@cmo-so/cli 0.7.7 → 0.8.0

package/dist/cmo.mjs

@@ -5005,12 +5005,12 @@ var require_limitNumber = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var codegen_1 = require_codegen();
-    var ops = codegen_1.operators;
+    var ops2 = codegen_1.operators;
     var KWDs = {
-      maximum: { okStr: "<=", ok: ops.LTE, fail: ops.GT },
-      minimum: { okStr: ">=", ok: ops.GTE, fail: ops.LT },
-      exclusiveMaximum: { okStr: "<", ok: ops.LT, fail: ops.GTE },
-      exclusiveMinimum: { okStr: ">", ok: ops.GT, fail: ops.LTE }
+      maximum: { okStr: "<=", ok: ops2.LTE, fail: ops2.GT },
+      minimum: { okStr: ">=", ok: ops2.GTE, fail: ops2.LT },
+      exclusiveMaximum: { okStr: "<", ok: ops2.LT, fail: ops2.GTE },
+      exclusiveMinimum: { okStr: ">", ok: ops2.GT, fail: ops2.LTE }
     };
     var error2 = {
       message: ({ keyword, schemaCode }) => (0, codegen_1.str)`must be ${KWDs[keyword].okStr} ${schemaCode}`,
@@ -7090,12 +7090,12 @@ var require_limit = __commonJS({
     exports.formatLimitDefinition = void 0;
     var ajv_1 = require_ajv();
     var codegen_1 = require_codegen();
-    var ops = codegen_1.operators;
+    var ops2 = codegen_1.operators;
     var KWDs = {
-      formatMaximum: { okStr: "<=", ok: ops.LTE, fail: ops.GT },
-      formatMinimum: { okStr: ">=", ok: ops.GTE, fail: ops.LT },
-      formatExclusiveMaximum: { okStr: "<", ok: ops.LT, fail: ops.GTE },
-      formatExclusiveMinimum: { okStr: ">", ok: ops.GT, fail: ops.LTE }
+      formatMaximum: { okStr: "<=", ok: ops2.LTE, fail: ops2.GT },
+      formatMinimum: { okStr: ">=", ok: ops2.GTE, fail: ops2.LT },
+      formatExclusiveMaximum: { okStr: "<", ok: ops2.LT, fail: ops2.GTE },
+      formatExclusiveMinimum: { okStr: ">", ok: ops2.GT, fail: ops2.LTE }
     };
     var error2 = {
       message: ({ keyword, schemaCode }) => (0, codegen_1.str)`should be ${KWDs[keyword].okStr} ${schemaCode}`,
@@ -7353,6 +7353,23 @@ function createApi({ baseUrl, session: session2, fetch: fetchImpl = globalThis.f
       apps: () => request("/v1/me/apps"),
       revokeApp: (grantId) => request(`/v1/me/apps/${encodeURIComponent(grantId)}`, { method: "DELETE" }),
       invoices: () => request("/v1/me/invoices"),
+      /** Standing permissions: one of your keys may run some writes on one website without a preview, up to a daily cap. */
+      standing: () => request(
+        "/v1/me/standing"
+      ),
+      /** From another key than `key_id` (409/422 otherwise); replaces any earlier one for that key and website. */
+      grantStanding: (p) => request("/v1/me/standing", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(p)
+      }),
+      revokeStanding: (id) => request(`/v1/me/standing/${id}`, { method: "DELETE" }),
+      /** The MCP, just before a write: records one use when the key's permission covers it. */
+      claimStanding: (p) => request("/v1/me/standing/claim", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(p)
+      }),
       /**
        * Take a website off your own list (archives your claim; reversible on ai.cmo.so). Nothing changes for
        * anyone else; a team member also leaves the team.
@@ -7936,9 +7953,7 @@ function domainApi(api2, domain) {
     /** Disconnect the website's LinkedIn account. */
     disconnectLinkedIn: (connectionId) => api2.request(`${base}/social/linkedin/${connectionId}`, { method: "DELETE" }),
     /** Published articles a LinkedIn post can be made from. */
-    socialSources: (search = "") => api2.request(
-      `${base}/social/sources?search=${encodeURIComponent(search)}`
-    ),
+    socialSources: (search = "") => api2.request(`${base}/social/sources?search=${encodeURIComponent(search)}`),
     /** Maggie writes a post about one article for each channel; `failed` lists a channel that could not be written while the others were. */
     socialFromPost: (sourcePostId, channels) => post(`${base}/social/from-post`, {
       source_post_id: sourcePostId,
@@ -8164,7 +8179,37 @@ function domainApi(api2, domain) {
     startPromptCheck: (prompt) => post(`${base}/visibility/prompt-check`, { prompt }),
     promptCheck: (taskId) => api2.request(`${base}/visibility/prompt-check/${encodeURIComponent(taskId)}`),
     report: (range = "30d") => api2.request(`${base}/report?range=${range}`),
-    platform: () => api2.request(`${base}/platform`)
+    platform: () => api2.request(`${base}/platform`),
+    // Ops Autopilot (cmo-so docs/prd/ops-autopilot.md): Maggie's daily operations on the website.
