@orchyn/mcp 1.13.0 → 1.14.0

package/dist/shared/tools.js

@@ -11,13 +11,36 @@ import { OrchynError } from "./orchyn.js";
 import { formatPaywallError, runVideoAnalysis, validatePostUrl } from "./video.js";
 import { ORCHYN_UI_TEMPLATE } from "./ui-template.js";
 /** Current MCP server version — bumped on every deploy for traceability. */
-export const MCP_SERVER_VERSION = "1.13.0";
+export const MCP_SERVER_VERSION = "1.14.0";
 /** MCP Apps extension identifier */
 const UI_EXTENSION = "io.modelcontextprotocol/ui";
 /** MIME type for MCP Apps HTML resources */
 const RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
 /** Single UI resource URI shared by all tools */
 const UI_RESOURCE_URI = "ui://orchyn/view";
+/**
+ * claude.ai requires `ui.domain` on the resource == sha256("<MCP endpoint
+ * URL>")[:32] + ".claudemcpcontent.com" — the iframe is only revealed on
+ * that dedicated sandbox origin. The endpoint is the worker's public origin
+ * + "/mcp". stdio runs have no public URL, so the field is omitted and the
+ * host falls back to its default per-conversation origin.
+ */
+async function computeAppDomain() {
+    const publicUrl = (process.env.PUBLIC_URL || "").trim().replace(/\/+$/, "");
+    if (!publicUrl)
+        return undefined;
+    try {
+        const endpoint = `${publicUrl}/mcp`;
+        const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(endpoint));
+        const hex = Array.from(new Uint8Array(digest))
+            .map((b) => b.toString(16).padStart(2, "0"))
+            .join("");
+        return `${hex.slice(0, 32)}.claudemcpcontent.com`;
+    }
+    catch {
+        return undefined;
+    }
+}
 /** Convert an arbitrary http(s) URL to a base64 MCP `image` data block. */
 async function fetchAsBase64Image(url, mimeType) {
     try {
@@ -87,9 +110,11 @@ async function toToolResult(proxy) {
     // JPEG thumbnails (HEIC already transcoded), so convert those URLs to
     // base64 data here — guaranteeing clients render a valid image.
     const imgBlocks = proxy.contentBlocks.filter((c) => c.type === "image");
-    const images = await Promise.all(imgBlocks.map((c) => c.url
+    // Skip image blocks whose base64 is empty (fetch failed) — clients reject
+    // them with "could not be processed: Error processing image".
+    const images = (await Promise.all(imgBlocks.map((c) => c.url
         ? fetchAsBase64Image(String(c.url), String(c.mimeType ?? "image/jpeg"))
-        : Promise.resolve({ type: "image", data: String(c.data ?? ""), mimeType: String(c.mimeType ?? "image/jpeg") })));
+        : Promise.resolve({ type: "image", data: String(c.data ?? ""), mimeType: String(c.mimeType ?? "image/jpeg") })))).filter((img) => img.type === "image" && img.data.length > 0);
     // The Rust backend embeds HTML cards directly in the text block
     // (type:"text", text:"<div>...</div>\n\n{json}"). We extract the HTML
     // prefix from the first text contentBlock and prepend it.
@@ -251,6 +276,7 @@ export function createMcpServer(makeClient) {
         if (apiUrl && apiUrl.trim()) {
             domains.push(apiUrl.trim().replace(/\/+$/, ""));
         }
+        const domain = await computeAppDomain();
         return {
             contents: [
                 {
@@ -259,9 +285,11 @@ export function createMcpServer(makeClient) {
                     text: ORCHYN_UI_TEMPLATE,
                     _meta: {
                         ui: {
+                            ...(domain ? { domain } : {}),
                             csp: {
                                 resourceDomains: domains,
                             },
+                            prefersBorder: false,
                         },
                     },
                 },
@@ -273,7 +301,7 @@ export function createMcpServer(makeClient) {
         description: "Analyze a social post (video, image, carousel/slideshow) from its link — " +
             "imports the media and runs AI analysis over the actual content (video frames, carousel images, caption). " +
             "Supports TikTok, Instagram, YouTube, X/Twitter, Douyin, Xiaohongshu and Bilibili. Returns the full analysis once finished. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Public post URL (TikTok/Instagram/YouTube/X, Douyin, Xiaohongshu or Bilibili)."),
@@ -305,11 +333,13 @@ export function createMcpServer(makeClient) {
             // The backend attaches `_inlineImages` as permanent orchyn public URLs
             // (re-hosted into storage, HEIC already transcoded to JPEG). The SDK's
             // ImageContent only accepts base64 `data`, so fetch each URL and encode it.
-            const images = await Promise.all((result.inlineImages ?? [])
+            // Skip image blocks whose base64 is empty (fetch failed) — clients
+            // reject them with "could not be processed: Error processing image".
+            const images = (await Promise.all((result.inlineImages ?? [])
                 .filter((img) => typeof img === "object" && img !== null)
                 .map((img) => "url" in img && img.url
                 ? fetchAsBase64Image(String(img.url), String(img.mimeType ?? "image/jpeg"))
-                : Promise.resolve({ type: "image", data: String(img.data ?? ""), mimeType: String(img.mimeType ?? "image/jpeg") })));
+                : Promise.resolve({ type: "image", data: String(img.data ?? ""), mimeType: String(img.mimeType ?? "image/jpeg") })))).filter((img) => img.type === "image" && img.data.length > 0);
             const textJson = JSON.stringify(proxied, null, 2);
             return {
                 content: [...images, { type: "text", text: `${htmlCard}\n\n${textJson}` }],
@@ -332,7 +362,7 @@ export function createMcpServer(makeClient) {
