@sendinel/mcp-server 1.0.161 → 1.0.163

package/build/tools/campaigns.js

@@ -12,6 +12,7 @@ import { stripActiveEmailContent, assertSendAccepted, providerSendError, sendErr
 // packages/domain/src/index.ts.
 import { ensureReplyActionSecretConfigured, mintReplyAction, } from '@sendinel/domain/reply-actions';
 import { finishCampaignEdit, resumeCampaignEdit, TRIGGER_EDIT_SELECT } from '../lib/campaign-trigger-approval.js';
+import { validTimezone } from '@sendinel/domain';
 import { adminDb, db, requestContext } from '../db.js';
 import { getProjectId } from '../project.js';
 import { dbErrorResult, dbToolError, toolError } from '../lib/db-error.js';
@@ -172,6 +173,23 @@ export function campaignTriggerKind(campaign) {
         return 'tag';
     return 'manual';
 }
+const SEND_WINDOW_TIMEZONE_WARNING = 'This campaign has a send window but no timezone, so contacts without one are judged in UTC. Set a campaign or site timezone.';
+async function campaignTimezoneWarnings(campaign) {
+    if (validTimezone(campaign.timezone))
+        return [];
+    if (!campaign.send_window && campaign.send_window_inherit === false)
+        return [];
+    let site = null;
+    if (campaign.site_id) {
+        const { data, error } = await db().from('sites').select('send_window, timezone')
+            .eq('id', campaign.site_id).eq('project_id', getProjectId()).maybeSingle();
+        if (error)
+            return ['Could not check the site send-window timezone. Read the site and verify its timezone.'];
+        site = data;
+    }
+    const sendWindow = campaign.send_window ?? (campaign.send_window_inherit !== false ? site?.send_window : null);
+    return sendWindow && !validTimezone(site?.timezone) ? [SEND_WINDOW_TIMEZONE_WARNING] : [];
+}
 async function campaignTriggerOutput(campaign) {
     let seenEvents;
     const config = normalizeTriggerConfig(campaign.trigger_config);
@@ -875,7 +893,8 @@ export function registerCampaignTools(server) {
             .single();
         if (error)
             return { content: [{ type: 'text', text: `Error: ${dbToolError(error).error}` }] };
-        return { content: [{ type: 'text', text: JSON.stringify({ ...data, requires_approval_description: ACTIVATION_APPROVAL_DESCRIPTION, fires_on: buildCampaignFiresOn(data), trigger_diagnostics: buildCampaignTriggerDiagnostics(data) }, null, 2) }] };
+        const warnings = await campaignTimezoneWarnings(data);
+        return { content: [{ type: 'text', text: JSON.stringify({ ...data, requires_approval_description: ACTIVATION_APPROVAL_DESCRIPTION, fires_on: buildCampaignFiresOn(data), trigger_diagnostics: buildCampaignTriggerDiagnostics(data), ...(warnings.length ? { warnings } : {}) }, null, 2) }] };
     });
     const propertyConditions = z.array(z.union([
         z.object({ key: z.string(), op: z.enum(['eq', 'neq']), value: z.string() }).strict(),
@@ -3553,7 +3572,7 @@ Return ONLY valid JSON with this exact shape:
     server.registerTool('set_campaign_trigger', {
         title: 'Set Campaign Trigger',
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
-        description: 'Send timing: the first step of an event-triggered product journey sends right away when it has no delay; later steps and delayed first steps wait for the site send window (contact zone, then campaign zone, then UTC). Set or clear what a campaign fires on: trigger event name, tag, date_field, contact_event, or trigger_config events/tags and where event-data filter. Bind billing, payment failed, dunning or trial ending mail to an event trigger such as invoice_payment_failed or trial_ending. Drafts save directly; active/paused campaigns require standard human approval. Archived/completed campaigns cannot change. Returns saved trigger fields, derived trigger_kind, fires_on and trigger_diagnostics (including unseen-event warnings).',
+        description: 'Send timing: the first step of an event-triggered product journey sends right away when it has no delay; later steps and delayed first steps wait for the site send window (contact zone, then campaign zone, then site zone, then UTC). Set or clear what a campaign fires on: trigger event name, tag, date_field, contact_event, or trigger_config events/tags and where event-data filter. Bind billing, payment failed, dunning or trial ending mail to an event trigger such as invoice_payment_failed or trial_ending. Drafts save directly; active/paused campaigns require standard human approval. Archived/completed campaigns cannot change. Returns saved trigger fields, derived trigger_kind, fires_on and trigger_diagnostics (including unseen-event warnings).',
         inputSchema: {
             ...reentryFields,
             campaign_id: z.string().uuid().optional(),
@@ -3640,7 +3659,10 @@ Return ONLY valid JSON with this exact shape:
     }, async ({ approval_id, ...input }) => {
         if (approval_id) {
             const result = await resumeCampaignEdit('update_campaign', approval_id, input);
-            return j(result.error ? result : { ...result, ...await campaignTriggerOutput(result) });
+            if (result.error)
+                return j(result);
+            const warnings = await campaignTimezoneWarnings(result);
+            return j({ ...result, ...await campaignTriggerOutput(result), ...(warnings.length ? { warnings } : {}) });
         }
         const { campaign_id, name, site_id, segment_id, send_at, topic, trigger_event_name, trigger_tag, trigger_type, trigger_config, type, sends_per_hour, send_in_contact_timezone, send_class, unsub_footer_template, reentry_mode, period_key } = input;
         if (!campaign_id)
@@ -3759,7 +3781,7 @@ Return ONLY valid JSON with this exact shape:
             ...data,
             fires_on: buildCampaignFiresOn(data),
             trigger_diagnostics: diagnostics,
-            warnings: diagnostics,
+            warnings: [...diagnostics, ...await campaignTimezoneWarnings(data)],
             ...(warning ? { warning } : {}),
         });
     });