+    opsAutopilot: () => api2.request(`${base}/ops-autopilot`),
+    setOpsAutopilot: (s) => put(`${base}/ops-autopilot`, s),
+    // The report inbox: Maggie's reports and agents' reports.
+    reports: (q2 = {}) => {
+      const params = new URLSearchParams();
+      if (q2.kind) params.set("kind", q2.kind);
+      if (q2.unread) params.set("unread", "true");
+      if (q2.limit) params.set("limit", String(q2.limit));
+      const qs = params.toString();
+      return api2.request(`${base}/reports${qs ? `?${qs}` : ""}`);
+    },
+    inboxReport: (id) => api2.request(`${base}/reports/${id}`),
+    saveReport: (r) => post(`${base}/reports`, r),
+    readAllReports: () => post(`${base}/reports/read-all`, {}),
+    // Ops Autopilot: ideas the weekly clean-up archived (restorable), post health, Google reviews.
+    ideaCleanup: (limit = 50) => api2.request(`${base}/idea-cleanup?limit=${limit}`),
+    restoreIdeaCleanup: (id) => post(`${base}/idea-cleanup/${id}/restore`, {}),
+    postHealth: (limit = 30) => api2.request(`${base}/post-health?limit=${limit}`),
+    googleReviews: (q2 = {}) => {
+      const params = new URLSearchParams();
+      if (q2.status) params.set("status", q2.status);
+      if (q2.limit) params.set("limit", String(q2.limit));
+      const qs = params.toString();
+      return api2.request(
+        `${base}/google-business/reviews${qs ? `?${qs}` : ""}`
+      );
+    },
+    redraftGoogleReview: (id) => post(`${base}/google-business/reviews/${id}/draft`, {}),
+    replyGoogleReview: (id, text3) => post(`${base}/google-business/reviews/${id}/reply`, text3 === void 0 ? {} : { text: text3 })
   };
 }
 
@@ -8355,6 +8400,13 @@ function sitemapCheckLine(check) {
 
 // ../../packages/domain/src/copy/maggie.ts
 var q = (s) => `\u201C${String(s ?? "").slice(0, 120)}\u201D`;
+var CHANNEL_EN = {
+  linkedin: "LinkedIn",
+  facebook: "Facebook",
+  instagram: "Instagram",
+  google_business: "Google Business"
+};
+var CHANNEL_ZH = { ...CHANNEL_EN, google_business: "Google \u5546\u5BB6" };
 var named = (title, id) => {
   if (title != null && String(title).trim()) return ` ${q(title)}`;
   const s = String(id ?? "").trim();
@@ -8538,6 +8590,48 @@ var confirmCopy = {
     en: (a) => a.paused ? "Pause publishing blog posts." : "Resume publishing blog posts.",
     "zh-Hant": (a) => a.paused ? "\u66AB\u505C\u767C\u4F48\u90E8\u843D\u683C\u6587\u7AE0\u3002" : "\u6062\u5FA9\u767C\u4F48\u90E8\u843D\u683C\u6587\u7AE0\u3002"
   },
+  ops_autopilot_set: {
+    en: (a) => {
+      const f = Object.entries(a.features ?? {});
+      const on2 = f.filter(([, v]) => v).map(([k]) => k.replace(/_/g, " "));
+      const off = f.filter(([, v]) => !v).map(([k]) => k.replace(/_/g, " "));
+      const parts = [
+        on2.length ? `turn on ${on2.join(", ")}` : "",
+        off.length ? `turn off ${off.join(", ")}` : "",
+        a.weekly_email === true ? "email the Monday report to the owner" : "",
+        a.weekly_email === false ? "stop emailing the Monday report" : ""
+      ].filter(Boolean);
+      return `Ops Autopilot: ${parts.join("; ") || "no change"}.`;
+    },
+    "zh-Hant": (a) => {
+      const f = Object.entries(a.features ?? {});
+      const on2 = f.filter(([, v]) => v).map(([k]) => k);
+      const off = f.filter(([, v]) => !v).map(([k]) => k);
+      const parts = [
+        on2.length ? `\u958B\u555F ${on2.join("\u3001")}` : "",
+        off.length ? `\u95DC\u9589 ${off.join("\u3001")}` : "",
+        a.weekly_email === true ? "\u628A\u9031\u4E00\u5831\u544A\u5BC4\u7D66\u7DB2\u7AD9\u64C1\u6709\u8005" : "",
+        a.weekly_email === false ? "\u4E0D\u518D\u5BC4\u9031\u4E00\u5831\u544A" : ""
+      ].filter(Boolean);
+      return `Ops Autopilot\uFF1A${parts.join("\uFF1B") || "\u6C92\u6709\u8B8A\u66F4"}\u3002`;
+    }
+  },
+  idea_restore_cleanup: {
+    en: (a) => `Bring back the archived idea #${a.id} to the waiting list.`,
+    "zh-Hant": (a) => `\u628A\u5DF2\u6B78\u6A94\u7684 idea #${a.id} \u653E\u56DE\u7B49\u5F85\u5217\u8868\u3002`
+  },
+  gbp_review_draft: {
+    en: (a) => `Write a new reply draft for Google review #${a.id} (one AI generation). Nothing is posted.`,
+    "zh-Hant": (a) => `\u70BA Google \u8A55\u50F9 #${a.id} \u91CD\u5BEB\u56DE\u8986\u8349\u7A3F\uFF08\u7528\u4E00\u6B21 AI \u751F\u6210\uFF09\uFF0C\u4E0D\u6703\u767C\u4F48\u3002`
+  },
+  gbp_review_reply: {
+    en: (a) => `Post ${a.text ? `the reply ${q(a.text)}` : "Maggie's draft"} under Google review #${a.id}. Everyone who sees the review will see it.`,
