@ggui-ai/protocol 0.2.0-alpha.3 → 0.3.0-rc.0

package/dist/schemas/ops-blueprint.js

@@ -11,7 +11,7 @@
  *     `createdAt desc`.
  *   - `ggui_ops_update_blueprint` — toggle the operator-default flag
  *     and/or patch variance tags. Immutable fields (contractHash,
- *     appId, codeS3Url, codeHash, generator, createdAt, createdBy)
+ *     appId, codeS3Url, codeHash, source, createdAt, createdBy)
  *     never mutate; the tool MUST refuse them on input.
  *   - `ggui_ops_delete_blueprint` — idempotent removal. Second delete
  *     for the same id returns `{deleted: true}` — never throws.
@@ -25,7 +25,7 @@
  */
 import { z } from 'zod';
 import { dataContractSchema, jsonValueSchema, } from './data-contract.js';
-import { blueprintSchema, blueprintVarianceSchema } from './blueprint.js';
+import { blueprintSchema, blueprintVarianceSchema, llmBlueprintSourceSchema, userBlueprintSourceSchema, } from './blueprint.js';
 /**
  * `ggui_ops_generate_blueprint` input. Operator picks the contract +
  * optional generator override + variance tags. `setAsOperatorDefault`
@@ -74,7 +74,7 @@ export const opsGenerateBlueprintInputSchema = z
 /**
  * `ggui_ops_generate_blueprint` output. Metadata-only — the code body
  * lives in S3 (cloud) or the in-memory code map (OSS) and is fetched
- * via the existing push fast-path on cache hit.
+ * via the existing render fast-path on cache hit.
  */
 export const opsGenerateBlueprintOutputSchema = z
     .object({
@@ -89,10 +89,7 @@ export const opsGenerateBlueprintOutputSchema = z
         .max(1)
         .optional()
         .describe("Advanced generator's iterative-loop validator score (0-1). Absent for default-generator output."),
-    generator: z
-        .string()
-        .min(1)
-        .describe('Slug of the generator the dispatch resolved to.'),
+    source: llmBlueprintSourceSchema.describe('Provenance stamped on the persisted `Blueprint.source` — always the `llm` arm on this path: `generator` is the engine slug the dispatch resolved to (stamped from the engine\'s own metadata claim); `model` is the LLM model id the engine called.'),
 })
     .strict();
 /**
@@ -113,12 +110,13 @@ export const opsGenerateBlueprintOutputSchema = z
  * is replaced with a verbatim accept of the operator's
  * `componentCode` string.
  *
- * `generator` is OPTIONAL here too — when omitted, the handler stamps
- * the registry default's slug onto the persisted Blueprint so
- * downstream `*_list_blueprints` consumers see a stable provenance
- * field. `validatorScore` is never populated (no validator ran);
- * operators wanting validator metadata should round-trip through
- * `*_generate_*` instead.
+ * Provenance is STRUCTURAL on this path — the handler stamps
+ * `source: {kind: 'user'}` on the persisted Blueprint (operator-
+ * supplied bytes carry no engine claim, and fabricating one is
+ * banned), so the input carries no provenance field at all.
+ * `validatorScore` is never populated (no validator ran); operators
+ * wanting validator metadata should round-trip through `*_generate_*`
+ * instead.
