@ggui-ai/protocol-conformance 0.15.0 → 0.16.0

package/dist/fixtures/{subscribe-tenancy → subscribe-app-scope}/index.js

@@ -1,7 +1,7 @@
 /**
- * `subscribe-tenancy` fixture sub-module.
+ * `subscribe-app-scope` fixture sub-module.
  *
- * Exercises the subscribe-time tenancy contract (SPEC §12.2 subscribe
+ * Exercises the subscribe-time app-scope contract (SPEC §12.2 subscribe
  * payload table + §12.2.3 channel-3 error codes):
  *
  *   - `app-mismatch` — the GguiSession exists but is bound to a
@@ -18,7 +18,7 @@
  *     mapping, else the deployment default) and the subscribe acks.
  *     Graded as a session-state read-back of the bound `appId` on the
  *     provisioned render (hosts expose it via `readSessionField`), so
- *     a server that acks but binds an undefined tenant — the
+ *     a server that acks but binds an undefined app id — the
  *     corrupt-row failure mode — fails rather than passing on the ack
  *     alone.
  *
@@ -53,10 +53,10 @@
  */
 import absentAppidDefaults from './absent-appid-defaults.json' with { type: 'json' };
 import appMismatch from './app-mismatch.json' with { type: 'json' };
-/** All fixtures asserting subscribe-time tenancy (SPEC §12.2 field
+/** All fixtures asserting subscribe-time app scope (SPEC §12.2 field
  *  table — identity-default resolution on absent `appId` — and
  *  §12.2.3 `APP_MISMATCH`). */
-export const subscribeTenancyFixtures = [
+export const subscribeAppScopeFixtures = [
     absentAppidDefaults,
     appMismatch,
 ];

package/dist/index.d.ts

@@ -12,7 +12,7 @@
  */
 export type { TransportConfig, WebSocketTransportConfig, UnknownTransportConfig, AuthConfig, TestCase, SubscribeFrameShaping, SetupStep, CreateGguiSessionStep, ActionSpecEntryDecl, JsonSchemaDecl, RendererUrlOverrideStep, ServerVersionOverrideStep, UiInitializeResponseOverrideStep, EmitEnvelopeStep, TeardownStep, ExpectedBehavior, ActionAckBehavior, ErrorFrameBehavior, StreamUpdateBehavior, BootstrapFailureBehavior, BootstrapSuccessBehavior, VersionMismatchBehavior, PropsUpdateBehavior, SessionStateBehavior, NoOpBehavior, UnknownBehavior, ProtocolError, BootstrapFailureReason, } from './types.js';
 export type { ConformanceHost, SetupStep as HostSetupStep, CreateGguiSessionSetup, RendererUrlOverrideSetup, ServerVersionOverrideSetup, UiInitializeResponseOverrideSetup, EmitEnvelopeSetup, TeardownStep as HostTeardownStep, } from './conformance-host.js';
-export { allFixtures, fixturesByContract, bootstrapProtocolFixtures, consumeBufferFixtures, hostContextFixtures, reservedChannelAuthorityFixtures, schemaVersionHandshakeFixtures, subscribeTenancyFixtures, } from './fixtures/index.js';
+export { allFixtures, fixturesByContract, bootstrapProtocolFixtures, consumeBufferFixtures, hostContextFixtures, reservedChannelAuthorityFixtures, schemaVersionHandshakeFixtures, subscribeAppScopeFixtures, } from './fixtures/index.js';
 export type { ContractSlug } from './fixtures/index.js';
 export { gadgetWireSchemaCases, runSchemaConformance, } from './schema-conformance/index.js';
 export type { SchemaConformanceCase, SchemaConformanceMismatch, SchemaConformanceResult, } from './schema-conformance/index.js';
@@ -37,4 +37,8 @@ export { runConformance } from './run-conformance.js';
 export type { RunConformanceConfig, ConformanceResult, ConformanceFailure, SkippedFixture, ConformanceReporter, InputEnvelopeDispatch, HostContextObservedInputEnvelope, } from './run-conformance.js';
 export { createDefaultReporter, formatScorecard, formatSummary, formatFailures, formatSkips, } from './reporter.js';
 export type { DefaultReporterOptions } from './reporter.js';
+export { domainErrorCases, isRawToolCallResult, runDomainErrorConformance, } from './domain-error-conformance/index.js';
+export type { DomainErrorConformanceCase, DomainErrorConformanceResult, DomainErrorCriterion, DomainErrorMismatch, DomainErrorSkip, RawToolCallResult, RunDomainErrorConformanceOptions, ToolCallArgs, ToolCallContent, ToolCallDriver, ToolCallScenario, } from './domain-error-conformance/index.js';
+export { APP_THEME_CASES, OVERLAY_HASH_CASES, THEME_MODE_CASES, runThemeBindingConformance, } from './theme-binding-conformance/index.js';
+export type { AppThemeCase, OverlayHashCase, ThemeBindingResult, ThemeModeCase, } from './theme-binding-conformance/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,YAAY,EAEV,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,EAEV,QAAQ,EACR,qBAAqB,EAErB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAEhB,YAAY,EAEZ,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,aAAa,EACb,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,eAAe,EAEf,SAAS,IAAI,aAAa,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,iBAAiB,EAEjB,YAAY,IAAI,gBAAgB,GACjC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,yBAAyB,EACzB,sBAAsB,EACtB,8BAA8B,EAC9B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AAMjD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,iCAAiC,EACjC,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAQlD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EAInB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,YAAY,EAEV,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,EAEV,QAAQ,EACR,qBAAqB,EAErB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAEhB,YAAY,EAEZ,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,aAAa,EACb,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,eAAe,EAEf,SAAS,IAAI,aAAa,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,iBAAiB,EAEjB,YAAY,IAAI,gBAAgB,GACjC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,YAAY,EACV,yBAAyB,EACzB,sBAAsB,EACtB,8BAA8B,EAC9B,gCAAgC,EAChC,uBAAuB,GACxB,MAAM,yCAAyC,CAAC;AAMjD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,0CAA0C,CAAC;AAClD,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,iCAAiC,EACjC,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0CAA0C,CAAC;AAQlD,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EAInB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,gCAAgC,EAChC,YAAY,EACZ,eAAe,EACf,cAAc,EACd,gBAAgB,GACjB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,aAAa,GACd,MAAM,sCAAsC,CAAC"}

