Interactive plan review

The server implements the stable MCP Apps extension as an optional progressive enhancement. It advertises io.modelcontextprotocol/ui with text/html;profile=mcp-app, links every configured canonical plan_* tool to ui://guildcontrol/plan-review through nested _meta.ui.resourceUri, and explicitly limits tool visibility to model. It does not emit the deprecated flat ui/resourceUri metadata.

An MCP Apps host can load the one self-contained resource, complete the ui/initialize lifecycle, and deliver exact tool input plus the ordinary CallToolResult. The view highlights status, exact identifier fields, review digests, authority, freshness, permissions, blockers, warnings, risks, limitations, and other evidence. Search, keyboard-accessible tabs, disclosure groups, exact input, and full JSON keep unknown future plan fields inspectable rather than dropping them. A host without MCP Apps support receives the same complete text and structured plan result and can ignore the optional metadata.

The view is deliberately display-only. It advertises no app tool capability, has no server-tool or resource-read call path, and cannot approve, execute, modify, retry, open a link, send a message, update model context, or persist state. Resource metadata requests no network domains, dedicated origin, camera, microphone, geolocation, or clipboard access. The document adds its own restrictive CSP, uses no external assets, and renders every caller or Discord-derived value with DOM text nodes rather than an HTML or CSS sink. Incoming lifecycle messages are accepted only from the parent frame. The app still does not replace any signed elicitation, host write approval, fresh-plan check, confirmation, reservation, pending record, Discord permission proof, or readback gate.

Credential-free catalog inspection verifies the exact extension capability, resource declaration and response, canonical plan-tool linkage, model-only visibility, empty network and permission sets, absence of server-tool authority, and deterministic HTML bytes. The app resource response is part of the overall contract digest; separate HTML and resource digests make source and envelope changes independently visible. catalog --html includes this evidence and an escaped copy of the complete source for offline review.

Canonical source: docs/reference.md