@ggui-ai/protocol 0.6.3 → 0.8.0

package/dist/errors/resource-read.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Projection from a typed `resources/read` failure onto a JSON-RPC
+ * error (SPEC §7.9 Plane 1).
+ *
+ * A read of a render locator (`ui://ggui/render/{sessionId}/{blueprintKey}`)
+ * returns either a live mount or an error — never a successful result
+ * carrying a shell that will never come alive. Routing every failure
+ * branch through this one function is what makes that host-checkable:
+ * "any successful `contents` result IS a live mount" holds because the
+ * only other exit is a JSON-RPC error.
+ *
+ * # Numeric codes
+ *
+ * `NOT_FOUND` maps to `-32002`. That is the number MCP itself uses for
+ * a resource that does not exist, and the number this protocol already
+ * assigns to a missing session — for a locator keyed by `sessionId`
+ * those are one condition, not two.
+ *
+ * The other three map to `MOUNT_UNAVAILABLE` (`-32006`), a canonical
+ * code claimed from the range the protocol reserves for new ones. They
+ * are deliberately NOT `INTERNAL_ERROR`: a purged component, a server
+ * that keeps no durable record, and a render with no delivery channel
+ * are all deterministic outcomes of a correctly functioning server.
+ * `-32603` would report them as a malfunction and invite hosts to retry
+ * a read that cannot ever succeed. The fine-grained classification
+ * rides on `error.data.code`, so a host that only understands the
+ * number still routes correctly, and one that reads `data.code` can
+ * distinguish "come back never" from "come back with a fresh render".
+ *
+ * # Why `NOT_FOUND` loses its message
+ *
+ * A caller reading a locator it is not allowed to see and a caller
+ * reading a locator that never existed MUST receive byte-identical
+ * errors. Anything that varies between the two — a message naming a
+ * session, a `detail` mentioning a refusal — turns the read into an
+ * oracle for the existence of other callers' renders. Rather than
+ * leaving that to the discipline of every call site, this function
+ * substitutes a constant message and drops `detail` whenever the code
+ * is `NOT_FOUND`. Diagnostics for the refused case belong in the
+ * server's own logs, which the caller cannot read.
+ *
+ * # What this function CANNOT enforce — a server obligation
+ *
+ * Substituting the message closes only the message half of the problem.
+ * The code half stays with the caller: a server that runs its
+ * authorization check late can hand this function a `NOT_MOUNTABLE` or
+ * `BLUEPRINT_UNRESOLVABLE` for a locator the caller was never entitled
+ * to read, and the resulting `-32006` reveals that the locator exists —
+ * the same oracle, reached by a different route, with a mapper behaving
+ * perfectly.
+ *
+ * So the ordering is normative, scoped to the branches that can leak:
+ * a server using this projection MUST route a refusal through its
+ * TERMINAL failure — the single answer it gives for every locator it
+ * will not resolve — and MUST NOT run a branch whose outcome VARIES
+ * WITH THE LOCATOR before the access check. Reaching one of those is
+ * itself the disclosure. Resolution work is exactly such a branch, so
+ * it happens only after the check has passed.
+ *
+ * Naming the TERMINAL rather than a specific code is deliberate. Which
+ * code the terminal carries is a property of the deployment: a server
+ * keeping durable records answers `NOT_FOUND`, one keeping none answers
+ * `NOT_SUPPORTED`, and each answers it for a refused locator and a
+ * missing one alike. Pinning this rule to `NOT_FOUND` would declare the
+ * second server non-conformant for behaving correctly. What the rule
+ * protects is that refusal and absence are the SAME answer — never
+ * which answer it is.
+ *
+ * A deployment-global answer is not a locator-varying branch.
+ * `NOT_SUPPORTED` describes the server and is identical for every
+ * locator on a server that emits it, so answering it before any
+ * per-locator work — the access check included — reveals nothing and is
+ * permitted.
+ */
+import { MCP_ERROR_CODES, type ResourceReadError, type ResourceReadErrorCode } from '../types/mcp.js';
+/**
+ * The single message every `NOT_FOUND` read returns, whatever the
+ * underlying reason. Names no session, app, or caller.
+ */
+export declare const RESOURCE_NOT_FOUND_MESSAGE = "Resource not found.";
+/**
+ * JSON-RPC error body for a failed `resources/read`. `data.code` is the
+ * closed classification; `data.detail` is optional operator context and
+ * is absent whenever `data.code` is `NOT_FOUND`.
+ */
+export interface ResourceReadJsonRpcError {
+    /**
+     * Narrowed to the two numbers this projection can emit, so a consumer
+     * switching on it gets exhaustiveness rather than an open `number`.
+     */
+    readonly code: typeof MCP_ERROR_CODES.SESSION_NOT_FOUND | typeof MCP_ERROR_CODES.MOUNT_UNAVAILABLE;
+    readonly message: string;
+    readonly data: {
+        readonly code: ResourceReadErrorCode;
+        readonly detail?: string;
+    };
+}
+/**
+ * Switch rather than an `if` with a fallthrough on purpose: every member
+ * of the enum is named, so adding a fifth code fails to compile here
+ * until someone decides which number it carries. A default branch would
+ * have swallowed it into `MOUNT_UNAVAILABLE` silently.
+ */
+export declare function resourceReadErrorToJsonRpc(err: ResourceReadError): ResourceReadJsonRpcError;
+//# sourceMappingURL=resource-read.d.ts.map

