forgemesh-imagegen 2.0.3 → 2.1.0

package/README.md

@@ -17,9 +17,11 @@ Part of the [ForgeMesh](https://github.com/forgemeshlabs/forgemesh) ecosystem
 | `generate_clean` | Generate + background removal | $0.35 USDC |
 | `generate_hd` | Premium generate + 4x upscale (HD) | $0.50 USDC |
 | `generate_pro` | Top-tier generate + bg removal + 4x upscale | $0.75 USDC |
+| `list_presets` | List the 58 identity-preserving transform presets (person or pet) | $0.005 USDC |
+| `transform_image` | Transform a photo with a preset while keeping the subject's identity (FLUX Kontext Max) | $0.75 USDC |
 
-All tools accept `prompt` (required) and `aspect` (optional: `1:1`, `16:9`, `9:16`, `4:3`).
-`generate_image` also accepts `affiliate_id` for Pyrimid attribution, or uses `PYRIMID_AFFILIATE_ID` from the environment.
+The four `generate_*` tools accept `prompt` (required) and `aspect` (optional: `1:1`, `16:9`, `9:16`, `4:3`).
+`transform_image` takes a public `image_url`, a `preset` id from `list_presets`, an optional `aspect` (`match_input_image` default, or `1:1`, `16:9`, `9:16`, `4:3`, `3:4`) and `wait` (default true: polls the free status URL until the PNG is ready, usually 15-30s). Submit only images you have rights to; no minors; the provider safety filter applies.
 
 ---
 
@@ -36,8 +38,7 @@ Add to `claude_desktop_config.json`:
       "command": "npx",
       "args": ["-y", "forgemesh-imagegen"],
       "env": {
-        "WALLET_PRIVATE_KEY": "0x...",
-        "PYRIMID_AFFILIATE_ID": "af_your_id"
+        "WALLET_PRIVATE_KEY": "0x..."
       }
     }
   }
@@ -59,8 +60,8 @@ export WALLET_PRIVATE_KEY=0x...
 
 ## Requirements
 
-- A Base mainnet wallet private key with USDC
-- $1 USDC ≈ 4 base images, 2 clean, 2 HD, or 1 pro
+- A **dedicated, low-balance** Base mainnet wallet private key with USDC (never your primary wallet: the server signs USDC transfers autonomously)
+- $1 USDC ≈ 4 base images, 2 clean, 2 HD, or 1 pro, or 1 transform
 - No other API keys needed
 
 Get USDC on Base: [Coinbase](https://coinbase.com) → Bridge to Base, or buy directly on Base.
@@ -73,9 +74,6 @@ Get USDC on Base: [Coinbase](https://coinbase.com) → Bridge to Base, or buy di
 generate_image(prompt="a red panda in a spacesuit", aspect="1:1")
 → { image_url: "https://...", prompt: "...", aspect: "1:1", tier: "image" }
 
-generate_image(prompt="a red panda in a spacesuit", affiliate_id="af_your_id")
-→ routes through Pyrimid product 3 with no extra cost to the caller
-
 generate_clean(prompt="a product photo of a ceramic mug")
 → { image_url: "https://...", tier: "clean" }   // transparent PNG
 
@@ -84,6 +82,12 @@ generate_hd(prompt="a futuristic city at night, cyberpunk style")
 
