@velaro/mcp-server 0.6.90 → 0.6.92

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.90",
+  "version": "0.6.92",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {

package/server.js

@@ -822,6 +822,81 @@ const TOOLS = [
       },
     },
   },
+  {
+    name: 'canned_learning_suggestions',
+    description: 'List AI-proposed canned message improvements awaiting human review (learned from low ratings and never-used messages). Each row shows currentText, proposedText, the reason, the signals it learned from, and a review state (pending_review, approved, rejected, rolled_back). Intelligence Suite entitlement required.',
+    inputSchema: { type: 'object', properties: { state: { type: 'string', description: 'pending_review (default), approved, rejected, rolled_back, or all' } } },
+  },
+  {
+    name: 'canned_learning_generate',
+    description: 'Analyze this site canned message usage and ratings and queue AI-proposed improvements for human review. Nothing changes until approved. Capped at 5 messages per run and one run per day; text is PII-redacted before it reaches the model.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+  {
+    name: 'canned_learning_approve',
+    description: 'Approve a suggestion: replaces the live canned message with the proposed text (or editedText if given). The original is snapshotted so canned_learning_rollback can restore it.',
+    inputSchema: { type: 'object', properties: { suggestionId: { type: 'number' }, editedText: { type: 'string', description: 'Optional human-edited replacement' } }, required: ['suggestionId'] },
+  },
+  {
+    name: 'canned_learning_reject',
+    description: 'Reject a pending canned message suggestion. The live message is untouched.',
+    inputSchema: { type: 'object', properties: { suggestionId: { type: 'number' } }, required: ['suggestionId'] },
+  },
+  {
+    name: 'canned_learning_edit_summary',
+    description: 'Which canned messages agents edit most before sending (last 90 days): canned response id, shortcut, edit count and average similarity of the sent text to the original. This is the edited-before-send evidence the weekly canned message learning job uses. Intelligence Suite entitlement required.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+  {
+    name: 'canned_learning_record_edit',
+    description: 'Record that an agent edited a canned response before sending. The sent text is PII-redacted and length-capped server-side; the site comes from the session. Rows are capped per site and expire after 90 days.',
+    inputSchema: { type: 'object', properties: { cannedResponseId: { type: 'number' }, finalText: { type: 'string', description: 'The text the agent actually sent' } }, required: ['cannedResponseId', 'finalText'] },
+  },
+  {
+    name: 'canned_learning_rollback',
+    description: 'Roll back an approved suggestion, restoring the original canned message text.',
+    inputSchema: { type: 'object', properties: { suggestionId: { type: 'number' }, notes: { type: 'string' } }, required: ['suggestionId'] },
+  },
+  {
+    name: 'chat_topics_get',
+    description: 'Chat Intelligence topics for this site: the active topic list (hint for the AI, not a rulebook), industry templates, groups, merge/rename mapping and limits. Intelligence Suite entitlement required.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+  {
+    name: 'chat_topics_set',
+    description: 'Replace the active topic list (max 60 topics, 60 chars each, duplicates removed). Used for new classifications only; existing history is untouched. Optionally load a template first with industry.',
+    inputSchema: { type: 'object', properties: { topics: { type: 'array', items: { type: 'string' } }, industry: { type: 'string', description: 'Load a template instead: insurance, healthcare, retail, ecommerce, financial, saas, government, manufacturing' } } },
+  },
+  {
+    name: 'chat_topics_edit',
+    description: 'Merge, rename, retire or group topics. Applied when reports are read, so history follows the new names with zero AI cost. op = merge|rename|retire|group; from = topic names; to = target (merge/rename); group = group name (empty clears).',
+    inputSchema: { type: 'object', properties: { op: { type: 'string' }, from: { type: 'array', items: { type: 'string' } }, to: { type: 'string' }, group: { type: 'string' } }, required: ['op', 'from'] },
+  },
+  {
+    name: 'chat_topics_group_suggestions',
+    description: 'Suggested groups for the current topics, computed from topic names and counts with no AI call.',
+    inputSchema: { type: 'object', properties: { days: { type: 'number' } } },
+  },
+  {
+    name: 'chat_topics_suggestions',
+    description: 'Suggested topics: the short topic the AI proposed for chats that fit nothing on the list, with counts and example conversation ids.',
+    inputSchema: { type: 'object', properties: { days: { type: 'number' } } },
+  },
+  {
+    name: 'chat_topics_resolve_suggestion',
+    description: 'Accept (adds to the list), merge or rename into an existing topic (target), or dismiss a suggested topic. History follows with no AI cost.',
+    inputSchema: { type: 'object', properties: { suggestion: { type: 'string' }, action: { type: 'string', description: 'accept|merge|rename|dismiss' }, target: { type: 'string' } }, required: ['suggestion', 'action'] },
