@wix/mcp 1.0.16 → 1.0.17

package/build/dts/api-call/index.d.ts

@@ -1,4 +1,4 @@
 import { WixMcpServer } from '../wix-mcp-server.js';
 import { McpAuthenticationStrategy } from '../auth/index.js';
-export declare function addApiCallTool(server: WixMcpServer, strategy: McpAuthenticationStrategy): void;
+export declare function addApiCallTool(server: WixMcpServer, strategy: McpAuthenticationStrategy, allowedTools?: string[]): void;
 //# sourceMappingURL=index.d.ts.map

package/build/dts/api-call/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api-call/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAE7D,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,yBAAyB,QAqMpC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api-call/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAG7D,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,yBAAyB,EACnC,YAAY,GAAE,MAAM,EAAwD,QAuO7E"}

package/build/dts/api-call/index.js

@@ -1,150 +1,183 @@
 import { z } from 'zod';
 import { logger } from '../infra/logger.js';
 import { handleWixAPIResponse } from '../tool-utils.js';
-export function addApiCallTool(server, strategy) {
-    server.tool('CallWixSiteAPI', [
-        'Call Wix apis on a business or site. Use this to create, read, update, and delete data and other Wix entities in your Wix site,',
-        `You should ALWAYS check the rest docs - "SearchWixRESTDocumentation" for the specific API you want to call, don't just call it without knowing what it does, CHECK THE DOCS`,
-        'Error Handling:',
-        'If the error is related to missing installed app or "WDE0110: Wix Code not enabled", you should install the missing app by using ReadFullDocsArticle tool to fetch the article - https://dev.wix.com/docs/kb-only/MCP_REST_RECIPES_KB_ID/TRAIN_wix.devcenter.apps.installer.v1.AppsInstallerService.InstallApp',
-        '**Note:** there is no need to check if an app is installed/ Wix Code enabled in advance, just call the API and handle the error if it occurs, the API error message will state it clearly.',
-        'For any other error, use your default error handling mechanism'
-    ].join('\n'), {
-        siteId: z
-            .string()
-            .describe('The id of the site selected using site selection tool'),
-        url: z
-            .string()
-            .describe('The url of the api to call - ALWAYS get the information from the Wix REST docs or from the conversation context, the URL MUST BE ABSOLUTE URL'),
-        method: z
-            .string()
-            .describe('The HTTP method to use for the API call (e.g. GET, POST, PUT, DELETE)'),
-        body: z
-            .string()
-            .optional()
-            .describe('A string representing of a valid JSON object to describe the body of the request')
-    }, async ({ url, body, method, siteId }, { httpClient }) => {
-        logger.log(`Calling Wix Site API: ${siteId} ${url}, body: ${JSON.stringify(body)}`);
-        try {
-            const response = await httpClient.request({
-                url,
-                method: method,
-                headers: {
-                    ...(await strategy.getSiteAuthHeaders(siteId)),
-                    ...(body ? { 'Content-Type': 'application/json' } : {})
-                },
-                data: method === 'GET' ? undefined : body
-            });
-            const responseData = await handleWixAPIResponse(response);
-            return {
-                content: [
-                    {
-                        type: 'text',
-                        text: `Wix Site API call successful: ${JSON.stringify(responseData)}`
-                    }
-                ]
-            };
-        }
-        catch (error) {
-            logger.error(`Failed to call Wix Site API: ${error}`);
-            const response = error.response;
-            if (!response) {
-                throw new Error(`Failed to call Wix Site API: ${error}`);
+import { isApiUrlAllowed } from './validation.js';
+export function addApiCallTool(server, strategy, allowedTools = ['CallWixSiteAPI', 'ListWixSites', 'ManageWixSite']) {
+    if (allowedTools.includes('CallWixSiteAPI')) {
+        server.tool('CallWixSiteAPI', [
+            'Call Wix apis on a business or site. Use this to create, read, update, and delete data and other Wix entities in your Wix site,',
+            `You should ALWAYS check the rest docs - "SearchWixRESTDocumentation" for the specific API you want to call, don't just call it without knowing what it does, CHECK THE DOCS`,
+            'Error Handling:',
+            'If the error is related to missing installed app or "WDE0110: Wix Code not enabled", you should install the missing app by using ReadFullDocsArticle tool to fetch the article - https://dev.wix.com/docs/kb-only/MCP_REST_RECIPES_KB_ID/TRAIN_wix.devcenter.apps.installer.v1.AppsInstallerService.InstallApp',
+            '**Note:** there is no need to check if an app is installed/ Wix Code enabled in advance, just call the API and handle the error if it occurs, the API error message will state it clearly.',
+            'For any other error, use your default error handling mechanism'
+        ].join('\n'), {
+            siteId: z
+                .string()
+                .describe('The id of the site selected using site selection tool'),
+            url: z
+                .string()
+                .url()
+                .describe('The url of the api to call - ALWAYS get the information from the Wix REST docs or from the conversation context, the URL MUST BE ABSOLUTE URL'),
