@sendinel/mcp-server 1.0.86 → 1.0.88

package/README.md

@@ -12,7 +12,7 @@ AI-controlled email operations control plane for campaigns, contacts, segments,
 
 ## Tool groups
 
-Sendinel currently exposes 35 tool groups and 336 tools (gateway mode exposes 4 meta-tools, sharing how_to with full mode). These counts are checked against the tool registry in CI, so this table matches what ships.
+Sendinel currently exposes 35 tool groups and 337 tools (gateway mode exposes 4 meta-tools, sharing how_to with full mode). These counts are checked against the tool registry in CI, so this table matches what ships.
 
 | Group | Count | Purpose |
 |-------|-------|---------|
@@ -32,7 +32,7 @@ Sendinel currently exposes 35 tool groups and 336 tools (gateway mode exposes 4
 | `content` | 14 | Content blocks, gated asset links, blog ingest and auto-publish, sources |
 | `data` | 19 | Platform connectors, imports, API keys, migration jobs, notifications, tenant export |
 | `data-proposals` | 3 | Data-derived campaign proposal generation, listing, approval |
-| `delivery-ops` | 23 | Domains, DNSBL, deliverability diagnostics, queue, DLQ, exports, blackout dates |
+| `delivery-ops` | 24 | Domains, DNSBL, deliverability diagnostics, queue, DLQ, exports, blackout dates |
 | `drafts` | 6 | Draft create/approve/reject and draft-to-campaign promotion |
 | `forms` | 3 | Form creation, listing, stats |
 | `gdpr` | 4 | Contact data deletion and GDPR log |

package/build/lib/action-approvals.js

@@ -10,6 +10,7 @@ import { fireWebhookEvent } from './webhook-events.js';
  * Tier 2 (protected)  — Requires dashboard approval + typed confirmation. Irreversible data ops.
  */
 const GATED_ACTIONS = new Set([
+    'recheck_domain_dns', // live provider verification may request an EE certificate
     'draft_agent_reply',
     'create_agent_mailbox',
     'launch_campaign', // sends real emails

package/build/server.js

@@ -80,6 +80,7 @@ export const ALL_TOOL_GROUPS = Object.keys(GROUP_REGISTRY);
 // ── Scope enforcement ─────────────────────────────────────────────────────
 // Maps tool names to required scope. Mirrors dashboard's WRITE_TOOLS/ADMIN_TOOLS.
 const WRITE_TOOLS = new Set([
+    'recheck_domain_dns',
     'mark_agent_message', 'draft_agent_reply', 'create_agent_mailbox',
     'add_subscriber', 'import_subscribers', 'update_subscriber', 'bulk_update_subscribers',
     'create_subscriber_view', 'update_subscriber_view', 'delete_subscriber_view',

package/build/tools/connector.js

@@ -243,24 +243,30 @@ export function registerConnectorTools(server) {
             }),
             metadata_columns: z.array(z.string()).max(100).optional()
                 .describe('Extra source columns copied into contact custom_properties.'),
+            signal_columns: z.record(z.string(), z.string().min(1).max(160)).optional()
+                .describe('Source timestamp columns mapped to signal-only event names. Shared names use the earliest timestamp. Requires a view reinstall.'),
+            signal_backfill: z.enum(['write', 'skip']).optional()
+                .describe('First sync of a signal column: write historical events (default), or record values without events.'),
             identity_merge: z.enum(['off', 'by_email']).optional()
                 .describe('How the contact view treats a person found both in the source table and as a Sendinel-owned contact: off = two rows (default), by_email = one row per email (source wins the name, tags combined, unsubscribe and test flags kept from either side). Omit to leave it unchanged.'),
             ...approvalFields,
         },
-    }, async ({ table_id, mapping, metadata_columns, identity_merge, confirmed, approval_id }) => {
-        const approvalParams = { table_id, mapping, metadata_columns, ...(identity_merge ? { identity_merge } : {}) };
+    }, async ({ table_id, mapping, metadata_columns, signal_columns, signal_backfill, identity_merge, confirmed, approval_id }) => {
+        const signalParams = { ...(signal_columns !== undefined ? { signal_columns } : {}), ...(signal_backfill !== undefined ? { signal_backfill } : {}) };
+        const approvalParams = { table_id, mapping, metadata_columns, ...signalParams, ...(identity_merge ? { identity_merge } : {}) };
         const gate = await authorizeConnectorMutation('set_connector_mapping', confirmed, approval_id, approvalParams, {
             effect: 'Replace the connector mapping, clear removed custom properties, refresh the live view, and resync contacts.',
             table_id,
             mapping,
             metadata_columns: metadata_columns ?? [],
+            ...signalParams,
             ...(identity_merge ? { identity_merge } : {}),
         });
         if (gate)
             return gate;
         const result = await callConnectorApi('/api/dashboard/connector/mapping', {
             method: 'PATCH',
-            body: { table_id, mapping, metadata_columns, ...(identity_merge ? { identity_merge } : {}) },
+            body: { table_id, mapping, metadata_columns, ...signalParams, ...(identity_merge ? { identity_merge } : {}) },
         });
         return j(result.ok ? result.data : { error: result.error });
     });

