@ggui-ai/mcp-server 0.8.0 → 0.10.0

package/dist/code-routes.js

@@ -28,12 +28,22 @@
  * store sees the parameter.
  */
 import { CODE_HASH_REGEX } from "@ggui-ai/mcp-server-core";
+import { mountCodeModuleVariantRoute, } from "./code-module-variant.js";
 /**
- * Mount `GET /code/:hash.js` + `GET /contract/:hash.js` onto the
- * express app. Returns nothing — the routes self-register.
+ * Mount `GET /code/:hash.js` + `GET /contract/:hash.js` (+ the
+ * module-variant route when configured) onto the express app. Returns
+ * nothing — the routes self-register.
  */
 export function mountCodeRoutes(opts) {
     const { app, codeStore, logger } = opts;
+    if (opts.moduleVariant !== undefined) {
+        mountCodeModuleVariantRoute({
+            app,
+            codeStore,
+            variant: opts.moduleVariant,
+            logger,
+        });
+    }
     const mountContentAddressableRoute = (mountPath, label) => {
         app.get(mountPath, async (req, res) => {
             res.setHeader("Access-Control-Allow-Origin", "*");

package/dist/console-session-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"console-session-routes.d.ts","sourceRoot":"","sources":["../src/console-session-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAQ5F,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAQ1D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,UAAU,YAAY;IACpB,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,uEAAuE;IACvE,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,YAAY,GAAG,4BAA4B,CA0V1F"}
+{"version":3,"file":"console-session-routes.d.ts","sourceRoot":"","sources":["../src/console-session-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAQ5F,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAQ1D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,UAAU,YAAY;IACpB,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,KACV;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,uEAAuE;IACvE,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,YAAY,GAAG,4BAA4B,CAqW1F"}

package/dist/console-session-routes.js

@@ -267,9 +267,19 @@ export function mountConsoleSessionRoutes(opts) {
         // remains authoritative.
         let renderContractHash;
         let renderValidatorsUrl;
+        // Freeze-latch self-epoch (#483): the console inspector views the
+        // LIVE HEAD, so its boot meta carries the row's current epoch —
+        // without it the viewer boots believing epoch 0 and the first
+        // update on the session would freeze the inspection surface.
+        // (Follow-up: on a `ui.reminted` boundary the viewer should
+        // re-mount to the new head rather than stay frozen.)
+        let renderEpoch;
         if (renderStore && codeStore) {
             try {
                 const stored = await renderStore.get(verified.sessionId);
+                if (stored !== null) {
+                    renderEpoch = stored.render.epoch;
+                }
                 if (stored !== null &&
                     stored.render.type !== "mcpApps" &&
                     stored.render.type !== "system" &&
@@ -304,6 +314,7 @@ export function mountConsoleSessionRoutes(opts) {
             wsUrl: resolvedWsUrl,
             wsToken: minted.token,
             expiresAt: minted.expiresAt,
+            ...(renderEpoch !== undefined ? { epoch: renderEpoch } : {}),
             ...(renderContractHash !== undefined && renderValidatorsUrl !== undefined
                 ? {
                     contractHash: renderContractHash,

