@ggui-ai/protocol 0.6.3 → 0.8.0

package/dist/types/mcp.d.ts

@@ -1,7 +1,7 @@
 import type { z } from 'zod';
 import type { JsonObject, JsonSchema, JsonValue } from './data-contract';
 import type { GguiSession, GguiSessionStatus } from './render';
-import type { consumeInputSchema, getSessionInputSchema, handshakeInputSchema, handshakeOutputSchema, renderBlueprintInputSchema, renderCacheMarkerSchema, renderErrorCodeSchema, renderErrorSchema, renderInputSchema, renderOutputSchema, requestCredentialInputSchema, searchBlueprintsInputSchema, updateInputSchema, updateOutputSchema, declareToolCatalogOutputSchema } from '../schemas/mcp';
+import type { consumeInputSchema, getSessionInputSchema, handshakeInputSchema, handshakeOutputSchema, renderBlueprintInputSchema, renderCacheMarkerSchema, renderErrorCodeSchema, renderErrorSchema, renderInputSchema, renderOutputSchema, resourceReadErrorCodeSchema, resourceReadErrorSchema, searchBlueprintsInputSchema, updateInputSchema, updateOutputSchema, declareToolCatalogOutputSchema } from '../schemas/mcp';
 export type { GguiSessionStatus } from './render';
 /** Target screen size category for responsive layout */
 export type Screen = 'mobile' | 'tablet' | 'desktop' | 'universal';
@@ -222,11 +222,34 @@ export interface GguiSearchBlueprintsOutput {
         /** Cosine similarity score (0-1). Higher = better match. Agents can use this
          *  to decide whether to use a blueprint or generate from scratch. */
         score: number;
+        /** Present only on registry-sourced entries — advisory candidates
+         *  appended after local results, never auto-mounted. */
+        origin?: 'registry';
+        /** Registry artifact id (`@scope/name`) — registry entries only. */
+        artifactId?: string;
+        /** Registry artifact version — registry entries only. */
+        version?: string;
+        /** MCP tool bindings the artifact declares (publisher claims, not
+         *  endorsements by the named server) — registry entries only. */
+        mcpTools?: ReadonlyArray<{
+            server?: string;
+            tool: string;
+        }>;
+        /** Publisher-scope verification label — registry entries only. */
+        scopeVerification?: 'verified' | 'unverified';
     }>;
     /** Total matches found */
     total: number;
     /** The query that was searched */
     query: string;
+    /**
+     * Sources consulted but skipped this call (e.g. registry timeout).
+     * Present only when a source degraded; the tool call still succeeds.
+     */
+    degradedSources?: ReadonlyArray<{
+        source: 'registry';
+        reason: 'unreachable' | 'timeout' | 'invalid_response';
+    }>;
 }
 /**
  * Input for ggui_render_blueprint tool — renders a specific blueprint.
@@ -259,28 +282,6 @@ export interface GguiRenderBlueprintOutput {
      */
     contentType: string;
 }
-/**
- * Input for ggui_request_credential — request OAuth consent from the user.
- * Called by agents when MCP proxy returns 401 (credential_required).
- * Derived from `requestCredentialInputSchema`.
- */
-export type GguiRequestCredentialInput = z.infer<typeof requestCredentialInputSchema>;
-/**
- * Output from ggui_request_credential — consent result.
- */
-export interface GguiRequestCredentialOutput {
-    /** Whether the user granted consent */
-    granted: boolean;
-    /** Grant mode (once or always) — only present when granted=true */
-    mode?: 'once' | 'always';
-    /** Service display info */
-    service?: {
-        name: string;
-        icon: string;
-    };
-    /** Reason for denial (timeout, user denied, error) */
-    reason?: string;
-}
 /**
  * MCP JSON-RPC request.
  * Generic `TParams` defaults to {@link JsonObject} for the request parameters.
@@ -398,6 +399,19 @@ export type RenderErrorCode = z.infer<typeof renderErrorCodeSchema>;
  * tool result is `isError: true`. Derived from {@link renderErrorSchema}.
