@ggui-ai/mcp-server-handlers 0.2.0-alpha.4 → 0.4.0-rc.0

package/dist/app-discovery/list-gadgets.d.ts

@@ -2,10 +2,11 @@
  * `ggui_list_gadgets` — per-app browser-capability gadget
  * catalog discovery tool.
  *
- * Returns the list of `GadgetDescriptor` declarations registered for
- * an app — the stdlib seed (`STDLIB_GADGETS` from
- * `@ggui-ai/protocol`) by default, or an operator-mutated catalog
- * once operator mutation is supported.
+ * Returns the app's effective `GadgetDescriptor` catalog: the
+ * first-party stdlib floor (`STDLIB_GADGETS` from
+ * `@ggui-ai/protocol`) with any operator-declared per-app packages
+ * (`ggui.json#app.gadgets`, pushed via the CLI's config-push) layered
+ * on top — a declared package wins on a `package`-name collision.
  *
  * ## Behavior
  *
@@ -15,14 +16,16 @@
  *   2. When `appId` is supplied explicitly, asserts it matches
  *      `ctx.appId`; cross-tenant requests fail with
  *      {@link AppAccessDeniedError}.
- *   3. Reads `app.gadgets` from the bound {@link AppMetadataStore}.
- *      When the store returns `null` (app not registered — common for
- *      OSS sandbox apps that bypass an explicit register call) the
- *      handler falls back to `STDLIB_GADGETS` so callers
- *      always get a meaningful catalog. This is a permitted-error
- *      path, not a tenancy escape — `ctx.appId` was already proved
- *      by the auth adapter; the absence of a registry row just means
- *      the deployment runs default-seeded.
+ *   3. Reads `app.gadgets` from the bound {@link AppMetadataStore}
+ *      and resolves the effective catalog via `resolveAppGadgets`
+ *      (stdlib floor + declared extensions). When the store returns
+ *      `null` (app not registered — common for OSS sandbox apps that
+ *      bypass an explicit register call) the resolution yields
+ *      exactly `STDLIB_GADGETS`, so callers always get a meaningful
+ *      catalog. This is a permitted-error path, not a tenancy
+ *      escape — `ctx.appId` was already proved by the auth adapter;
+ *      the absence of a registry row just means the deployment runs
+ *      default-seeded.
  *
  * ## Audience
  *
@@ -53,7 +56,6 @@ declare const outputSchema: {
             example: z.ZodOptional<z.ZodType<import("@ggui-ai/protocol").JsonValue, unknown, z.core.$ZodTypeInternals<import("@ggui-ai/protocol").JsonValue, unknown>>>;
             permission: z.ZodOptional<z.ZodString>;
             gotchas: z.ZodOptional<z.ZodString>;
-            required: z.ZodOptional<z.ZodBoolean>;
             hook: z.ZodString;
         }, z.core.$strict>, z.ZodObject<{
             description: z.ZodOptional<z.ZodString>;
@@ -61,7 +63,6 @@ declare const outputSchema: {
             example: z.ZodOptional<z.ZodType<import("@ggui-ai/protocol").JsonValue, unknown, z.core.$ZodTypeInternals<import("@ggui-ai/protocol").JsonValue, unknown>>>;
             permission: z.ZodOptional<z.ZodString>;
             gotchas: z.ZodOptional<z.ZodString>;
-            required: z.ZodOptional<z.ZodBoolean>;
             component: z.ZodString;
         }, z.core.$strict>]>>;
         version: z.ZodString;

package/dist/app-discovery/list-gadgets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-gadgets.d.ts","sourceRoot":"","sources":["../../src/app-discovery/list-gadgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjE,QAAA,MAAM,WAAW;;CAQP,CAAC;AAkBX,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAER,CAAC;AAEX,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC/C;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,0BAA0B,GAC/B,aAAa,CACd,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,qBAAqB,CACtB,CA6BA"}
+{"version":3,"file":"list-gadgets.d.ts","sourceRoot":"","sources":["../../src/app-discovery/list-gadgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjE,QAAA,MAAM,WAAW;;CAQP,CAAC;AAkBX,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAER,CAAC;AAEX,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC/C;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,0BAA0B,GAC/B,aAAa,CACd,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,qBAAqB,CACtB,CA6BA"}

