@ekanos/cli 0.15.0 → 0.17.0

package/dist/commands/team-agents-mcp.js

@@ -1,16 +1,21 @@
 import { TeamMcpListSchema, TeamMcpRemoveResultSchema, TeamMcpStatusSchema, } from '@ekanos/integration-schema';
 import { invalidStateError, usageError } from '../errors.js';
+import { cli } from '../invocation.js';
+import { SINGLE_SECRET_FORMS, collectSecrets, readSecretFlags, secretInputGiven, } from '../secret-input.js';
 import { call } from '../teams-api.js';
 import { promptHidden } from './apps.js';
 import { requireOperand, usageFor } from './team-agents.js';
+import { teamsSecretIO } from './teams.js';
+import { confirmChange } from './teams-lifecycle.js';
 /**
- * `ekanos teams mcp list|add|status|token|effect|remove` — a team's MCP servers,
+ * `ekanos teams mcp list|add|status|token|effect|refresh|attach|detach|remove` — a team's MCP servers,
  * set up by its Source admin (`/api/partner/teams/<team>/mcp/*`).
  *
- * A bearer token is only ever typed at the admin's terminal with hidden
- * input — never a flag, a file or a non-interactive run — so an agent
- * driving the CLI never handles it. An OAuth server is signed in by a team
- * member in their own browser: the CLI prints the link for them.
+ * A bearer token is typed at the admin's terminal with hidden input or,
+ * without one, read from `--secret-env`, `--secret-file`, `--secret-stdin`
+ * or a `--browser` form (`secret-input.ts`) — never a value in argv. An
+ * OAuth server is signed in by a team member in their own browser: the CLI
+ * prints the link for them.
  */
 const AUTH_FLAGS = { none: 'none', token: 'bearer', oauth: 'oauth' };
 export async function runTeamMcp(ctx, run) {
@@ -27,6 +32,11 @@ export async function runTeamMcp(ctx, run) {
             return effect(ctx, run);
         case 'remove':
             return remove(ctx, run);
+        case 'attach':
+        case 'detach':
+            return attachment(ctx, run, run.verb === 'attach');
+        case 'refresh':
+            return refresh(ctx, run);
         default:
             throw usageError(`Unknown teams mcp subcommand "${run.verb}".`, usageFor('mcp'));
     }
@@ -63,7 +73,8 @@ async function add(ctx, run) {
             url,
             auth }, (stringFlag(run, 'name') ? { name: stringFlag(run, 'name') } : {})),
     }));
-    if (auth === 'bearer' && canPrompt(ctx, run)) {
+    if (auth === 'bearer' &&
+        (canPrompt(ctx, run) || secretInputGiven(readSecretFlags(run.args.flags)))) {
         return enterToken(ctx, run, team, key);
     }
     return ctx.succeed(Object.assign({ host: run.host }, added), renderStatus(ctx, added, `Added ${key} to ${team}`));
@@ -95,6 +106,84 @@ async function remove(ctx, run) {
         ],
     }));
 }
+/**
+ * `teams mcp attach|detach <team> <server-key> <agent-key>`: the app's
+ * Attach / Detach on the agent's Tools tab. A provided agent takes the
+ * team's servers only where its template allows; one its template attached
+ * stays. Detaching asks first at a terminal, `--yes` in a script.
+ */
+async function attachment(ctx, run, attach) {
+    const team = requireOperand(run.operands[0], 'team slug', 'mcp');
+    const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');
+    const agent = requireOperand(run.operands[2], 'agent key', 'mcp');
+    noExtra(run, 3);
+    if (!attach && !run.args.yes) {
+        await confirmChange(ctx, run.args, {
+            what: `Detaching ${key} from ${agent} on ${team} takes its tools away from that agent; the server stays on the team for its other agents.`,
+            command: `${cli()} teams mcp detach ${team} ${key} ${agent} --yes`,
+            question: `Detach ${key} from ${agent} on ${team}? [y/N]`,
+        });
+    }
+    const data = await run.client.call((accessToken) => call(run.host, accessToken, TeamMcpStatusSchema, {
+        method: attach ? 'PUT' : 'DELETE',
+        path: `${mcpPath(team)}/${encodeURIComponent(key)}/agents/${encodeURIComponent(agent)}`,
+        source: run.source,
+    }));
+    return ctx.succeed(Object.assign({ host: run.host }, data), renderStatus(ctx, data, attach
+        ? `Attached ${key} to ${agent} on ${team}`
+        : `Detached ${key} from ${agent} on ${team}`));
+}
+/**
+ * `teams mcp refresh <team> <server-key>` — the app's Refresh: the server's
+ * tools listed again. `--agent <key>` (no server key) refreshes every
+ * server attached to that agent.
