@ggui-ai/protocol-conformance 0.8.0 → 0.10.0

package/README.md

@@ -51,12 +51,13 @@ One declared grading gap on the action loop: `action-ack` proves the append half
 
 The behavioral fixture catalog above asserts what an implementation _does_ over the wire. Some protocol obligations aren't transport-observable at all — they are deterministic _validation functions_: given an input, accept or reject it. SPEC §7.7.2's gadget obligations are exactly this. Modeling them as WebSocket fixtures would mean faking wire frames the protocol never emits; instead the kit ships **pure-function catalogs** — accept/reject cases graded against a caller-supplied function, with no host, render, or transport.
 
-Each catalog ships its cases as raw JSON so a non-TypeScript implementer can grade their own implementation, and each runner takes the implementation as a callback — the kit never hard-binds a concrete one. Four catalogs ship today:
+Each catalog ships its cases as raw JSON so a non-TypeScript implementer can grade their own implementation, and each runner takes the implementation as a callback — the kit never hard-binds a concrete one. Five catalogs ship today:
 
 - **`@ggui-ai/protocol-conformance/schema-conformance`** — which `DataContract.clientCapabilities` payloads a conformant parser MUST accept / reject (the gadget wire shape).
 - **`@ggui-ai/protocol-conformance/registration-conformance`** — which `(contract, appGadgets, appPublicEnv)` triples the push-time gadget gate stack MUST accept / reject, and with which precise SPEC §7.9 reject code (`gadget_not_registered` / `gadget_package_mismatch` / `gadget_public_env_missing` / `duplicate_gadget_hook`).
 - **`@ggui-ai/protocol-conformance/resolution-conformance`** — which bundle + style URLs the server MUST compute for a gadget descriptor's transport fields (`bundleHost` precedence, default host, loopback `http` scheme).
 - **`@ggui-ai/protocol-conformance/binding-conformance`** — which MCP tool-binding set a manifest resolves to (a declared `mcpTools` list wins entirely; blueprints without it derive bare tool-name entries from contract tool names) and which artifacts the registry `tool=` / `server=` search filters MUST match (SPEC §7.7.4.1).
+- **`@ggui-ai/protocol-conformance/props-schema-conformance`** — the schema-precise render arbiter (SPEC §2.3.2): the enforced-props-schema builder (drift), its RFC 8785 sha256 hash, the grammar-safe profile verdict, and returned-schema AUTHORITY (sample validity under the case's own `propsSchema`, including the 2026-08-19 out-of-vocabulary enum incident pinned as a permanent sample).
 
 ```ts
 import { runSchemaConformance } from "@ggui-ai/protocol-conformance/schema-conformance";

package/dist/index.d.ts

@@ -16,6 +16,8 @@ export { allFixtures, fixturesByContract, bootstrapProtocolFixtures, consumeBuff
 export type { ContractSlug } from './fixtures/index.js';
 export { gadgetWireSchemaCases, runSchemaConformance, } from './schema-conformance/index.js';
 export type { SchemaConformanceCase, SchemaConformanceMismatch, SchemaConformanceResult, } from './schema-conformance/index.js';
+export { propsSchemaConformanceCases, runPropsSchemaConformance, } from './props-schema-conformance/index.js';
+export type { PropsSchemaConformanceCase, PropsSchemaConformanceFailure, PropsSchemaConformanceReport, PropsSchemaConformanceSample, PropsSchemaImplementation, } from './props-schema-conformance/index.js';
 export { gadgetRegistrationCases, runRegistrationConformance, } from './registration-conformance/index.js';
 export type { GadgetGateRejectCode, GateOutcome, RegistrationConformanceCase, RegistrationConformanceMismatch, RegistrationConformanceResult, } from './registration-conformance/index.js';
 export { gadgetResolutionCases, runResolutionConformance, } from './resolution-conformance/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,YAAY,EAEV,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,EAEV,QAAQ,EACR,qBAAqB,EAErB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAEhB,YAAY,EAEZ,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,aAAa,EACb,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,eAAe,EAEf,SAAS,IAAI,aAAa,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,iBAAiB,EAEjB,YAAY,IAAI,gBAAgB,GACjC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AAQxC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EAInB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,YAAY,EAEV,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,UAAU,EAEV,QAAQ,EACR,qBAAqB,EAErB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,gBAAgB,EAEhB,YAAY,EAEZ,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,aAAa,EACb,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAMpB,YAAY,EACV,eAAe,EAEf,SAAS,IAAI,aAAa,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,iBAAiB,EAEjB,YAAY,IAAI,gBAAgB,GACjC,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,gCAAgC,EAChC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AASxD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,2BAA2B,EAC3B,+BAA+B,EAC/B,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAK7C,OAAO,EACL,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,gCAAgC,CAAC;AAQxC,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,sCAAsC,CAAC;AAG9C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EAInB,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -22,6 +22,12 @@ export { allFixtures, fixturesByContract, bootstrapProtocolFixtures, consumeBuff
 // Schema-conformance — which `DataContract.clientCapabilities`
 // payloads a conformant parser MUST accept / reject.
 export { gadgetWireSchemaCases, runSchemaConformance, } from './schema-conformance/index.js';
+// Props-schema conformance — the schema-precise render arbiter
+// (frozen shape 2026-08-19): the enforced-schema builder, its RFC 8785
+// hash, the grammar-safe profile, and returned-schema AUTHORITY, each
+// graded against caller-supplied callbacks over a polyglot JSON
+// catalog. Includes the live-incident enum sample.
