@guuey/config 0.16.7 → 0.16.9

package/dist/app.d.ts

@@ -9,6 +9,7 @@
  * (agent or mcp-server) is what's deployable; this section is presentation.
  */
 import { z } from 'zod';
+import { type GuueyAppTheme } from './theme.js';
 /**
  * End-user auth modes an app record accepts — mirrors the platform's
  * `USER_AUTH_MODES` (`@guuey-private/types` `security/user-auth-mode.ts`),
@@ -47,6 +48,55 @@ export declare const AppAccessV1: z.ZodObject<{
 }, z.core.$strict>;
 /** Static TypeScript type for `app.access`. */
 export type GuueyAppAccess = z.infer<typeof AppAccessV1>;
+/**
+ * `guuey.json#app.page` — the STANDALONE PAGE's posture, declared in the
+ * manifest so `guuey agent apply` converges it (posture-as-code, guuey#286;
+ * requested by the first agents-as-code consumer, ggui#558). Field names ARE
+ * the platform's `standalonePage` patch vocabulary (`PUT /v1/apps/:id` /
+ * the reconcile `config` block, cli-wire `STANDALONE_PAGE_FIELDS`) — no
+ * translation; the backend pins the two lists equal
+ * (`handlers/reconcile.test.ts`, the APP_USER_AUTH_MODES pattern).
+ *
+ * Patch semantics, same as the PUT: an absent member is left untouched by a
+ * reconcile, `null` clears the member to its default (page on, indexable, no
+ * copy/CTA/endpoint). Values are shape-checked only — caps, the https rule
+ * and the CTA both-or-neither pairing are the platform validator's
+ * (`validateStandalonePagePatch`), so the CLI surfaces its exact message
+ * (the same split as `app.theme`'s colour grammar).
+ *
+ * `slug` stays OUT: claiming has uniqueness/release semantics (a ceremony,
+ * not a converged field). But the posture here REACHES the slug ceremony's
+ * automatic arm: the first-Live default-slug claim (guuey#249) consults it
+ * and skips when `enabled: false` — `--page off` in git means no auto-named
+ * public host, ever.
+ */
+export declare const AppPageV1: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    welcomeCopy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ctaLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ctaUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    identityEndpointUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    noindex: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+}, z.core.$strict>;
+/** Static TypeScript type for `app.page`. */
+export type GuueyAppPage = z.infer<typeof AppPageV1>;
+/**
+ * `app.theme` as a file reference — `{ "file": "theme.json" }`, the same
+ * convention as `agent.systemPrompt` (guuey#400). The file's CONTENT is the
+ * same {@link AppThemeV1} vocabulary — no new grammar. Resolution is
+ * CLI-side (the loader reads the file relative to `guuey.json`); the server
+ * only ever sees the inline document and 400s an unresolved reference.
+ *
+ * Discrimination against the inline form is unambiguous: a `{file}`-only
+ * strict object can never collide with the theme vocabulary (which
+ * requires `mode`/`colors`).
+ */
+export declare const ThemeFileRefV1: z.ZodObject<{
+    file: z.ZodString;
+}, z.core.$strict>;
+export type ThemeFileRef = z.infer<typeof ThemeFileRefV1>;
+/** Narrow an `app.theme` value to the `{ file }` reference form. */
+export declare function isThemeFileRef(theme: ThemeFileRef | GuueyAppTheme): theme is ThemeFileRef;
 /**
  * The app section schema. All fields optional in v1 — a project may carry
  * the bare minimum at first and grow the listing as it publishes.
@@ -71,7 +121,9 @@ export declare const AppSectionV1: z.ZodObject<{
         allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
         guestAccess: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     }, z.core.$strict>>;
-    theme: z.ZodOptional<z.ZodObject<{
+    theme: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
         mode: z.ZodEnum<{
             light: "light";
@@ -167,6 +219,14 @@ export declare const AppSectionV1: z.ZodObject<{
                 comfortable: "comfortable";
             }>;
         }, z.core.$strict>>;
+    }, z.core.$strict>]>>;
+    page: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+        welcomeCopy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        ctaLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        ctaUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        identityEndpointUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        noindex: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 /** Static TypeScript type for the app section. */

