conduyt-mcp 4.54.0 → 4.56.0

package/dist/tools/bulk.js

@@ -115,6 +115,16 @@ export function registerBulkTools(server, client) {
         const result = await client.post("/api/v1/bulk/contacts/delete", params);
         return formatResult(result);
     });
+    server.tool("conduyt_bulk_delete_contacts_matching", "Soft-delete EVERY contact a list filter matches, across pages (#73, 2026-09-15) — the contacts page's \"Select all N matching\" action. FIRST CALL: pass the same filter you would give conduyt_list_contacts (search, tag, tags, source, reachability, company, company_id, assigned_to, created_from/to, updated_from/to, min_score, import_id, smart_view, smartListId, filters JSON, master_status, exclude_master_status, cf[key]) and expectedTotal = the meta.total that filter returned. The server re-counts and refuses when the set moved (409 expected_total_mismatch), refuses when some matching contacts are shared with you but not yours to delete (409 not_all_editable), then FREEZES the matching ids (max 50,000; 422 above) and deletes only those. Contacts with an upcoming appointment are kept (keptWithAppointments). If done=false the response carries remainingIds AND a signed continuation token: CALL AGAIN with ids = remainingIds and continuation = that token, verbatim (no filter, no expectedTotal) until done=true; busy=true means wait a moment first. The token is bound to you, this account and exactly those ids and expires after 2 hours (403 continuation_*); a continuation without it is refused. Empty filters are refused. Requires contacts:delete and an active subscription.", {
+        filter: z.record(z.string(), z.union([z.string(), z.array(z.string())])).optional().describe("First call: the contact list filter parameters, exactly as for conduyt_list_contacts; at least one non-empty value"),
+        expectedTotal: z.number().int().positive().optional().describe("First call: the total the list showed for this filter (meta.total)"),
+        ids: z.array(z.string().uuid()).min(1).max(50_000).optional().describe("Continuation: the remainingIds from the previous response, in the same order (send INSTEAD of filter/expectedTotal)"),
+        continuation: z.string().max(2_000).optional().describe("Continuation: the `continuation` token from the previous response, verbatim (required with ids)"),
+    }, async (params) => {
+        const body = params.ids ? { ids: params.ids, continuation: params.continuation } : { filter: params.filter, expectedTotal: params.expectedTotal };
+        const result = await client.post("/api/v1/bulk/contacts/delete-matching", body);
+        return formatResult(result);
+    });
     server.tool("conduyt_bulk_dnc_contacts", "Add or remove a Do-Not-Contact / litigator mark for many contacts (compliance action). Requires the EXPLICIT 'dnc' API-key scope — an admin must grant it deliberately in Settings > API Keys (an unrestricted key does NOT imply it; without the scope this returns 403). Writes are also bound by contact-ownership rules for limited keys. To CHECK whether a number is already blocked, use conduyt_get_contact (dnc status) or the contacts dnc-status read.", {
         contactIds: z.array(z.string()).describe("Contact UUIDs (those without a phone number are skipped)"),
         action: z.enum(["add", "remove"]).describe("Add or remove the mark"),

