@setluca/mcp 0.2.1 → 0.3.0

package/dist/operations/groups/callEvents.js

@@ -1,131 +1,78 @@
+import { isJsonObject } from "../../serialization.js";
 import { op } from "../registry.js";
+function isNoShowReport(body) {
+    return isJsonObject(body) && body.outcome === "no_show";
+}
 export const callEventsOperations = [
     op({
         id: "callEvents.needingFeedback",
         title: "List calls still needing a report",
         description: "List calls whose time has passed that still need the coach to say what happened. The post-call work queue.",
-        redactedFields: [
-            "callEvents[].coachNotes",
-            "callEvents[].crmSyncError",
-            "callEvents[].feedbackFields.followUpNote",
-            "callEvents[].feedbackFields.surprise",
-            "callEvents[].leadName",
-            "callEvents[].summary",
-            "callEvents[].summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.get",
         title: "Get a call event",
         description: "Read one call event: outcome, rating, summary, and CRM sync state.",
-        redactedFields: [
-            "callEvent.coachNotes",
-            "callEvent.crmSyncError",
-            "callEvent.feedbackFields.followUpNote",
-            "callEvent.feedbackFields.surprise",
-            "callEvent.leadName",
-            "callEvent.summary",
-            "callEvent.summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.byBooking",
         title: "Get a booking's call event",
         description: "Find the call event attached to a booking. A booking whose call hasn't happened yet returns 404, which is normal.",
-        redactedFields: [
-            "callEvent.coachNotes",
-            "callEvent.crmSyncError",
-            "callEvent.feedbackFields.followUpNote",
-            "callEvent.feedbackFields.surprise",
-            "callEvent.leadName",
-            "callEvent.summary",
-            "callEvent.summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.byLead",
         title: "List a lead's call events",
         description: "Read a lead's full call history, oldest first, so a second or third call reads in sequence.",
-        redactedFields: [
-            "callEvents[].coachNotes",
-            "callEvents[].crmSyncError",
-            "callEvents[].feedbackFields.followUpNote",
-            "callEvents[].feedbackFields.surprise",
-            "callEvents[].leadName",
-            "callEvents[].summary",
-            "callEvents[].summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.feedback",
         title: "Report how a call went",
+        mutatesExisting: true,
         untrustedContent: true,
+        // Only a no_show can start recovery that messages the lead, so only that
+        // report needs approval. The other outcomes stay ungated.
+        confirm: {
+            applies: (input) => isNoShowReport(input.body),
+            description: "outcome is no_show (can start recovery messaging)",
+        },
         description: "File the coach's report on how a call went. A completed or no_show outcome also records booking attendance, and a completed call queues its summary.",
-        redactedFields: [
-            "callEvent.coachNotes",
-            "callEvent.crmSyncError",
-            "callEvent.feedbackFields.followUpNote",
-            "callEvent.feedbackFields.surprise",
-            "callEvent.leadName",
-            "callEvent.summary",
-            "callEvent.summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.summary.generate",
         title: "Generate a call summary",
+        mutatesExisting: true,
         untrustedContent: true,
         description: "Queue a fresh summary and return straight away. Poll the call event for the result.",
     }),
     op({
         id: "callEvents.summary.replace",
         title: "Replace a call summary",
+        openWorld: true,
+        confirm: "always",
+        mutatesExisting: true,
         untrustedContent: true,
         description: "Replace the generated summary with the coach's own wording and push it. A summary already in the CRM updates that same note.",
-        redactedFields: [
-            "callEvent.coachNotes",
-            "callEvent.crmSyncError",
-            "callEvent.feedbackFields.followUpNote",
-            "callEvent.feedbackFields.surprise",
-            "callEvent.leadName",
-            "callEvent.summary",
-            "callEvent.summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.pushToCrm",
         title: "Push a call to the CRM",
+        openWorld: true,
+        confirm: "always",
+        mutatesExisting: true,
         untrustedContent: true,
         description: "Send the current summary to the CRM now, without waiting out the review window. Re-pushing updates the existing note.",
     }),
     op({
         id: "callEvents.undoOutcome",
         title: "Undo a call's outcome",
+        mutatesExisting: true,
         untrustedContent: true,
         description: "Clear a mistaken attendance mark and put the call back in the queue. The window is 48 hours from when the outcome was set.",
-        redactedFields: [
-            "callEvent.coachNotes",
-            "callEvent.crmSyncError",
-            "callEvent.feedbackFields.followUpNote",
-            "callEvent.feedbackFields.surprise",
-            "callEvent.leadName",
-            "callEvent.summary",
-            "callEvent.summaryStructured",
-        ],
     }),
     op({
         id: "callEvents.backfill",
         title: "Backfill a booking's call event",
         untrustedContent: true,
         description: "Create a call event for a booking that predates automatic creation, then queue its summary. Safe to call twice: an existing call event comes back as is.",
-        redactedFields: [
-            "callEvent.coachNotes",
-            "callEvent.crmSyncError",
-            "callEvent.feedbackFields.followUpNote",
-            "callEvent.feedbackFields.surprise",
-            "callEvent.leadName",
-            "callEvent.summary",
-            "callEvent.summaryStructured",
-        ],
     }),
 ];

