@sellable/mcp 0.1.619 → 0.1.620-phase111.20260720075026

package/dist/api.d.ts

@@ -10,7 +10,6 @@ export interface DownloadToFileResult {
 }
 export interface ApiRequestOptions {
     workspaceId?: string | null;
-    agentEffectId?: string;
 }
 export declare class SellableApiError extends Error {
     status: number;

package/dist/api.js

@@ -54,9 +54,6 @@ export class SellableApi {
                 "Content-Type": "application/json",
                 Authorization: `Bearer ${config.token}`,
                 ...(workspaceId ? { "x-workspaceid": workspaceId } : {}),
-                ...(options?.agentEffectId
-                    ? { "x-sellable-agent-effect-id": options.agentEffectId }
-                    : {}),
             },
             ...(body && { body: JSON.stringify(body) }),
         });

package/dist/auth.d.ts

@@ -14,8 +14,6 @@ export interface SellableMultiEnvConfig {
 export type SellableConfig = SellableEnvConfig & {
     /** Name of the active environment (e.g. "local", "prod"). */
     activeEnvName?: string;
-    /** Credential class controls MCP discovery/invocation and API semantics. */
-    credentialKind?: "human" | "agent_service";
 };
 export type EngageWorkspaceState = {
     lastSenderId?: string;
@@ -49,8 +47,6 @@ export declare function assertWorkspaceLockSatisfied(action?: string): void;
 export declare function getEffectiveConfiguredWorkspaceId(config: Pick<SellableConfig, "activeWorkspaceId" | "workspaceId">): string | null;
 export declare function resolveWorkspaceIdForRequest(requestedWorkspaceId: string | null | undefined, action?: string): string | null;
 export declare function getConfig(): SellableConfig;
-/** Reads only the credential class; never returns or validates credential bytes. */
-export declare function getConfiguredCredentialIntent(): "unconfigured" | "human" | "agent_service" | "invalid";
 export declare function updateActiveWorkspace(params: {
     workspaceId: string;
     workspaceName?: string | null;

package/dist/auth.js

@@ -1,14 +1,9 @@
 import * as fs from "fs";
 import * as os from "os";
 import * as path from "path";
-import { createHash } from "node:crypto";
-import { readMcpAgentServiceContext } from "./agent-service-auth.js";
 const DEFAULT_API_URL = "https://app.sellable.dev";
 const WORKSPACE_LOCK_ENV = "SELLABLE_LOCK_WORKSPACE_ID";
 const REQUIRE_WORKSPACE_LOCK_ENV = "SELLABLE_REQUIRE_WORKSPACE_LOCK";
-const AGENT_SERVICE_CREDENTIAL_FILE_ENV = "SELLABLE_AGENT_SERVICE_CREDENTIAL_FILE";
-const AGENT_RUNTIME_SECRET_ROOT_ENV = "SELLABLE_AGENT_RUNTIME_SECRET_ROOT";
-const AGENT_PROFILE_ID_ENV = "SELLABLE_AGENT_PROFILE_ID";
 // No caching — re-read config on every call so token/workspace changes
 // made by the LLM (editing sellable.json) take effect immediately
 // without requiring an MCP server restart.
