@sendinel/mcp-server 1.0.170 → 1.0.172

package/build/lib/email-generation.d.ts

@@ -1,5 +1,9 @@
 import type Anthropic from '@anthropic-ai/sdk';
 import { type ComposerBlock } from './composer-blocks.js';
+/** Known unsupported targeting must fail before a model can invent a property rule. */
+export declare function unsupportedAudienceReason(description: string): string | null;
+export declare class AudienceNotUnderstoodError extends Error {
+}
 export declare function parseAudienceRules(anthropic: Anthropic, description: string): Promise<Record<string, unknown>>;
 export type GeneratedEmail = {
     subject: string;

package/build/lib/email-generation.js

@@ -11,24 +11,39 @@ import { BLOCK_GENERATION_SCHEMA, blocksToHtml, blocksToText, normalizeComposerB
 function parseJsonResponse(raw) {
     return JSON.parse(raw.replace(/```json?\n?|```/g, '').trim());
 }
+const EMAIL_DOMAIN_AUDIENCE_MESSAGE = 'Audiences by email address or domain are not supported. Create a segment using a tag or property rule, or pass segment_id for a saved segment.';
+/** Known unsupported targeting must fail before a model can invent a property rule. */
+export function unsupportedAudienceReason(description) {
+    return /\be-?mail[\s_-]+domains?\b|\be-?mail(?:\s+addresses?)?\s+(?:ends?\s+with|contains?|matches?|is\b|at\b)|@[a-z0-9](?:[a-z0-9.-]*\.)[a-z]{2,}\b/i.test(description)
+        ? EMAIL_DOMAIN_AUDIENCE_MESSAGE : null;
+}
+export class AudienceNotUnderstoodError extends Error {
+}
 export async function parseAudienceRules(anthropic, description) {
+    const unsupported = unsupportedAudienceReason(description);
+    if (unsupported)
+        throw new AudienceNotUnderstoodError(unsupported);
     const resp = await anthropic.messages.create({
         model: getAnthropicModelId(),
         max_tokens: AI_MAX_TOKENS,
         ...outputConfig("low"),
-        system: 'You translate natural language audience descriptions into a JSON filter rules object. Return ONLY valid JSON. Available keys: lifecycle_stage (lead|trial|customer|churned|win-back), payment (object with plan, mrr_cents, ltv_cents, subscription_status, trial_ends_at, churned_at, paid_at), min_score, max_score, source, subscribed_after, subscribed_before, has_opened, has_clicked, tag, custom_property, exclude_suppressed. Example: {"payment":{"plan":"pro","trial_ends_at":{"within_days":7}},"lifecycle_stage":"trial"}. Today is ' + new Date().toISOString().slice(0, 10) + '.',
+        system: 'You translate natural language audience descriptions into a JSON filter rules object. Return ONLY valid JSON. Available keys: match_all, lifecycle_stage (lead|trial|customer|churned|win-back), payment (object with plan, mrr_cents, ltv_cents, subscription_status, trial_ends_at, churned_at, paid_at), min_score, max_score, source, subscribed_after, subscribed_before, has_opened, has_clicked, tag, custom_property (a string like "plan=pro"), exclude_suppressed. Everyone, all contacts, all subscribers or all means {"match_all":true}. There is no email address or email-domain rule. Never invent keys or use custom_property for email targeting; return {"error":"' + EMAIL_DOMAIN_AUDIENCE_MESSAGE + '"} instead. For any other unsupported audience return an error object explaining why. Example: {"payment":{"plan":"pro","trial_ends_at":{"within_days":7}},"lifecycle_stage":"trial"}. Today is ' + new Date().toISOString().slice(0, 10) + '.',
         messages: [{ role: 'user', content: description }],
     });
     const text = anthropicCheckedText(resp);
+    let rules;
     try {
-        const rules = parseJsonResponse(text);
+        rules = parseJsonResponse(text);
         if (!rules || typeof rules !== 'object' || Array.isArray(rules))
             throw new Error('not an object');
-        return rules;
     }
     catch {
-        throw new Error(`Could not understand the audience "${description}". Try a saved segment instead.`);
+        throw new AudienceNotUnderstoodError(`Could not understand the audience "${description}". Try a saved segment instead.`);
     }
+    if ('error' in rules)
+        throw new AudienceNotUnderstoodError(typeof rules.error === 'string'
+            ? rules.error : 'This audience is not supported. Try a saved segment instead.');
+    return rules;
 }
 export async function generateEmailFromBrief(anthropic, projectId, siteId, brief) {
     const [{ data: site, error: siteError }, { data: project, error: projectError }] = await Promise.all([

