@sellable/mcp 0.1.318 → 0.1.320

package/dist/tools/registry.d.ts

@@ -2426,6 +2426,234 @@ export declare const allTools: ({
         required: string[];
         additionalProperties: boolean;
     };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            threadId: {
+                type: string;
+            };
+            limit?: undefined;
+            cursor?: undefined;
+            filter?: undefined;
+            status?: undefined;
+            senderId?: undefined;
+            classification?: undefined;
+            search?: undefined;
+            includeEnrichment?: undefined;
+            includeReplyEligibility?: undefined;
+            versionId?: undefined;
+            body?: undefined;
+            approvedBody?: undefined;
+            approvedBodyHash?: undefined;
+            approvedThreadSnapshot?: undefined;
+            idempotencyKey?: undefined;
+            approval?: undefined;
+            message?: undefined;
+            approvedMessageHash?: undefined;
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
+    outputSchema: {
+        type: string;
+        additionalProperties: boolean;
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+        idempotentHint?: undefined;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            threadId: {
+                type: string;
+            };
+            versionId: {
+                type: string;
+            };
+            body: {
+                type: string;
+            };
+            limit?: undefined;
+            cursor?: undefined;
+            filter?: undefined;
+            status?: undefined;
+            senderId?: undefined;
+            classification?: undefined;
+            search?: undefined;
+            includeEnrichment?: undefined;
+            includeReplyEligibility?: undefined;
+            approvedBody?: undefined;
+            approvedBodyHash?: undefined;
+            approvedThreadSnapshot?: undefined;
+            idempotencyKey?: undefined;
+            approval?: undefined;
+            message?: undefined;
+            approvedMessageHash?: undefined;
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
+    outputSchema: {
+        type: string;
+        additionalProperties: boolean;
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+        idempotentHint: boolean;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            threadId: {
+                type: string;
+            };
+            versionId: {
+                type: string;
+            };
+            approvedBody: {
+                type: string;
+            };
+            approvedBodyHash: {
+                type: string;
+            };
+            approvedThreadSnapshot: {
+                type: string;
+                properties: {
+                    latestMessageTimestamp: {
+                        type: string[];
+                    };
+                    lastInboundMessageAt: {
+                        type: string[];
+                    };
+                    updatedAt: {
+                        type: string[];
+                    };
+                    reasonCodes: {
+                        type: string;
+                        items: {
+                            type: string;
+                        };
+                    };
+                };
+                additionalProperties: boolean;
+            };
+            idempotencyKey: {
+                type: string;
+            };
+            approval: {
+                type: string;
+                enum: string[];
+            };
+            limit?: undefined;
+            cursor?: undefined;
+            filter?: undefined;
+            status?: undefined;
+            senderId?: undefined;
+            classification?: undefined;
+            search?: undefined;
+            includeEnrichment?: undefined;
+            includeReplyEligibility?: undefined;
+            body?: undefined;
+            message?: undefined;
+            approvedMessageHash?: undefined;
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
+    outputSchema: {
+        type: string;
+        additionalProperties: boolean;
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+        idempotentHint: boolean;
+    };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            threadId: {
+                type: string;
+            };
+            message: {
+                type: string;
+            };
+            approvedMessageHash: {
+                type: string;
+            };
+            approvedThreadSnapshot: {
+                type: string;
+                properties: {
+                    latestMessageTimestamp: {
+                        type: string[];
+                    };
+                    lastInboundMessageAt: {
+                        type: string[];
+                    };
+                    updatedAt: {
+                        type: string[];
+                    };
+                    reasonCodes: {
+                        type: string;
+                        items: {
+                            type: string;
+                        };
+                    };
+                };
+                additionalProperties: boolean;
+            };
+            idempotencyKey: {
+                type: string;
+            };
+            approval: {
+                type: string;
+                enum: string[];
+            };
+            limit?: undefined;
+            cursor?: undefined;
+            filter?: undefined;
+            status?: undefined;
+            senderId?: undefined;
+            classification?: undefined;
+            search?: undefined;
+            includeEnrichment?: undefined;
+            includeReplyEligibility?: undefined;
+            versionId?: undefined;
+            body?: undefined;
+            approvedBody?: undefined;
+            approvedBodyHash?: undefined;
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
+    outputSchema: {
+        type: string;
+        additionalProperties: boolean;
+    };
+    annotations: {
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+        idempotentHint: boolean;
+    };
 } | {
     name: string;
     description: string;
@@ -6313,6 +6541,7 @@ export declare const allTools: ({
             postUrl?: undefined;
             sources?: undefined;
             full?: undefined;
+            fetchMinimal?: undefined;
             companyUrl?: undefined;
             sortBy?: undefined;
             linkedin_url?: undefined;
@@ -6343,6 +6572,7 @@ export declare const allTools: ({
             };
             linkedinUrl?: undefined;
             full?: undefined;
+            fetchMinimal?: undefined;
             companyUrl?: undefined;
             sortBy?: undefined;
             linkedin_url?: undefined;
@@ -6365,6 +6595,11 @@ export declare const allTools: ({
                 description: string;
                 default: boolean;
             };
+            fetchMinimal: {
+                type: string;
+                description: string;
+                default: boolean;
+            };
             limit?: undefined;
             postUrl?: undefined;
             sources?: undefined;
@@ -6390,6 +6625,7 @@ export declare const allTools: ({
             postUrl?: undefined;
             sources?: undefined;
             full?: undefined;
+            fetchMinimal?: undefined;
             sortBy?: undefined;
             linkedin_url?: undefined;
             max_posts?: undefined;
@@ -6421,6 +6657,7 @@ export declare const allTools: ({
             postUrl?: undefined;
             sources?: undefined;
             full?: undefined;
+            fetchMinimal?: undefined;
             linkedin_url?: undefined;
             max_posts?: undefined;
         };
@@ -6446,6 +6683,7 @@ export declare const allTools: ({
             postUrl?: undefined;
             sources?: undefined;
             full?: undefined;
+            fetchMinimal?: undefined;
             companyUrl?: undefined;
             sortBy?: undefined;
         };
@@ -6466,6 +6704,7 @@ export declare const allTools: ({
             postUrl?: undefined;
             sources?: undefined;
             full?: undefined;
+            fetchMinimal?: undefined;
             companyUrl?: undefined;
             sortBy?: undefined;
             max_posts?: undefined;

