@cmo-so/mcp 0.9.0 → 0.9.2

package/dist/cmo-mcp.mjs

@@ -7199,7 +7199,7 @@ var require_dist = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.9.0",
+  version: "0.9.2",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -7784,8 +7784,14 @@ function domainApi(api2, domain) {
     /** How a posted Instagram post is doing (read from Instagram, kept 15 minutes; `refresh` reads again). */
     socialInsights: (id, refresh = false) => api2.request(`${base}/social/${id}/insights${refresh ? "?refresh=true" : ""}`),
     deletePostedSocial: (id) => api2.request(`${base}/social/${id}/published`, { method: "DELETE" }),
-    /** Change a posted LinkedIn post and put it up again: the old one comes down, the new text goes out now. */
-    republishSocial: (id, socialCopy) => post(`${base}/social/${id}/republish`, socialCopy ? { social_copy: socialCopy } : {}),
+    /**
+     * Change a posted post. LinkedIn changes its text in place (likes and comments stay); with `repost`, and on
+     * the other channels, the old one comes down and the new text goes out now.
+     */
+    republishSocial: (id, socialCopy, repost = false) => post(`${base}/social/${id}/republish`, {
+      ...socialCopy ? { social_copy: socialCopy } : {},
+      ...repost ? { repost: true } : {}
+    }),
     restoreSocial: (id) => post(`${base}/social/${id}/restore`),
     pauseSocial: () => post(`${base}/social/pause`),
     /**
@@ -8785,6 +8791,18 @@ var confirmCopy = {
       return n.length > 1 ? `\u6279\u51C6 ${n.length} \u7BC7\u8CBC\u6587\uFF1A${n.map((i) => `#${i}`).join("\u3001")}\u3002\u6BCF\u7BC7\u5728\u63A5\u4E0B\u4F86\u7684\u767C\u6587\u6642\u9593\u767C\u51FA\uFF0C\u4F60\u7684\u4EBA\u8108\u90FD\u770B\u5F97\u5230\u3002` : `\u6279\u51C6\u8CBC\u6587 #${n[0]}\u3002\u5B83\u6703\u5728\u4E0B\u4E00\u500B\u767C\u6587\u6642\u9593\u767C\u51FA\uFF0C\u4F60\u7684\u4EBA\u8108\u90FD\u770B\u5F97\u5230\u3002`;
     }
   },
+  social_publish_now: {
+    en: (a) => `Post #${a.id} on its channel now, not at its posting time (even while posting is paused). Everyone who follows you can see it.`,
+    "zh-Hant": (a) => `\u7ACB\u5373\u5728\u5B83\u7684\u983B\u9053\u767C\u51FA\u8CBC\u6587 #${a.id}\uFF0C\u4E0D\u7B49\u767C\u6587\u6642\u9593\uFF08\u66AB\u505C\u767C\u6587\u6642\u4E5F\u6703\u767C\uFF09\u3002\u767C\u51FA\u5F8C\u95DC\u6CE8\u4F60\u7684\u4EBA\u90FD\u770B\u5F97\u5230\u3002`
+  },
+  social_posted_update: {
+    en: (a) => a.repost ? `Take post #${a.id} down (its likes and comments go) and put it up again${a.social_copy ? ` as ${q(a.social_copy)}` : ""}.` : `Change the text of the posted post #${a.id} to ${q(a.social_copy)}. On LinkedIn it stays up with its likes and comments; on other channels it comes down and goes out again.`,
