@productmaker/mcp 12.2.7 → 12.2.8

package/README.md

@@ -371,6 +371,20 @@ out on purpose: the integration key is a secret pasted in Integrations. All
 nine are MCP-only (`whatsapp: "unavailable"`) and behind the `financial-control`
 admin feature.
 
+### 12.2.8 — Result-viewer origin and correction delivery (unreleased)
+
+- Declare the shared OpenAI component origin on listed and readable result-viewer
+  resources, matching the uploader. Keep the standard host-selected origin and
+  fail-closed media CSP unchanged for other MCP Apps hosts.
+- SDK transport tests verify both metadata placements. Native acceptance and the
+  cause of a browser sandbox cancellation remain separate checks.
+- Deliver published image corrections from `get_image_edit_status` through the
+  same read-only task viewer and protected asset proxy. Preserve operation status,
+  degradation and error; queued/processing stay pending and failed stays error.
+  Missing or invalid proxy/media configuration stays empty, with no raw storage
+  URL or storage key in model-facing content. The original task being done never
+  makes an unfinished correction ready. No generation or paid action is added.
+
 ### 12.2.7 — Upload reliability and media transport hardening (unreleased)
 
 - Correct public landing/Shopify publication and Meta creative URL/temporary-asset

package/dist/http.js

@@ -3021,7 +3021,7 @@ var LlmPricingSnapshotSchema = z3.discriminatedUnion("source", [
 });
 function nativeOutputTokenCeiling(target) {
   if (target.nativeOwnedOutputPolicy) return target.nativeOwnedOutputPolicy.verifiedMaxOutputTokens;
-  return target.transport === "google" || target.id === "gemini-3.1-pro-openrouter" ? 65536 : 1e5;
+  return target.transport === "google" || target.id === "gemini-flash-runware" || target.id === "gemini-3.1-pro-openrouter" ? 65536 : 1e5;
 }
 __name(nativeOutputTokenCeiling, "nativeOutputTokenCeiling");
 var LlmRouteTargetSchema = z3.object({
@@ -8288,6 +8288,12 @@ var CodeLandingAuthorEnvelopeSchema = z23.object({
   */
   variantFacts: z23.array(LandingVariantFactSchema).max(16).optional()
 });
+var CODE_LANDING_DEFERRED_AUTHOR_PROVIDER_RESULT_KIND = "code_landing_deferred_author_provider_v1";
+var CodeLandingDeferredAuthorProviderResultSchema = z23.object({
+  kind: z23.literal(CODE_LANDING_DEFERRED_AUTHOR_PROVIDER_RESULT_KIND),
+  stepKey: z23.string().min(1),
+  providerResult: z23.record(z23.string(), z23.unknown())
+});
 var CodeLandingCommerceChangeSchema = z23.object({
   price: z23.string().trim().min(1).max(40).optional(),
   compareAtPrice: z23.string().trim().min(1).max(40).nullable().optional(),
@@ -10818,6 +10824,8 @@ var role = z38.object({
   provider: id2,
   model: id2,
   bindingId: id2,
+  /** Immutable shared-router chain for fresh recipes; absent preserves legacy custody. */
+  routeSnapshot: LlmRouteSnapshotSchema.optional(),
   /** null explicitly omits effort on OpenRouter; undefined is a historical recipe. */
   reasoning: CreativeEngineRoleReasoningSchema.nullable().optional(),
   /** Server-owned output ceiling; omitted historical recipes keep their old stage cap. */
@@ -10837,7 +10845,13 @@ var CreativeEngineRecipeSchema = z38.object({
   roles: z38.object({
