@awesomate/hosting-mcp 0.45.0 → 0.46.0

package/dist/index.js

@@ -39984,6 +39984,9 @@ function hubGet(config3, path) {
 function hubPost(config3, path, jsonBody = {}, opts = {}) {
   return hubRequest(config3, "POST", path, jsonBody, opts);
 }
+function hubPut(config3, path, jsonBody = {}) {
+  return hubRequest(config3, "PUT", path, jsonBody);
+}
 function hubPatch(config3, path, jsonBody = {}) {
   return hubRequest(config3, "PATCH", path, jsonBody);
 }
@@ -41190,6 +41193,8 @@ var TITLES = {
   awesomate_crm_write: "Write app data records",
   awesomate_crm_queries: "Save and run named data queries",
   awesomate_crm_recipes: "Save named write recipes",
+  awesomate_crm_apps: "Set up sign-in for your own apps",
+  awesomate_crm_app_users: "Manage the people who sign in to your apps",
   awesomate_crm_email: "Draft an email to a contact list"
 };
 function annotate(name, kind) {
@@ -42792,25 +42797,35 @@ server.registerTool(
   "awesomate_crm_kinds",
   {
     annotations: annotate("awesomate_crm_kinds", MUTATING),
-    description: "The kinds of app data in the client's own database (the tables an app keeps: jobs, memos, bookings, messages), created directly from here on Support Plus and above. action 'list': every kind with its attributes and links. 'define' {key, label?, label_plural?, attributes, links?}: a new kind; links: [{key, to, label?, required?}] where to is 'contact' or a kind already made, and each shows as <key>_id. 'add_attribute' {kind, attribute}. 'archive_attribute' {kind, key}: leaves the views, values kept. 'archive' {kind}: kept, restorable. No migration and no SQL: a kind is registry rows plus generated views. Business things whose values must be traced to a source (a property, an installed system) are 'tracked' kinds the owner accepts in the hub; they are refused here. Mark an attribute readable_by_ai only when the owner wants Claude and agents to see it, and never for anything sensitive. Confirm the design with the user before defining: a kind is part of their data, not scratch space.",
+    description: "The kinds of app data in the client's own database (the tables an app keeps: jobs, memos, bookings, messages), created directly from here on Support Plus and above. action 'list': every kind with its attributes and links. 'define' {key, label?, label_plural?, attributes, links?}: a new kind; links: [{key, to, label?, required?}] where to is 'contact' or a kind already made, and each shows as <key>_id. 'add_attribute' {kind, attribute}. 'archive_attribute' {kind, key}: leaves the views, values kept. 'archive' {kind}: kept, restorable. No migration and no SQL: a kind is registry rows plus generated views. Business things whose values must be traced to a source (a property, an installed system) are 'tracked' kinds the owner accepts in the hub; they are refused here. Mark an attribute readable_by_ai only when the owner wants Claude and agents to see it, and never for anything sensitive. 'set_access' {kind, access} (or access on define): who among the people signed in to the account's apps (awesomate_crm_apps) may read and change records of this kind, by their role: {read: {<role>: <rule>}, write: {<role>: <rule>}}. A rule is all, none, own (records they created), or linked:<link path ending at a contact> (linked:customer: jobs whose customer is them; linked:job.customer: memos on their jobs), joined with |. A role with no rule gets nothing; the default lets owner and staff do everything and members nothing. A write must leave the record inside the person's rule. Confirm the design with the user before defining: a kind is part of their data, not scratch space.",
     inputSchema: {
-      action: external_exports.enum(["list", "define", "add_attribute", "archive_attribute", "archive"]),
-      kind: external_exports.string().max(41).optional().describe("the kind to change (add_attribute, archive_attribute, archive)"),
+      action: external_exports.enum(["list", "define", "add_attribute", "archive_attribute", "archive", "set_access"]),
+      kind: external_exports.string().max(41).optional().describe("the kind to change (add_attribute, archive_attribute, archive, set_access)"),
       key: external_exports.string().max(41).optional().describe("define: the new kind; archive_attribute: the attribute"),
       label: external_exports.string().max(80).optional(),
       label_plural: external_exports.string().max(80).optional(),
