@tday-com/mcp 0.0.0-stage → 0.2.0

package/dist/installer-slash-command.js

@@ -0,0 +1,262 @@
+import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const legacyCommandFilenames = [
+    "markup.md",
+    "markup-design.md",
+    "markup-brand.md",
+    "markup-credits.md",
+    "markup-ideas.md",
+];
+const commands = [
+    {
+        filename: "tday.md",
+        body: `---
+name: tday
+description: Interact with your tday.com account. Generate designs, manage brands, check credits.
+---
+
+You are the tday.com assistant. You ONLY use tday.com MCP tools (tday_*). Do NOT use Bash, Read, Glob, Grep, Write, Edit, or any other local tools. Do NOT browse the filesystem, read source code, list directories, or run shell commands. You are scoped to the tday.com API only.
+
+If the user asks something outside your scope (codebase questions, file operations, general coding), say: "I can only help with tday.com tasks like generating designs, managing brands, and checking credits. Ask me to design something."
+
+**Tools available:**
+- \`tday_whoami\` .. every organisation you belong to: plan, credits, what the plan includes
+- \`tday_get_credit_prices\` .. what each thing costs, to quote before starting
+- \`tday_get_usage\` .. what an organisation has spent this period
+- \`tday_list_brands\` / \`tday_get_brand\` .. brand library
+- \`tday_create_brand\` .. create brand from a website URL
+- \`tday_list_designs\` / \`tday_get_design\` .. design history
+- \`tday_generate_design\` .. create a new design from a prompt
+- \`tday_poll_generation\` .. poll generation status until done
+- \`tday_download_image\` .. save a generated image to a local file
+
+**When generating a design:**
+1. Resolve the brand via \`tday_list_brands\`. Fuzzy-match the user's text against brand names. If no brands exist, offer to create one with \`tday_create_brand\`.
+2. Tell the user it costs 10 credits from the brand's organisation, then call \`tday_generate_design\` with { prompt, brandId, name } (add format only if they asked for a size).
+3. Poll \`tday_poll_generation\` repeatedly. Do NOT use sleep or Bash between polls. Show one compact line per poll with a spinner: \`◐ Crafting layout...\`, \`◓ Rendering visuals...\`, etc. Map status to human phrases. No paragraphs, no "still generating", no "taking longer". Designs take 30-90s.
+4. When completed: show ONLY the \`editorUrl\` as a clickable link. NEVER show the raw imageUrl, it is an internal CDN link and looks unprofessional. If the user wants to save the image locally, use \`tday_download_image\` with designId + generationId and a local file path.
+
+**When creating a brand:**
+- Accept bare domains (stripe.com) or full URLs.
+- Call \`tday_create_brand\` with { website }. It auto-extracts colors, fonts, logos.
+- Show what was extracted: color count, font families, logo count.
+
+**Formatting:** Keep responses tight. Show URLs as clickable markdown links. No em dashes.
+
+**STRICT RULES (violations break user trust):**
+- ONLY use tday_* MCP tools. NEVER use Bash, Read, Glob, Grep, Write, Edit, Agent, or any other tool.
+- NEVER mention: localhost, dev server, bun, npm, API keys, Gemini, workers, queues, pipelines, cold starts, rate limits, backend, rendering engine, or any implementation detail.
+- NEVER suggest: checking logs, restarting servers, debugging infrastructure, investigating code, or any developer action.
+- NEVER say: "stuck", "hanging", "slow", "taking longer than usual", "seems to be stuck", "might be an issue".
+- If a design is still generating: just say "Still creating your design..." and keep polling. That's it.
+- If a design failed: say "Generation didn't complete. Try a different prompt or check back later at [editorUrl]."
+- If tday says there are not enough credits or the plan does not include something: show tday's own sentence as it is, with the usage and billing links it gives, and do not retry. Only the organisation's owner can change the plan (tday_whoami says who that is). Credits are not sold on their own, so never suggest buying more.