@@ -92,64 +87,6 @@ function normalizeConfig(raw) {
         apiUrl: raw.apiUrl || DEFAULT_API_URL,
     };
 }
-function readConfinedAgentServiceCredential(raw, env = process.env) {
-    const credentialPathValue = env[AGENT_SERVICE_CREDENTIAL_FILE_ENV]?.trim();
-    if (!credentialPathValue)
-        return null;
-    const runtimeRootValue = env[AGENT_RUNTIME_SECRET_ROOT_ENV]?.trim();
-    const profileId = env[AGENT_PROFILE_ID_ENV]?.trim();
-    if (!runtimeRootValue ||
-        !path.isAbsolute(runtimeRootValue) ||
-        !path.isAbsolute(credentialPathValue) ||
-        !profileId ||
-        !/^[A-Za-z0-9_-]{1,128}$/.test(profileId)) {
-        throw new Error("Invalid Agent service credential file binding");
-    }
-    const rootLink = fs.lstatSync(runtimeRootValue);
-    if (rootLink.isSymbolicLink() ||
-        !rootLink.isDirectory() ||
-        (rootLink.mode & 0o077) !== 0) {
-        throw new Error("Invalid Agent runtime secret root");
-    }
-    const lexicalExpectedPath = path.join(path.resolve(runtimeRootValue), profileId, "service-credential");
-    if (path.resolve(credentialPathValue) !== lexicalExpectedPath) {
-        throw new Error("Invalid Agent service credential file binding");
-    }
-    const runtimeRoot = fs.realpathSync(runtimeRootValue);
-    const expectedPath = path.join(runtimeRoot, profileId, "service-credential");
-    const parent = path.dirname(expectedPath);
-    const parentLink = fs.lstatSync(parent);
-    const credentialLink = fs.lstatSync(expectedPath);
-    const currentUid = process.getuid?.();
-    if (parentLink.isSymbolicLink() ||
-        !parentLink.isDirectory() ||
-        (parentLink.mode & 0o077) !== 0 ||
-        credentialLink.isSymbolicLink() ||
-        !credentialLink.isFile() ||
-        (credentialLink.mode & 0o777) !== 0o600 ||
-        credentialLink.size < 8 ||
-        credentialLink.size > 4096 ||
-        (currentUid !== undefined && credentialLink.uid !== currentUid)) {
-        throw new Error("Invalid Agent service credential file");
-    }
-    if (fs.realpathSync(parent) !== parent || fs.realpathSync(expectedPath) !== expectedPath) {
-        throw new Error("Invalid Agent service credential file confinement");
-    }
-    const token = fs.readFileSync(expectedPath, "utf8").trim();
-    const descriptor = raw.serviceCredential;
-    const generation = Number(env.SELLABLE_AGENT_CREDENTIAL_GENERATION ?? "");
-    const fingerprint = createHash("sha256").update(token).digest("hex").slice(0, 16);
-    if (!/^sat_[^_\s]+_\S+$/.test(token) ||
-        typeof raw.token === "string" ||
-        !descriptor ||
-        descriptor.fingerprint !== fingerprint ||
-        descriptor.generation !== generation ||
-        typeof descriptor.reference !== "string" ||
-        !/^secret:\/\/agent\/service\/g[1-9][0-9]*$/.test(descriptor.reference)) {
-        throw new Error("Invalid Agent service credential descriptor");
-    }
-    return token;
-}
 export function getLockedWorkspaceId() {
     const value = process.env[WORKSPACE_LOCK_ENV]?.trim();
     return value || null;
@@ -210,7 +147,6 @@ export function getConfig() {
         const raw = JSON.parse(content);
         // Resolve config: support multi-env format or legacy flat format
         let config;
-        let selectedRaw;
         if (raw.activeEnv && raw.environments) {
             const envName = raw.activeEnv;
             const envConfig = raw.environments[envName];
@@ -218,7 +154,6 @@ export function getConfig() {
                 const available = Object.keys(raw.environments).join(", ");
                 throw new Error(`Unknown environment '${envName}' in ${configFileName}. Available: ${available}`);
             }
-            selectedRaw = envConfig;
             config = {
                 ...normalizeConfig(envConfig),
                 activeEnvName: envName,
@@ -226,35 +161,13 @@ export function getConfig() {
         }
         else {
             // Legacy flat format: { token, workspaceId?, apiUrl? }
