@ggui-ai/protocol 0.8.0 → 0.10.0

package/dist/gadgets/stdlib-gadgets.d.ts

@@ -12,7 +12,7 @@ export declare const STDLIB_GADGETS_PACKAGE = "@ggui-ai/gadgets";
  * in `@ggui-ai/gadgets` asserts the two stay in sync, so a release-time
  * bump to the runtime package without updating this constant fails CI.
  */
-export declare const STDLIB_GADGETS_VERSION = "0.8.0";
+export declare const STDLIB_GADGETS_VERSION = "0.10.0";
 /**
  * v1 catalog of stdlib gadget descriptors. Every entry's
  * `package` defaults to {@link STDLIB_GADGETS_PACKAGE}; the

package/dist/gadgets/stdlib-gadgets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdlib-gadgets.d.ts","sourceRoot":"","sources":["../../src/gadgets/stdlib-gadgets.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,QAAQ,CAAC,gBAAgB,CAAC,EAkH/D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAUnD,CAAC"}
+{"version":3,"file":"stdlib-gadgets.d.ts","sourceRoot":"","sources":["../../src/gadgets/stdlib-gadgets.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AAEzD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,WAAW,CAAC;AAE/C;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,QAAQ,CAAC,gBAAgB,CAAC,EAkH/D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAUnD,CAAC"}

package/dist/gadgets/stdlib-gadgets.js

@@ -39,7 +39,7 @@ export const STDLIB_GADGETS_PACKAGE = '@ggui-ai/gadgets';
  * in `@ggui-ai/gadgets` asserts the two stay in sync, so a release-time
  * bump to the runtime package without updating this constant fails CI.
  */
-export const STDLIB_GADGETS_VERSION = '0.8.0';
+export const STDLIB_GADGETS_VERSION = '0.10.0';
 /**
  * v1 catalog of stdlib gadget descriptors. Every entry's
  * `package` defaults to {@link STDLIB_GADGETS_PACKAGE}; the

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export * from "./schemas/data-contract";
 export * from "./schemas/app-theme";
 export { canonicalizeContracts, canonicalizeValue } from "./registry/canonicalize-contract";
 export { summarizeContract } from "./registry/summarize-contract";
+export { buildEnforcedPropsSchema, canonicalPropsSchemaBytes, classifyPropsSchemaProfile, GRAMMAR_SAFE_FORMATS, GRAMMAR_SAFE_KEYWORDS, type PropsSchemaProfile, } from "./validation/enforced-props-schema";
 export type { TextBlock, ToolUseBlock, ToolResultBlock, ContentBlock, InvokeEvent, InvokeErrorCode, InvokeTurn, } from "./types/invoke";
 export * from "./types/llm";
 export * from "./types/llm-route";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAI/B,cAAc,sBAAsB,CAAC;AAOrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AAIxC,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAK5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAMlE,YAAY,EAEV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EAEZ,WAAW,EACX,eAAe,EAEf,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAI/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AAKnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AAGjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAI/B,cAAc,sBAAsB,CAAC;AAOrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AAIxC,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAK5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAOlE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,kBAAkB,GACxB,MAAM,oCAAoC,CAAC;AAM5C,YAAY,EAEV,SAAS,EACT,YAAY,EACZ,eAAe,EACf,YAAY,EAEZ,WAAW,EACX,eAAe,EAEf,UAAU,GACX,MAAM,gBAAgB,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAI/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AAKnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AAGjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,qCAAqC,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC"}

package/dist/index.js

@@ -32,6 +32,13 @@ export { canonicalizeContracts, canonicalizeValue } from "./registry/canonicaliz
 // as `./content-hash`. Server consumers import from the subpath:
 //   import { blueprintKey } from '@ggui-ai/protocol/blueprint-key';
 export { summarizeContract } from "./registry/summarize-contract.js";
+// Enforced props schema — the schema-precise render wire artifact
+// (P1): the exact schema ggui_render enforces for a handshake, in
+// emission form, plus the grammar-safe profile classifier and the
+// RFC 8785 canonical serializer. Browser-safe (pure). The sha256
+// hash helper is server-only at `@ggui-ai/protocol/props-schema-hash`
+// (node:crypto — same convention as `./blueprint-key`).
+export { buildEnforcedPropsSchema, canonicalPropsSchemaBytes, classifyPropsSchemaProfile, GRAMMAR_SAFE_FORMATS, GRAMMAR_SAFE_KEYWORDS, } from "./validation/enforced-props-schema.js";
 export * from "./types/llm.js";
 export * from "./types/llm-route.js";
 export * from "./types/interface-context.js";

