@velaro/mcp-server 0.6.28 → 0.6.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.28",
+  "version": "0.6.29",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {

package/server.js

@@ -3834,6 +3834,183 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     },
   },
 
+  // ── Generic Booking Engine (Phase 1b) ─────────────────────────────────────────
+  // Backend: server/Velaro.Messaging/Controllers/{BookableResourcesController,
+  // BookableServicesController,ResourceAvailabilityRulesController}.cs, routed at
+  // /BookableResources, /BookableServices, /ResourceAvailabilityRules. SiteId always
+  // derives server-side from the caller's auth context, never a tool argument (IDOR).
+  // See velaro-admin memory project_2026_09_06_generic_booking_engine_schema_plan.md.
+  {
+    name: 'booking_list_resources',
+    description: 'List bookable resources (staff / room / equipment / virtual) for this site.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'booking_get_resource',
+    description: 'Get a single bookable resource by id.',
+    inputSchema: {
+      type: 'object',
+      properties: { resourceId: { type: 'number', description: 'Resource ID. Required.' } },
+      required: ['resourceId'],
+    },
+  },
+  {
+    name: 'booking_create_resource',
+    description: 'Create a bookable resource -- whatever a bookable service may need to be scheduled against (a staff member, a room, a piece of equipment, or a virtual/no-resource slot).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        name:         { type: 'string', description: 'Resource name. Required.' },
+        resourceType: { type: 'string', enum: ['Staff', 'Room', 'Equipment', 'Virtual'], description: 'Resource type. Defaults to Staff.' },
+        isActive:     { type: 'boolean', description: 'Whether the resource is active. Defaults to true.' },
+      },
+      required: ['name'],
+    },
+  },
+  {
+    name: 'booking_update_resource',
+    description: 'Update a bookable resource. Only supplied fields change -- omitted fields are left untouched.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        resourceId:   { type: 'number', description: 'Resource ID. Required.' },
+        name:         { type: 'string', description: 'New name' },
+        resourceType: { type: 'string', enum: ['Staff', 'Room', 'Equipment', 'Virtual'], description: 'New resource type' },
+        isActive:     { type: 'boolean', description: 'New active state' },
+      },
+      required: ['resourceId'],
+    },
+  },
+  {
+    name: 'booking_delete_resource',
+    description: 'Delete a bookable resource. 404 if it isn\'t found on this site.',
+    inputSchema: {
+      type: 'object',
+      properties: { resourceId: { type: 'number', description: 'Resource ID. Required.' } },
+      required: ['resourceId'],
+    },
+  },
+  {
+    name: 'booking_list_services',
+    description: 'List bookable services (the "thing" a customer books -- a fitness class, a salon appointment type, etc.) for this site.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'booking_get_service',
+    description: 'Get a single bookable service by id.',
+    inputSchema: {
+      type: 'object',
+      properties: { serviceId: { type: 'number', description: 'Service ID. Required.' } },
+      required: ['serviceId'],
+    },
+  },
+  {
+    name: 'booking_create_service',
+    description: 'Create a bookable service.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        name:              { type: 'string',  description: 'Service name. Required.' },
+        durationMinutes:   { type: 'number',  description: 'Duration in minutes. Defaults to 30.' },
+        defaultCapacity:   { type: 'number',  description: 'Default seats per generated slot (1 = classic 1:1 appointment, N = a class with N seats). Defaults to 1.' },
+        requiresResource:  { type: 'boolean', description: 'Whether a slot for this service must be tied to a specific bookable resource. Defaults to true.' },
+        category:          { type: 'string',  description: 'Free-text grouping for admin UI/reporting, e.g. "Hair" or "Fitness Classes".' },
+        isActive:          { type: 'boolean', description: 'Whether the service is active. Defaults to true.' },
+      },
+      required: ['name'],
+    },
+  },
+  {
+    name: 'booking_update_service',
+    description: 'Update a bookable service. Only supplied fields change -- omitted fields are left untouched.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        serviceId:         { type: 'number',  description: 'Service ID. Required.' },
+        name:              { type: 'string',  description: 'New name' },
+        durationMinutes:   { type: 'number',  description: 'New duration in minutes' },
