@sendinel/mcp-server 1.0.10 → 1.0.11

package/README.md

@@ -5,38 +5,51 @@ Sendinel's published MCP server package for local stdio clients such as Claude D
 AI-controlled email operations control plane for campaigns, contacts, segments, templates, analytics, deliverability, and multi-provider sending across the Sendinel portfolio.
 
 - Categories: `email`, `marketing`, `crm`, `automation`, `analytics`
-- Official registry name: `io.github.kmdesle/sendinel`
+- Official registry name: `ai.sendinel/mcp-server`
 - Hosted remote endpoint: `https://sendinel.ai/mcp`
 - npm package: `@sendinel/mcp-server`
 - Source: `https://github.com/kmdesle/sendinel-ai/tree/main/packages/mcp-server`
 
 ## Tool groups
 
-Sendinel currently exposes 21 tool groups and about 155 tools. The full reference lives in [`docs/mcp-tools.md`](../../docs/mcp-tools.md).
+Sendinel currently exposes 34 tool groups and 302 tools (gateway mode adds 3 meta-tools). These counts are checked against the tool registry in CI, so this table matches what ships.
 
 | Group | Count | Purpose |
 |-------|-------|---------|
-| `campaigns` | 26 | Full campaign lifecycle |
-| `contacts` | 22 | Subscriber CRUD, tags, suppression, merges, timelines |
-| `analytics` | 9 | Stats, engagement, deliverability, portfolio reporting |
-| `data` | 15 | Export, scoring, hygiene, migrations, import history |
-| `org` | 15 | Team members, API keys, platform connections, plan, onboarding |
-| `templates` | 7 | Template CRUD, AI brief generation, translation |
-| `sms` | 7 | SMS send, consent, inbound, logs |
-| `segments` | 6 | Audience builder and preview |
-| `content` | 5 | Content blocks, sources, send-time optimization |
-| `ab_testing` | 5 | A/B setup and significance checks |
-| `drafts` | 4 | Draft create and approval flow |
-| `delivery` | 9 | Domain and deliverability operations |
-| `warmup` | 4 | Warmup schedule controls |
-| `social` | 4 | Social campaigns and scheduling |
-| `forms` | 3 | Forms and stats |
+| `ab-testing` | 4 | A/B test creation, listing, significance checks, winner promotion |
+| `advisor` | 6 | Campaign advisor: recommendations, benchmarks, subject/content/send-time guidance |
+| `ai-work` | 9 | AI work items, recommended segments, context events, agent proposals |
+| `analytics` | 17 | Stats, portfolio analytics, domain health, engagement, deliverability, revenue analytics |
+| `approvals` | 2 | Poll and list risk-tiered action approvals |
+| `automations` | 7 | Automation triggers, previews, and response-gated escalation ladders |
+| `brand_kit` | 5 | Brand Core text import, media library upload/URL ingest, asset-context reads |
+| `campaigns` | 30 | Full campaign lifecycle: create, edit, approve, launch, enroll, schedule, sequence templates |
+| `cloud-import` | 6 | Cloud storage import |
+| `compound` | 4 | Higher-level campaign/template/site setup and delivery diagnosis workflows |
+| `connector` | 6 | BYOD connector status, table discovery, schema/view setup, mapping, resync |
+| `contacts` | 37 | Subscriber CRUD, saved views, tags, email log, suppression, merge, timeline |
+| `content` | 14 | Content blocks, gated asset links, blog ingest and auto-publish, sources |
+| `data` | 19 | Platform connectors, imports, API keys, migration jobs, notifications, tenant export |
+| `data-proposals` | 3 | Data-derived campaign proposal generation, listing, approval |
+| `delivery-ops` | 23 | Domains, DNSBL, deliverability diagnostics, queue, DLQ, exports, blackout dates |
+| `drafts` | 6 | Draft create/approve/reject and draft-to-campaign promotion |
+| `forms` | 3 | Form creation, listing, stats |
+| `gdpr` | 4 | Contact data deletion and GDPR log |
+| `landing-pages` | 5 | Landing page CRUD |
+| `lists` | 7 | Static contact lists and membership management |
+| `newsletters` | 12 | Newsletter publications, issues, subscribers, scheduling, sending, stats |
+| `org` | 20 | Team members, plan usage/limits, audit log, model registry, white-label, provider switching |
+| `segments` | 6 | Audience builder: create, edit, natural-language generation, preview |
+| `short-links` | 3 | Short links, click stats, QR codes |
+| `signatures` | 4 | Sending signature blocks |
+| `sites` | 5 | Site, sender, and brand voice management |
+| `skills` | 2 | Operator skills catalog |
+| `sms` | 7 | SMS send, log, consent, inbound |
+| `social-posts` | 6 | Social post creation, adaptation, scheduling state, archive/delete |
+| `surveys` | 5 | Survey creation, listing, status, results |
+| `templates` | 7 | Email template CRUD, version restore, migration translation |
+| `warmup` | 4 | IP/domain warmup schedule control |
 | `webhooks` | 4 | Webhook subscription management |
-| `approvals` | 3 | Approval workflow and advisor hooks |
-| `automations` | 4 | Automation triggers and previews |
-| `sites` | 3 | Site and sender management |
-| `gdpr` | 2 | Contact deletion and log |
-| `history` | 3 | Chat thread history and search |
 
