@reqvire-org/ads 0.3.17 → 0.3.18

package/dist/mcp/server.mjs

@@ -5,8 +5,8 @@ import { serveStdio, StdioServerTransport } from "@modelcontextprotocol/server/s
 import { z } from "zod";
 import { checkProject } from "../check.mjs";
 import { loadConfig, sourceFiles } from "../config.mjs";
-import { behaviorStatus, createVerificationController, BEHAVIOR_URI } from "../verification.mjs";
-import { INVESTIGATIONS_URI, investigationIndex, readInvestigation, readInvestigationResource } from "../investigations.mjs";
+import { createVerificationController, BEHAVIOR_URI } from "../verification.mjs";
+import { INVESTIGATIONS_URI, investigationIndex, investigationPage, investigationSections, readInvestigationResource } from "../investigations.mjs";
 import { failure } from "../evidence.mjs";
 import { inspectTokens } from "../tokens.mjs";
 import { inspectScenarios } from "../scenarios.mjs";
@@ -26,6 +26,9 @@ import { reconcileTokenSamples } from "../token-fixtures.mjs";
 import { createCaptureController } from "../capture.mjs";
 import { CAPTURES_URI, captureSpec, screenshotFields } from "../capture-store.mjs";
 import { previewSourceRevision } from "../preview-inputs.mjs";
+import { createExecutionResults, RESULTS_URI, resultSections } from "./execution-results.mjs";
+import { behaviorPage, behaviorSections } from "./behavior-pages.mjs";
+import { compactProgress, resultBudgets } from "./result-pages.mjs";
 
 const pkg = JSON.parse(readFileSync(new URL("../../package.json", import.meta.url), "utf8"));
 class InvalidParamsError extends ProtocolError {
@@ -40,10 +43,18 @@ function captureResponse(value, resourceLinks = false) {
 }
 const empty = z.object({}).strict();
 const query = z.object({ query: z.string().max(200).optional(), limit: z.number().int().min(1).max(50).default(20) }).strict();
+const recordRange = { recordIndex: z.number().int().min(0).optional(), offset: z.number().int().min(0).optional(), chars: z.number().int().min(1).max(2000).optional() };
+const paged = { cursor: z.string().max(300).optional(), limit: z.number().int().min(1).max(resultBudgets.maxLimit).optional() };
 const annotations = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
 const schemas = { params: z.object({ cursor: z.string().optional() }).passthrough(), result: z.object({ resultType: z.literal("complete") }).passthrough() };
 const ownerPatch = z.object({ unit: z.string().min(1).max(256), patch: z.string().min(1).max(mutationLimits.patchBytes).optional(), patchFile: z.string().min(1).max(500).optional() }).strict().refine(args => (args.patch !== undefined) !== (args.patchFile !== undefined), "Provide exactly one of patch or patchFile.");
 
+function resourceQuery(uri, allowed) {
+  const url=new URL(uri);
+  if([...url.searchParams.keys()].some(key=>!allowed.includes(key)))throw new Error("Unknown paged resource query.");
+  return Object.fromEntries([...url.searchParams].map(([key,value])=>[key,["limit","recordIndex","offset","chars"].includes(key)?Number(value):value]));
+}
+
 export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollInterval = 1000, previewWatch, showcaseUrl, notifications, inspection, mutations = false } = {}) {
   const root = path.resolve(directory);
   const cache = inspection ?? {};
@@ -51,6 +62,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
   const captures = cache.captures ??= createCaptureController(root);
   const edits = cache.edits ??= createMutationController(root, { captures });
   const verification = cache.verification ??= createVerificationController(root);
+  const executionResults = cache.executionResults ??= createExecutionResults(root);
   let options = loadConfig(root);
   const signature = `${root}:${JSON.stringify(options.config)}`;
   if (cache.signature !== signature) {
@@ -120,6 +132,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
       { uri: `${PROJECT_URI}/catalog`, name: "Public components and patterns", mimeType: "application/json" },
       { uri: `${PROJECT_URI}/scenarios`, name: "Independently mountable scenarios", mimeType: "application/json" },
       { uri: BEHAVIOR_URI, name: "Behavior contracts, demonstrations and current verification evidence", mimeType: "application/json" },
+      { uri: RESULTS_URI, name: "Latest execution summaries and paged outcomes", mimeType: "application/json" },
       { uri: INVESTIGATIONS_URI, name: "Latest per-check investigation evidence", mimeType: "application/json" },
       { uri: CAPTURES_URI, name: "On-demand current and candidate screenshots", mimeType: "application/json" },
       { uri: `${PROJECT_URI}/checks`, name: "Current ADS architecture diagnostics", mimeType: "application/json" },
@@ -136,18 +149,18 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
     ];
   }
   function status() {
-    const context = project();
+    const context = project(), mutationState = mutations ? edits.status() : null, behaviorState = verification.status();
     return { projectRoot: root, workflow: workflow([...previews(), ...scenarioApps()]), project: context,
       package: pkg.name, version: pkg.version, dsDir: options.config.dsDir, publicAlias: options.config.publicAlias,
       components: getCatalog().filter((item) => item.kind === "components" && item.apiKind === "ui").length,
       patterns: getCatalog().filter((item) => item.kind === "patterns" && item.apiKind === "ui").length,
       tokenCount: inspectTokens(root).tokens.length, showcaseUrl: getShowcaseUrl(),
       previewWatch: previewWatch?.status() ?? { state: "disabled" },
-      mutations: mutations ? edits.status() : { enabled: false },
+      mutations: mutations ? { ...mutationState, progress: compactProgress(mutationState.progress), lastResult: executionResults.latest("mutation") } : { enabled: false },
       build: summarizeBuild(builds()),
       previews: previews(), skills: skills.skills.map(({ uri, frontmatter }) => ({ uri, name: frontmatter.name, description: frontmatter.description })),
       scenarios: { count: getRegistry().scenarios.length, diagnostics: getRegistry().diagnostics, resourceUri: `${PROJECT_URI}/scenarios`, tool: "ads_show_scenario" },
-      behaviors: { resourceUri: BEHAVIOR_URI, discoveryTool: "ads_behaviors", verificationTool: "ads_verify", investigationTool: "ads_investigate", investigationResourceUri: INVESTIGATIONS_URI, ...verification.status() },
+      behaviors: { resourceUri: BEHAVIOR_URI, discoveryTool: "ads_behaviors", verificationTool: "ads_verify", investigationTool: "ads_investigate", investigationResourceUri: INVESTIGATIONS_URI, ...behaviorState, progress: compactProgress(behaviorState.progress), lastResult: executionResults.latest("verification"), resultsTool: "ads_results", resultsResourceUri: RESULTS_URI },
       captures: { resourceUri: CAPTURES_URI, tool: "ads_capture", clearTool: "ads_capture_clear", ...captures.status() },
       experimental: { apps: true, nativeSkills: era === "modern", nativeSkillActivation: "host-controlled" } };
   }
@@ -166,8 +179,9 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
     else if (uri === `${PROJECT_URI}/catalog`) value = { items: getCatalog() };
     else if (uri === `${PROJECT_URI}/scenarios`) value = getRegistry();
     else if (uri === `${PROJECT_URI}/checks`) value = checkProject(root);
-    else if (uri === BEHAVIOR_URI) value = behaviorStatus(options);
-    else if (uri === INVESTIGATIONS_URI) value = investigationIndex(root);
+    else if (uri === BEHAVIOR_URI || uri.startsWith(`${BEHAVIOR_URI}?`)) value = behaviorPage(options, resourceQuery(uri, ["unit", "api", "query", "section", "cursor", "limit"]));
+    else if (uri === INVESTIGATIONS_URI || uri.startsWith(`${INVESTIGATIONS_URI}?`)) value = investigationPage(root, resourceQuery(uri, ["unit", "check", "runId", "section", "cursor", "limit", "recordIndex", "offset", "chars"]));
+    else if (uri === RESULTS_URI || uri.startsWith("ads://results/")) return { contents: [executionResults.readResource(uri)] };
     else if (uri === CAPTURES_URI) value = captureIndex();
     else if (uri === PREVIEW_MANIFEST_URI && options.config.mcp.previewManifest) {
       value = readPreviewManifest(previewOptions());
@@ -209,6 +223,11 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
     return build;
   }
 
