@guuey/worker 0.1.1 → 0.2.0

package/dist/creds.d.ts

@@ -0,0 +1,26 @@
+import type { Fs } from "./protocol.js";
+/**
+ * One parsed credential file. The shape is the broker's §7.1 contract — the
+ * worker consumes it verbatim without consulting the snapshot (the broker
+ * owns ALL resolution including transport).
+ */
+export interface CredentialFile {
+    /** The resolved MCP URL (may be scoped `<host>/apps/<id>` for federated ggui). */
+    url: string;
+    /** Transport the broker selected for this server. */
+    transport: "http" | "sse";
+    /** Headers to forward — typically `{ authorization: 'Bearer <token>' }`. */
+    headers: Record<string, string>;
+    /** ISO expiry; informational for the worker (the Router refreshes per invoke). */
+    expiresAt?: string;
+}
+/**
+ * Read all credential files the Router broker wrote for this invoke. Returns
+ * one `{ name, cred }` per valid `.json` file — malformed files are silently
+ * skipped (never crash the turn). Missing directory → empty array (no MCP).
+ */
+export declare function listCredentials(fs: Fs): () => Array<{
+    name: string;
+    cred: CredentialFile;
+}>;
+//# sourceMappingURL=creds.d.ts.map

package/dist/creds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"creds.d.ts","sourceRoot":"","sources":["../src/creds.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAExC;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAC1B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,CA6B3F"}

package/dist/creds.js

@@ -0,0 +1,48 @@
+/**
+ * Framework-neutral credential-file reading, shared by every worker — the
+ * `@guuey/host` runners AND the code-mode workers scaffolded by
+ * `@guuey/create-agentic-app` (which is why it lives in the protocol package
+ * rather than in the host: both sides read the same broker-written directory).
+ *
+ * The Router-side credential broker resolves EVERYTHING (default server,
+ * federation, minting, env substitution) and writes one JSON file per MCP
+ * server to `<sessionDir>/.guuey/credentials/<server>.json` before each
+ * worker spawn. Workers only read and shape — no resolution logic here.
+ */
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Read all credential files the Router broker wrote for this invoke. Returns
+ * one `{ name, cred }` per valid `.json` file — malformed files are silently
+ * skipped (never crash the turn). Missing directory → empty array (no MCP).
+ */
+export function listCredentials(fs) {
+    return () => {
+        const dir = join(fs.session, ".guuey", "credentials");
+        let names;
+        try {
+            names = readdirSync(dir).filter((n) => n.endsWith(".json"));
+        }
+        catch {
+            return []; // no cred dir this turn → no MCP.
+        }
+        const out = [];
+        for (const file of names) {
+            try {
+                const parsed = JSON.parse(readFileSync(join(dir, file), "utf8"));
+                if (typeof parsed === "object" &&
+                    parsed !== null &&
+                    !Array.isArray(parsed) &&
+                    typeof parsed.url === "string" &&
+                    (parsed.transport === "http" ||
+                        parsed.transport === "sse")) {
+                    out.push({ name: file.replace(/\.json$/, ""), cred: parsed });
+                }
+            }
+            catch {
+                // malformed file → skip (never crash the turn).
+            }
+        }
+        return out;
+    };
+}

