npm - @telvok/librarian-mcp - Versions diffs - 2.3.2 → 2.4.1 - Mend

@telvok/librarian-mcp 2.3.2 → 2.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/tools/library-publish.d.ts +57 -67
package/dist/tools/library-publish.js +304 -299
package/dist/tools/library-unpublish.d.ts +11 -23
package/dist/tools/library-unpublish.js +71 -101
package/package.json +1 -1

package/dist/tools/library-publish.d.ts CHANGED Viewed

@@ -1,32 +1,3 @@
-interface PublishResult {
-    success: boolean;
-    message: string;
-    publish_token?: string;
-    book?: {
-        id?: string;
-        slug: string;
-        name: string;
-        url: string;
-    };
-    entries_count?: number;
-    setup_url?: string;
-    preview?: boolean;
-    summary?: {
-        name: string;
-        pricing: {
-            type: string;
-            display: string;
-        };
-        entries_count: number;
-        entries: Array<{
-            title: string;
-            file: string;
-        }>;
-    };
-    next_steps?: string;
-    options?: Record<string, string>;
-    required?: Record<string, string>;
-}
 export declare const libraryPublishTool: {
     name: string;
     title: string;
@@ -34,12 +5,11 @@ export declare const libraryPublishTool: {
     inputSchema: {
         type: "object";
         properties: {
-            name: {
-                type: string;
-                description: string;
-            };
-            description: {
+            entries: {
                 type: string;
+                items: {
+                    type: string;
+                };
                 description: string;
             };
             pricing: {
@@ -48,14 +18,11 @@ export declare const libraryPublishTool: {
                     type: {
                         type: string;
                         enum: string[];
-                        description: string;
                     };
                     price_cents: {
                         type: string;
-                        description: string;
                     };
                 };
-                required: string[];
                 description: string;
             };
             consumption: {
@@ -63,38 +30,12 @@ export declare const libraryPublishTool: {
                 enum: string[];
                 description: string;
             };
-            attestation: {
-                type: string;
-                properties: {
-                    original_work: {
-                        type: string;
-                        description: string;
-                    };
-                    no_secrets: {
-                        type: string;
-                        description: string;
-                    };
-                    terms_accepted: {
-                        type: string;
-                        description: string;
-                    };
-                };
-                required: string[];
-                description: string;
-            };
-            preview: {
-                type: string;
-                description: string;
-            };
-            publish_token: {
+            name: {
                 type: string;
                 description: string;
             };
-            entries: {
+            description: {
                 type: string;
-                items: {
-                    type: string;
-                };
                 description: string;
             };
             tags: {
@@ -107,11 +48,60 @@ export declare const libraryPublishTool: {
             license: {
                 type: string;
                 enum: string[];
+            };
+            confirm: {
+                type: string;
                 description: string;
             };
         };
-        required: string[];
+        required: never[];
     };
-    handler(args: unknown): Promise<PublishResult>;
+    handler(args: unknown): Promise<{
+        success: boolean;
+        message: string;
+        setup_url: any;
+        book?: undefined;
+        entries_count?: undefined;
+    } | {
+        success: boolean;
+        message: any;
+        setup_url?: undefined;
+        book?: undefined;
+        entries_count?: undefined;
+    } | {
+        success: boolean;
+        message: string;
+        book: any;
+        entries_count: any;
+        setup_url?: undefined;
+    } | {
+        success: boolean;
+        step: string;
+        message: string;
+        entries_count: number;
+        ask_user: string;
+        selected_count?: undefined;
+    } | {
+        success: boolean;
+        step: string;
+        message: string;
+        ask_user: string;
+        entries_count?: undefined;
+        selected_count?: undefined;
+    } | {
+        success: boolean;
+        step: string;
+        message: string;
+        entries_count?: undefined;
+        ask_user?: undefined;
+        selected_count?: undefined;
+    } | {
+        success: boolean;
+        step: string;
+        message: string;
+        selected_count: number;
+        ask_user: string;
+        entries_count?: undefined;
+    }>;
 };
 export default libraryPublishTool;

package/dist/tools/library-publish.js CHANGED Viewed

@@ -1,349 +1,370 @@
 // ============================================================================
-// Marketplace Publish Tool
-// Publish local entries as a book on Telvok library
+// Marketplace Publish Tool — Multi-Step Wizard
+// Each call advances one step. Tool refuses to skip ahead.
+// Agent relays between user and tool. User makes every decision.
 // ============================================================================
 import * as fs from 'fs/promises';
 import * as path from 'path';
-import * as crypto from 'crypto';
 import { glob } from 'glob';
 import matter from 'gray-matter';
 import { loadApiKey } from './auth.js';
 import { getLibraryPath, getLocalPath } from '../library/storage.js';
 import { scanForSensitiveData } from '../library/sensitive-scanner.js';
 const TELVOK_API_URL = process.env.TELVOK_API_URL || 'https://telvok.com';
-const TOKEN_EXPIRY_MS = 5 * 60 * 1000; // 5 minutes
-let pendingPublish = null;
+const WIZARD_EXPIRY_MS = 10 * 60 * 1000; // 10 minutes
+let wizardState = null;
+function clearExpiredWizard() {
+    if (wizardState && Date.now() - wizardState.created > WIZARD_EXPIRY_MS) {
+        wizardState = null;
+    }
+}
 // ============================================================================
 // Tool Definition
 // ============================================================================
 export const libraryPublishTool = {
     name: 'library_publish',
     title: 'Publish Book',
-    description: `Publish local entries as a book on Telvok library.
