@wix/mcp 1.0.88 → 1.0.90

package/build/cjs/toolkit.cjs

@@ -17274,6 +17274,31 @@ async function fetchArticle(articleUrl) {
   return fetchArticleContent(httpClient, articleUrl, "article", false);
 }
 var DOCS_URL_PREFIX = "https://dev.wix.com/docs/";
+var SKILLS_REGISTRY_URL = new RegExp(
+  "^https://(?:dev\\.wix\\.com(?:/docs)?|www\\.wix\\.com(?:/velo/reference)?)/skills(?:[/.?#]|$)"
+);
+function isSkillsRegistryUrl(url) {
+  return SKILLS_REGISTRY_URL.test(url.trim());
+}
+async function fetchSkillsRegistryPage(httpClient, url) {
+  let data;
+  try {
+    ({ data } = await httpClient.get(url, {
+      headers: { accept: "text/markdown, text/plain;q=0.9, */*;q=0.1" }
+    }));
+  } catch (error) {
+    const { message, status } = getHttpErrorDetails(error);
+    const statusSuffix = status ? ` (status ${status})` : "";
+    throw new Error(`${message}${statusSuffix}`);
+  }
+  if (typeof data !== "string") {
+    return JSON.stringify(data, null, 2);
+  }
+  if (!data.trim()) {
+    throw new Error("Article content is empty");
+  }
+  return data;
+}
 function getResponseErrorMessage(data) {
   if (!data) {
     return void 0;
@@ -17364,13 +17389,15 @@ async function fetchArticleContent(httpClient, articleUrl, mode, stripHeader = f
         `[fetch] Override failed for ${effectiveUrl}, falling back to ${articleUrl}:`,
         error instanceof Error ? error.message : error
       );
-      content = await fetchArticleContentFromDigor(
+      content = isSkillsRegistryUrl(articleUrl) ? await fetchSkillsRegistryPage(httpClient, articleUrl) : await fetchArticleContentFromDigor(
         httpClient,
         articleUrl,
         mode,
         stripHeader
       );
     }
+  } else if (isSkillsRegistryUrl(articleUrl)) {
+    content = await fetchSkillsRegistryPage(httpClient, articleUrl);
   } else if (mode === "raw") {
     let parsedUrl;
     try {
@@ -17675,6 +17702,7 @@ function buildSystemReminderGuidelines(includeReadme, includeImageUploadGuidance
       "if the WixREADME tool is available to you, YOU MUST USE IT AT THE BEGINNING OF ANY CONVERSATION and then continue with calling the other tools and calling the Wix APIs until the task is completed.",
       "**Exception \u2014 creating a new Wix site/website:** For a normal creation request \u2014 and only then \u2014 skip WixREADME and the docs search, and route straight to the Wix site-creation tools available to you; their descriptions carry the routing rules. Everything else starts with WixREADME as usual.",
       "If the user explicitly asks for a headless site, Wix Classic Editor site, or manual account/API-based site creation, call CreateWixBusinessGuide right away \u2014 these don't need the site's purpose first.",
+      "If the user \u2014 or you, earlier in this conversation \u2014 already have a finished page or site in any form (HTML/CSS/JS files, a static build, a zip, another builder's export, a design you can export to HTML) and want it live on Wix, call DeployWebsite right away \u2014 not a site-creation tool, not the docs.",
       "Never default to AI or search templates unless the user explicitly requests it. When the user named no creation method - let the user make that choice as the site-creation tools' descriptions direct. Never route normal site creation through ManageWixSite, CallWixSiteAPI, or ExecuteWixAPI."
     );
   }
@@ -17756,7 +17784,7 @@ var SITE_CREATION_COPY = {
 var SITE_GUIDANCE = dedent_default`
   A new-site request has two things to settle: what the site is for, and how to build it. The how is AI generation vs. starting from a template, so naming templates, a template id or Wix Studio (Wix Studio is also the template side) already settles it.
 
-  One case skips all of this: the user ALREADY HAS the finished site as files — hand-written HTML/CSS/JS, a zip, or the export of an AI builder. There is nothing to build, so don't offer AI or templates and don't call any site-creation tool. For a full agentic flow, read the recipe first and publish the files yourself: https://dev.wix.com/docs/api-reference/account-level/sites/skills/upload-a-website-or-html-files.md — it walks you through creating the site and uploading the files end to end. If you can't follow it, or it doesn't apply (you can't reach the file bytes, or something fails), fall back to sending the user to https://www.wix.com/headless/drop?utm_campaign=mcp — they drag the files in and get a live Wix-hosted site. Give that URL exactly as written, keeping the utm_campaign=mcp parameter.
+  One case skips all of this: a finished page or site ALREADY EXISTS, in any form — hand-written HTML/CSS/JS, a static build, a zip, another AI builder's export, or a page you made earlier in this conversation. There is nothing to build, so don't offer AI or templates and don't call any site-creation tool: call DeployWebsite, which returns the recipe to publish the files yourself (the drop page is only its fallback).
 
