@ggui-ai/protocol 0.15.0 → 0.17.0

package/dist/schemas/app-theme.js

@@ -35,54 +35,232 @@ const cssValue = z
 const cssVariableMap = z
     .record(z.string().regex(GGUI_CSS_VAR_KEY_RE, 'css var key must be --ggui-*'), cssValue)
     .refine((m) => Object.keys(m).length <= 200, 'too many css variables (max 200)');
+/**
+ * The grammar a per-mode `keyframes` string MUST satisfy (ggui#987 §3.4,
+ * follower D). The renderer injects the text verbatim into the card's
+ * `<style>` after the variables, so the text is bounded to what that slot
+ * is FOR: zero or more `@keyframes <ident> { <frame-selectors> { <declarations> } … }`
+ * blocks and nothing else — no other at-rule (`@import`, `@font-face`,
+ * `@media`, …), no `<` / `>`, braces balanced and nested exactly one level
+ * inside a block. Comments (`/* … *\/`) are stripped before the walk and are
+ * therefore allowed, as `cssVariableMap` values allow `url(`; the deny-list
+ * on values (`;{}<>@`) cannot apply verbatim here because `;`, `{`, `}` and
+ * the one `@` ARE the grammar. Same principal, same slot, one rule.
+ */
+export const KEYFRAMES_NAME_RE = /^[A-Za-z_-][A-Za-z0-9_-]*$/;
+export function isKeyframesText(text) {
+    const s = text.replace(/\/\*[\s\S]*?\*\//g, ' ');
+    if (/[<>]/.test(s))
+        return false;
+    let i = 0;
+    const n = s.length;
+    const skipWs = () => {
+        while (i < n && /\s/.test(s[i]))
+            i += 1;
+    };
+    for (;;) {
+        skipWs();
+        if (i >= n)
+            return true;
+        if (!s.startsWith('@keyframes', i))
+            return false;
+        i += '@keyframes'.length;
+        if (i >= n || !/\s/.test(s[i]))
+            return false;
+        skipWs();
+        const nameStart = i;
+        while (i < n && /[A-Za-z0-9_-]/.test(s[i]))
+            i += 1;
+        if (!KEYFRAMES_NAME_RE.test(s.slice(nameStart, i)))
+            return false;
+        skipWs();
+        if (s[i] !== '{')
+            return false;
+        i += 1;
+        // Inside the block: frame rules only — `selectors { declarations }` at depth 1, no `@`.
+        let depth = 1;
+        while (i < n && depth > 0) {
+            const ch = s[i];
+            if (ch === '@')
+                return false;
+            if (ch === '{') {
+                depth += 1;
+                if (depth > 2)
+                    return false;
+            }
+            else if (ch === '}') {
+                depth -= 1;
+            }
+            i += 1;
+        }
+        if (depth !== 0)
+            return false;
+    }
+}
+/** A per-mode keyframes string: `@keyframes` blocks only (see {@link isKeyframesText}), 8 KiB cap unchanged. */
+const keyframesText = z
+    .string()
+    .max(8192)
+    .refine(isKeyframesText, 'keyframes must be `@keyframes <name> { … }` blocks and nothing else');
+/**
+ * https-only asset URL with a well-formed host — the theme document's rule
+ * for a declared face (ggui#987 §5), now the wire's rule for every asset an
+ * AppTheme names. Grammar only: nothing here is fetched.
+ */
+function isHttpsAssetUrl(src) {
+    let url;
+    try {
+        url = new URL(src);
+    }
+    catch {
+        return false;
+    }
+    return url.protocol === 'https:' && /^[a-z0-9.-]+$/i.test(url.hostname) && url.hostname.includes('.');
+}
+const httpsAssetUrl = z.string().min(1).refine(isHttpsAssetUrl, 'src must be an https: URL with a well-formed host');
+/**
+ * One declared font face (ggui#987 §5; lifted here for ggui#1093 / #990 so the
+ * theme DOCUMENT's `typography.faces` and the AppTheme WIRE's `fonts` share
+ * ONE grammar — `@ggui-ai/project-config` imports this schema for the
+ * document door). `src` MUST be `https:` with a well-formed host; the face is
+ * DECLARED, never fetched by any door: the render host unions the origin into
+ * its `font-src`, the shell renders the `@font-face` rule, and a face that
+ * fails to load in the browser falls back down the family's stack.
+ */
+export const fontFaceDeclarationSchema = z.strictObject({
+    family: z.string().min(1).refine((f) => !/[\r\n]/.test(f), 'family must be one line'),
+    src: httpsAssetUrl,
+    weight: z.union([z.string().min(1), z.number().int().min(1).max(1000)]).optional(),
+    style: z.string().min(1).optional(),
+    display: z.string().min(1).optional(),
+});
+/** The most faces one theme may declare on the wire — a CSP and a `<style>` block stay bounded. */
+export const APP_THEME_FONTS_MAX = 16;
+/** The imagery slots a theme may fill (ggui#1093): a brand mark, a hero image, a repeating pattern. */
+export const APP_THEME_IMAGERY_KINDS = ['mark', 'hero', 'pattern'];
+/**
+ * One image asset: https-only `src` (never fetched by a door), an optional
+ * `alt` (≤ 200) and an optional `tone` — the image's own tonality (`light` /
+ * `dark`), so a composer can place ink over it without sampling pixels.
+ */
+export const appThemeImageAssetSchema = z.strictObject({
+    src: httpsAssetUrl,
+    alt: z.string().max(200).optional(),
+    tone: z.enum(['light', 'dark']).optional(),
+});
+/**
+ * The host's imagery, by slot (ggui#1093, #1075 Track C (a)). Parties: a
+ * WRITER (an operator's design tooling, or a harvest of the host page) declares; the WRITE door
+ * validates this grammar and nothing more; the render host unions every
+ * `src` origin into its `img-src`; the composer reads the slots through
+ * the design primitives. Absent ⇒ no imagery, today's card.
+ */
+export const appThemeImagerySchema = z.strictObject({
+    mark: appThemeImageAssetSchema.optional(),
+    hero: appThemeImageAssetSchema.optional(),
+    pattern: appThemeImageAssetSchema.optional(),
+});
 export const appThemeSchema = z
     .object({
-    mode: z.enum(['light', 'dark']),
-    cssVariables: cssVariableMap,
+    /**
+     * Default appearance: the mode painted when NO embedding host announces
+     * one. Never a pin — the host owns runtime mode (ggui#987 D4; see
+     * `integrations/theme-binding.ts`). Absent ⇒ mode-neutral.
+     */
+    mode: z.enum(['light', 'dark']).optional(),
+    /** A label the author's tooling reads back. Never resolved by a renderer. */
     name: z.string().min(1).max(64).optional(),
     /**
-     * The REGISTERED base ladder, delivered (runtime theme
-     * registration): both modes' resolved variable sets ride the
-     * envelope so a mid-session mode switch is a local operation and
-     * delivery never depends on the iframe being able to fetch. The
-     * renderer injects the mode-selected set BELOW `cssVariables` (the