package/dist/index.js

@@ -13,7 +13,7 @@
 // Fixture catalog — every authored conformance case, classified by
 // contract. Third-party runners + the kit's own `runConformance()`
 // consume this surface.
-export { allFixtures, fixturesByContract, bootstrapProtocolFixtures, consumeBufferFixtures, hostContextFixtures, reservedChannelAuthorityFixtures, schemaVersionHandshakeFixtures, subscribeTenancyFixtures, } from './fixtures/index.js';
+export { allFixtures, fixturesByContract, bootstrapProtocolFixtures, consumeBufferFixtures, hostContextFixtures, reservedChannelAuthorityFixtures, schemaVersionHandshakeFixtures, subscribeAppScopeFixtures, } from './fixtures/index.js';
 // Pure-function conformance catalogs — SPEC §7.7.2's gadget
 // obligations are deterministic validation functions, not transport-
 // observable behaviors. Each catalog grades a caller-supplied function
@@ -73,3 +73,7 @@ export { runConformance } from './run-conformance.js';
 // formatters programmatic consumers can reuse when building their
 // own reporter (CI annotations, vitest integration, etc.).
 export { createDefaultReporter, formatScorecard, formatSummary, formatFailures, formatSkips, } from './reporter.js';
+// ── domain-error (SPEC §7.9 Plane 2 on the tools/call wire, ggui#880) ──
+export { domainErrorCases, isRawToolCallResult, runDomainErrorConformance, } from './domain-error-conformance/index.js';
+// ── theme binding (ggui#987 — the theming wave's arbiter; guuey 1.3 judges against it) ──
+export { APP_THEME_CASES, OVERLAY_HASH_CASES, THEME_MODE_CASES, runThemeBindingConformance, } from './theme-binding-conformance/index.js';