+            method: z
+                .string()
+                .describe('The HTTP method to use for the API call (e.g. GET, POST, PUT, DELETE)'),
+            body: z
+                .string()
+                .optional()
+                .describe('A string representing of a valid JSON object to describe the body of the request')
+        }, async ({ url, body, method, siteId }, { httpClient }) => {
+            logger.log(`Calling Wix Site API: ${siteId} ${url}, body: ${JSON.stringify(body)}`);
+            const { isAllowed, error: urlError } = isApiUrlAllowed(url);
+            if (!isAllowed) {
+                return {
+                    content: [
+                        {
+                            isError: true,
+                            type: 'text',
+                            text: `Error validating URL: ${urlError}`
+                        }
+                    ]
+                };
             }
-            return handleWixAPIResponse(response);
-        }
-    });
-    server.tool('ListWixSites', 'List Wix sites for the current user, by default it will return all sites, but you can filter by name', {
-        nameSearch: z
-            .string()
-            .optional()
-            .describe('optional filer by name, if not provided all sites will be returned'),
-        // Hack for Cursor ignoring tools with no params (when nameSearch is optional)
-        alwaysTrue: z.boolean().describe('Always pass true to this parameter')
-    }, async ({ nameSearch }, { httpClient }) => {
-        const sitesRes = await httpClient.post('https://www.wixapis.com/site-list/v2/sites/query', {
-            query: {
-                cursorPaging: { limit: 21 },
-                filter: {
-                    ...(nameSearch
-                        ? {
-                            name: nameSearch
+            try {
+                const response = await httpClient.request({
+                    url,
+                    method: method,
+                    headers: {
+                        ...(await strategy.getSiteAuthHeaders(siteId)),
+                        ...(body ? { 'Content-Type': 'application/json' } : {})
+                    },
+                    data: method === 'GET' ? undefined : body
+                });
+                const responseData = await handleWixAPIResponse(response);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Wix Site API call successful: ${JSON.stringify(responseData)}`
                         }
-                        : {}),
-                    namespace: {
-                        $in: ['WIX', 'DASHBOARD_FIRST', 'ANYWHERE', 'HEADLESS']
-                    }
-                }
+                    ]
+                };
             }
-        }, {
-            headers: {
-                ...(await strategy.getAccountAuthHeaders()),
-                'Content-Type': 'application/json',
-                Accept: 'application/json, text/plain, */*'
+            catch (error) {
+                logger.error(`Failed to call Wix Site API: ${error}`);
+                const response = error.response;
+                if (!response) {
+                    throw new Error(`Failed to call Wix Site API: ${error}`);
+                }
+                return handleWixAPIResponse(response);
             }
         });
-        const result = sitesRes.data.sites?.map(({ id, displayName }) => ({
-            id,
-            name: displayName
-        })) ?? [];
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: JSON.stringify(result)
-                },
-                {
-                    type: 'text',
-                    text: 'if there is more than one site returned, the user should pick one from a list, list the sites (only name) for the user and ask them to pick one,' +
-                        'If more than 20 are found you should list all 20 and suggest to search by the name of the site they are looking for'
+    }
+    if (allowedTools.includes('ListWixSites')) {
+        server.tool('ListWixSites', 'List Wix sites for the current user, by default it will return all sites, but you can filter by name', {
+            nameSearch: z
+                .string()
+                .optional()
+                .describe('optional filer by name, if not provided all sites will be returned'),
+            // Hack for Cursor ignoring tools with no params (when nameSearch is optional)
+            alwaysTrue: z.boolean().describe('Always pass true to this parameter')
+        }, async ({ nameSearch }, { httpClient }) => {
+            const sitesRes = await httpClient.post('https://www.wixapis.com/site-list/v2/sites/query', {
+                query: {
+                    cursorPaging: { limit: 21 },
+                    filter: {
+                        ...(nameSearch
+                            ? {
+                                name: nameSearch
+                            }
+                            : {}),
+                        namespace: {
+                            $in: ['WIX', 'DASHBOARD_FIRST', 'ANYWHERE', 'HEADLESS']
+                        }
+                    }
                 }
-            ]
-        };
-    });
-    server.tool('ManageWixSite', `Use account level API in order to create a site, update a site and publish site.
-    ALWAYS use "SearchWixRESTDocumentation" to search for the API you should invoke, NEVER GUESS THE SITE API URL
-    You should ALWAYS check the rest docs - "SearchWixRESTDocumentation" for the specific API you want to call, don't just call it without knowing what it does, CHECK THE DOCS`, {
