drafted 1.17.17 → 1.18.0

package/mcp/active-project-store.mjs

@@ -1,81 +0,0 @@
-/**
- * Active-project persistence for the stdio MCP.
- *
- * The active project lives only in the in-memory sessionStates Map, so a
- * `system restart mode=mcp` / skill-edit pass that re-spawns the stdio MCP
- * wipes it — the recurring "active project keeps resetting, re-open it" churn.
- * Persisting it lets the long-lived stdio process rehydrate transparently after
- * a restart.
- *
- * Keyed by SERVER URL + cwd so two concurrent same-machine agent sessions (each
- * its own stdio MCP, same launch config) don't clobber each other's active
- * project. The server is part of the key because project and org ids are only
- * meaningful within one server's DATABASE: this repo registers both a prod
- * (`https://drafted.live`) and a local-dev (`http://localhost:3477`) stdio MCP,
- * and with a cwd-only key the local MCP's project+boundOrgId were rehydrated by
- * the prod MCP at boot — which pinned the prod session's working org to an org
- * id that exists only in the local dev DB (`get_org` reported a workingOrg with
- * name:null that was in no membership, and every project-less call failed with
- * `not a member of org "<local-uuid>"`). Cross-database state must never share a
- * key. Only the stdio process persists here; HTTP/remote user sessions are keyed
- * by a real Drafted session id and never call into this store.
- *
- * Side-effect-free on import (no network, no eager writes) so it can be unit
- * tested against the real code without booting the MCP server.
- */
-import { readFileSync, writeFileSync, mkdirSync } from 'fs';
-import { join, dirname } from 'path';
-import { homedir } from 'os';
-
-const DEFAULT_FILE = process.env.DRAFTED_MCP_STATE_FILE || join(homedir(), '.drafted', 'mcp-state.json');
-
-function defaultCwd() {
-  try { return process.cwd(); } catch { return '__default__'; }
-}
-
-// serverUrl first: a URL never contains "|", so the composite key is unambiguous.
-function stateKey(cwd, serverUrl) {
-  return serverUrl ? `${serverUrl}|${cwd}` : cwd;
-}
-
-export function loadPersistedProject({ file = DEFAULT_FILE, cwd = defaultCwd(), serverUrl = '' } = {}) {
-  try {
-    const all = JSON.parse(readFileSync(file, 'utf8'));
-    // Pre-composite-key entries (bare cwd) are NOT read back: they carry no record of
-    // which server minted their ids, and adopting one is exactly the cross-DB bleed
-    // above. Worst case the agent re-opens its project once.
-    const e = all && all[stateKey(cwd, serverUrl)];
-    if (e && e.activeProjectId) {
-      return {
-        activeProjectId: e.activeProjectId,
-        activeProjectMeta: e.activeProjectMeta || null,
-        boundOrgId: e.boundOrgId || null,
-      };
-    }
-  } catch { /* no state file yet / unreadable — start fresh */ }
-  return null;
-}
-
-export function savePersistedProject(entry, { file = DEFAULT_FILE, cwd = defaultCwd(), serverUrl = '' } = {}) {
-  try {
-    let all = {};
-    try { all = JSON.parse(readFileSync(file, 'utf8')) || {}; } catch { /* recreate */ }
-    const key = stateKey(cwd, serverUrl);
-    if (key !== cwd) delete all[cwd]; // drop the un-namespaced legacy entry for this cwd
-    if (entry && entry.activeProjectId) {
-      all[key] = {
-        activeProjectId: entry.activeProjectId,
-        activeProjectMeta: entry.activeProjectMeta || null,
-        boundOrgId: entry.boundOrgId || null,
-      };
-    } else {
-      delete all[key];
-    }
-    mkdirSync(dirname(file), { recursive: true });
-    writeFileSync(file, JSON.stringify(all), { mode: 0o600 });
-    return true;
-  } catch {
-    // Best-effort; persistence is an optimization, never block a tool on it.
-    return false;
-  }
-}

package/mcp/gates.mjs

@@ -1,124 +0,0 @@
-// Pure gate logic for the Drafted compounding harness.
