@cmo-so/mcp 0.12.5 → 0.12.7

package/dist/cmo-mcp.mjs

@@ -7199,7 +7199,7 @@ var require_dist = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.5",
+  version: "0.12.7",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -16064,6 +16064,27 @@ async function changePage(ctx, a, fn) {
     undo: "wp_page_undo goes back to the version before this change."
   };
 }
+var findAllBlocks = (list3) => list3.flatMap((b) => [b, ...findAllBlocks(b.inner)]);
+async function setHome(site, id, postsPage) {
+  const before = await call(site, {
+    path: "/wp/v2/settings",
+    query: { _fields: "show_on_front,page_on_front,page_for_posts" }
+  });
+  const body = { show_on_front: "page", page_on_front: id };
+  if (postsPage !== void 0) body.page_for_posts = postsPage;
+  if (postsPage === id) throw new Error("The homepage and the posts page can't be the same page.");
+  const after = await call(site, {
+    method: "POST",
+    path: "/wp/v2/settings",
+    query: { _fields: "show_on_front,page_on_front,page_for_posts" },
+    body
+  });
+  return {
+    before,
+    after,
+    undo: before.show_on_front === "page" && before.page_on_front ? `wp_site_home_set page ${before.page_on_front}` : "wp_site_home_set latest_posts true"
+  };
+}
 function position(a) {
   return {
     after: a.after || void 0,
@@ -16436,6 +16457,103 @@ var pageTools = [
       };
     }
   }),
+  tool({
+    name: "wp_page_publish",
+    description: "Publish a page (a draft or private page) so visitors and search engines see it. Checks it first: one H1, an SEO title and description (warns when missing). homepage: true also makes it the site's homepage. Afterwards the live page is opened to confirm it works. To take it down again, wp_page_update status draft.",
+    parameters: {
+      type: "object",
+      properties: {
+        page: PAGE,
+        homepage: bool("Also make it the site's homepage."),
+        expect_modified: EXPECT
+      },
+      required: ["page"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Publish page ${q2(a.page, "")} on your website${a.homepage ? " and make it the homepage" : ""}.`,
+      `\u767C\u4F48\u7DB2\u7AD9\u4E0A\u7684\u9801\u9762 ${q2(a.page, "")}${a.homepage ? "\uFF0C\u4E26\u8A2D\u70BA\u9996\u9801" : ""}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await findPage(site, a.page, true);
+      checkFresh(p, a.expect_modified);
+      const m = p.meta ?? {};
+      const blocks = parse(p.content?.raw ?? "");
+      const h1 = findAllBlocks(blocks).filter((b) => b.name === "core/heading" && Number(b.attrs.level) === 1).length;
+      const warnings = [
+        h1 === 1 ? "" : h1 === 0 ? "The page has no H1 in its content (a template may add one)." : `The page has ${h1} H1 headings.`,
+        m.maggie_seo_title ? "" : "No SEO title: the page title is used.",
+        m.maggie_seo_description ? "" : "No meta description: set one with wp_seo_set."
+      ].filter(Boolean);
+      const wasStatus = p.status;
+      const saved = p.status === "publish" ? p : await savePage(site, p.id, null, { status: "publish" });
+      let home = null;
+      if (a.homepage) home = await setHome(site, p.id);
+      const live = await check(site, saved.link, "publish");
+      return {
+        published: true,
+        id: p.id,
+        path: path(saved.link),
+        before: wasStatus,
+        homepage: home,
+        check: live,
+        warnings
+      };
+    }
+  }),
+  tool({
+    name: "wp_site_home_set",
+    description: "Choose the site's homepage (a published page) and, optionally, the page that lists the blog posts. Returns the previous setting so it can be put back. latest_posts: true shows the newest posts as the homepage instead.",
+    parameters: {
+      type: "object",
+      properties: {
+        page: str2("The page to show as the homepage (path, slug or id)."),
+        posts_page: str2('The page that lists the blog posts (optional; "" to clear).'),
+        latest_posts: bool("Show the newest posts as the homepage instead of a page.")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.latest_posts ? say(lang, "Show your newest posts as your website's homepage.", "\u628A\u7DB2\u7AD9\u9996\u9801\u6539\u70BA\u986F\u793A\u6700\u65B0\u6587\u7AE0\u3002") : say(
+      lang,
+      `Make ${q2(a.page, "that page")} your website's homepage.`,
