@cmo-so/mcp 0.12.6 → 0.12.7

package/dist/cmo-mcp.mjs

@@ -7199,7 +7199,7 @@ var require_dist = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.6",
+  version: "0.12.7",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -16727,6 +16727,9 @@ var sectionTools = [
         section: str2("Section id from wp_page_get (s2, m4) or its type (faq)."),
         edits: EDITS,
         slots: obj("Complete new content for the section (same type unless type is given)."),
+        markup: str2(
+          "Replace the section with this block markup (one top-level block; written by a coding agent; PHP never)."
+        ),
         type: str2("With slots: change the section to this type."),
         faq: obj("FAQ changes.", {
           add: arr("Questions to add.", obj("", { q: str2(""), a: str2("") })),
@@ -16758,6 +16761,10 @@ var sectionTools = [
         if (type !== "faq") throw new Error(`Section ${ref} is a ${type} section, not the FAQ.`);
         next = editFaq(target.block, a.faq, kit);
         note = { questions: describe2({ ...target, block: next }, kit.syncedTitles).counts?.questions };
+      } else if (typeof a.markup === "string") {
+        const bl = checkMarkup(a.markup, "markup").filter((b) => b.name);
+        if (bl.length !== 1) throw new Error("markup: give exactly one top-level block (wrap several in a group).");
+        next = bl[0];
       } else if (a.slots) {
         const t = String(a.type ?? type);
         const keepName = target.block.attrs.metadata?.name;
@@ -16778,7 +16785,7 @@ var sectionTools = [
           );
         next = r.block;
         note = { changed: r.changed };
-      } else throw new Error("Give edits, slots or faq.");
+      } else throw new Error("Give edits, slots, markup or faq.");
       return { blocks: replace(blocks, ref, next, kit.syncedTitles), note };
     })
   }),
@@ -17670,7 +17677,493 @@ var elementTools = [
     }
   })
 ];
+function checkMarkup(markup, what) {
+  if (typeof markup !== "string" || !markup.trim()) throw new Error(`${what}: give block markup (<!-- wp:\u2026 -->).`);
+  if (/<\?(php|=)?/i.test(markup)) throw new Error(`${what}: PHP isn't allowed.`);
+  const blocks = parse(markup);
+  if (!blocks.some((b) => b.name)) throw new Error(`${what}: give block markup (<!-- wp:\u2026 -->), not plain HTML.`);
+  return blocks;
+}
+var POST_FIELDS = "id,title,slug,link,status,date,modified,categories,tags,featured_media,excerpt,meta";
+async function termIds(site, taxonomy, names) {
+  if (!Array.isArray(names)) return void 0;
+  const ids2 = [];
+  for (const n2 of names) {
+    if (typeof n2 === "number") {
+      ids2.push(n2);
+      continue;
+    }
+    const name = String(n2).trim();
+    if (!name) continue;
+    const found = await call(site, {
+      path: `/wp/v2/${taxonomy}`,
+      query: { search: name, per_page: 20, _fields: "id,name" }
+    });
+    const hit = found.find((t) => t.name.toLowerCase() === name.toLowerCase());
+    ids2.push(
+      hit ? hit.id : (await call(site, { method: "POST", path: `/wp/v2/${taxonomy}`, body: { name } })).id
+    );
+  }
+  return ids2;
+}
+var fullTools = [
+  tool({
+    name: "wp_page_markup_get",
+    description: "A page's full block markup (Gutenberg), for coding agents that edit blocks directly; with section, only that section's markup. Pair with wp_page_markup_set or wp_section_update markup.",
+    parameters: {
+      type: "object",
+      properties: { page: PAGE, section: str2("Only this section (id or type).") },
+      required: ["page"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await findPage(site, a.page, true);
+      const raw = p.content?.raw ?? "";
+      if (a.section) {
+        const kit = await siteKit(site);
+        const l = sectionAt(parse(raw), String(a.section), kit.syncedTitles);
+        return { id: p.id, path: path(p.link), modified: p.modified, section: l.id, markup: serialize([l.block]) };
+      }
+      return { id: p.id, path: path(p.link), modified: p.modified, template: p.template || "default", markup: raw };
+    }
+  }),
+  tool({
+    name: "wp_page_markup_set",
+    description: "Replace a page's whole content with block markup a coding agent wrote (Gutenberg blocks, Maggie Core classes and Tailwind classes allowed; PHP never). Read it first with wp_page_markup_get and pass its modified as expect_modified. preview shows the sections before and after without saving. wp_page_undo goes back.",
+    parameters: {
+      type: "object",
+      properties: {