package/dist/tools/registry.js

@@ -21,6 +21,7 @@ import { engageStateToolDefinitions } from "./engage-state.js";
 import { enrichmentToolDefinitions } from "./enrichment.js";
 import { frameworkToolDefinitions } from "./framework.js";
 import { harvestJobToolDefinitions } from "./harvest-jobs.js";
+import { inboxToolDefinitions } from "./inbox.js";
 import { leadToolDefinitions } from "./leads.js";
 import { linkedinToolDefinitions } from "./linkedin.js";
 import { navigationToolDefinitions } from "./navigation.js";
@@ -53,6 +54,7 @@ export const allTools = [
     ...navigationToolDefinitions,
     ...leadToolDefinitions,
     ...harvestJobToolDefinitions,
+    ...inboxToolDefinitions,
     ...enrichmentToolDefinitions,
     ...processingToolDefinitions,
     ...rubricToolDefinitions,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.318",
+  "version": "0.1.320",
   "type": "module",
   "description": "Sellable MCP server for Claude Code and Codex campaign workflows",
   "main": "dist/index.js",

package/skills/building-gtm-tables/SKILL.md

@@ -111,6 +111,10 @@ Blueprint rules:
 - Use stable, readable column ids such as `linkedin_url`, `enrich_prospect`, and
   `score_icp_mcp`.
 - Use registry type keys exactly, not display names.
+- Treat the API column registry as the source of truth for type validation.
+  MCP code must not maintain its own hardcoded column-type allowlist; if the API
+  returns `phantom_type`, `deprecated_type`, or `not_createable_type`, fix the
+  blueprint to match the current registry response.
 - Treat "Enrich Prospect" as a `http_request` preset, not its own type.
 - Use `score_icp_mcp` for new AI ICP scoring. Do not use legacy
   `score_icp` or the old `score_icp_rubric` alias; they are reserved for older
@@ -145,6 +149,28 @@ Blueprint rules:
     synced sender connections, a positive `check_connection`, or accepted invite
     proof from the current flow.
 