package/dist/operations/groups/campaigns.js

@@ -1,3 +1,4 @@
+import { isJsonObject } from "../../serialization.js";
 import { op } from "../registry.js";
 export const campaignsOperations = [
     op({
@@ -24,19 +25,20 @@ export const campaignsOperations = [
         id: "campaigns.draft.update",
         title: "Edit a campaign draft",
         description: "Autosave a campaign draft.",
-        // The route requires an idempotency key; without this the tool never sends
-        // one and every call is rejected (the dead-tool the drift guard now flags).
     }),
     op({
         id: "campaigns.enrollments.list",
         title: "List a campaign's enrollments",
+        untrustedContent: true,
         description: "List campaign enrollments.",
-        redactedFields: ["enrollments[].context"],
     }),
     op({
         id: "campaigns.enroll",
         title: "Enroll leads in a campaign",
-        confirmRequired: true,
+        openWorld: true,
+        confirm: "always",
+        // The enrollment's context is execution state pulled out of the lead's replies.
+        untrustedContent: true,
         description: "Enroll a lead in the latest published campaign version. Triggers the live campaign's automation for that lead.",
     }),
     op({
@@ -54,19 +56,11 @@ export const campaignsOperations = [
         title: "List campaign comment events",
         description: "List matched, suppressed, blocked, and replayed comment automation events.",
         // Each event carries verbatim external-commenter text (`body`,
-        // `commenterDisplayName`), so this read must be framed untrusted even
-        // though the campaigns group is not blanket-untrusted.
+        // `commenterDisplayName`), and the receipt audit alongside it carries the
+        // same verbatim text for comments that never became an event, so this
+        // read must be framed untrusted even though the campaigns group is not
+        // blanket-untrusted.
         untrustedContent: true,
-        redactedFields: [
-            "events[].aiClassification",
-            "events[].body",
-            "events[].commenterDisplayName",
-            "events[].matchExplanation",
-            "events[].matchResult",
-            "events[].providerSnapshot",
-            "events[].safetyNotes",
-            "events[].sourceMetadata",
-        ],
     }),
     op({
         id: "campaigns.simulations.list",
@@ -76,41 +70,43 @@ export const campaignsOperations = [
     op({
         id: "campaigns.simulations.create",
         title: "Simulate a campaign",
+        // A simulation echoes the lead record, event payload and context it ran on, and the drafts a model wrote from them.
+        untrustedContent: true,
         description: "Run a persisted dry-run simulation without sending messages.",
-        redactedFields: [
-            "generatedDrafts[]",
-            "input.lead",
-            "trace[].generatedDraft",
-        ],
     }),
     op({
         id: "campaigns.simulations.get",
         title: "Get a campaign simulation",
+        // A simulation echoes the lead record, event payload and context it ran on, and the drafts a model wrote from them.
+        untrustedContent: true,
         description: "Get a campaign simulation run with trace.",
-        redactedFields: [
-            "generatedDrafts[]",
-            "input.lead",
-            "trace[].generatedDraft",
-        ],
     }),
     op({
         id: "campaigns.commentSimulationSuite.run",
         title: "Run the comment automation suite",
-        redactedFields: [
-            "simulations[].generatedDrafts[]",
-            "simulations[].trace[].generatedDraft",
-        ],
+        // Each simulation echoes the lead record, event payload and context it ran on, and the drafts a model wrote from them.
+        untrustedContent: true,
         description: "Run the Instagram comment-to-DM simulation suite against a campaign. Any campaign that uses comment automation has to pass it before it can publish, so run this before reaching for publish.",
     }),
     op({
         id: "campaigns.publish",
         title: "Publish a campaign",
-        confirmRequired: true,
+        openWorld: true,
+        mutatesExisting: true,
+        confirm: "always",
         description: "Freeze the draft as a new immutable version and point new enrollments at it. Published versions never change, and enrollments against a live campaign reach real leads. Publish is blocked when the target provider cannot do something the campaign needs, so read the provider capabilities first.",
     }),
     op({
         id: "campaigns.setStatus",
         title: "Pause, resume, or archive a campaign",
+        openWorld: true,
+        mutatesExisting: true,
+        // Resuming restarts the campaign's automatic sends to real leads. Pausing
+        // and archiving only stop work, so they need no confirmation.
+        confirm: {
+            applies: (input) => isJsonObject(input.body) && input.body.status === "published",
+            description: "status is published (resuming sends)",
+        },
         description: "Pause, resume, or archive a campaign. A transition that does not make sense for the campaign's current state is rejected rather than forced through.",
     }),
     op({
@@ -126,7 +122,7 @@ export const campaignsOperations = [
     op({
         id: "campaigns.enrollments.timeline",
         title: "Read an enrollment timeline",
-        redactedFields: ["enrollment.context"],
+        untrustedContent: true,
         description: "Read every step one enrollment has been through: what got sent, when, and how the lead responded.",
     }),
 ];

