@sendinel/mcp-server 1.0.28 → 1.0.30

package/build/lib/action-approvals.d.ts

@@ -35,6 +35,8 @@ export interface ApprovalResult {
     summary: string;
     expires_at: string;
     approve_via: string;
+    /** One-tap approval page; works on a phone and needs no project switching (#3661). */
+    approve_url: string;
     message: string;
 }
 /**

package/build/lib/action-approvals.js

@@ -155,6 +155,10 @@ export function buildApprovalSummary(action, params) {
     const fn = summaries[action];
     return fn ? fn(params) : `Execute ${action} with provided parameters`;
 }
+function approvalPageUrl(approvalId) {
+    const base = (process.env.NEXT_PUBLIC_APP_URL ?? process.env.SENDINEL_APP_URL ?? process.env.APP_URL ?? 'https://sendinel.ai').replace(/\/$/, '');
+    return `${base}/dashboard/approvals/${approvalId}`;
+}
 function normalizeApprovalParams(value) {
     if (Array.isArray(value)) {
         return value.map(normalizeApprovalParams);
@@ -209,7 +213,8 @@ export async function requestApproval(action, params, apiKeyId, channelContext)
         action,
         summary,
         expires_at: expiresAt,
-        approve_via: 'Dashboard → Pending Approvals, or Slack /sendinel approve',
+        approve_via: 'Open approve_url (works on a phone), Dashboard → Pending Approvals, or Slack /sendinel approve',
+        approve_url: approvalPageUrl(data.id),
         message: `This action requires human approval. A notification has been sent to your dashboard. Approval ID: ${data.id}. Check status with: poll this approval_id, or wait for the webhook callback (event: approval.decided). Token expires in 30 minutes.`,
     };
 }

package/build/tools/contacts.js

@@ -1921,15 +1921,11 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             ({ query: q } = await applySegmentRules(q, { custom_property: params.custom_property }, db(), projectId, fieldTypes));
         }
         if (params.site_id) {
-            const { data: subs } = await db()
-                .from('site_subscriptions')
-                .select('contact_id')
-                .eq('site_id', params.site_id)
-                .eq('subscribed', true);
-            const ids = (subs ?? []).map((s) => s.contact_id);
-            if (!ids.length)
+            // Shared site filter: an inner join, not an id list that overflows past ~350 contacts (#3674).
+            const siteFiltered = await applySegmentRules(q, { site_id: params.site_id }, db(), projectId);
+            if (siteFiltered.siteContactIds && siteFiltered.siteContactIds.length === 0)
                 return j({ total: 0, sample: [] });
-            q = q.in('id', ids);
+            q = siteFiltered.query;
         }
         if (params.company_domain) {
             const { data: companies } = await db()
@@ -1976,6 +1972,9 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (params.custom_property) {
             ({ query: countQ } = await applySegmentRules(countQ, { custom_property: params.custom_property }, db(), projectId, fieldTypes));
         }
+        // The total must count the same site the sample came from (#3674).
+        if (params.site_id)
+            ({ query: countQ } = await applySegmentRules(countQ, { site_id: params.site_id }, db(), projectId));
         const { count } = await countQ;
         return j({ total: count ?? (data ?? []).length, sample: data ?? [] });
     });

package/build/tools/lists.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, normalizeSegmentRulesToTree, } from '@sendinel/domain';
+import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, normalizeSegmentRulesToTree, readAllRows, } from '@sendinel/domain';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
@@ -34,17 +34,13 @@ async function getSegmentContactIds(rules) {
     const { query: filtered, siteContactIds } = await applySegmentRules(q, rules, db(), projectId, fieldTypes);
     if (siteContactIds && siteContactIds.length === 0)
         return [];
-    const { data, error } = await filtered;
-    if (error || !data)
-        return [];
+    // Paged and loud (#3674): an unpaged read stopped at 1,000 rows, and an error read as "no one".
+    const data = await readAllRows(filtered);
     const contacts = data.filter((contact) => evaluateSegmentRules(contact, tree, fieldTypes));
     let ids = contacts.map((contact) => String(contact.id));
     if (tree.exclude_suppressed !== false && ids.length > 0) {
-        const { data: suppressed } = await db()
-            .from('suppressions')
-            .select('email')
-            .eq('project_id', projectId);
-        if (suppressed?.length) {
+        const suppressed = await readAllRows(db().from('suppressions').select('id, email').eq('project_id', projectId));
+        if (suppressed.length) {
             const suppressedEmails = new Set(suppressed.map((row) => row.email));
             ids = contacts
                 .filter((contact) => !suppressedEmails.has(String(contact.email)))

package/build/tools/segments.js

@@ -3,7 +3,7 @@ import Anthropic from '@anthropic-ai/sdk';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { getAnthropicModelId } from '../anthropic-model.js';
-import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, normalizeSegmentRulesToTree, } from '@sendinel/domain';
+import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, normalizeSegmentRulesToTree, readAllRows, } from '@sendinel/domain';
 async function loadFieldTypes(projectId) {
     const client = db();
     const scoped = typeof client.schema === 'function' ? client.schema('email') : client;
@@ -34,18 +34,14 @@ async function getSegmentContactIds(rules) {
     const { query: filtered, siteContactIds } = await applySegmentRules(q, rules, db(), projectId, fieldTypes);
     if (siteContactIds && siteContactIds.length === 0)
         return [];
-    const { data, error } = await filtered;
-    if (error || !data)
-        return [];
+    // Paged and loud (#3674): an unpaged read stopped at 1,000 rows, and an error read as "no one".
+    const data = await readAllRows(filtered);
     const contacts = data.filter((contact) => evaluateSegmentRules(contact, tree, fieldTypes));
     let ids = contacts.map((c) => String(c.id));
     if (tree.exclude_suppressed !== false && ids.length > 0) {
-        const { data: suppressed } = await db()
-            .from('suppressions')
-            .select('email')
-            .eq('project_id', projectId);
-        if (suppressed?.length) {
-            const suppressedEmails = new Set(suppressed.map((s) => s.email));
+        const suppressed = await readAllRows(db().from('suppressions').select('id, email').eq('project_id', projectId));
+        if (suppressed.length) {
+            const suppressedEmails = new Set(suppressed.map((row) => row.email));
             ids = contacts
                 .filter((c) => !suppressedEmails.has(String(c.email)))
                 .map((c) => String(c.id));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.28",
+  "version": "1.0.30",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",