callman-mcp 0.1.0 → 0.2.0

package/dist/tools/shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/tools/shared.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE3D,kCAAkC;AAClC,6EAA6E;AAC7E,+EAA+E;AAC/E,+DAA+D;AAC/D,oFAAoF;AACpF,sEAAsE;AACtE,4CAA4C;AAC5C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAAmC,EAAE,IAAa,EAAkB,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;IACpE,iBAAiB,EAAE,UAAU;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAkB,EAAE;IAC5D,IAAI,OAAgC,CAAC;IACrC,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,OAAO,GAAG;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;SACzC,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QAC3C,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;SAAM,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QAChD,OAAO,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxG,CAAC;IACD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AACxH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAClB,CAAI,EAAwC,EAAE,EAAE,CAChD,KAAK,EAAE,IAAO,EAA2B,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEJ,0EAA0E;AAE1E,MAAM,CAAC,MAAM,IAAI,GAAoB,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAChI,MAAM,CAAC,MAAM,KAAK,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACnI,MAAM,CAAC,MAAM,gBAAgB,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC7I,MAAM,CAAC,MAAM,WAAW,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACvI,MAAM,CAAC,MAAM,GAAG,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAEhI,0EAA0E;AAE1E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,QAAQ,EAAE;KACV,QAAQ,CAAC,2HAA2H,CAAC,CAAC;AAEzI,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CACjD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,cAAc,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IAC7G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,MAAM,CAAC,YAAY,GAAG,CAAC;CACtH,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,OAAO,CAAC,IAAI,CAAC;KACb,QAAQ,CAAC,uHAAuH,CAAC,CAAC;AAErI,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;AAEjH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAE,IAAY,EAAQ,EAAE;IACrE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,YAAY,IAAI,qEAAqE,CAAC,CAAC;IACtI,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/tools/shared.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE3D,kCAAkC;AAClC,6EAA6E;AAC7E,+EAA+E;AAC/E,+DAA+D;AAC/D,oFAAoF;AACpF,sEAAsE;AACtE,4CAA4C;AAC5C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,UAAmC,EAAE,IAAa,EAAkB,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;IACpE,iBAAiB,EAAE,UAAU;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAkB,EAAE;IAC5D,IAAI,OAAgC,CAAC;IACrC,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,OAAO,GAAG;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;SACzC,CAAC;IACJ,CAAC;SAAM,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QAC3C,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC;SAAM,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QAChD,OAAO,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxG,CAAC;IACD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AACxH,CAAC,CAAC;AAEF,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAc,EAA2B,EAAE;IACnE,MAAM,OAAO,GAAI,WAAW,CAAC,KAAK,CAAC,CAAC,iBAAwD,CAAC,KAAK,CAAC;IACnG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAClB,CAAI,EAAwC,EAAE,EAAE,CAChD,KAAK,EAAE,IAAO,EAA2B,EAAE;IACzC,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEJ,0EAA0E;AAE1E,MAAM,CAAC,MAAM,IAAI,GAAoB,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAChI,MAAM,CAAC,MAAM,KAAK,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACnI,MAAM,CAAC,MAAM,gBAAgB,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC7I,MAAM,CAAC,MAAM,WAAW,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACvI,MAAM,CAAC,MAAM,GAAG,GAAoB,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAEhI,0EAA0E;AAE1E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,QAAQ,EAAE;KACV,QAAQ,CAAC,uNAAuN,CAAC,CAAC;AAErO,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CACjD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,cAAc,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IAC7G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,MAAM,CAAC,YAAY,GAAG,CAAC;CACtH,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,OAAO,CAAC,IAAI,CAAC;KACb,QAAQ,CAAC,uHAAuH,CAAC,CAAC;AAErI,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;AAEjH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAE,IAAY,EAAQ,EAAE;IACrE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,YAAY,IAAI,qEAAqE,CAAC,CAAC;IACtI,CAAC;AACH,CAAC,CAAC"}

package/dist/tools/workspaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/tools/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAKjD,eAAO,MAAM,sBAAsB,GAAI,QAAQ,SAAS,EAAE,KAAK,WAAW,KAAG,IA6F5E,CAAC"}
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/tools/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAKjD,eAAO,MAAM,sBAAsB,GAAI,QAAQ,SAAS,EAAE,KAAK,WAAW,KAAG,IA8I5E,CAAC"}

package/dist/tools/workspaces.js

@@ -2,11 +2,11 @@ import { z } from "zod";
 import { ToolInputError } from "../client/errors.js";
 import { resolveRef } from "../domain/resolve.js";
 import { normalizeName } from "../lib/ids.js";
-import { confirmArg, DESTRUCTIVE, guarded, ok, READ, requireConfirm, workspaceArg, WRITE } from "./shared.js";
+import { confirmArg, DESTRUCTIVE, guarded, IDEMPOTENT_WRITE, ok, READ, requireConfirm, workspaceArg, WRITE } from "./shared.js";
 export const registerWorkspaceTools = (server, ctx) => {
     server.registerTool("list_workspaces", {
         title: "List workspaces",
-        description: "List the workspaces you belong to, with your role in each (owner / editor / viewer). A token keeps your role: writes are refused where you are a viewer.",
+        description: "List the workspaces you belong to, with your role in each (owner / editor / viewer) and which one is the session default. The token works in all of them; a token keeps your role: writes are refused where you are a viewer.",
         inputSchema: {},
         annotations: READ,
     }, guarded(async () => {
