@sentientui/mcp 0.14.0 → 0.14.2

package/dist/{chunk-DZLODBXR.js → chunk-AWRVJ4HY.js}

@@ -65,196 +65,6 @@ var ApiClient = class {
   }
 };
 
-// src/server.ts
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-
-// src/tools/projects.ts
-import { z as z2 } from "zod";
-
-// src/tools/common.ts
-import { z } from "zod";
-var projectIdSchema = z.string().uuid().describe("The project UUID");
-function apiErrorGuidance(err, extra) {
-  if (extra && Object.prototype.hasOwnProperty.call(extra, err.message)) {
-    return extra[err.message];
-  }
-  switch (err.message) {
-    case "insufficient_scope":
-      return "This action needs an account login. Connect via the hosted MCP URL (https://api.sentient-ui.com/mcp) and sign in \u2014 a project-scoped server key (sk_\u2026) or anonymous demo token cannot do this.";
-    case "demo_read_only":
-      return "Demo mode is read-only. Create a SentientUI account and sign in (or use a project server key) to make changes.";
-    case "insufficient_role":
-      return "Your account role does not permit this action \u2014 it needs the account owner or an admin.";
-    default:
-      break;
-  }
-  if (err.status === 402) {
-    return `This feature requires a higher plan (${err.message}). Upgrade your SentientUI plan, then try again.`;
-  }
-  if (err.status === 403) {
-    return `Access denied (${err.message}). Check that your key or login has access to this project.`;
-  }
-  return null;
-}
-function withApiErrorGuidance(fn, extra) {
-  return async (args) => {
-    try {
-      return await fn(args);
-    } catch (err) {
-      if (err instanceof ApiError) {
-        const guidance = apiErrorGuidance(err, extra);
-        if (guidance) {
-          return { content: [{ type: "text", text: guidance }], isError: true };
-        }
-      }
-      throw err;
-    }
-  };
-}
-
-// src/tools/projects.ts
-var CREATE_PROJECT_GUIDANCE = {
-  project_limit_reached: "You've reached your plan's project limit. Upgrade your plan or remove an existing project, then try again.",
-  name_required: "A project name is required to create a project."
-};
-function registerProjectTools(server, client) {
-  server.registerTool(
-    "create_project",
-    {
-      title: "Create project",
-      description: "Create a NEW SentientUI project (onboarding). Returns the project id and its pk_ public key for the SDK. Requires an account login: this works when connected via OAuth (the hosted MCP URL) but NOT with a project-scoped sk_ server key or an anonymous demo token. After it succeeds, call get_integration_guide and help the user install @sentientui/react with the returned key.",
-      inputSchema: {
-        name: z2.string().min(1).describe("Human-readable project name"),
-        contextType: z2.enum(["saas", "ecommerce", "marketing", "landing", "internal"]).optional().describe("What kind of product this is; defaults to saas"),
-        framework: z2.enum(["next", "react", "core"]).optional().describe("How the site is built \u2014 next, react, or core (website builder/CMS); defaults to next"),
-        websiteUrl: z2.string().optional().describe("Production site origin to allow-list so the SDK's events aren't origin-blocked on day one")
-      },
-      outputSchema: {
-        projectId: z2.string().describe("The new project UUID"),
-        publicKey: z2.string().describe("The pk_ public key to configure the SDK with"),
-        name: z2.string().describe("The project name"),
-        contextType: z2.string().describe("The resolved context type")
-      },
-      annotations: {
-        readOnlyHint: false,
-        destructiveHint: false,
-        idempotentHint: false,
-        openWorldHint: false
-      }
-    },
-    withApiErrorGuidance(async ({ name, contextType, framework, websiteUrl }) => {
-      const created = await client.post("/projects", {
-        name,
-        contextType,
-        framework,
-        origin: websiteUrl
-      });
-      const resolvedContextType = contextType != null ? contextType : "saas";
-      return {