package/dist/operations/groups/channels.js

@@ -0,0 +1,23 @@
+import { op } from "../registry.js";
+export const channelsOperations = [
+    op({
+        id: "channels.list",
+        title: "List channel accounts",
+        description: "List the coach's current channel accounts, one per provider account, with each one's status, health, and what the composer can send through it. Connecting, pausing, and repairing an account stay in the Luca app.",
+    }),
+    op({
+        id: "channels.catalog",
+        title: "List available channels",
+        description: "List every channel Luca supports and whether it can be connected yet. Availability is per channel, not per coach.",
+    }),
+    op({
+        id: "channels.features",
+        title: "List channel features",
+        description: "List what each provider supports, from sending media to interactive replies, and what still blocks a feature: a permission, a webhook field, or a provider approval. Check this before telling the coach a channel can do something.",
+    }),
+    op({
+        id: "channels.get",
+        title: "Get a channel account",
+        description: "Read one channel account: status, health, cleanup state after a disconnect, and the actions the coach can take on it. Older rows stay readable by ID.",
+    }),
+];

package/dist/operations/groups/conversations.js

@@ -4,45 +4,34 @@ export const conversationsOperations = [
         id: "conversations.list",
         title: "List conversations",
         description: "List recent conversations. Query supports limit, cursor, channel, and q.",
-        redactedFields: [
-            "conversations[].lastMessagePreview",
-            "conversations[].leadDisplayName",
-        ],
     }),
     op({
         id: "conversations.get",
         title: "Get a conversation",
         description: "Get a conversation with messages and lead context.",
-        redactedFields: [
-            "conversation.qualificationProgress",
-            "copilotContext.leadDisplayName",
-            "lead.customFields",
-            "lead.displayName",
-            "lead.externalUserId",
-            "messages[].body",
-            "messages[].media",
-            "messages[].mediaUrls",
-            "messages[].rawPayload",
-            "pendingReview.criticIssues",
-            "pendingReview.draftBody",
-            "pendingReview.qualification",
-        ],
     }),
     op({
         id: "conversations.messages",
         title: "Read a conversation's messages",
         description: "Page backward through a thread's older messages, for threads longer than the window the conversation read returns.",
-        redactedFields: [
-            "messages[].body",
-            "messages[].media",
-            "messages[].mediaUrls",
-            "messages[].rawPayload",
-        ],
     }),
     op({
         id: "conversations.send",
+        // Answers with ids and status flags only; no lead-authored text.
+        untrustedContent: false,
         title: "Send a message to a lead",
-        confirmRequired: true,
+        openWorld: true,
+        confirm: "always",
         description: "Send a message to the lead on their channel right away. This is the one conversation tool that reaches a real person without a reviewer seeing the message first, which is why it needs an explicit confirm. Prefer drafting into the review queue unless the coach has asked for this message to go out now.",
     }),
+    op({
+        id: "conversations.partial_send_retry",
+        // Answers with ids and status flags only; no lead-authored text.
+        untrustedContent: false,
+        title: "Retry unsent message parts",
+        openWorld: true,
+        mutatesExisting: true,
+        confirm: "always",
+        description: "Retry only the parts of a partially sent message that are known not to have reached the provider.",
+    }),
 ];

package/dist/operations/groups/insights.js

@@ -8,16 +8,19 @@ export const insightsOperations = [
     op({
         id: "insights.markRead",
         title: "Mark an insight read",
+        mutatesExisting: true,
         description: "Mark one insight read, so it stops coming back at the top of the feed.",
