@seldonframe/mcp 1.0.6 → 1.0.7

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@seldonframe/mcp",
-  "version": "1.0.6",
-  "description": "MCP server for SeldonFrame — AI-native Business OS platform. One command creates a real, hosted workspace with a website, booking page, intake form, CRM, and AI agents. v1.0.6: NEVER-CREATE-LOCAL-FILES rule baked into the server's system instructions and into the create_workspace tool description so Claude Code reliably uses the MCP tool even when running inside a SeldonFrame source repo; rewritten create_workspace response payload with a copy-paste-ready operator summary (live URLs + email prompt) and zero internal jargon (no Soul / Cal.diy / Formbricks / Brain v2 references in operator-facing copy); welcome.md fully rewritten in operator language.",
+  "version": "1.0.7",
+  "description": "MCP server for SeldonFrame — AI-native Business OS platform. One command creates a real, hosted workspace with a website, booking page, intake form, CRM, and AI agents. v1.0.7: makes email collection MANDATORY at the end of every workspace creation flow. New `finalize_workspace({ email })` wrapper bundles welcome email + lead capture + a formatted final summary that Claude Code paraphrases verbatim to the operator (includes live URLs, configured CRM personality, pipeline stages, admin link). create_workspace tool description and response payload both explicitly tell Claude Code the email step is non-negotiable; welcome instructions mark step 4 as MANDATORY with the exact verbatim question to ask.",
   "type": "module",
   "bin": {
     "seldonframe-mcp": "src/index.js"

