@sendinel/mcp-server 1.0.10 → 1.0.12

package/build/lib/connector-table-discovery.js

@@ -0,0 +1,117 @@
+const HIGH_SCORE_NAMES = new Set([
+    'users', 'subscribers', 'contacts', 'profiles', 'customers', 'members', 'leads',
+    'audience', 'mailing_list', 'email_list', 'newsletter_subscribers', 'newsletter',
+    'people', 'persons',
+]);
+const MED_SCORE_FRAGMENTS = ['user', 'subscriber', 'contact', 'customer', 'member', 'profile', 'lead'];
+const CAMPAIGN_SIGNAL_COLUMNS = new Set([
+    'plan', 'plan_name', 'plan_id', 'plan_tier', 'plan_interval', 'subscription_plan',
+    'subscription_status', 'subscription_id', 'subscription_tier', 'tier', 'price_tier',
+    'subscription_period_end', 'subscription_period_start', 'subscription_trial_end',
+    'current_period_end', 'current_period_start', 'billing_period_end', 'billing_period_start',
+    'billing_cycle_anchor', 'billing_interval', 'next_billing_date', 'renewal_date',
+    'trial_ends_at', 'trial_end', 'trial_period_days', 'is_trialing', 'in_trial',
+    'cancel_at', 'canceled_at', 'cancelled_at', 'cancel_at_period_end', 'cancellation_date',
+    'cancellation_reason', 'churned_at', 'churn_reason', 'trial_started_at', 'trial_start',
+    'onboarded_at', 'onboarding_completed', 'activated_at', 'converted_at', 'upgraded_at',
+    'downgraded_at', 'paused_at', 'reactivated_at', 'last_active_at', 'last_seen_at',
+    'last_login_at', 'last_activity_at', 'status', 'account_status', 'user_status', 'is_active',
+    'email_verified', 'is_verified', 'email_confirmed', 'verified', 'email_opt_in',
+    'marketing_consent', 'notifications_enabled', 'email_notifications', 'push_notifications',
+    'sms_notifications', 'notify_email', 'notify_sms', 'notify_push', 'in_app_notifications',
+    'notify_marketing', 'notify_push_enabled', 'notify_in_app', 'notify_payment_reminders',
+    'notify_weekly_digest', 'notify_monthly_reports', 'referral_source', 'referral_code',
+    'invite_code', 'signup_source', 'signup_channel', 'traffic_source', 'acquisition_source',
+    'utm_source', 'utm_medium', 'utm_campaign', 'utm_content', 'utm_term', 'utm_channel',
+    'first_touch_source', 'last_touch_source', 'device_type', 'platform', 'signup_device',
+    'sign_up_device', 'last_device', 'last_sign_in_device', 'last_os', 'last_browser',
+    'signup_platform', 'os', 'operating_system', 'browser', 'app_version', 'country',
+    'country_code', 'region', 'locale', 'language', 'lang', 'preferred_language',
+    'language_preference', 'city', 'timezone', 'state', 'zip_code', 'postal_code', 'role',
+    'user_role', 'account_role', 'is_admin', 'industry', 'vertical', 'company', 'company_name',
+    'firm_name', 'account_name', 'organization', 'org_name', 'job_title', 'title', 'position',
+    'birthday', 'birthdate', 'birth_date', 'mrr', 'arr', 'ltv', 'cltv', 'arpu', 'revenue',
+    'monthly_spend', 'annual_spend', 'credits', 'credits_remaining', 'seats', 'team_size',
+    'team_members', 'user_metadata.plan', 'user_metadata.subscription_status',
+    'user_metadata.trial_ends_at', 'user_metadata.country', 'user_metadata.locale',
+    'user_metadata.role', 'user_metadata.company', 'user_metadata.job_title',
+    'user_metadata.industry', 'user_metadata.organization', 'user_metadata.city',
