@velaro/mcp-server 0.6.91 → 0.6.93

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/mcp-server",
-  "version": "0.6.91",
+  "version": "0.6.93",
   "description": "Velaro MCP server — connect Claude and other AI agents directly to your Velaro account: KB, workflows, bots, conversations, contacts, routing, and more.",
   "type": "module",
   "bin": {
@@ -10,7 +10,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "qs": "^6.16.0"
   },
   "overrides": {

package/server.js

@@ -857,6 +857,46 @@ const TOOLS = [
     description: 'Roll back an approved suggestion, restoring the original canned message text.',
     inputSchema: { type: 'object', properties: { suggestionId: { type: 'number' }, notes: { type: 'string' } }, required: ['suggestionId'] },
   },
+  {
+    name: 'chat_topics_get',
+    description: 'Chat Intelligence topics for this site: the active topic list (hint for the AI, not a rulebook), industry templates, groups, merge/rename mapping and limits. Intelligence Suite entitlement required.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+  {
+    name: 'chat_topics_set',
+    description: 'Replace the active topic list (max 60 topics, 60 chars each, duplicates removed). Used for new classifications only; existing history is untouched. Optionally load a template first with industry.',
+    inputSchema: { type: 'object', properties: { topics: { type: 'array', items: { type: 'string' } }, industry: { type: 'string', description: 'Load a template instead: insurance, healthcare, retail, ecommerce, financial, saas, government, manufacturing' } } },
+  },
+  {
+    name: 'chat_topics_edit',
+    description: 'Merge, rename, retire or group topics. Applied when reports are read, so history follows the new names with zero AI cost. op = merge|rename|retire|group; from = topic names; to = target (merge/rename); group = group name (empty clears).',
+    inputSchema: { type: 'object', properties: { op: { type: 'string' }, from: { type: 'array', items: { type: 'string' } }, to: { type: 'string' }, group: { type: 'string' } }, required: ['op', 'from'] },
+  },
+  {
+    name: 'chat_topics_group_suggestions',
+    description: 'Suggested groups for the current topics, computed from topic names and counts with no AI call.',
+    inputSchema: { type: 'object', properties: { days: { type: 'number' } } },
+  },
+  {
+    name: 'chat_topics_suggestions',
+    description: 'Suggested topics: the short topic the AI proposed for chats that fit nothing on the list, with counts and example conversation ids.',
+    inputSchema: { type: 'object', properties: { days: { type: 'number' } } },
+  },
+  {
+    name: 'chat_topics_resolve_suggestion',
+    description: 'Accept (adds to the list), merge or rename into an existing topic (target), or dismiss a suggested topic. History follows with no AI cost.',
+    inputSchema: { type: 'object', properties: { suggestion: { type: 'string' }, action: { type: 'string', description: 'accept|merge|rename|dismiss' }, target: { type: 'string' } }, required: ['suggestion', 'action'] },
+  },
+  {
+    name: 'chat_topics_reclassify',
+    description: 'Optional: re-run the classifier on older chats. Call with confirm omitted/false to get the cost estimate (scope other = only unlisted chats, all = everything; hard cap 500). Resend with confirm=true to queue it. Never needed for merge/rename/group.',
+    inputSchema: { type: 'object', properties: { scope: { type: 'string' }, days: { type: 'number' }, max: { type: 'number' }, confirm: { type: 'boolean' } } },
+  },
+  {
+    name: 'chat_topics_analysis',
+    description: 'Optional one-call analysis (cheap model, aggregate counts only, PII redacted, cached, one run per day per site) that proposes merges/renames/groups. confirm omitted/false returns the estimate and any cached result; confirm=true runs it. Then call with proposalId + accept to apply or reject one proposal.',
+    inputSchema: { type: 'object', properties: { confirm: { type: 'boolean' }, proposalId: { type: 'string' }, accept: { type: 'boolean' } } },
+  },
   {
     name: 'chat_intelligence_recommendations',
     description: 'List the active (non-dismissed) AI-generated improvement recommendations for this site — widget availability, bot gaps, missed-chat patterns, content-gap drafts. Each row includes id, type, priority, title, body, supportingDataBlob, plus lifecycle fields (appliedAt, appliedArtifactRef, rolledBackAt).',
@@ -1008,6 +1048,7 @@ Key node shapes:
     propName:"myAnswerVar" }                      // variable that stores the result as JSON array string
 • condition:      { type:"action", actionType:"condition", conditionOptions:[...] }
 • transferToAI:   { type:"action", actionType:"transferToAI", aiConfigId:N }
+  AI follow-up suggestions ("AI mode"): add suggestFollowUps:true|false (omit = use the account default, set via ai_followups_site_set), suggestFollowUpCount:2-4, suggestFollowUpInstruction:"<=300 chars". After each web-chat bot reply the bot offers short tappable follow-up replies; typing stays available.
 
