@ggui-ai/mcp-server-handlers 0.25.0 → 0.26.0

package/dist/renders/blueprint-registry.d.ts

@@ -2,7 +2,7 @@ import { DomainError } from '@ggui-ai/protocol';
 import type { BlueprintIndex, EmbeddingProvider, EnumerableVectorStore, VectorStore } from '@ggui-ai/mcp-server-core';
 export type { BlueprintIndex } from '@ggui-ai/mcp-server-core';
 import type { AestheticPresetRef, DirectionScope } from './fits.js';
-import { type BlueprintSource, type BlueprintVariance, type DataContract } from '@ggui-ai/protocol';
+import { type BlueprintSource, type BlueprintVariance, type DataContract, type GeneratorBuild } from '@ggui-ai/protocol';
 import { type ContractValidationFinding, type ContractValidationResult } from '@ggui-ai/negotiator';
 import { type BlueprintDurabilityDeps } from './blueprint-durability.js';
 /**
@@ -102,6 +102,16 @@ export interface Blueprint {
      * A blueprint cache invalidates by regeneration; it never coerces.
      */
     readonly source: BlueprintSource;
+    /**
+     * The build of the engine that minted this blueprint (ggui#1280), set
+     * only on a generation mint (`source.kind === 'llm'`) whose stamp
+     * passed {@link admitGeneratorBuild}. It is written to the DURABLE
+     * record (`projectDurableBlueprint`) and to the vector-store row
+     * (`METADATA_KEYS.build`, ggui#1476), so a row read back via
+     * {@link rowToBlueprint} — a dedup return and a reuse included — names
+     * its MINTING build; an unreadable stored value reads as absent.
+     */
+    readonly build?: GeneratorBuild;
     /**
      * Lifecycle-owner marker for rows materialized by the marketplace
      * install bridge (`installToCache`). Orthogonal to {@link source}
@@ -255,6 +265,13 @@ export interface RegisterBlueprintInput {
      * empty variance as one stable sentinel.
      */
     readonly variance?: BlueprintVariance;
+    /**
+     * The minting engine's build (ggui#1280), from the generation's
+     * `metadata.build`. Pass it only for code a generation produced; the
+     * registry keeps it only when {@link admitGeneratorBuild} does, and a
+     * dedup keeps the row's MINTING build (first write wins).
+     */
+    readonly build?: GeneratorBuild;
     /**
      * WHO initiated this mint, for the durable record. `'agent'` is the
      * standard handshake → render flow; the operator tools
@@ -288,6 +305,40 @@ export declare function composeExactKey(kind: BlueprintKind, contractKey: string
  * the prompt's `cachedContractSummary` MUST equal what was embedded.
  */
 export declare function composeEmbeddingInput(contract: DataContract | undefined, intent: string): string;
+/**
+ * ggui#1476 — the minting build a registry row stores, or `undefined` when
+ * the row has none or its stored value is unreadable. The ONE reader of the
+ * `build` key: the registry's row reader and the exporter both call it, so
+ * the key has one owner. It parses the stored JSON and validates it with the
+ * protocol's strict `generatorBuildSchema`; an unreadable value drops the
+ * FACT — the row reads as an unknown minting build — never the row, with one
+ * line per row id per process.
+ */
+export declare function readGeneratorBuild(metadata: Record<string, string | number | boolean | null>, rowId: string): GeneratorBuild | undefined;
+/**
+ * The one admission rule for a blueprint's build stamp (ggui#1280): keep
+ * `build` only for code a generation produced (`source.kind === 'llm'`),
+ * only when it passes the protocol's strict `generatorBuildSchema`, and only
+ * when it serializes within {@link MAX_BUILD_STAMP_BYTES} (ggui#1476 — the
+ * stamp rides every vector-store row's metadata).
+ * Otherwise the STAMP is dropped, with a line, and the registration goes
+ * ahead unstamped: a row whose minting build is unknown is a reported
+ * category, never an error, while a malformed stamp on a durable row would
+ * make every strict reader of that row refuse it (`ggui_ops_list_blueprints`
+ * validates its rows with `blueprintSchema`). Every writer of a stamp calls
+ * this, so the rule has one home.
+ */
+export declare function admitGeneratorBuild(source: BlueprintSource, build: GeneratorBuild | undefined): GeneratorBuild | undefined;
+/**
+ * ggui#1476 — the largest build stamp, serialized, a row may carry. The stamp
+ * rides every registry row's vector-store metadata, and a production vector
+ * backend bounds that metadata per row (a filterable-metadata budget of
+ * about 2 KB on one such backend, where a rejected write is swallowed by
+ * registration and reads as a silently empty cache). A real stamp — two
+ * 64-hex digests, a version and a mode — is about 250 bytes; the bound keeps
+ * an engine that reports many more digests from ever reaching that budget.
+ */
+export declare const MAX_BUILD_STAMP_BYTES = 1024;
 /**
  * Default cap on registered blueprints per (scope, kind). When a
  * fresh registration would push the bucket past the cap,

