@sellable/mcp 0.1.770 → 0.1.771

package/dist/tools/campaigns.d.ts

@@ -1,7 +1,7 @@
 import { getConfig } from "../auth.js";
+import { type Campaign1KickoffHandoffInput, type Campaign1KickoffHandoffValidationResult } from "../utils/campaign1KickoffHandoff.js";
 import { type InteractionMode } from "./interaction-mode.js";
 import type { CampaignOfferNavigation } from "./navigation.js";
-import { type Campaign1KickoffHandoffInput, type Campaign1KickoffHandoffValidationResult } from "../utils/campaign1KickoffHandoff.js";
 declare const LEAD_SOURCE_PROVIDERS: {
     readonly APOLLO: "apollo-ai";
     readonly SALES_NAV: "sales-nav";
@@ -10,6 +10,14 @@ declare const LEAD_SOURCE_PROVIDERS: {
 };
 type LeadSourceProvider = (typeof LEAD_SOURCE_PROVIDERS)[keyof typeof LEAD_SOURCE_PROVIDERS];
 export declare function buildWatchUrl(config: Pick<ReturnType<typeof getConfig>, "apiUrl" | "token" | "activeWorkspaceId" | "workspaceId">, path: string): string;
+/**
+ * Ask the API to mint a fresh, single-use campaign watch link.
+ *
+ * The server derives the token from the identity it already resolved, so this
+ * works identically for `skt_*` CLI/MCP tokens and `sat_*` agent credentials.
+ * Falls back to the locally-built link if the mint call fails.
+ */
+export declare function mintCampaignWatchUrl(campaignId: string): Promise<string>;
 export type CampaignBuilderWatchMode = "claude" | "codex" | "hermes";
 export declare function getCampaignBuilderWatchModeParam(): CampaignBuilderWatchMode;
 export declare function getCampaignBuilderWatchModeDriverLabel(mode?: CampaignBuilderWatchMode): "Claude Code" | "Codex" | "Hermes";

package/dist/tools/campaigns.js

@@ -1,10 +1,10 @@
 import { getApi } from "../api.js";
 import { getConfig, getEffectiveConfiguredWorkspaceId } from "../auth.js";
+import { parseCampaign1KickoffHandoff, } from "../utils/campaign1KickoffHandoff.js";
 import { assertCreateCampaignPromptLoaded, assertNetNewCreateCampaignResearchReady, } from "./flow-preflight.js";
 import { setCampaignInteractionMode, } from "./interaction-mode.js";
 import { isLinkedInProfileInput, normalizeLinkedInProfileInput, } from "./linkedin-url.js";
 import { fetchCampaignRubrics } from "./processing.js";
-import { parseCampaign1KickoffHandoff, } from "../utils/campaign1KickoffHandoff.js";
 const LEAD_SOURCE_PROVIDERS = {
     APOLLO: "apollo-ai",
     SALES_NAV: "sales-nav",
@@ -96,7 +96,13 @@ const WATCH_NARRATION_TOOL_SCHEMA = {
                         messageDraftOutput: { type: ["object", "null"] },
                         error: { type: ["string", "null"] },
                     },
-                    required: ["statusSource", "status", "startedAt", "updatedAt", "basis"],
+                    required: [
+                        "statusSource",
+                        "status",
+                        "startedAt",
+                        "updatedAt",
+                        "basis",
+                    ],
                 },
             },
             additionalProperties: false,
@@ -120,11 +126,40 @@ export function buildWatchUrl(config, path) {
     if (workspaceId && !url.searchParams.has("workspaceId")) {
         url.searchParams.set("workspaceId", workspaceId);
     }
-    if (config.token && !url.searchParams.has("token")) {
+    // Only `skt_*` API tokens can be exchanged at `/auth/continue`. Sellable Agent
+    // callers hold `sat_*` service credentials, which live in a different table
+    // entirely — attaching one here produces a link that always fails with
+    // "Invalid token format", so leave the link token-less and let the caller mint
+    // a real watch token via `mintCampaignWatchUrl`.
+    if (config.token &&
+        config.token.startsWith("skt_") &&
+        !url.searchParams.has("token")) {
         url.searchParams.set("token", config.token);
     }
     return url.toString();
 }
+/**
+ * Ask the API to mint a fresh, single-use campaign watch link.
+ *
+ * The server derives the token from the identity it already resolved, so this
+ * works identically for `skt_*` CLI/MCP tokens and `sat_*` agent credentials.
+ * Falls back to the locally-built link if the mint call fails.
+ */
+export async function mintCampaignWatchUrl(campaignId) {
+    const config = getConfig();
+    const fallback = buildWatchUrl(config, buildCampaignBuilderWatchPath(campaignId));
+    try {
+        const result = await getApi().get(`/api/v3/mcp/campaigns/${campaignId}?mode=${getCampaignBuilderWatchModeParam()}`);
+        if (result?.watchUrl &&
+            isValidBriefHandoffWatchUrl(result.watchUrl, campaignId)) {
+            return result.watchUrl;
+        }
+    }
+    catch {
+        // Fall through to the locally-built link.
+    }
+    return fallback;
+}
 const CAMPAIGN_BUILDER_AGENT_WATCH_MODES = new Set([
     "claude",
     "codex",
@@ -600,10 +635,15 @@ export async function getCampaign(campaignId) {
     const config = getConfig();
     // Fetch campaign context and rubrics in parallel
     const [result, rubricsResult] = await Promise.all([
-        api.get(`/api/v3/mcp/campaigns/${campaignId}`),
+        api.get(`/api/v3/mcp/campaigns/${campaignId}?mode=${getCampaignBuilderWatchModeParam()}`),
         fetchCampaignRubrics(campaignId).catch(() => null),
     ]);
-    const watchUrl = buildWatchUrl(config, buildCampaignBuilderWatchPath(campaignId));
+    // Prefer the server-minted watch link. It carries a fresh single-use token
+    // that works for both `skt_*` and `sat_*` callers; the local builder is only a
+    // fallback for older deployments that do not mint one.
+    const watchUrl = result.watchUrl && isValidBriefHandoffWatchUrl(result.watchUrl, campaignId)
+        ? result.watchUrl
+        : buildWatchUrl(config, buildCampaignBuilderWatchPath(campaignId));
     // Merge rubrics into campaignOffer
     const rubrics = (rubricsResult?.rubrics || []).map((r) => ({
         id: r.id || "",
@@ -890,11 +930,10 @@ function buildResumeNextStep() {
 }
 export async function createCampaign(input) {
     const api = getApi();
-    const config = getConfig();
     // Idempotent resume path
     if (input.campaignId) {
         const existing = await api.get(`/api/v2/campaign-offers/${input.campaignId}`);
-        const watchUrl = buildWatchUrl(config, buildCampaignBuilderWatchPath(existing.id));
+        const watchUrl = await mintCampaignWatchUrl(existing.id);
         const hasCreateFields = input.name ||
             input.clientProspectId ||
             input.offerPositioning !== undefined ||
@@ -1020,7 +1059,7 @@ export async function createCampaign(input) {
         },
     };
     const result = await api.post(`/api/v2/campaign-offers`, formattedInput);
-    const watchUrl = buildWatchUrl(config, buildCampaignBuilderWatchPath(result.id));
+    const watchUrl = await mintCampaignWatchUrl(result.id);
     // Serialize to only essential fields for context efficiency
     return {
         id: result.id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/mcp",
-  "version": "0.1.770",
+  "version": "0.1.771",
   "type": "module",
   "description": "Sellable MCP server for Claude Code, Codex, and Hermes campaign workflows",
   "main": "dist/index.js",