@ggui-ai/protocol 0.14.0 → 0.15.0

package/dist/schemas/mcp.js

@@ -25,25 +25,10 @@
  */
 import { z } from 'zod';
 import { blueprintDraftSchema, handshakeSuggestionSchema, } from './handshake-suggestion.js';
-import { dataContractSchema, jsonObjectSchema } from './data-contract.js';
+import { dataContractSchema, jsonObjectSchema, jsonValueSchema } from './data-contract.js';
 import { blueprintVarianceSchema, blueprintSourceSchema } from './blueprint.js';
-import { REFUSAL_RETRIES, RENDER_GATE_REFUSAL_CODES, } from '../types/refusal-codes.js';
-// ── Shared Sub-Schemas ──
-export const viewportSchema = z.object({
-    width: z.number(),
-    height: z.number(),
-});
-export const interfaceContextSchema = z.object({
-    viewport: viewportSchema,
-    platform: z.enum(['web', 'mobile', 'desktop']),
-    deviceType: z.enum(['phone', 'tablet', 'desktop']),
-    orientation: z.enum(['portrait', 'landscape']),
-    devicePixelRatio: z.number().optional(),
-    touchPrimary: z.boolean().optional(),
-    shellType: z.enum(['chat', 'fullscreen', 'spatial']).optional(),
-    colorScheme: z.enum(['light', 'dark']).optional(),
-    reducedMotion: z.boolean().optional(),
-}).passthrough();
+import { MCP_ENDPOINT_REFUSAL_CODES, REFUSAL_RETRIES, RENDER_GATE_REFUSAL_CODES, } from '../types/refusal-codes.js';
+import { RUNTIME_TELEMETRY_MAX_EVENTS } from './runtime-telemetry-limits.js';
 // ── Wired Tool Input Shapes ──
 //
 // Raw zod shapes for the non-lifecycle tools. The SHAPE is the canonical
@@ -489,10 +474,16 @@ export const renderOutcomeSchema = z.enum(['rendered', 'failed', 'refused']);
  * row names a `fixBy` other than `caller`: the fix belongs to the app's
  * owner, the tenant, or the operator, and retrying does not perform it.
  */
-export const renderRefusalSchema = z.object({
-    code: z
-        .enum(RENDER_GATE_REFUSAL_CODES)
-        .describe("Registered refusal state. Look the code up in the protocol's refusal registry for its retry class and which party can act; the accompanying `fix` names the one recovery step."),
+/**
+ * The refusal projection every surface shares — what a client acts on:
+ * the diagnostic, the one recovery step, and how the call becomes
+ * possible again. Defined ONCE and spread into each surface's envelope
+ * (the render gate's {@link renderRefusalSchema}, the per-app endpoint's
+ * {@link transportRefusalSchema}); the `code` enum is per surface,
+ * derived from the registry. `fixBy` never travels — it is a registry
+ * attribute a client reads by `code`.
+ */
+const refusalProjectionFields = {
     message: z
         .string()
         .describe('Precise diagnostic — what was checked, and against what. Surface it to the operator; do not parse it.'),
@@ -502,6 +493,12 @@ export const renderRefusalSchema = z.object({
     retry: z
         .enum(REFUSAL_RETRIES)
         .describe("How the call becomes possible again. 'after-fix': a named party acts and the same call then succeeds. 'next-period': time restores it at the next period boundary. 'later': transient — retry after a short delay. 'never': no caller action restores it under this identity."),
+};
+export const renderRefusalSchema = z.object({
+    code: z
+        .enum(RENDER_GATE_REFUSAL_CODES)
+        .describe("Registered refusal state. Look the code up in the protocol's refusal registry for its retry class and which party can act; the accompanying `fix` names the one recovery step."),
+    ...refusalProjectionFields,
     handshake: z
         .literal('intact')
         .describe('The handshake was NOT consumed — nothing was read. The same handshakeId is valid on a retry.'),
@@ -511,6 +508,41 @@ export const renderRefusalSchema = z.object({
         .optional()
         .describe('Present only when the refusing check read a balance: its value at the moment of the check.'),
 });
+/**
+ * A refusal typed on the per-app MCP endpoint's authorization
+ * (ggui#825) — the registry projection WITHOUT the render-only fields:
+ * no `handshake` (nothing was handed), no `balanceCentsAtCheck`. Strict:
+ * a render-only field here is a bug, never a wire state. `code` draws
+ * from {@link MCP_ENDPOINT_REFUSAL_CODES} — today exactly
+ * `app_deprovisioned`, the one refusal with a tenant-side fix and
+ * therefore the one that MUST be legible where a deleted app and a bad
+ * credential would otherwise look alike.
+ */
+export const transportRefusalSchema = z.strictObject({
+    code: z
+        .enum(MCP_ENDPOINT_REFUSAL_CODES)
+        .describe("Registered refusal state on the per-app endpoint. Look the code up in the protocol's refusal registry for its retry class and which party can act."),
+    ...refusalProjectionFields,
+});
+/**
+ * The JSON-RPC error object a per-app MCP endpoint answers with when it
+ * refuses a request for a typed reason (ggui#825, codes ruled in
+ * ggui#836): HTTP 403, `code` `-32003` (`APP_NOT_FOUND` — the endpoint
+ * no longer serves this app, the same reading ggui's embed host gives a
+ * proxy 403) and `message` `App not found`, plus `data.refusal`, which
+ * makes it legible. `data` is strict: it carries the refusal and nothing
+ * else. An authorization failure that is not a registry state answers
+ * HTTP 403 with `-32001` (`UNAUTHORIZED`) and NO `data` — the three
+ * untyped arms stay indistinguishable among themselves by contract:
