@firfi/huly-mcp 0.31.0 → 0.31.1

package/README.md

@@ -269,7 +269,7 @@ The roadmap is driven by SDK parity and the project principle that this server s
 
 Highest-value additions for coding agents:
 
-- Generic space follow-ups: role assignment mutations, role/permission definition writes, generic space creation, and module-specific wrappers above the shared space foundation.
+- Generic space follow-ups: role/permission definition writes, generic space creation, and module-specific wrappers above the shared space foundation. Generic space metadata, member/owner mutations, and typed-space role member mutations are covered by the shared spaces tools.
 - SDK discovery phase 2: space types, roles, permissions, plugin configuration, sequence metadata, and richer tool hints.
 - Drive follow-ups: drive create/update/delete, item move/rename/delete, adding new versions to existing files, permissions, and comments/activity.
 - Planner/ToDos: personal and project ToDo CRUD, scheduling, complete/reopen, priority, privacy/visibility, and document action items.
@@ -298,7 +298,7 @@ Planned feature surfaces:
 - Chat and communication: direct-message send/update/delete, group DMs, channel member mutations, join/leave/request access, archive/unarchive, star/favorite channels, close/reopen conversations, pinned messages, message attachments, translation, applets, in-message polls, and guest communication settings.
 - Notifications and activity: browser/push subscription internals, provider defaults, UI presenter/viewlet metadata, and activity control/extension metadata.
 - Attachments and media: previews/preview metadata and friendly wrappers for additional object types beyond issue/document.
-- Core schema and workspace administration: attribute/property create/update/delete/hide, enum CRUD/options, sequence management, role assignment mutations, role/permission definition writes, generic space creation, global space admins, integrations registry, invite settings, role capability settings, and workspace setting metadata.
+- Core schema and workspace administration: attribute/property create/update/delete/hide, enum CRUD/options, sequence management, role/permission definition writes, generic space creation, global space admins, integrations registry, invite settings, role capability settings, and workspace setting metadata.
 - Integrations: GitHub repository/project mappings and sync metadata (deferred), Google Calendar connect/configure/sync controls, Bitrix entity/field mappings and sync status, Gmail/email channel messages, Telegram messages, Huly Mail/Mail plugin behavior, AI assistant integration state, and AI bot configuration if server-side APIs expose stable behavior.
 - Templates, rating, support, billing, analytics, views, workbench, and preferences: message templates/categories/fields, document/person rating data blocked by unpublished `@hcengineering/rating` SDK package (#90), support conversations, billing tier/status discovery, onboarding channels, saved filtered views, user view preferences, tabs/widgets/apps, and module preference discovery/update.
 - Document-specific gaps: snapshot restore, backlinks, notes, structured action items/tables, PDF/export, advanced document relationships, and document printing/export once SDK support is safe.
@@ -740,6 +740,9 @@ SDK upgrade revisit:
 | `add_space_members` | Idempotently add members to an existing Huly space. Members accept account UUID, exact email, or exact person display name and resolve to Huly account UUIDs before replacing the full members array. |
 | `remove_space_members` | Idempotently remove members from an existing Huly space. Members accept account UUID, exact email, or exact person display name and resolve to Huly account UUIDs before replacing the full members array. |
 | `set_space_owners` | Replace owners on an existing Huly space. Owners accept account UUID, exact email, or exact person display name. By default, owners are also ensured in members. |
+| `set_space_role_members` | Replace members assigned to one role on a typed Huly space while preserving all other role assignments. Role accepts a raw role _id or exact role name from the space's SpaceType. Members accept account UUID, exact email, or exact person display name; pass members=[] to clear this role. |
