@cmo-so/cli 0.7.7 → 0.8.1

package/dist/cmo.mjs

@@ -5005,12 +5005,12 @@ var require_limitNumber = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     var codegen_1 = require_codegen();
-    var ops = codegen_1.operators;
+    var ops2 = codegen_1.operators;
     var KWDs = {
-      maximum: { okStr: "<=", ok: ops.LTE, fail: ops.GT },
-      minimum: { okStr: ">=", ok: ops.GTE, fail: ops.LT },
-      exclusiveMaximum: { okStr: "<", ok: ops.LT, fail: ops.GTE },
-      exclusiveMinimum: { okStr: ">", ok: ops.GT, fail: ops.LTE }
+      maximum: { okStr: "<=", ok: ops2.LTE, fail: ops2.GT },
+      minimum: { okStr: ">=", ok: ops2.GTE, fail: ops2.LT },
+      exclusiveMaximum: { okStr: "<", ok: ops2.LT, fail: ops2.GTE },
+      exclusiveMinimum: { okStr: ">", ok: ops2.GT, fail: ops2.LTE }
     };
     var error2 = {
       message: ({ keyword, schemaCode }) => (0, codegen_1.str)`must be ${KWDs[keyword].okStr} ${schemaCode}`,
@@ -7090,12 +7090,12 @@ var require_limit = __commonJS({
     exports.formatLimitDefinition = void 0;
     var ajv_1 = require_ajv();
     var codegen_1 = require_codegen();
-    var ops = codegen_1.operators;
+    var ops2 = codegen_1.operators;
     var KWDs = {
-      formatMaximum: { okStr: "<=", ok: ops.LTE, fail: ops.GT },
-      formatMinimum: { okStr: ">=", ok: ops.GTE, fail: ops.LT },
-      formatExclusiveMaximum: { okStr: "<", ok: ops.LT, fail: ops.GTE },
-      formatExclusiveMinimum: { okStr: ">", ok: ops.GT, fail: ops.LTE }
+      formatMaximum: { okStr: "<=", ok: ops2.LTE, fail: ops2.GT },
+      formatMinimum: { okStr: ">=", ok: ops2.GTE, fail: ops2.LT },
+      formatExclusiveMaximum: { okStr: "<", ok: ops2.LT, fail: ops2.GTE },
+      formatExclusiveMinimum: { okStr: ">", ok: ops2.GT, fail: ops2.LTE }
     };
     var error2 = {
       message: ({ keyword, schemaCode }) => (0, codegen_1.str)`should be ${KWDs[keyword].okStr} ${schemaCode}`,
@@ -7353,6 +7353,23 @@ function createApi({ baseUrl, session: session2, fetch: fetchImpl = globalThis.f
       apps: () => request("/v1/me/apps"),
       revokeApp: (grantId) => request(`/v1/me/apps/${encodeURIComponent(grantId)}`, { method: "DELETE" }),
       invoices: () => request("/v1/me/invoices"),
+      /** Standing permissions: one of your keys may run some writes on one website without a preview, up to a daily cap. */
+      standing: () => request(
+        "/v1/me/standing"
+      ),
+      /** From another key than `key_id` (409/422 otherwise); replaces any earlier one for that key and website. */
+      grantStanding: (p) => request("/v1/me/standing", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(p)
+      }),
+      revokeStanding: (id) => request(`/v1/me/standing/${id}`, { method: "DELETE" }),
+      /** The MCP, just before a write: records one use when the key's permission covers it. */
+      claimStanding: (p) => request("/v1/me/standing/claim", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(p)
+      }),
       /**
        * Take a website off your own list (archives your claim; reversible on ai.cmo.so). Nothing changes for
        * anyone else; a team member also leaves the team.
@@ -7936,9 +7953,7 @@ function domainApi(api2, domain) {
     /** Disconnect the website's LinkedIn account. */
     disconnectLinkedIn: (connectionId) => api2.request(`${base}/social/linkedin/${connectionId}`, { method: "DELETE" }),
     /** Published articles a LinkedIn post can be made from. */
-    socialSources: (search = "") => api2.request(
-      `${base}/social/sources?search=${encodeURIComponent(search)}`
-    ),
+    socialSources: (search = "") => api2.request(`${base}/social/sources?search=${encodeURIComponent(search)}`),
     /** Maggie writes a post about one article for each channel; `failed` lists a channel that could not be written while the others were. */
     socialFromPost: (sourcePostId, channels) => post(`${base}/social/from-post`, {
       source_post_id: sourcePostId,
@@ -8164,7 +8179,39 @@ function domainApi(api2, domain) {
     startPromptCheck: (prompt) => post(`${base}/visibility/prompt-check`, { prompt }),
     promptCheck: (taskId) => api2.request(`${base}/visibility/prompt-check/${encodeURIComponent(taskId)}`),
     report: (range = "30d") => api2.request(`${base}/report?range=${range}`),
-    platform: () => api2.request(`${base}/platform`)
+    platform: () => api2.request(`${base}/platform`),
+    // Ops Autopilot (cmo-so docs/prd/ops-autopilot.md): Maggie's daily operations on the website.
