conduyt-mcp 4.20.0 → 4.22.0

package/dist/client.d.ts

@@ -49,6 +49,9 @@ export declare class ConduytClient {
     request(method: string, path: string, body?: unknown, opts?: RequestOptions): Promise<unknown>;
     requestText(method: string, path: string, body?: unknown, opts?: RequestOptions): Promise<string>;
     get(path: string, opts?: RequestOptions): Promise<unknown>;
+    /** Multipart upload (call-flow greeting audio): same auth, timeouts and
+     *  response bounds as JSON calls; the body is a FormData the caller built. */
+    postMultipart(path: string, form: FormData, opts?: RequestOptions): Promise<unknown>;
     post(path: string, body: unknown, opts?: RequestOptions): Promise<unknown>;
     postText(path: string, body: unknown, opts?: RequestOptions): Promise<string>;
     patch(path: string, body: unknown, opts?: RequestOptions): Promise<unknown>;
@@ -60,3 +63,13 @@ export declare function formatResult(data: unknown): {
         text: string;
     }>;
 };
+/** A tool-level failure (preflight refusals, guard violations): MCP treats a
+ * result without isError as SUCCESS, so refusals must set it explicitly or
+ * clients proceed as if the call happened. */
+export declare function formatToolError(message: string): {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError: true;
+};

package/dist/client.js

@@ -235,6 +235,32 @@ export class ConduytClient {
     get(path, opts) {
         return this.request("GET", path, undefined, opts);
     }
+    /** Multipart upload (call-flow greeting audio): same auth, timeouts and
+     *  response bounds as JSON calls; the body is a FormData the caller built. */
+    async postMultipart(path, form, opts = {}) {
+        const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        const url = `${this.baseUrl}${path}`;
+        let res;
+        try {
+            res = await fetch(url, { method: "POST", headers: { Authorization: `Bearer ${this.apiKey}` }, body: form, signal: AbortSignal.timeout(timeoutMs) });
+        }
+        catch (err) {
+            throw new ConduytApiError({ message: `Conduyt API network error for POST ${path}: ${err?.message ?? String(err)}`, code: err?.name === "TimeoutError" ? "timeout" : "network", retryable: true, cause: err });
+        }
+        const text = await res.text();
+        let json = null;
+        try {
+            json = text ? JSON.parse(text) : null;
+        }
+        catch {
+            json = { raw: text };
+        }
+        if (!res.ok) {
+            const msg = json?.error ?? text.slice(0, 300);
+            throw new ConduytApiError({ message: `Conduyt API ${res.status}: ${msg}`, status: res.status, code: "http", retryable: res.status >= 500 });
+        }
+        return json;
+    }
     post(path, body, opts) {
         return this.request("POST", path, body, opts);
     }
@@ -253,3 +279,12 @@ export function formatResult(data) {
         content: [{ type: "text", text: JSON.stringify(data, null, 2) }],
     };
 }
+/** A tool-level failure (preflight refusals, guard violations): MCP treats a
+ * result without isError as SUCCESS, so refusals must set it explicitly or
+ * clients proceed as if the call happened. */
+export function formatToolError(message) {
+    return {
+        content: [{ type: "text", text: JSON.stringify({ ok: false, error: message }, null, 2) }],
+        isError: true,
+    };
+}

package/dist/index.js

@@ -38,6 +38,7 @@ import { registerPrivacyTools } from "./tools/privacy.js";
 import { registerAccountExportTools } from "./tools/account-exports.js";
 import { registerLifecycleTools } from "./tools/lifecycle.js";
 import { registerReplyCaptureTools } from "./tools/reply-capture.js";
+import { registerCallFlowTools } from "./tools/call-flows.js";
 const apiUrl = process.env.CONDUYT_API_URL;
 const apiKey = process.env.CONDUYT_API_KEY;
 if (!apiUrl || !apiKey) {
@@ -98,5 +99,6 @@ registerPrivacyTools(server, client);
 registerAccountExportTools(server, client);
 registerLifecycleTools(server, client);
 registerReplyCaptureTools(server, client);
+registerCallFlowTools(server, client);
 const transport = new StdioServerTransport();
 await server.connect(transport);