  */
 export type RenderError = z.infer<typeof renderErrorSchema>;
+/**
+ * Canonical failure code for a `resources/read` on a render locator
+ * (SPEC §7.9 Plane 1). Derived from
+ * {@link resourceReadErrorCodeSchema} — the schema is the source of
+ * truth. Distinct from {@link RenderErrorCode}, which classifies a
+ * `ggui_render` tool call rather than a resource read.
+ */
+export type ResourceReadErrorCode = z.infer<typeof resourceReadErrorCodeSchema>;
+/**
+ * Failure shape for a `resources/read` that cannot return a mount.
+ * Derived from {@link resourceReadErrorSchema}.
+ */
+export type ResourceReadError = z.infer<typeof resourceReadErrorSchema>;
 export type GguiUpdateInput = z.infer<typeof updateInputSchema>;
 export type GguiUpdateOutput = z.infer<typeof updateOutputSchema>;
 /**
@@ -416,8 +430,10 @@ export type DeclareToolCatalogOutput = z.infer<typeof declareToolCatalogOutputSc
  * JSON-RPC error. `PRODUCTION_FAILED` is now an in-result tool-error
  * code on the `ggui_render` failure envelope (SPEC §7.9 Plane 3 /
  * §7.1; see {@link RenderErrorCode}). The slot stays unassigned so a
- * future canonical code can't silently collide with stale consumers —
- * new canonical codes come at `-32006` onwards.
+ * future canonical code can't silently collide with stale consumers.
+ *
+ * `-32006` is assigned to `MOUNT_UNAVAILABLE`; new canonical codes come
+ * at `-32007` onwards.
  */
 export declare const MCP_ERROR_CODES: {
     readonly PARSE_ERROR: -32700;
@@ -429,6 +445,21 @@ export declare const MCP_ERROR_CODES: {
     readonly SESSION_NOT_FOUND: -32002;
     readonly APP_NOT_FOUND: -32003;
     readonly CAPABILITY_DENIED: -32005;
+    /**
+     * A `resources/read` identified the resource but cannot return a
+     * mount for it — the component behind it is gone, the server keeps no
+     * durable record to restore from, or nothing can deliver it. See
+     * {@link ResourceReadErrorCode} for the classification carried on
+     * `error.data.code`.
+     *
+     * Deliberately NOT `INTERNAL_ERROR`. These outcomes are deterministic
+     * and correctly served: the server is working, and retrying the same
+     * read will fail the same way. Reporting them as `-32603` would tell
+     * hosts the server malfunctioned and invite a retry that cannot
+     * succeed. A read for a resource that does not exist (or that the
+     * caller may not see) is `SESSION_NOT_FOUND` instead.
+     */
+    readonly MOUNT_UNAVAILABLE: -32006;
 };
 /**
  * Platform-specific error codes (-32010 range).

package/dist/types/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/types/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,8BAA8B,EAC/B,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAQlD,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,GAAG,SAAS;IACjD,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,EAAE,QAAQ,CAAC;IAElB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAM/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;6EACyE;IACzE,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,CAAC;KAC1E,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,2BAA2B,CACnC,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,+CAA+C;IAC/C,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACrF,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB;6EACqE;QACrE,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,0BAA0B,CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,4BAA4B,CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,2BAA2B;IAC3B,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,GAAG,UAAU;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,OAAO,GAAG,SAAS;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAEF,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAUD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;CAWlB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;CAMvB,CAAC"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/types/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,iBAAiB,EACjB,kBAAkB,EAClB,8BAA8B,EAC/B,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAQlD,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX;;;;OAIG;IACH,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa,CAAC,QAAQ,GAAG,SAAS;IACjD,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,EAAE,QAAQ,CAAC;IAElB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAM/C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;6EACyE;IACzE,MAAM,EAAE,iBAAiB,CAAC;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,mBAAmB,EAAE,qBAAqB,CAAC;KAC1E,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,2BAA2B,CACnC,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,+CAA+C;IAC/C,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,OAAO,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACrF,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB;6EACqE;QACrE,KAAK,EAAE,MAAM,CAAC;QACd;gEACwD;QACxD,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,oEAAoE;QACpE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,yDAAyD;QACzD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;yEACiE;QACjE,QAAQ,CAAC,EAAE,aAAa,CAAC;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC5D,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;KAC/C,CAAC,CAAC;IACH,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,eAAe,CAAC,EAAE,aAAa,CAAC;QAC9B,MAAM,EAAE,UAAU,CAAC;QACnB,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,kBAAkB,CAAC;KACxD,CAAC,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,0BAA0B,CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU,CAAC,OAAO,GAAG,UAAU;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,OAAO,GAAG,SAAS;IAC9C,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAEF,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,QAAQ,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC/B;AAUD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;IAW1B;;;;;;;;;;;;;OAaG;;CAEK,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;CAMvB,CAAC"}

package/dist/types/mcp.js

@@ -9,8 +9,10 @@
  * JSON-RPC error. `PRODUCTION_FAILED` is now an in-result tool-error
  * code on the `ggui_render` failure envelope (SPEC §7.9 Plane 3 /
  * §7.1; see {@link RenderErrorCode}). The slot stays unassigned so a
- * future canonical code can't silently collide with stale consumers —
- * new canonical codes come at `-32006` onwards.