+    "zh-Hant": (a) => a.repost ? `\u64A4\u4E0B\u8CBC\u6587 #${a.id}\uFF08\u8B9A\u548C\u7559\u8A00\u6703\u6D88\u5931\uFF09\uFF0C\u518D\u91CD\u65B0\u767C\u51FA${a.social_copy ? `\uFF0C\u5167\u5BB9\u6539\u70BA ${q(a.social_copy)}` : ""}\u3002` : `\u628A\u5DF2\u767C\u51FA\u7684\u8CBC\u6587 #${a.id} \u6539\u70BA ${q(a.social_copy)}\u3002LinkedIn \u4E0A\u539F\u5730\u4FEE\u6539\uFF0C\u8B9A\u548C\u7559\u8A00\u4FDD\u7559\uFF1B\u5176\u4ED6\u983B\u9053\u6703\u64A4\u4E0B\u5F8C\u91CD\u767C\u3002`
+  },
+  social_posted_delete: {
+    en: (a) => `Take post #${a.id} down from its channel, with its likes and comments. This can't be undone.`,
+    "zh-Hant": (a) => `\u628A\u8CBC\u6587 #${a.id} \u5F9E\u5B83\u7684\u983B\u9053\u64A4\u4E0B\uFF0C\u8B9A\u548C\u7559\u8A00\u4E00\u8D77\u522A\u9664\uFF0C\u7121\u6CD5\u5FA9\u539F\u3002`
+  },
   social_skip: { en: (a) => `Skip post #${a.id}.`, "zh-Hant": (a) => `\u8DF3\u904E\u8CBC\u6587 #${a.id}\u3002` },
   social_restore: {
     en: (a) => `Bring back post #${a.id}.`,
@@ -8838,11 +8856,11 @@ var confirmCopy = {
   },
   social_pictures_attach: {
     en: (a) => {
-      const n = Array.isArray(a.urls) ? a.urls.length : 0;
+      const n = (Array.isArray(a.urls) ? a.urls.length : 0) + (Array.isArray(a.files) ? a.files.length : 0);
       return `${a.append ? "Add" : "Put"} your ${n} picture${n === 1 ? "" : "s"} ${a.append ? "after the pictures on" : "on"} post #${a.id}${a.append ? "" : ", in place of its picture"} (free). On LinkedIn a set goes out as a swipeable PDF carousel.`;
     },
     "zh-Hant": (a) => {
-      const n = Array.isArray(a.urls) ? a.urls.length : 0;
+      const n = (Array.isArray(a.urls) ? a.urls.length : 0) + (Array.isArray(a.files) ? a.files.length : 0);
       return `${a.append ? `\u5728\u8CBC\u6587 #${a.id} \u73FE\u6709\u5716\u7247\u5F8C\u52A0\u4E0A` : `\u628A\u8CBC\u6587 #${a.id} \u7684\u5716\u7247\u63DB\u6210`}\u4F60\u7684 ${n} \u5F35\u5716\u7247\uFF08\u514D\u8CBB\uFF09\u3002\u5728 LinkedIn \u4E0A\uFF0C\u4E00\u7D44\u5716\u7247\u6703\u4EE5\u53EF\u6ED1\u52D5\u7684 PDF \u8F2A\u64AD\u767C\u51FA\u3002`;
     }
   },
@@ -11613,6 +11631,17 @@ var channelsParam = {
   items: { type: "string", enum: CHANNEL_KEYS },
   description: "Which channels to write for: linkedin, facebook, instagram, google_business. Leave out to write for every connected channel (one post each, one credit each); give one only when the user names it. YouTube and TikTok take a video: use social_video_add."
