@seldonframe/mcp 1.0.8 → 1.1.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@seldonframe/mcp",
-  "version": "1.0.8",
-  "description": "MCP server for SeldonFrame — AI-native Business OS platform. One command creates a real, hosted workspace with a website, booking page, intake form, CRM, and AI agents. v1.0.8: bulletproof finalize_workspace guardrail (create_workspace response now leads with a DO_NOT_DISPLAY warning string and hides URLs under _pending_after_email so models physically can't paste them to the operator without first calling finalize_workspace). New city/state args on create_workspace drive timezone inference (San Diego, CA → America/Los_Angeles instead of UTC). Backend fixes shipped alongside: classifier broadened so 'Heating', 'Cooling', 'AC', 'Furnace' etc. resolve to local_service / HVAC personality (was leaking to coaching → wrong pipeline stages); 'Your Business' nav placeholder eliminated (workspace.name now flows through); booking duration now defaults to 60 min for HVAC/coaching, 30 min for legal/dental, 45 for agency; black-square hero corner artifacts removed; 'Brain v2' / 'Compiling Soul' loading messages reworded for operators.",
+  "version": "1.1.0",
+  "description": "MCP server for SeldonFrame — AI-native Business OS platform. One command creates a real, hosted workspace with a website, booking page, intake form, CRM, and AI agents. v1.1.0: ATOMIC WORKSPACE CREATION. New `create_full_workspace` tool runs the entire 13-step pipeline server-side in one call — workspace, business profile, CRM with industry-specific pipeline stages, booking page with availability, intake form, themed landing page, all deployed with live URLs. Same input always produces the same output, no Claude-Code orchestration, no retries, no 404s. Admin dashboard URL is now created ONLY by finalize_workspace (not by create_full_workspace or create_workspace) — structural enforcement of the email-collection step instead of prompt-wording enforcement. The legacy create_workspace tool stays for backward compatibility but is no longer the recommended path.",
   "type": "module",
   "bin": {
     "seldonframe-mcp": "src/index.js"