   Settle what the site is for first: its purpose, topic, business type, audience, or main visitor action. Naming a method is not a description of the site, and neither is the business or industry on its own.
   If you can't tell yet, ask the preferred question below and nothing else — one question, no creation-method question in the same reply, and no internal tool names.
@@ -17840,32 +17868,49 @@ var ACCOUNT_SITE_EXECUTE_SCOPE = dedent_default`
     request<T = unknown>(options: WixRequestOptions): Promise<WixResponse<T>>;
     // Build a multipart/form-data body from files (defaults to the \`files\`
     // global). Each file becomes a part named fieldName (default "files") with
-    // its path as the filename. Pass body + contentType to wix.request.
+    // its path as the filename; \`body\` is bytes so binary parts stay intact.
+    // Pass a base64 entry for binary (an image/font): { path, base64 }, or a
+    // \`files\`-param entry tagged \`base64\`.
     multipart(
-      files?: Array<{ path: string; content: string; contentType?: string }>,
+      files?: Array<{ path: string; content?: string; base64?: string; bytes?: Uint8Array; contentType?: string }>,
       options?: { fieldName?: string }
-    ): { body: string; contentType: string };
+    ): { body: Uint8Array; contentType: string };
+    // Unzip a downloaded site archive (base64 string or bytes) into entries with
+    // RAW bytes (binary-safe); entry.text() decodes a text file. Entries can be
+    // passed straight back to wix.multipart() for a re-upload.
+    unzip(input: string | Uint8Array): Promise<Array<{ path: string; bytes: Uint8Array; text(): string }>>;
   };
   declare const siteId: string | undefined;
-  // Files from the ExecuteWixAPI \`files\` param (raw content, no escaping).
-  declare const files: Array<{ path: string; content: string }>;
+  // Files from the ExecuteWixAPI \`files\` param. Text entries have \`content\`;
+  // an entry tagged \`=== FILE: <path> base64 ===\` has encoding:'base64' and
+  // base64 \`content\` (a binary file — image, font).
+  declare const files: Array<{ path: string; content: string; encoding?: "base64" }>;
   \`\`\`
 