package/dist/renders/blueprint-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blueprint-registry.d.ts","sourceRoot":"","sources":["../../src/renders/blueprint-registry.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EAKrB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAKlC,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1E,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC;;;;;OAKG;IACH,sDAAsD;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,sFAAsF;IACtF,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;IAC9C,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,yGAAyG;IACzG,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACpE;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,QAAQ,EAAE,YAAY,KACnB,wBAAwB,CAAC;AAE9B;;;;;;;;;;;;GAYG;AACH,qBAAa,sBAAuB,SAAQ,WAAW,CAAC,oBAAoB,CAAC;IAC3E,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;gBAC5C,QAAQ,EAAE,SAAS,yBAAyB,EAAE;CAQ3D;AAED,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,UAAU,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAGlE;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAC9C,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,6FAA6F;IAC7F,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,MAAM,CAER;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAgTD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,sBAAsB,EAC7B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,mBAAmB,CAAC,CA6G9B;AAmID;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,EACzD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAM3B;AA4DD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,EAClC,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAE3B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAA;CAAE,EACpE,OAAO,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACtE,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAaxC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE;IAAE,WAAW,EAAE,qBAAqB,CAAA;CAAE,EAC5C,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAU/B;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,EACnE,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED,0EAA0E;AAC1E,MAAM,MAAM,2BAA2B,GACnC,UAAU,GACV,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,WAAW,GACX,WAAW,CAAC;AAKhB,kDAAkD;AAClD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE;IACN,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACvC,EACD,IAAI,EAAE;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EACrE,OAAO,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAAC,0BAA0B,CAAC,CAqErC;AAoBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,EACzD,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"blueprint-registry.d.ts","sourceRoot":"","sources":["../../src/renders/blueprint-registry.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EAKrB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAKlC,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;AAE1E,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC;;;;;OAKG;IACH,sDAAsD;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,sFAAsF;IACtF,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;IAC9C,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,yGAAyG;IACzG,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACpE;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,QAAQ,EAAE,YAAY,KACnB,wBAAwB,CAAC;AAE9B;;;;;;;;;;;;GAYG;AACH,qBAAa,sBAAuB,SAAQ,WAAW,CAAC,oBAAoB,CAAC;IAC3E,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;gBAC5C,QAAQ,EAAE,SAAS,yBAAyB,EAAE;CAQ3D;AAED,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;CAC/C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,UAAU,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAGlE;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAC9C,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,6FAA6F;IAC7F,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,MAAM,CAER;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,GAAG,SAAS,EAClC,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAgHD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,EAC1D,KAAK,EAAE,MAAM,GACZ,cAAc,GAAG,SAAS,CAqB5B;AAmED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,cAAc,GAAG,SAAS,GAChC,cAAc,GAAG,SAAS,CAqB5B;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,OAAO,CAAC;AA2J1C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,sBAAsB,EAC7B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,mBAAmB,CAAC,CAmH9B;AAoID;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,EACzD,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAM3B;AA4DD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,EAClC,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAE3B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAA;CAAE,EACpE,OAAO,GAAE;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GACtE,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAaxC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE;IAAE,WAAW,EAAE,qBAAqB,CAAA;CAAE,EAC5C,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAU/B;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,EACnE,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED,0EAA0E;AAC1E,MAAM,MAAM,2BAA2B,GACnC,UAAU,GACV,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,WAAW,GACX,WAAW,CAAC;AAKhB,kDAAkD;AAClD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE;IACN,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACvC,EACD,IAAI,EAAE;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EACrE,OAAO,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAAC,0BAA0B,CAAC,CAqErC;AAoBD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,EACzD,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAef"}

