@productmaker/mcp 3.4.2 → 3.4.4

package/dist/http.js

@@ -3509,7 +3509,15 @@ var TaskCreativeVariantResult = TaskCreativeVariantBaseResult.extend({
 var MVPResult = z24.object({
   taskId: z24.string().uuid(),
   product: Product,
-  angles: z24.array(Angle).max(3),
+  // READ contract, NOT a generation cap. The generator writes exactly 3 angles
+  // (`replaceAngles` renumbers positions 0..2), but a duplicated angles run
+  // leaves TWO full sets on the task — alert on task a1954a35 (2026-08-21):
+  // 6 rows, positions 0,0,1,1,2,2. Because the controller guards the whole
+  // response with `MVPResult.parse()`, a cap here turns extra-but-valid rows
+  // into a 500 on GET /v1/results/:taskId and hides EVERY deliverable of a
+  // task that already finished. Same failure shape as the variant landing cap
+  // below (alert 88badc8). The write path is what must stay at 3.
+  angles: z24.array(Angle),
   topVideos: z24.array(AdVideo).max(20),
   landing: z24.object({
     // Allow legacy data (10 sections × 2 variants) and new data (7 sections × 2)
@@ -3613,7 +3621,7 @@ var PendingUserActionSchema = z24.discriminatedUnion("kind", [
       actor: z24.string(),
       /** Saved custom actor (Actor.id) backing this angle, when one was chosen. */
       actorId: z24.string().optional()
-    })).min(1).max(3)
+    })).min(1)
   }),
   z24.object({
     kind: z24.literal("service_script_approval"),
@@ -4901,6 +4909,7 @@ var MetaCampaignType = z33.enum([
   "traffic",
   "engagement"
 ]);
+var MetaPublishAttemptId = z33.string().uuid();
 var MetaOptimizationMode = z33.enum([
   "advantage_plus",
   "manual"
@@ -5084,6 +5093,8 @@ var MetaCampaignDefaults = MetaCampaignConfigBase.omit({
   currency: z33.string().length(3).regex(/^[A-Z]{3}$/).nullable().optional()
 });
 var UploadToMetaRequest = z33.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   /** Array of creatives to upload */
   creatives: z33.array(z33.object({
     creativeId: z33.string().min(1).optional(),
@@ -5240,6 +5251,8 @@ var MetaCampaignOverridesSchema = z34.object({
   destination: MetaCampaignDestination.optional()
 });
 var FacebookCreateCampaignBodySchema = z34.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   adAccountId: MetaAdAccountId,
   portfolioId: z34.string().min(1).optional(),
   pageId: z34.string().min(1).optional(),
@@ -5309,6 +5322,8 @@ var FacebookCreateCampaignResponseSchema = z34.object({
   appliedBudget: z34.number().int().positive()
 });
 var FacebookCreateCampaignFromCreativesBodySchema = z34.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   creatives: z34.array(z34.object({
     type: z34.enum([
       "image",
@@ -5456,6 +5471,8 @@ var FacebookCreativeSourceSchema = z34.discriminatedUnion("type", [
   FacebookMediaCreativeSourceSchema
 ]);
 var FacebookCreateCampaignFromTasksBodySchema = z34.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   creatives: z34.array(z34.object({
     type: z34.enum([
       "image",
@@ -11318,8 +11335,9 @@ var OAuthOboCredential = class {
 // src/guidance/productmaker-guidance.ts
 var START_DROPSHIPPING_PROMPT_NAME = "start_dropshipping";
 var PRODUCTMAKER_SERVER_INSTRUCTIONS = [
-  "When a ProductMaker request needs an image or video the user attached, pasted, or has locally and no reusable ProductMaker assetId is already available, call request_media_upload immediately before asking for any missing business inputs. Do this even when the user says not to generate or publish yet: uploading only stages the file and does not generate, publish, or consume credits, unless the user explicitly says not to upload, share, or store the file. Treat natural requests such as 'create a landing with this product', 'make creatives with this photo', or 'upload this video to Meta' as upload intent; never require the user to name the uploader.",
+  "Whenever a ProductMaker request needs a new image or video and no reusable ProductMaker assetId is available, call request_media_upload immediately in the same response\u2014whether media is the next missing input or the user attached, pasted, mentioned, or has the file locally. The inline uploader is how ProductMaker asks for the file. Never merely ask the user to attach or upload it in chat and wait for a later turn. Call it before asking for any missing business inputs, even when the user says not to generate or publish yet: uploading only stages the file and does not generate, publish, or consume credits, unless the user explicitly says not to upload, share, or store the file. Treat natural requests such as 'create a landing with this product', 'make creatives with this photo', or 'upload this video to Meta' as upload intent; never require the user to name the uploader.",
   "For requests that do not need a new media upload, understand the user's intent before choosing a ProductMaker tool.",
+  "For every concrete ProductMaker request to calculate how much to charge, profitability, or margin for a dropshipping product, you must call cost_product after collecting its missing country and real supplier cost. Never calculate or reproduce ProductMaker's costing formula yourself; answer from the tool result.",
   "For remote MCP hosts, never ask for a local path, CDN URL, bytes, or base64. Pass supported host file references to request_media_upload; otherwise let its inline App open the file picker. The external upload page is fallback only.",
   "After the upload App sends its OK continuation, resume the original request with the verified assetId values, do not ask for another upload, and ask only for remaining business inputs in chat. The host-inserted continuation may contain opaque asset IDs; do not repeat them in narrative prose or expose session IDs, tokens, private URLs, file names, or JSON handoff payloads.",
   "Keep focused requests direct: creatives, landing pages, Shopify publication, Meta publication, and status checks do not require a DropshippingProject.",
@@ -11678,7 +11696,7 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "3.4.2";
+var MCP_VERSION = "3.4.4";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";
@@ -12724,6 +12742,12 @@ var McpErrorCode = {
   META_STAGED_ASSET_AMBIGUOUS: "META_STAGED_ASSET_AMBIGUOUS",
   META_STAGED_ASSET_TYPE_MISMATCH: "META_STAGED_ASSET_TYPE_MISMATCH",
   META_STAGED_ASSET_INVALID: "META_STAGED_ASSET_INVALID",
+  META_STAGING_QUOTA_EXCEEDED: "META_STAGING_QUOTA_EXCEEDED",
+  CAPACITY_UNAVAILABLE: "CAPACITY_UNAVAILABLE",
+  UPLOAD_INCOMPLETE: "UPLOAD_INCOMPLETE",
+  UPLOAD_EXPIRED: "UPLOAD_EXPIRED",
+  META_UPLOAD_SESSION_EXPIRED: "META_UPLOAD_SESSION_EXPIRED",
+  META_PUBLICATION_LEASE_STALE: "META_PUBLICATION_LEASE_STALE",
   META_PUBLICATION_RECONCILIATION_REQUIRED: "META_PUBLICATION_RECONCILIATION_REQUIRED",
   META_PUBLICATION_IN_PROGRESS: "META_PUBLICATION_IN_PROGRESS",
