@ggui-ai/mcp-server 0.7.0 → 0.9.0

package/dist/server.js

@@ -44,7 +44,7 @@ import { createInMemoryBlueprintSearch, createInMemoryGeneratorRegistry, FixedWi
 import { createGguiListGadgetsHandler, createGguiListThemesHandler, } from "@ggui-ai/mcp-server-handlers/app-discovery";
 import { createDescribeBlueprintFormatHandler, createDescribeDataContractFormatHandler, createGetBlueprintBoilerplateHandler, createGetExampleBlueprintsHandler, createListAvailablePrimitivesHandler, createListFeaturedBlueprintsHandler, createRenderBlueprintHandler, createSearchBlueprintsHandler, createValidateBlueprintHandler, } from "@ggui-ai/mcp-server-handlers/blueprints";
 import { createGguiOpsDeleteBlueprintHandler, createGguiOpsGenerateBlueprintHandler, createGguiOpsListBlueprintsHandler, createGguiOpsRegisterBlueprintHandler, createGguiOpsUpdateBlueprintHandler, } from "@ggui-ai/mcp-server-handlers/ops-blueprint";
-import { setCacheTraceSink, setPayloadTraceSink } from "@ggui-ai/mcp-server-handlers/renders";
+import { setCacheTraceSink, setPayloadTraceSink, wsOriginToHttpOrigin, } from "@ggui-ai/mcp-server-handlers/renders";
 import { loadTheme } from "@ggui-ai/project-config/node";
 import { LIFECYCLE_CHANNEL } from "@ggui-ai/protocol";
 import { setLlmTraceSink } from "@ggui-ai/ui-gen/harness/llm-trace-sink";
@@ -52,6 +52,7 @@ import { setValidatorTraceSink } from "@ggui-ai/ui-gen/harness/validator-trace-s
 import express from "express";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { randomBytes } from "node:crypto";
+import fs from "node:fs";
 import path from "node:path";
 import { BoundedCacheTraceSink, mountConsoleCacheRoutes } from "./console-cache.js";
 import { applyDevtoolSecurityHeaders } from "./console-headers.js";
@@ -59,6 +60,7 @@ import { BoundedLlmTraceSink, mountConsoleLlmTraceRoutes } from "./console-llm-t
 import { BoundedPayloadTraceSink, mountConsolePayloadsRoutes } from "./console-payloads.js";
 import { mountDevtoolThemeRoutes, } from "./console-theme-routes.js";
 import { mountConsoleTimelineRoutes } from "./console-timeline.js";
+import { buildInlineRenderShellHtml } from "./mcp-apps-outbound.js";
 import { BoundedValidatorTraceSink, mountConsoleValidatorRoutes } from "./console-validator.js";
 // Operator-class MCP handlers — twelve `ggui_ops_*` handlers across
 // four domains (apps / orgs / connector-keys / coupon). Every factory
@@ -69,12 +71,13 @@ import { createCreateAppHandler, createDeleteAppHandler, createListAppsHandler,
 import { createIssueConnectorKeyHandler, createListConnectorKeysHandler, createRevokeConnectorKeyHandler, } from "@ggui-ai/mcp-server-handlers/ops-connector-keys";
 import { createRedeemCouponHandler, } from "@ggui-ai/mcp-server-handlers/ops-coupon";
 import { createCreateOrgHandler, createGetOrgBalanceHandler, createInviteToOrgHandler, createListOrgsHandler, createRemoveOrgMemberHandler, createRenameOrgHandler, createRevokeInviteHandler, } from "@ggui-ai/mcp-server-handlers/ops-orgs";
-import { createGguiConsumeHandler, createGguiDeclareToolCatalogHandler, createGguiEmitHandler, createGguiGetSessionHandler, createGguiHandshakeHandler, createGguiListSessionsHandler, createGguiRefreshWsTokenHandler, createGguiRenderHandler, createGguiSubmitActionHandler, createGguiSyncContextHandler, createGguiUpdateHandler, InMemoryToolIdentityCatalogStore, createInMemoryProvisionalPreviewRegistry, } from "@ggui-ai/mcp-server-handlers/renders";
