@ggui-ai/protocol 0.14.0 → 0.15.0

package/dist/types/refusal-codes.d.ts

@@ -65,8 +65,15 @@
  *   - `owner-api` — an app owner's own billing mutations.
  *   - `provisioning-api` — a tenant provisioning an app on behalf of
  *     its own users.
+ *   - `mcp-endpoint` — the per-app MCP endpoint's authorization, on
+ *     any JSON-RPC request (`initialize` included). The refusal rides
+ *     the JSON-RPC error object's `data.refusal` (HTTP 403, error code
+ *     `-32003` `APP_NOT_FOUND`, message `App not found` — ggui#836); only the codes listed
+ *     here are ever typed there, and an authorization failure that is
+ *     NOT one of them stays a bare 403 by contract, so a client can
+ *     never learn which of the untyped arms it hit.
  */
-export declare const REFUSAL_SURFACES: readonly ["render-gate", "owner-api", "provisioning-api"];
+export declare const REFUSAL_SURFACES: readonly ["render-gate", "owner-api", "provisioning-api", "mcp-endpoint"];
 /** One member of {@link REFUSAL_SURFACES}. */
 export type RefusalSurface = (typeof REFUSAL_SURFACES)[number];
 /** The closed `retry` vocabulary — see the file header for semantics. */
@@ -175,7 +182,7 @@ declare const REFUSAL_ROWS: {
     };
     readonly app_deprovisioned: {
         readonly code: "app_deprovisioned";
-        readonly surfaces: readonly ["render-gate"];
+        readonly surfaces: readonly ["render-gate", "mcp-endpoint"];
         readonly retry: "never";
         readonly emitter: "the generation gate's owner-claim check, before any reservation or metering";
         readonly description: "The app record has no owner claim any more — either the claim was removed, or the record names no issuing tenant at all. A record with no owner cannot be funded, so nothing renders under it and no caller action restores it.";
@@ -310,10 +317,24 @@ type CodesOnSurface<S extends RefusalSurface> = {
  * render wire.
  */
 export type PreGenerationRefusalCode = CodesOnSurface<'render-gate'>;
+/**
+ * A code that can appear in a per-app MCP endpoint refusal's
+ * `error.data.refusal.code` — i.e. one whose `surfaces` include
+ * `mcp-endpoint` (ggui#825). Derived, so a render-gate-only code is not
+ * expressible on the transport wire.
+ */
+export type McpEndpointRefusalCode = CodesOnSurface<'mcp-endpoint'>;
 /**
  * Every render-gate code, as the literal tuple the wire enum
  * (`renderRefusalSchema.code`) is built from. Order is the registry's.
  */
 export declare const RENDER_GATE_REFUSAL_CODES: readonly ["unsupported_provider", "insufficient_credit", "hard_cap_exceeded", "model_not_in_tier", "managed_default_cap_exceeded", "app_policy_missing", "billing_mode_anomaly", "billing_path_missing", "app_canceled", "trial_exhausted", "trial_expired", "issuer_rate_limited", "app_rate_limited", "app_deprovisioned"];
+/**
+ * Every mcp-endpoint code, as the literal tuple the transport wire enum
+ * (`transportRefusalSchema.code`) is built from — the refusals a per-app
+ * MCP endpoint's authorization types on `error.data.refusal`
+ * (ggui#825). Order is the registry's.
+ */
+export declare const MCP_ENDPOINT_REFUSAL_CODES: readonly ["app_deprovisioned"];
 export {};
 //# sourceMappingURL=refusal-codes.d.ts.map

