@cmo-so/cli 0.12.17 → 0.12.19

package/dist/cmo.mjs

@@ -25336,10 +25336,10 @@ function domainApi(api3, domain) {
       body: JSON.stringify({ social_copy: socialCopy })
     }),
     /** The post's link: it replaces the old one in the text, and the preview card shows the new page. */
-    setSocialLink: (id, link) => api3.request(`${base}/social/${id}`, {
+    setSocialLink: (id, link2) => api3.request(`${base}/social/${id}`, {
       method: "PATCH",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ link })
+      body: JSON.stringify({ link: link2 })
     }),
     /** Go out as the post's image, or as a link preview. */
     setSocialPublishMode: (id, mode) => api3.request(`${base}/social/${id}`, {
@@ -26599,13 +26599,13 @@ var accountTools = [
     run: async (ctx, { platform }) => {
       const p2 = platform && CONNECT_FORMS.includes(platform) ? platform : "";
       const label2 = p2 ? `Connect ${CONNECT_NAMES[p2]}` : "Connect your website";
-      const link = `https://app.cmo.so/posts?connect=${p2 || "wordpress"}${ctx.domain ? `&site=${encodeURIComponent(ctx.domain)}` : ""}`;
+      const link2 = `https://app.cmo.so/posts?connect=${p2 || "wordpress"}${ctx.domain ? `&site=${encodeURIComponent(ctx.domain)}` : ""}`;
       if (ctx.client === "chat")
         return {
           card: { type: "connect", platform: p2 || null, label: label2 },
           shown: `A "${label2}" button now shows under your message. The user fills in the form there; say so in one line.`
         };
-      return { link, shown: "Give the user this link: it opens the form in the cmo.so app (web or phone)." };
+      return { link: link2, shown: "Give the user this link: it opens the form in the cmo.so app (web or phone)." };
     }
   }),
   tool({
@@ -28982,9 +28982,9 @@ var FILE_SCHEMA = {
 };
 var fileLinks = (value) => (Array.isArray(value) ? value : value ? [value] : []).map((f2) => String(f2?.download_url ?? "").trim()).filter(Boolean);
 var videoLink = (a3) => {
-  const link = fileLinks(a3.file)[0] ?? String(a3.url ?? "").trim();
-  if (!link.startsWith("https://")) throw new Error("Give the video (a file from this chat, or a direct https link).");
-  return link;
+  const link2 = fileLinks(a3.file)[0] ?? String(a3.url ?? "").trim();
+  if (!link2.startsWith("https://")) throw new Error("Give the video (a file from this chat, or a direct https link).");
+  return link2;
 };
 var queuedAt = positionParam("the posts", "Leave out for the front (the next posting times).");
 var channelsOf = (value) => {
@@ -29472,10 +29472,10 @@ var socialTools = [
     risk: "W1",
     gates: ["VER"],
     run: async (ctx, { id, url, file, title }) => {
-      const link = fileLinks(file)[0] ?? String(url ?? "").trim();
-      if (!link.startsWith("https://"))
+      const link2 = fileLinks(file)[0] ?? String(url ?? "").trim();
+      if (!link2.startsWith("https://"))
         throw new Error("Give the PDF (a file from this chat, or a public https link).");
-      const out = await ws(ctx).attachSocialCarouselPdf(Number(id), { url: link, ...title ? { title } : {} });
+      const out = await ws(ctx).attachSocialCarouselPdf(Number(id), { url: link2, ...title ? { title } : {} });
       return { id: out.id, pages: out.pages, pictures: out.pictures, carousel: out.carousel ?? null };
     }
   }),
@@ -31014,6 +31014,55 @@ function touchPath(list4, target) {
   return false;
 }
 
+// ../../packages/tools/src/wp/credit.ts
+var CREDIT_NAME = "AI Marketing OS Ltd";
+var CREDIT_URL = "https://cmo.so";
+var link = () => `<a href="${CREDIT_URL}">${CREDIT_NAME}</a>`;
+var creditInline = (year = (/* @__PURE__ */ new Date()).getUTCFullYear()) => `<span class="maggie-credit">\xA9 ${year} \xB7 Powered by ${link()}</span>`;
+var creditBlock = () => `<!-- wp:paragraph {"fontSize":"small"} -->
+<p class="has-small-font-size">${creditInline()}</p>
+<!-- /wp:paragraph -->`;
+var VERB = "(?:proudly\\s+)?(?:designed|developed|powered|built|crafted|created|made|hosted|maintained|managed|website|web\\s+design|web\\s+development|site|design|development|theme|seo)";
+var CREDIT_RX = new RegExp(
+  `(?<prefix>(?:\xA9|&copy;|&#169;|copyright)\\s*(?:\\d{4}(?:\\s*[-\u2013]\\s*\\d{4})?)?\\s*[,\xB7|\u2022\\-\u2013]?\\s*)?(?<verb>${VERB}(?:\\s*(?:&amp;|&|and|\\+|/)\\s*${VERB})?)\\s+by\\s*(?<name><a\\b[^>]*>[\\s\\S]*?</a>|[^<|\xB7\u2022]{1,60}?)(?=\\s*(?:<|\\||\xB7|\u2022|$|\\.\\s|\\.$))`,
+  "giu"
+);
+var OWN_RX = /<span class="maggie-credit">[\s\S]*?<\/span>/giu;
+var isOurs = (name) => name.replace(/<[^>]+>/g, "").toLowerCase().includes(CREDIT_NAME.toLowerCase()) || name.includes("cmo.so");
+function applyCredit(markup) {
+  if (!markup?.trim()) return markup;
+  let credited = false;
+  let html2 = markup.replace(OWN_RX, () => {
+    credited = true;
+    return creditInline();
+  });
+  const source = html2;
+  html2 = source.replace(CREDIT_RX, (...args) => {
+    const all2 = args[0];
+    const at2 = args[args.length - 3];
+    const g3 = args[args.length - 1];
+    const before = source.slice(0, at2);
+    if (before.lastIndexOf("<") > before.lastIndexOf(">")) return all2;
+    if (!credited) {
+      credited = true;
+      return creditInline();
+    }
+    return isOurs(g3.name) ? all2 : `${g3.prefix ?? ""}${g3.verb} by ${link()}`;
+  });
+  if (credited) return html2;
+  const end = html2.lastIndexOf("</footer>");
+  return end < 0 ? `${html2.trimEnd()}
+
+${creditBlock()}
+` : `${html2.slice(0, end)}${creditBlock()}${html2.slice(end)}`;
+}
+function refuseCreditOverride(what, text3) {
+  if (text3 && /maggie-credit/i.test(text3))
+    throw new Error(