package/dist/refusal-envelope-conformance/cases/refuse-after-fix-caller.json

@@ -2,7 +2,7 @@
     "name": "refuse-after-fix-caller",
     "description": "An after-fix refusal the CALLER can act on itself: the projector emits an isError result whose text leads with the code, carries outcome 'refused' plus the refusal and nothing else, and exposes no _meta. This is the only fixBy class an agent may retry on its own.",
     "refusal": {
-        "code": "model_not_in_tier",
+        "code": "model_not_allowed",
         "message": "the requested model is not among those this app may use",
         "fix": "pick a model the app is allowed to use and call again with the same handshakeId",
         "retry": "after-fix",
@@ -10,11 +10,11 @@
     },
     "expect": {
         "isError": true,
-        "text": "model_not_in_tier: the requested model is not among those this app may use pick a model the app is allowed to use and call again with the same handshakeId",
+        "text": "model_not_allowed: the requested model is not among those this app may use pick a model the app is allowed to use and call again with the same handshakeId",
         "structuredContent": {
             "outcome": "refused",
             "refusal": {
-                "code": "model_not_in_tier",
+                "code": "model_not_allowed",
                 "message": "the requested model is not among those this app may use",
                 "fix": "pick a model the app is allowed to use and call again with the same handshakeId",
                 "retry": "after-fix",

package/dist/refusal-envelope-conformance/cases/refuse-non-render-surface.json

@@ -2,10 +2,10 @@
     "name": "refuse-non-render-surface",
     "description": "A REGISTERED code whose surfaces exclude the render gate. It has no render envelope at all, so a conformant projector produces nothing for it. Projecting it anyway is the drift the per-surface namespace rule forbids \u2014 this case is what makes that rule observable rather than prose.",
     "refusal": {
-        "code": "subscription_exists",
-        "message": "an active plan already exists on this app",
-        "fix": "cancel the existing plan first, then call again",
-        "retry": "after-fix",
+        "code": "checkout_unavailable",
+        "message": "Top-ups are unavailable right now.",
+        "fix": "Try again in a few minutes; if it persists, write to hello@ggui.ai.",
+        "retry": "later",
         "handshake": "intact"
     },
     "expect": null

package/dist/run-conformance.d.ts

@@ -5,6 +5,7 @@ import type { AuthConfig, SessionStateBehavior, StreamUpdateBehavior, VersionMis
 import { type PreGenerationRefusalInput, type ProjectedRefusalResult } from './refusal-envelope-conformance/index.js';
 import { type RefusalRegistryView } from './registry-completeness/index.js';
 import { type ProjectedTransportRefusal, type TransportRefusalInput } from './transport-refusal-conformance/index.js';
+import { type ToolCallDriver } from './domain-error-conformance/index.js';
 export interface RunConformanceConfig {
     /**
      * URL of the implementation under test. `http://` / `https://`
@@ -56,14 +57,23 @@ export interface RunConformanceConfig {
      * `transport-refusal` catalog is graded; omitted ⇒ SKIPPED, named.
      */
     readonly transportRefusalProjector?: (refusal: TransportRefusalInput) => ProjectedTransportRefusal | null;
+    /**
+     * Performs one `tools/call` against the deployment and returns the raw
+     * result (or `null` when the tool is not bound). Supplied ⇒ the
+     * `domain-error` catalog (SPEC §7.9 Plane 2 on the wire, ggui#880) is
+     * graded; omitted ⇒ SKIPPED, named.
+     */
+    readonly toolCallDriver?: ToolCallDriver;
 }
 /**
- * Row-name prefixes for the PURE-FUNCTION catalogs the runner folds
- * into a run. Prefixed so a catalog row can never collide with a
+ * Row-name prefixes for the catalogs the runner folds into a run beside
+ * the WebSocket fixtures: three grade an in-process function or a data
+ * table; `domain-error` (ggui#880) drives live `tools/call` scenarios
+ * through an adopter-supplied driver. Prefixed so a catalog row can never collide with a
  * WebSocket fixture name, and so the reporter can group them without a
  * second registry of names.
  */
-export declare const PURE_FUNCTION_CATALOG_SLUGS: readonly ["refusal-envelope", "registry-completeness", "transport-refusal"];
+export declare const PURE_FUNCTION_CATALOG_SLUGS: readonly ["refusal-envelope", "registry-completeness", "transport-refusal", "domain-error", "theme-binding"];
 /** One member of {@link PURE_FUNCTION_CATALOG_SLUGS}. */
 export type PureFunctionCatalogSlug = (typeof PURE_FUNCTION_CATALOG_SLUGS)[number];
 export interface ConformanceResult {

