@sendinel/mcp-server 1.0.4 → 1.0.5

package/build/tools/delivery-ops.js

@@ -4,6 +4,13 @@ import { getProjectId } from '../project.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
 export function registerDeliveryOpsTools(server) {
     server.registerTool('refresh_domain_dns', {
+        title: 'Refresh Domain DNS',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
         description: 'Refresh and return stored DNS verification status for a sending domain.',
         inputSchema: { domain_id: z.string().uuid() },
     }, async ({ domain_id }) => {
@@ -23,6 +30,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ spf, dkim, dmarc, all_verified: Boolean(spf && dkim && dmarc) });
     });
     server.registerTool('dnsbl_check', {
+        title: 'DNSBL Check',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
         description: 'Return the latest DNSBL snapshot for all monitored zones for a site sending domain.',
         inputSchema: {
             siteId: z.string().uuid(),
@@ -58,6 +72,13 @@ export function registerDeliveryOpsTools(server) {
         });
     });
     server.registerTool('dnsbl_delisting_draft', {
+        title: 'DNSBL Delisting Draft',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
         description: 'Draft a DNSBL delisting ticket using tenant send metrics as evidence. Does not auto-submit.',
         inputSchema: {
             siteId: z.string().uuid(),
@@ -113,6 +134,13 @@ export function registerDeliveryOpsTools(server) {
         });
     });
     server.registerTool('get_cron_runs', {
+        title: 'Get Cron Runs',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'List recent cron job executions to diagnose why scheduled sends are not firing.',
         inputSchema: {
             job_name: z.string().optional(),
@@ -136,6 +164,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ runs: data ?? [], recent_failures: failed.length, total: data?.length ?? 0 });
     });
     server.registerTool('get_queue_status', {
+        title: 'Get Queue Status',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Get the current send queue status — pending, processing, retry, and failed counts.',
         inputSchema: {
             site_id: z.string().uuid().optional(),
@@ -167,6 +202,13 @@ export function registerDeliveryOpsTools(server) {
         });
     });
     server.registerTool('get_send_dlq', {
+        title: 'Get Send DLQ',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'List messages in the send dead-letter queue — emails that failed all retries.',
         inputSchema: {
             limit: z.number().int().min(1).max(50).default(20).optional(),
@@ -187,6 +229,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ dlq: data ?? [], count: data?.length ?? 0 });
     });
     server.registerTool('get_scoring_rules', {
+        title: 'Get Scoring Rules',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Get contact scoring rules for the current project.',
         inputSchema: {},
     }, async () => {
@@ -200,6 +249,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ rules: data });
     });
     server.registerTool('update_scoring_rules', {
+        title: 'Update Scoring Rules',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Update contact scoring rules. Only the provided fields are changed.',
         inputSchema: {
             open_weight: z.number().min(0).max(100).optional(),
@@ -230,6 +286,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ rules: data, ok: true });
     });
     server.registerTool('explain_contact_score', {
+        title: 'Explain Contact Score',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Explain why a subscriber has their current engagement score.',
         inputSchema: {
             contact_id: z.string().uuid().optional(),
@@ -299,6 +362,13 @@ export function registerDeliveryOpsTools(server) {
         });
     });
     server.registerTool('export_data', {
+        title: 'Export Data',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Export contacts, email log, campaign, or suppression data as JSON.',
         inputSchema: {
             resource: z.enum(['contacts', 'email_log', 'campaigns', 'suppressions']),
@@ -326,6 +396,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ resource, count: data?.length ?? 0, data: data ?? [], truncated: (data?.length ?? 0) === limit });
     });
     server.registerTool('list_domains', {
+        title: 'List Domains',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'List sending domains configured for the project and their current verification status.',
         inputSchema: { site_id: z.string().uuid().optional() },
     }, async ({ site_id }) => {
@@ -350,6 +427,13 @@ export function registerDeliveryOpsTools(server) {
         return j({ domains: data ?? [], count: data?.length ?? 0 });
     });
     server.registerTool('register_domain', {
+        title: 'Register Domain',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: true,
+        },
         description: 'Register a sending domain for a site and link it to the site record.',
         inputSchema: {
             site_id: z.string().uuid(),

