@sendinel/mcp-server 1.0.212 → 1.0.214

package/build/lib/how-to-recipes.js

@@ -112,12 +112,12 @@ export const HOW_TO_RECIPES = [
         requires: { scopes: ['write'], tester_ok: false },
         steps: [sender,
             { n: 2, tool: 'create_campaign', args_example: { site_id: from(1, '0.id'), name: 'Welcome new signups', type: 'triggered', trigger_event_name: 'signup', send_class: 'product' }, note: 'Confirm the actual event emitted by the integration; signup is an example. This creates a draft.' },
-            { n: 3, tool: 'add_campaign_step', args_example: { campaign_id: from(2, 'id'), step_order: 0, subject: 'Welcome!', body_html: '<p>Welcome aboard.</p>', delay_days: 0 } },
+            { n: 3, tool: 'add_campaign_step', args_example: { campaign_id: from(2, 'id'), step_order: 0, subject: 'Welcome!', body_html: '<p>Welcome aboard.</p>', delay_days: 0 }, note: 'Optional: pass template_id (+ template_vars) from create_template/list_templates instead of body_html.' },
             { n: 4, tool: 'send_test_email', args_example: { to_email: 'person@example.com', site_id: from(1, '0.id'), step_id: from(3, 'id'), dry_run: true }, note: 'Use an authorized preview address. Keep dry_run:true: render only, without approval.' },
             { n: 5, tool: 'activate_campaigns', args_example: { campaign_ids: [from(2, 'id')] }, approval, note: 'Show the campaign content and approve_url to the person; stop until approved.' },
             { n: 6, tool: 'activate_campaigns', args_example: { approval_id: from(5, 'approval_id') }, approval, note: 'Only after approval. Activation turns on the saved campaign; launch_campaign instead generates a NEW campaign from briefs.' },
         ],
-        gotchas: [projectRule, previewRule, 'Activation does not emit signup events or enroll historical signups. Verify the integration fires the configured event.'],
+        gotchas: [projectRule, previewRule, 'Activation does not emit signup events or enroll historical signups. Verify the integration fires the configured event.', 'A template_id on add_campaign_step is rendered once at step creation, so later template edits do not change existing steps.'],
         done_when: 'Activation succeeds and the integration’s signup event is configured; end-to-end delivery remains unverified until an authorized signup test completes.',
     },
     {
@@ -155,9 +155,9 @@ export const HOW_TO_RECIPES = [
             { n: 4, tool: 'preview_email', args_example: { site_id: from(1, '0.id'), subject: from(3, 'template.subject_hint'), body_html: from(3, 'template.body_html') }, note: 'Review the rendered content with sample contact data; this sends nothing.' },
             { n: 5, tool: 'list_templates', args_example: { search: 'Product update' }, note: 'Verify the reusable template is discoverable; paginate if truncated.' },
             { n: 6, tool: 'create_campaign', args_example: { site_id: from(1, '0.id'), name: 'Product update sequence', type: 'sequence' }, note: 'Optional use in a campaign: creates a new draft; use an existing draft instead if appropriate.' },
-            { n: 7, tool: 'add_campaign_step', args_example: { campaign_id: from(6, 'id'), step_order: 0, subject: from(3, 'template.subject_hint'), body_html: from(3, 'template.body_html') }, note: 'Copy content from get_template. No template_id parameter exists here; template_id/template_vars in the response are reserved for this path. This draft is not activated.' },
+            { n: 7, tool: 'add_campaign_step', args_example: { campaign_id: from(6, 'id'), step_order: 0, subject: from(3, 'template.subject_hint'), body_html: from(3, 'template.body_html') }, note: 'Optional: pass template_id (+ template_vars) from create_template/list_templates instead of body_html. This draft is not activated.' },
         ],
-        gotchas: [projectRule, previewRule, 'Later template edits do not update copied step content. Sequences need a separate enrollment/activation plan and approval. For a one-off segment broadcast use send_broadcast with copied html and subject, segment_id and optional send_at; approval is required.'],
+        gotchas: [projectRule, previewRule, 'A template_id on add_campaign_step is rendered once at step creation, so later template edits do not change existing steps. Sequences need a separate enrollment/activation plan and approval. For a one-off segment broadcast use send_broadcast with copied html and subject, segment_id and optional send_at; approval is required.'],
         done_when: 'The template is saved, previewed and listed; if requested, its content is copied into an unactivated campaign step.',
     },
     {

