@sellable/mcp 0.1.619-wip.121.2 → 0.1.619

package/dist/server.js

@@ -1,8 +1,12 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, GetPromptRequestSchema, ListPromptsRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
-import { getSkillByName, listSkills } from "./skills.js";
+import { createMcpCredentialBoundary, resolveMcpCredentialIntent, } from "./agent-service-auth.js";
+import { getConfig, getConfiguredCredentialIntent } from "./auth.js";
+import { compileAgentToolPolicy, createAgentMcpAuthorizationHandlers, } from "./agent-tool-policy.js";
+import { HttpAgentApprovalEffectPort } from "./agent-approval-effect-port.js";
 import { MCP_RUNTIME_IDENTITY } from "./runtime-identity.js";
+import { getSkillByName, listSkills } from "./skills.js";
 import { getAuthStatus } from "./tools/auth.js";
 import { handleAddColumn, handleCommitBlueprint, } from "./tools/blueprint-commit.js";
 import { bootstrapCreateCampaign } from "./tools/bootstrap.js";
@@ -29,9 +33,8 @@ import { copySenderConfigTool, getEngageMemoryTool, migrateFlatConfigsTool, reco
 import { getEngageStateTool, setEngageStateTool, } from "./tools/engage-state.js";
 import { bulkEnrichWithProspeo, enrichWithProspeo, getProspeoCredits, } from "./tools/enrichment.js";
 import { getRefillPlanV2 } from "./tools/evergreen-refill-plan.js";
-import { getRuntimeIdentityTool } from "./tools/runtime-identity.js";
-import { getCampaignFramework } from "./tools/framework.js";
 import { bootstrapFindLeads, cancelFindLeads, getFindLeadsRun, reissueFindLeadsWatchLink, updateFindLeadsRun, waitForFindLeadsRun, } from "./tools/find-leads-runs.js";
+import { getCampaignFramework } from "./tools/framework.js";
 import { confirmHarvestJobCompanies, searchHarvestJobs, } from "./tools/harvest-jobs.js";
 import { checkInboxReplyEligibility, getInboxThread, searchInboxThreads, sendInboxDraft, sendInboxManualReply, updateInboxDraft, } from "./tools/inbox.js";
 import { cancelLeadImport, confirmLeadList, confirmProspeoCompanyAccounts, getProviderPrompt, importLeads, listDncEntriesTool, loadCsvDncEntriesTool, loadCsvDomains, loadCsvLinkedinLeads, lookupSalesNavFilter, saveDomainFilters, searchApollo, searchProspeo, searchProspeoCompanies, searchSalesNav, searchSignals, selectPromisingPosts, setHeadlineICPCriteria, } from "./tools/leads.js";
@@ -39,16 +42,17 @@ import { fetchCompany, fetchCompanyPosts, fetchLinkedInPosts, fetchLinkedInProfi
 import { getCampaignNavigationState } from "./tools/navigation.js";
 import { addOnDemandLeads, createOnDemandCampaign, createOnDemandTable, initOnDemandSequence, pauseOnDemandCampaign, startOnDemandCampaign, } from "./tools/one-off.js";
 import { upsertRubric } from "./tools/processing.js";
-import { preflightFindLeadsProvider } from "./tools/provider-preflight.js";
 import { completeSenderResearch, getPostFindLeadsScoutRegistry, getSourceScoutRegistry, getSubskillAsset, getSubskillPrompt, listSubskillPrompts, searchSubskillPrompts, } from "./tools/prompts.js";
+import { preflightFindLeadsProvider } from "./tools/provider-preflight.js";
 import { waitForCampaignTableReady, waitForLeadListReady, } from "./tools/readiness.js";
-import { refreshSenderEngagementCommand } from "./tools/refresh-sender-engagement.js";
 import { refillSendsV2Command } from "./tools/refill-sends-v2.js";
 import { executeRefillSendsCommand } from "./tools/refill-sends.js";
 import { getRefillTargetPlan } from "./tools/refill-target-plan.js";
+import { refreshSenderEngagementCommand } from "./tools/refresh-sender-engagement.js";
 import { allTools } from "./tools/registry.js";
 import { getRows, getTableRows, getTableRowsMinimal } from "./tools/rows.js";
 import { addRubricItem, checkRubric, deleteRubricItem, draftRubrics, saveRubrics, selectNecessaryRubrics, updateRubricItem, waitForRubricResults, } from "./tools/rubrics.js";
+import { getRuntimeIdentityTool } from "./tools/runtime-identity.js";
 import { getSchedulerFillCapacity } from "./tools/scheduler-fill-capacity.js";
 import { runSchedulerSweep } from "./tools/scheduler-run.js";
 import { getSenderRoutingTool, setSenderRoutingTool, } from "./tools/sender-routing.js";
@@ -133,12 +137,79 @@ function isStructuredToolResult(result) {
         typeof result === "object" &&
         Array.isArray(result.content));
 }
-server.setRequestHandler(ListToolsRequestSchema, async () => ({
-    tools: allTools,
-}));
+const agentApprovalPort = new HttpAgentApprovalEffectPort();
+const agentMcpAuthorization = createAgentMcpAuthorizationHandlers({
+    allTools,
+    policy: compileAgentToolPolicy(),
+    approvalPort: agentApprovalPort,
+});
+const credentialBoundary = createMcpCredentialBoundary({
+    allTools,
+    agentAuthorization: agentMcpAuthorization,
+    resolve: () => resolveMcpCredentialIntent({
+        env: process.env,
+        getConfig,
+        getCredentialIntent: getConfiguredCredentialIntent,
+    }),
+});
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+    return { tools: credentialBoundary.listTools() };
+});
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const { name, arguments: args } = request.params;
     try {
+        const meta = request.params._meta?.sellableAgent;
+        const argumentApprovalId = args &&
+            typeof args === "object" &&
+            typeof args.approvalId === "string"
+            ? args.approvalId
+            : undefined;
+        const boundary = await credentialBoundary.authorizeCall({
+            name,
+            args,
+            requesterId: meta?.requesterId,
+            channelId: meta?.channelId,
+            providerRequestId: meta?.providerRequestId,
+            approvalId: meta?.approvalId ?? argumentApprovalId,
+        });
+        if (boundary.mode === "invalid") {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            ok: false,
+                            error: "invalid_agent_service_context",
+                            decision: "DENY",
+                        }),
+                    },
+                ],
+            };
+        }
+        let agentEffectId;
+        if (boundary.mode === "agent_service") {
+            const authorization = boundary.authorization;
+            if (!authorization.allowed) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                ok: false,
+                                error: authorization.code,
+                                decision: authorization.decision,
+                                ...(authorization.approval
+                                    ? { approval: authorization.approval }
+                                    : {}),
+                            }),
+                        },
+                    ],
+                };
+            }
+            agentEffectId = boundary.authorization.effectId;
+        }
         let result;
         switch (name) {
             case "get_auth_status":
@@ -567,9 +638,25 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                 break;
             case "get_company_info":
                 result = await getCompanyInfoTool();
+                if (boundary.mode === "agent_service" &&
+                    boundary.context &&
+                    result &&
+                    typeof result === "object") {
+                    result = {
+                        ...result,
+                        agentContext: {
+                            workspaceId: boundary.context.principal.workspaceId,
+                            agentId: boundary.context.principal.agentId,
+                            credentialGeneration: boundary.context.principal.generation,
+                            requesterId: boundary.context.requesterId,
+                            channelId: boundary.context.channelId,
+                            providerRequestId: boundary.context.providerRequestId,
+                        },
+                    };
+                }
                 break;
             case "set_company_info":
-                result = await setCompanyInfoTool(args);
+                result = await setCompanyInfoTool(args, agentEffectId);
                 break;
             case "list_senders":
                 result = await listSenders(args);

