@burdenoff/mcp-libs 2026.1008.2 → 2026.1008.4

package/dist/modules/vibecontrols/index.js

@@ -1,6 +1,6 @@
 import { LIST_AGENTS, GET_AGENT, CREATE_AGENT, UPDATE_AGENT, DELETE_AGENT, PROBE_AGENT_CONNECTION, AGENT_HEALTH_PROBES, AGENT_PLUGINS, INSTALL_AGENT_PLUGIN, REMOVE_AGENT_PLUGIN, LIST_VIBES, GET_VIBE, CREATE_VIBE, UPDATE_VIBE, DELETE_VIBE, UPDATE_VIBE_STATUS, ARCHIVE_VIBE, RESTORE_VIBE, VIBE_HIERARCHY, SEARCH_VIBES, MOVE_VIBE, UPDATE_VIBE_GIT, LIST_SESSIONS, GET_SESSION, CREATE_SESSION, START_SESSION, STOP_SESSION, RESTART_SESSION, TERMINATE_SESSION, SEND_SESSION_INPUT, START_SESSION_TERMINAL, SESSION_OUTPUT, ACTIVE_SESSIONS, CHECK_SESSION_HEALTH, BULK_RESTART_SESSIONS, BULK_STOP_SESSIONS, BULK_TERMINATE_SESSIONS, UPDATE_SESSION, UPDATE_SESSION_STATUS, DELETE_SESSION, KILL_SESSION, STOP_SESSION_TERMINAL, RESTART_SESSION_TERMINAL, START_TARGET_TERMINAL, STOP_TARGET_TERMINAL, EXPORT_SESSIONS, LIST_NOTES, GET_NOTE, CREATE_NOTE, UPDATE_NOTE, DELETE_NOTE, SEARCH_NOTES, PIN_NOTE, UNPIN_NOTE, LIST_CONFIGURATIONS, GET_CONFIGURATION, SET_CONFIGURATION, DELETE_CONFIGURATION, CONFIGURATIONS_BY_SCOPE, SECURITY_PROVIDERS_Q, SET_SECURITY_PROVIDER_M, MY_SECURITY_SCANS_Q, ALL_SECURITY_SCANS_Q, SECURITY_SCAN_Q, RUN_SECURITY_SCAN_M, CANCEL_SECURITY_SCAN_M, SECURITY_FINDINGS_Q, UPDATE_SECURITY_FINDING_STATUS_M, SECURITY_POLICY_DECISION_Q, SECURITY_STATUS_Q, REPOSITORY_SECURITY_CONFIG_Q, UPDATE_REPOSITORY_SECURITY_CONFIG_M, CREATE_SECURITY_EXCEPTION_M, REVOKE_SECURITY_EXCEPTION_M, PRESIGN_SECURITY_EVIDENCE_M, PUSH_SECURITY_SCAN_RUN_M, GET_CI_STATUS_Q, REFRESH_CI_STATUS_M, GET_CI_PIPELINE_RUNS_Q, GET_CI_PIPELINE_DETAILS_Q, GET_REPO_STATS_Q, REFRESH_REPO_STATS_M, LIST_GITOPS_PROVIDERS_Q, GET_GITOPS_PROVIDER_Q, CREATE_GITOPS_PROVIDER_M, UPDATE_GITOPS_PROVIDER_M, DELETE_GITOPS_PROVIDER_M, MY_SETTINGS_Q, MY_SETTINGS_BY_CATEGORY_Q, RESET_SETTINGS_M, UPDATE_PREFERENCES_M, UPDATE_NOTIFICATION_PREFERENCES_M, UPDATE_WORKSPACE_DEFAULTS_M, LIST_SETTINGS_SECRETS_Q, SET_SETTINGS_SECRET_M, DELETE_SETTINGS_SECRET_M, RESOLVE_INTEGRATION_TOKEN_M, LIST_WEBHOOKS, GET_WEBHOOK, CREATE_WEBHOOK, UPDATE_WEBHOOK, DELETE_WEBHOOK, TEST_WEBHOOK, TRIGGER_WEBHOOK, GET_UI_SESSION, SAVE_UI_SESSION, CLEAR_UI_SESSION, LIST_AI_TOOL_EVENTS, CREATE_AI_TOOL_EVENT, RECENT_AI_TOOL_EVENTS, LIST_TARGETS, GET_TARGET, CREATE_TARGET, UPDATE_TARGET, DELETE_TARGET, TEST_TARGET, IMPORT_TARGETS_FROM_CONFIG, SCAN_SSH_CONFIG, INSTALL_AGENT_ON_TARGET, LIST_VIBEDECKS, GET_VIBEDECK, CREATE_VIBEDECK, UPDATE_VIBEDECK, DELETE_VIBEDECK, DUPLICATE_VIBEDECK, SET_DEFAULT_VIBEDECK, LIST_VIBEDECK_BUTTONS, CREATE_VIBEDECK_BUTTON, UPDATE_VIBEDECK_BUTTON, DELETE_VIBEDECK_BUTTON, EXECUTE_VIBEDECK_BUTTON, LIST_DOCS_SITES, GET_DOCS_SITE, CREATE_DOCS_SITE, UPDATE_DOCS_SITE, DELETE_DOCS_SITE, LIST_DOCS_PAGES, GET_DOCS_PAGE, CREATE_DOCS_PAGE, UPDATE_DOCS_PAGE, DELETE_DOCS_PAGE, COMPILE_DOCS_SITE, PUBLISH_DOCS_REVISION, ROLLBACK_DOCS_REVISION, SHARE_SESSION, CREATE_SESSION_SHARE_LINK, REVOKE_SESSION_SHARE, REVOKE_SESSION_SHARE_LINK, SESSION_SHARES, SESSION_SHARE_LINKS, SESSION_COLLABORATORS, SESSIONS_SHARED_WITH_ME, UPDATE_SESSION_SHARE, JOIN_SHARED_SESSION, LEAVE_SHARED_SESSION, REQUEST_SESSION_CONTROL, RELEASE_SESSION_CONTROL, TRANSFER_SESSION_CONTROL, LIST_AUDIT_LOGS, GET_AUDIT_LOG, AUDIT_LOG_STATS, EXPORT_AUDIT_LOGS, DELETE_