 ## Install / run
 

package/build/anthropic-model.d.ts

@@ -1,5 +1,35 @@
 export { FALLBACK_MODEL_IDS, MODEL_REGISTRY, ROLE, getAnthropicFastModelId, getAnthropicFrontierModelId, getAnthropicModelId, getAnthropicReasoningModelId, getModelIdForRole, resolveModel, type ModelMetadata, type ModelRole, type ResolvedModel, } from '@desler/models';
+import { type ModelRole, type ResolvedModel } from '@desler/models';
 export declare const DEFAULT_ANTHROPIC_MODEL_ID: string;
 export declare const DEFAULT_ANTHROPIC_FAST_MODEL_ID: string;
 export declare const DEFAULT_ANTHROPIC_OPUS_MODEL_ID: string;
 export { getAnthropicReasoningModelId as getAnthropicOpusModelId } from '@desler/models';
+type ModelRegistryClient = {
+    from(table: 'model_registry'): {
+        select(columns: string): {
+            eq(column: string, value: string): {
+                eq(column: string, value: string): {
+                    maybeSingle(): Promise<{
+                        data: {
+                            model_id?: string | null;
+                        } | null;
+                        error: unknown;
+                    }>;
+                };
+                is(column: string, value: null): {
+                    maybeSingle(): Promise<{
+                        data: {
+                            model_id?: string | null;
+                        } | null;
+                        error: unknown;
+                    }>;
+                };
+            };
+        };
+    };
+};
+export declare function resolveModelWithRuntimeMirror(role: ModelRole, opts?: {
+    orgId?: string | null;
+    environment?: Record<string, string | undefined>;
+    client?: ModelRegistryClient;
+}): Promise<ResolvedModel>;

package/build/anthropic-model.js

@@ -1,6 +1,31 @@
 export { FALLBACK_MODEL_IDS, MODEL_REGISTRY, ROLE, getAnthropicFastModelId, getAnthropicFrontierModelId, getAnthropicModelId, getAnthropicReasoningModelId, getModelIdForRole, resolveModel, } from '@desler/models';
-import { MODEL_REGISTRY } from '@desler/models';
+import { MODEL_REGISTRY, resolveModel } from '@desler/models';
+import { adminDb } from './db.js';
 export const DEFAULT_ANTHROPIC_MODEL_ID = MODEL_REGISTRY.default.id;
 export const DEFAULT_ANTHROPIC_FAST_MODEL_ID = MODEL_REGISTRY.fast.id;
 export const DEFAULT_ANTHROPIC_OPUS_MODEL_ID = MODEL_REGISTRY.reasoning.id;
 export { getAnthropicReasoningModelId as getAnthropicOpusModelId } from '@desler/models';
+async function lookupRuntimeModel(role, orgId, client) {
+    const base = () => client.from('model_registry').select('model_id').eq('role', role);
+    if (orgId) {
+        const { data } = await base().eq('org_id', orgId).maybeSingle();
+        if (data?.model_id)
+            return data.model_id;
+    }
+    const { data } = await base().is('org_id', null).maybeSingle();
+    return data?.model_id ?? null;
+}
+export async function resolveModelWithRuntimeMirror(role, opts = {}) {
+    const resolved = resolveModel(role, opts.environment);
+    if (resolved.source === 'env')
+        return resolved;
+    try {
+        const modelId = await lookupRuntimeModel(role, opts.orgId, opts.client ?? adminDb());
+        if (modelId)
+            return { ...resolved, id: modelId, source: 'runtime_mirror' };
+    }
+    catch {
+        // Runtime flips are best-effort; package/fallback resolution remains the safe baseline.
+    }
+    return resolved;
+}

