@productmaker/mcp 2.10.1 → 3.0.2

package/dist/ui/meta-upload-app.html

@@ -147,6 +147,13 @@
         padding: 18px;
       }
 
+      .upload-prompt {
+        margin: 0 0 12px;
+        color: var(--pm-text);
+        font-size: 15px;
+        font-weight: 700;
+      }
+
       .media-grid {
         display: grid;
         grid-template-columns: repeat(auto-fill, minmax(150px, 1fr));
@@ -435,6 +442,9 @@
     <main class="app" data-testid="meta-upload-root">
       <article class="card">
         <section class="section" aria-label="Upload media">
+          <p class="upload-prompt" data-testid="meta-upload-prompt">
+            Sube tus archivos
+          </p>
           <div class="media-grid">
             <div
               class="file-list"
@@ -535,7 +545,6 @@
         const MAX_FILES = 10;
         const MAX_FILE_SIZE_BYTES = 350 * 1024 * 1024;
         const MAX_VIDEO_DURATION_SECONDS = 180;
-        const MIN_DIMENSION = 600;
         const IMAGE_COMPRESSION_THRESHOLD_BYTES = 1.8 * 1024 * 1024;
         const IMAGE_COMPRESSION_MAX_BYTES = 1.8 * 1024 * 1024;
         const IMAGE_MAX_DIMENSION = 2048;
@@ -543,6 +552,7 @@
         const TOOL_RESULT_TEXT_LIMIT = 100000;
         const RPC_TIMEOUT_MS = 15000;
         const APP_PROTOCOL_VERSION = "2026-01-26";
+        const CONFIGURED_RESOLVE_ENDPOINT = "__PRODUCTMAKER_RESOLVE_ENDPOINT__";
 
         const elements = {
           root: document.querySelector('[data-testid="meta-upload-root"]'),
@@ -568,6 +578,9 @@
           completeButton: document.querySelector(
             '[data-testid="meta-upload-complete-btn"]',
           ),
+          uploadPrompt: document.querySelector(
+            '[data-testid="meta-upload-prompt"]',
+          ),
           fileList: document.querySelector(
             '[data-testid="meta-upload-file-list"]',
           ),
@@ -1156,6 +1169,7 @@
             }
           }
           state.session = session;
+          elements.uploadPrompt.textContent = uploadPromptForSession(session);
           elements.fallbackLink.href = session.uploadPageUrl;
           if (sessionExpired()) {
             requireFallback(
@@ -1178,23 +1192,22 @@
           const uploadPageUrl = boundedString(candidate.uploadPageUrl, 2000);
           const mediaKind = candidate.mediaKind;
           const assetRole = candidate.assetRole;
+          const uploadPurpose = candidate.uploadPurpose;
           const expiresAt = boundedString(candidate.expiresAt, 100);
-          const checkToolName = [
-            "check_media_upload",
-            "check_meta_media_upload",
-          ].includes(candidate.checkToolName)
-            ? candidate.checkToolName
-            : "check_meta_media_upload";
+          const checkToolName = "check_media_upload";
           const resolveEndpoint =
             boundedString(candidate.resolveEndpoint, 200) ||
-            "/api/meta-upload/resolve";
+            "/api/upload-media/resolve";
           if (!sessionId || !["image", "video", "mixed"].includes(mediaKind))
             return null;
           if (!["media", "thumbnail"].includes(assetRole)) return null;
           if (!Number.isInteger(candidate.maxFiles) || !expiresAt) return null;
           try {
             const parsedUrl = new URL(uploadPageUrl);
-            if (!safeUploadPageUrl(parsedUrl)) return null;
+            const parsedResolveUrl = new URL(resolveEndpoint, parsedUrl.origin);
+            if (!safeResolveEndpointUrl(parsedResolveUrl, parsedUrl))
+              return null;
+            if (!safeUploadPageUrl(parsedUrl, parsedResolveUrl)) return null;
           } catch {
             return null;
           }
@@ -1203,6 +1216,11 @@
             uploadPageUrl,
             mediaKind,
             assetRole,
+            uploadPurpose:
+              uploadPurpose === "product_reference" ||
+              uploadPurpose === "creative"
+                ? uploadPurpose
+                : "generic",
             maxFiles: candidate.maxFiles,
             expiresAt,
             checkToolName,
@@ -1210,6 +1228,26 @@
           };
         }
 
