conduyt-mcp 4.21.0 → 4.22.0

package/dist/client.d.ts

@@ -49,6 +49,9 @@ export declare class ConduytClient {
     request(method: string, path: string, body?: unknown, opts?: RequestOptions): Promise<unknown>;
     requestText(method: string, path: string, body?: unknown, opts?: RequestOptions): Promise<string>;
     get(path: string, opts?: RequestOptions): Promise<unknown>;
+    /** Multipart upload (call-flow greeting audio): same auth, timeouts and
+     *  response bounds as JSON calls; the body is a FormData the caller built. */
+    postMultipart(path: string, form: FormData, opts?: RequestOptions): Promise<unknown>;
     post(path: string, body: unknown, opts?: RequestOptions): Promise<unknown>;
     postText(path: string, body: unknown, opts?: RequestOptions): Promise<string>;
     patch(path: string, body: unknown, opts?: RequestOptions): Promise<unknown>;

package/dist/client.js

@@ -235,6 +235,32 @@ export class ConduytClient {
     get(path, opts) {
         return this.request("GET", path, undefined, opts);
     }
+    /** Multipart upload (call-flow greeting audio): same auth, timeouts and
+     *  response bounds as JSON calls; the body is a FormData the caller built. */
+    async postMultipart(path, form, opts = {}) {
+        const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        const url = `${this.baseUrl}${path}`;
+        let res;
+        try {
+            res = await fetch(url, { method: "POST", headers: { Authorization: `Bearer ${this.apiKey}` }, body: form, signal: AbortSignal.timeout(timeoutMs) });
+        }
+        catch (err) {
+            throw new ConduytApiError({ message: `Conduyt API network error for POST ${path}: ${err?.message ?? String(err)}`, code: err?.name === "TimeoutError" ? "timeout" : "network", retryable: true, cause: err });
+        }
+        const text = await res.text();
+        let json = null;
+        try {
+            json = text ? JSON.parse(text) : null;
+        }
+        catch {
+            json = { raw: text };
+        }
+        if (!res.ok) {
+            const msg = json?.error ?? text.slice(0, 300);
+            throw new ConduytApiError({ message: `Conduyt API ${res.status}: ${msg}`, status: res.status, code: "http", retryable: res.status >= 500 });
+        }
+        return json;
+    }
     post(path, body, opts) {
         return this.request("POST", path, body, opts);
     }

package/dist/tools/automations.js

@@ -30,7 +30,10 @@ export function registerAutomationTools(server, client) {
         graphVersion: z.number().optional().describe("Graph version — 1 (legacy array) or 2 (node graph). Default 1"),
         schedule: z.string().optional().describe("5-field cron expression (required if triggerEvent='scheduled')"),
         scheduleTimezone: z.string().optional().describe("IANA timezone for scheduled triggers (e.g. 'America/Los_Angeles')"),
-        triggerConditions: z.any().optional().describe("Conditions that must match for the trigger to fire"),
+        triggerConditions: z
+            .any()
+            .optional()
+            .describe("Conditions that must match for the trigger to fire. Scalar filters like tagId/pipelineId/bookingPageIds, plus per-event config: for 'contact.untouched' pass { untouchedDays: N } (integer 1-365) to fire once per quiet episode when a contact has had no outreach for N+ days — without it the trigger is the minutes-scale speed-to-lead alert. Unknown keys on native events are rejected at create/publish (422)."),
     }, async (params) => {
         const result = await client.post("/api/v1/automations", params);
         return formatResult(result);
@@ -40,6 +43,10 @@ export function registerAutomationTools(server, client) {
         name: z.string().optional().describe("Updated name"),
         description: z.string().optional().describe("Updated description"),
         triggerEvent: z.string().optional().describe("Updated trigger event"),
+        triggerConditions: z
+            .any()
+            .optional()
+            .describe("Updated trigger conditions (replaces the object). Same keys as create — e.g. { untouchedDays: 7 } on 'contact.untouched'. (#16 tri-surface parity: the UI and API could set this; MCP could not.)"),
         isActive: z.boolean().optional().describe("Enable or disable the automation"),
         actions: z.any().optional().describe("Updated actions graph"),
         schedule: z.string().optional().describe("Updated cron schedule"),

