@sendinel/mcp-server 1.0.63 → 1.0.65

package/build/tools/campaigns.js

@@ -12,7 +12,7 @@ import { getProjectId } from '../project.js';
 import { checkPlanLimit } from '../plan-limits.js';
 import { buildVoicePrompt, buildEmailSystemPrompt, deriveTemplateVariables, validateTemplate } from '../lib/voice.js';
 import { fireWebhookEvent } from '../lib/webhook-events.js';
-import { approvalExcerpt, assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval } from '../lib/action-approvals.js';
+import { approvalExcerpt, assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, withApproval } from '../lib/action-approvals.js';
 import { resolveSendAudience } from '../lib/send-audience.js';
 import { generateEmailFromBrief, parseAudienceRules } from '../lib/email-generation.js';
 import { getAnthropicModelId } from '../anthropic-model.js';
@@ -873,11 +873,12 @@ export function registerCampaignTools(server) {
         },
         description: 'Enroll a single contact in a campaign',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             campaign_id: z.string().uuid(),
             contact_id: z.string().uuid(),
             next_send_at: z.string().optional().describe('ISO datetime for first send. Defaults to now.'),
         },
-    }, async ({ campaign_id, contact_id, next_send_at }) => {
+    }, withApproval('enroll_contact', async ({ campaign_id, contact_id, next_send_at }) => {
         const { data: contact, error: contactError } = await db()
             .from('subscribers')
             .select('id, global_unsubscribed, cooled_at')
@@ -905,7 +906,7 @@ export function registerCampaignTools(server) {
             await db().from('campaigns').update({ total_enrolled: (campaign.total_enrolled ?? 0) + 1 }).eq('id', campaign_id);
         }
         return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
-    });
+    }));
     server.registerTool('get_enrollment_status', {
         title: 'Get Enrollment Status',
         annotations: {
@@ -995,11 +996,12 @@ export function registerCampaignTools(server) {
         },
         description: 'Enroll all active subscribers from a site into a campaign. Skips globally unsubscribed and suppressed contacts.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             campaign_id: z.string().uuid(),
             site_id: z.string().uuid(),
             next_send_at: z.string().optional().describe('ISO datetime for first send. Defaults to now.'),
         },
-    }, async ({ campaign_id, site_id, next_send_at }) => {
+    }, withApproval('enroll_segment', async ({ campaign_id, site_id, next_send_at }) => {
         const sendAt = next_send_at ?? new Date().toISOString();
         const { data: subs, error: subErr } = await db()
             .from('site_subscriptions')
@@ -1034,7 +1036,7 @@ export function registerCampaignTools(server) {
             await db().from('campaigns').update({ total_enrolled: (campaign.total_enrolled ?? 0) + eligible.length }).eq('id', campaign_id);
         }
         return { content: [{ type: 'text', text: JSON.stringify({ enrolled: eligible.length, campaign_id, site_id }, null, 2) }] };
-    });
+    }));
     server.registerTool('broadcast_to_segment', {
         title: 'Broadcast To Segment',
         annotations: {
@@ -2217,6 +2219,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         },
         description: 'Send a test email to a specified address using the site\'s configured provider. Content from step_id, draft_id, or raw subject/body_html. Logged as test, not counted in campaign metrics.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             to_email: z.string().email().describe('Email address to send the test to'),
             site_id: z.string().uuid().describe('Site UUID (determines from address)'),
             step_id: z.string().uuid().optional(),
@@ -2225,7 +2228,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             body_html: z.string().optional(),
             body_text: z.string().optional(),
         },
-    }, async ({ to_email, site_id, step_id, draft_id, subject, body_html, body_text }) => {
+    }, withApproval('send_test_email', async ({ to_email, site_id, step_id, draft_id, subject, body_html, body_text }) => {
         const projectId = getProjectId();
         let subj = subject ?? '';
         let html = body_html ?? '';
@@ -2308,7 +2311,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             provider_message_id: sendResult.messageId,
             resend_id: sendResult.provider === 'resend' ? sendResult.messageId : null,
         });
-    });
+    }));
     server.registerTool('send_transactional', {
         title: 'Send Transactional',
         annotations: {
@@ -2319,6 +2322,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
         },
         description: 'Send a transactional email (password reset, receipt, notification) using the site\'s configured provider. Checks suppressions and plan limits. Logged with category transactional.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             to: z.string().email().describe('Recipient email address'),
             site_id: z.string().uuid().describe('Site UUID (determines from address and Resend key)'),
             subject: z.string().optional().describe('Email subject line. Required unless template_id is supplied and the template has a subject_hint.'),