 };
+var FILE_SCHEMA = {
+  type: "object",
+  properties: {
+    download_url: { type: "string" },
+    file_id: { type: "string" },
+    mime_type: { type: "string" },
+    file_name: { type: "string" }
+  },
+  required: ["download_url", "file_id"]
+};
+var fileLinks = (value) => (Array.isArray(value) ? value : value ? [value] : []).map((f) => String(f?.download_url ?? "").trim()).filter(Boolean);
 var queuedAt = positionParam("the posts", "Leave out for the front (the next posting times).");
 var channelsOf = (value) => {
   const list2 = Array.isArray(value) ? value.map((v) => String(v).toLowerCase()).filter((v) => CHANNEL_KEYS.includes(v)) : [];
@@ -11736,6 +11765,59 @@ var socialTools = [
       return { approved: results.filter((r) => r.ok).length, results };
     }
   }),
+  tool({
+    name: "social_publish_now",
+    description: "Post one social post on its channel now instead of at its posting time: a draft waiting for approval, a queued post, or one that didn't go out. It goes even while posting is paused. It goes out in the background: the answer says it is publishing; read social_post_get after a minute for its link (or why it couldn't go). Not while its picture is being made.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "social",
+    need: write5,
+    risk: "W3",
+    gates: ["VER"],
+    run: async (ctx, { id }) => {
+      const n = Number(id);
+      if (!Number.isInteger(n) || n <= 0) throw new Error("Which post?");
+      const post = await ws(ctx).publishSocialNow(n, { background: true });
+      return post.status === "published" ? post : { ...post, note: "Posting now. Check social_post_get in a minute for its link." };
+    }
+  }),
+  tool({
+    name: "social_posted_update",
+    description: "Change a social post that has already gone out. On LinkedIn the new text replaces the old in place: the post keeps its likes and comments (its pictures can't change this way). With repost, and on Facebook, Instagram and Google, the old post comes down with its likes and comments and the new version goes out now. Without social_copy and with repost, it goes out again as it is (e.g. after new pictures).",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer" },
+        social_copy: { type: "string", description: "The post's new text" },
+        repost: { type: "boolean", description: "Take it down and put it up again instead of editing it" }
+      },
+      required: ["id"]
+    },
+    group: "social",
+    need: write5,
+    risk: "W3",
+    gates: ["VER"],
+    run: async (ctx, { id, social_copy, repost }) => {
+      const n = Number(id);
+      if (!Number.isInteger(n) || n <= 0) throw new Error("Which post?");
+      const copy = typeof social_copy === "string" ? social_copy.trim() : "";
+      if (!copy && repost !== true) throw new Error("Give the new text (social_copy), or repost: true.");
+      return ws(ctx).republishSocial(n, copy || void 0, repost === true);
+    }
+  }),
+  tool({
+    name: "social_posted_delete",
+    description: "Take a social post that has gone out down from its channel (LinkedIn, Facebook, Instagram, Google). Its likes and comments go with it; this can't be undone.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "social",
+    need: write5,
+    risk: "W3",
+    gates: ["VER"],
+    run: async (ctx, { id }) => {
+      const n = Number(id);
+      if (!Number.isInteger(n) || n <= 0) throw new Error("Which post?");
+      return ws(ctx).deletePostedSocial(n);
+    }
+  }),
   tool({
     name: "social_skip",
     description: "Skip a LinkedIn post (it won't be posted; it can be restored).",
@@ -11982,27 +12064,35 @@ var socialTools = [
   }),
   tool({
     name: "social_pictures_attach",
-    description: "Put the user's own pictures on a post, in order: public https links to image files (JPEG, PNG or WebP), for example slides another assistant made. 1-20 pictures; append adds them after the post's current ones. Free (no AI). They replace Maggie's picture; a post from an idea shares them with its other channels. Instagram and Facebook post the first 10, Google Business the first. On LinkedIn a set goes out as a swipeable PDF carousel unless social_carousel_set says images. Preview first.",
+    description: "Put the user's own pictures on a post, in order: pictures from this chat (files: ones the user added or that were made here) or public https links to image files (urls), JPEG, PNG or WebP, for example carousel slides. 1-20 pictures; append adds them after the post's current ones. Free (no AI). They replace Maggie's picture; a post from an idea shares them with its other channels. Instagram and Facebook post the first 10, Google Business the first. On LinkedIn a set goes out as a swipeable PDF carousel unless social_carousel_set says images. If you can pass neither, give the user social_upload_link. Preview first.",
     parameters: {
       type: "object",
       properties: {
         id: { type: "integer", description: "The post (from social_list), not gone out yet" },
+        files: {
+          type: "array",
+          items: FILE_SCHEMA,
