@sellable/mcp 0.1.362 → 0.1.364

package/dist/api.d.ts

@@ -2,6 +2,12 @@ export interface ApiResponse<T> {
     data: T;
     error?: string;
 }
+export interface DownloadToFileResult {
+    path: string;
+    bytes: number;
+    contentType: string | null;
+    status: number;
+}
 export declare class SellableApiError extends Error {
     status: number;
     body: string;
@@ -15,6 +21,7 @@ export declare class SellableApi {
     private request;
     get<T>(path: string): Promise<T>;
     getText(path: string): Promise<string>;
+    downloadToFile(requestPath: string, destinationPath: string): Promise<DownloadToFileResult>;
     post<T>(path: string, body?: object): Promise<T>;
     put<T>(path: string, body?: object): Promise<T>;
     patch<T>(path: string, body?: object): Promise<T>;

package/dist/api.js

@@ -1,4 +1,9 @@
 import { getConfig, getConfigPath } from "./auth.js";
+import { createWriteStream } from "node:fs";
+import { mkdir, rename, rm, stat } from "node:fs/promises";
+import path from "node:path";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
 export class SellableApiError extends Error {
     status;
     body;
@@ -61,6 +66,33 @@ export class SellableApi {
         const response = await this.requestResponse("GET", path);
         return response.text();
     }
+    async downloadToFile(requestPath, destinationPath) {
+        const response = await this.requestResponse("GET", requestPath);
+        if (!response.body) {
+            throw new SellableApiError(response.status, "Response body was empty for file download");
+        }
+        await mkdir(path.dirname(destinationPath), { recursive: true });
+        const tempPath = `${destinationPath}.tmp-${process.pid}-${Date.now()}`;
+        let completed = false;
+        try {
+            const nodeStream = Readable.fromWeb(response.body);
+            await pipeline(nodeStream, createWriteStream(tempPath, { flags: "wx" }));
+            const fileStat = await stat(tempPath);
+            await rename(tempPath, destinationPath);
+            completed = true;
+            return {
+                path: destinationPath,
+                bytes: fileStat.size,
+                contentType: response.headers.get("content-type"),
+                status: response.status,
+            };
+        }
+        finally {
+            if (!completed) {
+                await rm(tempPath, { force: true }).catch(() => undefined);
+            }
+        }
+    }
     async post(path, body) {
         return this.request("POST", path, body);
     }

package/dist/server.js

@@ -48,6 +48,7 @@ import { exportTableCsv, listTables } from "./tools/tables.js";
 import { handleVerifyTableRow } from "./tools/verify-row.js";
 import { sanitizeWatchUrlsForMcpResult } from "./tools/watch-url-security.js";
 import { getCampaignWaterfall, setCampaignWaterfallOrder, } from "./tools/waterfalls.js";
+import { exportWorkspaceCsv } from "./tools/workspace-export.js";
 import { addTeammate, createWorkspace, getActiveWorkspace, listWorkspaces, setActiveWorkspace, } from "./tools/workspaces.js";
 import { checkForUpdates, logUpdateNotice } from "./update-check.js";
 const server = new Server({
@@ -75,8 +76,9 @@ function markEvergreenSetupCampaignsDirty(args) {
     const campaignIds = new Set();
     const bindings = Array.isArray(args.bindings) ? args.bindings : [];
     for (const binding of bindings) {
-        if (!binding || typeof binding !== "object" || Array.isArray(binding))
+        if (!binding || typeof binding !== "object" || Array.isArray(binding)) {
             continue;
+        }
         const campaignId = binding.campaignId;
         if (typeof campaignId === "string" && campaignId.trim()) {
             campaignIds.add(campaignId.trim());
@@ -84,8 +86,9 @@ function markEvergreenSetupCampaignsDirty(args) {
     }
     const receipts = Array.isArray(args.receipts) ? args.receipts : [];
     for (const receipt of receipts) {
-        if (!receipt || typeof receipt !== "object" || Array.isArray(receipt))
+        if (!receipt || typeof receipt !== "object" || Array.isArray(receipt)) {
             continue;
+        }
         const campaignId = receipt.campaignId;
         if (typeof campaignId === "string" && campaignId.trim()) {
             campaignIds.add(campaignId.trim());
@@ -388,6 +391,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             case "export_table_csv":
                 result = await exportTableCsv(args);
                 break;
+            case "export_workspace_csv":
+                result = await exportWorkspaceCsv(args);
+                break;
             case "search_inbox_threads":
                 result = await searchInboxThreads(args);
                 break;