+import { createGguiConsumeHandler, createGguiDeclareToolCatalogHandler, createGguiEmitHandler, createGguiGetSessionHandler, createGguiHandshakeHandler, createGguiListSessionsHandler, createGguiRefreshWsTokenHandler, createGguiRenderHandler, createGguiRuntimePullHandler, createGguiRuntimeTelemetryHandler, createGguiSubmitActionHandler, createGguiSyncContextHandler, createGguiUpdateHandler, createGguiAmendHandler, InMemoryToolIdentityCatalogStore, createInMemoryProvisionalPreviewRegistry, } from "@ggui-ai/mcp-server-handlers/renders";
 import { DEFAULT_ADMIN_BLUEPRINTS_PATH, mountAdminBlueprintsTransport, } from "./admin-blueprints-transport.js";
 import { mountAdminOAuthProvidersTransport } from "./admin-oauth-providers-transport.js";
 import { DEFAULT_BUILDER_APP_ID, defaultAppIdFromIdentity } from "./auth.js";
 import { mountMcpEndpoints } from "./mcp-endpoint-routes.js";
 import { mountApiRendersRoutes } from "./api-renders-routes.js";
+import { mountApiRendersStreamRoute } from "./api-renders-stream-route.js";
 import { mountConsoleBlueprintRoutes } from "./console-blueprint-routes.js";
 import { mountConsoleChatRoutes } from "./console-chat-routes.js";
 import { mountConsoleConfigRoutes } from "./console-config-routes.js";
@@ -91,6 +94,7 @@ import { mountHealthRoutes } from "./health-routes.js";
 import { mountOAuthAuthorizationServerRoutes } from "./oauth-as-routes.js";
 import { mountOAuthClientsRoutes } from "./oauth-clients-routes.js";
 import { mountRuntimeBundleRoute } from "./runtime-bundle-route.js";
+import { computeRuntimeBundleHash, insertRuntimeBundleHash, } from "./runtime-bundle-hash.js";
 import { createCsrfMiddleware, mountCsrfTokenRoute } from "./csrf-middleware.js";
 import { mountEmailLoginRoutes } from "./email-login.js";
 import { resolveMcpInstructions } from "./instructions-presets.js";
@@ -108,7 +112,7 @@ import { InMemoryOAuthStorage } from "./oauth.js";
 import { DEFAULT_PAIRING_ADMIN_INIT_PATH, DEFAULT_PAIRING_PATH, mountPairingTransport, } from "./pairing-transport.js";
 import { createPairLoginRateLimitMiddleware } from "./rate-limit-middleware.js";
 import { createGguiSessionChannelServer, } from "./ggui-session-channel.js";
-import { buildRequestContextMiddleware, resolveRuntimeUrl } from "./request-context.js";
+import { buildRequestContextMiddleware, resolvePublicBaseUrl, resolveRuntimeUrl, } from "./request-context.js";
 import { composePreviewReservedValidator, mergeReservedValidators } from "./reserved-validators.js";
 import { checkRenderSchemaCompat, DEFAULT_SCHEMA_COMPAT_MODE, } from "./schema-compat.js";
 import { createSecurityHeadersMiddleware } from "./security-headers-middleware.js";
@@ -204,6 +208,7 @@ export function defaultHandlers(deps) {
             embedding: deps.embedding,
             vectors: deps.vectors,
             ...(deps.blueprints ? { blueprints: deps.blueprints } : {}),
+            ...(deps.registrySearch ? { registry: deps.registrySearch } : {}),
         }),
         createListFeaturedBlueprintsHandler(deps.blueprints ? { blueprints: deps.blueprints } : {}),
         // Spec / discovery handlers — zero-deps. These may be tagged
@@ -281,6 +286,30 @@ export function defaultHandlers(deps) {
                 ? { renderIdentityStore: deps.render.renderIdentityStore }
                 : {}),
         }));
+        // `ggui_runtime_pull` — terminal bridge-pull rung of the live-channel
+        // failover ladder (WS → SSE → HTTP polling → bridge-pull). A
+        // CSP-jailed MCP Apps iframe pulls the GguiSessionEvent ledger over
+        // the host's tools/call postMessage relay — same
+        // `_meta.ui.visibility: ['app']` channel as ggui_runtime_submit_action,
+        // same ledger + horizon semantics as `GET /api/sessions/:id/events`
+        // (both read `renderStore.listEventsSince`). Wired only when a
+        // renderStore is bound (render is on) — without render there is no
+        // ledger to serve.