         description: "Fetch a social post's media from a TikTok, Instagram, YouTube, X/Twitter, Douyin, Xiaohongshu or Bilibili URL: " +
             "contentType (video/image/carousel/slideshow), title, caption, author, stats and direct media URLs. " +
             "Returns an inline thumbnail image. Consumes 1 orchyn credit. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Full public post URL."),
@@ -352,7 +382,7 @@ export function createMcpServer(makeClient) {
         description: "Discover recent posts (video, image, carousel, slideshow) for a niche on YouTube, TikTok, Instagram, Douyin, Xiaohongshu, X/Twitter or Bilibili. " +
             "Each post includes title/caption, thumbnailUrl, externalUrl, views/likes/comments and inline thumbnails (up to 4) so they show in chat. " +
             'Say "next" to paginate (offset), or "analyze the 2nd one" / "analyze all" for batch analysis. Consumes 2 orchyn credits. First use free per user.',
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             niche: z.string().describe("Niche/topic, e.g. 'fitness'."),
@@ -379,7 +409,7 @@ export function createMcpServer(makeClient) {
         description: "List recent posts by a creator handle (e.g. @zoundsapp) on TikTok, Instagram, YouTube, Douyin, Xiaohongshu, X/Twitter, Bilibili or LinkedIn (LinkedIn uses the profile public_id, e.g. 'billgates'). " +
             "Each post includes title/caption, thumbnailUrl, externalUrl, views/likes/comments and inline thumbnails (up to 4) so they show in chat. " +
             "Use this when Claude needs to pull more posts from the same account to spot a pattern, or to scan a whole profile. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             username: z.string().describe("Creator handle, e.g. 'zoundsapp' or '@zoundsapp'."),
@@ -404,7 +434,7 @@ export function createMcpServer(makeClient) {
         description: "Deep-dive a whole creator profile on TikTok, Instagram, YouTube, Douyin, Xiaohongshu, X/Twitter, Bilibili or LinkedIn: fetch recent posts, run multimodal AI on up to 3, " +
             "then synthesize a profile report — creator summary, niche, content themes, hook styles, strengths/weaknesses, " +
             "engagement patterns, audience insights, variation ideas, collaboration fit. Consumes 15 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             username: z.string().describe("Creator handle, e.g. 'zoundsapp'."),
@@ -429,7 +459,7 @@ export function createMcpServer(makeClient) {
         title: "Get Post Comments",
         description: "Fetch top comments for a post URL on TikTok, Instagram, YouTube, Douyin, X/Twitter, Bilibili or LinkedIn, plus keyword clusters from TikTok Analytics " +
             "when available — audience sentiment/audience-signal analysis. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Full public post URL (TikTok/Instagram/YouTube/Douyin/X/Bilibili/LinkedIn)."),
@@ -449,7 +479,7 @@ export function createMcpServer(makeClient) {
         title: "Search Creators",
         description: "Search creators by niche/keyword on TikTok, Instagram, Xiaohongshu, YouTube or Douyin — username, nickname, follower count, " +
             "signature, verified status. Use to find influencers to vet or analyze. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             keyword: z.string().describe("Niche/keyword, e.g. 'fitness' or a creator name."),
@@ -473,7 +503,7 @@ export function createMcpServer(makeClient) {
         title: "Get Similar Creators",
         description: "Find lookalike creators for a given handle — TikTok similar-user recommendations or Instagram " +
             "similar users. Useful for scaling: 'if this creator works, here are more like them'. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             username: z.string().describe("Seed creator handle, e.g. 'zoundsapp'."),
@@ -493,7 +523,7 @@ export function createMcpServer(makeClient) {
         title: "Discover Sounds",
         description: "Discover trending sounds/music for a keyword on TikTok or Instagram — the sound is a huge ranking " +
             "signal for TikTok virality. Returns title, artist, duration, play/cover URLs. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             keyword: z.string().describe("Niche/keyword, e.g. 'gym'."),
@@ -513,7 +543,7 @@ export function createMcpServer(makeClient) {
     server.registerTool("check_orchyn_credits", {
         title: "Check Orchyn Credits",
         description: "Check your orchyn credit balance, billing URL and pack size. No cost — call anytime to see remaining credits before running other tools.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z.object({}).strict(),
     }, async (_args, extra) => {
         const client = await makeClient(extra);
@@ -527,7 +557,7 @@ export function createMcpServer(makeClient) {
     server.registerTool("buy_orchyn_credits", {
         title: "Buy Orchyn Credits",
         description: "Buy an MCP credit pack via Stripe Checkout. Returns a secure checkout URL — open it in your browser to pay. Credits are added automatically after payment. No cost to call.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z.object({}).strict(),
     }, async (_args, extra) => {
         const client = await makeClient(extra);
@@ -543,7 +573,7 @@ export function createMcpServer(makeClient) {
         description: "Import a social post URL AND understand it with multimodal AI over the actual video/images: " +
             "summary, hook strength, viral triggers, format breakdown and variation ideas. Includes the thumbnail. " +
             "Supports TikTok, Instagram, YouTube, X/Twitter, Douyin, Xiaohongshu and Bilibili. Consumes 6 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Full public post URL (TikTok/Instagram/YouTube/X/Douyin/Xiaohongshu/Bilibili)."),