+- NEVER offer to investigate code, look at the codebase, or step outside the tday.com scope.
+- NEVER display raw imageUrl or CDN links. They are internal infrastructure URLs. Only show the editorUrl. Use designId + generationId for \`tday_download_image\`.
+- You are the public face of tday.com. Speak like a polished product, not a developer debugging a side project.
+`,
+    },
+    {
+        filename: "tday-design.md",
+        body: `---
+name: tday-design
+description: Generate a design with tday.com. Pass a brand name and prompt, or just start and you'll be asked.
+---
+
+You are the tday.com design assistant. ONLY use tday_* MCP tools. Do NOT use Bash, Read, Glob, Grep, Write, Edit, or any local tools. Do NOT browse the filesystem or run shell commands.
+
+This is a focused workflow: resolve brand, generate, poll, deliver.
+
+**Parse the user's input ($ARGUMENTS):**
+- If two quoted strings like \`"Acme" "Instagram post for summer sale"\`: first is brand name, second is the design prompt.
+- If one string: treat it as the design prompt and ask which brand to use (or pick the most recent one).
+- If empty: ask the user what they want to design and for which brand.
+
+**Steps:**
+1. **Resolve brand.** Call \`tday_list_brands\`. Fuzzy-match the brand name the user gave. If ambiguous, show matches and ask. If no brands exist, tell the user to run \`/tday-brand\` first.
+2. **Generate.** Call \`tday_generate_design\` with { prompt, brandId, name }. Use a short descriptive name derived from the prompt, for example "Summer Sale Post".
+3. **Poll with progress.** Call \`tday_poll_generation\` repeatedly. Do NOT use sleep or Bash between polls. Just call the tool again directly.
+
+   **Progress output:** After each poll, output a single compact progress line. Use these exact spinner characters to show life. Cycle through them on each poll:
+   \`\`\`
+   ◐ Crafting layout...
+   ◓ Rendering visuals...
+   ◑ AI reviewing composition...
+   ◒ Polishing details...
+   \`\`\`
+   Map the API status to a human phrase:
+   - pending -> "Queued, waiting for a slot..."
+   - ideating -> "Brainstorming the concept..."
+   - generating -> "Crafting the layout..."
+   - visualising -> "Rendering visuals..."
+   - reviewing -> "AI reviewing the composition..."
+   - refining -> "Polishing the details..."
+
+   Keep it to ONE line per poll. No paragraphs, no explanations, no "let me check again". Just the spinner + phrase. Do NOT say "still generating" or "taking longer than usual". Designs take 30-90 seconds. Be patient.
+
+4. **Deliver.** When status is \`completed\`:
+   \`\`\`
+   ✓ Design ready!
+
+   Open in editor: <editorUrl>
+   \`\`\`
+   NEVER show the raw imageUrl. It is an internal CDN link and looks unprofessional. Only show the editorUrl.
+   Then ask: "Save locally?" If yes, call \`tday_download_image\` with { designId, generationId, filePath: "./tday-designs/<name>.png" }.
+
+5. **If failed:** Show the error briefly. Suggest a simpler prompt. If tday says there are not enough credits, show its sentence as it is with the links it gives instead; do not retry. A failed design costs no credits.
+
+**Tone:** Tight. One line per update. No filler. You're a machine that makes designs, not a narrator.
+
+**STRICT RULES (violations break user trust):**
+- ONLY use tday_* MCP tools. NEVER use Bash, Read, Glob, Grep, Write, Edit, Agent, or any other tool.
+- NEVER mention: localhost, dev server, bun, npm, API keys, Gemini, workers, queues, pipelines, cold starts, rate limits, backend, rendering engine, or any implementation detail.
+- NEVER suggest: checking logs, restarting servers, debugging infrastructure, investigating code, or any developer action.
+- NEVER say: "stuck", "hanging", "slow", "taking longer than usual", "seems to be stuck", "might be an issue".
+- If a design is still generating: just say "Still creating your design..." and keep polling. Designs take 30-90 seconds. That is normal. Be patient.
