@ggui-ai/mcp-server 0.2.0-alpha.4 → 0.4.0-rc.0

package/dist/storage.d.ts

@@ -1,10 +1,10 @@
-import type { RenderStore, ThreadStore, VectorStore } from '@ggui-ai/mcp-server-core';
+import type { GguiSessionStore, ThreadStore, VectorStore } from '@ggui-ai/mcp-server-core';
 import type { StorageConfig } from '@ggui-ai/project-config';
 export interface ResolveStorageFromConfigOptions {
     /**
      * Directory used to resolve relative `path` values in the storage
      * config. Typically the directory containing `ggui.json` so a
-     * manifest saying `"path": "./ggui-renders.sqlite"` lands next to
+     * manifest saying `"path": "./ggui-sessions.sqlite"` lands next to
      * the manifest (not CWD, which would silently create a file wherever
      * the process happened to be started).
      *
@@ -16,9 +16,9 @@ export interface ResolveStorageFromConfigOptions {
     readonly baseDir?: string;
 }
 export interface ResolvedStorageStores {
-    /** Concrete RenderStore, iff the config declared one. Undefined =
+    /** Concrete GguiSessionStore, iff the config declared one. Undefined =
      * caller falls back to createGguiServer's in-memory default. */
-    readonly renderStore?: RenderStore;
+    readonly renderStore?: GguiSessionStore;
     /** Concrete VectorStore, iff the config declared one. Undefined =
      * caller falls back to createGguiServer's in-memory default. */
     readonly vectors?: VectorStore;
@@ -66,7 +66,7 @@ export interface ResolvedStorageStores {
  *                                         memory is the same outcome
  *                                         as omitting it; present
  *                                         for intent visibility).
- *       - `driver: 'sqlite'`            → `SqliteRenderStore` /
+ *       - `driver: 'sqlite'`            → `SqliteGguiSessionStore` /
  *                                         `SqliteVectorStore`.
  *
  *   - `threads`:

package/dist/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAqDA,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAQlC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,WAAW,+BAA+B;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC;oEACgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;oEACgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B;;;;;;;;;;;;;;;;;yCAiBqC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,IAAI,GAAE,+BAAoC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAgDhC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAqDA,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EACX,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAQlC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,MAAM,WAAW,+BAA+B;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC;oEACgE;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC;oEACgE;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B;;;;;;;;;;;;;;;;;yCAiBqC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,IAAI,GAAE,+BAAoC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAgDhC"}

package/dist/storage.js

@@ -27,7 +27,7 @@
  * ## Why `better-sqlite3` gets imported dynamically
  *
  * `better-sqlite3` is an optional peer dep of `@ggui-ai/mcp-server-core`.
- * If we `import { SqliteRenderStore } from '@ggui-ai/mcp-server-core/sqlite'`
+ * If we `import { SqliteGguiSessionStore } from '@ggui-ai/mcp-server-core/sqlite'`
  * at the top of this file, any consumer that doesn't opt into SQLite
  * storage still pays the peer-dep cost (the module graph resolves the
  * subpath at import time, which tries to load better-sqlite3's N-API
@@ -55,7 +55,7 @@ import path from 'node:path';
 // adapters, the in-memory subpath carries no optional peer dep cost
 // (no `better-sqlite3`, no N-API binding). `storage.threads.driver =
 // 'memory'` uses this to mount actual thread routes instead of being
-// a silent no-op like sessions/vectors (which createGguiServer
+// a silent no-op like renders/vectors (which createGguiServer
 // already defaults to in-memory internally).
 import { InMemoryThreadStore } from '@ggui-ai/mcp-server-core/in-memory';
 /**
@@ -74,7 +74,7 @@ import { InMemoryThreadStore } from '@ggui-ai/mcp-server-core/in-memory';
  *                                         memory is the same outcome
  *                                         as omitting it; present
  *                                         for intent visibility).
- *       - `driver: 'sqlite'`            → `SqliteRenderStore` /
+ *       - `driver: 'sqlite'`            → `SqliteGguiSessionStore` /
  *                                         `SqliteVectorStore`.
  *
  *   - `threads`:
@@ -113,11 +113,11 @@ export async function resolveStorageFromConfig(config, opts = {}) {
     // Single dynamic import serves every sqlite adapter — better-sqlite3's
     // N-API binding loads once even if the import lands twice; the
     // subpath barrel is cached by Node's module loader.
-    const { SqliteRenderStore, SqliteVectorStore, SqliteThreadStore } = await import('@ggui-ai/mcp-server-core/sqlite');
+    const { SqliteGguiSessionStore, SqliteVectorStore, SqliteThreadStore } = await import('@ggui-ai/mcp-server-core/sqlite');
     if (config.renders && config.renders.driver === 'sqlite') {
         const filename = resolveStoragePath(config.renders.path, opts.baseDir);
         ensureParentDir(filename);
-        result.renderStore = new SqliteRenderStore({ filename });
+        result.renderStore = new SqliteGguiSessionStore({ filename });
     }
     if (config.vectors && config.vectors.driver === 'sqlite') {
         const filename = resolveStoragePath(config.vectors.path, opts.baseDir);