-⚠️ TWO-STEP PUBLISH FLOW (MANDATORY):
+    description: `Publish local entries as a book on Telvok marketplace.
-Step 1: ALWAYS call with preview: true first. This shows what will be published
-and returns a publish_token. Show the preview to the user and ASK FOR CONFIRMATION.
+This is a GUIDED WIZARD. Call with no arguments to start.
+The tool walks through each step — DO NOT try to provide all arguments at once.
-Step 2: ONLY after the user explicitly confirms, call again with the publish_token
-from the preview response. Publishing WITHOUT a valid token will be rejected.
+FLOW:
+1. library_publish() → scans entries, shows audit. Ask user which to include.
+2. library_publish({ entries: ["all"] }) → shows pricing options. Ask user to choose.
+3. library_publish({ pricing: { type: "open" } }) → asks for name/description.
+4. library_publish({ name: "...", description: "..." }) → shows summary, requires user confirmation.
-DO NOT skip the preview. DO NOT publish without user confirmation.
-The tool will refuse to publish without a valid publish_token from a preview.
+Each step REQUIRES the user's input before proceeding. DO NOT decide for the user.
+DO NOT provide name, pricing, entries, or description without asking the user first.
-TRIGGER PATTERNS:
-- "Publish my entries" → library_publish({ name: "...", pricing: { type: "open" }, preview: true })
-- User says "yes, publish it" → library_publish({ ..., publish_token: "<token from preview>" })
-Examples:
-- Preview: library_publish({ name: "My Book", pricing: { type: "open" }, preview: true })
-- Publish: library_publish({ name: "My Book", pricing: { type: "open" }, consumption: "download", attestation: { original_work: true, no_secrets: true, terms_accepted: true }, publish_token: "abc123" })`,
+If the user says "publish my entries" — call library_publish() with NO args to start the wizard.`,
     inputSchema: {
         type: 'object',
         properties: {
-            name: {
-                type: 'string',
-                description: 'Book title (3-100 characters)',
-            },
-            description: {
-                type: 'string',
-                description: 'Short description of the book (optional, max 500 chars)',
+            entries: {
+                type: 'array',
+                items: { type: 'string' },
+                description: 'Entry filenames to include. Use ["all"] for everything. Only provide after showing user the entry list.',
             },
             pricing: {
                 type: 'object',
                 properties: {
-                    type: {
-                        type: 'string',
-                        enum: ['open', 'one_time', 'subscription'],
-                        description: 'Pricing model',
-                    },
-                    price_cents: {
-                        type: 'number',
-                        description: 'Price in cents (required for paid, min 100 = $1.00)',
-                    },
+                    type: { type: 'string', enum: ['open', 'one_time', 'subscription'] },
+                    price_cents: { type: 'number' },
                 },
-                required: ['type'],
-                description: 'Pricing configuration',
+                description: 'Only provide after showing user the pricing options.',
             },
             consumption: {
                 type: 'string',
                 enum: ['inline', 'reference', 'download'],
-                description: 'How buyers access content. download only for free books.',
-            },
-            attestation: {
-                type: 'object',
-                properties: {
-                    original_work: { type: 'boolean', description: 'Confirm this is original work' },
-                    no_secrets: { type: 'boolean', description: 'Confirm no secrets/credentials' },
-                    terms_accepted: { type: 'boolean', description: 'Accept library terms' },
-                },
-                required: ['original_work', 'no_secrets', 'terms_accepted'],
-                description: 'Required confirmations before publishing',
-            },
-            preview: {
-                type: 'boolean',
-                description: 'If true, show what would be published without publishing. Returns a publish_token.',
-            },
-            publish_token: {
-                type: 'string',
-                description: 'Token from preview response. Required to actually publish. Single-use, expires in 5 minutes.',
-            },
-            entries: {
-                type: 'array',
-                items: { type: 'string' },
-                description: 'Specific entry filenames to include (omit for all local/)',
-            },
-            tags: {
-                type: 'array',
-                items: { type: 'string' },
-                description: 'Category/topic tags (max 10)',
-            },
-            license: {
-                type: 'string',
-                enum: ['open', 'open_attributed', 'personal'],
-                description: 'License type (default: personal)',
+                description: 'How buyers access content. Only relevant for paid books.',
             },
+            name: { type: 'string', description: 'Book title. Only provide after user tells you what to call it.' },
+            description: { type: 'string', description: 'Book description. Only provide after user writes or approves it.' },
+            tags: { type: 'array', items: { type: 'string' }, description: 'Topic tags (max 10).' },
+            license: { type: 'string', enum: ['open', 'open_attributed', 'personal'] },
+            confirm: { type: 'boolean', description: 'Set to true ONLY after showing the summary to the user and they say yes.' },
         },
-        required: ['name', 'pricing'],
+        required: [],
     },
     async handler(args) {
-        const { name, description, pricing, consumption, attestation, preview, publish_token, entries: entryFilter, tags, license } = args;
-        // Validate name
-        if (!name || typeof name !== 'string' || name.trim().length < 3) {
-            throw new Error('Book name is required (minimum 3 characters)');
-        }
-        if (name.trim().length > 100) {
-            throw new Error('Book name must be 100 characters or less');
-        }
-        // Validate pricing
-        if (!pricing || !pricing.type) {
-            throw new Error('Pricing type is required');
-        }