+| `add_space_role_members` | Idempotently add members to one role on a typed Huly space while preserving all other role assignments. Role accepts a raw role _id or exact role name from the space's SpaceType. Members accept account UUID, exact email, or exact person display name. |
+| `remove_space_role_members` | Idempotently remove members from one role on a typed Huly space while preserving all other role assignments. Role accepts a raw role _id or exact role name from the space's SpaceType. Members accept account UUID, exact email, or exact person display name. |
 
 ### Tag-Categories
 

package/dist/index.cjs

@@ -154570,6 +154570,10 @@ var AmbiguousSpaceTypeMatchSchema = Schema_exports.Struct({
   name: NonEmptyString2,
   targetClass: ObjectClassName
 });
+var AmbiguousSpaceRoleMatchSchema = Schema_exports.Struct({
+  id: RoleId,
+  name: NonEmptyString2
+});
 var SpaceNotFoundError = class extends Schema_exports.TaggedError()(
   "SpaceNotFoundError",
   {
@@ -154614,6 +154618,54 @@ var SpaceTypeIdentifierAmbiguousError = class extends Schema_exports.TaggedError
     return `Space type '${this.identifier}' is ambiguous; use a space type id. Matches: ${details}`;
   }
 };
+var SpaceNotTypedError = class extends Schema_exports.TaggedError()(
+  "SpaceNotTypedError",
+  {
+    id: SpaceId,
+    name: NonEmptyString2
+  }
+) {
+  get message() {
+    return `Space '${this.name}' (${this.id}) is not typed; role members can only be changed on spaces with a SpaceType`;
+  }
+};
+var SpaceRoleNotFoundError = class extends Schema_exports.TaggedError()(
+  "SpaceRoleNotFoundError",
+  {
+    identifier: NonEmptyString2,
+    spaceType: SpaceTypeId
+  }
+) {
+  get message() {
+    return `Role '${this.identifier}' not found in space type '${this.spaceType}'`;
+  }
+};
+var SpaceRoleIdentifierAmbiguousError = class extends Schema_exports.TaggedError()(
+  "SpaceRoleIdentifierAmbiguousError",
+  {
+    identifier: NonEmptyString2,
+    spaceType: SpaceTypeId,
+    matches: Schema_exports.Array(AmbiguousSpaceRoleMatchSchema).pipe(Schema_exports.minItems(MIN_AMBIGUOUS_SPACE_MATCHES))
+  }
+) {
+  get message() {
+    const details = this.matches.map((match16) => `${match16.id} (${match16.name})`).join(", ");
+    return `Role '${this.identifier}' is ambiguous in space type '${this.spaceType}'; use a role id. Matches: ${details}`;
+  }
+};
+var SpaceRoleAssignmentsMalformedError = class extends Schema_exports.TaggedError()(
+  "SpaceRoleAssignmentsMalformedError",
+  {
+    space: SpaceId,
+    spaceType: SpaceTypeId,
+    targetClass: ObjectClassName,
+    reason: NonEmptyString2
+  }
+) {
+  get message() {
+    return `Role assignments for space '${this.space}' and space type '${this.spaceType}' are malformed at '${this.targetClass}': ${this.reason}. Refusing to write role members to avoid access-control data loss.`;
+  }
+};
 
 // src/huly/errors-test-management.ts
 var TestProjectNotFoundError = class extends Schema_exports.TaggedError()(
@@ -154890,6 +154942,10 @@ var HulyDomainError = Schema_exports.Union(
   HulyClassNotFoundError,
   SpaceNotFoundError,
   SpaceIdentifierAmbiguousError,
+  SpaceNotTypedError,
+  SpaceRoleNotFoundError,
+  SpaceRoleIdentifierAmbiguousError,
+  SpaceRoleAssignmentsMalformedError,
   SpaceTypeNotFoundError,
   SpaceTypeIdentifierAmbiguousError,
   TodoNotFoundError,
@@ -155423,6 +155479,7 @@ var import_api_client3 = __toESM(require_lib20(), 1);
 // src/huly/operations/sdk-boundary.ts
 var toRef = (id) => id;
 var toClassRef = (id) => id;
+var toMixinRef = (id) => id;
 var toAccountUuid = (uuid5) => uuid5;
 var UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var validatePersonUuid = (uuid5) => {
@@ -165843,6 +165900,9 @@ var INVALID_PARAMS_TAGS = /* @__PURE__ */ new Set([
   "GenericObjectNotFoundError",
   "SpaceNotFoundError",
   "SpaceIdentifierAmbiguousError",
+  "SpaceNotTypedError",
+  "SpaceRoleNotFoundError",
+  "SpaceRoleIdentifierAmbiguousError",
   "SpaceTypeNotFoundError",
   "SpaceTypeIdentifierAmbiguousError",
   "DriveNotFoundError",
@@ -166487,12 +166547,16 @@ var StdioServerTransport = class {
 };
 
 // src/domain/schemas/tool-warnings.ts
-var ToolWarningCodeSchema = Schema_exports.Literal("status_metadata_unresolved").annotations({
+var ToolWarningCodeSchema = Schema_exports.Literal(
+  "status_metadata_unresolved",
+  "space_role_assignments_degraded"
+).annotations({
   identifier: "ToolWarningCode",
   title: "ToolWarningCode",
   description: "Machine-readable code for an agent-visible MCP tool warning."