 For multiSelect dynamic options: the variable named in dynamicOptionsVariable must contain a JSON array like [{"label":"Red","value":"red"},{"label":"Blue","value":"blue"}]. Populate it via an HTTP Request node before the ask node.`,
     inputSchema: {
@@ -1021,6 +1062,20 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     },
   },
 
+  {
+    name: 'ai_followups_site_get',
+    description: "Read this account's default for AI follow-up suggestions (the AI Chatbot node's \"AI mode\": after each web-chat bot reply the bot offers 2-4 short tappable follow-up replies). A node's own suggestFollowUps setting wins over this default; platform default is off.",
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'ai_followups_site_set',
+    description: "Set this account's default for AI follow-up suggestions. enabled=true/false, or omit/null to clear (platform default: off). Per-node settings (workflow_update_node: suggestFollowUps) override this. Returns the value read back from the server.",
+    inputSchema: {
+      type: 'object',
+      properties: { enabled: { type: ['boolean', 'null'], description: 'true = on, false = off, null/omitted = clear' } },
+      required: [],
+    },
+  },
   // ── Surveys ──────────────────────────────────────────────────────────────
   {
     name: 'survey_list',
@@ -1554,10 +1609,28 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         },
         buttonLabel: { type: 'string', description: 'Optional action button label' },
         buttonUrl:   { type: 'string', description: 'Optional action button URL (required if buttonLabel is set)' },
+        mentions:    { type: 'array', description: 'People to @mention (real Teams notification). Velaro staff only. Uses the ops Teams sender instead of a webhook.', items: { type: 'object', properties: { user: { type: 'string', description: 'Entra object id or UPN, e.g. andrea@velaro.com' }, name: { type: 'string', description: 'Display name shown in the @mention' } }, required: ['user'] } },
+        destination: { type: 'string', description: 'Named channel in the DevOps team instead of General: prs, workflows, deploys, alerts, qa, general. Velaro staff only; uses the ops Teams sender instead of a webhook.' },
       },
       required: ['title'],
     },
   },
+  {
+    name: 'teams_send_direct',
+    description: 'Send a 1:1 Teams message (Adaptive Card) directly to any user in the Velaro tenant by UPN/email or Entra object id. Velaro staff only. Graph chat first, Velaro Bot proactive fallback.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        user:        { type: 'string', description: 'UPN/email (alex@velaro.com) or Entra object id' },
+        title:       { type: 'string', description: 'Card title' },
+        message:     { type: 'string', description: 'Message text' },
+        fields:      { type: 'array', description: 'Optional fact rows', items: { type: 'object', properties: { label: { type: 'string' }, value: { type: 'string' } }, required: ['label', 'value'] } },
+        buttonLabel: { type: 'string', description: 'Optional button label' },
+        buttonUrl:   { type: 'string', description: 'Optional button URL' },
+      },
+      required: ['user', 'title'],
+    },
+  },
 