-        if (!['open', 'one_time', 'subscription'].includes(pricing.type)) {
-            throw new Error('Pricing type must be: open, one_time, or subscription');
-        }
-        if (pricing.type !== 'open' && (!pricing.price_cents || pricing.price_cents < 100)) {
-            throw new Error('Paid books require price_cents >= 100 ($1.00)');
-        }
-        if (pricing.price_cents && pricing.price_cents > 100000) {
-            throw new Error('Price cannot exceed $1000.00 (100000 cents)');
-        }
-        // Validate description length
-        if (description && description.length > 500) {
-            throw new Error('Description must be 500 characters or less');
-        }
-        // Validate tags count
-        if (tags && tags.length > 10) {
-            throw new Error('Maximum 10 tags allowed');
-        }
-        // Collect entries from local/ (needed for preview and publish)
-        const collectedEntries = await collectLocalEntries(entryFilter);
-        // Scan for sensitive data before publishing
-        const sensitiveFindings = scanForSensitiveData(collectedEntries);
-        if (sensitiveFindings.length > 0) {
-            const warnings = sensitiveFindings.map(f => `  ⚠ ${f.entry}: ${f.matches.join(', ')}`).join('\n');
-            if (preview) {
-                // In preview mode, show warnings but continue
+        const input = (args || {});
+        clearExpiredWizard();
+        // ======================================================================
+        // STEP 1: No wizard state → Scan entries, show audit
+        // ======================================================================
+        if (!wizardState) {
+            const allEntries = await collectLocalEntries();
+            if (allEntries.length === 0) {
                 return {
-                    success: true,
-                    preview: true,
-                    message: `⚠ SENSITIVE DATA DETECTED in ${sensitiveFindings.length} entry(s):\n${warnings}\n\nReview these entries before publishing. Remove credentials, API keys, passwords, and personal data.`,
+                    success: false,
+                    message: 'No entries found in .librarian/local/. Use record() to create entries first.',
                 };
             }
-            // In publish mode, block and require cleanup
-            return {
-                success: false,
-                message: `🚫 Publish blocked — sensitive data detected in ${sensitiveFindings.length} entry(s):\n${warnings}\n\nClean up these entries with record() or delete() before publishing. Use library_publish({ preview: true }) to re-check.`,
-            };
-        }
-        if (collectedEntries.length === 0) {
-            return {
-                success: false,
-                message: 'No entries found in .librarian/local/. Use record() to create entries first.',
-            };
-        }
-        // Format pricing display
-        const pricingDisplay = pricing.type === 'open'
-            ? 'Free'
-            : `$${((pricing.price_cents || 0) / 100).toFixed(2)}`;
-        // Handle preview mode - return summary with publish token
-        if (preview) {
-            const token = crypto.randomBytes(16).toString('hex');
-            pendingPublish = {
-                token,
-                name: name.trim(),
-                entries_count: collectedEntries.length,
+            // Run sensitive data scan
+            const sensitiveFindings = scanForSensitiveData(allEntries);
+            // Group entries by folder/topic
+            const groups = {};
+            for (const entry of allEntries) {
+                const rel = path.relative(getLocalPath(getLibraryPath()), entry.originalPath);
+                const folder = path.dirname(rel);
+                const key = folder === '.' ? 'root' : folder;
+                if (!groups[key])
+                    groups[key] = [];
+                groups[key].push(entry.title);
+            }
+            // Build topic breakdown
+            const topicLines = Object.entries(groups)
+                .sort((a, b) => b[1].length - a[1].length)
+                .map(([folder, titles]) => `  ${folder}/ (${titles.length} entries)`)
+                .join('\n');
+            // Build warnings
+            const warnings = [];
+            if (sensitiveFindings.length > 0) {
+                warnings.push(`\n⚠️ SENSITIVE DATA found in ${sensitiveFindings.length} entry(s):`);
+                for (const f of sensitiveFindings) {
+                    warnings.push(`  ⚠ "${f.entry}": ${f.matches.join(', ')}`);
+                }
+                warnings.push('\nThese entries should be cleaned up before publishing.');
+            }
+            // Save state
+            wizardState = {
+                step: 'select_entries',
+                allEntries,
+                sensitiveWarnings: warnings.length > 0 ? warnings : undefined,
                 created: Date.now(),
             };
             return {
                 success: true,
-                preview: true,
-                message: `Preview of "${name.trim()}" - NOT published yet.\n\n⚠️ Show this to the user and ask for confirmation before publishing.`,
-                publish_token: token,
-                summary: {
-                    name: name.trim(),
-                    pricing: { type: pricing.type, display: pricingDisplay },
-                    entries_count: collectedEntries.length,
-                    entries: collectedEntries.map(e => ({
-                        title: e.title,
-                        file: path.basename(e.originalPath),
-                    })),
-                },
-                next_steps: 'Show preview to user. After they confirm, call library_publish() again with the publish_token to publish.',
-            };
-        }
-        // ========================================================================
-        // PUBLISH TOKEN VALIDATION
-        // Cannot publish without a valid token from preview
-        // ========================================================================
-        if (!publish_token) {
-            return {
-                success: false,
-                message: '🚫 Publishing requires a publish_token from a preview.\n\nYou must call library_publish({ preview: true, ... }) first, show the preview to the user, get their confirmation, then call again with the publish_token.\n\nThis is a safety measure to prevent accidental publishing.',
-            };
-        }