  */
 export const opsRegisterBlueprintInputSchema = z
     .object({
@@ -127,11 +125,6 @@ export const opsRegisterBlueprintInputSchema = z
         .string()
         .min(1)
         .describe('Verbatim component-code body to persist. Stored as-is — no LLM call, no validator pass. Operator owns correctness; the handler computes the canonical sha256 codeHash and routes the bytes through the same persistence seams as `*_generate_*`.'),
-    generator: z
-        .string()
-        .min(1)
-        .optional()
-        .describe('Optional generator slug to stamp on the persisted Blueprint.generator field — purely an audit/provenance hint for downstream `*_list_blueprints` consumers. Defaults to the registry default slug.'),
     persona: z
         .string()
         .optional()
@@ -166,10 +159,7 @@ export const opsRegisterBlueprintOutputSchema = z
         .string()
         .min(1)
         .describe('Content hash of the persisted code body (full sha256 hex).'),
-    generator: z
-        .string()
-        .min(1)
-        .describe('Resolved generator slug stamped on the Blueprint.generator field — either the supplied input or the registry default.'),
+    source: userBlueprintSourceSchema.describe('Provenance stamped on the persisted `Blueprint.source` — always `{kind: "user"}` on this path: operator-supplied bytes, no LLM dispatch, no engine claim to record.'),
 })
     .strict();
 /**
@@ -201,7 +191,7 @@ export const opsListBlueprintsInputSchema = z
         .string()
         .min(1)
         .optional()
-        .describe('Filter to blueprints produced by a specific generator slug.'),
+        .describe('Filter to engine-generated blueprints (`source.kind === "llm"`) whose `source.generator` equals this slug. `user`-sourced rows never match (they carry no engine provenance).'),
     persona: z
         .string()
         .optional()
@@ -220,7 +210,7 @@ export const opsListBlueprintsOutputSchema = z
 /**
  * `ggui_ops_update_blueprint` input. Only mutable fields are present
  * here — `contractHash`, `appId`, `codeS3Url`, `codeHash`,
- * `generator`, `createdAt`, `createdBy` are immutable invariants
+ * `source`, `createdAt`, `createdBy` are immutable invariants
  * and the schema does NOT accept them. Operators who want to
  * "replace" a row delete + re-generate.
  */

package/dist/screen-blueprints/define.d.ts

@@ -2,8 +2,8 @@
  * `defineScreenBlueprint()` — authoring helper.
  *
  * Pass-through identity function. Exists purely to give IDE autocomplete
- * and type-checking on blueprint manifest files in
- * `cloud/amplify/data/screen-blueprints/*.ts`.
+ * and type-checking on a deployment's blueprint manifest files (the
+ * hand-authored screen-blueprint catalog).
  *
  * The helper is narrow by design — it preserves the literal type of the
  * blueprint so consumers can do precise inference (e.g. a future typed

package/dist/screen-blueprints/match.d.ts

@@ -1,21 +1,26 @@
 /**
  * Blueprint matcher — pure algorithm.
  *
- * Given a list of candidate `McpScreenBlueprint` rows (retrieved from DDB
- * via `byPrimaryDataTool` GSI) and the agent's `sourceTools`, return the
- * best matching blueprint.
+ * Given a list of candidate `McpScreenBlueprint` rows (retrieved by the
+ * hosting deployment via an indexed primary-data-tool query) and the
+ * agent's `sourceTools`, return the best matching blueprint.
  *
- * I/O-free. The DDB query layer lives in `core/src/blueprint-matcher.ts`;
- * that module's only job is fetching candidates and calling this function.
+ * I/O-free. The storage query layer lives in the hosting deployment;
+ * its only job is fetching candidates and calling this function.
  */
-import type { ScreenBlueprintSource } from "./types.js";
+import type { BlueprintSource } from "../types/blueprint-source.js";
 /** Subset of `McpScreenBlueprintRow` the matcher needs. Keeps tests isolated. */
 export interface MatchableBlueprint {
     blueprintId: string;
     serverId: string;
     dataTools: string[];
     status: "active" | "stale" | "retired";
-    source?: ScreenBlueprintSource;
+    /**
+     * Provenance ({@link BlueprintSource}). Required — rows reach the
+     * matcher through a validating narrower at the storage boundary, so
+     * an unlabeled candidate is dropped there, never defaulted here.
+     */
+    source: BlueprintSource;
     /** Engagement / selection rate populated by the ranker. Undefined = 0. */
     score?: number;
 }

package/dist/screen-blueprints/match.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../src/screen-blueprints/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAoBD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,kBAAkB,EACzD,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,CAAC,GAAG,IAAI,CAmBV"}
+{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../src/screen-blueprints/match.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,eAAe,EAAuB,MAAM,8BAA8B,CAAC;AAEzF,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IACvC;;;;OAIG;IACH,MAAM,EAAE,eAAe,CAAC;IACxB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsBD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,kBAAkB,EACzD,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,CAAC,GAAG,IAAI,CAmBV"}

package/dist/screen-blueprints/match.js

@@ -1,12 +1,14 @@
 /**
- * Source weights — curated designs outrank generated ones when everything
- * else ties. Matches the spec: "curated generally wins when everything else
- * ties — because a human made a design call."