package/dist/thread-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"thread-transport.d.ts","sourceRoot":"","sources":["../src/thread-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAiBlC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AAEjE,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAqBzE;AAED,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,sBAAsB,GAC3B,IAAI,CAwYN"}
+{"version":3,"file":"thread-transport.d.ts","sourceRoot":"","sources":["../src/thread-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAkBlC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,aAAa,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AAEjE,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAqBzE;AAED,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,sBAAsB,GAC3B,IAAI,CAuYN"}

package/dist/thread-transport.js

@@ -1,5 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { appendMessage, applyThreadAction, createThread, getThread, InvalidThreadActionError, InvalidThreadRequestError, listMessages, listThreads, observeMessages, ThreadActionInvalidStateError, ThreadNotFoundError, } from '@ggui-ai/mcp-server-handlers/threads';
+import { isRecord } from '@ggui-ai/protocol';
 import { resolveIdentity, UnauthenticatedError } from './auth.js';
 /** Default URL prefix the thread routes are mounted at. */
 export const DEFAULT_THREADS_PATH = '/threads';
@@ -205,8 +206,8 @@ export function mountThreadTransport(app, opts) {
     //
     // Body: `{ action: ThreadStateAction }`. PATCH picked (over POST
     // on `/:id/actions`) because the action is a state transition on
-    // the resource, not a new sub-resource, and that matches how the
-    // cloud adapter frames it (`updateThreadState` mutation).
+    // the resource, not a new sub-resource — the same framing the
+    // thread-adapter interface uses (`updateThreadState`).
     app.patch(`${prefix}/:id`, async (req, res) => {
         const routeLogger = opts.logger.child({
             route: 'PATCH ' + prefix + '/:id',
@@ -256,7 +257,7 @@ export function mountThreadTransport(app, opts) {
         if (!ctx)
             return;
         try {
-            const body = typeof req.body === 'object' && req.body !== null ? req.body : {};
+            const body = isRecord(req.body) ? req.body : {};
             const input = { ...body, threadId: req.params.id };
             const message = await appendMessage(deps, input, ctx);
             res.status(201).json(message);