     }),
     op({
         id: "insights.dismiss",
         title: "Dismiss an insight",
+        mutatesExisting: true,
         description: "Dismiss one insight the coach does not want to act on. Use this rather than leaving it unread forever.",
     }),
     op({
         id: "insights.markActioned",
         title: "Mark an insight actioned",
+        mutatesExisting: true,
         description: "Record that the thing an insight asked for was actually done. Use it after doing the work, not instead of it.",
     }),
     op({
@@ -28,6 +31,7 @@ export const insightsOperations = [
     op({
         id: "insights.settings.update",
         title: "Update alert delivery settings",
+        mutatesExisting: true,
         description: "Merge-patch the coach's alert-delivery settings. Send only what you are changing; anything left out keeps its current value.",
     }),
 ];

package/dist/operations/groups/integrations.js

@@ -10,11 +10,6 @@ export const integrationsOperations = [
         title: "Start a CRM connection",
         description: "Create a CRM provider OAuth URL.",
     }),
-    op({
-        id: "integrations.crm.oauthCallback",
-        title: "Finish a CRM connection",
-        description: "Exchange a CRM OAuth code and store encrypted credentials.",
-    }),
     op({
         id: "integrations.crm.connections.list",
         title: "List CRM connections",
@@ -23,13 +18,15 @@ export const integrationsOperations = [
     op({
         id: "integrations.crm.connections.create",
         title: "Create a CRM connection",
+        mutatesExisting: true,
         description: "Create or update a workspace-scoped CRM connection.",
     }),
     op({
         id: "integrations.crm.connections.schema",
         title: "Read a CRM's field schema",
+        // sampleRecords are literal contact and deal rows from the coach's CRM, which leads and other people filled in.
+        untrustedContent: true,
         description: "Discover CRM provider schema.",
-        redactedFields: ["sampleRecords"],
     }),
     op({
         id: "integrations.crm.connections.health",
@@ -39,13 +36,11 @@ export const integrationsOperations = [
     op({
         id: "integrations.crm.connections.webhooksSetup",
         title: "Set up a CRM's webhooks",
+        openWorld: true,
+        confirm: "always",
+        mutatesExisting: true,
         description: "Configure CRM provider webhook status.",
     }),
-    op({
-        id: "integrations.crm.webhooks.record",
-        title: "Record a CRM webhook",
-        description: "Record an inbound CRM provider webhook event. Idempotent on the provider's event id, so a redelivery is recorded once.",
-    }),
     op({
         id: "integrations.crm.mappings.suggest",
         title: "Suggest CRM field mappings",
@@ -54,27 +49,30 @@ export const integrationsOperations = [
     op({
         id: "integrations.crm.mappings.confirm",
         title: "Confirm CRM field mappings",
+        mutatesExisting: true,
         description: "Confirm CRM field mappings.",
     }),
     op({
         id: "integrations.crm.syncRuns.list",
         title: "List CRM sync runs",
+        // Mutations carry CRM record values: names, emails, notes.
+        untrustedContent: true,
         description: "List CRM sync history.",
-        redactedFields: [
-            "syncRuns[].appliedMutations[].fields",
-            "syncRuns[].plannedMutations[].fields",
-        ],
     }),
     op({
         id: "integrations.crm.syncRuns.create",
         title: "Start a CRM sync",
+        openWorld: true,
+        confirm: "always",
+        // Mutations carry CRM record values: names, emails, notes.
+        untrustedContent: true,
         description: "Create a CRM dry-run or live sync run.",
-        redactedFields: ["appliedMutations[].fields", "plannedMutations[].fields"],
     }),
     op({
         id: "integrations.events.list",
         title: "List integration events",
+        // Each event holds the raw webhook or CRM body, which can carry contact fields verbatim.
+        untrustedContent: true,
         description: "List integration event log.",
-        redactedFields: ["events[].payload"],
     }),
 ];

