@ggui-ai/protocol-conformance 0.13.0 → 0.15.0

package/README.md

@@ -51,13 +51,17 @@ One declared grading gap on the action loop: `action-ack` proves the append half
 
 The behavioral fixture catalog above asserts what an implementation _does_ over the wire. Some protocol obligations aren't transport-observable at all — they are deterministic _validation functions_: given an input, accept or reject it. SPEC §7.7.2's gadget obligations are exactly this. Modeling them as WebSocket fixtures would mean faking wire frames the protocol never emits; instead the kit ships **pure-function catalogs** — accept/reject cases graded against a caller-supplied function, with no host, render, or transport.
 
-Each catalog ships its cases as raw JSON so a non-TypeScript implementer can grade their own implementation, and each runner takes the implementation as a callback — the kit never hard-binds a concrete one. Five catalogs ship today:
+Each catalog ships its cases as raw JSON so a non-TypeScript implementer can grade their own implementation, and each runner takes the implementation as a callback — the kit never hard-binds a concrete one. Nine catalogs ship today:
 
 - **`@ggui-ai/protocol-conformance/schema-conformance`** — which `DataContract.clientCapabilities` payloads a conformant parser MUST accept / reject (the gadget wire shape).
 - **`@ggui-ai/protocol-conformance/registration-conformance`** — which `(contract, appGadgets, appPublicEnv)` triples the push-time gadget gate stack MUST accept / reject, and with which precise SPEC §7.9 reject code (`gadget_not_registered` / `gadget_package_mismatch` / `gadget_public_env_missing` / `duplicate_gadget_hook`).
 - **`@ggui-ai/protocol-conformance/resolution-conformance`** — which bundle + style URLs the server MUST compute for a gadget descriptor's transport fields (`bundleHost` precedence, default host, loopback `http` scheme).
 - **`@ggui-ai/protocol-conformance/binding-conformance`** — which MCP tool-binding set a manifest resolves to (a declared `mcpTools` list wins entirely; blueprints without it derive bare tool-name entries from contract tool names) and which artifacts the registry `tool=` / `server=` search filters MUST match (SPEC §7.7.4.1).
 - **`@ggui-ai/protocol-conformance/props-schema-conformance`** — the schema-precise render arbiter (SPEC §2.3.2): the enforced-props-schema builder (drift), its RFC 8785 sha256 hash, the grammar-safe profile verdict, and returned-schema AUTHORITY (sample validity under the case's own `propsSchema`, including the 2026-08-19 out-of-vocabulary enum incident pinned as a permanent sample).
+- **`@ggui-ai/protocol-conformance/host-helper-conformance`** — which render coordinates a HOST-HELPER library MUST extract from a `tools/call` result, and which malformed results it MUST decline rather than guess at.
+- **`@ggui-ai/protocol-conformance/refusal-envelope-conformance`** — the tool result a server MUST project for a PRE-GENERATION refusal (SPEC §7.1's refused arm): an in-result `isError` (never a throw), `content[0].text` leading with the code, `structuredContent` carrying `{outcome: 'refused', refusal}` and nothing else, no `_meta` — and no envelope at all for a registered code whose surfaces exclude the render gate.
+- **`@ggui-ai/protocol-conformance/registry-completeness`** — the structural obligations a deployment's closed refusal-code registry MUST satisfy: `surfaces` non-empty, `code === key`, every `after-fix` entry naming who acts (`fixBy`), and `retry` inside the closed four-value set. Grades DATA rather than a function — the caller passes their registry.
+- **`@ggui-ai/protocol-conformance/transport-refusal-conformance`** — the JSON-RPC error a per-app MCP endpoint MUST answer with when it refuses a request for a typed reason (SPEC §7.1's endpoint-level refusal, ggui#825): HTTP 403 with `{ code: -32003, message: 'App not found', data: { refusal } }`, where `refusal` is the registry projection without the render-only fields (`code`, `message`, `fix`, `retry`) — and no envelope at all for a registered code whose surfaces exclude `mcp-endpoint` (an untyped authorization failure answers 403 with `-32001` and no `data`, by contract — ggui#836). Runner: `runTransportRefusalConformance(project)`; folded into `runConformance()` via `transportRefusalProjector`.
 
 ```ts
 import { runSchemaConformance } from "@ggui-ai/protocol-conformance/schema-conformance";
@@ -77,7 +81,7 @@ if (schema.failed.length + gate.failed.length + urls.failed.length > 0) {
 }
 ```
 
