@noodleseed/one 0.136.0 → 0.138.0

package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js

@@ -88,6 +88,7 @@ export const SDK_EXPORTS = [
     'knowledge',
     'managedSecret',
     'meilisearch',
+    'noodleManaged',
     'openAICompatible',
     'prompt',
     'publicWebsite',

package/node_modules/@noodle-borg/agent-kit/dist/skill-embedded-assistant-ref.js

@@ -32,7 +32,8 @@ export function renderEmbeddedAssistantReference() {
         '| Owner | Values | Destination |',
         '| --- | --- | --- |',
         '| Noodle operator | Login, selected org/app/env | Plugin-managed CLI profile and explicit target; never the SaaS runtime |',
-        '| Noodle deployment | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY` | `noodle variables set` / `noodle secrets set`; never the SaaS environment |',
+        '| Noodle-managed model | No authored provider, model id, URL, or key | Hosted operator state; available only when Noodle has enrolled the exact org/app/env |',
+        '| Operator-provided model | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY` | `noodle variables set` / `noodle secrets set`; never the SaaS environment |',
         '| Connector/delegated exchange | Connector credentials and any customer-owned token-exchange client | Noodle managed configuration plus the matching customer backend secret manager |',
         '| SaaS backend | `NOODLE_SERVICE_URL`, `NOODLE_ASSISTANT_CLIENT_ID`, `NOODLE_ASSISTANT_CLIENT_SECRET`, `PUBLIC_APP_ORIGIN` | Backend-only environment or secret manager; never browser code or public-prefixed variables |',
         '| Browser | Short-lived assistant session only | In memory; never a client secret, model key, connector credential, or raw application session |',
@@ -51,11 +52,7 @@ export function renderEmbeddedAssistantReference() {
         'branding: { name: "Acme", accent: "#3157D5" },',
         'context: { defaults: { locale: "en-GB", timeZone: "Europe/London" } },',
         'assistant: embeddedAssistant({',
-        '  model: openAICompatible({',
-        '    baseUrl: variable("ASSISTANT_MODEL_BASE_URL"),',
-        '    model: variable("ASSISTANT_MODEL"),',
-        '    apiKey: secret("ASSISTANT_MODEL_API_KEY"),',
-        '  }),',
+        '  model: noodleManaged(),',
         '  access: authenticatedWebsite({',
         '    origins: ["http://localhost:3000", "https://app.example.com"],',
         '  }),',
@@ -63,6 +60,8 @@ export function renderEmbeddedAssistantReference() {
         '}),',
         '```',
         '',
+        '`noodleManaged()` is the zero-configuration Cloud path: the public artifact contains only `{ kind: "noodle-managed" }`. It never exposes a provider or model identifier, and it fails closed unless Noodle has enrolled that exact deployment target. For a customer- or self-hosted model, replace it with `openAICompatible({ baseUrl: variable("ASSISTANT_MODEL_BASE_URL"), model: variable("ASSISTANT_MODEL"), apiKey: secret("ASSISTANT_MODEL_API_KEY") })`; that remains the portable BYO path.',
+        '',
         'Origins are exact: scheme, host, and optional port, with no path, trailing slash, or wildcard. Production origins must be HTTPS; plain HTTP is accepted only for loopback development origins (`http://localhost:<port>`, `http://127.0.0.1:<port>`). `noodle dev` serves the MCP project, not the embedding SaaS. For a public surface it also prints a process-local Embed ID and script; mount that script on the separately running loopback website to test anonymous mint, chat, widgets, and confirmation. The local ID is ephemeral, while a hosted deploy provisions the stable ID behind durable admission counters.',
         '',
         '## Product workflow guidance',
@@ -169,7 +168,7 @@ export function renderEmbeddedAssistantReference() {
         'noodle deploy --org <org> --app <app> --env <env>',
         '```',
         '',
-        'Deploy preflights the complete target before upload. In an interactive terminal it collects all missing model variables and secrets, then continues. In a non-interactive run it reports every missing name and safe `noodle variables set ... --from-env` / `noodle secrets set ... --from-env` action; perform every action and repeat the same deploy command. Values never appear in the preflight report or resume state. Do not put these model values in the embedding SaaS environment. A production deployment may omit a local origin; include a loopback origin only when local browser integration is required.',
+        'Deploy preflights the complete target before upload. `noodleManaged()` has no customer model variables or secrets; enrollment is hosted operator state and an unenrolled target fails closed at serving time. `openAICompatible()` preflight collects or reports every missing model variable and secret with safe `noodle variables set ... --from-env` / `noodle secrets set ... --from-env` actions. Values never appear in the preflight report or resume state. Do not put BYO model values in the embedding SaaS environment. A production deployment may omit a local origin; include a loopback origin only when local browser integration is required.',
         '',
         '## Access modes and customer auth',
         '',
@@ -516,14 +515,19 @@ export function renderEmbeddedAssistantReference() {
         '',
         '`settle` must await or catch the command promise; the same structured failure also appears in the hook `error` state.',
         '',
-        'The sample fails closed on input requests until you replace that branch with a form generated from `requestedSchema`. A custom renderer must show the complete confirmation review and both decisions, handle every part it supports, and surface an explicit unsupported state for the rest. For `data-view`, use `NoodleAppView` to render the linked App or deliberately map `resourceUri`/tool plus the bounded redacted `result` to an application-trusted native component. JSON result data is not the linked App UI. Never inject `part.data.html`, assign it to `srcdoc`, fetch a `ui://` URI, or reproduce the bridge with a direct Ext Apps dependency. Do not wrap this client in another chat transport or invent user messages for interaction continuations.',
+        'The sample fails closed on input requests until you replace that branch with a form generated from `requestedSchema`. A custom renderer must show the complete confirmation review and both decisions, handle every part it supports, and surface an explicit unsupported state for the rest. For `data-view`, use the canonical `<noodle-app-view>` host (or its React `NoodleAppView` adapter) to render the linked App, or deliberately map `resourceUri`/tool plus the bounded redacted `result` to an application-trusted native component. JSON result data is not the linked App UI. Never inject `part.data.html`, assign it to `srcdoc`, fetch a `ui://` URI, or reproduce the bridge with a direct Ext Apps dependency. Do not wrap this client in another chat transport or invent user messages for interaction continuations.',
+        '',