AUDIT_LOG, LIST_ACTIONS, GET_ACTION, CREATE_ACTION, UPDATE_ACTION, DELETE_ACTION, EXECUTE_ACTION, LIST_ACTION_EXECUTIONS, DUPLICATE_ACTION, INSTALL_ACTION_FROM_STORE, CANCEL_ACTION_EXECUTION, CREATE_SCHEDULED_JOB, DELETE_SCHEDULED_JOB, LIST_SCHEDULED_JOBS, LIST_AI_PROMPTS, GET_AI_PROMPT, CREATE_AI_PROMPT, UPDATE_AI_PROMPT, DELETE_AI_PROMPT, DUPLICATE_AI_PROMPT, RENDER_AI_PROMPT, RECORD_AI_PROMPT_USAGE, LIST_VIBE_DECK_SHARE_LINKS, CREATE_VIBE_DECK_SHARE_LINK, UPDATE_VIBE_DECK_SHARE_LINK, REVOKE_VIBE_DECK_SHARE_LINK, VALIDATE_VIBE_DECK_SHARE_LINK, SHARED_VIBE_DECK, EXECUTE_SHARED_VIBE_DECK_BUTTON, VIBECONTROLS_ANALYTICS, LIST_CATALOGS, GET_CATALOG, GET_CATALOG_DEPENDENCY_GRAPH, GET_CATALOG_SBOM, CREATE_CATALOG, UPDATE_CATALOG, DELETE_CATALOG, ADD_COMPONENT_TO_CATALOG, REMOVE_COMPONENT_FROM_CATALOG, ADD_VIBE_TO_CATALOG, REMOVE_VIBE_FROM_CATALOG, LIST_COMPONENTS, GET_COMPONENT, CREATE_COMPONENT, UPDATE_COMPONENT, DELETE_COMPONENT, FORK_GITHUB_REPO, PUBLISH_COMPONENT_AS_TEMPLATE, LIST_TEMPLATES, GET_TEMPLATE, UPDATE_TEMPLATE, DELETE_TEMPLATE, INSTANTIATE_TEMPLATE, GET_SCORECARD, UPSERT_SCORECARD, ADD_SCORECARD_METRIC, UPDATE_SCORECARD_METRIC, REMOVE_SCORECARD_METRIC, LIST_TUNNELS, PINNED_NOTES, GET_TUNNEL, GET_TUNNEL_BY_SLUG, CREATE_TUNNEL, UPDATE_TUNNEL, DELETE_TUNNEL, START_TUNNEL, STOP_TUNNEL, ROTATE_TUNNEL_CREDENTIALS, ISSUE_TUNNEL_SESSION, REVOKE_TUNNEL_SESSION, LIST_TUNNEL_SESSIONS, LIST_TUNNEL_PROVIDERS, GET_TUNNEL_PROVIDER, LIST_TUNNEL_SHARDS, TUNNEL_USAGE, TUNNEL_AUDIT, LIST_TUNNEL_DOMAINS, GET_TUNNEL_DOMAIN, RESERVE_TUNNEL_SUBDOMAIN, REGISTER_CUSTOM_TUNNEL_DOMAIN, VERIFY_TUNNEL_DOMAIN, ATTACH_TUNNEL_DOMAIN, DETACH_TUNNEL_DOMAIN, DELETE_TUNNEL_DOMAIN, PROBE_AGENT_TUNNEL, ADD_AGENT_FROM_TUNNEL, LIST_SANDBOXES, GET_SANDBOX, CREATE_SANDBOX, DELETE_SANDBOX, START_SANDBOX, STOP_SANDBOX, EXTEND_SANDBOX_TTL, GET_SANDBOX_CONFIG, UPDATE_SANDBOX_CONFIG, GET_SANDBOX_STATS, GET_SANDBOX_LOGS, TAG_SANDBOX, UNTAG_SANDBOX, GET_SANDBOX_TAGS, REPLACE_SANDBOX_TAGS, CREATE_SANDBOX_TAG, AVAILABLE_SANDBOX_TAGS, LIST_SANDBOX_TEMPLATES, GET_SANDBOX_TEMPLATE, CREATE_SANDBOX_TEMPLATE, UPDATE_SANDBOX_TEMPLATE, DELETE_SANDBOX_TEMPLATE, EXPORT_SANDBOXES, GET_SANDBOX_EXPORT_JOB, LIST_SANDBOX_EXPORT_JOBS, GET_SANDBOX_ARTIFACT_BYTES, GET_ACTIVE_SANDBOXES, GET_RECENT_SANDBOX_ACTIVITY, LIST_ALL_SANDBOXES, LIST_SANDBOX_NODES, PROXY_SANDBOX_REQUEST } from '../../chunk-XITZQYB2.js';
-import { getAuth } from '../../chunk-QQYJVKJE.js';
-import { mcpToolName, jsonResult, errorResult } from '../../chunk-BSNL65PZ.js';
+import { getAuth } from '../../chunk-SX6IGKZH.js';
+import { mcpToolName, jsonResult, errorResult } from '../../chunk-G76DKEPI.js';
 import { z } from 'zod';
 
 function registerActionTools(server, ctx, track) {

package/dist/modules/workspaces/index.cjs

@@ -63,7 +63,7 @@ var LIST_WORKSPACES = `
 var GET_WORKSPACE = `
   query GetWorkspace($id: ID!) {
     workspace(id: $id) {
-      id name slug description tenantId organizationId status createdAt updatedAt
+      id name slug status createdAt updatedAt
     }
   }
 `;
@@ -77,19 +77,14 @@ var CREATE_WORKSPACE = `
 var UPDATE_WORKSPACE = `
   mutation UpdateWorkspace($id: ID!, $input: UpdateWorkspaceInput!) {
     updateWorkspace(id: $id, input: $input) {
-      id name description status updatedAt
