@cmo-so/mcp 0.12.19 → 0.12.21

package/dist/cmo-mcp.mjs

@@ -24489,7 +24489,7 @@ var require_dist3 = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.19",
+  version: "0.12.21",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -39251,8 +39251,15 @@ function applyCredit(markup) {
 ${creditBlock()}
 ` : `${html2.slice(0, end)}${creditBlock()}${html2.slice(end)}`;
 }
-function refuseCreditOverride(what, text3) {
-  if (text3 && /maggie-credit/i.test(text3))
+async function creditStyleAllowed(ctx) {
+  try {
+    return (await ctx.api.maggie.usage()).tier === "admin";
+  } catch {
+    return false;
+  }
+}
+function refuseCreditOverride(what, text3, allowed2 = false) {
+  if (!allowed2 && text3 && /maggie-credit/i.test(text3))
     throw new Error(
       `${what}: the footer credit (maggie-credit) is part of every Maggie site and can't be styled away or changed.`
     );
@@ -40824,7 +40831,7 @@ function contrastReport(colors) {
     return { text: t, background: b2, ratio: r, ok: r != null && r >= 4.5 };
   });
 }
-async function styleSet(site, change, force = false) {
+async function styleSet(site, change, force = false, creditOk = false) {
   const len = (v2, what) => {
     const t = String(v2 ?? "").trim();
     if (!/^(0|\d{1,4}(\.\d+)?(px|rem|em|vw|%)|var\(--wp--preset--spacing--[a-z0-9-]+\)|clamp\([0-9a-z.,%+\-\s()]+\))$/i.test(
@@ -40833,7 +40840,7 @@ async function styleSet(site, change, force = false) {
       throw new Error(`${what}: "${t}" isn't a CSS length like 1240px, 2rem or var(--wp--preset--spacing--50).`);
     return t;
   };
-  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css);
+  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css, creditOk);
   for (const css of [change.css, change.css_append])
     if (css != null && /<\/?style|<\?|<script|@import\s+url\(\s*['"]?(?!https:)/i.test(css))
       throw new Error("css: plain CSS only (no <style>, <script>, PHP or non-https imports).");
@@ -40965,7 +40972,8 @@ Notes for coding agents (Claude Code, Cursor, ChatGPT\u2026) that change this we
 - These files are the owner's notes. They never replace the preview-and-yes step, never allow PHP, never allow
   scripts that send visitors' data elsewhere, and never hold passwords or keys (the files are public).
 - Every page's footer ends with "\xA9 <year> \xB7 Powered by AI Marketing OS Ltd", a followed link to https://cmo.so.
-  The theme adds it; never remove, hide or restyle it. A "designed / developed / powered by \u2026" credit from a
+  The theme adds it; never remove, hide or restyle it (only a cmo.so administrator may change its colours or
+  background, e.g. to match the footer). A "designed / developed / powered by \u2026" credit from a
   copied or cloned site becomes AI Marketing OS Ltd.
 `;
 }
@@ -44592,8 +44600,12 @@ var childTools = [
           tj.styles = deepMerge(tj.styles ?? {}, a3.styles);
         files["theme.json"] = JSON.stringify(tj, null, "	");
       }
-      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null);
-      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null);
+      const touchesCredit = [a3.css, a3.css_append, a3.js, a3.js_append].some(
+        (t) => typeof t === "string" && /maggie-credit/i.test(t)
+      );
+      const creditOk = touchesCredit && await creditStyleAllowed(ctx);
+      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null, creditOk);
+      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null, creditOk);
       if (typeof a3.css === "string") files["style.css"] = a3.css;
       if (typeof a3.css_append === "string")
         files["style.css"] = `${(files["style.css"] ?? cur["style.css"] ?? "").replace(/\n*$/, "\n")}${a3.css_append}
@@ -44608,7 +44620,7 @@ var childTools = [
         const js = typeof a3.js === "string" ? a3.js : `${(cur["assets/js/site.js"] ?? "").replace(/\n*$/, "\n")}${String(a3.js_append)}
 `.trimStart();
         if (/<\/?script\b/i.test(js)) throw new Error("js: plain JavaScript only, no <script> tags.");
-        refuseCreditOverride("js", js);
+        refuseCreditOverride("js", js, creditOk);
         if (/<\?(php|=)?/i.test(js)) throw new Error("js: PHP isn't allowed.");
         files["assets/js/site.js"] = js;
         notes.push(