     director: role,
     reviewer: role,
-    executor: role.nullable()
+    executor: role.nullable(),
+    /**
+     * Independent reviewer of the assembled final video only (owner
+     * decision 2026-10-26). Absent on historical recipes: their final
+     * review keeps the frozen `reviewer`, unchanged hash and identity.
+     */
+    finalReviewer: role.optional()
   }).strict(),
   capabilities: z38.object({
     videoModels: z38.array(id2).min(1),
@@ -10856,9 +10870,14 @@ var CreativeEngineRecipeSchema = z38.object({
     /** New recipes reserve an explicit native failover; historical calls stay single-route. */
     modelFallbackPolicy: z38.literal("anthropic_conclusive_v1").optional(),
     /** New reviewer/executor calls use the shared same-model native provider router. */
-    centralModelRouting: z38.literal("native_owned_same_model_v1").optional(),
+    centralModelRouting: z38.enum([
+      "native_owned_same_model_v1",
+      "shared_role_chain_v1"
+    ]).optional(),
     /** Skip only a redundant global review of a deterministically frozen scene repair. */
     repairPlanReviewPolicy: z38.literal("frozen_contract_v1").optional(),
+    /** Root-only visual patch wire contract; absent preserves historic full-plan recovery. */
+    repairAuthoring: z38.literal("scene_patch_v1").optional(),
     /** New requests maximize output inside model and measured input headroom. */
     outputTokenPolicy: z38.literal("model_max_v1").optional(),
     /**
@@ -11319,6 +11338,7 @@ var CreativeEngineCandidateSchema = z38.object({
   qualityScore: z38.number().min(0).max(100)
 }).strict();
 var CreativeEngineCostBasisSchema = z38.enum([
+  "reused",
   "provider_reported",
   "provider_credits_conversion",
   "catalogue_estimate"
@@ -11619,6 +11639,15 @@ var CreativeEngineEventSchema = z38.discriminatedUnion("type", [
     }).strict(),
     plan: CreativeEnginePlanSchema
   }).strict(),
+  z38.object({
+    type: z38.literal("accepted_author_output_revalidated"),
+    operationId: id2,
+    acceptedId: id2,
+    context: CreativeEngineContextBindingSchema,
+    outputSha256: hash,
+    validationRevision: z38.string().regex(/^[a-z][a-z0-9_]{0,63}$/),
+    plan: CreativeEnginePlanSchema
+  }).strict(),
   z38.object({
     type: z38.literal("plan_recorded"),
     plan: CreativeEnginePlanSchema
@@ -13110,7 +13139,9 @@ var SERVICE_MODES = [
 ];
 var ServiceModeSchema = z46.enum(SERVICE_MODES);
 var AppFeaturesSchema = z46.object({
-  serviceMotionGraphics: z46.boolean()
+  serviceMotionGraphics: z46.boolean(),
+  /** GIF authoring controls; absent on older APIs means hidden. */
+  landingGif: z46.boolean().default(false)
 });
 var MOTION_GRAPHICS_FORMATS = [
   "vertical",
@@ -30873,11 +30904,12 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "12.2.7";
+var MCP_VERSION = "12.2.8";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";
 import { z as z132 } from "zod";
+import { registerAppResource, RESOURCE_MIME_TYPE } from "@modelcontextprotocol/ext-apps/server";
 
 // src/public-https.ts
 import { lookup } from "dns/promises";
@@ -31337,11 +31369,12 @@ function assertSafePublicBaseUrl(envName, url2) {
 }
 __name(assertSafePublicBaseUrl, "assertSafePublicBaseUrl");
 