package/dist/control-service.d.ts

@@ -88,6 +88,18 @@ export declare function filterHandlersByAudience(set: ReadonlyArray<AnyHandler>,
  * mutations. Confirm-gating it would break the card's inline render on
  * the first call, because the confirmation preview does not carry the
  * card's discriminant.
+ *
+ * `ggui_ops_save_library_blueprint` is the one MUTATING entry, by owner
+ * ruling (ggui#525, 2026-08-16). The argument that it is safe on the
+ * first call: the save is idempotent under the name-collapse rule (same
+ * slug ⇒ one row, a repeat is a no-op), it writes only to the CALLER's
+ * own library (no cross-tenant or account-wide effect), and its caller
+ * is the console helper agent auto-saving after a render — the
+ * "confirm" it performed was an agent self-confirm with no human in
+ * the loop, which bought no safety and cost one extra tool round trip
+ * on every helper render. A future entry that lacks any of those three
+ * properties (idempotent, own-scope, no human to protect) does NOT
+ * inherit this ruling — it argues its own.
  */
 export declare const SINGLE_CALL_OPS: ReadonlySet<string>;
 /**
@@ -110,8 +122,12 @@ export declare function stripAudience<I extends ZodRawShape, O extends ZodRawSha
  * populated: every deployment tier proves identity differently
  * (single-user builder, per-app key, per-user key, OIDC), and only the
  * source distinguishes "the adapter authenticated this request" from
- * "the transport let it through". Transports map
- * {@link AuthRequiredError} to 401 so clients can prompt for sign-in.
+ * "the transport let it through". This gate is defense-in-depth
+ * behind the transport's anonymous-ops 401 challenge (ggui#505, see
+ * `mcp-endpoint-routes.ts`): anonymous callers normally never reach
+ * dispatch on an ops tool; a throw HERE surfaces as an in-band
+ * `isError` tool result, which is the contract for callers that
+ * authenticated but lack what the handler needs.
  */
 export declare function withAuthGate<I extends ZodRawShape, O extends ZodRawShape, D>(h: SharedHandler<I, O, D>): SharedHandler<I, O, D>;
 /**
@@ -155,6 +171,16 @@ export interface BuildControlServiceArgs {
  * design-time tools, and the per-handler auth gate is what keeps the
  * ops half closed.
  */
-export declare function buildControlService(args: BuildControlServiceArgs): McpService;
+export declare function buildControlService(args: BuildControlServiceArgs): ControlService;
+/**
+ * {@link McpService} plus the control plane's ops-tool name set — the
+ * membership the transport-level OAuth challenge reads. A separate
+ * field (rather than audience tags on the handlers) because service
+ * handlers deliberately carry no audience tag (see
+ * {@link stripAudience}).
+ */
+export interface ControlService extends McpService {
+    readonly opsToolNames: ReadonlySet<string>;
+}
 export {};
 //# sourceMappingURL=control-service.d.ts.map

package/dist/control-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-service.d.ts","sourceRoot":"","sources":["../src/control-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAK,KAAK,WAAW,EAAmB,MAAM,KAAK,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,KAAK,UAAU,GAAG,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAE1D,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;AAEnE,6CAA6C;AAC7C,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C,sDAAsD;AACtD,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,WAAW,CAAwB,CAAC;AAErF,0CAA0C;AAC1C,eAAO,MAAM,uBAAuB,EAAE,aAAa,CAAC,WAAW,CAAuB,CAAC;AAEvF;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,EAC9B,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,aAAa,CAAC,UAAU,CAAC,CAK3B;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAa9C,CAAC;AAEH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC,EAC3E,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACxB,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAGxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC,EAC1E,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACxB,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAYxB;AASD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC,EAC7E,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACxB,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CA+BzC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,UAAU,CAmB7E"}
+{"version":3,"file":"control-service.d.ts","sourceRoot":"","sources":["../src/control-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAK,KAAK,WAAW,EAAmB,MAAM,KAAK,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,KAAK,UAAU,GAAG,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAE1D,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;AAEnE,6CAA6C;AAC7C,eAAO,MAAM,YAAY,aAAa,CAAC;AAEvC,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C,sDAAsD;AACtD,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,WAAW,CAAwB,CAAC;AAErF,0CAA0C;AAC1C,eAAO,MAAM,uBAAuB,EAAE,aAAa,CAAC,WAAW,CAAuB,CAAC;AAEvF;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,aAAa,CAAC,UAAU,CAAC,EAC9B,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAClC,aAAa,CAAC,UAAU,CAAC,CAK3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAgB9C,CAAC;AAEH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC,EAC3E,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACxB,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAGxB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC,EAC1E,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACxB,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAYxB;AASD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,WAAW,EAAE,CAAC,EAC7E,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACxB,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CA+BzC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,cAAc,CAwBjF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5C"}

