@cmo-so/cli 0.12.6 → 0.12.8

package/dist/cmo.mjs

@@ -16844,6 +16844,9 @@ var sectionTools = [
         section: str2("Section id from wp_page_get (s2, m4) or its type (faq)."),
         edits: EDITS,
         slots: obj("Complete new content for the section (same type unless type is given)."),
+        markup: str2(
+          "Replace the section with this block markup (one top-level block; written by a coding agent; PHP never)."
+        ),
         type: str2("With slots: change the section to this type."),
         faq: obj("FAQ changes.", {
           add: arr("Questions to add.", obj("", { q: str2(""), a: str2("") })),
@@ -16875,6 +16878,10 @@ var sectionTools = [
         if (type !== "faq") throw new Error(`Section ${ref} is a ${type} section, not the FAQ.`);
         next = editFaq(target.block, a.faq, kit);
         note = { questions: describe2({ ...target, block: next }, kit.syncedTitles).counts?.questions };
+      } else if (typeof a.markup === "string") {
+        const bl = checkMarkup(a.markup, "markup").filter((b) => b.name);
+        if (bl.length !== 1) throw new Error("markup: give exactly one top-level block (wrap several in a group).");
+        next = bl[0];
       } else if (a.slots) {
         const t = String(a.type ?? type);
         const keepName = target.block.attrs.metadata?.name;
@@ -16895,7 +16902,7 @@ var sectionTools = [
           );
         next = r.block;
         note = { changed: r.changed };
-      } else throw new Error("Give edits, slots or faq.");
+      } else throw new Error("Give edits, slots, markup or faq.");
       return { blocks: replace(blocks, ref, next, kit.syncedTitles), note };
     })
   }),
@@ -17297,7 +17304,7 @@ var childTools = [
           files[`assets/fonts/${name}`] = btoa(bin);
           let fam = fams.find((x) => x.slug === f.slug);
           const stack = `"${f.family}", ${f.fallback || "sans-serif"}`;
-          if (!fam || !fam.fontFamily.includes(`"${f.family}"`)) {
+          if (!fam?.fontFamily.includes(`"${f.family}"`)) {
             const keep = fam ? fams.indexOf(fam) : -1;
             fam = { slug: f.slug, name: f.family, fontFamily: stack, fontFace: [] };
             if (keep >= 0) fams[keep] = fam;
@@ -17787,7 +17794,560 @@ var elementTools = [
     }
   })
 ];
+function checkMarkup(markup, what) {
+  if (typeof markup !== "string" || !markup.trim()) throw new Error(`${what}: give block markup (<!-- wp:\u2026 -->).`);
+  if (/<\?(php|=)?/i.test(markup)) throw new Error(`${what}: PHP isn't allowed.`);
+  const blocks = parse(markup);
+  if (!blocks.some((b) => b.name)) throw new Error(`${what}: give block markup (<!-- wp:\u2026 -->), not plain HTML.`);
+  return blocks;
+}
+var POST_FIELDS = "id,title,slug,link,status,date,modified,categories,tags,featured_media,excerpt,meta";
+async function termIds(site, taxonomy, names) {
+  if (!Array.isArray(names)) return void 0;
+  const ids3 = [];
+  for (const n2 of names) {
+    if (typeof n2 === "number") {
+      ids3.push(n2);
+      continue;
+    }
+    const name = String(n2).trim();
+    if (!name) continue;
+    const found = await call(site, {
+      path: `/wp/v2/${taxonomy}`,
+      query: { search: name, per_page: 20, _fields: "id,name" }
+    });
+    const hit = found.find((t) => t.name.toLowerCase() === name.toLowerCase());
+    ids3.push(
+      hit ? hit.id : (await call(site, { method: "POST", path: `/wp/v2/${taxonomy}`, body: { name } })).id
+    );
+  }
+  return ids3;
+}
+var fullTools = [
+  tool({
+    name: "wp_page_markup_get",
+    description: "A page's full block markup (Gutenberg), for coding agents that edit blocks directly; with section, only that section's markup. Pair with wp_page_markup_set or wp_section_update markup.",
+    parameters: {
+      type: "object",
+      properties: { page: PAGE, section: str2("Only this section (id or type).") },
+      required: ["page"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await findPage(site, a.page, true);
+      const raw = p.content?.raw ?? "";
+      if (a.section) {