+    'user_metadata.timezone', 'user_metadata.marketing_consent', 'user_metadata.email_opt_in',
+    'user_metadata.notifications_enabled', 'user_metadata.push_notifications',
+    'user_metadata.device_type', 'user_metadata.platform', 'user_metadata.signup_device',
+    'user_metadata.os', 'user_metadata.app_version',
+]);
+function scoreTable(name, columns) {
+    const lower = name.toLowerCase();
+    const normalizedColumns = columns.map((column) => column.toLowerCase());
+    const hasEmail = normalizedColumns.some((column) => column === 'email' || column.endsWith('.email'));
+    let base = 0;
+    if (lower === 'users' || lower === 'auth.users')
+        base = 100;
+    else if (HIGH_SCORE_NAMES.has(lower))
+        base = hasEmail ? 90 : 80;
+    else if (MED_SCORE_FRAGMENTS.some((fragment) => lower.includes(fragment)))
+        base = hasEmail ? 70 : 55;
+    else if (hasEmail)
+        base = 40;
+    const campaignBonus = Math.min(normalizedColumns.filter((column) => CAMPAIGN_SIGNAL_COLUMNS.has(column)).length * 5, 60);
+    return base + campaignBonus;
+}
+function parseOpenApiTables(doc) {
+    const paths = doc.paths ?? {};
+    const definitions = doc.definitions ?? doc.components?.schemas ?? {};
+    return Object.keys(paths)
+        .filter((path) => /^\/[^/]+$/.test(path))
+        .map((path) => {
+        const name = decodeURIComponent(path.slice(1));
+        const schema = definitions[name] ?? definitions[`public.${name}`] ?? {};
+        const columns = Object.keys(schema.properties ?? {});
+        return {
+            id: `public.${name}`,
+            schema: 'public',
+            name,
+            label: `public.${name}`,
+            columns,
+            source: 'rest',
+            score: scoreTable(name, columns),
+        };
+    })
+        .filter((table) => !table.name.startsWith('pg_'));
+}
+/** Discover tables through the already-resolved per-project Supabase client. */
+export async function listConnectorTablesFromDb(client) {
+    const tables = [];
+    try {
+        const rest = client?.rest;
+        if (rest?.url) {
+            const headers = new Headers(rest.headers);
+            headers.set('Accept', 'application/openapi+json');
+            const response = await (rest.fetch ?? fetch)(rest.url, { headers });
+            if (response.ok)
+                tables.push(...parseOpenApiTables(await response.json()));
+        }
+    }
+    catch {
+        // Discovery degrades to auth.users when the OpenAPI document is unavailable.
+    }
+    try {
+        const { data, error } = await client.auth.admin.listUsers({ page: 1, perPage: 1 });
+        if (!error && data) {
+            tables.push({
+                id: 'auth.users',
+                schema: 'auth',
+                name: 'users',
+                label: 'auth.users',
+                columns: ['id', 'email', 'phone', 'created_at', 'updated_at', 'last_sign_in_at', 'user_metadata', 'app_metadata'],
+                source: 'auth',
+                score: 100,
+            });
+        }
+    }
+    catch {
+        // Some service keys cannot use the Auth Admin API.
+    }
+    return tables
+        .filter((table, index, list) => list.findIndex((candidate) => candidate.id === table.id) === index)
+        .sort((a, b) => b.score - a.score || a.label.localeCompare(b.label));
+}

