@cmo-so/mcp 0.12.24 → 0.12.25

package/dist/cmo-mcp.mjs

@@ -24489,7 +24489,7 @@ var require_dist3 = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.24",
+  version: "0.12.25",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -46183,7 +46183,33 @@ var MB_RESOURCES = {
     what: "email campaigns (subject, body, button, segment) \u2014 send with wp_booking_campaign_send"
   },
   automations: { path: "/automations", write: false, what: "automated emails: we miss you, time to rebook, birthday" },
-  messages: { path: "/messages", write: false, what: "conversations with customers; id = customer id \u2192 the thread" }
+  messages: { path: "/messages", write: false, what: "conversations with customers; id = customer id \u2192 the thread" },
+  portfolio: {
+    path: "/portfolio",
+    write: true,
+    what: "portfolio photos of finished work (image_id, staff_id, service_id, caption)"
+  },
+  "form-responses": {
+    path: "/form-responses",
+    write: false,
+    what: "customers' answers to intake / consultation forms"
+  }
+};
+var MB_OWNER_ONLY = /^\/(gateways|payments\/settings|stripe|terminal|pay-links|pin|sms$|sms\/test|webhooks)|\/cards(\/|$)/;
+var mbPath = (raw) => {
+  const p2 = `/${String(raw ?? "").trim().replace(/^\/+/, "").replace(/^maggie-booking\/v1\/admin\/?/, "")}`.replace(/\/+$/, "");
+  if (p2 === "/" || /\.\.|[?#\s]/.test(p2) || !/^[\w\-/.]+$/.test(p2))
+    throw new Error("path: a route under /admin, such as /services or /sales/12/close (see wp_booking_routes).");
+  return p2;
+};
+var TILL_METHODS = ["cash", "card_reader", "gift_card", "credit", "pay_link", "other"];
+var escHtml = (t) => String(t ?? "").replace(/[&<>"]/g, (c2) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c2] ?? c2);
+var mbBlock = (name, attrs) => {
+  const n2 = name.startsWith("maggie/") ? name : `maggie/${name}`;
+  if (!/^maggie\/[a-z0-9-]+$/.test(n2))
+    throw new Error(`block: ${name} is not a booking block (see wp_booking_blocks).`);
+  const json = attrs && Object.keys(attrs).length ? ` ${JSON.stringify(attrs).replace(/--/g, "\\u002d\\u002d")}` : "";
+  return `<!-- wp:${n2}${json} /-->`;
 };
 var bookingTools = [
   tool({
@@ -46727,6 +46753,308 @@ var bookingTools = [
     gates: [...GATES],
     confirm: (a3, lang) => say(lang, `Save the ${a3.lang} translation of ${a3.type} #${a3.id}.`, `\u5132\u5B58 ${a3.type} #${a3.id} \u7684 ${a3.lang} \u7FFB\u8B6F\u3002`),
     run: (ctx, a3) => a3.fields ? mb(ctx, "POST", "/translations", { type: a3.type, id: a3.id, lang: a3.lang, fields: a3.fields }) : mb(ctx, "GET", "/translations", void 0, { type: a3.type, id: a3.id })
+  }),
+  tool({
+    name: "wp_booking_routes",
+    description: "Every Maggie Booking admin route on the site (the whole wp-admin \u2192 Bookings dashboard: calendar, till, team, roles, clock, pay runs, goals, stock, finance, loyalty, automations, upsells, safety, client files\u2026): path under /admin, methods, arguments, and owner_only for the payment / SMS / card set-up that only the owner does in wp-admin. filter: text to match in the path. Use with wp_booking_get and wp_booking_post for anything the other wp_booking_* tools don't cover. Read-only.",
+    parameters: { type: "object", properties: { filter: str2("Text in the path, e.g. sales, team, loyalty.") } },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a3) => {
+      const out = await mb(ctx, "GET", "/routes");
+      const f2 = String(a3.filter ?? "").toLowerCase();
+      const routes = f2 ? out.routes.filter((r) => r.path.toLowerCase().includes(f2)) : out.routes;
+      return {
+        count: routes.length,
+        routes,
+        note: "Write with wp_booking_post; owner_only routes are set up by the owner in wp-admin."