+        defaultCapacity:   { type: 'number',  description: 'New default seats per slot' },
+        requiresResource:  { type: 'boolean', description: 'New requires-resource flag' },
+        category:          { type: 'string',  description: 'New category (empty string clears it)' },
+        isActive:          { type: 'boolean', description: 'New active state' },
+      },
+      required: ['serviceId'],
+    },
+  },
+  {
+    name: 'booking_delete_service',
+    description: 'Delete a bookable service. 404 if it isn\'t found on this site.',
+    inputSchema: {
+      type: 'object',
+      properties: { serviceId: { type: 'number', description: 'Service ID. Required.' } },
+      required: ['serviceId'],
+    },
+  },
+  {
+    name: 'booking_list_availability',
+    description: 'List weekly-recurring availability rules for this site, optionally filtered to one resource. A null resourceId on a rule means it is the site-wide default.',
+    inputSchema: {
+      type: 'object',
+      properties: { resourceId: { type: 'number', description: 'Only return rules for this resource ID' } },
+      required: [],
+    },
+  },
+  {
+    name: 'booking_get_availability',
+    description: 'Get a single availability rule by id.',
+    inputSchema: {
+      type: 'object',
+      properties: { ruleId: { type: 'number', description: 'Rule ID. Required.' } },
+      required: ['ruleId'],
+    },
+  },
+  {
+    name: 'booking_create_availability',
+    description: 'Create a weekly-recurring availability rule for a resource (or the whole site if resourceId is omitted).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        resourceId:    { type: 'number', description: 'Resource ID this rule applies to. Omit for a site-wide default -- must belong to this site if supplied.' },
+        dayOfWeek:     { type: 'string', enum: ['Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday'], description: 'Day of week. Required.' },
+        startLocal:    { type: 'string', description: 'Local start time, HH:MM:SS. Required.' },
+        endLocal:      { type: 'string', description: 'Local end time, HH:MM:SS. Required, must be after startLocal.' },
+        ianaTimeZone:  { type: 'string', description: 'IANA timezone id, e.g. America/Los_Angeles (default).' },
+        effectiveFrom: { type: 'string', description: 'ISO 8601 timestamp the rule starts applying. Defaults to now.' },
+        effectiveTo:   { type: 'string', description: 'ISO 8601 timestamp the rule stops applying. Omit for open-ended.' },
+        isActive:      { type: 'boolean', description: 'Whether the rule is active. Defaults to true.' },
+      },
+      required: ['dayOfWeek', 'startLocal', 'endLocal'],
+    },
+  },
+  {
+    name: 'booking_update_availability',
+    description: 'Update a weekly-recurring availability rule. Only supplied fields change -- omitted fields are left untouched.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        ruleId:        { type: 'number', description: 'Rule ID. Required.' },
+        resourceId:    { type: 'number', description: 'New resource ID -- must belong to this site' },
+        dayOfWeek:     { type: 'string', enum: ['Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday'], description: 'New day of week' },
+        startLocal:    { type: 'string', description: 'New local start time, HH:MM:SS' },
+        endLocal:      { type: 'string', description: 'New local end time, HH:MM:SS' },
+        ianaTimeZone:  { type: 'string', description: 'New IANA timezone id' },
+        effectiveFrom: { type: 'string', description: 'New effective-from ISO 8601 timestamp' },
+        effectiveTo:   { type: 'string', description: 'New effective-to ISO 8601 timestamp' },
+        isActive:      { type: 'boolean', description: 'New active state' },
+      },
+      required: ['ruleId'],
+    },
+  },
+  {
+    name: 'booking_delete_availability',
+    description: 'Delete an availability rule. 404 if it isn\'t found on this site.',
+    inputSchema: {
+      type: 'object',
+      properties: { ruleId: { type: 'number', description: 'Rule ID. Required.' } },
+      required: ['ruleId'],
+    },
+  },
+
   // Focus Inbox -- draft pregeneration usage/cap report ("Always Learning" addon,
   // issue #582 Phase D). Entitlements-gated (EnableFocusDraftPregeneration), not a
   // Subscription.cs flag -- the response's own `entitled` field is the source of
@@ -7784,6 +7961,137 @@ async function handleTool(name, args) {
       return JSON.stringify(result, null, 2);
     }
 
+    // -- Generic Booking Engine (Phase 1b) --
+    case 'booking_list_resources': {
+      const result = await messagingGet('/BookableResources');
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_get_resource': {
+      if (args.resourceId == null) return 'resourceId is required.';