-     * per-app overlay) in the documented precedence. `documentHash` is
-     * the registration's identity: it joins painted ladders to
-     * registration records, and a receiver holding the hash may be
-     * served a future envelope without the variable sets.
+     * Delivery attestation: `canonicalOverlayHash({ overlays, cssVariables,
+     * keyframes })` (`integrations/overlay-hash.ts`). Every write door
+     * recomputes it and refuses a mismatch; read doors pass it through.
      */
-    base: z
+    overlayHash: z.string().regex(/^[0-9a-f]{64}$/, 'overlayHash must be sha256 lowercase hex'),
+    /**
+     * The projection, both modes — the derived `--ggui-*` sets a card
+     * injects for the effective mode (ggui#987 §2.4: produced by ONE
+     * function on every path). REQUIRED, both: an overlay that could not
+     * follow the host's mode is not accepted.
+     */
+    overlays: z.object({ light: cssVariableMap, dark: cssVariableMap }).strict(),
+    /** Mode-agnostic per-app overrides, injected above both projections. */
+    cssVariables: cssVariableMap.optional(),
+    /** Per-mode `@keyframes` blocks, injected verbatim after the variables — bounded to that grammar by {@link isKeyframesText}. */
+    keyframes: z
         .object({
-        documentHash: z
-            .string()
-            .regex(/^[0-9a-f]{64}$/, 'documentHash must be sha256 lowercase hex'),
-        light: cssVariableMap,
-        dark: cssVariableMap,
-        /**
-         * Per-mode `@keyframes` blocks from the registration document
-         * (ggui#613 residual 2). A mode key is absent when its
-         * document declares no motion keyframes; the whole field is
-         * absent on pre-#613 registrations (additive optional — old
-         * bases stay valid). Injected verbatim after the variable
-         * ladder, same position the compiled path gives
-         * `theme.cssKeyframes`.
-         */
-        keyframes: z
-            .object({
-            light: z.string().max(8192).optional(),
-            dark: z.string().max(8192).optional(),
-        })
-            .strict()
-            .optional(),
-        /**
-         * `$metadata.frameless` delivered (OR of both modes): the
-         * embedding host owns the card silhouette, so the renderer
-         * appends the root-children border-suppression rule — the
-         * SAME rule the compiled path emits.
-         */
-        frameless: z.boolean().optional(),
+        light: keyframesText.optional(),
+        dark: keyframesText.optional(),
     })
         .strict()
         .optional(),
+    /**
+     * The embedding host owns the card silhouette: the renderer appends the
+     * root-children border-suppression rule.
+     */
+    frameless: z.boolean().optional(),
+    /**
+     * Declared font faces (ggui#1093 / #990 — the hosted carrier for the
+     * document's `typography.faces`): 1..{@link APP_THEME_FONTS_MAX} faces,
+     * each {@link fontFaceDeclarationSchema}. OUTSIDE the attestation:
+     * `overlayHash` covers `{ overlays, cssVariables, keyframes }` only
+     * (`integrations/overlay-hash.ts`, `OverlayHashInput`) — a face is a
+     * declared asset, not a derived projection. A reader on a release that
+     * does not name this member strips it at its read door and paints the
+     * colours without the faces (`appThemeReadSchema`, VERSION-POLICY §3.6).
+     */
+    fonts: z.array(fontFaceDeclarationSchema).min(1).max(APP_THEME_FONTS_MAX).optional(),
+    /** The host's imagery by slot — {@link appThemeImagerySchema}; outside the attestation, same as `fonts`. */
+    imagery: appThemeImagerySchema.optional(),
 })
     .strict();
+/**
+ * The READ-door posture (ggui#1093 belt, 2026-09-15; VERSION-POLICY §3.6).
+ *
+ * `appThemeSchema` is the WRITE door: strict, an unknown top-level member is
+ * refused (`invalid_app_config`). A READ door — a stored row turned into
+ * paint, a carried `_meta["ai.ggui/render"].theme` slice — parses with THIS
+ * schema instead: an unknown TOP-LEVEL member is stripped, the overlays are
+ * kept, and the caller reports what it stripped (one line per read, keys
+ * only, never theme content). Everything below the top level is unchanged —
+ * nested objects stay strict, token grammar and value safety still refuse,
+ * the v1 shape still refuses — and the attestation is untouched because
+ * `overlayHash` covers `{ overlays, cssVariables, keyframes }` only.
+ *
+ * Why: a reader on release N−1 meeting a member release N added would
+ * otherwise drop the WHOLE theme — colours and all — until it rolled
+ * (guuey#1266's class). Parties: every read door of an `AppTheme` MUST use
+ * this variant (or {@link parseAppThemeAtReadDoor}); every write door MUST
+ * stay on `appThemeSchema`. Observable violation: a read door dropping a
+ * theme whose overlays are valid because of an unknown top-level member —
+ * the kit's `n1-compat` forward case grades it.
+ */
+export const appThemeReadSchema = z.object(appThemeSchema.shape);
+/**
+ * Parse a stored or carried theme at a READ door: `ok` with the theme and
+ * the top-level members that were stripped (payload order, `[]` when none),
+ * or the issues in `path: message` form when the theme is refused for a
+ * reason the write door would also refuse.
+ */
+export function parseAppThemeAtReadDoor(input) {
+    const r = appThemeReadSchema.safeParse(input);
+    if (!r.success) {
+        return { ok: false, issues: r.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`) };
+    }
+    const known = new Set(Object.keys(appThemeSchema.shape));
+    const stripped = typeof input === 'object' && input !== null && !Array.isArray(input)
+        ? Object.keys(input).filter((k) => !known.has(k))
+        : [];
+    return { ok: true, theme: r.data, stripped };
+}
+/**
+ * The ONE refusal body every write door returns for an overlay it will not
+ * store (ggui#987 §3.4): REST 422 `invalid_app_config`, the AppSync
+ * `errorInfo`, the MCP ops door's `{ ok: false }` structured content. A
+ * discriminated union by key — exactly one of the four.
+ */
+export const appThemeRefusalBodySchema = z.union([
+    z.object({ uncovered: z.object({ light: z.array(z.string()), dark: z.array(z.string()) }).strict() }).strict(),
+    z.object({ unknown: z.object({ light: z.array(z.string()), dark: z.array(z.string()) }).strict() }).strict(),
+    z.object({ overlayHash: z.literal('mismatch') }).strict(),
+    z.object({ refused: z.literal('v1 shape') }).strict(),
+]);

