@ggui-ai/cli 0.1.0-rc.1 → 0.2.0-alpha.1

package/README.md

@@ -44,8 +44,8 @@ ggui serve --mcp-only               # skip agent supervision
 **Scope today:**
 
 - ✅ Local server, viewer, cookie-authenticated WebSocket subscribe/ack all work end-to-end.
-- ✅ `ggui_push` mints shortCodes and lands on the same-origin viewer.
-- ✅ Component-code generation is wired on the OSS path via `createUiGenerator()` from `@ggui-ai/ui-gen` — the same harness the hosted runtime uses. `ggui_push` returns `codeReady: false` only when no BYOK credentials resolve (no `ANTHROPIC_API_KEY` / `OPENAI_API_KEY` / etc.); supply a key to get full generation locally.
+- ✅ `ggui_render` mints shortCodes and lands on the same-origin viewer.
+- ✅ Component-code generation is wired on the OSS path via `createUiGenerator()` from `@ggui-ai/ui-gen` — the same harness the hosted runtime uses. `ggui_render` returns `codeReady: false` only when no BYOK credentials resolve (no `ANTHROPIC_API_KEY` / `OPENAI_API_KEY` / etc.); supply a key to get full generation locally.
 - 🔒 Default auth is dev-mode (any bearer → `builder`). Swap in a real `AuthAdapter` via `createGguiServer({ auth })` before exposing beyond `127.0.0.1`.
 
 ### `ggui dev`

package/dist/cli.js

@@ -14,16 +14,16 @@ import { discoverLocalUis, discoverMcpMounts, discoverPrimitives, GguiJsonLoadEr
 import { resolveAgentPlan } from './serve-fallback.js';
 import { buildAgentRuntime, describeTunnelSession, launchBrowser, openTunnel, parseDevFlags, resolveAgentCommand, resolveHubUrl, shouldAutoOpen, } from './dev-command.js';
 import { createNullTunnelProvider, discoverTunnelProvider, } from './tunnel-provider.js';
-import { ManifestBlueprintProvider, resolveStorageFromConfig, buildNoCredentialsStackItem, } from '@ggui-ai/mcp-server';
+import { ManifestBlueprintProvider, resolveStorageFromConfig, buildNoCredentialsRender, } from '@ggui-ai/mcp-server';
 import { InMemoryBlueprintProvider } from '@ggui-ai/mcp-server-core/in-memory';
 import { createByokResolver } from './byok-resolver.js';
 import { isInstalledBlueprintPath } from './internal/artifact-install.js';
-import { describeGenerationBinding, probeGenerationBinding, } from './generation-probe.js';
+import { DEFAULT_ROUTE_BY_PROVIDER, describeGenerationBinding, probeGenerationBinding, } from './generation-probe.js';
 import { buildMcpServerBackend, pickFreePort } from './mcp-backend.js';
 import { createThemeWriter } from './theme-writer.js';
 import { createThemeFileUploader } from './theme-file-uploader.js';
 import { getPersistentDir } from './paths.js';
-import { createPersistentSessionStore, createPersistentVectorStore, } from './persistent-stores.js';
+import { createPersistentRenderStore, createPersistentVectorStore, } from './persistent-stores.js';
 import { parseServeFlags, runServe, SERVE_HELP, } from './serve-command.js';
 import { runLoginCommand } from './auth-login.js';
 import { runLogoutCommand } from './auth-logout.js';
@@ -211,7 +211,7 @@ async function runServeCommand(args) {
     // Resolve `ggui.json#storage` → concrete adapters BEFORE binding.
     // Absent storage block → empty bundle → server keeps in-memory
     // defaults. Sqlite paths resolve relative to the manifest directory
-    // (not CWD) so `"path": "./ggui-sessions.sqlite"` lands next to
+    // (not CWD) so `"path": "./ggui-renders.sqlite"` lands next to
     // `ggui.json` regardless of where the operator invoked `ggui serve`
     // from. Failure to instantiate (e.g. better-sqlite3 peer dep
     // missing, permission denied) propagates to the exit-1 path below.