+  },
+  {
+    name: 'chat_topics_reclassify',
+    description: 'Optional: re-run the classifier on older chats. Call with confirm omitted/false to get the cost estimate (scope other = only unlisted chats, all = everything; hard cap 500). Resend with confirm=true to queue it. Never needed for merge/rename/group.',
+    inputSchema: { type: 'object', properties: { scope: { type: 'string' }, days: { type: 'number' }, max: { type: 'number' }, confirm: { type: 'boolean' } } },
+  },
+  {
+    name: 'chat_topics_analysis',
+    description: 'Optional one-call analysis (cheap model, aggregate counts only, PII redacted, cached, one run per day per site) that proposes merges/renames/groups. confirm omitted/false returns the estimate and any cached result; confirm=true runs it. Then call with proposalId + accept to apply or reject one proposal.',
+    inputSchema: { type: 'object', properties: { confirm: { type: 'boolean' }, proposalId: { type: 'string' }, accept: { type: 'boolean' } } },
+  },
   {
     name: 'chat_intelligence_recommendations',
     description: 'List the active (non-dismissed) AI-generated improvement recommendations for this site — widget availability, bot gaps, missed-chat patterns, content-gap drafts. Each row includes id, type, priority, title, body, supportingDataBlob, plus lifecycle fields (appliedAt, appliedArtifactRef, rolledBackAt).',
@@ -2976,6 +3051,26 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
       },
     },
   },
+  {
+    name: 'enterprise_reports',
+    description: 'Enterprise Reports package (enterprise-internal, default OFF; every report returns 403 when the site does not hold that package item). report: program_breakdown (compare websites, teams, platforms, devices or entry pages: volume, missed, transfers, wait, first reply, QA score and coverage, sentiment), agent_scorecard (per agent by name: resolution, transfers, handle time, AI score, supervisor-reviewed score, sentiment impact), qa_coverage (share of resolved chats AI-scored and supervisor-reviewed by week and program), coaching_queue (low-scoring chats nobody reviewed, per agent), sentiment_breakdown (by website, team, agent or topic with change vs prior period), topic_radar (topics by volume, growth, transfer rate), weekly_brief (preview of the Monday brief sections), weekly_brief_send_test (emails this week\'s brief to the signed-in user). Scoped to the caller site.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        report:       { type: 'string', enum: ['program_breakdown', 'agent_scorecard', 'qa_coverage', 'coaching_queue', 'sentiment_breakdown', 'topic_radar', 'weekly_brief', 'weekly_brief_send_test'] },
+        from:         { type: 'string', description: 'yyyy-MM-dd start (default: 30 days ago).' },
+        to:           { type: 'string', description: 'yyyy-MM-dd end, inclusive (default: today).' },
+        groupBy:      { type: 'string', description: 'program_breakdown: website|team|platform|device|entrypage. sentiment_breakdown: website|team|agent|theme.' },
+        deploymentId: { type: 'number', description: 'Optional website (deployment) ID.' },
+        teamId:       { type: 'number', description: 'Optional team ID.' },
+        threshold:    { type: 'number', description: 'coaching_queue: queue chats scored below this (1-100; default = the rubric low-score threshold or 60).' },
+        perAgent:     { type: 'number', description: 'coaching_queue: chats listed per agent (default 5).' },
+        limit:        { type: 'number', description: 'topic_radar: max topics (default 25).' },
+        days:         { type: 'number', description: 'weekly_brief: days to cover (default 7).' },
+      },
+      required: ['report'],
+    },
+  },
   {
     name: 'report_backfill',
     description: 'Backfill report data for the caller site. Preview by default (reports "would fill N", writes nothing); apply=true writes. Idempotent. type "csat" fills missing survey ratings (SurveySubmission.Rating) from existing data; it does NOT touch ticket CSAT. Site managers only; scoped to the caller site.',
@@ -3156,6 +3251,10 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         voiceId:      { type: 'string',  description: 'ElevenLabs voice ID override. Omit to use the site default.' },
         showCallMeOption: { type: 'boolean', description: 'Show the "Call me instead" option (requires EnableClickToCall).' },
         callbackConfirmWindowMinutes: { type: 'number', description: 'Minutes to confirm a callback request before it expires. Default 10.' },
+        displayName: { type: 'string', description: 'Visitor-facing avatar name shown on the badge (e.g. "Moshky"). Empty string resets to "AI".' },
+        showBadge: { type: 'boolean', description: 'Show the name badge over the avatar video. Default true.' },
+        sizePx: { type: 'number', description: 'Max avatar panel width in px (160-640, square). Default 360.' },
+        allowVisitorCollapse: { type: 'boolean', description: 'Let visitors hide or collapse the avatar panel (up/down arrow and X). Default true.' },
         maxAvatarMinutesPerMonth: { type: 'number', description: 'Monthly avatar video minutes cap for the site. Whole number 1-100000; never unlimited (0/negative rejected).' },
