webcake-storefront-mcp 1.31.8 → 1.31.9

package/dist/api.js

@@ -1,4 +1,7 @@
 const DEFAULT_TIMEOUT = 15000;
+/** Stamped on every page this MCP server creates (backend column `pages.by_ai`),
+ *  so the builder can flag AI-authored pages. Mirrors the landing-page convention. */
+export const BY_AI_MARKER = "mcp";
 export class WebcakeCmsApi {
     baseUrl;
     token;
@@ -149,13 +152,17 @@ export class WebcakeCmsApi {
     }
     /** Create a page. The backend creates the page AND its source in one call, so `source`
      *  is REQUIRED and must be a JSON string (stringified here if an object is passed).
-     *  `slug`/`is_homepage` are NOT applied at create — set them afterwards via updatePage. */
+     *  `slug`/`is_homepage` are NOT applied at create — set them afterwards via updatePage.
+     *  Every page born here is AI-authored, so we stamp `by_ai` (persisted to `pages.by_ai`)
+     *  and the builder shows an "AI" tag next to the page name. */
     createPage(params, opts) {
         const body = { ...params };
         if (body.source != null && typeof body.source !== "string")
             body.source = JSON.stringify(body.source);
         if (body.source == null)
             body.source = JSON.stringify({ sections: [] });
+        if (body.by_ai == null)
+            body.by_ai = BY_AI_MARKER;
         return this.request("POST", `/api/v1/site/${this.siteId}/page`, { body, timeout: opts?.timeout });
     }
     updatePage(pageId, params) {

package/dist/builder/guide.js

@@ -301,6 +301,14 @@ Rule of thumb: if the page shows products, a cart, customer/order data, or blog
 set \`type\` accordingly so the binding source is turned on. A binding target like
 \`product::product_price\` REQUIRES its page to be the matching type.
 
+### ONE page per singleton type — only \`custom\` is unlimited
+A site has exactly ONE homepage (\`main\`), ONE \`error\` page and ONE \`maintain\` page; a second
+one only shadows the first, so \`create_page\` / \`build_page\` / \`start_page_draft\` REFUSE it and
+hand you the existing \`page_id\` — edit that page (replace_page_source / add_section /
+update_page) instead of creating another. \`store\`/\`member\`/\`blog\` may have several pages
+(cart + checkout + collections…, login + register…) but each SLUG is unique per site, so those
+are refused on a duplicate slug. \`custom\` pages are unlimited as long as their slugs differ.
+
 ## Build the WHOLE storefront — every page to the SAME standard (NOT just the home page)
 A shop is multi-page. Build EACH page to a real e-commerce standard with the same palette,
 spacing and header/footer — never leave the home page rich and the rest as bare stubs.

package/dist/changelog.json

@@ -1,4 +1,11 @@
 [
+  {
+    "v": "1.31.9",
+    "d": "07/09/2026",
+    "type": "Added",
+    "en": "Pages created by create_page, build_page, and commit_page_draft are now stamped with by_ai: \"mcp\" (persisted to the backend pages.by_ai column) so…",
+    "vi": "Các trang được tạo bởi create_page, build_page và commit_page_draft nay được đánh dấu by_ai: \"mcp\" (lưu vào cột pages.by_ai ở backend) để builder có…"
+  },
   {
     "v": "1.31.8",
     "d": "29/06/2026",
@@ -33,12 +40,5 @@
     "type": "Added",
     "en": "The guide returned by get_http_function and get_site_custom_code now includes a verified end-to-end \"Custom data TABLES (collections)\" section…",
     "vi": "Hướng dẫn trả về bởi get_http_function và get_site_custom_code nay bổ sung phần \"Custom data TABLES (collections)\" đã được xác minh thực tế, ghi lại…"
-  },
-  {
-    "v": "1.31.3",
-    "d": "26/06/2026",
-    "type": "Added",
-    "en": "New update_collection_columns tool reads the current collection schema and PATCHes it with the system columns plus the provided custom columns,…",
-    "vi": "Tool mới update_collection_columns đọc schema hiện tại của collection rồi PATCH lại với các cột hệ thống cộng các cột tùy chỉnh được cung cấp, cho…"
   }
 ]

