rootr-cli 0.22.0 → 0.24.0

package/README.ko.md

@@ -192,6 +192,7 @@ rootr rm /notes/todo.md --yes    # 확인 없이 (스크립트용)
 ```bash
 rootr ws                       # 목록 (현재 워크스페이스에 *, 못 여는 곳은 표시)
 rootr use "영업팀"              # 전환 — id · 이름 · rootr.io 주소 아무거나
+rootr emblem ./logo.png        # 워크스페이스 엠블럼(사이드바 로고, 관리자) — --clear 면 지움
 ```
 
 `rootr ws` 출력은 `id\tname` 목록입니다. 등록된 키가 워크스페이스 전용 키뿐이면 목록에는
@@ -304,6 +305,22 @@ rootr sign ledger          # 워크스페이스 원장 전체 재계산
 원본은 `SUPERSEDED`로 남습니다 — 지침이 "고친 흔적과 원본이 모두 보여야 한다"를
 요구하기 때문입니다.
 
+### 문서 보내기 · 문서함 (send · mail)
+
+폴더만 빼고 어떤 노드든 이메일 1~20명에게 **보낼 때의 복사본**으로 보낼 수 있습니다. 담기는 내용은
+공개 페이지와 같아서 사람·첨부·관계 칸은 나가지 않습니다. 받는 사람은 메일 링크로 **루터 계정 없이**
+열고, 그 이메일에 루터 계정이 있거나 나중에 가입하면 받은 문서함에도 그대로 있습니다. 보낸 뒤 원본을
+고치거나 지워도 받은 문서는 그대로입니다. 보내려면 그 노드에 쓰기(WRITE) 권한이 있어야 합니다(공유와 같은 문턱).
+
+```bash
+rootr send "/보고서/3분기 실적" --to partner@example.com,cfo@example.com --message "말씀드린 자료입니다"
+rootr mail                 # 받은 문서 (안 읽은 수 함께)
+rootr mail sent            # 보낸 문서 — 읽었는지, 메일 실패
+rootr mail show <id>       # 열기 (문서는 마크다운 본문, 그 밖은 --json 으로 전부)
+rootr mail revoke <id>     # 회수 — 받는 쪽에서 본문이 안 보이고 링크는 410
+rootr mail hide <id>       # 내 문서함에서만 지우기
+```
+
 ### 제보 보내기 (feedback)
 
 ```bash
@@ -351,7 +368,7 @@ rootr memory forget <id>                         # 폐기(--hard면 행 삭제)
 
 ## MCP 서버로 사용하기
 
-`rootr mcp`는 stdio로 MCP(Model Context Protocol) 서버를 구동합니다. 제공 도구 186종:
+`rootr mcp`는 stdio로 MCP(Model Context Protocol) 서버를 구동합니다. 제공 도구 197종:
 
 노드를 가리키는 인자(`target`, `databaseId`, `spreadsheetId`, `formId`, `crmId`, `trackerId`,
 `recordingId`, `presentationId`, `whiteboardId`, `logId`, `parentId` 등)는 **노드 id와 경로를 모두**
@@ -401,6 +418,7 @@ rootr memory forget <id>                         # 폐기(--hard면 행 삭제)
 | `rootr_create_workspace` | **계정 키(PAT) + workspaces:create** | 짓기 3단계 — 계획된 트리로 새 워크스페이스 생성(검사 결과도 같이 돌려준다) |
 | `rootr_scaffold_apply` | docs:write | 짓기 3단계 — 기존 워크스페이스에 트리 적용(검사 결과도 같이 돌려준다) |
 | `rootr_delete_workspace` | **계정 키(PAT) + OWNER** | 짓다 실패해 남은 **빈 워크스페이스 치우기**. 이름을 그대로 다시 적어야 지워진다(되돌릴 수 없음) |
+| `rootr_set_workspace_emblem` | docs:write + **ADMIN** | 워크스페이스 **엠블럼**(사이드바 배지·전환기 로고) 바꾸기 — 이미지 파일·이미 올린 첨부 id·`clear` 중 하나 |
 
 스캐폴딩은 **plan → 물어보기 → 설계 → review → 고치기 → apply** 한 바퀴입니다.
 `review` 를 건너뛰면 "얇은 마크다운 파일 묶음"이 됩니다. CLI 로도 같은 세 단계를 쓸 수 있습니다:
@@ -653,6 +671,11 @@ rootr db view <표> <뷰> --scale year       # 달력 보기를 주·달·해
 | `rootr_set_booking` | 예약 켜기/끄기와 규칙(요일·시간·길이·여유·며칠 전·하루 최대·쉬는 날·**막는 시간**·확정 방식·물어볼 칸·**결과 메일**·**구글 밋**·**방문자 직접 취소**·**방문자 직접 시간 변경**·**미리 알림**) |
 | `rootr_booking_slots` | 방문자에게 실제로 보이는 빈 시간(규칙이 뜻대로 걸렸는지 확인) |
 
+여유 시간은 둘입니다. `bufferMin`은 이 표로 잡힌 **예약** 앞뒤(CLI `--buffer`), `calendarBufferMin`은
+연결한 구글 캘린더에 **이미 있던 일정** 앞뒤(CLI `--calendar-buffer 60`) — 밖에서 하는 미팅의 이동 시간
+같은 것입니다. 예: 구글 쪽 60분·예약 0분이면 구글에 있는 14~15시 미팅 때문에 13~16시가 닫히고, 온라인
+상담 예약끼리는 붙여 잡힙니다. 이 표가 구글에 적은 예약은 "이미 있던 일정"으로 세지 않습니다.
+
 방문자 화면은 **방문자 자신의 시간대**로 빈 시간을 보여주고(고칠 수도 있습니다), 서버와
 주고받는 값은 끝까지 주인 시간대입니다. 확정·이동 메일에는 **일정 초대장(.ics)** 이 붙어
 방문자 캘린더에 바로 들어가고, 시간을 옮기면 그 일정이 고쳐지고 취소하면 사라집니다.
@@ -792,6 +815,18 @@ rootr db view <표> <뷰> --scale year       # 달력 보기를 주·달·해
 주세요 — 그 표는 행을 열 때마다 서명문서(연구노트)가 만들어집니다(실험 기록 대장,
 점검 대장).
 
+#### 문서 보내기 · 문서함 (docs:read/docs:write)
+
+| 도구 | 설명 |
+|---|---|
+| `rootr_send_document` | 노드 하나를 이메일 1~20명에게 보낼 때의 복사본으로 보내기 (계정 없어도 메일 링크로 열림) |
+| `rootr_list_doc_mail` | 내 문서함 — `box`: inbox(받은, 기본) / sent(보낸), 안 읽은 수 함께 |
+| `rootr_read_doc_mail` | 한 통 열기 — 본문(`payload`), 받은 것은 읽음 처리, 회수된 것은 본문 없음 |
+| `rootr_revoke_doc_mail` | 보낸 문서 회수 (보낸 사람만) |
+
+문서함은 워크스페이스가 아니라 **사람(이메일)**에 붙습니다. 사람 없는 워크스페이스 키(원격 커넥터)는
+그 키를 만든 구성원으로 동작합니다.
+
 #### 문서 버전 / 삭제
 
 | 도구 | 설명 |
@@ -822,6 +857,13 @@ HTML을 짜는 것이 아니라 **정해진 블록 15종을 골라 쌓습니다*
 화면 한 장이 되고(숫자 `height`를 같이 주면 그 값이 하한), `bleed: true`와 함께 쓰면 화면을 꽉 채우는
 섹션이 됩니다. 맨 위 이름 줄은 `config.navEnabled: false`로 끕니다.
 
+**메타(페이스북·인스타그램) 광고 성과 재기** — `config.metaPixelId`에 픽셀 ID(숫자)를 넣으면 발행한
+페이지가 방문(`PageView`)과 `booking` 블록의 예약 완료(`Schedule`)를 그 픽셀로 보냅니다. 편집 화면에서는
+싣지 않고, `""`를 보내면 꺼집니다. `config`는 고칠 때 통째로 바뀌니 다른 값도 같이 보내세요. 어느 광고에서
+온 예약인지 표에서 바로 보려면 예약 표에 유입 경로 기록을 켭니다(`rootr booking set <표> --track-source on`,
+MCP는 `rootr_set_booking`의 `trackSource: true`). "유입 경로" 칸에 방문자가 들어온 주소의 꼬리표가
+`source=meta, medium=paid, campaign=ax, content=3-docs`처럼 적힙니다.