-        if (!pendingPublish || pendingPublish.token !== publish_token) {
-            return {
-                success: false,
-                message: '🚫 Invalid or expired publish_token. Run a new preview first with library_publish({ preview: true, ... }).',
-            };
-        }
-        if (Date.now() - pendingPublish.created > TOKEN_EXPIRY_MS) {
-            pendingPublish = null;
-            return {
-                success: false,
-                message: '🚫 Publish token expired (5 minute limit). Run a new preview first.',
-            };
-        }
-        // Token is valid — consume it (single use)
-        pendingPublish = null;
-        // Validate consumption type (required for actual publish)
-        if (!consumption) {
-            return {
-                success: false,
-                message: 'Consumption type required. Choose how buyers access your content:',
-                options: {
-                    inline: 'Content returned in API responses (best for small entries)',
-                    reference: 'README + pointers to entries (best for larger books)',
-                    download: 'Download to local library (only for free/open books)',
-                },
-            };
-        }
-        if (!['inline', 'reference', 'download'].includes(consumption)) {
-            return {
-                success: false,
-                message: 'Invalid consumption type. Must be: inline, reference, or download',
+                step: 'select_entries',
+                message: `📚 Found ${allEntries.length} entries in your library.\n\nTopics:\n${topicLines}${warnings.length > 0 ? '\n' + warnings.join('\n') : ''}`,
+                entries_count: allEntries.length,
+                ask_user: 'Which entries do you want to include? Say "all" or list specific ones to exclude.',
             };
         }
-        if (consumption === 'download' && pricing.type !== 'open') {
-            return {
-                success: false,
-                message: 'Download is only for free books. Paid content uses inline or reference.',
-                next_steps: "Use pricing.type: 'open' for download, or consumption: 'inline'/'reference' for paid.",
-            };
-        }
-        // Validate attestation (required for actual publish)
-        if (!attestation) {
-            return {
-                success: false,
-                message: 'Attestation required. Please confirm:',
-                required: {
-                    original_work: 'This is my original work or I have rights to publish',
-                    no_secrets: 'Contains no secrets, credentials, or sensitive data',
-                    terms_accepted: 'I accept the Telvok library terms',
-                },
-            };
-        }
-        const failedAttestations = [];
-        if (!attestation.original_work)
-            failedAttestations.push('original_work');
-        if (!attestation.no_secrets)
-            failedAttestations.push('no_secrets');
-        if (!attestation.terms_accepted)
-            failedAttestations.push('terms_accepted');
-        if (failedAttestations.length > 0) {
-            return {
-                success: false,
-                message: `All attestation fields must be true to publish. Failed: ${failedAttestations.join(', ')}`,
-            };
-        }
-        // Check authentication
-        const apiKey = await loadApiKey();
-        if (!apiKey) {
+        // ======================================================================
+        // STEP 2: Select entries → Show pricing options
+        // ======================================================================
+        if (wizardState.step === 'select_entries') {
+            if (!input.entries || input.entries.length === 0) {
+                return {
+                    success: false,
+                    step: 'select_entries',
+                    message: 'Waiting for entry selection. Ask the user which entries to include.',
+                    ask_user: 'Which entries do you want to include? Say "all" or list specific ones.',
+                };
+            }
+            let selected;
+            if (input.entries.length === 1 && input.entries[0].toLowerCase() === 'all') {
+                selected = [...wizardState.allEntries];
+            }
+            else {
+                selected = wizardState.allEntries.filter(e => {
+                    const filename = path.basename(e.originalPath);
+                    return input.entries.some(f => filename === f ||
+                        filename === f + '.md' ||
+                        e.originalPath.endsWith(f) ||
+                        e.originalPath.endsWith(f + '.md') ||
+                        e.title.toLowerCase().includes(f.toLowerCase()));
+                });
+                if (selected.length === 0) {
+                    return {
+                        success: false,
+                        step: 'select_entries',
+                        message: 'No entries matched your selection. Try again with different names or say "all".',
+                    };
+                }
+            }
+            // Re-check sensitive data on selected entries only
+            const sensitiveFindings = scanForSensitiveData(selected);
+            if (sensitiveFindings.length > 0) {
+                const warnings = sensitiveFindings.map(f => `  ⚠ "${f.entry}": ${f.matches.join(', ')}`).join('\n');
+                return {
+                    success: false,
+                    step: 'select_entries',
+                    message: `🚫 Cannot proceed — sensitive data detected in selected entries:\n${warnings}\n\nClean up these entries with record() or delete() first, then start over with library_publish().`,
+                };
+            }
+            wizardState.selectedEntries = selected;
+            wizardState.step = 'set_pricing';
             return {
-                success: false,
-                message: 'Not authenticated. Run auth({ action: "login" }) to connect your Telvok account first.',
+                success: true,
+                step: 'set_pricing',
+                message: `✓ ${selected.length} entries selected.\n\nChoose a pricing model:\n\n  📖 open — Free. Anyone can download to their local library.\n  💰 one_time — One-time purchase. You set the price (min $1). Cloud-only access. 20% platform fee.\n  🔄 subscription — Monthly subscription. You set the price (min $1/mo). Cloud-only, always latest. 20% platform fee.`,
