@ggui-ai/protocol 0.13.0 → 0.15.0

package/dist/schemas/public-env-key.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The `GGUI_PUBLIC_APP_*` key grammar — its own module (ggui#819) so the
+ * browser entry can carry the regex without the contract schema that
+ * embeds it.
+ */
+/**
+ * `App.publicEnv` key regex.
+ *
+ * Each key in `App.publicEnv` MUST match this pattern. The prefix is
+ * the **security boundary** — operators can't accidentally stash
+ * sensitive credentials under arbitrary names, and downstream consumers
+ * (render gate, bootstrap projection, iframe shim) can rely on the
+ * naming convention to mean "public-by-design".
+ *
+ * Rule: `GGUI_PUBLIC_APP_` prefix, then uppercase letters / digits /
+ * underscores, at least one char after the prefix.
+ *
+ * `GGUI_PUBLIC_USER_*` keys are RESERVED for a future per-user
+ * channel. The current regex rejects them so App-side config can't
+ * pre-emptively use the namespace.
+ *
+ * Hoisted above `gadgetDescriptorSchema` so the wrapper's `requires`
+ * array can reference it at schema-construction time (TDZ-safe).
+ */
+export declare const PUBLIC_ENV_APP_KEY_RE: RegExp;
+//# sourceMappingURL=public-env-key.d.ts.map

package/dist/schemas/public-env-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-env-key.d.ts","sourceRoot":"","sources":["../../src/schemas/public-env-key.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,QAAiC,CAAC"}

package/dist/schemas/public-env-key.js

@@ -0,0 +1,25 @@
+/**
+ * The `GGUI_PUBLIC_APP_*` key grammar — its own module (ggui#819) so the
+ * browser entry can carry the regex without the contract schema that
+ * embeds it.
+ */
+/**
+ * `App.publicEnv` key regex.
+ *
+ * Each key in `App.publicEnv` MUST match this pattern. The prefix is
+ * the **security boundary** — operators can't accidentally stash
+ * sensitive credentials under arbitrary names, and downstream consumers
+ * (render gate, bootstrap projection, iframe shim) can rely on the
+ * naming convention to mean "public-by-design".
+ *
+ * Rule: `GGUI_PUBLIC_APP_` prefix, then uppercase letters / digits /
+ * underscores, at least one char after the prefix.
+ *
+ * `GGUI_PUBLIC_USER_*` keys are RESERVED for a future per-user
+ * channel. The current regex rejects them so App-side config can't
+ * pre-emptively use the namespace.
+ *
+ * Hoisted above `gadgetDescriptorSchema` so the wrapper's `requires`
+ * array can reference it at schema-construction time (TDZ-safe).
+ */
+export const PUBLIC_ENV_APP_KEY_RE = /^GGUI_PUBLIC_APP_[A-Z0-9_]+$/;

package/dist/schemas/render-input-envelope.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export declare const renderInputEnvelopeSchema: z.ZodObject<{
+    handshakeId: z.ZodString;
+    props: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    themeId: z.ZodOptional<z.ZodString>;
+    infra: z.ZodOptional<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    override: z.ZodOptional<z.ZodObject<{
+        contract: z.ZodOptional<z.ZodType<import("../index.js").DataContract, unknown, z.core.$ZodTypeInternals<import("../index.js").DataContract, unknown>>>;
+        variance: z.ZodOptional<z.ZodType<import("../index.js").BlueprintVariance, unknown, z.core.$ZodTypeInternals<import("../index.js").BlueprintVariance, unknown>>>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export declare const renderInputRouteGuardSchema: z.ZodObject<{
+    infra: z.ZodOptional<z.ZodObject<{
+        model: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+}, z.core.$loose>;
+export type RenderInputEnvelope = z.infer<typeof renderInputEnvelopeSchema>;
+//# sourceMappingURL=render-input-envelope.d.ts.map

package/dist/schemas/render-input-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-input-envelope.d.ts","sourceRoot":"","sources":["../../src/schemas/render-input-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;iBAA6C,CAAC;AA6BpF,eAAO,MAAM,2BAA2B;;;;iBAA+C,CAAC;AAExF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/schemas/render-input-envelope.js