-            selectedRaw = raw;
             config = normalizeConfig(raw);
         }
-        const confinedAgentCredential = readConfinedAgentServiceCredential(selectedRaw);
-        if (confinedAgentCredential) {
-            config.token = confinedAgentCredential;
-            config.credentialKind = "agent_service";
-        }
-        else if (!config.token) {
+        if (!config.token) {
             throw new Error(`Missing 'token' in ${configFileName}`);
         }
-        if (config.token.startsWith("skt_")) {
-            config.credentialKind = "human";
-        }
-        else if (config.token.startsWith("sat_")) {
-            const agent = readMcpAgentServiceContext(process.env, config.token);
-            if (!agent)
-                throw new Error("Invalid Agent service context");
-            const configuredWorkspace = normalizeWorkspaceId(config.activeWorkspaceId) ||
-                normalizeWorkspaceId(config.workspaceId);
-            if (configuredWorkspace && configuredWorkspace !== agent.workspaceId) {
-                throw new Error("Agent service credential workspace binding mismatch");
-            }
-            config.activeWorkspaceId = agent.workspaceId;
-            config.workspaceId = agent.workspaceId;
-            config.credentialKind = "agent_service";
-        }
-        else {
-            throw new Error("Invalid token format - expected a Sellable credential");
+        if (!config.token.startsWith("skt_")) {
+            throw new Error("Invalid token format - must start with 'skt_'");
         }
         return config;
     }
@@ -265,38 +178,7 @@ export function getConfig() {
         throw error;
     }
 }
-/** Reads only the credential class; never returns or validates credential bytes. */
-export function getConfiguredCredentialIntent() {
-    const configPath = getConfigPath();
-    if (!fs.existsSync(configPath))
-        return "unconfigured";
-    try {
-        const raw = JSON.parse(fs.readFileSync(configPath, "utf8"));
-        const selected = raw?.activeEnv && raw?.environments
-            ? raw.environments[raw.activeEnv]
-            : raw;
-        const token = selected?.token;
-        if (process.env[AGENT_SERVICE_CREDENTIAL_FILE_ENV]?.trim()) {
-            return token == null && selected?.serviceCredential
-                ? "agent_service"
-                : "invalid";
-        }
-        if (typeof token !== "string")
-            return "invalid";
-        if (token.startsWith("sat_"))
-            return "agent_service";
-        if (token.startsWith("skt_"))
-            return "human";
-        return "invalid";
-    }
-    catch {
-        return "invalid";
-    }
-}
 export function updateActiveWorkspace(params) {
-    if (getConfig().credentialKind === "agent_service") {
-        throw new Error("Agent service profiles cannot switch workspaces");
-    }
     resolveWorkspaceIdForRequest(params.workspaceId, "set_active_workspace");
     const configPath = getConfigPath();
     const configDir = path.dirname(configPath);

package/dist/refill-contract.d.ts

@@ -0,0 +1,157 @@
+export declare const REFILL_CONTRACT_VERSION: "2.0.0";
+export declare const REFILL_CONTRACT_CACHE_VERSION: "refill-contract-v1";
+export declare const REFILL_CONTRACT_SUPPORTED_MAJOR: 2;
+export declare const REFILL_CONTRACT_ERROR_CODES: readonly ["refill_contract_not_implemented", "unsupported_refill_contract_major", "refill_contract_hash_mismatch", "refill_contract_semantic_mismatch"];
+export type RefillContractErrorCode = (typeof REFILL_CONTRACT_ERROR_CODES)[number];
+export declare class RefillContractError extends Error {
+    readonly code: RefillContractErrorCode;
+    constructor(code: RefillContractErrorCode, message: string);
+}
+export declare const REFILL_SCOPE_IDS: readonly ["workspace_id", "target_date", "sender_selectors", "campaign_selectors", "approval_mode", "contract_identity", "installed_identity"];