package/dist/tools/automations.js

@@ -30,7 +30,10 @@ export function registerAutomationTools(server, client) {
         graphVersion: z.number().optional().describe("Graph version — 1 (legacy array) or 2 (node graph). Default 1"),
         schedule: z.string().optional().describe("5-field cron expression (required if triggerEvent='scheduled')"),
         scheduleTimezone: z.string().optional().describe("IANA timezone for scheduled triggers (e.g. 'America/Los_Angeles')"),
-        triggerConditions: z.any().optional().describe("Conditions that must match for the trigger to fire"),
+        triggerConditions: z
+            .any()
+            .optional()
+            .describe("Conditions that must match for the trigger to fire. Scalar filters like tagId/pipelineId/bookingPageIds, plus per-event config: for 'contact.untouched' pass { untouchedDays: N } (integer 1-365) to fire once per quiet episode when a contact has had no outreach for N+ days — without it the trigger is the minutes-scale speed-to-lead alert. Unknown keys on native events are rejected at create/publish (422)."),
     }, async (params) => {
         const result = await client.post("/api/v1/automations", params);
         return formatResult(result);
@@ -40,6 +43,10 @@ export function registerAutomationTools(server, client) {
         name: z.string().optional().describe("Updated name"),
         description: z.string().optional().describe("Updated description"),
         triggerEvent: z.string().optional().describe("Updated trigger event"),
+        triggerConditions: z
+            .any()
+            .optional()
+            .describe("Updated trigger conditions (replaces the object). Same keys as create — e.g. { untouchedDays: 7 } on 'contact.untouched'. (#16 tri-surface parity: the UI and API could set this; MCP could not.)"),
         isActive: z.boolean().optional().describe("Enable or disable the automation"),
         actions: z.any().optional().describe("Updated actions graph"),
         schedule: z.string().optional().describe("Updated cron schedule"),

package/dist/tools/call-flows.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ConduytClient } from "../client.js";
+export declare function registerCallFlowTools(server: McpServer, client: ConduytClient): void;