+      const result = await messagingGet(`/BookableResources/${encodeURIComponent(args.resourceId)}`);
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_create_resource': {
+      if (!args.name) return 'name is required.';
+      const result = await messagingPost('/BookableResources', {
+        name:         args.name,
+        resourceType: args.resourceType,
+        isActive:     args.isActive,
+      });
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_update_resource': {
+      if (args.resourceId == null) return 'resourceId is required.';
+      const result = await messagingPut(`/BookableResources/${encodeURIComponent(args.resourceId)}`, {
+        name:         args.name,
+        resourceType: args.resourceType,
+        isActive:     args.isActive,
+      });
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_delete_resource': {
+      if (args.resourceId == null) return 'resourceId is required.';
+      const result = await messagingDel(`/BookableResources/${encodeURIComponent(args.resourceId)}`);
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_list_services': {
+      const result = await messagingGet('/BookableServices');
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_get_service': {
+      if (args.serviceId == null) return 'serviceId is required.';
+      const result = await messagingGet(`/BookableServices/${encodeURIComponent(args.serviceId)}`);
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_create_service': {
+      if (!args.name) return 'name is required.';
+      const result = await messagingPost('/BookableServices', {
+        name:             args.name,
+        durationMinutes:  args.durationMinutes,
+        defaultCapacity:  args.defaultCapacity,
+        requiresResource: args.requiresResource,
+        category:         args.category,
+        isActive:         args.isActive,
+      });
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_update_service': {
+      if (args.serviceId == null) return 'serviceId is required.';
+      const result = await messagingPut(`/BookableServices/${encodeURIComponent(args.serviceId)}`, {
+        name:             args.name,
+        durationMinutes:  args.durationMinutes,
+        defaultCapacity:  args.defaultCapacity,
+        requiresResource: args.requiresResource,
+        category:         args.category,
+        isActive:         args.isActive,
+      });
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_delete_service': {
+      if (args.serviceId == null) return 'serviceId is required.';
+      const result = await messagingDel(`/BookableServices/${encodeURIComponent(args.serviceId)}`);
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_list_availability': {
+      const qs = args.resourceId != null ? `?resourceId=${encodeURIComponent(args.resourceId)}` : '';
+      const result = await messagingGet(`/ResourceAvailabilityRules${qs}`);
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_get_availability': {
+      if (args.ruleId == null) return 'ruleId is required.';
+      const result = await messagingGet(`/ResourceAvailabilityRules/${encodeURIComponent(args.ruleId)}`);
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_create_availability': {
+      if (!args.dayOfWeek || !args.startLocal || !args.endLocal) {
+        return 'dayOfWeek, startLocal, and endLocal are required.';
+      }
+      const result = await messagingPost('/ResourceAvailabilityRules', {
+        resourceId:    args.resourceId,
+        dayOfWeek:     args.dayOfWeek,
+        startLocal:    args.startLocal,
+        endLocal:      args.endLocal,
+        ianaTimeZone:  args.ianaTimeZone,
+        effectiveFrom: args.effectiveFrom,
+        effectiveTo:   args.effectiveTo,
+        isActive:      args.isActive,
+      });
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_update_availability': {
+      if (args.ruleId == null) return 'ruleId is required.';
+      const result = await messagingPut(`/ResourceAvailabilityRules/${encodeURIComponent(args.ruleId)}`, {
+        resourceId:    args.resourceId,
+        dayOfWeek:     args.dayOfWeek,
+        startLocal:    args.startLocal,
+        endLocal:      args.endLocal,
+        ianaTimeZone:  args.ianaTimeZone,
+        effectiveFrom: args.effectiveFrom,
+        effectiveTo:   args.effectiveTo,
+        isActive:      args.isActive,
+      });
+      return JSON.stringify(result, null, 2);
+    }
+
+    case 'booking_delete_availability': {
+      if (args.ruleId == null) return 'ruleId is required.';
+      const result = await messagingDel(`/ResourceAvailabilityRules/${encodeURIComponent(args.ruleId)}`);
+      return JSON.stringify(result, null, 2);
+    }
+
     default:
       throw new Error(`Unknown tool: ${name}`);
   }