package/dist/tools/cells.js

@@ -2,13 +2,13 @@ import { getApi } from "../api.js";
 export const cellToolDefinitions = [
     {
         name: "update_cell",
-        description: "Update a cell's value. Use for saving crafted messages (messageCellId/subjectCellId), marking examples (exampleCellId with value: true/false), or approving an explicitly selected semantic Approved cell. For route-proof or send-review approval, use the approve cell returned by get_campaign_messages_preview or select_campaign_cells, not get_rows alone.",
+        description: "Update a cell's value. Use for saving crafted messages (messageCellId/subjectCellId), marking examples (exampleCellId with value: true/false), or approving for send (approveCellId with value: true).",
         inputSchema: {
             type: "object",
             properties: {
                 cellId: {
                     type: "string",
-                    description: "Cell ID (messageCellId/subjectCellId, exampleCellId, or a semantic Approved cell from preview/selector; not a stale get_rows approveCellId)",
+                    description: "Cell ID (messageCellId/subjectCellId, exampleCellId, or approveCellId from row)",
                 },
                 value: {
                     oneOf: [{ type: "string" }, { type: "boolean" }, { type: "object" }],

package/dist/tools/prompts.js

@@ -373,7 +373,7 @@ export function getPostFindLeadsScoutRegistry() {
             codex: 'After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not spawn anything before that question. After the answer, launch only Message Drafting. The filter-choice answer is the post-import user gate for this single worker; do not ask another question about starting it in step-wise or YOLO mode. The registry lookup is not a launch: after get_post_find_leads_scout_registry, immediately invoke Task/spawn_agent or the host background-agent mechanism before loading filter-leads.md, before saving rubrics, and before treating skip-filters as ready for message review. Both choices route through this kickoff; do not let filters_skipped jump straight from filter-choice to message-generation. If filters are chosen, the parent stays on Filter Rules and drafts/saves rubrics with MCP tools while Message Drafting runs in the background. If filters are skipped, move to Messages/message review only after Message Drafting has started or is ready; update_campaign(currentStep=messages) is not proof of launch. If the named Message Drafting custom agent is unavailable, spawn a generic gpt-5.5 xhigh Message Drafting background agent with the same lean campaign/table basis. When the background worker starts, persist workerDetails.messageDraftBuilder with statusSource "branch", status "branch-running", runId, startedAt, updatedAt, basisToken when known, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds; workerStatuses.messageDraftBuilder may be "running" as a simple badge only. Never put rich proof under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start the same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource "parent-thread-fallback" and status "fallback-active", and require the same live context, prompt, assets, and validation gate before message review; do not wait until filters are saved and then call the registry.',
             claude: "After confirm_lead_list copies source rows and the initial campaign-table execution slice exists, ask the filter-choice question immediately. Do not invoke any Task/Agent before that question. After the answer, invoke only Message Drafting. If filters are chosen, parent drafts/saves rubrics with MCP tools while Message Drafting runs, asks filter approval, then joins Message Drafting. If filters are skipped, invoke only Message Drafting and move to Messages/message review.",
             parentThreadRule: 'Named agents are optional acceleration, but message drafting is not optional. The only normal background worker is Message Drafting. The filter-choice answer is the campaign-scoped go-ahead for this single post-import worker; do not ask another question to start it in step-wise or YOLO mode. If a named agent is unavailable, use a generic gpt-5.5 xhigh Message Drafting background agent. source work and filter work stay in the parent thread with MCP tools. If post-find-leads-message-scout is available, run it as the background Message Draft Builder after the filter-choice answer. The registry lookup is not a launch: get_post_find_leads_scout_registry only identifies the worker, and Message Drafting counts as started only after Task/spawn_agent or the host background-agent tool is invoked, or after the parent begins the same full message branch inline because no background-agent tool is callable. This