package/dist/schemas/blueprint.d.ts

@@ -11,7 +11,8 @@ import type { BlueprintSource, CuratedBlueprintSource, LlmBlueprintSource, UserB
  * Zod mirror of {@link LlmBlueprintSource} — the engine-generated arm.
  * Both provenance fields are REQUIRED: every generation mint site has
  * them in scope, and an engine-generated artifact that cannot name its
- * engine + model is not a real state.
+ * engine + model is not a real state. Since ggui#924 the identity is
+ * de-modeled (`ui-gen-<tier>`) and the model is the run's `ModelRef`.
  */
 export declare const llmBlueprintSourceSchema: z.ZodType<LlmBlueprintSource>;
 /** Zod mirror of {@link UserBlueprintSource} — no engine claim exists. */

package/dist/schemas/blueprint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blueprint.d.ts","sourceRoot":"","sources":["../../src/schemas/blueprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,wBAAwB,EACxB,SAAS,EACT,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,2BAA2B,CAAC;AAGnC;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAMvB,CAAC;AAE7C,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAExB,CAAC;AAE9C,oDAAoD;AACpD,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAE3B,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAI7B,CAAC;AAEjC;;;;;;;;;GASG;AACH,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,4DAA6D,CAAC;AAElG,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAgCtB,CAAC;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAwBd,CAAC;AAmBpC;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAM7B,CAAC"}
+{"version":3,"file":"blueprint.d.ts","sourceRoot":"","sources":["../../src/schemas/blueprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,wBAAwB,EACxB,SAAS,EACT,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,2BAA2B,CAAC;AAKnC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAexD,CAAC;AAEZ,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAExB,CAAC;AAE9C,oDAAoD;AACpD,eAAO,MAAM,4BAA4B,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAE3B,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAI7B,CAAC;AAEjC;;;;;;;;;GASG;AACH,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,4DAA6D,CAAC;AAElG,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAgCtB,CAAC;AAE5C;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAwBd,CAAC;AAmBpC;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAM7B,CAAC"}