   // ── Slack ─────────────────────────────────────────────────────────────────
   {
@@ -3017,7 +3090,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     inputSchema: {
       type: 'object',
       properties: {
-        report:       { type: 'string', enum: ['program_breakdown', 'agent_scorecard', 'qa_coverage', 'coaching_queue', 'sentiment_breakdown', 'topic_radar', 'weekly_brief', 'weekly_brief_send_test'] },
+        report:       { type: 'string', enum: ['program_breakdown', 'agent_scorecard', 'qa_coverage', 'coaching_queue', 'sentiment_breakdown', 'topic_radar', 'weekly_brief', 'weekly_brief_send_test', 'repeat_contact', 'demand_coverage', 'bot_containment', 'effort_index', 'promise_ledger', 'promise_dismiss'] },
         from:         { type: 'string', description: 'yyyy-MM-dd start (default: 30 days ago).' },
         to:           { type: 'string', description: 'yyyy-MM-dd end, inclusive (default: today).' },
         groupBy:      { type: 'string', description: 'program_breakdown: website|team|platform|device|entrypage. sentiment_breakdown: website|team|agent|theme.' },
@@ -3027,6 +3100,14 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         perAgent:     { type: 'number', description: 'coaching_queue: chats listed per agent (default 5).' },
         limit:        { type: 'number', description: 'topic_radar: max topics (default 25).' },
         days:         { type: 'number', description: 'weekly_brief: days to cover (default 7).' },
+        windowDays:   { type: 'number', description: 'repeat_contact: days a contact has to come back to count as a repeat (1-30, default 7).' },
+        weeks:        { type: 'number', description: 'demand_coverage: whole local weeks of history (1-12, default 6). from/to are IGNORED by demand_coverage.' },
+        handleMinutes: { type: 'number', description: 'demand_coverage: assumed minutes per chat (1-120, default 10).' },
+        maxConcurrent: { type: 'number', description: 'demand_coverage: assumed chats an agent handles at once (1-10, default 3).' },
+        timeZone:     { type: 'string', description: 'demand_coverage: IANA time zone (default America/Los_Angeles).' },
+        lowScore:     { type: 'number', description: 'bot_containment: QA score below which a handed-off chat counts as regret (1-100, default 60).' },
+        includeDemo:  { type: 'boolean', description: 'true = show only the seeded sample (demo) data. Default false.' },
+        promiseId:    { type: 'string', description: 'promise_dismiss: the promise id to dismiss (managers only).' },
       },
       required: ['report'],
     },
@@ -3214,6 +3295,7 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
         displayName: { type: 'string', description: 'Visitor-facing avatar name shown on the badge (e.g. "Moshky"). Empty string resets to "AI".' },
         showBadge: { type: 'boolean', description: 'Show the name badge over the avatar video. Default true.' },
         sizePx: { type: 'number', description: 'Max avatar panel width in px (160-640, square). Default 360.' },
+        allowVisitorCollapse: { type: 'boolean', description: 'Let visitors hide or collapse the avatar panel (up/down arrow and X). Default true.' },
         maxAvatarMinutesPerMonth: { type: 'number', description: 'Monthly avatar video minutes cap for the site. Whole number 1-100000; never unlimited (0/negative rejected).' },
         maxAvatarTtsChars: { type: 'number', description: 'Monthly avatar TTS character cap (avatar_tts_chars) for the site. Whole number 1-100000000; never unlimited (0/negative rejected). Overage pricing is a platform-wide ladder, not per site.' },
       },
@@ -3709,6 +3791,15 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
       required: [],
     },
   },
+  {
+    name: 'ai_federation',
+    description: 'SuperAdmin: Anthropic Workload Identity Federation for the AI gateway. action=status shows enabled, circuit breaker state, last success/failure reason, federated vs API-key fallback counts and token expiry. action=test does a real token exchange plus a 1-token Haiku message and reports which path (federated, apikey, apikey-fallback) served it. action=reset_breaker closes the breaker so the next call retries federation.',
+    inputSchema: {
+      type: 'object',
+      properties: { action: { type: 'string', enum: ['status', 'test', 'reset_breaker'], description: 'Default status.' } },
+      required: [],
+    },
+  },
   {
     name: 'status_incident_list',
     description: 'Velaro staff only (SuperAdmin). Lists public status page incidents, including component overrides (IncidentType "Override").',
@@ -4939,6 +5030,53 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
     description: 'List candidate applications submitted via the Recruiting Bot for this site (name, email, phone, role interest, work authorization, availability, submitted timestamp). Never contains EEOC self-ID data.',
     inputSchema: { type: 'object', properties: {}, required: [] },
   },
+  {
+    name: 'recruiting_ats_failures',
+    description: 'List candidate applications whose ATS write-back is Pending, Failed or Abandoned (status, attempts, last error, next retry). Requires EnableRecruitingBot.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'recruiting_ats_retry',
+    description: 'Retry the ATS write-back for one candidate application right now (resets the attempt counter). Returns the new sync status.',
+    inputSchema: { type: 'object', properties: { applicationId: { type: 'number' } }, required: ['applicationId'] },
+  },
+  {
+    name: 'recruiting_apply_settings',
+    description: 'Set public apply form options for this site (apply-if-present): publicApplyEnabled toggles the public apply endpoint; autoCreateCaseTypeId picks the case type auto-created per application (0 clears).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        publicApplyEnabled: { type: 'boolean' },
+        autoCreateCaseTypeId: { type: 'number', description: 'Case type id; 0 clears the auto-create link' },
+        defaultListingDays: { type: 'number', description: '1-365: how many days a new listing stays live when its feed gives no expiry. Requires the Job Board lifecycle package.' },
+      },
+      required: [],
+    },
+  },
+  {
+    name: 'recruiting_bot_settings',
+    description: 'Get or set the recruiting bot customer controls (apply-if-present; no fields = read): pageContextEnabled (use the job from the host page Velaro context call), revealPostedDate, revealDescription, revealApplyLink, publicApplyEnabled, applyMode (both|link|inproduct), maxResults (1-10), greeting (max 500), tone (friendly|professional|concise).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        pageContextEnabled: { type: 'boolean' },