package/dist/app-discovery/list-gadgets.js

@@ -2,10 +2,11 @@
  * `ggui_list_gadgets` — per-app browser-capability gadget
  * catalog discovery tool.
  *
- * Returns the list of `GadgetDescriptor` declarations registered for
- * an app — the stdlib seed (`STDLIB_GADGETS` from
- * `@ggui-ai/protocol`) by default, or an operator-mutated catalog
- * once operator mutation is supported.
+ * Returns the app's effective `GadgetDescriptor` catalog: the
+ * first-party stdlib floor (`STDLIB_GADGETS` from
+ * `@ggui-ai/protocol`) with any operator-declared per-app packages
+ * (`ggui.json#app.gadgets`, pushed via the CLI's config-push) layered
+ * on top — a declared package wins on a `package`-name collision.
  *
  * ## Behavior
  *
@@ -15,14 +16,16 @@
  *   2. When `appId` is supplied explicitly, asserts it matches
  *      `ctx.appId`; cross-tenant requests fail with
  *      {@link AppAccessDeniedError}.
- *   3. Reads `app.gadgets` from the bound {@link AppMetadataStore}.
- *      When the store returns `null` (app not registered — common for
- *      OSS sandbox apps that bypass an explicit register call) the
- *      handler falls back to `STDLIB_GADGETS` so callers
- *      always get a meaningful catalog. This is a permitted-error
- *      path, not a tenancy escape — `ctx.appId` was already proved
- *      by the auth adapter; the absence of a registry row just means
- *      the deployment runs default-seeded.
+ *   3. Reads `app.gadgets` from the bound {@link AppMetadataStore}
+ *      and resolves the effective catalog via `resolveAppGadgets`
+ *      (stdlib floor + declared extensions). When the store returns
+ *      `null` (app not registered — common for OSS sandbox apps that
+ *      bypass an explicit register call) the resolution yields
+ *      exactly `STDLIB_GADGETS`, so callers always get a meaningful
+ *      catalog. This is a permitted-error path, not a tenancy
+ *      escape — `ctx.appId` was already proved by the auth adapter;
+ *      the absence of a registry row just means the deployment runs
+ *      default-seeded.
  *
  * ## Audience
  *
@@ -39,7 +42,7 @@
  * defeats per-app curation.
  */
 import { z } from 'zod';
-import { STDLIB_GADGETS, gadgetDescriptorSchema, } from '@ggui-ai/protocol';
+import { resolveAppGadgets, gadgetDescriptorSchema, } from '@ggui-ai/protocol';
 import { AppAccessDeniedError } from './errors.js';
 const inputSchema = {
     appId: z
@@ -71,7 +74,7 @@ export function createGguiListGadgetsHandler(deps) {
         name: 'ggui_list_gadgets',
         title: 'List gadgets',
         audience: ['agent'],
-        description: 'List the per-app catalog of browser-capability gadget hooks the UI may import in `clientCapabilities.gadgets[*]` of a DataContract. Returns the v1 stdlib catalog by default; operator-mutated per-app overrides ship in a follow-up slice. Pass appId to scope explicitly (must match the caller identity); omit to default to the caller-resolved app.',
+        description: "List the per-app catalog of browser-capability gadget hooks the UI may import in `clientCapabilities.gadgets[*]` of a DataContract. Returns the app's effective catalog — the first-party stdlib floor plus any operator-registered per-app packages (`ggui.json#app.gadgets`); a declared package wins on a package-name collision. Pass appId to scope explicitly (must match the caller identity); omit to default to the caller-resolved app.",
         inputSchema,
         outputSchema,
         async handler(rawInput, ctx) {
@@ -86,7 +89,7 @@ export function createGguiListGadgetsHandler(deps) {
             // explicitly created. Return the stdlib seed so callers always
             // get a meaningful catalog. This mirrors the cloud DDB adapter's
             // default-on-read pattern at the row-projection site.
-            const gadgets = app?.gadgets ?? STDLIB_GADGETS;
+            const gadgets = resolveAppGadgets(app?.gadgets);
             return { gadgets };
         },
     };