+      };
+    }
+  }),
+  tool({
+    name: "wp_booking_get",
+    description: "Read any Maggie Booking admin route (GET path under /admin, e.g. /overview, /sales/today, /sales/close?date=, /team/members, /clock, /pay-runs, /goals, /stock, /loyalty, /automations/rebook, /upsells, /patch-tests, /customers/12/wallet, /finance/accounts, /tools/settings) with an optional query. Find paths with wp_booking_routes. Money in minor units. Read-only.",
+    parameters: {
+      type: "object",
+      properties: { path: str2("Route under /admin."), query: obj("Query parameters, e.g. { date: '2026-11-06' }.") },
+      required: ["path"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => mb(ctx, "GET", mbPath(a3.path), void 0, a3.query ?? void 0)
+  }),
+  tool({
+    name: "wp_booking_post",
+    description: "Change anything in the Maggie Booking dashboard that the other wp_booking_* tools don't cover: method POST | PATCH | DELETE, path under /admin (from wp_booking_routes), body. Examples: team roles and permissions (/team/roles), clock in/out (/clock), pay runs (/pay-runs), goals (/goals), stock moves (/stock), loyalty programme (/loyalty), automated emails (/automations/{kind}), upsells (/upsells), patch tests (/patch-tests), client files (/customers/{id}/files), finance accounts (/finance/accounts), AI polish (/ai/polish), tool settings (/tools/settings), till settings (/sales/settings). Read the item first with wp_booking_get. Refused: owner_only routes (payment, card reader, saved card, SMS and PIN set-up) and charging a saved card.",
+    parameters: {
+      type: "object",
+      properties: {
+        method: str2("POST | PATCH | DELETE"),
+        path: str2("Route under /admin."),
+        body: obj("Fields to send.")
+      },
+      required: ["method", "path"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a3, lang) => {
+      const m = String(a3.method ?? "").toUpperCase();
+      const verb = m === "DELETE" ? ["Delete", "\u522A\u9664"] : m === "PATCH" ? ["Change", "\u4FEE\u6539"] : ["Send", "\u9001\u51FA"];
+      const body = a3.body ? ` ${JSON.stringify(a3.body).slice(0, 300)}` : "";
+      return say(lang, `${verb[0]} booking ${String(a3.path)}${body}.`, `${verb[1]}\u9810\u7D04 ${String(a3.path)}${body}\u3002`);
+    },
+    run: (ctx, a3) => {
+      const m = String(a3.method ?? "").toUpperCase();
+      if (!["POST", "PATCH", "DELETE"].includes(m)) throw new Error("method: POST, PATCH or DELETE.");
+      const p2 = mbPath(a3.path);
+      if (MB_OWNER_ONLY.test(p2))
+        throw new Error(
+          "Payment, card reader, saved card, SMS and PIN set-up is the owner's, in wp-admin \u2192 Bookings. Nothing was changed."
