@ggui-ai/console 0.1.0-rc.1 → 0.2.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.md +8 -8
  2. package/dist/assets/{index-DryGuv0A.js → index-DrWP5kS4.js} +1 -1
  3. package/dist/assets/index-ldEfjbFC.js +272 -0
  4. package/dist/index.html +1 -1
  5. package/package.json +5 -5
  6. package/dist/assets/index-CepRJayt.js +0 -196
package/README.md CHANGED
@@ -17,14 +17,14 @@ bundle, Vite + React 19.
17
17
 
18
18
  ## Surface
19
19
 
20
- - **Landing + session viewer** — landing page at `/`,
21
- `POST /ggui/console/session-cookie` (third token kind), `/s/<shortCode>`
20
+ - **Landing + render viewer** — landing page at `/`,
21
+ `POST /ggui/console/render-cookie` (third token kind), `/s/<shortCode>`
22
22
  viewer, cookie-authenticated live-channel WebSocket, scope isolation
23
23
  from `/mcp` + `/ggui/auth-check`. CSP + security-header hardening on
24
24
  every console response path; bundle stress cap at 400 KB (hard cap
25
25
  500 KB).
26
26
  - **`/admin/*` operator chrome** — admin-cookie-gated sub-shell:
27
- status, sessions, blueprints (declared + cached + variants),
27
+ status, renders, blueprints (declared + cached + variants),
28
28
  config, tools, LLM keys, connector keys, OAuth providers, clients,
29
29
  theme. `admin-login` for token paste; `/` and `/admin` both land on
30
30
  the status page.
@@ -82,11 +82,11 @@ createGguiServer({ console: { path: "/ui" } });
82
82
  The console cookie is a **third token kind**, NOT a
83
83
  rebadge of bootstrap/session tokens:
84
84
 
85
- | Ingress | Credential | Who mints it |
86
- | ---------------- | ----------------------------- | ----------------------------------- |
87
- | `/mcp` | `Authorization: Bearer …` | AuthAdapter / pairing |
88
- | `/ws` (MCP Apps) | `?bootstrap=<token>` | `ggui_push` bootstrap mint |
89
- | `/ws` (console) | `ggui_console_session` cookie | `POST /ggui/console/session-cookie` |
85
+ | Ingress | Credential | Who mints it |
86
+ | ---------------- | ----------------------------- | ---------------------------------- |
87
+ | `/mcp` | `Authorization: Bearer …` | AuthAdapter / pairing |
88
+ | `/ws` (MCP Apps) | `?bootstrap=<token>` | `ggui_render` bootstrap mint |
89
+ | `/ws` (console) | `ggui_console_session` cookie | `POST /ggui/console/render-cookie` |
90
90
 
91
91
  The cookie authenticates **only** the live-channel `/ws` upgrade. It is
92
92
  invisible to `/mcp`, `/pair`, `/threads`, `/ggui/auth-check` — the
package/dist/assets/{index-DryGuv0A.js → index-DrWP5kS4.js} RENAMED
@@ -1 +1 @@
1
- import{g as s,r as c}from"./index-CepRJayt.js";function f(t,a){for(var o=0;o<a.length;o++){const e=a[o];if(typeof e!="string"&&!Array.isArray(e)){for(const r in e)if(r!=="default"&&!(r in t)){const n=Object.getOwnPropertyDescriptor(e,r);n&&Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:()=>e[r]})}}}return Object.freeze(Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}))}var i=c();const p=s(i),g=f({__proto__:null,default:p},[i]);export{g as i};
1
+ import{g as s,r as c}from"./index-ldEfjbFC.js";function f(t,a){for(var o=0;o<a.length;o++){const e=a[o];if(typeof e!="string"&&!Array.isArray(e)){for(const r in e)if(r!=="default"&&!(r in t)){const n=Object.getOwnPropertyDescriptor(e,r);n&&Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:()=>e[r]})}}}return Object.freeze(Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}))}var i=c();const p=s(i),g=f({__proto__:null,default:p},[i]);export{g as i};