package/build/tools/campaigns.js

@@ -67,6 +67,54 @@ function stripHtml(value) {
         .replace(/\s+/g, ' ')
         .trim();
 }
+// One render path for send_transactional, send_awaiting_reply, and add_campaign_step.
+async function renderStoredCampaignTemplate(args) {
+    const { data: template, error: templateError } = await db()
+        .from('campaign_templates')
+        .select('id, subject_hint, body_html, body_text, format')
+        .eq('id', args.templateId)
+        .eq('project_id', args.projectId)
+        .maybeSingle();
+    if (templateError)
+        return { ok: false, reason: 'lookup_failed', dbError: templateError };
+    if (!template)
+        return { ok: false, reason: 'not_found' };
+    const { data: project } = await adminDb().from('projects').select('brand_settings').eq('id', args.projectId).maybeSingle();
+    const projectBrand = (project?.brand_settings ?? null);
+    const siteBrand = (args.site.brand_voice ?? null);
+    const mergedBrand = projectBrand || siteBrand ? { ...(projectBrand ?? {}), ...(siteBrand ?? {}) } : null;
+    const brandVars = resolveBrandTokens(mergedBrand, args.site.name || undefined, { address: args.site.physical_address ?? undefined });
+    const brandWarningCodes = brandWarnings(mergedBrand);
+    const vars = args.templateVars ?? {};
+    const renderVars = { ...brandVars, ...vars };
+    const subjectFallingBack = !args.subject?.trim();
+    const requiredVars = deriveTemplateVariables({
+        body_html: template.format === 'text' ? null : (template.body_html ?? ''),
+        body_text: template.format === 'text' ? (template.body_text ?? '') : null,
+        subject_hint: subjectFallingBack ? (template.subject_hint ?? '') : null,
+    });
+    const satisfied = new Set([
+        ...Object.keys(vars),
+        'brand_name', 'brand_logo_url', 'brand_bg_color', 'brand_text_color', 'brand_accent_color',
+        'brand_logo_html', 'brand_font', 'brand_address',
+        ...Object.keys(NAME_FALLBACKS),
+    ]);
+    const missing = requiredVars.filter((name) => !satisfied.has(name));
+    if (missing.length)
+        return { ok: false, reason: 'missing_vars', missing, brandWarningCodes };
+    let html;
+    let text;
+    if (template.format === 'text') {
+        text = renderTemplateVars(template.body_text ?? '', renderVars, { brandTokens: brandVars });
+        html = undefined;
+    }
+    else {
+        html = renderTemplateVars(template.body_html ?? '', renderVars, { brandTokens: brandVars });
+        text = args.callerText ?? stripHtml(html);
+    }
+    const subject = args.subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
+    return { ok: true, subject, html, text, brandWarningCodes };
+}
 function normalizeTriggerValue(value) {
     if (typeof value !== 'string')
         return null;
@@ -974,14 +1022,16 @@ export function registerCampaignTools(server) {
             idempotentHint: false,
             openWorldHint: false,
         },
-        description: 'Add an email step to a campaign. Requires a non-blank subject and body_html, body_text, or blocks that render to content. To use a stored template, call get_template and copy subject_hint into subject and body_html into body_html (and body_text if available). This tool accepts no template_id or template_vars; those response fields are reserved here and are not set by this tool. For A/B testing, add multiple steps with the same step_order but different variant_label values.',
+        description: 'Add an email step to a campaign. Requires a non-blank subject and body_html, body_text, or blocks that render to content, unless template_id is set. Optionally render from a template via template_id. When template_id is set without body content, the template is rendered once into subject and body_html. For A/B testing, add multiple steps with the same step_order but different variant_label values.',
         inputSchema: z.object({
             campaign_id: z.string().uuid(),
             step_order: z.number().int().min(0).describe('Position in sequence (0 = first)'),
-            subject: z.string().min(1),
+            subject: z.string().min(1).optional().describe('Email subject. Required unless template_id supplies a subject_hint.'),
             body_html: z.string().optional(),
             body_text: z.string().optional(),
             blocks: z.array(z.record(z.string(), z.unknown())).optional().describe('Optional structured Composer blocks that produced body_html.'),
+            template_id: z.string().uuid().optional().describe('campaign_templates row to render into this step. When set, body_html/blocks are not required; explicit body_html/body_text/blocks win over the template body.'),
+            template_vars: z.record(z.string(), z.string()).optional().describe('Variable values for template_id rendering. Wins over brand tokens on key collision.'),
             delay_days: z.number().int().min(0).optional().default(0),
             delay_hours: z.number().int().min(0).max(23).optional().default(0),
             variant_label: z.string().optional().default('A').describe('Variant label for A/B testing (default: A). Use B, C, etc. for additional variants.'),
@@ -994,7 +1044,7 @@ export function registerCampaignTools(server) {
             skip_if_event: z.string().trim().min(1).optional().describe('Skip this step at send time if the contact already has an event with this name; the journey continues.'),
             send_only_if_event: z.string().trim().min(1).optional().describe('Send this step only if the contact has an event with this name by send time; otherwise skip it and continue the journey.'),
         }).refine(absencePairValid, { message: absencePairError }),
-    }, async ({ campaign_id, step_order, subject, body_html, body_text, blocks, delay_days, delay_hours, variant_label, survey_id, brand_asset_ids, skip_if_event, send_only_if_event, skip_if_events, send_only_if_events, send_only_if_events_mode, send_only_if_no_event, send_only_if_no_event_days, skip_if_property, send_only_if_property }) => {
+    }, async ({ campaign_id, step_order, subject, body_html, body_text, blocks, template_id, template_vars, delay_days, delay_hours, variant_label, survey_id, brand_asset_ids, skip_if_event, send_only_if_event, skip_if_events, send_only_if_events, send_only_if_events_mode, send_only_if_no_event, send_only_if_no_event_days, skip_if_property, send_only_if_property }) => {
         try {
             const absence = validateStepAbsenceRule({ send_only_if_no_event, send_only_if_no_event_days });
             if (!absence.ok)
@@ -1005,22 +1055,29 @@ export function registerCampaignTools(server) {
             const properties = validateStepPropertyRules({ skip_if_property, send_only_if_property });
             if (!properties.ok)
                 return j({ error: properties.error, code: "INVALID_INPUT" });
+            if (template_id && body_html !== undefined) {
+                return j({ error: "Provide either 'template_id' or 'body_html', not both", code: 'INVALID_INPUT' });
+            }
             const normalizedBlocks = blocks ? normalizeComposerBlocks(blocks) : undefined;
             const htmlFromBlocks = normalizedBlocks?.length ? blocksToHtml(normalizedBlocks) : undefined;
-            if (!subject.trim())
-                return j({ error: 'A step needs a non-blank subject.', code: 'validation_failed' });
-            const hasBody = body_html?.trim() || body_text?.trim()
+            const renderingTemplate = Boolean(template_id) && body_html === undefined && body_text === undefined && blocks === undefined;
+            const explicitHasBody = () => Boolean(body_html?.trim() || body_text?.trim()
                 || htmlFromBlocks?.replace(/<[^>]*>/g, '').trim()
-                || normalizedBlocks?.some((block) => block.type === 'image' && block.url);
-            if (!hasBody) {
-                return j({ error: 'A step needs body_html or body_text (or blocks that render to content).', code: 'validation_failed' });
+                || normalizedBlocks?.some((block) => block.type === 'image' && block.url));
+            if (!renderingTemplate) {
+                if (!subject?.trim())
