@guuey/mcp-apps-host 0.26.0 → 0.28.0

package/dist/block-ui.d.ts

@@ -105,9 +105,26 @@ export declare function toolResultUiResource(block: Extract<AgBlock, {
  */
 export declare function uiLocator(uiData: JsonValue | undefined): string | undefined;
 /**
- * The `ui://` locator a `tool-result` block carries, from EITHER channel it
+ * The `ui://` locator a `tool-result` block carries, from ANY channel it
  * can arrive on — the single seam every locator reader goes through.
  *
+ * `_meta.ui.resourceUri` is read FIRST. Under AgJSON draft.4 (core 0.7.0) a
+ * kept-open result's later `tool.done` replaces the payload as a unit, so a
+ * final that omits `uiData` / `structuredContent` CLEARS them on the fold,
+ * while `_meta` (a descriptor) survives an omitting final. The view's
+ * identity lives there by the spec's own rule. Reading the payload channels
+ * alone would take a folded card dark. Under 0.6.x both channels were kept,
+ * so this order gives the same answer on either version.
+ *
+ * Producers differ in what they put on `_meta.ui`. A server that only MARKS
+ * a result as UI (`_meta.ui: {}`) and carries the locator in
+ * `structuredContent` names no locator here, so the payload order decides:
+ * the same answer as before. A server that states `_meta.ui.resourceUri`
+ * gets that one, even when its payload names another, because the spec makes
+ * `_meta.ui` the durable identity. Note that a kept-open result (`more:
+ * true`) is what exercises the clearing; a producer that never keeps results
+ * open never folds an omitting final.
+ *
  * AgJSON §2.1 routes a tool result's `structuredContent` by its `_meta.ui`
  * sibling: WITH the sibling it is surface data and the normalizer stamps
  * `uiData`; WITHOUT it, it is model-channel data and lands in
@@ -115,10 +132,16 @@ export declare function uiLocator(uiData: JsonValue | undefined): string | undef
  * posture; any plain-locator MCP server) therefore delivers a locator that
  * is byte-identical in shape but lives one field over — reading `uiData`
  * alone renders NOTHING for it (dark, not "expired"), and the persistence
- * projector minted no placeholder row (the read plane 404s). `uiData` wins
- * when both carry one (guuey#209 route-A finding).
+ * projector minted no placeholder row (the read plane 404s). Between the
+ * payload channels `uiData` wins when both carry one (guuey#209 route-A
+ * finding). The pod's `blockLocator` (nocode-runtime live-cards.ts) and the
+ * persisted door's `snapshotCarriesLocator` (publicApi ui-resource.ts) apply
+ * the same order, so live and persisted guards recognize one locator set.
  */
 export declare function toolResultLocator(block: {
+    _meta?: {
+        [key: string]: JsonValue;
+    };
     uiData?: JsonValue;
     structuredContent?: JsonValue;
 }): string | undefined;

package/dist/block-ui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"block-ui.d.ts","sourceRoot":"","sources":["../src/block-ui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,CAAC,IAAI;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAExF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAU5F;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAK5F;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,SAAS,GAAG,SAAS,GACzB,oBAAoB,GAAG,SAAS,CAMlC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAyBlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,GAC/C,oBAAoB,GAAG,SAAS,CAUlC;AAED;;;;;;;;;;;GAWG;AACH;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI3E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,iBAAiB,CAAC,EAAE,SAAS,CAAC;CAC/B,GAAG,MAAM,GAAG,SAAS,CAErB;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAU5F;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAU/E"}
+{"version":3,"file":"block-ui.d.ts","sourceRoot":"","sources":["../src/block-ui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,CAAC,IAAI;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAExF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAU5F;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAK5F;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,SAAS,GAAG,SAAS,GACzB,oBAAoB,GAAG,SAAS,CAMlC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAyBlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC,GAC/C,oBAAoB,GAAG,SAAS,CAUlC;AAED;;;;;;;;;;;GAWG;AACH;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI3E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,KAAK,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACrC,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,iBAAiB,CAAC,EAAE,SAAS,CAAC;CAC/B,GAAG,MAAM,GAAG,SAAS,CAErB;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,SAAS,GAAG,oBAAoB,GAAG,SAAS,CAU5F;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAU/E"}

package/dist/block-ui.js

@@ -141,9 +141,26 @@ export function uiLocator(uiData) {
     return typeof uri === "string" && uri.startsWith("ui://") ? uri : undefined;
 }
 /**
- * The `ui://` locator a `tool-result` block carries, from EITHER channel it
+ * The `ui://` locator a `tool-result` block carries, from ANY channel it
  * can arrive on — the single seam every locator reader goes through.
  *
+ * `_meta.ui.resourceUri` is read FIRST. Under AgJSON draft.4 (core 0.7.0) a
+ * kept-open result's later `tool.done` replaces the payload as a unit, so a
+ * final that omits `uiData` / `structuredContent` CLEARS them on the fold,
+ * while `_meta` (a descriptor) survives an omitting final. The view's
+ * identity lives there by the spec's own rule. Reading the payload channels
+ * alone would take a folded card dark. Under 0.6.x both channels were kept,
+ * so this order gives the same answer on either version.
+ *
+ * Producers differ in what they put on `_meta.ui`. A server that only MARKS
+ * a result as UI (`_meta.ui: {}`) and carries the locator in
+ * `structuredContent` names no locator here, so the payload order decides:
+ * the same answer as before. A server that states `_meta.ui.resourceUri`
+ * gets that one, even when its payload names another, because the spec makes
+ * `_meta.ui` the durable identity. Note that a kept-open result (`more:
+ * true`) is what exercises the clearing; a producer that never keeps results
+ * open never folds an omitting final.
+ *
  * AgJSON §2.1 routes a tool result's `structuredContent` by its `_meta.ui`
  * sibling: WITH the sibling it is surface data and the normalizer stamps
  * `uiData`; WITHOUT it, it is model-channel data and lands in
@@ -151,11 +168,14 @@ export function uiLocator(uiData) {
  * posture; any plain-locator MCP server) therefore delivers a locator that
  * is byte-identical in shape but lives one field over — reading `uiData`
  * alone renders NOTHING for it (dark, not "expired"), and the persistence
- * projector minted no placeholder row (the read plane 404s). `uiData` wins
- * when both carry one (guuey#209 route-A finding).
+ * projector minted no placeholder row (the read plane 404s). Between the
+ * payload channels `uiData` wins when both carry one (guuey#209 route-A
+ * finding). The pod's `blockLocator` (nocode-runtime live-cards.ts) and the
+ * persisted door's `snapshotCarriesLocator` (publicApi ui-resource.ts) apply
+ * the same order, so live and persisted guards recognize one locator set.
  */
 export function toolResultLocator(block) {
-    return uiLocator(block.uiData) ?? uiLocator(block.structuredContent);
+    return uiLocator(block._meta?.ui) ?? uiLocator(block.uiData) ?? uiLocator(block.structuredContent);
 }
 export function snapshotUiResource(cardSnapshot) {
     if (!isJsonObject(cardSnapshot))