+        handlers.push(createGguiRuntimePullHandler({
+            renderStore: deps.render.renderStore,
+        }));
+        // `ggui_runtime_telemetry` — the iframe runtime's transport
+        // self-report (visibility ['app'], same view-callable channel as
+        // submit_action/pull). Sandboxed hosts (claude.ai's
+        // claudemcpcontent frames) expose no readable console and no
+        // network, so the delivery ladder's behavior there is invisible
+        // WITHOUT this channel: the view batches its rung transitions +
+        // doorbell events and this handler logs them for operators.
+        // Fire-and-forget, store-less — gated on deps.render only because
+        // the ladder it reports on exists only when renders do.
+        handlers.push(createGguiRuntimeTelemetryHandler({
+            ...(deps.logger ? { logger: deps.logger } : {}),
+        }));
         // `ggui_runtime_refresh_ws_token` — G14 (2026-05-23) signed-
         // envelope refresh tool. Registered only when a refresh seam is
         // wired (typically `channelBootstrap.refresh` from the
@@ -364,12 +393,29 @@ export function defaultHandlers(deps) {
             // re-apply patched props on the live mount without a WS round-trip.
             ...(deps.update.mintBootstrap ? { mintWsToken: deps.update.mintBootstrap } : {}),
             ...(deps.update.runtimeUrl !== undefined ? { runtimeUrl: deps.update.runtimeUrl } : {}),
+            ...(deps.update.sessionApiBaseUrl !== undefined
+                ? { sessionApiBaseUrl: deps.update.sessionApiBaseUrl }
+                : {}),
             ...(deps.update.themeId !== undefined ? { themeId: deps.update.themeId } : {}),
             ...(deps.update.themeMode !== undefined ? { themeMode: deps.update.themeMode } : {}),
             ...(deps.update.themeProvider !== undefined
                 ? { themeProvider: deps.update.themeProvider }
                 : {}),
         }));
+        // ggui_amend rides the SAME deps slot (#483 tool split): one
+        // mutation core, one wiring. It reads only the mutation-flow deps
+        // (renderStore / identity / notifier) — the bootstrap-emission
+        // options above are meaningless to a tool that emits no result
+        // meta by design.
+        handlers.push(createGguiAmendHandler({
+            renderStore: deps.update.renderStore,
+            ...(deps.update.renderIdentityStore
+                ? { renderIdentityStore: deps.update.renderIdentityStore }
+                : {}),
+            ...(deps.update.propsUpdateNotifier
+                ? { propsUpdateNotifier: deps.update.propsUpdateNotifier }
+                : {}),
+        }));
     }
     // ggui_consume registers whenever render is bound (it shares the
     // GguiSessionStore for sessionId resolution + tenancy checks).
@@ -512,6 +558,9 @@ export function defaultHandlers(deps) {
                 : {}),
             ...(deps.render.mintBootstrap ? { mintWsToken: deps.render.mintBootstrap } : {}),
             ...(deps.render.runtimeUrl !== undefined ? { runtimeUrl: deps.render.runtimeUrl } : {}),
+            ...(deps.render.sessionApiBaseUrl !== undefined
+                ? { sessionApiBaseUrl: deps.render.sessionApiBaseUrl }
+                : {}),
             ...(deps.render.themeId !== undefined ? { themeId: deps.render.themeId } : {}),
             ...(deps.render.themeMode !== undefined ? { themeMode: deps.render.themeMode } : {}),
             ...(deps.render.themeProvider !== undefined
@@ -541,10 +590,11 @@ export function defaultHandlers(deps) {
                 ? { checkRenderContracts: deps.render.checkRenderContracts }
                 : {}),
             // Content-addressable code store. Both fields are forwarded
-            // together; the render handler
-            // requires both to emit `codeUrl`. Absent or partial = no
-            // static delivery channel, so the bootstrap mounts through the
-            // live trio instead (see render.ts handler body).
+            // together; the render handler requires both to emit
+            // `codeUrl`. Absent or partial = no cache-addressable static
+            // channel; the bootstrap still carries the inline `codeB64`
+            // twin for under-cap renders and mounts through the live trio
+            // where minted (see render.ts handler body).
