@ggui-ai/protocol 0.2.0-alpha.4 → 0.4.0-rc.0

package/dist/types/data-contract.d.ts

@@ -85,8 +85,8 @@ export interface PropEntry {
      * Data-lineage metadata. When set, the agent must have this tool available
      * (or `required: false` on this prop) for the contract to be satisfiable.
      * When absent, the agent populates the prop by its own means (memory,
-     * reasoning, search, etc.). Blueprint matcher aggregates these for GSI
-     * queries on `byPrimaryDataTool`.
+     * reasoning, search, etc.). The blueprint matcher aggregates these
+     * for indexed primary-data-tool candidate lookups.
      */
     sourceTool?: string;
 }
@@ -174,26 +174,11 @@ export interface StreamChannelEntry {
      * data receipt, `@ggui-ai/react-native` data receipt) all validate
      * deliveries against it.
      *
-     * **Author invariant when paired with {@link StreamChannelEntry.tool}:**
-     * when a refresh tool is declared, the values the tool returns MUST
-     * be a superset of the values `schema` accepts — i.e., every
-     * possible tool return passes validation. Drift in the opposite
-     * direction (tool returns shapes the schema rejects) produces
-     * `_ggui:contract-error` envelopes with `code: 'SCHEMA_VIOLATION'`
-     * rather than silent data, but channel subscribers see fewer
-     * refreshes than expected, which looks like a broken tool to
-     * operators.
-     *
-     * **F4 schema compat checker.** The compat relation — every value
-     * the tool returns MUST be accepted by this channel schema — is
-     * encoded as `isSchemaSubset(channelSchema, toolReturnSchema)` and
-     * is checked at push-time (before the stack item commits) and at
-     * blueprint-registration time (when the blueprint pre-declares
-     * tool refs). Mismatches surface as `SCHEMA_MISMATCH_ERROR` on
-     * the reserved `_ggui:contract-error` channel rather than showing
-     * up as downstream `SCHEMA_VIOLATION` rejections on individual
-     * refreshes. Default policy is `'reject'`; see the docstring on
-     * {@link ActionEntry.schema} for the full policy flag contract.
+     * When the channel declares a `source.tool` feed, the protocol-level
+     * `CTR_SCHEMA_INCOMPAT` linter additionally checks that the feed
+     * tool's declared return schema is a subset of this schema — see
+     * the docstring on {@link ActionEntry.schema} for the schema-subset
+     * algorithm and the `SCHEMA_MISMATCH_ERROR` failure surface.
      */
     schema: JsonSchema;
     /** Example payload (used for documentation and smoke testing). Typed as {@link JsonValue}. */
@@ -223,44 +208,6 @@ export interface StreamChannelEntry {
      * work lands.
      */
     complete?: boolean;
-    /**
-     * Optional MCP tool name this channel is refreshed from when a
-     * wired action fires. Consumed by the server-side wiredActionRouter
-     * (see `@ggui-ai/mcp-server` session-channel) as a declarative hint:
-     * after a wired action on this stack item succeeds, the router
-     * invokes the named tool and emits its return value on THIS channel.
-     *
-     * Name-scoping invariant:
-     *
-     *   A bare tool name (`"tasks_list"`) MUST be unique across every
-     *   mount registered on the server. `composeHandlersWithMounts` in
-     *   `@ggui-ai/mcp-server` rejects collisions at boot and names both
-     *   owners in the error — an operator with two mounts both exposing
-     *   `list` is forced to rename one. No namespace syntax is accepted
-     *   here: MCP protocol requires unique tool names on `tools/list` /
-     *   `tools/call` regardless, so two mounts can't both expose the
-     *   same name at the wire level. Authors adding a second mount to
-     *   an existing `ggui.json` SHOULD re-check this invariant; a newly-
-     *   registered duplicate will fail server boot with a message
-     *   naming both mounts.
-     *
-     * Refresh semantics (locked):
-     *
-     *   - The refresh tool SHOULD be idempotent-read-only. The router
-     *     calls it after every wired action targeting this channel.
-     *   - On failure, the router emits a `_ggui:contract-error` envelope
-     *     (see {@link ContractErrorPayload}) and the channel's previous
-     *     state is preserved — the router does NOT fall back to the
-     *     wired action's own return value.
-     *   - Authors who want write-then-read semantics SHOULD chain via a
-     *     single action tool that returns the new state directly.
-     *
-     * Absent ⇒ no refresh fires; channel is written to by the agent (or
-     * by some other server-emitted source). Declarative hint only — it
-     * does NOT alter payload shape validation, which remains
-     * `schema`-driven.
