@ggui-ai/mcp-server 0.2.0-alpha.3 → 0.3.0-rc.0

package/dist/console-static-routes.js

@@ -0,0 +1,190 @@
+/**
+ * Console static-bundle + SPA serving routes.
+ *
+ *   GET <consolePath>            — mode-meta-injected `index.html`,
+ *                                  welcome page, or onboarding redirect.
+ *   <consolePath>/* (static)     — `express.static` over the package's
+ *                                  built `dist/` (HTML + JS + CSS).
+ *   GET /admin/* + /devtools/*   — admin-HTML gate (302 to
+ *                                  `/admin-login?next=…` on miss).
+ *   GET <consolePath>/* (SPA)    — fallback to the rewritten
+ *                                  `index.html` so the React router
+ *                                  takes over for client-side routes.
+ *
+ * When the `distDir` doesn't exist on disk (e.g. operator forgot
+ * to run `pnpm --filter @ggui-ai/console build`), the static
+ * route is replaced with a 503 that points at the missing build —
+ * silent 404 would be mistaken for "console is broken" rather
+ * than "console wasn't built yet," which is a real debugging
+ * trap for self-hosted operators.
+ */
+import express from "express";
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { applyDevtoolSecurityHeaders } from "./console-headers.js";
+import { renderWelcomeHtml } from "./console-welcome.js";
+/**
+ * Mount the console static + SPA routes onto the express app.
+ * Returns nothing — the routes self-register.
+ */
+export function mountConsoleStaticRoutes(opts) {
+    const { app, consolePath, consoleDistDir, mode, serverName, welcomePage, landingRedirect, requestHasAdminAuth, logger, } = opts;
+    if (existsSync(consoleDistDir)) {
+        // Read + stamp `<meta name="ggui-mode" content="dev|prod">` into
+        // the SPA's `<head>` once at boot. The SPA's `mode.ts` reads the
+        // meta synchronously on first paint so `TopNav` renders the
+        // `/devtools` link without a `/info` round-trip flicker. Mode
+        // changes require a server restart — same shape as every other
+        // `CreateGguiServerOptions` field, no live-toggle ceremony.
+        const indexPath = path.join(consoleDistDir, "index.html");
+        const META_TAG = `<meta name="ggui-mode" content="${mode}">`;
+        let indexHtml;
+        try {
+            const raw = readFileSync(indexPath, "utf-8");
+            // Inject right after `<head>` so the meta is available before
+            // any subsequent `<script>` tag executes. Idempotent: if a
+            // previous build somehow already inlined the meta, the
+            // injection still produces a valid (duplicate but harmless)
+            // tag — `mode.ts` reads the first hit.
+            indexHtml = raw.includes("<head>")
+                ? raw.replace("<head>", `<head>${META_TAG}`)
+                : raw.replace(/^/, `${META_TAG}\n`);
+        }
+        catch (err) {
+            logger.warn("console_index_read_failed", {
+                path: indexPath,
+                error: String(err),
+            });
+            indexHtml = `<!doctype html><html><head>${META_TAG}</head><body></body></html>`;
+        }
+        const sendConsoleHtml = (res) => {
+            applyDevtoolSecurityHeaders(res);
+            res.type("text/html").send(indexHtml);
+        };
+        // Welcome HTML — server-rendered landing for `consolePath === '/'`
+        // when the operator wires `welcomePage`. Identifies who runs
+        // the server (operator block; entirely hidden when unset),
+        // describes the public deep-link surfaces, and offers the
+        // operator-login affordance. No JS, no SPA mount, same security
+        // headers as `sendConsoleHtml`.
+        const welcomeEnabled = welcomePage !== undefined && consolePath === "/";
+        const sendWelcomeHtml = welcomeEnabled && welcomePage !== undefined
+            ? (res) => {
+                applyDevtoolSecurityHeaders(res);
+                res.type("text/html").send(renderWelcomeHtml(welcomePage, serverName));
+            }
+            : null;
+        // Onboarding redirect — must run BEFORE express.static, which
+        // would otherwise serve `index.html` for `GET /` directly and
+        // never give the SPA fallback (or this redirect) a chance.
+        app.get(consolePath, (req, res, next) => {
+            // Static middleware fires on the trailing-slash variant when
+            // consolePath !== '/'. Both shapes route here.
+            if (req.path !== consolePath && req.path !== `${consolePath}/`) {
+                return next();
+            }
+            if (landingRedirect) {
+                const target = landingRedirect();
+                if (target && target !== req.path) {
+                    res.redirect(302, target);
+                    return;
+                }
+            }
+            if (sendWelcomeHtml) {