launch must happen before loading filter-leads.md, save_rubrics, filter approval, or skip-filter message review; currentStep=messages is not proof of launch. If post-find-leads-message-scout is absent, do not customer-surface install status. Do not silently treat message drafting as started; the main thread must either launch the background worker or execute the same message branch from CampaignOffer state, selected source state, workflowTableId, and initial campaign-table execution slice rows. For a spawned worker, record workerDetails.messageDraftBuilder with statusSource branch / status branch-running, runId, startedAt, updatedAt, and basis containing campaignId, selectedLeadListId, workflowTableId, filterChoice, and reviewBatchRowHash or reviewBatchRowIds. workerStatuses.messageDraftBuilder is optional simple badge text only ("running", "ready", "blocked", "idle"); never put runId/statusSource/basis under workerStatuses and never use workerStatuses.messageDrafting. If no background-agent tool is callable, start that same full message branch inline before filter drafting or before skip-filter message review, record workerDetails.messageDraftBuilder with statusSource parent-thread-fallback / status fallback-active then ready, and require the same live context, prompt, assets, and validation gate before message review; do not report that as a background worker failure. If neither branch nor inline fallback can run, return blocked/retry-needed; do not wait until filters are saved and then call the registry. The Message Drafting handoff must be lean. Do not paste copied row counts, brief hashes, review-batch hashes, full reviewBatchRowIds, broad row data, or local debug artifacts into the spawn prompt. Local markdown/json files are not normal-path inputs. The filter-choice question is the first post-import user gate; do not load post-lead registries or filter references before it. Message drafting starts after the filter-choice answer, must load get_subskill_prompt({ subskillName: "generate-messages" }), and must load every required message asset named by generate-messages Mode 0 through get_subskill_asset before drafting. Reference Asset Loading means loading the required pre-draft reference pack before drafting; return blocked/retry-needed if required assets cannot be loaded; load ai-tells.md because it is never optional. The branch or parent-thread fallback loads the full generate-messages prompt and every referenced asset through get_subskill_asset. After generating/revising the candidate and before returning ready, must load get_subskill_prompt({ subskillName: "create-campaign-v2-validation" }) as the final internal validation gate, must read live campaign table state through scoped MCP/product tools, and must reject mismatched selectedLeadListId/workflowTableId/campaign/workspace input. Do not block when filters were chosen but leadScoringRubrics are not yet visible in the branch read; the parent owns save_rubrics and filter approval in parallel, so Message Drafting should return status ready with basisStatus usable_initial when campaign/list/table identity and the non-empty execution slice match. Do not use any alternate, local-artifact, or examples-only message prompt. User copy feedback, message QA, or rewrite requests before approve-message must be routed back to Message Drafting with the current recommendation, lean campaign/table basis, and latest user text; the parent must not rewrite or QA the template from memory and must not call update_campaign_brief before approve-message. The worker validates internally and returns only templateRecommendation, tokenFillRules, renderedGoodSample, status, approveOrReviseRecommendation, validationStatus, outputAt, outputHash, and blocked/retry detail. Do not render renderedFallbackSample, risk notes, or a qaReceipt on the normal happy path. On the filter path, save_rubrics keeps the browser on Filter Rules after save_rubrics so the user can approve the saved criteria; after saved-filter approval, move to Filter Leads with currentStep=apply-icp-rubric whether Message Drafting is ready or still running. Wait there for message approval. Enrichment, filtering, Generate Message cells, sender setup, sequence attach, and launch wait for template approval on the Use Template path. On the skip path, move to Messages/message review after Message Drafting has started or is ready and wait for message approval before enrichment or Settings. Do not render message review from checklist or shortcut instructions; message review requires a messageDraftRecommendation whose basis proves the generate-messages prompt, required message assets, and validation gate ran for the current campaign/table execution slice. Do not automatically rerun Message Drafting after filters/enrichment finish; show the initial draft by default and offer an enriched rewrite only with explicit user opt-in. Handoff and recommendation output are Markdown with labeled fields, not raw JSON.',