+                    return j({ error: 'A step needs a non-blank subject.', code: 'validation_failed' });
+                if (!explicitHasBody()) {
+                    return j({ error: 'A step needs body_html or body_text (or blocks that render to content).', code: 'validation_failed' });
+                }
             }
+            const projectId = getProjectId();
             const { data: campaign, error: campaignError } = await db()
                 .schema('email')
                 .from('campaigns')
-                .select('id')
+                .select('id, site_id')
                 .eq('id', campaign_id)
-                .eq('project_id', getProjectId())
+                .eq('project_id', projectId)
                 .maybeSingle();
             if (campaignError)
                 return dbErrorResult(campaignError);
@@ -1028,24 +1085,81 @@ export function registerCampaignTools(server) {
                 return { ...j({ error: 'Campaign not found.', code: 'not_found' }), isError: true };
             const renderVars = {};
             if (survey_id) {
-                const surveyLink = await resolveSurveyShortLink(db(), getProjectId(), survey_id);
+                const surveyLink = await resolveSurveyShortLink(db(), projectId, survey_id);
                 if (!surveyLink)
                     return j({ error: 'Survey has no short link yet', code: 'SURVEY_LINK_NOT_READY' });
                 renderVars.survey_link = surveyLink;
             }
-            const renderedSubject = survey_id ? renderTemplateVars(subject, renderVars) : subject;
-            const renderedHtml = body_html !== undefined && survey_id ? renderTemplateVars(body_html, renderVars) : body_html ?? htmlFromBlocks;
-            const renderedText = body_text !== undefined && survey_id ? renderTemplateVars(body_text, renderVars) : body_text;
+            let bakedSubject = subject;
+            let bakedHtml = body_html;
+            let bakedText = body_text;
+            if (renderingTemplate && template_id) {
+                let siteForTemplate = {};
+                if (campaign.site_id) {
+                    const { data: site, error: siteError } = await db()
+                        .from('sites')
+                        .select('name, brand_voice, physical_address')
+                        .eq('id', campaign.site_id)
+                        .eq('project_id', projectId)
+                        .maybeSingle();
+                    if (siteError)
+                        return dbErrorResult(siteError);
+                    if (site)
+                        siteForTemplate = site;
+                }
+                const rendered = await renderStoredCampaignTemplate({
+                    templateId: template_id,
+                    templateVars: { ...(template_vars ?? {}), ...renderVars },
+                    subject,
+                    projectId,
+                    site: siteForTemplate,
+                });
+                if (!rendered.ok) {
+                    if (rendered.reason === 'lookup_failed')
+                        return dbErrorResult(rendered.dbError);
+                    if (rendered.reason === 'not_found')
+                        return { ...j({ error: 'Template not found.', code: 'not_found' }), isError: true };
+                    return j({ error: `Missing required template variable(s): ${rendered.missing.join(', ')}`, code: 'validation_failed' });
+                }
+                bakedSubject = rendered.subject;
+                bakedHtml = rendered.html === undefined ? undefined : stripActiveEmailContent(rendered.html).html;
+                bakedText = rendered.text;
+                if (!bakedSubject?.trim())
+                    return j({ error: 'A step needs a non-blank subject.', code: 'validation_failed' });
+                const bakedHasBody = bakedHtml?.trim() || bakedText?.trim();
+                if (!bakedHasBody) {
+                    return j({ error: 'A step needs body_html or body_text (or blocks that render to content).', code: 'validation_failed' });
+                }
+            }
+            else if (template_id) {
+                const { data: template, error: templateError } = await db()
+                    .from('campaign_templates')
+                    .select('id')
+                    .eq('id', template_id)
+                    .eq('project_id', projectId)
+                    .maybeSingle();
+                if (templateError)
+                    return dbErrorResult(templateError);
+                if (!template)
+                    return { ...j({ error: 'Template not found.', code: 'not_found' }), isError: true };
+            }
+            const renderedSubject = survey_id && bakedSubject !== undefined ? renderTemplateVars(bakedSubject, renderVars) : bakedSubject;
+            const renderedHtml = renderingTemplate
+                ? (survey_id && bakedHtml !== undefined ? renderTemplateVars(bakedHtml, renderVars) : bakedHtml)
+                : (body_html !== undefined && survey_id ? renderTemplateVars(body_html, renderVars) : body_html ?? htmlFromBlocks);
+            const renderedText = renderingTemplate
+                ? (survey_id && bakedText !== undefined ? renderTemplateVars(bakedText, renderVars) : bakedText)
+                : (body_text !== undefined && survey_id ? renderTemplateVars(body_text, renderVars) : body_text);
             const { data, error } = await withCreatedItems('campaign_steps', db()
                 .from('campaign_steps')
-                .insert({ campaign_id, step_order, subject: renderedSubject, body_html: renderedHtml, body_text: renderedText ?? (normalizedBlocks?.length ? blocksToText(normalizedBlocks) : undefined), blocks: normalizedBlocks ?? null, delay_days, delay_hours, variant_label: variant_label ?? 'A', skip_if_event: skip_if_event ?? null, send_only_if_event: send_only_if_event ?? null, ...events.rules, ...absence.rules, ...properties.rules })
+                .insert({ campaign_id, step_order, subject: renderedSubject, body_html: renderedHtml, body_text: renderedText ?? (normalizedBlocks?.length ? blocksToText(normalizedBlocks) : undefined), blocks: normalizedBlocks ?? null, delay_days, delay_hours, variant_label: variant_label ?? 'A', template_id: template_id ?? null, template_vars: template_vars ?? null, skip_if_event: skip_if_event ?? null, send_only_if_event: send_only_if_event ?? null, ...events.rules, ...absence.rules, ...properties.rules })
                 .select()
                 .single());
             if (error)
                 return dbErrorResult(error);
             await recordBrandAssetUsage({
                 client: db(),
-                projectId: getProjectId(),
+                projectId,
                 source: 'campaign_step',
                 resourceId: data.id,
                 html: renderedHtml,
@@ -1053,7 +1167,7 @@ export function registerCampaignTools(server) {
             }).catch((err) => {
                 console.warn('Failed to record brand asset usage for MCP campaign step:', err);
             });
-            await logAudit({ action: 'campaign.step_created', resourceType: 'campaign_step', resourceId: data.id, details: { property_rules: properties.rules } });
+            await logAudit({ action: 'campaign.step_created', resourceType: 'campaign_step', resourceId: data.id, details: { property_rules: properties.rules, template_id: template_id ?? null } });
             return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
         }
         catch (error) {
@@ -2708,53 +2822,31 @@ Do not include body_html in your response; Sendinel renders body_html from block
         let resolvedText = text;
         let brandWarningCodes = [];
         if (template_id) {
-            const { data: template, error: templateError } = await db()
-                .from('campaign_templates')
-                .select('id, subject_hint, body_html, body_text, format')
-                .eq('id', template_id)
-                .eq('project_id', projectId)
-                .maybeSingle();
-            if (templateError) {
-                console.error('MCP send template lookup failed:', templateError);
