@sendinel/mcp-server 1.0.103 → 1.0.105

package/build/lib/action-approvals.d.ts

@@ -46,9 +46,12 @@ export interface ApprovalResult {
     approve_via: string;
     /** One-tap approval page; works on a phone and needs no project switching (#3661). */
     approve_url: string;
+    preview_text: string;
     message: string;
 }
 export declare function approvalPageUrl(approvalId: string): string;
+/** SHA-256 over JSON-compatible params, with recursive stable key ordering. */
+export declare function approvalPayloadHash(action: string, params: unknown): string;
 /**
  * Request human approval for an action. Creates a pending approval token
  * and returns instructions for the agent to wait.

package/build/lib/action-approvals.js

@@ -1,6 +1,8 @@
-import { decodeHtmlEntities, stripHtmlComments } from '@sendinel/domain';
+import { createHash } from 'node:crypto';
+import { buildApprovalPreview, isHumanApprovalChannel, triggerChangeSummary, decodeHtmlEntities, stripHtmlComments } from '@sendinel/domain';
 import { db, requestContext } from '../db.js';
 import { getProjectId } from '../project.js';
+import { captureApprovalSnapshot, withoutApprovalSnapshot } from './approval-snapshot.js';
 import { fireWebhookEvent } from './webhook-events.js';
 /**
  * Action approval tiers:
@@ -28,6 +30,7 @@ const GATED_ACTIONS = new Set([
     'import_subscribers', // bulk data ingestion
     'subscribe_webhook', // outbound data channel
     'send_transactional', // sends a real email
+    'update_campaign', // live trigger edits only; the domain rule gates callers
     'set_campaign_trigger', // changes who starts an active or paused campaign
     'update_campaign_status', // activation sends real emails (see special case below)
     'add_list_members', // bulk contact-list membership write
@@ -230,6 +233,8 @@ function launchSummary(p, d) {
 }
 /** Build a human-readable summary of the action for the approval screen */
 export function buildApprovalSummary(action, params, display = {}) {
+    if ((action === 'update_campaign' || action === 'set_campaign_trigger') && params.previous_campaign && params.updates)
+        return triggerChangeSummary(String(params.previous_campaign.name ?? params.campaign_id), params.previous_campaign, params.updates);
     const summaries = {
         launch_campaign: (p) => launchSummary(p, display) ?? `Launch campaign "${p.name || p.campaign_name || 'unknown'}" — will send emails to real contacts`,
         install_connector_schema: (p) => `Install connector schema for project ${p.project_id ?? 'current'}`,
@@ -300,11 +305,15 @@ function normalizeApprovalParams(value) {
     if (value && typeof value === 'object') {
         return Object.fromEntries(Object.entries(value)
             .filter(([, entryValue]) => entryValue !== undefined)
-            .sort(([a], [b]) => a.localeCompare(b))
+            .sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)
             .map(([key, entryValue]) => [key, normalizeApprovalParams(entryValue)]));
     }
     return value;
 }
+/** SHA-256 over JSON-compatible params, with recursive stable key ordering. */
+export function approvalPayloadHash(action, params) {
+    return createHash('sha256').update(JSON.stringify(normalizeApprovalParams({ action, params }))).digest('hex');
+}
 function approvalParamsEqual(expected, actual) {
     return JSON.stringify(normalizeApprovalParams(expected)) === JSON.stringify(normalizeApprovalParams(actual));
 }
@@ -315,9 +324,18 @@ function approvalParamsEqual(expected, actual) {
 export async function requestApproval(action, params, apiKeyId, channelContext, display) {
     const tier = getApprovalTier(action, params);
     const summary = buildApprovalSummary(action, params, display);
-    const expiresAt = new Date(Date.now() + 30 * 60 * 1000).toISOString();
+    const expiresAt = new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString();
     const { channel, verified } = channelContext ?? currentChannelContext();
     const actor = requestContext();
+    // Ignore any model-supplied reserved field; freeze facts read by the server.
+    const cleanParams = withoutApprovalSnapshot(params);
+    const snapshot = await captureApprovalSnapshot(action, cleanParams, getProjectId());
+    const payload = cleanParams.payload;
+    if (action === 'send_broadcast' && Array.isArray(payload?.contact_ids) && Array.isArray(snapshot.contact_ids) &&
+        !approvalParamsEqual({ ids: [...payload.contact_ids].sort() }, { ids: snapshot.contact_ids })) {
+        throw new Error('Approval audience changed while preparing the preview. Request a new approval.');
+    }
+    const frozenParams = { ...cleanParams, __approval_snapshot: snapshot };
     const { data, error } = await db()
         .from('action_approvals')
         .insert({
@@ -327,7 +345,8 @@ export async function requestApproval(action, params, apiKeyId, channelContext,
         agent_label: actor?.agentLabel ?? null,
         action,
         tier,
-        params,
+        params: frozenParams,
+        payload_hash: approvalPayloadHash(action, frozenParams),
         summary,
         expires_at: expiresAt,
         channel,
@@ -352,7 +371,8 @@ export async function requestApproval(action, params, apiKeyId, channelContext,
         expires_at: expiresAt,