@@ -2329,7 +2333,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             template_id: z.string().uuid().optional().describe('campaign_templates row to render and send. Mutually exclusive with html.'),
             template_vars: z.record(z.string(), z.string()).optional().describe('Variable values for template_id rendering. Wins over brand tokens on key collision.'),
         },
-    }, async ({ to, site_id, subject, html, text, reply_to, idempotency_key, template_id, template_vars }) => {
+    }, withApproval('send_transactional', async ({ to, site_id, subject, html, text, reply_to, idempotency_key, template_id, template_vars }) => {
         const projectId = getProjectId();
         if (template_id && html)
             return txt("Error: Provide either 'template_id' or 'html', not both");
@@ -2459,7 +2463,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             provider_message_id: sendResult.messageId,
             resend_id: sendResult.provider === 'resend' ? sendResult.messageId : null,
         });
-    });
+    }));
     function parseReplyWindow(input) {
         const match = /^(\d{1,2})d$/.exec(input.trim());
         if (!match)
@@ -2485,8 +2489,9 @@ Do not include body_html in your response; Sendinel renders body_html from block
             idempotentHint: false,
             openWorldHint: true,
         },
-        description: 'Send a transactional email and track whether the recipient replies within a deadline. Mints a single-use Reply-To address with an expiry window, tags it with a correlation ID, and logs reply actions. Customer replies are captured as data only.',
+        description: 'Send a transactional email and track whether the recipient replies within a deadline. Mints a single-use Reply-To address with an expiry window, tags it with a correlation ID, and logs reply actions. Customer replies are captured as data only. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             to: z.string().email().describe('Recipient email address'),
             site_id: z.string().uuid().describe('Site UUID (determines from address and provider)'),
             subject: z.string().optional().describe('Email subject line. Required unless template_id is supplied and the template has a subject_hint.'),
@@ -2498,7 +2503,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             template_id: z.string().uuid().optional().describe('campaign_templates row to render and send. Mutually exclusive with html.'),
             template_vars: z.record(z.string(), z.string()).optional().describe('Variable values for template_id rendering. Wins over brand tokens on key collision.'),
         },
-    }, async ({ to, site_id, subject, html, text, expect_reply_within, correlation_id, idempotency_key, template_id, template_vars }) => {
+    }, withApproval('send_awaiting_reply', async ({ to, site_id, subject, html, text, expect_reply_within, correlation_id, idempotency_key, template_id, template_vars }) => {
         const projectId = getProjectId();
         if (template_id && html)
             return txt("Error: Provide either 'template_id' or 'html', not both");
@@ -2694,7 +2699,7 @@ Do not include body_html in your response; Sendinel renders body_html from block
             provider_message_id: sendResult.messageId,
             resend_id: sendResult.provider === 'resend' ? sendResult.messageId : null,
         });
-    });
+    }));
     server.registerTool('get_reply_status', {
         title: 'Get Reply Status',
         annotations: {
@@ -3190,8 +3195,8 @@ Return ONLY valid JSON with this exact shape:
             openWorldHint: false,
         },
         description: 'Remove a step from a campaign. Only allowed on draft campaigns.',
-        inputSchema: { step_id: z.string().uuid() },
-    }, async ({ step_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), step_id: z.string().uuid() },
+    }, withApproval('delete_campaign_step', async ({ step_id }) => {
         const projectId = getProjectId();
         const { data: step } = await db()
             .from('campaign_steps')
@@ -3218,7 +3223,7 @@ Return ONLY valid JSON with this exact shape:
         if (error)
             return j({ error: error.message });
         return j({ ok: true, deleted: step_id });
-    });
+    }));
     server.registerTool('delete_campaign', {
         title: 'Delete Campaign',
         annotations: {
@@ -3228,8 +3233,8 @@ Return ONLY valid JSON with this exact shape:
             openWorldHint: false,
         },
         description: 'Permanently delete a campaign. Campaign must not be active — pause it first. Deletes all steps and enrollments.',
-        inputSchema: { campaign_id: z.string().uuid() },
-    }, async ({ campaign_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), campaign_id: z.string().uuid() },
+    }, withApproval('delete_campaign', async ({ campaign_id }) => {
         const projectId = getProjectId();
         const { data: campaign, error: fetchErr } = await db()
             .from('campaigns')
@@ -3250,7 +3255,7 @@ Return ONLY valid JSON with this exact shape:
         if (error)
             return j({ error: error.message });
         return j({ success: true, deleted: campaign.name });
-    });
+    }));
     server.registerTool('update_campaign', {
         title: 'Update Campaign',
         annotations: {