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+import { parseAnyLlmRoute } from '../types/llm-route.js';
+import { renderInputShape } from './mcp.js';
+/**
+ * The render input ENVELOPE — the registered shape plus the route grammar
+ * (ggui#818): `infra.model`, when present, MUST parse as a model route in
+ * either wire form (canonical `provider:model` or LiteLLM `provider/model`;
+ * aliases resolve in both). The render handler parses this BEFORE its
+ * pre-generation gate, so a malformed route is a contract error at zod path
+ * `infra.model` — never a policy refusal (`model_not_in_tier` is reserved
+ * for a well-formed route with no rate row on the effective tier).
+ *
+ * Kept OUT of the registered shape on purpose: `@ggui-ai/iframe-runtime`
+ * bundles `@ggui-ai/protocol` for the browser and never validates a render
+ * input, so the route tables must not ride that bundle. The builder call is
+ * `@__PURE__` so an importer that never uses the envelope drops it — and the
+ * parser with it (the bundle-size gate is the receipt).
+ */
+function buildRenderInputEnvelope() {
+    return z.object(renderInputShape).superRefine((value, ctx) => {
+        const model = value.infra?.model;
+        if (model !== undefined && parseAnyLlmRoute(model) === null) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['infra', 'model'],
+                message: 'infra.model must be a model route: canonical `provider:model` or LiteLLM `provider/model` (aliases resolve in both). Bare model ids are not accepted.',
+            });
+        }
+    });
+}
+export const renderInputEnvelopeSchema = /* @__PURE__ */ buildRenderInputEnvelope();
+const ROUTE_MESSAGE = 'infra.model must be a model route: canonical `provider:model` or LiteLLM `provider/model` (aliases resolve in both). Bare model ids are not accepted.';
+/**
+ * The pre-gate ROUTE GUARD — the route grammar and nothing else. The render
+ * handler parses this before its pre-generation gate so a malformed
+ * `infra.model` never reaches the gate, while a syntactically empty input
+ * still does: #786 pins that a gate's refusal is projected BEFORE the
+ * handler's own parse, so the guard MUST NOT require `handshakeId`/`props`
+ * or reject unknown keys — the full envelope does that after the gate.
+ */
+function buildRenderInputRouteGuard() {
+    return z
+        .object({
+        infra: z
+            .object({
+            model: z
+                .string()
+                .refine((s) => parseAnyLlmRoute(s) !== null, { message: ROUTE_MESSAGE })
+                .optional(),
+        })
+            .passthrough()
+            .optional(),
+    })
+        .passthrough();
+}
+export const renderInputRouteGuardSchema = /* @__PURE__ */ buildRenderInputRouteGuard();

package/dist/schemas/runtime-telemetry-limits.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Bounds the browser runtime shares with the server — its own module
+ * (ggui#819) so `@ggui-ai/protocol/wire` carries the number, not the tool
+ * schemas that enforce it.
+ */
+/**
+ * Per-batch event cap on `ggui_runtime_telemetry` — a bounded
+ * fire-and-forget diagnostic channel, never a data plane.
+ */
+export declare const RUNTIME_TELEMETRY_MAX_EVENTS = 40;
+//# sourceMappingURL=runtime-telemetry-limits.d.ts.map

package/dist/schemas/runtime-telemetry-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-telemetry-limits.d.ts","sourceRoot":"","sources":["../../src/schemas/runtime-telemetry-limits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC"}

package/dist/schemas/runtime-telemetry-limits.js

@@ -0,0 +1,10 @@
+/**
+ * Bounds the browser runtime shares with the server — its own module
+ * (ggui#819) so `@ggui-ai/protocol/wire` carries the number, not the tool
+ * schemas that enforce it.
+ */
+/**
+ * Per-batch event cap on `ggui_runtime_telemetry` — a bounded
+ * fire-and-forget diagnostic channel, never a data plane.
+ */
+export const RUNTIME_TELEMETRY_MAX_EVENTS = 40;

