@omnisocials/mcp-server 1.35.0 → 1.46.0

package/build/tools/webhooks.js

@@ -28,9 +28,9 @@ export function registerWebhookTools(server, getClient) {
             content: [{ type: "text", text: md }],
         };
     });
-    server.tool("create_webhook", "Create a new webhook to receive event notifications. Available events: post.scheduled, post.published, post.failed", {
+    server.tool("create_webhook", "Create a new webhook to receive event notifications. Available events: post.scheduled, post.published, post.failed, post.approved (the last approval of a post's approval workflow is in), post.rejected (an approver rejected the post)", {
         url: z.string().describe("The HTTPS URL to send webhook events to"),
-        events: z.array(z.string()).describe("Events to subscribe to: post.scheduled, post.published, post.failed"),
+        events: z.array(z.string()).describe("Events to subscribe to: post.scheduled, post.published, post.failed, post.approved, post.rejected"),
     }, { title: "Create Webhook", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().createWebhook(params);
         if (result.error) {
@@ -95,7 +95,7 @@ export function registerWebhookTools(server, getClient) {
     server.tool("update_webhook", "Update a webhook's URL, events, or active status.", {
         id: z.string().describe("The webhook ID to update"),
         url: z.string().optional().describe("Updated HTTPS URL"),
-        events: z.array(z.string()).optional().describe("Updated event list"),
+        events: z.array(z.string()).optional().describe("Updated event list: post.scheduled, post.published, post.failed, post.approved, post.rejected"),
         is_active: z.boolean().optional().describe("Enable or disable the webhook"),
     }, { title: "Update Webhook", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ id, ...data }) => {
         const result = await getClient().updateWebhook(id, data);

package/build/types.d.ts

@@ -11,6 +11,12 @@ export interface ApiResponse<T = unknown> {
         credits_balance?: number | null;
         enforced?: boolean;
         enforce_from?: string;
+        platform?: string;
+        media_url?: string;
+        ratio?: string;
+        target?: string;
+        action?: "cropped" | "kept" | "crop_failed";
+        crop_url?: string;
     }>;
     pagination?: {
         next_cursor: string | null;
@@ -84,13 +90,23 @@ export interface InboxMessage {
 }
 /** What GET /inbox/next serves (and what `reply_to_inbox` returns as `next`
  * when `include_next` is set). `message` is the unanswered incoming item: its
- * `id` is what hide/delete take, its `conversation_id` is what reply takes.
+ * `id` is what hide/delete take and the `message_id` to pass to reply for a
+ * comment thread, its `conversation_id` is what reply takes as the path.
  * `messages` is the thread oldest first (the most recent 50, plus the target
  * and its parent when they fall outside that window). */
 export interface InboxNextUnanswered {
     conversation: InboxConversation;
     message: InboxMessage;
     messages: InboxMessage[];
+    /** Only Instagram and Facebook DMs have a reply window (Meta's 24 hours
+     * after the customer's last message): `closes_at` is that deadline and
+     * `open` is false once it has passed, in which case reply_to_inbox answers
+     * 422 outside_messaging_window. Every other item: open true, closes_at
+     * null. */
+    reply_window: {
+        open: boolean;
+        closes_at: string | null;
+    };
 }
 /** Response of DELETE /inbox/messages/:id. Replies under the comment are
  * removed with it; their inbox ids are listed in `removed_reply_ids`. */
@@ -105,6 +121,17 @@ export type ApiPostMediaEntry = string | {
     id?: string | number;
     url?: string;
     alt?: string;
+    /** Image fit of this channel's copy: 'crop' = url is a crop of crop.of. */
+    fit?: "crop" | "keep";
+    crop?: {
+        of: string;
+        id?: string;
+        ratio: string;
+        focus: {
+            x: number;
+            y: number;
+        } | null;
+    };
     [k: string]: unknown;
 };
 /** A thread part as echoed back by the API (X / Bluesky / Mastodon / Threads). */
@@ -170,6 +197,10 @@ export interface ApiPost {
     status: string;
     /** "post" | "story" | "reel" */
     type?: string;
+    /** The comment-to-DM automations bound to this post (get_post on a post
+     * that goes to Instagram or Facebook, create/update when the request
+     * carried it); null = none. */
+    comment_dm_automation?: PostCommentDmAutomation | null;
     /** Per-platform captions keyed by platform id plus "default". Legacy
      * servers returned a plain string. */
     content?: Record<string, string> | string;
@@ -237,6 +268,12 @@ export interface ApiPost {
     bluesky?: ApiPlatformOptionsOut;
     mastodon?: ApiPlatformOptionsOut;
     threads?: ApiPlatformOptionsOut;
+    /** Telegram options (silent, pin, buttons, poll ...) and, once sent,
+     * `result` with the message ids and the links. */
+    telegram?: ApiPlatformOptionsOut;
+    /** Discord options (silent, thread_name, buttons, poll ...) and, once
+     * sent, `result` with the message id and the link. */
+    discord?: ApiPlatformOptionsOut;
     /** platform → user-friendly error message; only failed platforms appear.