package/dist/tools/call-flows.js

@@ -32,7 +32,7 @@ export function registerCallFlowTools(server, client) {
     server.tool("conduyt_create_call_flow", "Create a call flow. Starts as a DRAFT — edit the graph, validate, then publish to make it live on its number.", {
         name: z.string().describe("Flow name"),
         phoneNumber: z.string().optional().describe("E.164 number this flow answers (must belong to the account)"),
-        draftGraph: flowGraphSchema.optional().describe("Initial flow graph — MUST have a string entryId and a nodes array (anything else is silently replaced by a default voicemail flow server-side)"),
+        draftGraph: flowGraphSchema.optional().describe("Initial flow graph — MUST have a string entryId and a nodes array (anything else is silently replaced by a default voicemail flow server-side). Node kinds: entry, greeting, agent, group (queue: holdSeconds/pressOneVoicemail/repeatRing = queue mode), menu (options[{digit,label,next}], next = no-choice path), timing (hours[{day,start,end}], timezone, next = during hours, closedNext = outside hours), voicemail, forward, hangup. Every branch must reach an ending — publish refuses otherwise."),
     }, async (params) => {
         const result = await client.post("/api/v1/call-flows", params);
         return formatResult(result);
@@ -41,7 +41,7 @@ export function registerCallFlowTools(server, client) {
         id: z.string().describe("Call flow UUID"),
         name: z.string().optional().describe("New name"),
         phoneNumber: z.string().optional().describe("New E.164 number"),
-        draftGraph: flowGraphSchema.optional().describe("Replacement draft graph — MUST have a string entryId and a nodes array; REQUIRES expectedDraftRevision"),
+        draftGraph: flowGraphSchema.optional().describe("Replacement draft graph — MUST have a string entryId and a nodes array; REQUIRES expectedDraftRevision. Kinds: entry, greeting, agent, group (queue.repeatRing = queue mode), menu (options[{digit,label,next}]), timing (hours, timezone, next/closedNext), voicemail, forward, hangup; every branch must reach an ending."),
         expectedDraftRevision: z.number().int().min(0).optional().describe("draftRevision from your last conduyt_get_call_flow read (REQUIRED when replacing draftGraph)"),
     }, async ({ id, ...updates }) => {
         if (updates.draftGraph !== undefined && updates.expectedDraftRevision === undefined) {
@@ -139,4 +139,49 @@ export function registerCallFlowTools(server, client) {
         const result = await client.post("/api/v1/ring-groups/release-number", params);
         return formatResult(result);
     });
+    // ── Rollout fix 2026-08-24: numbers, Twilio wiring, greeting audio ──────
+    server.tool("conduyt_list_call_flow_numbers", "The voice numbers this workspace owns in Twilio, each with what answers it in Conduyt today (claimedBy: call flow / ring group / main line) and whether its Twilio voice webhook is already wired to Conduyt. Use it to pick a free number for a flow.", {}, async () => {
+        const result = await client.get("/api/v1/call-flows/numbers");
+        return formatResult(result);
+    });
+    server.tool("conduyt_get_call_flow_wiring", "Twilio's truth for a call flow's number: the voice webhook Twilio has right now vs the inboundUrl Conduyt needs, and whether they match (wired). A published flow that is NOT wired does not receive calls.", { id: z.string().describe("Call flow UUID") }, async ({ id }) => {
+        const result = await client.get(`/api/v1/call-flows/${id}/wiring`);
+        return formatResult(result);
+    });
+    server.tool("conduyt_wire_call_flow_number", "Point the flow's number's Twilio voice webhook at Conduyt (the same step publish performs; use it when publish reported wiring.error, or after changing the number in Twilio). Admin. Returns the resulting wiring state.", { id: z.string().describe("Call flow UUID") }, async ({ id }) => {
+        const result = await client.post(`/api/v1/call-flows/${id}/wiring`, {});
+        return formatResult(result);
+    });
+    server.tool("conduyt_release_call_flow_tombstone", "Release a number still held by a deleted call flow's tombstone: restores the number's pre-Conduyt Twilio configuration (verified) and lets the tombstone go. Admin. 404 when no tombstone holds the number; 409 when Conduyt still answers it and no prior configuration is known.", { phoneNumber: z.string().describe("E.164 number held by the tombstone") }, async ({ phoneNumber }) => {
+        const result = await client.post(`/api/v1/call-flows/tombstones/release`, { phoneNumber });
+        return formatResult(result);
+    });
+    server.tool("conduyt_upload_call_flow_audio", "Upload a greeting recording (mp3, wav or m4a, up to 10 MB) for use in a greeting node's audioUrl. Pass the file as base64. Returns { url } — put it on the greeting node via conduyt_update_call_flow.", {
+        filename: z.string().describe("File name with extension, e.g. greeting.mp3"),
+        contentBase64: z.string().describe("The file bytes, base64-encoded"),
+        mimeType: z.string().optional().describe("audio/mpeg | audio/wav | audio/mp4 (inferred from the extension when omitted)"),
+    }, async ({ filename, contentBase64, mimeType }) => {
+        const ext = filename.toLowerCase().split(".").pop() ?? "";
+        const type = mimeType ?? { mp3: "audio/mpeg", wav: "audio/wav", m4a: "audio/mp4" }[ext] ?? "application/octet-stream";
+        let bytes;
+        try {
+            bytes = Buffer.from(contentBase64, "base64");
+        }
+        catch {
+            return formatToolError("contentBase64 is not valid base64");
+        }
+        if (bytes.byteLength === 0)
+            return formatToolError("The file is empty");
+        if (bytes.byteLength > 10 * 1024 * 1024)
+            return formatToolError("The recording exceeds 10 MB");
+        const form = new FormData();
+        form.append("file", new Blob([Uint8Array.from(bytes)], { type }), filename);
+        try {
+            const result = await client.postMultipart("/api/v1/call-flows/audio", form, { timeoutMs: 60_000 });
+            return formatResult(result);
+        }
+        catch (err) {
+            return formatToolError(err.message);
+        }
+    });
 }