@@ -17,10 +17,26 @@ export const registerWorkspaceTools = (server, ctx) => {
                 name: workspace.name,
                 role: workspace.role,
                 memberCount: workspace.memberCount ?? null,
-                isDefault: workspace.id === ctx.config.defaultWorkspaceId,
+                isDefault: workspace.id === ctx.getDefaultWorkspaceId(),
             })),
         });
     }));
+    server.registerTool("use_workspace", {
+        title: "Set the default workspace for this session",
+        description: "Pick the workspace new things go to for the rest of this session (collections, environments, scenarios, imports — anything created without `workspace`), and the one that wins when a name exists in several workspaces. It never hides the others: lists and searches still cover every workspace. `workspace: null` clears the default. Lasts until the MCP server restarts; CALLMAN_WORKSPACE_ID sets it at start.",
+        inputSchema: { workspace: z.string().max(200).nullable().describe("Workspace name or id; null = no default") },
+        annotations: IDEMPOTENT_WRITE,
+    }, guarded(async ({ workspace }) => {
+        const previous = ctx.getDefaultWorkspaceId();
+        if (workspace === null || !workspace.trim()) {
+            ctx.setDefaultWorkspaceId(null);
+            return ok({ defaultWorkspace: null, previousDefaultId: previous, note: "No default workspace: creating something now needs `workspace`; reads still cover all workspaces." });
+        }
+        const target = await ctx.resolveWorkspace(workspace);
+        ctx.setDefaultWorkspaceId(target.id);
+        ctx.invalidate();
+        return ok({ defaultWorkspace: { id: target.id, name: target.name, role: target.role }, previousDefaultId: previous });
+    }));
     server.registerTool("list_workspace_members", {
         title: "List workspace members",
         description: "List the members of a workspace with their role and status (active / invited).",
@@ -36,7 +52,7 @@ export const registerWorkspaceTools = (server, ctx) => {
     }));
     server.registerTool("add_workspace_member", {
         title: "Add a workspace member",
-        description: "Add a person to a workspace by email with a role (editor can write collections/requests/scenarios; viewer is read-only; owner manages the workspace). Requires the owner role in that workspace. The person must already have a Callman account — the server does not send invitations to unknown emails.",
+        description: "Add a person to a workspace by email with a role (editor can write collections/requests/scenarios; viewer is read-only; owner manages the workspace). Requires the owner role in that workspace. The person must already have a Callman account — the server does not send invitations to unknown emails. Change a role later with update_workspace_member.",
         inputSchema: {
             workspace: workspaceArg,
             email: z.string().email().max(255),
@@ -50,12 +66,33 @@ export const registerWorkspaceTools = (server, ctx) => {
         return ok({
             workspace: { id: target.id, name: target.name },
             member: { id: member.id, email: member.email, role: member.role, status: member.status },
-            note: member.status === "invited" ? "Pending — the person gets access when they sign in." : "Added.",
+            note: "Added — the person has access now.",
         });
     }));
+    server.registerTool("update_workspace_member", {
+        title: "Change a member's role",
+        description: "Change a workspace member's role (owner / editor / viewer) by exact email or membership id. Requires the owner role; the last owner cannot be demoted.",
+        inputSchema: {
+            workspace: workspaceArg,
+            member: z.string().min(1).max(255).describe("Member email or membership id"),
+            role: z.enum(["owner", "editor", "viewer"]),
+        },
+        annotations: IDEMPOTENT_WRITE,
+    }, guarded(async ({ workspace, member, role }) => {
+        const target = await ctx.resolveWorkspace(workspace);
+        const { items } = await ctx.api.listMembers(target.id);
+        const needle = normalizeName(member);
+        const byEmail = items.filter((entry) => normalizeName(entry.email) === needle);
+        const resolved = byEmail.length === 1 ? byEmail[0] : resolveRef("member", member, items.map((entry) => ({ ...entry, name: entry.email })), { exact: true }).item;
+        if (resolved.role === role)
+            return ok({ workspace: { id: target.id, name: target.name }, member: { id: resolved.id, email: resolved.email, role }, note: "Already that role — nothing changed." });
+        const updated = await ctx.api.updateMemberRole(target.id, resolved.id, role);
+        ctx.invalidate(`members:${target.id}`);
+        return ok({ workspace: { id: target.id, name: target.name }, member: { id: updated.id ?? resolved.id, email: updated.email ?? resolved.email, role: updated.role ?? role, previousRole: resolved.role } });
+    }));
     server.registerTool("remove_workspace_member", {
         title: "Remove a workspace member",
-        description: "Remove a member from a workspace (by email or membership id). Requires the owner role. Permanent — confirm with the user first.",
+        description: "Remove a member from a workspace (by exact email or membership id). Owners can remove anyone; any member can remove themselves (leave). The last owner cannot be removed. Permanent — confirm with the user first.",
         inputSchema: {
             workspace: workspaceArg,
             member: z.string().min(1).max(255).describe("Member email or membership id"),
@@ -70,7 +107,7 @@ export const registerWorkspaceTools = (server, ctx) => {
         const byEmail = items.filter((entry) => normalizeName(entry.email) === needle);
         const resolved = byEmail.length === 1
             ? byEmail[0]
-            : resolveRef("member", member, items.map((entry) => ({ ...entry, name: entry.email }))).item;
+            : resolveRef("member", member, items.map((entry) => ({ ...entry, name: entry.email })), { exact: true }).item;
         if (!resolved)