+ * naming any of them would say which is true. A first-party server
+ * never chooses `-32000`: it is the SDK client's `ConnectionClosed`, so
+ * a bare 403 and a dropped socket would share a number.
+ */
+export const transportRefusalErrorSchema = z.strictObject({
+    code: z.literal(-32003),
+    message: z.literal('App not found'),
+    data: z.strictObject({ refusal: transportRefusalSchema }),
+});
 /**
  * The COMPLETE structuredContent of a refused tool result — the whole
  * payload, not a slice of it. Strict on purpose: a refusal commits
@@ -1174,11 +1206,6 @@ export const runtimePullOutputSchema = z.union([
     runtimePullEventsPageSchema,
     runtimePullHorizonSchema,
 ]);
-/**
- * Per-batch event cap on `ggui_runtime_telemetry` — a bounded
- * fire-and-forget diagnostic channel, never a data plane.
- */
-export const RUNTIME_TELEMETRY_MAX_EVENTS = 40;
 /**
  * `ggui_runtime_telemetry` input — the iframe runtime's transport
  * self-report (`_meta.ui.visibility: ['app']`, view-callable only).
@@ -1255,10 +1282,6 @@ export function isRefusedRenderOutput(output) {
 // mutable JSON; readonly is applied at the seam (`DeepReadonly` on the
 // derived types). Every shape is closed: the transport strip-parses against
 // `.shape`, so the shape IS the wire.
-// Honest exception, pre-existing: three `.readonly()` calls in
-// `schemas/data-contract.ts` (gadget requires/connect, app public env) reach
-// the registered render + handshake inputs through `dataContractSchema` and
-// advertise `readOnly` on tools/list today — ggui#824 removes them.
 // ============================================================================
 /** Display modes an MCP Apps host can render a view in (ext-apps vocabulary). */
 export const mcpUiDisplayModeSchema = z.enum(['inline', 'fullscreen', 'pip']);
@@ -1300,6 +1323,58 @@ export const gguiSessionSummaryWireSchema = z.object({
     wsToken: z.string().optional(),
     wsTokenExpiresAt: z.string().optional(),
 });
+/**
+ * The two states a GguiSession is in on the wire — the pair the consume
+ * loop exits on (`expired`). Owned here (ggui#817 part C2); the type is
+ * derived, never a second list.
+ */
+export const gguiSessionStatusSchema = z.enum(['active', 'expired']);
+/**
+ * One drained row of `ggui_consume` — a user action that reached the
+ * pipe (ggui#817 part C2). Closed on the wire: an unknown key is
+ * stripped at the transport, a missing key refuses the row at the seam
+ * (`parsePendingEnvelope`), so a malformed pipe entry never ships to an
+ * agent typed as a good one.
+ */
+export const consumeEventEntrySchema = z.object({
+    type: z.literal('action'),
+    sessionId: z.string().min(1),
+    intent: z.string(),
+    actionData: jsonValueSchema.nullable(),
+    uiContext: jsonObjectSchema,
+    actionId: z.string(),
+    firedAt: z.string(),
+});
+/**
+ * `ggui_consume`'s output — the drained rows, the session's state, and the
+ * client's observations when the host sent any (ggui#817 part C2). The
+ * handler registers `.shape`; `tools/list` therefore advertises the entry
+ * vocabulary and the status enum instead of a free-form record and a free
+ * string.
+ */
+export const gguiConsumeOutputSchema = z.object({
+    events: z.array(consumeEventEntrySchema),
+    status: gguiSessionStatusSchema,
+    client: clientObservationsSchema.optional(),
+});
+/** `ggui_list_sessions`' output — the closed summary rows (ggui#817 part C2). */
+export const gguiListSessionsOutputSchema = z.object({
+    sessions: z.array(gguiSessionSummaryWireSchema),
+});
+/**
+ * `ggui_emit`'s output (ggui#817 part C2): `accepted` at the boundary, and
+ * `seq` when the server keeps a stream buffer — seq-aware implementations
+ * stamp and return it so replay cursors can be built from the ack.
+ */
+export const gguiEmitOutputSchema = z.object({
+    accepted: z.boolean(),
+    seq: z
+        .number()
+        .int()
+        .nonnegative()
+        .optional()
+        .describe('Session-scoped monotonic outbound sequence assigned to this delivery. Present when the server keeps a stream buffer.'),
+});
 /**
  * `ggui_get_session`'s wire: the store row's six base fields plus the mount
  * variant — for EVERY session. An MCP-Apps mount is locator-only on the
@@ -1307,6 +1382,8 @@ export const gguiSessionSummaryWireSchema = z.object({
  * projection reads them from the row and the wire never fails on that
  * variant. The locator itself is not on this wire (MCP-Apps resources have
  * their own paths).
+ * `contextSnapshot` rides when a component (`render`) mount's row has one —
+ * never on an mcpApps mount.
  */
 export const gguiGetSessionOutputSchema = z.object({
     variant: z.enum(['render', 'mcpApps']),
@@ -1320,7 +1397,8 @@ export const gguiGetSessionOutputSchema = z.object({
      * The last-known value of every declared contextSpec slot, as
      * `ggui_runtime_sync_context` wrote it onto the row — the read path a
      * raw MCP client (no widget-context mirror) has for contextSpec values.
-     * Present iff the row carries one; never an empty placeholder.
+     * Present iff the row carries one — component (`render`) mounts only; an
+     * mcpApps mount never carries one; never an empty placeholder.
      */
     contextSnapshot: jsonObjectSchema.optional(),
 });