package/src/tools.js

@@ -195,18 +195,154 @@ export const TOOLS = [
         },
         // URLs are in the payload (downstream consumers may rely on
         // them) but in a bucket whose name signals "do not display."
+        // May 2, 2026: admin_url REMOVED from this bucket. The admin
+        // browser URL is constructed only by finalize_workspace, so
+        // there is structurally nothing for Claude Code to leak before
+        // the email step. Public URLs stay (they're idempotent and
+        // useful to consumers other than the operator chat).
         _pending_after_email: {
           website_url: websiteUrl,
           booking_url: bookingUrl,
           intake_url: intakeUrl,
-          admin_url: adminUrl,
-          admin_url_expires_at: result.bearer_token_expires_at ?? null,
           public_urls: result.public_urls ?? publicUrls,
         },
       };
       return firstEver ? withFirstCallBanner(payload) : payload;
     },
   },
+  {
+    name: "create_full_workspace",
+    description:
+      "PREFERRED for new workspaces. Atomic, server-side workspace creation: takes structured business info and creates everything in ONE call — workspace, business profile, CRM with industry-specific pipeline stages, booking page with availability, intake form, themed landing page, all deployed with live URLs. " +
+      "Use this instead of create_workspace + a long sequence of customization tools. The pipeline runs server-side with a fixed order — same input always produces same output, no retries, no 404s. " +
+      "MANDATORY FOLLOW-UP: After this returns `status: 'ready'`, ask the operator verbatim 'What email should I use for your account? This is where you'll get your login link and notifications.' Then call `finalize_workspace({ workspace_id, email })`. The admin dashboard URL is ONLY created by finalize_workspace — it does not exist in this response (so there's nothing for you to display prematurely). " +
+      "Example: create_full_workspace({ business_name: 'Summit Air Comfort', city: 'Phoenix', state: 'AZ', phone: '(480) 555-2100', services: ['AC repair', 'heating installation', 'duct cleaning'], business_description: 'Residential and commercial HVAC in Phoenix', review_count: 950, review_rating: 4.7, trust_signals: ['licensed', 'bonded', 'insured'], emergency_service: true, same_day: true, service_area: ['Scottsdale', 'Tempe', 'Mesa'] })",
+    inputSchema: obj(
+      {
+        business_name: str("Business display name (e.g. 'Summit Air Comfort')."),
+        city: str("Operator's city. Drives timezone inference."),
+        state: str("US state code or full name (or Canadian province). Drives timezone inference."),
+        phone: str("Business phone, any format. Renders in nav, hero, footer."),
+        services: {
+          type: "array",
+          description:
+            "Services / offerings the business provides — each as a plain string. The classifier reads these to pick the right CRM personality (HVAC, legal, dental, coaching, agency, default).",
+          items: { type: "string" },
+        },
+        business_description: str(
+          "One paragraph describing the business — drives the hero subhead, about section, and (critically) the personality classifier. Include industry words verbatim ('residential HVAC', 'family-owned plumbing', 'dental practice')."
+        ),
+        review_count: { type: "number", description: "Optional — number of reviews. Surfaces in trust strip + hero proof metric." },
+        review_rating: { type: "number", description: "Optional — average star rating (e.g. 4.7). Surfaces in trust strip." },
+        certifications: {
+          type: "array",
+          description: "Optional — credentials like ['EPA-certified', 'NATE-certified']. Surfaces in trust strip.",
+          items: { type: "string" },
+        },
+        trust_signals: {
+          type: "array",
+          description: "Optional — short claims like ['licensed', 'bonded', 'insured']. Surfaces in trust strip.",
+          items: { type: "string" },
+        },
+        emergency_service: { type: "boolean", description: "Optional — operator offers 24/7 emergency service. Surfaces in nav + hero." },
+        same_day: { type: "boolean", description: "Optional — same-day service available. Surfaces in trust strip." },
+        service_area: {
+          type: "array",
+          description: "Optional — cities or neighborhoods served (e.g. ['Scottsdale', 'Tempe']).",
+          items: { type: "string" },
+        },
+        email: str("Optional contact email surfaced in the landing footer (NOT the operator's account email — that comes via finalize_workspace)."),
+        address: str("Optional business address."),
+      },
+      ["business_name", "city", "state", "phone", "services", "business_description"]
+    ),
+    handler: async (args) => {
+      const firstEver = isFirstEverCall();
+      const result = await api("POST", "/workspaces/create-full", {
+        body: {
+          business_name: args.business_name,
+          city: args.city,
+          state: args.state,
+          phone: args.phone,
+          services: args.services,
+          business_description: args.business_description,
+          review_count: args.review_count ?? null,
+          review_rating: args.review_rating ?? null,
+          certifications: args.certifications ?? null,
+          trust_signals: args.trust_signals ?? null,
+          emergency_service: args.emergency_service ?? null,
+          same_day: args.same_day ?? null,
+          service_area: args.service_area ?? null,
+          email: args.email ?? null,
+          address: args.address ?? null,
+        },
+        allow_anonymous: true,
+      });
+
+      if (result?.status !== "ready" || !result?.workspace_id) {
+        return result;
+      }
+
+      // Stash the bearer locally so subsequent MCP calls (finalize_workspace
+      // + the customization tools) can authenticate. We strip the bearer
+      // from the visible response — only Claude Code's stash uses it.
+      if (result._bearer_token) {
+        rememberWorkspace({
+          workspace_id: result.workspace_id,
+          bearer_token: result._bearer_token,
+        });
+      }
+
+      // Build the operator-facing payload. Notable absence: admin_url.
+      // The admin browser URL is created in finalize_workspace, NOT
+      // here — that's the structural enforcement of email collection.
+      const guardrail = [
+        "⚠️ WORKSPACE CREATED — DO NOT END YET ⚠️",
+        "",
+        `The workspace "${args.business_name}" exists on the backend but the operator-facing flow is NOT complete. You MUST do exactly two things before responding to the user:`,
+        "",
+        "  1. Ask the user verbatim:",
+        "     " + JSON.stringify(result.operator_prompt ?? "What email should I use for your account?"),
+        "",
+        "  2. Once they reply with an email, call:",
+        `     finalize_workspace({ workspace_id: "${result.workspace_id}", email: <their_email>, name: <optional_name> })`,
+        "",
+        "DO NOT show the operator any URLs from this response yet. The admin dashboard URL does not exist — finalize_workspace creates it. The operator-facing summary (with all URLs + admin link + what's configured) is returned by finalize_workspace.",
+      ].join("\n");
+
+      const payload = {
+        ok: true,
+        DO_NOT_DISPLAY_TO_USER: guardrail,
+        workspace: {
+          id: result.workspace_id,
+          slug: result.slug,
+        },
+        configured: result.configured,
+        next_step: {
+          required: true,
+          do_not_show_urls_until_email_collected: true,
+          ask_user_verbatim: result.operator_prompt,
+          tool_to_call: "finalize_workspace",
+          tool_args_template: {
+            workspace_id: result.workspace_id,
+            email: "<operator_email>",
+            name: "<optional>",
+          },
+          why_required:
+            "finalize_workspace creates the admin dashboard URL (it does not exist yet), sends the welcome email, captures the operator as a lead, and returns the formatted operator-facing summary. Skipping it leaves the operator with no admin access at all.",
+          consequence_of_skipping:
+            "The admin dashboard URL is structurally not in this response. Skipping finalize_workspace means the operator can't get into their workspace. This IS a broken flow.",
+        },
+        // Internal-only — public URLs only. No admin URL anywhere.
+        _pending_after_email: {
+          website_url: result.public_urls?.home ?? null,
+          booking_url: result.public_urls?.book ?? null,
+          intake_url: result.public_urls?.intake ?? null,
+        },
+      };
+      return firstEver ? withFirstCallBanner(payload) : payload;
+    },
+  },
   {
     name: "list_workspaces",
     description: "List all workspaces known to this device (plus any Pro workspaces if SELDONFRAME_API_KEY is set).",

