conduyt-mcp 4.76.0 → 4.77.0

package/README.md

@@ -17,7 +17,9 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | `conduyt_list_contacts` | List and search contacts with filters |
 | `conduyt_get_contact` | Get full contact details with timeline |
 | `conduyt_create_contact` | Create a new contact |
-| `conduyt_update_contact` | Update contact fields |
+| `conduyt_update_contact` | Update contact fields; optional `expectedRevision` (0..2147483647) refuses a stale save with 409 `contact_changed` (code + current revision in the error) |
+| `conduyt_add_contact_collaborator` | Add a team member as a collaborator (`POST /contacts/{id}/collaborators`); optional `expectedRevision`, 409 `contact_changed` |
+| `conduyt_remove_contact_collaborator` | Remove a collaborator (`DELETE /contacts/{id}/collaborators`, body); optional `expectedRevision`, 409 `contact_changed`, 404 when not a collaborator |
 | `conduyt_add_tags` | Add tags to a contact |
 
 ### Deals

package/dist/client.d.ts

@@ -60,7 +60,8 @@ export declare class ConduytClient {
     postText(path: string, body: unknown, opts?: RequestOptions): Promise<string>;
     patch(path: string, body: unknown, opts?: RequestOptions): Promise<unknown>;
     put(path: string, body: unknown, opts?: RequestOptions): Promise<unknown>;
-    del(path: string, opts?: RequestOptions): Promise<unknown>;
+    /** `body` is for the few DELETE routes that take one (contact collaborators with an expectedRevision pin). */
+    del(path: string, opts?: RequestOptions, body?: unknown): Promise<unknown>;
 }
 export declare function formatResult(data: unknown): {
     content: Array<{

package/dist/client.js

@@ -171,7 +171,14 @@ export class ConduytClient {
             // lostReasonOptions) must reach the agent, or a "must be one of the
             // configured options" error is unactionable. Bounded so a pathological
             // body can't bloat the message.
-            const details = Object.fromEntries(Object.entries(json ?? {}).filter(([k]) => k !== "error"));
+            // Scalars first (code, revision), nested objects last (a 409 contact_changed carries the whole current
+            // `contact`): the bound below may cut a large object, never the code or the current revision.
+            const isScalar = (v) => v === null || typeof v !== "object";
+            const entries = Object.entries(json ?? {}).filter(([k]) => k !== "error");
+            const details = Object.fromEntries([
+                ...entries.filter(([, v]) => isScalar(v)),
+                ...entries.filter(([, v]) => !isScalar(v)),
+            ]);
             if (Object.keys(details).length > 0) {
                 msg = `${msg} ${JSON.stringify(details).slice(0, 1000)}`;
             }
@@ -293,8 +300,9 @@ export class ConduytClient {
     put(path, body, opts) {
         return this.request("PUT", path, body, opts);
     }
-    del(path, opts) {
-        return this.request("DELETE", path, undefined, opts);
+    /** `body` is for the few DELETE routes that take one (contact collaborators with an expectedRevision pin). */
+    del(path, opts, body) {
+        return this.request("DELETE", path, body, opts);
     }
 }
 export function formatResult(data) {

package/dist/tools/contacts.d.ts

@@ -1,3 +1,5 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ConduytClient } from "../client.js";
+/** The contact save revision pin (catalog bounds: integer 0..2147483647). */
+export declare const CONTACT_REVISION_MAX = 2147483647;
 export declare function registerContactTools(server: McpServer, client: ConduytClient): void;