package/dist/renders/blueprint-registry.js

@@ -41,7 +41,7 @@ import { createHash } from 'node:crypto';
  */
 import { randomUUID } from 'node:crypto';
 import { DomainError } from '@ggui-ai/protocol';
-import { blueprintSourceToFlat, flatToBlueprintSource, summarizeContract, } from '@ggui-ai/protocol';
+import { blueprintSourceToFlat, flatToBlueprintSource, generatorBuildSchema, summarizeContract, } from '@ggui-ai/protocol';
 // `blueprintKey` + `variantKey` are server-only — pulled in from a
 // dedicated subpath because they import `node:crypto`, which browsers
 // can't bundle.
@@ -143,6 +143,10 @@ const METADATA_KEYS = {
     aestheticPresetVersion: 'aestheticPresetVersion',
     directionDigest: 'directionDigest',
     directionScope: 'directionScope',
+    // ggui#1476 — the minting engine's build, as a JSON string. Bounded at
+    // admission (MAX_BUILD_STAMP_BYTES) so it cannot crowd a vector backend's
+    // metadata budget; written only when present.
+    build: 'build',
 };
 function blueprintToMetadata(bp) {
     return {
@@ -186,6 +190,7 @@ function blueprintToMetadata(bp) {
         ...(bp.directionDigest !== undefined && bp.directionScope !== undefined
             ? { [METADATA_KEYS.directionScope]: bp.directionScope }
             : {}),
+        ...(bp.build !== undefined ? { [METADATA_KEYS.build]: JSON.stringify(bp.build) } : {}),
     };
 }
 function readDirectionScope(raw) {
@@ -207,6 +212,48 @@ function readJudgedCanvases(raw) {
         return undefined;
     }
 }
+/** Row ids whose stored stamp was unreadable, already warned this process. */
+const warnedUnreadableBuildIds = new Set();
+/**
+ * ggui#1476 — the minting build a registry row stores, or `undefined` when
+ * the row has none or its stored value is unreadable. The ONE reader of the
+ * `build` key: the registry's row reader and the exporter both call it, so
+ * the key has one owner. It parses the stored JSON and validates it with the
+ * protocol's strict `generatorBuildSchema`; an unreadable value drops the
+ * FACT — the row reads as an unknown minting build — never the row, with one
+ * line per row id per process.
+ */
+export function readGeneratorBuild(metadata, rowId) {
+    const stored = metadata[METADATA_KEYS.build];
+    if (stored === undefined)
+        return undefined;
+    if (typeof stored !== 'string') {
+        warnUnreadableBuild(rowId, `stored as ${stored === null ? 'null' : typeof stored}, not a JSON string`);
+        return undefined;
+    }
+    const raw = stored;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        warnUnreadableBuild(rowId, err instanceof Error ? err.message : String(err));
+        return undefined;
+    }
+    const build = generatorBuildSchema.safeParse(parsed);
+    if (!build.success) {
+        warnUnreadableBuild(rowId, build.error.issues.map((i) => i.message).join('; '));
+        return undefined;
+    }
+    return build.data;
+}
+function warnUnreadableBuild(rowId, why) {
+    if (warnedUnreadableBuildIds.has(rowId))
+        return;
+    warnedUnreadableBuildIds.add(rowId);
+    // eslint-disable-next-line no-console -- operator-visible degradation notice
+    console.warn(`[ggui] blueprint registry: blueprint_build_stamp_unreadable — row ${rowId} keeps its code; its minting build reads as unknown (${why})`);
+}
 function readAestheticPreset(metadata) {
     const id = readScalarString(metadata[METADATA_KEYS.aestheticPresetId]);
     if (id === undefined)
@@ -242,6 +289,59 @@ function warnEvictionFallback(event, consequence, err) {
     // eslint-disable-next-line no-console -- operator-visible degradation notice
     console.warn(`[ggui] blueprint registry: ${event} — ${consequence}: ${err instanceof Error ? err.message : String(err)} (logged once per process)`);
 }
+/**
+ * Stamp-drop reasons already warned this process — one line per process per
+ * reason, the {@link warnEvictionFallback} posture: visible without a line
+ * per generation when an engine keeps reporting the same bad stamp.
+ */
+const warnedBuildStampDrops = new Set();
+/**
+ * The one admission rule for a blueprint's build stamp (ggui#1280): keep
+ * `build` only for code a generation produced (`source.kind === 'llm'`),
+ * only when it passes the protocol's strict `generatorBuildSchema`, and only
+ * when it serializes within {@link MAX_BUILD_STAMP_BYTES} (ggui#1476 — the
+ * stamp rides every vector-store row's metadata).
+ * Otherwise the STAMP is dropped, with a line, and the registration goes
+ * ahead unstamped: a row whose minting build is unknown is a reported
+ * category, never an error, while a malformed stamp on a durable row would
+ * make every strict reader of that row refuse it (`ggui_ops_list_blueprints`
+ * validates its rows with `blueprintSchema`). Every writer of a stamp calls
+ * this, so the rule has one home.
+ */
+export function admitGeneratorBuild(source, build) {
+    if (build === undefined)
+        return undefined;
+    const drop = (() => {
+        if (source.kind !== 'llm')
+            return { reason: 'not-generated', detail: 'code no generation produced carries no build' };
+        if (!generatorBuildSchema.safeParse(build).success)
+            return { reason: 'schema', detail: 'the stamp fails generatorBuildSchema' };
+        const bytes = new TextEncoder().encode(JSON.stringify(build)).length;
+        if (bytes > MAX_BUILD_STAMP_BYTES) {
+            return { reason: 'size', detail: `the stamp is ${bytes} bytes, over the ${MAX_BUILD_STAMP_BYTES}-byte bound` };
+        }
+        return undefined;
+    })();
+    if (drop === undefined)
+        return build;
+    if (!warnedBuildStampDrops.has(drop.reason)) {
+        warnedBuildStampDrops.add(drop.reason);
+        // eslint-disable-next-line no-console -- operator-visible degradation notice
+        console.warn(`[ggui] blueprint registry: blueprint_build_stamp_dropped — ${drop.detail}; ` +
+            'the row registers unstamped (its minting build reads as unknown) (logged once per process per reason)');