package/dist/transport/websocket.d.ts

@@ -20,11 +20,11 @@
  * pay its type/build cost. Consumers that only need contract payloads
  * stay on the root import.
  */
-import type { ActionEnvelope } from '../types/events';
-import type { JsonObject } from '../types/data-contract';
-import type { SubscribePayload, AckPayload, ErrorPayload, RenderPayload, StreamEnvelope, PropsUpdatePayload, ChannelSubscribePayload, ChannelUnsubscribePayload, ChannelPayloadFrame, ChannelErrorPayload, DrainAckPayload } from '../types/live-channel';
-import type { HostContextObservedPayload } from '../types/host-context';
-import type { GguiSessionEvent } from '../types/ggui-session-event';
+import type { ActionEnvelope } from '../types/events.js';
+import type { JsonObject } from '../types/data-contract.js';
+import type { SubscribePayload, AckPayload, ErrorPayload, RenderPayload, StreamEnvelope, PropsUpdatePayload, ChannelSubscribePayload, ChannelUnsubscribePayload, ChannelPayloadFrame, ChannelErrorPayload, DrainAckPayload } from '../types/live-channel.js';
+import type { HostContextObservedPayload } from '../types/host-context.js';
+import type { GguiSessionEvent } from '../types/ggui-session-event.js';
 /**
  * WebSocket message types for client-server communication.
  * Each type maps to a specific payload shape in the {@link WebSocketMessage} discriminated union.

package/dist/types/auth.d.ts

@@ -1,4 +1,4 @@
-import type { JsonObject } from './data-contract';
+import type { JsonObject } from './data-contract.js';
 /**
  * Authenticated end-user identity.
  * Attached to renders and included in events consumed by agents.

package/dist/types/contract-inference.d.ts

@@ -1,4 +1,4 @@
-import type { DataContract, JsonObject, JsonSchemaTypeName, JsonValue } from './data-contract';
+import type { DataContract, JsonObject, JsonSchemaTypeName, JsonValue } from './data-contract.js';
 /**
  * Extract the JSON Schema `required` array from a schema literal as a
  * string union. Resolves to `never` when `required` is absent, empty,

package/dist/types/events.d.ts

@@ -1,4 +1,4 @@
-import type { JsonValue } from './data-contract';
+import type { JsonValue } from './data-contract.js';
 /**
  * Event type that flows from user to agent.
  *

package/dist/types/ggui-session-event.d.ts

@@ -1,3 +1,6 @@
+import type { z } from 'zod';
+import type { runtimePullEventsPageSchema } from '../schemas/mcp.js';
+import type { DeepReadonly } from './readonly.js';
 /**
  * GguiSessionEvent ledger — wire-frame replay primitives (R7).
  *
@@ -139,11 +142,7 @@ export declare function deriveEpochFromEvents(events: ReadonlyArray<Pick<GguiSes
  *
  * @public
  */
-export interface EventsResponse {
-    readonly events: ReadonlyArray<GguiSessionEvent>;
-    readonly lastSequence: number;
-    readonly hasMore: boolean;
-}
+export type EventsResponse = DeepReadonly<z.infer<typeof runtimePullEventsPageSchema>>;
 /**
  * 410 Gone response body — `sinceSequence` predates the server's
  * replay horizon (events evicted from the bounded ring buffer or

package/dist/types/ggui-session-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ggui-session-event.d.ts","sourceRoot":"","sources":["../../src/types/ggui-session-event.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO;IAC/C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAC5B,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,aAAa,GACb,aAAa,GACb,aAAa,GACb,gBAAgB,CAAC;AAErB;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,GACpD,MAAM,CAMR;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC"}
+{"version":3,"file":"ggui-session-event.d.ts","sourceRoot":"","sources":["../../src/types/ggui-session-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO;IAC/C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAC5B,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,aAAa,GACb,aAAa,GACb,aAAa,GACb,gBAAgB,CAAC;AAErB;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,qEAAqE;IACrE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,GACpD,MAAM,CAMR;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,CACvC,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAC5C,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC"}