@@ -223,7 +223,7 @@ async function runServeCommand(args) {
         process.stderr.write(`ggui serve: storage: ${err instanceof Error ? err.message : String(err)}\n`);
         return 1;
     }
-    // Persistent default for SessionStore + VectorStore — layered AFTER
+    // Persistent default for RenderStore + VectorStore — layered AFTER
     // the manifest resolver so explicit `ggui.json#storage` declarations
     // always win, and BEFORE the banner so `describeStorageStatus`
     // reflects the actual wired state. Without this layer, ggui-default
@@ -235,13 +235,13 @@ async function runServeCommand(args) {
         // `--ephemeral` skips the whole persistent layering. Operators who
         // pass the flag get pure in-memory defaults across the board (HMAC
         // secrets mint fresh per process). Without the flag, the
-        // sqlite-backed VectorStore + SessionStore persist across restarts
+        // sqlite-backed VectorStore + RenderStore persist across restarts
         // — note this means the install-to-cache bridge can serve stale
         // install-provenance rows after a boot if the source TSX behind a
         // cached row has been edited or uninstalled in the meantime.
         if (!parsed.ephemeral) {
             const persistentDir = getPersistentDir(plan.projectRoot);
-            const manifestDeclaresSessions = plan.manifest?.storage?.sessions !== undefined;
+            const manifestDeclaresRenders = plan.manifest?.storage?.renders !== undefined;
             const manifestDeclaresVectors = plan.manifest?.storage?.vectors !== undefined;
             // The persistent stores are SQLite-backed (`better-sqlite3`, an
             // optional native module). When it isn't installed — or the
@@ -251,14 +251,14 @@ async function runServeCommand(args) {
             // `better-sqlite3` later upgrades them to persistence. An
             // explicit `ggui.json#storage` declaration still hard-fails (it
             // resolved above) — the operator asked for it by name.
-            if (!manifestDeclaresSessions && storage.sessionStore === undefined) {
+            if (!manifestDeclaresRenders && storage.renderStore === undefined) {
                 try {
-                    const sessionStore = await createPersistentSessionStore(persistentDir);
-                    storage = { ...storage, sessionStore };
+                    const renderStore = await createPersistentRenderStore(persistentDir);
+                    storage = { ...storage, renderStore };
                 }
                 catch (err) {
-                    process.stderr.write(`ggui serve: persistent session store unavailable — using in-memory `
-                        + `(sessions reset on restart; install \`better-sqlite3\` for persistence). `
+                    process.stderr.write(`ggui serve: persistent render store unavailable — using in-memory `
+                        + `(renders reset on restart; install \`better-sqlite3\` for persistence). `
                         + `[${err instanceof Error ? err.message : String(err)}]\n`);
                 }
             }
@@ -423,10 +423,10 @@ async function runServeCommand(args) {
         mcpMounts = narrowMcpMounts(discovery.mounts);
     }
     // Resolve `--port 0` BEFORE composing the backend. `createGguiServer`
-    // captures `mcpApps.renderBaseUrl` + `wsUrl` at construction time, so
-    // we need a concrete port to emit URLs the agent can hand to a
-    // browser. A tiny race window exists between close + bind; surface
-    // the bind failure cleanly if it loses.
+    // captures `mcpApps.wsUrl` + `runtime.url` at construction time, so
+    // we need a concrete port to emit URLs the iframe can connect to.
+    // A tiny race window exists between close + bind; surface the bind
+    // failure cleanly if it loses.
     //
     // Resolved BEFORE the BYOK probe (vs. previous ordering) because
     // the no-credentials fallback card needs the absolute settings URL
@@ -447,15 +447,33 @@ async function runServeCommand(args) {
     // BYOK probe — boot scan + per-request resolver. The probe ALWAYS
     // returns a `GenerationBinding` now (post-H2): when no env / global
     // / user-scope key resolved at boot, the binding's `resolveLlm`
-    // re-runs at every push with `userScope: ctx.appId` (per-user keys
+    // re-runs at every render with `userScope: ctx.appId` (per-user keys
     // stored in `~/.ggui/credentials.json` flip in there); when the
     // re-run also misses, the bound `onNoCredentials` hook produces
-    // a Connect-Claude card stack item pointing at THIS server's
-    // `/settings`. Story-path `ggui_push` therefore always lands a
-    // real stack item — either a generated component (key found) or
+    // a Connect-Claude card render pointing at THIS server's
+    // `/settings`. Story-path `ggui_render` therefore always lands a
+    // real render — either a generated component (key found) or
     // the card (key missing).
     const baseUrlForCard = parsed.publicBaseUrl ?? `http://${parsed.host}:${effectivePort}`;
     const settingsUrl = `${baseUrlForCard}/settings`;
+    // No-credentials cards live for an hour from mint — long enough for
+    // the operator to follow the Connect-Claude link, paste a key, and
+    // re-prompt before the persisted render is GC'd.
