@ggui-ai/protocol 0.2.0-alpha.4 → 0.4.0-rc.0

package/dist/types/events.d.ts

@@ -1,19 +1,23 @@
 import type { JsonValue } from './data-contract';
 /**
- * Event types that flow from user to agent
+ * Event type that flows from user to agent.
+ *
+ * One member by design (actions-vs-context): actions drive turns;
+ * context observes state — there is no third category. The pre-
+ * actionSpec multi-event vocabulary (`data:change`, `lifecycle:*`,
+ * `interaction:*`, `error:*`) was deleted in draft-2026-06-12 — no
+ * first-party producer ever constructed those members, and the server
+ * only pipes `data:submit` to the agent-facing consume queue. A future
+ * second category re-enters with a real producer + a real server-side
+ * consumer, never as speculative vocabulary.
  */
-export type EventType = 'data:submit' | 'data:change' | 'lifecycle:focus' | 'lifecycle:blur' | 'interaction:click' | 'interaction:hover' | 'interaction:scroll' | 'error:validation' | 'error:connection';
+export type EventType = 'data:submit';
 /**
  * Payload shape for `data:submit` events emitted by `useAction()`.
  *
  * Actions ALWAYS drive turns — every action emits an event the agent
  * reacts to on its next turn through `ggui_consume`. There is no
- * synchronous server-side dispatch in agent-mediated deployments. The
- * optional `tool` hint mirrors the active render's
- * `actionSpec[action].nextStep` so consumers (the WS-direct
- * `wiredActionRouter` for agent-less `ggui serve` deployments, and
- * telemetry on agent-mediated deployments) see which tool the agent
- * intends to call next without re-looking-up the contract.
+ * synchronous server-side dispatch.
  *
  * @typeParam TData - Type of the action payload (defaults to `unknown`).
  */
@@ -23,21 +27,15 @@ export interface ActionEventValue<TData = unknown> {
     /** Action payload (e.g., form data). */
     data: TData;
     /**
-     * MCP tool name mirrored from the active render's
-     * `actionSpec[action].nextStep` (when the author declared one).
-     * Absent when the action has no `nextStep` — the agent decides the
-     * next tool freely from broader context.
-     *
-     * Consumer behavior:
-     *   - Agent-mediated deployments: read by the agent on `ggui_consume`
-     *     as a hint; agent decides whether to honor it.
-     *   - WS-direct agent-less deployments (`ggui serve`): the
-     *     `wiredActionRouter` fires this tool synchronously when present.
+     * MCP tool name populated SERVER-SIDE from the render's
+     * `actionSpec[action].nextStep` when the retained `user.submitted`
+     * ledger event is built at WS-action ingress. Absent when the
+     * action has no `nextStep`.
      *
-     * **Disagreement policy:** if both the envelope's `tool` and the
-     * server's `actionSpec[action].nextStep` are present and disagree,
-     * the **client-populated value wins** (client is the source of truth
-     * for what the user actually saw).
+     * Advisory and ledger-only: operator surfaces (console timeline,
+     * inspector feeds) read it. The `ggui_consume` pipe entry is the
+     * separate `ConsumeEventEntry` shape, which carries no tool slot —
+     * agents read `nextStep` from the contract they authored.
      */
     tool?: string;
 }
@@ -59,7 +57,7 @@ export interface ActionEventValue<TData = unknown> {
  *   - `timestamp` — the server uses its own clock for ordering + log
  *     emission; client-supplied timestamps aren't authoritative.
  *   - `correlationId` — the doctrine names this for agent-push ↔ user
- *     action pairing; `renderId` covers the narrow case today.
+ *     action pairing; `sessionId` covers the narrow case today.