+      `\u628A ${q2(a.page, "\u8A72\u9801\u9762")} \u8A2D\u70BA\u7DB2\u7AD9\u9996\u9801\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      if (a.latest_posts) {
+        const before = await call(site, {
+          path: "/wp/v2/settings",
+          query: { _fields: "show_on_front,page_on_front,page_for_posts" }
+        });
+        await call(site, {
+          method: "POST",
+          path: "/wp/v2/settings",
+          query: { _fields: "show_on_front" },
+          body: { show_on_front: "posts" }
+        });
+        return { before, after: { show_on_front: "posts" } };
+      }
+      if (!a.page) throw new Error("Which page should be the homepage?");
+      const p = await findPage(site, a.page);
+      if (p.status !== "publish")
+        throw new Error(
+          `${path(p.link)} isn't published yet: publish it first (wp_page_publish homepage: true does both).`
+        );
+      let postsPage;
+      if (typeof a.posts_page === "string")
+        postsPage = a.posts_page === "" ? 0 : (await findPage(site, a.posts_page)).id;
+      const r = await setHome(site, p.id, postsPage);
+      return { ...r, check: await check(site, `${site.url ?? ""}/`, "publish") };
+    }
+  }),
   tool({
     name: "wp_page_delete",
     description: "Move a page to the WordPress trash (restorable for 30 days) and redirect its address (301) to another page, by default its parent or the homepage.",
@@ -16609,6 +16727,9 @@ var sectionTools = [
         section: str2("Section id from wp_page_get (s2, m4) or its type (faq)."),
         edits: EDITS,
         slots: obj("Complete new content for the section (same type unless type is given)."),
+        markup: str2(
+          "Replace the section with this block markup (one top-level block; written by a coding agent; PHP never)."
+        ),
         type: str2("With slots: change the section to this type."),
         faq: obj("FAQ changes.", {
           add: arr("Questions to add.", obj("", { q: str2(""), a: str2("") })),
@@ -16640,6 +16761,10 @@ var sectionTools = [
         if (type !== "faq") throw new Error(`Section ${ref} is a ${type} section, not the FAQ.`);
         next = editFaq(target.block, a.faq, kit);
         note = { questions: describe2({ ...target, block: next }, kit.syncedTitles).counts?.questions };
+      } else if (typeof a.markup === "string") {
+        const bl = checkMarkup(a.markup, "markup").filter((b) => b.name);
+        if (bl.length !== 1) throw new Error("markup: give exactly one top-level block (wrap several in a group).");
+        next = bl[0];
       } else if (a.slots) {
         const t = String(a.type ?? type);
         const keepName = target.block.attrs.metadata?.name;
@@ -16660,7 +16785,7 @@ var sectionTools = [
           );
         next = r.block;
         note = { changed: r.changed };
-      } else throw new Error("Give edits, slots or faq.");
+      } else throw new Error("Give edits, slots, markup or faq.");
       return { blocks: replace(blocks, ref, next, kit.syncedTitles), note };
     })
   }),
@@ -17552,7 +17677,493 @@ var elementTools = [
     }
   })
 ];
+function checkMarkup(markup, what) {
+  if (typeof markup !== "string" || !markup.trim()) throw new Error(`${what}: give block markup (<!-- wp:\u2026 -->).`);
+  if (/<\?(php|=)?/i.test(markup)) throw new Error(`${what}: PHP isn't allowed.`);
+  const blocks = parse(markup);
+  if (!blocks.some((b) => b.name)) throw new Error(`${what}: give block markup (<!-- wp:\u2026 -->), not plain HTML.`);
+  return blocks;
+}
+var POST_FIELDS = "id,title,slug,link,status,date,modified,categories,tags,featured_media,excerpt,meta";
+async function termIds(site, taxonomy, names) {
+  if (!Array.isArray(names)) return void 0;
+  const ids2 = [];
+  for (const n2 of names) {
+    if (typeof n2 === "number") {
+      ids2.push(n2);
+      continue;
+    }
+    const name = String(n2).trim();
+    if (!name) continue;
+    const found = await call(site, {
+      path: `/wp/v2/${taxonomy}`,
+      query: { search: name, per_page: 20, _fields: "id,name" }
+    });
+    const hit = found.find((t) => t.name.toLowerCase() === name.toLowerCase());
+    ids2.push(
+      hit ? hit.id : (await call(site, { method: "POST", path: `/wp/v2/${taxonomy}`, body: { name } })).id
+    );
+  }
+  return ids2;
+}
+var fullTools = [
+  tool({