package/build/tools/drafts.js

@@ -2,8 +2,16 @@ import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { checkPlanLimit } from '../plan-limits.js';
+import { recordBrandAssetUsage } from '../lib/brand-asset-usage.js';
 export function registerDraftTools(server) {
     server.registerTool('create_draft', {
+        title: 'Create Draft',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
         description: 'Create an AI-generated email draft pending human approval',
         inputSchema: {
             site_id: z.string().uuid(),
@@ -13,8 +21,9 @@ export function registerDraftTools(server) {
             campaign_id: z.string().uuid().optional(),
             prompt: z.string().optional().describe('The prompt or brief used to generate this draft'),
             model: z.string().optional().describe('Model that generated the draft, defaults to ANTHROPIC_MODEL_ID'),
+            brand_asset_ids: z.array(z.string().uuid()).optional().describe('Stable brand_media_assets ids explicitly referenced by this draft.'),
         },
-    }, async ({ site_id, subject, body_html, body_text, campaign_id, prompt, model }) => {
+    }, async ({ site_id, subject, body_html, body_text, campaign_id, prompt, model, brand_asset_ids }) => {
         const limit = await checkPlanLimit('ai_drafts');
         if (!limit.allowed) {
             return { content: [{ type: 'text', text: `AI draft limit reached (${limit.current}/${limit.limit}). Upgrade to BYOD for unlimited drafts.` }] };
@@ -26,9 +35,26 @@ export function registerDraftTools(server) {
             .single();
         if (error)
             return { content: [{ type: 'text', text: `Error: ${error.message}` }] };
+        await recordBrandAssetUsage({
+            client: db(),
+            projectId: getProjectId(),
+            source: 'ai_draft',
+            resourceId: data.id,
+            html: body_html,
+            assetIds: brand_asset_ids,
+        }).catch((err) => {
+            console.warn('Failed to record brand asset usage for MCP draft:', err);
+        });
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
     server.registerTool('list_drafts', {
+        title: 'List Drafts',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'List AI email drafts by status',
         inputSchema: {
             site_id: z.string().uuid().optional(),
@@ -52,6 +78,13 @@ export function registerDraftTools(server) {
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
     server.registerTool('get_draft', {
+        title: 'Get Draft',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Get one AI email draft by ID, including full body content.',
         inputSchema: {
             draft_id: z.string().uuid(),
@@ -70,6 +103,13 @@ export function registerDraftTools(server) {
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
     server.registerTool('promote_draft_to_campaign', {
+        title: 'Promote Draft To Campaign',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
         description: 'Promote an AI draft into an email campaign in one call. Creates the campaign and first campaign step, then links the draft to the campaign. The campaign is created as draft for review/launch.',
         inputSchema: {
             draft_id: z.string().uuid(),
@@ -145,6 +185,15 @@ export function registerDraftTools(server) {
             .single();
         if (stepError)
             return { content: [{ type: 'text', text: `Campaign created (${campaign.id}) but failed to create step: ${stepError.message}` }] };
+        await recordBrandAssetUsage({
+            client: db(),
+            projectId,
+            source: 'campaign_step',
+            resourceId: step.id,
+            html: step.body_html,
+        }).catch((err) => {
+            console.warn('Failed to record brand asset usage for MCP promoted draft:', err);
+        });
         const { data: updatedDraft } = await db()
             .from('ai_drafts')
             .update({
@@ -160,6 +209,13 @@ export function registerDraftTools(server) {
         return { content: [{ type: 'text', text: JSON.stringify({ campaign, first_step: step, draft: updatedDraft }, null, 2) }] };
     });
     server.registerTool('approve_draft', {
+        title: 'Approve Draft',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Approve a pending AI draft, marking it ready to send',
         inputSchema: {
             draft_id: z.string().uuid(),
@@ -181,6 +237,13 @@ export function registerDraftTools(server) {
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
     });
     server.registerTool('reject_draft', {
+        title: 'Reject Draft',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Reject a pending AI draft with optional feedback',
         inputSchema: {
             draft_id: z.string().uuid(),