+ * future canonical code can't silently collide with stale consumers.
+ *
+ * `-32006` is assigned to `MOUNT_UNAVAILABLE`; new canonical codes come
+ * at `-32007` onwards.
  */
 export const MCP_ERROR_CODES = {
     PARSE_ERROR: -32700,
@@ -23,6 +25,21 @@ export const MCP_ERROR_CODES = {
     SESSION_NOT_FOUND: -32002,
     APP_NOT_FOUND: -32003,
     CAPABILITY_DENIED: -32005,
+    /**
+     * A `resources/read` identified the resource but cannot return a
+     * mount for it — the component behind it is gone, the server keeps no
+     * durable record to restore from, or nothing can deliver it. See
+     * {@link ResourceReadErrorCode} for the classification carried on
+     * `error.data.code`.
+     *
+     * Deliberately NOT `INTERNAL_ERROR`. These outcomes are deterministic
+     * and correctly served: the server is working, and retrying the same
+     * read will fail the same way. Reporting them as `-32603` would tell
+     * hosts the server malfunctioned and invite a retry that cannot
+     * succeed. A read for a resource that does not exist (or that the
+     * caller may not see) is `SESSION_NOT_FOUND` instead.
+     */
+    MOUNT_UNAVAILABLE: -32006,
 };
 /**
  * Platform-specific error codes (-32010 range).

package/dist/validation/hygiene-rules.d.ts

@@ -196,8 +196,8 @@ export declare function checkGadgetHookNames(contract: DataContract): HygieneWar
 export declare function checkDuplicateGadgetHooks(contract: DataContract): HygieneWarning[];
 /**
  * Registry-side catalog lint — runs on an `App.gadgets` descriptor
- * array at registration time (ggui.json load, `ops_register_gadget`,
- * registry install). Pure function; returns warnings. The caller
+ * array at registration time (ggui.json load, config push,
+ * `ggui gadget install`). Pure function; returns warnings. The caller
  * (registration handler) treats any code in
  * {@link FATAL_CATALOG_LINT_CODES} as a hard reject.
  *

package/dist/validation/hygiene-rules.js

@@ -381,8 +381,8 @@ export function checkDuplicateGadgetHooks(contract) {
 }
 /**
  * Registry-side catalog lint — runs on an `App.gadgets` descriptor
- * array at registration time (ggui.json load, `ops_register_gadget`,
- * registry install). Pure function; returns warnings. The caller
+ * array at registration time (ggui.json load, config push,
+ * `ggui gadget install`). Pure function; returns warnings. The caller
  * (registration handler) treats any code in
  * {@link FATAL_CATALOG_LINT_CODES} as a hard reject.
  *

package/dist/version.d.ts

@@ -6,6 +6,278 @@
  * schema change; the most recent change anchors {@link PROTOCOL_VERSION}.
  *
  * --------------------------------------------------------------------
+ * MCP tool bindings & discovery (2026-08-10, additive, pre-launch,
+ * ggui#259). Artifacts gain an optional MCP tool-binding list and
+ * registry search gains a tool dimension, connecting the two
+ * namespaces the registry serves: signed UI artifacts and the MCP
+ * tools they render. SPEC §7.7.4.1 is the normative home.