-  FILE UPLOADS: pass file bodies via the \`files\` param (not inside \`code\` — no escaping), then build the multipart body with \`wix.multipart()\`:
+  FILE UPLOADS: put every file in the \`files\` param (never inline in \`code\`). Text goes raw; a small binary (icon, logo, font) rides as a \`base64\`-tagged entry — large images/video are referenced by URL (\`<img src="https://...">\`), not bundled. \`wix.multipart()\` turns the whole set into one upload body (bytes, so binary is safe):
   \`\`\`javascript
-  // files param: "=== FILE: index.html ===\\n<!doctype html>...\\n=== FILE: app.js ===\\nconsole.log(1)"
+  // files param:
+  //   === FILE: index.html ===
+  //   <!doctype html><img src="logo.png">...
+  //   === FILE: logo.png base64 ===
+  //   iVBORw0KGgoAAA...
   async () => {
-    const mp = wix.multipart(); // parts named "files", filename = each path
-    const res = await wix.request({
-      scope: "account",
-      method: "POST",
-      url: "https://www.wixapis.com/.../upload",
-      headers: { "Content-Type": mp.contentType },
-      body: mp.body
-    });
+    const mp = wix.multipart(); // all entries from the files param; base64 ones decoded to raw bytes
+    const res = await wix.request({ scope: "account", method: "POST",
+      url: "https://www.wixapis.com/.../drop",
+      headers: { "Content-Type": mp.contentType }, body: mp.body });
     return res.data;
   }
   \`\`\`
+  DOWNLOAD + EDIT + RE-UPLOAD: fetch the zip as base64, \`wix.unzip()\` it, edit text via \`entry.text()\`, keep binary as bytes, and hand the entries back to \`wix.multipart()\`:
+  \`\`\`javascript
+  const r = await wix.request({ scope: "account", method: "GET", responseType: "base64", url: zipUrl });
+  const entries = await wix.unzip(r.data); // [{ path, bytes, text() }]
+  const edited = entries.map(e => e.path === "index.html"
+    ? { path: e.path, content: e.text().replace("Old title", "New title") }
+    : e); // images etc. pass through untouched as bytes
+  const mp = wix.multipart(edited);
+  \`\`\`
 `;
 var EXECUTE_WIX_API_WQL = dedent_default`
   For query and search endpoints: each endpoint declares which fields it can filter and sort by, and with which operators. That list is closed for fields and their operators and covers that endpoint only, and a field's presence in the response is no evidence it can be filtered on. It lives in the method's declared capabilities, and some resources also publish it as a "Supported Filters and Sorting" page. Logical operators are WQL syntax rather than field capabilities and never appear in it. Anything else errors or silently returns the wrong rows; fetch a bounded page and filter it in your own code instead.
@@ -17997,6 +18042,7 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     ReadFullDocsArticle: dedent_default`
     Fetches the full Wix docs article or method article with code examples for using the method.
     Docs articles looks like this: https://dev.wix.com/docs/... and they can either be general docs articles or method articles.
+    Also reads Wix skills pages — https://www.wix.com/skills/<skill>, https://dev.wix.com/docs/skills/<skill>, and the files they link (e.g. .../<skill>/references/<file>.md) — exactly as served.
     Take the URL from the user's message or an earlier tool result. To reach an article you have no URL for, search or browse the docs first.
     For REST docs, use the URL as-is. For SDK docs, the URL SHOULD include ?apiView=SDK.
     ${reminder}
@@ -18004,7 +18050,7 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     ReadFullDocsMethodSchema: dedent_default`
     Fetches the full method schema for a given method.
     This will give you the entire request/response schema with all the fields and their descriptions.
-    For REST API methods, prefer SearchWixAPISpec when it is available: it can fetch and inspect the exact method schema by docs URL, return the request/response shape, and inspect selected nested component schemas without dumping unrelated fields. Use ReadFullDocsMethodSchema for REST only when SearchWixAPISpec is unavailable or did not provide the needed detail.
+    For REST and SDK API-reference methods, prefer SearchWixAPISpec when it is available: it can fetch and inspect the exact method schema by docs URL, return the request/response shape, the JavaScript SDK call (\`method.sdk\`: package, namespace, method, positional parameters, examples), and inspect selected nested component schemas without dumping unrelated fields. Use ReadFullDocsMethodSchema only when SearchWixAPISpec is unavailable or did not provide the needed detail.
     For REST docs, use the URL as-is. For SDK docs, the URL SHOULD include ?apiView=SDK.
     ${reminder}
   `,
@@ -18130,7 +18176,7 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
   `,
     "import-claude-design-from-url": dedent_default`
     Import a design created in Claude's design tool into Wix. Takes the signed claudeusercontent.com URL Claude Design produces for its self-contained HTML bundle (all images, fonts, and styles inlined); any other host is rejected. Creates a live Wix-hosted site and returns its URL.
-    NOT for site files the user provides themselves (their own HTML/CSS/JS, a zip, another builder's export) — for those, don't call this tool. For a full agentic flow, read the recipe and publish the files yourself: https://dev.wix.com/docs/api-reference/account-level/sites/skills/upload-a-website-or-html-files.md — it covers creating the site and uploading the files end to end. If you can't follow it, or it doesn't apply, fall back to sending the user to https://www.wix.com/headless/drop?utm_campaign=mcp, where they upload the files and get a live hosted site. Give that URL exactly as written, keeping the utm_campaign=mcp parameter.
+    NOT for a page or site that exists in any other form (the user's own HTML/CSS/JS, a static build, a zip, another builder's export, a page you made in this conversation) — for those call DeployWebsite instead; it returns the recipe to publish the files yourself.
   `,
     RunWixCliCommand: dedent_default`
     Executes Wix CLI commands for Wix app development and management.
@@ -18159,6 +18205,7 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
   `,
     SearchWixSDKDocumentation: dedent_default`
     Searches the Wix JavaScript SDK documentation.
+    Next step for an API-reference method it returns: pass its docs URL (with or without \`?apiView=SDK\`) to \`SearchWixAPISpec\`'s \`getResourceSchemaByUrl\` when available, and read \`method.sdk\` for the exact import, call signature, typed parameters, return type, and examples.
   `,
     SearchBuildAppsDocumentation: dedent_default`
     Searches the Wix Build Apps documentation.
@@ -18171,18 +18218,18 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     SearchWixHeadlessDocumentation: dedent_default`
     Searches the Wix Headless documentation.
   `,
-    // Note: The raw schema also contains sdkData (JS SDK package name, namespace, and
-    // code examples) but it's intentionally omitted from the tool description. Currently
-    // this MCP is focused on REST API calls via ExecuteWixAPI. We may want to expose
-    // sdkData in the future — needs further thought on use cases and presentation.
+    // Note: each method also carries its JavaScript SDK facet (`method.sdk`: package,
+    // namespace, method name, positional signature, parameter schema, JS examples),
+    // merged at spec-sync time from the docs' SDK view. REST fields are unchanged;
+    // `sdk` is simply absent on methods the SDK docs don't list.
     SearchWixAPISpec: dedent_default`
-    Inspect the Wix REST API spec by writing JavaScript code that runs in a sandboxed read-only environment.
-    **Precondition:** you already have a method \`docsUrl\` — from \`SearchWixRESTDocumentation\`, \`BrowseWixRESTDocsMenu\`, \`ReadFullDocsArticle\`, ${includeReadme ? "a `WixREADME` recipe, " : ""}or a prior tool result / the user's message in this conversation. If you don't have one yet, call \`SearchWixRESTDocumentation\` FIRST to discover it; do not use this tool to search for or choose an endpoint.
+    Inspect the Wix REST API spec, and the JavaScript SDK call for each method, by writing JavaScript code that runs in a sandboxed read-only environment.
+    **Precondition:** you already have a method \`docsUrl\` — from \`SearchWixRESTDocumentation\`, \`SearchWixSDKDocumentation\` (its \`?apiView=SDK\` URLs work here as-is), \`BrowseWixRESTDocsMenu\`, \`ReadFullDocsArticle\`, ${includeReadme ? "a `WixREADME` recipe, " : ""}or a prior tool result / the user's message in this conversation. If you don't have one yet, call \`SearchWixRESTDocumentation\` (or \`SearchWixSDKDocumentation\` when writing SDK code) FIRST to discover it; do not use this tool to search for or choose an endpoint.
     **Never pass a \`docsUrl\` you produced from memory.** If the exact URL you are about to pass to \`getResourceSchemaByUrl\` did not appear verbatim in an earlier tool result (or the user's message), it is a guess — call \`SearchWixRESTDocumentation\` first and use a URL from its ranked results. A guessed URL that merely looks plausible routinely resolves to the WRONG sibling method (e.g. \`.../products-v3/create-product\` when the task needs \`.../products-v3/create-product-with-inventory\`), sending the whole turn down a dead end. When in doubt, discover — don't guess.
-    **This tool's job is to INSPECT the exact schema of a method you have ALREADY located — its request/response shape, nested types, and enums. It is NOT a discovery tool for choosing which method to use.**
+    **This tool's job is to INSPECT the exact schema of a method you have ALREADY located — its request/response shape, nested types, and enums, and its SDK call (\`method.sdk\`). It is NOT a discovery tool for choosing which method to use.**
     With a method \`docsUrl\` in hand, call \`getResourceSchemaByUrl(methodDocsUrl)\` to get the resource schema, then read the target method from \`schema.methods\` and resolve any nested \`{ $circular: name }\` types via \`schema.components.schemas[name]\`.
     **If you don't already have a \`docsUrl\` in context, your FIRST action MUST be \`SearchWixRESTDocumentation\` (ranked semantic search) — not this tool.** Then pass the resulting \`docsUrl\` to \`getResourceSchemaByUrl\` here. Do NOT discover endpoints by hand-filtering or scanning \`lightIndex\` (e.g. \`lightIndex.filter(...)\` / \`lightIndex.flatMap(...)\` on a substring): it has no relevance ranking, matches only at resource-name granularity, and misses composite or method-level operations whose parent resource is named after a different noun than your intent. \`lightIndex\` is for resolving a \`docsUrl\` you already have, not for finding one.
-    Prefer \`SearchWixAPISpec\` over \`ReadFullDocsMethodSchema\` for REST method schemas when it is available, especially once you already have a docs URL from semantic search, menu browsing, or conversation context.
+    Prefer \`SearchWixAPISpec\` over \`ReadFullDocsMethodSchema\` for REST and SDK method schemas when it is available, especially once you already have a docs URL from semantic search, menu browsing, or conversation context.
 
