/customer-auth/README.md +10 -5
  13. package/skills/claude-code/examples/customer-auth/src/server.ts +1 -0
  14. package/skills/claude-code/executing-noodle-plans/SKILL.md +1 -1
  15. package/skills/claude-code/publishing-mcp-integrations/SKILL.md +1 -1
  16. package/skills/claude-code/references/embedded-assistant.md +2 -2
  17. package/skills/claude-code/reporting-noodle-feedback/SKILL.md +1 -1
  18. package/skills/claude-code/verifying-mcp-delivery/SKILL.md +1 -1
  19. package/skills/claude-code/wrapping-existing-applications/SKILL.md +1 -1
  20. package/skills/codex/SKILL.md +1 -1
  21. package/skills/codex/authoring-mcp-servers/SKILL.md +1 -1
  22. package/skills/codex/building-mcp-apps/SKILL.md +1 -1
  23. package/skills/codex/connecting-apis-to-mcp/SKILL.md +1 -1
  24. package/skills/codex/creating-product-agent-guides/SKILL.md +1 -1
  25. package/skills/codex/debugging-mcp-delivery/SKILL.md +1 -1
  26. package/skills/codex/deploying-mcp-services/SKILL.md +1 -1
  27. package/skills/codex/designing-mcp-products/SKILL.md +1 -1
  28. package/skills/codex/embedding-mcp-assistants/SKILL.md +1 -1
  29. package/skills/codex/examples/customer-auth/README.md +10 -5
  30. package/skills/codex/examples/customer-auth/src/server.ts +1 -0
  31. package/skills/codex/executing-noodle-plans/SKILL.md +1 -1
  32. package/skills/codex/publishing-mcp-integrations/SKILL.md +1 -1
  33. package/skills/codex/references/embedded-assistant.md +2 -2
  34. package/skills/codex/reporting-noodle-feedback/SKILL.md +1 -1
  35. package/skills/codex/verifying-mcp-delivery/SKILL.md +1 -1
  36. package/skills/codex/wrapping-existing-applications/SKILL.md +1 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@noodleseed/agent-kit",
3
- "version": "0.87.0",
3
+ "version": "0.87.1",
4
4
  "private": false,
5
5
  "description": "Self-checking, self-updating agent skills for the Noodle Seed CLI. Authored in this repo by @noodle-borg/agent-kit; this is the published, independently-versioned canonical skills artifact the CLI fetches and verifies.",
6
6
  "license": "Apache-2.0",
@@ -3,7 +3,7 @@ name: noodle-seed
3
3
  description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:13ddce01769caae4 -->
6
+ <!-- noodle-skill version:0.87.1 hash:13ddce01769caae4 -->
7
7
 
8
8
  # Noodle Seed
9
9
 
@@ -3,7 +3,7 @@ name: authoring-mcp-servers
3
3
  description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:11523cb33b9473c0 -->
6
+ <!-- noodle-skill version:0.87.1 hash:11523cb33b9473c0 -->
7
7
 
8
8
  # authoring-mcp-servers
9
9
 
@@ -3,7 +3,7 @@ name: building-mcp-apps
3
3
  description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:9fd67d4d24328e15 -->
6
+ <!-- noodle-skill version:0.87.1 hash:9fd67d4d24328e15 -->
7
7
 
8
8
  # building-mcp-apps
9
9
 
@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
3
3
  description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:21bbd3ec441ffd30 -->
6
+ <!-- noodle-skill version:0.87.1 hash:21bbd3ec441ffd30 -->
7
7
 
8
8
  # connecting-apis-to-mcp
9
9
 
@@ -3,7 +3,7 @@ name: creating-product-agent-guides
3
3
  description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:0fa48a82fe836cf0 -->
6
+ <!-- noodle-skill version:0.87.1 hash:0fa48a82fe836cf0 -->
7
7
 
8
8
  # creating-product-agent-guides
9
9
 
@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
3
3
  description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:aa715bae12041d7c -->
6
+ <!-- noodle-skill version:0.87.1 hash:aa715bae12041d7c -->
7
7
 
8
8
  # debugging-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: deploying-mcp-services
3
3
  description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:93e735b7ffb45df1 -->
6
+ <!-- noodle-skill version:0.87.1 hash:93e735b7ffb45df1 -->
7
7
 