package/dist/blueprints/describe-data-contract-format.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"describe-data-contract-format.d.ts","sourceRoot":"","sources":["../../src/blueprints/describe-data-contract-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,QAAA,MAAM,WAAW,IAAK,CAAC;AAEvB,QAAA,MAAM,YAAY;;;;;;;CASjB,CAAC;AAEF,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC5C,CAAC,CAAC;CACJ;AAoQD,wBAAgB,uCAAuC,IAAI,aAAa,CACtE,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,gCAAgC,CACjC,CAiBA"}
+{"version":3,"file":"describe-data-contract-format.d.ts","sourceRoot":"","sources":["../../src/blueprints/describe-data-contract-format.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,QAAA,MAAM,WAAW,IAAK,CAAC;AAEvB,QAAA,MAAM,YAAY;;;;;;;CASjB,CAAC;AAEF,UAAU,gCAAgC;IACxC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC5C,CAAC,CAAC;CACJ;AA+RD,wBAAgB,uCAAuC,IAAI,aAAa,CACtE,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,gCAAgC,CACjC,CAiBA"}

package/dist/blueprints/describe-data-contract-format.js

@@ -120,16 +120,25 @@ and read latest as \`stream.latest\` or iterate \`stream.history\`.
 
 \`\`\`ts
 interface AgentCapabilitiesSpec {
+  // Keyed by the bare MCP tool name (the catalog key).
   tools: Record<string, AgentToolEntry>;
 }
 
 interface AgentToolEntry {
-  description?: string;
-  inputSchema?: JsonSchema;
-  outputSchema?: JsonSchema;
+  // Owning MCP server identity. OPTIONAL — Tier-2: derive name from the
+  // mcp__<server>__ prefix (omit when absent, never invent); Tier-1:
+  // agent-server fills from 'initialize'. (server, toolName) is the
+  // canonical identity; version is metadata, not identity.
+  serverInfo?: { name: string; version?: string };
+  // MCP tool descriptor, echoed from 'tools/list' (minus name = the key).
+  toolInfo: {
+    inputSchema: JsonSchema; // REQUIRED — every MCP tool has one.
+    description?: string;
+    outputSchema?: JsonSchema;
+  };
+  // ggui authoring layer (not MCP): when/why/by-whom the tool is called.
   usage?: string;
-  example?: { input?: JsonValue; output?: JsonValue };
-  required?: boolean;
+  example?: { input: JsonValue; output: JsonValue };
 }
 \`\`\`
 
@@ -139,6 +148,24 @@ Pure catalog — declares tools the AGENT may invoke. Referenced from
 NEVER calls these. Cross-ref linter rejects dangling \`nextStep\` /
 \`source.tool\` values that don't resolve to a key here.
 
+Canonical-identity hints (improve reuse of UIs built by earlier
+conversations or other agents):
+
+- The map KEYS are the **bare** MCP tool name — the part AFTER any
+  \`mcp__<server>__\` prefix a host prepends on its connection. Key by
+  the bare name (e.g. \`todo_add\`), NOT the host's connection label or
+  prefix.
+- \`serverInfo.name\` identifies the owning MCP server so a UI built against
+  the same \`(server, toolName)\` is reused across conversations and agents.
+  Set it to the server handle from your tool's \`mcp__<server>__\` prefix —
+  the SAME \`<server>\` you stripped to get the bare key (e.g.
+  \`mcp__todo__todo_add\` → \`serverInfo.name: 'todo'\`). If a tool has no
+  such prefix, OMIT \`serverInfo\` — never invent a name. \`version\` is
+  OPTIONAL metadata (include it only if your host surfaces it); a version
+  difference alone never blocks reuse.
+- \`toolInfo.inputSchema\` is echoed verbatim from the tool's \`tools/list\`
+  descriptor.
+
 ## ClientCapabilitiesSpec entry
 
 \`\`\`ts
@@ -169,11 +196,11 @@ interface GadgetExportUse {
 
 The wire carries IDENTITY ONLY — \`(package, export name)\`. It does
 NOT carry \`version\`: the operator's \`App.gadgets\` catalog owns the
-version pin. Per-export registry metadata (\`permission\`, \`example\`,
-the \`required\` flag) and transport fields (\`bundleUrl\`,
+version pin. Per-export registry metadata (\`permission\`, \`example\`)
+and transport fields (\`bundleUrl\`,
 \`bundleSri\`, …) likewise live on the operator-registered gadget
 package descriptor — NOT on the wire. The renderer resolves them
-server-side from the app's gadget catalog at push time (e.g. a hook's
+server-side from the app's gadget catalog at render time (e.g. a hook's
 browser \`permission\` flows into the iframe's Permissions-Policy
 directive set from there).
 