package/dist/types/refusal-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refusal-codes.d.ts","sourceRoot":"","sources":["../../src/types/refusal-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,2DAInB,CAAC;AAEX,8CAA8C;AAC9C,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,yEAAyE;AACzE,eAAO,MAAM,eAAe,yDAKlB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,cAAc,oDAAqD,CAAC;AAEjF,4CAA4C;AAC5C,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAiD3D,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqOhB,CAAC;AAEH,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,YAAY,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,mCAAmC;AACnC,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CACjB,CAAC;AAEjB;;;;;GAKG;AACH,KAAK,cAAc,CAAC,CAAC,SAAS,cAAc,IAAI;KAC7C,CAAC,IAAI,WAAW,GAAG,CAAC,SAAS,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACtE,CAAC,GACD,KAAK;CACV,CAAC,WAAW,CAAC,CAAC;AAEf;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;AAiBrE;;;GAGG;AACH,eAAO,MAAM,yBAAyB,8TAepC,CAAC"}
+{"version":3,"file":"refusal-codes.d.ts","sourceRoot":"","sources":["../../src/types/refusal-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gBAAgB,2EAKnB,CAAC;AAEX,8CAA8C;AAC9C,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,yEAAyE;AACzE,eAAO,MAAM,eAAe,yDAKlB,CAAC;AAEX,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,cAAc,oDAAqD,CAAC;AAEjF,4CAA4C;AAC5C,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAiD3D,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqOhB,CAAC;AAEH,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,YAAY,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,mCAAmC;AACnC,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,CACjB,CAAC;AAEjB;;;;;GAKG;AACH,KAAK,cAAc,CAAC,CAAC,SAAS,cAAc,IAAI;KAC7C,CAAC,IAAI,WAAW,GAAG,CAAC,SAAS,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACtE,CAAC,GACD,KAAK;CACV,CAAC,WAAW,CAAC,CAAC;AAEf;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;AAErE;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;AAkBpE;;;GAGG;AACH,eAAO,MAAM,yBAAyB,8TAepC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,gCAErC,CAAC"}

package/dist/types/refusal-codes.js

@@ -65,11 +65,19 @@
  *   - `owner-api` — an app owner's own billing mutations.
  *   - `provisioning-api` — a tenant provisioning an app on behalf of
  *     its own users.
+ *   - `mcp-endpoint` — the per-app MCP endpoint's authorization, on
+ *     any JSON-RPC request (`initialize` included). The refusal rides
+ *     the JSON-RPC error object's `data.refusal` (HTTP 403, error code
+ *     `-32003` `APP_NOT_FOUND`, message `App not found` — ggui#836); only the codes listed
+ *     here are ever typed there, and an authorization failure that is
+ *     NOT one of them stays a bare 403 by contract, so a client can
+ *     never learn which of the untyped arms it hit.
  */
 export const REFUSAL_SURFACES = [
     'render-gate',
     'owner-api',
     'provisioning-api',
+    'mcp-endpoint',
 ];
 /** The closed `retry` vocabulary — see the file header for semantics. */
 export const REFUSAL_RETRIES = [
@@ -195,7 +203,7 @@ const REFUSAL_ROWS = /* @__PURE__ */ defineRefusalRegistry({
     },
     app_deprovisioned: {
         code: 'app_deprovisioned',
-        surfaces: ['render-gate'],
+        surfaces: ['render-gate', 'mcp-endpoint'],
         retry: 'never',
         emitter: "the generation gate's owner-claim check, before any reservation or metering",
         description: 'The app record has no owner claim any more \u2014 either the claim was removed, or the record names no issuing tenant at all. A record with no owner cannot be funded, so nothing renders under it and no caller action restores it.',
@@ -299,19 +307,19 @@ const REFUSAL_ROWS = /* @__PURE__ */ defineRefusalRegistry({
 /** The registry consumers read. */
 export const PRE_GENERATION_REFUSAL_CODES = REFUSAL_ROWS;
 /**
- * Identity helper that only accepts an EXHAUSTIVE tuple of the
- * render-gate codes: omit one and the parameter type collapses to
- * `never`, so the call site is a compile error. A tuple is needed
- * because the wire enum requires a literal, non-empty tuple — a
- * runtime filter over the rows yields `string[]`, which cannot type an
- * enum. This keeps the tuple derived-CHECKED rather than a second list.
+ * Identity helper that only accepts an EXHAUSTIVE tuple of one surface's
+ * codes: omit one and the parameter type collapses to `never`, so the
+ * call site is a compile error. A tuple is needed because a wire enum
+ * requires a literal, non-empty tuple — a runtime filter over the rows
+ * yields `string[]`, which cannot type an enum. This keeps every
+ * per-surface tuple derived-CHECKED rather than a second list.
  */
-const exhaustiveRenderGateCodes = (codes) => codes;
+const exhaustiveCodesOn = () => (codes) => codes;
 /**
  * Every render-gate code, as the literal tuple the wire enum
  * (`renderRefusalSchema.code`) is built from. Order is the registry's.
  */
-export const RENDER_GATE_REFUSAL_CODES = exhaustiveRenderGateCodes([
+export const RENDER_GATE_REFUSAL_CODES = exhaustiveCodesOn()([
     'unsupported_provider',
     'insufficient_credit',
     'hard_cap_exceeded',
@@ -327,3 +335,12 @@ export const RENDER_GATE_REFUSAL_CODES = exhaustiveRenderGateCodes([
     'app_rate_limited',
     'app_deprovisioned',
 ]);
+/**
+ * Every mcp-endpoint code, as the literal tuple the transport wire enum
+ * (`transportRefusalSchema.code`) is built from — the refusals a per-app
+ * MCP endpoint's authorization types on `error.data.refusal`
+ * (ggui#825). Order is the registry's.
+ */
+export const MCP_ENDPOINT_REFUSAL_CODES = exhaustiveCodesOn()([
+    'app_deprovisioned',
+]);

