Skip to content

v0.4.0-rc.0 — Generative UI Protocol

Pre-release
Pre-release

Choose a tag to compare

@gustavoignis gustavoignis released this 27 Jul 00:51

What's new in 0.4.0-rc.0

Public release of @ggui-ai/*@0.4.0-rc.0 — install via npm install @ggui-ai/cli@0.4.0-rc.0 (dist-tag next).

First publish since 0.3.0-rc.0 (2026-06-28). This wave crosses one breaking protocol change, which is why it opens the 0.4 line.

⚠ Breaking — render failures are in-result isError tool errors (ruling B)

ggui_render failures no longer surface as success-shaped results. A failed render now returns isError: true with a structured error: {code, message} in structuredContent (canonical codes: PRODUCTION_FAILED, VALIDATION_ERROR, NO_PLATFORM_KEY, NO_CREDENTIALS), and resourceUri became optional on render output — present iff the render is mountable. The JSON-RPC -32004 error code is retired. If you consume @ggui-ai/protocol types or branch on render results, read the changelog entry (rb1–rb5) in packages/protocol/src/version.ts before re-pinning.

Contract fixes

  • updateOutputSchema now declares resourceUri — the field the deployed ggui_update handler has emitted since May. Consumers of the published type can finally see it (ggui#385).
  • The ggui_update handler is now mechanically bound to updateInputSchema by a contract-alignment suite; its parse is strict, and malformed calls reject before any gate or store read.
  • Keyless plain renders commit a session row (the gesture pipe and the session store can no longer disagree about the same id), and a session-TTL sentinel overflow that rejected every read-back on default-TTL stores is fixed.

Also in this wave

  • July 2026 model cohorts — GPT-5.6 family, Gemini 3.6 / 3.5-flash-lite, Claude 5 family.
  • Registry intent threading — export → PortableBlueprint → push manifest.
  • create-agentic-app retired — self-hosters start from samples/* (see the README quickstart); the npm package is deprecated in favor of @guuey/create-agentic-app.
  • Dependency wave — vitest consolidated to one 3.x, @hono/node-server 2, security pins across the transitive graph, and a new iframe-runtime bundle gate that fails on any package bundled twice.

Install

npm install @ggui-ai/cli@0.4.0-rc.0

Verify provenance: every tarball is signed via npm Trusted Publishing (OIDC); see https://www.npmjs.com/package/@ggui-ai/cli for the public attestation.