package/dist/blueprints/list-featured-blueprints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-featured-blueprints.d.ts","sourceRoot":"","sources":["../../src/blueprints/list-featured-blueprints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,QAAA,MAAM,WAAW,IAChB,CAAC;AAEF,QAAA,MAAM,YAAY;;;CAOjB,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,mCAAmC,CACjD,IAAI,GAAE,0BAA+B,GACpC,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,4BAA4B,CAAC,CAwBtF"}
+{"version":3,"file":"list-featured-blueprints.d.ts","sourceRoot":"","sources":["../../src/blueprints/list-featured-blueprints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAMjD,QAAA,MAAM,WAAW,IAAmC,CAAC;AAErD,QAAA,MAAM,YAAY;;;CAOjB,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,mCAAmC,CACjD,IAAI,GAAE,0BAA+B,GACpC,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,4BAA4B,CAAC,CAqBtF"}

package/dist/blueprints/list-featured-blueprints.js

@@ -14,7 +14,12 @@
  * manifest becomes discoverable through this tool.
  */
 import { z } from 'zod';
-const inputSchema = {};
+import { listFeaturedBlueprintsInputShape } from '@ggui-ai/protocol';
+// Canonical SSoT shape — authored once in `@ggui-ai/protocol`
+// (`schemas/mcp.ts`). Intentionally EMPTY: the pre-launch No-Backcompat
+// scrub deleted the filter vocabulary; filters re-enter when a real
+// consumer passes them.
+const inputSchema = listFeaturedBlueprintsInputShape;
 const outputSchema = {
     // Two-arg `z.record(z.string(), z.unknown())` — zod v4 dropped the
     // single-arg form. Keeping the explicit key/value pair so schema
@@ -31,13 +36,12 @@ export function createListFeaturedBlueprintsHandler(deps = {}) {
         description: "Builder-curated featured blueprints. Returns entries declared via the server's blueprint catalog (typically ggui.json's `blueprints.include` for OSS deployments). Empty when no catalog is wired.",
         inputSchema,
         outputSchema,
-        async handler(rawInput) {
-            const { category } = z.object(inputSchema).parse(rawInput);
+        async handler() {
             const provider = deps.blueprints;
             if (!provider) {
                 return { blueprints: [], total: 0 };
             }
-            const entries = await provider.list(category !== undefined ? { tag: category } : {});
+            const entries = await provider.list({});
             return {
                 blueprints: entries.map((entry) => ({ ...entry })),
                 total: entries.length,

package/dist/blueprints/render-blueprint.d.ts

@@ -50,7 +50,7 @@ import type { UiRegistry } from '@ggui-ai/ui-registry';
 import type { GguiRenderBlueprintOutput } from '@ggui-ai/protocol';
 import type { SharedHandler } from '../types.js';
 declare const inputSchema: {
-    blueprintId: z.ZodString;
+    readonly blueprintId: z.ZodString;
 };
 declare const outputSchema: {
     blueprintId: z.ZodString;

package/dist/blueprints/render-blueprint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render-blueprint.d.ts","sourceRoot":"","sources":["../../src/blueprints/render-blueprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,QAAA,MAAM,WAAW;;CAOhB,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;CAKjB,CAAC;AAEF,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,mBAAmB,GACxB,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,yBAAyB,CAAC,CAqCnF"}
+{"version":3,"file":"render-blueprint.d.ts","sourceRoot":"","sources":["../../src/blueprints/render-blueprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjD,QAAA,MAAM,WAAW;;CAA4B,CAAC;AAE9C,QAAA,MAAM,YAAY;;;;;CAKjB,CAAC;AAEF,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,mBAAmB,GACxB,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,yBAAyB,CAAC,CAqCnF"}

package/dist/blueprints/render-blueprint.js

@@ -46,12 +46,10 @@
  * surface advertised, zero functionality — and is retired here.
  */
 import { z } from 'zod';
-const inputSchema = {
-    blueprintId: z
-        .string()
-        .min(1)
-        .describe('The stable blueprint id declared via ggui.ui.json#id. Must match an entry in this server\'s UI registry.'),
-};
+import { renderBlueprintInputShape } from '@ggui-ai/protocol';
+// Canonical SSoT shape — authored once in `@ggui-ai/protocol`
+// (`schemas/mcp.ts`).
+const inputSchema = renderBlueprintInputShape;
 const outputSchema = {
     blueprintId: z.string(),
     blueprintName: z.string(),

