@velaro/mcp-server 0.6.91 → 0.6.92

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.91",
+  "version": "0.6.92",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {

package/server.js

@@ -857,6 +857,46 @@ const TOOLS = [
     description: 'Roll back an approved suggestion, restoring the original canned message text.',
     inputSchema: { type: 'object', properties: { suggestionId: { type: 'number' }, notes: { type: 'string' } }, required: ['suggestionId'] },
   },
+  {
+    name: 'chat_topics_get',
+    description: 'Chat Intelligence topics for this site: the active topic list (hint for the AI, not a rulebook), industry templates, groups, merge/rename mapping and limits. Intelligence Suite entitlement required.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+  {
+    name: 'chat_topics_set',
+    description: 'Replace the active topic list (max 60 topics, 60 chars each, duplicates removed). Used for new classifications only; existing history is untouched. Optionally load a template first with industry.',
+    inputSchema: { type: 'object', properties: { topics: { type: 'array', items: { type: 'string' } }, industry: { type: 'string', description: 'Load a template instead: insurance, healthcare, retail, ecommerce, financial, saas, government, manufacturing' } } },
+  },
+  {
+    name: 'chat_topics_edit',
+    description: 'Merge, rename, retire or group topics. Applied when reports are read, so history follows the new names with zero AI cost. op = merge|rename|retire|group; from = topic names; to = target (merge/rename); group = group name (empty clears).',
+    inputSchema: { type: 'object', properties: { op: { type: 'string' }, from: { type: 'array', items: { type: 'string' } }, to: { type: 'string' }, group: { type: 'string' } }, required: ['op', 'from'] },
+  },
+  {
+    name: 'chat_topics_group_suggestions',
+    description: 'Suggested groups for the current topics, computed from topic names and counts with no AI call.',
+    inputSchema: { type: 'object', properties: { days: { type: 'number' } } },
+  },
+  {
+    name: 'chat_topics_suggestions',
+    description: 'Suggested topics: the short topic the AI proposed for chats that fit nothing on the list, with counts and example conversation ids.',
+    inputSchema: { type: 'object', properties: { days: { type: 'number' } } },
+  },
+  {
+    name: 'chat_topics_resolve_suggestion',
+    description: 'Accept (adds to the list), merge or rename into an existing topic (target), or dismiss a suggested topic. History follows with no AI cost.',
+    inputSchema: { type: 'object', properties: { suggestion: { type: 'string' }, action: { type: 'string', description: 'accept|merge|rename|dismiss' }, target: { type: 'string' } }, required: ['suggestion', 'action'] },
+  },
+  {
+    name: 'chat_topics_reclassify',
+    description: 'Optional: re-run the classifier on older chats. Call with confirm omitted/false to get the cost estimate (scope other = only unlisted chats, all = everything; hard cap 500). Resend with confirm=true to queue it. Never needed for merge/rename/group.',
+    inputSchema: { type: 'object', properties: { scope: { type: 'string' }, days: { type: 'number' }, max: { type: 'number' }, confirm: { type: 'boolean' } } },
+  },
+  {
+    name: 'chat_topics_analysis',
+    description: 'Optional one-call analysis (cheap model, aggregate counts only, PII redacted, cached, one run per day per site) that proposes merges/renames/groups. confirm omitted/false returns the estimate and any cached result; confirm=true runs it. Then call with proposalId + accept to apply or reject one proposal.',
+    inputSchema: { type: 'object', properties: { confirm: { type: 'boolean' }, proposalId: { type: 'string' }, accept: { type: 'boolean' } } },
+  },
   {
     name: 'chat_intelligence_recommendations',
     description: 'List the active (non-dismissed) AI-generated improvement recommendations for this site — widget availability, bot gaps, missed-chat patterns, content-gap drafts. Each row includes id, type, priority, title, body, supportingDataBlob, plus lifecycle fields (appliedAt, appliedArtifactRef, rolledBackAt).',
@@ -3214,6 +3254,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         displayName: { type: 'string', description: 'Visitor-facing avatar name shown on the badge (e.g. "Moshky"). Empty string resets to "AI".' },
         showBadge: { type: 'boolean', description: 'Show the name badge over the avatar video. Default true.' },
         sizePx: { type: 'number', description: 'Max avatar panel width in px (160-640, square). Default 360.' },
+        allowVisitorCollapse: { type: 'boolean', description: 'Let visitors hide or collapse the avatar panel (up/down arrow and X). Default true.' },
         maxAvatarMinutesPerMonth: { type: 'number', description: 'Monthly avatar video minutes cap for the site. Whole number 1-100000; never unlimited (0/negative rejected).' },
         maxAvatarTtsChars: { type: 'number', description: 'Monthly avatar TTS character cap (avatar_tts_chars) for the site. Whole number 1-100000000; never unlimited (0/negative rejected). Overage pricing is a platform-wide ladder, not per site.' },
       },
@@ -4939,6 +4980,52 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     description: 'List candidate applications submitted via the Recruiting Bot for this site (name, email, phone, role interest, work authorization, availability, submitted timestamp). Never contains EEOC self-ID data.',