         approve_via: 'Open approve_url (works on a phone) or Dashboard → Settings → Pending Approvals',
         approve_url: approvalPageUrl(data.id),
-        message: `This action requires human approval. A notification has been sent to your dashboard. Approval ID: ${data.id}. Check status with: poll this approval_id, or wait for the webhook callback (event: approval.decided). Token expires in 30 minutes.`,
+        preview_text: buildApprovalPreview({ action, params: frozenParams, summary }).plain_summary,
+        message: `This action requires human approval. A notification has been sent to your dashboard. Approval ID: ${data.id}. Check status with: poll this approval_id, or wait for the webhook callback (event: approval.decided). Token expires in 24 hours.`,
     };
 }
 /**
@@ -362,7 +382,7 @@ export async function requestApproval(action, params, apiKeyId, channelContext,
 export async function checkApproval(approvalId, options = {}) {
     const { data, error } = await db()
         .from('action_approvals')
-        .select('action, status, decided_by, decided_via, expires_at, used_at, params')
+        .select('action, status, decided_by, decided_via, expires_at, used_at, params, payload_hash, requested_at')
         .eq('id', approvalId)
         .eq('project_id', getProjectId())
         .maybeSingle();
@@ -371,17 +391,29 @@ export async function checkApproval(approvalId, options = {}) {
     if (options.action && data.action !== options.action) {
         return { approved: false, status: 'action_mismatch' };
     }
-    if (options.params && !approvalParamsEqual(options.params, data.params)) {
+    if (options.consume && data.payload_hash) {
+        if (!options.action || !options.params)
+            return { approved: false, status: 'payload_required' };
+        if (approvalPayloadHash(options.action, { ...withoutApprovalSnapshot(options.params), ...(data.params?.__approval_snapshot ? { __approval_snapshot: data.params.__approval_snapshot } : {}) }) !== data.payload_hash ||
+            approvalPayloadHash(data.action, data.params) !== data.payload_hash) {
+            return { approved: false, status: 'payload_changed_after_approval' };
+        }
+    }
+    if (options.params && !approvalParamsEqual(withoutApprovalSnapshot(options.params), withoutApprovalSnapshot(data.params))) {
         return { approved: false, status: 'params_mismatch' };
     }
-    // Check expiry
-    if (data.status === 'pending' && new Date(data.expires_at) < new Date()) {
-        await db()
-            .from('action_approvals')
-            .update({ status: 'expired' })
-            .eq('id', approvalId);
+    // Approved tokens expire too. Invalid timestamps fail closed. Older rows may have a
+    // shorter lifetime; no row can authorize an apply more than 24 hours after its request.
+    const requested = data.requested_at == null ? null : Date.parse(data.requested_at);
+    const expiry = Math.min(Date.parse(data.expires_at), requested == null ? Infinity : requested + 24 * 60 * 60 * 1000);
+    if (!Number.isFinite(expiry) || (requested != null && !Number.isFinite(requested)) || expiry <= Date.now()) {
         return { approved: false, status: 'expired' };
     }
+    if (data.used_at || data.status === 'used')
+        return { approved: false, status: 'consumed' };
+    if (data.status === 'approved' && !isHumanApprovalChannel(data.decided_via)) {
+        return { approved: false, status: 'human_decision_required' };
+    }
     if (data.status !== 'approved' || !options.consume) {
         if (data.used_at)
             return { approved: false, status: 'consumed' };
@@ -391,15 +423,33 @@ export async function checkApproval(approvalId, options = {}) {
             decided_by: data.decided_by,
         };
     }
-    const { data: claimed, error: claimError } = await db()
+    if (data.params?.__approval_snapshot) {
+        try {
+            const current = await captureApprovalSnapshot(data.action, withoutApprovalSnapshot(data.params), getProjectId());
+            if (!approvalParamsEqual(current, data.params.__approval_snapshot)) {
+                return { approved: false, status: 'target_changed_after_approval' };
+            }
+        }
+        catch {
+            return { approved: false, status: 'target_revalidation_failed' };
+        }
+    }
+    if (expiry <= Date.now())
+        return { approved: false, status: 'expired' };
+    const claimQuery = db()
         .from('action_approvals')
         .update({ status: 'used', used_at: new Date().toISOString() })
         .eq('id', approvalId)
         .eq('project_id', getProjectId())
         .eq('status', 'approved')
         .is('used_at', null)
-        .select('decided_by')
-        .maybeSingle();
+        .eq('expires_at', data.expires_at)
+        .gt('expires_at', new Date().toISOString())
+        .eq('decided_via', data.decided_via)
+        .eq('params', JSON.stringify(data.params))
+        .gt('requested_at', new Date(Date.now() - 24 * 60 * 60 * 1000).toISOString());
+    const boundClaim = data.payload_hash ? claimQuery.eq('payload_hash', data.payload_hash) : claimQuery.is('payload_hash', null);
+    const { data: claimed, error: claimError } = await boundClaim.select('decided_by').maybeSingle();
     if (claimError || !claimed) {
         return { approved: false, status: 'consumed' };
     }