package/dist/types/render.d.ts

@@ -1,10 +1,11 @@
-import type { KNOWN_PERMISSION_NAMES } from '../validation/hygiene-rules';
-import type { PropsSpec, StreamSpec, ActionSpec, ContextSpec, ClientCapabilitiesSpec, GadgetDescriptor, JsonSchema, JsonObject } from './data-contract';
-import type { EndUserIdentity } from './auth';
-import type { HostContextProjection } from './host-context';
-import type { AppTheme } from '../schemas/app-theme';
-import type { RenderErrorCode } from '../schemas/mcp';
-import type { McpAppsGguiSession } from '../integrations/mcp-apps';
+import type { KNOWN_PERMISSION_NAMES } from '../validation/hygiene-rules.js';
+import type { PropsSpec, StreamSpec, ActionSpec, ContextSpec, ClientCapabilitiesSpec, GadgetDescriptor, JsonSchema, JsonObject } from './data-contract.js';
+import type { EndUserIdentity } from './auth.js';
+import type { HostContextProjection } from './host-context.js';
+import type { AppTheme } from '../schemas/app-theme.js';
+import type { z } from 'zod';
+import type { RenderErrorCode, gguiSessionStatusSchema } from '../schemas/mcp.js';
+import type { McpAppsGguiSession } from '../integrations/mcp-apps.js';
 /**
  * Recognised system-card kinds the runtime renders via built-in
  * components. The wire is open-ended (string), but new kinds without a
@@ -42,7 +43,7 @@ export type AdapterPermissions = {
  * in the earlier handshake collapse. The companion `ggui_close` tool
  * that wrote it was removed in the same slice.
  */
-export type GguiSessionStatus = 'active' | 'expired';
+export type GguiSessionStatus = z.infer<typeof gguiSessionStatusSchema>;
 /**
  * Common base for every {@link GguiSession} variant. Carries identity,
  * tenancy, lifecycle, and conversation-scoped context that every

package/dist/types/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/types/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA6BnE;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,gBAAgB,GAEhB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB;CAC3E,CAAC;AAMF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iBACa;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC;wCACoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,UAAU,IACvC,oBAAoB,CAAC,MAAM,CAAC,GAC5B,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAKjE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAClB,eAAe,GAAG,SAAS,CAG7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,MAAM,GAAG,UAAU,CAAE,SAAQ,eAAe;IAChF,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;qFACiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qDACiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;gCAC4B;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;qCACiC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;+BAC2B;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;+BAC2B;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;mDAC+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,CACvE,SAAQ,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAAC,SAAS,GAAG,UAAU;IACtD,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/types/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAK/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA6BnE;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,gBAAgB,GAEhB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB;CAC3E,CAAC;AAMF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iBACa;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC;wCACoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,UAAU,IACvC,oBAAoB,CAAC,MAAM,CAAC,GAC5B,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAKjE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAClB,eAAe,GAAG,SAAS,CAG7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,MAAM,GAAG,UAAU,CAAE,SAAQ,eAAe;IAChF,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;qFACiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qDACiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;gCAC4B;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;qCACiC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;+BAC2B;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;+BAC2B;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;mDAC+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,CACvE,SAAQ,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAAC,SAAS,GAAG,UAAU;IACtD,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types/ui-generator.d.ts