+ */
+async function refresh(ctx, run) {
+    var _a;
+    const team = requireOperand(run.operands[0], 'team slug', 'mcp');
+    const agent = (_a = stringFlag(run, 'agent')) === null || _a === void 0 ? void 0 : _a.toLowerCase();
+    if (agent && run.operands[1] !== undefined) {
+        throw usageError('Name a server key or --agent, not both.', `e.g. ${cli()} teams mcp refresh ${team} --agent ${agent}`);
+    }
+    const keys = agent
+        ? await serversOf(run, team, agent)
+        : [requireOperand(run.operands[1], 'MCP server key', 'mcp')];
+    noExtra(run, agent ? 1 : 2);
+    const refreshed = [];
+    for (const key of keys) {
+        refreshed.push(await run.client.call((accessToken) => call(run.host, accessToken, TeamMcpStatusSchema, {
+            method: 'POST',
+            path: `${mcpPath(team)}/${encodeURIComponent(key)}/refresh`,
+            source: run.source,
+        })));
+    }
+    if (!agent) {
+        const data = refreshed[0];
+        return ctx.succeed(Object.assign({ host: run.host }, data), renderStatus(ctx, data, `Refreshed ${data.server.key}'s tools on ${team}`));
+    }
+    return ctx.succeed({ host: run.host, team: { slug: team }, agent, servers: refreshed }, refreshed.length === 0
+        ? ctx.ui.result({
+            title: `${agent} on ${team} has no MCP server attached`,
+            tone: 'warn',
+            notes: [
+                `Attach one: ${cli()} teams mcp attach ${team} <server-key> ${agent}`,
+            ],
+        })
+        : refreshed
+            .map((data) => renderStatus(ctx, data, `Refreshed ${data.server.key}'s tools for ${agent} on ${team}`))
+            .join('\n\n'));
+}
+/** The team's servers the agent has attached (by the team or its template). */
+async function serversOf(run, team, agent) {
+    const list = await run.client.call((accessToken) => call(run.host, accessToken, TeamMcpListSchema, {
+        method: 'GET',
+        path: mcpPath(team),
+        source: run.source,
+    }));
+    return list.servers
+        .filter((server) => server.agents.includes(agent))
+        .map((server) => server.key);
+}
 async function status(ctx, run) {
     const team = requireOperand(run.operands[0], 'team slug', 'mcp');
     const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');
@@ -110,14 +199,27 @@ async function token(ctx, run) {
     const team = requireOperand(run.operands[0], 'team slug', 'mcp');
     const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');
     noExtra(run, 2);
-    if (!canPrompt(ctx, run)) {
-        throw usageError("teams mcp token takes the server's token at a terminal, never in a script or an agent run.", `Run it yourself in your terminal: npx @ekanos/cli teams mcp token ${team} ${key} --source ${run.source}`);
+    const secret = readSecretFlags(run.args.flags);
+    if (!canPrompt(ctx, run) && !secretInputGiven(secret)) {
+        throw usageError("teams mcp token needs the server's token, and there is no terminal to ask at.", `Without a terminal, pass ${SINGLE_SECRET_FORMS}. Or run it yourself in your terminal: ${cli()} teams mcp token ${team} ${key} --source ${run.source}`);
     }
     return enterToken(ctx, run, team, key);
 }
 async function enterToken(ctx, run, team, key) {
     var _a;
-    const value = (await ((_a = run.args.askSecret) !== null && _a !== void 0 ? _a : promptHidden)(`Bearer token for ${key} on ${team} (hidden): `)).trim();
+    const collected = await collectSecrets(ctx, {
+        fields: [
+            { name: 'token', label: `Bearer token for ${key}`, sensitive: true },
+        ],
+        flags: readSecretFlags(run.args.flags),
+        io: teamsSecretIO(run.args),
+        interactive: canPrompt(ctx, run),
+        title: `the ${key} MCP server on ${team}`,
+        refusal: "teams mcp token needs the server's token, and there is no terminal to ask at.",
+        again: `teams mcp token ${team} ${key} --source ${run.source}`,
+        prompt: () => { var _a; return ((_a = run.args.askSecret) !== null && _a !== void 0 ? _a : promptHidden)(`Bearer token for ${key} on ${team} (hidden): `); },
+    });
+    const value = (_a = collected.token) !== null && _a !== void 0 ? _a : '';
     if (!value) {
         throw usageError('No token entered; nothing was saved.', `Run "ekanos teams mcp token ${team} ${key}" when you have it.`);
     }
@@ -187,7 +289,7 @@ function renderStatus(ctx, data, title) {