+ * Source weights — hand-authored designs outrank generated ones when
+ * everything else ties. Matches the spec: "curated generally wins when
+ * everything else ties — because a human made a design call." `user`
+ * (developer-registered) is the same trust class: a human made the
+ * design call there too.
  */
 const SOURCE_WEIGHT = {
     curated: 3,
+    user: 3,
     llm: 2,
-    heuristic: 1,
 };
 /**
  * Select the best-matching blueprint from `candidates` given the agent's
@@ -31,7 +33,7 @@ export function matchBlueprint(candidates, sourceTools) {
         if (!isSubset(bp.dataTools, available))
             continue;
         const overlap = bp.dataTools.length;
-        const weight = SOURCE_WEIGHT[bp.source ?? "curated"];
+        const weight = SOURCE_WEIGHT[bp.source.kind];
         const score = bp.score ?? 1;
         scored.push({ blueprint: bp, overlap, rankScore: overlap * weight * score });
     }

package/dist/screen-blueprints/types.d.ts

@@ -8,24 +8,20 @@
  *   - the intent, interaction mechanic, and a free-form layout hint
  *
  * Blueprints compile deterministically into {@link DataContract}. They are the
- * authoring surface of the Screen Designer pipeline — human-curated, heuristic,
- * or LLM-produced. All three producers emit the same shape.
+ * authoring surface of the Screen Designer pipeline — every producer emits the
+ * same shape and stamps its provenance as a {@link BlueprintSource}.
  */
 import type { JsonSchema } from "../types/data-contract.js";
+import type { BlueprintSource } from "../types/blueprint-source.js";
 /**
  * UI interaction mechanic hint. Tiny enum — generation uses it to select
- * primitives (draggable cards vs swipe stack vs live-polling hook).
- * Layout details live in {@link ScreenBlueprint.layoutHint} (free text).
+ * primitives (live-polling hook vs static form). Layout details live in
+ * {@link ScreenBlueprint.layoutHint} (free text). The `drag` / `swipe`
+ * members were deleted in draft-2026-06-12 — no authored blueprint ever
+ * used them (the generator's gesture classification infers drag/swipe
+ * from the prompt instead); they re-enter when a real blueprint does.
  */
-export type ScreenMechanic = "static" | "drag" | "swipe" | "live" | "form";
-/**
- * Provenance — who authored this blueprint. Same shape, different producers.
- *
- * - `curated`: hand-written TS in `cloud/amplify/data/screen-blueprints/*.ts`
- * - `heuristic`: rule-based composer ("every `list_*` → default list view")
- * - `llm`: LLM-driven designer for novel compositions
- */
-export type ScreenBlueprintSource = "curated" | "heuristic" | "llm";
+export type ScreenMechanic = "static" | "live" | "form";
 /**
  * Data source for a single prop slot. The tool's outputSchema becomes the
  * prop's schema (optionally unwrapped via `pick`). For `live` mechanic,
@@ -113,7 +109,6 @@ export type ScreenBlueprintAction = ScreenBlueprintDirectAction | ScreenBlueprin
  *   server: "_composed",
  *   displayName: "Plan My Week",
  *   intent: "Drag tasks onto a weekly calendar to schedule focus blocks",
- *   mechanic: "drag",
  *   data: {
  *     tasks:  { tool: "todoist_list_tasks", pick: "tasks" },
  *     events: { tool: "gcal_list_events",    pick: "events" },
@@ -127,6 +122,7 @@ export type ScreenBlueprintAction = ScreenBlueprintDirectAction | ScreenBlueprin
  *     completeTask: { tool: "todoist_complete_task" },
  *   },
  *   layoutHint: "Left: task cards. Right: 7-day grid. Drag to schedule.",
+ *   source: { kind: "curated" },
  * });
  * ```
  */
@@ -155,10 +151,10 @@ export interface ScreenBlueprint {
     /** Free-form layout guidance passed to the generator as prompt context. */
     layoutHint?: string;
     /**
-     * Provenance. Set automatically by each producer (curated producer = this
-     * file's co-location; heuristic + llm producers set explicitly). Included
-     * here for the compiler's downstream use.
+     * Provenance — who authored this blueprint ({@link BlueprintSource}).
+     * Required: every producer stamps its own arm at mint time, and the
+     * match ranker weighs it. Unlabeled blueprints are not a real state.
