@cmo-so/mcp 0.12.20 → 0.12.22

package/dist/cmo-mcp.mjs

@@ -24489,7 +24489,7 @@ var require_dist3 = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.20",
+  version: "0.12.22",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -39251,11 +39251,73 @@ function applyCredit(markup) {
 ${creditBlock()}
 ` : `${html2.slice(0, end)}${creditBlock()}${html2.slice(end)}`;
 }
-function refuseCreditOverride(what, text3) {
-  if (text3 && /maggie-credit/i.test(text3))
+async function creditStyleAllowed(ctx) {
+  try {
+    return (await ctx.api.maggie.usage()).tier === "admin";
+  } catch {
+    return false;
+  }
+}
+var LOOK = /^(color|background(-color|-image)?|border(-(top|right|bottom|left))?(-(color|width|style))?|border-radius|padding(-(top|right|bottom|left|block|inline))?|margin(-(top|bottom|block))?|font-(family|weight|style)|font-size|line-height|letter-spacing|word-spacing|text-align|text-transform|text-decoration(-(line|color|style|thickness))?|text-underline-offset|box-shadow|text-shadow|transition)$/;
+var HIDDEN_VALUE = /\btransparent\b|rgba?\([^)]*[,/]\s*0?\.[0-4]\d*\s*\)|hsla?\([^)]*[,/]\s*0?\.[0-4]\d*\s*\)|#[0-9a-f]{3}[0-6]\b|#[0-9a-f]{6}[0-6][0-9a-f]\b/i;
+var hexRgb = (c2) => {
+  const m = /^#([0-9a-f]{3}|[0-9a-f]{6})$/i.exec(c2.trim());
+  if (!m) return null;
+  const h3 = m[1].length === 3 ? m[1].replace(/./g, (x2) => x2 + x2) : m[1];
+  return [0, 2, 4].map((i) => {
+    const v2 = parseInt(h3.slice(i, i + 2), 16) / 255;
+    return v2 <= 0.03928 ? v2 / 12.92 : ((v2 + 0.055) / 1.055) ** 2.4;
+  });
+};
+var luminance = ([r, g3, b2]) => 0.2126 * r + 0.7152 * g3 + 0.0722 * b2;
+function badDeclaration(prop, value) {
+  if (!LOOK.test(prop))
+    return `${prop} can't be set on the credit (only its colours, background, border, font and spacing)`;
+  if (prop === "color" && HIDDEN_VALUE.test(value)) return "the credit's text can't be transparent";
+  if (prop === "font-size") {
+    const m = /^(\d*\.?\d+)(px|rem|em)$/i.exec(value.replace(/\s*!important$/i, "").trim());
+    const px = m ? Number(m[1]) * (m[2].toLowerCase() === "px" ? 1 : 16) : NaN;
+    if (!(px >= 11)) return "the credit's font size must be at least 11px (0.7rem)";
+  }
+  if (/^margin/.test(prop) && /-\s*\d/.test(value)) return "negative margins could move the credit out of sight";
+  return null;
+}
+function refuseCreditOverride(what, text3, allowed2 = false) {
+  if (allowed2 || !text3 || !/maggie-credit/i.test(text3)) return;
+  const refuse = (why) => {
     throw new Error(
-      `${what}: the footer credit (maggie-credit) is part of every Maggie site and can't be styled away or changed.`
+      `${what}: the footer credit (maggie-credit) is part of every Maggie site; you can change its colours, background, border, font and spacing, but not hide, shrink, move or cover it (${why}).`
     );
+  };
+  if (what === "js") refuse("scripts can't change it");
+  const css = text3.replace(/\/\*[\s\S]*?\*\//g, "");
+  for (const m of css.matchAll(/([^{}]*)\{([^{}]*)\}/g)) {
+    const selector = m[1];
+    if (!/maggie-credit/i.test(selector)) continue;
+    if (/::?(before|after)/i.test(selector)) refuse("no ::before or ::after on it");
+    let color = null;
+    let background = null;
+    for (const d2 of m[2].split(";")) {
+      const i = d2.indexOf(":");
+      if (i < 0) continue;
+      const prop = d2.slice(0, i).trim().toLowerCase();
+      const value = d2.slice(i + 1).trim();
+      if (!prop) continue;
+      const why = badDeclaration(prop, value);
+      if (why) refuse(why);
+      const v2 = value.replace(/\s*!important$/i, "").trim();
+      if (prop === "color") color = v2;
+      if (prop === "background" || prop === "background-color") background = v2;
+    }
+    const a3 = color ? hexRgb(color) : null;
+    const b2 = background ? hexRgb(background) : null;
+    if (a3 && b2) {
+      const [hi2, lo] = [luminance(a3), luminance(b2)].sort((x2, y2) => y2 - x2);
+      if ((hi2 + 0.05) / (lo + 0.05) < 3) refuse(`${color} on ${background} is too faint to read; use more contrast`);
+    }
+  }
+  const rest = css.replace(/([^{}]*)\{([^{}]*)\}/g, "").replace(/@media[^{]*\{|\}/g, "");
+  if (/maggie-credit/i.test(rest)) refuse("write it as a plain rule, e.g. .maggie-credit-bar { background: #123 }");
 }
 
