honeybook-mcp 1.3.1 → 1.4.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "HoneyBook client-portal tools for Claude Code",
-    "version": "1.3.1"
+    "version": "1.4.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "HoneyBook",
       "source": "./",
       "description": "HoneyBook client-portal MCP for Claude — view wedding-vendor contracts and invoices via MCP",
-      "version": "1.3.1",
+      "version": "1.4.0",
       "author": {
         "name": "Chris Chall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "honeybook",
   "displayName": "HoneyBook",
-  "version": "1.3.1",
+  "version": "1.4.0",
   "description": "HoneyBook client-portal MCP for Claude — view wedding-vendor contracts and invoices via MCP",
   "author": {
     "name": "Chris Chall",

package/README.md

@@ -140,8 +140,8 @@ Tools that touch a vendor accept an optional `origin` argument (e.g. `https://ac
 | `list_projects`        | Your projects with a vendor + their workspace ids         | Auto       |
 | `get_project`          | Project details: date, location, people, custom fields    | Auto       |
 | `list_messages`        | Messages (or the activity log) in a workspace, newest first | Auto     |
-| `get_message`          | One message in full: body, attachments, delivery status   | Auto       |
-| `send_message`         | Send or reply through the portal (after you confirm)      | Confirm    |
+| `get_message`          | One message in full: body (text, Markdown or HTML), attachments, delivery status | Auto |
+| `send_message`         | Send or reply through the portal, in text, Markdown or HTML (after you confirm) | Confirm |
 | `mark_messages_seen`   | Mark feed items seen (reads never do this on their own)   | Auto       |
 | `list_meetings`        | Scheduled meetings with join links, latest time wins      | Auto       |
 | `list_tasks`           | Tasks the vendor assigned you, with counts                | Auto       |

package/dist/bundle.js

@@ -233,7 +233,7 @@ var require_util = __commonJS({
       else
         target[key] = value;
     }
-    function mirrorShape2(target, source, keys, wrap) {
+    function mirrorShape2(target, source, keys, wrap2) {
       const raw = sourceShape2(source);
       for (const key of keys) {
         const desc = Object.getOwnPropertyDescriptor(raw, key);
@@ -242,10 +242,10 @@ var require_util = __commonJS({
         if (desc.get) {
           deferProp2(target, key, () => {
             const value = source._zod.def.shape[key];
-            return wrap ? wrap(value, key) : value;
+            return wrap2 ? wrap2(value, key) : value;
           });
         } else
-          putProp2(target, key, wrap ? wrap(desc.value, key) : desc.value);
+          putProp2(target, key, wrap2 ? wrap2(desc.value, key) : desc.value);
       }
     }
     function mirrorProps2(target, source) {
@@ -777,9 +777,9 @@ var require_util = __commonJS({
       }
     };
     exports.Class = Class2;
-    function members2(proto, table) {
-      for (const key in table) {
-        const desc = Object.getOwnPropertyDescriptor(table, key);
+    function members2(proto, table2) {
+      for (const key in table2) {
+        const desc = Object.getOwnPropertyDescriptor(table2, key);
         if (desc.get)
           Object.defineProperty(proto, key, { ...desc, enumerable: false });
         else
@@ -793,10 +793,10 @@ var require_util = __commonJS({
     function hide2(inst, key, value) {
       return own2(inst, key, value, false);
     }
-    function derived2(computes, table) {
+    function derived2(computes, table2) {
       for (const key in computes) {
         const compute = computes[key];
-        Object.defineProperty(table, key, {
+        Object.defineProperty(table2, key, {
           configurable: true,
           enumerable: true,
           get() {
@@ -807,7 +807,7 @@ var require_util = __commonJS({
           }
         });
       }
-      return table;
+      return table2;
     }
     function defineBound2(proto, key, fn) {
       Object.defineProperty(proto, key, {
@@ -18823,8 +18823,8 @@ var require_json_schema_processors = __commonJS({
     function aggregateChecks2(schema) {
       const agg = {};
       const def = schema._zod.def;
-      const list = schema._zod.traits.has("$ZodCheck") ? [schema, ...def.checks ?? []] : def.checks ?? [];
-      for (const ch of list)
+      const list2 = schema._zod.traits.has("$ZodCheck") ? [schema, ...def.checks ?? []] : def.checks ?? [];
+      for (const ch of list2)
         contributors2[ch._zod.def.check]?.(agg, ch._zod.def);
       const bag = schema._zod.bag;
       if (bag.minimum !== void 0)
@@ -23386,13 +23386,13 @@ var require_buffer_util = __commonJS({
     "use strict";
     var { EMPTY_BUFFER } = require_constants();
     var FastBuffer = Buffer[Symbol.species];
-    function concat(list, totalLength) {
-      if (list.length === 0) return EMPTY_BUFFER;
-      if (list.length === 1) return list[0];
+    function concat(list2, totalLength) {
+      if (list2.length === 0) return EMPTY_BUFFER;
+      if (list2.length === 1) return list2[0];
       const target = Buffer.allocUnsafe(totalLength);
       let offset = 0;
-      for (let i = 0; i < list.length; i++) {
-        const buf = list[i];
+      for (let i = 0; i < list2.length; i++) {
+        const buf = list2[i];
         target.set(buf, offset);
         offset += buf.length;
       }
@@ -25178,14 +25178,14 @@ var require_sender = __commonJS({
        * @param {Function} [cb] Callback
        * @private
        */
-      sendFrame(list, cb) {
-        if (list.length === 2) {
+      sendFrame(list2, cb) {
+        if (list2.length === 2) {
           this._socket.cork();
-          this._socket.write(list[0]);
-          this._socket.write(list[1], cb);
+          this._socket.write(list2[0]);
+          this._socket.write(list2[1], cb);
           this._socket.uncork();
         } else {
-          this._socket.write(list[0], cb);
+          this._socket.write(list2[0], cb);
         }
       }
     };
@@ -37708,7 +37708,7 @@ var require_contains = /* @__PURE__ */ __commonJSMin(((exports) => {
         const count = gen.let("count", 0);
         validateItems(schValid, () => gen.if(schValid, () => checkLimits(count)));