      */
-    source?: ScreenBlueprintSource;
+    source: BlueprintSource;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/screen-blueprints/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/screen-blueprints/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3E;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,KAAK,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IAChD,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,OAAO,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,6BAA6B;IAC5C,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B,2BAA2B,GAC3B,iCAAiC,GACjC,6BAA6B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAChD,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAChD,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/screen-blueprints/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAClD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IAChD,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,OAAO,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,6BAA6B;IAC5C,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAC7B,2BAA2B,GAC3B,iCAAiC,GACjC,6BAA6B,CAAC;AAElC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAChD,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAChD,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,EAAE,eAAe,CAAC;CACzB"}

package/dist/transport/websocket.d.ts

@@ -22,14 +22,14 @@
  */
 import type { ActionEnvelope } from '../types/events';
 import type { JsonObject } from '../types/data-contract';
-import type { SubscribePayload, ClosePayload, AckPayload, ErrorPayload, RenderPayload, StreamEnvelope, StreamPayload, ProgressPayload, AgentMsgPayload, PropsUpdatePayload, UrlPayload, SystemPayload, InternalProgressPayload, ChannelSubscribePayload, ChannelUnsubscribePayload, ChannelPayloadFrame, ChannelErrorPayload, DrainAckPayload } from '../types/live-channel';
+import type { SubscribePayload, AckPayload, ErrorPayload, RenderPayload, StreamEnvelope, PropsUpdatePayload, SystemPayload, ChannelSubscribePayload, ChannelUnsubscribePayload, ChannelPayloadFrame, ChannelErrorPayload, DrainAckPayload } from '../types/live-channel';
 import type { HostContextObservedPayload } from '../types/host-context';
-import type { RenderEvent } from '../types/render-event';
+import type { GguiSessionEvent } from '../types/ggui-session-event';
 /**
  * WebSocket message types for client-server communication.
  * Each type maps to a specific payload shape in the {@link WebSocketMessage} discriminated union.
  */
-export type WebSocketMessageType = 'action' | 'subscribe' | 'close' | 'feedback' | 'ping' | 'pong' | 'ack' | 'error' | 'render' | 'data' | 'stream' | 'progress' | 'agent-msg' | 'props_update' | 'url' | 'system' | 'internal:progress' | 'channel_subscribe' | 'channel_unsubscribe' | 'channel_payload' | 'channel_error' | 'drain_ack' | 'host_context_observed' | 'render_event';
+export type WebSocketMessageType = 'action' | 'subscribe' | 'ping' | 'pong' | 'ack' | 'error' | 'render' | 'data' | 'props_update' | 'system' | 'channel_subscribe' | 'channel_unsubscribe' | 'channel_payload' | 'channel_error' | 'drain_ack' | 'host_context_observed' | 'render_event';
 /** Fields shared by all WebSocket message variants. */
 interface WsMessageBase {
     requestId?: string;
@@ -52,7 +52,7 @@ interface WsMessageBase {
  *       msg.payload.details; // JsonValue | undefined
  *       break;
  *     case 'render':
- *       msg.payload.render; // RenderPayload — auto-narrowed
+ *       msg.payload.session; // RenderPayload — auto-narrowed
  *       break;
  *     case 'data':
  *       msg.payload.payload; // StreamEnvelope.payload
@@ -67,12 +67,6 @@ export type WebSocketMessage = (WsMessageBase & {
 }) | (WsMessageBase & {
     type: 'subscribe';
     payload: SubscribePayload;
-}) | (WsMessageBase & {
-    type: 'close';
-    payload: ClosePayload;
-}) | (WsMessageBase & {
-    type: 'feedback';
-    payload: JsonObject;
 }) | (WsMessageBase & {
     type: 'ping';
     payload: JsonObject;
@@ -91,27 +85,12 @@ export type WebSocketMessage = (WsMessageBase & {
 }) | (WsMessageBase & {
     type: 'data';
     payload: StreamEnvelope;
-}) | (WsMessageBase & {
-    type: 'stream';
-    payload: StreamPayload;
-}) | (WsMessageBase & {
-    type: 'progress';
-    payload: ProgressPayload;
-}) | (WsMessageBase & {
-    type: 'agent-msg';
-    payload: AgentMsgPayload;
 }) | (WsMessageBase & {
     type: 'props_update';
     payload: PropsUpdatePayload;
-}) | (WsMessageBase & {
-    type: 'url';
-    payload: UrlPayload;
 }) | (WsMessageBase & {
     type: 'system';
     payload: SystemPayload;
-}) | (WsMessageBase & {
-    type: 'internal:progress';
-    payload: InternalProgressPayload;
 }) | (WsMessageBase & {
     type: 'channel_subscribe';
     payload: ChannelSubscribePayload;
@@ -132,7 +111,7 @@ export type WebSocketMessage = (WsMessageBase & {
     payload: HostContextObservedPayload;
 }) | (WsMessageBase & {
     type: 'render_event';
-    payload: RenderEvent;
+    payload: GguiSessionEvent;
 });
 /**