package/build/lib/approval-capabilities.d.ts

@@ -0,0 +1,17 @@
+export declare const MCP_APP_EXTENSION = "io.modelcontextprotocol/ui";
+export declare const MCP_APP_MIME_TYPE = "text/html;profile=mcp-app";
+export type ApprovalClientCapabilities = Readonly<{
+    elicitation_form: boolean;
+    elicitation_url: boolean;
+    mcp_app: boolean;
+}>;
+export type ApprovalChannelAvailable = 'mcp_app' | 'mcp_elicitation_form' | 'mcp_elicitation_url' | 'plain_text';
+/** Reads only declared initialize capabilities. No user agent or client-name guessing. */
+export declare function probeApprovalCapabilities(declared: unknown): ApprovalClientCapabilities;
+export declare function rememberApprovalCapabilities(session: object, declared: unknown): ApprovalClientCapabilities;
+export declare function approval_channel_available(session: object): ApprovalChannelAvailable;
+/** Each SDK Server is a session boundary, including stateless HTTP request instances. */
+export declare function installApprovalCapabilityProbe(session: {
+    oninitialized?: () => void;
+    getClientCapabilities(): unknown;
+}): void;

package/build/lib/approval-capabilities.js

@@ -0,0 +1,40 @@
+export const MCP_APP_EXTENSION = 'io.modelcontextprotocol/ui';
+export const MCP_APP_MIME_TYPE = 'text/html;profile=mcp-app';
+const sessions = new WeakMap();
+const object = (value) => value !== null && typeof value === 'object' && !Array.isArray(value) ? value : null;
+/** Reads only declared initialize capabilities. No user agent or client-name guessing. */
+export function probeApprovalCapabilities(declared) {
+    const capabilities = object(declared);
+    const elicitation = object(capabilities?.elicitation);
+    const extensions = object(capabilities?.extensions);
+    const app = object(extensions?.[MCP_APP_EXTENSION]);
+    return Object.freeze({
+        // The MCP spec defines elicitation:{} as form support for older clients.
+        elicitation_form: !!elicitation && (Object.keys(elicitation).length === 0 || !!object(elicitation.form)),
+        elicitation_url: !!object(elicitation?.url),
+        mcp_app: !!app && Array.isArray(app.mimeTypes) && app.mimeTypes.includes(MCP_APP_MIME_TYPE),
+    });
+}
+export function rememberApprovalCapabilities(session, declared) {
+    const capabilities = probeApprovalCapabilities(declared);
+    sessions.set(session, capabilities);
+    return capabilities;
+}
+export function approval_channel_available(session) {
+    const capabilities = sessions.get(session);
+    if (capabilities?.mcp_app)
+        return 'mcp_app';
+    if (capabilities?.elicitation_form)
+        return 'mcp_elicitation_form';
+    if (capabilities?.elicitation_url)
+        return 'mcp_elicitation_url';
+    return 'plain_text';
+}
+/** Each SDK Server is a session boundary, including stateless HTTP request instances. */
+export function installApprovalCapabilityProbe(session) {
+    const previous = session.oninitialized;
+    session.oninitialized = () => {
+        rememberApprovalCapabilities(session, session.getClientCapabilities());
+        previous?.call(session);
+    };
+}

package/build/lib/approval-exempt.js

@@ -116,7 +116,6 @@ export const APPROVAL_EXEMPT = {
     trigger_automation: 'generates a draft into the approval queue (or returns it with dry_run); nothing is sent until a person approves the draft',
     unsubscribe_subscriber: "only stops mail to a contact; reduces sending",
     update_brand_voice: "edits brand voice text on the caller own project; internal",
-    update_campaign: "edits campaign settings; status changes go through update_campaign_status (gated). FOLLOW-UP: same live-edit caveat as update_campaign_step",
     update_campaign_step: "edits email copy; sends only through an already-gated activation. FOLLOW-UP: editing a live campaign changes what goes out (#4005 summary)",
     update_custom_field: "renames or edits a field definition; values are untouched",
     update_hygiene_config: "changes hygiene settings; suppression runs are gated (identify_inactive) or only reduce sending",

package/build/lib/approval-human-callback.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Server integration only. The transport creates this closure for one authenticated human
+ * interaction and retains it outside the tool registry. Neither its id nor decision is a tool
+ * argument. Front ends must call complete only from the matching elicitation/app response.
+ */
+export declare function createHumanApprovalCallback(binding: {
+    approvalId: string;
+    projectId: string;
+    connectionId: string;
+    userId: string;
+    channel: 'mcp_elicitation' | 'mcp_app';
+}): {
+    interactionId: `${string}-${string}-${string}-${string}-${string}`;
+    complete(response: {
+        interactionId: string;
+        connectionId: string;
+        decision: 'approve' | 'reject';
+    }): Promise<boolean>;
+};

