@sendinel/mcp-server 1.0.131 → 1.0.133

package/build/lib/action-approvals.d.ts

@@ -87,6 +87,7 @@ export declare function checkApproval(approvalId: string, options?: {
     status: string;
     decided_by?: string;
     decision_channel?: 'sandbox';
+    consumed_at?: string;
 }>;
 type ToolResult = {
     content: Array<{

package/build/lib/action-approvals.js

@@ -438,9 +438,10 @@ export async function checkApproval(approvalId, options = {}) {
     }
     if (expiry <= Date.now())
         return { approved: false, status: 'expired' };
+    const consumedAt = new Date().toISOString();
     const claimQuery = approvalStore()
         .from('action_approvals')
-        .update({ status: 'used', used_at: new Date().toISOString() })
+        .update({ status: 'used', used_at: consumedAt })
         .eq('id', approvalId)
         .eq('project_id', getProjectId())
         .eq('status', 'approved')
@@ -461,6 +462,7 @@ export async function checkApproval(approvalId, options = {}) {
         approved: true,
         status: 'approved',
         decided_by: claimed.decided_by,
+        ...(options.action === 'send_test_email' ? { consumed_at: consumedAt } : {}),
         ...(sandboxDecision ? { decision_channel: 'sandbox' } : {}),
     };
 }
@@ -484,6 +486,7 @@ export function withApproval(action, handler, options = {}) {
             return toolText(decision.reason ?? 'This channel cannot request this action.');
         let decidedBy;
         let decisionChannel;
+        let consumedAt;
         if (options.registeredRequestOnly || decision.tier !== 'autonomous') {
             if (!approval_id) {
                 const display = options.display ? await options.display(params) : undefined;
@@ -491,6 +494,7 @@ export function withApproval(action, handler, options = {}) {
             }
             const check = await checkApproval(approval_id, { consume: true, action, params });
             decidedBy = check.decided_by;
+            consumedAt = check.consumed_at;
             decisionChannel = check.decision_channel;
             if (!check.approved) {
                 return toolText(`Approval ${approval_id} is ${check.status}. ${check.status === 'pending' ? 'Waiting for human approval via dashboard.' : 'Request a new approval.'}`);
@@ -499,6 +503,34 @@ export function withApproval(action, handler, options = {}) {
         if (options.registeredRequestOnly) {
             return registeredApproval.run({ id: approval_id, action, projectId: getProjectId(), phase: 'approved', decidedBy, decisionChannel }, () => handler(args, extra));
         }
-        return handler(params, extra);
+        const result = await handler(params, extra);
+        // Keep the atomic claim across the outbound hop. Only a definitive pre-acceptance
+        // failure may release it; transport errors and unknown outcomes can already have sent.
+        if (action === 'send_test_email' && approval_id && consumedAt && testSendNotAccepted(result)) {
+            const { data: restored, error } = await approvalStore().from('action_approvals')
+                .update({ status: 'approved', used_at: null })
+                .eq('id', approval_id).eq('project_id', getProjectId()).eq('action', 'send_test_email')
+                .eq('status', 'used').eq('used_at', consumedAt)
+                .select('id').maybeSingle();
+            if (error || !restored) {
+                console.error('Test-send approval could not be restored after a pre-acceptance failure.');
+            }
+        }
+        return result;
     };
 }
+function testSendNotAccepted(result) {
+    const [block] = result.content;
+    if (result.content.length !== 1 || block.type !== 'text')
+        return false;
+    try {
+        const outcome = JSON.parse(block.text);
+        const code = outcome?.error?.error?.code;
+        return (outcome.status === 500 && ['provider_unconfigured', 'provider_refused'].includes(code))
+            || (outcome.status === 422 && ['sandbox_refused', 'send_allowlist_refused'].includes(code))
+            || (outcome.status === 503 && code === 'send_allowlist_unavailable');
+    }
+    catch {
+        return false;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.131",
+  "version": "1.0.133",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",