@productmaker/mcp 12.1.1 → 12.1.2

package/README.md

@@ -309,6 +309,13 @@ The `base64` field was removed. MCP JSON-RPC transports truncate large tool argu
 
 ## Version history
 
+### 12.1.2 — ChatGPT result metadata compatibility
+
+- The result viewer reads ChatGPT's canonical `toolResponseMetadata` envelopes as well as direct metadata and standard MCP App notifications. Initial results and later updates retain the same media validation and cleanup.
+- The bridge answers trusted parent JSON-RPC pings and accepts initialization only from its matching response, once. A host request reusing the same ID cannot initialize it.
+- After changing a development connector's tool descriptors, refresh its tools in ChatGPT. A successful server deployment alone does not prove that the installed connector has discovered the new viewer.
+- Hosted playback remains a separate release check; local bridge fixtures do not establish it.
+
 ### 12.1.1 — Real media in chat and service landing quote parity
 
 - `get_task_status` attaches a read-only MCP App with the delivered ProductMaker images and playable videos, plus original native image bytes and protected download fallbacks. It never generates replacement media.

package/dist/http.js

@@ -25883,7 +25883,7 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "12.1.1";
+var MCP_VERSION = "12.1.2";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";

package/dist/stdio.js

@@ -24210,7 +24210,7 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "12.1.1";
+var MCP_VERSION = "12.1.2";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";

package/dist/ui/task-results-app.html

@@ -117,9 +117,18 @@
         const media = document.getElementById("media");
         let receivedResult = false;
         let hostReady = false;
+        let initializationSettled = false;
         let disposed = false;
+        const initializeRequestId = 1;
         const isRecord = (value) =>
           value !== null && typeof value === "object" && !Array.isArray(value);
+        const resultStates = new Set([
+          "ready",
+          "empty",
+          "pending",
+          "awaiting_review",
+          "error",
+        ]);
         const safeUrl = (value) => {
           if (typeof value !== "string") return null;
           try {
@@ -257,9 +266,7 @@
             !isRecord(result) ||
             result.isError ||
             !isRecord(data) ||
-            !["ready", "empty", "pending", "awaiting_review", "error"].includes(
-              data.state,
-            )
+            !resultStates.has(data.state)
           ) {
             setState(
               "error",
@@ -321,10 +328,44 @@
           }
           reportSize();
         }
+        function applyOpenAiMetadata(metadata) {
+          if (!isRecord(metadata) || disposed) return;
+          // ChatGPT preserves the MCP envelope in toolResponseMetadata:
+          // https://developers.openai.com/plugins/reference#capabilities
+          // Read only the known wrappers; never search arbitrary nested data.
+          const callResult = isRecord(metadata.call_tool_result)
+            ? metadata.call_tool_result
+            : null;
+          const candidates = [
+            metadata.mcp_tool_result,
+            callResult?.mcp_tool_result,
+            callResult,
+            metadata,
+            { _meta: metadata },
+          ];
+          const result = candidates.find((candidate) => {
+            if (!isRecord(candidate)) return false;
+            if (candidate.isError === true) return true;
+            const data = isRecord(candidate._meta)
+              ? candidate._meta.taskResults
+              : null;
+            return (
+              isRecord(data) &&
+              resultStates.has(data.state) &&
+              Array.isArray(data.images) &&
+              Array.isArray(data.videos) &&
+              Array.isArray(data.links)
+            );
+          });
+          // Globals can arrive before a result or with unrelated host updates.
+          // Keep delivered playback until a valid result or explicit error.
+          if (result) applyResult(result);
+        }
         function handleMessage(event) {
           if (
             event.source !== window.parent ||
             !isRecord(event.data) ||
+            event.data.jsonrpc !== "2.0" ||
             disposed
           )
             return;
@@ -343,7 +384,30 @@
               );
             }
             disposed = true;
-          } else if (message.id === 1) {
+          } else if (message.method === "ping") {
+            if (
+              (typeof message.id === "string" ||
+                Number.isInteger(message.id)) &&
+              !Object.prototype.hasOwnProperty.call(message, "result") &&
+              !Object.prototype.hasOwnProperty.call(message, "error") &&
+              (message.params === undefined || isRecord(message.params))
+            )
+              window.parent.postMessage(
+                { jsonrpc: "2.0", id: message.id, result: {} },
+                "*",
+              );
+          } else if (
+            !initializationSettled &&
+            message.id === initializeRequestId &&
+            !Object.prototype.hasOwnProperty.call(message, "method") &&
+            ((isRecord(message.result) &&
+              !Object.prototype.hasOwnProperty.call(message, "error")) ||
+              (isRecord(message.error) &&
+                Number.isInteger(message.error.code) &&
+                typeof message.error.message === "string" &&
+                !Object.prototype.hasOwnProperty.call(message, "result")))
+          ) {
+            initializationSettled = true;
             window.clearTimeout(initializeTimeout);
             if (message.error) {
               if (!receivedResult) applyResult({ isError: true });
@@ -366,7 +430,7 @@
               "toolResponseMetadata",
             )
           )
-            applyResult({ _meta: globals.toolResponseMetadata });
+            applyOpenAiMetadata(globals.toolResponseMetadata);
         }
         const resultTimeout = window.setTimeout(() => {
           if (!receivedResult) applyResult({ isError: true });
@@ -380,7 +444,7 @@
         window.parent.postMessage(
           {
             jsonrpc: "2.0",
-            id: 1,
+            id: initializeRequestId,
             method: "ui/initialize",
             params: {
               appInfo: { name: "ProductMaker task results", version: "1.0.0" },
@@ -390,8 +454,7 @@
           },
           "*",
         );
-        if (isRecord(window.openai?.toolResponseMetadata))
-          applyResult({ _meta: window.openai.toolResponseMetadata });
+        applyOpenAiMetadata(window.openai?.toolResponseMetadata);
       })();
     </script>
   </body>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productmaker/mcp",
-  "version": "12.1.1",
+  "version": "12.1.2",
   "type": "module",
   "private": false,
   "description": "ProductMaker MCP server — cost products, generate landing pages, UGC videos, and ad creatives, and publish to Shopify, Meta Ads, and TikTok Ads.",