-//
-// These helpers are intentionally side-effect free (no `api()`, no network, no
-// module state) so they can be unit tested in isolation. mcp/server.mjs imports
-// them and wires the decisions into the tool handlers + per-session getState().
-//
-// See docs/plans/compounding-harness.md and the Drafted "gates-checklist" frame.
-
-// One combined per-project budget for the auto-injected priming set:
-// attached-skill bodies + project anchor bodies + the active layer's rules.
-// Single source of truth lives in src/shared so the server-side deposit caps
-// enforce the identical limit. Re-exported here for the MCP gate helpers.
-import { PROJECT_CONTEXT_BUDGET_CHARS, selectWithinBudget } from '../src/shared/gate-budget.mjs';
-export { PROJECT_CONTEXT_BUDGET_CHARS, selectWithinBudget };
-
-// ── Per-session gate flags (reset every MCP session) ──────────────────────────
-
-export function createGateState() {
-  return { wikiSearched: false, skillSearched: false, templateSearched: false };
-}
-
-// kind: 'wiki' | 'skill' | 'template'
-export function markSearched(gateState, kind) {
-  if (kind === 'wiki') gateState.wikiSearched = true;
-  else if (kind === 'skill') gateState.skillSearched = true;
-  else if (kind === 'template') gateState.templateSearched = true;
-  return gateState;
-}
-
-// ── Enforce gates (create chain). Return an error string if blocked, else null ─
-
-export function g1Block(gateState, wikiIndex) {
-  if (gateState.wikiSearched) return null;
-  let msg =
-    'G1: search the org wiki before reading or editing anything. ' +
-    'Call fs(search, path="/wiki", query="<relevant terms>") first, then retry. ' +
-    'More knowledge = less searching — start by drawing on what the org already knows.';
-  if (wikiIndex) msg += `\n\nWiki index (what exists to search):\n${wikiIndex}`;
-  return msg;
-}
-
-export function g2Block(gateState) {
-  if (gateState.skillSearched) return null;
-  return (
-    'G2: search for prior-art skills before creating one. ' +
-    'Call fs(search, path="/skills", query="<topic>") first — if a close match exists, improve it ' +
-    '(/drafted:improve-skill) instead of duplicating — then retry skill(action="add").'
-  );
-}
-
-export function g3Block(gateState) {
-  const missing = [];
-  if (!gateState.wikiSearched) missing.push('fs(search, path="/wiki")');
-  if (!gateState.skillSearched) missing.push('fs(search, path="/skills")');
-  if (!gateState.templateSearched) missing.push('fs(ls, path="/skills")');
-  if (missing.length === 0) return null;
-  return (
-    `G3: search before creating a project. Run ${missing.join(', ')} first ` +
-    '(reuse existing knowledge, skills, and templates), then retry project(action="create").'
-  );
-}
-
-// ── Per-project context budget (auto-inject set) ──────────────────────────────
-
-function itemChars(it) {
-  if (typeof it === 'number') return it;
-  if (typeof it === 'string') return it.length;
-  if (it && typeof it === 'object') {
-    if (typeof it.chars === 'number') return it.chars;
-    if (it.content != null) return String(it.content).length;
-  }
-  return 0;
-}
-
-export function sumChars(items) {
-  if (!Array.isArray(items)) return 0;
-  return items.reduce((total, it) => total + itemChars(it), 0);
-}
-
-export function budgetRemaining(currentTotal, budget = PROJECT_CONTEXT_BUDGET_CHARS) {
-  return Math.max(0, budget - currentTotal);
-}
-
-export function wouldExceedBudget(currentTotal, addChars, budget = PROJECT_CONTEXT_BUDGET_CHARS) {
-  return currentTotal + addChars > budget;
-}
-
-export function budgetError(currentTotal, addChars, label, budget = PROJECT_CONTEXT_BUDGET_CHARS) {
-  const remaining = budgetRemaining(currentTotal, budget);
-  return (
-    `Per-project context budget exceeded: ${label} needs ${addChars} chars but only ${remaining} ` +
-    `of ${budget} remain. Tighten existing attached skills / anchors / layer rules first ` +
-    `(see /drafted:improve-project-harness).`
-  );
-}
-
-// ── G6 layer-rule default detection ───────────────────────────────────────────
-
-// A layer prompt is "default" (skip G6 inject) when it is empty or byte-identical
-// to the template's default prompt for that layer key.