package/dist/errors/resource-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-read.d.ts","sourceRoot":"","sources":["../../src/errors/resource-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;AACH,OAAO,EACL,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AAEzB;;;GAGG;AACH,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EACT,OAAO,eAAe,CAAC,iBAAiB,GACxC,OAAO,eAAe,CAAC,iBAAiB,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;QACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,iBAAiB,GACrB,wBAAwB,CAqB1B"}

package/dist/errors/resource-read.js

@@ -0,0 +1,107 @@
+/**
+ * Projection from a typed `resources/read` failure onto a JSON-RPC
+ * error (SPEC §7.9 Plane 1).
+ *
+ * A read of a render locator (`ui://ggui/render/{sessionId}/{blueprintKey}`)
+ * returns either a live mount or an error — never a successful result
+ * carrying a shell that will never come alive. Routing every failure
+ * branch through this one function is what makes that host-checkable:
+ * "any successful `contents` result IS a live mount" holds because the
+ * only other exit is a JSON-RPC error.
+ *
+ * # Numeric codes
+ *
+ * `NOT_FOUND` maps to `-32002`. That is the number MCP itself uses for
+ * a resource that does not exist, and the number this protocol already
+ * assigns to a missing session — for a locator keyed by `sessionId`
+ * those are one condition, not two.
+ *
+ * The other three map to `MOUNT_UNAVAILABLE` (`-32006`), a canonical
+ * code claimed from the range the protocol reserves for new ones. They
+ * are deliberately NOT `INTERNAL_ERROR`: a purged component, a server
+ * that keeps no durable record, and a render with no delivery channel
+ * are all deterministic outcomes of a correctly functioning server.
+ * `-32603` would report them as a malfunction and invite hosts to retry
+ * a read that cannot ever succeed. The fine-grained classification
+ * rides on `error.data.code`, so a host that only understands the
+ * number still routes correctly, and one that reads `data.code` can
+ * distinguish "come back never" from "come back with a fresh render".
+ *
+ * # Why `NOT_FOUND` loses its message
+ *
+ * A caller reading a locator it is not allowed to see and a caller
+ * reading a locator that never existed MUST receive byte-identical
+ * errors. Anything that varies between the two — a message naming a
+ * session, a `detail` mentioning a refusal — turns the read into an
+ * oracle for the existence of other callers' renders. Rather than
+ * leaving that to the discipline of every call site, this function
+ * substitutes a constant message and drops `detail` whenever the code
+ * is `NOT_FOUND`. Diagnostics for the refused case belong in the
+ * server's own logs, which the caller cannot read.
+ *
+ * # What this function CANNOT enforce — a server obligation
+ *
+ * Substituting the message closes only the message half of the problem.
+ * The code half stays with the caller: a server that runs its
+ * authorization check late can hand this function a `NOT_MOUNTABLE` or
+ * `BLUEPRINT_UNRESOLVABLE` for a locator the caller was never entitled
+ * to read, and the resulting `-32006` reveals that the locator exists —
+ * the same oracle, reached by a different route, with a mapper behaving
+ * perfectly.
+ *
+ * So the ordering is normative, scoped to the branches that can leak:
+ * a server using this projection MUST route a refusal through its
+ * TERMINAL failure — the single answer it gives for every locator it
+ * will not resolve — and MUST NOT run a branch whose outcome VARIES
+ * WITH THE LOCATOR before the access check. Reaching one of those is
+ * itself the disclosure. Resolution work is exactly such a branch, so