+// src/app-origin.ts
+var PRODUCTMAKER_APP_ORIGIN = "https://productmaker.app";
+
 // src/meta-upload-app.ts
-import { registerAppResource, RESOURCE_MIME_TYPE } from "@modelcontextprotocol/ext-apps/server";
 var MEDIA_UPLOAD_APP_RESOURCE_URI = "ui://media-upload/v1.html";
 var MEDIA_UPLOAD_APP_NAME = "ProductMaker media upload";
-var PRODUCTMAKER_APP_ORIGIN = "https://productmaker.app";
 var MEDIA_UPLOAD_APP_HTML_URL = new URL("./ui/meta-upload-app.html", import.meta.url);
 var PRODUCTMAKER_UPLOAD_STORAGE_ORIGIN = "https://825805a8113ddb98b68b9b0ddbb5d72a.r2.cloudflarestorage.com";
 var MEDIA_UPLOAD_CONNECT_DOMAINS = [
@@ -31541,6 +31574,7 @@ function registerTaskResultsAppResource(server, proxyBaseUrl) {
         connectDomains: []
       }
     },
+    "openai/widgetDomain": PRODUCTMAKER_APP_ORIGIN,
     "openai/widgetCSP": {
       resource_domains: resourceDomains,
       connect_domains: []
@@ -37271,7 +37305,7 @@ function resolveLandingSetup(setup) {
   };
 }
 __name(resolveLandingSetup, "resolveLandingSetup");
-function registerCreativeTools(server, api, { transport = "http" } = {}) {
+function registerCreativeTools(server, api, { transport = "http", proxyBaseUrl = null } = {}) {
   server.registerTool("generate_free_video", {
     title: "Custom-script video",
     description: generateFreeVideoGuidance.summary + ' Si el usuario adjunta o menciona una imagen local, llama primero request_media_upload con mediaKind=image y usa el assetId devuelto; no pidas path ni URL. Devuelve un taskId y procesa el job de forma as\xEDncrona.\n\nREQUERIDOS: rawPrompt, quality, durationSeconds y videoResolution.\n\nCALIDAD: "economy" = Econ\xF3mico, "medium" = Medio o "pro" = Pro (Wan). Economy admite 6/8/10/15s; Medium admite cualquier duraci\xF3n entera de 4 a 15s; Pro admite enteros de 2 a 30s y audio natural. `freeProModel` se elimin\xF3 \u2014 usa `modelId` (ver su descripci\xF3n); Seedance 2.5 est\xE1 inactivo y se rechaza con un error claro.\n\nSUBT\xCDTULOS: si addSubtitles=true, el rawPrompt completo se usa como texto exacto de subt\xEDtulos y debe tener m\xE1ximo 500 caracteres; no existe una pregunta adicional de transcripci\xF3n.\n\nPara videos normales con narrativa/\xE1ngulo usa generate_video_creative. Para tareas combinadas de producto usa create_product_task.',
@@ -37489,10 +37523,43 @@ function registerCreativeTools(server, api, { transport = "http" } = {}) {
       taskId: z142.string().uuid(),
       operationId: z142.string().uuid()
     },
-    annotations: READS_INTERNAL
+    annotations: READS_INTERNAL,
+    _meta: taskResultsToolMeta()
   }, async (input) => {
     try {
-      return asText(await api.getJson(`/v1/creatives/images/${encodeURIComponent(input.taskId)}/operations/${encodeURIComponent(input.operationId)}`));
+      const { assetUrl, assetKey: _assetKey, ...operation } = ImageCreativeEditStatusResponse.parse(await api.getJson(`/v1/creatives/images/${encodeURIComponent(input.taskId)}/operations/${encodeURIComponent(input.operationId)}`));
+      const imageExtension = assetUrl ? new URL(assetUrl).pathname.match(/\.(png|jpe?g|webp)$/i)?.[0]?.toLowerCase() : void 0;
+      const proxyUrl = operation.status === "published" && assetUrl ? buildProxyUrl({
+        r2Url: assetUrl,
+        filename: `image-edit-${operation.variantIndex + 1}${imageExtension ?? ".bin"}`,
+        proxyBaseUrl
+      }) : null;
+      const view = buildTaskResultsView({
+        images: proxyUrl ? [
+          {
+            url: proxyUrl,
+            alt: `Corrected image ${operation.variantIndex + 1}`
+          }
+        ] : [],
+        videos: [],
+        links: []
+      }, proxyBaseUrl);
+      if (operation.status === "failed") view.state = "error";
+      else if (operation.status !== "published") view.state = "pending";
+      const deliveredUrl = view.images[0]?.url;
+      const response = {
+        ...operation,
+        ...deliveredUrl ? {
+          assetUrl: deliveredUrl
+        } : {}
+      };
+      return {
+        ...asText(response),
+        structuredContent: response,
+        _meta: {
+          taskResults: view
+        }
+      };
     } catch (error) {
       throw translateError(error);
     }
@@ -41413,6 +41480,7 @@ function createServer(opts) {
   registerServiceImageTools(server, api);
   registerAnimatedVideoTools(server, api);
   registerCreativeTools(server, api, {
+    proxyBaseUrl,
     transport
   });
   registerCreativeVariantTools(server, api);