     inputSchema: { type: 'object', properties: {}, required: [] },
   },
+  {
+    name: 'recruiting_ats_failures',
+    description: 'List candidate applications whose ATS write-back is Pending, Failed or Abandoned (status, attempts, last error, next retry). Requires EnableRecruitingBot.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'recruiting_ats_retry',
+    description: 'Retry the ATS write-back for one candidate application right now (resets the attempt counter). Returns the new sync status.',
+    inputSchema: { type: 'object', properties: { applicationId: { type: 'number' } }, required: ['applicationId'] },
+  },
+  {
+    name: 'recruiting_apply_settings',
+    description: 'Set public apply form options for this site (apply-if-present): publicApplyEnabled toggles the public apply endpoint; autoCreateCaseTypeId picks the case type auto-created per application (0 clears).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        publicApplyEnabled: { type: 'boolean' },
+        autoCreateCaseTypeId: { type: 'number', description: 'Case type id; 0 clears the auto-create link' },
+      },
+      required: [],
+    },
+  },
+  {
+    name: 'recruiting_bot_settings',
+    description: 'Get or set the recruiting bot customer controls (apply-if-present; no fields = read): pageContextEnabled (use the job from the host page Velaro context call), revealPostedDate, revealDescription, revealApplyLink, publicApplyEnabled, applyMode (both|link|inproduct), maxResults (1-10), greeting (max 500), tone (friendly|professional|concise).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        pageContextEnabled: { type: 'boolean' },
+        revealPostedDate: { type: 'boolean' },
+        revealDescription: { type: 'boolean' },
+        revealApplyLink: { type: 'boolean' },
+        publicApplyEnabled: { type: 'boolean' },
+        applyMode: { type: 'string', enum: ['both', 'link', 'inproduct'] },
+        maxResults: { type: 'number' },
+        greeting: { type: 'string' },
+        tone: { type: 'string', enum: ['friendly', 'professional', 'concise'] },
+      },
+      required: [],
+    },
+  },
+  {
+    name: 'recruiting_download_resume',
+    description: 'Download a candidate application resume. Returns { fileName, contentType, sizeBytes, base64 }. Files over 5 MB are refused; use the CLI (velaro recruiting applications resume) for those.',
+    inputSchema: { type: 'object', properties: { applicationId: { type: 'number' } }, required: ['applicationId'] },
+  },
   // Recruiting/Applications/ExportEeoc (voluntary self-ID CSV export) is intentionally NOT
   // exposed as an MCP tool -- it returns sensitive EEOC/OFCCP self-identification PII in bulk.
   // It is administrator-only and audit-logged server-side (403 for ordinary agents); the
@@ -5815,6 +5902,28 @@ async function handleTool(name, args) {
       if (args.teamId != null) qs.set('teamId', String(args.teamId));
       return await messagingGet(`/Reports/chat-intelligence/themes?${qs.toString()}`);
     }
+    case 'chat_topics_get':
+      return await messagingGet('/ChatIntelligenceTopics');
+    case 'chat_topics_set':
+      return args.industry
+        ? await messagingPost('/ChatIntelligenceTopics/template', { industry: args.industry })
+        : await messagingPut('/ChatIntelligenceTopics', { topics: args.topics ?? [] });
+    case 'chat_topics_edit':
+      return await messagingPost('/ChatIntelligenceTopics/mapping', { ops: [{ op: args.op, from: args.from ?? [], to: args.to ?? null, group: args.group ?? null }] });
+    case 'chat_topics_group_suggestions':
+      return await messagingGet(`/ChatIntelligenceTopics/group-suggestions?days=${args.days ?? 90}`);
+    case 'chat_topics_suggestions':
+      return await messagingGet(`/ChatIntelligenceTopics/suggestions?days=${args.days ?? 90}`);
+    case 'chat_topics_resolve_suggestion':
+      return await messagingPost('/ChatIntelligenceTopics/suggestions/resolve', { suggestion: args.suggestion, action: args.action, target: args.target ?? null });
+    case 'chat_topics_reclassify':
+      return args.confirm
+        ? await messagingPost('/ChatIntelligenceTopics/reclassify', { scope: args.scope ?? 'other', days: args.days ?? 90, max: args.max ?? null, confirm: true })
+        : await messagingGet(`/ChatIntelligenceTopics/reclassify/estimate?scope=${args.scope ?? 'other'}&days=${args.days ?? 90}${args.max ? `&max=${args.max}` : ''}`);
+    case 'chat_topics_analysis':
+      if (args.proposalId) return await messagingPost('/ChatIntelligenceTopics/analysis/proposals', { id: args.proposalId, accept: args.accept !== false });
+      if (args.confirm) return await messagingPost('/ChatIntelligenceTopics/analysis', { confirm: true });
+      return { estimate: await messagingGet('/ChatIntelligenceTopics/analysis/estimate'), cached: await messagingGet('/ChatIntelligenceTopics/analysis') };
     case 'canned_learning_suggestions':
       return await messagingGet(`/CannedLearning/suggestions?state=${encodeURIComponent(args.state ?? 'pending_review')}`);
     case 'canned_learning_generate':
@@ -6077,7 +6186,7 @@ async function handleTool(name, args) {
       return await rpc('ai_config_set_reply_format', args);
 