package/dist/tools/call-flows.js

@@ -0,0 +1,187 @@
+import { z } from "zod";
+import { formatResult, formatToolError } from "../client.js";
+/**
+ * Call flows (#25 / B11) — the IVR graphs inbound numbers execute — and
+ * ring groups, their companion routing primitive. Both surfaces are
+ * "settings"-scoped at the API-key boundary: grant the key the settings
+ * scope or these tools return 403.
+ *
+ * The flow graph (draftGraph) is a JSON node/edge document; the API is the
+ * single validator (POST /call-flows/:id/validate previews problems, and
+ * publish refuses an invalid graph), so the tools pass it through untyped
+ * and surface the API's structured errors verbatim.
+ */
+/** (p25-mcp-r3) An explicit graph must carry the parseFlowGraph minimum
+ * (string entryId + nodes array): the API silently substitutes a default
+ * entry→voicemail flow for anything unparseable, which a later publish
+ * would put live on the number. Passthrough keeps every nested field. */
+const flowGraphSchema = z
+    .object({ entryId: z.string(), nodes: z.array(z.unknown()) })
+    .passthrough();
+export function registerCallFlowTools(server, client) {
+    server.tool("conduyt_list_call_flows", "List call flows (IVR routing graphs) with their status (draft/published) and attached phone numbers.", {}, async () => {
+        const result = await client.get("/api/v1/call-flows");
+        return formatResult(result);
+    });
+    server.tool("conduyt_get_call_flow", "Get one call flow including its draft and published graphs.", {
+        id: z.string().describe("Call flow UUID"),
+    }, async ({ id }) => {
+        const result = await client.get(`/api/v1/call-flows/${id}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_create_call_flow", "Create a call flow. Starts as a DRAFT — edit the graph, validate, then publish to make it live on its number.", {
+        name: z.string().describe("Flow name"),
+        phoneNumber: z.string().optional().describe("E.164 number this flow answers (must belong to the account)"),
+        draftGraph: flowGraphSchema.optional().describe("Initial flow graph — MUST have a string entryId and a nodes array (anything else is silently replaced by a default voicemail flow server-side). Node kinds: entry, greeting, agent, group (queue: holdSeconds/pressOneVoicemail/repeatRing = queue mode), menu (options[{digit,label,next}], next = no-choice path), timing (hours[{day,start,end}], timezone, next = during hours, closedNext = outside hours), voicemail, forward, hangup. Every branch must reach an ending — publish refuses otherwise."),
+    }, async (params) => {
+        const result = await client.post("/api/v1/call-flows", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_update_call_flow", "Update a call flow's DRAFT (name, number, graph). Published behavior does not change until the next publish. Replacing draftGraph REQUIRES expectedDraftRevision (the API 428s without it; a concurrent graph edit then 409s instead of being overwritten — the token is graph-specific, so live calls and publish never invalidate it).", {
+        id: z.string().describe("Call flow UUID"),
+        name: z.string().optional().describe("New name"),
+        phoneNumber: z.string().optional().describe("New E.164 number"),
+        draftGraph: flowGraphSchema.optional().describe("Replacement draft graph — MUST have a string entryId and a nodes array; REQUIRES expectedDraftRevision. Kinds: entry, greeting, agent, group (queue.repeatRing = queue mode), menu (options[{digit,label,next}]), timing (hours, timezone, next/closedNext), voicemail, forward, hangup; every branch must reach an ending."),
+        expectedDraftRevision: z.number().int().min(0).optional().describe("draftRevision from your last conduyt_get_call_flow read (REQUIRED when replacing draftGraph)"),
+    }, async ({ id, ...updates }) => {
+        if (updates.draftGraph !== undefined && updates.expectedDraftRevision === undefined) {
+            return formatToolError("Replacing draftGraph requires expectedDraftRevision — call conduyt_get_call_flow first and pass its draftRevision.");
+        }
+        const result = await client.patch(`/api/v1/call-flows/${id}`, updates);
+        return formatResult(result);
+    });
+    server.tool("conduyt_delete_call_flow", "Delete a call flow. A PUBLISHED flow refuses deletion (409) — call conduyt_unpublish_call_flow first.", {
+        id: z.string().describe("Call flow UUID"),
+    }, async ({ id }) => {
+        const result = await client.del(`/api/v1/call-flows/${id}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_validate_call_flow", "Validate a call flow's draft graph WITHOUT publishing — returns structured problems (unreachable nodes, missing targets, etc.).", {
+        id: z.string().describe("Call flow UUID"),
+    }, async ({ id }) => {
