@sendinel/mcp-server 1.0.10 → 1.0.11

package/build/tools/compound.js

@@ -1,11 +1,29 @@
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import { db } from '../db.js';
+import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
-import { buildVoicePrompt } from '../lib/voice.js';
+import { buildVoicePrompt, deriveTemplateVariables } from '../lib/voice.js';
 import { getAnthropicFastModelId } from '../anthropic-model.js';
 import { BLOCK_GENERATION_SCHEMA, blocksToHtml, blocksToText, normalizeComposerBlocks } from '../lib/composer-blocks.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
+const HEX6 = /^#[0-9A-Fa-f]{6}$/;
+function stringArray(value) {
+    return Array.isArray(value) ? value.filter((item) => typeof item === 'string' && item.trim().length > 0) : [];
+}
+export function resolveBrandVisualContext(site, brandSettings) {
+    const brandColors = stringArray(brandSettings?.brand_colors);
+    const visualStyle = typeof brandSettings?.visual_style === 'string' ? brandSettings.visual_style.trim() : '';
+    const logoUrl = typeof brandSettings?.logo_url === 'string' ? brandSettings.logo_url.trim() : '';
+    const rawSiteColor = site?.unsub_brand_color ?? '';
+    const siteColor = HEX6.test(rawSiteColor) ? rawSiteColor : null;
+    const resolvedButtonColor = siteColor ?? brandColors[0] ?? undefined;
+    const promptBlock = [
+        brandColors.length ? `BRAND COLORS: ${brandColors.join(', ')}. Heading and button blocks may set text_color/bg_color from this palette when it fits the brief.` : '',
+        visualStyle ? `VISUAL STYLE: ${visualStyle}` : '',
+        logoUrl ? `LOGO: ${logoUrl}. Use the image block type to place it in a header when it improves the template.` : '',
+    ].filter(Boolean).join('\n');
+    return { brandColors, visualStyle, logoUrl, resolvedButtonColor, promptBlock };
+}
 function getAnthropicClient() {
     const apiKey = process.env.ANTHROPIC_API_KEY;
     if (!apiKey)
@@ -46,10 +64,13 @@ export function registerCompoundTools(server) {
         const projectId = getProjectId();
         const sb = db();
         const { data: site } = await sb.from('sites')
-            .select('name, brand_voice')
+            .select('name, brand_voice, unsub_brand_color')
             .eq('id', site_id)
             .eq('project_id', projectId)
             .maybeSingle();
+        const { data: project } = await adminDb().from('projects').select('brand_settings').eq('id', projectId).maybeSingle();
+        const brandSettings = (project?.brand_settings ?? {});
+        const brandVisual = resolveBrandVisualContext(site, brandSettings);
         const voiceContext = buildVoicePrompt(site?.brand_voice);
         let steps;
         try {
@@ -63,6 +84,7 @@ export function registerCompoundTools(server) {
 CAMPAIGN BRIEF: ${brief}
 
 BRAND VOICE: ${voiceContext}
+${brandVisual.promptBlock ? `\n${brandVisual.promptBlock}` : ''}
 
 Generate exactly ${num_steps} emails. For each email, provide:
 - subject
@@ -79,7 +101,7 @@ Respond with a JSON array.`,
             });
             const raw = msg.content[0].text;
             steps = extractJsonArray(raw).map((step, index) => {
-                const blocks = normalizeComposerBlocks(step.blocks);
+                const blocks = normalizeComposerBlocks(step.blocks, brandVisual.resolvedButtonColor);
                 return {
                     subject: typeof step.subject === 'string' ? step.subject : `Step ${index + 1}`,
                     body_html: blocks.length ? blocksToHtml(blocks) : '',
@@ -101,6 +123,7 @@ Respond with a JSON array.`,
             brief_template: brief,
             subject_hint: steps[0]?.subject ?? '',
             body_html: steps[0]?.body_html ?? null,
+            variables: deriveTemplateVariables({ body_html: steps[0]?.body_html ?? null, subject_hint: steps[0]?.subject ?? '' }),
             category: 'campaign',
             description: `Base template generated for campaign "${campaign_name}"`,
         })
@@ -161,10 +184,13 @@ Respond with a JSON array.`,
     }, async ({ site_id, name, brief, category }) => {
         const projectId = getProjectId();
         const { data: site } = await db().from('sites')
-            .select('name, brand_voice')
+            .select('name, brand_voice, unsub_brand_color')
             .eq('id', site_id)
             .eq('project_id', projectId)
             .maybeSingle();
+        const { data: project } = await adminDb().from('projects').select('brand_settings').eq('id', projectId).maybeSingle();
+        const brandSettings = (project?.brand_settings ?? {});
+        const brandVisual = resolveBrandVisualContext(site, brandSettings);
         let generated;
         try {
             const msg = await getAnthropicClient().messages.create({
@@ -175,6 +201,7 @@ Respond with a JSON array.`,
                         content: `Write an email for "${site?.name ?? 'our product'}".