8
8
  # deploying-mcp-services
9
9
 
@@ -3,7 +3,7 @@ name: designing-mcp-products
3
3
  description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:78a6f181b61f92f1 -->
6
+ <!-- noodle-skill version:0.87.1 hash:78a6f181b61f92f1 -->
7
7
 
8
8
  # designing-mcp-products
9
9
 
@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
3
3
  description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:cc54a67f21c0ecdb -->
6
+ <!-- noodle-skill version:0.87.1 hash:cc54a67f21c0ecdb -->
7
7
 
8
8
  # embedding-mcp-assistants
9
9
 
@@ -355,9 +355,11 @@ flag, environment variable, or config surface.
355
355
 
356
356
  ## Configuration
357
357
 
358
- The embedded assistant uses a customer-supplied OpenAI Chat Completions-compatible endpoint. Configure its
359
- managed values at the Noodle deployment environment; none of these values belongs in the customer web
360
- application environment, and the API key never reaches the browser:
358
+ The embedded assistant uses a customer-supplied Responses-compatible endpoint, selected explicitly with
359
+ `transport: 'responses'` in `src/server.ts`. Use `transport: 'chat-completions'` or omit the field for a
360
+ Chat Completions endpoint. Noodle never falls back between them. Configure its managed values at the Noodle
361
+ deployment environment; none of these values belongs in the customer web application environment, and the
362
+ API key never reaches the browser:
361
363
 
362
364
  The assistant session carries a verified user, tenant, deployment, roles, and scopes. For this flagship's
363
365
  routed tools, the embedding backend resolves the signed-in user's cluster from server-owned membership data
@@ -576,13 +578,16 @@ secret allowlist; regenerate existing framework-owned environment binding types
576
578
  Devtools/model exercises to synthetic data, and obtain approval before sending real connector data to an
577
579
  external model.
578
580
 
579
- After deployment, use the assistant doctor to verify the embed client, model, and static session boundary:
581
+ After deployment, use the assistant doctor to verify the embed client, exact model transport, and static
582
+ session boundary:
580
583
 
581
584
  ```sh
582
585
  noodle assistant doctor --user-id <real-test-user> --origin "$PUBLIC_APP_ORIGIN" --org <org> --app <app> --env <env>
583
586
  ```
584
587
 
585
- The doctor does not invent or test an application-specific customer route. Prove routed assistant tools by
588
+ The doctor makes one bounded synthetic model request without business tools or customer conversation data;
589
+ failures show only a redacted category, status, and retryability. It does not invent or test an
590
+ application-specific customer route. Prove routed assistant tools by
586
591
  having the authenticated embedding backend pass the user's server-verified endpoint during session
587
592
  exchange, then invoke one representative safe read.
588
593
 
@@ -168,6 +168,7 @@ export default server(
168
168
  baseUrl: variable('ASSISTANT_MODEL_BASE_URL'),
169
169
  model: variable('ASSISTANT_MODEL'),
170
170
  apiKey: secret('ASSISTANT_MODEL_API_KEY'),
171
+ transport: 'responses',
171
172
  }),
172
173
  // Production origins are exact HTTPS; http://localhost:<port> is allowed for local development.
173
174
  access: authenticatedWebsite({
@@ -3,7 +3,7 @@ name: executing-noodle-plans
3
3
  description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:6a9f132ddb79352e -->
6
+ <!-- noodle-skill version:0.87.1 hash:6a9f132ddb79352e -->
7
7
 
8
8
  # Execute a Noodle Seed implementation plan
9
9
 
@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
3
3
  description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:efffbf82007f935d -->
6
+ <!-- noodle-skill version:0.87.1 hash:efffbf82007f935d -->
7
7
 
8
8
  # publishing-mcp-integrations
9
9
 
@@ -57,7 +57,7 @@ assistant: embeddedAssistant({
57
57
  }),
58
58
  ```
59
59
 
60
- `noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY") })`; that remains the portable BYO path.
60
+ `noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY"), transport: "responses" })` when the endpoint implements Responses. Omit `transport` or use `"chat-completions"` for Chat Completions. Noodle calls only the selected transport and never probes or falls back to the other endpoint.
61
61
 
62
62
  Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS. For a public surface it also prints a process-local Embed ID and script; mount that script on the separately running loopback website to test anonymous mint, chat, widgets, and confirmation. The local ID is ephemeral, while a hosted deploy provisions the stable ID behind durable admission counters.
63
63
 
@@ -206,7 +206,7 @@ Validate the active deployment, backend credential, exact origin, and delegated
206
206
  noodle assistant doctor --origin "$PUBLIC_APP_ORIGIN" --org <org> --app <app> --env <env>
207
207
  ```
208
208
 