             throw new ToolInputError("REF_NOT_FOUND", `No member matches "${member}".`);
         await ctx.api.removeMember(target.id, resolved.id);

package/dist/tools/workspaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../src/tools/workspaces.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE9G,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,MAAiB,EAAE,GAAgB,EAAQ,EAAE;IAClF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,0JAA0J;QACvK,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzC,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;gBAC1C,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,kBAAkB;aAC1D,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE;QACxC,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC;YACR,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YAC/C,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;SAC1I,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,2SAA2S;QAC7S,WAAW,EAAE;YACX,SAAS,EAAE,YAAY;YACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC9D;QACD,WAAW,EAAE,KAAK;KACnB,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,GAAG,CAAC,UAAU,CAAC,WAAW,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;YACR,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YAC/C,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;YACxF,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,QAAQ;SACrG,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iIAAiI;QAC9I,WAAW,EAAE;YACX,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAC5E,OAAO,EAAE,UAAU;SACpB;QACD,WAAW,EAAE,WAAW;KACzB,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/C,cAAc,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;QAC/E,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjG,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,sBAAsB,MAAM,IAAI,CAAC,CAAC;QAC3F,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../src/tools/workspaces.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEhI,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,MAAiB,EAAE,GAAgB,EAAQ,EAAE;IAClF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,+NAA+N;QAC5O,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC;YACR,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzC,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;gBAC1C,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,GAAG,CAAC,qBAAqB,EAAE;aACxD,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,4CAA4C;QACnD,WAAW,EACT,uZAAuZ;QACzZ,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC,EAAE;QAC9G,WAAW,EAAE,gBAAgB;KAC9B,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC7C,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,mGAAmG,EAAE,CAAC,CAAC;QAChL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,GAAG,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE;QACxC,WAAW,EAAE,IAAI;KAClB,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC;YACR,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YAC/C,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;SAC1I,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,6VAA6V;QAC/V,WAAW,EAAE;YACX,SAAS,EAAE,YAAY;YACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC9D;QACD,WAAW,EAAE,KAAK;KACnB,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,GAAG,CAAC,UAAU,CAAC,WAAW,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;YACR,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YAC/C,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;YACxF,IAAI,EAAE,oCAAoC;SAC3C,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,wJAAwJ;QACrK,WAAW,EAAE;YACX,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAC5E,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;SAC5C;QACD,WAAW,EAAE,gBAAgB;KAC9B,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;QAC/E,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAClJ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACnM,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7E,GAAG,CAAC,UAAU,CAAC,WAAW,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7M,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,oNAAoN;QACtN,WAAW,EAAE;YACX,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAC5E,OAAO,EAAE,UAAU;SACpB;QACD,WAAW,EAAE,WAAW;KACzB,EACD,OAAO,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/C,cAAc,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;QAC/E,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACZ,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAClH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,sBAAsB,MAAM,IAAI,CAAC,CAAC;QAC3F,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}

package/dist-cjs/client/api.js

@@ -26,6 +26,9 @@ class CallmanApi {
     addMember(workspaceId, body) {
         return this.http.request("POST", `/workspaces/${workspaceId}/members`, { body });
     }
+    updateMemberRole(workspaceId, memberId, role) {
+        return this.http.request("PATCH", `/workspaces/${workspaceId}/members/${memberId}/role`, { body: { role } });
+    }
     removeMember(workspaceId, memberId) {
         return this.http.request("DELETE", `/workspaces/${workspaceId}/members/${memberId}`);
     }
@@ -87,9 +90,42 @@ class CallmanApi {
     updateRequest(ws, id, body) {
         return this.http.request("PATCH", `/requests/${id}`, { workspaceId: ws, body });
     }
+    // isEnabledInRunner has its own route — PATCH /requests/:id strips it.
+    setRequestRunState(ws, id, isEnabledInRunner) {
+        return this.http.request("PATCH", `/requests/${id}/run-toggle`, { workspaceId: ws, body: { isEnabledInRunner } });
+    }
     deleteRequest(ws, id) {
         return this.http.request("DELETE", `/requests/${id}`, { workspaceId: ws });
     }
+    // ── contract checks (per request) ───────────────────────────────────
+    listContractRules(ws, requestId) {
+        return this.http.request("GET", "/contract-rules", { workspaceId: ws, query: { requestId } });
+    }
+    createContractRules(ws, body) {
+        return this.http.request("POST", "/contract-rules/batch", { workspaceId: ws, body });
+    }
+    updateContractRule(ws, id, body) {
+        return this.http.request("PATCH", `/contract-rules/${id}`, { workspaceId: ws, body });