+          description: "Pictures from this chat, in the order they should appear"
+        },
         urls: {
           type: "array",
           items: { type: "string" },
-          description: "Public https links to the image files, in the order they should appear"
+          description: "Public https links to the image files, in order (after the files, when both are given)"
         },
         append: { type: "boolean", description: "Add after the post's current pictures instead of replacing them" }
       },
-      required: ["id", "urls"]
+      required: ["id"]
     },
+    fileParams: ["files"],
     group: "social",
     need: write5,
     risk: "W1",
     gates: ["VER"],
-    run: async (ctx, { id, urls, append }) => {
-      const list2 = (Array.isArray(urls) ? urls : []).map((u) => String(u).trim()).filter(Boolean);
-      if (!list2.length) throw new Error("Give at least one https link to a picture.");
+    run: async (ctx, { id, urls, files, append }) => {
+      const list2 = [...fileLinks(files), ...(Array.isArray(urls) ? urls : []).map((u) => String(u).trim())].filter(
+        Boolean
+      );
+      if (!list2.length) throw new Error("Give the pictures (files from this chat, or https links).");
       if (list2.length > 20) throw new Error("A post takes up to 20 pictures.");
       if (list2.some((u) => !u.startsWith("https://"))) throw new Error("Every picture needs a public https link.");
       const out = await ws(ctx).setSocialPictures(Number(id), { urls: list2, append: append === true });
@@ -12015,30 +12105,57 @@ var socialTools = [
   }),
   tool({
     name: "social_carousel_pdf_attach",
-    description: "A LinkedIn post goes out as this PDF: a swipeable document carousel (a public https link to the PDF, up to 300 pages and 20 MB, no password). Its first 20 pages also become the post's pictures (what its other channels post). Free. Change the pictures later and the carousel is made from them instead. Preview first.",
+    description: "A LinkedIn post goes out as this PDF: a swipeable document carousel. The PDF from this chat (file: one the user added or that was made here) or a public https link to it (url); up to 300 pages and 20 MB, no password. Its first 20 pages also become the post's pictures (what its other channels post). Free. Change the pictures later and the carousel is made from them instead. If you can pass neither, give the user social_upload_link. Preview first.",
     parameters: {
       type: "object",
       properties: {
         id: { type: "integer", description: "A LinkedIn post (from social_list), not gone out yet" },
+        file: { ...FILE_SCHEMA, description: "The PDF from this chat" },
         url: { type: "string", description: "Public https link to the PDF file" },
         title: {
           type: "string",
           description: "Shown on the carousel (up to 120 characters); the post's topic if left out"
         }
       },
-      required: ["id", "url"]
+      required: ["id"]
     },
+    fileParams: ["file"],
     group: "social",
     need: write5,
     risk: "W1",
     gates: ["VER", "LI"],
-    run: async (ctx, { id, url, title }) => {
-      const link = String(url ?? "").trim();
-      if (!link.startsWith("https://")) throw new Error("Give a public https link to the PDF.");
+    run: async (ctx, { id, url, file, title }) => {
+      const link = fileLinks(file)[0] ?? String(url ?? "").trim();
+      if (!link.startsWith("https://"))
+        throw new Error("Give the PDF (a file from this chat, or a public https link).");
       const out = await ws(ctx).attachSocialCarouselPdf(Number(id), { url: link, ...title ? { title } : {} });
       return { id: out.id, pages: out.pages, pictures: out.pictures, carousel: out.carousel ?? null };
     }
   }),
+  tool({
+    name: "social_upload_link",
+    description: "A link that opens one post's picture in the CMO.so app, where the user uploads their own photos (up to 20, a carousel on LinkedIn) or, on a computer, a PDF carousel themselves. Use it when you can't pass the files (this chat can't send files to tools, or they are on the user's device). Give the link; nothing changes until they upload.",
+    parameters: {
+      type: "object",
+      properties: { id: { type: "integer", description: "The post (from social_list), not gone out yet" } },
+      required: ["id"]
+    },
+    group: "social",
+    need: read5,
+    risk: "R0",
+    run: async (ctx, { id }) => {
+      const post = await ws(ctx).socialPost(Number(id));
+      if (["published", "publishing", "cancelled"].includes(String(post.status)))
+        throw new Error("That post has already gone out (or was skipped): its pictures can't change.");
+      const site = ctx.domain ? `&site=${encodeURIComponent(ctx.domain)}` : "";
+      return {
+        id: post.id,
+        channel: post.provider ?? null,
+        url: `https://app.cmo.so/social?picture=${post.id}${site}`,
+        how: post.provider === "linkedin" ? "Open it, then Upload several photos (in order), or on a computer Upload a PDF carousel." : "Open it, then Upload several photos (in order)."