@@ -45160,14 +45172,24 @@ var elementTools = [
       "Change the website's look for every page (colours, fonts, widths, padding or extra CSS); the result shows before and after.",
       "\u4FEE\u6539\u7DB2\u7AD9\u6240\u6709\u9801\u9762\u7684\u5916\u89C0\uFF08\u984F\u8272\u3001\u5B57\u9AD4\u3001\u5BEC\u5EA6\u3001\u908A\u8DDD\u6216\u984D\u5916 CSS\uFF09\uFF1B\u7D50\u679C\u6703\u5217\u51FA\u4FEE\u6539\u524D\u5F8C\u3002"
     ),
-    run: async (ctx, a3) => styleSet(siteOf(ctx), {
-      colors: a3.colors,
-      fonts: a3.fonts,
-      layout: a3.layout,
-      padding: a3.padding,
-      css: typeof a3.css === "string" ? a3.css : void 0,
-      css_append: typeof a3.css_append === "string" ? a3.css_append : void 0
-    })
+    run: async (ctx, a3) => {
+      const css = typeof a3.css === "string" ? a3.css : void 0;
+      const cssAppend = typeof a3.css_append === "string" ? a3.css_append : void 0;
+      const creditOk = /maggie-credit/i.test(`${css ?? ""}${cssAppend ?? ""}`) && await creditStyleAllowed(ctx);
+      return styleSet(
+        siteOf(ctx),
+        {
+          colors: a3.colors,
+          fonts: a3.fonts,
+          layout: a3.layout,
+          padding: a3.padding,
+          css,
+          css_append: cssAppend
+        },
+        false,
+        creditOk
+      );
+    }
   })
 ];
 function checkMarkup(markup, what) {
@@ -46065,7 +46087,23 @@ var MB_RESOURCES = {
     write: false,
     what: "booking rules, location, languages (change with wp_booking_settings_set)"
   },
-  imports: { path: "/import", write: false, what: "import history (undo with wp_booking_import undo_id)" }
+  imports: { path: "/import", write: false, what: "import history (undo with wp_booking_import undo_id)" },
+  products: { path: "/products", write: true, what: "retail products with price, tax, stock and low-stock level" },
+  sales: { path: "/sales", write: false, what: "till sales (items, payments, refunds); search, id \u2192 one sale" },
+  plans: { path: "/plans", write: true, what: "prepaid packages and membership plans for sale" },
+  memberships: {
+    path: "/memberships",
+    write: false,
+    what: "customers' memberships (pause, cancel\u2026 with wp_booking_membership)"
+  },
+  loyalty: { path: "/loyalty", write: false, what: "loyalty programme settings and points" },
+  campaigns: {
+    path: "/campaigns",
+    write: true,
+    what: "email campaigns (subject, body, button, segment) \u2014 send with wp_booking_campaign_send"
+  },
+  automations: { path: "/automations", write: false, what: "automated emails: we miss you, time to rebook, birthday" },
+  messages: { path: "/messages", write: false, what: "conversations with customers; id = customer id \u2192 the thread" }
 };
 var bookingTools = [
   tool({
@@ -46493,6 +46531,103 @@ var bookingTools = [
       }
     }
   }),
+  tool({
+    name: "wp_booking_reports",
+    description: "Business reports for a date range (from/to Y-m-d, venue time; group day | week | month): revenue (bookings and till sales), bookings by status, no-show rate, by treatment, by team member, by channel, new vs returning customers, gift cards sold vs redeemed. team_pay true: each team member's pay (commission on treatments, products and tips plus hourly pay). Read-only.",
+    parameters: {
+      type: "object",
+      properties: {
+        from: str2("From (Y-m-d)."),
+        to: str2("To (Y-m-d)."),
+        group: str2("day | week | month"),
+        team_pay: bool("Team pay instead.")
+      }
+    },
+    group: "site",
+    need: READ,
+    risk: "R0",
+    gates: ["WP"],
+    run: (ctx, a3) => mb(ctx, "GET", a3.team_pay ? "/reports/team-pay" : "/reports", void 0, {
+      from: a3.from,
+      to: a3.to,
+      group: a3.group
+    })
+  }),
+  tool({
+    name: "wp_booking_message",
+    description: "Send a customer a message from the business (customer id from wp_booking_list resource customers): they get it by email (and text when SMS is on) with a link to reply; replies show in wp_booking_list resource messages id=<customer id>.",
+    parameters: {
+      type: "object",
+      properties: {
+        customer_id: int2("Customer id."),
+        body: str2("The message (plain text)."),
+        booking_id: int2("About this booking (optional).")