+        '`<noodle-app-view>` owns one bridge for the semantic view identity: client + `view.id` + `view.resourceUri`; `NoodleAppView` delegates to it. The host retains the iframe across fresh payload/callback/theme rerenders, publishes later resolved-theme changes through MCP Apps host context, and sends standard App teardown when that semantic identity changes, the element disconnects, or the App requests teardown. App views remain inline by default; the host advertises only inline presentation and rejects widget fullscreen requests. Opt in with `allowFullscreen` on `NoodleAppView` or `allow-fullscreen` on `<noodle-app-view>` only when fullscreen is an intentional part of the customer-owned experience. When fullscreen is accepted, the shared host adds an accessible top-right exit control that returns the same mounted App to inline mode without losing its state. Pass the same resolved application theme used by the conversation shell. Do not key an ancestor by a view object or callback. If the embedding page sets Content-Security-Policy, include the Noodle service origin in both `connect-src` and `frame-src`.',
         '',
-        '`NoodleAppView` owns one bridge for the semantic view identity: client + `view.id` + `view.resourceUri`. It retains the iframe across fresh payload/callback/theme rerenders, reads current payloads through refs, publishes later resolved-theme changes through MCP Apps host context, and sends standard App teardown only when that semantic identity changes or the component unmounts. Pass the same resolved application theme used by the conversation shell. Do not key an ancestor by a view object or callback. If the embedding page sets Content-Security-Policy, include the Noodle service origin in both `connect-src` and `frame-src`.',
+        'Outside React, use the same DOM-free client directly and import the isolated App-view entry only when rendering linked Apps. The client keeps the session token in memory, the transcript stays React-free, and the element owns only App presentation:',
         '',
-        'Outside React, use the same DOM-free client directly. It keeps the session token in memory, exposes a React-free `UIMessage` transcript with typed parts, and never registers a custom element:',
+        '```html',
+        '<noodle-app-view id="assistant-app-view"></noodle-app-view>',
+        '```',
         '',
         '```ts',
         'import { createAssistantClient } from "@noodleseed/assistant/client";',
+        'import "@noodleseed/assistant/app-view";',
         '',
         'const assistant = createAssistantClient({',
         '  sessionEndpoint: "/api/assistant/session",',
@@ -533,6 +537,11 @@ export function renderEmbeddedAssistantReference() {
         '  }),',
         '});',
         '',
+        'const appView = document.querySelector("#assistant-app-view");',
+        'if (!appView) throw new Error("Missing App view host");',
+        'appView.client = assistant;',
+        "appView.theme = document.documentElement.classList.contains('dark') ? 'dark' : 'light';",
+        '',
         'assistant.updateModelContext({',
         "  content: [{ type: 'text', text: 'The time-off form is mounted.' }],",
         "  structuredContent: { widget: { name: 'time-off', lifecycle: 'mounted' } },",
@@ -551,7 +560,7 @@ export function renderEmbeddedAssistantReference() {
         '        pending = { id: part.data.id, requestedSchema: part.data.requestedSchema };',
         '      }',
         "      if (part.type === 'data-view') {",
-        '        renderRegisteredView(part.data.resourceUri, part.data.result);',
+        '        appView.view = part.data;',
         '      }',
         '    }',
         '  }',
@@ -590,7 +599,7 @@ export function renderEmbeddedAssistantReference() {
         '});',
         '```',
         '',
-        '`data-view` means a completed tool has a linked MCP App view. In a customer-owned React renderer, pass that typed part and the existing client to `NoodleAppView`; it retains one bridge for client + `view.id` + `view.resourceUri` and requests standard App teardown on semantic replacement or unmount. That pair is transport identity: different call ids are distinct invocations and must not be deduplicated generically. If the product intentionally owns one current panel for a known resource, declare an application-owned slot map and replace only that slot. Deliberately map the bounded result to an application-trusted native component only when replacing the linked App UI.',
+        '`data-view` means a completed tool has a linked MCP App view. Pass that typed part and the existing client to `<noodle-app-view>` in Vue, Angular, or plain DOM, or to its `NoodleAppView` React adapter. It retains one bridge for client + `view.id` + `view.resourceUri` and requests standard App teardown on semantic replacement, disconnect, or App request. That pair is transport identity: different call ids are distinct invocations and must not be deduplicated generically. If the product intentionally owns one current panel for a known resource, declare an application-owned slot map and replace only that slot. Deliberately map the bounded result to an application-trusted native component only when replacing the linked App UI.',
         '',
         '`clientContext` and typed `pageContext` are recomputed for each turn. `updateContext(...)` remains the legacy session-exchange context; `updatePageContext(...)` replaces the fresh per-turn application hint. `updateModelContext({ content, structuredContent })` publishes one cohesive renderer snapshot for later message turns without starting a turn; every call replaces the prior snapshot rather than merging fields. These are untrusted data, not conversation history or authorization input, and the boundaries reject credential-shaped or unbounded updates. A message may re-exchange once after a pre-execution `401`; the client never auto-retries interaction decisions. `tool_proposed.arguments` is a complete schema-aware review projection and, for connector-backed tools, names the sole exact connector version/operation/resolved arguments. Sensitive/write-only fields are redacted; truncating or omitting any non-sensitive action field fails closed. Accept is bound to the server-held action and claims at most one execution attempt—clients cannot replace it. Normal terminal outcomes scrub private arguments and continuations immediately; only an accepted action still executing retains them for the one-hour unknown-outcome recovery window, after which it records `interaction_outcome_unknown` and scrubs. Without downstream idempotency this is not an exactly-once business-effect guarantee. To reconcile a lost response, explicitly repeat the same id and decision: the service returns its durable stored outcome without re-execution.',
         '',
@@ -615,7 +624,7 @@ export function renderEmbeddedAssistantReference() {
         '',
         '- Node.js 20+ for `@noodleseed/assistant/server`.',
         '- The package ships ESM and CommonJS with full export conditions; no bundler aliases, `transpilePackages`, or ambient type shims are needed. If resolution fails, the installed package version is outdated: update `@noodleseed/assistant` instead of adding workarounds.',
-        '- TypeScript `moduleResolution` `bundler` or `node16` recommended; classic `node` also resolves the `/client`, `/react`, `/react/client`, and `/server` subpaths.',
+        '- TypeScript `moduleResolution` `bundler` or `node16` recommended; classic `node` also resolves the `/app-view`, `/client`, `/react`, `/react/client`, and `/server` subpaths.',
         '',
         '## Verify the boundary',
         '',