+        const result = await client.get(`/api/v1/call-flows/${id}/validate`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_publish_call_flow", "Publish a call flow's draft, making it live on its phone number. Refuses an invalid graph. expectedUpdatedAt is REQUIRED (the API returns 428 without it): read the flow first and pass its updatedAt — a concurrent edit then fails 409 instead of being published over.", {
+        id: z.string().describe("Call flow UUID"),
+        expectedUpdatedAt: z.string().describe("REQUIRED: updatedAt from your last conduyt_get_call_flow read (optimistic concurrency; missing → 428)"),
+    }, async ({ id, expectedUpdatedAt }) => {
+        const result = await client.post(`/api/v1/call-flows/${id}/publish`, { expectedUpdatedAt });
+        return formatResult(result);
+    });
+    server.tool("conduyt_unpublish_call_flow", "Unpublish a call flow — its number stops executing the graph (falls back to default routing).", {
+        id: z.string().describe("Call flow UUID"),
+    }, async ({ id }) => {
+        const result = await client.post(`/api/v1/call-flows/${id}/unpublish`, {});
+        return formatResult(result);
+    });
+    server.tool("conduyt_simulate_call_flow", "Answer \"if someone calls right now, who picks up?\" — simulates the DRAFT graph against LIVE member availability (DIDs, on-call state). No side effects.", {
+        id: z.string().describe("Call flow UUID"),
+    }, async ({ id }) => {
+        const result = await client.post(`/api/v1/call-flows/${id}/simulate`, {});
+        return formatResult(result);
+    });
+    server.tool("conduyt_call_flow_roster", "Get the routing roster: members with DIDs and their live availability — the people call-flow and ring-group steps can ring.", {}, async () => {
+        const result = await client.get("/api/v1/call-flows/roster");
+        return formatResult(result);
+    });
+    server.tool("conduyt_list_ring_groups", "List ring groups (simultaneous/sequential ring sets over member DIDs) with their numbers and members.", {}, async () => {
+        const result = await client.get("/api/v1/ring-groups");
+        return formatResult(result);
+    });
+    server.tool("conduyt_get_ring_group", "Get one ring group.", {
+        id: z.string().describe("Ring group UUID"),
+    }, async ({ id }) => {
+        const result = await client.get(`/api/v1/ring-groups/${id}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_create_ring_group", "Create a ring group on an account number. Without memberIds the group is created INACTIVE.", {
+        name: z.string().describe("Ring group name"),
+        phoneNumber: z.string().describe("REQUIRED: account E.164 number that rings this group"),
+        memberIds: z.array(z.string()).optional().describe("Member user UUIDs (omit → the group is created INACTIVE; memberless groups never ring)"),
+        strategy: z.string().optional().describe("Ring strategy (e.g. simultaneous, sequential)"),
+        ringSeconds: z.number().int().min(5).max(120).optional().describe("Seconds to ring before advancing/failing over (5-120)"),
+        isActive: z.boolean().optional().describe("Whether the group is active"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ring-groups", params);
+        return formatResult(result);
+    });
+    server.tool("conduyt_update_ring_group", "Update a ring group (name, number, members, strategy, ring time, active). Replacing memberIds REQUIRES expectedUpdatedAt (the API 428s without it); passing it on any update makes a concurrent edit 409 instead of being overwritten.", {
+        id: z.string().describe("Ring group UUID"),
+        name: z.string().optional().describe("New name"),
+        phoneNumber: z.string().optional().describe("New E.164 number"),
+        memberIds: z.array(z.string()).optional().describe("Replacement member user UUIDs — REQUIRES expectedUpdatedAt"),
+        strategy: z.string().optional().describe("Ring strategy"),
+        ringSeconds: z.number().int().min(5).max(120).optional().describe("Seconds to ring (5-120)"),
+        isActive: z.boolean().optional().describe("Active flag"),
+        expectedUpdatedAt: z.string().optional().describe("updatedAt from your last conduyt_get_ring_group read (REQUIRED when replacing memberIds)"),
+    }, async ({ id, ...updates }) => {
+        if (updates.memberIds !== undefined && updates.expectedUpdatedAt === undefined) {
+            // (p25-mcp-r2) isError REQUIRED: without it MCP reports success and
+            // the client proceeds although no PATCH occurred.
+            return formatToolError("Replacing memberIds requires expectedUpdatedAt — call conduyt_get_ring_group first and pass its updatedAt.");
+        }
+        const result = await client.patch(`/api/v1/ring-groups/${id}`, updates);
+        return formatResult(result);
+    });
