mcp-server-autoshorts 1.0.0 → 2.1.0

package/README.md

@@ -0,0 +1,95 @@
+# mcp-server-autoshorts
+
+MCP server for [AutoShort.org](https://autoshort.org) — generate AI videos from Claude, Cursor, and other MCP clients.
+
+## Quick Start
+
+```bash
+npx mcp-server-autoshorts --api-key sk_live_your_key_here
+```
+
+## Setup
+
+### Claude Desktop
+
+Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "autoshort": {
+      "command": "npx",
+      "args": ["-y", "mcp-server-autoshorts", "--api-key", "sk_live_your_key_here"]
+    }
+  }
+}
+```
+
+### Cursor
+
+Add to `.cursor/mcp.json`:
+
+```json
+{
+  "mcpServers": {
+    "autoshort": {
+      "command": "npx",
+      "args": ["-y", "mcp-server-autoshorts", "--api-key", "sk_live_your_key_here"]
+    }
+  }
+}
+```
+
+### Environment Variable
+
+Instead of `--api-key`, set `AUTOSHORT_API_KEY`:
+
+```bash
+export AUTOSHORT_API_KEY=sk_live_your_key_here
+npx mcp-server-autoshorts
+```
+
+## Available Tools
+
+| Tool | Description |
+|------|-------------|
+| `autoshort_generate_video` | Generate an AI video from a topic |
+| `autoshort_get_video` | Get video status and details |
+| `autoshort_list_videos` | List your videos with pagination |
+| `autoshort_list_niches` | List available niches, art styles, qualities |
+| `autoshort_get_credit_balance` | Check credit balance and plan |
+| `autoshort_get_usage_stats` | API usage statistics |
+| `autoshort_get_subscription` | Subscription plan status |
+| `autoshort_list_api_keys` | List your API keys |
+
+Webhook tools were removed: the server does not deliver video events yet. Poll
+`autoshort_get_video` every 20-30 seconds; a PENDING video that cannot render returns
+`blockedReason` (for example `INSUFFICIENT_CREDITS`) instead of a countdown.
+
+New API keys include `credits:read` and `usage:read`. A key created earlier without them gets a
+403 from `autoshort_get_credit_balance` whose message links to the page where you create a key
+with that scope.
+
+## Resources
+
+| URI | Description |
+|-----|-------------|
+| `autoshort://credits/balance` | Current credit balance |
+| `autoshort://usage/rate-limit` | API rate limit status |
+
+## Prompts
+
+| Name | Description |
+|------|-------------|
+| `generate_video` | Step-by-step video generation guide |
+| `clone_viral_video` | Clone a viral video concept |
+
+## Get Your API Key
+
+1. Sign up at [autoshort.org](https://autoshort.org)
+2. Go to [Developers](https://autoshort.org/en/developers)
+3. Create an API key with desired scopes
+
+## License
+
+MIT

package/dist/catalog.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Values the AutoShort API accepts or charges, as this package advertises them to agents.
+ *
+ * This package is published on its own and cannot import the app, so these are copies.
+ * Each copy is pinned to its source by src/lib/__tests__/mcp-stdio-catalog-sync.test.ts in
+ * the app (VideoStatus enum, MOTION_LANGUAGE_CODES, CHAT_MESSAGE_MAX_CHARS, FEATURE_COSTS,
+ * VideoQuality). Change the source and that test names the line to change here. Hand-typed
+ * values are how the tools came to offer status GENERATING (rejected by the API), languages
+ * en/vi only (the API speaks nine) and "40-150 credits" (an API video costs 65).
+ */
+/** Prisma VideoStatus, in schema order. */
+export declare const VIDEO_STATUSES: readonly ["PENDING", "GENERATING_SCRIPT", "GENERATING_VOICE", "FETCHING_MEDIA", "RENDERING", "COMPLETED", "FAILED"];
+/** MOTION_LANGUAGE_CODES: what POST /api/videos/chat honours as an explicit language. */
+export declare const CHAT_VIDEO_LANGUAGES: readonly ["en", "es", "pt", "fr", "de", "it", "id", "tr", "vi"];
+/** CHAT_MESSAGE_MAX_CHARS. */
+export declare const CHAT_MESSAGE_MAX_CHARS = 4000;
+/** Prisma VideoQuality. */
+export declare const VIDEO_QUALITIES: readonly ["HD_720", "FULL_HD_1080"];
+/** FEATURE_COSTS.video_standard and FEATURE_COSTS.voice_over_premium. */
+export declare const CREDIT_COSTS: {
+    readonly videoStandard: 40;
+    readonly elevenLabsVoice: 25;
+};
+/** Every /api/v1 video is narrated by ElevenLabs, so the render gate asks for both. */
+export declare const API_VIDEO_CREDITS: number;
+export declare const API_VIDEO_COST_TEXT: string;
+export declare const POLL_HINT: string;
+/**
+ * FEATURE_COSTS.video_image_motion.