package/build/lib/custom-properties-diff.d.ts

@@ -0,0 +1,16 @@
+export type CustomPropertyChange = {
+    field: string;
+    old_value: unknown;
+    new_value: unknown;
+};
+/**
+ * Diffs an incoming custom_properties patch against the prior stored value.
+ * Only keys present in `patch` are considered (matches the merge semantics
+ * already used by every custom_properties writer: a key set to `null` means
+ * "delete this key"). Comparison is shallow (`!==`) - nested-object values
+ * that are re-sent unchanged will show as a false-positive change; that's an
+ * accepted tradeoff (over-reporting a no-op as changed is safer than silently
+ * missing a real change) since none of the three call sites this feeds
+ * currently write nested-object custom_properties values.
+ */
+export declare function diffCustomProperties(before: Record<string, unknown> | null | undefined, patch: Record<string, unknown>): CustomPropertyChange[];

package/build/lib/custom-properties-diff.js

@@ -0,0 +1,22 @@
+/**
+ * Diffs an incoming custom_properties patch against the prior stored value.
+ * Only keys present in `patch` are considered (matches the merge semantics
+ * already used by every custom_properties writer: a key set to `null` means
+ * "delete this key"). Comparison is shallow (`!==`) - nested-object values
+ * that are re-sent unchanged will show as a false-positive change; that's an
+ * accepted tradeoff (over-reporting a no-op as changed is safer than silently
+ * missing a real change) since none of the three call sites this feeds
+ * currently write nested-object custom_properties values.
+ */
+export function diffCustomProperties(before, patch) {
+    const prev = before ?? {};
+    const changes = [];
+    for (const key of Object.keys(patch)) {
+        const oldValue = prev[key] ?? null;
+        const newValue = patch[key] ?? null;
+        if (oldValue !== newValue) {
+            changes.push({ field: key, old_value: oldValue, new_value: newValue });
+        }
+    }
+    return changes;
+}

package/build/lib/schedule.d.ts

@@ -1,4 +1,4 @@
-export declare const SCHEDULE_WINDOWS: readonly ["today", "tomorrow", "7d", "30d"];
+export declare const SCHEDULE_WINDOWS: readonly ['today', 'tomorrow', '7d', '30d'];
 export type ScheduleWindow = (typeof SCHEDULE_WINDOWS)[number];
 export type ScheduleCampaign = {
     id: string;
@@ -28,9 +28,14 @@ export declare function getScheduleWindowBounds(window?: ScheduleWindow, now?: D
     start: Date;
     end: Date;
 } | {
-    window: "today" | "7d" | "30d";
+    window: "30d" | "7d" | "today";
     start: Date;
     end: Date;
 };
 export declare function isoDate(value: string | Date): string;
+export declare function parseFutureDate(value: string, fieldName?: string): {
+    scheduledAt: string;
+} | {
+    error: string;
+};
 export declare function groupScheduleByCampaign(rows: ScheduleEnrollmentRow[]): ScheduleCampaignGroup[];

package/build/lib/schedule.js

@@ -22,6 +22,14 @@ export function getScheduleWindowBounds(window = 'today', now = new Date()) {
 export function isoDate(value) {
     return new Date(value).toISOString().slice(0, 10);
 }
+export function parseFutureDate(value, fieldName = 'scheduled_at') {
+    const date = new Date(value);
+    if (Number.isNaN(date.getTime()))
+        return { error: `${fieldName} must be a valid ISO timestamp` };
+    if (date.getTime() <= Date.now())
+        return { error: `${fieldName} must be in the future` };
+    return { scheduledAt: date.toISOString() };
+}
 function getCampaign(row) {
     if (Array.isArray(row.campaigns))
         return row.campaigns[0] ?? null;

package/build/lib/v1-client.d.ts

@@ -0,0 +1,3 @@
+import { type V1CallOptions, type V1CallResult } from '../db.js';
+export type { V1CallOptions, V1CallResult };
+export declare function callSendinelV1(path: string, opts?: V1CallOptions): Promise<V1CallResult>;