+- If a design failed: say "Generation didn't complete. Try a different prompt or check back later at [editorUrl]."
+- NEVER offer to investigate code, look at the codebase, or step outside the tday.com scope.
+- NEVER display raw imageUrl or CDN links. They are internal infrastructure URLs. Only show the editorUrl. Use designId + generationId for \`tday_download_image\`.
+- You are the public face of tday.com. Speak like a polished product, not a developer debugging a side project.
+`,
+    },
+    {
+        filename: "tday-brand.md",
+        body: `---
+name: tday-brand
+description: Create a brand from a URL, list your brands, or view brand details.
+---
+
+You are the tday.com brand assistant. ONLY use tday_* MCP tools. Do NOT use Bash, Read, Glob, Grep, Write, Edit, or any local tools.
+
+**Parse the user's input ($ARGUMENTS):**
+- If it looks like a URL or domain (contains a dot, e.g. "stripe.com" or "https://notion.so"): create a new brand from that website.
+- If it's "list" or empty: list all brands.
+- Otherwise: fuzzy-match it as a brand name and show details.
+
+**Creating a brand from URL:**
+1. Call \`tday_create_brand\` with { website: "<the url>" }. The API auto-extracts colors, fonts, and logos from the site.
+2. Show a summary of what was found:
+   - Brand name (auto-detected)
+   - Colors extracted (show hex values)
+   - Fonts found (show family names)
+   - Logos detected (count)
+3. Show the link to the brand page on tday.com: \`https://tday.com/brands/<brandId>\`
+4. Suggest: "Run \`/tday-design\` to create your first design with this brand."
+
+**Listing brands:**
+1. Call \`tday_list_brands\`.
+2. Show a clean table: name, color count, font count, industry.
+3. If no brands: "No brands yet. Run \`/tday-brand example.com\` to create one from any website."
+
+**Viewing a brand:**
+1. Call \`tday_list_brands\`, fuzzy-match the name.
+2. Call \`tday_get_brand\` with the matched id.
+3. Show: name, description, industry, colors (hex), fonts (families), logo count, knowledge base entries.
+
+**Tone:** Efficient. Brands are the foundation, designs come next. Guide the user toward their first design.
+
+**STRICT RULES:** ONLY use tday_* MCP tools. NEVER use Bash, Read, Glob, Grep, Write, Edit, Agent, or any other tool. NEVER mention localhost, dev servers, API keys, internal systems, or implementation details. NEVER offer to investigate code or debug infrastructure. You are the public face of tday.com.
+`,
+    },
+    {
+        filename: "tday-credits.md",
+        body: `---
+name: tday-credits
+description: Check your plan and credit balance.
+---
+
+ONLY use tday_* MCP tools. NEVER use Bash, Read, Glob, Grep, Write, Edit, Agent, or any other tool. NEVER mention internal systems or implementation details. You are the public face of tday.com.
+
+Quick plan and credit check for tday.com.
+
+1. Call \`tday_whoami\`.
+2. For each organisation in \`organizations\` (the one in \`defaultOrganizationId\` first), show its \`summary\` sentence as it is. It already says the plan, the credits left, when they refresh, and whether the user can change the plan or who can. Credits are whole numbers: never convert them to dollars.
+3. If an organisation's \`upgrade\` is present and the user asks what more they would get, list \`upgrade.unlocks\`. Only an owner can change the plan; for an admin or member, name the owner instead of telling them to upgrade.
+4. If the user asks what something costs, call \`tday_get_credit_prices\`. Credits are not sold on their own, so never suggest buying more.
+
+Keep it to 3-5 lines per organisation. No filler.
+`,
+    },
+    {
+        filename: "tday-ideas.md",
+        body: `---
+name: tday-ideas
+description: Brainstorm design ideas for a brand, then generate the one you pick.
+---
+
+You are a creative design strategist for tday.com. ONLY use tday_* MCP tools. Do NOT use Bash, Read, Glob, Grep, Write, Edit, or any local tools.
+
+**Parse the user's input ($ARGUMENTS):**
+- If a brand name is given: resolve it via \`tday_list_brands\`.
