@ggui-ai/mcp-server 0.25.0 → 0.26.0

package/dist/llm-backed-negotiator.js

@@ -25,11 +25,6 @@
  *   `ensureConformingContract`. Operational errors fail open; programmer
  *   errors re-throw. See `decide-handshake.ts` for the full contract.
  *
- * ## selectVariant
- *
- * The optional LLM-driven variant-selection seam is OSS-specific and
- * stays on this binding (it is not part of the shared decide spine).
- *
  * ## Default binding
  *
  * Bound by default in `createGguiServer` when handshake is enabled AND a
@@ -237,7 +232,6 @@ export function assembleHandshakePools(deps) {
  * decision spine (find-similar → coverage guard → judge → atomic
  * reuse, else synth-repair create) is shared verbatim across every
  * negotiator binding; only the injected adapter differs.
- * `selectVariant` is specific to this binding.
  *
  * @public
  */
@@ -273,195 +267,5 @@ export function createLlmBackedHandshakeNegotiator(deps) {
     };
     return {
         decide: (input) => decideHandshake(adapter, input),
-        // LLM-driven variant selection. Reads each candidate's
-        // `variance` + `validatorScore` + `isOperatorDefault` + the
-        // provenance (`source`), asks the LLM to pick the best fit for
-        // the current request's `intent` + `variance`, and returns a
-        // calibrated decision. The caller (`selectVariantWithLlm`)
-        // thresholds on `confidence`.
-        //
-        // Errors throw — the caller catches and falls through to the
-        // deterministic ladder. The decide() seam uses a more permissive
-        // fail-open pattern because there's no fallback higher up; the
-        // variant-selector caller owns the fallback path itself.
-        async selectVariant({ candidates, context, ctx }) {
-            if (candidates.length === 0) {
-                throw new Error("selectVariant: empty candidates list — orchestration should short-circuit before calling");
-            }
-            const creds = await deps.resolveLlm(ctx);
-            if (!creds) {
-                throw new Error("selectVariant: no BYOK credentials resolved; orchestration falls through to deterministic ladder");
-            }
-            const llm = buildLlmCaller(creds.selection, creds.providerKey);
-            return runVariantSelectionLlm(llm, candidates, context);
-        },
-    };
-}
-/**
- * The system prompt for the variant-selection LLM call. Calibration
- * is load-bearing — the model is explicitly told to surface low
- * confidence when signals are weak so the deterministic-ladder
- * fallback takes over. The prompt is intentionally short: high
- * token budget on the user message (candidate JSON) is more useful
- * than verbose system framing.
- */
-export const VARIANT_SELECTION_SYSTEM_PROMPT = `You are the variant selector for the ggui UI matcher. You receive a shortlist of pre-built UI blueprint variants and a request context. Pick the variant that best fits the request.
-
-Each variant carries:
-  - blueprintId: stable identity (you MUST echo back exactly one of these).
-  - source: provenance. {kind:"llm", generator, model} = engine-generated (advanced generators win on visual polish; default generators win on simplicity). {kind:"user"} = operator-registered hand-authored code. {kind:"curated"} = catalog-shipped system blueprint.
-  - validatorScore: optional 0-1 self-assessed quality from the advanced generator's validators. Higher is better, undefined ⇒ unknown.
-  - isOperatorDefault: true ⇒ the human operator pinned this as the default. Strong signal.
-  - variance.persona: free-form tag ("minimalist", "data-dense", "mobile-first"…).
-  - variance.aesthetic: optional free-form tag ("glassy", "flat", "editorial"…).
-  - variance.context: small structured signal (theme, accent, …).
-  - variance.seedPrompt: the operator's original prose that produced this variant.
-
-The request context carries the same fields. Match on:
-  1. variance.persona equality / closeness (strongest non-pin signal).
-  2. variance.aesthetic equality / closeness.
-  3. variance.context overlap (shared keys + values).
-  4. seedPrompt semantic similarity to context.intent.
-
-Honor operator pins (isOperatorDefault: true) unless variance.persona / variance.aesthetic on the request clearly contradicts the pinned variant — that's the only case where you should override the pin.