package/dist/tools/lifecycle.js

@@ -105,6 +105,23 @@ export function registerLifecycleTools(server, client) {
             .record(z.string().trim().min(1).max(40), z.string().trim().min(1).max(40))
             .describe("Disposition value → master status, the complete map"),
     }, async ({ statusMap }) => patchGeneralSettings(client, { callDispositions: { statusMap } }));
+    server.tool("conduyt_get_agent_statuses", "Read the account's curated dialer agent statuses (2026-09-15): Available, Break, Lunch, Meeting, Training, Offline. Each carries a FIXED basis the dialer runs on (available = takes inbound calls and Smart Dialing hand-outs; break = signed in, not ringable; offline = signed out), the tenant's label, and whether the tenant hid it from the softphone menu. Admins rename or hide with conduyt_update_agent_statuses; Available and Offline can never be hidden. Reports bucket by basis; heartbeats and status logs also carry the chosen code (statusCode).", {}, async () => formatResult(await client.get("/api/v1/dialer/agent-statuses")));
+    server.tool("conduyt_update_agent_statuses", "Rename or hide the curated dialer statuses (settings.agentStatuses). labels: code → the label reps see (1–24 chars; omit a code or pass an empty string to restore the default); hidden: the codes removed from the softphone menu (available and offline are refused with a 422; a rep already on a hidden status keeps it until they change). Codes: available, break, lunch, meeting, training, offline. Fields you omit keep their stored value (the tool reads the current settings first); two visible statuses cannot share a label (422). Requires settings:edit.", {
+        labels: z.record(z.string().trim().min(1).max(24), z.string().trim().max(24)).optional().describe("code → label; '' restores the default label for that code"),
+        hidden: z.array(z.string().trim().min(1).max(24)).max(6).optional().describe("the complete list of hidden codes (replaces the stored list when given)"),
+    }, async ({ labels, hidden }) => {
+        const current = (await client.get("/api/v1/settings"));
+        const stored = current?.data?.agentStatuses ?? {};
+        const nextLabels = { ...(stored.labels ?? {}) };
+        for (const [code, label] of Object.entries(labels ?? {})) {
+            if (label.trim())
+                nextLabels[code] = label.trim();
+            else
+                delete nextLabels[code];
+        }
+        const nextHidden = hidden ?? stored.hidden ?? [];
+        return patchGeneralSettings(client, { agentStatuses: { labels: nextLabels, hidden: nextHidden } });
+    });
     server.tool("conduyt_update_master_statuses", "Set the account's custom lead lifecycle statuses. The five defaults (open, won, lost, abandoned, disqualified) always exist and cannot be removed; this REPLACES the custom list on top of them (max 20 names, 1-40 chars each, letters/numbers/spaces/-/_ only). Terminal statuses stop all outbound automation for a contact. Requires settings:edit.", {
         statuses: z
             .array(masterStatusName)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.54.0",
+  "version": "4.56.0",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",
   "main": "dist/index.js",

package/scripts/coverage-matrix.json

@@ -1,10 +1,10 @@
 {
-  "generatedAt": "2026-09-15T12:51:11.678Z",
-  "toolCount": 261,
-  "totalEndpoints": 974,
+  "generatedAt": "2026-09-15T16:44:24.985Z",
+  "toolCount": 264,
+  "totalEndpoints": 979,
   "counts": {
-    "covered": 245,
-    "excluded": 288,
+    "covered": 247,
+    "excluded": 291,
     "planned": 441,
     "uncategorized": 0
   },
@@ -13,6 +13,14 @@
       "status": "excluded",
       "reason": "unauthenticated liveness probe; trivially reachable without a tool"
     },
+    "GET /api/public/account-emails/unsubscribe/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
+    "POST /api/public/account-emails/unsubscribe/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
     "GET /api/public/appointments/:token": {
       "status": "excluded",
       "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
@@ -864,6 +872,12 @@
         "conduyt_bulk_delete_contacts"
       ]
     },
+    "POST /api/v1/bulk/contacts/delete-matching": {
+      "status": "covered",
+      "tools": [
+        "conduyt_bulk_delete_contacts_matching"
+      ]
+    },
     "POST /api/v1/bulk/contacts/dnc": {
       "status": "covered",
       "tools": [
@@ -1851,6 +1865,10 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/trial-lifecycle-emails": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/up-for-grabs-expire": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -2081,6 +2099,12 @@
       "status": "planned",
       "reason": "deal subroutes beyond core CRUD (history, files, links)"
     },
+    "GET /api/v1/dialer/agent-statuses": {
+      "status": "covered",
+      "tools": [
+        "conduyt_get_agent_statuses"
+      ]
+    },
     "GET /api/v1/dialer/agents-status": {
       "status": "excluded",
       "reason": "realtime browser dialer (WebRTC tokens, live call control) — needs a live audio session"
@@ -3582,7 +3606,8 @@
       "tools": [
         "conduyt_get_contact_table_defaults",
         "conduyt_set_contact_table_defaults",
-        "conduyt_get_lifecycle_settings"
+        "conduyt_get_lifecycle_settings",
+        "conduyt_update_agent_statuses"
       ]
     },
     "PATCH /api/v1/settings": {