-        content: [{
-          type: "text",
-          text: [
-            `Created project "${name}" (id: ${created.id}, type: ${resolvedContextType}).`,
-            `Public key: ${created.apiKey}`,
-            `Next: install @sentientui/react with this key. Ask me to pull the setup guide (get_integration_guide) and I'll wrap your first component.`
-          ].join("\n")
-        }],
-        structuredContent: {
-          projectId: created.id,
-          publicKey: created.apiKey,
-          name,
-          contextType: resolvedContextType
-        }
-      };
-    }, CREATE_PROJECT_GUIDANCE)
-  );
-  server.registerTool(
-    "list_projects",
-    {
-      title: "List projects",
-      description: "List all SentientUI projects for the authenticated account.",
-      inputSchema: {},
-      outputSchema: {
-        projects: z2.array(
-          z2.object({
-            id: z2.string().describe("Project UUID"),
-            name: z2.string(),
-            contextType: z2.string(),
-            createdAt: z2.string().describe("ISO date (YYYY-MM-DD)")
-          })
-        ).describe("All projects for the account (empty if none)")
-      },
-      annotations: {
-        readOnlyHint: true,
-        idempotentHint: true,
-        openWorldHint: false
-      }
-    },
-    withApiErrorGuidance(async () => {
-      const projects = await client.get("/projects");
-      const text = projects.length === 0 ? "No projects found." : projects.map(
-        (p) => `- ${p.name} (id: ${p.id}, type: ${p.context_type}, created: ${p.created_at.slice(0, 10)})`
-      ).join("\n");
-      return {
-        content: [{ type: "text", text }],
-        structuredContent: {
-          projects: projects.map((p) => ({
-            id: p.id,
-            name: p.name,
-            contextType: p.context_type,
-            createdAt: p.created_at.slice(0, 10)
-          }))
-        }
-      };
-    })
-  );
-  server.registerTool(
-    "get_project_stats",
-    {
-      title: "Project health stats",
-      description: "Get health stats for a project: event volume, session count, agent calls, and status.",
-      inputSchema: { projectId: projectIdSchema },
-      outputSchema: {
-        status: z2.string().describe("Overall project health status"),
-        events24h: z2.number().describe("Events in the last 24 hours"),
-        sessions24h: z2.number().describe("Sessions in the last 24 hours"),
-        agentCalls: z2.number().describe("Total agent (MCP/API) calls"),
-        lastEventAt: z2.string().nullable().describe("ISO timestamp of the last event, or null")
-      },
-      annotations: {
-        readOnlyHint: true,
-        idempotentHint: true,
-        openWorldHint: false
-      }
-    },
-    withApiErrorGuidance(async ({ projectId }) => {
-      var _a;
-      const id = encodeURIComponent(projectId);
-      const stats = await client.get(`/projects/${id}/health`);
-      const text = [
-        `Status: ${stats.status}`,
-        `Events (24h): ${stats.events24h}`,
-        `Sessions (24h): ${stats.sessions24h}`,
-        `Agent calls (total): ${stats.agentCalls}`,
-        `Last event: ${(_a = stats.lastEventAt) != null ? _a : "never"}`
-      ].join("\n");
-      return {
-        content: [{ type: "text", text }],
-        structuredContent: {
-          status: stats.status,
-          events24h: stats.events24h,
-          sessions24h: stats.sessions24h,
-          agentCalls: stats.agentCalls,
-          lastEventAt: stats.lastEventAt
-        }
-      };
-    })
-  );
-}
-
-// src/tools/components.ts
-import { z as z3 } from "zod";
-
 // src/ui/templates.ts
 var VIZ_TITLES = {
   "persona-breakdown": "Persona breakdown",
@@ -488,6 +298,7 @@ function uiMeta(id) {
     "openai/outputTemplate": uri
   };
 }
+var PUBLIC_UI_RESOURCE_URIS = Object.values(UI_TOOL_VIZ).map(uiResourceUri);
 function registerUiResources(server) {
   for (const id of Object.values(UI_TOOL_VIZ)) {
     server.registerResource(
@@ -511,7 +322,195 @@ function registerUiResources(server) {
   }
 }
 