+export { propsSchemaConformanceCases, runPropsSchemaConformance, } from './props-schema-conformance/index.js';
 // Registration-conformance — which `(contract, appGadgets, appPublicEnv)`
 // triples the push-time gadget gate stack MUST accept / reject, with
 // which precise SPEC §7.9 reject code.

package/dist/props-schema-conformance/cases/empty-closed-wrapper.json

@@ -0,0 +1,17 @@
+{
+    "id": "empty-closed-wrapper",
+    "description": "A propsSpec-less / empty contract emits the empty closed wrapper — never omitted for a non-declined handshake. Non-empty props are invalid under it, making the props-without-propsSpec rejection schema-derivable.",
+    "propsSpec": { "properties": {} },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": {},
+        "required": [],
+        "type": "object"
+    },
+    "propsSchemaHash": "d746974fa9afd5e951f76f9af38954b0ad7f436f2120dc974da65e5ee39f856f",
+    "propsSchemaProfile": "grammar-safe",
+    "samples": [
+        { "props": {}, "valid": true },
+        { "props": { "x": 1 }, "valid": false }
+    ]
+}

package/dist/props-schema-conformance/cases/format-in-core-assertive.json

@@ -0,0 +1,28 @@
+{
+    "id": "format-in-core-assertive",
+    "description": "The dialect pin: format is ASSERTIVE (not annotation-only), and the ten-format list is in the grammar-safe core. A malformed date-time MUST reject.",
+    "propsSpec": {
+        "properties": {
+            "when": {
+                "schema": { "type": "string", "format": "date-time" },
+                "required": true
+            }
+        }
+    },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": { "when": { "format": "date-time", "type": "string" } },
+        "required": ["when"],
+        "type": "object"
+    },
+    "propsSchemaHash": "4a9fa57c154a96bdb5b4ac2f3efc878eb07a41cb64e10ac5701a87bee75ad885",
+    "propsSchemaProfile": "grammar-safe",
+    "samples": [
+        { "props": { "when": "2026-08-19T12:00:00Z" }, "valid": true },
+        {
+            "props": { "when": "yesterday" },
+            "valid": false,
+            "note": "format-assertive semantics — annotation-only readers would wrongly accept this"
+        }
+    ]
+}

package/dist/props-schema-conformance/cases/format-out-of-list-full.json

@@ -0,0 +1,21 @@
+{
+    "id": "format-out-of-list-full",
+    "description": "A validator-known format OUTSIDE the enumerated ten (url) classifies 'full'. Server enforcement is unchanged; only grammar compilation is off the table.",
+    "propsSpec": {
+        "properties": {
+            "link": { "schema": { "type": "string", "format": "url" } }
+        }
+    },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": { "link": { "format": "url", "type": "string" } },
+        "required": [],
+        "type": "object"
+    },
+    "propsSchemaHash": "fa2b9ed841ac15c8a5ef525c61dc007532b7a6e6eea37ce7c6177ea5abe15213",
+    "propsSchemaProfile": "full",
+    "samples": [
+        { "props": { "link": "https://example.com/a" }, "valid": true },
+        { "props": { "link": "not a url" }, "valid": false }
+    ]
+}

package/dist/props-schema-conformance/cases/nullable-normalization.json

@@ -0,0 +1,23 @@
+{
+    "id": "nullable-normalization",
+    "description": "OpenAPI nullable:true normalizes to the canonical type union in the emitted bytes; null acceptance is preserved (the validator's nullable widening, made explicit).",
+    "propsSpec": {
+        "properties": {
+            "note": { "schema": { "type": "string", "nullable": true } }
+        }
+    },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": { "note": { "type": ["string", "null"] } },
+        "required": [],
+        "type": "object"
+    },
+    "propsSchemaHash": "e45869c6cabb21553f1ff784c8dfdbbb1cd9992aa516ae98d995b1385a23bee8",
+    "propsSchemaProfile": "grammar-safe",
+    "samples": [
+        { "props": { "note": null }, "valid": true },
+        { "props": { "note": "x" }, "valid": true },
+        { "props": { "note": 1 }, "valid": false },
+        { "props": {}, "valid": true, "note": "note is not required" }
+    ]
+}

package/dist/props-schema-conformance/cases/nullable-object-closed.json

@@ -0,0 +1,50 @@
+{
+    "id": "nullable-object-closed",
+    "description": "Closed shape survives nullability: a nullable free-form object node closes (additionalProperties:false), and the items of a nullable array are descended. Pins the round-2 injectClosedShape residual (2026-08-19) — single-string type comparisons silently left these subtrees open.",
+    "propsSpec": {
+        "properties": {
+            "meta": { "schema": { "type": ["object", "null"] } },
+            "rows": {
+                "schema": {
+                    "type": ["array", "null"],
+                    "items": { "type": "object", "properties": { "id": { "type": "string" } } }
+                }
+            }
+        }
+    },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": {
+            "meta": {
+                "additionalProperties": false,
+                "type": ["object", "null"]
+            },
+            "rows": {
+                "items": {
+                    "additionalProperties": false,
+                    "properties": { "id": { "type": "string" } },
+                    "type": "object"
+                },
+                "type": ["array", "null"]
+            }
+        },
+        "required": [],
+        "type": "object"
+    },
+    "propsSchemaHash": "8fcc242455134dd13ef9a6dbea78ff2b8f623798383e0fa27eacc107856dbc5c",
+    "propsSchemaProfile": "grammar-safe",
+    "samples": [