+    opsAutopilot: () => api2.request(`${base}/ops-autopilot`),
+    setOpsAutopilot: (s) => put(`${base}/ops-autopilot`, s),
+    // The report inbox: Maggie's reports and agents' reports.
+    reports: (q2 = {}) => {
+      const params = new URLSearchParams();
+      if (q2.kind) params.set("kind", q2.kind);
+      if (q2.unread) params.set("unread", "true");
+      if (q2.limit) params.set("limit", String(q2.limit));
+      const qs = params.toString();
+      return api2.request(`${base}/reports${qs ? `?${qs}` : ""}`);
+    },
+    inboxReport: (id) => api2.request(`${base}/reports/${id}`),
+    saveReport: (r) => post(`${base}/reports`, r),
+    readAllReports: () => post(`${base}/reports/read-all`, {}),
+    /** One social post in full (social_list clips its text). */
+    socialPost: (id) => api2.request(`${base}/social/${id}`),
+    // Ops Autopilot: ideas the weekly clean-up archived (restorable), post health, Google reviews.
+    ideaCleanup: (limit = 50) => api2.request(`${base}/idea-cleanup?limit=${limit}`),
+    restoreIdeaCleanup: (id) => post(`${base}/idea-cleanup/${id}/restore`, {}),
+    postHealth: (limit = 30) => api2.request(`${base}/post-health?limit=${limit}`),
+    googleReviews: (q2 = {}) => {
+      const params = new URLSearchParams();
+      if (q2.status) params.set("status", q2.status);
+      if (q2.limit) params.set("limit", String(q2.limit));
+      const qs = params.toString();
+      return api2.request(
+        `${base}/google-business/reviews${qs ? `?${qs}` : ""}`
+      );
+    },
+    redraftGoogleReview: (id) => post(`${base}/google-business/reviews/${id}/draft`, {}),
+    replyGoogleReview: (id, text3) => post(`${base}/google-business/reviews/${id}/reply`, text3 === void 0 ? {} : { text: text3 })
   };
 }
 
@@ -8355,6 +8402,13 @@ function sitemapCheckLine(check) {
 
 // ../../packages/domain/src/copy/maggie.ts
 var q = (s) => `\u201C${String(s ?? "").slice(0, 120)}\u201D`;
+var CHANNEL_EN = {
+  linkedin: "LinkedIn",
+  facebook: "Facebook",
+  instagram: "Instagram",
+  google_business: "Google Business"
+};
+var CHANNEL_ZH = { ...CHANNEL_EN, google_business: "Google \u5546\u5BB6" };
 var named = (title, id) => {
   if (title != null && String(title).trim()) return ` ${q(title)}`;
   const s = String(id ?? "").trim();
@@ -8538,6 +8592,48 @@ var confirmCopy = {
     en: (a) => a.paused ? "Pause publishing blog posts." : "Resume publishing blog posts.",
     "zh-Hant": (a) => a.paused ? "\u66AB\u505C\u767C\u4F48\u90E8\u843D\u683C\u6587\u7AE0\u3002" : "\u6062\u5FA9\u767C\u4F48\u90E8\u843D\u683C\u6587\u7AE0\u3002"
   },
+  ops_autopilot_set: {
+    en: (a) => {
+      const f = Object.entries(a.features ?? {});
+      const on2 = f.filter(([, v]) => v).map(([k]) => k.replace(/_/g, " "));
+      const off = f.filter(([, v]) => !v).map(([k]) => k.replace(/_/g, " "));
+      const parts = [
+        on2.length ? `turn on ${on2.join(", ")}` : "",
+        off.length ? `turn off ${off.join(", ")}` : "",
+        a.weekly_email === true ? "email the Monday report to the owner" : "",
+        a.weekly_email === false ? "stop emailing the Monday report" : ""
+      ].filter(Boolean);
+      return `Ops Autopilot: ${parts.join("; ") || "no change"}.`;
+    },
+    "zh-Hant": (a) => {
+      const f = Object.entries(a.features ?? {});
+      const on2 = f.filter(([, v]) => v).map(([k]) => k);
+      const off = f.filter(([, v]) => !v).map(([k]) => k);
+      const parts = [
+        on2.length ? `\u958B\u555F ${on2.join("\u3001")}` : "",
+        off.length ? `\u95DC\u9589 ${off.join("\u3001")}` : "",
+        a.weekly_email === true ? "\u628A\u9031\u4E00\u5831\u544A\u5BC4\u7D66\u7DB2\u7AD9\u64C1\u6709\u8005" : "",
+        a.weekly_email === false ? "\u4E0D\u518D\u5BC4\u9031\u4E00\u5831\u544A" : ""
+      ].filter(Boolean);
+      return `Ops Autopilot\uFF1A${parts.join("\uFF1B") || "\u6C92\u6709\u8B8A\u66F4"}\u3002`;
+    }
+  },
+  idea_restore_cleanup: {
+    en: (a) => `Bring back the archived idea #${a.id} to the waiting list.`,
+    "zh-Hant": (a) => `\u628A\u5DF2\u6B78\u6A94\u7684 idea #${a.id} \u653E\u56DE\u7B49\u5F85\u5217\u8868\u3002`
+  },
+  gbp_review_draft: {
+    en: (a) => `Write a new reply draft for Google review #${a.id} (one AI generation). Nothing is posted.`,
+    "zh-Hant": (a) => `\u70BA Google \u8A55\u50F9 #${a.id} \u91CD\u5BEB\u56DE\u8986\u8349\u7A3F\uFF08\u7528\u4E00\u6B21 AI \u751F\u6210\uFF09\uFF0C\u4E0D\u6703\u767C\u4F48\u3002`
+  },
+  gbp_review_reply: {
+    en: (a) => `Post ${a.text ? `the reply ${q(a.text)}` : "Maggie's draft"} under Google review #${a.id}. Everyone who sees the review will see it.`,