package/build/tools/content.js

@@ -2,7 +2,7 @@ import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
-import { stripActiveEmailContent, validateUnsubscribeFooterTemplate } from '@sendinel/domain';
+import { refuseActiveTextFields, stripActiveEmailContent, validateUnsubscribeFooterTemplate } from '@sendinel/domain';
 import { dbToolError, toolError } from '../lib/db-error.js';
 import { logAudit } from '../audit.js';
 import { assertHttpUrl } from '../lib/url-validation.js';
@@ -110,6 +110,11 @@ export function registerContentTools(server) {
             gate_body: z.string().max(1000).optional(),
         },
     }, async ({ title, slug, asset_url, asset_type = 'page', site_id, source_attribution, gate_headline, gate_body }) => {
+        for (const [field, value] of Object.entries({ title, source_attribution, gate_headline, gate_body })) {
+            const error = refuseActiveTextFields(field, value);
+            if (error)
+                return j({ error, code: 'validation_failed' });
+        }
         try {
             assertHttpUrl(asset_url);
         }

package/build/tools/sites.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { validateSiteUnsubscribeSettings } from '@sendinel/domain';
+import { validTimezone, validateSiteUnsubscribeSettings } from '@sendinel/domain';
 import { logAudit } from '../audit.js';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -219,6 +219,7 @@ export function registerSiteTools(server) {
             from_email: z.string().email().optional(),
             from_name: z.string().optional(),
             reply_to: z.string().email().nullable().optional().describe('Where replies to this site\'s email go; null clears it (replies then go to the From address). The previous value is returned as previous_reply_to.'),
+            timezone: z.string().refine(value => validTimezone(value) !== null, 'timezone must be a valid IANA timezone').nullable().optional().describe('Site send-window timezone; null clears it. Returns previous_timezone for undo.'),
             active: z.boolean().optional(),
             physical_address: z.string().trim().min(1).optional().describe('Physical mailing address; unchanged unless explicitly supplied.'),
             unsub_link_enabled: z.boolean().optional().describe('Enable the unsubscribe link in the email footer.'),
@@ -229,7 +230,7 @@ export function registerSiteTools(server) {
             unsub_brand_logo_url: z.string().nullable().optional().describe('HTTP(S) unsubscribe page logo URL; null or blank clears it.'),
             unsub_brand_color: z.string().nullable().optional().describe('Six-digit hex unsubscribe page color; null or blank clears it.'),
         },
-    }, async ({ site_id, name, from_email, from_name, reply_to, active, physical_address, ...unsubscribeInput }) => {
+    }, async ({ site_id, name, from_email, from_name, reply_to, timezone, active, physical_address, ...unsubscribeInput }) => {
         const updates = {};
         if (name)
             updates.name = name;
@@ -239,6 +240,8 @@ export function registerSiteTools(server) {
             updates.from_name = from_name;
         if (reply_to !== undefined)
             updates.reply_to = reply_to;
+        if (timezone !== undefined)
+            updates.timezone = timezone;
         if (active !== undefined)
             updates.active = active;
         if (physical_address !== undefined)
@@ -276,6 +279,15 @@ export function registerSiteTools(server) {
                 return j({ error: 'Site not found', code: 'NOT_FOUND' });
             previousReplyTo = current.reply_to ?? null;
         }
+        let previousTimezone;
+        if (timezone !== undefined) {
+            const { data: current, error } = await sb.from('sites').select('timezone').eq('id', site_id).eq('project_id', projectId).maybeSingle();