package/dist/schemas/blueprint.js

@@ -5,18 +5,30 @@
  * here is `z.ZodType<Blueprint>` so any drift fails compile.
  */
 import { z } from 'zod';
+import { isGeneratorId } from '../types/blueprint-source.js';
+import { MODEL_REF_PREFIXES, isModelRef } from '../types/llm-route.js';
 import { dataContractSchema, jsonValueSchema } from './data-contract.js';
 /**
  * Zod mirror of {@link LlmBlueprintSource} — the engine-generated arm.
  * Both provenance fields are REQUIRED: every generation mint site has
  * them in scope, and an engine-generated artifact that cannot name its
- * engine + model is not a real state.
+ * engine + model is not a real state. Since ggui#924 the identity is
+ * de-modeled (`ui-gen-<tier>`) and the model is the run's `ModelRef`.
  */
 export const llmBlueprintSourceSchema = z
     .object({
     kind: z.literal('llm'),
-    generator: z.string().min(1),
-    model: z.string().min(1),
+    // ggui#924: the de-modeled identity and the run's `ModelRef` — a
+    // modeled id, a bare model name or a second spelling is refused here,
+    // naming the field. Template literals (not `z.custom`) so the fields
+    // keep their literal types AND render to JSON Schema as `pattern` —
+    // this schema is embedded in tool inputs that `tools/list` renders.
+    generator: z.templateLiteral(['ui-gen-', z.string()]).refine(isGeneratorId, {
+        error: 'generator is the de-modeled identity `ui-gen-<tier>` — one tier token, no model segment (e.g. `ui-gen-default`)',
+    }),
+    model: z.templateLiteral([z.enum(MODEL_REF_PREFIXES), '/', z.string()]).refine(isModelRef, {
+        error: 'model is the run route in the registry spelling `<prefix>/<model>` (e.g. `anthropic/claude-haiku-4-5`)',
+    }),
 })
     .strict();
 /** Zod mirror of {@link UserBlueprintSource} — no engine claim exists. */

package/dist/schemas/data-contract.d.ts

@@ -7,7 +7,7 @@
  * Output-side seams that type-narrow contract on the wire —
  * `renderOutputSchema.contract` and the various `decision` echoes — use
  * `z.custom<DataContract>()` because they trust the shape (it
- * originates from internal pod state).
+ * originates from internal server state).
  *
  * The input seam is different: agents author contract on
  * `story.contract` and the handler MUST plumb them to the generator.

package/dist/schemas/data-contract.js

@@ -7,7 +7,7 @@
  * Output-side seams that type-narrow contract on the wire —
  * `renderOutputSchema.contract` and the various `decision` echoes — use
  * `z.custom<DataContract>()` because they trust the shape (it
- * originates from internal pod state).
+ * originates from internal server state).
  *
  * The input seam is different: agents author contract on
  * `story.contract` and the handler MUST plumb them to the generator.

package/dist/schemas/handshake-suggestion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handshake-suggestion.d.ts","sourceRoot":"","sources":["../../src/schemas/handshake-suggestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAI1C,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAI7D,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAezB,CAAC;AAE7B,8DAA8D;AAC9D,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAsD,CAAC;AAExG;;;;;GAKG;AACH,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,gDAAiD,CAAC;AAEnF,eAAO,MAAM,0BAA0B;;;;kBAkB5B,CAAC;AAEZ,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAA2D,CAAC;AAEvH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CASlB,CAAC;AAExC,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAOtB,CAAC;AAE5C,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAKzB,CAAC;AAE/C,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CASxB,CAAC"}
+{"version":3,"file":"handshake-suggestion.d.ts","sourceRoot":"","sources":["../../src/schemas/handshake-suggestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAI1C,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAI7D,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAezB,CAAC;AAE7B,8DAA8D;AAC9D,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAsD,CAAC;AAExG;;;;;GAKG;AACH,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,gDAAiD,CAAC;AAEnF,eAAO,MAAM,0BAA0B;;;;kBA0B5B,CAAC;AAEZ,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAA2D,CAAC;AAEvH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CASlB,CAAC;AAExC,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAOtB,CAAC;AAE5C,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAKzB,CAAC;AAE/C,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CASxB,CAAC"}