+ *
+ * Hand-copied like every other number here, and this one is the figure an agent budgets
+ * against BEFORE it spends: image-to-video is the only tool whose endpoint charges at submit.
+ * Pinned to the app constant by src/lib/__tests__/mcp-stdio-catalog-sync.test.ts.
+ */
+export declare const IMAGE_TO_VIDEO_CREDITS = 35;
+/**
+ * No refund promise here, deliberately.
+ *
+ * This used to say the credits are "refunded if the clip is never produced". That is not an
+ * invariant the pipeline holds. The operator-timeout path in cron/process-videos does call
+ * refundIfChargedForFailedVideo, and so does the admin refuse route — but TWO cases still end
+ * FAILED with money taken: that helper's own `refund-failed` outcome, and
+ * cron/retry-stuck-videos' permanentlyStuck `updateMany`, which has no refund call (reachable
+ * for one of these rows only once the operator has delivered and the render has then stalled
+ * MAX_RETRIES times).
+ *
+ * A longer list was checked and NARROWED: admin/videos is a GET-only dashboard whose
+ * `status: "FAILED"` occurrences are `where` filters, admin/videos/[id]/operator refunds
+ * BEFORE calling failVideo, and videos/[id]/render cannot reach its unrefunded FAILED write
+ * for these rows at all — that write is gated on `claimedByRequest` while every
+ * VEO_3_1_OPERATOR row returns ~230 lines earlier. Two real cases, not five.
+ *
+ * So the usual case refunds and the edges do not, which makes "it is refunded" a promise we
+ * cannot keep. Say what is true and name the check instead, so an agent that was charged for
+ * nothing can find out.
+ */
+export declare const IMAGE_TO_VIDEO_COST_TEXT: string;
+/**
+ * What an agent actually gets if the clip is fulfilled in operator mode.
+ *
+ * Image-to-video always renders through VEO_3_1_OPERATOR, which is a human driving a browser
+ * (scripts/veo-operator/run.mjs) — not an automatic provider. If nobody fulfils it inside the
+ * wait window the video FAILS. The refund wording is hedged for the reason in
+ * IMAGE_TO_VIDEO_COST_TEXT above; it previously claimed "any charge is refunded" flatly.
+ */
+export declare const OPERATOR_MODE_WARNING: string;
+/**
+ * Image-to-video dedupes on a requestId this package derives from the image bytes and the
+ * motion prompt — not on an Idempotency-Key header. The id carries no time component on
+ * purpose; the 24h bound is a continuous window on the server's lookup, so no two
+ * near-simultaneous retries can fall on different sides of it.
+ */
+export declare const IMAGE_TO_VIDEO_IDEMPOTENCY_HINT: string;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2CAA2C;AAC3C,eAAO,MAAM,cAAc,qHAQjB,CAAC;AAEX,yFAAyF;AACzF,eAAO,MAAM,oBAAoB,iEAAkE,CAAC;AAEpG,8BAA8B;AAC9B,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C,2BAA2B;AAC3B,eAAO,MAAM,eAAe,qCAAsC,CAAC;AAEnE,yEAAyE;AACzE,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAEX,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,QAA4D,CAAC;AAE3F,eAAO,MAAM,mBAAmB,QAE2D,CAAC;AAE5F,eAAO,MAAM,SAAS,QAEmE,CAAC;AAE1F;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,wBAAwB,QAI8D,CAAC;AAEpG;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAIe,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,QAMsB,CAAC"}

package/dist/catalog.js

@@ -0,0 +1,95 @@
+/**
+ * Values the AutoShort API accepts or charges, as this package advertises them to agents.
+ *
+ * This package is published on its own and cannot import the app, so these are copies.
+ * Each copy is pinned to its source by src/lib/__tests__/mcp-stdio-catalog-sync.test.ts in
+ * the app (VideoStatus enum, MOTION_LANGUAGE_CODES, CHAT_MESSAGE_MAX_CHARS, FEATURE_COSTS,
+ * VideoQuality). Change the source and that test names the line to change here. Hand-typed
+ * values are how the tools came to offer status GENERATING (rejected by the API), languages
+ * en/vi only (the API speaks nine) and "40-150 credits" (an API video costs 65).