+    "zh-Hant": (a) => `\u5728 Google \u8A55\u50F9 #${a.id} \u4E0B\u767C\u4F48${a.text ? `\u56DE\u8986 ${q(a.text)}` : " Maggie \u7684\u8349\u7A3F"}\uFF0C\u770B\u5230\u9019\u5247\u8A55\u50F9\u7684\u4EBA\u90FD\u770B\u5F97\u5230\u3002`
+  },
+  report_save: {
+    en: (a) => `Save the report ${q(a.title)} to the website's inbox (the owner gets a notification).`,
+    "zh-Hant": (a) => `\u628A\u5831\u544A ${q(a.title)} \u5B58\u9032\u7DB2\u7AD9\u7684\u6536\u4EF6\u5323\uFF08\u64C1\u6709\u8005\u6703\u6536\u5230\u901A\u77E5\uFF09\u3002`
+  },
   posts_per_day_set: {
     en: (a) => `Publish ${a.posts_per_day} blog post${Number(a.posts_per_day) === 1 ? "" : "s"} a day.`,
     "zh-Hant": (a) => `\u6BCF\u5929\u767C\u4F48 ${a.posts_per_day} \u7BC7\u90E8\u843D\u683C\u6587\u7AE0\u3002`
@@ -8712,8 +8806,8 @@ var confirmCopy = {
     "zh-Hant": () => "\u7522\u751F\u4E00\u500B\u9023\u63A5 LinkedIn \u7684\u9023\u7D50\u3002"
   },
   social_approve_all: {
-    en: () => "Approve every LinkedIn post waiting for your OK. They go out one by one at your posting times, where your network can see them.",
-    "zh-Hant": () => "\u6279\u51C6\u6240\u6709\u7B49\u4F60\u78BA\u8A8D\u7684 LinkedIn \u8CBC\u6587\u3002\u5B83\u5011\u6703\u5728\u63A5\u4E0B\u4F86\u7684\u767C\u6587\u6642\u9593\u9010\u7BC7\u767C\u51FA\uFF0C\u4F60\u7684\u4EBA\u8108\u90FD\u770B\u5F97\u5230\u3002"
+    en: (a) => `Approve every ${a.channel ? `${CHANNEL_EN[String(a.channel)] ?? a.channel} ` : ""}post waiting for your OK${a.channel ? "" : ", on every channel"}, including any held for a picture check. They go out one by one at each channel's posting times, where people can see them.`,
+    "zh-Hant": (a) => `\u6279\u51C6\u6240\u6709\u7B49\u4F60\u78BA\u8A8D\u7684${a.channel ? ` ${CHANNEL_ZH[String(a.channel)] ?? a.channel} ` : "\uFF08\u6240\u6709\u6E20\u9053\uFF09"}\u8CBC\u6587\uFF0C\u5305\u62EC\u56E0\u5716\u7247\u6AA2\u67E5\u800C\u66AB\u505C\u7684\u3002\u5B83\u5011\u6703\u5728\u5404\u6E20\u9053\u63A5\u4E0B\u4F86\u7684\u767C\u6587\u6642\u9593\u9010\u7BC7\u767C\u51FA\uFF0C\u5927\u5BB6\u90FD\u770B\u5F97\u5230\u3002`
   },
   series_create: {
     en: (a) => `Plan and write a LinkedIn series about ${q(a.brief)}: ${a.count || 3} posts that read as a series. Each waits in Review for your OK. Uses one AI generation a post.`,
@@ -8782,6 +8876,18 @@ var confirmCopy = {
     en: (a) => `Disconnect ${q(a.app)} from your account. It stops working now and has to be connected again.`,
     "zh-Hant": (a) => `\u5F9E\u4F60\u7684\u5E33\u865F\u65B7\u958B ${q(a.app)}\uFF0C\u5B83\u6703\u7ACB\u5373\u505C\u7528\uFF0C\u4E4B\u5F8C\u8981\u91CD\u65B0\u9023\u63A5\u3002`
   },
+  standing_permission_set: {
+    en: (a) => `Let the key ${q(a.key_name)} run ${Object.entries(a.tools ?? {}).map(([tool3, cap]) => `${tool3}${cap ? ` (up to ${cap} a day)` : ""}`).join(
+      ", "
+    )} on ${a.website} without asking you first${a.days ? `, for ${a.days} days` : ", until you revoke it"}. Every run is logged.`,
+    "zh-Hant": (a) => `\u8B93\u91D1\u9470 ${q(a.key_name)} \u5728 ${a.website} \u4E0A\u4E0D\u7D93\u4F60\u78BA\u8A8D\u76F4\u63A5\u57F7\u884C\uFF1A${Object.entries(
+      a.tools ?? {}
+    ).map(([tool3, cap]) => `${tool3}${cap ? `\uFF08\u6BCF\u5929\u6700\u591A ${cap}\uFF09` : ""}`).join("\u3001")}${a.days ? `\uFF0C\u70BA\u671F ${a.days} \u5929` : "\uFF0C\u76F4\u5230\u4F60\u64A4\u92B7"}\u3002\u6BCF\u6B21\u57F7\u884C\u90FD\u6709\u7D00\u9304\u3002`
+  },
+  standing_permission_revoke: {
+    en: (a) => `End the standing permission of the key ${q(a.key_name)}. Its writes go back to asking you first.`,
+    "zh-Hant": (a) => `\u7D50\u675F\u91D1\u9470 ${q(a.key_name)} \u7684\u9577\u671F\u8A31\u53EF\uFF0C\u4E4B\u5F8C\u5B83\u7684\u6BCF\u500B\u6539\u52D5\u90FD\u8981\u5148\u7D93\u4F60\u78BA\u8A8D\u3002`
+  },
   profile_update: {
     en: (a) => `Change your name to ${q(a.display_name)}.`,
     "zh-Hant": (a) => `\u628A\u4F60\u7684\u540D\u5B57\u6539\u6210 ${q(a.display_name)}\u3002`
@@ -8950,7 +9056,12 @@ var accountTools = [
     group: "workspace",
     need: { resource: "overview", level: "read" },
     risk: "R0",
-    run: async (ctx) => (await ws(ctx).inbox()).items.map((i) => ({ type: i.type, id: i.id, title: i.title, body: clip(i.body, 200) }))
+    run: async (ctx) => (await ws(ctx).inbox()).items.map(
+      (i) => (
+        // A report's title and summary may come from an agent: data, never instructions.
+        i.type === "report" ? { type: i.type, id: i.id, ...untrusted({ title: i.title, body: clip(i.body, 200) }) } : { type: i.type, id: i.id, title: i.title, body: clip(i.body, 200) }