      * null while draft/scheduled/processing or when every platform succeeded. */
     errors?: Record<string, string> | null;
@@ -274,6 +311,68 @@ export interface RejectPostResult {
     approval_status: "rejected";
     message?: string;
 }
+/** One approver of a step in GET /posts/:id/approval. */
+export interface PostApprovalApprover {
+    id: string;
+    name: string | null;
+    email: string | null;
+    status: "pending" | "approved" | "rejected";
+    decided_at: string | null;
+    /** The reason this approver gave with a rejection. */
+    comment: string | null;
+}
+export interface PostApprovalStep {
+    order: number;
+    name: string;
+    /** `all` = every approver of the step must approve. `any` = one approval is enough. */
+    require_mode: "all" | "any";
+    status: "pending" | "approved" | "rejected";
+    approvers: PostApprovalApprover[];
+}
+export interface PostApprovalComment {
+    id: string;
+    author: {
+        id: string;
+        name: string | null;
+    } | null;
+    message: string;
+    /** The channel the comment is about (`instagram`, `linkedin_page`, ...). Null = the whole post. */
+    account: string | null;
+    created_at: string;
+}
+/** `data` of GET /posts/:id/approval (backend/routes/api/v1/posts.js).
+ * `status: "none"` = the post has no approval workflow: `workflow`,
+ * `requested_by`, `requested_at`, `current_step` and `rejection` are null and
+ * `steps` and `comments` are empty. */
+export interface PostApproval {
+    post_id: string;
+    status: "none" | "pending" | "approved" | "rejected";
+    /** `id` is null for a one-off approval that was not made from a saved workflow. */
+    workflow: {
+        id: string | null;
+        name: string;
+    } | null;
+    requested_by: {
+        id: string;
+        name: string | null;
+    } | null;
+    requested_at: string | null;
+    /** Order of the step the post waits on. Null when the review is finished. */
+    current_step: number | null;
+    steps: PostApprovalStep[];
+    rejection: {
+        by: {
+            id: string;
+            name: string | null;
+        };
+        reason: string | null;
+        at: string | null;
+        step: number | null;
+    } | null;
+    /** The review thread, oldest first. Includes the entries OmniSocials
+     * writes when a reviewer edits the post. */
+    comments: PostApprovalComment[];
+}
 /** One place from GET /locations/search
  * (@openapi block in backend/routes/api/v1/locations.js). */
 export interface LocationPlace {
@@ -314,6 +413,59 @@ export interface LocationSearchResult {
     };
     needsPermission?: boolean;
 }
+/** One product Pin from GET /pinterest/products
+ * (@openapi block in backend/routes/api/v1/pinterest.js). */
+export interface PinterestProduct {
+    /** Use in `pinterest.product_tags`. */
+    pin_id: string;
+    title?: string | null;
+    description?: string | null;
+    link?: string | null;
+    image_url?: string | null;
+    /** Catalog source only. */
+    price?: number | null;
+    currency?: string | null;
+    availability?: string | null;
+    item_id?: string | null;
+}
+/** GET /pinterest/products envelope: NOT the standard data/error envelope.