+                sendWelcomeHtml(res);
+                return;
+            }
+            sendConsoleHtml(res);
+        });
+        app.use(consolePath, express.static(consoleDistDir, {
+            // index:false — explicit handler above owns `/` so the meta
+            // tag gets injected. Without this, express.static would
+            // race the handler and sometimes serve the raw file.
+            index: false,
+            // Short cache — operators iterating on their server want
+            // fresh copies after a rebuild; production-hardening
+            // (etag, long-term caching for /assets/*) is a slice-3 polish
+            // concern.
+            maxAge: 0,
+            fallthrough: true,
+            // Attach the console security header set to every
+            // static response. `setHeaders` runs for successful hits
+            // (HTML + JS + CSS + asset 200s); misses that fall through
+            // to the SPA fallback below are covered by the fallback's
+            // explicit `applyDevtoolSecurityHeaders` call.
+            setHeaders: applyDevtoolSecurityHeaders,
+        }));
+        // Admin-HTML gate. The SPA's `/admin/*` and `/devtools/*` zones
+        // are operator-only — without this gate, every admin page is a
+        // GET away from anyone who guesses the path. The corresponding
+        // JSON APIs already gate at `/ggui/console/keys`, but the SPA
+        // shell itself was unauthenticated. Mounted only when the gate
+        // shape is available (admin token resolved + closure built).
+        //
+        // 302 to `/admin-login?next=<encoded-path>` on miss — the login
+        // page reads `next` from the query string and bounces back after
+        // a successful token paste. No client-side cookie set here; the
+        // existing `POST /ggui/console/admin-login` route owns minting.
+        //
+        // Scope:
+        //   - GATED: `/admin/*`, `/devtools/*`
+        //   - UNGATED: `/admin-login`, `/s/*`, `/preview/*`, `/` (welcome
+        //     when wired, SPA index otherwise)
+        //
+        // The welcome page (`/`) is intentionally public — it's the
+        // operator-identification surface, not an admin tool. Public
+        // deep-link surfaces stay reachable: a render viewer URL
+        // `/s/<shortCode>` and a blueprint preview URL `/preview/<id>`
+        // are how end-users / blueprint authors land on the server.
+        if (requestHasAdminAuth !== null) {
+            const adminAuth = requestHasAdminAuth;
+            app.get(/^\/(admin|devtools)(\/.*)?$/, (req, res, next) => {
+                if (req.path === "/admin-login")
+                    return next();
+                if (adminAuth(req))
+                    return next();
+                applyDevtoolSecurityHeaders(res);
+                const next_ = encodeURIComponent(req.originalUrl || req.path);
+                res.redirect(302, `/admin-login?next=${next_}`);
+            });
+        }
+        // SPA fallback: the console client owns client-side routes
+        // (`/`, `/s/<shortCode>`, `/admin/*`, `/devtools/*`). An unknown
+        // sub-path under the mount must serve the rewritten
+        // `index.html` so the React router takes over.
+        //
+        // Express 5 / path-to-regexp v8 rejects the bare `'*'` and
+        // `'foo/*'` wildcard strings that worked in v6; named splats
+        // (`{*splat}`) or RegExp patterns are required. Using RegExp
+        // here matches the admin-gate pattern above and avoids the
+        // parser-version churn.
+        const spaFallbackPattern = consolePath === "/"
+            ? /^\/.*$/
+            : new RegExp(`^${consolePath.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}/.*$`);
+        app.get(spaFallbackPattern, (req, res, next) => {
+            // Only fallback for GET of non-asset, non-API paths.
+            // `express.static` already served any asset that exists;
+            // an `/assets/foo.js` that doesn't exist SHOULD 404 rather
+            // than returning HTML.
+            if (req.path.startsWith("/ggui/"))
+                return next();
+            if (req.path.startsWith(`${consolePath === "/" ? "" : consolePath}/assets/`)) {
+                return next();
+            }
+            sendConsoleHtml(res);
+        });
+    }
+    else {
+        logger.warn("console_dist_missing", {
+            distDir: consoleDistDir,
+            hint: "Run `pnpm --filter @ggui-ai/console build` to produce the static bundle. Serving 503 from the mount point until the bundle exists.",
+        });
+        app.use(consolePath, (_req, res) => {
+            applyDevtoolSecurityHeaders(res);
+            res
+                .status(503)
+                .type("text/plain")
+                .send("console bundle not built. Run:\n  pnpm --filter @ggui-ai/console build\n");
+        });
+    }
+}