+export declare const REFILL_GATE_IDS: readonly ["workspace_access", "approval_packet", "source_family", "threshold", "scheduler", "campaign_lifecycle", "send_time", "no_direct_send", "one_primitive", "fresh_reread", "normalized_accounting", "prep_circuit", "terminal_truth"];
+export declare const REFILL_STATE_IDS: readonly ["planning", "awaiting_approval", "executing", "settling", "replanning", "terminal"];
+export declare const REFILL_ACTION_IDS: readonly ["prepare_messages", "approve_messages", "rerun_errored_cells", "start_paused_campaign", "run_scheduler_sweep", "scheduler_first_settle", "wait_for_scheduler", "wait_for_active_work", "wait_for_source_import", "copy_selected_source_rows", "continue_signal_discovery_source", "continue_sales_nav_source", "continue_prospeo_source", "manual_source_replenishment", "refresh_paid_inmail_credits", "lower_paid_inmail_threshold", "switch_to_connection_lane", "create_connection_campaign", "next_campaign", "done"];
+export declare const REFILL_RECEIPT_IDS: readonly ["target_plan_receipt", "preparation_receipt", "scheduler_receipt", "run_receipt"];
+export declare const REFILL_SIDE_EFFECT_CLASS_IDS: readonly ["read_only", "message_preparation", "message_approval", "source_replenishment", "credit_refresh", "campaign_start", "scheduler_placement"];
+export declare const REFILL_FORBIDDEN_ACTION_IDS: readonly ["direct_send", "raw_scheduler_write", "campaign_create", "campaign_archive_delete", "threshold_lowering", "unselected_source_mutation", "unapproved_campaign_start", "sender_config_write"];
+export declare const REFILL_TERMINAL_REASON_IDS: readonly ["projected_full", "concrete_blocker", "deadline_reached", "iteration_limit", "operator_stopped", "capped_by_scheduler", "loaded_awaiting_scheduler", "lanes_exhausted", "not_an_evergreen_workspace", "no_refillable_campaigns"];
+export type RefillScopeId = (typeof REFILL_SCOPE_IDS)[number];
+export type RefillGateId = (typeof REFILL_GATE_IDS)[number];
+export type RefillStateId = (typeof REFILL_STATE_IDS)[number];
+export type RefillActionId = (typeof REFILL_ACTION_IDS)[number];
+export type RefillReceiptId = (typeof REFILL_RECEIPT_IDS)[number];
+export type RefillSideEffectClassId = (typeof REFILL_SIDE_EFFECT_CLASS_IDS)[number];
+export type RefillForbiddenActionId = (typeof REFILL_FORBIDDEN_ACTION_IDS)[number];
+export type RefillTerminalReasonId = (typeof REFILL_TERMINAL_REASON_IDS)[number];
+export type RefillAction = {
+    [Kind in RefillActionId]: {
+        kind: Kind;
+        actionKey: string;
+        sideEffectClass: RefillSideEffectClassId;
+    };
+}[RefillActionId];
+export type RefillReceipt = {
+    [Kind in RefillReceiptId]: {
+        kind: Kind;
+        actionKey: string;
+        recordedAt: string;
+    };
+}[RefillReceiptId];
+export type RefillTerminal = {
+    [Reason in RefillTerminalReasonId]: {
+        kind: "terminal";
+        reason: Reason;
+        evidence: Record<string, unknown>;
+    };
+}[RefillTerminalReasonId];
+export declare function canonicalizeRefillContract(value: unknown): string;
+export declare function computeRefillContractHash(value: unknown): string;
+export declare const REFILL_CONTRACT_HASH: string;
+export declare const refillContract: {
+    readonly contractHash: string;
+    readonly contractVersion: "2.0.0";
+    readonly cacheVersion: "refill-contract-v1";
+    readonly supportedMajor: 2;
+    readonly semantics: {
+        readonly scope: {
+            id: "workspace_id" | "target_date" | "sender_selectors" | "campaign_selectors" | "approval_mode" | "contract_identity" | "installed_identity";
+        }[];
+        readonly gates: {
+            id: "workspace_access" | "approval_packet" | "source_family" | "threshold" | "scheduler" | "campaign_lifecycle" | "send_time" | "no_direct_send" | "one_primitive" | "fresh_reread" | "normalized_accounting" | "prep_circuit" | "terminal_truth";
+        }[];
+        readonly states: {
+            id: "planning" | "awaiting_approval" | "executing" | "settling" | "replanning" | "terminal";
