@openephemeris/mcp-server 4.18.0 → 4.19.0

package/CHANGELOG.md

@@ -7,6 +7,30 @@ Version numbering follows [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [4.19.0] — 2026-09-27
+
+### Changed
+- **The Human Design bodygraph is easier to read.** Gate numbers use a clean sans-serif and are
+  noticeably larger at chat width; the Design and Personality planet columns sit close to the body
+  under their own headings; open centres use the theme's colour instead of glaring white; channels
+  defined from both sides are drawn as two parallel stripes (Design red beside Personality); the
+  mandala's body is about 1.3× larger inside its rings.
+- **Select a single activation.** Clicking a planet row (for example Personality Moon) highlights
+  only that activation's gate, stub and channel, never its Design twin. The rendered SVG tags every
+  element by side and activation, so your own CSS can do the same.
+- **Every chart widget fits the chat better.** Widgets size themselves from the host; scrolling the
+  conversation past a chart scrolls instead of zooming (zoom with Ctrl/Cmd + scroll or a pinch); the
+  fullscreen button only appears where the host supports fullscreen; moon phase and transit timeline
+  support picture-in-picture; fullscreen uses one shared layout that stacks into a single column on
+  phones; all seven widgets share one colour and font set, and the host draws the card border.
+
+### Fixed
+- Changing theme no longer drops a widget out of fullscreen.
+- On moon phase and transit timeline, the info button no longer covers the fullscreen button.
+- Bodygraph hover highlights work again.
+- Widget resources are versioned, so hosts that cache them (such as ChatGPT) pick up new widget
+  versions after an update without reinstalling the app.
+
 ## [4.18.0] — 2026-09-26
 
