@ggui-ai/project-config 0.5.0-rc.2 → 0.6.0

package/dist/primitives-manifest.d.ts

@@ -50,35 +50,11 @@ import { z } from 'zod';
  * source was resolved through an npm specifier.
  */
 export declare const PrimitivesManifestV1: z.ZodObject<{
-    /** File-format version — always `"1"` for v1. */
     schema: z.ZodLiteral<"1">;
-    /**
-     * The specifier consumers import from. For npm-distributed
-     * primitive packages this is the same string the app lists in
-     * `ggui.json#primitives.packages` (e.g.
-     * `@ggui-ai/design/primitives`). For in-project local primitives
-     * it is the path consumers import from (e.g.
-     * `./src/ui/primitives/index.js`).
-     */
     import: z.ZodString;
-    /**
-     * List of primitive components this source exports. At least one
-     * entry — a manifest that declares zero primitives is always a
-     * mistake.
-     */
     primitives: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
     }, z.core.$strict>>;
-    /**
-     * Optional path to a pre-generated LLM docs blob the generator
-     * can inject into the system prompt. Resolved relative to this
-     * manifest's directory at load time (not parse time).
-     *
-     * Absent → the server falls back to a names-only doc block and
-     * emits a boot warning (not fatal). The package's own build
-     * pipeline is responsible for emitting the file; ggui tooling
-     * never writes it.
-     */
     docs: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 /** Static TypeScript type derived from the v1 schema. */

package/dist/primitives-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"primitives-manifest.d.ts","sourceRoot":"","sources":["../src/primitives-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;IAE7B,iDAAiD;;IAGjD;;;;;;;OAOG;;IAGH;;;;OAIG;;;;IASH;;;;;;;;;OASG;;kBAEH,CAAC;AAEL,yDAAyD;AACzD,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,yBAAyB,CAAC;AAEpE;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAExE;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAEnD"}
+{"version":3,"file":"primitives-manifest.d.ts","sourceRoot":"","sources":["../src/primitives-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;;;kBAuC7B,CAAC;AAEL,yDAAyD;AACzD,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,yBAAyB,CAAC;AAEpE;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAExE;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAEnD"}

package/dist/schema.d.ts

@@ -62,20 +62,9 @@ import { z } from 'zod';
  *   - Not user/builder identity (those are MCP-pairing concerns)
  */
 declare const OperatorSchema: z.ZodObject<{
-    /** Display name shown on the welcome page. e.g. "Wanseob Lim" or
-     * "Loqu Inc.". Free-form — no slug constraint. */
     name: z.ZodOptional<z.ZodString>;
-    /** Operator's homepage / brand URL. Linkified on the welcome page
-     * if set. Must be a valid http(s) URL. */
     url: z.ZodOptional<z.ZodURL>;
-    /** One-line description shown under the operator name. e.g.
-     * "personal ggui server — tinkering only" or "Loqu's hosted ggui
-     * for friends + family". Plain text, no markup. */
     tagline: z.ZodOptional<z.ZodString>;
-    /** mailto-eligible contact address. Linkified as `mailto:` on the
-     * welcome page if set. Operators uncomfortable putting this on a
-     * public page should leave it unset — `name` and `url` carry the
-     * "how to reach me" load just as well. */
     contact: z.ZodOptional<z.ZodEmail>;
 }, z.core.$strict>;
 /** Public type alias for the operator block. */
@@ -117,48 +106,25 @@ declare const StorageSurfaceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     driver: z.ZodLiteral<"memory">;
 }, z.core.$strict>, z.ZodObject<{
     driver: z.ZodLiteral<"sqlite">;
-    /** Filesystem path to the SQLite database file. Relative paths
-     * resolve from the ggui.json directory at adapter-instantiation
-     * time. Empty strings are rejected at parse. */
     path: z.ZodString;
 }, z.core.$strict>], "driver">;
 declare const StorageSchema: z.ZodObject<{
-    /** Render persistence (events + identity). Absent = in-memory
-     * (renders reset on restart). */
     renders: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         driver: z.ZodLiteral<"memory">;
