@productmaker/mcp 0.1.6 → 0.3.0

package/dist/http.js

@@ -38,14 +38,14 @@ var ApiClient = class {
       Authorization: `Bearer ${this.apiKey}`
     };
   }
-  async getJson(path) {
-    const res = await fetch(`${this.baseUrl}${path}`, {
+  async getJson(path2) {
+    const res = await fetch(`${this.baseUrl}${path2}`, {
       headers: this.authHeaders()
     });
     return this.parse(res);
   }
-  async postJson(path, body) {
-    const res = await fetch(`${this.baseUrl}${path}`, {
+  async postJson(path2, body) {
+    const res = await fetch(`${this.baseUrl}${path2}`, {
       method: "POST",
       headers: {
         ...this.authHeaders(),
@@ -55,8 +55,8 @@ var ApiClient = class {
     });
     return this.parse(res);
   }
-  async patchJson(path, body) {
-    const res = await fetch(`${this.baseUrl}${path}`, {
+  async patchJson(path2, body) {
+    const res = await fetch(`${this.baseUrl}${path2}`, {
       method: "PATCH",
       headers: {
         ...this.authHeaders(),
@@ -66,14 +66,14 @@ var ApiClient = class {
     });
     return this.parse(res);
   }
-  async deleteJson(path) {
-    const res = await fetch(`${this.baseUrl}${path}`, {
+  async deleteJson(path2) {
+    const res = await fetch(`${this.baseUrl}${path2}`, {
       method: "DELETE",
       headers: this.authHeaders()
     });
     return this.parse(res);
   }
-  async postMultipart(path, files, fields) {
+  async postMultipart(path2, files, fields) {
     const form = new FormData();
     for (const [name, value] of Object.entries(files)) {
       const parts = Array.isArray(value) ? value : [
@@ -91,7 +91,7 @@ var ApiClient = class {
     for (const [k, v] of Object.entries(fields)) {
       if (v !== void 0) form.append(k, v);
     }
-    const res = await fetch(`${this.baseUrl}${path}`, {
+    const res = await fetch(`${this.baseUrl}${path2}`, {
       method: "POST",
       headers: this.authHeaders(),
       body: form
@@ -113,19 +113,40 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "0.1.0";
+var MCP_VERSION = "0.3.0";
 
 // src/tools/tasks.ts
 import { z as z2 } from "zod";
 
 // src/resolve-image.ts
 import { lookup as dnsLookup } from "dns/promises";
+import { promises as fs, createReadStream } from "fs";
+import * as path from "path";
+import * as os from "os";
 var MAX_BYTES = 20 * 1024 * 1024;
-var ALLOWED = /* @__PURE__ */ new Set([
-  "image/jpeg",
-  "image/png",
-  "image/webp"
-]);
+var IMAGE_FORMATS = [
+  {
+    mime: "image/jpeg",
+    exts: [
+      ".jpg",
+      ".jpeg"
+    ]
+  },
+  {
+    mime: "image/png",
+    exts: [
+      ".png"
+    ]
+  },
+  {
+    mime: "image/webp",
+    exts: [
+      ".webp"
+    ]
+  }
+];
+var ALLOWED_MIMES = new Set(IMAGE_FORMATS.map((f) => f.mime));
+var ALLOWED_EXTS = new Set(IMAGE_FORMATS.flatMap((f) => f.exts));
 var ResolveImageError = class extends Error {
   static {
     __name(this, "ResolveImageError");
@@ -192,69 +213,139 @@ async function assertHostResolvesPublic(hostname) {
   }
 }
 __name(assertHostResolvesPublic, "assertHostResolvesPublic");
-async function resolveImages(images) {
+function expandUserPath(raw) {
+  let s = raw.trim();
+  if (s === "~") return os.homedir();
+  if (s.startsWith("~/") || s.startsWith("~\\")) s = path.join(os.homedir(), s.slice(2));
+  s = s.replace(/^\$HOME(?=$|[/\\])/, os.homedir());
+  s = s.replace(/^%USERPROFILE%(?=$|[/\\])/i, os.homedir());
+  return s;
+}
+__name(expandUserPath, "expandUserPath");
+async function readFileWithCap(absPath, max) {
+  const chunks = [];
+  let total = 0;
+  let exceeded = false;
+  const stream = createReadStream(absPath);
+  try {
+    for await (const chunk of stream) {
+      total += chunk.length;
+      if (total > max) {
+        exceeded = true;
+        break;
+      }
+      chunks.push(chunk);
+    }
+  } catch (e) {
+    const code = e.code;
+    if (code === "ENOENT") throw new ResolveImageError("IMAGE_PATH_NOT_FOUND", "file disappeared during read");
+    if (code === "EACCES" || code === "EPERM") throw new ResolveImageError("IMAGE_PATH_NOT_READABLE", `cannot read file (${code})`);
+    throw new ResolveImageError("IMAGE_PATH_NOT_READABLE", e.message);
+  } finally {
+    if (!stream.destroyed) stream.destroy();
+  }
+  if (exceeded) throw new ResolveImageError("IMAGE_TOO_LARGE", `file exceeds ${max} bytes`);
+  return Buffer.concat(chunks, total);
+}
+__name(readFileWithCap, "readFileWithCap");
+async function resolvePath(rawPath) {
+  const expanded = expandUserPath(rawPath);
+  const abs = path.resolve(expanded);
+  const ext = path.extname(abs).toLowerCase();
+  if (!ALLOWED_EXTS.has(ext)) {