 ### Fixed

package/dist/index.js

@@ -10,14 +10,8 @@ import { buildUiMeta } from "./tools/ui-meta.js";
 import { SERVER_INSTRUCTIONS } from "./instructions.js";
 import { captureEvent, captureFirstToolCallOnce, distinctIdFor } from "./analytics.js";
 import { listPrompts, getPromptContent } from "./prompts.js";
-// ── MCP App resource imports ────────────────────────────────────────────────
-import { CHART_WHEEL_RESOURCE_URI, CHART_WHEEL_MIME_TYPE, getChartWheelBundle, } from "./tools/apps/chart-wheel-app.js";
-import { BODYGRAPH_RESOURCE_URI, BODYGRAPH_MIME_TYPE, getBodygraphBundle, } from "./tools/apps/bodygraph-app.js";
-import { BI_WHEEL_RESOURCE_URI, BI_WHEEL_MIME_TYPE, getBiWheelBundle, } from "./tools/apps/bi-wheel-app.js";
-import { MOON_PHASE_RESOURCE_URI, MOON_PHASE_MIME_TYPE, getMoonPhaseBundle, } from "./tools/apps/moon-phase-app.js";
-import { TRANSIT_TIMELINE_RESOURCE_URI, TRANSIT_TIMELINE_MIME_TYPE, getTransitTimelineBundle, } from "./tools/apps/transit-timeline-app.js";
-import { VEDIC_CHART_RESOURCE_URI, VEDIC_CHART_MIME_TYPE, getVedicChartBundle, } from "./tools/apps/vedic-chart-app.js";
-import { BAZI_RESOURCE_URI, BAZI_MIME_TYPE, getBaziBundle, } from "./tools/apps/bazi-app.js";
+// ── MCP App resources (list/read registry shared with server-sse.ts) ────────
+import { listUiResources, readUiResource } from "./tools/apps/ui-resources.js";
 // ─────────────────────────────────────────────────────────────────────────────
 function resolveServerVersion() {
     try {
@@ -157,112 +151,16 @@ server.setRequestHandler(GetPromptRequestSchema, async (request) => {
         ],
     };
 });
-// List available resources
 server.setRequestHandler(ListResourcesRequestSchema, async () => {
-    const resources = [];
-    if (getChartWheelBundle()) {
-        resources.push({
-            uri: CHART_WHEEL_RESOURCE_URI,
-            name: "Chart Wheel Explorer",
-            description: "Interactive natal chart wheel with clickable planets, houses, and aspects.",
-            mimeType: CHART_WHEEL_MIME_TYPE,
-        });
-    }
-    if (getBodygraphBundle()) {
-        resources.push({
-            uri: BODYGRAPH_RESOURCE_URI,
-            name: "Human Design Bodygraph Explorer",
-            description: "Interactive Human Design Bodygraph with clickable centers, gates, and channels.",
-            mimeType: BODYGRAPH_MIME_TYPE,
-        });
-    }
-    if (getBiWheelBundle()) {
-        resources.push({
-            uri: BI_WHEEL_RESOURCE_URI,
-            name: "Bi-Wheel Explorer",
-            description: "Interactive synastry or transit bi-wheel with cross-aspect lines and clickable planets.",
-            mimeType: BI_WHEEL_MIME_TYPE,
-        });
-    }
-    if (getMoonPhaseBundle()) {
-        resources.push({
-            uri: MOON_PHASE_RESOURCE_URI,
-            name: "Moon Phase Explorer",
-            description: "Interactive lunar phase dial showing illumination, sign, and void-of-course status.",
-            mimeType: MOON_PHASE_MIME_TYPE,
-        });
-    }
-    if (getTransitTimelineBundle()) {
-        resources.push({
-            uri: TRANSIT_TIMELINE_RESOURCE_URI,
-            name: "Transit Timeline Explorer",
-            description: "Interactive vertical timeline of upcoming transit hits grouped by month, with clickable events.",
-            mimeType: TRANSIT_TIMELINE_MIME_TYPE,
-        });
-    }
-    if (getVedicChartBundle()) {
-        resources.push({
-            uri: VEDIC_CHART_RESOURCE_URI,
-            name: "Vedic Chart Explorer",
-            description: "Interactive Vedic (Jyotish) South Indian Rashi grid with clickable sign placements.",
-            mimeType: VEDIC_CHART_MIME_TYPE,
-        });
-    }
-    if (getBaziBundle()) {
-        resources.push({
-            uri: BAZI_RESOURCE_URI,
-            name: "BaZi Four Pillars Explorer",
-            description: "Interactive BaZi (Four Pillars of Destiny) chart with clickable Year/Month/Day/Hour pillars.",
-            mimeType: BAZI_MIME_TYPE,
-        });
-    }
-    return { resources };
+    // One registry for both transports: versioned ui:// URIs + resource _meta
+    // (prefersBorder, CSP, widgetDescription). See tools/apps/ui-resources.ts.
+    return { resources: listUiResources() };
 });
-// Read resource
 server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
     const uri = request.params.uri;
-    if (uri === CHART_WHEEL_RESOURCE_URI) {
-        const bundle = getChartWheelBundle();
-        if (!bundle)
-            throw new Error("Chart Wheel UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: CHART_WHEEL_RESOURCE_URI, mimeType: CHART_WHEEL_MIME_TYPE, text: bundle }] };
-    }
-    if (uri === BODYGRAPH_RESOURCE_URI) {
-        const bundle = getBodygraphBundle();
-        if (!bundle)
-            throw new Error("Bodygraph UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: BODYGRAPH_RESOURCE_URI, mimeType: BODYGRAPH_MIME_TYPE, text: bundle }] };
-    }
-    if (uri === BI_WHEEL_RESOURCE_URI) {
-        const bundle = getBiWheelBundle();
-        if (!bundle)
-            throw new Error("Bi-Wheel UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: BI_WHEEL_RESOURCE_URI, mimeType: BI_WHEEL_MIME_TYPE, text: bundle }] };
-    }
-    if (uri === MOON_PHASE_RESOURCE_URI) {
-        const bundle = getMoonPhaseBundle();
-        if (!bundle)
-            throw new Error("Moon Phase UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: MOON_PHASE_RESOURCE_URI, mimeType: MOON_PHASE_MIME_TYPE, text: bundle }] };
-    }
-    if (uri === TRANSIT_TIMELINE_RESOURCE_URI) {
-        const bundle = getTransitTimelineBundle();
-        if (!bundle)
-            throw new Error("Transit Timeline UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: TRANSIT_TIMELINE_RESOURCE_URI, mimeType: TRANSIT_TIMELINE_MIME_TYPE, text: bundle }] };
-    }
-    if (uri === VEDIC_CHART_RESOURCE_URI) {
-        const bundle = getVedicChartBundle();
-        if (!bundle)
-            throw new Error("Vedic Chart UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: VEDIC_CHART_RESOURCE_URI, mimeType: VEDIC_CHART_MIME_TYPE, text: bundle }] };
-    }
-    if (uri === BAZI_RESOURCE_URI) {
-        const bundle = getBaziBundle();
-        if (!bundle)
-            throw new Error("BaZi UI bundle not found. Run `npm run build:ui` to build it.");
-        return { contents: [{ uri: BAZI_RESOURCE_URI, mimeType: BAZI_MIME_TYPE, text: bundle }] };
-    }
+    const result = readUiResource(uri);
+    if (result)
+        return result;
     throw new Error(`Unknown resource: ${uri}`);
 });
 // Handle tool calls

