@sendinel/mcp-server 1.0.155 → 1.0.156

package/build/lib/action-approvals.d.ts

@@ -97,14 +97,9 @@ type ToolResult = {
         text: string;
     }>;
 };
-/**
- * Wrap a tool handler in the standard approval flow (#4005). In standard mode the first call
- * (no approval_id) records the exact arguments and returns the approval request without running
- * the handler; the follow-up call with an approved approval_id runs the handler on those same
- * arguments. getApprovalTier() decides when no approval is needed (autonomous mode, special
- * cases), so autonomous mode and send_broadcast's never-self-approves rule live in one place.
- * Add `approval_id: z.string().uuid().optional()` to the tool's inputSchema.
- */
+export declare function markNotExecuted<R extends object>(result: R): R;
+/** HTTP statuses that mean the request was refused before it changed anything. */
+export declare function isPreExecutionStatus(status: number | undefined): boolean;
 export declare function withApproval<A extends object, R extends ToolResult>(action: string, handler: (args: A, extra?: unknown) => Promise<R> | R, options?: {
     display?: (args: A) => Promise<ApprovalDisplay> | ApprovalDisplay;
     registeredRequestOnly?: boolean;

package/build/lib/action-approvals.js

@@ -472,7 +472,7 @@ export async function checkApproval(approvalId, options = {}) {
         approved: true,
         status: 'approved',
         decided_by: claimed.decided_by,
-        ...(options.action === 'send_test_email' ? { consumed_at: consumedAt } : {}),
+        ...(options.action && ['send_test_email', 'identify_subscriber', 'emit_contact_event'].includes(options.action) ? { consumed_at: consumedAt } : {}),
         ...(sandboxDecision ? { decision_channel: 'sandbox' } : {}),
     };
 }
@@ -487,6 +487,19 @@ function toolText(value) {
  * cases), so autonomous mode and send_broadcast's never-self-approves rule live in one place.
  * Add `approval_id: z.string().uuid().optional()` to the tool's inputSchema.
  */
+/**
+ * Results a handler marks as "definitively did nothing" (refused or failed before any write or send).
+ * withApproval releases the consumed approval for these, so a failed call does not use up the pass.
+ */
+const notExecutedResults = new WeakSet();
+export function markNotExecuted(result) {
+    notExecutedResults.add(result);
+    return result;
+}
+/** HTTP statuses that mean the request was refused before it changed anything. */
+export function isPreExecutionStatus(status) {
+    return status !== undefined && [0, 400, 401, 403, 404, 422, 429, 501].includes(status);
+}
 export function withApproval(action, handler, options = {}) {
     return async (args, extra) => {
         const { approval_id, ...params } = args;
@@ -516,14 +529,17 @@ export function withApproval(action, handler, options = {}) {
         const result = await handler(params, extra);
         // Keep the atomic claim across the outbound hop. Only a definitive pre-acceptance
         // failure may release it; transport errors and unknown outcomes can already have sent.
-        if (action === 'send_test_email' && approval_id && consumedAt && testSendNotAccepted(result)) {
+        const releasable = action === 'send_test_email' ? testSendNotAccepted(result) : notExecutedResults.has(result);
+        if (approval_id && consumedAt && releasable) {
             const { data: restored, error } = await approvalStore().from('action_approvals')
                 .update({ status: 'approved', used_at: null })
-                .eq('id', approval_id).eq('project_id', getProjectId()).eq('action', 'send_test_email')
+                .eq('id', approval_id).eq('project_id', getProjectId()).eq('action', action)
                 .eq('status', 'used').eq('used_at', consumedAt)
                 .select('id').maybeSingle();
             if (error || !restored) {
-                console.error('Test-send approval could not be restored after a pre-acceptance failure.');
+                console.error(action === 'send_test_email'
+                    ? 'Test-send approval could not be restored after a pre-acceptance failure.'
+                    : `Approval for ${action} could not be restored after a pre-execution failure.`);
             }
         }
         return result;