+        { "props": { "meta": null, "rows": null }, "valid": true },
+        { "props": { "meta": {}, "rows": [{ "id": "a" }] }, "valid": true },
+        {
+            "props": { "meta": { "x": 1 } },
+            "valid": false,
+            "note": "the nullable free-form object is CLOSED — undeclared keys reject"
+        },
+        {
+            "props": { "rows": [{ "id": "a", "extra": 1 }] },
+            "valid": false,
+            "note": "items of a nullable array are closed too"
+        }
+    ]
+}

package/dist/props-schema-conformance/cases/out-of-core-pattern-full.json

@@ -0,0 +1,21 @@
+{
+    "id": "out-of-core-pattern-full",
+    "description": "An out-of-core keyword (pattern) classifies 'full' — the server still enforces it (AUTHORITY covers the whole schema); 'full' only means a grammar-compiling runtime falls back to schema-as-context.",
+    "propsSpec": {
+        "properties": {
+            "code": { "schema": { "type": "string", "pattern": "^[A-Z]+$" } }
+        }
+    },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": { "code": { "pattern": "^[A-Z]+$", "type": "string" } },
+        "required": [],
+        "type": "object"
+    },
+    "propsSchemaHash": "9e9fe92d5aa4dbbda98ef26874acbd732318344126776dc159c3fe9d8fd25b8d",
+    "propsSchemaProfile": "full",
+    "samples": [
+        { "props": { "code": "ABC" }, "valid": true },
+        { "props": { "code": "abc" }, "valid": false }
+    ]
+}

package/dist/props-schema-conformance/cases/scheduler-enum-authority.json

@@ -0,0 +1,36 @@
+{
+    "id": "scheduler-enum-authority",
+    "description": "The incident shape: a closed enum vocabulary. The returned schema IS the enforced schema — props valid under it MUST validate; the out-of-vocabulary value ('booked') MUST reject with the enum keyword.",
+    "propsSpec": {
+        "properties": {
+            "status": {
+                "schema": { "type": "string", "enum": ["open", "busy", "tentative"] },
+                "required": true
+            }
+        }
+    },
+    "propsSchema": {
+        "additionalProperties": false,
+        "properties": {
+            "status": { "enum": ["open", "busy", "tentative"], "type": "string" }
+        },
+        "required": ["status"],
+        "type": "object"
+    },
+    "propsSchemaHash": "1479a6193c963a0d501f0ef80fbba1d2d12087f2da9fcf86b2bd65b54c7e16ee",
+    "propsSchemaProfile": "grammar-safe",
+    "samples": [
+        { "props": { "status": "open" }, "valid": true },
+        {
+            "props": { "status": "booked" },
+            "valid": false,
+            "note": "the live-incident value — out-of-vocabulary enum member"
+        },
+        { "props": {}, "valid": false, "note": "required member missing" },
+        {
+            "props": { "status": "open", "extra": 1 },
+            "valid": false,
+            "note": "closed shape — undeclared key"
+        }
+    ]
+}

package/dist/props-schema-conformance/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Authored vocabulary — pinned here, deliberately decoupled from the
+ * live `@ggui-ai/protocol` source tree (the same drift discipline the
+ * behavioral fixture surface applies). JSON-representable only.
+ */
+export interface PropsSchemaConformanceSample {
+    readonly props: Record<string, unknown>;
+    readonly valid: boolean;
+    readonly note?: string;
+}
+export interface PropsSchemaConformanceCase {
+    readonly id: string;
+    readonly description: string;
+    /** The authored PropsSpec (JSON form). */
+    readonly propsSpec: Record<string, unknown>;
+    /** The expected enforced-schema artifact, in canonical form. */
+    readonly propsSchema: Record<string, unknown>;
+    /** sha256 (lowercase hex) over the RFC 8785 bytes of `propsSchema`. */
+    readonly propsSchemaHash: string;
+    /** Reference profile verdict. */
+    readonly propsSchemaProfile: 'grammar-safe' | 'full';
+    readonly samples: readonly PropsSchemaConformanceSample[];
+}
+/** The published catalog, id-sorted for deterministic reporting. */
+export declare const propsSchemaConformanceCases: readonly PropsSchemaConformanceCase[];
+/** The implementation under test, as callbacks. */
+export interface PropsSchemaImplementation {
+    /** The enforced-schema builder (reference: `buildEnforcedPropsSchema`). */
+    readonly build: (propsSpec: Record<string, unknown>) => Record<string, unknown>;
+    /** The canonical hash (reference: `computePropsSchemaHash`). */
+    readonly hash: (schema: Record<string, unknown>) => string;
+    /** The profile classifier (reference: `classifyPropsSchemaProfile`). */
+    readonly classify: (schema: Record<string, unknown>) => string;
+    /**
+     * Validity of `props` under a validator compiled from `schema`,
+     * read per the pinned dialect (draft-07, format-assertive, closed
+     * shape already in the bytes). Reference:
+     * `validatePropsDataWithSchema(props, schema).valid`.
+     */
+    readonly validate: (props: Record<string, unknown>, schema: Record<string, unknown>) => boolean;
+}
+export interface PropsSchemaConformanceFailure {
+    readonly caseId: string;
+    readonly obligation: 'drift' | 'hash' | 'profile' | 'authority';
+    readonly detail: string;
+}
+export interface PropsSchemaConformanceReport {
+    readonly total: number;
+    readonly failures: readonly PropsSchemaConformanceFailure[];
+}
+/**
+ * Grade an implementation against the catalog. Deterministic; every
+ * failure names the case, the obligation, and the observed value —
+ * the report is the observable-violation surface of this contract.