+    const NO_CREDENTIALS_CARD_TTL_MS = 60 * 60 * 1000;
+    // Resolve the operator's explicit `generation.model` route, if any.
+    // The schema-side `parseAnyLlmRoute` transform yields a typed
+    // `LlmRoute` directly — no string parsing here. Bedrock is
+    // hosted-only on the OSS path (no IAM resolver chain wired); reject
+    // explicitly with a clear error rather than silently failing at
+    // dispatch time.
+    const configuredRoute = plan.manifest?.generation?.model;
+    if (configuredRoute?.provider === 'bedrock') {
+        process.stderr.write(`ggui serve: ggui.json#generation.model declared a bedrock route ` +
+            `("${configuredRoute.model}"), but the OSS BYOK resolver chain ` +
+            `does not cover AWS IAM. Bedrock is supported via the hosted ` +
+            `runtime only. Pick an anthropic/openai/google/openrouter route.\n`);
+        return 1;
+    }
     let generationBinding;
     try {
         // Use whatever blueprint provider the manifest resolved, or
@@ -465,12 +483,18 @@ async function runServeCommand(args) {
         generationBinding = await probeGenerationBinding({
             resolver: createByokResolver(),
             blueprints: blueprintsForGen,
-            onNoCredentials: (_ctx, story) => buildNoCredentialsStackItem({
-                stackItemId: story.stackItemId,
-                intent: story.intent,
-                nowIso: story.nowIso,
-                settingsUrl,
-            }),
+            ...(configuredRoute ? { configuredRoute } : {}),
+            onNoCredentials: (ctx, story) => {
+                const nowEpochMs = Date.parse(story.nowIso);
+                return buildNoCredentialsRender({
+                    renderId: story.renderId,
+                    appId: ctx.appId,
+                    intent: story.intent,
+                    nowEpochMs,
+                    expiresAt: nowEpochMs + NO_CREDENTIALS_CARD_TTL_MS,
+                    settingsUrl,
+                });
+            },
         });
     }
     catch (err) {
@@ -484,8 +508,35 @@ async function runServeCommand(args) {
         generationBinding = await probeGenerationBinding({
             resolver: createByokResolver(),
             blueprints: blueprintsForGen,
+            ...(configuredRoute ? { configuredRoute } : {}),
         });
     }
+    // Strict-fail: a key resolved at boot, but the operator never
+    // declared `generation.model` in their manifest. Silently picking
+    // the per-provider default was the surprise that produced #22 and
+    // #42 — the typed system removed the WIRE bug class, this check
+    // removes the OPERATOR bug class. (`--mcp-only` and no-manifest
+    // paths skip the check — they have no generation surface to pin.)
+    if (plan.manifest !== null &&
+        generationBinding.bootResolved &&
+        configuredRoute === undefined) {
+        process.stderr.write(`ggui serve: boot scan resolved a ${generationBinding.provider} key but ` +
+            `ggui.json#generation.model is unset. Pick the model explicitly:\n` +
+            `\n` +
+            `  {\n` +
+            `    "schema": "1",\n` +
+            `    "generation": {\n` +
+            `      "model": "${generationBinding.provider}:${DEFAULT_ROUTE_BY_PROVIDER[generationBinding.provider].model}"\n` +
+            `    }\n` +
+            `  }\n` +
+            `\n` +
+            `Accepted forms:\n` +
+            `  - canonical: "anthropic:claude-haiku-4-5-20251001"\n` +
+            `  - LiteLLM:   "anthropic/claude-haiku-4-5"\n` +
+            `\n` +
+            `See docs/principles/model-string-convention.md.\n`);
+        return 1;
+    }
     process.stdout.write(`${describeGenerationBinding(generationBinding)}\n`);
     try {
         return await runServe({
@@ -612,8 +663,8 @@ async function runServeCommand(args) {
                     Object.keys(plan.manifest.app.publicEnv).length > 0
                     ? { publicEnv: plan.manifest.app.publicEnv }
                     : {}),
-                ...(plan.manifest?.app?.defaultMcpAppsMode !== undefined
-                    ? { defaultMcpAppsMode: plan.manifest.app.defaultMcpAppsMode }
+                ...(plan.manifest?.app?.defaultDisplayMode !== undefined
+                    ? { defaultDisplayMode: plan.manifest.app.defaultDisplayMode }
                     : {}),
                 generation: generationBinding.generation,
                 ...(mcpMounts.length > 0 ? { mcpMounts } : {}),
@@ -685,10 +736,10 @@ function describeStorageStatus(config, resolved) {
     if (!config)
         return [];
     const lines = [];
-    if (config.sessions) {
-        lines.push(resolved.sessionStore
-            ? `storage: sessions → sqlite (${config.sessions.driver === 'sqlite' ? config.sessions.path : '—'})`
-            : `storage: sessions → in-memory`);
+    if (config.renders) {
+        lines.push(resolved.renderStore
+            ? `storage: renders  → sqlite (${config.renders.driver === 'sqlite' ? config.renders.path : '—'})`
+            : `storage: renders  → in-memory`);
     }
     if (config.vectors) {
         lines.push(resolved.vectors

package/dist/generation-probe.d.ts

@@ -17,12 +17,12 @@
  *      server restart. Multi-tenant `ggui serve` lives off this
  *      seam: each authenticated user manages their OWN provider
  *      key via `/settings`, the resolver picks it up on the next
- *      `ggui_push`.
