@cmo-so/mcp 0.4.0 → 0.6.0

package/dist/cmo-mcp.mjs

@@ -7199,7 +7199,7 @@ var require_dist = __commonJS({
 // package.json
 var package_default = {
   name: "@cmo-so/cli",
-  version: "0.4.0",
+  version: "0.6.0",
   description: "CMO.so on the command line: your websites, ideas, blog posts, LinkedIn queue and results, plus a local MCP server for Claude Desktop, Cursor and other MCP clients.",
   type: "module",
   license: "MIT",
@@ -7537,7 +7537,8 @@ var MEMORY_CHANNELS = [
   "facebook",
   "instagram",
   "google_business",
-  "youtube"
+  "youtube",
+  "tiktok"
 ];
 function addWebsite(api2, url) {
   return api2.request("/v1/domains", {
@@ -7789,6 +7790,20 @@ function domainApi(api2, domain) {
     ),
     /** Disconnect: the token is deleted and Google's access revoked (YouTube's policy). */
     disconnectYouTube: (connectionId) => api2.request(`${base}/social/youtube/${connectionId}`, { method: "DELETE" }),
+    /** A TikTok sign-in link for this website (docs/prd/tiktok.md §7); back with ?tiktok=connected (error&message=…). */
+    connectTikTok: (returnTo = "close") => post(`${base}/social/tiktok/connect`, { return_to: returnTo }),
+    /** What the TikTok account allows right now: show it in the TikTok post editor (TikTok's guidelines). */
+    tiktokCreator: () => api2.request(`${base}/social/tiktok/creator`),
+    /** Disconnect: TikTok's access is revoked and the token deleted. */
+    disconnectTikTok: (connectionId) => api2.request(`${base}/social/tiktok/${connectionId}`, { method: "DELETE" }),
+    /** A TikTok post's settings: who can view it, comments / Duet / Stitch, content disclosure, AI label. */
+    setSocialTikTok: (id, answers) => api2.request(`${base}/social/${id}`, {
+      method: "PATCH",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ tiktok: answers })
+    }),
+    /** Ask to join the beta of these channels: an email says what we need (reply or WhatsApp); the team is told. */
+    requestBeta: (req) => post(`${base}/social/beta-request`, req),
     /** One channel's own pause switch (pauseSocial / resumeSocial hold every channel). */
     setChannelPaused: (channel, paused) => post(`${base}/social/channels/${channel}/${paused ? "pause" : "resume"}`),
     /** How often one channel posts. */
@@ -7971,8 +7986,13 @@ function domainApi(api2, domain) {
     video: (videoId) => api2.request(`${base}/social/video/${videoId}`),
     /** Another part or framing; prepared again in the background. */
     editVideo: (videoId, edit) => post(`${base}/social/video/${videoId}/edit`, { edit }),
-    /** A YouTube post from a ready video, waiting in Review; Maggie writes the details unless write is false. */
+    /** A post on one video channel (YouTube by default, or TikTok) from a ready video, waiting in Review; Maggie
+     *  writes the details (YouTube) or the caption (TikTok) unless write is false. */
     postFromVideo: (videoId, opts = {}) => post(`${base}/social/video/${videoId}/post`, opts),
+    /** Make a LinkedIn, Facebook or Instagram post a video post: it goes out as this video (its picture is dropped). */
+    attachVideo: (id, videoId) => post(`${base}/social/${id}/video`, { video_id: videoId }),
+    /** Take the video off a post: it's a text post again. */
+    detachVideo: (id) => api2.request(`${base}/social/${id}/video`, { method: "DELETE" }),
     youtubeSettings: () => api2.request(`${base}/social/youtube/settings`),
     setYouTubeSettings: (s) => put(`${base}/social/youtube/settings`, s),
     /** A YouTube post's title, tags, visibility, made-for-kids or altered-content answer. */
@@ -8220,6 +8240,9 @@ var list = (xs, n = 5) => {
 };