package/dist/schemas/public-env-key.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The `GGUI_PUBLIC_APP_*` key grammar — its own module (ggui#819) so the
+ * browser entry can carry the regex without the contract schema that
+ * embeds it.
+ */
+/**
+ * `App.publicEnv` key regex.
+ *
+ * Each key in `App.publicEnv` MUST match this pattern. The prefix is
+ * the **security boundary** — operators can't accidentally stash
+ * sensitive credentials under arbitrary names, and downstream consumers
+ * (render gate, bootstrap projection, iframe shim) can rely on the
+ * naming convention to mean "public-by-design".
+ *
+ * Rule: `GGUI_PUBLIC_APP_` prefix, then uppercase letters / digits /
+ * underscores, at least one char after the prefix.
+ *
+ * `GGUI_PUBLIC_USER_*` keys are RESERVED for a future per-user
+ * channel. The current regex rejects them so App-side config can't
+ * pre-emptively use the namespace.
+ *
+ * Hoisted above `gadgetDescriptorSchema` so the wrapper's `requires`
+ * array can reference it at schema-construction time (TDZ-safe).
+ */
+export declare const PUBLIC_ENV_APP_KEY_RE: RegExp;
+//# sourceMappingURL=public-env-key.d.ts.map

package/dist/schemas/public-env-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-env-key.d.ts","sourceRoot":"","sources":["../../src/schemas/public-env-key.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,QAAiC,CAAC"}

package/dist/schemas/public-env-key.js

@@ -0,0 +1,25 @@
+/**
+ * The `GGUI_PUBLIC_APP_*` key grammar — its own module (ggui#819) so the
+ * browser entry can carry the regex without the contract schema that
+ * embeds it.
+ */
+/**
+ * `App.publicEnv` key regex.
+ *
+ * Each key in `App.publicEnv` MUST match this pattern. The prefix is
+ * the **security boundary** — operators can't accidentally stash
+ * sensitive credentials under arbitrary names, and downstream consumers
+ * (render gate, bootstrap projection, iframe shim) can rely on the
+ * naming convention to mean "public-by-design".
+ *
+ * Rule: `GGUI_PUBLIC_APP_` prefix, then uppercase letters / digits /
+ * underscores, at least one char after the prefix.
+ *
+ * `GGUI_PUBLIC_USER_*` keys are RESERVED for a future per-user
+ * channel. The current regex rejects them so App-side config can't
+ * pre-emptively use the namespace.
+ *
+ * Hoisted above `gadgetDescriptorSchema` so the wrapper's `requires`
+ * array can reference it at schema-construction time (TDZ-safe).
+ */
+export const PUBLIC_ENV_APP_KEY_RE = /^GGUI_PUBLIC_APP_[A-Z0-9_]+$/;

package/dist/schemas/render-input-envelope.d.ts

@@ -7,8 +7,8 @@ export declare const renderInputEnvelopeSchema: z.ZodObject<{
         model: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     override: z.ZodOptional<z.ZodObject<{
-        contract: z.ZodOptional<z.ZodType<import("..").DataContract, unknown, z.core.$ZodTypeInternals<import("..").DataContract, unknown>>>;
-        variance: z.ZodOptional<z.ZodType<import("..").BlueprintVariance, unknown, z.core.$ZodTypeInternals<import("..").BlueprintVariance, unknown>>>;
+        contract: z.ZodOptional<z.ZodType<import("../index.js").DataContract, unknown, z.core.$ZodTypeInternals<import("../index.js").DataContract, unknown>>>;
+        variance: z.ZodOptional<z.ZodType<import("../index.js").BlueprintVariance, unknown, z.core.$ZodTypeInternals<import("../index.js").BlueprintVariance, unknown>>>;
     }, z.core.$strict>>;
 }, z.core.$strip>;
 export declare const renderInputRouteGuardSchema: z.ZodObject<{

package/dist/schemas/runtime-telemetry-limits.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Bounds the browser runtime shares with the server — its own module
+ * (ggui#819) so `@ggui-ai/protocol/wire` carries the number, not the tool
+ * schemas that enforce it.
+ */
+/**
+ * Per-batch event cap on `ggui_runtime_telemetry` — a bounded
+ * fire-and-forget diagnostic channel, never a data plane.
+ */
+export declare const RUNTIME_TELEMETRY_MAX_EVENTS = 40;
+//# sourceMappingURL=runtime-telemetry-limits.d.ts.map

package/dist/schemas/runtime-telemetry-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-telemetry-limits.d.ts","sourceRoot":"","sources":["../../src/schemas/runtime-telemetry-limits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC"}

package/dist/schemas/runtime-telemetry-limits.js

@@ -0,0 +1,10 @@
+/**
+ * Bounds the browser runtime shares with the server — its own module
+ * (ggui#819) so `@ggui-ai/protocol/wire` carries the number, not the tool
+ * schemas that enforce it.
+ */
+/**
+ * Per-batch event cap on `ggui_runtime_telemetry` — a bounded
+ * fire-and-forget diagnostic channel, never a data plane.
+ */
+export const RUNTIME_TELEMETRY_MAX_EVENTS = 40;