package/dist/console-theme-routes.d.ts

@@ -21,7 +21,7 @@
  * Authentication: piggy-backs on the same admin gate the LLM-keys
  * routes use — operator-only since the value persists to ggui.json,
  * which the OSS server treats as trusted manifest input. End-users
- * who paired into a session don't get to mutate the project's
+ * who paired into a render don't get to mutate the project's
  * theme. Multi-tenant deployments may relax this in a follow-up by
  * scoping overrides per user (overrides become server state, not
  * file state).
@@ -81,8 +81,8 @@ interface MountOptions {
      * Optional change notifier — fires every time the operator's
      * theme selection changes through `POST /ggui/console/theme` (or
      * the `/upload` variant). The CLI uses this to mirror writes into
-     * a shared mutable state cell that the push handler's
-     * `themeProvider` reads, so a save reaches the next push without
+     * a shared mutable state cell that the render handler's
+     * `themeProvider` reads, so a save reaches the next render without
      * a server restart.
      *
      * Fires AFTER the on-disk write succeeds and AFTER the route's

package/dist/console-theme-routes.js

@@ -21,7 +21,7 @@
  * Authentication: piggy-backs on the same admin gate the LLM-keys
  * routes use — operator-only since the value persists to ggui.json,
  * which the OSS server treats as trusted manifest input. End-users
- * who paired into a session don't get to mutate the project's
+ * who paired into a render don't get to mutate the project's
  * theme. Multi-tenant deployments may relax this in a follow-up by
  * scoping overrides per user (overrides become server state, not
  * file state).

package/dist/console-timeline.d.ts

@@ -8,20 +8,20 @@
  *
  * Post-Phase-B (flatten-render-identity): renamed from the prior
  * "sessions" terminology; the canonical addressable unit is now the
- * render. The on-wire `renderId` path param replaces `sessionId`.
+ * render. The on-wire `sessionId` path param replaces the prior `renderId`.
  *
- * Memory: bounded by whatever the underlying RenderStore retains.
- * `InMemoryRenderStore` keeps everything for the process lifetime —
+ * Memory: bounded by whatever the underlying GguiSessionStore retains.
+ * `InMemoryGguiSessionStore` keeps everything for the process lifetime —
  * fine for OSS dev. A hosted closed runtime's persistent store is the
  * durability surface.
  */
 import type { Express } from 'express';
-import type { RenderStore, SessionStreamBuffer } from '@ggui-ai/mcp-server-core';
+import type { GguiSessionStore, GguiSessionStreamBuffer } from '@ggui-ai/mcp-server-core';
 /**
  * Mount `/ggui/console/timeline/*` routes on `app`. Caller is
  * responsible for admin-gating the path prefix beforehand — this
  * function does not re-implement auth (matches the
  * `mountConsoleLlmTraceRoutes` shape in console-llm-trace.ts).
  */
-export declare function mountConsoleTimelineRoutes(app: Express, renderStore: RenderStore | undefined, streamBuffer: SessionStreamBuffer | undefined): void;
+export declare function mountConsoleTimelineRoutes(app: Express, renderStore: GguiSessionStore | undefined, streamBuffer: GguiSessionStreamBuffer | undefined): void;
 //# sourceMappingURL=console-timeline.d.ts.map