+// src/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+
+// src/tools/projects.ts
+import { z as z2 } from "zod";
+
+// src/tools/common.ts
+import { z } from "zod";
+var projectIdSchema = z.string().uuid().describe("The project UUID");
+function apiErrorGuidance(err, extra) {
+  if (extra && Object.prototype.hasOwnProperty.call(extra, err.message)) {
+    return extra[err.message];
+  }
+  switch (err.message) {
+    case "insufficient_scope":
+      return "This action needs an account login. Connect via the hosted MCP URL (https://api.sentient-ui.com/mcp) and sign in \u2014 a project-scoped server key (sk_\u2026) or anonymous demo token cannot do this.";
+    case "demo_read_only":
+      return "Demo mode is read-only. Create a SentientUI account and sign in (or use a project server key) to make changes.";
+    case "insufficient_role":
+      return "Your account role does not permit this action \u2014 it needs the account owner or an admin.";
+    default:
+      break;
+  }
+  if (err.status === 402) {
+    return `This feature requires a higher plan (${err.message}). Upgrade your SentientUI plan, then try again.`;
+  }
+  if (err.status === 403) {
+    return `Access denied (${err.message}). Check that your key or login has access to this project.`;
+  }
+  return null;
+}
+function withApiErrorGuidance(fn, extra) {
+  return async (args) => {
+    try {
+      return await fn(args);
+    } catch (err) {
+      if (err instanceof ApiError) {
+        const guidance = apiErrorGuidance(err, extra);
+        if (guidance) {
+          return { content: [{ type: "text", text: guidance }], isError: true };
+        }
+      }
+      throw err;
+    }
+  };
+}
+
+// src/tools/projects.ts
+var CREATE_PROJECT_GUIDANCE = {
+  project_limit_reached: "You've reached your plan's project limit. Upgrade your plan or remove an existing project, then try again.",
+  name_required: "A project name is required to create a project."
+};
+function registerProjectTools(server, client) {
+  server.registerTool(
+    "create_project",
+    {
+      title: "Create project",
+      description: "Create a NEW SentientUI project (onboarding). Returns the project id and its pk_ public key for the SDK. Requires an account login: this works when connected via OAuth (the hosted MCP URL) but NOT with a project-scoped sk_ server key or an anonymous demo token. After it succeeds, call get_integration_guide and help the user install @sentientui/react with the returned key.",
+      inputSchema: {
+        name: z2.string().min(1).describe("Human-readable project name"),
+        contextType: z2.enum(["saas", "ecommerce", "marketing", "landing", "internal"]).optional().describe("What kind of product this is; defaults to saas"),
+        framework: z2.enum(["next", "react", "core"]).optional().describe("How the site is built \u2014 next, react, or core (website builder/CMS); defaults to next"),
+        websiteUrl: z2.string().optional().describe("Production site origin to allow-list so the SDK's events aren't origin-blocked on day one")
+      },
+      outputSchema: {
+        projectId: z2.string().describe("The new project UUID"),
+        publicKey: z2.string().describe("The pk_ public key to configure the SDK with"),
+        name: z2.string().describe("The project name"),
+        contextType: z2.string().describe("The resolved context type")
+      },
+      annotations: {
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false
+      }
+    },
+    withApiErrorGuidance(async ({ name, contextType, framework, websiteUrl }) => {
+      const created = await client.post("/projects", {
+        name,
+        contextType,
+        framework,
+        origin: websiteUrl
+      });
+      const resolvedContextType = contextType != null ? contextType : "saas";
+      return {
+        content: [{
+          type: "text",
+          text: [
+            `Created project "${name}" (id: ${created.id}, type: ${resolvedContextType}).`,
+            `Public key: ${created.apiKey}`,
+            `Next: install @sentientui/react with this key. Ask me to pull the setup guide (get_integration_guide) and I'll wrap your first component.`
+          ].join("\n")
+        }],
+        structuredContent: {
+          projectId: created.id,
+          publicKey: created.apiKey,
+          name,
+          contextType: resolvedContextType
+        }
+      };
+    }, CREATE_PROJECT_GUIDANCE)
+  );
+  server.registerTool(
+    "list_projects",
+    {
+      title: "List projects",
+      description: "List all SentientUI projects for the authenticated account.",
+      inputSchema: {},
+      outputSchema: {
+        projects: z2.array(
+          z2.object({
+            id: z2.string().describe("Project UUID"),
+            name: z2.string(),
+            contextType: z2.string(),
+            createdAt: z2.string().describe("ISO date (YYYY-MM-DD)")
+          })
+        ).describe("All projects for the account (empty if none)")
+      },
+      annotations: {
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      }
+    },
+    withApiErrorGuidance(async () => {
+      const projects = await client.get("/projects");
+      const text = projects.length === 0 ? "No projects found." : projects.map(
+        (p) => `- ${p.name} (id: ${p.id}, type: ${p.context_type}, created: ${p.created_at.slice(0, 10)})`
+      ).join("\n");
+      return {
+        content: [{ type: "text", text }],
+        structuredContent: {
+          projects: projects.map((p) => ({
+            id: p.id,
+            name: p.name,
+            contextType: p.context_type,
+            createdAt: p.created_at.slice(0, 10)
+          }))
+        }
+      };
+    })
+  );
+  server.registerTool(
+    "get_project_stats",
+    {
+      title: "Project health stats",
+      description: "Get health stats for a project: event volume, session count, agent calls, and status.",
+      inputSchema: { projectId: projectIdSchema },
+      outputSchema: {
+        status: z2.string().describe("Overall project health status"),
+        events24h: z2.number().describe("Events in the last 24 hours"),
+        sessions24h: z2.number().describe("Sessions in the last 24 hours"),
+        agentCalls: z2.number().describe("Total agent (MCP/API) calls"),
+        lastEventAt: z2.string().nullable().describe("ISO timestamp of the last event, or null")
+      },
+      annotations: {
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false
+      }
+    },
+    withApiErrorGuidance(async ({ projectId }) => {
+      var _a;
+      const id = encodeURIComponent(projectId);
+      const stats = await client.get(`/projects/${id}/health`);
+      const text = [
+        `Status: ${stats.status}`,
+        `Events (24h): ${stats.events24h}`,
+        `Sessions (24h): ${stats.sessions24h}`,
+        `Agent calls (total): ${stats.agentCalls}`,
+        `Last event: ${(_a = stats.lastEventAt) != null ? _a : "never"}`
+      ].join("\n");
+      return {
+        content: [{ type: "text", text }],
+        structuredContent: {
+          status: stats.status,
+          events24h: stats.events24h,
+          sessions24h: stats.sessions24h,
+          agentCalls: stats.agentCalls,
+          lastEventAt: stats.lastEventAt
+        }
+      };
+    })
+  );
+}
+
 // src/tools/components.ts
+import { z as z3 } from "zod";
 function registerComponentTools(server, client) {
   server.registerTool(
     "list_components",
@@ -1030,7 +1029,7 @@ function registerFunnelTools(server, client) {
       return {
         content: [{ type: "text", text: lines.join("\n") }],
         // Tolerate an API deployed before strict funnels existed.
-        structuredContent: __spreadProps(__spreadValues({}, data), { strictOrder: (_a = data.strictOrder) != null ? _a : false })
+        structuredContent: __spreadProps(__spreadValues({}, data), { strictOrder: (_a = data.strictOrder) != null ? _a : true })
       };
     })
   );
@@ -1772,7 +1771,7 @@ function registerAgentTrafficTools(server, client) {
 }
 