package/dist/transport/websocket.d.ts

@@ -20,11 +20,11 @@
  * pay its type/build cost. Consumers that only need contract payloads
  * stay on the root import.
  */
-import type { ActionEnvelope } from '../types/events';
-import type { JsonObject } from '../types/data-contract';
-import type { SubscribePayload, AckPayload, ErrorPayload, RenderPayload, StreamEnvelope, PropsUpdatePayload, ChannelSubscribePayload, ChannelUnsubscribePayload, ChannelPayloadFrame, ChannelErrorPayload, DrainAckPayload } from '../types/live-channel';
-import type { HostContextObservedPayload } from '../types/host-context';
-import type { GguiSessionEvent } from '../types/ggui-session-event';
+import type { ActionEnvelope } from '../types/events.js';
+import type { JsonObject } from '../types/data-contract.js';
+import type { SubscribePayload, AckPayload, ErrorPayload, RenderPayload, StreamEnvelope, PropsUpdatePayload, ChannelSubscribePayload, ChannelUnsubscribePayload, ChannelPayloadFrame, ChannelErrorPayload, DrainAckPayload } from '../types/live-channel.js';
+import type { HostContextObservedPayload } from '../types/host-context.js';
+import type { GguiSessionEvent } from '../types/ggui-session-event.js';
 /**
  * WebSocket message types for client-server communication.
  * Each type maps to a specific payload shape in the {@link WebSocketMessage} discriminated union.

package/dist/types/auth.d.ts

@@ -1,4 +1,4 @@
-import type { JsonObject } from './data-contract';
+import type { JsonObject } from './data-contract.js';
 /**
  * Authenticated end-user identity.
  * Attached to renders and included in events consumed by agents.

package/dist/types/contract-inference.d.ts

@@ -1,4 +1,4 @@
-import type { DataContract, JsonObject, JsonSchemaTypeName, JsonValue } from './data-contract';
+import type { DataContract, JsonObject, JsonSchemaTypeName, JsonValue } from './data-contract.js';
 /**
  * Extract the JSON Schema `required` array from a schema literal as a
  * string union. Resolves to `never` when `required` is absent, empty,

package/dist/types/events.d.ts

@@ -1,4 +1,4 @@
-import type { JsonValue } from './data-contract';
+import type { JsonValue } from './data-contract.js';
 /**
  * Event type that flows from user to agent.
  *

package/dist/types/ggui-session-event.d.ts

@@ -1,6 +1,6 @@
 import type { z } from 'zod';
-import type { runtimePullEventsPageSchema } from '../schemas/mcp';
-import type { DeepReadonly } from './readonly';
+import type { runtimePullEventsPageSchema } from '../schemas/mcp.js';
+import type { DeepReadonly } from './readonly.js';
 /**
  * GguiSessionEvent ledger — wire-frame replay primitives (R7).
  *

package/dist/types/host-context.d.ts

@@ -40,12 +40,12 @@
  * projection widenings can be detected; this module is the canonical
  * shape for the current schema major.
  */
-import type { JsonValue } from './data-contract';
+import type { JsonValue } from './data-contract.js';
 export type { McpUiDisplayMode, McpUiHostContext, McpUiHostCapabilities, } from '@modelcontextprotocol/ext-apps';
 import type { McpUiDisplayMode } from '@modelcontextprotocol/ext-apps';
 import type { z } from 'zod';
-import type { hostContextProjectionSchema, mcpUiDisplayModeSchema } from '../schemas/mcp';
-import type { DeepReadonly } from './readonly';
+import type { hostContextProjectionSchema, mcpUiDisplayModeSchema } from '../schemas/mcp.js';
+import type { DeepReadonly } from './readonly.js';
 /**
  * The wire enum is assignable to ext-apps' `McpUiDisplayMode` — checked at
  * compile time, so a display mode the host SDK adds is a protocol change

package/dist/types/interface-context.d.ts

@@ -6,7 +6,7 @@
  *
  * Allows Claude to generate UIs adapted to the user's device/viewport.
  */
-import type { JsonObject } from './data-contract';
+import type { JsonObject } from './data-contract.js';
 export type PlatformType = 'web' | 'mobile' | 'desktop';
 export type DeviceType = 'phone' | 'tablet' | 'desktop';
 export type Orientation = 'portrait' | 'landscape';