+  async function finishExecution(kind, result) {
+    const summary = executionResults.save(kind, result);
+    try { await refresh(); } catch (error) { process.stderr.write(`ads mcp: result saved; notification failed: ${error.message}\n`); }
+    return { ...json(summary), ...(!result.ok ? { isError: true } : {}) };
+  }
   async function applyEdits(args,signal,progress) {
     const result = await edits.apply(args,signal,progress);
     if (result.screenshots) await refresh();
@@ -219,7 +238,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
         await refresh(true);
       } catch (error) {result.warnings=[...(result.warnings ?? []),{rule:"mutation-notification",message:`Changes were applied, but preview refresh failed: ${error.message.slice(0,2000)}. Recheck ads_status and reopen the scenario.`}];}
     }
-    return {...captureResponse(result, era === "modern"),...(!result.ok ? {isError:true} : {})};
+    return finishExecution("mutation", { ...(args.patches ? {units:args.patches.map(item=>item.unit),transaction:true} : {unit:args.unit}), ...result });
   }
   function tools() {
     return [
@@ -283,23 +302,12 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
         }
         return json({ widget: { resourceUri: TOKENS_APP_URI }, category: null, tokenCount: inspectTokens(root).tokens.length, dataUri: `${PROJECT_URI}/tokens`, showcaseUrl: getShowcaseUrl() });
       } },
-      { name: "ads_behaviors", description: "Discover owner-local behavioral guarantees for public hooks/APIs or private controllers, their scenario demonstrations, registered checks/profiles and fresh or stale execution evidence. Optional exercises links behavioral APIs to scenarios; covers remains rendered UI. Metadata and reachable calls do not prove a guarantee passed. Use ads_verify for selected registered checks.", schema: query.extend({ unit: z.string().max(256).optional(), api: z.string().max(200).optional() }), call: ({ query: search = "", limit, unit, api }) => {
-        const inventory = behaviorStatus(options);
-        const matches = inventory.contracts.filter(item => (!unit || item.unit === unit) && (!api || Object.values(item.subjects).some(subject => subject.api === api)) && JSON.stringify(item).toLowerCase().includes(search.toLowerCase()));
-        return json({ total: matches.length, contracts: matches.slice(0, limit).map(item => {
-          if (unit) return item;
-          const apis = Object.values(item.subjects).filter(subject => subject.api).map(subject => subject.api);
-          const demonstrations = [...new Set(Object.values(item.demonstrations).flat())];
-          return { unit: item.unit, file: item.file, apis: apis.slice(0, 20), apiCount: apis.length,
-            guarantees: item.guarantees.slice(0, 5).map(guarantee => ({ id: guarantee.id, result: guarantee.result })), guaranteeCount: item.guarantees.length,
-            demonstrations: demonstrations.slice(0, 10), demonstrationCount: demonstrations.length, checkCount: Object.keys(item.checks).length };
-        }), diagnostics: inventory.diagnostics.slice(0, 50), resourceUri: BEHAVIOR_URI });
-      } },
-      { name: "ads_investigate", title: "Inspect check evidence", description: "Read the latest compact investigation for an exact registered unit/check, including candidate runs. Returns failure boundary, exact input/observed preview revisions, source/failing step, observed viewport, failed startup requests and available artifact resource URIs. Does not rerun tests or infer root cause. Bundles replace the previous entry per check; compare revisions with ads_behaviors before claiming freshness.", schema: z.object({unit:z.string().min(1).max(256),check:z.string().min(1).max(100)}).strict(), call: args => json(readInvestigation(root,args)) },
-      { name: "ads_verify", description: "Run one owner's registered development behavior checks using its configured runner/profile. Executes trusted project commands with bounded output, cancellation and process-tree cleanup; installs nothing. Progress and per-check timings are available through ads_status; a profile timeout bounds the whole run. Browser profiles use an isolated managed showcase/MCP App. React StrictMode requires a project development harness, not a production widget. Missing/skipped cases, stale inputs and process exit alone cannot produce passing evidence. Results separate failure boundaries and explicit acceptance scope; inspect retained source/request/artifact evidence with ads_investigate. Discover exact unit/check IDs with ads_behaviors first.", schema: z.object({ unit: z.string().min(1).max(256), checks: z.array(z.string().min(1).max(100)).min(1).max(100).optional() }).strict(), annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false }, call: async (args, signal, progress) => {
+      { name: "ads_behaviors", description: "Discover behavior owners, then page an exact unit's checks, guarantees, subjects, demonstrations or profiles. Summary listings never embed runner logs. Default 10/max 20 entries and 8 KiB JSON per page; continue with nextCursor and identical filters. Cursors expire when discovery/evidence changes. Read sourceFile with ads_read_file for a complete contract. Metadata and reachable calls do not prove execution; use ads_verify for registered checks.", schema: z.object({ query: z.string().max(200).optional(), unit: z.string().min(1).max(256).optional(), api: z.string().max(200).optional(), section: z.enum(behaviorSections).optional(), ...paged }).strict(), call: args => json(behaviorPage(options,args)) },
+      { name: "ads_results", title: "Read execution outcomes", description: "Read saved ads_verify/ads_apply_patch/ads_apply_transaction outcomes without rerunning anything. Pass the returned resultId; select outcomes, checks, diagnostics, advisories, warnings, changes, captures, acceptance, investigation or selection. Default 10/max 20 rows, at most 8 KiB JSON per page. Follow nextCursor with identical section/status. Rows marked detailTruncated can be read in full using recordIndex and offset/chars (max 2000); follow nextOffset. Only the latest verification and mutation snapshots are retained; replaced IDs fail explicitly. For one outcome's browser evidence use ads_investigate with its exact unit/check/runId.", schema: z.object({ resultId: z.string().uuid(), section: z.enum(resultSections).optional(), status: z.enum(["all","passed","not_passed"]).optional(), ...paged, ...recordRange }).strict(), call: args => json(executionResults.page(args)) },
+      { name: "ads_investigate", title: "Inspect check evidence", description: "Read a summary for an exact unit/check, or list latest investigations when no check is selected. Pass the outcome's runId to reject superseded evidence. Summary is at most 4 KiB JSON; details, requests, browserErrors and artifacts are separate paged sections (default 10/max 20 entries, 8 KiB). Read truncated rows with recordIndex/offset/chars and the exact runId. Artifact URIs are read separately. Does not rerun checks or infer root cause. Only the latest bundle per check is retained, including candidate runs.", schema: z.object({unit:z.string().min(1).max(256).optional(),check:z.string().min(1).max(100).optional(),runId:z.string().min(1).max(100).optional(),section:z.enum(investigationSections).optional(),...paged,...recordRange}).strict(), call: args => json(investigationPage(root,args)) },