  *
  * Required fields map to existing enforcement concerns; optional fields
  * are doctrine-aligned forward-compat additions that cost nothing on the
@@ -67,22 +65,20 @@ export interface ActionEventValue<TData = unknown> {
  */
 export interface ActionEnvelope<TPayload = JsonValue> {
     /**
-     * Render identity. Server enforces subscriber-render binding —
-     * envelopes whose renderId doesn't match the ws subscriber's bound
-     * render are rejected (RENDER_MISMATCH).
+     * GguiSession identity. Server enforces subscriber-render binding —
+     * envelopes whose sessionId doesn't match the ws subscriber's bound
+     * render are rejected (SESSION_MISMATCH).
      */
-    renderId: string;
+    sessionId: string;
     /**
-     * Action / event type. Gated by the active render's
-     * `actionSpec` declarations.
+     * Action / event type — always `'data:submit'` (see {@link EventType}).
+     * Gated by the active render's `actionSpec` declarations.
      */
     type: EventType;
     /**
-     * Payload for the action. For `type: 'data:submit'` this carries the
-     * {@link ActionEventValue} shape (`{action, data?, tool?}`) where
-     * `data` is validated against the render's
-     * `actionSpec[action].schema`. For non-data:submit types the payload
-     * is free-form — no schema enforcement.
+     * Payload for the action. Carries the {@link ActionEventValue} shape
+     * (`{action, data?, tool?}`) where `data` is validated against the
+     * render's `actionSpec[action].schema`.
      */
     payload?: TPayload;
     /**
@@ -90,7 +86,7 @@ export interface ActionEnvelope<TPayload = JsonValue> {
      * shape; no server enforcement today (no inbound dedup infrastructure
      * yet). Clients SHOULD populate when their transport can replay
      * (e.g., reconnect-with-backfill); server SHOULD dedup by
-     * `(renderId, clientSeq)` when dedup lands.
+     * `(sessionId, clientSeq)` when dedup lands.
      */
     clientSeq?: number;
     /**
@@ -103,38 +99,4 @@ export interface ActionEnvelope<TPayload = JsonValue> {
      */
     schemaVersion?: string;
 }
-/**
- * Emitted when an MCP server requires OAuth credentials that the user
- * has not yet granted. The frontend should display a consent prompt
- * linking to {@link consentUrl}.
- */
-export interface McpAuthRequiredEvent {
-    type: 'system';
-    action: 'auth_required';
-    /** Identifier of the external service (e.g. `'github'`, `'slack'`) */
-    serviceId: string;
-    /** Human-readable service name shown in the consent UI */
-    displayName: string;
-    /** OAuth scopes being requested (optional — omitted when the service uses fixed scopes) */
-    scopes?: string[];
-    /** URL the user should visit to grant consent */
-    consentUrl: string;
-    /** Explanatory message for the user (e.g. "GitHub access is required to list repositories") */
-    message: string;
-}
-/**
- * Emitted after the user completes (or denies) the OAuth consent flow.
- * The frontend should dismiss the consent prompt and, if `status` is
- * `'ready'`, retry the operation that triggered the auth request.
- */
-export interface McpCredentialReadyEvent {
-    type: 'system';
-    action: 'credential_ready';
-    /** Identifier of the external service that was authorized */
-    serviceId: string;
-    /** Whether the credential is now available or the user denied access */
-    status: 'ready' | 'denied';
-}
-/** Union of all system events emitted by the MCP credential proxy */
-export type McpCredentialSystemEvent = McpAuthRequiredEvent | McpCredentialReadyEvent;
 //# sourceMappingURL=events.d.ts.map