package/build/db.d.ts

@@ -1,4 +1,19 @@
 import 'dotenv/config';
+export type V1CallOptions = {
+    method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    body?: unknown;
+    query?: Record<string, string>;
+};
+export type V1CallResult = {
+    ok: true;
+    data: unknown;
+    status: number;
+} | {
+    ok: false;
+    error: unknown;
+    status: number;
+};
+export type V1Caller = (path: string, opts?: V1CallOptions) => Promise<V1CallResult>;
 /** Returns Sendinel's admin client. Always points to Sendinel's Supabase — never overridden. */
 export declare function adminDb(): any;
 /**
@@ -23,6 +38,7 @@ export declare function runWithClient<T>(client: any, fn: () => Promise<T>, requ
     actorType?: string;
     actorId?: string | null;
     workspaceId?: string | null;
+    v1Caller?: V1Caller;
 }): Promise<T>;
 export declare function runWithToolContext<T>(toolGroup: string, toolName: string, fn: () => Promise<T> | T): Promise<T>;
 /**
@@ -37,6 +53,7 @@ export declare function requestContext(): {
     actorType?: string;
     actorId?: string | null;
     workspaceId?: string | null;
+    v1Caller?: V1Caller;
 } | undefined;
 export declare function projectClientForWriteback(): any | null;
 /**

package/build/db.js

@@ -69,6 +69,7 @@ export function requestContext() {
             actorType: ctx.actorType,
             actorId: ctx.actorId,
             workspaceId: ctx.workspaceId,
+            v1Caller: ctx.v1Caller,
         }
         : undefined;
 }
@@ -80,7 +81,20 @@ export function projectClientForWriteback() {
     const ctx = _requestStore.getStore();
     return ctx?.client ?? _processClient ?? null;
 }
-const BYOD_TOOL_NAMES = new Set(['create_blog_post', 'list_blog_posts', 'list_blog_destinations']);
+const BYOD_TOOL_NAMES = new Set([
+    'create_blog_post',
+    'list_blog_posts',
+    'get_blog_post',
+    'generate_blog_post_image',
+    'recommend_blog_post_images',
+    'send_newsletter_issue',
+    'list_blog_destinations',
+    'get_brand_voice',
+    'update_brand_voice',
+    'update_site',
+    'list_connector_tables',
+    'get_dmarc_status',
+]);
 function shouldUseProjectClient(ctx) {
     if (!ctx?.client)
         return false;

package/build/index.js

@@ -8,6 +8,7 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import express from 'express';
 import { registerAllTools } from './server.js';
+import { registerAllPrompts } from './prompts.js';
 import { runWithClient } from './db.js';
 import { initProjectClient, resolveProjectClientStrict, TenantResolutionError } from './byod-client.js';
 import { authenticateBearer, McpAuthenticationError, validateKey } from './auth.js';
@@ -36,6 +37,7 @@ async function runStdio() {
         await initProjectClient(projectId);
     }
     registerAllTools(server, { toolGroups, scopes });
+    registerAllPrompts(server, { toolGroups, scopes });
     const t = new StdioServerTransport();
     await server.connect(t);
     process.stderr.write('Sendinel MCP server running (stdio)\n');
@@ -97,6 +99,10 @@ async function runHttp() {
                 scopes: info.scopes,
                 toolGroups: info.toolGroups,
             });
+            registerAllPrompts(server, {
+                scopes: info.scopes,
+                toolGroups: info.toolGroups,
+            });
             const t = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
             await server.connect(t);
             await t.handleRequest(req, res, req.body);