+    }
+    return undefined;
+}
+/**
+ * ggui#1476 — the largest build stamp, serialized, a row may carry. The stamp
+ * rides every registry row's vector-store metadata, and a production vector
+ * backend bounds that metadata per row (a filterable-metadata budget of
+ * about 2 KB on one such backend, where a rejected write is swallowed by
+ * registration and reads as a silently empty cache). A real stamp — two
+ * 64-hex digests, a version and a mode — is about 250 bytes; the bound keeps
+ * an engine that reports many more digests from ever reaching that budget.
+ */
+export const MAX_BUILD_STAMP_BYTES = 1024;
 function readScalarString(value) {
     return typeof value === 'string' ? value : undefined;
 }
@@ -333,6 +433,7 @@ function rowToBlueprint(key, metadata) {
     const aestheticPreset = readAestheticPreset(metadata);
     const directionDigest = readScalarString(metadata[METADATA_KEYS.directionDigest]);
     const directionScope = directionDigest !== undefined ? readDirectionScope(metadata[METADATA_KEYS.directionScope]) : undefined;
+    const build = readGeneratorBuild(metadata, key);
     return {
         id: key,
         kind: kindStr,
@@ -353,6 +454,7 @@ function rowToBlueprint(key, metadata) {
         ...(aestheticPreset !== undefined ? { aestheticPreset } : {}),
         ...(directionDigest !== undefined ? { directionDigest } : {}),
         ...(directionScope !== undefined ? { directionScope } : {}),
+        ...(build !== undefined ? { build } : {}),
     };
 }
 /**
@@ -436,8 +538,9 @@ export async function registerBlueprint(deps, scope, input, options = {}) {
         if (existing)
             return { ...existing, deduped: true };
         // Dangling binding (id present, row gone) — self-heal: drop the stale
-        // binding and fall through to mint a fresh row.
-        await deps.index.deleteId(scope, exactKey);
+        // binding and fall through to mint a fresh row. Conditional on the stale
+        // id, so a registration that bound the key in between keeps it (#1603).
+        await deps.index.deleteId(scope, exactKey, existingId);
     }
     const id = options.mintId?.() ?? `bp_${randomUUID()}`;
     const variance = input.variance ?? {};
@@ -452,6 +555,10 @@ export async function registerBlueprint(deps, scope, input, options = {}) {
         codeStore !== undefined
         ? codeStore.hashOf(input.sourceCode)
         : undefined;
+    // ggui#1280 / ggui#1476 — the minting engine's build, admitted once: the
+    // returned blueprint, the durable record and the vector-store row
+    // (`METADATA_KEYS.build`, via `blueprintToMetadata`) all carry it.
+    const build = admitGeneratorBuild(input.source, input.build);
     const blueprint = {
         id,
         kind: input.kind,
@@ -464,6 +571,7 @@ export async function registerBlueprint(deps, scope, input, options = {}) {
         createdAt,
         hitCount: 0,
         source: input.source,
+        ...(build !== undefined ? { build } : {}),
         ...(input.installed === true ? { installed: true } : {}),
         ...(input.intentSource === 'fallback' ? { intentSource: 'fallback' } : {}),
         ...(input.judgedCanvases !== undefined ? { judgedCanvases: [...input.judgedCanvases] } : {}),
@@ -606,12 +714,16 @@ async function maybeEvictLowestHitBlueprint(deps, scope, kind, cap) {
     if (victimKind !== undefined &&
         victimContractKey !== undefined &&
         victimVariantKey !== undefined) {
+        const victimExactKey = composeExactKey(victimKind, victimContractKey, victimVariantKey);
         try {
-            await deps.index.deleteId(scope, composeExactKey(victimKind, victimContractKey, victimVariantKey));
+            // Conditional on the victim's own id: a key re-bound since to a
+            // different blueprint keeps its binding (#1603).
+            await deps.index.deleteId(scope, victimExactKey, victim.key);
         }
-        catch {
-            // Best-effort — a failed index delete leaves a self-healing
-            // dangling binding, which `findBlueprintExact` resolves to null.
+        catch (err) {
+            // Best-effort — a failed index delete leaves a dangling binding, which
+            // `findBlueprintExact` resolves to null; named so an operator sees it.
+            warnUnbindFailed(scope, victimExactKey, victim.key, err);
         }
     }
 }
@@ -905,11 +1017,26 @@ export async function deleteBlueprint(deps, scope, id) {
     const existing = await findBlueprintByUuid(deps.vectorStore, scope, id);
     await deps.vectorStore.deleteVector(scope, id);
     if (existing) {
+        const exactKey = composeExactKey(existing.kind, existing.contractKey, existing.variantKey);
         try {
-            await deps.index.deleteId(scope, composeExactKey(existing.kind, existing.contractKey, existing.variantKey));
+            // Conditional on the deleted id: if the key has since been bound to a
+            // different blueprint, that binding is the live design and stays (#1603).
+            await deps.index.deleteId(scope, exactKey, id);
         }
-        catch {
-            // Best-effort — a dangling binding self-heals at the read site.
+        catch (err) {
+            // Best-effort — a dangling binding self-heals at the read site; named
+            // so an operator sees it.
+            warnUnbindFailed(scope, exactKey, id, err);
         }
     }
 }
+/**
+ * An index unbind failed after its row was deleted (#1603). Best-effort by
+ * design: the dangling binding self-heals at the read site. Named, so an
+ * operator sees it rather than a silent swallow.
+ */
+function warnUnbindFailed(scope, exactKey, blueprintId, err) {
+    // eslint-disable-next-line no-console -- operator-visible degradation notice
+    console.warn(`[ggui] blueprint registry: blueprint_index_unbind_failed — scope ${scope}, key ${exactKey}, ` +
+        `blueprint ${blueprintId}; the binding dangles until a read self-heals it: ${err instanceof Error ? err.message : String(err)}`);
+}