+                selected_count: selected.length,
+                ask_user: 'Which pricing model? If paid, what price?',
             };
         }
-        // Format entries for API
-        const apiEntries = collectedEntries.map(e => ({
-            title: e.title,
-            content: e.content,
-            intent: e.intent,
-            context: e.context,
-            reasoning: e.reasoning,
-            example: e.example,
-        }));
-        // Build request body
-        const requestBody = {
-            name: name.trim(),
-            description: description?.trim(),
-            pricing,
-            consumption,
-            entries: apiEntries,
-            tags: tags || [],
-            license_type: license || 'personal',
-            attestation,
-        };
-        try {
-            const response = await fetch(`${TELVOK_API_URL}/api/publish`, {
-                method: 'POST',
-                headers: {
-                    'Authorization': `Bearer ${apiKey}`,
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify(requestBody),
-            });
-            const data = await response.json();
-            if (!response.ok) {
-                // Handle Stripe Connect requirement
-                if (data.error === 'stripe_connect_required') {
+        // ======================================================================
+        // STEP 3: Set pricing → Ask for name/description
+        // ======================================================================
+        if (wizardState.step === 'set_pricing') {
+            if (!input.pricing || !input.pricing.type) {
+                return {
+                    success: false,
+                    step: 'set_pricing',
+                    message: 'Waiting for pricing selection. Ask the user which pricing model they want.',
+                    ask_user: 'Which pricing model? open (free), one_time, or subscription?',
+                };
+            }
+            if (!['open', 'one_time', 'subscription'].includes(input.pricing.type)) {
+                return {
+                    success: false,
+                    step: 'set_pricing',
+                    message: 'Invalid pricing type. Must be: open, one_time, or subscription.',
+                };
+            }
+            if (input.pricing.type !== 'open') {
+                if (!input.pricing.price_cents || input.pricing.price_cents < 100) {
                     return {
                         success: false,
-                        message: `Stripe Connect required to sell paid content.\n\nComplete setup at: ${data.setup_url}`,
-                        setup_url: data.setup_url,
+                        step: 'set_pricing',
+                        message: 'Paid books require a price of at least $1.00 (100 cents).',
+                        ask_user: 'What price? (in dollars, e.g. $5 = 500 cents)',
                     };
                 }
-                // Handle validation errors
-                if (data.error === 'validation_error') {
-                    const details = Object.entries(data.details || {})
-                        .map(([k, v]) => `  - ${k}: ${v}`)
-                        .join('\n');
+                if (input.pricing.price_cents > 100000) {
                     return {
                         success: false,
-                        message: `Validation failed:\n${details}`,
+                        step: 'set_pricing',
+                        message: 'Maximum price is $1000.00.',
                     };
                 }
+            }
+            // Set consumption based on pricing
+            let consumption = input.consumption;
+            if (input.pricing.type === 'open') {
+                consumption = 'download';
+            }
+            else if (!consumption || !['inline', 'reference'].includes(consumption)) {
+                consumption = 'inline'; // default for paid
+            }
+            wizardState.pricing = input.pricing;
+            wizardState.consumption = consumption;
+            wizardState.step = 'set_details';
+            const priceDisplay = input.pricing.type === 'open'
+                ? 'Free (download)'
+                : `$${(input.pricing.price_cents / 100).toFixed(2)}/${input.pricing.type === 'subscription' ? 'mo' : 'once'} (20% platform fee)`;
+            return {
+                success: true,
+                step: 'set_details',
+                message: `✓ Pricing: ${priceDisplay}\n\nNow give your book a name and description.`,
+                ask_user: 'What do you want to call this book? And a short description (optional, max 500 chars)?',
+            };
+        }
+        // ======================================================================
+        // STEP 4: Set details → Final confirmation
+        // ======================================================================
+        if (wizardState.step === 'set_details') {
+            if (!input.name || input.name.trim().length < 3) {
                 return {
                     success: false,
-                    message: data.error || `Publish failed: HTTP ${response.status}`,
+                    step: 'set_details',
+                    message: 'Book name required (at least 3 characters).',
+                    ask_user: 'What do you want to call this book?',
                 };
             }
+            if (input.name.trim().length > 100) {
+                return {
+                    success: false,
+                    step: 'set_details',
+                    message: 'Book name must be 100 characters or less.',
+                };
+            }
+            if (input.description && input.description.length > 500) {
+                return {
+                    success: false,
+                    step: 'set_details',
+                    message: 'Description must be 500 characters or less.',
+                };
+            }
+            wizardState.name = input.name.trim();
+            wizardState.description = input.description?.trim();
+            wizardState.tags = input.tags;
+            wizardState.license = input.license || 'personal';
+            wizardState.step = 'confirm';
+            const priceDisplay = wizardState.pricing.type === 'open'
+                ? 'Free (download)'
+                : `$${(wizardState.pricing.price_cents / 100).toFixed(2)}/${wizardState.pricing.type === 'subscription' ? 'mo' : 'once'}`;
             return {