package/build/lib/action-approvals.js

@@ -10,13 +10,25 @@ import { fireWebhookEvent } from './webhook-events.js';
  */
 const GATED_ACTIONS = new Set([
     'launch_campaign', // sends real emails
+    'install_connector_schema', // installs schema into a customer-owned database
+    'install_connector_view', // reinstalls the customer-side snapshot view
+    'set_connector_mapping', // rewrites how customer data maps in
+    'resync_connector', // forces a full resync
+    'publish_dmarc_record', // writes a DNS record into a customer-owned Cloudflare zone
     'broadcast_to_segment', // creates + activates a real broadcast
+    'rotate_custom_webhook_secret', // immediately invalidates an inbound signing secret
     'create_campaign_with_content', // can activate + send in one call
     'enroll_segment', // bulk enrollment
     'import_subscribers', // bulk data ingestion
     'subscribe_webhook', // outbound data channel
     'send_transactional', // sends a real email
     'update_campaign_status', // activation sends real emails (see special case below)
+    'add_list_members', // bulk contact-list membership write
+    'remove_list_members', // bulk contact-list membership write
+    'add_list_members_by_filter', // bulk membership write, unbounded match set
+    'remove_team_member', // revokes workspace access
+    'set_team_member_role', // changes workspace access privileges
+    'delete_provider_credential', // permanently removes or revokes stored provider access
 ]);
 const PROTECTED_ACTIONS = new Set([
     'delete_subscriber_data', // GDPR delete — irreversible
@@ -24,6 +36,7 @@ const PROTECTED_ACTIONS = new Set([
     'delete_segment', // affects campaign targeting
     'identify_inactive', // bulk suppression (when not dry_run)
     'promote_ab_winner', // deletes losing variants
+    'action_ccpa_request', // CCPA delete completion is irreversible
 ]);
 export function getApprovalTier(action, params) {
     // CRITICAL: Protected actions ALWAYS require approval, even in autonomous mode.
@@ -32,6 +45,8 @@ export function getApprovalTier(action, params) {
         // Exception: identify_inactive in dry_run mode is safe (read-only report)
         if (action === 'identify_inactive' && params?.dry_run !== false)
             return 'autonomous';
+        if (action === 'action_ccpa_request' && !(params?.status === 'completed' && params?.request_type === 'delete'))
+            return 'autonomous';
         return 'protected';
     }
     // Autonomous mode: user explicitly opted out of approval gates for gated actions
@@ -112,7 +127,13 @@ export function currentChannelContext() {
 export function buildApprovalSummary(action, params) {
     const summaries = {
         launch_campaign: (p) => `Launch campaign "${p.name || p.campaign_name || 'unknown'}" — will send emails to real contacts`,
+        install_connector_schema: (p) => `Install connector schema for project ${p.project_id ?? 'current'}`,
+        install_connector_view: (p) => `Reinstall the customer-side contact view for project ${p.project_id ?? 'current'}`,
+        set_connector_mapping: () => `Rewrite the BYOD connector field mapping`,
+        resync_connector: () => `Force a full BYOD connector resync`,
+        publish_dmarc_record: (p) => `Publish DMARC record for ${p.domain} - writes DNS in a customer-owned Cloudflare zone`,
         broadcast_to_segment: (p) => `Broadcast "${p.name || p.subject || 'untitled'}" to segment ${p.segment_id} — will send emails to real contacts`,
+        rotate_custom_webhook_secret: (p) => `Rotate custom webhook ${p.connection_id} signing secret — immediately invalidates the previous secret with no grace period`,
         create_campaign_with_content: (p) => `Create + activate campaign "${p.name}" with ${p.steps?.length ?? 0} email(s) and enroll contacts`,
         enroll_segment: (p) => `Enroll all contacts from site into campaign ${p.campaign_id}`,
         import_subscribers: (p) => `Import subscribers (up to ${p.contacts?.length ?? 'unknown'} records)`,
@@ -123,6 +144,13 @@ export function buildApprovalSummary(action, params) {
         delete_segment: (p) => `Delete segment ${p.segment_id} — campaigns using this segment lose their targeting`,
         identify_inactive: (p) => `Suppress contacts inactive for ${p.days ?? 90} days — they will stop receiving emails`,
         promote_ab_winner: (p) => `Promote A/B test winner "${p.winner}" — losing variants will be deleted`,
+        action_ccpa_request: (p) => `Complete CCPA delete request for ${p.email} — permanently and irreversibly deletes all subscriber data`,
+        add_list_members: (p) => `Add ${p.contact_ids?.length ?? 0} contact(s) to list ${p.list_id}`,
+        remove_list_members: (p) => `Remove ${p.contact_ids?.length ?? 0} contact(s) from list ${p.list_id}`,
+        add_list_members_by_filter: (p) => `Add contacts matching filter rules to list ${p.list_id}`,
+        remove_team_member: (p) => `Remove team member ${p.user_id} from the organization`,
+        set_team_member_role: (p) => `Change team member ${p.user_id}'s role to ${p.role}`,
+        delete_provider_credential: (p) => `Delete saved ${p.provider ?? 'provider'} credential ${p.credential_id} (${p.source})`,
     };
     const fn = summaries[action];
     return fn ? fn(params) : `Execute ${action} with provided parameters`;