-                return { ...txt('Error: Internal server error'), ...sendError('internal_error') };
+            const rendered = await renderStoredCampaignTemplate({
+                templateId: template_id,
+                templateVars: template_vars,
+                subject,
+                projectId,
+                site,
+                callerText: text,
+            });
+            if (!rendered.ok) {
+                if (rendered.reason === 'lookup_failed') {
+                    console.error('MCP send template lookup failed:', rendered.dbError);
+                    return { ...txt('Error: Internal server error'), ...sendError('internal_error') };
+                }
+                if (rendered.reason === 'not_found')
+                    return txt('Error: Template not found');
+                if (rendered.brandWarningCodes.length)
+                    console.warn('MCP send brand warnings', { projectId, site_id, warnings: rendered.brandWarningCodes });
+                return txt(`Error: Missing required template variable(s): ${rendered.missing.join(', ')}`);
             }
-            if (!template)
-                return txt('Error: Template not found');
-            const { data: project } = await adminDb().from('projects').select('brand_settings').eq('id', projectId).maybeSingle();
-            const projectBrand = (project?.brand_settings ?? null);
-            const siteBrand = (site.brand_voice ?? null);
-            const mergedBrand = projectBrand || siteBrand ? { ...(projectBrand ?? {}), ...(siteBrand ?? {}) } : null;
-            const brandVars = resolveBrandTokens(mergedBrand, site.name || undefined, { address: site.physical_address ?? undefined });
-            brandWarningCodes = brandWarnings(mergedBrand);
+            brandWarningCodes = rendered.brandWarningCodes;
             if (brandWarningCodes.length)
                 console.warn('MCP send brand warnings', { projectId, site_id, warnings: brandWarningCodes });
-            const vars = template_vars ?? {};
-            const renderVars = { ...brandVars, ...vars };
-            const subjectFallingBack = !subject?.trim();
-            const requiredVars = deriveTemplateVariables({
-                body_html: template.format === 'text' ? null : (template.body_html ?? ''),
-                body_text: template.format === 'text' ? (template.body_text ?? '') : null,
-                subject_hint: subjectFallingBack ? (template.subject_hint ?? '') : null,
-            });
-            const satisfied = new Set([
-                ...Object.keys(vars),
-                'brand_name', 'brand_logo_url', 'brand_bg_color', 'brand_text_color', 'brand_accent_color',
-                'brand_logo_html', 'brand_font', 'brand_address',
-                ...Object.keys(NAME_FALLBACKS),
-            ]);
-            const missing = requiredVars.filter((name) => !satisfied.has(name));
-            if (missing.length) {
-                return txt(`Error: Missing required template variable(s): ${missing.join(', ')}`);
-            }
-            if (template.format === 'text') {
-                resolvedText = renderTemplateVars(template.body_text ?? '', renderVars, { brandTokens: brandVars });
-                resolvedHtml = undefined;
-            }
-            else {
-                resolvedHtml = renderTemplateVars(template.body_html ?? '', renderVars, { brandTokens: brandVars });
-                resolvedText = text ?? stripHtml(resolvedHtml);
-            }
-            resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
+            resolvedSubject = rendered.subject;
+            resolvedHtml = rendered.html;
+            resolvedText = rendered.text;
         }
         if (resolvedHtml !== undefined)
             resolvedHtml = stripActiveEmailContent(resolvedHtml).html;
@@ -2904,51 +2996,29 @@ Do not include body_html in your response; Sendinel renders body_html from block
         let resolvedText = text;
         let brandWarningCodes = [];
         if (template_id) {
-            const { data: template, error: templateError } = await db()
-                .from('campaign_templates')
-                .select('id, subject_hint, body_html, body_text, format')
-                .eq('id', template_id)
-                .eq('project_id', projectId)
-                .maybeSingle();
-            if (templateError)
-                return txt(`Error: ${dbToolError(templateError).error}`);
-            if (!template)
-                return txt('Error: Template not found');
-            const { data: project } = await adminDb().from('projects').select('brand_settings').eq('id', projectId).maybeSingle();
-            const projectBrand = (project?.brand_settings ?? null);
-            const siteBrand = (site.brand_voice ?? null);
-            const mergedBrand = projectBrand || siteBrand ? { ...(projectBrand ?? {}), ...(siteBrand ?? {}) } : null;
-            const brandVars = resolveBrandTokens(mergedBrand, site.name || undefined, { address: site.physical_address ?? undefined });
-            brandWarningCodes = brandWarnings(mergedBrand);
-            if (brandWarningCodes.length)
-                console.warn('MCP send brand warnings', { projectId, site_id, warnings: brandWarningCodes });
-            const vars = template_vars ?? {};
-            const renderVars = { ...brandVars, ...vars };
-            const subjectFallingBack = !subject?.trim();
-            const requiredVars = deriveTemplateVariables({
-                body_html: template.format === 'text' ? null : (template.body_html ?? ''),
-                body_text: template.format === 'text' ? (template.body_text ?? '') : null,
-                subject_hint: subjectFallingBack ? (template.subject_hint ?? '') : null,
+            const rendered = await renderStoredCampaignTemplate({
+                templateId: template_id,
+                templateVars: template_vars,
+                subject,
+                projectId,
+                site,
+                callerText: text,
             });
-            const satisfied = new Set([
-                ...Object.keys(vars),
-                'brand_name', 'brand_logo_url', 'brand_bg_color', 'brand_text_color', 'brand_accent_color',
-                'brand_logo_html', 'brand_font', 'brand_address',
-                ...Object.keys(NAME_FALLBACKS),
-            ]);
-            const missing = requiredVars.filter((name) => !satisfied.has(name));
-            if (missing.length) {
-                return txt(`Error: Missing required template variable(s): ${missing.join(', ')}`);
+            if (!rendered.ok) {
+                if (rendered.reason === 'lookup_failed')
+                    return txt(`Error: ${dbToolError(rendered.dbError).error}`);
+                if (rendered.reason === 'not_found')
+                    return txt('Error: Template not found');
+                if (rendered.brandWarningCodes.length)
+                    console.warn('MCP send brand warnings', { projectId, site_id, warnings: rendered.brandWarningCodes });
+                return txt(`Error: Missing required template variable(s): ${rendered.missing.join(', ')}`);
             }
-            if (template.format === 'text') {
-                resolvedText = renderTemplateVars(template.body_text ?? '', renderVars, { brandTokens: brandVars });
-                resolvedHtml = undefined;
-            }
-            else {
-                resolvedHtml = renderTemplateVars(template.body_html ?? '', renderVars, { brandTokens: brandVars });
-                resolvedText = text ?? stripHtml(resolvedHtml);
-            }
-            resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
+            brandWarningCodes = rendered.brandWarningCodes;
+            if (brandWarningCodes.length)
+                console.warn('MCP send brand warnings', { projectId, site_id, warnings: brandWarningCodes });
+            resolvedSubject = rendered.subject;
+            resolvedHtml = rendered.html;
+            resolvedText = rendered.text;
         }
         if (resolvedHtml !== undefined)
             resolvedHtml = stripActiveEmailContent(resolvedHtml).html;

