@guuey/mcp-apps-host 0.17.0 → 0.18.2

package/dist/index.d.ts

@@ -12,4 +12,5 @@ export { asToolCallResult, createMcpUiActionRelay, unavailableToolCallResult, UI
 export { initializeResult, initialViewHostState, resourceReadResponse, RESOURCES_READ_METHOD, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, diagnoseCspViolation, type CspViolationLike, type ViewCspDiagnosis, type ViewCspOrigins, type ViewHostBehavior, type ViewHostEffect, type ViewHostOutbound, type ViewHostPhase, type ViewHostInfo, type ViewHostState, type ViewHostTransition, type ViewRequestId, } from "./view-host-protocol.js";
 export { attachViewHost, viewDocumentHtml, type AttachViewHostConfig, type ViewCspEvents, type ViewFrameLike, type ViewHostEvents, } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, type SandboxPageDeliveryConfig, } from "./sandbox-page.js";
+export { toolResultRenderRefusal, type PreGenerationRefusal } from "./render-refusal.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAIrB,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAIrB,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -11,3 +11,7 @@ export { asToolCallResult, createMcpUiActionRelay, unavailableToolCallResult, UI
 export { initializeResult, initialViewHostState, resourceReadResponse, RESOURCES_READ_METHOD, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, diagnoseCspViolation, } from "./view-host-protocol.js";
 export { attachViewHost, viewDocumentHtml, } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, } from "./sandbox-page.js";
+// guuey#836 — the typed read of a ggui_render PRE-GENERATION refusal
+// (`@ggui-ai/protocol` 0.14.0's third `outcome`). Hosts face it with words
+// instead of showing the envelope as an unexplained tool failure.
+export { toolResultRenderRefusal } from "./render-refusal.js";

package/dist/render-refusal.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The typed read of a ggui_render PRE-GENERATION REFUSAL (guuey#836 —
+ * `@ggui-ai/protocol` 0.14.0, PROTOCOL_VERSION `draft-2026-09-04`).
+ *
+ * A render result now carries a REQUIRED `outcome` discriminant:
+ * `'rendered' | 'failed' | 'refused'`. The third arm is new — a deployment
+ * that declined the render BEFORE doing any work (a missing app policy, an
+ * exhausted trial, a deprovisioned app, …). Nothing was parsed, no session
+ * row was committed and the handshake is intact, so every identity field
+ * (`sessionId`, `resourceUri`, `cache`, …) is ABSENT and a `refusal`
+ * envelope carries the state: a registry `code`, a `message` (what was
+ * checked, against what), a `fix` addressed to the party that can take it,
+ * and a `retry` class.
+ *
+ * Before this read existed a refusal reached a host as an `isError` tool
+ * result with no locator — the mount dispatcher returned `undefined` and the
+ * transcript showed the raw envelope text as a generic tool failure. That is
+ * the "unexplained render failure" a builder cannot act on. This function
+ * names the state instead, so a host can face the refusal with its own
+ * words (the message, the fix, the retry hint) and never attempt a mount.
+ *
+ * Two properties are load-bearing and pinned by the tests:
+ *  - It is TOLERANT of the previous wire: a result from a
+ *    `draft-2026-08-*` server (no `outcome`, identity fields present) does
+ *    not parse as a 0.14.0 output and yields `undefined` — exactly the
+ *    behaviour such a result had before, never a false refusal.
+ *  - It is STRICT about the envelope: the guard is the protocol's own
+ *    `isRefusedRenderOutput` over `renderOutputSchema`'s parse, so a payload
+ *    that merely SAYS `outcome: 'refused'` without a conformant `refusal`
+ *    (an unregistered code, a missing `fix`) is not a refusal here either —
+ *    the transport would have rejected it on the producing side, and a
+ *    reader that half-trusted it would draw an authoritative-looking face
+ *    over a non-conformant payload.
+ *
+ * The routing question (`uiData` vs `structuredContent`) does not arise: a
+ * refusal has no `_meta.ui` sibling by construction (there is no surface
+ * data), so it always lands in `structuredContent` (AgJSON §2.1).
+ */
+import { type PreGenerationRefusal } from "@ggui-ai/protocol";
+import type { JsonValue } from "@silverprotocol/core";
+export type { PreGenerationRefusal };
+/**
+ * The refusal a `tool-result` block carries, or `undefined` when the block is
+ * not a conformant 0.14.0 render output with `outcome: 'refused'`.
+ */
+export declare function toolResultRenderRefusal(block: {
+    structuredContent?: JsonValue;
+}): PreGenerationRefusal | undefined;
+//# sourceMappingURL=render-refusal.d.ts.map