package/dist/user-session-auth.d.ts

@@ -60,9 +60,10 @@ import type { Request, RequestHandler } from 'express';
  * Cookie name. Distinct from `ggui_console_session` so cross-kind
  * confusion is impossible — a cookie value never gets misinterpreted
  * as a different auth artifact. Change carries a compat concern (the
- * `/login` mint endpoint, `cookieAuthMiddleware`, and `/logout` clear
- * read this exact name); keep this export as the single source of
- * truth.
+ * login mint endpoints and `cookieAuthMiddleware` read this exact
+ * name); keep this export as the single source of truth. NOTE: no
+ * server-side clear route exists today — the cookie expires via
+ * `Max-Age` only (8h default).
  */
 export declare const USER_SESSION_COOKIE_NAME = "ggui_user_session";
 /**
@@ -107,20 +108,6 @@ export interface FormatUserSessionCookieInput {
  * symmetrically.
  */
 export declare function formatUserSessionCookieHeader(input: FormatUserSessionCookieInput): string;
-/**
- * Format a `Set-Cookie` header that immediately invalidates the
- * user-session cookie. Used by `/logout` and `/revoke-bearer` so the
- * browser drops it without waiting for `Max-Age`.
- *
- * `Max-Age=0` is the canonical clear pattern; matching attrs (Path,
- * Secure) are required so the browser pairs this with the original
- * mint and replaces it.
- */
-export declare function formatClearUserSessionCookieHeader(input: {
-    readonly secure?: boolean;
-    readonly path?: string;
-    readonly sameSite?: 'Strict' | 'Lax' | 'None';
-}): string;
 /**
  * Read the user-session cookie value from a `Cookie` header string.
  * Returns the URL-decoded bearer, or `null` when the cookie is absent
@@ -158,10 +145,9 @@ export declare function readUserSessionCookieFromHeaders(headers: IncomingHttpHe
  */
 export declare function cookieAuthMiddleware(): RequestHandler;
 /**
- * Read the user-session cookie off an Express request. Used by
- * `/logout` to know whether there's anything to clear, by
- * `/revoke-bearer` to identify the pairing to revoke, and by tests
- * that need to inspect the cookie without going through middleware.
+ * Read the user-session cookie off an Express request. Used by tests
+ * that need to inspect the cookie without going through middleware,
+ * and available to embedders composing their own session routes.
  */
 export declare function readUserSessionCookie(req: Request): string | null;
 //# sourceMappingURL=user-session-auth.d.ts.map

package/dist/user-session-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-session-auth.d.ts","sourceRoot":"","sources":["../src/user-session-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEvD;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAAc,CAAC;AAExD,MAAM,WAAW,4BAA4B;IAC3C,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,4BAA4B,GAClC,MAAM,CAWR;AAED;;;;;;;;GAQG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;CAC/C,GAAG,MAAM,CAUT;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAqBf;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,mBAAmB,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAYrD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAEjE"}
+{"version":3,"file":"user-session-auth.d.ts","sourceRoot":"","sources":["../src/user-session-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAE5D;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAAc,CAAC;AAExD,MAAM,WAAW,4BAA4B;IAC3C,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,4BAA4B,GAClC,MAAM,CAWR;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAqBf;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,mBAAmB,GAC3B,MAAM,GAAG,IAAI,CAIf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAYrD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAEjE"}