package/dist/control-service.js

@@ -89,11 +89,24 @@ export function filterHandlersByAudience(set, allowed) {
  * mutations. Confirm-gating it would break the card's inline render on
  * the first call, because the confirmation preview does not carry the
  * card's discriminant.
+ *
+ * `ggui_ops_save_library_blueprint` is the one MUTATING entry, by owner
+ * ruling (ggui#525, 2026-08-16). The argument that it is safe on the
+ * first call: the save is idempotent under the name-collapse rule (same
+ * slug ⇒ one row, a repeat is a no-op), it writes only to the CALLER's
+ * own library (no cross-tenant or account-wide effect), and its caller
+ * is the console helper agent auto-saving after a render — the
+ * "confirm" it performed was an agent self-confirm with no human in
+ * the loop, which bought no safety and cost one extra tool round trip
+ * on every helper render. A future entry that lacks any of those three
+ * properties (idempotent, own-scope, no human to protect) does NOT
+ * inherit this ruling — it argues its own.
  */
 export const SINGLE_CALL_OPS = new Set([
     "ggui_ops_get_credit_balance",
     "ggui_ops_get_my_blueprint_source",
     "ggui_ops_get_org_balance",
+    "ggui_ops_get_render_source",
     "ggui_ops_list_apps",
     "ggui_ops_list_blueprints",
     "ggui_ops_list_connector_keys",
@@ -102,6 +115,8 @@ export const SINGLE_CALL_OPS = new Set([
     "ggui_ops_list_my_blueprints",
     "ggui_ops_list_orgs",
     "ggui_ops_list_provider_keys",
+    "ggui_ops_list_recent_renders",
+    "ggui_ops_save_library_blueprint",
     "ggui_ops_setup_byok",
 ]);
 /**
@@ -127,8 +142,12 @@ export function stripAudience(h) {
  * populated: every deployment tier proves identity differently
  * (single-user builder, per-app key, per-user key, OIDC), and only the
  * source distinguishes "the adapter authenticated this request" from
- * "the transport let it through". Transports map
- * {@link AuthRequiredError} to 401 so clients can prompt for sign-in.
+ * "the transport let it through". This gate is defense-in-depth
+ * behind the transport's anonymous-ops 401 challenge (ggui#505, see
+ * `mcp-endpoint-routes.ts`): anonymous callers normally never reach
+ * dispatch on an ops tool; a throw HERE surfaces as an in-band
+ * `isError` tool result, which is the contract for callers that
+ * authenticated but lack what the handler needs.
  */
 export function withAuthGate(h) {
     return {
@@ -216,5 +235,10 @@ export function buildControlService(args) {
         path: CONTROL_PATH,
         handlers,
         anonymous: true,
+        // Captured BEFORE stripAudience erases the tags — the transport's
+        // anonymous-ops 401 challenge (ggui#505) needs the ops-name set,
+        // and the stripped handlers can no longer answer "which of you are
+        // ops". This service is the single authority on that membership.
+        opsToolNames: new Set(opsTools.map((h) => h.name)),
     };
 }

package/dist/ggui-session-channel/action-ingress.d.ts

@@ -9,7 +9,7 @@ import type { GguiSessionStore, PendingEventConsumer } from "@ggui-ai/mcp-server
 import type { WebSocketMessage } from "@ggui-ai/protocol/transport/websocket";
 import type { WebSocket } from "ws";
 import type { Logger } from "../logger.js";
-import type { Subscriber } from "./internal-types.js";
+import type { WsSubscriber } from "./internal-types.js";
 import type { Outbound } from "./outbound.js";
 export interface ActionIngressDeps {
     readonly logger: Logger;
@@ -46,7 +46,7 @@ export interface ActionIngress {
      *      mid-turn. Pipe failure degrades to ledger-only with a warn;
      *      it never changes the ack.
      */
-    handleInboundAction(ws: WebSocket, sub: Subscriber, message: WebSocketMessage & {
+    handleInboundAction(ws: WebSocket, sub: WsSubscriber, message: WebSocketMessage & {
         type: "action";
     }): Promise<void>;
 }

package/dist/ggui-session-channel/action-ingress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-ingress.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/action-ingress.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAIvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA+G9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,mBAAmB,CACjB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CAiJ1E"}
+{"version":3,"file":"action-ingress.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/action-ingress.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAIvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA+G9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,mBAAmB,CACjB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CAiJ1E"}