+      id name status updatedAt
     }
   }
 `;
-var DELETE_WORKSPACE = `
-  mutation DeleteWorkspace($id: ID!) {
-    deleteWorkspace(id: $id)
-  }
-`;
 var LIST_WORKSPACE_MEMBERS = `
   query ListWorkspaceMembers($workspaceId: ID!, $pagination: PaginationInput) {
     workspaceMembers(workspaceId: $workspaceId, pagination: $pagination) {
-      items { id userId email role status joinedAt }
+      items { id userId role joinedAt }
       total hasMore
     }
   }
@@ -97,58 +92,22 @@ var LIST_WORKSPACE_MEMBERS = `
 var ADD_WORKSPACE_MEMBER = `
   mutation AddWorkspaceMember($input: AddWorkspaceMemberInput!) {
     addWorkspaceMember(input: $input) {
-      id userId role status
+      id userId role
     }
   }
 `;
 var REMOVE_WORKSPACE_MEMBER = `
-  mutation RemoveWorkspaceMember($id: ID!) {
-    removeWorkspaceMember(id: $id)
+  mutation RemoveWorkspaceMember($workspaceId: String!, $userId: String!) {
+    removeWorkspaceMember(workspaceId: $workspaceId, userId: $userId)
   }
 `;
 var UPDATE_WORKSPACE_MEMBER_ROLES = `
-  mutation UpdateWorkspaceMemberRoles($input: UpdateWorkspaceMemberRolesInput!) {
-    updateWorkspaceMemberRoles(input: $input) {
+  mutation UpdateWorkspaceMemberRoles($workspaceId: String!, $userId: String!, $input: UpdateWorkspaceMemberInput!) {
+    updateWorkspaceMember(workspaceId: $workspaceId, userId: $userId, input: $input) {
       id userId role
     }
   }
 `;
-var LIST_PROJECTS = `
-  query ListProjects($filter: ProjectFilterInput, $pagination: PaginationInput) {
-    projects(filter: $filter, pagination: $pagination) {
-      items { id name workspaceId status createdAt }
-      total hasMore
-    }
-  }
-`;
-var GET_PROJECT = `
-  query GetProject($id: ID!) {
-    project(id: $id) {
-      id name description workspaceId status createdAt updatedAt
-    }
-  }
-`;
-var CREATE_PROJECT = `
-  mutation CreateProject($input: CreateProjectInput!) {
-    createProject(input: $input) {
-      id name workspaceId status
-    }
-  }
-`;
-var ACCEPT_INVITATION = `
-  mutation AcceptInvitation($id: ID!) {
-    acceptInvitation(id: $id) {
-      id status workspaceId
-    }
-  }
-`;
-var WORKSPACE_ACTIVITY = `
-  query WorkspaceActivity($workspaceId: ID!, $limit: Int, $offset: Int) {
-    getWorkspaceActivities(workspaceId: $workspaceId, limit: $limit, offset: $offset) {
-      id action actorId summary createdAt
-    }
-  }
-`;
 
 // src/modules/workspaces/tools.ts
 var RoleEnum = zod.z.enum(["MEMBER", "ADMIN", "OWNER"]);
@@ -248,21 +207,22 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_create")),
     {
       title: "Create Workspace",
-      description: "Create a workspace (global layer).",
+      description: "Create a workspace (global layer). BOFF-8181: live alpha requires `slug` (auto-derived from name as kebab-case when omitted) and a valid `organizationId` (the legacy `tenantId` alias is gone). The MCP tool auto-fills `organizationId` from the actor's auth context \u2014 call without it unless you have a specific override.",
       inputSchema: {
         name: zod.z.string().describe("Workspace name"),
+        slug: zod.z.string().optional().describe("URL slug (auto-derived from name as kebab-case when omitted)"),
         description: zod.z.string().optional().describe("Workspace description"),
