@ggui-ai/protocol 0.15.0 → 0.16.0

package/dist/types/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/types/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAK/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA6BnE;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,gBAAgB,GAEhB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB;CAC3E,CAAC;AAMF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iBACa;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC;wCACoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,UAAU,IACvC,oBAAoB,CAAC,MAAM,CAAC,GAC5B,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAKjE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAClB,eAAe,GAAG,SAAS,CAG7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,MAAM,GAAG,UAAU,CAAE,SAAQ,eAAe;IAChF,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;qFACiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qDACiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;gCAC4B;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;qCACiC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;+BAC2B;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;+BAC2B;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;mDAC+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,CACvE,SAAQ,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAAC,SAAS,GAAG,UAAU;IACtD,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/types/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAK/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA6BnE;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,gBAAgB,GAEhB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB;CAC3E,CAAC;AAMF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;iBACa;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC;wCACoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,UAAU,IACvC,oBAAoB,CAAC,MAAM,CAAC,GAC5B,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAKjE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,GAClB,eAAe,GAAG,SAAS,CAG7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,MAAM,GAAG,UAAU,CAAE,SAAQ,eAAe;IAChF,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;qFACiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;qDACiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;gCAC4B;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;qCACiC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;+BAC2B;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;+BAC2B;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;mDAC+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACzD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;CACvC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,CACvE,SAAQ,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAAC,SAAS,GAAG,UAAU;IACtD,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,EAAE,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/validation/contract-validator.d.ts

@@ -1,4 +1,5 @@
 import type { PropsSpec, StreamSpec, ActionSpec, ContextSpec, JsonSchema, JsonObject, DataContract } from '../types/data-contract.js';
+import { DomainError } from '../errors/domain-error.js';
 import type { ActionEnvelope } from '../types/events.js';
 import type { CompiledContractValidators } from '../integrations/mcp-apps.js';
 import type { ValidateFunction } from './ajv-runtime.js';
@@ -337,7 +338,7 @@ export declare function formatViolations(violations: ContractViolation[]): strin
  *   `tool.inputSchema`; `streamSpec[*].schema` ⊇ `tool.outputSchema`).
  */
 export declare function validateContractStructure(contract: DataContract): ValidationResult;
-export declare class ContractViolationError extends Error {
+export declare class ContractViolationError extends DomainError<'contract_violation'> {
     readonly violations: ContractViolation[];
     readonly tool: 'ggui_render' | 'ggui_update' | 'ggui_amend' | 'ggui_emit' | 'ggui_event';
     readonly hint: string;
@@ -360,7 +361,12 @@ export declare class ContractViolationError extends Error {
         hint?: string;
         propsSchemaHash?: string;
     });
-    /** Structured payload for MCP error response `data` field. */
+    /**
+     * Structured recovery payload carrying the same slug (`error:
+     * 'contract_violation'`). It rides the live channel's error frame; on
+     * `tools/call` it does not travel — the slug leads the result text there
+     * (SPEC §7.9 Plane 2, ggui#880) and the detail carries the same facts.
+     */
     toErrorData(): {
         error: 'contract_violation';
         tool: string;

package/dist/validation/contract-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract-validator.d.ts","sourceRoot":"","sources":["../../src/validation/contract-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEnI,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAQ3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItD,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAKtD,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,CAcnE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE,UAAU,GACjB,gBAAgB,CAQlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,SAAS,EACf,WAAW,CAAC,EAAE,gBAAgB,GAC7B,gBAAgB,CAWlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,UAAU,EAChB,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,EACvE,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAC1D,gBAAgB,CAyClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,WAAW,EACjB,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACvD,gBAAgB,CA+BlB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,UAAU,EAChB,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACzD,gBAAgB,CAoDlB;AAQD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,UAAU,GAAG,SAAS,EAC5B,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACzD,gBAAgB,CAIlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC,GAAG,0BAA0B,GAAG,SAAS,CAuCzC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC,GAAG,sBAAsB,GAAG,SAAS,CAoCrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,sBAAsB,GAC5B,MAAM,CAeR;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC,GAAG,OAAO,CACP;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;CAC7C,GACD,SAAS,CACZ,CAiBA;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAIxE;AAMD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAiGlF;AAiQD,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;gBAEtB,IAAI,EAAE;QAChB,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;QAChF,UAAU,EAAE,iBAAiB,EAAE,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;IAYD,8DAA8D;IAC9D,WAAW,IAAI;QACb,KAAK,EAAE,oBAAoB,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,iBAAiB,EAAE,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;CAWF"}
+{"version":3,"file":"contract-validator.d.ts","sourceRoot":"","sources":["../../src/validation/contract-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACnI,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAQ3E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAItD,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAKtD,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,CAcnE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,MAAM,EAAE,UAAU,GACjB,gBAAgB,CAQlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,SAAS,EACf,WAAW,CAAC,EAAE,gBAAgB,GAC7B,gBAAgB,CAWlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,UAAU,EAChB,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,EACvE,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAC1D,gBAAgB,CAyClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,WAAW,EACjB,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACvD,gBAAgB,CA+BlB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,UAAU,EAChB,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACzD,gBAAgB,CAoDlB;AAQD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,UAAU,GAAG,SAAS,EAC5B,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACzD,gBAAgB,CAIlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC,GAAG,0BAA0B,GAAG,SAAS,CAuCzC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC,GAAG,sBAAsB,GAAG,SAAS,CAoCrC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,sBAAsB,GAC5B,MAAM,CAeR;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC,GAAG,OAAO,CACP;IACE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;CAC7C,GACD,SAAS,CACZ,CAiBA;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAIxE;AAMD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAiGlF;AAiQD,qBAAa,sBAAuB,SAAQ,WAAW,CAAC,oBAAoB,CAAC;IAC3E,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;gBAEtB,IAAI,EAAE;QAChB,IAAI,EAAE,aAAa,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;QAChF,UAAU,EAAE,iBAAiB,EAAE,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;IAcD;;;;;OAKG;IACH,WAAW,IAAI;QACb,KAAK,EAAE,oBAAoB,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,iBAAiB,EAAE,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;CAWF"}