package/dist/types/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/types/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,SAAS,GAEjB,aAAa,GACb,aAAa,GAEb,iBAAiB,GACjB,gBAAgB,GAEhB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GAEpB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO;IAC/C,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,KAAK,CAAC;IACZ;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,cAAc,CAAC,QAAQ,GAAG,SAAS;IAClD;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,kBAAkB,CAAC;IAC3B,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/types/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,SAAS,GAAG,aAAa,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO;IAC/C,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,KAAK,CAAC;IACZ;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,cAAc,CAAC,QAAQ,GAAG,SAAS;IAClD;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/dist/types/{render-event.d.ts → ggui-session-event.d.ts}

@@ -1,10 +1,10 @@
 /**
- * RenderEvent ledger — wire-frame replay primitives (R7).
+ * GguiSessionEvent ledger — wire-frame replay primitives (R7).
  *
  * Core protocol-layer types backing the unified cursor-replay model.
  * The same ledger is read by:
  *
- *   - `GET /api/renders/:renderId/events?sinceSequence=N&limit=M` —
+ *   - `GET /api/sessions/:sessionId/events?sinceSequence=N&limit=M` —
  *     HTTP cursor-replay endpoint; polling clients walk it on a
  *     2s tick.
  *   - WS `subscribe` with `SubscribePayload.sinceSequence` — server
@@ -16,7 +16,7 @@
  *
  * # Why this is core (not an integration)
  *
- * RenderEvent is the wire-frame ledger shape — the structural unit
+ * GguiSessionEvent is the wire-frame ledger shape — the structural unit
  * the live-channel transport replays. It sits at the same layer as
  * other transport-level types (`StreamEnvelope`, `AckPayload`). It is
  * NOT an MCP-Apps-integration-specific concept — it's the protocol's
@@ -25,19 +25,19 @@
  *
  * # Source of truth
  *
- * This is the canonical definition. The server-side `RenderStore`
+ * This is the canonical definition. The server-side `GguiSessionStore`
  * seam in `@ggui-ai/mcp-server-core` re-exports these types so
  * implementors (in-memory, sqlite, dynamo) all bind to the same
  * shape. Wave 7 (flatten-render-identity, 2026-05-28): merged the
  * earlier protocol-side `SessionEvent` (sequence + emittedAt + type +
- * payload) into the server-side RenderEvent shape (seq + timestamp +
+ * payload) into the server-side GguiSessionEvent shape (seq + timestamp +
  * type + data); one ledger primitive everywhere. `timestamp` carries
  * an ISO 8601 UTC string for cross-layer uniformity (was epoch-ms on
  * the server side).
  */
 /**
- * Append-only ledger event for one render. Each event carries a
- * monotonic `seq` that is gap-free within a single render, starting
+ * Append-only ledger event for one GguiSession. Each event carries a
+ * monotonic `seq` that is gap-free within a single GguiSession, starting
  * at 1.
  *
  * Discriminator is `type`; `data` is type-specific and structurally
@@ -47,7 +47,7 @@
  *
  * @public
  */
-export interface RenderEvent<TData = unknown> {
+export interface GguiSessionEvent<TData = unknown> {
     /**
      * Monotonic, gap-free per render. Starts at 1 for the first event;
      * `0` is the sentinel for "no events yet" / fresh subscriber.
@@ -55,7 +55,7 @@ export interface RenderEvent<TData = unknown> {
     readonly seq: number;
     /**
      * Wire-frame type. The canonical taxonomy lives at
-     * {@link RenderEventType} for type-discrimination ergonomics;
+     * {@link GguiSessionEventType} for type-discrimination ergonomics;
      * keeping the field as a plain string lets first-party servers mint
      * new types without a protocol bump.
      */
@@ -81,15 +81,15 @@ export interface RenderEvent<TData = unknown> {
  *
  * @public
  */
-export type RenderEventType = 'ui.created' | 'ui.updated' | 'ui.committed' | 'tool.called' | 'tool.result' | 'user.submitted';
+export type GguiSessionEventType = 'ui.created' | 'ui.updated' | 'ui.committed' | 'tool.called' | 'tool.result' | 'user.submitted';
 /**
- * Response body for `GET /api/renders/:renderId/events?sinceSequence=N&limit=M`.
+ * Response body for `GET /api/sessions/:sessionId/events?sinceSequence=N&limit=M`.
  *
  * Pagination semantics:
  *   - `events` — strictly ascending by `seq`; only events with
  *     `seq > sinceSequence`, capped at `limit`.
  *   - `lastSequence` — the server's current high-water mark
- *     (`Render.eventSequence`), NOT the last event's seq in this
+ *     (`GguiSession.eventSequence`), NOT the last event's seq in this
  *     page. Clients use it to advance their cursor even when the
  *     page is empty.
  *   - `hasMore` — `true` when `limit` truncated the result. Clients
@@ -99,7 +99,7 @@ export type RenderEventType = 'ui.created' | 'ui.updated' | 'ui.committed' | 'to
  * @public
  */
 export interface EventsResponse {
-    readonly events: ReadonlyArray<RenderEvent>;
+    readonly events: ReadonlyArray<GguiSessionEvent>;
     readonly lastSequence: number;
     readonly hasMore: boolean;
 }
@@ -107,7 +107,7 @@ export interface EventsResponse {
  * 410 Gone response body — `sinceSequence` predates the server's
  * replay horizon (events evicted from the bounded ring buffer or
  * never written before the ledger went online). Client recovery:
- * re-mount from a fresh snapshot (`/api/renders/:id/state`) and
+ * re-mount from a fresh snapshot (`/api/sessions/:id/state`) and
  * reset the cursor to the returned `currentSequence`.
  *
  * @public
@@ -116,4 +116,4 @@ export interface ReplayHorizonPassedError {
     readonly reason: 'REPLAY_HORIZON_PASSED';
     readonly currentSequence: number;
 }
-//# sourceMappingURL=render-event.d.ts.map
+//# sourceMappingURL=ggui-session-event.d.ts.map

