@womp/openai-plugin 0.4.0 → 0.5.0

package/README.md

@@ -39,7 +39,7 @@ src/
 
 | Export | Purpose |
 |---|---|
-| `createServer({ backend, subject?, onError?, instructions?, liveViewOrigin?, linkOrigins? })` | the MCP server for one request |
+| `createServer({ backend, subject?, onError?, instructions?, liveViewOrigin?, linkOrigins?, wwwAuthenticate? })` | the MCP server for one request |
 | `WompBackend` | the contract the host implements |
 | `BackendRefusal` | an error whose message reaches the model as worded |
 | `CheckoutSession`, `CompleteCheckoutArgs` | ChatGPT's payment sheet: the session it takes, and what it hands `complete_checkout` |
@@ -50,6 +50,8 @@ server instructions, for tools the host registers itself. `liveViewOrigin` is
 the one origin the design card may frame, for a live view. `linkOrigins` are
 the origins of the web pages the cards open (checkout, an order's status, an
 account), which ChatGPT then opens without asking the user first.
+`wwwAuthenticate` is the host's OAuth challenge for a request with no valid
+sign-in.
 
 ## Contract
 
@@ -74,10 +76,10 @@ changes an earlier one.
 
 ### Plugin → model and cards
 
-- **Identity.** Every tool acts as `subject`. Tool arguments and client `_meta` are never read for identity. Without a subject every tool call fails.
+- **Identity.** Every tool acts as `subject`, the signed-in Womp account. Tool arguments and client `_meta` are never read for identity. Without a subject every tool call fails; with `wwwAuthenticate`, the failure carries that challenge in `_meta["mcp/www_authenticate"]`, so ChatGPT offers to link the account.
 - **Errors.** A `BackendRefusal` message reaches the model as is. Any other error is one generic failure, reported to `onError`.
 - **Tool metadata states facts.** Descriptions, input schemas and server instructions say what a tool does, never how the model should behave. Behaviour lives in `prompts/` and reaches the model in `load_scene_skill`'s result.
-- **Every tool** declares `ui.visibility`, explicit annotation hints, and `securitySchemes: noauth`. Tools only a card calls are `ui.visibility: ["app"]`.
+- **Every tool** declares `ui.visibility`, explicit annotation hints, and `securitySchemes: oauth2` with the `mcp:generate` scope. Tools only a card calls are `ui.visibility: ["app"]`.
 - **Card data** is the tool result's `structuredContent`, typed by the card's `data.ts`. Tools map backend types to it; a card never receives backend types. What only the card may see is in the result's `_meta`, typed by the same `data.ts`: a link that is a credential, and a quote or an order, which the model would otherwise draw as a card of its own.
 - **Cards** are MCP Apps resources (`text/html;profile=mcp-app`): one self-contained HTML file each, loading nothing from outside, with a `ui://` URI that changes with its content.
 

package/dist/index.d.ts

@@ -334,7 +334,13 @@ interface ServerOptions {
      * an https origin is left out.
      */
     linkOrigins?: string[];
+    /**
+     * The host's OAuth challenge, a `WWW-Authenticate` value, for a request whose sign-in is missing or not valid. With
+     * it and no subject, every tool call fails with the challenge in `_meta["mcp/www_authenticate"]`, which is what
+     * makes ChatGPT offer to link the account.
+     */
+    wwwAuthenticate?: string;
 }
-declare function createServer({ backend, subject, onError, instructions, liveViewOrigin, linkOrigins }: ServerOptions): McpServer;
+declare function createServer({ backend, subject, onError, instructions, liveViewOrigin, linkOrigins, wwwAuthenticate }: ServerOptions): McpServer;
 
 export { BackendRefusal, type CheckoutSession, type ClaimLink, type CompleteCheckoutArgs, type LiveView, type WompBackend, createServer };