       }
-      function validateItems(_valid, block) {
+      function validateItems(_valid, block2) {
         gen.forRange("i", 0, len, (i) => {
           cxt.subschema({
             keyword: "contains",
@@ -37716,7 +37716,7 @@ var require_contains = /* @__PURE__ */ __commonJSMin(((exports) => {
             dataPropType: util_1.Type.Num,
             compositeRule: true
           }, _valid);
-          block();
+          block2();
         });
       }
       function checkLimits(count) {
@@ -40086,11 +40086,11 @@ var require_dist = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     if (!f) throw new Error(`Unknown format "${name}"`);
     return f;
   };
-  function addFormats2(ajv, list, fs, exportName) {
+  function addFormats2(ajv, list2, fs, exportName) {
     var _a3;
     var _b;
     (_a3 = (_b = ajv.opts.code).formats) !== null && _a3 !== void 0 || (_b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`);
-    for (const f of list) ajv.addFormat(f, fs[f]);
+    for (const f of list2) ajv.addFormat(f, fs[f]);
   }
   module.exports = exports = formatsPlugin;
   Object.defineProperty(exports, "__esModule", { value: true });
@@ -43506,7 +43506,7 @@ function putProp(target, key, value) {
   else
     target[key] = value;
 }
-function mirrorShape(target, source, keys, wrap) {
+function mirrorShape(target, source, keys, wrap2) {
   const raw = sourceShape(source);
   for (const key of keys) {
     const desc = Object.getOwnPropertyDescriptor(raw, key);
@@ -43515,10 +43515,10 @@ function mirrorShape(target, source, keys, wrap) {
     if (desc.get) {
       deferProp(target, key, () => {
         const value = source._zod.def.shape[key];
-        return wrap ? wrap(value, key) : value;
+        return wrap2 ? wrap2(value, key) : value;
       });
     } else
-      putProp(target, key, wrap ? wrap(desc.value, key) : desc.value);
+      putProp(target, key, wrap2 ? wrap2(desc.value, key) : desc.value);
   }
 }
 function mirrorProps(target, source) {
@@ -44048,9 +44048,9 @@ var Class = class {
   constructor(..._args) {
   }
 };
-function members(proto, table) {
-  for (const key in table) {
-    const desc = Object.getOwnPropertyDescriptor(table, key);
+function members(proto, table2) {
+  for (const key in table2) {
+    const desc = Object.getOwnPropertyDescriptor(table2, key);
     if (desc.get)
       Object.defineProperty(proto, key, { ...desc, enumerable: false });
     else
@@ -44065,10 +44065,10 @@ function hide(inst, key, value) {
   return own(inst, key, value, false);
 }
 // @__NO_SIDE_EFFECTS__
-function derived(computes, table) {
+function derived(computes, table2) {
   for (const key in computes) {
     const compute = computes[key];
-    Object.defineProperty(table, key, {
+    Object.defineProperty(table2, key, {
       configurable: true,
       enumerable: true,
       get() {
@@ -44079,7 +44079,7 @@ function derived(computes, table) {
       }
     });
   }
-  return table;
+  return table2;
 }
 function defineBound(proto, key, fn) {
   Object.defineProperty(proto, key, {
@@ -58931,8 +58931,8 @@ var contributors = {
 function aggregateChecks(schema) {
   const agg = {};
   const def = schema._zod.def;
-  const list = schema._zod.traits.has("$ZodCheck") ? [schema, ...def.checks ?? []] : def.checks ?? [];
-  for (const ch of list)
+  const list2 = schema._zod.traits.has("$ZodCheck") ? [schema, ...def.checks ?? []] : def.checks ?? [];
+  for (const ch of list2)
     contributors[ch._zod.def.check]?.(agg, ch._zod.def);
   const bag = schema._zod.bag;
   if (bag.minimum !== void 0)
@@ -64467,7 +64467,7 @@ var pageSchema = {
 
 // src/version.ts
 var SERVER_NAME = "honeybook-mcp";
-var VERSION = "1.3.1";
+var VERSION = "1.4.0";
 
 // src/sessions.ts
 import { homedir } from "node:os";
@@ -66264,14 +66264,14 @@ function assertAcceptsList(accepts) {
     }
   }
 }
-function assertUnavailableCapabilities(list) {
+function assertUnavailableCapabilities(list2) {
   const label = "hello.unavailableCapabilities";
-  if (!Array.isArray(list))
+  if (!Array.isArray(list2))
     throw new ProtocolError3(`${label}: expected array`);
-  if (list.length > MAX_UNAVAILABLE_CAPABILITIES) {
-    throw new ProtocolError3(`${label}: at most ${MAX_UNAVAILABLE_CAPABILITIES} entries, got ${list.length}`);
+  if (list2.length > MAX_UNAVAILABLE_CAPABILITIES) {
+    throw new ProtocolError3(`${label}: at most ${MAX_UNAVAILABLE_CAPABILITIES} entries, got ${list2.length}`);
   }
-  for (const c of list) {
+  for (const c of list2) {
     if (typeof c !== "string") {
       throw new ProtocolError3(`${label}: entry must be string, got ${typeof c}`);
     }
@@ -70414,8 +70414,8 @@ var FetchproxyServer = class {
         throw new Error("FetchproxyServer.captureRequestHeader: no captureHeaders declared on this server \u2014 declare at least one entry in FetchproxyServerOpts.captureHeaders, or pass {host, headerName} explicitly");
       }
       if (decls.length > 1) {
-        const list = decls.map((d) => `${JSON.stringify(d.host)}${JSON.stringify(normPath(d.path))}/${JSON.stringify(d.headerName)}`).join(", ");
-        throw new Error(`FetchproxyServer.captureRequestHeader: multiple captureHeaders declared (${decls.length}: ${list}); pass {host, headerName} to disambiguate`);
+        const list2 = decls.map((d) => `${JSON.stringify(d.host)}${JSON.stringify(normPath(d.path))}/${JSON.stringify(d.headerName)}`).join(", ");
+        throw new Error(`FetchproxyServer.captureRequestHeader: multiple captureHeaders declared (${decls.length}: ${list2}); pass {host, headerName} to disambiguate`);
       }
       resolved = decls[0];
     } else {
@@ -72860,6 +72860,524 @@ function registerProjectTools(server) {
   );
 }
 
+// node_modules/@chrischall/mcp-utils/dist/rich/html.js
+var NAMED_ENTITIES = {
+  amp: "&",
+  lt: "<",
+  gt: ">",
+  quot: '"',
+  apos: "'",
+  nbsp: " "
+};
+function decodeEntities(s) {
+  return s.replace(/&(?:#(\d{1,8})|#x([0-9a-f]{1,8})|([a-z]{1,10}));|&(amp|lt|gt|quot|nbsp)(?![a-z0-9=])/gi, (whole, dec2, hex3, name, legacy) => {
+    if (legacy !== void 0)
+      return NAMED_ENTITIES[legacy.toLowerCase()];
+    if (name !== void 0)
+      return NAMED_ENTITIES[name.toLowerCase()] ?? whole;