             ...(deps.render.codeStore && deps.render.codeBaseUrl
                 ? {
                     codeStore: deps.render.codeStore,
@@ -770,7 +820,38 @@ export function createGguiServer(opts = {}) {
     const runtimeBundleFile = runtimeConfig.distDir !== undefined
         ? path.join(runtimeConfig.distDir, "iframe-runtime.js")
         : RUNTIME_BUNDLE_FILE;
-    const runtimeBootstrapUrl = runtimeConfig.url ?? runtimePath;
+    // Bundle bytes, captured ONCE at composition. Feed three consumers:
+    // the content hash below, the immutable hashed route (which must
+    // serve exactly the bytes its name hashes — see runtime-bundle-
+    // route.ts), and the opt-in inline-runtime shell. Unreadable file ⇒
+    // undefined ⇒ every consumer falls back to its pre-#472 behavior.
+    let runtimeBundleBytes;
+    if (runtimeEnabled) {
+        try {
+            runtimeBundleBytes = fs.readFileSync(runtimeBundleFile);
+        }
+        catch {
+            // The plain route's own existsSync handles the missing-bundle
+            // warning; nothing extra to say here.
+        }
+    }
+    // Content-hashed runtime URL (#472). The stamped `runtimeUrl` (and
+    // the hashed route it points at) embeds sha256[0..12) of the bytes:
+    // clients cache one download per content version with zero
+    // revalidations, and a deploy rolls over by changing the URL. The
+    // rewrite applies to a configured absolute `runtime.url` ONLY when
+    // its filename matches the served bundle's route (a CDN fronting
+    // THIS server still resolves the hashed name at its origin); a URL
+    // pointing at a foreign copy is left untouched, and
+    // `runtime.hashedUrl: false` opts out entirely.
+    const runtimeBundleHash = runtimeBundleBytes !== undefined && runtimeConfig.hashedUrl !== false
+        ? computeRuntimeBundleHash(runtimeBundleBytes)
+        : undefined;
+    const insertHash = (urlOrPath) => runtimeBundleHash === undefined
+        ? urlOrPath
+        : insertRuntimeBundleHash(urlOrPath, runtimeBundleHash, runtimePath.slice(runtimePath.lastIndexOf("/") + 1));
+    const hashedRuntimePath = runtimeBundleHash !== undefined ? insertHash(runtimePath) : undefined;
+    const runtimeBootstrapUrl = insertHash(runtimeConfig.url ?? runtimePath);
     // Lazy resolver: each render/update handler invocation looks up the
     // request-context-derived absolute base inside the request scope
     // (via AsyncLocalStorage). Static `publicBaseUrl` wins when set;
@@ -1185,6 +1266,7 @@ export function createGguiServer(opts = {}) {
             // Registers `ggui_runtime_declare_tool_catalog`.
             toolIdentityCatalogStore,
             ...(opts.blueprintProvider ? { blueprints: opts.blueprintProvider } : {}),
+            ...(opts.registrySearch ? { registrySearch: opts.registrySearch } : {}),
             // UI registry for `ggui_render_blueprint`. Absent = render tool
             // is NOT registered on this server (defaultHandlers' own opt-in
             // rule). OSS CLI wires a `LocalUiRegistry` here so manifest
@@ -1270,6 +1352,14 @@ export function createGguiServer(opts = {}) {
                         // an absolute URL instead of the relative default that
                         // breaks under srcdoc iframes (claude.ai).
                         runtimeUrl: resolveRuntimeUrlForResultMeta,
+                        // Session-API base for `pollingUrl` + `sseUrl` stamping.
+                        // Same lazy request-scope resolution as runtimeUrl:
+                        // static publicBaseUrl wins, X-Forwarded-Host honored
+                        // for loopback peers, `undefined` outside any request —
+                        // the handler then falls back to the minted trio's
+                        // wsUrl origin flip (OSS dev: `ws://localhost/ws` →
+                        // `http://localhost`).