package/dist/blueprints/search-blueprints.d.ts

@@ -43,7 +43,7 @@
  */
 import { z } from 'zod';
 import type { BlueprintProvider, EmbeddingProvider, VectorStore } from '@ggui-ai/mcp-server-core';
-import type { GguiSearchBlueprintsOutput } from '@ggui-ai/protocol';
+import { type GguiSearchBlueprintsOutput } from '@ggui-ai/protocol';
 import type { SharedHandler } from '../types.js';
 /**
  * Matches the hosted `MIN_SIMILARITY_SCORE`. Below this is noise —
@@ -82,8 +82,8 @@ export interface SearchBlueprintsDeps {
     readonly blueprints?: BlueprintProvider;
 }
 declare const inputSchema: {
-    query: z.ZodString;
-    limit: z.ZodOptional<z.ZodNumber>;
+    readonly query: z.ZodString;
+    readonly limit: z.ZodOptional<z.ZodNumber>;
 };
 declare const outputSchema: {
     results: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/blueprints/search-blueprints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-blueprints.d.ts","sourceRoot":"","sources":["../../src/blueprints/search-blueprints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAEV,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,IAAM,CAAC;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED,QAAA,MAAM,WAAW;;;CAMhB,CAAC;AAEF,QAAA,MAAM,YAAY;;;;CAUjB,CAAC;AAKF;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,oBAAoB,GACzB,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,0BAA0B,CAAC,CA4CpF"}
+{"version":3,"file":"search-blueprints.d.ts","sourceRoot":"","sources":["../../src/blueprints/search-blueprints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAEV,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,IAAM,CAAC;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAID,QAAA,MAAM,WAAW;;;CAA6B,CAAC;AAE/C,QAAA,MAAM,YAAY;;;;CAUjB,CAAC;AAKF;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,oBAAoB,GACzB,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,0BAA0B,CAAC,CA4CpF"}

package/dist/blueprints/search-blueprints.js

@@ -42,6 +42,7 @@
  * when composing.
  */
 import { z } from 'zod';
+import { flatToBlueprintSource, searchBlueprintsInputShape, } from '@ggui-ai/protocol';
 /**
  * Matches the hosted `MIN_SIMILARITY_SCORE`. Below this is noise —
  * callers that want stricter matching post-filter by `score`.
@@ -62,13 +63,9 @@ export const MANIFEST_EXACT_NAME_SCORE = 1.0;
  * stronger signal.
  */
 export const MANIFEST_SUBSTRING_SCORE = 0.7;
-const inputSchema = {
-    query: z
-        .string()
-        .min(1)
-        .describe("Natural-language description of the UI you're looking for"),
-    limit: z.number().int().min(1).max(100).optional(),
-};
+// Canonical SSoT shape — authored once in `@ggui-ai/protocol`
+// (`schemas/mcp.ts`).
+const inputSchema = searchBlueprintsInputShape;
 const outputSchema = {
     // `z.record(z.string(), z.unknown())` — zod v4 dropped the single-arg
     // form `z.record(z.unknown())` that implicitly defaulted the key type
@@ -130,38 +127,41 @@ export function createSearchBlueprintsHandler(deps) {
  * same score-rounding. A manifest-only OSS boot with an empty vector
  * store returns `[]` here and all visible hits come from the manifest
  * branch.
+ *
+ * Rows are blueprint-registry rows (`blueprintToMetadata` layout):
+ * `description` reads the stored `intent`, and `category` surfaces the
+ * provenance discriminant (`llm` / `user` / `curated`). Rows without
+ * valid provenance — legacy flat-vocabulary rows, foreign vector
+ * families sharing the scope — are dropped at this trust boundary,
+ * never surfaced with coerced labels.
  */
 async function searchSemantic(deps, scope, query, limit) {
     const vector = await deps.embedding.embed(query);
     const raw = await deps.vectors.query(scope, vector, limit);
-    return raw
-        .filter((r) => r.score >= MIN_SIMILARITY_SCORE)
-        .map((r) => {
-        const blueprintHash = r.key;
-        const prompt = asString(r.metadata.prompt);
-        const category = asString(r.metadata.category) || 'generated';
-        const props = parseJsonArray(r.metadata.props);
-        const callbacks = parseJsonArray(r.metadata.callbacks);
-        const featured = asBoolean(r.metadata.featured);
-        return {
-            id: blueprintHash.startsWith('p_') ? blueprintHash : `c_${blueprintHash}`,
-            name: blueprintHash.startsWith('p_')
-                ? `Predefined_${blueprintHash.substring(2)}`
-                : `Cached_${blueprintHash.substring(0, 8)}`,
-            description: prompt,
-            category,
-            props: props.map((p) => ({
-                name: p.name,
-                type: p.type,
-                required: p.required,
-                description: p.description,
-            })),
-            callbacks,
-            featured,
+    const hits = [];
+    for (const r of raw) {
+        if (r.score < MIN_SIMILARITY_SCORE)
+            continue;
+        const source = flatToBlueprintSource(r.metadata);
+        if (source === null)
+            continue;
+        const key = r.key;
+        hits.push({
+            id: `c_${key}`,
+            name: `Cached_${key.substring(0, 8)}`,
+            description: asString(r.metadata.intent),
+            category: source.kind,
+            // Registry rows don't carry per-prop docs / callback lists /
+            // a featured flag — surface honest empties rather than parse
+            // keys no writer ever stamps.
+            props: [],
+            callbacks: [],
+            featured: false,
             relevance: 'match',
             score: Math.round(r.score * 1000) / 1000,
-        };
-    });
+        });
+    }
+    return hits;
 }
 /**
  * Manifest-source branch: text-match against `BlueprintProvider.list`
@@ -209,17 +209,3 @@ function toManifestHit(entry, queryLower) {
 function asString(value) {
     return typeof value === 'string' ? value : '';
 }
-function asBoolean(value) {
-    return Boolean(value);
-}
-function parseJsonArray(value) {
-    if (typeof value !== 'string' || value.length === 0)
-        return [];
-    try {
-        const parsed = JSON.parse(value);
-        return Array.isArray(parsed) ? parsed : [];
-    }
-    catch {
-        return [];
-    }
-}