+    const code2 = dec2 !== void 0 ? Number(dec2) : parseInt(hex3, 16);
+    if (!Number.isFinite(code2) || code2 > 1114111)
+      return whole;
+    if (code2 < 32 && code2 !== 9 && code2 !== 10)
+      return "";
+    return String.fromCodePoint(code2);
+  });
+}
+var HTML_ESCAPES = { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" };
+function escapeHtml(s) {
+  return s.replace(/[&<>"']/g, (c) => HTML_ESCAPES[c]);
+}
+function attr(attrs, name) {
+  const m = new RegExp(`(?:^|\\s)${name}\\s*=\\s*(?:"([^"]*)"|'([^']*)'|([^\\s"'>]+))`, "i").exec(attrs);
+  return m ? m[1] ?? m[2] ?? m[3] : void 0;
+}
+var INVISIBLE = /[\u200b\u200c\u2060\ufeff]/g;
+var visible = (s) => s.replace(INVISIBLE, "");
+var MAX_DEPTH = 200;
+var VOID = /* @__PURE__ */ new Set(["br", "img", "hr", "wbr", "input", "meta", "link", "col", "source", "area", "base", "embed", "param", "track"]);
+var DROPPED_WITH_CONTENT = "script|style|head|title|template|noscript|iframe|object|svg|math|xml";
+var BLOCK = /* @__PURE__ */ new Set(["p", "div", "ul", "ol", "pre", "blockquote", "table", "h1", "h2", "h3", "h4", "h5", "h6"]);
+var TAG = /<(\/?)([a-z][a-z0-9]*)\b((?:[^<>"']|"[^"<]*"|'[^'<]*')*)>/gi;
+var HIDDEN_STYLE = /(?:^|[;\s])(?:display\s*:\s*none|visibility\s*:\s*hidden|mso-hide\s*:\s*all)\b/i;
+function isHidden(attrs) {
+  const names = attrs.replace(/"[^"]*"|'[^']*'/g, '""');
+  if (/(?:^|\s)hidden(?:\s|=|\/|$)/i.test(names))
+    return true;
+  const style = attr(attrs, "style");
+  return style !== void 0 && HIDDEN_STYLE.test(decodeEntities(style));
+}
+function parseHtml(html, opts = {}) {
+  const root = { tag: "#root", attrs: "", children: [] };
+  const stack = [root];
+  const top = () => stack[stack.length - 1];
+  const src = html.replace(/[\u0001-\u0005]/g, "").replace(/<!--[\s\S]*?(?:-->|$)/g, "").replace(/<!\[CDATA\[[\s\S]*?(?:\]\]>|$)/g, "").replace(/<![^>]*>/g, "").replace(new RegExp(`<(${DROPPED_WITH_CONTENT})\\b[\\s\\S]*?(?:<\\/\\1\\s*>|$)`, "gi"), "");
+  let at = 0;
+  for (const m of src.matchAll(TAG)) {
+    if (m.index > at)
+      top().children.push(src.slice(at, m.index));
+    at = m.index + m[0].length;
+    const tag = m[2].toLowerCase();
+    if (m[1] === "/") {
+      let i = stack.length - 1;
+      while (i > 0 && stack[i].tag !== tag)
+        i--;
+      if (i > 0)
+        stack.length = i;
+      continue;
+    }
+    if (tag === "li" && top().tag === "li" || BLOCK.has(tag) && top().tag === "p")
+      stack.pop();
+    if ((tag === "td" || tag === "th" || tag === "tr") && (top().tag === "td" || top().tag === "th"))
+      stack.pop();
+    if (tag === "tr" && top().tag === "tr")
+      stack.pop();
+    const attrs = m[3];
+    const el = { tag, attrs, children: [] };
+    const hidden = opts.keepHidden !== true && isHidden(attrs);
+    if (!hidden)
+      top().children.push(el);
+    const opens = !VOID.has(tag) && !attrs.trimEnd().endsWith("/");
+    if (opens && (hidden || stack.length <= MAX_DEPTH))
+      stack.push(el);
+  }
+  if (at < src.length)
+    top().children.push(src.slice(at));
+  return root;
+}
+function safeHref(attrs) {
+  const raw = attr(attrs, "href");
+  if (raw === void 0)
+    return void 0;
+  const href = decodeEntities(raw).trim();
+  return /^(https?:\/\/|mailto:)/i.test(href) ? href : void 0;
+}
+function defaultImageText(el) {
+  const alt = decodeEntities(attr(el.attrs, "alt") ?? "").replace(/\s+/g, " ").trim();
+  return alt === "" ? "" : `[${alt}]`;
+}
+var QUOTE_OPEN = "
";
+var QUOTE_CLOSE = "";
+var PARA = "";
+var BR = "";
+var MARKS = /[\u0004\u0005]/g;
+var paraBlock = (inner) => `
+${PARA}
+${inner}
+${PARA}
+`;
+var TEXT_BLOCK = /* @__PURE__ */ new Set(["p", "div", "h1", "h2", "h3", "h4", "h5", "h6", "table", "hr"]);
+var LOOKS_LIKE_ADDRESS = /^(https?:\/\/|www\.)/i;
+function linkText(el, label) {
+  const url4 = safeHref(el.attrs);
+  if (url4 === void 0)
+    return label;
+  const shown = label.trim();
+  if (shown === "" || shown === url4 || LOOKS_LIKE_ADDRESS.test(shown))
+    return url4;
+  return `${label} (${url4})`;
+}
+function rowText(tr, o) {
+  const cells = tr.children.filter((n) => typeof n !== "string" && (n.tag === "td" || n.tag === "th"));
+  if (cells.length === 0)
+    return toText(tr.children, o);
+  const raw = cells.map((c) => toText(c.children, o));
+  const filled = raw.filter((t) => t.replace(/[\s\u0001-\u0005]+/g, "") !== "");
+  if (filled.length === 1)
+    return filled[0];
+  const texts = raw.map((t) => t.replace(/[\n\u0001-\u0005]+/g, " ").trim());
+  while (texts.length > 0 && texts[texts.length - 1] === "")
+    texts.pop();
+  return texts.join(" | ");
+}
+function toText(nodes, o) {
+  const memo3 = o.textMemo ??= /* @__PURE__ */ new WeakMap();
+  const hit = memo3.get(nodes);
+  if (hit !== void 0)
+    return hit;
+  let out = "";
+  for (const n of nodes) {
+    if (typeof n === "string") {
+      out += visible(decodeEntities(n));
+      continue;
+    }
+    if (n.tag === "br") {
+      out += `
+${BR}`;
+      continue;
+    }
+    const code2 = n.tag === "code" || n.tag === "pre";
+    const inner = n.tag === "img" ? "" : code2 ? codeText(n.children) : toText(n.children, o);
+    const hooked = o.element?.(n, "text", inner);
+    if (hooked !== void 0)
+      out += hooked;
+    else if (n.tag === "img")
+      out += defaultImageText(n);
+    else if (n.tag === "a")
+      out += linkText(n, inner);
+    else if (n.tag === "tr")
+      out += `
+${rowText(n, o)}
+`;
+    else if (n.tag === "blockquote")
+      out += paraBlock(`${QUOTE_OPEN}
+${inner}
+${QUOTE_CLOSE}`);
+    else if (n.tag === "ol" || n.tag === "ul") {
+      const start = Number(attr(n.attrs, "start"));
+      let i = n.tag === "ol" && Number.isInteger(start) && start >= 0 ? start : 1;
+      let items = "";
+      for (const c of n.children) {
+        if (typeof c !== "string" && c.tag === "li") {
+          const text2 = toText(c.children, o).replace(/^[\s\u0004\u0005]+|[\s\u0004\u0005]+$/g, "");
+          items += `
+${n.tag === "ol" ? `${i++}. ` : "- "}${text2}
+`;
+        } else
+          items += toText([c], o);
+      }
+      out += paraBlock(items);
+    } else if (n.tag === "pre" || TEXT_BLOCK.has(n.tag))
+      out += paraBlock(inner);