package/build/tools/forms.js

@@ -4,40 +4,73 @@ import { getProjectId } from '../project.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
 export function registerFormTools(server) {
     server.registerTool('list_forms', {
+        title: 'List Forms',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'List signup forms with field and submission counts.',
         inputSchema: { site_id: z.string().uuid().optional() },
     }, async ({ site_id }) => {
-        let query = db().from('forms').select('id, name, slug, fields, active, site_id, created_at').eq('project_id', getProjectId()).order('created_at', { ascending: false });
+        let query = db().from('signup_forms').select('id, name, slug, fields, status, submissions, site_id, created_at').eq('project_id', getProjectId()).order('created_at', { ascending: false });
         if (site_id)
             query = query.eq('site_id', site_id);
         const { data, error } = await query;
         if (error)
             return j({ error: error.message });
-        return j({ forms: (data ?? []).map((form) => ({ ...form, field_count: Array.isArray(form.fields) ? form.fields.length : 0, submission_count: 0 })) });
+        return j({ forms: (data ?? []).map((form) => ({ ...form, field_count: Array.isArray(form.fields) ? form.fields.length : 0, submission_count: form.submissions ?? 0 })) });
     });
     server.registerTool('get_form_stats', {
+        title: 'Get Form Stats',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'Get submission stats for a signup form.',
         inputSchema: { form_id: z.string().uuid() },
     }, async ({ form_id }) => {
-        const { count } = await db().from('form_submissions').select('id', { count: 'exact', head: true }).eq('form_id', form_id).eq('project_id', getProjectId());
+        const projectId = getProjectId();
+        const { data: form, error: formError } = await db().from('signup_forms').select('id, submissions').eq('id', form_id).eq('project_id', projectId).maybeSingle();
+        if (formError)
+            return j({ error: formError.message });
+        if (!form)
+            return j({ error: 'Form not found', code: 'NOT_FOUND' });
         const since = new Date(Date.now() - 7 * 86400000).toISOString();
-        const { count: sevenDay } = await db().from('form_submissions').select('id', { count: 'exact', head: true }).eq('form_id', form_id).eq('project_id', getProjectId()).gte('created_at', since);
-        return j({ submissions_total: count ?? 0, submissions_7d: sevenDay ?? 0, top_sources: [], conversion_rate: null });
+        const { count: sevenDay, error: eventsError } = await db().from('contact_events')
+            .select('id', { count: 'exact', head: true })
+            .eq('project_id', projectId)
+            .eq('event_type', 'form_submit')
+            .eq('metadata->>form_id', form_id)
+            .gte('created_at', since);
+        if (eventsError)
+            return j({ error: eventsError.message });
+        return j({ submissions_total: form.submissions ?? 0, submissions_7d: sevenDay ?? 0, top_sources: [], conversion_rate: null });
     });
     server.registerTool('create_form', {
+        title: 'Create Form',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
         description: 'Create a signup form.',
         inputSchema: {
             site_id: z.string().uuid(),
             name: z.string().min(1),
-            fields: z.array(z.record(z.unknown())),
+            fields: z.array(z.record(z.string(), z.unknown())),
             redirect_url: z.string().url().optional(),
             double_opt_in: z.boolean().optional(),
         },
     }, async ({ site_id, name, fields, redirect_url, double_opt_in }) => {
         const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 80);
-        const { data, error } = await db().from('forms')
-            .insert({ project_id: getProjectId(), site_id, name, slug, fields, redirect_url: redirect_url ?? null, double_opt_in: double_opt_in ?? false, active: true })
-            .select('id, name, slug, fields, active')
+        const { data, error } = await db().from('signup_forms')
+            .insert({ project_id: getProjectId(), site_id, name, slug, fields, settings: { redirect_url: redirect_url ?? null, double_opt_in: double_opt_in ?? false }, status: 'active' })
+            .select('id, name, slug, fields, status')
             .single();
         if (error)
             return j({ error: error.message });

package/build/tools/gdpr.js

@@ -2,11 +2,18 @@ import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
-import { requestApproval, checkApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval } from '../lib/action-approvals.js';
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
 export function registerGdprTools(server) {
     server.registerTool('delete_subscriber_data', {
+        title: 'Delete Subscriber Data',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
         description: 'GDPR Article 17: Permanently delete a subscriber and all their data. Anonymizes email_log, hashes suppressions, cascades to subscriptions/enrollments/tokens. This action is IRREVERSIBLE. Requires human approval via dashboard.',
         inputSchema: {
             contact_id: z.string().uuid().describe('UUID of the subscriber to delete'),
@@ -23,12 +30,17 @@ export function registerGdprTools(server) {
             .maybeSingle();
         if (!contact)
             return txt('Contact not found or does not belong to this project.');
+        const approvalParams = { contact_id, email: contact.email, reason };
         // Human approval required (always, even in autonomous mode — protected tier)
         if (!approval_id) {
-            const approval = await requestApproval('delete_subscriber_data', { contact_id, email: contact.email, reason });
+            const channelContext = currentChannelContext();
+            const decision = assertChannelCanExecute('delete_subscriber_data', approvalParams, channelContext);
+            if (!decision.allowed)
+                return txt(decision.reason ?? 'This channel cannot request this action.');
+            const approval = await requestApproval('delete_subscriber_data', approvalParams, undefined, channelContext);
             return j(approval);
         }
-        const check = await checkApproval(approval_id, { consume: true });
+        const check = await checkApproval(approval_id, { consume: true, action: 'delete_subscriber_data', params: approvalParams });
         if (!check.approved) {
             return txt(`Approval ${approval_id} is ${check.status}. ${check.status === 'pending' ? 'Waiting for human approval via dashboard.' : 'Request a new approval.'}`);
         }
@@ -44,6 +56,13 @@ export function registerGdprTools(server) {
         return j(data);
     });
     server.registerTool('list_deletion_log', {
+        title: 'List Deletion Log',
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
         description: 'List GDPR deletion audit log entries',
         inputSchema: {
             limit: z.number().int().min(1).max(200).optional().default(50),

package/build/tools/newsletters.d.ts

@@ -0,0 +1,2 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerNewsletterTools(server: McpServer): void;