+        const kit = await siteKit(site);
+        const l = sectionAt(parse(raw), String(a.section), kit.syncedTitles);
+        return { id: p.id, path: path(p.link), modified: p.modified, section: l.id, markup: serialize([l.block]) };
+      }
+      return { id: p.id, path: path(p.link), modified: p.modified, template: p.template || "default", markup: raw };
+    }
+  }),
+  tool({
+    name: "wp_page_markup_set",
+    description: "Replace a page's whole content with block markup a coding agent wrote (Gutenberg blocks, Maggie Core classes and Tailwind classes allowed; PHP never). Read it first with wp_page_markup_get and pass its modified as expect_modified. preview shows the sections before and after without saving. wp_page_undo goes back.",
+    parameters: {
+      type: "object",
+      properties: {
+        page: PAGE,
+        markup: str2("The page's new block markup."),
+        expect_modified: EXPECT,
+        preview: PREVIEW
+      },
+      required: ["page", "markup"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Replace the content of page ${q2(a.page, "")} with new block markup.`,
+      `\u7528\u65B0\u7684\u5340\u584A\u5167\u5BB9\u53D6\u4EE3\u9801\u9762 ${q2(a.page, "")}\u3002`
+    ),
+    run: (ctx, a) => changePage(ctx, a, () => ({ blocks: checkMarkup(a.markup, "markup") }))
+  }),
+  tool({
+    name: "wp_posts_list",
+    description: "Blog posts on the site (newest first): id, title, path, status, date, categories and tags. Search words, status, category.",
+    parameters: {
+      type: "object",
+      properties: {
+        search: str2("Words in the title or content."),
+        status: { type: "string", enum: ["publish", "draft", "future", "private", "any"], description: "Default any." },
+        category: str2("Category name or id."),
+        limit: int2("How many (default 30, at most 100).")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const cat = a.category ? (await termIds(site, "categories", [a.category]).catch(() => void 0))?.[0] : void 0;
+      const rows = await call(site, {
+        path: "/wp/v2/posts",
+        query: {
+          context: "edit",
+          search: a.search || void 0,
+          status: a.status && a.status !== "any" ? String(a.status) : "publish,draft,future,private,pending",
+          categories: cat,
+          per_page: Math.min(100, Math.max(1, Number(a.limit) || 30)),
+          _fields: "id,title,link,status,date,categories,tags"
+        }
+      });
+      return {
+        count: rows.length,
+        items: rows.map((r) => ({
+          id: r.id,
+          title: r.title.raw ?? r.title.rendered,
+          path: path(r.link),
+          status: r.status,
+          date: r.date,
+          categories: r.categories,
+          tags: r.tags
+        }))
+      };
+    }
+  }),
+  tool({
+    name: "wp_post_get",
+    description: "One blog post in full: title, slug, status, dates, categories, tags, featured image, excerpt, SEO fields and its content (block markup or HTML).",
+    parameters: { type: "object", properties: { post: int2("The post id (wp_posts_list).") }, required: ["post"] },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const p = await call(siteOf(ctx), {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: `${POST_FIELDS},content` }
+      });
+      return {
+        ...p,
+        title: p.title.raw,
+        path: path(p.link),
+        excerpt: p.excerpt?.raw ?? "",
+        content: p.content?.raw ?? ""
+      };
+    }
+  }),
+  tool({
+    name: "wp_post_save",
+    description: "Create a blog post (no post id) or change one (post id): title, content (block markup or HTML), excerpt, slug (a published post's old address gets a 301), status (draft, publish, private, future with date), date, categories and tags (names; new ones are created), featured_media, SEO title/description. New posts are drafts unless status says otherwise. CMO.so's blog autopilot keeps writing its own posts; this is for the owner's own changes.",
+    parameters: {
+      type: "object",
+      properties: {