+
 **스크롤 등장 효과** — 어느 블록이나 `reveal: "fade"`(서서히) 또는 `"fade-up"`(아래에서 위로)을 주면
 (기본 `"none"`), 발행한 페이지에서 그 블록이 화면에 들어올 때 한 번 나타납니다(큰 제목은 제목 → 부제 →
 버튼 순서로). `custom`에 `reveal`을 주면 **틀 안의 CSS 애니메이션도 그 순간에 시작**합니다 — 틀을 블록이

package/README.md

@@ -11,7 +11,7 @@ citations back to the exact paragraph.
 *(한국어 문서: [README.ko.md](https://github.com/gwmage/rootr-cli/blob/main/README.ko.md))*
 
 - `rootr` CLI — documents, databases, forms, signed documents, publishing, permissions, memory
-- `rootr mcp` — stdio MCP server, **192 tools** (see [MCP tools](#mcp-tools))
+- `rootr mcp` — stdio MCP server, **197 tools** (see [MCP tools](#mcp-tools))
 
 Plain Node.js ESM, no build step. Node 18+ (uses the built-in `fetch`).
 
@@ -180,6 +180,7 @@ as-is. `write --if-match` returns 412 if the document changed in the meantime.
 ```bash
 rootr ws                                  # id<TAB>name
 rootr use "Sales"                         # switch — id, name, or rootr.io URL
+rootr emblem ./logo.png                   # workspace emblem (sidebar logo, admin) — --clear removes it
 rootr ask "why did latency go up after last week's deploy?"
 rootr ask "why did payment failures rise?" --workspace ws_123
 ```
@@ -326,6 +327,23 @@ A signed document is never edited in place. You issue a **revision**
 (`rootr sign revise <id> --note "…"`) and the original stays as `SUPERSEDED`, because the
 regulations require both the original and the trace of the change to remain visible.
 
+### Sending a document to someone (mailbox)
+
+Any node except a folder can be emailed to 1–20 addresses as a **copy taken at send time** — the
+same content a public page shows, so person / attachment / relation columns never go out. The
+recipient opens it from the email link **without a Rootr account**; if that address has (or later
+gets) a Rootr account, it is also in their inbox. Editing or deleting the original afterwards does
+not change what they received. Sending needs WRITE on the node, the same bar as sharing.
+
+```bash
+rootr send "/reports/Q3 numbers" --to partner@example.com,cfo@example.com --message "As discussed"
+rootr mail                 # received (with the unread count)
+rootr mail sent            # what you sent — read or not, email failures
+rootr mail show <id>       # open it (a document prints its markdown; --json for any type)
+rootr mail revoke <id>     # withdraw: the recipient no longer sees the content, the link answers 410
+rootr mail hide <id>       # remove from your own mailbox only
+```
+
 ### Team memory
 
 ```bash
@@ -407,7 +425,7 @@ is refused and says when the grace was used.
 
 ## MCP tools
 
-`rootr mcp` speaks MCP over stdio. 192 tools:
+`rootr mcp` speaks MCP over stdio. 197 tools:
 
 | Group | Count | Tools |
 |---|---|---|
@@ -415,9 +433,10 @@ is refused and says when the grace was used.
 | Databases | 32 | create, columns, views, rows (single & bulk), row pages, permissions, notifications, buttons, duplicates (find / merge / keep & link), history & point-in-time restore (row / whole table) |
 | CRM | 18 | companies, contacts, deals (incl. pipeline moves), activities, tasks, CSV import |
 | Signed documents & research notes | 14 | create, sign, revise, reject, reopen, approval lines, signing codes, ledger verification, research-note preset |
+| Sending documents (mailbox) | 4 | send any node as a frozen copy to email addresses (no account needed to open), list received / sent, read, withdraw |
 | Forms | 10 | create, read, update, responses, share links, collectors |
 | Presentations & images | 10 | decks, slides, diagram slides, image generation and background removal |
-| Workspaces & scaffolding | 9 | list, create, delete, switch, plan / review / apply a document tree, health check |
+| Workspaces & scaffolding | 10 | list, create, delete, switch, set the emblem (sidebar logo), plan / review / apply a document tree, health check |
 | Pages | 6 | HTML page nodes: create, read, update, append and patch blocks, live data |
 | Spreadsheets | 7 | create, read, update, per-sheet create/update/delete, patch cells & formulas |
 | Recordings | 7 | create, upload & download audio, transcribe, summarize, rename speakers |
@@ -433,6 +452,10 @@ is refused and says when the grace was used.
 | Root-cause Q&A | 1 | ask the workspace knowledge graph, answer with citations |
 | Feedback | 1 | send feedback to the Rootr team |
 
+Two gaps keep breathing room: `bufferMin` around bookings made through the table (CLI `--buffer`) and
+`calendarBufferMin` around events already on the connected Google Calendar, e.g. travel time to an outside
+meeting (CLI `--calendar-buffer 60`). Bookings the table wrote to Google count as bookings, not existing events.
+
 Open hours can be narrowed by blocked times — one afternoon, lunch every day, Monday mornings, or a whole
 weekday — with `blockedTimes` on `rootr_set_booking` (CLI: `--block-time "daily 12:00-13:00, mon 09:00-11:00, fri"`).
 
@@ -478,6 +501,14 @@ viewport tall on every device (a numeric `height` given with it is the floor), s
 `bleed: true` + `minHeight: "screen"` is a section that fills the screen. Pair them with
 `config.navEnabled: false`.
 
+To **measure Meta (Facebook/Instagram) ads**, set `config.metaPixelId` to the numeric Pixel ID: the
+published page then reports `PageView` on load and `Schedule` when a visitor completes a booking in a
+`booking` block. The editor never loads the pixel; send `""` to turn it off. `config` is replaced as a
+whole on update, so resend the other keys with it. To see which ad each booking came from in the table
+itself, turn on source tracking on the booking table (`rootr booking set <table> --track-source on`,
+or `trackSource: true` in `rootr_set_booking`): a "유입 경로" column is filled from the visitor's
+address, e.g. `source=meta, medium=paid, campaign=ax, content=3-docs`.