package/dist/user-session-auth.js

@@ -2,9 +2,10 @@
  * Cookie name. Distinct from `ggui_console_session` so cross-kind
  * confusion is impossible — a cookie value never gets misinterpreted
  * as a different auth artifact. Change carries a compat concern (the
- * `/login` mint endpoint, `cookieAuthMiddleware`, and `/logout` clear
- * read this exact name); keep this export as the single source of
- * truth.
+ * login mint endpoints and `cookieAuthMiddleware` read this exact
+ * name); keep this export as the single source of truth. NOTE: no
+ * server-side clear route exists today — the cookie expires via
+ * `Max-Age` only (8h default).
  */
 export const USER_SESSION_COOKIE_NAME = 'ggui_user_session';
 /**
@@ -36,27 +37,6 @@ export function formatUserSessionCookieHeader(input) {
         attrs.push('Secure');
     return attrs.join('; ');
 }
-/**
- * Format a `Set-Cookie` header that immediately invalidates the
- * user-session cookie. Used by `/logout` and `/revoke-bearer` so the
- * browser drops it without waiting for `Max-Age`.
- *
- * `Max-Age=0` is the canonical clear pattern; matching attrs (Path,
- * Secure) are required so the browser pairs this with the original
- * mint and replaces it.
- */
-export function formatClearUserSessionCookieHeader(input) {
-    const attrs = [
-        `${USER_SESSION_COOKIE_NAME}=`,
-        `Path=${input.path ?? '/'}`,
-        `Max-Age=0`,
-        `SameSite=${input.sameSite ?? 'Lax'}`,
-        `HttpOnly`,
-    ];
-    if (input.secure)
-        attrs.push('Secure');
-    return attrs.join('; ');
-}
 /**
  * Read the user-session cookie value from a `Cookie` header string.
  * Returns the URL-decoded bearer, or `null` when the cookie is absent
@@ -138,10 +118,9 @@ export function cookieAuthMiddleware() {
     };
 }
 /**
- * Read the user-session cookie off an Express request. Used by
- * `/logout` to know whether there's anything to clear, by
- * `/revoke-bearer` to identify the pairing to revoke, and by tests
- * that need to inspect the cookie without going through middleware.
+ * Read the user-session cookie off an Express request. Used by tests
+ * that need to inspect the cookie without going through middleware,
+ * and available to embedders composing their own session routes.
  */
 export function readUserSessionCookie(req) {
     return readUserSessionCookieFromHeaders(req.headers);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/mcp-server",
-  "version": "0.2.0-alpha.4",
+  "version": "0.4.0-rc.0",
   "description": "Self-hosted MCP server for the ggui protocol. An HTTP/MCP binding layer over @ggui-ai/mcp-server-handlers and the reference adapters from @ggui-ai/mcp-server-core — run it via `ggui serve`.",
   "keywords": [
     "ggui",
@@ -27,29 +27,30 @@
   "dependencies": {
     "@modelcontextprotocol/ext-apps": "^1.7.2",
     "@modelcontextprotocol/sdk": "^1.27.0",
-    "express": "^4.21.0",
+    "express": "^5.2.1",
     "nodemailer": "^8.0.7",
     "resend": "^6.12.2",
     "ws": "^8.20.1",
     "zod": "^4.3.6",
-    "@ggui-ai/console": "0.2.0-alpha.4",
-    "@ggui-ai/mcp-server-core": "0.2.0-alpha.4",
-    "@ggui-ai/iframe-runtime": "0.2.0-alpha.4",
-    "@ggui-ai/mcp-server-handlers": "0.2.0-alpha.4",
-    "@ggui-ai/negotiator": "0.2.0-alpha.4",
-    "@ggui-ai/preview-a2ui": "0.2.0-alpha.4",
-    "@ggui-ai/project-config": "0.2.0-alpha.4",
-    "@ggui-ai/protocol": "0.2.0-alpha.4",
-    "@ggui-ai/ui-gen": "0.2.0-alpha.4",
-    "@ggui-ai/ui-registry": "0.2.0-alpha.4"
+    "@ggui-ai/console": "0.4.0-rc.0",
+    "@ggui-ai/iframe-runtime": "0.4.0-rc.0",
+    "@ggui-ai/mcp-server-core": "0.4.0-rc.0",
+    "@ggui-ai/mcp-server-handlers": "0.4.0-rc.0",
+    "@ggui-ai/negotiator": "0.4.0-rc.0",
+    "@ggui-ai/preview-a2ui": "0.4.0-rc.0",
+    "@ggui-ai/project-config": "0.4.0-rc.0",
+    "@ggui-ai/protocol": "0.4.0-rc.0",
+    "@ggui-ai/ui-registry": "0.4.0-rc.0",
+    "@ggui-ai/ui-gen": "0.4.0-rc.0"
   },
   "devDependencies": {
-    "@types/express": "^4.17.21",
+    "@types/express": "^5.0.0",
     "@types/node": "^22.0.0",
     "@types/nodemailer": "^8.0.0",
     "@types/ws": "^8.5.10",
     "typescript": "^5.0.0",
-    "vitest": "^3.0.0"
+    "vitest": "^3.2.6",
+    "@ggui-ai/protocol-conformance": "0.4.0-rc.0"
   },
   "repository": {
     "type": "git",
@@ -68,7 +69,7 @@
   },
   "author": "ggui contributors <hello@ggui.ai>",
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && node ../scripts/fix-esm-imports.mjs dist",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json && node ../scripts/fix-esm-imports.mjs dist",
     "dev": "tsc --watch",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",