+    }
+    deleteContractRule(ws, id) {
+        return this.http.request("DELETE", `/contract-rules/${id}`, { workspaceId: ws });
+    }
+    validateContractRules(ws, body) {
+        return this.http.request("POST", "/contract-rules/validate", { workspaceId: ws, body });
+    }
+    getDataContract(ws, requestId) {
+        return this.http.request("GET", "/data-contracts", { workspaceId: ws, query: { requestId } });
+    }
+    putDataContract(ws, body) {
+        return this.http.request("PUT", "/data-contracts", { workspaceId: ws, body });
+    }
+    deleteDataContract(ws, requestId) {
+        return this.http.request("DELETE", "/data-contracts", { workspaceId: ws, query: { requestId } });
+    }
+    // ── connections (safe records) ──────────────────────────────────────
+    listConnections(ws, type) {
+        return this.http.request("GET", "/connections", { workspaceId: ws, query: type ? { type } : {} });
+    }
     // ── import ──────────────────────────────────────────────────────────
     importJson(ws, body) {
         return this.http.request("POST", "/import/json", { workspaceId: ws, body, timeoutMs: 120_000 });
@@ -98,12 +134,25 @@ class CallmanApi {
         return this.http.request("POST", "/import/scenario", { workspaceId: ws, body, timeoutMs: 120_000 });
     }
     // ── environments / globals ──────────────────────────────────────────
-    listEnvironments(ws, reveal = false) {
+    listEnvironments(ws, reveal = false, page = 1) {
         return this.http.request("GET", "/environments", {
             workspaceId: ws,
-            query: { page: 1, limit: 100, ...(reveal ? { reveal: "true" } : {}) },
+            query: { page, limit: 100, ...(reveal ? { reveal: "true" } : {}) },
         });
     }
+    async listAllEnvironments(ws) {
+        const out = [];
+        for (let page = 1; page <= 50; page += 1) {
+            const result = await this.listEnvironments(ws, false, page);
+            out.push(...result.items);
+            if (page >= result.pagination.totalPages || result.items.length === 0)
+                break;
+        }
+        return out;
+    }
+    updateEnvironment(ws, id, body) {
+        return this.http.request("PATCH", `/environments/${id}`, { workspaceId: ws, body });
+    }
     getEnvironment(ws, id, reveal = false) {
         return this.http.request("GET", `/environments/${id}`, { workspaceId: ws, query: reveal ? { reveal: "true" } : {} });
     }
@@ -125,6 +174,12 @@ class CallmanApi {
     listGlobalVariables(ws, reveal = false) {
         return this.http.request("GET", "/variables/global", { workspaceId: ws, query: reveal ? { reveal: "true" } : {} });
     }
+    setGlobalVariable(ws, body) {
+        return this.http.request("POST", "/variables/global", { workspaceId: ws, body });
+    }
+    deleteGlobalVariable(ws, key) {
+        return this.http.request("DELETE", `/variables/global/${encodeURIComponent(key)}`, { workspaceId: ws });
+    }
     // ── scenarios ───────────────────────────────────────────────────────
     listScenarios(ws) {
         return this.http.request("GET", "/scenarios", { workspaceId: ws });
@@ -144,6 +199,16 @@ class CallmanApi {
     deleteScenario(ws, id) {
         return this.http.request("DELETE", `/scenarios/${id}`, { workspaceId: ws });
     }
+    // On-prem scenario groups the caller can bind a scenario to ([] on cloud).
+    listMyScenarioGroups(ws) {
+        return this.http.request("GET", "/scenarios/my-groups", { workspaceId: ws });
+    }
+    listApproverCandidates(ws, id) {
+        return this.http.request("GET", `/scenarios/${id}/approver-candidates`, { workspaceId: ws });
+    }
+    submitScenario(ws, id, body) {
+        return this.http.request("POST", `/scenarios/${id}/submit`, { workspaceId: ws, body });
+    }
     runScenario(ws, id, body) {
         return this.http.request("POST", `/scenarios/${id}/run-server`, { workspaceId: ws, body });
     }

package/dist-cjs/client/errors.js

@@ -46,6 +46,19 @@ class ToolInputError extends Error {
 }
 exports.ToolInputError = ToolInputError;
 const SCOPE_HINT = "Create a token with that permission in the Callman desktop app (Settings → AI tools → New token) and update the CALLMAN_TOKEN in your MCP config.";
+// Point a validation error at the reference for the area it came from.
+const validationHint = (path) => {
+    const doc = /\/(scenarios|scenario-folders)/.test(path)
+        ? "callman://docs/scenario-nodes"
+        : /\/diagrams/.test(path)
+            ? "callman://docs/diagram-schema"
+            : /\/(contract-rules|data-contracts)/.test(path)
+                ? "callman://docs/contracts"
+                : /\/(environments|variables)/.test(path)
+                    ? null
+                    : "callman://docs/request-schema";
+    return `The server rejected the input — check the fields listed in details${doc ? ` against ${doc}` : " (keys 1–100 chars, values ≤ 5000)"}.`;
+};
 const hintFor = (error) => {
     switch (error.code) {
         case "PAT_SCOPE_MISSING": {
@@ -55,11 +68,24 @@ const hintFor = (error) => {
             return `The token lacks the permission ${required}. ${SCOPE_HINT}`;
         }
         case "PAT_ROUTE_FORBIDDEN":
-            return "This area of Callman is not available to AI tools yet (mocks, connections, history, UI tests, admin). Use the desktop app for it.";
-        case "FEATURE_DISABLED":
-            return "AI tools are switched off for this account by an administrator (feature flag mcp). Ask them to enable it in the admin panel.";
+            return "This area of Callman is not available to AI tools (mocks, history, UI tests, schedules, connection editing, admin). Use the desktop app for it.";
+        case "FEATURE_DISABLED": {
+            const feature = error.details?.feature;
+            return typeof feature === "string"
+                ? `The "${feature}" feature is switched off for this account or edition. An administrator can enable it in the admin panel; whoami lists the enabled features.`
+                : "A feature this call needs is switched off for this account. whoami lists the enabled features; an administrator can enable it in the admin panel.";