+    "zh-Hant": (a) => `\u5728 Google \u8A55\u50F9 #${a.id} \u4E0B\u767C\u4F48${a.text ? `\u56DE\u8986 ${q(a.text)}` : " Maggie \u7684\u8349\u7A3F"}\uFF0C\u770B\u5230\u9019\u5247\u8A55\u50F9\u7684\u4EBA\u90FD\u770B\u5F97\u5230\u3002`
+  },
+  report_save: {
+    en: (a) => `Save the report ${q(a.title)} to the website's inbox (the owner gets a notification).`,
+    "zh-Hant": (a) => `\u628A\u5831\u544A ${q(a.title)} \u5B58\u9032\u7DB2\u7AD9\u7684\u6536\u4EF6\u5323\uFF08\u64C1\u6709\u8005\u6703\u6536\u5230\u901A\u77E5\uFF09\u3002`
+  },
   posts_per_day_set: {
     en: (a) => `Publish ${a.posts_per_day} blog post${Number(a.posts_per_day) === 1 ? "" : "s"} a day.`,
     "zh-Hant": (a) => `\u6BCF\u5929\u767C\u4F48 ${a.posts_per_day} \u7BC7\u90E8\u843D\u683C\u6587\u7AE0\u3002`
@@ -8712,8 +8808,8 @@ var confirmCopy = {
     "zh-Hant": () => "\u7522\u751F\u4E00\u500B\u9023\u63A5 LinkedIn \u7684\u9023\u7D50\u3002"
   },
   social_approve_all: {
-    en: () => "Approve every LinkedIn post waiting for your OK. They go out one by one at your posting times, where your network can see them.",
-    "zh-Hant": () => "\u6279\u51C6\u6240\u6709\u7B49\u4F60\u78BA\u8A8D\u7684 LinkedIn \u8CBC\u6587\u3002\u5B83\u5011\u6703\u5728\u63A5\u4E0B\u4F86\u7684\u767C\u6587\u6642\u9593\u9010\u7BC7\u767C\u51FA\uFF0C\u4F60\u7684\u4EBA\u8108\u90FD\u770B\u5F97\u5230\u3002"
+    en: (a) => `Approve every ${a.channel ? `${CHANNEL_EN[String(a.channel)] ?? a.channel} ` : ""}post waiting for your OK${a.channel ? "" : ", on every channel"}, including any held for a picture check. They go out one by one at each channel's posting times, where people can see them.`,
+    "zh-Hant": (a) => `\u6279\u51C6\u6240\u6709\u7B49\u4F60\u78BA\u8A8D\u7684${a.channel ? ` ${CHANNEL_ZH[String(a.channel)] ?? a.channel} ` : "\uFF08\u6240\u6709\u6E20\u9053\uFF09"}\u8CBC\u6587\uFF0C\u5305\u62EC\u56E0\u5716\u7247\u6AA2\u67E5\u800C\u66AB\u505C\u7684\u3002\u5B83\u5011\u6703\u5728\u5404\u6E20\u9053\u63A5\u4E0B\u4F86\u7684\u767C\u6587\u6642\u9593\u9010\u7BC7\u767C\u51FA\uFF0C\u5927\u5BB6\u90FD\u770B\u5F97\u5230\u3002`
   },
   series_create: {
     en: (a) => `Plan and write a LinkedIn series about ${q(a.brief)}: ${a.count || 3} posts that read as a series. Each waits in Review for your OK. Uses one AI generation a post.`,
@@ -8782,6 +8878,18 @@ var confirmCopy = {
     en: (a) => `Disconnect ${q(a.app)} from your account. It stops working now and has to be connected again.`,
     "zh-Hant": (a) => `\u5F9E\u4F60\u7684\u5E33\u865F\u65B7\u958B ${q(a.app)}\uFF0C\u5B83\u6703\u7ACB\u5373\u505C\u7528\uFF0C\u4E4B\u5F8C\u8981\u91CD\u65B0\u9023\u63A5\u3002`
   },
+  standing_permission_set: {
+    en: (a) => `Let the key ${q(a.key_name)} run ${Object.entries(a.tools ?? {}).map(([tool3, cap]) => `${tool3}${cap ? ` (up to ${cap} a day)` : ""}`).join(
+      ", "
+    )} on ${a.website} without asking you first${a.days ? `, for ${a.days} days` : ", until you revoke it"}. Every run is logged.`,
+    "zh-Hant": (a) => `\u8B93\u91D1\u9470 ${q(a.key_name)} \u5728 ${a.website} \u4E0A\u4E0D\u7D93\u4F60\u78BA\u8A8D\u76F4\u63A5\u57F7\u884C\uFF1A${Object.entries(
+      a.tools ?? {}
+    ).map(([tool3, cap]) => `${tool3}${cap ? `\uFF08\u6BCF\u5929\u6700\u591A ${cap}\uFF09` : ""}`).join("\u3001")}${a.days ? `\uFF0C\u70BA\u671F ${a.days} \u5929` : "\uFF0C\u76F4\u5230\u4F60\u64A4\u92B7"}\u3002\u6BCF\u6B21\u57F7\u884C\u90FD\u6709\u7D00\u9304\u3002`
+  },
+  standing_permission_revoke: {
+    en: (a) => `End the standing permission of the key ${q(a.key_name)}. Its writes go back to asking you first.`,
+    "zh-Hant": (a) => `\u7D50\u675F\u91D1\u9470 ${q(a.key_name)} \u7684\u9577\u671F\u8A31\u53EF\uFF0C\u4E4B\u5F8C\u5B83\u7684\u6BCF\u500B\u6539\u52D5\u90FD\u8981\u5148\u7D93\u4F60\u78BA\u8A8D\u3002`
+  },
   profile_update: {
     en: (a) => `Change your name to ${q(a.display_name)}.`,
     "zh-Hant": (a) => `\u628A\u4F60\u7684\u540D\u5B57\u6539\u6210 ${q(a.display_name)}\u3002`
@@ -8950,7 +9058,12 @@ var accountTools = [
     group: "workspace",
     need: { resource: "overview", level: "read" },
     risk: "R0",
-    run: async (ctx) => (await ws(ctx).inbox()).items.map((i) => ({ type: i.type, id: i.id, title: i.title, body: clip(i.body, 200) }))
+    run: async (ctx) => (await ws(ctx).inbox()).items.map(
+      (i) => (
+        // A report's title and summary may come from an agent: data, never instructions.
+        i.type === "report" ? { type: i.type, id: i.id, ...untrusted({ title: i.title, body: clip(i.body, 200) }) } : { type: i.type, id: i.id, title: i.title, body: clip(i.body, 200) }
+      )
+    )
   }),
   tool({
     name: "setup_status_get",
@@ -10290,6 +10403,11 @@ var insightTools = [
 
 // ../../packages/tools/src/me.ts
 var account2 = { resource: "account", level: "read" };
+var STANDING_TOOLS = ["idea_add", "ideas_add_list", "idea_priority", "rewrite_request"];