     }, z.core.$strict>, z.ZodObject<{
         driver: z.ZodLiteral<"sqlite">;
-        /** Filesystem path to the SQLite database file. Relative paths
-         * resolve from the ggui.json directory at adapter-instantiation
-         * time. Empty strings are rejected at parse. */
         path: z.ZodString;
     }, z.core.$strict>], "driver">>;
-    /** Vector index persistence (RAG, blueprint embeddings). Absent =
-     * in-memory (index rebuilds on restart). */
     vectors: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         driver: z.ZodLiteral<"memory">;
     }, z.core.$strict>, z.ZodObject<{
         driver: z.ZodLiteral<"sqlite">;
-        /** Filesystem path to the SQLite database file. Relative paths
-         * resolve from the ggui.json directory at adapter-instantiation
-         * time. Empty strings are rejected at parse. */
         path: z.ZodString;
     }, z.core.$strict>], "driver">>;
-    /** Persistent-chat thread + message persistence. Absent = in-memory
-     * (threads vanish on restart — correct for dev, unsafe for any
-     * deployment Portal's self-hosted flow talks to). Pair with
-     * `driver: 'sqlite'` + a `path` for durable local storage; the
-     * `@ggui-ai/mcp-server-core/sqlite#SqliteThreadStore` reference
-     * impl consumes the same file-per-surface layout the renders/
-     * vectors drivers already use. */
     threads: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
         driver: z.ZodLiteral<"memory">;
     }, z.core.$strict>, z.ZodObject<{
         driver: z.ZodLiteral<"sqlite">;
-        /** Filesystem path to the SQLite database file. Relative paths
-         * resolve from the ggui.json directory at adapter-instantiation
-         * time. Empty strings are rejected at parse. */
         path: z.ZodString;
     }, z.core.$strict>], "driver">>;
 }, z.core.$strict>;
@@ -185,11 +151,6 @@ export type StorageConfig = z.infer<typeof StorageSchema>;
  * threading through the dispatch path).
  */
 declare const GenerationSchema: z.ZodObject<{
-    /**
-     * Typed LLM route — `(provider, model)` parsed at the schema
-     * boundary into a discriminated `LlmRoute`. See
-     * `docs/principles/model-string-convention.md`.
-     */
     model: z.ZodPipe<z.ZodString, z.ZodTransform<{
         provider: "anthropic";
         model: "claude-fable-5" | "claude-opus-5" | "claude-sonnet-5" | "claude-haiku-4-5-20251001" | "claude-sonnet-4-6" | "claude-opus-4-7" | "claude-opus-4-6";
@@ -206,19 +167,6 @@ declare const GenerationSchema: z.ZodObject<{
         provider: "openrouter";
         model: (string & {}) | "anthropic/claude-fable-5" | "anthropic/claude-opus-5" | "anthropic/claude-sonnet-5" | "anthropic/claude-haiku-4.5" | "anthropic/claude-sonnet-4.6" | "anthropic/claude-opus-4.7" | "openai/gpt-5.6-sol" | "openai/gpt-5.6-terra" | "openai/gpt-5.6-luna" | "openai/gpt-5.5" | "openai/gpt-5.5-pro" | "openai/gpt-5.4-mini" | "openai/gpt-5.4-nano" | "google/gemini-3.6-flash" | "google/gemini-3.5-flash" | "google/gemini-3.5-flash-lite" | "google/gemini-3.1-pro-preview" | "google/gemini-3.1-flash-lite" | "x-ai/grok-4.3" | "meta-llama/llama-4-maverick" | "meta-llama/llama-3.3-70b-instruct" | "deepseek/deepseek-v4-pro" | "deepseek/deepseek-r1-0528" | "qwen/qwen3.7-max" | "qwen/qwen3-coder" | "mistralai/mistral-large-2512" | "openai/gpt-oss-120b";
     }, string>>;
-    /**
-     * Which API key UI generation runs against.
-     *
-     * - `'own'` — your own configured provider key (e.g. an env var
-     *   or secrets manager entry you supply); the server uses whatever
-     *   key the configured `generation.model` provider resolves.
-     * - `'managed'` — your hosting provider supplies the key; you do
-     *   not need to configure a provider key yourself.
-     *
-     * Absent (the default) means the server resolves the key from the
-     * environment via the standard provider-key lookup chain. Self-host
-     * deployments always use `'own'`.
-     */
     keySource: z.ZodOptional<z.ZodEnum<{
         own: "own";
         managed: "managed";
@@ -256,31 +204,11 @@ export type ThemeConfig = z.infer<typeof ThemeConfigSchema>;
  * **Strict root:** unknown top-level keys are rejected.