package/dist/integrations/epoch-uri.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Epoch-pinned resource URIs (#483).
+ *
+ * A session's history is a linear chain of epoch-numbered render
+ * records: `ggui_render` mints epoch 0; every `ggui_update` advances
+ * the head by one (`ggui_amend` never does). The epoch rides the
+ * resource URI:
+ *
+ *   - **Bare URI** (`ui://ggui/render/<sessionId>[/<contractKey>]`) —
+ *     the LIVE HEAD. Reads track the session's current state.
+ *   - **Pinned URI** (`…#N`) — the immutable epoch-N record. Reads
+ *     MUST serve identical content forever (conformance-pinned).
+ *
+ * This module is the ONE encoding seam: every producer (result-meta
+ * stamping, resource templates) and consumer (iframe-runtime latch,
+ * pinned reads) routes through these two functions, so the encoding
+ * (URI fragment today) can flip to a path segment after the
+ * host-transport probe without touching call sites. Do not hand-roll
+ * `#${n}` anywhere else.
+ */
+export declare const EPOCH_URI_SEPARATOR = "#";
+/**
+ * Compose the pinned URI for an epoch. Throws on non-integer or
+ * negative epochs — a producer stamping a bogus epoch is a bug that
+ * must be loud, not a tolerable wire variant.
+ */
+export declare function composeEpochUri(baseUri: string, epoch: number): string;
+export interface ParsedEpochUri {
+    /** The URI with any epoch pin removed — the live-head address. */
+    readonly baseUri: string;
+    /** Present iff the URI carried a well-formed epoch pin. */
+    readonly epoch?: number;
+}
+/**
+ * Tolerant read — never throws. A malformed suffix (non-canonical
+ * number, leading zeros, empty) is NOT an epoch: the whole input
+ * passes through as `baseUri` so an exotic-but-legal URI is never
+ * mangled by mis-parsing. Canonical epochs only: `0` or a digit
+ * string with no leading zero.
+ */
+export declare function parseEpochUri(uri: string): ParsedEpochUri;
+//# sourceMappingURL=epoch-uri.d.ts.map

package/dist/integrations/epoch-uri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"epoch-uri.d.ts","sourceRoot":"","sources":["../../src/integrations/epoch-uri.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAMzD"}

package/dist/integrations/epoch-uri.js

@@ -0,0 +1,48 @@
+/**
+ * Epoch-pinned resource URIs (#483).
+ *
+ * A session's history is a linear chain of epoch-numbered render
+ * records: `ggui_render` mints epoch 0; every `ggui_update` advances
+ * the head by one (`ggui_amend` never does). The epoch rides the
+ * resource URI:
+ *
+ *   - **Bare URI** (`ui://ggui/render/<sessionId>[/<contractKey>]`) —
+ *     the LIVE HEAD. Reads track the session's current state.
+ *   - **Pinned URI** (`…#N`) — the immutable epoch-N record. Reads
+ *     MUST serve identical content forever (conformance-pinned).
+ *
+ * This module is the ONE encoding seam: every producer (result-meta
+ * stamping, resource templates) and consumer (iframe-runtime latch,
+ * pinned reads) routes through these two functions, so the encoding
+ * (URI fragment today) can flip to a path segment after the
+ * host-transport probe without touching call sites. Do not hand-roll
+ * `#${n}` anywhere else.
+ */
+export const EPOCH_URI_SEPARATOR = '#';
+/**
+ * Compose the pinned URI for an epoch. Throws on non-integer or
+ * negative epochs — a producer stamping a bogus epoch is a bug that
+ * must be loud, not a tolerable wire variant.
+ */
+export function composeEpochUri(baseUri, epoch) {
+    if (!Number.isInteger(epoch) || epoch < 0) {
+        throw new Error(`epoch must be a non-negative integer, got ${epoch}`);
+    }
+    return `${baseUri}${EPOCH_URI_SEPARATOR}${epoch}`;
+}
+/**
+ * Tolerant read — never throws. A malformed suffix (non-canonical
+ * number, leading zeros, empty) is NOT an epoch: the whole input
+ * passes through as `baseUri` so an exotic-but-legal URI is never
+ * mangled by mis-parsing. Canonical epochs only: `0` or a digit
+ * string with no leading zero.
+ */
+export function parseEpochUri(uri) {
+    const idx = uri.lastIndexOf(EPOCH_URI_SEPARATOR);
+    if (idx < 0)
+        return { baseUri: uri };
+    const suffix = uri.slice(idx + 1);
+    if (!/^(0|[1-9][0-9]*)$/.test(suffix))
+        return { baseUri: uri };
+    return { baseUri: uri.slice(0, idx), epoch: Number(suffix) };
+}

