@cmo-so/cli 0.12.0 → 0.12.2

package/dist/cmo.mjs

@@ -7662,6 +7662,8 @@ function domainApi(api2, domain) {
     wpBuilder: () => api2.request(`${base}/wp/builder`),
     connectWpBuilder: (input) => post(`${base}/wp/builder`, input),
     disconnectWpBuilder: () => api2.request(`${base}/wp/builder`, { method: "DELETE" }),
+    /** Put one picture in the site's media library: a public https link, or a local file as base64 (≤ 10 MB). */
+    wpMedia: (input) => post(`${base}/wp/media`, input),
     /** One WordPress REST request, signed by TOPY with the saved login (allowlisted routes only). */
     wpRequest: (input) => post(`${base}/wp/request`, input),
     /** A new website API key (aicmo_…) for the user's own code, shown once; for the CLI, which writes it to .env. */
@@ -14727,6 +14729,27 @@ function walkTouch(b) {
 }
 
 // ../../packages/tools/src/wp/transport.ts
+var IMAGE_EXT = {
+  "image/jpeg": "jpg",
+  "image/png": "png",
+  "image/webp": "webp",
+  "image/gif": "gif",
+  "image/avif": "avif"
+};
+function sniffImage(b) {
+  const at = (i, ...v) => v.every((x, k) => b[i + k] === x);
+  const ascii = (i, t) => [...t].every((ch, k) => b[i + k] === ch.charCodeAt(0));
+  if (at(0, 255, 216, 255)) return "image/jpeg";
+  if (at(0, 137, 80, 78, 71, 13, 10, 26, 10)) return "image/png";
+  if (ascii(0, "RIFF") && ascii(8, "WEBP")) return "image/webp";
+  if (ascii(0, "GIF87a") || ascii(0, "GIF89a")) return "image/gif";
+  if (ascii(4, "ftypavif") || ascii(4, "ftypavis")) return "image/avif";
+  return null;
+}
+function mediaName(name, mime) {
+  const stem = (name ?? "").trim().toLowerCase().replace(/\.[a-z0-9]{2,5}$/, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "picture";
+  return `${stem}.${IMAGE_EXT[mime]}`;
+}
 var WpError = class extends Error {
   constructor(message2, status, code) {
     super(message2);
@@ -14755,8 +14778,10 @@ function directSite(siteUrl, username, password) {
     fetchPage: publicFetch,
     async request(req) {
       const method = req.method ?? "GET";
-      const r = await fetch(`${base}/wp-json${req.path}${qs(req.query)}`, {
+      const query = qs(req.query);
+      const r = await fetch(`${base}/?rest_route=${encodeURIComponent(req.path)}${query ? `&${query.slice(1)}` : ""}`, {
         method,
+        redirect: "manual",
         headers: {
           Authorization: auth,
           Accept: "application/json",
@@ -14772,6 +14797,49 @@ function directSite(siteUrl, username, password) {
       }
       const n2 = (h) => r.headers.get(h) != null ? Number(r.headers.get(h)) : void 0;
       return { status: r.status, data, total: n2("x-wp-total"), totalPages: n2("x-wp-totalpages") };
+    },
+    async uploadMedia(input) {
+      let bytes = input.data;
+      if (!bytes && input.url) {
+        if (!/^https:\/\//i.test(input.url)) throw new WpError("The picture's link must be https.", 400);
+        const g = await fetch(input.url, { headers: { Accept: "image/*" } });
+        if (!g.ok) throw new WpError(`The picture's link answered HTTP ${g.status}.`, g.status);
+        bytes = new Uint8Array(await g.arrayBuffer());
+      }
+      if (!bytes) throw new WpError("Give the picture's link or the file.", 400);
+      if (bytes.length > 15 * 1024 * 1024) throw new WpError("The picture is larger than 15 MB.", 413);
+      const mime = sniffImage(bytes);
+      if (!mime) throw new WpError("That isn't a JPEG, PNG, WebP, GIF or AVIF picture.", 415);
+      const name = mediaName(input.filename ?? input.url?.split("/").pop()?.split("?")[0], mime);
+      const r = await fetch(`${base}/?rest_route=${encodeURIComponent("/wp/v2/media")}`, {
+        method: "POST",
+        redirect: "manual",
+        headers: {
+          Authorization: auth,
+          "Content-Type": mime,
+          "Content-Disposition": `attachment; filename="${name}"`,
+          Accept: "application/json"
+        },
+        body: bytes
+      });
+      const media = await r.json().catch(() => null);
+      if (!media?.id)
+        throw new WpError(`WordPress didn't take the picture: ${media?.message ?? `HTTP ${r.status}`}.`, r.status);
+      const meta4 = {};
+      if (input.alt) meta4.alt_text = input.alt;
+      if (input.title) meta4.title = input.title;
+      if (input.caption) meta4.caption = input.caption;
+      if (Object.keys(meta4).length)
+        await this.request({ method: "POST", path: `/wp/v2/media/${media.id}`, body: meta4, query: { _fields: "id" } });
+      return {
+        id: media.id,
+        source_url: media.source_url ?? "",
+        mime_type: mime,
+        bytes: bytes.length,
+        width: media.media_details?.width ?? null,