+Config rules:
+
+- Put native column settings in `config`. The commit path preserves full config
+  objects and validates them server-side before mutation.
+- Use blueprint-level `inputMapping` for references to existing producer
+  columns. The commit path materializes those references into production
+  template mappings such as `{{<actual column id>}}` or
+  `{{<actual Enrich Prospect column id>.id}}`.
+- Use `runCondition` for branch gates that should exist in production. Template
+  tokens in `config`, AI prompts, formula expressions, and `runCondition` are
+  dependency-bearing and must point to real producer columns.
+- For outbound HTTP throttling, set `http_request.config.rateLimit` as either
+  `{ "mode": "window", "maxRequests": N, "windowSeconds": S }` or
+  `{ "mode": "concurrency", "maxConcurrent": N }`.
+- For public webhook intake throttling, set
+  `inbound_webhook.config.rateLimit` as
+  `{ "maxRequests": N, "windowSeconds": S }`. Omit it to use the server default.
+- Do not invent per-column `rateLimit` for LinkedIn action columns. Those are
+  governed by sender/account limits and scheduling windows; configure action
+  behavior with `actionConfig`, `waitForEvent`, `runCondition`, and producer
+  mappings.
+
 ## Commit phase
 
 Use exactly one tool for the initial commit:

package/skills/building-gtm-tables/references/column-type-catalog.md

@@ -55,10 +55,11 @@ read/edit/delete safety, but they are not valid `add_column` or
 
 - type: `datetime`
 - displayName: `Date/Time`
+- lifecycle: hidden active, load-only; not a valid create target.
 - category: Lead Data
 - inputs: none.
 - outputs: ISO-like date/time value.
-- when to use: Use for system-owned scheduling timestamps.
+- when to use: Existing tables may contain system-owned scheduling timestamps.
 - when NOT to use: Do not use to wait; use `wait` for sequence timing.
 
 ### Next Action
@@ -117,6 +118,8 @@ read/edit/delete safety, but they are not valid `add_column` or
 - displayName: `Inbound Webhook`
 - category: Lead Data
 - inputs: none.
+- config: optional `rateLimit` as `{ "maxRequests": N, "windowSeconds": S }`;
+  server defaults to 100 requests per 60 seconds when omitted.
 - outputs: received JSON payload and webhook metadata.
 - when to use: Use when rows are populated by external webhook events.
 - when NOT to use: Do not use for polling APIs; use `http_request`.
@@ -163,6 +166,8 @@ read/edit/delete safety, but they are not valid `add_column` or
 - displayName: `Check Open Profile`
 - category: LinkedIn Actions
 - inputs: required `linkedin_url`.
+- config: may use the same `rateLimit` shape as `http_request` for provider
+  lookup throttling.
 - outputs: boolean open-profile decision and lookup metadata.
 - when to use: Use before selecting open-profile InMail behavior.
 - when NOT to use: Do not use to check first-degree connection; use `check_connection`.
@@ -190,6 +195,21 @@ read/edit/delete safety, but they are not valid `add_column` or
   direct `send_dm` is acceptable because `send_dm` also performs the runtime
   connection lookup.
 
+### Check Paid InMail Credits
+
+- type: `check_paid_inmail_credits`
+- displayName: `Check Paid InMail Credits`
+- category: LinkedIn Actions
+- inputs: sender-scoped Sales Navigator credit state and optional paid-credit floor.
+- outputs: `has_paid_inmail_credits`, remaining-credit proof, stale-state flags,
+  and fallback reason metadata.
+- when to use: Use after Check Open Profile says a prospect is closed-profile
+  and the sequence is explicitly allowed to spend paid InMail credits. Branch
+  yes to `send_inmail_closed`; branch no to `check_connection` or invite flow.
+- when NOT to use: Do not use for free open-profile InMail, do not spend credits
+  from this check itself, and do not add it unless the campaign policy opts into
+  the paid-InMail fallback mode.
+
 ### LinkedIn Action
 