+ * it happens only after the check has passed.
+ *
+ * Naming the TERMINAL rather than a specific code is deliberate. Which
+ * code the terminal carries is a property of the deployment: a server
+ * keeping durable records answers `NOT_FOUND`, one keeping none answers
+ * `NOT_SUPPORTED`, and each answers it for a refused locator and a
+ * missing one alike. Pinning this rule to `NOT_FOUND` would declare the
+ * second server non-conformant for behaving correctly. What the rule
+ * protects is that refusal and absence are the SAME answer — never
+ * which answer it is.
+ *
+ * A deployment-global answer is not a locator-varying branch.
+ * `NOT_SUPPORTED` describes the server and is identical for every
+ * locator on a server that emits it, so answering it before any
+ * per-locator work — the access check included — reveals nothing and is
+ * permitted.
+ */
+import { MCP_ERROR_CODES, } from '../types/mcp.js';
+/**
+ * The single message every `NOT_FOUND` read returns, whatever the
+ * underlying reason. Names no session, app, or caller.
+ */
+export const RESOURCE_NOT_FOUND_MESSAGE = 'Resource not found.';
+/**
+ * Switch rather than an `if` with a fallthrough on purpose: every member
+ * of the enum is named, so adding a fifth code fails to compile here
+ * until someone decides which number it carries. A default branch would
+ * have swallowed it into `MOUNT_UNAVAILABLE` silently.
+ */
+export function resourceReadErrorToJsonRpc(err) {
+    switch (err.code) {
+        case 'NOT_FOUND':
+            // Constant body — see "Why NOT_FOUND loses its message" above.
+            return {
+                code: MCP_ERROR_CODES.SESSION_NOT_FOUND,
+                message: RESOURCE_NOT_FOUND_MESSAGE,
+                data: { code: 'NOT_FOUND' },
+            };
+        case 'BLUEPRINT_UNRESOLVABLE':
+        case 'NOT_SUPPORTED':
+        case 'NOT_MOUNTABLE':
+            return {
+                code: MCP_ERROR_CODES.MOUNT_UNAVAILABLE,
+                message: err.message,
+                data: err.detail === undefined
+                    ? { code: err.code }
+                    : { code: err.code, detail: err.detail },
+            };
+    }
+}

package/dist/gadgets/resolve-app-gadgets.d.ts

@@ -1,10 +1,16 @@
 import type { GadgetDescriptor } from '../types/data-contract';
 /**
- * Resolve an app's effective gadget set: the first-party stdlib package is the
- * structural FLOOR, and `declared` (app-declared extensions) layers on top.
- * Replaces the legacy fallback-when-absent resolution that dropped the stdlib
- * package the moment an app declared any extension. `declared` wins on a
- * `package` collision; absent/empty ⇒ exactly the stdlib set; idempotent.
+ * Resolve an app's effective gadget set from its three sources, in
+ * ascending precedence: the first-party stdlib package is the
+ * structural FLOOR, `installed` (rows added through the host's install
+ * surface) layers on top of it, and `declared` (app-declared extensions
+ * from the app's own config) wins over both. Later wins on a `package`
+ * collision — declared beats installed beats floor, because the app's
+ * own config is the operator's explicit source of truth and must not be
+ * silently shadowed by an install performed elsewhere.
+ *
+ * Absent/empty sources ⇒ exactly the stdlib set; idempotent over
+ * already-resolved input.
  */
-export declare function resolveAppGadgets(declared?: readonly GadgetDescriptor[] | null): readonly GadgetDescriptor[];
+export declare function resolveAppGadgets(declared?: readonly GadgetDescriptor[] | null, installed?: readonly GadgetDescriptor[] | null): readonly GadgetDescriptor[];
 //# sourceMappingURL=resolve-app-gadgets.d.ts.map

