relic-mcp 0.9.0 → 0.11.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
     {
       "name": "relic",
       "description": "Publish a file from your machine as an encrypted, shareable link. The agent encrypts locally, uploads only ciphertext, and hands back a URL whose fragment holds the key, so the service stores something it cannot read.",
-      "version": "0.9.0",
+      "version": "0.11.0",
       "source": "./",
       "author": {
         "name": "The Bushido Collective",
@@ -21,6 +21,6 @@
     }
   ],
   "metadata": {
-    "version": "0.9.0"
+    "version": "0.11.0"
   }
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "relic",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Publish a file from your machine as an encrypted, shareable link. The agent encrypts locally, uploads only ciphertext, and hands back a URL whose fragment holds the key, so the service stores something it cannot read.",
   "mcpServers": "./mcp-servers.json",
   "author": {

package/README.md

@@ -31,9 +31,12 @@ For any client that takes a JSON config:
 4. Uploads **only ciphertext**, straight to object storage under a signed URL.
    It does not pass through the Relic service.
 5. Tells the service four things: a coarse renderer class from an eight-value
-   list, this client's name, the ciphertext's byte length, and the title,
-   which defaults to the filename and is stored in the clear. Not the
-   mimetype, not the contents.
+   list, this client's name, the ciphertext's byte length, and the title, which
+   defaults to the filename and is stored in the clear. By default, it also
+   renders a 1200x630 cover image of the file's first screen in local headless
+   Chrome and uploads it unencrypted via `POST /api/relics/{id}/cover` for link
+   preview cards (pass `cover: false` to decline). Not the mimetype, not the
+   contents.
 6. Records the relic's id, key, and publish token locally, in a 0600 file
    under your user config directory, so the relic can be republished from
    this machine later. See [Republishing](#republishing). The service never
@@ -50,7 +53,10 @@ because handing you a usable link is the point. **So the key enters your
 model's context and your session transcript on every publish.** Zero-knowledge
 holds against the Relic operator. It does not hold against your model provider
 or whoever stores your transcripts. That is structural, not a defect awaiting
-a fix.
+a fix. The cover is plaintext pixels of the first screen, stored server-side
+and served to anyone holding the link without its fragment, including unfurl
+services and their caches; `cover: false` declines; republishing with it clears;
+takedown deletes it.
 
 ## Republishing
 
@@ -143,18 +149,37 @@ fetched from the network and executed.
 Because a local client is otherwise opaque, it ships as **readable source
 rather than a compiled binary**. `dist/relic-mcp.js` is a single unminified
 file and it is exactly what runs; the TypeScript it was built from is in the
-same package. Releases carry npm provenance, a cryptographic attestation
-binding the tarball to a specific commit and workflow.
+same package. The cover rendering page assets in `dist/cover/` contain the
+unminified cover bundle built from `@relic/viewer`, with vendored React, pdfjs,
+and sucrase for offline document rendering in local Chrome. Releases carry npm
+provenance, a cryptographic attestation binding the tarball to a specific commit
+and workflow.
+
+### Cover rendering and local Chrome requirement
+
+By default, publishing or republishing renders a 1200x630 cover image in an
+installed headless browser (Google Chrome, Chromium, or Microsoft Edge) over
+Chrome DevTools Protocol (CDP) pipes. No browser is downloaded by this package.
+If no browser is installed or if `RELIC_CHROME_PATH=none`, publishing still
+succeeds and reports the cover as skipped with the reason, falling back to
+Relic's generic preview card.
+
+The cover renderer bundle lives in `dist/cover/`, served to Chrome over a
+virtual origin (`https://cover.relic.invalid`) with strict network containment
+flags (`--host-resolver-rules=MAP * ~NOTFOUND`,
+`--proxy-server=http://proxy.relic.invalid:1`,
+`--webrtc-ip-handling-policy=disable_non_proxied_udp`, `--disable-quic`) so no
+relic plaintext leaves the machine during rendering.
 