package/dist/run-conformance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-conformance.d.ts","sourceRoot":"","sources":["../src/run-conformance.ts"],"names":[],"mappings":"AA6DA,OAAO,KAAK,EACV,0BAA0B,EAG3B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EACV,eAAe,EACf,SAAS,IAAI,aAAa,EAE3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,KAAK,EAEV,UAAU,EAEV,oBAAoB,EACpB,oBAAoB,EAEpB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAMlD,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC1B,OAAO,EAAE,yBAAyB,KAC/B,sBAAsB,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,OAAO,EAAE,qBAAqB,KAC3B,yBAAyB,GAAG,IAAI,CAAC;CACvC;AAED;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,6EAI9B,CAAC;AAEX,yDAAyD;AACzD,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClD,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,UAAU,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC9C;AAMD,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CA+C5B;AA+RD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWrD;AAoBD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACvD;IACE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;CACrD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,GAChB,qBAAqB,CAcvB;AAkOD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,oBAAoB,EAC9B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,eAAe,GAAG,SAAS,GAChC,OAAO,CAAC,WAAW,CAAC,CA8BtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,GACf,wBAAwB,CAmC1B;AAqED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,aAAa,CA4DhF;AAqHD,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,CAAC"}
+{"version":3,"file":"run-conformance.d.ts","sourceRoot":"","sources":["../src/run-conformance.ts"],"names":[],"mappings":"AA8DA,OAAO,KAAK,EACV,0BAA0B,EAG3B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EACV,eAAe,EACf,SAAS,IAAI,aAAa,EAE3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,KAAK,EAEV,UAAU,EAEV,oBAAoB,EACpB,oBAAoB,EAEpB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC5B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,qCAAqC,CAAC;AAM7C,MAAM,WAAW,oBAAoB;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAC1B,OAAO,EAAE,yBAAyB,KAC/B,sBAAsB,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,OAAO,EAAE,qBAAqB,KAC3B,yBAAyB,GAAG,IAAI,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,8GAM9B,CAAC;AAEX,yDAAyD;AACzD,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClD,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD,UAAU,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC9C;AAMD,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CA+C5B;AAgVD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWrD;AAoBD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACvD;IACE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;CACrD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9B;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,OAAO,GAChB,qBAAqB,CAcvB;AAkOD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,oBAAoB,EAC9B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,eAAe,GAAG,SAAS,GAChC,OAAO,CAAC,WAAW,CAAC,CA8BtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,GACf,wBAAwB,CAmC1B;AAqED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,aAAa,CA4DhF;AAqHD,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/run-conformance.js

