@ggui-ai/iframe-runtime 0.27.0 → 0.28.0

package/dist/ladders.d.ts

@@ -2,7 +2,7 @@ import type { ChannelHandler, ChannelLogger, WsTransportHandle } from '@ggui-ai/
 import type { AckPayload } from '@ggui-ai/protocol/wire';
 import type { ConnectionStatus } from '@ggui-ai/protocol/transport/websocket';
 import type { McpAppAiGguiRenderMeta } from '@ggui-ai/protocol/integrations/mcp-apps';
-import type { CredentialController, ExpirySource, RefreshOutcome } from './credential-controller.js';
+import { type CredentialController, type ExpirySource, type RefreshOutcome } from './credential-controller.js';
 import { type BuildBridgePollingOptions, type SequenceCursor } from './events-polling.js';
 import { type ConnectFn, type RegistrySubscribeHandle, type PostAckErrorPayload } from './registry-subscribe.js';
 import type { StreamSeqTracker } from './stream-seq.js';
@@ -58,8 +58,6 @@ export interface LadderSetOptions {
     readonly webSocketFactory?: (url: string) => WebSocket;
     readonly eventSourceFactory?: (url: string) => EventSource;
     readonly fetchImpl?: typeof fetch;
-    /** Test seam for the bridge-entry expiry check. */
-    readonly now?: () => number;
 }
 export interface LadderSet {
     /** Bind the boot ladder. The caller handles its first ack, or its refusal. */

package/dist/ladders.js

@@ -21,8 +21,11 @@
  *   is disposed at that switch, so only one bridge loop runs at a time.
  * - **Expiry** is reported to the credential controller from three places:
  *   a WS `BOOTSTRAP_EXPIRED` frame (the only auth code that triggers), the
- *   first polling `410` whose body is not a replay horizon, and entering
- *   the bridge rung while the ladder's credential is past `expiresAt`. An
+ *   first polling `410` whose body is not a replay horizon, and a bridge
+ *   pull while the controller's attempt clock reads the ladder's credential
+ *   as due — past `expiresAt` by the view's clock, one interval since the
+ *   last attempt (ggui#1734; a bridge report re-sends on a relay error as the
+ *   boot does, since the ladder has no other way to a live channel). An
  *   adopted credential builds the next ladder.
  *
  * A new ladder omits WS when the one it replaces left WS without ever
@@ -38,6 +41,7 @@
  * caller is told which confirmation fired. Anything else keeps its backoff.
  */
 import { ChannelRegistry } from '@ggui-ai/live-channel';
+import { REFRESH_RELAY_ERROR_RETRIES, } from './credential-controller.js';
 import { buildBridgePolling, buildEventsPolling, } from './events-polling.js';
 import { classifyChannelFrame, } from './registry-subscribe.js';
 import { domainErrorCodeOf, isErrorToolResult } from './tool-result-error.js';
@@ -65,7 +69,6 @@ async function isReplayHorizon(response) {
     }
 }
 export function createLadderSet(opts) {
-    const now = opts.now ?? Date.now;
     const baseFetch = opts.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
     let nextId = 0;
     const built = new Map();
@@ -157,7 +160,7 @@ export function createLadderSet(opts) {
         const controller = opts.controller;
         if (controller === null || credential === undefined || ladder.disposed || ended)
             return;
-        const pending = controller.onExpired(credential, source);
+        const pending = controller.onExpired(credential, source, source === 'bridge' ? { retries: REFRESH_RELAY_ERROR_RETRIES } : undefined);
         if (ladder.refresh === undefined)
             ladder.refresh = pending;
         const outcome = await pending;
@@ -280,7 +283,7 @@ export function createLadderSet(opts) {
         const bridge = callTool !== undefined && view !== undefined
             ? buildBridgePolling({
                 callTool: async (name, args) => {
-                    enterBridge(ladder);
+                    onBridgePull(ladder);
                     let result;
                     try {
                         result = await callTool(name, args);
@@ -319,15 +322,22 @@ export function createLadderSet(opts) {
             ...(bridge !== undefined ? { bridge } : {}),
         };
     };
-    /** The ladder's first bridge pull: it has left its token rungs (R3 (b), fact 8). */
-    const enterBridge = (ladder) => {
-        if (ladder.bridgeEntered)
-            return;
-        ladder.bridgeEntered = true;
-        switchTo(ladder);
-        const expiresAt = ladder.spec.credential?.expiresAt;
-        if (expiresAt !== undefined && Date.parse(expiresAt) <= now())
+    /**
+     * Every bridge pull. The first one is the ladder leaving its token rungs
+     * (R3 (b), fact 8); each one asks the controller's attempt clock whether the
+     * credential is due a refresh (ggui#1734) — expired by the view's clock, one
+     * interval since the last attempt — so a view parked here keeps asking, once
+     * per interval, until a refresh is granted or the channel ends.
+     */
+    const onBridgePull = (ladder) => {
+        if (!ladder.bridgeEntered) {
+            ladder.bridgeEntered = true;
+            switchTo(ladder);
+        }
+        const credential = ladder.spec.credential;
+        if (credential !== undefined && opts.controller?.dueOnBridge(credential) === true) {
             void reportExpired(ladder, 'bridge');
+        }
     };
     // The handle arrives through `onBound` as soon as the ladder is bound;
     // the settled result carries the same one, for a `connectFn` that