package/dist/renders/build-seed-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-seed-pool.d.ts","sourceRoot":"","sources":["../../src/renders/build-seed-pool.ts"],"names":[],"mappings":"AAYA,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwB5D,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAuExB"}
+{"version":3,"file":"build-seed-pool.d.ts","sourceRoot":"","sources":["../../src/renders/build-seed-pool.ts"],"names":[],"mappings":"AAYA,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAwB5D,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CA6ExB"}

package/dist/renders/build-seed-pool.js

@@ -82,6 +82,12 @@ export async function buildSeedPool(source, options) {
             // requires it) — an llm-minted record stays llm-sourced in
             // the pool; importing never re-labels authorship.
             source: record.source,
+            // ggui#1476 — the minting build travels with the artifact the same
+            // way. A stamp that fails `generatorBuildSchema` never reaches here:
+            // `fromPortableBlueprint` rejects the whole record above. The registry
+            // then admits what remains — a stamp on non-generated code, or one over
+            // the size bound, is dropped with a line and the row registers.
+            ...(record.build !== undefined ? { build: record.build } : {}),
             variance: record.variance,
         }, 
         // Seed pool is a fixed curated set — never evict.

package/dist/renders/consume.d.ts

@@ -166,8 +166,9 @@ export interface GguiConsumeHandlerDeps {
     readonly logger?: ConsumeLogger;
     /**
      * Optional active-consumer awareness seam. When bound, the handler
-     * calls `enter(sessionId)` at the top of the long-poll and
-     * `exit(sessionId)` in `finally` so a concurrent
+     * calls `enter(sessionId)` once the caller is admitted to the session
+     * (never for a refused or missing one) and `exit(sessionId)` in
+     * `finally` so a concurrent
      * `ggui_runtime_submit_action` append can query `hasActive` and
      * surface `consumerPresent: false` to the iframe when no long-poll
      * is registered for the targeted render — the iframe then emits

package/dist/renders/consume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consume.d.ts","sourceRoot":"","sources":["../../src/renders/consume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EACL,KAAK,sBAAsB,EAE3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AAuBrB,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAgC,CAAC;AACnD,kEAAkE;AAClE,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,IAAI,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;SACzB,CAAC;KACH,GAAG,IAAI,CAAC;CACV;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,IAAI,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI,CAAC;CACV;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;sDAEkD;IAClD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,wDAAwD;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,EAAE,oBAAoB,CAAC;CAC3E;AAYD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiOpE"}
+{"version":3,"file":"consume.d.ts","sourceRoot":"","sources":["../../src/renders/consume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EACL,KAAK,sBAAsB,EAE3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AAuBrB,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAgC,CAAC;AACnD,kEAAkE;AAClE,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,YAAY,CAAC,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,IAAI,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;SACzB,CAAC;KACH,GAAG,IAAI,CAAC;CACV;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,IAAI,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI,CAAC;CACV;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;sDAEkD;IAClD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,wDAAwD;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,EAAE,oBAAoB,CAAC;CAC3E;AAYD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyOpE"}