+ *      `ggui_render`.
  *   3. **No-key default** — when the boot scan finds nothing, we
  *      STILL return a binding (provider=`anthropic`, model=
  *      `claude-haiku-4-5`). Generation stays wired; the
  *      no-credentials path now produces a Connect-Claude card
- *      stack item via {@link GenerationDeps.onNoCredentials}
+ *      render via {@link GenerationDeps.onNoCredentials}
  *      instead of the broken `codeReady:false` placeholder.
  *      Caller-supplied `onNoCredentials` is threaded through
  *      verbatim.
@@ -37,7 +37,7 @@
  * can add `GGUI_GENERATION_PROVIDER` / `ggui.json#generation.model`
  * without re-shaping this seam.
  */
-import type { BlueprintProvider, GenerationDeps, HandlerContext, LlmProvider, SessionStackEntry } from '@ggui-ai/mcp-server';
+import type { BlueprintProvider, GenerationDeps, HandlerContext, LlmProvider, LlmRoute, Render } from '@ggui-ai/mcp-server';
 import type { ByokKeyResolution, ByokResolver } from './byok-resolver.js';
 /**
  * Locked default model per provider for the OSS first-run path.
@@ -53,7 +53,14 @@ import type { ByokKeyResolution, ByokResolver } from './byok-resolver.js';
  * binds Bedrock through its own `GenerationDeps` at the hosted
  * surface.
  */
-export declare const DEFAULT_MODEL_BY_PROVIDER: Readonly<Record<Exclude<LlmProvider, 'bedrock'>, string>>;
+/**
+ * Locked default route per provider, as a typed {@link LlmRoute}.
+ * Model strings are bare wire-canonical IDs (registry KEY ==
+ * what the provider's API expects on the wire) — there is no
+ * transformation step downstream. `dispatchGeneration` sends
+ * `route.model` verbatim.
+ */
+export declare const DEFAULT_ROUTE_BY_PROVIDER: Readonly<Record<Exclude<LlmProvider, 'bedrock'>, LlmRoute>>;
 /**
  * Priority order for BYOK provider probing. The first provider
  * whose credentials resolve wins. Anthropic first is deliberate —
@@ -66,6 +73,21 @@ export interface ProbeGenerationBindingOptions {
     readonly blueprints: BlueprintProvider;
     /** Override the probe order. Tests use this to pin the winner. */
     readonly providerOrder?: readonly Exclude<LlmProvider, 'bedrock'>[];
+    /**
+     * Explicit operator-declared route from `ggui.json#generation.model`.
+     * When set:
+     *   - `configuredRoute.provider` becomes the boot-scan provider
+     *     (overriding the priority chain).
+     *   - `configuredRoute.model` is what flows to the dispatch path
+     *     (overriding `DEFAULT_ROUTE_BY_PROVIDER[provider]`).
+     *
+     * Absent → fall back to today's behavior: walk the priority chain,
+     * use the per-provider default. The CLI hard-fails BEFORE reaching
+     * this function when a ggui.json exists, a key resolves, but
+     * `generation.model` is unset — so this seam only sees `undefined`
+     * for the `--mcp-only` / no-manifest paths.