+ */
+/** Prisma VideoStatus, in schema order. */
+export const VIDEO_STATUSES = [
+    'PENDING',
+    'GENERATING_SCRIPT',
+    'GENERATING_VOICE',
+    'FETCHING_MEDIA',
+    'RENDERING',
+    'COMPLETED',
+    'FAILED',
+];
+/** MOTION_LANGUAGE_CODES: what POST /api/videos/chat honours as an explicit language. */
+export const CHAT_VIDEO_LANGUAGES = ['en', 'es', 'pt', 'fr', 'de', 'it', 'id', 'tr', 'vi'];
+/** CHAT_MESSAGE_MAX_CHARS. */
+export const CHAT_MESSAGE_MAX_CHARS = 4000;
+/** Prisma VideoQuality. */
+export const VIDEO_QUALITIES = ['HD_720', 'FULL_HD_1080'];
+/** FEATURE_COSTS.video_standard and FEATURE_COSTS.voice_over_premium. */
+export const CREDIT_COSTS = {
+    videoStandard: 40,
+    elevenLabsVoice: 25,
+};
+/** Every /api/v1 video is narrated by ElevenLabs, so the render gate asks for both. */
+export const API_VIDEO_CREDITS = CREDIT_COSTS.videoStandard + CREDIT_COSTS.elevenLabsVoice;
+export const API_VIDEO_COST_TEXT = `Costs ${API_VIDEO_CREDITS} credits (${CREDIT_COSTS.videoStandard} render + ` +
+    `${CREDIT_COSTS.elevenLabsVoice} ElevenLabs voice); art style does not change the price.`;
+export const POLL_HINT = 'Rendering is asynchronous: poll autoshort_get_video every 20-30 seconds until status is COMPLETED or FAILED. ' +
+    'If get_video returns blockedReason, stop polling and act on it (e.g. top up credits).';
+/**
+ * FEATURE_COSTS.video_image_motion.
+ *
+ * Hand-copied like every other number here, and this one is the figure an agent budgets
+ * against BEFORE it spends: image-to-video is the only tool whose endpoint charges at submit.
+ * Pinned to the app constant by src/lib/__tests__/mcp-stdio-catalog-sync.test.ts.
+ */
+export const IMAGE_TO_VIDEO_CREDITS = 35;
+/**
+ * No refund promise here, deliberately.
+ *
+ * This used to say the credits are "refunded if the clip is never produced". That is not an
+ * invariant the pipeline holds. The operator-timeout path in cron/process-videos does call
+ * refundIfChargedForFailedVideo, and so does the admin refuse route — but TWO cases still end
+ * FAILED with money taken: that helper's own `refund-failed` outcome, and
+ * cron/retry-stuck-videos' permanentlyStuck `updateMany`, which has no refund call (reachable
+ * for one of these rows only once the operator has delivered and the render has then stalled
+ * MAX_RETRIES times).
+ *
+ * A longer list was checked and NARROWED: admin/videos is a GET-only dashboard whose
+ * `status: "FAILED"` occurrences are `where` filters, admin/videos/[id]/operator refunds
+ * BEFORE calling failVideo, and videos/[id]/render cannot reach its unrefunded FAILED write
+ * for these rows at all — that write is gated on `claimedByRequest` while every
+ * VEO_3_1_OPERATOR row returns ~230 lines earlier. Two real cases, not five.
+ *
+ * So the usual case refunds and the edges do not, which makes "it is refunded" a promise we
+ * cannot keep. Say what is true and name the check instead, so an agent that was charged for
+ * nothing can find out.
+ */
+export const IMAGE_TO_VIDEO_COST_TEXT = `Costs ${IMAGE_TO_VIDEO_CREDITS} credits, and unlike every other tool here it is charged ` +
+    'the moment the job is accepted, not when the clip is delivered. A failed clip is normally ' +
+    'refunded automatically, but that is not guaranteed on every failure path: if the video ends ' +
+    'FAILED, check autoshort_get_credit_balance and report a missing refund rather than assuming it.';
+/**
+ * What an agent actually gets if the clip is fulfilled in operator mode.
+ *
+ * Image-to-video always renders through VEO_3_1_OPERATOR, which is a human driving a browser
+ * (scripts/veo-operator/run.mjs) — not an automatic provider. If nobody fulfils it inside the
+ * wait window the video FAILS. The refund wording is hedged for the reason in
+ * IMAGE_TO_VIDEO_COST_TEXT above; it previously claimed "any charge is refunded" flatly.