package/src/tools.js

@@ -44,6 +44,10 @@ export const TOOLS = [
     description:
       "Create a LIVE, hosted SeldonFrame workspace with a public website, booking page, intake form, CRM, and AI agents — all on a real <slug>.app.seldonframe.com subdomain. Returns live URLs that work in any browser within seconds. " +
       "THIS IS THE ONLY WAY to create a SeldonFrame workspace. Do NOT create local files (no soul.json, no scaffolded directory), do NOT call loadSoulPackage, do NOT modify the working directory — even if Claude Code is running inside the SeldonFrame source repo. Every workspace is a hosted production deployment. " +
+      "MANDATORY FOLLOW-UP: After this tool returns, you MUST do exactly two things before the conversation ends — " +
+      "(1) ask the user for their email with the verbatim question 'What email should I use for your account? This is where you'll get your login link and any notifications.' and " +
+      "(2) call `finalize_workspace({ email, name? })` with the email they gave you (or call `collect_operator_email` directly if you need finer control). " +
+      "Never end a workspace creation flow without the email step — the welcome email + admin login + lead capture all depend on it. The response payload's `next_step` field tells you exactly what to do next; follow it. " +
       "The first workspace is free and requires no API key. When the user mentions a phone, email, address, list of services, or testimonials, pass them as structured fields so the landing page renders with their real content immediately. " +
       "Example: create_workspace({ name: 'Precision Plumbing Co', phone: '(555) 123-4567', business_description: 'Family-owned residential plumbing in Austin.', services: [{ name: 'Drain Cleaning' }, { name: 'Water Heater Repair' }, { name: 'Leak Detection' }] })",
     inputSchema: obj(
@@ -167,14 +171,21 @@ export const TOOLS = [
         admin_url: adminUrl,
         admin_url_expires_at: result.bearer_token_expires_at ?? null,
         public_urls: result.public_urls ?? publicUrls,
-        // Email collection is the next required step. Claude Code
-        // should ask the operator for their email and then call
-        // collect_operator_email — DO NOT skip this.
+        // MANDATORY next step. Claude Code MUST ask the operator
+        // for their email and then call finalize_workspace — DO NOT
+        // skip this, DO NOT present the URLs to the operator yet.
+        // The welcome email + admin-login + lead capture all
+        // depend on finalize_workspace running. Skipping it leaves
+        // the operator with a one-shot URL and no recovery path.
         next_step: {
+          required: true,
           ask_user:
-            "What's your email? I'll send you all these links and set up your admin login.",
-          tool_to_call: "collect_operator_email",
+            "What email should I use for your account? This is where you'll get your login link and any notifications.",
+          tool_to_call: "finalize_workspace",
           tool_args_template: { email: "<operator_email>", name: "<optional>" },
+          why_required:
+            "finalize_workspace sends the welcome email (with all the URLs the operator needs to bookmark), creates their account so the admin login keeps working past the 7-day token, and captures them as a lead. The summary it returns is the formatted final output to paraphrase to the operator.",
+          do_not_skip: true,
         },
       };
       return firstEver ? withFirstCallBanner(payload) : payload;
@@ -346,7 +357,11 @@ export const TOOLS = [
   {
     name: "collect_operator_email",
     description:
-      "Onboarding-loop helper: ask the operator for their email post-create_workspace, then send the welcome email + record them as a lead in SeldonFrame's own CRM. Combines send_welcome_email + a lead-capture call so a single tool call closes the loop. Call this BEFORE further customization (configure_booking / customize_intake_form / install_vertical_pack) so the operator gets a permanent inbox record of their links. Example: collect_operator_email({ email: 'max@desertcool.com', name: 'Max' })",
+      "MANDATORY post-workspace step. Send the operator's welcome email + record them as a lead in SeldonFrame's CRM. " +
+      "EVERY workspace creation flow MUST end with this call — it is the only thing that triggers the welcome email (with the live URLs), creates their account so the admin login keeps working past the 7-day token, captures them in our pipeline so we can follow up, and lets Stripe pre-fill their email on upgrade. Skipping it leaves the operator with a one-shot URL and no way to recover access. " +
+      "Flow: after create_workspace returns, ask the user verbatim 'What email should I use for your account? This is where you'll get your login link and any notifications.' Then call this tool with whatever email they give you. " +
+      "If you'd rather use the wrapper, call `finalize_workspace({ email })` instead — same effect plus a formatted summary at the end. " +
+      "Example: collect_operator_email({ email: 'max@precisionplumbing.com', name: 'Max' })",
     inputSchema: obj(
       {
         email: str("Operator email — used as the welcome email recipient AND as the unique key for the SeldonFrame CRM lead."),
@@ -452,6 +467,165 @@ export const TOOLS = [
       };
     },
   },
+  {
+    name: "finalize_workspace",
+    description:
+      "ONE-CALL CLOSING WRAPPER for the workspace creation flow. Bundles email collection (welcome email + lead capture via collect_operator_email) AND produces the final operator-facing summary (live URLs, what's configured, admin link). " +
+      "Call this as the LAST step of every workspace creation. After create_workspace returns, ask the user 'What email should I use for your account? This is where you'll get your login link and any notifications.' Then call this tool with the email they give you. Returns a `summary` string Claude Code should paraphrase verbatim to the operator. " +