-
-Calibrate confidence honestly. Return high (≥ 0.7) only when a clear best match exists. Return low (< 0.6) when signals are weak — the orchestration falls back to a deterministic ladder in that case. The fallback is safe; over-confident picks are NOT.`;
-const VARIANT_SELECTION_TOOL_NAME = "select_variant";
-const VARIANT_SELECTION_TOOL_DESCRIPTION = "Pick the variant that best fits the request context. Return the chosen blueprintId, a calibrated 0-1 confidence, and a one-sentence reason citing the matching axes (persona / aesthetic / context / seedPrompt / pin / validator).";
-/**
- * JSON Schema for the structured-output tool call. Forces the model
- * to emit `{blueprintId, confidence, reason}` — no free-text prose.
- * Used on Anthropic via `LLMCaller.callStructured`; the text-fallback
- * path parses the same shape from regex-extracted JSON.
- */
-const VARIANT_SELECTION_TOOL_SCHEMA = {
-    type: "object",
-    properties: {
-        blueprintId: {
-            type: "string",
-            description: "One of the candidate blueprintIds shown in the request. Echo exactly — must match a candidate.",
-        },
-        confidence: {
-            type: "number",
-            minimum: 0,
-            maximum: 1,
-            description: "Calibrated confidence in this pick on [0, 1]. Use < 0.6 when signals are weak; the orchestration falls back to a deterministic ladder.",
-        },
-        reason: {
-            type: "string",
-            description: "One-sentence rationale citing the matching axes (persona, aesthetic, context, seedPrompt, validator, pin).",
-        },
-    },
-    required: ["blueprintId", "confidence", "reason"],
-};
-/**
- * Build the user-message payload for the variant-selection prompt.
- * The candidate list is projected to a compact JSON shape that
- * surfaces the decision-relevant fields only — full contract
- * embedding is too much surface area for a sub-second pick.
- *
- * Exposed for testing — the prompt structure is load-bearing, so
- * snapshot tests against this output anchor regressions.
- */
-export function buildVariantSelectionUserMessage(candidates, context) {
-    const projectedCandidates = candidates.map((c) => ({
-        blueprintId: c.blueprintId,
-        source: c.source,
-        ...(c.validatorScore !== undefined ? { validatorScore: c.validatorScore } : {}),
-        ...(c.isOperatorDefault === true ? { isOperatorDefault: true } : {}),
-        variance: {
-            ...(c.variance.persona !== undefined ? { persona: c.variance.persona } : {}),
-            ...(c.variance.context !== undefined ? { context: c.variance.context } : {}),
-            ...(c.variance.seedPrompt !== undefined ? { seedPrompt: c.variance.seedPrompt } : {}),
-        },
-    }));
-    const requestProjection = {
-        contractHash: context.contractHash,
-        ...(context.intent !== undefined ? { intent: context.intent } : {}),
-        ...(context.variance !== undefined
-            ? {
-                variance: {
-                    ...(context.variance.persona !== undefined
-                        ? { persona: context.variance.persona }
-                        : {}),
-                    ...(context.variance.aesthetic !== undefined
-                        ? { aesthetic: context.variance.aesthetic }
-                        : {}),
-                    ...(context.variance.context !== undefined
-                        ? { context: context.variance.context }
-                        : {}),
-                    ...(context.variance.seedPrompt !== undefined
-                        ? { seedPrompt: context.variance.seedPrompt }
-                        : {}),
-                },
-            }
-            : {}),
     };
-    return [
-        "CANDIDATES:",
-        JSON.stringify(projectedCandidates, null, 2),
-        "",
-        "REQUEST:",
-        JSON.stringify(requestProjection, null, 2),
-        "",
-        "Pick the variant that best fits the REQUEST. Echo the blueprintId exactly, surface calibrated confidence, give a one-sentence rationale.",
-    ].join("\n");
-}
-/**
- * Run the LLM call + decode. Anthropic path uses `callStructured`
- * (forced tool use ⇒ guaranteed JSON); other providers fall back to
- * text + regex-extracted JSON. The caller (`selectVariantWithLlm`)
- * catches any throw from this function and routes through the
- * deterministic ladder; this function surfaces detail in the thrown
- * error so telemetry can attribute the fallback cause.