+ */
+export const OPERATOR_MODE_WARNING = 'Fulfilment is MANUAL: a human operator animates the image, it is not an automatic render. ' +
+    'If nobody fulfils it within VEO_OPERATOR_WAIT_MINUTES (10 in production) the video FAILS ' +
+    'with "could not be produced in time" and the charge is normally refunded automatically. ' +
+    'Do not build an unattended loop on this tool.';
+/**
+ * Image-to-video dedupes on a requestId this package derives from the image bytes and the
+ * motion prompt — not on an Idempotency-Key header. The id carries no time component on
+ * purpose; the 24h bound is a continuous window on the server's lookup, so no two
+ * near-simultaneous retries can fall on different sides of it.
+ */
+export const IMAGE_TO_VIDEO_IDEMPOTENCY_HINT = 'Retry-safe: re-calling with the same image and motionPrompt returns the first job ' +
+    '(duplicate: true) for 24 hours instead of charging again. If that attempt FAILED, a retry ' +
+    'refunds the dead attempt first and then makes a new clip, so one clip is never billed ' +
+    'twice — whatever its age. In the one case where the old credits cannot be returned you get ' +
+    '409 STRANDED_CHARGE with the videoId and no new charge: report it, do not loop. Pass ' +
+    'idempotencyKey to force a separate clip from identical inputs.';
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS;IACT,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,QAAQ;CACA,CAAC;AAEX,yFAAyF;AACzF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAEpG,8BAA8B;AAC9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,2BAA2B;AAC3B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAU,CAAC;AAEnE,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa,EAAE,EAAE;IACjB,eAAe,EAAE,EAAE;CACX,CAAC;AAEX,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC;AAE3F,MAAM,CAAC,MAAM,mBAAmB,GAC9B,SAAS,iBAAiB,aAAa,YAAY,CAAC,aAAa,YAAY;IAC7E,GAAG,YAAY,CAAC,eAAe,0DAA0D,CAAC;AAE5F,MAAM,CAAC,MAAM,SAAS,GACpB,+GAA+G;IAC/G,uFAAuF,CAAC;AAE1F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,SAAS,sBAAsB,2DAA2D;IAC1F,4FAA4F;IAC5F,8FAA8F;IAC9F,iGAAiG,CAAC;AAEpG;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,4FAA4F;IAC5F,2FAA2F;IAC3F,0FAA0F;IAC1F,+CAA+C,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAC1C,oFAAoF;IACpF,4FAA4F;IAC5F,wFAAwF;IACxF,6FAA6F;IAC7F,uFAAuF;IACvF,gEAAgE,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,122 @@
+/**
+ * AutoShort API HTTP Client
+ *
+ * Wraps all v1 API endpoints with typed methods.
+ * Captures rate limit headers for MCP resource exposure.
+ */
+import type { RateLimitInfo } from './types.js';
+export declare class AutoShortClient {
+    private readonly apiKey;
+    private readonly baseUrl;
+    /** Last rate limit info from API response headers */
+    lastRateLimit: RateLimitInfo | null;
+    constructor(apiKey: string, baseUrl: string);
+    /** Generic API request with auth, error handling, rate limit capture */
+    request<T>(method: string, path: string, body?: unknown): Promise<T>;
+    generateVideo(params: {
+        topic: string;
+        niche?: string;
+        duration?: number;
+        artStyle?: string;
+        quality?: string;
+    }): Promise<{
+        id: string;
+        status: string;
+    }>;
+    generateChatVideo(params: {
+        message: string;
+        videoProvider?: 'FFMPEG' | 'VEO_3_1_OPERATOR';
+        artStyle?: string;
+        aspectRatio?: '9:16' | '1:1' | '16:9';
+        language?: string;
+        targetDuration?: number;
+    }): Promise<{
+        videoId: string;
+        reply: string;
+        params: Record<string, unknown>;
+    }>;
+    generateProductAd(params: {
+        url: string;
+        language?: string;
+        artStyle?: string;
+        duration?: number;
+    }): Promise<Record<string, unknown>>;
+    generateImageToVideo(params: {
+        imagePath: string;
+        motionPrompt: string;
+        idempotencyKey?: string;
+    }): Promise<Record<string, unknown>>;
+    getVideo(id: string): Promise<Record<string, unknown>>;
+    listVideos(params?: {
+        limit?: number;
+        offset?: number;
+        status?: string;
+    }): Promise<{
+        videos: unknown[];
+        pagination: unknown;
+    }>;
+    listNiches(): Promise<{
+        niches: unknown[];
+        artStyles: unknown[];
+        videoQualities: unknown[];
+        durations: number[];
+    }>;
+    getCreditBalance(): Promise<{
+        balance: number;
+        monthlyAllocation: number;
+        bonusCredits: number;
+        plan: string;
+    }>;
+    getUsageStats(): Promise<Record<string, unknown>>;
+    getSubscription(): Promise<Record<string, unknown>>;
+    listApiKeys(): Promise<{
+        apiKeys: unknown[];
+    }>;
+}
+/** Typed API error with HTTP status and error code */
+export declare class AutoShortApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(message: string, status: number, code: string);
+}
+/**
+ * MIME from the file's own first bytes, with the extension only as a tiebreaker.