-        tenantId: zod.z.string().optional().describe("Target tenant id"),
-        organizationId: zod.z.string().optional().describe("Owning organization id"),
-        slug: zod.z.string().optional().describe("URL-friendly slug")
+        organizationId: zod.z.string().optional().describe(
+          "Owning organization id (defaults to the actor's organization from the access token)"
+        )
       }
     },
-    async ({ name, description, tenantId, organizationId, slug }) => {
+    async ({ name, description, organizationId, slug }) => {
       try {
         const input = { name };
         if (description !== void 0) input.description = description;
-        if (tenantId !== void 0) input.tenantId = tenantId;
-        if (organizationId !== void 0) input.organizationId = organizationId;
+        const orgId = organizationId ?? ctx.auth.read()?.organizationId;
+        if (orgId) input.organizationId = orgId;
         if (slug !== void 0) input.slug = slug;
         const data = await ctx.gql.global.request(
           CREATE_WORKSPACE,
@@ -281,11 +241,11 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_update")),
     {
       title: "Update Workspace",
-      description: "Update a workspace (global layer). At least one field must be provided.",
+      description: "Update a workspace (global layer). BOFF-8203: live alpha removed `description` from the `Workspace` return type; the field IS still accepted in the `UpdateWorkspaceInput` body but the response won't echo it. At least one field must be provided.",
       inputSchema: {
         id: zod.z.string().describe("Workspace ID"),
         name: zod.z.string().optional().describe("Updated name"),
-        description: zod.z.string().optional().describe("Updated description"),
+        description: zod.z.string().optional().describe("Updated description (live alpha won't echo this on the response)"),
         status: zod.z.string().optional().describe("Updated status (will be uppercased)")
       }
     },
@@ -317,29 +277,20 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_delete")),
     {
       title: "Delete Workspace",
-      description: "Delete a workspace (workspace layer).",
+      description: "[STUB] Delete a workspace (workspace layer).",
       inputSchema: { id: zod.z.string().describe("Workspace ID") }
     },
-    async ({ id }) => {
-      try {
-        const data = await ctx.gql.workspace.request(
-          DELETE_WORKSPACE,
-          { id }
-        );
-        return jsonResult({ deleted: data.deleteWorkspace, workspaceId: id });
-      } catch (error) {
-        ctx.logger.error("workspace_delete failed", { error: String(error) });
-        return errorResult(
-          `Failed to delete workspace: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
+    async () => {
+      return errorResult(
+        "[stubbed] `Mutation.deleteWorkspace` was removed from the alpha supergraph. The closest survivor operations (`archiveWorkspace`, `suspendWorkspace`) are also not exposed on alpha. Until the workspaces service re-exposes a deletion path, callers should suspend the workspace at the org level instead. The tool remains registered so callers receive a meaningful response instead of a schema-validation error."
+      );
     }
   );
   server.registerTool(