         maxAvatarTtsChars: { type: 'number', description: 'Monthly avatar TTS character cap (avatar_tts_chars) for the site. Whole number 1-100000000; never unlimited (0/negative rejected). Overage pricing is a platform-wide ladder, not per site.' },
       },
@@ -3371,7 +3470,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
   },
   {
     name: 'email_inbox_get_status',
-    description: 'Check global Gmail OAuth/Domain-Wide-Delegation/Pub-Sub configuration presence (gmail only — these are global App Settings, not per-site). For per-mailbox connection state (either provider) use email_inbox_list_mailboxes instead. Velaro staff only.',
+    description: 'Check global Gmail OAuth/Domain-Wide-Delegation/Pub-Sub configuration presence AND prove the OAuth client id/secret are a matching pair (credentialPair) plus duplicate App Setting spellings (Gmail:X vs Gmail__X) (gmail only — these are global App Settings, not per-site). For per-mailbox connection state (either provider) use email_inbox_list_mailboxes instead. Velaro staff only.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -3380,6 +3479,33 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
       required: ['siteId'],
     },
   },
+  {
+    name: 'email_inbox_resubscribe_outlook',
+    description: 'Recreate the Microsoft Graph inbound-mail subscription for a connected Outlook mailbox. A mailbox with graphSubscriptionId null (see email_inbox_list_mailboxes) shows "connected" but never receives email - this repairs it immediately. Velaro staff only.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        siteId:    { type: 'number', description: 'Site ID' },
+        mailboxId: { type: 'number', description: 'Outlook mailbox integration ID from email_inbox_list_mailboxes' },
+      },
+      required: ['siteId', 'mailboxId'],
+    },
+  },
+  {
+    name: 'site_integration_logs',
+    description: "Read ANY site's integration Activity Log (same rows as the admin Activity Log tab), optionally filtered by integration slug (e.g. OutlookInbox, GmailInbox, NetSuite), severity and message search. Use this first when diagnosing a customer/test-site integration. Velaro staff only.",
+    inputSchema: {
+      type: 'object',
+      properties: {
+        siteId:   { type: 'number', description: 'Site ID' },
+        slug:     { type: 'string', description: 'Integration slug, e.g. OutlookInbox' },
+        severity: { type: 'string', enum: ['Info', 'Warning', 'Error'], description: 'Optional severity filter' },
+        search:   { type: 'string', description: 'Optional substring match on message / additional info' },
+        take:     { type: 'number', description: 'Max rows (default 50, max 200)' },
+      },
+      required: ['siteId'],
+    },
+  },
   {
     name: 'email_inbox_set_team',
     description: 'Reassign the team a connected Gmail/Outlook mailbox routes inbound mail to, or clear it back to the site default/catch-all (teamId: 0). Velaro staff only.',
@@ -4396,6 +4522,11 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     description: 'List all registered EntitlementFeature keys with their display names and categories. Useful for finding the right featureKey before setting overrides. Superadmin only.',
     inputSchema: { type: 'object', properties: {} },
   },
+  {
+    name: 'entitlement_enterprise_reports_package',
+    description: 'Show the Enterprise Reports package (enterprise-internal, default OFF): every item with its feature key, what it builds on, and, when siteId is given, whether it is ON for that site. Superadmin only.',
+    inputSchema: { type: 'object', properties: { siteId: { type: 'number', description: 'Optional site ID to show which items are on' } } },
+  },
   {
     name: 'entitlement_set_override',
     description: 'Set a per-site feature override — enable or disable a specific feature for one site, independent of their plan. Superadmin only. Use entitlement_list_features to find valid featureKey values.',
@@ -4849,6 +4980,52 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     description: 'List candidate applications submitted via the Recruiting Bot for this site (name, email, phone, role interest, work authorization, availability, submitted timestamp). Never contains EEOC self-ID data.',
     inputSchema: { type: 'object', properties: {}, required: [] },
   },
+  {
+    name: 'recruiting_ats_failures',
+    description: 'List candidate applications whose ATS write-back is Pending, Failed or Abandoned (status, attempts, last error, next retry). Requires EnableRecruitingBot.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'recruiting_ats_retry',
+    description: 'Retry the ATS write-back for one candidate application right now (resets the attempt counter). Returns the new sync status.',
+    inputSchema: { type: 'object', properties: { applicationId: { type: 'number' } }, required: ['applicationId'] },
+  },
+  {
+    name: 'recruiting_apply_settings',
+    description: 'Set public apply form options for this site (apply-if-present): publicApplyEnabled toggles the public apply endpoint; autoCreateCaseTypeId picks the case type auto-created per application (0 clears).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        publicApplyEnabled: { type: 'boolean' },