+ */
+export declare function runPropsSchemaConformance(impl: PropsSchemaImplementation): PropsSchemaConformanceReport;
+//# sourceMappingURL=index.d.ts.map

package/dist/props-schema-conformance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/props-schema-conformance/index.ts"],"names":[],"mappings":"AAyCA;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,iCAAiC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,GAAG,MAAM,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC3D;AAED,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,EAAE,SAAS,0BAA0B,EAS1C,CAAC;AAEpC,mDAAmD;AACnD,MAAM,WAAW,yBAAyB;IACxC,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,CACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC;IAC3D,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC;IAC/D;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC5B,OAAO,CAAC;CACd;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;CAC7D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,yBAAyB,GAC9B,4BAA4B,CAuC9B"}

package/dist/props-schema-conformance/index.js

@@ -0,0 +1,95 @@
+/**
+ * Props-schema conformance catalog — the arbiter fixtures for the
+ * schema-precise render contract (frozen shape 2026-08-19; the six
+ * pins in `docs/plans/2026-08-19-schema-precise-render.md` §2).
+ *
+ * Four obligations, one catalog:
+ *
+ *   - **DRIFT** — `buildPropsSchema(propsSpec)` MUST produce the
+ *     case's `propsSchema` exactly (canonical construction: sorted
+ *     keys at every schema node, closed shape materialized,
+ *     `nullable` rewritten, metadata keywords stripped).
+ *   - **HASH** — sha256 over the RFC 8785 canonical bytes of that
+ *     schema MUST equal the case's `propsSchemaHash` (lowercase hex,
+ *     64 chars). Portable: any JCS library + sha256 reproduces it.
+ *   - **PROFILE** — the grammar-safe classification MUST equal the
+ *     case's `propsSchemaProfile` (purely syntactic keyword
+ *     membership; unknown wire values degrade to `'full'` on the
+ *     consumer side, but a producer MUST emit the reference verdict).
+ *   - **AUTHORITY** — every sample's validity under a validator
+ *     compiled FROM THE CASE'S `propsSchema` (format-assertive
+ *     dialect) MUST equal `valid`. The returned schema IS the
+ *     enforced schema; the samples include the live-incident
+ *     out-of-vocabulary enum value.
+ *
+ * Same modeling as `../schema-conformance`: structural obligations,
+ * no transport, no host. Cases ship as raw JSON under `./cases/` so a
+ * non-TypeScript implementer can grade their own builder/validator;
+ * {@link runPropsSchemaConformance} takes the implementation as
+ * callbacks — the kit never imports a concrete implementation here.
+ * The reference binding (the kit's own meta-test) wires
+ * `@ggui-ai/protocol`'s exports; see
+ * `./props-schema-conformance.test.ts`.
+ */
+import emptyClosedWrapper from './cases/empty-closed-wrapper.json' with { type: 'json' };
+import formatInCoreAssertive from './cases/format-in-core-assertive.json' with { type: 'json' };
+import formatOutOfListFull from './cases/format-out-of-list-full.json' with { type: 'json' };
+import nullableNormalization from './cases/nullable-normalization.json' with { type: 'json' };
+import nullableObjectClosed from './cases/nullable-object-closed.json' with { type: 'json' };
+import outOfCorePatternFull from './cases/out-of-core-pattern-full.json' with { type: 'json' };
+import schedulerEnumAuthority from './cases/scheduler-enum-authority.json' with { type: 'json' };
+/** The published catalog, id-sorted for deterministic reporting. */
+export const propsSchemaConformanceCases = [
+    emptyClosedWrapper,
+    formatInCoreAssertive,
+    formatOutOfListFull,
+    nullableNormalization,
+    nullableObjectClosed,
+    outOfCorePatternFull,
+    schedulerEnumAuthority,
+];
+/**
+ * Grade an implementation against the catalog. Deterministic; every
+ * failure names the case, the obligation, and the observed value —
+ * the report is the observable-violation surface of this contract.
+ */
+export function runPropsSchemaConformance(impl) {
+    const failures = [];
+    for (const testCase of propsSchemaConformanceCases) {
+        const built = impl.build(testCase.propsSpec);
+        if (JSON.stringify(built) !== JSON.stringify(testCase.propsSchema)) {
+            failures.push({
+                caseId: testCase.id,
+                obligation: 'drift',
+                detail: `built schema differs from the pinned artifact: ${JSON.stringify(built)}`,
+            });
+        }
+        const hash = impl.hash(testCase.propsSchema);
+        if (hash !== testCase.propsSchemaHash) {
+            failures.push({
+                caseId: testCase.id,
+                obligation: 'hash',
+                detail: `expected ${testCase.propsSchemaHash}, got ${hash}`,
+            });
+        }
+        const profile = impl.classify(testCase.propsSchema);
+        if (profile !== testCase.propsSchemaProfile) {
+            failures.push({
+                caseId: testCase.id,
+                obligation: 'profile',
+                detail: `expected '${testCase.propsSchemaProfile}', got '${profile}'`,
+            });
+        }
+        for (const sample of testCase.samples) {
+            const valid = impl.validate(sample.props, testCase.propsSchema);
+            if (valid !== sample.valid) {
+                failures.push({
+                    caseId: testCase.id,
+                    obligation: 'authority',
+                    detail: `props ${JSON.stringify(sample.props)} expected valid=${sample.valid}, got ${valid}${sample.note ? ` (${sample.note})` : ''}`,
+                });
+            }
+        }
+    }