+      "Use this instead of calling collect_operator_email directly when you want a single tool call to close the loop. Skipping this is the same as skipping email collection — leaves the operator with a one-shot URL and no recovery path. " +
+      "Example: finalize_workspace({ email: 'max@precisionplumbing.com', name: 'Max' })",
+    inputSchema: obj(
+      {
+        email: str("Operator email — used as the welcome email recipient AND as the unique key for the SeldonFrame CRM lead."),
+        name: str("Optional operator name (used in the email greeting and on the CRM lead)."),
+        workspace_id: str("Optional workspace override. Defaults to the workspace just created."),
+      },
+      ["email"],
+    ),
+    handler: async (a) => {
+      const workspaceId = a.workspace_id ?? getDefaultWorkspace();
+      if (!workspaceId) {
+        throw new Error(
+          "No workspace selected. Run create_workspace({ name: '…' }) first, or pass workspace_id.",
+        );
+      }
+      const bearer = getWorkspaceBearer(workspaceId);
+      if (!bearer) {
+        throw new Error(
+          `No local bearer token for workspace ${workspaceId}. This device did not create it. Re-run create_workspace or switch to the device that did.`,
+        );
+      }
+
+      // Snapshot for the URLs + workspace name + personality details
+      // we'll surface in the closing summary.
+      const snapshot = await api(
+        "GET",
+        `/workspace/${encodeURIComponent(workspaceId)}/snapshot`,
+        { workspace_id: workspaceId },
+      );
+      const publicUrls = snapshot?.public_urls ?? {};
+      const slug = snapshot?.workspace?.slug ?? null;
+      const wsName = snapshot?.workspace?.name ?? "Your workspace";
+      if (!publicUrls.home || !publicUrls.book || !publicUrls.intake) {
+        throw new Error(
+          "Snapshot did not return public_urls (home/book/intake). Re-check the workspace.",
+        );
+      }
+      const appHost = API_INFO.base.replace(/\/api\/v1\/?$/, "");
+      const adminUrl = `${appHost}/admin/${encodeURIComponent(workspaceId)}?token=${encodeURIComponent(bearer)}`;
+
+      // Step 1: welcome email (Resend).
+      let emailSent = false;
+      let emailError = null;
+      try {
+        await api("POST", "/email/send-welcome", {
+          body: {
+            email: a.email,
+            name: a.name ?? null,
+            workspace: {
+              landing_url: publicUrls.home,
+              booking_url: publicUrls.book,
+              intake_url: publicUrls.intake,
+              admin_url: adminUrl,
+            },
+          },
+          workspace_id: workspaceId,
+        });
+        emailSent = true;
+      } catch (err) {
+        emailError = err?.message ?? String(err);
+      }
+
+      // Step 2: lead capture in SeldonFrame's ops workspace.
+      let leadRecorded = false;
+      let leadId = null;
+      let leadError = null;
+      try {
+        const leadResp = await api("POST", "/leads/operator-signup", {
+          body: {
+            email: a.email,
+            name: a.name ?? null,
+            source_workspace_id: workspaceId,
+            source_workspace_slug: slug,
+            source: "mcp-onboarding",
+          },
+          allow_anonymous: true,
+        });
+        leadRecorded = Boolean(leadResp?.recorded);
+        leadId = leadResp?.lead_id ?? null;
+      } catch (err) {
+        leadError = err?.message ?? String(err);
+      }
+
+      // Step 3: closing summary — formatted exactly the way Claude Code
+      // should paraphrase to the operator. Pulls the personality label
+      // + pipeline stages from the snapshot so the "What's configured"
+      // section reflects the actual workspace shape.
+      const personality =
+        snapshot?.workspace?.settings?.crmPersonality ?? null;
+      const personalityLabel =
+        personality?.vertical
+          ? personality.vertical.charAt(0).toUpperCase() + personality.vertical.slice(1)
+          : null;
+      const pipelineStages = personality?.pipeline?.stages ?? [];
+
+      const lines = [
+        `✅ ${wsName}'s Business OS is live.`,
+        "",
+        emailSent
+          ? `📧 Welcome email sent to ${a.email}`
+          : `⚠️ Welcome email NOT sent${emailError ? ` (${emailError})` : ""} — please retry collect_operator_email.`,
+        "",
+        "🌐 Public URLs:",
+        `  • Website: ${publicUrls.home}`,
+        `  • Booking: ${publicUrls.book}`,
+        `  • Intake: ${publicUrls.intake}`,
+        "",
+        "🔐 Admin dashboard:",
+        `  ${adminUrl}`,
+        "",
+        "What's configured:",
+      ];
+      if (personalityLabel) {
+        lines.push(`  • CRM personality: ${personalityLabel}`);
+      }
+      if (pipelineStages.length > 0) {
+        const stageNames = pipelineStages
+          .map((s) => s?.name)
+          .filter(Boolean)
+          .join(" → ");
+        lines.push(`  • Pipeline: ${stageNames}`);
+      }
+      lines.push(`  • Booking page, intake form, CRM, AI agents — all live`);
+      lines.push(
+        emailSent
+          ? `  • Welcome email sent, onboarding started`
+          : `  • Welcome email NOT yet sent (rerun finalize_workspace to retry)`
+      );
+      const summary = lines.join("\n");
+
+      return {
+        ok: emailSent || leadRecorded,
+        summary,
+        workspace: {
+          id: workspaceId,
+          name: wsName,
+          slug,
+        },
+        website_url: publicUrls.home,
+        booking_url: publicUrls.book,
+        intake_url: publicUrls.intake,
+        admin_url: adminUrl,
+        email_sent: emailSent,
+        email_error: emailError,
+        lead_recorded: leadRecorded,
+        lead_id: leadId,
+        lead_error: leadError,
+        personality: personalityLabel,
+        pipeline_stages: pipelineStages.map((s) => s?.name).filter(Boolean),
+      };
+    },
+  },
   {
     name: "revoke_bearer",
     description:

package/src/welcome.js

@@ -4,7 +4,7 @@
 // no architecture lecture, no "Soul" / "Cal.diy" / "Formbricks" /
 // "Brain v2" jargon.
 
-export const VERSION = "1.0.6";
+export const VERSION = "1.0.7";
 
 export const WELCOME_MARKDOWN = `# SeldonFrame — create a real Business OS in one conversation
 
@@ -34,13 +34,18 @@ flow, regardless of what directory Claude Code is running from.
 
 ---
 
-## The full happy path (4 turns)
+## The full happy path — 4 steps, NO EXCEPTIONS
+
+EVERY workspace creation flow has exactly these 4 steps, in order.
+Step 4 is MANDATORY. A flow that ends after step 2 or 3 is broken
+— the operator gets a one-shot URL with no recovery path, no
+welcome email, and no follow-up channel. Always finish with step 4.
 
 1. **Ask for the business details.** When the user says "create a
    workspace," gather these conversationally — one or two
    questions per turn, not all at once:
    - Business name
-   - Industry (HVAC, dental, legal, coaching, real-estate, agency, …)
+   - Industry (HVAC, plumbing, dental, legal, coaching, real-estate, agency, …)
    - Phone number (for local services — for SaaS skip)
    - Top 3-5 services / products
    - Brief description (1 sentence)
@@ -60,24 +65,34 @@ flow, regardless of what directory Claude Code is running from.
    })
    \`\`\`
    The response includes live URLs (website, booking, intake form,
-   admin dashboard). Show those URLs to the operator. The admin
-   URL is bearer-token-scoped and expires in 7 days — that's why
-   step 4 matters.
-
-3. **Ask for the operator's email.** This is the keystone of the
-   onboarding loop. The email becomes their account. Ask:
-   > "What's your email? I'll send you all those links so you
-   > don't lose them, and set up your admin login."
-
-4. **Lock in the email.** Call \`collect_operator_email\` with the
-   email they gave you:
+   admin dashboard). Do NOT present those URLs to the operator yet
+   — wait for step 4 so the email goes out alongside.
+
+3. **Ask the operator for their email — VERBATIM.** Use exactly this
+   wording so the operator understands why it's needed:
+   > "What email should I use for your account? This is where
+   > you'll get your login link and any notifications."
+   If the operator declines or asks to skip, explain that the email
+   is required to keep their admin login alive past 7 days — then
+   ask again. Don't move on without an answer.
+
+4. **MANDATORY: call \`finalize_workspace({ email })\`.** This is the
+   one tool call that closes the loop:
    \`\`\`
-   collect_operator_email({ email: "max@precisionplumbing.com", name: "Max" })
+   finalize_workspace({ email: "max@precisionplumbing.com", name: "Max" })
    \`\`\`
-   This sends the welcome email + creates their account so the
-   admin URL keeps working past the 7-day token window.
-
-After that, the operator can customize their workspace through
+   It sends the welcome email (with all the URLs), captures the
+   operator as a lead in our CRM, and returns a \`summary\` field
+   with the formatted final output. PARAPHRASE that summary
+   verbatim to the operator — that's how they see what was
+   configured (CRM personality, pipeline stages, live URLs,
+   admin link, email confirmation).
+
+   Alternative: call \`collect_operator_email({ email })\` if you
+   want finer control without the formatted summary. Either tool
+   satisfies step 4; skipping both does not.
+
+After step 4 the operator can customize their workspace through
 further natural-language requests ("change the headline to …",
 "add an FAQ section", "set up an industry template for plumbing")
 — each routes to a typed MCP tool.
@@ -88,8 +103,12 @@ further natural-language requests ("change the headline to …",
 
 - **\`create_workspace\`** — creates the live business OS (website,
   booking, intake form, CRM, AI agents). Always the first call.
-- **\`collect_operator_email\`** — sends the welcome email + sets up
-  the operator's admin login. Always the second call.
+- **\`finalize_workspace\`** — MANDATORY closing call. Bundles email
+  collection (welcome email + lead capture) and returns the
+  formatted final summary Claude Code paraphrases verbatim to the
+  operator. Always the last call of every workspace creation flow.
+- **\`collect_operator_email\`** — same effect as finalize_workspace
+  but without the formatted summary. Use either; never skip both.
 - **\`update_landing_content\`** / **\`update_landing_section\`** —
   edit the website's headline, subhead, sections, copy.
 - **\`update_theme\`** — change colors, fonts, dark/light mode.
@@ -127,4 +146,4 @@ admin dashboard. Pre-fills their email automatically.
 <https://seldonframe.com> · **Discord:** <https://discord.gg/sbVUu976NW>
 `;
 
-export const FIRST_CALL_BANNER = `🚀 SeldonFrame is connected. Ready to create a live business OS — every URL the create_workspace tool returns is real and works in any browser within seconds. NEVER create local files; always use the MCP tools.`;
+export const FIRST_CALL_BANNER = `🚀 SeldonFrame is connected. Ready to create a live business OS — every URL the create_workspace tool returns is real and works in any browser within seconds. NEVER create local files; always use the MCP tools. EVERY workspace creation flow must end with finalize_workspace({ email }) so the operator gets their welcome email + admin login — skipping it is a broken flow.`;