+        revealPostedDate: { type: 'boolean' },
+        revealDescription: { type: 'boolean' },
+        revealApplyLink: { type: 'boolean' },
+        publicApplyEnabled: { type: 'boolean' },
+        applyMode: { type: 'string', enum: ['both', 'link', 'inproduct'] },
+        maxResults: { type: 'number' },
+        greeting: { type: 'string' },
+        tone: { type: 'string', enum: ['friendly', 'professional', 'concise'] },
+      },
+      required: [],
+    },
+  },
+  {
+    name: 'recruiting_download_resume',
+    description: 'Download a candidate application resume. Returns { fileName, contentType, sizeBytes, base64 }. Files over 5 MB are refused; use the CLI (velaro recruiting applications resume) for those.',
+    inputSchema: { type: 'object', properties: { applicationId: { type: 'number' } }, required: ['applicationId'] },
+  },
   // Recruiting/Applications/ExportEeoc (voluntary self-ID CSV export) is intentionally NOT
   // exposed as an MCP tool -- it returns sensitive EEOC/OFCCP self-identification PII in bulk.
   // It is administrator-only and audit-logged server-side (403 for ordinary agents); the
@@ -5016,6 +5154,29 @@ For multiSelect dynamic options: the variable named in dynamicOptionsVariable mu
       required: ['sourceId', 'title'],
     },
   },
+  // -- Job Board listing lifecycle (package "job-board-lifecycle", default OFF: 403 for a site without it) --
+  {
+    name: 'jobboard_lifecycle_status',
+    description: 'Does this site have the Job Board listing lifecycle package (close/renew, expiry, JSON-LD listing pages), and what is its default listing duration? Returns { entitled, defaultListingDays }.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+  },
+  {
+    name: 'jobboard_close_listing',
+    description: 'Close a job listing: it stops appearing in search and the public board, the public listing page answers 410, and applying to it answers 410. Idempotent. Requires the Job Board lifecycle package (403 otherwise); 404 for an id that is not on this site.',
+    inputSchema: { type: 'object', properties: { listingId: { type: 'number' } }, required: ['listingId'] },
+  },
+  {
+    name: 'jobboard_renew_listing',
+    description: 'Renew a job listing: extends its expiry by `days` (default: the site\'s default listing days) from the later of its current expiry and now, increments its renewal count and republishes it if it was closed or expired. Requires the Job Board lifecycle package (403 otherwise).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        listingId: { type: 'number' },
+        days: { type: 'number', description: '1-365; omit for the site default' },
+      },
+      required: ['listingId'],
+    },
+  },
   {
     name: 'jobboard_move_application_stage',
     description: 'Move a candidate application to a new HR/agency-side pipeline stage on the applicant Kanban board (Applied, Screened, Interview, Offer, Hired, Rejected).',
@@ -5815,6 +5976,28 @@ async function handleTool(name, args) {
       if (args.teamId != null) qs.set('teamId', String(args.teamId));
       return await messagingGet(`/Reports/chat-intelligence/themes?${qs.toString()}`);
     }
+    case 'chat_topics_get':
+      return await messagingGet('/ChatIntelligenceTopics');
+    case 'chat_topics_set':
+      return args.industry
+        ? await messagingPost('/ChatIntelligenceTopics/template', { industry: args.industry })
+        : await messagingPut('/ChatIntelligenceTopics', { topics: args.topics ?? [] });
+    case 'chat_topics_edit':
+      return await messagingPost('/ChatIntelligenceTopics/mapping', { ops: [{ op: args.op, from: args.from ?? [], to: args.to ?? null, group: args.group ?? null }] });
+    case 'chat_topics_group_suggestions':
+      return await messagingGet(`/ChatIntelligenceTopics/group-suggestions?days=${args.days ?? 90}`);
+    case 'chat_topics_suggestions':
+      return await messagingGet(`/ChatIntelligenceTopics/suggestions?days=${args.days ?? 90}`);
+    case 'chat_topics_resolve_suggestion':
+      return await messagingPost('/ChatIntelligenceTopics/suggestions/resolve', { suggestion: args.suggestion, action: args.action, target: args.target ?? null });
+    case 'chat_topics_reclassify':
+      return args.confirm
+        ? await messagingPost('/ChatIntelligenceTopics/reclassify', { scope: args.scope ?? 'other', days: args.days ?? 90, max: args.max ?? null, confirm: true })
+        : await messagingGet(`/ChatIntelligenceTopics/reclassify/estimate?scope=${args.scope ?? 'other'}&days=${args.days ?? 90}${args.max ? `&max=${args.max}` : ''}`);
+    case 'chat_topics_analysis':
+      if (args.proposalId) return await messagingPost('/ChatIntelligenceTopics/analysis/proposals', { id: args.proposalId, accept: args.accept !== false });
+      if (args.confirm) return await messagingPost('/ChatIntelligenceTopics/analysis', { confirm: true });
+      return { estimate: await messagingGet('/ChatIntelligenceTopics/analysis/estimate'), cached: await messagingGet('/ChatIntelligenceTopics/analysis') };
     case 'canned_learning_suggestions':
       return await messagingGet(`/CannedLearning/suggestions?state=${encodeURIComponent(args.state ?? 'pending_review')}`);
     case 'canned_learning_generate':
@@ -5885,6 +6068,17 @@ async function handleTool(name, args) {
     // [Authorize] does not accept vel_live_* service keys (only a handful of controllers opt
     // into that manually) — these tools need VELARO_JWT, same requirement as the existing
     // notifications_get/ai_config_staff_get tools they're modeled on.
+    case 'ai_followups_site_get': {
+      const r = await messagingGet('/SiteSettings/AiFollowUps');
+      return JSON.stringify({ enabled: r?.enabled ?? null }, null, 2);
+    }
+
+    case 'ai_followups_site_set': {
+      await messagingPut('/SiteSettings/AiFollowUps', { enabled: typeof args.enabled === 'boolean' ? args.enabled : null });
+      const r = await messagingGet('/SiteSettings/AiFollowUps');
+      return JSON.stringify({ enabled: r?.enabled ?? null }, null, 2);
+    }
+
     case 'survey_list': {
       const surveys = (await messagingGet('/Surveys/list')) ?? [];
       if (!surveys.length) return 'No surveys found.';
@@ -6077,7 +6271,7 @@ async function handleTool(name, args) {
       return await rpc('ai_config_set_reply_format', args);
 