@@ -1,4 +1,4 @@
-import type { DataContract, JsonObject, JsonSchema, JsonValue } from './data-contract';
+import type { DataContract, JsonObject, JsonSchema, JsonValue } from './data-contract.js';
 /**
  * Request to generate a UI component.
  * Generic `TContext` defaults to {@link JsonObject} for generator context hints.

package/dist/validation/ajv-runtime.d.ts

@@ -50,8 +50,8 @@ import type { ErrorObject, ValidateFunction } from 'ajv';
  * dependency — TS resolves the type transitively through this package.
  */
 export type { ValidateFunction } from 'ajv';
-import type { JsonSchema } from '../types/data-contract';
-import type { ContractViolation } from './contract-validator';
+import type { JsonSchema } from '../types/data-contract.js';
+import type { ContractViolation } from './contract-validator.js';
 /**
  * Recursively walk a JSON Schema and inject
  * `additionalProperties: false` at every object node. Authors who

package/dist/validation/contract-validator.d.ts

@@ -1,9 +1,9 @@
-import type { PropsSpec, StreamSpec, ActionSpec, ContextSpec, JsonSchema, JsonObject, DataContract } from '../types/data-contract';
-import type { ActionEnvelope } from '../types/events';
-import type { CompiledContractValidators } from '../integrations/mcp-apps';
-import type { ValidateFunction } from './ajv-runtime';
-export type { ValidateFunction } from './ajv-runtime';
-import { type ReservedChannelValidator } from './reserved-channels';
+import type { PropsSpec, StreamSpec, ActionSpec, ContextSpec, JsonSchema, JsonObject, DataContract } from '../types/data-contract.js';
+import type { ActionEnvelope } from '../types/events.js';
+import type { CompiledContractValidators } from '../integrations/mcp-apps.js';
+import type { ValidateFunction } from './ajv-runtime.js';
+export type { ValidateFunction } from './ajv-runtime.js';
+import { type ReservedChannelValidator } from './reserved-channels.js';
 export interface ContractViolation extends JsonObject {
     field: string;
     message: string;

package/dist/validation/cross-references.d.ts

@@ -15,8 +15,8 @@
  * declarative source of truth for every referenced tool). Violations
  * are author-recoverable at render time.
  */
-import type { DataContract, ActionSpec, StreamSpec, AgentCapabilitiesSpec } from '../types/data-contract';
-import type { ContractViolation } from './contract-validator';
+import type { DataContract, ActionSpec, StreamSpec, AgentCapabilitiesSpec } from '../types/data-contract.js';
+import type { ContractViolation } from './contract-validator.js';
 /**
  * Stable error code emitted when an `actionSpec[*].nextStep` value
  * does not resolve to a declared `agentCapabilities.tools[*]` key on

package/dist/validation/hygiene-rules.d.ts

@@ -41,7 +41,7 @@
  * set is wired into `lintContract` via `phaseHygiene`; consumers that
  * want strict gates layer their own assertions on top.
  */
-import type { DataContract, GadgetDescriptor } from '../types/data-contract';
+import type { DataContract, GadgetDescriptor } from '../types/data-contract.js';
 /**
  * Stable codes for hygiene rules. Each is a `LINT_*` rather than a
  * `CTR_*` — the convention: errors are `CTR_*`, warnings are `LINT_*`.

package/dist/validation/name-invariants.d.ts

@@ -35,8 +35,8 @@
  * Companion to {@link CrossReferenceError} in `./cross-references` —
  * the two modules ship the "phase 2: references" rule registry.
  */
-import type { DataContract } from '../types/data-contract';
-import type { ContractViolation } from './contract-validator';
+import type { DataContract } from '../types/data-contract.js';
+import type { ContractViolation } from './contract-validator.js';
 /**
  * Stable error code for collisions across the three inbound spec maps
  * (`actionSpec` / `streamSpec` / `contextSpec`). The boilerplate

package/dist/validation/reserved-channels.d.ts

@@ -31,7 +31,7 @@
  * file describes a NAMING POLICY that the contract-structure validator
  * enforces. Separate concerns — easier to audit the boundary.
  */
-import type { ValidationResult } from './contract-validator';
+import type { ValidationResult } from './contract-validator.js';
 /** Prefix that marks a channel as server-owned (reserved from agents). */
 export declare const RESERVED_CHANNEL_PREFIX = "_ggui:";
 /**