package/dist/index.d.ts

@@ -10,7 +10,7 @@ export { createMcpUiResourceReader, declaredResourceCsp, uiResourceChannel, type
 export type { McpUiResourceCsp } from "@modelcontextprotocol/ext-apps";
 export { asToolCallResult, createMcpUiActionRelay, unavailableToolCallResult, UI_ACTION_TOOLS, UI_ACTION_UNAVAILABLE_TEXT, UI_SEMANTIC_ACTION_TOOLS, type CreateMcpUiActionRelayDeps, type McpToolCallContent, type McpToolCallResult, type McpToolStructuredContent, type UiActionRequest, } from "./action.js";
 export { initializeResult, initialViewHostState, resourceReadResponse, RESOURCES_READ_METHOD, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, diagnoseCspViolation, type CspViolationLike, type ViewCspDiagnosis, type ViewCspOrigins, type ViewHostBehavior, type ViewHostEffect, type ViewHostOutbound, type ViewHostPhase, type ViewHostInfo, type ViewHostState, type ViewHostTransition, type ViewRequestId, } from "./view-host-protocol.js";
-export { attachViewHost, viewDocumentHtml, type AttachViewHostConfig, type ViewCspEvents, type ViewFrameLike, type ViewHostEvents, } from "./view-host.js";
+export { attachViewHost, viewDocumentHtml, MESSAGE_ANSWER_CAP_MS, type AttachViewHostConfig, type UserMessageDelivery, type ViewCspEvents, type ViewFrameLike, type ViewHostEvents, } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, type SandboxPageDeliveryConfig, } from "./sandbox-page.js";
 export { toolResultRenderRefusal, type PreGenerationRefusal } from "./render-refusal.js";
 export { EMPTY_HOST_STYLE_VARIABLES, announcedHostStyleVariables, hostStyleVariablesRecord, type McpUiStyleVariableKey, type McpUiStyles, } from "./host-style-variables.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAIrB,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAIzF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAIrB,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,eAAe,EACf,0BAA0B,EAC1B,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAIzF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACjB,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -9,7 +9,7 @@ export { ACTION_STAGED_MSG, isStageableAction, stagedActionText, withActionStagi
 export { createMcpUiResourceReader, declaredResourceCsp, uiResourceChannel, } from "./reader.js";
 export { asToolCallResult, createMcpUiActionRelay, unavailableToolCallResult, UI_ACTION_TOOLS, UI_ACTION_UNAVAILABLE_TEXT, UI_SEMANTIC_ACTION_TOOLS, } from "./action.js";
 export { initializeResult, initialViewHostState, resourceReadResponse, RESOURCES_READ_METHOD, teardownMessage, toolCallResponse, TOOLS_CALL_METHOD, viewHostElapsed, viewHostReceive, diagnoseCspViolation, } from "./view-host-protocol.js";
-export { attachViewHost, viewDocumentHtml, } from "./view-host.js";
+export { attachViewHost, viewDocumentHtml, MESSAGE_ANSWER_CAP_MS, } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, } from "./sandbox-page.js";
 // guuey#836 — the typed read of a ggui_render PRE-GENERATION refusal
 // (`@ggui-ai/protocol` 0.14.0's third `outcome`). Hosts face it with words

package/dist/react.d.ts

@@ -37,8 +37,8 @@ import { type AttachViewHostConfig } from "./view-host.js";
 import type { ViewCspDiagnosis, ViewHostPhase } from "./view-host-protocol.js";
 import type { ResolvedViewMount } from "./card-mount.js";
 import { type ViewHostStrings } from "./view-strings.js";
-export { attachViewHost, viewDocumentHtml } from "./view-host.js";
-export type { AttachViewHostConfig, ViewCspEvents, ViewFrameLike, ViewHostEvents } from "./view-host.js";
+export { attachViewHost, viewDocumentHtml, MESSAGE_ANSWER_CAP_MS } from "./view-host.js";
+export type { AttachViewHostConfig, UserMessageDelivery, ViewCspEvents, ViewFrameLike, ViewHostEvents } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, type SandboxPageDeliveryConfig, } from "./sandbox-page.js";
 export type { ViewCspDiagnosis, ViewCspOrigins, ViewHostPhase } from "./view-host-protocol.js";
 export type { ResolvedViewMount, ViewMount, ViewMountChannel } from "./card-mount.js";