   META_NO_ADS_CREATED: "META_NO_ADS_CREATED",
@@ -12785,8 +12809,14 @@ var CODE_MESSAGES = {
   META_STAGED_ASSET_AMBIGUOUS: "The temporary media upload could not be uniquely resolved. Re-upload the media and retry the Meta publication.",
   META_STAGED_ASSET_TYPE_MISMATCH: "The temporary media type does not match the creative. Re-upload the correct image or video and retry.",
   META_STAGED_ASSET_INVALID: "The temporary media is empty or exceeds the server size limit. Re-upload the file and retry.",
-  META_PUBLICATION_RECONCILIATION_REQUIRED: "A previous Meta publication with these exact inputs may already exist. Check Meta before retrying so you do not create a duplicate campaign.",
-  META_PUBLICATION_IN_PROGRESS: "A Meta publication with these exact inputs is already in progress. Wait for it to finish, then check the campaign status.",
+  META_STAGING_QUOTA_EXCEEDED: "The temporary Meta staging quota was reached. Keep completed files and retry only pending files after retryAt.",
+  CAPACITY_UNAVAILABLE: "Temporary Meta staging capacity is unavailable. Keep completed files and retry only pending files later.",
+  UPLOAD_INCOMPLETE: "A temporary Meta upload is incomplete. Keep completed files and retry only pending files.",
+  UPLOAD_EXPIRED: "The temporary Meta upload expired. Re-upload this file before publishing.",
+  META_UPLOAD_SESSION_EXPIRED: "The Meta upload session expired. Open a new session and retry only pending files.",
+  META_PUBLICATION_LEASE_STALE: "The Meta publication lease expired or was replaced. Do not continue this stale publication; start a new explicit attempt only after confirming Meta did not receive it.",
+  META_PUBLICATION_RECONCILIATION_REQUIRED: "Meta may already have received this publication. Do not resend it; check Meta Ads Manager.",
+  META_PUBLICATION_IN_PROGRESS: "This Meta publication is already in progress. Do not resend it.",
   META_NO_ADS_CREATED: "No ads could be created. Most likely: the Meta Ads account has no payment method, no Facebook Page is linked, or the Facebook app lost permissions. Verify all three at https://business.facebook.com.",
   META_NO_ASSETS_READY: "The task has no videos or ad creative ready to publish yet. Wait for generation to finish or regenerate the assets.",
   META_NO_THUMBNAIL_SOURCE: "No image is available to use as the video thumbnail. Upload a product image or generate the ad creative before publishing.",
@@ -12935,6 +12965,11 @@ var INVALID_PARAM_CODES = /* @__PURE__ */ new Set([
   McpErrorCode.META_STAGED_ASSET_AMBIGUOUS,
   McpErrorCode.META_STAGED_ASSET_TYPE_MISMATCH,
   McpErrorCode.META_STAGED_ASSET_INVALID,
+  McpErrorCode.META_STAGING_QUOTA_EXCEEDED,
+  McpErrorCode.UPLOAD_INCOMPLETE,
+  McpErrorCode.UPLOAD_EXPIRED,
+  McpErrorCode.META_UPLOAD_SESSION_EXPIRED,
+  McpErrorCode.META_PUBLICATION_LEASE_STALE,
   McpErrorCode.META_PUBLICATION_RECONCILIATION_REQUIRED,
   McpErrorCode.META_PUBLICATION_IN_PROGRESS,
   McpErrorCode.TIKTOK_TOKEN_EXPIRED,
@@ -12994,6 +13029,14 @@ var PASSTHROUGH_CODES = /* @__PURE__ */ new Set([
   McpErrorCode.META_CAMPAIGN_CONFIG_INVALID,
   McpErrorCode.META_WHATSAPP_INVALID_NUMBER,
   McpErrorCode.META_INVALID_CTA,
+  McpErrorCode.META_STAGING_QUOTA_EXCEEDED,
+  McpErrorCode.CAPACITY_UNAVAILABLE,
+  McpErrorCode.UPLOAD_INCOMPLETE,
+  McpErrorCode.UPLOAD_EXPIRED,
+  McpErrorCode.META_UPLOAD_SESSION_EXPIRED,
+  McpErrorCode.META_PUBLICATION_LEASE_STALE,
+  McpErrorCode.META_PUBLICATION_RECONCILIATION_REQUIRED,
+  McpErrorCode.META_PUBLICATION_IN_PROGRESS,
   // TikTok
   McpErrorCode.TIKTOK_NOT_CONNECTED,
   McpErrorCode.TIKTOK_TOKEN_EXPIRED,
@@ -13082,6 +13125,10 @@ function translateError(err) {
       if (body.helpUrl !== void 0) extra.helpUrl = body.helpUrl;
       if (typeof body.requiredCredits === "number") extra.requiredCredits = body.requiredCredits;
       if (typeof body.availableCredits === "number") extra.availableCredits = body.availableCredits;
+      if (typeof body.dimension === "string") extra.dimension = body.dimension;
+      if (typeof body.usage === "number") extra.usage = body.usage;
+      if (typeof body.limit === "number") extra.limit = body.limit;
+      if (typeof body.retryAt === "string") extra.retryAt = body.retryAt;
       return mcp(code, resolveMessage(code, body.message), extra);
     }
     if (err.status === 401) {
@@ -14755,6 +14802,57 @@ __name(registerActorTools, "registerActorTools");
 
 // src/tools/publish.ts
 import { z as z56 } from "zod";
+
+// src/tools/stable-uuid.ts
+import { createHash as createHash3 } from "crypto";
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (value === null || typeof value !== "object") return value;
+  const record = value;
+  return Object.fromEntries(Object.keys(record).sort().filter((key) => record[key] !== void 0).map((key) => [
+    key,
+    canonicalize(record[key])
+  ]));
+}
+__name(canonicalize, "canonicalize");
+function canonicalJson(value) {
+  return JSON.stringify(canonicalize(value));
+}
+__name(canonicalJson, "canonicalJson");
+function deriveUuidV5(name, namespace) {
+  const namespaceBytes = Buffer.from(namespace.replaceAll("-", ""), "hex");
+  const digest = createHash3("sha1").update(namespaceBytes).update(name, "utf8").digest();
+  const bytes = Buffer.from(digest.subarray(0, 16));
+  bytes[6] = (bytes[6] ?? 0) & 15 | 80;
+  bytes[8] = (bytes[8] ?? 0) & 63 | 128;
+  const hex = bytes.toString("hex");
+  return [
+    hex.slice(0, 8),
+    hex.slice(8, 12),
+    hex.slice(12, 16),
+    hex.slice(16, 20),
+    hex.slice(20)
+  ].join("-");
+}
+__name(deriveUuidV5, "deriveUuidV5");
+
+// src/tools/meta-publish-attempt-id.ts
+var META_PUBLISH_NAMESPACE = "7b19c9ac-b4eb-4db1-970e-c2f24ce30b98";
+function deriveMetaPublishAttemptId(input) {
+  const operationIdentity = canonicalJson([
+    input.fingerprint,
+    input.toolName,
+    [
+      typeof input.requestId,
+      input.requestId
+    ],
+    input.canonicalInput
+  ]);
+  return deriveUuidV5(operationIdentity, META_PUBLISH_NAMESPACE);
+}
+__name(deriveMetaPublishAttemptId, "deriveMetaPublishAttemptId");
+
+// src/tools/publish.ts
 var ShopifyInput = z56.object({
   taskId: z56.string().min(1),
   shopDomain: z56.string().min(1),
@@ -15082,10 +15180,19 @@ function registerPublishTools(server, api, opts = {}) {
       throw translateError(e);
     }
   });
-  server.tool("publish_to_meta", "Crea una campa\xF1a de Meta Ads (Facebook/Instagram) desde UNA sola tarea. Antes llama `list_meta_destinations`, deja que el usuario elija el `portfolioId` (Business portfolio), el `adAccountId` y el `pageId` exactos, y env\xEDa esos tres valores; no adivines ni uses la primera p\xE1gina. Si quieres juntar creativos de VARIAS tareas usa `publish_creatives_to_meta`. La campa\xF1a se crea SIEMPRE PAUSED y el usuario la activa manualmente. `pixelId` es opcional. `angleIndexes` permite seleccionar \xE1ngulos. `campaignConfig` admite presupuesto en USD, pa\xEDses ISO-2 y nombre. `primaryText` permite reemplazar el copy y `phoneNumber` configura WhatsApp. Despu\xE9s usa `get_meta_campaign_status`.", MetaInput.shape, CREATES_EXTERNAL, async ({ taskId, campaignConfig, primaryText, phoneNumber, ...rest }) => {