+        }
         case "SECRET_MASKED_VALUE_REJECTED":
-            return "A masked value (••••) was sent back as if it were real. Read the value with get_environment reveal:true (needs environments:reveal) or set a new real value.";
+            return "A masked value (••••) was sent back as if it were real. Read the value with reveal: true (needs environments:reveal) or send the real value.";
+        case "SCENARIO_NOT_APPROVED":
+            return "Personal tokens run the APPROVED version of a scenario, and this one has none yet. Submit it for review (submit_scenario) and have an approver approve it in the desktop app, then run it again.";
+        case "SCENARIO_GROUP_REQUIRED":
+            return "You belong to several scenario groups — pass `group` (name or id) to say which one owns the scenario.";
+        case "SCENARIO_ENV_NOT_FOUND":
+            return "The scenario has no environment with that id or name — get_scenario lists its environments.";
+        case "WORKSPACE_LAST_OWNER_REQUIRED":
+        case "WORKSPACE_LAST_OWNER_ROLE_CHANGE_FORBIDDEN":
+            return "A workspace must keep at least one owner. Make someone else owner first (update_workspace_member), then change or remove this member.";
         case "SCENARIO_VERSION_CONFLICT":
             return "Someone changed the scenario since it was read. Re-read it with get_scenario, reapply your change on the current version, then call update_scenario with the new expectedVersion (or force:true to overwrite).";
         case "DIAGRAM_DOCUMENT_INVALID":
@@ -71,9 +97,9 @@ const hintFor = (error) => {
         case "WORKSPACE_MEMBER_EXISTS":
             return "That person is already a member of the workspace. Use list_workspace_members to see their role.";
         case "WORKSPACE_MEMBER_REMOVE_FORBIDDEN":
-            return "That member cannot be removed (the last owner of a workspace must stay).";
+            return "Only a workspace owner can remove other members (anyone can remove themselves).";
         case "VALIDATION_ERROR":
-            return "The request body did not pass validation — check the listed fields against callman://docs/request-schema.";
+            return validationHint(error.path);
         case "WORKSPACE_ACCESS_DENIED":
         case "WORKSPACE_NOT_FOUND":
         case "WORKSPACE_ID_REQUIRED":
@@ -90,7 +116,7 @@ const hintFor = (error) => {
         case 404:
             return "Nothing matched that id. Use the list_* / search_* tools to find the right item — names work as references too.";
         case 409:
-            return "That name already exists. Pick another name or reuse the existing item (list it first).";
+            return "The server refused the change because of the item's current state (a name that already exists, a newer version, an approval rule). Read the item again and see the error message.";
         case 413:
             return "The payload is too large for the server. Split the import or reduce the document.";
         case 429:

package/dist-cjs/context.js

@@ -20,10 +20,11 @@ const createToolContext = (options) => {
     const api = new api_js_1.CallmanApi(http);
     const cache = new cache_js_1.TtlCache(options.cacheTtlMs ?? 15_000);
     let runLock = Promise.resolve();
+    let defaultWorkspaceId = options.config.defaultWorkspaceId ?? null;
     const listWorkspaces = () => cache.getOrSet("workspaces", () => api.listWorkspaces());
     const pickWorkspace = async (explicit, required) => {
         const workspaces = await listWorkspaces();
-        const wanted = (explicit ?? "").trim() || options.config.defaultWorkspaceId || "";
+        const wanted = (explicit ?? "").trim() || defaultWorkspaceId || "";
         if (wanted) {
             const byId = workspaces.find((workspace) => workspace.id === wanted);
             if (byId)
@@ -52,7 +53,7 @@ const createToolContext = (options) => {
             return null;
         throw new errors_js_1.ToolInputError(workspaces.length === 0 ? "WORKSPACE_NONE" : "WORKSPACE_REQUIRED", workspaces.length === 0
             ? "You are not a member of any workspace."
-            : "Several workspaces are available — pass `workspace` (name or id) or set CALLMAN_WORKSPACE_ID.", { candidates: summarize(workspaces) });
+            : "This needs one target workspace and you have several — pass `workspace` (name or id), or pick a default for the session with use_workspace.", { candidates: summarize(workspaces) });
     };
     return {
         config: options.config,
@@ -61,6 +62,10 @@ const createToolContext = (options) => {
         cache,
         version: options.version,
         listWorkspaces,
+        getDefaultWorkspaceId: () => defaultWorkspaceId,
+        setDefaultWorkspaceId: (id) => {
+            defaultWorkspaceId = id;
+        },
         getTokenScopes: () => cache.getOrSet("token-scopes", async () => {
             try {
                 return (await api.me()).token.scopes ?? [];

package/dist-cjs/domain/contracts.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.undeclaredDataColumns = exports.dataContractRowSchema = exports.DATA_CONTRACT_LIMITS = exports.contractRuleInputSchema = exports.contractRulesSchema = exports.contractPathSchema = void 0;
+const callman_core_1 = require("callman-core");
+const zod_1 = require("zod");
+const strict_js_1 = require("../lib/strict.js");
+// Contract checks on a saved request — the same two documents the desktop's
+// Contracts tab edits and every runner (desktop, CLI, run_request /
+// run_collection) evaluates after the response:
+//   * contract RULES — "the field at `path` must satisfy `rules`"
+//   * a DATA CONTRACT — rows of inputs ({{data.<column>}}), each with its own
+//     expected status and field assertions; the request runs once per row.
+// The rule vocabulary mirrors the backend's contractRuleRulesSchema exactly
+// (strict here, so a misspelled rule is an error instead of a no-op).
+// `users[].id`, `data.items[0].price`, `[].name`, `response.status`,
+// `response.headers.content-type` — same grammar the backend enforces.
