@ggui-ai/iframe-runtime 0.25.0 → 0.26.0

package/dist/wire-config.js

@@ -9,6 +9,12 @@ import { postObservabilityToParent } from './observability.js';
 // ruling; ggui#599 cycle-2 caught the stale reference here) — and the
 // hoist stands on its own merits. Re-exported for internal modules.
 export { StreamBus };
+/**
+ * The most `action-refused` events one render posts (ggui#1536). A tap is a
+ * person; a card that re-dispatches in a loop is code, and the host needs to
+ * know it happened, not every time. The last one says it is the last.
+ */
+const REFUSED_EVENTS_PER_RENDER = 10;
 /**
  * Build the per-render `WireConfig` for the iframe runtime.
  * Bootstraps the renderer's outbound emission + inbound subscription
@@ -67,8 +73,35 @@ export function buildRootWireConfig(opts) {
         namedUnenforceableFor = currentRender.id;
         postObservabilityToParent({ kind: 'one-shot-unenforceable', renderId: currentRender.id, actionName });
     };
+    // ggui#1536 — a dispatch the outbound contract check refuses sent nothing
+    // and said so only on this iframe's console. Name it where the runtime names
+    // its other degradations: the `action-refused` event to the embedding host,
+    // carrying field paths and schema keywords only, because a violation's
+    // `received` and `message` can carry the visitor's input. Then the renderer
+    // tells the visitor.
+    let refusedFor = null;
+    let refusedPosted = 0;
+    const nameRefused = ({ actionName, violations }) => {
+        const renderId = opts.getCurrentGguiSession()?.id ?? opts.sessionId;
+        if (refusedFor !== renderId) {
+            refusedFor = renderId;
+            refusedPosted = 0;
+        }
+        if (refusedPosted < REFUSED_EVENTS_PER_RENDER) {
+            refusedPosted += 1;
+            postObservabilityToParent({
+                kind: 'action-refused',
+                renderId,
+                actionName,
+                violations: violations.map((v) => ({ field: v.field, ...(v.keyword !== undefined ? { keyword: v.keyword } : {}) })),
+                ...(refusedPosted === REFUSED_EVENTS_PER_RENDER ? { capped: true } : {}),
+            });
+        }
+        opts.onDispatchRefused?.(actionName);
+    };
     return buildWireConfig({
         app: { appId: opts.appId, appName: opts.appId },
+        onDispatchRefused: nameRefused,
         // `isConnected` here is the static config field; `useRender()`
         // reads the LIVE value from wire's document connection store,
         // which the runtime writes at the relay latch's edges (ggui#670).
@@ -103,7 +136,12 @@ export function buildRootWireConfig(opts) {
                 return undefined;
             }
             const record = currentRender.spentOneShots;
-            return record !== undefined && record.epoch === (currentRender.epoch ?? 0) ? record.actions : undefined;
+            const persisted = record !== undefined && record.epoch === (currentRender.epoch ?? 0) ? record.actions : undefined;
+            // ggui#1424 — plus the names the server refused as already spent.
+            const refused = opts.refusedSpentOneShots?.();
+            if (refused === undefined || refused.length === 0)
+                return persisted;
+            return persisted === undefined ? refused : [...persisted, ...refused];
         },
         // The iframe's precompiled-validator variant — the dispatch never
         // trips the iframe's no-`unsafe-eval` CSP.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/iframe-runtime",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "description": "The iframe-local ggui runtime: a self-contained ESM bundle that boots inside an MCP Apps host iframe, runs the protocol-version handshake, opens the live-channel WebSocket, and mounts the rendered UI. Bundles React, ReactDOM, and the ggui design system so generated component code has a single seam to read from.",
   "keywords": [
     "ggui",
@@ -37,16 +37,17 @@
   },
   "dependencies": {
     "@modelcontextprotocol/ext-apps": "^1.7.2",
+    "@noble/hashes": "^1.6.0",
     "qrcode-generator": "^2.0.4",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "zod": "^4.3.6",
-    "@ggui-ai/gadgets": "0.25.0",
-    "@ggui-ai/design": "0.25.0",
-    "@ggui-ai/live-channel": "0.25.0",
-    "@ggui-ai/preview-a2ui": "0.25.0",
-    "@ggui-ai/protocol": "0.25.0",
-    "@ggui-ai/wire": "0.25.0"
+    "@ggui-ai/design": "0.26.0",
+    "@ggui-ai/gadgets": "0.26.0",
+    "@ggui-ai/preview-a2ui": "0.26.0",
+    "@ggui-ai/live-channel": "0.26.0",
+    "@ggui-ai/protocol": "0.26.0",
+    "@ggui-ai/wire": "0.26.0"
   },
   "peerDependencies": {
     "@modelcontextprotocol/sdk": "^1.27.0"