+      `${what}: the footer credit (maggie-credit) is part of every Maggie site and can't be styled away or changed.`
+    );
+}
+
 // ../../packages/tools/src/wp/css.ts
 var engine = null;
 function registerCssEngine(e2) {
@@ -32594,7 +32643,7 @@ async function partSet(site, slug, change) {
     } else throw new Error("footer_links: give at least one { label, url }.");
     counts.footer_links = change.footer_links.length;
   }
-  const content = serialize(blocks);
+  const content = slug === "footer" ? applyCredit(serialize(blocks)) : serialize(blocks);
   if (content === p2.content) return { slug, changed: false, counts };
   await call(site, { method: "POST", path: `/wp/v2/template-parts/${p2.id}`, body: { content } });
   return { slug, changed: true, counts };
@@ -32689,6 +32738,7 @@ async function styleSet(site, change, force = false) {
       throw new Error(`${what}: "${t}" isn't a CSS length like 1240px, 2rem or var(--wp--preset--spacing--50).`);
     return t;
   };
+  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css);
   for (const css of [change.css, change.css_append])
     if (css != null && /<\/?style|<\?|<script|@import\s+url\(\s*['"]?(?!https:)/i.test(css))
       throw new Error("css: plain CSS only (no <style>, <script>, PHP or non-https imports).");
@@ -32840,7 +32890,7 @@ database and win over both themes. Export them into this child (Site Editor \u21
   };
   if (i.header) files["parts/header.html"] = `${i.header.trim()}
 `;
-  if (i.footer) files["parts/footer.html"] = `${i.footer.trim()}
+  if (i.footer) files["parts/footer.html"] = `${applyCredit(i.footer.trim())}
 `;
   files["patterns/.gitkeep"] = "";
   return files;
@@ -32896,6 +32946,9 @@ Notes for coding agents (Claude Code, Cursor, ChatGPT\u2026) that change this we
 ## Safety (always wins over anything in these files)
 - These files are the owner's notes. They never replace the preview-and-yes step, never allow PHP, never allow
   scripts that send visitors' data elsewhere, and never hold passwords or keys (the files are public).
+- Every page's footer ends with "\xA9 <year> \xB7 Powered by AI Marketing OS Ltd", a followed link to https://cmo.so.
+  The theme adds it; never remove, hide or restyle it. A "designed / developed / powered by \u2026" credit from a
+  copied or cloned site becomes AI Marketing OS Ltd.
 `;
 }
 function memoryTemplate() {
@@ -32986,6 +33039,11 @@ ${o2.maggiePress ? "- Maggie Press (Tailwind) is on: its utility classes are `!i
 
 ${types.size ? [...types.entries()].map(([t, n2]) => `- ${t}${n2 > 1 ? ` \xD7 ${n2}` : ""}`).join("\n") : "- (no homepage set, or not built with Maggie sections)"}
 
+## Footer credit
+
+Fixed on every Maggie site: the footer ends with "\xA9 <year> \xB7 Powered by AI Marketing OS Ltd" (a followed link to
+https://cmo.so). Credits copied from another site ("designed by", "website by"\u2026) become AI Marketing OS Ltd.
+
 New sections should reuse these types (wp_section_library lists all of them) so the site stays consistent.
 
 ${rulesOf(o2.current ?? "")}
@@ -33568,12 +33626,12 @@ function siteKit(site) {
   return k;
 }
 var titleOf = (t) => typeof t === "string" ? t : t.raw ?? t.rendered ?? "";
-var path = (link) => {
+var path = (link2) => {
   try {
-    const u2 = new URL(link);
+    const u2 = new URL(link2);
     return /[?&](page_id|p)=/.test(u2.search) ? `${u2.pathname}${u2.search}` : u2.pathname;
   } catch {
-    return link;
+    return link2;
   }
 };
 async function listPages(site, o2 = {}) {
@@ -35099,7 +35157,7 @@ async function llmsTxt(site, o2 = {}) {
     return `${cut.slice(0, Math.max(cut.lastIndexOf(" "), n2 - 30)).replace(/[\s,;:–-]+$/, "")}\u2026`;
   };
   const desc = (m, fallback = "") => clip3(String(m?.maggie_seo_description || fallback));
-  const isSample = (link, title) => /\/(sample-page|hello-world)\/?$/.test(link) || title === "Sample Page" || title === "Hello world!";
+  const isSample = (link2, title) => /\/(sample-page|hello-world)\/?$/.test(link2) || title === "Sample Page" || title === "Hello world!";
   const home = pages.find((p2) => p2.id === s.page_on_front);
   const noise = /privacy|terms|cookie|thank|cart|checkout|my-account|login/i;
   const visible = pages.filter(
@@ -35199,9 +35257,9 @@ var brief2 = (blocks, synced) => locate(blocks).map((l2) => {
   const d2 = describe2(l2, synced);
   return `${d2.id} ${d2.type}${d2.heading ? `: ${d2.heading.slice(0, 60)}` : ""}`;
 });
-async function check(site, link, status) {
+async function check(site, link2, status) {
   if (status !== "publish") return { note: "Saved as a draft: not public yet." };
-  const h3 = await renderedHead(site, link).catch((e2) => ({ error: e2.message }));
+  const h3 = await renderedHead(site, link2).catch((e2) => ({ error: e2.message }));
   if ("error" in h3) return { ok: false, error: h3.error };
   const problems = [
     h3.status >= 400 ? `HTTP ${h3.status}` : "",
@@ -35274,9 +35332,9 @@ var siteTools = [
     risk: "R0",
     run: async (ctx) => {
       if (!ctx.domain) throw new Error("No website is selected yet. Add one first.");
-      const link = `https://app.cmo.so/wp-builder?site=${encodeURIComponent(ctx.domain)}`;
+      const link2 = `https://app.cmo.so/wp-builder?site=${encodeURIComponent(ctx.domain)}`;
       return {
-        link,
+        link: link2,
         cli: "cmo wp connect <site address> -u <administrator>",
         shown: "Give the user this link: it opens the form in the cmo.so app (web or phone). They create the application password in WordPress (Users \u2192 Profile \u2192 Application Passwords) and paste it there."