+        post: int2("The post to change (leave out to create one)."),
+        title: str2(""),
+        content: str2("Block markup or HTML."),
+        excerpt: str2(""),
+        slug: str2(""),
+        status: { type: "string", enum: ["draft", "publish", "private", "future"], description: "" },
+        date: str2("Publish date (ISO 8601), for scheduled posts."),
+        categories: arr("Category names (or ids).", { type: "string" }),
+        tags: arr("Tag names (or ids).", { type: "string" }),
+        featured_media: int2("Media id (wp_media_upload)."),
+        seo_title: str2(""),
+        seo_description: str2(""),
+        expect_modified: EXPECT
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.post ? say(
+      lang,
+      `Change blog post #${String(a.post)} on your website${a.status === "publish" ? " (published)" : ""}.`,
+      `\u4FEE\u6539\u7DB2\u7AD9\u4E0A\u7684\u6587\u7AE0 #${String(a.post)}\u3002`
+    ) : say(
+      lang,
+      `Create the blog post ${q2(a.title, "")} on your website (${a.status === "publish" ? "published" : "as a draft"}).`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5EFA\u7ACB\u6587\u7AE0 ${q2(a.title, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const body = {};
+      for (const k of ["title", "excerpt", "slug", "status", "date"])
+        if (typeof a[k] === "string" && a[k] !== "") body[k] = a[k];
+      if (typeof a.content === "string") {
+        if (/<\?(php|=)?/i.test(a.content)) throw new Error("content: PHP isn't allowed.");
+        body.content = a.content;
+      }
+      if (typeof a.featured_media === "number") body.featured_media = a.featured_media;
+      const cats = await termIds(site, "categories", a.categories);
+      const tags = await termIds(site, "tags", a.tags);
+      if (cats) body.categories = cats;
+      if (tags) body.tags = tags;
+      const meta4 = {};
+      if (typeof a.seo_title === "string") meta4.maggie_seo_title = a.seo_title;
+      if (typeof a.seo_description === "string") meta4.maggie_seo_description = a.seo_description;
+      if (Object.keys(meta4).length) body.meta = meta4;
+      if (!a.post) {
+        if (!body.title) throw new Error("A new post needs a title.");
+        body.status = body.status ?? "draft";
+        const p2 = await call(site, {
+          method: "POST",
+          path: "/wp/v2/posts",
+          query: { _fields: "id,link,status,modified" },
+          body
+        });
+        if (!p2?.id) throw new Error("WordPress didn't create the post.");
+        return { created: true, id: p2.id, path: path(p2.link), status: p2.status, modified: p2.modified };
+      }
+      const before = await call(site, {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: "id,link,status,modified" }
+      });
+      if (a.expect_modified && before.modified !== a.expect_modified)
+        throw new Error(
+          `The post changed in WordPress since you read it (${before.modified}). Read it again and redo the change.`
+        );
+      if (!Object.keys(body).length) throw new Error("Nothing to change.");
+      const p = await call(site, {
+        method: "POST",
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { _fields: "id,link,status,modified" },
+        body
+      });
+      let redirect = null;
+      if (before.status === "publish" && path(p.link) !== path(before.link))
+        redirect = (await redirectsSet(site, { set: [{ from: path(before.link), to: path(p.link), code: 301 }] })).items.find((r) => r.from === path(before.link));
+      return { saved: true, id: p.id, path: path(p.link), status: p.status, modified: p.modified, redirect };
+    }
+  }),
+  tool({
+    name: "wp_post_delete",
+    description: "Move a blog post to the WordPress trash (restorable for 30 days) and redirect its address (301) to another page, by default the blog list or the homepage.",
+    parameters: {
+      type: "object",
+      properties: {
+        post: int2("The post id."),
+        redirect_to: str2('Where its visitors go (path); default /. "410" = gone.')