+                        sessionApiBaseUrl: () => resolvePublicBaseUrl(opts.publicBaseUrl),
                         // Forward operator-picked theme onto every
                         // `ai.ggui/render.themeId` slice field so MCP Apps hosts
                         // (claude.ai, Claude Desktop) that mount via the
@@ -1458,10 +1548,10 @@ export function createGguiServer(opts = {}) {
                             ? { renderIdentityStore: opts.renderIdentityStore }
                             : {}),
                         propsUpdateNotifier: {
-                            sendPropsUpdate: async (sessionId, props) => {
+                            sendPropsUpdate: async (sessionId, props, epoch) => {
                                 if (!channelForHealth)
                                     return;
-                                await channelForHealth.sendPropsUpdate(sessionId, props);
+                                await channelForHealth.sendPropsUpdate(sessionId, props, epoch);
                             },
                         },
                         // Bootstrap-emission deps. Mirror render so MCP Apps hosts
@@ -1475,6 +1565,9 @@ export function createGguiServer(opts = {}) {
                         // same absolute URL when the server sits behind a tunnel
                         // / reverse proxy.
                         runtimeUrl: resolveRuntimeUrlForResultMeta,
+                        // Session-API base — matches render so both tools stamp
+                        // identical `pollingUrl` + `sseUrl` values.
+                        sessionApiBaseUrl: () => resolvePublicBaseUrl(opts.publicBaseUrl),
                         ...(opts.theme !== undefined && opts.theme.source === "preset"
                             ? { themeId: opts.theme.preset }
                             : {}),
@@ -1782,15 +1875,40 @@ export function createGguiServer(opts = {}) {
         logger,
         corsOrigins: originHostPolicy.allowedOrigins,
     });
+    // Inline-runtime shell (opt-in): embed the runtime bundle's source
+    // into the static-resource shell so fetch-blocked hosts (iframe CSP
+    // without external script-src) can still boot. Resolved ONCE at
+    // composition time from the same bundle file the runtime mount
+    // serves. An explicit `shellHtml` wins; a read failure warns and
+    // falls back to the thin shell (the server still works everywhere
+    // the thin shell worked).
+    let inlineShellHtml;
+    if (mcpAppsEnabled && mcpAppsConfig.inlineRuntimeShell === true) {
+        if (runtimeBundleBytes !== undefined) {
+            inlineShellHtml = buildInlineRenderShellHtml(runtimeBundleBytes.toString("utf8"));
+        }
+        else {
+            // inlineRuntimeShell is on but the runtime bundle could not be
+            // read at composition — serve the thin postMessage shell instead.
+            logger.warn("mcp_apps_inline_shell_bundle_unreadable", {
+                runtimeBundleFile,
+            });
+        }
+    }
     // Per-boot `buildMcpServer` options — every input below is fixed at
     // composition time, so the bundle is assembled once and the MCP
     // endpoint family spreads a fresh copy per request.
     const buildMcpOptions = {
         mcpAppsOutbound: mcpAppsEnabled,
-        // Caller-provided `shellHtml` overrides the default;
-        // `installMcpAppsOutbound` falls back to its baked
-        // `GGUI_RENDER_SHELL_HTML` constant when absent.
-        ...(mcpAppsConfig.shellHtml !== undefined ? { shellHtml: mcpAppsConfig.shellHtml } : {}),
+        // Caller-provided `shellHtml` overrides the default (and the
+        // inline-runtime shell); `installMcpAppsOutbound` falls back to
+        // its baked `GGUI_RENDER_SHELL_HTML` constant when both are
+        // absent.
+        ...(mcpAppsConfig.shellHtml !== undefined
+            ? { shellHtml: mcpAppsConfig.shellHtml }
+            : inlineShellHtml !== undefined
+                ? { shellHtml: inlineShellHtml }
+                : {}),
         // Forward the operator-supplied public origin so the static
         // `ui://ggui/render` resource declares `_meta.ui.csp` for
         // spec-compliant hosts (Claude Desktop / claude.ai Connector /
@@ -1798,6 +1916,18 @@ export function createGguiServer(opts = {}) {
         // (`connect-src 'none'`) blocks the iframe from fetching the
         // runtime bundle and opening the WebSocket.
         ...(opts.publicBaseUrl !== undefined ? { publicBaseUrl: opts.publicBaseUrl } : {}),
+        // Live-channel origins for the static shell's CSP declaration:
+        // the WS endpoint + its http-origin flip (the session-API base the
+        // sseUrl/pollingUrl stamps derive from when `publicBaseUrl` is
+        // unset — the cloud pod's posture, see compose.ts's Origin/Host
+        // ruling). Cross-origin hosts (claude.ai) build the frame CSP from
+        // the STATIC shell resource they mount; per-render declarations
+        // never reach it, so without these entries every network rung of
+        // the failover ladder (WS, SSE, HTTP polling) is `connect-src`-
+        // blocked in the frame — observed live in #471 round 11.