package/dist/server-sse.js

@@ -28,16 +28,7 @@ import { initTools, toolRegistry, formatToolResponse, formatToolError, modelVisi
 import { buildUiMeta } from "./tools/ui-meta.js";
 import { SERVER_INSTRUCTIONS } from "./instructions.js";
 import { BackendClient, backendClient, presentCredentialEnvVars, runWithClient } from "./backend/client.js";
-import { CHART_WHEEL_RESOURCE_URI, CHART_WHEEL_MIME_TYPE, getChartWheelBundle, } from "./tools/apps/chart-wheel-app.js";
-import { BODYGRAPH_RESOURCE_URI, BODYGRAPH_MIME_TYPE, getBodygraphBundle, } from "./tools/apps/bodygraph-app.js";
-import { BI_WHEEL_RESOURCE_URI, BI_WHEEL_MIME_TYPE, getBiWheelBundle, } from "./tools/apps/bi-wheel-app.js";
-// NOTE: bazi, vedic-chart imports removed — tools disabled.
-// NOTE: transit-timeline, bazi imports removed — tools disabled.
-// NOTE: transit-timeline, vedic-chart imports removed — tools disabled.
-import { MOON_PHASE_RESOURCE_URI, MOON_PHASE_MIME_TYPE, getMoonPhaseBundle, } from "./tools/apps/moon-phase-app.js";
-import { TRANSIT_TIMELINE_RESOURCE_URI, TRANSIT_TIMELINE_MIME_TYPE, getTransitTimelineBundle, } from "./tools/apps/transit-timeline-app.js";
-import { VEDIC_CHART_RESOURCE_URI, VEDIC_CHART_MIME_TYPE, getVedicChartBundle, } from "./tools/apps/vedic-chart-app.js";
-import { BAZI_RESOURCE_URI, BAZI_MIME_TYPE, getBaziBundle, } from "./tools/apps/bazi-app.js";
+import { listUiResources, readUiResource } from "./tools/apps/ui-resources.js";
 import { oauthDiscoveryRouter, PROTECTED_RESOURCE_METADATA_URL } from "./oauth/discovery.js";
 import { oauthDcrRouter } from "./oauth/dcr.js";
 import { oauthTokenRouter } from "./oauth/token.js";
@@ -387,113 +378,15 @@ function createMcpServer(analyticsId = "anonymous", surface = "core", activity =
     });
     // --- Resource handlers ---
     server.setRequestHandler(ListResourcesRequestSchema, async () => {
-        const resources = [];
-        if (getChartWheelBundle()) {
-            resources.push({
-                uri: CHART_WHEEL_RESOURCE_URI,
-                name: "Chart Wheel Explorer",
-                description: "Interactive natal chart wheel with clickable planets, houses, and aspects.",
-                mimeType: CHART_WHEEL_MIME_TYPE,
-            });
-        }
-        if (getBodygraphBundle()) {
-            resources.push({
-                uri: BODYGRAPH_RESOURCE_URI,
-                name: "Human Design Bodygraph Explorer",
-                description: "Interactive Human Design Bodygraph with clickable centers, gates, and channels.",
-                mimeType: BODYGRAPH_MIME_TYPE,
-            });
-        }
-        if (getBiWheelBundle()) {
-            resources.push({
-                uri: BI_WHEEL_RESOURCE_URI,
-                name: "Bi-Wheel Explorer",
-                description: "Interactive synastry or transit bi-wheel with cross-aspect lines and clickable planets.",
-                mimeType: BI_WHEEL_MIME_TYPE,
-            });
-        }
-        // NOTE: bazi resources omitted — tools disabled.
-        // NOTE: transit-timeline, vedic-chart resources omitted — tools disabled.
-        if (getMoonPhaseBundle()) {
-            resources.push({
-                uri: MOON_PHASE_RESOURCE_URI,
-                name: "Moon Phase Explorer",
-                description: "Interactive lunar phase dial showing illumination, sign, and void-of-course status.",
-                mimeType: MOON_PHASE_MIME_TYPE,
-            });
-        }
-        if (getTransitTimelineBundle()) {
-            resources.push({
-                uri: TRANSIT_TIMELINE_RESOURCE_URI,
-                name: "Transit Timeline Explorer",
-                description: "Interactive vertical timeline of upcoming transit hits grouped by month, with clickable events.",