package/dist/types/ggui-session-event.js

@@ -1,40 +1,3 @@
-/**
- * GguiSessionEvent ledger — wire-frame replay primitives (R7).
- *
- * Core protocol-layer types backing the unified cursor-replay model.
- * The same ledger is read by:
- *
- *   - `GET /api/sessions/:sessionId/events?sinceSequence=N&limit=M` —
- *     HTTP cursor-replay endpoint; polling clients walk it on a
- *     2s tick.
- *   - WS `subscribe` with `SubscribePayload.sinceSequence` — server
- *     replays events with `seq > sinceSequence` as `render_event`
- *     wire frames BEFORE entering live-stream mode.
- *
- * Two transports, same cursor — switching transports does not lose
- * events.
- *
- * # Why this is core (not an integration)
- *
- * GguiSessionEvent is the wire-frame ledger shape — the structural unit
- * the live-channel transport replays. It sits at the same layer as
- * other transport-level types (`StreamEnvelope`, `AckPayload`). It is
- * NOT an MCP-Apps-integration-specific concept — it's the protocol's
- * primary durable cursor primitive, equally consumed by the
- * `@ggui-ai/iframe-runtime` polling layer and any non-MCP-Apps host.
- *
- * # Source of truth
- *
- * This is the canonical definition. The server-side `GguiSessionStore`
- * seam in `@ggui-ai/mcp-server-core` re-exports these types so
- * implementors (in-memory, sqlite, dynamo) all bind to the same
- * shape. Wave 7 (flatten-render-identity, 2026-05-28): merged the
- * earlier protocol-side `SessionEvent` (sequence + emittedAt + type +
- * payload) into the server-side GguiSessionEvent shape (seq + timestamp +
- * type + data); one ledger primitive everywhere. `timestamp` carries
- * an ISO 8601 UTC string for cross-layer uniformity (was epoch-ms on
- * the server side).
- */
 /**
  * Head epoch implied by an event list: the count of `'ui.reminted'`
  * events. `ggui_render` mints epoch 0 with NO event, so an empty (or

package/dist/types/host-context.d.ts

@@ -40,9 +40,25 @@
  * projection widenings can be detected; this module is the canonical
  * shape for the current schema major.
  */
-import type { JsonValue } from './data-contract';
+import type { JsonValue } from './data-contract.js';
 export type { McpUiDisplayMode, McpUiHostContext, McpUiHostCapabilities, } from '@modelcontextprotocol/ext-apps';
 import type { McpUiDisplayMode } from '@modelcontextprotocol/ext-apps';
+import type { z } from 'zod';
+import type { hostContextProjectionSchema, mcpUiDisplayModeSchema } from '../schemas/mcp.js';
+import type { DeepReadonly } from './readonly.js';
+/**
+ * The wire enum is assignable to ext-apps' `McpUiDisplayMode` — checked at
+ * compile time, so a display mode the host SDK adds is a protocol change
+ * here, never a silent widening.
+ */
+export type HostContextDisplayModeIsExtApps = z.infer<typeof mcpUiDisplayModeSchema> extends McpUiDisplayMode ? true : never;
+/**
+ * Forces the check above to be EVALUATED: a conditional type nobody consumes
+ * is never checked, but a value annotated with it is — if the wire enum ever
+ * drifts from ext-apps' `McpUiDisplayMode`, `true` stops being assignable to
+ * `never` and this line is the compile error.
+ */
+export declare const HOST_CONTEXT_DISPLAY_MODE_IS_EXT_APPS: HostContextDisplayModeIsExtApps;
 /**
  * Width specification — either fixed `width` or `maxWidth`, never both.
  * Matches the spec's discriminated container-dimension shape.
@@ -87,22 +103,7 @@ export interface HostContextDeviceCapabilities {
  * `userAgent` + `toolInfo` intentionally EXCLUDED for v1 — easy to add
  * later if a concrete use case appears.
  */
-export interface HostContextProjection {
-    /** Display modes the host can render this view in. Absent ⇒ assume `['inline']`. */
-    readonly availableDisplayModes?: readonly McpUiDisplayMode[];
-    /** Current display mode the host is rendering. Absent ⇒ assume `'inline'`. */
-    readonly currentDisplayMode?: McpUiDisplayMode;
-    /** Iframe container dimensions. Absent ⇒ unknown; use a reasonable default. */
-    readonly containerDimensions?: HostContextContainerDimensions;
-    /** Host platform classification. */
-    readonly platform?: 'web' | 'desktop' | 'mobile';
-    /** Touch / hover input capability. */
-    readonly deviceCapabilities?: HostContextDeviceCapabilities;
-    /** User's BCP-47 locale (e.g., `'en-US'`). */
-    readonly locale?: string;
-    /** User's IANA timezone (e.g., `'America/Los_Angeles'`). */
-    readonly timeZone?: string;
-}
+export type HostContextProjection = DeepReadonly<z.infer<typeof hostContextProjectionSchema>>;
 /**
  * Live-channel inbound (client → server) payload that delivers the
  * iframe-captured `HostContextProjection` to the server. Server-side