+ *
+ *   tb1. **`mcpTools` on both manifest kinds**
+ *      (`@ggui-ai/artifact-manifest`): 1–16 `{server?, tool}`
+ *      entries, charset `/^[A-Za-z0-9_.-]{1,128}$/`,
+ *      exact-duplicate `(server, tool)` pairs rejected with the
+ *      existing `manifest_invalid` code. Declared wins entirely;
+ *      a blueprint without the field derives bare `{tool}` entries
+ *      from the union of its contract's per-prop `sourceTool` and
+ *      `streamSpec` `source.tool` names (`resolveMcpToolBindings`,
+ *      marked `derived`). Bindings are search metadata only — they
+ *      never enter contract canonicalization or `blueprintKey`.
+ *      NOTE: manifest schemas are strict-rooted, so an OLDER
+ *      manifest parser REJECTS a manifest file carrying the field —
+ *      the optionality guarantee below is wire-response-scoped
+ *      (search/read), not manifest-file-scoped.
+ *
+ *   tb2. **Registry wire additions** (`@ggui-ai/registry-core`),
+ *      all optional: `SearchResultEntry` += `mcpTools?`,
+ *      `mcpToolsSource?: 'declared' | 'derived'`,
+ *      `scopeVerification?: 'verified' | 'unverified'`,
+ *      `verifiedDomain?`; the single-version read response += the
+ *      same two verification fields; search input += `tool?` /
+ *      `server?` exact filters (AND-composed with the existing
+ *      filters, `matchesMcpToolFilters` semantics; an invalid
+ *      charset value is the existing `invalid_request` 400).
+ *      Pre-existing consumers see `undefined` and behave as before.
+ *
+ *   tb3. **Agent surface** (`@ggui-ai/mcp-server-handlers`):
+ *      `ggui_search_blueprints` gains an opt-in `registry` source
+ *      merged after the local sources; unreachable / timeout /
+ *      unparseable-body answers degrade typed —
+ *      `degradedSources: [{source: 'registry', reason:
+ *      'unreachable' | 'timeout' | 'invalid_response'}]` — never a
+ *      tool failure, never a thrown error.
+ *
+ * Conformance-kit verdict: additive, minor-intent while `draft-`,
+ * so PROTOCOL_VERSION is unchanged — no WS envelope moved; the
+ * change is confined to the manifest, registry HTTP, and MCP
+ * tool-result surfaces. The new `binding-conformance` catalog in
+ * `@ggui-ai/protocol-conformance` (`runBindingResolutionCases` /
+ * `runBindingFilterCases`) arbitrates resolution precedence and
+ * filter semantics; search/read response optionality is pinned by
+ * registry-core unit tests, because the strict-rooted manifest
+ * schema makes a manifest-file optionality fixture false (tb1).
+ *
+ * Package version — the classification is MADE here, not deferred:
+ * MINOR for the `@ggui-ai/*` wave, additive under the version
+ * policy's minor rule (every fixture that passed against the
+ * current wave still passes; the delta is new surface), pre-1.0
+ * and pre-launch. FOUR packages carry minor-class changes into
+ * that wave — `@ggui-ai/artifact-manifest` (the field + resolver),
+ * `@ggui-ai/registry-core` (wire + filters),
+ * `@ggui-ai/mcp-server-handlers` (the registry source), and
+ * `@ggui-ai/protocol-conformance` (the catalog that decides them).
+ * Only the mechanical write is deferred: every `@ggui-ai/*`
+ * package carries ONE wave version, so the release owner takes all
+ * four bumps together at the next wave cut.
+ * --------------------------------------------------------------------
+ * Typed `resources/read` failures (2026-08-09, additive, pre-launch,
+ * ggui#430). A read of a render locator
+ * (`ui://ggui/render/{sessionId}/{blueprintKey}`) gains a closed failure
+ * union and a canonical JSON-RPC number, so the read has exactly two
+ * exits: a live mount, or a typed error. Before this, an unresolvable
+ * read returned a SUCCESS-shaped result carrying a loading shell that
+ * would never come alive — the same class of defect ruling B fixed for
+ * `ggui_render`, on the resource surface instead of the tool surface.