-The `schema-conformance` meta-test binds its catalog to the live `@ggui-ai/protocol` `clientCapabilitiesSpecSchema` — a drift-catch if the wire schema diverges from the §7.7.2 obligations the catalog freezes. The `registration-conformance`, `resolution-conformance`, and `binding-conformance` meta-tests verify catalog coherence against faithful in-test implementations (the kit stays vendor-neutral — it does not depend on a server implementation); grading the _shipping_ gate / resolver is an implementation-side test that drives the corresponding runner.
+The `schema-conformance` meta-test binds its catalog to the live `@ggui-ai/protocol` `clientCapabilitiesSpecSchema` — a drift-catch if the wire schema diverges from the §7.7.2 obligations the catalog freezes. The `registration-conformance`, `resolution-conformance`, and `binding-conformance` meta-tests verify catalog coherence against faithful in-test implementations (the kit stays vendor-neutral — it does not depend on a server implementation); grading the _shipping_ gate / resolver is an implementation-side test that drives the corresponding runner. The two ggui#786 catalogs split the same way, and for the same reason: `registry-completeness` binds the LIVE `@ggui-ai/protocol` `PRE_GENERATION_REFUSAL_CODES` (the obligation IS a protocol declaration, so the drift-catch belongs kit-side, like `schema-conformance`), while `refusal-envelope-conformance` grades a kit-local reference projector (the obligation is an implementation behaviour, like `resolution-conformance`). Two of that ruling's six registry checks read repo source — the no-auto-retry docstring rule and the grep for code literals minted outside the registry file — and are therefore NOT in the kit: it publishes only `dist`, so a source walk could never run for an adopter. They live in `@ggui-ai/protocol`'s own suite. That split is declared, not hidden.
 
 ## Resource-read conformance — the MCP binding
 
@@ -116,18 +120,21 @@ It deliberately does **not** grade: the order in which a substrate-less server a
 
 What is actually graded against shipping code today, and what is still awaiting a driver. This is an inventory, not a roadmap — a mechanism is listed as proven only if a test in the repo drives it against the real implementation on every push.
 
-Every test below is a plain `*.test.ts` inside a package's `src/`, so it runs in that package's ordinary vitest suite. The ggui repo's per-push CI runs `turbo run test` across all non-e2e packages, so **all eight rows below are gated on every push** — the kit needs no dedicated workflow, and adopters wiring it into their own CI need nothing more than their existing unit-test task.
-
-| Obligation                                                              | Graded against                                                                             | Driver                                                                                               |
-| ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------- |
-| Gadget wire schema (§7.7.2)                                             | the shipping `@ggui-ai/protocol` `clientCapabilitiesSpecSchema`                            | this kit's own `src/schema-conformance/schema-conformance.test.ts`                                   |
-| Registration gate (§7.7.3, §7.9)                                        | the shipping gate trio in `@ggui-ai/mcp-server-handlers`                                   | `mcp-server-handlers/src/renders/assert-gadgets.conformance.test.ts`                                 |
-| Bundle-URL resolution (§7.7.2)                                          | the shipping `resolveGadgetUrls` in `@ggui-ai/mcp-server-handlers`                         | `mcp-server-handlers/src/renders/resolve-gadget-urls.conformance.test.ts`                            |
-| Path-A WS fixtures — first-party                                        | the real `@ggui-ai/mcp-server` GguiSession channel, booted in-process on an ephemeral port | `mcp-server/src/ggui-session-channel.conformance.test.ts` — **8 pass / 4 skip / 0 fail**             |
-| Path-A WS fixtures — vendor-neutral                                     | `@ggui-ai/protocol-reference-server`                                                       | `protocol-reference-server/src/conformance.test.ts` — **9 pass / 3 skip / 0 fail**                   |
-| `resources/read` typed failures + mount invariant                       | the shipping `registerGguiRenderResourceTemplate` in `@ggui-ai/mcp-server`                 | `mcp-server/src/mcp-apps-outbound.resource-read.conformance.test.ts` — **12 pass / 0 skip / 0 fail** |
-| Tool-binding resolution — declared wins, contract derivation (§7.7.4.1) | the shipping `resolveMcpToolBindings` in `@ggui-ai/artifact-manifest`                      | `artifact-manifest/src/mcp-tool-bindings.conformance.test.ts`                                        |
-| Tool-binding search filters — `tool=` / `server=` semantics (§7.7.4.1)  | the shipping `matchesMcpToolFilters` in `@ggui-ai/registry-core`                           | `registry-core/src/mcp-tool-filters.conformance.test.ts`                                             |
+Every test below is a plain `*.test.ts` inside a package's `src/`, so it runs in that package's ordinary vitest suite. The ggui repo's per-push CI runs `turbo run test` across all non-e2e packages, so **all twelve rows below are gated on every push** — the kit needs no dedicated workflow, and adopters wiring it into their own CI need nothing more than their existing unit-test task.
+
+| Obligation                                                              | Graded against                                                                                                                                                                                                                                                                 | Driver                                                                                                                |
+| ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------- |
+| Gadget wire schema (§7.7.2)                                             | the shipping `@ggui-ai/protocol` `clientCapabilitiesSpecSchema`                                                                                                                                                                                                                | this kit's own `src/schema-conformance/schema-conformance.test.ts`                                                    |
+| Registration gate (§7.7.3, §7.9)                                        | the shipping gate trio in `@ggui-ai/mcp-server-handlers`                                                                                                                                                                                                                       | `mcp-server-handlers/src/renders/assert-gadgets.conformance.test.ts`                                                  |
+| Bundle-URL resolution (§7.7.2)                                          | the shipping `resolveGadgetUrls` in `@ggui-ai/mcp-server-handlers`                                                                                                                                                                                                             | `mcp-server-handlers/src/renders/resolve-gadget-urls.conformance.test.ts`                                             |
+| Path-A WS fixtures — first-party                                        | the real `@ggui-ai/mcp-server` GguiSession channel, booted in-process on an ephemeral port                                                                                                                                                                                     | `mcp-server/src/ggui-session-channel.conformance.test.ts` — **24 pass / 12 skip / 0 fail**                            |
+| Path-A WS fixtures — vendor-neutral                                     | `@ggui-ai/protocol-reference-server`                                                                                                                                                                                                                                           | `protocol-reference-server/src/conformance.test.ts` — **19 pass / 5 skip / 0 fail**                                   |
+| `resources/read` typed failures + mount invariant                       | the shipping `registerGguiRenderResourceTemplate` in `@ggui-ai/mcp-server`                                                                                                                                                                                                     | `mcp-server/src/mcp-apps-outbound.resource-read.conformance.test.ts` — **12 pass / 0 skip / 0 fail**                  |
+| Tool-binding resolution — declared wins, contract derivation (§7.7.4.1) | the shipping `resolveMcpToolBindings` in `@ggui-ai/artifact-manifest`                                                                                                                                                                                                          | `artifact-manifest/src/mcp-tool-bindings.conformance.test.ts`                                                         |
+| Tool-binding search filters — `tool=` / `server=` semantics (§7.7.4.1)  | the shipping `matchesMcpToolFilters` in `@ggui-ai/registry-core`                                                                                                                                                                                                               | `registry-core/src/mcp-tool-filters.conformance.test.ts`                                                              |
+| Pre-generation refusal envelope (§7.1, refused arm)                     | `projectRenderRefusal` in `@ggui-ai/protocol` — the one source both the shipping `ggui_render` handler (`@ggui-ai/mcp-server-handlers`) and `@ggui-ai/protocol-reference-server` answer through                                                                                | `mcp-server-handlers/src/renders/render-refusal-projection.conformance.test.ts`                                       |
+| Refusal-registry completeness (ggui#786 ruling 5b)                      | the shipping `PRE_GENERATION_REFUSAL_CODES` in `@ggui-ai/protocol`                                                                                                                                                                                                             | this kit's own `src/registry-completeness/registry-completeness.test.ts`                                              |
+| Endpoint-level refusal (§7.1, `mcp-endpoint` surface, ggui#825)         | the catalog's kit-local reference projector only — no shipping deployment projector is graded yet: the OSS route is generic (`errorMapper`), the first-party server and the reference server supply no projector (SKIPPED, named), and the pod's mapper lands after this slice | this kit's own `src/transport-refusal-conformance/transport-refusal-conformance.test.ts` (coherence + discrimination) |
 