package/dist/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAwC,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACjG,OAAO,EAAoC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzG,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/F,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKzD,MAAM,WAAW,cACf,SAAQ,IAAI,CACV,oBAAoB,EAClB,kBAAkB,GAClB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,sBAAsB,GACtB,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,eAAe,GACf,WAAW,GACX,sBAAsB,GACtB,YAAY,GACZ,gBAAgB,CACnB;IACD,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,gBAAgB,KAAK,SAAS,CAAC;IACjF;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;CACpC;AAkDD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAsL1D"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../src/react.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAwC,KAAK,aAAa,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACjG,OAAO,EAAoC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAG7F,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACzF,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC9H,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC/F,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKzD,MAAM,WAAW,cACf,SAAQ,IAAI,CACV,oBAAoB,EAClB,kBAAkB,GAClB,UAAU,GACV,aAAa,GACb,YAAY,GACZ,sBAAsB,GACtB,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,eAAe,GACf,WAAW,GACX,sBAAsB,GACtB,YAAY,GACZ,gBAAgB,CACnB;IACD,iFAAiF;IACjF,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,gBAAgB,KAAK,SAAS,CAAC;IACjF;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;CACpC;AAkDD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAsL1D"}

package/dist/react.js

@@ -38,7 +38,7 @@ import { attachViewHost, viewDocumentHtml } from "./view-host.js";
 import { attachSandboxPageDelivery } from "./sandbox-page.js";
 import { decideAutoResize, initialAutoResizeState } from "./auto-resize.js";
 import { defaultViewHostStrings } from "./view-strings.js";
-export { attachViewHost, viewDocumentHtml } from "./view-host.js";
+export { attachViewHost, viewDocumentHtml, MESSAGE_ANSWER_CAP_MS } from "./view-host.js";
 export { attachSandboxPageDelivery, isSandboxProxyReady, SANDBOX_PROXY_READY_METHOD, SANDBOX_RESOURCE_READY_METHOD, } from "./sandbox-page.js";
 export { defaultViewHostStrings } from "./view-strings.js";
 /** Accessible name for a mounted view when the caller has nothing better. */

package/dist/view-host-protocol.d.ts

@@ -176,8 +176,11 @@ export type ViewHostEffect = {
      * A `ui/message` the view handed the host (guuey#422): role-user
      * content blocks the host forwards into ITS conversation loop (the
      * composer's send gate — a real turn starts). ggui's #440 post-turn
-     * doorbell rides this. The machine already ANSWERED the view (`{}` —
-     * accepted); delivery is this effect. Only emitted when
+     * doorbell rides this. Under `messageAnswer: "on-accept"` (the default)
+     * the machine already ANSWERED the view (`{}` — accepted) and delivery is
+     * this effect; under `"on-delivery"` (guuey#1706) this effect is the ONLY
+     * output and the host owes the view its answer — `{}` delivered, `{
+     * isError: true }` not — keyed by `id`. Only emitted when
      * {@link ViewHostBehavior.messageSink} is true.
      */
     kind: "user-message";
@@ -254,6 +257,16 @@ export interface ViewHostBehavior {
     modelContextSink: boolean;
     /** Whether a ui/message sink is wired (see `view-host.ts`, guuey#422). */
     messageSink: boolean;
+    /**
+     * WHO answers a `ui/message`, and when (guuey#1706). Default `"on-accept"`:
+     * the machine answers `{}` BEFORE delivery and emits `user-message` — the
+     * pre-#1706 contract, kept for direct embedders of {@link viewHostReceive}.
+     * `"on-delivery"`: the machine emits `user-message` ONLY and the HOST answers
+     * from the sink's delivery outcome (`{}` delivered · `{ isError: true }` not),
+     * so a view learns whether its message actually became a turn. This
+     * package's own `attachViewHost` sets `"on-delivery"`.
+     */
+    messageAnswer?: "on-accept" | "on-delivery";
     /**
      * `ui/open-link` wired (guuey#522). Unwired, the method refuses with
      * the honest -32601 — the host chose today's no-links posture.

package/dist/view-host-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-host-protocol.d.ts","sourceRoot":"","sources":["../src/view-host-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC3G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AASrD,2CAA2C;AAC3C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,aAAa,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,CAAC;AAEzE,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,0EAA0E;IAC1E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,oBAAoB,IAAI,aAAa,CAEpD;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAC9C;IACE;;;;;;OAMG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,qBAAqB,CAAC;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACpC,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,cAAc,CAAC;IACrB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACpC,GACD;IACE;;;;;;OAMG;IACH,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE;;;;;;;;OAQG;IACH,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IACE;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,mBAAmB,CAAC;CAC7B,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;;;;OAOG;IACH,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,+DAA+D;IAC/D,WAAW,EAAE,gBAAgB,CAAC;IAC9B,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,WAAW,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,2EAA2E;IAC3E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAiCD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,gBAAgB,EAC1B,wBAAwB,EAAE,OAAO,GAChC,qBAAqB,CAcvB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACjC,gBAAgB,CAElB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,qBAAqB,GAAG,SAAS,GACvC,gBAAgB,CASlB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,CAElD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAwKpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAEnE;AAID;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAyBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE,cAAc,GAAG,SAAS,GAClC,gBAAgB,GAAG,SAAS,CAqB9B"}
+{"version":3,"file":"view-host-protocol.d.ts","sourceRoot":"","sources":["../src/view-host-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACtB,MAAM,gCAAgC,CAAC;AAIxC,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC3G,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AASrD,2CAA2C;AAC3C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,aAAa,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACpC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,WAAW,GAAG,cAAc,CAAC;AAEzE,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,0EAA0E;IAC1E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,oBAAoB,IAAI,aAAa,CAEpD;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAC9C;IACE;;;;;;OAMG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,wBAAwB,CAAC;CACtC,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,qBAAqB,CAAC;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE;;;;;;;OAOG;IACH,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACpC,GACD;IACE;;;;;;;;;;OAUG;IACH,IAAI,EAAE,cAAc,CAAC;IACrB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACpC,GACD;IACE;;;;;;OAMG;IACH,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACb,GACD;IACE;;;;;;;;OAQG;IACH,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IACE;;;;;;;;;;;;;;;;;;OAkBG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,mBAAmB,CAAC;CAC7B,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;;;;OAOG;IACH,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,+DAA+D;IAC/D,WAAW,EAAE,gBAAgB,CAAC;IAC9B,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAC5C;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,2EAA2E;IAC3E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAiCD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,gBAAgB,EAC1B,wBAAwB,EAAE,OAAO,GAChC,qBAAqB,CAcvB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACjC,gBAAgB,CAElB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,qBAAqB,GAAG,SAAS,GACvC,gBAAgB,CASlB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,CAElD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CA6KpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAEnE;AAID;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAyBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE,cAAc,GAAG,SAAS,GAClC,gBAAgB,GAAG,SAAS,CAqB9B"}

