@guuey/agent-client 0.7.2 → 0.8.1

package/dist/error-codes.d.ts

@@ -53,6 +53,12 @@ export declare const AGENT_ERROR_CODES: {
     readonly DRAINING: "DRAINING";
     /** Refused for this caller — e.g. the link-prompt dismiss route's byo-only rule. */
     readonly FORBIDDEN: "FORBIDDEN";
+    /**
+     * The consent-answer door's deny==miss (guuey#207): the `AgHitlAnswer` names
+     * an ask this pod did not mint (wrong app, a thread the caller does not
+     * own, or a pod that takes no profile consent). Never an existence oracle.
+     */
+    readonly NOT_FOUND: "NOT_FOUND";
     /** The turn ran past the pod's wall-clock budget. */
     readonly TIMEOUT: "TIMEOUT";
     /** A guuey-side dependency failed (not the agent's own code). */

package/dist/error-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../src/error-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,iBAAiB;IAC5B,yDAAyD;;IAEzD,gDAAgD;;IAEhD,8DAA8D;;IAE9D;;;;;OAKG;;IAEH,6EAA6E;;IAE7E,qDAAqD;;IAErD;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,oFAAoF;;IAEpF,qDAAqD;;IAErD,iEAAiE;;IAEjE,gCAAgC;;CAExB,CAAC;AAEX,mEAAmE;AACnE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAExF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;;;;OAKG;;CAEK,CAAC;AAEX,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../src/error-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,iBAAiB;IAC5B,yDAAyD;;IAEzD,gDAAgD;;IAEhD,8DAA8D;;IAE9D;;;;;OAKG;;IAEH,6EAA6E;;IAE7E,qDAAqD;;IAErD;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,oFAAoF;;IAEpF;;;;OAIG;;IAEH,qDAAqD;;IAErD,iEAAiE;;IAEjE,gCAAgC;;CAExB,CAAC;AAEX,mEAAmE;AACnE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAExF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;;;;OAKG;;CAEK,CAAC;AAEX,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/error-codes.js

@@ -53,6 +53,12 @@ export const AGENT_ERROR_CODES = {
     DRAINING: "DRAINING",
     /** Refused for this caller — e.g. the link-prompt dismiss route's byo-only rule. */
     FORBIDDEN: "FORBIDDEN",
+    /**
+     * The consent-answer door's deny==miss (guuey#207): the `AgHitlAnswer` names
+     * an ask this pod did not mint (wrong app, a thread the caller does not
+     * own, or a pod that takes no profile consent). Never an existence oracle.
+     */
+    NOT_FOUND: "NOT_FOUND",
     /** The turn ran past the pod's wall-clock budget. */
     TIMEOUT: "TIMEOUT",
     /** A guuey-side dependency failed (not the agent's own code). */

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-export { parseSseEvents, extractAssistantText, reduceAssistantText, stringField, parseConsentRequest, parseLinkRequest, type ParsedSseEvent, } from "./sse.js";
+export { parseSseEvents, extractAssistantText, reduceAssistantText, stringField, parseLinkRequest, type ParsedSseEvent, } from "./sse.js";
 export { dismissLinkPrompt } from "./link-prompt.js";
 export { invokeTurn, toInvokeUrl, type InvokeTurnEvent } from "./invoke-turn.js";
-export { createUiActionRelay, type CreateUiActionRelayOptions, createUiResourceReader, type CreateUiResourceReaderOptions, createWebAdapters, localStorageThreadStore, webGenerateId, type CreateWebAdaptersOptions, } from "./web-adapters.js";
+export { createHitlAnswerRelay, type CreateHitlAnswerRelayOptions, type HitlAnswerRelayResult, createUiActionRelay, type CreateUiActionRelayOptions, createUiResourceReader, type CreateUiResourceReaderOptions, createWebAdapters, localStorageThreadStore, webGenerateId, type CreateWebAdaptersOptions, } from "./web-adapters.js";
 export { fetchStreamTransport, sendableGuestSecret, GUEST_HEADER, withActivityObserver, type FetchStreamTransportOptions, } from "./transport.js";
 export { withSaturationRetry, withColdStartRetry, parseRetryAfterSeconds, type SaturationRetryOptions, type ColdStartRetryOptions, } from "./saturation-retry.js";
 export { AgentResponseError } from "./errors.js";
@@ -10,6 +10,6 @@ export { fetchThreadHistory, threadHistoryRowsToMessages, threadHistoryRowsToCar
 export { ingestMessageFrame } from "./blocks.js";
 export { sortHistoryCards, toolNameFor } from "./history.js";
 export { Reducer } from "@silverprotocol/core";
-export type { AgEvent, AgReduceResult, AgMessage, AgBlock } from "@silverprotocol/core";
-export type { AgentMessage, HistoryCard, ProfileConsentRequest, ProfileLinkRequest, ThreadIdStore, GenerateId, InvokeRequest, InvokeTransport, AgentInvokeAdapters, AgentInvokeHistoryAdapter, AgentInvokeStatus, HistoryLoadResult, StallRecoveryOptions, UseAgentInvokeOptions, UseAgentInvokeReturn, } from "./types.js";
+export type { AgEvent, AgReduceResult, AgMessage, AgBlock, AgClientCapabilities, AgHitlAnswer, } from "@silverprotocol/core";
+export type { AgentMessage, HistoryCard, ProfileLinkRequest, ThreadIdStore, GenerateId, InvokeRequest, InvokeTransport, AgentInvokeAdapters, AgentInvokeHistoryAdapter, AgentInvokeStatus, HistoryLoadResult, StallRecoveryOptions, UseAgentInvokeOptions, UseAgentInvokeReturn, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,cAAc,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,OAAO,EACL,iBAAiB,EACjB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAM7D,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACxF,YAAY,EACV,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,KAAK,cAAc,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD,OAAO,EACL,iBAAiB,EACjB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAM7D,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,YAAY,EACV,OAAO,EACP,cAAc,EACd,SAAS,EACT,OAAO,EAIP,oBAAoB,EACpB,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,9 +1,9 @@
-export { parseSseEvents, extractAssistantText, reduceAssistantText, stringField, parseConsentRequest, parseLinkRequest, } from "./sse.js";
+export { parseSseEvents, extractAssistantText, reduceAssistantText, stringField, parseLinkRequest, } from "./sse.js";
 export { dismissLinkPrompt } from "./link-prompt.js";
 // One agent turn as a pure async generator — the wire walk `useAgentInvoke`
 // wraps, for hosts that drive their own turn state machine (guuey#186 G5).
 export { invokeTurn, toInvokeUrl } from "./invoke-turn.js";
-export { createUiActionRelay, createUiResourceReader, createWebAdapters, localStorageThreadStore, webGenerateId, } from "./web-adapters.js";
+export { createHitlAnswerRelay, createUiActionRelay, createUiResourceReader, createWebAdapters, localStorageThreadStore, webGenerateId, } from "./web-adapters.js";
 // The invoke transport + guest-identity wire pieces, in their own
 // mcp-apps-host-free module. Consumers that want ONLY this graph (no
 // host-role card layer riding along) import `@guuey/agent-client/transport`

package/dist/invoke-turn.d.ts

@@ -23,7 +23,7 @@
  * fall-through, so new wire events are additive for every consumer.
  */
 import type { AgEvent } from "@silverprotocol/core";
-import type { AgentInvokeStatus, InvokeRequest, InvokeTransport, ProfileConsentRequest, ProfileLinkRequest } from "./types.js";
+import type { AgentInvokeStatus, InvokeRequest, InvokeTransport, ProfileLinkRequest } from "./types.js";
 /**
  * One semantic step of a turn. Field conventions:
  *
@@ -51,9 +51,6 @@ export type InvokeTurnEvent = {
     kind: "error";
     message: string;
     code: string | null;
-} | {
-    kind: "profile-consent";
-    request: ProfileConsentRequest;
 } | {
     kind: "profile-link";
     request: ProfileLinkRequest;