 generate_pro(prompt="a logo mark, geometric eagle")
 → { image_url: "https://...", tier: "pro" }      // transparent + HD
+
+list_presets()
+→ { count: 58, presets: [{ id: "pet-royal", title: "Pet Royalty", subject: "pet", ... }, ...] }
+
+transform_image(image_url="https://example.com/my-dog.jpg", preset="pet-royal")
+→ { job_id: "...", status: "succeeded", preset: "pet-royal", image_url: "https://..." }
 ```
 
 ---
@@ -95,6 +99,7 @@ Each tool call makes an HTTP request to the ForgeMesh imagegen service gated by
 - Network: Base mainnet (eip155:8453)
 - Token: USDC
 - Protocol: [x402](https://x402.org)
+- The server only ever connects to `https://imagegen.coinopai.com`; every request has a 60s timeout and a 1 MB response cap; no third-party payment routers or affiliate hops.
 
 ---
 

package/index.js

@@ -8,113 +8,87 @@ const { x402Client, x402HTTPClient } = require("@x402/core/client");
 const { ExactEvmScheme } = require("@x402/evm/exact/client");
 const { toClientEvmSigner } = require("@x402/evm");
 const { privateKeyToAccount } = require("viem/accounts");
-const { createPublicClient, createWalletClient, http, parseAbi } = require("viem");
-const { base } = require("viem/chains");
 
 const BASE_URL = "https://imagegen.coinopai.com";
 const VALID_ASPECTS = ["1:1", "16:9", "9:16", "4:3"];
-const PYRIMID_ROUTER = "0xc949AEa380D7b7984806143ddbfE519B03ABd68B";
-const PYRIMID_VENDOR_ID = "0x034604e25078e293d7b181fa23b3f2f6";
-const USDC_ADDRESS = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
-const ROUTER_ABI = parseAbi([
-  "function routePayment(bytes16 vendorId, uint256 productId, bytes16 affiliateId, address buyer, uint256 maxPrice) external",
-]);
-const USDC_ABI = parseAbi([
-  "function approve(address spender, uint256 amount) external returns (bool)",
-]);
-const PYRIMID_PRODUCTS = {
-  "/generate": { productId: 3n, priceUsdc: 250000n },
-};
+const TRANSFORM_ASPECTS = ["match_input_image", "1:1", "16:9", "9:16", "4:3", "3:4"];
+const REQUEST_TIMEOUT_MS = 60_000;
+const MAX_RESPONSE_BYTES = 1_000_000;
+const MAX_PROMPT_CHARS = 2_000;
+
+const GENERATE_ANNOTATIONS = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true };
+const promptSchema = (subject) => ({
+  type: "object",
+  properties: {
+    prompt: { type: "string", maxLength: MAX_PROMPT_CHARS, description: subject },
+    aspect: { type: "string", enum: VALID_ASPECTS, description: "Aspect ratio — 1:1 (default), 16:9, 9:16, 4:3" },
+  },
+  required: ["prompt"],
+});
 
 const TOOLS = [
   {
     name: "generate_image",
-    annotations: {
-      readOnlyHint: false,
-      destructiveHint: false,
-      idempotentHint: false,
-      openWorldHint: true,
-    },
+    annotations: GENERATE_ANNOTATIONS,
     description: "Generate a standard AI image from a text prompt. Returns a PNG image URL. Costs $0.25 USDC on Base mainnet — paid automatically.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        prompt: { type: "string", description: "Text description of the image to generate" },
-        aspect: { type: "string", enum: VALID_ASPECTS, description: "Aspect ratio — 1:1 (default), 16:9, 9:16, 4:3" },
-        affiliate_id: { type: "string", description: "Optional Pyrimid affiliate ID. Affiliate earns a commission from within the listed price — no extra cost to you." },
-      },
-      required: ["prompt"],
-    },
+    inputSchema: promptSchema("Text description of the image to generate"),
   },
   {
     name: "generate_clean",
-    annotations: {
-      readOnlyHint: false,
-      destructiveHint: false,
-      idempotentHint: false,
-      openWorldHint: true,
-    },
+    annotations: GENERATE_ANNOTATIONS,
     description: "Generate an AI image with background removed. Returns a transparent PNG URL. Costs $0.35 USDC on Base mainnet.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        prompt: { type: "string", description: "Text description of the subject (background will be removed)" },
-        aspect: { type: "string", enum: VALID_ASPECTS, description: "Aspect ratio — 1:1 (default), 16:9, 9:16, 4:3" },
-      },
-      required: ["prompt"],
-    },
+    inputSchema: promptSchema("Text description of the subject (background will be removed)"),
   },
   {
     name: "generate_hd",
-    annotations: {
-      readOnlyHint: false,
-      destructiveHint: false,
-      idempotentHint: false,
-      openWorldHint: true,
-    },