package/dist/gadgets/resolve-app-gadgets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-app-gadgets.d.ts","sourceRoot":"","sources":["../../src/gadgets/resolve-app-gadgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO/D;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,GAC5C,SAAS,gBAAgB,EAAE,CAG7B"}
+{"version":3,"file":"resolve-app-gadgets.d.ts","sourceRoot":"","sources":["../../src/gadgets/resolve-app-gadgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO/D;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,EAC7C,SAAS,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,GAC7C,SAAS,gBAAgB,EAAE,CAS7B"}

package/dist/gadgets/resolve-app-gadgets.js

@@ -6,14 +6,25 @@ function dedupeByPackage(list) {
     return [...m.values()];
 }
 /**
- * Resolve an app's effective gadget set: the first-party stdlib package is the
- * structural FLOOR, and `declared` (app-declared extensions) layers on top.
- * Replaces the legacy fallback-when-absent resolution that dropped the stdlib
- * package the moment an app declared any extension. `declared` wins on a
- * `package` collision; absent/empty ⇒ exactly the stdlib set; idempotent.
+ * Resolve an app's effective gadget set from its three sources, in
+ * ascending precedence: the first-party stdlib package is the
+ * structural FLOOR, `installed` (rows added through the host's install
+ * surface) layers on top of it, and `declared` (app-declared extensions
+ * from the app's own config) wins over both. Later wins on a `package`
+ * collision — declared beats installed beats floor, because the app's
+ * own config is the operator's explicit source of truth and must not be
+ * silently shadowed by an install performed elsewhere.
+ *
+ * Absent/empty sources ⇒ exactly the stdlib set; idempotent over
+ * already-resolved input.
  */
-export function resolveAppGadgets(declared) {
-    if (!declared || declared.length === 0)
+export function resolveAppGadgets(declared, installed) {
+    if ((!declared || declared.length === 0) && (!installed || installed.length === 0)) {
         return STDLIB_GADGETS;
-    return dedupeByPackage([...STDLIB_GADGETS, ...declared]);
+    }
+    return dedupeByPackage([
+        ...STDLIB_GADGETS,
+        ...(installed ?? []),
+        ...(declared ?? []),
+    ]);
 }

package/dist/gadgets/stdlib-gadgets.d.ts

@@ -12,7 +12,7 @@ export declare const STDLIB_GADGETS_PACKAGE = "@ggui-ai/gadgets";
  * in `@ggui-ai/gadgets` asserts the two stay in sync, so a release-time
  * bump to the runtime package without updating this constant fails CI.
  */
-export declare const STDLIB_GADGETS_VERSION = "0.6.3";
+export declare const STDLIB_GADGETS_VERSION = "0.8.0";
 /**
  * v1 catalog of stdlib gadget descriptors. Every entry's
  * `package` defaults to {@link STDLIB_GADGETS_PACKAGE}; the

package/dist/gadgets/stdlib-gadgets.js

@@ -39,7 +39,7 @@ export const STDLIB_GADGETS_PACKAGE = '@ggui-ai/gadgets';
  * in `@ggui-ai/gadgets` asserts the two stay in sync, so a release-time
  * bump to the runtime package without updating this constant fails CI.
  */
-export const STDLIB_GADGETS_VERSION = '0.6.3';
+export const STDLIB_GADGETS_VERSION = '0.8.0';
 /**
  * v1 catalog of stdlib gadget descriptors. Every entry's
  * `package` defaults to {@link STDLIB_GADGETS_PACKAGE}; the

package/dist/index.d.ts

@@ -36,6 +36,7 @@ export * from "./envelope-adapters";
 export * from "./envelopes/builders";
 export * from "./errors/version-mismatch";
 export * from "./errors/unknown-permission-name";
+export * from "./errors/resource-read";
 export * from "./validation/contract-validator";
 export * from "./validation/cross-references";
 export * from "./validation/is-record";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAI/B,cAAc,sBAAsB,CAAC;AAOrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AAIxC,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAK5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAMlE,YAAY,EAEV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EAEZ,WAAW,EACX,eAAe,EAEf,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAI/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AAKnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAI/B,cAAc,sBAAsB,CAAC;AAOrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AAIxC,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAK5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAMlE,YAAY,EAEV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EAEZ,WAAW,EACX,eAAe,EAEf,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAI/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AAKnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AAGjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC"}

