@cmo-so/mcp 0.9.0 → 0.9.1

package/dist/cmo-mcp.mjs

@@ -7199,7 +7199,7 @@ var require_dist = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.9.0",
+  version: "0.9.1",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -8838,11 +8838,11 @@ var confirmCopy = {
   },
   social_pictures_attach: {
     en: (a) => {
-      const n = Array.isArray(a.urls) ? a.urls.length : 0;
+      const n = (Array.isArray(a.urls) ? a.urls.length : 0) + (Array.isArray(a.files) ? a.files.length : 0);
       return `${a.append ? "Add" : "Put"} your ${n} picture${n === 1 ? "" : "s"} ${a.append ? "after the pictures on" : "on"} post #${a.id}${a.append ? "" : ", in place of its picture"} (free). On LinkedIn a set goes out as a swipeable PDF carousel.`;
     },
     "zh-Hant": (a) => {
-      const n = Array.isArray(a.urls) ? a.urls.length : 0;
+      const n = (Array.isArray(a.urls) ? a.urls.length : 0) + (Array.isArray(a.files) ? a.files.length : 0);
       return `${a.append ? `\u5728\u8CBC\u6587 #${a.id} \u73FE\u6709\u5716\u7247\u5F8C\u52A0\u4E0A` : `\u628A\u8CBC\u6587 #${a.id} \u7684\u5716\u7247\u63DB\u6210`}\u4F60\u7684 ${n} \u5F35\u5716\u7247\uFF08\u514D\u8CBB\uFF09\u3002\u5728 LinkedIn \u4E0A\uFF0C\u4E00\u7D44\u5716\u7247\u6703\u4EE5\u53EF\u6ED1\u52D5\u7684 PDF \u8F2A\u64AD\u767C\u51FA\u3002`;
     }
   },
@@ -11613,6 +11613,17 @@ var channelsParam = {
   items: { type: "string", enum: CHANNEL_KEYS },
   description: "Which channels to write for: linkedin, facebook, instagram, google_business. Leave out to write for every connected channel (one post each, one credit each); give one only when the user names it. YouTube and TikTok take a video: use social_video_add."
 };
+var FILE_SCHEMA = {
+  type: "object",
+  properties: {
+    download_url: { type: "string" },
+    file_id: { type: "string" },
+    mime_type: { type: "string" },
+    file_name: { type: "string" }
+  },
+  required: ["download_url", "file_id"]
+};
+var fileLinks = (value) => (Array.isArray(value) ? value : value ? [value] : []).map((f) => String(f?.download_url ?? "").trim()).filter(Boolean);
 var queuedAt = positionParam("the posts", "Leave out for the front (the next posting times).");
 var channelsOf = (value) => {
   const list2 = Array.isArray(value) ? value.map((v) => String(v).toLowerCase()).filter((v) => CHANNEL_KEYS.includes(v)) : [];
@@ -11982,27 +11993,35 @@ var socialTools = [
   }),
   tool({
     name: "social_pictures_attach",
-    description: "Put the user's own pictures on a post, in order: public https links to image files (JPEG, PNG or WebP), for example slides another assistant made. 1-20 pictures; append adds them after the post's current ones. Free (no AI). They replace Maggie's picture; a post from an idea shares them with its other channels. Instagram and Facebook post the first 10, Google Business the first. On LinkedIn a set goes out as a swipeable PDF carousel unless social_carousel_set says images. Preview first.",
+    description: "Put the user's own pictures on a post, in order: pictures from this chat (files: ones the user added or that were made here) or public https links to image files (urls), JPEG, PNG or WebP, for example carousel slides. 1-20 pictures; append adds them after the post's current ones. Free (no AI). They replace Maggie's picture; a post from an idea shares them with its other channels. Instagram and Facebook post the first 10, Google Business the first. On LinkedIn a set goes out as a swipeable PDF carousel unless social_carousel_set says images. If you can pass neither, give the user social_upload_link. Preview first.",
     parameters: {
       type: "object",
       properties: {
         id: { type: "integer", description: "The post (from social_list), not gone out yet" },
+        files: {
+          type: "array",
+          items: FILE_SCHEMA,
+          description: "Pictures from this chat, in the order they should appear"
+        },
         urls: {
           type: "array",
           items: { type: "string" },
-          description: "Public https links to the image files, in the order they should appear"
+          description: "Public https links to the image files, in order (after the files, when both are given)"
         },
         append: { type: "boolean", description: "Add after the post's current pictures instead of replacing them" }
       },
-      required: ["id", "urls"]
+      required: ["id"]
     },
+    fileParams: ["files"],
     group: "social",
     need: write5,