package/dist/types/host-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-context.d.ts","sourceRoot":"","sources":["../../src/types/host-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAkBjD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAMvE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAMlF;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7D,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;IAC/C,+EAA+E;IAC/E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC;IAC9D,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;IAC5D,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAoBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS,CAsDlF;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,CAAC,EAAE,qBAAqB,GAAG,SAAS,EACpC,CAAC,EAAE,qBAAqB,GAAG,SAAS,GACnC,OAAO,CAIT;AAGD,YAAY,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"host-context.d.ts","sourceRoot":"","sources":["../../src/types/host-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAkBjD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,+BAA+B,GACzC,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,SAAS,gBAAgB,GAAG,IAAI,GAAG,KAAK,CAAC;AAEjF;;;;;GAKG;AACH,eAAO,MAAM,qCAAqC,EAAE,+BAAsC,CAAC;AAM3F;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAMlF;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAC9C,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAC5C,CAAC;AAMF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAoBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS,CAsDlF;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,CAAC,EAAE,qBAAqB,GAAG,SAAS,EACpC,CAAC,EAAE,qBAAqB,GAAG,SAAS,GACnC,OAAO,CAIT;AAGD,YAAY,EAAE,SAAS,EAAE,CAAC"}

package/dist/types/host-context.js

@@ -40,6 +40,13 @@
  * projection widenings can be detected; this module is the canonical
  * shape for the current schema major.
  */
+/**
+ * Forces the check above to be EVALUATED: a conditional type nobody consumes
+ * is never checked, but a value annotated with it is — if the wire enum ever
+ * drifts from ext-apps' `McpUiDisplayMode`, `true` stops being assignable to
+ * `never` and this line is the compile error.
+ */
+export const HOST_CONTEXT_DISPLAY_MODE_IS_EXT_APPS = true;
 // =============================================================================
 // Projection helper
 // =============================================================================

package/dist/types/interface-context.d.ts

@@ -6,7 +6,7 @@
  *
  * Allows Claude to generate UIs adapted to the user's device/viewport.
  */
-import type { JsonObject } from './data-contract';
+import type { JsonObject } from './data-contract.js';
 export type PlatformType = 'web' | 'mobile' | 'desktop';
 export type DeviceType = 'phone' | 'tablet' | 'desktop';
 export type Orientation = 'portrait' | 'landscape';

package/dist/types/invoke.d.ts

@@ -5,7 +5,7 @@
  * of truth. Do not hand-author parallel types here.
  */
 import type { z } from 'zod';
-import type { textBlockSchema, toolUseBlockSchema, toolResultBlockSchema, contentBlockSchema, invokeEventSchema, invokeErrorCodeSchema, invokeTurnSchema } from '../schemas/invoke';
+import type { textBlockSchema, toolUseBlockSchema, toolResultBlockSchema, contentBlockSchema, invokeEventSchema, invokeErrorCodeSchema, invokeTurnSchema } from '../schemas/invoke.js';
 export type TextBlock = z.infer<typeof textBlockSchema>;
 export type ToolUseBlock = z.infer<typeof toolUseBlockSchema>;
 export type ToolResultBlock = z.infer<typeof toolResultBlockSchema>;

package/dist/types/lifecycle.d.ts

@@ -33,7 +33,7 @@
  *   - This module is `data` only — no functions, no reducers. Pure
  *     types so the protocol bundle stays tiny.
  */
-import type { JsonObject } from './data-contract';
+import type { JsonObject } from './data-contract.js';
 /**
  * Emitted when the server starts processing a `ggui_handshake` call.
  * Progress UIs transition from their current state into a

package/dist/types/live-channel.d.ts

@@ -15,8 +15,8 @@
  * The corresponding inbound user-action envelope ({@link ActionEnvelope})
  * lives in `types/events.ts` alongside the event-type enum.
  */
-import type { GguiSession } from './render';
-import type { JsonObject, JsonValue, StreamChannelMode } from './data-contract';
+import type { GguiSession } from './render.js';
+import type { JsonObject, JsonValue, StreamChannelMode } from './data-contract.js';
 /**
  * Payload for subscribe message
  */