package/dist/validation/schema-compat-invariants.d.ts

@@ -42,8 +42,8 @@
  * they ship companion rule registries to cross-references and
  * name-invariants under the unified `lintContract` API.
  */
-import type { AgentCapabilitiesSpec, DataContract } from '../types/data-contract';
-import type { ContractViolation } from './contract-validator';
+import type { AgentCapabilitiesSpec, DataContract } from '../types/data-contract.js';
+import type { ContractViolation } from './contract-validator.js';
 /**
  * Stable error code for protocol-level schema-compatibility
  * violations on action ⊆ inputSchema or channel ⊇ outputSchema.

package/dist/validation/schema-meta-validation.d.ts

@@ -30,7 +30,7 @@
  * assertions for the same author-recoverable failure class; this
  * sits alongside them.
  */
-import type { DataContract } from '../types/data-contract';
+import type { DataContract } from '../types/data-contract.js';
 export interface SchemaMetaViolation {
     /** Path to the malformed schema field (e.g., `propsSpec.properties.todos.schema`). */
     field: string;

package/dist/version.d.ts

@@ -6,6 +6,75 @@
  * schema change; the most recent change anchors {@link PROTOCOL_VERSION}.
  *
  * --------------------------------------------------------------------
+ * SPEC §7.1's refused arm is ONE primitive (2026-09-05, additive,
+ * pre-launch, ggui#803 leg 9). The tool result a render gate answers a
+ * pre-generation refusal with was built by hand in
+ * `@ggui-ai/mcp-server-handlers` (`buildRenderRefusalText` + an inline
+ * `{ outcome: 'refused', refusal }`), the conformance kit carried its
+ * own reference, and the reference server could not project it at all
+ * — so the reference server was not a reference for the refused
+ * envelope, and a third hand-built copy there would only have re-graded
+ * the kit's reference.
+ *
+ *   rr1. **`projectRenderRefusal(refusal): RenderRefusalResult`** (new
+ *      export, `envelopes/render-refusal.ts`) — `isError: true`,
+ *      `content[0].text` = `<code>: <message> <fix>`, `structuredContent`
+ *      = `{ outcome: 'refused', refusal }` typed as **`RefusedRenderOutput`**
+ *      (`z.infer<typeof refusedOutputSchema>`, new export), no `_meta`.
+ *      Pure and synchronous. The four facts have one source.
+ *
+ *   rr2. **Consumers**: `mcp-server-handlers`' `ggui_render` builds the
+ *      refused result here (its local builder, inline object and
+ *      `RenderRefusedOutput` alias are deleted — no shim); the
+ *      reference server supplies the kit's `refusalProjector` from the
+ *      same primitive at the kit's stringly boundary (a code off
+ *      `RENDER_GATE_REFUSAL_CODES` → `null`; anything else parsed by
+ *      `renderRefusalSchema`), so its six `refusal-envelope/*` rows are
+ *      GRADED, not skipped. The kit's own hand-built reference stays as
+ *      the second source that catches the primitive drifting.
+ *
+ * Conformance-kit verdict: no new kit entry — the six `refusal-envelope`
+ * cases already grade exactly these four facts; what changed is that
+ * two implementations now answer them through one function, and the
+ * reference server's exact-set assertion moved the rows from SKIPPED to
+ * PASSING. Bytes on the wire: unchanged.
+ *
+ * Package version — classification MADE here: MINOR for
+ * `@ggui-ai/protocol` (two new exports, additive) and for
+ * `@ggui-ai/mcp-server-handlers` (same result, one source), pre-1.0 and
+ * pre-launch. PROTOCOL_VERSION unchanged — no WS envelope moved.
+ *
+ * --------------------------------------------------------------------
+ * Authorization refusals carry JSON-RPC `data` (2026-09-05, additive,
+ * pre-launch, ggui#825). `@ggui-ai/mcp-server`'s per-app `authorize`
+ * hook refuses by throwing, and the route answered every throw with a
+ * bare `403 {code: -32000, message: "Forbidden"}` — correct in effect,
+ * illegible to a client that needs to tell "this app is no longer served" from