+        height: media.media_details?.height ?? null,
+        alt: input.alt ?? ""
+      };
     }
   };
 }
@@ -14780,6 +14848,23 @@ function apiSite(api2, domain) {
   return {
     url: `https://${domain}`,
     fetchPage: publicFetch,
+    async uploadMedia(input) {
+      let data_base64;
+      if (input.data) {
+        let bin = "";
+        for (let i = 0; i < input.data.length; i += 32768)
+          bin += String.fromCharCode(...input.data.subarray(i, i + 32768));
+        data_base64 = btoa(bin);
+      }
+      return d.wpMedia({
+        url: input.url,
+        data_base64,
+        filename: input.filename,
+        alt: input.alt,
+        title: input.title,
+        caption: input.caption
+      });
+    },
     async request(req) {
       let r;
       try {
@@ -14812,6 +14897,12 @@ async function call(site, req) {
   const r = await site.request(req);
   if (r.status >= 200 && r.status < 300) return r.data;
   const body = r.data;
+  if (r.status >= 300 && r.status < 400)
+    throw new WpError(
+      `WordPress redirected the request (HTTP ${r.status}): use the site's final address (https, with or without www).`,
+      r.status,
+      "redirect"
+    );
   const msg = typeof body === "object" && body?.message ? body.message.replace(/<[^>]+>/g, "") : `HTTP ${r.status}`;
   const code = typeof body === "object" ? body?.code : void 0;
   if (r.status === 409 && code === "wp_not_connected")
@@ -16377,6 +16468,8 @@ var pageTools = [
           meta: meta4
         }
       });
+      if (!created || typeof created.id !== "number")
+        throw new Error("WordPress didn't create the page (no id came back); nothing was saved.");
       let menu = null;
       if (typeof a.menu_parent === "string") {
         menu = await menuSet(site, {
@@ -16547,6 +16640,8 @@ var pageTools = [
           }
         }
       });
+      if (!created || typeof created.id !== "number")
+        throw new Error("WordPress didn't create the page (no id came back); nothing was saved.");
       return {
         created: true,
         id: created.id,
@@ -16791,6 +16886,103 @@ var sectionTools = [
     }
   })
 ];
+var CHAT_FILE = {
+  type: "object",
+  description: "The picture from this chat (ChatGPT passes it here).",
+  properties: {
+    download_url: { type: "string" },
+    file_id: { type: "string" },
+    mime_type: { type: "string" },
+    file_name: { type: "string" }
+  },
+  required: ["download_url", "file_id"]
+};
+var mediaTools = [
+  tool({
+    name: "wp_media_upload",
+    description: "Put a picture in the WordPress site's media library: a picture from this chat (file) or a public https link to an image (url). JPEG, PNG, WebP, GIF or AVIF, up to 15 MB; checked as a real image. Give alt text that says what the picture shows. Returns its id and source_url; then use the url in a section (wp_section_update edits.images, or slots image) or as a page's featured_media. Doesn't change any page by itself.",
+    parameters: {
+      type: "object",
+      properties: {
+        file: CHAT_FILE,
+        url: str2("Public https link to the image file."),
+        filename: str2("File name to save it as (default from the link), e.g. maggie-hero.webp."),
+        alt: str2("Alt text: what the picture shows, in one short sentence."),
+        title: str2("Media title (optional)."),
+        caption: str2("Caption (optional).")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    fileParams: ["file"],
+    confirm: (a, lang) => {
+      const name = a.file?.file_name ?? (typeof a.url === "string" ? a.url.split("/").pop() : "");
+      return say(
+        lang,
+        `Upload the picture ${q2(name, "")} to your website's media library.`,
+        `\u628A\u5716\u7247 ${q2(name, "")} \u4E0A\u50B3\u5230\u7DB2\u7AD9\u7684\u5A92\u9AD4\u5EAB\u3002`
+      );
+    },
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      if (!site.uploadMedia) throw new Error("This connection can't upload pictures.");
+      const chat = a.file;
+      const url = String(chat?.download_url ?? a.url ?? "").trim();
+      if (!url) throw new Error("Give the picture: a file from this chat, or a public https link (url).");
+      const out = await site.uploadMedia({
+        url,
+        filename: a.filename || chat?.file_name || void 0,
+        alt: a.alt || void 0,
+        title: a.title || void 0,
+        caption: a.caption || void 0
+      });
+      return {
+        uploaded: true,
+        ...out,
+        next: "Use source_url in wp_section_update (edits.images from \u2192 to, or slots image), or set it as the page's featured_media with wp_page_update."