 var ids = (a) => (Array.isArray(a.ids) && a.ids.length ? a.ids : a.id != null ? [a.id] : []).map(Number);
 var keys = (a) => Object.keys(a ?? {}).filter((k) => a[k] !== void 0);
+var videoChannels = (a) => (Array.isArray(a.channels) && a.channels.length ? a.channels : ["youtube"]).map(
+  (c) => ({ tiktok: "TikTok", linkedin: "LinkedIn", facebook: "Facebook", instagram: "Instagram" })[String(c)] ?? "YouTube"
+);
 var confirmCopy = {
   // --------------------------------------------------------- account / setup
   website_add: {
@@ -8405,9 +8428,31 @@ var confirmCopy = {
     en: () => "Make a link to connect your YouTube channel.",
     "zh-Hant": () => "\u7522\u751F\u9023\u63A5\u4F60 YouTube \u983B\u9053\u7684\u9023\u7D50\u3002"
   },
+  social_video_attach: {
+    en: (a) => `Make post #${a.id} a video post with ${a.url} (its picture is removed).`,
+    "zh-Hant": (a) => `\u628A\u8CBC\u6587 #${a.id} \u6539\u6210\u5F71\u7247\u8CBC\u6587\uFF0C\u7528 ${a.url}\uFF08\u5716\u7247\u6703\u79FB\u9664\uFF09\u3002`
+  },
+  social_video_detach: {
+    en: (a) => `Take the video off post #${a.id} (it's a text post again).`,
+    "zh-Hant": (a) => `\u79FB\u9664\u8CBC\u6587 #${a.id} \u7684\u5F71\u7247\uFF08\u8B8A\u56DE\u6587\u5B57\u8CBC\u6587\uFF09\u3002`
+  },
+  tiktok_connect_link: {
+    en: () => "Make a link to connect your TikTok account.",
+    "zh-Hant": () => "\u7522\u751F\u9023\u63A5\u4F60 TikTok \u5E33\u865F\u7684\u9023\u7D50\u3002"
+  },
   social_video_add: {
-    en: (a) => `Make a YouTube post from ${a.url}${a.write === false ? "" : " (Maggie writes the title and description: one AI generation)"}; it waits for your OK.`,
-    "zh-Hant": (a) => `\u7528 ${a.url} \u505A\u4E00\u5247 YouTube \u5F71\u7247\u8CBC\u6587${a.write === false ? "" : "\uFF08Maggie \u5BEB\u6A19\u984C\u548C\u8AAA\u660E\uFF1A\u7528\u4E00\u6B21 AI \u751F\u6210\uFF09"}\uFF0C\u7B49\u4F60\u78BA\u8A8D\u5F8C\u624D\u767C\u3002`
+    en: (a) => {
+      const names = videoChannels(a).join(" and ");
+      return `Make a ${names} post from ${a.url}${a.write === false ? "" : ` (Maggie writes it: one AI generation per channel)`}; it waits for your OK.`;
+    },
+    "zh-Hant": (a) => {
+      const names = videoChannels(a).join(" \u548C ");
+      return `\u7528 ${a.url} \u505A ${names} \u5F71\u7247\u8CBC\u6587${a.write === false ? "" : "\uFF08Maggie \u4F86\u5BEB\uFF1A\u6BCF\u500B\u6E20\u9053\u7528\u4E00\u6B21 AI \u751F\u6210\uFF09"}\uFF0C\u7B49\u4F60\u78BA\u8A8D\u5F8C\u624D\u767C\u3002`;
+    }
+  },
+  social_tiktok_set: {
+    en: (a) => `Set TikTok post #${a.id}: ${keys(a).filter((k) => k !== "id").map((k) => `${k} ${String(a[k])}`).join(", ") || "its settings"}.`,
+    "zh-Hant": (a) => `\u8A2D\u5B9A TikTok \u8CBC\u6587 #${a.id}\uFF1A${keys(a).filter((k) => k !== "id").map((k) => `${k} ${String(a[k])}`).join("\u3001") || "\u8A2D\u5B9A"}\u3002`
   },
   social_youtube_set: {
     en: (a) => `Change YouTube post #${a.id}: ${keys(a).filter((k) => k !== "id").join(", ") || "its details"}.`,
@@ -10430,11 +10475,13 @@ var read5 = { resource: "autopilot", level: "read" };
 var write5 = { resource: "autopilot", level: "write" };
 var moves2 = ["up", "down", "top"];
 var CHANNEL_KEYS = ["linkedin", "facebook", "instagram", "google_business"];
-var ALL_CHANNEL_KEYS = [...CHANNEL_KEYS, "youtube"];
+var ALL_CHANNEL_KEYS = [...CHANNEL_KEYS, "youtube", "tiktok"];
+var VIDEO_KEYS = ["linkedin", "facebook", "instagram", "youtube", "tiktok"];
+var TIKTOK_PRIVACY = ["PUBLIC_TO_EVERYONE", "MUTUAL_FOLLOW_FRIENDS", "FOLLOWER_OF_CREATOR", "SELF_ONLY"];
 var channelsParam = {
   type: "array",
   items: { type: "string", enum: CHANNEL_KEYS },