+    annotations: GENERATE_ANNOTATIONS,
     description: "Generate a premium AI image upscaled 4x HD. Returns a high-resolution image URL. Costs $0.50 USDC on Base mainnet.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        prompt: { type: "string", description: "Text description of the image to generate" },
-        aspect: { type: "string", enum: VALID_ASPECTS, description: "Aspect ratio — 1:1 (default), 16:9, 9:16, 4:3" },
-      },
-      required: ["prompt"],
-    },
+    inputSchema: promptSchema("Text description of the image to generate"),
   },
   {
     name: "generate_pro",
-    annotations: {
-      readOnlyHint: false,
-      destructiveHint: false,
-      idempotentHint: false,
-      openWorldHint: true,
-    },
+    annotations: GENERATE_ANNOTATIONS,
     description: "Generate a top-tier AI image with background removal and 4x HD upscale. Costs $0.75 USDC on Base mainnet.",
+    inputSchema: promptSchema("Text description of the subject (background removed, then upscaled)"),
+  },
+  {
+    name: "list_presets",
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+    description: "List the 58 identity-preserving transform presets for transform_image (action figure, pet royalty, CEO portrait, cartoon villain, fantasy poster, pet astronaut, ...). Returns id, title, tagline and whether each expects a person or a pet photo. Costs $0.005 USDC on Base mainnet.",
+    inputSchema: { type: "object", properties: {}, required: [] },
+  },
+  {
+    name: "transform_image",
+    annotations: GENERATE_ANNOTATIONS,
+    description: "Transform a photo with a named preset while keeping the subject's identity (FLUX Kontext Max image-to-image). Pass a public https image URL and a preset id from list_presets. Returns a job with a free status_url to poll until the PNG is ready (usually 15-30s). Costs $0.75 USDC on Base mainnet. Submit only images you have rights to; no minors; provider safety filter applies.",
     inputSchema: {
       type: "object",
       properties: {
-        prompt: { type: "string", description: "Text description of the subject (background removed, then upscaled)" },
-        aspect: { type: "string", enum: VALID_ASPECTS, description: "Aspect ratio — 1:1 (default), 16:9, 9:16, 4:3" },
+        image_url: { type: "string", format: "uri", maxLength: 2048, description: "Public https URL of the source photo (JPEG, PNG or WebP)" },
+        preset: { type: "string", pattern: "^[a-z0-9-]{1,64}$", description: "Preset id from list_presets, e.g. action-figure, pet-royal, ceo-portrait" },
+        aspect: { type: "string", enum: TRANSFORM_ASPECTS, description: "Output aspect (default match_input_image)" },
+        wait: { type: "boolean", description: "Poll the job until it finishes and return the final image_url (default true, up to ~90s)" },
       },
-      required: ["prompt"],
+      required: ["image_url", "preset"],
     },
   },
 ];
 
 const TOOL_ENDPOINTS = {
-  generate_image: { path: "/generate", price: "$0.25" },
-  generate_clean: { path: "/generate/clean", price: "$0.35" },
-  generate_hd:    { path: "/generate/hd",    price: "$0.50" },
-  generate_pro:   { path: "/generate/pro",   price: "$0.75" },
+  generate_image:  { path: "/generate", price: "$0.25" },
+  generate_clean:  { path: "/generate/clean", price: "$0.35" },
+  generate_hd:     { path: "/generate/hd",    price: "$0.50" },
+  generate_pro:    { path: "/generate/pro",   price: "$0.75" },
+  list_presets:    { path: "/presets",        price: "$0.005" },
+  transform_image: { path: "/transform",      price: "$0.75" },
 };
 
 function buildHttpClient() {
   const key = process.env.WALLET_PRIVATE_KEY;
   if (!key) {
     throw new Error(
-      "WALLET_PRIVATE_KEY required — set a Base wallet private key funded with USDC.\n" +
-      "  generate_image = $0.25 | generate_clean = $0.35 | generate_hd = $0.50 | generate_pro = $0.75"
+      "WALLET_PRIVATE_KEY required — set a dedicated, low-balance Base wallet private key funded with USDC.\n" +
+      "  generate_image = $0.25 | generate_clean = $0.35 | generate_hd = $0.50 | generate_pro = $0.75 | transform_image = $0.75"
     );
   }
   const pk = key.startsWith("0x") ? key : "0x" + key;
@@ -124,84 +98,55 @@ function buildHttpClient() {
   return { httpClient: new x402HTTPClient(coreClient), account };
 }
 
-const sleep = (ms) => new Promise(r => setTimeout(r, ms));
-