package/dist/renders/consume.js

@@ -73,22 +73,31 @@ export function createGguiConsumeHandler(deps) {
         outputSchema,
         async handler(rawInput, ctx) {
             const { sessionId, timeout = 0 } = z.object(inputSchema).parse(rawInput);
-            // Register this long-poll on the active-consumer registry IMMEDIATELY
-            // — before the app-scope resolution awaits — so a concurrent
-            // `submit-action.ts` append observes `hasActive: true` for the
-            // earliest possible window. `exit` is paired in `finally` below so
-            // every termination path (success, timeout, error, app-scope reject)
-            // decrements the count exactly once.
+            // Resolve render FIRST (ggui#1485). Cross-app (appId) + cross-user +
+            // missing all surface uniformly as session_not_found (don't leak
+            // whether the id exists for another app / another user), and a
+            // refused call must leave no trace on the session it named. Entering
+            // the active-consumer registry before this gate let another app's
+            // consume count as the session's consumer while its store read ran
+            // (a dispatch in that moment reported a consumer present), and its
+            // `exit` stamped the session's lastExitAt, which changed the grace
+            // wait of that session's dispatches for the next minute.
+            const stored = await deps.renderStore.get(sessionId);
+            if (!isVisibleToCaller(stored, ctx)) {
+                // `stored` is narrowed to StoredGguiSession past this guard.
+                throw new GguiSessionNotFoundError(sessionId);
+            }
+            // Register this long-poll on the active-consumer registry once the
+            // caller is admitted, so a concurrent `submit-action.ts` append
+            // observes `hasActive: true`. A dispatch landing during the store
+            // read above waits its own grace (`waitForConsumer`), which this
+            // `enter` wakes; with the default policy that wait is at least
+            // 150 ms, far longer than one store read, while a deployment's
+            // `consumerGraceMs` sets its own. `exit` is paired in `finally` below
+            // so every termination path after admission (success, timeout,
+            // error, abort) decrements the count exactly once.
             deps.activeConsumerRegistry?.enter(sessionId);
             try {
-                // Resolve render. Cross-app (appId) + cross-user + missing
-                // all surface uniformly as session_not_found (don't leak whether
-                // the id exists for another app / another user).
-                const stored = await deps.renderStore.get(sessionId);
-                if (!isVisibleToCaller(stored, ctx)) {
-                    // `stored` is narrowed to StoredGguiSession past this guard.
-                    throw new GguiSessionNotFoundError(sessionId);
-                }
                 // `timeout` is schema-bounded to [0, 25] (SPEC §7.3) —
                 // out-of-range values rejected INVALID_PARAMS before this line.
                 const deadline = Date.now() + timeout * 1000;

package/dist/renders/cross-app-refused.d.ts

@@ -10,7 +10,8 @@ export declare function logCrossAppRefused(tool: string, sessionId: string, call
  * ggui#1479 — the line a refusal leaves when a session's ownership could not
  * be read at all (the store threw): the tool, the session, the caller's app
  * and why. The call fails closed; this line is how an outage reads apart
- * from a probe.
+ * from a probe. A caller with no logger of its own passes the store's error
+ * text, so the cause rides the same line (ggui#1514).
  */
-export declare function logOwnershipUnverified(tool: string, sessionId: string, callerAppId: string, reason: 'read-failed'): void;
+export declare function logOwnershipUnverified(tool: string, sessionId: string, callerAppId: string, reason: 'read-failed', error?: string): void;
 //# sourceMappingURL=cross-app-refused.d.ts.map

package/dist/renders/cross-app-refused.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cross-app-refused.d.ts","sourceRoot":"","sources":["../../src/renders/cross-app-refused.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAGjH;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAGxH"}
+{"version":3,"file":"cross-app-refused.d.ts","sourceRoot":"","sources":["../../src/renders/cross-app-refused.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAGjH;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,EACrB,KAAK,CAAC,EAAE,MAAM,GACb,IAAI,CAIN"}

package/dist/renders/cross-app-refused.js

@@ -13,9 +13,11 @@ export function logCrossAppRefused(tool, sessionId, callerAppId, ownerAppId) {
  * ggui#1479 — the line a refusal leaves when a session's ownership could not
  * be read at all (the store threw): the tool, the session, the caller's app
  * and why. The call fails closed; this line is how an outage reads apart
- * from a probe.
+ * from a probe. A caller with no logger of its own passes the store's error
+ * text, so the cause rides the same line (ggui#1514).
  */
-export function logOwnershipUnverified(tool, sessionId, callerAppId, reason) {
+export function logOwnershipUnverified(tool, sessionId, callerAppId, reason, error) {
+    const fields = error === undefined ? { tool, sessionId, callerAppId, reason } : { tool, sessionId, callerAppId, reason, error };
     // eslint-disable-next-line no-console -- operator-visible structured refusal line; handlers carry no logger
-    console.warn(`[ggui] runtime_ownership_unverified ${JSON.stringify({ tool, sessionId, callerAppId, reason })}`);
+    console.warn(`[ggui] runtime_ownership_unverified ${JSON.stringify(fields)}`);
 }