package/src/welcome.js

@@ -4,7 +4,7 @@
 // no architecture lecture, no "Soul" / "Cal.diy" / "Formbricks" /
 // "Brain v2" jargon.
 
-export const VERSION = "1.0.8";
+export const VERSION = "1.1.0";
 
 export const WELCOME_MARKDOWN = `# SeldonFrame — create a real Business OS in one conversation
 
@@ -50,29 +50,38 @@ welcome email, and no follow-up channel. Always finish with step 4.
    - Top 3-5 services / products
    - Brief description (1 sentence)
 
-2. **Create the workspace.** Call \`create_workspace\` with the
-   structured fields. ALWAYS include city + state when the user
-   mentions a location (drives timezone), and ALWAYS include the
-   industry words verbatim in business_description (drives CRM
-   personality + pipeline stages):
+2. **Create the workspace atomically.** Call \`create_full_workspace\`
+   (the PREFERRED tool for new workspaces). One call → the entire
+   workspace deploys server-side: org + business profile + CRM with
+   industry-specific pipeline + booking page with availability +
+   intake form + themed landing page. Same input always produces
+   the same output — no retries, no 404s, no Claude-Code orchestration.
    \`\`\`
-   create_workspace({
-     name: "Pacific Coast Heating & Air",
-     phone: "(555) 123-4567",
+   create_full_workspace({
+     business_name: "Pacific Coast Heating & Air",
      city: "San Diego",
      state: "CA",
-     business_description: "Family-owned residential HVAC contractor — heating, cooling, AC repair.",
-     services: [
-       { name: "AC Repair" },
-       { name: "Heating Installation" },
-       { name: "Indoor Air Quality" }
-     ]
+     phone: "(555) 123-4567",
+     services: ["AC Repair", "Heating Installation", "Indoor Air Quality"],
+     business_description: "Family-owned residential HVAC contractor — heating, cooling, AC repair in the San Diego area.",
+     // Optional but recommended — enrich the hero proof metrics:
+     review_count: 950,
+     review_rating: 4.7,
+     trust_signals: ["licensed", "bonded", "insured"],
+     emergency_service: true,
+     same_day: true,
+     service_area: ["San Diego", "Chula Vista", "Oceanside"]
    })
    \`\`\`
-   The response is a guardrail payload — its top field is a giant
-   "DO NOT DISPLAY" warning string and the URLs live under
-   \`_pending_after_email\`. Do NOT present anything from this
-   response to the operator. Move directly to step 3.
+   The response carries a guardrail (\`DO_NOT_DISPLAY_TO_USER\`) and
+   intentionally OMITS the admin dashboard URL — it does not exist
+   yet. Do NOT present anything from this response to the operator.
+   Move directly to step 3.
+
+   The legacy \`create_workspace\` tool still works for backward
+   compat but is fragile (assumes Claude Code orchestrates the
+   follow-up customization). Prefer \`create_full_workspace\` for
+   every new flow.
 