+        page: PAGE,
+        markup: str2("The page's new block markup."),
+        expect_modified: EXPECT,
+        preview: PREVIEW
+      },
+      required: ["page", "markup"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Replace the content of page ${q2(a.page, "")} with new block markup.`,
+      `\u7528\u65B0\u7684\u5340\u584A\u5167\u5BB9\u53D6\u4EE3\u9801\u9762 ${q2(a.page, "")}\u3002`
+    ),
+    run: (ctx, a) => changePage(ctx, a, () => ({ blocks: checkMarkup(a.markup, "markup") }))
+  }),
+  tool({
+    name: "wp_posts_list",
+    description: "Blog posts on the site (newest first): id, title, path, status, date, categories and tags. Search words, status, category.",
+    parameters: {
+      type: "object",
+      properties: {
+        search: str2("Words in the title or content."),
+        status: { type: "string", enum: ["publish", "draft", "future", "private", "any"], description: "Default any." },
+        category: str2("Category name or id."),
+        limit: int2("How many (default 30, at most 100).")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const cat = a.category ? (await termIds(site, "categories", [a.category]).catch(() => void 0))?.[0] : void 0;
+      const rows = await call(site, {
+        path: "/wp/v2/posts",
+        query: {
+          context: "edit",
+          search: a.search || void 0,
+          status: a.status && a.status !== "any" ? String(a.status) : "publish,draft,future,private,pending",
+          categories: cat,
+          per_page: Math.min(100, Math.max(1, Number(a.limit) || 30)),
+          _fields: "id,title,link,status,date,categories,tags"
+        }
+      });
+      return {
+        count: rows.length,
+        items: rows.map((r) => ({
+          id: r.id,
+          title: r.title.raw ?? r.title.rendered,
+          path: path(r.link),
+          status: r.status,
+          date: r.date,
+          categories: r.categories,
+          tags: r.tags
+        }))
+      };
+    }
+  }),
+  tool({
+    name: "wp_post_get",
+    description: "One blog post in full: title, slug, status, dates, categories, tags, featured image, excerpt, SEO fields and its content (block markup or HTML).",
+    parameters: { type: "object", properties: { post: int2("The post id (wp_posts_list).") }, required: ["post"] },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const p = await call(siteOf(ctx), {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: `${POST_FIELDS},content` }
+      });
+      return {
+        ...p,
+        title: p.title.raw,
+        path: path(p.link),
+        excerpt: p.excerpt?.raw ?? "",
+        content: p.content?.raw ?? ""
+      };
+    }
+  }),
+  tool({
+    name: "wp_post_save",
+    description: "Create a blog post (no post id) or change one (post id): title, content (block markup or HTML), excerpt, slug (a published post's old address gets a 301), status (draft, publish, private, future with date), date, categories and tags (names; new ones are created), featured_media, SEO title/description. New posts are drafts unless status says otherwise. CMO.so's blog autopilot keeps writing its own posts; this is for the owner's own changes.",
+    parameters: {
+      type: "object",
+      properties: {
+        post: int2("The post to change (leave out to create one)."),
+        title: str2(""),
+        content: str2("Block markup or HTML."),
+        excerpt: str2(""),
+        slug: str2(""),
+        status: { type: "string", enum: ["draft", "publish", "private", "future"], description: "" },
+        date: str2("Publish date (ISO 8601), for scheduled posts."),
+        categories: arr("Category names (or ids).", { type: "string" }),
+        tags: arr("Tag names (or ids).", { type: "string" }),
+        featured_media: int2("Media id (wp_media_upload)."),
+        seo_title: str2(""),
+        seo_description: str2(""),
+        expect_modified: EXPECT
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.post ? say(
+      lang,
+      `Change blog post #${String(a.post)} on your website${a.status === "publish" ? " (published)" : ""}.`,
+      `\u4FEE\u6539\u7DB2\u7AD9\u4E0A\u7684\u6587\u7AE0 #${String(a.post)}\u3002`
+    ) : say(
+      lang,
+      `Create the blog post ${q2(a.title, "")} on your website (${a.status === "publish" ? "published" : "as a draft"}).`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5EFA\u7ACB\u6587\u7AE0 ${q2(a.title, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const body = {};