+    return { total: propsSchemaConformanceCases.length, failures };
+}

package/dist/resource-read-conformance/cases/pin-past-the-head-answers-not-found.json

@@ -0,0 +1,29 @@
+{
+    "name": "pin-past-the-head-answers-not-found",
+    "description": "Epoch history (#483, SPEC §7.1.2.2): a pinned locator whose epoch exceeds the session's head names a record that does not exist — the same NOT_FOUND on -32002, detail-free, that a missing session answers. Nothing about the head's value may leak through the error shape: a caller must not be able to binary-search the history depth off error variance.",
+    "server": { "durableSubstrate": "all", "liveChannel": true },
+    "caller": "owner",
+    "seeds": [
+        {
+            "kind": "epoch-history",
+            "session": "7a4d9c15-8e2f-4b06-a3c9-5d1f8e0b2c47",
+            "records": [{ "props": { "count": 1 } }, { "props": { "count": 5 } }]
+        }
+    ],
+    "reads": [
+        {
+            "as": "past-head",
+            "locator": {
+                "kind": "render",
+                "session": "7a4d9c15-8e2f-4b06-a3c9-5d1f8e0b2c47",
+                "epoch": 7
+            },
+            "expect": {
+                "kind": "typed-error",
+                "jsonRpcCode": -32002,
+                "dataCode": "NOT_FOUND",
+                "detailAbsent": true
+            }
+        }
+    ]
+}

package/dist/resource-read-conformance/cases/pinned-superseded-record-serves-its-reign-immutably.json

@@ -0,0 +1,42 @@
+{
+    "name": "pinned-superseded-record-serves-its-reign-immutably",
+    "description": "Epoch history (#483, SPEC §7.1.2.2): a session whose head advanced to epoch 1 still serves its superseded epoch-0 record on the pinned locator — with the props of ITS reign (the amended mint state), never the successor's — and serves them byte-identically on a second read. The bare locator meanwhile tracks the live head. Immutability is graded on propsJson only: live-channel tokens on the same meta legitimately differ per read; the RECORD is what may not.",
+    "server": { "durableSubstrate": "all", "liveChannel": true },
+    "caller": "owner",
+    "seeds": [
+        {
+            "kind": "epoch-history",
+            "session": "5e2c7a90-4f1b-4c3d-8a67-9b0e2d4f6a81",
+            "records": [{ "props": { "count": 1 } }, { "props": { "count": 5 } }]
+        }
+    ],
+    "reads": [
+        {
+            "as": "pin0-first",
+            "locator": {
+                "kind": "render",
+                "session": "5e2c7a90-4f1b-4c3d-8a67-9b0e2d4f6a81",
+                "epoch": 0
+            },
+            "expect": { "kind": "pinned-mount", "propsInclude": { "count": 1 } }
+        },
+        {
+            "as": "pin0-second",
+            "locator": {
+                "kind": "render",
+                "session": "5e2c7a90-4f1b-4c3d-8a67-9b0e2d4f6a81",
+                "epoch": 0
+            },
+            "expect": { "kind": "pinned-mount", "propsInclude": { "count": 1 } }
+        },
+        {
+            "as": "head",
+            "locator": {
+                "kind": "render",
+                "session": "5e2c7a90-4f1b-4c3d-8a67-9b0e2d4f6a81"
+            },
+            "expect": { "kind": "pinned-mount", "propsInclude": { "count": 5 } }
+        }
+    ],
+    "identicalMounts": ["pin0-first", "pin0-second"]
+}

package/dist/resource-read-conformance/index.d.ts

@@ -98,6 +98,19 @@ export type ResourceReadSeed = {
      */
     readonly kind: 'registered-blueprint';
     readonly as: string;
+} | {
+    /**
+     * A session with epoch HISTORY (#483): `records[0]` is the mint
+     * (epoch 0), each later entry one `ggui_update` (epoch N). The
+     * driver seeds the ledger so every superseded record is
+     * reconstructable (an in-reign props event per record) and the
+     * row carries the head epoch.
+     */
+    readonly kind: 'epoch-history';
+    readonly session: string;
+    readonly records: ReadonlyArray<{
+        readonly props: Readonly<Record<string, unknown>>;
+    }>;
 };
 /**
  * The blueprint-key segment of a locator.
@@ -127,6 +140,14 @@ export type ResourceReadLocator = {
     readonly kind: 'render';
     readonly session: string;
     readonly key?: ResourceReadKey;
+    /**
+     * Epoch pin (#483, SPEC §7.1.2.2): present ⇒ the kit reads the
+     * PINNED history record (`…#N`); absent ⇒ the live head. The
+     * fragment encoding is pinned HERE deliberately — the kit is
+     * the arbiter of the wire grammar, so an encoding change is a
+     * conscious, visible kit change.
+     */
+    readonly epoch?: number;
 } | {
     readonly kind: 'raw';
     readonly uri: string;
@@ -169,6 +190,15 @@ export type ResourceReadExpectation = {
 } | {
     /** A result whose contents declare a delivery channel. */
     readonly kind: 'live-mount';
+} | {
+    /**
+     * A mount serving a HISTORY record (#483): still a real mount
+     * (delivery channel required), graded additionally on its
+     * props — every `propsInclude` entry must appear in the parsed
+     * `propsJson` with the authored value.
+     */
+    readonly kind: 'pinned-mount';
+    readonly propsInclude?: Readonly<Record<string, unknown>>;
 };
 /** One read within a case. */
 export interface ResourceReadProbe {
@@ -209,6 +239,14 @@ export interface ResourceReadConformanceCase {
      * not excused here.
      */
     readonly indistinguishable?: readonly string[];
+    /**
+     * Probe names whose MOUNT outcomes must carry byte-identical
+     * `propsJson` (#483 — pinned-record immutability). Deliberately
+     * compares ONLY the props: live-channel tokens and expiries on the
+     * same meta legitimately differ per read; the RECORD is what may
+     * not.