-                mimeType: TRANSIT_TIMELINE_MIME_TYPE,
-            });
-        }
-        if (getVedicChartBundle()) {
-            resources.push({
-                uri: VEDIC_CHART_RESOURCE_URI,
-                name: "Vedic Chart Explorer",
-                description: "Interactive Vedic (Jyotish) South Indian Rashi grid with clickable sign placements.",
-                mimeType: VEDIC_CHART_MIME_TYPE,
-            });
-        }
-        if (getBaziBundle()) {
-            resources.push({
-                uri: BAZI_RESOURCE_URI,
-                name: "BaZi Four Pillars Explorer",
-                description: "Interactive BaZi (Four Pillars of Destiny) chart with clickable Year/Month/Day/Hour pillars.",
-                mimeType: BAZI_MIME_TYPE,
-            });
-        }
-        return { resources };
+        // One registry for both transports: versioned ui:// URIs + resource _meta
+        // (prefersBorder, CSP, widgetDescription). See tools/apps/ui-resources.ts.
+        return { resources: listUiResources() };
     });
     server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
         const uri = request.params.uri;
-        if (uri === CHART_WHEEL_RESOURCE_URI) {
-            const bundle = getChartWheelBundle();
-            if (!bundle)
-                throw new Error("Chart Wheel UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: CHART_WHEEL_RESOURCE_URI, mimeType: CHART_WHEEL_MIME_TYPE, text: bundle }] };
-        }
-        if (uri === BODYGRAPH_RESOURCE_URI) {
-            const bundle = getBodygraphBundle();
-            if (!bundle)
-                throw new Error("Bodygraph UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: BODYGRAPH_RESOURCE_URI, mimeType: BODYGRAPH_MIME_TYPE, text: bundle }] };
-        }
-        if (uri === BI_WHEEL_RESOURCE_URI) {
-            const bundle = getBiWheelBundle();
-            if (!bundle)
-                throw new Error("Bi-Wheel UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: BI_WHEEL_RESOURCE_URI, mimeType: BI_WHEEL_MIME_TYPE, text: bundle }] };
-        }
-        // NOTE: bazi resources omitted — tools disabled.
-        // NOTE: transit-timeline, vedic-chart ReadResource handlers removed.
-        if (uri === MOON_PHASE_RESOURCE_URI) {
-            const bundle = getMoonPhaseBundle();
-            if (!bundle)
-                throw new Error("Moon Phase UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: MOON_PHASE_RESOURCE_URI, mimeType: MOON_PHASE_MIME_TYPE, text: bundle }] };
-        }
-        if (uri === TRANSIT_TIMELINE_RESOURCE_URI) {
-            const bundle = getTransitTimelineBundle();
-            if (!bundle)
-                throw new Error("Transit Timeline UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: TRANSIT_TIMELINE_RESOURCE_URI, mimeType: TRANSIT_TIMELINE_MIME_TYPE, text: bundle }] };
-        }
-        if (uri === VEDIC_CHART_RESOURCE_URI) {
-            const bundle = getVedicChartBundle();
-            if (!bundle)
-                throw new Error("Vedic Chart UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: VEDIC_CHART_RESOURCE_URI, mimeType: VEDIC_CHART_MIME_TYPE, text: bundle }] };
-        }
-        if (uri === BAZI_RESOURCE_URI) {
-            const bundle = getBaziBundle();
-            if (!bundle)
-                throw new Error("BaZi UI bundle not found. Run `npm run build:ui` to build it.");
-            return { contents: [{ uri: BAZI_RESOURCE_URI, mimeType: BAZI_MIME_TYPE, text: bundle }] };
-        }
+        const result = readUiResource(uri);
+        if (result)
+            return result;
         throw new Error(`Unknown resource: ${uri}`);
     });
     return server;