+    name: "wp_page_markup_get",
+    description: "A page's full block markup (Gutenberg), for coding agents that edit blocks directly; with section, only that section's markup. Pair with wp_page_markup_set or wp_section_update markup.",
+    parameters: {
+      type: "object",
+      properties: { page: PAGE, section: str2("Only this section (id or type).") },
+      required: ["page"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await findPage(site, a.page, true);
+      const raw = p.content?.raw ?? "";
+      if (a.section) {
+        const kit = await siteKit(site);
+        const l = sectionAt(parse(raw), String(a.section), kit.syncedTitles);
+        return { id: p.id, path: path(p.link), modified: p.modified, section: l.id, markup: serialize([l.block]) };
+      }
+      return { id: p.id, path: path(p.link), modified: p.modified, template: p.template || "default", markup: raw };
+    }
+  }),
+  tool({
+    name: "wp_page_markup_set",
+    description: "Replace a page's whole content with block markup a coding agent wrote (Gutenberg blocks, Maggie Core classes and Tailwind classes allowed; PHP never). Read it first with wp_page_markup_get and pass its modified as expect_modified. preview shows the sections before and after without saving. wp_page_undo goes back.",
+    parameters: {
+      type: "object",
+      properties: {
+        page: PAGE,
+        markup: str2("The page's new block markup."),
+        expect_modified: EXPECT,
+        preview: PREVIEW
+      },
+      required: ["page", "markup"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Replace the content of page ${q2(a.page, "")} with new block markup.`,
+      `\u7528\u65B0\u7684\u5340\u584A\u5167\u5BB9\u53D6\u4EE3\u9801\u9762 ${q2(a.page, "")}\u3002`
+    ),
+    run: (ctx, a) => changePage(ctx, a, () => ({ blocks: checkMarkup(a.markup, "markup") }))
+  }),
+  tool({
+    name: "wp_posts_list",
+    description: "Blog posts on the site (newest first): id, title, path, status, date, categories and tags. Search words, status, category.",
+    parameters: {
+      type: "object",
+      properties: {
+        search: str2("Words in the title or content."),
+        status: { type: "string", enum: ["publish", "draft", "future", "private", "any"], description: "Default any." },
+        category: str2("Category name or id."),
+        limit: int2("How many (default 30, at most 100).")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const cat = a.category ? (await termIds(site, "categories", [a.category]).catch(() => void 0))?.[0] : void 0;
+      const rows = await call(site, {
+        path: "/wp/v2/posts",
+        query: {
+          context: "edit",
+          search: a.search || void 0,
+          status: a.status && a.status !== "any" ? String(a.status) : "publish,draft,future,private,pending",
+          categories: cat,
+          per_page: Math.min(100, Math.max(1, Number(a.limit) || 30)),
+          _fields: "id,title,link,status,date,categories,tags"
+        }
+      });
+      return {
+        count: rows.length,
+        items: rows.map((r) => ({
+          id: r.id,
+          title: r.title.raw ?? r.title.rendered,
+          path: path(r.link),
+          status: r.status,
+          date: r.date,
+          categories: r.categories,
+          tags: r.tags
+        }))
+      };
+    }
+  }),
+  tool({
+    name: "wp_post_get",
+    description: "One blog post in full: title, slug, status, dates, categories, tags, featured image, excerpt, SEO fields and its content (block markup or HTML).",
+    parameters: { type: "object", properties: { post: int2("The post id (wp_posts_list).") }, required: ["post"] },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const p = await call(siteOf(ctx), {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: `${POST_FIELDS},content` }
+      });
+      return {
+        ...p,
+        title: p.title.raw,
+        path: path(p.link),
+        excerpt: p.excerpt?.raw ?? "",
+        content: p.content?.raw ?? ""
+      };
+    }
+  }),
+  tool({
+    name: "wp_post_save",
+    description: "Create a blog post (no post id) or change one (post id): title, content (block markup or HTML), excerpt, slug (a published post's old address gets a 301), status (draft, publish, private, future with date), date, categories and tags (names; new ones are created), featured_media, SEO title/description. New posts are drafts unless status says otherwise. CMO.so's blog autopilot keeps writing its own posts; this is for the owner's own changes.",