package/dist/validation/contract-validator.js

@@ -1,3 +1,4 @@
+import { DomainError } from '../errors/domain-error.js';
 import { deriveContextDefault } from '../types/data-contract.js';
 import { compileForValidation, compileValidatorFunctionExpr, compileValidatorModule, mapAjvErrorsToViolations, prefixViolations, } from './ajv-runtime.js';
 import { checkCrossReferences } from './cross-references.js';
@@ -876,7 +877,7 @@ function defaultHintFor(tool) {
     }
     return 'Fix your data to match the contract, or call ggui_render to create a new UI for this data shape.';
 }
-export class ContractViolationError extends Error {
+export class ContractViolationError extends DomainError {
     violations;
     tool;
     hint;
@@ -895,8 +896,10 @@ export class ContractViolationError extends Error {
     propsSchemaHash;
     constructor(opts) {
         const formattedViolations = formatViolations(opts.violations);
-        super(`Contract violation in ${opts.tool}:\n${formattedViolations}`);
-        this.name = 'ContractViolationError';
+        // Plane 2 (SPEC §7.9, ggui#880): the base composes the wire text
+        // `contract_violation: <detail>`; the detail keeps the tool + the
+        // formatted violations. `name` is the class name, set by the base.
+        super('contract_violation', `Contract violation in ${opts.tool}:\n${formattedViolations}`);
         this.violations = opts.violations;
         this.tool = opts.tool;
         this.hint = opts.hint ?? defaultHintFor(opts.tool);
@@ -904,7 +907,12 @@ export class ContractViolationError extends Error {
             this.propsSchemaHash = opts.propsSchemaHash;
         }
     }
-    /** Structured payload for MCP error response `data` field. */
+    /**
+     * Structured recovery payload carrying the same slug (`error:
+     * 'contract_violation'`). It rides the live channel's error frame; on
+     * `tools/call` it does not travel — the slug leads the result text there
+     * (SPEC §7.9 Plane 2, ggui#880) and the detail carries the same facts.
+     */
     toErrorData() {
         return {
             error: 'contract_violation',

package/dist/validation/lint-contract.d.ts

@@ -30,6 +30,7 @@
  * graded mode emits every issue at once so authoring tools can
  * present a complete checklist.
  */
+import { DomainError } from '../errors/domain-error.js';
 /**
  * Severity classification for a {@link ContractIssue}. Strict
  * `validateContract` throws on `'error'`; graded `lintContract`
@@ -92,8 +93,7 @@ export interface ContractLintResult {
  * surface as a single rolled-up zod failure; reference / schema-compat
  * errors carry one issue per violation.
  */
-export declare class ContractValidationError extends Error {
-    readonly code: "contract_validation_failed";
+export declare class ContractValidationError extends DomainError<'contract_validation_failed'> {
     readonly phase: ContractLintPhase;
     readonly issues: readonly ContractIssue[];
     constructor(phase: ContractLintPhase, issues: readonly ContractIssue[]);

package/dist/validation/lint-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lint-contract.d.ts","sourceRoot":"","sources":["../../src/validation/lint-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAwBH;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,SAAS,GACT,aAAa,GACb,YAAY,GACZ,eAAe,GACf,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAG,4BAA4B,CAAU;IACtD,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;gBAE9B,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,aAAa,EAAE;CAOvE;AA4KD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CA2BxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAyBlE"}
+{"version":3,"file":"lint-contract.d.ts","sourceRoot":"","sources":["../../src/validation/lint-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAuBrD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,SAAS,GACT,aAAa,GACb,YAAY,GACZ,eAAe,GACf,SAAS,CAAC;AAEd;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C;AAED;;;;;;;;GAQG;AACH,qBAAa,uBAAwB,SAAQ,WAAW,CAAC,4BAA4B,CAAC;IACpF,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;gBAE9B,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,aAAa,EAAE;CASvE;AA4KD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CA2BxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAyBlE"}