package/dist/renders/decide-handshake.d.ts

@@ -95,6 +95,17 @@ export interface BlueprintLookupKeys {
     readonly variantKey: string;
     readonly exactKey: string;
 }
+/**
+ * ggui#1568 — a deployment's answer to "which rows may the semantic tier
+ * not offer for this request?" See {@link HandshakeDecisionAdapter.semanticExclusion}.
+ */
+export type SemanticExclusion = {
+    readonly kind: 'rows';
+    readonly keys: ReadonlySet<string>;
+} | {
+    readonly kind: 'all';
+    readonly reason: string;
+};
 export interface HandshakeDecisionAdapter {
     /**
      * Resolve the LLM for this request — the find-similar judge AND the
@@ -141,6 +152,23 @@ export interface HandshakeDecisionAdapter {
      * these from wherever it keeps a request's presentation facts.
      */
     resolveRequestFit?(ctx: HandlerContext): Promise<RequestFitFacts | undefined> | RequestFitFacts | undefined;
+    /**
+     * ggui#1568 — rows the deployment reserves from the semantic tier for this
+     * request: rows that must be reached only by their exact key, never by
+     * similarity (an A/B test's arm, served only to the traffic assigned to
+     * it, is the first such row). Resolved once per decision and applied to
+     * every pool probe. Not asked when `reuseMode` is `'exact-only'`, since
+     * the semantic tier is already off.
+     *
+     * `{ kind: 'rows', keys }` excludes each row named by
+     * {@link semanticExclusionKey}. `{ kind: 'all', reason }` turns the
+     * semantic tier off for this request: the answer when the deployment
+     * cannot say which rows are reserved. It must never answer an empty set it
+     * has not read. A hook that throws an operational error is read as
+     * `'all'` and reported through `warn`. A programmer error (TypeError and
+     * kin) is rethrown, as for every hook here. Absent ⇒ nothing is reserved.
+     */
+    readonly semanticExclusion?: (ctx: HandlerContext) => Promise<SemanticExclusion> | SemanticExclusion;
     /**
      * Optional deployment-specific pre-match, run BEFORE the find-similar
      * probe so a curated / byte-exact hit wins over everything — e.g. a

package/dist/renders/decide-handshake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decide-handshake.d.ts","sourceRoot":"","sources":["../../src/renders/decide-handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAGH,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAGlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAGL,KAAK,oBAAoB,EAEzB,KAAK,UAAU,EAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;IAC3D,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,gHAAgH;AAChH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;;;;OAOG;IACH,UAAU,CACR,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1D;;;;;OAKG;IACH,aAAa,CAAC,CACZ,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5D;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAE1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CACnB,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,MAAM,GAAG,YAAY,CAAC;IAC5D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,CAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,eAAe,GAAG,SAAS,CAAC;IACtE;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;QAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,GACG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,GAC9C,yBAAyB,GACzB,SAAS,CAAC;IACd;;;;;OAKG;IACH,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC;;;;;;;WAOG;QACH,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;KACtC,GAAG,IAAI,CAAC;IACT;;iDAE6C;IAC7C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC7B,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,GAAG,mBAAmB,GAAG,SAAS,CAAC;CACjF;AAED,0FAA0F;AAC1F,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAyIhF;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE;IACT,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC,EACD,MAAM,EAAE,MAAM;AACd;;;;;GAKG;AACH,WAAW,EAAE,MAAM;AACnB,kDAAkD;AAClD,IAAI,EAAE,aAAa,GAAG,gBAAgB,GACrC,yBAAyB,CA0C3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM;AACd,uEAAuE;AACvE,IAAI,EAAE,UAAU,GAAG,qBAAqB,EACxC,eAAe,CAAC,EAAE,iBAAiB,GAClC,yBAAyB,CAoC3B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,yBAAyB,CAAC,CAkVpC"}
+{"version":3,"file":"decide-handshake.d.ts","sourceRoot":"","sources":["../../src/renders/decide-handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAGH,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAGlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAGL,KAAK,oBAAoB,EAGzB,KAAK,UAAU,EAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;IAC3D,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,gHAAgH;AAChH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACvC;;;;;;;OAOG;IACH,UAAU,CACR,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1D;;;;;OAKG;IACH,aAAa,CAAC,CACZ,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5D;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAE1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CACnB,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,GAAG,MAAM,GAAG,YAAY,CAAC;IAC5D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,CAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,eAAe,GAAG,SAAS,CAAC;IACtE;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAC3B,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;QAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;KAC9B,GACG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,GAC9C,yBAAyB,GACzB,SAAS,CAAC;IACd;;;;;OAKG;IACH,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC;;;;;;;WAOG;QACH,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;KACtC,GAAG,IAAI,CAAC;IACT;;iDAE6C;IAC7C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC7B,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,GAAG,mBAAmB,GAAG,SAAS,CAAC;CACjF;AAED,0FAA0F;AAC1F,MAAM,MAAM,oBAAoB,GAAG,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAuJhF;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE;IACT,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC,EACD,MAAM,EAAE,MAAM;AACd;;;;;GAKG;AACH,WAAW,EAAE,MAAM;AACnB,kDAAkD;AAClD,IAAI,EAAE,aAAa,GAAG,gBAAgB,GACrC,yBAAyB,CA0C3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,OAAO,EACtB,MAAM,EAAE,MAAM;AACd,uEAAuE;AACvE,IAAI,EAAE,UAAU,GAAG,qBAAqB,EACxC,eAAe,CAAC,EAAE,iBAAiB,GAClC,yBAAyB,CAoC3B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,yBAAyB,CAAC,CAwWpC"}