-     */
-    tool?: string;
     /**
      * Optional source declaration — when present, the channel is fed by
      * a tool called periodically (poll) or subscribed-to (push) by the
@@ -284,7 +231,7 @@ export interface StreamChannelEntry {
 }
 /**
  * Stream contract — describes the typed channels the component consumes
- * on the live session plane (the live channel in the three-channel doctrine).
+ * on the live render plane (the live channel in the three-channel doctrine).
  *
  * Shape: flat map keyed by channel name → entry.
  * `DataContract.streamSpec[channelName]` IS the entry.
@@ -319,7 +266,7 @@ export interface ActionEntry {
      * advisory — the agent owns the actual tool call on its next turn
      * and is responsible for shaping the payload as the tool expects.
      * For tools registered on THIS server, the F4 schema-compat checker
-     * surfaces a `SCHEMA_MISMATCH_ERROR` at push-time / blueprint-
+     * surfaces a `SCHEMA_MISMATCH_ERROR` at render-time / blueprint-
      * registration-time so authors get fail-loud feedback.
      *
      * The canonical algorithm lives in
@@ -363,7 +310,7 @@ export interface ActionEntry {
      * agent without rejection. If the named tool isn't in the agent's
      * toolbox at dispatch time, the agent surfaces the gap on its next
      * turn (typically as `TOOL_UNAVAILABLE`); the protocol does NOT
-     * fail at push.
+     * fail at render.
      */
     nextStep?: string;
 }
@@ -375,87 +322,43 @@ export interface ActionEntry {
  */
 export type ActionSpec = Record<string, ActionEntry>;
 /**
- * Input passed to a refresh tool when the wiredActionRouter fires it
- * after a wired action succeeds. See {@link StreamChannelEntry.tool}
- * for the broader refresh-semantics lock.
- *
- * **v1 constraint: always empty.** Refresh tools MUST be parameterless
- * (filter-less, context-less). Authors who need filtered / contextual
- * reads should chain the filter into a single action tool that returns
- * the filtered state directly — the refresh path is deliberately a
- * read-only re-fetch of the channel's canonical state.
- *
- * Typed as `Record<string, never>` (empty object with no properties)
- * rather than an empty interface so the type stays structurally
- * assignable to `Record<string, unknown>` call sites (e.g.,
- * `WiredActionRouter.invoke`) without any cast.
- *
- * This type is named separately from `{}` so that:
- *
- *   1. Call sites are grep-able — producers and consumers that need to
- *      reason about the refresh-input contract can find each other.
- *   2. v2 evolution (e.g., passing `{renderId}` / `{actor}` context on
- *      refresh) has a single point to widen; today's `{}` literal
- *      wouldn't trip any compile error if the wire expectation
- *      changed.
- *   3. Implementations of {@link WiredActionRouter} that want to treat
- *      refresh inputs specially (e.g., route through a different
- *      invoker) can pattern-match on the type.
- */
-export type RefreshInput = Record<string, never>;
-/**
- * Frozen singleton instance of {@link RefreshInput}. Pass this to
- * refresh-tool invocations instead of a fresh `{}` literal so that:
- *
- *   - Every call site emits exactly the same reference (cheap identity
- *     checks in mocks / spies / test harnesses).
- *   - `Object.freeze` catches accidental mutation that would otherwise
- *     surface as cross-invocation interference in long-running servers.
- */
-export declare const EMPTY_REFRESH_INPUT: RefreshInput;
-/**
- * Per-tool metadata in an {@link AgentCapabilitiesSpec}.
+ * Per-tool metadata in an {@link AgentCapabilitiesSpec}, keyed by the
+ * bare MCP tool name (the catalog key) in {@link AgentCapabilitiesSpec.tools}.
  *
  * Documents an MCP tool the contract references — by `actionSpec[*].nextStep`,
  * by `streamSpec[*].source.tool`, or simply for the LLM-authoring catalog.
- * The `example` field's `input`/`output` keys align with MCP's tool envelope
- * naming so the contract reads identically to what the agent's MCP client sees.
+ *
+ * Shape: `serverInfo` (OPTIONAL) carries the owning MCP server identity;
+ * `(serverInfo.name, toolName)` is the canonical cross-framework identity and
+ * enters the contract hash. In Tier 2 the LLM derives `serverInfo.name` from
+ * the `mcp__<server>__` tool prefix (omit when there is no prefix — never
+ * invent); in Tier 1 the agent-server catalog fills it from `initialize`.