-export function isLayerPromptDefault(layerPrompt, templateDefaultPrompt) {
-  const p = (layerPrompt ?? '').trim();
-  if (p === '') return true;
-  const d = (templateDefaultPrompt ?? '').trim();
-  return d !== '' && p === d;
-}
-
-export function shouldInjectLayerPrompt(layerPrompt, templateDefaultPrompt) {
-  return !isLayerPromptDefault(layerPrompt, templateDefaultPrompt);
-}
-
-// ── Wiki index formatting (bounded map injected with the G1 block) ────────────
-
-export function formatWikiIndex(pages, max = 50) {
-  if (!Array.isArray(pages) || pages.length === 0) return '(wiki is empty — no pages yet)';
-  const lines = pages.slice(0, max).map((p) => {
-    const path = typeof p === 'string' ? p : p.path ?? p.slug ?? '';
-    const title = typeof p === 'object' && p && p.title ? ` — ${p.title}` : '';
-    return `  ${path}${title}`;
-  });
-  const more = pages.length > max ? `\n  …and ${pages.length - max} more` : '';
-  return lines.join('\n') + more;
-}
-

package/mcp/test-file-path-text.mjs

@@ -1,58 +0,0 @@
-/**
- * Regression for textFromLocalFile() — the `file_path` text seam used by
- * fs(write) on /wiki and /skills.
- *
- *   node mcp/test-file-path-text.mjs
- *
- * Why this exists: /projects uploads bytes (base64 + contentType), /wiki and
- * /skills take markdown text. Routing a file down the wrong seam stores
- * mojibake that only surfaces when someone reads the page back, so the binary
- * guard below is the load-bearing assertion, not a nicety.
- */
-import assert from 'node:assert/strict';
-import { mkdtempSync, writeFileSync, mkdirSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { textFromLocalFile } from './server.mjs';
-
-const dir = mkdtempSync(join(tmpdir(), 'drafted-filepath-'));
-
-// Plain markdown round-trips byte-for-byte.
-const md = join(dir, 'page.md');
-const body = '# Title\n\nBody with a UTF-8 em dash — and an accent é.\n';
-writeFileSync(md, body, 'utf8');
-assert.equal(textFromLocalFile(md), body);
-
-// Multi-byte characters survive — a latin1 read would mangle these.
-assert.ok(textFromLocalFile(md).includes('—'));
-assert.ok(textFromLocalFile(md).includes('é'));
-
-// Empty file returns '' rather than throwing. The caller decides: both write
-// sites treat falsy text as "no content supplied" and error with guidance.
-const empty = join(dir, 'empty.md');
-writeFileSync(empty, '');
-assert.equal(textFromLocalFile(empty), '');
-
-// Binary is refused. A PNG header contains NUL bytes.
-const png = join(dir, 'shot.png');
-writeFileSync(png, Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00]));
-assert.throws(() => textFromLocalFile(png), /looks binary/);
-
-// Directories are refused with a clear message, not an EISDIR stack trace.
-const sub = join(dir, 'nested');
-mkdirSync(sub);
-assert.throws(() => textFromLocalFile(sub), /is a directory/);
-
-// Missing files name the path the caller passed, not the resolved one.
-assert.throws(() => textFromLocalFile(join(dir, 'nope.md')), /file not found/);
-
-// Relative paths resolve against cwd rather than being read blindly.
-assert.throws(() => textFromLocalFile('definitely-not-here-xyz.md'), /file not found/);
-
-console.log('file_path text seam ok — utf8 preserved, binary and dirs refused');
-
-// Importing server.mjs opens the MCP WebSocket at module scope, which pins the
-// event loop open forever. mcp/test-org-guards.mjs only exits because it
-// finishes in ~176ms — before the socket connects — so it passes on a race
-// rather than by design. Exit explicitly instead of inheriting that luck.