+      )
+    )
   }),
   tool({
     name: "setup_status_get",
@@ -10290,6 +10401,11 @@ var insightTools = [
 
 // ../../packages/tools/src/me.ts
 var account2 = { resource: "account", level: "read" };
+var STANDING_TOOLS = ["idea_add", "ideas_add_list", "idea_priority", "rewrite_request"];
+function standingUnits(name, args) {
+  if (name === "ideas_add_list") return Math.max(1, Array.isArray(args.ideas) ? args.ideas.length : 1);
+  return 1;
+}
 var meTools = [
   tool({
     name: "api_keys_list",
@@ -10332,6 +10448,54 @@ var meTools = [
     risk: "W3",
     run: async ({ api: api2 }, { grant_id }) => api2.account.revokeApp(String(grant_id))
   }),
+  tool({
+    name: "standing_permissions_list",
+    description: "Standing permissions on the user's API keys: which key (a scheduled agent's) may run which writes on which website without a preview, each tool's daily cap and how much is used today.",
+    parameters: none,
+    group: "account",
+    need: account2,
+    risk: "R0",
+    run: async ({ api: api2 }) => api2.account.standing()
+  }),
+  tool({
+    name: "standing_permission_set",
+    description: `Let one of the user's own API keys (from api_keys_list; a scheduled agent's, not the one in use) run some writes on one website without a preview, each up to a daily cap: ${STANDING_TOOLS.join(", ")}. Replaces any earlier one for that key and website. Leave a cap empty for the default (ideas 10 a day, priority changes 25, rewrites 2). Every run is in the action log; standing_permission_revoke ends it.`,
+    parameters: {
+      type: "object",
+      properties: {
+        key_id: { type: "integer" },
+        key_name: { type: "string", description: "The key's name, for the card" },
+        website: { type: "string", description: "The website (domain)" },
+        tools: {
+          type: "object",
+          description: "Daily cap per tool; include only the tools to allow (0 or empty for the default).",
+          properties: Object.fromEntries(STANDING_TOOLS.map((name) => [name, { type: "integer" }]))
+        },
+        days: { type: "integer", description: "How long it lasts (1-366); leave out for until revoked" }
+      },
+      required: ["key_id", "key_name", "website", "tools"]
+    },
+    group: "account",
+    need: account2,
+    risk: "W3",
+    run: async ({ api: api2 }, { key_id, website, tools: tools2, days }) => api2.account.grantStanding({ key_id: Number(key_id), website: String(website), tools: tools2, days: days ?? null })
+  }),
+  tool({
+    name: "standing_permission_revoke",
+    description: "End a standing permission (from standing_permissions_list): its key goes back to previews for every write.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer" },
+        key_name: { type: "string", description: "The key's name, for the card" }
+      },
+      required: ["id", "key_name"]
+    },
+    group: "account",
+    need: account2,
+    risk: "W2",
+    run: async ({ api: api2 }, { id }) => api2.account.revokeStanding(Number(id))
+  }),
   tool({
     name: "invoices_list",
     description: "The user's latest invoices across the subscriptions they pay for: date, amount, status and a link to view or download each.",
@@ -10472,6 +10636,212 @@ var memoryTools = [
 ];
 var MEMORY_TOOLS = new Set(memoryTools.map((t) => t.name));
 
+// ../../packages/tools/src/ops.ts
+var overview = { resource: "overview", level: "read" };
+var autopilotWrite = { resource: "autopilot", level: "write" };
+var reportWrite = { resource: "report", level: "write" };
+var OPS_FEATURES = [
+  "top_up",
+  "precheck",
+  "retry",
+  "weekly_report",
+  "gsc_ideas",
+  "ai_visibility",
+  "idea_cleanup",
+  "competitor_watch",
+  "insight_memory",
+  "post_health",
+  "gbp_reviews"
+];
+var opsTools = [
+  tool({
+    name: "ops_autopilot_get",
+    description: "Maggie's daily operations on the website (Ops Autopilot): whether it is available, and each feature with on/off, when it runs and how its last run went. Features: top_up (fills each social channel's empty slots for the week every morning), precheck (checks each social post before it goes out: no links or phone numbers on Google, a picture on Instagram, no placeholders or promised rankings; holds it as a draft if not), retry (tries a failed post once more), weekly_report (Monday report in the inbox), gsc_ideas (Search Console queries near page one become blog ideas), ai_visibility (weekly AI answer check), idea_cleanup (archives stale low-priority ideas weekly, restorable), competitor_watch (competitors' new articles become ideas), insight_memory (what performed best is remembered), post_health (checks new posts once they're live), gbp_reviews (new Google reviews with reply drafts).",