 Both WS drivers pin their pass set _and_ their skip set as exact sets, and the resource-read driver pins its skip set as exactly empty. A fixture silently degrading to a skip fails the build, and so does a skipped fixture that quietly starts passing — a skip set that can grow unnoticed is a false gate, and re-pinning it is meant to be a deliberate act.
 
@@ -165,6 +172,13 @@ npx @ggui-ai/protocol-conformance --url ws://localhost:3000/ws --auth bearer:$TO
 
 The CLI exits `0` only when at least one fixture executed and none failed; `1` on any fixture failure; `2` on invocation errors **or** when every fixture skipped (a zero-executed run never reads as success in CI).
 
+The three pure-function catalogs (`refusal-envelope`, `registry-completeness`, `transport-refusal`) grade an in-process function and a data table, not the wire, so a URL alone cannot reach them. The CLI hands them their inputs by flag — `--registry <file.json>` (the deployment's refusal registry, a JSON object keyed by code), `--projector <module>` (an ES module whose `project(refusal)` — named or default export — returns the SPEC §7.1 tool result, or `null` for a code with no render envelope) and `--transport-projector <module>` (same shape, returning the endpoint's `{ httpStatus, error }` or `null`). A flag left out leaves its catalog on the scorecard as SKIPPED with the flag named. Catalog rows count as executed fixtures, so a run given a catalog flag can exit 0 while every wire fixture is SKIPPED — read the scorecard for the wire signal. Minimal spec-correct samples of each input live in the repository at [`src/cli-samples/`](https://github.com/ggui-ai/ggui/tree/main/packages/protocol-conformance/src/cli-samples) (not in the npm tarball); the test suite pins that they pass their catalogs.
+
+```
+npx @ggui-ai/protocol-conformance --url ws://localhost:3000/ws --auth bearer:$TOKEN \
+  --registry ./refusal-registry.json --projector ./project.mjs --transport-projector ./endpoint.mjs
+```
+
 To grade setup-dependent fixtures (and any `session-state` fixture), pass a `host` implementing the `ConformanceHost` adapter — `dispatchSetup` / `dispatchTeardown` for the directive vocabulary, plus the optional `readSessionField(sessionId, field)` introspection seam. Fixtures whose requirements the host doesn't meet skip with a precise reason; they never silently pass.
 