+        function uploadPromptForSession(session) {
+          if (session.uploadPurpose === "product_reference") {
+            return session.mediaKind === "image"
+              ? "Sube la foto del producto"
+              : session.mediaKind === "video"
+                ? "Sube el video del producto"
+                : "Sube los archivos del producto";
+          }
+          if (session.uploadPurpose === "creative") {
+            return session.mediaKind === "video"
+              ? "Sube tu video creativo"
+              : "Sube tus creativos";
+          }
+          return session.mediaKind === "image"
+            ? "Sube tus imágenes"
+            : session.mediaKind === "video"
+              ? "Sube tu video"
+              : "Sube tus archivos";
+        }
+
         function mergeToolInput(input) {
           state.toolInput = { ...state.toolInput, ...input };
           void consumePendingBridgeFiles();
@@ -1480,7 +1518,7 @@
             "warning",
           );
           renderItems();
-          emitAnalytics("ads_meta_remote_upload_error", mediaKind, {
+          emitAnalytics("mcp_media_upload_error", mediaKind, {
             failureStage: "bridge",
             errorType: "bridge_download_failed",
           });
@@ -1564,18 +1602,18 @@
               inspection.mediaKind === "image"
                 ? await compressImage(item.file, inspection)
                 : item.file;
-            emitAnalytics("ads_meta_remote_upload_started", item.mediaKind);
+            emitAnalytics("mcp_media_upload_started", item.mediaKind);
             await uploadWithRetries(item);
             item.status = "uploaded";
             item.progress = 100;
             item.error = "";
-            emitAnalytics("ads_meta_remote_upload_completed", item.mediaKind);
+            emitAnalytics("mcp_media_upload_completed", item.mediaKind);
           } catch (error) {
             const failure = safeFailure(error);
             item.status = "failed";
             item.error = failure.message;
             item.failureStage = failure.stage;
-            emitAnalytics("ads_meta_remote_upload_error", item.mediaKind, {
+            emitAnalytics("mcp_media_upload_error", item.mediaKind, {
               failureStage: failure.stage,
               errorType: failure.code,
             });
@@ -1635,15 +1673,6 @@
             mediaKind === "image"
               ? await inspectImage(file)
               : await inspectVideo(file);
-          if (
-            inspection.width < MIN_DIMENSION ||
-            inspection.height < MIN_DIMENSION
-          ) {
-            throw validationError(
-              "low_resolution",
-              "La resolución mínima es 600 × 600 px.",
-            );
-          }
           if (
             mediaKind === "video" &&
             inspection.durationSeconds > MAX_VIDEO_DURATION_SECONDS
@@ -1752,12 +1781,6 @@
             const canvas = document.createElement("canvas");
             canvas.width = Math.max(1, Math.round(inspection.width * scale));
             canvas.height = Math.max(1, Math.round(inspection.height * scale));
-            if (canvas.width < MIN_DIMENSION || canvas.height < MIN_DIMENSION) {
-              throw validationError(
-                "low_resolution",
-                "La resolución mínima final es 600 × 600 px.",
-              );
-            }
             const context = canvas.getContext("2d", {
               alpha: file.type !== "image/jpeg",
             });
@@ -1853,17 +1876,28 @@
           }
           const error = new Error("upload_failed");
           error.safeCode = "upload_failed";
-          error.safeMessage =
-            "La carga falló tras 3 intentos. Puedes reintentarla.";
           error.safeStage =
             lastError && lastError.safeStage ? lastError.safeStage : "upload";
+          error.safeMessage =
+            error.safeStage === "resolve"
+              ? "No pudimos preparar la carga. Reintenta o abre la carga segura."
+              : error.safeStage === "put"
+                ? "No pudimos enviar el archivo al almacenamiento. Reintenta o abre la carga segura."
+                : "La carga falló tras 3 intentos. Puedes reintentarla.";
           throw error;
         }
 