 - type: `action`
@@ -296,6 +316,11 @@ read/edit/delete safety, but they are not valid `add_column` or
 
 ## Data & Logic
 
+LinkedIn action columns do not accept a generic per-column `rateLimit`. They
+use sender/account daily limits, sending hours, and action scheduling outside
+the blueprint column config. Use `actionConfig.waitForEvent`, `runCondition`,
+and explicit producer mappings for action behavior.
+
 ### AI Column
 
 - type: `ai_column`
@@ -332,6 +357,10 @@ read/edit/delete safety, but they are not valid `add_column` or
 - displayName: `HTTP Request`
 - category: Data & Logic
 - inputs: required `method`, required `endpoint`, optional `headers`, optional `body`.
+- config: optional `rateLimit` supports rolling windows
+  `{ "mode": "window", "maxRequests": N, "windowSeconds": S }` and concurrency
+  lanes `{ "mode": "concurrency", "maxConcurrent": N }`. Omit it to use the
+  server's default I/O concurrency lane.
 - outputs: HTTP status, response body, and metadata; Enrich Prospect also returns root `id` as the EnrichedProspect id.
 - when to use: Use for REST API calls, including the canonical "Enrich Prospect" preset at `/api/v4/enrich-prospect`.
 - when NOT to use: Do not use when a first-party typed column already handles the action.

package/skills/building-gtm-tables/references/common-blueprints.fixtures.ts

@@ -31,6 +31,7 @@ const httpEnrichConfig = {
     endpoint: { value: "/api/v4/enrich-prospect" },
     body: { value: '{"linkedinUrl":"{{LinkedIn URL}}"}' },
   },
+  runCondition: "{{LinkedIn URL}} !== ''",
 };
 
 export const COMMON_BLUEPRINTS: CommonBlueprintEntry[] = [
@@ -51,7 +52,10 @@ export const COMMON_BLUEPRINTS: CommonBlueprintEntry[] = [
           id: "c3",
           type: "score_icp_mcp",
           name: "ICP Score",
-          config: { rubric: enrichmentRubric },
+          config: {
+            rubric: enrichmentRubric,
+            runCondition: "{{Enrich Prospect.id}} !== ''",
+          },
           inputMapping: { enrichedProspectId: "c2" },
         },
       ],
@@ -78,7 +82,10 @@ export const COMMON_BLUEPRINTS: CommonBlueprintEntry[] = [
           id: "c3",
           type: "score_icp_mcp",
           name: "ICP Score",
-          config: { rubric: enrichmentRubric },
+          config: {
+            rubric: enrichmentRubric,
+            runCondition: "{{Enrich Prospect.id}} !== ''",
+          },
           inputMapping: { enrichedProspectId: "c2" },
         },
         {
@@ -131,7 +138,10 @@ export const COMMON_BLUEPRINTS: CommonBlueprintEntry[] = [
           id: "c4",
           type: "score_icp_mcp",
           name: "ICP Score",
-          config: { rubric: enrichmentRubric },
+          config: {
+            rubric: enrichmentRubric,
+            runCondition: "{{Enrich Prospect.id}} !== ''",
+          },
           inputMapping: { enrichedProspectId: "c3" },
         },
         {
@@ -139,13 +149,15 @@ export const COMMON_BLUEPRINTS: CommonBlueprintEntry[] = [
           type: "generate_message",
           name: "Generate Message",
           config: {
-            runCondition: "{{ICP Score.score}} >= 70",
+            runCondition:
+              "{{Enrich Prospect.id}} !== '' && {{ICP Score.score}} >= 70",
           },
           inputMapping: {
             campaignOfferId: "c2",
             enrichedProspectId: "c3",
           },
-          runCondition: "{{ICP Score.score}} >= 70",
+          runCondition:
+            "{{Enrich Prospect.id}} !== '' && {{ICP Score.score}} >= 70",
         },
       ],
       edges: [
@@ -196,4 +208,41 @@ export const COMMON_BLUEPRINTS: CommonBlueprintEntry[] = [
       ],
     },
   },
+  {
+    slug: "rate-limited-http-and-webhook",
+    description:
+      "Receive webhook payloads and call a rate-limited HTTP enrichment API.",
+    blueprint: {
+      columns: [
+        { id: "c1", type: "text", name: "Company Domain", config: {} },
+        {
+          id: "c2",
+          type: "inbound_webhook",
+          name: "Inbound Payload",
+          config: {
+            rateLimit: { maxRequests: 100, windowSeconds: 60 },
+          },
+        },
+        {
+          id: "c3",
+          type: "http_request",
+          name: "Fetch Account Context",
+          config: {
+            inputMapping: {
+              method: { value: "POST" },
+              endpoint: { value: "https://example.test/account-context" },
+              body: { value: '{"domain":"{{Company Domain}}"}' },
+            },
+            rateLimit: {
+              mode: "window",
+              maxRequests: 10,
+              windowSeconds: 60,
+            },
+          },
+          inputMapping: { domain: "c1" },
+        },
+      ],
+      edges: [{ from: "c1", to: "c3", via: "domain" }],
+    },
+  },
 ];