+    else if (n.tag === "li")
+      out += `
+${inner}
+`;
+    else
+      out += inner;
+  }
+  memo3.set(nodes, out);
+  return out;
+}
+function htmlToText(html, opts = {}) {
+  const out = [];
+  const paragraphs = opts.paragraphs === true;
+  let depth = 0;
+  let lastDepth = 0;
+  let pendingBreak = false;
+  for (const raw of toText(parseHtml(html, opts).children, { ...opts }).split(/\r?\n/)) {
+    const line = raw.replace(/[ \t\u00a0]+/g, " ").trim();
+    if (line === QUOTE_OPEN)
+      depth++;
+    else if (line === QUOTE_CLOSE)
+      depth = Math.max(0, depth - 1);
+    else if (line === PARA || line === BR)
+      pendingBreak = paragraphs && out.length > 0;
+    else {
+      const text2 = line.replace(MARKS, "").trim();
+      if (text2 === "")
+        continue;
+      if (pendingBreak)
+        out.push("> ".repeat(Math.min(depth, lastDepth)).trimEnd());
+      pendingBreak = false;
+      out.push(`${"> ".repeat(depth)}${text2}`);
+      lastDepth = depth;
+    }
+  }
+  return out.join("\n");
+}
+var CODE_HOLE = "";
+var block = (s) => `
+
+${s}
+
+`;
+function wrap(marker, inner) {
+  const m = /^(\s*)([\s\S]*?)(\s*)$/.exec(inner);
+  return m[2] === "" ? inner : `${m[1]}${marker}${m[2]}${marker}${m[3]}`;
+}
+function codeText(nodes) {
+  return nodes.map((n) => typeof n === "string" ? decodeEntities(n) : n.tag === "br" ? "\n" : codeText(n.children)).join("");
+}
+function inlineCode(text2) {
+  const longest = Math.max(0, ...[...text2.matchAll(/`+/g)].map((m) => m[0].length));
+  const fence = "`".repeat(longest + 1);
+  const pad = text2.startsWith("`") || text2.endsWith("`") ? " " : "";
+  return `${fence}${pad}${text2}${pad}${fence}`;
+}
+var tidyInner = (s) => s.replace(/\n{3,}/g, "\n\n").trim();
+function list(el, codes, o) {
+  const ordered = el.tag === "ol";
+  const startAttr = Number(attr(el.attrs, "start"));
+  const start = ordered && Number.isInteger(startAttr) && startAttr >= 0 ? startAttr : 1;
+  const items = el.children.filter((n) => typeof n !== "string" && n.tag === "li");
+  return items.map((li, i) => {
+    const marker = ordered ? `${start + i}. ` : "- ";
+    const lines = md(li.children, codes, o).replace(/\n{2,}/g, "\n").trim().split("\n");
+    return lines.map((l, n) => n === 0 ? marker + l : l === "" ? "" : " ".repeat(marker.length) + l).join("\n");
+  }).join("\n");
+}
+function rowsOf(el) {
+  const out = [];
+  for (const n of el.children) {
+    if (typeof n === "string")
+      continue;
+    if (n.tag === "tr")
+      out.push(n);
+    else if (n.tag === "thead" || n.tag === "tbody" || n.tag === "tfoot")
+      out.push(...rowsOf(n));
+  }
+  return out;
+}
+function table(el, codes, o) {
+  const cellsOf = (tr) => tr.children.filter((n) => typeof n !== "string" && (n.tag === "td" || n.tag === "th")).map((c) => tidyInner(md(c.children, codes, o)));
+  const raw = rowsOf(el).map(cellsOf).filter((cells) => cells.some((c) => c !== ""));
+  if (raw.length === 0)
+    return "";
+  if (raw.every((cells) => cells.filter((c) => c !== "").length <= 1)) {
+    return raw.map((cells) => cells.find((c) => c !== "") ?? "").join("\n\n");
+  }
+  if (raw.length === 1)
+    return raw[0].filter((c) => c !== "").join(" ");
+  const lines = raw.map((cells) => cells.map((c) => c.replace(/\s*\n\s*/g, " ").replace(/\|/g, "\\|")));
+  const width = Math.max(...lines.map((cells) => cells.length));
+  const row = (cells) => `| ${[...cells, ...Array(width - cells.length).fill("")].join(" | ")} |`;
+  const sep = `| ${Array.from({ length: width }, () => "---").join(" | ")} |`;
+  return [row(lines[0]), sep, ...lines.slice(1).map(row)].join("\n");
+}
+function md(nodes, codes, o) {
+  const memo3 = o.mdMemo ??= /* @__PURE__ */ new WeakMap();
+  const hit = memo3.get(nodes);
+  if (hit !== void 0)
+    return hit;
+  let out = "";
+  for (const n of nodes) {
+    if (typeof n === "string") {
+      out += visible(decodeEntities(n)).replace(/[\s\u00a0]+/g, " ");
+      continue;
+    }
+    const inner = () => md(n.children, codes, o);
+    if (o.element !== void 0 && n.tag !== "br") {
+      const hooked = o.element(n, "markdown", n.tag === "img" ? "" : inner());
+      if (hooked !== void 0) {
+        out += hooked;
+        continue;
+      }
+    }
+    switch (n.tag) {
+      case "br":
+        out += "\n";
+        break;
+      case "p":
+      case "div":
+        out += block(inner().trim());
+        break;
+      case "hr":
+        out += block("---");
+        break;
+      case "h1":
+      case "h2":
+      case "h3":
+      case "h4":
+      case "h5":
+      case "h6": {
+        const text2 = inner().replace(/\s+/g, " ").trim();
+        out += text2 === "" ? "" : block(`${"#".repeat(Number(n.tag[1]))} ${text2}`);
+        break;
+      }
+      case "b":
+      case "strong":
+        out += wrap("**", inner());
+        break;
+      case "i":
+      case "em":
+        out += wrap("_", inner());
+        break;
+      case "s":
+      case "strike":
+      case "del":
+        out += wrap("~~", inner());
+        break;
+      case "code":
+        out += inlineCode(codeText(n.children));
+        break;
+      case "pre": {
+        codes.push("```\n" + codeText(n.children).replace(/\n+$/, "") + "\n```");
+        out += block(`${CODE_HOLE}${codes.length - 1}${CODE_HOLE}`);
+        break;
+      }
+      case "a": {
+        const label = inner().trim().replace(/^\[([^\[\]]*)\]$/, "$1");
+        const href = safeHref(n.attrs);
+        if (href === void 0)
+          out += label;
+        else if (label === "" || label === href || LOOKS_LIKE_ADDRESS.test(label))
+          out += href;
+        else
+          out += `[${label}](${href.replace(/[()\s]/g, (c) => encodeURIComponent(c))})`;
+        break;
+      }
+      case "blockquote":
+        out += block(tidyInner(inner()).split("\n").map((l) => l === "" ? ">" : `> ${l}`).join("\n"));
+        break;
+      case "ul":
+      case "ol":
+        out += block(list(n, codes, o));
+        break;
+      case "table":
+        out += block(table(n, codes, o));
+        break;
+      case "img":
+        out += defaultImageText(n);
+        break;
+      default:
+        out += inner();
+    }
+  }
+  memo3.set(nodes, out);
