@wix/mcp 1.0.81 → 1.0.83

package/build/dts/site-widget-tools/constants.js

@@ -23,14 +23,28 @@ export const SITE_CREATION_CUSTOM_ACTIONS_GUIDANCE = `2–3 specific, high-value
 * General / Unspecified: "${SITE_CREATION_DEFAULT_ACTIONS}"
 If none of these patterns fit the site, infer 2–3 actions that suit what that kind of business would manage on its site.`;
 /**
- * Builds the WixSiteCreation chooser reply. The message is fully composed here and wrapped in an
- * `<instructions>` preamble that tells the host model to display the body verbatim (keeping the
- * bullets and line breaks). The site type comes from `query`; the "Next up:" actions come from the
- * inferred `customActions`.
+ * Builds the WixSiteCreation chooser reply. The message is fully composed here and wrapped in a
+ * preamble that tells the host model to display the body verbatim (keeping the bullets and line
+ * breaks). The site type comes from `query`; the "Next up:" actions come from the inferred
+ * `customActions`.
+ *
+ * With `plain`, only the message itself is returned. Microsoft 365 Copilot's safety filter reads
+ * instructions inside a tool result ("you are the assistant…", "word for word…") as prompt
+ * injection and blocks the whole reply ("Sorry, it looks like I can't chat about this"); there the
+ * verbatim-reply instruction lives only in the tool description.
  */
-export function buildSiteCreationSelectorMessage(siteType, customActions) {
+export function buildSiteCreationSelectorMessage(siteType, customActions, { plain = false } = {}) {
     const type = (siteType ?? '').trim() || 'new';
     const actions = (customActions ?? '').trim() || SITE_CREATION_DEFAULT_ACTIONS;
+    const body = `Ready to set up your ${type} site? Choose your path in the widget above:
+
+* **Build with AI** for a custom, tailor-made layout
+* **Pick a template** to start with a pre-designed layout
+
+**Next up:** Once your site is created, you can customize it in Wix or ask me to ${actions}—right here in the chat!`;
+    if (plain) {
+        return body;
+    }
     return `You are the assistant replying to the user — say this message out loud in chat (do NOT stay silent, and do NOT just point at the widget). Your reply is only complete if it includes ALL of the following, word for word, each on its own line and in this order:
 1. "Ready to set up your ${type} site? Choose your path in the widget above:" — keep the "Choose your path in the widget above:" part.
 2. "* **Build with AI** for a custom, tailor-made layout"
@@ -39,12 +53,7 @@ export function buildSiteCreationSelectorMessage(siteType, customActions) {
 
 Copy those four lines as written; do not summarize, shorten, reorder, or reword any of them. Here is the full message to send:
 
-Ready to set up your ${type} site? Choose your path in the widget above:
-
-* **Build with AI** for a custom, tailor-made layout
-* **Pick a template** to start with a pre-designed layout
-
-**Next up:** Once your site is created, you can customize it in Wix or ask me to ${actions}—right here in the chat!`;
+${body}`;
 }
 /** OpenAI/ChatGPT widget MIME type for Skybridge rendering */
 export const OPENAI_WIDGET_MIME_TYPE = 'text/html+skybridge';

package/build/dts/site-widget-tools/site-builder-tool/index.js

@@ -67,7 +67,7 @@ export function addCreateSiteWidgetTool(server, authStrategy, options) {
             suggestedSiteName: z
                 .string()
                 .optional()
-                .describe('Suggested site name to use for the site based on the site prompt.')
+                .describe('You must provide this on every call, including updates to an existing job, in English. A short name for the site: the business name the user gave, or one you derive from the site prompt.')
         },
         _meta: toolDefinitionMeta,
         annotations: {

package/build/dts/site-widget-tools/site-creation-tool/index.js

@@ -85,8 +85,9 @@ export function addWixSiteCreationTool(server, _authStrategy, options) {
         // Reply instruction: a fixed SHAPE (question + the two options + a "Next up:" line) built
         // from the query (site type) and the inferred customActions, with the two option lines left
         // for the model to tailor to the industry. Returned as-is; the tool description also
-        // instructs the model to write it out (both are load-bearing).
-        const message = buildSiteCreationSelectorMessage(args.query, args.customActions);
+        // instructs the model to write it out (both are load-bearing). Microsoft Copilot gets the
+        // message without the preamble: its safety filter blocks the reply otherwise.
+        const message = buildSiteCreationSelectorMessage(args.query, args.customActions, { plain: server.isMicrosoftCopilotClient() });
         return withJsonContent({
             content: [
                 {