+ * `serverInfo.version` is OPTIONAL metadata, NOT identity (never enters the
+ * hash). `toolInfo` echoes the MCP `tools/list` descriptor (minus `name`, which is the
+ * catalog key). The ggui authoring layer adds `usage` + `example` on top
+ * of the MCP-native descriptor. The `example` field's `input`/`output`
+ * keys align with MCP's tool envelope naming so the contract reads
+ * identically to what the agent's MCP client sees.
  */
 export interface AgentToolEntry {
-    /** Human-readable description of this tool. */
-    description?: string;
-    /**
-     * When / why / by-whom this tool is called. Free-form LLM-targeted
-     * prose — the "context-of-use" hint that bare `description` lacks.
-     * Read by the UI generator and the agent's reasoning loop alike.
-     */
+    /** Owning MCP server identity. OPTIONAL: populated by the agent-server
+     *  catalog-builder (Tier 1) or derived by the LLM from the mcp__<server>__
+     *  prefix (Tier 2). (serverInfo.name, toolName) is the canonical identity;
+     *  `version` is OPTIONAL metadata (catalog fills it; prefix-authoring omits it)
+     *  and is stripped from the canonical hash. */
+    serverInfo?: {
+        name: string;
+        version?: string;
+    };
+    /** MCP tool descriptor, echoed from `tools/list` (minus name = the catalog key). */
+    toolInfo: {
+        /** JSON Schema for the tool input. REQUIRED — every MCP tool has one. */
+        inputSchema: JsonSchema;
+        description?: string;
+        outputSchema?: JsonSchema;
+    };
+    /** ggui authoring layer (not MCP): when/why/by-whom the tool is called. */
     usage?: string;
-    /**
-     * JSON Schema for the tool's input. MCP-aligned name. Optional —
-     * may be hydrated from MCP registry at generation time for tools the
-     * server can introspect; opaque for tools on other MCP servers.
-     */
-    inputSchema?: JsonSchema;
-    /**
-     * JSON Schema for the tool's output. MCP-aligned name. Optional —
-     * same hydration story as `inputSchema`.
-     */
-    outputSchema?: JsonSchema;
-    /**
-     * Whether the contract is unsatisfiable if the agent's MCP toolbox
-     * lacks this tool. Advisory in v1: enforcement happens at dispatch
-     * time (the agent gets `TOOL_UNAVAILABLE` if the named tool isn't
-     * registered), not at push time. Future: agent reports its toolbox
-     * on handshake; server can validate `required: true` proactively.
-     *
-     * Default: `false`. UI/agent code MUST guard against absence (e.g.,
-     * conditional render, fallback reasoning).
-     */
-    required?: boolean;
-    /**
-     * Example input/output pair for documentation and boilerplate
-     * generation. Keys `input` / `output` are MCP-aligned.
-     */
     example?: {
         input: JsonValue;
         output: JsonValue;
@@ -492,7 +395,7 @@ export interface AgentCapabilitiesSpec {
 export interface GadgetExportBase {
     /**
      * Human-readable description of what this export does. REQUIRED on
-     * the registry side; optional on the contract side (push-time merge
+     * the registry side; optional on the contract side (render-time merge
      * inherits the registry copy when absent).
      */
     description?: string;
@@ -520,12 +423,6 @@ export interface GadgetExportBase {
      * carries it.
      */
     permission?: string;
-    /**
-     * Whether the UI MUST mount this export for the contract to be
-     * satisfiable. Default `false`. Advisory in v1 — enforced at
-     * boilerplate-generation time, not at runtime.
-     */
-    required?: boolean;
 }
 /**
  * A hook export — a `use`-prefixed React hook the generated component
@@ -590,13 +487,13 @@ export type GadgetExport = GadgetHookExport | GadgetComponentExport;
  * `requires`, `typesUrl`, …) or per-export registry metadata
  * (`permission`, `example`, `gotchas`). All of that belongs to the
  * registered {@link GadgetDescriptor} the ggui server resolves from
- * the app's `App.gadgets` catalog at push time — `version` is the
+ * the app's `App.gadgets` catalog at render time — `version` is the
  * operator's deployment pin, not the agent's to author.
  */
 export interface GadgetExportUse {
     /**
      * Intent-specific override of the registered export's description.
-     * When omitted, push-time resolution inherits the registered
+     * When omitted, render-time resolution inherits the registered
      * description verbatim; when present, the agent's prose wins.
      */
     description?: string;
@@ -623,7 +520,7 @@ export type GadgetPackageUse = Record<string, GadgetExportUse>;
  * `listContractGadgets` from the package-keyed
  * {@link ClientCapabilitiesSpec.gadgets}.
