rootr-cli 0.25.0 → 0.29.0

package/lib/mcp-tools/domains.js

@@ -0,0 +1,236 @@
+import { z } from 'zod';
+
+import { RootrApiError } from '../client.js';
+import { domainPaymentHelp } from '../domain-billing.js';
+import { jsonResult, errorResult, makeClient, requireWorkspace, resolveNodeId, NODE_TARGET_HINT } from './shared.js';
+
+/**
+ * CUSTOM-DOMAIN — 발행한 페이지(PAGE)를 **고객 도메인**(www.customer.co.kr)으로 연다.
+ *
+ * 고객은 DNS 에 한 줄(CNAME `www` → connect.rootr.site)만 넣는다. 등록하면 서버가 그 도메인의 DNS 를 어디서 관리하는지
+ * (가비아·카페24·Cloudflare…)를 이름서버로 짚어, 그 업체 화면 기준의 단계를 같이 준다 — 에이전트는 그 단계를 사람에게
+ * 그대로 전하면 된다. 원격 커넥터에서도 그대로 돈다(파일·환경을 쓰지 않는다).
+ *
+ * 3단계(과금): 내 도메인은 1개당 월 $10(연 결제 월 $8) — "도메인 연결" 애드온의 자리를 하나 쓴다. 자리가 없으면 서버가 402 를 주고,
+ * 여기서는 그 까닭과 할 일(결제 탭 주소)을 사람 말로 붙여 돌려준다. 무료 주소 `{이름}.rootr.site`(Team 부터, 3개까지)는 결제 없이 바로 열린다.
+ */
+
+const WS_ARG = z.string().optional().describe('Workspace id; defaults to ROOTR_WORKSPACE/config if omitted');
+
+const STATUS_HINT =
+  'kind: PAID (own domain, uses one paid slot) or FREE (name.rootr.site, no DNS, live at once). ' +
+  'status: SUSPENDED (the custom-domain payment lapsed — paying again in Settings → Billing reopens it), PENDING_DNS (the DNS line is not visible yet — propagation usually takes 10 min–1 h), PENDING_CERT ' +
+  '(DNS is right, the HTTPS certificate is being issued — minutes), ACTIVE (live), ERROR (see lastError). ' +
+  'lastErrorCode is one of DNS_NOT_FOUND, DNS_WRONG_TARGET (observedTarget = what is there now), TXT_MISSING, ' +
+  'CERT_PENDING, CERT_FAILED, CF_BLOCKED, CF_ERROR, CF_OFF; lastError is the same in plain Korean.';
+
+/** 등록 응답의 안내를 사람이 읽는 글로(서버 dns-providers.ts guideText 와 같은 모양). */
+function guideText(guide, lang) {
+  if (!guide?.provider) return '';
+  const p = guide.provider;
+  const head = `${p.name?.[lang] ?? p.id}${p.dnsUrl ? ` — ${p.dnsUrl}` : ''}`;
+  const steps = (p.steps?.[lang] ?? []).map((s, i) => `${i + 1}. ${s}`);
+  const quirks = (p.quirks?.[lang] ?? []).map((s) => `- ${s}`);
+  return [head, ...steps, ...(quirks.length ? [lang === 'ko' ? '주의:' : 'Watch out:', ...quirks] : [])].join('\n');
+}
+
+function recordLine(r) {
+  return `${r.type}  name(host)=${r.name}  value=${r.value ?? '(not configured on this server yet)'}  TTL=default`;
+}
+
+export function registerDomainTools(server) {
+  server.registerTool(
+    'rootr_list_custom_domains',
+    {
+      title: 'List custom domains of a workspace',
+      description:
+        'List the custom domains (e.g. www.customer.co.kr) connected to published PAGE or DOCUMENT nodes in a Rootr (루터) ' +
+        'workspace: hostname, kind (PAID own domain / FREE name.rootr.site), which page it opens (rootNode), status, the DNS ' +
+        'line(s) to add, and the live URL — plus `slots`: paid-domain slots (total = bought + granted, used, available), ' +
+        'the add-on state (interval, cancelAt, pastDue), free addresses used of 3, and the price ($10/month, $96/year). ' +
+        STATUS_HINT +
+        ' Workspace ADMIN or OWNER only.',
+      annotations: { readOnlyHint: true, destructiveHint: false },
+      inputSchema: { workspace: WS_ARG },
+    },
+    async ({ workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        return jsonResult(await makeClient(ws).listCustomDomains(ws));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_add_custom_domain',
+    {
+      title: 'Connect a custom domain to a published page or document',
+      description:
+        'Connect the customer\'s own domain (e.g. www.customer.co.kr) — or a FREE address name.rootr.site — to a PAGE or ' +
+        'DOCUMENT node (a document makes a blog-like site, e.g. blog.customer.co.kr) so it opens as a normal website: the root ' +