     case 'site_identity_secret_status': {
-      const settings = await api('GET', '/SiteSettings');
+      const settings = await api('GET', '/api/SiteSettings');
       const configured = settings?.identitySigningSecretConfigured ?? false;
       const masked = settings?.identitySigningSecretMasked ?? null;
       if (!configured) {
@@ -6117,7 +6311,7 @@ async function handleTool(name, args) {
     }
 
     case 'index_list': {
-      const indexes = await messagingApi('/AzureIndexes/GetIndexList');
+      const indexes = await messagingApi('/AzureIndexes/List');
       if (!Array.isArray(indexes) || !indexes.length) {
         return 'No knowledge collections found for this site.';
       }
@@ -6383,7 +6577,26 @@ async function handleTool(name, args) {
       return await api('PUT', '/TeamsBot/ChannelConfig', body);
     }
 
+    case 'teams_send_direct': {
+      const r = await api('POST', '/TeamsMessaging/Direct', {
+        user: args.user, title: args.title, message: args.message || '',
+        facts: (args.fields || []).map(f => ({ label: f.label, value: f.value })),
+        actionUrl: args.buttonUrl, actionLabel: args.buttonLabel,
+      });
+      return r?.sent ? `Direct message sent to ${args.user} via ${r.path}.` : `Send failed: ${r?.error || 'unknown error'} ${(r?.warnings || []).join('; ')}`;
+    }
+
     case 'teams_notify_card': {
+      if ((args.mentions && args.mentions.length) || args.destination) {
+        const r = await api('POST', '/TeamsMessaging/Card', {
+          title: args.title,
+          facts: (args.fields || []).map(f => ({ label: f.label, value: f.value })),
+          actionUrl: args.buttonUrl, actionLabel: args.buttonLabel,
+          destination: args.destination,
+          mentions: (args.mentions || []).map(m => ({ user: m.user, name: m.name })),
+        });
+        return r?.sent ? `Card sent via ${r.path}${r.warnings?.length ? ' (' + r.warnings.join('; ') + ')' : ''}.` : `Send failed: ${r?.error || 'unknown error'}`;
+      }
       const webhooks = await api('GET', '/TeamsNotification');
       if (!Array.isArray(webhooks) || !webhooks.length)
         return 'No Teams webhooks configured. Go to Integrations → Microsoft Teams to add one, or call velaro teams create <name> <webhookUrl> via CLI.';
@@ -6449,7 +6662,8 @@ async function handleTool(name, args) {
     }
 
     case 'routing_delete': {
-      await messagingRequest('DELETE', `/rules/${args.id}`);
+      // RulesController.DeleteAsync takes the rule in the BODY (DELETE /Rules {id}); DELETE /rules/{id} never existed.
+      await messagingRequest('DELETE', '/Rules', { id: args.id });
       return `Deleted routing rule id=${args.id}`;
     }
 
@@ -6988,7 +7202,7 @@ async function handleTool(name, args) {
 
       // ── Layer 7: Admin Activity Log — recent channel/auth/integration events
       // Useful for detecting send failures, auth events, channel errors not in integration logs.
-      const activityLogP = safeJson(() => api('GET', '/AdminActivityLog?pageSize=10'));
+      const activityLogP = safeJson(() => messagingRequest('GET', '/AdminActivityLog?pageSize=10'));
 
       const [health, ci, aiEx, velaroLogs, loggly, intLogPage, skillErr, activityLog] = await Promise.all([healthP, ciP, aiExP, velaroLoggerP, logglyP, intLogP, skillErrP, activityLogP]);
 
