@sendinel/mcp-server 1.0.161 → 1.0.162

package/build/tools/content.js

@@ -2,7 +2,7 @@ import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
-import { stripActiveEmailContent, validateUnsubscribeFooterTemplate } from '@sendinel/domain';
+import { refuseActiveTextFields, stripActiveEmailContent, validateUnsubscribeFooterTemplate } from '@sendinel/domain';
 import { dbToolError, toolError } from '../lib/db-error.js';
 import { logAudit } from '../audit.js';
 import { assertHttpUrl } from '../lib/url-validation.js';
@@ -110,6 +110,11 @@ export function registerContentTools(server) {
             gate_body: z.string().max(1000).optional(),
         },
     }, async ({ title, slug, asset_url, asset_type = 'page', site_id, source_attribution, gate_headline, gate_body }) => {
+        for (const [field, value] of Object.entries({ title, source_attribution, gate_headline, gate_body })) {
+            const error = refuseActiveTextFields(field, value);
+            if (error)
+                return j({ error, code: 'validation_failed' });
+        }
         try {
             assertHttpUrl(asset_url);
         }

package/build/tools/surveys.js

@@ -1,3 +1,4 @@
+import { refuseActiveText, refuseActiveTextFields } from '@sendinel/domain';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -28,6 +29,9 @@ function normalizeQuestions(questions) {
     });
 }
 function validateQuestions(questions) {
+    const activeTextError = refuseActiveTextFields('questions', questions);
+    if (activeTextError)
+        return activeTextError;
     const ids = new Set();
     for (const question of questions) {
         if (!question.label.trim())
@@ -85,6 +89,9 @@ export function registerSurveyTools(server) {
             status: z.enum(['draft', 'active', 'closed']).optional().default('draft'),
         },
     }, async ({ title, questions, site_id, status }) => {
+        const activeTextError = refuseActiveText('title', title) ?? refuseActiveTextFields('questions', questions);
+        if (activeTextError)
+            return j({ error: activeTextError, code: 'validation_failed' });
         const normalized = normalizeQuestions(questions);
         const validationError = validateQuestions(normalized);
         if (validationError)
@@ -217,6 +224,9 @@ export function registerSurveyTools(server) {
         },
     }, async ({ survey_id, title, questions, status }) => {
         const projectId = getProjectId();
+        const activeTextError = refuseActiveText('title', title) ?? refuseActiveTextFields('questions', questions);
+        if (activeTextError)
+            return j({ error: activeTextError, code: 'validation_failed' });
         const updates = {};
         if (title !== undefined)
             updates.title = title;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.161",
+  "version": "1.0.162",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",