package/dist/render-refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-refusal.d.ts","sourceRoot":"","sources":["../src/render-refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEtD,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAErC;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,iBAAiB,CAAC,EAAE,SAAS,CAAC;CAC/B,GAAG,oBAAoB,GAAG,SAAS,CAKnC"}

package/dist/render-refusal.js

@@ -0,0 +1,51 @@
+/**
+ * The typed read of a ggui_render PRE-GENERATION REFUSAL (guuey#836 —
+ * `@ggui-ai/protocol` 0.14.0, PROTOCOL_VERSION `draft-2026-09-04`).
+ *
+ * A render result now carries a REQUIRED `outcome` discriminant:
+ * `'rendered' | 'failed' | 'refused'`. The third arm is new — a deployment
+ * that declined the render BEFORE doing any work (a missing app policy, an
+ * exhausted trial, a deprovisioned app, …). Nothing was parsed, no session
+ * row was committed and the handshake is intact, so every identity field
+ * (`sessionId`, `resourceUri`, `cache`, …) is ABSENT and a `refusal`
+ * envelope carries the state: a registry `code`, a `message` (what was
+ * checked, against what), a `fix` addressed to the party that can take it,
+ * and a `retry` class.
+ *
+ * Before this read existed a refusal reached a host as an `isError` tool
+ * result with no locator — the mount dispatcher returned `undefined` and the
+ * transcript showed the raw envelope text as a generic tool failure. That is
+ * the "unexplained render failure" a builder cannot act on. This function
+ * names the state instead, so a host can face the refusal with its own
+ * words (the message, the fix, the retry hint) and never attempt a mount.
+ *
+ * Two properties are load-bearing and pinned by the tests:
+ *  - It is TOLERANT of the previous wire: a result from a
+ *    `draft-2026-08-*` server (no `outcome`, identity fields present) does
+ *    not parse as a 0.14.0 output and yields `undefined` — exactly the
+ *    behaviour such a result had before, never a false refusal.
+ *  - It is STRICT about the envelope: the guard is the protocol's own
+ *    `isRefusedRenderOutput` over `renderOutputSchema`'s parse, so a payload
+ *    that merely SAYS `outcome: 'refused'` without a conformant `refusal`
+ *    (an unregistered code, a missing `fix`) is not a refusal here either —
+ *    the transport would have rejected it on the producing side, and a
+ *    reader that half-trusted it would draw an authoritative-looking face
+ *    over a non-conformant payload.
+ *
+ * The routing question (`uiData` vs `structuredContent`) does not arise: a
+ * refusal has no `_meta.ui` sibling by construction (there is no surface
+ * data), so it always lands in `structuredContent` (AgJSON §2.1).
+ */
+import { isRefusedRenderOutput, renderOutputSchema, } from "@ggui-ai/protocol";
+/**
+ * The refusal a `tool-result` block carries, or `undefined` when the block is
+ * not a conformant 0.14.0 render output with `outcome: 'refused'`.
+ */
+export function toolResultRenderRefusal(block) {
+    if (block.structuredContent === undefined)
+        return undefined;
+    const parsed = renderOutputSchema.safeParse(block.structuredContent);
+    if (!parsed.success)
+        return undefined;
+    return isRefusedRenderOutput(parsed.data) ? parsed.data.refusal : undefined;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/mcp-apps-host",
-  "version": "0.17.0",
+  "version": "0.18.2",
   "description": "The MCP Apps (SEP-1865) Host role for guuey's chat surfaces — view-mount narrowing across UI channels, ui:// locator rehydration by resources/read, and the sandbox-trust channel contract. Vendor-neutral: any spec-following MCP App mounts through it.",
   "license": "MIT",
   "type": "module",
@@ -33,7 +33,7 @@
     }
   },
   "dependencies": {
-    "@ggui-ai/protocol": "0.14.0",
+    "@ggui-ai/protocol": "0.15.0",
     "@modelcontextprotocol/ext-apps": "^1.7.5",
     "@silverprotocol/core": "0.6.1"
   },