-process.exit(0);

package/mcp/test-org-guards.mjs

@@ -1,172 +0,0 @@
-// Regression check for the MCP org-ambiguity policy (DRAFT-36 "one rule").
-// Run: `node mcp/test-org-guards.mjs`. No framework — asserts the single pure
-// decision core that the org guard delegates to, for BOTH creates and forks.
-import assert from 'node:assert/strict';
-import { mkdtempSync } from 'node:fs';
-import { join } from 'node:path';
-import { tmpdir } from 'node:os';
-import { projectlessMutationNeedsOrg, boundOrgRejected, receiptOrg, splitOrgScope, stripUrlOrigin } from './server.mjs';
-import { loadPersistedProject, savePersistedProject } from './active-project-store.mjs';
-
-// One rule governs create AND fork (a fork is a create). A write proceeds when its
-// org is a real root — explicit org=, a bound/active project, or a single-org user's
-// only org. It refuses to GUESS only when the user is multi-org with nothing bound.
-assert.equal(projectlessMutationNeedsOrg({ explicitOrg: 'ee', orgCount: 5 }), false, 'explicit org → allow');
-assert.equal(projectlessMutationNeedsOrg({ boundOrgId: 'causeway', orgCount: 5 }), false, 'bound project → allow (a real root, not the cursor)');
-assert.equal(projectlessMutationNeedsOrg({ activeProjectId: 'p1', orgCount: 5 }), false, 'active project → allow');
-assert.equal(projectlessMutationNeedsOrg({ orgCount: 1 }), false, 'single org → allow');
-
-// A remote session is NOT a root. Its session org is the org the connection INHERITED
-// (the user's default), not one anybody chose — that inheritance wrote a Beoflow-bound
-// agent's wiki page into Personal. Multi-org remote must name its org like anyone else;
-// single-org remote stays frictionless (covered by the orgCount:1 case above).
-assert.equal(projectlessMutationNeedsOrg({ isRemote: true, orgCount: 5 }), true, 'remote + multi-org → BLOCK (its session org is inherited, not chosen)');
-assert.equal(projectlessMutationNeedsOrg({ isRemote: true, orgCount: 1 }), false, 'remote + single org → allow');
-assert.equal(projectlessMutationNeedsOrg({ orgCount: 0 }), false, 'unknown membership → allow (never block a legit write)');
-assert.equal(projectlessMutationNeedsOrg({ orgCount: 3 }), true, 'multi-org, nothing bound → BLOCK (refuse to guess)');
-
-// The xcode-build incident state: multi-org + a bound project sticky from an
-// earlier, unrelated project(open). Under Reading A a fork is NOT hard-blocked —
-// it lands in the active project's org (a real root) and the response RECEIPT names
-// that org, so the fork is visible instead of silent. Create and fork agree here by
-// design (one rule); the fix for the surprise is the receipt, not a block.
-const incident = { orgCount: 3, boundOrgId: 'causeway', activeProjectId: 'p1' };
-assert.equal(projectlessMutationNeedsOrg(incident), false, 'incident state: fork allowed into the bound org — awareness comes from the receipt (Reading A)');
-
-// The genuinely ambiguous case still errors for a fork, exactly as for a create:
-assert.equal(projectlessMutationNeedsOrg({ orgCount: 3 }), true, 'multi-org fork with nothing bound → BLOCK before any copy is created');
-
-// ── Persisted stdio state must not cross DATABASES ────────────────────────────
-// The 2026-07-31 incident: this repo registers a prod stdio MCP (drafted.live) and a
-// local-dev one (localhost:3477) that run in the SAME cwd. Keyed by cwd alone, the
-// local MCP's activeProject + boundOrgId were rehydrated by the prod MCP at boot, so
-// the prod session addressed every request to an org id that exists only in the local
-// dev DB: get_org reported `workingOrg {id: <local-uuid>, name: null}` in no membership
-// list, and project-less calls failed `not a member of org "<local-uuid>"`.