package/dist/tools/apps/bazi-app.d.ts

@@ -16,7 +16,7 @@
  * bazi_annual_pillar, bazi_compatibility, bazi_chart) already exist in
  * ../specialized/bazi.ts — this file is purely the interactive visual entry point.
  */
-export declare const BAZI_RESOURCE_URI = "ui://openephemeris/bazi";
+export declare const BAZI_RESOURCE_URI: string;
 export declare const BAZI_MIME_TYPE = "text/html;profile=mcp-app";
 /** Read the pre-built HTML bundle. Returns null if not yet built. */
 export declare function getBaziBundle(): string | null;

package/dist/tools/apps/bazi-app.js

@@ -20,6 +20,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { registerTool, SERVER_VERSION } from "../index.js";
+import { UI_RESOURCE_MIME_TYPE, uiResourceUri } from "./ui-resource.js";
 import { getActiveClient } from "../../backend/client.js";
 import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 // One BaZi component parser, shared with the specialized tools. The local copy
@@ -28,8 +29,8 @@ import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 import { parseBaziArgs, buildBaziConventionFields, CONVENTION_PROPERTIES } from "../specialized/bazi.js";
 import { RENDER_TOKEN_PROPERTY, renderTokenFromVisual, renderTokenHeaders } from "./_render-token.js";
 // ── Constants ─────────────────────────────────────────────────────────────────
-export const BAZI_RESOURCE_URI = "ui://openephemeris/bazi";
-export const BAZI_MIME_TYPE = "text/html;profile=mcp-app";
+export const BAZI_RESOURCE_URI = uiResourceUri("bazi");
+export const BAZI_MIME_TYPE = UI_RESOURCE_MIME_TYPE;
 const here = path.dirname(fileURLToPath(import.meta.url));
 const BUNDLE_PATHS = [
     path.resolve(here, "..", "..", "..", "dist", "ui", "bazi.html"),

package/dist/tools/apps/bi-wheel-app.d.ts

@@ -21,7 +21,7 @@
  * The payload cross_aspects array is capped at 30 tightest-orb aspects.
  */
 import { getActiveClient } from "../../backend/client.js";
-export declare const BI_WHEEL_RESOURCE_URI = "ui://openephemeris/bi-wheel";
+export declare const BI_WHEEL_RESOURCE_URI: string;
 export declare const BI_WHEEL_MIME_TYPE = "text/html;profile=mcp-app";
 /** Read the pre-built HTML bundle. Returns null if not yet built. */
 export declare function getBiWheelBundle(): string | null;

package/dist/tools/apps/bi-wheel-app.js

@@ -24,13 +24,14 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { registerTool, SERVER_VERSION } from "../index.js";
+import { UI_RESOURCE_MIME_TYPE, uiResourceUri } from "./ui-resource.js";
 import { getActiveClient } from "../../backend/client.js";
 import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 import { DATETIME_DESC, timezoneProperty, toDateTimeInputBody } from "../datetime.js";
 import { coordsFromArgsOrLocation } from "./_location-resolver.js";
 // ── Constants ─────────────────────────────────────────────────────────────────
-export const BI_WHEEL_RESOURCE_URI = "ui://openephemeris/bi-wheel";
-export const BI_WHEEL_MIME_TYPE = "text/html;profile=mcp-app";
+export const BI_WHEEL_RESOURCE_URI = uiResourceUri("bi-wheel");
+export const BI_WHEEL_MIME_TYPE = UI_RESOURCE_MIME_TYPE;
 const here = path.dirname(fileURLToPath(import.meta.url));
 const BUNDLE_PATH = path.resolve(here, "..", "..", "..", "dist", "ui", "bi-wheel.html");
 let cachedBiWheelBundle = null;

package/dist/tools/apps/bodygraph-app.d.ts

@@ -12,14 +12,17 @@
  * overlay SVG is returned inline by /human-design/transit-chart and
  * /human-design/composite (include_visual) rather than a separate render call.
  *
- * The bodygraph is rendered client-side from structured JSON — no SVG endpoint
- * is called, keeping latency at zero and the architecture consistent with
- * the chart-wheel-app approach.
+ * The bodygraph picture is the Go engine's SVG, rendered server-side
+ * (fetchGoBodygraphSVG, in parallel with the chart call; overlays inline as
+ * above) and returned as `_svg`.
+ * The iframe inlines that SVG and binds interactivity to its data-* attributes
+ * (packages/widget-ui/bodygraph/src/wire-go-svg.ts); it does not draw the
+ * graph itself.
  *
  * Also exports resource helpers (getBodygraphBundle, etc.) for use in
  * index.ts and server-sse.ts.
  */
-export declare const BODYGRAPH_RESOURCE_URI = "ui://openephemeris/bodygraph";
+export declare const BODYGRAPH_RESOURCE_URI: string;
 export declare const BODYGRAPH_MIME_TYPE = "text/html;profile=mcp-app";
 /** Read the pre-built HTML bundle. Returns null if not yet built. */
 export declare function getBodygraphBundle(): string | null;