package/dist/validation/lint-contract.js

@@ -30,6 +30,7 @@
  * graded mode emits every issue at once so authoring tools can
  * present a complete checklist.
  */
+import { DomainError } from '../errors/domain-error.js';
 import { dataContractSchema } from '../schemas/data-contract.js';
 import { checkCrossReferences, } from './cross-references.js';
 import { checkNameInvariants, } from './name-invariants.js';
@@ -45,14 +46,15 @@ import { checkHygiene, checkRetiredContractFields, } from './hygiene-rules.js';
  * surface as a single rolled-up zod failure; reference / schema-compat
  * errors carry one issue per violation.
  */
-export class ContractValidationError extends Error {
-    code = 'contract_validation_failed';
+export class ContractValidationError extends DomainError {
     phase;
     issues;
     constructor(phase, issues) {
         const summary = issues.map((i) => `[${i.code}] ${i.message}`).join(' | ');
-        super(`Contract validation failed at phase '${phase}': ${summary}`);
-        this.name = 'ContractValidationError';
+        // Plane 2 (SPEC §7.9, ggui#880): the base composes the wire text
+        // `contract_validation_failed: <detail>`; the detail names the phase
+        // and every issue. `code` and `name` come from the base.
+        super('contract_validation_failed', `Contract validation failed at phase '${phase}': ${summary}`);
         this.phase = phase;
         this.issues = issues;
     }

package/dist/validation/schema-subset.d.ts

@@ -4,7 +4,7 @@
  *
  * **Why this lives in the protocol package.** The schema-alignment
  * contract is enforced at render-time + blueprint-registration; the
- * canonical failure is the named `'SCHEMA_MISMATCH_ERROR'` rejection
+ * canonical failure is the named `'schema_mismatch_error'` rejection
  * the push / registration call answers with — fail-loud at
  * declaration time, before a malformed payload reaches the agentic
  * loop. See the schema-compat docstrings
@@ -72,7 +72,7 @@
  * **Determinism contract.** No randomness, no IO, no thrown
  * exceptions for normal violations. Every incompatibility is
  * reported as a {@link SubsetViolation} with enough field-path
- * context for the `SCHEMA_MISMATCH_ERROR` rejection to name the
+ * context for the `schema_mismatch_error` rejection to name the
  * mismatch cleanly. Thrown errors are reserved for programmer-
  * bug conditions (a caller passes `null` where a JsonSchema is
  * expected).
@@ -133,7 +133,7 @@ export interface SubsetViolation {
      *  {@link SubsetViolation.superset}. */
     readonly subset?: string;
     /** Human-readable summary suitable for inclusion in a
-     *  `SCHEMA_MISMATCH_ERROR` rejection. Producers MAY ignore this
+     *  `schema_mismatch_error` rejection. Producers MAY ignore this
      *  and render their own message from `path` + `reason` if they
      *  prefer a consistent localized format. */
     readonly message: string;

