@cmo-so/cli 0.12.1 → 0.12.3

package/README.md

@@ -46,7 +46,9 @@ cmo wp redirects [ls] | set <from> <to> [--code 301] | remove <from…>
 cmo wp menu [get] | set --from menu.json      cmo wp header|footer [get] | set --replace a=b --link old=new
 cmo wp header set --button-text "Book Now" --button-url …   cmo wp style [get] | set olive=#4F5B48
 cmo wp pattern contact --replace "old=new"   shared contact band / share buttons on every page
-cmo wp child-theme <slug> --name "…" --from-site [--out dir]   the site's look as a child theme of Maggie Core
+cmo wp child [status] | create maggie-<name> --name … [--activate] | update --color olive=#4F5B48 --css-file x.css
+cmo wp child activate <slug|maggie-core> | restore <slug> <backup>   the site's child theme, on the site (backups kept)
+cmo wp child-theme <slug> --name "…" --from-site [--out dir]   export the site's look as a child theme folder (for git)
 cmo wp migrate plan [--out wp-baseline.json]  |  migrate verify --baseline wp-baseline.json   the SEO gate
 ```
 

package/dist/cmo.mjs

@@ -7662,6 +7662,8 @@ function domainApi(api2, domain) {
     wpBuilder: () => api2.request(`${base}/wp/builder`),
     connectWpBuilder: (input) => post(`${base}/wp/builder`, input),
     disconnectWpBuilder: () => api2.request(`${base}/wp/builder`, { method: "DELETE" }),
+    /** Put one picture in the site's media library: a public https link, or a local file as base64 (≤ 10 MB). */
+    wpMedia: (input) => post(`${base}/wp/media`, input),
     /** One WordPress REST request, signed by TOPY with the saved login (allowlisted routes only). */
     wpRequest: (input) => post(`${base}/wp/request`, input),
     /** A new website API key (aicmo_…) for the user's own code, shown once; for the CLI, which writes it to .env. */
@@ -14727,6 +14729,27 @@ function walkTouch(b) {
 }
 
 // ../../packages/tools/src/wp/transport.ts
+var IMAGE_EXT = {
+  "image/jpeg": "jpg",
+  "image/png": "png",
+  "image/webp": "webp",
+  "image/gif": "gif",
+  "image/avif": "avif"
+};
+function sniffImage(b) {
+  const at = (i, ...v) => v.every((x, k) => b[i + k] === x);
+  const ascii = (i, t) => [...t].every((ch, k) => b[i + k] === ch.charCodeAt(0));
+  if (at(0, 255, 216, 255)) return "image/jpeg";
+  if (at(0, 137, 80, 78, 71, 13, 10, 26, 10)) return "image/png";
+  if (ascii(0, "RIFF") && ascii(8, "WEBP")) return "image/webp";
+  if (ascii(0, "GIF87a") || ascii(0, "GIF89a")) return "image/gif";
+  if (ascii(4, "ftypavif") || ascii(4, "ftypavis")) return "image/avif";
+  return null;
+}
+function mediaName(name, mime) {
+  const stem = (name ?? "").trim().toLowerCase().replace(/\.[a-z0-9]{2,5}$/, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "picture";
+  return `${stem}.${IMAGE_EXT[mime]}`;
+}
 var WpError = class extends Error {
   constructor(message2, status, code) {
     super(message2);
@@ -14774,6 +14797,49 @@ function directSite(siteUrl, username, password) {
       }
       const n2 = (h) => r.headers.get(h) != null ? Number(r.headers.get(h)) : void 0;
       return { status: r.status, data, total: n2("x-wp-total"), totalPages: n2("x-wp-totalpages") };
+    },
+    async uploadMedia(input) {
+      let bytes = input.data;
+      if (!bytes && input.url) {
+        if (!/^https:\/\//i.test(input.url)) throw new WpError("The picture's link must be https.", 400);
+        const g = await fetch(input.url, { headers: { Accept: "image/*" } });
+        if (!g.ok) throw new WpError(`The picture's link answered HTTP ${g.status}.`, g.status);
+        bytes = new Uint8Array(await g.arrayBuffer());
+      }
+      if (!bytes) throw new WpError("Give the picture's link or the file.", 400);
+      if (bytes.length > 15 * 1024 * 1024) throw new WpError("The picture is larger than 15 MB.", 413);
+      const mime = sniffImage(bytes);
+      if (!mime) throw new WpError("That isn't a JPEG, PNG, WebP, GIF or AVIF picture.", 415);
+      const name = mediaName(input.filename ?? input.url?.split("/").pop()?.split("?")[0], mime);
+      const r = await fetch(`${base}/?rest_route=${encodeURIComponent("/wp/v2/media")}`, {
+        method: "POST",
+        redirect: "manual",
+        headers: {
+          Authorization: auth,
+          "Content-Type": mime,