+const CONTRACT_PATH = /^(\[\d*\]|[A-Za-z0-9_$-]+(\[\d*\])?)(\.(\[\d*\]|[A-Za-z0-9_$-]+(\[\d*\])?))*$/;
+exports.contractPathSchema = zod_1.z
+    .string()
+    .trim()
+    .min(1)
+    .max(500)
+    .regex(CONTRACT_PATH, "Invalid contract path — use dots and [] like users[].id, items[0].price or response.status")
+    .describe("Field path. Body paths: user.id, users[].id (every element), items[0].price (one element), [].name (top-level array). `response.status`, `response.headers.<name>` and `response.duration` check the HTTP envelope instead of the body.");
+const nonNegativeInt = zod_1.z.number().int().min(0);
+exports.contractRulesSchema = (0, strict_js_1.strictObject)({
+    required: zod_1.z.boolean().optional().describe("The field must exist"),
+    type: zod_1.z.enum(["string", "number", "boolean", "object", "array", "null"]).optional(),
+    equals: zod_1.z.union([zod_1.z.string().max(2000), zod_1.z.number(), zod_1.z.boolean()]).optional().describe("Exact value (honours caseSensitive for strings)"),
+    notEmpty: zod_1.z.boolean().optional().describe("Not \"\", [], {} or null"),
+    // numbers
+    min: zod_1.z.number().optional(),
+    max: zod_1.z.number().optional(),
+    greaterThan: zod_1.z.number().optional(),
+    lessThan: zod_1.z.number().optional(),
+    integer: zod_1.z.boolean().optional(),
+    positive: zod_1.z.boolean().optional(),
+    negative: zod_1.z.boolean().optional(),
+    nonZero: zod_1.z.boolean().optional(),
+    // strings
+    minLength: nonNegativeInt.optional(),
+    maxLength: nonNegativeInt.optional(),
+    pattern: zod_1.z.string().max(1000).optional().describe("JavaScript regular expression the string must match"),
+    contains: zod_1.z.string().max(1000).optional(),
+    notContains: zod_1.z.string().max(1000).optional(),
+    startsWith: zod_1.z.string().max(1000).optional(),
+    endsWith: zod_1.z.string().max(1000).optional(),
+    caseSensitive: zod_1.z.boolean().optional().describe("For equals/contains/startsWith/endsWith (default true)"),
+    enumValues: zod_1.z.array(zod_1.z.union([zod_1.z.string().max(500), zod_1.z.number()])).min(1).max(100).optional().describe("The value must be one of these"),
+    format: zod_1.z.enum(callman_core_1.SCENARIO_CONTRACT_FORMATS).optional().describe(`String format: ${callman_core_1.SCENARIO_CONTRACT_FORMATS.join(", ")}`),
+    // arrays
+    minItems: nonNegativeInt.optional(),
+    maxItems: nonNegativeInt.optional(),
+    sorted: (0, strict_js_1.strictObject)({ order: zod_1.z.enum(["asc", "desc"]), field: zod_1.z.string().max(200).optional().describe("Sort key for arrays of objects") }, "sorted field").optional(),
+    unique: (0, strict_js_1.strictObject)({ mode: zod_1.z.enum(["whole", "byField"]), fields: zod_1.z.array(zod_1.z.string().max(200)).max(50).optional().describe("Required with mode byField") }, "unique field").optional(),
+    // objects
+    requiredKeys: zod_1.z.array(zod_1.z.string().max(200)).max(100).optional(),
+    forbiddenKeys: zod_1.z.array(zod_1.z.string().max(200)).max(100).optional(),
+    minProperties: nonNegativeInt.optional(),
+    maxProperties: nonNegativeInt.optional(),
+    strictSchema: zod_1.z.boolean().optional().describe("Objects: no keys beyond requiredKeys"),
+}, "contract rule").refine((rules) => Object.values(rules).some((value) => value !== undefined), { message: "Give at least one rule (e.g. { required: true, type: \"string\" })" });
+exports.contractRuleInputSchema = (0, strict_js_1.strictObject)({
+    path: exports.contractPathSchema,
+    rules: exports.contractRulesSchema,
+    enabled: zod_1.z.boolean().optional().describe("Default true"),
+}, "contract rule field");
+// Data-driven contract — backend caps (DATA_CONTRACT_*).
+exports.DATA_CONTRACT_LIMITS = { rows: 20, columns: 8, assertions: 12, cell: 4096 };
+exports.dataContractRowSchema = (0, strict_js_1.strictObject)({
+    data: zod_1.z
+        .record(zod_1.z.string().max(exports.DATA_CONTRACT_LIMITS.cell))
+        .default({})
+        .describe("Column → value for this row; the request reads them as {{data.<column>}}"),
+    expectedStatus: zod_1.z.number().int().min(100).max(599).optional().describe("HTTP status this row must return"),
+    assertions: zod_1.z
+        .array((0, strict_js_1.strictObject)({ path: exports.contractPathSchema, rules: exports.contractRulesSchema, enabled: zod_1.z.boolean().optional() }, "row assertion field"))
+        .max(exports.DATA_CONTRACT_LIMITS.assertions)
+        .default([])
+        .describe(`Field checks for this row (≤ ${exports.DATA_CONTRACT_LIMITS.assertions})`),
+}, "data contract row field");
+// Every {{data.x}} a row set needs must be a declared column — catch the
+// typo before the run reports an empty value.