package/dist/version.d.ts

@@ -6,6 +6,343 @@
  * schema change; the most recent change anchors {@link PROTOCOL_VERSION}.
  *
  * --------------------------------------------------------------------
+ * Theming revision — the overlay is the projection, the host owns runtime
+ * mode (2026-09-10, ggui#987 — **BREAKING on the draft wave**, named by the
+ * conformance kit: `protocol-conformance/src/theme-binding-conformance`
+ * promoted today's pins in the prior commit, and this change fails them —
+ * VERSION-POLICY §1.1; shipped under §1.4's `draft-` clause, §3.5's window
+ * waived pre-v1.0). Founder rulings D1–D7 (2026-09-09/10), joint spec
+ * `docs/superpowers/specs/2026-09-09-theming-revision-protocol-half.md`.
+ * `appThemeSchema` v2: `overlays: { light, dark }` REQUIRED (the derived
+ * projection for both modes — one producer, `@ggui-ai/design`'s
+ * `deriveThemeVariables`), `overlayHash` REQUIRED (`canonicalOverlayHash`,
+ * recomputed at every write door), `mode` optional and a DEFAULT only,
+ * `name` a label; `base` DELETED with the registration tier (D2 = B). The
+ * client projection of `themeMode` flips — `hostAnnounced ?? stamped ??
+ * sessionSidecar` (D4 = A: M1 + M2, "follow the widget") — the server stamp
+ * is unchanged; `themeId` loses its `sidecarName` leg. `AppThemeRefusalBody`
+ * is the one write-door refusal shape. `parseMcpAppAiGguiRenderMeta` gains
+ * `onInvalidTheme` so the read door is never silent. The render shell paints
+ * `--ggui-color-ground` (the surface-layering roles of §2.1).
+ * --------------------------------------------------------------------
+ * Model registry: `openai/gpt-6-astra` (2026-09-09, additive, ggui#977 —
+ * MINOR; Exp 008's founder-ruled second arm, ggui#972). One new `ModelId`
+ * union member and one `MODELS.openai` allowlist entry; premium, active,
+ * not in the lineup; costs 10 / 50 / 12.5 / 1.0 per 1M (input / output /
+ * cache write / cache read), `maxTokens` 922000, tools — every field a
+ * receipt on the issue; `retireNotBefore` unset (none published).
+ * --------------------------------------------------------------------
+ * Refusal registry v11 — the retail plan model retired (2026-09-08,
+ * wire-code, pre-launch, ggui#960 — MINOR on the 0.16.0 draft wave; the
+ * protocol half of the pricing publication ggui#949, WITH cloud's arm
+ * deletion). Founder's ruling: one product, prepaid pay-as-you-go at flat
+ * rates, trial and tiers retired, the welcome credit as the free entry.
+ * Eleven codes lose their emitting arms and retire in the same slice —
+ * render-gate `trial_exhausted`, `trial_expired`, `app_canceled`
+ * (`RENDER_GATE_REFUSAL_CODES` 14 → 11); owner-api `subscription_exists`,
+ * `no_subscription`, `subscription_unchanged`, `portal_unavailable`,
+ * `card_update_unavailable`, `managed_app_no_portal`,
+ * `managed_app_no_card_update`, `managed_app_no_checkout` (9 → 1: the
+ * prepaid wallet's one Stripe surface is the top-up, user-scoped). Four
+ * rows re-described in the new model's words: `billing_path_missing`,
+ * `model_not_allowed` (per-account grant), `checkout_unavailable`
+ * (top-ups), `insufficient_credit` (pool or BYOK). New typed exports
+ * `OWNER_API_REFUSAL_CODES` + `OwnerApiRefusalCode`. Not breaking under
+ * §2: pre-launch draft wave, every retired code had lost its emitter in
+ * the same publication; the kit's non-render-surface case re-aims to the
+ * surviving owner-api code. `managed_default_cap_exceeded` stays (ggui#965).
+ * --------------------------------------------------------------------
+ * Blueprint provenance de-modeled (2026-09-06, wire-tightening, pre-launch,
+ * ggui#924 — MINOR; half of ggui#923, one WITH publication across six
+ * lanes). `LlmBlueprintSource.generator` is the identity `ui-gen-<tier>`
+ * (one tier token — `ui-gen-default` / `ui-gen-advanced` / an operator
+ * tier; `GENERATOR_ID_PATTERN`, `isGeneratorId`) and `model` is the run's route
+ * in the registry's spelling (`ModelRef` = `<prefix>/<model>`, composed only
+ * by `modelRefOfRoute`, recovered by `parseModelRef`; registry `ModelId`s
+ * are the subset — a self-hoster's bedrock/OpenRouter route is a ref the
+ * registry does not list; `MODEL_IDS`, `isModelId` narrow to the subset).
+ * Before: both were `string`, and the identity embedded the model
+ * (`ui-gen-default-haiku-4-5`) — a model retirement (Haiku 4.5,
+ * 2026-10-15) would rename the identity against every stored record.
+ * `parseBlueprintSource` and `llmBlueprintSourceSchema` refuse a modeled
+ * identity and a bare model name; the handshake draft's `generator` hint
+ * and the operator tools' `generator` inputs take the same grammar. No
+ * alias, no dual-read (pre-launch): a row written before the rename reads
+ * as no provenance; stores reseed. Not breaking under VERSION-POLICY §2
+ * (no kit fixture asserts a modeled id or a bare model); MINOR under §1.2
+ * as a schema tightening on the 0.16.0 draft wave. Post-launch this would
+ * be a MAJOR with a migration doc and a dual-read shim — the reason it
+ * ships now.
+ * --------------------------------------------------------------------
+ * Five phantom numeric codes retired-reserved + the emitter census
+ * (2026-09-06, wire-code, pre-launch, ggui#910 — PATCH). `CAPABILITY_DENIED`