+      for (const k of ["title", "excerpt", "slug", "status", "date"])
+        if (typeof a[k] === "string" && a[k] !== "") body[k] = a[k];
+      if (typeof a.content === "string") {
+        if (/<\?(php|=)?/i.test(a.content)) throw new Error("content: PHP isn't allowed.");
+        body.content = a.content;
+      }
+      if (typeof a.featured_media === "number") body.featured_media = a.featured_media;
+      const cats = await termIds(site, "categories", a.categories);
+      const tags = await termIds(site, "tags", a.tags);
+      if (cats) body.categories = cats;
+      if (tags) body.tags = tags;
+      const meta4 = {};
+      if (typeof a.seo_title === "string") meta4.maggie_seo_title = a.seo_title;
+      if (typeof a.seo_description === "string") meta4.maggie_seo_description = a.seo_description;
+      if (Object.keys(meta4).length) body.meta = meta4;
+      if (!a.post) {
+        if (!body.title) throw new Error("A new post needs a title.");
+        body.status = body.status ?? "draft";
+        const p2 = await call(site, {
+          method: "POST",
+          path: "/wp/v2/posts",
+          query: { _fields: "id,link,status,modified" },
+          body
+        });
+        if (!p2?.id) throw new Error("WordPress didn't create the post.");
+        return { created: true, id: p2.id, path: path(p2.link), status: p2.status, modified: p2.modified };
+      }
+      const before = await call(site, {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: "id,link,status,modified" }
+      });
+      if (a.expect_modified && before.modified !== a.expect_modified)
+        throw new Error(
+          `The post changed in WordPress since you read it (${before.modified}). Read it again and redo the change.`
+        );
+      if (!Object.keys(body).length) throw new Error("Nothing to change.");
+      const p = await call(site, {
+        method: "POST",
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { _fields: "id,link,status,modified" },
+        body
+      });
+      let redirect = null;
+      if (before.status === "publish" && path(p.link) !== path(before.link))
+        redirect = (await redirectsSet(site, { set: [{ from: path(before.link), to: path(p.link), code: 301 }] })).items.find((r) => r.from === path(before.link));
+      return { saved: true, id: p.id, path: path(p.link), status: p.status, modified: p.modified, redirect };
+    }
+  }),
+  tool({
+    name: "wp_post_delete",
+    description: "Move a blog post to the WordPress trash (restorable for 30 days) and redirect its address (301) to another page, by default the blog list or the homepage.",
+    parameters: {
+      type: "object",
+      properties: {
+        post: int2("The post id."),
+        redirect_to: str2('Where its visitors go (path); default /. "410" = gone.')
+      },
+      required: ["post"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `Move blog post #${String(a.post)} to the trash and redirect its address.`,
+      `\u628A\u6587\u7AE0 #${String(a.post)} \u79FB\u5230\u5783\u573E\u6876\u4E26\u8F49\u5740\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const p = await call(site, {
+        path: `/wp/v2/posts/${Number(a.post)}`,
+        query: { context: "edit", _fields: "id,link,status" }
+      });
+      await call(site, { method: "DELETE", path: `/wp/v2/posts/${p.id}`, query: { _fields: "id,status" } });
+      const to = String(a.redirect_to ?? "/");
+      const from = path(p.link);
+      const r = p.status === "publish" ? await redirectsSet(site, { set: to === "410" ? [{ from, code: 410 }] : [{ from, to, code: 301 }] }) : null;
+      return {
+        trashed: true,
+        id: p.id,
+        path: from,
+        redirect: r ? to === "410" ? { from, code: 410 } : { from, to, code: 301 } : null
+      };
+    }
+  }),
+  tool({
+    name: "wp_terms_list",
+    description: "The blog's categories or tags: id, name, slug, description, post count.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        search: str2("")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const rows = await all(
+        siteOf(ctx),
+        `/wp/v2/${tax}`,
+        { search: a.search || void 0, _fields: "id,name,slug,description,count,parent" },
+        500
+      );
+      return { count: rows.length, items: rows };
+    }
+  }),
+  tool({
+    name: "wp_term_save",
+    description: "Create a category or tag (no id) or change one (id): name, slug, description, parent (categories). The theme shows the description on its archive page.",
+    parameters: {