 });
 var StatusMetadataUnresolvedWarningCode = ToolWarningCodeSchema.literals[0];
+var SpaceRoleAssignmentsDegradedWarningCode = ToolWarningCodeSchema.literals[1];
 var ToolWarningSchema = Schema_exports.Struct({
   code: ToolWarningCodeSchema,
   message: Schema_exports.Trim.pipe(Schema_exports.nonEmptyString()).annotations({
@@ -166554,9 +166618,13 @@ var clearableText = (description) => Schema_exports.NullOr(Schema_exports.String
 var limitDescription = (subject) => `Maximum ${subject} to return (default: ${DEFAULT_LIMIT}).`;
 var SpacePermissionScopeSchema = Schema_exports.Literal("space", "workspace");
 var SpaceMemberIdentifier = NonEmptyString2.pipe(Schema_exports.brand("SpaceMemberIdentifier"));
+var SpaceRoleIdentifier = NonEmptyString2.pipe(Schema_exports.brand("SpaceRoleIdentifier"));
 var SpaceMemberIdentifierSchema = SpaceMemberIdentifier.annotations({
   description: "Workspace member to resolve. Accepts a Huly account UUID directly, an exact email address, or an exact person display name."
 });
+var SpaceRoleIdentifierSchema = SpaceRoleIdentifier.annotations({
+  description: "Role to resolve within the space's SpaceType. Accepts a raw Huly role _id or an exact role name from get_space_type."
+});
 var SpaceRoleAssignmentSchema = Schema_exports.Struct({
   roleId: RoleId,
   members: Schema_exports.Array(AccountUuid)
@@ -166731,6 +166799,28 @@ var SetSpaceOwnersParamsSchema = Schema_exports.Struct({
     description: `Also add each owner to members. Defaults to ${DEFAULT_SPACE_OWNER_ENSURE_MEMBERS}.`
   }))
 });
+var SpaceRoleMemberMutationFields = {
+  space: SpaceIdentifier.annotations({
+    description: "Typed space _id or exact space name whose role assignment should change. The space must have a SpaceType."
+  }),
+  class: Schema_exports.optional(SpaceClassFilter.annotations({
+    description: "Optional raw Huly space class ID used to disambiguate exact-name lookup."
+  })),
+  type: Schema_exports.optional(SpaceTypeId.annotations({
+    description: "Optional raw Huly SpaceType _id used to disambiguate exact-name lookup."
+  })),
+  role: SpaceRoleIdentifierSchema,
+  members: Schema_exports.Array(SpaceMemberIdentifierSchema).pipe(Schema_exports.minItems(1)).annotations({
+    description: "Members to add or remove from this role. Each entry may be an account UUID, exact email address, or exact person name."
+  })
+};
+var SpaceRoleMemberMutationParamsSchema = Schema_exports.Struct(SpaceRoleMemberMutationFields);
+var SetSpaceRoleMembersParamsSchema = Schema_exports.Struct({
+  ...SpaceRoleMemberMutationFields,
+  members: Schema_exports.Array(SpaceMemberIdentifierSchema).annotations({
+    description: "Replacement member list for this role only. Each entry may be an account UUID, exact email address, or exact person name. Pass [] to clear this role."
