@sendinel/mcp-server 1.0.191 → 1.0.193

package/README.md

@@ -59,7 +59,9 @@ Sendinel currently exposes 35 tool groups and 349 tools (gateway mode exposes 4
 | `webhooks` | 5 | Webhook subscription management |
 
 `cancel_approval({approval_id})` rejects an unexpired, unused pending/approved
-request in the current project for any write-scoped credential.
+request in the current project for any write-scoped credential. It returns
+`status: "rejected"` (kept for compatibility) plus `outcome: "cancelled"` and
+`cancelled: true`.
 `approve_approval({approval_id})` requires the person's own live OAuth connection
 (`connection_role: NULL`) and its own pending request in that project. Tester,
 agent, API key, service-token and scoped-JWT credentials cannot approve. Sends

package/build/lib/action-approvals.d.ts

@@ -100,6 +100,8 @@ export declare function checkApproval(approvalId: string, options?: {
 }): Promise<Omit<Awaited<ReturnType<typeof checkApprovalState>>, 'decision_channel'> & {
     decision_channel?: string;
     decision_evidence?: DecisionEvidence;
+    outcome?: 'cancelled';
+    cancelled?: true;
 }>;
 declare function checkApprovalState(approvalId: string, options?: {
     consume?: boolean;

package/build/lib/action-approvals.js

@@ -469,7 +469,7 @@ export async function checkApproval(approvalId, options = {}) {
                 .eq('action', 'approval.cancelled').limit(1);
             const cancel = data?.[0];
             if (!error && cancel?.actor_id && typeof cancel.details?.channel === 'string') {
-                return { ...result, decided_by: cancel.actor_id, decision_channel: cancel.details.channel };
+                return { ...result, decided_by: cancel.actor_id, decision_channel: cancel.details.channel, outcome: 'cancelled', cancelled: true };
             }
         }
         catch { /* A failed audit read cannot grant authority or change the status. */ }

package/build/lib/approval-tool-decisions.d.ts

@@ -4,6 +4,8 @@ export declare function cancelApproval(approvalId: string, transportClientName?:
 } | {
     approval_id: string;
     status: 'rejected';
+    outcome: 'cancelled';
+    cancelled: true;
 }>;
 export declare function approveApproval(approvalId: string, transportClientName?: string): Promise<{
     code: string;

package/build/lib/approval-tool-decisions.js

@@ -53,12 +53,12 @@ export async function cancelApproval(approvalId, transportClientName) {
             project_id: projectId, actor_type: actor.actorType ?? actor.authKind ?? 'api_key',
             actor_id: actor.actorId ?? actor.keyId ?? actor.oauthTokenId ?? null,
             action: 'approval.cancelled', resource_type: 'approval', resource_id: approvalId,
-            details: { status: 'rejected', channel, client_name: name, auth_kind: actor.authKind ?? null,
+            details: { status: 'rejected', outcome: 'cancelled', channel, client_name: name, auth_kind: actor.authKind ?? null,
                 oauth_token_id: actor.oauthTokenId ?? null, api_key_id: actor.keyId ?? null },
         });
         if (auditError)
             return refuse('approval_audit_failed', 'Approval cancelled, but audit failed. Check its status before retrying.');
-        return { approval_id: approvalId, status: 'rejected' };
+        return { approval_id: approvalId, status: 'rejected', outcome: 'cancelled', cancelled: true };
     }
     catch {
         return refuse('approval_failed', 'Cancellation failed. Check approval status before retrying.');

package/build/lib/domain-health.d.ts

@@ -15,4 +15,17 @@ export declare function storedDomainDns(health?: StoredHealth | null): {
 };
 export declare function readLatestStoredDomainHealth(domainId: string): any;
 export declare function storedDnsReasons(dns: ReturnType<typeof storedDomainDns>): string[];
+export type DnsCheckState = 'not_checked' | 'pass' | 'fail';
+/**
+ * Explicit, additive rendering of a stored DNS observation. null never means pass or fail:
+ * it is 'not_checked'. dns_note says why this can differ from the domain's `verified` status.
+ */
+export declare function dnsCheckSummary(dns: ReturnType<typeof storedDomainDns>): {
+    spf: DnsCheckState;
+    dkim: DnsCheckState;
+    dmarc: DnsCheckState;
+    dns_check_status: string;
+    checked_at: string;
+    dns_note: string | null;
+};
 export {};