+  return out;
+}
+function htmlToMarkdown(html, opts = {}) {
+  const codes = [];
+  const lines = md(parseHtml(html, opts).children, codes, { ...opts }).split("\n");
+  const tidy = [];
+  for (const raw of lines) {
+    const line = raw.trimEnd();
+    tidy.push(tidy.length === 0 || tidy[tidy.length - 1] === "" ? line.trimStart() : line);
+  }
+  return tidy.join("\n").replace(/\n{3,}/g, "\n\n").trim().replace(new RegExp(`${CODE_HOLE}(\\d+)${CODE_HOLE}`, "g"), (_w, i) => codes[Number(i)]);
+}
+
+// node_modules/@chrischall/mcp-utils/dist/rich/markdown.js
+var HOLE_OPEN = "\uE000";
+var HOLE_CLOSE = "\uE001";
+var RESERVED2 = /[-]/g;
+var SAFE_HREF = /^(https?:\/\/|mailto:)/i;
+function renderInline(src, o) {
+  const holes = [];
+  const hole = (html) => `${HOLE_OPEN}${holes.push(html) - 1}${HOLE_CLOSE}`;
+  const token = /(`+)([\s\S]*?[^`])\1(?!`)|\[([^\]\n]+)\]\(\s*([^\s()]+(?:\([^\s()]*\)[^\s()]*)*)\s*\)|\\([\\`*_{}[\]()#+\-.!~>|:])/g;
+  let s = src.replace(token, (whole, _ticks, code2, label, href, escaped) => {
+    if (code2 !== void 0)
+      return hole(`<code>${escapeHtml(code2.replace(/^ (.*[^ ].*) $/s, "$1"))}</code>`);
+    if (escaped !== void 0)
+      return hole(escapeHtml(escaped));
+    if (!SAFE_HREF.test(href))
+      return whole;
+    return hole(`<a href="${escapeHtml(href)}">${renderInline(label, o)}</a>`);
+  });
+  if (o.shortcode !== void 0) {
+    const render2 = o.shortcode;
+    s = s.replace(/:([a-z0-9_+-]+):/g, (whole, key) => {
+      const html = render2(key);
+      return html === void 0 ? whole : hole(html);
+    });
+  }
+  s = escapeHtml(s).replace(/\*\*(?=\S)([\s\S]*?\S)\*\*/g, "<strong>$1</strong>").replace(/(^|[^\w])__(?=\S)([\s\S]*?\S)__(?!\w)/g, "$1<strong>$2</strong>").replace(/~~(?=\S)([\s\S]*?\S)~~/g, "<s>$1</s>").replace(/(^|[^\w*])\*(?=[^\s*])([\s\S]*?[^\s*])\*(?![\w*])/g, "$1<em>$2</em>").replace(/(^|[^\w])_(?=[^\s_])([\s\S]*?[^\s_])_(?!\w)/g, "$1<em>$2</em>").replace(/\n/g, "<br>");
+  const fill = new RegExp(`${HOLE_OPEN}(\\d+)${HOLE_CLOSE}`, "g");
+  return s.replace(fill, (_w, n) => holes[Number(n)]);
+}
+var LIST_ITEM = /^( *)([-*+]|\d{1,9}[.)])[ \t]+(.*)$/;
+var HEADING = /^ {0,3}(#{1,6})[ \t]+(.+?)[ \t]*#*[ \t]*$/;
+var QUOTE = /^ {0,3}> ?(.*)$/;
+function renderList(list2, o) {
+  const tag = list2.ordered ? "ol" : "ul";
+  const start = list2.ordered && list2.start !== 1 ? ` start="${list2.start}"` : "";
+  const items = list2.items.map((i) => `<li>${renderInline(i.lines.join("\n"), o)}${i.children.map((c) => renderList(c, o)).join("")}</li>`);
+  return `<${tag}${start}>${items.join("")}</${tag}>`;
+}
+function parseList(lines, from, o) {
+  const roots = [];
+  const stack = [];
+  let i = from;
+  for (; i < lines.length; i++) {
+    const line = lines[i];
+    const m = LIST_ITEM.exec(line);
+    if (m === null) {
+      const last = stack.at(-1)?.items.at(-1);
+      if (line.trim() !== "" && /^\s/.test(line) && last !== void 0) {
+        last.lines.push(line.trim());
+        continue;
+      }
+      break;
+    }
+    const indent = m[1].length;
+    const ordered = /\d/.test(m[2]);
+    while (stack.length > 0 && indent < stack[stack.length - 1].indent)
+      stack.pop();
+    let top = stack.at(-1);
+    if (top !== void 0 && indent >= top.indent + 2 && top.items.length > 0) {
+      const nested = { indent, ordered, start: ordered ? Number.parseInt(m[2], 10) : 1, items: [] };
+      top.items[top.items.length - 1].children.push(nested);
+      stack.push(nested);
+      top = nested;
+    } else if (top === void 0 || top.ordered !== ordered) {
+      const fresh = { indent, ordered, start: ordered ? Number.parseInt(m[2], 10) : 1, items: [] };
+      if (top !== void 0 && stack.length > 1) {
+        stack.pop();
+        stack[stack.length - 1].items.at(-1).children.push(fresh);
+      } else {
+        roots.push(fresh);
+        stack.length = 0;
+      }
+      stack.push(fresh);
+      top = fresh;
+    }
+    top.items.push({ lines: [m[3]], children: [] });
+  }
+  return { html: roots.map((r) => renderList(r, o)).join(""), next: i };
+}
+function render(src, o, depth) {
+  const lines = src.split("\n");
+  const out = [];
+  let para = [];
+  const flush = () => {
+    if (para.length > 0)
+      out.push(`<p>${renderInline(para.join("\n"), o)}</p>`);
+    para = [];
+  };
+  for (let i = 0; i < lines.length; ) {
+    const line = lines[i];
+    const fence = /^ {0,3}(`{3,}|~{3,})/.exec(line);
+    if (fence !== null) {
+      flush();
+      const close = new RegExp(`^ {0,3}${fence[1][0] === "`" ? "`" : "~"}{${fence[1].length},}\\s*$`);
+      const code2 = [];
+      for (i++; i < lines.length && !close.test(lines[i]); i++)
+        code2.push(lines[i]);
+      i++;
+      out.push(`<pre><code>${escapeHtml(code2.join("\n"))}</code></pre>`);
+      continue;
+    }
+    if (LIST_ITEM.test(line)) {
+      flush();
+      const { html, next } = parseList(lines, i, o);
+      out.push(html);
+      i = next;
+      continue;
+    }
+    const heading = o.headings === true ? HEADING.exec(line) : null;
+    if (heading !== null) {
+      flush();
+      const level = heading[1].length;
+      out.push(`<h${level}>${renderInline(heading[2], o)}</h${level}>`);
+      i++;
+      continue;
+    }
+    if (o.quotes === true && depth < 20 && QUOTE.test(line)) {
+      flush();
+      const quoted = [];
+      for (; i < lines.length; i++) {
+        const q = QUOTE.exec(lines[i]);
+        if (q === null)
+          break;
+        quoted.push(q[1]);
+      }
+      out.push(`<blockquote>${render(quoted.join("\n"), o, depth + 1)}</blockquote>`);
+      continue;
+    }
+    if (line.trim() === "")
+      flush();
+    else
+      para.push(line);
+    i++;
+  }
+  flush();
+  return out.join("");
+}
+function renderMarkdown(src, opts = {}) {
+  return render(src.replace(/\r\n?/g, "\n").replace(RESERVED2, ""), opts, 0);
+}
+
 // src/feed.ts
 var MESSAGE_TYPES = /* @__PURE__ */ new Set(["feed_message", "workspace_email", "workspace_file_email"]);
 function str2(o, k) {
@@ -72917,9 +73435,6 @@ function itemAttachments(item) {
 function collapseWhitespace(s) {
   return s.replace(/\s+/g, " ").trim();
 }
-function collapseHorizontalWhitespace(s) {