package/dist/tools/contacts.js

@@ -51,6 +51,7 @@ export function registerContactTools(server, client) {
         firstName: z.string().optional().describe("First name"),
         lastName: z.string().optional().describe("Last name"),
         phone: z.string().optional().describe("Phone number"),
+        timezone: z.string().optional().describe("IANA timezone of the lead (e.g. America/Chicago). Omit to let Conduyt derive it from ZIP → phone area code → state (the stored contact carries timezone + timezoneSource)."),
         company: z.string().optional().describe("Company name"),
         source: z.string().trim().min(1).max(100).optional().describe("Lead source (e.g. 'website', 'referral', 'import') — FIRST-WRITE-WINS acquisition truth for the lead; later inbound events do not overwrite it. 1-100 chars."),
         masterStatus: z.string().trim().min(1).max(40).optional().describe("Lifecycle status of the LEAD (master record), distinct from any deal's status: 'open' (default), 'won', 'lost', 'abandoned', 'disqualified', or an account-defined custom status. A terminal status (won/lost/abandoned/disqualified) SILENCES all outbound automations for this contact — drips, sequences, and scheduled sends stop. Use conduyt_get_lifecycle_settings to see the account's configured statuses."),
@@ -69,6 +70,7 @@ export function registerContactTools(server, client) {
         firstName: z.string().optional().describe("Updated first name"),
         lastName: z.string().optional().describe("Updated last name"),
         phone: z.string().optional().describe("Updated phone"),
+        timezone: z.string().nullable().optional().describe("IANA timezone override (e.g. America/Denver); pass null to clear the override and re-derive from ZIP → area code → state"),
         company: z.string().optional().describe("Updated company name"),
         source: z.string().trim().min(1).max(100).nullable().optional().describe("Correct the lead's first-touch source (normally first-write-wins and set at creation — update only to FIX bad attribution). Pass null to clear."),
         masterStatus: z.string().trim().min(1).max(40).optional().describe("Lifecycle status of the LEAD (master record), distinct from any deal's status: 'open' (default), 'won', 'lost', 'abandoned', 'disqualified', or an account-defined custom status. A terminal status (won/lost/abandoned/disqualified) SILENCES all outbound automations for this contact — drips, sequences, and scheduled sends stop. Use conduyt_get_lifecycle_settings to see the account's configured statuses."),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.21.0",
+  "version": "4.22.0",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",
   "main": "dist/index.js",