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2CxB;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,8CAA+C,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;kBAWtB,CAAC;AAEH,+CAA+C;AAC/C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAWvB,CAAC;AAEH,kDAAkD;AAClD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AA0C5D;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,8CAA+C,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;kBAWtB,CAAC;AAEH,+CAA+C;AAC/C,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,SAAS;;;;;;;kBAOpB,CAAC;AAEH,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAErD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc;;kBAA8C,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE1D,oEAAoE;AACpE,wBAAgB,cAAc,CAC5B,KAAK,EAAE,YAAY,GAAG,aAAa,GAClC,KAAK,IAAI,YAAY,CAEvB;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiBvB,CAAC;AAEH,kDAAkD;AAClD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/app.js

@@ -75,6 +75,52 @@ export const AppAccessV1 = z.strictObject({
     allowedDomains: z.array(z.string().min(1)).optional(),
     guestAccess: z.boolean().nullable().optional(),
 });
+/**
+ * `guuey.json#app.page` — the STANDALONE PAGE's posture, declared in the
+ * manifest so `guuey agent apply` converges it (posture-as-code, guuey#286;
+ * requested by the first agents-as-code consumer, ggui#558). Field names ARE
+ * the platform's `standalonePage` patch vocabulary (`PUT /v1/apps/:id` /
+ * the reconcile `config` block, cli-wire `STANDALONE_PAGE_FIELDS`) — no
+ * translation; the backend pins the two lists equal
+ * (`handlers/reconcile.test.ts`, the APP_USER_AUTH_MODES pattern).
+ *
+ * Patch semantics, same as the PUT: an absent member is left untouched by a
+ * reconcile, `null` clears the member to its default (page on, indexable, no
+ * copy/CTA/endpoint). Values are shape-checked only — caps, the https rule
+ * and the CTA both-or-neither pairing are the platform validator's
+ * (`validateStandalonePagePatch`), so the CLI surfaces its exact message
+ * (the same split as `app.theme`'s colour grammar).
+ *
+ * `slug` stays OUT: claiming has uniqueness/release semantics (a ceremony,
+ * not a converged field). But the posture here REACHES the slug ceremony's
+ * automatic arm: the first-Live default-slug claim (guuey#249) consults it
+ * and skips when `enabled: false` — `--page off` in git means no auto-named
+ * public host, ever.
+ */
+export const AppPageV1 = z.strictObject({
+    enabled: z.boolean().nullable().optional(),
+    welcomeCopy: z.string().nullable().optional(),
+    ctaLabel: z.string().nullable().optional(),
+    ctaUrl: z.string().nullable().optional(),
+    identityEndpointUrl: z.string().nullable().optional(),
+    noindex: z.boolean().nullable().optional(),
+});
+/**
+ * `app.theme` as a file reference — `{ "file": "theme.json" }`, the same
+ * convention as `agent.systemPrompt` (guuey#400). The file's CONTENT is the
+ * same {@link AppThemeV1} vocabulary — no new grammar. Resolution is
+ * CLI-side (the loader reads the file relative to `guuey.json`); the server
+ * only ever sees the inline document and 400s an unresolved reference.
+ *
+ * Discrimination against the inline form is unambiguous: a `{file}`-only
+ * strict object can never collide with the theme vocabulary (which
+ * requires `mode`/`colors`).
+ */
+export const ThemeFileRefV1 = z.strictObject({ file: z.string().min(1) });
+/** Narrow an `app.theme` value to the `{ file }` reference form. */
+export function isThemeFileRef(theme) {
+    return 'file' in theme;
+}
 /**
  * The app section schema. All fields optional in v1 — a project may carry
  * the bare minimum at first and grow the listing as it publishes.
@@ -88,6 +134,12 @@ export const AppSectionV1 = z.strictObject({
     customDomain: CustomDomainSchema.optional(),
     /** Access policy converged by `guuey agent apply` — see {@link AppAccessV1}. */
     access: AppAccessV1.optional(),
-    /** Chat theme AS CODE, converged by `guuey agent apply` — see {@link AppThemeV1}. */
-    theme: AppThemeV1.optional(),
+    /**
+     * Chat theme AS CODE, converged by `guuey agent apply` — the inline
+     * document ({@link AppThemeV1}) or a `{ file }` reference the CLI
+     * resolves ({@link ThemeFileRefV1}).
+     */
+    theme: z.union([ThemeFileRefV1, AppThemeV1]).optional(),
+    /** Standalone-page posture converged by `guuey agent apply` — see {@link AppPageV1}. */
+    page: AppPageV1.optional(),
 });