  *
- * NOT a wire type: an internal convenience so the push gates, the
+ * NOT a wire type: an internal convenience so the render gates, the
  * descriptor resolver, and code-gen can iterate `(package, name)`
  * pairs uniformly instead of re-walking the nested wire map.
  */
@@ -645,7 +542,7 @@ export interface GadgetUse {
  * `version`) and a single bundle. Transport metadata (`bundleUrl`,
  * `bundleSri`, `bundleHost`, `styleUrl`, `connect`, `requires`,
  * `typesUrl`, `typesSri`) is per-PACKAGE; teaching text + `permission`
- * + the `required` flag are per-EXPORT (on each `exports[*]`).
+ * are per-EXPORT (on each `exports[*]`).
  *
  * One shape used by:
  *
@@ -655,10 +552,10 @@ export interface GadgetUse {
  *     teaching text + an enum-tight `permission` per export;
  *     `registeredGadgetDescriptorSchema` additionally requires
  *     `typesUrl` for non-stdlib packages.
- *   - **Resolved sidecar side** — at push time
+ *   - **Resolved sidecar side** — at render time
  *     `filterDescriptorsToContract` snapshots the subset of
  *     `App.gadgets` the contract references onto
- *     `SessionStackEntry.gadgetDescriptors`. Wire-side authors NEVER
+ *     `ComponentGguiSession.gadgetDescriptors`. Wire-side authors NEVER
  *     see this shape; they author the package-keyed
  *     {@link ClientCapabilitiesSpec} map of {@link GadgetPackageUse}.
  *
@@ -673,14 +570,14 @@ export interface GadgetDescriptor {
      * least one (enforced by the schema). Each {@link GadgetExport}
      * carries its own identifier (`hook` or `component`) + teaching text
      * (`description` / `usage` / `example` / `gotchas`) + per-export
-     * `permission` / `required`.
+     * `permission`.
      */
     exports: GadgetExport[];
     /**
      * Exact semver pin (e.g., `'0.0.1'`, `'1.2.3-beta.1'`). REQUIRED.
      * Registry-side ONLY — the wire carries no version; the operator's
      * `App.gadgets` catalog is the sole version pin, resolved
-     * server-side at push time. `(package, version)` is the registry's
+     * server-side at render time. `(package, version)` is the registry's
      * frozen identity tuple. Bumping requires a new `bundleSri` /
      * `typesSri` (registry-immutability invariant enforced by
      * `lintGadgetCatalog`).
@@ -720,7 +617,7 @@ export interface GadgetDescriptor {
     bundleUrl?: string;
     /**
      * Registry hostname (no scheme, no path) the server uses to resolve
-     * `bundleUrl` + `styleUrl` at push time:
+     * `bundleUrl` + `styleUrl` at render time:
      *
      *   `https://<bundleHost>/bundles/<scope>/<name>/<version>/bundle.js`
      *   `https://<bundleHost>/bundles/<scope>/<name>/<version>/style.css`
@@ -797,7 +694,7 @@ export interface GadgetDescriptor {
      * `tsup --dts`) over the wrapper source and uploads the emitted
      * `.d.ts` alongside the bundle; the registry stamps the URL here.
      *
-     * The handler parallel-fetches every `typesUrl` at push time
+     * The handler parallel-fetches every `typesUrl` at render time
      * (`fetchGadgetTypes`), verifies the SHA-384 SRI against
      * {@link typesSri}, and loads the `.d.ts` content into the code-gen
      * sandbox's virtual file system at
@@ -841,7 +738,7 @@ export interface GadgetDescriptor {
  * Non-generic — the wire surface carries package-keyed
  * {@link GadgetPackageUse} values. The post-resolution view (full
  * descriptors for hygiene + transport metadata derivation) lives on
- * `SessionStackEntry.gadgetDescriptors` as a sidecar, NOT as an
+ * `ComponentGguiSession.gadgetDescriptors` as a sidecar, NOT as an
  * enrichment overlay on this type.
  */
 export interface ClientCapabilitiesSpec {
@@ -943,12 +840,12 @@ export type ContextSpec = Record<string, ContextEntry>;
  *      - `null` → `null`
  *   3. `undefined` (caller validates / rejects)
  *
- * Push-time validators MUST reject contextSpec entries that resolve
+ * Render-time validators MUST reject contextSpec entries that resolve
  * to `undefined` here (e.g., schema is `oneOf` with no clear primitive
  * type — author MUST provide an explicit `default` for such schemas).
  *
  * Consumed by the boilerplate generator's useState emission and by
- * the push-time validator's default-derivability rule.
+ * the render-time validator's default-derivability rule.