package/dist/index.js

@@ -61,6 +61,9 @@ export * from "./envelope-adapters.js";
 export * from "./envelopes/builders.js";
 export * from "./errors/version-mismatch.js";
 export * from "./errors/unknown-permission-name.js";
+// Typed `resources/read` failures → JSON-RPC. The single exit for every
+// non-mount outcome of a render-locator read.
+export * from "./errors/resource-read.js";
 export * from "./validation/contract-validator.js";
 export * from "./validation/cross-references.js";
 export * from "./validation/is-record.js";

package/dist/integrations/mcp-apps.d.ts

@@ -198,10 +198,11 @@ export interface McpAppContextSlot {
  * composes per-tick `&sinceSequence=<cursor>&limit=<N>` against this
  * base; companion to `lastSequence` which seeds the initial cursor.
  *
- * **Mode discriminator.** At least one of `{ codeUrl, kind, wsUrl-with-token }`
- * MUST be present for the iframe to mount. `kind` and `codeUrl` are
- * mutually exclusive (kind = system-card mode; codeUrl = static-component
- * mode; live-channel = absent both).
+ * **Mode discriminator.** At least one of `{ codeUrl, codeB64, kind,
+ * wsUrl-with-token }` MUST be present for the iframe to mount. `kind` is
+ * mutually exclusive with `codeUrl`/`codeB64` (kind = system-card mode;
+ * codeUrl/codeB64 = static-component mode, fetched vs inline;
+ * live-channel = absent all).
  *
  * @public
  */
@@ -244,6 +245,19 @@ export interface McpAppAiGguiRenderMeta {
     readonly validatorsUrl?: string;
     readonly codeUrl?: string;
     readonly codeHash?: string;
+    /**
+     * Base64-encoded compiled ES-module source of the component — the
+     * fetch-free twin of {@link codeUrl}. Produced by servers whose
+     * renders must mount inside hosts that forbid cross-origin fetches
+     * at the iframe CSP layer (no `connect-src`, no external
+     * `script-src`); consumed by the iframe-runtime's seed builder,
+     * which decodes it instead of fetching. MAY coexist with `codeUrl`
+     * (a consumer prefers the inline bytes; the URL remains for
+     * cache-addressable consumers); mutually exclusive with `kind`.
+     * Malformed base64 fails at decode time as a boot failure — the
+     * parser here validates shape only (non-empty string).
+     */
+    readonly codeB64?: string;
     readonly kind?: string;
 }
 /**
@@ -982,7 +996,39 @@ export interface GguiShellHtmlOptions {
      *     iframe and accept the Safari canvas-color trade-off.
      */
     readonly background?: 'surface' | 'transparent';
+    /**
+     * Full source text of the iframe-runtime bundle to embed as an
+     * inline `<script type="module">` in place of the external
+     * `src={runtimeUrl}` tag. For hosts whose iframe CSP forbids
+     * external `script-src` while permitting inline scripts — the
+     * external tag can never load there, so the shell carries the
+     * runtime in its own bytes.
+     *
+     * The source is embedded via {@link escapeInlineScript}; see its
+     * contract for the (esbuild-bundle-safe) escaping guarantee. The
+     * bootstrap's `runtimeUrl` stays REQUIRED and stays on the inlined
+     * meta — the runtime's boot validator requires it across all modes;
+     * with this option set it is informational rather than fetched.
+     */
+    readonly runtimeInlineSource?: string;
 }
+/**
+ * Make raw JS source safe to embed as the text content of an HTML
+ * `<script>` element.
+ *
+ * The HTML parser terminates script data at the first
+ * case-insensitive `</script` and shifts parse state on `<!--`; both
+ * sequences are rewritten with a backslash (`<\/script`, `<\!--`).
+ * Inside JS string, template, and regex literals — the only positions
+ * these byte sequences occur in a well-formed bundled module (a bare
+ * `<!--` outside a literal is a SyntaxError in module code; a bare
+ * `</` cannot follow an expression) — `\/` and `\!` are identity
+ * escapes, so the escaped source evaluates identically to the
+ * original.
+ *
+ * @public
+ */
+export declare function escapeInlineScript(source: string): string;
 /**
  * Build the ggui **self-contained shell** for a render bootstrap.
  *

