@sendinel/mcp-server 1.0.230 → 1.0.231

package/build/tools/analytics.js

@@ -198,6 +198,27 @@ function buildTrueConversionAnalytics(params) {
             .sort((a, b) => b.count - a.count || b.revenue - a.revenue),
     };
 }
+/**
+ * #4838: send allowlist visibility without exposing addresses. NULL = no restriction (inactive);
+ * an array (even empty) is active and recipients must match an exact address on it. Anything else
+ * (row or column not loaded) is unknown, reported as null, never as "inactive": the send gate fails
+ * closed on an unreadable list, so this must not claim there is none.
+ */
+function sendAllowlistSummary(list) {
+    if (Array.isArray(list))
+        return { active: true, count: list.length };
+    return list === null ? { active: false, count: null } : { active: null, count: null };
+}
+function sendAllowlistFields(projectList, orgList) {
+    const project = sendAllowlistSummary(projectList);
+    const org = sendAllowlistSummary(orgList);
+    return {
+        send_allowlist_active: project.active,
+        send_allowlist_count: project.count,
+        org_send_allowlist_active: org.active,
+        org_send_allowlist_count: org.count,
+    };
+}
 export function registerAnalyticsTools(server) {
     server.registerTool('list_event_log', {
         title: 'List Event Log',
@@ -273,7 +294,7 @@ export function registerAnalyticsTools(server) {
             idempotentHint: true,
             openWorldHint: false,
         },
-        description: 'List all projects accessible to this API key. Returns project ID, name, plan, and associated organization. Useful for orchestrators managing multiple products through a single Sendinel account.',
+        description: 'List all projects accessible to this API key. Returns project ID, name, plan, and associated organization. Useful for orchestrators managing multiple products through a single Sendinel account. Each project also shows its send limits: sandbox_allowed_domains (recipient domains allowed while sandbox_mode is on), send_allowlist_active/send_allowlist_count (project list of exact addresses) and org_send_allowlist_active/org_send_allowlist_count (organization list of exact addresses). A recipient must pass every active list; addresses are not shown. An active value of null means that list could not be read.',
         inputSchema: {},
     }, async () => {
         const ctx = requestContext();
@@ -297,10 +318,10 @@ export function registerAnalyticsTools(server) {
             const ownedOrgIds = Array.from(new Set((ownedOrgs ?? []).map((row) => row.org_id).filter(Boolean)));
             const [{ data: directProjects, error: directProjectsError }, { data: ownedProjects, error: ownedProjectsError }] = await Promise.all([
                 directProjectIds.length
-                    ? adminDb().from('projects').select('id, name, org_id, sandbox_mode, sandbox_allowed_domains').in('id', directProjectIds)
+                    ? adminDb().from('projects').select('id, name, org_id, sandbox_mode, sandbox_allowed_domains, send_allowlist').in('id', directProjectIds)
                     : Promise.resolve({ data: [], error: null }),
                 ownedOrgIds.length
-                    ? adminDb().from('projects').select('id, name, org_id, sandbox_mode, sandbox_allowed_domains').in('org_id', ownedOrgIds)
+                    ? adminDb().from('projects').select('id, name, org_id, sandbox_mode, sandbox_allowed_domains, send_allowlist').in('org_id', ownedOrgIds)
                     : Promise.resolve({ data: [], error: null }),
             ]);
             if (directProjectsError)
@@ -317,11 +338,12 @@ export function registerAnalyticsTools(server) {
             }
             const orgIds = Array.from(new Set(Array.from(byId.values()).map((project) => project.org_id).filter((id) => Boolean(id))));
             const { data: organizations, error: organizationsError } = orgIds.length
-                ? await adminDb().from('organizations').select('id, name').in('id', orgIds)
+                ? await adminDb().from('organizations').select('id, name, send_allowlist').in('id', orgIds)
                 : { data: [], error: null };
             if (organizationsError)
                 return txt(`Error: ${dbToolError(organizationsError).error}`);
             const orgNames = new Map((organizations ?? []).map((org) => [org.id, org.name]));
+            const orgAllowlists = new Map((organizations ?? []).map((org) => [org.id, org.send_allowlist]));
             return j({
                 projects: Array.from(byId.values())
                     .sort((a, b) => a.name.localeCompare(b.name) || a.id.localeCompare(b.id))
@@ -332,6 +354,7 @@ export function registerAnalyticsTools(server) {
                     org_name: project.org_id ? orgNames.get(project.org_id) ?? null : null,
                     sandbox_mode: project.sandbox_mode,
                     sandbox_allowed_domains: project.sandbox_allowed_domains,
+                    ...sendAllowlistFields(project.send_allowlist, project.org_id ? orgAllowlists.get(project.org_id) : null),
                     active: project.id === ctx.projectId,
                 })),
             });
@@ -341,19 +364,19 @@ export function registerAnalyticsTools(server) {
         // Look up the org for this project, then list all projects in that org.