     Prefer URL-first results:
     - If you have a docs URL or partial docs URL, search \`resource.docsUrl\` and \`method.docsUrl\` first.
@@ -18190,7 +18237,7 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     - For API execution, return and use \`method.publicUrl\` when available. It is the preferred executable \`https://www.wixapis.com/...\` URL.
     - Return \`docsUrl\` for relevant resources/methods when the next step needs an article or API call source URL; do not hand off to \`ReadFullDocsMethodSchema\` just to inspect a REST method schema.
     - Use \`resourceId\` only as the internal handle for low-level loaders; prefer URL helpers when you have a docs URL.
-    - \`getResourceSchemaByUrl\` resolves only **API resource/method** docs (e.g. \`.../bookings/services/services-v2/create-service\`). It does NOT work on **skill** pages (\`.../skills/...\`) or **article** pages — those have no schema. For an article, use \`getArticleContentByUrl(docsUrl)\`. Never pass a \`.../skills/...\` URL (skill recipes often cross-link sibling skill pages) — use \`SearchWixRESTDocumentation\` to find the real API method instead. If a lookup misses, don't retry the same URL; rediscover it with \`SearchWixRESTDocumentation\`.
+    - \`getResourceSchemaByUrl\` resolves only **API resource/method** docs (e.g. \`.../bookings/services/services-v2/create-service\`). It does NOT work on **skill** pages (\`.../skills/...\`) or **article** pages — those have no schema. For an article, use \`getArticleContentByUrl(docsUrl)\`. Never pass a \`.../skills/...\` URL (skill recipes often cross-link sibling skill pages) — read the skill page with \`ReadFullDocsArticle\`, and use \`SearchWixRESTDocumentation\` to find the real API method. If a lookup misses, don't retry the same URL; rediscover it with \`SearchWixRESTDocumentation\`.
 
     Your code has access to these globals:
 
@@ -18205,6 +18252,8 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
       resourceId: string;     // internal handle for getResourceSchema()
       docsUrl: string;        // e.g. "https://dev.wix.com/docs/api-reference/.../<resource>"
       menuPath: string[];     // e.g. ["business-solutions", "<vertical>", "<resource>"]
+      sdkPackage?: string;    // JS SDK npm package shared by the resource's methods, e.g. "@wix/<vertical>"
+      sdkNamespace?: string;  // module exported by that package, e.g. "<resources>" — absent when the methods differ (then each method carries its own)
       methods: Array<{
         operationId: string;  // e.g. "wix.<vertical>.v3.<Api>.<Operation>"
         summary: string;      // human-readable method name
@@ -18214,6 +18263,9 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
         publicUrl?: string;   // preferred executable URL for ExecuteWixAPI, when available after spec sync
         publicBaseUrl?: string;
         description: string;  // truncated to 200 chars
+        sdk?: string;         // the JS SDK call as the SDK docs show it, e.g. "query<Resources>(query, options)"; absent when the SDK docs don't list the method
+        sdkPackage?: string;  // only when the resource-level value is absent
+        sdkNamespace?: string;
       }>;
     }
     \`\`\`
@@ -18242,8 +18294,17 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
         legacyExamples: Array<{                    // Curl examples
           content: { title: string; request: string; response: string };
         }>;
+        sdk?: {                                    // JavaScript SDK facet; absent when the SDK docs don't list the method
+          package: string;                         // npm package, e.g. "@wix/<vertical>"  →  import { <namespace> } from "<package>"
+          namespace: string;                       // module exported by the package, e.g. "<resources>"
+          method: string;                          // SDK method name; NOT always the operation name (e.g. Data Items' InsertDataItem is "insert")
+          signature: string[];                     // positional parameter names in call order, e.g. ["query", "options"]
+          requestBody: object | null;              // same envelope as the REST requestBody; its properties ARE the parameters in \`signature\`, each typed
+          responses?: object;                      // only when the SDK returns something other than the REST response (e.g. the created entity instead of a Create<X>Response wrapper)
+          examples: Array<{ title: string; description?: string; code: string }>; // JavaScript examples from the SDK docs
+        };
       }>;
-      components: { schemas: object };
+      components: { schemas: object };               // REST types plus the SDK's own types; \`$circular\` names from either body resolve here, exactly as written (SDK-shaped copies of shared types are keyed "sdk:<TypeName>")
     }
     \`\`\`
 