package/dist/tools/contacts.js

@@ -1,5 +1,10 @@
 import { z } from "zod";
 import { formatResult } from "../client.js";
+import { strictInput } from "./strict.js";
+/** The contact save revision pin (catalog bounds: integer 0..2147483647). */
+export const CONTACT_REVISION_MAX = 2147483647;
+const CONTACT_CHANGED = "A stale pin is refused with 409 and code contact_changed (nothing written): the error text carries `code`, the contact's CURRENT `revision` and the current `contact`; reload, decide, and call again with that revision (never retry the same pin). A malformed expectedRevision is a 400; only an omitted field means unpinned.";
+const expectedRevision = () => z.number().int().min(0).max(CONTACT_REVISION_MAX).optional().describe("Optimistic-concurrency pin: the contact `revision` as you last read it (conduyt_get_contact / conduyt_list_contacts / a previous change). Omit for last-write-wins per field.");
 /**
  * Accept BOTH the canonical `customFields` and the REST-style `custom_fields`
  * spelling and return the canonical value to send to the API. The MCP SDK
@@ -16,7 +21,7 @@ function resolveCustomFields(camel, snake) {
     return camel !== undefined ? camel : snake;
 }
 export function registerContactTools(server, client) {
-    server.tool("conduyt_list_contacts", "List and search contacts with filtering. Returns paginated results with name, email, phone, tags, source, and assignee.", {
+    server.tool("conduyt_list_contacts", "List and search contacts with filtering. Returns paginated results with name, email, phone, tags, source, and assignee. Each row carries `revision` (integer save revision; pass it back as expectedRevision on conduyt_update_contact or the collaborator tools).", {
         search: z.string().optional().describe("Search by name, email, or phone number"),
         tag: z.string().optional().describe("Filter by tag name"),
         source: z.string().optional().describe("Filter by source (e.g. 'signup', 'import', 'manual')"),
@@ -46,7 +51,7 @@ export function registerContactTools(server, client) {
         const result = await client.get(`/api/v1/contacts?${params}`);
         return formatResult(result);
     });
-    server.tool("conduyt_get_contact", "Get a single contact with full details — profile, tags, custom fields, timeline, deals, and activity history.", {
+    server.tool("conduyt_get_contact", "Get a single contact with full details — profile, tags, custom fields, timeline, deals, and activity history. Includes `revision` (integer save revision): pass it as expectedRevision on conduyt_update_contact or the collaborator tools so a newer change is never overwritten.", {
         id: z.string().describe("Contact UUID"),
     }, async ({ id }) => {
         const result = await client.get(`/api/v1/contacts/${id}`);
@@ -70,7 +75,7 @@ export function registerContactTools(server, client) {
         const result = await client.post("/api/v1/contacts", body);
         return formatResult(result);
     });
-    server.tool("conduyt_update_contact", "Update an existing contact's fields — name, email, phone, company, custom fields. customFields merge into existing values (omit a key to leave it unchanged).", {
+    strictInput(server.tool("conduyt_update_contact", "Update an existing contact's fields — name, email, phone, company, custom fields. customFields merge into existing values (omit a key to leave it unchanged). Pass expectedRevision (the contact's `revision` as you read it) to refuse the save when the contact changed since. " + CONTACT_CHANGED, {
         id: z.string().describe("Contact UUID"),
         email: z.string().optional().describe("Updated email"),
         firstName: z.string().optional().describe("Updated first name"),
@@ -82,12 +87,29 @@ export function registerContactTools(server, client) {
         masterStatus: z.string().trim().min(1).max(40).optional().describe("Lifecycle status of the LEAD (master record), distinct from any deal's status: 'open' (default), 'won', 'lost', 'abandoned', 'disqualified', or an account-defined custom status. A terminal status (won/lost/abandoned/disqualified) SILENCES all outbound automations for this contact — drips, sequences, and scheduled sends stop. Use conduyt_get_lifecycle_settings to see the account's configured statuses."),