package/dist/view-host-protocol.js

@@ -292,10 +292,15 @@ export function viewHostReceive(state, behavior, data) {
         };
     }
     if (req.method === MESSAGE_METHOD_LOCAL && behavior.messageSink) {
-        // Answer accepted FIRST (spec result: rejected-flag absent = delivered)
-        // and deliver as an effect — the sink starting a turn must never make
-        // the view wait on the model.
         const params = isPlainObject(req.params) ? req.params : {};
+        if (behavior.messageAnswer === "on-delivery") {
+            // guuey#1706: no pre-answer. The host posts the answer from the sink's
+            // delivery outcome — `{}` once the message became a turn, `{ isError: true }`
+            // when it could not (spec result: `isError` is the only rejection word).
+            return { state, effects: [{ kind: "user-message", id: req.id, params }] };
+        }
+        // "on-accept" (the default): answer accepted FIRST (spec result: the
+        // rejected flag absent = delivered) and deliver as an effect.
         return {
             state,
             effects: [

package/dist/view-host.d.ts

@@ -67,6 +67,36 @@ export interface ViewCspEvents {
     addEventListener(type: "securitypolicyviolation", listener: (event: CspViolationLike) => void): void;
     removeEventListener(type: "securitypolicyviolation", listener: (event: CspViolationLike) => void): void;
 }
+/**
+ * What a `ui/message` sink reports back so the host can answer the view
+ * truthfully (guuey#1706): `{ delivered: true }` once the message BECAME a
+ * turn — sent through the host's composer gate, now or after waiting behind an
+ * in-progress turn — or `{ delivered: false, reason }` when it could not (the
+ * chat is unavailable; it was dropped from the queue).
+ */
+export type UserMessageDelivery = {
+    delivered: true;
+} | {
+    delivered: false;
+    reason: string;
+};
+/**
+ * The longest the host holds a view's `ui/message` answer (guuey#1706).
+ *
+ * A spec MCP App awaiting `app.sendMessage` times out at the MCP SDK's default
+ * request timeout (`DEFAULT_REQUEST_TIMEOUT_MSEC` = 60 s in
+ * `@modelcontextprotocol/sdk` 1.30.0), so a message still queued behind a long
+ * turn is answered `{}` at this cap rather than timing the view out on a message
+ * that WILL deliver. What that trades, exactly: a prior turn LONGER than 50 s
+ * AND the session ending while the message is still queued leaves the view
+ * holding `{}` for a message that never sends — visible to operators only (the
+ * sink's console trace). `{ isError: true }` at the cap would be the other lie
+ * (the view shows "failed", then the message sends when the turn ends). The
+ * spec's result carries only `isError`, so "queued" has no word of its own.
+ * ggui's views — today's only producer — post `ui/message` raw and never await
+ * the answer, so the cap has no consumer there.
+ */
+export declare const MESSAGE_ANSWER_CAP_MS = 50000;
 export interface AttachViewHostConfig {
     /**
      * Capabilities to advertise in the initialize result. Default: `{}` —
@@ -116,11 +146,20 @@ export interface AttachViewHostConfig {
      * turn). ggui's #440 post-turn doorbell depends on this — without it,
      * a successfully-relayed post-turn gesture dead-ends in their
      * 'cannot relay actions' latch. Wiring it advertises `message`
-     * (text modality); the machine answers the view BEFORE delivery.
+     * (text modality).
+     *
+     * The answer (guuey#1706): return a Promise of {@link UserMessageDelivery}
+     * and the host answers the view from it — `{}` delivered, `{ isError: true }`
+     * not, `{}` if still pending at {@link MESSAGE_ANSWER_CAP_MS}. A sink that
+     * returns nothing, synchronously OR as a Promise that resolves to nothing
+     * (an `async` sink that delivers itself), is answered `{}`: the pre-#1706
+     * answer, kept for existing embedders. A sink that throws or rejects, or a
+     * resolution the host cannot read, is answered `{ isError: true }`. The view
+     * is answered exactly once on every path.
      */
     onUserMessage?: (params: {
         [key: string]: unknown;
-    }) => void;
+    }) => void | Promise<UserMessageDelivery | void>;
     /**
      * `ui/open-link` executor (guuey#522) — receives a URL the machine's
      * scheme wall already passed (absolute http/https only). The kit
@@ -220,12 +259,6 @@ export interface AttachViewHostConfig {
     /** Message-event source, injectable for tests. Default: `window`. */
     events?: ViewHostEvents;
 }
-/**
- * Attach the Host role to a mounted view frame. Returns a detach function;
- * call it before the frame unmounts — it stops listening and posts the
- * spec-mannered `ui/resource-teardown` farewell through the CACHED window
- * handle (post-removal, `frame.contentWindow` is already null).
- */
 export declare function attachViewHost(frame: ViewFrameLike, config?: AttachViewHostConfig): () => void;
 /**
  * The document a {@link McpUiResourcePayload} mounts: `text` verbatim, or

