@orchyn/mcp 1.13.0 → 1.15.0

package/dist/shared/tools.js

@@ -11,29 +11,34 @@ import { OrchynError } from "./orchyn.js";
 import { formatPaywallError, runVideoAnalysis, validatePostUrl } from "./video.js";
 import { ORCHYN_UI_TEMPLATE } from "./ui-template.js";
 /** Current MCP server version — bumped on every deploy for traceability. */
-export const MCP_SERVER_VERSION = "1.13.0";
+export const MCP_SERVER_VERSION = "1.15.0";
 /** MCP Apps extension identifier */
 const UI_EXTENSION = "io.modelcontextprotocol/ui";
 /** MIME type for MCP Apps HTML resources */
 const RESOURCE_MIME_TYPE = "text/html;profile=mcp-app";
 /** Single UI resource URI shared by all tools */
 const UI_RESOURCE_URI = "ui://orchyn/view";
-/** Convert an arbitrary http(s) URL to a base64 MCP `image` data block. */
-async function fetchAsBase64Image(url, mimeType) {
+/**
+ * claude.ai requires `ui.domain` on the resource == sha256("<MCP endpoint
+ * URL>")[:32] + ".claudemcpcontent.com" — the iframe is only revealed on
+ * that dedicated sandbox origin. The endpoint is the worker's public origin
+ * + "/mcp". stdio runs have no public URL, so the field is omitted and the
+ * host falls back to its default per-conversation origin.
+ */
+async function computeAppDomain() {
+    const publicUrl = (process.env.PUBLIC_URL || "").trim().replace(/\/+$/, "");
+    if (!publicUrl)
+        return undefined;
     try {
-        const res = await fetch(url, { signal: AbortSignal.timeout(12_000) });
-        if (!res.ok)
-            return { type: "image", data: "", mimeType };
-        const buf = await res.arrayBuffer();
-        const bytes = new Uint8Array(buf);
-        let bin = "";
-        for (let i = 0; i < bytes.length; i += 0x8000) {
-            bin += String.fromCharCode(...bytes.subarray(i, i + 0x8000));
-        }
-        return { type: "image", data: btoa(bin), mimeType };
+        const endpoint = `${publicUrl}/mcp`;
+        const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(endpoint));
+        const hex = Array.from(new Uint8Array(digest))
+            .map((b) => b.toString(16).padStart(2, "0"))
+            .join("");
+        return `${hex.slice(0, 32)}.claudemcpcontent.com`;
     }
     catch {
-        return { type: "image", data: "", mimeType };
+        return undefined;
     }
 }
 /**
@@ -82,17 +87,12 @@ function proxyUrls(obj) {
     return obj;
 }
 async function toToolResult(proxy) {
-    // The MCP SDK's ImageContent only accepts `data` (base64). The orchyn
-    // backend now emits `url` image blocks pointing at permanent, re-hosted
-    // JPEG thumbnails (HEIC already transcoded), so convert those URLs to
-    // base64 data here — guaranteeing clients render a valid image.
-    const imgBlocks = proxy.contentBlocks.filter((c) => c.type === "image");
-    const images = await Promise.all(imgBlocks.map((c) => c.url
-        ? fetchAsBase64Image(String(c.url), String(c.mimeType ?? "image/jpeg"))
-        : Promise.resolve({ type: "image", data: String(c.data ?? ""), mimeType: String(c.mimeType ?? "image/jpeg") })));
-    // The Rust backend embeds HTML cards directly in the text block
-    // (type:"text", text:"<div>...</div>\n\n{json}"). We extract the HTML
-    // prefix from the first text contentBlock and prepend it.
+    // MCP Apps views (ChatGPT & Claude) render the interactive HTML card, which
+    // already embeds all thumbnails/videos. Claude's Apps bridge rejects a tool
+    // result that mixes raw `image` blocks with an app view ("could not be
+    // processed: Error processing image" + blank iframe), so we intentionally
+    // drop the standalone base64 image blocks here and keep only the text block
+    // carrying the HTML card + structured JSON.
     const textBlock = proxy.contentBlocks.find((c) => c.type === "text");
     const rawText = textBlock ? String(textBlock.text ?? "") : "";
     const htmlPrefix = rawText.startsWith("<")
@@ -106,7 +106,7 @@ async function toToolResult(proxy) {
     const proxiedHtml = htmlPrefix ? proxyImageUrlsInHtml(htmlPrefix) : "";
     const text = proxiedHtml ? `${proxiedHtml}\n\n${textJson}` : textJson;
     return {
-        content: [...images, { type: "text", text }],
+        content: [{ type: "text", text }],
         structuredContent: proxied ?? {},
     };
 }
@@ -251,6 +251,7 @@ export function createMcpServer(makeClient) {
         if (apiUrl && apiUrl.trim()) {
             domains.push(apiUrl.trim().replace(/\/+$/, ""));
         }
+        const domain = await computeAppDomain();