 // src/server.ts
-var PKG_VERSION = true ? "0.14.0" : "0.0.0-dev";
+var PKG_VERSION = true ? "0.14.2" : "0.0.0-dev";
 function createMcpServer(client) {
   const server = new McpServer(
     {
@@ -1813,5 +1812,6 @@ function createMcpServer(client) {
 export {
   ApiError,
   ApiClient,
+  PUBLIC_UI_RESOURCE_URIS,
   createMcpServer
 };

package/dist/index.cjs

@@ -492,6 +492,7 @@ function uiMeta(id) {
     "openai/outputTemplate": uri
   };
 }
+var PUBLIC_UI_RESOURCE_URIS = Object.values(UI_TOOL_VIZ).map(uiResourceUri);
 function registerUiResources(server) {
   for (const id of Object.values(UI_TOOL_VIZ)) {
     server.registerResource(
@@ -1034,7 +1035,7 @@ function registerFunnelTools(server, client) {
       return {
         content: [{ type: "text", text: lines.join("\n") }],
         // Tolerate an API deployed before strict funnels existed.
-        structuredContent: __spreadProps(__spreadValues({}, data), { strictOrder: (_a2 = data.strictOrder) != null ? _a2 : false })
+        structuredContent: __spreadProps(__spreadValues({}, data), { strictOrder: (_a2 = data.strictOrder) != null ? _a2 : true })
       };
     })
   );
@@ -1776,7 +1777,7 @@ function registerAgentTrafficTools(server, client) {
 }
 
 // src/server.ts
-var PKG_VERSION = true ? "0.14.0" : "0.0.0-dev";
+var PKG_VERSION = true ? "0.14.2" : "0.0.0-dev";
 function createMcpServer(client) {
   const server = new import_mcp.McpServer(
     {

package/dist/index.js

@@ -2,7 +2,7 @@
 import {
   ApiClient,
   createMcpServer
-} from "./chunk-DZLODBXR.js";
+} from "./chunk-AWRVJ4HY.js";
 