package/dist/invoke-turn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-turn.d.ts","sourceRoot":"","sources":["../src/invoke-turn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AASpD,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5C;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,EAAE,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,CAAC;IAC9E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAuB,UAAU,CAC/B,GAAG,EAAE,aAAa,EAClB,SAAS,EAAE,eAAe,GACzB,cAAc,CAAC,eAAe,CAAC,CA0EjC"}
+{"version":3,"file":"invoke-turn.d.ts","sourceRoot":"","sources":["../src/invoke-turn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAGpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAExG;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5C;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,EAAE,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,CAAC;IAC9E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAuB,UAAU,CAC/B,GAAG,EAAE,aAAa,EAClB,SAAS,EAAE,eAAe,GACzB,cAAc,CAAC,eAAe,CAAC,CAuEjC"}

package/dist/invoke-turn.js

@@ -1,4 +1,4 @@
-import { parseConsentRequest, parseLinkRequest, parseSseEvents, reduceAssistantText, stringField, } from "./sse.js";
+import { parseLinkRequest, parseSseEvents, reduceAssistantText, stringField } from "./sse.js";
 import { ingestMessageFrame } from "./blocks.js";
 /**
  * Normalize an agent endpoint to its invoke URL (guuey#186 G3). Accepts BOTH
@@ -97,17 +97,12 @@ export async function* invokeTurn(req, transport) {
                     code: stringField(ev.data, "code") ?? null,
                 };
             }
-            else if (ev.event === "profile-consent-needed") {
-                // Cross-app profile consent ask (T6). Only a well-formed payload
-                // yields; a malformed one is dropped, leaving any prior valid
-                // request untouched (never clobbered to null).
-                const parsed = parseConsentRequest(ev.data);
-                if (parsed)
-                    yield { kind: "profile-consent", request: parsed };
-            }
             else if (ev.event === "profile-link-needed") {
                 // Cross-app profile LINK invite (linkcoh T3) for an unlinked byo
-                // caller. Same drop-if-malformed contract as consent above.
+                // caller. Only a well-formed payload yields; a malformed one is
+                // dropped, leaving any prior valid request untouched (never clobbered
+                // to null). (Consent is NOT a bespoke event: it rides the AgJSON fold
+                // as `hitl.ask` + `turn.done outcome:"paused"` — guuey#207.)
                 const parsed = parseLinkRequest(ev.data);
                 if (parsed)
                     yield { kind: "profile-link", request: parsed };

package/dist/react.d.ts

@@ -6,6 +6,6 @@
  * history reader, and the web adapters). Consumers that only need those never
  * import React at all; consumers that render chat import the hook from here.
  */
-export { useAgentInvoke, applyHistoryResult, type HistoryApplication, stallProbeDecision, STALL_RECOVERY_DEFAULTS, } from "./useAgentInvoke.js";
+export { useAgentInvoke, applyHistoryResult, type HistoryApplication, stallProbeDecision, STALL_RECOVERY_DEFAULTS, DEFAULT_BLOCK_PRESERVING_CAPABILITIES, } from "./useAgentInvoke.js";
 export type { AgEvent, AgReduceResult } from "@silverprotocol/core";
 //# sourceMappingURL=react.d.ts.map

package/dist/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,qCAAqC,GACtC,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/react.js

@@ -6,4 +6,4 @@
  * history reader, and the web adapters). Consumers that only need those never
  * import React at all; consumers that render chat import the hook from here.
  */
-export { useAgentInvoke, applyHistoryResult, stallProbeDecision, STALL_RECOVERY_DEFAULTS, } from "./useAgentInvoke.js";
+export { useAgentInvoke, applyHistoryResult, stallProbeDecision, STALL_RECOVERY_DEFAULTS, DEFAULT_BLOCK_PRESERVING_CAPABILITIES, } from "./useAgentInvoke.js";

package/dist/sse.d.ts

@@ -3,7 +3,7 @@
  * platform dependencies — unit-tested in isolation (`sse.test.ts`) and shared
  * verbatim across web (Studio) and React-Native (Portal).
  */
-import type { ProfileConsentRequest, ProfileLinkRequest } from "./types.js";
+import type { ProfileLinkRequest } from "./types.js";
 export interface ParsedSseEvent {
     event: string;
     data: unknown;
@@ -46,22 +46,13 @@ export declare function reduceAssistantText(current: string, data: unknown): str
 export declare function extractAssistantText(data: unknown): string;
 /** Read a string field off an SSE `data` object, or undefined. */
 export declare function stringField(data: unknown, key: string): string | undefined;
-/**
- * Parse a `profile-consent-needed` SSE payload into a typed
- * {@link ProfileConsentRequest}, or `null` if it does not conform. `appId`
- * must be a non-empty string and `requested` exactly `"read"` or
- * `"read-write"`; extra keys are tolerated (ignored). Returns a fresh
- * normalized object so callers get exactly the typed shape, never the raw
- * wire payload with unknown extras.
- */
-export declare function parseConsentRequest(data: unknown): ProfileConsentRequest | null;
 /**
  * Parse a `profile-link-needed` SSE payload into a typed
- * {@link ProfileLinkRequest}, or `null` if it does not conform. Same shape +
- * validation as {@link parseConsentRequest} (`appId` non-empty string,
- * `requested` exactly `"read"` or `"read-write"`, extra keys tolerated) — the
- * pod emits an identically-shaped payload for both events; only the event
- * NAME (and what it means to the consumer) differs.
+ * {@link ProfileLinkRequest}, or `null` if it does not conform. `appId` must
+ * be a non-empty string and `requested` exactly `"read"` or `"read-write"`;
+ * extra keys are tolerated (ignored). Returns a fresh normalized object so
+ * callers get exactly the typed shape, never the raw wire payload with
+ * unknown extras.
  */
 export declare function parseLinkRequest(data: unknown): ProfileLinkRequest | null;
 //# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqBzF;AAsBD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAU1E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAmC1D;AAED,kEAAkE;AAClE,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,qBAAqB,GAAG,IAAI,CAO/E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAOzE"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqBzF;AAsBD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAU1E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAmC1D;AAED,kEAAkE;AAClE,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAOzE"}

package/dist/sse.js

@@ -134,32 +134,13 @@ export function stringField(data, key) {
     const v = data[key];
     return typeof v === "string" ? v : undefined;
 }
-/**
- * Parse a `profile-consent-needed` SSE payload into a typed
- * {@link ProfileConsentRequest}, or `null` if it does not conform. `appId`
- * must be a non-empty string and `requested` exactly `"read"` or
- * `"read-write"`; extra keys are tolerated (ignored). Returns a fresh
- * normalized object so callers get exactly the typed shape, never the raw
- * wire payload with unknown extras.
- */
-export function parseConsentRequest(data) {
-    if (typeof data !== "object" || data === null || Array.isArray(data))
-        return null;
-    const appId = data.appId;
-    const requested = data.requested;
-    if (typeof appId !== "string" || appId.length === 0)
-        return null;
-    if (requested !== "read" && requested !== "read-write")
-        return null;
-    return { appId, requested };
-}
 /**
  * Parse a `profile-link-needed` SSE payload into a typed
- * {@link ProfileLinkRequest}, or `null` if it does not conform. Same shape +
- * validation as {@link parseConsentRequest} (`appId` non-empty string,
- * `requested` exactly `"read"` or `"read-write"`, extra keys tolerated) — the
- * pod emits an identically-shaped payload for both events; only the event
- * NAME (and what it means to the consumer) differs.
+ * {@link ProfileLinkRequest}, or `null` if it does not conform. `appId` must
+ * be a non-empty string and `requested` exactly `"read"` or `"read-write"`;
+ * extra keys are tolerated (ignored). Returns a fresh normalized object so
+ * callers get exactly the typed shape, never the raw wire payload with
+ * unknown extras.
  */
 export function parseLinkRequest(data) {
     if (typeof data !== "object" || data === null || Array.isArray(data))