+ *
+ * It used to be derived from the extension alone, so an extensionless file, a `.jfif` or a
+ * `.gif` was declared `image/jpeg` and failed the server's magic-byte check with the unhelpful
+ * "Image contents do not match the uploaded file type" / "Invalid image data". Sniffing means a
+ * correct file is labelled correctly whatever it is called, and a genuinely unsupported format
+ * keeps its real type so the server's 400 names the actual problem.
+ */
+export declare function sniffImageMime(bytes: Uint8Array, imagePath: string): string;
+/**
+ * Shape a deterministic hash into something the route's STRICT v4 regex accepts.
+ *
+ * `requestId` is validated against
+ * /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i, so a bare sha256
+ * is refused with 400 "A valid request ID is required". Version nibble pinned to 4 and the
+ * variant nibble forced into 8..b; every other nibble comes from the hash.
+ */
+export declare function uuidFromSeed(seed: string): string;
+/**
+ * The request id for one image-to-video submission: deterministic, and ALWAYS content-bound.
+ *
+ * Two rules, each closing a way of being charged 35 credits twice.
+ *
+ * 1. NO CLOCK IN THE SEED. It used to be `randomUUID()` per call, which defeats all three of
+ *    the endpoint's dedupe layers (pre-check, pg_advisory_xact_lock, in-transaction re-check)
+ *    and buys a second clip on every retry. A later attempt salted the seed with a UTC day
+ *    bucket, which is worse than it looks: a bucket has an edge, so a retry at 23:59:59 and
+ *    its follow-up at 00:00:01 derive DIFFERENT ids and miss every layer. The time bound
+ *    belongs on the READER, as a continuous window — see imageToVideoDedupeSince() in
+ *    src/lib/image-to-video-policy.ts.
+ *
+ * 2. THE CONTENT IS ALWAYS IN THE SEED, even when the caller supplies a key. A caller key used
+ *    to replace the content seed outright, so an agent passing one run-scoped key for two
+ *    different clips got the FIRST video back for the second ask — `duplicate: true`, no
+ *    fingerprint compared, so not even a 422 to tell it apart. Folding both in keeps each
+ *    direction working: a distinct key separates two deliberate clips from identical inputs,
+ *    and distinct inputs separate two clips that happen to share a key.
+ */
+export declare function imageToVideoRequestId(imageBytes: Uint8Array, motionPrompt: string, idempotencyKey?: string): string;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,qBAAa,eAAe;IAKxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,qDAAqD;IAC9C,aAAa,EAAE,aAAa,GAAG,IAAI,CAAQ;gBAG/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;IAGlC,wEAAwE;IAClE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAqCpE,aAAa,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KACrC;YAC2B,MAAM;gBAAU,MAAM;;IAG5C,iBAAiB,CAAC,MAAM,EAAE;QAC9B,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,QAAQ,GAAG,kBAAkB,CAAC;QAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;QACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KAC5C;iBACgC,MAAM;eAAS,MAAM;gBAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;IAKjF,iBAAiB,CAAC,MAAM,EAAE;QAC9B,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACtE;IAIK,oBAAoB,CAAC,MAAM,EAAE;QACjC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB;IAgCK,QAAQ,CAAC,EAAE,EAAE,MAAM;IAInB,UAAU,CAAC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;gBAI9C,OAAO,EAAE;oBAAc,OAAO;;IAKxD,UAAU;gBACgB,OAAO,EAAE;mBAAa,OAAO,EAAE;wBAAkB,OAAO,EAAE;mBAAa,MAAM,EAAE;;IAOzG,gBAAgB;iBACW,MAAM;2BAAqB,MAAM;sBAAgB,MAAM;cAAQ,MAAM;;IAOhG,aAAa;IAMb,eAAe;IAMf,WAAW;iBACgB,OAAO,EAAE;;CAE3C;AAED,sDAAsD;AACtD,qBAAa,iBAAkB,SAAQ,KAAK;aAGxB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;gBAF5B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM;CAK/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAqB3E;AAID;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOjD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAWR"}

package/dist/client.js

@@ -0,0 +1,214 @@
+/**
+ * AutoShort API HTTP Client
+ *
+ * Wraps all v1 API endpoints with typed methods.
+ * Captures rate limit headers for MCP resource exposure.