-  return s.replace(/[^\S\n]+/g, " ").replace(/ ?\n ?/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
-}
 var PREVIEW_CHARS = 240;
 function summarizeMessage(item, feed, meId) {
   const data = obj(item, "data");
@@ -72951,22 +73466,24 @@ function summarizeMessage(item, feed, meId) {
   }
   return out;
 }
+var BODY_FORMATS = ["text", "markdown", "html"];
+function messageBody(data, format) {
+  const html = str2(data, "html_body");
+  const plain = str2(data, "plain_text");
+  if (format === "html") return html ?? plain ?? "";
+  if (format === "markdown") return html !== void 0 ? htmlToMarkdown(html) : plain ?? "";
+  return plain ?? (html !== void 0 ? htmlToText(html, { paragraphs: true }) : "");
+}
 function expandMessage(item, feed, meId, format) {
   const data = obj(item, "data");
   const summary = summarizeMessage(item, feed, meId);
   delete summary.preview;
-  const body = format === "html" ? str2(data, "html_body") ?? str2(data, "plain_text") ?? "" : str2(data, "plain_text") ?? htmlToText(str2(data, "html_body") ?? "");
   const delivery = arr(item, "email_tracking").map((t) => ({
     recipient: t.recipient_name,
     status: t.status,
     date: t.date ?? null
   }));
-  return { ...summary, body_format: format, body: body.trim(), delivery };
-}
-function htmlToText(html) {
-  return collapseHorizontalWhitespace(
-    html.replace(/<br\s*\/?>/gi, "\n").replace(/<\/(p|div|li|h\d|tr)>/gi, "\n").replace(/<[^>]+>/g, "").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'")
-  );
+  return { ...summary, body_format: format, body: messageBody(data, format).trim(), delivery };
 }
 function compactCalendarItem(c) {
   const opt = (k) => {
@@ -73249,7 +73766,7 @@ var ALLOWED_TAGS = /* @__PURE__ */ new Set([
 var HTML_TAG = /<\/?(p|br|div|a|b|i|u|strong|em|ul|ol|li|span|h[1-6]|table|tr|td|th|blockquote|pre|code|hr)\b[^>]*>/i;
 var ANY_TAG = /<(\/?)([a-zA-Z][a-zA-Z0-9]*)\b([^<>]*)>/g;
 var HREF_ATTR = /(?:^|\s)href\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'=<>`]+))/i;
-var SAFE_HREF = /^(?:https?:\/\/|mailto:)/i;
+var SAFE_HREF2 = /^(?:https?:\/\/|mailto:)/i;
 var escapeAngles = (s) => s.replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function sanitizeTag(closing, name, attrs) {
   const tag = name.toLowerCase();
@@ -73258,7 +73775,7 @@ function sanitizeTag(closing, name, attrs) {
   if (tag === "a") {
     const m = HREF_ATTR.exec(attrs);
     const href = (m?.[1] ?? m?.[2] ?? m?.[3] ?? "").trim();
-    if (SAFE_HREF.test(href)) return `<a href="${href.replace(/"/g, "&quot;")}">`;
+    if (SAFE_HREF2.test(href)) return `<a href="${href.replace(/"/g, "&quot;")}">`;
   }
   return `<${tag}>`;
 }
@@ -73272,9 +73789,12 @@ function sanitizeHtml(html) {
   }
   return out + escapeAngles(html.slice(last));
 }
-function bodyToHtml(body) {
-  if (HTML_TAG.test(body)) return sanitizeHtml(body);
-  return body.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/\r?\n/g, "<br>");
+var WRITE_FORMATS = ["text", "markdown", "html"];
+function bodyToHtml(body, format) {
+  const as = format ?? (HTML_TAG.test(body) ? "html" : "text");
+  if (as === "markdown") return renderMarkdown(body, { headings: true, quotes: true });
+  if (as === "html") return sanitizeHtml(body);
+  return escapeHtml(body).replace(/\r?\n/g, "<br>");
 }
 async function sendMessage(args, ctx) {
   const client = await getActiveClient(args.origin);
@@ -73303,7 +73823,7 @@ async function sendMessage(args, ctx) {
   const taskData = {
     ws_id: args.workspace_id,
     subject,
-    html_body: bodyToHtml(args.body),
+    html_body: bodyToHtml(args.body, args.format),
     force: false,
     general_files: [],
     image_files: [],
@@ -73411,11 +73931,13 @@ function registerMessageTools(server) {
   server.registerTool(
     "get_message",
     {
-      description: "Read one message in full: body (plain text by default, or the original HTML), sender, recipients, attachments and per-recipient delivery status.",
+      description: "Read one message in full: body (HoneyBook's plain text by default, Markdown, or the original HTML), sender, recipients, attachments and per-recipient delivery status.",
       inputSchema: external_exports.object({
         workspace_id: external_exports.string().describe(WORKSPACE_DESC),
         message_id: external_exports.string().describe("The message _id from list_messages."),
-        format: external_exports.enum(["text", "html"]).optional().describe('Body format. Default "text".'),
+        format: external_exports.enum(BODY_FORMATS).optional().describe(
+          `Body format: "text" (default, HoneyBook's plain text), "markdown" (keeps lists, paragraphs and links with their address, which the plain text loses; tracking pixels and hidden text dropped) or "html" (the original, raw).`
+        ),
         origin: schemaOrigin.describe(ORIGIN_DESC)
       }),
       annotations: { readOnlyHint: true, openWorldHint: true },
@@ -73429,7 +73951,12 @@ function registerMessageTools(server) {
       description: 'Send a message to the vendor (and the other members of the workspace) through the HoneyBook portal, exactly as the Activity tab composer does. HoneyBook emails it to every recipient. Pass reply_to_message_id to reply in-thread (the subject is inherited). Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken, and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). If HoneyBook has not finished sending within about a minute the result has status "pending" and a task_id; if it did not answer the send request at all the status is "unknown". Either way the message may still be delivered, so check list_messages before resending.',
       inputSchema: external_exports.object({
         workspace_id: external_exports.string().describe(WORKSPACE_DESC),
-        body: external_exports.string().describe("Message text. Plain text is sent as-is (line breaks preserved). Simple HTML formatting (p, br, b, i, a href, lists, tables) is kept; other tags are shown as text and attributes other than an http(s)/mailto link are dropped."),
+        body: external_exports.string().describe(
+          "Message text, written as `format` says. With no format, plain text is sent as-is (line breaks preserved) and a body using HTML tags is read as HTML."