-            prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }) and get_campaign_refill_state before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation: calculate the bounded target from sender capacity when needed, then use the refill workflow to decide same-campaign source replenishment, enrichment/prep, approval/ready state, scheduler reread, and sender-health blockers. Do not create warm-post-engager side campaigns. For already-running regular campaigns that need Signal Discovery source replenishment, use the guarded currentStep clear with clearCurrentStepIfMatches:"running", campaign-scoped provider prompt/search/select, and import_leads with the existing sourceLeadListId when a newly approved selected-post scrape would otherwise return reusedExistingSourceList. After confirm_lead_list copies rows into an existing table, avoid fixed maxRowsToCheck:100; inspect reviewBatch/table selectors or use adaptive/wider bounded prep so appended rows are included. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor. Before source import, prep, or approval, require exact visible approval and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested, but still do not launch. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if scheduler-owned scheduledFor cells are not present, report prepared/approved/ready - awaiting scheduler instead of success. Do not call start_campaign as part of fill/schedule horizon. Do not call start_campaign as part of refill sends. Launch/start is a separate explicit human action after the operator intentionally wants sends to go out, and it must still verify that the bounded cohort is the only approved cohort and must not broad approve-all. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane. start_campaign remains forbidden until explicit launch/start approval outside refill sends.`,
+            prepareMessagesRule: `Default create-campaign stays on the existing reviewBatchLimit:15 first campaign-table execution slice. For plain post-mint fill/load/refill requests, load get_subskill_prompt({ subskillName: "refill-sends-workflow" }), then call resolve_campaign_fill_route({ intent:"plain" }) and get_campaign_refill_state before any mutation. Route outcomes are route:"evergreen_horizon", route:"active_campaigns", and route:"ask_create"; stay in the same campaignOfferId/campaignId context after minting. Plain fill is not an alias for fill_campaign_horizon or campaign creation. fill_campaign_horizon is evergreen-only and is not the generic regular-campaign fill path. Campaign creation is allowed only after route:"ask_create" and explicit user selection; it is never the default response to plain fill. Treat "fill up/load sends" as capacity-fill preparation: calculate the bounded target from sender capacity when needed, then use the refill workflow to decide same-campaign source replenishment, enrichment/prep, approval/ready state, scheduler reread, and sender-health blockers. Do not create warm-post-engager side campaigns. Do not interpret checkedRows as enriched rows; it is only the table cursor. Prepared, approved, and ready_to_schedule rows are intermediate states; never call them scheduled unless a re-read proves scheduler-owned scheduled cells with non-null scheduledFor. Before source import, prep, or approval, require exact visible approval and a fresh get_campaign_refill_state reread; stop if freshness.stateHash or exact ids changed. For "approve X messages", use approvalMode:approve only when explicitly requested, but still do not launch. For "schedule X sends" or "fill sender sends", approve only when explicitly requested, then re-read campaign/table scheduled counts; if scheduler-owned scheduledFor cells are not present, report prepared/approved/ready - awaiting scheduler instead of success. Do not call start_campaign as part of fill/schedule horizon. Do not call start_campaign as part of refill sends. Launch/start is a separate explicit human action after the operator intentionally wants sends to go out, and it must still verify that the bounded cohort is the only approved cohort and must not broad approve-all. campaignId is CampaignOffer.id. If the user asks to stop preparation, the target is wrong, or status shows the wrong campaign/table, use cancel_campaign_message_preparation only for the exact active job. Low-level selectors are diagnostics and recovery only for this lane. start_campaign remains forbidden until explicit launch/start approval outside refill sends.`,
         },
     };
 }