+        'path shows it, `/{child}` shows its published child pages and documents, no ' +
+        '"Rootr" signature. The page should already be published to the web (rootr_publish_node). Team plan and up — a Free ' +
+        'workspace gets 403 PLAN_UPGRADE_REQUIRED. Workspace ADMIN/OWNER only. ' +
+        'FREE address: pass `subdomain: "acme"` (or hostname acme.rootr.site) — no DNS, no payment, live immediately; ' +
+        'lowercase a-z 0-9 and hyphen, 3–30 chars, globally unique, up to 3 per workspace, names like www/api/admin/mail and ' +
+        'anything containing "rootr" are reserved. ' +
+        'OWN domain: $10/month per domain, $8/month billed yearly ($96/year) — the "Custom domain" add-on. With a free slot it ' +
+        'just connects. If the add-on exists but is full you get 402 CUSTOM_DOMAIN_CHARGE_CONFIRM_REQUIRED: tell the person ' +
+        'the price and, only after they agree, call again with confirmCharge: true (adds one slot, prorated). With no add-on ' +
+        'you get 402 CUSTOM_DOMAIN_PAYMENT_REQUIRED: the person must start it in Settings → Billing (the error says where). ' +
+        'The customer then adds ONE DNS line (CNAME, name `www`, value connect.rootr.site). The result includes ' +
+        '`records` (the exact line), `guide.provider` (the DNS provider detected from the name servers — Gabia, Whois, ' +
+        'Cafe24, Hosting.kr, iNames, Dotname, Cloudflare, GoDaddy, Namecheap, Route 53, Squarespace, OnlyDomains, Wix, ' +
+        'or a generic guide — with click-by-click steps in Korean and English) and `instructions` (the same as text). ' +
+        'Relay those steps to the human as they are. A bare root domain (customer.co.kr) cannot hold a CNAME at most ' +
+        'providers — connect www.customer.co.kr and forward the root to it (guide.provider.forwarding). ' +
+        'Afterwards call rootr_check_custom_domain; the server also re-checks every 5 minutes and notifies the person ' +
+        'who registered it when it goes live.',
+      annotations: { readOnlyHint: false, destructiveHint: false },
+      inputSchema: {
+        target: z.string().describe(`The PAGE or DOCUMENT node to open at the domain root: node id${NODE_TARGET_HINT}`),
+        hostname: z
+          .string()
+          .optional()
+          .describe('The domain, e.g. www.customer.co.kr (a pasted URL is fine), or acme.rootr.site for a free address'),
+        subdomain: z
+          .string()
+          .optional()
+          .describe('Free address name only: "acme" → acme.rootr.site (no DNS, no payment). Use instead of hostname'),
+        confirmCharge: z
+          .boolean()
+          .optional()
+          .describe('Set true ONLY after the person agreed to pay for one more domain slot ($10/month or $96/year, prorated)'),
+        provider: z
+          .string()
+          .optional()
+          .describe('Override the detected DNS provider: gabia, whois, cafe24, hostingkr, inames, dotname, cloudflare, godaddy, namecheap, route53, squarespace, onlydomains, wix, other'),
+        lang: z.enum(['ko', 'en']).optional().describe('Language of `instructions` (default ko)'),
+        workspace: WS_ARG,
+      },
+    },
+    async ({ target, hostname, subdomain, confirmCharge, provider, lang, workspace }) => {
+      try {
+        if (!hostname && !subdomain) throw new Error('Pass hostname (www.customer.co.kr) or subdomain (acme → acme.rootr.site).');
+        const ws = requireWorkspace(workspace);
+        const client = makeClient(ws);
+        const rootNodeId = await resolveNodeId(client, target);
+        const out = await client.addCustomDomain(ws, { hostname, subdomain, rootNodeId, provider, confirmCharge });
+        const l = lang === 'en' ? 'en' : 'ko';
+        if (out.kind === 'FREE') {