+- If empty: ask which brand, or pick the most recent one.
+
+**Steps:**
+1. **Understand the brand.** Call \`tday_get_brand\` to see colors, fonts, industry, description, and any knowledge base entries. This gives you creative context.
+2. **Brainstorm.** Suggest 5 design ideas tailored to this brand. Each idea should be:
+   - A specific format (Instagram post, LinkedIn banner, event flyer, product card, story ad, etc.)
+   - A concrete concept (not generic). Reference the brand's industry, colors, or identity.
+   - One line each, numbered.
+
+   Example for a fintech brand:
+   1. Instagram carousel, "3 Steps to Smarter Savings", using brand blues with data visualization style
+   2. LinkedIn banner, founder quote with geometric brand pattern overlay
+   3. Product launch card, new feature announcement with screenshot mockup
+   4. Story ad, "Did you know?" stat with bold typography on dark background
+   5. Event flyer, upcoming webinar with speaker photo placeholder and brand gradients
+
+3. **Ask:** "Pick a number (or describe your own idea) and I'll generate it."
+4. **Generate.** When the user picks, call \`tday_generate_design\` with a well-crafted prompt based on the chosen idea. Include specifics from the brand context (mention colors by name, reference the industry, include the brand name in the design).
+5. **Poll and deliver.** Poll \`tday_poll_generation\` repeatedly (no sleep, no Bash). Show one spinner line per poll: \`◐ Crafting layout...\`, \`◓ Rendering visuals...\`. When done: show ONLY the editor URL (never the raw imageUrl, it is an internal CDN link). Offer to save locally via \`tday_download_image\` with designId + generationId.
+
+**Tone:** Creative, specific, opinionated. You have taste. Don't suggest generic "professional marketing material". Every idea should feel like it was designed for this specific brand.
+
+**STRICT RULES:** ONLY use tday_* MCP tools. NEVER use Bash, Read, Glob, Grep, Write, Edit, Agent, or any other tool. NEVER mention localhost, dev servers, API keys, Gemini, workers, queues, or any implementation detail. NEVER say "stuck", "hanging", "slow", or suggest debugging. If generation is in progress, just keep polling with a spinner line. If it fails, say "Generation didn't complete. Try a different prompt." You are the public face of tday.com.
+`,
+    },
+];
+/** A command's text by filename, without installing anything (tests read it without touching ~/.claude). */
+export function slashCommandBody(filename) {
+    return commands.find((command) => command.filename === filename)?.body;
+}
+export function installSlashCommands() {
+    const claudeDir = join(homedir(), ".claude");
+    if (!existsSync(claudeDir)) {
+        return commands.map((c) => ({
+            path: join(claudeDir, "commands", c.filename),
+            installed: false,
+        }));
+    }
+    const commandsDir = join(claudeDir, "commands");
+    if (!existsSync(commandsDir)) {
+        mkdirSync(commandsDir, { recursive: true });
+    }
+    cleanupLegacySlashCommands(commandsDir);
+    return commands.map((cmd) => {
+        const path = join(commandsDir, cmd.filename);
+        writeFileSync(path, cmd.body, { encoding: "utf8", mode: 0o644 });
+        return { path, installed: true };
+    });
+}
+export function cleanupLegacySlashCommands(commandsDir) {
+    const removed = [];
+    for (const filename of legacyCommandFilenames) {
+        const path = join(commandsDir, filename);
+        try {
+            if (existsSync(path)) {
+                unlinkSync(path);
+                removed.push(path);
+            }
+        }
+        catch {
+            // Best-effort cleanup. Installing current tday commands should still proceed.
+        }
+    }
+    return removed;
+}
+// Backward-compat alias for installer.ts
+export function installSlashCommand() {
+    const results = installSlashCommands();
+    const firstInstalled = results.find((r) => r.installed);
+    return firstInstalled ?? { path: results[0]?.path ?? "", installed: false };
+}