  */
 export declare const GguiJsonV1: z.ZodObject<{
-    /** File-format version — always `"1"` for v1. Distinct from
-     * `protocol` (which versions the wire contract the app speaks). */
     schema: z.ZodLiteral<"1">;
-    /** ggui wire protocol version the app speaks. */
     protocol: z.ZodString;
-    /** App identity. */
     app: z.ZodObject<{
         slug: z.ZodString;
         name: z.ZodString;
-        /**
-         * Per-app gadget catalog. The CLI
-         * passes these through to `InMemoryAppMetadataStore` so the
-         * handshake / push / ops handlers can validate every
-         * `clientCapabilities.gadgets[*]` ref against the registered
-         * set's package identity + export names. Each entry is a gadget
-         * PACKAGE and MUST satisfy the strict
-         * `strictGadgetDescriptorSchema` from `@ggui-ai/protocol`
-         * (a non-empty `exports[]` array, each export carrying required
-         * description / usage / example).
-         *
-         * Omitting this field falls back to the protocol's
-         * `STDLIB_GADGETS` defaults (the 7 first-party hooks).
-         * Declared 3rd-party wrappers (Leaflet, Mapbox, Stripe, …) land
-         * here.
-         */
         gadgets: z.ZodOptional<z.ZodArray<z.ZodObject<{
             exports: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
                 description: z.ZodString;
@@ -342,100 +270,26 @@ export declare const GguiJsonV1: z.ZodObject<{
             typesUrl: z.ZodOptional<z.ZodURL>;
             typesSri: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>>;
-        /**
-         * Public env channel. Operator-stamped key→value map that
-         * the server projects (filtered to declared wrappers' `requires`)
-         * onto `globalThis.__ggui__.publicEnv` so wrapper hooks can read
-         * values via `getPublicEnv(key)`.
-         *
-         * Keys MUST match `GGUI_PUBLIC_APP_[A-Z0-9_]+` — the `GGUI_PUBLIC_USER_`
-         * namespace is reserved for a future per-user channel. Values are
-         * arbitrary strings; the server projects only keys whose values are
-         * declared in some registered wrapper's `requires`. Operators who
-         * declare a key without a value can use the empty string (the
-         * Mapbox SDK will surface "Invalid token" on first request rather
-         * than a missing-key error from the render gate).
-         *
-         * Omitting this field is equivalent to `{}` — wrappers without
-         * `requires` work unchanged; wrappers that declare `requires` will
-         * fail at render-gate validation if their required keys are missing.
-         */
         publicEnv: z.ZodOptional<z.ZodReadonly<z.ZodRecord<z.ZodString, z.ZodString>>>;
-        /**
-         * App-default display-mode hint stamped on every `ggui_render` from
-         * this app via `_meta.ui.displayMode`. Spec-aligned with MCP App
-         * display literals (`'inline' | 'fullscreen' | 'pip'`).
-         *
-         * Honored by hosts as a PRESENTATION preference — `'fullscreen'`
-         * says "render as a main view"; `'inline'` says "stack vertically in
-         * the chat log"; `'pip'` says "render as picture-in-picture overlay".
-         * The wire mechanism is identical regardless of mode (every render
-         * stamps its own `_meta.ui.resourceUri` and every iframe goes
-         * through the same runtime mount path); display mode controls ONLY
-         * how the host arranges the iframes it mounts. Agents can override
-         * per render via `ggui_render.input.displayMode`.
-         *
-         * Absent ⇒ no per-render hint stamped (host falls back to its own
-         * default, typically `'inline'`).
-         */
         defaultDisplayMode: z.ZodOptional<z.ZodEnum<{
             inline: "inline";
             fullscreen: "fullscreen";
             pip: "pip";
         }>>;
     }, z.core.$strict>;
-    /** Operator identity — who's running this server. Optional;
-     * surfaced on the public welcome page at `/` when set. Privacy-
-     * first: nothing renders when nothing is set, no "anonymous"
-     * placeholder. See {@link OperatorConfig}. */
     operator: z.ZodOptional<z.ZodObject<{
-        /** Display name shown on the welcome page. e.g. "Wanseob Lim" or
-         * "Loqu Inc.". Free-form — no slug constraint. */
         name: z.ZodOptional<z.ZodString>;
-        /** Operator's homepage / brand URL. Linkified on the welcome page
-         * if set. Must be a valid http(s) URL. */
         url: z.ZodOptional<z.ZodURL>;
-        /** One-line description shown under the operator name. e.g.