 3. **Ask the operator for their email — VERBATIM.** Use exactly this
    wording so the operator understands why it's needed:
@@ -82,21 +91,28 @@ welcome email, and no follow-up channel. Always finish with step 4.
    is required to keep their admin login alive past 7 days — then
    ask again. Don't move on without an answer.
 
-4. **MANDATORY: call \`finalize_workspace({ email })\`.** This is the
-   one tool call that closes the loop:
+4. **MANDATORY: call \`finalize_workspace({ workspace_id, email })\`.**
+   This is the one tool call that closes the loop AND creates the
+   admin dashboard URL (which doesn't exist until this runs):
    \`\`\`
-   finalize_workspace({ email: "max@precisionplumbing.com", name: "Max" })
+   finalize_workspace({
+     workspace_id: "<from-create-full-response>",
+     email: "max@pacificcoasthvac.com",
+     name: "Max"
+   })
    \`\`\`
-   It sends the welcome email (with all the URLs), captures the
-   operator as a lead in our CRM, and returns a \`summary\` field
-   with the formatted final output. PARAPHRASE that summary
-   verbatim to the operator — that's how they see what was
-   configured (CRM personality, pipeline stages, live URLs,
-   admin link, email confirmation).
+   It mints the admin auth token, sends the welcome email (with
+   all the URLs and the admin link), captures the operator as a
+   lead in our CRM, and returns a \`summary\` field with the
+   formatted final output. PARAPHRASE that summary verbatim to the
+   operator — that's how they see what was configured (CRM
+   personality, pipeline stages, live URLs, admin link, email
+   confirmation).
 
    Alternative: call \`collect_operator_email({ email })\` if you
    want finer control without the formatted summary. Either tool
-   satisfies step 4; skipping both does not.
+   satisfies step 4; skipping both does not — and the operator
+   is left with NO admin access at all.
 
 After step 4 the operator can customize their workspace through
 further natural-language requests ("change the headline to …",
@@ -107,14 +123,21 @@ further natural-language requests ("change the headline to …",
 
 ## What the tools do (operator language only)
 
-- **\`create_workspace\`** — creates the live business OS (website,
-  booking, intake form, CRM, AI agents). Always the first call.
-- **\`finalize_workspace\`** — MANDATORY closing call. Bundles email
-  collection (welcome email + lead capture) and returns the
-  formatted final summary Claude Code paraphrases verbatim to the
-  operator. Always the last call of every workspace creation flow.
-- **\`collect_operator_email\`** — same effect as finalize_workspace
-  but without the formatted summary. Use either; never skip both.
+- **\`create_full_workspace\`** — PREFERRED. Atomic, server-side
+  workspace creation. One call → entire business OS deployed.
+  Always the first call for new workspaces.
+- **\`create_workspace\`** — legacy fallback (kept for backward
+  compat). Use create_full_workspace instead for new flows.
+- **\`finalize_workspace\`** — MANDATORY closing call. Mints the
+  admin auth token (the admin URL doesn't exist until this runs),
+  bundles email collection (welcome email + lead capture), and
+  returns the formatted final summary Claude Code paraphrases
+  verbatim to the operator. Always the last call of every
+  workspace creation flow.
+- **\`collect_operator_email\`** — narrower variant of
+  finalize_workspace that only sends the welcome email + captures
+  the lead. Doesn't return the formatted summary. Use either;
+  never skip both.
 - **\`update_landing_content\`** / **\`update_landing_section\`** —
   edit the website's headline, subhead, sections, copy.
 - **\`update_theme\`** — change colors, fonts, dark/light mode.