+          const instructions =
+            l === 'ko'
+              ? `무료 주소가 바로 열렸습니다: https://${out.hostname} — DNS 설정이 필요 없습니다.`
+              : `The free address is live now: https://${out.hostname} — no DNS setup needed.`;
+          return jsonResult({ ...out, instructions });
+        }
+        const instructions = [
+          l === 'ko' ? `DNS 에 이 한 줄을 넣으세요:` : 'Add this one DNS line:',
+          ...(out.records ?? []).map(recordLine),
+          '',
+          guideText(out.guide, l),
+          ...(out.guide?.isApex
+            ? ['', l === 'ko' ? `루트 도메인은 CNAME 을 못 거는 곳이 많습니다 — www.${out.guide.apex} 로 연결하고 루트는 포워딩하세요.` : `Most providers cannot put a CNAME on the root — connect www.${out.guide.apex} and forward the root to it.`]
+            : []),
+        ].join('\n');
+        return jsonResult({ ...out, instructions });
+      } catch (err) {
+        const help = err instanceof RootrApiError ? domainPaymentHelp(err) : null;
+        if (help) err.hint = help;
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_check_custom_domain',
+    {
+      title: 'Check a custom domain now',
+      description:
+        'Re-check a custom domain right now (DNS + HTTPS certificate) and return its status with a plain-language ' +
+        'reason. ' +
+        STATUS_HINT +
+        ' Calling it again within 10 seconds returns the previous result. Team plan and up; ADMIN/OWNER only.',
+      annotations: { readOnlyHint: false, destructiveHint: false },
+      inputSchema: {
+        domainId: z.string().describe('Domain id from rootr_list_custom_domains / rootr_add_custom_domain'),
+        workspace: WS_ARG,
+      },
+    },
+    async ({ domainId, workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        return jsonResult(await makeClient(ws).checkCustomDomain(ws, domainId));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_rename_custom_domain',
+    {
+      title: 'Change the name of a not-yet-connected custom domain',
+      description:
+        'Fix the hostname of an own (PAID) custom domain that is not live yet (status PENDING_DNS, PENDING_CERT or ' +
+        'ERROR) — e.g. a typo, or a different name instead of www. The paid slot moves to the new name: no charge, no ' +
+        'refund. The old name is disconnected (status REMOVED) and the result is a NEW domain id with the new DNS line ' +
+        'and provider guide — tell the human the new CNAME line. A live (ACTIVE) domain or a free name.rootr.site ' +
+        'address cannot be renamed: remove it and add a new one. Team plan and up; ADMIN/OWNER only.',
+      annotations: { readOnlyHint: false, destructiveHint: false },
+      inputSchema: {
+        domainId: z.string().describe('Domain id from rootr_list_custom_domains / rootr_add_custom_domain'),
+        hostname: z.string().describe('The new hostname, e.g. "www.customer.co.kr"'),
+        provider: z.string().optional().describe('DNS provider id for the new name (gabia, cafe24, cloudflare, …); omit to auto-detect'),
+        lang: z.enum(['ko', 'en']).optional().describe('Language of the returned step-by-step guide (default ko)'),
+        workspace: WS_ARG,
+      },
+    },
+    async ({ domainId, hostname, provider, lang, workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        const out = await makeClient(ws).renameCustomDomain(ws, domainId, { hostname, provider });
+        const l = lang === 'en' ? 'en' : 'ko';
+        const instructions = [
+          l === 'ko'
+            ? `${out.renamedFrom?.hostname ?? hostname} → ${out.hostname} 로 바꿨습니다(결제 그대로). DNS 에 이 한 줄을 넣으세요:`
+            : `Renamed ${out.renamedFrom?.hostname ?? hostname} → ${out.hostname} (billing unchanged). Add this one DNS line:`,
