starthub-mcp 0.1.0

package/build/auth.js

@@ -0,0 +1,30 @@
+import { createClient } from '@supabase/supabase-js';
+const SUPABASE_URL = process.env.SUPABASE_URL ?? 'https://emiwzjxgdkxvgsitukqg.supabase.co';
+const SUPABASE_ANON_KEY = process.env.SUPABASE_ANON_KEY ?? 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImVtaXd6anhnZGt4dmdzaXR1a3FnIiwicm9sZSI6ImFub24iLCJpYXQiOjE3Nzg0Mjg3MzQsImV4cCI6MjA5NDAwNDczNH0.QUDXSYhJrjkFW5P9Ge2yIj5vBOyizER6zAr6vbzhEKk';
+export function getSupabase() {
+    return createClient(SUPABASE_URL, SUPABASE_ANON_KEY);
+}
+/**
+ * Valida la STARTHUB_KEY e restituisce il tipo di entità + id.
+ * Chiama la funzione SQL validate_mcp_key (SECURITY DEFINER) —
+ * sicura con anon key, non espone altri dati.
+ */
+export async function validateKey(key) {
+    const supabase = getSupabase();
+    const { data, error } = await supabase.rpc('validate_mcp_key', { p_key: key });
+    if (error || !data)
+        return null;
+    return data;
+}
+/**
+ * Verifica che la startup abbia un piano attivo.
+ * Lancia un errore con messaggio user-friendly se non ce l'ha.
+ */
+export function requireActivePlan(auth) {
+    if (auth.type !== 'startup')
+        return;
+    if (auth.plan !== 'active') {
+        throw new Error('⚠️ Il tuo piano StartHub non è attivo.\n' +
+            'Attiva il tuo account su https://starthub.it/upgrade per accedere a tutti i tool.');
+    }
+}

package/build/index.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { validateKey, getSupabase } from './auth.js';
+import { registerCandidateTools } from './tools/candidate.js';
+import { registerStartupTools } from './tools/startup.js';
+const STARTHUB_KEY = process.env.STARTHUB_KEY ?? '';
+async function main() {
+    // ── Auth ──────────────────────────────────────────────────
+    if (!STARTHUB_KEY) {
+        process.stderr.write('Errore: variabile STARTHUB_KEY non configurata.\n' +
+            'Ottieni la tua chiave su https://starthub.it dopo la registrazione.\n');
+        process.exit(1);
+    }
+    const auth = await validateKey(STARTHUB_KEY);
+    if (!auth) {
+        process.stderr.write('Errore: chiave STARTHUB_KEY non valida o scaduta.\n');
+        process.exit(1);
+    }
+    // ── Server ────────────────────────────────────────────────
+    const isCandidate = auth.type === 'candidate';
+    const server = new McpServer({
+        name: isCandidate ? 'starthub-candidate' : 'starthub-recruiter',
+        version: '0.1.0',
+    });
+    const supabase = getSupabase();
+    if (isCandidate) {
+        registerCandidateTools(server, supabase, auth.id);
+    }
+    else {
+        registerStartupTools(server, supabase, auth);
+    }
+    // ── Transport ─────────────────────────────────────────────
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    process.stderr.write(`StartHub MCP avviato — ${isCandidate ? '👤 Candidato' : '🏢 Startup'}` +
+        (auth.type === 'startup' ? ` [${auth.plan}]` : '') + '\n');
+}
+main().catch((err) => {
+    process.stderr.write(`Errore fatale: ${err.message}\n`);
+    process.exit(1);
+});

package/build/tools/candidate.js

@@ -0,0 +1,226 @@
+import { z } from 'zod';
+const ROLE_AREAS = [
+    'product', 'growth', 'operations', 'sales', 'tech',
+    'marketing', 'finance', 'people', 'chief-of-staff', 'altro',
+];
+const WORK_MODES = ['remote', 'hybrid', 'onsite'];
+const APP_STAGES = [
+    'applied', 'screening', 'interview-1', 'interview-2',
+    'offer', 'hired', 'rejected',
+];
+export function registerCandidateTools(server, supabase, candidateId) {
+    // ── get_profile ────────────────────────────────────────────
+    server.registerTool('get_profile', {
+        description: 'Leggi i tuoi dati profilo: bio, ruoli cercati, RAL, preferenze, visibilità.',
+        inputSchema: {},
+    }, async () => {
+        const { data, error } = await supabase
+            .from('candidates')
+            .select('id, full_name, email, bio, role_targets, ral_min, ral_max, work_mode_pref, cities_pref, linkedin_url, is_searchable, created_at')
+            .eq('id', candidateId)
+            .single();
+        if (error || !data)
+            throw new Error('Profilo non trovato.');
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        ...data,
+                        visibilita: data.is_searchable ? '🟢 Visibile alle startup' : '🔒 Nascosto',
+                    }, null, 2),
+                }],
+        };
+    });
+    // ── update_profile ─────────────────────────────────────────
+    server.registerTool('update_profile', {
+        description: 'Aggiorna il tuo profilo. Usa ogni volta che qualcosa cambia.',
+        inputSchema: {
+            bio: z.string().optional(),
