@kolbo/mcp 1.82.3 → 1.82.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kolbo/mcp",
-  "version": "1.82.3",
+  "version": "1.82.6",
   "description": "Kolbo AI MCP Server - Generate images, videos, music, speech, and sound effects from Claude Code",
   "main": "src/index.js",
   "bin": {

package/src/apps/index.js

@@ -97,6 +97,11 @@ const WIDGET_CSP = {
   connectDomains: [
     'https://api.kolbo.ai',
   ],
+  // Nested iframes. Empty/omitted → frame-src 'none' and the live pricing
+  // embed inside the upgrade card is a blank box.
+  frameDomains: [
+    'https://app.kolbo.ai',
+  ],
 };
 
 /** Register all Kolbo widget resources on an McpServer. */

package/src/apps/theme.js

@@ -183,6 +183,8 @@ html.k-peek-fs .k-peek img, html.k-peek-fs .k-peek video { max-height: calc(100v
 .k-pack-head { margin: 14px 0 6px; font-size: 11px; font-weight: 700; letter-spacing: 0.04em;
   text-transform: uppercase; color: var(--text-faint); }
 .k-pack-row { margin-bottom: 6px; }
+.k-pricing-frame { display: block; width: 100%; height: 560px; border: 0; border-radius: 12px;
+  background: #0f0f0f; }
 /* Visual DNA chips: the character's face, so you can see WHICH DNA is locked in. */
 .k-dna-face { width: 18px; height: 18px; border-radius: 999px; object-fit: cover; margin-left: -3px; background: var(--border-strong); }
 .k-dna-stack .k-dna-stack-item { display: inline-flex; }

package/src/apps/widgets/generation.js

@@ -794,7 +794,7 @@ function fillBatchCell(sc, i, g) {
   // the user is meant to watch, and without it the tile was a muted poster with
   // no way to play, seek or unmute until the whole batch finished and repainted.
   cell.innerHTML = (sc.kind === 'video'
-    ? '<video class="k-cell-fill" src="' + esc(u) + '"' + (r.thumbnail_url ? ' poster="' + esc(r.thumbnail_url) + '"' : '') + ' controls playsinline preload="metadata"></video>'
+    ? '<video class="k-cell-fill" src="' + esc(playableAt(r, r.urls || [], 0)) + '"' + (r.thumbnail_url ? ' poster="' + esc(r.thumbnail_url) + '"' : '') + ' controls playsinline preload="metadata"></video>'
     : '<img class="k-cell-fill" src="' + esc(u) + '" alt="">') + cap;
   window.kolbo.notifySize();
 }
@@ -862,10 +862,28 @@ function renderImages(sc, urls) {
   });
 }
 
+/**
+ * The url to PLAY, which is not always the url to DOWNLOAD.
+ *
+ * Seedance 2.5 at 1080p returns HEVC Main 10 (10-bit). Chrome and Edge decode HEVC in
+ * hardware only — with no software fallback — and Firefox on Windows not at all, so the
+ * widget showed a black frame with sound. The API therefore returns playback_urls
+ * alongside urls whenever it had to build an H.264 proxy.
+ *
+ * urls stays the MASTER and is what every download button must keep using: handing
+ * someone the 8-bit proxy for a file they paid the 1080p multiplier for is a silent
+ * quality downgrade. Backend: kolbo-api/src/services/webPlaybackProxy.js
+ */
+function playableAt(src, urls, i) {
+  var proxies = (src && src.playback_urls) || [];
+  return proxies[i] || (urls || [])[i];
+}
+
 function renderVideo(sc, urls) {
   // preload="none" behind a poster: the card shows the still until the user
   // hits play, instead of pulling the video header on mount.
-  el('stage').innerHTML = '<div class="k-viewer"><video id="main-video" src="' + esc(urls[0]) + '"' +
+  // PLAY the proxy when there is one; the download button below keeps urls[0] (master).
+  el('stage').innerHTML = '<div class="k-viewer"><video id="main-video" src="' + esc(playableAt(sc, urls, 0)) + '"' +
     (sc.thumbnail_url ? ' poster="' + esc(sc.thumbnail_url) + '" preload="none"' : ' preload="metadata"') + ' controls playsinline></video>' +
     dlBtnHTML(urls[0]) + '</div>';
   wireDlButtons(el('stage'));

