@ggui-ai/protocol-conformance 0.15.0 → 0.16.0

package/README.md

@@ -19,7 +19,7 @@ A fifth surface — the **Path-B browser-host driver** for DOM-level claims (`bo
 
 **The behavioral fixture catalog is WebSocket-only.** The canonical ggui live-channel transport is WS (see SPEC §12 Transport Bindings). `TransportConfig` is shaped as an extensibly-closed union so later live-channel transports (HTTP long-poll) can be added without breaking the public API.
 
-The MCP surface is graded separately, by catalog rather than by transport config — see `resource-read-conformance` below. Its cases are deliberately NOT registered in `fixturesByContract`: everything in that map is driven over a WebSocket, so an MCP case there would be a permanent skip on every WS run, which is the false gate the kit's exact skip-set pinning exists to prevent. `resources/read` is the only MCP method bound today; `tools/call` has no driver yet.
+The MCP surface is graded separately, by catalog rather than by transport config — see `resource-read-conformance` below. Its cases are deliberately NOT registered in `fixturesByContract`: everything in that map is driven over a WebSocket, so an MCP case there would be a permanent skip on every WS run, which is the false gate the kit's exact skip-set pinning exists to prevent. `resources/read` and — since ggui#880 — one `tools/call` catalog (`domain-error`, SPEC §7.9 Plane 2) are the MCP methods bound today.
 
 ## Path-A vs Path-B matchability
 
@@ -61,7 +61,7 @@ Each catalog ships its cases as raw JSON so a non-TypeScript implementer can gra
 - **`@ggui-ai/protocol-conformance/host-helper-conformance`** — which render coordinates a HOST-HELPER library MUST extract from a `tools/call` result, and which malformed results it MUST decline rather than guess at.
 - **`@ggui-ai/protocol-conformance/refusal-envelope-conformance`** — the tool result a server MUST project for a PRE-GENERATION refusal (SPEC §7.1's refused arm): an in-result `isError` (never a throw), `content[0].text` leading with the code, `structuredContent` carrying `{outcome: 'refused', refusal}` and nothing else, no `_meta` — and no envelope at all for a registered code whose surfaces exclude the render gate.
 - **`@ggui-ai/protocol-conformance/registry-completeness`** — the structural obligations a deployment's closed refusal-code registry MUST satisfy: `surfaces` non-empty, `code === key`, every `after-fix` entry naming who acts (`fixBy`), and `retry` inside the closed four-value set. Grades DATA rather than a function — the caller passes their registry.
-- **`@ggui-ai/protocol-conformance/transport-refusal-conformance`** — the JSON-RPC error a per-app MCP endpoint MUST answer with when it refuses a request for a typed reason (SPEC §7.1's endpoint-level refusal, ggui#825): HTTP 403 with `{ code: -32003, message: 'App not found', data: { refusal } }`, where `refusal` is the registry projection without the render-only fields (`code`, `message`, `fix`, `retry`) — and no envelope at all for a registered code whose surfaces exclude `mcp-endpoint` (an untyped authorization failure answers 403 with `-32001` and no `data`, by contract — ggui#836). Runner: `runTransportRefusalConformance(project)`; folded into `runConformance()` via `transportRefusalProjector`.
+- **`@ggui-ai/protocol-conformance/transport-refusal-conformance`** — the JSON-RPC error a per-app MCP endpoint MUST answer with when it refuses a request for a typed reason (SPEC §7.1's endpoint-level refusal, ggui#825): HTTP 403 with `{ code: -32003, message: 'App not found', data: { refusal } }`, where `refusal` is the registry projection without the render-only fields (`code`, `message`, `fix`, `retry`) — and no envelope at all for a registered code whose surfaces exclude `mcp-endpoint` (an untyped authorization failure answers 403 with `-32007` and no `data`, by contract — ggui#836). Runner: `runTransportRefusalConformance(project)`; folded into `runConformance()` via `transportRefusalProjector`.
 
 ```ts
 import { runSchemaConformance } from "@ggui-ai/protocol-conformance/schema-conformance";
@@ -116,25 +116,33 @@ The catalog grades all four failure classes (`NOT_FOUND` on `-32002`; `BLUEPRINT
 
 It deliberately does **not** grade: the order in which a substrate-less server answers (`NOT_SUPPORTED` describes the deployment, so answering it immediately is correct); `detail` wording on any code; the `NOT_FOUND` message literal (its _constancy_ is what is normative); internal-error message text; the number a URI naming no locator receives (that belongs to the transport binding — only the negative is graded, that it must not be one of the four); and the shell's markup (success is graded on the projected render meta, never on DOM shape).
 
+## Domain-error conformance — the `tools/call` binding (SPEC §7.9 Plane 2, ggui#880)
+
+The kit's first `tools/call` driver. A Plane-2 failure — a missing session or handshake, props that do not satisfy the contract, an undeclared channel — is a tool-execution error, so it is a tool RESULT with `isError: true` (never a JSON-RPC error frame) whose `content[0].text` LEADS with the registered slug: `<code>: <detail>`. No `structuredContent`, no `_meta`. A raw MCP agent branches on `text.startsWith(code + ': ')` for a code in `@ggui-ai/protocol`'s `DOMAIN_ERROR_CODES` and on nothing else.