package/src/index.ts

@@ -96,3 +96,7 @@ export {
   SANDBOX_RESOURCE_READY_METHOD,
   type SandboxPageDeliveryConfig,
 } from "./sandbox-page.js";
+// guuey#836 — the typed read of a ggui_render PRE-GENERATION refusal
+// (`@ggui-ai/protocol` 0.14.0's third `outcome`). Hosts face it with words
+// instead of showing the envelope as an unexplained tool failure.
+export { toolResultRenderRefusal, type PreGenerationRefusal } from "./render-refusal.js";

package/src/render-refusal.ts

@@ -0,0 +1,59 @@
+/**
+ * The typed read of a ggui_render PRE-GENERATION REFUSAL (guuey#836 —
+ * `@ggui-ai/protocol` 0.14.0, PROTOCOL_VERSION `draft-2026-09-04`).
+ *
+ * A render result now carries a REQUIRED `outcome` discriminant:
+ * `'rendered' | 'failed' | 'refused'`. The third arm is new — a deployment
+ * that declined the render BEFORE doing any work (a missing app policy, an
+ * exhausted trial, a deprovisioned app, …). Nothing was parsed, no session
+ * row was committed and the handshake is intact, so every identity field
+ * (`sessionId`, `resourceUri`, `cache`, …) is ABSENT and a `refusal`
+ * envelope carries the state: a registry `code`, a `message` (what was
+ * checked, against what), a `fix` addressed to the party that can take it,
+ * and a `retry` class.
+ *
+ * Before this read existed a refusal reached a host as an `isError` tool
+ * result with no locator — the mount dispatcher returned `undefined` and the
+ * transcript showed the raw envelope text as a generic tool failure. That is
+ * the "unexplained render failure" a builder cannot act on. This function
+ * names the state instead, so a host can face the refusal with its own
+ * words (the message, the fix, the retry hint) and never attempt a mount.
+ *
+ * Two properties are load-bearing and pinned by the tests:
+ *  - It is TOLERANT of the previous wire: a result from a
+ *    `draft-2026-08-*` server (no `outcome`, identity fields present) does
+ *    not parse as a 0.14.0 output and yields `undefined` — exactly the
+ *    behaviour such a result had before, never a false refusal.
+ *  - It is STRICT about the envelope: the guard is the protocol's own
+ *    `isRefusedRenderOutput` over `renderOutputSchema`'s parse, so a payload
+ *    that merely SAYS `outcome: 'refused'` without a conformant `refusal`
+ *    (an unregistered code, a missing `fix`) is not a refusal here either —
+ *    the transport would have rejected it on the producing side, and a
+ *    reader that half-trusted it would draw an authoritative-looking face
+ *    over a non-conformant payload.
+ *
+ * The routing question (`uiData` vs `structuredContent`) does not arise: a
+ * refusal has no `_meta.ui` sibling by construction (there is no surface
+ * data), so it always lands in `structuredContent` (AgJSON §2.1).
+ */
+import {
+  isRefusedRenderOutput,
+  renderOutputSchema,
+  type PreGenerationRefusal,
+} from "@ggui-ai/protocol";
+import type { JsonValue } from "@silverprotocol/core";
+
+export type { PreGenerationRefusal };
+
+/**
+ * The refusal a `tool-result` block carries, or `undefined` when the block is
+ * not a conformant 0.14.0 render output with `outcome: 'refused'`.
+ */
+export function toolResultRenderRefusal(block: {
+  structuredContent?: JsonValue;
+}): PreGenerationRefusal | undefined {
+  if (block.structuredContent === undefined) return undefined;
+  const parsed = renderOutputSchema.safeParse(block.structuredContent);
+  if (!parsed.success) return undefined;
+  return isRefusedRenderOutput(parsed.data) ? parsed.data.refusal : undefined;
+}