+      },
+      required: ["post"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Move blog post #${String(a.post)} to the trash and redirect its address.`,
+      `\u628A\u6587\u7AE0 #${String(a.post)} \u79FB\u5230\u5783\u573E\u6876\u4E26\u8F49\u5740\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await call(site, {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: "id,link,status" }
+      });
+      await call(site, { method: "DELETE", path: `/wp/v2/posts/${p.id}`, query: { _fields: "id,status" } });
+      const to = String(a.redirect_to ?? "/");
+      const from = path(p.link);
+      const r = p.status === "publish" ? await redirectsSet(site, { set: to === "410" ? [{ from, code: 410 }] : [{ from, to, code: 301 }] }) : null;
+      return {
+        trashed: true,
+        id: p.id,
+        path: from,
+        redirect: r ? to === "410" ? { from, code: 410 } : { from, to, code: 301 } : null
+      };
+    }
+  }),
+  tool({
+    name: "wp_terms_list",
+    description: "The blog's categories or tags: id, name, slug, description, post count.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        search: str2("")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const rows = await all(
+        siteOf(ctx),
+        `/wp/v2/${tax}`,
+        { search: a.search || void 0, _fields: "id,name,slug,description,count,parent" },
+        500
+      );
+      return { count: rows.length, items: rows };
+    }
+  }),
+  tool({
+    name: "wp_term_save",
+    description: "Create a category or tag (no id) or change one (id): name, slug, description, parent (categories). The theme shows the description on its archive page.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        id: int2("The term to change."),
+        name: str2(""),
+        slug: str2(""),
+        description: str2(""),
+        parent: int2("Parent category id.")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `${a.id ? "Change" : "Create"} the ${a.taxonomy === "tags" ? "tag" : "category"} ${q2(a.name, a.id ? `#${String(a.id)}` : "")} on your website.`,
+      `${a.id ? "\u4FEE\u6539" : "\u5EFA\u7ACB"}\u7DB2\u7AD9\u7684${a.taxonomy === "tags" ? "\u6A19\u7C64" : "\u5206\u985E"} ${q2(a.name, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const body = {};
+      for (const k of ["name", "slug", "description"]) if (typeof a[k] === "string") body[k] = a[k];
+      if (typeof a.parent === "number" && tax === "categories") body.parent = a.parent;
+      if (!a.id && !body.name) throw new Error("A new term needs a name.");
+      return call(siteOf(ctx), {
+        method: "POST",
+        path: a.id ? `/wp/v2/${tax}/${Number(a.id)}` : `/wp/v2/${tax}`,
+        query: { _fields: "id,name,slug,description,count,link" },
+        body
+      });
+    }
+  }),
+  tool({
+    name: "wp_term_delete",
+    description: "Delete a category or tag by id. Posts keep their other terms; posts left without a category go to the default category, which can't be deleted. Terms have no trash: the result gives name, slug and description to recreate it with wp_term_save.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        id: int2("The term to delete (from wp_terms_list).")
+      },
+      required: ["id"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Delete the ${a.taxonomy === "tags" ? "tag" : "category"} #${String(a.id)} from your website (posts stay; it can be recreated, not restored).`,
+      `\u522A\u9664\u7DB2\u7AD9\u7684${a.taxonomy === "tags" ? "\u6A19\u7C64" : "\u5206\u985E"} #${String(a.id)}\uFF08\u6587\u7AE0\u4FDD\u7559\uFF1B\u53EF\u91CD\u65B0\u5EFA\u7ACB\uFF0C\u7121\u6CD5\u9084\u539F\uFF09\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const id = Number(a.id);
+      if (!Number.isInteger(id) || id <= 0) throw new Error("id: the term id from wp_terms_list.");
+      if (tax === "categories") {
+        const st = await call(site, {
+          path: "/wp/v2/settings",
+          query: { _fields: "default_category" }
+        });
+        if (Number(st.default_category ?? 1) === id)
+          throw new Error("That is the default category; it can't be deleted.");
+      }
+      const before = await call(site, { path: `/wp/v2/${tax}/${id}`, query: { _fields: "id,name,slug,description,count,parent" } });
+      await call(site, { method: "DELETE", path: `/wp/v2/${tax}/${id}`, query: { force: "true" } });
+      return {
+        deleted: true,
+        taxonomy: tax,
+        ...before,
+        undo: `wp_term_save ${tax} name "${before.name}" slug ${before.slug}`
+      };
+    }
+  }),
+  tool({
+    name: "wp_settings_get",