+          "Content-Disposition": `attachment; filename="${name}"`,
+          Accept: "application/json"
+        },
+        body: bytes
+      });
+      const media = await r.json().catch(() => null);
+      if (!media?.id)
+        throw new WpError(`WordPress didn't take the picture: ${media?.message ?? `HTTP ${r.status}`}.`, r.status);
+      const meta4 = {};
+      if (input.alt) meta4.alt_text = input.alt;
+      if (input.title) meta4.title = input.title;
+      if (input.caption) meta4.caption = input.caption;
+      if (Object.keys(meta4).length)
+        await this.request({ method: "POST", path: `/wp/v2/media/${media.id}`, body: meta4, query: { _fields: "id" } });
+      return {
+        id: media.id,
+        source_url: media.source_url ?? "",
+        mime_type: mime,
+        bytes: bytes.length,
+        width: media.media_details?.width ?? null,
+        height: media.media_details?.height ?? null,
+        alt: input.alt ?? ""
+      };
     }
   };
 }
@@ -14782,6 +14848,23 @@ function apiSite(api2, domain) {
   return {
     url: `https://${domain}`,
     fetchPage: publicFetch,
+    async uploadMedia(input) {
+      let data_base64;
+      if (input.data) {
+        let bin = "";
+        for (let i = 0; i < input.data.length; i += 32768)
+          bin += String.fromCharCode(...input.data.subarray(i, i + 32768));
+        data_base64 = btoa(bin);
+      }
+      return d.wpMedia({
+        url: input.url,
+        data_base64,
+        filename: input.filename,
+        alt: input.alt,
+        title: input.title,
+        caption: input.caption
+      });
+    },
     async request(req) {
       let r;
       try {
@@ -16803,6 +16886,393 @@ var sectionTools = [
     }
   })
 ];
+var CHAT_FILE = {
+  type: "object",
+  description: "The picture from this chat (ChatGPT passes it here).",
+  properties: {
+    download_url: { type: "string" },
+    file_id: { type: "string" },
+    mime_type: { type: "string" },
+    file_name: { type: "string" }
+  },
+  required: ["download_url", "file_id"]
+};
+var mediaTools = [
+  tool({
+    name: "wp_media_upload",
+    description: "Put a picture in the WordPress site's media library: a picture from this chat (file) or a public https link to an image (url). JPEG, PNG, WebP, GIF or AVIF, up to 15 MB; checked as a real image. Give alt text that says what the picture shows. Returns its id and source_url; then use the url in a section (wp_section_update edits.images, or slots image) or as a page's featured_media. Doesn't change any page by itself.",
+    parameters: {
+      type: "object",
+      properties: {
+        file: CHAT_FILE,
+        url: str2("Public https link to the image file."),
+        filename: str2("File name to save it as (default from the link), e.g. maggie-hero.webp."),
+        alt: str2("Alt text: what the picture shows, in one short sentence."),
+        title: str2("Media title (optional)."),
+        caption: str2("Caption (optional).")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    fileParams: ["file"],
+    confirm: (a, lang) => {
+      const name = a.file?.file_name ?? (typeof a.url === "string" ? a.url.split("/").pop() : "");
+      return say(
+        lang,
+        `Upload the picture ${q2(name, "")} to your website's media library.`,
+        `\u628A\u5716\u7247 ${q2(name, "")} \u4E0A\u50B3\u5230\u7DB2\u7AD9\u7684\u5A92\u9AD4\u5EAB\u3002`
+      );
+    },
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      if (!site.uploadMedia) throw new Error("This connection can't upload pictures.");
+      const chat = a.file;
+      const url = String(chat?.download_url ?? a.url ?? "").trim();
+      if (!url) throw new Error("Give the picture: a file from this chat, or a public https link (url).");
+      const out = await site.uploadMedia({
+        url,
+        filename: a.filename || chat?.file_name || void 0,
+        alt: a.alt || void 0,
+        title: a.title || void 0,
+        caption: a.caption || void 0
+      });
+      return {
+        uploaded: true,
+        ...out,
+        next: "Use source_url in wp_section_update (edits.images from \u2192 to, or slots image), or set it as the page's featured_media with wp_page_update."