package/dist/integrations/mcp-apps.d.ts

@@ -49,6 +49,7 @@ export declare const GGUI_RENDER_RESOURCE_URI: "ui://ggui/render";
  * render them as plain HTML.
  */
 export declare const GGUI_RENDER_RESOURCE_MIME: "text/html;profile=mcp-app";
+export { composeEpochUri, parseEpochUri, EPOCH_URI_SEPARATOR, type ParsedEpochUri, } from './epoch-uri.js';
 /**
  * The single `_meta.ui.resourceUri` value ggui uses across every MCP Apps
  * host surface. Exposed as a named constant so tool-declaration code,
@@ -192,11 +193,44 @@ export interface McpAppContextSlot {
  * WS auth credential the iframe threads on the WebSocket upgrade as
  * `?wsToken=<encoded>` and inside `SubscribePayload.wsToken`.
  *
- * **Polling-fallback URL.** When WS is blocked at the host CSP layer
- * the iframe polls `pollingUrl` (server-stamped post-Phase-B as
- * `/api/sessions/<sessionId>/events?wsToken=<token>`). The iframe-runtime
- * composes per-tick `&sinceSequence=<cursor>&limit=<N>` against this
- * base; companion to `lastSequence` which seeds the initial cursor.
+ * **Failover ladder (WS → SSE → polling).** `sseUrl` and `pollingUrl`
+ * are the two HTTP fallback rungs the iframe-runtime descends when the
+ * WS rung fails (host CSP block, proxy, network policy). Both are
+ * stamped by the SERVER via {@link composeSessionApiUrls} — one
+ * composer for every stamping surface — and consumed by the
+ * IFRAME-RUNTIME. Auth for both is the embedded `wsToken` query
+ * credential (`EventSource` cannot set request headers, so the query
+ * string is the only channel — same posture on both rungs), which is
+ * why each URL is stamped ONLY when the live trio was minted.
+ * Absence semantics: `sseUrl` absent ⇒ no SSE rung (ladder is
+ * WS → polling); `pollingUrl` absent ⇒ no polling rung.
+ *
+ * `pollingUrl` (server-stamped
+ * `/api/sessions/<sessionId>/events?wsToken=<token>`): the
+ * iframe-runtime composes per-tick `&sinceSequence=<cursor>&limit=<N>`
+ * against this base; companion to `lastSequence` which seeds the
+ * initial cursor.
+ *
+ * `sseUrl` (server-stamped
+ * `/api/sessions/<sessionId>/stream?wsToken=<token>`): consumed via
+ * `EventSource`. Server obligations — the endpoint serves
+ * `text/event-stream` where each SSE message's `data:` is EXACTLY one
+ * ChannelFrame JSON (`{type, payload}` — byte-same shape as the WS
+ * push); a message's `id:` is the decimal event-ledger `seq` (the SAME
+ * cursor space as `lastSequence`/`sinceSequence`), stamped ONLY on
+ * ledger-backed `render_event` replay frames — live frames are id-less
+ * (same ephemeral posture as WS) — so the browser's automatic
+ * `Last-Event-ID` reconnect header IS the existing cursor replay; the
+ * server emits a comment heartbeat (`: hb`, no `id:`) at least every
+ * ~25s (proxy/ALB idle-timeout floor) and `retry: 3000` as the first
+ * write after headers. Client obligations — append
+ * `&sinceSequence=<lastSequence>` on FIRST connect (before any
+ * `Last-Event-ID` exists); on reconnect the header WINS over the
+ * query. Failure modes mirror `/events`: 401 invalid token; 404
+ * evicted → stop; 410 expired / `REPLAY_HORIZON_PASSED` →
+ * re-bootstrap (the horizon violation is an in-band error frame
+ * carrying `resumeId: String(lastSequence)`, so the browser cursor
+ * advances and the ack snapshot re-mounts state).
  *
  * **Mode discriminator.** At least one of `{ codeUrl, codeB64, kind,
  * wsUrl-with-token }` MUST be present for the iframe to mount. `kind` is
@@ -214,6 +248,7 @@ export interface McpAppAiGguiRenderMeta {
     readonly wsToken?: string;
     readonly expiresAt?: string;
     readonly pollingUrl?: string;
+    readonly sseUrl?: string;
     readonly themeId?: string;
     readonly themeMode?: 'light' | 'dark';
     /**
@@ -239,12 +274,34 @@ export interface McpAppAiGguiRenderMeta {
      * from a cursor.
      */
     readonly lastSequence?: number;
+    /**
+     * History head epoch this mount belongs to (#483, SPEC §7.1.2.2).
+     * `ggui_render` mints epoch 0; each `ggui_update` result carries its
+     * new epoch; a pinned `#N` read carries N. The iframe reads it at
+     * boot as its OWN epoch: when a later `props_update` frame carries a
+     * HIGHER epoch, this mount has been superseded and freezes (the
+     * freeze latch). Absent ⇒ 0.
+     */
+    readonly epoch?: number;
     readonly propsJson?: string;
     readonly contextSlots?: ReadonlyArray<McpAppContextSlot>;
     readonly contractHash?: string;
     readonly validatorsUrl?: string;
     readonly codeUrl?: string;
     readonly codeHash?: string;
+    /**
+     * Strict-CSP module variant of {@link codeUrl} (ggui#522 slice 2):
+     * the SAME component bytes, server-side import-rewritten so every
+     * bare specifier resolves to a static shim asset on the code origin
+     * — directly `import()`able under a `script-src` that allows only
+     * that origin (no `blob:`, no `data:`, no `'unsafe-eval'`). The
+     * renderer tries this FIRST when present and falls back to the
+     * codeB64/codeUrl blob ladder on any failure. Never a mode
+     * discriminator on its own — always accompanies `codeUrl`/`codeB64`
+     * (the raw bytes remain the fallback), so its presence adds a load
+     * path without changing mountability.
+     */