package/dist/types/ggui-session-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ggui-session-event.d.ts","sourceRoot":"","sources":["../../src/types/ggui-session-event.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO;IAC/C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAC5B,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,aAAa,GACb,aAAa,GACb,gBAAgB,CAAC;AAErB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC"}

package/dist/types/{render-event.js → ggui-session-event.js}

@@ -1,10 +1,10 @@
 /**
- * RenderEvent ledger — wire-frame replay primitives (R7).
+ * GguiSessionEvent ledger — wire-frame replay primitives (R7).
  *
  * Core protocol-layer types backing the unified cursor-replay model.
  * The same ledger is read by:
  *
- *   - `GET /api/renders/:renderId/events?sinceSequence=N&limit=M` —
+ *   - `GET /api/sessions/:sessionId/events?sinceSequence=N&limit=M` —
  *     HTTP cursor-replay endpoint; polling clients walk it on a
  *     2s tick.
  *   - WS `subscribe` with `SubscribePayload.sinceSequence` — server
@@ -16,7 +16,7 @@
  *
  * # Why this is core (not an integration)
  *
- * RenderEvent is the wire-frame ledger shape — the structural unit
+ * GguiSessionEvent is the wire-frame ledger shape — the structural unit
  * the live-channel transport replays. It sits at the same layer as
  * other transport-level types (`StreamEnvelope`, `AckPayload`). It is
  * NOT an MCP-Apps-integration-specific concept — it's the protocol's
@@ -25,12 +25,12 @@
  *
  * # Source of truth
  *
- * This is the canonical definition. The server-side `RenderStore`
+ * This is the canonical definition. The server-side `GguiSessionStore`
  * seam in `@ggui-ai/mcp-server-core` re-exports these types so
  * implementors (in-memory, sqlite, dynamo) all bind to the same
  * shape. Wave 7 (flatten-render-identity, 2026-05-28): merged the
  * earlier protocol-side `SessionEvent` (sequence + emittedAt + type +
- * payload) into the server-side RenderEvent shape (seq + timestamp +
+ * payload) into the server-side GguiSessionEvent shape (seq + timestamp +
  * type + data); one ledger primitive everywhere. `timestamp` carries
  * an ISO 8601 UTC string for cross-layer uniformity (was epoch-ms on
  * the server side).

