@guuey/mcp-apps-host 0.23.1 → 0.24.0

package/dist/react.d.ts

@@ -36,11 +36,14 @@ import { type CSSProperties, type ReactNode } from "react";
 import { type AttachViewHostConfig } from "./view-host.js";
 import type { ViewCspDiagnosis, ViewHostPhase } from "./view-host-protocol.js";
 import type { ResolvedViewMount } from "./card-mount.js";
+import { type ViewHostStrings } from "./view-strings.js";
 export { attachViewHost, viewDocumentHtml } from "./view-host.js";
 export type { AttachViewHostConfig, ViewCspEvents, ViewFrameLike, ViewHostEvents } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, type SandboxPageDeliveryConfig, } from "./sandbox-page.js";
 export type { ViewCspDiagnosis, ViewCspOrigins, ViewHostPhase } from "./view-host-protocol.js";
 export type { ResolvedViewMount, ViewMount, ViewMountChannel } from "./card-mount.js";
+export { defaultViewHostStrings } from "./view-strings.js";
+export type { ViewHostStrings } from "./view-strings.js";
 export interface GuueyViewProps extends Pick<AttachViewHostConfig, "hostCapabilities" | "hostInfo" | "hostContext" | "onCallTool" | "onUpdateModelContext" | "onUserMessage" | "onOpenLink" | "onReadResource" | "onSizeChanged" | "negotiationTimeoutMs" | "cspOrigins" | "onCspDiagnosis"> {
     /** The resolved card to mount (see `toolResultViewMount`/`resolveViewMount`). */
     mount: ResolvedViewMount;
@@ -103,15 +106,23 @@ export interface GuueyViewProps extends Pick<AttachViewHostConfig, "hostCapabili
     onPhaseChange?: (phase: ViewHostPhase) => void;
     /**
      * Replace the default status/failure line for a phase. Return `null` for
-     * "render nothing". The default: a quiet "Negotiating with view…" line
-     * while `"negotiating"`; a labeled failure for `"no-handshake"` on the
+     * "render nothing". The default: a quiet loading line while
+     * `"negotiating"`; a labeled failure for `"no-handshake"` on the
      * `"ggui"` channel; nothing once `"connected"` (the view owns its
      * pixels) and nothing for a silent `"inline"` card. The second argument
      * is the CSP diagnosis when the tripwire caught one (see
      * {@link AttachViewHostConfig.cspOrigins}) — the default label folds it
      * in; a custom renderer decides how to show it.
+     *
+     * To change only the WORDS, prefer {@link GuueyViewProps.strings}: this
+     * hook makes a host reimplement the CSP/channel branching to do it.
      */
     renderStatus?: (phase: ViewHostPhase, diagnosis?: ViewCspDiagnosis) => ReactNode;
+    /**
+     * Override the default status line's copy (guuey#1325). Merged over
+     * {@link defaultViewHostStrings}, so a partial override is enough.
+     */
+    strings?: Partial<ViewHostStrings>;
 }
 /**
  * Mount a resolved view and play the MCP Apps Host for it. See the module

package/dist/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAwC,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACjG,OAAO,EAAoC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/F,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAKtF,MAAM,WAAW,cACf,SAAQ,IAAI,CACV,oBAAoB,EAClB,kBAAkB,GAClB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,sBAAsB,GACtB,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,eAAe,GACf,sBAAsB,GACtB,YAAY,GACZ,gBAAgB,CACnB;IACD,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,gBAAgB,KAAK,SAAS,CAAC;CAClF;AA8CD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAkL1D"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAwC,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACjG,OAAO,EAAoC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/F,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKzD,MAAM,WAAW,cACf,SAAQ,IAAI,CACV,oBAAoB,EAClB,kBAAkB,GAClB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,sBAAsB,GACtB,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,eAAe,GACf,sBAAsB,GACtB,YAAY,GACZ,gBAAgB,CACnB;IACD,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,gBAAgB,KAAK,SAAS,CAAC;IACjF;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;CACpC;AAkDD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAsL1D"}