package/build/tools/analytics.js

@@ -1,3 +1,4 @@
+import { literalIlikePattern } from '@sendinel/domain';
 import { isSentRow } from "@sendinel/domain";
 import { readPeriodCampaigns, campaignPeriodFields, filterPlanContacts } from "@sendinel/domain";
 import { isTrueConversionEvent, TRUE_CONVERSION_DEFINITION } from "@sendinel/domain";
@@ -221,9 +222,9 @@ export function registerAnalyticsTools(server) {
             .order('created_at', { ascending: false })
             .limit(limit);
         if (event_name)
-            query = query.ilike('event_name', `%${event_name}%`);
+            query = query.ilike('event_name', literalIlikePattern(event_name));
         if (email)
-            query = query.ilike('email', `%${email}%`);
+            query = query.ilike('email', literalIlikePattern(email));
         if (source)
             query = query.eq('source', source);
         if (site_id)

package/build/tools/campaigns.js

@@ -4,7 +4,7 @@ import { resolveCampaignReentry, readCampaignPeriods, campaignPeriodFields } fro
 import { CAMPAIGN_BRANCH_CONDITIONS, campaignBranchConditionValue, isContactPropertyConditionList, STEP_PROPERTY_CONDITIONS_ERROR, validateStepPropertyRules } from "@sendinel/domain";
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import { stripActiveEmailContent, assertSendAccepted, providerSendError, sendError, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, brandWarnings, readAllRows, isSegmentRulesError, scopeSegmentRulesToSite, SegmentRulesError, validateSegmentRules, validateUnsubFooterTemplate, } from '@sendinel/domain';
+import { stripActiveEmailContent, assertSendAccepted, providerSendError, sendError, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, brandWarnings, readAllRows, isSegmentRulesError, scopeSegmentRulesToSite, SegmentRulesError, validateSegmentRules, validateUnsubFooterTemplate, SEGMENT_MATCH_ALL, } from '@sendinel/domain';
 // Subpath import, not the barrel above -- reply-actions.ts uses node:crypto,
 // and MCP-server-side that's fine (this never runs in an Edge Function), but
 // keeping it off the shared barrel avoids re-creating the Edge-Function
@@ -22,7 +22,7 @@ import { fireWebhookEvent } from '../lib/webhook-events.js';
 import { approvalNext, approvalExcerpt, assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, withApproval } from '../lib/action-approvals.js';
 import { sandboxAudience, broadcastApprovalNext } from '../lib/sandbox-audience.js';
 import { resolveSegmentContactIds, resolveSendAudience } from '../lib/send-audience.js';
-import { generateEmailFromBrief, parseAudienceRules } from '../lib/email-generation.js';
+import { AudienceNotUnderstoodError, generateEmailFromBrief, parseAudienceRules, unsupportedAudienceReason } from '../lib/email-generation.js';
 import { getAnthropicModelId } from '../anthropic-model.js';
 import { AI_MAX_TOKENS, outputConfig, anthropicCheckedText } from '@sendinel/domain';
 import { getScheduleWindowBounds, groupScheduleByCampaign, parseFutureDate } from '../lib/schedule.js';