package/build/lib/approval-human-callback.js

@@ -0,0 +1,41 @@
+import { randomUUID } from 'node:crypto';
+import { db } from '../db.js';
+/**
+ * Server integration only. The transport creates this closure for one authenticated human
+ * interaction and retains it outside the tool registry. Neither its id nor decision is a tool
+ * argument. Front ends must call complete only from the matching elicitation/app response.
+ */
+export function createHumanApprovalCallback(binding) {
+    const interactionId = randomUUID();
+    let completed = false;
+    return {
+        interactionId,
+        async complete(response) {
+            if (completed || response.interactionId !== interactionId || response.connectionId !== binding.connectionId)
+                return false;
+            if (response.decision !== 'approve' && response.decision !== 'reject')
+                return false;
+            completed = true;
+            const source = db();
+            const client = typeof source.schema === 'function' ? source.schema('email') : source;
+            const now = new Date().toISOString();
+            const { data, error } = await client.from('action_approvals')
+                .update({ status: response.decision === 'approve' ? 'approved' : 'rejected', decided_via: binding.channel,
+                decided_by: binding.userId, decided_at: now })
+                .eq('id', binding.approvalId).eq('project_id', binding.projectId)
+                .eq('status', 'pending').is('used_at', null).gt('expires_at', now)
+                .select('id, payload_hash').maybeSingle();
+            if (error || !data)
+                return false;
+            const { error: auditError } = await client.from('audit_log').insert({
+                project_id: binding.projectId, actor_type: 'user', actor_id: binding.userId,
+                action: 'approval.submitted', resource_type: 'approval', resource_id: binding.approvalId,
+                details: { status: response.decision === 'approve' ? 'approved' : 'rejected', channel: binding.channel,
+                    connection_id: binding.connectionId, interaction_id: interactionId, payload_hash: data.payload_hash },
+            });
+            if (auditError)
+                throw new Error('Approval recorded, but decision audit failed');
+            return true;
+        },
+    };
+}

package/build/lib/approval-snapshot.d.ts

@@ -0,0 +1,5 @@
+type Params = Record<string, any>;
+/** Server-owned display facts, saved inside the hash-bound params. Never supplied by a tool. */
+export declare function captureApprovalSnapshot(action: string, params: Params, projectId: string): Promise<Params>;
+export declare function withoutApprovalSnapshot(params: unknown): Record<string, unknown>;
+export {};