+    description: "The site's general settings: title, tagline, search-engine visibility, language, timezone, date and time formats, start of week, posts per page, homepage and posts page, logo and icon.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx) => call(siteOf(ctx), {
+      path: "/wp/v2/settings",
+      query: {
+        _fields: "title,description,url,blog_public,language,timezone,date_format,time_format,start_of_week,posts_per_page,show_on_front,page_on_front,page_for_posts,site_logo,site_icon"
+      }
+    })
+  }),
+  tool({
+    name: "wp_settings_set",
+    description: "Change the site's general settings: title, tagline (description), search_engines (true = let Google index the site, false = discourage it), timezone (e.g. Europe/London), date_format, time_format, start_of_week (0 Sunday \u2026 6), posts_per_page, site_logo and site_icon (media ids). Returns before and after. Homepage and posts page: wp_site_home_set.",
+    parameters: {
+      type: "object",
+      properties: {
+        title: str2("Site title."),
+        description: str2("Tagline."),
+        search_engines: bool("true: visible to search engines; false: ask them not to index the site."),
+        timezone: str2("e.g. Europe/London."),
+        date_format: str2("e.g. j F Y."),
+        time_format: str2("e.g. H:i."),
+        start_of_week: int2("0 Sunday \u2026 6 Saturday."),
+        posts_per_page: int2("Posts on blog pages."),
+        site_logo: int2("Media id of the logo."),
+        site_icon: int2("Media id of the site icon (512\xD7512).")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.search_engines === true ? say(
+      lang,
+      "Change your website's settings and let search engines index it.",
+      "\u4FEE\u6539\u7DB2\u7AD9\u8A2D\u5B9A\uFF0C\u4E26\u5141\u8A31\u641C\u5C0B\u5F15\u64CE\u6536\u9304\u3002"
+    ) : a.search_engines === false ? say(
+      lang,
+      "Change your website's settings and ask search engines not to index it.",
+      "\u4FEE\u6539\u7DB2\u7AD9\u8A2D\u5B9A\uFF0C\u4E26\u8981\u6C42\u641C\u5C0B\u5F15\u64CE\u4E0D\u8981\u6536\u9304\u3002"
+    ) : say(lang, "Change your website's general settings.", "\u4FEE\u6539\u7DB2\u7AD9\u7684\u4E00\u822C\u8A2D\u5B9A\u3002"),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const body = {};
+      for (const k of ["title", "description", "date_format", "time_format", "timezone"])
+        if (typeof a[k] === "string") body[k] = a[k];
+      for (const k of ["start_of_week", "posts_per_page", "site_logo", "site_icon"])
+        if (typeof a[k] === "number") body[k] = a[k];
+      if (typeof a.search_engines === "boolean") body.blog_public = a.search_engines ? 1 : 0;
+      if (!Object.keys(body).length) throw new Error("Nothing to change.");
+      const fields = Object.keys(body).join(",");
+      const before = await call(site, { path: "/wp/v2/settings", query: { _fields: fields } });
+      if ("blog_public" in body && !("blog_public" in before))
+        throw new Error(
+          "This site's theme doesn't expose search-engine visibility yet: update Maggie Core (wp_theme_update) to 0.11.4 or later."
+        );
+      const after = await call(site, {
+        method: "POST",
+        path: "/wp/v2/settings",
+        query: { _fields: fields },
+        body
+      });
+      return { before, after };
+    }
+  }),
+  tool({
+    name: "wp_plugins_list",
+    description: "The site's plugins: name, version, active or not, and whether an update is waiting.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx) => {
+      const rows = await call(siteOf(ctx), { path: "/wp/v2/plugins", query: { _fields: "plugin,name,version,status" } });
+      return { count: rows.length, items: rows };
+    }
+  }),
+  tool({
+    name: "wp_plugin_set",
+    description: "Install a plugin from WordPress.org by its slug (e.g. wpforms-lite), and/or activate, deactivate or delete an installed one (plugin id from wp_plugins_list, e.g. akismet/akismet; only an inactive plugin can be deleted, and its settings may go with it). Installing runs the plugin's code on the site: only well-known plugins the owner asked for.",
+    parameters: {
+      type: "object",
+      properties: {
+        install: str2("WordPress.org slug to install."),
+        plugin: str2("Installed plugin id (folder/file) to change."),
+        status: {
+          type: "string",
+          enum: ["active", "inactive", "deleted"],
+          description: "Activate, deactivate (after installing, default inactive), or deleted: remove an inactive plugin's files (deactivate it first; Maggie Press can't be removed here)."