@@ -47,7 +47,8 @@
  *         loop is empty today.)
  *      l. Record the outcome via reporter + accumulate in result.
  *   3. Fold in the PURE-FUNCTION catalogs (ggui#786) —
- *      `refusal-envelope`, `registry-completeness` and `transport-refusal`. They grade a
+ *      `refusal-envelope`, `registry-completeness`, `transport-refusal`,
+ *      `domain-error` and `theme-binding` (ggui#987). They grade a
  *      caller-supplied projector / registry rather than the wire, so
  *      they need no transport; when the caller supplies neither, their
  *      rows are reported SKIPPED with that reason so an ungraded
@@ -66,9 +67,13 @@ import { openWsTransport } from './ws-transport.js';
 import { refusalEnvelopeCases, runRefusalEnvelopeConformance, } from './refusal-envelope-conformance/index.js';
 import { registryCompletenessPins, runRegistryCompletenessConformance, } from './registry-completeness/index.js';
 import { runTransportRefusalConformance, transportRefusalCases, } from './transport-refusal-conformance/index.js';
+import { runThemeBindingConformance } from './theme-binding-conformance/index.js';
+import { domainErrorCases, runDomainErrorConformance, } from './domain-error-conformance/index.js';
 /**
- * Row-name prefixes for the PURE-FUNCTION catalogs the runner folds
- * into a run. Prefixed so a catalog row can never collide with a
+ * Row-name prefixes for the catalogs the runner folds into a run beside
+ * the WebSocket fixtures: three grade an in-process function or a data
+ * table; `domain-error` (ggui#880) drives live `tools/call` scenarios
+ * through an adopter-supplied driver. Prefixed so a catalog row can never collide with a
  * WebSocket fixture name, and so the reporter can group them without a
  * second registry of names.
  */
@@ -76,6 +81,8 @@ export const PURE_FUNCTION_CATALOG_SLUGS = [
     'refusal-envelope',
     'registry-completeness',
     'transport-refusal',
+    'domain-error',
+    'theme-binding',
 ];
 // =============================================================================
 // Runner
@@ -113,7 +120,7 @@ export async function runConformance(config) {
                 break;
         }
     }
-    runPureFunctionCatalogs(config, reporter, { passed, failed, skipped });
+    await runPureFunctionCatalogs(config, reporter, { passed, failed, skipped });
     const result = {
         passed,
         failed,
@@ -138,7 +145,7 @@ export async function runConformance(config) {
  * absent input produces a SKIP row naming what to supply rather than
  * nothing at all.
  */
-function runPureFunctionCatalogs(config, reporter, buckets) {
+async function runPureFunctionCatalogs(config, reporter, buckets) {
     const only = config.only;
     const wanted = (name) => only === undefined || only.length === 0 || only.includes(name);
     const pass = (name) => {
@@ -201,6 +208,33 @@ function runPureFunctionCatalogs(config, reporter, buckets) {
             });
         }
     }
+    // ── domain-error (ggui#880) ──
+    const toolCallDriver = config.toolCallDriver;
+    if (toolCallDriver === undefined) {
+        for (const testCase of domainErrorCases) {
+            skip(`domain-error/${testCase.name}`, 'no `toolCallDriver` supplied — pass one to runConformance(), or `--tool-call-driver <module>` on the CLI, to grade SPEC §7.9\u2019s Plane-2 wire text');
+        }
+    }
+    else {
+        // A live driver is real calls: drive only the rows `only` selects.
+        const selected = domainErrorCases.filter((testCase) => wanted(`domain-error/${testCase.name}`));
+        const graded = selected.length === 0
+            ? { passed: [], failed: [], skipped: [] }
+            : await runDomainErrorConformance(toolCallDriver, { cases: selected });
+        for (const name of graded.passed)
+            pass(`domain-error/${name}`);
+        for (const skipped of graded.skipped)
+            skip(`domain-error/${skipped.name}`, skipped.reason);
+        for (const mismatch of graded.failed) {
+            fail({
+                name: `domain-error/${mismatch.name}`,
+                criterion: `Plane-2 wire text (SPEC §7.9): ${mismatch.criterion}`,
+                expected: mismatch.expected,
+                received: mismatch.actual,
+                message: 'the raw tools/call result does not carry the registered slug as the leading token of its text',
+            });
+        }
+    }
     // ── registry-completeness ──
     const registry = config.refusalRegistry;
     if (registry === undefined) {
@@ -222,6 +256,26 @@ function runPureFunctionCatalogs(config, reporter, buckets) {
             });
         }
     }
+    // ── theme-binding (ggui#987) ──
+    // The theming wave's arbiter: graded against the protocol's own functions
+    // (`appThemeSchema`, `effectiveThemeMode`, `canonicalOverlayHash`), so
+    // there is no adopter input to supply and no reason to skip — every run
+    // reports it. `only` still selects rows.
+    for (const graded of await runThemeBindingConformance()) {
+        const name = `theme-binding/${graded.name}`;
+        if (graded.pass) {
+            pass(name);
+        }
+        else {
+            fail({
+                name,
+                criterion: 'theme binding (SPEC "Theme binding — the normative total order", ggui#987)',
+                expected: 'the case\u2019s expectation',
+                received: graded.detail,
+                message: graded.detail,
+            });
+        }
+    }
 }
 async function runOneFixture(fixture, config, _reporter) {
     const fixtureStarted = Date.now();
@@ -684,8 +738,8 @@ function slugToCriterion(slug) {
             return 'SPEC §4.4 reserved-channel authority';
         case 'schema-version-handshake':
             return 'Protocol #3 version negotiation';
-        case 'subscribe-tenancy':
-            return 'SPEC §12.2 subscribe tenancy — appId MUST match the bound app (§12.2.3 APP_MISMATCH)';
+        case 'subscribe-app-scope':
+            return 'SPEC §12.2 subscribe app scope — appId MUST match the bound app (§12.2.3 APP_MISMATCH)';
         default:
             return slug;
     }