+    readonly codeModuleUrl?: string;
     /**
      * Base64-encoded compiled ES-module source of the component — the
      * fetch-free twin of {@link codeUrl}. Produced by servers whose
@@ -296,6 +353,39 @@ export declare function parseMcpAppAiGguiRenderMeta(meta: unknown): ParseMcpAppA
  * @public
  */
 export declare function toMcpAppEnvelope(render: McpAppAiGguiRenderMeta): Record<string, unknown>;
+/**
+ * Token-bearing session-API URL pair — the return shape of
+ * {@link composeSessionApiUrls}. Field names deliberately match the
+ * {@link McpAppAiGguiRenderMeta} slice fields they stamp, so callers
+ * spread the pair straight into a slice literal.
+ *
+ * @public
+ */
+export interface SessionApiUrls {
+    /** `${base}/api/sessions/<sessionId>/events?wsToken=<token>` */
+    readonly pollingUrl: string;
+    /** `${base}/api/sessions/<sessionId>/stream?wsToken=<token>` */
+    readonly sseUrl: string;
+}
+/**
+ * Compose the token-bearing session-API URL pair — ONE composer for
+ * every stamping surface (render resultMeta, update resultMeta, the
+ * self-contained shell, the `/api/sessions/:id/state` bootstrap). Same
+ * move as `deriveRenderMeta`: because every surface routes through this
+ * function, cross-transport drift in the URL shapes is structurally
+ * impossible.
+ *
+ * Pure string composition, no I/O. `base` is the absolute public
+ * origin the session API is served on (a trailing `/` is tolerated and
+ * stripped); `sessionId` and `wsToken` are URL-encoded into path and
+ * query. Callers MUST invoke this only when the live trio was minted —
+ * both URLs embed the token, and a token-less URL can only 401 through
+ * the fallback composers; omission of both fields is the honest
+ * no-HTTP-fallback signal the slice contract defines.
+ *
+ * @public
+ */
+export declare function composeSessionApiUrls(base: string, sessionId: string, wsToken: string): SessionApiUrls;
 /**
  * `_meta` key carrying host-supplied conversation-grouping metadata on
  * every inbound `tools/call` request. Captured ONCE on the first call
@@ -465,6 +555,13 @@ export interface McpAppsGguiSession {
     readonly type: 'mcpApps';
     readonly id: string;
     readonly createdAt: string;
+    /**
+     * History head epoch (#483) — same semantics as
+     * `GguiSessionBase.epoch` (absent ⇒ 0; advanced only by
+     * `ggui_update`). Declared here too because this variant does not
+     * extend the base.
+     */
+    readonly epoch?: number;
     readonly prompt?: string;
     readonly description?: string;
     readonly message?: string;
@@ -973,9 +1070,20 @@ export declare function toolResultGguiRender(result: unknown): GguiRenderBootstr
  * theme variables at boot; the static dark fallback covers the
  * pre-resolve first paint.
  *
+ * The chain opens with `--ggui-shell-background` — unset in the
+ * served bytes — as the runtime's override point. The shell stamps
+ * its backdrop as an INLINE style, which no stylesheet `background`
+ * rule can out-cascade; but because the inline value is a `var()`,
+ * a stylesheet that sets the custom property re-resolves it in
+ * place. The layer that knows whether the embedding host composites
+ * its own chrome behind the document (the design system's
+ * `ThemeProvider` in its transparent posture) sets
+ * `--ggui-shell-background: transparent`; every other context keeps
+ * the surface paint and its per-browser consistency.
+ *
  * @public
  */
-export declare const GGUI_RENDER_SHELL_SURFACE = "var(--ggui-color-surface, #1e293b)";
+export declare const GGUI_RENDER_SHELL_SURFACE = "var(--ggui-shell-background, var(--ggui-color-surface, #1e293b))";
 /**
  * Options for {@link gguiShellHtml}.
  *
@@ -1062,4 +1170,29 @@ export declare function escapeInlineScript(source: string): string;
  * @public
  */
 export declare function gguiShellHtml(bootstrap: GguiRenderBootstrap, options?: GguiShellHtmlOptions): string;
+/**
+ * The exact prefix {@link gguiShellHtml} writes before the envelope
+ * JSON — shared with {@link readGguiShellEnvelope} so the writer and the
+ * reader cannot drift. ONE line, one marker; the JSON that follows is
+ * angle-bracket-escaped, so the closing script tag can only be the
+ * terminator.
+ */
+export declare const GGUI_SHELL_META_MARKER = "globalThis.__GGUI_META__ = ";
+/**
+ * Inverse of {@link gguiShellHtml}: recover the slice envelope
+ * (`{ "ai.ggui/render": {…} }`) a shell document inlines. This is the
+ * host-side half of the read-plane door (ggui#537): a tool result that
+ * carries only the view's identity (`structuredContent.resourceUri` /
+ * `_meta.ui.resourceUri`, no bootstrap material) names a per-render
+ * resource whose document IS a self-contained shell — read it through
+ * `resources/read`, hand the text here, then validate the returned
+ * envelope with {@link parseMcpAppAiGguiRenderMeta}. Returns
+ * `undefined` when the text carries no marker or the JSON does not
+ * parse (a static thin shell, a failure page, a truncated body) —
+ * never throws, so a caller can fall through to its next tier.
+ *
+ * Reads the FIRST marker only. `gguiShellHtml` writes exactly one; a
+ * document with two is not one it produced.
+ */
+export declare function readGguiShellEnvelope(html: string): unknown;
 //# sourceMappingURL=mcp-apps.d.ts.map