+const undeclaredDataColumns = (columns, rows) => {
+    const declared = new Set(columns);
+    const used = new Set();
+    for (const row of rows)
+        for (const key of Object.keys(row.data))
+            if (!declared.has(key))
+                used.add(key);
+    return [...used];
+};
+exports.undeclaredDataColumns = undeclaredDataColumns;

package/dist-cjs/domain/diagram/build.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildDiagramDocument = exports.suggestComponentTypes = exports.diagramInputSchema = exports.diagramEdgeInputSchema = exports.diagramNodeInputSchema = exports.EDGE_SEMANTICS_INPUT = void 0;
+exports.buildDiagramDocument = exports.edgeStyleFor = exports.assertNotConnector = exports.parentWarning = exports.containerTypes = exports.isContainerType = exports.suggestComponentTypes = exports.diagramInputSchema = exports.diagramEdgeInputSchema = exports.diagramNodeInputSchema = exports.EDGE_SEMANTICS_INPUT = void 0;
 const callman_core_1 = require("callman-core");
 const zod_1 = require("zod");
 const errors_js_1 = require("../../client/errors.js");
 const ids_js_1 = require("../../lib/ids.js");
+const strict_js_1 = require("../../lib/strict.js");
+const style_js_1 = require("./style.js");
 // From the COMPACT diagram a model writes (typed nodes with labels, edges
 // with a meaning) to the DiagramDocument the Diagram Studio renders. Ids are
 // short and stable (n1…, e1…), component types are checked against the
@@ -12,30 +14,40 @@ const ids_js_1 = require("../../lib/ids.js");
 // meaning becomes the studio's notation (sync / async / fallback / bus), and
 // the result is validated with the same parser the backend and desktop use.
 exports.EDGE_SEMANTICS_INPUT = ["sync", "async", "fallback", "bus"];
-exports.diagramNodeInputSchema = zod_1.z.object({
+const ARROWS = ["none", "classic", "classicThin", "open", "block", "diamond", "oval"];
+exports.diagramNodeInputSchema = (0, strict_js_1.strictObject)({
     id: zod_1.z.string().min(1).max(64).optional().describe("Stable id (n1, api, db…); generated when omitted"),
-    type: zod_1.z.string().min(1).max(80).describe("Component type from callman://diagram/components, e.g. net.service, db.postgres, aws.lambda, flow.process"),
+    type: zod_1.z.string().min(1).max(80).describe("Component type from callman://diagram/components, e.g. net.service, net.api-gateway, db.postgres, mq.kafka, aws.lambda, flow.process"),
     label: zod_1.z.string().max(200).optional(),
-    parent: zod_1.z.string().max(64).optional().describe("Id of a container node (net.zone, flow.frame…) this node sits inside"),
-    position: zod_1.z.object({ x: zod_1.z.number(), y: zod_1.z.number() }).optional(),
-    size: zod_1.z.object({ width: zod_1.z.number().positive(), height: zod_1.z.number().positive() }).optional(),
-    style: zod_1.z.record(zod_1.z.unknown()).optional(),
-    data: zod_1.z.record(zod_1.z.unknown()).optional(),
-});
-exports.diagramEdgeInputSchema = zod_1.z.object({
+    parent: zod_1.z.string().max(64).optional().describe("Id of a container node this node sits inside: frame, pool.horizontal or pool.vertical"),
+    position: zod_1.z.object({ x: zod_1.z.number(), y: zod_1.z.number() }).strict().optional().describe("Top-left corner; relative to the parent container when `parent` is set. Omit to auto-layout"),
+    size: zod_1.z.object({ width: zod_1.z.number().positive(), height: zod_1.z.number().positive() }).strict().optional().describe("Defaults to the component's catalog size"),
+    style: style_js_1.nodeStyleInputSchema.optional(),
+    rotation: zod_1.z.number().min(-360).max(360).optional().describe("Degrees, clockwise"),
+    locked: zod_1.z.boolean().optional().describe("Locked nodes cannot be moved or resized in the studio"),
+    hidden: zod_1.z.boolean().optional(),
+    data: zod_1.z.record(zod_1.z.unknown()).optional().describe("Free-form metadata kept with the node (not rendered), e.g. { owner: \"team-a\", repo: \"…\" }"),
+}, "node field");
+exports.diagramEdgeInputSchema = (0, strict_js_1.strictObject)({
     id: zod_1.z.string().min(1).max(64).optional(),
-    source: zod_1.z.string().min(1).max(64),
-    target: zod_1.z.string().min(1).max(64),
+    source: zod_1.z.string().min(1).max(64).describe("Node id"),
+    target: zod_1.z.string().min(1).max(64).describe("Node id. A container (frame/pool) id is allowed — the line ends at its border"),
     label: zod_1.z.string().max(200).optional(),
-    semantic: zod_1.z.enum(exports.EDGE_SEMANTICS_INPUT).optional().describe("sync (default) = request/response, async = event, fallback = retry/optional, bus = message bus"),
-    routing: zod_1.z.enum(["orthogonal", "straight", "curved"]).optional(),
-    markerEnd: zod_1.z.enum(["none", "classic", "classicThin", "open", "block", "diamond", "oval"]).optional(),
-});
+    semantic: zod_1.z.enum(exports.EDGE_SEMANTICS_INPUT).optional().describe("sync (default, solid) = request/response, async (dashed) = event, fallback (dotted) = retry/optional, bus (heavy) = message bus; automatic bus when an end is a messaging component"),
+    color: style_js_1.colorInputSchema.optional().describe('Line CSS color, e.g. "#8B5CF6". Independent of `semantic`'),
+    routing: zod_1.z.enum(["orthogonal", "straight", "curved"]).optional().describe("orthogonal (default, right-angle auto-routing), straight, curved"),
+    markerEnd: zod_1.z.enum(ARROWS).optional().describe("Arrow at the target (default classicThin)"),
+    markerStart: zod_1.z.enum(ARROWS).optional().describe("Arrow at the source (default none) — set it for a two-way connection"),
+}, "edge field");
 exports.diagramInputSchema = zod_1.z.object({
     title: zod_1.z.string().min(1).max(200),
     nodes: zod_1.z.array(exports.diagramNodeInputSchema).min(1).max(500),
     edges: zod_1.z.array(exports.diagramEdgeInputSchema).max(2000).default([]),
-    canvas: zod_1.z.object({ background: zod_1.z.enum(["grid", "dots", "blank"]).optional(), gridSize: zod_1.z.number().int().positive().optional() }).optional(),
+    canvas: zod_1.z
+        .object({ background: zod_1.z.enum(["grid", "dots", "blank"]).optional(), gridSize: zod_1.z.number().int().positive().optional() })
+        .strict()
+        .optional()
+        .describe("Canvas background (default dots) and grid size (default 16)"),
 });
 const suggestComponentTypes = (type, limit = 5) => {
     const seen = new Set();
@@ -69,6 +81,34 @@ const suggestComponentTypes = (type, limit = 5) => {
     return out;
 };
 exports.suggestComponentTypes = suggestComponentTypes;
+// Containers hold children through `parent`: frames and swimlane pools.