package/dist/types.d.ts

@@ -12,7 +12,7 @@
  * `createWebAdapters`'s `getGuestSecret`. This mirrors the ggui
  * `MessageStorageAdapter` injection pattern.
  */
-import type { AgReduceResult, JsonValue } from "@silverprotocol/core";
+import type { AgClientCapabilities, AgReduceResult, JsonValue } from "@silverprotocol/core";
 /** A flat chat turn as rendered by the consumer UI. */
 export interface AgentMessage {
     role: "user" | "assistant";
@@ -25,19 +25,6 @@ export interface AgentMessage {
      */
     clientMessageId?: string;
 }
-/**
- * A cross-app profile consent request surfaced mid-stream by the pod's
- * `profile-consent-needed` SSE event (nocode-runtime T6). Emitted when the
- * agent declares a profile intent the caller has NOT yet granted for this app,
- * so the consumer UI can prompt the user to authorize `read` or `read-write`
- * access. `requested` mirrors the pod's `ProfileAccess` posture verbatim; the
- * literal union is inlined rather than imported to keep this client SDK free of
- * any backend-package dependency.
- */
-export interface ProfileConsentRequest {
-    appId: string;
-    requested: "read" | "read-write";
-}
 /**
  * A cross-app profile LINK invite surfaced mid-stream by the pod's
  * `profile-link-needed` SSE event (nocode-runtime linkcoh T3). Emitted when an
@@ -45,8 +32,10 @@ export interface ProfileConsentRequest {
  * link their guuey account (via the named `/link` ceremony) so they earn the
  * guuey-wide cross-app profile. `requested` mirrors the pod's `ProfileAccess`
  * posture verbatim (the builder's declared access, not a live ask) — the
- * literal union is inlined rather than imported, same rationale as
- * {@link ProfileConsentRequest}.
+ * literal union is inlined rather than imported to keep this client SDK free
+ * of any backend-package dependency. (Consent itself is no longer a bespoke
+ * event: it rides AgJSON `hitl.ask` + `turn.done outcome:"paused"` in the
+ * fold and is answered through `createHitlAnswerRelay` — guuey#207.)
  */
 export interface ProfileLinkRequest {
     appId: string;
@@ -79,7 +68,7 @@ export type GenerateId = () => string;
 export interface InvokeRequest {
     /** Fully-resolved POST target (already normalised to end in `/agent/invoke`). */
     url: string;
-    /** JSON request body: `{ input, threadId?, clientMessageId }`. */
+    /** JSON request body: `{ input, threadId?, clientMessageId, capabilities? }`. */
     body: unknown;
     /** Aborts the in-flight stream. */
     signal: AbortSignal;
@@ -154,6 +143,18 @@ export interface UseAgentInvokeOptions {
      * reducer is never constructed and the text behaviour is byte-identical.
      */
     preserveBlocks?: boolean;
+    /**
+     * The AgJSON client capabilities advertised on every invoke body (spec §3
+     * `AgClientCapabilities`, guuey#207). The pod reads them to decide what it
+     * may ask: today it declares consent `grantModes` (the three-mode profile
+     * grant the `@guuey/chat` card renders) ONLY to a client that advertised
+     * `hitl.grantModes` — a client that cannot render the decision surface is
+     * simply not asked. Default: when {@link preserveBlocks} is on,
+     * `{ hitl: { ask: true, grantModes: true } }` (a block-preserving consumer
+     * folds the paused turn the ask rides on — the kit's exact path); when off,
+     * nothing is advertised. Pass an explicit object to override either way.
+     */
+    capabilities?: AgClientCapabilities;
     /**
      * Stall recovery for a half-dead stream (guuey#192). A connection that dies
      * WITHOUT erroring (TCP alive, zero bytes, no `done`) would otherwise leave
@@ -270,26 +271,16 @@ export interface UseAgentInvokeReturn {
      * `reset()` clears it back to `[]`.
      */
     historyCards: HistoryCard[];
-    /**
-     * The latest cross-app profile consent request the pod asked for on THIS
-     * conversation, or `null`. Set from a well-formed `profile-consent-needed`
-     * SSE event (see {@link ProfileConsentRequest}); malformed payloads are
-     * dropped and leave the field untouched. `reset()` and an app switch clear
-     * it back to `null`. Consumers that never render a consent prompt (e.g.
-     * Studio) simply ignore this field.
-     */
-    profileConsentRequest: ProfileConsentRequest | null;
-    /** Dismiss the pending {@link profileConsentRequest} (back to `null`). */
-    clearProfileConsentRequest: () => void;
     /**
      * The latest cross-app profile LINK invite the pod asked for on THIS
      * conversation, or `null`. Set from a well-formed `profile-link-needed`
      * SSE event (see {@link ProfileLinkRequest}); malformed payloads are
      * dropped and leave the field untouched. `reset()` and an app switch clear
      * it back to `null`. Consumers that never render a link prompt simply
-     * ignore this field. Distinct from {@link profileConsentRequest}: this one
-     * invites an UNLINKED byo user to link their account; consent asks an
-     * already-linked user to grant an app read/read-write access.
+     * ignore this field. Distinct from consent (an AgJSON `hitl.ask` in the
+     * fold, guuey#207): this one invites an UNLINKED byo user to link their
+     * account; consent asks an already-linked user to grant an app
+     * read/read-write access.
      */
     profileLinkRequest: ProfileLinkRequest | null;
     /** Dismiss the pending {@link profileLinkRequest} (back to `null`). */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtE,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,YAAY,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,YAAY,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,SAAS,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,0EAA0E;AAC1E,MAAM,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC;AAEtC,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,IAAI,EAAE,OAAO,CAAC;IACd,mCAAmC;IACnC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,sFAAsF;IACtF,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpD;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,eAAe,CAAC;IAC3B,yGAAyG;IACzG,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,6FAA6F;IAC7F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,oBAAoB,CAAC;IAC7C;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC;AAElG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC;mFAC+E;IAC/E,MAAM,EAAE,iBAAiB,CAAC;IAC1B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,EAAE,cAAc,GAAG,IAAI,CAAC;IACpC;;;;;;;;OAQG;IACH,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,qBAAqB,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACpD,0EAA0E;IAC1E,0BAA0B,EAAE,MAAM,IAAI,CAAC;IACvC;;;;;;;;;OASG;IACH,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,uEAAuE;IACvE,uBAAuB,EAAE,MAAM,IAAI,CAAC;IACpC;;;;;OAKG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;OAOG;IACH,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC;CAC5D"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE5F,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,YAAY,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,SAAS,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,0EAA0E;AAC1E,MAAM,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC;AAEtC,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,IAAI,EAAE,OAAO,CAAC;IACd,mCAAmC;IACnC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,sFAAsF;IACtF,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpD;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,eAAe,CAAC;IAC3B,yGAAyG;IACzG,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,6FAA6F;IAC7F,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,KAAK,GAAG,oBAAoB,CAAC;IAC7C;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC;AAElG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC;mFAC+E;IAC/E,MAAM,EAAE,iBAAiB,CAAC;IAC1B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB;;;;;;;;;;;;;;;;;;OAkBG;IACH,YAAY,EAAE,cAAc,GAAG,IAAI,CAAC;IACpC;;;;;;;;OAQG;IACH,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,kBAAkB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC9C,uEAAuE;IACvE,uBAAuB,EAAE,MAAM,IAAI,CAAC;IACpC;;;;;OAKG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;OAOG;IACH,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC;CAC5D"}

package/dist/useAgentInvoke.d.ts

@@ -1,4 +1,12 @@
+import { type AgClientCapabilities } from "@silverprotocol/core";
 import type { AgentMessage, HistoryLoadResult, UseAgentInvokeOptions, UseAgentInvokeReturn } from "./types.js";
+/**
+ * What a block-preserving consumer advertises by default (guuey#207): it
+ * folds `turn.done outcome:"paused"` records, so it can render the AgJSON
+ * hitl card with declared grant modes — the `@guuey/chat` path. See
+ * `UseAgentInvokeOptions.capabilities`.
+ */
+export declare const DEFAULT_BLOCK_PRESERVING_CAPABILITIES: AgClientCapabilities;
 /** The decision `applyHistoryResult` reaches for a loaded transcript. */
 export type HistoryApplication = {
     kind: "seed";