package/dist/ggui-session-channel/channel-subscriptions.d.ts

@@ -10,7 +10,7 @@ import type { GguiSessionStore } from "@ggui-ai/mcp-server-core";
 import type { WebSocketMessage } from "@ggui-ai/protocol/transport/websocket";
 import type { WebSocket } from "ws";
 import type { Logger } from "../logger.js";
-import type { Subscriber } from "./internal-types.js";
+import type { WsSubscriber } from "./internal-types.js";
 import type { Outbound } from "./outbound.js";
 /**
  * Opt-in plumbing for the `channel_subscribe` polling loop. When this
@@ -68,7 +68,7 @@ export interface ChannelSubscriptionsDeps {
      * callback fire-time to self-clean intervals that outlived their
      * subscriber.
      */
-    readonly subscribersByWs: WeakMap<WebSocket, Subscriber>;
+    readonly subscribersByWs: WeakMap<WebSocket, WsSubscriber>;
     readonly send: Outbound["send"];
     readonly sendChannelError: Outbound["sendChannelError"];
 }
@@ -80,7 +80,7 @@ export interface ChannelSubscriptions {
      * `${sessionId}:${channelName}` — a re-subscribe replaces any
      * existing interval rather than running two in parallel.
      */
-    handleChannelSubscribe(ws: WebSocket, sub: Subscriber, message: WebSocketMessage & {
+    handleChannelSubscribe(ws: WebSocket, sub: WsSubscriber, message: WebSocketMessage & {
         type: "channel_subscribe";
     }): Promise<void>;
     /**
@@ -89,7 +89,7 @@ export interface ChannelSubscriptions {
      * implicitly unsubscribes every channel; this message is for
      * mid-session cancellation.
      */
-    handleChannelUnsubscribe(ws: WebSocket, sub: Subscriber, message: WebSocketMessage & {
+    handleChannelUnsubscribe(ws: WebSocket, sub: WsSubscriber, message: WebSocketMessage & {
         type: "channel_unsubscribe";
     }): void;
 }

package/dist/ggui-session-channel/channel-subscriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-subscriptions.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/channel-subscriptions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAA4B,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAa9C;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,sBAAsB,CACpB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,mBAAmB,CAAA;KAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;OAKG;IACH,wBAAwB,CACtB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,GAC1D,IAAI,CAAC;CACT;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,wBAAwB,GAAG,oBAAoB,CAiQ/F"}
+{"version":3,"file":"channel-subscriptions.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/channel-subscriptions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAA4B,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAa9C;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,mCAAmC,GAAG,SAAS,CAAC;IACrE;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,sBAAsB,CACpB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,mBAAmB,CAAA;KAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;OAKG;IACH,wBAAwB,CACtB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,gBAAgB,GAAG;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,GAC1D,IAAI,CAAC;CACT;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,wBAAwB,GAAG,oBAAoB,CAiQ/F"}