 ## License

package/dist/cli.d.ts

@@ -1,16 +1,38 @@
 #!/usr/bin/env node
-import { type ConformanceResult } from './run-conformance.js';
+import { type ConformanceResult, type RunConformanceConfig } from './run-conformance.js';
 import type { AuthConfig } from './types.js';
 interface ParsedArgs {
     readonly url?: string;
     readonly auth?: string;
     readonly only?: readonly string[];
     readonly timeoutMs?: number;
+    /** Path to a JSON file holding the deployment's refusal registry (code → row). */
+    readonly registry?: string;
+    /** Path to an ES module exporting the SPEC §7.1 refusal projector. */
+    readonly projector?: string;
+    /** Path to an ES module exporting the endpoint-level refusal projector. */
+    readonly transportProjector?: string;
     readonly verbose: boolean;
     readonly help: boolean;
 }
 declare function parseArgs(argv: readonly string[]): ParsedArgs;
 declare function parseAuth(spec: string): AuthConfig;
+/** The three optional inputs a CLI run can hand the pure-function catalogs. */
+export type CatalogInputs = Pick<RunConformanceConfig, 'refusalRegistry' | 'refusalProjector' | 'transportRefusalProjector'>;
+/** The flag values that name where each catalog input comes from. */
+export interface CatalogInputPaths {
+    readonly registry?: string | undefined;
+    readonly projector?: string | undefined;
+    readonly transportProjector?: string | undefined;
+}
+/**
+ * Resolve the `--registry` / `--projector` / `--transport-projector`
+ * flags into the runner's catalog inputs. A flag that is absent yields
+ * no input, and the runner reports that catalog SKIPPED with the flag
+ * named. Every failure names the flag and the path.
+ */
+export declare function loadCatalogInputs(paths: CatalogInputPaths): Promise<CatalogInputs>;
+export declare const USAGE: string;
 declare function main(argv: readonly string[]): Promise<number>;
 /**
  * Map a {@link ConformanceResult} to the CLI exit code:

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA+BA,OAAO,EAAkB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,iBAAS,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA8CtD;AAED,iBAAS,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAY3C;AAoCD,iBAAe,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0D5D;AAED;;;;;;;GAOG;AACH,iBAAS,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAI/D;AA+BD,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAsDA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,iBAAS,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA0DtD;AAOD,iBAAS,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAY3C;AAMD,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,oBAAoB,EACpB,iBAAiB,GAAG,kBAAkB,GAAG,2BAA2B,CACrE,CAAC;AAEF,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AA4ID;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CA6BxF;AAMD,eAAO,MAAM,KAAK,QAyDL,CAAC;AAEd,iBAAe,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoE5D;AAED;;;;;;;GAOG;AACH,iBAAS,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAI/D;AA+BD,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC"}

