@thenavidm/midjourney-mcp-cli 1.0.0

package/dist/capture.js

@@ -0,0 +1,162 @@
+/**
+ * Record what the Midjourney web app actually calls.
+ *
+ * Midjourney has no API documentation, so every endpoint this server knows
+ * about was learned by watching the site. The reference implementation for this
+ * API did that once, by hand, and froze the result: twelve read endpoints from
+ * a single browsing session, and no way for anyone to extend it without
+ * repeating the whole exercise.
+ *
+ * Making it a command changes that. Run capture, use the site normally, click
+ * the thing that has no tool yet, and the request appears in the output with
+ * its method, path, query and body. That is the input to a new tool, and it
+ * takes a minute rather than an afternoon.
+ *
+ * It records the account's own traffic in its own browser. It never touches the
+ * request headers, which is deliberate: the interesting part is the shape of
+ * the call, and writing session cookies into a file people will paste into
+ * issues is a good way to leak an account.
+ */
+import { writeFile } from "node:fs/promises";
+import { CdpBrowser, CdpSession } from "./transport/cdp.js";
+const REDACTED = new Set(["cookie", "authorization", "x-csrf-token", "set-cookie"]);
+/** Never write a credential to disk, whatever shape it arrives in. */
+function scrub(value, depth = 0) {
+    if (depth > 6)
+        return "[deep]";
+    if (Array.isArray(value))
+        return value.slice(0, 5).map((item) => scrub(item, depth + 1));
+    if (value === null || typeof value !== "object")
+        return value;
+    const out = {};
+    for (const [key, nested] of Object.entries(value)) {
+        if (REDACTED.has(key.toLowerCase())) {
+            out[key] = "[redacted]";
+            continue;
+        }
+        out[key] = scrub(nested, depth + 1);
+    }
+    return out;
+}
+function parseBody(raw) {
+    if (!raw)
+        return undefined;
+    try {
+        return scrub(JSON.parse(raw));
+    }
+    catch {
+        return raw.slice(0, 300);
+    }
+}
+/** Trim a response to something readable without pasting a whole feed into a file. */
+function sample(text) {
+    try {
+        const parsed = JSON.parse(text);
+        if (Array.isArray(parsed)) {
+            return { _array_of: parsed.length, first: scrub(parsed[0]) };
+        }
+        return scrub(parsed);
+    }
+    catch {
+        return text.slice(0, 200);
+    }
+}
+export async function runCapture(config, options) {
+    const browser = new CdpBrowser({
+        cdpUrl: config.cdpUrl,
+        profileDir: config.profileDir,
+        chromePath: config.chromePath,
+        autoLaunch: config.autoLaunch,
+        headless: false,
+        timeoutMs: config.requestTimeoutMs,
+        origin: config.origin,
+    });
+    await browser.launch();
+    const targets = (await fetch(`${config.cdpUrl}/json/list`).then((response) => response.json()));
+    const host = new URL(config.origin).host;
+    const page = targets.find((target) => target.type === "page" && target.webSocketDebuggerUrl && target.url.includes(host));
+    if (!page?.webSocketDebuggerUrl) {
+        process.stderr.write(`No ${host} tab is open in the controlled browser. Open one, then run capture again.\n`);
+        return 1;
+    }
+    const session = new CdpSession(page.webSocketDebuggerUrl, config.requestTimeoutMs);
+    await session.connect();
+    await session.send("Network.enable");
+    const observed = new Map();
+    const inFlight = new Map();
+    session.on("Network.requestWillBeSent", (params) => {
+        const event = params;
+        let url;
+        try {
+            url = new URL(event.request.url);
+        }
+        catch {
+            return;
+        }
+        if (url.host !== host)
+            return;
+        if (!options.all && !url.pathname.startsWith("/api/"))
+            return;
+        const key = `${event.request.method} ${url.pathname}`;
+        const existing = observed.get(key);
+        if (existing) {
+            existing.count += 1;
+        }
+        else {
+            observed.set(key, {
+                method: event.request.method,
+                path: url.pathname,
+                query: Object.fromEntries(url.searchParams.entries()),
+                requestBody: parseBody(event.request.postData),
+                count: 1,
+            });
+        }
+        inFlight.set(event.requestId, { key });
+        process.stderr.write(`  ${event.request.method} ${url.pathname}\n`);
+    });
+    session.on("Network.responseReceived", (params) => {
+        const event = params;
+        const pending = inFlight.get(event.requestId);
+        if (!pending)
+            return;
+        const entry = observed.get(pending.key);
+        if (entry)
+            entry.status = event.response.status;
+    });
+    process.stderr.write(`\nRecording ${host} API traffic for ${options.seconds}s.\nUse the site in the controlled window: click the thing you want a tool for.\n\n`);
+    await new Promise((resolve) => setTimeout(resolve, options.seconds * 1000));
+    // Bodies are fetched at the end rather than as they arrive, because asking
+    // for one mid-flight can stall the page the user is still driving.
+    for (const [requestId, pending] of inFlight) {
+        const entry = observed.get(pending.key);
+        if (!entry || entry.responseSample !== undefined)
+            continue;
+        try {
+            const body = await session.send("Network.getResponseBody", { requestId });
+            if (!body.base64Encoded)
+                entry.responseSample = sample(body.body);
+        }
+        catch {
+            // The body is gone from the cache. The shape of the request is still the
+            // useful half.
+        }
+    }
+    session.close();
+    const result = {
+        captured_at: new Date().toISOString(),
+        origin: config.origin,
+        seconds: options.seconds,
+        endpoint_count: observed.size,
+        endpoints: [...observed.values()].sort((a, b) => a.path.localeCompare(b.path)),
+    };
+    const json = JSON.stringify(result, null, 2);
+    if (options.outPath) {
+        await writeFile(options.outPath, `${json}\n`);
+        process.stderr.write(`\n${observed.size} endpoint(s) written to ${options.outPath}\n`);
+    }
+    else {
+        process.stdout.write(`${json}\n`);
+    }
+    return 0;
+}
+//# sourceMappingURL=capture.js.map