package/build/lib/v1-client.js

@@ -0,0 +1,45 @@
+import { requestContext } from '../db.js';
+import { getProjectId } from '../project.js';
+function v1ApiBase() {
+    return (process.env.NEXT_PUBLIC_APP_URL
+        ?? process.env.SENDINEL_APP_URL
+        ?? process.env.APP_URL
+        ?? 'https://sendinel.ai').replace(/\/$/, '');
+}
+export async function callSendinelV1(path, opts = {}) {
+    const bridged = requestContext()?.v1Caller;
+    if (bridged)
+        return bridged(path, opts);
+    const apiKey = process.env.SENDINEL_API_KEY;
+    if (!apiKey) {
+        const viaHttpTransport = process.env.MCP_TRANSPORT === 'http';
+        return {
+            ok: false,
+            status: 0,
+            error: viaHttpTransport
+                ? "This tool requires SENDINEL_API_KEY in this self-hosted HTTP MCP server's environment. It cannot be set from a chat session."
+                : "This tool requires SENDINEL_API_KEY in your local stdio MCP client's environment. It cannot be set from a chat session.",
+        };
+    }
+    const query = opts.query ? `?${new URLSearchParams(opts.query).toString()}` : '';
+    const response = await fetch(`${v1ApiBase()}${path}${query}`, {
+        method: opts.method ?? 'POST',
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            'X-Sendinel-Project-Id': getProjectId(),
+            'Content-Type': 'application/json',
+        },
+        ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+    });
+    const text = await response.text();
+    let parsed = text;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        // Preserve non-JSON responses as text.
+    }
+    return response.ok
+        ? { ok: true, data: parsed, status: response.status }
+        : { ok: false, error: parsed || `HTTP ${response.status}`, status: response.status };
+}

package/build/lib/voice.d.ts

@@ -1,32 +1,9 @@
 /**
- * Brand voice prompt builder for AI email generation.
- * Mirror of packages/dashboard/lib/voice.ts for the MCP server package.
+ * Re-export of `@sendinel/domain` voice builders.
+ * Implementation lives in packages/domain/src/voice.ts — do not add logic here.
+ *
+ * Second argument is org/project Brand Brain (`BrandSettings`). Call sites may
+ * still name the local variable `projectSettings`; the shared signature uses `orgSettings`.
  */
-interface BrandVoiceConfig {
-    tone?: string;
-    greeting_style?: string;
-    sign_off?: string;
-    rules?: string[];
-    anti_patterns?: string[];
-    max_paragraphs?: number;
-}
-export interface BrandSettings {
-    mission?: string;
-    audience?: string;
-    tone_words?: string[];
-    forbidden_phrases?: string[];
-    differentiators?: string;
-    default_signoff_name?: string;
-    ps_line?: string;
-}
-export declare function buildVoicePrompt(siteVoice: Record<string, unknown> | null | undefined, projectSettings?: BrandSettings | null): string;
-export declare function buildEmailSystemPrompt(brandContext: string, voicePrompt: string): string;
-export declare const KNOWN_VARIABLES: Set<string>;
-export declare const STOCK_PHRASES: string[];
-export interface ValidationResult {
-    valid: boolean;
-    errors: string[];
-    warnings: string[];
-}
-export declare function validateTemplate(html: string, voiceConfig?: BrandVoiceConfig | null): ValidationResult;
-export {};
+export { buildEmailSystemPrompt, buildVoicePrompt, deriveTemplateVariables, KNOWN_VARIABLES, STOCK_PHRASES, TEMPLATE_VARIABLE_TOKEN_PATTERN, validateTemplate, } from "@sendinel/domain";
+export type { BrandSettings, ValidationResult } from "@sendinel/domain";