-         * "personal ggui server — tinkering only" or "Loqu's hosted ggui
-         * for friends + family". Plain text, no markup. */
         tagline: z.ZodOptional<z.ZodString>;
-        /** mailto-eligible contact address. Linkified as `mailto:` on the
-         * welcome page if set. Operators uncomfortable putting this on a
-         * public page should leave it unset — `name` and `url` carry the
-         * "how to reach me" load just as well. */
         contact: z.ZodOptional<z.ZodEmail>;
     }, z.core.$strict>>;
-    /** Blueprint discovery. Defaults to no custom UIs declared. */
     blueprints: z.ZodDefault<z.ZodObject<{
-        /** Glob patterns relative to the `ggui.json` directory. Each match
-         * should resolve to a `ggui.ui.json` file. */
         include: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;
-    /** Primitive discovery. Defaults to the shipped
-     * `@ggui-ai/design/primitives` package + no local primitives. */
     primitives: z.ZodDefault<z.ZodObject<{
         packages: z.ZodDefault<z.ZodArray<z.ZodString>>;
         local: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;
-    /**
-     * Theme selection. Three accepted shapes:
-     *
-     * - **Shorthand string** — `theme: "claudic"`. Picks a preset from
-     *   the `@ggui-ai/design` registry. Default mode is `'light'`.
-     * - **Preset object** — `theme: { preset: "claudic", mode: "dark",
-     *   overrides: { "color.primary.500": "#cc785c" } }`. Picks a
-     *   registered preset, optional explicit mode, optional flat
-     *   dot-path token overrides applied on top of the preset's
-     *   tokens before CSS emission.
-     * - **File object** — `theme: { file: "./theme.json", mode: "dark" }`.
-     *   Loads tokens from a project-relative DTCG JSON file. The
-     *   `mode` is metadata only — the file's tokens are the resolved
-     *   theme; mode propagates to consumers that vary based on it
-     *   (e.g. `color-scheme: dark` injection).
-     *
-     * Absent (`theme: undefined`) means use the shipped default tokens
-     * from `@ggui-ai/design` (currently `lightTheme`).
-     */
     theme: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         preset: z.ZodString;
         mode: z.ZodOptional<z.ZodEnum<{
@@ -450,79 +304,30 @@ export declare const GguiJsonV1: z.ZodObject<{
             dark: "dark";
         }>>;
     }, z.core.$strict>]>>;
-    /** Agent-runtime config for `ggui serve`. Absent means the
-     * command boots MCP-only (no agent loop attached). */
     agent: z.ZodOptional<z.ZodObject<{
-        /** Path to the agent's entry file, relative to the ggui.json
-         * directory. Supported extensions: .js, .mjs, .cjs, .ts, .tsx,
-         * .mts. Validation of extension happens at `ggui serve` time —
-         * the schema stays permissive so malformed entries surface with
-         * the CLI's error message (which can list supported extensions +
-         * remediation), not a zod issue trace. */
         entry: z.ZodString;
     }, z.core.$strict>>;
-    /** Explicit storage adapter declarations. Absent means every
-     * persistence surface stays in-memory (the zero-config OSS
-     * default). Present means the operator has opted in per surface
-     * — no surface silently creates a file on disk. See
-     * {@link StorageConfig}. */
     storage: z.ZodOptional<z.ZodObject<{
-        /** Render persistence (events + identity). Absent = in-memory
-         * (renders reset on restart). */
         renders: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
             driver: z.ZodLiteral<"memory">;
         }, z.core.$strict>, z.ZodObject<{
             driver: z.ZodLiteral<"sqlite">;
-            /** Filesystem path to the SQLite database file. Relative paths
-             * resolve from the ggui.json directory at adapter-instantiation
-             * time. Empty strings are rejected at parse. */
             path: z.ZodString;
         }, z.core.$strict>], "driver">>;
-        /** Vector index persistence (RAG, blueprint embeddings). Absent =
-         * in-memory (index rebuilds on restart). */
         vectors: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
             driver: z.ZodLiteral<"memory">;
         }, z.core.$strict>, z.ZodObject<{
             driver: z.ZodLiteral<"sqlite">;
-            /** Filesystem path to the SQLite database file. Relative paths
-             * resolve from the ggui.json directory at adapter-instantiation
-             * time. Empty strings are rejected at parse. */
             path: z.ZodString;
         }, z.core.$strict>], "driver">>;
-        /** Persistent-chat thread + message persistence. Absent = in-memory
-         * (threads vanish on restart — correct for dev, unsafe for any
-         * deployment Portal's self-hosted flow talks to). Pair with
-         * `driver: 'sqlite'` + a `path` for durable local storage; the
-         * `@ggui-ai/mcp-server-core/sqlite#SqliteThreadStore` reference
-         * impl consumes the same file-per-surface layout the renders/
-         * vectors drivers already use. */
         threads: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
             driver: z.ZodLiteral<"memory">;
         }, z.core.$strict>, z.ZodObject<{
             driver: z.ZodLiteral<"sqlite">;
-            /** Filesystem path to the SQLite database file. Relative paths
-             * resolve from the ggui.json directory at adapter-instantiation
-             * time. Empty strings are rejected at parse. */
             path: z.ZodString;
         }, z.core.$strict>], "driver">>;
     }, z.core.$strict>>;
-    /**
-     * Explicit UI-generation LLM route. Absent + a boot-time provider
-     * key resolves → `ggui serve` hard-fails with an actionable error
-     * pointing here. Absent + no key → graceful boot (the
-     * Connect-Claude card flow handles per-user keys at request time).