package/dist/integrations/mcp-apps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-apps.d.ts","sourceRoot":"","sources":["../../src/integrations/mcp-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGxE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,kBAA2B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kFAAkF;;IAElF,kEAAkE;;CAE1D,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BAA0B;IACzC,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AA0CD;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAG,gBAAyB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B;;;oEAGgE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;mEAE+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;yDAGqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;yDACqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B;uEACmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,sBAAsB;IAGrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAG5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAI5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAG7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAG1B,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAG/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAMzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAOhC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,OAAO,GACZ,iCAAiC,CAiJnC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAYD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC,EAAG,sBAA+B,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sCAAsC,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAEtE;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ,sCAAsC,CA2BxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;gCAC4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;iCAC6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAGzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IAE1D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAOlC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAMhF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,IAAI,CAE3B;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,YAAY,GACZ,OAAO,GACP,cAAc,CAAC;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAK1D,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,OAAO,IAAI,sBAAsB,CA2BnC;AA4BD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,0BAA0B,CAAC;AAErE,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAAsB,CAAC,MAAM,CAChD,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,2BAA2B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,6BAA6B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,UAAU,GACV,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAChB,yDAAyD;QACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;QACtC;;;;;;;;;WASG;QACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;KAChC,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KAChE,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,yDAIgB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,qBAAqB,CAoChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC;CACH;AAmCD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAmBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GACZ,mBAAmB,GAAG,SAAS,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,GACd,mBAAmB,GAAG,SAAS,CAGjC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,uCAAuC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;IAChD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,mBAAmB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAyCR"}
+{"version":3,"file":"mcp-apps.d.ts","sourceRoot":"","sources":["../../src/integrations/mcp-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGxE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAG,kBAA2B,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAM9E,OAAO,EACL,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;IAC9B,kFAAkF;;IAElF,kEAAkE;;CAE1D,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,0BAA0B;IACzC,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGzD;AA0CD;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAG,gBAAyB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B;;;oEAGgE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;mEAE+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;yDAGqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;yDACqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;4EACwE;IACxE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B;uEACmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAM,WAAW,sBAAsB;IAGrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAG5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAI5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAI7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAGzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAG1B,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAE/C;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAGxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAMzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAOhC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAA;CAAE,GAC7D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,OAAO,GACZ,iCAAiC,CAmLnC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,cAAc,CAQhB;AAYD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC,EAAG,sBAA+B,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sCAAsC,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAA;CAAE,GACzE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAEtE;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ,sCAAsC,CA2BxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAMD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;gCAC4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;iCAC6B;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAGzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IAE1D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAOlC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAMhF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,IAAI,CAE3B;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,YAAY,GACZ,OAAO,GACP,cAAc,CAAC;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,oBAAoB,EAK1D,CAAC;AAEX;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,OAAO,GACf,OAAO,IAAI,sBAAsB,CA2BnC;AA4BD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,wBAAwB,CAAC;AAEjE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,0BAA0B,CAAC;AAErE,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAAsB,CAAC,MAAM,CAChD,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,OAAO,2BAA2B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,6BAA6B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,UAAU,GACV,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAChB,yDAAyD;QACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;QACtC;;;;;;;;;WASG;QACH,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;KAChC,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;KAChE,CAAC;CACH,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,yDAIgB,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,qBAAqB,CAoChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC;CACH;AAmCD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAmBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GACZ,mBAAmB,GAAG,SAAS,CAUjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,GACd,mBAAmB,GAAG,SAAS,CAGjC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,qEAC8B,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;IAChD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,mBAAmB,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAyCR;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAa3D"}