+        ),
+        format: external_exports.enum(WRITE_FORMATS).optional().describe(
+          '"text" (sent as typed), "markdown" (**bold**, _italic_, lists, [links](https://\u2026), `code`, # headings, > quotes \u2014 sent as formatted HTML, and cheaper to write than HTML) or "html" (simple formatting kept: p, br, b, i, a href, lists, tables; other tags shown as text, attributes other than an http(s)/mailto link dropped). Omitted: "html" if the body uses an HTML tag, else "text".'
+        ),
         subject: external_exports.string().optional().describe("Required for a new message; optional on a reply."),
         reply_to_message_id: external_exports.string().optional().describe("A message _id from list_messages to reply to."),
         origin: schemaOrigin.describe(ORIGIN_DESC),
@@ -73818,13 +74345,13 @@ async function listAllProjects() {
   }
   return rows;
 }
-async function loadProjectDirectory(list = listAllProjects, timeoutMs = PROJECT_LIST_TIMEOUT_MS) {
+async function loadProjectDirectory(list2 = listAllProjects, timeoutMs = PROJECT_LIST_TIMEOUT_MS) {
   let timer;
   const deadline = new Promise((resolve2) => {
     timer = setTimeout(() => resolve2(null), timeoutMs);
     timer.unref();
   });
-  const listing = Promise.resolve().then(list).then(buildProjectDirectory).catch(() => null);
+  const listing = Promise.resolve().then(list2).then(buildProjectDirectory).catch(() => null);
   try {
     return await Promise.race([listing, deadline]);
   } finally {

package/dist/feed.js

@@ -1,3 +1,4 @@
+import { htmlToMarkdown, htmlToText } from '@chrischall/mcp-utils/rich';
 import { apiPath } from './client.js';
 import { VENDOR_SECRET_KEYS, scrubVendorSecrets } from './vendor-secrets.js';
 /**
@@ -72,14 +73,6 @@ export function itemAttachments(item) {
 export function collapseWhitespace(s) {
     return s.replace(/\s+/g, ' ').trim();
 }
-/** Collapse runs of spaces but keep paragraph breaks (at most one blank line). */
-export function collapseHorizontalWhitespace(s) {
-    return s
-        .replace(/[^\S\n]+/g, ' ')
-        .replace(/ ?\n ?/g, '\n')
-        .replace(/\n{3,}/g, '\n\n')
-        .trim();
-}
 const PREVIEW_CHARS = 240;
 /** Compact card for a message item. Bodies are deliberately left out. */
 export function summarizeMessage(item, feed, meId) {
@@ -120,35 +113,36 @@ export function summarizeMessage(item, feed, meId) {
     }
     return out;
 }
+/** How get_message returns a body. */
+export const BODY_FORMATS = ['text', 'markdown', 'html'];
+/**
+ * A message body in the format asked for. "text" is HoneyBook's own
+ * `plain_text`, and "html" the raw `html_body`, as they always were.
+ * "markdown" reads the HTML (lists, paragraphs and links with their address
+ * survive, which `plain_text` loses; tracking pixels, styles and hidden text
+ * go). `str` folds '' to undefined, so an empty field falls through to the
+ * other rather than returning an empty body next to a real one.
+ */
+function messageBody(data, format) {
+    const html = str(data, 'html_body');
+    const plain = str(data, 'plain_text');
+    if (format === 'html')
+        return html ?? plain ?? '';
+    if (format === 'markdown')
+        return html !== undefined ? htmlToMarkdown(html) : (plain ?? '');
+    return plain ?? (html !== undefined ? htmlToText(html, { paragraphs: true }) : '');
+}
 /** Everything a person needs to read one message. */
 export function expandMessage(item, feed, meId, format) {
     const data = obj(item, 'data');
     const summary = summarizeMessage(item, feed, meId);
     delete summary.preview;
-    // `str` folds '' to undefined, so an empty plain_text falls through to the
-    // html_body rather than returning an empty body next to a real one.
-    const body = format === 'html'
-        ? (str(data, 'html_body') ?? str(data, 'plain_text') ?? '')
-        : (str(data, 'plain_text') ?? htmlToText(str(data, 'html_body') ?? ''));
     const delivery = arr(item, 'email_tracking').map((t) => ({
         recipient: t.recipient_name,
         status: t.status,
         date: t.date ?? null,
     }));
-    return { ...summary, body_format: format, body: body.trim(), delivery };
-}
-/** Last-resort text for an item whose `plain_text` is missing. Paragraph breaks survive. */
-export function htmlToText(html) {
-    return collapseHorizontalWhitespace(html
-        .replace(/<br\s*\/?>/gi, '\n')
-        .replace(/<\/(p|div|li|h\d|tr)>/gi, '\n')
-        .replace(/<[^>]+>/g, '')
-        .replace(/&nbsp;/g, ' ')
-        .replace(/&amp;/g, '&')
-        .replace(/&lt;/g, '<')
-        .replace(/&gt;/g, '>')
-        .replace(/&quot;/g, '"')
-        .replace(/&#39;/g, "'"));
+    return { ...summary, body_format: format, body: messageBody(data, format).trim(), delivery };
 }
 /**
  * A calendar item as the feed embeds it, minus the vendor's host link

package/dist/tools/messages.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 import { confirmationFromEnv, confirmTokenParam, minifiedResult, requireConfirmationWithFallback, schemaOrigin, } from '@chrischall/mcp-utils';
+import { escapeHtml, renderMarkdown } from '@chrischall/mcp-utils/rich';
 import { apiPath, getActiveClient } from '../client.js';
-import { fetchWorkspaceFeed, isMessageItem, itemDate, summarizeMessage, summarizeActivity, expandMessage, } from '../feed.js';
+import { fetchWorkspaceFeed, isMessageItem, itemDate, summarizeMessage, summarizeActivity, expandMessage, BODY_FORMATS, } from '../feed.js';
 import { runClientPendingTask, isPendingTaskTimeoutError, isPendingTaskCreateTimeoutError, } from '../pending-tasks.js';
 import { moneyMeta } from './hints.js';
 export const FEED_KINDS = ['messages', 'activity', 'all'];
@@ -65,10 +66,12 @@ export async function getMessage(args) {
     return minifiedResult(expandMessage(item, feed, client.scope.userId, args.format ?? 'text'));
 }
 /**
- * The composer sends HTML. Plain text is escaped and line breaks become
- * `<br>`; a body that uses a real HTML tag is treated as authored HTML. The
- * tag list is an allowlist on purpose: "<Ivy>" in a sentence is prose, not
- * markup.
+ * The composer sends HTML. A body is written as `format` says: "text" is
+ * escaped with line breaks as `<br>`; "markdown" is rendered (raw HTML in it
+ * escaped, links http(s)/mailto only); "html" is sanitised. With no format, a
+ * body that uses a real HTML tag is treated as authored HTML and anything else
+ * as text. The tag list is an allowlist on purpose: "<Ivy>" in a sentence is
+ * prose, not markup.