package/build/lib/domain-health.js

@@ -32,3 +32,20 @@ export function storedDnsReasons(dns) {
     }
     return reasons;
 }
+const dnsState = (value) => value === null ? 'not_checked' : value ? 'pass' : 'fail';
+/**
+ * Explicit, additive rendering of a stored DNS observation. null never means pass or fail:
+ * it is 'not_checked'. dns_note says why this can differ from the domain's `verified` status.
+ */
+export function dnsCheckSummary(dns) {
+    const states = { spf: dnsState(dns.spf), dkim: dnsState(dns.dkim), dmarc: dnsState(dns.dmarc) };
+    const values = Object.values(states);
+    const dns_check_status = values.every(s => s === 'not_checked') ? 'not_checked'
+        : values.includes('not_checked') ? 'partially_checked' : 'checked';
+    const when = dns.checked_at ? `last DNS check ${dns.checked_at}` : 'DNS never checked (checked_at: never)';
+    const basis = 'Domain "verified" (list_domains status) is the provider registration status; SPF/DKIM/DMARC come only from the last stored DNS check';
+    const dns_note = dns_check_status === 'checked' && !Object.values(states).includes('fail') ? null
+        : dns_check_status === 'not_checked' ? `${basis}. ${when}: not_checked means unknown, not failing. Run refresh_domain_dns.`
+            : `${basis}. ${when}; not_checked means unknown, not failing${values.includes('fail') ? '; fail means the stored DNS check found a problem' : ''}.`;
+    return { ...states, dns_check_status, checked_at: dns.checked_at ?? 'never', dns_note };
+}

package/build/tools/advisor.js

@@ -7,6 +7,7 @@ import { getProjectId } from '../project.js';
 import { toolError, dbToolError } from '../lib/db-error.js';
 import { buildVoicePrompt } from '../lib/voice.js';
 import { getAnthropicModelId } from '../anthropic-model.js';
+import { storedDomainDns, dnsCheckSummary } from '../lib/domain-health.js';
 import { dkimRemediationText } from '../lib/email-provider.js';
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
@@ -641,7 +642,7 @@ Return ONLY valid JSON (no markdown fences): { "topics": [{ "title": "...", "rat
         // 2. Fetch latest domain_health
         const { data: healthRows, error: healthError } = await db()
             .from('domain_health')
-            .select('spf_valid, dkim_valid, dmarc_valid, bounce_rate, complaint_rate, warmup_day, warmup_daily_limit, delivery_rate, total_sent')
+            .select('check_date, spf_valid, dkim_valid, dmarc_valid, bounce_rate, complaint_rate, warmup_day, warmup_daily_limit, delivery_rate, total_sent')
             .eq('site_id', site_id)
             .order('check_date', { ascending: false })
             .limit(1);
@@ -693,6 +694,10 @@ Return ONLY valid JSON (no markdown fences): { "topics": [{ "title": "...", "rat
             issues.push({ type: 'elevated_complaint', severity: 'high', detail: `Complaint rate ${complaintRate}% approaching danger zone` });
         if (spfFailed || dkimFailed)
             issues.push({ type: 'dns_invalid', severity: 'high', detail: `Missing DNS: ${spfFailed ? 'SPF' : ''}${spfFailed && dkimFailed ? ' + ' : ''}${dkimFailed ? 'DKIM' : ''}` });
+        const storedDns = storedDomainDns(health);
+        const dnsUnchecked = [spfValid, dkimValid, dmarcValid].some(v => v === null);
+        if (dnsUnchecked)
+            issues.push({ type: 'dns_unchecked', severity: 'low', detail: 'SPF/DKIM/DMARC have not been checked in stored domain health (unknown, not failing). Run refresh_domain_dns.' });
         if (dmarcFailed)
             issues.push({ type: 'no_dmarc', severity: 'medium', detail: 'DMARC record missing or invalid' });
         if (unchecked.length)
@@ -806,7 +811,7 @@ Return ONLY valid JSON (no markdown fences): { "topics": [{ "title": "...", "rat
                 complaint_rate: `${complaintRate}%`,
                 open_rate: `${openRate}%`,
             },
-            dns: { spf_valid: spfValid, dkim_valid: dkimValid, dmarc_valid: dmarcValid },
+            dns: { spf_valid: spfValid, dkim_valid: dkimValid, dmarc_valid: dmarcValid, ...dnsCheckSummary(storedDns), verification_source: storedDns.verification_source },
             warmup: warmupDay != null ? { day: warmupDay, daily_limit: warmupDailyLimit } : null,
             new_suppressions_7d: newSuppressions ?? 0,
             issues,

