@ggui-ai/protocol-conformance 0.14.0 → 0.16.0

package/dist/transport-refusal-conformance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/transport-refusal-conformance/index.ts"],"names":[],"mappings":"AAyBA;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;SAAE,CAAC;KAC5D,CAAC;CACH;AAED,qEAAqE;AACrE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACnD;AAED,eAAO,MAAM,qBAAqB,EAAE,SAAS,+BAA+B,EAG3E,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACpD,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,GAAG,MAAM,CAAC;CAC5D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACtD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,yBAAyB,GAAG,IAAI,GAC5E,iCAAiC,CAiBnC"}

package/dist/transport-refusal-conformance/index.js

@@ -0,0 +1,52 @@
+/**
+ * Transport-refusal conformance catalog (ggui#825) — grades a deployment's
+ * PER-APP ENDPOINT refusal projector: the function that turns a registry
+ * refusal into the JSON-RPC error a per-app MCP endpoint answers with when
+ * it refuses a request for a typed reason, on ANY method (`initialize`
+ * included).
+ *
+ * The contract it makes observable: a deprovisioned app answers HTTP 403
+ * with `{ code: -32003, message: "App not found", data: { refusal } }` where
+ * `refusal` is the registry projection without the render-only fields
+ * (`code`, `message`, `fix`, `retry`, `appId`); an authorization failure that is
+ * NOT a registry state answers 403 with `-32007` and no `data` — the untyped
+ * arms deliberately indistinguishable among themselves, so a client never
+ * learns which one it hit (codes ruled in ggui#836).
+ *
+ * Each case ships as raw JSON under `./cases/`. The kit never imports a
+ * concrete server: the adopter supplies the projector, the catalog grades
+ * it, and a code whose `surfaces` exclude `mcp-endpoint` must project to
+ * `null` (no transport envelope exists for it).
+ */
+import refuseDeprovisionedEndpoint from './cases/refuse-deprovisioned-endpoint.json' with { type: 'json' };
+import refuseRenderOnlyCode from './cases/refuse-render-only-code.json' with { type: 'json' };
+import { jsonEqual } from '../json-equal.js';
+export const transportRefusalCases = [
+    refuseDeprovisionedEndpoint,
+    refuseRenderOnlyCode,
+];
+/**
+ * Grade a per-app endpoint refusal projector against the catalog. Pure
+ * and synchronous: no server, no transport — the deterministic
+ * projection is the whole obligation.
+ */
+export function runTransportRefusalConformance(project) {
+    const passed = [];
+    const failed = [];
+    for (const testCase of transportRefusalCases) {
+        let actual;
+        try {
+            actual = project(testCase.refusal);
+        }
+        catch (error) {
+            actual = error instanceof Error ? error.message : String(error);
+        }
+        if (typeof actual !== 'string' && jsonEqual(actual, testCase.expect)) {
+            passed.push(testCase.name);
+        }
+        else {
+            failed.push({ name: testCase.name, expected: testCase.expect, actual });
+        }
+    }
+    return { passed, failed };
+}

package/dist/types.d.ts

@@ -167,7 +167,7 @@ export interface CreateGguiSessionStep {
     /** Opaque render id the host allocates. Downstream steps + the
      *  fixture's `inputEnvelope` reference it by value. */
     readonly sessionId: string;
-    /** Optional app (tenant) id the render scopes to. Defaults to the
+    /** Optional app id the render scopes to. Defaults to the
      *  host's implementation-defined "default app". */
     readonly appId?: string;
     /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ggui-ai/protocol-conformance",
-  "version": "0.14.0",
-  "description": "Conformance test kit for the ggui protocol. Drives a behavioral fixture catalog against a live implementation over WebSocket, a resources/read catalog against a live MCP server, and eight pure-function catalogs (schema, registration, resolution, binding, props-schema, host-helper, refusal-envelope, registry-completeness) for the gadget, tool-binding, schema-precise-render, host-helper and pre-generation-refusal obligations, reporting a scorecard-style pass / fail / skip. MCP builders adopt this kit to prove their implementation is protocol-conformant.",
+  "version": "0.16.0",
+  "description": "Conformance test kit for the ggui protocol. Drives a behavioral fixture catalog against a live implementation over WebSocket, a resources/read catalog against a live MCP server, and nine pure-function catalogs (schema, registration, resolution, binding, props-schema, host-helper, refusal-envelope, registry-completeness, transport-refusal) for the gadget, tool-binding, schema-precise-render, host-helper and pre-generation-refusal obligations, reporting a scorecard-style pass / fail / skip. MCP builders adopt this kit to prove their implementation is protocol-conformant.",
   "license": "Apache-2.0",
   "keywords": [
     "ggui",
@@ -51,6 +51,11 @@
       "import": "./dist/resource-read-conformance/index.js",
       "default": "./dist/resource-read-conformance/index.js"
     },
+    "./theme-binding-conformance": {
+      "types": "./dist/theme-binding-conformance/index.d.ts",
+      "import": "./dist/theme-binding-conformance/index.js",
+      "default": "./dist/theme-binding-conformance/index.js"
+    },
     "./binding-conformance": {
       "types": "./dist/binding-conformance/index.d.ts",
       "import": "./dist/binding-conformance/index.js",
@@ -71,15 +76,25 @@
       "import": "./dist/refusal-envelope-conformance/index.js",
       "default": "./dist/refusal-envelope-conformance/index.js"
     },
+    "./domain-error-conformance": {
+      "types": "./dist/domain-error-conformance/index.d.ts",
+      "import": "./dist/domain-error-conformance/index.js",
+      "default": "./dist/domain-error-conformance/index.js"
+    },
     "./registry-completeness": {
       "types": "./dist/registry-completeness/index.d.ts",
       "import": "./dist/registry-completeness/index.js",
       "default": "./dist/registry-completeness/index.js"
+    },
+    "./transport-refusal-conformance": {
+      "types": "./dist/transport-refusal-conformance/index.d.ts",
+      "import": "./dist/transport-refusal-conformance/index.js",
+      "default": "./dist/transport-refusal-conformance/index.js"
     }
   },
   "dependencies": {
     "ws": "^8.20.1",
-    "@ggui-ai/protocol": "0.14.0"
+    "@ggui-ai/protocol": "0.16.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/dist/fixtures/subscribe-tenancy/index.d.ts

@@ -1,6 +0,0 @@
-import type { TestCase } from '../../types.js';
-/** All fixtures asserting subscribe-time tenancy (SPEC §12.2 field
- *  table — identity-default resolution on absent `appId` — and
- *  §12.2.3 `APP_MISMATCH`). */
-export declare const subscribeTenancyFixtures: readonly TestCase[];
-//# sourceMappingURL=index.d.ts.map

package/dist/fixtures/subscribe-tenancy/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/fixtures/subscribe-tenancy/index.ts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;+BAE+B;AAC/B,eAAO,MAAM,wBAAwB,EAAE,SAAS,QAAQ,EAGvD,CAAC"}