+      { name: "ads_verify", description: "Run one owner's registered development behavior checks using its configured runner/profile. Executes trusted project commands with bounded output, cancellation and process-tree cleanup; installs nothing. Progress and per-check timings are available through ads_status; a profile timeout bounds the whole run. Browser profiles use an isolated managed showcase/MCP App. React StrictMode requires a project development harness, not a production widget. Missing/skipped cases, stale inputs and process exit alone cannot produce passing evidence. Replies contain counts, acceptance, at most three failure summaries and a resultId (4 KiB JSON maximum). Page outcomes with ads_results; inspect one exact unit/check/runId with ads_investigate. Discover exact unit/check IDs with ads_behaviors first.", schema: z.object({ unit: z.string().min(1).max(256), checks: z.array(z.string().min(1).max(100)).min(1).max(100).optional() }).strict(), annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false }, call: async (args, signal, progress) => {
         const result = await verification.run(args, signal, progress);
-        await refresh();
-        return { ...json(result), ...(!result.ok ? { isError: true } : {}) };
+        return finishExecution("verification", {unit:args.unit,...result});
       } },
       { name: "ads_units", description: "Discover editable ADS units and their files: components/patterns with colocated previews; shared controllers; composition; tokens; foundation shared files; documentation including shared credits/license notices; assets/brand, assets/fonts and asset groups; configuration with ds.config.json, package/build/lint configuration and registered project guard/compiler sources. List summaries with query, or pass an exact unit ID for its manifest. Manifests include filePolicy for supported new documentation paths and companionFiles with permitted shared-entry or owner-only style-boundary bookkeeping; preserve peer permissions and unrelated configuration. Imported peers stay separate. New owners follow the existing colocation convention.", schema: query.extend({ unit: z.string().min(1).max(256).optional() }), call: ({ unit, query: search = "", limit }) => {
         const matches = edits.units().filter(item => unit ? item.id === unit : item.id.toLowerCase().includes(search.toLowerCase()));
@@ -311,11 +319,11 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
         const {patch,...result}=reconcileTokenSamples(options,args);
         return json({...result,removed:result.removed.slice(0,50),unresolved:result.unresolved.slice(0,50),unresolvedCount:result.unresolved.length,...storePreparedPatch(options,patch)});
       }},
-      { name: "ads_apply_patch", description: "Apply one Git diff to one ADS unit from ads_units. Pass exactly one of patch (inline) or patchFile (a regular .patch/.diff under .ds/patches/, for large/binary diffs without model-context bytes). Text uses --- a/path, +++ b/path and exact @@ hunks; /dev/null creates/deletes. Git binary patches require git diff --binary --full-index and installed Git. A unit owns its implementation, previews and fixtures; imported peers are separate. Foundation, documentation, assets and configuration are editable too. Configuration changes may register/edit project guards and builders; the proposed schema, mandatory core/Oxlint and candidate project checks must pass. Only selected-unit public re-exports may change; preserve unrelated statements. A real selected-unit re-export may remove a redundant export {}; placeholder. A tokens patch may include its companionFiles foundation entry only to add/remove canonical imports required by token files created/deleted in this patch, preserving other imports/comments and canonical order. A runtime owner patch may also include its ds.config.json companion solely for that owner's inlineStyleFiles/styleWrites entries alongside its source. Unused permissions fail validation. Set dryRun true to validate without writing. Optional screenshot:true plus captures:[{scenario,target?,theme?,viewport?}] captures current/candidate only after gates pass. For genuinely coupled owner changes use ads_apply_transaction with one patch per owner. Fix rejected patches and inspect current previews after acceptance.",
+      { name: "ads_apply_patch", description: "Apply one Git diff to one ADS unit from ads_units. Pass exactly one of patch (inline) or patchFile (a regular .patch/.diff under .ds/patches/, for large/binary diffs without model-context bytes). Text uses --- a/path, +++ b/path and exact @@ hunks; /dev/null creates/deletes. Git binary patches require git diff --binary --full-index and installed Git. A unit owns its implementation, previews and fixtures; imported peers are separate. Foundation, documentation, assets and configuration are editable too. Configuration changes may register/edit project guards and builders; the proposed schema, mandatory core/Oxlint and candidate project checks must pass. Only selected-unit public re-exports may change; preserve unrelated statements. A real selected-unit re-export may remove a redundant export {}; placeholder. A tokens patch may include its companionFiles foundation entry only to add/remove canonical imports required by token files created/deleted in this patch, preserving other imports/comments and canonical order. A runtime owner patch may also include its ds.config.json companion solely for that owner's inlineStyleFiles/styleWrites entries alongside its source. Unused permissions fail validation. Set dryRun true to validate without writing. Optional screenshot:true plus captures:[{scenario,target?,theme?,viewport?}] captures current/candidate only after gates pass. For genuinely coupled owner changes use ads_apply_transaction with one patch per owner. Fix rejected patches and inspect current previews after acceptance. Reply is a 4 KiB summary; read diagnostics, outcomes and requested captures through ads_results using its resultId.",
         schema: z.object({ unit: z.string().min(1).max(256), dryRun: z.boolean(), patch: z.string().min(1).max(mutationLimits.patchBytes).optional(), patchFile: z.string().min(1).max(500).optional(), ...screenshotFields }).strict().refine(args => (args.patch !== undefined) !== (args.patchFile !== undefined), "Provide exactly one of patch or patchFile."),
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false }, _meta: { ui: { visibility: ["model"] } },
         call: applyEdits,
-      }, {name:"ads_apply_transaction",description:"Apply genuinely coupled ADS changes as 2–8 distinct owner Git patches. Each patch must obey its unit and narrow companion rules. Patches run in order; later patches use the earlier candidate's shared-entry content. Core guards, registered Oxlint/project checks and affected behavior checks validate the complete final candidate before any live source is written. Maximum 32 distinct files/16 MiB combined. Dry runs, failures and cancellation publish nothing; publication rolls back on write failure. Optional screenshot:true with dryRun:true and explicit captures selects current/candidate images. Prefer ads_apply_patch for independent edits.",schema:z.object({patches:z.array(ownerPatch).min(2).max(mutationLimits.units),dryRun:z.boolean(),...screenshotFields}).strict(),annotations:{readOnlyHint:false,destructiveHint:true,idempotentHint:false,openWorldHint:false},_meta:{ui:{visibility:["model"]}},call:applyEdits}] : []),
