@attrkit/mcp 0.4.4 → 0.4.6

package/dist/cli.js

@@ -14070,14 +14070,15 @@ async function callApi(config, path, options = {}) {
     clearTimeout(timer);
   }
 }
+var redact = (text) => text.replace(/\b(?:mk|pk|sk|rk)_[A-Za-z0-9_-]{8,}/g, "[redacted-key]").replace(/\b[Bb]earer\s+[A-Za-z0-9._-]{8,}/g, "Bearer [redacted]").replace(/\bAttriKit-(?:Management|Publishable)\s+\S+/g, "AttriKit-$1 [redacted]").replace(/([?&](?:token|secret|key|password|code|signature)=)[^&\s]+/gi, "$1[redacted]");
 function toToolResult(result) {
   if (!result.ok) {
     const envelope = result.json;
     const code = envelope?.error?.code ?? `http_${result.status}`;
-    const message = envelope?.error?.message ? `: ${envelope.error.message}` : "";
+    const rawMessage = envelope?.error?.message;
+    const message = typeof rawMessage === "string" && rawMessage !== "" ? `: ${redact(rawMessage).slice(0, 400)}` : "";
     const retryAfter = result.status === 429 && result.retryAfter ? ` (Retry-After: ${result.retryAfter})` : "";
-    const redact = (text) => text.replace(/\b(?:mk|pk|sk|rk)_[A-Za-z0-9_-]{8,}/g, "[redacted-key]").replace(/\b[Bb]earer\s+[A-Za-z0-9._-]{8,}/g, "Bearer [redacted]").replace(/\bAttriKit-(?:Management|Publishable)\s+\S+/g, "AttriKit-$1 [redacted]").replace(/([?&](?:token|secret|key|password|code|signature)=)[^&\s]+/gi, "$1[redacted]");
-    const excerpt = !envelope?.error?.message && result.rawBody ? ` — body: ${redact(result.rawBody.replace(/\s+/g, " ").trim()).slice(0, 300)}` : "";
+    const excerpt = typeof rawMessage !== "string" && result.rawBody ? ` — body: ${redact(result.rawBody.replace(/\s+/g, " ").trim()).slice(0, 300)}` : "";
     const hint = result.status === 401 ? " Check ATTRKIT_API_KEY: this is the same error for a missing, wrong, revoked or expired key." : "";
     return {
       content: [{
@@ -14091,12 +14092,21 @@ function toToolResult(result) {
   const isEmptySuccess = result.status === 204 && (result.rawBody === undefined || result.rawBody === "");
   const isJsonEnvelope = result.json !== null && typeof result.json === "object" && !Array.isArray(result.json) && Object.hasOwn(result.json, "data");
   const contentType = (result.contentType ?? "").toLowerCase();
-  const looksLikeMarkup = typeof result.json === "string" && /^\s*<(?:!doctype|html|head|body)\b/i.test(result.json);
-  const isExpectedText = expectedResponse === "text" && typeof result.json === "string" && !contentType.includes("text/html") && !looksLikeMarkup;
+  const looksLikeCsv = (() => {
+    if (typeof result.json !== "string")
+      return false;
+    const firstLine = result.json.split(`
+`, 1)[0]?.trim() ?? "";
+    if (!firstLine || firstLine.startsWith("<"))
+      return false;
+    const columns = firstLine.split(",").map((field) => field.trim().replace(/^"(.*)"$/s, "$1"));
+    return columns.length >= 2 && columns.every((field) => /^[A-Za-z][A-Za-z0-9_]*$/.test(field));
+  })();
+  const isExpectedText = expectedResponse === "text" && typeof result.json === "string" && !contentType.includes("text/html") && looksLikeCsv;
   if (!isEmptySuccess && !isJsonEnvelope && !isExpectedText) {
     const reportedContentType = result.contentType ?? "unknown content type";
     const received = result.json === null ? "an empty body" : Array.isArray(result.json) ? "a JSON array" : typeof result.json === "object" ? "a JSON object without a data field" : `a ${typeof result.json} body`;
-    const body = result.rawBody ?? (typeof result.json === "string" ? result.json : JSON.stringify(result.json, null, 2));
+    const body = redact(result.rawBody ?? (typeof result.json === "string" ? result.json : JSON.stringify(result.json, null, 2))).slice(0, 600);
     return {
       content: [{
         type: "text",
@@ -14112,12 +14122,14 @@ ${body}`
     structuredContent: structured
   };
 }
-var SERVER_VERSION = "0.4.4";
+var SERVER_VERSION = "0.4.6";
 var periodSchema = z4.enum(["7d", "30d", "90d", "all"]).describe("Reporting window. Defaults to 30d.").optional();
 var appIdSchema = z4.string().describe("Optional app id to scope the result to one app.").optional();
 var requiredAppIdSchema = z4.string().describe("The AttrKit app id.");
 var idempotencyKeySchema = z4.string().max(255).describe("Stable retry key for this exact mutation.").optional();
 var ownersSchema = z4.record(z4.string(), z4.enum(["attrkit", "revenuecat", "customer"]));
+var cursorSchema = z4.string().optional().describe("Pass the next_cursor from the previous response to fetch the following page. Omit for the first page.");
+var listLimitSchema = z4.number().int().min(1).max(200).optional().describe("Rows per page, 1-200. The API defaults to 50, so a workspace with more than that needs paging.");
 var spendRowSchema = z4.object({
   campaign_id: z4.string().optional().describe("The AttrKit campaign UUID, NOT the ad network's own campaign id. It is the opposite of create_campaign_link.campaign_id and is the most common mistake here: read it from list_campaigns. The API rejects a network id by name. Preferred snake_case spelling."),
   campaignId: z4.string().optional().describe("Accepted camelCase alias for campaign_id."),
@@ -14214,8 +14226,10 @@ function createServer(config, fetchImpl) {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List apps",
     description: "List the iOS and Android apps in your AttrKit workspace (id, name, platform, bundle id, store id, status).",
-    inputSchema: {}
-  }, async () => toToolResult(await call("/api/v1/apps")));
+    inputSchema: { cursor: cursorSchema, limit: listLimitSchema }
+  }, async ({ cursor, limit }) => toToolResult(await call("/api/v1/apps", {
+    query: { ...cursor ? { cursor } : {}, ...limit === undefined ? {} : { limit: String(limit) } }
+  })));
   server.registerTool("create_app", {
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
     title: "Create an app",
@@ -14362,8 +14376,15 @@ function createServer(config, fetchImpl) {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List campaigns",
     description: "List ad campaigns with their honest profit surface: the scale/cut/hold call, profit p05/p50/p95, spend, retention, and payback. Use this to see how campaigns are performing.",
-    inputSchema: { app_id: appIdSchema, period: periodSchema }
-  }, async ({ app_id, period }) => toToolResult(await call("/api/v1/reports/campaigns", { query: { appId: app_id, period } })));
+    inputSchema: { app_id: appIdSchema, period: periodSchema, cursor: cursorSchema, limit: listLimitSchema }
+  }, async ({ app_id, period, cursor, limit }) => toToolResult(await call("/api/v1/reports/campaigns", {
+    query: {
+      appId: app_id,
+      period,
+      ...cursor ? { cursor } : {},
+      ...limit === undefined ? {} : { limit: String(limit) }
+    }
+  })));
   server.registerTool("list_ads", {
     annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
     title: "List creative-level ad performance",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attrkit/mcp",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "AttrKit's stdio MCP server for its public Management API",
   "keywords": [
     "attrkit",