-  description: "Which channels to write for: linkedin, facebook, instagram, google_business. Leave out to write for every connected channel (one post each, one credit each); give one only when the user names it. YouTube takes a video: use social_video_add."
+  description: "Which channels to write for: linkedin, facebook, instagram, google_business. Leave out to write for every connected channel (one post each, one credit each); give one only when the user names it. YouTube and TikTok take a video: use social_video_add."
 };
 var channelsOf = (value) => {
   const list2 = Array.isArray(value) ? value.map((v) => String(v).toLowerCase()).filter((v) => CHANNEL_KEYS.includes(v)) : [];
@@ -10461,6 +10508,13 @@ var item = (i) => ({
   ...i.provider === "youtube" ? {
     youtube: i.youtube ?? null,
     video: i.video ? { status: i.video.status, seconds: i.video.duration, shape: i.video.shape, error: i.video.error } : null
+  } : {},
+  ...i.video_asset_id && i.provider !== "youtube" && i.provider !== "tiktok" ? {
+    video: i.video ? { status: i.video.status, seconds: i.video.duration, shape: i.video.shape, error: i.video.error } : { id: i.video_asset_id }
+  } : {},
+  ...i.provider === "tiktok" ? {
+    tiktok: i.tiktok ?? null,
+    video: i.video ? { status: i.video.status, seconds: i.video.duration, shape: i.video.shape, error: i.video.error } : null
   } : {}
 });
 var socialTools = [
@@ -11439,13 +11493,110 @@ var socialTools = [
       return { url: out.url, expires_in_seconds: out.expires_in_seconds };
     }
   }),
+  tool({
+    name: "social_video_attach",
+    description: "Make a LinkedIn, Facebook or Instagram post that hasn't gone out a video post: it goes out as this video (a DIRECT link to a video file, 5-30 seconds; never a platform page) with its text, and its picture is removed (a video post has no picture). Not for Google Business (posts can't carry video). Preview first.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer", description: "The post (from social_list)" },
+        url: { type: "string", description: "Direct https link to the video file" }
+      },
+      required: ["id", "url"]
+    },
+    group: "social",
+    need: write5,
+    risk: "W1",
+    gates: ["VER"],
+    run: async (ctx, a) => {
+      const d = ws(ctx);
+      let v = await d.videoFromLink(String(a.url));
+      const until = Date.now() + 15e4;
+      while ((v.status === "checking" || v.status === "uploading") && Date.now() < until) {
+        await new Promise((r) => setTimeout(r, 3e3));
+        v = await d.video(v.id);
+      }
+      if (v.status !== "ready")
+        return { ok: false, video: { status: v.status, error: v.error, seconds: v.source_duration } };
+      return { ok: true, post: item(await d.attachVideo(Number(a.id), v.id)) };
+    }
+  }),
+  tool({
+    name: "social_video_detach",
+    description: "Take the video off a LinkedIn, Facebook or Instagram post that hasn't gone out: it's a text post again (a picture can be added after). Preview first.",
+    parameters: { type: "object", properties: { id: { type: "integer" } }, required: ["id"] },
+    group: "social",
+    need: write5,
+    risk: "W1",
+    gates: ["VER"],
+    run: async (ctx, a) => item(await ws(ctx).detachVideo(Number(a.id)))
+  }),
+  tool({
+    name: "tiktok_connect_link",
+    description: "A link for the user to connect their TikTok account (or reconnect): they sign in to TikTok and allow Maggie to see their profile and post videos. Give them the link to open; never ask for a password. TikTok is in beta (testers only; until TikTok reviews our app, videos post as 'Only me' and the account must be private). TikTok posts are short videos (5-30 seconds) that the user approves one by one.",