+    throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", `path extension ${ext || "(none)"} is not in the image allowlist (.jpg .jpeg .png .webp)`);
+  }
+  let stat;
+  try {
+    stat = await fs.stat(abs);
+  } catch (e) {
+    const code = e.code;
+    if (code === "ENOENT") {
+      throw new ResolveImageError("IMAGE_PATH_NOT_FOUND", `no such file: ${abs}`);
+    }
+    if (code === "EACCES" || code === "EPERM") {
+      throw new ResolveImageError("IMAGE_PATH_NOT_READABLE", `cannot access ${abs} (${code})`);
+    }
+    throw new ResolveImageError("IMAGE_PATH_NOT_READABLE", `stat failed: ${e.message}`);
+  }
+  if (!stat.isFile()) {
+    throw new ResolveImageError("IMAGE_PATH_NOT_A_FILE", `${abs} is not a regular file`);
+  }
+  if (stat.size > MAX_BYTES) {
+    throw new ResolveImageError("IMAGE_TOO_LARGE", `${stat.size} bytes (cap ${MAX_BYTES})`);
+  }
+  const buf = await readFileWithCap(abs, MAX_BYTES);
+  const sniffed = sniffMime(buf);
+  if (!sniffed) {
+    throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", `magic bytes do not match PNG/JPEG/WEBP for ${abs}`);
+  }
+  return {
+    buffer: buf,
+    mimetype: sniffed
+  };
+}
+__name(resolvePath, "resolvePath");
+async function resolveImageUrl(rawUrl) {
+  let u;
+  try {
+    u = new URL(rawUrl);
+  } catch {
+    throw new ResolveImageError("INVALID_INPUT", "imageUrl is not a valid URL");
+  }
+  if (u.protocol !== "https:") throw new ResolveImageError("INVALID_INPUT", "imageUrl must be HTTPS");
+  if (isPrivateHost(u.hostname)) throw new ResolveImageError("INVALID_INPUT", "imageUrl host not allowed");
+  await assertHostResolvesPublic(u.hostname);
+  let res;
+  try {
+    res = await fetch(rawUrl, {
+      signal: AbortSignal.timeout(3e4),
+      redirect: "error"
+    });
+  } catch (e) {
+    throw new ResolveImageError("IMAGE_DOWNLOAD_FAILED", e.message);
+  }
+  if (!res.ok) throw new ResolveImageError("IMAGE_DOWNLOAD_FAILED", `HTTP ${res.status}`);
+  const cl = res.headers.get("content-length");
+  if (cl && Number(cl) > MAX_BYTES) {
+    throw new ResolveImageError("IMAGE_TOO_LARGE", `content-length ${cl}`);
+  }
+  const ct = (res.headers.get("content-type") ?? "").split(";")[0]?.trim() ?? "";
+  if (!ALLOWED_MIMES.has(ct)) throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", `content-type ${ct}`);
+  const buf = Buffer.from(await res.arrayBuffer());
+  if (buf.length > MAX_BYTES) throw new ResolveImageError("IMAGE_TOO_LARGE", `${buf.length} bytes`);
+  const sniffed = sniffMime(buf);
+  if (!sniffed || sniffed !== ct) {
+    throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", `magic bytes (${sniffed ?? "unknown"}) do not match content-type (${ct})`);
+  }
+  return {
+    buffer: buf,
+    mimetype: sniffed
+  };
+}
+__name(resolveImageUrl, "resolveImageUrl");
+async function resolveImages(images, opts = {
+  transport: "http"
+}) {
   if (!images.length) throw new ResolveImageError("INVALID_INPUT", "images: at least one entry required");
   if (images.length > 5) throw new ResolveImageError("INVALID_INPUT", "images: max 5 per request");
-  return Promise.all(images.map((ref) => resolveImage({
-    imageUrl: ref.url,
-    imageBase64: ref.base64
-  })));
+  return Promise.all(images.map((ref) => resolveOne(ref, opts.transport)));
 }
 __name(resolveImages, "resolveImages");
-async function resolveImage(input) {
-  if (input.imageUrl && input.imageBase64) {
-    throw new ResolveImageError("INVALID_INPUT", "Provide only one of imageUrl or imageBase64");
+async function resolveOne(ref, transport) {
+  const hasUrl = Boolean(ref.url);
+  const hasPath = Boolean(ref.path);
+  if (hasUrl === hasPath) {
+    throw new ResolveImageError("INVALID_INPUT", "each image entry must have exactly one of `url` or `path`");
   }
-  if (input.imageUrl) {
-    let u;
-    try {
-      u = new URL(input.imageUrl);
-    } catch {
-      throw new ResolveImageError("INVALID_INPUT", "imageUrl is not a valid URL");
+  if (hasPath) {
+    if (transport === "http") {
+      throw new ResolveImageError("PATH_NOT_SUPPORTED_IN_HTTP_MODE", "Local file paths are only available when running the MCP locally (npm). For the hosted endpoint at mcp.productmaker.app, pass a public HTTPS `url` instead, or ask the user to host the photo first.");
     }
-    if (u.protocol !== "https:") throw new ResolveImageError("INVALID_INPUT", "imageUrl must be HTTPS");
-    if (isPrivateHost(u.hostname)) throw new ResolveImageError("INVALID_INPUT", "imageUrl host not allowed");
-    await assertHostResolvesPublic(u.hostname);
-    let res;
-    try {
-      res = await fetch(input.imageUrl, {
-        signal: AbortSignal.timeout(3e4),