package/dist/types/invoke.d.ts

@@ -5,7 +5,7 @@
  * of truth. Do not hand-author parallel types here.
  */
 import type { z } from 'zod';
-import type { textBlockSchema, toolUseBlockSchema, toolResultBlockSchema, contentBlockSchema, invokeEventSchema, invokeErrorCodeSchema, invokeTurnSchema } from '../schemas/invoke';
+import type { textBlockSchema, toolUseBlockSchema, toolResultBlockSchema, contentBlockSchema, invokeEventSchema, invokeErrorCodeSchema, invokeTurnSchema } from '../schemas/invoke.js';
 export type TextBlock = z.infer<typeof textBlockSchema>;
 export type ToolUseBlock = z.infer<typeof toolUseBlockSchema>;
 export type ToolResultBlock = z.infer<typeof toolResultBlockSchema>;

package/dist/types/lifecycle.d.ts

@@ -33,7 +33,7 @@
  *   - This module is `data` only — no functions, no reducers. Pure
  *     types so the protocol bundle stays tiny.
  */
-import type { JsonObject } from './data-contract';
+import type { JsonObject } from './data-contract.js';
 /**
  * Emitted when the server starts processing a `ggui_handshake` call.
  * Progress UIs transition from their current state into a

package/dist/types/live-channel.d.ts

@@ -15,8 +15,8 @@
  * The corresponding inbound user-action envelope ({@link ActionEnvelope})
  * lives in `types/events.ts` alongside the event-type enum.
  */
-import type { GguiSession } from './render';
-import type { JsonObject, JsonValue, StreamChannelMode } from './data-contract';
+import type { GguiSession } from './render.js';
+import type { JsonObject, JsonValue, StreamChannelMode } from './data-contract.js';
 /**
  * Payload for subscribe message
  */