+
+Vendor-neutral like `resources/read`: the kit imports no server. The adopter supplies a **driver** — `toolCallDriver` on `runConformance()`, or `--tool-call-driver <module>` on the CLI (an ES module exporting `drive(scenario)` or a default) — that performs ONE `tools/call` against the deployment and returns the raw result the MCP client received, or `null` when the tool is not bound there (that case is SKIPPED, named). The kit owns the scenarios and every assertion. Six no-setup cases under `src/domain-error-conformance/cases/`: an unknown `handshakeId` on `ggui_render` (`handshake_not_found`) and an unknown `sessionId` on `ggui_consume` / `ggui_get_session` / `ggui_update` / `ggui_amend` / `ggui_emit` (`session_not_found`). Each is graded on the raw result — `isError`, `content-text`, `slug-leads`, `no-structuredContent`, `no-meta` — and reported as `domain-error/<case>`; a driver that throws fails that case only.
+
+The catalog exists for one receipt: before the slug led the text, every first-party server failed every case on `slug-leads` (executed, ggui#880). `src/cli-samples/tool-call-driver.mjs` is a spec-correct sample of what the flag imports.
+
 ## Conformance status
 
 What is actually graded against shipping code today, and what is still awaiting a driver. This is an inventory, not a roadmap — a mechanism is listed as proven only if a test in the repo drives it against the real implementation on every push.
 
 Every test below is a plain `*.test.ts` inside a package's `src/`, so it runs in that package's ordinary vitest suite. The ggui repo's per-push CI runs `turbo run test` across all non-e2e packages, so **all twelve rows below are gated on every push** — the kit needs no dedicated workflow, and adopters wiring it into their own CI need nothing more than their existing unit-test task.
 
-| Obligation                                                              | Graded against                                                                                                                                                                                                                                                                 | Driver                                                                                                                |
-| ----------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------- |
-| Gadget wire schema (§7.7.2)                                             | the shipping `@ggui-ai/protocol` `clientCapabilitiesSpecSchema`                                                                                                                                                                                                                | this kit's own `src/schema-conformance/schema-conformance.test.ts`                                                    |
-| Registration gate (§7.7.3, §7.9)                                        | the shipping gate trio in `@ggui-ai/mcp-server-handlers`                                                                                                                                                                                                                       | `mcp-server-handlers/src/renders/assert-gadgets.conformance.test.ts`                                                  |
-| Bundle-URL resolution (§7.7.2)                                          | the shipping `resolveGadgetUrls` in `@ggui-ai/mcp-server-handlers`                                                                                                                                                                                                             | `mcp-server-handlers/src/renders/resolve-gadget-urls.conformance.test.ts`                                             |
-| Path-A WS fixtures — first-party                                        | the real `@ggui-ai/mcp-server` GguiSession channel, booted in-process on an ephemeral port                                                                                                                                                                                     | `mcp-server/src/ggui-session-channel.conformance.test.ts` — **24 pass / 12 skip / 0 fail**                            |
-| Path-A WS fixtures — vendor-neutral                                     | `@ggui-ai/protocol-reference-server`                                                                                                                                                                                                                                           | `protocol-reference-server/src/conformance.test.ts` — **19 pass / 5 skip / 0 fail**                                   |
-| `resources/read` typed failures + mount invariant                       | the shipping `registerGguiRenderResourceTemplate` in `@ggui-ai/mcp-server`                                                                                                                                                                                                     | `mcp-server/src/mcp-apps-outbound.resource-read.conformance.test.ts` — **12 pass / 0 skip / 0 fail**                  |
-| Tool-binding resolution — declared wins, contract derivation (§7.7.4.1) | the shipping `resolveMcpToolBindings` in `@ggui-ai/artifact-manifest`                                                                                                                                                                                                          | `artifact-manifest/src/mcp-tool-bindings.conformance.test.ts`                                                         |
-| Tool-binding search filters — `tool=` / `server=` semantics (§7.7.4.1)  | the shipping `matchesMcpToolFilters` in `@ggui-ai/registry-core`                                                                                                                                                                                                               | `registry-core/src/mcp-tool-filters.conformance.test.ts`                                                              |
-| Pre-generation refusal envelope (§7.1, refused arm)                     | `projectRenderRefusal` in `@ggui-ai/protocol` — the one source both the shipping `ggui_render` handler (`@ggui-ai/mcp-server-handlers`) and `@ggui-ai/protocol-reference-server` answer through                                                                                | `mcp-server-handlers/src/renders/render-refusal-projection.conformance.test.ts`                                       |
-| Refusal-registry completeness (ggui#786 ruling 5b)                      | the shipping `PRE_GENERATION_REFUSAL_CODES` in `@ggui-ai/protocol`                                                                                                                                                                                                             | this kit's own `src/registry-completeness/registry-completeness.test.ts`                                              |
-| Endpoint-level refusal (§7.1, `mcp-endpoint` surface, ggui#825)         | the catalog's kit-local reference projector only — no shipping deployment projector is graded yet: the OSS route is generic (`errorMapper`), the first-party server and the reference server supply no projector (SKIPPED, named), and the pod's mapper lands after this slice | this kit's own `src/transport-refusal-conformance/transport-refusal-conformance.test.ts` (coherence + discrimination) |