-const file = join(mkdtempSync(join(tmpdir(), 'drafted-state-')), 'mcp-state.json');
-const cwd = '/Users/x/GitHub/drafted.live';
-const PROD = 'https://drafted.live';
-const LOCAL = 'http://localhost:3477';
-
-savePersistedProject(
-  { activeProjectId: 'local-project', boundOrgId: 'b111302a-local-db-only' },
-  { file, cwd, serverUrl: LOCAL }
-);
-assert.equal(
-  loadPersistedProject({ file, cwd, serverUrl: PROD }),
-  null,
-  'prod MCP must NOT rehydrate the local dev MCP state saved in the same cwd'
-);
-assert.equal(
-  loadPersistedProject({ file, cwd, serverUrl: LOCAL })?.boundOrgId,
-  'b111302a-local-db-only',
-  'same server + same cwd still rehydrates (the feature this persistence exists for)'
-);
-
-savePersistedProject({ activeProjectId: 'prod-project', boundOrgId: 'org-prod' }, { file, cwd, serverUrl: PROD });
-assert.equal(loadPersistedProject({ file, cwd, serverUrl: PROD })?.activeProjectId, 'prod-project');
-assert.equal(
-  loadPersistedProject({ file, cwd, serverUrl: LOCAL })?.activeProjectId,
-  'local-project',
-  'the two servers keep independent entries for one cwd'
-);
-
-// A pre-fix (bare-cwd) entry carries no record of which server minted its ids, so it is
-// never adopted — that entry IS the poisoned state.
-savePersistedProject({ activeProjectId: 'legacy', boundOrgId: 'b111302a-local-db-only' }, { file, cwd });
-assert.equal(loadPersistedProject({ file, cwd, serverUrl: PROD })?.activeProjectId, 'prod-project',
-  'a legacy un-namespaced entry never leaks into a server-scoped read');
-
-// ── A non-member working org can never stay the silent default ────────────────
-const stale = 'b111302a-937c-489b-8cec-a422c853ce85';
-assert.equal(
-  boundOrgRejected({ message: `not a member of org "${stale}"`, boundOrgId: stale }),
-  true,
-  'server rejected the org WE addressed the request to → drop it and retry unaddressed'
-);
-assert.equal(
-  boundOrgRejected({ message: `not a member of org "${stale}"`, boundOrgId: stale, hasExplicitOrg: true }),
-  false,
-  'an explicit org= is the CALLER\'s address — surface the error, never silently drop it'
-);
-assert.equal(
-  boundOrgRejected({ message: 'not a member of org "Drafted"', boundOrgId: stale }),
-  false,
-  'a rejection naming a DIFFERENT org is not ours to heal'
-);
-assert.equal(boundOrgRejected({ message: 'Project not found', boundOrgId: stale }), false, 'unrelated error → no heal');
-assert.equal(boundOrgRejected({ message: `not a member of org "${stale}"` }), false, 'nothing bound → nothing to drop');
-
-// ── receiptOrg: the mutation receipt must name where the write LANDED ─────────
-// Regression for the sibling of the foreign-org bug: a UUID-addressed page
-// self-derives its org server-side, so echoing the session's working org made
-// `org:` disagree with the (correct) `url:` on a cross-org edit.