package/build/lib/brand-asset-persist.d.ts

@@ -20,6 +20,7 @@ export type PersistBrandAssetInput = {
     collection?: string | null;
     tags?: string[];
     brandKitId?: string | null;
+    backstory?: string | null;
 };
 export type PersistBrandAssetResult = {
     assetId: string;

package/build/lib/brand-asset-persist.js

@@ -115,14 +115,32 @@ export async function persistBrandAsset(input) {
     const sha256 = crypto.createHash('sha256').update(bytes).digest('hex');
     const storagePath = brandAssetStoragePath(input.projectId, sha256, extOf(input.filename));
     const existing = await input.sb.schema('email').from('brand_media_assets')
-        .select('id').eq('project_id', input.projectId).eq('sha256', sha256).maybeSingle();
+        .select('id, kind').eq('project_id', input.projectId).eq('sha256', sha256).maybeSingle();
     if (existing.data?.id) {
+        const dedupPatch = {};
+        if (input.kind === 'avatar' && existing.data.kind !== 'avatar') {
+            dedupPatch.kind = 'avatar';
+            dedupPatch.filename = input.filename.slice(0, 255);
+        }
+        if (Object.keys(dedupPatch).length > 0) {
+            await input.sb.schema('email').from('brand_media_assets')
+                .update(dedupPatch)
+                .eq('id', existing.data.id)
+                .eq('project_id', input.projectId);
+        }
         if (input.brandKitId) {
             await input.sb.schema('email').from('brand_media_assets')
                 .update({ brand_kit_id: input.brandKitId })
                 .eq('id', existing.data.id)
                 .is('brand_kit_id', null);
         }
+        if (input.backstory !== undefined && input.backstory !== null) {
+            await input.sb.schema('email').from('brand_media_assets')
+                .update({ backstory: input.backstory })
+                .eq('id', existing.data.id)
+                .eq('project_id', input.projectId)
+                .or('backstory.is.null,backstory.eq.');
+        }
         return { assetId: existing.data.id, skippedExisting: true, storagePath };
     }
     const upload = await input.sb.storage.from(BRAND_ASSETS_BUCKET).upload(storagePath, bytes, {
@@ -149,6 +167,7 @@ export async function persistBrandAsset(input) {
         storage_backend: 'supabase',
         collection: input.collection ?? null,
         tags: input.tags ?? [],
+        backstory: input.backstory ?? null,
         metadata: {},
     }, { onConflict: 'project_id,sha256', ignoreDuplicates: true }).select('id');
     if (insert.error)

package/build/lib/composer-blocks.d.ts

@@ -24,92 +24,92 @@ export type ComposerBlock = {
     height?: number;
 };
 export declare const BLOCK_GENERATION_SCHEMA: {
-    readonly type: "array";
+    readonly type: 'array';
     readonly minItems: 2;
     readonly maxItems: 12;
     readonly items: {
-        readonly type: "object";
+        readonly type: 'object';
         readonly additionalProperties: false;
         readonly properties: {
             readonly type: {
-                readonly enum: readonly ["text", "heading", "button", "columns", "image", "social", "divider", "spacer", "unsubscribe"];
+                readonly enum: readonly ['text', 'heading', 'button', 'columns', 'image', 'social', 'divider', 'spacer', 'unsubscribe'];
             };
             readonly content: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly align: {
-                readonly enum: readonly ["left", "center", "right"];
+                readonly enum: readonly ['left', 'center', 'right'];
             };
             readonly level: {
                 readonly enum: readonly [1, 2, 3];
             };
             readonly label: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly url: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly bg_color: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly text_color: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly border_radius: {
-                readonly type: "number";
+                readonly type: 'number';
                 readonly minimum: 0;
                 readonly maximum: 24;
             };
             readonly padding: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly left: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly right: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly split: {
-                readonly enum: readonly ["50/50", "60/40", "40/60"];
+                readonly enum: readonly ['50/50', '60/40', '40/60'];
             };
             readonly alt: {
-                readonly type: "string";
+                readonly type: 'string';
             };
             readonly width: {
-                readonly type: readonly ["number", "null"];
+                readonly type: readonly ['number', 'null'];
                 readonly minimum: 1;
                 readonly maximum: 1200;
             };
             readonly brand_asset_id: {
-                readonly type: readonly ["string", "null"];
+                readonly type: readonly ['string', 'null'];
             };
             readonly links: {
-                readonly type: "array";
+                readonly type: 'array';
                 readonly maxItems: 8;
                 readonly items: {
-                    readonly type: "object";
+                    readonly type: 'object';
                     readonly additionalProperties: false;
                     readonly properties: {
                         readonly platform: {
-                            readonly type: "string";
+                            readonly type: 'string';
                         };
                         readonly url: {
-                            readonly type: "string";
+                            readonly type: 'string';
                         };
                     };
-                    readonly required: readonly ["platform", "url"];
+                    readonly required: readonly ['platform', 'url'];
                 };
             };
             readonly height: {
-                readonly type: "number";
+                readonly type: 'number';
                 readonly minimum: 4;
                 readonly maximum: 96;
             };
         };
-        readonly required: readonly ["type"];
+        readonly required: readonly ['type'];
     };
 };
-export declare function normalizeComposerBlocks(raw: unknown): ComposerBlock[];
+export declare function normalizeComposerBlocks(raw: unknown, defaultButtonColor?: string): ComposerBlock[];
 export declare function blocksToHtml(blocks: ComposerBlock[], ctx?: {
     preheader?: string | null;
 }): string;