+  })
+});
 var listSpacesParamsJsonSchema = JSONSchema_exports.make(ListSpacesParamsSchema);
 var getSpaceParamsJsonSchema = JSONSchema_exports.make(GetSpaceParamsSchema);
 var listSpaceTypesParamsJsonSchema = JSONSchema_exports.make(ListSpaceTypesParamsSchema);
@@ -166742,6 +166832,8 @@ var updateSpaceParamsJsonSchema = withAtLeastOneRequired(
 );
 var spaceMemberMutationParamsJsonSchema = JSONSchema_exports.make(SpaceMemberMutationParamsSchema);
 var setSpaceOwnersParamsJsonSchema = JSONSchema_exports.make(SetSpaceOwnersParamsSchema);
+var spaceRoleMemberMutationParamsJsonSchema = JSONSchema_exports.make(SpaceRoleMemberMutationParamsSchema);
+var setSpaceRoleMembersParamsJsonSchema = JSONSchema_exports.make(SetSpaceRoleMembersParamsSchema);
 var parseListSpacesParams = Schema_exports.decodeUnknown(ListSpacesParamsSchema);
 var parseGetSpaceParams = Schema_exports.decodeUnknown(GetSpaceParamsSchema);
 var parseListSpaceTypesParams = Schema_exports.decodeUnknown(ListSpaceTypesParamsSchema);
@@ -166750,6 +166842,8 @@ var parseListSpacePermissionsParams = Schema_exports.decodeUnknown(ListSpacePerm
 var parseUpdateSpaceParams = Schema_exports.decodeUnknown(UpdateSpaceParamsSchema);
 var parseSpaceMemberMutationParams = Schema_exports.decodeUnknown(SpaceMemberMutationParamsSchema);
 var parseSetSpaceOwnersParams = Schema_exports.decodeUnknown(SetSpaceOwnersParamsSchema);
+var parseSpaceRoleMemberMutationParams = Schema_exports.decodeUnknown(SpaceRoleMemberMutationParamsSchema);
+var parseSetSpaceRoleMembersParams = Schema_exports.decodeUnknown(SetSpaceRoleMembersParamsSchema);
 
 // src/domain/schemas/sdk-discovery.ts
 var import_core10 = __toESM(require_lib4(), 1);
@@ -174642,7 +174736,7 @@ var makeDiagnosticsScope = Effect_exports.gen(function* () {
 });
 
 // src/version.ts
-var VERSION = true ? "0.31.0" : "0.0.0-dev";
+var VERSION = true ? "0.31.1" : "0.0.0-dev";
 
 // src/mcp/tool-output-schema.ts
 var toolWarningCodeEnum = [...ToolWarningCodeSchema.literals];
@@ -175142,6 +175236,93 @@ var removeAccountUuids = (current, removals) => {
 var arraysEqual = (left3, right3) => left3.length === right3.length && left3.every((value3, index) => value3 === right3[index]);
 var optionalString = (value3) => value3 === void 0 || value3 === "" ? void 0 : value3;
 var optionalObjectClassName = (value3) => value3 === void 0 || value3 === "" ? void 0 : ObjectClassName.make(value3);
+var RoleAssignmentStorageSchema = Schema_exports.Record({ key: Schema_exports.String, value: Schema_exports.Array(AccountUuid) });
+var isRecordObject = (value3) => typeof value3 === "object" && value3 !== null && !Array.isArray(value3);
+var validStoredAccountUuid = (value3) => {
+  const decoded = Schema_exports.decodeUnknownEither(AccountUuid)(value3);
+  return decoded._tag === "Right" ? toAccountUuid(NonEmptyString2.make(decoded.right)) : void 0;
+};
+var parsedSpaceRoleAssignmentEntry = (roleId, members) => ({
+  _tag: "entry",
+  entry: [
+    toRef(roleId),
+    sortStrings(members).map(toAccountUuid)
+  ]
+});
+var spaceRoleAssignmentSource = (space, spaceType) => Object.prototype.hasOwnProperty.call(space, spaceType.targetClass) ? { present: true, value: Object.entries(space).find(([key]) => key === spaceType.targetClass)?.[1] } : { present: false, value: void 0 };
+var roleAssignmentsMalformedError = (space, spaceType, reason) => new SpaceRoleAssignmentsMalformedError({
+  space: SpaceId.make(space._id),
+  spaceType: SpaceTypeId.make(spaceType._id),
+  targetClass: ObjectClassName.make(spaceType.targetClass),
+  reason: NonEmptyString2.make(reason)
+});
+var readSpaceRoleAssignmentEntries = (space, spaceType, validRoleIds) => {
+  const source = spaceRoleAssignmentSource(space, spaceType);
+  if (!source.present) return { entries: [], degradationReasons: [] };