+| Obligation                                                              | Graded against                                                                                                                                                                                                                                                                                | Driver                                                                                                                |
+| ----------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| Gadget wire schema (§7.7.2)                                             | the shipping `@ggui-ai/protocol` `clientCapabilitiesSpecSchema`                                                                                                                                                                                                                               | this kit's own `src/schema-conformance/schema-conformance.test.ts`                                                    |
+| Registration gate (§7.7.3, §7.9)                                        | the shipping gate trio in `@ggui-ai/mcp-server-handlers`                                                                                                                                                                                                                                      | `mcp-server-handlers/src/renders/assert-gadgets.conformance.test.ts`                                                  |
+| Bundle-URL resolution (§7.7.2)                                          | the shipping `resolveGadgetUrls` in `@ggui-ai/mcp-server-handlers`                                                                                                                                                                                                                            | `mcp-server-handlers/src/renders/resolve-gadget-urls.conformance.test.ts`                                             |
+| Path-A WS fixtures — first-party                                        | the real `@ggui-ai/mcp-server` GguiSession channel, booted in-process on an ephemeral port                                                                                                                                                                                                    | `mcp-server/src/ggui-session-channel.conformance.test.ts` — **24 pass / 12 skip / 0 fail**                            |
+| Path-A WS fixtures — vendor-neutral                                     | `@ggui-ai/protocol-reference-server`                                                                                                                                                                                                                                                          | `protocol-reference-server/src/conformance.test.ts` — **19 pass / 5 skip / 0 fail**                                   |
+| `resources/read` typed failures + mount invariant                       | the shipping `registerGguiRenderResourceTemplate` in `@ggui-ai/mcp-server`                                                                                                                                                                                                                    | `mcp-server/src/mcp-apps-outbound.resource-read.conformance.test.ts` — **12 pass / 0 skip / 0 fail**                  |
+| Tool-binding resolution — declared wins, contract derivation (§7.7.4.1) | the shipping `resolveMcpToolBindings` in `@ggui-ai/artifact-manifest`                                                                                                                                                                                                                         | `artifact-manifest/src/mcp-tool-bindings.conformance.test.ts`                                                         |
+| Tool-binding search filters — `tool=` / `server=` semantics (§7.7.4.1)  | the shipping `matchesMcpToolFilters` in `@ggui-ai/registry-core`                                                                                                                                                                                                                              | `registry-core/src/mcp-tool-filters.conformance.test.ts`                                                              |
+| Pre-generation refusal envelope (§7.1, refused arm)                     | `projectRenderRefusal` in `@ggui-ai/protocol` — the one source both the shipping `ggui_render` handler (`@ggui-ai/mcp-server-handlers`) and `@ggui-ai/protocol-reference-server` answer through                                                                                               | `mcp-server-handlers/src/renders/render-refusal-projection.conformance.test.ts`                                       |
+| Refusal-registry completeness (ggui#786 ruling 5b)                      | the shipping `PRE_GENERATION_REFUSAL_CODES` in `@ggui-ai/protocol`                                                                                                                                                                                                                            | this kit's own `src/registry-completeness/registry-completeness.test.ts`                                              |
+| Endpoint-level refusal (§7.1, `mcp-endpoint` surface, ggui#825)         | the catalog's kit-local reference projector only — no shipping deployment projector is graded yet: the OSS route is generic (`errorMapper`), the first-party server and the reference server supply no projector (SKIPPED, named), and a hosted deployment's projector lands after this slice | this kit's own `src/transport-refusal-conformance/transport-refusal-conformance.test.ts` (coherence + discrimination) |
 
 Both WS drivers pin their pass set _and_ their skip set as exact sets, and the resource-read driver pins its skip set as exactly empty. A fixture silently degrading to a skip fails the build, and so does a skipped fixture that quietly starts passing — a skip set that can grow unnoticed is a false gate, and re-pinning it is meant to be a deliberate act.
 

package/dist/cli.d.ts

@@ -12,21 +12,25 @@ interface ParsedArgs {
     readonly projector?: string;
     /** Path to an ES module exporting the endpoint-level refusal projector. */
     readonly transportProjector?: string;
+    /** Path to an ES module exporting a `tools/call` driver (SPEC §7.9 Plane 2, ggui#880). */
+    readonly toolCallDriver?: string;
     readonly verbose: boolean;
     readonly help: boolean;
 }
 declare function parseArgs(argv: readonly string[]): ParsedArgs;
 declare function parseAuth(spec: string): AuthConfig;
 /** The three optional inputs a CLI run can hand the pure-function catalogs. */
-export type CatalogInputs = Pick<RunConformanceConfig, 'refusalRegistry' | 'refusalProjector' | 'transportRefusalProjector'>;
+export type CatalogInputs = Pick<RunConformanceConfig, 'refusalRegistry' | 'refusalProjector' | 'transportRefusalProjector' | 'toolCallDriver'>;
 /** The flag values that name where each catalog input comes from. */
 export interface CatalogInputPaths {
     readonly registry?: string | undefined;
     readonly projector?: string | undefined;
     readonly transportProjector?: string | undefined;
+    readonly toolCallDriver?: string | undefined;
 }
 /**
- * Resolve the `--registry` / `--projector` / `--transport-projector`
+ * Resolve the `--registry` / `--projector` / `--transport-projector` /
+ * `--tool-call-driver`
  * flags into the runner's catalog inputs. A flag that is absent yields
  * no input, and the runner reports that catalog SKIPPED with the flag
  * named. Every failure names the flag and the path.

