hermoso 0.1.406 → 0.1.407

package/README.md

@@ -21,9 +21,9 @@ charges per API request.
 
 **What it connects to.** Ad platforms: Meta, Google Ads, TikTok Ads, LinkedIn Ads, Reddit Ads, X Ads,
 Pinterest Ads, Snapchat Ads, Microsoft Advertising, Apple Search Ads, ChatGPT Ads and AppLovin Ads, plus
-product feeds in Google Merchant Center. Publishing and scheduling — **ten** channels: Facebook, Instagram,
-Threads, TikTok, YouTube, X, LinkedIn, Pinterest, Bluesky and Telegram. Messaging: WhatsApp (you message a
-person, so it is not an eleventh publishing channel) and DM automations on Instagram, Facebook Pages and
+product feeds in Google Merchant Center. Publishing and scheduling — **eleven** channels: Facebook, Instagram,
+Threads, TikTok, YouTube, X, LinkedIn, Pinterest, Bluesky, Telegram and Google Business Profile. Messaging: WhatsApp (you message a
+person, so it is not a twelfth publishing channel) and DM automations on Instagram, Facebook Pages and
 Messenger, and X (a keyword comment, a DM, a story reply or an ig.me / m.me link gets an automatic reply). Ad research: the Meta, Google and LinkedIn ad libraries plus organic TikTok,
 Instagram, YouTube, Threads and Reddit. Analytics: Google Analytics 4, Google Search Console and every
 connected platform's own post and campaign insights. Files: Google Drive, Sheets, Docs and OneDrive.
@@ -271,21 +271,27 @@ Real faces from your own photos need a paid plan; AI people work on every plan.
 per-render credit cost) with no ad framing: `generate_image` / `generate_video` with `useBrand:false`,
 `generate_voice`, `generate_text`. The image default is Nano Banana 2.1.
 
-**Publish to your own channels** — **ten** of them: Facebook, Instagram and Threads (`post_to_meta`), TikTok
+**Publish to your own channels** — **eleven** of them: Facebook, Instagram and Threads (`post_to_meta`), TikTok
 (`post_to_tiktok`), YouTube (`post_to_youtube` + `update_youtube_video`, `youtube_video_insights`, comments
 read/reply), X (`post_to_x`, `x_post_metrics`, `x_post_insights`, `x_mentions`, `list_x_dms`, `send_x_dm`),
 LinkedIn profile **and** company Pages (`post_to_linkedin`, `post_to_linkedin_page`), Pinterest
 (`post_to_pinterest` + boards), Bluesky (`post_to_bluesky`, `delete_bluesky_post`, `bluesky_post_metrics`, plus
 `list_bluesky_convos` / `read_bluesky_dm` / `send_bluesky_dm`) and Telegram (`post_to_telegram`,
-`delete_telegram_message`, `list_telegram_chats`). `schedule_post` / `list_scheduled` / `cancel_scheduled` give
+`delete_telegram_message`, `list_telegram_chats`) and Google Business Profile (below). `schedule_post` / `list_scheduled` / `cancel_scheduled` give
 you one content calendar over exactly that set. `upload_file` brings in any external or local media, not just
 Hermoso renders.
 *X posting bills credits per API call (X charges per request); a post containing a link costs 13× one without.*
-*Held back, and named rather than hidden:* **Google Business Profile** is built (`post_to_google_business`,
-reviews, Q&A, insights) and is not offered — Google allowlists that API per project and ours reads 0 QPM, so
-every call would 403 for every user. It is in `schedule_post`'s channel enum and refused at enqueue.
-
-**Message customers on WhatsApp** — messaging, not an eleventh publishing channel: you message a person, and
+**Google Business Profile** is the panel a business shows on Google Search and Maps. `post_to_google_business`
+publishes a Post with text, optionally one photo, and a call-to-action button (Google takes no video in Posts, so
+a schedule with only a video is refused for that channel); `list_google_business_posts` and
+`delete_google_business_post` manage what is showing. `list_google_business_reviews` finds the reviews with no
+answer yet and `reply_to_google_business_review` answers one as the business. `google_business_insights` reports
+search and Maps impressions, calls, website clicks and direction requests, and `google_business_search_keywords`
+the words people searched to find the listing. `list_business_locations`, `get_business_location` and
+`update_business_location` read and edit the listing itself: hours, phone, website, description, categories.
+Business Profile Q&A is not offered: Google retired it on 2025-11-03.
+
+**Message customers on WhatsApp** — messaging, not a twelfth publishing channel: you message a person, and
 nothing here posts to a feed. `list_whatsapp_accounts` finds the Business Account and its
 numbers, `list_whatsapp_templates` / `create_whatsapp_template` / `delete_whatsapp_template` manage the templates
 Meta reviews, and `send_whatsapp_message` sends one — confirm-gated, because it reaches a real phone and Meta

