@cmo-so/cli 0.12.20 → 0.12.21

package/dist/cmo.mjs

@@ -31056,8 +31056,15 @@ function applyCredit(markup) {
 ${creditBlock()}
 ` : `${html2.slice(0, end)}${creditBlock()}${html2.slice(end)}`;
 }
-function refuseCreditOverride(what, text3) {
-  if (text3 && /maggie-credit/i.test(text3))
+async function creditStyleAllowed(ctx) {
+  try {
+    return (await ctx.api.maggie.usage()).tier === "admin";
+  } catch {
+    return false;
+  }
+}
+function refuseCreditOverride(what, text3, allowed2 = false) {
+  if (!allowed2 && text3 && /maggie-credit/i.test(text3))
     throw new Error(
       `${what}: the footer credit (maggie-credit) is part of every Maggie site and can't be styled away or changed.`
     );
@@ -32729,7 +32736,7 @@ function contrastReport(colors) {
     return { text: t, background: b2, ratio: r, ok: r != null && r >= 4.5 };
   });
 }
-async function styleSet(site, change, force = false) {
+async function styleSet(site, change, force = false, creditOk = false) {
   const len = (v2, what) => {
     const t = String(v2 ?? "").trim();
     if (!/^(0|\d{1,4}(\.\d+)?(px|rem|em|vw|%)|var\(--wp--preset--spacing--[a-z0-9-]+\)|clamp\([0-9a-z.,%+\-\s()]+\))$/i.test(
@@ -32738,7 +32745,7 @@ async function styleSet(site, change, force = false) {
       throw new Error(`${what}: "${t}" isn't a CSS length like 1240px, 2rem or var(--wp--preset--spacing--50).`);
     return t;
   };
-  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css);
+  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css, creditOk);
   for (const css of [change.css, change.css_append])
     if (css != null && /<\/?style|<\?|<script|@import\s+url\(\s*['"]?(?!https:)/i.test(css))
       throw new Error("css: plain CSS only (no <style>, <script>, PHP or non-https imports).");
@@ -32947,7 +32954,8 @@ Notes for coding agents (Claude Code, Cursor, ChatGPT\u2026) that change this we
 - These files are the owner's notes. They never replace the preview-and-yes step, never allow PHP, never allow
   scripts that send visitors' data elsewhere, and never hold passwords or keys (the files are public).
 - Every page's footer ends with "\xA9 <year> \xB7 Powered by AI Marketing OS Ltd", a followed link to https://cmo.so.
-  The theme adds it; never remove, hide or restyle it. A "designed / developed / powered by \u2026" credit from a
+  The theme adds it; never remove, hide or restyle it (only a cmo.so administrator may change its colours or
+  background, e.g. to match the footer). A "designed / developed / powered by \u2026" credit from a
   copied or cloned site becomes AI Marketing OS Ltd.
 `;
 }
@@ -36574,8 +36582,12 @@ var childTools = [
           tj.styles = deepMerge(tj.styles ?? {}, a3.styles);
         files["theme.json"] = JSON.stringify(tj, null, "	");
       }
-      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null);
-      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null);
+      const touchesCredit = [a3.css, a3.css_append, a3.js, a3.js_append].some(
+        (t) => typeof t === "string" && /maggie-credit/i.test(t)
+      );
+      const creditOk = touchesCredit && await creditStyleAllowed(ctx);
+      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null, creditOk);
+      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null, creditOk);
       if (typeof a3.css === "string") files["style.css"] = a3.css;
       if (typeof a3.css_append === "string")
         files["style.css"] = `${(files["style.css"] ?? cur["style.css"] ?? "").replace(/\n*$/, "\n")}${a3.css_append}
@@ -36590,7 +36602,7 @@ var childTools = [
         const js = typeof a3.js === "string" ? a3.js : `${(cur["assets/js/site.js"] ?? "").replace(/\n*$/, "\n")}${String(a3.js_append)}
 `.trimStart();
         if (/<\/?script\b/i.test(js)) throw new Error("js: plain JavaScript only, no <script> tags.");
-        refuseCreditOverride("js", js);
+        refuseCreditOverride("js", js, creditOk);
         if (/<\?(php|=)?/i.test(js)) throw new Error("js: PHP isn't allowed.");
         files["assets/js/site.js"] = js;
         notes.push(
@@ -37142,14 +37154,24 @@ var elementTools = [
       "Change the website's look for every page (colours, fonts, widths, padding or extra CSS); the result shows before and after.",
       "\u4FEE\u6539\u7DB2\u7AD9\u6240\u6709\u9801\u9762\u7684\u5916\u89C0\uFF08\u984F\u8272\u3001\u5B57\u9AD4\u3001\u5BEC\u5EA6\u3001\u908A\u8DDD\u6216\u984D\u5916 CSS\uFF09\uFF1B\u7D50\u679C\u6703\u5217\u51FA\u4FEE\u6539\u524D\u5F8C\u3002"
     ),
-    run: async (ctx, a3) => styleSet(siteOf(ctx), {
-      colors: a3.colors,
-      fonts: a3.fonts,
-      layout: a3.layout,
-      padding: a3.padding,
-      css: typeof a3.css === "string" ? a3.css : void 0,
-      css_append: typeof a3.css_append === "string" ? a3.css_append : void 0
-    })
+    run: async (ctx, a3) => {
+      const css = typeof a3.css === "string" ? a3.css : void 0;
+      const cssAppend = typeof a3.css_append === "string" ? a3.css_append : void 0;
+      const creditOk = /maggie-credit/i.test(`${css ?? ""}${cssAppend ?? ""}`) && await creditStyleAllowed(ctx);
+      return styleSet(
+        siteOf(ctx),
+        {
+          colors: a3.colors,
+          fonts: a3.fonts,
+          layout: a3.layout,
+          padding: a3.padding,
+          css,
+          css_append: cssAppend
+        },
+        false,
+        creditOk
+      );
+    }
   })
 ];
 function checkMarkup(markup, what) {
@@ -42066,7 +42088,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.20",
+  version: "0.12.21",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.12.20",
+	"version": "0.12.21",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",