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAsDA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,iBAAS,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA0DtD;AAOD,iBAAS,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAY3C;AAMD,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,oBAAoB,EACpB,iBAAiB,GAAG,kBAAkB,GAAG,2BAA2B,CACrE,CAAC;AAEF,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClD;AA4ID;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CA6BxF;AAMD,eAAO,MAAM,KAAK,QAyDL,CAAC;AAEd,iBAAe,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoE5D;AAED;;;;;;;GAOG;AACH,iBAAS,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAI/D;AA+BD,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA6DA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7C,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,0FAA0F;IAC1F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,iBAAS,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA8DtD;AAOD,iBAAS,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAY3C;AAMD,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,oBAAoB,EACpB,iBAAiB,GAAG,kBAAkB,GAAG,2BAA2B,GAAG,gBAAgB,CACxF,CAAC;AAEF,qEAAqE;AACrE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AA6KD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqCxF;AAMD,eAAO,MAAM,KAAK,QA8DL,CAAC;AAEd,iBAAe,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoE5D;AAED;;;;;;;GAOG;AACH,iBAAS,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAI/D;AA+BD,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC"}

package/dist/cli.js

@@ -19,7 +19,9 @@
  * The three PURE-FUNCTION catalogs (refusal-envelope,
  * registry-completeness, transport-refusal) grade an in-process
  * function and a data table, not the wire: `--registry <file.json>`,
- * `--projector <module>` and `--transport-projector <module>` hand
+ * `--projector <module>`, `--transport-projector <module>` and
+ * `--tool-call-driver <module>` (the domain-error catalog, the kit's
+ * first tools/call driver, ggui#880) hand
  * them their inputs (ggui#803 leg 3). A flag left out leaves its
  * catalog SKIPPED with the flag named, never silently absent. Catalog
  * rows count as executed fixtures, so a run given a catalog flag can
@@ -42,6 +44,7 @@
 import { readFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { isRawToolCallResult, } from './domain-error-conformance/index.js';
 import { createDefaultReporter, formatFailures, formatSkips } from './reporter.js';
 import { runConformance, } from './run-conformance.js';
 function parseArgs(argv) {
@@ -51,6 +54,7 @@ function parseArgs(argv) {
     let timeoutMs;
     let registry;
     let projector;
+    let toolCallDriver;
     let transportProjector;
     let verbose = false;
     let help = false;
@@ -88,6 +92,9 @@ function parseArgs(argv) {
             case '--transport-projector':
                 transportProjector = next();
                 break;
+            case '--tool-call-driver':
+                toolCallDriver = next();
+                break;
             case '--verbose':
             case '-v':
                 verbose = true;
@@ -100,7 +107,7 @@ function parseArgs(argv) {
                 throw new Error(`unknown flag '${flag}' — run with --help for usage`);
         }
     }
-    return { url, auth, only, timeoutMs, registry, projector, transportProjector, verbose, help };
+    return { url, auth, only, timeoutMs, registry, projector, transportProjector, toolCallDriver, verbose, help };
 }
 /** The message of a thrown value, without pretending every throw is an Error. */
 function errorMessage(err) {
@@ -188,7 +195,8 @@ function isTransportRefusalInput(value) {
         typeof value.code === 'string' &&
         typeof value.message === 'string' &&
         typeof value.fix === 'string' &&
-        typeof value.retry === 'string');
+        typeof value.retry === 'string' &&
+        typeof value.appId === 'string');
 }
 function isProjectedTransportRefusal(value) {
     return (isRecord(value) &&
@@ -234,7 +242,37 @@ async function loadProjector(flag, path, guard) {
     };
 }
 /**
- * Resolve the `--registry` / `--projector` / `--transport-projector`
+ * Like {@link loadProjector} for a `tools/call` DRIVER: the export is
+ * `drive` (or the default export), it may be async, and `null` means
+ * "the tool is not bound on this deployment" (the catalog SKIPS that
+ * case, named). Every other value is held to the raw-result shape.
+ */
+async function loadDriver(flag, path, guard) {
+    const href = pathToFileURL(resolve(path)).href;
+    let mod;
+    try {
+        mod = await import(/* @vite-ignore */ href);
+    }
+    catch (err) {
+        throw new Error(`${flag} ${path} could not be imported: ${errorMessage(err)}`);
+    }
+    const candidate = mod.drive ?? mod.default;
+    if (typeof candidate !== 'function') {
+        throw new Error(`${flag} ${path} must export \`drive\` (or a default export) as a function`);
+    }
+    return async (input) => {
+        const out = await candidate(input);
+        if (out === null)
+            return null;
+        if (!guard(out)) {
+            throw new Error(`${flag} ${path} returned a value that is not a raw tools/call result: ${JSON.stringify(out)}`);
+        }
+        return out;
+    };
+}
+/**
+ * Resolve the `--registry` / `--projector` / `--transport-projector` /
+ * `--tool-call-driver`
  * flags into the runner's catalog inputs. A flag that is absent yields
  * no input, and the runner reports that catalog SKIPPED with the flag
  * named. Every failure names the flag and the path.
@@ -257,6 +295,9 @@ export async function loadCatalogInputs(paths) {
     if (paths.transportProjector !== undefined) {
         inputs.transportRefusalProjector = await loadProjector('--transport-projector', paths.transportProjector, isProjectedTransportRefusal);
     }
+    if (paths.toolCallDriver !== undefined) {
+        inputs.toolCallDriver = await loadDriver('--tool-call-driver', paths.toolCallDriver, isRawToolCallResult);
+    }
     return inputs;
 }
 // =============================================================================
@@ -296,16 +337,21 @@ Options:
                            { httpStatus, error } for a refusal, or null when
                            the code has no transport envelope (grades
                            transport-refusal).