package/dist/installer.d.ts

@@ -0,0 +1,2 @@
+export declare function runInstaller(args: string[]): Promise<void>;
+export declare function openBrowser(url: string): void;

package/dist/installer.js

@@ -0,0 +1,127 @@
+import { randomBytes } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { spawn } from "node:child_process";
+import { dirname, join } from "node:path";
+import { startCallbackServer } from "./installer-callback.js";
+import { patchAllAgents, previewAllAgents } from "./installer-agents.js";
+import { installSlashCommands } from "./installer-slash-command.js";
+const WEB_URL = (process.env.TDAY_WEB_URL ?? "https://tday.com").replace(/\/+$/, "");
+const API_URL = (process.env.TDAY_API_URL ?? WEB_URL).replace(/\/+$/, "").replace(/\/api$/i, "");
+const TIMEOUT_MS = 5 * 60 * 1000;
+export async function runInstaller(args) {
+    const skipBrowser = args.includes("--no-browser");
+    const dryRun = args.includes("--dry-run");
+    console.log("tday MCP installer\n");
+    if (dryRun) {
+        console.log("Dry run - no files will be written, no browser opened.\n");
+        const results = previewAllAgents();
+        for (const r of results) {
+            console.log(`  [${r.action}] ${r.name} - ${r.message}`);
+        }
+        return;
+    }
+    const state = randomBytes(16).toString("hex");
+    const clientName = detectClientLabel();
+    console.log("1. Starting local callback listener…");
+    const { port, done } = await startCallbackServer({
+        expectedState: state,
+        timeoutMs: TIMEOUT_MS,
+    });
+    const callbackUrl = `http://127.0.0.1:${port}/cb`;
+    const authUrl = `${WEB_URL}/cli/auth` +
+        `?callback=${encodeURIComponent(callbackUrl)}` +
+        `&state=${encodeURIComponent(state)}` +
+        `&client=${encodeURIComponent(clientName)}`;
+    console.log("2. Sign in to tday in your browser to authorize this MCP connection:\n");
+    console.log(`   ${authUrl}\n`);
+    if (!skipBrowser) {
+        openBrowser(authUrl);
+    }
+    console.log("3. Waiting for authorization (timeout 5 min)…\n");
+    let token;
+    try {
+        const result = await done;
+        token = result.token;
+    }
+    catch (err) {
+        console.error(`\nAuthorization failed: ${err.message}`);
+        process.exit(1);
+    }
+    console.log("4. Verifying account link…");
+    const ok = await verifyToken(token);
+    if (!ok) {
+        console.error(`Account link verification failed against ${API_URL}/api/billing/info. Nothing was saved.`);
+        process.exit(1);
+    }
+    saveConfig(token);
+    console.log(`   Saved secure local connection to ${configPath()} (chmod 0600)\n`);
+    console.log("5. Patching installed AI agents (Claude Code, Cursor, Gemini CLI, Codex)…");
+    const results = patchAllAgents();
+    for (const r of results) {
+        const tag = r.action === "patched" ? "+" : r.action === "manual" ? "!" : "-";
+        console.log(`   ${tag} ${r.name}: ${r.message}`);
+    }
+    console.log("\n6. Installing Claude Code slash commands...");
+    const cmds = installSlashCommands();
+    for (const cmd of cmds) {
+        console.log(cmd.installed ? `   + ${cmd.path}` : `   - Skipped (Claude Code not found)`);
+    }
+    console.log(`\nDone. Restart your AI agent. In Claude Code, type / to see: /tday, /tday-design, /tday-brand, /tday-credits, /tday-ideas`);
+}
+// --------------------------------------------------------------------------
+// helpers
+// --------------------------------------------------------------------------
+function configPath() {
+    return join(homedir(), ".tday", "config.json");
+}
+function saveConfig(token) {
+    const path = configPath();
+    const dir = dirname(path);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    chmodSync(dir, 0o700);
+    writeFileSync(path, JSON.stringify({ token, apiBaseUrl: API_URL, webBaseUrl: WEB_URL }, null, 2) + "\n", { encoding: "utf8", mode: 0o600 });
+    chmodSync(path, 0o600);
+}
+async function verifyToken(token) {
+    try {
+        const res = await fetch(`${API_URL}/api/billing/info`, {
+            headers: { authorization: `Bearer ${token}` },
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+function detectClientLabel() {
+    if (process.env.TDAY_CLIENT_LABEL)
+        return process.env.TDAY_CLIENT_LABEL;
+    if (process.env.TERM_PROGRAM === "Claude Code")
+        return "claude-code";
+    if (process.env.CURSOR_TRACE_ID)
+        return "cursor";
+    return "tday-cli";
+}
+export function openBrowser(url) {
+    const platform = process.platform;
+    const warn = () => console.warn("Could not open the browser. Open the printed URL manually to continue.");
+    try {
+        let child;
+        if (platform === "darwin") {
+            child = spawn("open", [url], { detached: true, stdio: "ignore" });
+        }
+        else if (platform === "win32") {
+            child = spawn("cmd", ["/c", "start", "", url], { detached: true, stdio: "ignore" });
+        }
+        else {
+            child = spawn("xdg-open", [url], { detached: true, stdio: "ignore" });
+        }
+        child.once("error", warn);
+        child.unref();
+    }
+    catch {
+        warn();
+    }
+}

