@sendinel/mcp-server 1.0.132 → 1.0.134

package/build/lib/action-approvals.d.ts

@@ -87,6 +87,7 @@ export declare function checkApproval(approvalId: string, options?: {
     status: string;
     decided_by?: string;
     decision_channel?: 'sandbox';
+    consumed_at?: string;
 }>;
 type ToolResult = {
     content: Array<{

package/build/lib/action-approvals.js

@@ -438,9 +438,10 @@ export async function checkApproval(approvalId, options = {}) {
     }
     if (expiry <= Date.now())
         return { approved: false, status: 'expired' };
+    const consumedAt = new Date().toISOString();
     const claimQuery = approvalStore()
         .from('action_approvals')
-        .update({ status: 'used', used_at: new Date().toISOString() })
+        .update({ status: 'used', used_at: consumedAt })
         .eq('id', approvalId)
         .eq('project_id', getProjectId())
         .eq('status', 'approved')
@@ -461,6 +462,7 @@ export async function checkApproval(approvalId, options = {}) {
         approved: true,
         status: 'approved',
         decided_by: claimed.decided_by,
+        ...(options.action === 'send_test_email' ? { consumed_at: consumedAt } : {}),
         ...(sandboxDecision ? { decision_channel: 'sandbox' } : {}),
     };
 }
@@ -484,6 +486,7 @@ export function withApproval(action, handler, options = {}) {
             return toolText(decision.reason ?? 'This channel cannot request this action.');
         let decidedBy;
         let decisionChannel;
+        let consumedAt;
         if (options.registeredRequestOnly || decision.tier !== 'autonomous') {
             if (!approval_id) {
                 const display = options.display ? await options.display(params) : undefined;
@@ -491,6 +494,7 @@ export function withApproval(action, handler, options = {}) {
             }
             const check = await checkApproval(approval_id, { consume: true, action, params });
             decidedBy = check.decided_by;
+            consumedAt = check.consumed_at;
             decisionChannel = check.decision_channel;
             if (!check.approved) {
                 return toolText(`Approval ${approval_id} is ${check.status}. ${check.status === 'pending' ? 'Waiting for human approval via dashboard.' : 'Request a new approval.'}`);
@@ -499,6 +503,34 @@ export function withApproval(action, handler, options = {}) {
         if (options.registeredRequestOnly) {
             return registeredApproval.run({ id: approval_id, action, projectId: getProjectId(), phase: 'approved', decidedBy, decisionChannel }, () => handler(args, extra));
         }
-        return handler(params, extra);
+        const result = await handler(params, extra);
+        // Keep the atomic claim across the outbound hop. Only a definitive pre-acceptance
+        // failure may release it; transport errors and unknown outcomes can already have sent.
+        if (action === 'send_test_email' && approval_id && consumedAt && testSendNotAccepted(result)) {
+            const { data: restored, error } = await approvalStore().from('action_approvals')
+                .update({ status: 'approved', used_at: null })
+                .eq('id', approval_id).eq('project_id', getProjectId()).eq('action', 'send_test_email')
+                .eq('status', 'used').eq('used_at', consumedAt)
+                .select('id').maybeSingle();
+            if (error || !restored) {
+                console.error('Test-send approval could not be restored after a pre-acceptance failure.');
+            }
+        }
+        return result;
     };
 }
+function testSendNotAccepted(result) {
+    const [block] = result.content;
+    if (result.content.length !== 1 || block.type !== 'text')
+        return false;
+    try {
+        const outcome = JSON.parse(block.text);
+        const code = outcome?.error?.error?.code;
+        return (outcome.status === 500 && ['provider_unconfigured', 'provider_refused'].includes(code))
+            || (outcome.status === 422 && ['sandbox_refused', 'send_allowlist_refused'].includes(code))
+            || (outcome.status === 503 && code === 'send_allowlist_unavailable');
+    }
+    catch {
+        return false;
+    }
+}

package/build/lib/email-provider.js

@@ -1,4 +1,4 @@
-import { checkProjectSendAllowlist } from "@sendinel/domain";
+import { checkProjectSendAllowlist, stripActiveEmailContent } from "@sendinel/domain";
 import { Resend } from "resend";
 import { adminDb, db } from "../db.js";
 import { decrypt } from "../crypto.js";
@@ -251,6 +251,7 @@ export async function sendEmailForSite(projectId, siteId, args) {
     const refusal = await checkProjectSendAllowlist(adminDb(), projectId, args, "mcp");
     if (refusal)
         return refusal;
+    args = { ...args, ...(args.html !== undefined ? { html: stripActiveEmailContent(args.html).html } : {}) };
     const config = await resolveProviderConfig(projectId, siteId);
     switch (config.name) {
         case "resend":