+        autoCreateCaseTypeId: { type: 'number', description: 'Case type id; 0 clears the auto-create link' },
+      },
+      required: [],
+    },
+  },
+  {
+    name: 'recruiting_bot_settings',
+    description: 'Get or set the recruiting bot customer controls (apply-if-present; no fields = read): pageContextEnabled (use the job from the host page Velaro context call), revealPostedDate, revealDescription, revealApplyLink, publicApplyEnabled, applyMode (both|link|inproduct), maxResults (1-10), greeting (max 500), tone (friendly|professional|concise).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        pageContextEnabled: { type: 'boolean' },
+        revealPostedDate: { type: 'boolean' },
+        revealDescription: { type: 'boolean' },
+        revealApplyLink: { type: 'boolean' },
+        publicApplyEnabled: { type: 'boolean' },
+        applyMode: { type: 'string', enum: ['both', 'link', 'inproduct'] },
+        maxResults: { type: 'number' },
+        greeting: { type: 'string' },
+        tone: { type: 'string', enum: ['friendly', 'professional', 'concise'] },
+      },
+      required: [],
+    },
+  },
+  {
+    name: 'recruiting_download_resume',
+    description: 'Download a candidate application resume. Returns { fileName, contentType, sizeBytes, base64 }. Files over 5 MB are refused; use the CLI (velaro recruiting applications resume) for those.',
+    inputSchema: { type: 'object', properties: { applicationId: { type: 'number' } }, required: ['applicationId'] },
+  },
   // Recruiting/Applications/ExportEeoc (voluntary self-ID CSV export) is intentionally NOT
   // exposed as an MCP tool -- it returns sensitive EEOC/OFCCP self-identification PII in bulk.
   // It is administrator-only and audit-logged server-side (403 for ordinary agents); the
@@ -5725,6 +5902,42 @@ async function handleTool(name, args) {
       if (args.teamId != null) qs.set('teamId', String(args.teamId));
       return await messagingGet(`/Reports/chat-intelligence/themes?${qs.toString()}`);
     }
+    case 'chat_topics_get':
+      return await messagingGet('/ChatIntelligenceTopics');
+    case 'chat_topics_set':
+      return args.industry
+        ? await messagingPost('/ChatIntelligenceTopics/template', { industry: args.industry })
+        : await messagingPut('/ChatIntelligenceTopics', { topics: args.topics ?? [] });
+    case 'chat_topics_edit':
+      return await messagingPost('/ChatIntelligenceTopics/mapping', { ops: [{ op: args.op, from: args.from ?? [], to: args.to ?? null, group: args.group ?? null }] });
+    case 'chat_topics_group_suggestions':
+      return await messagingGet(`/ChatIntelligenceTopics/group-suggestions?days=${args.days ?? 90}`);
+    case 'chat_topics_suggestions':
+      return await messagingGet(`/ChatIntelligenceTopics/suggestions?days=${args.days ?? 90}`);
+    case 'chat_topics_resolve_suggestion':
+      return await messagingPost('/ChatIntelligenceTopics/suggestions/resolve', { suggestion: args.suggestion, action: args.action, target: args.target ?? null });
+    case 'chat_topics_reclassify':
+      return args.confirm
+        ? await messagingPost('/ChatIntelligenceTopics/reclassify', { scope: args.scope ?? 'other', days: args.days ?? 90, max: args.max ?? null, confirm: true })
+        : await messagingGet(`/ChatIntelligenceTopics/reclassify/estimate?scope=${args.scope ?? 'other'}&days=${args.days ?? 90}${args.max ? `&max=${args.max}` : ''}`);
+    case 'chat_topics_analysis':
+      if (args.proposalId) return await messagingPost('/ChatIntelligenceTopics/analysis/proposals', { id: args.proposalId, accept: args.accept !== false });
+      if (args.confirm) return await messagingPost('/ChatIntelligenceTopics/analysis', { confirm: true });
+      return { estimate: await messagingGet('/ChatIntelligenceTopics/analysis/estimate'), cached: await messagingGet('/ChatIntelligenceTopics/analysis') };
+    case 'canned_learning_suggestions':
+      return await messagingGet(`/CannedLearning/suggestions?state=${encodeURIComponent(args.state ?? 'pending_review')}`);
+    case 'canned_learning_generate':
+      return await messagingPost('/CannedLearning/generate', {});
+    case 'canned_learning_approve':
+      return await messagingPost(`/CannedLearning/suggestions/${args.suggestionId}/approve`, { editedText: args.editedText ?? null });
+    case 'canned_learning_reject':
+      return await messagingPost(`/CannedLearning/suggestions/${args.suggestionId}/reject`, {});
+    case 'canned_learning_edit_summary':
+      return await messagingGet('/CannedLearning/edit-events');
+    case 'canned_learning_record_edit':
+      return await messagingPost('/CannedLearning/edit-events', { cannedResponseId: args.cannedResponseId, finalText: args.finalText });
+    case 'canned_learning_rollback':
+      return await messagingPost(`/CannedLearning/suggestions/${args.suggestionId}/rollback`, { notes: args.notes ?? null });
     case 'chat_intelligence_recommendations':
       return await messagingGet(`/Reports/chat-intelligence/recommendations`);
     case 'chat_intelligence_draft_article':
@@ -5973,7 +6186,7 @@ async function handleTool(name, args) {
       return await rpc('ai_config_set_reply_format', args);
 