package/build/tools/connector.js

@@ -178,6 +178,7 @@ export function registerConnectorTools(server) {
             return j({ error: tableError instanceof Error ? dbToolError(tableError).error : 'Could not list database tables' });
         }
     });
+    // No approval preflight (#4550): this tool has no target row to reject.
     server.registerTool('install_connector_schema', {
         title: 'Install Connector Schema',
         annotations: {
@@ -195,6 +196,7 @@ export function registerConnectorTools(server) {
         const result = await callConnectorApi('/api/dashboard/connector/schema/install', { method: 'POST' });
         return j(result.ok ? result.data : { error: result.error });
     });
+    // No approval preflight (#4550): this tool has no target row to reject.
     server.registerTool('install_connector_view', {
         title: 'Install Connector Live View',
         annotations: {
@@ -223,6 +225,7 @@ export function registerConnectorTools(server) {
         });
         return j(result.ok ? result.data : { error: result.error });
     });
+    // No approval preflight (#4550): mapping is validated by the dashboard route only after this gate.
     server.registerTool('set_connector_mapping', {
         title: 'Set Connector Mapping',
         annotations: {
@@ -271,6 +274,7 @@ export function registerConnectorTools(server) {
         });
         return j(result.ok ? result.data : { error: result.error });
     });
+    // No approval preflight (#4550): this tool has no target row to reject.
     server.registerTool('resync_connector', {
         title: 'Resync Connector Contacts',
         annotations: {

package/build/tools/contacts.js

@@ -2437,6 +2437,8 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             return dbErrorResult(countError);
         return j({ total: count ?? (data ?? []).length, sample: data ?? [] });
     });
+    // No approval preflight (#4550): nothing here rejects a missing target. An unknown site_id
+    // returns an empty inactive list, and the approval binds that computed preview.
     server.registerTool('identify_inactive', {
         title: 'Identify Inactive',
         annotations: {
@@ -2679,6 +2681,8 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         // total_groups counts every group found; groups_truncated says when limit cut the list.
         return j({ duplicate_groups: result, total_groups: groups.length, groups_truncated: groups.length > result.length, coverage });
     });
+    // No approval preflight (#4550): a missing target or source is not rejected. The preview uses
+    // target?.email, and the post-approval path calls rpc merge_subscribers with no not-found refusal.
     server.registerTool('merge_subscribers', {
         title: 'Merge Subscribers',
         annotations: {