package/node_modules/@noodle-borg/agent-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodle-borg/agent-kit",
-  "version": "0.81.0",
+  "version": "0.82.0",
   "license": "Apache-2.0",
   "type": "module",
   "engines": {

package/node_modules/@noodle-borg/assistant-gateway/dist/assistant-store.d.ts

@@ -31,6 +31,8 @@ export interface AssistantSessionRecord {
     readonly clientId: string;
     readonly tenant: TenantRef;
     readonly deploymentId: string;
+    /** Model funding boundary pinned with the deployment that minted this session. */
+    readonly modelSource?: 'operator' | 'noodle-managed';
     readonly origin: string;
     readonly caller: CallerIdentity;
     /** Canonical customer endpoint routes; private session authority, never caller or response data. */
@@ -59,8 +61,8 @@ export interface AssistantSessionRecord {
     readonly absoluteExpiresAt: string;
     readonly history: AssistantHistoryMessage[];
     /**
-     * Model turns already spent. Durable and separate from `history`, which truncates to the last twelve
-     * messages: history is a prompt-window trim, never a bound.
+     * Model turns already spent. Durable and separate from `history`, which keeps a bounded recent
+     * prompt window and is never the admission bound.
      */
     readonly turnCount: number;
 }
@@ -78,6 +80,8 @@ export interface AssistantHistoryMessage {
     readonly role: 'user' | 'assistant';
     readonly content: string;
 }
+/** Latest prompt messages retained for model continuity; turn admission is tracked separately. */
+export declare const ASSISTANT_HISTORY_MAX_MESSAGES = 40;
 export type AssistantSessionElevation = {
     readonly ok: true;
     readonly session: AssistantSessionRecord;

