@sendinel/mcp-server 1.0.127 → 1.0.129

package/README.md

@@ -18,7 +18,7 @@ preserves REST outcomes, and redacts failures. See the
 [event-triggered campaign guide](../../docs/event-triggered-campaigns.md) for
 inputs, idempotency, subscription requirements, and conditional step examples.
 
-Sendinel currently exposes 35 tool groups and 342 tools (gateway mode exposes 4 meta-tools, sharing how_to with full mode). These counts are checked against the tool registry in CI, so this table matches what ships.
+Sendinel currently exposes 35 tool groups and 343 tools (gateway mode exposes 4 meta-tools, sharing how_to with full mode). These counts are checked against the tool registry in CI, so this table matches what ships.
 
 | Group | Count | Purpose |
 |-------|-------|---------|
@@ -56,7 +56,7 @@ Sendinel currently exposes 35 tool groups and 342 tools (gateway mode exposes 4
 | `surveys` | 5 | Survey creation, listing, status, results |
 | `templates` | 7 | Email template CRUD, version restore, migration translation |
 | `warmup` | 4 | IP/domain warmup schedule control |
-| `webhooks` | 4 | Webhook subscription management |
+| `webhooks` | 5 | Webhook subscription management |
 
 ## Install / run
 

package/build/lib/webhook-events.js

@@ -1,5 +1,6 @@
+import { deliverProjectWebhook } from "@sendinel/domain/sandbox-webhook";
 import { createHmac, randomUUID } from 'node:crypto';
-import { db } from '../db.js';
+import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
 /**
  * Fire a webhook event to all active subscriptions matching the event type.
@@ -38,7 +39,7 @@ export async function fireWebhookEvent(event, data, projectId) {
             const signature = createHmac('sha256', sub.secret)
                 .update(body)
                 .digest('hex');
-            const res = await fetch(sub.url, {
+            const res = await deliverProjectWebhook(adminDb(), pid, sub.url, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',

package/build/tools/sms.js

@@ -92,7 +92,7 @@ async function readJsonSafe(res) {
     return res.json().catch(() => ({}));
 }
 async function sendViaProvider(provider, credentialsEnc, fromNumber, toNumber, body, webhookUrl, trackingToken) {
-    await assertProjectAllowsSms(adminDb(), getProjectId());
+    await assertProjectAllowsSms(adminDb(), getProjectId(), toNumber);
     const credentials = parseCredentials(credentialsEnc);
     const meta = countSmsSegments(body);
     if (provider === 'twilio') {