+      };
+    }
+  }),
+  tool({
+    name: "wp_media_list",
+    description: "Pictures already in the WordPress media library (newest first), with id, link, alt text and size; search by words in the title or file name.",
+    parameters: {
+      type: "object",
+      properties: {
+        search: str2("Words in the title or file name."),
+        limit: int2("How many (default 30, at most 100).")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const rows = await call(siteOf(ctx), {
+        path: "/wp/v2/media",
+        query: {
+          search: a.search || void 0,
+          per_page: Math.min(100, Math.max(1, Number(a.limit) || 30)),
+          media_type: "image",
+          _fields: "id,source_url,alt_text,mime_type,date,title,media_details"
+        }
+      });
+      return {
+        count: rows.length,
+        items: rows.map((m) => ({
+          id: m.id,
+          url: m.source_url,
+          alt: m.alt_text,
+          type: m.mime_type,
+          size: m.media_details?.width ? `${m.media_details.width}\xD7${m.media_details.height}` : null,
+          date: m.date
+        }))
+      };
+    }
+  })
+];
+var childInfo = (site, slug) => call(site, { path: "/maggie-core/v1/child-theme", query: { slug } });
+async function childSlug(site, slug) {
+  if (typeof slug === "string" && slug) return slug;
+  const info = await childInfo(site);
+  const active = info.children.find((c) => c.active);
+  if (!active)
+    throw new Error("No Maggie child theme is active here: name one (slug), or create one with wp_child_theme_create.");
+  return active.slug;
+}
+async function homeShape(site) {
+  if (!site.fetchPage || !site.url) return null;
+  const r = await site.fetchPage(`${site.url}/?maggie-check=${Date.now()}`).catch(() => null);
+  if (!r) return null;
+  const text3 = r.html.replace(/<script[\s\S]*?<\/script>|<style[\s\S]*?<\/style>/g, " ").replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+  const fonts = [
+    ...new Set([...r.html.matchAll(/font-family:\s*([^;"}]+)/g)].map((m) => m[1].trim()))
+  ].sort();
+  const colors = [...r.html.matchAll(/--wp--preset--color--([a-z0-9-]+):\s*([^;]+);/g)].map((m) => `${m[1]}=${m[2].trim()}`).sort();
+  return { status: r.status, words: new Set(text3.toLowerCase().split(" ")), fonts, colors };
+}
+function compareShapes(a, b) {
+  if (!a || !b) return { checked: false };
+  const shared = [...a.words].filter((w) => b.words.has(w)).length;
+  const text3 = Math.round(shared / Math.max(1, Math.max(a.words.size, b.words.size)) * 100);
+  const fontsSame = a.fonts.join("|") === b.fonts.join("|");
+  const colorsSame = a.colors.join("|") === b.colors.join("|");
+  const problems = [
+    b.status >= 400 ? `the homepage answers HTTP ${b.status}` : "",
+    text3 < 90 ? `only ${text3}% of the homepage's words are the same` : "",
+    fontsSame ? "" : "the fonts changed",
+    colorsSame ? "" : "the brand colours changed"
+  ].filter(Boolean);
+  return {
+    checked: true,
+    same_text_percent: text3,
+    fonts_same: fontsSame,
+    colors_same: colorsSame,
+    ok: !problems.length,
+    problems
+  };
+}
+var PATTERN_SCHEMA = obj("A pattern for the editor's inserter.", {
+  slug: str2("File name: lowercase, dashes (e.g. spring-offer)."),
+  title: str2("Name shown in the inserter."),
+  content: str2("Block markup (e.g. a section from wp_section_library written out, or copied from a page)."),
+  description: str2(""),
+  categories: arr("Pattern categories (default maggie).", { type: "string" })
+});
+var childTools = [
+  tool({
+    name: "wp_child_theme_status",
+    description: "The site's Maggie child themes (Maggie Core is the parent): which is active, their files and backups, and whether files can be written on this host. With slug: that child's text files in full (theme.json, style.css, parts, patterns) to read before changing them.",
+    parameters: { type: "object", properties: { slug: str2("A child theme to read in full, e.g. maggie-moonlake.") } },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const info = await childInfo(siteOf(ctx), a.slug || void 0);
+      const files = info.files ? Object.fromEntries(
