@productmaker/mcp 3.0.0 → 3.1.0

package/dist/ui/meta-upload-app.html

@@ -147,6 +147,13 @@
         padding: 18px;
       }
 
+      .upload-prompt {
+        margin: 0 0 12px;
+        color: var(--pm-text);
+        font-size: 15px;
+        font-weight: 700;
+      }
+
       .media-grid {
         display: grid;
         grid-template-columns: repeat(auto-fill, minmax(150px, 1fr));
@@ -435,6 +442,9 @@
     <main class="app" data-testid="meta-upload-root">
       <article class="card">
         <section class="section" aria-label="Upload media">
+          <p class="upload-prompt" data-testid="meta-upload-prompt">
+            Sube tus archivos
+          </p>
           <div class="media-grid">
             <div
               class="file-list"
@@ -535,7 +545,6 @@
         const MAX_FILES = 10;
         const MAX_FILE_SIZE_BYTES = 350 * 1024 * 1024;
         const MAX_VIDEO_DURATION_SECONDS = 180;
-        const MIN_DIMENSION = 600;
         const IMAGE_COMPRESSION_THRESHOLD_BYTES = 1.8 * 1024 * 1024;
         const IMAGE_COMPRESSION_MAX_BYTES = 1.8 * 1024 * 1024;
         const IMAGE_MAX_DIMENSION = 2048;
@@ -543,6 +552,7 @@
         const TOOL_RESULT_TEXT_LIMIT = 100000;
         const RPC_TIMEOUT_MS = 15000;
         const APP_PROTOCOL_VERSION = "2026-01-26";
+        const CONFIGURED_RESOLVE_ENDPOINT = "__PRODUCTMAKER_RESOLVE_ENDPOINT__";
 
         const elements = {
           root: document.querySelector('[data-testid="meta-upload-root"]'),
@@ -568,6 +578,9 @@
           completeButton: document.querySelector(
             '[data-testid="meta-upload-complete-btn"]',
           ),
+          uploadPrompt: document.querySelector(
+            '[data-testid="meta-upload-prompt"]',
+          ),
           fileList: document.querySelector(
             '[data-testid="meta-upload-file-list"]',
           ),
@@ -1156,6 +1169,7 @@
             }
           }
           state.session = session;
+          elements.uploadPrompt.textContent = uploadPromptForSession(session);
           elements.fallbackLink.href = session.uploadPageUrl;
           if (sessionExpired()) {
             requireFallback(
@@ -1178,6 +1192,7 @@
           const uploadPageUrl = boundedString(candidate.uploadPageUrl, 2000);
           const mediaKind = candidate.mediaKind;
           const assetRole = candidate.assetRole;
+          const uploadPurpose = candidate.uploadPurpose;
           const expiresAt = boundedString(candidate.expiresAt, 100);
           const checkToolName = "check_media_upload";
           const resolveEndpoint =
@@ -1189,7 +1204,10 @@
           if (!Number.isInteger(candidate.maxFiles) || !expiresAt) return null;
           try {
             const parsedUrl = new URL(uploadPageUrl);
-            if (!safeUploadPageUrl(parsedUrl)) return null;
+            const parsedResolveUrl = new URL(resolveEndpoint, parsedUrl.origin);
+            if (!safeResolveEndpointUrl(parsedResolveUrl, parsedUrl))
+              return null;
+            if (!safeUploadPageUrl(parsedUrl, parsedResolveUrl)) return null;
           } catch {
             return null;
           }
@@ -1198,6 +1216,11 @@
             uploadPageUrl,
             mediaKind,
             assetRole,
+            uploadPurpose:
+              uploadPurpose === "product_reference" ||
+              uploadPurpose === "creative"
+                ? uploadPurpose
+                : "generic",
             maxFiles: candidate.maxFiles,
             expiresAt,
             checkToolName,
@@ -1205,6 +1228,26 @@
           };
         }
 
+        function uploadPromptForSession(session) {
+          if (session.uploadPurpose === "product_reference") {
+            return session.mediaKind === "image"
+              ? "Sube la foto del producto"
+              : session.mediaKind === "video"
+                ? "Sube el video del producto"
+                : "Sube los archivos del producto";
+          }
+          if (session.uploadPurpose === "creative") {
+            return session.mediaKind === "video"
+              ? "Sube tu video creativo"
+              : "Sube tus creativos";
+          }
+          return session.mediaKind === "image"
+            ? "Sube tus imágenes"
+            : session.mediaKind === "video"
+              ? "Sube tu video"
+              : "Sube tus archivos";
+        }
+
         function mergeToolInput(input) {
           state.toolInput = { ...state.toolInput, ...input };
           void consumePendingBridgeFiles();
@@ -1630,15 +1673,6 @@
             mediaKind === "image"
               ? await inspectImage(file)
               : await inspectVideo(file);
-          if (
-            inspection.width < MIN_DIMENSION ||
-            inspection.height < MIN_DIMENSION
-          ) {
-            throw validationError(
-              "low_resolution",
-              "La resolución mínima es 600 × 600 px.",
-            );
-          }
           if (
             mediaKind === "video" &&
             inspection.durationSeconds > MAX_VIDEO_DURATION_SECONDS
@@ -1747,12 +1781,6 @@
             const canvas = document.createElement("canvas");
             canvas.width = Math.max(1, Math.round(inspection.width * scale));
             canvas.height = Math.max(1, Math.round(inspection.height * scale));
-            if (canvas.width < MIN_DIMENSION || canvas.height < MIN_DIMENSION) {
-              throw validationError(
-                "low_resolution",
-                "La resolución mínima final es 600 × 600 px.",
-              );
-            }
             const context = canvas.getContext("2d", {
               alpha: file.type !== "image/jpeg",
             });
@@ -1848,17 +1876,28 @@
           }
           const error = new Error("upload_failed");
           error.safeCode = "upload_failed";
-          error.safeMessage =
-            "La carga falló tras 3 intentos. Puedes reintentarla.";
           error.safeStage =
             lastError && lastError.safeStage ? lastError.safeStage : "upload";
+          error.safeMessage =
+            error.safeStage === "resolve"
+              ? "No pudimos preparar la carga. Reintenta o abre la carga segura."
+              : error.safeStage === "put"
+                ? "No pudimos enviar el archivo al almacenamiento. Reintenta o abre la carga segura."
+                : "La carga falló tras 3 intentos. Puedes reintentarla.";
           throw error;
         }
 