package/dist/schemas/handshake-suggestion.js

@@ -8,6 +8,7 @@
  * `z.ZodType<T>` so any drift fails compile.
  */
 import { z } from 'zod';
+import { GENERATOR_ID_PATTERN } from '../types/blueprint-source.js';
 import { dataContractSchema, jsonValueSchema } from './data-contract.js';
 import { blueprintSourceSchema, blueprintVarianceSchema } from './blueprint.js';
 /** Three-mode routing enum on {@link HandshakeSuggestion.origin}. */
@@ -51,7 +52,13 @@ export const blueprintDraftObjectSchema = z
     // rejection message) that `blueprintMeta.variance` projects on the
     // way back out (ggui#523 item 1 — the mirror-of-a-mirror is gone).
     variance: blueprintVarianceSchema.optional(),
-    generator: z.string().optional(),
+    generator: z
+        .string()
+        .regex(GENERATOR_ID_PATTERN, {
+        error: 'generator is an identity `ui-gen-<tier>` — one tier token, no model segment (ggui#924)',
+    })
+        .optional()
+        .describe('Generator identity hint — `ui-gen-default` or `ui-gen-advanced` (one tier token, no model segment). The deployment picks the model and reports it on `source.model`.'),
 }, {
     error: (issue) => issue.code === 'unrecognized_keys'
         ? `blueprintDraft: unknown key(s) ${issue.keys.map((k) => JSON.stringify(k)).join(', ')} — a draft is EXACTLY {${BLUEPRINT_DRAFT_KEYS.join(', ')}}; \`intent\` is a top-level ggui_handshake field, not a draft field, and the four specs live INSIDE \`contract\``