+    parameters: {
+      type: "object",
+      properties: {
+        post: int2("The post to change (leave out to create one)."),
+        title: str2(""),
+        content: str2("Block markup or HTML."),
+        excerpt: str2(""),
+        slug: str2(""),
+        status: { type: "string", enum: ["draft", "publish", "private", "future"], description: "" },
+        date: str2("Publish date (ISO 8601), for scheduled posts."),
+        categories: arr("Category names (or ids).", { type: "string" }),
+        tags: arr("Tag names (or ids).", { type: "string" }),
+        featured_media: int2("Media id (wp_media_upload)."),
+        seo_title: str2(""),
+        seo_description: str2(""),
+        expect_modified: EXPECT
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.post ? say(
+      lang,
+      `Change blog post #${String(a.post)} on your website${a.status === "publish" ? " (published)" : ""}.`,
+      `\u4FEE\u6539\u7DB2\u7AD9\u4E0A\u7684\u6587\u7AE0 #${String(a.post)}\u3002`
+    ) : say(
+      lang,
+      `Create the blog post ${q2(a.title, "")} on your website (${a.status === "publish" ? "published" : "as a draft"}).`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5EFA\u7ACB\u6587\u7AE0 ${q2(a.title, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const body = {};
+      for (const k of ["title", "excerpt", "slug", "status", "date"])
+        if (typeof a[k] === "string" && a[k] !== "") body[k] = a[k];
+      if (typeof a.content === "string") {
+        if (/<\?(php|=)?/i.test(a.content)) throw new Error("content: PHP isn't allowed.");
+        body.content = a.content;
+      }
+      if (typeof a.featured_media === "number") body.featured_media = a.featured_media;
+      const cats = await termIds(site, "categories", a.categories);
+      const tags = await termIds(site, "tags", a.tags);
+      if (cats) body.categories = cats;
+      if (tags) body.tags = tags;
+      const meta4 = {};
+      if (typeof a.seo_title === "string") meta4.maggie_seo_title = a.seo_title;
+      if (typeof a.seo_description === "string") meta4.maggie_seo_description = a.seo_description;
+      if (Object.keys(meta4).length) body.meta = meta4;
+      if (!a.post) {
+        if (!body.title) throw new Error("A new post needs a title.");
+        body.status = body.status ?? "draft";
+        const p2 = await call(site, {
+          method: "POST",
+          path: "/wp/v2/posts",
+          query: { _fields: "id,link,status,modified" },
+          body
+        });
+        if (!p2?.id) throw new Error("WordPress didn't create the post.");
+        return { created: true, id: p2.id, path: path(p2.link), status: p2.status, modified: p2.modified };
+      }
+      const before = await call(site, {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: "id,link,status,modified" }
+      });
+      if (a.expect_modified && before.modified !== a.expect_modified)
+        throw new Error(
+          `The post changed in WordPress since you read it (${before.modified}). Read it again and redo the change.`
+        );
+      if (!Object.keys(body).length) throw new Error("Nothing to change.");
+      const p = await call(site, {
+        method: "POST",
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { _fields: "id,link,status,modified" },
+        body
+      });
+      let redirect = null;
+      if (before.status === "publish" && path(p.link) !== path(before.link))
+        redirect = (await redirectsSet(site, { set: [{ from: path(before.link), to: path(p.link), code: 301 }] })).items.find((r) => r.from === path(before.link));
+      return { saved: true, id: p.id, path: path(p.link), status: p.status, modified: p.modified, redirect };
+    }
+  }),
+  tool({
+    name: "wp_post_delete",
+    description: "Move a blog post to the WordPress trash (restorable for 30 days) and redirect its address (301) to another page, by default the blog list or the homepage.",
+    parameters: {
+      type: "object",
+      properties: {
+        post: int2("The post id."),
+        redirect_to: str2('Where its visitors go (path); default /. "410" = gone.')