+      type: "object",
+      properties: {
+        taxonomy: { type: "string", enum: ["categories", "tags"], description: "Default categories." },
+        id: int2("The term to change."),
+        name: str2(""),
+        slug: str2(""),
+        description: str2(""),
+        parent: int2("Parent category id.")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => say(
+      lang,
+      `${a.id ? "Change" : "Create"} the ${a.taxonomy === "tags" ? "tag" : "category"} ${q2(a.name, a.id ? `#${String(a.id)}` : "")} on your website.`,
+      `${a.id ? "\u4FEE\u6539" : "\u5EFA\u7ACB"}\u7DB2\u7AD9\u7684${a.taxonomy === "tags" ? "\u6A19\u7C64" : "\u5206\u985E"} ${q2(a.name, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const tax = a.taxonomy === "tags" ? "tags" : "categories";
+      const body = {};
+      for (const k of ["name", "slug", "description"]) if (typeof a[k] === "string") body[k] = a[k];
+      if (typeof a.parent === "number" && tax === "categories") body.parent = a.parent;
+      if (!a.id && !body.name) throw new Error("A new term needs a name.");
+      return call(siteOf(ctx), {
+        method: "POST",
+        path: a.id ? `/wp/v2/${tax}/${Number(a.id)}` : `/wp/v2/${tax}`,
+        query: { _fields: "id,name,slug,description,count,link" },
+        body
+      });
+    }
+  }),
+  tool({
+    name: "wp_settings_get",
+    description: "The site's general settings: title, tagline, search-engine visibility, language, timezone, date and time formats, start of week, posts per page, homepage and posts page, logo and icon.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx) => call(siteOf(ctx), {
+      path: "/wp/v2/settings",
+      query: {
+        _fields: "title,description,url,blog_public,language,timezone,date_format,time_format,start_of_week,posts_per_page,show_on_front,page_on_front,page_for_posts,site_logo,site_icon"
+      }
+    })
+  }),
+  tool({
+    name: "wp_settings_set",
+    description: "Change the site's general settings: title, tagline (description), search_engines (true = let Google index the site, false = discourage it), timezone (e.g. Europe/London), date_format, time_format, start_of_week (0 Sunday \u2026 6), posts_per_page, site_logo and site_icon (media ids). Returns before and after. Homepage and posts page: wp_site_home_set.",
+    parameters: {
+      type: "object",
+      properties: {
+        title: str2("Site title."),
+        description: str2("Tagline."),
+        search_engines: bool("true: visible to search engines; false: ask them not to index the site."),
+        timezone: str2("e.g. Europe/London."),
+        date_format: str2("e.g. j F Y."),
+        time_format: str2("e.g. H:i."),
+        start_of_week: int2("0 Sunday \u2026 6 Saturday."),
+        posts_per_page: int2("Posts on blog pages."),
+        site_logo: int2("Media id of the logo."),
+        site_icon: int2("Media id of the site icon (512\xD7512).")
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.search_engines === true ? say(
+      lang,
+      "Change your website's settings and let search engines index it.",
+      "\u4FEE\u6539\u7DB2\u7AD9\u8A2D\u5B9A\uFF0C\u4E26\u5141\u8A31\u641C\u5C0B\u5F15\u64CE\u6536\u9304\u3002"
+    ) : a.search_engines === false ? say(
+      lang,
+      "Change your website's settings and ask search engines not to index it.",
+      "\u4FEE\u6539\u7DB2\u7AD9\u8A2D\u5B9A\uFF0C\u4E26\u8981\u6C42\u641C\u5C0B\u5F15\u64CE\u4E0D\u8981\u6536\u9304\u3002"
+    ) : say(lang, "Change your website's general settings.", "\u4FEE\u6539\u7DB2\u7AD9\u7684\u4E00\u822C\u8A2D\u5B9A\u3002"),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      const body = {};
+      for (const k of ["title", "description", "date_format", "time_format", "timezone"])
+        if (typeof a[k] === "string") body[k] = a[k];
+      for (const k of ["start_of_week", "posts_per_page", "site_logo", "site_icon"])
+        if (typeof a[k] === "number") body[k] = a[k];
+      if (typeof a.search_engines === "boolean") body.blog_public = a.search_engines ? 1 : 0;
+      if (!Object.keys(body).length) throw new Error("Nothing to change.");
+      const fields = Object.keys(body).join(",");
+      const before = await call(site, { path: "/wp/v2/settings", query: { _fields: fields } });
+      if ("blog_public" in body && !("blog_public" in before))
+        throw new Error(
+          "This site's theme doesn't expose search-engine visibility yet: update Maggie Core (wp_theme_update) to 0.11.4 or later."