+ */
+import { USER_AGENT } from './constants.js';
+import { readFile } from 'node:fs/promises';
+import { basename, extname } from 'node:path';
+import { createHash } from 'node:crypto';
+export class AutoShortClient {
+    apiKey;
+    baseUrl;
+    /** Last rate limit info from API response headers */
+    lastRateLimit = null;
+    constructor(apiKey, baseUrl) {
+        this.apiKey = apiKey;
+        this.baseUrl = baseUrl;
+    }
+    /** Generic API request with auth, error handling, rate limit capture */
+    async request(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const res = await fetch(url, {
+            method,
+            headers: {
+                'Authorization': `Bearer ${this.apiKey}`,
+                'Content-Type': 'application/json',
+                'User-Agent': USER_AGENT,
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        // Capture rate limit headers
+        const limit = res.headers.get('x-ratelimit-limit');
+        const remaining = res.headers.get('x-ratelimit-remaining');
+        const resetAt = res.headers.get('x-ratelimit-reset');
+        if (limit && remaining && resetAt) {
+            this.lastRateLimit = {
+                limit: parseInt(limit),
+                remaining: parseInt(remaining),
+                resetAt,
+            };
+        }
+        if (!res.ok) {
+            let errorBody = {};
+            try {
+                errorBody = await res.json();
+            }
+            catch { /* empty */ }
+            const msg = errorBody.error || `API error: ${res.status} ${res.statusText}`;
+            const code = errorBody.code || `HTTP_${res.status}`;
+            throw new AutoShortApiError(msg, res.status, code);
+        }
+        return res.json();
+    }
+    // ── Video endpoints ──
+    async generateVideo(params) {
+        return this.request('POST', '/api/v1/videos/generate', params);
+    }
+    async generateChatVideo(params) {
+        return this.request('POST', '/api/videos/chat', params);
+    }
+    async generateProductAd(params) {
+        return this.request('POST', '/api/videos/product-ad', params);
+    }
+    async generateImageToVideo(params) {
+        const bytes = await readFile(params.imagePath);
+        const form = new FormData();
+        form.set('image', new Blob([bytes], { type: sniffImageMime(bytes, params.imagePath) }), basename(params.imagePath));
+        form.set('motionPrompt', params.motionPrompt);
+        // NO `provider` field, deliberately.
+        //
+        // The route reads `String(form.get("provider") || IMAGE_TO_VIDEO_POLICY.provider)`, so an
+        // absent field already resolves to the one token it accepts. We used to send
+        // 'VEO_3_1_OPERATOR' — the endpoint's internal RENDER provider, not its submission token —
+        // and so EVERY call came back 400 "Image to Video uses its own flow only; direct Veo API is
+        // disabled" (reproduced against production 2026-10-16). Hardcoding the correct literal here
+        // would fix today's call and re-couple this standalone package to a server constant it
+        // cannot import; omitting the field lets the server own its own default.
+        form.set('requestId', imageToVideoRequestId(bytes, params.motionPrompt, params.idempotencyKey));
+        const res = await fetch(`${this.baseUrl}/api/videos/image-to-video`, {
+            method: 'POST',
+            headers: { 'Authorization': `Bearer ${this.apiKey}`, 'User-Agent': USER_AGENT },
+            body: form,
+        });
+        if (!res.ok) {
+            const body = await res.json().catch(() => ({}));
+            throw new AutoShortApiError(body.error || `API error: ${res.status}`, res.status, `HTTP_${res.status}`);
+        }
+        return res.json();
+    }
+    async getVideo(id) {
+        return this.request('GET', `/api/v1/videos/${encodeURIComponent(id)}`);
+    }
+    async listVideos(params) {
+        const qs = params ? '?' + new URLSearchParams(Object.entries(params).filter(([, v]) => v != null).map(([k, v]) => [k, String(v)])).toString() : '';
+        return this.request('GET', `/api/v1/videos${qs}`);
+    }
+    // ── Niches ──
+    async listNiches() {
+        return this.request('GET', '/api/v1/scripts/niches');
+    }
+    // ── Credits ──
+    async getCreditBalance() {
+        return this.request('GET', '/api/v1/credits/balance');
+    }
+    // ── Usage ──
+    async getUsageStats() {
+        return this.request('GET', '/api/v1/usage/stats');
+    }
+    // ── Billing ──
+    async getSubscription() {
+        return this.request('GET', '/api/v1/billing/subscription');
+    }
+    // ── API Keys ──
+    async listApiKeys() {
+        return this.request('GET', '/api/v1/keys');
+    }
+}
+/** Typed API error with HTTP status and error code */
+export class AutoShortApiError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'AutoShortApiError';
+    }
+}
+/**
+ * MIME from the file's own first bytes, with the extension only as a tiebreaker.