package/dist/tools/registry.js

@@ -42,6 +42,7 @@ import { setupEvergreenCampaignsToolDefinitions } from "./setup-evergreen-campai
 import { tableToolDefinitions } from "./tables.js";
 import { verifyRowToolDefinitions } from "./verify-row.js";
 import { waterfallToolDefinitions } from "./waterfalls.js";
+import { workspaceExportToolDefinitions } from "./workspace-export.js";
 import { workspaceToolDefinitions } from "./workspaces.js";
 export const allTools = [
     ...campaignToolDefinitions,
@@ -83,6 +84,7 @@ export const allTools = [
     ...engageMemoryToolDefinitions,
     ...sequencerToolDefinitions,
     ...tableToolDefinitions,
+    ...workspaceExportToolDefinitions,
     ...columnSchemaToolDefinitions,
     ...blueprintCommitToolDefinitions,
     ...columnUpdateToolDefinitions,

package/dist/tools/rows.js

@@ -50,7 +50,7 @@ export const rowToolDefinitions = [
     },
     {
         name: "get_rows",
-        description: "Get row details for crafting. Returns: name, company, title, linkedinUrl, currentMessage, currentSubject, messageCellId, subjectCellId, approveCellId, exampleCellId, isExample, carryData (extra CSV columns like 'Jobs Hiring For'), enrichment (summary, experience, education). Use after selecting a lead. Do not treat approveCellId from get_rows as the product-visible approval source of truth; on campaign tables it can differ from the send-review Approved column. For route-proof or send-review approval, use get_campaign_messages_preview or select_campaign_cells to select the semantic Approved cell.",
+        description: "Get row details for crafting. Returns: name, company, title, linkedinUrl, currentMessage, currentSubject, messageCellId, subjectCellId, approveCellId, exampleCellId, isExample, carryData (extra CSV columns like 'Jobs Hiring For'), enrichment (summary, experience, education). Use after selecting a lead.",
         inputSchema: {
             type: "object",
             properties: {

package/dist/tools/setup-evergreen-campaigns.d.ts

@@ -13,7 +13,7 @@ type SetupEvergreenCampaignsInput = {
     }>;
     planRevision?: string;
     selectedActionIds?: string[];
-    receipts?: unknown[];
+    receipts?: Array<Record<string, unknown>>;
 };
 export declare const setupEvergreenCampaignsToolDefinitions: {
     name: string;

package/dist/tools/workspace-export.d.ts

@@ -0,0 +1,82 @@
+export type WorkspaceExportDataset = "people" | "events";
+export interface ExportWorkspaceCsvInput {
+    exportType?: "outreach";
+    datasets?: WorkspaceExportDataset[];
+    outputDir?: string;
+    fromSentAt?: string;
+    toSentAt?: string;
+    campaignIds?: string[];
+    tableIds?: string[];
+}
+export declare const workspaceExportToolDefinitions: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            exportType: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            datasets: {
+                type: string;
+                items: {
+                    type: string;
+                    enum: string[];
+                };
+                description: string;
+            };
+            outputDir: {
+                type: string;
+                description: string;
+            };
+            fromSentAt: {
+                type: string;
+                description: string;
+            };
+            toSentAt: {
+                type: string;
+                description: string;
+            };
+            campaignIds: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: string;
+            };
+            tableIds: {
+                type: string;
+                items: {
+                    type: string;
+                };
+                description: string;
+            };
+        };
+        required: never[];
+        additionalProperties: boolean;
+    };
+}[];
+export declare function exportWorkspaceCsv(input?: ExportWorkspaceCsvInput): Promise<{
+    status: string;
+    outputDir: string;
+    manifestPath: string;
+    datasets: {
+        dataset: WorkspaceExportDataset;
+        path: string;
+        rows: number;
+        bytes: number;
+        status: "complete" | "failed";
+    }[];
+    exportCutoff: string;
+    workspace: {
+        id?: string;
+        name?: string | null;
+    };
+    skipped: string[];
+    failures: {
+        dataset: WorkspaceExportDataset;
+        error: string;
+    }[];
+}>;

