@omnisocials/mcp-server 1.3.3 → 1.3.5

package/README.md

@@ -191,6 +191,11 @@ Full API docs: [docs.omnisocials.com](https://docs.omnisocials.com)
 
 ## Changelog
 
+### 1.3.4
+
+- **Prevent accidental publishing.** Tool descriptions now front-load the difference: `create_post` is explicitly the **draft** path, `create_and_publish_post` carries a `STOP` gate listing every phrasing ("draft", "schedule", "review first", "save it", etc.) that should make the agent fall back to `create_post`. Default is "create draft" whenever there's ambiguity.
+- **Draft + publish responses now include an `Open in OmniSocials` link.** Drafts and scheduled posts link to the editor (`/create-post/:id`) so the user can review or edit before it goes live. Published posts link to the details view (`/posts/:id`). Applies to `create_post`, `create_and_publish_post`, `update_post`, and `get_post`.
+
 ### 1.3.2 / 1.3.3
 
 - **Fixed:** `create_post` and `create_and_publish_post` no longer throw `str.replace is not a function` when the API returns per-platform `content` as an object. Response formatters now wrapped in a safe fallback so a formatting throw can never surface as a tool error (closes the duplicate-on-retry trap).

package/build/tools/posts.js

@@ -39,6 +39,19 @@ function selectedChannels(p) {
 function displayDate(p) {
     return p?.schedule_at ?? p?.scheduled_at ?? p?.published_at ?? p?.created_at ?? null;
 }
+// Direct link into the OmniSocials dashboard so the user can verify a draft
+// or jump to a published post. Drafts and scheduled posts open in the editor
+// at /create-post/:id; published posts open in the details view at /posts/:id.
+function postAppUrl(p) {
+    const id = p?.id;
+    if (!id)
+        return null;
+    const status = String(p?.status || "").toLowerCase();
+    const isEditable = status === "draft" || status === "scheduled" || status === "" || status === "failed";
+    return isEditable
+        ? `https://app.omnisocials.com/create-post/${id}`
+        : `https://app.omnisocials.com/posts/${id}`;
+}
 export function registerPostTools(server, getClient) {
     server.tool("list_posts", "List all posts in the workspace. Optionally filter by status. The content column shows a preview of the default caption; if a post has per-platform overrides (e.g. a custom X version), the preview is suffixed with *(per-platform)* — call `get_post` to see every variant.", {
         status: z.string().optional().describe("Filter by status: draft, scheduled, published, failed"),
@@ -106,6 +119,7 @@ export function registerPostTools(server, getClient) {
         md += `| Field | Value |\n`;
         md += `|-------|-------|\n`;
         const schedAt = p.schedule_at ?? p.scheduled_at;
+        const appUrl = postAppUrl(p);
         md += `| **ID** | \`${p.id}\` |\n`;
         md += `| **Status** | ${capitalize(p.status || "—")} |\n`;
         md += `| **Type** | ${p.type || "post"} |\n`;
@@ -115,6 +129,8 @@ export function registerPostTools(server, getClient) {
         if (p.published_at)
             md += `| **Published** | ${formatDateTime(p.published_at)} |\n`;
         md += `| **Created** | ${formatDateTime(p.created_at)} |\n`;
+        if (appUrl)
+            md += `| **Open in OmniSocials** | ${appUrl} |\n`;
         if (p.media?.length) {
             md += `| **Media** | ${p.media.length} file(s) |\n`;
         }
@@ -150,7 +166,11 @@ export function registerPostTools(server, getClient) {
             content: [{ type: "text", text: md }],
         };
     });
-    server.tool("create_post", `Create a new social media post, story, or reel.
+    server.tool("create_post", `Create a **DRAFT** post, story, or reel in OmniSocials. The post is saved to the workspace but is NOT published to any social platform until you explicitly call \`publish_post\` or the user schedules it for a future time.
+
+USE THIS TOOL FOR: drafts, scheduled posts, "save it for later", review-before-publish, "make a draft", "write a draft post", "create a post" (when the user has NOT explicitly asked to publish/post right now), or any case where the user might want to review or tweak the post before it goes live.
+
+DO NOT use \`create_and_publish_post\` instead unless the user has explicitly said something like "post it now", "publish immediately", "go live", "send it". When in doubt, default to this tool — drafts can always be published later via \`publish_post\` and that's reversible; publishing is not.
 