-        url: z
-            .string()
-            .describe('The url of the api to call - ALWAYS get the information from the Wix REST docs DONT GUESS IT, the URL MUST BE ABSOLUTE URL'),
-        method: z
-            .string()
-            .describe('The HTTP method to use for the API call (e.g. GET, POST, PUT, DELETE)'),
-        body: z
-            .string()
-            .optional()
-            .describe('A string representing of a valid JSON object to describe the body of the request')
-    }, async ({ url, body, method }, { httpClient }) => {
-        logger.log(`Calling Wix Account level API: ${url}, body: ${JSON.stringify(body)}`);
-        try {
-            // if we would like to allow the user to manage multiple accounts, we should add accountId to the params
-            const response = await httpClient.request({
-                url,
-                method: method,
+            }, {
                 headers: {
                     ...(await strategy.getAccountAuthHeaders()),
-                    ...(body ? { 'Content-Type': 'application/json' } : {})
-                },
-                data: method === 'GET' ? undefined : body
+                    'Content-Type': 'application/json',
+                    Accept: 'application/json, text/plain, */*'
+                }
             });
-            const responseData = await handleWixAPIResponse(response);
+            const result = sitesRes.data.sites?.map(({ id, displayName }) => ({
+                id,
+                name: displayName
+            })) ?? [];
             return {
                 content: [
                     {
                         type: 'text',
-                        text: `Wix Account API call successful: ${JSON.stringify(responseData)}`
+                        text: JSON.stringify(result)
+                    },
+                    {
+                        type: 'text',
+                        text: 'if there is more than one site returned, the user should pick one from a list, list the sites (only name) for the user and ask them to pick one,' +
+                            'If more than 20 are found you should list all 20 and suggest to search by the name of the site they are looking for'
                     }
                 ]
             };
-        }
-        catch (error) {
-            logger.error(`Failed to call Wix Account API: ${error}`);
-            const response = error.response;
-            if (!response) {
-                throw new Error(`Failed to call Wix Account API: ${error}`);
+        });
+    }
+    if (allowedTools.includes('ManageWixSite')) {
+        server.tool('ManageWixSite', `Use account level API in order to create a site, update a site and publish site.
+    ALWAYS use "SearchWixRESTDocumentation" to search for the API you should invoke, NEVER GUESS THE SITE API URL
+    You should ALWAYS check the rest docs - "SearchWixRESTDocumentation" for the specific API you want to call, don't just call it without knowing what it does, CHECK THE DOCS`, {
+            url: z
+                .string()
+                .url()
+                .describe('The url of the api to call - ALWAYS get the information from the Wix REST docs DONT GUESS IT, the URL MUST BE ABSOLUTE URL'),
+            method: z
+                .string()
+                .describe('The HTTP method to use for the API call (e.g. GET, POST, PUT, DELETE)'),
+            body: z
+                .string()
+                .optional()
+                .describe('A string representing of a valid JSON object to describe the body of the request')
+        }, async ({ url, body, method }, { httpClient }) => {
+            logger.log(`Calling Wix Account level API: ${url}, body: ${JSON.stringify(body)}`);
+            const { isAllowed, error: urlError } = isApiUrlAllowed(url);
+            if (!isAllowed) {
+                return {
+                    content: [
+                        {
+                            isError: true,
+                            type: 'text',
+                            text: `Error validating URL: ${urlError}`
+                        }
+                    ]
+                };
+            }
+            try {
+                // if we would like to allow the user to manage multiple accounts, we should add accountId to the params
+                const response = await httpClient.request({
+                    url,
+                    method: method,
+                    headers: {
+                        ...(await strategy.getAccountAuthHeaders()),
+                        ...(body ? { 'Content-Type': 'application/json' } : {})
+                    },
+                    data: method === 'GET' ? undefined : body
+                });
+                const responseData = await handleWixAPIResponse(response);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Wix Account API call successful: ${JSON.stringify(responseData)}`
+                        }
+                    ]
+                };
             }
-            return handleWixAPIResponse(response);
-        }
-    });
+            catch (error) {
+                logger.error(`Failed to call Wix Account API: ${error}`);
+                const response = error.response;
+                if (!response) {
+                    throw new Error(`Failed to call Wix Account API: ${error}`);
+                }
+                return handleWixAPIResponse(response);
+            }
+        });
+    }
 }
 //# sourceMappingURL=index.js.map