209
- The doctor reads `NOODLE_ASSISTANT_CLIENT_ID` / `NOODLE_ASSISTANT_CLIENT_SECRET` or the saved mode-0600 client file and never prints the secret. Pass `--user-id <real-test-user>` only when the downstream exchange requires an existing application user. On a deployment with a mixed surface it also runs a synthetic sign-in round trip (`elevation` check): issue, claim, and elevate against a throwaway anonymous session on the same code path a real sign-in takes, proving the store is configured and that elevation rebinds the issuer basis to the backend client — so a green doctor now certifies the sign-in leg too, not just the authenticated exchange. The assistant doctor does not supply application-specific routes; after the backend mints a routed session, invoke one representative safe read to verify its route-bound exchange and connector together.
209
+ The doctor reads `NOODLE_ASSISTANT_CLIENT_ID` / `NOODLE_ASSISTANT_CLIENT_SECRET` or the saved mode-0600 client file and never prints the secret. It makes one bounded synthetic request through the active deployment's exact model transport without business tools or customer conversation data; failures expose only a redacted category, status, and retryability. Pass `--user-id <real-test-user>` only when the downstream exchange requires an existing application user. On a deployment with a mixed surface it also runs a synthetic sign-in round trip (`elevation` check): issue, claim, and elevate against a throwaway anonymous session on the same code path a real sign-in takes, proving the store is configured and that elevation rebinds the issuer basis to the backend client — so a green doctor now certifies the sign-in leg too, not just the authenticated exchange. The assistant doctor does not supply application-specific routes; after the backend mints a routed session, invoke one representative safe read to verify its route-bound exchange and connector together.
210
210
 
211
211
  ## Integrate the customer backend
212
212
 
@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
3
3
  description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:0f404109f4845683 -->
6
+ <!-- noodle-skill version:0.87.1 hash:0f404109f4845683 -->
7
7
 
8
8
  # reporting-noodle-feedback
9
9
 
@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
3
3
  description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:6ef6ef551e26b78e -->
6
+ <!-- noodle-skill version:0.87.1 hash:6ef6ef551e26b78e -->
7
7
 
8
8
  # verifying-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: wrapping-existing-applications
3
3
  description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:eccc3c158dcafba8 -->
6
+ <!-- noodle-skill version:0.87.1 hash:eccc3c158dcafba8 -->
7
7
 
8
8
  # wrapping-existing-applications
9
9
 
@@ -3,7 +3,7 @@ name: noodle-seed
3
3
  description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:13ddce01769caae4 -->
6
+ <!-- noodle-skill version:0.87.1 hash:13ddce01769caae4 -->
7
7
 
8
8
  # Noodle Seed
9
9
 
@@ -3,7 +3,7 @@ name: authoring-mcp-servers
3
3
  description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:11523cb33b9473c0 -->
6
+ <!-- noodle-skill version:0.87.1 hash:11523cb33b9473c0 -->
7
7
 
8
8
  # authoring-mcp-servers
9
9
 
@@ -3,7 +3,7 @@ name: building-mcp-apps
3
3
  description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:9fd67d4d24328e15 -->
6
+ <!-- noodle-skill version:0.87.1 hash:9fd67d4d24328e15 -->
7
7
 
8
8
  # building-mcp-apps
9
9
 
@@ -3,7 +3,7 @@ name: connecting-apis-to-mcp
3
3
  description: "Use when all four API-evidence inputs exist—and only then: API base URL, authentication scheme, representative safe read, and observed response."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:21bbd3ec441ffd30 -->
6
+ <!-- noodle-skill version:0.87.1 hash:21bbd3ec441ffd30 -->
7
7
 