package/dist/cli.js

@@ -16,25 +16,42 @@
  * may legitimately not provide every `ConformanceHost` directive in
  * v1.0 — but a run that is ALL skips carries no signal.
  *
+ * The three PURE-FUNCTION catalogs (refusal-envelope,
+ * registry-completeness, transport-refusal) grade an in-process
+ * function and a data table, not the wire: `--registry <file.json>`,
+ * `--projector <module>` and `--transport-projector <module>` hand
+ * them their inputs (ggui#803 leg 3). A flag left out leaves its
+ * catalog SKIPPED with the flag named, never silently absent. Catalog
+ * rows count as executed fixtures, so a run given a catalog flag can
+ * exit 0 while every wire fixture is SKIPPED — read the scorecard,
+ * not only the exit code, for a wire signal.
+ *
  * Honest scope of the bundled CLI: no `host` wiring. The CLI runs
  * the runner with an absent host, meaning every fixture with non-empty
  * `setup` skips cleanly with the "no host provided" reason — and
  * since every fixture in the current catalog declares setup, a
- * hostless CLI run skips them all and exits 2 by design. To get real
- * pass/fail signal against an implementation, consumers call
- * `runConformance({ host: myImpl })` programmatically and apply the
- * same guard: `result.failed.length > 0 || result.passed.length === 0`
- * is a red build. The CLI remains the lowest-friction wire-level
- * smoke check for setups where the server under test is provisioned
- * out-of-band rather than through a `ConformanceHost` injection.
+ * hostless CLI run with no catalog flag skips them all and exits 2 by
+ * design. To get real pass/fail signal against an implementation,
+ * consumers call `runConformance({ host: myImpl })` programmatically
+ * and apply the same guard:
+ * `result.failed.length > 0 || result.passed.length === 0` is a red
+ * build. The CLI remains the lowest-friction wire-level smoke check
+ * for setups where the server under test is provisioned out-of-band
+ * rather than through a `ConformanceHost` injection.
  */
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
 import { createDefaultReporter, formatFailures, formatSkips } from './reporter.js';
-import { runConformance } from './run-conformance.js';
+import { runConformance, } from './run-conformance.js';
 function parseArgs(argv) {
     let url;
     let auth;
     const only = [];
     let timeoutMs;
+    let registry;
+    let projector;
+    let transportProjector;
     let verbose = false;
     let help = false;
     for (let i = 0; i < argv.length; i += 1) {
@@ -62,6 +79,15 @@ function parseArgs(argv) {
                 if (Number.isNaN(timeoutMs))
                     throw new Error('--timeout-ms must be an integer');
                 break;
+            case '--registry':
+                registry = next();
+                break;
+            case '--projector':
+                projector = next();
+                break;
+            case '--transport-projector':
+                transportProjector = next();
+                break;
             case '--verbose':
             case '-v':
                 verbose = true;
@@ -74,7 +100,11 @@ function parseArgs(argv) {
                 throw new Error(`unknown flag '${flag}' — run with --help for usage`);
         }
     }
-    return { url, auth, only, timeoutMs, verbose, help };
+    return { url, auth, only, timeoutMs, registry, projector, transportProjector, verbose, help };
+}
+/** The message of a thrown value, without pretending every throw is an Error. */
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
 }
 function parseAuth(spec) {
     const idx = spec.indexOf(':');
@@ -89,10 +119,150 @@ function parseAuth(spec) {
         return { kind: 'session-cookie', cookie: value };
     throw new Error(`--auth kind '${kind}' is not recognized; supported: 'bearer', 'session-cookie'`);
 }
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === 'string');
+}
+/**
+ * The runtime twin of {@link RefusalRegistryRow} — a JSON registry is
+ * held to exactly the shape a programmatic caller has to satisfy at
+ * compile time. Value-level rules (recognized retry class, `fixBy` on
+ * `after-fix`, code equals key, non-empty surfaces) are NOT checked
+ * here: those are the registry-completeness catalog's pins, and a
+ * deliberately broken registry must stay expressible so they can
+ * grade it.
+ */
+function isRegistryRow(value) {
+    return (isRecord(value) &&
+        typeof value.code === 'string' &&
+        isStringArray(value.surfaces) &&
+        typeof value.retry === 'string' &&
+        (value.fixBy === undefined || typeof value.fixBy === 'string') &&
+        typeof value.emitter === 'string' &&
+        typeof value.description === 'string');
+}
+function parseRegistryView(text, path) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        throw new Error(`--registry ${path} is not JSON: ${errorMessage(err)}`);
+    }
+    if (!isRecord(parsed)) {
+        throw new Error(`--registry ${path} must be a JSON object of rows keyed by code`);
+    }
+    const rows = [];
+    for (const [code, row] of Object.entries(parsed)) {
+        if (!isRegistryRow(row)) {
+            throw new Error(`--registry ${path}: row '${code}' is not a registry row (needs string code, string[] surfaces, string retry, string emitter, string description, optional string fixBy)`);
+        }
+        rows.push([code, row]);
+    }
+    // fromEntries defines OWN properties — a row keyed `__proto__` stays a row.
+    return Object.fromEntries(rows);
+}
+function isRefusalInput(value) {
+    return (isRecord(value) &&
+        typeof value.code === 'string' &&
+        typeof value.message === 'string' &&
+        typeof value.fix === 'string' &&
+        typeof value.retry === 'string' &&
+        typeof value.handshake === 'string' &&
+        (value.balanceCentsAtCheck === undefined || typeof value.balanceCentsAtCheck === 'number'));
+}
+function isProjectedRefusalResult(value) {
+    return (isRecord(value) &&
+        typeof value.isError === 'boolean' &&
+        typeof value.text === 'string' &&
+        isRecord(value.structuredContent) &&
+        typeof value.structuredContent.outcome === 'string' &&
+        isRefusalInput(value.structuredContent.refusal) &&
+        typeof value.hasMeta === 'boolean' &&
+        isStringArray(value.identityFields));
+}
+function isTransportRefusalInput(value) {
+    return (isRecord(value) &&
+        typeof value.code === 'string' &&
+        typeof value.message === 'string' &&
+        typeof value.fix === 'string' &&
+        typeof value.retry === 'string');
+}
+function isProjectedTransportRefusal(value) {
+    return (isRecord(value) &&
+        typeof value.httpStatus === 'number' &&
+        isRecord(value.error) &&
+        typeof value.error.code === 'number' &&
+        typeof value.error.message === 'string' &&
+        isRecord(value.error.data) &&
+        isTransportRefusalInput(value.error.data.refusal));
+}
+/**
+ * Import an ES module at `path` (resolved against the working
+ * directory) and return the projector it exports —
+ * `export function project(...)` or the default export. The module is
+ * an external boundary: its export is checked to be a function here,
+ * and every value it returns is checked against the projection shape
+ * by `guard` before the catalog sees it, so a module that returns the
+ * wrong shape fails by flag name instead of typing its way into a
+ * grade. The catalogs grade that throw as a FAIL on the case in hand
+ * and keep grading the rest — never a crash of the run.
+ */
+async function loadProjector(flag, path, guard) {
+    const href = pathToFileURL(resolve(path)).href;
+    let mod;
+    try {
+        mod = await import(/* @vite-ignore */ href);
+    }
+    catch (err) {
+        throw new Error(`${flag} ${path} could not be imported: ${errorMessage(err)}`);
+    }
+    const candidate = mod.project ?? mod.default;
+    if (typeof candidate !== 'function') {
+        throw new Error(`${flag} ${path} must export \`project\` (or a default export) as a function`);
+    }
+    return (input) => {
+        const out = candidate(input);
+        if (out === null)
+            return null;
+        if (!guard(out)) {
+            throw new Error(`${flag} ${path} returned a value that is not a projection: ${JSON.stringify(out)}`);
+        }
+        return out;
+    };
+}
+/**
+ * Resolve the `--registry` / `--projector` / `--transport-projector`
+ * flags into the runner's catalog inputs. A flag that is absent yields
+ * no input, and the runner reports that catalog SKIPPED with the flag
+ * named. Every failure names the flag and the path.
+ */
+export async function loadCatalogInputs(paths) {
+    const inputs = {};
+    if (paths.registry !== undefined) {
+        let text;
+        try {
+            text = await readFile(resolve(paths.registry), 'utf8');
+        }
+        catch (err) {
+            throw new Error(`--registry ${paths.registry} could not be read: ${errorMessage(err)}`);
+        }
+        inputs.refusalRegistry = parseRegistryView(text, paths.registry);
+    }
+    if (paths.projector !== undefined) {
+        inputs.refusalProjector = await loadProjector('--projector', paths.projector, isProjectedRefusalResult);
+    }
+    if (paths.transportProjector !== undefined) {
+        inputs.transportRefusalProjector = await loadProjector('--transport-projector', paths.transportProjector, isProjectedTransportRefusal);
+    }
+    return inputs;
+}
 // =============================================================================
 // Entry point
 // =============================================================================
-const USAGE = `
+export const USAGE = `
 ggui-protocol-conformance — run the protocol conformance kit against a live server
 