+        }
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.install ? say(
+      lang,
+      `Install the plugin ${q2(a.install, "")} from WordPress.org on your website${a.status === "active" ? " and activate it" : ""}.`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5B89\u88DD WordPress.org \u63D2\u4EF6 ${q2(a.install, "")}${a.status === "active" ? "\u4E26\u555F\u7528" : ""}\u3002`
+    ) : a.status === "deleted" ? say(
+      lang,
+      `Delete the plugin ${q2(a.plugin, "")} from your website (its files are removed; reinstall it from WordPress.org to undo, its settings may be lost).`,
+      `\u5F9E\u7DB2\u7AD9\u522A\u9664\u63D2\u4EF6 ${q2(a.plugin, "")}\uFF08\u6A94\u6848\u6703\u88AB\u79FB\u9664\uFF1B\u53EF\u5F9E WordPress.org \u91CD\u65B0\u5B89\u88DD\uFF0C\u8A2D\u5B9A\u53EF\u80FD\u907A\u5931\uFF09\u3002`
+    ) : say(
+      lang,
+      `${a.status === "active" ? "Activate" : "Deactivate"} the plugin ${q2(a.plugin, "")} on your website.`,
+      `${a.status === "active" ? "\u555F\u7528" : "\u505C\u7528"}\u7DB2\u7AD9\u4E0A\u7684\u63D2\u4EF6 ${q2(a.plugin, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      if (a.install) {
+        if (!/^[a-z0-9-]{2,80}$/.test(String(a.install)))
+          throw new Error("install: a WordPress.org plugin slug, e.g. wpforms-lite.");
+        return call(site, {
+          method: "POST",
+          path: "/wp/v2/plugins",
+          query: { _fields: "plugin,name,version,status" },
+          body: { slug: a.install, status: a.status === "active" ? "active" : "inactive" }
+        });
+      }
+      if (!a.plugin || !a.status) throw new Error("Give install (a slug), or plugin and status.");
+      if (!/^[a-z0-9._-]+(\/[a-z0-9._-]+)?$/i.test(String(a.plugin)))
+        throw new Error("plugin: the id from wp_plugins_list, e.g. akismet/akismet.");
+      const id = String(a.plugin).replace(/\.php$/, "");
+      if (a.status === "deleted") {
+        if (/^maggie-?press\//i.test(id))
+          throw new Error("Maggie Press runs the site's styles; it can't be deleted here.");
+        const cur = await call(site, {
+          path: `/wp/v2/plugins/${id}`,
+          query: { _fields: "plugin,name,version,status" }
+        });
+        if (cur.status !== "inactive")
+          throw new Error(`${cur.name} is ${cur.status}: deactivate it first (status inactive), then delete it.`);
+        await call(site, { method: "DELETE", path: `/wp/v2/plugins/${id}` });
+        const slug = id.split("/")[0];
+        return {
+          deleted: true,
+          plugin: cur.plugin,
+          name: cur.name,
+          version: cur.version,
+          undo: `wp_plugin_set install ${slug}`
+        };
+      }
+      return call(site, {
+        method: "POST",
+        path: `/wp/v2/plugins/${id}`,
+        query: { _fields: "plugin,name,version,status" },
+        body: { status: a.status }
+      });
+    }
+  }),
+  tool({
+    name: "wp_api_read",
+    description: "Read any WordPress REST route the site builder may use (GET only), for coding agents exploring a site: e.g. /wp/v2/types, /wp/v2/taxonomies, /wp/v2/templates, /wp/v2/block-patterns/patterns, /wp/v2/global-styles/themes/maggie-core, /maggie-core/v1/site. Results are trimmed to 60 items.",
+    parameters: {
+      type: "object",
+      properties: { route: str2("The REST route under /wp-json, e.g. /wp/v2/types."), query: obj("Query parameters.") },
+      required: ["route"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const r = await siteOf(ctx).request({
+        path: String(a.route),
+        query: a.query ?? {}
+      });
+      const data = Array.isArray(r.data) ? r.data.slice(0, 60) : r.data;
+      return { status: r.status, total: r.total ?? null, data };
+    }
+  })
+];
 var wordpressTools = [
+  ...fullTools,
   ...siteTools,
   ...pageTools,