  * WebSocket connection status. Client-side transport enum describing

package/dist/transport/websocket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/transport/websocket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,aAAa,EACb,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,WAAW,GACX,OAAO,GACP,UAAU,GACV,MAAM,GACN,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,UAAU,GACV,WAAW,GACX,cAAc,GACd,KAAK,GACL,QAAQ,GACR,mBAAmB,GAEnB,mBAAmB,GACnB,qBAAqB,GACrB,iBAAiB,GACjB,eAAe,GAEf,WAAW,GAEX,uBAAuB,GAEvB,cAAc,CAAC;AAEnB,uDAAuD;AACvD,UAAU,aAAa;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,gBAAgB,GACxB,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,GAC7D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC,GAClE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GAC1D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GAC3D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACvD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACvD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACtD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GAC1D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,GAC5D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,GAC3D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,GAC5D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,GAChE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,GACjE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC,GACvE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACtD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,GAC5D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,CAAC,GAEjF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,CAAC,GACjF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,CAAC,GACrF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC,GAC3E,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC,GAEzE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,GAKjE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,OAAO,EAAE,0BAA0B,CAAA;CAAE,CAAC,GAQxF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAErE;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,CAAC"}
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/transport/websocket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,WAAW,GACX,MAAM,GACN,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,MAAM,GACN,cAAc,GACd,QAAQ,GAER,mBAAmB,GACnB,qBAAqB,GACrB,iBAAiB,GACjB,eAAe,GAEf,WAAW,GAEX,uBAAuB,GAEvB,cAAc,CAAC;AAEnB,uDAAuD;AACvD,UAAU,aAAa;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,gBAAgB,GACxB,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,GAC7D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC,GAClE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACvD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACvD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,GACtD,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC,GAC1D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,GAC5D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,GAC3D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,CAAC,GACvE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,GAE5D,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,CAAC,GACjF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAE,CAAC,GACrF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC,GAC3E,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC,GAEzE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,GAKjE,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,OAAO,EAAE,0BAA0B,CAAA;CAAE,CAAC,GAQxF,CAAC,aAAa,GAAG;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,cAAc,CAAC"}

package/dist/types/app-config.d.ts

@@ -10,7 +10,6 @@ export interface AppDisplayConfig {
     themeId: string;
     defaultScreenPrompt?: string;
     designSystemPreset?: string;
-    userAuthMode: string;
     /**
      * Agent invoke endpoint URL.
      *

package/dist/types/app-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/types/app-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;CACvC"}
+{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/types/app-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;OAgBG;IACH,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;CACvC"}

package/dist/types/auth.d.ts

@@ -1,45 +1,7 @@
 import type { JsonObject } from './data-contract';
-/**
- * User authentication modes.
- *
- * - `anonymous`: no auth gate, cookie-based pseudonymous identity.
- * - `cognito`: ggui-managed Cognito identity (OAuth/OIDC handled by platform).
- * - `byo`: builder supplies their own JWT/OIDC issuer; platform validates against JWKS.
- */
-export type UserAuthMode = 'anonymous' | 'cognito' | 'byo';
-/**
- * Scopes requestable from ggui identity
- */
-export type GguiAuthScope = 'email' | 'name' | 'picture';
-/**
- * User auth config for cognito + byo modes.
- * Matches the backend UserAuthConfig schema.
- *
- * BYO has two flavors:
- *   - Render-surface HMAC-JWT shortcut: {@link authUrl} / {@link callbackSecret} /
- *     {@link tokenClaimUserId} (`your-app.example/auth/callback`, iframe UIs).