package/mcp/openai-extensions.mjs

@@ -1256,7 +1256,7 @@ export const neutralNote = (t) => {
 // sweeps and drift watches queued for later (measured on a fresh local account: one `agentidle` "nudge", queued for
 // tomorrow, would have shown as "1 render in progress"). Mirrors server.js JOB_TYPES_HIDDEN_FROM_V1, and the check
 // fails if that list gains a type this one lacks. A job queued for LATER is not in progress either.
-export const PANEL_HIDDEN_JOB_TYPES = Object.freeze(['purge', 'agentidle', 'agentsetupmail', 'uploadretention', 'connectordrift', 'falwatch', 'faceassetsweep', 'searchvis', 'mcpcanary', 'welcomeads', 'lifecycleedu', 'connhealth', 'chargednothing', 'emailfeedback']);
+export const PANEL_HIDDEN_JOB_TYPES = Object.freeze(['purge', 'agentidle', 'agentsetupmail', 'uploadretention', 'miniappretention', 'connectordrift', 'falwatch', 'faceassetsweep', 'searchvis', 'mcpcanary', 'welcomeads', 'lifecycleedu', 'connhealth', 'chargednothing', 'emailfeedback']);
 const ageText = (h) => (h == null || !Number.isFinite(+h) ? '' : +h < 1 ? 'just now' : +h < 48 ? `${Math.round(+h)}h ago` : `${Math.round(+h / 24)}d ago`);
 const VIDEO_RE = /\.(mp4|webm|mov|m4v)([?#]|$)/i;
 const clip = (s, n) => { const t = String(s ?? '').replace(/\s+/g, ' ').trim(); return t.length > n ? t.slice(0, n - 1) + '…' : t; };

package/mcp/roster-scope.mjs

@@ -95,6 +95,8 @@ export const TOOL_PROVIDER_RULES = [
   // collide with Hermoso billing, which is buy_credits / billing_status / upgrade_plan and never says "stripe".
   [/stripe/, 'stripe'],
   [/hubspot/, 'hubspot'],
+  // Intercom (2026-10-12): the brand's OWN support inbox, offered only to a workspace that connected it.
+  [/intercom/, 'intercom'],
   // ── posting-only channels ──
   [/youtube/, 'youtube'],
   [/google_business|business_location|^list_business_(categories|attributes)$|^business_google_updated$/, 'google_business'],