package/build/dts/site-widget-tools/suggested-domain-tool/index.js

@@ -1,7 +1,16 @@
 import { rethrowIfUnauthorized } from '../../auth/index.js';
 import z from 'zod';
+import dedent from 'dedent';
 import { GET_SUGGESTED_DOMAINS_TOOL_NAME } from '../constants.js';
 const WIX_APIS_BASE_URL = 'https://www.wixapis.com';
+// Sites keep this placeholder until the owner renames them, and domain search
+// rejects it as a blacklisted term.
+const DEFAULT_SITE_NAME = /^my site(\s+\d+)?$/i;
+// Domains are Latin, so the caller's query beats a site name in another script.
+const NON_LATIN_LETTER = /(?![\p{Script=Latin}])\p{L}/u;
+function isSearchableSiteName(siteName) {
+    return (!DEFAULT_SITE_NAME.test(siteName.trim()) && !NON_LATIN_LETTER.test(siteName));
+}
 async function fetchSiteDisplayName(siteAuthorization, siteId) {
     const response = await fetch(`${WIX_APIS_BASE_URL}/site-properties/v4/properties`, {
         headers: {
@@ -19,7 +28,15 @@ export function addSuggestedDomainTool(server, authStrategy) {
     const { getSiteAuthHeaders, isAnonymous } = authStrategy;
     server.registerTool(GET_SUGGESTED_DOMAINS_TOOL_NAME, {
         title: 'Get Suggested Domains',
-        description: 'Suggest available domain names. Provide either a free-text query (e.g. "pancakes business", "modern yoga studio") OR a siteId to auto-suggest based on the site name. At least one of query or siteId is required.',
+        description: dedent `
+        Suggests available domain names for a business, brand, or Wix site.
+
+        Call this when the user asks for domain name ideas, wants to know which domains are available, or wants a domain for a new or existing site.
+
+        Provide either a free-text \`query\` (the user's own words, e.g. "pancakes business", "modern yoga studio") OR a \`siteId\` to base the suggestions on that site's name. At least one of them is required.
+
+        Present the returned domains to the user as a short list. This tool only suggests domains — it does not purchase or connect them.
+      `,
         inputSchema: {
             query: z
                 .string()
@@ -45,10 +62,11 @@ export function addSuggestedDomainTool(server, authStrategy) {
         },
         _meta: {
             securitySchemes: [{ type: 'oauth2', scopes: ['offline_access'] }],
-            ui: { visibility: ['app'] },
+            // Model-visible so hosts (e.g. Microsoft 365 Copilot) can call it directly and show it
+            // in their debug info; 'app' keeps it callable from the site-builder widget.
+            ui: { visibility: ['app', 'model'] },
             'openai/toolInvocation/invoking': 'Fetching suggested domains',
-            'openai/toolInvocation/invoked': 'Suggested domains retrieved',
-            'openai/visibility': 'private'
+            'openai/toolInvocation/invoked': 'Suggested domains retrieved'
         }
     }, async (args, { panorama }) => {
         console.log('[getSuggestedDomains] Invoked with args:', args);
@@ -90,7 +108,9 @@ export function addSuggestedDomainTool(server, authStrategy) {
                             structuredContent: { domains: [] }
                         };
                     }
-                    resolvedQuery = siteName;
+                    if (isSearchableSiteName(siteName) || !resolvedQuery) {
+                        resolvedQuery = siteName;
+                    }
                 }
                 catch (error) {
                     panorama

package/build/dts/toolkit-entry.d.cts

@@ -314,6 +314,17 @@ export interface CodeValidationResult {
 	error?: string;
 }
 export declare function validateExecuteCode(code: string): CodeValidationResult;
+/** Wix "Auto GraphQL": one schema generated over all Wix public APIs. */
+export declare const WIX_GRAPHQL_ENDPOINT = "https://www.wixapis.com/graphql/alpha";
+export declare const SEARCH_GRAPHQL_TOOL_NAME = "SearchWixGraphQLOperations";
+export declare const INSPECT_GRAPHQL_TOOL_NAME = "InspectWixGraphQLSchema";
+export declare const EXECUTE_GRAPHQL_TOOL_NAME = "ExecuteWixGraphQL";
+export declare const GRAPHQL_TOOL_NAMES: readonly [
+	"SearchWixGraphQLOperations",
+	"InspectWixGraphQLSchema",
+	"ExecuteWixGraphQL"
+];
+export type GraphqlToolName = (typeof GRAPHQL_TOOL_NAMES)[number];
 /** URL for the management recipes index article */
 export declare const RECIPES_INDEX_URL = "https://dev.wix.com/docs/api-reference/articles/ai-tools/wix-mcp/skills/wix-management-recipes-index";
 /**
@@ -379,6 +390,7 @@ export interface ModeDefaultConfig {
 	partnerContextEnabled?: boolean;
 	usePlatformizedSearch?: boolean;
 	skillsPrOverrideEnabled?: boolean;
+	graphqlEnabled?: boolean;
 }
 export declare const SYSTEM_REMINDER_GUIDELINES: string;
 export declare const SYSTEM_REMINDER: string;