 IMPORTANT — Before calling this tool, make sure you have all required information from the user. If anything is missing, ASK the user before calling:
 
@@ -196,14 +216,14 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
             link: z.string().optional(),
         }).optional().describe("Pinterest-specific options"),
         youtube: z.object({
-            title: z.string().optional(),
+            title: z.string().optional().describe("Short title shown on YouTube. Falls back to \"YouTube Short\" when omitted."),
             tags: z.array(z.string()).optional(),
             privacy_status: z.enum(["public", "private", "unlisted"]).optional(),
             category_id: z.string().optional(),
             made_for_kids: z.boolean().optional(),
             notify_subscribers: z.boolean().optional(),
             contains_synthetic_media: z.boolean().optional(),
-        }).optional().describe("YouTube Shorts options"),
+        }).optional().describe("YouTube Shorts options. Only applies when type is 'reel' and youtube is among the selected channels."),
         instagram: z.object({
             share_to_feed: z.boolean().optional(),
             thumbnail_type: z.enum(["from-video", "from-library"]).optional(),
@@ -238,10 +258,11 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
         // The post is already created by the time this runs. If response
         // formatting throws, we must NOT surface it as a tool error — agents
         // retry on errors and that produces orphan duplicate posts.
+        const appUrl = postAppUrl(p);
         try {
             const schedAt = p.schedule_at ?? p.scheduled_at;
             const channels = selectedChannels(p);
-            let md = `## Post Created\n\n`;
+            let md = `## Draft Created (not yet published)\n\n`;
             md += `| Field | Value |\n`;
             md += `|-------|-------|\n`;
             md += `| **ID** | \`${p.id}\` |\n`;
@@ -250,17 +271,31 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
                 md += `| **Scheduled** | ${formatDateTime(schedAt)} |\n`;
             if (channels.length)
                 md += `| **Channels** | ${channels.join(", ")} |\n`;
-            md += `\n**Content:** ${truncate(p.content, 100)}`;
+            if (appUrl)
+                md += `| **Open in OmniSocials** | ${appUrl} |\n`;
+            md += `\n**Content:** ${truncate(p.content, 100)}\n\n`;
+            md += `_Share the link above with the user so they can review or edit the draft. Publish later with \`publish_post\` once they confirm._`;
             return { content: [{ type: "text", text: md }] };
         }
         catch {
             // Fall back to the minimum the agent needs to confirm success — never error.
+            const fallback = `## Draft Created\n\n- **ID:** \`${p.id}\`\n- **Status:** ${p.status || "draft"}${appUrl ? `\n- **Open in OmniSocials:** ${appUrl}` : ""}\n\n_Share the link above with the user so they can review the draft._`;
             return {
-                content: [{ type: "text", text: `## Post Created\n\n- **ID:** \`${p.id}\`\n- **Status:** ${p.status || "draft"}\n\n_Post was created successfully. Use \`get_post\` with the ID above to see full details._` }],
+                content: [{ type: "text", text: fallback }],
             };
         }
     });
-    server.tool("create_and_publish_post", `Create a new post and publish it immediately (no scheduling).
+    server.tool("create_and_publish_post", `Create a post AND publish it to every selected social platform IMMEDIATELY. The post goes live within seconds, is publicly visible to followers on each platform, and **cannot be unpublished** through the OmniSocials API — the user would have to delete each post on each platform manually.
+
+**STOP — do NOT call this tool if the user said any of the following anywhere in the conversation:**
+- "draft", "make a draft", "save as draft", "save it"
+- "schedule", "later", "tomorrow", "next week", a specific time
+- "review first", "let me see it", "preview", "show me"
+- "create a post" without an explicit "now"/"publish"/"go live"
+
+In any of those cases, use \`create_post\` instead. It saves a draft you can show to the user, edit, and publish later via \`publish_post\` — that path is reversible at every step. This path is not. When in doubt, choose \`create_post\`.
+
+USE THIS TOOL ONLY when the user has explicitly asked to publish/post right now: "publish it", "post it now", "send it", "go live", "fire it off", etc.
 