package/dist/shared/ui-template.js

@@ -214,6 +214,7 @@ body{font-family:system-ui,-apple-system,'Segoe UI',sans-serif;background:var(--
       clearTimeout(loadingTimer);
       clearTimeout(fallbackTimer);
       render(d.params);
+      setTimeout(reportSize,50);
     }
     if(d.method==="ui/notifications/tool-input-partial"){
       currentTool=d.params&&d.params.name?d.params.name:"";
@@ -269,14 +270,40 @@ body{font-family:system-ui,-apple-system,'Segoe UI',sans-serif;background:var(--
       +'</div></div>';
   },3000);
 
-  // MCP Apps handshake
+  // MCP Apps handshake.
+  // Claude's McpUiInitializeRequestSchema requires appInfo, appCapabilities
+  // and protocolVersion (legacy hosts read capabilities/clientInfo), so send
+  // both shapes. Critically, ui/notifications/initialized must be sent
+  // UNCONDITIONALLY — Claude keeps the widget iframe reserved-but-hidden
+  // until it receives that notification, so a reply we don't recognize must
+  // never deadlock the handshake.
+  var initializedSent=false;
+  function sendInitialized(){
+    if(initializedSent)return;
+    initializedSent=true;
+    window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/initialized",params:{}},"*");
+  }
   send("ui/initialize",{
     protocolVersion:"2026-01-26",
+    appInfo:{name:"orchyn-view",version:"2.0.0"},
+    appCapabilities:{availableDisplayModes:["inline"]},
     capabilities:{},
     clientInfo:{name:"orchyn-view",version:"2.0.0"}
-  }).then(function(){
-    window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/initialized",params:{}},"*");
-  }).catch(function(){});
+  }).then(sendInitialized).catch(sendInitialized);
+  // Unconditional fallback: never wait on a reply shape we don't recognize.
+  setTimeout(sendInitialized, 500);
+
+  // Report content size so flexible hosts (Claude) size the iframe correctly.
+  // Params MUST be real numbers — claude.ai throws on null/missing width.
+  function reportSize(){
+    try{
+      var h=document.documentElement.scrollHeight||document.body.scrollHeight||400;
+      var w=document.documentElement.scrollWidth||document.body.scrollWidth||400;
+      window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/size-changed",params:{height:h,width:w}},"*");
+    }catch(e){}
+  }
+  window.addEventListener("resize",reportSize);
+  setTimeout(reportSize,600);
 
   // ─── Helpers ───
   function esc(s){return String(s||"").replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;");}
@@ -563,6 +590,7 @@ body{font-family:system-ui,-apple-system,'Segoe UI',sans-serif;background:var(--
     if(d.post||d.platform){app.innerHTML=postCard(d.post||d,true);return;}
     // Fallback
     app.innerHTML='<div class="json-block fade-in">'+esc(JSON.stringify(d,null,2))+"</div>";
+    setTimeout(reportSize,50);
   }
 
   function updateProgress(params){

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchyn/mcp",
-  "version": "1.13.0",
+  "version": "1.14.0",
   "description": "MCP server for orchyn - fetch, discover and understand TikTok/Instagram/YouTube/X/LinkedIn posts with AI (media metadata, niche discovery, hook & viral analysis)",
   "type": "module",
   "main": "dist/index.js",