+     */
+    readonly configuredRoute?: LlmRoute;
     /**
      * Optional no-credentials fallback hook threaded straight onto
      * {@link GenerationDeps.onNoCredentials}. The CLI builds this
@@ -76,9 +98,9 @@ export interface ProbeGenerationBindingOptions {
      */
     readonly onNoCredentials?: (ctx: HandlerContext, story: {
         readonly intent: string;
-        readonly stackItemId: string;
+        readonly renderId: string;
         readonly nowIso: string;
-    }) => SessionStackEntry | null | Promise<SessionStackEntry | null>;
+    }) => Render | null | Promise<Render | null>;
 }
 /**
  * Outcome of the boot probe. Always returned (no `null` shape) —

package/dist/generation-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generation-probe.d.ts","sourceRoot":"","sources":["../src/generation-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,WAAW,EAGX,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAC9C,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAUhD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAC1B,CAAC;AAElD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;IACpE;;;;;;;OAOG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;QACL,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KACE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CACnE;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,iBAAiB,CAAC,CA0E5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GACzB,MAAM,CAWR"}
+{"version":3,"file":"generation-probe.d.ts","sourceRoot":"","sources":["../src/generation-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,WAAW,EACX,QAAQ,EAGR,MAAM,EACP,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;GAaG;AACH;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAC9C,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAMlD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAC1B,CAAC;AAElD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;IACpE;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC;IACpC;;;;;;;OAOG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;QACL,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KACE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7C;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAAC,iBAAiB,CAAC,CAwF5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GACzB,MAAM,CAWR"}

package/dist/generation-probe.js

@@ -13,15 +13,18 @@ import { createUiGenerator } from '@ggui-ai/ui-gen';
  * binds Bedrock through its own `GenerationDeps` at the hosted
  * surface.
  */
-export const DEFAULT_MODEL_BY_PROVIDER = {
-    // Slash-prefixed `<provider>/<model>` form — `getProviderForModel`
-    // expects it; bare names trip the "Unrecognized model format" warning
-    // and silently default to anthropic. Pre-matrix the openai/google
-    // defaults were also bare; this fixes them as part of the model bump.
-    anthropic: 'anthropic/claude-haiku-4-5',
-    openai: 'openai/gpt-5.5-2026-04-23',
-    google: 'google/gemini-3.5-flash',
-    openrouter: 'anthropic/claude-haiku-4.5',
+/**
+ * Locked default route per provider, as a typed {@link LlmRoute}.
+ * Model strings are bare wire-canonical IDs (registry KEY ==
+ * what the provider's API expects on the wire) — there is no
+ * transformation step downstream. `dispatchGeneration` sends
+ * `route.model` verbatim.
+ */
+export const DEFAULT_ROUTE_BY_PROVIDER = {
+    anthropic: { provider: 'anthropic', model: 'claude-haiku-4-5-20251001' },
+    openai: { provider: 'openai', model: 'gpt-5.5-2026-04-23' },
+    google: { provider: 'google', model: 'gemini-3.5-flash' },
+    openrouter: { provider: 'openrouter', model: 'anthropic/claude-haiku-4.5' },
 };
 /**
  * Priority order for BYOK provider probing. The first provider
@@ -42,26 +45,37 @@ export const PROVIDER_PROBE_ORDER = ['anthropic', 'openai', 'google', 'openroute
  */
 export async function probeGenerationBinding(opts) {
     const order = opts.providerOrder ?? PROVIDER_PROBE_ORDER;
-    // Boot scan — surfaces the banner-line provider/source. If
-    // multiple providers have boot-time keys, the first in priority
-    // order wins (matches pre-H2 behavior).
+    // When the operator declared an explicit route, the boot scan only
+    // needs to resolve THAT provider's credential — the priority walk
+    // is bypassed. Otherwise fall back to the original behavior: walk
+    // the chain, first hit wins.