         notes.push('A team member who manages agents opens this link, signed in to the team, to connect it (you cannot sign in for them):', data.connectUrl);
     }
     else if (server.auth === 'bearer' && server.status !== 'connected') {
-        notes.push(`Enter its token in your terminal: npx @ekanos/cli teams mcp token ${data.team.slug} ${server.key}`);
+        notes.push(`Enter its token in your terminal: ${cli()} teams mcp token ${data.team.slug} ${server.key}`);
     }
     if (data.effectsFromTemplate) {
         notes.push("Its tools' effects come from the agent template (toolEffects in agent.json).");

package/dist/commands/team-agents-mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"team-agents-mcp.js","sourceRoot":"","sources":["../../src/commands/team-agents-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EACjB,yBAAyB,EAGzB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAqB,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE5E;;;;;;;;GAQG;AAEH,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAW,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,GAAiB;IAEjB,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,KAAK,KAAK;YACR,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B;YACE,MAAM,UAAU,CACd,iCAAiC,GAAG,CAAC,IAAI,IAAI,EAC7C,QAAQ,CAAC,KAAK,CAAC,CAChB,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,GAAiB;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBAAG,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,GAAe,EAAE,GAAiB;;IACnD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEhB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,UAAU,CACd,qCAAqC,EACrC,6BAA6B,IAAI,IAAI,GAAG,8CAA8C,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,SAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,mCAAI,OAAO,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,UAAU,CACd,6CAA6C,QAAQ,KAAK,EAC1D,QAAQ,CAAC,KAAK,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAmC,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,kBACF,GAAG;YACH,GAAG;YACH,IAAI,IACD,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACtE;KACF,CAAC,CACH,CAAC;IAEF,IAAI,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,IAAI,EAAE,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,GAAiB;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,iBAAiB,CACrB,YAAY,GAAG,SAAS,IAAI,oGAAoG,EAChI,8CAA8C,IAAI,IAAI,GAAG,QAAQ,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACpD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACrD,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,OAAO,GAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,WAAW,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ;gBACE,qBAAqB;gBACrB,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;aAC/D;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,GAAiB;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,GAAiB;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,CACd,4FAA4F,EAC5F,qEAAqE,IAAI,IAAI,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAe,EACf,GAAiB,EACjB,IAAY,EACZ,GAAW;;IAEX,MAAM,KAAK,GAAG,CACZ,MAAM,OAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC,CACxC,oBAAoB,GAAG,OAAO,IAAI,aAAa,CAChD,CACF,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,UAAU,CACd,sCAAsC,EACtC,+BAA+B,IAAI,IAAI,GAAG,qBAAqB,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ;QACzD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KACvB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,GAAG,gBAAgB,IAAI,EAAE,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,GAAiB;;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAA,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAAE,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAA,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,CACd,kDAAkD,EAClD,gCAAgC,IAAI,IAAI,GAAG,iDAAiD,IAAI,IAAI,GAAG,oBAAoB,CAC5H,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU;QAC3D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;KAC9B,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,GAAG,aAAa,KAAK,EAAE,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,IAAiB;IACpD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,qBAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAC5C,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,iCAAiC,IAAI,CAAC,IAAI,CAAC,IAAI,gDAAgD;aAChG;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACzC,IAAI,EACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;YAC1D,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI;QACV,IAAI,EAAE;YACJ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG;gBACV,cAAc,CAAC,MAAM,CAAC;aACvB,CAAC;YACF,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC;gBAC/C,KAAK,CAAC,GAAG;gBACT,eAAe,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE;aAClF,CAAC;SACH;QACD,KAAK,EAAE;YACL,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,uDAAuD;SAClG;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,GAAe,EACf,IAAmB,EACnB,KAAa;IAEb,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,uHAAuH,EACvH,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrE,KAAK,CAAC,IAAI,CACR,qEAAqE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CACR,2EAA2E,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,cAAc,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACtE,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC;oBACE;wBACE,OAAO;wBACP,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,CAAC,IAAI,EAAE,EAAE,CACP,GAAG,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,IAAI,CAAC,SAAS,GAAG,EAAE,CAC9G;qBACoB;iBACxB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,KAAK,WAAW;QAC3B,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,QAAQ,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC9E,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO;YACzB,CAAC,CAAC,UAAU,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7D,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9G,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9D,MAAM,IAAI,GAAG;QACX,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,GAAG,CAC9H;QACD,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CACjE;KACF,CAAC;IACF,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,GAAiB,EAAE,IAAY;;IACjD,MAAM,KAAK,GAAG,MAAA,GAAG,CAAC,IAAI,CAAC,KAAK,0CAAG,IAAI,CAAC,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,GAAiB,EAAE,KAAa;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,CAAC,wBAAwB,KAAK,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,GAAiB;;IACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,GAAG,CAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC","sourcesContent":["import {\n  type TeamMcpList,\n  TeamMcpListSchema,\n  TeamMcpRemoveResultSchema,\n  type TeamMcpServer,\n  type TeamMcpStatus,\n  TeamMcpStatusSchema,\n} from '@ekanos/integration-schema';\n\nimport type { CliContext } from '../context';\nimport { invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { call } from '../teams-api';\nimport { promptHidden } from './apps';\nimport { type TeamAgentRun, requireOperand, usageFor } from './team-agents';\n\n/**\n * `ekanos teams mcp list|add|status|token|effect|remove` — a team's MCP servers,\n * set up by its Source admin (`/api/partner/teams/<team>/mcp/*`).\n *\n * A bearer token is only ever typed at the admin's terminal with hidden\n * input — never a flag, a file or a non-interactive run — so an agent\n * driving the CLI never handles it. An OAuth server is signed in by a team\n * member in their own browser: the CLI prints the link for them.\n */\n\nconst AUTH_FLAGS = { none: 'none', token: 'bearer', oauth: 'oauth' } as const;\n\nexport async function runTeamMcp(\n  ctx: CliContext,\n  run: TeamAgentRun,\n): Promise<ExitCode> {\n  switch (run.verb) {\n    case 'list':\n      return list(ctx, run);\n    case 'add':\n      return add(ctx, run);\n    case 'status':\n      return status(ctx, run);\n    case 'token':\n      return token(ctx, run);\n    case 'effect':\n      return effect(ctx, run);\n    case 'remove':\n      return remove(ctx, run);\n    default:\n      throw usageError(\n        `Unknown teams mcp subcommand \"${run.verb}\".`,\n        usageFor('mcp'),\n      );\n  }\n}\n\nasync function list(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  noExtra(run, 1);\n  const data = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpListSchema, {\n      method: 'GET',\n      path: mcpPath(team),\n      source: run.source,\n    }),\n  );\n  return ctx.succeed({ host: run.host, ...data }, renderList(ctx, data));\n}\n\nasync function add(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n\n  const url = stringFlag(run, 'url');\n  if (!url) {\n    throw usageError(\n      'teams mcp add needs the server URL.',\n      `Run \"ekanos teams mcp add ${team} ${key} --url https://… [--auth none|token|oauth]\".`,\n    );\n  }\n  const authFlag = stringFlag(run, 'auth') ?? 'oauth';\n  if (!(authFlag in AUTH_FLAGS)) {\n    throw usageError(\n      `--auth must be none, token or oauth (got \"${authFlag}\").