+ *
+ * It used to be derived from the extension alone, so an extensionless file, a `.jfif` or a
+ * `.gif` was declared `image/jpeg` and failed the server's magic-byte check with the unhelpful
+ * "Image contents do not match the uploaded file type" / "Invalid image data". Sniffing means a
+ * correct file is labelled correctly whatever it is called, and a genuinely unsupported format
+ * keeps its real type so the server's 400 names the actual problem.
+ */
+export function sniffImageMime(bytes, imagePath) {
+    const b = bytes;
+    if (b.length >= 3 && b[0] === 0xff && b[1] === 0xd8 && b[2] === 0xff)
+        return 'image/jpeg';
+    if (b.length >= 8 &&
+        b[0] === 0x89 && b[1] === 0x50 && b[2] === 0x4e && b[3] === 0x47 &&
+        b[4] === 0x0d && b[5] === 0x0a && b[6] === 0x1a && b[7] === 0x0a)
+        return 'image/png';
+    if (b.length >= 12 &&
+        String.fromCharCode(b[0], b[1], b[2], b[3]) === 'RIFF' &&
+        String.fromCharCode(b[8], b[9], b[10], b[11]) === 'WEBP')
+        return 'image/webp';
+    if (b.length >= 6 && String.fromCharCode(b[0], b[1], b[2]) === 'GIF')
+        return 'image/gif';
+    // Unrecognised: fall back to the extension so the server's refusal names a real type rather
+    // than one we invented.
+    const extension = extname(imagePath).toLowerCase();
+    if (extension === '.png')
+        return 'image/png';
+    if (extension === '.webp')
+        return 'image/webp';
+    if (extension === '.gif')
+        return 'image/gif';
+    return 'application/octet-stream';
+}
+const UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+/**
+ * Shape a deterministic hash into something the route's STRICT v4 regex accepts.
+ *
+ * `requestId` is validated against
+ * /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i, so a bare sha256
+ * is refused with 400 "A valid request ID is required". Version nibble pinned to 4 and the
+ * variant nibble forced into 8..b; every other nibble comes from the hash.
+ */
+export function uuidFromSeed(seed) {
+    const h = createHash('sha256').update(seed).digest('hex');
+    const variant = ((parseInt(h[16], 16) & 0x3) | 0x8).toString(16);
+    const id = `${h.slice(0, 8)}-${h.slice(8, 12)}-4${h.slice(13, 16)}-${variant}${h.slice(17, 20)}-${h.slice(20, 32)}`;
+    /* c8 ignore next */
+    if (!UUID_V4.test(id))
+        throw new Error(`derived request id is not a v4 UUID: ${id}`);
+    return id;
+}
+/**
+ * The request id for one image-to-video submission: deterministic, and ALWAYS content-bound.
+ *
+ * Two rules, each closing a way of being charged 35 credits twice.
+ *
+ * 1. NO CLOCK IN THE SEED. It used to be `randomUUID()` per call, which defeats all three of
+ *    the endpoint's dedupe layers (pre-check, pg_advisory_xact_lock, in-transaction re-check)
+ *    and buys a second clip on every retry. A later attempt salted the seed with a UTC day
+ *    bucket, which is worse than it looks: a bucket has an edge, so a retry at 23:59:59 and
+ *    its follow-up at 00:00:01 derive DIFFERENT ids and miss every layer. The time bound
+ *    belongs on the READER, as a continuous window — see imageToVideoDedupeSince() in
+ *    src/lib/image-to-video-policy.ts.
+ *
+ * 2. THE CONTENT IS ALWAYS IN THE SEED, even when the caller supplies a key. A caller key used
+ *    to replace the content seed outright, so an agent passing one run-scoped key for two
+ *    different clips got the FIRST video back for the second ask — `duplicate: true`, no
+ *    fingerprint compared, so not even a 422 to tell it apart. Folding both in keeps each
+ *    direction working: a distinct key separates two deliberate clips from identical inputs,
+ *    and distinct inputs separate two clips that happen to share a key.
+ */
+export function imageToVideoRequestId(imageBytes, motionPrompt, idempotencyKey) {
+    // TRIMMED, to match what the server stores and dedupes on.
+    //
+    // The route does `String(form.get("motionPrompt") || "").trim()`, so it treats "push in" and
+    // "push in " as the same prompt. Hashing the raw string here did not: the two derived
+    // DIFFERENT requestIds, missed all three server dedupe layers, and bought two 35-credit
+    // charges for two identical clips. An agent replaying a retry with whitespace drift is the
+    // realistic caller. Any normalization the server applies has to be applied here too, or the
+    // derived id stops being a function of what the server actually keys on.