   ...sectionTools,
@@ -21206,7 +21766,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.6",
+  version: "0.12.8",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -32365,6 +32925,71 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
   theme.command("status", { isDefault: true }).description("installed and latest version, rollback versions").action((_o, c) => run(g(c), "wp_theme_updates", {}));
   theme.command("update").description("update to the latest (homepage checked; rolled back by itself if it breaks)").action((_o, c) => run(g(c), "wp_theme_update", {}));
   theme.command("rollback <version>").description("put a kept earlier version back").action((version2, _o, c) => run(g(c), "wp_theme_update", { rollback_to: version2 }));
+  wp.command("markup <page>").description(
+    "a page's block markup (Gutenberg); --set replaces it from a file, --section reads or sets one section"
+  ).option("--section <id>", "one section (id or type)").option("--set <file>", "replace with this block markup (- for stdin)").option("--preview", "show the sections before and after, save nothing").action(async (p, o, c) => {
+    if (!o.set)
+      return run(
+        g(c),
+        "wp_page_markup_get",
+        { page: p, section: o.section },
+        (v) => String(v.markup)
+      );
+    const markup = o.set === "-" ? await readStdin() : await readFile2(o.set, "utf8");
+    if (o.section)
+      return run(g(c), "wp_section_update", { page: p, section: o.section, markup, preview: !!o.preview });
+    return run(g(c), "wp_page_markup_set", { page: p, markup, preview: !!o.preview });
+  });
+  const posts2 = wp.command("posts").description("blog posts on the site");
+  posts2.command("ls", { isDefault: true }).option("--search <words>").option("--status <status>", "publish, draft, future, private or any").option("--category <name>").option("-n, --limit <n>", "how many", "30").action(
+    (o, c) => run(g(c), "wp_posts_list", { search: o.search, status: o.status, category: o.category, limit: Number(o.limit) })
+  );
+  posts2.command("get <id>").action((id, _o, c) => run(g(c), "wp_post_get", { post: Number(id) }));
+  posts2.command("save [id]").description(
+    "create (no id) or change a post: JSON file with title, content, excerpt, slug, status, categories, tags\u2026"
+  ).requiredOption("--from <file>", "JSON (- for stdin)").action(
+    async (id, o, c) => run(g(c), "wp_post_save", { ...await json(o.from), ...id ? { post: Number(id) } : {} })
+  );
+  posts2.command("delete <id>").description("move to the trash and redirect its address").option("--redirect-to <path>").action(
+    (id, o, c) => run(g(c), "wp_post_delete", { post: Number(id), redirect_to: o.redirectTo })
+  );
+  const terms = wp.command("terms").description("categories and tags");
+  terms.command("ls", { isDefault: true }).option("--tags", "tags instead of categories").option("--search <words>").action(
+    (o, c) => run(g(c), "wp_terms_list", { taxonomy: o.tags ? "tags" : "categories", search: o.search })
+  );
+  terms.command("save [id]").option("--tags", "a tag instead of a category").option("--name <name>").option("--slug <slug>").option("--description <text>").action(
+    (id, o, c) => run(g(c), "wp_term_save", {
+      taxonomy: o.tags ? "tags" : "categories",
+      id: id ? Number(id) : void 0,
+      name: o.name,
+      slug: o.slug,
+      description: o.description
+    })
+  );
+  terms.command("delete <id>").option("--tags", "a tag instead of a category").action(
+    (id, o, c) => run(g(c), "wp_term_delete", { taxonomy: o.tags ? "tags" : "categories", id: Number(id) })
+  );
+  const settings2 = wp.command("settings").description("the site's general settings");
+  settings2.command("get", { isDefault: true }).action((_o, c) => run(g(c), "wp_settings_get", {}));