package/node_modules/@noodle-borg/assistant-gateway/dist/assistant-store.js

@@ -22,6 +22,8 @@ export const ASSISTANT_BROWSER_UI_FIELDS = [
     'locale',
     'direction',
 ];
+/** Latest prompt messages retained for model continuity; turn admission is tracked separately. */
+export const ASSISTANT_HISTORY_MAX_MESSAGES = 40;
 export class InMemoryAssistantStore {
     #clients = new Map();
     #sessions = new Map();
@@ -163,8 +165,9 @@ export class InMemoryAssistantStore {
         if (!session)
             return;
         session.history.push(...messages);
-        if (session.history.length > 12)
-            session.history.splice(0, session.history.length - 12);
+        if (session.history.length > ASSISTANT_HISTORY_MAX_MESSAGES) {
+            session.history.splice(0, session.history.length - ASSISTANT_HISTORY_MAX_MESSAGES);
+        }
     }
     async createInteraction(input) {
         const proposalTime = new Date(input.createdAt ?? new Date());

package/node_modules/@noodle-borg/assistant-gateway/dist/model-request.js

@@ -0,0 +1,37 @@
+import { readModelCompletion } from './model-stream.js';
+export async function requestModelCompletion(input) {
+    const { binding } = input;
+    const url = new URL(`${binding.baseUrl.replace(/\/$/, '')}/chat/completions`);
+    if (url.protocol !== 'https:' || url.username || url.password) {
+        throw new Error('unsafe model endpoint');
+    }
+    const completionLimit = input.maxCompletionTokens ?? binding.requestPolicy?.maxCompletionTokens;
+    const body = JSON.stringify({
+        ...binding.requestPolicy?.extraBody,
+        model: binding.model,
+        stream: true,
+        messages: input.messages,
+        tools: input.tools,
+        ...(completionLimit === undefined ? {} : { max_completion_tokens: completionLimit }),
+    });
+    const requestBytes = new TextEncoder().encode(body).byteLength;
+    const maxRequestBytes = binding.requestPolicy?.maxRequestBytes;
+    if (maxRequestBytes !== undefined && requestBytes > maxRequestBytes) {
+        throw new Error('model request too large');
+    }
+    const bearerToken = binding.apiKey ?? (await binding.bearerToken());
+    if (!/^[^\s]{1,8192}$/.test(bearerToken))
+        throw new Error('invalid model bearer token');
+    const timeoutSignal = AbortSignal.timeout(binding.requestPolicy?.timeoutMs ?? 30_000);
+    const response = await input.fetcher(url.href, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${bearerToken}`, 'content-type': 'application/json' },
+        body,
+        redirect: 'manual',
+        signal: input.signal === undefined ? timeoutSignal : AbortSignal.any([input.signal, timeoutSignal]),
+    });
+    if (!response.ok)
+        throw new Error(`model request failed (${response.status})`);
+    return readModelCompletion(response, input.onContent ?? (() => undefined), input.maxResponseBytes);
+}
+//# sourceMappingURL=model-request.js.map

package/node_modules/@noodle-borg/assistant-gateway/dist/model-runtime.js

@@ -0,0 +1,4 @@
+/** Provider-neutral embedded-assistant model transport. */
+export * from './model-request.js';
+export * from './model-stream.js';
+//# sourceMappingURL=model-runtime.js.map

package/node_modules/@noodle-borg/{service/dist/assistant-model-stream.js → assistant-gateway/dist/model-stream.js}

@@ -2,7 +2,11 @@ export async function readModelCompletion(response, onContent, maxBytes = 1 << 2
     const contentType = response.headers.get('content-type') ?? '';
     if (!contentType.includes('text/event-stream')) {
         const text = await readBoundedText(response, maxBytes);
-        const completion = JSON.parse(text);
+        const parsed = JSON.parse(text);
+        const completion = {
+            choices: parsed.choices,
+            ...normalizeUsage(parsed.usage),
+        };
         const message = completion.choices[0]?.message;
         if (!message?.tool_calls?.length && message?.content)
             onContent(message.content);
@@ -15,6 +19,7 @@ export async function readModelCompletion(response, onContent, maxBytes = 1 << 2
     const toolCalls = new Map();
     let pending = '';
     let content = '';
+    let usage;
     let bytes = 0;
     while (true) {
         const { done, value } = await reader.read();
@@ -36,6 +41,7 @@ export async function readModelCompletion(response, onContent, maxBytes = 1 << 2
             const parsed = JSON.parse(data);
             if (parsed.error !== undefined)
                 throw new Error('model stream returned an error');
+            usage = normalizeUsageValue(parsed.usage) ?? usage;
             const delta = parsed.choices?.[0]?.delta;
             if (delta?.content) {
                 content += delta.content;
@@ -80,8 +86,34 @@ export async function readModelCompletion(response, onContent, maxBytes = 1 << 2
                 },
             },
         ],
+        ...(usage === undefined ? {} : { usage }),
     };
 }
+function normalizeUsage(usage) {
+    const normalized = normalizeUsageValue(usage);
+    return normalized === undefined ? {} : { usage: normalized };
+}
+function normalizeUsageValue(usage) {
+    if (usage === undefined)
+        return undefined;
+    const promptTokens = nonNegativeInteger(usage.prompt_tokens);
+    const completionTokens = nonNegativeInteger(usage.completion_tokens);
+    const reportedTotalTokens = nonNegativeInteger(usage.total_tokens);
+    if (promptTokens === undefined || completionTokens === undefined) {
+        return undefined;
+    }
+    const totalTokens = reportedTotalTokens ?? promptTokens + completionTokens;
+    const reasoningTokens = nonNegativeInteger(usage.completion_tokens_details?.reasoning_tokens);
+    return {
+        promptTokens,
+        completionTokens,
+        totalTokens,
+        ...(reasoningTokens === undefined ? {} : { reasoningTokens }),
+    };
+}
+function nonNegativeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+}
 async function readBoundedText(response, maxBytes) {
     const text = await response.text();
     if (new TextEncoder().encode(text).byteLength > maxBytes) {
@@ -89,4 +121,4 @@ async function readBoundedText(response, maxBytes) {
     }
     return text;
 }
-//# sourceMappingURL=assistant-model-stream.js.map
+//# sourceMappingURL=model-stream.js.map