package/dist/console-timeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"console-timeline.d.ts","sourceRoot":"","sources":["../src/console-timeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAqB,OAAO,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAEV,WAAW,EACX,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAiElC;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,YAAY,EAAE,mBAAmB,GAAG,SAAS,GAC5C,IAAI,CA6JN"}
+{"version":3,"file":"console-timeline.d.ts","sourceRoot":"","sources":["../src/console-timeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAqB,OAAO,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAEV,gBAAgB,EAChB,uBAAuB,EACxB,MAAM,0BAA0B,CAAC;AAkElC;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,gBAAgB,GAAG,SAAS,EACzC,YAAY,EAAE,uBAAuB,GAAG,SAAS,GAChD,IAAI,CA6JN"}

package/dist/console-timeline.js

@@ -1,13 +1,14 @@
 import { applyDevtoolSecurityHeaders } from './console-headers.js';
+import { singleParam } from './route-param.js';
 /**
- * Drain {@link RenderStore.observe} into an array. The observe iterator
+ * Drain {@link GguiSessionStore.observe} into an array. The observe iterator
  * with `{ tail: false }` resolves cleanly after replaying every stored
  * event, so this is a plain `for await`. Bound by the store's per-
  * render retention (in-memory: full history; hosted: store-defined).
  */
-async function drainRenderEvents(renderStore, renderId) {
+async function drainGguiSessionEvents(renderStore, sessionId) {
     const out = [];
-    for await (const event of renderStore.observe(renderId, {
+    for await (const event of renderStore.observe(sessionId, {
         fromSeq: 1,
         tail: false,
     })) {
@@ -35,7 +36,7 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
         }
         // Zero-config shape: no store wired (pure-MCP boot) → empty list.
         if (!renderStore) {
-            const body = { renders: [], total: 0 };
+            const body = { sessions: [], total: 0 };
             res.json(body);
             return;
         }
@@ -59,14 +60,14 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
                 }
                 // Compute status from render state (the store doesn't
                 // surface its private `closed` flag uniformly across impls).
-                // We mirror the InMemoryRenderStore's rule:
+                // We mirror the InMemoryGguiSessionStore's rule:
                 // expired = expiresAt <= now, otherwise active. The
                 // 'completed' state needs the closed flag to disambiguate;
                 // we report 'active' until eviction. Operators reading the
                 // detail pane get the authoritative status from the store.
                 const status = row.expiresAt <= now ? 'expired' : 'active';
                 summaries.push({
-                    renderId: row.id,
+                    sessionId: row.id,
                     appId: row.appId,
                     createdAt: row.createdAt,
                     lastActivityAt: row.lastActivityAt,
@@ -74,45 +75,45 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
                     streamSeq,
                 });
             }
-            // Most-recent activity first. Tiebreak on renderId for
+            // Most-recent activity first. Tiebreak on sessionId for
             // stable ordering across reloads.
             summaries.sort((a, b) => {
                 const byRecency = b.lastActivityAt - a.lastActivityAt;
                 if (byRecency !== 0)
                     return byRecency;
-                return a.renderId.localeCompare(b.renderId);
+                return a.sessionId.localeCompare(b.sessionId);
             });
             const trimmed = summaries.slice(0, limit);
             const body = {
-                renders: trimmed,
+                sessions: trimmed,
                 total: summaries.length,
             };
             res.json(body);
         }
         catch (err) {
             res.status(500).json({
-                error: 'timeline_renders_list_failed',
+                error: 'timeline_sessions_list_failed',
                 message: err instanceof Error
-                    ? `Render store failed to list — ${err.message}`
-                    : `Render store failed to list — ${String(err)}`,
+                    ? `GguiSession store failed to list — ${err.message}`
+                    : `GguiSession store failed to list — ${String(err)}`,
             });
         }
     });
-    // GET /ggui/console/timeline/:renderId/events
-    app.get('/ggui/console/timeline/:renderId/events', async (req, res) => {
+    // GET /ggui/console/timeline/:sessionId/events
+    app.get('/ggui/console/timeline/:sessionId/events', async (req, res) => {
         applyDevtoolSecurityHeaders(res);
-        const renderId = req.params['renderId'];
-        if (!renderId || renderId.length === 0) {
+        const sessionId = singleParam(req.params['sessionId']);
+        if (!sessionId || sessionId.length === 0) {
             res.status(400).json({
-                error: 'invalid_render_id',
-                message: 'renderId path parameter is required',
+                error: 'invalid_session_id',
+                message: 'sessionId path parameter is required',
             });
             return;
         }
         // Zero-config shape: no store wired → empty events.
         if (!renderStore) {
             const body = {
-                renderId,
+                sessionId,
                 events: [],
                 streamSeq: 0,
                 status: 'unknown',
@@ -121,14 +122,14 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
             return;
         }
         try {
-            const stored = await renderStore.get(renderId);
+            const stored = await renderStore.get(sessionId);
             if (!stored) {
                 // 404 is the right status — but we still return a well-
                 // formed body so the SPA can render an "expired/dropped"
                 // notice without a special-case branch. Body matches the
                 // schema; status code disambiguates.
                 const body = {
-                    renderId,
+                    sessionId,
                     events: [],
                     streamSeq: 0,
                     status: 'unknown',
@@ -136,11 +137,11 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
                 res.status(404).json(body);
                 return;
             }
-            const events = await drainRenderEvents(renderStore, renderId);
+            const events = await drainGguiSessionEvents(renderStore, sessionId);
             let streamSeq = 0;
             if (streamBuffer) {
                 try {
-                    streamSeq = await streamBuffer.currentSeq(renderId);
+                    streamSeq = await streamBuffer.currentSeq(sessionId);
                 }
                 catch {
                     // Best-effort. Inbound events stand on their own.
@@ -149,7 +150,7 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
             const now = Date.now();
             const status = stored.expiresAt <= now ? 'expired' : 'active';
             const body = {
-                renderId,
+                sessionId,
                 events,
                 streamSeq,
                 status,
@@ -160,8 +161,8 @@ export function mountConsoleTimelineRoutes(app, renderStore, streamBuffer) {
             res.status(500).json({
                 error: 'timeline_events_drain_failed',
                 message: err instanceof Error
-                    ? `Render store failed to drain — ${err.message}`
-                    : `Render store failed to drain — ${String(err)}`,
+                    ? `GguiSession store failed to drain — ${err.message}`
+                    : `GguiSession store failed to drain — ${String(err)}`,
             });
         }
     });