     track(mcpToolName(ctx.productName, "workspace_members_list")),
     {
       title: "List Workspace Members",
-      description: "List members of a workspace.",
+      description: "List members of a workspace. BOFF-8203: live `WorkspaceMember` only exposes `id / userId / role / joinedAt` \u2014 `email` and `status` are gone from the selection set.",
       inputSchema: {
         workspaceId: zod.z.string().describe("Workspace ID"),
         limit: zod.z.number().optional().describe("Page size (default 100)"),
@@ -365,7 +316,7 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_members_add")),
     {
       title: "Add Workspace Member",
-      description: "Add a member to a workspace.",
+      description: "Add a member to a workspace. BOFF-8203: live `WorkspaceMember` only exposes `id / userId / role` \u2014 the `status` field was removed from the return type.",
       inputSchema: {
         workspaceId: zod.z.string().describe("Workspace ID"),
         userId: zod.z.string().describe("User ID to add"),
@@ -396,16 +347,19 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_members_remove")),
     {
       title: "Remove Workspace Member",
-      description: "Remove a member by membership id.",
-      inputSchema: { membershipId: zod.z.string().describe("Membership ID to remove") }
+      description: "Remove a workspace member. Live alpha: `removeWorkspaceMember(workspaceId, userId)` returns Boolean. The legacy `memberships(id)` path was removed.",
+      inputSchema: {
+        workspaceId: zod.z.string().describe("Workspace ID the member belongs to"),
+        userId: zod.z.string().describe("User ID to remove from the workspace")
+      }
     },
-    async ({ membershipId }) => {
+    async ({ workspaceId, userId }) => {
       try {
         const data = await ctx.gql.workspace.request(
           REMOVE_WORKSPACE_MEMBER,
-          { id: membershipId }
+          { workspaceId, userId }
         );
-        return jsonResult({ removed: data.removeWorkspaceMember, membershipId });
+        return jsonResult({ removed: data.removeWorkspaceMember, workspaceId, userId });
       } catch (error) {
         ctx.logger.error("workspace_members_remove failed", { error: String(error) });
         return errorResult(
@@ -418,7 +372,7 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_members_role")),
     {
       title: "Update Workspace Member Role",
-      description: "Update a workspace member role.",
+      description: "Update a workspace member role. Live alpha: `updateWorkspaceMember(workspaceId, userId, input)` where `input.role` is the new role. The legacy `updateWorkspaceMemberRoles` mutation and the `roles: [role]` array shape are gone.",
       inputSchema: {
         workspaceId: zod.z.string().describe("Workspace ID"),
         userId: zod.z.string().describe("User ID"),
@@ -427,13 +381,8 @@ function registerWorkspaceTools(server, ctx, track) {
     },
     async ({ workspaceId, userId, role }) => {
       try {
-        const input = {
-          workspaceId,
-          userId,
-          roles: [role]
-        };
-        const data = await ctx.gql.workspace.request(UPDATE_WORKSPACE_MEMBER_ROLES, { input });
-        return jsonResult(data.updateWorkspaceMemberRoles);
