scrapeloop-mcp 0.5.0 → 0.7.0

package/README.md

@@ -42,8 +42,8 @@ pair it with the generated instructions pack (skill `dist/chatgpt-instructions.m
 
 ## Scopes
 
-The key's scopes gate the **write/spend** surface (reads are free + ungated; credit
-gating lives in the API as 402s). The "MCP / full automation" preset requests the
+The key's scopes gate tenant data reads, writes, and spend. Catalog reads remain
+free, and credit gating lives in the API as 402s. The "MCP / full automation" preset requests the
 full set so the setup flow works end-to-end:
 
 ```
@@ -70,7 +70,33 @@ cleaners, strategy tags, vendors, scopes, and the ordered 7 setup steps) and
 | Clean | `list_cleaners`, `preview_cleaners`, `apply_cleaners` |
 | Enrich + strategies | `list_presets`, `create_preset`, `estimate_enrich`, `run_enrich`, `test_recipe`, `get_ai_settings`, `update_ai_settings`, `list_strategies`, `create_strategy`, `assign_strategy` |
 | Campaigns + Instantly | `list_instantly_campaigns`, `list_instantly_lead_lists`, `import_instantly_campaigns`, `import_instantly_lead_list`, `list_segments`, `create_segment`, `preview_segment`, `list_campaigns`, `create_campaign`, `update_campaign`, `activate_campaign`, `pause_campaign`, `sync_campaign`, `campaign_stats`, `get_sender_config`, `update_sender_config` |
-| Lists | `get_lists`, `create_list`, `add_list_members` |
+| B2B saved collections | `get_lists`, `create_list`, `add_list_members` |
+| Campaign-ready Tables | `get_tables`, `create_table`, `get_table_columns`, `create_table_column`, `set_table_cells`, `list_table_rows` |
+
+`import_leads`, `preview_import`, and `import_leads_csv` accept raw identities
+without placeholder emails. Each row needs an email, LinkedIn URL, external ID,
+or absolute source URL. The default match order is normalized email, canonical
+LinkedIn, then external/source identity, all scoped to the API key's workspace.
+A later import with a real email enriches the existing raw lead.
+Mutating imports generate one `operation_id` and reuse it across transient HTTP
+retries. The API returns the first committed result for the same key and
+payload, and rejects reuse with different inputs. If every response is lost,
+retry the original request with the exact key returned in the error.
+
+Manual Table columns and cells are zero-cost, and cell writes are limited to
+active static Tables. Archived Tables must be unarchived before column or cell
+writes. Select types require 1-100 declared options. Every cell must include a
+typed value, with explicit `null` reserved for clearing. `set_table_cells`
+accepts at most 500 cells and 256 KiB of JSON, validates the complete batch,
+then persists it as one atomic upsert.
+
+`create_table`, `create_table_column`, and `create_table_view` are
+idempotent. The MCP generates one `operation_id` for the logical create and
+reuses it across transient HTTP retries. The API returns the first resource for
+the same key and normalized payload, including concurrent calls, and returns
+409 if that key is reused with different inputs. If every response is lost, the
+terminal error includes the exact key and retry call. Retry with that same key,
+never a replacement UUID.
 
 Credit-spending (`reveal_lead`, `save_leads`, `submit_scrape`, `verify_*`,
 `run_enrich`) and send-starting (`activate_campaign`) tools should be preceded by the
@@ -84,4 +110,39 @@ the assistant can explain or self-correct.
 SCRAPELOOP_API_URL=http://localhost:8000 \
 SCRAPELOOP_API_KEY=sl_live_… \
   node test/mcp_smoke.mjs       # drives tools against a running API + drift-checks the manifest
+
+node test/mcp_table_tools.mjs    # offline endpoint/schema contract for Table tools
+```
+
+## Release readiness
+
+MCP package releases use the `publish-mcp` GitHub Actions workflow. A release is
+successful only after all four conditions are true:
+
+1. The exact `mcp-v<version>` tag matches `package.json`.
+2. Tests pass and the packed tarball contains only the declared package files.
+3. npm accepts the exact tarball with provenance, or already has that same
+   version with the same integrity.
+4. `npx scrapeloop-mcp@<version>` reports the expected version and tool count.
+
+The Actions summary reports **Build and test** separately from **Publish and
+registry**. A green package build does not mean the version is published. A
+missing or rejected npm credential, a conflicting duplicate version, or a
+registry verification timeout fails the workflow.
+
+### Human-owned npm credential
+
+An npm account owner must create a publish-capable access token for
+`scrapeloop-mcp` and store it as the GitHub Actions repository secret
+`NPM_TOKEN`. Agents must not create, reveal, or enter this credential. To recover
+an already tagged but unpublished version, run the workflow manually with its
+exact existing tag. The workflow archives and publishes that tag's source rather
+than the current default branch.
+
+Local preflight, which never publishes:
+
+```bash
+npm ci --no-audit --no-fund
+npm test
+npm run release:preflight -- --tag mcp-v0.7.0
 ```

package/package.json

@@ -1,8 +1,13 @@
 {
   "name": "scrapeloop-mcp",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Scrapeloop MCP server — set up and run Scrapeloop end-to-end (integrations, scraping, lead database, verification, cleaners, enrichment, strategies, Instantly campaigns) from any MCP client (Claude Desktop, Cursor, ChatGPT, …).",
   "type": "module",
+  "scripts": {
+    "test": "node --check src/index.js && node test/mcp_table_tools.mjs && node test/mcp_community_intent.mjs && node test/mcp_api_key_preflight.mjs && node test/release_readiness.mjs",
+    "release:preflight": "node scripts/release-preflight.mjs",
+    "release:verify": "node scripts/release-installed-verify.mjs"
+  },
   "bin": {
     "scrapeloop-mcp": "src/index.js"
   },