-     * Present → use this route verbatim; the schema-side
-     * `parseAnyLlmRoute` transform yields a typed `LlmRoute` so the
-     * dispatch path never sees a string.
-     *
-     * See {@link GenerationConfig}.
-     */
     generation: z.ZodOptional<z.ZodObject<{
-        /**
-         * Typed LLM route — `(provider, model)` parsed at the schema
-         * boundary into a discriminated `LlmRoute`. See
-         * `docs/principles/model-string-convention.md`.
-         */
         model: z.ZodPipe<z.ZodString, z.ZodTransform<{
             provider: "anthropic";
             model: "claude-fable-5" | "claude-opus-5" | "claude-sonnet-5" | "claude-haiku-4-5-20251001" | "claude-sonnet-4-6" | "claude-opus-4-7" | "claude-opus-4-6";
@@ -539,77 +344,12 @@ export declare const GguiJsonV1: z.ZodObject<{
             provider: "openrouter";
             model: (string & {}) | "anthropic/claude-fable-5" | "anthropic/claude-opus-5" | "anthropic/claude-sonnet-5" | "anthropic/claude-haiku-4.5" | "anthropic/claude-sonnet-4.6" | "anthropic/claude-opus-4.7" | "openai/gpt-5.6-sol" | "openai/gpt-5.6-terra" | "openai/gpt-5.6-luna" | "openai/gpt-5.5" | "openai/gpt-5.5-pro" | "openai/gpt-5.4-mini" | "openai/gpt-5.4-nano" | "google/gemini-3.6-flash" | "google/gemini-3.5-flash" | "google/gemini-3.5-flash-lite" | "google/gemini-3.1-pro-preview" | "google/gemini-3.1-flash-lite" | "x-ai/grok-4.3" | "meta-llama/llama-4-maverick" | "meta-llama/llama-3.3-70b-instruct" | "deepseek/deepseek-v4-pro" | "deepseek/deepseek-r1-0528" | "qwen/qwen3.7-max" | "qwen/qwen3-coder" | "mistralai/mistral-large-2512" | "openai/gpt-oss-120b";
         }, string>>;
-        /**
-         * Which API key UI generation runs against.
-         *
-         * - `'own'` — your own configured provider key (e.g. an env var
-         *   or secrets manager entry you supply); the server uses whatever
-         *   key the configured `generation.model` provider resolves.
-         * - `'managed'` — your hosting provider supplies the key; you do
-         *   not need to configure a provider key yourself.
-         *
-         * Absent (the default) means the server resolves the key from the
-         * environment via the standard provider-key lookup chain. Self-host
-         * deployments always use `'own'`.
-         */
         keySource: z.ZodOptional<z.ZodEnum<{
             own: "own";
             managed: "managed";
         }>>;
     }, z.core.$strict>>;
-    /**
-     * Default plugin-registry URL for this app.
-     *
-     * When the user runs `ggui install <scope/name@version>` or `ggui
-     * publish` from this project, the CLI resolves the target registry
-     * via a three-layer chain (highest priority wins):
-     *
-     *   1. Explicit `--registry=<url>` flag passed to the CLI.
-     *   2. `GGUI_REGISTRY` environment variable.
-     *   3. This `registry` field in `ggui.json`.
-     *   4. (none → error) The CLI ships with NO hard-coded default;
-     *      operators MUST pick a registry per app.