package/dist/view-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view-host.d.ts","sourceRoot":"","sources":["../src/view-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAQL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAGnB,KAAK,aAAa,EAEnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE;QAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CACd,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;IACR,mBAAmB,CACjB,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;CACT;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI,CAAC;IACrG,mBAAmB,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI,CAAC;CACzG;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7D;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAClD,6DAA6D;IAC7D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACvD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AA+DD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,GAAE,oBAAyB,GAAG,MAAM,IAAI,CAgJlG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAcnF"}
+{"version":3,"file":"view-host.d.ts","sourceRoot":"","sources":["../src/view-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAQL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAGnB,KAAK,aAAa,EAGnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAEL,KAAK,iBAAiB,EAEtB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE;QAAE,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CACd,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;IACR,mBAAmB,CACjB,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,GAC5D,IAAI,CAAC;CACT;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,gBAAgB,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI,CAAC;IACrG,mBAAmB,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI,CAAC;CACzG;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtE;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE;;;;;;;;;;;;;;;;OAgBG;IACH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACnG;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7C;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAClD,6DAA6D;IAC7D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAC/C;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACvD,6EAA6E;IAC7E,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAkFD,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,GAAE,oBAAyB,GAAG,MAAM,IAAI,CAyLlG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAcnF"}

package/dist/view-host.js

@@ -1,5 +1,22 @@
 import { diagnoseCspViolation, initialViewHostState, resourceReadResponse, teardownMessage, toolCallResponse, viewHostElapsed, viewHostReceive, } from "./view-host-protocol.js";
 import { unavailableToolCallResult, } from "./action.js";
+/**
+ * The longest the host holds a view's `ui/message` answer (guuey#1706).
+ *
+ * A spec MCP App awaiting `app.sendMessage` times out at the MCP SDK's default
+ * request timeout (`DEFAULT_REQUEST_TIMEOUT_MSEC` = 60 s in
+ * `@modelcontextprotocol/sdk` 1.30.0), so a message still queued behind a long
+ * turn is answered `{}` at this cap rather than timing the view out on a message
+ * that WILL deliver. What that trades, exactly: a prior turn LONGER than 50 s
+ * AND the session ending while the message is still queued leaves the view
+ * holding `{}` for a message that never sends — visible to operators only (the
+ * sink's console trace). `{ isError: true }` at the cap would be the other lie
+ * (the view shows "failed", then the message sends when the turn ends). The
+ * spec's result carries only `isError`, so "queued" has no word of its own.
+ * ggui's views — today's only producer — post `ui/message` raw and never await
+ * the answer, so the cap has no consumer there.
+ */
+export const MESSAGE_ANSWER_CAP_MS = 50_000;
 const DEFAULT_HOST_INFO = { name: "guuey-view-host", version: "1" };
 const DEFAULT_NEGOTIATION_TIMEOUT_MS = 8000;
 /** Derived + configured context, per the {@link AttachViewHostConfig.hostContext} contract. */
@@ -38,6 +55,8 @@ function behaviorFor(frame, config) {
         resourceRelay: readWired,
         modelContextSink: contextSinkWired,
         messageSink: messageSinkWired,
+        // guuey#1706: this host answers `ui/message` from the sink's delivery outcome.
+        messageAnswer: "on-delivery",
     };
 }
 /**
@@ -65,6 +84,16 @@ function narrowReadEntry(entry) {
  * spec-mannered `ui/resource-teardown` farewell through the CACHED window
  * handle (post-removal, `frame.contentWindow` is already null).
  */
+/**
+ * The view's answer for a sink's resolved value (guuey#1706). Only an explicit
+ * `{ delivered: false }` is a refusal. A resolution to nothing — an `async`
+ * sink that delivers itself and returns nothing, legal TypeScript through
+ * void-return substitutability — is ACCEPTED, `{}`, exactly as a synchronous
+ * `void` is: the pre-#1706 contract, kept for every existing embedder.
+ */
+function answerForDelivery(delivery) {
+    return typeof delivery === "object" && delivery !== null && delivery.delivered === false ? { isError: true } : {};
+}
 export function attachViewHost(frame, config = {}) {
     const cachedWindow = frame.contentWindow;
     let state = initialViewHostState();
@@ -77,6 +106,48 @@ export function attachViewHost(frame, config = {}) {
     const post = (message) => {
         frame.contentWindow?.postMessage(message, "*");
     };
+    // guuey#1706 — the machine emits `user-message` WITHOUT answering
+    // (`messageAnswer: "on-delivery"`); the view is answered here, from the
+    // sink's delivery outcome, exactly once, and never later than the cap.
+    const pendingAnswerCaps = new Set();
+    const answerMessage = (id, params) => {
+        // ONE exit (guuey-cto on 0.27.0): every path answers through `settle`,
+        // exactly once, and clears the cap on the way out. Nothing after the
+        // settle can reach the view, and no path can end without one.
+        let settled = false;
+        let cap = undefined;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (cap !== undefined) {
+                clearTimeout(cap);
+                pendingAnswerCaps.delete(cap);
+            }
+            post({ jsonrpc: "2.0", id, result });
+        };
+        let outcome;
+        try {
+            outcome = config.onUserMessage?.(params);
+        }
+        catch {
+            // A throwing sink delivered nothing — the view hears so, never a hang.
+            settle({ isError: true });
+            return;
+        }
+        if (!(outcome instanceof Promise)) {
+            // A sink that returns nothing: accepted at call time (the pre-#1706 answer).
+            settle({});
+            return;
+        }
+        cap = setTimeout(() => settle({}), MESSAGE_ANSWER_CAP_MS); // still queued: see MESSAGE_ANSWER_CAP_MS
+        pendingAnswerCaps.add(cap);
+        outcome
+            .then((delivery) => settle(answerForDelivery(delivery)), () => settle({ isError: true }))
+            // A throw while handling the resolution (a `delivered` the host cannot
+            // read) is an answer the view still gets.
+            .catch(() => settle({ isError: true }));
+    };
     const relay = (id, name, args) => {
         const { onCallTool, resourceUri } = config;
         // The machine only emits the effect when the relay is wired (behavior
@@ -111,14 +182,8 @@ export function attachViewHost(frame, config = {}) {
                 relay(effect.id, effect.name, effect.arguments);
             else if (effect.kind === "relay-resource-read")
                 relayRead(effect.id, effect.uri);
-            else if (effect.kind === "user-message") {
-                try {
-                    config.onUserMessage?.(effect.params);
-                }
-                catch {
-                    // Observer failure is the embedder's bug; the view is answered.
-                }
-            }
+            else if (effect.kind === "user-message")
+                answerMessage(effect.id, effect.params);
             else if (effect.kind === "open-link") {
                 // The machine's scheme wall already passed this URL; the executor
                 // SURFACES it to the human (the kit default renders a disclosure
@@ -210,6 +275,9 @@ export function attachViewHost(frame, config = {}) {
     return () => {
         if (timer !== undefined)
             clearTimeout(timer);
+        for (const cap of pendingAnswerCaps)
+            clearTimeout(cap);
+        pendingAnswerCaps.clear();
         unsubscribe();
         unsubscribeCsp();
         cachedWindow?.postMessage(teardownMessage(), "*");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/mcp-apps-host",
-  "version": "0.26.0",
+  "version": "0.28.0",
   "description": "The MCP Apps (SEP-1865) Host role for guuey's chat surfaces — view-mount narrowing across UI channels, ui:// locator rehydration by resources/read, and the sandbox-trust channel contract. Vendor-neutral: any spec-following MCP App mounts through it.",
   "license": "MIT",
   "type": "module",
@@ -33,9 +33,9 @@
     }
   },
   "dependencies": {
-    "@ggui-ai/protocol": "0.19.0",
+    "@ggui-ai/protocol": "0.23.0",
     "@modelcontextprotocol/ext-apps": "^1.7.5",
-    "@silverprotocol/core": "0.6.2"
+    "@silverprotocol/core": "0.7.2"
   },
   "peerDependencies": {
     "react": ">=18"