+  if (!isRecordObject(source.value)) {
+    return {
+      entries: [],
+      degradationReasons: [`role assignment mixin ${spaceType.targetClass} is not an object`]
+    };
+  }
+  const parsed = Object.entries(source.value).flatMap(([roleId, members]) => {
+    if (!validRoleIds.has(toRef(roleId))) {
+      return [{
+        _tag: "dropped",
+        reason: `role assignment '${roleId}' is not defined on space type ${spaceType._id}`
+      }];
+    }
+    if (!Array.isArray(members)) {
+      return [{ _tag: "dropped", reason: `role assignment '${roleId}' members are not an array` }];
+    }
+    const accountUuids = members.flatMap((member) => {
+      const accountUuid = validStoredAccountUuid(member);
+      return accountUuid === void 0 ? [] : [accountUuid];
+    });
+    const invalidMemberCount = members.length - accountUuids.length;
+    return [
+      ...invalidMemberCount > 0 ? [{
+        _tag: "dropped",
+        reason: `role assignment '${roleId}' has ${invalidMemberCount} malformed account UUID value(s)`
+      }] : [],
+      parsedSpaceRoleAssignmentEntry(roleId, accountUuids)
+    ];
+  });
+  return {
+    entries: parsed.flatMap((item) => item._tag === "entry" ? [item.entry] : []),
+    degradationReasons: parsed.flatMap((item) => item._tag === "dropped" ? [item.reason] : [])
+  };
+};
+var spaceRoleAssignmentEntries = (space, spaceType, validRoleIds) => readSpaceRoleAssignmentEntries(space, spaceType, validRoleIds).entries;
+var hasSpaceRoleAssignmentMixin = (space, spaceType) => spaceRoleAssignmentSource(space, spaceType).present;
+var strictSpaceRoleAssignments = (space, spaceType, validRoleIds) => Effect_exports.gen(function* () {
+  const source = spaceRoleAssignmentSource(space, spaceType);
+  if (!source.present) return {};
+  const decoded = Schema_exports.decodeUnknownEither(RoleAssignmentStorageSchema)(source.value);
+  if (decoded._tag === "Left") {
+    return yield* roleAssignmentsMalformedError(
+      space,
+      spaceType,
+      `expected an object whose keys are role ids and values are arrays of account UUIDs`
+    );
+  }
+  const unknownRoleIds = Object.keys(decoded.right).filter((roleId) => !validRoleIds.has(toRef(roleId)));
+  if (unknownRoleIds.length > 0) {
+    return yield* roleAssignmentsMalformedError(
+      space,
+      spaceType,
+      `unknown role assignment key(s): ${unknownRoleIds.join(", ")}`
+    );
+  }
+  return Object.fromEntries(
+    Object.entries(decoded.right).map(([roleId, members]) => [
+      toRef(roleId),
+      members.map((member) => toAccountUuid(NonEmptyString2.make(member)))
+    ])
+  );
+});
+var roleAssignmentDegradationMessage = (reasons) => `Some typed-space role assignment data was omitted because existing Huly storage is malformed: ${reasons.join("; ")}. Read results include only valid role assignments; role-member write tools will refuse to modify this space until the stored role assignment data is repaired.`;
+var spaceRoleAssignmentsMixin = (spaceType) => toMixinRef(spaceType.targetClass);
 var applySpaceFilters = (query, filters) => {
   const next4 = { ...query };
   if (!filters.includeArchived) {
@@ -178923,7 +179104,7 @@ var contactCoveredRationale = "Current contacts tools expose person, organizatio
 var cardCoveredRationale = "Current card tools cover card spaces, master tags, and card CRUD.";
 var chunterCoveredRationale = "Current channel and direct-message tools cover channels, channel messages, one-to-one DM listing, and thread replies.";
 var coreCoveredRationale = "Existing tools expose user statuses, full-text search, blobs through storage/download flows, generic association/relation discovery/mutation helpers, class/interface/mixin, attribute, enum, plugin configuration, domain index configuration, sequence, and space type capability discovery.";