package/skills/building-gtm-tables/references/common-blueprints.md

@@ -42,3 +42,12 @@ Use `ai_column` only when the user needs a bespoke prompt that is not covered by
 fixed enrichment, scoring, or LinkedIn action columns.
 
 See `COMMON_BLUEPRINTS[3].blueprint` in the fixture.
+
+## 5. Rate-Limited HTTP + Webhook (`rate-limited-http-and-webhook`)
+
+Use `inbound_webhook.config.rateLimit` for public webhook intake and
+`http_request.config.rateLimit` for outbound HTTP calls. HTTP supports rolling
+window limits with `mode: "window"`, `maxRequests`, and `windowSeconds`, or
+concurrency limits with `mode: "concurrency"` and `maxConcurrent`.
+
+See `COMMON_BLUEPRINTS[4].blueprint` in the fixture.

package/skills/create-campaign/SKILL.md

@@ -80,6 +80,14 @@ It bootstraps auth and host capabilities, then loads the internal
 the internal campaign workflow prompt and `core/flow.v2.json` through MCP. Keep
 this wrapper thin; the packaged workflow is the operational source of truth.
 
+## Inbox Reply Tool Boundary
+
+Inbox reply tools are outside campaign creation. If a user asks to search,
+review, edit, or send inbox replies, treat that as a separate inbox workflow
+using the existing product /api/v3/inbox routes. Any draft edit or send requires
+exact approval for the workspace, sender, thread, body, tool, and expected side
+effect before the write tool is called.
+
 CampaignOffer state and the watch link are the customer-facing source of truth.
 Disk artifacts are optional debug/UAT diagnostics; normal customer runs should
 not create, link, or surface local draft files unless the user explicitly asks

package/skills/create-campaign-v2/SKILL.md

@@ -40,6 +40,13 @@ active flow. Legacy packet/mint artifacts stay in
 7. Choose filters, save/approve criteria, then review the message template.
 8. Sync the approved template, queue bounded filtering, review one generated pass, then Settings and launch.
 
+## Inbox Reply Tool Boundary
+
+Inbox reply tools are outside campaign creation. Stop the campaign lane for
+reply search/review/edit/send asks and use existing product /api/v3/inbox routes.
+Before any draft edit/send tool call, require exact approval for workspace,
+sender, thread, body, tool, and expected side effect.
+
 ## Identity-First Campaign Setup
 
 Do not treat the active workspace as the campaign subject. Resolve the

package/skills/research/config.json

@@ -0,0 +1,9 @@
+{
+  "parallelMode": "wide",
+  "agentCount": 6,
+  "maxToolCallsPerAgent": 2,
+  "senderMaxAgents": 2,
+  "senderMaxToolCallsPerAgent": 3,
+  "progressMode": true,
+  "debugMode": true
+}