       };
@@ -36516,6 +36574,8 @@ var childTools = [
           tj.styles = deepMerge(tj.styles ?? {}, a3.styles);
         files["theme.json"] = JSON.stringify(tj, null, "	");
       }
+      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null);
+      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null);
       if (typeof a3.css === "string") files["style.css"] = a3.css;
       if (typeof a3.css_append === "string")
         files["style.css"] = `${(files["style.css"] ?? cur["style.css"] ?? "").replace(/\n*$/, "\n")}${a3.css_append}
@@ -36530,6 +36590,7 @@ var childTools = [
         const js = typeof a3.js === "string" ? a3.js : `${(cur["assets/js/site.js"] ?? "").replace(/\n*$/, "\n")}${String(a3.js_append)}
 `.trimStart();
         if (/<\/?script\b/i.test(js)) throw new Error("js: plain JavaScript only, no <script> tags.");
+        refuseCreditOverride("js", js);
         if (/<\?(php|=)?/i.test(js)) throw new Error("js: PHP isn't allowed.");
         files["assets/js/site.js"] = js;
         notes.push(
@@ -36539,7 +36600,7 @@ var childTools = [
       const markup = (path3, m) => {
         if (typeof m !== "string" || !m.trim()) return;
         if (!parse(m).some((b2) => b2.name)) throw new Error(`${path3}: give block markup (<!-- wp:\u2026 -->).`);
-        files[path3] = m;
+        files[path3] = path3 === "parts/footer.html" ? applyCredit(m) : m;
       };
       markup("parts/header.html", a3.header);
       markup("parts/footer.html", a3.footer);
@@ -37927,6 +37988,514 @@ var cssTools = [
     }
   })
 ];
+var MB = "/maggie-booking/v1/admin";
+var NEEDS_BOOKING = "Online booking lives in the Maggie Core theme 0.17 or later (wp_theme_update), switched on with wp_booking_turn_on.";
+async function mb(ctx, method, path3, body, query) {
+  try {
+    return await call(siteOf(ctx), {
+      method,
+      path: MB + path3,
+      ...body !== void 0 ? { body } : {},
+      ...query ? {
+        query: Object.fromEntries(
+          Object.entries(query).filter(([, v2]) => v2 !== void 0 && v2 !== null && v2 !== "")
+        )
+      } : {}
+    });
+  } catch (e2) {
+    const m = e2.message ?? "";
+    if (/rest_no_route|404/.test(m) && !/not found|not_found/i.test(m)) throw new Error(NEEDS_BOOKING);
+    throw e2;
+  }
+}
+var ITEMS = arr(
+  "Treatments, in order (back to back): service id and option (variant) id from wp_booking_list resource services.",
+  obj("", { service_id: int2("Service id."), variant_id: int2("Option id (default: the first).") })
+);
+var itemsParam = (items3) => (Array.isArray(items3) ? items3 : []).map(
+  (i) => `${i.service_id}${i.variant_id ? `:${i.variant_id}` : ""}`
+).join(",");
+var MB_RESOURCES = {
+  services: {
+    path: "/services",
+    write: true,
+    what: "treatments with options (name, duration_minutes, price_minor), rules and who does them"
+  },
+  categories: { path: "/categories", write: true, what: "menu categories" },
+  staff: { path: "/staff", write: true, what: "team: services, weekly hours, own prices" },
+  "time-off": { path: "/time-off", write: true, what: "time off and closures (staff_id 0 = whole business)" },
+  resources: { path: "/resources", write: true, what: "rooms / equipment a treatment needs" },
+  locations: { path: "/locations", write: true, what: "locations (timezone, currency, address)" },
+  customers: { path: "/customers", write: true, what: "customers (search=\u2026), id \u2192 history" },
+  vouchers: { path: "/vouchers", write: true, what: "gift cards for sale" },
+  "voucher-codes": { path: "/voucher-codes", write: false, what: "issued gift card codes (search by last 4, buyer)" },
+  "addon-groups": {
+    path: "/addon-groups",
+    write: true,
+    what: "add-on groups (extras with price and minutes) linked to services"
+  },
+  promos: { path: "/promos", write: true, what: "discount codes and last-minute deals" },
+  bundles: { path: "/bundles", write: true, what: "packages: treatments back to back at one price" },
+  "price-rules": { path: "/price-rules", write: true, what: "peak / off-peak price changes by weekday and time" },
+  pricing: { path: "/pricing", write: false, what: "everything about add-ons, deals, packages and rules at once" },
+  forms: { path: "/forms", write: true, what: "intake / consultation forms linked to services" },
+  reviews: { path: "/reviews", write: true, what: "reviews (approve, hide, reply)" },
+  waitlist: { path: "/waitlist", write: true, what: "waitlist entries" },
+  payments: { path: "/payments", write: false, what: "payments and refunds" },
+  settings: {
+    path: "/settings",
+    write: false,
+    what: "booking rules, location, languages (change with wp_booking_settings_set)"
+  },
+  imports: { path: "/import", write: false, what: "import history (undo with wp_booking_import undo_id)" }
+};
+var bookingTools = [
+  tool({
+    name: "wp_booking_status",
+    description: "Online booking on the connected WordPress site (Maggie Booking in the Maggie Core theme): whether it is on, today's appointments, upcoming count, this week's takings, the setup checklist (hours, treatments, team, payments, Book page, gift cards) and whether online payment (Stripe) is ready. Read-only. Payment keys are entered by the owner in wp-admin \u2192 Bookings \u2192 Payments (never ask for them).",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx) => {
+      const module = await mb(ctx, "GET", "/module");
+      if (!module.installed || !module.enabled) return { ...module, next: "wp_booking_turn_on" };
+      const [overview2, gateways] = await Promise.all([
+        mb(ctx, "GET", "/overview"),
+        mb(ctx, "GET", "/gateways").catch(() => null)
+      ]);
+      return {
+        ...module,
+        overview: overview2,
