@wavespeed/mcp 1.1.2 → 1.1.3

package/dist/lib/local-files.js

@@ -6,9 +6,30 @@
 // asked to share based on a heuristic; a value that merely looks like a
 // filename must never leave the machine. No `@`, no upload: bare paths pass
 // through to the API untouched and fail model validation there if they were
-// meant to be files.
+// meant to be files. The `@` is only read in media fields (isMediaField):
+// prompts legitimately start with "@Image 1".
 import fs from 'node:fs';
 import path from 'node:path';
+// The same rule api-server (pkg/openapi IsMediaField) and the dashboard use to
+// tell which inputs carry media, so a text field such as `prompt` that merely
+// starts with "@" ("@Image 1 waves") is never read as a file path:
+//   - an enum is never media;
+//   - an explicit x-ui-component decides: uploader, uploaders and mask are
+//     media, any other component is not;
+//   - otherwise the name decides: image, *_image, *_image_url, video…, audio…
+//     (and their plurals), plus mask (api-server needs the uploader component
+//     for masks; the CLI also takes the bare name, which no text field uses).
+const MEDIA_NAME = /(^|_)(image|image_url|video|video_url|audio|audio_url|images|image_urls|videos|video_urls|audios|audio_urls|mask)$/;
+export function isMediaField(name, prop) {
+    const def = (prop && typeof prop === 'object' ? prop : {});
+    if (Array.isArray(def.enum) && def.enum.length > 0)
+        return false;
+    const component = def['x-ui-component'];
+    if (typeof component === 'string' && component !== '') {
+        return ['uploader', 'uploaders', 'mask'].includes(component.toLowerCase());
+    }
+    return MEDIA_NAME.test(name.toLowerCase());
+}
 function isRegularFile(p) {
     try {
         return fs.statSync(p).isFile();
@@ -21,24 +42,27 @@ function isRegularFile(p) {
  * Walk the input and list every `@path` value. Pure over `exists`, so the
  * rules can be tested without touching the disk.
  */
-export function collectLocalFiles(input, _opts = {}) {
+export function collectLocalFiles(input, opts = {}) {
     const found = [];
-    const walk = (node, at) => {
+    // `media` is whether the nearest named field (an array's elements take the
+    // array's name) carries media.
+    const walk = (node, at, media, depth) => {
         if (Array.isArray(node)) {
-            node.forEach((v, i) => walk(v, at ? `${at}.${i}` : String(i)));
+            node.forEach((v, i) => walk(v, at ? `${at}.${i}` : String(i), media, depth));
             return;
         }
         if (node && typeof node === 'object') {
             for (const [k, v] of Object.entries(node)) {
-                walk(v, at ? `${at}.${k}` : k);
+                const prop = depth === 0 ? opts.props?.[k] : undefined;
+                walk(v, at ? `${at}.${k}` : k, opts.allFields || isMediaField(k, prop), depth + 1);
             }
             return;
         }
-        if (typeof node !== 'string' || !node.startsWith('@'))
+        if (!media || typeof node !== 'string' || !node.startsWith('@'))
             return;
         found.push({ path: node.slice(1), at });
     };
-    walk(input, '');
+    walk(input, '', !!opts.allFields, 0);
     return found;
 }
 function setAt(root, dotted, value) {

package/dist/server.js

@@ -211,7 +211,7 @@ export function createServer() {
             playground_url: modelPlaygroundUrl(meta.model_id),
         });
     });
-    server.tool('run_model', 'Run any WaveSpeed model. input keys come from get_model_schema; unknown keys are rejected before submission. Local files: pass "@./path" string values — they are uploaded and replaced with hosted URLs (bare paths are NOT uploaded). Returns the prediction id right away (done=false); call get_prediction with that id and wait_seconds until done=true to get the output URLs. The task keeps running on the server. Pass wait_seconds here to wait for a quick model in the same call.', {
+    server.tool('run_model', 'Run any WaveSpeed model. input keys come from get_model_schema; unknown keys are rejected before submission. Local files: pass "@./path" in a media field (image, images, video, audio, mask …) — it is uploaded and replaced with hosted URLs (bare paths are NOT uploaded). Returns the prediction id right away (done=false); call get_prediction with that id and wait_seconds until done=true to get the output URLs. The task keeps running on the server. Pass wait_seconds here to wait for a quick model in the same call.', {
         model: z.string().describe('Model ID from list_models'),
         input: z
             .record(z.unknown())
@@ -225,6 +225,7 @@ export function createServer() {
             .describe(`Max seconds to wait for the result in this call (default ${DEFAULT_WAIT_SECONDS}: return the prediction id right away)`),
     }, { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async ({ model, input, wait_seconds }, extra) => {
         const resolved = await resolveLocalFiles(input, {
+            props: (await catalogProps(model).catch(() => null)) ?? undefined,
             upload: async (p) => (await uploadFile(p)).url,
         });
         await assertKnownInputs(model, resolved.input);
@@ -289,7 +290,7 @@ export function createServer() {
         for (const k of keys)
             if (args[k] !== undefined)
                 media[k] = args[k];
-        const resolved = await resolveLocalFiles(media, { upload: async (p) => (await uploadFile(p)).url });
+        const resolved = await resolveLocalFiles(media, { allFields: true, upload: async (p) => (await uploadFile(p)).url });
         return { args: { ...args, ...resolved.input }, uploaded: resolved.uploaded };
     }
     const imageShape = {
@@ -376,6 +377,7 @@ export function createServer() {
         // would be wrong. The 24h content-hash cache means the later run reuses
         // this upload.
         const resolved = await resolveLocalFiles(input, {
+            props: (await catalogProps(model).catch(() => null)) ?? undefined,
             upload: async (p) => (await uploadFile(p)).url,
         });
         const priceInput = resolved.input;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wavespeed/mcp",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "description": "WaveSpeed MCP server — run any model on the live WaveSpeed catalog (image, video, audio, 3D) with schema introspection, local-file upload, and price quotes.",
   "type": "module",
   "bin": {