-        redirect: "error"
-      });
-    } catch (e) {
-      throw new ResolveImageError("IMAGE_DOWNLOAD_FAILED", e.message);
-    }
-    if (!res.ok) throw new ResolveImageError("IMAGE_DOWNLOAD_FAILED", `HTTP ${res.status}`);
-    const cl = res.headers.get("content-length");
-    if (cl && Number(cl) > MAX_BYTES) {
-      throw new ResolveImageError("IMAGE_TOO_LARGE", `content-length ${cl}`);
-    }
-    const ct = (res.headers.get("content-type") ?? "").split(";")[0]?.trim() ?? "";
-    if (!ALLOWED.has(ct)) throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", `content-type ${ct}`);
-    const buf = Buffer.from(await res.arrayBuffer());
-    if (buf.length > MAX_BYTES) throw new ResolveImageError("IMAGE_TOO_LARGE", `${buf.length} bytes`);
-    const sniffed = sniffMime(buf);
-    if (!sniffed || sniffed !== ct) {
-      throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", `magic bytes (${sniffed ?? "unknown"}) do not match content-type (${ct})`);
-    }
-    return {
-      buffer: buf,
-      mimetype: sniffed
-    };
-  }
-  if (input.imageBase64) {
-    const buf = Buffer.from(input.imageBase64, "base64");
-    if (buf.length > MAX_BYTES) throw new ResolveImageError("IMAGE_TOO_LARGE", `${buf.length} bytes`);
-    const mime = sniffMime(buf);
-    if (!mime) throw new ResolveImageError("IMAGE_TYPE_UNSUPPORTED", "cannot detect image type");
-    return {
-      buffer: buf,
-      mimetype: mime
-    };
+    return resolvePath(ref.path);
   }
-  throw new ResolveImageError("INVALID_INPUT", "imageUrl or imageBase64 required");
+  return resolveImageUrl(ref.url);
 }
-__name(resolveImage, "resolveImage");
+__name(resolveOne, "resolveOne");
 
 // src/status-poller.ts
 var TERMINAL = /* @__PURE__ */ new Set([
@@ -282,14 +373,14 @@ async function pollStatus(fetcher, waitSeconds, signal, opts = {}) {
 }
 __name(pollStatus, "pollStatus");
 function sleep(ms, signal) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const onAbort = /* @__PURE__ */ __name(() => {
       clearTimeout(t);
       reject(new Error("aborted"));
     }, "onAbort");
     const t = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve();
+      resolve2();
     }, ms);
     signal?.addEventListener("abort", onAbort, {
       once: true
@@ -308,12 +399,18 @@ var McpErrorCode = {
   IMAGE_DOWNLOAD_FAILED: "IMAGE_DOWNLOAD_FAILED",
   IMAGE_TOO_LARGE: "IMAGE_TOO_LARGE",
   IMAGE_TYPE_UNSUPPORTED: "IMAGE_TYPE_UNSUPPORTED",
+  IMAGE_PATH_NOT_FOUND: "IMAGE_PATH_NOT_FOUND",
+  IMAGE_PATH_NOT_READABLE: "IMAGE_PATH_NOT_READABLE",
+  IMAGE_PATH_NOT_A_FILE: "IMAGE_PATH_NOT_A_FILE",
+  PATH_NOT_SUPPORTED_IN_HTTP_MODE: "PATH_NOT_SUPPORTED_IN_HTTP_MODE",
   TASK_NOT_FOUND: "TASK_NOT_FOUND",
   TASK_NOT_READY: "TASK_NOT_READY",
+  CAMPAIGN_NOT_FOUND: "CAMPAIGN_NOT_FOUND",
   NO_SHOPIFY_SHOPS: "NO_SHOPIFY_SHOPS",
   NO_META_AD_ACCOUNTS: "NO_META_AD_ACCOUNTS",
   SHOPIFY_NOT_CONNECTED: "SHOPIFY_NOT_CONNECTED",
   META_CAPABILITY_MISSING: "META_CAPABILITY_MISSING",
+  TIKTOK_NOT_CONNECTED: "TIKTOK_NOT_CONNECTED",
   UPSTREAM_TIMEOUT: "UPSTREAM_TIMEOUT",
   UPSTREAM_UNAVAILABLE: "UPSTREAM_UNAVAILABLE",
   INTERNAL: "INTERNAL"
@@ -321,7 +418,15 @@ var McpErrorCode = {
 var INVALID_PARAM_CODES = /* @__PURE__ */ new Set([
   McpErrorCode.INVALID_INPUT,
   McpErrorCode.INVALID_API_KEY,
-  McpErrorCode.REVOKED_API_KEY
+  McpErrorCode.REVOKED_API_KEY,
+  McpErrorCode.IMAGE_PATH_NOT_FOUND,
+  McpErrorCode.IMAGE_PATH_NOT_READABLE,
+  McpErrorCode.IMAGE_PATH_NOT_A_FILE,
+  McpErrorCode.PATH_NOT_SUPPORTED_IN_HTTP_MODE,
+  // The caller passed a campaignId that does not exist — semantically a
+  // bad parameter, not an internal failure. Matches the spec contract
+  // (mcp-server.spec.ts: "McpError INVALID_PARAMS code=CAMPAIGN_NOT_FOUND").
+  McpErrorCode.CAMPAIGN_NOT_FOUND
 ]);
 function mcp(code, message, extra = {}) {
   const errCode = INVALID_PARAM_CODES.has(code) ? ErrorCode.InvalidParams : ErrorCode.InternalError;
@@ -336,7 +441,9 @@ var PASSTHROUGH_CODES = /* @__PURE__ */ new Set([
   "NO_SHOPIFY_SHOPS",
   "NO_META_AD_ACCOUNTS",
   "SHOPIFY_NOT_CONNECTED",
-  "REVOKED_API_KEY"
+  "TIKTOK_NOT_CONNECTED",
+  "REVOKED_API_KEY",
+  "CAMPAIGN_NOT_FOUND"
 ]);
 function isRecord(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
@@ -436,14 +543,13 @@ var ImageCreativeAspectRatioEnum = z.enum([
   "9:16",
   "16:9"
 ]);
-var ImageBase64 = z.string().max(75e5);
 var ImageRefSchema = z.object({
-  url: z.string().url().optional().describe("URL p\xFAblica HTTPS de la foto."),
-  base64: ImageBase64.optional().describe("Bytes de la foto en base64 (sin prefijo data:). \xDAsalo SOLO para archivos locales <500 KB.")