+  --tool-call-driver <module>
+                           ES module exporting drive(scenario) (or default):
+                           performs ONE tools/call and returns the raw result
+                           (null = tool not bound). Grades the domain-error
+                           catalog — SPEC §7.9 Plane 2 on the wire (ggui#880).
   --verbose, -v            Print failure details + skip reasons at the end.
   --help, -h               Show this help.
 
 Pure-function catalogs (refusal-envelope, registry-completeness, transport-refusal):
   These grade an in-process function and a data table, not the wire, so
-  a URL alone cannot reach them: the three flags above hand them their
+  a URL alone cannot reach them: the four flags above hand them their
   inputs. A flag left out leaves its catalog on the scorecard as SKIPPED
   with the flag named — an ungraded obligation stays visible rather
   than vanishing. File and module paths resolve against the working
-  directory. A projector must be synchronous; one that throws, returns
+  directory. A projector is synchronous and a tools/call driver may be async; one that throws, returns
   undefined, or returns a non-projection is graded as a FAIL on that
   case (exit 1) and the remaining cases are still graded — never a
   crash. Catalog rows count as executed fixtures: a run given a

package/dist/domain-error-conformance/cases/amend-unknown-session.json

@@ -0,0 +1,9 @@
+{
+    "name": "amend-unknown-session",
+    "description": "An in-place amend on an unknown sessionId: `session_not_found` leads the text; nothing was mutated.",
+    "scenario": {
+        "tool": "ggui_amend",
+        "args": { "sessionId": "render_does_not_exist", "kind": "replace", "props": {} }
+    },
+    "expect": { "code": "session_not_found" }
+}

package/dist/domain-error-conformance/cases/consume-unknown-session.json

@@ -0,0 +1,9 @@
+{
+    "name": "consume-unknown-session",
+    "description": "A sessionId no session this caller can reach carries: `session_not_found` leads the text of the consume result — the same slug for never-minted, expired, closed and cross-app ids.",
+    "scenario": {
+        "tool": "ggui_consume",
+        "args": { "sessionId": "render_does_not_exist", "timeout": 0 }
+    },
+    "expect": { "code": "session_not_found" }
+}

package/dist/domain-error-conformance/cases/emit-unknown-session.json

@@ -0,0 +1,9 @@
+{
+    "name": "emit-unknown-session",
+    "description": "A stream emit on an unknown sessionId: `session_not_found` leads the text before any channel is checked.",
+    "scenario": {
+        "tool": "ggui_emit",
+        "args": { "sessionId": "render_does_not_exist", "channel": "x", "payload": {} }
+    },
+    "expect": { "code": "session_not_found" }
+}

package/dist/domain-error-conformance/cases/get-session-unknown-session.json

@@ -0,0 +1,6 @@
+{
+    "name": "get-session-unknown-session",
+    "description": "The projection read on an unknown sessionId: `session_not_found` leads the text; no JSON-RPC error frame, no structuredContent.",
+    "scenario": { "tool": "ggui_get_session", "args": { "sessionId": "render_does_not_exist" } },
+    "expect": { "code": "session_not_found" }
+}

package/dist/domain-error-conformance/cases/render-unknown-handshake.json

@@ -0,0 +1,6 @@
+{
+    "name": "render-unknown-handshake",
+    "description": "A handshakeId nothing minted: the render fails as not found — `handshake_not_found` leads the text. No handshake is consumed, nothing is committed; the caller re-handshakes.",
+    "scenario": { "tool": "ggui_render", "args": { "handshakeId": "h_does_not_exist", "props": {} } },
+    "expect": { "code": "handshake_not_found" }
+}

package/dist/domain-error-conformance/cases/update-unknown-session.json

@@ -0,0 +1,9 @@
+{
+    "name": "update-unknown-session",
+    "description": "A history-advancing update on an unknown sessionId: `session_not_found` leads the text; nothing was mutated.",
+    "scenario": {
+        "tool": "ggui_update",
+        "args": { "sessionId": "render_does_not_exist", "kind": "replace", "props": {} }
+    },
+    "expect": { "code": "session_not_found" }
+}

package/dist/domain-error-conformance/index.d.ts

@@ -0,0 +1,97 @@
+/**
+ * `domain-error` catalog — SPEC §7.9 Plane 2 on the `tools/call` wire
+ * (ggui#880). The kit's FIRST `tools/call` driver.
+ *
+ * A Plane-2 failure (a missing session or handshake, props that do not
+ * satisfy the contract, an undeclared channel) is a tool-execution error,
+ * so it is a tool RESULT with `isError: true` — never a JSON-RPC error
+ * frame — whose `content[0].text` LEADS with the registered slug:
+ * `<code>: <detail>`. No `structuredContent`, no `_meta`. A raw MCP agent
+ * branches on `text.startsWith(code + ': ')` and on nothing else.
+ *
+ * Vendor-neutral by construction: the kit imports no server. The adopter
+ * supplies a {@link ToolCallDriver} that performs ONE `tools/call` against
+ * its deployment and returns the raw result the MCP client received (or
+ * `null` when the tool is not bound there — that case is SKIPPED, named).