     risk: "W1",
     gates: ["VER"],
-    run: async (ctx, { id, urls, append }) => {
-      const list2 = (Array.isArray(urls) ? urls : []).map((u) => String(u).trim()).filter(Boolean);
-      if (!list2.length) throw new Error("Give at least one https link to a picture.");
+    run: async (ctx, { id, urls, files, append }) => {
+      const list2 = [...fileLinks(files), ...(Array.isArray(urls) ? urls : []).map((u) => String(u).trim())].filter(
+        Boolean
+      );
+      if (!list2.length) throw new Error("Give the pictures (files from this chat, or https links).");
       if (list2.length > 20) throw new Error("A post takes up to 20 pictures.");
       if (list2.some((u) => !u.startsWith("https://"))) throw new Error("Every picture needs a public https link.");
       const out = await ws(ctx).setSocialPictures(Number(id), { urls: list2, append: append === true });
@@ -12015,30 +12034,57 @@ var socialTools = [
   }),
   tool({
     name: "social_carousel_pdf_attach",
-    description: "A LinkedIn post goes out as this PDF: a swipeable document carousel (a public https link to the PDF, up to 300 pages and 20 MB, no password). Its first 20 pages also become the post's pictures (what its other channels post). Free. Change the pictures later and the carousel is made from them instead. Preview first.",
+    description: "A LinkedIn post goes out as this PDF: a swipeable document carousel. The PDF from this chat (file: one the user added or that was made here) or a public https link to it (url); up to 300 pages and 20 MB, no password. Its first 20 pages also become the post's pictures (what its other channels post). Free. Change the pictures later and the carousel is made from them instead. If you can pass neither, give the user social_upload_link. Preview first.",
     parameters: {
       type: "object",
       properties: {
         id: { type: "integer", description: "A LinkedIn post (from social_list), not gone out yet" },
+        file: { ...FILE_SCHEMA, description: "The PDF from this chat" },
         url: { type: "string", description: "Public https link to the PDF file" },
         title: {
           type: "string",
           description: "Shown on the carousel (up to 120 characters); the post's topic if left out"
         }
       },
-      required: ["id", "url"]
+      required: ["id"]
     },
+    fileParams: ["file"],
     group: "social",
     need: write5,
     risk: "W1",
     gates: ["VER", "LI"],
-    run: async (ctx, { id, url, title }) => {
-      const link = String(url ?? "").trim();
-      if (!link.startsWith("https://")) throw new Error("Give a public https link to the PDF.");
+    run: async (ctx, { id, url, file, title }) => {
+      const link = fileLinks(file)[0] ?? String(url ?? "").trim();
+      if (!link.startsWith("https://"))
+        throw new Error("Give the PDF (a file from this chat, or a public https link).");
       const out = await ws(ctx).attachSocialCarouselPdf(Number(id), { url: link, ...title ? { title } : {} });
       return { id: out.id, pages: out.pages, pictures: out.pictures, carousel: out.carousel ?? null };
     }
   }),
+  tool({
+    name: "social_upload_link",
+    description: "A link that opens one post's picture in the CMO.so app, where the user uploads their own photos (up to 20, a carousel on LinkedIn) or, on a computer, a PDF carousel themselves. Use it when you can't pass the files (this chat can't send files to tools, or they are on the user's device). Give the link; nothing changes until they upload.",
+    parameters: {
+      type: "object",
+      properties: { id: { type: "integer", description: "The post (from social_list), not gone out yet" } },
+      required: ["id"]
+    },
+    group: "social",
+    need: read5,
+    risk: "R0",
+    run: async (ctx, { id }) => {
+      const post = await ws(ctx).socialPost(Number(id));
+      if (["published", "publishing", "cancelled"].includes(String(post.status)))
+        throw new Error("That post has already gone out (or was skipped): its pictures can't change.");
+      const site = ctx.domain ? `&site=${encodeURIComponent(ctx.domain)}` : "";
+      return {
+        id: post.id,
+        channel: post.provider ?? null,
+        url: `https://app.cmo.so/social?picture=${post.id}${site}`,
+        how: post.provider === "linkedin" ? "Open it, then Upload several photos (in order), or on a computer Upload a PDF carousel." : "Open it, then Upload several photos (in order)."
