penpot/mcp/packages/server/src/tools/ExportShapeTool.ts
Dr. Dominik Jain 14b53ecfec
Bound MCP memory consumption by limiting parallel exports & response size (#9748)
*  Bound the size of plugin task responses

When using the integrated remote MCP server, bound response size.
All responses are passed to LLMs, which themselves impose bounds.
This is a measure to bound memory usage in the centrally provided
MCP server.

GitHub #9493

*  Bound parallelism in ExportShapeTool

Use an integer semaphore to bound parallel requests to this
memory-intensive tool, thus bounding memory usage.

GitHub #9493

*  Add (manual) integration test script for ExportShapeTool parallelism

Add dependency tsx to facilitate executions.

GitHub #9493

*  Make number of parallel export requests configurable in ExportShapeTool

Use env var PENPOT_MCP_EXPORT_SHAPE_MAX_PARALLEL_REQUESTS to configure
the maximum number of requests in multi-user mode (default 0, no limit).
2026-05-19 19:37:29 +02:00

203 lines
7.9 KiB
TypeScript

import { z } from "zod";
import { Tool } from "../Tool";
import { ImageContent, PNGResponse, TextContent, TextResponse, ToolResponse } from "../ToolResponse";
import "reflect-metadata";
import { PenpotMcpServer } from "../PenpotMcpServer";
import { ExecuteCodePluginTask } from "../tasks/ExecuteCodePluginTask";
import { createLogger } from "../logger";
import { FileUtils } from "../utils/FileUtils";
import { Semaphore } from "../utils/Semaphore";
import sharp from "sharp";
/**
* Arguments class for ExportShapeTool
*/
export class ExportShapeArgs {
static schema = {
shapeId: z
.string()
.min(1, "shapeId cannot be empty")
.describe(
"Identifier of the shape to export. " +
"Special identifiers you can use: 'selection' (first shape currently selected by the user), 'page' (entire current page)"
),
format: z.enum(["svg", "png"]).default("png").describe("The output format, either 'png' (default) or 'svg'."),
mode: z
.enum(["shape", "fill"])
.default("shape")
.describe(
"The export mode: either 'shape' (full shape as it appears in the design, including descendants; the default) or " +
"'fill' (export the raw image that is used as a fill for the shape; PNG format only)"
),
filePath: z
.string()
.optional()
.describe(
"Optional file path to save the exported image to. If not provided, " +
"the image data is returned directly for you to see."
),
};
shapeId!: string;
format: "svg" | "png" = "png";
mode: "shape" | "fill" = "shape";
filePath?: string;
}
/**
* Tool for executing JavaScript code in the Penpot plugin context
*/
export class ExportShapeTool extends Tool<ExportShapeArgs> {
/**
* Maximum number of image-export operations that may run concurrently in multi-user mode.
* Configurable via the PENPOT_MCP_EXPORT_SHAPE_MAX_PARALLEL_REQUESTS environment variable;
* defaults to 0, meaning no limit.
*
* When set to a positive value (and combined with the plugin-side per-response cap
* MAX_TASK_RESPONSE_SIZE_REMOTE_MCP, ~15 MB JSON), this caps the in-flight memory
* footprint of image exports at roughly N x cap on the centrally hosted MCP server.
*/
private static readonly MAX_PARALLEL_EXPORTS = parseInt(
process.env.PENPOT_MCP_EXPORT_SHAPE_MAX_PARALLEL_REQUESTS ?? "0",
10
);
/**
* Gates concurrent export operations across all tool instances (one per session in
* multi-user mode). Static because instances are per-session, but the bound has to
* apply across the whole process. Permits beyond the maximum queue in FIFO order.
* Undefined when MAX_PARALLEL_EXPORTS is non-positive, indicating no limit.
*/
private static readonly parallelismSemaphore: Semaphore | undefined =
ExportShapeTool.MAX_PARALLEL_EXPORTS > 0
? new Semaphore("ExportShapeTool", ExportShapeTool.MAX_PARALLEL_EXPORTS)
: undefined;
static {
createLogger("ExportShapeTool").info(
"Max parallel exports (multi-user mode): %d (0 = unbounded)",