                 success: true,
-                message: data.message || `Published "${data.book?.name}" with ${data.entries_count} entries`,
-                book: data.book,
-                entries_count: data.entries_count,
+                step: 'confirm',
+                message: `📋 PUBLISH SUMMARY\n\n  Name: ${wizardState.name}\n  Entries: ${wizardState.selectedEntries.length}\n  Pricing: ${priceDisplay}${wizardState.description ? `\n  Description: ${wizardState.description}` : ''}${wizardState.tags?.length ? `\n  Tags: ${wizardState.tags.join(', ')}` : ''}`,
+                ask_user: 'Show this summary to the user. Ask: "Publish this? (yes/no)"',
             };
         }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            throw new Error(`Publish failed: ${message}`);
+        // ======================================================================
+        // STEP 5: User confirms → Publish
+        // ======================================================================
+        if (wizardState.step === 'confirm') {
+            if (!input.confirm) {
+                wizardState = null;
+                return {
+                    success: false,
+                    message: 'Publish cancelled. Run library_publish() to start over.',
+                };
+            }
+            return await executePublish(wizardState);
         }
+        return { success: false, message: 'Unknown state. Run library_publish() to start over.' };
     },
 };
 // ============================================================================
+// Execute Publish — called after confirmation
+// ============================================================================
+async function executePublish(state) {
+    const apiKey = await loadApiKey();
+    if (!apiKey) {
+        wizardState = null;
+        return {
+            success: false,
+            message: 'Not authenticated. Run auth({ action: "login" }) first.',
+        };
+    }
+    const apiEntries = state.selectedEntries.map(e => ({
+        title: e.title,
+        content: e.content,
+        intent: e.intent,
+        context: e.context,
+        reasoning: e.reasoning,
+        example: e.example,
+    }));
+    const requestBody = {
+        name: state.name,
+        description: state.description,
+        pricing: state.pricing,
+        consumption: state.consumption,
+        entries: apiEntries,
+        tags: state.tags || [],
+        license_type: state.license || 'personal',
+        attestation: {
+            original_work: true,
+            no_secrets: true,
+            terms_accepted: true,
+        },
+    };
+    try {
+        const response = await fetch(`${TELVOK_API_URL}/api/publish`, {
+            method: 'POST',
+            headers: {
+                'Authorization': `Bearer ${apiKey}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify(requestBody),
+        });
+        const data = await response.json();
+        wizardState = null; // Clear state after attempt
+        if (!response.ok) {
+            if (data.error === 'stripe_connect_required') {
+                return {
+                    success: false,
+                    message: `Stripe Connect required to sell paid content.\n\nComplete setup at: ${data.setup_url}`,
+                    setup_url: data.setup_url,
+                };
+            }
+            if (data.error === 'validation_error') {
+                const details = Object.entries(data.details || {})
+                    .map(([k, v]) => `  - ${k}: ${v}`)
+                    .join('\n');
+                return { success: false, message: `Validation failed:\n${details}` };
+            }
+            return { success: false, message: data.error || `Publish failed: HTTP ${response.status}` };
+        }
+        return {
+            success: true,
+            message: `✅ Published "${data.book?.name}" with ${data.entries_count} entries\n\n🔗 ${data.book?.url}`,
+            book: data.book,
+            entries_count: data.entries_count,
+        };
+    }
+    catch (error) {
+        wizardState = null;
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Publish failed: ${message}`);
+    }
+}
+// ============================================================================
 // Entry Collection
 // ============================================================================
 async function collectLocalEntries(filter) {
@@ -354,7 +375,6 @@ async function collectLocalEntries(filter) {
         const files = await glob(path.join(localPath, '**/*.md'), { nodir: true });
         for (const filePath of files) {
             const filename = path.basename(filePath);
-            // If filter specified, only include matching files
             if (filter && filter.length > 0) {
                 const matchesFilter = filter.some(f => filename === f ||
                     filename === f + '.md' ||
@@ -367,10 +387,7 @@ async function collectLocalEntries(filter) {
                 const content = await fs.readFile(filePath, 'utf-8');
                 const parsed = parseEntryFile(content, filePath);
                 if (parsed) {
-                    entries.push({
-                        ...parsed,
-                        originalPath: filePath,
-                    });
+                    entries.push({ ...parsed, originalPath: filePath });
                 }
             }
             catch {
@@ -388,7 +405,6 @@ function parseEntryFile(content, filePath) {
     const trimmedBody = body.trim();
     if (!trimmedBody)
         return null;
-    // Extract title from frontmatter, H1, or filename
     let title = frontmatter.title;
     if (!title) {
         const headingMatch = trimmedBody.match(/^#\s+(.+)$/m);
@@ -396,13 +412,11 @@ function parseEntryFile(content, filePath) {
             title = headingMatch[1].trim();
         }
         else {
-            // Use filename as title, converting hyphens to spaces
             title = path.basename(filePath, '.md')
                 .replace(/-/g, ' ')
                 .replace(/\b\w/g, l => l.toUpperCase());
         }
     }
-    // Extract sections from body
     const sections = extractSections(trimmedBody);
     return {
         title,
@@ -414,30 +428,21 @@ function parseEntryFile(content, filePath) {
     };
 }
 function extractSections(body) {
-    const result = {
-        main: body,
-    };
-    // Find ## Reasoning section
+    const result = { main: body };
     const reasoningMatch = body.match(/##\s*Reasoning\s*\n([\s\S]*?)(?=##|$)/i);