     case 'site_identity_secret_status': {
-      const settings = await api('GET', '/SiteSettings');
+      const settings = await api('GET', '/api/SiteSettings');
       const configured = settings?.identitySigningSecretConfigured ?? false;
       const masked = settings?.identitySigningSecretMasked ?? null;
       if (!configured) {
@@ -6117,7 +6226,7 @@ async function handleTool(name, args) {
     }
 
     case 'index_list': {
-      const indexes = await messagingApi('/AzureIndexes/GetIndexList');
+      const indexes = await messagingApi('/AzureIndexes/List');
       if (!Array.isArray(indexes) || !indexes.length) {
         return 'No knowledge collections found for this site.';
       }
@@ -6449,7 +6558,8 @@ async function handleTool(name, args) {
     }
 
     case 'routing_delete': {
-      await messagingRequest('DELETE', `/rules/${args.id}`);
+      // RulesController.DeleteAsync takes the rule in the BODY (DELETE /Rules {id}); DELETE /rules/{id} never existed.
+      await messagingRequest('DELETE', '/Rules', { id: args.id });
       return `Deleted routing rule id=${args.id}`;
     }
 
@@ -6988,7 +7098,7 @@ async function handleTool(name, args) {
 
       // ── Layer 7: Admin Activity Log — recent channel/auth/integration events
       // Useful for detecting send failures, auth events, channel errors not in integration logs.
-      const activityLogP = safeJson(() => api('GET', '/AdminActivityLog?pageSize=10'));
+      const activityLogP = safeJson(() => messagingRequest('GET', '/AdminActivityLog?pageSize=10'));
 
       const [health, ci, aiEx, velaroLogs, loggly, intLogPage, skillErr, activityLog] = await Promise.all([healthP, ciP, aiExP, velaroLoggerP, logglyP, intLogP, skillErrP, activityLogP]);
 
@@ -7113,7 +7223,7 @@ async function handleTool(name, args) {
       const q = args.query ?? '';
       const top = args.top ?? 5;
       if (!q) return 'query is required.';
-      const results = await api('GET', `/AzureIndexes/content-search?q=${encodeURIComponent(q)}&top=${top}`);
+      const results = await messagingRequest('GET', `/AzureIndexes/content-search?q=${encodeURIComponent(q)}&top=${top}`);
       if (results?.error) return `Index search error: ${results.error}`;
       if (!Array.isArray(results) || !results.length) return `No results for "${q}". Index may be empty — trigger ingestion first.`;
       const lines = [
@@ -7176,7 +7286,7 @@ async function handleTool(name, args) {
       return JSON.stringify(r, null, 2);
     }
     case 'index_status': {
-      const sources = await api('GET', '/AzureIndexes/IntegrationSources');
+      const sources = await messagingRequest('GET', '/AzureIndexes/IntegrationSources');
       if (!Array.isArray(sources) || !sources.length) return 'No indexed sources found. Run index_ingest to populate.';
       const lines = [
         '=== Index Status ===',
@@ -7189,7 +7299,7 @@ async function handleTool(name, args) {
       if (!args.jobId) return 'jobId is required.';
       const body = { jobId: args.jobId };
       if (args.indexName) body.indexName = args.indexName;
-      const result = await api('POST', '/AzureIndexes/IngestJobDirect', body);
+      const result = await messagingRequest('POST', '/AzureIndexes/IngestJobDirect', body);
       if (result?.error) return `Ingestion error: ${result.error}`;
       return `Ingestion started for job ${args.jobId}.\n  Physical index: ${result?.physicalIndex ?? 'unknown'}\n\nEmbedding runs in the background (~1-2 min). Use index_status to verify chunks appear.`;
     }
@@ -7214,7 +7324,7 @@ async function handleTool(name, args) {
     }
 