+    parameters: none,
+    group: "workspace",
+    need: overview,
+    risk: "R0",
+    run: async (ctx) => ws(ctx).opsAutopilot()
+  }),
+  tool({
+    name: "ops_autopilot_set",
+    description: "Switch Ops Autopilot features on or off for this website, and whether the Monday report is also emailed to the website's owner. Only features from ops_autopilot_get; a feature that isn't available yet can be switched but won't run.",
+    parameters: {
+      type: "object",
+      properties: {
+        features: {
+          type: "object",
+          description: `Feature \u2192 true (on) or false (off). Features: ${OPS_FEATURES.join(", ")}`,
+          properties: Object.fromEntries(OPS_FEATURES.map((f) => [f, { type: "boolean" }]))
+        },
+        weekly_email: { type: "boolean", description: "Also email the Monday report to the website's owner" }
+      }
+    },
+    group: "workspace",
+    need: autopilotWrite,
+    risk: "W2",
+    idempotent: true,
+    run: async (ctx, { features, weekly_email }) => {
+      const known = Object.fromEntries(
+        Object.entries(features ?? {}).filter(([k]) => OPS_FEATURES.includes(k)).map(([k, v]) => [k, Boolean(v)])
+      );
+      return ws(ctx).setOpsAutopilot({
+        ...Object.keys(known).length ? { features: known } : {},
+        ...weekly_email === void 0 ? {} : { weekly_email: Boolean(weekly_email) }
+      });
+    }
+  }),
+  tool({
+    name: "reports_list",
+    description: "The website's report inbox, newest first: Maggie's own reports (weekly, daily operations, post health, Google reviews) and reports agents saved. Title and summary each; read one with report_get.",
+    parameters: {
+      type: "object",
+      properties: {
+        kind: {
+          type: "string",
+          enum: ["weekly", "daily_ops", "agent", "post_health", "reviews", "ai_visibility", "search"]
+        },
+        unread: { type: "boolean", description: "Only reports nobody has opened yet" },
+        limit: { type: "integer", minimum: 1, maximum: 50 }
+      }
+    },
+    group: "reports",
+    need: overview,
+    risk: "R0",
+    run: async (ctx, { kind, unread, limit }) => {
+      const r = await ws(ctx).reports({ kind, unread, limit: int(limit, 1, 50, 20) });
+      return {
+        unread: r.unread,
+        items: r.items.map(({ title, summary, ...rest }) => ({ ...rest, ...untrusted({ title, summary }) }))
+      };
+    }
+  }),
+  tool({
+    name: "report_get",
+    description: "One report in full (its text in Markdown and any data); marks it read.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "reports",
+    need: overview,
+    risk: "R0",
+    run: async (ctx, { id }) => {
+      const r = await ws(ctx).inboxReport(int(id, 1, Number.MAX_SAFE_INTEGER, 0));
+      const { title, summary, body_md, data, ...rest } = r;
+      return { ...rest, ...untrusted({ title, summary, body_md, data }) };
+    }
+  }),
+  tool({
+    name: "report_save",
+    description: "Save a report to the website's inbox (for an agent's scheduled run: what it found and did). The owner gets a push and sees it in the app's Inbox. Up to 20 agent reports a day per website, 50,000 characters each. Saving changes nothing else.",
+    parameters: {
+      type: "object",
+      properties: {
+        title: { type: "string", description: "Short, e.g. 'Daily analysis, 22 Oct'" },
+        summary: { type: "string", description: "One or two sentences (up to 500 characters) shown in the Inbox" },
+        body_md: { type: "string", description: "The full report in Markdown" }
+      },
+      required: ["title"]
+    },
+    group: "reports",
+    need: reportWrite,
+    risk: "W1",
+    run: async (ctx, { title, summary, body_md }) => ws(ctx).saveReport({
+      title: String(title ?? "").slice(0, 200),
+      ...summary ? { summary: String(summary).slice(0, 500) } : {},
+      ...body_md ? { body_md: String(body_md).slice(0, 5e4) } : {}
+    })
+  }),
+  tool({
+    name: "idea_cleanup_list",
+    description: "Ideas Ops Autopilot archived in its weekly clean-up (stale, low-priority ideas Maggie found herself; never ones a person added), newest first, each with why. Bring one back with idea_restore_cleanup.",
+    parameters: { type: "object", properties: { limit: { type: "integer", minimum: 1, maximum: 200 } } },
+    group: "blog",