+          ...(out.records ?? []).map(recordLine),
+          '',
+          guideText(out.guide, l),
+        ].join('\n');
+        return jsonResult({ ...out, instructions });
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_remove_custom_domain',
+    {
+      title: 'Disconnect a custom domain',
+      description:
+        'Disconnect a custom domain: the site stops answering at that domain immediately and the certificate host is ' +
+        'deleted. The page itself and its rootr.io/p/… address are untouched. Tell the human to also remove the CNAME ' +
+        'line at their DNS provider. For an own (paid) domain the add-on quantity goes down by one (prorated credit); ' +
+        'removing the last one schedules the add-on to end at the end of the billing period (`billing` in the result). ' +
+        'Free addresses have no billing. Works on any plan; ADMIN/OWNER only.',
+      annotations: { readOnlyHint: false, destructiveHint: true },
+      inputSchema: {
+        domainId: z.string().describe('Domain id from rootr_list_custom_domains'),
+        workspace: WS_ARG,
+      },
+    },
+    async ({ domainId, workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        return jsonResult(await makeClient(ws).removeCustomDomain(ws, domainId));
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+}

package/lib/mcp-tools/forms.js

@@ -35,6 +35,18 @@ const fieldShape = z
       .boolean()
       .optional()
       .describe('date only: false = a single date (no end-date input). Omitted/true = start + optional end.'),
+    multiple: z
+      .boolean()
+      .optional()
+      .describe('file only: true = accept SEVERAL files; the answer becomes an array of { id, filename, size }. Default: one file.'),
+    maxFiles: z
+      .number()
+      .optional()
+      .describe('file + multiple only: most files one person may attach (1–20, default 10).'),
+    allowImages: z
+      .boolean()
+      .optional()
+      .describe('text/textarea only: let respondents insert images into the answer (stored as ![name](url) markdown inside the text).'),
     showIf: z
       .object({ fieldId: z.string(), equals: z.string() })
       .optional()
@@ -46,7 +58,9 @@ const FIELDS_GUIDE =
   'Fields are typed inputs shown to respondents. Basic: text | textarea | number | select | multi_select | ' +
   'checkbox | date. Contact: email | phone | url (each is format-checked server-side). Survey: rating (stars) | ' +
   'scale (numbered buttons) | csat (1-5) | nps (0-10) | matrix (rows x options, Likert) | ranking (drag order). ' +
-  'Also: time (HH:MM) and file (uploaded on the published page only). ' +
+  'Also: time (HH:MM) and file (one file by default; `multiple: true` + optional `maxFiles` (1-20, default 10) ' +
+  'takes several). `allowImages: true` on a text/textarea question lets people paste/insert images into the ' +
+  'answer (kept as ![name](url) inside the text). ' +
   'select/multi_select/matrix/ranking need `options` ({name,color}[]); matrix also needs `rows`. ' +
   'Per-field extras: `help` (a hint line), `placeholder`, `page` (split into multiple pages), `hidden` + URL ' +
   'params (record the traffic source), `showIf` (show only when an earlier answer matches), `range: false` on a ' +
@@ -217,7 +231,10 @@ export function registerFormTools(server) {
       description:
         'Submit one response to a Rootr (루터) FORM on behalf of the caller (authenticated submission, not the ' +
         'public/anonymous share-link flow). `values` is keyed by field id — call rootr_read_form first to get the ' +
-        'exact field ids and types.',
+        'exact field ids and types. File questions: upload each file first (rootr_upload_attachment, or ' +