+        payments: gateways ? {
+          gateways: gateways.gateways,
+          stripe: {
+            mode: gateways.stripe?.mode,
+            ready: gateways.stripe?.has_secret && gateways.stripe?.has_webhook_secret,
+            webhook_url: gateways.stripe?.webhook_url
+          }
+        } : null
+      };
+    }
+  }),
+  tool({
+    name: "wp_booking_turn_on",
+    description: "Switch online booking on (creates its tables, a Book page, one team member and Mon\u2013Sat 10\u201318 hours to start from) or off (enabled false: the Bookings dashboard stays, nothing is deleted). To only pause visitors' online booking, use wp_booking_settings_set online_open false.",
+    parameters: { type: "object", properties: { enabled: bool("true to switch on (default), false to switch off.") } },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => a3.enabled === false ? say(lang, "Switch online booking off on your website.", "\u95DC\u9589\u7DB2\u7AD9\u7684\u7DDA\u4E0A\u9810\u7D04\u3002") : say(
+      lang,
+      "Switch online booking on for your website (adds a Book page and the Bookings dashboard).",
+      "\u70BA\u7DB2\u7AD9\u958B\u555F\u7DDA\u4E0A\u9810\u7D04\uFF08\u65B0\u589E\u9810\u7D04\u9801\u548C\u9810\u7D04\u5F8C\u53F0\uFF09\u3002"
+    ),
+    run: (ctx, a3) => mb(ctx, "POST", "/module", { enabled: a3.enabled !== false })
+  }),
+  tool({
+    name: "wp_booking_appointments",
+    description: "Appointments: one booking by id (with customer, items, payments, history), or a list filtered by status (held, pending, confirmed, arrived, completed, cancelled, no_show, expired), date range (from/to, Y-m-d, venue time) and search (name, email, reference). Read-only.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: int2("A booking id."),
+        status: str2("Filter by status."),
+        from: str2("From date (Y-m-d)."),
+        to: str2("To date (Y-m-d)."),
+        search: str2("Name, email, phone or reference."),
+        page: int2("Page (1\u2026).")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => a3.id ? mb(ctx, "GET", `/bookings/${Number(a3.id)}`) : mb(ctx, "GET", "/bookings", void 0, {
+      status: a3.status,
+      from: a3.from,
+      to: a3.to,
+      search: a3.search,
+      page: a3.page
+    })
+  }),
+  tool({
+    name: "wp_booking_availability",
+    description: "Free start times on a date for one or more treatments (the business's view: no lead-time limit). Use before wp_booking_create or a move. Read-only.",
+    parameters: {
+      type: "object",
+      properties: { items: ITEMS, date: str2("Date (Y-m-d, venue time)."), staff_id: int2("Only this team member.") },
+      required: ["items", "date"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => mb(ctx, "GET", "/slots", void 0, { items: itemsParam(a3.items), date: a3.date, staff: a3.staff_id })
+  }),
+  tool({
+    name: "wp_booking_create",
+    description: "Book an appointment for a customer (as the business): treatments, date and time (venue time), optional team member, the customer (existing customer_id, or name + email/phone), notes and how they pay (venue, deposit, full). force books even if the time looks taken (double booking).",
+    parameters: {
+      type: "object",
+      properties: {
+        items: ITEMS,
+        date: str2("Date (Y-m-d)."),
+        time: str2("Start time (HH:MM, venue time)."),
+        staff_id: int2("Team member (default: anyone free)."),
+        customer_id: int2("An existing customer."),
+        customer: obj("A new or matching customer.", {
+          name: str2("Name."),
+          email: str2("Email."),
+          phone: str2("Phone.")
+        }),
+        notes: str2("Notes for the team."),
+        payment: str2("venue (default), deposit or full."),
+        force: bool("Book even if the time is taken.")
+      },
+      required: ["items", "date", "time"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => say(
+      lang,
+      `Book ${Array.isArray(a3.items) ? a3.items.length : 1} treatment(s) on ${a3.date} at ${a3.time} for ${q2(a3.customer?.name, a3.customer_id ? `customer #${a3.customer_id}` : "the customer")}${a3.force ? " even if the time is taken" : ""}; they get the confirmation email.`,
+      `\u70BA${q2(a3.customer?.name, a3.customer_id ? `\u5BA2\u6236 #${a3.customer_id}` : "\u5BA2\u6236")}\u9810\u7D04 ${a3.date} ${a3.time}${a3.force ? "\uFF08\u5373\u4F7F\u6642\u9593\u5DF2\u88AB\u4F54\u7528\uFF09" : ""}\uFF0C\u4E26\u5BC4\u51FA\u78BA\u8A8D\u96FB\u90F5\u3002`
+    ),
+    run: (ctx, a3) => mb(ctx, "POST", "/bookings", {
+      items: a3.items,
+      date: a3.date,
+      time: a3.time,
+      staff_id: a3.staff_id,
+      customer_id: a3.customer_id,
+      customer: a3.customer,
+      notes: a3.notes,
+      payment: a3.payment,
+      force: !!a3.force
+    })
+  }),
+  tool({
+    name: "wp_booking_change",
+    description: "Change one booking: action status (arrived, completed, no_show, confirmed), notes, cancel (by the business: everything paid is refunded; the customer is emailed), reschedule (new date + time, optional staff_id, force) or refund (payment_id and amount in minor units, e.g. 2500 = 25.00).",
+    parameters: {
+      type: "object",
+      properties: {
+        id: int2("Booking id."),
+        action: str2("status | notes | cancel | reschedule | refund"),
+        status: str2("For status."),
+        notes: str2("For notes."),
+        reason: str2("For cancel."),
+        date: str2("For reschedule (Y-m-d)."),
+        time: str2("For reschedule (HH:MM)."),
+        staff_id: int2("For reschedule: another team member."),
+        force: bool("For reschedule: even if taken."),
+        payment_id: int2("For refund."),
+        amount: int2("For refund, minor units.")