-{
-  const ORGS = [
-    { id: 'org-a', name: 'Alpha' },
-    { id: 'org-b', name: 'Bravo' },
-  ];
-  const SESSION = { id: 'org-a', name: 'Alpha' };
-
-  // resource lives in the session's own org → session context, unchanged
-  assert.deepEqual(
-    receiptOrg({ resourceOrgId: 'org-a', sessionOrg: SESSION, orgList: ORGS }),
-    SESSION,
-    'same-org write should echo the session org',
-  );
-
-  // response carries no org (path-addressed) → fall back to session context
-  assert.deepEqual(
-    receiptOrg({ resourceOrgId: null, sessionOrg: SESSION, orgList: ORGS }),
-    SESSION,
-    'no resource org should fall back to the session org',
-  );
-
-  // THE BUG: resource lives elsewhere → must name the resource's org, not the session's
-  assert.deepEqual(
-    receiptOrg({ resourceOrgId: 'org-b', sessionOrg: SESSION, orgList: ORGS }),
-    { id: 'org-b', name: 'Bravo' },
-    'cross-org write must echo the org the write landed in',
-  );
-
-  // resource org not in the membership list → still name it, honestly, rather
-  // than silently substituting the session org
-  assert.deepEqual(
-    receiptOrg({ resourceOrgId: 'org-z', sessionOrg: SESSION, orgList: ORGS }),
-    { id: 'org-z', name: null },
-    'unknown resource org should be named with a null name, not swapped out',
-  );
-
-  // no session org at all (unbound) and a resource org present
-  assert.deepEqual(
-    receiptOrg({ resourceOrgId: 'org-b', sessionOrg: null, orgList: ORGS }),
-    { id: 'org-b', name: 'Bravo' },
-    'unbound session should still name the resource org',
-  );
-}
-
-// Shape A grammar: org is the top folder of the filesystem (/o/<org>/<root>/...).
-// The org segment is stripped for the root handlers and carried as the per-request
-// scope; bare roots stay accepted (backward compat, session working org).
-assert.deepEqual(splitOrgScope('/o/acme/wiki/engineering/authz.md'), { path: '/wiki/engineering/authz.md', org: 'acme' }, 'org-scoped wiki path strips to the bare root + org');
-assert.deepEqual(splitOrgScope('/o/acme/projects/design/beoflow/wireframes/x.html'), { path: '/projects/design/beoflow/wireframes/x.html', org: 'acme' }, 'org-scoped project path strips to the bare root + org');
-assert.deepEqual(splitOrgScope('/o/acme'), { path: '/', org: 'acme' }, 'ls /o/<org> lists that org\'s roots');
-assert.deepEqual(splitOrgScope('/o/acme/'), { path: '/', org: 'acme' }, 'trailing slash on the org root is harmless');
-assert.deepEqual(splitOrgScope('/o/acme%20brand/skills'), { path: '/skills', org: 'acme brand' }, 'org segment is URL-decoded');
-assert.deepEqual(splitOrgScope('/wiki/engineering'), { path: '/wiki/engineering', org: null }, 'bare root paths pass through untouched');
-assert.deepEqual(splitOrgScope('/projects/x/y/z.html'), { path: '/projects/x/y/z.html', org: null }, 'bare project paths pass through untouched');
-assert.ok(splitOrgScope('/o/').error, 'a bare /o/ is an invalid org-scoped path');
-assert.ok(splitOrgScope('/o/').error?.includes('expected /o/<org>/<root>'), 'error names the expected grammar');
-
-// Full share URLs (Q2): the URL's pathname IS the fs path — stripping the origin must
-// leave an addressable path, and non-URL inputs pass through untouched.
-assert.equal(stripUrlOrigin('https://drafted.live/o/acme/wiki/engineering/authz.md'), '/o/acme/wiki/engineering/authz.md', 'full URL strips to its pathname');
-assert.equal(stripUrlOrigin('https://drafted.live/o/acme/projects/beoflow/designs/pricing/hero.html?x=1'), '/o/acme/projects/beoflow/designs/pricing/hero.html', 'URL query params are dropped with the origin');
-assert.equal(stripUrlOrigin('/o/acme/wiki/x'), '/o/acme/wiki/x', 'plain paths pass through untouched');
-assert.equal(stripUrlOrigin('not a url'), 'not a url', 'non-URL input passes through');
-assert.equal(stripUrlOrigin('/f/00000000-0000-0000-0000-000000000000'), '/f/00000000-0000-0000-0000-000000000000', '/f/ frame links pass through');
-
-console.log('org-guard policy OK');
-// Importing server.mjs builds the stdio MCP singleton, which opens a WS reconnect
-// loop that keeps the event loop alive. Assertions are done — exit deterministically.