+        'rootr_create_upload_url → PUT → rootr_complete_upload) and pass `{ id, filename }` — an ARRAY of those when ' +
+        'the field has `multiple: true` (more than `maxFiles` is refused; several files on a single-file question is ' +
+        'refused). Images in a text answer with `allowImages` go in as markdown: `![name](url)` using the upload\'s url.',
       annotations: { readOnlyHint: false, destructiveHint: false },
       inputSchema: {
         formId: z.string().describe(`FORM node id${NODE_TARGET_HINT}`),
@@ -273,6 +290,7 @@ export function registerFormTools(server) {
       title: 'Fix an already-submitted Rootr form response',
       description:
         'Correct one response that was already submitted to a Rootr (루터) FORM. `values` REPLACES the whole ' +
+        '(file answers too — to add a file to a `multiple` question send the old array plus the new { id, filename }) ' +
         'answer set and is re-checked against the form\'s current fields (required/type rules), so send every ' +
         'answer you want to keep — call rootr_list_form_responses first. Use this instead of deleting and ' +
         're-submitting when you want the original submitter and submission time preserved.',

package/lib/mcp-tools/pages.js

@@ -26,7 +26,11 @@ import {
 const BLOCK_GUIDE =
   'A page is `blocks[]` (ordered, max 200) + `config`. Each block is {id?, type, props}. ' +
   'You assemble a page from these block types:\n' +
-  '· hero {title, subtitle?, align?:"left"|"center", size?:"normal"|"screen", background?:{kind:"color",color}|{kind:"image",attachmentId}, button?:{label,target}} — the opening banner. ' +
+  '· hero {title, subtitle?, align?:"left"|"center", size?:"normal"|"screen", background?:{kind:"color",color}|{kind:"image",attachmentId}|{kind:"video",attachmentId,posterAttachmentId?,portraitAttachmentId?,portraitPosterAttachmentId?}, button?:{label,target}} — the opening banner. ' +
+  'background kind:"video" = a looping MOTION-GRAPHIC background (autoplay, muted, loop, inline, no controls; same dark shade and white text as an image; ' +
+  'covers the full-screen hero too). posterAttachmentId (an image) is shown while loading and INSTEAD of the video for visitors who ask for reduced motion or whose browser blocks autoplay — ' +
+  'make the poster the video\'s first frame. portraitAttachmentId (+ portraitPosterAttachmentId) is an optional PHONE/PORTRAIT cut (e.g. 1080×1920): ' +
+  'a portrait screen plays it and a landscape screen plays the default one — only ONE file is downloaded. Without it, phones crop the middle strip of a 16:9 video. ' +
   'size:"screen" makes it a FULL-SCREEN landing hero: edge to edge and one viewport tall (minus the top name bar, capped at 1200px), big headline, content centred vertically ' +
   '(default "normal" = a compact banner inside the text column)\n' +
   '· text {body (markdown), title?} — prose section; markdown is sanitized when rendered\n' +
@@ -57,6 +61,14 @@ const BLOCK_GUIDE =
   'needs on a short phone and nothing is clipped. Inside, take the frame height with `height:100%` (html and body already are 100%) ' +
   'and centre the content with flexbox. bleed:true + minHeight:"screen" = a full-screen section; stack several for a ' +
   'section-per-screen landing page.\n' +
+  '· video {attachmentId, posterAttachmentId?, caption?, aspect?:"16:9"|"9:16"|"1:1"|"4:5" (default "16:9"), bleed?:boolean} — a MOTION-GRAPHIC clip ' +
+  '(always autoplay, muted, loop, playsinline, no controls — it is a moving picture, not a talk with sound). bleed:true spans the full page width. ' +
+  'Same poster / reduced-motion rule as the hero video background.\n' +
+  'VIDEOS (hero video background, video block): upload the file first — POST /v1/attachments/upload?workspaceId=<ws>&nodeId=<page>&filename=a.mp4&mimeType=video/mp4 ' +