+ * "your credential is wrong".
+ *
+ *   ar1. **`ErrorMapperResult.data?: JsonValue`** — a deployment's
+ *      `errorMapper` may attach JSON-RPC 2.0 error `data` (any JSON
+ *      value) to a mapped result; serialized verbatim on `error.data`,
+ *      omitted when absent. Applies to every mapped error, not only
+ *      authorization refusals.
+ *
+ *   ar2. **The per-app authorization refusal consults the mapper**,
+ *      bounded to 401 / 403: a mapper answering any other status, or
+ *      throwing, is ignored and logged (`per_app_authorize_mapper_out_
+ *      of_bounds` / `error_mapper_failed` on the route logger) and the
+ *      default-deny 403 stands byte-identical to a deployment with no
+ *      mapper. The allow path never consults the mapper.
+ *
+ * Conformance-kit verdict: no kit entry required — an optional field on
+ * an operator-side hook result, no MCP tool name/shape touched; the
+ * shape of any `data.refusal` a deployment chooses to attach is that
+ * deployment's declaration, not this package's.
+ *
+ * Package version — classification MADE here: MINOR for
+ * `@ggui-ai/mcp-server` (new optional field on `ErrorMapperResult` +
+ * the authorization refusal path consults `errorMapper`), pre-1.0 and
+ * pre-launch. PROTOCOL_VERSION unchanged — no WS envelope moved.
+ * --------------------------------------------------------------------
  * Authored source rides blueprint reuse (2026-08-14, additive,
  * pre-launch). Cache-reuse renders (a repeated prompt semantic-matches
  * a cached blueprint) previously committed without authored
@@ -3121,15 +3190,6 @@
  *      reference and against the shipping projector in
  *      `@ggui-ai/mcp-server-handlers`) and `registry-completeness`
  *      (the registry's structural pins, bound to the LIVE registry).
- *
- * FOLLOWER — moves in the SAME commit as this constant, pinned by a
- * gate that fails loud when it lags: the `protocol` field of every
- * shipped `samples/gguis/<name>/ggui.json` (the `@ggui-ai/project-config`
- * samples test). That pin is a HOUSE rule — shipped samples declare the
- * CURRENT stamp, because a new project starts from them. The CONTRACT
- * for any `ggui.json#protocol` is membership in
- * `CLIENT_SUPPORTED_VERSIONS`, enforced by the loader (`UPGRADE_REQUIRED`
- * on a non-member); the two coincide only while the set is a singleton.
  *   r7. **Tool output shapes are protocol-owned (ggui#817 part C):**
  *      seven schemas — search / featured / validate / consume's
  *      host-context projection / list_sessions' summary / runtime_pull's
@@ -3146,6 +3206,44 @@
  *      grammar and nothing else, so `{}` still reaches the gate per r5); the
  *      full envelope (`renderInputEnvelopeSchema`) parses after the gate.
  *      Bare model ids are out.
+ *   r9. **Endpoint-level refusal (ggui#825):** registry surface
+ *      `mcp-endpoint` (v11) and the transport envelope — a per-app MCP
+ *      endpoint that refuses a request for a registry state answers HTTP
+ *      403 with `{ code: -32000, message: 'Forbidden', data: { refusal } }`
+ *      (`transportRefusalErrorSchema`; `refusal` = the projection without
+ *      the render-only fields, `MCP_ENDPOINT_REFUSAL_CODES` derived — today
+ *      `app_deprovisioned`). Untyped authorization failures keep the bare
+ *      403 by contract. Additive.
+ *   r10. **Consume / list_sessions / emit own their wire shapes (ggui#817
+ *      part C2):** `consumeEventEntrySchema` (the drained row, closed),
+ *      `gguiSessionStatusSchema` (`active` | `expired`), `gguiConsumeOutputSchema`,
+ *      `gguiListSessionsOutputSchema`, `gguiEmitOutputSchema`; the types
+ *      derive (`ConsumeEventEntry`, `GguiConsumeOutput`, `GguiEmitOutput`,
+ *      `GguiListSessionsOutput`, `GguiSessionStatus`). `tools/list` now
+ *      advertises the entry vocabulary and the status enum for
+ *      `ggui_consume`; `parsePendingEnvelope` parses a drained row instead