package/dist/theme-binding-conformance/cases/app-theme-v1-base.json

@@ -0,0 +1,18 @@
+{
+    "name": "app-theme-v1-base",
+    "description": "A v1 overlay carrying a registered `base` ladder is REFUSED since ggui#987 (D2 = B): the registration tier and `base` are gone. Accepted before #987 (promoted, then failed \u2014 the \u00a71.1 receipt).",
+    "theme": {
+        "mode": "dark",
+        "cssVariables": {},
+        "base": {
+            "documentHash": "0000000000000000000000000000000000000000000000000000000000000000",
+            "light": {
+                "--ggui-color-primary-500": "#3355ff"
+            },
+            "dark": {
+                "--ggui-color-primary-500": "#99aaff"
+            }
+        }
+    },
+    "expect": "refused"
+}

package/dist/theme-binding-conformance/cases/app-theme-v1-one-palette.json

@@ -0,0 +1,11 @@
+{
+    "name": "app-theme-v1-one-palette",
+    "description": "The v1 overlay wire \u2014 a pinned mode and ONE cssVariables palette \u2014 is REFUSED since ggui#987: an overlay that could not follow the host's mode is not accepted; both projections are required. Accepted before #987 (promoted, then failed \u2014 the \u00a71.1 receipt).",
+    "theme": {
+        "mode": "light",
+        "cssVariables": {
+            "--ggui-color-primary-500": "#3355ff"
+        }
+    },
+    "expect": "refused"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-accepted.json

@@ -0,0 +1,18 @@
+{
+    "name": "app-theme-v2-accepted",
+    "description": "The v2 overlay: both projections, the attestation, an optional default mode and a label. Accepted.",
+    "theme": {
+        "overlayHash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "overlays": {
+            "light": {
+                "--ggui-color-primary-500": "#3355ff"
+            },
+            "dark": {
+                "--ggui-color-primary-500": "#99aaff"
+            }
+        },
+        "mode": "light",
+        "name": "ocean"
+    },
+    "expect": "accepted"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-keyframes-accepted.json

@@ -0,0 +1,16 @@
+{
+    "name": "app-theme-v2-keyframes-accepted",
+    "description": "Per-mode keyframes text that is exactly `@keyframes <ident> { … }` blocks (two blocks, a comment, frame selectors of every kind) is ACCEPTED by appThemeSchema — the slot carries what the card injects verbatim after the variables (ggui#987 §3.3, follower D).",
+    "theme": {
+        "overlays": {
+            "light": { "--ggui-color-primary-500": "#3355ff" },
+            "dark": { "--ggui-color-primary-500": "#99aaff" }
+        },
+        "overlayHash": "0000000000000000000000000000000000000000000000000000000000000000",
+        "keyframes": {
+            "light": "/* entrance */ @keyframes entrance { 0% { opacity: 0; transform: translateY(4px) } 100% { opacity: 1; transform: none } }\n@keyframes accent-pulse{0%,100%{opacity:1}50%{opacity:.7}}",
+            "dark": "@keyframes spin { from { transform: rotate(0deg) } to { transform: rotate(360deg) } }"
+        }
+    },
+    "expect": "accepted"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-keyframes-not-keyframes.json

@@ -0,0 +1,15 @@
+{
+    "name": "app-theme-v2-keyframes-not-keyframes",
+    "description": "Keyframes text that carries anything other than `@keyframes` blocks — here a bare `body { … }` rule after a valid block — is REFUSED by appThemeSchema: the slot is bounded to what it is for, so the theme principal cannot ship arbitrary same-document CSS through it (ggui#987 §3.4, follower D).",
+    "theme": {
+        "overlays": {
+            "light": { "--ggui-color-primary-500": "#3355ff" },
+            "dark": { "--ggui-color-primary-500": "#99aaff" }
+        },
+        "overlayHash": "0000000000000000000000000000000000000000000000000000000000000000",
+        "keyframes": {
+            "light": "@keyframes spin { to { transform: rotate(360deg) } } body { display: none }"
+        }
+    },
+    "expect": "refused"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-label-too-long.json