@@ -7113,7 +7327,7 @@ async function handleTool(name, args) {
       const q = args.query ?? '';
       const top = args.top ?? 5;
       if (!q) return 'query is required.';
-      const results = await api('GET', `/AzureIndexes/content-search?q=${encodeURIComponent(q)}&top=${top}`);
+      const results = await messagingRequest('GET', `/AzureIndexes/content-search?q=${encodeURIComponent(q)}&top=${top}`);
       if (results?.error) return `Index search error: ${results.error}`;
       if (!Array.isArray(results) || !results.length) return `No results for "${q}". Index may be empty — trigger ingestion first.`;
       const lines = [
@@ -7176,7 +7390,7 @@ async function handleTool(name, args) {
       return JSON.stringify(r, null, 2);
     }
     case 'index_status': {
-      const sources = await api('GET', '/AzureIndexes/IntegrationSources');
+      const sources = await messagingRequest('GET', '/AzureIndexes/IntegrationSources');
       if (!Array.isArray(sources) || !sources.length) return 'No indexed sources found. Run index_ingest to populate.';
       const lines = [
         '=== Index Status ===',
@@ -7189,7 +7403,7 @@ async function handleTool(name, args) {
       if (!args.jobId) return 'jobId is required.';
       const body = { jobId: args.jobId };
       if (args.indexName) body.indexName = args.indexName;
-      const result = await api('POST', '/AzureIndexes/IngestJobDirect', body);
+      const result = await messagingRequest('POST', '/AzureIndexes/IngestJobDirect', body);
       if (result?.error) return `Ingestion error: ${result.error}`;
       return `Ingestion started for job ${args.jobId}.\n  Physical index: ${result?.physicalIndex ?? 'unknown'}\n\nEmbedding runs in the background (~1-2 min). Use index_status to verify chunks appear.`;
     }
@@ -7214,7 +7428,7 @@ async function handleTool(name, args) {
     }
 
     case 'uploaded_files_list': {
-      const files = await api('GET', '/uploadedFiles/list/AI');
+      const files = await messagingRequest('GET', '/uploadedFiles/list/AI');
       if (!Array.isArray(files) || !files.length) return 'No AI training files uploaded for this site.';
       const lines = ['=== Uploaded AI Training Files ===',
         ...files.map(f => `  [id=${f.id}] ${f.fileName}  size=${f.fileLength ? Math.round(f.fileLength/1024)+'KB' : '?'}`)];
@@ -7227,7 +7441,7 @@ async function handleTool(name, args) {
       if (args.fileId) body.id = args.fileId;
       if (args.fileName) body.fileName = args.fileName;
       if (args.indexName) body.indexName = args.indexName;
-      const result = await api('POST', '/uploadedFiles/reindex', body);
+      const result = await messagingRequest('POST', '/uploadedFiles/reindex', body);
       if (result?.error) return `Reindex error: ${result.error}`;
       return `✅ Re-indexed '${result.fileName}': ${result.chunksIndexed} chunks indexed.\n\nUse index_status to verify the chunks appear in the knowledge index.`;
     }
@@ -8375,12 +8589,18 @@ async function handleTool(name, args) {
         program_breakdown: 'program-breakdown', agent_scorecard: 'agent-scorecard', qa_coverage: 'qa-coverage',
         coaching_queue: 'coaching-queue', sentiment_breakdown: 'sentiment-breakdown', topic_radar: 'topic-radar',
         weekly_brief: 'weekly-brief', weekly_brief_send_test: 'weekly-brief/send-test',
+        repeat_contact: 'repeat-contact', demand_coverage: 'demand-coverage', bot_containment: 'bot-containment',
+        effort_index: 'effort-index', promise_ledger: 'promise-ledger',
       };
+      if (args.report === 'promise_dismiss') {
+        if (!args.promiseId) throw new Error('promiseId is required for promise_dismiss');
+        return JSON.stringify(await messagingPost('/api/enterprise-reports/promise-ledger/' + encodeURIComponent(String(args.promiseId)) + '/dismiss', {}), null, 2);
+      }
       const seg = ER_PATHS[args.report];
       if (!seg) throw new Error('report must be one of: ' + Object.keys(ER_PATHS).join(', '));
       if (args.report === 'weekly_brief_send_test') return JSON.stringify(await messagingPost('/api/enterprise-reports/' + seg, {}), null, 2);
       const qs = new URLSearchParams();
-      for (const k of ['from', 'to', 'groupBy', 'deploymentId', 'teamId', 'threshold', 'perAgent', 'limit', 'days']) {
+      for (const k of ['from', 'to', 'groupBy', 'deploymentId', 'teamId', 'threshold', 'perAgent', 'limit', 'days', 'windowDays', 'weeks', 'handleMinutes', 'maxConcurrent', 'timeZone', 'lowScore', 'includeDemo']) {
         if (args[k] != null && args[k] !== '') qs.set(k, String(args[k]));
       }
       const q = qs.toString();
@@ -8532,6 +8752,7 @@ async function handleTool(name, args) {
       if (args.displayName !== undefined) body.displayName = args.displayName;
       if (args.showBadge !== undefined) body.showBadge = args.showBadge;
       if (args.sizePx !== undefined) body.sizePx = args.sizePx;
+      if (args.allowVisitorCollapse !== undefined) body.allowVisitorCollapse = args.allowVisitorCollapse;
       for (const [arg, max] of [['maxAvatarMinutesPerMonth', 100000], ['maxAvatarTtsChars', 100000000]]) {
         if (args[arg] === undefined) continue;
         if (!Number.isInteger(args[arg]) || args[arg] < 1 || args[arg] > max) throw new Error(`${arg} must be a whole number between 1 and ${max} (never unlimited).`);
@@ -8797,6 +9018,13 @@ async function handleTool(name, args) {
       return JSON.stringify(data, null, 2);
     }
 