+ *
+ *   rr1. **New closed enum `ResourceReadErrorCode`** = NOT_FOUND |
+ *      BLUEPRINT_UNRESOLVABLE | NOT_SUPPORTED | NOT_MOUNTABLE, with
+ *      `resourceReadErrorSchema {code, message, detail?}`. Deliberately
+ *      NOT an extension of `renderErrorCodeSchema` (rb2): that enum
+ *      classifies a `ggui_render` tool call that ran and failed and
+ *      rides IN the tool result; this one classifies a resource read
+ *      and rides ON a JSON-RPC error. Two surfaces, two closed enums,
+ *      same UPPER_SNAKE house style.
+ *
+ *   rr2. **`-32006 MOUNT_UNAVAILABLE` claimed** — the first draw from
+ *      the `-32006` onwards range that rb4 reserved when it retired
+ *      `-32004`. The next free canonical slot is `-32007`. It covers
+ *      BLUEPRINT_UNRESOLVABLE / NOT_SUPPORTED / NOT_MOUNTABLE.
+ *      Deliberately NOT `INTERNAL_ERROR`: a component that is gone, a
+ *      server that keeps no durable record, and a render with no
+ *      delivery channel are all deterministic outcomes of a correctly
+ *      functioning server, and `-32603` would report a malfunction and
+ *      invite a retry that cannot succeed. The fine-grained class rides
+ *      on `error.data.code`.
+ *
+ *   rr3. **NOT_FOUND maps to `-32002`**, which MCP uses for a missing
+ *      resource and which this table already assigns to a missing
+ *      session — for a locator keyed by `sessionId` those are one
+ *      condition, not two.
+ *
+ *   rr4. **NOT_FOUND carries a CONSTANT body.** The mapper substitutes
+ *      a fixed message and drops `detail`, so a read refused by the
+ *      authorization check and a read of a locator that never existed
+ *      are byte-identical on the wire. Anything that varies between the
+ *      two makes the read an existence oracle for other callers'
+ *      renders. The mapper closes the message half; the ordering half
+ *      is a server obligation — a branch whose outcome VARIES WITH THE
+ *      LOCATOR MUST NOT run before the authorization check, because
+ *      reaching one tells the caller the locator resolved for somebody.
+ *      A deployment-global answer is not such a branch: NOT_SUPPORTED
+ *      is identical for every locator on the server that emits it, so
+ *      answering it early discloses nothing. (Scoped this way in the
+ *      same slice the conformance catalog landed, which grades the
+ *      indistinguishability the rule exists to produce and deliberately
+ *      does not grade ordering. The unscoped form would have declared
+ *      a correct substrate-less server non-conformant.)
+ *
+ *   rr5. **A read that cannot mount is now an ERROR, not a
+ *      success-shaped shell.** This is the observable wire change, and
+ *      it is what rr1–rr4 exist to give a shape to. Every failure
+ *      branch of the render-locator read used to return a result whose
+ *      `contents` carried a loading shell — a page that waited forever
+ *      for a render that was never coming. Those branches now throw,
+ *      and the transport serializes them as the JSON-RPC errors above;
+ *      the shell builder behind them is DELETED rather than left
+ *      unreferenced, so no branch can produce one. Reads that CAN
+ *      mount are unchanged byte for byte. A host that treated any
+ *      successful read as mountable was right only by accident and is
+ *      now right by construction; a host that never handled the error
+ *      exit at all now has one to handle. The invariant this buys is
+ *      the whole point: any successful `contents` result IS a live
+ *      mount.
+ *
+ * Conformance-kit verdict: additive, minor-intent while `draft-`, so
+ * PROTOCOL_VERSION is unchanged — no WS envelope moved, and the change
+ * is confined to the MCP resource surface (same reasoning as rb's stamp
+ * adjudication).