package/dist/tools/apps/bodygraph-app.js

@@ -12,9 +12,12 @@
  * overlay SVG is returned inline by /human-design/transit-chart and
  * /human-design/composite (include_visual) rather than a separate render call.
  *
- * The bodygraph is rendered client-side from structured JSON — no SVG endpoint
- * is called, keeping latency at zero and the architecture consistent with
- * the chart-wheel-app approach.
+ * The bodygraph picture is the Go engine's SVG, rendered server-side
+ * (fetchGoBodygraphSVG, in parallel with the chart call; overlays inline as
+ * above) and returned as `_svg`.
+ * The iframe inlines that SVG and binds interactivity to its data-* attributes
+ * (packages/widget-ui/bodygraph/src/wire-go-svg.ts); it does not draw the
+ * graph itself.
  *
  * Also exports resource helpers (getBodygraphBundle, etc.) for use in
  * index.ts and server-sse.ts.
@@ -23,16 +26,17 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { registerTool, SERVER_VERSION } from "../index.js";
+import { UI_RESOURCE_MIME_TYPE, uiResourceUri } from "./ui-resource.js";
 import { getActiveClient, isBillingOrAuthError } from "../../backend/client.js";
 import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 import { localToUtcIsoHistorical } from "../datetime-historical.js";
 import { coordsFromArgsOrLocation } from "./_location-resolver.js";
 import { RENDER_TOKEN_PROPERTY, renderTokenFromSvg, renderTokenFromVisual, renderTokenHeaders, withoutRenderToken, } from "./_render-token.js";
 // ── Constants ─────────────────────────────────────────────────────────────
-export const BODYGRAPH_RESOURCE_URI = "ui://openephemeris/bodygraph";
+export const BODYGRAPH_RESOURCE_URI = uiResourceUri("bodygraph");
 // Appended to every model-visible HD tool description — trademark hygiene.
 const HD_DISCLAIMER = " Human Design was originated by Ra Uru Hu; OpenEphemeris is an independent calculation service, not affiliated with Jovian Archive.";
-export const BODYGRAPH_MIME_TYPE = "text/html;profile=mcp-app";
+export const BODYGRAPH_MIME_TYPE = UI_RESOURCE_MIME_TYPE;
 const here = path.dirname(fileURLToPath(import.meta.url));
 const BUNDLE_PATHS = [
     path.resolve(here, "..", "..", "..", "dist", "ui", "bodygraph.html"),
@@ -84,6 +88,10 @@ async function fetchGoBodygraphSVG(body, theme = "dark", view, renderToken) {
         // (handler_bodygraph.go) — only appended when the caller (the in-iframe
         // layout toggle) actually requests the mandala view.
         let qs = `format=svg&size=800&style=${theme}`;
+        // Planet columns stay ON (renderer default): they are the chart's
+        // activation list and are clickable in the iframe. The same variant serves
+        // inline AND fullscreen, so a display-mode switch never re-renders (the
+        // render-token waiver is 15 min / 12 uses, so a re-render is not always free).
         if (view?.layout)
             qs += `&layout=${encodeURIComponent(view.layout)}`;
         if (view?.rings !== undefined)

package/dist/tools/apps/chart-wheel-app.d.ts

@@ -15,7 +15,7 @@
  * Also exports resource helpers (getChartWheelBundle, etc.) for use in
  * index.ts and server-sse.ts.
  */
-export declare const CHART_WHEEL_RESOURCE_URI = "ui://openephemeris/chart-wheel";
+export declare const CHART_WHEEL_RESOURCE_URI: string;
 export declare const CHART_WHEEL_MIME_TYPE = "text/html;profile=mcp-app";
 /** Read the pre-built HTML bundle. Returns null if not yet built. */
 export declare function getChartWheelBundle(): string | null;

package/dist/tools/apps/chart-wheel-app.js

@@ -19,13 +19,14 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { registerTool, SERVER_VERSION } from "../index.js";
+import { UI_RESOURCE_MIME_TYPE, uiResourceUri } from "./ui-resource.js";
 import { getActiveClient } from "../../backend/client.js";
 import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 import { DATETIME_DESC, TIMEZONE_PROPERTY, toDateTimeInputBody } from "../datetime.js";
 import { coordsFromArgsOrLocation } from "./_location-resolver.js";
 // ── Constants ─────────────────────────────────────────────────────────────
-export const CHART_WHEEL_RESOURCE_URI = "ui://openephemeris/chart-wheel";
-export const CHART_WHEEL_MIME_TYPE = "text/html;profile=mcp-app";
+export const CHART_WHEEL_RESOURCE_URI = uiResourceUri("chart-wheel");
+export const CHART_WHEEL_MIME_TYPE = UI_RESOURCE_MIME_TYPE;
 // Bundle path: at runtime (compiled), __dirname = dist/tools/apps/
 //   so ../../../dist/ui/ = dist/ui/  ✓
 // In dev (tsx),            __dirname = src/tools/apps/