package/dist/stdio.js

@@ -2796,7 +2796,7 @@ var LlmPricingSnapshotSchema = z3.discriminatedUnion("source", [
 });
 function nativeOutputTokenCeiling(target) {
   if (target.nativeOwnedOutputPolicy) return target.nativeOwnedOutputPolicy.verifiedMaxOutputTokens;
-  return target.transport === "google" || target.id === "gemini-3.1-pro-openrouter" ? 65536 : 1e5;
+  return target.transport === "google" || target.id === "gemini-flash-runware" || target.id === "gemini-3.1-pro-openrouter" ? 65536 : 1e5;
 }
 __name(nativeOutputTokenCeiling, "nativeOutputTokenCeiling");
 var LlmRouteTargetSchema = z3.object({
@@ -8063,6 +8063,12 @@ var CodeLandingAuthorEnvelopeSchema = z23.object({
   */
   variantFacts: z23.array(LandingVariantFactSchema).max(16).optional()
 });
+var CODE_LANDING_DEFERRED_AUTHOR_PROVIDER_RESULT_KIND = "code_landing_deferred_author_provider_v1";
+var CodeLandingDeferredAuthorProviderResultSchema = z23.object({
+  kind: z23.literal(CODE_LANDING_DEFERRED_AUTHOR_PROVIDER_RESULT_KIND),
+  stepKey: z23.string().min(1),
+  providerResult: z23.record(z23.string(), z23.unknown())
+});
 var CodeLandingCommerceChangeSchema = z23.object({
   price: z23.string().trim().min(1).max(40).optional(),
   compareAtPrice: z23.string().trim().min(1).max(40).nullable().optional(),
@@ -10593,6 +10599,8 @@ var role = z38.object({
   provider: id2,
   model: id2,
   bindingId: id2,
+  /** Immutable shared-router chain for fresh recipes; absent preserves legacy custody. */
+  routeSnapshot: LlmRouteSnapshotSchema.optional(),
   /** null explicitly omits effort on OpenRouter; undefined is a historical recipe. */
   reasoning: CreativeEngineRoleReasoningSchema.nullable().optional(),
   /** Server-owned output ceiling; omitted historical recipes keep their old stage cap. */
@@ -10612,7 +10620,13 @@ var CreativeEngineRecipeSchema = z38.object({
   roles: z38.object({
     director: role,
     reviewer: role,
-    executor: role.nullable()
+    executor: role.nullable(),
+    /**
+     * Independent reviewer of the assembled final video only (owner
+     * decision 2026-10-26). Absent on historical recipes: their final
+     * review keeps the frozen `reviewer`, unchanged hash and identity.
+     */
+    finalReviewer: role.optional()
   }).strict(),
   capabilities: z38.object({
     videoModels: z38.array(id2).min(1),
@@ -10631,9 +10645,14 @@ var CreativeEngineRecipeSchema = z38.object({
     /** New recipes reserve an explicit native failover; historical calls stay single-route. */
     modelFallbackPolicy: z38.literal("anthropic_conclusive_v1").optional(),
     /** New reviewer/executor calls use the shared same-model native provider router. */
-    centralModelRouting: z38.literal("native_owned_same_model_v1").optional(),
+    centralModelRouting: z38.enum([
+      "native_owned_same_model_v1",
+      "shared_role_chain_v1"
+    ]).optional(),
     /** Skip only a redundant global review of a deterministically frozen scene repair. */
     repairPlanReviewPolicy: z38.literal("frozen_contract_v1").optional(),
+    /** Root-only visual patch wire contract; absent preserves historic full-plan recovery. */
+    repairAuthoring: z38.literal("scene_patch_v1").optional(),
     /** New requests maximize output inside model and measured input headroom. */
     outputTokenPolicy: z38.literal("model_max_v1").optional(),
     /**
@@ -11094,6 +11113,7 @@ var CreativeEngineCandidateSchema = z38.object({
   qualityScore: z38.number().min(0).max(100)
 }).strict();
 var CreativeEngineCostBasisSchema = z38.enum([
+  "reused",
   "provider_reported",
   "provider_credits_conversion",
   "catalogue_estimate"
@@ -11394,6 +11414,15 @@ var CreativeEngineEventSchema = z38.discriminatedUnion("type", [
     }).strict(),
     plan: CreativeEnginePlanSchema
   }).strict(),
+  z38.object({
+    type: z38.literal("accepted_author_output_revalidated"),
+    operationId: id2,
+    acceptedId: id2,
+    context: CreativeEngineContextBindingSchema,
+    outputSha256: hash,
+    validationRevision: z38.string().regex(/^[a-z][a-z0-9_]{0,63}$/),
+    plan: CreativeEnginePlanSchema
+  }).strict(),
   z38.object({
     type: z38.literal("plan_recorded"),
     plan: CreativeEnginePlanSchema
@@ -12885,7 +12914,9 @@ var SERVICE_MODES = [
 ];
 var ServiceModeSchema = z46.enum(SERVICE_MODES);
 var AppFeaturesSchema = z46.object({
-  serviceMotionGraphics: z46.boolean()
+  serviceMotionGraphics: z46.boolean(),
+  /** GIF authoring controls; absent on older APIs means hidden. */
+  landingGif: z46.boolean().default(false)
 });
 var MOTION_GRAPHICS_FORMATS = [
   "vertical",
@@ -29200,11 +29231,12 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "12.2.7";
+var MCP_VERSION = "12.2.8";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";
 import { z as z131 } from "zod";
+import { registerAppResource, RESOURCE_MIME_TYPE } from "@modelcontextprotocol/ext-apps/server";
 