+    const configured = opts.configuredRoute;
     let bootHit = null;
-    for (const provider of order) {
-        const resolution = await opts.resolver.resolve(provider);
+    if (configured && configured.provider !== 'bedrock') {
+        const resolution = await opts.resolver.resolve(configured.provider);
         if (resolution) {
-            bootHit = { ...resolution, provider };
-            break;
+            bootHit = { ...resolution, provider: configured.provider };
+        }
+    }
+    else {
+        for (const provider of order) {
+            const resolution = await opts.resolver.resolve(provider);
+            if (resolution) {
+                bootHit = { ...resolution, provider };
+                break;
+            }
         }
     }
-    // Default provider locks to anthropic on boot-miss — matches the
-    // OSS "Claude first" posture. The Connect-Claude card flow steers
-    // misses toward an Anthropic key (env/file/OAuth); nothing in the
-    // contract prevents users from pasting an OpenAI/Google key
-    // instead, but the boot-time provider for THIS server stays
-    // anthropic until the operator restarts with a different boot
-    // hit.
-    const defaultProvider = bootHit?.provider ?? 'anthropic';
-    const defaultModel = DEFAULT_MODEL_BY_PROVIDER[defaultProvider];
+    // Resolve the route the dispatch path will use:
+    //   - explicit `configuredRoute` always wins, even on boot-miss
+    //   - else use the boot-hit provider's default route
+    //   - else default to anthropic / Haiku 4.5 (the OSS "Claude first"
+    //     posture; matches Connect-Claude card flow)
+    const defaultProvider = configured && configured.provider !== 'bedrock'
+        ? configured.provider
+        : bootHit?.provider ?? 'anthropic';
+    const defaultRoute = configured ?? DEFAULT_ROUTE_BY_PROVIDER[defaultProvider];
+    const defaultModel = defaultRoute.model;
     // Full-harness wire-up: `createUiGenerator` runs the same
     // multi-turn coding agent + self-check loop the bench validates;
     // `dispatchGeneration` returns compiled JS on `componentCode`.
@@ -77,7 +91,10 @@ export async function probeGenerationBinding(opts) {
         if (!resolution)
             return null;
         return {
-            selection: { provider: defaultProvider, model: defaultModel },
+            // Spread the typed route — TS knows `defaultRoute` is an
+            // `LlmRoute`, so the discriminator + model alignment is
+            // preserved when assigning to `LlmSelection`.
+            selection: { ...defaultRoute },
             providerKey: { provider: defaultProvider, key: resolution.key },
         };
     };

package/dist/mcp-backend.d.ts

@@ -1,7 +1,7 @@
-import { type BlueprintProvider, type GadgetDescriptor, type McpAppsMode, type DiscoveredPrimitiveCatalog, type GenerationDeps, type LoadedTheme, type McpServerMount, type OperatorConfig, type ResolvedStorageStores, type ShortCodeIndex, type ThemeWriter } from '@ggui-ai/mcp-server';
-import type { UiRegistry } from '@ggui-ai/ui-registry';
-import type { UiManifest } from '@ggui-ai/project-config';
-import type { ServeBackend } from './serve-command.js';
+import { type BlueprintProvider, type DiscoveredPrimitiveCatalog, type GadgetDescriptor, type GenerationDeps, type LoadedTheme, type McpServerMount, type McpUiDisplayMode, type OperatorConfig, type ResolvedStorageStores, type ShortCodeIndex, type ThemeWriter } from "@ggui-ai/mcp-server";
+import type { UiManifest } from "@ggui-ai/project-config";
+import type { UiRegistry } from "@ggui-ai/ui-registry";
+import type { ServeBackend } from "./serve-command.js";
 export interface BuildMcpServerBackendOptions {
     /**
      * Pre-resolved storage from `ggui.json#storage`. Threaded straight
@@ -18,19 +18,18 @@ export interface BuildMcpServerBackendOptions {
      */
     readonly cliVersion: string;
     /**
-     * Bind host used to compose the MCP Apps `renderBaseUrl` + `wsUrl`.
+     * Bind host used to compose the MCP Apps `wsUrl` and `runtime.url`.
      * Must be the same host the CLI then passes to `listen()`; otherwise
-     * the shortCode URLs the agent receives will point somewhere the
-     * browser can't reach.
+     * those URLs will point somewhere the iframe browser can't reach.
      */
     readonly host: string;
     /**
      * Bind port used to compose the MCP Apps URLs. MUST be a concrete
-     * port (not `0`) — the agent-returned URL is captured at composition
-     * time, so deferring to an OS-assigned port would leave `ggui_push`
-     * emitting a broken link. Callers that started with `--port 0`
-     * should pre-resolve a free port via {@link pickFreePort} before
-     * constructing the backend.