+    server.tool("conduyt_delete_ring_group", "Delete a ring group. Its number keeps ringing default routing afterwards.", {
+        id: z.string().describe("Ring group UUID"),
+    }, async ({ id }) => {
+        const result = await client.del(`/api/v1/ring-groups/${id}`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_release_ring_group_number", "Release a phone number from ring-group routing (DESTRUCTIVE). confirm must be the EXACT phone number repeated as a string. A number still referenced by an ACTIVE ring group cannot be released — delete or repoint that group first; force does NOT bypass it. force exists only for numbers whose Twilio ownership cannot be verified, and then a non-empty forceReason is required.", {
+        phoneNumber: z.string().describe("E.164 number to release"),
+        confirm: z.string().describe("EXACT repetition of phoneNumber (string) — the API rejects anything else"),
+        force: z.boolean().optional().describe("ONLY when Twilio ownership is unverifiable; requires forceReason"),
+        forceReason: z.string().optional().describe("Non-empty justification, required with force"),
+    }, async (params) => {
+        const result = await client.post("/api/v1/ring-groups/release-number", params);
+        return formatResult(result);
+    });
+    // ── Rollout fix 2026-08-24: numbers, Twilio wiring, greeting audio ──────
+    server.tool("conduyt_list_call_flow_numbers", "The voice numbers this workspace owns in Twilio, each with what answers it in Conduyt today (claimedBy: call flow / ring group / main line) and whether its Twilio voice webhook is already wired to Conduyt. Use it to pick a free number for a flow.", {}, async () => {
+        const result = await client.get("/api/v1/call-flows/numbers");
+        return formatResult(result);
+    });
+    server.tool("conduyt_get_call_flow_wiring", "Twilio's truth for a call flow's number: the voice webhook Twilio has right now vs the inboundUrl Conduyt needs, and whether they match (wired). A published flow that is NOT wired does not receive calls.", { id: z.string().describe("Call flow UUID") }, async ({ id }) => {
+        const result = await client.get(`/api/v1/call-flows/${id}/wiring`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_wire_call_flow_number", "Point the flow's number's Twilio voice webhook at Conduyt (the same step publish performs; use it when publish reported wiring.error, or after changing the number in Twilio). Admin. Returns the resulting wiring state.", { id: z.string().describe("Call flow UUID") }, async ({ id }) => {
+        const result = await client.post(`/api/v1/call-flows/${id}/wiring`, {});
+        return formatResult(result);
+    });
+    server.tool("conduyt_release_call_flow_tombstone", "Release a number still held by a deleted call flow's tombstone: restores the number's pre-Conduyt Twilio configuration (verified) and lets the tombstone go. Admin. 404 when no tombstone holds the number; 409 when Conduyt still answers it and no prior configuration is known.", { phoneNumber: z.string().describe("E.164 number held by the tombstone") }, async ({ phoneNumber }) => {
+        const result = await client.post(`/api/v1/call-flows/tombstones/release`, { phoneNumber });
+        return formatResult(result);
+    });
+    server.tool("conduyt_upload_call_flow_audio", "Upload a greeting recording (mp3, wav or m4a, up to 10 MB) for use in a greeting node's audioUrl. Pass the file as base64. Returns { url } — put it on the greeting node via conduyt_update_call_flow.", {
+        filename: z.string().describe("File name with extension, e.g. greeting.mp3"),
+        contentBase64: z.string().describe("The file bytes, base64-encoded"),
+        mimeType: z.string().optional().describe("audio/mpeg | audio/wav | audio/mp4 (inferred from the extension when omitted)"),
+    }, async ({ filename, contentBase64, mimeType }) => {
+        const ext = filename.toLowerCase().split(".").pop() ?? "";
+        const type = mimeType ?? { mp3: "audio/mpeg", wav: "audio/wav", m4a: "audio/mp4" }[ext] ?? "application/octet-stream";
+        let bytes;
+        try {
+            bytes = Buffer.from(contentBase64, "base64");
+        }
+        catch {
+            return formatToolError("contentBase64 is not valid base64");
+        }
+        if (bytes.byteLength === 0)
+            return formatToolError("The file is empty");
+        if (bytes.byteLength > 10 * 1024 * 1024)
+            return formatToolError("The recording exceeds 10 MB");
+        const form = new FormData();
+        form.append("file", new Blob([Uint8Array.from(bytes)], { type }), filename);
+        try {
+            const result = await client.postMultipart("/api/v1/call-flows/audio", form, { timeoutMs: 60_000 });
+            return formatResult(result);
+        }
+        catch (err) {
+            return formatToolError(err.message);
+        }
+    });
+}