  *
  * Authored HTML is SANITIZED to that allowlist, not passed through
  * (fleet-audit#506): HoneyBook emails it under the user's name, and a body the
@@ -77,6 +80,10 @@ export async function getMessage(args) {
  * text; allowlisted tags lose every attribute except an http(s)/mailto `href`
  * on `<a>`. `<img>` is deliberately not allowlisted — a remote image in an
  * email is a read receipt.
+ *
+ * This stays local rather than /rich's `sanitiseHtml`: that is a READ
+ * sanitiser and removes unknown tags (and everything after an unclosed
+ * `<script`), which on a write would silently drop the caller's own words.
  */
 const ALLOWED_TAGS = new Set([
     'p', 'br', 'div', 'a', 'b', 'i', 'u', 'strong', 'em', 'ul', 'ol', 'li', 'span',
@@ -111,14 +118,14 @@ export function sanitizeHtml(html) {
     }
     return out + escapeAngles(html.slice(last));
 }
-export function bodyToHtml(body) {
-    if (HTML_TAG.test(body))
+export const WRITE_FORMATS = ['text', 'markdown', 'html'];
+export function bodyToHtml(body, format) {
+    const as = format ?? (HTML_TAG.test(body) ? 'html' : 'text');
+    if (as === 'markdown')
+        return renderMarkdown(body, { headings: true, quotes: true });
+    if (as === 'html')
         return sanitizeHtml(body);
-    return body
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/\r?\n/g, '<br>');
+    return escapeHtml(body).replace(/\r?\n/g, '<br>');
 }
 export async function sendMessage(args, ctx) {
     const client = await getActiveClient(args.origin);
@@ -146,7 +153,7 @@ export async function sendMessage(args, ctx) {
     const taskData = {
         ws_id: args.workspace_id,
         subject,
-        html_body: bodyToHtml(args.body),
+        html_body: bodyToHtml(args.body, args.format),
         force: false,
         general_files: [],
         image_files: [],
@@ -262,12 +269,16 @@ export function registerMessageTools(server) {
         _meta: moneyMeta('whats-new', { aliases: ['messages', 'emails', 'vendor said', 'inbox'] }),
     }, listMessages);
     server.registerTool('get_message', {
-        description: 'Read one message in full: body (plain text by default, or the original HTML), sender, recipients, ' +
+        description: 'Read one message in full: body (HoneyBook\'s plain text by default, Markdown, or the original HTML), sender, recipients, ' +
             'attachments and per-recipient delivery status.',
         inputSchema: z.object({
             workspace_id: z.string().describe(WORKSPACE_DESC),
             message_id: z.string().describe('The message _id from list_messages.'),
-            format: z.enum(['text', 'html']).optional().describe('Body format. Default "text".'),
+            format: z
+                .enum(BODY_FORMATS)
+                .optional()
+                .describe('Body format: "text" (default, HoneyBook\'s plain text), "markdown" (keeps lists, paragraphs and links ' +
+                'with their address, which the plain text loses; tracking pixels and hidden text dropped) or "html" (the original, raw).'),
             origin: schemaOrigin.describe(ORIGIN_DESC),
         }),
         annotations: { readOnlyHint: true, openWorldHint: true },
@@ -285,7 +296,15 @@ export function registerMessageTools(server) {
             workspace_id: z.string().describe(WORKSPACE_DESC),
             body: z
                 .string()
-                .describe('Message text. Plain text is sent as-is (line breaks preserved). Simple HTML formatting (p, br, b, i, a href, lists, tables) is kept; other tags are shown as text and attributes other than an http(s)/mailto link are dropped.'),
+                .describe('Message text, written as `format` says. With no format, plain text is sent as-is (line breaks preserved) ' +
+                'and a body using HTML tags is read as HTML.'),
+            format: z
+                .enum(WRITE_FORMATS)
+                .optional()
+                .describe('"text" (sent as typed), "markdown" (**bold**, _italic_, lists, [links](https://…), `code`, # headings, ' +
+                '> quotes — sent as formatted HTML, and cheaper to write than HTML) or "html" (simple formatting kept: ' +
+                'p, br, b, i, a href, lists, tables; other tags shown as text, attributes other than an ' +
+                'http(s)/mailto link dropped). Omitted: "html" if the body uses an HTML tag, else "text".'),
             subject: z.string().optional().describe('Required for a new message; optional on a reply.'),
             reply_to_message_id: z
                 .string()

package/dist/version.js

@@ -4,4 +4,4 @@
 // package.json drift. Importing these instead of package.json keeps the
 // whole manifest — npm scripts included — out of dist/bundle.js.
 export const SERVER_NAME = 'honeybook-mcp';
-export const VERSION = '1.3.1'; // x-release-please-version
+export const VERSION = '1.4.0'; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "honeybook-mcp",
-  "version": "1.3.1",
+  "version": "1.4.0",
   "mcpName": "io.github.chrischall/honeybook-mcp",
   "description": "HoneyBook client-portal MCP server for Claude",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -44,7 +44,7 @@
     "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.test.json"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^3.1.0",
+    "@chrischall/mcp-utils": "^3.8.0",
     "@fetchproxy/bootstrap": "^3.6.2",
     "@fetchproxy/server": "^3.6.2",
     "@modelcontextprotocol/server": "^2.3.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/honeybook-mcp",
     "source": "github"
   },
-  "version": "1.3.1",
+  "version": "1.4.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "honeybook-mcp",
-      "version": "1.3.1",
+      "version": "1.4.0",
       "transport": {
         "type": "stdio"
       },

package/skills/honeybook/SKILL.md

@@ -22,8 +22,8 @@ MCP server for HoneyBook's client portal — contracts, invoices, questionnaires
 - `list_projects` — Your projects (HoneyBook "events") with a vendor, each with the `workspace_id` the tools below take
 - `get_project(project_id, view?)` — Project details: date, time, location, guests, custom fields, people (name/email/phone/role)
 - `list_messages` — Messages in a workspace (`kind=activity` for the activity log, `kind=all` for both): compact cards, newest first; never marks anything seen
-- `get_message` — One message in full (`format=text` default, or `html`) with attachments and delivery status
-- `send_message` — Send a new message (`subject` + `body`) or reply (`reply_to_message_id`, subject inherited) through the portal; asks the user to confirm first
+- `get_message` — One message in full (`format=text` default, `markdown` to keep lists and links, or the raw `html`) with attachments and delivery status
+- `send_message` — Send a new message (`subject` + `body`) or reply (`reply_to_message_id`, subject inherited) through the portal; `format=markdown` sends a Markdown body as formatted HTML; asks the user to confirm first
 - `mark_messages_seen` — Mark feed items seen, the way opening the Activity tab does
 - `list_meetings` — Meetings the vendor scheduled (consultations, Zoom calls): time, join link, password; rescheduled meetings show their latest time
 - `list_tasks` — Tasks assigned to you with today/this-week/overdue counts and task groups