+        Object.entries(info.files).map(([k, v]) => [k, v.length > 2e4 ? `${v.slice(0, 2e4)}\u2026` : v])
+      ) : void 0;
+      return {
+        ...info,
+        children: info.children.map((c) => ({
+          ...c,
+          files: Object.keys(c.files).length,
+          file_list: Object.keys(c.files)
+        })),
+        ...files ? { files } : {}
+      };
+    }
+  }),
+  tool({
+    name: "wp_child_theme_create",
+    description: "Create a child theme of Maggie Core for this site (slug maggie-<name>), by default from the site's current look: its Global Styles (colours, fonts with their files, styles), edited header and footer. Data files only, never code. activate: true switches the site to it and checks the homepage looks the same. Switching keeps the look only because it is copied into the child; Global Styles and edited parts are kept per theme in WordPress.",
+    parameters: {
+      type: "object",
+      properties: {
+        slug: str2("maggie-<name>, e.g. maggie-moonlake."),
+        name: str2("Theme name, e.g. Moon Lake Spa."),
+        from_site: bool("Copy the site's current look into it (default true)."),
+        activate: bool("Switch the site to it now (default false).")
+      },
+      required: ["slug", "name"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Create the child theme ${q2(a.slug, "")} on your website${a.activate ? " and switch to it" : ""}.`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5EFA\u7ACB\u5B50\u4E3B\u984C ${q2(a.slug, "")}${a.activate ? "\u4E26\u5207\u63DB\u904E\u53BB" : ""}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const out = await call(site, {
+        method: "POST",
+        path: "/maggie-core/v1/child-theme",
+        body: { slug: a.slug, name: a.name, from_site: a.from_site !== false }
+      });
+      if (!a.activate)
+        return {
+          ...out,
+          next: "Switch to it with wp_child_theme_activate when ready (the tool checks the homepage looks the same)."
+        };
+      const before = await homeShape(site);
+      const act2 = await call(site, {
+        method: "POST",
+        path: "/maggie-core/v1/child-theme/activate",
+        body: { slug: out.slug }
+      });
+      return { ...out, activated: act2, check: compareShapes(before, await homeShape(site)) };
+    }
+  }),
+  tool({
+    name: "wp_child_theme_update",
+    description: "Change a Maggie child theme's files (default: the active child): brand colours (by name, hex) and fonts (by name, CSS font-family of fonts already in it) in theme.json, extra theme.json styles, plain CSS (replace or append), the header or footer (block markup), templates, and the site's own patterns (shown in the editor's inserter). Data only, never code. Each change keeps a backup (wp_child_theme_restore). Changes made with wp_style_set / wp_header_set are stored in the database and win over the child's files.",
+    parameters: {
+      type: "object",
+      properties: {
+        slug: str2("The child theme (default the active one)."),
+        colors: obj('e.g. { "olive": "#4F5B48" }.'),
+        fonts: obj('Font families by slug: { "body": "Jost, sans-serif" } (files must already be in the child).'),
+        styles: obj('theme.json styles to merge in (e.g. { "elements": { "button": { \u2026 } } }).'),
+        css: str2("Replace the child's CSS (plain CSS)."),
+        css_append: str2("Add CSS at the end."),
+        header: str2("Header block markup (parts/header.html)."),
+        footer: str2("Footer block markup (parts/footer.html)."),
+        templates: obj('Templates by slug \u2192 block markup, e.g. { "page-landing": "\u2026" }.'),
+        patterns: arr("Patterns to add or replace.", PATTERN_SCHEMA),
+        remove_patterns: arr("Pattern slugs to remove.", { type: "string" })
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Change the child theme ${q2(a.slug, "(the active one)")} on your website.`,
+      `\u4FEE\u6539\u7DB2\u7AD9\u7684\u5B50\u4E3B\u984C ${q2(a.slug, "\uFF08\u76EE\u524D\u4F7F\u7528\u4E2D\u7684\uFF09")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const slug = await childSlug(site, a.slug);