package/dist/tools/workspace-export.js

@@ -0,0 +1,328 @@
+import { parse } from "csv-parse";
+import { createReadStream } from "node:fs";
+import { lstat, mkdir, readFile, rename, rm, writeFile, } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { getApi } from "../api.js";
+import { getConfig } from "../auth.js";
+const MAX_FILTER_IDS = 100;
+const MAX_QUERY_LENGTH = 8000;
+export const workspaceExportToolDefinitions = [
+    {
+        name: "export_workspace_csv",
+        description: "Export active-workspace outreach CSVs to local files on the MCP host. " +
+            "Phase 70 supports workflow-table-backed reached-out people and event-level outreach only. " +
+            "Requires a valid Sellable API key plus active workspace; run list_workspaces and set_active_workspace first if needed. " +
+            "The manifest includes file paths, counts, filters, package/runtime metadata, and skipped/deferred scope notes. " +
+            "CSV files may contain prospect and outreach metadata, so store them appropriately.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                exportType: {
+                    type: "string",
+                    enum: ["outreach"],
+                    description: "Export family. Phase 70 supports outreach only.",
+                },
+                datasets: {
+                    type: "array",
+                    items: { type: "string", enum: ["people", "events"] },
+                    description: "Datasets to export. Defaults to both people and events.",
+                },
+                outputDir: {
+                    type: "string",
+                    description: "Optional base directory. A unique run subdirectory is created inside it.",
+                },
+                fromSentAt: {
+                    type: "string",
+                    description: "Optional ISO lower bound for outreach sentAt.",
+                },
+                toSentAt: {
+                    type: "string",
+                    description: "Optional ISO upper bound for outreach sentAt.",
+                },
+                campaignIds: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "Optional campaign ids to include, max 100.",
+                },
+                tableIds: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "Optional workflow table ids to include, max 100.",
+                },
+            },
+            required: [],
+            additionalProperties: false,
+        },
+    },
+];
+function assertIsoDate(value, field) {
+    if (value === undefined || value === null || value === "")
+        return undefined;
+    if (typeof value !== "string")
+        throw new Error(`${field} must be a string`);
+    const date = new Date(value);
+    if (!Number.isFinite(date.getTime())) {
+        throw new Error(`${field} must be a valid ISO date`);
+    }
+    return date.toISOString();
+}
+function assertIdList(value, field) {
+    if (value === undefined || value === null)
+        return [];
+    if (!Array.isArray(value))
+        throw new Error(`${field} must be an array`);
+    if (value.length > MAX_FILTER_IDS) {
+        throw new Error(`${field} supports at most ${MAX_FILTER_IDS} ids`);
+    }
+    return value.map((id) => {
+        if (typeof id !== "string" || !/^[A-Za-z0-9_.:-]+$/.test(id)) {
+            throw new Error(`${field} contains an invalid id`);
+        }
+        return id;
+    });
+}
+function normalizeDatasets(value) {
+    if (value === undefined || value === null)
+        return ["people", "events"];
+    if (!Array.isArray(value))
+        throw new Error("datasets must be an array");
+    if (value.length === 0)
+        throw new Error("datasets cannot be empty");
+    const unique = Array.from(new Set(value));
+    return unique.map((dataset) => {
+        if (dataset !== "people" && dataset !== "events") {
+            throw new Error("datasets may only contain people or events");
+        }
+        return dataset;
+    });
+}
+function validateInput(input) {
+    if (input.exportType && input.exportType !== "outreach") {
+        throw new Error("exportType must be outreach");
+    }
+    const fromSentAt = assertIsoDate(input.fromSentAt, "fromSentAt");
+    const toSentAt = assertIsoDate(input.toSentAt, "toSentAt");
+    if (fromSentAt && toSentAt && new Date(fromSentAt) > new Date(toSentAt)) {
+        throw new Error("fromSentAt must be before toSentAt");
+    }
+    return {
+        datasets: normalizeDatasets(input.datasets),
+        outputDir: input.outputDir,
+        fromSentAt,
+        toSentAt,
+        campaignIds: assertIdList(input.campaignIds, "campaignIds"),
+        tableIds: assertIdList(input.tableIds, "tableIds"),
+    };
+}
+async function packageVersion() {
+    const entryDir = process.argv[1]
+        ? path.dirname(path.resolve(process.argv[1]))
+        : process.cwd();
+    const candidates = [
+        path.resolve(process.cwd(), "mcp/sellable/package.json"),
+        path.resolve(entryDir, "../package.json"),
+        path.resolve(entryDir, "../../package.json"),
+    ];
+    for (const candidate of candidates) {
+        try {
+            const raw = await readFile(candidate, "utf8");
+            const parsed = JSON.parse(raw);
+            if (typeof parsed.version === "string")
+                return parsed.version;
+        }
+        catch {
+            // Try the next runtime/package layout.
+        }
+    }
+    return null;
+}
+async function ensureSafeBaseDir(outputDir) {
+    const baseDir = path.resolve(outputDir || path.join(tmpdir(), "sellable-mcp-exports"));
+    await mkdir(baseDir, { recursive: true });
+    const baseStat = await lstat(baseDir);
+    if (baseStat.isSymbolicLink()) {
+        throw new Error("outputDir must not be a symlink");
+    }
+    if (!baseStat.isDirectory()) {
+        throw new Error("outputDir must be a directory");
+    }
+    return baseDir;
+}
+async function createRunDir(outputDir) {
+    const baseDir = await ensureSafeBaseDir(outputDir);
+    for (let attempt = 0; attempt < 10; attempt++) {
+        const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+        const runDir = path.join(baseDir, `workspace-outreach-${stamp}-${process.pid}-${attempt}`);