@@ -18305,6 +18366,16 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     - When inspecting a specific method schema (i.e. you have found a single method and are returning its details), always include \`responses: method.responses\` alongside \`requestBody\`. Knowing the response shape up front prevents speculative re-runs of mutations just to see what the API returned.
     - Query/search methods: the declared map is \`method.queryMethodData.queryFieldsCapabilitiesMap\`, or \`method.searchMethodData.searchFieldsCapabilitiesMap\` on search methods. Each entry declares one field's allowed \`operators\` and \`sort\` directions — a closed list, valid for that method alone, so another endpoint's map or a field's presence in the response proves nothing here. Each listed operator is valid on its own — a field takes one — so combine conditions with the logical operators instead: \`$and\` and \`$or\` take an array of expressions, \`$not\` takes one, and they can nest. They are WQL syntax rather than a field capability, so they never appear in the map, and its silence about them is no restriction. An undeclared field or unlisted operator are rejected; some endpoints instead ignore the filter or sort and return the wrong rows. \`sort: []\` means not sortable; no map means nothing is declared, so try what you need and filter in code if it isn't supported.
 
+    JavaScript SDK (writing code with \`@wix/sdk\` and the \`@wix/*\` packages, in Wix Headless, Velo, CLI apps, or any Node/browser project):
+    - Read \`method.sdk\`, not the REST fields. The REST \`requestBody\` is the wire shape; the SDK wraps it differently — fields become positional arguments, and secondary fields move into an \`options\` object — so never derive an SDK call from the REST body. \`sdk.requestBody.properties\` are the parameters, in the order given by \`sdk.signature\`; \`sdk.requestBody.required\` says which are mandatory.
+    - The call is \`<namespace>.<method>(<signature>)\` after \`import { <namespace> } from "<package>"\` (e.g. \`import { services } from "@wix/bookings"\`), or \`wixClient.<namespace>.<method>(...)\` on a client created with \`createClient({ modules: { <namespace> } })\`. \`sdk.method\` is the only reliable method name — it is not always the camelCased operation name.
+    - Return value: \`await\` resolves to \`sdk.responses\` when present, otherwise to the same shape as \`method.responses\`. Resolve \`$circular\` names from either body against \`schema.components.schemas\` exactly as written: an SDK body may point at an SDK-shaped copy of a type, keyed \`"sdk:<TypeName>"\` (e.g. \`sdk:wix.bookings.services.v2.Service\`), which sits in the same dictionary.
+    - Field names differ from REST on entity system fields: the SDK reads and writes \`_id\`, \`_createdDate\`, \`_updatedDate\` where REST has \`id\`, \`createdDate\`, \`updatedDate\`. The SDK-shaped types already use the SDK names — take field names from them, never from the REST body or a REST-keyed type.
+    - Timestamps: where a REST field is a \`date-time\` string, the SDK takes and returns a JavaScript \`Date\` object (the SDK types spell this \`type: "Date"\`).
+    - \`sdk.examples[].code\` are the SDK docs' JavaScript examples; prefer adapting one over composing a call from the schema. Query methods use the same WQL \`filter\`/\`sort\` rules and the same \`queryMethodData\` map as REST.
+    - No \`method.sdk\` means the SDK docs don't list that method: say so and offer the REST call instead of guessing an SDK signature. Where the method is listed, \`lightIndex\` carries the same call compactly as \`method.sdk\` (a string), with the package and namespace on the resource.
+    - For ExecuteWixAPI, keep using \`method.publicUrl\` and the REST \`requestBody\`; the SDK facet is for code the user will run, not for calls made through this MCP.
+
     Examples:
 
     Inspect one method schema by exact docs URL:
@@ -18349,6 +18420,39 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     }
     \`\`\`
 