package/build/tools/contacts.js

@@ -7,7 +7,7 @@ import { db, projectClientForWriteback } from '../db.js';
 import { getProjectId } from '../project.js';
 import { checkPlanLimit } from '../plan-limits.js';
 import { logConsent, logAudit } from '../audit.js';
-import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, currentChannelContext, requestApproval, checkApproval, withApproval } from '../lib/action-approvals.js';
 import { decrypt } from '../crypto.js';
 import { normalizeActiveCampaignAccountUrl } from '../lib/url-validation.js';
 import { diffCustomProperties } from '../lib/custom-properties-diff.js';
@@ -1059,9 +1059,10 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         },
         description: 'Delete a saved subscriber view owned by the current project.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             view_id: z.string().uuid(),
         },
-    }, async ({ view_id }) => {
+    }, withApproval('delete_subscriber_view', async ({ view_id }) => {
         const { data, error } = await db()
             .from('subscriber_list_views')
             .delete()
@@ -1074,7 +1075,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (!data)
             return txt('View not found');
         return j({ deleted: true, view_id });
-    });
+    }));
     server.registerTool('list_companies', {
         title: 'List Companies',
         annotations: {
@@ -1231,6 +1232,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         },
         description: 'Bulk import contacts and subscribe them to a site. Max 200 per call.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             contacts: z.array(z.object({
                 email: z.string().email(),
                 first_name: z.string().optional(),
@@ -1238,7 +1240,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             })).min(1).max(200),
             site_id: z.string().uuid(),
         },
-    }, async ({ contacts, site_id }) => {
+    }, withApproval('import_subscribers', async ({ contacts, site_id }) => {
         const projectId = getProjectId();
         const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
         // Distribution list / system address block — same patterns as dashboard email-validation.ts
@@ -1314,7 +1316,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         const created = contactRows.filter((c) => !existingEmails.has(c.email)).length;
         const updated = contactRows.length - created;
         return { content: [{ type: 'text', text: JSON.stringify({ created, updated, total: contactRows.length }, null, 2) }] };
-    });
+    }));
     server.registerTool('unsubscribe_subscriber', {
         title: 'Unsubscribe Subscriber',
         annotations: {
@@ -1862,10 +1864,11 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         },
         description: 'Merge custom_properties into many contacts at once. Same merge semantics as update_subscriber, applied across a batch.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             contact_ids: z.array(z.string().uuid()).min(1),
             custom_properties: z.record(z.string(), z.unknown()).describe('Merged into each contact\'s existing custom_properties; a key set to null deletes that key'),
         },
-    }, async ({ contact_ids, custom_properties }) => {
+    }, withApproval('bulk_update_subscribers', async ({ contact_ids, custom_properties }) => {
         const projectId = getProjectId();
         const orgId = await getProjectOrgId(projectId);
         const fields = await loadContactPropertyDefinitions(projectId);
@@ -1921,7 +1924,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             await writeBackMcpContact(projectId, contact, { custom_properties: merged });
         }
         return j({ updated, total: contact_ids.length });
-    });
+    }));
     server.registerTool('estimate_segment_size', {
         title: 'Estimate Segment Size',
         annotations: {
@@ -2141,11 +2144,12 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             idempotentHint: false,
             openWorldHint: false,
         },
-        description: 'Remove an email address from the suppression list',
+        description: 'Remove an email address from the suppression list. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             email: z.string().email(),
         },
-    }, async ({ email }) => {
+    }, withApproval('remove_suppression', async ({ email }) => {
         const { data, error } = await db()
             .from('suppressions')
             .delete()
@@ -2158,7 +2162,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         if (!data)
             return txt(`No suppression found for ${email}.`);
         return j({ removed: true, email, previous_reason: data.reason });
-    });
+    }));
     server.registerTool('find_duplicates', {
         title: 'Find Duplicates',
         annotations: {
@@ -2496,8 +2500,8 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
         title: 'Delete Custom Field',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Delete a custom field definition without deleting existing contact values stored under that key.',
-        inputSchema: { id: z.string().uuid() },
-    }, async ({ id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), id: z.string().uuid() },
+    }, withApproval('delete_custom_field', async ({ id }) => {
         const projectId = getProjectId();
         const { data, error } = await db()
             .from('custom_field_definitions')
@@ -2517,7 +2521,7 @@ Requirements: urgency without desperation, acknowledge the gap, one clear CTA, v
             details: { key: data.key },
         });
         return j({ deleted: true, id: data.id, key: data.key });
-    });
+    }));
     server.registerTool('get_contact_neighborhood', {
         title: 'Get Contact Neighborhood',
         annotations: {