package/dist/tools/builder.js

@@ -38,6 +38,59 @@ export const PAGE_TYPE_FLAG = {
     error: "use_error", maintain: "use_maintain",
 };
 export const PAGE_KINDS = ["main", "store", "member", "blog", "custom", "error", "maintain"];
+/** Page kinds a site only ever has ONE of. The homepage is `main`, and the storefront
+ *  resolves exactly one `error` / `maintain` page — a second one just shadows the first,
+ *  so creating it is always a mistake. `store` / `member` / `blog` are NOT here: a site
+ *  legitimately has several of each (cart + checkout + collections…, login + register…),
+ *  they are kept unique by SLUG instead. `custom` is unlimited. */
+export const SINGLETON_PAGE_KINDS = ["main", "error", "maintain"];
+function briefPage(p) {
+    return { id: p.id, name: p.name, slug: p.slug ?? null, type: p.type ?? null, is_homepage: !!p.is_homepage };
+}
+/** Guard run before CREATING a page, so the agent edits the existing page instead of
+ *  piling up duplicates the storefront will never route to. Two rules:
+ *    1. singleton kinds (main/error/maintain, incl. `is_homepage`) — one per site;
+ *    2. every other kind — the slug must be free (the backend has a (site_id, slug)
+ *       unique index, so a duplicate slug fails there anyway, just with a vaguer error).
+ *  `custom` pages stay unlimited as long as their slugs differ.
+ *  Returns null when the page may be created. A failed lookup never blocks the create. */
+export async function checkPageCreateConflict(api, { kind, slug, is_homepage }) {
+    let pages;
+    try {
+        const res = await api.listPages();
+        pages = (res && res.data) || res || [];
+    }
+    catch {
+        return null;
+    }
+    if (!Array.isArray(pages))
+        return null;
+    const singleton = is_homepage ? "main" : kind;
+    if (singleton && SINGLETON_PAGE_KINDS.includes(singleton)) {
+        const typeNum = PAGE_TYPE_NUM[singleton];
+        const found = pages.find((p) => (singleton === "main" ? !!p.is_homepage || p.type === typeNum : p.type === typeNum));
+        if (found) {
+            return {
+                error: `This site already has a '${singleton}' page ("${found.name}"), and only one is allowed — ` +
+                    `only 'custom' pages can be created repeatedly. Edit page ${found.id} instead ` +
+                    `(replace_page_source / add_section / update_page), or create a 'custom' page.`,
+                existing_page: briefPage(found),
+            };
+        }
+    }
+    const cleanSlug = normalizeSlug(slug ?? undefined);
+    if (cleanSlug) {
+        const found = pages.find((p) => p.slug === cleanSlug);
+        if (found) {
+            return {
+                error: `This site already has a page at slug "${cleanSlug}" ("${found.name}"). Slugs are unique per site — ` +
+                    `edit page ${found.id} instead (replace_page_source / add_section / update_page), or pick another slug.`,
+                existing_page: briefPage(found),
+            };
+        }
+    }
+    return null;
+}
 /** Build the page.settings.seo block from simple inputs (the real shape; tokens like
  *  {{name_page}} / {{name_site}} are resolved by the storefront). */
 export function buildPageSeo(seo = {}) {
@@ -118,7 +171,8 @@ Example children: [{ "type":"container", "children":[{"type":"image","opts":{...
     }));
     server.tool("build_page", `Create a brand-new page AND set its full content source in one step.
 Two-step safety: call with dry_run=true (default) to validate and preview, then dry_run=false to actually create + save.
-The source must be { sections: [...] } — build sections with new_section. Validation errors block the real save.`, {
+The source must be { sections: [...] } — build sections with new_section. Validation errors block the real save.
+ONE page per site for type main (homepage) / error / maintain, and slugs are unique per site: a duplicate is refused (dry_run reports blocked:true) and you get the existing page_id to edit instead. Only 'custom' pages can be created over and over.`, {
         name: z.string().describe("Page name"),
         slug: z.string().describe("URL slug WITHOUT a leading slash, e.g. 'about', 'collections', 'cart'. A leading '/' is stripped automatically (the storefront matches the bare path segment, so '/cart' would 404). Store pages MUST use the conventional slugs: category='collections', product detail='products', cart='cart', checkout='checkout', thank-you='complete'. The homepage needs no slug (pass is_homepage:true)."),
         source: z.any().describe("Full page source { sections: [...] } (object or JSON string)"),
@@ -148,18 +202,27 @@ The source must be { sections: [...] } — build sections with new_section. Vali
         // Strip a leading "/" — the storefront matches `page.slug == "<segment>"` (no slash),
         // so "/cart" would 404. Homepage (blank/"/") → undefined (matched by is_nil(slug)).
         const cleanSlug = normalizeSlug(slug);
+        // Only 'custom' pages may be created over and over; singleton kinds and taken
+        // slugs must be edited in place instead of duplicated.
+        const conflict = await checkPageCreateConflict(api, { kind, slug: cleanSlug, is_homepage });
         if (dry_run) {
             return {
                 dry_run: true,
+                ...(conflict ? { blocked: true, conflict } : {}),
                 validation,
                 request: { name, slug: cleanSlug ?? null, type: kind ?? null, page_type_num: typeNum ?? null, is_homepage, sections: (parsed && parsed.sections || []).length },
                 will_enable_feature: requiredFlag ?? null,
                 renders_at_breakpoints: ["bp1", "bp2", "bp3", "bp4"],
-                hint: validation.valid
-                    ? `Looks valid. On save, every node's runtime is expanded into the bp1..bp4 keys the storefront renders. Call again with dry_run=false to create and save the page.${requiredFlag ? ` Will also enable site.settings.${requiredFlag} so its data bindings resolve.` : ""}`
-                    : "Fix the errors above before saving.",
+                hint: conflict
+                    ? conflict.error
+                    : validation.valid
+                        ? `Looks valid. On save, every node's runtime is expanded into the bp1..bp4 keys the storefront renders. Call again with dry_run=false to create and save the page.${requiredFlag ? ` Will also enable site.settings.${requiredFlag} so its data bindings resolve.` : ""}`
+                        : "Fix the errors above before saving.",
             };
         }
+        if (conflict) {
+            return { error: conflict.error, existing_page: conflict.existing_page };
+        }
         if (!validation.valid) {
             return { error: "Validation failed — not saving.", validation };
         }