+      const info = await childInfo(site, slug);
+      const cur = info.files ?? {};
+      const files = {};
+      const notes = [];
+      if (a.colors || a.fonts || a.styles) {
+        const tj = JSON.parse(cur["theme.json"] ?? '{"version":3,"settings":{}}');
+        tj.settings = tj.settings ?? {};
+        if (a.colors) {
+          let palette = tj.settings.color?.palette ?? [];
+          if (!palette.length) palette = ((await styleGet(site))._palette ?? []).map((c) => ({ ...c }));
+          for (const [slugC, color] of Object.entries(a.colors)) {
+            if (!/^#([0-9a-f]{3}|[0-9a-f]{6})$/i.test(color))
+              throw new Error(`${slugC}: "${color}" isn't a hex colour.`);
+            const c = palette.find((x) => x.slug === slugC);
+            if (c) c.color = color;
+            else
+              palette.push({
+                slug: slugC,
+                color,
+                name: slugC.replace(/-/g, " ").replace(/\b\w/g, (m) => m.toUpperCase())
+              });
+          }
+          const map = Object.fromEntries(palette.map((c) => [c.slug, c.color]));
+          const bad = contrastReport(map).filter((r) => !r.ok);
+          if (bad.length)
+            notes.push(`Low contrast: ${bad.map((r) => `${r.text} on ${r.background} ${r.ratio}:1`).join(", ")}.`);
+          tj.settings.color = { ...tj.settings.color ?? {}, palette };
+        }
+        if (a.fonts) {
+          const fams = tj.settings.typography?.fontFamilies ?? [];
+          if (!fams.length)
+            throw new Error(
+              "This child has no font list yet (fonts come from the parent): create it from the site first, then change fonts."
+            );
+          for (const [slugF, family] of Object.entries(a.fonts)) {
+            const f = fams.find((x) => x.slug === slugF);
+            if (!f) throw new Error(`No font "${slugF}" in the child. Fonts: ${fams.map((x) => x.slug).join(", ")}`);
+            f.fontFamily = family;
+          }
+        }
+        if (a.styles)
+          tj.styles = deepMerge(tj.styles ?? {}, a.styles);
+        files["theme.json"] = JSON.stringify(tj, null, "	");
+      }
+      if (typeof a.css === "string") files["style.css"] = a.css;
+      if (typeof a.css_append === "string")
+        files["style.css"] = `${(files["style.css"] ?? cur["style.css"] ?? "").replace(/\n*$/, "\n")}${a.css_append}
+`;
+      const markup = (path3, m) => {
+        if (typeof m !== "string" || !m.trim()) return;
+        if (!parse(m).some((b) => b.name)) throw new Error(`${path3}: give block markup (<!-- wp:\u2026 -->).`);
+        files[path3] = m;
+      };
+      markup("parts/header.html", a.header);
+      markup("parts/footer.html", a.footer);
+      for (const [t, m] of Object.entries(a.templates ?? {}))
+        markup(`templates/${t}.html`, m);
+      for (const p of a.patterns ?? []) {
+        if (!/^[a-z0-9][a-z0-9-]{0,60}$/.test(p.slug ?? ""))
+          throw new Error(`Pattern slug "${p.slug}": lowercase letters, digits and dashes.`);
+        files[`maggie-patterns/${p.slug}.json`] = JSON.stringify({
+          title: p.title,
+          content: p.content,
+          description: p.description ?? "",
+          categories: p.categories?.length ? p.categories : ["maggie"]
+        });
+      }
+      const del = (a.remove_patterns ?? []).map((x) => `maggie-patterns/${x}.json`);
+      if (!Object.keys(files).length && !del.length) throw new Error("Nothing to change.");
+      const out = await call(site, {
+        method: "POST",
+        path: "/maggie-core/v1/child-theme",
+        body: { slug, files, delete: del }
+      });
+      return {
+        slug,
+        ...out,
+        ...notes.length ? { notes } : {},
+        ...out.active ? {} : { note: "This child isn't active: switch with wp_child_theme_activate to see it." }
+      };
+    }
+  }),
+  tool({
+    name: "wp_child_theme_activate",
+    description: "Switch the site to a Maggie child theme, or back to Maggie Core (slug maggie-core). Checks the homepage before and after (words, fonts, brand colours) and reports differences. WordPress keeps Global Styles and edited header/footer per theme: a child made with wp_child_theme_create from the site carries them; switching back to Maggie Core brings its own back.",