+
 For **scroll-in animation**, any block takes `reveal: "fade"` or `"fade-up"` (default `"none"`): on
 the published page it appears once, when it scrolls into view (a hero staggers title → subtitle →
 button). On a `custom` block `reveal` also **starts the CSS animations inside the frame at that
@@ -536,7 +567,10 @@ Decks are authored with `rootr_create_presentation`, `rootr_read_presentation`,
 `rootr_append_presentation_slides`, `rootr_update_presentation_slide`,
 `rootr_reorder_presentation_slides` and `rootr_update_presentation`. Artwork can be produced with
 `rootr_generate_image` (image from a sentence) and `rootr_remove_image_background` — both spend
-AI credits. The same thing works over plain REST with the same API key (`x-api-key`,
+AI credits. Slides may also carry `videos[]` (uploaded mp4/webm ≤75MB, https video files, YouTube/Vimeo links;
+Team plan and above), and any element in slide `html` can animate with `data-anim="fade-up"` (also fade,
+fade-down, fly-left, fly-right, zoom, pop, blur, and looping pulse/float/spin/blink/shake; timing via
+`--anim-dur`/`--anim-delay` inline CSS variables; all plans). The same thing works over plain REST with the same API key (`x-api-key`,
 `docs:write`):
 
 ```bash

package/bin/rootr.js

@@ -28,6 +28,7 @@ const USAGE_KO = `Rootr CLI v${pkg.version}
   rootr restore <id>                               지운 것 되돌리기 (화면의 Ctrl+Z 와 같은 일 — 경로 아닌 id)
   rootr attach <file> [--doc <path|id>] [--heading "## X"] [--alt <text>]  파일 업로드(+문서에 삽입)
   rootr ws                                         내 워크스페이스 목록 (id\tname, 열 수 없는 곳은 표시)
+  rootr emblem <이미지 파일> | --clear               워크스페이스 엠블럼(사이드바 로고) 바꾸기·지우기 (관리자)
   rootr use <id|이름|주소>                          활성 워크스페이스 전환 (그 워크스페이스용 키도 기억)
   rootr ask <question> [--workspace <w>]           GraphRAG 질의응답 (RCA), 인용 포함 출력
   rootr db create [--file <spec.json>] [--parent <path|id>]  표(DATABASE) 생성 — 컬럼 순서 그대로, 행까지 한 번에
@@ -94,6 +95,11 @@ const USAGE_KO = `Rootr CLI v${pkg.version}
   rootr sign list [--pending] [--status <S>] [--mode <M>] [--json]  서명문서 목록 (--pending: 내 차례)
   rootr sign bulk <id…> --code <6자리>              여러 건 한 번에 올리기+서명 (코드 하나로, 초안 포함)
   rootr sign ledger [--json]                       워크스페이스 원장(해시 체인) 전체 검증
+  rootr send <path|id> --to a@x.com[,b@y.com] [--message "..."]  문서(어떤 타입이든)를 이메일로 보내기 — 보낼 때의 복사본, 계정 없어도 열림
+  rootr mail [inbox|sent] [--limit N] [--q <찾기>] [--json]  문서함 — 받은 문서(기본)·보낸 문서
+  rootr mail show <id> [--json]                    받은/보낸 문서 열기(문서면 본문, 그 밖은 요약) — 받은 것은 읽음 처리
+  rootr mail revoke <id>                           보낸 문서 회수 — 받는 쪽에서 본문이 안 보임
+  rootr mail hide <id> [--box inbox|sent]          내 문서함에서만 지우기(상대 화면은 그대로)
   rootr config [--api-key <k>] [--workspace <w>] [--base-url <u>]  설정 조회/저장
   rootr config --add-key <k> [--label <name>] [--workspace <w>]     워크스페이스별 키 추가 등록
   rootr feedback "<무엇이 안 되는지>" [--kind bug|friction|idea|praise] [--email <주소>]
@@ -107,7 +113,7 @@ const USAGE_KO = `Rootr CLI v${pkg.version}
   rootr memory add "<내용>" [--kind 지시|사람|프로젝트|참고] [--source <경로|id>] [--related a,b]  기억 저장
   rootr memory edit <id> [--content "<내용>"] [--kind …] [--source …] [--related a,b]  기억 고치기(준 칸만)
   rootr memory forget <id> [--hard]                 기억 폐기(--hard면 행 삭제)
-  rootr mcp                                        MCP stdio 서버 구동 (도구 178종 — README 참고)
+  rootr mcp                                        MCP stdio 서버 구동 (도구 197종 — README 참고)
   rootr --help                                     도움말
   rootr --version                                  버전 출력
 
@@ -134,6 +140,7 @@ usage:
   rootr restore <id>                               undo a delete (same as Ctrl+Z in the app — id, not path)
   rootr attach <file> [--doc <path|id>] [--heading "## X"] [--alt <text>]  upload a file (+ insert it into a document)
   rootr ws                                         my workspaces (id\tname; unreachable ones are marked)
+  rootr emblem <image file> | --clear              set or clear the workspace emblem (sidebar logo; admin)
   rootr use <id|name|url>                          switch the active workspace (remembers its key too)
   rootr ask <question> [--workspace <w>]           GraphRAG question answering (RCA), prints citations
   rootr db create [--file <spec.json>] [--parent <path|id>]  create a DATABASE — columns in order, rows included
@@ -199,6 +206,11 @@ usage:
   rootr sign list [--pending] [--status <S>] [--mode <M>] [--json]  list signed documents (--pending: waiting on you)
   rootr sign bulk <id…> --code <6 digits>           submit+sign many at once (one code, drafts included)
   rootr sign ledger [--json]                       verify the whole workspace ledger (hash chain)
+  rootr send <path|id> --to a@x.com[,b@y.com] [--message "..."]  email any node as a frozen copy — opens without an account
+  rootr mail [inbox|sent] [--limit N] [--q <text>] [--json]  your document mailbox — received (default) or sent
+  rootr mail show <id> [--json]                    open a received/sent document (body for docs, a summary otherwise); marks received ones read
+  rootr mail revoke <id>                           withdraw a document you sent — the recipient no longer sees the content
+  rootr mail hide <id> [--box inbox|sent]          remove from your own mailbox only (the other side keeps it)
   rootr config [--api-key <k>] [--workspace <w>] [--base-url <u>]  read/save configuration
   rootr config --add-key <k> [--label <name>] [--workspace <w>]     register an extra per-workspace key
   rootr feedback "<what is not working>" [--kind bug|friction|idea|praise] [--email <address>]
@@ -212,7 +224,7 @@ usage:
   rootr memory add "<content>" [--kind instruction|person|project|reference] [--source <path|id>] [--related a,b]  save a memory
   rootr memory edit <id> [--content "<content>"] [--kind …] [--source …] [--related a,b]  edit a memory (only the fields you pass)
   rootr memory forget <id> [--hard]                 retire a memory (--hard deletes the row)
-  rootr mcp                                        run the MCP stdio server (178 tools — see the README)
+  rootr mcp                                        run the MCP stdio server (197 tools — see the README)
   rootr --help                                     this help
   rootr --version                                  print the version
 
@@ -597,6 +609,30 @@ async function cmdAttach(args) {
   console.log(markdown);
 }
 