+    parameters: none,
+    group: "social",
+    need: write5,
+    risk: "W1",
+    gates: ["VER"],
+    run: async (ctx) => {
+      const out = await ws(ctx).connectTikTok("close");
+      return { url: out.url, expires_in_seconds: out.expires_in_seconds };
+    }
+  }),
+  tool({
+    name: "tiktok_creator",
+    description: "What the user's TikTok account allows right now (TikTok asks to check before every post): its name and @username, who a video can be shown to (privacy_options), whether comments / Duet / Stitch are turned off on the account, the longest video it can post, and whether it can post now (problem). Read it before asking the user the TikTok settings of a post.",
+    parameters: none,
+    group: "social",
+    need: read5,
+    risk: "R0",
+    run: async (ctx) => ws(ctx).tiktokCreator()
+  }),
+  tool({
+    name: "social_tiktok_set",
+    description: "Set a TikTok post's settings, ONLY as the user chose them (TikTok's rules: never pick for them, nothing is preset): privacy (one of the account's privacy_options from tiktok_creator: PUBLIC_TO_EVERYONE, MUTUAL_FOLLOW_FRIENDS, FOLLOWER_OF_CREATOR, SELF_ONLY), allow_comment / allow_duet / allow_stitch (off unless the user turns them on; not possible when the account turned them off), disclose (the video promotes a brand, product or service) with your_brand (their own: labelled 'Promotional content') and / or branded (a third party: labelled 'Paid partnership'; can't be SELF_ONLY), is_aigc (AI-generated content label). The caption is the post's text (social_update_copy). Before the user approves, tell them: 'By posting, you agree to TikTok's Music Usage Confirmation' (with branded content: 'TikTok's Branded Content Policy and Music Usage Confirmation'). Preview first.",
+    parameters: {
+      type: "object",
+      properties: {
+        id: { type: "integer", description: "A TikTok post (from social_list)" },
+        privacy: { type: "string", enum: TIKTOK_PRIVACY },
+        allow_comment: { type: "boolean" },
+        allow_duet: { type: "boolean" },
+        allow_stitch: { type: "boolean" },
+        disclose: { type: "boolean" },
+        your_brand: { type: "boolean" },
+        branded: { type: "boolean" },
+        is_aigc: { type: "boolean" }
+      },
+      required: ["id"]
+    },
+    group: "social",
+    need: write5,
+    risk: "W1",
+    gates: ["VER"],
+    run: async (ctx, { id, privacy, ...rest }) => {
+      const answers = Object.fromEntries(
+        Object.entries(rest).filter(([, v]) => v !== void 0)
+      );
+      if (privacy) answers.privacy = privacy;
+      const out = await ws(ctx).setSocialTikTok(Number(id), answers);
+      return item(out);
+    }
+  }),
   tool({
     name: "social_video_add",
-    description: "Make a YouTube post from a video: a DIRECT link to a video file (an .mp4 on their website, a public Dropbox link), never a YouTube / TikTok / Instagram page (we never download those; tell the user to upload the video in the app instead). The video must be 5-30 seconds: give start/end (seconds) to use a part of a longer one. vertical: make a wide video vertical (a Short) cropped at left, middle or right. Maggie writes the title, description and tags from the video and the note (one AI generation) unless write is false. The post waits in Review: YouTube posts are always approved by the user, who must also answer whether it's made for kids. Preview first.",