 BRIEF: ${brief}
 BRAND VOICE: ${buildVoicePrompt(site?.brand_voice)}
+${brandVisual.promptBlock ? `${brandVisual.promptBlock}\n` : ''}
 Generate structured Composer blocks first. ComposerBlock[] must conform to this JSON Schema:
 ${JSON.stringify(BLOCK_GENERATION_SCHEMA)}
 Do not include body_html. Sendinel renders body_html from blocks.
@@ -183,7 +210,7 @@ Respond with JSON: { "subject": "...", "blocks": [...], "body_text": "..." }`,
             });
             const raw = msg.content[0].text;
             const parsed = extractJsonObject(raw);
-            const blocks = normalizeComposerBlocks(parsed.blocks);
+            const blocks = normalizeComposerBlocks(parsed.blocks, brandVisual.resolvedButtonColor);
             if (!blocks.length)
                 throw new Error('AI response did not include editable Composer blocks');
             generated = {
@@ -203,6 +230,7 @@ Respond with JSON: { "subject": "...", "blocks": [...], "body_text": "..." }`,
             brief_template: brief,
             subject_hint: generated.subject,
             body_html: generated.body_html,
+            variables: deriveTemplateVariables({ body_html: generated.body_html, subject_hint: generated.subject }),
             category: category ?? 'general',
             description: 'Generated from MCP brief',
         })
@@ -291,6 +319,7 @@ Identify the most likely root cause and give 3-5 concise actionable next steps.`
         inputSchema: {
             name: z.string().min(1),
             domain: z.string().min(1),
+            physical_address: z.string().min(1).describe('CAN-SPAM-required physical mailing address for this site. Must be an explicit value - there is no default.'),
             provider: z.enum(['resend', 'sendgrid', 'ses', 'postmark']).default('resend'),
             daily_send_volume: z.number().int().min(1).default(100),
             brand_settings: z.object({
@@ -299,7 +328,7 @@ Identify the most likely root cause and give 3-5 concise actionable next steps.`
                 signoff_name: z.string().optional(),
             }).optional(),
         },
-    }, async ({ name, domain, provider, daily_send_volume, brand_settings }) => {
+    }, async ({ name, domain, physical_address, provider, daily_send_volume, brand_settings }) => {
         const projectId = getProjectId();
         const sb = db();
         const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 48) || 'site';
@@ -330,6 +359,7 @@ Identify the most likely root cause and give 3-5 concise actionable next steps.`
             sending_domain: domain,
             from_name: fromName,
             from_email: fromEmail,
+            physical_address,
             active: true,
             domain_id: createdDomain.id,
             brand_voice: brand_settings?.tone_words ? { tone_words: brand_settings.tone_words, mission: brand_settings.mission } : {},

package/build/tools/connector.d.ts

@@ -0,0 +1,2 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerConnectorTools(server: McpServer): void;

package/build/tools/connector.js

@@ -0,0 +1,280 @@
+import { z } from 'zod';
+import { adminDb, db } from '../db.js';
+import { getProjectId } from '../project.js';
+import { listConnectorTablesFromDb } from '../lib/connector-table-discovery.js';
+import { callSendinelV1 } from '../lib/v1-client.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, } from '../lib/action-approvals.js';
+const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
+const SECRET_RESPONSE_KEYS = new Set([
+    'connector_supabase_key_enc',
+    'connector_supabase_pat_enc',
+    'connector_webhook_secret_enc',
+    'service_role_key',
+    'supabase_pat',
+    'webhook_secret',
+    // Live-view SQL embeds the decrypted connector webhook secret.