         return {
             contents: [
                 {
@@ -259,9 +260,11 @@ export function createMcpServer(makeClient) {
                     text: ORCHYN_UI_TEMPLATE,
                     _meta: {
                         ui: {
+                            ...(domain ? { domain } : {}),
                             csp: {
                                 resourceDomains: domains,
                             },
+                            prefersBorder: false,
                         },
                     },
                 },
@@ -273,7 +276,7 @@ export function createMcpServer(makeClient) {
         description: "Analyze a social post (video, image, carousel/slideshow) from its link — " +
             "imports the media and runs AI analysis over the actual content (video frames, carousel images, caption). " +
             "Supports TikTok, Instagram, YouTube, X/Twitter, Douyin, Xiaohongshu and Bilibili. Returns the full analysis once finished. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Public post URL (TikTok/Instagram/YouTube/X, Douyin, Xiaohongshu or Bilibili)."),
@@ -302,17 +305,14 @@ export function createMcpServer(makeClient) {
             const creatorHandle = String(post.creatorHandle ?? "");
             const title = String(post.title ?? post.caption ?? "");
             const htmlCard = buildAnalysisHtmlCard(proxied, thumbnailUrl, platform, creatorHandle, title);
-            // The backend attaches `_inlineImages` as permanent orchyn public URLs
-            // (re-hosted into storage, HEIC already transcoded to JPEG). The SDK's
-            // ImageContent only accepts base64 `data`, so fetch each URL and encode it.
-            const images = await Promise.all((result.inlineImages ?? [])
-                .filter((img) => typeof img === "object" && img !== null)
-                .map((img) => "url" in img && img.url
-                ? fetchAsBase64Image(String(img.url), String(img.mimeType ?? "image/jpeg"))
-                : Promise.resolve({ type: "image", data: String(img.data ?? ""), mimeType: String(img.mimeType ?? "image/jpeg") })));
+            // The interactive HTML card above already embeds the thumbnail + full
+            // video, so no standalone base64 `image` blocks are emitted. Claude's Apps
+            // bridge rejects raw image blocks mixed with an app view ("could not be
+            // processed: Error processing image" + blank iframe), so we keep only the
+            // text block carrying the card + structured JSON.
             const textJson = JSON.stringify(proxied, null, 2);
             return {
-                content: [...images, { type: "text", text: `${htmlCard}\n\n${textJson}` }],
+                content: [{ type: "text", text: `${htmlCard}\n\n${textJson}` }],
                 structuredContent: proxied,
             };
         }
@@ -332,7 +332,7 @@ export function createMcpServer(makeClient) {
         description: "Fetch a social post's media from a TikTok, Instagram, YouTube, X/Twitter, Douyin, Xiaohongshu or Bilibili URL: " +
             "contentType (video/image/carousel/slideshow), title, caption, author, stats and direct media URLs. " +
             "Returns an inline thumbnail image. Consumes 1 orchyn credit. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Full public post URL."),
@@ -352,7 +352,7 @@ export function createMcpServer(makeClient) {
         description: "Discover recent posts (video, image, carousel, slideshow) for a niche on YouTube, TikTok, Instagram, Douyin, Xiaohongshu, X/Twitter or Bilibili. " +
             "Each post includes title/caption, thumbnailUrl, externalUrl, views/likes/comments and inline thumbnails (up to 4) so they show in chat. " +
             'Say "next" to paginate (offset), or "analyze the 2nd one" / "analyze all" for batch analysis. Consumes 2 orchyn credits. First use free per user.',
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             niche: z.string().describe("Niche/topic, e.g. 'fitness'."),
@@ -379,7 +379,7 @@ export function createMcpServer(makeClient) {
         description: "List recent posts by a creator handle (e.g. @zoundsapp) on TikTok, Instagram, YouTube, Douyin, Xiaohongshu, X/Twitter, Bilibili or LinkedIn (LinkedIn uses the profile public_id, e.g. 'billgates'). " +
             "Each post includes title/caption, thumbnailUrl, externalUrl, views/likes/comments and inline thumbnails (up to 4) so they show in chat. " +
