@sendora/mcp 1.5.1 → 1.8.0

package/dist/generated/screens/domain-records.html

@@ -356,7 +356,7 @@ button:focus-visible {
   }
 
   // src/version.ts
-  var MCP_VERSION = "1.5.1";
+  var MCP_VERSION = "1.8.0";
 
   // screens/host.ts
   var PROTOCOL_VERSION = "2026-01-26";

package/dist/generated/screens/message-timeline.html

@@ -356,7 +356,7 @@ button:focus-visible {
   }
 
   // src/version.ts
-  var MCP_VERSION = "1.5.1";
+  var MCP_VERSION = "1.8.0";
 
   // screens/host.ts
   var PROTOCOL_VERSION = "2026-01-26";

package/dist/icons.js

@@ -0,0 +1,20 @@
+/*
+ * A client shows a server's icon at 16 to 32 px, where brand/README.md asks
+ * for the small cut on its cobalt tile, which reads on light and dark alike.
+ * The files are written inline, so neither the npm package nor the hosted
+ * image reads brand/ at run time. test/brand.test.ts checks that they decode
+ * to brand/favicon.svg and brand/favicon-64.png.
+ */
+/** The icons that serverInfo lists. */
+export const icons = [
+    {
+        src: 'data:image/svg+xml;base64,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',
+        mimeType: 'image/svg+xml',
+        sizes: ['any'],
+    },
+    {
+        src: 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAEP0lEQVR42u2bS0xcVRjHf+fOINAyDFAp1LS0ZXCjVAXRmlpsRdChMakLU+MjpQn4rCZCjLpQ042xCwVjqDYtNZamBqUL2yYQacWkunAhFiqlSqkQWkt5TQemM8M87hwXBFKRx6UOE4Z7/6ubOd+d5P+b75zvu+fOEUxRZmHbBgllwGMC1iFYTjRL4pbQg5CnBdT8deq+9puHxcRFlr0zNqR6q5DyZYRQWIqSqCD3xyWbKzrqs/2TALLsnbFq0NsoBI+iA0lJc3yyqbijPtuvAKiq91O9mAcQgoIxZ/ATAJFZ2LYBZOuSTftZpoMwhe5VJJTpzvz45DdJVZQqCArRqSSiSAGZgW4l1yoCkaBX+0IIi4LOZQAwABgADAAGAAOAAcAAYADQq8xTP7jUdM9Muyg4RoJ09fpo/mWUbxoduNxq9D8PZBa1SS0ApsrpUtlT/Tcnf3TqcwokWUxUvZvB68+n6XcNEALKS9J444U0fS+Cb+5Mi9pMCFsVKC9JY/dzK/VdBit2pUcdhLD3ARW70nnt2ZXRWwZn0g57Ch+Wr0YR2r744y+v8UXdwKIHYEq2vbpHS+D5Li8DwwEKHkpEaICwKScBf0Dya7t7aQCYhOAIULBRG4SHcxLw+UO0nPcsDQAA7RfnCSHXwphv8UIw38pNdQ0O4mIV3nvlDk0Q3i5dxZhfUvvd0IIZSVhmouSpFdjzraxfHYuU0HPFR8OZEWqPD+H2hsKTARNq/cODy6PySJ5FU8e4Jc/C9dEg5/70ht181to46ipt2DdbSU2JIcYsiDELUlNi2JSTwJNbk/j5NxeOETV8AABaL3hwe0Lka4XwQCLDI0F+7/SG9Zevq7SxJv22GWOsFhNb8hI59r2DQFCGDwDA2QsevGMhNt+vDcLWBxMZcoYPQtnTqdjzrXPGWS0mbnhD/6lKmvuAufTSjlTeKVsV9vS2PX5u1vGTn9/JXVnxmhfw7bsvLkwneODbQT460BfxVXz9mljNsZnTxIa1Fa45Nsjeg32R/r/P/4oN+7PAwfpBKr+6FjEAPVd8mmO7p4ldkE3RfV8PUHW4PyIAGs6MzCPWGbld4eqj/VQd7p9Xit6Kao8PcbnPP2dc71U/R04MR3ZbvPpoP+V7e3G6Fm732O0NUfZ+N71X/bOaf/GDbjzTdINhK4OzybLcxDPFKRRstGDLiGNFkllTC62lDE5oWbzCzu23U5xvnVztL/X6aPzJyZETw9OajxgA482QAcAAYAAwABgADAAGAAOAAcAAsPgASCldejUvJaMKQlzWcQL0KiBP6dW9gCZFQM34iUrdnZhSlZB6SBk/Syv3688/+7qaczsUgLhkc4VE/qAj+6dTrgfemiyDHfXZ/vgk8zaQ1Ut6OkhUKfks2RHc1tKSF/jX6fEJ2Z44e7dURalEFCHkumg/VieRN5CiR0CTElIPdTXndtw8/g9pUJA+sUHj5gAAAABJRU5ErkJggg==',
+        mimeType: 'image/png',
+        sizes: ['64x64'],
+    },
+];