+ * (-32005), `GENERATION_QUOTA_EXCEEDED` (-32010), `APP_LIMIT_EXCEEDED`
+ * (-32011), `CONCURRENT_SESSION_LIMIT` (-32012) and the numeric
+ * `CONTRACT_VIOLATION` (-32020 — the census found it once the gate
+ * existed; the live `CONTRACT_VIOLATION` is a string on the channel and
+ * the Plane-3 render error, and tools/call has Plane-2
+ * `contract_violation`) were declared,
+ * SPEC-fenced and mirrored into four tables, and emitted by nothing
+ * first-party — a census by constant and by number over oss/packages,
+ * cloud and backend. The constants leave; the numbers stay reserved
+ * (SPEC §7.9); an unauthorised key is a bare 403 carrying -32007; quota,
+ * app-limit and concurrency states are refusals or implementation-range
+ * codes. Cheap only before launch: after the `draft-` rule flips each
+ * removal would be a MAJOR with a migration doc. The mirrors gate now
+ * also asserts the inverse — every declared non-standard code has a
+ * first-party emitter (one `git grep` per code; seeded self-test) — so a
+ * phantom cannot be declared again silently. Pinned by
+ * `types/__tests__/retired-error-codes.test.ts` (eight retired numbers).
+ * Not breaking under VERSION-POLICY §2; PATCH under §1.3.
+ * --------------------------------------------------------------------
+ *
+ * --------------------------------------------------------------------
+ * `-32013 RATE_LIMIT_EXCEEDED` retired-reserved (2026-09-06, wire-code,
+ * pre-launch, ggui#890 — PATCH). After ggui#886 (the per-app cap denies as
+ * the registry's `app_rate_limited` refusal) and the `RateLimitedError`
+ * deletion, no first-party implementation emits the number: the reference
+ * server refuses in-band, the hosted transport's only 429 is a per-IP
+ * backstop with no JSON-RPC body. The constant leaves
+ * `PLATFORM_ERROR_CODES` and SPEC §7.9's platform fence; the number stays
+ * reserved (the `-32001` / `-32004` convention) so no future canonical code
+ * reuses it. Not breaking under VERSION-POLICY §2 — no kit fixture asserts
+ * it; PATCH under §1.3. Pinned by `types/__tests__/retired-error-codes.test.ts`
+ * (no constant declares a retired number; no tracked source emits one) and
+ * by the mirrors gate, which reds the docs tables' rows until they leave
+ * in the same publication.
+ *
+ * --------------------------------------------------------------------
+ * The registries export their literal-typed rows (2026-09-06, types-only,
+ * pre-launch, ggui#889 — PATCH). `PRE_GENERATION_REFUSAL_CODES` and
+ * `DOMAIN_ERROR_REGISTRY` are the normalized views (`Record<Code, Row>`),
+ * which erase the per-key literal the `const` definers preserve — so a
+ * producer that must satisfy a wire enum from a row had to parse it
+ * through the enum (ggui#886). `PRE_GENERATION_REFUSAL_ROWS` and
+ * `DOMAIN_ERROR_ROWS` are the SAME objects with the literal types kept:
+ * each row's `code` is typed as its own key. No wire change;
+ * the kit's registry-completeness catalog reads the normalized view as
+ * before. Not breaking under VERSION-POLICY §2; PATCH under §1.3.
+ *
+ * --------------------------------------------------------------------
+ * Plane-2 slugs lead the wire text (2026-09-06, wire-text, pre-launch,
+ * ggui#880 — MINOR). SPEC
+ * §7.9 promised "the `code` field on each class is the wire literal"
+ * while the MCP SDK ships every thrown handler error to the agent as
+ * `{content: [{type: 'text', text: error.message}], isError: true}` and
+ * nothing else — executed against the built server: `session_not_found`
+ * and `handshake_not_found` reached neither a field nor the text, and
+ * descriptions, presets and the SPEC taught agents to branch on them.
+ *
+ *   de1. **`DomainError` base** (`errors/domain-error.ts`) — the ONLY
+ *      composer of a Plane-2 error's `message`: `${code}: ${detail}`.
+ *      Refuses an empty detail and a detail that begins with any
+ *      registered domain OR refusal code + `': '`
+ *      (`DomainErrorDetailCollisionError`, a `TypeError` the emitter's
+ *      own suite sees — never the wire); a tool-name prefix is prose.
+ *      `isDomainError` detects by `Symbol.for('ai.ggui.domainError')`
+ *      marker + shape, never `instanceof`; `parseDomainErrorText` is
+ *      the reader side.
+ *   de2. **`DOMAIN_ERROR_CODES` registry** (`types/domain-error-codes.ts`)
+ *      — the CLOSED Plane-2 set, fifteen rows from the executed census,
+ *      each with the data-plane `tools` that emit it, a `recovery` class
+ *      (`retry-same-id` | `re-mint` | `later`), an `emitter` and a
+ *      self-hoster `description`. Pinned disjoint from
+ *      `PRE_GENERATION_REFUSAL_CODES` (one code, one plane). SPEC §7.9's
+ *      Plane-2 table is its mirror (pinned from the registry's own suite):
+ *      the four phantom classes the table listed (`ContractRequiredError`,
+ *      `ContractHashMismatchError`, `UnknownActionToolError`,
+ *      `EventNotAllowedError`) are gone; `cross_reference_unresolved` /
+ *      `contract_schema_invalid` are not wire codes (no caller throws
+ *      them — the lint gate throws `contract_validation_failed`).
+ *   de3. **The two protocol-owned emitters extend the base** —
+ *      `ContractViolationError` (`contract_violation`; `toErrorData()`