 ## Tools
 
 | Tool | Input | Notes |
 |---|---|---|
-| `relic_publish` | `path`, optional `filename`, `title`, `ttl_days` | A filesystem path. Inline content is deliberately not accepted, so the plaintext never joins the key in your transcript. A relic carries a plaintext title defaulting to the filename and stored by the service in the clear for link previews; pass `""` to publish without one. A relic is kept until it is deleted; `ttl_days` (an integer, 1 to 3650) gives it a lifetime. Reports the relic as version 1. |
+| `relic_publish` | `path`, optional `filename`, `title`, `cover`, `ttl_days` | A filesystem path. Inline content is deliberately not accepted, so the plaintext never joins the key in your transcript. A relic carries a plaintext title defaulting to the filename and stored by the service in the clear for link previews; pass `""` to publish without one. By default, renders a 1200x630 cover image of the first screen in local headless Chrome and uploads it unencrypted for link preview cards; pass `cover: false` to decline. A relic is kept until it is deleted; `ttl_days` (an integer, 1 to 3650) gives it a lifetime. Reports the relic as version 1. |
 | `relic_lookup_source` | `path` | Reads local state to find whether this machine already published that file, and returns the exact `relic_republish` call. Calls no server. |
 | `relic_list` | optional `limit`, `include_expired`, `verify`, `refresh` | Every relic this machine published, newest first. The only tool that enumerates: lookup answers only from the file a relic came from. A name this machine never recorded is recovered by decrypting the relic's own envelope in one 64 KB range request, or comes back `null` with the reason. A relic the service will not serve is listed with which of removed, expired, exhausted, or unreachable it is. Each row carries the share URL, fragment included, so each row is a credential. Reaching the service spends one of a relic's finite opens; recovered names are cached, so a repeat listing spends none. |
 | `relic_show` | `relic_id`, optional `include_content` | One relic in detail, including how many versions the service holds against how many this machine recorded, and with `include_content` the current decrypted content. Read it before republishing anything you did not just write: republish replaces what the link serves, so without the read-back the edit is blind. Content that is not valid UTF-8 is reported as size and type rather than mangled text. |
-| `relic_republish` | `relic_id`, `path`, optional `filename`, `title`, `ttl_days` | Publishes a new version under the same key, so the share URL is unchanged. Replaces the plaintext title (defaults to the new filename; pass `""` to remove it). Works only on the machine holding that relic's key and publish token; a taken-down relic can never be revived. |
+| `relic_republish` | `relic_id`, `path`, optional `filename`, `title`, `cover`, `ttl_days` | Publishes a new version under the same key, so the share URL is unchanged. Replaces the plaintext title (defaults to the new filename; pass `""` to remove it). Replaces the cover image with a newly rendered cover, or clears it if `cover: false` is passed. Works only on the machine holding that relic's key and publish token; a taken-down relic can never be revived. |
 | `relic_read_comments` | `relic_id` | Returns the relic's comments oldest first, decrypted locally, with the author and a count of any that would not decrypt. Works only on the machine that published. |
 | `relic_comment` | `relic_id`, `body`, optional `display_name` | Leaves a comment, encrypted on this machine, authorized by the publish token and attributed as `publisher`. Body caps at 4096 bytes of UTF-8. |
 | `relic_describe_client` | none | Explains the encryption path. Reads nothing, sends nothing. |
@@ -171,6 +196,8 @@ binding the tarball to a specific commit and workflow.
 | `RELIC_MCP_HTTP` | `1` to serve Streamable HTTP instead of stdio. |
 | `RELIC_MCP_PORT`, `RELIC_MCP_HOST` | HTTP bind. Defaults to `127.0.0.1:7333`. |
 | `RELIC_MCP_ALLOWED_ORIGINS` | Comma-separated `Origin` allowlist for HTTP. |
+| `RELIC_CHROME_PATH` | Explicit path to Chrome, Chromium, or Edge binary for cover rendering. Set to `none` or `disabled` to skip covers. |
+| `RELIC_FFMPEG_PATH` | Path to ffmpeg binary for generating video frame and audio waveform/artwork cover images. |
 