- *   - Portal BYO OAuth 2.1 flow: the `oauth*` fields below
- *     (`your-app.example/oauth/byo/callback`, native Portal).
- *   The `tokenClaim*` fields are reused across both flavors.
- */
-export interface UserAuthConfig {
-    authUrl?: string;
-    callbackSecret?: string;
-    tokenClaimUserId?: string;
-    tokenClaimEmail?: string;
-    tokenClaimName?: string;
-    oauthAuthorizationUrl?: string;
-    oauthTokenUrl?: string;
-    oauthJwksUrl?: string;
-    oauthIssuer?: string;
-    oauthClientIdPublic?: string;
-    oauthScopes?: string[];
-    oauthRedirectUriAllowlist?: string[];
-    requestedScopes?: GguiAuthScope[];
-}
 /**
  * Authenticated end-user identity.
- * Attached to sessions and included in events consumed by agents.
+ * Attached to renders and included in events consumed by agents.
  *
  * Extends {@link JsonObject} for direct JSON serialization over WebSocket.
  */
@@ -51,11 +13,4 @@ export interface EndUserIdentity extends JsonObject {
     provider: 'ggui' | 'custom';
     authenticatedAt: string;
 }
-/**
- * User auth settings for an app (convenience wrapper)
- */
-export interface UserAuthSettings {
-    mode: UserAuthMode;
-    config?: UserAuthConfig;
-}
 //# sourceMappingURL=auth.d.ts.map

package/dist/types/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/types/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,KAAK,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAE7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;IAIrC,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/types/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;CACzB"}

package/dist/types/blueprint-source.d.ts

@@ -0,0 +1,123 @@
+/**
+ * `BlueprintSource` — the single provenance vocabulary for blueprints.
+ *
+ * One discriminated union, replacing the flat provenance strings that
+ * previously lived on three separate seams (catalog entries, screen
+ * blueprints, and the runtime cache registry). The discriminant is
+ * `kind`; the `llm` arm carries the engine provenance that the flat
+ * strings could never express.
+ *
+ * Arms:
+ *
+ *   - `llm` — engine-generated. `generator` is the slug of the
+ *     {@link UiGenerator} that produced the component code; `model` is
+ *     the LLM model id the engine called. Both REQUIRED: every
+ *     generation mint site has them in scope, and an engine-generated
+ *     artifact without them is not a real state.
+ *   - `user` — developer-registered / hand-authored. Covers
+ *     manifest-declared UIs, operator-registered blueprints, and
+ *     imported artifacts that carry no engine claim. No engine
+ *     provenance exists for these, so the arm carries none.
+ *   - `curated` — hand-authored system blueprint shipped with a
+ *     deployment's screen-blueprint catalog (a design call made by the
+ *     catalog author, ranked above generated output by the matcher).
+ *
+ * Dead-arm verdict (2026-06 provenance trace): the legacy flat
+ * vocabularies also declared a `heuristic` arm ("rule-based composer").
+ * A repo-wide mint trace found ZERO sites that ever produced it, so the
+ * arm is deleted rather than carried. There is intentionally NO
+ * legacy/unlabeled arm and NO optional provenance: blueprints are a
+ * cache (invalidation = regeneration, never data loss), so unlabeled
+ * rows are dropped at the trust boundary, never coerced.
+ */
+/** Closed list of `BlueprintSource` discriminants. */
+export declare const BLUEPRINT_SOURCE_KINDS: readonly ["llm", "user", "curated"];
+/** Discriminant of {@link BlueprintSource}. */
+export type BlueprintSourceKind = (typeof BLUEPRINT_SOURCE_KINDS)[number];
+/** Engine-generated — full engine provenance is mandatory. */
+export interface LlmBlueprintSource {
+    readonly kind: "llm";
+    /**
+     * Slug of the generator that produced the component code (e.g.
+     * `'ui-gen-default-haiku-4-5'`). The server's `GeneratorRegistry` is
+     * the authority for which slugs exist on a given deployment.