+      }, {name:"ads_apply_transaction",description:"Apply genuinely coupled ADS changes as 2–8 distinct owner Git patches. Each patch must obey its unit and narrow companion rules. Patches run in order; later patches use the earlier candidate's shared-entry content. Core guards, registered Oxlint/project checks and affected behavior checks validate the complete final candidate before any live source is written. Maximum 32 distinct files/16 MiB combined. Dry runs, failures and cancellation publish nothing; publication rolls back on write failure. Optional screenshot:true with dryRun:true and explicit captures selects current/candidate images. Prefer ads_apply_patch for independent edits. Reply is a bounded summary; page diagnostics, outcomes and captures with ads_results using the returned resultId.",schema:z.object({patches:z.array(ownerPatch).min(2).max(mutationLimits.units),dryRun:z.boolean(),...screenshotFields}).strict(),annotations:{readOnlyHint:false,destructiveHint:true,idempotentHint:false,openWorldHint:false},_meta:{ui:{visibility:["model"]}},call:applyEdits}] : []),
       ...options.config.mcp.apps.map((app) => ({ name: `ads_show_${app.id.replaceAll("-", "_")}`, title: app.title, description: `${app.description ?? app.title}. Renders the project's built ${app.kind} examples through MCP Apps; text fallback provides the showcase URL.`, schema: empty, _meta: { ui: { resourceUri: appUri(app.id) } }, call: async (_args, signal) => {
         // Validate readiness without embedding executable HTML in model results.
         const build = await previewBuild(app, signal);
@@ -339,7 +347,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
     let progress = 0;
     const token = context.mcpReq._meta?.progressToken;
     const notify = token === undefined ? undefined : value => {
-      void context.mcpReq.notify({ method: "notifications/progress", params: { progressToken: token, progress: ++progress, message: value.message ?? `${value.profile}: ${value.completed}/${value.total} completed; ${value.active.map(item => `${item.unit}#${item.check}`).join(", ") || "no active check reported"}; ${value.elapsedMs} ms elapsed` } }).catch(() => {});
+      void context.mcpReq.notify({ method: "notifications/progress", params: { progressToken: token, progress: ++progress, message: value.message ?? `${value.profile}: ${value.completed}/${value.total} completed; ${(value.active ?? []).slice(0,3).map(item => `${item.unit}#${item.check}`).join(", ") || "no active check reported"}; ${value.elapsedMs} ms elapsed` } }).catch(() => {});
     };
     try { return await tool.call(input.data, context.mcpReq.signal, notify); }
     catch (error) { return { isError: true, content: [{ type: "text", text: error.message }], structuredContent: {ok:false,message:error.message,failure:failure(error.build?"build":"runner",error.build?"preview-build":"tool-execution",error.build?.code??"ADS_TOOL_ERROR",{certainty:"observed-boundary"}),...(error.build?{build:error.build}:{})} }; }
@@ -352,11 +360,15 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
   });
   server.setRequestHandler("resources/templates/list", () => ({ resourceTemplates: [
     { uriTemplate: "ads://captures/{key}/{slot}", name: "Current/candidate screenshot", description: "Exact keys and available slots come from ads://project/captures. Slots are replaced in place, not revision history.", mimeType: "image/png" },
+    { uriTemplate: "ads://results/{resultId}", name: "Saved execution summary", description: "Use resultId from execution or ads://project/results. Query section/status/cursor/limit for pages, or section/recordIndex/offset/chars for exact record ranges. Only the latest result of each kind remains available.", mimeType: "application/json" },
     { uriTemplate: "ads://investigations/{unit}/{check}", name: "Latest check investigation", description: "Use encoded unit/check segments from ads://project/investigations. One latest bundle per check, including candidate verification.", mimeType: "application/json" },
   ] }));
   server.setRequestHandler("resources/read", ({ params: { uri } }, context) => read(uri, context.mcpReq.signal));
   server.setRequestHandler("resources/subscribe", ({ params: { uri } }) => {
     if (!resources().some((entry) => entry.uri === uri)) {
+      if(uri.startsWith("ads://results/")) {
+        try {executionResults.readResource(uri);subscribed.add(uri);return {};}catch{throw new ResourceNotFoundError(uri,"Unknown or superseded execution result.");}
+      }
       if(uri.startsWith("ads://investigations/")) {
         try {readInvestigationResource(root,uri);subscribed.add(uri);return {};}catch{throw new ResourceNotFoundError(uri,"Unknown check investigation.");}
       }
@@ -402,6 +414,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
   let previousCaptureUris = captures.store.resourceUris();
   const investigationFingerprint=()=>fileFingerprint([path.join(root,".ds/investigations.json")]);
   let previousInvestigations=investigationFingerprint();
+  let previousResults=executionResults.fingerprint();
   async function refresh(force = false) {
     // Polling covers replaced files and new directories consistently across OSes.
     cache.documents = undefined;
@@ -415,7 +428,8 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
     const assetsChanged = assets !== previousAssets;
     const capturesChanged = captures.store.fingerprint() !== previousCaptures;
     const investigationsChanged=investigationFingerprint()!==previousInvestigations;
-    if (!filesChanged && !buildChanged && !artifactsChanged && !assetsChanged && !capturesChanged && !investigationsChanged) return false;
+    const resultsChanged=executionResults.fingerprint()!==previousResults;
+    if (!filesChanged && !buildChanged && !artifactsChanged && !assetsChanged && !capturesChanged && !investigationsChanged && !resultsChanged) return false;
     if (filesChanged) {
       const updated = loadConfig(root);
       await previewWatch?.reconfigure?.(updated.config.mcp);
@@ -433,6 +447,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
     previousBuild = JSON.stringify(builds());
     const targets = filesChanged ? era === "modern" ? resources().map((entry) => entry.uri).filter((uri) => !skills.files.has(uri)) : [...subscribed]
       : [BUILD_URI, BEHAVIOR_URI, INVESTIGATIONS_URI, `${PROJECT_URI}/status`, ...(options.config.mcp.previewManifest ? [PREVIEW_MANIFEST_URI] : []), ...(artifactsChanged ? allApps().map(app => appUri(app.id)) : [])].filter((uri) => era === "modern" || subscribed.has(uri));
+    if(resultsChanged){targets.push(...[RESULTS_URI,...executionResults.index().results.map(entry=>entry.resourceUri),...[...subscribed].filter(uri=>uri.startsWith("ads://results/"))].filter(uri=>era==="modern"||subscribed.has(uri)));previousResults=executionResults.fingerprint();}
     if(investigationsChanged){targets.push(...[INVESTIGATIONS_URI,...investigationIndex(root).entries.map(entry=>entry.resourceUri),...[...subscribed].filter(uri=>uri.startsWith("ads://investigations/"))].filter(uri=>era==="modern"||subscribed.has(uri)));previousInvestigations=investigationFingerprint();}
     if (capturesChanged || filesChanged) {
       const current = (captures.store.fingerprint() ? captureIndex().captures : []).flatMap(record => [record.current?.resourceUri, record.candidate?.resourceUri].filter(Boolean));