+     * port (not `0`) — the iframe-facing URLs (`wsUrl`, `runtime.url`)
+     * are captured at composition time, so deferring to an OS-assigned
+     * port would leave them pointing at the wrong port. Callers that
+     * started with `--port 0` should pre-resolve a free port via
+     * {@link pickFreePort} before constructing the backend.
      */
     readonly port: number;
     /**
@@ -83,13 +82,13 @@ export interface BuildMcpServerBackendOptions {
     readonly themeWriter?: ThemeWriter;
     /**
      * Live theme getter — when set, supersedes the static `theme`
-     * resolution for every `ggui_push` bootstrap envelope. The CLI
+     * resolution for every `ggui_render` bootstrap envelope. The CLI
      * pairs this with `onThemeConfigChange` so a console save
-     * reaches the next push without a server restart.
+     * reaches the next render without a server restart.
      */
     readonly themeProvider?: () => {
         readonly id?: string;
-        readonly mode?: 'light' | 'dark';
+        readonly mode?: "light" | "dark";
     } | undefined;
     /**
      * Optional change notifier — fires from
@@ -99,17 +98,17 @@ export interface BuildMcpServerBackendOptions {
      */
     readonly onThemeConfigChange?: (next: string | {
         preset: string;
-        mode?: 'light' | 'dark';
+        mode?: "light" | "dark";
         overrides?: Record<string, string>;
     } | {
         file: string;
-        mode?: 'light' | 'dark';
+        mode?: "light" | "dark";
     } | null) => void;
     /**
-     * Generation wiring for `ggui_push`. When present, the OSS push
+     * Generation wiring for `ggui_render`. When present, the OSS render
      * handler invokes the bound `UiGenerator` on every story-path
-     * call and appends real componentCode as a `StackItem`. Absent =
-     * placeholder mode: push creates sessions + shortCodes but does
+     * call and commits real componentCode as a `Render`. Absent =
+     * placeholder mode: render mints renderIds + shortCodes but does
      * not produce componentCode.
      *
      * The CLI resolves this from the operator's BYOK state at boot via
@@ -171,7 +170,7 @@ export interface BuildMcpServerBackendOptions {
      * (every bearer authenticates as builder) but additionally:
      *   - Wires a per-remote-IP `FixedWindowRateLimiter` over an
      *     `InMemoryQuotaStore` (default 30 generations / 10 minutes per
-     *     IP). The limiter binds at `ggui_push` so end-user generations
+     *     IP). The limiter binds at `ggui_render` so end-user generations
      *     can't burn the operator's BYOK budget.
      *   - The CLI banner displays "PUBLIC DEMO" copy with a cost-
      *     attribution + rate-limit note (vs. "DEV ALLOW-ALL" warning).
@@ -197,11 +196,10 @@ export interface BuildMcpServerBackendOptions {
     readonly multiTenant?: boolean;
     /**
      * Public base URL that replaces `http://<host>:<port>` when
-     * composing `mcpApps.renderBaseUrl`, `mcpApps.wsUrl`, and
-     * `runtime.url`. Set this when the server is being reached
-     * through a tunnel (cloudflare, ngrok, …) so URLs the agent
-     * receives resolve from the MCP host's perspective rather than
-     * `localhost`.
+     * composing `mcpApps.wsUrl` and `runtime.url`. Set this when the
+     * server is being reached through a tunnel (cloudflare, ngrok, …)
+     * so URLs the iframe receives resolve from the MCP host's
+     * perspective rather than `localhost`.
      *
      * Required shape: `http://…` or `https://…`, no trailing slash.
      * The `wsUrl` is derived by replacing the scheme with `ws`/`wss`.
@@ -244,13 +242,13 @@ export interface BuildMcpServerBackendOptions {
      * Surface = `--mcp-instructions <preset>` CLI flag or
      * `GGUI_MCP_INSTRUCTIONS` env var (CLI flag wins).
      */
-    readonly mcpInstructions?: 'default' | 'aggressive' | 'always' | 'minimal' | 'off';
+    readonly mcpInstructions?: "default" | "aggressive" | "always" | "minimal" | "off";
     /**
      * Directory backing the cross-restart persistence bundle. When set,
-     * `bootstrapSecret` + `renderSigning.secret` are read from / minted
-     * into 0600-mode files there so the HMAC keys survive `ggui serve`
-     * restart — claude.ai chat-history revisits keep their cached
-     * `_meta.ggui.bootstrap.token` + `/r/<code>?sig=&exp=` URLs valid.