+    'sql',
+]);
+function sanitizeConnectorResponse(value) {
+    if (Array.isArray(value))
+        return value.map(sanitizeConnectorResponse);
+    if (!value || typeof value !== 'object')
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .filter(([key]) => !SECRET_RESPONSE_KEYS.has(key))
+        .map(([key, entry]) => [key, sanitizeConnectorResponse(entry)]));
+}
+async function callConnectorApi(path, init) {
+    const result = await callSendinelV1(path, init);
+    return result.ok
+        ? { ...result, data: sanitizeConnectorResponse(result.data) }
+        : { ...result, error: sanitizeConnectorResponse(result.error) };
+}
+function connectorWebhookUrl(projectId) {
+    const base = (process.env.NEXT_PUBLIC_APP_URL ?? process.env.APP_URL ?? 'https://sendinel.ai').replace(/\/$/, '');
+    return `${base}/api/webhooks/byod/${projectId}`;
+}
+async function getConnectorStatus() {
+    const projectId = getProjectId();
+    const sb = db();
+    const { data: row, error } = await sb
+        .schema('email')
+        .from('projects')
+        .select('connector_type, connector_supabase_url, connector_db_host, connector_db_name, ' +
+        'connector_airtable_base_id, connector_schema_version, connector_health_status, ' +
+        'connector_health_checked_at, connector_source_table, connector_mapping, ' +
+        'connector_view_installed, connector_view_error, connector_view_installed_at, ' +
+        'connector_webhook_secret_enc, connector_supabase_pat_enc, org:organizations(connector_supabase_pat_enc)')
+        .eq('id', projectId)
+        .maybeSingle();
+    if (error)
+        throw new Error(error.message);
+    if (!row)
+        throw new Error(`Project ${projectId} not found.`);
+    const org = Array.isArray(row.org) ? row.org[0] : row.org;
+    const info = {
+        type: row.connector_type ?? 'sendinel',
+        projectId,
+        supabaseUrl: row.connector_supabase_url ?? undefined,
+        dbHost: row.connector_db_host ?? undefined,
+        dbName: row.connector_db_name ?? undefined,
+        airtableBaseId: row.connector_airtable_base_id ?? undefined,
+        schemaVersion: row.connector_schema_version ?? 0,
+        healthStatus: row.connector_health_status ?? null,
+        healthCheckedAt: row.connector_health_checked_at ?? null,
+        sourceTable: row.connector_source_table ?? undefined,
+        mapping: row.connector_mapping ?? undefined,
+        viewInstalled: row.connector_view_installed === true,
+        viewError: row.connector_view_error ?? null,
+        viewInstalledAt: row.connector_view_installed_at ?? null,
+        webhookUrl: connectorWebhookUrl(projectId),
+        webhookSecretConfigured: Boolean(row.connector_webhook_secret_enc && row.connector_webhook_secret_enc !== 'PENDING_REVEAL'),
+        patConfigured: Boolean(row.connector_supabase_pat_enc || org?.connector_supabase_pat_enc),
+    };
+    if (info.type === 'byod') {
+        const [subscribers, domain, campaign] = await Promise.all([
+            sb.schema('email').from('subscribers').select('id', { count: 'exact', head: true }).eq('project_id', projectId),
+            sb.schema('email').from('domains').select('id', { count: 'exact', head: true }).eq('project_id', projectId).not('verified_at', 'is', null),
+            sb.schema('email').from('campaigns').select('id', { count: 'exact', head: true }).eq('project_id', projectId),
+        ]);
+        info.onboarding = {
+            hasSubscribers: (subscribers.count ?? 0) > 0,
+            hasVerifiedDomain: (domain.count ?? 0) > 0,
+            hasCampaign: (campaign.count ?? 0) > 0,
+        };
+    }
+    return info;
+}
+async function authorizeConnectorMutation(action, confirmed, approvalId, approvalParams, preview) {
+    if (!confirmed) {
+        return j({
+            confirmation_required: true,
+            tool: action,
+            ...preview,
+            message: `Review this connector change, then call ${action} again with confirmed=true to request approval.`,
+        });
+    }
+    const channelContext = currentChannelContext();
+    const decision = assertChannelCanExecute(action, approvalParams, channelContext);
+    if (!decision.allowed)