package/dist/tools/contacts.js

@@ -51,6 +51,7 @@ export function registerContactTools(server, client) {
         firstName: z.string().optional().describe("First name"),
         lastName: z.string().optional().describe("Last name"),
         phone: z.string().optional().describe("Phone number"),
+        timezone: z.string().optional().describe("IANA timezone of the lead (e.g. America/Chicago). Omit to let Conduyt derive it from ZIP → phone area code → state (the stored contact carries timezone + timezoneSource)."),
         company: z.string().optional().describe("Company name"),
         source: z.string().trim().min(1).max(100).optional().describe("Lead source (e.g. 'website', 'referral', 'import') — FIRST-WRITE-WINS acquisition truth for the lead; later inbound events do not overwrite it. 1-100 chars."),
         masterStatus: z.string().trim().min(1).max(40).optional().describe("Lifecycle status of the LEAD (master record), distinct from any deal's status: 'open' (default), 'won', 'lost', 'abandoned', 'disqualified', or an account-defined custom status. A terminal status (won/lost/abandoned/disqualified) SILENCES all outbound automations for this contact — drips, sequences, and scheduled sends stop. Use conduyt_get_lifecycle_settings to see the account's configured statuses."),
@@ -69,6 +70,7 @@ export function registerContactTools(server, client) {
         firstName: z.string().optional().describe("Updated first name"),
         lastName: z.string().optional().describe("Updated last name"),
         phone: z.string().optional().describe("Updated phone"),
+        timezone: z.string().nullable().optional().describe("IANA timezone override (e.g. America/Denver); pass null to clear the override and re-derive from ZIP → area code → state"),
         company: z.string().optional().describe("Updated company name"),
         source: z.string().trim().min(1).max(100).nullable().optional().describe("Correct the lead's first-touch source (normally first-write-wins and set at creation — update only to FIX bad attribution). Pass null to clear."),
         masterStatus: z.string().trim().min(1).max(40).optional().describe("Lifecycle status of the LEAD (master record), distinct from any deal's status: 'open' (default), 'won', 'lost', 'abandoned', 'disqualified', or an account-defined custom status. A terminal status (won/lost/abandoned/disqualified) SILENCES all outbound automations for this contact — drips, sequences, and scheduled sends stop. Use conduyt_get_lifecycle_settings to see the account's configured statuses."),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.20.0",
+  "version": "4.22.0",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",
   "main": "dist/index.js",

package/scripts/coverage-manifest.json

@@ -506,14 +506,14 @@
       "reason": "automation-folder organization (shipped 2026-08) \u2014 agent-relevant workflow housekeeping; typed tools wanted"
     },
     {
-      "match": "/api/v1/call-flows",
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) \u2014 agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "match": "POST /api/v1/call-flows/audio",
+      "status": "excluded",
+      "reason": "multipart file upload (IVR audio) - not expressible as a text MCP tool; agents reference existing audio by id from conduyt_get_call_flow"
     },
     {
-      "match": "/api/v1/ring-groups",
+      "match": "GET /api/v1/ops/capacity",
       "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) \u2014 agent-relevant; typed tools with the call-flow set"
+      "reason": "operator capacity dashboard (#51, shipped 2026-09) \u2014 read-only queue/park telemetry; a typed conduyt_capacity_snapshot tool is agent-relevant for throughput questions"
     }
   ]
-}
+}