package/dist/types/handshake-suggestion.d.ts

@@ -19,15 +19,16 @@
  *                the contract. Provisional blueprintId; `amendments`
  *                carries the diff vs the agent's draft.
  *
- * Step 3 — the agent posts a `PushDecision` (accept the suggestion or
- * override with a fresh draft). Accept reuses the provisional
- * `blueprintId`; override mints a fresh one.
+ * Step 3 — the agent renders, optionally posting an `override`
+ * (re-aim the contract and/or variance). Omitting `override` accepts the
+ * suggestion as-is and resolves the proposed `(contractKey, variantKey)`;
+ * an `override` re-resolves the effective identity.
  *
  * Locked decisions:
  *
  *   - `blueprintMeta` is ALWAYS present on a successful handshake
- *     (Option B from §D5). `codeHash` is the only field that's absent
- *     on non-cache origins.
+ *     (Option B from §D5). `codeHash` + `source` are absent on
+ *     non-cache origins (gen pending — no code, no provenance).
  *   - `amendments` is populated only on `origin: 'synth'`. On `cache`
  *     and `agent` origins it MUST be omitted.
  *   - `validationFindings` is populated only when validators ran AND
@@ -37,6 +38,7 @@
  *     telemetry only (synth's amendment already addressed them).
  */
 import type { Blueprint, BlueprintVariance } from './blueprint.js';
+import type { BlueprintSource } from './blueprint-source.js';
 import type { DataContract, JsonValue } from './data-contract.js';
 /**
  * Where the handshake's `blueprintMeta` came from. Routes the agent's
@@ -44,10 +46,10 @@ import type { DataContract, JsonValue } from './data-contract.js';
  *
  *   - `cache`  — an existing blueprint matched at or above the per-app
  *                threshold. `blueprintMeta.codeHash` is present; the
- *                paired `ggui_render({decision: {kind: 'accept'}})`
+ *                paired `ggui_render({handshakeId, props})` (no `override`)
  *                short-circuits to cache delivery.
  *   - `agent`  — no cache hit, but the agent's draft validated cleanly.
- *                `codeHash` absent; gen runs on push against the
+ *                `codeHash` absent; gen runs on render against the
  *                agent's draft contract verbatim.
  *   - `synth`  — no cache hit AND validation failed. The synth
  *                amender produced a new contract; the diff vs the
@@ -57,7 +59,7 @@ export type SuggestionOrigin = 'cache' | 'agent' | 'synth';
 /**
  * Agent's draft on the handshake input — what the agent wants to
  * build. The contract is required; variance + generator are optional
- * hints. The server combines this with its own session/app context
+ * hints. The server combines this with its own render/app context
  * (cached blueprints, validator outcomes, operator pins) to produce
  * a {@link HandshakeSuggestion}.
  */
@@ -104,14 +106,19 @@ export interface BlueprintDraft {
  * override (mint a fresh id with its own new draft).
  *
  * `blueprintId` is PROVISIONAL — it becomes durable iff the paired
- * push sends `decision: 'accept'`. An override discards it.
+ * render sends `decision: 'accept'`. An override discards it.
  */
 export interface BlueprintMeta {
     /**
-     * Provisional blueprint id. Server-minted at handshake-time.
-     * Becomes durable when push accepts; discarded on push override.
+     * Stored blueprint id (`bp_<uuid>`). Present only when a cached
+     * blueprint backs the suggestion (`origin === 'cache'`) — that is the
+     * durable UUID minted at its first render-time registration. ABSENT on
+     * `agent` / `synth` origins (D4): the UUID is minted at render-time
+     * registration, not at handshake, so there is no id to report yet.
+     * Consumers MUST tolerate absence (the telemetry reader omits the
+     * clause; the agent falls back to `contractHash`).
      */
-    readonly blueprintId: string;
+    readonly blueprintId?: string;
     /** Canonical RFC 8785 (JCS) hash of the suggestion's contract. */
     readonly contractHash: string;
     /**