     case 'site_identity_secret_status': {
-      const settings = await api('GET', '/SiteSettings');
+      const settings = await api('GET', '/api/SiteSettings');
       const configured = settings?.identitySigningSecretConfigured ?? false;
       const masked = settings?.identitySigningSecretMasked ?? null;
       if (!configured) {
@@ -6013,7 +6226,7 @@ async function handleTool(name, args) {
     }
 
     case 'index_list': {
-      const indexes = await messagingApi('/AzureIndexes/GetIndexList');
+      const indexes = await messagingApi('/AzureIndexes/List');
       if (!Array.isArray(indexes) || !indexes.length) {
         return 'No knowledge collections found for this site.';
       }
@@ -6345,7 +6558,8 @@ async function handleTool(name, args) {
     }
 
     case 'routing_delete': {
-      await messagingRequest('DELETE', `/rules/${args.id}`);
+      // RulesController.DeleteAsync takes the rule in the BODY (DELETE /Rules {id}); DELETE /rules/{id} never existed.
+      await messagingRequest('DELETE', '/Rules', { id: args.id });
       return `Deleted routing rule id=${args.id}`;
     }
 
@@ -6884,7 +7098,7 @@ async function handleTool(name, args) {
 
       // ── Layer 7: Admin Activity Log — recent channel/auth/integration events
       // Useful for detecting send failures, auth events, channel errors not in integration logs.
-      const activityLogP = safeJson(() => api('GET', '/AdminActivityLog?pageSize=10'));
+      const activityLogP = safeJson(() => messagingRequest('GET', '/AdminActivityLog?pageSize=10'));
 
       const [health, ci, aiEx, velaroLogs, loggly, intLogPage, skillErr, activityLog] = await Promise.all([healthP, ciP, aiExP, velaroLoggerP, logglyP, intLogP, skillErrP, activityLogP]);
 
@@ -7009,7 +7223,7 @@ async function handleTool(name, args) {
       const q = args.query ?? '';
       const top = args.top ?? 5;
       if (!q) return 'query is required.';
-      const results = await api('GET', `/AzureIndexes/content-search?q=${encodeURIComponent(q)}&top=${top}`);
+      const results = await messagingRequest('GET', `/AzureIndexes/content-search?q=${encodeURIComponent(q)}&top=${top}`);
       if (results?.error) return `Index search error: ${results.error}`;
       if (!Array.isArray(results) || !results.length) return `No results for "${q}". Index may be empty — trigger ingestion first.`;
       const lines = [
@@ -7072,7 +7286,7 @@ async function handleTool(name, args) {
       return JSON.stringify(r, null, 2);
     }
     case 'index_status': {
-      const sources = await api('GET', '/AzureIndexes/IntegrationSources');
+      const sources = await messagingRequest('GET', '/AzureIndexes/IntegrationSources');
       if (!Array.isArray(sources) || !sources.length) return 'No indexed sources found. Run index_ingest to populate.';
       const lines = [
         '=== Index Status ===',
@@ -7085,7 +7299,7 @@ async function handleTool(name, args) {
       if (!args.jobId) return 'jobId is required.';
       const body = { jobId: args.jobId };
       if (args.indexName) body.indexName = args.indexName;
-      const result = await api('POST', '/AzureIndexes/IngestJobDirect', body);
+      const result = await messagingRequest('POST', '/AzureIndexes/IngestJobDirect', body);
       if (result?.error) return `Ingestion error: ${result.error}`;
       return `Ingestion started for job ${args.jobId}.\n  Physical index: ${result?.physicalIndex ?? 'unknown'}\n\nEmbedding runs in the background (~1-2 min). Use index_status to verify chunks appear.`;
     }
@@ -7110,7 +7324,7 @@ async function handleTool(name, args) {
     }
 