@@ -813,6 +813,16 @@ export function registerCampaignTools(server) {
             window: z.enum(['today', 'tomorrow', '7d', '30d']).optional().default('today'),
         },
     }, async ({ site_id, window }) => {
+        const { data: site, error: siteError } = await db()
+            .from('sites')
+            .select('id')
+            .eq('id', site_id)
+            .eq('project_id', getProjectId())
+            .maybeSingle();
+        if (siteError)
+            return dbErrorResult(siteError);
+        if (!site)
+            return toolError({ error: 'Site not found', code: 'not_found' });
         const { start, end } = getScheduleWindowBounds(window ?? 'today');
         const { data, error } = await db()
             .from('campaign_enrollments')
@@ -824,7 +834,7 @@ export function registerCampaignTools(server) {
             .eq('campaigns.site_id', site_id)
             .order('next_send_at', { ascending: true });
         if (error)
-            return txt(`Error: ${dbToolError(error).error}`);
+            return dbErrorResult(error);
         const campaigns = groupScheduleByCampaign((data ?? []));
         const total_sends_scheduled = campaigns.reduce((sum, campaign) => sum + campaign.total_sends_scheduled, 0);
         return j({
@@ -1570,8 +1580,12 @@ export function registerCampaignTools(server) {
                 sites: (sites ?? []).map((s) => ({ id: s.id, name: s.name, from_email: s.from_email })),
             });
         }
+        const everyone = audience !== undefined && ['everyone', 'all contacts', 'all subscribers', 'all'].includes(audience.trim().toLowerCase().replace(/[.!?,;:]+$/, '').trim());
+        const unsupported = audience ? unsupportedAudienceReason(audience) : null;
+        if (unsupported)
+            return j({ error: unsupported, code: 'AUDIENCE_NOT_UNDERSTOOD' });
         const apiKey = process.env.ANTHROPIC_API_KEY;
-        if ((audience || brief) && !apiKey)
+        if (((audience && !everyone) || brief) && !apiKey)
             return j({ error: 'ANTHROPIC_API_KEY not configured', code: 'AI_NOT_CONFIGURED' });
         const anthropic = apiKey ? new Anthropic({ apiKey }) : null;
         let rules;
@@ -1590,12 +1604,17 @@ export function registerCampaignTools(server) {
             rules = scopeSegmentRulesToSite(segment.rules, segment.site_id);
             segmentName = segment.name;
         }
+        else if (everyone) {
+            rules = { ...SEGMENT_MATCH_ALL };
+            segmentName = audience;
+        }
         else {
             try {
                 rules = await parseAudienceRules(anthropic, audience);
             }
             catch (error) {
-                return j({ error: error instanceof Error ? dbToolError(error).error : String(error), code: 'AUDIENCE_NOT_UNDERSTOOD' });
+                return j({ error: error instanceof AudienceNotUnderstoodError ? error.message
+                        : error instanceof Error ? dbToolError(error).error : String(error), code: 'AUDIENCE_NOT_UNDERSTOOD' });
             }
             segmentName = audience;
         }