package/dist/property-registrations.mjs

@@ -0,0 +1,39 @@
+import { ident, lexer, parse, string, walk, generate } from "css-tree";
+
+// CSS Properties and Values API Level 1 syntax types, not project token roles.
+const types=new Set(["angle","color","custom-ident","image","integer","length","length-percentage","number","percentage","resolution","string","time","transform-function","transform-list","url"]);
+const relative=/^(?:r?em|r?ex|r?cap|r?ch|r?ic|r?lh|[sld]?v(?:w|h|i|b|min|max)|cq(?:w|h|i|b|min|max))$/i;
+const descriptors=new Set(["syntax","inherits","initial-value"]);
+
+/** Registration metadata has its own CSS grammar; it is not an element style. */
+export function propertyRegistration(rule) {
+  const name=ident.decode(rule.params.trim());
+  if(!name.startsWith("--")||name==="--"||lexer.matchType("custom-property-name",rule.params).error)throw new Error("@property needs one literal custom-property name.");
+  for(let parent=rule.parent;parent&&parent.type!=="root";parent=parent.parent)if(parent.type!=="atrule"||["property","font-face"].includes(parent.name.toLowerCase())||/keyframes$/i.test(parent.name))throw new Error("@property is document-global. Place it at template/sheet level or inside conditional at-rules, not element selectors or another descriptor block.");
+  const values={};
+  for(const node of rule.nodes??[]){
+    if(node.type==="comment")continue;
+    if(node.type!=="decl"||!descriptors.has(node.prop.toLowerCase())||node.important||Object.hasOwn(values,node.prop.toLowerCase()))throw new Error("@property accepts only one syntax, inherits and initial-value descriptor; no styles, nested rules or !important.");
+    values[node.prop.toLowerCase()]=node.value;
+  }
+  const syntaxAst=parse(values.syntax??"",{context:"value"}),syntaxNode=syntaxAst.children.first;
+  if(syntaxAst.children.size!==1||syntaxNode?.type!=="String")throw new Error("@property syntax must be one CSS string.");
+  const syntax=string.decode(generate(syntaxNode)).trim();
+  if(syntax!=="*"&&(!syntax||!syntax.split("|").every(part=>{
+    part=part.trim();const multiplier=/[+#]$/.test(part)?part.at(-1):"",base=multiplier?part.slice(0,-1).trim():part,match=/^<([a-z-]+)>$/.exec(base);
+    return match?types.has(match[1])&&!(match[1]==="transform-list"&&multiplier):!!base&&!lexer.matchType("custom-ident",base).error;
+  })))throw new Error("Invalid @property syntax. Use the CSS Properties and Values API grammar, not a project-specific type.");
+  if(!/^(?:true|false)$/i.test(values.inherits??""))throw new Error("@property requires inherits: true or false.");
+  if(values["initial-value"]===undefined&&syntax!=="*")throw new Error("Typed @property registrations require initial-value.");
+  if(values["initial-value"]!==undefined){
+    const initial=parse(values["initial-value"],{context:"value"});
+    if(syntax!=="*"){
+      walk(initial,node=>{
+        if(node.type==="Function"&&/^(?:var|env|attr)$/i.test(node.name)||node.type==="Dimension"&&relative.test(node.unit)||node.type==="Identifier"&&/^(?:currentcolor|inherit|initial|unset|revert(?:-layer)?)$/i.test(node.name))throw new Error("Typed @property initial-value must be computationally independent: no var(), relative units or currentColor. Keep design assignments token-backed outside this descriptor.");
+      });
+      const match=lexer.match(syntax,initial);
+      if(match.error)throw new Error("@property initial-value must match its declared syntax.");
+    }
+  }
+  return {name,signature:JSON.stringify([syntax,values.inherits.toLowerCase(),values["initial-value"]===undefined?null:generate(parse(values["initial-value"],{context:"value"}))])};
+}