package/dist/react.js

@@ -37,8 +37,10 @@ import { useEffect, useMemo, useRef, useState } from "react";
 import { attachViewHost, viewDocumentHtml } from "./view-host.js";
 import { attachSandboxPageDelivery } from "./sandbox-page.js";
 import { decideAutoResize, initialAutoResizeState } from "./auto-resize.js";
+import { defaultViewHostStrings } from "./view-strings.js";
 export { attachViewHost, viewDocumentHtml } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, } from "./sandbox-page.js";
+export { defaultViewHostStrings } from "./view-strings.js";
 /** Accessible name for a mounted view when the caller has nothing better. */
 const DEFAULT_TITLE = "Generated view";
 const statusLineStyle = {
@@ -52,9 +54,11 @@ const statusLineStyle = {
     opacity: 0.65,
     pointerEvents: "none",
 };
-function defaultStatus(phase, channel, diagnosis) {
+function defaultStatus(phase, channel, diagnosis, strings) {
     if (phase === "negotiating") {
-        return _jsx("p", { style: statusLineStyle, children: "Negotiating with view\u2026" });
+        // guuey#1279/#1325: the copy says what the PERSON is waiting for. The
+        // phase name is machinery and never reaches the frame.
+        return _jsx("p", { style: statusLineStyle, children: strings.viewLoading });
     }
     // A CSP diagnosis (guuey#235) is the WHY behind a silent frame — on any
     // channel: a blocked runtime bundle never gets to negotiate, so the
@@ -66,8 +70,9 @@ function defaultStatus(phase, channel, diagnosis) {
     if (phase === "no-handshake" && channel === "ggui") {
         // A ggui shell negotiates unconditionally before painting, so silence
         // here is a boot failure with no other author — label it (role=alert
-        // so it is announced, not just drawn).
-        return (_jsx("p", { role: "alert", style: { ...statusLineStyle, opacity: 1, pointerEvents: "auto" }, children: "This view did not start \u2014 it never negotiated with the host." }));
+        // so it is announced, not just drawn). The label states the OUTCOME the
+        // person sees; the handshake that did not happen is machinery.
+        return (_jsx("p", { role: "alert", style: { ...statusLineStyle, opacity: 1, pointerEvents: "auto" }, children: strings.viewBootFailure }));
     }
     return null;
 }
@@ -76,7 +81,10 @@ function defaultStatus(phase, channel, diagnosis) {
  * docblock for the sandbox and state contracts.
  */
 export function GuueyView(props) {
-    const { mount, sandboxPageUrl, autoResize, maxHeight, dangerouslyAddSandboxFlags, allow, title, className, style, onPhaseChange, renderStatus, ...hostConfig } = props;
+    const { mount, sandboxPageUrl, autoResize, maxHeight, dangerouslyAddSandboxFlags, allow, title, className, style, onPhaseChange, renderStatus, strings: stringOverrides, ...hostConfig } = props;
+    // Read only during render (no effect depends on it), so a plain spread is
+    // correct — no identity churn to guard against.
+    const viewStrings = { ...defaultViewHostStrings, ...stringOverrides };
     const frameRef = useRef(null);
     const [phase, setPhase] = useState("negotiating");
     // The CSP tripwire's verdict for THIS document, if any (guuey#235).
@@ -211,5 +219,5 @@ export function GuueyView(props) {
                     border: 0,
                 } }, `${page?.href ?? "srcdoc"}::${mount.resource.uri}`), renderStatus !== undefined
                 ? renderStatus(phase, diagnosis)
-                : defaultStatus(phase, mount.channel, diagnosis)] }));
+                : defaultStatus(phase, mount.channel, diagnosis, viewStrings)] }));
 }