+      },
+      required: ["id", "action"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a3, lang) => {
+      const id = `#${a3.id}`;
+      switch (a3.action) {
+        case "cancel":
+          return say(
+            lang,
+            `Cancel booking ${id} (paid money is refunded, the customer is emailed).`,
+            `\u53D6\u6D88\u9810\u7D04 ${id}\uFF08\u9000\u56DE\u5DF2\u4ED8\u6B3E\u9805\u4E26\u901A\u77E5\u5BA2\u6236\uFF09\u3002`
+          );
+        case "reschedule":
+          return say(
+            lang,
+            `Move booking ${id} to ${a3.date} ${a3.time} (the customer is emailed).`,
+            `\u628A\u9810\u7D04 ${id} \u6539\u5230 ${a3.date} ${a3.time}\uFF08\u901A\u77E5\u5BA2\u6236\uFF09\u3002`
+          );
+        case "refund":
+          return say(
+            lang,
+            `Refund ${a3.amount} (minor units) of payment #${a3.payment_id} on booking ${id}.`,
+            `\u70BA\u9810\u7D04 ${id} \u9000\u6B3E ${a3.amount}\uFF08\u6700\u5C0F\u55AE\u4F4D\uFF09\u3002`
+          );
+        default:
+          return say(
+            lang,
+            `Update booking ${id}: ${a3.action} ${a3.status ?? ""}.`,
+            `\u66F4\u65B0\u9810\u7D04 ${id}\uFF1A${a3.action} ${a3.status ?? ""}\u3002`
+          );
+      }
+    },
+    run: (ctx, a3) => {
+      const id = Number(a3.id);
+      switch (a3.action) {
+        case "cancel":
+          return mb(ctx, "POST", `/bookings/${id}/cancel`, { reason: a3.reason ?? "" });
+        case "reschedule":
+          return mb(ctx, "POST", `/bookings/${id}/reschedule`, {
+            date: a3.date,
+            time: a3.time,
+            staff_id: a3.staff_id,
+            force: !!a3.force
+          });
+        case "refund":
+          return mb(ctx, "POST", `/bookings/${id}/refund`, { payment_id: a3.payment_id, amount: a3.amount });
+        case "notes":
+          return mb(ctx, "PATCH", `/bookings/${id}`, { notes: a3.notes ?? "" });
+        case "status":
+          return mb(ctx, "PATCH", `/bookings/${id}`, { status: a3.status });
+        default:
+          throw new Error("action: status, notes, cancel, reschedule or refund.");
+      }
+    }
+  }),
+  tool({
+    name: "wp_booking_list",
+    description: `Read the booking set-up and records. resource: ${Object.entries(MB_RESOURCES).map(([k, v2]) => `${k} (${v2.what})`).join("; ")}. id for one item, search for customers / codes. Money is in minor units (8000 = 80.00). Read-only.`,
+    parameters: {
+      type: "object",
+      properties: {
+        resource: str2("What to read."),
+        id: int2("One item."),
+        search: str2("Search text."),
+        page: int2("Page.")
+      },
+      required: ["resource"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => {
+      const r = MB_RESOURCES[String(a3.resource)];
+      if (!r) throw new Error(`resource: ${Object.keys(MB_RESOURCES).join(", ")}.`);
+      return a3.id ? mb(ctx, "GET", `${r.path}/${Number(a3.id)}`) : mb(ctx, "GET", r.path, void 0, { search: a3.search, page: a3.page });
+    }
+  }),
+  tool({
+    name: "wp_booking_save",
+    description: `Create, change or delete one booking set-up item. resource: ${Object.entries(MB_RESOURCES).filter(([, v2]) => v2.write).map(([k]) => k).join(
+      ", "
+    )}. Without id: create; with id: change (send only the fields to change; a service's variants array replaces its options \u2014 keep their ids); delete true: remove (services, team and options used by past bookings are archived, not deleted). Read the item with wp_booking_list first to see its fields. Money in minor units.`,
+    parameters: {
+      type: "object",
+      properties: {
+        resource: str2("What to save."),
+        id: int2("Item to change or delete."),
+        data: obj("The fields."),
+        delete: bool("Delete it.")