+        );
+      if (/^\/sales\/\d+\/payments$/.test(p2) && !TILL_METHODS.includes(String(a3.body?.method ?? "")))
+        throw new Error(`method: ${TILL_METHODS.join(", ")} (a saved card is charged by a person at the till).`);
+      if (/^\/(routes|blocks)$/.test(p2)) throw new Error("That route is read-only.");
+      return mb(ctx, m, p2, m === "DELETE" ? void 0 : a3.body ?? {});
+    }
+  }),
+  tool({
+    name: "wp_booking_till",
+    description: "The till (point of sale): action start (new sale: customer_id, items, note) | from_booking (booking_id \u2192 its sale with treatments and what was already paid) | items (sale id, items [{kind service|product|gift_card|custom, service_id, variant_id, product_id, name, quantity, unit_minor, staff_id}], discount, tips \u2014 replaces the lines) | pay (sale id, method cash|card_reader|gift_card|credit|pay_link|other, amount_minor (default: what is due), tendered_minor for cash, reference) | close (sale id) | receipt (sale id, email) | refund (sale id, all true or payments [{id, amount_minor}], reason, restock) | void (sale id, reason). Read sales with wp_booking_list resource sales and today's takings with wp_booking_daily_close. A saved card is never charged by an agent.",
+    parameters: {
+      type: "object",
+      properties: {
+        action: str2("start | from_booking | items | pay | close | receipt | refund | void"),
+        id: int2("Sale id."),
+        booking_id: int2("For from_booking."),
+        customer_id: int2("For start."),
+        items: arr("Sale lines.", obj("")),
+        discount: obj("For items: { percent } or { amount_minor }."),
+        tips: arr("For items: tips per team member.", obj("")),
+        note: str2("For start."),
+        method: str2("For pay."),
+        amount_minor: int2("For pay."),
+        tendered_minor: int2("For pay in cash."),
+        reference: str2("For pay."),
+        email: str2("For receipt (default: the customer's)."),
+        all: bool("For refund: everything."),
+        payments: arr("For refund: [{ id, amount_minor }].", obj("")),
+        restock: bool("For refund: put products back in stock."),
+        reason: str2("For refund / void.")
+      },
+      required: ["action"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a3, lang) => {
+      const money = (n2) => typeof n2 === "number" ? (n2 / 100).toFixed(2) : "";
+      switch (a3.action) {
+        case "pay":
+          return say(
+            lang,
+            `Take ${a3.amount_minor ? money(a3.amount_minor) : "what is due"} by ${a3.method} on sale #${a3.id}.`,
+            `\u5728\u92B7\u552E #${a3.id} \u4EE5 ${a3.method} \u6536\u53D6${a3.amount_minor ? ` ${money(a3.amount_minor)}` : "\u61C9\u4ED8\u91D1\u984D"}\u3002`
+          );
+        case "refund":
+          return say(
+            lang,
+            `Refund sale #${a3.id}${a3.all ? " in full" : ""}: money goes back to the customer.`,
+            `\u9000\u6B3E\u92B7\u552E #${a3.id}${a3.all ? "\uFF08\u5168\u984D\uFF09" : ""}\uFF1A\u6B3E\u9805\u6703\u9000\u56DE\u7D66\u5BA2\u4EBA\u3002`
+          );
+        case "void":
+          return say(lang, `Void sale #${a3.id}.`, `\u4F5C\u5EE2\u92B7\u552E #${a3.id}\u3002`);
+        case "close":
+          return say(lang, `Close sale #${a3.id}.`, `\u7D50\u675F\u92B7\u552E #${a3.id}\u3002`);
+        case "receipt":
+          return say(lang, `Email the receipt for sale #${a3.id}.`, `\u5BC4\u51FA\u92B7\u552E #${a3.id} \u7684\u6536\u64DA\u3002`);
+        case "from_booking":
+          return say(lang, `Open the till for booking #${a3.booking_id}.`, `\u70BA\u9810\u7D04 #${a3.booking_id} \u958B\u555F\u6536\u9280\u3002`);
+        case "items":
+          return say(lang, `Change the lines of sale #${a3.id}.`, `\u4FEE\u6539\u92B7\u552E #${a3.id} \u7684\u9805\u76EE\u3002`);
+        default:
+          return say(lang, "Start a new till sale.", "\u958B\u59CB\u4E00\u7B46\u65B0\u7684\u6536\u9280\u92B7\u552E\u3002");
+      }
+    },
+    run: (ctx, a3) => {
+      const id = Number(a3.id);
+      const need = () => {
+        if (!id) throw new Error("id: the sale id.");
+      };
+      switch (a3.action) {
+        case "start":