package/build/lib/approval-snapshot.js

@@ -0,0 +1,106 @@
+import { readAllRows, chunkIds, scopeSegmentRulesToSite } from '@sendinel/domain';
+import { db } from '../db.js';
+import { resolveSendAudience, resolveSegmentContactIds } from './send-audience.js';
+const TARGET_ACTIONS = new Set(['send_broadcast', 'broadcast_to_segment', 'launch_campaign', 'activate_campaigns',
+    'update_campaign_status', 'set_campaign_trigger', 'create_campaign_with_content', 'enroll_segment',
+    'send_transactional', 'send_awaiting_reply', 'send_test_email', 'send_newsletter_issue', 'schedule_newsletter_issue']);
+/** Server-owned display facts, saved inside the hash-bound params. Never supplied by a tool. */
+export async function captureApprovalSnapshot(action, params, projectId) {
+    const snapshot = { version: 1, campaigns: [], steps: [], sites: [], recipient_count: null };
+    if (!TARGET_ACTIONS.has(action))
+        return snapshot;
+    const source = db();
+    const client = typeof source.schema === 'function' ? source.schema('email') : source;
+    const body = params.payload ?? params;
+    const ids = [...new Set((Array.isArray(params.campaign_ids) ? params.campaign_ids :
+            typeof params.campaign_id === 'string' ? [params.campaign_id] : []).map(String))].sort();
+    if (ids.length) {
+        snapshot.campaigns = await readAllRows(client.from('campaigns')
+            .select('id, name, site_id, type, status, trigger_event_name, trigger_tag, trigger_type, trigger_config, send_class, total_enrolled')
+            .eq('project_id', projectId).in('id', ids));
+        if (snapshot.campaigns.length !== ids.length)
+            throw new Error('Approval target not found');
+        snapshot.steps = await readAllRows(client.from('campaign_steps')
+            .select('id, campaign_id, step_order, variant_label, subject, body_html, body_text, delay_days, delay_hours, blocks')
+            .in('campaign_id', ids));
+        let count = 0;
+        for (const id of ids) {
+            const result = await client.from('campaign_enrollments').select('id', { count: 'exact', head: true }).eq('campaign_id', id);
+            if (result.error || result.count == null)
+                throw new Error('Approval audience count unavailable');
+            count += result.count;
+        }
+        snapshot.recipient_count = count;
+    }
+    if (typeof params.issue_id === 'string') {
+        const issue = await client.from('newsletter_issues').select('id, newsletter_id, subject, content, preheader, status, scheduled_at')
+            .eq('id', params.issue_id).eq('newsletter_id', params.newsletter_id).eq('project_id', projectId).maybeSingle();
+        const newsletter = await client.from('newsletters').select('id, name, site_id, status, sender_name, sender_email')
+            .eq('id', params.newsletter_id).eq('project_id', projectId).maybeSingle();
+        if (issue.error || !issue.data || newsletter.error || !newsletter.data)
+            throw new Error('Approval newsletter unavailable');
+        snapshot.issue = issue.data;
+        snapshot.newsletter = newsletter.data;
+        snapshot.subscriptions = await readAllRows(client.from('newsletter_subscriptions').select('id, subscriber_id')
+            .eq('newsletter_id', params.newsletter_id).eq('project_id', projectId).eq('status', 'active').not('subscriber_id', 'is', null));
+        snapshot.subscriptions.sort((a, b) => String(a.id).localeCompare(String(b.id)));
+        snapshot.recipient_count = snapshot.subscriptions.length;
+    }
+    const siteIds = [...new Set([body.site_id, snapshot.newsletter?.site_id, ...snapshot.campaigns.map((c) => c.site_id)]
+            .filter((id) => typeof id === 'string' && id.length > 0))].sort();
+    for (const id of siteIds) {
+        const { data, error } = await client.from('sites')
+            .select('id, name, from_name, from_email, sending_domain, physical_address, unsub_link_enabled, unsub_footer_template')
+            .eq('id', id).eq('project_id', projectId).maybeSingle();
+        if (error || !data)
+            throw new Error('Approval sender/footer unavailable');
+        snapshot.sites.push(data);
+    }
+    async function readFrozenContacts(contacts) {
+        const found = [];
+        for (const chunk of chunkIds([...new Set(contacts.map(String))])) {
+            const values = await readAllRows(client.from('subscribers').select('id')
+                .eq('project_id', projectId).in('id', chunk));
+            found.push(...values.map(value => value.id));
+        }
+        if (found.length !== new Set(contacts).size)
+            throw new Error('Approval recipients changed or unavailable');
+        return found.sort();
+    }
+    if (typeof body.segment_id === 'string') {
+        const { data, error } = await client.from('segments').select('id, name, rules, site_id')
+            .eq('id', body.segment_id).eq('project_id', projectId).maybeSingle();
+        if (error || !data)
+            throw new Error('Approval segment unavailable');
+        snapshot.segment = data;
+        // launch_campaign executes a frozen list, so new segment matches cannot expand its audience.
+        // The saved segment definition is still compared; deleted original recipients invalidate it.
+        const rules = scopeSegmentRulesToSite(data.rules, data.site_id);
+        snapshot.contact_ids = action === 'launch_campaign' && Array.isArray(params.generated?.contact_ids)
+            ? await readFrozenContacts(params.generated.contact_ids)
+            : typeof body.site_id === 'string'
+                ? (await resolveSendAudience(projectId, body.site_id, rules, body.send_class === 'product' ? 'product' : 'broadcast')).contactIds.sort()
+                : (await resolveSegmentContactIds(projectId, rules)).sort();
+        snapshot.recipient_count = snapshot.contact_ids.length;
+    }
+    else if (body.rules && typeof body.site_id === 'string') {
+        snapshot.contact_ids = (await resolveSendAudience(projectId, body.site_id, body.rules, body.send_class === 'product' ? 'product' : 'broadcast')).contactIds.sort();
+        snapshot.recipient_count = snapshot.contact_ids.length;
+    }
+    else {
+        const contacts = body.contact_ids ?? params.generated?.contact_ids;
+        if (Array.isArray(contacts)) {
+            snapshot.contact_ids = await readFrozenContacts(contacts);
+            snapshot.recipient_count = snapshot.contact_ids.length;
+        }
+        else if (typeof body.to === 'string')
+            snapshot.recipient_count = 1;
+    }
+    snapshot.campaigns.sort((a, b) => String(a.id).localeCompare(String(b.id)));
+    snapshot.steps.sort((a, b) => String(a.id).localeCompare(String(b.id)));
+    return snapshot;
+}
+export function withoutApprovalSnapshot(params) {
+    const { __approval_snapshot: _snapshot, ...rest } = (params ?? {});
+    return rest;
+}

package/build/lib/campaign-trigger-approval.d.ts

@@ -0,0 +1,10 @@
+type Row = Record<string, any>;
+export declare const TRIGGER_EDIT_SELECT = "id, name, type, status, trigger_type, trigger_event_name, trigger_tag, trigger_config, updated_at";
+export declare const campaignEditError: (error: string, code: string) => {
+    error: string;
+    code: string;
+};
+export declare function finishCampaignEdit(action: string, input: Row, existing: Row, updates: Row, request: (params: Row) => Promise<Row>): Promise<any>;
+/** The second call may carry only approval_id. Never rebuild a frozen edit from fresh arguments. */
+export declare function resumeCampaignEdit(action: string, approvalId: string, input: Row): Promise<any>;
+export {};