- */
-async function runVariantSelectionLlm(llm, candidates, context) {
-    const userMessage = buildVariantSelectionUserMessage(candidates, context);
-    if (llm.callStructured) {
-        const decoded = await llm.callStructured(VARIANT_SELECTION_SYSTEM_PROMPT, userMessage, {
-            name: VARIANT_SELECTION_TOOL_NAME,
-            description: VARIANT_SELECTION_TOOL_DESCRIPTION,
-            input_schema: VARIANT_SELECTION_TOOL_SCHEMA,
-        }, 512);
-        return parseVariantSelectionResponse(decoded);
-    }
-    // Text-fallback — parse JSON via regex. Lower reliability;
-    // operators on non-Anthropic providers get this path until
-    // `callStructured` extends to their adapter.
-    const text = await llm.call(VARIANT_SELECTION_SYSTEM_PROMPT, `${userMessage}\n\nRespond as ONE LINE of JSON: {"blueprintId":"…","confidence":0.0-1.0,"reason":"…"}`, 512);
-    const match = text.match(/\{[\s\S]*?"blueprintId"[\s\S]*?\}/);
-    if (!match) {
-        throw new Error(`variant-selection: no JSON object found in text response (length ${text.length})`);
-    }
-    return parseVariantSelectionResponse(JSON.parse(match[0]));
-}
-/**
- * Parse + validate the LLM-tool-use response shape. Exposed for
- * testing; in production it is only called via `runVariantSelectionLlm`.
- *
- * @throws Error on any shape violation. The caller catches and falls
- *   through to the deterministic ladder; the message is surfaced in
- *   `VariantSelectionResult.reason` for telemetry.
- */
-export function parseVariantSelectionResponse(raw) {
-    if (!isRecord(raw)) {
-        throw new Error("variant-selection: response is not an object");
-    }
-    const obj = raw;
-    const blueprintId = obj["blueprintId"];
-    const confidence = obj["confidence"];
-    const reason = obj["reason"];
-    if (typeof blueprintId !== "string" || blueprintId.length === 0) {
-        throw new Error("variant-selection: blueprintId missing or non-string");
-    }
-    if (typeof confidence !== "number" ||
-        !Number.isFinite(confidence) ||
-        confidence < 0 ||
-        confidence > 1) {
-        throw new Error(`variant-selection: confidence missing or out of range: ${JSON.stringify(confidence)}`);
-    }
-    if (typeof reason !== "string") {
-        throw new Error("variant-selection: reason missing or non-string");
-    }
-    return { blueprintId, confidence, reason };
 }

package/dist/mcp-apps-outbound.d.ts

@@ -364,6 +364,12 @@ export interface SelfContainedShellInputs {
      * route uses, so both transports share replay-cache state.
      */
     readonly token?: string;
+    /**
+     * The view key rooted in {@link token} (ggui#1415), inlined as the
+     * slice's `viewKey` beside `wsToken`. Only a key-issuing mount sets it;
+     * it is dropped without a token.
+     */
+    readonly viewKey?: string;
     /**
      * ISO-8601 expiry of {@link token}. Past-due envelopes degrade to
      * static-only mode at parse time; the static UI still mounts, but
@@ -666,6 +672,39 @@ export interface GguiRenderResourceTemplateOptions {
         readonly token: string;
         readonly expiresAt: string;
     };
+    /**
+     * The key-issuing minter (ggui#1415): the same live credential as
+     * {@link mintWsToken}, minted as a view root, with the view key rooted in
+     * it (`undefined` when the root is too long to key). The read door mints
+     * through it only when it issues the key (see {@link issueViewKeys});
+     * every other read mints through {@link mintWsToken}, so a token that
+     * carries `kid` and `src` always had a key issued with it. Ignored
+     * without {@link mintWsToken}.
+     */
+    readonly mintViewRoot?: (sessionId: string, appId: string) => {
+        readonly wsUrl: string;
+        readonly token: string;
+        readonly expiresAt: string;
+        readonly viewKey: string | undefined;
+    };
+    /**
+     * Whether this mount's read door may issue a view key (ggui#1415). Only
+     * the data plane, which delivers a view to an app-credentialed caller,
+     * sets it; `/control` and the isolated services never do. Even there no
+     * key is issued when the caller's `authSource` is `anonymous` or absent:
+     * such a caller resolves to the builder app and would pass the read gate
+     * on every builder-app row. A read that issues no key mints the live
+     * credential alone and says why (`view_key_not_issued`).
