chore: sync develop with iaser-ai/ansari at 3a072da

.dockerignore

@@ -1,4 +1,4 @@
-# Keep Docker build contexts small: both service Dockerfiles use the repo
+# Keep Docker build contexts small: every service Dockerfile uses the repo
 # root as context (the pnpm workspace needs the root lockfile), so anything
 # not excluded here uploads on every build.
 .git
@@ -14,3 +14,16 @@
 **/.env.local
 **/.env.*.local
 apps/frontend/google-service-account
+# Cloudflare Worker local state and secrets (apps/mcp)
+**/.dev.vars
+**/.dev.vars.*
+**/.wrangler
+**/dist-worker
+
+# Credentials and private environment files; committed public examples remain available.
+**/.npmrc
+**/.env.*
+!**/.env.ci
+!**/.env.example
+**/test-results
+**/playwright-report

.github/workflows/mcp.yml

@@ -0,0 +1,41 @@
+name: MCP application
+on:
+  pull_request:
+    paths: &mcp-paths
+      - 'apps/mcp/**'
+      - 'pnpm-lock.yaml'
+      - 'pnpm-workspace.yaml'
+      - 'package.json'
+      - 'LICENSE'
+      - '.dockerignore'
+      - '.github/workflows/mcp.yml'
+      - 'packages/eslint-config/**'
+  push:
+    branches: [main, develop]
+    paths: *mcp-paths
+permissions:
+  contents: read
+jobs:
+  mcp:
+    name: MCP application
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: '22'
+      - name: Install pnpm
+        run: corepack enable && corepack prepare pnpm@10.33.0 --activate
+      - name: Install Chromium system dependencies
+        run: pnpm dlx playwright@1.64.0 install-deps chromium
+      - name: Install from the workspace lockfile
+        run: pnpm install --frozen-lockfile --strict-peer-dependencies --filter ansari-mcp...
+      - name: Verify the MCP application
+        run: |
+          pnpm mcp exec playwright install chromium
+          pnpm mcp verify
+      - name: Verify the root-context container
+        run: bash apps/mcp/scripts/verify-container.sh

README.md

@@ -63,3 +63,7 @@ issues for vulnerabilities.
 ## License
 
 [MIT](LICENSE) © IASER
+
+## MCP application
+
+[`apps/mcp`](apps/mcp/README.md) exposes Ansari answers through MCP with a self-contained React card for assistant hosts. It uses public saga a2ui packages, embedded Kitab fonts and local artwork. Start it separately with `pnpm mcp build` then `pnpm mcp start`; see its README for environment variables and its Docker build, which uses the repository root as context.

apps/frontend/lib/ambientNight.ts

@@ -66,10 +66,10 @@ export type AmbientTreatment =
  * posters, which is what keeps the still and the video from stepping as
  * one fades over the other.
  *
- * The portrait and landscape clips were graded differently — landscape
- * carries barely two thirds of portrait's contrast — so they cannot
- * share one grade. Anchoring each to its own numbers is what makes the
- * desktop layer read like the phone one instead of a paler copy.
+ * The portrait and landscape clips are graded within a level of each
+ * other now, but anchoring each to its own measured numbers — rather
+ * than assuming they match — is what keeps the desktop layer reading
+ * like the phone one if a future re-grade pulls them apart again.
  *
  * Re-exporting the clips invalidates all of this; `ambientNight.test.ts`
  * pins the numbers so that goes noticed rather than shipping.
@@ -78,8 +78,8 @@ export const NIGHT_SOURCE: Record<
   Clip,
   { min: number; frond: number; wall: number }
 > = {
-  portrait: { min: 0.663, frond: 0.706, wall: 0.894 },
-  landscape: { min: 0.773, frond: 0.776, wall: 0.91 },
+  portrait: { min: 0.631, frond: 0.671, wall: 0.898 },
+  landscape: { min: 0.635, frond: 0.671, wall: 0.894 },
 };
 
 /**
@@ -92,15 +92,18 @@ export const NIGHT_SOURCE: Record<
  *
  * `night.well` is 0.53–0.57 of `night.page` channel for channel. The
  * shadow used to stop just above it, at 0.58, and read as too faint;
- * 0.517 is 15% more depth (0.42 → 0.483), which lands the frond mass at
- * the well and lets the core go a little past it. That is deliberate:
- * the well was a reference point, not a limit, and what actually
- * protects the shadow — detail in its darkest fronds — is held by the
- * test against the filter's clamp.
+ * pushing the frond mass to the well (and letting the core go a little
+ * past it) is deliberate: the well was a reference point, not a limit,
+ * and what actually protects the shadow — detail in its darkest fronds —
+ * is held by the test against the filter's clamp.
  *
- * The darkest half-percent (`min`) continues past this. That tail is the
- * shadow's core and it should be the deepest thing on screen; the test
- * keeps it from running toward black or crushing.
+ * `min` continues past this. That tail is the shadow's core and it
+ * should be the deepest thing on screen; the test keeps it from running
+ * toward black or crushing. 0.517 is a chosen depth, not the floor of a
+ * search — `ambientNight.test.ts`'s crush-protection check only requires
+ * the graded `min` to clear 0.02, which a much deeper value than this
+ * still clears. Move it by eye against both clips and let the test catch
+ * an actual crush, rather than reading it as a limit the test found.
  */
 export const NIGHT_DEPTH = 0.517;
 

apps/mcp/.gitignore

@@ -0,0 +1,11 @@
+node_modules/
+dist/
+dist-worker/
+.wrangler/
+test-results/
+playwright-report/
+.env
+.env.*
+!.env.example
+.dev.vars
+.dev.vars.*

apps/mcp/Dockerfile

@@ -0,0 +1,18 @@
+# Build from the repository root: docker build -f apps/mcp/Dockerfile -t ansari-mcp .
+FROM node:22-slim AS build
+WORKDIR /repo
+RUN corepack enable && corepack prepare pnpm@10.33.0 --activate
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml LICENSE ./
+COPY packages packages
+COPY apps/mcp/package.json apps/mcp/
+RUN pnpm install --strict-peer-dependencies --frozen-lockfile --filter ansari-mcp...
+COPY apps/mcp apps/mcp
+RUN pnpm mcp build
+
+FROM node:22-slim
+WORKDIR /app
+ENV NODE_ENV=production PORT=3000
+COPY --from=build /repo/apps/mcp/dist ./dist
+COPY --from=build /repo/apps/mcp/package.json ./package.json
+EXPOSE 3000
+CMD ["node", "dist/server/index.js"]