package/dist/schemas/mcp.d.ts

@@ -7,7 +7,7 @@
  * Two consumption patterns, both anchored here:
  *
  *   - **Wired raw shapes** (`*InputShape`): handlers in
- *     `@ggui-ai/mcp-server-handlers` (and the hosted pod's discover
+ *     `@ggui-ai/mcp-server-handlers` (and a hosted deployment's discover
  *     tool) import the SHAPE directly as their `inputSchema` and
  *     validate with `z.object(shape)` — unknown keys are STRIPPED.
  *     The shape is the one authored copy of the validation rules AND
@@ -396,13 +396,10 @@ export declare const renderRefusalSchema: z.ZodObject<{
         unsupported_provider: "unsupported_provider";
         insufficient_credit: "insufficient_credit";
         hard_cap_exceeded: "hard_cap_exceeded";
-        model_not_in_tier: "model_not_in_tier";
+        model_not_allowed: "model_not_allowed";
         managed_default_cap_exceeded: "managed_default_cap_exceeded";
         app_policy_missing: "app_policy_missing";
         billing_mode_anomaly: "billing_mode_anomaly";
-        app_canceled: "app_canceled";
-        trial_exhausted: "trial_exhausted";
-        trial_expired: "trial_expired";
         issuer_rate_limited: "issuer_rate_limited";
         app_rate_limited: "app_rate_limited";
         app_deprovisioned: "app_deprovisioned";
@@ -419,9 +416,16 @@ export type PreGenerationRefusal = z.infer<typeof renderRefusalSchema>;
  * from {@link MCP_ENDPOINT_REFUSAL_CODES} — today exactly
  * `app_deprovisioned`, the one refusal with a tenant-side fix and
  * therefore the one that MUST be legible where a deleted app and a bad
- * credential would otherwise look alike.
+ * credential would otherwise look alike. `appId` (ggui#870) is the app
+ * the refused endpoint serves, as DATA — equal to the path's `{appId}`
+ * — so a tenant's repair loop keys on it and never parses prose; it is
+ * the ggui id the bound caller already holds, never the tenant's own
+ * `ownerRef`. The typed refusal answers a correctly bound federated
+ * identity only (identity first): an anonymous request is refused by the
+ * auth adapter before this arm, and learns nothing about the app.
  */
 export declare const transportRefusalSchema: z.ZodObject<{
+    appId: z.ZodString;
     message: z.ZodString;
     fix: z.ZodString;
     retry: z.ZodEnum<{
@@ -444,7 +448,7 @@ export type TransportRefusal = z.infer<typeof transportRefusalSchema>;
  * proxy 403) and `message` `App not found`, plus `data.refusal`, which
  * makes it legible. `data` is strict: it carries the refusal and nothing
  * else. An authorization failure that is not a registry state answers
- * HTTP 403 with `-32001` (`UNAUTHORIZED`) and NO `data` — the three
+ * HTTP 403 with `-32007` (`UNAUTHORIZED`) and NO `data` — the three
  * untyped arms stay indistinguishable among themselves by contract:
  * naming any of them would say which is true. A first-party server
  * never chooses `-32000`: it is the SDK client's `ConnectionClosed`, so
@@ -455,6 +459,7 @@ export declare const transportRefusalErrorSchema: z.ZodObject<{
     message: z.ZodLiteral<"App not found">;
     data: z.ZodObject<{
         refusal: z.ZodObject<{
+            appId: z.ZodString;
             message: z.ZodString;
             fix: z.ZodString;
             retry: z.ZodEnum<{
@@ -507,13 +512,10 @@ export declare const refusedOutputSchema: z.ZodObject<{
             unsupported_provider: "unsupported_provider";
             insufficient_credit: "insufficient_credit";
             hard_cap_exceeded: "hard_cap_exceeded";
-            model_not_in_tier: "model_not_in_tier";
+            model_not_allowed: "model_not_allowed";
             managed_default_cap_exceeded: "managed_default_cap_exceeded";
             app_policy_missing: "app_policy_missing";
             billing_mode_anomaly: "billing_mode_anomaly";
-            app_canceled: "app_canceled";
-            trial_exhausted: "trial_exhausted";
-            trial_expired: "trial_expired";
             issuer_rate_limited: "issuer_rate_limited";
             app_rate_limited: "app_rate_limited";
             app_deprovisioned: "app_deprovisioned";
@@ -673,13 +675,10 @@ export declare const renderOutputSchema: z.ZodObject<{
             unsupported_provider: "unsupported_provider";
             insufficient_credit: "insufficient_credit";
             hard_cap_exceeded: "hard_cap_exceeded";
-            model_not_in_tier: "model_not_in_tier";
+            model_not_allowed: "model_not_allowed";
             managed_default_cap_exceeded: "managed_default_cap_exceeded";
             app_policy_missing: "app_policy_missing";
             billing_mode_anomaly: "billing_mode_anomaly";
-            app_canceled: "app_canceled";
-            trial_exhausted: "trial_exhausted";
-            trial_expired: "trial_expired";
             issuer_rate_limited: "issuer_rate_limited";
             app_rate_limited: "app_rate_limited";
             app_deprovisioned: "app_deprovisioned";
@@ -711,7 +710,7 @@ export declare const renderOutputSchema: z.ZodObject<{
  *     wise). Use when most props stay the same and the agent only
  *     needs to send a small delta — common after a single domain-tool
  *     mutation. RFC 7396 chosen because it has a published spec and
- *     wide library support (GitHub API, Kubernetes strategic-merge).