+     *
+     * An auth adapter that admits every caller as one identity (the
+     * development `InMemoryAuthAdapter({ devAllowAll: true })`, source `dev`)
+     * is not an anonymous mount: its callers are keyed, so the view runs its
+     * proof end to end in development. There every caller holds the same
+     * identity, so a `valid` verdict says the plumbing works and nothing
+     * about who signed; the gate's line carries `authSource`, which keeps
+     * those verdicts apart from a credentialed deployment's.
+     */
+    readonly issueViewKeys?: boolean;
     /**
      * Per-request handler-context accessor — the SAME AsyncLocalStorage
      * read the tool path uses. The per-session resource handler gates
@@ -682,96 +721,6 @@ export interface GguiRenderResourceTemplateOptions {
      */
     readonly logger?: Logger;
 }
-/**
- * Register a `ui://ggui/render/{sessionId}` resource template. Each
- * `resources/read` request is resolved by looking up the render in the
- * store and returning the self-contained shell with that
- * componentCode inlined.
- *
- * Per-call `_meta.ui.resourceUri` (stamped by `ggui_render.resultMeta`)
- * pins the URI to a specific sessionId; hosts fetch THAT URI rather
- * than the static `ui://ggui/render` one. Both registrations co-exist:
- * legacy postMessage shell at the static URI, self-contained shell at
- * the templated URI.
- *
- * # The obligation
- *
- * A read returns EITHER a shell carrying mount material — a static
- * component URL, a live channel, or a system card — OR exactly one
- * typed JSON-RPC error. There is no third outcome, and in particular no
- * successful result wrapping a shell that can never paint anything. A
- * host can check this without trusting the server: if it got
- * `contents`, it got something mountable.
- *
- * The obligation covers outcomes this server can DECIDE. A malfunction
- * still reaches the caller as an internal error (`-32603`) carrying
- * none of the four codes: a template wired with an empty `runtimeUrl`,
- * or a delivery channel that faults **and leaves the read with no other
- * channel to mount through**. A fault the read survives — the usual
- * case on a deployment wiring both channels — is not an outcome at all;
- * the render mounts through whatever is left. That split is deliberate:
- * `-32603` says "something is broken here", which the four codes must
- * never be diluted into claiming, and equally must not be raised over a
- * blip the server routed around.
- *
- * Three resolutions are tried, in this order, and any of them can
- * produce the mount:
- *
- *   1. The render row itself.
- *   2. A re-mint from the durable identity record, when the row is gone
- *      and this server keeps one ({@link GguiRenderResourceTemplateOptions.renderIdentityStore}
- *      + {@link GguiRenderResourceTemplateOptions.durableBlueprints}).
- *   3. The blueprint registry, keyed by the locator's own `blueprintKey`
- *      — the original component with its authoring-time defaults rather
- *      than the state the render last held.
- *
- * # Failure modes
- *
- * Which code a given read produces is fully predictable from two facts:
- * whether this server binds a durable substrate (both
- * {@link GguiRenderResourceTemplateOptions.renderIdentityStore} and
- * {@link GguiRenderResourceTemplateOptions.durableBlueprints} — either
- * one alone is as good as neither), and how far the read got.
- *
- *   - `NOT_FOUND` (`-32002`) — nothing resolved the locator, **and** the
- *     response for a caller who may not read a locator that DOES
- *     resolve. Those two are byte-identical by construction: both route
- *     through the protocol's projection, which substitutes a constant
- *     message and drops `detail`. A distinguishable refusal would turn
- *     this read into an oracle for the existence of other callers'
- *     renders, so the equality is a security property, not a courtesy.
- *   - `NOT_SUPPORTED` (`-32006`) — the same two cases, on a server with
- *     no durable substrate: an evicted locator can never be restored
- *     here, so saying "not found" would understate it. It takes
- *     `NOT_FOUND`'s place WHOLESALE on such a server rather than
- *     answering for some locators and not others — a server that said
- *     `NOT_FOUND` for a row it refused and `NOT_SUPPORTED` for one that
- *     never existed would have rebuilt the same oracle out of the two
- *     codes. Correspondingly, a server that DOES bind the substrate
- *     never emits it.