package/dist/useAgentInvoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAgentInvoke.d.ts","sourceRoot":"","sources":["../src/useAgentInvoke.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAGV,YAAY,EAEZ,iBAAiB,EAIjB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,eAAe,EAAE,YAAY,EAAE,GAC9B,kBAAkB,CAIpB;AAED,uFAAuF;AACvF,eAAO,MAAM,uBAAuB;;;CAAkD,CAAC;AAYvF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EAAE,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,GAAG,WAAW,CAOvB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,CAmehF"}
+{"version":3,"file":"useAgentInvoke.d.ts","sourceRoot":"","sources":["../src/useAgentInvoke.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAW,KAAK,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAK/F,OAAO,KAAK,EAGV,YAAY,EAEZ,iBAAiB,EAGjB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB;;;;;GAKG;AACH,eAAO,MAAM,qCAAqC,EAAE,oBAEnD,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,eAAe,EAAE,YAAY,EAAE,GAC9B,kBAAkB,CAIpB;AAED,uFAAuF;AACvF,eAAO,MAAM,uBAAuB;;;CAAkD,CAAC;AAYvF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EAAE,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,GAAG,WAAW,CAOvB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,CA6dhF"}

package/dist/useAgentInvoke.js

@@ -5,7 +5,7 @@
  * ggui generative-UI protocol that `@ggui-ai/mcp-apps-react`'s useInvoke targets):
  *
  *   POST {endpointUrl}/agent/invoke
- *     body: { input, threadId?, clientMessageId }
+ *     body: { input, threadId?, clientMessageId, capabilities? }
  *   ← SSE:
  *     event: session  { sessionId, userId, threadId? }
  *     event: message  <SDKMessage JSON>          (assistant turns + result)
@@ -30,6 +30,15 @@ import { CLIENT_ERROR_CODES } from "./error-codes.js";
 function threadStorageKey(appId) {
     return `guuey:thread:${appId ?? "default"}`;
 }
+/**
+ * What a block-preserving consumer advertises by default (guuey#207): it
+ * folds `turn.done outcome:"paused"` records, so it can render the AgJSON
+ * hitl card with declared grant modes — the `@guuey/chat` path. See
+ * `UseAgentInvokeOptions.capabilities`.
+ */
+export const DEFAULT_BLOCK_PRESERVING_CAPABILITIES = {
+    hitl: { ask: true, grantModes: true },
+};
 /**
  * Pure decision seam for post-hydration history application (see
  * `AgentInvokeHistoryAdapter` in `./types`). `gone` always clears the
@@ -111,14 +120,11 @@ export function useAgentInvoke(opts) {
     // contract). Independent of the live `reduceResult` fold — populated only
     // when a card-carrying history load seeds the transcript.
     const [historyCards, setHistoryCards] = useState([]);
-    // The pod's latest cross-app profile consent ask on this conversation (T6's
-    // `profile-consent-needed` SSE event), or null. Cleared on app switch /
-    // reset / explicit dismiss. Consumers with no consent UI just ignore it.
-    const [profileConsentRequest, setProfileConsentRequest] = useState(null);
     // The pod's latest cross-app profile LINK invite on this conversation (T3's
     // `profile-link-needed` SSE event), or null. Cleared on app switch / reset /
-    // explicit dismiss, same lifecycle as `profileConsentRequest` — the two are
-    // independent (an unlinked-invite vs an already-linked consent ask).
+    // explicit dismiss. (Consent is NOT hook state: it rides the AgJSON fold as
+    // a paused turn — `reduceResult` — and is answered through
+    // `createHitlAnswerRelay`, guuey#207.)
     const [profileLinkRequest, setProfileLinkRequest] = useState(null);
     // The last turn's ending posture + the optimistic-send ledger — the
     // transcript renderer's inputs (guuey#135 wave 3b; see the return-type
@@ -174,8 +180,7 @@ export function useAgentInvoke(opts) {
         reducerRef.current = null;
         setReduceResult(null);
         setHistoryCards([]);
-        // A prior app's consent ask must never leak into the new conversation.
-        setProfileConsentRequest(null);
+        // A prior app's link invite must never leak into the new conversation.
         setProfileLinkRequest(null);
         setAborted(false);
         setAdopted(false);
@@ -268,15 +273,11 @@ export function useAgentInvoke(opts) {
         reducerRef.current = null;
         setReduceResult(null);
         setHistoryCards([]);
-        setProfileConsentRequest(null);
         setProfileLinkRequest(null);
         setAborted(false);
         setAdopted(false);
         setSendStates({});
     }, [appId]);
-    const clearProfileConsentRequest = useCallback(() => {
-        setProfileConsentRequest(null);
-    }, []);
     const clearProfileLinkRequest = useCallback(() => {
         setProfileLinkRequest(null);
     }, []);
@@ -450,10 +451,16 @@ export function useAgentInvoke(opts) {
             : adapters.transport;
         try {
             const invokeUrl = toInvokeUrl(endpointUrl);
+            // The advertised AgJSON client capabilities (spec §3, guuey#207): an
+            // explicit option wins; else a block-preserving consumer advertises
+            // the hitl grant-mode card it can render, and a text-only one nothing.
+            const capabilities = opts.capabilities ??
+                (preserveBlocksRef.current ? DEFAULT_BLOCK_PRESERVING_CAPABILITIES : undefined);
             const body = {
                 input,
                 ...(threadIdRef.current ? { threadId: threadIdRef.current } : {}),
                 clientMessageId,
+                ...(capabilities !== undefined ? { capabilities } : {}),
             };
             // The wire walk lives in `invokeTurn` (the pure per-turn generator —
             // its docblock owns the switch semantics); this hook only maps each
@@ -498,9 +505,6 @@ export function useAgentInvoke(opts) {
                     setError(ev.message);
                     setErrorCode(ev.code);
                 }
-                else if (ev.kind === "profile-consent") {
-                    setProfileConsentRequest(ev.request);
-                }
                 else if (ev.kind === "profile-link") {
                     setProfileLinkRequest(ev.request);
                 }
@@ -569,8 +573,6 @@ export function useAgentInvoke(opts) {
         reset,
         reduceResult,
         historyCards,
-        profileConsentRequest,
-        clearProfileConsentRequest,
         profileLinkRequest,
         clearProfileLinkRequest,
         aborted,