package/dist/ggui-session-channel/internal-types.d.ts

@@ -5,14 +5,44 @@
  */
 import type { AuthResult, BufferedStreamEnvelope } from "@ggui-ai/mcp-server-core";
 import type { JsonObject } from "@ggui-ai/protocol";
+import type { WebSocketMessage } from "@ggui-ai/protocol/transport/websocket";
 import type { WebSocket } from "ws";
 /**
- * A single connected subscriber (one client, one render). Held live in
- * the per-channel subscriber map; torn down on socket close or explicit
- * `close` message.
+ * Transport-neutral write surface for one subscriber's outbound plane.
+ * The fan-out walks (`props_update` / `render` / `drain_ack` / external
+ * broadcasts), the live-tail pump, and the subscribe tail all write
+ * through this seam so a subscriber can ride WS (`createWsSink`) or SSE
+ * (`SseSink` in `../api-renders-stream-route.ts`) without per-frame
+ * transport branching.
  */
-export interface Subscriber {
-    readonly ws: WebSocket;
+export interface SubscriberSink {
+    /** WS: `ws.readyState === OPEN`; SSE: `!res.writableEnded && !res.destroyed`. */
+    isOpen(): boolean;
+    /**
+     * Write one wire frame. `resumeId` is the durable-cursor stamp for
+     * ledger-backed replay frames: SSE emits it as the `id:` field ahead
+     * of `data:` (so the browser's `Last-Event-ID` lands on the
+     * GguiSessionEvent ledger cursor); WS ignores it — WS resume rides
+     * `SubscribePayload.sinceSequence` instead.
+     */
+    write(frame: WebSocketMessage, opts?: {
+        readonly resumeId?: string;
+    }): void;
+    /**
+     * Terminate the transport. WS maps `service_restart` → close 1012
+     * (reconnect immediately — same server family is still up) and
+     * `session_expired` → close 1008 (policy violation — do not blind-
+     * reconnect); SSE ends the response, letting `EventSource`
+     * auto-reconnect hit the HTTP pre-gate for the authoritative verdict.
+     */
+    end(reason: "service_restart" | "session_expired"): void;
+}
+/**
+ * Fields shared by every subscriber regardless of transport (one
+ * client, one render). Held live in the channel's flat subscriber set;
+ * torn down on transport close or explicit `close` message.
+ */
+interface SubscriberBase {
     readonly sessionId: string;
     readonly appId: string;
     readonly identity: AuthResult;
@@ -32,7 +62,7 @@ export interface Subscriber {
      * Per-subscriber live-tail iterator from `streamFanout.subscribe`.
      * Owned by the subscriber for its full lifetime; ending it (via
      * `iter.return()`) terminates the pump loop AND unregisters from
-     * the StreamFanout. `unregister(ws)` is the single point that
+     * the StreamFanout. `unregister(sub)` is the single point that
      * does this teardown.
      */
     readonly iter: AsyncIterator<BufferedStreamEnvelope>;
@@ -41,15 +71,38 @@ export interface Subscriber {
      * Keyed by `${sessionId}:${channelName}` so a reconnect that
      * re-subscribes to the same (render, channel) pair replaces the
      * existing timer rather than minting a duplicate (idempotent
-     * semantics on the wire). Torn down en masse by `unregister(ws)` on
-     * WS close.
+     * semantics on the wire). Torn down en masse by `unregister(sub)`
+     * on transport close.
      *
      * Populated by the `channel_subscribe` handler when the composing
      * host wired a `streamWebSocketLocalTools` allowlist; empty
-     * otherwise.
+     * otherwise. SSE subscribers have no inbound channel, so theirs
+     * stays empty structurally.
      */
     readonly channelSubs: Map<string, ChannelSubscriptionState>;
+    /** Outbound write surface — the ONLY transport coupling on the fan-out path. */
+    readonly sink: SubscriberSink;
+}
+/**
+ * WebSocket-attached subscriber. The `ws` handle stays for the inbound
+ * / control planes (socket-router dispatch, action acks, subscribe
+ * rejects) which remain WS-only — SSE has no inbound channel.
+ */
+export interface WsSubscriber extends SubscriberBase {
+    readonly transport: "ws";
+    readonly ws: WebSocket;
+}
+/**
+ * SSE-attached subscriber (`GET /api/sessions/:sessionId/stream`),
+ * registered via `GguiSessionChannelServer.attachExternalSubscriber`.
+ * Outbound-only: it shares the fan-out planes with WS subscribers but
+ * never appears in the ws→subscriber reverse index.
+ */
+export interface SseSubscriber extends SubscriberBase {
+    readonly transport: "sse";
 }
+/** A single connected subscriber, discriminated on `transport`. */
+export type Subscriber = WsSubscriber | SseSubscriber;
 /**
  * Per-(subscriber, sessionId, channelName) polling-loop state.
  * Created on `channel_subscribe` accept, torn down on `channel_unsubscribe`
@@ -99,4 +152,5 @@ export interface UpgradeBindings {
         appId: string;
     };
 }
+export {};
 //# sourceMappingURL=internal-types.d.ts.map

package/dist/ggui-session-channel/internal-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal-types.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/internal-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACrD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CAC7D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB;IACvC,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;CAChD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B,iBAAiB,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D"}
+{"version":3,"file":"internal-types.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/internal-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,MAAM,IAAI,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5E;;;;;;OAMG;IACH,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,IAAI,CAAC;CAC1D;AAED;;;;GAIG;AACH,UAAU,cAAc;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;OASG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACrD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC5D,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;CAC3B;AAED,mEAAmE;AACnE,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB;IACvC,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;CAChD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B,iBAAiB,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D"}