+function standingUnits(name, args) {
+  if (name === "ideas_add_list") return Math.max(1, Array.isArray(args.ideas) ? args.ideas.length : 1);
+  return 1;
+}
 var meTools = [
   tool({
     name: "api_keys_list",
@@ -10332,6 +10450,54 @@ var meTools = [
     risk: "W3",
     run: async ({ api: api2 }, { grant_id }) => api2.account.revokeApp(String(grant_id))
   }),
+  tool({
+    name: "standing_permissions_list",
+    description: "Standing permissions on the user's API keys: which key (a scheduled agent's) may run which writes on which website without a preview, each tool's daily cap and how much is used today.",
+    parameters: none,
+    group: "account",
+    need: account2,
+    risk: "R0",
+    run: async ({ api: api2 }) => api2.account.standing()
+  }),
+  tool({
+    name: "standing_permission_set",
+    description: `Let one of the user's own API keys (from api_keys_list; a scheduled agent's, not the one in use) run some writes on one website without a preview, each up to a daily cap: ${STANDING_TOOLS.join(", ")}. Replaces any earlier one for that key and website. Leave a cap empty for the default (ideas 10 a day, priority changes 25, rewrites 2). Every run is in the action log; standing_permission_revoke ends it.`,
+    parameters: {
+      type: "object",
+      properties: {
+        key_id: { type: "integer" },
+        key_name: { type: "string", description: "The key's name, for the card" },
+        website: { type: "string", description: "The website (domain)" },
+        tools: {
+          type: "object",
+          description: "Daily cap per tool; include only the tools to allow (0 or empty for the default).",
+          properties: Object.fromEntries(STANDING_TOOLS.map((name) => [name, { type: "integer" }]))
+        },
+        days: { type: "integer", description: "How long it lasts (1-366); leave out for until revoked" }
+      },
+      required: ["key_id", "key_name", "website", "tools"]
+    },
+    group: "account",
+    need: account2,
+    risk: "W3",
+    run: async ({ api: api2 }, { key_id, website, tools: tools2, days }) => api2.account.grantStanding({ key_id: Number(key_id), website: String(website), tools: tools2, days: days ?? null })
+  }),
+  tool({
+    name: "standing_permission_revoke",
+    description: "End a standing permission (from standing_permissions_list): its key goes back to previews for every write.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer" },
+        key_name: { type: "string", description: "The key's name, for the card" }
+      },
+      required: ["id", "key_name"]
+    },
+    group: "account",
+    need: account2,
+    risk: "W2",
+    run: async ({ api: api2 }, { id }) => api2.account.revokeStanding(Number(id))
+  }),
   tool({
     name: "invoices_list",
     description: "The user's latest invoices across the subscriptions they pay for: date, amount, status and a link to view or download each.",
@@ -10472,6 +10638,236 @@ var memoryTools = [
 ];
 var MEMORY_TOOLS = new Set(memoryTools.map((t) => t.name));
 
+// ../../packages/tools/src/ops.ts
+var overview = { resource: "overview", level: "read" };
+var autopilotWrite = { resource: "autopilot", level: "write" };
+var reportWrite = { resource: "report", level: "write" };
+var OPS_FEATURES = [
+  "top_up",
+  "precheck",
+  "retry",
+  "weekly_report",
+  "gsc_ideas",
+  "ai_visibility",
+  "idea_cleanup",
+  "competitor_watch",
+  "insight_memory",
+  "post_health",
+  "gbp_reviews"
+];
+var opsTools = [
+  tool({
+    name: "ops_autopilot_get",
+    description: "Maggie's daily operations on the website (Ops Autopilot): whether it is available, and each feature with on/off, when it runs and how its last run went. Features: top_up (fills each social channel's empty slots for the week every morning), precheck (checks each social post before it goes out: no links or phone numbers on Google, a picture on Instagram, no placeholders or promised rankings; holds it as a draft if not), retry (tries a failed post once more), weekly_report (Monday report in the inbox), gsc_ideas (Search Console queries near page one become blog ideas), ai_visibility (weekly AI answer check), idea_cleanup (archives stale low-priority ideas weekly, restorable), competitor_watch (competitors' new articles become ideas), insight_memory (what performed best is remembered), post_health (checks new posts once they're live), gbp_reviews (new Google reviews with reply drafts).",
+    parameters: none,
+    group: "workspace",
+    need: overview,
+    risk: "R0",
+    run: async (ctx) => ws(ctx).opsAutopilot()
+  }),
+  tool({
+    name: "ops_autopilot_set",
+    description: "Switch Ops Autopilot features on or off for this website, and whether the Monday report is also emailed to the website's owner. Only features from ops_autopilot_get; a feature that isn't available yet can be switched but won't run.",