  *
  * @public
  */
@@ -957,7 +854,7 @@ export declare function deriveContextDefault(entry: ContextEntry): JsonValue | u
  * Data contract that bind a generated component to its consumers.
  *
  * Seven parts:
- * - **intent**: WHY this UI exists — concise purpose capturing user goal, data shown, and interaction pattern (NOT a contract field; threaded externally on `ggui_handshake({renderId, intent})`)
+ * - **intent**: WHY this UI exists — concise purpose capturing user goal, data shown, and interaction pattern (NOT a contract field; threaded externally on `ggui_handshake({sessionId, intent})`)
  * - **propsSpec**: WHAT data the UI renders initially (set on render, mutated via ggui_update) — agent → client one-shot
  * - **streamSpec**: WHAT live data the UI accepts — flat map keyed by channel name (agent → client live)
  * - **contextSpec**: WHAT observable client state the LLM sees — flat map keyed by slot name (client → agent live, last-write-wins state)
@@ -1015,9 +912,9 @@ export declare function deriveContextDefault(entry: ContextEntry): JsonValue | u
  *       },
  *       agentCapabilities: {
  *         tools: {
- *           todo_toggle: { description: 'Flip a todo done/undone',
+ *           todo_toggle: { toolInfo: { description: 'Flip a todo done/undone',
  *             inputSchema: { type: 'object', properties: { id: {type:'string'} },
- *               required: ['id'] } },
+ *               required: ['id'] } } },
  *         },
  *       },
  *     }
@@ -1088,109 +985,10 @@ export interface DataContract {
      * Wire-side only. Package-keyed — values are {@link GadgetPackageUse}
      * (per-package export-use maps keyed by export name). The
      * post-resolution descriptor view lives on
-     * `SessionStackEntry.gadgetDescriptors` as a sidecar.
+     * `ComponentGguiSession.gadgetDescriptors` as a sidecar.
      */
     clientCapabilities?: ClientCapabilitiesSpec;
 }
-/**
- * Canonical error codes emitted on the reserved
- * `_ggui:contract-error` channel when a declared
- * `streamSpec[name].source.tool` (continuous feed),
- * `streamSpec[name].tool` (refresh-after-action hint, agent-less
- * deployments only), or a session-level boot failure happens. Emitted
- * as the body of a stream envelope.
- *
- * v1 codes emitted by `@ggui-ai/mcp-server`'s session-channel router:
- *
- * - `TOOL_NOT_FOUND` — declared tool not registered on the wired
- *   action router. Author wiring bug.
- * - `TOOL_THREW` — the tool handler threw (sync or async rejection).
- *   Handler failure captured verbatim in `message`; original stack (if
- *   any) lives on `causedBy`.
- * - `TOOL_TIMEOUT` — invocation exceeded the router's configured
- *   timeout (default 30s). Handler may still complete in the
- *   background; caller must treat as failure either way.
- * - `SCHEMA_VIOLATION` — the tool returned a shape that violates the
- *   declared `streamSpec[name].schema`. Router rejected
- *   BEFORE emitting on the channel, so subscribers do NOT see the
- *   malformed payload.
- *
- * Extensibility — typed as `'TOOL_NOT_FOUND' | 'TOOL_THREW' |
- * 'TOOL_TIMEOUT' | 'SCHEMA_VIOLATION' | 'SCHEMA_MISMATCH_ERROR' |
- * (string & {})` rather than a closed union. Consumers MUST handle
- * unknown codes gracefully — render as raw string, not switch-case
- * without default. Future failure modes that may populate this field
- * include `'SANITIZER_FAILED'` (the `causedBy` sanitizer itself
- * threw), `'MCP_TRANSPORT_ERROR'` (the MCP transport rejected the
- * tool invocation before the handler ran), `'RATE_LIMIT_EXCEEDED'`
- * (the tool was refused by an upstream rate limiter), and
- * `'BOOTSTRAP_FAILED'` (C8 — initial contract bootstrap failed on
- * attach). Adding such codes does NOT bump the protocol version,
- * because the type was extensible from day one.
- *
- * `'SCHEMA_MISMATCH_ERROR'` — F4 schema compat checker. Emitted when
- * `actionSpec[name].schema` and its declared `tool`'s inputSchema
- * disagree, or when a `streamSpec[channel].schema` and its declared
- * `tool`'s return schema disagree. Fires at push-time (before the
- * stack item commits) and at blueprint-registration time. See
- * {@link ActionEntry.schema} and {@link StreamChannelEntry.schema}
- * for the author invariant, and `@ggui-ai/protocol/validation/
- * schema-subset` for the subset algorithm that produces the named
- * failure. Provides a named, actionable signal before a malformed
- * envelope reaches the agentic loop — instead of a silent `TOOL_THREW`
- * at runtime.