+  settings2.command("set [fields...]").description(
+    "title=\u2026 description=\u2026 timezone=Europe/London date_format=\u2026 posts_per_page=10 search_engines=true|false"
+  ).action(async (fields, _o, c) => {
+    const args = {};
+    for (const [k, v] of pairs(fields))
+      args[k] = /^(true|false)$/.test(v) ? v === "true" : /^\d+$/.test(v) && k !== "title" && k !== "description" ? Number(v) : v;
+    await run(g(c), "wp_settings_set", args);
+  });
+  const plugins = wp.command("plugins").description("plugins: list, install from WordPress.org, activate, deactivate, delete (inactive only)");
+  plugins.command("ls", { isDefault: true }).action((_o, c) => run(g(c), "wp_plugins_list", {}));
+  plugins.command("install <slug>").option("--activate").action(
+    (slug, o, c) => run(g(c), "wp_plugin_set", { install: slug, status: o.activate ? "active" : "inactive" })
+  );
+  plugins.command("activate <plugin>").action((p, _o, c) => run(g(c), "wp_plugin_set", { plugin: p, status: "active" }));
+  plugins.command("deactivate <plugin>").action((p, _o, c) => run(g(c), "wp_plugin_set", { plugin: p, status: "inactive" }));
+  plugins.command("delete <plugin>").description("remove an inactive plugin's files (reinstall from WordPress.org to undo)").action((p, _o, c) => run(g(c), "wp_plugin_set", { plugin: p, status: "deleted" }));
+  wp.command("api <route>").description("read any allowed WordPress REST route (GET), e.g. /wp/v2/types").option("--query <json>", "query parameters as JSON").action(
+    (route, o, c) => run(g(c), "wp_api_read", { route, query: o.query ? JSON.parse(o.query) : void 0 })
+  );
   const child = wp.command("child").description("the site's Maggie child theme, on the site itself (data files only, backups kept)");
   child.command("status [slug]", { isDefault: true }).description("child themes, their files and backups; with a slug, its files in full").action((slug, _o, c) => run(g(c), "wp_child_theme_status", { slug }));
   child.command("create <slug>").description("create maggie-<name> from the site's current look").requiredOption("--name <name>").option("--empty", "start empty instead of from the site").option("--activate", "switch the site to it (checks the homepage looks the same)").action(
@@ -32395,7 +33020,7 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
       const opts = g(c);
       const colors = Object.fromEntries(pairs(o.color));
       const fonts = Object.fromEntries(pairs(o.font));
-      let settings2;
+      let settings3;
       let styles;
       const fontFiles = {};
       let header;
@@ -32403,9 +33028,9 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
       if (o.fromSite) {
         const site = await siteFor(opts);
         const s = await styleGet(site);
-        settings2 = structuredClone(s._user.settings ?? {});
+        settings3 = structuredClone(s._user.settings ?? {});
         styles = s._user.styles ?? {};
-        const families = settings2.typography?.fontFamilies?.theme ?? [];
+        const families = settings3.typography?.fontFamilies?.theme ?? [];
         for (const f of families)
           for (const face of f.fontFace ?? []) {
             const srcs = Array.isArray(face.src) ? face.src : [face.src];
@@ -32424,7 +33049,7 @@ ${table(r.issues, ["severity", "code", "path", "detail"])}`;
         footer = (await partGet(site, "footer").catch(() => null))?.content;
       }
       const files = {
-        ...childThemeFiles({ slug, name: o.name, colors, fonts, header, footer, settings: settings2, styles }),
+        ...childThemeFiles({ slug, name: o.name, colors, fonts, header, footer, settings: settings3, styles }),
         ...fontFiles
       };
       const dir = o.out ?? slug;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.12.6",
+	"version": "0.12.8",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",