         async function resolveUpload(file, uploadId) {
           const uploadPage = new URL(state.session.uploadPageUrl);
-          if (!safeUploadPageUrl(uploadPage))
-            throw new Error("unsafe_upload_page");
+          const resolveUrl = new URL(
+            state.session.resolveEndpoint,
+            uploadPage.origin,
+          );
+          if (
+            !safeResolveEndpointUrl(resolveUrl, uploadPage) ||
+            !safeUploadPageUrl(uploadPage, resolveUrl)
+          )
+            throw new Error("unsafe_upload_session");
           const token =
             uploadPage.searchParams.get("token") ||
             new URLSearchParams(uploadPage.hash.slice(1)).get("token");
@@ -1872,10 +1906,6 @@
             error.safeStage = "resolve";
             throw error;
           }
-          const resolveUrl = new URL(
-            state.session.resolveEndpoint,
-            uploadPage.origin,
-          );
           const response = await fetch(resolveUrl.toString(), {
             method: "POST",
             headers: { "content-type": "application/json" },
@@ -1887,6 +1917,7 @@
               fileSize: file.size,
             }),
             credentials: "omit",
+            redirect: "error",
             signal: activeAbortSignal(),
           });
           if (!response.ok) {
@@ -1901,10 +1932,7 @@
           const body = await response.json();
           if (!isRecord(body)) throw new Error("invalid_resolve_response");
           const uploadUrl = boundedString(body.uploadUrl, 3000);
-          const assetId = boundedString(
-            body.assetId || body.stagingAssetId,
-            300,
-          );
+          const assetId = boundedString(body.assetId, 300);
           const parsedUploadUrl = new URL(uploadUrl);
           if (!safeWebProtocol(parsedUploadUrl) || !assetId) {
             const error = new Error("invalid_resolve_response");
@@ -1955,7 +1983,7 @@
           );
         }
 
-        function safeUploadPageUrl(url) {
+        function safeUploadPageUrl(url, resolveUrl) {
           if (url.username || url.password) return false;
           if (
             [
@@ -1965,11 +1993,38 @@
           )
             return true;
           return (
-            url.protocol === "http:" &&
-            ["localhost", "127.0.0.1", "::1"].includes(url.hostname)
+            (url.protocol === "http:" &&
+              ["localhost", "127.0.0.1", "::1"].includes(url.hostname)) ||
+            (url.protocol === "https:" &&
+              /^\/(?:[a-z]{2}\/)?upload-media\/?$/.test(url.pathname) &&
+              isConfiguredResolveEndpoint(resolveUrl))
+          );
+        }
+
+        function isConfiguredResolveEndpoint(url) {
+          return (
+            /^https?:\/\//.test(CONFIGURED_RESOLVE_ENDPOINT) &&
+            url.toString() === CONFIGURED_RESOLVE_ENDPOINT
           );
         }
 
+        function safeResolveEndpointUrl(url, uploadPageUrl) {
+          if (url.username || url.password) return false;
+          if (url.search || url.hash) return false;
+          const officialApi =
+            url.origin === "https://api.productmaker.app" &&
+            url.pathname === "/v1/uploaded-assets/sessions/resolve";
+          const sameOriginWebProxy =
+            url.origin === uploadPageUrl.origin &&
+            url.pathname === "/api/upload-media/resolve";
+          const localApi =
+            url.protocol === "http:" &&
+            ["localhost", "127.0.0.1", "::1"].includes(url.hostname) &&
+            url.pathname === "/v1/uploaded-assets/sessions/resolve";
+          const configuredApi = isConfiguredResolveEndpoint(url);
+          return officialApi || sameOriginWebProxy || localApi || configuredApi;
+        }
+
         function putFileWithProgress(url, file, onProgress) {
           return new Promise((resolve, reject) => {
             const request = new XMLHttpRequest();
@@ -2203,21 +2258,14 @@
               state.session.sessionId !== requestedSessionId
             )
               return;
-            const status = parseStatusResult(result, requestedSessionId);
+            const status = parseStatusResult(result);
             state.assets = status.assets;
             renderCompletionAction();
             if (!status.assets.length) {
-              if (status.legacyKindAmbiguous) {
-                requireFallback(
-                  "El tipo del asset legacy es ambiguo. Vuelve a comprobar o usa el enlace seguro.",
-                  "warning",
-                );
-              } else {
-                requireFallback(
-                  "La sesión sigue pendiente. Continúa desde el enlace seguro para terminar la carga.",
-                  "warning",
-                );
-              }
+              requireFallback(
+                "La sesión sigue pendiente. Continúa desde el enlace seguro para terminar la carga.",
+                "warning",
+              );
               return;
             }
 