+ *      of casting it, so a malformed pipe entry refuses at the seam. The
+ *      wire bytes of a well-formed row are unchanged. Additive.
+ *   r11. **Endpoint refusal codes (ggui#836):** the per-app endpoint speaks
+ *      §7.9 Plane-1 rows — the typed deprovisioned arm is `-32003`
+ *      (`APP_NOT_FOUND`, `App not found`) with `data.refusal`; untyped
+ *      authorization failures are `-32001` (`UNAUTHORIZED`) with no
+ *      `data`; HTTP 403 on both. `-32000` (the SDK client's
+ *      `ConnectionClosed`) is never a code a first-party server chooses.
+ *      Supersedes r9's literals; pre-launch, no compatibility arm.
+ *   r12. **`GENERATION_OVERLOADED: -32014`** joins `PLATFORM_ERROR_CODES` —
+ *      the generation queue is saturated (HTTP 503 + `Retry-After`; the
+ *      server is the limit, unlike `-32013`). Additive; the four complete
+ *      mirrors carry it under `check-error-code-mirrors`.
+ *
+ * FOLLOWER — moves in the SAME commit as this constant, pinned by a
+ * gate that fails loud when it lags: the `protocol` field of every
+ * shipped `samples/gguis/<name>/ggui.json` (the `@ggui-ai/project-config`
+ * samples test). That pin is a HOUSE rule — shipped samples declare the
+ * CURRENT stamp, because a new project starts from them. The CONTRACT
+ * for any `ggui.json#protocol` is membership in
+ * `CLIENT_SUPPORTED_VERSIONS`, enforced by the loader (`UPGRADE_REQUIRED`
+ * on a non-member); the two coincide only while the set is a singleton.
  */
 export declare const PROTOCOL_VERSION = "draft-2026-09-04";
 /**
@@ -3163,8 +3261,32 @@ export declare const PROTOCOL_VERSION = "draft-2026-09-04";
  * `package.json#version` (the same parity pattern as
  * `STDLIB_GADGETS_VERSION` and `agent-server`'s `CLIENT_INFO`), and the
  * `/release:cut` straggler list names it so the bump is mechanical.
+ *
+ * Wave classifications (protocol seat; the kit is the arbiter,
+ * docs/protocol/VERSION-POLICY.md §1–2):
+ *
+ *   - **0.15.0 — MINOR** (ruled 2026-09-05). Every `@ggui-ai/protocol`
+ *     landing since the 0.14.0 cut (`f3cf6c906`) is additive under
+ *     §1.2: the `@ggui-ai/protocol/wire` browser entry (ggui#819), the
+ *     `GENERATION_OVERLOADED: -32014` canonical code and SPEC §7.9's
+ *     Plane 0 (ggui#840), `ErrorMapperResult.data` (ggui#825), the
+ *     endpoint-level refusal — `403 {code: -32003, data.refusal}` for
+ *     `app_deprovisioned` (ggui#836), the `ggui_consume` /
+ *     `ggui_list_sessions` / `ggui_emit` output schemas (ggui#817 C2),
+ *     and the `.readonly()` removal from the gadget wire schema
+ *     (ggui#824). The one non-additive-looking line — the untyped
+ *     authorization refusal moving from `-32000` to `-32001
+ *     UNAUTHORIZED` (ggui#836) — is not a fixture regression: no
+ *     fixture on 0.14.0 pinned `-32000` (it was the SDK's default
+ *     courtesy code, never a first-party choice; ggui#840's Plane-0
+ *     ruling), and the transport-refusal catalog now states `-32001`.
+ *     §1.4 (`draft-`: semver describes intent) applies on top. A
+ *     0.14.1 is legitimate ONLY as a founder-ruled hotfix branch off
+ *     `f3cf6c906` carrying ggui#846 alone (a declaration-emit fix —
+ *     PATCH under §1.3); it cannot be cut from main, whose delta since
+ *     0.14.0 is minor-class.
  */
-export declare const GGUI_WAVE_VERSION = "0.14.0";
+export declare const GGUI_WAVE_VERSION = "0.15.0";
 /**
  * Schema version stamped onto wire envelopes that opt into the
  * `schemaVersion` forward-compat field (see {@link ActionEnvelope},

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4kGG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,qBAAmB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAErD,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8qGG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,qBAAmB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAErD,CAAC"}