+const isContainerType = (type) => {
+    const def = type ? (0, callman_core_1.getDiagramComponent)(type) : undefined;
+    return Boolean(def?.container || def?.swimlane);
+};
+exports.isContainerType = isContainerType;
+const containerTypes = () => callman_core_1.DIAGRAM_COMPONENT_CATALOG.filter((entry) => entry.container || entry.swimlane).map((entry) => entry.type);
+exports.containerTypes = containerTypes;
+const parentWarning = (id, parentId, parentType) => (0, exports.isContainerType)(parentType)
+    ? null
+    : `Node ${id} sits inside "${parentId}" (${parentType ?? "unknown"}), which is not a container — use ${(0, exports.containerTypes)().join(", ")} to group nodes.`;
+exports.parentWarning = parentWarning;
+// Edge input → the stored edge's visual fields: the semantic's line tuple
+// plus an optional color.
+// line / arrow / line.dashed are palette connectors (0-height), not nodes.
+const assertNotConnector = (type, id) => {
+    if ((0, callman_core_1.getDiagramComponent)(type)?.variant === "line") {
+        throw new errors_js_1.ToolInputError("DIAGRAM_CONNECTOR_NOT_NODE", `"${type}" on ${id} is a connector, not a node — draw it as an edge between two nodes.`);
+    }
+};
+exports.assertNotConnector = assertNotConnector;
+const edgeStyleFor = (semantic, color) => {
+    const base = semantic ? (0, callman_core_1.semanticStyle)(semantic) : undefined;
+    if (!color)
+        return base;
+    return { ...(base ?? {}), stroke: (0, style_js_1.toTokenRef)(color) };
+};
+exports.edgeStyleFor = edgeStyleFor;
 const buildDiagramDocument = (input, options = {}) => {
     const strict = options.strictTypes !== false;
     const warnings = [];
@@ -96,6 +136,8 @@ const buildDiagramDocument = (input, options = {}) => {
                 type = "rect";
             }
         }
+        if (known)
+            (0, exports.assertNotConnector)(type, id);
         const def = (0, callman_core_1.getDiagramComponent)(type);
         typeOf.set(id, type);
         if (node.parent && !idSet.has(node.parent)) {
@@ -108,10 +150,18 @@ const buildDiagramDocument = (input, options = {}) => {
             size: node.size ?? def?.defaultSize ?? { width: 140, height: 60 },
             ...(node.label !== undefined || !known ? { label: node.label ?? node.type } : def?.defaultLabel ? { label: def.defaultLabel } : {}),
             ...(node.parent ? { parentId: node.parent } : {}),
-            ...(node.style ? { style: node.style } : {}),
+            ...(node.style ? { style: (0, style_js_1.applyStyleInput)(undefined, node.style) } : {}),
+            ...(node.rotation ? { rotation: node.rotation } : {}),
+            ...(node.locked ? { locked: true } : {}),
+            ...(node.hidden ? { hidden: true } : {}),
             ...(node.data ? { data: node.data } : {}),
         };
     });
+    for (const node of nodes) {
+        const warning = node.parentId ? (0, exports.parentWarning)(node.id, node.parentId, typeOf.get(node.parentId)) : null;
+        if (warning)
+            warnings.push(warning);
+    }
     if (unknown.length > 0) {
         throw new errors_js_1.ToolInputError("DIAGRAM_UNKNOWN_COMPONENT_TYPE", `Unknown component type(s): ${unknown.map((entry) => entry.type).join(", ")}. Read callman://diagram/components for the catalog, or pass strictTypes:false to draw them as rectangles.`, { unknownTypes: unknown });
     }
@@ -131,7 +181,7 @@ const buildDiagramDocument = (input, options = {}) => {
         if (!semantic && ((0, callman_core_1.isBusComponentType)(typeOf.get(edge.source)) || (0, callman_core_1.isBusComponentType)(typeOf.get(edge.target)))) {
             semantic = "bus";
         }
-        const style = semantic ? (0, callman_core_1.semanticStyle)(semantic) : undefined;
+        const style = (0, exports.edgeStyleFor)(semantic, edge.color);
         return {
             id,
             source: edge.source,
@@ -139,7 +189,8 @@ const buildDiagramDocument = (input, options = {}) => {
             ...(edge.label ? { label: edge.label } : {}),
             routing: edge.routing ?? "orthogonal",
             markerEnd: edge.markerEnd ?? "classicThin",
-            ...(style && !(0, callman_core_1.isDefaultEdgeStyle)(style) ? { style } : semantic === "sync" ? { style } : {}),
+            ...(edge.markerStart && edge.markerStart !== "none" ? { markerStart: edge.markerStart } : {}),
+            ...(style && (!(0, callman_core_1.isDefaultEdgeStyle)(style) || semantic === "sync" || edge.color) ? { style } : {}),
         };
     });
     const timestamp = options.createdAt ?? (0, callman_core_1.nowIso)();