package/dist/credits/list-credit-transactions.d.ts

@@ -41,7 +41,7 @@ export interface CreditTransactionView {
     readonly balanceAfterCents: number;
     readonly reason: string;
     readonly createdAt: string;
-    readonly relatedRenderId?: string;
+    readonly relatedSessionId?: string;
 }
 export interface ListCreditTransactionsDeps {
     readonly creditTransactions: CreditTransactionSource;
@@ -65,7 +65,7 @@ declare const outputSchema: {
         balanceAfterCents: z.ZodNumber;
         reason: z.ZodString;
         createdAt: z.ZodString;
-        relatedRenderId: z.ZodOptional<z.ZodString>;
+        relatedSessionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     /** Set when more rows exist past `limit`. Pass back as the next call's `cursor`. */
     nextCursor: z.ZodOptional<z.ZodString>;

package/dist/credits/list-credit-transactions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-credit-transactions.d.ts","sourceRoot":"","sources":["../../src/credits/list-credit-transactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;QACf,oCAAoC;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,4EAA4E;QAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,qBAAqB,EAAE,CAAC;QACtC,6CAA6C;QAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;CACtD;AAED,QAAA,MAAM,WAAW;IACf,2BAA2B;;IAE3B,kEAAkE;;CAEnE,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;IAYhB,oFAAoF;;CAErF,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,0BAA0B,GAC/B,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,4BAA4B,CAAC,CAkCtF"}
+{"version":3,"file":"list-credit-transactions.d.ts","sourceRoot":"","sources":["../../src/credits/list-credit-transactions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,CAAC;QACf,oCAAoC;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,4EAA4E;QAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC;QACV,YAAY,EAAE,qBAAqB,EAAE,CAAC;QACtC,6CAA6C;QAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;CACtD;AAED,QAAA,MAAM,WAAW;IACf,2BAA2B;;IAE3B,kEAAkE;;CAEnE,CAAC;AAEF,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;IAYhB,oFAAoF;;CAErF,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,0BAA0B,GAC/B,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,4BAA4B,CAAC,CAkCtF"}