package/dist/integrations/mcp-apps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-apps.d.ts","sourceRoot":"","sources":["../../src/integrations/mcp-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGxE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,kBAA2B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kFAAkF;;IAElF,kEAAkE;;CAE1D,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BAA0B;IACzC,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AA0CD;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAG,gBAAyB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B;;;oEAGgE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;mEAE+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;yDAGqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;yDACqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B;uEACmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,sBAAsB;IAGrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAG5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAI5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAG7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAG1B,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAG/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAMzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAMhC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,OAAO,GACZ,iCAAiC,CAuInC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAYD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC,EAAG,sBAA+B,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sCAAsC,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAEtE;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ,sCAAsC,CA2BxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;gCAC4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;iCAC6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAGzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IAE1D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAOlC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAMhF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,IAAI,CAE3B;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,YAAY,GACZ,OAAO,GACP,cAAc,CAAC;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAK1D,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,OAAO,IAAI,sBAAsB,CA2BnC;AA4BD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,0BAA0B,CAAC;AAErE,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAAsB,CAAC,MAAM,CAChD,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,2BAA2B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,6BAA6B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,UAAU,GACV,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAChB,yDAAyD;QACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;QACtC;;;;;;;;;WASG;QACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;KAChC,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KAChE,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,yDAIgB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,qBAAqB,CAoChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC;CACH;AAmCD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAkBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GACZ,mBAAmB,GAAG,SAAS,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,GACd,mBAAmB,GAAG,SAAS,CAGjC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,uCAAuC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;CACjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,mBAAmB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAiCR"}
+{"version":3,"file":"mcp-apps.d.ts","sourceRoot":"","sources":["../../src/integrations/mcp-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGxE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,kBAA2B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kFAAkF;;IAElF,kEAAkE;;CAE1D,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BAA0B;IACzC,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AA0CD;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAG,gBAAyB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B;;;oEAGgE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;mEAE+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;yDAGqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;yDACqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B;uEACmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,sBAAsB;IAGrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAG5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAI5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAG7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAG1B,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAG/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAMzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAOhC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,OAAO,GACZ,iCAAiC,CAiJnC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAYD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC,EAAG,sBAA+B,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sCAAsC,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAEtE;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ,sCAAsC,CA2BxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;gCAC4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;iCAC6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAGzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IAE1D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAOlC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAMhF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,IAAI,CAE3B;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,YAAY,GACZ,OAAO,GACP,cAAc,CAAC;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAK1D,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,OAAO,IAAI,sBAAsB,CA2BnC;AA4BD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,0BAA0B,CAAC;AAErE,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAAsB,CAAC,MAAM,CAChD,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,2BAA2B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,6BAA6B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,UAAU,GACV,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAChB,yDAAyD;QACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;QACtC;;;;;;;;;WASG;QACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;KAChC,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KAChE,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,yDAIgB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,qBAAqB,CAoChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC;CACH;AAmCD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAmBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GACZ,mBAAmB,GAAG,SAAS,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,GACd,mBAAmB,GAAG,SAAS,CAGjC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,uCAAuC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;IAChD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,mBAAmB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAyCR"}