         const { data: project, error: projErr } = await adminDb()
             .from('projects')
-            .select('id, name, org_id, sandbox_mode, sandbox_allowed_domains')
+            .select('id, name, org_id, sandbox_mode, sandbox_allowed_domains, send_allowlist')
             .eq('id', projectId)
             .maybeSingle();
         if (projErr || !project)
             return txt(`Error: could not find project ${projectId}`);
         if (!project.org_id) {
             // No org — return just this project
-            return j({ projects: [{ id: project.id, name: project.name, sandbox_mode: project.sandbox_mode, sandbox_allowed_domains: project.sandbox_allowed_domains, current: true }] });
+            return j({ projects: [{ id: project.id, name: project.name, sandbox_mode: project.sandbox_mode, sandbox_allowed_domains: project.sandbox_allowed_domains, ...sendAllowlistFields(project.send_allowlist, null), current: true }] });
         }
         // List all projects in the same organization
         const { data: projects, error: listErr } = await adminDb()
             .from('projects')
-            .select('id, name, sandbox_mode, sandbox_allowed_domains')
+            .select('id, name, sandbox_mode, sandbox_allowed_domains, send_allowlist')
             .eq('org_id', project.org_id)
             .order('name');
         if (listErr)
@@ -361,7 +384,7 @@ export function registerAnalyticsTools(server) {
         // Get org info
         const { data: org } = await adminDb()
             .from('organizations')
-            .select('id, name, plan')
+            .select('id, name, plan, send_allowlist')
             .eq('id', project.org_id)
             .maybeSingle();
         return j({
@@ -371,6 +394,7 @@ export function registerAnalyticsTools(server) {
                 name: p.name,
                 sandbox_mode: p.sandbox_mode,
                 sandbox_allowed_domains: p.sandbox_allowed_domains,
+                ...sendAllowlistFields(p.send_allowlist, org?.send_allowlist),
                 current: p.id === projectId,
             })),
         });

package/build/tools/campaigns.js

@@ -957,7 +957,7 @@ export function registerCampaignTools(server) {
             idempotentHint: false,
             openWorldHint: false,
         },
-        description: 'Create a new email campaign. For triggered campaigns, provide one trigger shape: trigger_event_name, trigger_tag, trigger_type=date_field with trigger_config, or segment_id for ongoing audience targeting. For type=broadcast, send_at schedules the send for a future instant; the draft still needs activation via activate_campaigns (human approval), which enrolls nobody. Use create_campaign plus steps and activate_campaigns for saved sequences/journeys; for a one-off segment broadcast use send_broadcast with segment_id and optional send_at, which creates, enrolls and activates after approval.',
+        description: 'Create a new email campaign. For triggered campaigns, provide one trigger shape: trigger_event_name, trigger_tag, trigger_type=date_field with trigger_config, or segment_id for ongoing audience targeting. For type=broadcast, send_at schedules the send for a future instant; the draft still needs activation via activate_campaigns (human approval), which enrolls nobody. Use create_campaign plus steps and activate_campaigns for saved sequences/journeys; for a one-off segment broadcast use send_broadcast with segment_id and optional send_at, which creates, enrolls and activates after approval. Optional timezone (IANA name, e.g. America/New_York) sets the campaign time zone at create time; when omitted the database column default applies, unchanged from before.',
         inputSchema: {
             ...reentryFields,
             site_id: z.string().uuid(),
@@ -973,8 +973,12 @@ export function registerCampaignTools(server) {
             segment_id: z.string().uuid().nullable().optional().describe('Segment UUID for ongoing audience targeting; membership is re-evaluated on sends'),