+    parameters: {
+      type: "object",
+      properties: {
+        features: {
+          type: "object",
+          description: `Feature \u2192 true (on) or false (off). Features: ${OPS_FEATURES.join(", ")}`,
+          properties: Object.fromEntries(OPS_FEATURES.map((f) => [f, { type: "boolean" }]))
+        },
+        weekly_email: { type: "boolean", description: "Also email the Monday report to the website's owner" }
+      }
+    },
+    group: "workspace",
+    need: autopilotWrite,
+    risk: "W2",
+    idempotent: true,
+    run: async (ctx, { features, weekly_email }) => {
+      const known = Object.fromEntries(
+        Object.entries(features ?? {}).filter(([k]) => OPS_FEATURES.includes(k)).map(([k, v]) => [k, Boolean(v)])
+      );
+      return ws(ctx).setOpsAutopilot({
+        ...Object.keys(known).length ? { features: known } : {},
+        ...weekly_email === void 0 ? {} : { weekly_email: Boolean(weekly_email) }
+      });
+    }
+  }),
+  tool({
+    name: "reports_list",
+    description: "The website's report inbox, newest first: Maggie's own reports (weekly, daily operations, post health, Google reviews) and reports agents saved. Title and summary each; read one with report_get.",
+    parameters: {
+      type: "object",
+      properties: {
+        kind: {
+          type: "string",
+          enum: ["weekly", "daily_ops", "agent", "post_health", "reviews", "ai_visibility", "search"]
+        },
+        unread: { type: "boolean", description: "Only reports nobody has opened yet" },
+        limit: { type: "integer", minimum: 1, maximum: 50 }
+      }
+    },
+    group: "reports",
+    need: overview,
+    risk: "R0",
+    run: async (ctx, { kind, unread, limit }) => {
+      const r = await ws(ctx).reports({ kind, unread, limit: int(limit, 1, 50, 20) });
+      return {
+        unread: r.unread,
+        items: r.items.map(({ title, summary, ...rest }) => ({ ...rest, ...untrusted({ title, summary }) }))
+      };
+    }
+  }),
+  tool({
+    name: "report_get",
+    description: "One report in full (its text in Markdown and any data); marks it read.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "reports",
+    need: overview,
+    risk: "R0",
+    run: async (ctx, { id }) => {
+      const r = await ws(ctx).inboxReport(int(id, 1, Number.MAX_SAFE_INTEGER, 0));
+      const { title, summary, body_md, data, ...rest } = r;
+      return { ...rest, ...untrusted({ title, summary, body_md, data }) };
+    }
+  }),
+  tool({
+    name: "report_save",
+    description: "Save a report to the website's inbox (for an agent's scheduled run: what it found and did). The owner gets a push and sees it in the app's Inbox. Up to 20 agent reports a day per website, 50,000 characters each. Saving changes nothing else.",
+    parameters: {
+      type: "object",
+      properties: {
+        title: { type: "string", description: "Short, e.g. 'Daily analysis, 22 Oct'" },
+        summary: { type: "string", description: "One or two sentences (up to 500 characters) shown in the Inbox" },
+        body_md: { type: "string", description: "The full report in Markdown" }
+      },
+      required: ["title"]
+    },
+    group: "reports",
+    need: reportWrite,
+    risk: "W1",
+    run: async (ctx, { title, summary, body_md }) => ws(ctx).saveReport({
+      title: String(title ?? "").slice(0, 200),
+      ...summary ? { summary: String(summary).slice(0, 500) } : {},
+      ...body_md ? { body_md: String(body_md).slice(0, 5e4) } : {}
+    })
+  }),
+  tool({
+    name: "idea_cleanup_list",
+    description: "Ideas Ops Autopilot archived in its weekly clean-up (stale, low-priority ideas Maggie found herself; never ones a person added), newest first, each with why. Bring one back with idea_restore_cleanup.",
+    parameters: { type: "object", properties: { limit: { type: "integer", minimum: 1, maximum: 200 } } },
+    group: "blog",
+    need: { resource: "autopilot", level: "read" },
+    risk: "R0",
+    run: async (ctx, { limit }) => {
+      const r = await ws(ctx).ideaCleanup(int(limit, 1, 200, 50));
+      return { items: r.items.map(({ reason, ...rest }) => ({ ...rest, ...untrusted({ reason }) })) };
+    }
+  }),
+  tool({
+    name: "idea_restore_cleanup",
+    description: "Bring an idea the weekly clean-up archived back to the waiting list (id from idea_cleanup_list).",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "blog",
+    need: autopilotWrite,
+    risk: "W1",
+    idempotent: true,
+    run: async (ctx, { id }) => ws(ctx).restoreIdeaCleanup(int(id, 1, Number.MAX_SAFE_INTEGER, 0))
+  }),
+  tool({
+    name: "post_health_get",