package/dist/view-strings.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The view host's own user-facing copy — the i18n seam for the default
+ * status line (guuey#1279 Track A, extended on guuey#1325).
+ *
+ * ## Why this file exists
+ *
+ * `GuueyView`'s default status used to hardcode its English copy inline, and
+ * that copy narrated the PROTOCOL: "Negotiating with view…" is the
+ * {@link ViewHostPhase} member `"negotiating"` shown to a person, and the
+ * boot-failure line said the view "never negotiated with the host". guuey#1279
+ * rules that lifecycle vocabulary is machinery and must not reach chrome; the
+ * rule was enforced in `@guuey/chat` but this package renders its own chrome,
+ * so the same defect survived here and shipped — a large blank frame captioned
+ * with a protocol noun on a public page (guuey#1325).
+ *
+ * Two things were wrong, and they are separable:
+ *
+ *  1. **The words.** Fixed by using product copy, deliberately IDENTICAL to
+ *     `@guuey/chat`'s `viewNegotiating` / `viewBootFailure` so the two packages
+ *     speak with one voice on the same states. They cannot share a constant:
+ *     `@guuey/chat` depends on this package, so an import the other way is a
+ *     cycle. The duplication is intentional and pinned by a test.
+ *
+ *  2. **The seam.** Hardcoded literals are unreachable by translation. A host
+ *     that localised every string it could still got English here, and
+ *     `renderStatus` — the only existing escape — forces a host to reimplement
+ *     the CSP/channel branching just to change a word. These strings are
+ *     overridable on their own.
+ */
+/** The default status line's copy. Every user-facing word this package renders. */
+export interface ViewHostStrings {
+    /**
+     * While the view is loading — the `"negotiating"` phase. Says what the
+     * PERSON is waiting for (a view), never what the protocol is doing.
+     */
+    viewLoading: string;
+    /**
+     * A ggui shell that never started — the `"no-handshake"` phase on the
+     * `"ggui"` channel, where silence is a boot failure with no other author.
+     * A CSP diagnosis outranks this (it names the actual blocked URI).
+     */
+    viewBootFailure: string;
+}
+/**
+ * en defaults. Kept byte-identical to `@guuey/chat`'s `viewNegotiating` and
+ * `viewBootFailure` — `view-chrome-vocabulary.test.ts` pins both the wording
+ * and the absence of protocol vocabulary.
+ */
+export declare const defaultViewHostStrings: ViewHostStrings;
+//# sourceMappingURL=view-strings.d.ts.map

package/dist/view-strings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-strings.d.ts","sourceRoot":"","sources":["../src/view-strings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAGpC,CAAC"}

package/dist/view-strings.js

@@ -0,0 +1,38 @@
+/**
+ * The view host's own user-facing copy — the i18n seam for the default
+ * status line (guuey#1279 Track A, extended on guuey#1325).
+ *
+ * ## Why this file exists
+ *
+ * `GuueyView`'s default status used to hardcode its English copy inline, and
+ * that copy narrated the PROTOCOL: "Negotiating with view…" is the
+ * {@link ViewHostPhase} member `"negotiating"` shown to a person, and the
+ * boot-failure line said the view "never negotiated with the host". guuey#1279
+ * rules that lifecycle vocabulary is machinery and must not reach chrome; the
+ * rule was enforced in `@guuey/chat` but this package renders its own chrome,
+ * so the same defect survived here and shipped — a large blank frame captioned
+ * with a protocol noun on a public page (guuey#1325).
+ *
+ * Two things were wrong, and they are separable:
+ *
+ *  1. **The words.** Fixed by using product copy, deliberately IDENTICAL to
+ *     `@guuey/chat`'s `viewNegotiating` / `viewBootFailure` so the two packages
+ *     speak with one voice on the same states. They cannot share a constant:
+ *     `@guuey/chat` depends on this package, so an import the other way is a
+ *     cycle. The duplication is intentional and pinned by a test.
+ *
+ *  2. **The seam.** Hardcoded literals are unreachable by translation. A host
+ *     that localised every string it could still got English here, and
+ *     `renderStatus` — the only existing escape — forces a host to reimplement
+ *     the CSP/channel branching just to change a word. These strings are
+ *     overridable on their own.
+ */
+/**
+ * en defaults. Kept byte-identical to `@guuey/chat`'s `viewNegotiating` and
+ * `viewBootFailure` — `view-chrome-vocabulary.test.ts` pins both the wording
+ * and the absence of protocol vocabulary.
+ */
+export const defaultViewHostStrings = {
+    viewLoading: "Loading view…",
+    viewBootFailure: "This view couldn't start",
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/mcp-apps-host",
-  "version": "0.23.1",
+  "version": "0.24.0",
   "description": "The MCP Apps (SEP-1865) Host role for guuey's chat surfaces — view-mount narrowing across UI channels, ui:// locator rehydration by resources/read, and the sandbox-trust channel contract. Vendor-neutral: any spec-following MCP App mounts through it.",
   "license": "MIT",
   "type": "module",
@@ -33,9 +33,9 @@
     }
   },
   "dependencies": {
-    "@ggui-ai/protocol": "0.16.0",
+    "@ggui-ai/protocol": "0.17.0",
     "@modelcontextprotocol/ext-apps": "^1.7.5",
-    "@silverprotocol/core": "0.6.1"
+    "@silverprotocol/core": "0.6.2"
   },
   "peerDependencies": {
     "react": ">=18"
@@ -50,7 +50,7 @@
     "@types/react": "^19.0.0",
     "react": "^19.0.0",
     "typescript": "^5.0.0",
-    "vitest": "^3.2.7"
+    "vitest": "^4.1.11"
   },
   "publishConfig": {
     "access": "public"