+            role_targets: z.array(z.enum(ROLE_AREAS)).optional(),
+            ral_min: z.number().optional(),
+            ral_max: z.number().optional(),
+            work_mode_pref: z.array(z.enum(WORK_MODES)).optional(),
+            cities_pref: z.array(z.string()).optional(),
+            linkedin_url: z.string().url().optional(),
+        },
+    }, async (args) => {
+        const updates = {};
+        for (const [k, v] of Object.entries(args)) {
+            if (v !== undefined)
+                updates[k] = v;
+        }
+        if (Object.keys(updates).length === 0) {
+            return { content: [{ type: 'text', text: 'Nessun campo da aggiornare.' }] };
+        }
+        const { error } = await supabase.from('candidates').update(updates).eq('id', candidateId);
+        if (error)
+            throw new Error(error.message);
+        return { content: [{ type: 'text', text: `✅ Profilo aggiornato: ${Object.keys(updates).join(', ')}.` }] };
+    });
+    // ── toggle_visibility ──────────────────────────────────────
+    server.registerTool('toggle_visibility', {
+        description: 'Attiva o disattiva la visibilità del tuo profilo alle startup.',
+        inputSchema: {
+            visible: z.boolean().describe('true = visibile alle startup | false = nascosto'),
+        },
+    }, async ({ visible }) => {
+        const { error } = await supabase
+            .from('candidates')
+            .update({ is_searchable: visible })
+            .eq('id', candidateId);
+        if (error)
+            throw new Error(error.message);
+        const text = visible
+            ? '✅ Profilo ora visibile alle startup.'
+            : '🔒 Profilo nascosto. Le startup non ti vedono.';
+        return { content: [{ type: 'text', text }] };
+    });
+    // ── search_jobs ────────────────────────────────────────────
+    server.registerTool('search_jobs', {
+        description: 'Cerca offerte di lavoro nelle startup italiane. Filtra per ruolo, modalità, RAL.',
+        inputSchema: {
+            role_area: z.enum(ROLE_AREAS).optional(),
+            work_mode: z.enum(WORK_MODES).optional(),
+            ral_min: z.number().optional().describe('RAL minima accettabile (es. 35000)'),
+            city: z.string().optional(),
+            limit: z.number().min(1).max(25).default(10),
+        },
+    }, async ({ role_area, work_mode, ral_min, city, limit }) => {
+        let query = supabase
+            .from('job_postings')
+            .select('id, role_title, role_area, work_mode, city, ral_min, ral_max, description, startups(name, stage, city)')
+            .eq('is_active', true);
+        if (role_area)
+            query = query.eq('role_area', role_area);
+        if (work_mode)
+            query = query.eq('work_mode', work_mode);
+        if (ral_min)
+            query = query.gte('ral_max', ral_min);
+        if (city)
+            query = query.ilike('city', `%${city}%`);
+        const { data, error } = await query.order('created_at', { ascending: false }).limit(limit);
+        if (error)
+            throw new Error(error.message);
+        if (!data?.length)
+            return { content: [{ type: 'text', text: 'Nessuna offerta trovata con questi filtri.' }] };
+        return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+    });
+    // ── get_job ────────────────────────────────────────────────
+    server.registerTool('get_job', {
+        description: 'Dettaglio completo di un\'offerta: descrizione, RAL, profilo startup.',
+        inputSchema: {
+            job_id: z.string().uuid().describe('ID dell\'offerta'),
+        },
+    }, async ({ job_id }) => {
+        const { data, error } = await supabase
+            .from('job_postings')
+            .select('*, startups(*)')
+            .eq('id', job_id)
+            .eq('is_active', true)
+            .single();
+        if (error || !data)
+            throw new Error('Offerta non trovata o non più attiva.');
+        return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+    });
+    // ── get_startup ────────────────────────────────────────────
+    server.registerTool('get_startup', {
+        description: 'Profilo completo di una startup e le sue posizioni aperte.',
+        inputSchema: {
+            startup_id: z.string().uuid().optional(),
+            slug: z.string().optional(),
+        },
+    }, async ({ startup_id, slug }) => {
+        if (!startup_id && !slug)
+            throw new Error('Fornisci startup_id o slug.');
+        let query = supabase.from('startups').select('*').eq('is_active', true);
+        query = startup_id ? query.eq('id', startup_id) : query.eq('slug', slug);
+        const { data: startup, error } = await query.single();
+        if (error || !startup)