package/dist/loader.d.ts

@@ -1,4 +1,5 @@
 import { GuueyJsonV1 } from './schema.js';
+import { type GuueyAppTheme } from './theme.js';
 /** How many parent directories `findGuueyJson` will walk by default. */
 export declare const DEFAULT_FIND_MAX_DEPTH = 8;
 /**
@@ -45,6 +46,12 @@ export interface ResolvedGuueyJson {
      * (caller falls back to `GUUEY_DEFAULT_SYSTEM_PROMPT`).
      */
     resolvedSystemPrompt: string | undefined;
+    /**
+     * The resolved app theme — the inline document from `app.theme`, or the
+     * file's parsed content when it was a `{ file: '...' }` reference
+     * (guuey#400), or `undefined` when no theme was set.
+     */
+    resolvedTheme: GuueyAppTheme | undefined;
     /** Absolute path the document was loaded from (for diagnostics). */
     sourcePath: string;
 }
@@ -57,15 +64,16 @@ export interface ResolvedGuueyJson {
  * shape; the pod runtime reads the resolved prompt directly.
  *
  * Throws if the file is missing, unreadable, malformed, fails schema
- * validation, OR the systemPrompt.file path resolves to a missing or
- * unreadable file.
+ * validation, OR the systemPrompt.file / app.theme.file path resolves to
+ * a missing or unreadable file.
  */
 export declare function loadGuueyJson(path: string): ResolvedGuueyJson;
 /**
  * Build the snapshot the deploy upload + pod boot consume.
  *
  * Replaces `agent.systemPrompt = { file }` with `agent.systemPrompt = <inlined>`
- * so the snapshot is self-contained. Returns a deep-cloned document
+ * and `app.theme = { file }` with the file's parsed document so the
+ * snapshot is self-contained. Returns a deep-cloned document
  * (caller mutations don't leak back).
  */
 export declare function buildDeploySnapshot(loaded: ResolvedGuueyJson): GuueyJsonV1;

package/dist/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,WAAW,EAGZ,MAAM,aAAa,CAAC;AAErB,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,GAAE,MAAsB,EAChC,QAAQ,GAAE,MAA+B,GACxC,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAgB3D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAIvE;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,GAAG,EAAE,WAAW,CAAC;IACjB;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAI7D;AAyCD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAM1E"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../src/loader.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,WAAW,EAGZ,MAAM,aAAa,CAAC;AAErB,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAE5D,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,GAAE,MAAsB,EAChC,QAAQ,GAAE,MAA+B,GACxC,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAgB3D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAIvE;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,GAAG,EAAE,WAAW,CAAC;IACjB;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC;;;;OAIG;IACH,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IACzC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAK7D;AAmGD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAgB1E"}