@@ -119,8 +126,17 @@ export interface BlueprintMeta {
      * 'cache'`. Absent for `agent` / `synth` (gen pending).
      */
     readonly codeHash?: string;
-    /** Slug of the generator that produced (or will produce) the code. */
-    readonly generator: string;
+    /**
+     * Provenance of the cached code backing this suggestion — the single
+     * {@link BlueprintSource} vocabulary, read from the matched
+     * blueprint's stored row. Present iff `origin === 'cache'` (same
+     * presence rule as {@link codeHash}). ABSENT on `agent` / `synth`
+     * origins: generation has not happened yet, so no provenance exists
+     * to report — the paired render mints the real `llm` arm from the
+     * engine's own metadata stamp at registration time. Fabricating a
+     * value here is banned.
+     */
+    readonly source?: BlueprintSource;
     /** Variance tags carried through from the suggestion. */
     readonly variance: BlueprintVariance;
     /**
@@ -190,7 +206,7 @@ export type JsonPatchOp = {
 /**
  * The full handshake suggestion. Produced by the server in step-2 of
  * the three-step handshake; the agent reads this in the response and
- * branches its push decision on `origin` (accept vs override).
+ * branches its render decision on `origin` (accept vs override).
  */
 export interface HandshakeSuggestion {
     /** Routing discriminator — see {@link SuggestionOrigin}. */
@@ -199,6 +215,23 @@ export interface HandshakeSuggestion {
     readonly rationale: string;
     /** Provisional blueprint metadata — see {@link BlueprintMeta}. */
     readonly blueprintMeta: BlueprintMeta;
+    /**
+     * Agent-readable projection of the contract the server proposes the
+     * agent build against. Parties: the SERVER produces it from the
+     * effective contract; the AGENT consumes it to make ONE accept-vs-
+     * override decision knowingly.
+     *
+     * Obligation: when set, it equals `summarizeContract(effectiveContract)`
+     * (the same lossy summary the matcher's judge feeds — one source of
+     * truth). OPTIONAL (D5): a malformed/absent contract → omitted (never
+     * throws); the agent then falls back to `blueprintMeta.contractHash`.
+     * Builders set it whenever a contract is available.
+     *
+     * This is the agent-readable projection only — the full contract still
+     * rides on the handshake record's stored `effectiveContract` for
+     * render-time generation.
+     */
+    readonly proposedContractSummary?: string;
     /**
      * Populated iff `origin === 'synth'`. Carries the JSON-Patch diff
      * vs the agent's draft and the synth model's reasoning.
@@ -219,25 +252,6 @@ export interface HandshakeSuggestion {
      */
     readonly validationFindings?: readonly SuggestionFinding[];
 }
-/**
- * Decision discriminator on the push input. Replaces the old
- * `{contract? | contractHash?}` triad with a clearer accept-vs-
- * override branch.
- *
- *   - `accept`   — use the handshake's `blueprintMeta` verbatim.
- *                  If `codeHash` is present (origin === 'cache'),
- *                  delivery is a fast cache fetch. Otherwise gen
- *                  runs against the suggestion's stored contract.
- *   - `override` — mint a fresh blueprintId and run gen against the
- *                  agent's NEW draft. The provisional id from the
- *                  handshake is discarded.
- */
-export type PushDecision = {
-    readonly kind: 'accept';
-} | {
-    readonly kind: 'override';
-    readonly blueprintDraft: BlueprintDraft;
-};
 /**
  * Build a minimal JSON-Patch RFC 6902 diff between two contracts.
  *
@@ -257,7 +271,7 @@ export type PushDecision = {
 export declare function jsonPatch(before: unknown, after: unknown): JsonPatch;
 /**
  * Top-N alternative blueprints surfaced on the handshake response.
- * Agents can override into one of these (push with `decision:
+ * Agents can override into one of these (render with `decision:
  * 'override'`) — the alternatives are full {@link Blueprint} rows so
  * the agent inspects everything it needs to decide.
  *