package/dist/scenario-trace.mjs

@@ -120,7 +120,7 @@ export function createScenarioTrace(program, options) {
           let declarations = 0;
           const template = node.template;
           const text = ts.isNoSubstitutionTemplateLiteral(template) ? template.text : template.head.text + template.templateSpans.map(span => `__ads_expression__${span.literal.text}`).join("");
-          try { postcss.parse(text).walkDecls(() => ++declarations); } catch { /* Source CSS guards own malformed templates. */ }
+          try { postcss.parse(text).walkDecls(declaration => { for(let parent=declaration.parent;parent;parent=parent.parent)if(parent.type==="atrule"&&/^(?:property|font-face|(?:-\w+-)?keyframes)$/i.test(parent.name))return; ++declarations; }); } catch { /* Source CSS guards own malformed templates. */ }
           if (owned(source, via) && declarations) return result(true, true);
           reasons.add("The returned style must originate in runtime component/pattern Linaria through a public callable helper.");
           return result(false);

package/dist/scoped-tokens.mjs

@@ -6,6 +6,7 @@ import { inspectUnits } from "./units.mjs";
 import { isDevelopmentFile } from "./config.mjs";
 import { foundationSelector } from "./foundation.mjs";
 import { isSharedToken, tokenContract } from "./token-policy.mjs";
+import { propertyRegistration } from "./property-registrations.mjs";
 
 /** An explicit owner contract, never a heuristic based on a token's name. */
 export function scopedTokens(options) {
@@ -30,8 +31,13 @@ export function scopedTokens(options) {
         if (realpathSync(file) !== file) throw new Error("Scoped token stylesheets cannot resolve through symlinks.");
         const css = postcss.parse(readFileSync(file, "utf8"), {from:file});
         let count = 0;
+        css.walkAtRules(/^property$/i,rule=>{
+          try {const {name}=propertyRegistration(rule);let defined=false;css.walkDecls(name,()=>{defined=true;});if(!name.startsWith(data.namespace)||!defined)throw new Error("Register only a real token defined in this owner's namespace and sheet.");}
+          catch(error){report(stylesheet,error.message,rule.source?.start.line);}
+        });
         css.walk(node => {
           if (node.type === "comment" || node.type === "root") return;
+          if(node.type==="atrule"&&node.name.toLowerCase()==="property"||node.type==="decl"&&node.parent.type==="atrule"&&node.parent.name.toLowerCase()==="property")return; // Separately validated registration metadata.
           if (node.type === "atrule" && ["media", "supports", "layer"].includes(node.name) && node.nodes) return;
           if (node.type === "rule" && node.parent.type !== "rule" && !foundationSelector(node.selector, {definitions:true})) return;
           if (node.type === "decl" && node.parent.type === "rule" && node.prop.startsWith(data.namespace) && node.prop.length > data.namespace.length && !node.important) { count++; return; }

package/dist/skills/ads-break-ui/SKILL.md

@@ -54,18 +54,20 @@ For on-demand current/candidate screenshots and visual dry-run review, read
 [captures.md](references/captures.md).
 For a rejected patch, failed check or loading error, read
 [evidence and diagnosis](references/evidence.md); inspect the failing boundary
-and `ads_investigate` bundle before changing APIs or verification policy.
+then page needed `ads_results` sections using the returned result ID. Inspect
+one `ads_investigate({unit,check,runId})` summary before changing APIs or policy;
+load request/error/artifact details only when relevant.
 
 
 For parent/child `covers`, conditional-control review, reference comparisons,
-public style-helper use, fragment-link navigation, or `scenario-render` /
-`showcase-class` findings, read [scenario contracts](references/scenarios.md). Its verification
+public style-helper use, native slot/selector composition, fragment navigation,
+or `scenario-render` / `showcase-control` / `showcase-class` findings, read [scenario contracts](references/scenarios.md). Its verification
 examples explain API visibility, reference baselines and state-transition checks.
 Traced parents can cover declared public children; verified public Linaria
 helpers do not grant custom scenario CSS.
 
 For atomic base/variant styling, helper/wrapper class composition, extracted
-custom-property arithmetic, or an
+custom-property arithmetic, typed `@property` registrations, or an
 `atomic-composition-review` / `atomic-composition-limit` advisory, read
 [atomic style composition](references/atomic-styles.md). The same guide is served
 as `ads://guides/atomic-styles`. It explains shorthand/logical conflicts and

package/dist/skills/ads-break-ui/references/atomic-styles.md

@@ -81,6 +81,54 @@ const treatment = css`
 This is a distinct state, not two competing base atoms. Whether changing padding
 on hover is desirable remains a product decision.
 
+## Register typed custom properties without atomizing their descriptors
+
+Use a literal `@property` in its component/pattern's Linaria template when the
+browser needs a typed, interpolated runtime variable:
+
+```tsx
+const treatment = css`
+  @property --ds-example-progress {
+    syntax: "<number>";
+    inherits: false;
+    initial-value: 0;
+  }
+  opacity: var(--ds-example-progress);
+`;
+```
+
+The identifier is illustrative; use a unique name owned by the real unit.
+Registrations are document-global, even when authored beside one component.
+Put them at template level or inside conditional at-rules, never element selectors.
+Use the same ADS tag resolver described below in both product and preview builds;
+it preserves each complete registration and its conditional context instead of
+splitting syntax/inherits/initial-value into invalid atomic rules. This works for
+atomic `css` and `styled`; the browser receives CSS without a registration runtime.
+MCP delivers it inside the App document, not the outer showcase host.
+
+`property-registration` validates descriptor shape, CSS syntax/initial-value and
+ownership, and rejects conflicting schemas or registrations shared by unrelated
+owners. Identical registrations from the same owner are permitted. Runtime
+`--ds-*` / `--ux-*` variables stay with their runtime owner. A shared token's
+registration belongs beside its actual definition in a foundation value sheet;
+a namespaced owner token's registration belongs in its registered `tokens.css`.
+Neither `base.css` nor `fonts.css` becomes a registration escape hatch. Registration
+alone does not define a token or satisfy its sample/fixture coverage.
+
+Typed initial values must match their syntax and be computationally independent:
+`0px` is valid metadata; `var(--space-4)`, `1rem` and `currentColor` are not.
+The literal exemption applies only to registration descriptors. Keep design
+assignments outside them token-backed; a technical fallback is not a place to
+hide a component skin. Use literal static descriptors so guards can inspect them.
+See the [W3C registration contract](https://www.w3.org/TR/css-properties-values-api-1/#at-property-rule).
+
+Verify extracted CSS and actual interpolation, including after minification and
+inside the MCP App. A declaration can parse while a browser ignores an invalid
+registration. Keep required browser fallbacks and reduced-motion behavior; do not
+replace a valid CSS implementation with script merely to evade extraction or a
+guard limitation. These checks cover declarative registrations; arbitrary dynamic
+`CSS.registerProperty()` calls are not an ownership proof.
+
 ## Preserve custom-property arithmetic during extraction
 