+    description: "Checks of the blog posts that went live in the last week (Ops Autopilot, daily): whether each page opens, and has a title, a meta description, a canonical link to itself, an og:image and working links on the site. Each with its issues in plain words.",
+    parameters: { type: "object", properties: { limit: { type: "integer", minimum: 1, maximum: 100 } } },
+    group: "reports",
+    need: { resource: "report", level: "read" },
+    risk: "R0",
+    run: async (ctx, { limit }) => ws(ctx).postHealth(int(limit, 1, 100, 30))
+  }),
+  tool({
+    name: "gbp_reviews_list",
+    description: "Reviews of the website's Google Business profile (read every 6 hours by Ops Autopilot), newest first, each with Maggie's reply draft or the reply already sent. status: none (no reply yet), drafted (a draft waits to be sent), sent.",
+    parameters: {
+      type: "object",
+      properties: {
+        status: { type: "string", enum: ["none", "drafted", "sent", "failed"] },
+        limit: { type: "integer", minimum: 1, maximum: 100 }
+      }
+    },
+    group: "social",
+    need: { resource: "autopilot", level: "read" },
+    risk: "R0",
+    run: async (ctx, { status, limit }) => {
+      const r = await ws(ctx).googleReviews({ status, limit: int(limit, 1, 100, 30) });
+      return {
+        connected: r.connected,
+        waiting: r.waiting,
+        items: r.items.map(({ reviewer, comment, ...rest }) => ({ ...rest, ...untrusted({ reviewer, comment }) }))
+      };
+    }
+  }),
+  tool({
+    name: "gbp_review_draft",
+    description: "Ask Maggie for a new reply draft to one Google review (one AI generation). Nothing is posted.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "social",
+    need: autopilotWrite,
+    risk: "W2",
+    gates: ["LLM"],
+    run: async (ctx, { id }) => {
+      const r = await ws(ctx).redraftGoogleReview(int(id, 1, Number.MAX_SAFE_INTEGER, 0));
+      const { reviewer, comment, ...rest } = r;
+      return { ...rest, ...untrusted({ reviewer, comment }) };
+    }
+  }),
+  tool({
+    name: "gbp_review_reply",
+    description: "Post the reply to one Google review on the website's Google Business profile: the draft, or your own text (up to 1,000 characters). Public: everyone who sees the review sees the reply. A review can be answered once here.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer" },
+        text: { type: "string", description: "The reply; leave out to send the draft" }
+      },
+      required: ["id"]
+    },
+    group: "social",
+    need: autopilotWrite,
+    risk: "W3",
+    run: async (ctx, { id, text: text3 }) => {
+      const r = await ws(ctx).replyGoogleReview(
+        int(id, 1, Number.MAX_SAFE_INTEGER, 0),
+        text3 === void 0 ? void 0 : String(text3).slice(0, 1e3)
+      );
+      const { reviewer, comment, ...rest } = r;
+      return { ...rest, ...untrusted({ reviewer, comment }) };
+    }
+  }),
+  tool({
+    name: "social_post_get",
+    description: "One social post in full: its whole text (social_list shortens it to about 300 characters), its pictures, its link, its channel and status, when it goes out, and why it was held before going out, if it was. Use it to check a post's ending (a web address or phone number on Google, a cut-off sentence) before approving or fixing it.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "social",
+    need: { resource: "autopilot", level: "read" },
+    risk: "R0",
+    run: async (ctx, { id }) => {
+      const p = await ws(ctx).socialPost(int(id, 1, Number.MAX_SAFE_INTEGER, 0));
+      return {
+        id: p.id,
+        channel: p.provider,
+        status: p.status,
+        eta: p.eta ?? null,
+        text: p.social_copy,
+        characters: String(p.social_copy ?? "").length,
+        picture: p.image_url ?? null,
+        pictures: p.image_urls ?? [],
+        link: p.cta_url ?? p.source_url ?? null,
+        held: p.held ?? null,
+        failure: p.failure_message ?? null
+      };
+    }
+  })
+];
+
 // ../../packages/tools/src/publishing.ts
 var read3 = { resource: "autopilot", level: "read" };
 var write4 = { resource: "autopilot", level: "write" };
@@ -11509,12 +11905,18 @@ var socialTools = [
   }),
   tool({
     name: "social_sources_list",
-    description: "Published articles a social post can be made from (optionally matching a search).",
+    description: "Published articles a social post can be made from (optionally matching a search), newest first, up to 30: each with when it was published and used_on, the channels it was shared to in the last 30 days with the latest date (empty = not shared lately; an article is free to share again 30 days after its last post).",
     parameters: { type: "object", properties: { search: { type: "string" } } },