+        return j({ error: decision.reason ?? 'This channel cannot request this action.' });
+    if (decision.tier === 'autonomous')
+        return null;
+    if (!approvalId) {
+        return j(await requestApproval(action, approvalParams, undefined, channelContext));
+    }
+    const check = await checkApproval(approvalId, {
+        consume: true,
+        action,
+        params: approvalParams,
+    });
+    if (!check.approved) {
+        return j({
+            error: `Approval ${approvalId} is ${check.status}.`,
+            approval_id: approvalId,
+            approval_status: check.status,
+            message: check.status === 'pending'
+                ? 'Waiting for human approval via dashboard.'
+                : 'Request a new approval.',
+        });
+    }
+    return null;
+}
+const approvalFields = {
+    confirmed: z.boolean().optional().default(false)
+        .describe('Two-call confirmation. First call previews; call again with true to request approval.'),
+    approval_id: z.string().uuid().optional()
+        .describe('Approval token from a previous confirmed call. Required before the connector mutation executes.'),
+};
+export function registerConnectorTools(server) {
+    server.registerTool('get_connector_status', {
+        title: 'Get Connector Status',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'Return this project\'s BYOD connector status, health, mapping, onboarding progress, and explicit viewInstalled boolean. Check viewInstalled before assuming customer-database writeback is active. Never returns connector credentials, a stored Supabase PAT, or a webhook secret.',
+        inputSchema: {},
+    }, async () => {
+        let data;
+        try {
+            data = await getConnectorStatus();
+        }
+        catch (error) {
+            return j({ error: error instanceof Error ? error.message : 'Connector status query failed' });
+        }
+        if (!data || typeof data !== 'object' || typeof data.viewInstalled !== 'boolean') {
+            return j({ error: 'Connector status did not include the required viewInstalled boolean.' });
+        }
+        return j(data);
+    });
+    server.registerTool('list_connector_tables', {
+        title: 'List Connector Tables',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'List candidate tables in the connected BYOD Supabase database, scored by likely fit as the contact source table.',
+        inputSchema: {},
+    }, async () => {
+        const projectId = getProjectId();
+        const { data: project, error } = await adminDb().schema('email').from('projects')
+            .select('connector_type').eq('id', projectId).maybeSingle();
+        if (error)
+            return j({ error: error.message });
+        if (project?.connector_type !== 'byod') {
+            return j({ error: 'Connect your Supabase database in Settings before importing from it.' });
+        }
+        try {
+            return j({ tables: await listConnectorTablesFromDb(db()) });
+        }
+        catch (tableError) {
+            return j({ error: tableError instanceof Error ? tableError.message : 'Could not list database tables' });
+        }
+    });
+    server.registerTool('install_connector_schema', {
+        title: 'Install Connector Schema',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'Install the canonical Sendinel schema in the customer\'s BYOD Supabase using the dashboard auto-installer. This changes the customer database and requires confirmation plus human approval. If auto-install is unavailable, use the manual Settings flow.',
+        inputSchema: approvalFields,
+    }, async ({ confirmed, approval_id }) => {
+        const gate = await authorizeConnectorMutation('install_connector_schema', confirmed, approval_id, {}, { effect: 'Install or update Sendinel-owned schema objects in the connected customer database.' });
+        if (gate)
+            return gate;
+        const result = await callConnectorApi('/api/dashboard/connector/schema/install', { method: 'POST' });
+        return j(result.ok ? result.data : { error: result.error });
+    });
+    server.registerTool('install_connector_view', {