-async function callPyrimid(account, url, product, affiliateId) {
-  const transport = http();
-  const publicClient = createPublicClient({ chain: base, transport });
-  const walletClient = createWalletClient({ account, chain: base, transport });
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
-  const approveHash = await walletClient.writeContract({
-    address: USDC_ADDRESS,
-    abi: USDC_ABI,
-    functionName: "approve",
-    args: [PYRIMID_ROUTER, product.priceUsdc],
-  });
-  await publicClient.waitForTransactionReceipt({ hash: approveHash });
-  await sleep(3000);
-
-  const routeHash = await walletClient.writeContract({
-    address: PYRIMID_ROUTER,
-    abi: ROUTER_ABI,
-    functionName: "routePayment",
-    args: [PYRIMID_VENDOR_ID, product.productId, "0x00000000000000000000000000000000", account.address, product.priceUsdc],
-  });
-  await publicClient.waitForTransactionReceipt({ hash: routeHash });
-  await sleep(3000);
-
-  const paidRes = await fetch(url.toString(), {
-    headers: { "X-Affiliate-ID": affiliateId, "X-Payment": routeHash },
-  });
-  if (!paidRes.ok) {
-    const errBody = await paidRes.text().catch(() => paidRes.statusText);
-    throw new Error(`Pyrimid payment failed — HTTP ${paidRes.status}: ${errBody.slice(0, 200)}`);
+// Every outbound request: bounded time, bounded body, same-origin only.
+async function fetchBounded(url, init = {}) {
+  const target = new URL(String(url));
+  if (target.origin !== BASE_URL) throw new Error(`Refusing to call ${target.origin}; this server only talks to ${BASE_URL}`);
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), REQUEST_TIMEOUT_MS);
+  try {
+    const res = await fetch(target.toString(), { ...init, signal: ctrl.signal, redirect: "error" });
+    const declared = Number(res.headers.get("content-length") || 0);
+    if (declared > MAX_RESPONSE_BYTES) throw new Error(`Response too large (${declared} bytes)`);
+    const text = await res.text();
+    if (text.length > MAX_RESPONSE_BYTES) throw new Error("Response too large");
+    return { status: res.status, ok: res.ok, headers: res.headers, text };
+  } finally {
+    clearTimeout(timer);
   }
-  return paidRes.json();
 }
 
-async function callPaid(ctx, path, params, affiliateId) {
-  const { httpClient, account } = ctx;
+function parseJson(text, status) {
+  try { return JSON.parse(text); } catch { throw new Error(`HTTP ${status}: non-JSON response`); }
+}
+
+async function callPaid(ctx, path, params) {
+  const { httpClient } = ctx;
   const url = new URL(BASE_URL + path);
   if (params) Object.entries(params).forEach(([k, v]) => url.searchParams.set(k, v));
 
-  const product = PYRIMID_PRODUCTS[path];
-  if (!product) affiliateId = null;
-  const extraHeaders = affiliateId ? { "X-Affiliate-ID": affiliateId } : {};
-
-  if (affiliateId && product) {
-    try {
-      return await callPyrimid(account, url, product, affiliateId);
-    } catch (_) {
-      affiliateId = null;
-    }
-  }
-
-  const directHeaders = affiliateId ? extraHeaders : {};
-  const res = await fetch(url.toString(), { headers: directHeaders });
-
+  const res = await fetchBounded(url);
   if (res.status === 402) {
     let body;
-    try { body = await res.clone().json(); } catch (_) {}
-    const paymentRequired = httpClient.getPaymentRequiredResponse(
-      (name) => res.headers.get(name),
-      body
-    );
+    try { body = JSON.parse(res.text); } catch { body = undefined; }
+    const paymentRequired = httpClient.getPaymentRequiredResponse((name) => res.headers.get(name), body);
     const paymentPayload = await httpClient.createPaymentPayload(paymentRequired);
-    const paidRes = await fetch(url.toString(), {
-      headers: { ...httpClient.encodePaymentSignatureHeader(paymentPayload), ...directHeaders },
-    });
-    if (!paidRes.ok) {
-      const errBody = await paidRes.text().catch(() => paidRes.statusText);
-      throw new Error(`Payment failed — HTTP ${paidRes.status}: ${errBody.slice(0, 200)}`);
-    }
-    return paidRes.json();
+    const paid = await fetchBounded(url, { headers: httpClient.encodePaymentSignatureHeader(paymentPayload) });
+    if (!paid.ok) throw new Error(`Payment failed — HTTP ${paid.status}: ${paid.text.slice(0, 200)}`);
+    return parseJson(paid.text, paid.status);
   }
+  if (!res.ok) throw new Error(`HTTP ${res.status}: ${res.text.slice(0, 200)}`);
+  return parseJson(res.text, res.status);
