@2kw/ai 6.3.0-dev.3 → 6.3.0-dev.8

package/dist/commands/connectors.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "commander";
+/**
+ * Manage the connector settings an organization decides centrally (#805).
+ *
+ * Only the approved public hosts live here: which MCP servers this organization's agents
+ * may reach directly. The connectors themselves are declared per agent, in the agent
+ * version's `tools`.
+ */
+export declare function makeConnectorsCommand(): Command;
+//# sourceMappingURL=connectors.d.ts.map

package/dist/commands/connectors.js

@@ -0,0 +1,96 @@
+import { Command } from "commander";
+import { getClient, runAction } from "../lib/client.js";
+import { CliUsageError } from "../lib/errors.js";
+import { formatDetail, formatList, formatSuccess } from "../lib/output.js";
+/**
+ * These three endpoints take a member sign-in only (plan ruling R10): approving a
+ * destination is the human gate against exfiltration, so an API key — however admin it is —
+ * is refused. Said in every description, because `--help` is where a reader looks before
+ * the 403.
+ */
+const SESSION_ONLY = "Signed-in admins only: run 2kw auth login and sign in through the browser; an API key is refused";
+/** The backend's limit, so a too-long host fails here instead of after a round trip. */
+const MAX_HOST_LENGTH = 253;
+const MIN_PORT = 1;
+const MAX_PORT = 65535;
+/**
+ * Parse `--port` strictly, and only when one was given.
+ *
+ * Commander's house pattern is a bare `parseInt`, which turns `--port abc` into `NaN`,
+ * `JSON.stringify` turns that into `null`, and the backend reads a null port as "not
+ * given" and approves 443. Silently approving a port nobody asked for is not a wart worth
+ * inheriting on a trust decision.
+ *
+ * Validated inside the action rather than as commander's option parser, so the refusal
+ * travels through `runAction` and exits 2 like every other usage error.
+ */
+function parsePort(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const port = Number(value);
+    if (!Number.isInteger(port) || port < MIN_PORT || port > MAX_PORT) {
+        throw new CliUsageError(`--port must be a whole number between ${MIN_PORT} and ${MAX_PORT}, not '${value}'`);
+    }
+    return port;
+}
+function requireHost(host) {
+    if (host.length > MAX_HOST_LENGTH) {
+        throw new CliUsageError(`A host name is at most ${MAX_HOST_LENGTH} characters`);
+    }
+    return host;
+}
+/**
+ * Manage the connector settings an organization decides centrally (#805).
+ *
+ * Only the approved public hosts live here: which MCP servers this organization's agents
+ * may reach directly. The connectors themselves are declared per agent, in the agent
+ * version's `tools`.
+ */
+export function makeConnectorsCommand() {
+    const cmd = new Command("connectors").description("Manage MCP connector settings");
+    const publicHosts = new Command("public-hosts").description(`Approve the public MCP hosts this organization's agents may reach. ${SESSION_ONLY}`);
+    publicHosts
+        .command("list")
+        .description(`List the approved public MCP hosts. ${SESSION_ONLY}`)
+        .action(async (_opts, command) => {
+        await runAction(command, async () => {
+            const client = getClient(command);
+            const { data } = await client.GET("/v1/connectors/public-hosts");
+            formatList(data, command, [
+                "id",
+                "host",
+                "port",
+                "createdBy",
+                "createdAt",
+            ]);
+        });
+    });
+    publicHosts
+        .command("add")
+        .description(`Approve a host — every path and every account on it becomes reachable. ${SESSION_ONLY}`)
+        .argument("<host>", "Plain host name: no scheme, path, port, wildcard or IP literal")
+        .option("--port <n>", "Port to approve; 443 when omitted")
+        .action(async (host, opts, command) => {
+        await runAction(command, async () => {
+            const body = { host: requireHost(host), port: parsePort(opts.port) };
+            const client = getClient(command);
+            const { data } = await client.POST("/v1/connectors/public-hosts", { body });
+            formatDetail(data, command);
+        });
+    });
+    publicHosts
+        .command("remove")
+        .description(`Withdraw an approved host; it takes effect on the next request. ${SESSION_ONLY}`)
+        .argument("<id>", "Approved host ID, from `connectors public-hosts list`")
+        .action(async (id, _opts, command) => {
+        await runAction(command, async () => {
+            const client = getClient(command);
+            await client.DELETE("/v1/connectors/public-hosts/{id}", { params: { path: { id } } });
+            formatSuccess(`Host ${id} withdrawn.`, command);
+        });
+    });
+    cmd.addCommand(publicHosts);
+    return cmd;
+}
+//# sourceMappingURL=connectors.js.map

package/dist/index.js

@@ -29,6 +29,7 @@ import { makeConversationsCommand } from "./commands/conversations.js";
 import { makeKnowledgeCommand } from "./commands/knowledge.js";
 import { makeFilesCommand } from "./commands/files.js";
 import { makeInstallationsCommand } from "./commands/installations.js";
+import { makeConnectorsCommand } from "./commands/connectors.js";
 import { makeRelaysCommand } from "./commands/relays.js";
 import { checkForUpdates } from "./lib/update-notifier.js";
 const updater = checkForUpdates(pkg.version);
@@ -66,6 +67,7 @@ program.addCommand(makeConversationsCommand());
 program.addCommand(makeKnowledgeCommand());
 program.addCommand(makeFilesCommand());
 program.addCommand(makeInstallationsCommand());
+program.addCommand(makeConnectorsCommand());
 program.addCommand(makeRelaysCommand());
 program.addCommand(makeDocsCommand());
 program.parseAsync().then(() => updater.notify());

package/dist/lib/errors.js

@@ -106,6 +106,12 @@ export function hintFor(err) {
     }
     if (err.code && CODE_HINTS[err.code])
         return CODE_HINTS[err.code];
+    // The 403 whose cause is the credential, not the role (#805). Without this the
+    // generic 403 hint tells an organization admin to check a role that is already
+    // right, and no role would ever have fixed it.
+    if (err.status === 403 && /^Approved connector hosts are managed by a signed-in/.test(err.message)) {
+        return "Approved hosts need a browser sign-in: run 2kw auth login. An API key cannot manage them, whatever its role.";
+    }
     // Anchored on the agent service's wording: prompts and schemas send the same
     // "Label '<x>' not found" prefix, and must keep the generic 404 hint.
     if (err.status === 404 && /^Label 'latest' not found (on agent|for this agent)/.test(err.message)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@2kw/ai",
-  "version": "6.3.0-dev.3",
+  "version": "6.3.0-dev.8",
   "description": "CLI for 2kw.ai — schema-driven document extraction, an OpenAI-compatible EU LLM gateway, transcription, prompts, datasets, and experiments from your terminal or agentic workflows. Ships as 2kw, backbone, and bb.",
   "keywords": [
     "cli",