package/build/tools/data.js

@@ -4,7 +4,7 @@ import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { decrypt, encrypt } from '../crypto.js';
 import { normalizeActiveCampaignAccountUrl } from '../lib/url-validation.js';
-import { approvalPageUrl, assertChannelCanExecute, checkApproval, currentChannelContext, currentExecutingApprovalId, requestApproval, withApproval } from '../lib/action-approvals.js';
+import { approvalPageUrl, assertChannelCanExecute, checkApproval, currentChannelContext, currentExecutingApprovalId, registerApprovalPreflight, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
 import { dbToolError, deleteBlockedToolResult } from '../lib/db-error.js';
@@ -161,6 +161,82 @@ async function getPlatformProjectContext(client = adminDb(), orgId) {
         throw new Error('organization has no Supabase-auth user to own the connection');
     return { projectId, orgId: project.org_id, userId: userId };
 }
+/** Shared by the handler and the request-only preflight so the refusal text cannot drift. */
+async function lookupSavedCredential(credentialId, orgId) {
+    const parsed = parseSavedCredentialId(credentialId);
+    if (!parsed)
+        return { ok: false, result: j({ error: 'Invalid credential_id' }) };
+    const client = adminDb();
+    let context;
+    try {
+        context = await getPlatformProjectContext(client, orgId);
+    }
+    catch (error) {
+        // Same catch body the handler used. These are business refusals, not a preflight outage.
+        return {
+            ok: false,
+            result: j({ error: error instanceof Error ? dbToolError(error).error : 'Failed to delete provider credential' }),
+        };
+    }
+    const table = parsed.source === 'platform' ? 'platform_connections' : 'import_jobs';
+    const columns = parsed.source === 'platform'
+        ? 'id, platform, display_name, status, is_active, created_at'
+        : 'id, provider, status, created_at, completed_at';
+    const { data: credential, error: credentialErr } = await client
+        .schema('email')
+        .from(table)
+        .select(columns)
+        .eq('id', parsed.rowId)
+        .eq('org_id', context.orgId)
+        .eq('project_id', context.projectId)
+        .maybeSingle();
+    if (credentialErr)
+        return { ok: false, result: j(dbToolError(credentialErr)), dbError: credentialErr };
+    if (!credential)
+        return { ok: false, result: j({ error: 'Credential not found' }) };
+    return { ok: true, parsed, credential, context, client };
+}
+async function findActiveCustomWebhook(connectionId) {
+    const client = adminDb();
+    const projectId = getProjectId();
+    const { data: connection, error: lookupError } = await client
+        .schema('email')
+        .from('platform_connections')
+        .select('id, project_id, display_name, config')
+        .eq('id', connectionId)
+        .eq('project_id', projectId)
+        .eq('platform', 'custom')
+        .eq('is_active', true)
+        .maybeSingle();
+    return { client, projectId, connection, lookupError };
+}
+// Confirmed is not consulted. The outer request-only gate runs before the handler's
+// preview, so the target must exist in this project on the first call as well as on replay.
+async function deleteProviderCredentialPreflight(params) {
+    const credentialId = typeof params.credential_id === 'string' ? params.credential_id : '';
+    const orgId = typeof params.org_id === 'string' ? params.org_id : undefined;
+    const found = await lookupSavedCredential(credentialId, orgId);
+    if (!found.ok) {
+        if (found.dbError)
+            throw found.dbError;
+        return found.result;
+    }
+    return undefined;
+}
+async function rotateCustomWebhookSecretPreflight(params) {
+    const connectionId = typeof params.connection_id === 'string' ? params.connection_id : '';
+    const { connection, lookupError } = await findActiveCustomWebhook(connectionId);
+    if (lookupError)
+        throw lookupError;
+    if (!connection)
+        return j({ error: 'Custom webhook not found' });
+    return undefined;
+}
+// Partial test doubles of action-approvals omit this export. Production always provides it.
+if (typeof registerApprovalPreflight === 'function') {
+    registerApprovalPreflight('delete_provider_credential', deleteProviderCredentialPreflight);
+    registerApprovalPreflight('rotate_custom_webhook_secret', rotateCustomWebhookSecretPreflight);
+}
 function createCampaignMigrationTotals(options) {
     return {
         contacts: { total: options.includeContacts ? 1 : 0, processed: 0 },
@@ -401,27 +477,10 @@ export function registerDataTools(server) {
         },
     }, async ({ org_id, credential_id, confirmed, approval_id }) => {
         try {
-            const parsed = parseSavedCredentialId(credential_id);
-            if (!parsed)
-                return j({ error: 'Invalid credential_id' });
-            const client = adminDb();
-            const context = await getPlatformProjectContext(client, org_id);
-            const table = parsed.source === 'platform' ? 'platform_connections' : 'import_jobs';
-            const columns = parsed.source === 'platform'
-                ? 'id, platform, display_name, status, is_active, created_at'
-                : 'id, provider, status, created_at, completed_at';
-            const { data: credential, error: credentialErr } = await client
-                .schema('email')
-                .from(table)
-                .select(columns)
-                .eq('id', parsed.rowId)
-                .eq('org_id', context.orgId)
-                .eq('project_id', context.projectId)
-                .maybeSingle();
-            if (credentialErr)
-                return j(dbToolError(credentialErr));
-            if (!credential)
-                return j({ error: 'Credential not found' });
+            const found = await lookupSavedCredential(credential_id, org_id);
+            if (!found.ok)
+                return found.result;
+            const { parsed, credential, context, client } = found;
             const provider = parsed.source === 'platform' ? credential.platform : credential.provider;
             const approvalParams = {
                 credential_id,
@@ -870,21 +929,12 @@ export function registerDataTools(server) {
         },
     }, async ({ connection_id, confirmed, approval_id }) => {
         try {
-            const client = adminDb();
-            const projectId = getProjectId();
-            const { data: connection, error: lookupError } = await client
-                .schema('email')
-                .from('platform_connections')
-                .select('id, project_id, display_name, config')
-                .eq('id', connection_id)
-                .eq('project_id', projectId)
-                .eq('platform', 'custom')
-                .eq('is_active', true)
-                .maybeSingle();
-            if (lookupError)
-                return j(dbToolError(lookupError));
-            if (!connection)
+            const lookedUp = await findActiveCustomWebhook(connection_id);
+            if (lookedUp.lookupError)
+                return j(dbToolError(lookedUp.lookupError));
+            if (!lookedUp.connection)
                 return j({ error: 'Custom webhook not found' });
+            const { client, projectId, connection } = lookedUp;
             if (!confirmed) {
                 return j({
                     confirmation_required: true,