+  'with the raw bytes as the body and Content-Type application/octet-stream (H.264 MP4 with +faststart plays everywhere incl. iPhone). ' +
+  'The attachment must belong to the page\'s workspace (else 400 PAGE_MEDIA_INVALID; a poster must be an image). Videos on pages need the TEAM plan ' +
+  '(Free → 403 PLAN_UPGRADE_REQUIRED, same as slide videos). Read responses carry a short-lived `vt` playback signature on each video spot; ' +
+  'the bare /raw address of a video answers 403 (hotlink protection) — never store `vt`, it is dropped on save.\n' +
   'LAYOUT: any block takes `width:"full"|"twoThirds"|"half"|"third"` — neighbouring blocks sit side by side (phones stack them). ' +
   'That is how a page becomes a DASHBOARD: a row of `chart:"kpi"` blocks at width "third", then charts at width "half". ' +
   'A hero with size:"screen" and a custom block with bleed:true always take the whole row — `width` is ignored (not stored) on them.\n' +
@@ -90,10 +102,15 @@ const BLOCK_GUIDE =
   'saved; it is never stored as a silently empty block. `column`/`labelColumn`/' +
   '`valueColumn`/`orderBy.column` are the column NAMES as shown in the table (not column ids). A table or form that ' +
   'sits in a PRIVATE subtree is silently skipped on the published page — that is deliberate, never a bug to work around.\n' +
-  'LINKS: every `target` is {kind:"url", href} (absolute http(s)://, mailto: or tel: only) or {kind:"node", nodeId} ' +
-  'for a document in the same workspace. Internal path strings are rejected. A node link renders as the in-app ' +
+  'LINKS: every `target` is {kind:"url", href} (absolute http(s)://, mailto: or tel: only), {kind:"node", nodeId} ' +
+  'for a document in the same workspace, or {kind:"block", blockId} to JUMP TO ANOTHER BLOCK ON THIS SAME PAGE ' +
+  '(e.g. a hero button "Book a free consult" → the booking block further down: smooth scroll in the same tab, no new tab — ' +
+  'use this for landing pages opened in Instagram/Facebook in-app browsers). blockId must be the id of a block on this page ' +
+  '(else 400) — when you create the page, give the target block an explicit `id` (e.g. "booking") so you can point at it. ' +
+  'Internal path strings are rejected. A url link opens in a new tab; a node link renders as the in-app ' +
   'document for members, as the public address on the published page, and is hidden entirely if that document is ' +
-  'not published — so link to nodes rather than pasting addresses.\n' +
+  'not published — so link to nodes rather than pasting addresses. Inside a text block\'s markdown, `[label](#<blockId>)` ' +
+  'is a same-page link to that block.\n' +
   'CONFIG: {theme, accentColor?, navEnabled?, metaPixelId?}. theme is one of classic | minimal | warm | pastel | editorial | mono | ' +
   'dark | midnight. accentColor is a hex like "#1A4A7A"; leave it out and the theme picks a matching accent.' +
   ' metaPixelId is the numeric Meta (Facebook/Instagram) Pixel ID: when set, the PUBLISHED page reports PageView and, when a visitor books through a booking block, Schedule to that pixel (never in the editor); send "" to turn it off. ' +

package/lib/mcp-tools/public.js

@@ -94,6 +94,8 @@ export function registerPublicTools(server) {
         'PLAN_UPGRADE_REQUIRED; a password-locked page is always hidden and cannot be re-exposed until unlocked); ' +
         '`{"design": {"layout": "board", "skin": "paper"}}` changes how a published TABLE looks — it does not ' +
         'have to be a table (cards, gallery, list, board, timeline, calendar, chart, ranking). ' +
+        '`{"seoDescription": "...", "seoImage": "<attachment id>"}` sets the search-result description and link-preview ' +