     case 'uploaded_files_list': {
-      const files = await api('GET', '/uploadedFiles/list/AI');
+      const files = await messagingRequest('GET', '/uploadedFiles/list/AI');
       if (!Array.isArray(files) || !files.length) return 'No AI training files uploaded for this site.';
       const lines = ['=== Uploaded AI Training Files ===',
         ...files.map(f => `  [id=${f.id}] ${f.fileName}  size=${f.fileLength ? Math.round(f.fileLength/1024)+'KB' : '?'}`)];
@@ -7227,7 +7337,7 @@ async function handleTool(name, args) {
       if (args.fileId) body.id = args.fileId;
       if (args.fileName) body.fileName = args.fileName;
       if (args.indexName) body.indexName = args.indexName;
-      const result = await api('POST', '/uploadedFiles/reindex', body);
+      const result = await messagingRequest('POST', '/uploadedFiles/reindex', body);
       if (result?.error) return `Reindex error: ${result.error}`;
       return `✅ Re-indexed '${result.fileName}': ${result.chunksIndexed} chunks indexed.\n\nUse index_status to verify the chunks appear in the knowledge index.`;
     }
@@ -8532,6 +8642,7 @@ async function handleTool(name, args) {
       if (args.displayName !== undefined) body.displayName = args.displayName;
       if (args.showBadge !== undefined) body.showBadge = args.showBadge;
       if (args.sizePx !== undefined) body.sizePx = args.sizePx;
+      if (args.allowVisitorCollapse !== undefined) body.allowVisitorCollapse = args.allowVisitorCollapse;
       for (const [arg, max] of [['maxAvatarMinutesPerMonth', 100000], ['maxAvatarTtsChars', 100000000]]) {
         if (args[arg] === undefined) continue;
         if (!Number.isInteger(args[arg]) || args[arg] < 1 || args[arg] > max) throw new Error(`${arg} must be a whole number between 1 and ${max} (never unlimited).`);
@@ -9133,7 +9244,7 @@ async function handleTool(name, args) {
 
     case 'magento_diagnose': {
       if (!args.siteId) return 'siteId is required.';
-      const r = await api('GET', `/diagnostics/test-magento?siteId=${encodeURIComponent(args.siteId)}`);
+      const r = await messagingRequest('GET', `/diagnostics/test-magento?siteId=${encodeURIComponent(args.siteId)}`);
       return JSON.stringify(r, null, 2);
     }
 
@@ -9141,18 +9252,18 @@ async function handleTool(name, args) {
     case 'sap_diagnose': {
       if (!args.siteId) return 'siteId is required.';
       const deep = args.deep === false ? 'false' : 'true';
-      const r = await api('GET', `/diagnostics/test-sap?siteId=${encodeURIComponent(args.siteId)}&deep=${deep}`);
+      const r = await messagingRequest('GET', `/diagnostics/test-sap?siteId=${encodeURIComponent(args.siteId)}&deep=${deep}`);
       return JSON.stringify(r, null, 2);
     }
 
     case 'business_action_list': {
-      const r = await api('GET', '/BusinessActions');
+      const r = await messagingRequest('GET', '/BusinessActions');
       return JSON.stringify(r, null, 2);
     }
 
     case 'business_action_route': {
       if (!args.text) return 'text is required.';
-      const r = await api('POST', '/BusinessActions/Route', { text: args.text, max: args.max });
+      const r = await messagingRequest('POST', '/BusinessActions/Route', { text: args.text, max: args.max });
       return JSON.stringify(r, null, 2);
     }
 
@@ -9162,7 +9273,7 @@ async function handleTool(name, args) {
       const qs = [];
       if (args.idempotencyKey) qs.push(`idempotencyKey=${encodeURIComponent(args.idempotencyKey)}`);
       if (args.conversationId) qs.push(`conversationId=${encodeURIComponent(args.conversationId)}`);
-      const r = await api('POST', `/BusinessActions/${encodeURIComponent(args.name)}/Execute${qs.length ? '?' + qs.join('&') : ''}`, args.request);
+      const r = await messagingRequest('POST', `/BusinessActions/${encodeURIComponent(args.name)}/Execute${qs.length ? '?' + qs.join('&') : ''}`, args.request);
       return JSON.stringify(r, null, 2);
     }
 