     case 'uploaded_files_list': {
-      const files = await api('GET', '/uploadedFiles/list/AI');
+      const files = await messagingRequest('GET', '/uploadedFiles/list/AI');
       if (!Array.isArray(files) || !files.length) return 'No AI training files uploaded for this site.';
       const lines = ['=== Uploaded AI Training Files ===',
         ...files.map(f => `  [id=${f.id}] ${f.fileName}  size=${f.fileLength ? Math.round(f.fileLength/1024)+'KB' : '?'}`)];
@@ -7123,7 +7337,7 @@ async function handleTool(name, args) {
       if (args.fileId) body.id = args.fileId;
       if (args.fileName) body.fileName = args.fileName;
       if (args.indexName) body.indexName = args.indexName;
-      const result = await api('POST', '/uploadedFiles/reindex', body);
+      const result = await messagingRequest('POST', '/uploadedFiles/reindex', body);
       if (result?.error) return `Reindex error: ${result.error}`;
       return `✅ Re-indexed '${result.fileName}': ${result.chunksIndexed} chunks indexed.\n\nUse index_status to verify the chunks appear in the knowledge index.`;
     }
@@ -8266,6 +8480,23 @@ async function handleTool(name, args) {
       return `Subscribed to ${args.reportType} (${args.frequency ?? 'weekly'}, ${args.deliveryHour ?? 7}:00 site time).`;
     }
 
+    case 'enterprise_reports': {
+      const ER_PATHS = {
+        program_breakdown: 'program-breakdown', agent_scorecard: 'agent-scorecard', qa_coverage: 'qa-coverage',
+        coaching_queue: 'coaching-queue', sentiment_breakdown: 'sentiment-breakdown', topic_radar: 'topic-radar',
+        weekly_brief: 'weekly-brief', weekly_brief_send_test: 'weekly-brief/send-test',
+      };
+      const seg = ER_PATHS[args.report];
+      if (!seg) throw new Error('report must be one of: ' + Object.keys(ER_PATHS).join(', '));
+      if (args.report === 'weekly_brief_send_test') return JSON.stringify(await messagingPost('/api/enterprise-reports/' + seg, {}), null, 2);
+      const qs = new URLSearchParams();
+      for (const k of ['from', 'to', 'groupBy', 'deploymentId', 'teamId', 'threshold', 'perAgent', 'limit', 'days']) {
+        if (args[k] != null && args[k] !== '') qs.set(k, String(args[k]));
+      }
+      const q = qs.toString();
+      return JSON.stringify(await messagingGet('/api/enterprise-reports/' + seg + (q ? '?' + q : '')), null, 2);
+    }
+
     case 'experience_impact_report': {
       const qs = new URLSearchParams();
       for (const k of ['from', 'to', 'teamId']) if (args[k] != null && args[k] !== '') qs.set(k, String(args[k]));
@@ -8394,6 +8625,9 @@ async function handleTool(name, args) {
         `  Enabled:         ${data.enabled}`,
         `  "Call me":       ${data.showCallMeOption}`,
         `  Callback window: ${data.callbackConfirmWindowMinutes} min`,
+        `  Display name:    ${data.displayName || '(AI)'}`,
+        `  Badge shown:     ${data.showBadge}`,
+        `  Size:            ${data.sizePx}px`,
       ].join('\n');
     }
 
@@ -8405,6 +8639,10 @@ async function handleTool(name, args) {
       if (args.enabled !== undefined) body.enabled = args.enabled;
       if (args.showCallMeOption !== undefined) body.showCallMeOption = args.showCallMeOption;
       if (args.callbackConfirmWindowMinutes !== undefined) body.callbackConfirmWindowMinutes = args.callbackConfirmWindowMinutes;
+      if (args.displayName !== undefined) body.displayName = args.displayName;
+      if (args.showBadge !== undefined) body.showBadge = args.showBadge;
+      if (args.sizePx !== undefined) body.sizePx = args.sizePx;
+      if (args.allowVisitorCollapse !== undefined) body.allowVisitorCollapse = args.allowVisitorCollapse;
       for (const [arg, max] of [['maxAvatarMinutesPerMonth', 100000], ['maxAvatarTtsChars', 100000000]]) {
         if (args[arg] === undefined) continue;
         if (!Number.isInteger(args[arg]) || args[arg] < 1 || args[arg] > max) throw new Error(`${arg} must be a whole number between 1 and ${max} (never unlimited).`);
@@ -8524,6 +8762,23 @@ async function handleTool(name, args) {
       return JSON.stringify(data, null, 2);
     }
 