+/** WS-EMBLEM — 설정 → 일반 → 엠블럼과 같은 일. 이미지를 올려 걸거나(--clear 면) 이름 첫 글자 배지로 되돌린다. */
+async function cmdEmblem(args) {
+  const filePath = args._[0];
+  if (!filePath && !args.clear) throw new Error(usage(`rootr emblem <image file> | --clear`));
+  const cfg = loadConfig();
+  const workspace = args.workspace || cfg.workspace;
+  if (!workspace) {
+    throw new RootrApiError(tr('워크스페이스가 설정되지 않았습니다.', `No workspace is configured.`), {
+      hint: tr('--workspace <id>로 넘기거나 rootr config --workspace <id> 또는 ROOTR_WORKSPACE 환경변수를 지정하세요.', `Pass --workspace <id>, or set it with rootr config --workspace <id> or the ROOTR_WORKSPACE environment variable.`),
+    });
+  }
+  const client = new RootrClient({ ...cfg, workspace, apiKey: keyForWorkspace(cfg, workspace) });
+  let id = null;
+  if (filePath) {
+    const mimeType = args.mime || MIME_BY_EXT[extname(filePath).toLowerCase()];
+    if (!mimeType || !mimeType.startsWith('image/')) {
+      throw new RootrApiError(tr('엠블럼은 이미지 파일만 됩니다 (png·jpg·webp·svg·gif).', 'The emblem must be an image file (png, jpg, webp, svg, gif).'));
+    }
+    ({ id } = await client.uploadAttachment(workspace, { filename: basename(filePath), mimeType, data: readFileSync(filePath) }));
+  }
+  await client.setWorkspaceEmblem(workspace, id);
+  console.log(id ? tr(`엠블럼을 바꿨습니다: ${client.attachmentRawUrl(id)}`, `Emblem set: ${client.attachmentRawUrl(id)}`) : tr('엠블럼을 지웠습니다 (이름 첫 글자 배지).', 'Emblem cleared (initial-letter badge).'));
+}
+
 async function cmdWs() {
   const cfg = loadConfig();
   const candidates = candidateClients(cfg);
@@ -1917,24 +1953,24 @@ async function cmdBooking(args) {
       usage(tr(`rootr booking show <path|id>`, `rootr booking show <path|id>`)) +
         tr(
           `\n  rootr booking set <path|id> [--on|--off] [--days 1,2,3,4,5] [--hours 10:00-18:00]\n` +
-            `      [--duration 30] [--buffer 10] [--notice 2] [--ahead 60] [--per-day 4]\n` +
+            `      [--duration 30] [--buffer 10] [--calendar-buffer 60] [--notice 2] [--ahead 60] [--per-day 4]\n` +
             `      [--block 2026-10-03,2026-10-09] [--approval instant|manual] [--tz Asia/Seoul]\n` +
             `      [--block-time "daily 12:00-13:00=점심, mon 09:00-11:00, fri"]\n` +
             `      [--meet on|off] [--notify-visitor on|off] [--notify-email a@b.com,c@d.com] [--self-cancel on|off]\n` +
             `      [--self-move on|off] [--remind 1d,1h   (안 보내려면 --remind off)]\n` +
-            `      [--types "30분 상담=30m,데모=60m|화면 보며 설명"] [--guests on|off] [--max-guests 5]\n` +
+            `      [--types "30분 상담=30m,데모=60m|화면 보며 설명"] [--guests on|off] [--max-guests 5] [--track-source on|off]\n` +
             `      [--after https://example.com/thanks]\n` +
             `      [--hosts "김상담=a@acme.com,이데모=b@acme.com"] [--assign roundrobin|collective|off]\n` +
             `      [--ask "연락처:required,상담 종류"] [--message "안내 문구"]\n` +
             `      [--gcal-connection <id>] [--gcal-busy <캘린더id,...>] [--gcal-write <캘린더id|none>]\n` +
             `  rootr booking slots <path|id> [--from 2026-10-01] [--to 2026-10-31] [--type <종류 이름표>]\n`,
           `\n  rootr booking set <path|id> [--on|--off] [--days 1,2,3,4,5] [--hours 10:00-18:00]\n` +
-            `      [--duration 30] [--buffer 10] [--notice 2] [--ahead 60] [--per-day 4]\n` +
+            `      [--duration 30] [--buffer 10] [--calendar-buffer 60] [--notice 2] [--ahead 60] [--per-day 4]\n` +
             `      [--block 2026-10-03,2026-10-09] [--approval instant|manual] [--tz Asia/Seoul]\n` +
             `      [--block-time "daily 12:00-13:00=lunch, mon 09:00-11:00, fri"]\n` +
             `      [--meet on|off] [--notify-visitor on|off] [--notify-email a@b.com,c@d.com] [--self-cancel on|off]\n` +
             `      [--self-move on|off] [--remind 1d,1h   (--remind off to stop)]\n` +
-            `      [--types "Intro=30m,Demo=60m|walk through the product"] [--guests on|off] [--max-guests 5]\n` +
+            `      [--types "Intro=30m,Demo=60m|walk through the product"] [--guests on|off] [--max-guests 5] [--track-source on|off]\n` +
             `      [--after https://example.com/thanks]\n` +
             `      [--hosts "Sam=a@acme.com,Lee=b@acme.com"] [--assign roundrobin|collective|off]\n` +
             `      [--ask "Phone:required,Topic"] [--message "note for visitors"]\n` +
@@ -1958,7 +1994,7 @@ async function cmdBooking(args) {
     const days = (b.weekdays || []).map((d) => DAY_NAMES[d]).join('·');
     console.log(tr(`방문자 일정 등록: 켜짐`, `Visitor booking: on`));
     console.log(tr(`  받는 때: ${days} ${b.startTime}~${b.endTime} (${b.timezone})`, `  when: ${days} ${b.startTime}-${b.endTime} (${b.timezone})`));
-    console.log(tr(`  한 번 길이: ${b.durationMin}분 · 사이 여유 ${b.bufferMin}분`, `  slot: ${b.durationMin} min · gap ${b.bufferMin} min`));
+    console.log(tr(`  한 번 길이: ${b.durationMin}분 · 예약 앞뒤 여유 ${b.bufferMin}분 · 구글 기존 일정 앞뒤 여유 ${b.calendarBufferMin ?? b.bufferMin}분`, `  slot: ${b.durationMin} min · gap around bookings ${b.bufferMin} min · gap around existing Google events ${b.calendarBufferMin ?? b.bufferMin} min`));
     console.log(tr(`  ${b.minNoticeHours}시간 전까지 · ${b.maxDaysAhead}일 뒤까지 · 하루 ${b.maxPerDay || '제한 없음'}`, `  ${b.minNoticeHours}h notice · up to ${b.maxDaysAhead} days · per day ${b.maxPerDay || 'unlimited'}`));
     console.log(tr(`  확정: ${b.approval === 'manual' ? '승인 후' : '바로'}`, `  confirm: ${b.approval === 'manual' ? 'after approval' : 'instantly'}`));
     if (b.blockedDates?.length) console.log(tr(`  쉬는 날: ${b.blockedDates.join(', ')}`, `  days off: ${b.blockedDates.join(', ')}`));
@@ -1976,6 +2012,7 @@ async function cmdBooking(args) {
     if (b.allowGuests && b.maxGuests > 0) {
       console.log(tr(`  손님 함께 부르기: 최대 ${b.maxGuests}명`, `  guests: up to ${b.maxGuests}`));
     }
+    if (b.trackSource) console.log(tr('  유입 경로 기록: 켜짐', '  source tracking: on'));
     if (b.redirectUrl) console.log(tr(`  잡은 뒤 보낼 곳: ${b.redirectUrl}`, `  after booking: ${b.redirectUrl}`));
     if (b.allowVisitorCancel === false) console.log(tr('  방문자 직접 취소: 꺼짐', '  visitor self-cancel: off'));
     if (b.allowVisitorReschedule === false) console.log(tr('  방문자 직접 시간 변경: 꺼짐', '  visitor reschedule: off'));
@@ -2043,6 +2080,8 @@ async function cmdBooking(args) {
   }
   if (args.duration !== undefined) body.durationMin = Number(args.duration);
   if (args.buffer !== undefined) body.bufferMin = Number(args.buffer);
+  // 구글 캘린더에 이미 있던 일정 앞뒤 여유(이동 시간 등). --buffer 는 이 표로 잡힌 예약 앞뒤.