package/build/tools/analytics.js

@@ -9,7 +9,7 @@ import { getProjectId } from '../project.js';
 import { resolveProjectClient } from '../byod-client.js';
 import { logAudit } from '../audit.js';
 import { dbToolError, toolError } from '../lib/db-error.js';
-import { storedDomainDns, storedDnsReasons } from '../lib/domain-health.js';
+import { storedDomainDns, storedDnsReasons, dnsCheckSummary } from '../lib/domain-health.js';
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
 const percent = (rate) => `${(rate * 100).toFixed(1)}%`;
@@ -597,7 +597,7 @@ export function registerAnalyticsTools(server) {
             .limit(days);
         if (error)
             return toolError(dbToolError(error, 'Unable to load domain health'));
-        return j((data ?? []).map(({ sites: _sites, ...row }) => ({ ...row, dns: storedDomainDns(row) })));
+        return j((data ?? []).map(({ sites: _sites, ...row }) => ({ ...row, dns: storedDomainDns(row), dns_check: dnsCheckSummary(storedDomainDns(row)) })));
     });
     server.registerTool('get_engagement_insights', {
         title: 'Get Engagement Insights',
@@ -772,6 +772,7 @@ export function registerAnalyticsTools(server) {
             resend_domain_status: null, // Retained for compatibility; no live Resend query is made.
             checked_at: storedDns.checked_at,
             dns: dnsResults,
+            dns_check: dnsCheckSummary(storedDns),
             warmup: { day: warmupDay, daily_limit: warmupLimit, completed: warmupDay ? warmupDay >= 43 : null },
             recent_7d: { total_sent: totalSent, bounced, complained, bounce_rate: `${bounceRate.toFixed(2)}%`, complaint_rate: `${complaintRate.toFixed(3)}%` },
             health_trend: health.slice(0, 7).map((h) => ({ date: h.check_date, sent: h.total_sent, delivery_rate: h.delivery_rate, bounce_rate: h.bounce_rate })),

package/build/tools/approvals.js

@@ -23,7 +23,7 @@ export function registerApprovalTools(server, options) {
     });
     server.registerTool('cancel_approval', {
         title: 'Cancel Approval',
-        description: 'Cancel an unexpired, unused pending or approved action approval in this project. Read-scoped OAuth connections can cancel only their own token’s requests; write/admin credentials can cancel any eligible request in this project. Sets it to rejected and records who cancelled and the request channel in the audit; check_approval returns that cancellation attribution. Cannot approve or undo cancellation.',
+        description: 'Cancel an unexpired, unused pending or approved action approval in this project. Read-scoped OAuth connections can cancel only their own token’s requests; write/admin credentials can cancel any eligible request in this project. Marks it cancelled (stored and reported as status `rejected` for backward compatibility; `outcome: "cancelled"` and `cancelled: true` distinguish a withdrawal from a person’s rejection) and records who cancelled and the request channel in the audit; check_approval returns that cancellation attribution. Cannot approve or undo cancellation.',
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
         inputSchema: { approval_id: z.string().uuid() },
     }, async ({ approval_id }) => {
@@ -59,7 +59,7 @@ export function registerApprovalTools(server, options) {
             idempotentHint: true,
             openWorldHint: false,
         },
-        description: 'Check the status of a pending action approval. Use this to poll after requesting an action that requires human approval. Returns approved/pending/rejected/expired.',
+        description: 'Check the status of a pending action approval. Use this to poll after requesting an action that requires human approval. Returns approved/pending/rejected/expired; a cancelled approval keeps status `rejected` and adds `outcome: "cancelled"` and `cancelled: true`.',
         inputSchema: {
             approval_id: z.string().uuid().describe('The approval ID returned by the original tool call'),
         },

package/build/tools/delivery-ops.js

@@ -7,7 +7,7 @@ import { assertChannelCanExecute, checkApproval, currentChannelContext, requestA
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { getProjectId } from '../project.js';
 import { dbToolError, toolError } from '../lib/db-error.js';
-import { readLatestStoredDomainHealth, storedDomainDns, storedDnsReasons } from '../lib/domain-health.js';
+import { readLatestStoredDomainHealth, storedDomainDns, storedDnsReasons, dnsCheckSummary } from '../lib/domain-health.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
 function asRecord(value) {
     return value && typeof value === 'object' ? value : {};
@@ -829,7 +829,7 @@ export function registerDeliveryOpsTools(server) {
             readiness.ready = readiness.ready === false || auth.includes(false) ? false
                 : readiness.ready === null || auth.includes(null) ? null : true;
             readiness.reasons.push(...storedDnsReasons(dns));
-            domains.push({ ...domain, dns, readiness });
+            domains.push({ ...domain, dns, readiness, registration_status: domain.status, dns_check: dnsCheckSummary(dns) });
         }
         return j({ domains, count: domains.length });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.191",
+  "version": "1.0.193",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",