+            if (error)
+                return txt(`Error: ${dbToolError(error).error}`);
+            if (!current)
+                return j({ error: 'Site not found', code: 'NOT_FOUND' });
+            previousTimezone = current.timezone ?? null;
+        }
         updates.updated_at = new Date().toISOString();
         let query = sb
             .from('sites')
@@ -286,11 +298,15 @@ export function registerSiteTools(server) {
             query = query.is('unsub_footer_template', null);
         else if (previousTemplate !== undefined)
             query = query.eq('unsub_footer_template', previousTemplate);
+        if (previousTimezone === null)
+            query = query.is('timezone', null);
+        else if (previousTimezone !== undefined)
+            query = query.eq('timezone', previousTimezone);
         const { data, error } = await query.select().maybeSingle();
         if (error)
             return txt(`Error: ${dbToolError(error).error}`);
         if (!data)
-            return j({ error: 'Site not found or footer changed during update. Read the site and retry.', code: 'SITE_CHANGED_OR_NOT_FOUND' });
+            return j({ error: 'Site not found or settings changed during update. Read the site and retry.', code: 'SITE_CHANGED_OR_NOT_FOUND' });
         await logAudit({
             action: 'site.updated', resourceType: 'site', resourceId: site_id,
             details: { fields: Object.keys(updates).filter((field) => field !== 'updated_at') },
@@ -298,6 +314,7 @@ export function registerSiteTools(server) {
         return j({
             ...data,
             ...(previousReplyTo !== undefined ? { previous_reply_to: previousReplyTo } : {}),
+            ...(previousTimezone !== undefined ? { previous_timezone: previousTimezone } : {}),
             ...(previousTemplate !== undefined && previousTemplate !== data.unsub_footer_template
                 ? { previous_unsub_footer_template: previousTemplate } : {}),
         });

package/build/tools/surveys.js

@@ -1,3 +1,4 @@
+import { refuseActiveText, refuseActiveTextFields } from '@sendinel/domain';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -28,6 +29,9 @@ function normalizeQuestions(questions) {
     });
 }
 function validateQuestions(questions) {
+    const activeTextError = refuseActiveTextFields('questions', questions);
+    if (activeTextError)
+        return activeTextError;
     const ids = new Set();
     for (const question of questions) {
         if (!question.label.trim())
@@ -85,6 +89,9 @@ export function registerSurveyTools(server) {
             status: z.enum(['draft', 'active', 'closed']).optional().default('draft'),
         },
     }, async ({ title, questions, site_id, status }) => {
+        const activeTextError = refuseActiveText('title', title) ?? refuseActiveTextFields('questions', questions);
+        if (activeTextError)
+            return j({ error: activeTextError, code: 'validation_failed' });
         const normalized = normalizeQuestions(questions);
         const validationError = validateQuestions(normalized);
         if (validationError)
@@ -217,6 +224,9 @@ export function registerSurveyTools(server) {
         },
     }, async ({ survey_id, title, questions, status }) => {
         const projectId = getProjectId();
+        const activeTextError = refuseActiveText('title', title) ?? refuseActiveTextFields('questions', questions);
+        if (activeTextError)
+            return j({ error: activeTextError, code: 'validation_failed' });
         const updates = {};
         if (title !== undefined)
             updates.title = title;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.161",
+  "version": "1.0.163",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",