package/dist/renders/decide-handshake.js

@@ -88,7 +88,8 @@ function coverageHasGap(gap) {
         gap.props.length > 0 ||
         gap.context.length > 0 ||
         gap.streams.length > 0 ||
-        gap.gadgets.length > 0);
+        gap.gadgets.length > 0 ||
+        gap.actionMembers.length > 0);
 }
 /**
  * Project a coverage gap into `severity:'warn'` validation findings — one
@@ -127,6 +128,19 @@ function coverageGapFindings(gap, request) {
     push('context', 'contextSpec');
     push('streams', 'streamSpec');
     push('gadgets', 'gadgets');
+    // ggui#1428 — a shared action whose stored entry lacks a load-bearing
+    // member the draft declares: the served card will not behave that way.
+    for (const entry of gap.actionMembers) {
+        const dot = entry.lastIndexOf('.');
+        const name = entry.slice(0, dot);
+        const member = entry.slice(dot + 1);
+        findings.push({
+            code: COVERAGE_GAP_CODE,
+            severity: 'warn',
+            path: `actionSpec.${entry}`,
+            message: `the proposed cached UI declares action '${name}' without the \`${member}\` your draft declares, so the served card will not carry that behaviour. Default to ACCEPT (reuse-and-refine) — override only if the user or your flow depends on it.`,
+        });
+    }
     return findings;
 }
 /** Stable code for the VARIANCE_GAP warn finding on a variance-divergent reuse. */
@@ -402,6 +416,29 @@ export async function decideHandshake(adapter, input) {
         // ggui#607 — resolve the reuse policy once; 'exact-only' threads
         // disableSemantic into every pool probe below.
         const reuseMode = adapter.reuseMode ? await adapter.reuseMode(ctx) : 'full';
+        // ggui#1568 — the reserved rows, resolved once. An operational failure
+        // reads as 'all': the tier stays off rather than offering a reserved row.
+        let exclusion;
+        if (reuseMode === 'full' && adapter.semanticExclusion) {
+            try {
+                exclusion = await adapter.semanticExclusion(ctx);
+            }
+            catch (err) {
+                if (!isOperationalError(err))
+                    throw err;
+                exclusion = { kind: 'all', reason: `semanticExclusion threw: ${errMessage(err)}` };
+            }
+            if (exclusion.kind === 'all') {
+                adapter.warn?.(`[decideHandshake] semantic tier off for this request, the reserved rows are unknown: ${exclusion.reason}`);
+            }
+        }
+        const probeOptions = reuseMode === 'exact-only'
+            ? { disableSemantic: true }
+            : exclusion?.kind === 'all'
+                ? { disableSemantic: true, disableSemanticCause: 'exclusion-unavailable' }
+                : exclusion?.kind === 'rows'
+                    ? { excludeFromSemantic: exclusion.keys }
+                    : undefined;
         // ggui#1427 — the request's fit facts, resolved once for every pool probe.
         const requestFit = adapter.resolveRequestFit ? await adapter.resolveRequestFit(ctx) : undefined;
         // The requesting agent's declared MCP tools (a set keyed by bare
@@ -442,9 +479,7 @@ export async function decideHandshake(adapter, input) {
                     contract: parsedDraft.data,
                     ...(variance !== undefined ? { variance } : {}),
                     ...(requestFit !== undefined ? { fit: requestFit } : {}),
-                }, ...(reuseMode === 'exact-only'
-                    ? [{ disableSemantic: true }]
-                    : []));
+                }, ...(probeOptions !== undefined ? [probeOptions] : []));
                 // Isolated in its OWN try/catch, separate from the outer
                 // pool-probe catch below: onBlueprintMatch's contract promises
                 // non-blocking observation, so a throwing observer must never

package/dist/renders/export-registry.d.ts

@@ -1,5 +1,5 @@
 import { type VectorStore } from '@ggui-ai/mcp-server-core';
-import { type BlueprintSource, type DataContract, type BlueprintVariance } from '@ggui-ai/protocol';
+import { type BlueprintSource, type DataContract, type BlueprintVariance, type GeneratorBuild } from '@ggui-ai/protocol';
 export interface ExportableBlueprint {
     readonly contract: DataContract;
     readonly componentCode: string;
@@ -19,6 +19,13 @@ export interface ExportableBlueprint {
      * artifactId fallback — useless prose for semantic matching.
      */
     readonly intent?: string;
+    /**
+     * ggui#1476 — the minting engine's build, when the row carries one, so
+     * the export codec (`toPortableBlueprint`) ships the portable
+     * blueprint's `build`. Read through the registry's one reader of the
+     * key; an unreadable stored value is absent.
+     */
+    readonly build?: GeneratorBuild;
 }
 /**
  * Enumerate every reusable TEMPLATE blueprint stored under `scope` in a

package/dist/renders/export-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"export-registry.d.ts","sourceRoot":"","sources":["../../src/renders/export-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CA+CzC"}
+{"version":3,"file":"export-registry.d.ts","sourceRoot":"","sources":["../../src/renders/export-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAiDzC"}