+ *      keeps its `{error, tool, violations, hint, propsSchemaHash?}`
+ *      shape) and `ContractValidationError` (`contract_validation_failed`,
+ *      phase + issues kept). Consumers detecting them by `instanceof`
+ *      are unchanged; their message now leads with the slug.
+ *   de4. **The wire plane is the MCP spec's** — a Plane-2 failure is a
+ *      tool RESULT with `isError: true`, never a JSON-RPC error frame;
+ *      no `structuredContent` (the SDK client validates it against the
+ *      tool's `outputSchema` whenever present, so a typed envelope would
+ *      demote every success field to optional — refused). SPEC §7.9.1:
+ *      `SESSION_NOT_FOUND` (-32002) is the live-channel / runtime Plane-1
+ *      code; on `tools/call` the same state is `session_not_found`.
+ *   de5. **The conformance kit's first `tools/call` driver** — catalog
+ *      `domain-error`: six no-setup scenarios (unknown `handshakeId` on
+ *      `ggui_render`; unknown `sessionId` on `ggui_consume` /
+ *      `ggui_get_session` / `ggui_update` / `ggui_amend` / `ggui_emit`)
+ *      graded on the raw result via `runConformance({ toolCallDriver })`
+ *      / `--tool-call-driver <module>`. Before this wave every first-party
+ *      server failed all six on `slug-leads`.
+ *
+ * Conformance-kit verdict: not breaking under VERSION-POLICY §2 — no
+ * prior fixture asserts Plane-2 text; the leading slug is additive to
+ * prose and the new catalog is an addition. MINOR under §1.2 (new
+ * exported base, registry and kit catalog); rides the 0.16.0 wave. The
+ * adoption of the base by the handler / core / mcp-server classes lands
+ * WITH this entry (oss's half of ggui#880); until both are on a server,
+ * that server fails the catalog — which is the point.
+ *
+ * --------------------------------------------------------------------
+ * The pending-event row is a schema (2026-09-06, store-boundary, pre-launch,
+ * ggui#839 — the #817 C2 follower; cite `3f3d86b86`). The consume pipe's
+ * stored row — what `submit_action` / the WS ingress append and
+ * `PendingEventConsumer.consumeAndClear` drains — was a hand-written
+ * interface the adapters typed as `Record<string, unknown>` and the consume
+ * handler coerced with defaults; nothing validated it. A store-boundary
+ * contract (producers ↔ adapters ↔ the consume handler), never wire:
+ * `ggui_consume` returns the entries, never the wrapper.
+ *
+ *   pe1. **`pendingEventSchema` + `PendingEvent` derived** —
+ *      `{ id: string.min(1), envelope: consumeEventEntrySchema, createdAt:
+ *      string }`; `createdAt` stays a string (the relay copies a client
+ *      `firedAt` the ingress accepts as a diagnostic).
+ *   pe2. **`sequence` deleted** — zero writers (both producers append
+ *      `{id, envelope, createdAt}`; sqlite's `seq` never joined the row;
+ *      the pod stores the literal), zero readers (the only read was the
+ *      handler's own default-to-0), named in neither SPEC nor the kit.
+ *   pe3. **`id` required and non-empty** — the drain_ack key and the
+ *      idempotency key per `(sessionId, id)`; the id-less append branches
+ *      (core docstring, in-memory, sqlite, the pod's `ddb.ts`) deleted in
+ *      the same publication.
+ *   pe4. **No string envelope arm** — every writer passes the object; a
+ *      store that serializes the whole row. `parsePendingEnvelope`
+ *      collapsed into the row parse (`envelope-adapters.ts` deleted).
+ *   pe5. **`PendingEventMalformedError` + the per-adapter failure mode** —
+ *      `consumeAndClear` MUST NOT return a row that fails the schema and
+ *      MUST NOT drop a well-formed row because a sibling failed: a
+ *      transactional drain (sqlite) refuses whole and rolls back; a
+ *      destructive drain (DynamoDB) quarantines per row with a
+ *      `pending_event_malformed` structured log; in-memory holds the typed
+ *      struct it validated on append. `append` refuses a malformed row
+ *      before storing it. The consume handler maps the error to a
+ *      `HandlerFailure` carrying `{ events: [], status }`, never a JSON-RPC
+ *      error, and the parse runs before any `drain_ack` fires.
+ *
+ * Conformance-kit verdict: not breaking under VERSION-POLICY §2 — the kit
+ * never names the wrapper (`git grep PendingEvent -- oss/packages/protocol-conformance`
+ * = 0); its only `sequence` is the `action-ack-sequence` fixture's WS ack
+ * `payload.sequence`, the ledger's `appendEvent` seq, never the pipe row's
+ * deleted field. The observable
+ * violation is `@ggui-ai/mcp-server-core`'s published contract-tests suite
+ * (a seeded malformed row is refused or quarantined per form). PATCH-class
+ * under §1.3 for `@ggui-ai/protocol`; rides the 0.16.0 wave.
+ *
+ * --------------------------------------------------------------------
+ * The endpoint-level refusal carries the app as DATA (2026-09-05, wire
+ * field, pre-launch, ggui#870 — the ggui#782 ↔ guuey#708 re-sitting's
+ * D6, guuey#836's blocker). `transportRefusalSchema` — what rides
+ * `error.data.refusal` on a per-app endpoint's typed 403 (ggui#825/#836)
+ * — was strict `{ code, message, fix, retry }` with the app named only
+ * in `message`; a tenant's repair loop cannot parse prose safely.