- *
- * `'RENDER_NOT_FOUND'` + `'AUTH_REJECTED'` — fire on post-WS-open
- * boot failures where the live channel is already alive (so the envelope-
- * emittable invariant is satisfied). The renderer bundle surfaces
- * them BOTH on the live-channel `_ggui:contract-error` envelope (with
- * `sourceAction.type === 'bootstrap-load'`) AND as a
- * `postMessage({type:'ggui:bootstrap-failed', reason, message})` to
- * the embedding host — the former for in-session observability, the
- * latter for host-level UX response. Pre-WS bootstrap failures
- * (`BUNDLE_FETCH_FAILED`, `CSP_VIOLATION`, `BOOTSTRAP_META_MISSING`)
- * are postMessage-only: they can't reach the live channel because the WS
- * doesn't exist yet, so they remain OUT of `ContractErrorCode`'s
- * named set to preserve the "live-channel-emittable" invariant. The
- * renderer's `BootstrapFailureReason` union (in `@ggui-ai/iframe-runtime`)
- * carries ALL bootstrap codes — `ContractErrorCode` is the strict
- * subset that's observable on the contract-error envelope.
- */
-export type ContractErrorCode = 'TOOL_NOT_FOUND' | 'TOOL_THREW' | 'TOOL_TIMEOUT' | 'SCHEMA_VIOLATION' | 'SCHEMA_MISMATCH_ERROR' | 'RENDER_NOT_FOUND' | 'AUTH_REJECTED'
-/**
- * `'INVALID_ACTION_KIND'` — emitted when the
- * `ggui_runtime_submit_action` handler receives an envelope whose `kind`
- * discriminator OR per-kind payload shape is malformed. Source of
- * truth for the envelope contract is `SubmitActionEnvelope` /
- * `GguiSubmitActionInput` in `@ggui-ai/protocol/integrations/mcp-apps`.
- * Fail-soft at the client: the primary host effect (the `ui/message`
- * / `ui/open-link` / 3-message-bridge call alongside the audit) MUST
- * still succeed; this code surfaces only on the server-side
- * `_ggui:contract-error` channel for operator observability.
- */
- | 'INVALID_ACTION_KIND'
-/**
- * `'PIPE_NOT_FOUND'` — surfaced when `ggui_runtime_submit_action`
- * receives a `kind:"dispatch"` envelope referencing a `renderId`
- * whose pending-events pipe is closed/missing (drained, render
- * closed, or never opened). The handler returns `{ok:false, code:
- * 'PIPE_NOT_FOUND'}` in structuredContent; the iframe-runtime
- * inspects the response (via the host's postMessage relay) and
- * falls through to the `ui/message` chat-shortcut postMessage so
- * the gesture still reaches the agent (via the next chat turn)
- * instead of vanishing silently.
- */
- | 'PIPE_NOT_FOUND'
-/**
- * `'CONTEXT_TOO_LARGE'` — emitted when `ggui_runtime_sync_context`
- * receives a snapshot that exceeds the contextSpec size limits:
- * per-slot value > {@link CONTEXT_SLOT_VALUE_MAX_BYTES} (16 KB),
- * total snapshot > {@link CONTEXT_SNAPSHOT_MAX_BYTES} (64 KB), or
- * slot count > {@link CONTEXT_SNAPSHOT_MAX_SLOTS} (50). Reject
- * instead of truncate so authors notice and route the data through
- * the right surface (propsSpec / streamSpec / a tool call).
- */
- | 'CONTEXT_TOO_LARGE' | (string & {});
 /**
  * Maximum byte size (UTF-8) of a single contextSpec slot's value
  * accepted by `ggui_runtime_sync_context`. Values larger than this
@@ -1210,87 +1008,4 @@ export declare const CONTEXT_SNAPSHOT_MAX_BYTES: number;
  * more slots reject with `CONTEXT_TOO_LARGE`.
  */
 export declare const CONTEXT_SNAPSHOT_MAX_SLOTS = 50;
-/**
- * The body of a stream envelope the server emits on the reserved
- * `_ggui:contract-error` channel when a wired-action or refresh-stream
- * invocation fails. Carries enough shape to surface the failure in
- * operator-facing activity panels AND to correlate back to the
- * originating dispatch.
- *
- * Design notes:
- *
- *   - This is a PLATFORM-EMITTED envelope. Agents MUST NOT author
- *     deliveries on `_ggui:contract-error` — the reserved-channel
- *     validator rejects them.