package/build/lib/campaign-trigger-approval.js

@@ -0,0 +1,66 @@
+import { isDeepStrictEqual } from 'node:util';
+import { campaignTriggerChanges, campaignTriggerRevision, triggerChangeNeedsApproval } from '@sendinel/domain';
+import { db } from '../db.js';
+import { getProjectId } from '../project.js';
+import { logAudit } from '../audit.js';
+import { assertChannelCanExecute, currentChannelContext, checkApproval } from './action-approvals.js';
+export const TRIGGER_EDIT_SELECT = 'id, name, type, status, trigger_type, trigger_event_name, trigger_tag, trigger_config, updated_at';
+export const campaignEditError = (error, code) => ({ error, code });
+/** All writes include the revision used for the approval decision, including ungated drafts. */
+async function writeEdit(campaignId, previous, updates) {
+    let query = db().from('campaigns').update({ ...updates, updated_at: new Date().toISOString() })
+        .eq('id', campaignId).eq('project_id', getProjectId()).eq('status', previous.status);
+    if (previous.updated_at)
+        query = query.eq('updated_at', previous.updated_at);
+    const { data, error } = await query.select().single();
+    if (error || !data)
+        return campaignEditError(error?.message ?? 'Campaign changed; read it and request a new approval', 'CAMPAIGN_CHANGED');
+    await logAudit({ action: 'campaign.updated', resourceType: 'campaign', resourceId: campaignId, details: { previous, updates } });
+    return data;
+}
+export async function finishCampaignEdit(action, input, existing, updates, request) {
+    if (campaignTriggerChanges(existing, updates) && !['draft', 'active', 'paused'].includes(existing.status)) {
+        return campaignEditError(`Cannot change a ${existing.status} campaign trigger`, 'INVALID_STATUS');
+    }
+    if (!triggerChangeNeedsApproval(existing, updates))
+        return writeEdit(input.campaign_id, existing, updates);
+    const params = { campaign_id: input.campaign_id, input, previous_campaign: existing, updates };
+    const context = currentChannelContext();
+    const decision = assertChannelCanExecute(action, params, context);
+    if (!decision.allowed)
+        return campaignEditError(decision.reason ?? 'Channel cannot request approval', 'FORBIDDEN');
+    // This trigger policy requires a human decision even if the integration uses autonomous mode.
+    return request(params);
+}
+/** The second call may carry only approval_id. Never rebuild a frozen edit from fresh arguments. */
+export async function resumeCampaignEdit(action, approvalId, input) {
+    const { data: approval, error } = await db().from('action_approvals').select('*')
+        .eq('id', approvalId).eq('project_id', getProjectId()).maybeSingle();
+    if (error || !approval || approval.action !== action)
+        return campaignEditError('Approval not found for this action', 'APPROVAL_MISMATCH');
+    if (approval.used_at || approval.status === 'used')
+        return campaignEditError('Approval consumed', 'APPROVAL_CONSUMED');
+    const params = approval.params;
+    if (!params?.previous_campaign || !params.updates || !params.campaign_id)
+        return campaignEditError('Approval has no frozen campaign edit', 'APPROVAL_MISMATCH');
+    for (const [key, value] of Object.entries(input)) {
+        if (value !== undefined && !isDeepStrictEqual(value, params.input?.[key]))
+            return campaignEditError('params_mismatch: request differs from the frozen edit', 'APPROVAL_MISMATCH');
+    }
+    const { data: existing, error: loadError } = await db().from('campaigns').select(TRIGGER_EDIT_SELECT)
+        .eq('id', params.campaign_id).eq('project_id', getProjectId()).maybeSingle();
+    if (loadError || !existing)
+        return campaignEditError('Campaign not found', 'NOT_FOUND');
+    if (campaignTriggerRevision(existing) !== campaignTriggerRevision(params.previous_campaign)) {
+        return campaignEditError('Campaign changed after approval was requested; request a new approval', 'CAMPAIGN_CHANGED');
+    }
+    if (!Number.isFinite(Date.parse(approval.expires_at)) || Date.parse(approval.expires_at) <= Date.now())
+        return campaignEditError('Approval expired', 'APPROVAL_EXPIRED');
+    const decision = assertChannelCanExecute(action, params, currentChannelContext());
+    if (!decision.allowed)
+        return campaignEditError(decision.reason ?? 'Channel cannot use approval', 'FORBIDDEN');
+    const check = await checkApproval(approvalId, { consume: true, action, params });
+    if (!check.approved)
+        return campaignEditError(`Approval ${approvalId} is ${check.status}`, 'APPROVAL_REQUIRED');
+    return writeEdit(params.campaign_id, existing, params.updates);
+}

package/build/server.js

@@ -1,3 +1,4 @@
+import { installApprovalCapabilityProbe } from './lib/approval-capabilities.js';
 import { runWithToolContext } from './db.js';
 import { isApprovalGatedAction } from './lib/action-approvals.js';
 import { registerAgentMailboxTools } from './tools/agent-mailboxes.js';
@@ -377,6 +378,8 @@ export const SENDINEL_SERVER_INSTRUCTIONS = [
     'On the hosted connection, any tool call (and invoke_tool) also accepts an optional project_id to act on one project for that call only; it is checked each time, and approval-gated tools require it when the connection was switched to another project. In gateway mode, find tools with search_tools (plain words work, for example "send email" or "last campaign"), check arguments with describe_tool, then call invoke_tool.',
 ].join(' ');
 export function registerAllTools(server, options) {
+    if (server.server)
+        installApprovalCapabilityProbe(server.server);
     const rawScopes = options?.scopes ?? [];
     if (rawScopes.includes('gateway')) {
         const permissionScopes = rawScopes.filter((scope) => scope !== 'gateway');