+ * The kit owns the scenarios and every assertion. Each case ships as raw
+ * JSON under `./cases/`; the six here need no setup — an id nothing
+ * minted is refused the same way on every deployment.
+ *
+ * The catalog exists for one receipt: before the slug led the text, every
+ * first-party server failed every case on `slug-leads`.
+ */
+import type { JsonValue } from '@ggui-ai/protocol';
+/** A JSON object — the `arguments` of one `tools/call`. */
+export type ToolCallArgs = {
+    readonly [key: string]: JsonValue;
+};
+/** One `tools/call` the adopter's driver performs verbatim. */
+export interface ToolCallScenario {
+    readonly tool: string;
+    readonly args: ToolCallArgs;
+}
+/** One content block of a tool result, as the MCP client received it. */
+export interface ToolCallContent {
+    readonly type: string;
+    readonly text?: string;
+}
+/**
+ * The raw `tools/call` result as the MCP client received it. Authored here
+ * rather than imported from an SDK so the driver is typed against the kit
+ * alone; `structuredContent` and `_meta` are read only for presence.
+ */
+export interface RawToolCallResult {
+    readonly isError?: boolean;
+    readonly content: readonly ToolCallContent[];
+    readonly structuredContent?: unknown;
+    readonly _meta?: unknown;
+}
+/** External-boundary guard for a value an adopter's driver returned. */
+export declare function isRawToolCallResult(value: unknown): value is RawToolCallResult;
+/**
+ * Performs one `tools/call` and returns the raw result — or `null` when
+ * the deployment does not bind that tool. May be async: a live call is the
+ * intended binding.
+ */
+export type ToolCallDriver = (scenario: ToolCallScenario) => RawToolCallResult | null | Promise<RawToolCallResult | null>;
+/** One catalog case, authored as JSON under `./cases/`. */
+export interface DomainErrorConformanceCase {
+    /** Reported as `domain-error/<name>` by the runner. */
+    readonly name: string;
+    readonly description: string;
+    readonly scenario: ToolCallScenario;
+    /** The registered slug that must lead the result text. */
+    readonly expect: {
+        readonly code: string;
+    };
+}
+/** The catalog, in wire order: handshake first, then the session tools. */
+export declare const domainErrorCases: readonly DomainErrorConformanceCase[];
+/** The criterion a case failed on — the first that did not hold. */
+export type DomainErrorCriterion = 'driver-threw' | 'isError' | 'content-text' | 'slug-leads' | 'no-structuredContent' | 'no-meta';
+export interface DomainErrorMismatch {
+    readonly name: string;
+    readonly criterion: DomainErrorCriterion;
+    readonly expected: unknown;
+    readonly actual: unknown;
+}
+export interface DomainErrorSkip {
+    readonly name: string;
+    readonly reason: string;
+}
+export interface DomainErrorConformanceResult {
+    readonly passed: readonly string[];
+    readonly failed: readonly DomainErrorMismatch[];
+    readonly skipped: readonly DomainErrorSkip[];
+}
+/**
+ * Drive every case through `driver` and grade the raw results. A driver
+ * that throws fails THAT case (`driver-threw`) and the rest are still
+ * graded; a driver that returns `null` skips that case with the tool named.
+ */
+export interface RunDomainErrorConformanceOptions {
+    /** The cases to drive — the whole catalog by default. A live driver is real calls, so a runner selecting rows passes only those. */
+    readonly cases?: readonly DomainErrorConformanceCase[];
+}
+export declare function runDomainErrorConformance(driver: ToolCallDriver, options?: RunDomainErrorConformanceOptions): Promise<DomainErrorConformanceResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/domain-error-conformance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/domain-error-conformance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAQnD,2DAA2D;AAC3D,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjE,+DAA+D;AAC/D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAY9E;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,QAAQ,EAAE,gBAAgB,KACvB,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;AAElE,2DAA2D;AAC3D,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,0BAA0B,EAOjE,CAAC;AAEF,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,SAAS,GACT,cAAc,GACd,YAAY,GACZ,sBAAsB,GACtB,SAAS,CAAC;AAEd,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAqCD;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,oIAAoI;IACpI,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACxD;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAAC,4BAA4B,CAAC,CA6BvC"}

package/dist/domain-error-conformance/index.js

@@ -0,0 +1,97 @@
+import amendUnknownSession from './cases/amend-unknown-session.json' with { type: 'json' };
+import consumeUnknownSession from './cases/consume-unknown-session.json' with { type: 'json' };
+import emitUnknownSession from './cases/emit-unknown-session.json' with { type: 'json' };
+import getSessionUnknownSession from './cases/get-session-unknown-session.json' with { type: 'json' };
+import renderUnknownHandshake from './cases/render-unknown-handshake.json' with { type: 'json' };
+import updateUnknownSession from './cases/update-unknown-session.json' with { type: 'json' };
+/** External-boundary guard for a value an adopter's driver returned. */
+export function isRawToolCallResult(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const content = Reflect.get(value, 'content');
+    if (!Array.isArray(content))
+        return false;
+    for (const block of content) {
+        if (typeof block !== 'object' || block === null)
+            return false;
+        if (typeof Reflect.get(block, 'type') !== 'string')
+            return false;
+        const text = Reflect.get(block, 'text');
+        if (text !== undefined && typeof text !== 'string')
+            return false;
+    }
+    const isError = Reflect.get(value, 'isError');