+    case 'ai_federation': {
+      const action = args.action || 'status';
+      if (action === 'test') return JSON.stringify(await api('POST', '/AiFederation/test', {}), null, 2);
+      if (action === 'reset_breaker') return JSON.stringify(await api('POST', '/AiFederation/reset-breaker', {}), null, 2);
+      return JSON.stringify(await api('GET', '/AiFederation/status'), null, 2);
+    }
+
     case 'status_incident_list': {
       const rows = await messagingRequest('GET', `/superadmin/status-incidents?filter=${encodeURIComponent(args.filter || 'active')}`);
       return JSON.stringify(rows, null, 2);
@@ -9133,7 +9361,7 @@ async function handleTool(name, args) {
 
     case 'magento_diagnose': {
       if (!args.siteId) return 'siteId is required.';
-      const r = await api('GET', `/diagnostics/test-magento?siteId=${encodeURIComponent(args.siteId)}`);
+      const r = await messagingRequest('GET', `/diagnostics/test-magento?siteId=${encodeURIComponent(args.siteId)}`);
       return JSON.stringify(r, null, 2);
     }
 
@@ -9141,18 +9369,18 @@ async function handleTool(name, args) {
     case 'sap_diagnose': {
       if (!args.siteId) return 'siteId is required.';
       const deep = args.deep === false ? 'false' : 'true';
-      const r = await api('GET', `/diagnostics/test-sap?siteId=${encodeURIComponent(args.siteId)}&deep=${deep}`);
+      const r = await messagingRequest('GET', `/diagnostics/test-sap?siteId=${encodeURIComponent(args.siteId)}&deep=${deep}`);
       return JSON.stringify(r, null, 2);
     }
 
     case 'business_action_list': {
-      const r = await api('GET', '/BusinessActions');
+      const r = await messagingRequest('GET', '/BusinessActions');
       return JSON.stringify(r, null, 2);
     }
 
     case 'business_action_route': {
       if (!args.text) return 'text is required.';
-      const r = await api('POST', '/BusinessActions/Route', { text: args.text, max: args.max });
+      const r = await messagingRequest('POST', '/BusinessActions/Route', { text: args.text, max: args.max });
       return JSON.stringify(r, null, 2);
     }
 
@@ -9162,7 +9390,7 @@ async function handleTool(name, args) {
       const qs = [];
       if (args.idempotencyKey) qs.push(`idempotencyKey=${encodeURIComponent(args.idempotencyKey)}`);
       if (args.conversationId) qs.push(`conversationId=${encodeURIComponent(args.conversationId)}`);
-      const r = await api('POST', `/BusinessActions/${encodeURIComponent(args.name)}/Execute${qs.length ? '?' + qs.join('&') : ''}`, args.request);
+      const r = await messagingRequest('POST', `/BusinessActions/${encodeURIComponent(args.name)}/Execute${qs.length ? '?' + qs.join('&') : ''}`, args.request);
       return JSON.stringify(r, null, 2);
     }
 
@@ -9705,7 +9933,7 @@ async function handleTool(name, args) {
     }
 
     case 'billing_plan_status': {
-      const s = await api('GET', '/BillingPayment/plan-status', undefined, MESSAGING_API);
+      const s = await api('GET', '/api/BillingPayment/plan-status');
       const lines = [`Site ${s.siteId} — Subscription Status`];
       if (s.subscription) {
         lines.push(`Seats: ${s.subscription.maxLicensedSeats}  |  Conv/mo: ${s.subscription.maxConversationsPerMonth || '∞'}  |  Self-serve: ${s.subscription.enableSelfServeSeats ? 'YES' : 'no'}`);
@@ -10201,6 +10429,89 @@ async function handleTool(name, args) {
       return JSON.stringify(listing, null, 2);
     }
 