- *   - `BLUEPRINT_UNRESOLVABLE` (`-32006`) — a record named the render
- *     but its component is gone; `detail` names which link broke.
- *     Reachable only after the access check.
- *   - `NOT_MOUNTABLE` (`-32006`) — something resolved, but nothing
- *     mountable can be produced from it: no delivery channel is wired
- *     (neither {@link GguiRenderResourceTemplateOptions.codeStore} nor
- *     {@link GguiRenderResourceTemplateOptions.mintWsToken}), the row's
- *     generation has not committed a component yet, or a registry
- *     blueprint matched but cannot be delivered. Unlike the pair above,
- *     this one does NOT vary with the substrate: it is what the
- *     caller's OWN row gets on every server, because "this server
- *     cannot rehydrate" is not the useful truth for a row that is
- *     sitting right there. Reachable only after the access check, or —
- *     for the registry case — off the caller's own supplied key, so it
- *     discloses nothing either way.
- *
- * A URI matching neither template never reaches any of this: the
- * transport rejects it as invalid params, outside these four codes.
- *
- * Returns nothing; mutates the server in place.
- *
- * @public
- */
 export declare function registerGguiRenderResourceTemplate(server: McpServer, opts: GguiRenderResourceTemplateOptions): void;
 /**
  * Apply the full MCP Apps outbound wiring to a fresh `McpServer` - both

package/dist/mcp-apps-outbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-apps-outbound.d.ts","sourceRoot":"","sources":["../src/mcp-apps-outbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAEhB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAWL,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACpB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAmBjF,OAAO,EAgBL,KAAK,sBAAsB,EAE5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAG3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgc1C,eAAO,MAAM,sBAAsB,QAG6B,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,6BAA6B,EAAE,MAEtB,CAAC;AAwCvB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,MAAM,CAiBR;AAqID;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAKR;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAC9B,MAAM,GACN,IAAI,GACJ,CAAC,CAAC,GAAG,EAAE,uBAAuB,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAaR;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,EACjB,SAAS,GAAE,MAA+B,EAC1C,aAAa,CAAC,EAAE,MAAM;AACtB;;;;;;;;;;;GAWG;AACH,UAAU,CAAC,EAAE,MAAM;AACnB;;;;;;;;;;;;;GAaG;AACH,gBAAgB,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE;AAClD;;;;;;GAMG;AACH,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C,GACA,MAAM,CA2GR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAMpE;AAyCD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACjE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACrD;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACjE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACzD;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAyI9E;AAuID;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD;yBACqB;IACrB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,0BAA0B,EAAE,SAAS,CAAC;IAClE;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IACzD;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,0BAA0B,EAAE,gBAAgB,CAAC;IAChF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,0BAA0B,EAAE,mBAAmB,CAAC;IACtF;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IACrD;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV;QACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,cAAc,GAAG,SAAS,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AA4DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyFG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,iCAAiC,GACtC,IAAI,CAsjCN;AAiGD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAC3D;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,cAAc,GAAG,SAAS,CAAC;CACnD,GACL;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAyBvC"}
+{"version":3,"file":"mcp-apps-outbound.d.ts","sourceRoot":"","sources":["../src/mcp-apps-outbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAEhB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAWL,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACpB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAmBjF,OAAO,EAgBL,KAAK,sBAAsB,EAE5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAG3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAGnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgc1C,eAAO,MAAM,sBAAsB,QAG6B,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,6BAA6B,EAAE,MAEtB,CAAC;AAwCvB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,MAAM,CAiBR;AAqID;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAKR;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,sBAAsB,GAC9B,MAAM,GACN,IAAI,GACJ,CAAC,CAAC,GAAG,EAAE,uBAAuB,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAaR;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,EACjB,SAAS,GAAE,MAA+B,EAC1C,aAAa,CAAC,EAAE,MAAM;AACtB;;;;;;;;;;;GAWG;AACH,UAAU,CAAC,EAAE,MAAM;AACnB;;;;;;;;;;;;;GAaG;AACH,gBAAgB,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE;AAClD;;;;;;GAMG;AACH,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