package/dist/runtime.js

@@ -34,7 +34,7 @@ import { extractLocatorFromToolResult, parseMetaFromGlobal, parseMetaFromToolRes
 import { documentViewRoots, userActivationIsActive, withViewProof } from './view-origin.js';
 import { createStreamSeqTracker } from './stream-seq.js';
 import { createLadderSet } from './ladders.js';
-import { BOOT_REFRESH_RETRIES, createCredentialController, } from './credential-controller.js';
+import { REFRESH_RELAY_ERROR_RETRIES, createCredentialController, } from './credential-controller.js';
 import { projectHostContext } from '@ggui-ai/protocol/wire';
 import { installDismissIntentListener } from './dismiss-intent.js';
 import { App, PostMessageTransport } from '@modelcontextprotocol/ext-apps';
@@ -832,7 +832,7 @@ export async function bootSequence(opts) {
     // to a live channel, so a relay error there is re-sent (F6); a slice with
     // static content goes on with whatever the refresh answered.
     if (held !== undefined && credentialController !== null) {
-        const outcome = await credentialController.onExpired(held, 'boot', hasStaticContent ? undefined : { retries: BOOT_REFRESH_RETRIES });
+        const outcome = await credentialController.onExpired(held, 'boot', hasStaticContent ? undefined : { retries: REFRESH_RELAY_ERROR_RETRIES });
         telemetry?.record('boot.credential_refresh', outcome.kind === 'refused' ? `refused:${outcome.code}` : outcome.kind);
         if (outcome.kind === 'adopted')
             liveMeta = withLiveCredential(meta, outcome.credential);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ggui-ai/iframe-runtime",
-  "version": "0.27.0",
-  "description": "The iframe-local ggui runtime: a self-contained ESM bundle that boots inside an MCP Apps host iframe, runs the protocol-version handshake, opens the live-channel WebSocket, and mounts the rendered UI. Bundles React, ReactDOM, and the ggui design system so generated component code has a single seam to read from.",
+  "version": "0.28.0",
+  "description": "The iframe-local GGUI runtime: a self-contained ESM bundle that boots inside an MCP Apps host iframe, runs the protocol-version handshake, opens the live-channel WebSocket, and mounts the rendered UI. Bundles React, ReactDOM, and the GGUI design system so generated component code has a single seam to read from.",
   "keywords": [
     "ggui",
     "mcp",
@@ -42,12 +42,12 @@
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "zod": "^4.3.6",
-    "@ggui-ai/design": "0.27.0",
-    "@ggui-ai/gadgets": "0.27.0",
-    "@ggui-ai/live-channel": "0.27.0",
-    "@ggui-ai/preview-a2ui": "0.27.0",
-    "@ggui-ai/protocol": "0.27.0",
-    "@ggui-ai/wire": "0.27.0"
+    "@ggui-ai/design": "0.28.0",
+    "@ggui-ai/gadgets": "0.28.0",
+    "@ggui-ai/live-channel": "0.28.0",
+    "@ggui-ai/preview-a2ui": "0.28.0",
+    "@ggui-ai/protocol": "0.28.0",
+    "@ggui-ai/wire": "0.28.0"
   },
   "peerDependencies": {
     "@modelcontextprotocol/sdk": "^1.27.0"