+        );
+      const after = await call(site, {
+        method: "POST",
+        path: "/wp/v2/settings",
+        query: { _fields: fields },
+        body
+      });
+      return { before, after };
+    }
+  }),
+  tool({
+    name: "wp_plugins_list",
+    description: "The site's plugins: name, version, active or not, and whether an update is waiting.",
+    parameters: { type: "object", properties: {} },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx) => {
+      const rows = await call(siteOf(ctx), { path: "/wp/v2/plugins", query: { _fields: "plugin,name,version,status" } });
+      return { count: rows.length, items: rows };
+    }
+  }),
+  tool({
+    name: "wp_plugin_set",
+    description: "Install a plugin from WordPress.org by its slug (e.g. wpforms-lite), and/or activate or deactivate an installed one (plugin id from wp_plugins_list, e.g. akismet/akismet). Plugins can't be deleted from here. Installing runs the plugin's code on the site: only well-known plugins the owner asked for.",
+    parameters: {
+      type: "object",
+      properties: {
+        install: str2("WordPress.org slug to install."),
+        plugin: str2("Installed plugin id (folder/file) to change."),
+        status: {
+          type: "string",
+          enum: ["active", "inactive"],
+          description: "Activate or deactivate (after installing, default inactive)."
+        }
+      }
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a, lang) => a.install ? say(
+      lang,
+      `Install the plugin ${q2(a.install, "")} from WordPress.org on your website${a.status === "active" ? " and activate it" : ""}.`,
+      `\u5728\u7DB2\u7AD9\u4E0A\u5B89\u88DD WordPress.org \u63D2\u4EF6 ${q2(a.install, "")}${a.status === "active" ? "\u4E26\u555F\u7528" : ""}\u3002`
+    ) : say(
+      lang,
+      `${a.status === "active" ? "Activate" : "Deactivate"} the plugin ${q2(a.plugin, "")} on your website.`,
+      `${a.status === "active" ? "\u555F\u7528" : "\u505C\u7528"}\u7DB2\u7AD9\u4E0A\u7684\u63D2\u4EF6 ${q2(a.plugin, "")}\u3002`
+    ),
+    run: async (ctx, a) => {
+      const site = siteOf(ctx);
+      if (a.install) {
+        if (!/^[a-z0-9-]{2,80}$/.test(String(a.install)))
+          throw new Error("install: a WordPress.org plugin slug, e.g. wpforms-lite.");
+        return call(site, {
+          method: "POST",
+          path: "/wp/v2/plugins",
+          query: { _fields: "plugin,name,version,status" },
+          body: { slug: a.install, status: a.status === "active" ? "active" : "inactive" }
+        });
+      }
+      if (!a.plugin || !a.status) throw new Error("Give install (a slug), or plugin and status.");
+      if (!/^[a-z0-9._-]+(\/[a-z0-9._-]+)?$/i.test(String(a.plugin)))
+        throw new Error("plugin: the id from wp_plugins_list, e.g. akismet/akismet.");
+      return call(site, {
+        method: "POST",
+        path: `/wp/v2/plugins/${String(a.plugin).replace(/\.php$/, "")}`,
+        query: { _fields: "plugin,name,version,status" },
+        body: { status: a.status }
+      });
+    }
+  }),
+  tool({
+    name: "wp_api_read",
+    description: "Read any WordPress REST route the site builder may use (GET only), for coding agents exploring a site: e.g. /wp/v2/types, /wp/v2/taxonomies, /wp/v2/templates, /wp/v2/block-patterns/patterns, /wp/v2/global-styles/themes/maggie-core, /maggie-core/v1/site. Results are trimmed to 60 items.",
+    parameters: {
+      type: "object",
+      properties: { route: str2("The REST route under /wp-json, e.g. /wp/v2/types."), query: obj("Query parameters.") },
+      required: ["route"]
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: async (ctx, a) => {
+      const r = await siteOf(ctx).request({
+        path: String(a.route),
+        query: a.query ?? {}
+      });
+      const data = Array.isArray(r.data) ? r.data.slice(0, 60) : r.data;
+      return { status: r.status, total: r.total ?? null, data };
+    }
+  })
+];
 var wordpressTools = [
+  ...fullTools,
   ...siteTools,
   ...pageTools,
   ...sectionTools,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.12.6",
+	"version": "0.12.7",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",