package/build/lib/composer-blocks.js

@@ -85,6 +85,19 @@ function cleanColor(value, fallback) {
     const color = cleanText(value, 32);
     return /^#[0-9A-Fa-f]{3}([0-9A-Fa-f]{3})?([0-9A-Fa-f]{2})?$/.test(color) ? color : fallback;
 }
+// WCAG relative luminance threshold for readable text against fallback button
+// backgrounds synthesized by Sendinel, not AI-specified button colors.
+function fallbackTextColorForBg(hex) {
+    const expanded = hex.length === 4
+        ? hex.replace(/^#?([0-9A-Fa-f])([0-9A-Fa-f])([0-9A-Fa-f])$/, '#$1$1$2$2$3$3')
+        : hex;
+    const m = /^#?([0-9A-Fa-f]{2})([0-9A-Fa-f]{2})([0-9A-Fa-f]{2})/.exec(expanded);
+    if (!m)
+        return '#ffffff';
+    const [r, g, b] = m.slice(1).map((h) => parseInt(h, 16) / 255).map((c) => (c <= 0.03928 ? c / 12.92 : Math.pow((c + 0.055) / 1.055, 2.4)));
+    const luminance = 0.2126 * r + 0.7152 * g + 0.0722 * b;
+    return luminance > 0.5 ? '#111827' : '#ffffff';
+}
 function cleanPadding(value) {
     const padding = cleanText(value, 80);
     return /^([0-9]{1,2}px)(\s+[0-9]{1,2}px){0,3}$/.test(padding) ? padding : '12px 28px';
@@ -115,9 +128,10 @@ function splitWidths(split) {
         return [40, 60];
     return [50, 50];
 }
-export function normalizeComposerBlocks(raw) {
+export function normalizeComposerBlocks(raw, defaultButtonColor) {
     if (!Array.isArray(raw))
         return [];
+    const buttonFallback = cleanColor(defaultButtonColor, '#00BFFF');
     return raw.slice(0, 12).flatMap((item, index) => {
         if (!item || typeof item !== 'object' || !BLOCK_TYPES.has(String(item.type)))
             return [];
@@ -127,9 +141,14 @@ export function normalizeComposerBlocks(raw) {
         if (type === 'text')
             return [{ ...base, content: cleanRichText(block.content), align: cleanAlign(block.align) }];
         if (type === 'heading')
-            return [{ ...base, content: cleanText(block.content, 300), level: ([1, 2, 3].includes(Number(block.level)) ? Number(block.level) : 2), align: cleanAlign(block.align) }];
-        if (type === 'button')
-            return [{ ...base, label: cleanText(block.label, 120) || 'Learn more', url: cleanUrl(block.url) || '{{cta_url}}', align: cleanAlign(block.align) === 'left' ? 'center' : cleanAlign(block.align), bg_color: cleanColor(block.bg_color, '#00BFFF'), text_color: cleanColor(block.text_color, '#ffffff'), border_radius: Math.max(0, Math.min(24, Number(block.border_radius ?? 6))), padding: cleanPadding(block.padding) }];
+            return [{ ...base, content: cleanText(block.content, 300), level: ([1, 2, 3].includes(Number(block.level)) ? Number(block.level) : 2), align: cleanAlign(block.align), text_color: cleanColor(block.text_color, '') || undefined }];
+        if (type === 'button') {
+            const aiBgValid = /^#[0-9A-Fa-f]{3}([0-9A-Fa-f]{3})?([0-9A-Fa-f]{2})?$/.test(cleanText(block.bg_color, 32));
+            const bg = aiBgValid ? cleanColor(block.bg_color, buttonFallback) : buttonFallback;
+            const aiTextValid = /^#[0-9A-Fa-f]{3}([0-9A-Fa-f]{3})?([0-9A-Fa-f]{2})?$/.test(cleanText(block.text_color, 32));