+        title: 'Install Connector Live View',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'Install or deliberately reinstall the snapshot sendinel_contact_view and subscriber webhook trigger in the customer\'s BYOD Supabase. This changes the customer database and requires confirmation plus human approval. A Supabase PAT may be supplied for first-time Cloud installation; stored PATs and generated SQL are never returned.',
+        inputSchema: {
+            supabase_pat: z.string().min(1).optional()
+                .describe('Supabase Personal Access Token, only when Cloud auto-install does not already have one stored.'),
+            ...approvalFields,
+        },
+    }, async ({ supabase_pat, confirmed, approval_id }) => {
+        const approvalParams = { supabase_pat_provided: Boolean(supabase_pat) };
+        const gate = await authorizeConnectorMutation('install_connector_view', confirmed, approval_id, approvalParams, {
+            effect: 'Drop and recreate the installed contact view and webhook trigger in the connected customer database.',
+            supabase_pat_provided: Boolean(supabase_pat),
+        });
+        if (gate)
+            return gate;
+        const result = await callConnectorApi('/api/dashboard/connector/view', {
+            method: 'POST',
+            body: supabase_pat ? { supabase_pat } : {},
+        });
+        return j(result.ok ? result.data : { error: result.error });
+    });
+    server.registerTool('set_connector_mapping', {
+        title: 'Set Connector Mapping',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'Save the BYOD source table and contact-column mapping. The dashboard route clears deselected custom-property keys, attempts to refresh the installed view, and resyncs contacts immediately. Requires confirmation plus human approval; call get_connector_status afterward to verify viewInstalled explicitly.',
+        inputSchema: {
+            table_id: z.string().min(1).describe('Table identifier from list_connector_tables, for example public.users.'),
+            mapping: z.object({
+                email: z.string().min(1).describe('Column mapped to contact email.'),
+                name: z.string().optional(),
+                first_name: z.string().optional(),
+                last_name: z.string().optional(),
+                joined_at: z.string().optional(),
+                is_test: z.string().optional(),
+            }),
+            metadata_columns: z.array(z.string()).max(100).optional()
+                .describe('Extra source columns copied into contact custom_properties.'),
+            ...approvalFields,
+        },
+    }, async ({ table_id, mapping, metadata_columns, confirmed, approval_id }) => {
+        const approvalParams = { table_id, mapping, metadata_columns };
+        const gate = await authorizeConnectorMutation('set_connector_mapping', confirmed, approval_id, approvalParams, {
+            effect: 'Replace the connector mapping, clear removed custom properties, refresh the live view, and resync contacts.',
+            table_id,
+            mapping,
+            metadata_columns: metadata_columns ?? [],
+        });
+        if (gate)
+            return gate;
+        const result = await callConnectorApi('/api/dashboard/connector/mapping', {
+            method: 'PATCH',
+            body: { table_id, mapping, metadata_columns },
+        });
+        return j(result.ok ? result.data : { error: result.error });
+    });
+    server.registerTool('resync_connector', {
+        title: 'Resync Connector Contacts',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'Run the dashboard connector\'s full contact sync from the configured BYOD source table into Sendinel. This can update many contact rows and requires confirmation plus human approval.',
+        inputSchema: approvalFields,
+    }, async ({ confirmed, approval_id }) => {
+        const gate = await authorizeConnectorMutation('resync_connector', confirmed, approval_id, {}, { effect: 'Resync all contacts from the configured BYOD source table.' });
+        if (gate)
+            return gate;
+        const result = await callConnectorApi('/api/dashboard/connector/resync', { method: 'POST' });
+        return j(result.ok ? result.data : { error: result.error });
+    });
+}