`,\n      usageFor('mcp'),\n    );\n  }\n  const auth = AUTH_FLAGS[authFlag as keyof typeof AUTH_FLAGS];\n\n  const added = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'POST',\n      path: mcpPath(team),\n      source: run.source,\n      body: {\n        key,\n        url,\n        auth,\n        ...(stringFlag(run, 'name') ? { name: stringFlag(run, 'name') } : {}),\n      },\n    }),\n  );\n\n  if (auth === 'bearer' && canPrompt(ctx, run)) {\n    return enterToken(ctx, run, team, key);\n  }\n  return ctx.succeed(\n    { host: run.host, ...added },\n    renderStatus(ctx, added, `Added ${key} to ${team}`),\n  );\n}\n\n/**\n * `teams mcp remove <team> <server-key> --yes`: the app's Remove — every\n * agent of the team loses the server, and its credentials are deleted.\n */\nasync function remove(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n  if (!run.args.yes) {\n    throw invalidStateError(\n      `Removing ${key} from ${team} takes it away from every agent of the team that uses it, and deletes its stored token or sign-in.`,\n      `Re-run with --yes: ekanos teams mcp remove ${team} ${key} --yes`,\n    );\n  }\n  const removed = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpRemoveResultSchema, {\n      method: 'DELETE',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}`,\n      source: run.source,\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...removed },\n    ctx.ui.result({\n      title: `Removed ${removed.removed} from ${removed.team.slug}`,\n      tone: 'warn',\n      rows: [\n        [\n          'Agents that lost it',\n          removed.agents.length > 0 ? removed.agents.join(', ') : 'none',\n        ],\n      ],\n    }),\n  );\n}\n\nasync function status(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n  const data = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'GET',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}`,\n      source: run.source,\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...data },\n    renderStatus(ctx, data, `${key} on ${team}`),\n  );\n}\n\nasync function token(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n  if (!canPrompt(ctx, run)) {\n    throw usageError(\n      \"teams mcp token takes the server's token at a terminal, never in a script or an agent run.\",\n      `Run it yourself in your terminal: npx @ekanos/cli teams mcp token ${team} ${key} --source ${run.source}`,\n    );\n  }\n  return enterToken(ctx, run, team, key);\n}\n\nasync function enterToken(\n  ctx: CliContext,\n  run: TeamAgentRun,\n  team: string,\n  key: string,\n): Promise<ExitCode> {\n  const value = (\n    await (run.args.askSecret ?? promptHidden)(\n      `Bearer token for ${key} on ${team} (hidden): `,\n    )\n  ).trim();\n  if (!value) {\n    throw usageError(\n      'No token entered; nothing was saved.',\n      `Run \"ekanos teams mcp token ${team} ${key}\" when you have it.`,\n    );\n  }\n  const saved = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'PUT',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}/token`,\n      source: run.source,\n      body: { token: value },\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...saved },\n    renderStatus(ctx, saved, `Saved ${key}'s token for ${team}`),\n  );\n}\n\nasync function effect(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  const tool = run.operands[2]?.trim();\n  const value = run.operands[3]?.trim().toLowerCase();\n  noExtra(run, 4);\n  if (!tool || (value !== 'read' && value !== 'write')) {\n    throw usageError(\n      'teams mcp effect needs a tool and read or write.',\n      `Run \"ekanos teams mcp effect ${team} ${key} <tool> read|write\"; \"ekanos teams mcp status ${team} ${key}\" lists the tools.`,\n    );\n  }\n  const saved = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'PUT',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}/effects`,\n      source: run.source,\n      body: { tool, effect: value },\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...saved },\n    renderStatus(ctx, saved, `${tool} on ${key} is now a ${value}`),\n  );\n}\n\nfunction renderList(ctx: CliContext, data: TeamMcpList): string {\n  if (data.servers.length === 0 && data.missing.length === 0) {\n    return ctx.ui.result({\n      title: `No MCP servers on ${data.team.slug}`,\n      tone: 'warn',\n      notes: [\n        `Add one: ekanos teams mcp add ${data.team.slug} <key> --url https://… --auth none|token|oauth`,\n      ],\n    });\n  }\n  return ctx.ui.result({\n    title: `MCP servers on ${data.team.slug}`,\n    tone:\n      data.missing.some((entry) => entry.required) ||\n      data.servers.some((server) => server.status !