package/dist/tools/company-info.d.ts

@@ -5,6 +5,7 @@ type CompanyInfoResponse = {
     maxLength: number;
 };
 type CompanyInfoInput = {
+    approvalId?: string;
     companyInfoMarkdown?: string | null;
     expectedUpdatedAt?: string | null;
     forceOverwrite?: boolean;
@@ -16,6 +17,7 @@ export declare const companyInfoToolDefinitions: ({
         type: string;
         properties: {
             companyInfoMarkdown?: undefined;
+            approvalId?: undefined;
             expectedUpdatedAt?: undefined;
             forceOverwrite?: undefined;
         };
@@ -32,6 +34,10 @@ export declare const companyInfoToolDefinitions: ({
                 type: string[];
                 description: string;
             };
+            approvalId: {
+                type: string;
+                description: string;
+            };
             expectedUpdatedAt: {
                 type: string[];
                 description: string;
@@ -49,7 +55,7 @@ export declare function getCompanyInfoTool(): Promise<CompanyInfoResponse | {
     ok: false;
     error: string;
 }>;
-export declare function setCompanyInfoTool(input?: CompanyInfoInput): Promise<{
+export declare function setCompanyInfoTool(input?: CompanyInfoInput, agentEffectId?: string): Promise<{
     ok: false;
     saved?: false;
     error: string;