package/build/tools/content.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -234,13 +235,13 @@ export function registerContentTools(server) {
             openWorldHint: false,
         },
         description: 'Delete a reusable content block.',
-        inputSchema: { block_id: z.string().uuid() },
-    }, async ({ block_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), block_id: z.string().uuid() },
+    }, withApproval('delete_content_block', async ({ block_id }) => {
         const { error } = await db().from('content_blocks').delete().eq('project_id', getProjectId()).eq('id', block_id);
         if (error)
             return j({ error: error.message });
         return j({ deleted: true });
-    });
+    }));
     server.registerTool('list_content_sources', {
         title: 'List Content Sources',
         annotations: {
@@ -294,6 +295,7 @@ export function registerContentTools(server) {
         },
         description: 'Ingest a blog post (written by your AI/agent) into Sendinel. By default it lands as a draft in the review queue. For a trusted, hands-off flow, set auto_publish=true with publish_to (a destination name or id from list_blog_destinations) to skip review and publish to the user\'s own site — now, or at scheduled_at. Only title is required; everything else is optional.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             title: z.string().min(1).max(300),
             body: z.string().optional(),
             excerpt: z.string().max(1000).optional(),
@@ -308,7 +310,7 @@ export function registerContentTools(server) {
             auto_publish: z.boolean().optional(),
             publish_to: z.string().max(200).optional(),
         },
-    }, async (args) => {
+    }, withApproval('create_blog_post', async (args) => {
         const { data: proj, error: projErr } = await adminDb().from('projects').select('org_id').eq('id', getProjectId()).single();
         if (projErr || !proj?.org_id)
             return j({ error: 'Organization not found for project' });
@@ -363,7 +365,7 @@ export function registerContentTools(server) {
         if (error)
             return j({ error: error.message, code: error.code });
         return j({ blog_post: data, ...(auto_publish ? { note: scheduled_at ? 'Scheduled — the publish worker will send it at scheduled_at.' : 'Queued for immediate publish — the worker publishes it within a few minutes.' } : {}) });
-    });
+    }));
     server.registerTool('list_blog_posts', {
         title: 'List Blog Posts',
         annotations: {