+  if (args['calendar-buffer'] !== undefined) body.calendarBufferMin = Number(args['calendar-buffer']);
   if (args.notice !== undefined) body.minNoticeHours = Number(args.notice);
   if (args.ahead !== undefined) body.maxDaysAhead = Number(args.ahead);
   if (args['per-day'] !== undefined) body.maxPerDay = Number(args['per-day']);
@@ -2054,6 +2093,7 @@ async function cmdBooking(args) {
   if (args['self-move'] !== undefined) body.allowVisitorReschedule = args['self-move'] !== 'off' && args['self-move'] !== false;
   if (args['guests'] !== undefined) body.allowGuests = args['guests'] !== 'off' && args['guests'] !== false;
   if (args['max-guests'] !== undefined) body.maxGuests = Number(args['max-guests']);
+  if (args['track-source'] !== undefined) body.trackSource = args['track-source'] !== 'off' && args['track-source'] !== false;
   if (args['after'] !== undefined) body.redirectUrl = String(args['after'] === true ? '' : args['after']).trim();
   if (args['assign'] !== undefined) {
     const a = String(args['assign']).trim().toLowerCase();
@@ -3031,6 +3071,128 @@ async function cmdSign(args) {
   }
 }
 
+// ---- doc mail (DOC-MAIL — 문서 송수신) ------------------------------------
+
+const MAIL_USAGE =
+  usage(`rootr mail [inbox|sent] | show <id> | revoke <id> | hide <id>\n`) +
+  tr('       (자세한 건 rootr --help)', `       (see rootr --help)`);
+
+const NODE_TYPE_KO = {
+  DOCUMENT: tr('문서', 'document'),
+  DATABASE: tr('표', 'table'),
+  SPREADSHEET: tr('스프레드시트', 'spreadsheet'),
+  WHITEBOARD: tr('화이트보드', 'whiteboard'),
+  PRESENTATION: tr('발표자료', 'deck'),
+  FORM: tr('폼', 'form'),
+  ISSUE_TRACKER: tr('이슈', 'issues'),
+  LOG: tr('로그', 'log'),
+  CRM: 'CRM',
+  RECORDING: tr('녹음', 'recording'),
+  PAGE: tr('페이지', 'page'),
+  SIGNED: tr('서명문서', 'signed document'),
+};
+
+async function cmdSend(args) {
+  const target = args._[0];
+  const toArg = typeof args.to === 'string' ? args.to : '';
+  const to = toArg.split(/[,;\s]+/).map((s) => s.trim()).filter(Boolean);
+  if (!target || !to.length) {
+    throw new Error(usage(tr(`rootr send <path|id> --to a@x.com[,b@y.com] [--message "..."]`, `rootr send <path|id> --to a@x.com[,b@y.com] [--message "..."]`)));
+  }
+  const client = makeClient();
+  const nodeId = requireResolved(await resolveTarget(client, target));
+  const out = await client.sendNode(nodeId, { to, message: typeof args.message === 'string' ? args.message : undefined });
+  if (args.json) return console.log(JSON.stringify(out, null, 2));
+  const items = out.items ?? [];
+  console.log(tr(`${items.length}명에게 보냈습니다 (묶음 ${out.batchId})`, `Sent to ${items.length} ${items.length === 1 ? 'person' : 'people'} (batch ${out.batchId})`));
+  for (const it of items) {
+    console.log(
+      `  ${it.to}\t${it.id}\t` +
+        (it.emailed ? tr('메일 보냄', 'emailed') : tr(`메일 실패${it.error ? `: ${it.error}` : ''} — 문서는 받은 문서함에 있습니다`, `email failed${it.error ? `: ${it.error}` : ''} — the copy is still in their inbox`)),
+    );
+  }
+}
+
+function mailWhen(iso) {
+  return iso ? String(iso).replace('T', ' ').slice(0, 16) : '';
+}
+
+async function cmdMail(args) {
+  const sub = args._[0];
+  const client = makeClient();
+  if (!sub || sub === 'inbox' || sub === 'sent' || sub === 'list') {
+    const box = sub === 'sent' || args.box === 'sent' ? 'sent' : 'inbox';
+    const limit = args.limit ? Number(args.limit) : undefined;
+    const out = await client.listDocMail({ box, limit, q: typeof args.q === 'string' ? args.q : undefined, cursor: typeof args.cursor === 'string' ? args.cursor : undefined });
+    if (args.json) return console.log(JSON.stringify(out, null, 2));
+    if (box === 'inbox') console.log(tr(`받은 문서 — 안 읽은 것 ${out.unread}개`, `Received — ${out.unread} unread`));
+    else console.log(tr('보낸 문서', 'Sent'));
+    if (!out.items?.length) return console.log(tr('  (없음)', '  (none)'));
+    for (const m of out.items) {
+      const type = NODE_TYPE_KO[m.nodeType] ?? m.nodeType;
+      const state = m.revoked
+        ? tr('[회수됨]', '[withdrawn]')
+        : box === 'inbox'
+          ? m.readAt ? '' : tr('[새 문서]', '[new]')
+          : m.readAt ? tr(`[읽음 ${mailWhen(m.readAt)}]`, `[read ${mailWhen(m.readAt)}]`) : tr('[안 읽음]', '[unread]');
+      const who = box === 'inbox' ? `${m.senderName} <${m.senderEmail}>` : `→ ${m.recipientEmail}`;
+      const mailFail = box === 'sent' && m.emailed === false ? tr('  [메일 실패]', '  [email failed]') : '';
+      console.log(`${m.id}\t${mailWhen(m.createdAt)}\t${type}\t${m.title}\t${who}${state ? `  ${state}` : ''}${mailFail}`);
+      if (m.message) console.log(`    ${String(m.message).split('\n')[0].slice(0, 100)}`);
+    }
+    if (out.nextCursor) console.log(tr(`\n다음 쪽: rootr mail ${box} --cursor ${out.nextCursor}`, `\nNext page: rootr mail ${box} --cursor ${out.nextCursor}`));
+    return;
+  }
+  const id = args._[1];
+  if (!id) throw new Error(MAIL_USAGE);
+  switch (sub) {
+    case 'show':
+    case 'read': {
+      const m = await client.getDocMail(id);
+      if (args.json) return console.log(JSON.stringify(m, null, 2));
+      console.log(`${m.title}  (${NODE_TYPE_KO[m.nodeType] ?? m.nodeType})`);
+      console.log(tr(`보낸 사람: ${m.senderName} <${m.senderEmail}> · ${m.workspaceName}`, `From: ${m.senderName} <${m.senderEmail}> · ${m.workspaceName}`));
+      console.log(tr(`받는 사람: ${m.recipientEmail} · 보낸 때 ${mailWhen(m.createdAt)}${m.readAt ? ` · 읽음 ${mailWhen(m.readAt)}` : ''}`, `To: ${m.recipientEmail} · sent ${mailWhen(m.createdAt)}${m.readAt ? ` · read ${mailWhen(m.readAt)}` : ''}`));
+      if (m.message) console.log(tr(`메시지: ${m.message}`, `Message: ${m.message}`));
+      if (m.revoked && !m.payload) return console.log(tr('\n보낸 사람이 이 문서를 회수했습니다.', '\nThe sender withdrew this document.'));
+      if (m.revoked) console.log(tr('(회수함 — 받는 쪽에서는 본문이 안 보입니다)', '(withdrawn — the recipient no longer sees the content)'));
+      const p = m.payload ?? {};
+      console.log('');
+      if (p.kind === 'doc') return console.log(p.content ?? '');
+      if (p.kind === 'database') {
+        const props = p.properties ?? [];
+        const rows = p.rows ?? [];
+        console.log(props.map((c) => c.name).join('\t'));
+        for (const r of rows) {
+          console.log(props.map((c) => {
+            const v = r.values?.[c.id];
+            return v === null || v === undefined ? '' : typeof v === 'object' ? JSON.stringify(v) : String(v);
+          }).join('\t'));
+        }
+        if (p.truncated) console.log(tr(`… ${p.truncated.total}행 중 ${p.truncated.shown}행만 담겼습니다`, `… ${p.truncated.shown} of ${p.truncated.total} rows were included`));
+        return;
+      }
+      const keys = Object.keys(p).filter((k) => k !== 'kind');
+      console.log(tr(`[${p.kind}] 담긴 것: ${keys.join(', ')} — 전부 보려면 --json`, `[${p.kind}] contains: ${keys.join(', ')} — use --json for everything`));
+      return;
+    }
+    case 'revoke': {
+      const out = await client.revokeDocMail(id);
+      if (args.json) return console.log(JSON.stringify(out, null, 2));
+      return console.log(tr(`회수했습니다 (${mailWhen(out.revokedAt)}) — 받는 쪽에서 본문이 안 보입니다.`, `Withdrawn (${mailWhen(out.revokedAt)}) — the recipient no longer sees the content.`));
+    }
+    case 'hide':
+    case 'rm': {
+      const box = args.box === 'inbox' || args.box === 'sent' ? args.box : undefined;
+      const out = await client.hideDocMail(id, { box });
+      if (args.json) return console.log(JSON.stringify(out, null, 2));
+      return console.log(tr(`내 문서함에서 지웠습니다 (${out.hidden}). 상대 화면은 그대로입니다.`, `Removed from your mailbox (${out.hidden}). The other side still has it.`));
+    }
+    default:
+      throw new Error(MAIL_USAGE);
+  }
+}
+
 async function main() {
   const argv = process.argv.slice(2);
   const args = parseArgs(argv);
@@ -3072,6 +3234,8 @@ async function main() {
       return cmdRestore(args);
     case 'ws':
       return cmdWs(args);
+    case 'emblem':
+      return cmdEmblem(args);
     case 'ask':
       return cmdAsk(args);
     case 'config':
@@ -3094,6 +3258,10 @@ async function main() {
       return cmdAccess(args);
     case 'sign':
       return cmdSign(args);
+    case 'send':
+      return cmdSend(args);
+    case 'mail':
+      return cmdMail(args);
     case 'feedback':
       return cmdFeedback(args);
     case 'scaffold':

package/lib/client.js

@@ -757,6 +757,16 @@ export class RootrClient {
    * 이름을 그대로 다시 적게 하는 것은 서버가 요구하는 안전장치다 — 지울 것을
    * 정말 보고 있는지 확인한다.