package/build/dts/api-call/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api-call/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,QAAmC;IAEnC,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB;QACE,iIAAiI;QACjI,6KAA6K;QAC7K,iBAAiB;QACjB,gTAAgT;QAChT,4LAA4L;QAC5L,gEAAgE;KACjE,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;QACE,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,CAAC,uDAAuD,CAAC;QACpE,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,CACP,+IAA+I,CAChJ;QACH,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,CACP,uEAAuE,CACxE;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kFAAkF,CACnF;KACJ,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACtD,MAAM,CAAC,GAAG,CACR,yBAAyB,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;gBACxC,GAAG;gBACH,MAAM,EAAE,MAAa;gBACrB,OAAO,EAAE;oBACP,GAAG,CAAC,MAAM,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;oBAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD;gBACD,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;aAC1C,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAE1D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,iCAAiC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;qBACtE;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YAEtD,MAAM,QAAQ,GAAI,KAAmB,CAAC,QAAQ,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,sGAAsG,EACtG;QACE,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,oEAAoE,CACrE;QACH,8EAA8E;QAC9E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KACvE,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CACpC,kDAAkD,EAClD;YACE,KAAK,EAAE;gBACL,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,MAAM,EAAE;oBACN,GAAG,CAAC,UAAU;wBACZ,CAAC,CAAC;4BACE,IAAI,EAAE,UAAU;yBACjB;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,SAAS,EAAE;wBACT,GAAG,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC;qBACxD;iBACF;aACF;SACF,EACD;YACE,OAAO,EAAE;gBACP,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;gBAC3C,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,mCAAmC;aAC5C;SACF,CACF,CAAC;QAEF,MAAM,MAAM,GACV,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAO,EAAE,EAAE,CAAC,CAAC;YACtD,EAAE;YACF,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC,IAAI,EAAE,CAAC;QAEZ,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;iBAC7B;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,kJAAkJ;wBAClJ,qHAAqH;iBACxH;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf;;gLAE4K,EAC5K;QACE,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,CACP,4HAA4H,CAC7H;QACH,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,CACP,uEAAuE,CACxE;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,kFAAkF,CACnF;KACJ,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9C,MAAM,CAAC,GAAG,CACR,kCAAkC,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;QAEF,IAAI,CAAC;YACH,wGAAwG;YACxG,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;gBACxC,GAAG;gBACH,MAAM,EAAE,MAAa;gBACrB,OAAO,EAAE;oBACP,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;oBAC3C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD;gBACD,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;aAC1C,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAE1D,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;qBACzE;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;YAEzD,MAAM,QAAQ,GAAI,KAAmB,CAAC,QAAQ,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/api-call/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,QAAmC,EACnC,eAAyB,CAAC,gBAAgB,EAAE,cAAc,EAAE,eAAe,CAAC;IAE5E,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB;YACE,iIAAiI;YACjI,6KAA6K;YAC7K,iBAAiB;YACjB,gTAAgT;YAChT,4LAA4L;YAC5L,gEAAgE;SACjE,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