+    Get the JavaScript SDK call for a method — import, signature, typed parameters, return type, and a docs example (the docs URL may come from \`SearchWixSDKDocumentation\`, with or without \`?apiView=SDK\`):
+    \`\`\`javascript
+    async function() {
+      const methodUrl = "https://dev.wix.com/docs/api-reference/business-solutions/stores/catalog-v3/products-v3/query-products?apiView=SDK";
+
+      const schema = await getResourceSchemaByUrl(methodUrl);
+      const method = schema.methods.find(method => method.docsUrl === methodUrl.replace(/\\?.*$/, ""));
+      if (!method) return { message: "No exact method URL match", methods: schema.methods.map(m => ({ title: m.summary, docsUrl: m.docsUrl, sdk: m.sdk && m.sdk.method })) };
+      if (!method.sdk) return { message: "The SDK docs do not list this method; use the REST call.", publicUrl: method.publicUrl, requestBody: method.requestBody };
+
+      const { sdk } = method;
+      const types = schema.components.schemas;
+      // Each positional parameter, typed. The parameters body is pre-expanded for a method URL;
+      // any remaining { $circular: name } resolves against types[name].
+      const paramsSchema = sdk.requestBody?.content?.["application/json"]?.schema ?? {};
+      const parameters = sdk.signature.map(name => ({
+        name,
+        required: (paramsSchema.required ?? []).includes(name),
+        schema: paramsSchema.properties?.[name]
+      }));
+
+      return {
+        import: \`import { \${sdk.namespace} } from "\${sdk.package}";\`,
+        call: \`\${sdk.namespace}.\${sdk.method}(\${sdk.signature.join(", ")})\`,
+        parameters,
+        returns: sdk.responses ?? method.responses,
+        // Query methods: the same closed list of filterable/sortable fields applies to the SDK call.
+        queryFieldsCapabilities: method.queryMethodData?.queryFieldsCapabilitiesMap,
+        example: sdk.examples[0]
+      };
+    }
+    \`\`\`
+
     Inspect one resource by resource docs URL:
     \`\`\`javascript
     async function() {
@@ -18553,11 +18657,18 @@ function buildToolDescriptions(includeReadme, includeImageUploadGuidance = true)
     Compose: put independent reads in one document as several root fields, and use related-entity fields (e.g. \`inventoryItems\`, \`collections\`, \`fulfillments\`) instead of extra round-trips. Select only the fields you need; every object field needs a selection set. Variables: use them for \`JSON\` scalars (filter, sort) and plain scalars (String, Int, ID), declared in the document (e.g. \`query Q($f: JSON) { ... filter: $f ... }\`). Write mutation inputs and any object that contains an enum INLINE as GraphQL literals with enum values unquoted (e.g. \`input: { product: { name: "Mug", productType: PHYSICAL } }\`) — this endpoint fails with 503 when an enum value arrives inside an object-typed variable. For lists page with \`cursorPaging\` or \`paging\` exactly as the input type declares (never the other one), and request \`pageInfo { hasNext total }\`; \`total\` is only populated with offset \`paging\`, so for a cursor-paged list count by walking pages or use a count operation.
     Results: each root field fails independently — \`errors[].path\` names the failing field and \`errors[].extensions.message\` the cause (e.g. PERMISSION_DENIED); \`data\` still holds the fields that succeeded. Mutations return the created/updated entity — read the IDs from it and do not re-query to verify. Large results are truncated: narrow the selection or page size instead of re-running.
     Set \`hasMutations: true\` for any document containing a mutation root field.
+  `,
+    DeployWebsite: dedent_default`
+    The user — or you, earlier in this conversation — ALREADY HAVE a finished page or site, in any form, and it should be live on Wix: HTML/CSS/JS files, a static build (dist/, out/), a zip, another AI builder's export, or a page/design you created in this conversation (export it to HTML first — a finished design IS a finished page). Call this when the user says deploy, host, publish, put online, make it live, get a URL, or upload my site / index.html.
+    Also for updating a site deployed this way (replace its files; same site, same URL) and for implementing a backend on one (stores, bookings, CMS, members) as a Wix Headless project — same site, same URL. Works with or without a Wix login (anonymous deploy with a save link), through the Wix MCP alone or from a shell.
+    Missing real functionality — a fake checkout, a form that goes nowhere, bookings — is NOT a reason to rebuild the site with a site-creation tool: deploy the page as is, then add the backend afterwards (the recipe covers it).
+    Returns the full recipe; follow it and run the flow yourself. The drop page is only the fallback when you can't.
+    NOT for: a screenshot, mockup or reference image of a site the user WANTS (nothing exists to deploy yet — that is site creation: WixSiteBuilder / templates); a Claude Design share URL (import-claude-design-from-url); migrating a live site by URL or CSV exports; adding HTML or code into an existing Wix site; uploading images or documents to a site's media (UploadImageToWixSite).
   `,
     CreateWixBusinessGuide: dedent_default`
     Provides comprehensive documentation for creating a new Wix business (site, app, etc.).
     Call this ONLY when the user explicitly asks for a headless site, a Wix Classic Editor site, or manual/advanced account/API-based site creation — these don't need the site's purpose first. For normal site-creation ${SITE_CREATION_COPY.normalCreationRoute.nonWidget}; for a specific template id, call \`CreateSiteFromTemplate\`.
-    Exception, even when the user says "headless": if they ALREADY HAVE the finished site as files (their own HTML/CSS/JS, a zip, an AI-builder export) and want those files hosted, don't call this tool. For a full agentic flow, read the recipe and publish the files yourself: https://dev.wix.com/docs/api-reference/account-level/sites/skills/upload-a-website-or-html-files.md — it covers creating the site and uploading the files end to end. If you can't follow it, or it doesn't apply, fall back to sending the user to https://www.wix.com/headless/drop?utm_campaign=mcp to upload the files and get a live hosted site (give that URL exactly, keeping the utm_campaign=mcp parameter). This guide's CLI flow is for BUILDING a headless frontend, not for hosting ready-made files.
+    Exception, even when the user says "headless": if a finished page or site already exists in any form (their own HTML/CSS/JS, a static build, a zip, an AI-builder export, a page you made in this conversation) and they want it hosted, don't call this tool — call DeployWebsite, which returns the recipe to publish the files yourself. This guide's CLI flow is for BUILDING a headless frontend, not for hosting ready-made files.
 