package/scripts/coverage-manifest.json

@@ -509,6 +509,11 @@
       "match": "POST /api/v1/call-flows/audio",
       "status": "excluded",
       "reason": "multipart file upload (IVR audio) - not expressible as a text MCP tool; agents reference existing audio by id from conduyt_get_call_flow"
+    },
+    {
+      "match": "GET /api/v1/ops/capacity",
+      "status": "planned",
+      "reason": "operator capacity dashboard (#51, shipped 2026-09) \u2014 read-only queue/park telemetry; a typed conduyt_capacity_snapshot tool is agent-relevant for throughput questions"
     }
   ]
-}
+}

package/scripts/coverage-matrix.json

@@ -1,11 +1,11 @@
 {
-  "generatedAt": "2026-08-23T13:00:42.998Z",
-  "toolCount": 189,
-  "totalEndpoints": 872,
+  "generatedAt": "2026-09-02T06:05:57.360Z",
+  "toolCount": 194,
+  "totalEndpoints": 883,
   "counts": {
-    "covered": 177,
-    "excluded": 256,
-    "planned": 439,
+    "covered": 181,
+    "excluded": 261,
+    "planned": 441,
     "uncategorized": 0
   },
   "matrix": {
@@ -1044,16 +1044,40 @@
         "conduyt_validate_call_flow"
       ]
     },
+    "GET /api/v1/call-flows/:id/wiring": {
+      "status": "covered",
+      "tools": [
+        "conduyt_get_call_flow_wiring"
+      ]
+    },
+    "POST /api/v1/call-flows/:id/wiring": {
+      "status": "covered",
+      "tools": [
+        "conduyt_wire_call_flow_number"
+      ]
+    },
     "POST /api/v1/call-flows/audio": {
       "status": "excluded",
       "reason": "multipart file upload (IVR audio) - not expressible as a text MCP tool; agents reference existing audio by id from conduyt_get_call_flow"
     },
+    "GET /api/v1/call-flows/numbers": {
+      "status": "covered",
+      "tools": [
+        "conduyt_list_call_flow_numbers"
+      ]
+    },
     "GET /api/v1/call-flows/roster": {
       "status": "covered",
       "tools": [
         "conduyt_call_flow_roster"
       ]
     },
+    "POST /api/v1/call-flows/tombstones/release": {
+      "status": "covered",
+      "tools": [
+        "conduyt_release_call_flow_tombstone"
+      ]
+    },
     "GET /api/v1/calls": {
       "status": "covered",
       "tools": [
@@ -1417,6 +1441,14 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/capacity-monitor": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
+    "POST /api/v1/cron/capacity-monitor": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/capture-rfc-ids": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -1561,6 +1593,14 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/process-unattended-leads": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
+    "GET /api/v1/cron/process-wake-jobs": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/prune-screen-share-sessions": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -1597,6 +1637,10 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/reconcile-voice-releases": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/recover-booking-side-effects": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -1799,6 +1843,10 @@
       "status": "planned",
       "reason": "deal subroutes beyond core CRUD (history, files, links)"
     },
+    "GET /api/v1/deals/:id/handoff-files/:fileId/download": {
+      "status": "planned",
+      "reason": "deal subroutes beyond core CRUD (history, files, links)"
+    },
     "GET /api/v1/deals/:id/history": {
       "status": "planned",
       "reason": "deal subroutes beyond core CRUD (history, files, links)"
@@ -2685,6 +2733,10 @@
       "status": "planned",
       "reason": "notification surfaces"
     },
+    "GET /api/v1/ops/capacity": {
+      "status": "planned",
+      "reason": "operator capacity dashboard (#51, shipped 2026-09) — read-only queue/park telemetry; a typed conduyt_capacity_snapshot tool is agent-relevant for throughput questions"
+    },
     "GET /api/v1/phone-numbers": {
       "status": "planned",
       "reason": "phone number inventory"