@@ -0,0 +1,17 @@
+{
+    "name": "app-theme-v2-label-too-long",
+    "description": "A stamped label carrying a FULL sha256 after the prefix is 77 chars and exceeds appThemeSchema's 64-char `name` cap \u2014 REFUSED at the door. The seam ggui#987 flagged for the platform's pin shape.",
+    "theme": {
+        "overlays": {
+            "light": {
+                "--ggui-color-primary-500": "#3355ff"
+            },
+            "dark": {
+                "--ggui-color-primary-500": "#99aaff"
+            }
+        },
+        "overlayHash": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+        "name": "guuey-app-v2.dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
+    },
+    "expect": "refused"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-missing-dark.json

@@ -0,0 +1,13 @@
+{
+    "name": "app-theme-v2-missing-dark",
+    "description": "An overlay with only one projection cannot follow the host's mode \u2014 REFUSED.",
+    "theme": {
+        "overlayHash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+        "overlays": {
+            "light": {
+                "--ggui-color-primary-500": "#3355ff"
+            }
+        }
+    },
+    "expect": "refused"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-no-hash.json

@@ -0,0 +1,15 @@
+{
+    "name": "app-theme-v2-no-hash",
+    "description": "The attestation is REQUIRED: an overlay without `overlayHash` is refused at the door.",
+    "theme": {
+        "overlays": {
+            "light": {
+                "--ggui-color-primary-500": "#3355ff"
+            },
+            "dark": {
+                "--ggui-color-primary-500": "#99aaff"
+            }
+        }
+    },
+    "expect": "refused"
+}

package/dist/theme-binding-conformance/cases/app-theme-v2-platform-pin.json

@@ -0,0 +1,17 @@
+{
+    "name": "app-theme-v2-platform-pin",
+    "description": "The exact overlay shape a platform's -v2 composer sends (ggui#987 \u00a79; guuey#1128): both projections, the attestation, and a label of the form `<prefix>.<hash-prefix>`. `name` is capped at 64 chars by appThemeSchema, so a stamped label must keep its hash segment to 51 chars after a 13-char prefix. Accepted.",
+    "theme": {
+        "overlays": {
+            "light": {
+                "--ggui-color-primary-500": "#3355ff"
+            },
+            "dark": {
+                "--ggui-color-primary-500": "#99aaff"
+            }
+        },
+        "overlayHash": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+        "name": "guuey-app-v2.ccccccccccccccccccccccccccccccccccccccccccccccccccc"
+    },
+    "expect": "accepted"
+}

package/dist/theme-binding-conformance/cases/overlay-hash-canonical.json

@@ -0,0 +1,17 @@
+{
+    "name": "overlay-hash-canonical",
+    "description": "canonicalOverlayHash is ONE function on every minter and door: keys sorted recursively, no whitespace, absent fields omitted, sha256 lowercase hex. The expected value was computed independently with node:crypto over the canonical JSON; the input's keys are deliberately unsorted.",
+    "input": {
+        "overlays": {
+            "light": {
+                "--ggui-color-primary-500": "#3355ff",
+                "--ggui-color-ground": "#ffffff"
+            },
+            "dark": {
+                "--ggui-color-primary-500": "#99aaff",
+                "--ggui-color-ground": "#0e1014"
+            }
+        }
+    },
+    "expect": "7cc8c947beeae43de91a8e3eedc182a739ae134e3a3957958ebee4ec6cf25e96"
+}

package/dist/theme-binding-conformance/cases/theme-mode-absence.json

@@ -0,0 +1,10 @@
+{
+    "name": "theme-mode-absence",
+    "description": "The absence law (ggui#551): when no layer resolves, the projection is undefined \u2014 never a light default.",
+    "sources": {
+        "stamped": null,
+        "sessionSidecar": null,
+        "hostAnnounced": null
+    },
+    "expect": null
+}

package/dist/theme-binding-conformance/cases/theme-mode-default-when-silent-host.json