package/build/tools/campaigns.js

@@ -2,7 +2,7 @@ import { resolveCampaignReentry, readCampaignPeriods, campaignPeriodFields } fro
 import { CAMPAIGN_BRANCH_CONDITIONS, campaignBranchConditionValue, isContactPropertyConditionList, STEP_PROPERTY_CONDITIONS_ERROR, validateStepPropertyRules } from "@sendinel/domain";
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
-import { assertSendAccepted, providerSendError, sendError, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, brandWarnings, readAllRows, isSegmentRulesError, scopeSegmentRulesToSite, SegmentRulesError, validateSegmentRules, validateUnsubFooterTemplate, } from '@sendinel/domain';
+import { stripActiveEmailContent, assertSendAccepted, providerSendError, sendError, SendRefusedError, BLOCKING_CONTENT_ISSUE_KINDS, computeSendContentKey, findContentIssues, sendingHostOf, NAME_FALLBACKS, ONE_SEND_MATCH_STATUSES, ONE_SEND_SENT_STATUSES, ONE_SEND_WINDOW_DAYS, normalizeTriggerConfig, renderTemplateString as renderTemplateVars, resolveBrandTokens, brandWarnings, readAllRows, isSegmentRulesError, scopeSegmentRulesToSite, SegmentRulesError, validateSegmentRules, validateUnsubFooterTemplate, } from '@sendinel/domain';
 // Subpath import, not the barrel above -- reply-actions.ts uses node:crypto,
 // and MCP-server-side that's fine (this never runs in an Edge Function), but
 // keeping it off the shared barrel avoids re-creating the Edge-Function
@@ -1510,7 +1510,7 @@ export function registerCampaignTools(server) {
         });
         return j({
             ...approval,
-            rendered: { subject: content.subject, body_html: content.body_html, body_text: content.body_text },
+            rendered: { subject: content.subject, body_html: stripActiveEmailContent(content.body_html).html, body_text: content.body_text },
             recipient_count: resolved.contactIds.length,
             audience: { label: segmentName, segment_id: segment_id ?? null, ...heldBackLines(resolved) },
             site: { id: site.id, name: site.name, from_email: site.from_email },
@@ -2461,6 +2461,8 @@ Do not include body_html in your response; Sendinel renders body_html from block
             }
             resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
         }
+        if (resolvedHtml !== undefined)
+            resolvedHtml = stripActiveEmailContent(resolvedHtml).html;
         if (!resolvedSubject?.trim())
             return txt('Error: subject is required');
         const payload = {
@@ -2653,6 +2655,8 @@ Do not include body_html in your response; Sendinel renders body_html from block
             }
             resolvedSubject = subject?.trim() || renderTemplateVars(template.subject_hint ?? '', renderVars, { brandTokens: brandVars });
         }
+        if (resolvedHtml !== undefined)
+            resolvedHtml = stripActiveEmailContent(resolvedHtml).html;
         if (!resolvedSubject?.trim())
             return txt('Error: subject is required');
         const { data: projectContext, error: projectContextError } = await adminDb()
@@ -2871,6 +2875,17 @@ Do not include body_html in your response; Sendinel renders body_html from block
             bodyText: body_text,
             brandSettings: projectRow?.brand_settings ?? null,
         });
+        const active = stripActiveEmailContent(html).removed;
+        if (active.includes('script'))
+            result.warnings.push('The script tag is removed at send time.');
+        if (active.includes('event-handler attribute'))
+            result.warnings.push('Each on* event-handler attribute is removed at send time.');
+        const schemes = active.filter(finding => finding.endsWith(' URL'));
+        if (schemes.length)
+            result.warnings.push(`Active links (${schemes.join(', ')}) are removed at send time.`);
+        const tags = active.filter(finding => finding !== 'script' && finding !== 'event-handler attribute' && !finding.endsWith(' URL'));
+        if (tags.length)
+            result.warnings.push(`Other active tags (${tags.join(', ')}) are removed at send time.`);
         for (const issue of findContentIssues({ subject, body_html: html, body_text }, { sendingHosts, sourcedKeys })) {
             if (BLOCKING_CONTENT_ISSUE_KINDS.has(issue.kind))
                 result.errors.push(`${issue.message} (${issue.excerpt})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.132",
+  "version": "1.0.134",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",