+ *
+ * The kit arbitrates this surface now. `resource-read-conformance` in
+ * `@ggui-ai/protocol-conformance` binds the `resources/read` method:
+ * `runResourceReadConformance()` drives an adopter-supplied scenario
+ * driver through a 12-case catalog and grades the two numbers (rr1–rr3),
+ * the closed classification on `error.data.code`, NOT_FOUND's absent
+ * `detail` and constant message (rr4), the refused-equals-missing byte
+ * identity across every server shape, and rr5's invariant on a live row
+ * and a re-minted one alike. What it does NOT arbitrate is `tools/call`:
+ * no driver is bound to that method, so the `ggui_consume` and
+ * `ggui_emit` obligations stay kit-invisible and this entry closes
+ * nothing for them.
+ *
+ * Because that catalog exists and ships, the package-version decision
+ * below is stated outright rather than made conditional on a driver
+ * that has yet to arrive.
+ *
+ * Five things stay ungraded on purpose and MUST NOT be read as
+ * obligations: the ORDER in which a substrate-less server answers
+ * NOT_SUPPORTED; `detail` wording on any code; the NOT_FOUND message
+ * literal (its constancy is the obligation, not its prose); `-32603`
+ * message text; and the NUMBER a URI naming no locator receives —
+ * including negatively, since MCP itself assigns the resource-missing
+ * number to a read of a URI a server does not serve, and banning it
+ * would make every framework that leans on that assignment
+ * non-conformant. On that last one the law is classification-only:
+ * such a URI MUST NOT carry one of the four codes on `error.data.code`.
+ *
+ * Package version — the classification is MADE here, not deferred.
+ * The resource-read surface and the new canonical code are a MINOR for
+ * the `@ggui-ai/*` wave: additive under the version policy's minor rule
+ * (every fixture that passed against the current wave still passes; the
+ * delta is new surface), pre-1.0 and pre-launch. TWO packages carry
+ * minor-class changes into that wave — `@ggui-ai/protocol` (the closed
+ * enum, the canonical number, the projection) and
+ * `@ggui-ai/protocol-conformance` (the catalog that decides them).
+ *
+ * What is deferred is only the mechanical write. Every `@ggui-ai/*`
+ * package carries ONE wave version, and a wave cut moves all of them to
+ * it in a single commit — no package's number can move on its own — so
+ * the release owner takes both bumps together at the next cut. One
+ * deferral, one owner, two named packages. Nothing about what the
+ * change IS remains open.
+ *
+ * #457 (2026-08-10): the substrate stores' `durability` declaration —
+ * a MINOR surface that SHIPPED IN 0.7.0 (the wave was published from
+ * main after it landed; an earlier revision of this note deferred it
+ * to the next cut, which the publish overtook). `@ggui-ai/mcp-server-core`
+ * adds a required member to three published ports (pre-launch
+ * no-compat: every in-tree impl moved in the same slice; out-of-tree
+ * implementors add one literal) and `@ggui-ai/protocol-conformance`
+ * adds the `all-ephemeral` wiring arm + its fusion case (additive —
+ * the catalog's public-API additive-only rule holds; the SPEC §7.10.4
+ * amendment defines "durable" as declared, which was previously
+ * undefined, not different).
+ *
+ * On the kit's half, one thing is worth saying plainly rather than
+ * calling its delta "purely additive": `parseCase` rejects unknown
+ * keys, so a case file with a typo'd key throws instead of being
+ * quietly ignored. That strictness is free on a sub-module with no
+ * prior published version — nothing can be built against it yet — but
+ * extending it over the existing fixture catalog would be a MAJOR, not
+ * a minor, and must be adjudicated as one.
+ *
+ * #471 (2026-08-10): the fetch-free delivery surface — a MINOR for the
+ * `@ggui-ai/protocol` wave, deferred to the next cut under the same
+ * one-wave-version rule as above. Three additive pieces, one shared
+ * motivation (hosts whose iframe CSP forbids every URL-scheme load
+ * while permitting inline scripts):
+ *
+ *   if1. **`McpAppAiGguiRenderMeta.codeB64`** — optional base64
+ *      compiled component source, the fetch-free twin of `codeUrl`
+ *      (coexists with it; exclusive with `kind`). Every envelope that
+ *      parsed before parses identically; the parser's new rejection
+ *      arm (`codeB64` + `kind` both set) rejects a shape no producer
+ *      ever emitted. `hasMountModeDiscriminator` widens PERMISSIVELY
+ *      (a codeB64-only slice becomes mountable — previously
+ *      undefined, not different).