package/build/tools/delivery-ops.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import dns from 'node:dns/promises';
-import { cancelSendQueueRows, findReplayableEnrollmentDlqRows, listSendQueueRows, replayEnrollmentDlqRows, retrySendQueueRows, } from '@sendinel/domain';
+import { cancelSendQueueRows, computeDomainReadiness, findReplayableEnrollmentDlqRows, listSendQueueRows, replayEnrollmentDlqRows, retrySendQueueRows, } from '@sendinel/domain';
 import { logAudit } from '../audit.js';
 import { adminDb, db } from '../db.js';
 import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
@@ -141,7 +141,7 @@ export function registerDeliveryOpsTools(server) {
             idempotentHint: true,
             openWorldHint: false,
         },
-        description: 'Return stored DNS verification status for a sending domain. This does not perform a live DNS refresh.',
+        description: 'Returns stored SPF/DKIM/DMARC from the latest health check; does NOT query DNS live. Use recheck_domain_dns for a live re-check.',
         inputSchema: { domain_id: z.string().uuid() },
     }, async ({ domain_id }) => {
         const { data, error } = await db().from('domains')
@@ -170,6 +170,40 @@ export function registerDeliveryOpsTools(server) {
             : null;
         return j({ spf, dkim, dmarc, all_verified: allVerified });
     });
+    server.registerTool('recheck_domain_dns', {
+        title: 'Recheck Domain DNS Live',
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: true,
+        },
+        description: 'Perform a live provider/DNS verification via the domains:write API and persist domain status and Elastic Email tracking observations. Returns Sendinel readiness; raw EE TrackingStatus is advisory and may remain Broken even when ready. Standard approval applies: call without approval_id, then repeat with the same domain_id and the approved approval_id. Failed checks return an error, not a readiness verdict.',
+        inputSchema: {
+            domain_id: z.string().uuid(),
+            approval_id: z.string().uuid().optional().describe('Call without this to request approval, then repeat with the approved approval_id.'),
+        },
+    }, withApproval('recheck_domain_dns', async ({ domain_id }) => {
+        try {
+            const result = await callSendinelV1(`/api/v1/domains/${domain_id}/verify`, { method: 'POST' });
+            if (!result.ok)
+                return j({ error: v1ErrorMessage(result.error), status: result.status });
+            const { data, error } = await db().schema('email').from('domains')
+                .select('id, name, provider, status, dns_records, verified_at')
+                .eq('project_id', getProjectId())
+                .eq('id', domain_id)
+                .maybeSingle();
+            if (error)
+                return j({ error: error.message });
+            if (!data)
+                return j({ error: 'Domain not found after verification', code: 'NOT_FOUND' });
+            return j({ domain_id, checked_live: true, status: data.status, verified_at: data.verified_at,
+                readiness: computeDomainReadiness(data) });
+        }
+        catch (error) {
+            return j({ error: error instanceof Error ? error.message : 'Domain recheck failed' });
+        }
+    }));
     server.registerTool('dnsbl_check', {
         title: 'DNSBL Check',
         annotations: {
@@ -763,28 +797,36 @@ export function registerDeliveryOpsTools(server) {
             idempotentHint: true,
             openWorldHint: false,
         },
-        description: 'List sending domains configured for the project and their current verification status.',
+        description: 'List sending domains with Sendinel readiness (ready true/false/null, reasons, provider_detail). Raw provider values, including EE tracking_status_raw, are labelled detail only and do not drive readiness.',
         inputSchema: { site_id: z.string().uuid().optional() },
     }, async ({ site_id }) => {
         const projectId = getProjectId();
-        let domainQuery = db().from('domains')
+        let domainQuery = db().schema('email').from('domains')
             .select('id, name, provider, provider_id, region, status, dns_records, verified_at, created_at')
             .eq('project_id', projectId)
             .order('created_at', { ascending: false });
         if (site_id) {
-            const { data: site } = await db().from('sites')
+            const { data: site, error: siteError } = await db().schema('email').from('sites')
                 .select('domain_id')
                 .eq('id', site_id)
                 .eq('project_id', projectId)
                 .maybeSingle();
-            if (!site?.domain_id)
+            if (siteError)
+                return j({ error: siteError.message });
+            if (!site)
+                return j({ error: 'Site not found', code: 'NOT_FOUND' });
+            if (!site.domain_id)
                 return j({ domains: [], count: 0 });
             domainQuery = domainQuery.eq('id', site.domain_id);
         }
         const { data, error } = await domainQuery;
         if (error)
             return j({ error: error.message });
-        return j({ domains: data ?? [], count: data?.length ?? 0 });
+        if (!data)
+            return j({ error: 'Domain query returned no result' });
+        return j({ domains: data.map((domain) => ({
+                ...domain, readiness: computeDomainReadiness(domain),
+            })), count: data.length });
     });
     server.registerTool('register_domain', {
         title: 'Register Domain',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.86",
+  "version": "1.0.88",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",