package/build/lib/voice.js

@@ -1,140 +1,8 @@
 /**
- * Brand voice prompt builder for AI email generation.
- * Mirror of packages/dashboard/lib/voice.ts for the MCP server package.
+ * Re-export of `@sendinel/domain` voice builders.
+ * Implementation lives in packages/domain/src/voice.ts — do not add logic here.
+ *
+ * Second argument is org/project Brand Brain (`BrandSettings`). Call sites may
+ * still name the local variable `projectSettings`; the shared signature uses `orgSettings`.
  */
-const DEFAULT_VOICE = {
-    tone: "Direct. Warm. Zero corporate. Write like you're sending a quick email to someone you respect but haven't met in person yet.",
-    greeting_style: 'Hey {{first_name}},',
-    sign_off: "— Kevin",
-    rules: [
-        "First name always. Never \"Dear Valued User\" or \"Hi there.\"",
-        "Short sentences. If a paragraph hits 3 sentences, break it.",
-        "One CTA per email. One. Don't make them choose.",
-        "Plain text wins. HTML is just for the button.",
-        "No exclamation marks unless something genuinely warrants one.",
-        'No "just checking in" or "hope this finds you well."',
-        "Say what it is, why it matters, what to do. Done.",
-    ],
-    anti_patterns: [
-        "emojis in body text",
-        "stock phrases",
-        "walls of text",
-        "multiple asks or CTAs",
-        "em dashes (—)",
-    ],
-    max_paragraphs: 5,
-};
-export function buildVoicePrompt(siteVoice, projectSettings) {
-    const v = { ...DEFAULT_VOICE };
-    if (projectSettings) {
-        if (projectSettings.tone_words?.length) {
-            v.tone = `${projectSettings.tone_words.join('. ')}. Write like you're emailing someone you respect.`;
-        }
-        if (projectSettings.default_signoff_name) {
-            v.sign_off = `- ${projectSettings.default_signoff_name}`;
-        }
-        if (projectSettings.forbidden_phrases?.length) {
-            v.anti_patterns = [...v.anti_patterns, ...projectSettings.forbidden_phrases];
-        }
-    }
-    if (siteVoice && Object.keys(siteVoice).length > 0) {
-        const sv = siteVoice;
-        if (sv.tone)
-            v.tone = sv.tone;
-        if (sv.greeting_style)
-            v.greeting_style = sv.greeting_style;
-        if (sv.sign_off)
-            v.sign_off = sv.sign_off;
-        if (sv.rules?.length)
-            v.rules = sv.rules;
-        if (sv.anti_patterns?.length)
-            v.anti_patterns = sv.anti_patterns;
-        if (sv.max_paragraphs)
-            v.max_paragraphs = sv.max_paragraphs;
-    }
-    const lines = [
-        "BRAND VOICE RULES (you MUST follow these):",
-        `- Tone: ${v.tone}`,
-        `- Greeting: "${v.greeting_style}" — never "Dear" or formal salutations`,
-        `- Sign off: "${v.sign_off}" (no title, no logo, no social links)`,
-        ...v.rules.map((r) => `- ${r}`),
-        `- Maximum ${v.max_paragraphs} short paragraphs.`,
-        `- NEVER use: ${v.anti_patterns.join(", ")}.`,
-    ];
-    return lines.join("\n");
-}
-export function buildEmailSystemPrompt(brandContext, voicePrompt) {
-    return `You are an expert email copywriter writing for a specific brand. ${brandContext}.
-
-${voicePrompt}
-
-Return a JSON object with keys: "subject" (string), "body_html" (string, clean HTML email with inline styles), "body_text" (string, plain text version). Return ONLY valid JSON, no explanation. Use {{first_name}} as the personalization variable for the recipient's name.`;
-}
-export const KNOWN_VARIABLES = new Set([
-    "first_name",
-    "last_name",
-    "email",
-    "unsubscribe_url",
-]);
-export const STOCK_PHRASES = [
-    "just checking in",
-    "hope this finds you well",
-    "hope you're doing well",
-    "dear valued",
-    "dear customer",
-    "dear user",
-    "hi there",
-    "to whom it may concern",
-    "we are pleased to",
-    "we are excited to",
-    "don't hesitate to",
-    "please do not hesitate",
-];
-export function validateTemplate(html, voiceConfig) {
-    const errors = [];
-    const warnings = [];
-    const varPattern = /\{\{(\w+)\}\}/g;
-    let match;
-    while ((match = varPattern.exec(html)) !== null) {
-        if (!KNOWN_VARIABLES.has(match[1])) {
-            errors.push(`Unknown variable: {{${match[1]}}}`);
-        }
-    }
-    const unclosed = html.match(/\{\{[^}]*$/gm);
-    if (unclosed) {
-        errors.push("Unclosed template variable bracket detected");
-    }
-    const textContent = html.replace(/<[^>]+>/g, " ").toLowerCase();
-    const exclamations = (textContent.match(/!/g) || []).length;
-    if (exclamations > 1) {
-        warnings.push(`${exclamations} exclamation marks found — voice guide limits to max 1`);
-    }
-    for (const phrase of STOCK_PHRASES) {
-        if (textContent.includes(phrase)) {
-            warnings.push(`Stock phrase detected: "${phrase}"`);
-        }
-    }
-    const hrefPattern = /href=["']([^"'#]+)["']/gi;
-    const hrefs = new Set();
-    let hrefMatch;
-    while ((hrefMatch = hrefPattern.exec(html)) !== null) {
-        const url = hrefMatch[1];
-        if (!url.startsWith("mailto:") &&
-            !url.includes("unsubscribe") &&
-            !url.includes("preferences")) {
-            hrefs.add(url);
-        }
-    }
-    if (hrefs.size > 2) {
-        warnings.push(`${hrefs.size} distinct CTA links found — voice guide recommends one CTA per email`);
-    }
-    const signOff = voiceConfig?.sign_off || DEFAULT_VOICE.sign_off;
-    if (signOff && !html.includes(signOff) && !html.includes(signOff.replace("—", "–"))) {
-        warnings.push(`Missing expected sign-off: "${signOff}"`);
-    }
-    return {
-        valid: errors.length === 0,
-        errors,
-        warnings,
-    };
-}
+export { buildEmailSystemPrompt, buildVoicePrompt, deriveTemplateVariables, KNOWN_VARIABLES, STOCK_PHRASES, TEMPLATE_VARIABLE_TOKEN_PATTERN, validateTemplate, } from "@sendinel/domain";