+      };
+    }
+  }),
   tool({
     name: "social_carousel_set",
     description: "How a LinkedIn post with a set of pictures goes out: format pdf (a swipeable PDF carousel made from the pictures, the default) or images (several pictures); and the carousel's title. Preview first.",
@@ -23167,6 +23213,30 @@ function description(t) {
   ].filter(Boolean);
   return `${t.description}${notes.length ? ` (${notes.join("; ")}.)` : ""} Changes data: call without confirm for a preview, then with confirm: true and the confirmation after the user agrees.`;
 }
+function fileMeta(t) {
+  return t.fileParams?.length ? { "openai/fileParams": t.fileParams } : void 0;
+}
+function withFreshFiles(t, signed, now) {
+  if (!t.fileParams?.length) return signed;
+  const fresh = /* @__PURE__ */ new Map();
+  const collect = (v) => {
+    for (const f of Array.isArray(v) ? v : [v])
+      if (f && typeof f === "object" && typeof f.file_id === "string")
+        fresh.set(f.file_id, f);
+  };
+  for (const p of t.fileParams) collect(now[p]);
+  const swap = (v) => {
+    if (Array.isArray(v)) return v.map(swap);
+    if (v && typeof v === "object" && typeof v.file_id === "string") {
+      const f = fresh.get(v.file_id);
+      return f && typeof f.download_url === "string" ? { ...v, download_url: f.download_url } : v;
+    }
+    return v;
+  };
+  const out = { ...signed };
+  for (const p of t.fileParams) if (p in out) out[p] = swap(out[p]);
+  return out;
+}
 function toolArgs(args) {
   const out = {};
   for (const [k, v] of Object.entries(args ?? {})) if (!CONTROL_ARGS.includes(k) && v !== void 0) out[k] = v;
@@ -23296,7 +23366,7 @@ function createMcpServer(deps) {
         description: description(t),
         inputSchema: inputSchema(t),
         annotations: { title: t.name.replace(/_/g, " "), ...annotations(t) },
-        ...deps.widgets && toolMeta(t.name) ? { _meta: toolMeta(t.name) } : {}
+        ...fileMeta(t) || deps.widgets && toolMeta(t.name) ? { _meta: { ...deps.widgets ? toolMeta(t.name) : {}, ...fileMeta(t) } } : {}
       }))
     };
   });
@@ -23332,7 +23402,7 @@ function createMcpServer(deps) {
         return fail(
           access.keyAccess === "read" && isWrite(t) ? "This key can only read. Reconnect with write access to make changes." : `You don't have permission to do this on ${domain ?? "this website"}.`
         );
-      const callArgs = approval ? approval.calls[0]?.args ?? {} : toolArgs(args);
+      const callArgs = approval ? withFreshFiles(t, approval.calls[0]?.args ?? {}, toolArgs(args)) : toolArgs(args);
       const ctx = { api: api2, domain, client: "mcp" };
       if (!isWrite(t)) return ok(await t.run(ctx, callArgs), viewForTool(t.name) ? { workspace: domain } : void 0);
       let standing = null;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.9.0",
+	"version": "0.9.1",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",