package/src/apps/widgets/plans.js

@@ -6,11 +6,11 @@ const { widgetPage } = require('../html');
  * Plans / upgrade widget — shown by `show_plans`, and by any generation the
  * server refused for credits.
  *
- * The buttons deep-link to app.kolbo.ai/pricing rather than a payment session:
- * promo pricing, tax, currency and saved payment methods live there, and a
- * checkout link minted on the API-key surface would drift from them the first
- * time a campaign changes. The prices below ARE the live promo-adjusted
- * numbers from /v1/account/plans, so the card never quotes a stale figure.
+ * The live pricing UI lives on app.kolbo.ai. This card iframes
+ * `/pricing/embed` (same PlanList / PricingCard as the site) so a price or
+ * perk change does not require an MCP republish. Buy/Subscribe on that page
+ * open https://app.kolbo.ai/pricing in a new tab — Stripe and the user's
+ * session must not run inside a third-party host iframe.
  *
  * structuredContent contract:
  * {
@@ -19,8 +19,8 @@ const { widgetPage } = require('../html');
  *   balance, required, shortfall,     // when reason === 'insufficient_credits'
  *   current_plan: { key, name },
  *   plans:        [{ key, name, interval, credits, price, original_price,
- *                    discount_percent, promo_text, currency }],
- *   credit_packs: [ same shape ],
+ *                    discount_percent, promo_text, currency, top_up_discount }],
+ *   credit_packs: [{ …, subscriber_price, is_subscriber }],
  *   pricing_url
  * }
  */
@@ -35,10 +35,6 @@ const BODY = `
   </div>
   <div class="k-body">
     <div class="k-error" id="notice" style="display:none"></div>
-    <div class="k-plan-toggle" id="toggle" style="display:none">
-      <button type="button" class="k-toggle-btn" data-interval="month">Monthly</button>
-      <button type="button" class="k-toggle-btn" data-interval="year">Annual</button>
-    </div>
     <div id="stage"></div>
     <div class="k-actions" id="actions"></div>
   </div>
@@ -50,7 +46,7 @@ const BODY = `
 
 const SCRIPT = `
 var state = null;
-var interval = 'year';   // annual first — it is the better per-credit deal
+var PRICING_EMBED = 'https://app.kolbo.ai/pricing/embed';
 
 el('logo').innerHTML = KOLBO_LOGO + '<span>Kolbo</span>';
 el('kolbo-link').onclick = function (e) { e.preventDefault(); window.kolbo.openLink('https://app.kolbo.ai'); };
@@ -58,17 +54,6 @@ el('kolbo-link').onclick = function (e) { e.preventDefault(); window.kolbo.openL
 function pricingUrl() {
   return (state && state.pricing_url) || 'https://app.kolbo.ai/pricing';
 }
-function money(amount, currency) {
-  if (amount == null) return '';
-  var sym = String(currency || 'usd').toLowerCase() === 'usd' ? '$' : '';
-  var n = Math.round(Number(amount) * 100) / 100;
-  return sym + n + (sym ? '' : ' ' + String(currency || '').toUpperCase());
-}
-function perMonthNote(plan) {
-  if (plan.interval !== 'year' || plan.price == null) return '';
-  var monthly = Math.round((Number(plan.price) / 12) * 100) / 100;
-  return money(monthly, plan.currency) + '/mo, billed annually';
-}
 
 function boot(sc) {
   if (!sc) return;
@@ -90,86 +75,12 @@ function boot(sc) {
                : 'That generation needs more credits than you have left.');
   }
 