+  server.tool("publish_to_meta", "Publica tus creativos en Meta sin gastar cr\xE9ditos de ProductMaker. El presupuesto de anuncios se paga directamente desde tu cuenta de Meta. Crear creativos o copy con IA sigue usando cr\xE9ditos. Crea una campa\xF1a de Meta Ads (Facebook/Instagram) desde UNA sola tarea. Antes llama `list_meta_destinations`, deja que el usuario elija el `portfolioId` (Business portfolio), el `adAccountId` y el `pageId` exactos, y env\xEDa esos tres valores; no adivines ni uses la primera p\xE1gina. Si quieres juntar creativos de VARIAS tareas usa `publish_creatives_to_meta`. La campa\xF1a se crea SIEMPRE PAUSED y el usuario la activa manualmente. `pixelId` es opcional. `angleIndexes` permite seleccionar \xE1ngulos. `campaignConfig` admite presupuesto en USD, pa\xEDses ISO-2 y nombre. `primaryText` permite reemplazar el copy y `phoneNumber` configura WhatsApp. Despu\xE9s usa `get_meta_campaign_status`. Si el resultado es ambiguo, NO reenv\xEDes: revisa Meta Ads Manager.", MetaInput.shape, CREATES_EXTERNAL, async (rawInput, extra) => {
     try {
+      const parsed = MetaInput.safeParse(rawInput);
+      if (!parsed.success) throw invalidInputFromZod(parsed.error);
+      const { taskId, campaignConfig, primaryText, phoneNumber, ...rest } = parsed.data;
       const body = {
-        ...rest
+        ...rest,
+        publishAttemptId: deriveMetaPublishAttemptId({
+          fingerprint: api.fingerprint(),
+          toolName: "publish_to_meta",
+          requestId: extra.requestId,
+          canonicalInput: parsed.data
+        })
       };
       if (campaignConfig) {
         body.campaignOverrides = toMetaCampaignOverrides(campaignConfig);
@@ -15110,7 +15217,7 @@ function registerPublishTools(server, api, opts = {}) {
       throw translateError(e);
     }
   });
-  server.tool("publish_creatives_to_meta", "Crea UNA campa\xF1a de Meta Ads PAUSED agrupando hasta " + CAMPAIGN_LIMITS.MAX_CREATIVES + ' creativos. Si la petici\xF3n natural adjunta o menciona archivos locales, llama primero `request_media_upload`; tras OK usa cada resultado como `source.type="asset"` con su `assetId` y el `type` que coincide con `mediaKind`. No pidas path ni URL. Despu\xE9s llama `list_meta_destinations` y pregunta en el chat por el `portfolioId`, `adAccountId` y `pageId` exactos; el App es solo para archivos. Si la carga fue parcial, publica s\xF3lo los assets confirmados; nunca inventes assets ni superes diez creativos. Las rutas locales s\xF3lo funcionan con MCP stdio. Los medios propios se eliminan despu\xE9s de publicar correctamente; si falla, quedan durante el TTL para reintento. Para videos la miniatura es opcional y ProductMaker puede generarla con FFmpeg. `campaignConfig.destination` acepta landing o WhatsApp. Para landing basta `campaignConfig.destination.landingUrl`; no dupliques la URL arriba. Si omites `budgetMode`, se infiere `ad_set` cuando cada ad set trae `dailyBudget`, o `campaign` cuando env\xEDas `campaignDailyBudget`. No actives la campa\xF1a autom\xE1ticamente.', PublishCreativesToMetaInputBase.shape, CREATES_EXTERNAL, async (rawInput) => {
+  server.tool("publish_creatives_to_meta", "Crea UNA campa\xF1a de Meta Ads PAUSED agrupando hasta " + CAMPAIGN_LIMITS.MAX_CREATIVES + ' creativos. Publica tus creativos en Meta sin gastar cr\xE9ditos de ProductMaker. El presupuesto de anuncios se paga directamente desde tu cuenta de Meta. Crear creativos o copy con IA sigue usando cr\xE9ditos. Si la petici\xF3n natural adjunta o menciona archivos locales, llama primero `request_media_upload`; tras OK usa cada resultado como `source.type="asset"` con su `assetId` y el `type` que coincide con `mediaKind`. No pidas path ni URL. Despu\xE9s llama `list_meta_destinations` y pregunta en el chat por el `portfolioId`, `adAccountId` y `pageId` exactos; el App es solo para archivos. Si la carga fue parcial, conserva los assets confirmados, procesa s\xF3lo los pendientes y publica \xFAnicamente assets confirmados; nunca inventes assets ni superes diez creativos. Las rutas locales s\xF3lo funcionan con MCP stdio. Los medios propios se eliminan despu\xE9s de publicar correctamente; si falla antes de enviar una mutaci\xF3n a Meta, quedan durante el TTL. Para videos la miniatura es opcional y ProductMaker puede generarla con FFmpeg. `campaignConfig.destination` acepta landing o WhatsApp. Para landing basta `campaignConfig.destination.landingUrl`; no dupliques la URL arriba. Si omites `budgetMode`, se infiere `ad_set` cuando cada ad set trae `dailyBudget`, o `campaign` cuando env\xEDas `campaignDailyBudget`. No actives la campa\xF1a autom\xE1ticamente. Si el resultado es ambiguo, NO reenv\xEDes: revisa Meta Ads Manager.', PublishCreativesToMetaInputBase.shape, CREATES_EXTERNAL, async (rawInput, extra) => {
     try {
       const parsed = PublishCreativesToMetaInput.safeParse(rawInput);
       if (!parsed.success) throw invalidInputFromZod(parsed.error);
@@ -15190,7 +15297,13 @@ function registerPublishTools(server, api, opts = {}) {
         landingUrl: input.landingUrl,
         targetCountry: input.targetCountry,
         campaignName: input.campaignName,
-        campaignConfig: input.campaignConfig
+        campaignConfig: input.campaignConfig,
+        publishAttemptId: deriveMetaPublishAttemptId({
+          fingerprint: api.fingerprint(),
+          toolName: "publish_creatives_to_meta",
+          requestId: extra.requestId,
+          canonicalInput: input
+        })
       });
       return asText({
         ...r,
@@ -15424,7 +15537,7 @@ __name(resolveEndpointForSession, "resolveEndpointForSession");
 function registerMediaUploadTools(server, api) {
   registerAppTool(server, "request_media_upload", {
     title: "Subir archivos",