     ## What This Tool Contains
 
@@ -19285,7 +19396,7 @@ var paramDescriptions = {
     reason: "One sentence describing the original user request and the task you are trying to accomplish with this search."
   },
   ReadFullDocsArticle: {
-    articleUrl: "The URL of the docs article or method article to fetch. Should be something like https://dev.wix.com/docs/.../... For REST docs, use the URL as-is. For SDK docs, the URL SHOULD include the query param ?apiView=SDK (e.g. https://dev.wix.com/docs/...?apiView=SDK)."
+    articleUrl: "The URL of the docs article or method article to fetch. Should be something like https://dev.wix.com/docs/.../... For REST docs, use the URL as-is. For SDK docs, the URL SHOULD include the query param ?apiView=SDK (e.g. https://dev.wix.com/docs/...?apiView=SDK). Wix skills pages (https://www.wix.com/skills/..., https://dev.wix.com/docs/skills/...) are read as-is, including their referenced files."
   },
   ReadFullDocsMethodSchema: {
     articleUrl: "The URL of the documentation to fetch. Should be something like https://dev.wix.com/docs/.../... For REST docs, use the URL as-is. For SDK docs, the URL SHOULD include the query param ?apiView=SDK (e.g. https://dev.wix.com/docs/...?apiView=SDK).",
@@ -19704,6 +19815,59 @@ ${articleContent}${nextSteps}`;
   );
 }
 
+// src/docs/deploy-website.ts
+var DEPLOY_WEBSITE_TOOL_NAME = "DeployWebsite";
+var DEPLOY_WEBSITE_RECIPE_URL = "https://dev.wix.com/docs/api-reference/account-level/sites/skills/upload-a-website-or-html-files.md";
+var DROP_PAGE_URL = "https://www.wix.com/headless/drop?utm_campaign=mcp";
+var FALLBACK_LINE = `Only if you cannot run it (you can't reach the file bytes, or a step fails and you can't fix it): send the user to ${DROP_PAGE_URL} \u2014 give that URL exactly as written, keeping the utm_campaign=mcp parameter.`;
+function deployWebsiteResponse(recipe) {
+  return [
+    `The following is the content of ${DEPLOY_WEBSITE_RECIPE_URL}. Follow it end to end and do the publishing yourself \u2014 do not hand the user instructions.`,
+    FALLBACK_LINE,
+    "---",
+    recipe.trim()
+  ].join("\n\n");
+}
+var DEPLOY_WEBSITE_POINTER_RESPONSE = [
+  `Read and follow this recipe end to end: ${DEPLOY_WEBSITE_RECIPE_URL}`,
+  "It covers creating the site and uploading the files (with or without a Wix login), updating a site deployed this way, and implementing a backend on it (stores, bookings, CMS, members) as a Wix Headless project. Do the publishing yourself \u2014 do not hand the user instructions.",
+  FALLBACK_LINE
+].join("\n\n");
+function addDeployWebsiteTool(server, disableTools = [], toolDescriptions, fetchOptions = {}) {
+  if (disableTools.includes(DEPLOY_WEBSITE_TOOL_NAME)) {
+    return;
+  }
+  server.tool(
+    DEPLOY_WEBSITE_TOOL_NAME,
+    toolDescriptions?.[DEPLOY_WEBSITE_TOOL_NAME] ?? defaultToolDescriptions[DEPLOY_WEBSITE_TOOL_NAME],
+    {},
+    { readOnlyHint: true, destructiveHint: false, openWorldHint: false },
+    async (_args, { httpClient }) => {
+      let text = DEPLOY_WEBSITE_POINTER_RESPONSE;
+      try {
+        const recipe = await fetchArticleContent(
+          httpClient,
+          DEPLOY_WEBSITE_RECIPE_URL.replace(/\.md$/, ""),
+          "article",
+          true,
+          fetchOptions.skillsPortalUrl,
+          fetchOptions.repo,
+          fetchOptions.commitHash
+        );
+        if (recipe && recipe.trim()) {
+          text = deployWebsiteResponse(recipe);
+        }
+      } catch (error) {
+        console.warn(
+          `[DeployWebsite] recipe fetch failed, returning the pointer:`,
+          error instanceof Error ? error.message : error
+        );
+      }
+      return { content: [{ type: "text", text }] };
+    }
+  );
+}
+
 // src/docs/docs.ts
 var REST_SEARCH_API_GROUNDING_REMINDER = dedent_default`
   # Before calling a Wix API
@@ -19752,6 +19916,7 @@ var addDocsTools = (server, allowedTools = [
   const {
     getToKnowWixEnabled = false,
     createWixBusinessGuideEnabled = true,
+    deployWebsiteEnabled = true,
     disableTools,
     toolDescriptions,
     readmeDocs,
@@ -19817,6 +19982,13 @@ var addDocsTools = (server, allowedTools = [
       cliEnabled
     );
   }
+  if (deployWebsiteEnabled) {
+    addDeployWebsiteTool(server, disableTools || [], toolDescriptions, {
+      skillsPortalUrl,
+      repo: effectiveRepo,
+      commitHash: effectiveCommitHash
+    });
+  }
   if (allowedTools.includes("WDS") && !disableTools?.includes("SearchWixWDSDocumentation")) {
     server.tool(
       "SearchWixWDSDocumentation",
@@ -20333,18 +20505,19 @@ var addDocsTools = (server, allowedTools = [
       async ({ articleUrl }, { httpClient }) => {
         const validPrefixes = ["https://dev.wix.com/docs/"];
         if (skillsPortalUrl) validPrefixes.push(skillsPortalUrl);
-        if (!validPrefixes.some((p) => articleUrl.startsWith(p))) {
+        const isSkillsPage = isSkillsRegistryUrl(articleUrl);
+        if (!isSkillsPage && !validPrefixes.some((p) => articleUrl.startsWith(p))) {
           return {
             isError: true,
             content: [
               {
                 type: "text",
-                text: `Invalid article URL: must start with https://dev.wix.com/docs/. Got: "${articleUrl}"`
+                text: `Invalid article URL: must start with https://dev.wix.com/docs/, or be a Wix skills page (https://www.wix.com/skills/...). Got: "${articleUrl}"`
               }
             ]
           };
         }
-        if (articleUrl.startsWith("https://dev.wix.com/docs/")) {
+        if (!isSkillsPage && articleUrl.startsWith("https://dev.wix.com/docs/")) {
           articleUrl = articleUrl.replace(/\.md$/, "");
         }
         try {
@@ -22326,10 +22499,11 @@ function addExecuteTool(server, options) {
       sourceDocUrls: external_exports.array(external_exports.string()).describe(d.sourceDocUrls),
       files: external_exports.string().optional().describe(
         [
-          "Optional bundle of raw file contents for uploads, so file bytes never go through the `code` JavaScript (no escaping, no string-literal/`${}`/backtick pitfalls).",
-          "Format: one or more sections, each a line `=== FILE: <path> ===` on its own, followed by that file's raw text content; `<path>` is the path relative to the site root (e.g. `index.html`, `assets/app.js`). Example: `=== FILE: index.html ===\\n<!doctype html>...\\n=== FILE: assets/app.js ===\\nconsole.log(1)`.",
-          'In `code`, the parsed files are the `files` global (array of `{ path, content }`), and `wix.multipart(files)` returns `{ body, contentType }` for a `multipart/form-data` upload \u2014 e.g. `const mp = wix.multipart(); await wix.request({ scope: "account", method: "POST", url, headers: { "Content-Type": mp.contentType }, body: mp.body });`.',
-          "Text files only; for binary assets pass bytes as a base64 request body instead. A file whose content itself contains a line exactly like the delimiter is not supported."
+          "Optional bundle of raw file contents for uploads, so file bytes never go through the `code` JavaScript (no escaping, no string-literal/`${}`/backtick pitfalls). Never inline file contents in `code`.",
+          "Format: sections delimited by a line `=== FILE: <path> ===` (text, raw) or `=== FILE: <path> base64 ===` (binary, base64); `<path>` is relative to the site root. Example:",
+          '`=== FILE: index.html ===\\n<!doctype html><img src="logo.png">\\n=== FILE: assets/app.js ===\\nconsole.log(1)\\n=== FILE: logo.png base64 ===\\niVBORw0KGgo...`',
+          'In `code` they are the `files` global (`{ path, content, encoding?: "base64" }[]`); `wix.multipart()` turns them into one binary-safe `multipart/form-data` body: `const mp = wix.multipart(); await wix.request({ scope: "account", method: "POST", url, headers: { "Content-Type": mp.contentType }, body: mp.body });`.',
+          'Use base64 entries for small assets (icons, logos, fonts) and for files you downloaded and are re-uploading; large images/video go in by URL (`<img src="https://...">`), not in the bundle. A file containing a line exactly like the delimiter is not supported.'
         ].join(" ")
       ),
       // Visitor mode takes an agent-supplied token and pins the site; account/site