;YACE,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,CAAC,uDAAuD,CAAC;YACpE,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,CACP,+IAA+I,CAChJ;YACH,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,CACP,uEAAuE,CACxE;YACH,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,kFAAkF,CACnF;SACJ,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,CACR,yBAAyB,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;YAEF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,OAAO,EAAE,IAAI;4BACb,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,yBAAyB,QAAQ,EAAE;yBAC1C;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;oBACxC,GAAG;oBACH,MAAM,EAAE,MAAa;oBACrB,OAAO,EAAE;wBACP,GAAG,CAAC,MAAM,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;wBAC9C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxD;oBACD,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;iBAC1C,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBAE1D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,iCAAiC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;yBACtE;qBACF;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;gBAEtD,MAAM,QAAQ,GAAI,KAAmB,CAAC,QAAQ,CAAC;gBAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBAED,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CACT,cAAc,EACd,sGAAsG,EACtG;YACE,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,oEAAoE,CACrE;YACH,8EAA8E;YAC9E,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;SACvE,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CACpC,kDAAkD,EAClD;gBACE,KAAK,EAAE;oBACL,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,MAAM,EAAE;wBACN,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,IAAI,EAAE,UAAU;6BACjB;4BACH,CAAC,CAAC,EAAE,CAAC;wBACP,SAAS,EAAE;4BACT,GAAG,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC;yBACxD;qBACF;iBACF;aACF,EACD;gBACE,OAAO,EAAE;oBACP,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;oBAC3C,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,mCAAmC;iBAC5C;aACF,CACF,CAAC;YAEF,MAAM,MAAM,GACV,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAO,EAAE,EAAE,CAAC,CAAC;gBACtD,EAAE;gBACF,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC,IAAI,EAAE,CAAC;YAEZ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBAC7B;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,kJAAkJ;4BAClJ,qHAAqH;qBACxH;iBACF;aACF,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CACT,eAAe,EACf;;gLAE0K,EAC1K;YACE,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,CACP,4HAA4H,CAC7H;YACH,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,CACP,uEAAuE,CACxE;YACH,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,kFAAkF,CACnF;SACJ,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;YAC9C,MAAM,CAAC,GAAG,CACR,kCAAkC,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;YAEF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,OAAO,EAAE,IAAI;4BACb,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,yBAAyB,QAAQ,EAAE;yBAC1C;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,wGAAwG;gBACxG,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;oBACxC,GAAG;oBACH,MAAM,EAAE,MAAa;oBACrB,OAAO,EAAE;wBACP,GAAG,CAAC,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;wBAC3C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxD;oBACD,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;iBAC1C,CAAC,CAAC;gBAEH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;gBAE1D,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE;yBACzE;qBACF;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;gBAEzD,MAAM,QAAQ,GAAI,KAAmB,CAAC,QAAQ,CAAC;gBAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBAED,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/build/dts/api-call/validation.d.ts