package/build/tools/gdpr.js

@@ -3,11 +3,81 @@ import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
-import { approvalSatisfied, assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval } from '../lib/action-approvals.js';
+import { approvalSatisfied, assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, registerApprovalPreflight } from '../lib/action-approvals.js';
 import { dbToolError, deleteBlockedToolResult } from '../lib/db-error.js';
 import { subscriberBlockers } from '../lib/delete-blockers.js';
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
+async function findSubscriberForDeletion(contactId) {
+    const { data, error } = await db()
+        .from('subscribers')
+        .select('id, email')
+        .eq('id', contactId)
+        .eq('project_id', getProjectId())
+        .maybeSingle();
+    return { contact: (data ?? null), error };
+}
+// A database error is not "missing". The handler still maps it to the old not-found text;
+// the preflight throws so the registration boundary reports internal_error and writes no approval.
+async function deleteSubscriberDataPreflight(params) {
+    const contactId = typeof params.contact_id === 'string' ? params.contact_id : '';
+    const { contact, error } = await findSubscriberForDeletion(contactId);
+    if (error)
+        throw error;
+    if (!contact)
+        return txt('Contact not found or does not belong to this project.');
+    return undefined;
+}
+async function loadCcpaRequest(requestId) {
+    const projectId = getProjectId();
+    const { data, error } = await db()
+        .from('compliance_requests')
+        .select('id, email, request_type, status, expires_at')
+        .eq('id', requestId)
+        .eq('project_id', projectId)
+        .eq('regulation', 'ccpa')
+        .maybeSingle();
+    return { projectId, request: (data ?? null), error };
+}
+function ccpaNotActionable(request) {
+    if (!request)
+        return 'CCPA request not found or does not belong to this project.';
+    if (request.status === 'completed' || request.status === 'expired') {
+        return `Request is already "${request.status}" and cannot be actioned further.`;
+    }
+    return undefined;
+}
+function ccpaNotReadyToComplete(request) {
+    if (request.status !== 'verified') {
+        return `Request must be "verified" before it can be completed (currently "${request.status}"). Call this tool with status: "verified" first.`;
+    }
+    return undefined;
+}
+// Only completed + delete requests the hand-written approval. status:'verified' updates the row
+// with no approval, and a non-delete completion does too. approvalSatisfied can skip the gate
+// only after those refusals, so this preflight refuses the same rows the handler refuses first.
+async function actionCcpaRequestPreflight(params) {
+    if (params.status !== 'completed')
+        return undefined;
+    const requestId = typeof params.request_id === 'string' ? params.request_id : '';
+    const { request, error } = await loadCcpaRequest(requestId);
+    if (error)
+        throw error;
+    const closed = ccpaNotActionable(request);
+    if (closed)
+        return txt(closed);
+    const notReady = ccpaNotReadyToComplete(request);
+    if (notReady)
+        return txt(notReady);
+    if (request.request_type !== 'delete')
+        return undefined;
+    return undefined;
+}
+// Partial test doubles of action-approvals omit this export. Production always provides it.
+if (typeof registerApprovalPreflight === 'function') {
+    registerApprovalPreflight('delete_subscriber_data', deleteSubscriberDataPreflight);
+    registerApprovalPreflight('action_ccpa_request', actionCcpaRequestPreflight);
+}
 export function registerGdprTools(server) {
     server.registerTool('delete_subscriber_data', {
         title: 'Delete Subscriber Data',
@@ -24,13 +94,9 @@ export function registerGdprTools(server) {
             approval_id: z.string().uuid().optional().describe('Required — get this by calling once without it, then have a human approve via dashboard.'),
         },
     }, async ({ contact_id, reason, approval_id }) => {
-        // Verify contact belongs to this project (defense in depth)
-        const { data: contact } = await db()
-            .from('subscribers')
-            .select('id, email')
-            .eq('id', contact_id)
-            .eq('project_id', getProjectId())
-            .maybeSingle();
+        // Verify contact belongs to this project (defense in depth). A lookup error stays
+        // the historical not-found text; the registered preflight reports it as internal_error.
+        const { contact } = await findSubscriberForDeletion(contact_id);
         if (!contact)
             return txt('Contact not found or does not belong to this project.');
         const approvalParams = { contact_id, email: contact.email, reason };
@@ -132,21 +198,14 @@ export function registerGdprTools(server) {
             approval_id: z.string().uuid().optional().describe('Required to complete a delete request after a human approves the summary in the dashboard.'),
         },
     }, async ({ request_id, status, approval_id }) => {
-        const projectId = getProjectId();
-        const { data: request, error: fetchErr } = await db()
-            .from('compliance_requests')
-            .select('id, email, request_type, status, expires_at')
-            .eq('id', request_id)
-            .eq('project_id', projectId)
-            .eq('regulation', 'ccpa')
-            .maybeSingle();
+        const { projectId, request, error: fetchErr } = await loadCcpaRequest(request_id);
         if (fetchErr)
             return txt(`Error: ${dbToolError(fetchErr).error}`);
+        const closed = ccpaNotActionable(request);
+        if (closed)
+            return txt(closed);
         if (!request)
             return txt('CCPA request not found or does not belong to this project.');
-        if (request.status === 'completed' || request.status === 'expired') {
-            return txt(`Request is already "${request.status}" and cannot be actioned further.`);
-        }
         if (status === 'verified') {
             if (request.status !== 'pending') {
                 return txt(`Request must be "pending" to verify (currently "${request.status}").`);
@@ -177,9 +236,9 @@ export function registerGdprTools(server) {
             });
             return j({ ok: true, request: data });
         }
-        if (request.status !== 'verified') {
-            return txt(`Request must be "verified" before it can be completed (currently "${request.status}"). Call this tool with status: "verified" first.`);
-        }
+        const notReady = ccpaNotReadyToComplete(request);
+        if (notReady)
+            return txt(notReady);
         if (request.request_type === 'delete') {
             const approvalParams = {
                 request_id,