-    description: "Abre el selector universal de ProductMaker para im\xE1genes o videos del usuario. Ll\xE1malo autom\xE1ticamente y antes de preguntar por campos faltantes cuando una petici\xF3n natural adjunte o mencione un archivo local, por ejemplo \u2018crea una landing con este producto\u2019, \u2018haz creativos con esta foto\u2019 o \u2018sube este video a Meta\u2019; hazlo aunque el usuario diga que todav\xEDa no generes ni publiques, porque esta herramienta solo prepara el archivo y no consume cr\xE9ditos, salvo que proh\xEDba expl\xEDcitamente subir, compartir o almacenar el archivo; no pidas una ruta local ni URL. Es la \xFAnica ruta de carga para create_product_task, generate_image_creatives, generate_video_creative, generate_free_video, generate_landing y publish_creatives_to_meta. Pasa las referencias opcionales de ChatGPT en files; si el host no puede transferirlas, el mismo App muestra el selector inline. Usa uploadPurpose=product_reference para fotos de producto y landings, creative para creativos o anuncios, y generic solo cuando ninguno aplique. Usa mediaKind=image para referencias de producto y landings; mixed solo cuando el consumidor acepte ambos tipos. El App NO te avisa cuando termina: en cuanto el usuario diga que ya subi\xF3 el archivo o que sigas, llama `check_media_upload` con este sessionId para obtener los assetId, y reanuda la intenci\xF3n original usando \xFAnicamente assetId y mediaKind, sin pedir que vuelva a subir ni mostrar datos t\xE9cnicos. El enlace externo es fallback solo si el App inline falla. Esta herramienta no genera, publica ni consume cr\xE9ditos.",
+    description: "Abre el selector universal de ProductMaker para im\xE1genes o videos del usuario. Cuando la foto o el video sea el siguiente dato faltante, ll\xE1malo en esa misma respuesta: no te limites a pedir que lo adjunte en el chat y esperar otro turno. Ll\xE1malo tambi\xE9n autom\xE1ticamente y antes de preguntar por campos faltantes adicionales cuando una petici\xF3n natural adjunte o mencione un archivo local, por ejemplo \u2018crea una landing con este producto\u2019, \u2018haz creativos con esta foto\u2019 o \u2018sube este video a Meta\u2019; hazlo aunque el usuario diga que todav\xEDa no generes ni publiques, porque esta herramienta solo prepara el archivo y no consume cr\xE9ditos, salvo que proh\xEDba expl\xEDcitamente subir, compartir o almacenar el archivo; no pidas una ruta local ni URL. Es la \xFAnica ruta de carga para create_product_task, generate_image_creatives, generate_video_creative, generate_free_video, generate_landing y publish_creatives_to_meta. Pasa las referencias opcionales de ChatGPT en files; si el host no puede transferirlas, el mismo App muestra el selector inline. Usa uploadPurpose=product_reference para fotos de producto y landings, creative para creativos o anuncios, y generic solo cuando ninguno aplique. Usa mediaKind=image para referencias de producto y landings; mixed solo cuando el consumidor acepte ambos tipos. El App NO te avisa cuando termina: en cuanto el usuario diga que ya subi\xF3 el archivo o que sigas, llama `check_media_upload` con este sessionId para obtener los assetId, y reanuda la intenci\xF3n original usando \xFAnicamente assetId y mediaKind, sin pedir que vuelva a subir ni mostrar datos t\xE9cnicos. El enlace externo es fallback solo si el App inline falla. Esta herramienta no genera, publica ni consume cr\xE9ditos.",
     inputSchema: UploadSessionToolInputShape,
     annotations: CREATES_INTERNAL,
     outputSchema: UniversalUploadStructuredResponse.shape,
@@ -15953,7 +16066,7 @@ var ProductCostingToolInput = z61.object({
   desiredMarginPercent: optionalPercent("Margen de ganancia deseado. Ejemplo: 10 significa 10%. Omite para usar el valor gu\xEDa editable del pa\xEDs.")
 });
 function registerProductCostingTools(server) {
-  server.tool("cost_product", "Calcula GRATIS y sin cr\xE9ditos cu\xE1nto cobrar por un producto de dropshipping en cualquiera de los pa\xEDses disponibles en ProductMaker. Es READ-ONLY: no crea tareas ni publica nada. Pide country y el costo real del proveedor; los dem\xE1s campos pueden usar valores gu\xEDa editables del pa\xEDs. Devuelve `price` y `compareAtPrice` listos para `create_product_task`. No inventes un costo de proveedor.", ProductCostingToolInput.shape, READS_INTERNAL, async (input) => {
+  server.tool("cost_product", "Calcula GRATIS y sin cr\xE9ditos cu\xE1nto cobrar por un producto de dropshipping en cualquiera de los pa\xEDses disponibles en ProductMaker. Ll\xE1mala siempre que el usuario pida calcular cu\xE1nto cobrar, la rentabilidad o el margen de un producto concreto; no hagas el c\xE1lculo ni reconstruyas la f\xF3rmula por tu cuenta. Es READ-ONLY: no crea tareas ni publica nada. Pide country y el costo real del proveedor; los dem\xE1s campos pueden usar valores gu\xEDa editables del pa\xEDs. Devuelve `price` y `compareAtPrice` listos para `create_product_task`. No inventes un costo de proveedor.", ProductCostingToolInput.shape, READS_INTERNAL, async (input) => {
     if (input.country !== void 0 && input.country !== "CO" && [
       input.supplierCostCop,
       input.shippingCostCop,
@@ -16077,29 +16190,12 @@ __name(formatPercent, "formatPercent");
 import { z as z62 } from "zod";
 
 // src/tools/product-research-idempotency.ts
-import { createHash as createHash3 } from "crypto";
 var RESEARCH_IDEMPOTENCY_WINDOW_MS = 2 * 60 * 60 * 1e3;
 var NAMESPACE = "6f9d3a1e-8c47-4b52-9f10-2d7e5a3c8b64";
-function uuidV5(name, namespace) {
-  const namespaceBytes = Buffer.from(namespace.replace(/-/g, ""), "hex");
-  const digest = createHash3("sha1").update(namespaceBytes).update(name, "utf8").digest();
-  const bytes = Buffer.from(digest.subarray(0, 16));
-  bytes[6] = (bytes[6] ?? 0) & 15 | 80;
-  bytes[8] = (bytes[8] ?? 0) & 63 | 128;
-  const hex = bytes.toString("hex");
-  return [
-    hex.slice(0, 8),
-    hex.slice(8, 12),
-    hex.slice(12, 16),
-    hex.slice(16, 20),
-    hex.slice(20)
-  ].join("-");
-}
-__name(uuidV5, "uuidV5");
 function deriveIdempotencyKey(input) {
   const window = Math.floor(input.nowMs / RESEARCH_IDEMPOTENCY_WINDOW_MS);
   const name = `${input.fingerprint}:${input.targetCountry}:${input.categoryKey}:${window}`;
-  return uuidV5(name, NAMESPACE);
+  return deriveUuidV5(name, NAMESPACE);
 }
 __name(deriveIdempotencyKey, "deriveIdempotencyKey");
 

package/dist/stdio.js

@@ -264,7 +264,7 @@ var ApiClient = class {
 };
 
 // src/index.ts
-var MCP_VERSION = "3.4.2";
+var MCP_VERSION = "3.4.4";
 
 // src/meta-upload-app.ts
 import { readFileSync } from "fs";
@@ -4131,7 +4131,15 @@ var TaskCreativeVariantResult = TaskCreativeVariantBaseResult.extend({
 var MVPResult = z24.object({
   taskId: z24.string().uuid(),
   product: Product,
-  angles: z24.array(Angle).max(3),
+  // READ contract, NOT a generation cap. The generator writes exactly 3 angles
+  // (`replaceAngles` renumbers positions 0..2), but a duplicated angles run
+  // leaves TWO full sets on the task — alert on task a1954a35 (2026-08-21):
+  // 6 rows, positions 0,0,1,1,2,2. Because the controller guards the whole
+  // response with `MVPResult.parse()`, a cap here turns extra-but-valid rows
+  // into a 500 on GET /v1/results/:taskId and hides EVERY deliverable of a
+  // task that already finished. Same failure shape as the variant landing cap
+  // below (alert 88badc8). The write path is what must stay at 3.