@@ -0,0 +1,10 @@
+{
+    "name": "theme-mode-default-when-silent-host",
+    "description": "A host that announces nothing leaves the stamp (then the sidecar) to fill the mode \u2014 the defaults still apply.",
+    "sources": {
+        "stamped": "light",
+        "sessionSidecar": "dark",
+        "hostAnnounced": null
+    },
+    "expect": "light"
+}

package/dist/theme-binding-conformance/cases/theme-mode-order.json

@@ -0,0 +1,10 @@
+{
+    "name": "theme-mode-order",
+    "description": "The client projection of the themeMode total order since ggui#987 (D4 = A, 'follow the widget'): with a stamped mode and a host announce present, the HOST wins \u2014 the embedding host owns runtime mode; the stamp and the sidecar are defaults. Before #987 this case expected 'light' (the stamp); it was promoted into the kit at that version and FAILED when the order flipped \u2014 the VERSION-POLICY \u00a71.1 receipt that names the flip breaking.",
+    "sources": {
+        "stamped": "light",
+        "sessionSidecar": null,
+        "hostAnnounced": "dark"
+    },
+    "expect": "dark"
+}

package/dist/theme-binding-conformance/index.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Theme-binding conformance — a pure-function catalog (ggui#987).
+ *
+ * Three contracts the kit grades directly against `@ggui-ai/protocol`, so
+ * their breaking-ness is decided by a fixture and not by prose
+ * (VERSION-POLICY §2 — the kit is the arbiter):
+ *
+ *   - `theme-mode-*` — the CLIENT projection of the `themeMode` total
+ *     order, `effectiveThemeMode` (`integrations/theme-binding.ts`): the
+ *     embedding host owns runtime mode (D4).
+ *   - `app-theme-*` — which overlay shapes `appThemeSchema` accepts: both
+ *     projections and the attestation required; the v1 one-palette wire and
+ *     `base` refused.
+ *   - `overlay-hash-*` — `canonicalOverlayHash` against an independently
+ *     computed vector.
+ *
+ * History (the §1.1 receipt): `theme-mode-order`, `app-theme-v1-one-palette`
+ * and `app-theme-v1-base` were promoted from the unit pins at the version
+ * BEFORE the revision, passed there, and failed when it landed — that is
+ * what named the revision breaking. Like `../refusal-envelope-conformance`,
+ * the cases are raw JSON under `./cases/` and are NOT registered in
+ * `fixturesByContract`; the entry point is the runner below and its test.
+ */
+import { canonicalOverlayHash } from '@ggui-ai/protocol';
+type Opinion = 'light' | 'dark';
+export interface ThemeModeCase {
+    readonly name: string;
+    readonly description: string;
+    readonly sources: {
+        readonly stamped: Opinion | null;
+        readonly sessionSidecar: Opinion | null;
+        readonly hostAnnounced: Opinion | null;
+    };
+    readonly expect: Opinion | null;
+}
+export interface AppThemeCase {
+    readonly name: string;
+    readonly description: string;
+    readonly theme: unknown;
+    readonly expect: 'accepted' | 'refused';
+}
+export interface OverlayHashCase {
+    readonly name: string;
+    readonly description: string;
+    readonly input: Parameters<typeof canonicalOverlayHash>[0];
+    readonly expect: string;
+}
+export declare const THEME_MODE_CASES: readonly ThemeModeCase[];
+export declare const APP_THEME_CASES: readonly AppThemeCase[];
+export declare const OVERLAY_HASH_CASES: readonly OverlayHashCase[];
+export interface ThemeBindingResult {
+    readonly name: string;
+    readonly pass: boolean;
+    readonly detail: string;
+}
+/** Grade every theme-binding case against the protocol's own functions. */
+export declare function runThemeBindingConformance(): Promise<readonly ThemeBindingResult[]>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/theme-binding-conformance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/theme-binding-conformance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAkB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAiBzE,KAAK,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;QACxC,QAAQ,CAAC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAC;KACxC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAkDD,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAA0F,CAAC;AAChJ,eAAO,MAAM,eAAe,EAAE,SAAS,YAAY,EAAuO,CAAC;AAC3R,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAAgD,CAAC;AAE1G,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAID,2EAA2E;AAC3E,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAqBzF"}