== 'connected')\n        ? 'warn'\n        : 'ok',\n    rows: [\n      ...data.servers.map((server): [string, string] => [\n        server.key,\n        describeServer(server),\n      ]),\n      ...data.missing.map((entry): [string, string] => [\n        entry.key,\n        `✗ missing — ${entry.agent} ${entry.required ? 'needs' : 'can use'} ${entry.url}`,\n      ]),\n    ],\n    notes: [\n      `\"ekanos teams mcp status ${data.team.slug} <key>\" shows a server's tools and how to connect it.`,\n    ],\n  });\n}\n\nfunction renderStatus(\n  ctx: CliContext,\n  data: TeamMcpStatus,\n  title: string,\n): string {\n  const { server } = data;\n  const notes: string[] = [];\n  if (data.syncError) notes.push(`Listing its tools failed: ${data.syncError}`);\n  if (data.connectUrl) {\n    notes.push(\n      'A team member who manages agents opens this link, signed in to the team, to connect it (you cannot sign in for them):',\n      data.connectUrl,\n    );\n  } else if (server.auth === 'bearer' && server.status !== 'connected') {\n    notes.push(\n      `Enter its token in your terminal: npx @ekanos/cli teams mcp token ${data.team.slug} ${server.key}`,\n    );\n  }\n  if (data.effectsFromTemplate) {\n    notes.push(\n      \"Its tools' effects come from the agent template (toolEffects in agent.json).\",\n    );\n  } else if (data.tools.some((tool) => !tool.confirmed)) {\n    notes.push(\n      `Unconfirmed tools count as writes. Mark a read: ekanos teams mcp effect ${data.team.slug} ${server.key} <tool> read`,\n    );\n  }\n  return ctx.ui.result({\n    title,\n    tone: server.status === 'connected' && !data.syncError ? 'ok' : 'warn',\n    rows: [\n      ['Server', describeServer(server)],\n      ['URL', server.url],\n      ...(data.tools.length > 0\n        ? [\n            [\n              'Tools',\n              data.tools.map(\n                (tool) =>\n                  `${tool.name} · ${tool.effect}${tool.confirmed ? '' : ` (unconfirmed, server suggests ${tool.suggested})`}`,\n              ),\n            ] as [string, string[]],\n          ]\n        : []),\n    ],\n    notes,\n  });\n}\n\nfunction describeServer(server: TeamMcpServer): string {\n  const state =\n    server.status === 'connected'\n      ? `✓ connected · ${server.toolCount} tool${server.toolCount === 1 ? '' : 's'}`\n      : server.status === 'error'\n        ? `✗ error${server.lastError ? `: ${server.lastError}` : ''}`\n        : `✗ needs ${server.auth === 'oauth' ? 'sign-in' : server.auth === 'bearer' ? 'a token' : 'a refresh'}`;\n  const auth = server.auth === 'bearer' ? 'token' : server.auth;\n  const used = [\n    ...server.declaredBy.map(\n      (use) =>\n        `${use.agent} (${use.required ? 'required' : 'optional'}${use.urlMatches ? '' : ', different URL — not the one it needs'})`,\n    ),\n    ...server.agents.filter(\n      (agent) => !server.declaredBy.some((use) => use.agent === agent),\n    ),\n  ];\n  return `${state} · ${auth}${used.length > 0 ? ` · used by ${used.join(', ')}` : ''}`;\n}\n\nfunction mcpPath(team: string): string {\n  return `/api/partner/teams/${encodeURIComponent(team)}/mcp`;\n}\n\nfunction stringFlag(run: TeamAgentRun, name: string): string | undefined {\n  const value = run.args.flags?.[name];\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction noExtra(run: TeamAgentRun, count: number): void {\n  const extra = run.operands[count];\n  if (extra !== undefined) {\n    throw usageError(`Unexpected argument \"${extra}\".`, usageFor('mcp'));\n  }\n}\n\nfunction canPrompt(ctx: CliContext, run: TeamAgentRun): boolean {\n  return !ctx.jsonMode && (run.args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n"]}