package/src/block-ui.ts

@@ -176,9 +176,26 @@ export function uiLocator(uiData: JsonValue | undefined): string | undefined {
 }
 
 /**
- * The `ui://` locator a `tool-result` block carries, from EITHER channel it
+ * The `ui://` locator a `tool-result` block carries, from ANY channel it
  * can arrive on — the single seam every locator reader goes through.
  *
+ * `_meta.ui.resourceUri` is read FIRST. Under AgJSON draft.4 (core 0.7.0) a
+ * kept-open result's later `tool.done` replaces the payload as a unit, so a
+ * final that omits `uiData` / `structuredContent` CLEARS them on the fold,
+ * while `_meta` (a descriptor) survives an omitting final. The view's
+ * identity lives there by the spec's own rule. Reading the payload channels
+ * alone would take a folded card dark. Under 0.6.x both channels were kept,
+ * so this order gives the same answer on either version.
+ *
+ * Producers differ in what they put on `_meta.ui`. A server that only MARKS
+ * a result as UI (`_meta.ui: {}`) and carries the locator in
+ * `structuredContent` names no locator here, so the payload order decides:
+ * the same answer as before. A server that states `_meta.ui.resourceUri`
+ * gets that one, even when its payload names another, because the spec makes
+ * `_meta.ui` the durable identity. Note that a kept-open result (`more:
+ * true`) is what exercises the clearing; a producer that never keeps results
+ * open never folds an omitting final.
+ *
  * AgJSON §2.1 routes a tool result's `structuredContent` by its `_meta.ui`
  * sibling: WITH the sibling it is surface data and the normalizer stamps
  * `uiData`; WITHOUT it, it is model-channel data and lands in
@@ -186,14 +203,18 @@ export function uiLocator(uiData: JsonValue | undefined): string | undefined {
  * posture; any plain-locator MCP server) therefore delivers a locator that
  * is byte-identical in shape but lives one field over — reading `uiData`
  * alone renders NOTHING for it (dark, not "expired"), and the persistence
- * projector minted no placeholder row (the read plane 404s). `uiData` wins
- * when both carry one (guuey#209 route-A finding).
+ * projector minted no placeholder row (the read plane 404s). Between the
+ * payload channels `uiData` wins when both carry one (guuey#209 route-A
+ * finding). The pod's `blockLocator` (nocode-runtime live-cards.ts) and the
+ * persisted door's `snapshotCarriesLocator` (publicApi ui-resource.ts) apply
+ * the same order, so live and persisted guards recognize one locator set.
  */
 export function toolResultLocator(block: {
+  _meta?: { [key: string]: JsonValue };
   uiData?: JsonValue;
   structuredContent?: JsonValue;
 }): string | undefined {
-  return uiLocator(block.uiData) ?? uiLocator(block.structuredContent);
+  return uiLocator(block._meta?.ui) ?? uiLocator(block.uiData) ?? uiLocator(block.structuredContent);
 }
 
 export function snapshotUiResource(cardSnapshot: JsonValue): McpUiResourcePayload | undefined {

package/src/index.ts

@@ -84,7 +84,9 @@ export {
 export {
   attachViewHost,
   viewDocumentHtml,
+  MESSAGE_ANSWER_CAP_MS,
   type AttachViewHostConfig,
+  type UserMessageDelivery,
   type ViewCspEvents,
   type ViewFrameLike,
   type ViewHostEvents,

package/src/react.tsx

@@ -40,8 +40,8 @@ import type { ViewCspDiagnosis, ViewHostPhase } from "./view-host-protocol.js";
 import type { ResolvedViewMount } from "./card-mount.js";
 import { defaultViewHostStrings, type ViewHostStrings } from "./view-strings.js";
 