package/dist/web-adapters.d.ts

@@ -7,6 +7,7 @@
  * (the functions guard on `typeof window`).
  */
 import { type McpToolCallResult, type ResolvedViewMount, type UiActionRequest } from "@guuey/mcp-apps-host";
+import type { AgHitlAnswer } from "@silverprotocol/core";
 import type { AgentInvokeAdapters, ThreadIdStore } from "./types.js";
 /** Persists the threadId in `window.localStorage` (synchronously). */
 export declare const localStorageThreadStore: ThreadIdStore;
@@ -198,4 +199,56 @@ export interface CreateUiActionRelayOptions {
  * error into the sandbox bridge.
  */
 export declare function createUiActionRelay(options: CreateUiActionRelayOptions): (request: UiActionRequest) => Promise<McpToolCallResult>;
+/** Options for {@link createHitlAnswerRelay} — the same credential surface as the card relays. */
+export interface CreateHitlAnswerRelayOptions {
+    /** The surface's invoke endpoint (pod base URL or full `/agent/invoke` URL) — the answer door lives on the pod. */
+    endpointUrl: string;
+    /** Signed-in bearer — wins over the guest secret (same rule as the transport). */
+    getAccessToken?: (opts?: {
+        forceRefresh?: boolean;
+    }) => Promise<string | null>;
+    /** Caller-owned anonymous guest secret (widget / guest chat). */
+    guestSecret?: string | null;
+    /** Injectable for tests. */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * The pod's answer to a delivered {@link AgHitlAnswer}. `ok` carries the
+ * body the door returns (`askId`, echoed `status`, and — for a recorded
+ * consent — the grant `mode` written); every non-2xx collapses to the pod's
+ * `{ code, message }` envelope (the same vocabulary as `AGENT_ERROR_CODES`,
+ * e.g. `NOT_FOUND` for an ask this pod did not mint, `INVALID_REQUEST` for a
+ * spec-invalid answer) with the HTTP status; a transport failure is
+ * `status: 0` with a null code.
+ */
+export type HitlAnswerRelayResult = {
+    ok: true;
+    body: {
+        askId: string;
+        status: AgHitlAnswer["status"];
+        mode?: string;
+    };
+} | {
+    ok: false;
+    status: number;
+    code: string | null;
+    message: string;
+};
+/**
+ * Build the client→pod channel for AgJSON HITL answers (guuey#207): `POST
+ * <pod>/agent/hitl-answer` with the spec {@link AgHitlAnswer} the kit's
+ * `answerHitlPrompt` constructed (already validated against the ask's
+ * persisted declaration). The pod owns EVERYTHING trust-shaped — caller
+ * identity (the same three families as the invoke), which ask it minted,
+ * the thread a `once` grant binds to, the access level written — this
+ * transport only carries the surface's existing credential under the
+ * one-carrier rule (bearer → guest header → cookie), with the card relays'
+ * single 401 forceRefresh retry.
+ *
+ * Today the only producer is the pod's cross-app profile consent ask (the
+ * three-mode grant), whose answer resolves into the caller's own
+ * `ProfileGrant` row; the channel is generic by construction — any future
+ * `hitl.ask` the runtime emits is answered through this same door.
+ */
+export declare function createHitlAnswerRelay(options: CreateHitlAnswerRelayOptions): (answer: AgHitlAnswer) => Promise<HitlAnswerRelayResult>;
 //# sourceMappingURL=web-adapters.d.ts.map

package/dist/web-adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-adapters.d.ts","sourceRoot":"","sources":["../src/web-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAIL,KAAK,iBAAiB,EAEtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAmB,aAAa,EAAE,MAAM,YAAY,CAAC;AAKtF,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,EAAE,aAiBrC,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,wBAA6B,GAClC,mBAAmB,CA8ErB;AAED,mGAAmG;AACnG,MAAM,WAAW,6BAA6B;IAC5C,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAID,0FAA0F;AAC1F,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAcD,0FAA0F;AAC1F,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,6BAA6B,GACrC,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAsFjE;AAED,uFAAuF;AACvF,MAAM,WAAW,0BAA0B;IACzC,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAuG1D"}
+{"version":3,"file":"web-adapters.d.ts","sourceRoot":"","sources":["../src/web-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAIL,KAAK,iBAAiB,EAEtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAmB,aAAa,EAAE,MAAM,YAAY,CAAC;AAKtF,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,EAAE,aAiBrC,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,wBAA6B,GAClC,mBAAmB,CA8ErB;AAED,mGAAmG;AACnG,MAAM,WAAW,6BAA6B;IAC5C,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAID,0FAA0F;AAC1F,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAcD,0FAA0F;AAC1F,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,6BAA6B,GACrC,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAsFjE;AAED,uFAAuF;AACvF,MAAM,WAAW,0BAA0B;IACzC,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAuG1D;AAOD,kGAAkG;AAClG,MAAM,WAAW,4BAA4B;IAC3C,mHAAmH;IACnH,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACpF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,4BAA4B,GACpC,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,qBAAqB,CAAC,CA6D1D"}

package/dist/web-adapters.js

@@ -368,3 +368,90 @@ export function createUiActionRelay(options) {
     };
     return createMcpUiActionRelay({ callTool });
 }
+/** `<pod base>/agent/hitl-answer` — the AgJSON HITL answer door (guuey#207). */
+function toHitlAnswerUrl(endpointUrl) {
+    return toInvokeUrl(endpointUrl).replace(/\/agent\/invoke$/, "/agent/hitl-answer");
+}
+/**
+ * Build the client→pod channel for AgJSON HITL answers (guuey#207): `POST
+ * <pod>/agent/hitl-answer` with the spec {@link AgHitlAnswer} the kit's
+ * `answerHitlPrompt` constructed (already validated against the ask's
+ * persisted declaration). The pod owns EVERYTHING trust-shaped — caller
+ * identity (the same three families as the invoke), which ask it minted,
+ * the thread a `once` grant binds to, the access level written — this
+ * transport only carries the surface's existing credential under the
+ * one-carrier rule (bearer → guest header → cookie), with the card relays'
+ * single 401 forceRefresh retry.
+ *
+ * Today the only producer is the pod's cross-app profile consent ask (the
+ * three-mode grant), whose answer resolves into the caller's own
+ * `ProfileGrant` row; the channel is generic by construction — any future
+ * `hitl.ask` the runtime emits is answered through this same door.
+ */
+export function createHitlAnswerRelay(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const url = toHitlAnswerUrl(options.endpointUrl);
+    return async (answer) => {
+        const headers = { "content-type": "application/json" };
+        const body = JSON.stringify(answer);
+        const init = { method: "POST", headers, body };
+        const token = options.getAccessToken ? await options.getAccessToken() : null;
+        const guest = sendableGuestSecret(options.guestSecret);
+        if (token) {
+            headers["authorization"] = `Bearer ${token}`;
+        }
+        else if (guest) {
+            headers[GUEST_HEADER] = guest;
+        }
+        else {
+            init.credentials = "include";
+        }
+        let res;
+        try {
+            res = await fetchImpl(url, init);
+        }
+        catch (err) {
+            return { ok: false, status: 0, code: null, message: err instanceof Error ? err.message : String(err) };
+        }
+        if (res.status === 401 && options.getAccessToken) {
+            const fresh = await options.getAccessToken({ forceRefresh: true }).catch(() => null);
+            if (fresh) {
+                try {
+                    res = await fetchImpl(url, {
+                        method: "POST",
+                        headers: { ...headers, authorization: `Bearer ${fresh}` },
+                        body,
+                    });
+                }
+                catch (err) {
+                    return { ok: false, status: 0, code: null, message: err instanceof Error ? err.message : String(err) };
+                }
+            }
+        }
+        let parsed = undefined;
+        try {
+            parsed = await res.json();
+        }
+        catch {
+            parsed = undefined;
+        }
+        if (res.ok) {
+            const b = (parsed ?? {});
+            return {
+                ok: true,
+                body: {
+                    askId: typeof b.askId === "string" ? b.askId : answer.askId,
+                    status: b.status === "resolved" || b.status === "declined" || b.status === "cancelled" ? b.status : answer.status,
+                    ...(typeof b.mode === "string" ? { mode: b.mode } : {}),
+                },
+            };
+        }
+        const env = (parsed ?? {});
+        return {
+            ok: false,
+            status: res.status,
+            code: typeof env.code === "string" ? env.code : null,
+            message: typeof env.message === "string" ? env.message : `hitl-answer failed (${res.status})`,
+        };
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/agent-client",
-  "version": "0.7.2",
+  "version": "0.8.1",
   "description": "Client SDK for Guuey's agent runtime: the `useAgentInvoke` React hook + pure SSE helpers that speak the /agent/invoke streaming contract, plus the paginated thread-history read plane. Host adapters (storage / id / transport) are injected, so it runs on web (Next) and React Native alike.",
   "license": "MIT",
   "type": "module",
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@silverprotocol/core": "0.5.0",
-    "@guuey/mcp-apps-host": "0.7.2"
+    "@guuey/mcp-apps-host": "0.8.1"
   },
   "peerDependencies": {
     "react": ">=18"

package/src/error-codes.ts

@@ -53,6 +53,12 @@ export const AGENT_ERROR_CODES = {
   DRAINING: "DRAINING",
   /** Refused for this caller — e.g. the link-prompt dismiss route's byo-only rule. */
   FORBIDDEN: "FORBIDDEN",
+  /**
+   * The consent-answer door's deny==miss (guuey#207): the `AgHitlAnswer` names
+   * an ask this pod did not mint (wrong app, a thread the caller does not
+   * own, or a pod that takes no profile consent). Never an existence oracle.
+   */
+  NOT_FOUND: "NOT_FOUND",
   /** The turn ran past the pod's wall-clock budget. */
   TIMEOUT: "TIMEOUT",
   /** A guuey-side dependency failed (not the agent's own code). */