+        ...(mcpAppsEnabled
+            ? { extraConnectUrls: [wsUrl, wsOriginToHttpOrigin(wsUrl)] }
+            : {}),
         // Per-render self-contained shell registration. Only wired
         // when MCP Apps is on AND the render store is resolved —
         // both preconditions for `ggui_render.resultMeta` stamping a
@@ -1964,7 +2094,15 @@ export function createGguiServer(opts = {}) {
     // `runtime.url`. The bootstrap still carries a `runtimeUrl` so
     // the shell knows where to look — just not our HTTP listener.
     if (runtimeEnabled) {
-        mountRuntimeBundleRoute({ app, runtimePath, runtimeBundleFile, logger });
+        mountRuntimeBundleRoute({
+            app,
+            runtimePath,
+            runtimeBundleFile,
+            logger,
+            ...(hashedRuntimePath !== undefined && runtimeBundleBytes !== undefined
+                ? { hashed: { path: hashedRuntimePath, source: runtimeBundleBytes } }
+                : {}),
+        });
     }
     // R6 /state snapshot + R7 /events cursor-replay reads — see
     // `./api-renders-routes.ts` for the wsToken auth posture, tenancy
@@ -1989,6 +2127,20 @@ export function createGguiServer(opts = {}) {
             resolveRuntimeUrl: resolveRuntimeUrlForResultMeta,
             logger,
         });
+        // SSE live stream (the ladder's middle rung) — same wsToken auth
+        // posture as /state and /events; see `./api-renders-stream-route.ts`
+        // for the framing contract. The channel is late-bound via the same
+        // `() => channelForHealth` pattern as `stream.channelProvider`:
+        // route mounting runs before `createGguiSessionChannelServer`, and
+        // the mcpApps ⇒ renderChannel throw above guarantees a channel
+        // exists by listen time.
+        mountApiRendersStreamRoute({
+            app,
+            renderStore,
+            secret: sharedTokenSecret,
+            channelProvider: () => channelForHealth,
+            logger,
+        });
     }
     // Content-addressable code + contract-validator delivery — see
     // `./code-routes.ts` for the route contract (cache posture, CORS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/mcp-server",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Self-hosted MCP server for the ggui protocol. An HTTP/MCP binding layer over @ggui-ai/mcp-server-handlers and the reference adapters from @ggui-ai/mcp-server-core — run it via `ggui serve`.",
   "keywords": [
     "ggui",
@@ -32,16 +32,16 @@
     "resend": "^6.12.2",
     "ws": "^8.20.1",
     "zod": "^4.3.6",
-    "@ggui-ai/console": "0.7.0",
-    "@ggui-ai/iframe-runtime": "0.7.0",
-    "@ggui-ai/mcp-server-handlers": "0.7.0",
-    "@ggui-ai/negotiator": "0.7.0",
-    "@ggui-ai/mcp-server-core": "0.7.0",
-    "@ggui-ai/preview-a2ui": "0.7.0",
-    "@ggui-ai/project-config": "0.7.0",
-    "@ggui-ai/protocol": "0.7.0",
-    "@ggui-ai/ui-gen": "0.7.0",
-    "@ggui-ai/ui-registry": "0.7.0"
+    "@ggui-ai/iframe-runtime": "0.9.0",
+    "@ggui-ai/console": "0.9.0",
+    "@ggui-ai/mcp-server-handlers": "0.9.0",
+    "@ggui-ai/negotiator": "0.9.0",
+    "@ggui-ai/mcp-server-core": "0.9.0",
+    "@ggui-ai/preview-a2ui": "0.9.0",
+    "@ggui-ai/project-config": "0.9.0",
+    "@ggui-ai/ui-gen": "0.9.0",
+    "@ggui-ai/ui-registry": "0.9.0",
+    "@ggui-ai/protocol": "0.9.0"
   },
   "devDependencies": {
     "@types/express": "^5.0.0",
@@ -50,7 +50,7 @@
     "@types/ws": "^8.5.10",
     "typescript": "^5.0.0",
     "vitest": "^3.2.6",
-    "@ggui-ai/protocol-conformance": "0.7.0"
+    "@ggui-ai/protocol-conformance": "0.9.0"
   },
   "repository": {
     "type": "git",