+            throw new Error('Startup non trovata.');
+        const { data: jobs } = await supabase
+            .from('job_postings')
+            .select('id, role_title, role_area, work_mode, city, ral_min, ral_max')
+            .eq('startup_id', startup.id)
+            .eq('is_active', true);
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({ ...startup, posizioni_aperte: jobs ?? [] }, null, 2),
+                }],
+        };
+    });
+    // ── apply ──────────────────────────────────────────────────
+    server.registerTool('apply', {
+        description: 'Invia la candidatura per un\'offerta.',
+        inputSchema: {
+            job_id: z.string().uuid(),
+            cover_note: z.string().max(2000).optional().describe('Lettera di presentazione (consigliata)'),
+        },
+    }, async ({ job_id, cover_note }) => {
+        const { data: job } = await supabase
+            .from('job_postings')
+            .select('id, role_title, startups(name)')
+            .eq('id', job_id)
+            .eq('is_active', true)
+            .single();
+        if (!job)
+            throw new Error('Offerta non trovata o non più attiva.');
+        const { data: existing } = await supabase
+            .from('applications')
+            .select('id, stage')
+            .eq('candidate_id', candidateId)
+            .eq('job_posting_id', job_id)
+            .single();
+        if (existing) {
+            return { content: [{ type: 'text', text: `Hai già applicato. Stage attuale: ${existing.stage}.` }] };
+        }
+        const { error } = await supabase.from('applications').insert({
+            candidate_id: candidateId,
+            job_posting_id: job_id,
+            cover_note: cover_note ?? null,
+            stage: 'applied',
+        });
+        if (error)
+            throw new Error(error.message);
+        const startupName = job.startups?.name ?? 'la startup';
+        return { content: [{ type: 'text', text: `✅ Candidatura inviata per ${job.role_title} @ ${startupName}. In bocca al lupo!` }] };
+    });
+    // ── get_applications ───────────────────────────────────────
+    server.registerTool('get_applications', {
+        description: 'Mostra le tue candidature con il relativo stage nel processo di selezione.',
+        inputSchema: {
+            stage: z.enum(APP_STAGES).optional().describe('Filtra per stage (opzionale)'),
+        },
+    }, async ({ stage }) => {
+        let query = supabase
+            .from('applications')
+            .select('id, stage, applied_at, cover_note, job_postings(id, role_title, role_area, work_mode, startups(name))')
+            .eq('candidate_id', candidateId)
+            .order('applied_at', { ascending: false });
+        if (stage)
+            query = query.eq('stage', stage);
+        const { data, error } = await query;
+        if (error)
+            throw new Error(error.message);
+        if (!data?.length) {
+            return { content: [{ type: 'text', text: 'Nessuna candidatura. Usa search_jobs e apply per candidarti.' }] };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+    });
+    // ── get_salary_benchmark ───────────────────────────────────
+    server.registerTool('get_salary_benchmark', {
+        description: 'RAL tipica per un ruolo nelle startup italiane, per seniority.',
+        inputSchema: {
+            area: z.enum(ROLE_AREAS),
+        },
+    }, async ({ area }) => {
+        const { data, error } = await supabase
+            .from('role_profiles')
+            .select('title, area, ral_junior, ral_mid, ral_senior, tagline')
+            .eq('area', area);
+        if (error || !data?.length) {
+            return { content: [{ type: 'text', text: `Benchmark non ancora disponibile per "${area}". Dataset in costruzione.` }] };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+    });
+}

package/build/tools/startup.js

@@ -0,0 +1,231 @@
+import { z } from 'zod';
+import { requireActivePlan } from '../auth.js';
+const ROLE_AREAS = [
+    'product', 'growth', 'operations', 'sales', 'tech',
+    'marketing', 'finance', 'people', 'chief-of-staff', 'altro',
+];
+const WORK_MODES = ['remote', 'hybrid', 'onsite'];
+const APP_STAGES = [
+    'screening', 'interview-1', 'interview-2', 'offer', 'hired', 'rejected',
+];
+export function registerStartupTools(server, supabase, auth) {
+    const startupId = auth.id;
+    // Helper che impone il plan check prima di eseguire i tool a pagamento
+    function paid(handler) {
+        return (args) => {
+            requireActivePlan(auth);
+            return handler(args);
+        };
+    }
+    // ── get_profile ────────────────────────────────────────────
+    // Tool gratuito: la startup può sempre vedere il proprio profilo