package/dist/tools/company-info.js

@@ -21,6 +21,10 @@ export const companyInfoToolDefinitions = [
                     type: ["string", "null"],
                     description: 'Complete Company Info markdown to store verbatim. Use real newlines, not literal "\\n" sequences. Empty, null, or omitted markdown clears Company Info.',
                 },
+                approvalId: {
+                    type: "string",
+                    description: "The APPROVED approvalId returned by the first confirmation-required set_company_info attempt for these exact arguments. It authorizes the Agent request and is never written into Company Info.",
+                },
                 expectedUpdatedAt: {
                     type: ["string", "null"],
                     description: "The updatedAt returned by get_company_info. Use null only when get_company_info returned updatedAt: null for an unconfigured document.",
@@ -98,7 +102,7 @@ export async function getCompanyInfoTool() {
         return toolError("read", error);
     }
 }
-export async function setCompanyInfoTool(input = {}) {
+export async function setCompanyInfoTool(input = {}, agentEffectId) {
     const markdown = typeof input.companyInfoMarkdown === "string"
         ? input.companyInfoMarkdown
         : null;
@@ -129,7 +133,9 @@ export async function setCompanyInfoTool(input = {}) {
     }
     try {
         const api = getApi();
-        const response = await api.put("/api/v3/reply-management/company-info", payload);
+        const response = agentEffectId
+            ? await api.put("/api/v3/reply-management/company-info", payload, { agentEffectId })
+            : await api.put("/api/v3/reply-management/company-info", payload);
         const normalizedResponse = normalizeCompanyInfoResponse(response);
         if ("ok" in normalizedResponse) {
             return {

package/dist/tools/registry.d.ts

@@ -8103,45 +8103,6 @@ export declare const allTools: ({
         };
         required: string[];
     };
-} | {
-    name: string;
-    description: string;
-    inputSchema: {
-        type: string;
-        properties: {
-            workspaceId: {
-                type: string;
-                description: string;
-            };
-            mode: {
-                type: string;
-                enum: string[];
-                description: string;
-            };
-            senderId: {
-                type: string;
-                description: string;
-            };
-            tableId: {
-                type: string;
-                description: string;
-            };
-            maxPosts: {
-                type: string;
-                description: string;
-            };
-            maxEngagerPages: {
-                type: string;
-                description: string;
-            };
-            dryRunFingerprint: {
-                type: string;
-                description: string;
-            };
-        };
-        required: string[];
-        additionalProperties: boolean;
-    };
 } | {
     name: string;
     description: string;
@@ -8278,6 +8239,45 @@ export declare const allTools: ({
         required: string[];
         additionalProperties: boolean;
     };
+} | {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: string;
+        properties: {
+            workspaceId: {
+                type: string;
+                description: string;
+            };
+            mode: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            senderId: {
+                type: string;
+                description: string;
+            };
+            tableId: {
+                type: string;
+                description: string;
+            };
+            maxPosts: {
+                type: string;
+                description: string;
+            };
+            maxEngagerPages: {
+                type: string;
+                description: string;
+            };
+            dryRunFingerprint: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+        additionalProperties: boolean;
+    };
 } | {
     name: string;
     description: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.619-wip.121.2",
+  "version": "0.1.619",
   "type": "module",
   "description": "Sellable MCP server for Claude Code, Codex, and Hermes campaign workflows",
   "main": "dist/index.js",
@@ -10,8 +10,7 @@
     "sellable-mcp-dev": "dist/index-dev.js"
   },
   "scripts": {
-    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
-    "build": "npm run clean && tsc",
+    "build": "tsc",
     "prepack": "npm run build",
     "start": "node dist/index.js",
     "start:dev": "node dist/index-dev.js",