package/dist/tools/apps/moon-phase-app.d.ts

@@ -11,7 +11,7 @@
  * Also exports resource helpers (getMoonPhaseBundle, etc.) for use in
  * index.ts and server-sse.ts.
  */
-export declare const MOON_PHASE_RESOURCE_URI = "ui://openephemeris/moon-phase";
+export declare const MOON_PHASE_RESOURCE_URI: string;
 export declare const MOON_PHASE_MIME_TYPE = "text/html;profile=mcp-app";
 /** Read the pre-built HTML bundle. Returns null if not yet built. */
 export declare function getMoonPhaseBundle(): string | null;

package/dist/tools/apps/moon-phase-app.js

@@ -15,13 +15,14 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { registerTool, validateCoordinates, SERVER_VERSION } from "../index.js";
+import { UI_RESOURCE_MIME_TYPE, uiResourceUri } from "./ui-resource.js";
 import { getActiveClient, rethrowBillingOrAuth } from "../../backend/client.js";
 import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 import { TIMEZONE_PROPERTY } from "../datetime.js";
 import { localToUtcIsoHistorical } from "../datetime-historical.js";
 // ── Constants ─────────────────────────────────────────────────────────────────
-export const MOON_PHASE_RESOURCE_URI = "ui://openephemeris/moon-phase";
-export const MOON_PHASE_MIME_TYPE = "text/html;profile=mcp-app";
+export const MOON_PHASE_RESOURCE_URI = uiResourceUri("moon-phase");
+export const MOON_PHASE_MIME_TYPE = UI_RESOURCE_MIME_TYPE;
 const here = path.dirname(fileURLToPath(import.meta.url));
 const BUNDLE_PATHS = [
     path.resolve(here, "..", "..", "..", "dist", "ui", "moon-phase.html"),

package/dist/tools/apps/transit-timeline-app.d.ts

@@ -15,7 +15,7 @@
  * Also exports resource helpers (getTransitTimelineBundle, etc.) for use in
  * index.ts and server-sse.ts.
  */
-export declare const TRANSIT_TIMELINE_RESOURCE_URI = "ui://openephemeris/transit-timeline";
+export declare const TRANSIT_TIMELINE_RESOURCE_URI: string;
 export declare const TRANSIT_TIMELINE_MIME_TYPE = "text/html;profile=mcp-app";
 /** Read the pre-built HTML bundle. Returns null if not yet built. */
 export declare function getTransitTimelineBundle(): string | null;

package/dist/tools/apps/transit-timeline-app.js

@@ -19,12 +19,13 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { registerTool, validateRequired, SERVER_VERSION } from "../index.js";
+import { UI_RESOURCE_MIME_TYPE, uiResourceUri } from "./ui-resource.js";
 import { getActiveClient } from "../../backend/client.js";
 import { OUTPUT_SCHEMA_JSON } from "../output-schemas.js";
 import { DATETIME_DESC, WINDOW_DATE_DESC, timezoneProperty, toDateTimeInputBody } from "../datetime.js";
 // ── Constants ─────────────────────────────────────────────────────────────────
-export const TRANSIT_TIMELINE_RESOURCE_URI = "ui://openephemeris/transit-timeline";
-export const TRANSIT_TIMELINE_MIME_TYPE = "text/html;profile=mcp-app";
+export const TRANSIT_TIMELINE_RESOURCE_URI = uiResourceUri("transit-timeline");
+export const TRANSIT_TIMELINE_MIME_TYPE = UI_RESOURCE_MIME_TYPE;
 const here = path.dirname(fileURLToPath(import.meta.url));
 const BUNDLE_PATHS = [
     path.resolve(here, "..", "..", "..", "dist", "ui", "transit-timeline.html"),