package/src/index.ts

@@ -3,7 +3,6 @@ export {
   extractAssistantText,
   reduceAssistantText,
   stringField,
-  parseConsentRequest,
   parseLinkRequest,
   type ParsedSseEvent,
 } from "./sse.js";
@@ -12,6 +11,9 @@ export { dismissLinkPrompt } from "./link-prompt.js";
 // wraps, for hosts that drive their own turn state machine (guuey#186 G5).
 export { invokeTurn, toInvokeUrl, type InvokeTurnEvent } from "./invoke-turn.js";
 export {
+  createHitlAnswerRelay,
+  type CreateHitlAnswerRelayOptions,
+  type HitlAnswerRelayResult,
   createUiActionRelay,
   type CreateUiActionRelayOptions,
   createUiResourceReader,
@@ -74,11 +76,20 @@ export { sortHistoryCards, toolNameFor } from "./history.js";
 // host folding `invokeTurn`'s agEvents outside the hook builds its transcript
 // on the same terms (the types alone forced the direct dep back, guuey#186 G4).
 export { Reducer } from "@silverprotocol/core";
-export type { AgEvent, AgReduceResult, AgMessage, AgBlock } from "@silverprotocol/core";
+export type {
+  AgEvent,
+  AgReduceResult,
+  AgMessage,
+  AgBlock,
+  // The client→pod capability advertisement + the HITL answer the relay
+  // delivers (guuey#207) — re-exported so a host names them without a direct
+  // `@silverprotocol/core` import.
+  AgClientCapabilities,
+  AgHitlAnswer,
+} from "@silverprotocol/core";
 export type {
   AgentMessage,
   HistoryCard,
-  ProfileConsentRequest,
   ProfileLinkRequest,
   ThreadIdStore,
   GenerateId,

package/src/invoke-turn.ts

@@ -23,21 +23,9 @@
  * fall-through, so new wire events are additive for every consumer.
  */
 import type { AgEvent } from "@silverprotocol/core";
-import {
-  parseConsentRequest,
-  parseLinkRequest,
-  parseSseEvents,
-  reduceAssistantText,
-  stringField,
-} from "./sse.js";
+import { parseLinkRequest, parseSseEvents, reduceAssistantText, stringField } from "./sse.js";
 import { ingestMessageFrame } from "./blocks.js";
-import type {
-  AgentInvokeStatus,
-  InvokeRequest,
-  InvokeTransport,
-  ProfileConsentRequest,
-  ProfileLinkRequest,
-} from "./types.js";
+import type { AgentInvokeStatus, InvokeRequest, InvokeTransport, ProfileLinkRequest } from "./types.js";
 
 /**
  * One semantic step of a turn. Field conventions:
@@ -63,7 +51,6 @@ export type InvokeTurnEvent =
       agEvents: AgEvent[];
     }
   | { kind: "error"; message: string; code: string | null }
-  | { kind: "profile-consent"; request: ProfileConsentRequest }
   | { kind: "profile-link"; request: ProfileLinkRequest }
   | { kind: "done"; stopReason: string | null };
 
@@ -164,15 +151,12 @@ export async function* invokeTurn(
           message: stringField(ev.data, "message") ?? "agent error",
           code: stringField(ev.data, "code") ?? null,
         };
-      } else if (ev.event === "profile-consent-needed") {
-        // Cross-app profile consent ask (T6). Only a well-formed payload
-        // yields; a malformed one is dropped, leaving any prior valid
-        // request untouched (never clobbered to null).
-        const parsed = parseConsentRequest(ev.data);
-        if (parsed) yield { kind: "profile-consent", request: parsed };
       } else if (ev.event === "profile-link-needed") {
         // Cross-app profile LINK invite (linkcoh T3) for an unlinked byo
-        // caller. Same drop-if-malformed contract as consent above.
+        // caller. Only a well-formed payload yields; a malformed one is
+        // dropped, leaving any prior valid request untouched (never clobbered
+        // to null). (Consent is NOT a bespoke event: it rides the AgJSON fold
+        // as `hitl.ask` + `turn.done outcome:"paused"` — guuey#207.)
         const parsed = parseLinkRequest(ev.data);
         if (parsed) yield { kind: "profile-link", request: parsed };
       } else if (ev.event === "done") {

package/src/react.ts

@@ -12,6 +12,7 @@ export {
   type HistoryApplication,
   stallProbeDecision,
   STALL_RECOVERY_DEFAULTS,
+  DEFAULT_BLOCK_PRESERVING_CAPABILITIES,
 } from "./useAgentInvoke.js";
 // The block-preserving transcript surfaces `AgReduceResult`; re-export it (and
 // `AgEvent`) here so `./react` consumers can type `reduceResult` without a

package/src/sse.ts

@@ -4,7 +4,7 @@
  * verbatim across web (Studio) and React-Native (Portal).
  */
 
-import type { ProfileConsentRequest, ProfileLinkRequest } from "./types.js";
+import type { ProfileLinkRequest } from "./types.js";
 
 export interface ParsedSseEvent {
   event: string;
@@ -140,30 +140,13 @@ export function stringField(data: unknown, key: string): string | undefined {
   return typeof v === "string" ? v : undefined;
 }
 
-/**
- * Parse a `profile-consent-needed` SSE payload into a typed
- * {@link ProfileConsentRequest}, or `null` if it does not conform. `appId`
- * must be a non-empty string and `requested` exactly `"read"` or
- * `"read-write"`; extra keys are tolerated (ignored). Returns a fresh
- * normalized object so callers get exactly the typed shape, never the raw
- * wire payload with unknown extras.
- */
-export function parseConsentRequest(data: unknown): ProfileConsentRequest | null {
-  if (typeof data !== "object" || data === null || Array.isArray(data)) return null;
-  const appId = (data as { appId?: unknown }).appId;
-  const requested = (data as { requested?: unknown }).requested;
-  if (typeof appId !== "string" || appId.length === 0) return null;
-  if (requested !== "read" && requested !== "read-write") return null;
-  return { appId, requested };
-}
-
 /**
  * Parse a `profile-link-needed` SSE payload into a typed
- * {@link ProfileLinkRequest}, or `null` if it does not conform. Same shape +
- * validation as {@link parseConsentRequest} (`appId` non-empty string,
- * `requested` exactly `"read"` or `"read-write"`, extra keys tolerated) — the
- * pod emits an identically-shaped payload for both events; only the event
- * NAME (and what it means to the consumer) differs.
+ * {@link ProfileLinkRequest}, or `null` if it does not conform. `appId` must
+ * be a non-empty string and `requested` exactly `"read"` or `"read-write"`;
+ * extra keys are tolerated (ignored). Returns a fresh normalized object so
+ * callers get exactly the typed shape, never the raw wire payload with
+ * unknown extras.
  */
 export function parseLinkRequest(data: unknown): ProfileLinkRequest | null {
   if (typeof data !== "object" || data === null || Array.isArray(data)) return null;

package/src/types.ts

@@ -13,7 +13,7 @@
  * `MessageStorageAdapter` injection pattern.
  */
 
-import type { AgReduceResult, JsonValue } from "@silverprotocol/core";
+import type { AgClientCapabilities, AgReduceResult, JsonValue } from "@silverprotocol/core";
 
 /** A flat chat turn as rendered by the consumer UI. */
 export interface AgentMessage {
@@ -28,20 +28,6 @@ export interface AgentMessage {
   clientMessageId?: string;
 }
 