ExportShapeTool.MAX_PARALLEL_EXPORTS
);
}
/**
* Creates a new ExecuteCode tool instance.
*
* @param mcpServer - The MCP server instance
*/
constructor(mcpServer: PenpotMcpServer) {
let schema: any = ExportShapeArgs.schema;
if (!mcpServer.isFileSystemAccessEnabled()) {
// remove filePath key from schema
schema = { ...schema };
delete schema.filePath;
}
super(mcpServer, schema);
}
public getToolName(): string {
return "export_shape";
}
public getToolDescription(): string {
let description =
"Exports a shape (or a shape's image fill) from the Penpot design to a PNG or SVG image, " +
"such that you can get an impression of what it looks like.";
if (this.mcpServer.isFileSystemAccessEnabled()) {
description += "\nAlternatively, you can save it to a file.";
}
return description;
}
protected async executeCore(args: ExportShapeArgs): Promise<ToolResponse> {
// bound concurrent exports in multi-user mode to keep peak server memory under control;
// in single-user mode (or when no limit is configured) the gate is irrelevant
// and the export runs directly
if (this.mcpServer.isMultiUserMode() && ExportShapeTool.parallelismSemaphore) {
return ExportShapeTool.parallelismSemaphore.withPermit(() => this.exportImage(args));
} else {
return this.exportImage(args);
}
}
/**
* Performs the actual image export: requests the image via the plugin and either
* returns it as a tool response or saves it to the requested file path. The bulk
* of the memory pressure (parsed plugin response, decoded image buffer, optional
* re-encoding via sharp) lives here, which is why executeCore gates the call.
*
* @param args - the validated tool arguments
*/
private async exportImage(args: ExportShapeArgs): Promise<ToolResponse> {
// check arguments
if (args.filePath) {
FileUtils.checkPathIsAbsolute(args.filePath);
}
// create code for exporting the shape
let shapeCode: string;
if (args.shapeId === "selection") {
shapeCode = `penpot.selection[0]`;
} else if (args.shapeId === "page") {
shapeCode = `penpot.root`;
} else {
shapeCode = `penpotUtils.findShapeById("${args.shapeId}")`;
}
const asSvg = args.format === "svg";
const code = `return penpotUtils.exportImage(${shapeCode}, "${args.mode}", ${asSvg});`;
// execute the code and obtain the image data
const task = new ExecuteCodePluginTask({ code: code });
const result = await this.mcpServer.pluginBridge.executePluginTask(task);
const imageData = result.data!.result;
// handle output and return response
if (!args.filePath) {
// return image data directly (for the LLM to "see" it)
if (args.format === "png") {
return new PNGResponse(await this.toPngImageBytes(imageData));
} else {
return TextResponse.fromData(imageData);
}
} else {
// save to file requested: make sure file system access is enabled
if (!this.mcpServer.isFileSystemAccessEnabled()) {
throw new Error("File system access is not enabled on the MCP server!");
}
// save to file
if (args.format === "png") {
FileUtils.writeBinaryFile(args.filePath, await this.toPngImageBytes(imageData));
} else {
FileUtils.writeTextFile(args.filePath, TextContent.textData(imageData));
}
return new TextResponse(`The shape has been exported to ${args.filePath}`);
}
}
/**
* Converts image data to PNG format if necessary.
*
* @param data - The original image data as Uint8Array or as object (from JSON conversion of Uint8Array)
* @return The image data as PNG bytes
*/
private async toPngImageBytes(data: Uint8Array | object): Promise<Uint8Array> {
const originalBytes = ImageContent.byteData(data);
// use sharp to detect format and convert to PNG if necessary
const image = sharp(originalBytes);
const metadata = await image.metadata();
// if already PNG, return as-is to avoid unnecessary re-encoding
if (metadata.format === "png") {
return originalBytes;
}
// convert to PNG
const pngBuffer = await image.png().toBuffer();
return new Uint8Array(pngBuffer);
}
}