@ggui-ai/protocol-reference-server 0.15.0 → 0.17.0

package/README.md

@@ -14,7 +14,7 @@ kit grounds the claim empirically rather than by assertion.
 - WebSocket transport matching the ggui live-channel wire.
 - In-memory render store with a consume-buffer event ledger (no persistence).
 - `schemaVersion` handshake with `UPGRADE_REQUIRED` on mismatch.
-- Subscribe tenancy: the subscribe's `appId` must match the GguiSession's
+- Subscribe app scope: the subscribe's `appId` must match the GguiSession's
   bound `appId` or the subscribe is rejected with an `error` frame, code
   `APP_MISMATCH` (an unknown session id still provisions on subscribe,
   binding the subscribe's own `appId`).

package/dist/conformance-host.js

@@ -28,7 +28,7 @@
  * introspection seam — `session-state` fixtures (stateful obligations
  * with no wire response, e.g. `host-context-observed-persists`) grade
  * by reading the GguiSession field back after the observation window.
- * Readable fields: `hostContext`, `appId` (the tenancy column the
+ * Readable fields: `hostContext`, `appId` (the app-scope column the
  * `absent-appid-defaults` fixture grades identity-default resolution
  * against). Unknown fields throw with a clear message so the kit
  * records an honest SKIP, never a weakened pass.
@@ -151,11 +151,11 @@ export function createReferenceConformanceHost({ serverInstance, }) {
                 return render.hostContext;
             }
             if (field === 'appId') {
-                // The tenancy column on the live render row — the kit's
+                // The app-scope column on the live render row — the kit's
                 // `absent-appid-defaults` fixture reads it back to grade the
                 // SPEC §12.2 identity-default resolution (a subscribe that
                 // omits `appId` binds the deployment default, never an
-                // undefined tenant).
+                // undefined app id).
                 return render.appId;
             }
             throw new Error(`reference server does not expose GguiSession field '${field}' via readSessionField — readable fields: hostContext, appId`);

package/dist/host-context.d.ts

@@ -26,10 +26,10 @@
  * persists NOTHING: a partial write from half-valid input would
  * fabricate state the client never coherently observed.
  *
- * Tenancy note: the first-party handler scopes the write through its
+ * Scoping note: the first-party handler scopes the write through its
  * subscriber binding (`NOT_SUBSCRIBED` / `SESSION_MISMATCH` error
  * frames). The reference server has no auth identity by design
- * (accepts any bearer), so its tenancy scope is the render lookup
+ * (accepts any bearer), so its scope is the render lookup
  * itself — the caller drops frames whose `payload.sessionId` names an
  * unknown render, mirroring the action path's unknown-render posture.
  */

package/dist/index.js

@@ -28,7 +28,7 @@ export const REFERENCE_SERVER_VERSION = '0.1.0';
 export { ReferenceServer } from './server.js';
 // Deployment-level identity-default app id (SPEC §12.2: a subscribe
 // MAY omit `appId`; this no-auth server resolves every caller to this
-// deployment-wide tenant). Exported so external runners can assert
+// deployment-wide app id). Exported so external runners can assert
 // the bound default without restating the literal.
 export { DEPLOYMENT_DEFAULT_APP_ID } from './render.js';
 export { createReferenceConformanceHost, } from './conformance-host.js';

package/dist/render.d.ts

@@ -35,7 +35,7 @@ import type { ActionSpec, HostContextProjection } from '@ggui-ai/protocol';
  * model is no-auth — every caller is the same anonymous identity — so
  * the per-identity mapping a real deployment configures collapses to
  * one deployment-wide constant. The value matches the conformance
- * kit's conventional tenant (`'conformance'`, the appId the kit's
+ * kit's conventional app id (`'conformance'`, the appId the kit's
  * runner stamps on its subscribe frames) because grading by the kit is
  * the only deployment context this package has.
  */

package/dist/render.js

@@ -5,7 +5,7 @@
  * model is no-auth — every caller is the same anonymous identity — so
  * the per-identity mapping a real deployment configures collapses to
  * one deployment-wide constant. The value matches the conformance
- * kit's conventional tenant (`'conformance'`, the appId the kit's
+ * kit's conventional app id (`'conformance'`, the appId the kit's
  * runner stamps on its subscribe frames) because grading by the kit is
  * the only deployment context this package has.
  */

package/dist/server.js

@@ -1,7 +1,7 @@
 /**
  * `ReferenceServer` — the minimal WS live-channel server this package
  * exports. Honest scope: SPEC §12.2 wire (subscribe incl. the §12.2
- * appId-tenancy MUST → APP_MISMATCH), version handshake, the single
+ * appId app-scope MUST → APP_MISMATCH), version handshake, the single
  * action-routing model (action → consume-buffer append → ack with
  * sequence; undeclared actions AND schema-violating payloads rejected
  * with CONTRACT_VIOLATION per SPEC §4.6 receipt validation), and
@@ -175,7 +175,7 @@ export class ReferenceServer {
             // obligation is purely stateful: persist the validated
             // projection onto the named render (idempotent overwrite). The
             // first-party server scopes the write through its subscriber
-            // binding; this no-auth server's tenancy scope is the render
+            // binding; this no-auth server's scope is the render
             // lookup itself — malformed frames and unknown renders drop,
             // mirroring the action path.
             const parsed = parseHostContextObservedFrame(frame);
@@ -204,7 +204,7 @@ export class ReferenceServer {
         // every caller is the same anonymous identity — so the
         // identity-default collapses to the deployment-level
         // {@link DEPLOYMENT_DEFAULT_APP_ID}; the resolved value flows
-        // through the SAME tenancy gate + provision-on-subscribe path a
+        // through the SAME app-scope gate + provision-on-subscribe path a
         // client-supplied appId takes. A PRESENT-but-non-string `appId` is
         // still a malformed frame and takes the missing-`sessionId`
         // posture: silently dropped, no error frame, no render
@@ -254,7 +254,7 @@ export class ReferenceServer {
             }
             return;
         }
-        // SPEC §12.2 tenancy MUST: the subscribe's `appId` MUST match the
+        // SPEC §12.2 app-scope MUST: the subscribe's `appId` MUST match the
         // GguiSession's bound appId or the subscribe fails APP_MISMATCH
         // (§12.2.3). The code is deliberately distinct from
         // SESSION_NOT_FOUND — the GguiSession EXISTS, it is reachable only

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ggui-ai/protocol-reference-server",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Minimal reference implementation of the ggui protocol. Implements exactly enough of the live-channel WebSocket wire to pass the @ggui-ai/protocol-conformance kit. Not a production server — it exists to prove the protocol is vendor-neutral: an independent, from-scratch implementation passing the kit grounds that claim empirically.",
   "keywords": [
     "ggui",
@@ -29,14 +29,14 @@
   },
   "dependencies": {
     "ws": "^8.20.1",
-    "@ggui-ai/protocol": "0.15.0"
+    "@ggui-ai/protocol": "0.17.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "@types/ws": "^8.5.10",
     "typescript": "^5.0.0",
     "vitest": "^3.2.6",
-    "@ggui-ai/protocol-conformance": "0.15.0"
+    "@ggui-ai/protocol-conformance": "0.17.0"
   },
   "repository": {
     "type": "git",