+  angles: z24.array(Angle),
   topVideos: z24.array(AdVideo).max(20),
   landing: z24.object({
     // Allow legacy data (10 sections × 2 variants) and new data (7 sections × 2)
@@ -4235,7 +4243,7 @@ var PendingUserActionSchema = z24.discriminatedUnion("kind", [
       actor: z24.string(),
       /** Saved custom actor (Actor.id) backing this angle, when one was chosen. */
       actorId: z24.string().optional()
-    })).min(1).max(3)
+    })).min(1)
   }),
   z24.object({
     kind: z24.literal("service_script_approval"),
@@ -5523,6 +5531,7 @@ var MetaCampaignType = z33.enum([
   "traffic",
   "engagement"
 ]);
+var MetaPublishAttemptId = z33.string().uuid();
 var MetaOptimizationMode = z33.enum([
   "advantage_plus",
   "manual"
@@ -5706,6 +5715,8 @@ var MetaCampaignDefaults = MetaCampaignConfigBase.omit({
   currency: z33.string().length(3).regex(/^[A-Z]{3}$/).nullable().optional()
 });
 var UploadToMetaRequest = z33.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   /** Array of creatives to upload */
   creatives: z33.array(z33.object({
     creativeId: z33.string().min(1).optional(),
@@ -5862,6 +5873,8 @@ var MetaCampaignOverridesSchema = z34.object({
   destination: MetaCampaignDestination.optional()
 });
 var FacebookCreateCampaignBodySchema = z34.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   adAccountId: MetaAdAccountId,
   portfolioId: z34.string().min(1).optional(),
   pageId: z34.string().min(1).optional(),
@@ -5931,6 +5944,8 @@ var FacebookCreateCampaignResponseSchema = z34.object({
   appliedBudget: z34.number().int().positive()
 });
 var FacebookCreateCampaignFromCreativesBodySchema = z34.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   creatives: z34.array(z34.object({
     type: z34.enum([
       "image",
@@ -6078,6 +6093,8 @@ var FacebookCreativeSourceSchema = z34.discriminatedUnion("type", [
   FacebookMediaCreativeSourceSchema
 ]);
 var FacebookCreateCampaignFromTasksBodySchema = z34.object({
+  /** Caller-owned retry fence. Required before any provider operation. */
+  publishAttemptId: MetaPublishAttemptId,
   creatives: z34.array(z34.object({
     type: z34.enum([
       "image",
@@ -11473,6 +11490,12 @@ var McpErrorCode = {
   META_STAGED_ASSET_AMBIGUOUS: "META_STAGED_ASSET_AMBIGUOUS",
   META_STAGED_ASSET_TYPE_MISMATCH: "META_STAGED_ASSET_TYPE_MISMATCH",
   META_STAGED_ASSET_INVALID: "META_STAGED_ASSET_INVALID",
+  META_STAGING_QUOTA_EXCEEDED: "META_STAGING_QUOTA_EXCEEDED",
+  CAPACITY_UNAVAILABLE: "CAPACITY_UNAVAILABLE",
+  UPLOAD_INCOMPLETE: "UPLOAD_INCOMPLETE",
+  UPLOAD_EXPIRED: "UPLOAD_EXPIRED",
+  META_UPLOAD_SESSION_EXPIRED: "META_UPLOAD_SESSION_EXPIRED",
+  META_PUBLICATION_LEASE_STALE: "META_PUBLICATION_LEASE_STALE",
   META_PUBLICATION_RECONCILIATION_REQUIRED: "META_PUBLICATION_RECONCILIATION_REQUIRED",
   META_PUBLICATION_IN_PROGRESS: "META_PUBLICATION_IN_PROGRESS",
   META_NO_ADS_CREATED: "META_NO_ADS_CREATED",
@@ -11534,8 +11557,14 @@ var CODE_MESSAGES = {
   META_STAGED_ASSET_AMBIGUOUS: "The temporary media upload could not be uniquely resolved. Re-upload the media and retry the Meta publication.",
   META_STAGED_ASSET_TYPE_MISMATCH: "The temporary media type does not match the creative. Re-upload the correct image or video and retry.",
   META_STAGED_ASSET_INVALID: "The temporary media is empty or exceeds the server size limit. Re-upload the file and retry.",
-  META_PUBLICATION_RECONCILIATION_REQUIRED: "A previous Meta publication with these exact inputs may already exist. Check Meta before retrying so you do not create a duplicate campaign.",
-  META_PUBLICATION_IN_PROGRESS: "A Meta publication with these exact inputs is already in progress. Wait for it to finish, then check the campaign status.",
+  META_STAGING_QUOTA_EXCEEDED: "The temporary Meta staging quota was reached. Keep completed files and retry only pending files after retryAt.",
+  CAPACITY_UNAVAILABLE: "Temporary Meta staging capacity is unavailable. Keep completed files and retry only pending files later.",
+  UPLOAD_INCOMPLETE: "A temporary Meta upload is incomplete. Keep completed files and retry only pending files.",
+  UPLOAD_EXPIRED: "The temporary Meta upload expired. Re-upload this file before publishing.",
+  META_UPLOAD_SESSION_EXPIRED: "The Meta upload session expired. Open a new session and retry only pending files.",
+  META_PUBLICATION_LEASE_STALE: "The Meta publication lease expired or was replaced. Do not continue this stale publication; start a new explicit attempt only after confirming Meta did not receive it.",
+  META_PUBLICATION_RECONCILIATION_REQUIRED: "Meta may already have received this publication. Do not resend it; check Meta Ads Manager.",
+  META_PUBLICATION_IN_PROGRESS: "This Meta publication is already in progress. Do not resend it.",
   META_NO_ADS_CREATED: "No ads could be created. Most likely: the Meta Ads account has no payment method, no Facebook Page is linked, or the Facebook app lost permissions. Verify all three at https://business.facebook.com.",
   META_NO_ASSETS_READY: "The task has no videos or ad creative ready to publish yet. Wait for generation to finish or regenerate the assets.",
   META_NO_THUMBNAIL_SOURCE: "No image is available to use as the video thumbnail. Upload a product image or generate the ad creative before publishing.",
@@ -11684,6 +11713,11 @@ var INVALID_PARAM_CODES = /* @__PURE__ */ new Set([
   McpErrorCode.META_STAGED_ASSET_AMBIGUOUS,
   McpErrorCode.META_STAGED_ASSET_TYPE_MISMATCH,
   McpErrorCode.META_STAGED_ASSET_INVALID,
+  McpErrorCode.META_STAGING_QUOTA_EXCEEDED,
+  McpErrorCode.UPLOAD_INCOMPLETE,
+  McpErrorCode.UPLOAD_EXPIRED,
+  McpErrorCode.META_UPLOAD_SESSION_EXPIRED,
+  McpErrorCode.META_PUBLICATION_LEASE_STALE,
   McpErrorCode.META_PUBLICATION_RECONCILIATION_REQUIRED,
   McpErrorCode.META_PUBLICATION_IN_PROGRESS,
   McpErrorCode.TIKTOK_TOKEN_EXPIRED,
@@ -11743,6 +11777,14 @@ var PASSTHROUGH_CODES = /* @__PURE__ */ new Set([
   McpErrorCode.META_CAMPAIGN_CONFIG_INVALID,
   McpErrorCode.META_WHATSAPP_INVALID_NUMBER,
   McpErrorCode.META_INVALID_CTA,
+  McpErrorCode.META_STAGING_QUOTA_EXCEEDED,
+  McpErrorCode.CAPACITY_UNAVAILABLE,
+  McpErrorCode.UPLOAD_INCOMPLETE,
+  McpErrorCode.UPLOAD_EXPIRED,
+  McpErrorCode.META_UPLOAD_SESSION_EXPIRED,
+  McpErrorCode.META_PUBLICATION_LEASE_STALE,
+  McpErrorCode.META_PUBLICATION_RECONCILIATION_REQUIRED,
+  McpErrorCode.META_PUBLICATION_IN_PROGRESS,
   // TikTok
   McpErrorCode.TIKTOK_NOT_CONNECTED,
   McpErrorCode.TIKTOK_TOKEN_EXPIRED,
@@ -11831,6 +11873,10 @@ function translateError(err) {