     group: "social",
     need: read5,
     risk: "R0",
-    run: async (ctx, { search }) => (await ws(ctx).socialSources(search ?? "")).items.slice(0, 15).map((s) => ({ id: s.id, ...untrusted({ title: s.title }), url: s.url }))
+    run: async (ctx, { search }) => (await ws(ctx).socialSources(search ?? "")).items.slice(0, 30).map((s) => ({
+      id: s.id,
+      ...untrusted({ title: s.title }),
+      url: s.url,
+      published_at: s.published_at ?? null,
+      used_on: s.used_on ?? {}
+    }))
   }),
   tool({
     name: "social_from_article",
@@ -12490,6 +12892,7 @@ var tools = [
   ...accountTools,
   ...meTools,
   ...reportTools,
+  ...opsTools,
   ...insightTools,
   ...brandTools,
   ...blogTools,
@@ -15891,7 +16294,7 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.7.7",
+  version: "0.8.1",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -16098,6 +16501,9 @@ function print(value, json, human) {
 // src/mcp.ts
 import { randomBytes } from "node:crypto";
 
+// ../../packages/mcp/src/index.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+
 // ../../node_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/util.js
 var util_exports = {};
 __export(util_exports, {
@@ -26055,6 +26461,7 @@ var CONTROL_ARGS = ["workspace", "confirm", "confirmation"];
 var NOT_ON_MCP = /* @__PURE__ */ new Set(["billing_link"]);
 var DESTRUCTIVE = /_(remove|delete|discard|revoke)$/;
 var isAccountTool = (t) => t.need.resource === "account";
+var isStanding = (name) => STANDING_TOOLS.includes(name);
 function inputSchema(t) {
   const props = { ...t.parameters.properties ?? {} };
   props.workspace = WORKSPACE;
@@ -26196,9 +26603,10 @@ function createMcpServer(deps) {
     { capabilities: { tools: {}, resources: {}, prompts: {} }, instructions: INSTRUCTIONS }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => {
-    const keyAccess = (await me().catch(() => null))?.key?.access ?? null;
+    const key = (await me().catch(() => null))?.key;
+    const keyAccess = key?.access ?? null;
     return {
-      tools: offered().filter((t) => !(isWrite(t) && keyAccess === "read")).map((t) => ({
+      tools: offered().filter((t) => !(isWrite(t) && keyAccess === "read")).filter((t) => !(isWrite(t) && key?.standing && !isStanding(t.name))).map((t) => ({
         name: t.name,
         title: t.name.replace(/_/g, " "),
         description: description(t),
@@ -26214,6 +26622,11 @@ function createMcpServer(deps) {
     const t = toolByName.get(name);
     if (!t || excluded(name)) return fail(`There is no tool called ${name}.`);
     try {
+      const agentKey = isWrite(t) && (await me().catch(() => null))?.key?.standing === true;
+      if (agentKey && (args.confirm === true || !isStanding(t.name)))
+        return fail(
+          "This is an agent's key: it can only make the changes its standing permission covers, and can't confirm anything itself. Leave other changes for the person."
+        );
       let approval = null;
       if (isWrite(t) && args.confirm === true) {
         if (deps.previewOnly)
@@ -26238,6 +26651,23 @@ function createMcpServer(deps) {
       const callArgs = approval ? approval.calls[0]?.args ?? {} : toolArgs(args);
       const ctx = { api: api2, domain, client: "mcp" };
       if (!isWrite(t)) return ok(await t.run(ctx, callArgs), viewForTool(t.name) ? { workspace: domain } : void 0);
+      let standing = null;
+      if (!approval && !deps.previewOnly && domain && isStanding(t.name)) {
+        const claim2 = await api2.account?.claimStanding({ website: domain, tool: t.name, units: standingUnits(t.name, callArgs) }).catch(() => null);
+        if (claim2?.allowed) {
+          standing = claim2.permission_id;
+          approval = {
+            id: randomUUID2(),
+            calls: [{ name: t.name, args: callArgs }],
+            principal,
+            domain,
+            expires: Date.now()
+          };
+        } else if (agentKey) {
+          const why = claim2?.reason === "daily_cap" ? `today's limit for ${t.name} is used up (${claim2.daily_cap})` : claim2?.reason === "tool_not_included" ? `the standing permission doesn't include ${t.name}` : claim2 ? `there is no standing permission for ${domain} (${claim2.reason})` : "the permission check failed; try again later";
+          return fail(`Not done: ${why}.`);
+        }
+      }
       if (!approval) {
         const calls = [{ name: t.name, args: callArgs }];
         const summary2 = t.confirm?.(callArgs, "en") ?? t.description;
@@ -26251,7 +26681,7 @@ function createMcpServer(deps) {
           next: "Show the preview to the user. If they agree, call this tool again with confirm: true and this confirmation (it runs exactly what was previewed). Nothing has changed yet."