package/dist/loader.js

@@ -22,6 +22,8 @@
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 import { GUUEY_JSON_FILENAME, assertSupportedGuueyJsonSchema, parseGuueyJson, } from './schema.js';
+import { isThemeFileRef } from './app.js';
+import { AppThemeV1 } from './theme.js';
 /** How many parent directories `findGuueyJson` will walk by default. */
 export const DEFAULT_FIND_MAX_DEPTH = 8;
 /**
@@ -94,13 +96,14 @@ export function writeGuueyJsonFile(path, doc) {
  * shape; the pod runtime reads the resolved prompt directly.
  *
  * Throws if the file is missing, unreadable, malformed, fails schema
- * validation, OR the systemPrompt.file path resolves to a missing or
- * unreadable file.
+ * validation, OR the systemPrompt.file / app.theme.file path resolves to
+ * a missing or unreadable file.
  */
 export function loadGuueyJson(path) {
     const doc = readGuueyJsonFile(path);
     const resolvedSystemPrompt = resolveSystemPrompt(doc, path);
-    return { doc, resolvedSystemPrompt, sourcePath: path };
+    const resolvedTheme = resolveAppTheme(doc, path);
+    return { doc, resolvedSystemPrompt, resolvedTheme, sourcePath: path };
 }
 /**
  * Resolve `agent.systemPrompt` to a final string (or undefined).
@@ -133,11 +136,61 @@ function resolveSystemPrompt(doc, guueyJsonPath) {
     }
     return readFileSync(resolved, 'utf-8');
 }
+/**
+ * Resolve `app.theme` to the inline document (or undefined).
+ *
+ * - Absent → undefined.
+ * - Inline document → returned as-is.
+ * - `{ file }` → resolved relative to `guueyJsonPath`'s directory, file
+ *   read + parsed against the STRICT {@link AppThemeV1} shape (guuey#400).
+ *   Shape only — colour VALUES stay with the server's one grammar
+ *   (`validateChatTheme`), so plan/apply surfaces its exact message.
+ *
+ * File paths must be relative + must not escape the project root (no
+ * `..` traversal). Absolute paths are rejected — keeps the snapshot
+ * portable across deploy environments.
+ */
+function resolveAppTheme(doc, guueyJsonPath) {
+    const theme = doc.app?.theme;
+    if (theme === undefined)
+        return undefined;
+    if (!isThemeFileRef(theme))
+        return theme;
+    // theme = { file: '...' }
+    if (isAbsolute(theme.file)) {
+        throw new Error(`app.theme.file must be a relative path (got absolute: ${theme.file})`);
+    }
+    if (theme.file.split('/').includes('..')) {
+        throw new Error(`app.theme.file must not traverse parent directories (got: ${theme.file})`);
+    }
+    const baseDir = dirname(guueyJsonPath);
+    const resolved = resolve(baseDir, theme.file);
+    if (!existsSync(resolved)) {
+        throw new Error(`app.theme.file references missing file: ${theme.file} (resolved to ${resolved})`);
+    }
+    const raw = readFileSync(resolved, 'utf-8');
+    let json;
+    try {
+        json = JSON.parse(raw);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`app.theme.file ${theme.file} is not valid JSON: ${msg}`);
+    }
+    const parsed = AppThemeV1.safeParse(json);
+    if (!parsed.success) {
+        const first = parsed.error.issues[0];
+        const path = first?.path.join('.') || '(root)';
+        throw new Error(`app.theme.file ${theme.file} failed theme validation at "${path}": ${first?.message ?? 'unknown error'}`);
+    }
+    return parsed.data;
+}
 /**
  * Build the snapshot the deploy upload + pod boot consume.
  *
  * Replaces `agent.systemPrompt = { file }` with `agent.systemPrompt = <inlined>`
- * so the snapshot is self-contained. Returns a deep-cloned document
+ * and `app.theme = { file }` with the file's parsed document so the
+ * snapshot is self-contained. Returns a deep-cloned document
  * (caller mutations don't leak back).
  */
 export function buildDeploySnapshot(loaded) {
@@ -145,5 +198,13 @@ export function buildDeploySnapshot(loaded) {
     if (loaded.resolvedSystemPrompt !== undefined) {
         cloned.agent.systemPrompt = loaded.resolvedSystemPrompt;
     }
+    const theme = cloned.app?.theme;
+    if (cloned.app !== undefined &&
+        theme !== undefined &&
+        isThemeFileRef(theme) &&
+        loaded.resolvedTheme !== undefined) {
+        const themeClone = JSON.parse(JSON.stringify(loaded.resolvedTheme));
+        cloned.app.theme = themeClone;
+    }
     return cloned;
 }

package/dist/schema.d.ts

@@ -256,7 +256,9 @@ export declare const GuueyJsonV1: z.ZodObject<{
             allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
             guestAccess: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
         }, z.core.$strict>>;
-        theme: z.ZodOptional<z.ZodObject<{
+        theme: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            file: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
             name: z.ZodOptional<z.ZodString>;
             mode: z.ZodEnum<{
                 light: "light";
@@ -352,6 +354,14 @@ export declare const GuueyJsonV1: z.ZodObject<{
                     comfortable: "comfortable";
                 }>;
             }, z.core.$strict>>;
+        }, z.core.$strict>]>>;
+        page: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+            welcomeCopy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            ctaLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            ctaUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            identityEndpointUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            noindex: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     ggui: z.ZodOptional<z.ZodObject<{

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,CAY5E;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,IAAI,EAAE,gBAAgB,GAAG,oBAAoB;aAC7C,KAAK,EAAE,MAAM;gBADb,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,EAC7C,KAAK,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAkBjE;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmDtB,CAAC;AAEH,kDAAkD;AAClD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAG3D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAExD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,WAAW,CAAC,SAAS,CAAC,CAE1C"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,CAY5E;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,IAAI,EAAE,gBAAgB,GAAG,oBAAoB;aAC7C,KAAK,EAAE,MAAM;gBADb,IAAI,EAAE,gBAAgB,GAAG,oBAAoB,EAC7C,KAAK,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAkBjE;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmDtB,CAAC;AAEH,kDAAkD;AAClD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAG3D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAExD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,GACX,UAAU,CAAC,OAAO,WAAW,CAAC,SAAS,CAAC,CAE1C"}