+        const data = await ctx.gql.workspace.request(UPDATE_WORKSPACE_MEMBER_ROLES, { workspaceId, userId, input: { role } });
+        return jsonResult(data.updateWorkspaceMember);
       } catch (error) {
         ctx.logger.error("workspace_members_role failed", { error: String(error) });
         return errorResult(
@@ -446,128 +395,68 @@ function registerWorkspaceTools(server, ctx, track) {
     track(mcpToolName(ctx.productName, "workspace_projects_list")),
     {
       title: "List Projects",
-      description: "List projects, optionally filtered by workspace.",
+      description: "[STUB] List projects, optionally filtered by workspace. Live alpha removed `Query.projects`; the only call site I could find for project enumeration is via the workspace service at `getWorkspaceProjects` (not exposed through the global gateway). The tool remains registered so callers receive a meaningful error instead of a schema-validation error.",
       inputSchema: {
         workspaceId: zod.z.string().optional().describe("Filter by workspace ID"),
         limit: zod.z.number().optional().describe("Page size (default 100)"),
         offset: zod.z.number().optional().describe("Offset for pagination")
       }
     },
-    async ({ workspaceId, limit, offset }) => {
-      try {
-        const filter = {};
-        if (workspaceId !== void 0) filter.workspaceId = workspaceId;
-        const data = await ctx.gql.workspace.request(LIST_PROJECTS, {
-          filter: Object.keys(filter).length > 0 ? filter : void 0,
-          pagination: { limit: limit ?? 100, offset: offset ?? 0 }
-        });
-        return jsonResult(data.projects);
-      } catch (error) {
-        ctx.logger.error("workspace_projects_list failed", { error: String(error) });
-        return errorResult(
-          `Failed to list projects: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
+    async () => errorResult(
+      "[stubbed] `Query.projects` was removed from the alpha supergraph; `Query.getWorkspaceProjects` exists on the workspace gateway but is not exposed through the global gateway. The projects module appears to have been moved to its own service. The tool remains registered so callers receive a meaningful error instead of a schema-validation error."
+    )
   );
   server.registerTool(
     track(mcpToolName(ctx.productName, "workspace_projects_get")),
     {
       title: "Get Project",
-      description: "Get a project by ID.",
+      description: "[STUB] Get a project by ID. Same root cause as `workspace_projects_list`.",
       inputSchema: { id: zod.z.string().describe("Project ID") }
     },
-    async ({ id }) => {
-      try {
-        const data = await ctx.gql.workspace.request(
-          GET_PROJECT,
-          { id }
-        );
-        if (!data.project) {
-          return errorResult(`Project ${id} not found`);
-        }
-        return jsonResult(data.project);
-      } catch (error) {
-        ctx.logger.error("workspace_projects_get failed", { error: String(error) });
-        return errorResult(
-          `Failed to get project: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
+    async () => errorResult(
+      "[stubbed] `Query.project` was removed from the alpha supergraph. Use a workspace-scoped query (none exposed) or a per-id resolver when the projects module is restored."