-process.exit(0);

package/mcp/widgets/canvas-overview.html

@@ -1,229 +0,0 @@
-<style>
-  :root {
-    --bg: #fafafa;
-    --card: #fff;
-    --border: #e5e7eb;
-    --muted: #6b7280;
-    --text: #1a1a2e;
-    --accent: #533afd;
-    --accent-light: #ede9fe;
-  }
-  * { box-sizing: border-box; margin: 0; padding: 0; }
-  html, body { height: 100%; }
-  body {
-    font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-    background: var(--bg);
-    color: var(--text);
-    padding: 16px 18px;
-  }
-  .header {
-    display: flex;
-    justify-content: space-between;
-    align-items: baseline;
-    margin-bottom: 14px;
-  }
-  .header .title { font-size: 14px; font-weight: 600; }
-  .header .meta { font-size: 12px; color: var(--muted); }
-  .header a {
-    color: var(--accent);
-    text-decoration: none;
-    font-weight: 500;
-    font-size: 12px;
-    margin-left: 12px;
-  }
-  .header a:hover { text-decoration: underline; }
-
-  .layer {
-    background: var(--card);
-    border: 1px solid var(--border);
-    border-radius: 10px;
-    padding: 12px 14px;
-    margin-bottom: 10px;
-  }
-  .layer h3 {
-    font-size: 12px;
-    font-weight: 600;
-    color: var(--muted);
-    text-transform: uppercase;
-    letter-spacing: 0.04em;
-    margin-bottom: 8px;
-    display: flex;
-    justify-content: space-between;
-  }
-  .layer h3 .count {
-    background: var(--accent-light);
-    color: var(--accent);
-    padding: 1px 8px;
-    border-radius: 999px;
-    font-size: 10px;
-  }
-  .frames {
-    display: flex;
-    flex-wrap: wrap;
-    gap: 6px;
-  }
-  .frame {
-    background: var(--bg);
-    border: 1px solid var(--border);
-    border-radius: 6px;
-    padding: 6px 10px;
-    font-size: 12px;
-    color: var(--text);
-    text-decoration: none;
-    display: inline-flex;
-    align-items: center;
-    gap: 6px;
-    transition: border-color 0.15s, color 0.15s;
-  }
-  .frame:hover {
-    border-color: var(--accent);
-    color: var(--accent);
-  }
-  .frame .lane {
-    color: var(--muted);
-    font-size: 11px;
-  }
-  .empty {
-    text-align: center;
-    color: var(--muted);
-    font-size: 13px;
-    padding: 32px;
-  }
-  .project {
-    background: var(--card);
-    border: 1px solid var(--border);
-    border-radius: 10px;
-    padding: 12px 14px;
-    margin-bottom: 8px;
-    display: flex;
-    justify-content: space-between;
-    align-items: center;
-    text-decoration: none;
-    color: inherit;
-    transition: border-color 0.15s;
-  }
-  .project:hover { border-color: var(--accent); }
-  .project .name { font-weight: 500; font-size: 14px; }
-  .project .desc { font-size: 12px; color: var(--muted); margin-top: 2px; }
-  .project .badge {
-    font-size: 11px;
-    background: var(--accent-light);
-    color: var(--accent);
-    padding: 2px 8px;
-    border-radius: 999px;
-  }
-</style>
-
-<div class="header">
-  <div>
-    <div class="title" id="title">Loading…</div>
-    <div class="meta" id="subtitle"></div>
-  </div>
-  <a id="open" href="#" target="_blank" rel="noopener" hidden>Open in canvas →</a>
-</div>
-<div id="root"></div>
-
-<script>
-  function escapeHtml(s) {
-    return String(s).replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
-  }
-
-  // Derive the Drafted server origin from payload URLs (frameUrl, canvasUrl) so the
-  // widget deep-links correctly on local installs and hosted servers alike — never
-  // hardcode https://drafted.live (breaks localhost/self-hosted deployments).