package/src/react.tsx

@@ -38,6 +38,7 @@ import { attachSandboxPageDelivery } from "./sandbox-page.js";
 import { decideAutoResize, initialAutoResizeState, type AutoResizeState } from "./auto-resize.js";
 import type { ViewCspDiagnosis, ViewHostPhase } from "./view-host-protocol.js";
 import type { ResolvedViewMount } from "./card-mount.js";
+import { defaultViewHostStrings, type ViewHostStrings } from "./view-strings.js";
 
 export { attachViewHost, viewDocumentHtml } from "./view-host.js";
 export type { AttachViewHostConfig, ViewCspEvents, ViewFrameLike, ViewHostEvents } from "./view-host.js";
@@ -50,6 +51,8 @@ export {
 } from "./sandbox-page.js";
 export type { ViewCspDiagnosis, ViewCspOrigins, ViewHostPhase } from "./view-host-protocol.js";
 export type { ResolvedViewMount, ViewMount, ViewMountChannel } from "./card-mount.js";
+export { defaultViewHostStrings } from "./view-strings.js";
+export type { ViewHostStrings } from "./view-strings.js";
 
 /** Accessible name for a mounted view when the caller has nothing better. */
 const DEFAULT_TITLE = "Generated view";
@@ -131,15 +134,23 @@ export interface GuueyViewProps
   onPhaseChange?: (phase: ViewHostPhase) => void;
   /**
    * Replace the default status/failure line for a phase. Return `null` for
-   * "render nothing". The default: a quiet "Negotiating with view…" line
-   * while `"negotiating"`; a labeled failure for `"no-handshake"` on the
+   * "render nothing". The default: a quiet loading line while
+   * `"negotiating"`; a labeled failure for `"no-handshake"` on the
    * `"ggui"` channel; nothing once `"connected"` (the view owns its
    * pixels) and nothing for a silent `"inline"` card. The second argument
    * is the CSP diagnosis when the tripwire caught one (see
    * {@link AttachViewHostConfig.cspOrigins}) — the default label folds it
    * in; a custom renderer decides how to show it.
+   *
+   * To change only the WORDS, prefer {@link GuueyViewProps.strings}: this
+   * hook makes a host reimplement the CSP/channel branching to do it.
    */
   renderStatus?: (phase: ViewHostPhase, diagnosis?: ViewCspDiagnosis) => ReactNode;
+  /**
+   * Override the default status line's copy (guuey#1325). Merged over
+   * {@link defaultViewHostStrings}, so a partial override is enough.
+   */
+  strings?: Partial<ViewHostStrings>;
 }
 