    */
+  /**
+   * WS-EMBLEM — set (attachment id) or clear (null) the workspace emblem shown in the
+   * sidebar badge and workspace switcher. The server only accepts the relative raw path
+   * of an image attachment already uploaded to this same workspace.
+   */
+  async setWorkspaceEmblem(workspaceId, attachmentId) {
+    const iconUrl = attachmentId ? `/api/v1/attachments/${encodeURIComponent(attachmentId)}/raw` : null;
+    return this.request(`/workspaces/${encodeURIComponent(workspaceId)}`, { method: 'PATCH', body: { iconUrl } });
+  }
+
   async deleteWorkspace({ workspaceId, confirmName }) {
     return this.request(`/workspaces/${workspaceId}`, {
       method: 'DELETE',
@@ -2039,6 +2049,48 @@ export class RootrClient {
     return this.request(`/workspaces/${encodeURIComponent(workspaceId)}/ledger/verify`);
   }
 
+  // ---- Doc mail (DOC-MAIL — 문서 송수신) ---------------------------------
+  //
+  // 노드 하나를 **보낼 때의 복사본**으로 이메일 1~20명에게 보낸다. 받은 문서는 받는 사람의
+  // 이메일에 붙는다 — 계정이 없어도 메일 링크로 열리고, 나중에 그 이메일로 가입하면 문서함에
+  // 그대로 있다. 문서함은 사람(이메일)에 붙으므로 워크스페이스 주소 밑이 아니다.
+
+  /** 보내기 — WRITE 이상. 응답 `{batchId, items:[{id,to,emailed}]}`. */
+  async sendNode(nodeId, { to, message } = {}) {
+    return this.request(`/nodes/${encodeURIComponent(nodeId)}/send`, {
+      method: 'POST',
+      body: { to, ...(message ? { message } : {}) },
+    });
+  }
+
+  /** 문서함 목록 — box: inbox(받은, 기본) | sent(보낸). 본문 없이 요약 + 안 읽은 수(unread). */
+  async listDocMail({ box, limit, cursor, q } = {}) {
+    const qs = new URLSearchParams();
+    if (box) qs.set('box', box);
+    if (limit) qs.set('limit', String(limit));
+    if (cursor) qs.set('cursor', cursor);
+    if (q) qs.set('q', q);
+    const s = qs.toString();
+    return this.request(`/doc-mail${s ? `?${s}` : ''}`);
+  }
+
+  /** 한 통 열기(본문 payload 포함). 받는 사람이 열면 읽음으로 바뀐다. */
+  async getDocMail(id) {
+    return this.request(`/doc-mail/${encodeURIComponent(id)}`);
+  }
+
+  /** 회수 — 보낸 사람만. 이후 받는 쪽에서 본문이 안 보인다. */
+  async revokeDocMail(id) {
+    return this.request(`/doc-mail/${encodeURIComponent(id)}/revoke`, { method: 'POST', body: {} });
+  }
+
+  /** 내 문서함에서만 지우기(상대 화면은 그대로). box 로 나에게 보낸 것의 한쪽만 고를 수 있다. */
+  async hideDocMail(id, { box } = {}) {
+    return this.request(`/doc-mail/${encodeURIComponent(id)}${box ? `?box=${encodeURIComponent(box)}` : ''}`, {
+      method: 'DELETE',
+    });
+  }
+
   /**
    * FEEDBACK — 제보를 보낸다. 다른 메서드와 달리 `request()`를 쓰지 않고 직접
    * fetch 한다: **API 키가 없어도, 키가 틀렸어도 보낼 수 있어야** 하기 때문이다.

package/lib/mcp-tools/attachments.js

@@ -82,7 +82,10 @@ export function registerAttachmentTools(server) {
         '`markdown` is ready to paste into a document body (![alt](url)). For the common case of inserting an ' +
         'image straight into a document, prefer rootr_attach_image_to_document instead. For a large file (or ' +
         'over the remote connector, where filePath is not available), use rootr_create_upload_url → PUT → ' +
-        'rootr_complete_upload instead of inlining the bytes as base64Data.',
+        'rootr_complete_upload instead of inlining the bytes as base64Data. ' +
+        'Video files (mp4/webm/mov, up to 75MB) are allowed; to put one on a slide, upload it with nodeId = the deck and add it to the slide\'s ' +
+        '`videos[]` (Team plan and above for decks). Videos play via signed URLs (`vt=`) that the server adds when it returns the slide — a bare /raw link ' +
+        'opened from another website is blocked.',
       annotations: { readOnlyHint: false, destructiveHint: false },
       inputSchema: uploadInputSchema,
     },
@@ -154,6 +157,60 @@ export function registerAttachmentTools(server) {
     },
   );
 
+  // 엠블럼은 워크스페이스에 붙는 것이라 노드 칸(nodeId)은 받지 않는다.
+  const { nodeId: _unusedNodeId, ...emblemUploadSchema } = uploadInputSchema;
+  // WS-EMBLEM — 화면(설정 → 일반 → 엠블럼)에서만 되던 일을 에이전트도 하게. 새 파일을 주면
+  // 올린 뒤 걸고, 이미 올린 첨부 id 를 주면 그것을 걸고, clear 면 이름 첫 글자 배지로 되돌린다.
+  server.registerTool(
+    'rootr_set_workspace_emblem',
+    {
+      title: 'Set or clear the workspace emblem (logo)',
+      description:
+        'Set the Rootr (루터) workspace emblem — the small square logo shown in the sidebar badge and the ' +
+        'workspace switcher for every member. Give ONE of: an image file (filePath or base64Data, with filename ' +
+        '+ mimeType — it is uploaded to this workspace first), `attachmentId` of an image already uploaded to ' +
+        'this workspace (e.g. from rootr_upload_attachment / rootr_complete_upload), or `clear: true` to go back ' +
+        'to the default initial-letter badge. Requires ADMIN on the workspace. A square PNG/SVG/WebP of 256px+ ' +
+        'looks best; it is shown cropped to a rounded square.',
+      annotations: { readOnlyHint: false, destructiveHint: false },
+      inputSchema: {
+        ...emblemUploadSchema,
+        filename: emblemUploadSchema.filename.optional(),
+        mimeType: emblemUploadSchema.mimeType.optional(),
+        attachmentId: z.string().optional().describe('Id of an image attachment already in this workspace'),
+        clear: z.boolean().optional().describe('true = remove the emblem (back to the initial-letter badge)'),
+      },
+    },
+    async ({ filename, mimeType, filePath, base64Data, attachmentId, clear, workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        const client = makeClient(ws);
+        const given = [Boolean(filePath || base64Data), Boolean(attachmentId), Boolean(clear)].filter(Boolean).length;
+        if (given !== 1) {
+          throw new RootrApiError('파일(filePath/base64Data), attachmentId, clear 중 하나만 주세요.');
+        }
+        let id = null;
+        if (attachmentId) {
+          if (!ATTACHMENT_ID.test(attachmentId)) throw new RootrApiError(`첨부 id 모양이 아닙니다: ${attachmentId}`);
+          id = attachmentId;
+        } else if (!clear) {
+          if (!filename || !mimeType) throw new RootrApiError('파일을 올릴 때는 filename 과 mimeType 이 필요합니다.');
+          if (!mimeType.startsWith('image/')) throw new RootrApiError('엠블럼은 이미지(image/*)만 됩니다.');
+          const data = readAttachmentBytes({ filePath, base64Data });
+          ({ id } = await client.uploadAttachment(ws, { filename, mimeType, data }));
+        }
+        const updated = await client.setWorkspaceEmblem(ws, id);
+        return jsonResult({
+          workspaceId: ws,
+          iconUrl: updated?.iconUrl ?? null,
+          emblemUrl: id ? client.attachmentRawUrl(id) : null,
+        });
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
   // ISSUE-222 — rootr_upload_attachment/rootr_attach_image_to_document require
   // the full file as base64Data over the remote connector (it can't read
   // filePath), which breaks down for larger images. This gives the caller a

package/lib/mcp-tools/booking.js

@@ -119,7 +119,18 @@ export function registerBookingTools(server) {
           .number()
           .optional()
           .describe('Length of one booking in minutes: 15, 20, 30, 45, 60, 90, 120, 180 or 240.'),
-        bufferMin: z.number().optional().describe('Gap kept before AND after each booking, in minutes.'),
+        bufferMin: z
+          .number()
+          .optional()
+          .describe('Gap kept before AND after each booking made through this table, in minutes (0-240).'),
+        calendarBufferMin: z
+          .number()
+          .optional()
+          .describe(
+            'Gap kept before AND after every event already on the connected Google Calendar (travel time etc.), in minutes (0-240). ' +
+              'Separate from bufferMin: e.g. 60 here and 0 in bufferMin blocks an hour around outside meetings while online bookings may sit back to back. ' +
+              'Bookings this table wrote to Google are not "existing events" — they get bufferMin. If never set, it follows bufferMin.',
+          ),
         minNoticeHours: z.number().optional().describe('No bookings closer than this many hours from now.'),
         maxDaysAhead: z.number().optional().describe('How far ahead visitors may book, in days.'),
         maxPerDay: z.number().optional().describe('Max bookings per day. 0 = unlimited.'),
@@ -209,6 +220,15 @@ export function registerBookingTools(server) {
           .optional()
           .describe('Let the visitor add other email addresses. Guests get the same emails and the same calendar invite.'),
         maxGuests: z.number().int().optional().describe('How many guests a visitor may add (default 5). 0 turns it off.'),
+        trackSource: z
+          .boolean()
+          .optional()
+          .describe(
+            'Record where each booking came from. Adds a text column ("유입 경로" unless you pass sourceLabel) and fills it ' +
+              'from the address the visitor arrived on, e.g. "source=meta, medium=paid, campaign=ax, content=3-docs" ' +
+              '(utm_* first, else the ad click id, else the referring site). Left empty when nothing is known.',
+          ),
+        sourceLabel: z.string().optional().describe('Name for the column trackSource creates (default "유입 경로").'),
         redirectUrl: z
           .string()
           .optional()

package/lib/mcp-tools/doc-mail.js

@@ -0,0 +1,116 @@
+import { z } from 'zod';
+
+import { jsonResult, errorResult, makeClient, resolveNodeId, NODE_TARGET_HINT } from './shared.js';
+
+/**
+ * DOC-MAIL — 문서 송수신(창업자 지시 2026-10-20).
