@cmo-so/mcp 0.12.9 → 0.12.10

package/dist/cmo-mcp.mjs

@@ -7199,7 +7199,7 @@ var require_dist = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.12.9",
+  version: "0.12.10",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -17243,7 +17243,7 @@ var childTools = [
   }),
   tool({
     name: "wp_child_theme_update",
-    description: "Change a Maggie child theme's files (default: the active child): brand colours (by name, hex) and fonts (by name, CSS font-family of fonts already in it) in theme.json, extra theme.json styles, plain CSS (replace or append), the header or footer (block markup), templates, and the site's own patterns (shown in the editor's inserter). Data only, never code. Each change keeps a backup (wp_child_theme_restore). Changes made with wp_style_set / wp_header_set are stored in the database and win over the child's files.",
+    description: "Change a Maggie child theme's files (default: the active child): brand colours (by name, hex) and fonts (by name, CSS font-family of fonts already in it) in theme.json, extra theme.json styles, plain CSS (replace or append), the site's own JavaScript (assets/js/site.js, replace or append; runs for every visitor), the header or footer (block markup), templates, and the site's own patterns (shown in the editor's inserter). No PHP or server code. Each change keeps a backup (wp_child_theme_restore). Changes made with wp_style_set / wp_header_set are stored in the database and win over the child's files.",
     parameters: {
       type: "object",
       properties: {
@@ -17264,6 +17264,10 @@ var childTools = [
         styles: obj('theme.json styles to merge in (e.g. { "elements": { "button": { \u2026 } } }).'),
         css: str2("Replace the child's CSS (plain CSS)."),
         css_append: str2("Add CSS at the end."),
+        js: str2(
+          `Replace the site's own script (assets/js/site.js, plain JavaScript loaded deferred on every page; "" turns it off). Needs Maggie Core 0.12+ and a login allowed to add scripts. No eval or new Function; addresses only on the site or cdn.jsdelivr.net, unpkg.com, cdnjs.cloudflare.com.`
+        ),
+        js_append: str2("Add JavaScript at the end of the site's script."),
         header: str2("Header block markup (parts/header.html)."),
         footer: str2("Footer block markup (parts/footer.html)."),
         templates: obj('Templates by slug \u2192 block markup, e.g. { "page-landing": "\u2026" }.'),
@@ -17277,8 +17281,8 @@ var childTools = [
     gates: [...GATES],
     confirm: (a, lang) => say(
       lang,
-      `Change the child theme ${q2(a.slug, "(the active one)")} on your website.`,
-      `\u4FEE\u6539\u7DB2\u7AD9\u7684\u5B50\u4E3B\u984C ${q2(a.slug, "\uFF08\u76EE\u524D\u4F7F\u7528\u4E2D\u7684\uFF09")}\u3002`
+      `Change the child theme ${q2(a.slug, "(the active one)")} on your website.${typeof a.js === "string" || typeof a.js_append === "string" ? a.js === "" ? " Turns off the site's own script." : " Includes JavaScript that runs in every visitor's browser on every page." : ""}`,
+      `\u4FEE\u6539\u7DB2\u7AD9\u7684\u5B50\u4E3B\u984C ${q2(a.slug, "\uFF08\u76EE\u524D\u4F7F\u7528\u4E2D\u7684\uFF09")}\u3002${typeof a.js === "string" || typeof a.js_append === "string" ? a.js === "" ? "\u95DC\u9589\u7DB2\u7AD9\u81EA\u8A02\u8173\u672C\u3002" : "\u5305\u542B\u6703\u5728\u6BCF\u4F4D\u8A2A\u5BA2\u700F\u89BD\u5668\u3001\u6BCF\u500B\u9801\u9762\u57F7\u884C\u7684 JavaScript\u3002" : ""}`
     ),
     run: async (ctx, a) => {
       const site = siteOf(ctx);
@@ -17376,6 +17380,22 @@ var childTools = [
       if (typeof a.css_append === "string")
         files["style.css"] = `${(files["style.css"] ?? cur["style.css"] ?? "").replace(/\n*$/, "\n")}${a.css_append}
 `;
+      if (typeof a.js === "string" || typeof a.js_append === "string") {
+        const parentV = String(info.parent?.version ?? "0");
+        const [maj, min] = parentV.split(".").map(Number);
+        if ((maj ?? 0) === 0 && (min ?? 0) < 12)
+          throw new Error(
+            `The site's script needs Maggie Core 0.12 or later (the site has ${parentV}): update it with wp_theme_update first.`
+          );
+        const js = typeof a.js === "string" ? a.js : `${(cur["assets/js/site.js"] ?? "").replace(/\n*$/, "\n")}${String(a.js_append)}
+`.trimStart();
+        if (/<\/?script\b/i.test(js)) throw new Error("js: plain JavaScript only, no <script> tags.");
+        if (/<\?(php|=)?/i.test(js)) throw new Error("js: PHP isn't allowed.");
+        files["assets/js/site.js"] = js;
+        notes.push(
+          js.trim() ? "assets/js/site.js runs deferred on every page; undo with wp_child_theme_restore." : "The site's own script is off."
+        );
+      }
       const markup = (path2, m) => {
         if (typeof m !== "string" || !m.trim()) return;
         if (!parse(m).some((b) => b.name)) throw new Error(`${path2}: give block markup (<!-- wp:\u2026 -->).`);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.12.9",
+	"version": "0.12.10",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",