package/dist/types/mcp.d.ts

@@ -1,10 +1,9 @@
 import type { z } from 'zod';
-import type { DataContract, JsonObject, JsonSchema, JsonValue } from './data-contract';
-import type { GguiSessionStatus } from './render';
-import type { DeepReadonly } from './readonly';
-import type { consumeInputSchema, getRenderSourceInputSchema, getSessionInputSchema, handshakeInputSchema, handshakeOutputSchema, renderBlueprintInputSchema, renderCacheMarkerSchema, renderErrorSchema, renderInputSchema, renderOutputSchema, resourceReadErrorCodeSchema, resourceReadErrorSchema, runtimePullInputSchema, runtimeTelemetryInputSchema, runtimeTelemetryOutputSchema, searchBlueprintsInputSchema, updateInputSchema, updateOutputSchema, amendInputSchema, amendOutputSchema, declareToolCatalogOutputSchema, gguiGetSessionOutputSchema, gguiSearchBlueprintsOutputSchema } from '../schemas/mcp';
-import type { EventsResponse, ReplayHorizonPassedError } from './ggui-session-event';
-export type { GguiSessionStatus } from './render';
+import type { DataContract, JsonObject, JsonSchema, JsonValue } from './data-contract.js';
+import type { DeepReadonly } from './readonly.js';
+import type { consumeInputSchema, getRenderSourceInputSchema, getSessionInputSchema, handshakeInputSchema, handshakeOutputSchema, renderBlueprintInputSchema, renderCacheMarkerSchema, renderErrorSchema, renderInputSchema, renderOutputSchema, resourceReadErrorCodeSchema, resourceReadErrorSchema, runtimePullInputSchema, runtimeTelemetryInputSchema, runtimeTelemetryOutputSchema, searchBlueprintsInputSchema, updateInputSchema, updateOutputSchema, amendInputSchema, amendOutputSchema, declareToolCatalogOutputSchema, gguiGetSessionOutputSchema, gguiSearchBlueprintsOutputSchema, consumeEventEntrySchema, gguiConsumeOutputSchema, gguiEmitOutputSchema, gguiListSessionsOutputSchema } from '../schemas/mcp.js';
+import type { EventsResponse, ReplayHorizonPassedError } from './ggui-session-event.js';
+export type { GguiSessionStatus } from './render.js';
 /** Target screen size category for responsive layout */
 export type Screen = 'mobile' | 'tablet' | 'desktop' | 'universal';
 /**
@@ -107,17 +106,9 @@ export interface GguiEmitInput<TPayload = JsonValue> {
  * any subscriber is currently connected is a separate concern and does
  * NOT affect this flag. No-subscriber is not an error.
  */
-export interface GguiEmitOutput {
-    /** True when the server accepted the delivery at the boundary. */
-    accepted: boolean;
-    /**
-     * GguiSession-scoped monotonic outbound sequence assigned to this
-     * delivery. Omitted on implementations without a
-     * `GguiSessionStreamBuffer` (hosted cloud today); required on OSS
-     * `@ggui-ai/mcp-server`.
-     */
-    seq?: number;
-}
+export type GguiEmitOutput = DeepReadonly<z.infer<typeof gguiEmitOutputSchema>>;
+/** `ggui_list_sessions`' wire, derived from {@link gguiListSessionsOutputSchema} (ggui#817 part C2). */
+export type GguiListSessionsOutput = DeepReadonly<z.infer<typeof gguiListSessionsOutputSchema>>;
 /**
  * Input for ggui_get_session tool — retrieves render state.
  * Derived from `getSessionInputSchema`.
@@ -128,7 +119,7 @@ export type GguiGetSessionInput = z.infer<typeof getSessionInputSchema>;
  * + the store row's six base fields, plus `contextSnapshot` when the row has
  * one. Nothing else on the row travels (the transport strip-parses to this).
  */
-export type GguiGetSessionOutput = Readonly<z.infer<typeof gguiGetSessionOutputSchema>>;
+export type GguiGetSessionOutput = DeepReadonly<z.infer<typeof gguiGetSessionOutputSchema>>;
 /**
  * Input for ggui_get_render_source tool — read the generated source of
  * the calling app's own render. Derived from `getRenderSourceInputSchema`.
@@ -167,32 +158,7 @@ export interface GguiGetRenderSourceOutput {
  * seam) — consume reads from a separate render-scoped pipe whose entries
  * originate at `submit_action`.
  */
