chore: bump gui-chat-protocol to ^2.0.0 and plugin to 2.0.0

[isamu]

Summary

Bumps gui-chat-protocol to ^2.0.0 and this plugin to 2.0.0 (from 1.1.1).

gui-chat-protocol 2.0.0 changed ToolContextApp's index signature from (...args: any[]) => any to => unknown, so every host-backend call has to be narrowed by the plugin. This PR narrows getImageConfig with type guards in a new src/core/hostResponse.ts (no as casts), covered by tests/hostResponse.test.ts.

Items to Confirm / Review

• Are the type guards strict enough / too strict? They check exactly the fields this plugin reads back. A host response that fails the guard now returns a narrate-only error result instead of being trusted — please confirm that fallback message is the right behavior.
• The guards were written against the shapes the previous any-typed code assumed. If a host returns extra or differently-typed fields, the guard will reject it — worth a sanity check against the real MulmoClaude host.

User Prompt

https://www.npmjs.com/package/gui-chat-protocol 2.0.0 になった。
一部 breaking change があるので、
https://github.com/receptron/gui-chat-protocol/releases
をよくよんで、このdir以下で gui-chat-protocol を使っているものは全部あげていく。
npm があるものは全部 publish する。そのときに major のバージョンを上げる。
同時に型問題とかで refactor できるものはしておいてね。

Breaking changes in gui-chat-protocol 2.0.0

Four public signatures stopped accepting a caller-named type parameter and now take a reader instead — dispatch, subscribe, getConfig, publish ("a type parameter appearing only in return position is a type assertion with nicer syntax"). No plugin in this family calls any of them, so that half of the migration is a no-op here.

What does reach the plugins is the same rule applied to ToolContextApp:

-export interface ToolContextApp extends Record<string, (...args: any[]) => any> {
-    getConfig: <T = unknown>(key: string) => T | undefined;
+export interface ToolContextApp extends Record<string, (...args: any[]) => unknown> {
+    getConfig: {
+        (key: string): unknown;
+        <T>(key: string, parse: (raw: unknown) => T): T | undefined;
+    };

Verification

Run locally on this branch: yarn typecheck, yarn lint, yarn build, yarn test — all green.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	gui-chat-protocol@​1.2.0 ⏵ 2.0.0	+1		+1	+1

View full report