@womp/mcp-ui 0.1.6 → 0.1.8

package/README.md

@@ -11,12 +11,14 @@ in a sandboxed iframe, pushing tool data in over postMessage.
 generate_image  ──► ui://womp/image-<version>.html   (280 KB) image card
 image_to_mesh   ──► ui://womp/mesh-<version>.html    (900 KB) 3D GLB viewer
 get_generation  ──► ui://womp/mesh-<version>.html    (copes with either)
-estimate_print  ──► ui://womp/print-<version>.html   (260 KB) configurator: re-quotes + add to cart
+estimate_print  ──► ui://womp/print-<version>.html   (321 KB) the print panel as a card: size, material, finish, colour, style, qty
 prepare_print   ──► ui://womp/print-<version>.html   (static receipt mode)
 add_to_cart     ──► ui://womp/cart-<version>.html    (260 KB) cart rows + checkout link-out
 view_cart       ──► ui://womp/cart-<version>.html    (self-fills thumbnails via app-callable view_cart)
 get_print_order ──► ui://womp/order-<version>.html   (258 KB) status chips, tracking, diff-charge strip
 list_print_orders ─► ui://womp/order-<version>.html
+create_upload   ──► ui://womp/upload-<version>.html  (266 KB) drop zone: the user's mesh file goes to the ticket URL from the chat
+get_upload      ──► ui://womp/upload-<version>.html  (app-callable — the card polls it)
 ```
 
 ## What it exports
@@ -30,6 +32,7 @@ const {
   PRINT_APP_URI, PRINT_APP_CSP, PRINT_APP_HTML,
   CART_APP_URI,  CART_APP_CSP,  CART_APP_HTML,
   ORDER_APP_URI, ORDER_APP_CSP, ORDER_APP_HTML,
+  UPLOAD_APP_URI, UPLOAD_APP_CSP, UPLOAD_APP_HTML,
   APP_MIME_TYPE,
 } = require("@womp/mcp-ui");
 ```
@@ -180,6 +183,84 @@ inline (360px) so they do not wall off the transcript — which made fullscreen
 useless until CSS started keying off `:root[data-display-mode="fullscreen"]`.
 **PiP is untested.**
 