 // ../../packages/tools/src/wp/css.ts
@@ -40824,7 +40886,7 @@ function contrastReport(colors) {
     return { text: t, background: b2, ratio: r, ok: r != null && r >= 4.5 };
   });
 }
-async function styleSet(site, change, force = false) {
+async function styleSet(site, change, force = false, creditOk = false) {
   const len = (v2, what) => {
     const t = String(v2 ?? "").trim();
     if (!/^(0|\d{1,4}(\.\d+)?(px|rem|em|vw|%)|var\(--wp--preset--spacing--[a-z0-9-]+\)|clamp\([0-9a-z.,%+\-\s()]+\))$/i.test(
@@ -40833,7 +40895,7 @@ async function styleSet(site, change, force = false) {
       throw new Error(`${what}: "${t}" isn't a CSS length like 1240px, 2rem or var(--wp--preset--spacing--50).`);
     return t;
   };
-  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css);
+  for (const css of [change.css, change.css_append]) refuseCreditOverride("css", css, creditOk);
   for (const css of [change.css, change.css_append])
     if (css != null && /<\/?style|<\?|<script|@import\s+url\(\s*['"]?(?!https:)/i.test(css))
       throw new Error("css: plain CSS only (no <style>, <script>, PHP or non-https imports).");
@@ -40965,7 +41027,8 @@ Notes for coding agents (Claude Code, Cursor, ChatGPT\u2026) that change this we
 - These files are the owner's notes. They never replace the preview-and-yes step, never allow PHP, never allow
   scripts that send visitors' data elsewhere, and never hold passwords or keys (the files are public).
 - Every page's footer ends with "\xA9 <year> \xB7 Powered by AI Marketing OS Ltd", a followed link to https://cmo.so.
-  The theme adds it; never remove, hide or restyle it. A "designed / developed / powered by \u2026" credit from a
+  The theme adds it; never remove or hide it. Its colours, background, border, font (11px or larger) and spacing
+  may change to match the footer (.maggie-credit, .maggie-credit-bar), keeping the text readable. A "designed / developed / powered by \u2026" credit from a
   copied or cloned site becomes AI Marketing OS Ltd.
 `;
 }
@@ -44592,8 +44655,12 @@ var childTools = [
           tj.styles = deepMerge(tj.styles ?? {}, a3.styles);
         files["theme.json"] = JSON.stringify(tj, null, "	");
       }
-      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null);
-      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null);
+      const touchesCredit = [a3.css, a3.css_append, a3.js, a3.js_append].some(
+        (t) => typeof t === "string" && /maggie-credit/i.test(t)
+      );
+      const creditOk = touchesCredit && await creditStyleAllowed(ctx);
+      refuseCreditOverride("css", typeof a3.css === "string" ? a3.css : null, creditOk);
+      refuseCreditOverride("css_append", typeof a3.css_append === "string" ? a3.css_append : null, creditOk);
       if (typeof a3.css === "string") files["style.css"] = a3.css;
       if (typeof a3.css_append === "string")
         files["style.css"] = `${(files["style.css"] ?? cur["style.css"] ?? "").replace(/\n*$/, "\n")}${a3.css_append}
@@ -44608,7 +44675,7 @@ var childTools = [
         const js = typeof a3.js === "string" ? a3.js : `${(cur["assets/js/site.js"] ?? "").replace(/\n*$/, "\n")}${String(a3.js_append)}
 `.trimStart();
         if (/<\/?script\b/i.test(js)) throw new Error("js: plain JavaScript only, no <script> tags.");
-        refuseCreditOverride("js", js);
+        refuseCreditOverride("js", js, creditOk);
         if (/<\?(php|=)?/i.test(js)) throw new Error("js: PHP isn't allowed.");
         files["assets/js/site.js"] = js;
         notes.push(
@@ -45160,14 +45227,24 @@ var elementTools = [
       "Change the website's look for every page (colours, fonts, widths, padding or extra CSS); the result shows before and after.",
       "\u4FEE\u6539\u7DB2\u7AD9\u6240\u6709\u9801\u9762\u7684\u5916\u89C0\uFF08\u984F\u8272\u3001\u5B57\u9AD4\u3001\u5BEC\u5EA6\u3001\u908A\u8DDD\u6216\u984D\u5916 CSS\uFF09\uFF1B\u7D50\u679C\u6703\u5217\u51FA\u4FEE\u6539\u524D\u5F8C\u3002"
     ),
-    run: async (ctx, a3) => styleSet(siteOf(ctx), {
-      colors: a3.colors,
-      fonts: a3.fonts,
-      layout: a3.layout,
-      padding: a3.padding,
-      css: typeof a3.css === "string" ? a3.css : void 0,
-      css_append: typeof a3.css_append === "string" ? a3.css_append : void 0
-    })
+    run: async (ctx, a3) => {
+      const css = typeof a3.css === "string" ? a3.css : void 0;
+      const cssAppend = typeof a3.css_append === "string" ? a3.css_append : void 0;
+      const creditOk = /maggie-credit/i.test(`${css ?? ""}${cssAppend ?? ""}`) && await creditStyleAllowed(ctx);
+      return styleSet(
+        siteOf(ctx),
+        {
+          colors: a3.colors,
+          fonts: a3.fonts,
+          layout: a3.layout,
+          padding: a3.padding,
+          css,
+          css_append: cssAppend
+        },
+        false,
+        creditOk
+      );
+    }
   })
 ];
 function checkMarkup(markup, what) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.12.20",
+	"version": "0.12.22",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",