-  var plans = Array.isArray(sc.plans) ? sc.plans : [];
-  var intervals = {};
-  plans.forEach(function (p) { if (p.interval) intervals[p.interval] = true; });
-  if (intervals.month && intervals.year) {
-    el('toggle').style.display = '';
-    if (!intervals[interval]) interval = intervals.year ? 'year' : 'month';
-  } else {
-    interval = intervals.year ? 'year' : 'month';
-  }
-  wireToggle();
-  render();
-  window.kolbo.notifySize();
-}
-
-function wireToggle() {
-  Array.prototype.forEach.call(document.querySelectorAll('.k-toggle-btn'), function (b) {
-    b.onclick = function () { interval = b.getAttribute('data-interval'); render(); window.kolbo.notifySize(); };
-  });
-}
-
-function render() {
-  Array.prototype.forEach.call(document.querySelectorAll('.k-toggle-btn'), function (b) {
-    b.classList.toggle('active', b.getAttribute('data-interval') === interval);
-  });
-
-  var plans = (state.plans || []).filter(function (p) { return p.interval === interval; });
-  // Cheapest first so the ladder reads left-to-right. A zero-price plan is not
-  // an upgrade path, so it never takes a card slot.
-  plans = plans.filter(function (p) { return Number(p.price) > 0; });
-  plans.sort(function (a, b) { return (a.price || 0) - (b.price || 0); });
-
-  var current = state.current_plan && state.current_plan.key;
-  var html = plans.length
-    ? '<div class="k-plan-grid">' + plans.map(function (p) { return planCard(p, current); }).join('') + '</div>'
-    : '<div class="k-empty">Plan details are on the pricing page</div>';
-
-  var packs = (state.credit_packs || []).filter(function (p) { return Number(p.price) > 0; });
-  if (packs.length) {
-    packs.sort(function (a, b) { return (a.price || 0) - (b.price || 0); });
-    html += '<div class="k-pack-head">One-time credit packs</div>' +
-      packs.slice(0, 4).map(function (p) {
-        return '<div class="k-audio-row k-pack-row"><div class="k-audio-meta">' +
-          '<div class="k-audio-title">' + esc(p.name || '') + '</div>' +
-          (p.credits != null ? '<div class="k-audio-sub">' + esc(String(p.credits)) + ' credits</div>' : '') +
-          '</div><span class="k-chip">' + esc(money(p.price, p.currency)) + '</span></div>';
-      }).join('');
-  }
-
-  el('stage').innerHTML = html;
-  Array.prototype.forEach.call(el('stage').querySelectorAll('[data-buy]'), function (b) {
-    b.onclick = function () { window.kolbo.openLink(pricingUrl()); };
-  });
+  el('stage').innerHTML = '<iframe class="k-pricing-frame" src="' + PRICING_EMBED +
+    '" title="Kolbo plans" referrerpolicy="no-referrer-when-downgrade"></iframe>';
+  var frame = el('stage').querySelector('iframe');
+  if (frame) frame.onload = function () { window.kolbo.notifySize(); };
   renderActions();
-}
-
-function planCard(p, currentKey) {
-  var isCurrent = currentKey && p.key === currentKey;
-  var badges = '';
-  if (p.discount_percent) badges += '<span class="k-plan-badge">' + esc(String(p.discount_percent)) + '% OFF</span>';
-  if (isCurrent) badges += '<span class="k-plan-badge current">Current</span>';
-
-  var price = '<span class="k-plan-price">' + esc(money(p.price, p.currency)) + '</span>';
-  if (p.original_price && p.original_price > p.price) {
-    price = '<span class="k-plan-was">' + esc(money(p.original_price, p.currency)) + '</span> ' + price;
-  }
-  var note = perMonthNote(p);
-
-  return '<div class="k-plan' + (isCurrent ? ' current' : '') + '">' +
-    '<div class="k-plan-top"><span class="k-plan-name">' + esc(p.name || p.key || '') + '</span>' + badges + '</div>' +
-    (p.credits != null
-      ? '<div class="k-plan-credits">' + ICONS.sparkle + ' ' + esc(String(p.credits)) + ' credits' +
-        (p.interval === 'month' ? '/mo' : p.interval === 'year' ? '/yr' : '') + '</div>'
-      : '') +
-    '<div class="k-plan-pricing">' + price + '</div>' +
-    (note ? '<div class="k-plan-note">' + esc(note) + '</div>' : '') +
-    (p.promo_text ? '<div class="k-plan-note">' + esc(p.promo_text) + '</div>' : '') +
-    (isCurrent
-      ? '<button class="k-btn" disabled>Your plan</button>'
-      : '<button class="k-btn primary" data-buy="' + esc(p.key || '') + '">Get ' + esc(p.name || 'plan') + '</button>') +
-    '</div>';
+  window.kolbo.notifySize();
 }
 
 function renderActions() {
@@ -184,8 +95,7 @@ window.kolbo.onToolResult(function (result) {
 });
 window.kolbo.onToolInput(function () {
   if (state) return;
-  el('stage').innerHTML = '<div class="k-gen-grid n2"><div class="k-skel square" style="min-height:120px"></div>'
-    + '<div class="k-skel square" style="min-height:120px"></div></div>';
+  el('stage').innerHTML = '<div class="k-skel square" style="min-height:240px"></div>';
   window.kolbo.notifySize();
 });
 window.kolbo.ready(function (ctx) {