+    const content = `${createHash('sha256').update(imageBytes).digest('hex')}:${motionPrompt.trim()}`;
+    return uuidFromSeed(idempotencyKey ? `${idempotencyKey}\u0000${content}` : content);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,eAAe;IAKP;IACA;IALnB,qDAAqD;IAC9C,aAAa,GAAyB,IAAI,CAAC;IAElD,YACmB,MAAc,EACd,OAAe;QADf,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,wEAAwE;IACxE,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACxC,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,UAAU;aACzB;YACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACrD,IAAI,KAAK,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG;gBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACtB,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;gBAC9B,OAAO;aACR,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,SAAS,GAAsC,EAAE,CAAC;YACtD,IAAI,CAAC;gBAAC,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,EAAsB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,IAAI,cAAc,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;IAClC,CAAC;IAED,wBAAwB;IAExB,KAAK,CAAC,aAAa,CAAC,MAGnB;QACC,OAAO,IAAI,CAAC,OAAO,CAAiC,MAAM,EAAE,yBAAyB,EAAE,MAAM,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAIvB;QACC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EAAE,kBAAkB,EAAE,MAAM,CACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAEvB;QACC,OAAO,IAAI,CAAC,OAAO,CAA0B,MAAM,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAI1B;QACC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CACN,OAAO,EACP,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EACpE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3B,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9C,qCAAqC;QACrC,EAAE;QACF,0FAA0F;QAC1F,6EAA6E;QAC7E,2FAA2F;QAC3F,4FAA4F;QAC5F,4FAA4F;QAC5F,uFAAuF;QACvF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;QAEhG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,4BAA4B,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE;YAC/E,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;YACtE,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,IAAI,cAAc,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAsC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA6D;QAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,eAAe,CAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CACpF,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,OAAO,CAA6C,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,eAAe;IAEf,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EAAE,wBAAwB,CAChC,CAAC;IACJ,CAAC;IAED,gBAAgB;IAEhB,KAAK,CAAC,gBAAgB;QACpB,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EAAE,yBAAyB,CACjC,CAAC;IACJ,CAAC;IAED,cAAc;IAEd,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC7E,CAAC;IAED,gBAAgB;IAEhB,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,8BAA8B,CAAC,CAAC;IACtF,CAAC;IAED,iBAAiB;IAEjB,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,OAAO,CAAyB,KAAK,EAAE,cAAc,CAAC,CAAC;IACrE,CAAC;CACF;AAED,sDAAsD;AACtD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGxB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB,EAAE,SAAiB;IACjE,MAAM,CAAC,GAAG,KAAK,CAAC;IAChB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC1F,IACE,CAAC,CAAC,MAAM,IAAI,CAAC;QACb,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAChE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAChE,OAAO,WAAW,CAAC;IACrB,IACE,CAAC,CAAC,MAAM,IAAI,EAAE;QACd,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;QACtD,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;QACxD,OAAO,YAAY,CAAC;IACtB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACzF,4FAA4F;IAC5F,wBAAwB;IACxB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC;IAC7C,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,GAAG,wEAAwE,CAAC;AAEzF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACpH,oBAAoB;IACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC;IACrF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAsB,EACtB,YAAoB,EACpB,cAAuB;IAEvB,2DAA2D;IAC3D,EAAE;IACF,6FAA6F;IAC7F,sFAAsF;IACtF,wFAAwF;IACxF,2FAA2F;IAC3F,4FAA4F;IAC5F,yEAAyE;IACzE,MAAM,OAAO,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;IAClG,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACtF,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,7 @@
+/** Default AutoShort API base URL */
+export declare const DEFAULT_BASE_URL = "https://autoshort.org";
+/** MCP server version */
+export declare const VERSION = "2.0.0";
+/** User-Agent header for API requests */
+export declare const USER_AGENT = "autoshort-mcp-server/2.0.0";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,eAAO,MAAM,gBAAgB,0BAA0B,CAAC;AAExD,yBAAyB;AACzB,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B,yCAAyC;AACzC,eAAO,MAAM,UAAU,+BAAoC,CAAC"}

package/dist/constants.js

@@ -0,0 +1,7 @@
+/** Default AutoShort API base URL */
+export const DEFAULT_BASE_URL = 'https://autoshort.org';
+/** MCP server version */
+export const VERSION = '2.0.0'; // 2.0.0: webhook tools and the webhookUrl param removed
+/** User-Agent header for API requests */
+export const USER_AGENT = `autoshort-mcp-server/${VERSION}`;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAExD,yBAAyB;AACzB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,wDAAwD;AAExF,yCAAyC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG,wBAAwB,OAAO,EAAE,CAAC"}