@@ -0,0 +1,8 @@
+export declare function isApiUrlAllowed(url: string): {
+    isAllowed: boolean;
+    error: string;
+} | {
+    isAllowed: boolean;
+    error?: undefined;
+};
+//# sourceMappingURL=validation.d.ts.map

package/build/dts/api-call/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/api-call/validation.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM;;;;;;EAmC1C"}

package/build/dts/api-call/validation.js

@@ -0,0 +1,31 @@
+export function isApiUrlAllowed(url) {
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(url);
+    }
+    catch {
+        return {
+            isAllowed: false,
+            error: `Invalid URL format: ${url}`
+        };
+    }
+    const ALLOWED_HOSTNAMES = [
+        'wix.com',
+        'dev.wix.com',
+        'manage.wix.com',
+        'editor.wix.com',
+        'wixapis.com'
+    ];
+    const hostname = parsedUrl.hostname.replace('www.', '');
+    const isAllowedHostname = ALLOWED_HOSTNAMES.some((domain) => hostname === domain);
+    if (!isAllowedHostname) {
+        return {
+            isAllowed: false,
+            error: `Unsupported URL domain: ${hostname}. URL must be from one of the allowed domains: ${ALLOWED_HOSTNAMES.join(', ')}`
+        };
+    }
+    return {
+        isAllowed: true
+    };
+}
+//# sourceMappingURL=validation.js.map

package/build/dts/api-call/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../src/api-call/validation.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,SAAc,CAAC;IAEnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,uBAAuB,GAAG,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG;QACxB,SAAS;QACT,aAAa;QACb,gBAAgB;QAChB,gBAAgB;QAChB,aAAa;KACd,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,IAAI,CAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAChC,CAAC;IAEF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,2BAA2B,QAAQ,kDAAkD,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC3H,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC"}

package/build/dts/api-call/validation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validation.test.d.ts.map

package/build/dts/api-call/validation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.d.ts","sourceRoot":"","sources":["../../../src/api-call/validation.test.ts"],"names":[],"mappings":""}

package/build/dts/api-call/validation.test.js

@@ -0,0 +1,42 @@
+import { describe, test, expect } from 'vitest';
+import { isApiUrlAllowed } from './validation.js';
+describe('isApiUrlAllowed()', () => {
+    test('should allow wix.com URLs', () => {
+        expect(isApiUrlAllowed('https://wix.com/_api/service')).toEqual({
+            isAllowed: true
+        });
+    });
+    test('should allow dev.wix.com URLs', () => {
+        expect(isApiUrlAllowed('https://dev.wix.com/_api/service')).toEqual({
+            isAllowed: true
+        });
+    });
+    test('should allow manage.wix.com URLs', () => {
+        expect(isApiUrlAllowed('https://manage.wix.com/_api/service')).toEqual({
+            isAllowed: true
+        });
+    });
+    test('should allow editor.wix.com URLs', () => {
+        expect(isApiUrlAllowed('https://editor.wix.com/_api/service')).toEqual({
+            isAllowed: true
+        });
+    });
+    test('should allow wixapis.com URLs', () => {
+        expect(isApiUrlAllowed('https://wixapis.com/service')).toEqual({
+            isAllowed: true
+        });
+    });
+    test('should return an error if the URL is not from a valid domain', () => {
+        expect(isApiUrlAllowed('https://not-wix.com/api')).toEqual({
+            isAllowed: false,
+            error: expect.stringContaining('Unsupported URL domain: not-wix.com.')
+        });
+    });
+    test('should not allow subdomain attacks', () => {
+        expect(isApiUrlAllowed('https://wix.com.evil-domain.com/api')).toEqual({
+            isAllowed: false,
+            error: expect.stringContaining('Unsupported URL domain: wix.com.evil-domain.com.')
+        });
+    });
+});
+//# sourceMappingURL=validation.test.js.map

package/build/dts/api-call/validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../../src/api-call/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,eAAe,CAAC,kCAAkC,CAAC,CAAC,CAAC,OAAO,CAAC;YAClE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,sCAAsC,CAAC;SACvE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,eAAe,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrE,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAC5B,kDAAkD,CACnD;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/dts/bin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/bin.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAe3B,QAAA,MAAM,YAAY,qFAAiC,CAAC;AACpD,QAAA,MAAM,kBAAkB,wDAId,CAAC;AACX,KAAK,IAAI,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChF,eAAO,MAAM,aAAa,EAAE,IAAI,EAA0B,CAAC"}
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/bin.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAiB3B,QAAA,MAAM,YAAY,qFAAiC,CAAC;AACpD,QAAA,MAAM,kBAAkB,wDAId,CAAC;AACX,KAAK,IAAI,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAChF,eAAO,MAAM,aAAa,EAAE,IAAI,EAA0B,CAAC"}