package/dist/ggui-session-channel/outbound.d.ts

@@ -16,7 +16,7 @@ import type { ErrorPayload, GguiSession, JsonObject, ReservedChannelValidator }
 import type { WebSocketMessage } from "@ggui-ai/protocol/transport/websocket";
 import type { WebSocket } from "ws";
 import type { Logger } from "../logger.js";
-import type { Subscriber } from "./internal-types.js";
+import type { Subscriber, SubscriberSink } from "./internal-types.js";
 /** Channel-scoped error codes carried on `channel_error` frames. */
 export type ChannelErrorCode = "CHANNEL_UNKNOWN" | "CHANNEL_NOT_LOCAL" | "SESSION_NOT_FOUND" | "SUBSCRIBE_UNAUTHORIZED" | "POLL_FAILED";
 export interface OutboundDeps {
@@ -28,10 +28,11 @@ export interface OutboundDeps {
     /** Live-tail pub/sub seam for stream-envelope fan-out. */
     readonly streamFanout: StreamFanout;
     /**
-     * Flat set of all live WS subscribers — shared with the
+     * Flat set of all live subscribers (WS + SSE) — shared with the
      * subscriber-lifecycle module (which owns membership); read-only
-     * here. Direct-to-WS frames (`props_update`, `render`, `drain_ack`,
-     * external broadcasts) iterate + filter by `sessionId`.
+     * here. Direct frames (`props_update`, `render`, `drain_ack`,
+     * external broadcasts) iterate + filter by `sessionId`, writing
+     * through each subscriber's transport-neutral `sink`.
      */
     readonly wsSubscribers: ReadonlySet<Subscriber>;
     /**
@@ -41,6 +42,15 @@ export interface OutboundDeps {
      */
     readonly extraReservedValidators?: ReadonlyMap<string, ReservedChannelValidator>;
 }
+/**
+ * WS-backed {@link SubscriberSink}. `write` wraps the existing send
+ * guard (readyState check + warn-log on failure); `resumeId` is ignored
+ * — WS resume rides `SubscribePayload.sinceSequence`, not a per-frame
+ * id. `end` maps `service_restart` → 1012 (RFC 6455 "Service Restart":
+ * reconnect immediately) and `session_expired` → 1008 (policy
+ * violation: do not blind-reconnect).
+ */
+export declare function createWsSink(ws: WebSocket, logger: Logger): SubscriberSink;
 /** The send/fan-out helpers, bound to one channel instance. */
 export interface Outbound {
     /** Low-level wire write — skips closed sockets, warn-logs send failures. */
@@ -66,7 +76,7 @@ export interface Outbound {
     /** Impl behind {@link GguiSessionChannelServer.notifyGguiSessionCommit}. */
     notifyGguiSessionCommit(sessionId: string, render: GguiSession, matchType?: string): void;
     /** Impl behind {@link GguiSessionChannelServer.sendPropsUpdate}. */
-    sendPropsUpdate(sessionId: string, props: JsonObject): Promise<void>;
+    sendPropsUpdate(sessionId: string, props: JsonObject, epoch: number): Promise<void>;
     /** Impl behind {@link GguiSessionChannelServer.sendDrainAck}. */
     sendDrainAck(args: {
         readonly sessionId: string;

package/dist/ggui-session-channel/outbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/outbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,EACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,UAAU,EACV,wBAAwB,EAEzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,oEAAoE;AACpE,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,aAAa,CAAC;AAElB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CAClF;AAED,+DAA+D;AAC/D,MAAM,WAAW,QAAQ;IACvB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjD,8DAA8D;IAC9D,SAAS,CACP,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,GAChC,IAAI,CAAC;IACR;;;;;;;;;;OAUG;IACH,gBAAgB,CACd,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,GAChC,IAAI,CAAC;IACR,sEAAsE;IACtE,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3E,4EAA4E;IAC5E,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1F,oEAAoE;IACpE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,iEAAiE;IACjE,YAAY,CAAC,IAAI,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI,CAAC;IACT,sEAAsE;IACtE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACrE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CAoN3D"}
+{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/outbound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,EACb,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,UAAU,EACV,wBAAwB,EAEzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEtE,oEAAoE;AACpE,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,aAAa,CAAC;AAElB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CAClF;AAgBD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAc1E;AAED,+DAA+D;AAC/D,MAAM,WAAW,QAAQ;IACvB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjD,8DAA8D;IAC9D,SAAS,CACP,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,GAChC,IAAI,CAAC;IACR;;;;;;;;;;OAUG;IACH,gBAAgB,CACd,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,GAChC,IAAI,CAAC;IACR,sEAAsE;IACtE,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3E,4EAA4E;IAC5E,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1F,oEAAoE;IACpE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,iEAAiE;IACjE,YAAY,CAAC,IAAI,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI,CAAC;IACT,sEAAsE;IACtE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACrE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY,GAAG,QAAQ,CA2N3D"}