             "Use this when Claude needs to pull more posts from the same account to spot a pattern, or to scan a whole profile. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             username: z.string().describe("Creator handle, e.g. 'zoundsapp' or '@zoundsapp'."),
@@ -404,7 +404,7 @@ export function createMcpServer(makeClient) {
         description: "Deep-dive a whole creator profile on TikTok, Instagram, YouTube, Douyin, Xiaohongshu, X/Twitter, Bilibili or LinkedIn: fetch recent posts, run multimodal AI on up to 3, " +
             "then synthesize a profile report — creator summary, niche, content themes, hook styles, strengths/weaknesses, " +
             "engagement patterns, audience insights, variation ideas, collaboration fit. Consumes 15 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             username: z.string().describe("Creator handle, e.g. 'zoundsapp'."),
@@ -429,7 +429,7 @@ export function createMcpServer(makeClient) {
         title: "Get Post Comments",
         description: "Fetch top comments for a post URL on TikTok, Instagram, YouTube, Douyin, X/Twitter, Bilibili or LinkedIn, plus keyword clusters from TikTok Analytics " +
             "when available — audience sentiment/audience-signal analysis. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Full public post URL (TikTok/Instagram/YouTube/Douyin/X/Bilibili/LinkedIn)."),
@@ -449,7 +449,7 @@ export function createMcpServer(makeClient) {
         title: "Search Creators",
         description: "Search creators by niche/keyword on TikTok, Instagram, Xiaohongshu, YouTube or Douyin — username, nickname, follower count, " +
             "signature, verified status. Use to find influencers to vet or analyze. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             keyword: z.string().describe("Niche/keyword, e.g. 'fitness' or a creator name."),
@@ -473,7 +473,7 @@ export function createMcpServer(makeClient) {
         title: "Get Similar Creators",
         description: "Find lookalike creators for a given handle — TikTok similar-user recommendations or Instagram " +
             "similar users. Useful for scaling: 'if this creator works, here are more like them'. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             username: z.string().describe("Seed creator handle, e.g. 'zoundsapp'."),
@@ -493,7 +493,7 @@ export function createMcpServer(makeClient) {
         title: "Discover Sounds",
         description: "Discover trending sounds/music for a keyword on TikTok or Instagram — the sound is a huge ranking " +
             "signal for TikTok virality. Returns title, artist, duration, play/cover URLs. Consumes 2 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             keyword: z.string().describe("Niche/keyword, e.g. 'gym'."),
@@ -513,7 +513,7 @@ export function createMcpServer(makeClient) {
     server.registerTool("check_orchyn_credits", {
         title: "Check Orchyn Credits",
         description: "Check your orchyn credit balance, billing URL and pack size. No cost — call anytime to see remaining credits before running other tools.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z.object({}).strict(),
     }, async (_args, extra) => {
         const client = await makeClient(extra);
@@ -527,7 +527,7 @@ export function createMcpServer(makeClient) {
     server.registerTool("buy_orchyn_credits", {
         title: "Buy Orchyn Credits",
         description: "Buy an MCP credit pack via Stripe Checkout. Returns a secure checkout URL — open it in your browser to pay. Credits are added automatically after payment. No cost to call.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z.object({}).strict(),
     }, async (_args, extra) => {
         const client = await makeClient(extra);
@@ -543,7 +543,7 @@ export function createMcpServer(makeClient) {
         description: "Import a social post URL AND understand it with multimodal AI over the actual video/images: " +
             "summary, hook strength, viral triggers, format breakdown and variation ideas. Includes the thumbnail. " +
             "Supports TikTok, Instagram, YouTube, X/Twitter, Douyin, Xiaohongshu and Bilibili. Consumes 6 orchyn credits. First use free per user.",
-        _meta: { ui: { resourceUri: UI_RESOURCE_URI } },
+        _meta: { ui: { resourceUri: UI_RESOURCE_URI }, "ui/resourceUri": UI_RESOURCE_URI },
         inputSchema: z
             .object({
             url: z.string().describe("Full public post URL (TikTok/Instagram/YouTube/X/Douyin/Xiaohongshu/Bilibili)."),

