@sendinel/mcp-server 1.0.64 → 1.0.66

package/build/server.d.ts

@@ -8,6 +8,15 @@ export declare const ALL_TOOL_GROUPS: string[];
 export type ToolGroup = keyof typeof GROUP_REGISTRY;
 export type ToolGroupMap = Record<string, string>;
 export declare function getRequiredScope(name: string): string;
+/**
+ * Marker scope for a tester connection (#4011), a new OAuth grant until an owner promotes it. It adds no
+ * permission level: such a connection sees every read tool plus only the approval-gated tools.
+ */
+export declare const TESTER_CONNECTION_SCOPE = "tester";
+export declare function isTesterConnection(scopes: readonly string[] | null | undefined): boolean;
+/** Tools a tester connection may see and call: reads, plus anything that goes through a person's approval. */
+export declare function testerConnectionAllowsTool(name: string): boolean;
+export declare function testerConnectionRefusal(name: string): string;
 export declare const GATEWAY_TOOL_NAMES: string[];
 /**
  * Collects tool-name → group metadata from the same group registry used by

package/build/server.js

@@ -1,4 +1,5 @@
 import { runWithToolContext } from './db.js';
+import { isApprovalGatedAction } from './lib/action-approvals.js';
 import { registerAnalyticsTools } from './tools/analytics.js';
 import { registerCampaignTools } from './tools/campaigns.js';
 import { registerCampaignSetTools } from './tools/campaign-sets.js';
@@ -175,6 +176,24 @@ function scopeAllows(keyScopes, required) {
     const requiredLevel = SCOPE_HIERARCHY[required] ?? 99;
     return keyScopes.some((s) => (SCOPE_HIERARCHY[s] ?? 0) >= requiredLevel);
 }
+/**
+ * Marker scope for a tester connection (#4011), a new OAuth grant until an owner promotes it. It adds no
+ * permission level: such a connection sees every read tool plus only the approval-gated tools.
+ */
+export const TESTER_CONNECTION_SCOPE = 'tester';
+export function isTesterConnection(scopes) {
+    return !!scopes?.includes(TESTER_CONNECTION_SCOPE);
+}
+/** Tools a tester connection may see and call: reads, plus anything that goes through a person's approval. */
+export function testerConnectionAllowsTool(name) {
+    return getRequiredScope(name) === 'read'
+        || name === 'send_broadcast'
+        || name === 'activate_campaigns'
+        || isApprovalGatedAction(name);
+}
+export function testerConnectionRefusal(name) {
+    return `"${name}" is not available to a tester connection. A tester connection can read, and can ask a person to approve outward actions: call an approval-gated tool (for example send_broadcast) and a person approves it from the approve_url it returns. To change this tool directly, ask the workspace owner to promote the connection in Dashboard > Agent Connect.`;
+}
 // Names of the meta-tools gateway mode registers in place of the real catalog
 // (see tools/gateway.ts). Grouped as 'gateway' rather than any real tool
 // group -- a gateway-mode client's toolGroups list holds the groups it can
@@ -285,14 +304,19 @@ function createScopeProxy(server, scopes, toolGroup) {
                     // ── Scope enforcement (only when scopes are provided) ─────────────
                     if (scopes !== null) {
                         const required = getRequiredScope(name);
-                        if (!scopeAllows(scopes, required)) {
+                        const tester = isTesterConnection(scopes);
+                        const allowed = () => tester
+                            ? testerConnectionAllowsTool(name)
+                            : scopeAllows(scopes, required);
+                        if (!allowed()) {
                             // Don't register tools the key can't access — they won't appear in tool list
                             return;
                         }
                         // Wrap handler with runtime scope check (defense in depth)
                         const guardedHandler = (...args) => {
-                            if (!scopeAllows(scopes, required)) {
-                                return { content: [{ type: 'text', text: `Forbidden: this action requires "${required}" scope.` }] };
+                            if (!allowed()) {
+                                const text = tester ? testerConnectionRefusal(name) : `Forbidden: this action requires "${required}" scope.`;
+                                return { content: [{ type: 'text', text }] };
                             }
                             return runWithToolContext(toolGroup, name, () => handler(...args));
                         };

package/build/tools/campaigns.js

@@ -3140,6 +3140,16 @@ Return ONLY valid JSON with this exact shape:
             survey_id: z.string().uuid().optional(),
             skip_if_event: z.string().trim().min(1).nullable().optional().describe('Event name that skips this step at send time; null clears the rule.'),
             send_only_if_event: z.string().trim().min(1).nullable().optional().describe('Event required for this step to send; null clears the rule.'),
+            link_actions: z.array(z.discriminatedUnion('action', [
+                z.object({ url_pattern: z.string().trim().min(1).max(500), action: z.enum(['add_tag', 'remove_tag']), tag: z.string().regex(/^[a-z0-9][a-z0-9-]{0,62}$/) }),
+                z.object({
+                    url_pattern: z.string().trim().min(1).max(500).describe('Placeholder URL in the email body (a trailing * matches a prefix). Matching links are rewritten at send time to a signed /api/pick/<token> confirm page.'),
+                    action: z.literal('set_property'),
+                    property: z.string().regex(/^[a-z][a-z0-9_]{0,62}$/).describe('Custom contact property to set, for example "track". Consent, suppression and unsubscribe fields are rejected.'),
+                    value: z.string().trim().min(1).max(100),
+                    continue_url: z.string().url().max(500).optional().describe('Optional http(s) link shown on the thank-you page.'),
+                }),
+            ])).max(10).optional().describe('Link actions for this step. set_property links show a Confirm page; only the Confirm click writes the property (last click wins). Replaces the whole list.'),
         },
     }, async ({ step_id, ...updates }) => {
         const projectId = getProjectId();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.64",
+  "version": "1.0.66",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",