package/dist/tools/page-draft.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { PAGE_TYPE_NUM, PAGE_TYPE_FLAG, PAGE_KINDS, buildPageSeo, normalizeSlug } from "./builder.js";
+import { PAGE_TYPE_NUM, PAGE_TYPE_FLAG, PAGE_KINDS, buildPageSeo, normalizeSlug, checkPageCreateConflict } from "./builder.js";
 import { validatePage, finalizeForRender, reassignIds } from "../builder/page.js";
 import { createDraft, getDraft, setDraft, appendDraftSection, listDrafts, delDraft, } from "../persistence/draft-cache.js";
 // Friendly result when a draft is gone (disposable cache: expired ~2h or restart).
@@ -25,7 +25,8 @@ function newPageId(res) {
  * commit, so re-running commit_page_draft continues from where it stopped.
  */
 export function registerPageDraftTools(server, api, handle) {
-    server.tool("start_page_draft", `Start a page draft (no network). Build a multi-section page safely: cache each section with add_draft_section, then commit_page_draft persists it to the backend INCREMENTALLY (resumable on timeout). Use this instead of build_page for large/multi-section pages. The draft cache is DISPOSABLE (Redis on the remote server when REDIS_URL is set, in-memory otherwise; sliding ~2h TTL) — if a draft is ever lost, just re-send the sections, never a failure.`, {
+    server.tool("start_page_draft", `Start a page draft (no network). Build a multi-section page safely: cache each section with add_draft_section, then commit_page_draft persists it to the backend INCREMENTALLY (resumable on timeout). Use this instead of build_page for large/multi-section pages. The draft cache is DISPOSABLE (Redis on the remote server when REDIS_URL is set, in-memory otherwise; sliding ~2h TTL) — if a draft is ever lost, just re-send the sections, never a failure.
+ONE page per site for type main (homepage) / error / maintain, and slugs are unique per site: the draft is refused up-front with the existing page_id to edit instead. Only 'custom' pages can be created over and over.`, {
         name: z.string().describe("Page name"),
         slug: z.string().describe("URL slug WITHOUT a leading slash, e.g. 'about', 'collections', 'cart'. A leading '/' is stripped automatically (the storefront matches the bare path segment, so '/cart' would 404). Store pages MUST use: category='collections', product='products', cart='cart', checkout='checkout', thank-you='complete'. Homepage needs no slug (is_homepage:true)."),
         type: z
@@ -44,6 +45,11 @@ export function registerPageDraftTools(server, api, handle) {
             .optional()
             .describe("SEO for this page → settings.seo (applied on commit)."),
     }, ({ name, slug, type, is_homepage, seo }) => handle(async () => {
+        // Fail before the agent builds any sections: only 'custom' pages may be created
+        // repeatedly — singleton kinds and taken slugs must be edited in place.
+        const conflict = await checkPageCreateConflict(api, { kind: type, slug, is_homepage });
+        if (conflict)
+            return { error: conflict.error, existing_page: conflict.existing_page };
         const draft = await createDraft(api.siteId, { name, slug, type, is_homepage, seo });
         return {
             draft_id: draft.draft_id,
@@ -101,8 +107,16 @@ RESUMABLE: if a request fails mid-commit, the draft keeps its page_id + committe
         const full = { sections: draft.sections };
         const validation = validatePage(full);
         const total = draft.sections.length;
+        // Re-check on commit — a draft can sit for hours, and the page may have been
+        // created meanwhile. Skipped when resuming: the page already exists.
+        const conflict = draft.page_id
+            ? null
+            : await checkPageCreateConflict(api, { kind: draft.meta.type, slug: draft.meta.slug, is_homepage: draft.meta.is_homepage });
         if (dry_run) {
-            return { dry_run: true, draft_id, total_sections: total, validation, stats: validation.stats };
+            return { dry_run: true, draft_id, total_sections: total, ...(conflict ? { blocked: true, conflict } : {}), validation, stats: validation.stats };
+        }
+        if (conflict) {
+            return { error: conflict.error, existing_page: conflict.existing_page };
         }
         if (!validation.valid) {
             return { error: "Validation failed — not committing.", validation };