package/node_modules/@noodle-borg/assistant-gateway/dist/public-session.d.ts

@@ -1,6 +1,7 @@
 import type { AdmissionEnvelope, DailyCounterStore } from '@noodle-borg/admission-limits/portable';
 import { type PublicEmbedRecord, type PublicEmbedStore } from './embed-store.js';
 import type { PublicSurface } from './public-surface.js';
+import { type SurfaceBudgetBounds } from './surface-budget.js';
 /**
  * Minting an anonymous session for a public page.
  *
@@ -17,6 +18,8 @@ export interface PublicSessionPorts {
     readonly counters: DailyCounterStore;
     /** The live surface for this tenant, read from the *active* deployment at mint time. */
     resolveActiveSurface(embed: PublicEmbedRecord): Promise<PublicSurface | undefined>;
+    /** Optional hosted entitlement; absent preserves the ordinary customer-funded envelope. */
+    readonly resolveBudgetBounds?: (embed: PublicEmbedRecord) => Promise<SurfaceBudgetBounds | undefined>;
     /** Persist the anonymous session and return its bearer token and expiry. */
     createSession(input: {
         readonly embed: PublicEmbedRecord;

package/node_modules/@noodle-borg/assistant-gateway/dist/public-session.js

@@ -30,7 +30,8 @@ export async function mintPublicSession(request, envelope, ports) {
     }
     // The surface's own budget, which an operator may have lowered — or set to zero, which is the kill
     // switch. Resolved after the embed is known and before anything is spent.
-    const surfaceLimits = surfaceEnvelope(envelope, embed);
+    const budgetBounds = await ports.resolveBudgetBounds?.(embed);
+    const surfaceLimits = surfaceEnvelope(envelope, embed, budgetBounds);
     const now = ports.now();
     // Fairness before solvency: an address at its hourly ceiling is refused without spending any of the
     // surface's day, so one visitor cannot burn the customer's budget on refusals.

package/node_modules/@noodle-borg/assistant-gateway/dist/public-turn.d.ts

@@ -1,6 +1,7 @@
 import type { AdmissionEnvelope, DailyCounterStore } from '@noodle-borg/admission-limits/portable';
 import type { AssistantTurnConsumption } from './assistant-store.js';
-import type { PublicEmbedStore } from './embed-store.js';
+import type { PublicEmbedRecord, PublicEmbedStore } from './embed-store.js';
+import { type SurfaceBudgetBounds } from './surface-budget.js';
 /**
  * Whether an anonymous visitor's next turn runs.
  *
@@ -16,6 +17,8 @@ export interface PublicTurnPorts {
     readonly counters: DailyCounterStore;
     /** Re-read per turn: it carries the operator's live budget, and whether the surface still exists. */
     readonly embeds: Pick<PublicEmbedStore, 'lookup'>;
+    /** Optional hosted entitlement; resolved live so cohort removal lowers the envelope immediately. */
+    readonly resolveBudgetBounds?: (embed: PublicEmbedRecord) => Promise<SurfaceBudgetBounds | undefined>;
     /** Spend one of this session's turns, atomically (admission tier 1). */
     consumeTurn(id: string, limit: number): Promise<AssistantTurnConsumption>;
     now(): Date;

package/node_modules/@noodle-borg/assistant-gateway/dist/public-turn.js

@@ -22,7 +22,8 @@ export async function admitPublicTurn(request, defaults, ports) {
             message: 'assistant is unavailable right now',
         };
     }
-    const envelope = surfaceEnvelope(defaults, embed);
+    const budgetBounds = await ports.resolveBudgetBounds?.(embed);
+    const envelope = surfaceEnvelope(defaults, embed, budgetBounds);
     // Fairness before either of the budgets below: an address at its hourly ceiling is turned away
     // without spending the session's allowance or the customer's day, so one visitor cannot burn either
     // on turns that were never served. Mirrors the ordering the mint uses.