+    case 'email_inbox_resubscribe_outlook': {
+      if (!args.siteId || !args.mailboxId) return 'siteId and mailboxId are required.';
+      const data = await messagingPost(`/SupportTools/sites/${args.siteId}/email-inbox/outlook/${args.mailboxId}/resubscribe`, {});
+      return JSON.stringify(data, null, 2);
+    }
+
+    case 'site_integration_logs': {
+      if (!args.siteId) return 'siteId is required.';
+      const q = new URLSearchParams();
+      if (args.slug) q.set('slug', args.slug);
+      if (args.severity) q.set('severity', args.severity);
+      if (args.search) q.set('search', args.search);
+      if (args.take) q.set('take', String(args.take));
+      const data = await messagingGet(`/SupportTools/sites/${args.siteId}/integration-logs?${q.toString()}`);
+      return JSON.stringify(data, null, 2);
+    }
+
     case 'email_inbox_set_team': {
       if (!args.siteId || !args.provider || !args.mailboxId || args.teamId == null) return 'siteId, provider, mailboxId, and teamId are required.';
       const data = await messagingPatch(`/SupportTools/sites/${args.siteId}/email-inbox/${args.provider}/${args.mailboxId}/team`, { teamId: args.teamId });
@@ -8989,7 +9244,7 @@ async function handleTool(name, args) {
 
     case 'magento_diagnose': {
       if (!args.siteId) return 'siteId is required.';
-      const r = await api('GET', `/diagnostics/test-magento?siteId=${encodeURIComponent(args.siteId)}`);
+      const r = await messagingRequest('GET', `/diagnostics/test-magento?siteId=${encodeURIComponent(args.siteId)}`);
       return JSON.stringify(r, null, 2);
     }
 
@@ -8997,18 +9252,18 @@ async function handleTool(name, args) {
     case 'sap_diagnose': {
       if (!args.siteId) return 'siteId is required.';
       const deep = args.deep === false ? 'false' : 'true';
-      const r = await api('GET', `/diagnostics/test-sap?siteId=${encodeURIComponent(args.siteId)}&deep=${deep}`);
+      const r = await messagingRequest('GET', `/diagnostics/test-sap?siteId=${encodeURIComponent(args.siteId)}&deep=${deep}`);
       return JSON.stringify(r, null, 2);
     }
 
     case 'business_action_list': {
-      const r = await api('GET', '/BusinessActions');
+      const r = await messagingRequest('GET', '/BusinessActions');
       return JSON.stringify(r, null, 2);
     }
 
     case 'business_action_route': {
       if (!args.text) return 'text is required.';
-      const r = await api('POST', '/BusinessActions/Route', { text: args.text, max: args.max });
+      const r = await messagingRequest('POST', '/BusinessActions/Route', { text: args.text, max: args.max });
       return JSON.stringify(r, null, 2);
     }
 
@@ -9018,7 +9273,7 @@ async function handleTool(name, args) {
       const qs = [];
       if (args.idempotencyKey) qs.push(`idempotencyKey=${encodeURIComponent(args.idempotencyKey)}`);
       if (args.conversationId) qs.push(`conversationId=${encodeURIComponent(args.conversationId)}`);
-      const r = await api('POST', `/BusinessActions/${encodeURIComponent(args.name)}/Execute${qs.length ? '?' + qs.join('&') : ''}`, args.request);
+      const r = await messagingRequest('POST', `/BusinessActions/${encodeURIComponent(args.name)}/Execute${qs.length ? '?' + qs.join('&') : ''}`, args.request);
       return JSON.stringify(r, null, 2);
     }
 
@@ -9561,7 +9816,7 @@ async function handleTool(name, args) {
     }
 
     case 'billing_plan_status': {
-      const s = await api('GET', '/BillingPayment/plan-status', undefined, MESSAGING_API);
+      const s = await api('GET', '/api/BillingPayment/plan-status');
       const lines = [`Site ${s.siteId} — Subscription Status`];
       if (s.subscription) {
         lines.push(`Seats: ${s.subscription.maxLicensedSeats}  |  Conv/mo: ${s.subscription.maxConversationsPerMonth || '∞'}  |  Self-serve: ${s.subscription.enableSelfServeSeats ? 'YES' : 'no'}`);
@@ -9678,6 +9933,18 @@ async function handleTool(name, args) {
       return lines.join('\n');
     }
 