         customFields: z.record(z.any()).optional().describe("Structured custom-field values to merge, keyed by field key. Omit a key to leave it unchanged."),
         custom_fields: z.record(z.any()).optional().describe("Alias for customFields (snake_case). Provide only one of customFields / custom_fields."),
+        expectedRevision: expectedRevision(),
     }, async ({ id, customFields, custom_fields, ...updates }) => {
         const cf = resolveCustomFields(customFields, custom_fields);
         const body = cf !== undefined ? { ...updates, customFields: cf } : updates;
         const result = await client.patch(`/api/v1/contacts/${id}`, body);
         return formatResult(result);
-    });
+    }));
+    strictInput(server.tool("conduyt_add_contact_collaborator", "Add a team member as a collaborator on a contact (POST /api/v1/contacts/{id}/collaborators; needs edit authority over the contact). Answers { added, revision } where revision is the contact's NEW revision. Pass expectedRevision to refuse the change when the contact changed since you read it. " + CONTACT_CHANGED + " 409 without a code: the user is already a collaborator; 404: no such contact for you or no edit authority; 413: body over 16 KB.", {
+        contactId: z.string().uuid().describe("Contact UUID"),
+        userId: z.string().min(1).describe("The team member to add"),
+        expectedRevision: expectedRevision(),
+    }, async ({ contactId, userId, expectedRevision }) => {
+        const result = await client.post(`/api/v1/contacts/${encodeURIComponent(contactId)}/collaborators`, { userId, expectedRevision });
+        return formatResult(result);
+    }));
+    strictInput(server.tool("conduyt_remove_contact_collaborator", "Remove a collaborator from a contact (DELETE /api/v1/contacts/{id}/collaborators with a body; needs edit authority). Answers { removed, revision } where revision is the contact's NEW revision. Pass expectedRevision to refuse the change when the contact changed since you read it. " + CONTACT_CHANGED + " 404 also when the user is not a collaborator of the contact; 409 without a code: the user is still the assignee of a deal or hosts an appointment on this contact; 413: body over 16 KB.", {
+        contactId: z.string().uuid().describe("Contact UUID"),
+        userId: z.string().min(1).describe("The team member to remove"),
+        expectedRevision: expectedRevision(),
+    }, async ({ contactId, userId, expectedRevision }) => {
+        const result = await client.del(`/api/v1/contacts/${encodeURIComponent(contactId)}/collaborators`, undefined, { userId, expectedRevision });
+        return formatResult(result);
+    }));
     server.tool("conduyt_delete_contact", "Delete a contact by UUID (soft-delete — the contact is removed from lists/searches but the row is retained for audit, and its deals are unaffected). Use this to clean up test or duplicate contacts. There is no undelete endpoint, so treat it as irreversible via the API.", {
         // .uuid() so a malformed id with slashes can't form a different DELETE
         // subroute (e.g. /contacts/:id/tags/:tagId); encode the segment too.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.76.0",
+  "version": "4.77.0",
   "mcpName": "com.conduyt/mcp",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",

package/scripts/coverage-matrix.json

@@ -1,11 +1,11 @@
 {
-  "generatedAt": "2026-10-09T01:29:38.747Z",
-  "toolCount": 328,
+  "generatedAt": "2026-10-09T02:56:11.306Z",
+  "toolCount": 330,
   "totalEndpoints": 1064,
   "counts": {
-    "covered": 294,
+    "covered": 296,
     "excluded": 318,
-    "planned": 452,
+    "planned": 450,
     "uncategorized": 0
   },
   "matrix": {
@@ -1450,12 +1450,16 @@
       "reason": "contact subroutes beyond the core CRUD/search tools"
     },
     "POST /api/v1/contacts/:id/collaborators": {
-      "status": "planned",
-      "reason": "contact subroutes beyond the core CRUD/search tools"
+      "status": "covered",
+      "tools": [
+        "conduyt_add_contact_collaborator"
+      ]
     },
     "DELETE /api/v1/contacts/:id/collaborators": {
-      "status": "planned",
-      "reason": "contact subroutes beyond the core CRUD/search tools"
+      "status": "covered",
+      "tools": [
+        "conduyt_remove_contact_collaborator"
+      ]
     },
     "GET /api/v1/contacts/:id/dnc": {
       "status": "planned",