package/build/tools/org.js

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { logAudit } from '../audit.js';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, registerApprovalPreflight, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { dbToolError } from '../lib/db-error.js';
 import { checkPlanLimit } from '../plan-limits.js';
@@ -62,7 +62,7 @@ async function resolveCurrentOrgId(requestedOrgId) {
         .eq('id', getProjectId())
         .maybeSingle();
     if (error)
-        return { ok: false, ...dbToolError(error) };
+        return { ok: false, ...dbToolError(error), cause: error };
     if (!project?.org_id)
         return { ok: false, error: 'Project has no organization', code: 'NO_ORG' };
     if (requestedOrgId && requestedOrgId !== project.org_id) {
@@ -70,6 +70,46 @@ async function resolveCurrentOrgId(requestedOrgId) {
     }
     return { ok: true, orgId: project.org_id };
 }
+/** Shared by the handler and the request-only preflight so the refusal text cannot drift. */
+async function lookupOrgMember(userId, orgId) {
+    const context = await resolveCurrentOrgId(orgId);
+    if (!context.ok) {
+        const dbError = 'cause' in context ? context.cause : undefined;
+        return { ok: false, result: j({ error: context.error, code: context.code }), dbError };
+    }
+    const { data: member, error: memberErr } = await db()
+        .from('org_members')
+        .select('id, user_id, role')
+        .eq('org_id', context.orgId)
+        .eq('user_id', userId)
+        .maybeSingle();
+    if (memberErr)
+        return { ok: false, result: j(dbToolError(memberErr)), dbError: memberErr };
+    if (!member)
+        return { ok: false, result: j({ error: 'Member not found', code: 'NOT_FOUND' }) };
+    return { ok: true, orgId: context.orgId, member: member };
+}
+function preflightOrgId(params) {
+    return typeof params.org_id === 'string' ? params.org_id : undefined;
+}
+// Existence and org ownership are checked whether or not confirmed is present (schema default
+// false). The last-owner refusal runs only after confirmed=true in the handler. Applying it
+// here would refuse an unconfirmed request-only call that currently receives an approval request.
+async function teamMemberTargetPreflight(params) {
+    const userId = typeof params.user_id === 'string' ? params.user_id : '';
+    const found = await lookupOrgMember(userId, preflightOrgId(params));
+    if (!found.ok) {
+        if (found.dbError)
+            throw found.dbError;
+        return found.result;
+    }
+    return undefined;
+}
+// Partial test doubles of action-approvals omit this export. Production always provides it.
+if (typeof registerApprovalPreflight === 'function') {
+    registerApprovalPreflight('remove_team_member', teamMemberTargetPreflight);
+    registerApprovalPreflight('set_team_member_role', teamMemberTargetPreflight);
+}
 function normalizeHost(host) {
     if (!host)
         return null;
@@ -208,33 +248,24 @@ export function registerOrgTools(server) {
             approval_id: z.string().uuid().optional().describe('Approval token from a previous confirmed call without approval_id. Required when the action is not autonomous.'),
         },
     }, async ({ user_id, org_id, confirmed, approval_id }) => {
-        const context = await resolveCurrentOrgId(org_id);
-        if (!context.ok)
-            return j({ error: context.error, code: context.code });
-        const { data: member, error: memberErr } = await db()
-            .from('org_members')
-            .select('id, user_id, role')
-            .eq('org_id', context.orgId)
-            .eq('user_id', user_id)
-            .maybeSingle();
-        if (memberErr)
-            return j(dbToolError(memberErr));
-        if (!member)
-            return j({ error: 'Member not found', code: 'NOT_FOUND' });
-        const approvalParams = { user_id, org_id: context.orgId };
+        const found = await lookupOrgMember(user_id, org_id);
+        if (!found.ok)
+            return found.result;
+        const { orgId, member } = found;
+        const approvalParams = { user_id, org_id: orgId };
         if (!confirmed) {
             return j({
                 confirmation_required: true,
                 tool: 'remove_team_member',
                 member: { user_id: member.user_id, role: member.role },
-                message: `Removing this member (role: ${member.role}) revokes their access to org ${context.orgId}. Call again with confirmed=true to proceed.`,
+                message: `Removing this member (role: ${member.role}) revokes their access to org ${orgId}. Call again with confirmed=true to proceed.`,
             });
         }
         if (member.role === 'owner') {
             const { count } = await db()
                 .from('org_members')
                 .select('id', { count: 'exact', head: true })
-                .eq('org_id', context.orgId)
+                .eq('org_id', orgId)
                 .eq('role', 'owner');
             if ((count ?? 0) <= 1)
                 return j({ error: 'Cannot remove the last owner', code: 'LAST_OWNER' });
@@ -257,7 +288,7 @@ export function registerOrgTools(server) {
         const { error } = await db()
             .from('org_members')
             .delete()
-            .eq('org_id', context.orgId)
+            .eq('org_id', orgId)
             .eq('user_id', user_id);
         if (error)
             return j(dbToolError(error));
@@ -265,7 +296,7 @@ export function registerOrgTools(server) {
             action: 'remove_member',
             resourceType: 'org_member',
             resourceId: member.id,
-            details: { org_id: context.orgId, removed_user: user_id, role: member.role },
+            details: { org_id: orgId, removed_user: user_id, role: member.role },
         }).catch(() => { });
         return j({ ok: true, removed_user_id: user_id });
     });
@@ -286,20 +317,11 @@ export function registerOrgTools(server) {
             approval_id: z.string().uuid().optional(),
         },
     }, async ({ user_id, role, org_id, confirmed, approval_id }) => {
-        const context = await resolveCurrentOrgId(org_id);
-        if (!context.ok)
-            return j({ error: context.error, code: context.code });
-        const { data: member, error: memberErr } = await db()
-            .from('org_members')
-            .select('id, user_id, role')
-            .eq('org_id', context.orgId)
-            .eq('user_id', user_id)
-            .maybeSingle();
-        if (memberErr)
-            return j(dbToolError(memberErr));
-        if (!member)
-            return j({ error: 'Member not found', code: 'NOT_FOUND' });
-        const approvalParams = { user_id, role, org_id: context.orgId };
+        const found = await lookupOrgMember(user_id, org_id);
+        if (!found.ok)
+            return found.result;
+        const { orgId, member } = found;
+        const approvalParams = { user_id, role, org_id: orgId };
         if (!confirmed) {
             return j({
                 confirmation_required: true,
@@ -326,7 +348,7 @@ export function registerOrgTools(server) {
         const { data, error } = await db()
             .from('org_members')
             .update({ role })
-            .eq('org_id', context.orgId)
+            .eq('org_id', orgId)
             .eq('user_id', user_id)
             .select('user_id, role')
             .maybeSingle();
@@ -336,7 +358,7 @@ export function registerOrgTools(server) {
             action: 'update_member_role',
             resourceType: 'org_member',
             resourceId: member.id,
-            details: { org_id: context.orgId, user_id, new_role: role },
+            details: { org_id: orgId, user_id, new_role: role },
         }).catch(() => { });
         return j({ member: data });
     });

package/build/tools/templates.js

@@ -241,10 +241,10 @@ export function registerTemplateTools(server) {
             idempotentHint: false,
             openWorldHint: false,
         },
-        description: 'Save an email template from supplied content. brief is a required description/label stored as brief_template, even with body_html; this tool performs no AI generation and consumes no AI credits. Use create_template_from_brief to AI-generate content using the site brand voice.',
+        description: 'Create a template record from content you supply. `brief` is a stored note and does NOT trigger AI generation or use credits; use create_template_from_brief to AI-generate.',
         inputSchema: {
             name: templateName,
-            brief: z.string().min(1).describe('Required description/label; stored only, no AI generation or AI credits.'),
+            brief: z.string().min(1).describe('Stored as brief_template only. Does NOT trigger AI generation or use credits. Use create_template_from_brief to AI-generate.'),
             subject_hint: z.string().optional(),
             body_html: z.string().optional(),
             category: z.string().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.212",
+  "version": "1.0.214",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",