conduyt-mcp 4.93.0 → 4.94.0

package/README.md

@@ -88,7 +88,7 @@ MCP server for [Conduyt CRM](https://conduyt.app) — expose your CRM as AI-acce
 | Tool | Description |
 |------|-------------|
 | `conduyt_workflow_validate` | Validate a workflow graph without saving — returns errors and warnings |
-| `conduyt_workflow_simulate` | Dry-run a workflow against a real or stub contact — step-by-step trace with compliance and provider checks |
+| `conduyt_workflow_simulate` | Dry-run a workflow against a real or stub contact — step-by-step trace with compliance and provider checks; optional `dealId` (deal occurrence), `companyId` (company occurrence) and `executionId` (replays a stored run, admin or owner only, supplies the company its payload carried) |
 | `conduyt_workflow_promote` | Safely publish a workflow — validates first, refuses if errors exist |
 
 ### Sequences (Email and SMS)

package/dist/tools/workflow-sandbox.js

@@ -24,19 +24,33 @@ export function registerWorkflowSandboxTools(server, client) {
         });
         return formatResult(result);
     });
-    server.tool("conduyt_workflow_simulate", "Dry-run a saved automation against a real or stub contact. Returns a step-by-step trace of what WOULD happen — no messages sent, no tags applied, no side effects. Checks compliance (DNC, opt-outs), provider readiness (SMS/email configured), and condition evaluation. Use this to verify a workflow does what you expect before publishing.", {
+    server.tool("conduyt_workflow_simulate", "Dry-run a saved automation against a real or stub contact. Returns a step-by-step trace of what WOULD happen — no messages sent, no tags applied, no side effects. Checks compliance (DNC, opt-outs), provider readiness (SMS/email configured), and condition evaluation. Use this to verify a workflow does what you expect before publishing. A deal occurrence needs dealId and a company occurrence needs companyId (see those fields). executionId (optional, admin or owner only) replays a stored run of this automation and supplies ONE fact, the company carried by that run's payload; the run must belong to this account and this automation with the same trigger event, contact and deal as the preview, and without executionId on a non-company occurrence the preview is a synthetic sample whose company rules evaluate as unknown/absent, which the response states.", {
         automationId: z.string().describe("Automation UUID to simulate"),
         contactId: z.string().optional().describe("Contact UUID to simulate against. If omitted, uses a stub contact with empty fields."),
-    }, async ({ automationId, contactId }) => {
+        dealId: z.string().optional().describe("The event's deal for a DEAL occurrence (deal.created / stage_changed / won / lost / ...): REQUIRED, 400 without it (the contact's newest deal is never a substitute); must be a deal you can see (deals.view and pipeline visibility), 404 otherwise; refused (400) when the selected occurrence is not a deal event (UUID)"),
+        companyId: z.string().optional().describe("The event's company for a COMPANY occurrence (company.created / updated / stage_changed / deleted / tagged / tag_removed): REQUIRED, 400 without it; needs companies.view, 404 when not found in this account; executionId does not replace it. On any other occurrence it is accepted only when it equals the company carried by the replayed executionId payload, else refused (400). With executionId on a company occurrence it must equal the replayed payload's company (400 otherwise). Company producers carry no contact, so contact filters on such an occurrence are judged as production judges them, without one (UUID)"),
+        executionId: z.string().optional().describe("Optional id of a stored run of THIS automation to replay (admin or owner only). The replay supplies ONE fact: the company carried by that run's stored payload, read the way the live runner reads it; nothing else about the subject comes from the run. The run must belong to this account and this automation, carry the same trigger event as the occurrence being previewed, and the same contact and deal as the preview; otherwise 404 (not found, or a deal run hidden from API keys without the deals scope) or 400 (other event or other subject). Runs that carry a deal are hidden from API keys without the deals scope. On a COMPANY occurrence companyId stays required and executionId does not replace it (it must equal the replayed payload's company). Omitted, on a non-company occurrence: the preview is a synthetic sample, company rules evaluate as unknown/absent, and the response says so (UUID)"),
+    }, async ({ automationId, contactId, dealId, companyId, executionId }) => {
         if (!UUID_RE.test(automationId)) {
             return formatResult({ error: "automationId must be a valid UUID" });
         }
         if (contactId && !UUID_RE.test(contactId)) {
             return formatResult({ error: "contactId must be a valid UUID" });
         }
+        for (const [name, value] of [["dealId", dealId], ["companyId", companyId], ["executionId", executionId]]) {
+            if (value !== undefined && !UUID_RE.test(value)) {
+                return formatResult({ error: `${name} must be a valid UUID` });
+            }
+        }
         const body = {};
         if (contactId)
             body.contactId = contactId;
+        if (dealId !== undefined)
+            body.dealId = dealId;
+        if (companyId !== undefined)
+            body.companyId = companyId;
+        if (executionId !== undefined)
+            body.executionId = executionId;
         const result = await client.post(`/api/v1/automations/${automationId}/dry-run`, body);
         return formatResult(result);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "conduyt-mcp",
-  "version": "4.93.0",
+  "version": "4.94.0",
   "mcpName": "com.conduyt/mcp",
   "description": "MCP server for Conduyt CRM — expose CRM operations as AI-accessible tools",
   "type": "module",

package/scripts/coverage-matrix.json

@@ -1,11 +1,11 @@
 {
-  "generatedAt": "2026-10-16T13:22:04.002Z",
+  "generatedAt": "2026-10-17T19:39:12.198Z",
   "toolCount": 355,
-  "totalEndpoints": 1093,
+  "totalEndpoints": 1096,
   "counts": {
     "covered": 314,
-    "excluded": 324,
-    "planned": 455,
+    "excluded": 326,
+    "planned": 456,
     "uncategorized": 0
   },
   "matrix": {
@@ -1657,10 +1657,18 @@
       "status": "planned",
       "reason": "conversation thread surfaces"
     },
+    "GET /api/v1/cron/analytics-account-sync": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/apply-contact-stamps": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
     },
+    "GET /api/v1/cron/apply-product-signals": {
+      "status": "excluded",
+      "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
+    },
     "GET /api/v1/cron/booking-reminders": {
       "status": "excluded",
       "reason": "CRON_SECRET-gated infrastructure jobs; never key-callable"
@@ -3157,6 +3165,10 @@
         "conduyt_mailchimp_retry_unsubscribes"
       ]
     },
+    "POST /api/v1/integrations/posthog/intent": {
+      "status": "planned",
+      "reason": "integration management"
+    },
     "GET /api/v1/integrations/slack/channels": {
       "status": "planned",
       "reason": "integration management"