+    need: { resource: "autopilot", level: "read" },
+    risk: "R0",
+    run: async (ctx, { limit }) => {
+      const r = await ws(ctx).ideaCleanup(int(limit, 1, 200, 50));
+      return { items: r.items.map(({ reason, ...rest }) => ({ ...rest, ...untrusted({ reason }) })) };
+    }
+  }),
+  tool({
+    name: "idea_restore_cleanup",
+    description: "Bring an idea the weekly clean-up archived back to the waiting list (id from idea_cleanup_list).",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "blog",
+    need: autopilotWrite,
+    risk: "W1",
+    idempotent: true,
+    run: async (ctx, { id }) => ws(ctx).restoreIdeaCleanup(int(id, 1, Number.MAX_SAFE_INTEGER, 0))
+  }),
+  tool({
+    name: "post_health_get",
+    description: "Checks of the blog posts that went live in the last week (Ops Autopilot, daily): whether each page opens, and has a title, a meta description, a canonical link to itself, an og:image and working links on the site. Each with its issues in plain words.",
+    parameters: { type: "object", properties: { limit: { type: "integer", minimum: 1, maximum: 100 } } },
+    group: "reports",
+    need: { resource: "report", level: "read" },
+    risk: "R0",
+    run: async (ctx, { limit }) => ws(ctx).postHealth(int(limit, 1, 100, 30))
+  }),
+  tool({
+    name: "gbp_reviews_list",
+    description: "Reviews of the website's Google Business profile (read every 6 hours by Ops Autopilot), newest first, each with Maggie's reply draft or the reply already sent. status: none (no reply yet), drafted (a draft waits to be sent), sent.",
+    parameters: {
+      type: "object",
+      properties: {
+        status: { type: "string", enum: ["none", "drafted", "sent", "failed"] },
+        limit: { type: "integer", minimum: 1, maximum: 100 }
+      }
+    },
+    group: "social",
+    need: { resource: "autopilot", level: "read" },
+    risk: "R0",
+    run: async (ctx, { status, limit }) => {
+      const r = await ws(ctx).googleReviews({ status, limit: int(limit, 1, 100, 30) });
+      return {
+        connected: r.connected,
+        waiting: r.waiting,
+        items: r.items.map(({ reviewer, comment, ...rest }) => ({ ...rest, ...untrusted({ reviewer, comment }) }))
+      };
+    }
+  }),
+  tool({
+    name: "gbp_review_draft",
+    description: "Ask Maggie for a new reply draft to one Google review (one AI generation). Nothing is posted.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "social",
+    need: autopilotWrite,
+    risk: "W2",
+    gates: ["LLM"],
+    run: async (ctx, { id }) => {
+      const r = await ws(ctx).redraftGoogleReview(int(id, 1, Number.MAX_SAFE_INTEGER, 0));
+      const { reviewer, comment, ...rest } = r;
+      return { ...rest, ...untrusted({ reviewer, comment }) };
+    }
+  }),
+  tool({
+    name: "gbp_review_reply",
+    description: "Post the reply to one Google review on the website's Google Business profile: the draft, or your own text (up to 1,000 characters). Public: everyone who sees the review sees the reply. A review can be answered once here.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer" },
+        text: { type: "string", description: "The reply; leave out to send the draft" }
+      },
+      required: ["id"]
+    },
+    group: "social",
+    need: autopilotWrite,
+    risk: "W3",
+    run: async (ctx, { id, text: text3 }) => {
+      const r = await ws(ctx).replyGoogleReview(
+        int(id, 1, Number.MAX_SAFE_INTEGER, 0),
+        text3 === void 0 ? void 0 : String(text3).slice(0, 1e3)
+      );
+      const { reviewer, comment, ...rest } = r;
+      return { ...rest, ...untrusted({ reviewer, comment }) };
+    }
+  })
+];
+
 // ../../packages/tools/src/publishing.ts
 var read3 = { resource: "autopilot", level: "read" };
 var write4 = { resource: "autopilot", level: "write" };
@@ -11509,12 +11879,18 @@ var socialTools = [
   }),
   tool({
     name: "social_sources_list",
-    description: "Published articles a social post can be made from (optionally matching a search).",
+    description: "Published articles a social post can be made from (optionally matching a search), newest first, up to 30: each with when it was published and used_on, the channels it was shared to in the last 30 days with the latest date (empty = not shared lately; an article is free to share again 30 days after its last post).",
     parameters: { type: "object", properties: { search: { type: "string" } } },
     group: "social",
     need: read5,
     risk: "R0",