8
8
  # connecting-apis-to-mcp
9
9
 
@@ -3,7 +3,7 @@ name: creating-product-agent-guides
3
3
  description: "Use when a Noodle Seed MCP server needs a new or revised product agent guide, App Package skill, or explicit product-skill regeneration."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:0fa48a82fe836cf0 -->
6
+ <!-- noodle-skill version:0.87.1 hash:0fa48a82fe836cf0 -->
7
7
 
8
8
  # creating-product-agent-guides
9
9
 
@@ -3,7 +3,7 @@ name: debugging-mcp-delivery
3
3
  description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:aa715bae12041d7c -->
6
+ <!-- noodle-skill version:0.87.1 hash:aa715bae12041d7c -->
7
7
 
8
8
  # debugging-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: deploying-mcp-services
3
3
  description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:93e735b7ffb45df1 -->
6
+ <!-- noodle-skill version:0.87.1 hash:93e735b7ffb45df1 -->
7
7
 
8
8
  # deploying-mcp-services
9
9
 
@@ -3,7 +3,7 @@ name: designing-mcp-products
3
3
  description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:78a6f181b61f92f1 -->
6
+ <!-- noodle-skill version:0.87.1 hash:78a6f181b61f92f1 -->
7
7
 
8
8
  # designing-mcp-products
9
9
 
@@ -3,7 +3,7 @@ name: embedding-mcp-assistants
3
3
  description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:cc54a67f21c0ecdb -->
6
+ <!-- noodle-skill version:0.87.1 hash:cc54a67f21c0ecdb -->
7
7
 
8
8
  # embedding-mcp-assistants
9
9
 
@@ -355,9 +355,11 @@ flag, environment variable, or config surface.
355
355
 
356
356
  ## Configuration
357
357
 
358
- The embedded assistant uses a customer-supplied OpenAI Chat Completions-compatible endpoint. Configure its
359
- managed values at the Noodle deployment environment; none of these values belongs in the customer web
360
- application environment, and the API key never reaches the browser:
358
+ The embedded assistant uses a customer-supplied Responses-compatible endpoint, selected explicitly with
359
+ `transport: 'responses'` in `src/server.ts`. Use `transport: 'chat-completions'` or omit the field for a
360
+ Chat Completions endpoint. Noodle never falls back between them. Configure its managed values at the Noodle
361
+ deployment environment; none of these values belongs in the customer web application environment, and the
362
+ API key never reaches the browser:
361
363
 
362
364
  The assistant session carries a verified user, tenant, deployment, roles, and scopes. For this flagship's
363
365
  routed tools, the embedding backend resolves the signed-in user's cluster from server-owned membership data
@@ -576,13 +578,16 @@ secret allowlist; regenerate existing framework-owned environment binding types
576
578
  Devtools/model exercises to synthetic data, and obtain approval before sending real connector data to an
577
579
  external model.
578
580
 
579
- After deployment, use the assistant doctor to verify the embed client, model, and static session boundary:
581
+ After deployment, use the assistant doctor to verify the embed client, exact model transport, and static
582
+ session boundary:
580
583
 
581
584
  ```sh
582
585
  noodle assistant doctor --user-id <real-test-user> --origin "$PUBLIC_APP_ORIGIN" --org <org> --app <app> --env <env>
583
586
  ```
584
587
 
585
- The doctor does not invent or test an application-specific customer route. Prove routed assistant tools by
588
+ The doctor makes one bounded synthetic model request without business tools or customer conversation data;
589
+ failures show only a redacted category, status, and retryability. It does not invent or test an
590
+ application-specific customer route. Prove routed assistant tools by
586
591
  having the authenticated embedding backend pass the user's server-verified endpoint during session
587
592
  exchange, then invoke one representative safe read.
588
593
 
@@ -168,6 +168,7 @@ export default server(
168
168
  baseUrl: variable('ASSISTANT_MODEL_BASE_URL'),
169
169
  model: variable('ASSISTANT_MODEL'),
170
170
  apiKey: secret('ASSISTANT_MODEL_API_KEY'),
171
+ transport: 'responses',
171
172
  }),
172
173
  // Production origins are exact HTTPS; http://localhost:<port> is allowed for local development.
173
174
  access: authenticatedWebsite({
@@ -3,7 +3,7 @@ name: executing-noodle-plans
3
3
  description: "Use when the user asks to execute an approved, decision-complete implementation plan for a Noodle Seed project task by task with test-first changes, review, recovery, and final verification."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:6a9f132ddb79352e -->
6
+ <!-- noodle-skill version:0.87.1 hash:6a9f132ddb79352e -->
7
7
 