package/dist/ggui-session-channel/outbound.js

@@ -12,16 +12,48 @@
  * inline comments here cover impl-level decisions only.
  */
 import { assertStreamContract } from "@ggui-ai/mcp-server-handlers/renders";
+/**
+ * Low-level ws wire write shared by the closure-bound `send` helper and
+ * {@link createWsSink} — skips closed sockets, warn-logs send failures.
+ * One definition so the guard cannot drift between the two surfaces.
+ */
+function wsWrite(ws, logger, msg) {
+    if (ws.readyState !== ws.OPEN)
+        return;
+    try {
+        ws.send(JSON.stringify(msg));
+    }
+    catch (err) {
+        logger.warn("render_channel_send_failed", { error: String(err) });
+    }
+}
+/**
+ * WS-backed {@link SubscriberSink}. `write` wraps the existing send
+ * guard (readyState check + warn-log on failure); `resumeId` is ignored
+ * — WS resume rides `SubscribePayload.sinceSequence`, not a per-frame
+ * id. `end` maps `service_restart` → 1012 (RFC 6455 "Service Restart":
+ * reconnect immediately) and `session_expired` → 1008 (policy
+ * violation: do not blind-reconnect).
+ */
+export function createWsSink(ws, logger) {
+    return {
+        isOpen: () => ws.readyState === ws.OPEN,
+        write: (frame) => {
+            wsWrite(ws, logger, frame);
+        },
+        end: (reason) => {
+            try {
+                ws.close(reason === "service_restart" ? 1012 : 1008, reason);
+            }
+            catch {
+                /* best-effort — socket may already be closing */
+            }
+        },
+    };
+}
 export function createOutbound(deps) {
     function send(ws, msg) {
-        if (ws.readyState !== ws.OPEN)
-            return;
-        try {
-            ws.send(JSON.stringify(msg));
-        }
-        catch (err) {
-            deps.logger.warn("render_channel_send_failed", { error: String(err) });
-        }
+        wsWrite(ws, deps.logger, msg);
     }
     function sendError(ws, code, message, requestId, details) {
         send(ws, {
@@ -88,20 +120,22 @@ export function createOutbound(deps) {
         // `notifyGguiSessionCommit` JSDoc on the public interface for why
         // fresh subscribers rely on `ack.render` instead of a replay frame.
         // NOT routed through StreamFanout either — `type: 'render'` is a
-        // distinct WebSocket message type. Filter the flat WS-subscriber
+        // distinct WebSocket message type. Filter the flat subscriber
         // set by sessionId; N is typically 1-2 (multi-tab render sharing).
+        // `sink.write` is the transport-neutral seam — WS and SSE
+        // subscribers receive the identical frame.
         const payload = matchType !== undefined ? { session: render, matchType } : { session: render };
         for (const sub of deps.wsSubscribers) {
             if (sub.sessionId !== sessionId)
                 continue;
-            send(sub.ws, { type: "render", payload });
+            sub.sink.write({ type: "render", payload });
         }
     }
     /**
      * Best-effort + orphan-tolerant per the docstring on the public
      * `sendPropsUpdate` method.
      */
-    async function sendPropsUpdate(sessionId, props) {
+    async function sendPropsUpdate(sessionId, props, epoch) {
         let stored;
         try {
             stored = await deps.renderStore.get(sessionId);
@@ -119,29 +153,35 @@ export function createOutbound(deps) {
             });
             return;
         }
-        // Filter the flat WS-subscriber set by sessionId; same posture as
-        // `notifyGguiSessionCommit`. `send()` already silently skips closed sockets
-        // and logs (but doesn't throw on) per-subscriber send failures, so
-        // the calling handler can't be made to fail by a dead WebSocket.
+        // Filter the flat subscriber set by sessionId; same posture as
+        // `notifyGguiSessionCommit`. `sink.write` already silently skips
+        // closed transports and logs (but doesn't throw on) per-subscriber
+        // send failures, so the calling handler can't be made to fail by a
+        // dead transport.
+        // Freeze-latch epoch (#483): the caller passes the COMMIT-TIME
+        // epoch — an update fans its freshly-advanced value, an amend the
+        // unchanged head. Deliberately not re-read from the row here: a
+        // re-read races a concurrent update and could stamp an amend's
+        // frame with a newer epoch, freezing the live head it belongs to.
         for (const sub of deps.wsSubscribers) {
             if (sub.sessionId !== sessionId)
                 continue;
-            send(sub.ws, {
+            sub.sink.write({
                 type: "props_update",
-                payload: { sessionId, props },
+                payload: { sessionId, props, epoch },
             });
         }
     }
     function sendDrainAck({ sessionId, appId, eventId, drainedAt, }) {
         // Server-side fan-out for the action-drain ack.
-        // Filter the flat WS-subscriber set by sessionId (same posture
+        // Filter the flat subscriber set by sessionId (same posture
         // as `sendPropsUpdate`). No persistence; subscribers that
         // missed the frame fall back to their 10s claim timer, which
         // the atomic pop resolves cleanly.
         for (const sub of deps.wsSubscribers) {
             if (sub.sessionId !== sessionId)
                 continue;
-            send(sub.ws, {
+            sub.sink.write({
                 type: "drain_ack",
                 payload: { sessionId, appId, eventId, drainedAt },
             });
@@ -149,10 +189,10 @@ export function createOutbound(deps) {
     }
     function externalBroadcast(sessionId, frame) {
         // Walk the flat subscriber set; filter to matching sessionId.
-        // `send()` already guards closed sockets and logs (but doesn't
-        // throw on) per-subscriber failures, so the caller (an external
-        // pubsub on-message handler) can't be made to fail by a dead
-        // WebSocket. No GguiSessionStore lookup — the publisher already
+        // `sink.write` already guards closed transports and logs (but
+        // doesn't throw on) per-subscriber failures, so the caller (an
+        // external pubsub on-message handler) can't be made to fail by a
+        // dead transport. No GguiSessionStore lookup — the publisher already
         // validated; this seam is the cross-process delivery path, not
         // the re-validation point.
         for (const sub of deps.wsSubscribers) {
@@ -170,7 +210,7 @@ export function createOutbound(deps) {
                 frame.payload.seq <= sub.replayCompletedSeq) {
                 continue;
             }
-            send(sub.ws, frame);
+            sub.sink.write(frame);
         }
     }
     return {