-}).refine((v) => Boolean(v.url) !== Boolean(v.base64), {
-  message: "each image entry must have exactly one of `url` or `base64`"
+  url: z.string().url().optional().describe('URL p\xFAblica HTTPS de la foto. Ej: una URL de Shopify CDN, Cloudinary, Imgur. \xDAsala cuando el usuario te diga "est\xE1 en X.com/foto.jpg" o cuando la foto ya est\xE9 hospedada.'),
+  path: z.string().min(1).optional().describe('Ruta del archivo en el computador del usuario. Ej: "/Users/maria/Desktop/foto.jpg", "~/Pictures/camiseta.png", "C:\\Users\\Maria\\Desktop\\foto.jpg". El MCP local la lee del disco y la sube. SOLO funciona cuando el MCP corre local (stdio). NO funciona en mcp.productmaker.app (HTTP) \u2014 ah\xED usa `url`.')
+}).refine((v) => Boolean(v.url) !== Boolean(v.path), {
+  message: "each image entry must have exactly one of `url` or `path`"
 });
-var ImagesInput = z.array(ImageRefSchema).min(1).max(5).describe("1 a 5 fotos del MISMO producto. La PRIMERA es la principal (hero); las dem\xE1s son \xE1ngulos adicionales. Cada entrada usa `url` (preferido \u2014 p\xFAblico HTTPS) o `base64` (solo para archivos locales <500 KB; clientes MCP truncan argumentos >1 MB). PREFIERE siempre `url` si el usuario te dio una. NO mezcles productos distintos en una sola llamada.");
+var ImagesInput = z.array(ImageRefSchema).min(1).max(5).describe('1 a 5 fotos del MISMO producto. La PRIMERA es la principal (hero); las dem\xE1s son \xE1ngulos adicionales. NO mezcles productos distintos en una sola llamada.\n\nCada entrada tiene EXACTAMENTE uno de:\n\u2022 `url` \u2014 URL p\xFAblica HTTPS (Shopify CDN, Cloudinary). Prefi\xE9rela si la foto ya est\xE1 hospedada.\n\u2022 `path` \u2014 Ruta del archivo en el computador del usuario (ej. "/Users/maria/Desktop/foto.jpg", "~/Downloads/camiseta.png"). \xDAsala cuando el usuario te dijo d\xF3nde guard\xF3 la foto. Solo MCP local \u2014 el cliente web rechaza paths.\n\nSi el usuario te peg\xF3 la foto en el chat pero no te dio ni URL ni ruta: PREG\xDANTALE d\xF3nde la tiene guardada (Escritorio, Descargas, etc.). Si el `path` falla con IMAGE_PATH_NOT_FOUND, prueba 1-2 ubicaciones obvias alternativas (~/Desktop, ~/Downloads) antes de molestar al usuario. Tras 3 intentos fallidos, p\xEDdele la ruta completa.');
 function asText(value) {
   return {
     content: [
@@ -455,6 +561,10 @@ function asText(value) {
   };
 }
 __name(asText, "asText");
+function escapeMdLabel(s) {
+  return s.replace(/[\[\]\(\)\{\}`<>\r\n\\*_]/g, " ").replace(/\s+/g, " ").trim();
+}
+__name(escapeMdLabel, "escapeMdLabel");
 function flatten(obj) {
   const out = {};
   for (const [k, v] of Object.entries(obj)) {
@@ -468,7 +578,9 @@ function flatten(obj) {
 __name(flatten, "flatten");
 async function submitCreative(api, opts) {
   const { images, ...rest } = opts.input;
-  const resolved = await resolveImages(images);
+  const resolved = await resolveImages(images, {
+    transport: opts.transport
+  });
   const parts = resolved.map((img, i) => ({
     ...img,
     filename: `image-${i}.png`
@@ -476,8 +588,9 @@ async function submitCreative(api, opts) {
   const r = await api.postMultipart(opts.path, {
     images: parts
   }, flatten(rest));
+  const taskId = r.taskId ?? r.jobId;
   return asText({
-    taskId: r.taskId,
+    taskId,
     status: "queued",
     estimatedSeconds: opts.estimatedSeconds
   });
@@ -616,18 +729,18 @@ __name(sanitizeFilename, "sanitizeFilename");
 async function fetchTaskOutputs(api, taskId) {
   const raw = await api.getJson(`/v1/results/${encodeURIComponent(taskId)}?signedUrls=true`);
   const videos = (raw.videoGenerators ?? []).map((vg) => {
-    const variants = (vg.variants ?? []).filter((v) => Boolean(v.kind) && Boolean(v.url)).map((v) => ({
+    const variants2 = (vg.variants ?? []).filter((v) => Boolean(v.kind) && Boolean(v.url)).map((v) => ({
       kind: v.kind,
       url: v.url
     }));
-    const fallback = !variants.length && Array.isArray(vg.resultUrls) && vg.resultUrls.length ? vg.resultUrls.map((url) => ({
+    const fallback = !variants2.length && Array.isArray(vg.resultUrls) && vg.resultUrls.length ? vg.resultUrls.map((url) => ({
       kind: "mp4",
       url
     })) : [];
     return {
       angleKey: vg.angleKey ?? "",
       angleIndex: vg.angleIndex ?? 0,
-      variants: variants.length ? variants : fallback
+      variants: variants2.length ? variants2 : fallback
     };
   }).filter((v) => v.angleKey && v.variants.length);
   const sections = (raw.landing?.images ?? []).filter((img) => Boolean(img.role) && Boolean(img.url)).map((img) => ({
@@ -635,18 +748,21 @@ async function fetchTaskOutputs(api, taskId) {
     url: img.url
   }));
   const images = [];
-  if (raw.adCreative?.url) {
+  const variants = raw.adCreative?.variants ?? [];
+  const hasVariants = variants.some((v) => typeof v === "string");
+  if (hasVariants) {
+    for (const variant of variants) {
+      if (typeof variant === "string") images.push({
+        url: variant