+        }[];
+        readonly actions: {
+            id: "prepare_messages" | "approve_messages" | "rerun_errored_cells" | "start_paused_campaign" | "run_scheduler_sweep" | "scheduler_first_settle" | "wait_for_scheduler" | "wait_for_active_work" | "wait_for_source_import" | "copy_selected_source_rows" | "continue_signal_discovery_source" | "continue_sales_nav_source" | "continue_prospeo_source" | "manual_source_replenishment" | "refresh_paid_inmail_credits" | "lower_paid_inmail_threshold" | "switch_to_connection_lane" | "create_connection_campaign" | "next_campaign" | "done";
+            sideEffectClass: "read_only" | "message_preparation" | "message_approval" | "source_replenishment" | "credit_refresh" | "campaign_start" | "scheduler_placement";
+        }[];
+        readonly receipts: readonly [{
+            readonly id: "target_plan_receipt";
+            readonly requiredFields: readonly ["refillLaneKey", "branchMetrics", "ledger", "targetDate", "actionKey", "targetShapeRevision", "stateRevision"];
+        }, {
+            readonly id: "preparation_receipt";
+            readonly requiredFields: readonly ["dependency", "circuit", "batchCalibration", "cooperativeStop"];
+        }, {
+            readonly id: "scheduler_receipt";
+            readonly requiredFields: readonly ["receiptVersion", "diagnosticsVersion", "status", "trigger", "workspaceId", "runId", "leaseFence", "expectedTargetsHash", "maxPlacements", "readyCellsFound", "cellsConsidered", "cellsScheduled", "cellsSkipped", "cellsDeferred", "campaignScopeSummary", "expectedTargetSummary", "changedCounts", "summary", "nextAction", "errorCount", "error"];
+        }, {
+            readonly id: "run_receipt";
+            readonly requiredFields: readonly ["runId", "fence", "gate", "gateSeq", "events", "doneReason"];
+        }];
+        readonly sideEffectClasses: {
+            id: "read_only" | "message_preparation" | "message_approval" | "source_replenishment" | "credit_refresh" | "campaign_start" | "scheduler_placement";
+        }[];
+        readonly forbiddenActions: {
+            id: "direct_send" | "raw_scheduler_write" | "campaign_create" | "campaign_archive_delete" | "threshold_lowering" | "unselected_source_mutation" | "unapproved_campaign_start" | "sender_config_write";
+        }[];
+        readonly terminalReasons: {
+            id: "projected_full" | "concrete_blocker" | "deadline_reached" | "iteration_limit" | "operator_stopped" | "capped_by_scheduler" | "loaded_awaiting_scheduler" | "lanes_exhausted" | "not_an_evergreen_workspace" | "no_refillable_campaigns";
+            terminalKind: string;
+        }[];
+        readonly transitions: readonly [{
+            readonly from: "planning";
+            readonly to: "awaiting_approval";
+        }, {
+            readonly from: "awaiting_approval";
+            readonly to: "executing";
+        }, {
+            readonly from: "executing";
+            readonly to: "settling";
+        }, {
+            readonly from: "settling";
+            readonly to: "replanning";
+        }, {
+            readonly from: "replanning";
+            readonly to: "executing";
+        }, {
+            readonly from: "replanning";
+            readonly to: "terminal";
+        }];
+    };
+    readonly backendBindings: {
+        readonly planner: {
+            readonly actions: ("prepare_messages" | "approve_messages" | "rerun_errored_cells" | "start_paused_campaign" | "run_scheduler_sweep" | "scheduler_first_settle" | "wait_for_scheduler" | "wait_for_active_work" | "wait_for_source_import" | "copy_selected_source_rows" | "continue_signal_discovery_source" | "continue_sales_nav_source" | "continue_prospeo_source" | "manual_source_replenishment" | "refresh_paid_inmail_credits" | "lower_paid_inmail_threshold" | "switch_to_connection_lane" | "create_connection_campaign" | "next_campaign" | "done")[];