-     *
-     * Mirrors the npm `--registry` / `npm_config_registry` / `.npmrc`
-     * resolution pattern but anchored on `ggui.json` for the project-
-     * local layer (instead of a dotfile) — the same file that holds
-     * `app.gadgets` is the natural place to declare which
-     * marketplace those libraries come from.
-     *
-     * Validated as a URL at schema-parse time; the CLI does not
-     * second-guess scheme / host beyond URL-shape (HTTPS recommendation
-     * is enforced at install-time, not here, so dev fixtures pointing
-     * at `http://localhost:<port>` parse cleanly).
-     *
-     * Absent = no project-local default; the CLI falls through to env
-     * var or flag, and errors if neither is set.
-     */
     registry: z.ZodOptional<z.ZodURL>;
-    /**
-     * Local MCP tool mounts — the operator-facing seam for declaring
-     * additional tool surfaces that aggregate onto `/mcp` alongside
-     * ggui-native tools (`ggui_render`, etc.). Each entry is a module
-     * specifier:
-     *
-     *   - Relative paths (`./path/to/mount.js`, `../local/mcp.mjs`)
-     *     resolve against the directory containing `ggui.json`. Must
-     *     include the file extension — we do not guess `.js` vs
-     *     `.mjs`. File must exist.
-     *   - Bare npm specifiers (`@my-org/mcp-mount`, `some-pkg/entry`)
-     *     resolve through Node's module resolver anchored at the
-     *     project root.
-     *
-     * Each resolved module must export a `createGguiMcpMount` function
-     * (or a default export) returning `{ name: string; handlers:
-     * SharedHandler[] }` — i.e., an `McpServerMount` from
-     * `@ggui-ai/mcp-server`. The factory owns its own state (backing
-     * store, seed, etc.). Zero-argument today; arguments are a future
-     * additive (widen the entry to `string | { module, options? }`).
-     *
-     * Default: `[]` (no mounts). Collisions between mount tool names
-     * and ggui-native tool names (or between two mounts) are rejected
-     * at `createGguiServer` composition time, not silently — see
-     * `packages/mcp-server/src/mcp-mounts.ts::composeHandlersWithMounts`. */
     mcpMounts: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 /** Static TypeScript type derived from the v1 schema. */

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmHxB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,QAAA,MAAM,cAAc;IAClB;sDACkD;;IAElD;8CAC0C;;IAI1C;;uDAEmD;;IAEnD;;;8CAG0C;;kBAI1C,CAAC;AAEH,gDAAgD;AAChD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AA+H5D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;oBAI5B,CAAC;AAqEH;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB;;;;IAZxB;;oDAEgD;;8BAahD,CAAC;AAEH,QAAA,MAAM,aAAa;IACjB;qCACiC;;;;;QAnBjC;;wDAEgD;;;IAmBhD;gDAC4C;;;;;QAtB5C;;wDAEgD;;;IAsBhD;;;;;;sCAMkC;;;;;QA9BlC;;wDAEgD;;;kBA8BhD,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,oDAAoD;AACpD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,gBAAgB;IACpB;;;;OAIG;;;;;;;;;;;;;;;;;IAqBH;;;;;;;;;;;;OAYG;;;;;kBAOH,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU;IACrB;uEACmE;;IAOnE,iDAAiD;;IAKjD,oBAAoB;;;;QA5cpB;;;;;;;;;;;;;;;WAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAIH;;;;;;;;;;;;;;;;;WAiBG;;QAEH;;;;;;;;;;;;;;;;WAgBG;;;;;;;IA2ZH;;;kDAG8C;;QArY9C;0DACkD;;QAElD;kDAC0C;;QAI1C;;2DAEmD;;QAEnD;;;kDAG0C;;;IA2X1C,+DAA+D;;QAtW/D;sDAC8C;;;IA0W9C;qEACiE;;;;;IAQjE;;;;;;;;;;;;;;;;;;OAkBG;;;;;;;;;;;;;;;IAKH;0DACsD;;QAtVtD;;;;;kDAK0C;;;IAsV1C;;;;gCAI4B;;QAlM5B;yCACiC;;;;;YAnBjC;;4DAEgD;;;QAmBhD;oDAC4C;;;;;YAtB5C;;4DAEgD;;;QAsBhD;;;;;;0CAMkC;;;;;YA9BlC;;4DAEgD;;;;IAuNhD;;;;;;;;;;OAUG;;QAxKH;;;;WAIG;;;;;;;;;;;;;;;;;QAqBH;;;;;;;;;;;;WAYG;;;;;;IAwIH;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;;IAQH;;;;;;;;;;;;;;;;;;;;;;;;6EAwByE;;kBASzE,CAAC;AAEH,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,UAAU,CAAC,SAAS,CAAC,CAEzC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmHxB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,QAAA,MAAM,cAAc;;;;;kBAoBlB,CAAC;AAEH,gDAAgD;AAChD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AA+H5D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;oBAI5B,CAAC;AAqEH;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB;;;;;8BAGxB,CAAC;AAEH,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;;;;kBAejB,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,oDAAoD;AACpD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;kBA6CpB,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiKrB,CAAC;AAEH,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,UAAU,CAAC,SAAS,CAAC,CAEzC"}

package/dist/theme.d.ts

@@ -97,25 +97,15 @@ import { z } from 'zod';
  * slices add new fields here under `schema: '1'`.
