@sendinel/mcp-server 1.0.78 → 1.0.80

package/build/lib/agent-mailbox.js

@@ -1,3 +1,4 @@
+import { assertSendAccepted, SendRefusedError } from "@sendinel/domain";
 import { randomUUID } from 'node:crypto';
 import { appendPhysicalAddressFooter, appendUnsubscribeFooter, buildListUnsubscribeHeaders, createUnsubscribeUrl, messageIds, normalizeSubject } from '@sendinel/domain';
 import { db, requestContext } from '../db.js';
@@ -141,6 +142,7 @@ export async function sendAgentReply(mailbox, input, approvalId) {
                 replyTo: `${mailbox.local_part}@${mailbox.domain}`,
                 headers: { 'Message-ID': message.message_id_header, ...(parentId ? { 'In-Reply-To': parentId, References: references.join(' ') } : {}), ...message.unsubscribeHeaders },
             });
+            assertSendAccepted(result);
             sent.push(message.id);
             checked(await mailboxDb().from('email_log').update({ status: 'sent', sent_at: new Date().toISOString(), provider_message_id: result.messageId })
                 .eq('id', message.log_id).eq('project_id', getProjectId()));
@@ -148,7 +150,10 @@ export async function sendAgentReply(mailbox, input, approvalId) {
                 .eq('id', message.id).eq('mailbox_id', mailbox.id).eq('project_id', getProjectId()));
             await mailboxAudit('reply_sent', mailbox, { approval_id: approvalId, thread_id: threadId, message_id: message.id });
         }
-        catch {
+        catch (error) {
+            if (error instanceof SendRefusedError) {
+                checked(await mailboxDb().from('email_log').update({ status: 'failed', error_message: error.message }).eq('id', message.log_id).eq('project_id', getProjectId()));
+            }
             // Preserve reservation and queued log on ambiguous failures; never retry automatically or claim no send.
             await mailboxAudit('reply_needs_human', mailbox, { approval_id: approvalId, thread_id: threadId, message_id: message.id });
             return { sent: false, sent_message_ids: sent, thread_id: threadId,

package/build/lib/email-provider.d.ts

@@ -1,15 +1,19 @@
+import { type SendRefusal } from "@sendinel/domain";
 export declare const EMAIL_PROVIDER_NAMES: readonly ["resend", "sendgrid", "ses", "postmark", "mailgun", "elastic-email"];
 export type EmailProviderName = (typeof EMAIL_PROVIDER_NAMES)[number];
 type SendArgs = {
     from: string;
-    to: string;
+    to: string | string[];
+    cc?: string[];
+    bcc?: string[];
     subject: string;
     html?: string;
     text?: string;
     replyTo?: string;
     headers?: Record<string, string>;
 };
-type SendResult = {
+type SendResult = SendRefusal | {
+    refused?: false;
     provider: EmailProviderName;
     messageId: string;
 };