package/dist/types/handshake-suggestion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handshake-suggestion.d.ts","sourceRoot":"","sources":["../../src/types/handshake-suggestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,+DAA+D;QAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,iEAAiE;QACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,2CAA2C;QAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;SAAE,CAAC;QACrE,oCAAoC;QACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,WAAW,EAAE,CAAC;AAE/C,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjF;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC5D;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;CAAE,CAAC;AAE3E;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,CAIpE;AA2DD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,SAAS,SAAS,EAAE,CAAC"}
+{"version":3,"file":"handshake-suggestion.d.ts","sourceRoot":"","sources":["../../src/types/handshake-suggestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,+DAA+D;QAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,iEAAiE;QACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,2CAA2C;QAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE;YAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;SAAE,CAAC;QACrE,oCAAoC;QACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;IAClC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,WAAW,EAAE,CAAC;AAE/C,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjF;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC5D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,CAIpE;AA2DD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,SAAS,SAAS,EAAE,CAAC"}

package/dist/types/host-context.d.ts

@@ -1,6 +1,6 @@
 /**
  * Host Context — projected subset of `McpUiHostContext` ggui captures from
- * the MCP Apps `ui/initialize` response and echoes back to session state so
+ * the MCP Apps `ui/initialize` response and echoes back to render state so
  * the agent can reason about device/host capabilities on subsequent turns.
  *
  * The MCP Apps spec (`@modelcontextprotocol/ext-apps`) defines a rich
@@ -9,7 +9,7 @@
  * deviceCapabilities). ggui captures it iframe-side at `ui/initialize` and
  * echoes a TRIMMED projection back over the live channel (via the
  * `host_context_observed` outbound message) so the server can persist it on
- * `SessionRecord.hostContext` and surface it on `ggui_handshake` /
+ * `GguiSession.hostContext` and surface it on `ggui_handshake` /
  * `ggui_consume` output for the agent.
  *
  * Why a projection rather than passthrough:
@@ -24,10 +24,10 @@
  *
  * What the projection KEEPS:
  *
- *   - `availableDisplayModes` / `currentDisplayMode` — drives canvas-mode
- *     display-mode escalation policy (see canvas-mode-detail-displaymode.md).
+ *   - `availableDisplayModes` / `currentDisplayMode` — drives the
+ *     display-mode escalation policy (MCP Apps inline/fullscreen/pip).
  *   - `containerDimensions` — lets the agent reason about layout density
- *     and lets the canvas reflow on resize.
+ *     and lets the rendered UI reflow on resize.
  *   - `platform` / `deviceCapabilities` — feeds the generator's
  *     responsive-UI prompts.
  *   - `locale` / `timeZone` — useful for the agent's date/number rendering.
@@ -74,7 +74,7 @@ export interface HostContextDeviceCapabilities {
 }
 /**
  * Trimmed projection of `McpUiHostContext` that ggui captures iframe-side
- * and echoes to session state for agent visibility.
+ * and echoes to render state for agent visibility.
  *
  * Every field is optional. Hosts that emit minimal context project to
  * mostly-empty objects; consumers MUST treat every field as possibly
@@ -106,7 +106,7 @@ export interface HostContextProjection {
 /**
  * Live-channel inbound (client → server) payload that delivers the
  * iframe-captured `HostContextProjection` to the server. Server-side
- * handler writes to `RenderRecord.hostContext`; subsequent
+ * handler writes to `GguiSession.hostContext`; subsequent
  * `ggui_handshake` / `ggui_consume` responses surface the value to the
  * agent via the optional `client.hostContext` field.
  *
@@ -120,7 +120,7 @@ export interface HostContextProjection {
  * stored value; no merge logic.
  */
 export interface HostContextObservedPayload {
-    readonly renderId: string;
+    readonly sessionId: string;
     readonly hostContext: HostContextProjection;
 }
 /**

package/dist/types/host-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-context.d.ts","sourceRoot":"","sources":["../../src/types/host-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAkBjD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAMvE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAMlF;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7D,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;IAC/C,+EAA+E;IAC/E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC;IAC9D,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;IAC5D,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAoBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS,CAsDlF;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,CAAC,EAAE,qBAAqB,GAAG,SAAS,EACpC,CAAC,EAAE,qBAAqB,GAAG,SAAS,GACnC,OAAO,CAIT;AAGD,YAAY,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"host-context.d.ts","sourceRoot":"","sources":["../../src/types/host-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAkBjD,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAMvE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAMlF;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7D,8EAA8E;IAC9E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;IAC/C,+EAA+E;IAC/E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,8BAA8B,CAAC;IAC9D,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;IAC5D,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAMD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAoBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,GAAG,SAAS,CAsDlF;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,CAAC,EAAE,qBAAqB,GAAG,SAAS,EACpC,CAAC,EAAE,qBAAqB,GAAG,SAAS,GACnC,OAAO,CAIT;AAGD,YAAY,EAAE,SAAS,EAAE,CAAC"}

