@velaro/mcp-server 0.6.78 → 0.6.80

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.78",
+  "version": "0.6.80",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {

package/server.js

@@ -2506,7 +2506,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
   // ── Page Widgets ──────────────────────────────────────────────────────────
   {
     name: 'page_widget_list',
-    description: 'List all page widgets (Click-to-Call, Click-to-Text, Topic Chat, Product Inquiry, KB search) configured for this site. Returns id, widgetId, widgetType, isEnabled, and the snippet-ready URL.',
+    description: 'List all page widgets (Click-to-Call, Click-to-Text, Topic Chat, Product Inquiry, KB search, Job Search) configured for this site. Returns id, widgetId, widgetType, isEnabled, and the snippet-ready URL.',
     inputSchema: { type: 'object', properties: {}, required: [] },
   },
   {
@@ -4643,14 +4643,15 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
   },
   {
     name: 'recruiting_list_applications',
-    description: 'List candidate applications submitted via the Recruiting Bot for this site (name, email, phone, role interest, work authorization, availability, submitted timestamp).',
+    description: 'List candidate applications submitted via the Recruiting Bot for this site (name, email, phone, role interest, work authorization, availability, submitted timestamp). Never contains EEOC self-ID data.',
     inputSchema: { type: 'object', properties: {}, required: [] },
   },
   // Recruiting/Applications/ExportEeoc (voluntary self-ID CSV export) is intentionally NOT
-  // exposed as an MCP tool -- it returns sensitive EEOC/OFCCP self-identification PII in bulk,
-  // and the existing admin-UI export link + `velaro recruiting applications export-eeoc` CLI
-  // command are the appropriate surfaces for a human-initiated compliance export, not an
-  // AI-reachable tool.
+  // exposed as an MCP tool -- it returns sensitive EEOC/OFCCP self-identification PII in bulk.
+  // It is administrator-only and audit-logged server-side (403 for ordinary agents); the
+  // admin-UI export button (Administrators only) and `velaro recruiting applications
+  // export-eeoc` CLI command are the appropriate surfaces for a human-initiated compliance
+  // export, not an AI-reachable tool. EEOC data is never returned per application.
 
   // -- Multi-employer job board: named posting sources --
   // Requires EnableRecruitingBot + EnableJobBoardMultiEmployer. Same siteId-from-auth-context
@@ -7267,7 +7268,7 @@ async function handleTool(name, args) {
           const alerts = [];
           if (s.disconnectEvents > 0) alerts.push(`⚠ ${s.disconnectEvents} disconnect(s)`);
           if (s.tabHiddenEvents > 0)  alerts.push(`⚠ ${s.tabHiddenEvents} tab hidden`);
-          const recentDisconnects = (a.connectionEvents || []).filter(e => e.event?.toLowerCase().includes('disconnect')).slice(-3);
+          const recentDisconnects = (a.connectionEvents || []).filter(e => e.event?.toLowerCase().includes('disconnect')).slice(0, 3); // connectionEvents are newest-first
           return [
             `  ${a.agentName}${a.email ? ' <' + a.email + '>' : ''}`,
             `    Status time: ${statusParts.join(' | ') || 'no data'}`,