-/**
- * A cross-app profile consent request surfaced mid-stream by the pod's
- * `profile-consent-needed` SSE event (nocode-runtime T6). Emitted when the
- * agent declares a profile intent the caller has NOT yet granted for this app,
- * so the consumer UI can prompt the user to authorize `read` or `read-write`
- * access. `requested` mirrors the pod's `ProfileAccess` posture verbatim; the
- * literal union is inlined rather than imported to keep this client SDK free of
- * any backend-package dependency.
- */
-export interface ProfileConsentRequest {
-  appId: string;
-  requested: "read" | "read-write";
-}
-
 /**
  * A cross-app profile LINK invite surfaced mid-stream by the pod's
  * `profile-link-needed` SSE event (nocode-runtime linkcoh T3). Emitted when an
@@ -49,8 +35,10 @@ export interface ProfileConsentRequest {
  * link their guuey account (via the named `/link` ceremony) so they earn the
  * guuey-wide cross-app profile. `requested` mirrors the pod's `ProfileAccess`
  * posture verbatim (the builder's declared access, not a live ask) — the
- * literal union is inlined rather than imported, same rationale as
- * {@link ProfileConsentRequest}.
+ * literal union is inlined rather than imported to keep this client SDK free
+ * of any backend-package dependency. (Consent itself is no longer a bespoke
+ * event: it rides AgJSON `hitl.ask` + `turn.done outcome:"paused"` in the
+ * fold and is answered through `createHitlAnswerRelay` — guuey#207.)
  */
 export interface ProfileLinkRequest {
   appId: string;
@@ -87,7 +75,7 @@ export type GenerateId = () => string;
 export interface InvokeRequest {
   /** Fully-resolved POST target (already normalised to end in `/agent/invoke`). */
   url: string;
-  /** JSON request body: `{ input, threadId?, clientMessageId }`. */
+  /** JSON request body: `{ input, threadId?, clientMessageId, capabilities? }`. */
   body: unknown;
   /** Aborts the in-flight stream. */
   signal: AbortSignal;
@@ -165,6 +153,18 @@ export interface UseAgentInvokeOptions {
    * reducer is never constructed and the text behaviour is byte-identical.
    */
   preserveBlocks?: boolean;
+  /**
+   * The AgJSON client capabilities advertised on every invoke body (spec §3
+   * `AgClientCapabilities`, guuey#207). The pod reads them to decide what it
+   * may ask: today it declares consent `grantModes` (the three-mode profile
+   * grant the `@guuey/chat` card renders) ONLY to a client that advertised
+   * `hitl.grantModes` — a client that cannot render the decision surface is
+   * simply not asked. Default: when {@link preserveBlocks} is on,
+   * `{ hitl: { ask: true, grantModes: true } }` (a block-preserving consumer
+   * folds the paused turn the ask rides on — the kit's exact path); when off,
+   * nothing is advertised. Pass an explicit object to override either way.
+   */
+  capabilities?: AgClientCapabilities;
   /**
    * Stall recovery for a half-dead stream (guuey#192). A connection that dies
    * WITHOUT erroring (TCP alive, zero bytes, no `done`) would otherwise leave
@@ -283,26 +283,16 @@ export interface UseAgentInvokeReturn {
    * `reset()` clears it back to `[]`.
    */
   historyCards: HistoryCard[];
-  /**
-   * The latest cross-app profile consent request the pod asked for on THIS
-   * conversation, or `null`. Set from a well-formed `profile-consent-needed`
-   * SSE event (see {@link ProfileConsentRequest}); malformed payloads are
-   * dropped and leave the field untouched. `reset()` and an app switch clear
-   * it back to `null`. Consumers that never render a consent prompt (e.g.
-   * Studio) simply ignore this field.
-   */
-  profileConsentRequest: ProfileConsentRequest | null;
-  /** Dismiss the pending {@link profileConsentRequest} (back to `null`). */
-  clearProfileConsentRequest: () => void;
   /**
    * The latest cross-app profile LINK invite the pod asked for on THIS
    * conversation, or `null`. Set from a well-formed `profile-link-needed`
    * SSE event (see {@link ProfileLinkRequest}); malformed payloads are
    * dropped and leave the field untouched. `reset()` and an app switch clear
    * it back to `null`. Consumers that never render a link prompt simply
-   * ignore this field. Distinct from {@link profileConsentRequest}: this one
-   * invites an UNLINKED byo user to link their account; consent asks an
-   * already-linked user to grant an app read/read-write access.
+   * ignore this field. Distinct from consent (an AgJSON `hitl.ask` in the
+   * fold, guuey#207): this one invites an UNLINKED byo user to link their
+   * account; consent asks an already-linked user to grant an app
+   * read/read-write access.
    */
   profileLinkRequest: ProfileLinkRequest | null;
   /** Dismiss the pending {@link profileLinkRequest} (back to `null`). */

package/src/useAgentInvoke.ts

@@ -5,7 +5,7 @@
  * ggui generative-UI protocol that `@ggui-ai/mcp-apps-react`'s useInvoke targets):
  *
  *   POST {endpointUrl}/agent/invoke
- *     body: { input, threadId?, clientMessageId }
+ *     body: { input, threadId?, clientMessageId, capabilities? }
  *   ← SSE:
  *     event: session  { sessionId, userId, threadId? }
  *     event: message  <SDKMessage JSON>          (assistant turns + result)
@@ -22,7 +22,7 @@
  * `./web-adapters` for the web (Studio) bundle; Portal supplies RN adapters.
  */
 import { useCallback, useEffect, useRef, useState } from "react";
-import { Reducer, type AgReduceResult } from "@silverprotocol/core";
+import { Reducer, type AgClientCapabilities, type AgReduceResult } from "@silverprotocol/core";
 import { invokeTurn, toInvokeUrl } from "./invoke-turn.js";
 import { AgentResponseError } from "./errors.js";
 import { withActivityObserver } from "./transport.js";
@@ -33,7 +33,6 @@ import type {
   AgentMessage,
   HistoryCard,
   HistoryLoadResult,
-  ProfileConsentRequest,
   ProfileLinkRequest,
   StallRecoveryOptions,
   UseAgentInvokeOptions,
@@ -44,6 +43,16 @@ function threadStorageKey(appId: string | undefined): string {
   return `guuey:thread:${appId ?? "default"}`;
 }
 
+/**
+ * What a block-preserving consumer advertises by default (guuey#207): it
+ * folds `turn.done outcome:"paused"` records, so it can render the AgJSON
+ * hitl card with declared grant modes — the `@guuey/chat` path. See
+ * `UseAgentInvokeOptions.capabilities`.
+ */
+export const DEFAULT_BLOCK_PRESERVING_CAPABILITIES: AgClientCapabilities = {
+  hitl: { ask: true, grantModes: true },
+};
+
 /** The decision `applyHistoryResult` reaches for a loaded transcript. */
 export type HistoryApplication =
   | { kind: "seed"; messages: AgentMessage[] }
@@ -136,14 +145,11 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
   // contract). Independent of the live `reduceResult` fold — populated only
   // when a card-carrying history load seeds the transcript.
   const [historyCards, setHistoryCards] = useState<HistoryCard[]>([]);
-  // The pod's latest cross-app profile consent ask on this conversation (T6's
-  // `profile-consent-needed` SSE event), or null. Cleared on app switch /
-  // reset / explicit dismiss. Consumers with no consent UI just ignore it.
-  const [profileConsentRequest, setProfileConsentRequest] = useState<ProfileConsentRequest | null>(null);
   // The pod's latest cross-app profile LINK invite on this conversation (T3's
   // `profile-link-needed` SSE event), or null. Cleared on app switch / reset /
-  // explicit dismiss, same lifecycle as `profileConsentRequest` — the two are
-  // independent (an unlinked-invite vs an already-linked consent ask).
+  // explicit dismiss. (Consent is NOT hook state: it rides the AgJSON fold as
+  // a paused turn — `reduceResult` — and is answered through
+  // `createHitlAnswerRelay`, guuey#207.)
   const [profileLinkRequest, setProfileLinkRequest] = useState<ProfileLinkRequest | null>(null);
   // The last turn's ending posture + the optimistic-send ledger — the
   // transcript renderer's inputs (guuey#135 wave 3b; see the return-type
@@ -201,8 +207,7 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
     reducerRef.current = null;
     setReduceResult(null);
     setHistoryCards([]);
-    // A prior app's consent ask must never leak into the new conversation.
-    setProfileConsentRequest(null);
+    // A prior app's link invite must never leak into the new conversation.
     setProfileLinkRequest(null);
     setAborted(false);
     setAdopted(false);
@@ -295,17 +300,12 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
     reducerRef.current = null;
     setReduceResult(null);
     setHistoryCards([]);
-    setProfileConsentRequest(null);
     setProfileLinkRequest(null);
     setAborted(false);
     setAdopted(false);
     setSendStates({});
   }, [appId]);
 