+      });
+    }
+  } else if (raw.adCreative?.url) {
     images.push({
       url: raw.adCreative.url,
       width: raw.adCreative.width,
       height: raw.adCreative.height
     });
   }
-  for (const variant of raw.adCreative?.variants ?? []) {
-    if (typeof variant === "string") images.push({
-      url: variant
-    });
-  }
   return {
     webappUrl: `${WEBAPP_BASE}/tasks/${taskId}`,
     videos,
@@ -657,21 +773,24 @@ async function fetchTaskOutputs(api, taskId) {
   };
 }
 __name(fetchTaskOutputs, "fetchTaskOutputs");
-function escapeMdLabel(s) {
-  return s.replace(/[\[\]\(\)\{\}`<>\r\n\\]/g, " ").replace(/\s+/g, " ").trim();
-}
-__name(escapeMdLabel, "escapeMdLabel");
 function renderOutputsMarkdown(outputs) {
   const parts = [];
   parts.push(`\u2705 **Tu tarea est\xE1 lista** \u2014 [Abrir en Product Maker](${outputs.webappUrl})`);
   if (outputs.images.length) {
-    parts.push("\n### Ad creative");
-    for (const img of outputs.images) parts.push(`![](${img.url})`);
+    parts.push(`
+### Ad creative (${outputs.images.length} ${outputs.images.length === 1 ? "variante" : "variantes"})`);
+    outputs.images.forEach((img, i) => {
+      parts.push(`![v${i}](${img.url})`);
+      parts.push(`[\u2B07 Descargar v${i}](${img.url})`);
+    });
   }
   if (outputs.landing.sections.length) {
     parts.push(`
 ### Landing (${outputs.landing.sections.length} secciones)`);
-    for (const s of outputs.landing.sections) parts.push(`![${escapeMdLabel(s.role)}](${s.url})`);
+    for (const s of outputs.landing.sections) {
+      parts.push(`![${escapeMdLabel(s.role)}](${s.url})`);
+      parts.push(`[\u2B07 Descargar ${escapeMdLabel(s.role)}](${s.url})`);
+    }
   }
   if (outputs.videos.length) {
     parts.push("\n### Video");
@@ -726,10 +845,12 @@ var EditTaskDraftInput = z2.object({
     scriptNotes: z2.string().max(2e3).optional()
   })
 });
-function registerTaskTools(server, api, proxyBaseUrl = null) {
+function registerTaskTools(server, api, { proxyBaseUrl = null, transport = "http" } = {}) {
   server.tool("create_product_task", 'Crea una tarea de producto desde una o varias fotos. Por defecto genera los 3 outputs (landing + video + image creatives). Devuelve un taskId.\n\nINPUTS REQUERIDOS: images (1-5 fotos del MISMO producto; la primera es la hero), language, country.\n\nANTES de invocar, PREG\xDANTALE al usuario por price y offer si no los mencion\xF3 \u2014 son los inputs de mayor impacto en conversi\xF3n y nunca debes asumirlos. NO defaultes country/language desde el contexto del chat: preg\xFAntale expl\xEDcitamente, incluso si el usuario est\xE1 en LATAM. Si te dice "t\xFA elige" para price/offer, om\xEDtelos.\n\nSi el usuario tiene varias fotos del MISMO producto (frente, lateral, detalle, uso), incl\xFAyelas todas en images[] hasta 5. Si tiene fotos de productos DIFERENTES, son llamadas separadas (una tarea por producto).\n\nOTROS OPCIONALES (puedes invocar sin ellos y dejar que la IA elija defaults sensatos):\n- videoStyle, narrativeStyle, videoModel (enums \u2014 ver descripci\xF3n de cada campo)\n- multiAngleVideos (booleano)\n- outputs (subconjunto de {landing,video,image})\n- productUrl\n\nUsa SOLO valores declarados en los enums. Si el usuario pide algo no soportado (ej. "estilo anime"), p\xEDdele una opci\xF3n v\xE1lida.', CreateProductTaskInput.shape, async (input) => {
     try {
-      const imgs = await resolveImages(input.images);
+      const imgs = await resolveImages(input.images, {
+        transport
+      });
       const parts = imgs.map((img, i) => ({
         ...img,
         filename: `image-${i}.png`
@@ -798,8 +919,8 @@ function registerTaskTools(server, api, proxyBaseUrl = null) {
       if (input.limit != null) qs.set("limit", String(input.limit));
       if (input.offset != null) qs.set("offset", String(input.offset));
       if (input.search) qs.set("search", input.search);
-      const path = `/v1/tasks${qs.toString() ? "?" + qs.toString() : ""}`;
-      const r = await api.getJson(path);
+      const path2 = `/v1/tasks${qs.toString() ? "?" + qs.toString() : ""}`;
+      const r = await api.getJson(path2);
       return asText(r);
     } catch (e) {
       throw translateError(e);
@@ -888,13 +1009,14 @@ var LandingInput = z3.object({
   paymentMethods: z3.string().optional().describe('Opcional. M\xE9todos de pago a mostrar (lista libre). Ej. "Tarjeta, PSE, Nequi, Contraentrega". Si se omite, la IA usa los m\xE1s comunes del pa\xEDs.'),
   isCombo: CreativeRefs.isCombo
 });
-function registerCreativeTools(server, api) {
+function registerCreativeTools(server, api, { transport = "http" } = {}) {