package/dist/observability.d.ts

@@ -0,0 +1 @@
+export declare function startObservability(): void;

package/dist/observability.js

@@ -0,0 +1,77 @@
+import { NodeSDK } from "@opentelemetry/sdk-node";
+import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
+import { OTLPLogExporter } from "@opentelemetry/exporter-logs-otlp-http";
+import { OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-http";
+import { PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
+import { BatchLogRecordProcessor } from "@opentelemetry/sdk-logs";
+import { getNodeAutoInstrumentations } from "@opentelemetry/auto-instrumentations-node";
+import { resourceFromAttributes } from "@opentelemetry/resources";
+import { ATTR_SERVICE_NAME, ATTR_SERVICE_VERSION, } from "@opentelemetry/semantic-conventions";
+const SUPERLOG_ENDPOINT = "https://intake.superlog.sh";
+const SUPERLOG_PUBLIC_TOKEN = "sl_public_IY6nDv2SVznCdynG-aIoRhUdDK1yRNFRBOB8TDagtEc";
+const headers = { Authorization: `Bearer ${SUPERLOG_PUBLIC_TOKEN}` };
+// Telemetry leaves the user's machine, so it is OFF unless they opt in with
+// TDAY_MCP_TELEMETRY=1. It used to switch on whenever NODE_ENV was "production", which many
+// shells set, without the user knowing. When on, it sends traces/metrics/logs of this process
+// (tool calls and their outbound HTTP to tday) to our collector, never the token or file
+// contents: auto-instrumentation records URLs and timings, and fs instrumentation is disabled.
+const TELEMETRY_OPT_IN = process.env.TDAY_MCP_TELEMETRY === "1";
+const resource = resourceFromAttributes({
+    [ATTR_SERVICE_NAME]: "tday-mcp",
+    [ATTR_SERVICE_VERSION]: "0.0.1",
+});
+let started = false;
+export function startObservability() {
+    if (!TELEMETRY_OPT_IN)
+        return;
+    if (started)
+        return;
+    started = true;
+    const sdk = new NodeSDK({
+        resource,
+        traceExporter: new OTLPTraceExporter({
+            url: `${SUPERLOG_ENDPOINT}/v1/traces`,
+            headers,
+        }),
+        metricReader: new PeriodicExportingMetricReader({
+            exporter: new OTLPMetricExporter({
+                url: `${SUPERLOG_ENDPOINT}/v1/metrics`,
+                headers,
+            }),
+            exportIntervalMillis: 30000,
+        }),
+        logRecordProcessors: [
+            // @opentelemetry/sdk-logs 0.222 moved the exporter from a positional
+            // argument into BatchLogRecordProcessorOptions, matching the shape
+            // PeriodicExportingMetricReader already uses above.
+            new BatchLogRecordProcessor({
+                exporter: new OTLPLogExporter({
+                    url: `${SUPERLOG_ENDPOINT}/v1/logs`,
+                    headers,
+                }),
+            }),
+        ],
+        instrumentations: [
+            getNodeAutoInstrumentations({
+                "@opentelemetry/instrumentation-fs": { enabled: false },
+            }),
+        ],
+    });
+    sdk.start();
+    const shutdown = async () => {
+        try {
+            await sdk.shutdown();
+        }
+        catch {
+            // ignore
+        }
+    };
+    const shutdownAndExit = (signal) => async () => {
+        await shutdown();
+        // Re-raise default termination behavior so the process actually exits.
+        process.kill(process.pid, signal);
+    };
+    process.once("SIGTERM", shutdownAndExit("SIGTERM"));
+    process.once("SIGINT", shutdownAndExit("SIGINT"));
+    process.once("beforeExit", shutdown);
+}

package/dist/package-info.d.ts

@@ -0,0 +1,11 @@
+export declare const PACKAGE_NAME = "@tday-com/mcp";
+/** This build's own version, read from the package.json it shipped in (dist/ and src/ both sit one level down). */
+export declare function packageVersion(): string;
+/**
+ * What an agent's MCP config launches: this exact version, not whatever `latest` is on the day
+ * the agent next starts. `npx -y <name>` re-resolves on every launch, so a bad publish (a
+ * compromised maintainer account, a mistaken tag) would reach every installed agent, and the
+ * token in ~/.tday/config.json with it, without anyone running anything. Pinned, an update only
+ * arrives when someone re-runs `install`, which writes the version it was itself run as.
+ */
+export declare function pinnedPackageSpec(): string;