+        'image (search engines are pinged right away). ' +
         '`{"isPublic": true}` on a PAGE needs the Team plan (Free → 403 PLAN_UPGRADE_REQUIRED); closing it works on any plan. ' +
         'For DOCUMENT nodes use rootr_set_document_public instead — documents keep their own settings (skins, ' +
         'edit proposals) on the older path. Owner-level action (MANAGE): use an account key (PAT).',
@@ -106,6 +108,17 @@ export function registerPublicTools(server) {
         noIndex: z.boolean().optional(),
         expiresAt: z.string().nullable().optional().describe('ISO date, or null to clear'),
         password: z.string().nullable().optional().describe('null or "" removes the lock'),
+        seoDescription: z
+          .string()
+          .max(300)
+          .nullable()
+          .optional()
+          .describe('Search-result / link-preview description (~160 chars recommended). null or "" falls back to the opening text.'),
+        seoImage: z
+          .string()
+          .nullable()
+          .optional()
+          .describe('Link-preview cover image: an image attachment id from the same workspace (rootr_upload_attachment). null removes it.'),
         view: z.string().optional().describe('DATABASE only: view id the public page opens with'),
         design: DB_DESIGN_SCHEMA.optional().describe(
           'DATABASE only: how the public page presents the table. `layout` — table, cards, gallery, list, ' +

package/lib/mcp-tools/workspaces.js

@@ -42,10 +42,18 @@ const ACCESS_HINT =
   '`searchExcluded: true` (values stay out of the search index behind ask / AI explore / similar rows — not a read permission) and a `type: "vector"` ' +
   'property needs `dimensions` (an embedding column agents fill with rootr_set_row_vectors). ' +
   'A phone/email/name property may carry `dedupe: true` (warn when the same person is entered again) with ' +
-  '`dedupeShow: ["진행상태","특이사항","콜 이력"]` (fields of the existing row the warning shows — a relation shows its latest 5 rows); ' +
+  '`dedupeShow: ["상태","메모","통화 기록"]` (fields of the existing row the warning shows — a relation shows its latest 5 rows) and ' +
+  '`dedupeCarry: { label: "재등록", action: "carry"|"merge_into_old"|"merge_all"|"ask", sources: "all", columns: { "메모": { append: { sep: " / " } } }, exclude: ["접수일"], mark: { "재등록 여부": true, "구분": { map: { "A": "A(재등록)" }, else: "{value} (재등록)" } }, cases: [{ when: { within: { column: "접수일", days: 0 } }, action: "merge_all", mark: {} }, { action: "carry" }] }` ' +
+  '(same entry came back: copy the earlier row into the new one — see rootr_update_column); any property may carry ' +
+  '`validate: { kind: "pattern"|"range"|"date"|"birthdate", pattern?, flags?, negate?, min?, max?, message? }` (flags a wrong value on every new write, never blocks); ' +
   'a relation property may carry `relationFilter: [{ propId, op: "is"|"is_not_empty", values? }]` (which linked rows may be picked). ' +
+  'The title property may carry `identifyProps: [{ propId: "연락처", mask: "last4" }, { propId: "지원일" }]` (shown next to the name ' +
+  'wherever another table picks these rows, so same-name people can be told apart). ' +
   'A board view config may carry `cardProps: ["면접예정일","연락처"]` (fields on each card, rollups too) and any view `rowColors` ' +
   '(`[{ propId, op: "is"|"is_not_empty", values?, color }]`). ' +
+  'Any property may carry `align: "left"|"center"|"right"` and `wrap: true`; a date property `highlightOverdue: true` ' +
+  '(past dates red — off by default), `allowTime: false` (no time) and `allowRange: false` (no end date). A table view ' +
+  'config may carry `density: "compact"` and `frozenColumns: 1` (first N visible columns fixed while scrolling sideways). ' +