- *   - The payload is a leaf-level contract: it does NOT wrap a
- *     semantic payload for the author to interpret. Consumers render
- *     it as an error activity row, NOT as a declared channel's data.
- *   - The shape intentionally omits retry / recovery metadata. Retries
- *     are an explicit non-goal of the v1 contract.
- */
-export interface ContractErrorPayload {
-    /** The tool that failed — wired-action tool OR refresh-stream tool. */
-    readonly toolName: string;
-    /** The originating action name when the error came from a wired
-     * action. Absent when the failure occurred on a refresh-stream path
-     * that fired after a successful wired action. */
-    readonly actionName?: string;
-    /** Provenance on the router side — whether this error came from the
-     * wired-action invocation (directly in response to a dispatch) or
-     * from the refresh-stream tool that followed a successful action.
-     *
-     * v1 values emitted by `@ggui-ai/mcp-server`'s session-channel
-     * router:
-     *
-     *   - `'wired-action'` — failure surfaced on the wired-action dispatch
-     *     path (the originating tool threw, was not found, or timed out).
-     *   - `'refresh-stream'` — failure surfaced on the refresh tool that
-     *     fires after a successful wired action (declared via
-     *     {@link StreamChannelEntry.tool}).
-     *
-     * Extensibility — typed as `(string & {}) | 'wired-action' |
-     * 'refresh-stream'` rather than a closed union. Consumers MUST handle
-     * unknown values gracefully (render as the raw string, not a hard
-     * switch-case that throws). Future router sources that may populate
-     * this field include `'bootstrap-refresh'` (initial attach-time
-     * refresh before the first wired action), `'scheduled-refresh'` (a
-     * timer-driven refresh independent of any action), and
-     * `'session-restore'` (a refresh fired after a session-resume
-     * hydration). Adding such values does NOT bump the protocol version,
-     * because the type was extensible from day one. */
-    readonly sourceAction?: {
-        readonly type: 'wired-action' | 'refresh-stream' | (string & {});
-        /** ISO 8601 timestamp when the originating dispatch hit the router. */
-        readonly dispatchedAt: string;
-    };
-    readonly error: {
-        readonly code: ContractErrorCode;
-        /** Short, author-readable failure summary. Safe to log/display. */
-        readonly message: string;
-        /** Optional stringified original error (typically `error.stack`) for
-         * debugging. Producers MUST pipe the raw string through
-         * {@link sanitizeCausedBy} (or an operator-supplied stricter
-         * sanitizer) before populating this field — the envelope rides
-         * `_ggui:contract-error` which is `replay: 'all'`, so anything
-         * landed here persists in the session ring buffer and surfaces in
-         * operator tools. The default sanitizer redacts
-         * Bearer tokens, query-param secrets, and common env-var dumps, and
-         * truncates at 2KB. `@ggui-ai/mcp-server`'s session-channel router
-         * applies it by default; alternative producers MUST match that
-         * posture. */
-        readonly causedBy?: string;
-    };
-    /** ISO 8601 timestamp of the error envelope itself. */
-    readonly timestamp: string;
-    /**
-     * Protocol schema version stamped by the producer. Pre-launch:
-     * advisory — consumers MUST NOT reject on mismatch. At launch
-     * cutover, policy tightens so operators can surface an
-     * UPGRADE_REQUIRED state when the received major diverges from the
-     * client's known major.
-     *
-     * See `PROTOCOL_SCHEMA_VERSION` for the current value.