package/dist/integrations/mcp-apps.js

@@ -49,6 +49,11 @@ export const GGUI_RENDER_RESOURCE_URI = 'ui://ggui/render';
  * render them as plain HTML.
  */
 export const GGUI_RENDER_RESOURCE_MIME = 'text/html;profile=mcp-app';
+// Epoch-pinned resource URIs (#483) — bare URI = live head, `#N` =
+// immutable history record. Re-exported here because this module is
+// the package's MCP-Apps export surface; the seam itself lives in
+// epoch-uri.ts (ONE place to flip the encoding).
+export { composeEpochUri, parseEpochUri, EPOCH_URI_SEPARATOR, } from './epoch-uri.js';
 /**
  * The single `_meta.ui.resourceUri` value ggui uses across every MCP Apps
  * host surface. Exposed as a named constant so tool-declaration code,
@@ -96,7 +101,7 @@ export function deriveContextName(slotKey) {
 //   "ai.ggui/render": {
 //     sessionId, appId, runtimeUrl,
 //     wsUrl?, wsToken?, expiresAt?,
-//     pollingUrl?,
+//     pollingUrl?, sseUrl?,
 //     themeId?, themeMode?, theme?,
 //     gadgets?, publicEnv?, streamWebSocketLocalTools?,
 //     permissionsPolicy?,
@@ -177,6 +182,17 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
         (typeof ls !== 'number' || !Number.isInteger(ls) || ls < 0)) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
+    // `epoch` (#483) mirrors lastSequence's invariant: the freeze-latch
+    // self-epoch is a non-negative integer when present. This parser
+    // REBUILDS the slice field-by-field, so a field missing from the
+    // constructor below is silently deleted from every downstream
+    // consumer — epoch was exactly such a drop (probe 18 round 3: the
+    // head card booted believing epoch 0 and froze on its own amend).
+    const ep = s.epoch;
+    if (ep !== undefined &&
+        (typeof ep !== 'number' || !Number.isInteger(ep) || ep < 0)) {
+        return { ok: false, reason: 'MALFORMED_RENDER' };
+    }
     // Component-mode discriminator: kind mutually exclusive with
     // codeUrl/codeB64 (the two static-component carriers may coexist —
     // consumers prefer the inline bytes).
@@ -184,9 +200,19 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
     const ck = s.kind;
     const ch = s.codeHash;
     const cb = s.codeB64;
+    const cm = s.codeModuleUrl;
     if (cu !== undefined && (typeof cu !== 'string' || cu.length === 0)) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
+    // `codeModuleUrl` rides ALONGSIDE a static-component carrier, never
+    // alone — it is a load-path optimization, not a mode. A slice
+    // carrying only the variant would leave fallback-less consumers
+    // stranded; parse it out unless a raw carrier is present (tolerant
+    // drop, matching the optional-field posture — the raw carrier gate
+    // below still decides mountability).
+    if (cm !== undefined && (typeof cm !== 'string' || cm.length === 0)) {
+        return { ok: false, reason: 'MALFORMED_RENDER' };
+    }
     if (ck !== undefined && (typeof ck !== 'string' || ck.length === 0)) {
         return { ok: false, reason: 'MALFORMED_RENDER' };
     }
@@ -222,6 +248,11 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
         ...(hasW && hasT ? { wsUrl: aw, wsToken: at } : {}),
         ...(ae !== undefined ? { expiresAt: ae } : {}),
         ...(s.pollingUrl !== undefined ? { pollingUrl: s.pollingUrl } : {}),
+        // Same tolerant scalar posture as pollingUrl; deliberately NO
+        // wsToken-pairing invariant — the URL is self-authorizing via its
+        // embedded token; field-level defense lives downstream in the
+        // iframe-runtime's `validateMeta`.
+        ...(s.sseUrl !== undefined ? { sseUrl: s.sseUrl } : {}),
         ...(s.themeId !== undefined ? { themeId: s.themeId } : {}),
         ...(s.themeMode !== undefined
             ? { themeMode: s.themeMode }
@@ -247,6 +278,7 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
             ? { permissionsPolicy: s.permissionsPolicy }
             : {}),
         ...(ls !== undefined ? { lastSequence: ls } : {}),
+        ...(ep !== undefined ? { epoch: ep } : {}),
         ...(s.propsJson !== undefined ? { propsJson: s.propsJson } : {}),
         ...(s.contextSlots !== undefined
             ? {
@@ -262,6 +294,10 @@ export function parseMcpAppAiGguiRenderMeta(meta) {
         ...(typeof cu === 'string' && cu.length > 0 ? { codeUrl: cu } : {}),
         ...(typeof ch === 'string' && ch.length > 0 ? { codeHash: ch } : {}),
         ...(typeof cb === 'string' && cb.length > 0 ? { codeB64: cb } : {}),
+        // Variant only WITH a raw static carrier — see the parse gate above.
+        ...(typeof cm === 'string' && cm.length > 0 && hasStaticComponent
+            ? { codeModuleUrl: cm }
+            : {}),