+      },
+      required: ["post"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Move blog post #${String(a.post)} to the trash and redirect its address.`,
+      `\u628A\u6587\u7AE0 #${String(a.post)} \u79FB\u5230\u5783\u573E\u6876\u4E26\u8F49\u5740\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await call(site, {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: "id,link,status" }
+      });
+      await call(site, { method: "DELETE", path: `/wp/v2/posts/${p.id}`, query: { _fields: "id,status" } });
+      const to = String(a.redirect_to ?? "/");
+      const from = path(p.link);
+      const r = p.status === "publish" ? await redirectsSet(site, { set: to === "410" ? [{ from, code: 410 }] : [{ from, to, code: 301 }] }) : null;
+      return {
+        trashed: true,
+        id: p.id,
+        path: from,
+        redirect: r ? to === "410" ? { from, code: 410 } : { from, to, code: 301 } : null
+      };
+    }
+  }),
+  tool({
+    name: "wp_terms_list",
+    description: "The blog's categories or tags: id, name, slug, description, post count.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        search: str2("")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const rows = await all(
+        siteOf(ctx),
+        `/wp/v2/${tax}`,
+        { search: a.search || void 0, _fields: "id,name,slug,description,count,parent" },
+        500
+      );
+      return { count: rows.length, items: rows };
+    }
+  }),
+  tool({
+    name: "wp_term_save",
+    description: "Create a category or tag (no id) or change one (id): name, slug, description, parent (categories). The theme shows the description on its archive page.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        id: int2("The term to change."),
+        name: str2(""),
+        slug: str2(""),
+        description: str2(""),
+        parent: int2("Parent category id.")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `${a.id ? "Change" : "Create"} the ${a.taxonomy === "tags" ? "tag" : "category"} ${q2(a.name, a.id ? `#${String(a.id)}` : "")} on your website.`,
+      `${a.id ? "\u4FEE\u6539" : "\u5EFA\u7ACB"}\u7DB2\u7AD9\u7684${a.taxonomy === "tags" ? "\u6A19\u7C64" : "\u5206\u985E"} ${q2(a.name, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const body = {};
+      for (const k of ["name", "slug", "description"]) if (typeof a[k] === "string") body[k] = a[k];
+      if (typeof a.parent === "number" && tax === "categories") body.parent = a.parent;
+      if (!a.id && !body.name) throw new Error("A new term needs a name.");
+      return call(siteOf(ctx), {
+        method: "POST",
+        path: a.id ? `/wp/v2/${tax}/${Number(a.id)}` : `/wp/v2/${tax}`,
+        query: { _fields: "id,name,slug,description,count,link" },
+        body
+      });
+    }
+  }),
+  tool({
+    name: "wp_settings_get",
+    description: "The site's general settings: title, tagline, search-engine visibility, language, timezone, date and time formats, start of week, posts per page, homepage and posts page, logo and icon.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx) => call(siteOf(ctx), {
+      path: "/wp/v2/settings",
+      query: {
+        _fields: "title,description,url,blog_public,language,timezone,date_format,time_format,start_of_week,posts_per_page,show_on_front,page_on_front,page_for_posts,site_logo,site_icon"
+      }
+    })
+  }),
+  tool({
+    name: "wp_settings_set",
+    description: "Change the site's general settings: title, tagline (description), search_engines (true = let Google index the site, false = discourage it), timezone (e.g. Europe/London), date_format, time_format, start_of_week (0 Sunday \u2026 6), posts_per_page, site_logo and site_icon (media ids). Returns before and after. Homepage and posts page: wp_site_home_set.",
+    parameters: {
+      type: "object",
+      properties: {
+        title: str2("Site title."),
+        description: str2("Tagline."),
+        search_engines: bool("true: visible to search engines; false: ask them not to index the site."),
+        timezone: str2("e.g. Europe/London."),
+        date_format: str2("e.g. j F Y."),
+        time_format: str2("e.g. H:i."),
+        start_of_week: int2("0 Sunday \u2026 6 Saturday."),
+        posts_per_page: int2("Posts on blog pages."),
+        site_logo: int2("Media id of the logo."),
+        site_icon: int2("Media id of the site icon (512\xD7512).")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.search_engines === true ? say(
+      lang,
+      "Change your website's settings and let search engines index it.",
+      "\u4FEE\u6539\u7DB2\u7AD9\u8A2D\u5B9A\uFF0C\u4E26\u5141\u8A31\u641C\u5C0B\u5F15\u64CE\u6536\u9304\u3002"
+    ) : a.search_engines === false ? say(
+      lang,
+      "Change your website's settings and ask search engines not to index it.",
+      "\u4FEE\u6539\u7DB2\u7AD9\u8A2D\u5B9A\uFF0C\u4E26\u8981\u6C42\u641C\u5C0B\u5F15\u64CE\u4E0D\u8981\u6536\u9304\u3002"
+    ) : say(lang, "Change your website's general settings.", "\u4FEE\u6539\u7DB2\u7AD9\u7684\u4E00\u822C\u8A2D\u5B9A\u3002"),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const body = {};
+      for (const k of ["title", "description", "date_format", "time_format", "timezone"])
+        if (typeof a[k] === "string") body[k] = a[k];
+      for (const k of ["start_of_week", "posts_per_page", "site_logo", "site_icon"])
+        if (typeof a[k] === "number") body[k] = a[k];
+      if (typeof a.search_engines === "boolean") body.blog_public = a.search_engines ? 1 : 0;
+      if (!Object.keys(body).length) throw new Error("Nothing to change.");
+      const fields = Object.keys(body).join(",");
+      const before = await call(site, { path: "/wp/v2/settings", query: { _fields: fields } });
+      if ("blog_public" in body && !("blog_public" in before))
+        throw new Error(
+          "This site's theme doesn't expose search-engine visibility yet: update Maggie Core (wp_theme_update) to 0.11.4 or later."