-export { attachViewHost, viewDocumentHtml } from "./view-host.js";
-export type { AttachViewHostConfig, ViewCspEvents, ViewFrameLike, ViewHostEvents } from "./view-host.js";
+export { attachViewHost, viewDocumentHtml, MESSAGE_ANSWER_CAP_MS } from "./view-host.js";
+export type { AttachViewHostConfig, UserMessageDelivery, ViewCspEvents, ViewFrameLike, ViewHostEvents } from "./view-host.js";
 export {
   attachSandboxPageDelivery,
   isSandboxProxyReady,

package/src/view-host-protocol.ts

@@ -205,8 +205,11 @@ export type ViewHostEffect =
        * A `ui/message` the view handed the host (guuey#422): role-user
        * content blocks the host forwards into ITS conversation loop (the
        * composer's send gate — a real turn starts). ggui's #440 post-turn
-       * doorbell rides this. The machine already ANSWERED the view (`{}` —
-       * accepted); delivery is this effect. Only emitted when
+       * doorbell rides this. Under `messageAnswer: "on-accept"` (the default)
+       * the machine already ANSWERED the view (`{}` — accepted) and delivery is
+       * this effect; under `"on-delivery"` (guuey#1706) this effect is the ONLY
+       * output and the host owes the view its answer — `{}` delivered, `{
+       * isError: true }` not — keyed by `id`. Only emitted when
        * {@link ViewHostBehavior.messageSink} is true.
        */
       kind: "user-message";
@@ -285,6 +288,16 @@ export interface ViewHostBehavior {
   modelContextSink: boolean;
   /** Whether a ui/message sink is wired (see `view-host.ts`, guuey#422). */
   messageSink: boolean;
+  /**
+   * WHO answers a `ui/message`, and when (guuey#1706). Default `"on-accept"`:
+   * the machine answers `{}` BEFORE delivery and emits `user-message` — the
+   * pre-#1706 contract, kept for direct embedders of {@link viewHostReceive}.
+   * `"on-delivery"`: the machine emits `user-message` ONLY and the HOST answers
+   * from the sink's delivery outcome (`{}` delivered · `{ isError: true }` not),
+   * so a view learns whether its message actually became a turn. This
+   * package's own `attachViewHost` sets `"on-delivery"`.
+   */
+  messageAnswer?: "on-accept" | "on-delivery";
   /**
    * `ui/open-link` wired (guuey#522). Unwired, the method refuses with
    * the honest -32601 — the host chose today's no-links posture.
@@ -532,10 +545,15 @@ export function viewHostReceive(
   }
 
   if (req.method === MESSAGE_METHOD_LOCAL && behavior.messageSink) {
-    // Answer accepted FIRST (spec result: rejected-flag absent = delivered)
-    // and deliver as an effect — the sink starting a turn must never make
-    // the view wait on the model.
     const params = isPlainObject(req.params) ? req.params : {};
+    if (behavior.messageAnswer === "on-delivery") {
+      // guuey#1706: no pre-answer. The host posts the answer from the sink's
+      // delivery outcome — `{}` once the message became a turn, `{ isError: true }`
+      // when it could not (spec result: `isError` is the only rejection word).
+      return { state, effects: [{ kind: "user-message", id: req.id, params }] };
+    }
+    // "on-accept" (the default): answer accepted FIRST (spec result: the
+    // rejected flag absent = delivered) and deliver as an effect.
     return {
       state,
       effects: [

package/src/view-host.ts

@@ -43,6 +43,7 @@ import {
   type ViewHostOutbound,
   type ViewHostPhase,
   type ViewHostState,
+  type ViewRequestId,
 } from "./view-host-protocol.js";
 import type { McpResourceReadResult } from "./reader.js";
 import {
@@ -89,6 +90,33 @@ export interface ViewCspEvents {
   removeEventListener(type: "securitypolicyviolation", listener: (event: CspViolationLike) => void): void;
 }
 
+/**
+ * What a `ui/message` sink reports back so the host can answer the view
+ * truthfully (guuey#1706): `{ delivered: true }` once the message BECAME a
+ * turn — sent through the host's composer gate, now or after waiting behind an
+ * in-progress turn — or `{ delivered: false, reason }` when it could not (the
+ * chat is unavailable; it was dropped from the queue).
+ */
+export type UserMessageDelivery = { delivered: true } | { delivered: false; reason: string };
+
+/**
+ * The longest the host holds a view's `ui/message` answer (guuey#1706).
+ *
+ * A spec MCP App awaiting `app.sendMessage` times out at the MCP SDK's default
+ * request timeout (`DEFAULT_REQUEST_TIMEOUT_MSEC` = 60 s in
+ * `@modelcontextprotocol/sdk` 1.30.0), so a message still queued behind a long
+ * turn is answered `{}` at this cap rather than timing the view out on a message
+ * that WILL deliver. What that trades, exactly: a prior turn LONGER than 50 s
+ * AND the session ending while the message is still queued leaves the view
+ * holding `{}` for a message that never sends — visible to operators only (the
+ * sink's console trace). `{ isError: true }` at the cap would be the other lie
+ * (the view shows "failed", then the message sends when the turn ends). The
+ * spec's result carries only `isError`, so "queued" has no word of its own.
+ * ggui's views — today's only producer — post `ui/message` raw and never await
+ * the answer, so the cap has no consumer there.
+ */
+export const MESSAGE_ANSWER_CAP_MS = 50_000;
+
 export interface AttachViewHostConfig {
   /**
    * Capabilities to advertise in the initialize result. Default: `{}` —
@@ -136,9 +164,18 @@ export interface AttachViewHostConfig {
    * turn). ggui's #440 post-turn doorbell depends on this — without it,
    * a successfully-relayed post-turn gesture dead-ends in their
    * 'cannot relay actions' latch. Wiring it advertises `message`
-   * (text modality); the machine answers the view BEFORE delivery.
+   * (text modality).
+   *
+   * The answer (guuey#1706): return a Promise of {@link UserMessageDelivery}
+   * and the host answers the view from it — `{}` delivered, `{ isError: true }`
+   * not, `{}` if still pending at {@link MESSAGE_ANSWER_CAP_MS}. A sink that
+   * returns nothing, synchronously OR as a Promise that resolves to nothing
+   * (an `async` sink that delivers itself), is answered `{}`: the pre-#1706
+   * answer, kept for existing embedders. A sink that throws or rejects, or a
+   * resolution the host cannot read, is answered `{ isError: true }`. The view
+   * is answered exactly once on every path.
    */
-  onUserMessage?: (params: { [key: string]: unknown }) => void;
+  onUserMessage?: (params: { [key: string]: unknown }) => void | Promise<UserMessageDelivery | void>;
   /**
    * `ui/open-link` executor (guuey#522) — receives a URL the machine's
    * scheme wall already passed (absolute http/https only). The kit
@@ -276,6 +313,8 @@ function behaviorFor(frame: ViewFrameLike, config: AttachViewHostConfig): ViewHo
     resourceRelay: readWired,
     modelContextSink: contextSinkWired,
     messageSink: messageSinkWired,
+    // guuey#1706: this host answers `ui/message` from the sink's delivery outcome.
+    messageAnswer: "on-delivery",
   };
 }
 