+      };
+    }
+  }),
+  tool({
+    name: "wp_media_list",
+    description: "Pictures already in the WordPress media library (newest first), with id, link, alt text and size; search by words in the title or file name.",
+    parameters: {
+      type: "object",
+      properties: {
+        search: str2("Words in the title or file name."),
+        limit: int2("How many (default 30, at most 100).")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const rows = await call(siteOf(ctx), {
+        path: "/wp/v2/media",
+        query: {
+          search: a.search || void 0,
+          per_page: Math.min(100, Math.max(1, Number(a.limit) || 30)),
+          media_type: "image",
+          _fields: "id,source_url,alt_text,mime_type,date,title,media_details"
+        }
+      });
+      return {
+        count: rows.length,
+        items: rows.map((m) => ({
+          id: m.id,
+          url: m.source_url,
+          alt: m.alt_text,
+          type: m.mime_type,
+          size: m.media_details?.width ? `${m.media_details.width}\xD7${m.media_details.height}` : null,
+          date: m.date
+        }))
+      };
+    }
+  })
+];
 var seoFields = {
   title: str2("SEO title (\u224860 characters; the site name is added by the theme)."),
   description: str2("Meta description (\u2248150-160 characters)."),
@@ -17046,7 +17238,14 @@ var elementTools = [
     }
   })
 ];
-var wordpressTools = [...siteTools, ...pageTools, ...sectionTools, ...seoTools, ...elementTools];
+var wordpressTools = [
+  ...siteTools,
+  ...pageTools,
+  ...sectionTools,
+  ...mediaTools,
+  ...seoTools,
+  ...elementTools
+];
 
 // ../../packages/tools/src/index.ts
 var tools = [
@@ -20456,7 +20655,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.0",
+  version: "0.12.2",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -31570,6 +31769,32 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
       fonts: o.font ? Object.fromEntries(pairs(o.font)) : void 0
     })
   );
+  const media = wp.command("media").description("pictures in the media library");
+  media.command("ls", { isDefault: true }).option("--search <words>").option("-n, --limit <n>", "how many", "30").action(
+    (o, c) => run(g(c), "wp_media_list", { search: o.search, limit: Number(o.limit) })
+  );
+  media.command("upload <fileOrUrl>").description("upload a picture (a local file or a public https link): JPEG, PNG, WebP, GIF or AVIF").option("--alt <text>", "what the picture shows").option("--filename <name>", "save it as").option("--title <title>").action(async (src, o, c) => {
+    const opts = g(c);
+    if (/^https?:\/\//i.test(src))
+      return run(opts, "wp_media_upload", { url: src, alt: o.alt, filename: o.filename, title: o.title });
+    const data = new Uint8Array(
+      await readFile2(src).catch(() => {
+        throw new CliError(`Can't read ${src}.`);
+      })
+    );
+    const site = await siteFor(opts);
+    if (!site.uploadMedia) throw new CliError("This connection can't upload pictures.");
+    const preview = `Upload ${src.split("/").pop()} (${Math.round(data.length / 1024)} KB) to the media library of ${site.url}.`;
+    if (opts.dryRun) {
+      say2(`Would: ${preview}`);
+      return;
+    }
+    if (!opts.yes && !await ask(preview)) throw new CliError("Nothing changed.", 1);
+    print(
+      await site.uploadMedia({ data, filename: o.filename ?? src.split("/").pop(), alt: o.alt, title: o.title }),
+      opts.json
+    );
+  });
   wp.command("pattern <pattern>").description("change a synced pattern every page shares (contact, share, quote or id)").option("--replace <find=replace...>").option("--link <from=to...>").action(
     (p, o, c) => run(g(c), "wp_pattern_update", {
       pattern: p,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.12.0",
+	"version": "0.12.2",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",