+ *
+ *   ai1. **`data.refusal.appId: string` — REQUIRED** — the app id the
+ *      refused endpoint serves, equal to the endpoint path's `{appId}`.
+ *      The ggui id the bound caller already holds, never the tenant's
+ *      own `ownerRef`; the tenant maps it to its own id from the
+ *      `gguiAppId` it stored at create. Required, not optional: a field
+ *      a repair loop cannot rely on is a hope, not a contract.
+ *
+ *   ai2. **Who receives the typed face** (the fact from the pod's code,
+ *      ggui#812 identity-first): a correctly bound federated identity
+ *      only — an anonymous request is refused by the auth adapter as
+ *      401 before this arm and learns nothing about the app; a native
+ *      key mismatch gets the bare default-deny 403. SPEC §7.1's
+ *      endpoint paragraph says so now; the anonymous typed face is
+ *      deliberately not a contract (it would trade disclosure).
+ *
+ * Conformance-kit verdict: BREAKING by the letter of VERSION-POLICY §2 —
+ * the kit's `transport-refusal` cases now carry `appId` and the strict
+ * schema refuses a projection without it, so an emitter built against
+ * 0.15.0 fails the 0.16.0 kit — and, the wire being `z.strictObject`, a
+ * 0.15.0 STRICT reader of the body is failed by a 0.16.0 emitter too
+ * (zero such readers exist today; guuey's is step 3, not started). Shipped under §1.4's `draft-` clause in
+ * the 0.16.0 wave; the pod's emitter (cloud, ggui#870's other half)
+ * lands WITH this change, after the tombstone fix for ggui#785/G26.
+ *
+ * Package version — classification MADE here: MAJOR-class change carried
+ * by a MINOR wave under `draft-` (§1.4) for `@ggui-ai/protocol` and
+ * `@ggui-ai/protocol-conformance`. PROTOCOL_VERSION unchanged — no WS
+ * envelope moved.
+ *
+ * --------------------------------------------------------------------
+ * Two refusal codes lose the word "tier" (2026-09-05, rename, pre-launch,
+ * ggui#802 — #786 review finding F6). A code name ships to npm and, for a
+ * render-gate code, reaches every self-hoster's LLM as JSON-Schema enum
+ * metadata on `tools/list`; "tier" names a plan ladder a self-hoster does
+ * not have (docs/principles/oss-purity.md, the type-literal class). Ruled
+ * by a three-lens judge panel under the registry's naming rules:
+ *
+ *   rt1. **`model_not_in_tier` → `model_not_allowed`** (render-gate,
+ *      after-fix, fixBy caller) — the state the row's own description,
+ *      the kit case's `fix` and SPEC §7.9 already name ("not among those
+ *      the app is allowed to use"); subject-first like the rest of the
+ *      registry; true on a deployment with one allow-list per app and no
+ *      prices. Not `model_not_available`: `*_unavailable` is this
+ *      registry's `later` / operator class, the wrong retry class for the
+ *      one code an agent may act on itself.
+ *
+ *   rt2. **`already_on_tier` → `subscription_unchanged`** (owner-api,
+ *      after-fix, fixBy owner) — the owner-api noun the registry already
+ *      uses (`subscription_exists`, `no_subscription`); the state is
+ *      "requested == held", no ladder word.
+ *
+ *   rt3. `tier_unrecognized` is NOT a registry code (deleted from the
+ *      wire at registry v9): a backend allowance state read by the
+ *      console, whose column is literally `tier`. Unchanged.
+ *
+ * Conformance-kit verdict: BREAKING by the letter of VERSION-POLICY §2 —
+ * the kit's `refuse-after-fix-caller` case pinned the old name, so an
+ * emitter built against 0.15.0 fails the 0.16.0 kit's `renderRefusalSchema`
+ * enum. Shipped under §1.4's `draft-` clause (semver describes intent
+ * pre-v1) in the 0.16.0 wave, with the changelog's Unreleased section
+ * naming the move; every mirror moves in one change (the kit case, SPEC,
+ * the docs, the console's copy, the backend's owner-api refusals, the pod's
+ * emitter, cs macros). The registry's purity pin now allows NO code name to
+ * carry plan-tier vocabulary — the grandfather list is gone.
+ *
+ * Package version — classification MADE here: MAJOR-class change carried
+ * by a MINOR wave under `draft-` (§1.4) for `@ggui-ai/protocol` and
+ * `@ggui-ai/protocol-conformance`, pre-1.0 and pre-launch.
+ * PROTOCOL_VERSION unchanged — no WS envelope moved.
+ *
+ * --------------------------------------------------------------------
+ * `UNAUTHORIZED` moves from `-32001` to `-32007` (2026-09-05, renumber,
+ * pre-launch, ggui#853; found by ggui-main in the prod skew-gate log).
+ * `-32001` is the MCP SDK client's own `ErrorCode.RequestTimeout`
+ * (`@modelcontextprotocol/sdk` types.js, beside `ConnectionClosed`
+ * -32000) — minted LOCALLY, never sent by a server — so a client reading
+ * the number could not tell a server's UNAUTHORIZED from its own
+ * timeout: the class ggui#836 closed for -32000, on a number ggui had
+ * chosen long before #836 (0.14.0 and earlier).
+ *
+ *   uc1. **`MCP_ERROR_CODES.UNAUTHORIZED = -32007`** — the next free
+ *      canonical slot per this table's own note; `-32001` joins
+ *      `-32004` as retired-reserved. Every mirror moves in this one
+ *      change (SPEC §7.9 + its table, the gated doc mirrors, the
+ *      endpoint routes' tests, the kit's transport-refusal wording, the