+ * Success: `products` + `bookmark` + `source` + `catalog_access` (and, for
+ * the catalog source, `product_groups` + `product_group_id`). When the list
+ * could not be read, `error` is a { code, message } object with code one of
+ * pinterest_not_connected | pinterest_catalog_access_required |
+ * platform_error, and `products` is absent. */
+export interface PinterestProductsResult {
+    products?: PinterestProduct[];
+    bookmark?: string | null;
+    source?: "catalog" | "pins";
+    catalog_access?: boolean;
+    /** The connection has catalog access but the account has no catalog yet. */
+    no_catalog?: boolean;
+    product_groups?: Array<{
+        id: string;
+        name?: string | null;
+    }>;
+    product_group_id?: string | null;
+    error?: string | {
+        code: string;
+        message: string;
+    };
+}
+/** GET /pinterest/products/validate result. `unverified` = the check could
+ * not run; the publish step is then the final check. */
+export interface PinterestProductCheck {
+    valid?: boolean;
+    pin_id?: string | null;
+    title?: string | null;
+    link?: string | null;
+    image_url?: string | null;
+    unverified?: boolean;
+    reason?: string;
+    error?: string | {
+        code: string;
+        message: string;
+    };
+}
 /** One track from GET /audio/search
  * (@openapi block in backend/routes/api/v1/audio.js). */
 export interface InstagramAudioTrack {
@@ -364,16 +516,33 @@ export interface MediaItem {
     filename: string;
     folder_id?: string | null;
     size: string;
+    width?: number | null;
+    height?: number | null;
     status?: string;
     created_at: string;
+    pdf?: {
+        id: string;
+        name: string;
+        url: string;
+        page?: number;
+        total_pages: number;
+        rendered_pages: number;
+        truncated?: boolean;
+        pages?: Array<{
+            url: string;
+            width?: number | null;
+            height?: number | null;
+        }>;
+    };
 }
 /**
  * Extra top-level fields returned by /media/upload* when the uploaded file is a
- * PDF. A PDF is rasterized into one image slide per page (max 20): `data`
- * mirrors the first slide (back-compat), while `slides` + `media_ids` carry the
- * whole carousel in page order. Pass ALL of `media_ids` to create_post. On
- * LinkedIn the slides post as a native swipeable document; elsewhere as an
- * image carousel.
+ * PDF. A PDF is rasterized into one image slide per page (max 20) and the
+ * original file is kept: `data` mirrors the first slide (back-compat), while
+ * `slides` + `media_ids` carry the whole carousel in page order. Pass ALL of
+ * `media_ids` to create_post. On LinkedIn the slides post as a native
+ * swipeable document made from the original PDF (unless the post's
+ * linkedin.document_source is "slides"); elsewhere as an image carousel.
  */
 export interface PdfUploadResult {
     slides: MediaItem[];
@@ -382,6 +551,10 @@ export interface PdfUploadResult {
         total_pages: number;
         rendered_pages: number;
         truncated: boolean;
+        id?: string;
+        name?: string;
+        url?: string;
+        size_bytes?: number;
     };
 }
 export interface Account {
@@ -407,6 +580,29 @@ export interface Account {
     }[];
     platform_details?: {
         subscription_type?: string;
+        /** Telegram: "channel", "supergroup" or "group". */
+        chat_type?: string | null;
+        /** Telegram chat id (a negative number as a string). */
+        chat_id?: string | null;
+        /** Telegram: subscribers of a channel, members of a group. */
+        subscribers?: number | null;
+        /** Telegram: t.me link of a public chat, else the chat's private link.