-var coreGapRationale = "Remaining core write-side configuration, role assignment writes, role/permission definition writes, generic space creation, class collaborator metadata, statuses, and write-side model management are represented as matrix gaps. Generic space discovery, space type/permission reads, safe existing-space metadata updates, member mutations, owner replacement, object collaborators, read-only plugin configuration, domain index configuration, and sequence discovery are covered.";
+var coreGapRationale = "Remaining core write-side configuration, role/permission definition writes, generic space creation, class collaborator metadata, statuses, and write-side model management are represented as matrix gaps. Generic space discovery, space type/permission reads, safe existing-space metadata updates, member mutations, owner replacement, typed-space role member mutations, object collaborators, read-only plugin configuration, domain index configuration, and sequence discovery are covered.";
 var coreNotMcpFacingRationale = "Core primitive model infrastructure, transaction classes, type wrappers, and versioning internals are not LLM-facing product resources by themselves.";
 var routingRow = (classId, packageName, exportName, hint) => ({
   classId: ObjectClassName.make(classId),
@@ -189784,14 +189965,15 @@ var toSpaceSummary = (space) => ({
   membersCount: Count.make(space.members.length),
   ownersCount: Count.make(space.owners?.length ?? 0)
 });
-var roleAssignments = (space) => {
-  if (space.roles === void 0) return void 0;
-  return Object.entries(space.roles).map(([roleId, members]) => ({
+var roleAssignments = (space, spaceType, validRoleIds) => {
+  if (spaceType === void 0) return void 0;
+  const entries2 = spaceRoleAssignmentEntries(space, spaceType, validRoleIds);
+  return entries2.length === 0 ? void 0 : entries2.map(([roleId, members]) => ({
     roleId: RoleId.make(roleId),
-    members: (members ?? []).map((member) => AccountUuid.make(member))
+    members: members.map((member) => AccountUuid.make(member))
   }));
 };
-var toSpaceDetail = (space) => ({
+var toSpaceDetail = (space, spaceType, validRoleIds = /* @__PURE__ */ new Set()) => ({
   id: SpaceId.make(space._id),
   name: space.name,
   description: space.description,
@@ -189802,7 +189984,7 @@ var toSpaceDetail = (space) => ({
   autoJoin: space.autoJoin,
   members: space.members.map((member) => AccountUuid.make(member)),
   owners: (space.owners ?? []).map((owner) => AccountUuid.make(owner)),
-  roleAssignments: roleAssignments(space)
+  roleAssignments: roleAssignments(space, spaceType, validRoleIds)
 });
 var spaceTypeSummary = (spaceType, descriptor3) => ({
   id: SpaceTypeId.make(spaceType._id),
@@ -189884,8 +190066,28 @@ var listSpaces = (params) => Effect_exports.gen(function* () {
 });
 var getSpace = (params) => Effect_exports.gen(function* () {
   const client = yield* HulyClient;
+  const diagnostics = yield* Diagnostics;
   const space = yield* findSpace(client, params);
-  return toSpaceDetail(space);
+  const spaceType = space.type === void 0 ? void 0 : yield* client.findOne(
+    core.class.SpaceType,
+    hulyQuery({ _id: toRef(space.type) })
+  );
+  const roles = spaceType === void 0 ? [] : yield* client.findAll(
+    core.class.Role,
+    hulyQuery({ attachedTo: spaceType._id }),
+    { limit: Math.max(spaceType.roles, 1) }
+  );
+  const validRoleIds = new Set(roles.map((role) => role._id));
+  if (spaceType !== void 0) {
+    const readResult = readSpaceRoleAssignmentEntries(space, spaceType, validRoleIds);
+    if (readResult.degradationReasons.length > 0) {
+      yield* diagnostics.warnAgent({
+        code: SpaceRoleAssignmentsDegradedWarningCode,
+        message: roleAssignmentDegradationMessage(readResult.degradationReasons)
+      });
+    }