package/dist/console-welcome.js

@@ -202,9 +202,9 @@ export const renderWelcomeHtml = (inputs, serverName) => {
         <p class="eyebrow">Public surfaces</p>
         <div class="surfaces">
           <div class="surface">
-            <span class="surface-label">Session viewer</span>
+            <span class="surface-label">GguiSession viewer</span>
             <code>/s/&lt;short-code&gt;</code>
-            <span class="desc">Open the live session your agent linked you to.</span>
+            <span class="desc">Open the live render your agent linked you to.</span>
           </div>
           <div class="surface">
             <span class="surface-label">Blueprint preview</span>

package/dist/email-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-login.d.ts","sourceRoot":"","sources":["../src/email-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EAAc,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,4BAA4B,CAAC;AACxE,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAC1E,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAK1E;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,WAAW;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBACpB,MAAM,CAAC,EAAE,MAAM;IAGrB,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAQjD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IAEE,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAatE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CASnE;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAoBD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,uBAAuB,GAC5B,IAAI,CA8KN"}
+{"version":3,"file":"email-login.d.ts","sourceRoot":"","sources":["../src/email-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAG1D,OAAO,KAAK,EAAc,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,4BAA4B,CAAC;AACxE,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAC1E,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAK1E;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,YAAW,WAAW;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBACpB,MAAM,CAAC,EAAE,MAAM;IAGrB,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAQjD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,YAAW,cAAc;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IAEE,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAatE,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CASnE;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAoBD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,uBAAuB,GAC5B,IAAI,CA2KN"}