package/build/prompts.d.ts

@@ -0,0 +1,6 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export interface PromptRegistrationOptions {
+    scopes?: string[];
+    toolGroups?: string[];
+}
+export declare function registerAllPrompts(server: McpServer, options?: PromptRegistrationOptions): void;

package/build/prompts.js

@@ -0,0 +1,18 @@
+import { OPERATOR_SKILLS } from '@sendinel/domain';
+export function registerAllPrompts(server, options) {
+    const scopes = options?.scopes ?? [];
+    if (scopes.includes('gateway'))
+        return;
+    if (options?.toolGroups !== undefined && !options.toolGroups.includes('skills'))
+        return;
+    for (const skill of OPERATOR_SKILLS) {
+        server.registerPrompt(skill.name, {
+            title: skill.name,
+            description: skill.description,
+        }, async () => ({
+            messages: [
+                { role: 'user', content: { type: 'text', text: skill.body } },
+            ],
+        }));
+    }
+}

package/build/scoped-token.d.ts

@@ -1,4 +1,4 @@
-export declare const SCOPED_TOKEN_SCOPES: readonly ["data", "service:provision"];
+export declare const SCOPED_TOKEN_SCOPES: readonly ['data', 'service:provision'];
 export type ScopedTokenScope = (typeof SCOPED_TOKEN_SCOPES)[number];
 export type ScopedTokenClaims = {
     userId: string;

package/build/server.d.ts

@@ -8,6 +8,7 @@ export declare const ALL_TOOL_GROUPS: string[];
 export type ToolGroup = keyof typeof GROUP_REGISTRY;
 export type ToolGroupMap = Record<string, string>;
 export declare function getRequiredScope(name: string): string;
+export declare const GATEWAY_TOOL_NAMES: string[];
 /**
  * Collects tool-name → group metadata from the same group registry used by
  * registerAllTools(). Scope filtering and definition scanning are applied