package/mcp/tools.mjs

@@ -18795,8 +18795,11 @@ function buildTools(rawServer, opts = {}, sink = null) {
   }, wrap(async (a) => {
     // A PROMPT OR SHOTS, EITHER ONE (2026-10-05). `shots` replaces `prompt` (Kling sends multi_prompt and no prompt at all),
     // so the schema leaves prompt optional and the one refusal lives here: neither is nothing to render. Free, no network.
+    // `speak` alone is a whole request too (2026-10-08): the talk-to-camera lane writes its own staging when prompt is
+    // empty (lib/talking-video.mjs talkingVideoPrompt), and this refusal had been turning every speak-only call away.
     const _hasShots = Array.isArray(a.shots) && a.shots.length > 0;
-    if (!String(a.prompt || '').trim() && !_hasShots) return ok('NOTHING WAS RENDERED and nothing was charged. Say what the clip should show: send `prompt`, or `shots` (a list of {prompt, seconds}) for a multi-shot clip on a model with multiShot true in hermoso_capabilities.', { refused: 'missing_prompt' });
+    const _hasSpeak = !!String(a.speak || '').trim();
+    if (!String(a.prompt || '').trim() && !_hasShots && !_hasSpeak) return ok('NOTHING WAS RENDERED and nothing was charged. Say what the clip should show: send `prompt`, or `shots` (a list of {prompt, seconds}) for a multi-shot clip on a model with multiShot true in hermoso_capabilities.', { refused: 'missing_prompt' });
     // NEVER SILENTLY TRUNCATE A LENGTH ASK. One generation = ONE continuous clip, and workVideo resolves an
     // over-long ask by picking the longest clip the model has — so a 40s generate_video call used to render 15s and
     // report success. A refusal that names the real ceiling and the real alternative is the honest answer, and it

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "hermoso",
-  "version": "0.1.406",
+  "version": "0.1.407",
   "mcpName": "io.github.hermoso-ai/hermoso",
-  "description": "AI marketing agent and AI ad generator, run from your own AI agent. 906 tools. Publishing, scheduling, ad campaign management, comments, DMs and analytics cost no credits on every plan; credits are only for generating creative and for Ad Spy research. AD PLATFORMS: Meta, Google Ads, TikTok Ads, LinkedIn Ads, Reddit Ads, X Ads, Pinterest Ads, Snapchat Ads, Microsoft Advertising, Apple Search Ads, ChatGPT Ads and AppLovin Ads, plus product feeds in Google Merchant Center. PUBLISHING AND SCHEDULING: Facebook, Instagram, Threads, TikTok, YouTube, X, LinkedIn, Pinterest, Bluesky and Telegram. INSTAGRAM DM AUTOMATIONS: a keyword comment, a DM, a story reply or an ig.me link gets an automatic private reply from the brand. AD RESEARCH: the Meta, Google and LinkedIn ad libraries plus organic TikTok, Instagram, YouTube, Threads and Reddit. ANALYTICS: Google Analytics 4, Google Search Console and every connected platform's own post and campaign insights. Also brand onboarding, 50+ image and video generation models, ad scoring, competitor teardowns, Google Drive and OneDrive, a CLI and installable Claude skills.",
+  "description": "AI marketing agent and AI ad generator, run from your own AI agent. 906 tools. Publishing, scheduling, ad campaign management, comments, DMs and analytics cost no credits on every plan; credits are only for generating creative and for Ad Spy research. AD PLATFORMS: Meta, Google Ads, TikTok Ads, LinkedIn Ads, Reddit Ads, X Ads, Pinterest Ads, Snapchat Ads, Microsoft Advertising, Apple Search Ads, ChatGPT Ads and AppLovin Ads, plus product feeds in Google Merchant Center. PUBLISHING AND SCHEDULING: Facebook, Instagram, Threads, TikTok, YouTube, X, LinkedIn, Pinterest, Bluesky, Telegram and Google Business Profile. INSTAGRAM DM AUTOMATIONS: a keyword comment, a DM, a story reply or an ig.me link gets an automatic private reply from the brand. AD RESEARCH: the Meta, Google and LinkedIn ad libraries plus organic TikTok, Instagram, YouTube, Threads and Reddit. ANALYTICS: Google Analytics 4, Google Search Console and every connected platform's own post and campaign insights. Also brand onboarding, 50+ image and video generation models, ad scoring, competitor teardowns, Google Drive and OneDrive, a CLI and installable Claude skills.",
   "type": "module",
   "bin": {
     "hermoso": "bin/hermoso.mjs"