C,GACA,MAAM,CA2GR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAMpE;AAyCD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACjE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACrD;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACjE;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACzD;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC/D;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACjD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC3D;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CA0I9E;AAuID;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD;yBACqB;IACrB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,0BAA0B,EAAE,SAAS,CAAC;IAClE;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,KAAK,MAAM,GAAG,SAAS,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IACzD;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,0BAA0B,EAAE,gBAAgB,CAAC;IAChF;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,0BAA0B,EAAE,mBAAmB,CAAC;IACtF;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IACrD;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV;QACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV;QACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;KACtC,CAAC;IACF;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,cAAc,GAAG,SAAS,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAoKD,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,iCAAiC,GACtC,IAAI,CAklCN;AAiGD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE;IACJ,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iCAAiC,CAAC;IAC3D;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,cAAc,GAAG,SAAS,CAAC;CACnD,GACL;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAyBvC"}

package/dist/mcp-apps-outbound.js

@@ -38,7 +38,7 @@ import { GGUI_RENDER_RESOURCE_MIME, GGUI_RENDER_RESOURCE_URI, GGUI_RENDER_SHELL_
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { registerAppResource } from "@modelcontextprotocol/ext-apps/server";
 import { createHash } from "node:crypto";
-import { renderReadAllowed } from "@ggui-ai/mcp-server-handlers/renders";
+import { RENDER_READ_APP_TRUST_OVER_SUBJECT, renderReadVerdict } from "@ggui-ai/mcp-server-handlers/renders";
 import { DEFAULT_BUILDER_APP_ID } from "./auth.js";
 import { RUNTIME_BUNDLE_PLAIN_NAME } from "./runtime-bundle-hash.js";
 /**
@@ -987,6 +987,7 @@ export function buildSelfContainedShell(opts) {
         // input is renamed to `wsToken` on the slice for wire-field parity.
         ...(opts.wsUrl !== undefined ? { wsUrl: opts.wsUrl } : {}),
         ...(opts.token !== undefined ? { wsToken: opts.token } : {}),
+        ...(opts.token !== undefined && opts.viewKey !== undefined ? { viewKey: opts.viewKey } : {}),
         ...(opts.expiresAt !== undefined ? { expiresAt: opts.expiresAt } : {}),
         // Polling fallback URL — lights up `@ggui-ai/live-channel`'s
         // events-polling transport when WS is unavailable. Absent ⇒
@@ -1278,6 +1279,19 @@ function pickComponentFromGguiSession(render) {
  *
  * @public
  */
+/**
+ * Why the read door issues no view key on this read (ggui#1415), or
+ * `undefined` when it issues one: the mount does not opt in, or the caller
+ * is anonymous (or carries no auth source).
+ */
+function viewKeyWithheldAtReadDoor(opts) {
+    if (opts.issueViewKeys !== true)
+        return "not_a_view_mount";
+    const authSource = opts.getContext?.()?.authSource;
+    if (authSource === undefined || authSource === "anonymous")
+        return "anonymous_mount";
+    return undefined;
+}
 export function registerGguiRenderResourceTemplate(server, opts) {
     // TWO templates registered against the same handler core:
     //
@@ -1516,8 +1530,19 @@ export function registerGguiRenderResourceTemplate(server, opts) {
                 requestId: "resource-read",
             }
             : callerCtx;
-        if (renderReadAllowed(candidate, fallbackCtx))
+        const verdict = renderReadVerdict(candidate, fallbackCtx);
+        if (verdict.allowed) {
+            // ggui#1553: rung 4 admitted an app credential to a subject-bound
+            // session. Door, app, source; never the session or the subject.
+            if (verdict.appTrustOverSubject) {
+                opts.logger?.info(RENDER_READ_APP_TRUST_OVER_SUBJECT, {
+                    door: "resources_read",
+                    appId: candidate.appId,
+                    source: fallbackCtx?.authSource ?? null,
+                });
+            }
             return true;
+        }
         opts.logger?.warn("render_resource_read_denied", {
             sessionId,
             rowAppId: candidate.appId,
@@ -1854,9 +1879,25 @@ export function registerGguiRenderResourceTemplate(server, opts) {
         let wsUrl;
         let wsToken;
         let wsExpiresAt;
+        let wsViewKey;
         if (opts.mintWsToken) {
             try {
-                const minted = opts.mintWsToken(sessionId, accessibleStored.appId);
+                // ggui#1415: a view root, and its key, only on a key-issuing mount
+                // and for a caller that is not anonymous; any other read mints the
+                // live credential alone.