package/dist/integrations/mcp-apps.js

@@ -177,10 +177,13 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
         (typeof ls !== 'number' || !Number.isInteger(ls) || ls < 0)) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
-    // Component-mode discriminator: codeUrl + kind mutually exclusive.
+    // Component-mode discriminator: kind mutually exclusive with
+    // codeUrl/codeB64 (the two static-component carriers may coexist —
+    // consumers prefer the inline bytes).
     const cu = s.codeUrl;
     const ck = s.kind;
     const ch = s.codeHash;
+    const cb = s.codeB64;
     if (cu !== undefined && (typeof cu !== 'string' || cu.length === 0)) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
@@ -190,7 +193,12 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
     if (ch !== undefined && (typeof ch !== 'string' || ch.length === 0)) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
-    if (typeof cu === 'string' && cu.length > 0 && typeof ck === 'string' && ck.length > 0) {
+    if (cb !== undefined && (typeof cb !== 'string' || cb.length === 0)) {
+        return { ok: false, reason: 'MALFORMED_RENDER' };
+    }
+    const hasStaticComponent = (typeof cu === 'string' && cu.length > 0) ||
+        (typeof cb === 'string' && cb.length > 0);
+    if (hasStaticComponent && typeof ck === 'string' && ck.length > 0) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
     // Contract pair — both present or both absent (or both effectively
@@ -253,6 +261,7 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
             : {}),
         ...(typeof cu === 'string' && cu.length > 0 ? { codeUrl: cu } : {}),
         ...(typeof ch === 'string' && ch.length > 0 ? { codeHash: ch } : {}),
+        ...(typeof cb === 'string' && cb.length > 0 ? { codeB64: cb } : {}),
         ...(typeof ck === 'string' && ck.length > 0 ? { kind: ck } : {}),
     };
     return { ok: true, meta: slice };
@@ -533,8 +542,8 @@ export function isGguiSubmitActionInput(value) {
  * Does this slice carry at least one MOUNT MODE discriminator?
  * Mirrors the iframe-runtime's `validateMeta`: the runtime needs
  * `runtimeUrl` PLUS one of live mode (`wsUrl` + `wsToken` together),
- * `codeUrl`, or `kind` — without one of those three the iframe has
- * nothing to mount.
+ * `codeUrl`, `codeB64`, or `kind` — without one of those the iframe
+ * has nothing to mount.
  */
 function hasMountModeDiscriminator(slice) {
     const nonEmpty = (v) => typeof v === 'string' && v.length > 0;
@@ -542,6 +551,8 @@ function hasMountModeDiscriminator(slice) {
         return true;
     if (nonEmpty(slice.codeUrl))
         return true;
+    if (nonEmpty(slice.codeB64))
+        return true;
     if (nonEmpty(slice.kind))
         return true;
     return false;
@@ -602,6 +613,27 @@ export function toolResultGguiRender(result) {
  * @public
  */
 export const GGUI_RENDER_SHELL_SURFACE = 'var(--ggui-color-surface, #1e293b)';
+/**
+ * Make raw JS source safe to embed as the text content of an HTML
+ * `<script>` element.
+ *
+ * The HTML parser terminates script data at the first
+ * case-insensitive `</script` and shifts parse state on `<!--`; both
+ * sequences are rewritten with a backslash (`<\/script`, `<\!--`).
+ * Inside JS string, template, and regex literals — the only positions
+ * these byte sequences occur in a well-formed bundled module (a bare
+ * `<!--` outside a literal is a SyntaxError in module code; a bare
+ * `</` cannot follow an expression) — `\/` and `\!` are identity
+ * escapes, so the escaped source evaluates identically to the
+ * original.
+ *
+ * @public
+ */
+export function escapeInlineScript(source) {
+    return source
+        .replace(/<\/(script)/gi, '<\\/$1')
+        .replace(/<!--/g, '<\\!--');
+}
 /**
  * Build the ggui **self-contained shell** for a render bootstrap.
  *
@@ -658,10 +690,17 @@ export function gguiShellHtml(bootstrap, options) {
     const background = options?.background === 'transparent'
         ? 'background:transparent'
         : `background-color:${GGUI_RENDER_SHELL_SURFACE}`;
+    // Inline vs external runtime: same document shape either way — the
+    // classic meta script always runs first (parse order + module
+    // deferral), so `__GGUI_META__` is populated before the runtime
+    // evaluates in both variants.
+    const runtimeTag = options?.runtimeInlineSource !== undefined
+        ? `<script type="module" data-ggui-runtime="inline">${escapeInlineScript(options.runtimeInlineSource)}</script>`
+        : `<script type="module" crossorigin="anonymous" src="${safeRuntimeUrl}"></script>`;
     return `<!doctype html>
 <html lang="en" style="${background}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="color-scheme" content="light dark"><title>ggui render</title></head>
 <body style="margin:0;${background}">
 <script>globalThis.__GGUI_META__ = ${json};</script>
-<script type="module" crossorigin="anonymous" src="${safeRuntimeUrl}"></script>
+${runtimeTag}
 </body></html>`;
 }