@@ -2255,9 +2303,7 @@
         }
 
         async function callReadOnlyTool(name, args) {
-          if (
-            !["check_media_upload", "check_meta_media_upload"].includes(name)
-          ) {
+          if (name !== "check_media_upload") {
             throw new Error("tool_not_allowed");
           }
           const bridge = openAiBridge();
@@ -2302,58 +2348,22 @@
           return parsed;
         }
 
-        function parseStatusResult(result, expectedSessionId) {
+        function parseStatusResult(result) {
           const payload = resultPayload(result);
-          if (
-            state.session.checkToolName === "check_meta_media_upload" &&
-            payload.sessionId !== expectedSessionId
-          )
-            throw new Error("status_session_mismatch");
           const status = payload.status;
           if (!["pending", "uploaded"].includes(status))
             throw new Error("invalid_status");
           const assets = Array.isArray(payload.assets)
             ? payload.assets.slice(0, MAX_FILES).flatMap((asset) => {
                 if (!isRecord(asset)) return [];
-                const assetId = boundedString(
-                  asset.assetId || asset.stagingAssetId,
-                  300,
-                );
+                const assetId = boundedString(asset.assetId, 300);
                 const mediaKind = asset.mediaKind;
                 return assetId && ["image", "video"].includes(mediaKind)
                   ? [{ assetId, mediaKind }]
                   : [];
               })
             : [];
-          let legacyKindAmbiguous = false;
-          const legacyStagingAssetId = boundedString(
-            payload.stagingAssetId,
-            300,
-          );
-          if (!assets.length && legacyStagingAssetId) {
-            const localKinds = new Set(
-              state.items
-                .filter((item) => item.status === "uploaded")
-                .map((item) => item.mediaKind)
-                .filter((mediaKind) => ["image", "video"].includes(mediaKind)),
-            );
-            const inferredMediaKind =
-              localKinds.size === 1
-                ? Array.from(localKinds)[0]
-                : localKinds.size === 0 &&
-                    ["image", "video"].includes(state.session.mediaKind)
-                  ? state.session.mediaKind
-                  : null;
-            if (inferredMediaKind) {
-              assets.push({
-                assetId: legacyStagingAssetId,
-                mediaKind: inferredMediaKind,
-              });
-            } else {
-              legacyKindAmbiguous = true;
-            }
-          }
-          return { status, assets, legacyKindAmbiguous };
+          return { status, assets };
         }
 
         async function notifyChatUploadComplete() {
@@ -2370,11 +2380,7 @@
           const assets = state.assets
             .map((asset) => `${asset.mediaKind} asset_id ${asset.assetId}`)
             .join(", ");
-          const metaGuard =
-            state.session.checkToolName === "check_meta_media_upload"
-              ? " Do not publish anything until you have asked me for the Meta portfolio, ad account, and Facebook Page."
-              : "";
-          const message = `The ProductMaker upload is complete. Continue my previous request using these uploaded assets: ${assets}. Do not ask me to upload them again.${metaGuard}`;
+          const message = `The ProductMaker upload is complete. Continue my previous request using these uploaded assets: ${assets}. Do not ask me to upload them again. Ask only for the remaining inputs required by my original request.`;
           try {
             const bridge = openAiBridge();
             if (bridge && typeof bridge.sendFollowUpMessage === "function") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productmaker/mcp",
-  "version": "2.10.1",
+  "version": "3.0.2",
   "type": "module",
   "private": false,
   "description": "Product Maker MCP server — cost products, generate dropshipping landing pages, UGC videos, and ad creatives, and publish to Shopify and Meta Ads from Claude, ChatGPT, or Gemini.",