+          return mb(ctx, "POST", "/sales", { customer_id: a3.customer_id, items: a3.items, note: a3.note });
+        case "from_booking":
+          if (!a3.booking_id) throw new Error("booking_id is needed.");
+          return mb(ctx, "POST", `/sales/from-booking/${Number(a3.booking_id)}`, {});
+        case "items":
+          need();
+          return mb(ctx, "PATCH", `/sales/${id}`, {
+            ...a3.items ? { items: a3.items } : {},
+            ...a3.discount ? { discount: a3.discount } : {},
+            ...a3.tips ? { tips: a3.tips } : {}
+          });
+        case "pay":
+          need();
+          if (!TILL_METHODS.includes(String(a3.method)))
+            throw new Error(`method: ${TILL_METHODS.join(", ")} (a saved card is charged by a person at the till).`);
+          return mb(ctx, "POST", `/sales/${id}/payments`, {
+            method: a3.method,
+            amount_minor: a3.amount_minor,
+            tendered_minor: a3.tendered_minor,
+            reference: a3.reference,
+            key: `mcp-${id}-${a3.method}-${a3.amount_minor ?? "due"}-${Date.now()}`
+          });
+        case "close":
+          need();
+          return mb(ctx, "POST", `/sales/${id}/close`, {});
+        case "receipt":
+          need();
+          return mb(ctx, "POST", `/sales/${id}/receipt`, a3.email ? { email: a3.email } : {});
+        case "refund":
+          need();
+          return mb(ctx, "POST", `/sales/${id}/refund`, {
+            all: !!a3.all,
+            payments: a3.payments,
+            reason: a3.reason ?? "",
+            restock: a3.restock,
+            key: `mcp-refund-${id}-${Date.now()}`
+          });
+        case "void":
+          need();
+          return mb(ctx, "POST", `/sales/${id}/void`, { reason: a3.reason ?? "" });
+        default:
+          throw new Error("action: start, from_booking, items, pay, close, receipt, refund or void.");
+      }
+    }
+  }),
+  tool({
+    name: "wp_booking_daily_close",
+    description: "The day's till close (end-of-day report): takings by payment method, cash expected in the drawer, refunds, tips, open sales still to settle. date (Y-m-d, venue time; default today). Read-only.",
+    parameters: { type: "object", properties: { date: str2("Y-m-d") } },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => mb(ctx, "GET", "/sales/close", void 0, { date: a3.date })
+  }),
+  tool({
+    name: "wp_booking_blocks",
+    description: "The booking blocks visitors see (services menu, Book button, team, gift cards and balance check, manage booking, reviews, my bookings, products, plans and memberships, portfolio, AI receptionist chat) with their attributes, the Book page, booking links (#book, #book:<service_id>:<variant_id>) and the current visitor design. Use before wp_booking_page, wp_booking_design or adding a block to a page with wp_section_add / wp_page_markup_set. Read-only.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx) => mb(ctx, "GET", "/blocks")
+  }),
+  tool({
+    name: "wp_booking_page",
+    description: "Make or rebuild a booking page from sections, in the theme's full width (template page-wide): sections in order, each { heading, text } (a heading and/or a paragraph) or { block, attrs } with a booking block from wp_booking_blocks (e.g. booking-services {layout: cards, category}, booking-team, gift-cards, gift-card-check, plans {kind}, portfolio, booking-reviews, my-bookings, products, booking-manage). page_id: rebuild that page (it keeps its address; the earlier version stays in revisions); else a new page (title, slug). book_page true: make it the page the booking links open. status draft (default) or publish. preview true: show the markup only.",
+    parameters: {
+      type: "object",
+      properties: {
+        title: str2("Page title (new page)."),
+        slug: str2("Address (new page)."),
+        page_id: int2("Page to rebuild."),
+        sections: arr(
+          "Sections in order.",
+          obj("", { heading: str2(""), text: str2(""), block: str2(""), attrs: obj("") })
+        ),
+        book_page: bool("Use it as the Book page."),
+        status: str2("draft | publish"),
+        preview: bool("Markup only.")