 IMPORTANT — Before calling this tool, make sure you have all required information. If anything is missing, ASK the user first:
 
@@ -294,10 +329,10 @@ Do NOT call without required media — it will fail.`, {
             link: z.string().optional(),
         }).optional().describe("Pinterest-specific options"),
         youtube: z.object({
-            title: z.string().optional(),
+            title: z.string().optional().describe("Short title shown on YouTube."),
             tags: z.array(z.string()).optional(),
             privacy_status: z.enum(["public", "private", "unlisted"]).optional(),
-        }).optional().describe("YouTube Shorts options"),
+        }).optional().describe("YouTube Shorts options. Only applies when type is 'reel' and youtube is among the selected channels."),
         tiktok: z.object({
             privacy_level: z.enum(["PUBLIC_TO_EVERYONE", "MUTUAL_FOLLOW_FRIENDS", "FOLLOWER_OF_CREATOR", "SELF_ONLY"]).optional(),
         }).optional().describe("TikTok options"),
@@ -318,6 +353,7 @@ Do NOT call without required media — it will fail.`, {
             };
         }
         const p = result.data;
+        const appUrl = postAppUrl(p);
         try {
             const channels = selectedChannels(p);
             let md = `## Post Created & Publishing\n\n`;
@@ -327,13 +363,16 @@ Do NOT call without required media — it will fail.`, {
             md += `| **Status** | ${capitalize(p.status || "publishing")} |\n`;
             if (channels.length)
                 md += `| **Channels** | ${channels.join(", ")} |\n`;
+            if (appUrl)
+                md += `| **Open in OmniSocials** | ${appUrl} |\n`;
             md += `\n**Content:** ${truncate(p.content, 100)}`;
             return { content: [{ type: "text", text: md }] };
         }
         catch {
             // The post is already queued; never let a formatting throw look like an API error.
+            const fallback = `## Post Created & Publishing\n\n- **ID:** \`${p.id}\`\n- **Status:** ${p.status || "publishing"}${appUrl ? `\n- **Open in OmniSocials:** ${appUrl}` : ""}\n\n_Post was queued successfully._`;
             return {
-                content: [{ type: "text", text: `## Post Created & Publishing\n\n- **ID:** \`${p.id}\`\n- **Status:** ${p.status || "publishing"}\n\n_Post was queued successfully. Use \`get_post\` with the ID above for full details._` }],
+                content: [{ type: "text", text: fallback }],
             };
         }
     });
@@ -370,6 +409,7 @@ Do NOT call without required media — it will fail.`, {
         }
         const p = result.data;
         const schedAt = p.schedule_at ?? p.scheduled_at;
+        const appUrl = postAppUrl(p);
         let md = `## Post Updated\n\n`;
         md += `| Field | Value |\n`;
         md += `|-------|-------|\n`;
@@ -377,6 +417,8 @@ Do NOT call without required media — it will fail.`, {
         md += `| **Status** | ${capitalize(p.status || "—")} |\n`;
         if (schedAt)
             md += `| **Scheduled** | ${formatDateTime(schedAt)} |\n`;
+        if (appUrl)
+            md += `| **Open in OmniSocials** | ${appUrl} |\n`;
         return {
             content: [{ type: "text", text: md }],
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnisocials/mcp-server",
-  "version": "1.3.3",
+  "version": "1.3.5",
   "description": "MCP server for OmniSocials API - manage social media posts, media, accounts, analytics, and webhooks",
   "type": "module",
   "main": "build/index.js",