+      };
+    }
+  }),
   tool({
     name: "social_carousel_set",
     description: "How a LinkedIn post with a set of pictures goes out: format pdf (a swipeable PDF carousel made from the pictures, the default) or images (several pictures); and the carousel's title. Preview first.",
@@ -23167,6 +23284,30 @@ function description(t) {
   ].filter(Boolean);
   return `${t.description}${notes.length ? ` (${notes.join("; ")}.)` : ""} Changes data: call without confirm for a preview, then with confirm: true and the confirmation after the user agrees.`;
 }
+function fileMeta(t) {
+  return t.fileParams?.length ? { "openai/fileParams": t.fileParams } : void 0;
+}
+function withFreshFiles(t, signed, now) {
+  if (!t.fileParams?.length) return signed;
+  const fresh = /* @__PURE__ */ new Map();
+  const collect = (v) => {
+    for (const f of Array.isArray(v) ? v : [v])
+      if (f && typeof f === "object" && typeof f.file_id === "string")
+        fresh.set(f.file_id, f);
+  };
+  for (const p of t.fileParams) collect(now[p]);
+  const swap = (v) => {
+    if (Array.isArray(v)) return v.map(swap);
+    if (v && typeof v === "object" && typeof v.file_id === "string") {
+      const f = fresh.get(v.file_id);
+      return f && typeof f.download_url === "string" ? { ...v, download_url: f.download_url } : v;
+    }
+    return v;
+  };
+  const out = { ...signed };
+  for (const p of t.fileParams) if (p in out) out[p] = swap(out[p]);
+  return out;
+}
 function toolArgs(args) {
   const out = {};
   for (const [k, v] of Object.entries(args ?? {})) if (!CONTROL_ARGS.includes(k) && v !== void 0) out[k] = v;
@@ -23296,7 +23437,7 @@ function createMcpServer(deps) {
         description: description(t),
         inputSchema: inputSchema(t),
         annotations: { title: t.name.replace(/_/g, " "), ...annotations(t) },
-        ...deps.widgets && toolMeta(t.name) ? { _meta: toolMeta(t.name) } : {}
+        ...fileMeta(t) || deps.widgets && toolMeta(t.name) ? { _meta: { ...deps.widgets ? toolMeta(t.name) : {}, ...fileMeta(t) } } : {}
       }))
     };
   });
@@ -23332,7 +23473,7 @@ function createMcpServer(deps) {
         return fail(
           access.keyAccess === "read" && isWrite(t) ? "This key can only read. Reconnect with write access to make changes." : `You don't have permission to do this on ${domain ?? "this website"}.`
         );
-      const callArgs = approval ? approval.calls[0]?.args ?? {} : toolArgs(args);
+      const callArgs = approval ? withFreshFiles(t, approval.calls[0]?.args ?? {}, toolArgs(args)) : toolArgs(args);
       const ctx = { api: api2, domain, client: "mcp" };
       if (!isWrite(t)) return ok(await t.run(ctx, callArgs), viewForTool(t.name) ? { workspace: domain } : void 0);
       let standing = null;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.9.0",
+	"version": "0.9.2",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",