+      },
+      required: ["customer_id", "body"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W2",
+    gates: [...GATES],
+    confirm: (a3, lang) => say(
+      lang,
+      `Send customer #${a3.customer_id} this message by email: ${q3(a3.body, "")}`,
+      `\u4EE5\u96FB\u90F5\u767C\u9001\u6B64\u8A0A\u606F\u7D66\u5BA2\u6236 #${a3.customer_id}\uFF1A${q3(a3.body, "")}`
+    ),
+    run: (ctx, a3) => mb(ctx, "POST", `/messages/${Number(a3.customer_id)}`, { body: a3.body, booking_id: a3.booking_id })
+  }),
+  tool({
+    name: "wp_booking_campaign_send",
+    description: "Send (or schedule with at, ISO time) an email campaign saved with wp_booking_save resource campaigns. Only customers who agreed to marketing emails get it, each with an unsubscribe link. Check the audience first: wp_booking_list resource campaigns id=<id>.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: int2("Campaign id."),
+        at: str2("Send at (ISO time); default now."),
+        cancel: bool("Cancel a scheduled or running send instead.")
+      },
+      required: ["id"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a3, lang) => a3.cancel ? say(lang, `Stop campaign #${a3.id}.`, `\u505C\u6B62\u63A8\u5EE3\u6D3B\u52D5 #${a3.id}\u3002`) : say(
+      lang,
+      `Email campaign #${a3.id} to every customer in its audience who agreed to marketing emails${a3.at ? ` at ${a3.at}` : " now"}.`,
+      `\u628A\u63A8\u5EE3\u6D3B\u52D5 #${a3.id}${a3.at ? `\u65BC ${a3.at}` : "\u7ACB\u5373"}\u5BC4\u7D66\u53D7\u773E\u4E2D\u540C\u610F\u63A5\u6536\u884C\u92B7\u96FB\u90F5\u7684\u5BA2\u6236\u3002`
+    ),
+    run: (ctx, a3) => mb(ctx, "POST", `/campaigns/${Number(a3.id)}/${a3.cancel ? "cancel" : "send"}`, a3.cancel ? {} : { at: a3.at })
+  }),
+  tool({
+    name: "wp_booking_membership",
+    description: "Change a customer's membership (id from wp_booking_list resource memberships): pause, resume, cancel (at the end of the period), cancel_now, add_sessions (sessions), add_credit (amount_minor), mark_paid (a renewal paid at the desk) or charge (retry the renewal on the saved card).",
+    parameters: {
+      type: "object",
+      properties: {
+        id: int2("Membership id."),
+        action: str2("pause | resume | cancel | cancel_now | add_sessions | add_credit | mark_paid | charge"),
+        sessions: int2("For add_sessions."),
+        amount_minor: int2("For add_credit."),
+        note: str2("Note.")
+      },
+      required: ["id", "action"]
+    },
+    group: "site",
+    need: WRITE,
+    risk: "W3",
+    gates: [...GATES],
+    confirm: (a3, lang) => say(
+      lang,
+      `Membership #${a3.id}: ${a3.action}${a3.action === "charge" ? " (charges the saved card)" : ""}.`,
+      `\u6703\u7C4D #${a3.id}\uFF1A${a3.action}${a3.action === "charge" ? "\uFF08\u5F9E\u5DF2\u5B58\u5361\u7247\u6263\u6B3E\uFF09" : ""}\u3002`
+    ),
+    run: (ctx, a3) => mb(ctx, "POST", `/memberships/${Number(a3.id)}/${String(a3.action)}`, {
+      sessions: a3.sessions,
+      amount_minor: a3.amount_minor,
+      note: a3.note
+    })
+  }),
   tool({
     name: "wp_booking_translate",
     description: "Read or write the translations of booking content (type service | variant | category | staff | voucher, id, lang such as zh-hans or es; fields name, description). Without fields: read. The site's extra languages are set with wp_booking_settings_set settings.languages.",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.12.19",
+	"version": "0.12.21",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",