       if (body.helpUrl !== void 0) extra.helpUrl = body.helpUrl;
       if (typeof body.requiredCredits === "number") extra.requiredCredits = body.requiredCredits;
       if (typeof body.availableCredits === "number") extra.availableCredits = body.availableCredits;
+      if (typeof body.dimension === "string") extra.dimension = body.dimension;
+      if (typeof body.usage === "number") extra.usage = body.usage;
+      if (typeof body.limit === "number") extra.limit = body.limit;
+      if (typeof body.retryAt === "string") extra.retryAt = body.retryAt;
       return mcp(code, resolveMessage(code, body.message), extra);
     }
     if (err.status === 401) {
@@ -13557,6 +13603,57 @@ __name(registerActorTools, "registerActorTools");
 
 // src/tools/publish.ts
 import { z as z55 } from "zod";
+
+// src/tools/stable-uuid.ts
+import { createHash as createHash2 } from "crypto";
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (value === null || typeof value !== "object") return value;
+  const record = value;
+  return Object.fromEntries(Object.keys(record).sort().filter((key) => record[key] !== void 0).map((key) => [
+    key,
+    canonicalize(record[key])
+  ]));
+}
+__name(canonicalize, "canonicalize");
+function canonicalJson(value) {
+  return JSON.stringify(canonicalize(value));
+}
+__name(canonicalJson, "canonicalJson");
+function deriveUuidV5(name, namespace) {
+  const namespaceBytes = Buffer.from(namespace.replaceAll("-", ""), "hex");
+  const digest = createHash2("sha1").update(namespaceBytes).update(name, "utf8").digest();
+  const bytes = Buffer.from(digest.subarray(0, 16));
+  bytes[6] = (bytes[6] ?? 0) & 15 | 80;
+  bytes[8] = (bytes[8] ?? 0) & 63 | 128;
+  const hex = bytes.toString("hex");
+  return [
+    hex.slice(0, 8),
+    hex.slice(8, 12),
+    hex.slice(12, 16),
+    hex.slice(16, 20),
+    hex.slice(20)
+  ].join("-");
+}
+__name(deriveUuidV5, "deriveUuidV5");
+
+// src/tools/meta-publish-attempt-id.ts
+var META_PUBLISH_NAMESPACE = "7b19c9ac-b4eb-4db1-970e-c2f24ce30b98";
+function deriveMetaPublishAttemptId(input) {
+  const operationIdentity = canonicalJson([
+    input.fingerprint,
+    input.toolName,
+    [
+      typeof input.requestId,
+      input.requestId
+    ],
+    input.canonicalInput
+  ]);
+  return deriveUuidV5(operationIdentity, META_PUBLISH_NAMESPACE);
+}
+__name(deriveMetaPublishAttemptId, "deriveMetaPublishAttemptId");
+
+// src/tools/publish.ts
 var ShopifyInput = z55.object({
   taskId: z55.string().min(1),
   shopDomain: z55.string().min(1),
@@ -13884,10 +13981,19 @@ function registerPublishTools(server, api, opts = {}) {
       throw translateError(e);
     }
   });
-  server.tool("publish_to_meta", "Crea una campa\xF1a de Meta Ads (Facebook/Instagram) desde UNA sola tarea. Antes llama `list_meta_destinations`, deja que el usuario elija el `portfolioId` (Business portfolio), el `adAccountId` y el `pageId` exactos, y env\xEDa esos tres valores; no adivines ni uses la primera p\xE1gina. Si quieres juntar creativos de VARIAS tareas usa `publish_creatives_to_meta`. La campa\xF1a se crea SIEMPRE PAUSED y el usuario la activa manualmente. `pixelId` es opcional. `angleIndexes` permite seleccionar \xE1ngulos. `campaignConfig` admite presupuesto en USD, pa\xEDses ISO-2 y nombre. `primaryText` permite reemplazar el copy y `phoneNumber` configura WhatsApp. Despu\xE9s usa `get_meta_campaign_status`.", MetaInput.shape, CREATES_EXTERNAL, async ({ taskId, campaignConfig, primaryText, phoneNumber, ...rest }) => {
+  server.tool("publish_to_meta", "Publica tus creativos en Meta sin gastar cr\xE9ditos de ProductMaker. El presupuesto de anuncios se paga directamente desde tu cuenta de Meta. Crear creativos o copy con IA sigue usando cr\xE9ditos. Crea una campa\xF1a de Meta Ads (Facebook/Instagram) desde UNA sola tarea. Antes llama `list_meta_destinations`, deja que el usuario elija el `portfolioId` (Business portfolio), el `adAccountId` y el `pageId` exactos, y env\xEDa esos tres valores; no adivines ni uses la primera p\xE1gina. Si quieres juntar creativos de VARIAS tareas usa `publish_creatives_to_meta`. La campa\xF1a se crea SIEMPRE PAUSED y el usuario la activa manualmente. `pixelId` es opcional. `angleIndexes` permite seleccionar \xE1ngulos. `campaignConfig` admite presupuesto en USD, pa\xEDses ISO-2 y nombre. `primaryText` permite reemplazar el copy y `phoneNumber` configura WhatsApp. Despu\xE9s usa `get_meta_campaign_status`. Si el resultado es ambiguo, NO reenv\xEDes: revisa Meta Ads Manager.", MetaInput.shape, CREATES_EXTERNAL, async (rawInput, extra) => {
     try {
+      const parsed = MetaInput.safeParse(rawInput);
+      if (!parsed.success) throw invalidInputFromZod(parsed.error);
+      const { taskId, campaignConfig, primaryText, phoneNumber, ...rest } = parsed.data;
       const body = {
-        ...rest
+        ...rest,
+        publishAttemptId: deriveMetaPublishAttemptId({
+          fingerprint: api.fingerprint(),
+          toolName: "publish_to_meta",
+          requestId: extra.requestId,
+          canonicalInput: parsed.data
+        })
       };
       if (campaignConfig) {
         body.campaignOverrides = toMetaCampaignOverrides(campaignConfig);
@@ -13912,7 +14018,7 @@ function registerPublishTools(server, api, opts = {}) {
       throw translateError(e);
     }
   });
-  server.tool("publish_creatives_to_meta", "Crea UNA campa\xF1a de Meta Ads PAUSED agrupando hasta " + CAMPAIGN_LIMITS.MAX_CREATIVES + ' creativos. Si la petici\xF3n natural adjunta o menciona archivos locales, llama primero `request_media_upload`; tras OK usa cada resultado como `source.type="asset"` con su `assetId` y el `type` que coincide con `mediaKind`. No pidas path ni URL. Despu\xE9s llama `list_meta_destinations` y pregunta en el chat por el `portfolioId`, `adAccountId` y `pageId` exactos; el App es solo para archivos. Si la carga fue parcial, publica s\xF3lo los assets confirmados; nunca inventes assets ni superes diez creativos. Las rutas locales s\xF3lo funcionan con MCP stdio. Los medios propios se eliminan despu\xE9s de publicar correctamente; si falla, quedan durante el TTL para reintento. Para videos la miniatura es opcional y ProductMaker puede generarla con FFmpeg. `campaignConfig.destination` acepta landing o WhatsApp. Para landing basta `campaignConfig.destination.landingUrl`; no dupliques la URL arriba. Si omites `budgetMode`, se infiere `ad_set` cuando cada ad set trae `dailyBudget`, o `campaign` cuando env\xEDas `campaignDailyBudget`. No actives la campa\xF1a autom\xE1ticamente.', PublishCreativesToMetaInputBase.shape, CREATES_EXTERNAL, async (rawInput) => {