package/build/dts/code-mode/index.js

@@ -240,10 +240,11 @@ function addExecuteTool(server, options) {
             .string()
             .optional()
             .describe([
-            'Optional bundle of raw file contents for uploads, so file bytes never go through the `code` JavaScript (no escaping, no string-literal/`${}`/backtick pitfalls).',
-            "Format: one or more sections, each a line `=== FILE: <path> ===` on its own, followed by that file's raw text content; `<path>` is the path relative to the site root (e.g. `index.html`, `assets/app.js`). Example: `=== FILE: index.html ===\\n<!doctype html>...\\n=== FILE: assets/app.js ===\\nconsole.log(1)`.",
-            'In `code`, the parsed files are the `files` global (array of `{ path, content }`), and `wix.multipart(files)` returns `{ body, contentType }` for a `multipart/form-data` upload — e.g. `const mp = wix.multipart(); await wix.request({ scope: "account", method: "POST", url, headers: { "Content-Type": mp.contentType }, body: mp.body });`.',
-            'Text files only; for binary assets pass bytes as a base64 request body instead. A file whose content itself contains a line exactly like the delimiter is not supported.'
+            'Optional bundle of raw file contents for uploads, so file bytes never go through the `code` JavaScript (no escaping, no string-literal/`${}`/backtick pitfalls). Never inline file contents in `code`.',
+            'Format: sections delimited by a line `=== FILE: <path> ===` (text, raw) or `=== FILE: <path> base64 ===` (binary, base64); `<path>` is relative to the site root. Example:',
+            '`=== FILE: index.html ===\\n<!doctype html><img src="logo.png">\\n=== FILE: assets/app.js ===\\nconsole.log(1)\\n=== FILE: logo.png base64 ===\\niVBORw0KGgo...`',
+            'In `code` they are the `files` global (`{ path, content, encoding?: "base64" }[]`); `wix.multipart()` turns them into one binary-safe `multipart/form-data` body: `const mp = wix.multipart(); await wix.request({ scope: "account", method: "POST", url, headers: { "Content-Type": mp.contentType }, body: mp.body });`.',
+            'Use base64 entries for small assets (icons, logos, fonts) and for files you downloaded and are re-uploading; large images/video go in by URL (`<img src="https://...">`), not in the bundle. A file containing a line exactly like the delimiter is not supported.'
         ].join(' ')),
         // Visitor mode takes an agent-supplied token and pins the site; account/site
         // mode lets the agent pick the site.