package/build/tools/contacts.js

@@ -11,7 +11,7 @@ import { dbErrorResult, dbToolError, toolError } from '../lib/db-error.js';
 import { resolveSegmentContactIds } from '../lib/send-audience.js';
 import { checkPlanLimit, contactLimitMessage } from '../plan-limits.js';
 import { logConsent, logAudit } from '../audit.js';
-import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, withApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, withApproval, markNotExecuted, isPreExecutionStatus } from '../lib/action-approvals.js';
 import { decrypt } from '../crypto.js';
 import { normalizeActiveCampaignAccountUrl } from '../lib/url-validation.js';
 import { diffCustomProperties } from '../lib/custom-properties-diff.js';
@@ -612,8 +612,19 @@ export function registerContactTools(server) {
             event: z.string().trim().min(1),
             data: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),
             idempotency_key: z.string().min(1).optional().describe('Sent as Idempotency-Key. Reuse with the same event payload when retrying.'),
+            consent: z.object({
+                site_id: z.string().uuid(),
+                basis: z.enum(['opt_in', 'existing_customer']),
+                source: z.string().trim().min(1).max(100),
+                collected_at: z.string().optional(),
+            }).optional().describe('Optional consent record for an unknown email (see docs/api-events-and-identify.md). Omit for contacts that already exist.'),
+            traits: z.object({
+                first_name: z.string().optional(),
+                last_name: z.string().optional(),
+                properties: z.record(z.string(), z.unknown()).optional(),
+            }).optional().describe('Optional contact traits applied with the event (see docs/api-events-and-identify.md).'),
         },
-    }, withApproval('emit_contact_event', async ({ email, event, data, idempotency_key }) => {
+    }, withApproval('emit_contact_event', async ({ email, event, data, idempotency_key, consent, traits }) => {
         // Never forward raw transport, database or provider errors to the MCP caller.
         // Only known public codes survive; even a returned message may contain internal text.
         const publicCodes = new Set([
@@ -623,7 +634,12 @@ export function registerContactTools(server) {
         try {
             const result = await callSendinelV1('/api/v1/events', {
                 method: 'POST',
-                body: { email, event, ...(data !== undefined ? { data } : {}) },
+                body: {
+                    email, event,
+                    ...(data !== undefined ? { data } : {}),
+                    ...(consent !== undefined ? { consent } : {}),
+                    ...(traits !== undefined ? { traits } : {}),
+                },
                 ...(idempotency_key ? { idempotencyKey: idempotency_key } : {}),
             });
             if (result.ok)
@@ -631,7 +647,8 @@ export function registerContactTools(server) {
             const payload = result.error && typeof result.error === 'object' && 'error' in result.error
                 && result.error.error && typeof result.error.error === 'object' ? result.error.error : result.error;
             const code = payload && typeof payload === 'object' && 'code' in payload ? payload.code : undefined;
-            return { ...j({ code: typeof code === 'string' && publicCodes.has(code) ? code : 'event_intake_failed', error: 'Could not emit contact event' }), isError: true };
+            const failed = { ...j({ code: typeof code === 'string' && publicCodes.has(code) ? code : 'event_intake_failed', error: 'Could not emit contact event' }), isError: true };
+            return isPreExecutionStatus(result.status) ? markNotExecuted(failed) : failed;
         }
         catch {
             return { ...j({ code: 'event_intake_failed', error: 'Could not emit contact event' }), isError: true };
@@ -654,7 +671,10 @@ export function registerContactTools(server) {
         },
     }, withApproval('identify_subscriber', async (params) => {
         const result = await callSendinelV1('/api/v1/identify', { method: 'POST', body: params });
-        return result.ok ? j(result.data) : err(JSON.stringify(result.error));
+        if (result.ok)
+            return j(result.data);
+        const failed = err(JSON.stringify(result.error));
+        return isPreExecutionStatus(result.status) ? markNotExecuted(failed) : failed;
     }));
     server.registerTool('get_subscriber_timeline', {
         title: 'Get Subscriber Timeline',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.155",
+  "version": "1.0.156",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",