+    return isError === undefined || typeof isError === 'boolean';
+}
+/** The catalog, in wire order: handshake first, then the session tools. */
+export const domainErrorCases = [
+    renderUnknownHandshake,
+    consumeUnknownSession,
+    getSessionUnknownSession,
+    updateUnknownSession,
+    amendUnknownSession,
+    emitUnknownSession,
+];
+function errorText(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+/** Grade one raw result against a case; `undefined` = every criterion held. */
+function grade(testCase, result) {
+    const { name } = testCase;
+    if (result.isError !== true) {
+        return { name, criterion: 'isError', expected: true, actual: result.isError };
+    }
+    const first = result.content[0];
+    if (first === undefined || first.type !== 'text' || typeof first.text !== 'string') {
+        return { name, criterion: 'content-text', expected: 'content[0] of type text', actual: first };
+    }
+    const lead = `${testCase.expect.code}: `;
+    if (!first.text.startsWith(lead)) {
+        return { name, criterion: 'slug-leads', expected: `${lead}<detail>`, actual: first.text };
+    }
+    if (result.structuredContent !== undefined) {
+        return {
+            name,
+            criterion: 'no-structuredContent',
+            expected: undefined,
+            actual: result.structuredContent,
+        };
+    }
+    if (result._meta !== undefined) {
+        return { name, criterion: 'no-meta', expected: undefined, actual: result._meta };
+    }
+    return undefined;
+}
+export async function runDomainErrorConformance(driver, options = {}) {
+    const passed = [];
+    const failed = [];
+    const skipped = [];
+    for (const testCase of options.cases ?? domainErrorCases) {
+        let result;
+        try {
+            result = await driver(testCase.scenario);
+        }
+        catch (err) {
+            failed.push({
+                name: testCase.name,
+                criterion: 'driver-threw',
+                expected: 'a raw tools/call result',
+                actual: errorText(err),
+            });
+            continue;
+        }
+        if (result === null) {
+            skipped.push({
+                name: testCase.name,
+                reason: `the driver returned null — \`${testCase.scenario.tool}\` is not bound on this deployment`,
+            });
+            continue;
+        }
+        const mismatch = grade(testCase, result);
+        if (mismatch === undefined)
+            passed.push(testCase.name);
+        else
+            failed.push(mismatch);
+    }
+    return { passed, failed, skipped };
+}

package/dist/fixtures/index.d.ts

@@ -108,7 +108,7 @@ export { consumeBufferFixtures } from './consume-buffer/index.js';
 export { hostContextFixtures } from './host-context/index.js';
 export { reservedChannelAuthorityFixtures } from './reserved-channel-authority/index.js';
 export { schemaVersionHandshakeFixtures } from './schema-version-handshake/index.js';
-export { subscribeTenancyFixtures } from './subscribe-tenancy/index.js';
+export { subscribeAppScopeFixtures } from './subscribe-app-scope/index.js';
 import type { TestCase } from '../types.js';
 /**
  * Contract slugs — match the sub-module directory names. The
@@ -116,7 +116,7 @@ import type { TestCase } from '../types.js';
  * Extensibly-closed via `(string & {})` so additive sub-modules
  * register without an API break.
  */
-export type ContractSlug = 'bootstrap-protocol' | 'consume-buffer' | 'host-context' | 'reserved-channel-authority' | 'schema-version-handshake' | 'subscribe-tenancy' | (string & {});
+export type ContractSlug = 'bootstrap-protocol' | 'consume-buffer' | 'host-context' | 'reserved-channel-authority' | 'schema-version-handshake' | 'subscribe-app-scope' | (string & {});
 /**
  * Every fixture the kit ships, grouped by the contract it exercises.
  * Order within each group matches the sub-module's `export` order.

package/dist/fixtures/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixtures/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwGG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQ5C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,4BAA4B,GAC5B,0BAA0B,GAC1B,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,QAAQ,EAAE,CAAC,CAOlF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,QAAQ,EAGwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/fixtures/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwGG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AACzF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAQ5C;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,4BAA4B,GAC5B,0BAA0B,GAC1B,qBAAqB,GACrB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,QAAQ,EAAE,CAAC,CAOlF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,QAAQ,EAGwB,CAAC"}

package/dist/fixtures/index.js

@@ -108,13 +108,13 @@ export { consumeBufferFixtures } from './consume-buffer/index.js';
 export { hostContextFixtures } from './host-context/index.js';
 export { reservedChannelAuthorityFixtures } from './reserved-channel-authority/index.js';
 export { schemaVersionHandshakeFixtures } from './schema-version-handshake/index.js';
-export { subscribeTenancyFixtures } from './subscribe-tenancy/index.js';
+export { subscribeAppScopeFixtures } from './subscribe-app-scope/index.js';
 import { bootstrapProtocolFixtures } from './bootstrap-protocol/index.js';
 import { consumeBufferFixtures } from './consume-buffer/index.js';
 import { hostContextFixtures } from './host-context/index.js';
 import { reservedChannelAuthorityFixtures } from './reserved-channel-authority/index.js';
 import { schemaVersionHandshakeFixtures } from './schema-version-handshake/index.js';
-import { subscribeTenancyFixtures } from './subscribe-tenancy/index.js';
+import { subscribeAppScopeFixtures } from './subscribe-app-scope/index.js';
 /**
  * Every fixture the kit ships, grouped by the contract it exercises.