-export interface ConsumeEventEntry {
-    /** Stable discriminator — always the literal `'action'`. */
-    readonly type: 'action';
-    /** GguiSession the gesture targeted. */
-    readonly sessionId: string;
-    /** Which `actionSpec[*]` entry the iframe dispatched against. */
-    readonly intent: string;
-    /**
-     * Typed payload satisfying `actionSpec[intent].schema`. `null` for
-     * no-payload gestures (bare button click).
-     */
-    readonly actionData: JsonValue | null;
-    /**
-     * Snapshot of the contract's `contextSpec` slot values at the moment
-     * the user fired the gesture. Empty object `{}` when the contract
-     * has no `contextSpec` or no slots have been mirrored yet.
-     */
-    readonly uiContext: JsonObject;
-    /**
-     * 8-hex FNV-1a correlation id of the gesture — matches the iframe-
-     * runtime's outstanding-toast key and the server's `drain_ack` frame.
-     */
-    readonly actionId: string;
-    /** ISO 8601 UTC timestamp of the gesture (iframe-local clock). */
-    readonly firedAt: string;
-}
+export type ConsumeEventEntry = Readonly<z.infer<typeof consumeEventEntrySchema>>;
 /**
  * Output from `ggui_consume` — buffered consume-entries.
  *
@@ -202,23 +168,7 @@ export interface ConsumeEventEntry {
  * single source of truth — both the action and the local UI state are
  * atomic on a single entry.
  */
-export interface GguiConsumeOutput {
-    /** Buffered consume-entries (cleared after return). */
-    events: ConsumeEventEntry[];
-    /** GguiSession status — `'expired'` means the GguiSession's TTL elapsed and
-     *  no more events will arrive; the agent's long-poll loop terminates. */
-    status: GguiSessionStatus;
-    /**
-     * Client-side observations echoed back to the agent. Same shape
-     * `ggui_handshake` exposes. Lets the agent pick up mid-render
-     * changes (window resize, fullscreen toggle, etc.) without waiting
-     * for the next handshake. Absent ⇒ no client observations yet.
-     *
-     */
-    client?: {
-        readonly hostContext?: import('./host-context.js').HostContextProjection;
-    };
-}
+export type GguiConsumeOutput = DeepReadonly<z.infer<typeof gguiConsumeOutputSchema>>;
 /**
  * Input for ggui_search_blueprints tool — semantic search over
  * blueprints. Derived from `searchBlueprintsInputSchema`.
@@ -372,7 +322,7 @@ export type RenderCacheMarker = z.infer<typeof renderCacheMarkerSchema>;
  * Canonical declaration lives beside the schema in `schemas/mcp.ts`;
  * re-exported here so existing importers keep their path.
  */
-export type { RenderErrorCode } from '../schemas/mcp';
+export type { RenderErrorCode } from '../schemas/mcp.js';
 /**
  * In-result failure marker on `GguiRenderOutput.error` — present iff the
  * tool result is `isError: true`. Derived from {@link renderErrorSchema}.
@@ -385,7 +335,7 @@ export type RenderError = z.infer<typeof renderErrorSchema>;
  * schemas in `schemas/mcp.ts`; re-exported here so importers of the
  * output types find them on the same path.
  */
-export type { PreGenerationRefusal, RenderOutcome } from '../schemas/mcp';
+export type { PreGenerationRefusal, RenderOutcome } from '../schemas/mcp.js';
 /**
  * Canonical failure code for a `resources/read` on a render locator
  * (SPEC §7.9 Plane 1). Derived from
@@ -483,6 +433,13 @@ export declare const PLATFORM_ERROR_CODES: {
     readonly APP_LIMIT_EXCEEDED: -32011;
     readonly CONCURRENT_SESSION_LIMIT: -32012;
     readonly RATE_LIMIT_EXCEEDED: -32013;
+    /**
+     * The generation queue is saturated — the server, not the caller, is
+     * the limit (contrast `RATE_LIMIT_EXCEEDED`: the caller slows down). HTTP
+     * 503 with `Retry-After`, which governs the retry; a parsed request's
+     * refusal, so it speaks this table (ggui#836 follow-up).
+     */
+    readonly GENERATION_OVERLOADED: -32014;
     readonly CONTRACT_VIOLATION: -32020;
 };
 //# sourceMappingURL=mcp.d.ts.map