package/dist/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../src/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAa5D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAEpF,sEAAsE;AACtE,SAAS,KAAK,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC7E,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YACxB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,OAAuB;IACtE,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAK3F,CAAC;IAEJ,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CACvB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC/F,CAAC;IAEF,IAAI,CAAC,IAAI,EAAE,oBAAoB,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,MAAM,IAAI,6EAA6E,CACxF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACnF,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEpD,OAAO,CAAC,EAAE,CAAC,2BAA2B,EAAE,CAAC,MAAe,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,MAGb,CAAC;QACF,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO;QAE9D,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;gBAC5B,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBACrD,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC9C,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,MAAe,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,MAA6D,CAAC;QAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,IAAI,oBAAoB,OAAO,CAAC,OAAO,qFAAqF,CAC5I,CAAC;IAEF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IAE5E,2EAA2E;IAC3E,mEAAmE;IACnE,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,SAAS;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAC7B,yBAAyB,EACzB,EAAE,SAAS,EAAE,CACd,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,aAAa;gBAAE,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,eAAe;QACjB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,cAAc,EAAE,QAAQ,CAAC,IAAI;QAC7B,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KAC/E,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,IAAI,2BAA2B,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,92 @@
+/**
+ * The CLI adapter.
+ *
+ * `register()` in tools/kit.ts turns a `ToolSpec` into an MCP tool. This turns
+ * the same spec into a shell command, from the same `ALL_TOOLS` array, through
+ * the same handler and the same `WriteGuard`. Nothing is described twice, so a
+ * tool added tomorrow is a command tomorrow and the two surfaces cannot drift.
+ *
+ * The command IS the tool name. `submit_imagine` runs as `submit-imagine`, and
+ * the underscore form works too. Inventing a prettier command tree would mean a
+ * hand-written mapping, which is exactly the drift this avoids, and it would
+ * force anyone reading the SKILL.md to learn two vocabularies for one action.
+ *
+ * Zod is the only schema: every flag, its placeholder, its help text and its
+ * validation come from the shape the MCP tool already declares.
+ */
+import { type ZodRawShape } from "zod";
+import { type AnyToolSpec } from "./tools/kit.js";
+/** How a value reaches the parser, once the Zod wrappers are peeled off. */
+type FlagKind = "string" | "number" | "boolean" | "enum" | "json";
+type Flag = {
+    key: string;
+    flag: string;
+    kind: FlagKind;
+    required: boolean;
+    repeatable: boolean;
+    choices?: string[];
+    help: string;
+};
+export declare function flagsFor(shape: ZodRawShape): Flag[];
+/**
+ * Midjourney's own parameter spellings, accepted as flags.
+ *
+ * The schema names things in full because a tool description is read by a model
+ * that has never seen a Midjourney prompt. A person at a terminal has, and they
+ * will type `--ar 16:9`, because that is what the parameter is called
+ * everywhere Midjourney documents it. Refusing the name the whole ecosystem
+ * uses, to protect a naming convention nobody outside this repo can see, would
+ * be the wrong trade.
+ */
+export declare const FLAG_ALIASES: Record<string, string>;
+/**
+ * Parse argv against a tool's flags.
+ *
+ * Zod does the real validation afterwards, so this only has to get values into
+ * the right JavaScript types and catch the mistakes Zod would otherwise report
+ * in terms of a schema the person at the terminal never sees.
+ */
+export declare function parseArgs(argv: string[], flags: Flag[]): Record<string, unknown>;
+/**
+ * Keep only the named fields.
+ *
+ * These endpoints are verbose: one explore page is tens of kilobytes of JSON,
+ * most of it layout hints. An agent piping that into its own context pays for
+ * every byte. `--select id,status,images` cuts it to what was asked for.
+ * Dotted paths descend, and arrays are traversed element-wise.
+ */
+export declare function selectFields(data: unknown, paths: string[]): unknown;
+/** Errors are JSON on stderr, always, so a caller parses one shape. */
+export declare function emitError(error: unknown): void;
+/**
+ * The name this was invoked as, so examples are copy-pasteable.
+ *
+ * The package puts two binaries on the same file. Printing `midjourney-mcp` at
+ * someone who typed `midjourney-cli` hands them a command that works but is not
+ * the one in their fingers.
+ */
+export declare function binName(): string;
+/**
+ * Words people use mapped onto words the tools use.
+ *
+ * Without this, "make a picture" matches nothing, because every tool says
+ * "generate" and "image". A lookup that only works when you already know the
+ * vocabulary is not a lookup.
+ */
+export declare const SYNONYMS: Record<string, string[]>;
+/**
+ * Resolve a capability described in words to the command that does it.
+ *
+ * An agent that knows what it wants but not what this tool calls it would
+ * otherwise read the full tool list to find out, which is the cost the CLI
+ * exists to avoid. Scoring is deliberately dumb: name and title carry the most
+ * weight, because a tool called `download_job` should win "download my images"
+ * without any cleverness.
+ */
+export declare function whichCommand(query: string): {
+    tool: AnyToolSpec;
+    score: number;
+}[];
+export declare function isCliCommand(argv: string[]): boolean;
+export declare function runCli(argv: string[]): Promise<number>;
+export {};