+     */
+    readonly identicalMounts?: readonly string[];
     /**
      * Literal substrings that MUST NOT appear anywhere in any error frame
      * this case produces. The values a refusal would leak if a diagnostic
@@ -244,6 +282,12 @@ export interface ResourceReadRenderMeta {
     readonly wsToken?: string;
     /** A server-emitted system card, which carries its own content. */
     readonly kind?: string;
+    /**
+     * The mount's props as a JSON string (#483). Graded by the
+     * `pinned-mount` expectation and the `identicalMounts` group;
+     * ungraded elsewhere.
+     */
+    readonly propsJson?: string;
 }
 /** The raw JSON-RPC error body a server put on the wire. */
 export interface JsonRpcErrorFrame {

package/dist/resource-read-conformance/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resource-read-conformance/index.ts"],"names":[],"mappings":"AAuHA;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GACjC,WAAW,GACX,wBAAwB,GACxB,eAAe,GACf,eAAe,CAAC;AAEpB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,GAC9B,KAAK,GACL,MAAM,GACN,eAAe,GACf,iBAAiB,GACjB,eAAe,CAAC;AAEpB,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,iFAAiF;IACjF,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,qDAAqD;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC,GACD;IACE,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5C,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACpC,GACD;IACE,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;CACvD,GACD;IACE,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;CAChC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC,GACD;IACE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC,GACD;IACE,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B,CAAC;AAEN,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAMD,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,8BAA8B;AAC9B,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAElE,iEAAiE;AACjE,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;OASG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,sEAAsE;IACtE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,QAAQ,EAAE,oBAAoB,KAC3B,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAM3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,2BAA2B,EAenE,CAAC;AAMF,uDAAuD;AACvD,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,mBAAmB,EAC5B,cAAc,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GACpD,MAAM,CAWR;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAU7E;AAMD,uDAAuD;AACvD,MAAM,WAAW,8BAA8B;IAC7C,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,iDAAiD;AACjD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,uDAAuD;AACvD,MAAM,WAAW,6BAA6B;IAC5C,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC3D,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC1D;AAED,sDAAsD;AACtD,MAAM,WAAW,iCAAiC;IAChD,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,6BAA6B,CAAC,CA8CxC;AA2SD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,2BAA2B,CAkFrE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resource-read-conformance/index.ts"],"names":[],"mappings":"AAyHA;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GACjC,WAAW,GACX,wBAAwB,GACxB,eAAe,GACf,eAAe,CAAC;AAEpB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,GAC9B,KAAK,GACL,MAAM,GACN,eAAe,GACf,iBAAiB,GACjB,eAAe,CAAC;AAEpB,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,iFAAiF;IACjF,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,qDAAqD;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC,GACD;IACE,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,oEAAoE;IACpE,QAAQ,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC5C,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;CACpC,GACD;IACE,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,CAAC;CACvD,GACD;IACE,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,GACD;IACE;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACnD,CAAC,CAAC;CACJ,CAAC;AAEN;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC,GACD;IACE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC,GACD;IACE,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B,GACD;IACE;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC3D,CAAC;AAEN,8BAA8B;AAC9B,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,0BAA0B;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAMD,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,8BAA8B;AAC9B,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAElE,iEAAiE;AACjE,MAAM,WAAW,4BAA4B;IAC3C;;;;;;;;;OASG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,sEAAsE;IACtE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,QAAQ,EAAE,oBAAoB,KAC3B,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAM3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,2BAA2B,EAiBnE,CAAC;AAMF,uDAAuD;AACvD,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,mBAAmB,EAC5B,cAAc,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GACpD,MAAM,CAYR;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAU7E;AAMD,uDAAuD;AACvD,MAAM,WAAW,8BAA8B;IAC7C,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,iDAAiD;AACjD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,uDAAuD;AACvD,MAAM,WAAW,6BAA6B;IAC5C,2CAA2C;IAC3C,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC3D,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC1D;AAED,sDAAsD;AACtD,MAAM,WAAW,iCAAiC;IAChD,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,6BAA6B,CAAC,CA8CxC;AAkYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,2BAA2B,CA4FrE"}

package/dist/resource-read-conformance/index.js

@@ -111,6 +111,8 @@ import malformedLocator from './cases/malformed-locator-stays-outside-the-typed-
 import liveRowMount from './cases/live-row-read-returns-mount-material.json' with { type: 'json' };
 import remintMount from './cases/evicted-row-remints-from-the-durable-record.json' with { type: 'json' };
 import inlineMount from './cases/channel-less-read-mounts-inline.json' with { type: 'json' };
+import pinnedImmutable from './cases/pinned-superseded-record-serves-its-reign-immutably.json' with { type: 'json' };
+import pinPastHead from './cases/pin-past-the-head-answers-not-found.json' with { type: 'json' };