   server.tool("generate_video_creative", 'Genera UN video creativo independiente. Devuelve un taskId.\n\nREQUERIDOS: images (array de 1-5 fotos), title, primaryAngle, language, country, aspectRatio.\n\nANTES de invocar, PREG\xDANTALE al usuario por price y offer si no los mencion\xF3 \u2014 son los inputs de mayor impacto en conversi\xF3n y nunca debes asumirlos. NO defaultes country/language desde el contexto: preg\xFAntale expl\xEDcitamente. Si el usuario te dice "t\xFA elige" para price/offer, om\xEDtelos.\n\nOTROS OPCIONALES (puedes invocar sin ellos y dejar que la IA elija defaults sensatos): durationSeconds, narrativeStyle, videoStyle, videoModel, features, cta, scriptNotes.\n\nUsa SOLO valores declarados en los enums. Si el usuario pide algo no soportado, p\xEDdele una opci\xF3n v\xE1lida.', VideoInput.shape, async (input) => {
     try {
       return await submitCreative(api, {
         path: "/v1/creatives/videos",
         estimatedSeconds: 300,
-        input
+        input,
+        transport
       });
     } catch (e) {
       throw translateError(e);
@@ -905,7 +1027,8 @@ function registerCreativeTools(server, api) {
       return await submitCreative(api, {
         path: "/v1/creatives/images",
         estimatedSeconds: 60,
-        input
+        input,
+        transport
       });
     } catch (e) {
       throw translateError(e);
@@ -916,7 +1039,8 @@ function registerCreativeTools(server, api) {
       return await submitCreative(api, {
         path: "/v1/creatives/landing",
         estimatedSeconds: 60,
-        input
+        input,
+        transport
       });
     } catch (e) {
       throw translateError(e);
@@ -944,6 +1068,14 @@ function registerConnectionTools(server, api) {
       throw translateError(e);
     }
   });
+  server.tool("list_tiktok_advertisers", "Lista las cuentas de TikTok Ads conectadas. Si est\xE1 vac\xEDa, ind\xEDcale al usuario conectar TikTok en productmaker.app/integrations.", z4.object({}).shape, async () => {
+    try {
+      const r = await api.getJson("/v1/tiktok/advertisers");
+      return asText(r);
+    } catch (e) {
+      throw translateError(e);
+    }
+  });
 }
 __name(registerConnectionTools, "registerConnectionTools");
 
@@ -954,14 +1086,38 @@ var ShopifyInput = z5.object({
   shopDomain: z5.string().min(1),
   numLandingImages: z5.number().int().min(1).max(7).optional(),
   variantIndex: z5.number().int().min(0).optional(),
+  /** ASK THE USER before setting: "¿Tu producto tiene variantes (talla, color, etc.)?".
+  *  When true, the landing renders variant-picker pills; when false, it ships
+  *  a single-option product page. Defaults to false. */
   showVariantPicker: z5.boolean().optional()
 });
+var McpCampaignConfig = z5.object({
+  dailyBudgetUsd: z5.number().positive().optional(),
+  /** ISO-3166-1 alpha-2 country codes. Meta accepts max 1 (single-country
+  *  ad set). TikTok takes only the first entry. */
+  targetCountries: z5.array(z5.string().length(2)).max(1).optional(),
+  campaignName: z5.string().trim().min(1).max(100).optional()
+});
 var MetaInput = z5.object({
   taskId: z5.string().min(1),
-  adAccountId: z5.string().min(1)
+  adAccountId: z5.string().min(1),
+  pixelId: z5.string().min(1).optional(),
+  landingUrl: z5.string().url().optional(),
+  /** Select which angles to publish by 0-based index. Omit to publish all
+  *  successful angles. Example: a task with 3 angles → `[0,2]` publishes #0 + #2. */
+  angleIndexes: z5.array(z5.number().int().nonnegative()).optional(),
+  campaignConfig: McpCampaignConfig.optional()
+});
+var TikTokInput = z5.object({
+  taskId: z5.string().min(1),
+  advertiserId: z5.string().min(1),
+  pixelId: z5.string().min(1).optional(),
+  landingUrl: z5.string().url().optional(),
+  angleIndexes: z5.array(z5.number().int().nonnegative()).optional(),
+  campaignConfig: McpCampaignConfig.optional()
 });
 function registerPublishTools(server, api) {
-  server.tool("publish_to_shopify", "Publica la landing y producto generados en una tienda Shopify conectada. Precondici\xF3n: la tarea debe estar en status='complete'. Use `get_task_status` antes para verificar. Por defecto incluye 3 im\xE1genes de landing del hero.", ShopifyInput.shape, async (input) => {
+  server.tool("publish_to_shopify", "Publica la landing y producto generados en una tienda Shopify conectada. Precondici\xF3n: la tarea debe estar en status='complete' \u2014 usa `get_task_status` antes. ANTES de llamar preg\xFAntale al usuario \"\xBFTu producto tiene variantes (talla, color, etc.)?\" y pasa `showVariantPicker: true` si responde que s\xED \u2014 eso renderiza los pills de variantes en la landing. Por defecto incluye 3 im\xE1genes del hero. La respuesta es markdown con el link a la landing y al producto.", ShopifyInput.shape, async (input) => {
     try {
       const numImages = input.numLandingImages ?? 3;
       const variantIndex = input.variantIndex ?? 0;
@@ -976,16 +1132,37 @@ function registerPublishTools(server, api) {
         selectedLandingImages,
         showVariantPicker: input.showVariantPicker
       });
-      return asText(r);
+      return renderShopifyPublishMarkdown(r);
     } catch (e) {
       throw translateError(e);
     }
   });