  */
 export declare const ThemeDocumentV1: z.ZodObject<{
-    /** Optional DTCG spec URL. Not validated — the spec hasn't frozen
-     *  a canonical URL and hand-authored themes often omit it. */
     $schema: z.ZodOptional<z.ZodString>;
-    /** Optional author-declared version. Not validated — string-form. */
     $version: z.ZodOptional<z.ZodString>;
-    /** Optional human-readable theme name. DTCG metadata; mirrors
-     *  `DtcgTheme.$name`. */
     $name: z.ZodOptional<z.ZodString>;
-    /** Optional human-readable theme description. DTCG metadata;
-     *  mirrors `DtcgTheme.$description`. */
     $description: z.ZodOptional<z.ZodString>;
-    /** Optional metadata bag — font fallback, hosting-philosophy notes,
-     *  etc. Mirrors `DtcgTheme.$metadata`. */
     $metadata: z.ZodOptional<z.ZodObject<{
         font: z.ZodOptional<z.ZodString>;
         fontUrl: z.ZodOptional<z.ZodString>;
         philosophy: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
-    /** Color tokens — palettes + semantic roles. Required. */
     color: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
         $type: z.ZodLiteral<"color">;
         $value: z.ZodString;
@@ -125,13 +115,11 @@ export declare const ThemeDocumentV1: z.ZodObject<{
         $value: z.ZodString;
         $description: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>]>>;
-    /** Spacing scale. Required. */
     spacing: z.ZodRecord<z.ZodString, z.ZodObject<{
         $type: z.ZodLiteral<"dimension">;
         $value: z.ZodString;
         $description: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
-    /** Font tokens — `family` / `size` / `weight` / `lineHeight`. Required. */
     font: z.ZodObject<{
         family: z.ZodIntersection<z.ZodRecord<z.ZodString, z.ZodObject<{
             $type: z.ZodLiteral<"fontFamily">;
@@ -164,7 +152,6 @@ export declare const ThemeDocumentV1: z.ZodObject<{
             $description: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>]>>;
     }, z.core.$strict>;
-    /** Shape tokens — `radius` + `shadow`. Required. */
     shape: z.ZodObject<{
         radius: z.ZodRecord<z.ZodString, z.ZodObject<{
             $type: z.ZodLiteral<"dimension">;
@@ -183,8 +170,6 @@ export declare const ThemeDocumentV1: z.ZodObject<{
             $description: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
-    /** Motion tokens — `duration` + `transition` (required sub-records),
-     *  `easing` + `keyframes` (optional sub-records). Optional. */
     motion: z.ZodOptional<z.ZodObject<{
         duration: z.ZodRecord<z.ZodString, z.ZodObject<{
             $type: z.ZodLiteral<"duration">;
@@ -211,8 +196,6 @@ export declare const ThemeDocumentV1: z.ZodObject<{
             $description: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
-    /** Accessibility tokens (focus ring, reduced motion, high contrast).