         ...(typeof ck === 'string' && ck.length > 0 ? { kind: ck } : {}),
     };
     return { ok: true, meta: slice };
@@ -277,6 +313,33 @@ export function toMcpAppEnvelope(render) {
         [MCP_APP_AI_GGUI_RENDER_META_KEY]: render,
     };
 }
+/**
+ * Compose the token-bearing session-API URL pair — ONE composer for
+ * every stamping surface (render resultMeta, update resultMeta, the
+ * self-contained shell, the `/api/sessions/:id/state` bootstrap). Same
+ * move as `deriveRenderMeta`: because every surface routes through this
+ * function, cross-transport drift in the URL shapes is structurally
+ * impossible.
+ *
+ * Pure string composition, no I/O. `base` is the absolute public
+ * origin the session API is served on (a trailing `/` is tolerated and
+ * stripped); `sessionId` and `wsToken` are URL-encoded into path and
+ * query. Callers MUST invoke this only when the live trio was minted —
+ * both URLs embed the token, and a token-less URL can only 401 through
+ * the fallback composers; omission of both fields is the honest
+ * no-HTTP-fallback signal the slice contract defines.
+ *
+ * @public
+ */
+export function composeSessionApiUrls(base, sessionId, wsToken) {
+    const b = base.replace(/\/$/, '');
+    const sid = encodeURIComponent(sessionId);
+    const tok = encodeURIComponent(wsToken);
+    return {
+        pollingUrl: `${b}/api/sessions/${sid}/events?wsToken=${tok}`,
+        sseUrl: `${b}/api/sessions/${sid}/stream?wsToken=${tok}`,
+    };
+}
 // =============================================================================
 // Request-side `_meta` — host-supplied metadata on inbound `tools/call`.
 //
@@ -610,9 +673,20 @@ export function toolResultGguiRender(result) {
  * theme variables at boot; the static dark fallback covers the
  * pre-resolve first paint.
  *
+ * The chain opens with `--ggui-shell-background` — unset in the
+ * served bytes — as the runtime's override point. The shell stamps
+ * its backdrop as an INLINE style, which no stylesheet `background`
+ * rule can out-cascade; but because the inline value is a `var()`,
+ * a stylesheet that sets the custom property re-resolves it in
+ * place. The layer that knows whether the embedding host composites
+ * its own chrome behind the document (the design system's
+ * `ThemeProvider` in its transparent posture) sets
+ * `--ggui-shell-background: transparent`; every other context keeps
+ * the surface paint and its per-browser consistency.
+ *
  * @public
  */
-export const GGUI_RENDER_SHELL_SURFACE = 'var(--ggui-color-surface, #1e293b)';
+export const GGUI_RENDER_SHELL_SURFACE = 'var(--ggui-shell-background, var(--ggui-color-surface, #1e293b))';
 /**
  * Make raw JS source safe to embed as the text content of an HTML
  * `<script>` element.
@@ -704,3 +778,44 @@ export function gguiShellHtml(bootstrap, options) {
 ${runtimeTag}
 </body></html>`;
 }
+/**
+ * The exact prefix {@link gguiShellHtml} writes before the envelope
+ * JSON — shared with {@link readGguiShellEnvelope} so the writer and the
+ * reader cannot drift. ONE line, one marker; the JSON that follows is
+ * angle-bracket-escaped, so the closing script tag can only be the
+ * terminator.
+ */
+export const GGUI_SHELL_META_MARKER = 'globalThis.__GGUI_META__ = ';
+/**
+ * Inverse of {@link gguiShellHtml}: recover the slice envelope
+ * (`{ "ai.ggui/render": {…} }`) a shell document inlines. This is the
+ * host-side half of the read-plane door (ggui#537): a tool result that
+ * carries only the view's identity (`structuredContent.resourceUri` /
+ * `_meta.ui.resourceUri`, no bootstrap material) names a per-render
+ * resource whose document IS a self-contained shell — read it through
+ * `resources/read`, hand the text here, then validate the returned
+ * envelope with {@link parseMcpAppAiGguiRenderMeta}. Returns
+ * `undefined` when the text carries no marker or the JSON does not
+ * parse (a static thin shell, a failure page, a truncated body) —
+ * never throws, so a caller can fall through to its next tier.
+ *
+ * Reads the FIRST marker only. `gguiShellHtml` writes exactly one; a
+ * document with two is not one it produced.
+ */
+export function readGguiShellEnvelope(html) {
+    const start = html.indexOf(GGUI_SHELL_META_MARKER);
+    if (start < 0)
+        return undefined;
+    const jsonStart = start + GGUI_SHELL_META_MARKER.length;
+    // The assembler escapes `<`/`>` inside the JSON, so this sequence
+    // cannot occur before the real terminator.
+    const end = html.indexOf(';</' + 'script>', jsonStart);
+    if (end < 0)
+        return undefined;
+    try {
+        return JSON.parse(html.slice(jsonStart, end));
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/registry/props-schema-hash.d.ts