package/dist/tools/apps/ui-resource.d.ts

@@ -0,0 +1,43 @@
+export declare const UI_RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
+/**
+ * Versioned resource URI: `ui://openephemeris/<slug>?v=<server version>`.
+ *
+ * ChatGPT caches a `ui://` resource per connector and never re-reads it for a
+ * URI it has seen — a deploy alone does not refresh the widget. Stamping the
+ * package version into the URI makes every release a new URI, so hosts fetch
+ * the new bundle on their own. Caveat: a widget change must ship with a
+ * version bump to bust the cache (same version ⇒ same URI).
+ *
+ * The SAME string is used in the tool `_meta` (ui.resourceUri and its aliases),
+ * in resources/list and in resources/read, on both transports.
+ */
+export declare function uiResourceUri(slug: string): string;
+/** The URI without its `?v=` query — what resources/read matches on. */
+export declare function uiResourceBase(uri: string): string;
+/**
+ * CSP the bundles actually need: none. Every bundle is a single self-contained
+ * HTML file (JS/CSS inlined, images and icons as data: URIs), and the apps talk
+ * to the host over postMessage only — no fetch, no remote script, style, image
+ * or font. Empty lists are the spec's secure default; declaring them explicitly
+ * documents that this is deliberate, not forgotten.
+ */
+export declare const UI_RESOURCE_CSP: {
+    connectDomains: string[];
+    resourceDomains: string[];
+};
+/**
+ * `_meta` for a `ui://` resource (resources/list entry and resources/read
+ * content item). Two wire forms, same values:
+ *
+ *   ui.*       — MCP Apps (SEP-1865) McpUiResourceMeta.
+ *   openai/*   — ChatGPT's aliases for the same fields.
+ *
+ * prefersBorder: true — the host draws the card border and background; the apps
+ * therefore paint no card, border or glow of their own (shared/tokens.css).
+ *
+ * ui.domain / openai/widgetDomain are deliberately NOT set: their format is
+ * host-specific (a hash subdomain on Claude, a derived *.oaiusercontent.com on
+ * ChatGPT) and a wrong value can stop the widget rendering. Omitted = the
+ * host's default sandbox origin, which is what every live render uses today.
+ */
+export declare function uiResourceMeta(widgetDescription: string): Record<string, unknown>;

package/dist/tools/apps/ui-resource.js

@@ -0,0 +1,66 @@
+/**
+ * ui-resource.ts — identity and `_meta` of the seven MCP App `ui://` resources.
+ *
+ * Imported by every `*-app.ts` (for its resource URI) and by ui-resources.ts
+ * (the list/read registry both transports serve). Kept free of app imports so
+ * the app modules can depend on it without a cycle.
+ */
+import { SERVER_VERSION } from "../index.js";
+export const UI_RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
+/**
+ * Versioned resource URI: `ui://openephemeris/<slug>?v=<server version>`.
+ *
+ * ChatGPT caches a `ui://` resource per connector and never re-reads it for a
+ * URI it has seen — a deploy alone does not refresh the widget. Stamping the
+ * package version into the URI makes every release a new URI, so hosts fetch
+ * the new bundle on their own. Caveat: a widget change must ship with a
+ * version bump to bust the cache (same version ⇒ same URI).
+ *
+ * The SAME string is used in the tool `_meta` (ui.resourceUri and its aliases),
+ * in resources/list and in resources/read, on both transports.
+ */
+export function uiResourceUri(slug) {
+    return `ui://openephemeris/${slug}?v=${SERVER_VERSION}`;
+}
+/** The URI without its `?v=` query — what resources/read matches on. */
+export function uiResourceBase(uri) {
+    const q = uri.indexOf("?");
+    return q === -1 ? uri : uri.slice(0, q);
+}
+/**
+ * CSP the bundles actually need: none. Every bundle is a single self-contained
+ * HTML file (JS/CSS inlined, images and icons as data: URIs), and the apps talk
+ * to the host over postMessage only — no fetch, no remote script, style, image
+ * or font. Empty lists are the spec's secure default; declaring them explicitly
+ * documents that this is deliberate, not forgotten.
+ */
+export const UI_RESOURCE_CSP = {
+    connectDomains: [],
+    resourceDomains: [],
+};
+/**
+ * `_meta` for a `ui://` resource (resources/list entry and resources/read
+ * content item). Two wire forms, same values:
+ *
+ *   ui.*       — MCP Apps (SEP-1865) McpUiResourceMeta.
+ *   openai/*   — ChatGPT's aliases for the same fields.
+ *
+ * prefersBorder: true — the host draws the card border and background; the apps
+ * therefore paint no card, border or glow of their own (shared/tokens.css).
+ *
+ * ui.domain / openai/widgetDomain are deliberately NOT set: their format is
+ * host-specific (a hash subdomain on Claude, a derived *.oaiusercontent.com on
+ * ChatGPT) and a wrong value can stop the widget rendering. Omitted = the
+ * host's default sandbox origin, which is what every live render uses today.
+ */
+export function uiResourceMeta(widgetDescription) {
+    return {
+        ui: {
+            prefersBorder: true,
+            csp: UI_RESOURCE_CSP,
+        },
+        "openai/widgetPrefersBorder": true,
+        "openai/widgetCSP": { connect_domains: [], resource_domains: [] },
+        "openai/widgetDescription": widgetDescription,
+    };
+}