+      },
+      required: ["resource"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => {
+      const what = `${a3.resource}${a3.id ? ` #${a3.id}` : ""}`;
+      return a3.delete ? say(lang, `Delete ${what} from your booking set-up.`, `\u5F9E\u9810\u7D04\u8A2D\u5B9A\u4E2D\u522A\u9664 ${what}\u3002`) : a3.id ? say(lang, `Change ${what} in your booking set-up.`, `\u4FEE\u6539\u9810\u7D04\u8A2D\u5B9A\u4E2D\u7684 ${what}\u3002`) : say(lang, `Add a new ${a3.resource} to your booking set-up.`, `\u5728\u9810\u7D04\u8A2D\u5B9A\u4E2D\u65B0\u589E ${a3.resource}\u3002`);
+    },
+    run: (ctx, a3) => {
+      const r = MB_RESOURCES[String(a3.resource)];
+      if (!r?.write)
+        throw new Error(
+          `resource: ${Object.entries(MB_RESOURCES).filter(([, v2]) => v2.write).map(([k]) => k).join(", ")}.`
+        );
+      if (a3.delete) {
+        if (!a3.id) throw new Error("delete needs the id.");
+        return mb(ctx, "DELETE", `${r.path}/${Number(a3.id)}`);
+      }
+      return a3.id ? mb(ctx, "PATCH", `${r.path}/${Number(a3.id)}`, a3.data ?? {}) : mb(ctx, "POST", r.path, a3.data ?? {});
+    }
+  }),
+  tool({
+    name: "wp_booking_settings_set",
+    description: 'Change booking settings: settings {online_open, slot_minutes, lead_minutes, horizon_days, hold_minutes, cancel_window_hours, default_payment (venue|deposit|full|card), deposit_percent, deposit_min_minor, no_show_fee_percent, auto_confirm, assignment_mode (balance|priority|turns), gap_rule (off|reduce|eliminate), allow_staff_choice, languages (extra content languages, e.g. ["zh-hans","es"]), notify_email, customer_note, terms, reminder_hours, gift_cards_enabled}, location {name, address, phone, email, timezone, currency} and/or business hours [{weekday 0=Mon\u20266, start HH:MM, end HH:MM, week_slot null|0|1}] (replaces all business hours). Read the current values with wp_booking_list resource settings.',
+    parameters: {
+      type: "object",
+      properties: {
+        settings: obj("Booking rules to change."),
+        location: obj("Location fields to change."),
+        hours: arr(
+          "Business hours (all of them).",
+          obj("", { weekday: int2("0 = Monday."), start: str2("HH:MM"), end: str2("HH:MM") })
+        )
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => say(
+      lang,
+      `Change booking ${[a3.settings && "settings", a3.location && "location", a3.hours && "opening hours"].filter(Boolean).join(", ") || "settings"}.`,
+      `\u4FEE\u6539\u9810\u7D04${[a3.settings && "\u8A2D\u5B9A", a3.location && "\u5730\u9EDE", a3.hours && "\u71DF\u696D\u6642\u9593"].filter(Boolean).join("\u3001") || "\u8A2D\u5B9A"}\u3002`
+    ),
+    run: (ctx, a3) => mb(ctx, "POST", "/settings", {
+      ...a3.settings ? { settings: a3.settings } : {},
+      ...a3.location ? { location: a3.location } : {},
+      ...a3.hours ? { hours: a3.hours } : {}
+    })
+  }),
+  tool({
+    name: "wp_booking_import_preview",
+    description: "Preview bringing data from another booking system, nothing saved: source fresha (the venue's public Fresha page URL: treatments, options, prices), json (a catalogue JSON from another provider's export: Treatwell, Booksy, Square, Vagaro\u2026) or csv (kind clients | appointments | gift_cards, the CSV text). Shows what would be added, updated, withdrawn or skipped. Then wp_booking_import.",
+    parameters: {
+      type: "object",
+      properties: {
+        source: str2("fresha | json | csv"),
+        url: str2("Fresha page URL."),
+        json: str2("Catalogue JSON."),
+        csv: str2("CSV text."),
+        kind: str2("For csv: clients | appointments | gift_cards.")
+      },
+      required: ["source"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => mb(ctx, "POST", `/import/${String(a3.source)}`, {
+      url: a3.url,
+      json: a3.json,
+      csv: a3.csv,
+      kind: a3.kind,
+      dry_run: true
+    })
+  }),
+  tool({
+    name: "wp_booking_import",
+    description: "Import from another booking system after wp_booking_import_preview (same arguments), or undo an earlier import (undo_id from wp_booking_list resource imports). Re-running a Fresha import later syncs changes; the owner's own edits are kept.",
+    parameters: {
+      type: "object",
+      properties: {
+        source: str2("fresha | json | csv"),
+        url: str2("Fresha page URL."),
+        json: str2("Catalogue JSON."),
+        csv: str2("CSV text."),
+        kind: str2("For csv."),
+        undo_id: int2("Undo this import instead.")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => a3.undo_id ? say(
+      lang,
+      `Undo import #${a3.undo_id} (removes what it added).`,
+      `\u64A4\u92B7\u532F\u5165 #${a3.undo_id}\uFF08\u79FB\u9664\u5B83\u65B0\u589E\u7684\u8CC7\u6599\uFF09\u3002`
+    ) : say(
+      lang,
+      `Import ${a3.source === "csv" ? a3.kind : "the menu"} from ${a3.source} into your bookings.`,
+      `\u5F9E ${a3.source} \u532F\u5165${a3.source === "csv" ? a3.kind : "\u670D\u52D9\u9805\u76EE"}\u5230\u9810\u7D04\u7CFB\u7D71\u3002`
+    ),
+    run: (ctx, a3) => a3.undo_id ? mb(ctx, "POST", `/import/${Number(a3.undo_id)}/undo`, {}) : mb(ctx, "POST", `/import/${String(a3.source)}`, {
+      url: a3.url,
+      json: a3.json,
+      csv: a3.csv,
+      kind: a3.kind,
+      dry_run: false
+    })
+  }),
+  tool({
+    name: "wp_gift_card",
+    description: "Gift cards: lookup (code \u2192 status, balance), issue (by hand: voucher_id of a gift card for sale or value_minor, recipient and buyer names/emails, message, send_email; the code is shown once), redeem (code id + amount_minor), void (code id). List cards for sale and issued codes with wp_booking_list resource vouchers / voucher-codes.",
+    parameters: {
+      type: "object",
+      properties: {
+        action: str2("lookup | issue | redeem | void"),
+        code: str2("For lookup."),
+        id: int2("Code id, for redeem / void."),
+        amount_minor: int2("For redeem."),
+        voucher_id: int2("For issue."),
+        value_minor: int2("For issue: a custom value."),
+        recipient_name: str2("For issue."),
+        recipient_email: str2("For issue."),
+        buyer_name: str2("For issue."),
+        buyer_email: str2("For issue."),
+        message: str2("For issue."),
+        send_email: bool("For issue: email the code (default true)."),
+        note: str2("Note for the ledger.")