+        );
+      const after = await call(site, {
+        method: "POST",
+        path: "/wp/v2/settings",
+        query: { _fields: fields },
+        body
+      });
+      return { before, after };
+    }
+  }),
+  tool({
+    name: "wp_plugins_list",
+    description: "The site's plugins: name, version, active or not, and whether an update is waiting.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx) => {
+      const rows = await call(siteOf(ctx), { path: "/wp/v2/plugins", query: { _fields: "plugin,name,version,status" } });
+      return { count: rows.length, items: rows };
+    }
+  }),
+  tool({
+    name: "wp_plugin_set",
+    description: "Install a plugin from WordPress.org by its slug (e.g. wpforms-lite), and/or activate or deactivate an installed one (plugin id from wp_plugins_list, e.g. akismet/akismet). Plugins can't be deleted from here. Installing runs the plugin's code on the site: only well-known plugins the owner asked for.",
+    parameters: {
+      type: "object",
+      properties: {
+        install: str2("WordPress.org slug to install."),
+        plugin: str2("Installed plugin id (folder/file) to change."),
+        status: {
+          type: "string",
+          enum: ["active", "inactive"],
+          description: "Activate or deactivate (after installing, default inactive)."
+        }
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.install ? say(
+      lang,
+      `Install the plugin ${q2(a.install, "")} from WordPress.org on your website${a.status === "active" ? " and activate it" : ""}.`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5B89\u88DD WordPress.org \u63D2\u4EF6 ${q2(a.install, "")}${a.status === "active" ? "\u4E26\u555F\u7528" : ""}\u3002`
+    ) : say(
+      lang,
+      `${a.status === "active" ? "Activate" : "Deactivate"} the plugin ${q2(a.plugin, "")} on your website.`,
+      `${a.status === "active" ? "\u555F\u7528" : "\u505C\u7528"}\u7DB2\u7AD9\u4E0A\u7684\u63D2\u4EF6 ${q2(a.plugin, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      if (a.install) {
+        if (!/^[a-z0-9-]{2,80}$/.test(String(a.install)))
+          throw new Error("install: a WordPress.org plugin slug, e.g. wpforms-lite.");
+        return call(site, {
+          method: "POST",
+          path: "/wp/v2/plugins",
+          query: { _fields: "plugin,name,version,status" },
+          body: { slug: a.install, status: a.status === "active" ? "active" : "inactive" }
+        });
+      }
+      if (!a.plugin || !a.status) throw new Error("Give install (a slug), or plugin and status.");
+      if (!/^[a-z0-9._-]+(\/[a-z0-9._-]+)?$/i.test(String(a.plugin)))
+        throw new Error("plugin: the id from wp_plugins_list, e.g. akismet/akismet.");
+      return call(site, {
+        method: "POST",
+        path: `/wp/v2/plugins/${String(a.plugin).replace(/\.php$/, "")}`,
+        query: { _fields: "plugin,name,version,status" },
+        body: { status: a.status }
+      });
+    }
+  }),
+  tool({
+    name: "wp_api_read",
+    description: "Read any WordPress REST route the site builder may use (GET only), for coding agents exploring a site: e.g. /wp/v2/types, /wp/v2/taxonomies, /wp/v2/templates, /wp/v2/block-patterns/patterns, /wp/v2/global-styles/themes/maggie-core, /maggie-core/v1/site. Results are trimmed to 60 items.",
+    parameters: {
+      type: "object",
+      properties: { route: str2("The REST route under /wp-json, e.g. /wp/v2/types."), query: obj("Query parameters.") },
+      required: ["route"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const r = await siteOf(ctx).request({
+        path: String(a.route),
+        query: a.query ?? {}
+      });
+      const data = Array.isArray(r.data) ? r.data.slice(0, 60) : r.data;
+      return { status: r.status, total: r.total ?? null, data };
+    }
+  })
+];
 var wordpressTools = [
+  ...fullTools,
   ...siteTools,
   ...pageTools,
   ...sectionTools,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.12.5",
+	"version": "0.12.7",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",