-     */
-    readonly schemaVersion?: string;
-}
 //# sourceMappingURL=data-contract.d.ts.map

package/dist/types/data-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data-contract.d.ts","sourceRoot":"","sources":["../../src/types/data-contract.ts"],"names":[],"mappings":"AAwCA;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX,UAAU,CAAC;AAMf;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,oEAAoE;IACpE,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,oBAAoB;IACpB,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,uDAAuD;IACvD,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAC5C,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,kCAAkC;IAClC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,6BAA6B;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAMD;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uFAAuF;IACvF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,SAAS;IACxB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACvC;AA2CD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3D,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,EAAE,iBAA4B,CAAC;AAEvE,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,EAAE,kBAA2B,CAAC;AAEvE,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AAErD;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;OAIG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE;QACP,iEAAiE;QACjE,IAAI,EAAE,MAAM,CAAC;QACb,wDAAwD;QACxD,IAAI,CAAC,EAAE,UAAU,CAAC;KACnB,CAAC;CACH;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAO5D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,qFAAqF;IACrF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAEjD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,YAEjB,CAAC;AAMlB;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC;CACnD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACvC;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,qBAAqB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB;;;;;;;;;;OAUG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;OAWG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;OAiBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAoCD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC3B;sDACkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;CACrB;AAED;iBACiB;AACjB,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,CAa/E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;;;;OAYG;IACH;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CAC7C;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,uBAAuB,GACvB,kBAAkB,GAClB,eAAe;AACjB;;;;;;;;;;GAUG;GACD,qBAAqB;AACvB;;;;;;;;;;GAUG;GACD,gBAAgB;AAClB;;;;;;;;GAQG;GACD,mBAAmB,GACnB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAAY,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,oBAAoB;IACnC,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;qDAEiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;;;;;;;;;;;uDAsBmD;IACnD,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACjE,uEAAuE;QACvE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACjC,mEAAmE;QACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB;;;;;;;;;;sBAUc;QACd,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC"}
+{"version":3,"file":"data-contract.d.ts","sourceRoot":"","sources":["../../src/types/data-contract.ts"],"names":[],"mappings":"AAwCA;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;CACtC;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX,UAAU,CAAC;AAMf;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,oEAAoE;IACpE,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IACnB,oBAAoB;IACpB,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,uDAAuD;IACvD,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAC5C,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,kCAAkC;IAClC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,6BAA6B;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAMD;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uFAAuF;IACvF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,SAAS;IACxB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACvC;AA2CD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3D,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,EAAE,iBAA4B,CAAC;AAEvE,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,EAAE,kBAA2B,CAAC;AAEvE,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AAErD;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;OAIG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE;QACP,iEAAiE;QACjE,IAAI,EAAE,MAAM,CAAC;QACb,wDAAwD;QACxD,IAAI,CAAC,EAAE,UAAU,CAAC;KACnB,CAAC;CACH;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AAO5D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,qFAAqF;IACrF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAMrD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;mDAI+C;IAC/C,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,oFAAoF;IACpF,QAAQ,EAAE;QACR,yEAAyE;QACzE,WAAW,EAAE,UAAU,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,UAAU,CAAC;KAC3B,CAAC;IACF,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC;CACnD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACvC;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,KAAK,CAAC;CACd;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,qBAAqB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB;;;;;;;;;;OAUG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;OAWG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;OAiBG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAoCD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC3B;sDACkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;CACrB;AAED;iBACiB;AACjB,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,SAAS,CAa/E;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;;;;OAYG;IACH;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;;;;;;;;;;;;;OAgBG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CAC7C;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,QAAY,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC"}

package/dist/types/data-contract.js

@@ -39,16 +39,6 @@ export const DEFAULT_STREAM_CHANNEL_MODE = 'append';
 export const DEFAULT_STREAM_REPLAY_POLICY = 'none';
 /** Locked default applied when {@link StreamChannelEntry.complete} is omitted. */
 export const DEFAULT_STREAM_CHANNEL_COMPLETE = false;
-/**
- * Frozen singleton instance of {@link RefreshInput}. Pass this to
- * refresh-tool invocations instead of a fresh `{}` literal so that:
- *
- *   - Every call site emits exactly the same reference (cheap identity
- *     checks in mocks / spies / test harnesses).
- *   - `Object.freeze` catches accidental mutation that would otherwise
- *     surface as cross-invocation interference in long-running servers.
- */
-export const EMPTY_REFRESH_INPUT = Object.freeze({});
 /** Locked default applied when {@link ContextEntry.debounceMs}
  * is omitted. */
 export const DEFAULT_CONTEXT_DEBOUNCE_MS = 300;
@@ -66,12 +56,12 @@ export const DEFAULT_CONTEXT_DEBOUNCE_MS = 300;
  *      - `null` → `null`
  *   3. `undefined` (caller validates / rejects)
  *
- * Push-time validators MUST reject contextSpec entries that resolve
+ * Render-time validators MUST reject contextSpec entries that resolve
  * to `undefined` here (e.g., schema is `oneOf` with no clear primitive
  * type — author MUST provide an explicit `default` for such schemas).
  *
  * Consumed by the boilerplate generator's useState emission and by
- * the push-time validator's default-derivability rule.
+ * the render-time validator's default-derivability rule.
  *
  * @public
  */
@@ -90,6 +80,9 @@ export function deriveContextDefault(entry) {
         default: return undefined;
     }
 }
+// =============================================================================
+// Context snapshot limits (`ggui_runtime_sync_context` rejection bounds)
+// =============================================================================
 /**
  * Maximum byte size (UTF-8) of a single contextSpec slot's value
  * accepted by `ggui_runtime_sync_context`. Values larger than this