package/dist/credits/list-credit-transactions.js

@@ -28,7 +28,7 @@ const outputSchema = {
         balanceAfterCents: z.number().int(),
         reason: z.string(),
         createdAt: z.string(),
-        relatedRenderId: z.string().optional(),
+        relatedSessionId: z.string().optional(),
     })),
     /** Set when more rows exist past `limit`. Pass back as the next call's `cursor`. */
     nextCursor: z.string().optional(),
@@ -38,7 +38,7 @@ export function createListCreditTransactionsHandler(deps) {
         name: 'ggui_ops_list_credit_transactions',
         title: 'List credit transactions',
         audience: ['ops'],
-        description: "Returns the calling user's credit transaction ledger, newest-first. Each row carries kind ('free_credit' | 'render_charge' | 'topup' | 'refund'), deltaCents (signed — positive for grants/topups, negative for charges), balanceAfterCents (snapshot at time of write), reason (human-readable), and optional relatedRenderId for render_charge rows. Default limit 20, cap 100; pass `cursor` from the previous response's `nextCursor` for paging.",
+        description: "Returns the calling user's credit transaction ledger, newest-first. Each row carries kind ('free_credit' | 'render_charge' | 'topup' | 'refund'), deltaCents (signed — positive for grants/topups, negative for charges), balanceAfterCents (snapshot at time of write), reason (human-readable), and optional relatedSessionId for render_charge rows. Default limit 20, cap 100; pass `cursor` from the previous response's `nextCursor` for paging.",
         inputSchema,
         outputSchema,
         // No `allowedFor` — same toolset on every pod kind. Callers

package/dist/index.d.ts

@@ -15,8 +15,8 @@
  */
 export * from "./blueprints/index.js";
 export * from "./renders/index.js";
-export { AuthRequiredError } from "./types.js";
-export type { AudienceTag, HandlerContext, SharedHandler } from "./types.js";
+export { AuthRequiredError, HANDLER_FAILURE_MARKER, handlerFailure, isHandlerFailure, } from "./types.js";
+export type { AudienceTag, HandlerContext, HandlerFailure, SharedHandler, SharedHandlerResult, } from "./types.js";
 export * from "./threads/index.js";
 export * from "./credits/index.js";
 export * from "./app-discovery/index.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAI7E,cAAc,oBAAoB,CAAC;AAInC,cAAc,oBAAoB,CAAC;AAInC,cAAc,0BAA0B,CAAC;AAIzC,cAAc,0BAA0B,CAAC;AAMzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,WAAW,EACX,cAAc,EACd,cAAc,EACd,aAAa,EACb,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAIpB,cAAc,oBAAoB,CAAC;AAInC,cAAc,oBAAoB,CAAC;AAInC,cAAc,0BAA0B,CAAC;AAIzC,cAAc,0BAA0B,CAAC;AAMzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -15,7 +15,7 @@
  */
 export * from "./blueprints/index.js";
 export * from "./renders/index.js";
-export { AuthRequiredError } from "./types.js";
+export { AuthRequiredError, HANDLER_FAILURE_MARKER, handlerFailure, isHandlerFailure, } from "./types.js";
 // Persistent-chat handler family — thread storage and message
 // history MCP tools. Thin over @ggui-ai/mcp-server-core ThreadStore.
 // Available under `@ggui-ai/mcp-server-handlers/threads` subpath too.

package/dist/ops-apps/create-app.d.ts

@@ -24,6 +24,7 @@ declare const outputSchema: {
     readonly systemPrompt: z.ZodOptional<z.ZodString>;
     readonly createdAt: z.ZodString;
     readonly updatedAt: z.ZodString;
+    readonly connectUrl: z.ZodOptional<z.ZodString>;
 };
 export interface CreateAppOutput {
     readonly appId: string;
@@ -31,6 +32,12 @@ export interface CreateAppOutput {
     readonly systemPrompt?: string;
     readonly createdAt: string;
     readonly updatedAt: string;
+    /**
+     * Per-app MCP connect URL. Optional: emitted only by deployments
+     * that expose per-app ingress (this handler has no ingress
+     * knowledge, so the default composition never sets it).
+     */
+    readonly connectUrl?: string;
 }
 export interface CreateAppDeps {
     readonly apps: AppsSource;