+ *
+ * 어떤 타입이든(문서·표·시트·화이트보드·덱·폼·이슈·로그·CRM·녹음·페이지·서명문서) 노드 하나를
+ * **보낼 때의 복사본**으로 특정 이메일에게 보낸다. 받은 문서는 받는 사람의 **이메일 주소**에 붙는다 —
+ * 계정이 없어도 메일 링크로 열리고, 나중에 그 이메일로 가입하면 받은 문서함에 그대로 있다.
+ * 보낸 뒤 원본을 고치거나 지워도 받은 문서는 그대로다(살아 있는 공유가 필요하면 권한/공개를 쓴다).
+ */
+export function registerDocMailTools(server) {
+  server.registerTool(
+    'rootr_send_document',
+    {
+      title: 'Send a Rootr node to email addresses',
+      description:
+        'Send a SNAPSHOT of any Rootr node (document, table, spreadsheet, whiteboard, deck, form, issues, log, CRM, ' +
+        'recording, page, signed document — anything but a folder) to 1–20 email addresses. Each recipient gets an ' +
+        'email with a link that opens the copy WITHOUT a Rootr account; if they have (or later create) a Rootr account ' +
+        'with that email, it also sits in their inbox (rootr_list_doc_mail). The copy is frozen at send time — later ' +
+        'edits or deletion of the original do not change it; use permissions/publishing for a live share instead. ' +
+        'Needs WRITE on the node (the same bar as sharing). What never goes out: the same things a public page hides ' +
+        '(person/attachment/relation columns, row documents, form responses, signer emails). ' +
+        'The result lists each recipient with `emailed` (false = the notification email failed; the copy still exists). ' +
+        'Only send to addresses the user asked for — this emails real people.',
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+      inputSchema: {
+        node: z.string().describe(`보낼 노드 id${NODE_TARGET_HINT}`),
+        to: z.array(z.string()).min(1).max(20).describe('받는 사람 이메일 주소들(1~20개). 대소문자만 다른 주소는 같은 사람'),
+        message: z.string().max(2000).optional().describe('보내며 함께 적을 말(메일과 문서함에 보인다, 2000자까지)'),
+        workspace: z.string().optional().describe('경로로 줄 때 찾을 워크스페이스 id (생략하면 설정값)'),
+      },
+    },
+    async ({ node, to, message, workspace }) => {
+      try {
+        const client = makeClient(workspace);
+        return jsonResult(await client.sendNode(await resolveNodeId(client, node), { to, message }));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_list_doc_mail',
+    {
+      title: 'List my received or sent Rootr documents',
+      description:
+        "List the caller's document mailbox: box=inbox (documents sent TO the caller's account email — default) or " +
+        'box=sent (documents the caller sent). Summaries only (title, type, sender, recipient, message, sentAt, ' +
+        'readAt, revoked); open one with rootr_read_doc_mail. `unread` is the number of unread received documents. ' +
+        'Page with `cursor` = the previous `nextCursor`. Belongs to the person (their email), not to a workspace.',
+      annotations: { readOnlyHint: true },
+      inputSchema: {
+        box: z.enum(['inbox', 'sent']).optional().describe('inbox=받은 문서(기본), sent=보낸 문서'),
+        limit: z.number().int().min(1).max(100).optional().describe('한 번에 몇 개(기본 30)'),
+        cursor: z.string().optional().describe('다음 쪽 — 앞 응답의 nextCursor'),
+        q: z.string().optional().describe('제목·보낸 사람·받는 사람으로 찾기'),
+      },
+    },
+    async ({ box, limit, cursor, q }) => {
+      try {
+        return jsonResult(await makeClient().listDocMail({ box, limit, cursor, q }));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_read_doc_mail',
+    {
+      title: 'Read a received or sent Rootr document',
+      description:
+        'Open one document from the mailbox (id from rootr_list_doc_mail). Returns the summary plus `payload` — the ' +
+        'snapshot taken at send time, in the same shape a public page uses: `kind` says what it is (doc → `content` ' +
+        'markdown; database → `properties` + `rows`; spreadsheet → `data`; …). Opening a received one marks it read. ' +
+        'If the sender withdrew it, `revoked` is true and `payload` is null.',
+      annotations: { readOnlyHint: false },
+      inputSchema: {
+        id: z.string().describe('문서함 항목 id (rootr_list_doc_mail 의 items[].id)'),
+      },
+    },
+    async ({ id }) => {
+      try {
+        return jsonResult(await makeClient().getDocMail(id));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_revoke_doc_mail',
+    {
+      title: 'Withdraw a sent Rootr document',
+      description:
+        'Withdraw a document the caller sent (id from rootr_list_doc_mail box=sent). From then on the recipient sees ' +
+        'only the title and "withdrawn" — no content — and the email link answers 410. Only the sender can do this; ' +
+        'it cannot be undone (send it again instead). Copies the recipient already saved elsewhere are out of reach.',
+      annotations: { readOnlyHint: false, destructiveHint: true },
+      inputSchema: {
+        id: z.string().describe('보낸 문서함 항목 id'),
+      },
+    },
+    async ({ id }) => {
+      try {
+        return jsonResult(await makeClient().revokeDocMail(id));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+}

package/lib/mcp-tools/pages.js

@@ -94,8 +94,10 @@ const BLOCK_GUIDE =
   'for a document in the same workspace. Internal path strings are rejected. A node link renders as the in-app ' +
   'document for members, as the public address on the published page, and is hidden entirely if that document is ' +
   'not published — so link to nodes rather than pasting addresses.\n' +
-  'CONFIG: {theme, accentColor?, navEnabled?}. theme is one of classic | minimal | warm | pastel | editorial | mono | ' +
-  'dark | midnight. accentColor is a hex like "#1A4A7A"; leave it out and the theme picks a matching accent. ' +
+  'CONFIG: {theme, accentColor?, navEnabled?, metaPixelId?}. theme is one of classic | minimal | warm | pastel | editorial | mono | ' +
+  'dark | midnight. accentColor is a hex like "#1A4A7A"; leave it out and the theme picks a matching accent.' +
+  ' metaPixelId is the numeric Meta (Facebook/Instagram) Pixel ID: when set, the PUBLISHED page reports PageView and, when a visitor books through a booking block, Schedule to that pixel (never in the editor); send "" to turn it off. ' +
+  'config is replaced as a whole on update, so resend the keys you want to keep. ' +
   'Every published page carries the Rootr signature at the bottom.\n' +
   'Block ids are optional — omit them and they are generated. Keep the ids you get back if you want to edit one block later.';
 
@@ -129,7 +131,7 @@ export function registerPageTools(server) {
         config: z
           .record(z.unknown())
           .optional()
-          .describe('{theme, accentColor?, navEnabled?} — theme: classic|minimal|warm|pastel|editorial|mono|dark|midnight'),
+          .describe('{theme, accentColor?, navEnabled?, metaPixelId?} — theme: classic|minimal|warm|pastel|editorial|mono|dark|midnight; metaPixelId: numeric Meta Pixel ID'),
         workspace: z.string().optional().describe('Workspace id; defaults to ROOTR_WORKSPACE/config if omitted'),