+                const withheld = viewKeyWithheldAtReadDoor(opts);
+                let minted;
+                if (opts.mintViewRoot !== undefined && withheld === undefined) {
+                    const root = opts.mintViewRoot(sessionId, accessibleStored.appId);
+                    wsViewKey = root.viewKey;
+                    minted = root;
+                }
+                else {
+                    minted = opts.mintWsToken(sessionId, accessibleStored.appId);
+                    if (opts.mintViewRoot !== undefined && withheld !== undefined) {
+                        opts.logger?.info("view_key_not_issued", { sessionId, src: "read", reason: withheld });
+                    }
+                }
                 wsUrl = minted.wsUrl;
                 wsToken = minted.token;
                 // Forward the token TTL so the iframe-runtime can degrade to
@@ -1936,6 +1977,7 @@ export function registerGguiRenderResourceTemplate(server, opts) {
                     wsUrl,
                     token: wsToken,
                     ...(wsExpiresAt !== undefined ? { expiresAt: wsExpiresAt } : {}),
+                    ...(wsViewKey !== undefined ? { viewKey: wsViewKey } : {}),
                 }
                 : {}),
             // Layered theme — the SAME resolver the tool-result slice uses

package/dist/mcp-endpoint-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-endpoint-routes.d.ts","sourceRoot":"","sources":["../src/mcp-endpoint-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElF,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC;AAEvC,OAAO,EAAkB,KAAK,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAM7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,mFAAmF;AACnF,UAAU,aAAa;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC9D;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AA2CD,UAAU,YAAY;IACpB,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACjF;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAChD,qDAAqD;IACrD,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;IAC3D,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,iEAAiE;IACjE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,iBAAiB,GAAG,SAAS,CAAC;IACvE;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;CACjD;AAyBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAmf1D"}
+{"version":3,"file":"mcp-endpoint-routes.d.ts","sourceRoot":"","sources":["../src/mcp-endpoint-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElF,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC;AAEvC,OAAO,EAAkB,KAAK,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAM7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,mFAAmF;AACnF,UAAU,aAAa;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC9D;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AA2CD,UAAU,YAAY;IACpB,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;IACjF;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAChD,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAChD,qDAAqD;IACrD,QAAQ,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;IAC3D,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,iEAAiE;IACjE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,iBAAiB,GAAG,SAAS,CAAC;IACvE;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;CACjD;AAyBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CA4f1D"}

package/dist/mcp-endpoint-routes.js

@@ -370,6 +370,7 @@ export function mountMcpEndpoints(opts) {
         reqLogger.debug?.("mcp_request", { appId: ctx.appId });
         const mcp = buildMcpServer(info, routeHandlers, () => als.getStore() ?? ctx, reqLogger, {
             ...buildMcpOptions,
+            ...(handlerOpts?.issueViewKeys === true ? { issueViewKeys: true } : {}),
         });
         const transport = new StreamableHTTPServerTransport({
             sessionIdGenerator: undefined,
@@ -433,7 +434,9 @@ export function mountMcpEndpoints(opts) {
     // intersects ['agent','runtime']. Handlers without an explicit tag
     // default to ['agent'], so every untagged handler is agent-callable.
     const agentRouteHandlers = filterHandlersByAudience(handlers, DATA_PLANE_AUDIENCES);
-    const agentMcpHandler = makeMcpHandler(agentRouteHandlers);
+    // The data plane delivers views to app-credentialed callers, so its read
+    // door is the one that issues view keys (ggui#1415).
+    const agentMcpHandler = makeMcpHandler(agentRouteHandlers, { issueViewKeys: true });
     // Control plane — anonymous-capable (design-time tools answer
     // bearer-less) with each ops tool re-imposing auth for itself.
     const controlMcpHandler = makeMcpHandler(controlHandlers, {