package/dist/mcp-apps-inbound.d.ts

@@ -1,86 +0,0 @@
-/**
- * MCP Apps inbound hosting — resource proxy + tools/call visibility gate.
- *
- * When the ggui server hosts a third-party MCP App iframe, the browser
- * CANNOT resolve `ui://` URIs directly (browser URL scheme set is
- * limited to http/https/etc). The server owns the only path to the
- * resource bytes:
- *
- *   browser iframe
- *        ↓  https://<ggui-server>/mcp-apps/resource?session=…&item=…
- *   ggui-server proxy route
- *        ↓  MCP resources/read  (via @modelcontextprotocol/sdk/client)
- *   source MCP server
- *        ↓  ui:// resource HTML
- *   ggui-server returns the HTML bytes to the iframe.
- *
- * Similarly, iframe-originated `tools/call` flows:
- *
- *   iframe ----postMessage---> ggui client (in parent)
- *   ggui client -----fetch----> ggui-server /mcp-apps/tools-call
- *   ggui-server enforces visibility, proxies via MCP client to source.
- *
- * Visibility enforcement lives at the proxy boundary (this file), NOT
- * in the client. Source `tools/list` is fetched + cached per connector;
- * `_meta.ui.visibility` gates which tools iframe-originated calls can
- * invoke. Cross-connector calls are rejected — the iframe for connector
- * A can NEVER call tools on connector B.
- */
-import type { Express } from 'express';
-import { type ConnectorRegistry, type RenderStore } from '@ggui-ai/mcp-server-core';
-import type { Logger } from './logger.js';
-/** Default mount path for the MCP Apps inbound routes. */
-export declare const DEFAULT_MCP_APPS_INBOUND_PATH = "/mcp-apps";
-export interface McpAppsInboundOptions {
-    readonly connectors: ConnectorRegistry;
-    readonly renderStore: RenderStore;
-    readonly logger: Logger;
-    /** Override for the mount path prefix. Defaults to `/mcp-apps`. */
-    readonly path?: string;
-}
-/**
- * Shape of one entry in a cached source `tools/list`.
- *
- * Kept local — we only care about the fields that gate visibility,
- * not the full MCP tool-definition shape.
- */
-interface SourceToolMeta {
-    readonly name: string;
-    readonly visibility: ReadonlyArray<'model' | 'app'>;
-}
-export interface ToolsListCacheEntry {
-    readonly byName: ReadonlyMap<string, SourceToolMeta>;
-    readonly fetchedAt: number;
-}
-/**
- * Tools-list cache keyed by connectorId. Short TTL — stale visibility
- * decisions have small but real security impact, so cache invalidation
- * is time-bounded (default 60s) with on-demand refresh.
- */
-export declare class ToolsListCache {
-    private readonly ttlMs;
-    private readonly map;
-    constructor(ttlMs?: number);
-    get(connectorId: string): ToolsListCacheEntry | null;
-    set(connectorId: string, tools: Iterable<SourceToolMeta>): ToolsListCacheEntry;
-    invalidate(connectorId: string): void;
-}
-/**
- * Register the MCP Apps inbound proxy routes on an Express app.
- *
- *   GET  /mcp-apps/resource?session=<id>&item=<id>
- *     Fetches the referenced McpAppsRender's `source.resourceUri`
- *     via resources/read on the source MCP server. Returns the HTML
- *     with the MIME declared by the source (typically
- *     `text/html;profile=mcp-app`) and spec-canonical CSP headers.
- *
- *   POST /mcp-apps/tools-call
- *     Body: { session, item, tool, arguments? }.
- *     Resolves the stack item → connector → cached tools/list, gates
- *     on `_meta.ui.visibility` (must include 'app'), and proxies the
- *     call via MCP client. Cross-connector / unknown tool / model-
- *     only tool are all rejected.
- */
-export declare function installMcpAppsInbound(app: Express, opts: McpAppsInboundOptions): ToolsListCache;
-export {};
-//# sourceMappingURL=mcp-apps-inbound.d.ts.map

package/dist/mcp-apps-inbound.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-apps-inbound.d.ts","sourceRoot":"","sources":["../src/mcp-apps-inbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAG1D,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,WAAW,EACjB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,0DAA0D;AAC1D,eAAO,MAAM,6BAA6B,cAAc,CAAC;AAEzD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,UAAU,cAAc;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,qBAAa,cAAc;IAEb,OAAO,CAAC,QAAQ,CAAC,KAAK;IADlC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0C;gBACjC,KAAK,GAAE,MAAe;IAEnD,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAUpD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,mBAAmB;IAQ9E,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;CAGtC;AA6DD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,qBAAqB,GAC1B,cAAc,CAsIhB"}