package/build/tools/data.js

@@ -4,7 +4,7 @@ import { z } from 'zod';
 import { adminDb, db } from '../db.js';
 import { decrypt, encrypt } from '../crypto.js';
 import { normalizeActiveCampaignAccountUrl } from '../lib/url-validation.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
@@ -562,11 +562,12 @@ export function registerDataTools(server) {
         },
         description: 'Disconnect an external platform connection for the current project organization and remove stored credentials.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             org_id: z.string().uuid().optional(),
             platform: z.enum(CONNECTED_PLATFORMS).optional(),
             connection_id: z.string().uuid().optional(),
         },
-    }, async ({ org_id, platform, connection_id }) => {
+    }, withApproval('disconnect_platform', async ({ org_id, platform, connection_id }) => {
         try {
             if (!platform && !connection_id)
                 return j({ error: 'platform or connection_id is required' });
@@ -596,7 +597,7 @@ export function registerDataTools(server) {
         catch (error) {
             return j({ error: error instanceof Error ? error.message : 'Failed to disconnect platform' });
         }
-    });
+    }));
     server.registerTool('list_platform_events', {
         title: 'List Platform Events',
         annotations: {
@@ -978,11 +979,12 @@ export function registerDataTools(server) {
         },
         description: 'Create an API key and return the secret once.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             name: z.string().min(1),
             slug: z.string().optional(),
             scopes: z.array(z.string()).optional().default(['read']),
         },
-    }, async ({ name, slug, scopes = ['read'] }) => {
+    }, withApproval('create_api_key', async ({ name, slug, scopes = ['read'] }) => {
         // MCP API-key sessions can be unbound to a user, so they cannot prove an
         // acting org role. Admin keys must be created through the dashboard.
         if (scopes.includes('admin')) {
@@ -997,7 +999,7 @@ export function registerDataTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ key_id: data.id, name: data.name, slug: data.slug, secret });
-    });
+    }));
     server.registerTool('revoke_api_key', {
         title: 'Revoke API Key',
         annotations: {
@@ -1007,13 +1009,13 @@ export function registerDataTools(server) {
             openWorldHint: false,
         },
         description: 'Revoke an API key.',
-        inputSchema: { key_id: z.string().uuid() },
-    }, async ({ key_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), key_id: z.string().uuid() },
+    }, withApproval('revoke_api_key', async ({ key_id }) => {
         const { error } = await db().from('api_keys').update({ revoked_at: new Date().toISOString() }).eq('project_id', getProjectId()).eq('id', key_id);
         if (error)
             return j({ error: error.message });
         return j({ revoked: true });
-    });
+    }));
     server.registerTool('migrate_campaigns_from', {
         title: 'Migrate Campaigns From',
         annotations: {
@@ -1195,10 +1197,11 @@ export function registerDataTools(server) {
         },
         description: 'Export all tenant data classes for portability. Returns inline data for small exports or a signed archive URL for large exports.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             siteId: z.string().uuid(),
             format: z.enum(['json', 'csv']).optional().default('json'),
         },
-    }, async ({ siteId, format = 'json' }) => {
+    }, withApproval('tenant_export_full', async ({ siteId, format = 'json' }) => {
         const projectId = getProjectId();
         const since = new Date(Date.now() - 90 * 24 * 3600 * 1000).toISOString();
         const client = db();
@@ -1284,5 +1287,5 @@ export function registerDataTools(server) {
             expires_at: new Date(Date.now() + 24 * 3600 * 1000).toISOString(),
             record_counts: recordCounts,
         });
-    });
+    }));
 }