       },
     },
@@ -211,7 +213,7 @@ export function registerPageTools(server) {
           .array(z.record(z.unknown()))
           .optional()
           .describe('COMPLETE blocks array to set — any block you omit is deleted'),
-        config: z.record(z.unknown()).optional().describe('{theme, accentColor?, navEnabled?}'),
+        config: z.record(z.unknown()).optional().describe('{theme, accentColor?, navEnabled?, metaPixelId?} — replaces the whole config'),
       },
     },
     async ({ pageId, blocks, config }) => {

package/lib/mcp-tools/presentations.js

@@ -24,6 +24,8 @@ const AUTHORING_GUIDE =
   'placement does not draw the image. For `images[]`, x/y/w/h give freeform PPT-style placement in 1280x720 canvas ' +
   'coords (drawn only when both x and y are set). ALWAYS add an `alt` caption to every image — alt text is part of the graph text spine, so a captioned image ' +
   'connects into the knowledge graph while an uncaptioned one does not.\n' +
+  'Videos (Team plan and above — a Free workspace gets 403 PLAN_UPGRADE_REQUIRED when it ADDS a video; existing ones stay editable/removable): `videos[]` (max 20 per slide) holds {id?, src, title?, poster?, x?, y?, w?, h?} in 1280x720 canvas coords (default 640x360 centred). `src` is an uploaded video file URL (upload mp4/webm ≤75MB via rootr_upload_attachment with nodeId = this deck, then use /api/v1/attachments/{id}/raw), an https video-file URL, or a YouTube/Vimeo link; `poster` is an image URL (thumbnail). `title` is a caption and joins the graph text spine. Slide `html` may instead contain <video src="…/v1/attachments/{id}/raw" controls>, <div data-video-embed="https://www.youtube.com/watch?v=…">, or a YouTube/Vimeo <iframe>. Uploaded videos play through short-lived signed URLs (`vt=` query) the server adds when it returns the slide — never write `vt=` yourself; it is stripped on save.\n' +
+  'Animations (all plans): in slide `html`, add data-anim="<effect>" to any element to animate it when the slide opens in view/present mode. Entrance effects: fade, fade-up, fade-down, fly-left, fly-right, zoom, pop, blur. Looping effects: pulse, float, spin, blink, shake. Duration/delay go in inline CSS variables, e.g. <div data-anim="fade-up" style="--anim-delay:.4s;--anim-dur:.8s">; stagger delays to set the order. Thumbnails and PDF/PPTX exports show the finished state. Your own @keyframes/animation CSS in the html also plays.\n' +
   'Use kind to mark each slide\'s role: "cover" (deck title slide), "section" (chapter divider), "content" (body slide, ' +
   'the default), "closing" (last slide / call to action).\n' +
   'Page numbers: "content" and "section" slides automatically show a page number that follows the slide order (it ' +
@@ -70,6 +72,19 @@ const imageShape = z
   })
   .describe('A slide image. Set src (uploaded/https/data: URI) or prompt (AI-generate); always add an alt caption.');
 
+const videoShape = z
+  .object({
+    id: z.string().optional().describe('Stable video id. Auto-generated by the editor if omitted.'),
+    src: z.string().describe('Uploaded video URL (/api/v1/attachments/{id}/raw), https video file URL, or a YouTube/Vimeo link'),
+    title: z.string().optional().describe('Caption — part of the graph text spine'),
+    poster: z.string().optional().describe('Thumbnail image URL for file videos'),
+    x: z.number().optional().describe('Left in 1280x720 canvas px'),
+    y: z.number().optional().describe('Top in 1280x720 canvas px'),
+    w: z.number().optional().describe('Width px (default 640)'),
+    h: z.number().optional().describe('Height px (default 360)'),
+  })
+  .describe('A video placed on a slide. Team plan and above.');
+
 const slideShape = z
   .object({
     id: z.string().optional().describe('Unique slide id, e.g. "SLD-001". Auto-generated if omitted.'),
@@ -108,6 +123,10 @@ const slideShape = z
       .array(imageShape)
       .optional()
       .describe('Additional inserted/uploaded images placed on the slide (up to 50). Each should carry an alt caption.'),
+    videos: z
+      .array(videoShape)
+      .optional()
+      .describe('Videos placed on the slide (Team plan+, up to 20): {src (uploaded /attachments/{id}/raw URL, https video file, or YouTube/Vimeo link), title?, poster?, x?, y?, w?, h? in 1280x720 coords}.'),
     code: z.string().optional().describe('Code-first React slide source (max design freedom, advanced use)'),
     html: z.string().optional().describe('Rendered self-contained slide HTML (usually machine-produced, not hand-authored)'),
     notes: z.string().optional().describe('Speaker notes — text spine'),

package/lib/mcp.js

@@ -24,6 +24,7 @@ import { registerAttachmentTools } from './mcp-tools/attachments.js';
 import { registerSignedDocTools } from './mcp-tools/signed.js';
 import { registerFeedbackTools } from './mcp-tools/feedback.js';
 import { registerMemoryTools } from './mcp-tools/memory.js';
+import { registerDocMailTools } from './mcp-tools/doc-mail.js';
 import { withRateLimitSink } from './context.js';
 import { makeClient } from './mcp-tools/shared.js';
 import { t as tr } from './i18n.js';
@@ -224,6 +225,10 @@ export function buildMcpServer({ name, version }) {
         'rootr_request_signing_code first and ASK THE HUMAN for the 6 digits that arrive in their mail — ' +
         'that code is the only evidence a person (not an agent) pressed sign; ' +
         'FOLDER = grouping; LOG store = typed event table whose relation fields auto-build a lineage graph (metrics, incidents, pipeline events — use the rootr_*_log_* tools).\n\n' +
+        'Sending a document to someone by email (문서 보내기 · 문서함): rootr_send_document mails a frozen COPY of any ' +
+        'node (not a folder) to 1-20 addresses — no Rootr account needed to open it, and it lands in their inbox if ' +
+        'that email has an account; rootr_list_doc_mail (box inbox|sent) / rootr_read_doc_mail / rootr_revoke_doc_mail ' +
+        'cover the mailbox. Only send to addresses the user gave you.\n\n' +
         'Scaffolding discipline — treat "set up a workspace for X" exactly like "build me this app": you ask a ' +
         'few clarifying questions, write it, compile it, run the tests, leave a README, and report. The user ' +
         'should only have to type that one sentence; everything else finishes inside the conversation. Never ask ' +
@@ -286,6 +291,7 @@ export function buildMcpServer({ name, version }) {
   registerSignedDocTools(server);
   registerFeedbackTools(server);
   registerMemoryTools(server);
+  registerDocMailTools(server);
 
   return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rootr-cli",
-  "version": "0.22.0",
+  "version": "0.24.0",
   "description": "Official Rootr CLI + MCP server — read, write, edit and search Rootr documents from the shell or from an AI agent.",
   "type": "module",
   "bin": {