+ *     wide library support (GitHub API's merge semantics, strategic-merge-patch).
  *
  * Anti-patterns (the discriminated union rejects these structurally,
  * but they're a common author mistake when copy-pasting):
@@ -724,7 +723,7 @@ export declare const renderOutputSchema: z.ZodObject<{
  * partial patches that would break required fields, type-mismatch
  * values, etc. all reject pre-persist.
  *
- * `sessionId` is globally unique; the server tenancy-checks via
+ * `sessionId` is globally unique; the server checks the app scope via
  * `ctx.appId`.
  */
 export declare const updateInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -847,11 +846,20 @@ export declare const declareToolCatalogOutputSchema: z.ZodObject<{
  */
 export declare const RUNTIME_PULL_MAX_LIMIT = 100;
 /**
- * Server-side ceiling on `ggui_runtime_pull`'s `wait` hold, in seconds.
- * Chosen under `ggui_consume`'s proven 25-second host tolerance for
- * held tool calls — the hold must resolve before any host-side
- * `tools/call` timeout fires, or the transport counts a failure the
- * server intended as a quiet success.
+ * Server-side ceiling on `ggui_runtime_pull`'s `wait` hold, in seconds —
+ * the LONGEST hold the server will honour, never a promise that every
+ * host tolerates it (ggui#1030).
+ *
+ * The contract has two sides. SERVER: honour `wait` up to this ceiling,
+ * return the empty page as a normal result when the hold elapses, and
+ * end the hold when the caller's transport closes. CALLER (the pulling
+ * runtime): choose a `wait` that does not exceed the `tools/call`
+ * timeout of the host relaying the call, minus a margin; a host that
+ * relays a pull clamps the forwarded `wait` to its own timeout minus one
+ * second. A host timeout below the hold is a caller-side failure — the
+ * server's `success` after the socket closed is not a server fault, and
+ * a caller that keeps pulling through such failures must demote to
+ * sparse un-held pulls exactly as it does after consecutive empties.
  */
 export declare const RUNTIME_PULL_MAX_WAIT_SECONDS = 20;
 /**
@@ -890,9 +898,9 @@ export declare const gguiSessionEventSchema: z.ZodObject<{
  * OPTIONAL here (the bridge rung owns its cursor and seeds from 0; the
  * route requires it because a bare browser GET has no cursor owner),
  * and `limit` is clamped to {@link RUNTIME_PULL_MAX_LIMIT} instead of
- * rejecting above it. Tenancy violations and unknown sessionIds
+ * rejecting above it. Cross-app access and unknown sessionIds
  * surface uniformly as the `session_not_found` error — existence of
- * other tenants' renders is never leaked.
+ * other apps' renders is never leaked.
  */
 export declare const runtimePullInputShape: {
     readonly sessionId: z.ZodString;
@@ -1119,9 +1127,9 @@ export declare const gguiSessionStatusSchema: z.ZodEnum<{
 /**
  * One drained row of `ggui_consume` — a user action that reached the
  * pipe (ggui#817 part C2). Closed on the wire: an unknown key is
- * stripped at the transport, a missing key refuses the row at the seam
- * (`parsePendingEnvelope`), so a malformed pipe entry never ships to an
- * agent typed as a good one.
+ * stripped at the transport, a missing key refuses the row at the store
+ * boundary (`pendingEventSchema`, ggui#839), so a malformed pipe entry
+ * never ships to an agent typed as a good one.
  */
 export declare const consumeEventEntrySchema: z.ZodObject<{
     type: z.ZodLiteral<"action">;
@@ -1132,6 +1140,33 @@ export declare const consumeEventEntrySchema: z.ZodObject<{
     actionId: z.ZodString;
     firedAt: z.ZodString;
 }, z.core.$strip>;
+/**
+ * One stored row of the consume pipe — what a producer appends and
+ * `consumeAndClear` drains, the same shape on every store (ggui#839; a
+ * store-boundary contract, never wire — `ggui_consume` returns the
+ * entries, never the wrapper). `id` is the drain_ack key and the
+ * idempotency key per `(sessionId, id)`; `envelope` is the
+ * {@link consumeEventEntrySchema} entry, always the object (every writer
+ * passes one; a store that serializes the row serializes the whole row);
+ * `createdAt` is when the row was appended — a string, never `.datetime()`:
+ * the relay copies the client's `firedAt`, which the ingress accepts as a
+ * diagnostic. `PendingEventConsumer` adapters validate every row through
+ * this schema on append and, when rows come back from a serialization, on
+ * drain — a malformed row never reaches an agent typed as a good entry.
+ */
+export declare const pendingEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    envelope: z.ZodObject<{
+        type: z.ZodLiteral<"action">;
+        sessionId: z.ZodString;
+        intent: z.ZodString;
+        actionData: z.ZodNullable<z.ZodType<import("../index.js").JsonValue, unknown, z.core.$ZodTypeInternals<import("../index.js").JsonValue, unknown>>>;
+        uiContext: z.ZodType<import("../index.js").JsonObject, unknown, z.core.$ZodTypeInternals<import("../index.js").JsonObject, unknown>>;
+        actionId: z.ZodString;
+        firedAt: z.ZodString;
+    }, z.core.$strip>;
+    createdAt: z.ZodString;
+}, z.core.$strip>;
 /**
  * `ggui_consume`'s output — the drained rows, the session's state, and the
  * client's observations when the host sent any (ggui#817 part C2). The