package/dist/package-info.js

@@ -0,0 +1,17 @@
+import { readFileSync } from "node:fs";
+export const PACKAGE_NAME = "@tday-com/mcp";
+/** This build's own version, read from the package.json it shipped in (dist/ and src/ both sit one level down). */
+export function packageVersion() {
+    const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+    return pkg.version;
+}
+/**
+ * What an agent's MCP config launches: this exact version, not whatever `latest` is on the day
+ * the agent next starts. `npx -y <name>` re-resolves on every launch, so a bad publish (a
+ * compromised maintainer account, a mistaken tag) would reach every installed agent, and the
+ * token in ~/.tday/config.json with it, without anyone running anything. Pinned, an update only
+ * arrives when someone re-runs `install`, which writes the version it was itself run as.
+ */
+export function pinnedPackageSpec() {
+    return `${PACKAGE_NAME}@${packageVersion()}`;
+}

package/dist/result-format.d.ts

@@ -0,0 +1,4 @@
+import type { ResponseFormat } from "./tool-schemas.js";
+export declare function stringifyResult(result: unknown): string;
+export declare function toStructuredContent(result: unknown): Record<string, unknown>;
+export declare function formatToolResultText(toolName: string, result: unknown, format: ResponseFormat): string;

package/dist/result-format.js

@@ -0,0 +1,154 @@
+// Tool-result presentation: JSON stringification, structuredContent shaping,
+// and per-tool markdown rendering.
+const MAX_TEXT_CHARS = 25_000;
+export function stringifyResult(result) {
+    return JSON.stringify(result, (_key, value) => (typeof value === "bigint" ? value.toString() : value), 2);
+}
+export function toStructuredContent(result) {
+    return isRecord(result) ? result : { result };
+}
+export function formatToolResultText(toolName, result, format) {
+    const text = format === "markdown" ? markdownResult(toolName, result) : stringifyResult(result);
+    return truncateText(text);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function truncateText(text) {
+    if (text.length <= MAX_TEXT_CHARS)
+        return text;
+    return `${text.slice(0, MAX_TEXT_CHARS)}\n\n[Response text truncated at ${MAX_TEXT_CHARS} characters. Use structuredContent or narrower list/get calls for the complete data.]`;
+}
+function markdownResult(toolName, result) {
+    if (!isRecord(result))
+        return String(result);
+    switch (toolName) {
+        case "tday_whoami":
+            return markdownWhoami(result);
+        case "tday_list_brands":
+            return markdownList("Brands", result.brands, ["id", "name", "role", "status", "industry"]);
+        case "tday_list_designs":
+            return markdownList("Designs", result.designs, ["id", "name", "brandName", "currentStep", "updatedAt"]);
+        case "tday_generate_design":
+            return [
+                "# Generation queued",
+                `- Design ID: ${result.designId ?? "unknown"}`,
+                `- Generation ID: ${result.generationId ?? "unknown"}`,
+                `- Status: ${result.status ?? "unknown"}`,
+                result.editorUrl ? `- Editor: ${result.editorUrl}` : undefined,
+                "",
+                "Poll with `tday_poll_generation` until status is `completed` or `failed`.",
+            ].filter(Boolean).join("\n");
+        case "tday_poll_generation":
+            return [
+                "# Generation status",
+                `- Design ID: ${result.designId ?? "unknown"}`,
+                `- Generation ID: ${result.generationId ?? "unknown"}`,
+                `- Status: ${result.status ?? "unknown"}`,
+                result.imageUrl ? `- Image URL: ${result.imageUrl}` : undefined,
+                result.editorUrl ? `- Editor: ${result.editorUrl}` : undefined,
+                result.failureMessage ? `- Failure: ${result.failureMessage}` : undefined,
+            ].filter(Boolean).join("\n");
+        case "tday_search_knowledge_entries":
+            return markdownList("Knowledge entries", result.entries, [
+                "slug",
+                "type",
+                "draft",
+                "verified",
+                "description",
+            ]);
+        case "tday_create_knowledge_entry":
+            return [
+                result.created ? "# Knowledge entry recorded" : "# Knowledge entry updated",