+    case 'entitlement_enterprise_reports_package': {
+      const q = args && args.siteId ? `?siteId=${encodeURIComponent(args.siteId)}` : '';
+      const pkg = await api('GET', `/Entitlements/packages/enterprise-reports${q}`);
+      const lines = [`${pkg.displayName} (${pkg.packageKey}) - plan ${pkg.plan}, default OFF${pkg.siteId ? `, site ${pkg.siteId}` : ''}`, ''];
+      for (const it of pkg.items) {
+        lines.push(`${pkg.siteId ? (it.enabled ? '[ON ] ' : '[off] ') : ''}${it.ask}. ${it.title}`);
+        lines.push(`     key: ${it.featureKey}; builds on: ${it.buildsOn.join(', ')}`);
+        lines.push(`     ${it.summary}`);
+      }
+      return lines.join(String.fromCharCode(10));
+    }
+
     case 'entitlement_list_features': {
       const features = await api('GET', '/Entitlements/features');
       const byCategory = {};
@@ -10045,6 +10312,61 @@ async function handleTool(name, args) {
       return JSON.stringify(listing, null, 2);
     }
 
+    case 'recruiting_ats_failures': {
+      const rows = await messagingGet('/Recruiting/Applications/AtsFailures');
+      return JSON.stringify(rows, null, 2);
+    }
+    case 'recruiting_ats_retry': {
+      const id = Number(args.applicationId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');
+      const r = await messagingPost(`/Recruiting/Applications/${id}/AtsRetry`, {});
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_apply_settings': {
+      const body = {};
+      if (args.publicApplyEnabled !== undefined) body.publicApplyEnabled = Boolean(args.publicApplyEnabled);
+      if (args.autoCreateCaseTypeId !== undefined) {
+        const n = Number(args.autoCreateCaseTypeId);
+        if (!Number.isInteger(n) || n < 0) throw new Error('autoCreateCaseTypeId must be an integer >= 0 (0 clears).');
+        body.autoCreateCaseTypeId = n;
+      }
+      if (!Object.keys(body).length) throw new Error('Specify publicApplyEnabled and/or autoCreateCaseTypeId.');
+      const r = await messagingPut('/Recruiting/ApplySettings', body);
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_bot_settings': {
+      const fields = ['pageContextEnabled', 'revealPostedDate', 'revealDescription', 'revealApplyLink', 'publicApplyEnabled', 'applyMode', 'maxResults', 'greeting', 'tone'];
+      const body = {};
+      for (const f of fields) if (args[f] !== undefined) body[f] = args[f];
+      if (body.applyMode !== undefined && !['both', 'link', 'inproduct'].includes(String(body.applyMode).toLowerCase())) throw new Error('applyMode must be both, link or inproduct.');
+      if (body.tone !== undefined && !['friendly', 'professional', 'concise'].includes(String(body.tone).toLowerCase())) throw new Error('tone must be friendly, professional or concise.');
+      if (body.maxResults !== undefined && !(Number.isInteger(Number(body.maxResults)) && Number(body.maxResults) >= 1 && Number(body.maxResults) <= 10)) throw new Error('maxResults must be an integer from 1 to 10.');
+      const r = Object.keys(body).length ? await messagingPut('/Recruiting/BotSettings', body) : await messagingGet('/Recruiting/BotSettings');
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_download_resume': {
+      const id = Number(args.applicationId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');
+      if (!MESSAGING_API) throw new Error('VELARO_MESSAGING_API is not configured.');
+      const res = await fetch(`${MESSAGING_API}/Recruiting/Applications/${id}/Resume`, {
+        headers: { Authorization: authHeader() },
+        signal: AbortSignal.timeout(30000),
+      });
+      if (!res.ok) {
+        const text = await res.text().catch(() => '');
+        throw new Error(`/Recruiting/Applications/${id}/Resume -> ${res.status}: ${text.slice(0, 300)}`);
+      }
+      const buf = Buffer.from(await res.arrayBuffer());
+      if (buf.length > 5 * 1024 * 1024) throw new Error(`Resume is ${buf.length} bytes (over the 5 MB MCP limit); use the CLI: velaro recruiting applications resume ${id}`);
+      const cd = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(res.headers.get('content-disposition') || '');
+      return JSON.stringify({
+        fileName: cd ? decodeURIComponent(cd[1]) : `resume-${id}`,
+        contentType: res.headers.get('content-type') || 'application/octet-stream',
+        sizeBytes: buf.length,
+        base64: buf.toString('base64'),
+      }, null, 2);
+    }
+
     case 'jobboard_move_application_stage': {
       const app = await messagingPut(`/Recruiting/Applications/${args.applicationId}/Stage`, { stage: args.stage });
       return JSON.stringify(app, null, 2);