 Usage:
@@ -109,17 +279,46 @@ Required:
                              session-cookie:COOKIE — Cookie header
 
 Options:
-  --only <fixture-name>    Run only this fixture. May be repeated.
+  --only <fixture-name>    Run only this fixture. May be repeated. Also
+                           filters the pure-function catalog rows, whose
+                           names are prefixed <catalog>/<case>.
   --timeout-ms <N>         Per-fixture observation window. Default 2000.
+  --registry <file.json>   The deployment's refusal-code registry, a JSON
+                           object keyed by code (grades registry-completeness).
+  --projector <module>     ES module whose \`project(refusal)\` — a named or
+                           default export — returns the SPEC §7.1 tool result
+                           for a refusal, or null when the code has no
+                           envelope on the render-gate surface (grades
+                           refusal-envelope).
+  --transport-projector <module>
+                           ES module whose \`project(refusal)\` — named or
+                           default export — returns the endpoint's
+                           { httpStatus, error } for a refusal, or null when
+                           the code has no transport envelope (grades
+                           transport-refusal).
   --verbose, -v            Print failure details + skip reasons at the end.
   --help, -h               Show this help.
 
+Pure-function catalogs (refusal-envelope, registry-completeness, transport-refusal):
+  These grade an in-process function and a data table, not the wire, so
+  a URL alone cannot reach them: the three flags above hand them their
+  inputs. A flag left out leaves its catalog on the scorecard as SKIPPED
+  with the flag named — an ungraded obligation stays visible rather
+  than vanishing. File and module paths resolve against the working
+  directory. A projector must be synchronous; one that throws, returns
+  undefined, or returns a non-projection is graded as a FAIL on that
+  case (exit 1) and the remaining cases are still graded — never a
+  crash. Catalog rows count as executed fixtures: a run given a
+  catalog flag can exit 0 while every wire fixture is SKIPPED, so read
+  the scorecard, not only the exit code, for a wire signal.
+
 Exit codes:
   0  — at least one fixture executed and none failed.
   1  — at least one fixture failed.
-  2  — invocation error (bad args, cannot reach server, etc.), or the
-       run executed zero fixtures (every fixture skipped) — a run that
-       proved nothing never reads as success.
+  2  — invocation error (bad args, unreadable registry or projector,
+       cannot reach server, etc.), or the run executed zero fixtures
+       (every fixture skipped) — a run that proved nothing never reads
+       as success.
 `.trimStart();
 async function main(argv) {
     let parsed;
@@ -127,7 +326,7 @@ async function main(argv) {
         parsed = parseArgs(argv);
     }
     catch (err) {
-        process.stderr.write(`error: ${String(err.message ?? err)}\n\n`);
+        process.stderr.write(`error: ${errorMessage(err)}\n\n`);
         process.stderr.write(USAGE);
         return 2;
     }
@@ -150,7 +349,16 @@ async function main(argv) {
         auth = parseAuth(parsed.auth);
     }
     catch (err) {
-        process.stderr.write(`error: ${String(err.message ?? err)}\n\n`);
+        process.stderr.write(`error: ${errorMessage(err)}\n\n`);
+        process.stderr.write(USAGE);
+        return 2;
+    }
+    let catalogInputs;
+    try {
+        catalogInputs = await loadCatalogInputs(parsed);
+    }
+    catch (err) {
+        process.stderr.write(`error: ${errorMessage(err)}\n\n`);
         process.stderr.write(USAGE);
         return 2;
     }
@@ -161,6 +369,7 @@ async function main(argv) {
         only: parsed.only !== undefined && parsed.only.length > 0 ? parsed.only : undefined,
         observationTimeoutMs: parsed.timeoutMs,
         reporter,
+        ...catalogInputs,
     });
     if (parsed.verbose) {
         const failures = formatFailures(result.failed);
@@ -192,11 +401,11 @@ function exitCodeForResult(result) {
     return 0;
 }
 // Immediately-invoked — this module IS the bin entry. Tests import
-// `parseArgs` / `parseAuth` / `exitCodeForResult` / `main` via named
-// exports without triggering the run.
+// `parseArgs` / `parseAuth` / `loadCatalogInputs` / `exitCodeForResult`
+// / `main` via named exports without triggering the run.
 if (isEntryPoint()) {
     main(process.argv.slice(2)).then((code) => process.exit(code), (err) => {
-        process.stderr.write(`fatal: ${String(err.message ?? err)}\n`);
+        process.stderr.write(`fatal: ${errorMessage(err)}\n`);
         process.exit(2);
     });
 }