package/build/lib/email-provider.js

@@ -1,5 +1,6 @@
+import { checkProjectSendAllowlist } from "@sendinel/domain";
 import { Resend } from "resend";
-import { db } from "../db.js";
+import { adminDb, db } from "../db.js";
 import { decrypt } from "../crypto.js";
 export const EMAIL_PROVIDER_NAMES = [
     "resend",
@@ -125,6 +126,10 @@ async function sendViaResend(apiKey, args) {
         payload.html = args.html;
     if (args.text)
         payload.text = args.text;
+    if (args.cc?.length)
+        payload.cc = args.cc;
+    if (args.bcc?.length)
+        payload.bcc = args.bcc;
     if (args.replyTo)
         payload.reply_to = args.replyTo;
     if (args.headers)
@@ -143,7 +148,7 @@ async function sendViaElasticEmail(apiKey, args) {
             "X-ElasticEmail-ApiKey": apiKey,
         },
         body: JSON.stringify({
-            Recipients: { To: [args.to] },
+            Recipients: { To: Array.isArray(args.to) ? args.to : [args.to], ...(args.cc?.length ? { CC: args.cc } : {}), ...(args.bcc?.length ? { BCC: args.bcc } : {}) },
             Content: {
                 From: from.email,
                 FromName: from.name,
@@ -171,7 +176,7 @@ async function sendViaSendGrid(apiKey, args) {
             "Content-Type": "application/json",
         },
         body: JSON.stringify({
-            personalizations: [{ to: [{ email: args.to }] }],
+            personalizations: [{ to: (Array.isArray(args.to) ? args.to : [args.to]).map((email) => ({ email })), ...(args.cc?.length ? { cc: args.cc.map((email) => ({ email })) } : {}), ...(args.bcc?.length ? { bcc: args.bcc.map((email) => ({ email })) } : {}) }],
             from: { email: from.email, name: from.name },
             subject: args.subject,
             content: [
@@ -196,7 +201,9 @@ async function sendViaPostmark(apiKey, args) {
         },
         body: JSON.stringify({
             From: args.from,
-            To: args.to,
+            To: Array.isArray(args.to) ? args.to.join(",") : args.to,
+            ...(args.cc?.length ? { Cc: args.cc.join(",") } : {}),
+            ...(args.bcc?.length ? { Bcc: args.bcc.join(",") } : {}),
             Subject: args.subject,
             HtmlBody: args.html,
             TextBody: args.text,
@@ -212,7 +219,11 @@ async function sendViaPostmark(apiKey, args) {
 async function sendViaMailgun(apiKey, args) {
     const form = new FormData();
     form.set("from", args.from);
-    form.set("to", args.to);
+    form.set("to", Array.isArray(args.to) ? args.to.join(",") : args.to);
+    if (args.cc?.length)
+        form.set("cc", args.cc.join(","));
+    if (args.bcc?.length)
+        form.set("bcc", args.bcc.join(","));
     form.set("subject", args.subject);
     if (args.html)
         form.set("html", args.html);
@@ -237,6 +248,9 @@ async function sendViaMailgun(apiKey, args) {
     return id || `mg_${Date.now()}`;
 }
 export async function sendEmailForSite(projectId, siteId, args) {
+    const refusal = await checkProjectSendAllowlist(adminDb(), projectId, args, "mcp");
+    if (refusal)
+        return refusal;
     const config = await resolveProviderConfig(projectId, siteId);
     switch (config.name) {
         case "resend":

package/build/tools/campaigns.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import { BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, readAllRows, } from '@sendinel/domain';
+import { assertSendAccepted, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, readAllRows, } from '@sendinel/domain';
 // Subpath import, not the barrel above -- reply-actions.ts uses node:crypto,
 // and MCP-server-side that's fine (this never runs in an Edge Function), but
 // keeping it off the shared barrel avoids re-creating the Edge-Function
@@ -2450,8 +2450,12 @@ Do not include body_html in your response; Sendinel renders body_html from block
         let sendResult;
         try {
             sendResult = await sendEmailForSite(projectId, site_id, payload);
+            assertSendAccepted(sendResult);
         }
         catch (error) {
+            if (error instanceof SendRefusedError) {
+                await db().from('email_log').insert({ project_id: projectId, site_id, to_email: to, from_email: site.from_email, subject: resolvedSubject, category: 'transactional', status: 'failed', error_message: error.message });
+            }
             return txt(`Error: Send failed — ${error instanceof Error ? error.message : 'unknown provider error'}`);
         }
         // Log to email_log
@@ -2692,6 +2696,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         let sendResult;
         try {
             sendResult = await sendEmailForSite(projectId, site_id, payload);
+            assertSendAccepted(sendResult);
         }
         catch (error) {
             await db().from('email_log').update({ status: 'failed' }).eq('id', logRow.id);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.78",
+  "version": "1.0.80",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",