package/dist/types/host-context.js

@@ -1,6 +1,6 @@
 /**
  * Host Context — projected subset of `McpUiHostContext` ggui captures from
- * the MCP Apps `ui/initialize` response and echoes back to session state so
+ * the MCP Apps `ui/initialize` response and echoes back to render state so
  * the agent can reason about device/host capabilities on subsequent turns.
  *
  * The MCP Apps spec (`@modelcontextprotocol/ext-apps`) defines a rich
@@ -9,7 +9,7 @@
  * deviceCapabilities). ggui captures it iframe-side at `ui/initialize` and
  * echoes a TRIMMED projection back over the live channel (via the
  * `host_context_observed` outbound message) so the server can persist it on
- * `SessionRecord.hostContext` and surface it on `ggui_handshake` /
+ * `GguiSession.hostContext` and surface it on `ggui_handshake` /
  * `ggui_consume` output for the agent.
  *
  * Why a projection rather than passthrough:
@@ -24,10 +24,10 @@
  *
  * What the projection KEEPS:
  *
- *   - `availableDisplayModes` / `currentDisplayMode` — drives canvas-mode
- *     display-mode escalation policy (see canvas-mode-detail-displaymode.md).
+ *   - `availableDisplayModes` / `currentDisplayMode` — drives the
+ *     display-mode escalation policy (MCP Apps inline/fullscreen/pip).
  *   - `containerDimensions` — lets the agent reason about layout density
- *     and lets the canvas reflow on resize.
+ *     and lets the rendered UI reflow on resize.
  *   - `platform` / `deviceCapabilities` — feeds the generator's
  *     responsive-UI prompts.
  *   - `locale` / `timeZone` — useful for the agent's date/number rendering.

package/dist/types/invoke.d.ts

@@ -5,24 +5,12 @@
  * of truth. Do not hand-author parallel types here.
  */
 import type { z } from 'zod';
-import type { textBlockSchema, toolUseBlockSchema, toolResultBlockSchema, contentBlockSchema, textDeltaSchema, inputJsonDeltaSchema, contentBlockDeltaPayloadSchema, messageStartEventSchema, contentBlockStartEventSchema, contentBlockDeltaEventSchema, contentBlockStopEventSchema, messageDeltaEventSchema, messageStopEventSchema, pingEventSchema, errorEventSchema, invokeEventSchema, invokeErrorCodeSchema, invokeTurnSchema, invokeRequestSchema } from '../schemas/invoke';
+import type { textBlockSchema, toolUseBlockSchema, toolResultBlockSchema, contentBlockSchema, invokeEventSchema, invokeErrorCodeSchema, invokeTurnSchema } from '../schemas/invoke';
 export type TextBlock = z.infer<typeof textBlockSchema>;
 export type ToolUseBlock = z.infer<typeof toolUseBlockSchema>;
 export type ToolResultBlock = z.infer<typeof toolResultBlockSchema>;
 export type ContentBlock = z.infer<typeof contentBlockSchema>;
-export type TextDelta = z.infer<typeof textDeltaSchema>;
-export type InputJsonDelta = z.infer<typeof inputJsonDeltaSchema>;
-export type ContentBlockDeltaPayload = z.infer<typeof contentBlockDeltaPayloadSchema>;
-export type MessageStartEvent = z.infer<typeof messageStartEventSchema>;
-export type ContentBlockStartEvent = z.infer<typeof contentBlockStartEventSchema>;
-export type ContentBlockDeltaEvent = z.infer<typeof contentBlockDeltaEventSchema>;
-export type ContentBlockStopEvent = z.infer<typeof contentBlockStopEventSchema>;
-export type MessageDeltaEvent = z.infer<typeof messageDeltaEventSchema>;
-export type MessageStopEvent = z.infer<typeof messageStopEventSchema>;
-export type PingEvent = z.infer<typeof pingEventSchema>;
-export type ErrorEvent = z.infer<typeof errorEventSchema>;
 export type InvokeEvent = z.infer<typeof invokeEventSchema>;
 export type InvokeErrorCode = z.infer<typeof invokeErrorCodeSchema>;
 export type InvokeTurn = z.infer<typeof invokeTurnSchema>;
-export type InvokeRequest = z.infer<typeof invokeRequestSchema>;
 //# sourceMappingURL=invoke.d.ts.map

package/dist/types/invoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../src/types/invoke.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAEV,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAElB,eAAe,EACf,oBAAoB,EACpB,8BAA8B,EAE9B,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EAErB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAG9D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAGtF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../src/types/invoke.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAEV,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAElB,iBAAiB,EACjB,qBAAqB,EAErB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAO9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}