+}
 
-  if (!res.ok) {
-    const errBody = await res.text().catch(() => res.statusText);
-    throw new Error(`HTTP ${res.status}: ${errBody.slice(0, 200)}`);
-  }
-  return res.json();
+function requirePrompt(args) {
+  if (!args || typeof args.prompt !== "string" || !args.prompt.trim()) throw new Error("prompt is required and must be a non-empty string");
+  if (args.prompt.length > MAX_PROMPT_CHARS) throw new Error(`prompt must be at most ${MAX_PROMPT_CHARS} characters`);
+  const aspect = args.aspect || "1:1";
+  if (!VALID_ASPECTS.includes(aspect)) throw new Error(`Invalid aspect ratio '${aspect}'. Valid: ${VALID_ASPECTS.join(", ")}`);
+  return { prompt: args.prompt.trim(), aspect };
 }
 
 async function main() {
@@ -214,33 +159,45 @@ async function main() {
   }
 
   const server = new Server(
-    { name: "forgemesh-imagegen", version: "2.0.3" },
+    { name: "forgemesh-imagegen", version: require("./package.json").version },
     { capabilities: { tools: {} } }
   );
 
   server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 
   server.setRequestHandler(CallToolRequestSchema, async (req) => {
-    const { name, arguments: args } = req.params;
+    const { name, arguments: args = {} } = req.params;
     try {
       const endpoint = TOOL_ENDPOINTS[name];
       if (!endpoint) throw new Error("Unknown tool: " + name);
 
-      if (!args.prompt || typeof args.prompt !== "string" || !args.prompt.trim()) {
-        throw new Error("prompt is required and must be a non-empty string");
+      if (name === "list_presets") {
+        const data = await callPaid(ctx, endpoint.path, null);
+        return { content: [{ type: "text", text: JSON.stringify({ count: data.count, presets: data.presets, usage: data.usage, terms: data.terms }, null, 2) }] };
       }
 
-      const aspect = args.aspect || "1:1";
-      if (!VALID_ASPECTS.includes(aspect)) {
-        throw new Error(`Invalid aspect ratio '${aspect}'. Valid: ${VALID_ASPECTS.join(", ")}`);
+      if (name === "transform_image") {
+        if (typeof args.image_url !== "string" || !/^https:\/\/[^\s]{1,2040}$/.test(args.image_url)) throw new Error("image_url must be a public https URL");
+        if (typeof args.preset !== "string" || !/^[a-z0-9-]{1,64}$/.test(args.preset)) throw new Error("preset must be a preset id from list_presets");
+        const taspect = args.aspect || "match_input_image";
+        if (!TRANSFORM_ASPECTS.includes(taspect)) throw new Error(`Invalid aspect '${taspect}'. Valid: ${TRANSFORM_ASPECTS.join(", ")}`);
+        const job = await callPaid(ctx, endpoint.path, { image_url: args.image_url, preset: args.preset, aspect: taspect });
+        let result = job;
+        if (args.wait !== false && typeof job.status_url === "string") {
+          for (let i = 0; i < 30 && !["succeeded", "failed"].includes(result.status); i++) {
+            await sleep(3000);
+            const poll = await fetchBounded(job.status_url);
+            if (poll.ok) result = { ...job, ...parseJson(poll.text, poll.status) };
+          }
+        }
+        return {
+          content: [{ type: "text", text: JSON.stringify({ job_id: result.job_id, status: result.status, preset: job.preset, image_url: result.image_url || null, error: result.error || null, status_url: job.status_url }, null, 2) }],
+          isError: result.status === "failed",
+        };
       }
 
-      const affiliateId = args.affiliate_id || process.env.PYRIMID_AFFILIATE_ID || null;
-      const data = await callPaid(ctx, endpoint.path, {
-        prompt: args.prompt.trim(),
-        aspect,
-      }, affiliateId);
-
+      const { prompt, aspect } = requirePrompt(args);
+      const data = await callPaid(ctx, endpoint.path, { prompt, aspect });
       return {
         content: [{
           type: "text",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forgemesh-imagegen",
-  "version": "2.0.3",
+  "version": "2.1.0",
   "mcpName": "io.github.forgemeshlabs/imagegen-mcp",
   "description": "MCP server for AI image generation — generate, clean (bg removal), HD (4x upscale), Pro. Pay per image in USDC via x402 on Base. No API key needed.",
   "main": "index.js",
@@ -48,7 +48,7 @@
     "url": "https://github.com/forgemeshlabs/imagegen-mcp/issues"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "@x402/core": "^2.11.0",
     "@x402/evm": "^2.11.0",
     "viem": "^2.0.0"