+  server.tool("publish_creatives_to_meta", "Crea UNA campa\xF1a de Meta Ads PAUSED agrupando hasta " + CAMPAIGN_LIMITS.MAX_CREATIVES + ' creativos. Publica tus creativos en Meta sin gastar cr\xE9ditos de ProductMaker. El presupuesto de anuncios se paga directamente desde tu cuenta de Meta. Crear creativos o copy con IA sigue usando cr\xE9ditos. Si la petici\xF3n natural adjunta o menciona archivos locales, llama primero `request_media_upload`; tras OK usa cada resultado como `source.type="asset"` con su `assetId` y el `type` que coincide con `mediaKind`. No pidas path ni URL. Despu\xE9s llama `list_meta_destinations` y pregunta en el chat por el `portfolioId`, `adAccountId` y `pageId` exactos; el App es solo para archivos. Si la carga fue parcial, conserva los assets confirmados, procesa s\xF3lo los pendientes y publica \xFAnicamente assets confirmados; nunca inventes assets ni superes diez creativos. Las rutas locales s\xF3lo funcionan con MCP stdio. Los medios propios se eliminan despu\xE9s de publicar correctamente; si falla antes de enviar una mutaci\xF3n a Meta, quedan durante el TTL. Para videos la miniatura es opcional y ProductMaker puede generarla con FFmpeg. `campaignConfig.destination` acepta landing o WhatsApp. Para landing basta `campaignConfig.destination.landingUrl`; no dupliques la URL arriba. Si omites `budgetMode`, se infiere `ad_set` cuando cada ad set trae `dailyBudget`, o `campaign` cuando env\xEDas `campaignDailyBudget`. No actives la campa\xF1a autom\xE1ticamente. Si el resultado es ambiguo, NO reenv\xEDes: revisa Meta Ads Manager.', PublishCreativesToMetaInputBase.shape, CREATES_EXTERNAL, async (rawInput, extra) => {
     try {
       const parsed = PublishCreativesToMetaInput.safeParse(rawInput);
       if (!parsed.success) throw invalidInputFromZod(parsed.error);
@@ -13992,7 +14098,13 @@ function registerPublishTools(server, api, opts = {}) {
         landingUrl: input.landingUrl,
         targetCountry: input.targetCountry,
         campaignName: input.campaignName,
-        campaignConfig: input.campaignConfig
+        campaignConfig: input.campaignConfig,
+        publishAttemptId: deriveMetaPublishAttemptId({
+          fingerprint: api.fingerprint(),
+          toolName: "publish_creatives_to_meta",
+          requestId: extra.requestId,
+          canonicalInput: input
+        })
       });
       return asText({
         ...r,
@@ -14226,7 +14338,7 @@ __name(resolveEndpointForSession, "resolveEndpointForSession");
 function registerMediaUploadTools(server, api) {
   registerAppTool(server, "request_media_upload", {
     title: "Subir archivos",
-    description: "Abre el selector universal de ProductMaker para im\xE1genes o videos del usuario. Ll\xE1malo autom\xE1ticamente y antes de preguntar por campos faltantes cuando una petici\xF3n natural adjunte o mencione un archivo local, por ejemplo \u2018crea una landing con este producto\u2019, \u2018haz creativos con esta foto\u2019 o \u2018sube este video a Meta\u2019; hazlo aunque el usuario diga que todav\xEDa no generes ni publiques, porque esta herramienta solo prepara el archivo y no consume cr\xE9ditos, salvo que proh\xEDba expl\xEDcitamente subir, compartir o almacenar el archivo; no pidas una ruta local ni URL. Es la \xFAnica ruta de carga para create_product_task, generate_image_creatives, generate_video_creative, generate_free_video, generate_landing y publish_creatives_to_meta. Pasa las referencias opcionales de ChatGPT en files; si el host no puede transferirlas, el mismo App muestra el selector inline. Usa uploadPurpose=product_reference para fotos de producto y landings, creative para creativos o anuncios, y generic solo cuando ninguno aplique. Usa mediaKind=image para referencias de producto y landings; mixed solo cuando el consumidor acepte ambos tipos. El App NO te avisa cuando termina: en cuanto el usuario diga que ya subi\xF3 el archivo o que sigas, llama `check_media_upload` con este sessionId para obtener los assetId, y reanuda la intenci\xF3n original usando \xFAnicamente assetId y mediaKind, sin pedir que vuelva a subir ni mostrar datos t\xE9cnicos. El enlace externo es fallback solo si el App inline falla. Esta herramienta no genera, publica ni consume cr\xE9ditos.",
+    description: "Abre el selector universal de ProductMaker para im\xE1genes o videos del usuario. Cuando la foto o el video sea el siguiente dato faltante, ll\xE1malo en esa misma respuesta: no te limites a pedir que lo adjunte en el chat y esperar otro turno. Ll\xE1malo tambi\xE9n autom\xE1ticamente y antes de preguntar por campos faltantes adicionales cuando una petici\xF3n natural adjunte o mencione un archivo local, por ejemplo \u2018crea una landing con este producto\u2019, \u2018haz creativos con esta foto\u2019 o \u2018sube este video a Meta\u2019; hazlo aunque el usuario diga que todav\xEDa no generes ni publiques, porque esta herramienta solo prepara el archivo y no consume cr\xE9ditos, salvo que proh\xEDba expl\xEDcitamente subir, compartir o almacenar el archivo; no pidas una ruta local ni URL. Es la \xFAnica ruta de carga para create_product_task, generate_image_creatives, generate_video_creative, generate_free_video, generate_landing y publish_creatives_to_meta. Pasa las referencias opcionales de ChatGPT en files; si el host no puede transferirlas, el mismo App muestra el selector inline. Usa uploadPurpose=product_reference para fotos de producto y landings, creative para creativos o anuncios, y generic solo cuando ninguno aplique. Usa mediaKind=image para referencias de producto y landings; mixed solo cuando el consumidor acepte ambos tipos. El App NO te avisa cuando termina: en cuanto el usuario diga que ya subi\xF3 el archivo o que sigas, llama `check_media_upload` con este sessionId para obtener los assetId, y reanuda la intenci\xF3n original usando \xFAnicamente assetId y mediaKind, sin pedir que vuelva a subir ni mostrar datos t\xE9cnicos. El enlace externo es fallback solo si el App inline falla. Esta herramienta no genera, publica ni consume cr\xE9ditos.",
     inputSchema: UploadSessionToolInputShape,
     annotations: CREATES_INTERNAL,
     outputSchema: UniversalUploadStructuredResponse.shape,
@@ -14755,7 +14867,7 @@ var ProductCostingToolInput = z60.object({
   desiredMarginPercent: optionalPercent("Margen de ganancia deseado. Ejemplo: 10 significa 10%. Omite para usar el valor gu\xEDa editable del pa\xEDs.")