+        try {
+            await mkdir(runDir, { recursive: false });
+            return runDir;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+    }
+    throw new Error("Failed to create unique export directory");
+}
+function buildQuery(params) {
+    const searchParams = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+        if (Array.isArray(value)) {
+            if (value.length > 0)
+                searchParams.set(key, value.join(","));
+        }
+        else if (value) {
+            searchParams.set(key, value);
+        }
+    }
+    const query = searchParams.toString();
+    if (query.length > MAX_QUERY_LENGTH) {
+        throw new Error("Export query string is too long");
+    }
+    return query ? `?${query}` : "";
+}
+async function countCsvRows(filePath) {
+    const parser = createReadStream(filePath).pipe(parse({ bom: true, relax_column_count: true }));
+    let records = 0;
+    for await (const _record of parser) {
+        records += 1;
+    }
+    return Math.max(0, records - 1);
+}
+function redactManifest(value) {
+    if (Array.isArray(value))
+        return value.map(redactManifest);
+    if (!value || typeof value !== "object")
+        return value;
+    const entries = Object.entries(value).map(([key, entry]) => {
+        if (/token|secret|authorization|api[_-]?key/i.test(key)) {
+            return [key, "[redacted]"];
+        }
+        return [key, redactManifest(entry)];
+    });
+    return Object.fromEntries(entries);
+}
+async function writeJsonAtomic(filePath, value) {
+    const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
+    await writeFile(tempPath, `${JSON.stringify(value, null, 2)}\n`, {
+        encoding: "utf8",
+        flag: "wx",
+    });
+    await rename(tempPath, filePath);
+}
+export async function exportWorkspaceCsv(input = {}) {
+    const config = getConfig();
+    const workspaceId = config.activeWorkspaceId || config.workspaceId || null;
+    if (!workspaceId) {
+        throw new Error("No active workspace selected. Run list_workspaces then set_active_workspace before export_workspace_csv.");
+    }
+    const validated = validateInput(input);
+    const startedAt = new Date().toISOString();
+    const runDir = await createRunDir(validated.outputDir);
+    const api = getApi();
+    const metadataQuery = buildQuery({
+        fromSentAt: validated.fromSentAt,
+        toSentAt: validated.toSentAt,
+        campaignIds: validated.campaignIds,
+        tableIds: validated.tableIds,
+    });
+    const metadataEndpoint = `/api/v3/mcp/workspace-export/outreach/metadata${metadataQuery}`;
+    const backendMetadata = await api.get(metadataEndpoint);
+    const exportCutoff = backendMetadata.exportCutoff;
+    if (!exportCutoff) {
+        throw new Error("Export metadata did not include exportCutoff");
+    }
+    const files = [];
+    const failures = [];
+    for (const dataset of validated.datasets) {
+        const query = buildQuery({
+            dataset,
+            exportCutoff,
+            fromSentAt: validated.fromSentAt,
+            toSentAt: validated.toSentAt,
+            campaignIds: validated.campaignIds,
+            tableIds: validated.tableIds,
+        });
+        const endpoint = `/api/v3/mcp/workspace-export/outreach${query}`;
+        const filePath = path.join(runDir, `outreach-${dataset}.csv`);
+        try {
+            const download = await api.downloadToFile(endpoint, filePath);
+            files.push({
+                dataset,
+                path: download.path,
+                rows: await countCsvRows(download.path),
+                bytes: download.bytes,
+                endpoint,
+                contentType: download.contentType,
+                status: "complete",
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "Unknown error";
+            failures.push({ dataset, error: message });
+            files.push({
+                dataset,
+                path: filePath,
+                rows: 0,
+                bytes: 0,
+                endpoint,
+                contentType: null,
+                status: "failed",
+                error: message,
+            });
+            await rm(filePath, { force: true }).catch(() => undefined);
+        }
+    }
+    const manifest = redactManifest({
+        status: failures.length > 0 ? "partial" : "success",
+        tool: "export_workspace_csv",
+        exportType: "outreach",
+        startedAt,
+        completedAt: new Date().toISOString(),
+        package: {
+            name: "@sellable/mcp",
+            version: await packageVersion(),
+        },
+        config: {
+            apiUrl: config.apiUrl,
+            activeWorkspaceId: workspaceId,
+            activeWorkspaceName: config.activeWorkspaceName || config.workspaceName,
+        },
+        backend: {
+            metadataEndpoint,
+            metadata: backendMetadata,
+        },
+        filters: {
+            fromSentAt: validated.fromSentAt ?? null,
+            toSentAt: validated.toSentAt ?? null,
+            campaignIds: validated.campaignIds,
+            tableIds: validated.tableIds,
+            exportCutoff,
+        },
+        outputDir: runDir,
+        files,
+        failures,
+    });
+    const manifestPath = path.join(runDir, "manifest.json");
+    await writeJsonAtomic(manifestPath, manifest);
+    return {
+        status: failures.length > 0 ? "partial" : "success",
+        outputDir: runDir,
+        manifestPath,
+        datasets: files.map((file) => ({
+            dataset: file.dataset,
+            path: file.path,
+            rows: file.rows,
+            bytes: file.bytes,
+            status: file.status,
+        })),
+        exportCutoff,
+        workspace: backendMetadata.workspace ?? {
+            id: workspaceId,
+            name: config.activeWorkspaceName || config.workspaceName || null,
+        },
+        skipped: backendMetadata.skipped ?? [],
+        failures,
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.362",
+  "version": "0.1.364",
   "type": "module",
   "description": "Sellable MCP server for Claude Code and Codex campaign workflows",
   "main": "dist/index.js",