+     */
+    readonly generator: string;
+    /** Model id of the LLM call the generator made. */
+    readonly model: string;
+}
+/** Developer-registered / hand-authored — no engine provenance exists. */
+export interface UserBlueprintSource {
+    readonly kind: "user";
+}
+/** Hand-authored system blueprint shipped with a deployment's catalog. */
+export interface CuratedBlueprintSource {
+    readonly kind: "curated";
+}
+export type BlueprintSource = LlmBlueprintSource | UserBlueprintSource | CuratedBlueprintSource;
+/**
+ * Validating narrower for trust boundaries (DB row → union, JSON
+ * artifact → union). Returns a CANONICAL rebuild of the union value —
+ * stray keys on the input do not ride through — or `null` when the
+ * value is not a well-formed `BlueprintSource`. Callers at load seams
+ * drop-with-log or reject loudly on `null`; coercing a malformed value
+ * into an arm is banned.
+ */
+export declare function parseBlueprintSource(value: unknown): BlueprintSource | null;
+/** Type-guard form of {@link parseBlueprintSource}. */
+export declare function isBlueprintSource(value: unknown): value is BlueprintSource;
+/**
+ * Flat-encoded provenance: the SINGLE key vocabulary every store uses
+ * when it persists a {@link BlueprintSource} as scalar columns /
+ * attributes (vector-store metadata, key-value rows, …). The union is
+ * the code shape; storage stays flat — and every store flattens and
+ * rebuilds through THIS codec, never through hand-rolled key names.
+ *
+ * Key vocabulary: `sourceKind` / `sourceGenerator` / `sourceModel`.
+ * The `source`-prefixed triple is deliberate: flat rows mix provenance
+ * with arbitrary other attributes, and bare `generator` / `model` keys
+ * collide with row-level fields that legitimately carry their own
+ * generator/model semantics (e.g. a generation-result row). The prefix
+ * keeps the provenance keys self-describing, collision-free, and
+ * greppable, and mirrors the union access path (`source.kind` →
+ * `sourceKind`). No storage engine ergonomics argue against it —
+ * attribute names are free-form in every store we target.
+ */
+export declare const FLAT_BLUEPRINT_SOURCE_KEYS: {
+    readonly kind: "sourceKind";
+    readonly generator: "sourceGenerator";
+    readonly model: "sourceModel";
+};
+/**
+ * Flat (storage) shape of a {@link BlueprintSource}. `sourceGenerator`
+ * / `sourceModel` are present exactly when `sourceKind === 'llm'` —
+ * {@link blueprintSourceToFlat} never writes them for other arms, and
+ * {@link flatToBlueprintSource} sheds stray values on non-llm rows.
+ */
+export interface FlatBlueprintSource {
+    readonly sourceKind: BlueprintSourceKind;
+    readonly sourceGenerator?: string;
+    readonly sourceModel?: string;
+}
+/** Flatten a canonical {@link BlueprintSource} into storage keys. */
+export declare function blueprintSourceToFlat(source: BlueprintSource): FlatBlueprintSource;
+/**
+ * Validating narrower at the flat-row trust boundary: reassemble the
+ * `sourceKind` / `sourceGenerator` / `sourceModel` scalars of an
+ * UNTRUSTED row into a canonical {@link BlueprintSource}, or `null`
+ * when the row carries no valid provenance (rows written under a
+ * retired vocabulary, foreign rows, malformed writes). Callers drop
+ * the row — coercing into an arm is banned. Delegates the union
+ * rebuild to {@link parseBlueprintSource}, so stray keys never ride
+ * through and a non-llm row carrying vestigial generator/model
+ * scalars rebuilds to its bare arm.
+ *
+ * Accepts any object-shaped row (metadata records, unmarshalled rows);
+ * only the three codec keys are read.
+ */
+export declare function flatToBlueprintSource(row: {
+    readonly sourceKind?: unknown;
+    readonly sourceGenerator?: unknown;
+    readonly sourceModel?: unknown;
+}): BlueprintSource | null;
+//# sourceMappingURL=blueprint-source.d.ts.map

package/dist/types/blueprint-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-source.d.ts","sourceRoot":"","sources":["../../src/types/blueprint-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,sDAAsD;AACtD,eAAO,MAAM,sBAAsB,qCAAsC,CAAC;AAE1E,+CAA+C;AAC/C,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,mBAAmB,GACnB,sBAAsB,CAAC;AAE3B;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,CAoB3E;AAED,uDAAuD;AACvD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,0BAA0B;;;;CAI7B,CAAC;AAEX;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,qEAAqE;AACrE,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,eAAe,GACtB,mBAAmB,CAQrB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC,GAAG,eAAe,GAAG,IAAI,CAMzB"}