-     *  Optional. */
     accessibility: z.ZodOptional<z.ZodObject<{
         focusRing: z.ZodOptional<z.ZodObject<{
             color: z.ZodObject<{
@@ -261,7 +244,6 @@ export declare const ThemeDocumentV1: z.ZodObject<{
             }, z.core.$strict>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
-    /** Z-index scale. Optional. */
     zIndex: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         $type: z.ZodLiteral<"number">;
         $value: z.ZodNumber;

package/dist/theme.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../src/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4OxB;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,eAAe;IAC1B;kEAC8D;;IAG9D,qEAAqE;;IAGrE;6BACyB;;IAGzB;4CACwC;;IAGxC;8CAC0C;;;;;;IAG1C,0DAA0D;;;;;;;;;;IAG1D,+BAA+B;;;;;;IAG/B,2EAA2E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG3E,oDAAoD;;;;;;;;;;;;;;;;;;;IAGpD;mEAC+D;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG/D;oBACgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAGhB,+BAA+B;;;;;;kBAE/B,CAAC;AAEH,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,iDAAiD;AACjD,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,eAAe,CAAC,SAAS,CAAC,CAE9C"}
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../src/theme.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4OxB;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0C1B,CAAC;AAEH,yDAAyD;AACzD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,iDAAiD;AACjD,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAE5C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,eAAe,CAAC,SAAS,CAAC,CAE9C"}

package/dist/ui-manifest.d.ts

@@ -41,30 +41,17 @@ import type { DataContract } from '@ggui-ai/protocol';
  * fail parse. Additive fields land as coordinated schema changes.
  */
 export declare const UiManifestV1: z.ZodObject<{
-    /** Stable identity. See identity rules in module docstring. */
     id: z.ZodString;
-    /** Human-readable name (e.g., "Weather Card", "Kanban Board"). */
     name: z.ZodString;
-    /** One-line description of what this UI does. */
     description: z.ZodOptional<z.ZodString>;
-    /** Data contract: propsSpec, actionSpec, streamSpec, contextSpec, agentCapabilities/clientCapabilities. */
     contract: z.ZodCustom<DataContract, DataContract>;
-    /** Category for browsing/filtering (e.g., "dashboard", "form", "data-viz"). */
     category: z.ZodOptional<z.ZodString>;
-    /** Phrases that help blueprint-first matching find this UI. */
     matchPatterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    /** MCP tool names this UI is designed for. Used for discovery-layer matching. */
     mcpTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    /** MCP server name this UI is optimized for (e.g., "github", "stripe"). */
     mcpServer: z.ZodOptional<z.ZodString>;
-    /** UI class: sandboxed (portable) or fullstack (requires client bundle). */
     uiClass: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"sandboxed">, z.ZodLiteral<"fullstack">]>>;
-    /** Content hash of the compiled ESM output — versions the artifact.
-     * Derived, not authored. NOT the identity (see `id`). */
     contentHash: z.ZodOptional<z.ZodString>;
-    /** Parent content hash (for exported → modified → re-registered lineage). */
     parentHash: z.ZodOptional<z.ZodString>;
-    /** Source entry point relative to project root (e.g., "src/component.tsx"). */
     entryPoint: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 /** Static TypeScript type derived from the v1 schema. */

package/dist/ui-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-manifest.d.ts","sourceRoot":"","sources":["../src/ui-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA4BtD;;;GAGG;AACH,eAAO,MAAM,YAAY;IACvB,+DAA+D;;IAG/D,kEAAkE;;IAGlE,iDAAiD;;IAGjD,2GAA2G;;IAG3G,+EAA+E;;IAG/E,+DAA+D;;IAK/D,iFAAiF;;IAGjF,2EAA2E;;IAK3E,4EAA4E;;IAG5E;6DACyD;;IAGzD,6EAA6E;;IAG7E,+EAA+E;;kBAE/E,CAAC;AAEH,yDAAyD;AACzD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAExD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,YAAY,CAAC,SAAS,CAAC,CAE3C"}
+{"version":3,"file":"ui-manifest.d.ts","sourceRoot":"","sources":["../src/ui-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA4BtD;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;kBAyCvB,CAAC;AAEH,yDAAyD;AACzD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAExD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,YAAY,CAAC,SAAS,CAAC,CAE3C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/project-config",
-  "version": "0.5.0-rc.2",
+  "version": "0.6.0",
   "description": "Schema and loader for `ggui.json` — the portable app/agent manifest for the ggui protocol. Vendor-neutral. Consumed by the `ggui` CLI and any host that reconstitutes an agent from the manifest.",
   "keywords": [
     "ggui",
@@ -33,8 +33,8 @@
   "dependencies": {
     "tinyglobby": "^0.2.16",
     "zod": "^4.3.6",
-    "@ggui-ai/design": "0.5.0-rc.2",
-    "@ggui-ai/protocol": "0.5.0-rc.2"
+    "@ggui-ai/design": "0.6.0",
+    "@ggui-ai/protocol": "0.6.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",