package/dist/index.d.ts

@@ -2,9 +2,10 @@
  * @guuey/worker — Guuey Worker Protocol v1 types + the tiered worker SDK.
  * See docs/superpowers/specs/2026-06-22-worker-platform-northstar-design.md §1.
  */
-export { PROTOCOL_VERSION, type ProtocolVersion, type JsonValue, type AuthMode, type Identity, type Fs, type HistoryMessage, type PriorMemoryRecord, type StopReason, type Invoke, type Shutdown, type ControlMessage, type TextEvent, type DoneEvent, type ErrorEvent, type NativeEvent, type WorkerHelloEvent, type WorkerEvent, } from "./protocol.js";
+export { PROTOCOL_VERSION, type ProtocolVersion, type JsonValue, type AuthMode, type Identity, type Fs, type HistoryMessage, type PriorMemoryRecord, type ProfileSection, type StopReason, type Invoke, type Shutdown, type ControlMessage, type TextEvent, type DoneEvent, type ErrorEvent, type NativeEvent, type WorkerHelloEvent, type WorkerEvent, } from "./protocol.js";
 export { parseControl, parseEvent, isInvoke, isShutdown, isText, isDone, isError, isNative, isHello, } from "./parse.js";
 export { createEmitter, type Emitter, type WriteSink } from "./emit.js";
+export { listCredentials, type CredentialFile } from "./creds.js";
 export { serve, serveOn, type ServeOptions } from "./serve.js";
 export { Turn, type WorkerHandler } from "./turn.js";
 export { serveNative, serveNativeOn } from "./serve-native.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,EAAE,EACP,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,MAAM,EACN,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,GACR,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,EAAE,EACP,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,MAAM,EACN,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,GACR,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -5,6 +5,7 @@
 export { PROTOCOL_VERSION, } from "./protocol.js";
 export { parseControl, parseEvent, isInvoke, isShutdown, isText, isDone, isError, isNative, isHello, } from "./parse.js";
 export { createEmitter } from "./emit.js";
+export { listCredentials } from "./creds.js";
 export { serve, serveOn } from "./serve.js";
 export { Turn } from "./turn.js";
 export { serveNative, serveNativeOn } from "./serve-native.js";

package/dist/parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAEV,cAAc,EACd,SAAS,EACT,UAAU,EAIV,MAAM,EAEN,WAAW,EAEX,QAAQ,EAER,SAAS,EACT,WAAW,EACX,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAEvB,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,MAAM,CAEvD;AACD,wBAAgB,UAAU,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,QAAQ,CAE3D;AAyDD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAgCzD;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,SAAS,CAErD;AACD,wBAAgB,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,SAAS,CAErD;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,UAAU,CAEvD;AACD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,WAAW,CAEzD;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,gBAAgB,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CA6CpD"}
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAEV,cAAc,EACd,SAAS,EACT,UAAU,EAIV,MAAM,EAEN,WAAW,EAGX,QAAQ,EAER,SAAS,EACT,WAAW,EACX,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAEvB,wBAAgB,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,MAAM,CAEvD;AACD,wBAAgB,UAAU,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,QAAQ,CAE3D;AA0ED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAkDzD;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,SAAS,CAErD;AACD,wBAAgB,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,SAAS,CAErD;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,UAAU,CAEvD;AACD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,WAAW,CAEzD;AACD,wBAAgB,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,IAAI,gBAAgB,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CA6CpD"}