+    parameters: {
+      type: "object",
+      properties: { slug: str2("maggie-<name>, or maggie-core to go back.") },
+      required: ["slug"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(lang, `Switch your website's theme to ${q2(a.slug, "")}.`, `\u628A\u7DB2\u7AD9\u7684\u4E3B\u984C\u5207\u63DB\u70BA ${q2(a.slug, "")}\u3002`),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const before = await homeShape(site);
+      const out = await call(site, {
+        method: "POST",
+        path: "/maggie-core/v1/child-theme/activate",
+        body: { slug: a.slug }
+      });
+      const check2 = compareShapes(before, await homeShape(site));
+      return {
+        ...out,
+        check: check2,
+        ...check2.checked && !check2.ok ? { undo: `Switch back with wp_child_theme_activate slug ${out.before}.` } : {}
+      };
+    }
+  }),
+  tool({
+    name: "wp_child_theme_restore",
+    description: "Put a child theme's files back as they were before one change (backup ids from wp_child_theme_status). The current files are backed up first, so a restore can be undone too.",
+    parameters: {
+      type: "object",
+      properties: { slug: str2("The child theme."), backup: str2("Backup id, e.g. 20261104-183208-728.") },
+      required: ["slug", "backup"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Restore the child theme ${q2(a.slug, "")} to backup ${String(a.backup ?? "")}.`,
+      `\u628A\u5B50\u4E3B\u984C ${q2(a.slug, "")} \u9084\u539F\u5230\u5099\u4EFD ${String(a.backup ?? "")}\u3002`
+    ),
+    run: (ctx, a) => call(siteOf(ctx), {
+      method: "POST",
+      path: "/maggie-core/v1/child-theme/restore",
+      body: { slug: a.slug, backup: a.backup }
+    })
+  })
+];
+function deepMerge(a, b) {
+  const out = { ...a };
+  for (const [k, v] of Object.entries(b)) {
+    const cur = out[k];
+    out[k] = v && typeof v === "object" && !Array.isArray(v) && cur && typeof cur === "object" && !Array.isArray(cur) ? deepMerge(cur, v) : v;
+  }
+  return out;
+}
 var seoFields = {
   title: str2("SEO title (\u224860 characters; the site name is added by the theme)."),
   description: str2("Meta description (\u2248150-160 characters)."),
@@ -17058,7 +17528,15 @@ var elementTools = [
     }
   })
 ];
-var wordpressTools = [...siteTools, ...pageTools, ...sectionTools, ...seoTools, ...elementTools];
+var wordpressTools = [
+  ...siteTools,
+  ...pageTools,
+  ...sectionTools,
+  ...mediaTools,
+  ...childTools,
+  ...seoTools,
+  ...elementTools
+];
 
 // ../../packages/tools/src/index.ts
 var tools = [
@@ -20468,7 +20946,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.1",
+  version: "0.12.3",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -31582,6 +32060,32 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
       fonts: o.font ? Object.fromEntries(pairs(o.font)) : void 0
     })
   );
+  const media = wp.command("media").description("pictures in the media library");
+  media.command("ls", { isDefault: true }).option("--search <words>").option("-n, --limit <n>", "how many", "30").action(
+    (o, c) => run(g(c), "wp_media_list", { search: o.search, limit: Number(o.limit) })
+  );
+  media.command("upload <fileOrUrl>").description("upload a picture (a local file or a public https link): JPEG, PNG, WebP, GIF or AVIF").option("--alt <text>", "what the picture shows").option("--filename <name>", "save it as").option("--title <title>").action(async (src, o, c) => {
+    const opts = g(c);
+    if (/^https?:\/\//i.test(src))
+      return run(opts, "wp_media_upload", { url: src, alt: o.alt, filename: o.filename, title: o.title });
+    const data = new Uint8Array(
+      await readFile2(src).catch(() => {
+        throw new CliError(`Can't read ${src}.`);
+      })
+    );
+    const site = await siteFor(opts);
+    if (!site.uploadMedia) throw new CliError("This connection can't upload pictures.");
+    const preview = `Upload ${src.split("/").pop()} (${Math.round(data.length / 1024)} KB) to the media library of ${site.url}.`;