       attributes: external_exports.array(crmAttribute).max(60).optional(),
       links: external_exports.array(external_exports.object({ key: external_exports.string().max(38), to: external_exports.string().max(41), label: external_exports.string().max(80).optional(), to_label: external_exports.string().max(80).optional(), required: external_exports.boolean().optional() })).max(20).optional(),
-      attribute: crmAttribute.optional().describe("add_attribute")
+      attribute: crmAttribute.optional().describe("add_attribute"),
+      access: external_exports.object({
+        read: external_exports.record(external_exports.string().max(200)).optional(),
+        write: external_exports.record(external_exports.string().max(200)).optional()
+      }).optional().describe("define / set_access: {read: {<role>: <rule>}, write: {<role>: <rule>}}")
     }
   },
-  async ({ action, kind, key, label, label_plural, attributes, links, attribute }) => {
+  async ({ action, kind, key, label, label_plural, attributes, links, attribute, access }) => {
     try {
       const cfg = requireConfig();
       if (action === "list") return textResult(await hubGet(cfg, "/api/my-crm/v1/kinds"));
-      if (action === "define") return textResult(await hubPost(cfg, "/api/my-crm/v1/kinds", { key, label, label_plural, attributes: attributes ?? [], links: links ?? [] }));
+      if (action === "define") {
+        return textResult(await hubPost(cfg, "/api/my-crm/v1/kinds", { key, label, label_plural, attributes: attributes ?? [], links: links ?? [], ...access ? { access } : {} }));
+      }
       if (!kind) return errorResult(new Error(`${action} needs the kind.`));
       const k = encodeURIComponent(kind);
+      if (action === "set_access") {
+        if (!access) return errorResult(new Error("set_access needs access: {read: {<role>: <rule>}, write: {<role>: <rule>}}."));
+        return textResult(await hubPut(cfg, `/api/my-crm/v1/kinds/${k}/access`, { access }));
+      }
       if (action === "add_attribute") return textResult(await hubPost(cfg, `/api/my-crm/v1/kinds/${k}/attributes`, { attribute }));
       if (action === "archive_attribute") {
         if (!key) return errorResult(new Error("archive_attribute needs key, the attribute."));
@@ -42855,6 +42870,64 @@ server.registerTool(
     }
   }
 );
+server.registerTool(
+  "awesomate_crm_apps",
+  {
+    annotations: annotate("awesomate_crm_apps", MUTATING),
+    description: "The account's own apps (a client portal, a members' app) whose users sign in by email link and then read and change only what each kind's access rules allow them (awesomate_crm_kinds set_access). Pro and above to create or change; reading is every plan. action 'list': each app with its publishable key, allowed origins, sign-up mode and default role. action 'create' {name, allowed_origins, sign_up?, default_role?}: name appears in the sign-in email; allowed_origins are the exact origins the app runs on (https://portal.example.com; http://localhost:5173 for development; capacitor://localhost for the mobile shell), with no path and no wildcard; sign_up 'invite' (default: only people added with awesomate_crm_app_users) or 'open' (anyone who uses the email link gets the default role). action 'update' {app_id, ...any of those, status?}: status 'disabled' signs everyone out of that app. The publishable key (pk_...) is not a secret: it goes in the app's browser code, with @awesomate/sdk. Never put the account's own token (amt_pat_...) in browser code. Confirm origins and sign-up mode with the user: open sign-up lets strangers in under the default role.",
+    inputSchema: {
+      action: external_exports.enum(["list", "create", "update"]),
+      app_id: external_exports.string().max(48).optional().describe("update: the app"),
+      name: external_exports.string().max(80).optional(),
+      allowed_origins: external_exports.array(external_exports.string().max(200)).max(10).optional(),
+      sign_up: external_exports.enum(["invite", "open"]).optional(),
+      default_role: external_exports.string().max(31).optional().describe("lower case; the role open sign-up gives"),
+      status: external_exports.enum(["active", "disabled"]).optional().describe("update only")
+    }
+  },
+  async ({ action, app_id, name, allowed_origins, sign_up, default_role, status }) => {
+    try {
+      const cfg = requireConfig();