package/build/dts/bin.js

@@ -6,6 +6,7 @@ import { addCliTools, VALID_CLI_TOOLS } from './cli-tools/cli.js';
 import { logger, attachStdErrLogger, attachMcpServerLogger, attachFileLogger } from './infra/logger.js';
 import { WixMcpServer } from './wix-mcp-server.js';
 import { addDocsResources } from './resources/docs.js';
+import { addApiCallTool } from './api-call/index.js';
 const PUBLIC_TOOLS = [...VALID_DOCS_TOOLS];
 const EXPERIMENTAL_TOOLS = [
     'WIX_API',
@@ -23,6 +24,9 @@ function parseExperimentalArg() {
         .map((t) => t.trim())
         .filter((tool) => EXPERIMENTAL_TOOLS.includes(tool));
 }
+function parseWixAuthorizationArg() {
+    return parsedArgs['wixAuthorization'];
+}
 function parseToolsArg() {
     const toolsArg = parsedArgs['tools'];
     const experimentalTools = parseExperimentalArg();
@@ -80,6 +84,24 @@ const cliTools = activeTools.filter((tool) => VALID_CLI_TOOLS.includes(tool));
 if (cliTools.length > 0) {
     logger.log('Adding cli tools:', cliTools, 'isWixOne:', isWixOne);
     addCliTools(server, cliTools, isWixOne);
+    if (cliTools.includes('WIX_API')) {
+        const wixAuthorization = parseWixAuthorizationArg();
+        if (wixAuthorization) {
+            logger.log('Using wixAuthorization argument for WIX_API');
+            const cliAuthStrategy = {
+                getSiteAuthHeaders: () => ({
+                    Authorization: wixAuthorization
+                }),
+                getAccountAuthHeaders: () => ({
+                    Authorization: wixAuthorization
+                })
+            };
+            addApiCallTool(server, cliAuthStrategy, ['CallWixSiteAPI']);
+        }
+        else {
+            logger.error('WIX_API tool requires missing wixAuthorization argument to be set. Will not add WIX_API tool.');
+        }
+    }
 }
 try {
     const portals = parsedArgs['portals']?.split(',') || [];