+            const text = aiTextValid ? cleanColor(block.text_color, '#ffffff') : (aiBgValid ? '#ffffff' : fallbackTextColorForBg(bg));
+            return [{ ...base, label: cleanText(block.label, 120) || 'Learn more', url: cleanUrl(block.url) || '{{cta_url}}', align: cleanAlign(block.align) === 'left' ? 'center' : cleanAlign(block.align), bg_color: bg, text_color: text, border_radius: Math.max(0, Math.min(24, Number(block.border_radius ?? 6))), padding: cleanPadding(block.padding) }];
+        }
         if (type === 'columns')
             return [{ ...base, left: cleanRichText(block.left), right: cleanRichText(block.right), split: block.split === '60/40' || block.split === '40/60' ? block.split : '50/50' }];
         if (type === 'image') {
@@ -159,7 +178,8 @@ export function blocksToHtml(blocks, ctx) {
             return String(b.content ?? '').split(/\n\n+/).filter((p) => p.trim()).map((p) => p.trim() === '---' ? '<hr style="border:none;border-top:1px solid #374151;margin:24px 0;" />' : `<p style="margin-bottom:16px;line-height:1.6;text-align:${cleanAlign(b.align)};">${p.trim()}</p>`).join('\n');
         if (b.type === 'heading') {
             const level = [1, 2, 3].includes(Number(b.level)) ? Number(b.level) : 2;
-            return `<h${level} style="font-family:Arial,sans-serif;font-size:${HEADING_SIZES[level]}px;font-weight:700;line-height:1.2;margin:0 0 16px;color:#111827;text-align:${cleanAlign(b.align)};">${escapeHtml(b.content || 'Your heading here')}</h${level}>`;
+            const color = /^#[0-9A-Fa-f]{3}([0-9A-Fa-f]{3})?([0-9A-Fa-f]{2})?$/.test(String(b.text_color ?? '')) ? b.text_color : '#111827';
+            return `<h${level} style="font-family:Arial,sans-serif;font-size:${HEADING_SIZES[level]}px;font-weight:700;line-height:1.2;margin:0 0 16px;color:${escapeAttr(String(color))};text-align:${cleanAlign(b.align)};">${escapeHtml(b.content || 'Your heading here')}</h${level}>`;
         }
         if (b.type === 'button')
             return `<table role="presentation" width="100%" cellpadding="0" cellspacing="0"><tr><td align="${cleanAlign(b.align || 'center')}"><a href="${escapeAttr(b.url || '{{cta_url}}')}" target="_blank" style="display:inline-block;padding:${escapeAttr(b.padding || '12px 28px')};background:${escapeAttr(b.bg_color || '#00BFFF')};color:${escapeAttr(b.text_color || '#ffffff')};font-weight:600;text-decoration:none;border-radius:${Math.max(0, Math.min(24, Number(b.border_radius ?? 6)))}px;font-family:Arial,sans-serif;font-size:15px;line-height:1;">${escapeHtml(b.label || 'Get Started')}</a></td></tr></table>`;

package/build/lib/connector-table-discovery.d.ts

@@ -0,0 +1,12 @@
+type ByodTableInfo = {
+    id: string;
+    schema: string;
+    name: string;
+    label: string;
+    columns: string[];
+    source: 'rest' | 'auth';
+    score: number;
+};
+/** Discover tables through the already-resolved per-project Supabase client. */
+export declare function listConnectorTablesFromDb(client: any): Promise<ByodTableInfo[]>;
+export {};