package/build/tools/campaigns.js

@@ -9,6 +9,7 @@ import { assertSendAccepted, providerSendError, sendError, SendRefusedError, BLO
 // bundling problem this subpath was introduced to fix. See the comment in
 // packages/domain/src/index.ts.
 import { ensureReplyActionSecretConfigured, mintReplyAction, } from '@sendinel/domain/reply-actions';
+import { finishCampaignEdit, resumeCampaignEdit, TRIGGER_EDIT_SELECT } from '../lib/campaign-trigger-approval.js';
 import { adminDb, db, requestContext } from '../db.js';
 import { getProjectId } from '../project.js';
 import { checkPlanLimit } from '../plan-limits.js';
@@ -3345,7 +3346,7 @@ Return ONLY valid JSON with this exact shape:
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
         description: 'Set or clear what a campaign fires on: trigger event name, tag, date_field, contact_event, or trigger_config events/tags and where event-data filter. Use for dunning on invoice_payment_failed or trial_ending. Drafts save directly; active/paused campaigns require standard human approval. Archived/completed campaigns cannot change. Returns saved trigger fields, fires_on and trigger_diagnostics.',
         inputSchema: {
-            campaign_id: z.string().uuid(),
+            campaign_id: z.string().uuid().optional(),
             trigger_event_name: z.string().nullable().optional(),
             trigger_tag: z.string().nullable().optional(),
             trigger_type: z.enum(['manual', 'date_field', 'contact_event']).nullable().optional(),
@@ -3354,9 +3355,15 @@ Return ONLY valid JSON with this exact shape:
             approval_id: z.string().uuid().optional(),
         },
     }, async ({ approval_id, ...args }) => {
+        if (approval_id) {
+            const result = await resumeCampaignEdit('set_campaign_trigger', approval_id, args);
+            return j(result.error ? result : { ...result, fires_on: buildCampaignFiresOn(result), trigger_diagnostics: buildCampaignTriggerDiagnostics(result) });
+        }
+        if (!args.campaign_id)
+            return j({ error: 'campaign_id is required', code: 'INVALID_FIELD' });
         const projectId = getProjectId();
         const { data: existing, error: loadError } = await db().from('campaigns')
-            .select('id, name, type, status, trigger_type, trigger_event_name, trigger_tag, trigger_config, updated_at')
+            .select(TRIGGER_EDIT_SELECT)
             .eq('id', args.campaign_id).eq('project_id', projectId).maybeSingle();
         if (loadError)
             return j({ error: loadError.message });
@@ -3381,36 +3388,8 @@ Return ONLY valid JSON with this exact shape:
             && (updates.trigger_event_name || updates.trigger_tag || normalized.events.length || normalized.tags.length)) {
             updates.type = 'triggered';
         }
-        const execute = async () => {
-            // A draft activated during this call must never bypass approval. The timestamp also
-            // guards against overwriting edits made while an approved call is executing.
-            let query = db().from('campaigns').update({ ...updates, updated_at: new Date().toISOString() })
-                .eq('id', args.campaign_id).eq('project_id', projectId).eq('status', existing.status);
-            if (existing.updated_at)
-                query = query.eq('updated_at', existing.updated_at);
-            const { data, error } = await query.select().maybeSingle();
-            if (error)
-                return j({ error: error.message });
-            if (!data)
-                return j({ error: 'Campaign changed; read it and retry', code: 'CAMPAIGN_CHANGED' });
-            await logAudit({ action: 'campaign.trigger_updated', resourceType: 'campaign', resourceId: args.campaign_id, details: { previous: existing, updates } });
-            return j({ ...data, fires_on: buildCampaignFiresOn(data), trigger_diagnostics: buildCampaignTriggerDiagnostics(data) });
-        };
-        if (existing.status === 'draft')
-            return execute();
-        // The saved state is internal, never caller-supplied. Approval is for this exact before/after.
-        return withApproval('set_campaign_trigger', async (_params) => execute(), {
-            display: async () => {
-                const { count, error } = await db().from('subscribers').select('id', { count: 'exact', head: true })
-                    .eq('project_id', projectId).eq('global_unsubscribed', false);
-                return {
-                    campaign_name: existing.name,
-                    from_trigger: `${buildCampaignFiresOn(existing)} Config: ${JSON.stringify(existing.trigger_config)}`,
-                    to_trigger: `${buildCampaignFiresOn({ ...existing, ...updates })} Config: ${JSON.stringify(updates.trigger_config === undefined ? existing.trigger_config : updates.trigger_config)}`,
-                    recipient_count: error ? null : count,
-                };
-            },
-        })({ ...args, previous_trigger: existing, approval_id });
+        const result = await finishCampaignEdit('set_campaign_trigger', args, existing, updates, params => requestApproval('set_campaign_trigger', params));
+        return j(result.error || result.requires_approval ? result : { ...result, fires_on: buildCampaignFiresOn(result), trigger_diagnostics: buildCampaignTriggerDiagnostics(result) });
     });
     server.registerTool('update_campaign', {
         title: 'Update Campaign',
@@ -3420,9 +3399,10 @@ Return ONLY valid JSON with this exact shape:
             idempotentHint: true,
             openWorldHint: false,
         },
-        description: 'Update a campaign name, site, segment, send time, topic, trigger event name/tag/config (including where filters for dunning), or send class (broadcast vs product). trigger_type null (or manual) clears a date_field or contact_event trigger; type switches a draft between sequence and triggered. The response includes fires_on, a plain summary of what the saved campaign fires on, and trigger_diagnostics naming any trigger problems. send_at schedules a broadcast send (type=broadcast only) and must be a future ISO 8601 instant; set null to clear a pending schedule. Only provided fields are updated.',
+        description: 'Update a campaign name, site, segment, send time, topic, trigger event name/tag/config (including where filters for dunning), or send class (broadcast vs product). trigger_type null (or manual) clears a date_field or contact_event trigger; type switches a draft between sequence and triggered. The response includes fires_on, a plain summary of what the saved campaign fires on, and trigger_diagnostics naming any trigger problems. send_at schedules a broadcast send (type=broadcast only) and must be a future ISO 8601 instant; set null to clear a pending schedule. Only provided fields are updated. Changed triggers on active/paused campaigns return an approval request; retry with only approval_id to apply the frozen edit.',
         inputSchema: {
-            campaign_id: z.string().uuid(),
+            campaign_id: z.string().uuid().optional(),
+            approval_id: z.string().uuid().optional(),
             name: z.string().min(1).max(200).optional(),
             site_id: z.string().uuid().optional(),
             segment_id: z.string().uuid().nullable().optional(),
@@ -3437,12 +3417,19 @@ Return ONLY valid JSON with this exact shape:
             send_in_contact_timezone: z.boolean().optional(),
             send_class: z.enum(['broadcast', 'product']).optional().describe("Who may receive it when the project's consent gate is on: 'broadcast' (default) = only contacts who opted in to marketing; 'product' = also the customer's signed-up users (onboarding, trial, account mail)."),
         },
-    }, async ({ campaign_id, name, site_id, segment_id, send_at, topic, trigger_event_name, trigger_tag, trigger_type, trigger_config, type, sends_per_hour, send_in_contact_timezone, send_class }) => {
+    }, async ({ approval_id, ...input }) => {
+        if (approval_id) {
+            const result = await resumeCampaignEdit('update_campaign', approval_id, input);
+            return j(result.error ? result : { ...result, fires_on: buildCampaignFiresOn(result), trigger_diagnostics: buildCampaignTriggerDiagnostics(result) });
+        }
+        const { campaign_id, name, site_id, segment_id, send_at, topic, trigger_event_name, trigger_tag, trigger_type, trigger_config, type, sends_per_hour, send_in_contact_timezone, send_class } = input;
+        if (!campaign_id)
+            return j({ error: 'campaign_id is required', code: 'INVALID_FIELD' });
         const projectId = getProjectId();
         let campaignType;
         const loadExisting = () => db()
             .from('campaigns')
-            .select('id, type, status, trigger_type, trigger_config, trigger_event_name, trigger_tag')
+            .select(TRIGGER_EDIT_SELECT)
             .eq('id', campaign_id)
             .eq('project_id', projectId)
             .maybeSingle();
@@ -3486,7 +3473,7 @@ Return ONLY valid JSON with this exact shape:
                 return j({ error: 'Campaign not found', code: 'NOT_FOUND' });
             existingCampaignForTargeting = existing;
         }
-        const updates = { updated_at: new Date().toISOString() };
+        const updates = {};
         if (name !== undefined)
             updates.name = name;
         if (site_id !== undefined)
@@ -3517,15 +3504,20 @@ Return ONLY valid JSON with this exact shape:
                 updates.type = 'triggered';
             }
         }
-        const { data, error } = await db()
-            .from('campaigns')
-            .update(updates)
-            .eq('id', campaign_id)
-            .eq('project_id', projectId)
-            .select()
-            .single();
-        if (error)
-            return j({ error: error.message });
+        let data;
+        if (existingCampaignForTargeting) {
+            data = await finishCampaignEdit('update_campaign', input, existingCampaignForTargeting, updates, params => requestApproval('update_campaign', params));
+            if (data.error || data.requires_approval)
+                return j(data);
+        }
+        else {
+            const result = await db().from('campaigns').update({ ...updates, updated_at: new Date().toISOString() })
+                .eq('id', campaign_id).eq('project_id', projectId).select().single();
+            if (result.error)
+                return j({ error: result.error.message });
+            data = result.data;
+            await logAudit({ action: 'campaign.updated', resourceType: 'campaign', resourceId: campaign_id, details: { updates } });
+        }
         const diagnostics = buildCampaignTriggerDiagnostics(data);
         const warning = diagnostics.find((d) => d.includes('never fire')) || (diagnostics.length ? diagnostics[0] : null);
         return j({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.103",
+  "version": "1.0.105",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",