-    run: async (ctx, { search }) => (await ws(ctx).socialSources(search ?? "")).items.slice(0, 15).map((s) => ({ id: s.id, ...untrusted({ title: s.title }), url: s.url }))
+    run: async (ctx, { search }) => (await ws(ctx).socialSources(search ?? "")).items.slice(0, 30).map((s) => ({
+      id: s.id,
+      ...untrusted({ title: s.title }),
+      url: s.url,
+      published_at: s.published_at ?? null,
+      used_on: s.used_on ?? {}
+    }))
   }),
   tool({
     name: "social_from_article",
@@ -12490,6 +12866,7 @@ var tools = [
   ...accountTools,
   ...meTools,
   ...reportTools,
+  ...opsTools,
   ...insightTools,
   ...brandTools,
   ...blogTools,
@@ -15891,7 +16268,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.7.7",
+  version: "0.8.0",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -16098,6 +16475,9 @@ function print(value, json, human) {
 // src/mcp.ts
 import { randomBytes } from "node:crypto";
 
+// ../../packages/mcp/src/index.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/util.js
 var util_exports = {};
 __export(util_exports, {
@@ -26055,6 +26435,7 @@ var CONTROL_ARGS = ["workspace", "confirm", "confirmation"];
 var NOT_ON_MCP = /* @__PURE__ */ new Set(["billing_link"]);
 var DESTRUCTIVE = /_(remove|delete|discard|revoke)$/;
 var isAccountTool = (t) => t.need.resource === "account";
+var isStanding = (name) => STANDING_TOOLS.includes(name);
 function inputSchema(t) {
   const props = { ...t.parameters.properties ?? {} };
   props.workspace = WORKSPACE;
@@ -26196,9 +26577,10 @@ function createMcpServer(deps) {
     { capabilities: { tools: {}, resources: {}, prompts: {} }, instructions: INSTRUCTIONS }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => {
-    const keyAccess = (await me().catch(() => null))?.key?.access ?? null;
+    const key = (await me().catch(() => null))?.key;
+    const keyAccess = key?.access ?? null;
     return {
-      tools: offered().filter((t) => !(isWrite(t) && keyAccess === "read")).map((t) => ({
+      tools: offered().filter((t) => !(isWrite(t) && keyAccess === "read")).filter((t) => !(isWrite(t) && key?.standing && !isStanding(t.name))).map((t) => ({
         name: t.name,
         title: t.name.replace(/_/g, " "),
         description: description(t),
@@ -26214,6 +26596,11 @@ function createMcpServer(deps) {
     const t = toolByName.get(name);
     if (!t || excluded(name)) return fail(`There is no tool called ${name}.`);
     try {
+      const agentKey = isWrite(t) && (await me().catch(() => null))?.key?.standing === true;
+      if (agentKey && (args.confirm === true || !isStanding(t.name)))
+        return fail(
+          "This is an agent's key: it can only make the changes its standing permission covers, and can't confirm anything itself. Leave other changes for the person."
+        );
       let approval = null;
       if (isWrite(t) && args.confirm === true) {
         if (deps.previewOnly)
@@ -26238,6 +26625,23 @@ function createMcpServer(deps) {
       const callArgs = approval ? approval.calls[0]?.args ?? {} : toolArgs(args);
       const ctx = { api: api2, domain, client: "mcp" };
       if (!isWrite(t)) return ok(await t.run(ctx, callArgs), viewForTool(t.name) ? { workspace: domain } : void 0);
+      let standing = null;
+      if (!approval && !deps.previewOnly && domain && isStanding(t.name)) {
+        const claim2 = await api2.account?.claimStanding({ website: domain, tool: t.name, units: standingUnits(t.name, callArgs) }).catch(() => null);
+        if (claim2?.allowed) {
+          standing = claim2.permission_id;
+          approval = {
+            id: randomUUID2(),
+            calls: [{ name: t.name, args: callArgs }],
+            principal,
+            domain,
+            expires: Date.now()
+          };
+        } else if (agentKey) {
+          const why = claim2?.reason === "daily_cap" ? `today's limit for ${t.name} is used up (${claim2.daily_cap})` : claim2?.reason === "tool_not_included" ? `the standing permission doesn't include ${t.name}` : claim2 ? `there is no standing permission for ${domain} (${claim2.reason})` : "the permission check failed; try again later";
+          return fail(`Not done: ${why}.`);
+        }
+      }
       if (!approval) {
         const calls = [{ name: t.name, args: callArgs }];
         const summary2 = t.confirm?.(callArgs, "en") ?? t.description;
@@ -26251,7 +26655,7 @@ function createMcpServer(deps) {
           next: "Show the preview to the user. If they agree, call this tool again with confirm: true and this confirmation (it runs exactly what was previewed). Nothing has changed yet."