   'A DOCUMENT\'s `content` may embed a live ' +
   'table/sheet/deck with a line `[[embed:<name of a node in this same tree>]]` or `[[embed:/absolute/path]]` — it is ' +
   'linked to the real node after the whole tree is built (an unknown name rolls the whole tree back).';
@@ -228,6 +236,68 @@ export function registerWorkspaceTools(server) {
     },
   );
 
+  server.registerTool(
+    'rootr_workspace_members',
+    {
+      title: 'List members of a Rootr workspace',
+      description:
+        'List the members of a Rootr (루터) workspace — each with their user id, name, email, and role. Use the ' +
+        'id to address rootr_message_member, or to pass as assigneeId/userId elsewhere.',
+      annotations: { readOnlyHint: true, destructiveHint: false },
+      inputSchema: {
+        workspace: z.string().optional().describe('Workspace id; defaults to ROOTR_WORKSPACE/config if omitted'),
+      },
+    },
+    async ({ workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        const client = makeClient(ws);
+        const members = await client.listMembers(ws);
+        return jsonResult(
+          members.map((m) => ({
+            userId: m.userId ?? m.user?.id,
+            name: m.user?.name ?? '',
+            email: m.user?.email ?? '',
+            role: m.role,
+          })),
+        );
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
+  server.registerTool(
+    'rootr_message_member',
+    {
+      title: 'Send a direct message to a workspace member',
+      description:
+        'Send a direct notification-style message to another member of a Rootr (루터) workspace — not tied to ' +
+        'any document, issue, or comment. The message is posted as the person the ROOTR_API_KEY belongs to and ' +
+        'shows up for the recipient in their Rootr notification bell (and by email). Use rootr_workspace_members ' +
+        'first to find the recipient\'s userId.',
+      annotations: { readOnlyHint: false, destructiveHint: false },
+      inputSchema: {
+        userId: z.string().describe('User id of the workspace member to message (see rootr_workspace_members)'),
+        body: z.string().describe('Message text'),
+        workspace: z
+          .string()
+          .optional()
+          .describe('Workspace id; defaults to ROOTR_WORKSPACE/config if omitted'),
+      },
+    },
+    async ({ userId, body, workspace }) => {
+      try {
+        const ws = requireWorkspace(workspace);
+        const client = makeClient(ws);
+        await client.messageMember(ws, userId, body);
+        return textResult(`${userId} 에게 메시지를 보냈습니다.`);
+      } catch (err) {
+        return errorResult(err);
+      }
+    },
+  );
+
   server.registerTool(
     'rootr_scaffold_plan',
     {

package/lib/mcp.js

@@ -25,6 +25,7 @@ import { registerSignedDocTools } from './mcp-tools/signed.js';
 import { registerFeedbackTools } from './mcp-tools/feedback.js';
 import { registerMemoryTools } from './mcp-tools/memory.js';
 import { registerDocMailTools } from './mcp-tools/doc-mail.js';
+import { registerDomainTools } from './mcp-tools/domains.js';
 import { withDocMailSink, withRateLimitSink } from './context.js';
 import { makeClient } from './mcp-tools/shared.js';
 import { t as tr } from './i18n.js';
@@ -330,6 +331,7 @@ export function buildMcpServer({ name, version }) {
   registerFeedbackTools(server);
   registerMemoryTools(server);
   registerDocMailTools(server);
+  registerDomainTools(server);
 
   return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rootr-cli",
-  "version": "0.25.0",
+  "version": "0.29.0",
   "description": "Official Rootr CLI + MCP server — read, write, edit and search Rootr documents from the shell or from an AI agent.",
   "type": "module",
   "bin": {