 });
 function registerProductCostingTools(server) {
-  server.tool("cost_product", "Calcula GRATIS y sin cr\xE9ditos cu\xE1nto cobrar por un producto de dropshipping en cualquiera de los pa\xEDses disponibles en ProductMaker. Es READ-ONLY: no crea tareas ni publica nada. Pide country y el costo real del proveedor; los dem\xE1s campos pueden usar valores gu\xEDa editables del pa\xEDs. Devuelve `price` y `compareAtPrice` listos para `create_product_task`. No inventes un costo de proveedor.", ProductCostingToolInput.shape, READS_INTERNAL, async (input) => {
+  server.tool("cost_product", "Calcula GRATIS y sin cr\xE9ditos cu\xE1nto cobrar por un producto de dropshipping en cualquiera de los pa\xEDses disponibles en ProductMaker. Ll\xE1mala siempre que el usuario pida calcular cu\xE1nto cobrar, la rentabilidad o el margen de un producto concreto; no hagas el c\xE1lculo ni reconstruyas la f\xF3rmula por tu cuenta. Es READ-ONLY: no crea tareas ni publica nada. Pide country y el costo real del proveedor; los dem\xE1s campos pueden usar valores gu\xEDa editables del pa\xEDs. Devuelve `price` y `compareAtPrice` listos para `create_product_task`. No inventes un costo de proveedor.", ProductCostingToolInput.shape, READS_INTERNAL, async (input) => {
     if (input.country !== void 0 && input.country !== "CO" && [
       input.supplierCostCop,
       input.shippingCostCop,
@@ -14879,29 +14991,12 @@ __name(formatPercent, "formatPercent");
 import { z as z61 } from "zod";
 
 // src/tools/product-research-idempotency.ts
-import { createHash as createHash2 } from "crypto";
 var RESEARCH_IDEMPOTENCY_WINDOW_MS = 2 * 60 * 60 * 1e3;
 var NAMESPACE = "6f9d3a1e-8c47-4b52-9f10-2d7e5a3c8b64";
-function uuidV5(name, namespace) {
-  const namespaceBytes = Buffer.from(namespace.replace(/-/g, ""), "hex");
-  const digest = createHash2("sha1").update(namespaceBytes).update(name, "utf8").digest();
-  const bytes = Buffer.from(digest.subarray(0, 16));
-  bytes[6] = (bytes[6] ?? 0) & 15 | 80;
-  bytes[8] = (bytes[8] ?? 0) & 63 | 128;
-  const hex = bytes.toString("hex");
-  return [
-    hex.slice(0, 8),
-    hex.slice(8, 12),
-    hex.slice(12, 16),
-    hex.slice(16, 20),
-    hex.slice(20)
-  ].join("-");
-}
-__name(uuidV5, "uuidV5");
 function deriveIdempotencyKey(input) {
   const window = Math.floor(input.nowMs / RESEARCH_IDEMPOTENCY_WINDOW_MS);
   const name = `${input.fingerprint}:${input.targetCountry}:${input.categoryKey}:${window}`;
-  return uuidV5(name, NAMESPACE);
+  return deriveUuidV5(name, NAMESPACE);
 }
 __name(deriveIdempotencyKey, "deriveIdempotencyKey");
 
@@ -15377,8 +15472,9 @@ __name(registerDropshippingProjectTools, "registerDropshippingProjectTools");
 // src/guidance/productmaker-guidance.ts
 var START_DROPSHIPPING_PROMPT_NAME = "start_dropshipping";
 var PRODUCTMAKER_SERVER_INSTRUCTIONS = [
-  "When a ProductMaker request needs an image or video the user attached, pasted, or has locally and no reusable ProductMaker assetId is already available, call request_media_upload immediately before asking for any missing business inputs. Do this even when the user says not to generate or publish yet: uploading only stages the file and does not generate, publish, or consume credits, unless the user explicitly says not to upload, share, or store the file. Treat natural requests such as 'create a landing with this product', 'make creatives with this photo', or 'upload this video to Meta' as upload intent; never require the user to name the uploader.",
+  "Whenever a ProductMaker request needs a new image or video and no reusable ProductMaker assetId is available, call request_media_upload immediately in the same response\u2014whether media is the next missing input or the user attached, pasted, mentioned, or has the file locally. The inline uploader is how ProductMaker asks for the file. Never merely ask the user to attach or upload it in chat and wait for a later turn. Call it before asking for any missing business inputs, even when the user says not to generate or publish yet: uploading only stages the file and does not generate, publish, or consume credits, unless the user explicitly says not to upload, share, or store the file. Treat natural requests such as 'create a landing with this product', 'make creatives with this photo', or 'upload this video to Meta' as upload intent; never require the user to name the uploader.",
   "For requests that do not need a new media upload, understand the user's intent before choosing a ProductMaker tool.",
+  "For every concrete ProductMaker request to calculate how much to charge, profitability, or margin for a dropshipping product, you must call cost_product after collecting its missing country and real supplier cost. Never calculate or reproduce ProductMaker's costing formula yourself; answer from the tool result.",
   "For remote MCP hosts, never ask for a local path, CDN URL, bytes, or base64. Pass supported host file references to request_media_upload; otherwise let its inline App open the file picker. The external upload page is fallback only.",
   "After the upload App sends its OK continuation, resume the original request with the verified assetId values, do not ask for another upload, and ask only for remaining business inputs in chat. The host-inserted continuation may contain opaque asset IDs; do not repeat them in narrative prose or expose session IDs, tokens, private URLs, file names, or JSON handoff payloads.",
   "Keep focused requests direct: creatives, landing pages, Shopify publication, Meta publication, and status checks do not require a DropshippingProject.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@productmaker/mcp",
-  "version": "3.4.2",
+  "version": "3.4.4",
   "type": "module",
   "private": false,
   "description": "Product Maker MCP server — cost products, generate dropshipping landing pages, UGC videos, and ad creatives, and publish to Shopify and Meta Ads from Claude, ChatGPT, or Gemini.",