+            readonly receiptFields: readonly ["refillLaneKey", "branchMetrics", "ledger", "targetDate", "actionKey", "targetShapeRevision", "stateRevision"];
+        };
+        readonly preparation: {
+            readonly dependencyClasses: readonly ["active", "transient", "permanent", "changed", "exhausted"];
+            readonly dependencyReasons: readonly ["active_cells", "dependency_timeout", "rate_limited", "provider_unavailable", "authentication_failed", "validation_failed", "schema_invalid", "config_epoch_changed", "source_epoch_changed", "frontier_exhausted", "unknown_dependency"];
+            readonly circuitStates: readonly ["closed", "open", "half_open", "reset"];
+            readonly cooperativeStopReasons: readonly ["target_satisfied_during_prep"];
+            readonly receiptFields: readonly ["dependency", "circuit", "batchCalibration", "cooperativeStop"];
+        };
+        readonly scheduler: {
+            readonly targetOutcomes: readonly ["included", "omitted"];
+            readonly omissionReasons: readonly ["no_ready_cells", "not_scheduler_eligible", "sender_mismatch", "capacity_prefiltered", "outside_target_date", "receipt_error"];
+            readonly runStatuses: readonly ["ran", "window_closed_noop", "failed"];
+            readonly nextActions: readonly ["refresh_paid_inmail_credits_then_rerun", "wait_for_capacity_or_window", "inspect_sender_mismatch", "no_ready_cells_continue_refill_prep", "scheduled_cells", "investigate_deferred_reasons", "investigate_scheduler_failure"];
+            readonly receiptFields: readonly ["receiptVersion", "diagnosticsVersion", "status", "trigger", "workspaceId", "runId", "leaseFence", "expectedTargetsHash", "maxPlacements", "readyCellsFound", "cellsConsidered", "cellsScheduled", "cellsSkipped", "cellsDeferred", "campaignScopeSummary", "expectedTargetSummary", "changedCounts", "summary", "nextAction", "errorCount", "error"];
+        };
+        readonly run: {
+            readonly gates: readonly ["g0_bootstrap", "g1_plan", "g2_execute", "g3_verify", "g4_terminal"];
+            readonly states: readonly ["planning", "awaiting_approval", "executing", "settling", "replanning", "terminal"];
+            readonly resultKinds: readonly ["started", "awaiting_approval", "active_run_in_progress", "resumed", "lease_lost", "scope_drift", "approval_expired", "approval_fingerprint_mismatch"];
+            readonly terminalReasons: readonly ["complete", "capped_by_scheduler", "loaded_awaiting_scheduler", "lanes_exhausted", "blocked", "not_an_evergreen_workspace", "no_refillable_campaigns"];
+            readonly refusals: readonly ["scope_drift", "approval_expired", "approval_fingerprint_mismatch", "legacy_read_only", "expected_target_overflow", "scheduler_receipt_incomplete"];
+            readonly scopeFields: readonly ["workspaceId", "intent", "senderIds", "campaignIds", "tableIds", "actionIds", "approvalMode", "dateSelector", "senderTimezones", "expectedTargetsHash", "maxPlacements", "contract", "installed"];
+            readonly approvalFields: readonly ["scopeHash", "targetShapeRevision", "actionFingerprint", "expectedTargetsHash", "sideEffectEnvelope", "maxPlacements", "approvalExpiresAt", "approvalFingerprint"];
+        };
+    };
+};
+export type RefillContract = typeof refillContract;
+export declare function assertSupportedRefillContractMajor(version: string): void;
+export declare function validateRefillContractAsset(value: unknown): RefillContract;
+export declare function refillContractSemanticProjection(): {
+    contractVersion: "2.0.0";
+    cacheVersion: "refill-contract-v1";
+    contractHash: string;
+    semanticIds: {
+        [k: string]: string[];
+    };
+};
+export declare function validateRefillFlowProjection(value: unknown): void;
+export declare function renderRefillBootstrapGuidance(): string;
+export declare function renderRefillSafetyGuidance(): string;
+export declare function renderRefillTerminalGuidance(): string;
+export declare function assertNeverRefillVariant(value: never): never;