+    description: "Make video posts (channels: linkedin, facebook, instagram, youtube, tiktok; default youtube; one post each, never google_business: Google posts can't carry video) from a video: a DIRECT link to a video file (an .mp4 on their website, a public Dropbox link), never a YouTube / TikTok / Instagram page (we never download those; tell the user to upload the video in the app instead). The video must be 5-30 seconds: give start/end (seconds) to use a part of a longer one. vertical: make a wide video vertical (a Short) cropped at left, middle or right. Maggie writes YouTube's title, description and tags, TikTok's caption, or the LinkedIn / Facebook / Instagram text, from the video and the note (one AI generation per channel) unless write is false. Each post waits in Review: video posts are always approved by the user. YouTube asks whether it's made for kids; TikTok asks who can view it and the other TikTok settings (social_tiktok_set, as the user chooses). is_aigc: TikTok's AI-generated label, only when the user says the video was made with AI. Preview first.",
     parameters: {
       type: "object",
       properties: {
         url: { type: "string", description: "Direct https link to the video file" },
+        channels: {
+          type: "array",
+          items: { type: "string", enum: [...VIDEO_KEYS] },
+          description: "Where the video goes (one post each); default youtube"
+        },
+        is_aigc: { type: "boolean", description: "TikTok: the video is AI-generated (the user said so)" },
         note: { type: "string", description: "What the video is about, in the user's words" },
         write: { type: "boolean", description: "Let Maggie write the details (default true)" },
         start: { type: "number", description: "Start of the part to use, seconds" },
@@ -11473,11 +11624,28 @@ var socialTools = [
       }
       if (v.status !== "ready")
         return { ok: false, video: { status: v.status, error: v.error, seconds: v.source_duration } };
-      const post = await d.postFromVideo(v.id, { note: a.note ?? "", write: a.write !== false });
+      const wanted = (a.channels ?? ["youtube"]).filter(
+        (c) => VIDEO_KEYS.includes(c)
+      );
+      const posts = [];
+      for (const channel of wanted.length ? wanted : ["youtube"]) {
+        posts.push(
+          await d.postFromVideo(v.id, {
+            channel,
+            note: a.note ?? "",
+            write: a.write !== false,
+            ...channel === "tiktok" && a.is_aigc != null ? { is_aigc: a.is_aigc } : {}
+          })
+        );
+      }
       return {
         ok: true,
-        post: item(post),
-        next: "Show the title and description; ask whether it's made for kids and which visibility, then social_youtube_set; the user approves it."
+        ...posts.length === 1 ? { post: item(posts[0]) } : { posts: posts.map(item) },
+        next: [
+          posts.some((p) => p.provider === "youtube") ? "YouTube: show the title and description; ask whether it's made for kids and which visibility, then social_youtube_set." : "",
+          posts.some((p) => p.provider === "tiktok") ? "TikTok: show the caption; read tiktok_creator and ask who can view it, whether to allow comments / Duet / Stitch and whether it promotes a brand, then social_tiktok_set exactly as they say; tell them the Music Usage Confirmation line." : "",
+          "The user approves each post."
+        ].filter(Boolean).join(" ")
       };
     }
   }),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cmo-so/mcp",
-	"version": "0.4.0",
+	"version": "0.6.0",
 	"description": "CMO.so's MCP server for Claude Desktop, Cursor, VS Code and other MCP clients: manage your websites, blog posts, LinkedIn queue and results with Maggie.",
 	"type": "module",
 	"license": "MIT",