 Custom properties can hold an unevaluated token stream that becomes arithmetic

package/dist/skills/ads-break-ui/references/captures.md

@@ -101,7 +101,12 @@ failed/cancelled capture does not replace existing image slots or apply source.
 If a scenario/target is newly introduced, `current` is null with an explicit
 `currentAbsent` explanation; only the real candidate image exists.
 
-Review the returned images and diagnostics, fix the draft if necessary, then apply
+The edit reply is a summary. Read `ads_results({resultId,section:"captures"})` for
+the requested image resource URIs and `section:"diagnostics"` for relevant
+messages; follow `nextCursor` when needed. Read image resources explicitly.
+Standalone `ads_capture` continues returning its selected capture directly.
+
+Review those images and diagnostics, fix the draft if necessary, then apply
 with `dryRun:false`. Apply reruns all gates. An image is promoted only when the
 accepted source revision matches the captured candidate; other proposals remain
 stale. Images do not approve a patch or certify interaction/accessibility/parity.

package/dist/skills/ads-break-ui/references/evidence.md

@@ -20,21 +20,67 @@ A complete failed run can contain independent passing cases. Suite interruption,
 missing/skipped cases, stale inputs and an unexplained process exit cannot certify
 a pass. Keep the reported case outcome separate from whole-run acceptance.
 
+## Retrieve only the evidence needed
+
+`ads_verify`, `ads_apply_patch` and `ads_apply_transaction` reply with counts,
+bounded acceptance, at most three failure previews and `resultId`, within 4096
+UTF-8 JSON bytes. Full validation still decides acceptance. Do not repeat a suite
+merely to recover its output, or restate the complete report in conversation.
+
+Read a relevant saved section:
+
+```js
+ads_results({resultId: "<returned ID>", section: "outcomes", status: "not_passed"})
+// Continue only when needed, with the same section and status:
+ads_results({resultId: "<returned ID>", section: "outcomes", status: "not_passed", cursor: "<nextCursor>"})
+```
+
+Pages default to 10 rows, allow at most 20 and stay within 8192 JSON bytes. The
+byte cap can return fewer rows; `nextCursor` is the continuation. Other sections
+are `checks` (pipeline steps), `diagnostics`, `advisories`, `warnings`, `changes`,
+`captures`, `acceptance`, `investigation` (mutation boundary) and `selection`.
+A row marked `detailTruncated` is a preview. To read that exact record, pass its
+`recordIndex`, the same result/section, and `offset`/`chars` (maximum 2000 UTF-16
+characters); follow `nextOffset`. Do not combine ranges with a cursor/status filter.
+Read only the relevant log range. Reading pages or ranges never executes checks.
+
+`ads://project/results` lists the latest IDs. `ads://results/<resultId>` reads a
+summary; matching query parameters read pages/ranges. Only the latest verification
+and latest mutation snapshots are retained, independently, up to 8 MiB each.
+A superseded ID fails explicitly. An oversized report retains only its summary
+with a warning; disk failure retains details in server memory until shutdown.
+Neither changes actual acceptance or applied state. These are logical JSON byte
+budgets, not token estimates; compatibility text can duplicate structured JSON.
+Saved outcomes describe completion-time evidence, not current source freshness;
+compare their revisions with `ads_behaviors` before claiming a current pass.
+
+`ads_behaviors` pages owner summaries, then an exact unit's `checks`, `guarantees`,
+`subjects`, `demonstrations` or `profiles`. Use `nextCursor` and identical filters;
+changes invalidate a discovery cursor. Read a truncated contract via its
+`sourceFile` and bounded `ads_read_file`, rather than requesting everything.
+
 ## Get a compact investigation
 
-Discover exact owner/check IDs with `ads_behaviors`, then:
+Take an outcome's exact owner/check/run IDs from `ads_results`, then:
 
 ```json
-{ "unit": "components/Example", "check": "keyboard-navigation" }
+{ "unit": "components/Example", "check": "keyboard-navigation", "runId": "<outcome runId>" }
 ```
 
-Send this to `ads_investigate`. It reads the latest bundle without running code.
+Send this to `ads_investigate`. It reads a summary within 4096 JSON bytes, without
+running code. The run ID rejects evidence superseded by another execution.
+`section: "details"`, `"requests"`, `"browserErrors"` or `"artifacts"` reads separate pages
+(default 10/max 20 rows, at most 8192 JSON bytes); artifacts themselves require
+explicit resource reads. Truncated investigation records also support
+`recordIndex`/`offset`/`chars`; keep the exact `runId` to avoid mixing evidence.
+Without a check, the tool pages available investigations.
 `ads://project/investigations` lists available entries; the returned `resourceUri`
 reads the same bundle. It records:
 
 - Project versus isolated candidate, configured framework/profile and scenario.
 - Exact input revision and the preview revision actually observed by the helper.
-- Failing step/source, observed startup viewport and relevant failed requests.
+- `details.failingStep`, `details.source`, startup viewport and failure boundary.
+- Counts for separately paged relevant requests, browser errors and artifacts.
 - Available registered trace, screenshot or context artifact resource URIs.
 - Explicit `acceptance.established` and `acceptance.unverified` scope.
 
@@ -58,7 +104,8 @@ Candidate evidence never becomes passing live-source evidence. Compare the
 recorded input revision with current `ads_behaviors` evidence; a bundle describes
 its run, and does not claim current source merely because it remains available.
 For a build/architecture rejection before behavior runs, inspect the mutation
-result's `investigation` (also retained in `ads_status.mutations.lastResult`).
+saved `investigation` section via `ads_results`. Status retains the compact
+execution summary and result ID, rather than embedding complete reports.
 
