@aotter/mantle 0.1.0-alpha.11 → 0.1.0-alpha.13

package/docs/adr/0008-structured-diagnostic-shape.md

@@ -3,7 +3,7 @@
 **Status:** Carried over from POC v0.0.x; amended for the shipped v0.1
 diagnostic emitters and measured harnesses.
 
-**Date:** 2026-04-30 (POC); last amended 2026-08-03.
+**Date:** 2026-04-30 (POC); last amended 2026-08-31.
 
 **Deciders**: phsu
 
@@ -215,8 +215,13 @@ admin SPA and CF Workers could share a CSP-safe path with no
 `Function`-constructor codegen. The v0.1.0 rebuild inherits zod
 from day 1 — manifest authoring stays JSON Schema, but the
 runtime validator a manifest author's request body hits is a
-zod schema, produced by the JSON-Schema → zod converter in
+zod schema, produced by Zod's official `z.fromJSONSchema` importer behind the
+compatibility boundary in
 `@aotter/mantle-spec` (see [`docs/design-atoms.md`](../design-atoms.md) § "Manifest validation — JSON Schema in, zod at runtime").
+Mantle validates its supported keyword/ref policy before import and emits
+`JSON_SCHEMA_UNSUPPORTED`, `JSON_SCHEMA_REF_INVALID`, or
+`JSON_SCHEMA_LIMIT_EXCEEDED`; Zod owns the accepted keywords' validation
+semantics.
 
 Concretely, runtime entry validation consumes `ZodError.issues`:
 

package/docs/adr/0019-sealed-manifest-runtime-pipeline.md

@@ -2,7 +2,7 @@
 
 **Status:** Accepted
 
-**Date:** 2026-08-16
+**Date:** 2026-08-16; last amended 2026-08-31
 
 **Related:** [#656](https://github.com/aotter/mantle/issues/656),
 [#662](https://github.com/aotter/mantle/issues/662),
@@ -111,6 +111,24 @@ those plans to native queries. The v0.1 `View.spec.sql` form remains explicitly
 SQLite-only and is rejected by unsupported storage during preparation; Mantle
 does not guess a translation and does not add a universal query driver.
 
+### Callable capability projection
+
+Optional callable transports consume `projectCallableCapabilities(RuntimePlan)`.
+Each Procedure capability retains the owning MCP Trigger name while its
+input/output/title/description remain owned by the target Procedure; View
+capabilities retain their read-only View contract. Discovery and invocation use
+the same projected descriptor, and invocation routes through `invokeTrigger`
+rather than bypassing Trigger identity with a direct Procedure call. Hosts may
+select a surface and bind transport or browser lifecycle, but do not rescan raw
+manifests or maintain a second registry.
+
+`@aotter/mantle-web/webmcp` is an opt-in host binding over that projection. It
+feature-detects `document.modelContext`, registers only public View
+capabilities, invokes the existing same-origin View REST route, and uses the
+registration `AbortSignal` for teardown. It does not add browser globals to
+runtime Core, expose staff/mutating capabilities, or introduce a second
+manifest/runtime path.
+
 ### Naming and code generation
 
 The Core execution unit is `MantleRuntime`, not a site. Optional TypeScript

package/docs/design-atoms.md

@@ -584,17 +584,23 @@ That split is intentional and load-bearing.
   draft-2020-12 JSON Schema documents. This is what AI authors and
   human authors write, what the admin UI feeds JSON Forms, and what
   the OpenAPI emitter relays unchanged.
-- **Runtime engine** = zod 4. The `@aotter/mantle-spec`
-  package ships a JSON-Schema → zod converter; the runtime calls the converted zod
+- **Runtime engine** = zod 4.5+. The `@aotter/mantle-spec`
+  package delegates JSON-Schema → zod conversion to Zod's official
+  `z.fromJSONSchema`; the runtime calls the converted zod
   schema on every Procedure invocation, View parameter parse, and
   manifest boot check.
 
 **Why zod, not Ajv**: Cloudflare Workers' default Content-Security
 Policy posture and bundle-size budget make Ajv (which generates
 validators via `new Function(...)`) a poor fit. zod is interpreted,
-ships small, and has no eval-shaped code paths. The price is a
-narrower JSON Schema feature set; the converter documents which
-keywords it supports.
+ships small, and has no eval-shaped code paths. Mantle accepts its existing
+scalar/object/array constraints plus `oneOf`, `const`, root `$defs`, recursive
+same-document `$ref` values beginning `#/$defs/`, and schema-valued
+`additionalProperties`. Unsupported composition and remote refs fail during
+manifest validation. Standard `additionalProperties` semantics apply: omitted
+or `true` preserves extras, `false` rejects them, and a schema validates them.
+The non-standard `nullable` and `format: url` spellings remain compatibility
+normalizations at the boundary.
 