+ *      pod's auth arm, the live journeys). HTTP status and message are
+ *      unchanged: 401/403 + the same text.
+ *
+ *   uc2. **The guard #836 lacked** — `types/error-codes-vs-sdk.test.ts`
+ *      pins every ggui-chosen code (`MCP_ERROR_CODES` minus the five
+ *      JSON-RPC standard codes, plus `PLATFORM_ERROR_CODES`) disjoint
+ *      from every code the SDK's `ErrorCode` enum owns, and ggui's
+ *      copies of the standard five equal to the SDK's. It was RED on
+ *      -32001 before uc1 and is what reds the next collision.
+ *
+ * Conformance-kit verdict: no fixture on 0.15.0 pinned `-32001` (the
+ * transport-refusal catalog grades `-32003 + data.refusal` and `null`;
+ * its prose named -32001 and now names -32007) — a renumbered
+ * canonical code with no kit regression; guuey's clients branch on
+ * -32002/-32006 only (ggui#836 record). Bytes on the wire: one number.
+ *
+ * Package version — classification MADE here: MINOR for
+ * `@ggui-ai/protocol` and `@ggui-ai/mcp-server` (a canonical code
+ * renumbered, `draft-` intent per VERSION-POLICY §1.4), pre-1.0 and
+ * pre-launch. PROTOCOL_VERSION unchanged — no WS envelope moved.
+ *
+ * --------------------------------------------------------------------
  * SPEC §7.1's refused arm is ONE primitive (2026-09-05, additive,
  * pre-launch, ggui#803 leg 9). The tool result a render gate answers a
  * pre-generation refusal with was built by hand in
@@ -3145,6 +3482,19 @@
  *      2026-08-19 out-of-vocabulary enum incident as a permanent
  *      sample).
  *
+ * draft-2026-09-10 — THEMING REVISION (ggui#987 protocol half, ggui#989
+ *      OSS half, ggui#985 cloud half; BREAKING on the draft wave under
+ *      VERSION-POLICY §1.1, shipped under §1.4's `draft-` clause — the
+ *      substantive entry is the "Theming revision" block at the top of
+ *      this changelog). The wire: `appThemeSchema` v2 (`overlays` +
+ *      `overlayHash` required, `base` deleted), the client mode
+ *      projection `hostAnnounced ?? stamped ?? sessionSidecar`, `themeId`
+ *      without its sidecar-name leg, `AppThemeRefusalBody` at every write
+ *      door, `parseMcpAppAiGguiRenderMeta`'s `onInvalidTheme`, the render
+ *      shell on `--ggui-color-ground`. The 0.16.0 lockstep wave carries
+ *      it; the samples, the e2e fixtures and the docs' draft strings move
+ *      in this same commit.
+ *
  * draft-2026-09-04 — PRE-GENERATION REFUSAL ENVELOPE (ggui#786;
  *      BREAKING IN INTENT, pre-launch so no shim and no `@deprecated`
  *      — see `docs/protocol/migrations/2026-09-04-pre-generation-refusal-envelope.md`):
@@ -3221,9 +3571,10 @@
  *      derive (`ConsumeEventEntry`, `GguiConsumeOutput`, `GguiEmitOutput`,
  *      `GguiListSessionsOutput`, `GguiSessionStatus`). `tools/list` now
  *      advertises the entry vocabulary and the status enum for
- *      `ggui_consume`; `parsePendingEnvelope` parses a drained row instead
- *      of casting it, so a malformed pipe entry refuses at the seam. The
- *      wire bytes of a well-formed row are unchanged. Additive.
+ *      `ggui_consume`; `parsePendingEnvelope` parsed a drained row instead
+ *      of casting it, so a malformed pipe entry refused at the seam
+ *      (follower: collapsed into `pendingEventSchema`'s row parse, pe4
+ *      above). The wire bytes of a well-formed row are unchanged. Additive.
  *   r11. **Endpoint refusal codes (ggui#836):** the per-app endpoint speaks
  *      §7.9 Plane-1 rows — the typed deprovisioned arm is `-32003`
  *      (`APP_NOT_FOUND`, `App not found`) with `data.refusal`; untyped
@@ -3245,7 +3596,7 @@
  * `CLIENT_SUPPORTED_VERSIONS`, enforced by the loader (`UPGRADE_REQUIRED`
  * on a non-member); the two coincide only while the set is a singleton.
  */
-export declare const PROTOCOL_VERSION = "draft-2026-09-04";
+export declare const PROTOCOL_VERSION = "draft-2026-09-10";
 /**
  * The shipped `@ggui-ai/*` WAVE version — bare semver, identical to
  * `package.json#version` on every published package (the lockstep
@@ -3286,7 +3637,7 @@ export declare const PROTOCOL_VERSION = "draft-2026-09-04";
  *     PATCH under §1.3); it cannot be cut from main, whose delta since
  *     0.14.0 is minor-class.
  */
-export declare const GGUI_WAVE_VERSION = "0.15.0";
+export declare const GGUI_WAVE_VERSION = "0.16.0";
 /**
  * Schema version stamped onto wire envelopes that opt into the
  * `schemaVersion` forward-compat field (see {@link ActionEnvelope},
@@ -3307,7 +3658,7 @@ export declare const GGUI_WAVE_VERSION = "0.15.0";
  * consumers can reference schema-versioning specifically without
  * coupling to the broader cache-invalidation constant.
  */
-export declare const PROTOCOL_SCHEMA_VERSION = "draft-2026-09-04";
+export declare const PROTOCOL_SCHEMA_VERSION = "draft-2026-09-10";
 /**
  * Canonical live-channel error code emitted when a peer's declared
  * {@link SubscribePayload.supportedVersions} /

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8qGG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,qBAAmB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAErD,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6gHG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,qBAAmB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAErD,CAAC"}