8
8
  # Execute a Noodle Seed implementation plan
9
9
 
@@ -3,7 +3,7 @@ name: publishing-mcp-integrations
3
3
  description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:efffbf82007f935d -->
6
+ <!-- noodle-skill version:0.87.1 hash:efffbf82007f935d -->
7
7
 
8
8
  # publishing-mcp-integrations
9
9
 
@@ -57,7 +57,7 @@ assistant: embeddedAssistant({
57
57
  }),
58
58
  ```
59
59
 
60
- `noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY") })`; that remains the portable BYO path.
60
+ `noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY"), transport: "responses" })` when the endpoint implements Responses. Omit `transport` or use `"chat-completions"` for Chat Completions. Noodle calls only the selected transport and never probes or falls back to the other endpoint.
61
61
 
62
62
  Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS. For a public surface it also prints a process-local Embed ID and script; mount that script on the separately running loopback website to test anonymous mint, chat, widgets, and confirmation. The local ID is ephemeral, while a hosted deploy provisions the stable ID behind durable admission counters.
63
63
 
@@ -206,7 +206,7 @@ Validate the active deployment, backend credential, exact origin, and delegated
206
206
  noodle assistant doctor --origin "$PUBLIC_APP_ORIGIN" --org <org> --app <app> --env <env>
207
207
  ```
208
208
 
209
- The doctor reads `NOODLE_ASSISTANT_CLIENT_ID` / `NOODLE_ASSISTANT_CLIENT_SECRET` or the saved mode-0600 client file and never prints the secret. Pass `--user-id <real-test-user>` only when the downstream exchange requires an existing application user. On a deployment with a mixed surface it also runs a synthetic sign-in round trip (`elevation` check): issue, claim, and elevate against a throwaway anonymous session on the same code path a real sign-in takes, proving the store is configured and that elevation rebinds the issuer basis to the backend client — so a green doctor now certifies the sign-in leg too, not just the authenticated exchange. The assistant doctor does not supply application-specific routes; after the backend mints a routed session, invoke one representative safe read to verify its route-bound exchange and connector together.
209
+ The doctor reads `NOODLE_ASSISTANT_CLIENT_ID` / `NOODLE_ASSISTANT_CLIENT_SECRET` or the saved mode-0600 client file and never prints the secret. It makes one bounded synthetic request through the active deployment's exact model transport without business tools or customer conversation data; failures expose only a redacted category, status, and retryability. Pass `--user-id <real-test-user>` only when the downstream exchange requires an existing application user. On a deployment with a mixed surface it also runs a synthetic sign-in round trip (`elevation` check): issue, claim, and elevate against a throwaway anonymous session on the same code path a real sign-in takes, proving the store is configured and that elevation rebinds the issuer basis to the backend client — so a green doctor now certifies the sign-in leg too, not just the authenticated exchange. The assistant doctor does not supply application-specific routes; after the backend mints a routed session, invoke one representative safe read to verify its route-bound exchange and connector together.
210
210
 
211
211
  ## Integrate the customer backend
212
212
 
@@ -3,7 +3,7 @@ name: reporting-noodle-feedback
3
3
  description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:0f404109f4845683 -->
6
+ <!-- noodle-skill version:0.87.1 hash:0f404109f4845683 -->
7
7
 
8
8
  # reporting-noodle-feedback
9
9
 
@@ -3,7 +3,7 @@ name: verifying-mcp-delivery
3
3
  description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:6ef6ef551e26b78e -->
6
+ <!-- noodle-skill version:0.87.1 hash:6ef6ef551e26b78e -->
7
7
 
8
8
  # verifying-mcp-delivery
9
9
 
@@ -3,7 +3,7 @@ name: wrapping-existing-applications
3
3
  description: "Use when an existing application has no stable usable API and needs a read-only, identity-first Noodle Seed integration plan before implementation."
4
4
  ---
5
5
 
6
- <!-- noodle-skill version:0.87.0 hash:eccc3c158dcafba8 -->
6
+ <!-- noodle-skill version:0.87.1 hash:eccc3c158dcafba8 -->
7
7
 
8
8
  # wrapping-existing-applications
9
9