+ *
+ *   if2. **`GguiShellHtmlOptions.runtimeInlineSource` +
+ *      `escapeInlineScript`** — host-helper additions; the default
+ *      (external `<script src>`) emission is byte-unchanged.
+ *
+ *   if3. Consumer-side: `@ggui-ai/design` gains the inline-exec
+ *      module (new exports only); `@ggui-ai/mcp-server` gains the
+ *      `mcpApps.inlineRuntimeShell` opt-in (default OFF — the served
+ *      static shell is byte-unchanged for every existing mount) and
+ *      `registerGguiRenderResource` gains a trailing optional
+ *      CSP-fallback parameter (existing positional calls unchanged).
+ *
+ * Conformance-kit verdict: no fixture pins the render slice's closed
+ * field set (the slice is verbatim-carry by design — the host-helper
+ * suite's "unknown future fields ride along" case is the governing
+ * posture), so the additive field breaks nothing. PROTOCOL_VERSION
+ * unchanged — no wire frame changed shape.
+ *
+ * --------------------------------------------------------------------
+ * Credential-broker surface retired (2026-08-08, BREAKING, pre-launch,
+ * ggui#436). The `system` frame's auth vocabulary and the
+ * `ggui_request_credential` tool leave the protocol entirely.
+ * Credential ceremony for an agent's own MCP tools is the AGENT HOST's
+ * responsibility — it owns the runtime, the user relationship, and the
+ * consent chrome. ggui's wire deliberately carries no auth frames.
+ *
+ *   rc1. **`SystemPayload` / `SystemAction` deleted**, and `'system'`
+ *      leaves `WebSocketMessageType` + the `WebSocketMessage` union.
+ *      The vocabulary was `auth_required` / `credential_ready` and
+ *      nothing else — with the broker gone there is no other action to
+ *      carry, so the frame class dies with it rather than surviving as
+ *      an empty discriminator.
+ *
+ *   rc2. **`requestCredentialInputSchema` /
+ *      `requestCredentialInputShape` / `GguiRequestCredentialInput` /
+ *      `GguiRequestCredentialOutput` deleted.** The only handler that
+ *      ever implemented the tool (the hosted pod's
+ *      `tools/request-credential.ts`) was deleted the day before in
+ *      the same issue: it pushed its consent overlay through an API
+ *      Gateway WebSocket leg the pod never had, so the tool could not
+ *      function. `ggui_request_credential` is appended to the
+ *      mcp-server RETIRED_TOOL_NAMES regression lock.
+ *
+ *   rc3. **Client lanes deleted, not stubbed.** `@ggui-ai/react`'s
+ *      `GguiRenderProps.onSystemMessage` (+ its dispatch arm),
+ *      `@ggui-ai/iframe-runtime`'s `channels/system.ts` handler and
+ *      its `auth-required` `ObservabilityEvent` arm
+ *      (`AuthRequiredEvent`), and both SDKs' `SystemPayload` /
+ *      `SystemAction` re-exports go. The observability event was a
+ *      projection of `SystemPayload` — with no payload to project it
+ *      has no producer.
+ *
+ * Conformance-kit verdict: no kit fixture asserted the `system` frame
+ * and no first-party server ever emitted one (the pod's broker was the
+ * only would-be emitter and it was pre-transport dead) — same posture
+ * as the 2026-07-27 dead-vocabulary entry. PROTOCOL_VERSION unchanged;
+ * rolling it would force a lockstep UPGRADE_REQUIRED break on every
+ * pinned client to version a frame class that never flew.
+ *
+ * --------------------------------------------------------------------
  * Ops-tool console-parity slice (2026-07-29, BREAKING on the ops
  * surface only, pre-launch, ggui#400). Rename ledger — same treatment
  * as the `ggui_ops_register_blueprint` → `ggui_ops_save_library_blueprint`

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAq7EG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,qBAAmB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAErD,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqsFG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,uBAAuB,qBAAmB,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAErD,CAAC"}