package/src/tools/generate.js

@@ -89,7 +89,7 @@ async function pollBatch(client, batch, { interval, timeout }, toolName) {
   const polls = await Promise.all(batch.ids.map((id) => pollOrTimedOut(client, id, { interval, timeout })));
   const generations = polls.map((p, i) => p.timedOut
     ? { prompt: batch.ok[i].prompt, generation_id: batch.ids[i], status: 'processing', note: 'Still running — call get_generation_status with wait=true to collect it.' }
-    : { prompt: batch.ok[i].prompt, generation_id: batch.ids[i], status: 'completed', ...creditFields(polls[i].result), urls: p.result.result.urls });
+    : { prompt: batch.ok[i].prompt, generation_id: batch.ids[i], status: 'completed', ...creditFields(polls[i].result), urls: p.result.result.urls, playback_urls: p.result.result.playback_urls });
   const text = JSON.stringify({
     batch: true,
     session_id: batch.ok[0].gen.session_id,
@@ -290,11 +290,13 @@ function registerGenerateTools(server, client, options = {}) {
         // input arg is only what the caller happened to name.
         reference_images: result.result.reference_images || reference_images,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         credits_used: creditFields(result).credits_used,
       }, JSON.stringify({
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         model: result.result.model,
         prompt_used: result.result.prompt_used,
         _followup_hint: 'If the user asks to edit/change/modify this image next (scene, lighting, objects, style, color — any content edit), pass urls[0] to generate_image_edit. Use edit_image ONLY for mechanical ops (upscale/reframe/removebg/enhance_skin). Do NOT call generate_image again.'
@@ -380,11 +382,13 @@ function registerGenerateTools(server, client, options = {}) {
         reference_images: result.result.reference_images
           || [...(source_images || []), ...(reference_images || [])],
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         credits_used: creditFields(result).credits_used,
       }, JSON.stringify({
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         model: result.result.model,
         prompt_used: result.result.prompt_used,
         _followup_hint: 'If the user asks for another edit on this output, pass urls[0] back into generate_image_edit as source_images. For targeted ops (upscale/reframe/removebg/enhance_skin) use edit_image instead. Do NOT call generate_image from scratch.'
@@ -627,6 +631,7 @@ function registerGenerateTools(server, client, options = {}) {
         settings: videoSettings(shared),
         reference_images,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         thumbnail_url: result.result.thumbnail_url,
         duration: result.result.duration,
         credits_used: creditFields(result).credits_used,
@@ -634,6 +639,7 @@ function registerGenerateTools(server, client, options = {}) {
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         model: result.result.model,
         duration: result.result.duration,
         thumbnail_url: result.result.thumbnail_url,
@@ -714,6 +720,7 @@ function registerGenerateTools(server, client, options = {}) {
         settings: videoSettings({ duration, resolution, aspect_ratio, enhance_prompt, visual_dna_ids }),
         reference_images: [image_url],
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         thumbnail_url: result.result.thumbnail_url,
         duration: result.result.duration,
         credits_used: creditFields(result).credits_used,
@@ -721,6 +728,7 @@ function registerGenerateTools(server, client, options = {}) {
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         model: result.result.model,
         duration: result.result.duration,
         thumbnail_url: result.result.thumbnail_url,
@@ -781,6 +789,7 @@ function registerGenerateTools(server, client, options = {}) {
         tool: 'generate_music', kind: 'audio', gen, client, model: model || 'Suno', prompt,
         settings: { mode: instrumental ? 'instrumental' : (style || undefined), preset_id },
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         title: result.result.title,
         duration: result.result.duration,
         credits_used: creditFields(result).credits_used,
@@ -788,6 +797,7 @@ function registerGenerateTools(server, client, options = {}) {
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         title: result.result.title,
         duration: result.result.duration,
         lyrics: result.result.lyrics
@@ -899,12 +909,14 @@ function registerGenerateTools(server, client, options = {}) {
           language,
         },
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         duration: result.result.duration,
         credits_used: creditFields(result).credits_used,
       }, JSON.stringify({
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         voice: result.result.voice,
         duration: result.result.duration,
         ...(unknownVoice ? { _warning: unknownVoice } : {})
@@ -964,12 +976,14 @@ function registerGenerateTools(server, client, options = {}) {
         settings: { duration },
         reference_images: seed_reference_image_url ? [seed_reference_image_url] : [],
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         duration: result.result.duration,
         credits_used: creditFields(result).credits_used,
       }, JSON.stringify({
         ...creditFields(result),
         session_id: gen.session_id,
         urls: result.result.urls,
+        playback_urls: result.result.playback_urls,
         duration: result.result.duration
       }, null, 2));
     }