+    if (opts.dryRun) {
+      say2(`Would: ${preview}`);
+      return;
+    }
+    if (!opts.yes && !await ask(preview)) throw new CliError("Nothing changed.", 1);
+    print(
+      await site.uploadMedia({ data, filename: o.filename ?? src.split("/").pop(), alt: o.alt, title: o.title }),
+      opts.json
+    );
+  });
   wp.command("pattern <pattern>").description("change a synced pattern every page shares (contact, share, quote or id)").option("--replace <find=replace...>").option("--link <from=to...>").action(
     (p, o, c) => run(g(c), "wp_pattern_update", {
       pattern: p,
@@ -31591,7 +32095,32 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
       }
     })
   );
-  wp.command("child-theme <slug>").description("write a child theme of Maggie Core (the site's brand, header, footer, patterns) to a folder").requiredOption("--name <name>", 'theme name, e.g. "Moon Lake Spa"').option("--out <dir>", "where to write it (default ./<slug>)").option("--from-site", "take the brand, header and footer from the connected site").option("--color <slug=hex...>", "brand colours").option("--font <slug=family...>", "fonts (replaces Maggie Core's font list: ship their files too)").action(
+  const child = wp.command("child").description("the site's Maggie child theme, on the site itself (data files only, backups kept)");
+  child.command("status [slug]", { isDefault: true }).description("child themes, their files and backups; with a slug, its files in full").action((slug, _o, c) => run(g(c), "wp_child_theme_status", { slug }));
+  child.command("create <slug>").description("create maggie-<name> from the site's current look").requiredOption("--name <name>").option("--empty", "start empty instead of from the site").option("--activate", "switch the site to it (checks the homepage looks the same)").action(
+    (slug, o, c) => run(g(c), "wp_child_theme_create", { slug, name: o.name, from_site: !o.empty, activate: !!o.activate })
+  );
+  child.command("update [slug]").description(
+    "change the child: colours, fonts, CSS, header/footer, templates, patterns (JSON file with the tool's arguments)"
+  ).option(
+    "--from <file>",
+    "JSON: { colors, fonts, styles, css, css_append, header, footer, templates, patterns, remove_patterns }"
+  ).option("--color <slug=hex...>").option("--css-file <file>", "replace the CSS with this file").option("--header-file <file>", "header block markup").option("--footer-file <file>", "footer block markup").action(
+    async (slug, o, c) => {
+      const args = o.from ? await json(o.from) : {};
+      if (slug) args.slug = slug;
+      if (o.color) args.colors = Object.fromEntries(pairs(o.color));
+      if (o.cssFile) args.css = await readFile2(o.cssFile, "utf8");
+      if (o.headerFile) args.header = await readFile2(o.headerFile, "utf8");
+      if (o.footerFile) args.footer = await readFile2(o.footerFile, "utf8");
+      await run(g(c), "wp_child_theme_update", args);
+    }
+  );
+  child.command("activate <slug>").description("switch the site to a child (or maggie-core to go back); checks the homepage before and after").action((slug, _o, c) => run(g(c), "wp_child_theme_activate", { slug }));
+  child.command("restore <slug> <backup>").description("put a backup of the child's files back").action((slug, backup, _o, c) => run(g(c), "wp_child_theme_restore", { slug, backup }));
+  wp.command("child-theme <slug>").description(
+    "export the site's look as a child theme folder on this computer (to keep in git); cmo wp child works on the site itself"
+  ).requiredOption("--name <name>", 'theme name, e.g. "Moon Lake Spa"').option("--out <dir>", "where to write it (default ./<slug>)").option("--from-site", "take the brand, header and footer from the connected site").option("--color <slug=hex...>", "brand colours").option("--font <slug=family...>", "fonts (replaces Maggie Core's font list: ship their files too)").action(
     async (slug, o, c) => {
       const opts = g(c);
       const colors = Object.fromEntries(pairs(o.color));

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.12.1",
+	"version": "0.12.3",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",