-    if (reasoningMatch) {
+    if (reasoningMatch)
         result.reasoning = reasoningMatch[1].trim();
-    }
-    // Find ## Example section
     const exampleMatch = body.match(/##\s*Example\s*\n([\s\S]*?)(?=##|$)/i);
-    if (exampleMatch) {
+    if (exampleMatch)
         result.example = exampleMatch[1].trim();
-    }
-    // Main content is everything after title until first ## section
     const mainMatch = body.match(/^#\s+.+\n\n?([\s\S]*?)(?=##|$)/);
     if (mainMatch) {
         result.main = mainMatch[1].trim();
     }
     else {
-        // If no H1 header, take content before first ## section
         const beforeSections = body.match(/^([\s\S]*?)(?=##)/);
-        if (beforeSections) {
+        if (beforeSections)
             result.main = beforeSections[1].trim();
-        }
     }
     return result;
 }

package/dist/tools/library-unpublish.d.ts CHANGED Viewed

@@ -9,11 +9,7 @@ export declare const libraryUnpublishTool: {
                 type: string;
                 description: string;
             };
-            preview: {
-                type: string;
-                description: string;
-            };
-            unpublish_token: {
+            confirm: {
                 type: string;
                 description: string;
             };
@@ -21,31 +17,23 @@ export declare const libraryUnpublishTool: {
         required: string[];
     };
     handler(args: unknown): Promise<{
+        success: boolean;
+        message: any;
+        book?: undefined;
+    } | {
+        success: boolean;
+        message: any;
+        book: any;
+    } | {
         success: boolean;
         preview: boolean;
         message: string;
-        unpublish_token: string;
+        ask_user: string;
         book: {
-            slug: any;
+            slug: string;
             name: any;
             entries_count: any;
             pricing: any;
-            url: any;
         };
-        next_steps: string;
-    } | {
-        success: boolean;
-        message: any;
-        preview?: undefined;
-        unpublish_token?: undefined;
-        book?: undefined;
-        next_steps?: undefined;
-    } | {
-        success: boolean;
-        message: any;
-        book: any;
-        preview?: undefined;
-        unpublish_token?: undefined;
-        next_steps?: undefined;
     }>;
 };

package/dist/tools/library-unpublish.js CHANGED Viewed

@@ -1,12 +1,20 @@
 // ============================================================================
 // Marketplace Unpublish Tool
-// Remove a published book from Telvok library
+// Two-step: preview → user confirms → delete
 // ============================================================================
-import * as crypto from 'crypto';
 import { loadApiKey } from './auth.js';
 const TELVOK_API_URL = process.env.TELVOK_API_URL || 'https://telvok.com';
-const TOKEN_EXPIRY_MS = 5 * 60 * 1000; // 5 minutes
-let pendingUnpublish = null;
+// ============================================================================
+// Pending State — preview stores slug, expires 5 min
+// ============================================================================
+let pendingSlug = null;
+let pendingCreated = 0;
+const EXPIRY_MS = 5 * 60 * 1000;
+function clearExpired() {
+    if (pendingSlug && Date.now() - pendingCreated > EXPIRY_MS) {
+        pendingSlug = null;
+    }
+}
 // ============================================================================
 // Tool Definition
 // ============================================================================
@@ -15,23 +23,18 @@ export const libraryUnpublishTool = {
     title: 'Unpublish Book',
     description: `Remove a published book from Telvok marketplace.
-⚠️ TWO-STEP UNPUBLISH FLOW (MANDATORY):
+TWO-STEP FLOW:
-Step 1: ALWAYS call with preview: true first. Shows what will be deleted
-and returns an unpublish_token. Show the preview to the user and ASK FOR CONFIRMATION.
+Step 1: Call with just slug. Shows book details and what will be deleted.
+Step 2: Call again with slug + confirm: true ONLY after the user says yes.
-Step 2: ONLY after the user explicitly confirms, call again with the unpublish_token
-from the preview response. Unpublishing WITHOUT a valid token will be rejected.
+DO NOT set confirm: true without the user explicitly saying yes.
+Show the preview and ask "Delete this book? (yes/no)" first.
 RESTRICTIONS:
 - Cannot unpublish books with active purchases
 - Deletion is PERMANENT — all entries are removed from marketplace
-TRIGGER PATTERNS:
-- "Unpublish my book" → library_unpublish({ slug: "...", preview: true })
-- "Remove from marketplace" → library_unpublish({ slug: "...", preview: true })
-- User says "yes, delete it" → library_unpublish({ slug: "...", unpublish_token: "<token>" })
 Use my_books() first to see your published books and their slugs.`,
     inputSchema: {
         type: 'object',
@@ -40,122 +43,89 @@ Use my_books() first to see your published books and their slugs.`,
                 type: 'string',
                 description: 'Book slug (from my_books output)',
             },
-            preview: {
+            confirm: {
                 type: 'boolean',
-                description: 'If true, show what would be deleted without deleting. Returns an unpublish_token.',
-            },
-            unpublish_token: {
-                type: 'string',
-                description: 'Token from preview response. Required to actually unpublish. Single-use, expires in 5 minutes.',
+                description: 'Set to true ONLY after showing preview to user and they say yes.',
             },
         },
         required: ['slug'],
     },
     async handler(args) {
-        const { slug, preview, unpublish_token } = (args || {});
-        // Validate slug
+        const { slug, confirm } = (args || {});
+        clearExpired();
         if (!slug || typeof slug !== 'string') {
             return { success: false, message: 'slug is required. Use my_books() to see your published books.' };
         }
-        // Load API key
         const apiKey = await loadApiKey();
         if (!apiKey) {
-            return {
-                success: false,
-                message: 'Not authenticated. Run auth({ action: "login" }) first.',
-            };
+            return { success: false, message: 'Not authenticated. Run auth({ action: "login" }) first.' };
         }
         // ========================================================================