 // =============================================================================
 // Catalog
 // =============================================================================
@@ -134,6 +136,8 @@ export const resourceReadCases = [
     liveRowMount,
     remintMount,
     inlineMount,
+    pinnedImmutable,
+    pinPastHead,
 ];
 // =============================================================================
 // Locator grammar + the mount predicate
@@ -148,17 +152,18 @@ export const GGUI_RENDER_RESOURCE_URI = 'ui://ggui/render';
 export function renderLocatorUri(locator, registeredKeys = {}) {
     if (locator.kind === 'raw')
         return locator.uri;
+    const pin = locator.epoch === undefined ? '' : `#${locator.epoch}`;
     const base = `${GGUI_RENDER_RESOURCE_URI}/${locator.session}`;
     const keyRef = locator.key;
     if (keyRef === undefined)
-        return base;
+        return `${base}${pin}`;
     if (keyRef.kind === 'literal')
-        return `${base}/${keyRef.value}`;
+        return `${base}/${keyRef.value}${pin}`;
     const key = registeredKeys[keyRef.seed];
     if (key === undefined) {
         throw new Error(`no key was reported for registry seed '${keyRef.seed}'`);
     }
-    return `${base}/${key}`;
+    return `${base}/${key}${pin}`;
 }
 /**
  * Does this render meta carry enough to paint something? One of the
@@ -289,6 +294,9 @@ async function gradeCase(testCase, prepared) {
     const fusion = gradeIndistinguishable(testCase, outcomes);
     if (fusion !== null)
         return { kind: 'fail', failure: fusion };
+    const pinned = gradeIdenticalMounts(testCase, outcomes);
+    if (pinned !== null)
+        return { kind: 'fail', failure: pinned };
     return { kind: 'pass' };
 }
 function gradeProbe(testCase, probe, uri, outcome) {
@@ -309,6 +317,38 @@ function gradeProbe(testCase, probe, uri, outcome) {
         }
         return null;
     }
+    if (probe.expect.kind === 'pinned-mount') {
+        if (outcome.kind !== 'mount') {
+            return fail('a pinned history record within the servable window mounts (SPEC §7.1.2.2)', 'a result whose contents declare a delivery channel and carry the record props', `reading '${uri}' failed, but this pinned record resolves on this server.`);
+        }
+        if (!declaresDeliveryChannel(outcome.renderMeta)) {
+            return fail('a pinned mount is still a mount', 'render meta declaring a delivery channel', `reading '${uri}' succeeded with contents that declare no delivery channel.`);
+        }
+        const include = probe.expect.propsInclude;
+        if (include !== undefined) {
+            const raw = outcome.renderMeta.propsJson;
+            let parsed = null;
+            if (typeof raw === 'string') {
+                try {
+                    const candidate = JSON.parse(raw);
+                    if (isRecord(candidate))
+                        parsed = candidate;
+                }
+                catch {
+                    parsed = null;
+                }
+            }
+            if (parsed === null) {
+                return fail('a pinned mount carries its record props (SPEC §7.1.2.2)', 'parseable propsJson on the render meta', `reading '${uri}' mounted, but its render meta carries no parseable propsJson to grade the record against.`);
+            }
+            for (const [key, expected] of Object.entries(include)) {
+                if (JSON.stringify(parsed[key]) !== JSON.stringify(expected)) {
+                    return fail('a pinned record serves the props of ITS epoch, never a neighbor\'s', `propsJson entry '${key}' = ${JSON.stringify(expected)}`, `reading '${uri}' served '${key}' = ${JSON.stringify(parsed[key])}.`);
+                }
+            }
+        }
+        return null;
+    }
     if (outcome.kind !== 'error') {
         return fail('a read that cannot be mounted answers with a typed error, never a success-shaped result', probe.expect, `reading '${uri}' returned a result, but this locator cannot be mounted on this server.`);
     }
@@ -376,6 +416,40 @@ function gradeDisclosure(testCase, outcomes) {
     }
     return null;
 }
+function gradeIdenticalMounts(testCase, outcomes) {
+    const group = testCase.identicalMounts ?? [];
+    if (group.length < 2)
+        return null;
+    let reference = null;
+    for (const probeName of group) {
+        const outcome = outcomes.get(probeName);
+        if (outcome === undefined || outcome.kind !== 'mount' || outcome.renderMeta.propsJson === undefined) {
+            return {
+                name: testCase.name,
+                probe: probeName,
+                obligation: 'a pinned history record serves identical props on every read (SPEC §7.1.2.2)',
+                expected: 'a mount outcome carrying propsJson to compare',
+                actual: outcome ?? '(no outcome recorded)',
+                message: `probe '${probeName}' is named in this case's identicalMounts group but did not produce a props-carrying mount, so immutability cannot even be compared.`,
+            };
+        }
+        if (reference === null) {
+            reference = { probe: probeName, propsJson: outcome.renderMeta.propsJson };
+            continue;
+        }
+        if (outcome.renderMeta.propsJson !== reference.propsJson) {
+            return {
+                name: testCase.name,
+                probe: probeName,
+                obligation: 'a pinned history record serves identical props on every read (SPEC §7.1.2.2)',
+                expected: reference.propsJson,
+                actual: outcome.renderMeta.propsJson,
+                message: `probes '${reference.probe}' and '${probeName}' read the same pinned record and got different props — the record mutated between reads.`,
+            };
+        }
+    }
+    return null;
+}
 function gradeIndistinguishable(testCase, outcomes) {
     const group = testCase.indistinguishable ?? [];
     if (group.length < 2)
@@ -531,6 +605,14 @@ export function parseCase(input) {
         probeNames.add(parsed.as);
         return parsed;
     });
+    const mountGroup = input['identicalMounts'];
+    if (mountGroup !== undefined) {