+      },
+      required: ["sections"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => a3.page_id ? say(lang, `Rebuild page #${a3.page_id} as a booking page.`, `\u628A\u9801\u9762 #${a3.page_id} \u91CD\u5EFA\u70BA\u9810\u7D04\u9801\u9762\u3002`) : say(lang, `Create the booking page "${a3.title}".`, `\u5EFA\u7ACB\u9810\u7D04\u9801\u9762\u300C${a3.title}\u300D\u3002`),
+    run: async (ctx, a3) => {
+      const site = siteOf(ctx);
+      const sections = Array.isArray(a3.sections) ? a3.sections : [];
+      if (!sections.length) throw new Error("sections: at least one.");
+      const parts = [];
+      for (const s of sections) {
+        if (s.heading)
+          parts.push(
+            `<!-- wp:heading -->
+<h2 class="wp-block-heading">${escHtml(s.heading)}</h2>
+<!-- /wp:heading -->`
+          );
+        if (s.text) parts.push(`<!-- wp:paragraph -->
+<p>${escHtml(s.text)}</p>
+<!-- /wp:paragraph -->`);
+        if (s.block) parts.push(mbBlock(String(s.block), s.attrs ?? void 0));
+      }
+      const content = parts.join("\n\n");
+      if (a3.preview) return { preview: true, template: "page-wide", content };
+      if (!a3.page_id && !a3.title) throw new Error("title: needed for a new page.");
+      const page = await call(site, {
+        method: "POST",
+        path: a3.page_id ? `/wp/v2/pages/${Number(a3.page_id)}` : "/wp/v2/pages",
+        query: { _fields: "id,link,status" },
+        body: {
+          ...a3.title ? { title: a3.title } : {},
+          ...a3.slug && !a3.page_id ? { slug: a3.slug } : {},
+          ...a3.status ? { status: a3.status === "publish" ? "publish" : "draft" } : a3.page_id ? {} : { status: "draft" },
+          template: "page-wide",
+          content
+        }
+      });
+      if (!page || typeof page.id !== "number") throw new Error("WordPress didn't save the page; nothing was changed.");
+      const book = a3.book_page ? await mb(ctx, "POST", "/settings", { settings: { booking_page_id: page.id } }).then(
+        () => true,
+        (e2) => ({ error: e2.message })
+      ) : false;
+      return {
+        saved: true,
+        id: page.id,
+        path: path(page.link),
+        status: page.status,
+        book_page: book,
+        sections: sections.length
+      };
+    }
+  }),
+  tool({
+    name: "wp_booking_design",
+    description: "The look of the booking blocks, booking sheet, gift cards, plans and account pages for visitors (Maggie Core 0.20.1+): design { accent, accent_deep, ink, muted, line, surface, panel (hex colours), radius 0-40 (px, cards and sheet), button_radius 0-99 (px), density comfortable | compact }. Send only what changes; reset true goes back to the theme's colours. Without design or reset: read the current design. The footer credit is not part of it.",
+    parameters: {
+      type: "object",
+      properties: { design: obj("Design values."), reset: bool("Back to the theme look.") }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => a3.reset ? say(lang, "Reset the booking look to the theme's.", "\u628A\u9810\u7D04\u5916\u89C0\u91CD\u8A2D\u70BA\u4E3B\u984C\u9810\u8A2D\u3002") : say(
+      lang,
+      `Change the booking look: ${JSON.stringify(a3.design ?? {})}.`,
+      `\u4FEE\u6539\u9810\u7D04\u5916\u89C0\uFF1A${JSON.stringify(a3.design ?? {})}\u3002`
+    ),
+    run: async (ctx, a3) => {
+      if (!a3.design && !a3.reset) {
+        const b2 = await mb(ctx, "GET", "/blocks");
+        return { design: b2.design ?? {} };
+      }
+      let next = {};
+      if (!a3.reset) {
+        const b2 = await mb(ctx, "GET", "/blocks");
+        const cur = b2.design && !Array.isArray(b2.design) ? b2.design : {};
+        next = { ...cur, ...a3.design };
+      }
+      await mb(ctx, "POST", "/settings", { settings: { design: next } });
+      return { saved: true, design: next };
+    }
   })
 ];
 var RESTYLE = /* @__PURE__ */ new Set([

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.12.24",
+	"version": "0.12.25",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",