-        // PREVIEW MODE — show what will be deleted, generate token
+        // CONFIRM STEP — user said yes
         // ========================================================================
-        if (preview) {
-            // Fetch book details via my-books to confirm it exists and we own it
-            const res = await fetch(`${TELVOK_API_URL}/api/my-books`, {
-                headers: { 'Authorization': `Bearer ${apiKey}` },
-            });
-            if (!res.ok) {
-                return { success: false, message: `Failed to fetch books: ${res.status}` };
-            }
-            const data = await res.json();
-            const book = data.published?.find((b) => b.slug === slug);
-            if (!book) {
+        if (confirm) {
+            if (pendingSlug !== slug) {
                 return {
                     success: false,
-                    message: `No published book found with slug "${slug}". Use my_books() to see your books.`,
+                    message: 'No pending unpublish for this slug. Call library_unpublish({ slug }) first to preview.',
                 };
             }
-            // Generate token
-            const token = crypto.randomBytes(16).toString('hex');
-            pendingUnpublish = { token, slug, created: Date.now() };
-            return {
-                success: true,
-                preview: true,
-                message: `Preview of unpublish — NOT deleted yet.\n\n⚠️ Show this to the user and ask for confirmation before unpublishing.`,
-                unpublish_token: token,
-                book: {
-                    slug: book.slug,
-                    name: book.name,
-                    entries_count: book.entries_count,
-                    pricing: book.pricing,
-                    url: book.url,
-                },
-                next_steps: 'Show preview to user. After they confirm, call library_unpublish() again with the unpublish_token to delete.',
-            };
+            pendingSlug = null;
+            return await executeUnpublish(slug, apiKey);
         }
         // ========================================================================
-        // EXECUTE MODE — validate token, call API to delete
+        // PREVIEW STEP — fetch book details, show to user
         // ========================================================================
-        // Token required
-        if (!unpublish_token) {
-            return {
-                success: false,
-                message: '🚫 Unpublishing requires an unpublish_token. Call with preview: true first to get one.',
-            };
-        }
-        // Validate token
-        if (!pendingUnpublish || pendingUnpublish.token !== unpublish_token) {
-            return {
-                success: false,
-                message: '🚫 Invalid or expired unpublish_token. Run a new preview to get a fresh token.',
-            };
-        }
-        // Check expiry
-        if (Date.now() - pendingUnpublish.created > TOKEN_EXPIRY_MS) {
-            pendingUnpublish = null;
-            return {
-                success: false,
-                message: '🚫 Unpublish token expired (5 minute limit). Run a new preview.',
-            };
-        }
-        // Check slug matches
-        if (pendingUnpublish.slug !== slug) {
-            return {
-                success: false,
-                message: `🚫 Token was generated for slug "${pendingUnpublish.slug}", not "${slug}". Run a new preview.`,
-            };
-        }
-        // Consume token (single use)
-        pendingUnpublish = null;
-        // Call API
-        const res = await fetch(`${TELVOK_API_URL}/api/publish`, {
-            method: 'DELETE',
-            headers: {
-                'Authorization': `Bearer ${apiKey}`,
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({ slug }),
+        const res = await fetch(`${TELVOK_API_URL}/api/my-books`, {
+            headers: { 'Authorization': `Bearer ${apiKey}` },
         });
-        const data = await res.json();
         if (!res.ok) {
+            return { success: false, message: `Failed to fetch books: ${res.status}` };
+        }
+        const data = await res.json();
+        const book = data.published?.find((b) => b.slug === slug);
+        if (!book) {
             return {
                 success: false,
-                message: data.message || data.error || `Unpublish failed: ${res.status}`,
+                message: `No published book found with slug "${slug}". Use my_books() to see your books.`,
             };
         }
+        const bookName = book.name || slug;
+        const entriesCount = book.entries_count || book.entry_count || 0;
+        const pricing = book.pricing_type || book.pricing || 'unknown';
+        pendingSlug = slug;
+        pendingCreated = Date.now();
         return {
             success: true,
-            message: data.message || `Unpublished "${slug}" from marketplace`,
-            book: data.book,
+            preview: true,
+            message: `⚠️ UNPUBLISH PREVIEW\n\n  Book: ${bookName}\n  Slug: ${slug}\n  Entries: ${entriesCount}\n  Pricing: ${pricing}\n\n  This action is PERMANENT.`,
+            ask_user: 'Show this to the user. Ask: "Delete this book from the marketplace? (yes/no)"',
+            book: { slug, name: bookName, entries_count: entriesCount, pricing },
         };
     },
 };
+// ============================================================================
+// Execute Unpublish — called after confirmation
+// ============================================================================
+async function executeUnpublish(slug, apiKey) {
+    const res = await fetch(`${TELVOK_API_URL}/api/publish`, {
+        method: 'DELETE',
+        headers: {
+            'Authorization': `Bearer ${apiKey}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ slug }),
+    });
+    const data = await res.json();
+    if (!res.ok) {
+        return {
+            success: false,
+            message: data.message || data.error || `Unpublish failed: ${res.status}`,
+        };
+    }
+    return {
+        success: true,
+        message: data.message || `Unpublished "${slug}" from marketplace`,
+        book: data.book,
+    };
+}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@telvok/librarian-mcp",
-  "version": "2.3.2",
+  "version": "2.4.1",
   "description": "Knowledge capture MCP server - remember what you learn with AI",
   "type": "module",
   "main": "dist/server.js",