package/skills/create-campaign/SKILL.md

@@ -142,14 +142,6 @@ Treat active fills as capacity-fill preparation: calculate the bounded target
 from sender capacity when needed, then use the refill workflow to decide source
 replenishment, enrichment/prep, approval policy, and scheduler proof. Mutation
 requires exact visible approval and a fresh `get_campaign_refill_state` reread.
-For already-running regular campaigns that need Signal Discovery source
-replenishment, the refill workflow owns the guarded recovery: clear
-`currentStep` only with `clearCurrentStepIfMatches:"running"`, load the
-campaign-scoped provider prompt, run campaign-scoped `search_signals`, select
-posts with a capacity-target scrape plan, import into the same source path, and
-restore Running through `confirm_lead_list`. If the copied rows append beyond
-the first table page, inspect `reviewBatch` with table-schema/selector tools and
-use adaptive or wider bounded message prep; do not rely on a fixed `maxRowsToCheck:100` pass after source copy.
 If the user says "prepare/generate X messages", use message-prep primitives with
 `targetPreparedMessages:X` and default `approvalMode:"mark_ready"`. If the user
 says "approve X messages", use `approvalMode:"approve"` only for the bounded

package/skills/create-campaign-v2/references/final-handoff-contract.md

@@ -63,15 +63,6 @@ currentStep: "sequence" })` to attach the sender via the v3 senders route and
    and Paid InMail Campaign is only an explicit paid-InMail opt-in because it
    can spend InMail credits. If that response does not persist `currentStep:
 "send"`, call `update_campaign({ campaignId, currentStep: "send" })`.
-   Then reread `get_campaign({ campaignId })` and `list_tables()` and verify the
-   current `workflowTableId` has `hasSequence:true`. A campaign-level
-   `SEQUENCE_EXISTS` response is not enough when `confirm_lead_list` or another
-   copy step has moved the campaign to a new current campaign table while an old
-   stale shell table still owns the sequence columns. In that stale-shell case,
-   either repair only the current workflowTableId with `attach_sequence` using
-   the same non-paid product template the recommended selector would have chosen,
-   or stop and report the stale-shell sequence blocker if replacement was not
-   explicitly approved. Never choose a paid-InMail template for this repair.
 9. Surface the `handoff.orientation` string from `auto-execute.yaml` and
    summarize the visible Settings/Sequence/Send state without repeating the
    watch URL.
@@ -150,11 +141,7 @@ order, atomically:
 2. **Validate sender + sequence state.** If no sender is attached, refuse start
    and return the Settings link. If no sequence is attached but a sender is
    attached, call `attach_recommended_sequence({ campaignId, currentStep:
-"send" })` before approving messages, then rerun the precondition check against
-   the current workflowTableId rather than an older shell table. If
-   `SEQUENCE_EXISTS` only proves an old shell while the current table lacks
-   `hasSequence:true`, stop or perform the explicitly approved stale-shell
-   current-table repair before any launch.
+"send" })` before approving messages.
 3. **Approve generated messages** through the bounded or broad path:
    - If the user asked for an exact send count, such as "schedule 250 sends",
      verify the preparation job approved only the bounded prepared cohort for