package/build/dts/toolkit-entry.d.ts

@@ -314,6 +314,17 @@ export interface CodeValidationResult {
 	error?: string;
 }
 export declare function validateExecuteCode(code: string): CodeValidationResult;
+/** Wix "Auto GraphQL": one schema generated over all Wix public APIs. */
+export declare const WIX_GRAPHQL_ENDPOINT = "https://www.wixapis.com/graphql/alpha";
+export declare const SEARCH_GRAPHQL_TOOL_NAME = "SearchWixGraphQLOperations";
+export declare const INSPECT_GRAPHQL_TOOL_NAME = "InspectWixGraphQLSchema";
+export declare const EXECUTE_GRAPHQL_TOOL_NAME = "ExecuteWixGraphQL";
+export declare const GRAPHQL_TOOL_NAMES: readonly [
+	"SearchWixGraphQLOperations",
+	"InspectWixGraphQLSchema",
+	"ExecuteWixGraphQL"
+];
+export type GraphqlToolName = (typeof GRAPHQL_TOOL_NAMES)[number];
 /** URL for the management recipes index article */
 export declare const RECIPES_INDEX_URL = "https://dev.wix.com/docs/api-reference/articles/ai-tools/wix-mcp/skills/wix-management-recipes-index";
 /**
@@ -379,6 +390,7 @@ export interface ModeDefaultConfig {
 	partnerContextEnabled?: boolean;
 	usePlatformizedSearch?: boolean;
 	skillsPrOverrideEnabled?: boolean;
+	graphqlEnabled?: boolean;
 }
 export declare const SYSTEM_REMINDER_GUIDELINES: string;
 export declare const SYSTEM_REMINDER: string;

package/build/dts/toolkit-entry.js

@@ -16,6 +16,10 @@ export { WixFetchError } from './wix-fetch-error.js';
 export { attachConsoleLogger } from './infra/logger.js';
 // Code-mode validation (pre-flight the same check the runtime applies)
 export { validateExecuteCode, EXECUTE_FUNCTION_EXPRESSION_HINT } from './code-mode/validation.js';
+// GraphQL tool names/constants (register the tools via createWixToolkit's
+// api.tools / api.enableTools; addGraphqlTools itself stays on the main entry
+// because its WixMcpServer parameter would pull the SDK types into this bundle)
+export { GRAPHQL_TOOL_NAMES, SEARCH_GRAPHQL_TOOL_NAME, INSPECT_GRAPHQL_TOOL_NAME, EXECUTE_GRAPHQL_TOOL_NAME, WIX_GRAPHQL_ENDPOINT } from './graphql/index.js';
 // Docs fetch utilities
 export { fetchRecipesIndex, fetchArticle, RECIPES_INDEX_URL } from './docs/fetch-article.js';
 // Config (the widget-related config exports stay on the main entry)

package/build/dts/toolkit.js

@@ -32,6 +32,7 @@ import { v4 as uuidv4 } from 'uuid';
 import { HttpClient } from '@wix/http-client';
 import { addDocsTools } from './docs/docs.js';
 import { addApiCallTool } from './api-call/index.js';
+import { addGraphqlTools, GRAPHQL_TOOL_NAMES } from './graphql/index.js';
 import { addExecuteCodeModeTool, addSearchCodeModeTool } from './code-mode/index.js';
 import { defaultReadmeDocs, executeCodeModeToolDescriptions, buildToolDescriptions } from './config/default-config.js';
 import { getDynamicContext } from './docs/get-to-know.js';
@@ -224,6 +225,19 @@ export function createWixToolkit(options) {
                 maxResponseSize
             });
         }
+        // GraphQL tools register only the ones requested (each is opt-in by name).
+        const requestedGraphqlTools = GRAPHQL_TOOL_NAMES.filter((name) => requestedTools.has(name));
+        if (requestedGraphqlTools.length > 0) {
+            addGraphqlTools(server, {
+                authStrategy,
+                disableTools: [
+                    ...(disableTools ?? []),
+                    ...GRAPHQL_TOOL_NAMES.filter((n) => !requestedTools.has(n))
+                ],
+                toolDescriptions: effectiveToolDescriptions,
+                maxResponseSize
+            });
+        }
     }
     else {
         // Default: register all API tools

package/build/dts/wix-mcp-server.d.ts

@@ -58,6 +58,8 @@ export declare class WixMcpServer extends McpServer {
     setOpenAiMcpAppsEnabled(enabled: boolean): void;
     setMcpAppsInMcpEnabled(enabled: boolean): void;
     isMcpAppsInMcpEnabled(): boolean;
+    /** Microsoft 365 Copilot ("sydney" at runtime) or Copilot Cowork ("copilot"). */
+    isMicrosoftCopilotClient(): boolean;
     shouldRenderMcpApps(): boolean;
     getWidgetExtras(): WidgetExtras;
     tool(name: string, cb: WixToolCallback): RegisteredTool;

package/build/dts/wix-mcp-server.js

@@ -60,6 +60,11 @@ export class WixMcpServer extends McpServer {
     isMcpAppsInMcpEnabled() {
         return this.mcpAppsInMcpEnabled;
     }
+    /** Microsoft 365 Copilot ("sydney" at runtime) or Copilot Cowork ("copilot"). */
+    isMicrosoftCopilotClient() {
+        const clientName = this.getClientName?.()?.toLowerCase() ?? '';
+        return clientName.includes('sydney') || clientName.includes('copilot');
+    }
     shouldRenderMcpApps() {
         const clientName = this.getClientName?.()?.toLowerCase();
         const isOpenAi = clientName?.includes('openai') ?? false;