+    server.registerTool('get_profile', {
+        description: 'Leggi il profilo della tua startup.',
+        inputSchema: {},
+    }, async () => {
+        const { data, error } = await supabase
+            .from('startups')
+            .select('id, name, slug, description, city, stage, website_url, is_active, plan, created_at')
+            .eq('id', startupId)
+            .single();
+        if (error || !data)
+            throw new Error('Profilo startup non trovato.');
+        const planInfo = data.plan === 'active'
+            ? '✅ Piano attivo — accesso completo'
+            : `⚠️ Piano: ${data.plan} — alcuni tool non disponibili. Attiva su starthub.it/upgrade`;
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({ ...data, stato_piano: planInfo }, null, 2),
+                }],
+        };
+    });
+    // ── update_profile ─────────────────────────────────────────
+    server.registerTool('update_profile', {
+        description: 'Aggiorna il profilo della tua startup.',
+        inputSchema: {
+            description: z.string().optional(),
+            city: z.string().optional(),
+            stage: z.string().optional(),
+            website_url: z.string().url().optional(),
+        },
+    }, paid(async (args) => {
+        const updates = {};
+        for (const [k, v] of Object.entries(args)) {
+            if (v !== undefined)
+                updates[k] = v;
+        }
+        const { error } = await supabase.from('startups').update(updates).eq('id', startupId);
+        if (error)
+            throw new Error(error.message);
+        return { content: [{ type: 'text', text: `✅ Profilo aggiornato: ${Object.keys(updates).join(', ')}.` }] };
+    }));
+    // ── post_job ───────────────────────────────────────────────
+    server.registerTool('post_job', {
+        description: 'Pubblica una nuova offerta di lavoro. Descrivi il ruolo — penso a strutturarlo.',
+        inputSchema: {
+            role_title: z.string().describe('Titolo del ruolo (es. "Product Manager")'),
+            role_area: z.enum(ROLE_AREAS),
+            work_mode: z.enum(WORK_MODES),
+            city: z.string().optional(),
+            ral_min: z.number().optional(),
+            ral_max: z.number().optional(),
+            description: z.string().optional().describe('Descrizione del ruolo e del contesto'),
+        },
+    }, paid(async ({ role_title, role_area, work_mode, city, ral_min, ral_max, description }) => {
+        const { data, error } = await supabase
+            .from('job_postings')
+            .insert({
+            startup_id: startupId,
+            role_title,
+            role_area,
+            work_mode,
+            city: city ?? null,
+            ral_min: ral_min ?? null,
+            ral_max: ral_max ?? null,
+            description: description ?? null,
+            is_active: true,
+        })
+            .select('id, role_title')
+            .single();
+        if (error)
+            throw new Error(error.message);
+        return {
+            content: [{
+                    type: 'text',
+                    text: [
+                        `✅ Offerta pubblicata: ${data.role_title}`,
+                        `ID: ${data.id}`,
+                        '',
+                        'I candidati possono trovarla subito. Usa get_pipeline per monitorare le candidature.',
+                    ].join('\n'),
+                }],
+        };
+    }));
+    // ── update_job ─────────────────────────────────────────────
+    server.registerTool('update_job', {
+        description: 'Modifica un\'offerta esistente o chiudila (is_active: false).',
+        inputSchema: {
+            job_id: z.string().uuid(),
+            is_active: z.boolean().optional().describe('false = chiude la posizione'),
+            ral_min: z.number().optional(),
+            ral_max: z.number().optional(),
+            description: z.string().optional(),
+        },
+    }, paid(async ({ job_id, ...fields }) => {
+        const { data: job } = await supabase
+            .from('job_postings')
+            .select('id')
+            .eq('id', job_id)
+            .eq('startup_id', startupId)
+            .single();
+        if (!job)
+            throw new Error('Offerta non trovata o non appartiene alla tua startup.');
+        const updates = {};
+        for (const [k, v] of Object.entries(fields)) {
+            if (v !== undefined)
+                updates[k] = v;
+        }
+        const { error } = await supabase.from('job_postings').update(updates).eq('id', job_id);
+        if (error)
+            throw new Error(error.message);
+        const text = fields.is_active === false
+            ? '🔒 Posizione chiusa.'