package/dist/fixtures/index.d.ts

@@ -36,6 +36,15 @@
  * frame to drive — so they do NOT belong in this behavioral fixture
  * catalog.
  *
+ * The same is true of SPEC §7.1's PRE-GENERATION refusal obligations
+ * (ggui#786): what a server projects for a refusal
+ * (`../refusal-envelope-conformance`), what a deployment's closed
+ * refusal registry must satisfy (`../registry-completeness`), and what
+ * a per-app endpoint answers for an endpoint-level refusal
+ * (`../transport-refusal-conformance`, ggui#825) are two projections
+ * and a data check. None is WebSocket-observable, so none is
+ * registered below.
+ *
  * ## An MCP-binding driver EXISTS for `resources/read` — `../resource-read-conformance`
  *
  * This catalog used to declare the MCP-binding driver as missing. It is

package/dist/fixtures/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixtures/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+FG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQ5C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,4BAA4B,GAC5B,0BAA0B,GAC1B,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,QAAQ,EAAE,CAAC,CAOlF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,QAAQ,EAGwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixtures/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwGG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQ5C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,4BAA4B,GAC5B,0BAA0B,GAC1B,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,QAAQ,EAAE,CAAC,CAOlF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,QAAQ,EAGwB,CAAC"}

package/dist/fixtures/index.js

@@ -36,6 +36,15 @@
  * frame to drive — so they do NOT belong in this behavioral fixture
  * catalog.
  *
+ * The same is true of SPEC §7.1's PRE-GENERATION refusal obligations
+ * (ggui#786): what a server projects for a refusal
+ * (`../refusal-envelope-conformance`), what a deployment's closed
+ * refusal registry must satisfy (`../registry-completeness`), and what
+ * a per-app endpoint answers for an endpoint-level refusal
+ * (`../transport-refusal-conformance`, ggui#825) are two projections
+ * and a data check. None is WebSocket-observable, so none is
+ * registered below.
+ *
  * ## An MCP-binding driver EXISTS for `resources/read` — `../resource-read-conformance`
  *
  * This catalog used to declare the MCP-binding driver as missing. It is