package/dist/system-prompt.d.ts

@@ -10,4 +10,21 @@
  * handshake.
  */
 export declare const GUUEY_DEFAULT_SYSTEM_PROMPT: string;
+/**
+ * The system prompt the `@guuey/create-agentic-app` scaffold ships in
+ * `prompts/system.md` (guuey#463) — distinct from
+ * {@link GUUEY_DEFAULT_SYSTEM_PROMPT}, which is the RUNTIME fallback for an
+ * agent that supplies no prompt at all. This constant is the single source
+ * for the scaffold text: `create-agentic-app`'s `build-templates.mjs` stamps
+ * `templates-src/core/prompts/system.md` from it (as `text + '\n'`) and
+ * `check-templates.mjs` asserts byte-equality as the publish guard.
+ *
+ * Why it must be single-sourced: `guuey pull`'s known-default replace rule
+ * (guuey#463, the #455 rider) may only overwrite a local `prompts/system.md`
+ * whose content is byte-identical to one of these two known defaults —
+ * anything else is a builder's own edit and is never clobbered. Editing this
+ * text therefore changes what `pull` recognizes as "untouched scaffold";
+ * rebuild the templates after any edit and commit the restamped file.
+ */
+export declare const GUUEY_SCAFFOLD_SYSTEM_PROMPT: string;
 //# sourceMappingURL=system-prompt.d.ts.map

package/dist/system-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../src/system-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,2BAA2B,QAOhC,CAAC"}
+{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../src/system-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,2BAA2B,QAOhC,CAAC;AAET;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B,QAgBjC,CAAC"}

package/dist/system-prompt.js

@@ -17,3 +17,36 @@ environment. Follow each tool's own description for guidance on when and how
 to use it. Maintain the thread of conversation across turns and ask
 clarifying questions when intent is ambiguous.
 `.trim();
+/**
+ * The system prompt the `@guuey/create-agentic-app` scaffold ships in
+ * `prompts/system.md` (guuey#463) — distinct from
+ * {@link GUUEY_DEFAULT_SYSTEM_PROMPT}, which is the RUNTIME fallback for an
+ * agent that supplies no prompt at all. This constant is the single source
+ * for the scaffold text: `create-agentic-app`'s `build-templates.mjs` stamps
+ * `templates-src/core/prompts/system.md` from it (as `text + '\n'`) and
+ * `check-templates.mjs` asserts byte-equality as the publish guard.
+ *
+ * Why it must be single-sourced: `guuey pull`'s known-default replace rule
+ * (guuey#463, the #455 rider) may only overwrite a local `prompts/system.md`
+ * whose content is byte-identical to one of these two known defaults —
+ * anything else is a builder's own edit and is never clobbered. Editing this
+ * text therefore changes what `pull` recognizes as "untouched scaffold";
+ * rebuild the templates after any edit and commit the restamped file.
+ */
+export const GUUEY_SCAFFOLD_SYSTEM_PROMPT = `
+You are the agentic-app-template assistant. You have a todo tool server —
+use it to create, list, toggle, and delete the user's todos.
+
+Show, don't tell: when a result has structure — a todo list, a form, a
+confirmation — render it as an interactive surface with the ggui render
+loop by default; keep plain prose for one-line answers with nothing to
+show. After changing todos (create, toggle, delete), render the updated
+list, so every turn ends on a surface that reflects the current state.
+Use only the fields the surface's schema declares.
+
+An under-specified ask is NEVER answered with a text-only list of
+questions: render the closest useful surface FIRST — the current list,
+the options, a form — and ask your one narrowing question in a short
+line beside it. Clarification happens ON a surface, from the very first
+turn.
+`.trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/config",
-  "version": "0.16.7",
+  "version": "0.16.9",
   "description": "Open-source schemas + loaders for the three guuey config files: agent.json (declarative agent definition), guuey.json (hosted-deploy overlay), and the helper types around them. Consumed by @guuey/cli, the guuey backend, and devs writing their own agent or MCP server.",
   "license": "MIT",
   "type": "module",
@@ -35,7 +35,7 @@
     "@types/node": "^24.0.0",
     "typescript": "^5.0.0",
     "vitest": "^3.2.7",
-    "@guuey/chat": "0.16.7"
+    "@guuey/chat": "0.16.9"
   },
   "publishConfig": {
     "access": "public"