-  const clearProfileConsentRequest = useCallback(() => {
-    setProfileConsentRequest(null);
-  }, []);
-
   const clearProfileLinkRequest = useCallback(() => {
     setProfileLinkRequest(null);
   }, []);
@@ -474,10 +474,17 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
 
       try {
         const invokeUrl = toInvokeUrl(endpointUrl);
+        // The advertised AgJSON client capabilities (spec §3, guuey#207): an
+        // explicit option wins; else a block-preserving consumer advertises
+        // the hitl grant-mode card it can render, and a text-only one nothing.
+        const capabilities =
+          opts.capabilities ??
+          (preserveBlocksRef.current ? DEFAULT_BLOCK_PRESERVING_CAPABILITIES : undefined);
         const body = {
           input,
           ...(threadIdRef.current ? { threadId: threadIdRef.current } : {}),
           clientMessageId,
+          ...(capabilities !== undefined ? { capabilities } : {}),
         };
 
         // The wire walk lives in `invokeTurn` (the pure per-turn generator —
@@ -519,8 +526,6 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
             // a previous turn's code standing).
             setError(ev.message);
             setErrorCode(ev.code);
-          } else if (ev.kind === "profile-consent") {
-            setProfileConsentRequest(ev.request);
           } else if (ev.kind === "profile-link") {
             setProfileLinkRequest(ev.request);
           }
@@ -588,8 +593,6 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
     reset,
     reduceResult,
     historyCards,
-    profileConsentRequest,
-    clearProfileConsentRequest,
     profileLinkRequest,
     clearProfileLinkRequest,
     aborted,

package/src/web-adapters.ts

@@ -15,6 +15,7 @@ import {
   type ResolvedViewMount,
   type UiActionRequest,
 } from "@guuey/mcp-apps-host";
+import type { AgHitlAnswer } from "@silverprotocol/core";
 import type { AgentInvokeAdapters, InvokeTransport, ThreadIdStore } from "./types.js";
 import { fetchThreadHistory, HistoryUnauthorizedError } from "./history.js";
 import { fetchStreamTransport, sendableGuestSecret, GUEST_HEADER } from "./transport.js";
@@ -526,3 +527,114 @@ export function createUiActionRelay(
   };
   return createMcpUiActionRelay({ callTool });
 }
+
+/** `<pod base>/agent/hitl-answer` — the AgJSON HITL answer door (guuey#207). */
+function toHitlAnswerUrl(endpointUrl: string): string {
+  return toInvokeUrl(endpointUrl).replace(/\/agent\/invoke$/, "/agent/hitl-answer");
+}
+
+/** Options for {@link createHitlAnswerRelay} — the same credential surface as the card relays. */
+export interface CreateHitlAnswerRelayOptions {
+  /** The surface's invoke endpoint (pod base URL or full `/agent/invoke` URL) — the answer door lives on the pod. */
+  endpointUrl: string;
+  /** Signed-in bearer — wins over the guest secret (same rule as the transport). */
+  getAccessToken?: (opts?: { forceRefresh?: boolean }) => Promise<string | null>;
+  /** Caller-owned anonymous guest secret (widget / guest chat). */
+  guestSecret?: string | null;
+  /** Injectable for tests. */
+  fetchImpl?: typeof fetch;
+}
+
+/**
+ * The pod's answer to a delivered {@link AgHitlAnswer}. `ok` carries the
+ * body the door returns (`askId`, echoed `status`, and — for a recorded
+ * consent — the grant `mode` written); every non-2xx collapses to the pod's
+ * `{ code, message }` envelope (the same vocabulary as `AGENT_ERROR_CODES`,
+ * e.g. `NOT_FOUND` for an ask this pod did not mint, `INVALID_REQUEST` for a
+ * spec-invalid answer) with the HTTP status; a transport failure is
+ * `status: 0` with a null code.
+ */
+export type HitlAnswerRelayResult =
+  | { ok: true; body: { askId: string; status: AgHitlAnswer["status"]; mode?: string } }
+  | { ok: false; status: number; code: string | null; message: string };
+
+/**
+ * Build the client→pod channel for AgJSON HITL answers (guuey#207): `POST
+ * <pod>/agent/hitl-answer` with the spec {@link AgHitlAnswer} the kit's
+ * `answerHitlPrompt` constructed (already validated against the ask's
+ * persisted declaration). The pod owns EVERYTHING trust-shaped — caller
+ * identity (the same three families as the invoke), which ask it minted,
+ * the thread a `once` grant binds to, the access level written — this
+ * transport only carries the surface's existing credential under the
+ * one-carrier rule (bearer → guest header → cookie), with the card relays'
+ * single 401 forceRefresh retry.
+ *
+ * Today the only producer is the pod's cross-app profile consent ask (the
+ * three-mode grant), whose answer resolves into the caller's own
+ * `ProfileGrant` row; the channel is generic by construction — any future
+ * `hitl.ask` the runtime emits is answered through this same door.
+ */
+export function createHitlAnswerRelay(
+  options: CreateHitlAnswerRelayOptions,
+): (answer: AgHitlAnswer) => Promise<HitlAnswerRelayResult> {
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const url = toHitlAnswerUrl(options.endpointUrl);
+  return async (answer) => {
+    const headers: Record<string, string> = { "content-type": "application/json" };
+    const body = JSON.stringify(answer);
+    const init: RequestInit = { method: "POST", headers, body };
+    const token = options.getAccessToken ? await options.getAccessToken() : null;
+    const guest = sendableGuestSecret(options.guestSecret);
+    if (token) {
+      headers["authorization"] = `Bearer ${token}`;
+    } else if (guest) {
+      headers[GUEST_HEADER] = guest;
+    } else {
+      init.credentials = "include";
+    }
+    let res: Response;
+    try {
+      res = await fetchImpl(url, init);
+    } catch (err) {
+      return { ok: false, status: 0, code: null, message: err instanceof Error ? err.message : String(err) };
+    }
+    if (res.status === 401 && options.getAccessToken) {
+      const fresh = await options.getAccessToken({ forceRefresh: true }).catch(() => null);
+      if (fresh) {
+        try {
+          res = await fetchImpl(url, {
+            method: "POST",
+            headers: { ...headers, authorization: `Bearer ${fresh}` },
+            body,
+          });
+        } catch (err) {
+          return { ok: false, status: 0, code: null, message: err instanceof Error ? err.message : String(err) };
+        }
+      }
+    }
+    let parsed: unknown = undefined;
+    try {
+      parsed = await res.json();
+    } catch {
+      parsed = undefined;
+    }
+    if (res.ok) {
+      const b = (parsed ?? {}) as { askId?: unknown; status?: unknown; mode?: unknown };
+      return {
+        ok: true,
+        body: {
+          askId: typeof b.askId === "string" ? b.askId : answer.askId,
+          status: b.status === "resolved" || b.status === "declined" || b.status === "cancelled" ? b.status : answer.status,
+          ...(typeof b.mode === "string" ? { mode: b.mode } : {}),
+        },
+      };
+    }
+    const env = (parsed ?? {}) as { code?: unknown; message?: unknown };
+    return {
+      ok: false,
+      status: res.status,
+      code: typeof env.code === "string" ? env.code : null,
+      message: typeof env.message === "string" ? env.message : `hitl-answer failed (${res.status})`,
+    };
+  };
+}