 ## Preserve the design while repairing the failure
 

package/dist/skills/ads-break-ui/references/guarded-editing.md

@@ -15,8 +15,10 @@ ads_apply_patch({"unit":"components/Example","patchFile":"<returned patchFile>",
 
 The dry run validates the full candidate, including affected registered behavior
 checks in an isolated project copy. Configured browser checks use that candidate's
-managed preview, not the live showcase. Inspect the returned `behavior` failures
-or the registered behavior-check results in `checks`, fix the draft and diff again.
+managed preview, not the live showcase. Read the summary, then page failing
+`outcomes`, `diagnostics` or pipeline `checks` through `ads_results` with its
+`resultId`. Inspect one exact outcome with `ads_investigate({unit,check,runId})`;
+fix the draft and diff again. See [evidence.md](evidence.md) for page/range limits.
 Keep behavior.json/specs with their owner and use registered checks; a scratchpad
 run against live source cannot verify unapplied changes. After validation, apply
 with `dryRun:false`; ADS revalidates before writing. Dry-run evidence is not saved
@@ -120,9 +122,10 @@ them through their actual public composition/customization path and list their r
 render references in covers. Do not count internal production renders as public API
 coverage. Behavioral APIs use exercises and registered guarantees instead.
 Scenario controls still use public UI. A native link/button can supply semantics
-as the single direct child of a public runtime slot when source tracing proves
-that owner clones the child with its props. An `asChild` flag alone is insufficient;
-standalone native controls and custom scenario styling remain rejected. See
+through a public runtime slot that demonstrably clones its child with owned
+props, or through matching runtime-owned selectors attached to the actual rendered
+DOM. Source ownership must be proven; an `asChild` flag or a lookalike marker is
+insufficient. Standalone controls and custom scenario styling remain rejected. See
 [scenarios.md](scenarios.md) for evidence and limits. Preserve the intended
 composition instead of substituting an unrelated styled control or adding a
 demo-only component prop. Review framing belongs in public layout patterns.

package/dist/skills/ads-designer/SKILL.md

@@ -86,17 +86,19 @@ For on-demand current/candidate screenshots and visual dry-run review, read
 [captures.md](references/captures.md).
 For a rejected patch, failed check or loading error, read
 [evidence and diagnosis](references/evidence.md); inspect the failing boundary
-and `ads_investigate` bundle before changing APIs or verification policy.
+then page needed `ads_results` sections using the returned result ID. Inspect
+one `ads_investigate({unit,check,runId})` summary before changing APIs or policy;
+load request/error/artifact details only when relevant.
 
 For parent/child `covers`, conditional-control review, reference comparisons,
-public style-helper use, fragment-link navigation, or `scenario-render` /
-`showcase-class` findings, read [scenario contracts](references/scenarios.md). Its verification
+public style-helper use, native slot/selector composition, fragment navigation,
+or `scenario-render` / `showcase-control` / `showcase-class` findings, read [scenario contracts](references/scenarios.md). Its verification
 examples explain API visibility, reference baselines and state-transition checks.
 Traced parents can cover declared public children; verified public Linaria
 helpers do not grant custom scenario CSS.
 
 For atomic base/variant styling, helper/wrapper class composition, extracted
-custom-property arithmetic, or an
+custom-property arithmetic, typed `@property` registrations, or an
 `atomic-composition-review` / `atomic-composition-limit` advisory, read
 [atomic style composition](references/atomic-styles.md). The same guide is served
 as `ads://guides/atomic-styles`. It explains shorthand/logical conflicts and

package/dist/skills/ads-designer/references/atomic-styles.md

@@ -81,6 +81,54 @@ const treatment = css`
 This is a distinct state, not two competing base atoms. Whether changing padding
 on hover is desirable remains a product decision.
 
+## Register typed custom properties without atomizing their descriptors
+
+Use a literal `@property` in its component/pattern's Linaria template when the
+browser needs a typed, interpolated runtime variable:
+
+```tsx
+const treatment = css`
+  @property --ds-example-progress {
+    syntax: "<number>";
+    inherits: false;
+    initial-value: 0;
+  }
+  opacity: var(--ds-example-progress);
+`;
+```
+
+The identifier is illustrative; use a unique name owned by the real unit.
+Registrations are document-global, even when authored beside one component.
+Put them at template level or inside conditional at-rules, never element selectors.
+Use the same ADS tag resolver described below in both product and preview builds;
+it preserves each complete registration and its conditional context instead of
+splitting syntax/inherits/initial-value into invalid atomic rules. This works for
+atomic `css` and `styled`; the browser receives CSS without a registration runtime.
+MCP delivers it inside the App document, not the outer showcase host.
+
+`property-registration` validates descriptor shape, CSS syntax/initial-value and
+ownership, and rejects conflicting schemas or registrations shared by unrelated
+owners. Identical registrations from the same owner are permitted. Runtime
+`--ds-*` / `--ux-*` variables stay with their runtime owner. A shared token's
+registration belongs beside its actual definition in a foundation value sheet;
+a namespaced owner token's registration belongs in its registered `tokens.css`.
+Neither `base.css` nor `fonts.css` becomes a registration escape hatch. Registration
+alone does not define a token or satisfy its sample/fixture coverage.
+
+Typed initial values must match their syntax and be computationally independent:
+`0px` is valid metadata; `var(--space-4)`, `1rem` and `currentColor` are not.
+The literal exemption applies only to registration descriptors. Keep design
+assignments outside them token-backed; a technical fallback is not a place to
+hide a component skin. Use literal static descriptors so guards can inspect them.
+See the [W3C registration contract](https://www.w3.org/TR/css-properties-values-api-1/#at-property-rule).
+
+Verify extracted CSS and actual interpolation, including after minification and
+inside the MCP App. A declaration can parse while a browser ignores an invalid
+registration. Keep required browser fallbacks and reduced-motion behavior; do not
+replace a valid CSS implementation with script merely to evade extraction or a
+guard limitation. These checks cover declarative registrations; arbitrary dynamic
+`CSS.registerProperty()` calls are not an ownership proof.
+
 ## Preserve custom-property arithmetic during extraction
 
 Custom properties can hold an unevaluated token stream that becomes arithmetic