 ## Protocol
 

package/dist/cover/cover.css

@@ -0,0 +1,273 @@
+/* Cover layout and style overrides for Open Graph preview cards. */
+
+html, body {
+  margin: 0;
+  padding: 0;
+  width: 600px;
+  height: 315px;
+  overflow: hidden;
+  background: var(--ground);
+}
+
+.cv {
+  --ground: #f1f2f0;
+  --surface: #fbfbfa;
+  --ink: #16191a;
+  --ink-soft: #5a6163;
+  --rule: #d2d5d2;
+  --rule-strong: #b3b8b4;
+  --patina: #1f6b64;
+  --patina-ink: #0f3b37;
+  --oxide: #8c4a2f;
+
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  width: 600px;
+  height: 315px;
+  overflow: hidden;
+  background: var(--ground);
+  color: var(--ink);
+  font-family: var(--sans);
+  font-size: 16px;
+  line-height: 1.55;
+  color-scheme: light;
+  -webkit-text-size-adjust: 100%;
+}
+
+.cv *, .cv *::before, .cv *::after {
+  box-sizing: border-box;
+}
+
+.cv, .cv * {
+  scrollbar-width: none;
+}
+
+/* The reading surface */
+.cv .stage {
+  padding: 2rem 1.25rem 5rem;
+}
+
+.cv .doc {
+  max-width: 46rem;
+  margin: 0 auto;
+}
+
+/* Code covers at 15 px override */
+.cv .code {
+  font-size: 15px;
+  line-height: 24px;
+}
+
+/* Sandboxed html and jsx fill the surface */
+.cv .stage-sandboxed-html,
+.cv .stage-sandboxed-jsx {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  padding: 0;
+}
+
+.cv .stage-sandboxed-html .doc,
+.cv .stage-sandboxed-jsx .doc {
+  flex: 1 1 auto;
+  min-height: 0;
+  margin: 0;
+  max-width: none;
+  height: 100%;
+}
+
+.cv .usercontent-frame {
+  display: block;
+  width: 100%;
+  height: 100%;
+  border: 0;
+  background: #fff;
+}
+
+/* Picture kinds fill the canvas */
+.cv-picture img {
+  display: block;
+  width: 600px;
+  height: 315px;
+  object-fit: cover;
+}
+
+.cv-image img {
+  object-position: 50% 0%;
+}
+
+.cv-video img {
+  object-position: 50% 50%;
+}
+
+/* PDF */
+.cv-pdf {
+  background: #fff;
+  position: relative;
+  width: 600px;
+  height: 315px;
+  overflow: hidden;
+}
+
+/* Fallback card */
+.cv-card img {
+  display: block;
+  width: 600px;
+  height: 315px;
+}
+
+/* Archive listing layout */
+.cv-archive .stage {
+  height: 100%;
+  padding: 2rem 1.25rem 0;
+  display: flex;
+  flex-direction: column;
+}
+
+.ar {
+  --gutter: 3.25rem;
+  --row: 24px;
+  flex: 1 1 auto;
+  min-height: 0;
+  margin: 0;
+  padding: 0.25rem 0;
+  list-style: none;
+  font-family: var(--mono);
+  font-size: 15px;
+  line-height: 24px;
+  border: 1px solid var(--rule);
+  border-bottom: 0;
+  background:
+    linear-gradient(to right,
+      var(--ground) 0 var(--gutter),
+      var(--rule) var(--gutter) calc(var(--gutter) + 1px),
+      var(--surface) calc(var(--gutter) + 1px));
+  overflow: hidden;
+}
+
+.ar-row {
+  display: grid;
+  grid-template-columns: var(--gutter) minmax(0, 1fr) auto;
+  height: var(--row);
+  align-items: center;
+}
+
+.ar-num {
+  padding-right: 0.75rem;
+  text-align: right;
+  color: var(--ink-soft);
+}
+
+.ar-path {
+  --depth: 0;
+  height: 100%;
+  display: flex;
+  align-items: center;
+  min-width: 0;
+  padding-left: calc(0.85rem + var(--depth) * 2ch);
+  white-space: nowrap;
+  background-image: repeating-linear-gradient(to right,
+    transparent 0 0.45ch,
+    var(--rule-strong) 0.45ch calc(0.45ch + 1px),
+    transparent calc(0.45ch + 1px) 2ch);
+  background-size: calc(var(--depth) * 2ch) 100%;
+  background-position: 0.85rem 0;
+  background-repeat: no-repeat;
+}
+
+.ar-dir {
+  flex: none;
+  color: var(--ink-soft);
+}
+
+.ar-base {
+  flex: 0 1 auto;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.ar-lead {
+  flex: 1 1 0;
+  min-width: 1.5ch;
+  align-self: stretch;
+  margin-left: 0.75ch;
+  background: linear-gradient(to right, var(--rule-strong) 1px, transparent 1px)
+    repeat-x 0 calc(50% + 0.3em) / 5px 1px;
+}
+
+.ar-row.is-dir .ar-base {
+  color: var(--patina-ink);
+  font-weight: 600;
+}
+
+.ar-row.is-dir .ar-lead,
+.ar-row.is-more .ar-lead {
+  display: none;
+}
+
+.ar-size {
+  padding: 0 0.9rem 0 0.75ch;
+  text-align: right;
+  color: var(--ink-soft);
+  font-variant-numeric: tabular-nums;
+}
+
+.ar-row.is-more .ar-path {
+  color: var(--ink-soft);
+  font-style: italic;
+}
+
+/* Audio artwork layout */
+.cv-artwork .stage {
+  height: 100%;
+  padding: 1.25rem;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+/* Sized whole into the largest square the stage leaves (fitArtwork). */
+.cv-artwork img {
+  display: block;
+  flex: none;
+  border: 1px solid var(--rule);
+  background: var(--surface);
+}
+
+/* Audio waveform layout */
+.cv-waveform .stage {
+  height: 100%;
+  padding: 2rem 1.25rem;
+}
+
+.wf {
+  position: relative;
+  height: 100%;
+  background: var(--surface);
+  border: 1px solid var(--rule);
+}
+
+.wf-axis {
+  position: absolute;
+  left: 1.25rem;
+  right: 1.25rem;
+  top: 50%;
+  height: 1px;
+  background: var(--rule-strong);
+}
+
+.wf-wave {
+  position: absolute;
+  inset: 1.5rem 1.25rem;
+  background: var(--patina-ink);
+  -webkit-mask-image: var(--wf-src);
+  mask-image: var(--wf-src);
+  -webkit-mask-repeat: no-repeat;
+  mask-repeat: no-repeat;
+  -webkit-mask-size: 100% var(--wf-h, 100%);
+  mask-size: 100% var(--wf-h, 100%);
+  -webkit-mask-position: 0 var(--wf-y, 50%);
+  mask-position: 0 var(--wf-y, 50%);
+}