+### The print card is the web print panel, compressed
+
+`src/print/` follows swan-frontend's `NewPrintingPanel` step for step — Size,
+Material (finish and colour controls inside the selection), Print style, then a
+review row with quantity and price — so a person who has printed on womp.com
+recognises it. Where the card differs, it is because MCP differs:
+
+- **Size is W/H/D in cm or inches, but scales uniformly.** The tool contract
+  is `longestSideCm`, so editing one axis rescales the other two and the
+  longest side is what gets sent. The panel's 60 × 60 × 40 cm ceiling blocks the
+  button here as it does there.
+- **Colour is a hex, snapped to Pantone.** The panel snaps a pick to the
+  nearest of 2390 Pantone coated shades and sends the code; MCP orders carry a
+  hex. The card snaps the same way (`src/print/pantone.ts`, CIEDE2000 like the
+  panel's `color-diff`) and sends the snapped shade's own hex, so both paths
+  print the same colour and show the same "Pantone 2386 C". The palette is
+  packed into `src/print/pantone-coated.ts` (28 KB) by
+  `scripts/gen-pantone.mjs <path to swan-frontend's PantoneCoatedColors.js>`;
+  regenerate it if the frontend's list changes. Colour never re-quotes — it
+  never changes the price.
+- **Hollow never orders.** Escape holes are placed in the editor, so choosing
+  Hollow shows its price and turns the button into "Continue on womp.com",
+  which calls `prepare_print` and opens the project. The backend refuses
+  `hollow: true` outright; the card never sends it.
+- **Gated Enterprise materials stay visible**, with a crown, behind a
+  disclosure. Tapping one keeps the current selection and shows the
+  contact-sales note (the backend's `contactUrl`) — the panel's dialog, flattened.
+- **Tool errors are rewritten for a person.** "resin-clear-tinted is a dyed
+  material — pass a color as a #rrggbb hex" is for the model; the card says
+  "Pick a colour for this material first."
+
+What it reads off `estimate_print` beyond the price rows: `material` (the
+catalog KEY it sent — the backend echoes it unchanged; echoing the priced id
+snapped Tinted clear back to Clear on every re-quote), `materialLabel`,
+`finish`, `color`, `repaired` / `nonManifold`, and a role-aware `materials`
+list with `swatchUrl`, `finishes`, `colorRequired` / `colorOptional`,
+`available` and `contactUrl`.
+
+**Layout trap that cost an hour:** a grid container's implicit `auto` track
+grows to its items' min-content, and a bare `<input type="number">` is ~150px
+wide intrinsically — three of them widened every row past the card's edge while
+the card itself stayed 360px. Every grid in the card is
+`grid-template-columns: minmax(0, 1fr)` and the inputs have `width: 0` as their
+flex basis. If a row overflows, look there first.
+
+The stub takes three switches for the states a default account never shows:
+`FAKE_ENTERPRISE=1` (Enterprise materials orderable), `FAKE_PRO=1` (hollow
+priced as available), `FAKE_REPAIRED=1` (the repaired / non-manifold callouts).
+
+### The upload card sends bytes from inside the iframe
+
+`src/upload/` exists because MCP has no client→server file channel and a chat
+host's sandbox usually cannot reach Womp — so a file the user had just attached
+to the chat could only reach the print pipeline via a womp.com page. The card
+is that page, in the conversation: drop zone + picker, XHR `PUT` of the raw file
+to the ticket URL swan-backend minted (`create_upload`), progress, the server's
+own refusal text on 4xx, 409/410 terminal. It never touches the model: the
+bytes go disk → API.
+
+Two things outside this repo make that PUT possible, and both fail as a bare
+network error inside the card if missing (which it turns into an "open the
+upload page instead" button rather than a dead end):
+
+- **`connectDomains` must name the API origin**, and the origin differs per
+  environment — so `bake-html.mjs` bakes `{}` for this card and swan-backend
+  completes the CSP with its own origin at read time. The dev stub does the
+  same with `http://localhost:3001`.
+- **The backend answers with open CORS on `/mcp/v1/uploads`** because a
+  sandboxed iframe's origin is opaque (`Origin: null`). The ticket in the URL is
+  the security boundary, not the origin.
+
+While pending the card polls the app-callable `get_upload`, so a file the agent
+pushed itself (`curl -T` from a shell that has it) flips the card to done
+instead of leaving a drop zone for a file that already landed. The dev stub
+(`dev/server.mjs`) carries `create_upload` / `get_upload` and a `PUT
+/mcp/v1/uploads/:token` sink with the GLB-magic sniff, so the refusal strip is
+reachable locally too.
+
 ## Development
 
 **Do not iterate through Claude.** A card change reaches a connector only after
@@ -212,7 +293,10 @@ It is deliberately faithful where being unfaithful would hide a bug:
 | **"built resource" mode** — the exact HTML `resources/read` returns, in a sandboxed opaque-origin iframe | an asset `vite-plugin-singlefile` failed to inline (blank card) |
 
 `FAKE_DURATION_MS=8000 yarn dev:mcp` lengthens a fake generation, so the
-running → polling → complete transition is worth watching.
+running → polling → complete transition is worth watching. The print stubs
+validate like the real tools (dyed material without a colour, Enterprise
+material, hollow intent, bad finish) so every refusal the card must render is
+reachable locally.
 
 **Keep the tab visible.** A backgrounded tab does not run
 `requestAnimationFrame` and clamps `setTimeout`, so auto-resize stops reporting

package/dist/index.d.ts

@@ -26,3 +26,7 @@ export declare const CART_APP_HTML: string;
 export declare const ORDER_APP_URI: string;
 export declare const ORDER_APP_CSP: AppCsp;
 export declare const ORDER_APP_HTML: string;
+
+export declare const UPLOAD_APP_URI: string;
+export declare const UPLOAD_APP_CSP: AppCsp;
+export declare const UPLOAD_APP_HTML: string;