+         * Discord: discord.com/channels link to the channel. */
+        url?: string | null;
+        /** Discord: the server id. */
+        guild_id?: string | null;
+        /** Discord: the server name (Continue with Discord, or a pasted URL in a server the OmniSocials bot is in). */
+        guild_name?: string | null;
+        /** Discord: the channel id. */
+        channel_id?: string | null;
+        /** Discord: the channel name without the # (read by the OmniSocials bot, or given by the person); null when unknown. */
+        channel_name?: string | null;
+        /** Discord: text, voice, announcement, stage, forum or media, as the bot read it; null when it cannot see the channel. */
+        channel_type?: "text" | "voice" | "announcement" | "stage" | "forum" | "media" | null;
+        /** Discord: the webhook's name, shown as the sender of every post. */
+        webhook_name?: string | null;
+        /** Discord: "oauth" (Continue with Discord) or "url" (a pasted webhook URL). */
+        connect_method?: string | null;
     };
 }
 export interface Webhook {
@@ -435,6 +631,162 @@ export interface HashtagSet {
     created_at: string;
     updated_at: string;
 }
+/** The channel an automation runs on: the Instagram account or the Facebook Page. */
+export type AutomationPlatform = "instagram" | "facebook";
+/** `story_reply` is Instagram only: Facebook has no story replies. */
+export type AutomationTriggerKind = "comment" | "dm" | "story_reply";
+export type AutomationScope = "post" | "next_post" | "any";
+export type AutomationMatch = "word" | "contains" | "any";
+export interface AutomationPost {
+    /** `omnisocials` = a post of this workspace, `instagram` / `facebook` = read from that platform */
+    source: "omnisocials" | "instagram" | "facebook";
+    id: string;
+    caption: string;
+    thumbnail_url: string | null;
+    permalink: string | null;
+    media_type: string | null;
+    status?: string;
+    post_date_time?: string | null;
+    /** omnisocials source only: the post is live on the automation's platform */
+    live?: boolean;
+    timestamp?: string | null;
+}
+export interface Automation {
+    id: string;
+    type: "comment_to_dm";
+    platform: AutomationPlatform;
+    status: "active" | "paused" | "completed";
+    name: string | null;
+    /** The OmniSocials post the automation listens on (scope post), else null */
+    post_id: string | null;
+    /** The Instagram media id, set once the post is live (null on Facebook) */
+    instagram_media_id: string | null;
+    /** The Facebook Page post id ({page-id}_{post-id}), set once the post is live (null on Instagram) */
+    facebook_post_id: string | null;
+    post: AutomationPost | null;
+    trigger: {
+        kinds: AutomationTriggerKind[];
+        scope: AutomationScope | null;
+        keywords: string[];
+        match: AutomationMatch;
+    };
+    actions: {
+        dm: {
+            text: string;
+        };
+        public_reply: {
+            enabled: boolean;
+            variations: string[];
+        };
+    };
+    limits: {
+        max_sends: number | null;
+        stop_at: string | null;
+    };
+    stats: {
+        matched: number;
+        sent: number;
+        skipped: number;
+        failed: number;
+        last_event_at: string | null;
+    };
+    created_at: string;
+    updated_at: string;
+}
+/** The body of POST /automations; every section is optional on PATCH. */
+export interface AutomationInput {
+    name?: string | null;
+    /** Default instagram; cannot change on PATCH (400 platform_immutable) */
+    platform?: AutomationPlatform;
+    post_id?: string;
+    instagram_media_id?: string;
+    /** A Page post published outside OmniSocials; implies platform facebook */
+    facebook_post_id?: string;
+    trigger?: {
+        kinds?: AutomationTriggerKind[];
+        scope?: AutomationScope;
+        keywords?: string[];
+        match?: AutomationMatch;
+    };
+    actions?: {
+        dm: {
+            text: string;
+        };
+        public_reply?: {
+            enabled?: boolean;
+            variations?: string[];