package/build/dts/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/bin.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAE3B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAY,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAW,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,YAAY,GAAG,CAAC,GAAG,gBAAgB,CAAU,CAAC;AACpD,MAAM,kBAAkB,GAAG;IACzB,SAAS;IACT,aAAa;IACb,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAW,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAE3D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnD,SAAS,oBAAoB;IAC3B,MAAM,eAAe,GAAuB,UAAU,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAEhC,OAAO,eAAe;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,kBAAkB,CAAC,QAAQ,CAAC,IAA2C,CAAC,CAC/D,CAAC;AAChB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,QAAQ,GAAuB,UAAU,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IAEjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,sEAAsE;QACtE,OAAO,CAAC,GAAG,aAAa,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAW;QACpB,uCAAuC;QACvC,GAAI,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,YAAY,CAAC,QAAQ,CAAC,IAAqC,CAAC,CAClD;QACZ,qCAAqC;QACrC,GAAG,iBAAiB;KACrB,CAAC;IAEF,wCAAwC;IACxC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,IACE,kBAAkB,CAAC,QAAQ,CAAC,IAA2C,CAAC,EACxE,CAAC;YACD,MAAM,CAAC,GAAG,CACR,YAAY,IAAI,iFAAiF,CAClG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;AAEjD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,CAAC;AACrB,CAAC;KAAM,CAAC;IACN,sEAAsE;IACtE,gEAAgE;IAChE,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAC/C,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACtC,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,IAAI,YAAY,CAC7B;IACE,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;CACjB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;KACd;CACF,CACF,CAAC;AAEF,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC;AACpC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;AAEzC,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,gBAAgB,CAAC,QAAQ,CAAC,IAAgB,CAAC,CAC9B,CAAC;AAChB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAC5C,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3C,eAAe,CAAC,QAAQ,CAAC,IAAe,CAAC,CAC7B,CAAC;AACf,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACjE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACtC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAElC,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;IACzB,wCAAwC;IACxC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/bin.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAE3B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAY,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAW,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,MAAM,YAAY,GAAG,CAAC,GAAG,gBAAgB,CAAU,CAAC;AACpD,MAAM,kBAAkB,GAAG;IACzB,SAAS;IACT,aAAa;IACb,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAW,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAE3D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnD,SAAS,oBAAoB;IAC3B,MAAM,eAAe,GAAuB,UAAU,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IAEhC,OAAO,eAAe;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACf,kBAAkB,CAAC,QAAQ,CAAC,IAA2C,CAAC,CAC/D,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,QAAQ,GAAuB,UAAU,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IAEjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,sEAAsE;QACtE,OAAO,CAAC,GAAG,aAAa,EAAE,GAAG,iBAAiB,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAW;QACpB,uCAAuC;QACvC,GAAI,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,YAAY,CAAC,QAAQ,CAAC,IAAqC,CAAC,CAClD;QACZ,qCAAqC;QACrC,GAAG,iBAAiB;KACrB,CAAC;IAEF,wCAAwC;IACxC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,IACE,kBAAkB,CAAC,QAAQ,CAAC,IAA2C,CAAC,EACxE,CAAC;YACD,MAAM,CAAC,GAAG,CACR,YAAY,IAAI,iFAAiF,CAClG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;AAEjD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,CAAC;AACrB,CAAC;KAAM,CAAC;IACN,sEAAsE;IACtE,gEAAgE;IAChE,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAC/C,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACtC,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,IAAI,YAAY,CAC7B;IACE,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,OAAO;CACjB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,EAAE;KACd;CACF,CACF,CAAC;AAEF,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC;AACpC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;AAEzC,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5C,gBAAgB,CAAC,QAAQ,CAAC,IAAgB,CAAC,CAC9B,CAAC;AAChB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAC5C,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3C,eAAe,CAAC,QAAQ,CAAC,IAAe,CAAC,CAC7B,CAAC;AACf,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACjE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,gBAAgB,GAAG,wBAAwB,EAAE,CAAC;QAEpD,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC1D,MAAM,eAAe,GAA8B;gBACjD,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;oBACzB,aAAa,EAAE,gBAAgB;iBAChC,CAAC;gBACF,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC5B,aAAa,EAAE,gBAAgB;iBAChC,CAAC;aACH,CAAC;YACF,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CACV,+FAA+F,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,oCAAoC,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACtC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAChC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AAElC,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;IACzB,wCAAwC;IACxC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/build/dts/cli-tools/cli.d.ts

@@ -1,5 +1,5 @@
 import { WixMcpServer } from '../wix-mcp-server.js';
-export declare const VALID_CLI_TOOLS: readonly ["WIX_API", "CLI_COMMAND", "CLI_COMMAND_INTERACTIVE_MODE"];
+export declare const VALID_CLI_TOOLS: readonly ["WIX_API", "CLI_COMMAND"];
 export type CLITool = (typeof VALID_CLI_TOOLS)[number];
 export declare function addCliTools(server: WixMcpServer, allowedTools?: CLITool[], isWixOne?: boolean): void;
 //# sourceMappingURL=cli.d.ts.map

package/build/dts/cli-tools/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/cli-tools/cli.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,eAAO,MAAM,eAAe,qEAIlB,CAAC;AACX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,YAAY,GAAE,OAAO,EAIpB,EACD,QAAQ,GAAE,OAAe,QAka1B"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/cli-tools/cli.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,eAAO,MAAM,eAAe,qCAAsC,CAAC;AACnE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,YAAY,GAAE,OAAO,EAAoB,EACzC,QAAQ,GAAE,OAAe,QA0J1B"}