package/dist/schemas/data-contract.d.ts

@@ -309,8 +309,10 @@ export declare const SEMVER_PIN_RE: RegExp;
 /**
  * Hostname-only regex for `bundleHost` — the registry hostname (no
  * scheme, no path) that the server prepends `https://` to and
- * appends the canonical `/bundles/<scope>/<name>/<version>/{bundle.js,style.css}`
- * suffix to when resolving a gadget's URLs at render time.
+ * appends the canonical
+ * `/bundles/public/<scope>/<name>/<version>/{bundle.js,style.css}`
+ * suffix to when resolving a gadget's URLs at render time (the PUBLIC
+ * prefix of the registry's visibility-split bundle layout).
  *
  * Examples that pass:
  *   - `registry.ggui.ai` (spec default)
@@ -492,7 +494,7 @@ export declare const gadgetDescriptorSchema: z.ZodObject<{
  * Used by:
  *   - `createGguiGadget` SDK factory (validates wrapper specs).
  *   - `App.gadgets` registration handlers (ggui.json seed,
- *     ops_register_gadget, etc.).
+ *     `ggui gadget install`, config push).
  *
  * Same TS interface as the wire schema — the strictness lives in zod
  * refinements, not the type system.
@@ -559,27 +561,33 @@ export declare const strictGadgetDescriptorSchema: z.ZodObject<{
     typesSri: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 /**
- * Registration-ready descriptor validator.
- * {@link strictGadgetDescriptorSchema} plus the refinement that
- * every non-stdlib package MUST carry a `typesUrl`.
- *
- * Two boundaries, two schemas:
- *
- *   - `strictGadgetDescriptorSchema` — **author time**. The
- *     `createGguiGadget` SDK factory validates a wrapper spec at
- *     module load, BEFORE the build emits a `.d.ts` — `typesUrl`
- *     doesn't exist yet, so it can't be required here.
- *   - `registeredGadgetDescriptorSchema` — **registration time**.
- *     The build helper (`writeDescriptorJson`) and the `App.gadgets`
- *     registration handlers validate here, AFTER the build has
- *     emitted the `.d.ts`, computed its SRI, and stamped
- *     `typesUrl` + `typesSri` on the descriptor.
- *
- * The code-gen sandbox loads the `.d.ts` the URL points at to
+ * Types-pipeline descriptor validator — PARKED (2026-08-09 gadget
+ * catalog foundations): no catalog-serving boundary consumes it.
+ * {@link strictGadgetDescriptorSchema} plus the refinement that every
+ * non-stdlib package MUST carry a `typesUrl`.
+ *
+ * Every live catalog boundary — descriptor writes, catalog reads, and
+ * the generation-time catalog adapter — validates with
+ * `strictGadgetDescriptorSchema`, where `typesUrl` is optional:
+ * nothing in the publish→install chain stamps `typesUrl` yet, and the
+ * types fetcher already skips descriptors without one, so generation
+ * degrades gracefully to no-types codegen.
+ *
+ * The one surviving consumer is the wrapper-author build helper
+ * (`writeDescriptorJson` in `@ggui-ai/gadgets/codegen`) — the
+ * authoring-side front half of the types pipeline, where the wrapper
+ * build HAS just emitted a `.d.ts` and stamped `typesUrl` +
+ * `typesSri`, so requiring them is coherent there.
+ *
+ * The export stays because it is the already-written contract for the
+ * types-pipeline follow-up: publish stamps `typesUrl` + `typesSri` on
+ * the descriptor after the build emits the `.d.ts`, descriptor
+ * projections carry both fields through, and the generation-time
+ * catalog adapter adopts this schema as its posture again — the
+ * code-gen sandbox then loads the `.d.ts` the URL points at to
  * typecheck generated component code against the package's real
  * export signatures. Stdlib (`@ggui-ai/gadgets`) is exempt — the
- * sandbox loads its types directly. No permissive fallback:
- * pre-launch posture forces strict typing across the board.
+ * sandbox loads its types directly.
  */
 export declare const registeredGadgetDescriptorSchema: z.ZodObject<{
     exports: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{