package/dist/tools/pages.js

@@ -3,7 +3,7 @@ import { CUSTOM_CODE_GUIDE } from "../guides.js";
 import { getConfirmMode } from "./context.js";
 import { normalizeEvents } from "../builder/events.js";
 import { normalizeBindings } from "../builder/bindings.js";
-import { PAGE_TYPE_NUM, PAGE_KINDS, buildPageSeo, normalizeSlug } from "./builder.js";
+import { PAGE_TYPE_NUM, PAGE_KINDS, buildPageSeo, normalizeSlug, checkPageCreateConflict } from "./builder.js";
 /**
  * Page source utilities.
  *
@@ -294,10 +294,10 @@ Examples:
         const results = searchElements(source, filters);
         return { page_id, matched: results.length, elements: results };
     }));
-    server.tool("create_page", "Create a new (empty) page. For a page with content use build_page instead. type is a KIND (main/store/member/blog/custom/error/maintain) mapped to the numeric backend type; pass seo so it doesn't publish with an empty title.", {
+    server.tool("create_page", "Create a new (empty) page. For a page with content use build_page instead. type is a KIND (main/store/member/blog/custom/error/maintain) mapped to the numeric backend type; pass seo so it doesn't publish with an empty title. ONE page per site for main (homepage) / error / maintain, and slugs are unique per site — a duplicate is refused with the existing page_id to edit instead; only 'custom' pages can be created over and over.", {
         name: z.string().describe("Page name"),
         slug: z.string().describe("URL slug WITHOUT a leading slash, e.g. 'about', 'collections', 'cart'. A leading '/' is stripped automatically (the storefront matches the bare path segment, so '/cart' would 404). Homepage needs no slug (pass is_homepage:true)."),
-        type: z.enum(PAGE_KINDS).optional().describe("Page kind (main/store/member/blog/custom/error/maintain). store/member/blog need their data-source flag enabled — prefer build_page which auto-enables it."),
+        type: z.enum(PAGE_KINDS).optional().describe("Page kind (main/store/member/blog/custom/error/maintain). store/member/blog need their data-source flag enabled — prefer build_page which auto-enables it. main/error/maintain are one-per-site; use 'custom' for extra pages."),
         is_homepage: z.boolean().default(false).describe("Set as homepage"),
         seo: z
             .object({ title: z.string().optional(), description: z.string().optional(), keyword: z.string().optional(), favicon: z.string().optional(), thumbnail: z.string().optional() })
@@ -306,6 +306,11 @@ Examples:
     }, ({ name, slug, type, is_homepage, seo }) => handle(async () => {
         const cleanSlug = normalizeSlug(slug);
         const typeNum = type ? PAGE_TYPE_NUM[type] : undefined;
+        // Only 'custom' pages may be created repeatedly — singleton kinds (homepage/error/
+        // maintain) and taken slugs must be edited in place instead of duplicated.
+        const conflict = await checkPageCreateConflict(api, { kind: type, slug: cleanSlug, is_homepage });
+        if (conflict)
+            return { error: conflict.error, existing_page: conflict.existing_page };
         const created = await api.createPage({ name, ...(typeNum != null ? { type: typeNum } : {}) });
         invalidatePageCache();
         const pageId = (created && (created.id || created.data?.id || created.page?.id)) || null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "webcake-storefront-mcp",
-  "version": "1.31.8",
+  "version": "1.31.9",
   "description": "MCP server for the WebCake/StoreCake storefront builder — page CRUD, page authoring, products, orders, and more",
   "mcpName": "io.github.vuluu2k/webcake-storefront-mcp",
   "license": "MIT",
@@ -32,7 +32,7 @@
     "smoke": "node dist/smoke.js",
     "prepare": "npm run build",
     "prepublishOnly": "npm run build && npm run smoke",
-    "test": "node --test test/"
+    "test": "node --test \"test/*.test.mjs\""
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",