             send_at: z.string().datetime().nullable().optional().describe('For type=broadcast only: ISO 8601 instant to schedule the send. Must be in the future. Set null for no schedule. Activation via activate_campaigns requires human approval and enrolls nobody. To schedule a one-off segment broadcast use send_broadcast with segment_id and send_at.'),
             send_class: z.enum(['broadcast', 'product']).optional().describe("Who may receive it when the project's consent gate is on: 'broadcast' (default) = only contacts who opted in to marketing; 'product' = also the customer's signed-up users (onboarding, trial, account mail)."),
+            timezone: z.string().optional().describe('Optional IANA time zone for this campaign, e.g. America/New_York. Must be a valid IANA name. When omitted, the database column default applies (no change from earlier behavior).'),
         },
-    }, async ({ site_id, name, type, description, sends_per_hour, requires_approval, trigger_event_name, trigger_tag, trigger_type, trigger_config, segment_id, send_at, send_class, reentry_mode, period_key }) => {
+    }, async ({ site_id, name, type, description, sends_per_hour, requires_approval, trigger_event_name, trigger_tag, trigger_type, trigger_config, segment_id, send_at, send_class, reentry_mode, period_key, timezone }) => {
+        if (timezone !== undefined && !validTimezone(timezone)) {
+            return j({ error: `timezone must be a valid IANA time zone name (for example America/New_York); got "${timezone}"`, code: 'validation_failed' });
+        }
         const limit = await checkPlanLimit('active_campaigns');
         if (!limit.allowed) {
             return { content: [{ type: 'text', text: `Active campaign limit reached (${limit.current}/${limit.limit}). Upgrade to Pro for unlimited campaigns.` }] };
@@ -989,6 +993,8 @@ export function registerCampaignTools(server) {
             sends_per_hour: sends_per_hour ?? null,
             requires_approval,
             ...(send_class ? { send_class } : {}),
+            // Omitted: no key at all, so the column default applies exactly as before (#4838 item 9).
+            ...(timezone !== undefined ? { timezone } : {}),
         };
         const reentry = resolveCampaignReentry({ reentry_mode, period_key }, { type, trigger_type });
         if (!reentry.ok)
@@ -2723,7 +2729,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             idempotentHint: false,
             openWorldHint: true,
         },
-        description: 'Send a test email to a specified address using the site\'s configured provider. Content from step_id, draft_id, or raw subject/body_html uses the real send renderer. Optional dry_run previews without sending and includes unresolved_merge_tags (tags with no recipient value and no fallback, with subject/html/text locations); suppressed recipients are refused. Logged as test, not counted in campaign metrics.',
+        description: 'Send a test email to a specified address using the site\'s configured provider. Content from step_id, draft_id, or raw subject/body_html uses the real send renderer. Optional dry_run previews without sending and includes unresolved_merge_tags (tags with no recipient value and no fallback, with subject/html/text locations); suppressed recipients are refused. Logged as test, not counted in campaign metrics. The recipient must pass every active send limit: while sandbox_mode is on, its domain must be in sandbox_allowed_domains; if the project send allowlist is active, the exact address must be on it; if the organization send allowlist is active, the exact address must be on that too. Being on sandbox_allowed_domains alone is not enough when an exact-address list is active. list_projects shows which lists are active (send_allowlist_active, org_send_allowlist_active). A refusal names the list that refused (send_allowlist_refused or sandbox_refused).',
         inputSchema: {
             approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with only approval_id to run the action.'),
             to_email: z.string().email().describe('Email address to send the test to'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.230",
+  "version": "1.0.231",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",