package/dist/ops-apps/create-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../src/ops-apps/create-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD,QAAA,MAAM,WAAW;;CASP,CAAC;AAEX,QAAA,MAAM,YAAY;;;;;;CAMR,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,eAAe,CAAC,CAgCzE"}
+{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../src/ops-apps/create-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,YAAY,CAAC;AAExD,QAAA,MAAM,WAAW;;CASP,CAAC;AAEX,QAAA,MAAM,YAAY;;;;;;;CAYR,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,GAClB,aAAa,CAAC,OAAO,WAAW,EAAE,OAAO,YAAY,EAAE,eAAe,CAAC,CAgCzE"}

package/dist/ops-apps/create-app.js

@@ -20,7 +20,7 @@ const inputSchema = {
         .min(1)
         .max(120)
         .optional()
-        .describe("Human-friendly label for the new app. Defaults to 'My ggui app' when absent — matches the auto-create path in `useGguiUser`."),
+        .describe("Human-friendly label for the new app. Defaults to 'My ggui app' when absent — the same label the deployment's first-load auto-create uses."),
 };
 const outputSchema = {
     appId: z.string(),
@@ -28,13 +28,17 @@ const outputSchema = {
     systemPrompt: z.string().optional(),
     createdAt: z.string(),
     updatedAt: z.string(),
+    connectUrl: z
+        .string()
+        .optional()
+        .describe('Per-app MCP connect URL — present when the deployment exposes per-app ingress. Paste-ready for an MCP client config.'),
 };
 export function createCreateAppHandler(deps) {
     return {
         name: 'ggui_ops_create_app',
         title: 'Create app',
         audience: ['ops'],
-        description: "Provision a fresh `GguiApp` owned by the calling user. Wraps the cloud's `provisionGguiApp` mutation: opaque base62 appId is minted server-side, the row is owned by the caller's Cognito sub, displayName defaults to 'My ggui app' when absent (cap 120 chars). Returns the persisted shape — call `ggui_ops_set_default_app({appId})` afterwards to promote the new app to the user's default.",
+        description: "Provision a fresh `GguiApp` owned by the calling user: an opaque base62 appId is minted server-side, the row is owned by the caller's identity, displayName defaults to 'My ggui app' when absent (cap 120 chars). Returns the persisted shape — call `ggui_ops_set_default_app({appId})` afterwards to promote the new app to the user's default.",
         inputSchema,
         outputSchema,
         async handler(rawInput, ctx) {

package/dist/ops-blueprint/errors.d.ts

@@ -21,6 +21,14 @@
  * Recovery: omit the `generator` field to use
  * `registry.defaultGenerator()`, or register the missing generator
  * before re-invoking.
+ *
+ * Not the retired agent-surface `unknown_generator` gate (rc3,
+ * retired-surface cleanup 2026-06-11 — see `@ggui-ai/protocol`'s
+ * version.ts changelog): the agent surface handles a bad
+ * `blueprintDraft.generator` hint forgivingly as the
+ * `GENERATOR_UNKNOWN` handshake finding (`renders/assert-generator.ts`);
+ * THIS error is the operator registry's strict slug lookup and stays
+ * live. Don't re-unify them.
  */
 export declare class GeneratorNotFoundError extends Error {
     readonly code: "generator_not_found";

package/dist/ops-blueprint/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/ops-blueprint/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBACnC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,MAAM,EAAE;CAM7D;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBACnC,OAAO,CAAC,EAAE,MAAM;CAO7B;AAED;;;;;GAKG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;IAC7C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAK5C"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/ops-blueprint/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBACnC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,MAAM,EAAE;CAM7D;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;gBACnC,OAAO,CAAC,EAAE,MAAM;CAO7B;AAED;;;;;GAKG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;IAC7C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAK5C"}

package/dist/ops-blueprint/errors.js

@@ -21,6 +21,14 @@
  * Recovery: omit the `generator` field to use
  * `registry.defaultGenerator()`, or register the missing generator
  * before re-invoking.
+ *
+ * Not the retired agent-surface `unknown_generator` gate (rc3,
+ * retired-surface cleanup 2026-06-11 — see `@ggui-ai/protocol`'s
+ * version.ts changelog): the agent surface handles a bad
+ * `blueprintDraft.generator` hint forgivingly as the
+ * `GENERATOR_UNKNOWN` handshake finding (`renders/assert-generator.ts`);
+ * THIS error is the operator registry's strict slug lookup and stays
+ * live. Don't re-unify them.
  */
 export class GeneratorNotFoundError extends Error {
     code = "generator_not_found";