package/dist/ggui-session-channel/socket-router.d.ts

@@ -10,7 +10,7 @@ import type { WebSocket, WebSocketServer } from "ws";
 import type { Logger } from "../logger.js";
 import type { ActionIngress } from "./action-ingress.js";
 import type { ChannelSubscriptions } from "./channel-subscriptions.js";
-import type { Subscriber } from "./internal-types.js";
+import type { WsSubscriber } from "./internal-types.js";
 import type { Outbound } from "./outbound.js";
 import type { SubscribeHandlers } from "./subscribe.js";
 import type { SubscriberLifecycle } from "./subscriber-lifecycle.js";
@@ -47,8 +47,13 @@ export interface SocketRouterDeps {
     readonly logger: Logger;
     /** GguiSession backing store — observation-message patches persist here. */
     readonly renderStore: GguiSessionStore;
-    /** ws → subscriber reverse index — the dispatcher's per-frame lookup. */
-    readonly subscribersByWs: WeakMap<WebSocket, Subscriber>;
+    /**
+     * ws → subscriber reverse index — the dispatcher's per-frame lookup.
+     * WS-only by construction (the lifecycle module populates it for
+     * `transport: 'ws'` subscribers only); SSE subscribers have no
+     * inbound socket to route.
+     */
+    readonly subscribersByWs: WeakMap<WebSocket, WsSubscriber>;
     readonly send: Outbound["send"];
     readonly sendError: Outbound["sendError"];
     readonly unregister: SubscriberLifecycle["unregister"];

package/dist/ggui-session-channel/socket-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket-router.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/socket-router.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAoB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAInF,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,yEAAyE;IACzE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACnE,QAAQ,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IAChF,QAAQ,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;IACpF,wDAAwD;IACxD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,kEAAkE;IAClE,QAAQ,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;CAChE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAmarF"}
+{"version":3,"file":"socket-router.d.ts","sourceRoot":"","sources":["../../src/ggui-session-channel/socket-router.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAoB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAInF,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAmB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACvD,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IACnE,QAAQ,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IAChF,QAAQ,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;IACpF,wDAAwD;IACxD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,kEAAkE;IAClE,QAAQ,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;CAChE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAuarF"}