+  }
+  return toSpaceDetail(space, spaceType, validRoleIds);
 });
 var listSpaceTypes = (params) => Effect_exports.gen(function* () {
   const client = yield* HulyClient;
@@ -190068,8 +190270,8 @@ var describeHulySpaceTypeCapabilities = (params) => Effect_exports.gen(function*
     roles: detail.roles,
     rolePermissions: detail.availablePermissions,
     assignmentShape: {
-      storedOnSpaceField: HulyConfigurationMetadataKey.make("roles"),
-      roleKeyField: HulyConfigurationMetadataKey.make("roleId"),
+      storedOnSpaceField: HulyConfigurationMetadataKey.make(`mixin:${detail.targetClass}`),
+      roleKeyField: HulyConfigurationMetadataKey.make("role._id"),
       memberValueShape: "accountUuidArrayOrUndefined",
       readProjectionTools: ["get_space"].map((tool) => HulyMcpToolName.make(tool))
     }
@@ -190403,6 +190605,104 @@ var searchTools = [
 ];
 
 // src/huly/operations/spaces-write.ts
+var roleClass = core.class.Role;
+var spaceTypeClass = core.class.SpaceType;
+var requireTypedSpaceType = (space) => Effect_exports.gen(function* () {
+  if (space.type === void 0) {
+    return yield* new SpaceNotTypedError({
+      id: SpaceId.make(space._id),
+      name: NonEmptyString2.make(space.name)
+    });
+  }
+  return SpaceTypeId.make(space.type);
+});
+var findSpaceType2 = (client, spaceType) => Effect_exports.gen(function* () {
+  const result = yield* client.findOne(
+    spaceTypeClass,
+    hulyQuery({ _id: toRef(spaceType) })
+  );
+  if (result === void 0) {
+    return yield* new SpaceRoleNotFoundError({
+      identifier: NonEmptyString2.make("SpaceType roles"),
+      spaceType
+    });
+  }
+  return result;
+});
+var resolveSpaceRole = (client, spaceType, role) => Effect_exports.gen(function* () {
+  const byId = yield* client.findOne(
+    roleClass,
+    hulyQuery({
+      _id: toRef(role),
+      attachedTo: toRef(spaceType)
+    })
+  );
+  if (byId !== void 0) return byId;
+  const matches = yield* client.findAll(
+    roleClass,
+    hulyQuery({
+      attachedTo: toRef(spaceType),
+      name: role
+    }),
+    { limit: 2 }
+  );
+  if (matches.length === 0) {
+    return yield* new SpaceRoleNotFoundError({
+      identifier: NonEmptyString2.make(role),
+      spaceType
+    });
+  }
+  if (matches.length > 1) {
+    return yield* new SpaceRoleIdentifierAmbiguousError({
+      identifier: NonEmptyString2.make(role),
+      spaceType,
+      matches: matches.map((match16) => ({
+        id: RoleId.make(match16._id),
+        name: NonEmptyString2.make(match16.name)
+      }))
+    });
+  }
+  return matches[0];
+});
+var findSpaceTypeRoles = (client, spaceType) => client.findAll(
+  roleClass,
+  hulyQuery({ attachedTo: spaceType._id }),
+  { limit: Math.max(spaceType.roles, 1) }
+);
+var writeSpaceRoleMembers = (client, space, spaceType, role, currentAssignments, members) => {
+  const mixin = spaceRoleAssignmentsMixin(spaceType);
+  const attributes = { ...currentAssignments, [role._id]: members };
+  const objectId = toRef(space._id);
+  const objectClass = toClassRef(space._class);
+  const objectSpace = toRef(space.space);
+  return hasSpaceRoleAssignmentMixin(space, spaceType) ? client.updateMixin(objectId, objectClass, objectSpace, mixin, attributes).pipe(Effect_exports.asVoid) : client.createMixin(objectId, objectClass, objectSpace, mixin, attributes).pipe(Effect_exports.asVoid);
+};
+var mutateSpaceRoleMembers = (params, mutateMembers) => Effect_exports.gen(function* () {
+  const client = yield* HulyClient;
+  const space = yield* findSpace(client, params);
+  const spaceType = yield* requireTypedSpaceType(space);
+  const spaceTypeDoc = yield* findSpaceType2(client, spaceType);
+  const role = yield* resolveSpaceRole(client, spaceType, params.role);
+  const validRoles = yield* findSpaceTypeRoles(client, spaceTypeDoc);