package/dist/parse.js

@@ -55,6 +55,23 @@ function parsePriorMemory(v) {
     }
     return out.length > 0 ? out : undefined;
 }
+/**
+ * Parse the optional `profileSections` push (cross-app-profile T7). Lenient like
+ * {@link parsePriorMemory}: a non-conforming entry (not an object, or missing a
+ * string `app`/`content`) is DROPPED, never throwing. Returns `undefined` when
+ * absent or when no entry survives (so the field stays off the Invoke).
+ */
+function parseProfileSections(v) {
+    if (!Array.isArray(v))
+        return undefined;
+    const out = [];
+    for (const entry of v) {
+        if (isObject(entry) && typeof entry.app === "string" && typeof entry.content === "string") {
+            out.push({ app: entry.app, content: entry.content });
+        }
+    }
+    return out.length > 0 ? out : undefined;
+}
 export function parseControl(line) {
     let raw;
     try {
@@ -71,6 +88,7 @@ export function parseControl(line) {
             if (typeof raw.input !== "string")
                 throw new Error("invoke missing string `input`");
             const priorMemory = parsePriorMemory(raw.priorMemory);
+            const profileSections = parseProfileSections(raw.profileSections);
             return {
                 type: "invoke",
                 input: raw.input,
@@ -82,6 +100,23 @@ export function parseControl(line) {
                 // preserved; `priorMemory` is omitted when empty/absent.
                 ...(priorMemory ? { priorMemory } : {}),
                 ...(raw.priorState !== undefined ? { priorState: raw.priorState } : {}),
+                // memory-mcp prompted memory (spec §4) — DISTINCT from `priorMemory`
+                // above (see the `Invoke.userMemory` doc). Omitted when absent/non-string
+                // so it never lands on the typed Invoke as `undefined`.
+                ...(typeof raw.userMemory === "string" ? { userMemory: raw.userMemory } : {}),
+                // memory-mcp T5: the memory-child attachment signal — gates the SAVE
+                // instruction (all three frameworks) independent of `userMemory`.
+                // Omitted unless a real boolean so it never lands as `undefined`.
+                ...(typeof raw.memoryAttached === "boolean" ? { memoryAttached: raw.memoryAttached } : {}),
+                // cross-app-profile T7: the resolved profile access + recall sections.
+                // `profileAccess` is an explicit enum allowlist (an out-of-enum string —
+                // e.g. `'write'` — is dropped, not coerced), mirroring the fail-closed
+                // mint-claim check; `profileSections` drops malformed entries. Both
+                // omitted when absent so they never land as `undefined`.
+                ...(raw.profileAccess === "read" || raw.profileAccess === "read-write"
+                    ? { profileAccess: raw.profileAccess }
+                    : {}),
+                ...(profileSections ? { profileSections } : {}),
             };
         }
         case "shutdown":