package/node_modules/@noodle-borg/assistant-gateway/dist/surface-budget.d.ts

@@ -1,5 +1,10 @@
 import { type AdmissionEnvelope } from '@noodle-borg/admission-limits/portable';
 import type { PublicEmbedRecord } from './embed-store.js';
+/** Hosted/operator entitlement layered between structural maxima and per-surface overrides. */
+export interface SurfaceBudgetBounds {
+    readonly defaults: Pick<AdmissionEnvelope, 'turnsPerSession' | 'turnsPerDay' | 'mintsPerDay'>;
+    readonly ceiling: Pick<AdmissionEnvelope, 'turnsPerDay' | 'mintsPerDay'>;
+}
 /**
  * One surface's daily budget, resolved from the operator's override and the deployment's defaults.
  *
@@ -12,5 +17,5 @@ import type { PublicEmbedRecord } from './embed-store.js';
  * operator any more than by app code, so an over-eager `--turns-per-day 999999999` degrades to the
  * ceiling instead of becoming the ceiling. Zero survives clamping and is the kill switch.
  */
-export declare function surfaceEnvelope(base: AdmissionEnvelope, embed: Pick<PublicEmbedRecord, 'turnsPerDay' | 'mintsPerDay'>): AdmissionEnvelope;
+export declare function surfaceEnvelope(base: AdmissionEnvelope, embed: Pick<PublicEmbedRecord, 'turnsPerDay' | 'mintsPerDay'>, bounds?: SurfaceBudgetBounds): AdmissionEnvelope;
 //# sourceMappingURL=surface-budget.d.ts.map

package/node_modules/@noodle-borg/assistant-gateway/dist/surface-budget.js

@@ -11,13 +11,19 @@ import { clamp } from '@noodle-borg/admission-limits/portable';
  * operator any more than by app code, so an over-eager `--turns-per-day 999999999` degrades to the
  * ceiling instead of becoming the ceiling. Zero survives clamping and is the kill switch.
  */
-export function surfaceEnvelope(base, embed) {
-    if (embed.turnsPerDay === undefined && embed.mintsPerDay === undefined)
-        return base;
-    return clamp({
-        ...base,
+export function surfaceEnvelope(base, embed, bounds) {
+    const effectiveBase = bounds === undefined ? base : clamp({ ...base, ...bounds.defaults });
+    const requested = clamp({
+        ...effectiveBase,
         ...(embed.turnsPerDay !== undefined ? { turnsPerDay: embed.turnsPerDay } : {}),
         ...(embed.mintsPerDay !== undefined ? { mintsPerDay: embed.mintsPerDay } : {}),
     });
+    if (bounds === undefined)
+        return requested;
+    return {
+        ...requested,
+        turnsPerDay: Math.min(requested.turnsPerDay, bounds.ceiling.turnsPerDay),
+        mintsPerDay: Math.min(requested.mintsPerDay, bounds.ceiling.mintsPerDay),
+    };
 }
 //# sourceMappingURL=surface-budget.js.map

package/node_modules/@noodle-borg/assistant-gateway/package.json

@@ -17,6 +17,10 @@
       "types": "./dist/portable.d.ts",
       "import": "./dist/portable.js"
     },
+    "./model-runtime": {
+      "types": "./dist/model-runtime.d.ts",
+      "import": "./dist/model-runtime.js"
+    },
     "./postgres": {
       "types": "./dist/postgres.d.ts",
       "import": "./dist/postgres.js"
@@ -36,7 +40,7 @@
     "@noodle-borg/module": "0.0.0",
     "@noodle-borg/protocol": "0.0.0",
     "@noodle-borg/runtime": "0.0.0",
-    "@noodleseed/assistant": "1.22.0"
+    "@noodleseed/assistant": "1.23.0"
   },
   "devDependencies": {
     "@types/node": "^24.13.1",