 // src/public-https.ts
 import { lookup } from "dns/promises";
@@ -29668,11 +29700,12 @@ function assertSafeApiBaseUrl(url2) {
 }
 __name(assertSafeApiBaseUrl, "assertSafeApiBaseUrl");
 
+// src/app-origin.ts
+var PRODUCTMAKER_APP_ORIGIN = "https://productmaker.app";
+
 // src/meta-upload-app.ts
-import { registerAppResource, RESOURCE_MIME_TYPE } from "@modelcontextprotocol/ext-apps/server";
 var MEDIA_UPLOAD_APP_RESOURCE_URI = "ui://media-upload/v1.html";
 var MEDIA_UPLOAD_APP_NAME = "ProductMaker media upload";
-var PRODUCTMAKER_APP_ORIGIN = "https://productmaker.app";
 var MEDIA_UPLOAD_APP_HTML_URL = new URL("./ui/meta-upload-app.html", import.meta.url);
 var PRODUCTMAKER_UPLOAD_STORAGE_ORIGIN = "https://825805a8113ddb98b68b9b0ddbb5d72a.r2.cloudflarestorage.com";
 var MEDIA_UPLOAD_CONNECT_DOMAINS = [
@@ -29872,6 +29905,7 @@ function registerTaskResultsAppResource(server, proxyBaseUrl) {
         connectDomains: []
       }
     },
+    "openai/widgetDomain": PRODUCTMAKER_APP_ORIGIN,
     "openai/widgetCSP": {
       resource_domains: resourceDomains,
       connect_domains: []
@@ -35756,7 +35790,7 @@ function resolveLandingSetup(setup) {
   };
 }
 __name(resolveLandingSetup, "resolveLandingSetup");
-function registerCreativeTools(server, api, { transport = "http" } = {}) {
+function registerCreativeTools(server, api, { transport = "http", proxyBaseUrl = null } = {}) {
   server.registerTool("generate_free_video", {
     title: "Custom-script video",
     description: generateFreeVideoGuidance.summary + ' Si el usuario adjunta o menciona una imagen local, llama primero request_media_upload con mediaKind=image y usa el assetId devuelto; no pidas path ni URL. Devuelve un taskId y procesa el job de forma as\xEDncrona.\n\nREQUERIDOS: rawPrompt, quality, durationSeconds y videoResolution.\n\nCALIDAD: "economy" = Econ\xF3mico, "medium" = Medio o "pro" = Pro (Wan). Economy admite 6/8/10/15s; Medium admite cualquier duraci\xF3n entera de 4 a 15s; Pro admite enteros de 2 a 30s y audio natural. `freeProModel` se elimin\xF3 \u2014 usa `modelId` (ver su descripci\xF3n); Seedance 2.5 est\xE1 inactivo y se rechaza con un error claro.\n\nSUBT\xCDTULOS: si addSubtitles=true, el rawPrompt completo se usa como texto exacto de subt\xEDtulos y debe tener m\xE1ximo 500 caracteres; no existe una pregunta adicional de transcripci\xF3n.\n\nPara videos normales con narrativa/\xE1ngulo usa generate_video_creative. Para tareas combinadas de producto usa create_product_task.',