+        if (!Array.isArray(mountGroup))
+            throw bad("'identicalMounts' must be an array of probe names");
+        if (mountGroup.length < 2) {
+            throw bad("'identicalMounts' names a single probe — a group of one asserts nothing, which reads as an obligation being graded when it is not");
+        }
+    }
     const group = input['indistinguishable'];
     if (group !== undefined) {
         if (!Array.isArray(group))
@@ -565,6 +647,7 @@ export function parseCase(input) {
         seeds,
         reads,
         ...(group !== undefined ? { indistinguishable: group.map(String) } : {}),
+        ...(mountGroup !== undefined ? { identicalMounts: mountGroup.map(String) } : {}),
         ...(secrets !== undefined ? { disclosesNothing: secrets.map(String) } : {}),
     };
 }
@@ -593,6 +676,7 @@ const CASE_KEYS = [
     'seeds',
     'reads',
     'indistinguishable',
+    'identicalMounts',
     'disclosesNothing',
 ];
 const SERVER_KEYS = [
@@ -606,11 +690,12 @@ const SEED_KEYS = {
     'identity-record': ['kind', 'session', 'key', 'blueprint'],
     'durable-blueprint': ['kind', 'componentRef', 'body'],
     'committed-render': ['kind', 'session', 'size'],
+    'epoch-history': ['kind', 'session', 'records'],
     'uncommitted-render': ['kind', 'session'],
     'registered-blueprint': ['kind', 'as'],
 };
 const LOCATOR_KEYS = {
-    render: ['kind', 'session', 'key'],
+    render: ['kind', 'session', 'key', 'epoch'],
     raw: ['kind', 'uri'],
 };
 const KEY_KEYS = {
@@ -621,6 +706,7 @@ const EXPECTATION_KEYS = {
     'typed-error': ['kind', 'jsonRpcCode', 'dataCode', 'detailAbsent'],
     'outside-typed-set': ['kind'],
     'live-mount': ['kind'],
+    'pinned-mount': ['kind', 'propsInclude'],
 };
 function parseSubstrate(bad, value) {
     switch (value) {
@@ -686,6 +772,21 @@ function parseSeed(bad, seed) {
                 kind: 'uncommitted-render',
                 session: requireText(bad, seed['session'], "an uncommitted-render seed's 'session'"),
             };
+        case 'epoch-history': {
+            const session = requireText(bad, seed['session'], "epoch-history seed 'session'");
+            const rawRecords = seed['records'];
+            if (!Array.isArray(rawRecords) || rawRecords.length < 2) {
+                throw bad("epoch-history seed 'records' must be an array of at least TWO entries — one mint plus one update; a single-record history has nothing superseded to pin");
+            }
+            const records = rawRecords.map((entry, i) => {
+                if (!isRecord(entry) || !isRecord(entry['props'])) {
+                    throw bad(`epoch-history seed record ${i} authors no 'props' object`);
+                }
+                rejectUnknownKeys(bad, entry, ['props'], `epoch-history seed record ${i}`);
+                return { props: entry['props'] };
+            });
+            return { kind: 'epoch-history', session, records };
+        }
         case 'registered-blueprint':
             return {
                 kind: 'registered-blueprint',
@@ -716,10 +817,19 @@ function parseLocator(bad, as, locator) {
     switch (locator['kind']) {
         case 'render': {
             const session = requireText(bad, locator['session'], `probe '${as}' locator 'session'`);
+            const rawEpoch = locator['epoch'];
+            let epoch;
+            if (rawEpoch !== undefined) {
+                if (typeof rawEpoch !== 'number' || !Number.isInteger(rawEpoch) || rawEpoch < 0) {
+                    throw bad(`probe '${as}' locator 'epoch' must be a non-negative integer`);
+                }
+                epoch = rawEpoch;
+            }
             const key = locator['key'];
+            const base = { kind: 'render', session, ...(epoch !== undefined ? { epoch } : {}) };
             if (key === undefined)
-                return { kind: 'render', session };
-            return { kind: 'render', session, key: parseKey(bad, as, key) };
+                return base;
+            return { ...base, key: parseKey(bad, as, key) };
         }
         case 'raw':
             return { kind: 'raw', uri: requireText(bad, locator['uri'], `probe '${as}' locator 'uri'`) };
@@ -755,6 +865,18 @@ function parseExpectation(bad, as, expect) {
     switch (expect['kind']) {
         case 'outside-typed-set':
             return { kind: 'outside-typed-set' };
+        case 'pinned-mount': {
+            const rawInclude = expect['propsInclude'];
+            if (rawInclude !== undefined && !isRecord(rawInclude)) {
+                throw bad(`probe '${as}' 'propsInclude' must be an object of expected prop entries`);
+            }
+            return {
+                kind: 'pinned-mount',
+                ...(rawInclude !== undefined
+                    ? { propsInclude: rawInclude }
+                    : {}),
+            };
+        }
         case 'live-mount':
             return { kind: 'live-mount' };
         case 'typed-error': {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/protocol-conformance",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Conformance test kit for the ggui protocol. Drives a behavioral fixture catalog against a live implementation over WebSocket, a resources/read catalog against a live MCP server, and four pure-function catalogs (schema, registration, resolution, binding) for the gadget and tool-binding obligations, reporting a scorecard-style pass / fail / skip. MCP builders adopt this kit to prove their implementation is protocol-conformant.",
   "license": "Apache-2.0",
   "keywords": [
@@ -55,11 +55,16 @@
       "types": "./dist/binding-conformance/index.d.ts",
       "import": "./dist/binding-conformance/index.js",
       "default": "./dist/binding-conformance/index.js"
+    },
+    "./props-schema-conformance": {
+      "types": "./dist/props-schema-conformance/index.d.ts",
+      "import": "./dist/props-schema-conformance/index.js",
+      "default": "./dist/props-schema-conformance/index.js"
     }
   },
   "dependencies": {
     "ws": "^8.20.1",
-    "@ggui-ai/protocol": "0.8.0"
+    "@ggui-ai/protocol": "0.10.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",