+  const resolvedMembers = yield* resolveMembers(client, params.members);
+  const currentAssignments = yield* strictSpaceRoleAssignments(
+    space,
+    spaceTypeDoc,
+    new Set(validRoles.map((validRole) => validRole._id))
+  );
+  const currentMembers = sortStrings(currentAssignments[role._id] ?? []).map(toAccountUuid);
+  const nextMembers = mutateMembers(currentMembers, resolvedMembers).map(toAccountUuid);
+  const changed = !arraysEqual(currentMembers, nextMembers);
+  if (changed) {
+    yield* writeSpaceRoleMembers(client, space, spaceTypeDoc, role, currentAssignments, nextMembers);
+  }
+  return {
+    id: SpaceId.make(space._id),
+    roleId: RoleId.make(role._id),
+    members: nextMembers.map((member) => AccountUuid.make(member)),
+    changed
+  };
+});
 var mutateSpaceMembers = (params, mutateMembers) => Effect_exports.gen(function* () {
   const client = yield* HulyClient;
   const space = yield* findSpace(client, params);
@@ -190455,6 +190755,9 @@ var setSpaceOwners = (params) => Effect_exports.gen(function* () {
     changed: changedOwners || changedMembers
   };
 });
+var setSpaceRoleMembers = (params) => mutateSpaceRoleMembers(params, (_currentMembers, resolvedMembers) => sortStrings(resolvedMembers).map(toAccountUuid));
+var addSpaceRoleMembers = (params) => mutateSpaceRoleMembers(params, mergeUniqueSortedAccountUuids);
+var removeSpaceRoleMembers = (params) => mutateSpaceRoleMembers(params, removeAccountUuids);
 
 // src/mcp/tools/spaces.ts
 var CATEGORY28 = "spaces";
@@ -190521,6 +190824,30 @@ var spaceTools = [
     category: CATEGORY28,
     inputSchema: setSpaceOwnersParamsJsonSchema,
     handler: createToolHandler("set_space_owners", parseSetSpaceOwnersParams, setSpaceOwners)
+  },
+  {
+    name: "set_space_role_members",
+    description: "Replace members assigned to one role on a typed Huly space while preserving all other role assignments. Role accepts a raw role _id or exact role name from the space's SpaceType. Members accept account UUID, exact email, or exact person display name; pass members=[] to clear this role.",
+    category: CATEGORY28,
+    inputSchema: setSpaceRoleMembersParamsJsonSchema,
+    annotations: { idempotentHint: true, destructiveHint: false },
+    handler: createToolHandler("set_space_role_members", parseSetSpaceRoleMembersParams, setSpaceRoleMembers)
+  },
+  {
+    name: "add_space_role_members",
+    description: "Idempotently add members to one role on a typed Huly space while preserving all other role assignments. Role accepts a raw role _id or exact role name from the space's SpaceType. Members accept account UUID, exact email, or exact person display name.",
+    category: CATEGORY28,
+    inputSchema: spaceRoleMemberMutationParamsJsonSchema,
+    annotations: { idempotentHint: true, destructiveHint: false },
+    handler: createToolHandler("add_space_role_members", parseSpaceRoleMemberMutationParams, addSpaceRoleMembers)
+  },
+  {
+    name: "remove_space_role_members",
+    description: "Idempotently remove members from one role on a typed Huly space while preserving all other role assignments. Role accepts a raw role _id or exact role name from the space's SpaceType. Members accept account UUID, exact email, or exact person display name.",
+    category: CATEGORY28,
+    inputSchema: spaceRoleMemberMutationParamsJsonSchema,
+    annotations: { idempotentHint: true, destructiveHint: false },
+    handler: createToolHandler("remove_space_role_members", parseSpaceRoleMemberMutationParams, removeSpaceRoleMembers)
   }
 ];
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@firfi/huly-mcp",
-  "version": "0.31.0",
+  "version": "0.31.1",
   "description": "MCP server for Huly integration",
   "mcpName": "io.github.dearlordylord/huly-mcp",
   "type": "module",