-  function serverOrigin(sc) {
-    const candidates = [
-      sc.canvasUrl, sc.serverUrl,
-      ...(Array.isArray(sc.projects) ? sc.projects.map(p => p.canvasUrl).filter(Boolean) : []),
-      ...(Array.isArray(sc.projects) ? sc.projects.map(p => p.frameUrl).filter(Boolean) : []),
-      ...(Array.isArray(sc.entries) ? sc.entries.map(e => e.frameUrl).filter(Boolean) : []),
-    ];
-    for (const u of candidates) {
-      try { return new URL(u).origin; } catch { /* keep looking */ }
-    }
-    return 'https://drafted.live';
-  }
-
-  function renderProjects(projects, activeId, origin) {
-    if (!projects?.length) return '<div class="empty">No projects yet. Use project(action="create") to start one.</div>';
-    return projects.slice(0, 30).map(p => {
-      const isActive = p.id === activeId;
-      const url = p.slug ? `${origin}/project/${escapeHtml(p.slug)}` : '#';
-      return `
-        <a class="project" href="${url}" target="_blank" rel="noopener">
-          <div>
-            <div class="name">${escapeHtml(p.name || p.slug || 'Untitled')}</div>
-            ${p.description ? `<div class="desc">${escapeHtml(p.description)}</div>` : ''}
-          </div>
-          ${isActive ? '<span class="badge">active</span>' : ''}
-        </a>
-      `;
-    }).join('');
-  }
-
-  function renderLayers(byLayer) {
-    if (!byLayer || !Object.keys(byLayer).length) return '<div class="empty">No frames in this view.</div>';
-    return Object.entries(byLayer).map(([layer, frames]) => `
-      <div class="layer">
-        <h3>${escapeHtml(layer)} <span class="count">${frames.length}</span></h3>
-        <div class="frames">
-          ${frames.slice(0, 24).map(f => `
-            <a class="frame" href="${escapeHtml(f.frameUrl || '#')}" target="_blank" rel="noopener">
-              <span>${escapeHtml(f.label || f.filename || f.path || '?')}</span>
-              ${f.lane && f.lane !== 'default' ? `<span class="lane">${escapeHtml(f.lane)}</span>` : ''}
-            </a>
-          `).join('')}
-        </div>
-      </div>
-    `).join('');
-  }
-
-  function render(payload) {
-    const sc = payload?.structuredContent || {};
-    const root = document.getElementById('root');
-
-    // project(action="list") shape
-    if (Array.isArray(sc.projects)) {
-      document.getElementById('title').textContent = `${sc.projects.length} project${sc.projects.length === 1 ? '' : 's'}`;
-      document.getElementById('subtitle').textContent = sc.activeProject ? 'One active' : 'None active — use project(action="open") to switch';
-      root.innerHTML = renderProjects(sc.projects, sc.activeProject, serverOrigin(sc));
-      return;
-    }
-
-    // ls shape
-    if (sc.byLayer || sc.entries) {
-      const byLayer = sc.byLayer || groupByLayer(sc.entries || []);
-      const total = Object.values(byLayer).reduce((sum, arr) => sum + arr.length, 0);
-      document.getElementById('title').textContent = sc.project || 'Project canvas';
-      document.getElementById('subtitle').textContent = `${total} frame${total === 1 ? '' : 's'} · ${Object.keys(byLayer).length} layer${Object.keys(byLayer).length === 1 ? '' : 's'}`;
-      if (sc.canvasUrl) {
-        const link = document.getElementById('open');
-        link.href = sc.canvasUrl;
-        link.hidden = false;
-      }
-      root.innerHTML = renderLayers(byLayer);
-      return;
-    }
-
-    root.innerHTML = '<div class="empty">No data to display.</div>';
-  }
-
-  function groupByLayer(entries) {
-    const out = {};
-    for (const e of entries) {
-      const layer = e.layer || 'unsorted';
-      (out[layer] ??= []).push(e);
-    }
-    return out;
-  }
-
-  window.addEventListener('message', (event) => {
-    const msg = event.data;
-    if (!msg || typeof msg !== 'object') return;
-    if (msg.method === 'ui/notifications/tool-result' && msg.params?.result) {
-      render(msg.params.result);
-    }
-  });
-
-  if (window.openai?.toolResult) render(window.openai.toolResult);
-</script>