@@ -35974,10 +36008,43 @@ function registerCreativeTools(server, api, { transport = "http" } = {}) {
       taskId: z141.string().uuid(),
       operationId: z141.string().uuid()
     },
-    annotations: READS_INTERNAL
+    annotations: READS_INTERNAL,
+    _meta: taskResultsToolMeta()
   }, async (input) => {
     try {
-      return asText(await api.getJson(`/v1/creatives/images/${encodeURIComponent(input.taskId)}/operations/${encodeURIComponent(input.operationId)}`));
+      const { assetUrl, assetKey: _assetKey, ...operation } = ImageCreativeEditStatusResponse.parse(await api.getJson(`/v1/creatives/images/${encodeURIComponent(input.taskId)}/operations/${encodeURIComponent(input.operationId)}`));
+      const imageExtension = assetUrl ? new URL(assetUrl).pathname.match(/\.(png|jpe?g|webp)$/i)?.[0]?.toLowerCase() : void 0;
+      const proxyUrl = operation.status === "published" && assetUrl ? buildProxyUrl({
+        r2Url: assetUrl,
+        filename: `image-edit-${operation.variantIndex + 1}${imageExtension ?? ".bin"}`,
+        proxyBaseUrl
+      }) : null;
+      const view = buildTaskResultsView({
+        images: proxyUrl ? [
+          {
+            url: proxyUrl,
+            alt: `Corrected image ${operation.variantIndex + 1}`
+          }
+        ] : [],
+        videos: [],
+        links: []
+      }, proxyBaseUrl);
+      if (operation.status === "failed") view.state = "error";
+      else if (operation.status !== "published") view.state = "pending";
+      const deliveredUrl = view.images[0]?.url;
+      const response = {
+        ...operation,
+        ...deliveredUrl ? {
+          assetUrl: deliveredUrl
+        } : {}
+      };
+      return {
+        ...asText(response),
+        structuredContent: response,
+        _meta: {
+          taskResults: view
+        }
+      };
     } catch (error) {
       throw translateError(error);
     }
@@ -39958,6 +40025,7 @@ function createServer(opts) {
   registerServiceImageTools(server, api);
   registerAnimatedVideoTools(server, api);
   registerCreativeTools(server, api, {
+    proxyBaseUrl,
     transport
   });
   registerCreativeVariantTools(server, api);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productmaker/mcp",
-  "version": "12.2.7",
+  "version": "12.2.8",
   "type": "module",
   "private": false,
   "description": "ProductMaker MCP server — cost products, generate landing pages, UGC videos, and ad creatives, and publish to Shopify, Meta Ads, and TikTok Ads.",