@@ -303,6 +342,17 @@ function narrowReadEntry(entry: McpResourceReadResult | undefined): McpResourceR
  * spec-mannered `ui/resource-teardown` farewell through the CACHED window
  * handle (post-removal, `frame.contentWindow` is already null).
  */
+/**
+ * The view's answer for a sink's resolved value (guuey#1706). Only an explicit
+ * `{ delivered: false }` is a refusal. A resolution to nothing — an `async`
+ * sink that delivers itself and returns nothing, legal TypeScript through
+ * void-return substitutability — is ACCEPTED, `{}`, exactly as a synchronous
+ * `void` is: the pre-#1706 contract, kept for every existing embedder.
+ */
+function answerForDelivery(delivery: UserMessageDelivery | void): { isError?: true } {
+  return typeof delivery === "object" && delivery !== null && delivery.delivered === false ? { isError: true } : {};
+}
+
 export function attachViewHost(frame: ViewFrameLike, config: AttachViewHostConfig = {}): () => void {
   const cachedWindow = frame.contentWindow;
 
@@ -318,6 +368,50 @@ export function attachViewHost(frame: ViewFrameLike, config: AttachViewHostConfi
     frame.contentWindow?.postMessage(message, "*");
   };
 
+  // guuey#1706 — the machine emits `user-message` WITHOUT answering
+  // (`messageAnswer: "on-delivery"`); the view is answered here, from the
+  // sink's delivery outcome, exactly once, and never later than the cap.
+  const pendingAnswerCaps = new Set<ReturnType<typeof setTimeout>>();
+  const answerMessage = (id: ViewRequestId, params: { [key: string]: unknown }): void => {
+    // ONE exit (guuey-cto on 0.27.0): every path answers through `settle`,
+    // exactly once, and clears the cap on the way out. Nothing after the
+    // settle can reach the view, and no path can end without one.
+    let settled = false;
+    let cap: ReturnType<typeof setTimeout> | undefined = undefined;
+    const settle = (result: { isError?: true }): void => {
+      if (settled) return;
+      settled = true;
+      if (cap !== undefined) {
+        clearTimeout(cap);
+        pendingAnswerCaps.delete(cap);
+      }
+      post({ jsonrpc: "2.0", id, result });
+    };
+    let outcome: void | Promise<UserMessageDelivery | void>;
+    try {
+      outcome = config.onUserMessage?.(params);
+    } catch {
+      // A throwing sink delivered nothing — the view hears so, never a hang.
+      settle({ isError: true });
+      return;
+    }
+    if (!(outcome instanceof Promise)) {
+      // A sink that returns nothing: accepted at call time (the pre-#1706 answer).
+      settle({});
+      return;
+    }
+    cap = setTimeout(() => settle({}), MESSAGE_ANSWER_CAP_MS); // still queued: see MESSAGE_ANSWER_CAP_MS
+    pendingAnswerCaps.add(cap);
+    outcome
+      .then(
+        (delivery) => settle(answerForDelivery(delivery)),
+        () => settle({ isError: true }),
+      )
+      // A throw while handling the resolution (a `delivered` the host cannot
+      // read) is an answer the view still gets.
+      .catch(() => settle({ isError: true }));
+  };
+
   const relay = (id: number | string, name: string, args?: McpToolStructuredContent): void => {
     const { onCallTool, resourceUri } = config;
     // The machine only emits the effect when the relay is wired (behavior
@@ -352,13 +446,8 @@ export function attachViewHost(frame: ViewFrameLike, config: AttachViewHostConfi
       if (effect.kind === "respond") post(effect.message);
       else if (effect.kind === "relay-tool-call") relay(effect.id, effect.name, effect.arguments);
       else if (effect.kind === "relay-resource-read") relayRead(effect.id, effect.uri);
-      else if (effect.kind === "user-message") {
-        try {
-          config.onUserMessage?.(effect.params);
-        } catch {
-          // Observer failure is the embedder's bug; the view is answered.
-        }
-      } else if (effect.kind === "open-link") {
+      else if (effect.kind === "user-message") answerMessage(effect.id, effect.params);
+      else if (effect.kind === "open-link") {
         // The machine's scheme wall already passed this URL; the executor
         // SURFACES it to the human (the kit default renders a disclosure
         // affordance — navigation only ever happens on their own click).
@@ -443,6 +532,8 @@ export function attachViewHost(frame: ViewFrameLike, config: AttachViewHostConfi
 
   return () => {
     if (timer !== undefined) clearTimeout(timer);
+    for (const cap of pendingAnswerCaps) clearTimeout(cap);
+    pendingAnswerCaps.clear();
     unsubscribe();
     unsubscribeCsp();
     cachedWindow?.postMessage(teardownMessage(), "*");