package/dist/index.d.ts

@@ -24,6 +24,12 @@ export { gadgetResolutionCases, runResolutionConformance, } from './resolution-c
 export type { GadgetUrlEntry, ResolvedGadgetUrls, ResolutionConformanceCase, ResolutionConformanceMismatch, ResolutionConformanceResult, } from './resolution-conformance/index.js';
 export { bindingFilterCases, bindingResolutionCases, runBindingFilterCases, runBindingResolutionCases, } from './binding-conformance/index.js';
 export type { BindingFilterCase, BindingFilterMismatch, BindingFilterResult, BindingManifestEntry, BindingRejectCode, BindingResolutionCase, BindingResolutionMismatch, BindingResolutionOutcome, BindingResolutionResult, McpToolBindingDecl, McpToolFilterDecl, } from './binding-conformance/index.js';
+export { refusalEnvelopeCases, runRefusalEnvelopeConformance, } from './refusal-envelope-conformance/index.js';
+export type { PreGenerationRefusalInput, ProjectedRefusalResult, RefusalEnvelopeConformanceCase, RefusalEnvelopeConformanceResult, RefusalEnvelopeMismatch, } from './refusal-envelope-conformance/index.js';
+export { registryCompletenessPins, runRegistryCompletenessConformance, } from './registry-completeness/index.js';
+export type { RefusalRegistryRow, RefusalRegistryView, RegistryCompletenessMismatch, RegistryCompletenessPin, RegistryCompletenessResult, } from './registry-completeness/index.js';
+export { runTransportRefusalConformance, transportRefusalCases, } from './transport-refusal-conformance/index.js';
+export type { ProjectedTransportRefusal, TransportRefusalConformanceCase, TransportRefusalConformanceResult, TransportRefusalInput, TransportRefusalMismatch, } from './transport-refusal-conformance/index.js';
 export { declaresDeliveryChannel, renderLocatorUri, resourceReadCases, runResourceReadConformance, GGUI_RENDER_RESOURCE_URI, } from './resource-read-conformance/index.js';
 export type { DurableSubstrateWiring, JsonRpcErrorFrame, PreparedResourceReadScenario, ResourceReadCaller, ResourceReadConformanceCase, ResourceReadConformanceFailure, ResourceReadConformanceResult, ResourceReadConformanceSkip, ResourceReadErrorCodeDecl, ResourceReadExpectation, ResourceReadKey, ResourceReadLocator, ResourceReadOutcome, ResourceReadProbe, ResourceReadRenderMeta, ResourceReadScenario, ResourceReadScenarioDriver, ResourceReadSeed, ResourceReadServerShape, RunResourceReadConformanceOptions, } from './resource-read-conformance/index.js';
 export { loadFixture, listFixtures, loadAllFixtures } from './loader.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,YAAY,EAEV,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,EAEV,QAAQ,EACR,qBAAqB,EAErB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAEhB,YAAY,EAEZ,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,aAAa,EACb,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,eAAe,EAEf,SAAS,IAAI,aAAa,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,iBAAiB,EAEjB,YAAY,IAAI,gBAAgB,GACjC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AAQxC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EAInB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,YAAY,EAEV,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,EAEV,QAAQ,EACR,qBAAqB,EAErB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAEhB,YAAY,EAEZ,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,aAAa,EACb,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,eAAe,EAEf,SAAS,IAAI,aAAa,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,iBAAiB,EAEjB,YAAY,IAAI,gBAAgB,GACjC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,yBAAyB,EACzB,sBAAsB,EACtB,8BAA8B,EAC9B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AAMjD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,iCAAiC,EACjC,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAQlD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EAInB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -41,6 +41,23 @@ export { gadgetResolutionCases, runResolutionConformance, } from './resolution-c
 // filter semantics (`tool=` / `server=` case-sensitive exact,
 // AND-composed per entry).
 export { bindingFilterCases, bindingResolutionCases, runBindingFilterCases, runBindingResolutionCases, } from './binding-conformance/index.js';
+// Refusal-envelope conformance — the tool result a server MUST emit for
+// a PRE-GENERATION refusal (SPEC §7.1's refused arm): an in-result
+// `isError`, the code leading the text, `{outcome, refusal}` and
+// nothing else on structuredContent, no `_meta`, and no envelope at all
+// for a code whose surfaces exclude the render gate.
+export { refusalEnvelopeCases, runRefusalEnvelopeConformance, } from './refusal-envelope-conformance/index.js';
+// Registry-completeness — the structural obligations a deployment's
+// closed refusal-code registry MUST satisfy. Grades DATA rather than a
+// function: `surfaces` non-empty, `code === key`, every `after-fix`
+// entry naming who acts, and `retry` inside the closed four-value set.
+export { registryCompletenessPins, runRegistryCompletenessConformance, } from './registry-completeness/index.js';
+// Transport-refusal — the JSON-RPC error a per-app MCP endpoint answers
+// with when it refuses a request for a typed reason (ggui#825): HTTP 403,
+// `-32003` / `App not found` (ggui#836), `data.refusal` carrying the registry
+// projection without the render-only fields; a code whose surfaces
+// exclude `mcp-endpoint` projects to nothing.
+export { runTransportRefusalConformance, transportRefusalCases, } from './transport-refusal-conformance/index.js';
 // Resource-read conformance — the kit's first MCP-binding driver, and
 // it binds `resources/read` ONLY (`tools/call` has none). A read of a
 // render locator has exactly two exits: a result whose contents

package/dist/json-equal.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Structural equality over plain JSON data — the one comparator every
+ * pure-function catalog grades with (key order ignored, arrays ordered).
+ */
+export declare function jsonEqual(a: unknown, b: unknown): boolean;
+//# sourceMappingURL=json-equal.d.ts.map

package/dist/json-equal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-equal.d.ts","sourceRoot":"","sources":["../src/json-equal.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAezD"}

package/dist/json-equal.js

@@ -0,0 +1,23 @@
+/**
+ * Structural equality over plain JSON data — the one comparator every
+ * pure-function catalog grades with (key order ignored, arrays ordered).
+ */
+export function jsonEqual(a, b) {
+    if (a === b)
+        return true;
+    if (typeof a !== 'object' || typeof b !== 'object' || a === null || b === null) {
+        return false;
+    }
+    if (Array.isArray(a) || Array.isArray(b)) {
+        if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length)
+            return false;
+        return a.every((item, index) => jsonEqual(item, b[index]));
+    }
+    const left = a;
+    const right = b;
+    const leftKeys = Object.keys(left).sort();
+    const rightKeys = Object.keys(right).sort();
+    if (!jsonEqual(leftKeys, rightKeys))
+        return false;
+    return leftKeys.every((key) => jsonEqual(left[key], right[key]));
+}