package/build/tools/contacts.js

@@ -2,7 +2,7 @@ import { normalizeTagInput, tagInputWarnings } from '../lib/tags.js';
 import { ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { CONTACT_ENRICHMENT_PROVIDERS } from '@desler/models';
 import { createContactEnrichmentAdapters, enrichContactFromConnections, } from '@desler/models/contact-enrichment';
-import { buildPreviewAttentionEnvelope, applySegmentRules, isSegmentRulesError, ContactPropertyAnomalyLogger, normalizeContactProperties, validateContactPropertyPatch, getAttentionDecision, getContactNeighborhood, getScheduledTouches, findContactDuplicateGroups, readAllPages, readAllRows, chunkIds, } from '@sendinel/domain';
+import { buildPreviewAttentionEnvelope, buildSafeIlikeOrFilter, literalIlikePattern, applySegmentRules, isSegmentRulesError, ContactPropertyAnomalyLogger, normalizeContactProperties, validateContactPropertyPatch, getAttentionDecision, getContactNeighborhood, getScheduledTouches, findContactDuplicateGroups, readAllPages, readAllRows, chunkIds, } from '@sendinel/domain';
 import { z } from 'zod';
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { db, projectClientForWriteback } from '../db.js';
@@ -988,9 +988,9 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
                 .eq('project_id', projectId)
                 .maybeSingle();
             if (viewError)
-                return txt(`Error: ${dbToolError(viewError).error}`);
+                return dbErrorResult(viewError);
             if (!view)
-                return txt('Error: View not found');
+                return toolError({ error: 'View not found', code: 'not_found' });
             viewFilters = normalizeSubscriberViewFilters(view.filters);
         }
         const viewSearch = viewFilters ? subscriberViewFilterString(viewFilters, 'search') : '';
@@ -1008,7 +1008,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (viewSiteParam && viewSiteParam !== 'all') {
             const resolved = await resolveSubscriberViewSiteId(projectId, viewSiteParam);
             if (resolved.error)
-                return txt(`Error: ${resolved.error}`);
+                return toolError(resolved);
             viewSiteId = resolved.siteId;
         }
         const embedOk = await hasCompaniesEmbed(projectId);
@@ -1021,16 +1021,18 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             .limit(limit ?? 50);
         if (!include_unsubscribed)
             q = q.eq('global_unsubscribed', false);
-        if (search)
-            q = q.or(`email.ilike.%${search}%,first_name.ilike.%${search}%,last_name.ilike.%${search}%`);
-        if (viewSearch)
-            q = q.or(`email.ilike.%${viewSearch}%,first_name.ilike.%${viewSearch}%,last_name.ilike.%${viewSearch}%`);
+        const searchFilter = buildSafeIlikeOrFilter(['email', 'first_name', 'last_name'], search);
+        const viewSearchFilter = buildSafeIlikeOrFilter(['email', 'first_name', 'last_name'], viewSearch);
+        if (searchFilter)
+            q = q.or(searchFilter);
+        if (viewSearchFilter)
+            q = q.or(viewSearchFilter);
         if (viewTags.length > 0)
             q = q.contains('tags', viewTags);
         if (viewStage)
             q = q.eq('lifecycle_stage', viewStage);
         if (viewCustomPropertyKey && viewCustomPropertyValue && SUBSCRIBER_VIEW_CUSTOM_PROPERTY_KEY_RE.test(viewCustomPropertyKey)) {
-            q = q.filter(subscriberViewCustomPropertyPath(viewCustomPropertyKey), 'ilike', `%${viewCustomPropertyValue}%`);
+            q = q.filter(subscriberViewCustomPropertyPath(viewCustomPropertyKey), 'ilike', literalIlikePattern(viewCustomPropertyValue));
         }
         if (viewFilters && viewFilters.show_test !== true)
             q = q.not('is_test', 'is', true);
@@ -1054,7 +1056,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
                 .select('contact_id, subscribed')
                 .eq('site_id', statusSiteId);
             if (siteSubscriptionsError)
-                return txt(`Error: ${dbToolError(siteSubscriptionsError).error}`);
+                return dbErrorResult(siteSubscriptionsError);
             if (viewStatus === 'not_subscribed') {
                 const subscribedIds = (siteSubscriptions ?? [])
                     .map((subscription) => subscription.contact_id)
@@ -1086,7 +1088,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         }
         const { data, error } = await q;
         if (error)
-            return { content: [{ type: 'text', text: `Error: ${dbToolError(error).error}` }] };
+            return dbErrorResult(error);
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
     server.registerTool('list_subscriber_views', {
@@ -1250,12 +1252,12 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             .eq('project_id', projectId)
             .order('name', { ascending: true })
             .limit(limit ?? 50);
-        if (search) {
-            query = query.or(`name.ilike.%${search}%,domain.ilike.%${search}%`);
-        }
+        const searchFilter = buildSafeIlikeOrFilter(['name', 'domain'], search);
+        if (searchFilter)
+            query = query.or(searchFilter);
         const { data: companies, error } = await query;
         if (error)
-            return txt(`Error: ${dbToolError(error).error}`);
+            return dbErrorResult(error);
         const rows = companies ?? [];
         if (!rows.length)
             return j([]);
@@ -1270,7 +1272,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
                 .order('id')
                 .range(offset, offset + 999);
             if (subscriberError)
-                return txt(`Error: ${dbToolError(subscriberError).error}`);
+                return dbErrorResult(subscriberError);
             for (const subscriber of subscribers ?? []) {
                 const companyId = typeof subscriber.company_id === 'string' ? subscriber.company_id : null;
                 if (!companyId)
@@ -1638,7 +1640,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (before)
             q = q.lte('sent_at', before);
         if (subject_contains)
-            q = q.ilike('subject', `%${subject_contains.replace(/[\\%_]/g, (c) => `\\${c}`)}%`);
+            q = q.ilike('subject', literalIlikePattern(subject_contains));
         const { data, error } = await q;
         if (error)
             return { content: [{ type: 'text', text: `Error: ${dbToolError(error).error}` }] };

