conduyt-mcp 4.72.0 → 4.73.0

package/README.md

@@ -1,13 +1,13 @@
 # Conduyt MCP Server
 
-MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 500+ REST endpoints.
+MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-accessible tools. Covers the core CRM surface (contacts, deals, pipelines, custom fields, automations, messaging, and more); use `conduyt_api_catalog` to discover the full set of 600+ REST endpoints.
 
 ## 299 Tools
 
 ### Discovery
 | Tool | Description |
 |------|-------------|
-| `conduyt_api_catalog` | Discover all 500+ API endpoints |
+| `conduyt_api_catalog` | Discover all 600+ API endpoints |
 | `conduyt_check_permissions` | Introspect current API key permissions |
 | `conduyt_search` | Global search across contacts, deals, companies, tasks |
 
@@ -26,7 +26,7 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_list_deals` | List deals by pipeline, stage, or assignee |
 | `conduyt_get_deal` | Get deal details with history, including custom-field values |
 | `conduyt_create_deal` | Create a deal with full attributes — currency (e.g. GBP), probability, priority, expected close date, contact/company, and structured custom-field values |
-| `conduyt_update_deal` | Move stage, change value/currency, set probability or close date, reassign, mark won/lost, or write custom-field values |
+| `conduyt_update_deal` | Move stage, change value/currency, set probability or close date, reassign, mark won/lost, or write custom-field values; optional `expectedUpdatedAt` pins the `updatedAt` you read, and a stale pin returns 409 `deal_changed` with the current `updatedAt` and writes nothing |
 | `conduyt_import_deals` | Bulk-import deals (pipeline/stage by name, contact by email) via the canonical import engine — dedupes, side-effect-free, owner/admin only |
 
 ### Tasks

package/dist/tools/deals.js

@@ -105,7 +105,8 @@ export function registerDealTools(server, client) {
         assignedTo: z.string().optional().describe("Reassign to user (owner) UUID"),
         source: z.string().trim().min(1).max(500).optional().describe("Attribution source for THIS deal (the trigger that produced it) — distinct from the contact's first-touch source. Every deal keeps a source (#129): it can be changed, never cleared (null/blank are rejected). 1-500 chars."),
         lostReason: z.string().optional().describe("Reason for a lost/disqualified deal. Some stages REQUIRE this on entry (the move fails with code STAGE_REQUIREMENTS listing lostReasonOptions when the stage has a configured dropdown — resend with one of those exact values)."),
-        customFields: z.record(z.any()).optional().describe("Structured custom-field values to merge, keyed by field key"),
+        customFields: z.record(z.any()).optional().describe("Structured custom-field values to merge, keyed by field key (send null for a key to clear it; keys you omit keep their current values)"),
+        expectedUpdatedAt: z.string().datetime({ message: "expectedUpdatedAt must be the deal's updatedAt exactly as the API returned it (UTC, trailing Z, e.g. 2026-10-06T23:19:00.000Z)" }).optional().describe("Optional: the deal's updatedAt from your last read, ISO 8601 exactly as returned (e.g. 2026-10-06T23:19:00.000Z). If the deal changed since, the update is refused (409, code deal_changed, with the current updatedAt) and nothing is written — read the deal again and retry. Omit for last-write-wins per field."),
     }, async ({ id, ...updates }) => {
         const result = await client.patch(`/api/v1/deals/${id}`, updates);
         return formatResult(result);