package/dist/operations/groups/knowledge.js

@@ -8,12 +8,14 @@ export const knowledgeOperations = [
     op({
         id: "knowledge.approveSuggestion",
         title: "Approve a knowledge suggestion",
-        confirmRequired: true,
+        mutatesExisting: true,
+        confirm: "always",
         description: "Approve a profile suggestion and write it into the coach's profile. Every later draft reads the result, so check the excerpt supports the change before approving.",
     }),
     op({
         id: "knowledge.rejectSuggestion",
         title: "Reject a knowledge suggestion",
+        mutatesExisting: true,
         description: "Reject a profile suggestion so it stops being offered. The profile is left as it stands.",
     }),
     op({
@@ -24,11 +26,13 @@ export const knowledgeOperations = [
     op({
         id: "knowledge.sources.sync",
         title: "Re-sync a knowledge source",
+        mutatesExisting: true,
         description: "Queue a re-read of one knowledge source now rather than waiting for its next scheduled sync. It returns as soon as the job is queued, so any new suggestions appear on a later read.",
     }),
     op({
         id: "knowledge.sources.disconnect",
         title: "Disconnect a knowledge source",
+        mutatesExisting: true,
         description: "Delete a knowledge source. Its pending suggestions go with it; values the coach already approved stay in the profile, because approving copies them there.",
     }),
 ];