+        };
+    };
+    limits?: {
+        max_sends?: number | null;
+        stop_at?: string | null;
+    };
+    status?: "active" | "paused";
+}
+/** `comment_dm_automation` on a post: the automations bound to that post. */
+export interface CommentDmAutomationInput {
+    /** One automation per listed channel; default Instagram when the post goes there, else Facebook */
+    platforms?: AutomationPlatform[];
+    trigger?: {
+        keywords?: string[];
+        match?: AutomationMatch;
+    };
+    actions: {
+        dm: {
+            text: string;
+        };
+        public_reply?: {
+            enabled?: boolean;
+            variations?: string[];
+        };
+    };
+    limits?: {
+        max_sends?: number | null;
+        stop_at?: string | null;
+    };
+}
+/** `comment_dm_automation` on a post: the first automation's fields (Instagram
+ * first), plus the channels and the id of each automation. */
+export interface PostCommentDmAutomation extends Automation {
+    platforms?: AutomationPlatform[];
+    automations?: Array<{
+        id: string;
+        platform: AutomationPlatform;
+        status: Automation["status"];
+    }>;
+}
+export interface AutomationEvent {
+    id: string;
+    automation_id: string;
+    kind: AutomationTriggerKind;
+    outcome: "sent" | "skipped" | "failed" | "pending";
+    reason: string | null;
+    reason_label: string | null;
+    /** `username` = the Instagram @handle, or the person's name on Facebook */
+    person: {
+        id: string;
+        username: string | null;
+    };
+    trigger_id: string | null;
+    /** The comment; a DM's text only with the inbox:read scope */
+    trigger_text: string | null;
+    /** The DM that was sent */
+    message: string | null;
+    public_reply: string | null;
+    platform_message_id: string | null;
+    created_at: string;
+    sent_at: string | null;
+}
+export interface AutomationEventsResult {
+    data: AutomationEvent[];
+    counts: Record<string, number>;
+    pagination: {
+        total: number;
+        limit: number;
+        offset: number;
+        has_more: boolean;
+    };
+}
 /** Per-platform stats block inside AnalyticsOverview.platform_breakdown.
  * Shape from backend/routes/api/v1/analytics.js (overview route). */
 export interface AnalyticsPlatformBreakdown {
@@ -476,6 +828,16 @@ export interface MediaCompatibility {
 /** POST /media/check response — the compatibility block is spread top-level
  * next to `file` and `connected_platforms`; there is no `data` key
  * (backend/routes/api/v1/media.js check route). */
+export interface MediaFitRow {
+    platform: string;
+    display_name: string;
+    fits: boolean;
+    ratio: string;
+    shown: "whole" | "cut";
+    target: string | null;
+    default_action: "crop" | "keep" | null;
+    message: string | null;
+}
 export interface MediaCheckResult {
     error?: {
         code: string;
@@ -485,11 +847,15 @@ export interface MediaCheckResult {
         size_bytes: number | null;
         mime: string | null;
         size_known: boolean;
+        width?: number | null;
+        height?: number | null;
     };
     connected_platforms?: string[];
     compatible?: boolean;
     warnings?: MediaCompatWarning[];
     summary?: string | null;
+    /** How each connected channel with a fit rule shows this image as a feed post. */
+    fit?: MediaFitRow[];
 }
 /** One folder from GET /folders — formatFolder in
  * backend/routes/api/v1/folders.js (:15-23). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnisocials/mcp-server",
-  "version": "1.35.0",
+  "version": "1.46.0",
   "mcpName": "io.github.omnisocials/mcp-server",
   "description": "MCP server for OmniSocials API - manage social media posts, media, accounts, analytics, and webhooks",
   "type": "module",
@@ -45,7 +45,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1"
+    "@modelcontextprotocol/sdk": "^1.32.1"
   },
   "devDependencies": {
     "@types/node": "^25.3.3",
@@ -53,7 +53,7 @@
   },
   "overrides": {
     "zod": "4.4.0",
-    "fast-uri": "^3.1.7",
+    "fast-uri": "^3.1.8",
     "hono": "^4.13.7",
     "qs": "^6.16.0"
   }