+      if (action === "list") return textResult(await hubGet(cfg, "/api/my-crm/v1/apps"));
+      const fields = Object.fromEntries(Object.entries({ name, allowed_origins, sign_up, default_role }).filter(([, v]) => v !== void 0));
+      if (action === "create") return textResult(await hubPost(cfg, "/api/my-crm/v1/apps", fields));
+      if (!app_id) return errorResult(new Error("update needs app_id, from list."));
+      return textResult(await hubPatch(cfg, `/api/my-crm/v1/apps/${encodeURIComponent(app_id)}`, { ...fields, ...status ? { status } : {} }));
+    } catch (err) {
+      return errorResult(err);
+    }
+  }
+);
+server.registerTool(
+  "awesomate_crm_app_users",
+  {
+    annotations: annotate("awesomate_crm_app_users", MUTATING),
+    description: "The people who sign in to the account's apps (awesomate_crm_apps): their email, role, the contact they are (matched on email when they are added or first sign in), last sign-in and whether they are disabled. Pro and above to change; reading is every plan. action 'list'. action 'add' {email, role?}: lets them sign in to an invite-only app (no email is sent; they ask for a link in the app). action 'update' {id, role?, disabled?, contact_id?}: a role change applies to their very next request; disabled: true stops their next request and signs them out of every app at once; contact_id links them to a contact (null unlinks), which is what linked: rules follow. These are people's email addresses: show them only when the user asks, and never paste them anywhere else.",
+    inputSchema: {
+      action: external_exports.enum(["list", "add", "update"]),
+      id: external_exports.string().max(64).optional().describe("update: the person's id from list"),
+      email: external_exports.string().max(254).optional().describe("add"),
+      role: external_exports.string().max(31).optional().describe("lower case: owner, staff, member, or one of your own"),
+      disabled: external_exports.boolean().optional(),
+      contact_id: external_exports.string().max(64).nullable().optional()
+    }
+  },
+  async ({ action, id, email: email2, role, disabled, contact_id }) => {
+    try {
+      const cfg = requireConfig();
+      if (action === "list") return textResult(await hubGet(cfg, "/api/my-crm/v1/app-users"));
+      if (action === "add") {
+        if (!email2) return errorResult(new Error("add needs the email."));
+        return textResult(await hubPost(cfg, "/api/my-crm/v1/app-users", { email: email2, ...role ? { role } : {} }));
+      }
+      if (!id) return errorResult(new Error("update needs id, from list."));
+      const patch = Object.fromEntries(Object.entries({ role, disabled, contact_id }).filter(([, v]) => v !== void 0));
+      return textResult(await hubPatch(cfg, `/api/my-crm/v1/app-users/${encodeURIComponent(id)}`, patch));
+    } catch (err) {
+      return errorResult(err);
+    }
+  }
+);
 var crmParam = external_exports.object({
   name: external_exports.string().max(41).describe("lower_case"),
   type: external_exports.enum(["text", "number", "date", "datetime", "boolean", "uuid", "text_list", "number_list"]).optional().describe("default text"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awesomate/hosting-mcp",
-  "version": "0.45.0",
+  "version": "0.46.0",
   "description": "Awesomate MCP server — lets Claude manage your Awesomate WordPress hosting, plan, limits, n8n automations, and build Node/static apps + databases",
   "license": "UNLICENSED",
   "type": "module",

package/skill/CHANGELOG.json

@@ -1,5 +1,13 @@
 {
   "versions": [
+    {
+      "version": "0.46.0",
+      "highlights": [
+        "Your own apps can now sign people in. Claude can set up an app (awesomate_crm_apps): where it runs, whether anyone can sign up or only people you add, and the key that goes in the app. Each person gets an email link, no passwords. Pro and above",
+        "You decide who sees what, per kind of record: members see their own jobs and the memos on them, staff see everything (awesomate_crm_kinds, set_access). The rules are kept in your own database, so a mistake in an app can't show anyone more",
+        "Add, re-role or switch off the people who sign in (awesomate_crm_app_users). Switching someone off takes effect on their very next click and signs them out everywhere"
+      ]
+    },
     {
       "version": "0.45.0",
       "highlights": [