package/dist/types/llm-route.d.ts

@@ -51,10 +51,10 @@
  *     ready.
  */
 export declare const MODELS: {
-    readonly anthropic: readonly ["claude-fable-5", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5-20251001", "claude-opus-4-8", "claude-sonnet-4-6", "claude-opus-4-7", "claude-opus-4-6"];
+    readonly anthropic: readonly ["claude-fable-5-1", "claude-fable-5", "claude-opus-5", "claude-sonnet-5", "claude-haiku-4-5-20251001", "claude-opus-4-8", "claude-sonnet-4-6", "claude-opus-4-7", "claude-opus-4-6"];
     readonly openai: readonly ["gpt-5.6", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.5", "gpt-5.5-2026-04-23", "gpt-5.5-pro", "gpt-5.5-pro-2026-04-23", "gpt-5.4", "gpt-5.4-2026-03-05", "gpt-5.4-mini", "gpt-5.4-mini-2026-03-17", "gpt-5.4-nano", "gpt-5.4-nano-2026-03-17", "gpt-5.3-codex"];
     readonly google: readonly ["gemini-3.7-flash", "gemini-3.6-flash", "gemini-3.5-flash", "gemini-3.5-flash-lite", "gemini-flash-latest", "gemini-3.1-flash-lite", "gemini-3.1-pro-preview", "gemini-3.1-flash-lite-preview", "gemini-3-flash-preview"];
-    readonly bedrock: readonly ["anthropic.claude-fable-5", "anthropic.claude-opus-5", "anthropic.claude-sonnet-5", "anthropic.claude-opus-4-8", "us.anthropic.claude-haiku-4-5-20251001-v1:0", "eu.anthropic.claude-haiku-4-5-20251001-v1:0", "apac.anthropic.claude-haiku-4-5-20251001-v1:0", "global.anthropic.claude-haiku-4-5-20251001-v1:0", "us.anthropic.claude-sonnet-4-6", "eu.anthropic.claude-sonnet-4-6", "apac.anthropic.claude-sonnet-4-6", "us.anthropic.claude-opus-4-7", "eu.anthropic.claude-opus-4-7", "apac.anthropic.claude-opus-4-7", "global.anthropic.claude-opus-4-7", "us.anthropic.claude-opus-4-6-v1"];
+    readonly bedrock: readonly ["anthropic.claude-fable-5-1", "anthropic.claude-fable-5", "anthropic.claude-opus-5", "anthropic.claude-sonnet-5", "anthropic.claude-opus-4-8", "us.anthropic.claude-haiku-4-5-20251001-v1:0", "eu.anthropic.claude-haiku-4-5-20251001-v1:0", "apac.anthropic.claude-haiku-4-5-20251001-v1:0", "global.anthropic.claude-haiku-4-5-20251001-v1:0", "us.anthropic.claude-sonnet-4-6", "eu.anthropic.claude-sonnet-4-6", "apac.anthropic.claude-sonnet-4-6", "us.anthropic.claude-opus-4-7", "eu.anthropic.claude-opus-4-7", "apac.anthropic.claude-opus-4-7", "global.anthropic.claude-opus-4-7", "us.anthropic.claude-opus-4-6-v1"];
     readonly openrouter: readonly ["anthropic/claude-fable-5", "anthropic/claude-opus-5", "anthropic/claude-sonnet-5", "anthropic/claude-haiku-4.5", "anthropic/claude-sonnet-4.6", "anthropic/claude-opus-4.7", "openai/gpt-5.6-sol", "openai/gpt-5.6-terra", "openai/gpt-5.6-luna", "openai/gpt-5.5", "openai/gpt-5.5-pro", "openai/gpt-5.4-mini", "openai/gpt-5.4-nano", "google/gemini-3.6-flash", "google/gemini-3.5-flash", "google/gemini-3.5-flash-lite", "google/gemini-3.1-pro-preview", "google/gemini-3.1-flash-lite", "x-ai/grok-4.3", "meta-llama/llama-4-maverick", "meta-llama/llama-3.3-70b-instruct", "deepseek/deepseek-v4-pro", "deepseek/deepseek-r1-0528", "qwen/qwen3.7-max", "qwen/qwen3-coder", "mistralai/mistral-large-2512", "openai/gpt-oss-120b"];
 };
 /**