package/dist/protocol.d.ts

@@ -41,6 +41,19 @@ export interface PriorMemoryRecord {
     key?: string;
     value: JsonValue;
 }
+/**
+ * One app's section of the user's cross-app profile (cross-app-profile T7). The
+ * Router reads every section it may recall (`readProfileSections`), resolves the
+ * writing app's display `name` for provenance, and pushes them by value so the
+ * worker renders them into the `<user_profile>` RECALL block. `app` is the
+ * source app's display name (or a synthetic `""` for the truncation marker line,
+ * whose `content` is the `[…omitted…]` note); `content` is the section body.
+ * Minimal + dependency-free, mirroring {@link PriorMemoryRecord}.
+ */
+export interface ProfileSection {
+    app: string;
+    content: string;
+}
 export type StopReason = "end_turn" | "max_turns" | "error";
 /** Start a turn. Carries the pushed context (identity, fs, a recent history
  *  window — the full transcript is at `/session/.guuey/history.jsonl`).
@@ -58,6 +71,60 @@ export interface Invoke {
     priorMemory?: PriorMemoryRecord[];
     /** Prior working-state blob carried from the previous turn (the `<working_state>` preamble). */
     priorState?: JsonValue;
+    /**
+     * Content of the authenticated caller's persistent `MEMORY.md` file —
+     * prompted memory's RECALL half (memory-mcp spec §4), read Router-side
+     * BEFORE this invoke and pushed by value so recall never depends on the
+     * model choosing to read a file. DISTINCT from `priorMemory`: that is
+     * thread-scoped conversation memory folded from AgJSON (the persistence-
+     * fold's `<thread_memory>` push); this is the user's own cross-session,
+     * cross-thread memory file at `$GUUEY_HOME_DIR/memories/MEMORY.md`.
+     * FRAMEWORK-BLIND as of memory-mcp T5: present for an authenticated caller
+     * when the memory MCP child is attached this pod (the Router's
+     * `recallUserMemory` gate — `authenticated && memoryAttached`, the single
+     * producer and canonical statement of this invariant), for ANY framework
+     * (all three renderers consume it as the RECALL block). Absent for an
+     * anonymous caller (never read), a memory-off / pre-rollout pod, or — the
+     * bootstrap case — an authenticated caller on an attached pod with no memory
+     * file YET (turn one): {@link memoryAttached} is still true, so the SAVE
+     * instruction still renders (save-only) even though this is absent.
+     */
+    userMemory?: string;
+    /**
+     * Whether the auto-injected memory MCP child booted with a ready port this
+     * pod (memory-mcp T5) — the pod-boot constant the Router threads from
+     * `SseServerOptions.memoryAttached`. When true, an AUTHENTICATED invoke has
+     * the `save_memory` tool spliced (T4), so all three framework renderers emit
+     * the SAVE instruction — independent of whether {@link userMemory} exists
+     * (fixing the bootstrap gap: turn one, no file yet, the model must still be
+     * told the tool exists). Absent/false → no memory tool → no SAVE instruction.
+     * DISTINCT from {@link userMemory}, which gates only the RECALL block: the
+     * SAVE gate is attachment, the RECALL gate is file presence.
+     */
+    memoryAttached?: boolean;
+    /**
+     * The resolved cross-app profile access for THIS invoke (cross-app-profile
+     * T6/T7) — the Router's fail-closed grant check (`resolveProfileForInvoke`)
+     * clamps the honored grant to the app's declared posture and threads the
+     * result here. Present ONLY for an authenticated caller with a live grant;
+     * absent → no profile surface this turn. Gates BOTH halves of the profile
+     * system-prompt section across all three frameworks: the `save_profile` SAVE
+     * instruction renders ONLY when this is `"read-write"` (a `"read"` grant has
+     * no write tool to name), and the RECALL block renders whenever
+     * {@link profileSections} is present. Kept as an inline literal (NOT imported
+     * from `@guuey/config`) to keep this package dependency-free.
+     */
+    profileAccess?: "read" | "read-write";
+    /**
+     * The user's cross-app profile sections for the RECALL push
+     * (cross-app-profile T7). Each entry is one writing-app's section (plus, when
+     * older sections were dropped to fit the 64 KiB recall budget, a leading
+     * marker entry with `app: ""`). Pushed by value like {@link priorMemory}; the
+     * worker renders them into the `<user_profile>` block. Absent → nothing to
+     * recall. Gated by {@link profileAccess} (never rendered for a guest / an
+     * ungranted app).
+     */
+    profileSections?: ProfileSection[];
 }
 /** Graceful termination (also signalled by stdin EOF). */
 export interface Shutdown {

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,EAAG,IAAa,CAAC;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC;AAEtD;8EAC8E;AAC9E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,eAAe,CAAC;AACrD,2EAA2E;AAC3E,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;CACpB;AACD,8DAA8D;AAC9D,MAAM,WAAW,EAAE;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;CAClB;AACD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;AAI5D;;;;;6DAK6D;AAC7D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,EAAE,EAAE,EAAE,CAAC;IACP,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,gGAAgG;IAChG,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AACD,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,UAAU,CAAC;CAClB;AACD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,CAAC;AAI/C,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AACD,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,wBAAwB;AACxB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AACD;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AACD;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8GAA8G;IAC9G,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AACD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,EAAG,IAAa,CAAC;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC;AAEtD;8EAC8E;AAC9E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,eAAe,CAAC;AACrD,2EAA2E;AAC3E,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;CACpB;AACD,8DAA8D;AAC9D,MAAM,WAAW,EAAE;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;CAClB;AACD;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;AAI5D;;;;;6DAK6D;AAC7D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,EAAE,EAAE,EAAE,CAAC;IACP,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,gGAAgG;IAChG,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB;;;;;;;;;;;;;;;;;OAiBG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACtC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC;AACD,0DAA0D;AAC1D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,UAAU,CAAC;CAClB;AACD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,CAAC;AAI/C,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AACD,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,wBAAwB;AACxB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AACD;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AACD;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8GAA8G;IAC9G,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AACD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC"}