@@ -9705,7 +9816,7 @@ async function handleTool(name, args) {
     }
 
     case 'billing_plan_status': {
-      const s = await api('GET', '/BillingPayment/plan-status', undefined, MESSAGING_API);
+      const s = await api('GET', '/api/BillingPayment/plan-status');
       const lines = [`Site ${s.siteId} — Subscription Status`];
       if (s.subscription) {
         lines.push(`Seats: ${s.subscription.maxLicensedSeats}  |  Conv/mo: ${s.subscription.maxConversationsPerMonth || '∞'}  |  Self-serve: ${s.subscription.enableSelfServeSeats ? 'YES' : 'no'}`);
@@ -10201,6 +10312,61 @@ async function handleTool(name, args) {
       return JSON.stringify(listing, null, 2);
     }
 
+    case 'recruiting_ats_failures': {
+      const rows = await messagingGet('/Recruiting/Applications/AtsFailures');
+      return JSON.stringify(rows, null, 2);
+    }
+    case 'recruiting_ats_retry': {
+      const id = Number(args.applicationId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');
+      const r = await messagingPost(`/Recruiting/Applications/${id}/AtsRetry`, {});
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_apply_settings': {
+      const body = {};
+      if (args.publicApplyEnabled !== undefined) body.publicApplyEnabled = Boolean(args.publicApplyEnabled);
+      if (args.autoCreateCaseTypeId !== undefined) {
+        const n = Number(args.autoCreateCaseTypeId);
+        if (!Number.isInteger(n) || n < 0) throw new Error('autoCreateCaseTypeId must be an integer >= 0 (0 clears).');
+        body.autoCreateCaseTypeId = n;
+      }
+      if (!Object.keys(body).length) throw new Error('Specify publicApplyEnabled and/or autoCreateCaseTypeId.');
+      const r = await messagingPut('/Recruiting/ApplySettings', body);
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_bot_settings': {
+      const fields = ['pageContextEnabled', 'revealPostedDate', 'revealDescription', 'revealApplyLink', 'publicApplyEnabled', 'applyMode', 'maxResults', 'greeting', 'tone'];
+      const body = {};
+      for (const f of fields) if (args[f] !== undefined) body[f] = args[f];
+      if (body.applyMode !== undefined && !['both', 'link', 'inproduct'].includes(String(body.applyMode).toLowerCase())) throw new Error('applyMode must be both, link or inproduct.');
+      if (body.tone !== undefined && !['friendly', 'professional', 'concise'].includes(String(body.tone).toLowerCase())) throw new Error('tone must be friendly, professional or concise.');
+      if (body.maxResults !== undefined && !(Number.isInteger(Number(body.maxResults)) && Number(body.maxResults) >= 1 && Number(body.maxResults) <= 10)) throw new Error('maxResults must be an integer from 1 to 10.');
+      const r = Object.keys(body).length ? await messagingPut('/Recruiting/BotSettings', body) : await messagingGet('/Recruiting/BotSettings');
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_download_resume': {
+      const id = Number(args.applicationId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');
+      if (!MESSAGING_API) throw new Error('VELARO_MESSAGING_API is not configured.');
+      const res = await fetch(`${MESSAGING_API}/Recruiting/Applications/${id}/Resume`, {
+        headers: { Authorization: authHeader() },
+        signal: AbortSignal.timeout(30000),
+      });
+      if (!res.ok) {
+        const text = await res.text().catch(() => '');
+        throw new Error(`/Recruiting/Applications/${id}/Resume -> ${res.status}: ${text.slice(0, 300)}`);
+      }
+      const buf = Buffer.from(await res.arrayBuffer());
+      if (buf.length > 5 * 1024 * 1024) throw new Error(`Resume is ${buf.length} bytes (over the 5 MB MCP limit); use the CLI: velaro recruiting applications resume ${id}`);
+      const cd = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(res.headers.get('content-disposition') || '');
+      return JSON.stringify({
+        fileName: cd ? decodeURIComponent(cd[1]) : `resume-${id}`,
+        contentType: res.headers.get('content-type') || 'application/octet-stream',
+        sizeBytes: buf.length,
+        base64: buf.toString('base64'),
+      }, null, 2);
+    }
+
     case 'jobboard_move_application_stage': {
       const app = await messagingPut(`/Recruiting/Applications/${args.applicationId}/Stage`, { stage: args.stage });
       return JSON.stringify(app, null, 2);