package/dist/server.js

@@ -1,5 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/server';
 import { registerDocuments } from './documents.js';
+import { icons } from './icons.js';
 import { instructionsFor } from './instructions.js';
 import { listed, targetsFor } from './listing.js';
 import { registerPrompts } from './prompts.js';
@@ -24,6 +25,7 @@ export function buildServer(docs, connection) {
         title: 'Sendora',
         version: MCP_VERSION,
         websiteUrl: 'https://sendora.se/docs/mcp',
+        icons,
     }, {
         instructions: instructionsFor(connection),
         cacheHints: {

package/dist/tools/message-fields.js

@@ -13,6 +13,13 @@ export const MAX_MESSAGE_BYTES = 10 * 1024 * 1024;
 /** The tool's own bound on a message's attachments together, tighter than the API's (§4.2). */
 export const MAX_ATTACHMENT_BYTES = 5 * 1024 * 1024;
 const BASE64_LINE_LENGTH = 76;
+/*
+ * The control characters, U+0000 to U+001F and U+007F to U+009F, which the
+ * domain matches as \p{Cc}. ChatGPT checks every tool's patterns with an
+ * engine that cannot read \p{…}, and then refuses every tool of the
+ * connection (docs/design/oauth.md §1.2), so the patterns spell them out.
+ */
+export const CONTROL = String.raw `\x00-\x1F\x7F-\x9F`;
 export const address = z
     .union([
     z.email(),
@@ -30,7 +37,7 @@ export const address = z
 ])
     .describe('An address as a plain string, or an object with the address and a display name.');
 const HEADER_NAME = /^[A-Za-z0-9][A-Za-z0-9-]{0,63}$/;
-const HEADER_VALUE = /^[^\p{Cc}]{1,998}$/u;
+const HEADER_VALUE = new RegExp(`^[^${CONTROL}]{1,998}$`, 'u');
 const DENIED_HEADERS = new Set([
     'from',
     'sender',
@@ -87,7 +94,7 @@ const METADATA_KEY = /^[A-Za-z0-9_.-]{1,40}$/;
 export const metadata = z
     .record(z.string(), z
     .string()
-    .regex(/^[^\p{Cc}]{0,500}$/u, 'metadata values are at most 500 characters without control characters'))
+    .regex(new RegExp(`^[^${CONTROL}]{0,500}$`, 'u'), 'metadata values are at most 500 characters without control characters'))
     .superRefine((values, ctx) => {
     const keys = Object.keys(values);
     if (keys.length > 20) {
@@ -107,7 +114,7 @@ const SUBSTITUTION_KEY = /^[A-Za-z0-9_]{1,40}$/;
 export const substitutions = z
     .record(z.string(), z
     .string()
-    .regex(/^[^\p{Cc}]{0,500}$/u, 'substitution values are at most 500 characters without control characters'))
+    .regex(new RegExp(`^[^${CONTROL}]{0,500}$`, 'u'), 'substitution values are at most 500 characters without control characters'))
     .superRefine((values, ctx) => {
     const keys = Object.keys(values);
     if (keys.length > 20) {
@@ -133,13 +140,13 @@ export const substitutions = z
 export const tag = z
     .string()
     .trim()
-    .regex(/^[^\p{Cc}]{1,100}$/u, 'a tag is 1 to 100 characters without control characters')
+    .regex(new RegExp(`^[^${CONTROL}]{1,100}$`, 'u'), 'a tag is 1 to 100 characters without control characters')
     .nullable()
     .optional();
 export const attachment = z.object({
     name: z
         .string()
-        .regex(/^[^\p{Cc}/\\]{1,255}$/u, 'a file name without path separators, at most 255 characters')
+        .regex(new RegExp(String.raw `^[^${CONTROL}/\\]{1,255}$`, 'u'), 'a file name without path separators, at most 255 characters')
         .describe('The file name, without path separators.'),
     content: z
         .base64('base64 without line breaks')
@@ -152,7 +159,7 @@ export const attachment = z.object({
         .describe('A media type such as application/pdf; application/octet-stream when left out.'),
     contentId: z
         .string()
-        .regex(/^[^\s<>\p{Cc}]{1,255}$/u, 'a content id without whitespace or angle brackets')
+        .regex(new RegExp(String.raw `^[^\s<>${CONTROL}]{1,255}$`, 'u'), 'a content id without whitespace or angle brackets')
         .nullable()
         .optional()
         .describe('Lets the HTML part show the attachment as cid:<contentId>.'),