+                `- Slug: ${display(result.slug)}`,
+                `- Graph node: ${display(result.node)}`,
+                "",
+                "Recorded as a draft - it appears in the knowledge graph immediately, marked unreviewed.",
+            ].join("\n");
+        case "tday_download_image":
+            return [
+                "# Image downloaded",
+                `- Saved: ${result.saved ? "yes" : "no"}`,
+                `- Path: ${result.path ?? "unknown"}`,
+                `- Size: ${result.size ?? 0} bytes`,
+            ].join("\n");
+        default:
+            return `\`\`\`json\n${stringifyResult(result)}\n\`\`\``;
+    }
+}
+function markdownWhoami(result) {
+    const account = isRecord(result.account) ? result.account : {};
+    const subscription = isRecord(result.subscription) ? result.subscription : {};
+    return [
+        "# tday account",
+        `- Name: ${display(account.name)}`,
+        `- Email: ${display(account.email)}`,
+        `- Auth source: ${display(isRecord(result.auth) ? result.auth.source : undefined)}`,
+        `- Plan: ${display(subscription.plan ?? subscription.name ?? subscription.tier)}`,
+        balanceLine(result),
+    ].join("\n");
+}
+/**
+ * The balance line. Credits when the account has them (`credits.enabled`);
+ * otherwise the prepaid dollar balance an account carried before credits,
+ * which is what `/api/billing/info` reports until credits reach the account.
+ * Every number is the API's own: nothing here knows a price or a grant.
+ */
+function balanceLine(result) {
+    const credits = isRecord(result.credits) ? result.credits : null;
+    if (credits && credits.enabled === true) {
+        if (typeof credits.balance !== "number")
+            return `- Credits: ${display(credits.balance)}`;
+        // An uncapped contract has no grant to count down from, and is never refused.
+        if (credits.grant === null)
+            return "- Credits: usage is covered by your contract";
+        const grant = typeof credits.grant === "number" ? ` of ${formatCount(credits.grant)}` : "";
+        const refresh = typeof credits.refreshesAt === "string" ? `, refreshes ${formatDay(credits.refreshesAt)}` : "";
+        const low = credits.lowBalance === "low" || credits.lowBalance === "critical" ? " (running low)" : "";
+        return `- Credits: ${formatCount(credits.balance)}${grant} left${refresh}${low}`;
+    }
+    const legacy = isRecord(result.apiBalance) ? result.apiBalance : null;
+    if (legacy && typeof legacy.balanceCents === "number") {
+        return `- Prepaid balance: $${(legacy.balanceCents / 100).toFixed(2)}`;
+    }
+    return `- Balance: ${display(result.apiBalance)}`;
+}
+function formatCount(value) {
+    return Math.trunc(value).toLocaleString("en-US");
+}
+/** "Oct 1", in UTC like the app's own refusal copy. The raw value when it is not a date. */
+function formatDay(iso) {
+    const date = new Date(iso);
+    if (Number.isNaN(date.getTime()))
+        return iso;
+    return date.toLocaleDateString("en-US", { month: "short", day: "numeric", timeZone: "UTC" });
+}
+function markdownList(title, value, columns) {
+    const items = Array.isArray(value) ? value.filter(isRecord) : [];
+    const lines = [`# ${title}`, ""];
+    if (items.length === 0) {
+        lines.push("No items returned.");
+        return lines.join("\n");
+    }
+    lines.push(`Returned ${items.length} item${items.length === 1 ? "" : "s"}.`, "");
+    lines.push(`| ${columns.join(" | ")} |`);
+    lines.push(`| ${columns.map(() => "---").join(" | ")} |`);
+    for (const item of items) {
+        lines.push(`| ${columns.map((column) => escapeMarkdownCell(display(item[column]))).join(" | ")} |`);
+    }
+    return lines.join("\n");
+}
+function display(value) {
+    if (value === null || value === undefined || value === "")
+        return "-";
+    if (typeof value === "string" ||
+        typeof value === "number" ||
+        typeof value === "boolean" ||
+        typeof value === "bigint") {
+        return String(value);
+    }
+    return JSON.stringify(value, (_key, v) => (typeof v === "bigint" ? v.toString() : v));
+}
+function escapeMarkdownCell(value) {
+    return value.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\n/g, " ");
+}