package/dist/schemas/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/schemas/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;CAgBpB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;iBAA8B,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;iBAA2B,CAAC;AAExD,eAAO,MAAM,oBAAoB;;CAKvB,CAAC;AAEX,eAAO,MAAM,qBAAqB;;iBAAiC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;CAK5B,CAAC;AAEX,eAAO,MAAM,0BAA0B;;iBAAsC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,IAAc,CAAC;AAE5D,eAAO,MAAM,iCAAiC,gCAE7C,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;CAwB7B,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;;;iBAAuC,CAAC;AAEhF,eAAO,MAAM,yBAAyB;;CAO5B,CAAC;AAEX,eAAO,MAAM,0BAA0B;;iBAAsC,CAAC;AAE9E,eAAO,MAAM,kBAAkB,IAAc,CAAC;AAE9C,eAAO,MAAM,mBAAmB,gCAA+B,CAAC;AAahE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oBAAoB;;;;kBA0BtB,CAAC;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;iBAgChC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,gBAAgB;;IAO3B;;;;;;;;OAQG;;IAEH;;;;;OAKG;;IAQH;;;;;;;;;;;;;;;OAeG;;;;IAaH;;;;;;;;;;;OAWG;;;;;CAuBK,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;;;;;;;;;iBAA6B,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAyBlC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;iBAS5B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,mBAAmB;;;;EAA4C,CAAC;AAE7E,+DAA+D;AAC/D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAyChE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmB9B,CAAC;AAEH,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;kBAOjC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;kBAItC,CAAC;AAEH,iGAAiG;AACjG,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAG9B,CAAC;AAqDH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,2BAA2B;;;;;EAKtC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;iBAalC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiK7B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;4BAa5B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;4BAa3B,CAAC;AAkBH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;iBAgD7B,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;;iBAsC5B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,6BAA6B;;;;;kBAW/B,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;kBAKhC,CAAC;AAIZ;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;iBAsBjC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,qBAAqB;;;;;CA8BxB,CAAC;AAEX,eAAO,MAAM,sBAAsB;;;;;iBAAkC,CAAC;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;iBAItC,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;mBAGlC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B;;;;;;;CA+B7B,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;;;;;iBAAuC,CAAC;AAEhF,8DAA8D;AAC9D,eAAO,MAAM,4BAA4B;;iBAAoC,CAAC;AAW9E,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,kDAAkD;AAClD,KAAK,uBAAuB,GAAG,QAAQ,CACrC,IAAI,CACF,iBAAiB,EACjB,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,OAAO,CACjF,CACF,CAAC;AAEF,qEAAqE;AACrE,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,iBAAiB,GACxB,MAAM,IAAI,iBAAiB,GAAG;IAAE,OAAO,EAAE,UAAU,CAAA;CAAE,GAAG,uBAAuB,CAEjF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,GACxB,MAAM,IAAI,iBAAiB,GAAG;IAC/B,OAAO,EAAE,QAAQ,CAAC;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;CAC1C,GAAG,uBAAuB,CAE1B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GACxB,MAAM,IAAI;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAEjE;AAYD,iFAAiF;AACjF,eAAO,MAAM,sBAAsB;;;;EAA0C,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBtC,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAEnC,CAAC;AAEH,mFAAmF;AACnF,eAAO,MAAM,4BAA4B;;;;;;;;;iBASvC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;EAAgC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIlC,CAAC;AAEH,iFAAiF;AACjF,eAAO,MAAM,4BAA4B;;;;;;;;;;;iBAEvC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;iBAU/B,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAgBrC,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,6BAA6B;;;;EAA8C,CAAC;AAEzF,eAAO,MAAM,8BAA8B;;;;;;;;;iBAKzC,CAAC;AAEH,6GAA6G;AAC7G,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK1C,CAAC;AAEH,mFAAmF;AACnF,eAAO,MAAM,wBAAwB;;;;;;;iBAOnC,CAAC;AAEH,eAAO,MAAM,sCAAsC;;;;;;;;;;iBAGjD,CAAC;AAEH,mFAAmF;AACnF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB3C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY3C,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/schemas/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;CAgBpB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;iBAA8B,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;iBAA2B,CAAC;AAExD,eAAO,MAAM,oBAAoB;;CAKvB,CAAC;AAEX,eAAO,MAAM,qBAAqB;;iBAAiC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;CAK5B,CAAC;AAEX,eAAO,MAAM,0BAA0B;;iBAAsC,CAAC;AAE9E;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,IAAc,CAAC;AAE5D,eAAO,MAAM,iCAAiC,gCAE7C,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;CAwB7B,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;;;iBAAuC,CAAC;AAEhF,eAAO,MAAM,yBAAyB;;CAO5B,CAAC;AAEX,eAAO,MAAM,0BAA0B;;iBAAsC,CAAC;AAE9E,eAAO,MAAM,kBAAkB,IAAc,CAAC;AAE9C,eAAO,MAAM,mBAAmB,gCAA+B,CAAC;AAahE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,oBAAoB;;;;kBA0BtB,CAAC;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;iBAgChC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,gBAAgB;;IAO3B;;;;;;;;OAQG;;IAEH;;;;;OAKG;;IAQH;;;;;;;;;;;;;;;OAeG;;;;IAaH;;;;;;;;;;;OAWG;;;;;CAuBK,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;;;;;;;;;iBAA6B,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAyBlC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;iBAS5B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,mBAAmB;;;;EAA4C,CAAC;AAE7E,+DAA+D;AAC/D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAyChE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;iBAmB9B,CAAC;AAEH,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;kBAajC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;kBAItC,CAAC;AAEH,iGAAiG;AACjG,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAG9B,CAAC;AAqDH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,2BAA2B;;;;;EAKtC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;iBAalC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiK7B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;4BAa5B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;4BAa3B,CAAC;AAkBH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;iBAgD7B,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB;;;;;;;iBAsC5B,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,6BAA6B;;;;;kBAW/B,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;kBAKhC,CAAC;AAIZ;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;iBAsBjC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,qBAAqB;;;;;CA8BxB,CAAC;AAEX,eAAO,MAAM,sBAAsB;;;;;iBAAkC,CAAC;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;iBAItC,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;mBAGlC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,0BAA0B;;;;;;;CA+B7B,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;;;;;iBAAuC,CAAC;AAEhF,8DAA8D;AAC9D,eAAO,MAAM,4BAA4B;;iBAAoC,CAAC;AAW9E,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,kDAAkD;AAClD,KAAK,uBAAuB,GAAG,QAAQ,CACrC,IAAI,CACF,iBAAiB,EACjB,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,OAAO,CACjF,CACF,CAAC;AAEF,qEAAqE;AACrE,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,iBAAiB,GACxB,MAAM,IAAI,iBAAiB,GAAG;IAAE,OAAO,EAAE,UAAU,CAAA;CAAE,GAAG,uBAAuB,CAEjF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,iBAAiB,GACxB,MAAM,IAAI,iBAAiB,GAAG;IAC/B,OAAO,EAAE,QAAQ,CAAC;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;CAC1C,GAAG,uBAAuB,CAE1B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GACxB,MAAM,IAAI;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,CAEjE;AAYD,iFAAiF;AACjF,eAAO,MAAM,sBAAsB;;;;EAA0C,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBtC,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAEnC,CAAC;AAEH,mFAAmF;AACnF,eAAO,MAAM,4BAA4B;;;;;;;;;iBASvC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;EAAgC,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;iBAI7B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIlC,CAAC;AAEH,iFAAiF;AACjF,eAAO,MAAM,4BAA4B;;;;;;;;;;;iBAEvC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;iBAU/B,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAgBrC,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,6BAA6B;;;;EAA8C,CAAC;AAEzF,eAAO,MAAM,8BAA8B;;;;;;;;;iBAKzC,CAAC;AAEH,6GAA6G;AAC7G,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK1C,CAAC;AAEH,mFAAmF;AACnF,eAAO,MAAM,wBAAwB;;;;;;;iBAOnC,CAAC;AAEH,eAAO,MAAM,sCAAsC;;;;;;;;;;iBAGjD,CAAC;AAEH,mFAAmF;AACnF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB3C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY3C,CAAC"}