package/dist/tools/messages.js

@@ -71,13 +71,20 @@ export const messageDetailOutput = messageOutput.extend({
         .describe("The timeline, oldest event first, with the receiver's answer: Reception, Delivery, TransientFailure, Bounce, Feedback for a complaint and more."),
 });
 export const searchInput = z.object({
-    recipient: z.email().optional().describe('Messages to this address, in to, cc or bcc.'),
+    recipient: z
+        .string()
+        .trim()
+        .min(3)
+        .max(254)
+        .optional()
+        .describe('Messages to this address, in to, cc or bcc. A whole address matches exactly. Anything else of three characters or more matches anywhere in an address, such as kommun.se.'),
     streamId: z.uuid().optional().describe('Messages on this stream of the server.'),
     broadcastId: z.uuid().optional().describe('Messages of this broadcast.'),
     tag: z.string().trim().min(1).max(100).optional().describe('Messages sent with this tag.'),
-    status: recipientStatus
+    status: z
+        .union([recipientStatus, z.array(recipientStatus).min(1).max(5)])
         .optional()
-        .describe('Messages with at least one recipient in this state.'),
+        .describe('Messages with at least one recipient in this state, or in any of these states.'),
     from: z.iso
         .datetime({ offset: true })
         .optional()
@@ -95,7 +102,7 @@ export const searchMessagesTool = {
     operations: ['POST /v1/messages/search'],
     register: (server, { connection, targets }) => registerServerTool(server, targets, 'search_messages', {
         title: 'Search the message log',
-        description: "Searches this server's message log, newest first, by recipient, stream, broadcast, tag, a recipient's state and when the message was submitted. Answers each message with its recipients and their state, and next for the following page; get_message reads one message's timeline.",
+        description: "Searches this server's message log, newest first, by a recipient's address or part of one, stream, broadcast, tag, a recipient's state and when the message was submitted. Answers each message with its recipients and their state, and next for the following page; get_message reads one message's timeline.",
         inputSchema: searchInput,
         outputSchema: z.object({
             messages: z.array(messageOutput).describe('The page of messages, newest first.'),

package/dist/tools/server.js

@@ -28,6 +28,14 @@ export const limitOutput = z.object({
     used: z.number().int().describe('Emails the period has taken so far.'),
     resetsAt: z.string().describe('When the period ends and the count starts again.'),
 });
+export const inboundCapOutput = z.object({
+    limit: z
+        .number()
+        .int()
+        .describe("Emails the account may receive in the calendar month in UTC, over every inbound stream; the account's monthly cap on sending until an administrator moves it."),
+    used: z.number().int().describe('Emails received this month so far, one per recipient.'),
+    resetsAt: z.string().describe('When the month ends and the count starts again.'),
+});
 export const streamOutput = z.object({
     streamId: z.string().describe('What a send names as streamId.'),
     kind: z
@@ -76,6 +84,9 @@ const outputSchema = z.object({
     limits: z
         .array(limitOutput)
         .describe('Every limit a send on the server is held to, with its use this minute or month.'),
+    inboundCap: inboundCapOutput
+        .nullable()
+        .describe("The account's monthly cap on received mail, apart from the limits on sending, with its use; past it, mail to the account is refused for now. Null on a test server, which receives no mail."),
     streams: z.array(streamOutput).describe("The server's streams; a send names one as streamId."),
     sendingDomains: z
         .array(sendableDomainOutput)
@@ -128,6 +139,7 @@ export const getServerTool = {
                     createdAt: own.createdAt,
                 },
                 limits: own.limits,
+                inboundCap: own.inboundCap,
                 streams,
                 sendingDomains: own.sendingDomains,
                 connection: { kind: own.mode, changes },

package/dist/tools/webhooks.js

@@ -11,6 +11,8 @@ const eventName = z.enum([
     'cap_warning',
     'cap_reached',
     'inbound',
+    'inbound_cap_warning',
+    'inbound_cap_reached',
 ]);
 export const webhookOutput = z.object({
     webhookId: z.string().describe('What the deliveries and a delete refer to.'),

package/dist/version.js

@@ -1,2 +1,2 @@
 /** This package's version, held equal to its package.json by a test. */
-export const MCP_VERSION = '1.5.1';
+export const MCP_VERSION = '1.8.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendora/mcp",
-  "version": "1.5.1",
+  "version": "1.8.0",
   "description": "The official MCP server for Sendora: its documentation and API for coding agents.",
   "license": "MIT",
   "type": "module",
@@ -25,7 +25,7 @@
   "dependencies": {
     "@modelcontextprotocol/server": "^2.1.0",
     "zod": "^4.6.2",
-    "@sendora/sdk": "^4.1.0"
+    "@sendora/sdk": "^4.4.0"
   },
   "devDependencies": {
     "@anthropic-ai/mcpb": "2.1.2",
@@ -39,10 +39,10 @@
     "fflate": "^0.8.3",
     "typescript": "~7.0.2",
     "vitest": "^4.1.11",
-    "@sendora/api": "0.0.0",
     "@sendora/db": "0.0.0",
-    "@sendora/domain": "0.0.0",
+    "@sendora/api": "0.0.0",
     "@sendora/observability": "0.0.0",
+    "@sendora/domain": "0.0.0",
     "@sendora/site": "0.0.0"
   },
   "scripts": {