package/node_modules/@noodle-borg/authoring/dist/assistant.d.ts

@@ -59,6 +59,7 @@ export interface AssistantLabels {
     readonly copy?: string;
     readonly newMessages?: string;
     readonly reconnect?: string;
+    readonly newConversation?: string;
     readonly retry?: string;
     readonly unavailable?: string;
     readonly sessionExpired?: string;
@@ -108,6 +109,11 @@ export interface OpenAICompatibleModel {
     /** Managed secret name, never the secret value. */
     readonly apiKey: string;
 }
+/** Provider-neutral request for the model selected and operated by Noodle Seed Cloud. */
+export interface NoodleManagedModel {
+    readonly kind: 'noodle-managed';
+}
+export type AssistantModel = OpenAICompatibleModel | NoodleManagedModel;
 /**
  * A verified session claim the embedding backend may pass at session exchange. Keys become
  * `${user.claims.<key>}` in tool fulfilment; `exposeToModel: true` additionally places the value
@@ -184,7 +190,7 @@ export interface PublicWebsiteInput {
 export declare function authenticatedWebsite(input: AuthenticatedWebsiteInput): AuthenticatedWebsiteAccess;
 export declare function publicWebsite(input: PublicWebsiteInput): PublicWebsiteAccess;
 export interface EmbeddedAssistantOptions extends AssistantUiOptions {
-    readonly model: OpenAICompatibleModel;
+    readonly model: AssistantModel;
     /** One surface, or every front door this assistant serves. */
     readonly access: AssistantAccess | readonly AssistantAccess[];
 }
@@ -197,7 +203,7 @@ export interface AssistantSurfaceConfig {
     readonly sessionClaims?: Readonly<Record<string, SessionClaimDeclaration>>;
 }
 export interface EmbeddedAssistantConfig extends AssistantUiOptions {
-    readonly model: OpenAICompatibleModel;
+    readonly model: AssistantModel;
     readonly surfaces: readonly AssistantSurfaceConfig[];
     /**
      * Union of every surface's origins. Kept at the top level so the service's origin check and the
@@ -208,5 +214,7 @@ export interface EmbeddedAssistantConfig extends AssistantUiOptions {
     readonly sessionClaims?: Readonly<Record<string, SessionClaimDeclaration>>;
 }
 export declare function openAICompatible(input: OpenAICompatibleModelInput): OpenAICompatibleModel;
+/** Use Noodle Seed Cloud's operator-selected model. Provider details never enter authored source. */
+export declare function noodleManaged(): NoodleManagedModel;
 export declare function embeddedAssistant(input: EmbeddedAssistantOptions): EmbeddedAssistantConfig;
 //# sourceMappingURL=assistant.d.ts.map

package/node_modules/@noodle-borg/authoring/dist/assistant.js

@@ -33,6 +33,10 @@ export function openAICompatible(input) {
         apiKey: serializeSecretRef(input.apiKey, 'assistant.model.apiKey'),
     };
 }
+/** Use Noodle Seed Cloud's operator-selected model. Provider details never enter authored source. */
+export function noodleManaged() {
+    return { kind: 'noodle-managed' };
+}
 export function embeddedAssistant(input) {
     const { model, access, suggestedPrompts, ...ui } = input;
     assertAccessDeclared(input, access);

package/node_modules/@noodle-borg/authoring/dist/index.d.ts

@@ -2,7 +2,7 @@ import type { ConnectorFile, HttpConnectorDef } from '@noodle-borg/connector-def
 import { z } from 'zod';
 export type { PackagedAssetReference } from '@noodle-borg/compiler';
 export type { AgentCapabilityKind, AgentCapabilityRef, AgentExampleSource, AgentGuideSource, AgentWorkflowSource, AgentWorkflowStepSource, } from './agent-guide.js';
-export { type AssistantAccess, type AssistantCapability, type AssistantLabels, type AssistantLayoutMode, type AssistantPosition, type AssistantPresentationOptions, type AssistantPresentationTone, type AssistantSurfaceConfig, type AssistantSurfaceMode, type AssistantThemeMode, type AssistantUiOptions, type AuthenticatedWebsiteAccess, type AuthenticatedWebsiteInput, authenticatedWebsite, type CapabilityRef, type EmbeddedAssistantConfig, type EmbeddedAssistantOptions, embeddedAssistant, type OpenAICompatibleModel, type OpenAICompatibleModelInput, openAICompatible, type PublicWebsiteAccess, type PublicWebsiteInput, publicWebsite, } from './assistant.js';
+export { type AssistantAccess, type AssistantCapability, type AssistantLabels, type AssistantLayoutMode, type AssistantModel, type AssistantPosition, type AssistantPresentationOptions, type AssistantPresentationTone, type AssistantSurfaceConfig, type AssistantSurfaceMode, type AssistantThemeMode, type AssistantUiOptions, type AuthenticatedWebsiteAccess, type AuthenticatedWebsiteInput, authenticatedWebsite, type CapabilityRef, type EmbeddedAssistantConfig, type EmbeddedAssistantOptions, embeddedAssistant, type NoodleManagedModel, noodleManaged, type OpenAICompatibleModel, type OpenAICompatibleModelInput, openAICompatible, type PublicWebsiteAccess, type PublicWebsiteInput, publicWebsite, } from './assistant.js';
 export { type ConfigRef, type ConfigRefKind, secret, variable, } from './config.js';
 export { type BoundConnectorRef, bind, type ConnectionBinding, type ConnectionRef, type ConnectionSource, clientCredentials, connection, externalExchange, type GoogleWorkloadIdentityAccess, googleWorkloadIdentity, managedSecret, } from './connections.js';
 export { type ComputeHost, type ComputeLimits, type ComputeOperationOptions, ConnectorBuilder, type ConnectorCatalogDoc, type ConnectorOpDefinition, type ConnectorOperationOptions, type ConnectorRef, connector, type HttpConnectorOptions, } from './connectors.js';

