wolfpack-mcp 1.0.20 → 1.0.21

package/dist/index.js

@@ -4,6 +4,8 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { z } from 'zod';
 import { createRequire } from 'module';
+import { readFile, stat } from 'fs/promises';
+import { resolve, basename, extname } from 'path';
 import { WolfpackClient } from './client.js';
 import { validateConfig, config } from './config.js';
 // Get current package version
@@ -242,14 +244,10 @@ const CreateIssueCommentSchema = z.object({
 });
 // Image upload schema
 const UploadImageSchema = z.object({
-    image_data: z
+    file_path: z
         .string()
-        .describe('Base64-encoded image data (without the data:image/...;base64, prefix)'),
-    filename: z.string().describe('Filename for the image (e.g., "screenshot.png")'),
-    mime_type: z
-        .string()
-        .optional()
-        .describe('MIME type of the image (e.g., "image/png"). If omitted, inferred from filename extension.'),
+        .describe('Absolute path to an image file on disk (e.g., "/tmp/screenshot.png"). ' +
+        'Supported formats: JPEG, PNG, GIF, WebP. Max 5MB.'),
 });
 // Helper to detect if a work item description contains a plan
 function hasPlan(description) {
@@ -797,26 +795,20 @@ class WolfpackMCPServer {
                 // Image tools
                 {
                     name: 'upload_image',
-                    description: 'Upload an image and get back a permanent URL. Use this instead of embedding base64 images in content - ' +
-                        'it is much faster and more efficient. Returns a markdown image URL you can include in any content field. ' +
+                    description: 'Upload an image file from disk and get back a permanent URL. Much faster than embedding base64 in content. ' +
+                        'Pass the absolute file path - the file is read directly from disk without going through the LLM. ' +
+                        'Returns a markdown image URL you can include in any content field. ' +
                         'Requires mcp:images:upload permission.',
                     inputSchema: {
                         type: 'object',
                         properties: {
-                            image_data: {
-                                type: 'string',
-                                description: 'Base64-encoded image data (without the data:image/...;base64, prefix). Just the raw base64 string.',
-                            },
-                            filename: {
-                                type: 'string',
-                                description: 'Filename for the image (e.g., "screenshot.png")',
-                            },
-                            mime_type: {
+                            file_path: {
                                 type: 'string',
-                                description: 'MIME type of the image (e.g., "image/png"). If omitted, inferred from filename extension.',
+                                description: 'Absolute path to an image file on disk (e.g., "/tmp/screenshot.png"). ' +
+                                    'Supported formats: JPEG, PNG, GIF, WebP. Max 5MB.',
                             },
                         },
-                        required: ['image_data', 'filename'],
+                        required: ['file_path'],
                     },
                 },
             ],
@@ -1240,13 +1232,38 @@ class WolfpackMCPServer {
                         if (!teamSlug) {
                             throw new Error('No team selected. Use list_teams first.');
                         }
-                        const mimeType = parsed.mime_type || this.inferMimeType(parsed.filename) || 'application/octet-stream';
-                        const result = await this.client.uploadImage(teamSlug, parsed.image_data, parsed.filename, mimeType);
+                        const filePath = resolve(parsed.file_path);
+                        // Validate file extension
+                        const ext = extname(filePath).toLowerCase();
+                        const allowedExtensions = {
+                            '.png': 'image/png',
+                            '.jpg': 'image/jpeg',
+                            '.jpeg': 'image/jpeg',
+                            '.gif': 'image/gif',
+                            '.webp': 'image/webp',
+                        };
+                        const mimeType = allowedExtensions[ext];
+                        if (!mimeType) {
+                            throw new Error(`Unsupported image format "${ext}". Supported: ${Object.keys(allowedExtensions).join(', ')}`);
+                        }
+                        // Check file exists and size
+                        const fileStat = await stat(filePath);
+                        const maxSize = 5 * 1024 * 1024; // 5MB
+                        if (fileStat.size > maxSize) {
+                            throw new Error(`File too large (${fileStat.size} bytes). Maximum size is 5MB.`);
+                        }
+                        // Validate magic bytes to confirm it's actually an image
+                        const buffer = await readFile(filePath);
+                        if (!this.isImageBuffer(buffer)) {
+                            throw new Error('File does not appear to be a valid image.');
+                        }
+                        const filename = basename(filePath);
+                        const result = await this.client.uploadImage(teamSlug, buffer.toString('base64'), filename, mimeType);
                         return {
                             content: [
                                 {
                                     type: 'text',
-                                    text: `Image uploaded successfully.\n\nURL: ${result.url}\n\nUse this URL in markdown: ![${parsed.filename}](${result.url})`,
+                                    text: `Image uploaded successfully.\n\nURL: ${result.url}\n\nUse this URL in markdown: ![${filename}](${result.url})`,
                                 },
                             ],
                         };
@@ -1264,17 +1281,30 @@ class WolfpackMCPServer {
             }
         });
     }
-    inferMimeType(filename) {
-        const ext = filename.split('.').pop()?.toLowerCase();
-        const mimeTypes = {
-            png: 'image/png',
-            jpg: 'image/jpeg',
-            jpeg: 'image/jpeg',
-            gif: 'image/gif',
-            webp: 'image/webp',
-            svg: 'image/svg+xml',
-        };
-        return ext ? mimeTypes[ext] || null : null;
+    isImageBuffer(buffer) {
+        if (buffer.length < 4)
+            return false;
+        // PNG: 89 50 4E 47
+        if (buffer[0] === 0x89 && buffer[1] === 0x50 && buffer[2] === 0x4e && buffer[3] === 0x47)
+            return true;
+        // JPEG: FF D8 FF
+        if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff)
+            return true;
+        // GIF: 47 49 46 38
+        if (buffer[0] === 0x47 && buffer[1] === 0x49 && buffer[2] === 0x46 && buffer[3] === 0x38)
+            return true;
+        // WebP: 52 49 46 46 ... 57 45 42 50
+        if (buffer.length >= 12 &&
+            buffer[0] === 0x52 &&
+            buffer[1] === 0x49 &&
+            buffer[2] === 0x46 &&
+            buffer[3] === 0x46 &&
+            buffer[8] === 0x57 &&
+            buffer[9] === 0x45 &&
+            buffer[10] === 0x42 &&
+            buffer[11] === 0x50)
+            return true;
+        return false;
     }
     async start() {
         // Start version check early (non-blocking)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wolfpack-mcp",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "description": "MCP server for Wolfpack AI-enhanced software delivery tools",
   "main": "dist/index.js",
   "type": "module",