  * Order within each group matches the sub-module's `export` order.
@@ -129,7 +129,7 @@ export const fixturesByContract = {
     'host-context': hostContextFixtures,
     'reserved-channel-authority': reservedChannelAuthorityFixtures,
     'schema-version-handshake': schemaVersionHandshakeFixtures,
-    'subscribe-tenancy': subscribeTenancyFixtures,
+    'subscribe-app-scope': subscribeAppScopeFixtures,
 };
 /**
  * Every fixture flat, in deterministic lexicographic order by

package/dist/fixtures/{subscribe-tenancy → subscribe-app-scope}/absent-appid-defaults.json

@@ -1,6 +1,6 @@
 {
     "name": "absent-appid-defaults",
-    "description": "A subscribe that OMITS `appId` resolves the caller's identity-default app and acks. SPEC §12.2's subscribe-payload table makes `appId` optional: absent ⇒ the server resolves it from the connection's authenticated identity (token binding, else identity mapping, else the deployment default) — clients never invent the default. Under the kit's harness the identity-default is the conventional tenant 'conformance', so the provision-on-subscribe path must bind exactly that value to the fresh render row — a real string tenant, never an undefined one (the corrupt-row failure mode this fixture locks out: a silent ack whose provisioned row carries appId undefined, unreachable by any later legal subscribe). The runner-owned subscribe frame IS the probe (`subscribe.omitAppId` drops the runner's conventional appId stamp; the inputEnvelope is descriptive, not dispatched); graded as a session-state read-back of the bound `appId` through the host's readSessionField seam. The §12.2.3 APP_MISMATCH tenancy gate is the sibling `app-mismatch` fixture's claim and still applies to the RESOLVED value.",
+    "description": "A subscribe that OMITS `appId` resolves the caller's identity-default app and acks. SPEC §12.2's subscribe-payload table makes `appId` optional: absent ⇒ the server resolves it from the connection's authenticated identity (token binding, else identity mapping, else the deployment default) — clients never invent the default. Under the kit's harness the identity-default is the conventional app 'conformance', so the provision-on-subscribe path must bind exactly that value to the fresh render row — a real string app id, never an undefined one (the corrupt-row failure mode this fixture locks out: a silent ack whose provisioned row carries appId undefined, unreachable by any later legal subscribe). The runner-owned subscribe frame IS the probe (`subscribe.omitAppId` drops the runner's conventional appId stamp; the inputEnvelope is descriptive, not dispatched); graded as a session-state read-back of the bound `appId` through the host's readSessionField seam. The §12.2.3 APP_MISMATCH app-scope gate is the sibling `app-mismatch` fixture's claim and still applies to the RESOLVED value.",
     "skipReason": null,
     "setup": [],
     "subscribe": {

package/dist/fixtures/{subscribe-tenancy → subscribe-app-scope}/app-mismatch.json

@@ -1,6 +1,6 @@
 {
     "name": "app-mismatch",
-    "description": "The GguiSession exists but is bound to a DIFFERENT app than the subscriber claims: `create-session` binds appId 'conformance-other', while the kit's runner always subscribes with appId 'conformance'. SPEC §12.2's subscribe-payload table makes the tenancy check a MUST — appId 'MUST match the GguiSession's bound appId or subscribe fails APP_MISMATCH' — and §12.2.3 keeps the code distinct from SESSION_NOT_FOUND (the GguiSession exists; it is reachable only from a different app), so clients route 'fix your appId / API key' differently from 're-handshake'. The runner-owned subscribe frame IS the probe (the inputEnvelope is descriptive, not dispatched); expected: an `error` frame with `payload.code === 'APP_MISMATCH'`.",
+    "description": "The GguiSession exists but is bound to a DIFFERENT app than the subscriber claims: `create-session` binds appId 'conformance-other', while the kit's runner always subscribes with appId 'conformance'. SPEC §12.2's subscribe-payload table makes the app-scope check a MUST — appId 'MUST match the GguiSession's bound appId or subscribe fails APP_MISMATCH' — and §12.2.3 keeps the code distinct from SESSION_NOT_FOUND (the GguiSession exists; it is reachable only from a different app), so clients route 'fix your appId / API key' differently from 're-handshake'. The runner-owned subscribe frame IS the probe (the inputEnvelope is descriptive, not dispatched); expected: an `error` frame with `payload.code === 'APP_MISMATCH'`.",
     "skipReason": null,
     "setup": [
         {

package/dist/fixtures/subscribe-app-scope/index.d.ts

@@ -0,0 +1,6 @@
+import type { TestCase } from '../../types.js';
+/** All fixtures asserting subscribe-time app scope (SPEC §12.2 field
+ *  table — identity-default resolution on absent `appId` — and
+ *  §12.2.3 `APP_MISMATCH`). */
+export declare const subscribeAppScopeFixtures: readonly TestCase[];
+//# sourceMappingURL=index.d.ts.map

package/dist/fixtures/subscribe-app-scope/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/fixtures/subscribe-app-scope/index.ts"],"names":[],"mappings":"AAwDA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;+BAE+B;AAC/B,eAAO,MAAM,yBAAyB,EAAE,SAAS,QAAQ,EAGxD,CAAC"}