         });
       }
-      const summary = t.confirm?.(callArgs, "en") ?? t.description;
+      const summary = `${t.confirm?.(callArgs, "en") ?? t.description}${standing ? ` (standing permission #${standing})` : ""}`;
       try {
         const result = await t.run({ api: withIdempotency(api2, approval.id), domain, client: "mcp" }, callArgs);
         const added = t.name === "website_add" ? result?.domain : null;
@@ -26480,7 +26910,7 @@ async function serveStdio(version2) {
 }
 
 // src/run.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { createInterface } from "node:readline/promises";
 var CliError = class extends Error {
   constructor(message, code = 2) {
@@ -26538,7 +26968,7 @@ async function cost(api2, domain, t) {
   return costText({ aiGenerations: ai, aiLeft, credits, creditsLeft }, "en");
 }
 function withIdempotency2(api2) {
-  const base = randomUUID2();
+  const base = randomUUID3();
   let n = 0;
   return {
     ...api2,
@@ -26706,6 +27136,78 @@ program2.command("results").description("results for the last 7 or 30 days").add
     })
   )
 );
+program2.command("reports").description("the report inbox: Maggie's reports and your agents' reports").option("--unread", "only reports nobody has opened yet").action(
+  act(
+    async (opts) => tool2(opts, "reports_list", { unread: Boolean(opts.unread) }, (v) => {
+      const r = v;
+      return `${r.unread} unread
+${table(
+        r.items.map((i) => ({
+          id: i.id,
+          kind: i.kind,
+          created: (i.created_at ?? "").slice(0, 16),
+          title: i.untrusted?.title
+        })),
+        ["id", "kind", "created", "title"]
+      )}`;
+    })
+  )
+);
+program2.command("report <id>").description("read one report (marks it read)").action(
+  act(
+    async (opts, id) => tool2(opts, "report_get", { id: Number(id) }, (v) => {
+      const r = v;
+      return `# ${r.untrusted.title}
+
+${r.untrusted.body_md ?? r.untrusted.summary ?? ""}`;
+    })
+  )
+);
+program2.command("reviews").description("Google Business reviews and Maggie's reply drafts").addOption(new Option("--status <status>", "none, drafted or sent").choices(["none", "drafted", "sent"])).action(
+  act(
+    async (opts) => tool2(opts, "gbp_reviews_list", opts.status ? { status: opts.status } : {}, (v) => {
+      const r = v;
+      if (!r.connected) return "No Google Business profile connected for this website.";
+      return `${r.waiting} waiting for a reply
+${table(
+        r.items.map((i) => ({
+          id: i.id,
+          stars: i.rating ?? "",
+          from: i.untrusted?.reviewer ?? "",
+          reply: i.reply_status
+        })),
+        ["id", "stars", "from", "reply"]
+      )}`;
+    })
+  )
+);
+var ops = program2.command("ops").description("Ops Autopilot: Maggie's daily operations on the website");
+ops.command("ls", { isDefault: true }).description("each feature, on or off, and its last run").action(
+  act(
+    async (opts) => tool2(opts, "ops_autopilot_get", {}, (v) => {
+      const r = v;
+      if (!r.available) return "Ops Autopilot isn't available for this website yet.";
+      return table(
+        r.features.map((f) => ({
+          feature: f.feature,
+          on: f.on ? "on" : "off",
+          when: f.when ?? "",
+          last: f.last_run ? `${f.last_run.status} ${(f.last_run.at ?? "").slice(0, 16)}` : ""
+        })),
+        ["feature", "on", "when", "last"]
+      );
+    })
+  )
+);
+ops.command("set <feature> <state>").description("switch one feature on or off (e.g. cmo ops set top_up off)").action(
+  act(async (opts, feature, state) => {
+    if (!["on", "off"].includes(state)) throw new CliError("State is on or off.", 2);
+    return tool2(opts, "ops_autopilot_set", { features: { [feature]: state === "on" } }, (v) => {
+      const f = v.features.find((x) => x.feature === feature);
+      return f ? `${feature}: ${f.on ? "on" : "off"}` : "Saved.";
+    });
+  })
+);
 var ideas = program2.command("ideas").description("blog post ideas");
 ideas.command("ls", { isDefault: true }).description("ideas waiting to be planned").option("--page <n>", "page", "1").action(act(async (opts) => tool2(opts, "ideas_list", { page: Number(opts.page) })));
 ideas.command("add <urlOrText...>").description("add an idea from a URL or a sentence").action(

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/cli",
-	"version": "0.7.7",
+	"version": "0.8.1",
 	"description": "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
 	"type": "module",
 	"license": "MIT",