+    case 'recruiting_ats_failures': {
+      const rows = await messagingGet('/Recruiting/Applications/AtsFailures');
+      return JSON.stringify(rows, null, 2);
+    }
+    case 'recruiting_ats_retry': {
+      const id = Number(args.applicationId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');
+      const r = await messagingPost(`/Recruiting/Applications/${id}/AtsRetry`, {});
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_apply_settings': {
+      const body = {};
+      if (args.publicApplyEnabled !== undefined) body.publicApplyEnabled = Boolean(args.publicApplyEnabled);
+      if (args.autoCreateCaseTypeId !== undefined) {
+        const n = Number(args.autoCreateCaseTypeId);
+        if (!Number.isInteger(n) || n < 0) throw new Error('autoCreateCaseTypeId must be an integer >= 0 (0 clears).');
+        body.autoCreateCaseTypeId = n;
+      }
+      if (args.defaultListingDays !== undefined) {
+        const d = Number(args.defaultListingDays);
+        if (!Number.isInteger(d) || d < 1 || d > 365) throw new Error('defaultListingDays must be an integer from 1 to 365.');
+        body.defaultListingDays = d;
+      }
+      if (!Object.keys(body).length) throw new Error('Specify publicApplyEnabled, autoCreateCaseTypeId and/or defaultListingDays.');
+      const r = await messagingPut('/Recruiting/ApplySettings', body);
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_bot_settings': {
+      const fields = ['pageContextEnabled', 'revealPostedDate', 'revealDescription', 'revealApplyLink', 'publicApplyEnabled', 'applyMode', 'maxResults', 'greeting', 'tone'];
+      const body = {};
+      for (const f of fields) if (args[f] !== undefined) body[f] = args[f];
+      if (body.applyMode !== undefined && !['both', 'link', 'inproduct'].includes(String(body.applyMode).toLowerCase())) throw new Error('applyMode must be both, link or inproduct.');
+      if (body.tone !== undefined && !['friendly', 'professional', 'concise'].includes(String(body.tone).toLowerCase())) throw new Error('tone must be friendly, professional or concise.');
+      if (body.maxResults !== undefined && !(Number.isInteger(Number(body.maxResults)) && Number(body.maxResults) >= 1 && Number(body.maxResults) <= 10)) throw new Error('maxResults must be an integer from 1 to 10.');
+      const r = Object.keys(body).length ? await messagingPut('/Recruiting/BotSettings', body) : await messagingGet('/Recruiting/BotSettings');
+      return JSON.stringify(r, null, 2);
+    }
+    case 'recruiting_download_resume': {
+      const id = Number(args.applicationId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('applicationId must be a positive integer.');
+      if (!MESSAGING_API) throw new Error('VELARO_MESSAGING_API is not configured.');
+      const res = await fetch(`${MESSAGING_API}/Recruiting/Applications/${id}/Resume`, {
+        headers: { Authorization: authHeader() },
+        signal: AbortSignal.timeout(30000),
+      });
+      if (!res.ok) {
+        const text = await res.text().catch(() => '');
+        throw new Error(`/Recruiting/Applications/${id}/Resume -> ${res.status}: ${text.slice(0, 300)}`);
+      }
+      const buf = Buffer.from(await res.arrayBuffer());
+      if (buf.length > 5 * 1024 * 1024) throw new Error(`Resume is ${buf.length} bytes (over the 5 MB MCP limit); use the CLI: velaro recruiting applications resume ${id}`);
+      const cd = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(res.headers.get('content-disposition') || '');
+      return JSON.stringify({
+        fileName: cd ? decodeURIComponent(cd[1]) : `resume-${id}`,
+        contentType: res.headers.get('content-type') || 'application/octet-stream',
+        sizeBytes: buf.length,
+        base64: buf.toString('base64'),
+      }, null, 2);
+    }
+
+    case 'jobboard_lifecycle_status': {
+      const r = await messagingGet('/Recruiting/Lifecycle');
+      return JSON.stringify(r, null, 2);
+    }
+    case 'jobboard_close_listing': {
+      const id = Number(args.listingId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('listingId must be a positive integer.');
+      const r = await messagingPost(`/Recruiting/Jobs/${id}/close`, {});
+      return JSON.stringify(r, null, 2);
+    }
+    case 'jobboard_renew_listing': {
+      const id = Number(args.listingId);
+      if (!Number.isInteger(id) || id <= 0) throw new Error('listingId must be a positive integer.');
+      const body = {};
+      if (args.days !== undefined) {
+        const d = Number(args.days);
+        if (!Number.isInteger(d) || d < 1 || d > 365) throw new Error('days must be an integer from 1 to 365.');
+        body.days = d;
+      }
+      const r = await messagingPost(`/Recruiting/Jobs/${id}/renew`, body);
+      return JSON.stringify(r, null, 2);
+    }
+
     case 'jobboard_move_application_stage': {
       const app = await messagingPut(`/Recruiting/Applications/${args.applicationId}/Stage`, { stage: args.stage });
       return JSON.stringify(app, null, 2);