package/build/tools/delivery-ops.js

@@ -3,7 +3,7 @@ import dns from 'node:dns/promises';
 import { cancelSendQueueRows, findReplayableEnrollmentDlqRows, listSendQueueRows, replayEnrollmentDlqRows, retrySendQueueRows, } from '@sendinel/domain';
 import { logAudit } from '../audit.js';
 import { adminDb, db } from '../db.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval } from '../lib/action-approvals.js';
 import { callSendinelV1 } from '../lib/v1-client.js';
 import { getProjectId } from '../project.js';
 const j = (data) => ({ content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] });
@@ -507,13 +507,14 @@ export function registerDeliveryOpsTools(server) {
         },
         description: 'Re-enter dead-lettered campaign enrollments into active sending, which can cause real emails to send on the next queue tick. Call once without confirmed to preview the matched count, then call again with confirmed=true to replay them.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             site_id: z.string().uuid(),
             max_count: z.number().int().min(1).max(1000).default(100).optional(),
             failed_after: z.string().datetime().optional(),
             confirmed: z.boolean().optional().default(false)
                 .describe('Two-call confirmation. First call previews the matched rows; confirmed=true replays them.'),
         },
-    }, async ({ site_id, max_count = 100, failed_after, confirmed = false }) => {
+    }, withApproval('replay_enrollment_dlq_rows', async ({ site_id, max_count = 100, failed_after, confirmed = false }) => {
         const projectId = getProjectId();
         if (!confirmed) {
             try {
@@ -561,7 +562,7 @@ export function registerDeliveryOpsTools(server) {
         catch (error) {
             return j({ error: error instanceof Error ? error.message : 'Replay failed' });
         }
-    });
+    }));
     server.registerTool('get_scoring_rules', {
         title: 'Get Scoring Rules',
         annotations: {

package/build/tools/landing-pages.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -118,6 +119,7 @@ export function registerLandingPageTools(server) {
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
         description: 'Update a landing page. Setting status to published stamps published_at; pass site_id or form_id as null to clear it.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             page_id: z.string().uuid(),
             title: z.string().trim().min(1).max(200).optional(),
             slug: z.string().trim().regex(SLUG_RE, 'Lowercase alphanumeric + hyphens, max 63 chars').optional(),
@@ -132,7 +134,7 @@ export function registerLandingPageTools(server) {
             accent_color: z.string().optional(),
             custom_css: z.string().optional(),
         },
-    }, async ({ page_id, title, slug, status, site_id, form_id, blocks, meta_title, meta_description, conversion_event, background_color, accent_color, custom_css }) => {
+    }, withApproval('update_landing_page', async ({ page_id, title, slug, status, site_id, form_id, blocks, meta_title, meta_description, conversion_event, background_color, accent_color, custom_css }) => {
         const projectId = getProjectId();
         const updates = { updated_at: new Date().toISOString() };
         if (title !== undefined)
@@ -181,13 +183,13 @@ export function registerLandingPageTools(server) {
             details: { title: data.title, slug: data.slug, status: data.status },
         });
         return j(data);
-    });
+    }));
     server.registerTool('delete_landing_page', {
         title: 'Delete Landing Page',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Permanently delete a landing page. Set status to archived instead to unpublish without deleting.',
-        inputSchema: { page_id: z.string().uuid() },
-    }, async ({ page_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), page_id: z.string().uuid() },
+    }, withApproval('delete_landing_page', async ({ page_id }) => {
         const projectId = getProjectId();
         const { error } = await db()
             .from('landing_pages')
@@ -198,5 +200,5 @@ export function registerLandingPageTools(server) {
             return j({ error: error.message });
         await logAudit({ action: 'landing_page.deleted', resourceType: 'landing_page', resourceId: page_id });
         return j({ deleted: true });
-    });
+    }));
 }