package/dist/shared/ui-template.js

@@ -214,6 +214,7 @@ body{font-family:system-ui,-apple-system,'Segoe UI',sans-serif;background:var(--
       clearTimeout(loadingTimer);
       clearTimeout(fallbackTimer);
       render(d.params);
+      setTimeout(reportSize,50);
     }
     if(d.method==="ui/notifications/tool-input-partial"){
       currentTool=d.params&&d.params.name?d.params.name:"";
@@ -269,14 +270,40 @@ body{font-family:system-ui,-apple-system,'Segoe UI',sans-serif;background:var(--
       +'</div></div>';
   },3000);
 
-  // MCP Apps handshake
+  // MCP Apps handshake.
+  // Claude's McpUiInitializeRequestSchema requires appInfo, appCapabilities
+  // and protocolVersion (legacy hosts read capabilities/clientInfo), so send
+  // both shapes. Critically, ui/notifications/initialized must be sent
+  // UNCONDITIONALLY — Claude keeps the widget iframe reserved-but-hidden
+  // until it receives that notification, so a reply we don't recognize must
+  // never deadlock the handshake.
+  var initializedSent=false;
+  function sendInitialized(){
+    if(initializedSent)return;
+    initializedSent=true;
+    window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/initialized",params:{}},"*");
+  }
   send("ui/initialize",{
     protocolVersion:"2026-01-26",
+    appInfo:{name:"orchyn-view",version:"2.0.0"},
+    appCapabilities:{availableDisplayModes:["inline"]},
     capabilities:{},
     clientInfo:{name:"orchyn-view",version:"2.0.0"}
-  }).then(function(){
-    window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/initialized",params:{}},"*");
-  }).catch(function(){});
+  }).then(sendInitialized).catch(sendInitialized);
+  // Unconditional fallback: never wait on a reply shape we don't recognize.
+  setTimeout(sendInitialized, 500);
+
+  // Report content size so flexible hosts (Claude) size the iframe correctly.
+  // Params MUST be real numbers — claude.ai throws on null/missing width.
+  function reportSize(){
+    try{
+      var h=document.documentElement.scrollHeight||document.body.scrollHeight||400;
+      var w=document.documentElement.scrollWidth||document.body.scrollWidth||400;
+      window.parent.postMessage({jsonrpc:"2.0",method:"ui/notifications/size-changed",params:{height:h,width:w}},"*");
+    }catch(e){}
+  }
+  window.addEventListener("resize",reportSize);
+  setTimeout(reportSize,600);
 
   // ─── Helpers ───
   function esc(s){return String(s||"").replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;");}
@@ -563,6 +590,7 @@ body{font-family:system-ui,-apple-system,'Segoe UI',sans-serif;background:var(--
     if(d.post||d.platform){app.innerHTML=postCard(d.post||d,true);return;}
     // Fallback
     app.innerHTML='<div class="json-block fade-in">'+esc(JSON.stringify(d,null,2))+"</div>";
+    setTimeout(reportSize,50);
   }
 
   function updateProgress(params){

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orchyn/mcp",
-  "version": "1.13.0",
+  "version": "1.15.0",
   "description": "MCP server for orchyn - fetch, discover and understand TikTok/Instagram/YouTube/X/LinkedIn posts with AI (media metadata, niche discovery, hook & viral analysis)",
   "type": "module",
   "main": "dist/index.js",