+      },
+      required: ["action"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => {
+      switch (a3.action) {
+        case "issue":
+          return say(
+            lang,
+            `Issue a gift card for ${q2(a3.recipient_name, "the recipient")}.`,
+            `\u70BA${q2(a3.recipient_name, "\u6536\u4EF6\u4EBA")}\u767C\u51FA\u79AE\u54C1\u5361\u3002`
+          );
+        case "redeem":
+          return say(
+            lang,
+            `Take ${a3.amount_minor} (minor units) off gift card #${a3.id}.`,
+            `\u5F9E\u79AE\u54C1\u5361 #${a3.id} \u6263\u9664 ${a3.amount_minor}\uFF08\u6700\u5C0F\u55AE\u4F4D\uFF09\u3002`
+          );
+        case "void":
+          return say(lang, `Void gift card #${a3.id} (it can no longer be used).`, `\u4F5C\u5EE2\u79AE\u54C1\u5361 #${a3.id}\u3002`);
+        default:
+          return say(lang, "Look up a gift card.", "\u67E5\u8A62\u79AE\u54C1\u5361\u3002");
+      }
+    },
+    run: (ctx, a3) => {
+      switch (a3.action) {
+        case "lookup":
+          return mb(ctx, "POST", "/voucher-codes/lookup", { code: a3.code });
+        case "issue":
+          return mb(ctx, "POST", "/voucher-codes", {
+            voucher_id: a3.voucher_id,
+            value_minor: a3.value_minor,
+            recipient_name: a3.recipient_name,
+            recipient_email: a3.recipient_email,
+            buyer_name: a3.buyer_name,
+            buyer_email: a3.buyer_email,
+            message: a3.message,
+            send_email: a3.send_email !== false
+          });
+        case "redeem":
+          return mb(ctx, "POST", `/voucher-codes/${Number(a3.id)}/redeem`, {
+            amount_minor: a3.amount_minor,
+            note: a3.note ?? ""
+          });
+        case "void":
+          return mb(ctx, "POST", `/voucher-codes/${Number(a3.id)}/void`, { note: a3.note ?? "" });
+        default:
+          throw new Error("action: lookup, issue, redeem or void.");
+      }
+    }
+  }),
+  tool({
+    name: "wp_booking_translate",
+    description: "Read or write the translations of booking content (type service | variant | category | staff | voucher, id, lang such as zh-hans or es; fields name, description). Without fields: read. The site's extra languages are set with wp_booking_settings_set settings.languages.",
+    parameters: {
+      type: "object",
+      properties: {
+        type: str2("service | variant | category | staff | voucher"),
+        id: int2("Item id."),
+        lang: str2("Language code."),
+        fields: obj("{ name, description } to save.")
+      },
+      required: ["type", "id"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => say(lang, `Save the ${a3.lang} translation of ${a3.type} #${a3.id}.`, `\u5132\u5B58 ${a3.type} #${a3.id} \u7684 ${a3.lang} \u7FFB\u8B6F\u3002`),
+    run: (ctx, a3) => a3.fields ? mb(ctx, "POST", "/translations", { type: a3.type, id: a3.id, lang: a3.lang, fields: a3.fields }) : mb(ctx, "GET", "/translations", void 0, { type: a3.type, id: a3.id })
+  })
+];
 var RESTYLE = /* @__PURE__ */ new Set([
   "wp_page_markup_set",
   "wp_post_save",
@@ -37972,7 +38541,8 @@ var wordpressTools = [
   ...themeTools,
   ...seoTools,
   ...elementTools,
-  ...cssTools
+  ...cssTools,
+  ...bookingTools
 ].map(withRestyle);
 
 // ../../packages/tools/src/index.ts
@@ -41383,7 +41953,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.17",
+  version: "0.12.19",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -60620,6 +61190,92 @@ function registerWp(program3) {
   wp.command("security").description(
     "security check: vulnerable or outdated plugins, themes and WordPress, risky settings, admins, WP-Cron, what visitors can see"
   ).option("--no-outside", "skip the checks from outside").action((o2, c2) => run(g3(c2), "wp_security_scan", { outside: o2.outside !== false }));
+  const items3 = (spec) => spec.split(",").map((x2) => {
+    const [service, variant] = x2.split(":");
+    return { service_id: Number(service), ...variant ? { variant_id: Number(variant) } : {} };
+  });
+  const booking = wp.command("booking").description("online booking: appointments, set-up, imports, gift cards");
+  booking.command("status").description("on or off, today, setup checklist, payments").action((_o, c2) => run(g3(c2), "wp_booking_status", {}));
+  booking.command("on").description("switch online booking on").action((_o, c2) => run(g3(c2), "wp_booking_turn_on", { enabled: true }));
+  booking.command("off").description("switch online booking off (nothing deleted)").action((_o, c2) => run(g3(c2), "wp_booking_turn_on", { enabled: false }));
+  booking.command("list").description("appointments").option("--from <date>").option("--to <date>").option("--status <s>").option("--search <text>").action((o2, c2) => run(g3(c2), "wp_booking_appointments", o2));
+  booking.command("get <id>").action((id, _o, c2) => run(g3(c2), "wp_booking_appointments", { id: Number(id) }));
+  booking.command("slots <treatments> <date>").description("free times; treatments as service[:option],\u2026 (ids)").option("--staff <id>").action(
+    (t, date3, o2, c2) => run(g3(c2), "wp_booking_availability", { items: items3(t), date: date3, staff_id: o2.staff ? Number(o2.staff) : void 0 })
+  );
+  booking.command("book <treatments> <date> <time>").description("book for a customer (venue time)").option("--customer <id>").option("--name <name>").option("--email <email>").option("--phone <phone>").option("--staff <id>").option("--notes <text>").option("--payment <p>", "venue | deposit | full").option("--force", "even if the time is taken").action(
+    (t, date3, time3, o2, c2) => run(g3(c2), "wp_booking_create", {
+      items: items3(t),
+      date: date3,