         async function resolveUpload(file, uploadId) {
           const uploadPage = new URL(state.session.uploadPageUrl);
-          if (!safeUploadPageUrl(uploadPage))
-            throw new Error("unsafe_upload_page");
+          const resolveUrl = new URL(
+            state.session.resolveEndpoint,
+            uploadPage.origin,
+          );
+          if (
+            !safeResolveEndpointUrl(resolveUrl, uploadPage) ||
+            !safeUploadPageUrl(uploadPage, resolveUrl)
+          )
+            throw new Error("unsafe_upload_session");
           const token =
             uploadPage.searchParams.get("token") ||
             new URLSearchParams(uploadPage.hash.slice(1)).get("token");
@@ -1867,10 +1906,6 @@
             error.safeStage = "resolve";
             throw error;
           }
-          const resolveUrl = new URL(
-            state.session.resolveEndpoint,
-            uploadPage.origin,
-          );
           const response = await fetch(resolveUrl.toString(), {
             method: "POST",
             headers: { "content-type": "application/json" },
@@ -1882,6 +1917,7 @@
               fileSize: file.size,
             }),
             credentials: "omit",
+            redirect: "error",
             signal: activeAbortSignal(),
           });
           if (!response.ok) {
@@ -1947,7 +1983,7 @@
           );
         }
 
-        function safeUploadPageUrl(url) {
+        function safeUploadPageUrl(url, resolveUrl) {
           if (url.username || url.password) return false;
           if (
             [
@@ -1957,11 +1993,38 @@
           )
             return true;
           return (
-            url.protocol === "http:" &&
-            ["localhost", "127.0.0.1", "::1"].includes(url.hostname)
+            (url.protocol === "http:" &&
+              ["localhost", "127.0.0.1", "::1"].includes(url.hostname)) ||
+            (url.protocol === "https:" &&
+              /^\/(?:[a-z]{2}\/)?upload-media\/?$/.test(url.pathname) &&
+              isConfiguredResolveEndpoint(resolveUrl))
+          );
+        }
+
+        function isConfiguredResolveEndpoint(url) {
+          return (
+            /^https?:\/\//.test(CONFIGURED_RESOLVE_ENDPOINT) &&
+            url.toString() === CONFIGURED_RESOLVE_ENDPOINT
           );
         }
 
+        function safeResolveEndpointUrl(url, uploadPageUrl) {
+          if (url.username || url.password) return false;
+          if (url.search || url.hash) return false;
+          const officialApi =
+            url.origin === "https://api.productmaker.app" &&
+            url.pathname === "/v1/uploaded-assets/sessions/resolve";
+          const sameOriginWebProxy =
+            url.origin === uploadPageUrl.origin &&
+            url.pathname === "/api/upload-media/resolve";
+          const localApi =
+            url.protocol === "http:" &&
+            ["localhost", "127.0.0.1", "::1"].includes(url.hostname) &&
+            url.pathname === "/v1/uploaded-assets/sessions/resolve";
+          const configuredApi = isConfiguredResolveEndpoint(url);
+          return officialApi || sameOriginWebProxy || localApi || configuredApi;
+        }
+
         function putFileWithProgress(url, file, onProgress) {
           return new Promise((resolve, reject) => {
             const request = new XMLHttpRequest();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productmaker/mcp",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "type": "module",
   "private": false,
   "description": "Product Maker MCP server — cost products, generate dropshipping landing pages, UGC videos, and ad creatives, and publish to Shopify and Meta Ads from Claude, ChatGPT, or Gemini.",
@@ -64,9 +64,9 @@
     "tsx": "^4.16.0",
     "typescript": "^7.0.2",
     "vitest": "^2.1.9",
+    "@packages/product-research": "0.1.0",
     "@packages/product-economics": "0.1.0",
-    "@packages/types": "0.1.0",
-    "@packages/product-research": "0.1.0"
+    "@packages/types": "0.1.0"
   },
   "publishConfig": {
     "access": "public"