+            : '✅ Offerta aggiornata.';
+        return { content: [{ type: 'text', text }] };
+    }));
+    // ── get_pipeline ───────────────────────────────────────────
+    server.registerTool('get_pipeline', {
+        description: 'Vedi le candidature ricevute per una posizione, con stage e profilo candidato.',
+        inputSchema: {
+            job_id: z.string().uuid(),
+            stage: z.enum(APP_STAGES).optional(),
+        },
+    }, paid(async ({ job_id, stage }) => {
+        const { data: job } = await supabase
+            .from('job_postings')
+            .select('id, role_title')
+            .eq('id', job_id)
+            .eq('startup_id', startupId)
+            .single();
+        if (!job)
+            throw new Error('Posizione non trovata o non appartiene alla tua startup.');
+        let query = supabase
+            .from('applications')
+            .select('id, stage, applied_at, cover_note, candidates(id, full_name, bio, role_targets, ral_min, ral_max, linkedin_url)')
+            .eq('job_posting_id', job_id)
+            .order('applied_at', { ascending: false });
+        if (stage)
+            query = query.eq('stage', stage);
+        const { data, error } = await query;
+        if (error)
+            throw new Error(error.message);
+        const byStage = (data ?? []).reduce((acc, a) => {
+            acc[a.stage] = (acc[a.stage] ?? 0) + 1;
+            return acc;
+        }, {});
+        return {
+            content: [{
+                    type: 'text',
+                    text: JSON.stringify({
+                        ruolo: job.role_title,
+                        totale: data?.length ?? 0,
+                        per_stage: byStage,
+                        candidature: data,
+                    }, null, 2),
+                }],
+        };
+    }));
+    // ── move_application ───────────────────────────────────────
+    server.registerTool('move_application', {
+        description: 'Sposta un candidato al prossimo stage del processo di selezione.',
+        inputSchema: {
+            application_id: z.string().uuid(),
+            stage: z.enum(APP_STAGES),
+        },
+    }, paid(async ({ application_id, stage }) => {
+        const { data: app } = await supabase
+            .from('applications')
+            .select('id, stage, job_postings(startup_id)')
+            .eq('id', application_id)
+            .single();
+        const jobStartupId = app?.job_postings?.startup_id;
+        if (!app || jobStartupId !== startupId)
+            throw new Error('Candidatura non trovata.');
+        const { error } = await supabase
+            .from('applications')
+            .update({ stage })
+            .eq('id', application_id);
+        if (error)
+            throw new Error(error.message);
+        return { content: [{ type: 'text', text: `✅ Stage aggiornato: ${app.stage} → ${stage}.` }] };
+    }));
+    // ── search_candidates ──────────────────────────────────────
+    server.registerTool('search_candidates', {
+        description: 'Cerca candidati nel pool StartHub che hanno attivato la visibilità.',
+        inputSchema: {
+            role_area: z.enum(ROLE_AREAS).optional(),
+            work_mode: z.enum(WORK_MODES).optional(),
+            ral_max: z.number().optional().describe('RAL massima che puoi offrire'),
+            limit: z.number().min(1).max(20).default(10),
+        },
+    }, paid(async ({ role_area, work_mode, ral_max, limit }) => {
+        let query = supabase
+            .from('candidates')
+            .select('id, full_name, role_targets, ral_min, ral_max, work_mode_pref, cities_pref, bio, linkedin_url')
+            .eq('is_searchable', true);
+        if (role_area)
+            query = query.contains('role_targets', [role_area]);
+        if (work_mode)
+            query = query.contains('work_mode_pref', [work_mode]);
+        if (ral_max)
+            query = query.lte('ral_min', ral_max);
+        const { data, error } = await query.limit(limit);
+        if (error)
+            throw new Error(error.message);
+        if (!data?.length) {
+            return { content: [{ type: 'text', text: 'Nessun candidato trovato. Il pool è in crescita — allarga i filtri.' }] };
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+    }));
+}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "starthub-mcp",
+  "version": "0.1.0",
+  "description": "StartHub MCP server — trova lavoro nelle startup italiane via Claude",
+  "type": "module",
+  "bin": {
+    "starthub-mcp": "build/index.js"
+  },
+  "files": [
+    "build"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node build/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@supabase/supabase-js": "^2.47.0",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+  }
+}