package/node_modules/@noodle-borg/authoring/dist/index.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export { authenticatedWebsite, embeddedAssistant, openAICompatible, publicWebsite, } from './assistant.js';
+export { authenticatedWebsite, embeddedAssistant, noodleManaged, openAICompatible, publicWebsite, } from './assistant.js';
 export { secret, variable, } from './config.js';
 export { bind, clientCredentials, connection, externalExchange, googleWorkloadIdentity, managedSecret, } from './connections.js';
 export { ConnectorBuilder, connector, } from './connectors.js';

package/node_modules/@noodle-borg/authoring/dist/load-authored.js

@@ -33,7 +33,7 @@ export function prepareAuthoringRuntimeDir(dir, options) {
             './react': './react.mjs',
         },
     }));
-    writeFileSync(join(self, 'index.mjs'), "export { annotations, asset, authenticatedWebsite, bind, clientCredentials, connector, connection, customerAuth, customerEndpoint, embeddedAssistant, externalExchange, file, gmailConnector, googleWorkloadIdentity, handoffSession, knowledge, managedSecret, openAICompatible, prompt, publicWebsite, resource, secret, server, site, tool, variable, when, z } from '@noodle-borg/authoring';\n");
+    writeFileSync(join(self, 'index.mjs'), "export { annotations, asset, authenticatedWebsite, bind, clientCredentials, connector, connection, customerAuth, customerEndpoint, embeddedAssistant, externalExchange, file, gmailConnector, googleWorkloadIdentity, handoffSession, knowledge, managedSecret, noodleManaged, openAICompatible, prompt, publicWebsite, resource, secret, server, site, tool, variable, when, z } from '@noodle-borg/authoring';\n");
     writeFileSync(join(self, 'platform.mjs'), "export { noodlePlatform, noodlePlatformCatalog } from '@noodle-borg/authoring';\n");
     writeFileSync(join(self, 'react.mjs'), "export { generateHelpers } from '@noodle-borg/authoring/react';\n");
 }

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-assistant.js

@@ -203,6 +203,23 @@ export const ASSISTANT_COMMAND = {
         CLIENTS_SUBCOMMAND,
         EMBEDS_SUBCOMMAND,
         BUDGET_SUBCOMMAND,
+        subcommand({
+            ...SUBCOMMAND_FIELDS,
+            name: 'usage',
+            summary: 'Show assistant sessions, conversation depth, engagement, latency, and model tokens.',
+            flags: [
+                flag({
+                    ...FLAG_FIELDS,
+                    name: 'window',
+                    type: 'string',
+                    value: '<window>',
+                    summary: 'Aggregation window.',
+                    constraints: { choices: ['24h', '7d', '30d'], default: '7d' },
+                }),
+                ...TENANT_FLAGS,
+            ],
+            jsonOutput: { mode: 'single' },
+        }),
         subcommand({
             ...SUBCOMMAND_FIELDS,
             name: 'embed',

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-hosted-deployment.js

@@ -132,6 +132,13 @@ export const CATALOG_HOSTED_DEPLOYMENT = [
                 summary: 'Identity access mode for the deployment.',
                 constraints: { choices: ACCESS_MODES },
             }),
+            flag({
+                ...FLAG_FIELDS,
+                name: 'owner-subject',
+                type: 'string',
+                value: '<subject>',
+                summary: 'Exact OAuth subject bound when access is owner-only.',
+            }),
             flag({
                 ...FLAG_FIELDS,
                 name: 'connectors',
@@ -318,6 +325,13 @@ export const CATALOG_HOSTED_DEPLOYMENT = [
                         value: '<version>',
                         summary: 'Server version whose access mode is changed.',
                     }),
+                    flag({
+                        ...FLAG_FIELDS,
+                        name: 'owner-subject',
+                        type: 'string',
+                        value: '<subject>',
+                        summary: 'Exact OAuth subject to bind or transfer for owner-only access.',
+                    }),
                     ...TENANT_TARGET_FLAGS,
                 ],
                 jsonOutput: { mode: 'single' },

package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts

@@ -227,13 +227,7 @@ export interface ArtifactServer {
     /** Compiled knowledge components (ADR 0202, Core v2): descriptors + generated tool metadata, never bytes. */
     readonly knowledge?: readonly CompiledKnowledgeComponent[];
     readonly assistant?: {
-        readonly model: {
-            readonly kind: 'openai-compatible';
-            readonly baseUrl: string;
-            readonly model: string;
-            /** Managed secret name, never the secret value. */
-            readonly apiKey: string;
-        };
+        readonly model: NonNullable<Manifest['server']['assistant']>['model'];
         readonly allowedOrigins: readonly string[];
     } & Omit<NonNullable<Manifest['server']['assistant']>, 'model' | 'allowedOrigins'>;
     readonly branding?: {