         });
       }
-      const summary = t.confirm?.(callArgs, "en") ?? t.description;
+      const summary = `${t.confirm?.(callArgs, "en") ?? t.description}${standing ? ` (standing permission #${standing})` : ""}`;
       try {
         const result = await t.run({ api: withIdempotency(api2, approval.id), domain, client: "mcp" }, callArgs);
         const added = t.name === "website_add" ? result?.domain : null;
@@ -26480,7 +26884,7 @@ async function serveStdio(version2) {
 }
 
 // src/run.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { createInterface } from "node:readline/promises";
 var CliError = class extends Error {
   constructor(message, code = 2) {
@@ -26538,7 +26942,7 @@ async function cost(api2, domain, t) {
   return costText({ aiGenerations: ai, aiLeft, credits, creditsLeft }, "en");
 }
 function withIdempotency2(api2) {
-  const base = randomUUID2();
+  const base = randomUUID3();
   let n = 0;
   return {
     ...api2,
@@ -26706,6 +27110,78 @@ program2.command("results").description("results for the last 7 or 30 days").add
     })
   )
 );
+program2.command("reports").description("the report inbox: Maggie's reports and your agents' reports").option("--unread", "only reports nobody has opened yet").action(
+  act(
+    async (opts) => tool2(opts, "reports_list", { unread: Boolean(opts.unread) }, (v) => {
+      const r = v;
+      return `${r.unread} unread
+${table(
+        r.items.map((i) => ({
+          id: i.id,
+          kind: i.kind,
+          created: (i.created_at ?? "").slice(0, 16),
+          title: i.untrusted?.title
+        })),
+        ["id", "kind", "created", "title"]
+      )}`;
+    })
+  )
+);
+program2.command("report <id>").description("read one report (marks it read)").action(
+  act(
+    async (opts, id) => tool2(opts, "report_get", { id: Number(id) }, (v) => {
+      const r = v;
+      return `# ${r.untrusted.title}
+
+${r.untrusted.body_md ?? r.untrusted.summary ?? ""}`;
+    })
+  )
+);
+program2.command("reviews").description("Google Business reviews and Maggie's reply drafts").addOption(new Option("--status <status>", "none, drafted or sent").choices(["none", "drafted", "sent"])).action(
+  act(
+    async (opts) => tool2(opts, "gbp_reviews_list", opts.status ? { status: opts.status } : {}, (v) => {
+      const r = v;
+      if (!r.connected) return "No Google Business profile connected for this website.";
+      return `${r.waiting} waiting for a reply
+${table(
+        r.items.map((i) => ({
+          id: i.id,
+          stars: i.rating ?? "",
+          from: i.untrusted?.reviewer ?? "",
+          reply: i.reply_status
+        })),
+        ["id", "stars", "from", "reply"]
+      )}`;
+    })
+  )
+);
+var ops = program2.command("ops").description("Ops Autopilot: Maggie's daily operations on the website");
+ops.command("ls", { isDefault: true }).description("each feature, on or off, and its last run").action(
+  act(
+    async (opts) => tool2(opts, "ops_autopilot_get", {}, (v) => {
+      const r = v;
+      if (!r.available) return "Ops Autopilot isn't available for this website yet.";
+      return table(
+        r.features.map((f) => ({
+          feature: f.feature,
+          on: f.on ? "on" : "off",
+          when: f.when ?? "",
+          last: f.last_run ? `${f.last_run.status} ${(f.last_run.at ?? "").slice(0, 16)}` : ""
+        })),
+        ["feature", "on", "when", "last"]
+      );
+    })
+  )
+);
+ops.command("set <feature> <state>").description("switch one feature on or off (e.g. cmo ops set top_up off)").action(
+  act(async (opts, feature, state) => {
+    if (!["on", "off"].includes(state)) throw new CliError("State is on or off.", 2);
+    return tool2(opts, "ops_autopilot_set", { features: { [feature]: state === "on" } }, (v) => {
+      const f = v.features.find((x) => x.feature === feature);
+      return f ? `${feature}: ${f.on ? "on" : "off"}` : "Saved.";
+    });
+  })
+);
 var ideas = program2.command("ideas").description("blog post ideas");
 ideas.command("ls", { isDefault: true }).description("ideas waiting to be planned").option("--page <n>", "page", "1").action(act(async (opts) => tool2(opts, "ideas_list", { page: Number(opts.page) })));
 ideas.command("add <urlOrText...>").description("add an idea from a URL or a sentence").action(

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.7.7",
+	"version": "0.8.0",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",