package/dist/email-login.js

@@ -1,4 +1,5 @@
 import { randomBytes } from 'node:crypto';
+import { isRecord } from '@ggui-ai/protocol';
 import { formatUserSessionCookieHeader } from './user-session-auth.js';
 import { createConsoleLogger } from './logger.js';
 /**
@@ -121,9 +122,7 @@ export function mountEmailLoginRoutes(app, opts) {
     // email enumeration — see route docstring for why).
     app.post(startPath, async (req, res) => {
         const reqLogger = opts.logger.child({ route: 'POST ' + startPath });
-        const body = typeof req.body === 'object' && req.body !== null
-            ? req.body
-            : {};
+        const body = isRecord(req.body) ? req.body : {};
         const rawEmail = typeof body['email'] === 'string' ? body['email'] : '';
         const email = rawEmail.trim().toLowerCase();
         if (!EMAIL_RE.test(email) || email.length > 254) {

package/dist/ggui-session-channel/action-ingress.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Inbound `action` ingress + consume bridge for the live channel —
+ * contract enforcement on user gestures arriving over WS, the
+ * dual-write onto the retained event ledger + the pending-events pipe
+ * (`ggui_consume`'s queue), and the ack carrying the ledger seq back
+ * to the client.
+ */
+import type { GguiSessionStore, PendingEventConsumer } from "@ggui-ai/mcp-server-core";
+import type { WebSocketMessage } from "@ggui-ai/protocol/transport/websocket";
+import type { WebSocket } from "ws";
+import type { Logger } from "../logger.js";
+import type { Subscriber } from "./internal-types.js";
+import type { Outbound } from "./outbound.js";
+export interface ActionIngressDeps {
+    readonly logger: Logger;
+    readonly renderStore: GguiSessionStore;
+    /**
+     * Pending-events pipe — see
+     * `GguiSessionChannelOptions.pendingEventConsumer` for the dual-write
+     * contract. Absent → ledger-only ingress.
+     */
+    readonly pendingEventConsumer?: PendingEventConsumer;
+    readonly send: Outbound["send"];
+    readonly sendError: Outbound["sendError"];
+}
+export interface ActionIngress {
+    /**
+     * Handle an inbound `action` message — the canonical flat
+     * {@link ActionEnvelope} shape.
+     *
+     * Inbound actions are gated by {@link assertActionContract} only —
+     * the actionSpec payload check for `data:submit` types. (The
+     * pre-Phase-B `subscription.events` allowlist gate was deleted with
+     * the session-stack collapse; per-render event policy needs a new
+     * wire shape before any second gate can exist.)
+     *
+     * Accepted envelopes dual-write, mirroring the
+     * `ggui_runtime_submit_action` relay's posture:
+     *
+     *   1. The retained event ledger (`renderStore.appendEvent`) — the
+     *      ack's `seq` source; failure is the load-bearing
+     *      `APPEND_FAILED` path.
+     *   2. For `data:submit` only, the pending-events pipe
+     *      ({@link ActionIngressDeps.pendingEventConsumer}) — the
+     *      queue `ggui_consume` drains, so the agent receives the gesture
+     *      mid-turn. Pipe failure degrades to ledger-only with a warn;
+     *      it never changes the ack.
+     */
+    handleInboundAction(ws: WebSocket, sub: Subscriber, message: WebSocketMessage & {
+        type: "action";
+    }): Promise<void>;
+}
+export declare function createActionIngress(deps: ActionIngressDeps): ActionIngress;
+//# sourceMappingURL=action-ingress.d.ts.map

package/dist/ggui-session-channel/action-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-ingress.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/action-ingress.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAIvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA+G9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,mBAAmB,CACjB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CAiJ1E"}