+      time: time3,
+      customer_id: o2.customer ? Number(o2.customer) : void 0,
+      customer: o2.customer ? void 0 : { name: o2.name, email: o2.email, phone: o2.phone },
+      staff_id: o2.staff ? Number(o2.staff) : void 0,
+      notes: o2.notes,
+      payment: o2.payment,
+      force: !!o2.force
+    })
+  );
+  booking.command("cancel <id>").option("--reason <text>").action(
+    (id, o2, c2) => run(g3(c2), "wp_booking_change", { id: Number(id), action: "cancel", reason: o2.reason })
+  );
+  booking.command("move <id> <date> <time>").option("--staff <id>").option("--force").action(
+    (id, date3, time3, o2, c2) => run(g3(c2), "wp_booking_change", {
+      id: Number(id),
+      action: "reschedule",
+      date: date3,
+      time: time3,
+      staff_id: o2.staff ? Number(o2.staff) : void 0,
+      force: !!o2.force
+    })
+  );
+  booking.command("mark <id> <status>").description("arrived | completed | no_show | confirmed").action(
+    (id, status, _o, c2) => run(g3(c2), "wp_booking_change", { id: Number(id), action: "status", status })
+  );
+  booking.command("refund <id> <payment> <amount>").description("amount in minor units (2500 = 25.00)").action(
+    (id, payment, amount, _o, c2) => run(g3(c2), "wp_booking_change", {
+      id: Number(id),
+      action: "refund",
+      payment_id: Number(payment),
+      amount: Number(amount)
+    })
+  );
+  booking.command("ls <resource>").description(
+    "services, categories, staff, time-off, customers, vouchers, voucher-codes, promos, bundles, pricing, settings, imports \u2026"
+  ).option("--id <id>").option("--search <text>").action(
+    (resource, o2, c2) => run(g3(c2), "wp_booking_list", { resource, id: o2.id ? Number(o2.id) : void 0, search: o2.search })
+  );
+  booking.command("save <resource> <file>").description("create (or with --id change) one item from a JSON file").option("--id <id>").action(
+    async (resource, file, o2, c2) => run(g3(c2), "wp_booking_save", { resource, id: o2.id ? Number(o2.id) : void 0, data: await json(file) })
+  );
+  booking.command("rm <resource> <id>").action(
+    (resource, id, _o, c2) => run(g3(c2), "wp_booking_save", { resource, id: Number(id), delete: true })
+  );
+  booking.command("settings <file>").description("JSON { settings?, location?, hours? }").action(async (file, _o, c2) => run(g3(c2), "wp_booking_settings_set", await json(file)));
+  booking.command("import <source>").description(
+    "a Fresha page URL, a catalogue .json, or a .csv (--kind clients|appointments|gift_cards); preview unless --apply"
+  ).option("--kind <kind>").option("--apply", "import (default: preview only)").action(async (src, o2, c2) => {
+    const isUrl = /^https?:\/\//.test(src);
+    const source = isUrl ? "fresha" : src.endsWith(".csv") ? "csv" : "json";
+    const body = isUrl ? { url: src } : source === "csv" ? { csv: await readFile2(src, "utf8"), kind: o2.kind } : { json: await readFile2(src, "utf8") };
+    return run(g3(c2), o2.apply ? "wp_booking_import" : "wp_booking_import_preview", { source, ...body });
+  });
+  booking.command("import-undo <id>").action((id, _o, c2) => run(g3(c2), "wp_booking_import", { undo_id: Number(id) }));
+  booking.command("gift <action>").description("lookup --code | issue --voucher/--value --to-name --to-email | redeem --id --amount | void --id").option("--code <code>").option("--id <id>").option("--amount <minor>").option("--voucher <id>").option("--value <minor>").option("--to-name <name>").option("--to-email <email>").option("--from-name <name>").option("--from-email <email>").option("--message <text>").action(
+    (action, o2, c2) => run(g3(c2), "wp_gift_card", {
+      action,
+      code: o2.code,
+      id: o2.id ? Number(o2.id) : void 0,
+      amount_minor: o2.amount ? Number(o2.amount) : void 0,
+      voucher_id: o2.voucher ? Number(o2.voucher) : void 0,
+      value_minor: o2.value ? Number(o2.value) : void 0,
+      recipient_name: o2.toName,
+      recipient_email: o2.toEmail,
+      buyer_name: o2.fromName,
+      buyer_email: o2.fromEmail,
+      message: o2.message
+    })
+  );
   wp.command("cron-rm <hook>").description("remove a scheduled job nothing runs any more (left by a removed plugin)").action((hook, _o, c2) => run(g3(c2), "wp_cron_unschedule", { hook }));
   seo.command("get <page>").description("stored fields and what the page outputs").action((p2, _o, c2) => run(g3(c2), "wp_seo_get", { page: p2 }));
   seo.command("set <page>").description("set a page's SEO fields").option("--title <t>").option("--description <d>").option("--keywords <k>").option("--robots <r>", '"index, follow" | "noindex, follow" | "noindex, nofollow"').option("--canonical <url>").option("--og-image <url>").option("--from <file>", "several pages: JSON { items: [{ page, title, description, \u2026 }] }").action(async (p2, o2, c2) => {
@@ -61028,11 +61684,11 @@ program2.command("login").description("sign in in your browser (device code)").o
   act(async (opts) => {
     if (process.env.CMO_API_KEY) say3("Note: CMO_API_KEY is set and is used instead of this sign-in.");
     const res = await deviceLogin((s2) => {
-      const link = s2.verification_uri_complete ?? s2.verification_uri;
-      say3(`Open ${link}
+      const link2 = s2.verification_uri_complete ?? s2.verification_uri;
+      say3(`Open ${link2}
 and check the code: ${s2.user_code}
 Waiting for you to approve\u2026`);
-      if (opts.browser !== false) openUrl(link);
+      if (opts.browser !== false) openUrl(link2);
     });
     const { session: s } = session();
     await s.signIn(res);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.12.17",
+	"version": "0.12.19",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",