@@ -0,0 +1,3 @@
+import type { JsonSchema } from '../types/data-contract.js';
+export declare function computePropsSchemaHash(schema: JsonSchema): string;
+//# sourceMappingURL=props-schema-hash.d.ts.map

package/dist/registry/props-schema-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"props-schema-hash.d.ts","sourceRoot":"","sources":["../../src/registry/props-schema-hash.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAG5D,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAIjE"}

package/dist/registry/props-schema-hash.js

@@ -0,0 +1,23 @@
+/**
+ * `computePropsSchemaHash` — sha256 over the RFC 8785 (JCS) canonical
+ * bytes of an enforced props schema (P3 pin 3, frozen 2026-08-19,
+ * guuey#271). Lowercase hex, full 64 characters, no prefix.
+ *
+ * Server-only — depends on `node:crypto`, so it lives behind its own
+ * subpath (`@ggui-ai/protocol/props-schema-hash`) per the
+ * `blueprint-key` convention; browsers never bundle it. The pure
+ * canonicalization half (`canonicalPropsSchemaBytes`) is browser-safe
+ * in `validation/enforced-props-schema.ts`.
+ *
+ * Consumer verification rule (frozen): re-canonicalize the received
+ * `propsSchema` value per RFC 8785 (any JCS library), hash, compare —
+ * raw received bytes are equivalent whenever the transport preserves
+ * key order.
+ */
+import { createHash } from 'node:crypto';
+import { canonicalPropsSchemaBytes } from '../validation/enforced-props-schema.js';
+export function computePropsSchemaHash(schema) {
+    return createHash('sha256')
+        .update(canonicalPropsSchemaBytes(schema))
+        .digest('hex');
+}

package/dist/schemas/blueprint.d.ts

@@ -35,6 +35,8 @@ export declare const blueprintSourceSchema: z.ZodType<BlueprintSource>;
  * metadata via `tools/list`, so they stay mechanism-only and
  * vendor-neutral.
  */
+/** The four — and only — variance keys; the strict object names them on rejection. */
+export declare const BLUEPRINT_VARIANCE_KEYS: readonly ["persona", "aesthetic", "context", "seedPrompt"];
 export declare const blueprintVarianceSchema: z.ZodType<BlueprintVariance>;
 /**
  * Zod mirror of {@link Blueprint}. Required fields are listed first;