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

package/dist/lib.cjs

@@ -40,6 +40,7 @@ var lib_exports = {};
 __export(lib_exports, {
   ApiClient: () => ApiClient,
   ApiError: () => ApiError,
+  PUBLIC_UI_RESOURCE_URIS: () => PUBLIC_UI_RESOURCE_URIS,
   createMcpServer: () => createMcpServer
 });
 module.exports = __toCommonJS(lib_exports);
@@ -515,6 +516,7 @@ function uiMeta(id) {
     "openai/outputTemplate": uri
   };
 }
+var PUBLIC_UI_RESOURCE_URIS = Object.values(UI_TOOL_VIZ).map(uiResourceUri);
 function registerUiResources(server) {
   for (const id of Object.values(UI_TOOL_VIZ)) {
     server.registerResource(
@@ -1057,7 +1059,7 @@ function registerFunnelTools(server, client) {
       return {
         content: [{ type: "text", text: lines.join("\n") }],
         // Tolerate an API deployed before strict funnels existed.
-        structuredContent: __spreadProps(__spreadValues({}, data), { strictOrder: (_a = data.strictOrder) != null ? _a : false })
+        structuredContent: __spreadProps(__spreadValues({}, data), { strictOrder: (_a = data.strictOrder) != null ? _a : true })
       };
     })
   );
@@ -1799,7 +1801,7 @@ function registerAgentTrafficTools(server, client) {
 }
 
 // src/server.ts
-var PKG_VERSION = true ? "0.14.0" : "0.0.0-dev";
+var PKG_VERSION = true ? "0.14.2" : "0.0.0-dev";
 function createMcpServer(client) {
   const server = new import_mcp.McpServer(
     {
@@ -1840,5 +1842,6 @@ function createMcpServer(client) {
 0 && (module.exports = {
   ApiClient,
   ApiError,
+  PUBLIC_UI_RESOURCE_URIS,
   createMcpServer
 });

package/dist/lib.d.cts

@@ -17,4 +17,15 @@ declare class ApiClient {
 
 declare function createMcpServer(client: ApiClient): McpServer;
 
-export { ApiClient, ApiError, createMcpServer };
+/**
+ * Every `ui://` resource this server registers. These templates are static HTML
+ * — no project data, no API call — so a host may read them before the user has
+ * authenticated. The remote /mcp endpoint uses this set to allow an
+ * unauthenticated `resources/read` for exactly these URIs (see
+ * apps/api/src/routes/mcp.ts): without it, `resources/list` advertised four
+ * resources that every reader got a 401 for, which reads to an agent as a
+ * server whose resources are all broken.
+ */
+declare const PUBLIC_UI_RESOURCE_URIS: readonly string[];
+
+export { ApiClient, ApiError, PUBLIC_UI_RESOURCE_URIS, createMcpServer };

package/dist/lib.d.ts

@@ -17,4 +17,15 @@ declare class ApiClient {
 
 declare function createMcpServer(client: ApiClient): McpServer;
 
-export { ApiClient, ApiError, createMcpServer };
+/**
+ * Every `ui://` resource this server registers. These templates are static HTML
+ * — no project data, no API call — so a host may read them before the user has
+ * authenticated. The remote /mcp endpoint uses this set to allow an
+ * unauthenticated `resources/read` for exactly these URIs (see
+ * apps/api/src/routes/mcp.ts): without it, `resources/list` advertised four
+ * resources that every reader got a 401 for, which reads to an agent as a
+ * server whose resources are all broken.
+ */
+declare const PUBLIC_UI_RESOURCE_URIS: readonly string[];
+
+export { ApiClient, ApiError, PUBLIC_UI_RESOURCE_URIS, createMcpServer };

package/dist/lib.js

@@ -2,10 +2,12 @@
 import {
   ApiClient,
   ApiError,
+  PUBLIC_UI_RESOURCE_URIS,
   createMcpServer
-} from "./chunk-DZLODBXR.js";
+} from "./chunk-AWRVJ4HY.js";
 export {
   ApiClient,
   ApiError,
+  PUBLIC_UI_RESOURCE_URIS,
   createMcpServer
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentientui/mcp",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "MCP server for SentientUI — exposes project data and actions to AI agents",
   "license": "MIT",
   "homepage": "https://sentient-ui.com",