+     * `wsTokenSecret` is read from / minted into a 0600-mode file there
+     * so the HMAC key survives `ggui serve` restart — claude.ai
+     * chat-history revisits keep their cached
+     * `_meta["ai.ggui/render"].wsToken` valid across reboots.
      *
      * Absent / undefined = the legacy ephemeral behavior (every restart
      * mints fresh secrets; cached tokens fail HMAC verify). The CLI sets
@@ -313,23 +311,22 @@ export interface BuildMcpServerBackendOptions {
      * `ggui.json#app.publicEnv`. Each key MUST match
      * `^GGUI_PUBLIC_APP_[A-Z0-9_]+$`. The server projects only the keys
      * that some registered wrapper's `requires` references, onto
-     * `_meta.ggui.bootstrap.publicEnv` and ultimately
+     * `_meta["ai.ggui/render"].publicEnv` and ultimately
      * `globalThis.__ggui__.publicEnv` for `getPublicEnv()` to read.
      *
      * Omitted ⇒ field absent on the App record (no values projected;
      * wrappers without `requires` still mount, wrappers with `requires`
-     * fail at push-gate validation).
+     * fail at render-gate validation).
      */
     readonly publicEnv?: Readonly<Record<string, string>>;
     /**
-     * Per-app MCP-Apps presentation mode from
-     * `ggui.json#app.defaultMcpAppsMode`. `'canvas'` makes
-     * `ggui_new_session` mint a session-scoped iframe
-     * (`ui://ggui/session/<sessionId>`) and route subsequent pushes
-     * through the session channel; `'inline'` (or omitted) preserves
-     * the per-push-iframe legacy behavior.
+     * Per-app default display-mode hint from
+     * `ggui.json#app.defaultDisplayMode`. Stamped on every `ggui_render`
+     * via `_meta.ui.displayMode` so the host knows whether to present
+     * the iframe inline, fullscreen, or picture-in-picture. See
+     * `App.defaultDisplayMode` for the full semantics.
      */
-    readonly defaultMcpAppsMode?: McpAppsMode;
+    readonly defaultDisplayMode?: McpUiDisplayMode;
 }
 /**
  * Pick a free localhost TCP port by letting the OS assign one on a
@@ -337,7 +334,7 @@ export interface BuildMcpServerBackendOptions {
  * chosen number. Exported so the CLI (`cli.ts::runServeCommand`) and
  * the integration tests can resolve `--port 0` to a concrete port
  * BEFORE constructing the backend — {@link buildMcpServerBackend}
- * captures the port in the composed `mcpApps.renderBaseUrl` / `wsUrl`
+ * captures the port in the composed `mcpApps.wsUrl` / `runtime.url`
  * at construction time, so the caller must know it up-front.
  *
  * Tiny race window: another process could claim the port between our

package/dist/mcp-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-backend.d.ts","sourceRoot":"","sources":["../src/mcp-backend.ts"],"names":[],"mappings":"AA0CA,OAAO,EAUL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAE/B,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAevD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAQ1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACnE;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM;QAC7B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAClC,GAAG,SAAS,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC7B,IAAI,EACA,MAAM,GACN;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAC/E;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,GACzC,IAAI,KACL,IAAI,CAAC;IACV;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IAErC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;SAC/B,CAAC,CAAC;KACJ,CAAC;IAEF;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAEnD;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAE9B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EACrB,SAAS,GACT,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,KAAK,CAAC;IAEV;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IAEzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;QACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IAEF;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAE/C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEtD;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC;CAC3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,IAAI,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBhE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,4BAA4B,GACjC,YAAY,CAimBd"}
+{"version":3,"file":"mcp-backend.d.ts","sourceRoot":"","sources":["../src/mcp-backend.ts"],"names":[],"mappings":"AA0CA,OAAO,EAUL,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAE/B,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAW7B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAOvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACnE;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MACrB;QACE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAClC,GACD,SAAS,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC7B,IAAI,EACA,MAAM,GACN;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAC/E;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,GACzC,IAAI,KACL,IAAI,CAAC;IACV;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IAErC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;YAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;YAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;SAC/B,CAAC,CAAC;KACJ,CAAC;IAEF;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAEnD;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAE9B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAE/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC;IAEnF;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IAEzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;QACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IAEF;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAE/C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEtD;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;CAChD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,IAAI,SAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBhE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,YAAY,CAijBtF"}