package/build/tools/drafts.js

@@ -3,7 +3,22 @@ import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { checkPlanLimit } from '../plan-limits.js';
 import { recordBrandAssetUsage } from '../lib/brand-asset-usage.js';
-import { dbToolError } from '../lib/db-error.js';
+import { dbErrorResult, dbToolError, toolError } from '../lib/db-error.js';
+// Called only after the conditional write matched no pending draft. Keep the
+// status predicate on the write so concurrent decisions cannot overwrite one another.
+async function draftDecisionMiss(draftId) {
+    const { data, error } = await db()
+        .from('ai_drafts')
+        .select('id')
+        .eq('id', draftId)
+        .eq('project_id', getProjectId())
+        .maybeSingle();
+    if (error)
+        return dbErrorResult(error);
+    return data
+        ? toolError({ error: 'Draft is no longer pending', code: 'conflict' })
+        : toolError({ error: 'Draft not found', code: 'not_found' });
+}
 export function registerDraftTools(server) {
     server.registerTool('create_draft', {
         title: 'Create Draft',
@@ -230,11 +245,11 @@ export function registerDraftTools(server) {
             .eq('project_id', getProjectId())
             .eq('status', 'pending')
             .select()
-            .single();
+            .maybeSingle();
         if (error)
-            return { content: [{ type: 'text', text: `Error: ${dbToolError(error).error}` }] };
+            return dbErrorResult(error);
         if (!data)
-            return { content: [{ type: 'text', text: 'Draft not found or not in pending status.' }] };
+            return draftDecisionMiss(draft_id);
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
     server.registerTool('reject_draft', {
@@ -258,11 +273,11 @@ export function registerDraftTools(server) {
             .eq('project_id', getProjectId())
             .eq('status', 'pending')
             .select()
-            .single();
+            .maybeSingle();
         if (error)
-            return { content: [{ type: 'text', text: `Error: ${dbToolError(error).error}` }] };
+            return dbErrorResult(error);
         if (!data)
-            return { content: [{ type: 'text', text: 'Draft not found or not in pending status.' }] };
+            return draftDecisionMiss(draft_id);
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
 }

package/build/tools/gdpr.js

@@ -1,3 +1,4 @@
+import { literalIlikePattern } from '@sendinel/domain';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -104,7 +105,7 @@ export function registerGdprTools(server) {
         if (request_type)
             query = query.eq('request_type', request_type);
         if (search)
-            query = query.ilike('email', `%${search}%`);
+            query = query.ilike('email', literalIlikePattern(search));
         const { data, error } = await query
             .order('created_at', { ascending: false })
             .limit(limit ?? 50);

package/build/tools/lists.js

@@ -1,3 +1,4 @@
+import { literalIlikePattern } from '@sendinel/domain';
 import { z } from 'zod';
 import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, hydrateEmailSendsContacts, isSegmentRulesError, normalizeSegmentRulesToTree, readAllRows, } from '@sendinel/domain';
 import { db } from '../db.js';
@@ -93,7 +94,7 @@ export function registerListTools(server) {
             .eq('project_id', projectId);
         const trimmedSearch = search?.trim();
         if (trimmedSearch)
-            query = query.ilike('name', `%${trimmedSearch}%`);
+            query = query.ilike('name', literalIlikePattern(trimmedSearch));
         const { data, error } = await query
             .order('created_at', { ascending: false })
             .limit(limit);

package/build/tools/templates.js

@@ -1,3 +1,4 @@
+import { literalIlikePattern } from '@sendinel/domain';
 import { withApproval } from '../lib/action-approvals.js';
 import { snapshotTemplateVersion, versionHasBodySnapshot } from '@sendinel/domain';
 import { z } from 'zod';
@@ -89,7 +90,7 @@ export function registerTemplateTools(server) {
         if (category)
             query = query.eq('category', category);
         if (search)
-            query = query.ilike('name', `%${search}%`);
+            query = query.ilike('name', literalIlikePattern(search));
         const { data, error } = await query;
         if (error)
             return j(dbToolError(error));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.170",
+  "version": "1.0.172",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",