Skip to content

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

app-icon asset-generation claude-code cli cursor favicon
+14 more
flux gpt-image-1 ideogram image-generation logo-generator mcp mcp-server model-context-protocol og-image pollinations recraft stable-diffusion typescript windsurf

Summary

AI summary

Minor fixes and improvements.

Full changelog

Quality Pass on v0.4.0

No new features — everything here is a drift-correction, polish, or CI fix. Ships green across CI, Evals, Docker, CodeQL, and Sync mirrors.

Fixed

  • CI smoke test green. The transparent logo smoke check was pinned to the pre-0.4.0 transparency-safe whitelist (recraft-v3, gpt-image-1, ideogram-3-turbo) and failed once recraft-v4 was promoted to primary. The whitelist now includes recraft-v4 and gpt-image-1.5, matching the live routing table.
  • CI sharp pin aligned. .github/workflows/ci.yml installed sharp@^0.33.5 on every runner, overriding the ^0.34.5 declared in packages/mcp-server/package.json. CI now installs the same major as the package manifest.
  • Cost guard model IDs synced to the registry. Eight IDs in cost-guard.ts no longer matched data/model-registry.json (hf-sd-xl, hf-sd-3, sdxl-1.0, sd-3-large, leonardo-phoenix-1.0, recraft-v3-svg, flux-pro-1.1, cf-flux-schnell), so cost checks silently fell through. All IDs realigned, and recraft-v4, gpt-image-1-mini, cf-flux-2-*, and the full replicate-* / comfyui-* set are now priced.
  • Routing-table never-lists no longer reference unregistered models. Dropped gemini-3-pro-image-preview, nano-banana, nano-banana-pro, and any_diffusion_for_the_text; concrete gemini-3-* IDs in the registry already cover the intent. p2a doctor --data now reports zero never-list warnings.
  • Typo in og-image fallback chain. hero_model: "cf-flux-schnell" corrected to cf-flux-1-schnell (the ID that actually exists in the registry).
  • MCP server version now reads from package.json. The handshake string was hard-coded at 0.3.0 even after the package published 0.4.0. createServer() now loads the current version from package.json at runtime.

Changed

  • data/routing-table.json bumped to 1.2.1 / 2026-04-22 to reflect the never-list cleanup.
  • Cost guard now covers 40+ models including every free-tier and Replicate route, so P2A_MAX_SPEND_USD_PER_RUN is meaningful on more paths.

Verification

  • npm run typecheck — pass
  • npm run lint — pass
  • npm run format:check — pass
  • npm run test:run — 241 passed, 2 skipped
  • npm run smoke — pass
  • node packages/mcp-server/dist/index.js doctor --data — zero warnings
  • node evals/scripts/run.mjs --check — 9/9, no regression
  • bash scripts/verify-repo.sh — pass

Full changelog: https://github.com/MohamedAbdallah-14/prompt-to-asset/blob/main/CHANGELOG.md

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track MohamedAbdallah-14/prompt-to-asset

Get notified when new releases ship.

Sign up free

About MohamedAbdallah-14/prompt-to-asset

Generates app icons, favicons, OG images, logos, and wordmarks. Routes each request across 30+ image models. Runs without an API key via Cloudflare Workers AI, NVIDIA NIM, HuggingFace, or Stable Horde. Three modes: inline SVG, external prompt-only, or full API. Validates contrast, OCR text accuracy, and palette before returning.

All releases →

Beta — feedback welcome: [email protected]