package/build/tools/lists.js

@@ -3,7 +3,7 @@ import { applySegmentRules, buildSegmentBaseQuery, evaluateSegmentRules, normali
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
 import { logAudit } from '../audit.js';
-import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, } from '../lib/action-approvals.js';
+import { assertChannelCanExecute, checkApproval, currentChannelContext, requestApproval, withApproval, } from '../lib/action-approvals.js';
 const LIST_MEMBER_BATCH_SIZE = 500;
 const txt = (text) => ({ content: [{ type: 'text', text }] });
 const j = (data) => txt(JSON.stringify(data, null, 2));
@@ -181,8 +181,8 @@ export function registerListTools(server) {
         title: 'Delete Contact List',
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
         description: 'Permanently delete a static contact list and its memberships.',
-        inputSchema: { list_id: z.string().uuid() },
-    }, async ({ list_id }) => {
+        inputSchema: { approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'), list_id: z.string().uuid() },
+    }, withApproval('delete_list', async ({ list_id }) => {
         const projectId = getProjectId();
         const { error } = await db()
             .from('contact_lists')
@@ -193,7 +193,7 @@ export function registerListTools(server) {
             return txt(`Error: ${error.message}`);
         await logAudit({ action: 'list.deleted', resourceType: 'list', resourceId: list_id });
         return j({ deleted: true, list_id });
-    });
+    }));
     server.registerTool('add_list_members', {
         title: 'Add List Members',
         annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },

package/build/tools/newsletters.js

@@ -1,3 +1,4 @@
+import { withApproval } from '../lib/action-approvals.js';
 import { z } from 'zod';
 import { db } from '../db.js';
 import { getProjectId } from '../project.js';
@@ -354,11 +355,12 @@ export function registerNewsletterTools(server) {
         },
         description: 'Schedule a newsletter issue through the campaign send pipeline.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             newsletter_id: z.string().uuid(),
             issue_id: z.string().uuid(),
             scheduled_at: z.string(),
         },
-    }, async ({ newsletter_id, issue_id, scheduled_at }) => {
+    }, withApproval('schedule_newsletter_issue', async ({ newsletter_id, issue_id, scheduled_at }) => {
         const parsed = parseFutureDate(scheduled_at);
         if ('error' in parsed)
             return j({ error: parsed.error, code: 'INVALID_FIELD' });
@@ -381,7 +383,7 @@ export function registerNewsletterTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ issue: data, campaign_id: campaign.campaignId, enrolled: campaign.enrolled });
-    });
+    }));
     server.registerTool('send_newsletter_issue', {
         title: 'Send Newsletter Issue',
         annotations: {
@@ -390,12 +392,13 @@ export function registerNewsletterTools(server) {
             idempotentHint: false,
             openWorldHint: true,
         },
-        description: 'Send a newsletter issue now through the campaign send pipeline and create archive metadata.',
+        description: 'Send a newsletter issue now through the campaign send pipeline and create archive metadata. Requires human approval: the first call returns an approve_url and does nothing; call again with the same arguments plus approval_id once approved.',
         inputSchema: {
+            approval_id: z.string().uuid().optional().describe('Get this by calling once without it, then have a human approve the returned approve_url. Re-call with the same arguments plus this approval_id to run the action.'),
             newsletter_id: z.string().uuid(),
             issue_id: z.string().uuid(),
         },
-    }, async ({ newsletter_id, issue_id }) => {
+    }, withApproval('send_newsletter_issue', async ({ newsletter_id, issue_id }) => {
         const projectId = getProjectId();
         const loaded = await loadSendableIssue(newsletter_id, issue_id, projectId);
         if ('error' in loaded)
@@ -436,7 +439,7 @@ export function registerNewsletterTools(server) {
         if (error)
             return j({ error: error.message });
         return j({ issue: data, campaign_id: campaign.campaignId, enrolled: campaign.enrolled, blog_post_id: post?.id ?? null, archive_url: post?.external_url ?? null });
-    });
+    }));
     server.registerTool('subscribe_to_newsletter', {
         title: 'Subscribe To Newsletter',
         annotations: {