 const statusLineStyle: CSSProperties = {
@@ -158,9 +169,12 @@ function defaultStatus(
   phase: ViewHostPhase,
   channel: ResolvedViewMount["channel"],
   diagnosis: ViewCspDiagnosis | undefined,
+  strings: ViewHostStrings,
 ): ReactNode {
   if (phase === "negotiating") {
-    return <p style={statusLineStyle}>Negotiating with view…</p>;
+    // guuey#1279/#1325: the copy says what the PERSON is waiting for. The
+    // phase name is machinery and never reaches the frame.
+    return <p style={statusLineStyle}>{strings.viewLoading}</p>;
   }
   // A CSP diagnosis (guuey#235) is the WHY behind a silent frame — on any
   // channel: a blocked runtime bundle never gets to negotiate, so the
@@ -176,10 +190,11 @@ function defaultStatus(
   if (phase === "no-handshake" && channel === "ggui") {
     // A ggui shell negotiates unconditionally before painting, so silence
     // here is a boot failure with no other author — label it (role=alert
-    // so it is announced, not just drawn).
+    // so it is announced, not just drawn). The label states the OUTCOME the
+    // person sees; the handshake that did not happen is machinery.
     return (
       <p role="alert" style={{ ...statusLineStyle, opacity: 1, pointerEvents: "auto" }}>
-        This view did not start — it never negotiated with the host.
+        {strings.viewBootFailure}
       </p>
     );
   }
@@ -203,8 +218,12 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
     style,
     onPhaseChange,
     renderStatus,
+    strings: stringOverrides,
     ...hostConfig
   } = props;
+  // Read only during render (no effect depends on it), so a plain spread is
+  // correct — no identity churn to guard against.
+  const viewStrings: ViewHostStrings = { ...defaultViewHostStrings, ...stringOverrides };
   const frameRef = useRef<HTMLIFrameElement>(null);
   const [phase, setPhase] = useState<ViewHostPhase>("negotiating");
   // The CSP tripwire's verdict for THIS document, if any (guuey#235).
@@ -365,7 +384,7 @@ export function GuueyView(props: GuueyViewProps): ReactNode {
       />
       {renderStatus !== undefined
         ? renderStatus(phase, diagnosis)
-        : defaultStatus(phase, mount.channel, diagnosis)}
+        : defaultStatus(phase, mount.channel, diagnosis, viewStrings)}
     </div>
   );
 }

package/src/view-strings.ts

@@ -0,0 +1,54 @@
+/**
+ * The view host's own user-facing copy — the i18n seam for the default
+ * status line (guuey#1279 Track A, extended on guuey#1325).
+ *
+ * ## Why this file exists
+ *
+ * `GuueyView`'s default status used to hardcode its English copy inline, and
+ * that copy narrated the PROTOCOL: "Negotiating with view…" is the
+ * {@link ViewHostPhase} member `"negotiating"` shown to a person, and the
+ * boot-failure line said the view "never negotiated with the host". guuey#1279
+ * rules that lifecycle vocabulary is machinery and must not reach chrome; the
+ * rule was enforced in `@guuey/chat` but this package renders its own chrome,
+ * so the same defect survived here and shipped — a large blank frame captioned
+ * with a protocol noun on a public page (guuey#1325).
+ *
+ * Two things were wrong, and they are separable:
+ *
+ *  1. **The words.** Fixed by using product copy, deliberately IDENTICAL to
+ *     `@guuey/chat`'s `viewNegotiating` / `viewBootFailure` so the two packages
+ *     speak with one voice on the same states. They cannot share a constant:
+ *     `@guuey/chat` depends on this package, so an import the other way is a
+ *     cycle. The duplication is intentional and pinned by a test.
+ *
+ *  2. **The seam.** Hardcoded literals are unreachable by translation. A host
+ *     that localised every string it could still got English here, and
+ *     `renderStatus` — the only existing escape — forces a host to reimplement
+ *     the CSP/channel branching just to change a word. These strings are
+ *     overridable on their own.
+ */
+
+/** The default status line's copy. Every user-facing word this package renders. */
+export interface ViewHostStrings {
+  /**
+   * While the view is loading — the `"negotiating"` phase. Says what the
+   * PERSON is waiting for (a view), never what the protocol is doing.
+   */
+  viewLoading: string;
+  /**
+   * A ggui shell that never started — the `"no-handshake"` phase on the
+   * `"ggui"` channel, where silence is a boot failure with no other author.
+   * A CSP diagnosis outranks this (it names the actual blocked URI).
+   */
+  viewBootFailure: string;
+}
+
+/**
+ * en defaults. Kept byte-identical to `@guuey/chat`'s `viewNegotiating` and
+ * `viewBootFailure` — `view-chrome-vocabulary.test.ts` pins both the wording
+ * and the absence of protocol vocabulary.
+ */
+export const defaultViewHostStrings: ViewHostStrings = {
+  viewLoading: "Loading view…",
+  viewBootFailure: "This view couldn't start",
+};