+    )
   );
   server.registerTool(
     track(mcpToolName(ctx.productName, "workspace_projects_create")),
     {
       title: "Create Project",
-      description: "Create a project inside a workspace.",
+      description: "[STUB] Create a project inside a workspace.",
       inputSchema: {
         workspaceId: zod.z.string().describe("Workspace ID"),
         name: zod.z.string().describe("Project name"),
         description: zod.z.string().optional().describe("Project description")
       }
     },
-    async ({ workspaceId, name, description }) => {
-      try {
-        const input = { workspaceId, name };
-        if (description !== void 0) input.description = description;
-        const data = await ctx.gql.workspace.request(
-          CREATE_PROJECT,
-          { input }
-        );
-        return jsonResult(data.createProject);
-      } catch (error) {
-        ctx.logger.error("workspace_projects_create failed", { error: String(error) });
-        return errorResult(
-          `Failed to create project: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
+    async () => errorResult(
+      "[stubbed] `Mutation.createProject` was removed from the alpha supergraph. The projects module appears to have been moved to its own service."
+    )
   );
   server.registerTool(
     track(mcpToolName(ctx.productName, "workspace_invites_accept")),
     {
       title: "Accept Workspace Invitation",
-      description: "Accept a workspace invitation by invitation ID. Returns { id, status, workspaceId } of the accepted invite.",
+      description: "[STUB] Accept a workspace invitation by invitation ID. Live alpha removed `Mutation.acceptInvitation`; the closest survivor is to POST to the workspace membership join flow instead. The tool remains registered so callers receive a meaningful error.",
       inputSchema: { invitationId: zod.z.string().describe("Invitation ID") }
     },
-    async ({ invitationId }) => {
-      try {
-        const data = await ctx.gql.workspace.request(ACCEPT_INVITATION, { id: invitationId });
-        return jsonResult(data.acceptInvitation);
-      } catch (error) {
-        ctx.logger.error("workspace_invites_accept failed", { error: String(error) });
-        return errorResult(
-          `Failed to accept invitation: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
+    async () => errorResult(
+      "[stubbed] `Mutation.acceptInvitation` was removed from the alpha supergraph. Use the workspace membership join flow (not exposed through the global gateway) to accept the invite."
+    )
   );
   server.registerTool(
     track(mcpToolName(ctx.productName, "workspace_activity")),
     {
       title: "Workspace Activity Log",
-      description: "Workspace activity log (audit events) for a given workspace.",
+      description: "[STUB] Workspace activity log (audit events) for a given workspace. Live alpha removed both `Query.getWorkspaceActivities` and `Query.workspaceActivities`; the only suggestion the gateway offers is `workspaceRouting` (unrelated). The tool remains registered so callers receive a meaningful error.",
       inputSchema: {
         workspaceId: zod.z.string().describe("Workspace ID"),
         limit: zod.z.number().optional().describe("Page size (default 100)"),
         offset: zod.z.number().optional().describe("Offset for pagination")
       }
     },
-    async ({ workspaceId, limit, offset }) => {
-      try {
-        const data = await ctx.gql.workspace.request(WORKSPACE_ACTIVITY, {
-          workspaceId,
-          limit: limit ?? 100,
-          offset: offset ?? 0
-        });
-        return jsonResult(data.getWorkspaceActivities);
-      } catch (error) {
-        ctx.logger.error("workspace_activity failed", { error: String(error) });
-        return errorResult(
-          `Failed to fetch workspace activity: ${error instanceof Error ? error.message : String(error)}`
-        );
-      }
-    }
+    async () => errorResult(
+      "[stubbed] `Query.getWorkspaceActivities` was removed from the alpha supergraph. The closest related field is `complianceAuditLog` on the global gateway (different domain \u2014 read the workspaces module to find the new audit-log path)."
+    )
   );
 }