package/dist/serve-native.d.ts

@@ -8,8 +8,20 @@ export type NativeHandler = (invoke: Invoke, emit: NativeEmit) => Promise<string
 export interface NativeServeInfo {
     framework: string;
     sdkName?: string | null;
+    /** Installed SDK version for the hello handshake. When OMITTED (the
+     *  template default), it is resolved at runtime from `sdkName`'s installed
+     *  package.json — works for unbundled workers with a real node_modules;
+     *  degrades to null inside a self-contained bundle (nothing to resolve). */
     sdkVersion?: string | null;
 }
+/**
+ * Resolve `pkgName`'s installed version by walking up from its resolved main
+ * entry (a `require.resolve(pkg + "/package.json")` throws
+ * ERR_PACKAGE_PATH_NOT_EXPORTED for SDKs whose exports map omits the
+ * subpath — the claude/openai SDKs both do). Never throws: null when the
+ * package can't be resolved (bundled worker, absent dep).
+ */
+export declare function resolveInstalledVersion(pkgName: string): string | null;
 export declare function serveNativeOn(handler: NativeHandler, info: NativeServeInfo, opts: ServeOptions): Promise<void>;
 /** The public entry: wire stdin (fd 0) + an fd-3 Writable, then run the loop. */
 export declare function serveNative(handler: NativeHandler, info: NativeServeInfo, opts?: {

package/dist/serve-native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-native.d.ts","sourceRoot":"","sources":["../src/serve-native.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,MAAM,MAAM,aAAa,GAAG,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,KACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;AAC5C,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,eAAe,EACrB,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAQf"}
+{"version":3,"file":"serve-native.d.ts","sourceRoot":"","sources":["../src/serve-native.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,MAAM,MAAM,aAAa,GAAG,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,UAAU,KACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;AAC5C,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;gFAG4E;IAC5E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsBtE;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CACzB,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,eAAe,EACrB,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/serve-native.js

@@ -5,10 +5,44 @@
  * `Turn`. Lets a template worker emit `hello` → `native`* → `done` per invoke,
  * like `@guuey/host` does.
  */
-import { createWriteStream } from "node:fs";
+import { createWriteStream, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+const require = createRequire(import.meta.url);
 import { createEmitter } from "./emit.js";
 import { lines } from "./lines.js";
 import { isInvoke, isShutdown, parseControl } from "./parse.js";
+/**
+ * Resolve `pkgName`'s installed version by walking up from its resolved main
+ * entry (a `require.resolve(pkg + "/package.json")` throws
+ * ERR_PACKAGE_PATH_NOT_EXPORTED for SDKs whose exports map omits the
+ * subpath — the claude/openai SDKs both do). Never throws: null when the
+ * package can't be resolved (bundled worker, absent dep).
+ */
+export function resolveInstalledVersion(pkgName) {
+    try {
+        const entry = require.resolve(pkgName);
+        let dir = dirname(entry);
+        for (let depth = 0; depth < 6; depth++) {
+            try {
+                const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+                if (pkg.name === pkgName)
+                    return pkg.version ?? null;
+            }
+            catch {
+                // not at this level — keep walking
+            }
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
 export async function serveNativeOn(handler, info, opts) {
     const emitter = createEmitter(opts.output);
     const idleMs = opts.idleMs ?? 5 * 60_000;
@@ -28,7 +62,11 @@ export async function serveNativeOn(handler, info, opts) {
             break;
         if (!isInvoke(msg))
             continue;
-        emitter.hello(info.framework, info.sdkName ?? null, info.sdkVersion ?? null);
+        emitter.hello(info.framework, info.sdkName ?? null, info.sdkVersion !== undefined
+            ? info.sdkVersion
+            : info.sdkName
+                ? resolveInstalledVersion(info.sdkName)
+                : null);
         try {
             const scoped = {
                 native: (event) => emitter.native(info.framework, event),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/worker",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Guuey Worker Protocol v1 — the Router↔Worker contract types and the tiered worker SDK (typed interpreter + serve loop).",
   "license": "MIT",
   "type": "module",