@velaro/mcp-server 0.6.59 → 0.6.60

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.59",
+  "version": "0.6.60",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {

package/server.js

@@ -245,19 +245,73 @@ function mcpFindUnresolved(value) {
     .map(([k]) => k);
 }
 
+// The hosted gateway requires an initialized session (Mcp-Session-Id + MCP-Protocol-Version) on
+// every call after "initialize". Cache one per process and re-initialize when it expires (404).
+let gatewaySession = null;
+async function gatewayInit() {
+  const res = await fetch(`${API_BASE}/mcp`, {
+    method: 'POST',
+    headers: { Authorization: authHeader(), 'Content-Type': 'application/json' },
+    body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2025-11-25', capabilities: {}, clientInfo: { name: 'velaro-mcp-server', version: '1' } } }),
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => '');
+    throw new Error(`Velaro MCP gateway initialize -> ${res.status}: ${text.slice(0, 300)}`);
+  }
+  const sid = res.headers.get('mcp-session-id');
+  if (!sid) throw new Error('Velaro MCP gateway initialize returned no Mcp-Session-Id');
+  gatewaySession = { sid, version: res.headers.get('mcp-protocol-version') || '2025-11-25' };
+  return gatewaySession;
+}
+
+// Tools served by velaro-messaging's admin-tools gateway (McpAdminGatewayController, POST /mcp/v1/admin-tools/call,
+// no session). The admin /mcp gateway only serves kb_* tools, so these used to fail there.
+const MESSAGING_ADMIN_TOOLS = new Set([
+  'workflow_create', 'workflow_list', 'workflow_get', 'workflow_toggle',
+  'bot_create', 'bot_list', 'bot_get', 'bot_update_prompt', 'bot_set_knowledge',
+  'ai_config_attach_index', 'call_pop_settings_get', 'call_pop_settings_set',
+  'agent_list', 'team_list', 'conversation_list', 'conversation_get', 'conversation_search',
+  'contact_search', 'contact_get', 'routing_list', 'routing_get', 'site_info',
+  'ms_bookings_cancel_appointment', 'ms_bookings_check_availability_range', 'ms_bookings_reschedule_appointment',
+  'outlook_calendar_cancel', 'outlook_calendar_get_available_range',
+]);
+
+async function messagingAdminRpc(toolName, args) {
+  if (!MESSAGING_API) throw new Error('VELARO_MESSAGING_API is not configured.');
+  const res = await fetch(`${MESSAGING_API}/mcp/v1/admin-tools/call`, {
+    method: 'POST',
+    headers: { Authorization: authHeader(), 'Content-Type': 'application/json' },
+    body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/call', params: { name: toolName, arguments: args ?? {} } }),
+    signal: AbortSignal.timeout(30000),
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok || data.error) {
+    throw new Error(`Velaro admin-tools ${toolName} -> ${res.status}: ${data.error?.message || JSON.stringify(data).slice(0, 300)}`);
+  }
+  const content = data.result?.content?.[0]?.text;
+  if (content === undefined) throw new Error('Empty response from admin-tools gateway');
+  return content;
+}
+
 // Call the hosted MCP gateway (JSON-RPC) for tools that are dispatched server-side.
 async function rpc(toolName, args) {
+  if (MESSAGING_ADMIN_TOOLS.has(toolName)) return messagingAdminRpc(toolName, args);
   const body = {
     jsonrpc: '2.0',
     id: 1,
     method: 'tools/call',
     params: { name: toolName, arguments: args ?? {} },
   };
-  const res = await fetch(`${API_BASE}/mcp`, {
-    method: 'POST',
-    headers: { Authorization: authHeader(), 'Content-Type': 'application/json' },
-    body: JSON.stringify(body),
-  });
+  const send = async () => {
+    const s = gatewaySession || await gatewayInit();
+    return fetch(`${API_BASE}/mcp`, {
+      method: 'POST',
+      headers: { Authorization: authHeader(), 'Content-Type': 'application/json', 'Mcp-Session-Id': s.sid, 'MCP-Protocol-Version': s.version },
+      body: JSON.stringify(body),
+    });
+  };
+  let res = await send();
+  if (res.status === 404) { gatewaySession = null; res = await send(); }
   if (!res.ok) {
     const text = await res.text().catch(() => '');
     throw new Error(`Velaro MCP gateway ${toolName} -> ${res.status}: ${text.slice(0, 300)}`);
@@ -8249,7 +8303,7 @@ async function handleTool(name, args) {
     }
 
     case 'billing_plan_status': {
-      const s = await api('GET', '/BillingPayment/plan-status');
+      const s = await api('GET', '/BillingPayment/plan-status', undefined, MESSAGING_API);
       const lines = [`Site ${s.siteId} — Subscription Status`];
       if (s.subscription) {
         lines.push(`Seats: ${s.subscription.maxLicensedSeats}  |  Conv/mo: ${s.subscription.maxConversationsPerMonth || '∞'}  |  Self-serve: ${s.subscription.enableSelfServeSeats ? 'YES' : 'no'}`);