@sendinel/mcp-server 1.0.191 → 1.0.192

package/README.md

@@ -59,7 +59,9 @@ Sendinel currently exposes 35 tool groups and 349 tools (gateway mode exposes 4
 | `webhooks` | 5 | Webhook subscription management |
 
 `cancel_approval({approval_id})` rejects an unexpired, unused pending/approved
-request in the current project for any write-scoped credential.
+request in the current project for any write-scoped credential. It returns
+`status: "rejected"` (kept for compatibility) plus `outcome: "cancelled"` and
+`cancelled: true`.
 `approve_approval({approval_id})` requires the person's own live OAuth connection
 (`connection_role: NULL`) and its own pending request in that project. Tester,
 agent, API key, service-token and scoped-JWT credentials cannot approve. Sends

package/build/lib/action-approvals.d.ts

@@ -100,6 +100,8 @@ export declare function checkApproval(approvalId: string, options?: {
 }): Promise<Omit<Awaited<ReturnType<typeof checkApprovalState>>, 'decision_channel'> & {
     decision_channel?: string;
     decision_evidence?: DecisionEvidence;
+    outcome?: 'cancelled';
+    cancelled?: true;
 }>;
 declare function checkApprovalState(approvalId: string, options?: {
     consume?: boolean;

package/build/lib/action-approvals.js

@@ -469,7 +469,7 @@ export async function checkApproval(approvalId, options = {}) {
                 .eq('action', 'approval.cancelled').limit(1);
             const cancel = data?.[0];
             if (!error && cancel?.actor_id && typeof cancel.details?.channel === 'string') {
-                return { ...result, decided_by: cancel.actor_id, decision_channel: cancel.details.channel };
+                return { ...result, decided_by: cancel.actor_id, decision_channel: cancel.details.channel, outcome: 'cancelled', cancelled: true };
             }
         }
         catch { /* A failed audit read cannot grant authority or change the status. */ }

package/build/lib/approval-tool-decisions.d.ts

@@ -4,6 +4,8 @@ export declare function cancelApproval(approvalId: string, transportClientName?:
 } | {
     approval_id: string;
     status: 'rejected';
+    outcome: 'cancelled';
+    cancelled: true;
 }>;
 export declare function approveApproval(approvalId: string, transportClientName?: string): Promise<{
     code: string;

package/build/lib/approval-tool-decisions.js

@@ -53,12 +53,12 @@ export async function cancelApproval(approvalId, transportClientName) {
             project_id: projectId, actor_type: actor.actorType ?? actor.authKind ?? 'api_key',
             actor_id: actor.actorId ?? actor.keyId ?? actor.oauthTokenId ?? null,
             action: 'approval.cancelled', resource_type: 'approval', resource_id: approvalId,
-            details: { status: 'rejected', channel, client_name: name, auth_kind: actor.authKind ?? null,
+            details: { status: 'rejected', outcome: 'cancelled', channel, client_name: name, auth_kind: actor.authKind ?? null,
                 oauth_token_id: actor.oauthTokenId ?? null, api_key_id: actor.keyId ?? null },
         });
         if (auditError)
             return refuse('approval_audit_failed', 'Approval cancelled, but audit failed. Check its status before retrying.');
-        return { approval_id: approvalId, status: 'rejected' };
+        return { approval_id: approvalId, status: 'rejected', outcome: 'cancelled', cancelled: true };
     }
     catch {
         return refuse('approval_failed', 'Cancellation failed. Check approval status before retrying.');

package/build/tools/approvals.js

@@ -23,7 +23,7 @@ export function registerApprovalTools(server, options) {
     });
     server.registerTool('cancel_approval', {
         title: 'Cancel Approval',
-        description: 'Cancel an unexpired, unused pending or approved action approval in this project. Read-scoped OAuth connections can cancel only their own token’s requests; write/admin credentials can cancel any eligible request in this project. Sets it to rejected and records who cancelled and the request channel in the audit; check_approval returns that cancellation attribution. Cannot approve or undo cancellation.',
+        description: 'Cancel an unexpired, unused pending or approved action approval in this project. Read-scoped OAuth connections can cancel only their own token’s requests; write/admin credentials can cancel any eligible request in this project. Marks it cancelled (stored and reported as status `rejected` for backward compatibility; `outcome: "cancelled"` and `cancelled: true` distinguish a withdrawal from a person’s rejection) and records who cancelled and the request channel in the audit; check_approval returns that cancellation attribution. Cannot approve or undo cancellation.',
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
         inputSchema: { approval_id: z.string().uuid() },
     }, async ({ approval_id }) => {
@@ -59,7 +59,7 @@ export function registerApprovalTools(server, options) {
             idempotentHint: true,
             openWorldHint: false,
         },
-        description: 'Check the status of a pending action approval. Use this to poll after requesting an action that requires human approval. Returns approved/pending/rejected/expired.',
+        description: 'Check the status of a pending action approval. Use this to poll after requesting an action that requires human approval. Returns approved/pending/rejected/expired; a cancelled approval keeps status `rejected` and adds `outcome: "cancelled"` and `cancelled: true`.',
         inputSchema: {
             approval_id: z.string().uuid().describe('The approval ID returned by the original tool call'),
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sendinel/mcp-server",
-  "version": "1.0.191",
+  "version": "1.0.192",
   "description": "AI-controlled email operations control plane for campaigns, contacts, segments, analytics, and multi-provider sending via MCP.",
   "mcpName": "ai.sendinel/mcp-server",
   "type": "module",