-  server.tool("publish_to_meta", "Crea una campa\xF1a de Meta Ads (Facebook/Instagram) desde la tarea. La campa\xF1a se crea SIEMPRE en estado PAUSED \u2014 el usuario debe activarla manualmente desde Meta Ads Manager, donde tambi\xE9n puede ajustar presupuesto, targeting y nombre de campa\xF1a. Use `list_meta_ad_accounts` antes para obtener un adAccountId v\xE1lido.", MetaInput.shape, async (input) => {
+  server.tool("publish_to_meta", "Crea una campa\xF1a de Meta Ads (Facebook/Instagram) desde la tarea. La campa\xF1a se crea SIEMPRE en estado PAUSED \u2014 el usuario la activa manualmente en Meta Ads Manager. Use `list_meta_ad_accounts` antes para un adAccountId v\xE1lido. `pixelId` opcional pero recomendado para tracking. `angleIndexes` (opcional): selecciona qu\xE9 \xE1ngulos publicar \u2014 si la tarea gener\xF3 3 \xE1ngulos y el usuario solo quiere los #0 y #2, pasa [0,2]; omitir = publicar todos. `campaignConfig` (opcional): `dailyBudgetUsd` (presupuesto diario en USD, ej. 25), `targetCountries` (c\xF3digos ISO-2, m\xE1x 1 para Meta), `campaignName` (m\xE1x 100 chars). Despu\xE9s de publicar usa `get_meta_campaign_status` para chequear el estado.", MetaInput.shape, async ({ taskId, campaignConfig, ...rest }) => {
     try {
-      const r = await api.postJson(`/v1/facebook/campaigns/from-task/${encodeURIComponent(input.taskId)}`, {
-        adAccountId: input.adAccountId
+      const body = {
+        ...rest
+      };
+      if (campaignConfig) {
+        body.campaignOverrides = toMetaCampaignOverrides(campaignConfig);
+      }
+      const r = await api.postJson(`/v1/facebook/campaigns/from-task/${encodeURIComponent(taskId)}`, body);
+      return asText({
+        ...r,
+        status: "PAUSED"
       });
+    } catch (e) {
+      throw translateError(e);
+    }
+  });
+  server.tool("publish_to_tiktok", "Crea una campa\xF1a de TikTok Ads desde la tarea. La campa\xF1a se crea SIEMPRE en estado PAUSED \u2014 el usuario la activa manualmente en TikTok Ads Manager. Use `list_tiktok_advertisers` antes para un advertiserId v\xE1lido. `pixelId` opcional pero recomendado para tracking. `angleIndexes` (opcional): selecciona qu\xE9 \xE1ngulos publicar \u2014 ej. [0,2]; omitir = publicar todos. `campaignConfig` (opcional): `dailyBudgetUsd` (presupuesto diario en USD, ej. 25), `targetCountries` (c\xF3digos ISO-2, primero se usa), `campaignName` (m\xE1x 100 chars). Despu\xE9s de publicar usa `get_tiktok_campaign_status` para chequear el estado.", TikTokInput.shape, async ({ taskId, campaignConfig, ...rest }) => {
+    try {
+      const body = {
+        ...rest
+      };
+      if (campaignConfig) {
+        body.campaignConfig = toTikTokCampaignConfig(campaignConfig);
+      }
+      const r = await api.postJson(`/v1/tiktok/campaigns/from-task/${encodeURIComponent(taskId)}`, body);
       return asText({
         ...r,
         status: "PAUSED"
@@ -996,9 +1173,153 @@ function registerPublishTools(server, api) {
   });
 }
 __name(registerPublishTools, "registerPublishTools");
+function renderShopifyPublishMarkdown(r) {
+  const lines = [];
+  const statusEmoji = r.status === "success" ? "\u2705" : r.status === "error" ? "\u274C" : "\u23F3";
+  lines.push(`${statusEmoji} **Publicaci\xF3n en Shopify** \u2014 ${r.shopDomain}`);
+  lines.push(`Estado: \`${r.status}\``);
+  if (r.pageUrl) lines.push(`
+### Landing
+[Ver landing publicada](${r.pageUrl})`);
+  if (r.productUrl) lines.push(`
+### Producto
+[Ver producto](${r.productUrl})`);
+  if (!r.pageUrl && !r.productUrl && r.status !== "success") {
+    lines.push("\n_La publicaci\xF3n a\xFAn est\xE1 proces\xE1ndose. Usa `get_task_status` para verificar progreso._");
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: lines.join("\n")
+      }
+    ]
+  };
+}
+__name(renderShopifyPublishMarkdown, "renderShopifyPublishMarkdown");
+function toMetaCampaignOverrides(cfg) {
+  const out = {};
+  if (cfg.dailyBudgetUsd !== void 0) out.dailyBudgetUsd = cfg.dailyBudgetUsd;
+  if (cfg.targetCountries !== void 0) out.targetCountries = cfg.targetCountries;
+  if (cfg.campaignName !== void 0) out.campaignName = cfg.campaignName;
+  return out;
+}
+__name(toMetaCampaignOverrides, "toMetaCampaignOverrides");
+function toTikTokCampaignConfig(cfg) {
+  const out = {};
+  if (cfg.dailyBudgetUsd !== void 0) out.dailyBudget = Math.round(cfg.dailyBudgetUsd * 100);
+  if (cfg.targetCountries && cfg.targetCountries.length > 0) out.targetCountry = cfg.targetCountries[0];
+  if (cfg.campaignName !== void 0) out.campaignName = cfg.campaignName;
+  return out;
+}
+__name(toTikTokCampaignConfig, "toTikTokCampaignConfig");
+
+// src/tools/campaigns.ts
+import { z as z6 } from "zod";
+var MetaStatusInput = z6.object({
+  campaignId: z6.string().min(1).describe("Meta campaign ID returned by publish_to_meta.")
+});
+var TikTokStatusInput = z6.object({
+  campaignId: z6.string().min(1).describe("TikTok campaign ID returned by publish_to_tiktok."),
+  advertiserId: z6.string().min(1).describe("The same advertiserId used to publish the campaign.")