package/dist/operations/groups/leads.js

@@ -4,47 +4,27 @@ export const leadsOperations = [
         id: "leads.list",
         title: "List leads",
         description: "List leads. Query supports limit, cursor, channel, and q according to Luca OpenAPI.",
-        redactedFields: ["leads[].displayName", "leads[].externalUserId"],
     }),
     op({
         id: "leads.get",
         title: "Get a lead's timeline",
         description: "Get a lead's full timeline and notes.",
-        redactedFields: [
-            "identities[].displayName",
-            "identities[].externalUserId",
-            "lead.customFields",
-            "lead.displayName",
-            "messages[].body",
-            "messages[].media",
-            "notes[].body",
-        ],
     }),
     op({
         id: "leads.explain",
         title: "Explain why a lead qualified",
         description: "Explain why a lead qualified: the qualifier's reasoning, signals, and confidence from its most recent drafted turn.",
-        redactedFields: ["qualification"],
     }),
     op({
         id: "leads.create",
         title: "Create or upsert a lead",
+        mutatesExisting: true,
         description: "Create or upsert a lead identity. Body requires channel and externalUserId.",
-        redactedFields: [
-            "lead.customFields",
-            "lead.displayName",
-            "lead.externalUserId",
-        ],
     }),
     op({
         id: "leads.update",
         title: "Update a lead",
         description: "Update a lead's display name, stage, score, tags, or custom fields.",
-        redactedFields: [
-            "lead.customFields",
-            "lead.displayName",
-            "lead.externalUserId",
-        ],
     }),
     op({
         id: "leads.fieldDefinitions.list",
@@ -53,7 +33,10 @@ export const leadsOperations = [
     }),
     op({
         id: "leads.fieldDefinitions.upsert",
+        // Echoes the coach's own field definition back.
+        untrustedContent: false,
         title: "Define a custom lead field",
+        mutatesExisting: true,
         description: "Create or update a custom lead field definition.",
     }),
     op({
@@ -64,37 +47,53 @@ export const leadsOperations = [
     op({
         id: "leads.importApply",
         title: "Apply a lead import",
+        mutatesExisting: true,
+        // Writes many leads and their consent records at once.
+        confirm: "always",
         description: "Apply a mapped lead import with consent evidence.",
     }),
     op({
         id: "leads.identities.attach",
         title: "Attach a channel identity to a lead",
+        mutatesExisting: true,
         description: "Attach a verified or claimed identity to a lead.",
     }),
     op({
         id: "leads.consents.grant",
+        // Echoes the consent record the coach filed.
+        untrustedContent: false,
         title: "Record a lead's consent",
+        mutatesExisting: true,
+        // Consent is what lets Luca message the lead on that channel.
+        confirm: "always",
+        openWorld: true,
         description: "Grant explicit lead consent for a channel purpose.",
     }),
     op({
         id: "leads.consents.revoke",
+        // Echoes the consent record the coach revoked.
+        untrustedContent: false,
         title: "Revoke a lead's consent",
+        mutatesExisting: true,
         description: "Revoke explicit lead consent for a channel purpose.",
     }),
     op({
         id: "leads.notes.add",
+        // Echoes the coach's own note back.
+        untrustedContent: false,
         title: "Add a note to a lead",
         description: "Append a coach note to a lead. Body requires body.",
-        redactedFields: ["note.body"],
     }),
     op({
         id: "leads.draft",
         title: "Draft a reply to a lead",
+        untrustedContent: true,
         description: "Draft a voice-matched reply for a lead on demand and queue it for review. Optional guidance steers tone or content.",
-        redactedFields: ["draft.body"],
     }),
     op({
         id: "leads.notes.delete",
+        // Answers with ids and status flags only; no lead-authored text.
+        untrustedContent: false,
         title: "Delete a lead note",
         description: "Remove one coach note from a lead and leave the rest of the timeline alone. This is how a note filed by mistake gets taken back.",
     }),

package/dist/operations/groups/learning.js

@@ -4,13 +4,22 @@ export const learningOperations = [
         id: "learning.panel",
         title: "Read what Luca wants to learn",
         description: "Read which of the three profile questions Luca still owes an answer to, with suggested answers inferred from the coach's own words. The worked example pair is blanked for a redacted-tier key.",
-        redactedFields: ["exampleDm", "exampleDraft"],
     }),
     op({
         id: "learning.frameworkPerformance",
         title: "Read framework objection performance",
         description: "Win rate by objection bucket for the sales framework the coach has configured right now, over a rolling window. These numbers are correlational \u2014 read them as a signal, not as proof a framework caused the result.",
     }),
+    op({
+        id: "learning.abTests.list",
+        title: "List A/B tests",
+        description: "List the coach's A/B tests, newest first, optionally filtered by status. Variant config comes back as stored, since its shape depends on what the test compares. Creating, starting, stopping, and adopting a test stay in the Luca app.",
+    }),
+    op({
+        id: "learning.abTests.get",
+        title: "Get an A/B test",
+        description: "Read one A/B test with its per-variant numbers: how many leads each arm saw, and how each is doing against the success metric. Small samples swing widely, so say how many leads each arm has before calling a winner.",
+    }),
     op({
         id: "learning.proposals.list",
         title: "List learning proposals",
@@ -18,7 +27,10 @@ export const learningOperations = [
     }),
     op({
         id: "learning.proposals.dismiss",
+        // Answers with ids and status flags only; no lead-authored text.
+        untrustedContent: false,
         title: "Dismiss a learning proposal",
+        mutatesExisting: true,
         description: "Dismiss one learning proposal so it drops out of the default list. Use it when the coach has decided against the change, not when you have simply read it.",
     }),
 ];