package/dist/tools/sequences.js

@@ -20,7 +20,7 @@ const settingsFields = {
 };
 const uuid = (what) => z.string().uuid().describe(what);
 /** how a run ended (enrollment endedReason), and the run statuses, as GET /emails/sequences/{id}/enrollments answers them */
-const RUN_READING = "Each run carries status (active | paused | completed | failed | cancelled | unsubscribed) and endedReason (completed | replied | meeting | opted_out | bounced | deal_closed | removed; null while the run is live). A paused run with no endedReason is LIVE (the sequence is Off or archived; it resumes when turned On); a paused or cancelled run with an endedReason has ended.";
+const RUN_READING = "Each run carries status (active | paused | completed | failed | cancelled | unsubscribed) and endedReason (completed | replied | meeting | opted_out | bounced | deal_closed | removed | failed | no_phone; null while the run is live). A paused run with no endedReason is LIVE (the sequence is Off or archived; it resumes when turned On); a failed run with no endedReason is ALSO LIVE (an ambiguous send outcome — a timeout, an unknown provider answer — that a late provider acceptance can still revive in place), while failed WITH endedReason \"failed\" is TERMINAL (a definitive worker or repair failure, no revival). no_phone is SMS-only: the run ended because the contact had no usable phone. A paused, failed or cancelled run with an endedReason has ended.";
 const stepSchema = z.object({
     templateId: z.string().uuid().describe("An active template of the sequence's channel (Email Templates or SMS Templates)"),
     waitDays: z.number().int().min(0).optional().describe("Days after the previous step (the first step sends at enrollment)"),
@@ -118,11 +118,18 @@ export function registerSequenceTools(server, client) {
     });
     server.tool("conduyt_list_sequence_enrollments", `List the people in a sequence, newest run first: each run's contact, currentStep, nextSendAt, enrolledAt, completedAt, lastError and engagement (sent, opened, clicked). ${RUN_READING}`, {
         sequenceId: uuid("Sequence UUID"),
-        status: z.enum(["active", "paused", "completed", "failed", "cancelled", "unsubscribed"]).optional().describe("Only runs with this status"),
-        all_active: z.boolean().optional().describe("true = EVERY live run (active, paused with no endedReason, failed with no endedReason) in one answer, no paging and no engagement; refused (422 too_many_live_runs) past 5,000"),
-        page: z.number().optional().describe("Page number (default 1)"),
-        per_page: z.number().optional().describe("Results per page (default 50, max 200)"),
+        status: z.enum(["active", "paused", "completed", "failed", "cancelled", "unsubscribed"]).optional().describe("Only runs with this status. Refused together with all_active=true — see all_active"),
+        all_active: z.boolean().optional().describe("true = EVERY live run (active, paused with no endedReason, failed with no endedReason) in one answer, no paging and no engagement; refused (422 too_many_live_runs) past 5,000. Pass it ALONE: status, page and per_page are refused together with all_active=true, because a status filter or pagination would silently cut the live set a rollback page relies on being complete"),
+        page: z.number().optional().describe("Page number (default 1). Refused together with all_active=true — see all_active"),
+        per_page: z.number().optional().describe("Results per page (default 50, max 200). Refused together with all_active=true — see all_active"),
     }, async ({ sequenceId, status, all_active, page, per_page }) => {
+        // (round 2 Codex finding, high) all_active=true promises the COMPLETE live set. Letting status or pagination
+        // ride along would let the live route intersect them and silently return a subset while the caller believes
+        // it holds every live run (the risk: a rollback/bulk-unenroll agent leaves contacts mid-sequence). Refuse
+        // locally, before any request, rather than letting the subset through.
+        if (all_active && (status !== undefined || page !== undefined || per_page !== undefined)) {
+            throw new Error("all_active=true already returns every live run in one answer — pass it alone. status, page and per_page are refused together with all_active=true because they would cut the set instead of returning the complete one.");
+        }
         const params = new URLSearchParams();
         if (status)
             params.set("status", status);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.72.0",
+  "version": "4.73.0",
   "mcpName": "com.conduyt/mcp",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",

package/scripts/coverage-matrix.json

@@ -1,11 +1,11 @@
 {
-  "generatedAt": "2026-10-02T16:12:21.781Z",
+  "generatedAt": "2026-10-04T13:54:51.239Z",
   "toolCount": 299,
-  "totalEndpoints": 1036,
+  "totalEndpoints": 1043,
   "counts": {
     "covered": 273,
-    "excluded": 313,
-    "planned": 450,
+    "excluded": 317,
+    "planned": 453,
     "uncategorized": 0
   },
   "matrix": {
@@ -189,6 +189,14 @@
       "status": "planned",
       "reason": "invoicing"
     },
+    "POST /api/v1/invoices/:id/overpayments/:overpaymentId/manual-refund": {
+      "status": "planned",
+      "reason": "invoicing"
+    },
+    "POST /api/v1/invoices/:id/overpayments/:overpaymentId/refund": {
+      "status": "planned",
+      "reason": "invoicing"
+    },
     "POST /api/v1/invoices/:id/payment-link": {
       "status": "planned",
       "reason": "invoicing"
@@ -235,6 +243,14 @@
       "status": "excluded",
       "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
     },
+    "GET /api/public/unsubscribe/confirm/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
+    "POST /api/public/unsubscribe/confirm/:token": {
+      "status": "excluded",
+      "reason": "public unauthenticated surfaces (forms, booking, unsubscribe) — no key semantics"
+    },
     "GET /api/track/click/:messageId": {
       "status": "excluded",
       "reason": "email open/click tracking pixels and redirects — recipient-facing"
@@ -1865,6 +1881,14 @@
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/reconcile-overpayment-refunds": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
+    "POST /api/v1/cron/reconcile-overpayment-refunds": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/reconcile-reply-capture": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -2623,6 +2647,10 @@
       "status": "planned",
       "reason": "sending-domain management (reply-capture subpaths ARE covered — see the reply_capture_* tools)"
     },
+    "POST /api/v1/email/opt-out-list/resubscribe": {
+      "status": "planned",
+      "reason": "bulk email send surfaces"
+    },
     "POST /api/v1/email/send": {
       "status": "covered",
       "tools": [