package/scripts/coverage-matrix.json

@@ -1,11 +1,11 @@
 {
-  "generatedAt": "2026-08-22T18:59:24.922Z",
-  "toolCount": 173,
-  "totalEndpoints": 872,
+  "generatedAt": "2026-09-02T06:05:57.360Z",
+  "toolCount": 194,
+  "totalEndpoints": 883,
   "counts": {
-    "covered": 161,
-    "excluded": 255,
-    "planned": 456,
+    "covered": 181,
+    "excluded": 261,
+    "planned": 441,
     "uncategorized": 0
   },
   "matrix": {
@@ -991,48 +991,92 @@
       "reason": "calendar/booking management beyond current appointment tools"
     },
     "GET /api/v1/call-flows": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_list_call_flows"
+      ]
     },
     "POST /api/v1/call-flows": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_create_call_flow"
+      ]
     },
     "GET /api/v1/call-flows/:id": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_get_call_flow"
+      ]
     },
     "PATCH /api/v1/call-flows/:id": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_update_call_flow"
+      ]
     },
     "DELETE /api/v1/call-flows/:id": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_delete_call_flow"
+      ]
     },
     "POST /api/v1/call-flows/:id/publish": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_publish_call_flow"
+      ]
     },
     "POST /api/v1/call-flows/:id/simulate": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_simulate_call_flow"
+      ]
     },
     "POST /api/v1/call-flows/:id/unpublish": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_unpublish_call_flow"
+      ]
     },
     "GET /api/v1/call-flows/:id/validate": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_validate_call_flow"
+      ]
+    },
+    "GET /api/v1/call-flows/:id/wiring": {
+      "status": "covered",
+      "tools": [
+        "conduyt_get_call_flow_wiring"
+      ]
+    },
+    "POST /api/v1/call-flows/:id/wiring": {
+      "status": "covered",
+      "tools": [
+        "conduyt_wire_call_flow_number"
+      ]
     },
     "POST /api/v1/call-flows/audio": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "excluded",
+      "reason": "multipart file upload (IVR audio) - not expressible as a text MCP tool; agents reference existing audio by id from conduyt_get_call_flow"
+    },
+    "GET /api/v1/call-flows/numbers": {
+      "status": "covered",
+      "tools": [
+        "conduyt_list_call_flow_numbers"
+      ]
     },
     "GET /api/v1/call-flows/roster": {
-      "status": "planned",
-      "reason": "call-flow builder API (shipped 2026-08-21) — agent-relevant; typed tools follow once the canvas UI (#25) settles the surface"
+      "status": "covered",
+      "tools": [
+        "conduyt_call_flow_roster"
+      ]
+    },
+    "POST /api/v1/call-flows/tombstones/release": {
+      "status": "covered",
+      "tools": [
+        "conduyt_release_call_flow_tombstone"
+      ]
     },
     "GET /api/v1/calls": {
       "status": "covered",
@@ -1397,6 +1441,14 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/capacity-monitor": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
+    "POST /api/v1/cron/capacity-monitor": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/capture-rfc-ids": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -1541,6 +1593,14 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/process-unattended-leads": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
+    "GET /api/v1/cron/process-wake-jobs": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/prune-screen-share-sessions": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -1577,6 +1637,10 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/reconcile-voice-releases": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/recover-booking-side-effects": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -1779,6 +1843,10 @@
       "status": "planned",
       "reason": "deal subroutes beyond core CRUD (history, files, links)"
     },
+    "GET /api/v1/deals/:id/handoff-files/:fileId/download": {
+      "status": "planned",
+      "reason": "deal subroutes beyond core CRUD (history, files, links)"
+    },
     "GET /api/v1/deals/:id/history": {
       "status": "planned",
       "reason": "deal subroutes beyond core CRUD (history, files, links)"
@@ -2665,6 +2733,10 @@
       "status": "planned",
       "reason": "notification surfaces"
     },
+    "GET /api/v1/ops/capacity": {
+      "status": "planned",
+      "reason": "operator capacity dashboard (#51, shipped 2026-09) — read-only queue/park telemetry; a typed conduyt_capacity_snapshot tool is agent-relevant for throughput questions"
+    },
     "GET /api/v1/phone-numbers": {
       "status": "planned",
       "reason": "phone number inventory"
@@ -3030,28 +3102,40 @@
       "reason": "additional report surfaces beyond ai/insights"
     },
     "GET /api/v1/ring-groups": {
-      "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) — agent-relevant; typed tools with the call-flow set"
+      "status": "covered",
+      "tools": [
+        "conduyt_list_ring_groups"
+      ]
     },
     "POST /api/v1/ring-groups": {
-      "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) — agent-relevant; typed tools with the call-flow set"
+      "status": "covered",
+      "tools": [
+        "conduyt_create_ring_group"
+      ]
     },
     "GET /api/v1/ring-groups/:id": {
-      "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) — agent-relevant; typed tools with the call-flow set"
+      "status": "covered",
+      "tools": [
+        "conduyt_get_ring_group"
+      ]
     },
     "PATCH /api/v1/ring-groups/:id": {
-      "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) — agent-relevant; typed tools with the call-flow set"
+      "status": "covered",
+      "tools": [
+        "conduyt_update_ring_group"
+      ]
     },
     "DELETE /api/v1/ring-groups/:id": {
-      "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) — agent-relevant; typed tools with the call-flow set"
+      "status": "covered",
+      "tools": [
+        "conduyt_delete_ring_group"
+      ]
     },
     "POST /api/v1/ring-groups/release-number": {
-      "status": "planned",
-      "reason": "ring-group management (call-flows companion, shipped 2026-08-21) — agent-relevant; typed tools with the call-flow set"
+      "status": "covered",
+      "tools": [
+        "conduyt_release_ring_group_number"
+      ]
     },
     "GET /api/v1/saved-filters": {
       "status": "planned",