 The split also means: **manifests stay portable**. A consumer who
 later swaps to a non-Workers adapter inherits the same JSON Schema

package/docs/release-process.md

@@ -99,15 +99,17 @@ rollback or unpublish behavior, or deploy Landing unless
 3. Set that exact version in every workspace package and in all four agent
    plugin manifests. Set `.agents/plugins/marketplace.json` to the immutable
    `v<version>` ref.
-4. Pin both the controller and Core CI to the exact reviewed
-   `mantle-starters/develop` commit intended for this release. Do not use a
-   branch, latest tag, or inferred fallback.
+4. Pin the controller to the exact reviewed `mantle-starters/develop` and
+   `mantle-landing/develop` commits intended for this release, and Core CI to
+   the same Starter commit. Do not use a branch, latest tag, or inferred
+   fallback.
 5. If an SDK type changed, audit downstream literal constructors and exhaustive
    switches before publication. CI in Core cannot prove downstream source
    compatibility by itself.
 6. Run `pnpm check`, inspect the packed umbrella package, and run the exact
-   packed-consumer gate. Review and merge a same-repository PR into `develop`;
-   the controller rejects a direct-push release commit.
+   packed-consumer gates against both pinned Starter and Landing commits before
+   tagging. Review and merge a same-repository PR into `develop`; the
+   controller rejects a direct-push release commit.
 
 Preview the native notes before merging the release PR:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aotter/mantle",
-  "version": "0.1.0-alpha.11",
+  "version": "0.1.0-alpha.13",
   "description": "Embeddable Mantle Core umbrella with Spec and Runtime; Web, Admin, Bun, Vercel, Cloudflare, and Admin UI are optional peer packages.",
   "license": "Apache-2.0",
   "homepage": "https://mantle.tools/",
@@ -83,21 +83,21 @@
     "README.md"
   ],
   "dependencies": {
-    "@aotter/mantle-runtime": "0.1.0-alpha.11",
-    "@aotter/mantle-spec": "0.1.0-alpha.11"
+    "@aotter/mantle-runtime": "0.1.0-alpha.13",
+    "@aotter/mantle-spec": "0.1.0-alpha.13"
   },
   "peerDependencies": {
     "aws4fetch": "^1.0.20",
     "better-auth": "^1.7.1",
     "hono": "^4.12.0",
     "@libsql/client": "^0.17.4",
-    "zod": "^4.0.0",
-    "@aotter/mantle-admin-ui": "0.1.0-alpha.11",
-    "@aotter/mantle-bun": "0.1.0-alpha.11",
-    "@aotter/mantle-vercel": "0.1.0-alpha.11",
-    "@aotter/mantle-web": "0.1.0-alpha.11",
-    "@aotter/mantle-admin": "0.1.0-alpha.11",
-    "@aotter/mantle-cloudflare": "0.1.0-alpha.11"
+    "zod": "^4.5.0",
+    "@aotter/mantle-admin": "0.1.0-alpha.13",
+    "@aotter/mantle-admin-ui": "0.1.0-alpha.13",
+    "@aotter/mantle-bun": "0.1.0-alpha.13",
+    "@aotter/mantle-cloudflare": "0.1.0-alpha.13",
+    "@aotter/mantle-web": "0.1.0-alpha.13",
+    "@aotter/mantle-vercel": "0.1.0-alpha.13"
   },
   "peerDependenciesMeta": {
     "@aotter/mantle-admin": {
@@ -135,17 +135,17 @@
     "@types/node": "^26",
     "aws4fetch": "^1.0.20",
     "better-auth": "^1.7.1",
-    "hono": "^4.12.34",
+    "hono": "^4.13.1",
     "@libsql/client": "^0.17.4",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zod": "^4.4.3",
-    "@aotter/mantle-admin-ui": "0.1.0-alpha.11",
-    "@aotter/mantle-bun": "0.1.0-alpha.11",
-    "@aotter/mantle-cloudflare": "0.1.0-alpha.11",
-    "@aotter/mantle-admin": "0.1.0-alpha.11",
-    "@aotter/mantle-vercel": "0.1.0-alpha.11",
-    "@aotter/mantle-web": "0.1.0-alpha.11"
+    "zod": "^4.5.4",
+    "@aotter/mantle-admin-ui": "0.1.0-alpha.13",
+    "@aotter/mantle-bun": "0.1.0-alpha.13",
+    "@aotter/mantle-cloudflare": "0.1.0-alpha.13",
+    "@aotter/mantle-admin": "0.1.0-alpha.13",
+    "@aotter/mantle-vercel": "0.1.0-alpha.13",
+    "@aotter/mantle-web": "0.1.0-alpha.13"
   },
   "engines": {
     "node": ">=22"