virlow-mcp 3.85.0 → 3.86.0

package/dist/cli.js

@@ -4328,8 +4328,8 @@ function requireLocalAbsolutePath(p, label, platform = currentPlatform()) {
 
 // ../../packages/mcp-core/dist/widgets.js
 var WIDGET_MIME_TYPE = "text/html;profile=mcp-app";
-var SAVED_MEMORY_URI = "ui://widget/saved-memory.html";
-var MEMORY_CONTEXT_URI = "ui://widget/memory-context.html";
+var SAVED_MEMORY_URI = "ui://widget/saved-memory-v2.html";
+var MEMORY_CONTEXT_URI = "ui://widget/memory-context-v2.html";
 var VIRLOW_APP_URL = "https://app.virlow.com";
 var KIND_COLORS = {
   person: { light: "#4F6D8F", dark: "#8FB0D0" },
@@ -4362,7 +4362,8 @@ function widgetToolMeta(tool) {
     return void 0;
   const uri = VIEW_URI[view];
   return {
-    ui: { resourceUri: uri },
+    ui: { resourceUri: uri, visibility: ["model", "app"] },
+    "ui/resourceUri": uri,
     "openai/outputTemplate": uri,
     ...tool === "add_memory" && { "openai/widgetAccessible": true }
   };
@@ -4518,17 +4519,19 @@ var SCRIPT = `
     return b;
   }
 
+  // The standard bridge first once it is up, window.openai while it is not
+  // (or in a ChatGPT that never answers ui/initialize).
   function openApp() {
+    if (bridge && bridge.ready) { bridge.request('ui/open-link', { url: APP_URL }).catch(function () {}); return; }
     var host = openai();
     if (host && typeof host.openExternal === 'function') { host.openExternal({ href: APP_URL }); return; }
-    if (bridge) { bridge.request('ui/open-link', { url: APP_URL }).catch(function () {}); return; }
     window.open(APP_URL, '_blank', 'noopener');
   }
 
   function callTool(name, args) {
+    if (bridge && bridge.ready) return bridge.request('tools/call', { name: name, arguments: args });
     var host = openai();
     if (host && typeof host.callTool === 'function') return Promise.resolve(host.callTool(name, args));
-    if (bridge) return bridge.request('tools/call', { name: name, arguments: args });
     return Promise.reject(new Error('This host cannot run tools from a card.'));
   }
 
@@ -4639,7 +4642,11 @@ var SCRIPT = `
         });
       },
       notify: function (method, params) { post({ jsonrpc: '2.0', method: method, params: params || {} }); },
+      // Set once the host answers ui/initialize. Nothing but that request
+      // goes to the host before then, as the MCP Apps lifecycle requires.
+      ready: false,
       resized: function () {
+        if (!bridge.ready) return;
         var h = Math.ceil(document.documentElement.getBoundingClientRect().height);
         if (h && h !== lastHeight) { lastHeight = h; bridge.notify('ui/notifications/size-changed', { height: h }); }
       }
@@ -4659,8 +4666,10 @@ var SCRIPT = `
         if (params.structuredContent) { state.data = params.structuredContent; render(); }
       } else if (m.method === 'ui/notifications/host-context-changed') {
         applyTheme(params.theme);
-      } else if (m.method === 'ui/resource-teardown' && m.id != null) {
+      } else if ((m.method === 'ui/resource-teardown' || m.method === 'ping') && m.id != null) {
         post({ jsonrpc: '2.0', id: m.id, result: {} });
+      } else if (m.id != null) {
+        post({ jsonrpc: '2.0', id: m.id, error: { code: -32601, message: 'Method not found' } });
       }
     });
     bridge.request('ui/initialize', {
@@ -4669,14 +4678,28 @@ var SCRIPT = `
       protocolVersion: '2026-01-26'
     }).then(function (result) {
       if (result && result.hostContext) applyTheme(result.hostContext.theme);
+      bridge.ready = true;
       bridge.notify('ui/notifications/initialized');
+      // The host sizes the frame from these reports alone: without one an
+      // inline card can stay at zero height.
+      bridge.resized();
+      if (typeof ResizeObserver === 'function') {
+        new ResizeObserver(function () { bridge.resized(); }).observe(document.documentElement);
+      }
     }).catch(function () {});
   }
 
+  // Both, not either. ChatGPT injects window.openai into an MCP Apps
+  // (text/html;profile=mcp-app) frame too, but as an extension: the tool
+  // result reaches the card over the bridge, and only after the card has
+  // sent ui/initialize. A card that saw window.openai and skipped the
+  // bridge never initialized, never received its data and never reported a
+  // height, so ChatGPT showed nothing at all.
   if (openai()) {
     window.addEventListener('openai:set_globals', fromOpenai);
     fromOpenai();
-  } else if (window.parent && window.parent !== window) {
+  }
+  if (window.parent && window.parent !== window) {
     startBridge();
   }
 })();
@@ -5114,7 +5137,14 @@ kinds saved: ${changed.join(", ")}` : "";
   };
   if (opts.memoriesEnabled !== false) {
     for (const widget of WIDGET_RESOURCES) {
-      server.registerResource(widget.name, widget.uri, { title: widget.title, description: widget.description, mimeType: WIDGET_MIME_TYPE }, async () => readWidget(widget.view));
+      server.registerResource(widget.name, widget.uri, {
+        title: widget.title,
+        description: widget.description,
+        mimeType: WIDGET_MIME_TYPE,
+        // The same `_meta` as the read result, so a host can see the CSP
+        // and border hint from resources/list before it fetches the page.
+        _meta: resourceMeta(widget.view)
+      }, async () => readWidget(widget.view));
     }
     server.registerTool("add_memory", {
       ...toolConfig("add_memory"),
@@ -6069,7 +6099,7 @@ function startUnlockServer(api, vault, opts = {}) {
 }
 
 // src/version.ts
-var VERSION = true ? "3.85.0" : "dev";
+var VERSION = true ? "3.86.0" : "dev";
 
 // src/server.ts
 function defaultEmbeddingCacheDir() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "virlow-mcp",
-  "version": "3.85.0",
+  "version": "3.86.0",
   "description": "Local MCP server for Virlow Secure Notes: end-to-end-encrypted AI memories and notes for Cursor, Claude, Codex, and any MCP client.",
   "license": "UNLICENSED",
   "type": "module",
@@ -34,9 +34,9 @@
     "esbuild": "^0.25.0",
     "typescript": "^5.8.0",
     "vitest": "^4.1.11",
-    "@batalabs/virlow-crypto": "3.85.0",
-    "@batalabs/virlow-memory": "3.85.0",
-    "@batalabs/virlow-mcp-core": "3.85.0"
+    "@batalabs/virlow-crypto": "3.86.0",
+    "@batalabs/virlow-memory": "3.86.0",
+    "@batalabs/virlow-mcp-core": "3.86.0"
   },
   "scripts": {
     "build": "node build.mjs",