package/dist/types/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/types/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,cAAc,EACd,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAQlD,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,GAAG,SAAS;IACjD,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,EAAE,QAAQ,CAAC;IAElB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CACzC,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAC3C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;QACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC;CACH;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;6EACyE;IACzE,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,CAAC;KAC1E,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,2BAA2B,CACnC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,YAAY,CACnD,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CACjD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,0BAA0B,CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,GAAG,UAAU;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,OAAO,GAAG,SAAS;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAEF,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAUD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,wBAAwB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMtF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;IAW1B;;;;;;;;;;;;;OAaG;;CAEK,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;CAMvB,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/types/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,8BAA8B,EAC9B,0BAA0B,EAC1B,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,cAAc,EACd,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAQlD,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,GAAG,SAAS;IACjD,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,EAAE,QAAQ,CAAC;IAElB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;AAEhF,wGAAwG;AACxG,MAAM,MAAM,sBAAsB,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC;AAIhG;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAC7C,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAC3C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;QACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC;CACH;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAElF;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC;AAEtF;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,2BAA2B,CACnC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,YAAY,CACnD,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CACjD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,0BAA0B,CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,GAAG,UAAU;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,OAAO,GAAG,SAAS;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAEF,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAUD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,wBAAwB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMtF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;IAW1B;;;;;;;;;;;;;OAaG;;CAEK,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;IAK/B;;;;;OAKG;;;CAGK,CAAC"}

package/dist/types/mcp.js

@@ -50,5 +50,12 @@ export const PLATFORM_ERROR_CODES = {
     APP_LIMIT_EXCEEDED: -32011,
     CONCURRENT_SESSION_LIMIT: -32012,
     RATE_LIMIT_EXCEEDED: -32013,
+    /**
+     * The generation queue is saturated — the server, not the caller, is
+     * the limit (contrast `RATE_LIMIT_EXCEEDED`: the caller slows down). HTTP
+     * 503 with `Retry-After`, which governs the retry; a parsed request's
+     * refusal, so it speaks this table (ggui#836 follow-up).
+     */
+    GENERATION_OVERLOADED: -32014,
     CONTRACT_VIOLATION: -32020,
 };