+});
+function registerCampaignTools(server, api) {
+  server.tool("get_meta_campaign_status", "Consulta el estado actual + m\xE9tricas lifetime (spend, impressions, clicks, reach) de una campa\xF1a Meta publicada. Llama esto DESPU\xC9S de `publish_to_meta` para confirmar que la campa\xF1a se cre\xF3 correctamente y para reportar performance al usuario. Es read-only \u2014 no modifica nada en Meta Ads Manager.", MetaStatusInput.shape, async (input) => {
+    try {
+      const r = await api.getJson(`/v1/facebook/campaigns/${encodeURIComponent(input.campaignId)}`);
+      return renderMetaStatusMarkdown(r);
+    } catch (e) {
+      throw translateError(e);
+    }
+  });
+  server.tool("get_tiktok_campaign_status", "Consulta el estado actual + reporte lifetime (spend, impressions, clicks, reach) de una campa\xF1a TikTok publicada. Requiere `advertiserId` (el mismo con el que se cre\xF3). Llama esto DESPU\xC9S de `publish_to_tiktok` para confirmar creaci\xF3n correcta y reportar performance. Es read-only.", TikTokStatusInput.shape, async (input) => {
+    try {
+      const r = await api.getJson(`/v1/tiktok/campaigns/${encodeURIComponent(input.campaignId)}?advertiserId=${encodeURIComponent(input.advertiserId)}`);
+      return renderTikTokStatusMarkdown(r);
+    } catch (e) {
+      throw translateError(e);
+    }
+  });
+}
+__name(registerCampaignTools, "registerCampaignTools");
+function renderCampaignStatusMarkdown(opts) {
+  const lines = [
+    `\u{1F4CA} **${escapeMdLabel(opts.name)}** (\`${opts.campaignId}\`)`
+  ];
+  for (const [label, value] of opts.statusLines) {
+    lines.push(`- ${label}: \`${value}\``);
+  }
+  if (opts.metrics) {
+    lines.push("\n### M\xE9tricas (lifetime)");
+    lines.push(`- Spend: ${opts.metrics.spend}`);
+    lines.push(`- Impressions: ${opts.metrics.impressions}`);
+    lines.push(`- Clicks: ${opts.metrics.clicks}`);
+    lines.push(`- Reach: ${opts.metrics.reach}`);
+  } else {
+    lines.push(`
+_${opts.noMetricsHint ?? "A\xFAn no hay m\xE9tricas reportadas."}_`);
+  }
+  return {
+    content: [
+      {
+        type: "text",
+        text: lines.join("\n")
+      }
+    ]
+  };
+}
+__name(renderCampaignStatusMarkdown, "renderCampaignStatusMarkdown");
+function renderMetaStatusMarkdown(r) {
+  const statusLines = [
+    [
+      "Estado efectivo",
+      r.effectiveStatus
+    ],
+    [
+      "Estado configurado",
+      r.configuredStatus
+    ]
+  ];
+  if (r.objective) statusLines.push([
+    "Objetivo",
+    r.objective
+  ]);
+  return renderCampaignStatusMarkdown({
+    name: r.name,
+    campaignId: r.campaignId,
+    statusLines,
+    metrics: r.insights,
+    noMetricsHint: "A\xFAn no hay m\xE9tricas reportadas (la campa\xF1a puede estar pausada o sin entregar)."
+  });
+}
+__name(renderMetaStatusMarkdown, "renderMetaStatusMarkdown");
+function renderTikTokStatusMarkdown(r) {
+  const statusLines = [
+    [
+      "Estado de operaci\xF3n",
+      r.operationStatus
+    ]
+  ];
+  if (r.secondaryStatus) statusLines.push([
+    "Estado secundario",
+    r.secondaryStatus
+  ]);
+  if (r.objectiveType) statusLines.push([
+    "Objetivo",
+    r.objectiveType
+  ]);
+  return renderCampaignStatusMarkdown({
+    name: r.name,
+    campaignId: r.campaignId,
+    statusLines,
+    metrics: r.report
+  });
+}
+__name(renderTikTokStatusMarkdown, "renderTikTokStatusMarkdown");
 
 // src/server.ts
-function createServer(apiKey, apiBaseUrl, proxyBaseUrl = null) {
+function createServer(opts) {
+  const { apiKey, apiBaseUrl, proxyBaseUrl = null, transport = "http" } = opts;
   const server = new McpServer({
     name: "productmaker",
     version: MCP_VERSION
@@ -1011,10 +1332,16 @@ function createServer(apiKey, apiBaseUrl, proxyBaseUrl = null) {
     }
   });
   const api = new ApiClient(apiBaseUrl, apiKey);
-  registerTaskTools(server, api, proxyBaseUrl);
-  registerCreativeTools(server, api);
+  registerTaskTools(server, api, {
+    proxyBaseUrl,
+    transport
+  });
+  registerCreativeTools(server, api, {
+    transport
+  });
   registerConnectionTools(server, api);
   registerPublishTools(server, api);
+  registerCampaignTools(server, api);
   return server;
 }
 __name(createServer, "createServer");
@@ -1154,7 +1481,7 @@ function createApp(opts) {
     legacyHeaders: false
   }));
   app.use(express.json({
-    limit: "10mb"
+    limit: "1mb"
   }));
   app.get("/healthz", (_req, res) => {
     res.json({
@@ -1176,7 +1503,12 @@ function createApp(opts) {
       return;
     }
     try {
-      const server = createServer(apiKey, opts.apiBaseUrl, opts.proxyBaseUrl ?? null);
+      const server = createServer({
+        apiKey,
+        apiBaseUrl: opts.apiBaseUrl,
+        proxyBaseUrl: opts.proxyBaseUrl ?? null,
+        transport: "http"
+      });
       const transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: void 0
       });