package/build/tools/social-posts.js

@@ -5,7 +5,7 @@ import { db, adminDb } from '../db.js';
 import { decrypt } from '../crypto.js';
 import { getProjectId } from '../project.js';
 import { getAnthropicModelId } from '../anthropic-model.js';
-import { AI_MAX_TOKENS, outputConfig, anthropicCheckedText } from '@sendinel/domain';
+import { AI_MAX_TOKENS, outputConfig, anthropicCheckedText, recordSandboxSocialPost, configuredSandboxSocialProfile, assertProjectSandboxTargets } from '@sendinel/domain';
 import { buildVoicePrompt } from '../lib/voice.js';
 import { buildSocialSystemPrompt, buildSocialUserPrompt, parseSocialResponse, selectArchetype, } from '../lib/social-engine/index.js';
 import { fireWebhookEvent } from '../lib/webhook-events.js';
@@ -40,6 +40,14 @@ function buildSocialTrackedUrl(params) {
     };
 }
 async function scheduleUploadPost(apiKey, params) {
+    const mock = await recordSandboxSocialPost(adminDb(), {
+        projectId: params.projectId, profileId: params.profileId, platforms: [params.platform],
+        text: params.link ? `${params.content}\n\n${params.link}` : params.content,
+        mediaUrls: params.mediaUrls, scheduledAt: params.scheduledAt,
+    });
+    if (mock)
+        return mock;
+    await assertProjectSandboxTargets(adminDb(), params.projectId, 'social', params.profileId ? [`uploadpost:${params.platform}:${params.profileId}`] : []);
     const res = await fetch(`${UPLOADPOST_API_BASE}/uploadposts/schedule`, {
         method: 'POST',
         headers: {
@@ -47,6 +55,7 @@ async function scheduleUploadPost(apiKey, params) {
             'Content-Type': 'application/json',
         },
         body: JSON.stringify({
+            user: params.profileId,
             platform: params.platform,
             content: params.link ? `${params.content}\n\n${params.link}` : params.content,
             scheduled_at: params.scheduledAt?.toISOString(),
@@ -711,26 +720,31 @@ export function registerSocialPostTools(server) {
             return j({ error: 'Campaign not found', code: 'NOT_FOUND' });
         const { data: project, error: projectError } = await admin
             .from('projects')
-            .select('org_id')
+            .select('org_id, sandbox_mode, sandbox_allowed_social_profiles')
             .eq('id', campaign.project_id)
             .maybeSingle();
         if (projectError)
             return txt(`Error: ${projectError.message}`);
         if (!project?.org_id)
             return j({ error: 'Project not found', code: 'NOT_FOUND' });
-        const { data: connection, error: connectionError } = await admin
-            .from('social_platform_connections')
-            .select('encrypted_access_token')
-            .eq('org_id', project.org_id)
-            .eq('platform', p.publisher)
-            .maybeSingle();
+        const mockProfile = configuredSandboxSocialProfile(project, campaign.platform);
+        const { data: connection, error: connectionError } = mockProfile
+            ? { data: { encrypted_access_token: null, account_id: mockProfile }, error: null }
+            : await admin
+                .from('social_platform_connections')
+                .select('encrypted_access_token, account_id')
+                .eq('org_id', project.org_id)
+                .eq('platform', p.publisher)
+                .maybeSingle();
         if (connectionError)
             return txt(`Error: ${connectionError.message}`);
-        if (!connection?.encrypted_access_token) {
+        if (!mockProfile && !connection?.encrypted_access_token) {
             return j({ error: `No ${p.publisher} connection found. Connect it in Settings -> Integrations.`, code: 'NO_CONNECTION' });
         }
         try {
-            const result = await publishViaByoPublisher(p.publisher, decrypt(connection.encrypted_access_token), {
+            const result = await publishViaByoPublisher(p.publisher, mockProfile ? "" : decrypt(connection.encrypted_access_token), {
+                projectId,
+                profileId: connection.account_id ?? undefined,
                 content: p.content,
                 platform: campaign.platform,
                 scheduledAt,

package/build/tools/webhooks.js

@@ -1,6 +1,7 @@
 import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
-import { db } from '../db.js';
+import { listSandboxWebhookEvents } from '@sendinel/domain';
+import { db, adminDb } from '../db.js';
 import { getProjectId } from '../project.js';
 import { validateWebhookUrl, generateWebhookSecret } from '../lib/webhook-events.js';
 const txt = (text) => ({ content: [{ type: 'text', text }] });
@@ -25,6 +26,19 @@ const VALID_EVENTS = [
     'asset_link.viewed',
 ];
 export function registerWebhookTools(server) {
+    server.registerTool('list_sandbox_webhook_events', {
+        title: 'List Sandbox Webhook Events',
+        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+        description: 'Read recent captured webhook requests for the active sandbox project (seven-day retention). Never returns sink tokens.',
+        inputSchema: { limit: z.number().int().min(1).max(100).optional().default(20) },
+    }, async ({ limit }) => {
+        try {
+            return j({ events: await listSandboxWebhookEvents(adminDb(), getProjectId(), limit) });
+        }
+        catch {
+            return txt('Sandbox webhook events unavailable.');
+        }
+    });
     server.registerTool('subscribe_webhook', {
         title: 'Subscribe Webhook',
         annotations: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.127",
+  "version": "1.0.129",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",