package/dist/types/llm-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llm-route.d.ts","sourceRoot":"","sources":["../../src/types/llm-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,MAAM;;;;;;CAqJT,CAAC;AAMX;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,MAAM,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,WAAW,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,OAAO,CAAC,CAAC,SAAS,WAAW,IAAI,CAAC,SAC1C,YAAY,GACZ,SAAS,GACT,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAC/B,YAAY,CAAC,CAAC,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,QAAQ,GAAG;KACpB,CAAC,IAAI,WAAW,GAAG;QAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;KAAE;CACvD,CAAC,WAAW,CAAC,CAAC;AAMf;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,WAAW,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,WAAW,EAChD,QAAQ,EAAE,CAAC,EACX,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAE1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAKzD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAMtD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CASxE;AAiBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAQjE;AA8CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgB7D;AAuBD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAKvD;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE3D"}
+{"version":3,"file":"llm-route.d.ts","sourceRoot":"","sources":["../../src/types/llm-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,MAAM;;;;;;CAuJT,CAAC;AAMX;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,MAAM,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,WAAW,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,OAAO,CAAC,CAAC,SAAS,WAAW,IAAI,CAAC,SAC1C,YAAY,GACZ,SAAS,GACT,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,GAC/B,YAAY,CAAC,CAAC,CAAC,CAAC;AAEpB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,QAAQ,GAAG;KACpB,CAAC,IAAI,WAAW,GAAG;QAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;KAAE;CACvD,CAAC,WAAW,CAAC,CAAC;AAMf;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,WAAW,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,WAAW,EAChD,QAAQ,EAAE,CAAC,EACX,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,CAE1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAKzD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAMtD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CASxE;AAiBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAajE;AA8CD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgB7D;AAuBD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAKvD;AAmBD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAE3D"}

package/dist/types/llm-route.js

@@ -58,8 +58,9 @@ export const MODELS = {
         // Wire-canonical IDs accepted by api.anthropic.com/v1/messages.
         // Per Anthropic's official models doc (claude.com/docs/about-claude/models/overview):
         // the Claude 5 family (2026-07: Opus 5, Sonnet 5, and the
-        // Mythos-class Fable 5) and the 4.6–4.8 generation carry undated
+        // Mythos-class Fable 5; 2026-09: Fable 5.1) and the 4.6–4.8 generation carry undated
         // wire IDs; Haiku 4.5 still uses the dated form.
+        'claude-fable-5-1', // 2026-09 (ggui#706); dateless like the rest of the 5 family
         'claude-fable-5',
         'claude-opus-5',
         'claude-sonnet-5',
@@ -129,6 +130,7 @@ export const MODELS = {
         //     have enabled Claude in Amazon Bedrock; otherwise every id
         //     403s "not available for this account".
         // Messages-API endpoint (Mantle) — Claude 5 family + Opus 4.8
+        'anthropic.claude-fable-5-1', // ggui#706: Bedrock id for Fable 5.1
         'anthropic.claude-fable-5',
         'anthropic.claude-opus-5',
         'anthropic.claude-sonnet-5',
@@ -321,9 +323,15 @@ export function parseLlmRoute(serialized) {
     const model = serialized.substring(sep + 1);
     if (model.length === 0)
         return null;
-    if (!isValidLlmRoute(provider, model))
+    if (!isLlmProvider(provider))
+        return null;
+    // One model-id vocabulary, two separators: the LiteLLM aliases resolve
+    // here exactly as in `parseLiteLlmString`, so `anthropic:claude-haiku-4-5`
+    // and `anthropic/claude-haiku-4-5` are the same route (#818 origin).
+    const mapped = LITELLM_TO_WIRE[provider]?.[model] ?? model;
+    if (!isValidLlmRoute(provider, mapped))
         return null;
-    return { provider, model };
+    return { provider, model: mapped };
 }
 // ============================================================================
 // LiteLLM back-compat parser/serializer