+{"version":3,"file":"team-agents-mcp.js","sourceRoot":"","sources":["../../src/commands/team-agents-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EACjB,yBAAyB,EAGzB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAqB,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;;;;;;;;GASG;AAEH,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAW,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,GAAiB;IAEjB,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,KAAK,KAAK;YACR,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACrD,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B;YACE,MAAM,UAAU,CACd,iCAAiC,GAAG,CAAC,IAAI,IAAI,EAC7C,QAAQ,CAAC,KAAK,CAAC,CAChB,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,GAAiB;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBAAG,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,GAAe,EAAE,GAAiB;;IACnD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEhB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,UAAU,CACd,qCAAqC,EACrC,6BAA6B,IAAI,IAAI,GAAG,8CAA8C,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,SAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,mCAAI,OAAO,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,UAAU,CACd,6CAA6C,QAAQ,KAAK,EAC1D,QAAQ,CAAC,KAAK,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAmC,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,kBACF,GAAG;YACH,GAAG;YACH,IAAI,IACD,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACtE;KACF,CAAC,CACH,CAAC;IAEF,IACE,IAAI,KAAK,QAAQ;QACjB,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,gBAAgB,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAC1E,CAAC;QACD,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,IAAI,EAAE,CAAC,CACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,GAAiB;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,iBAAiB,CACrB,YAAY,GAAG,SAAS,IAAI,oGAAoG,EAChI,8CAA8C,IAAI,IAAI,GAAG,QAAQ,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACpD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QACrD,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,OAAO,GAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,WAAW,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ;gBACE,qBAAqB;gBACrB,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;aAC/D;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CACvB,GAAe,EACf,GAAiB,EACjB,MAAe;IAEf,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE;YACjC,IAAI,EAAE,aAAa,GAAG,SAAS,KAAK,OAAO,IAAI,2FAA2F;YAC1I,OAAO,EAAE,GAAG,GAAG,EAAE,qBAAqB,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ;YAClE,QAAQ,EAAE,UAAU,GAAG,SAAS,KAAK,OAAO,IAAI,SAAS;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACjC,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE;QACvF,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,YAAY,CACV,GAAG,EACH,IAAI,EACJ,MAAM;QACJ,CAAC,CAAC,YAAY,GAAG,OAAO,KAAK,OAAO,IAAI,EAAE;QAC1C,CAAC,CAAC,YAAY,GAAG,SAAS,KAAK,OAAO,IAAI,EAAE,CAC/C,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,OAAO,CAAC,GAAe,EAAE,GAAiB;;IACvD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAA,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,0CAAE,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,UAAU,CACd,yCAAyC,EACzC,QAAQ,GAAG,EAAE,sBAAsB,IAAI,YAAY,KAAK,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;QACnC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5B,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CACZ,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACpC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU;YAC3D,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,YAAY,CACV,GAAG,EACH,IAAI,EACJ,aAAa,IAAI,CAAC,MAAM,CAAC,GAAG,eAAe,IAAI,EAAE,CAClD,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EACnE,SAAS,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,GAAG,KAAK,OAAO,IAAI,6BAA6B;YACvD,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,eAAe,GAAG,EAAE,qBAAqB,IAAI,iBAAiB,KAAK,EAAE;aACtE;SACF,CAAC;QACJ,CAAC,CAAC,SAAS;aACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,YAAY,CACV,GAAG,EACH,IAAI,EACJ,aAAa,IAAI,CAAC,MAAM,CAAC,GAAG,gBAAgB,KAAK,OAAO,IAAI,EAAE,CAC/D,CACF;aACA,IAAI,CAAC,MAAM,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,SAAS,CACtB,GAAiB,EACjB,IAAY,EACZ,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,IAAI,CAAC,OAAO;SAChB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACjD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,GAAiB;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,GAAiB;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,UAAU,CACd,+EAA+E,EAC/E,4BAA4B,mBAAmB,0CAA0C,GAAG,EAAE,oBAAoB,IAAI,IAAI,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,CACvJ,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAe,EACf,GAAiB,EACjB,IAAY,EACZ,GAAW;;IAEX,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;QAC1C,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SACrE;QACD,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3B,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;QAChC,KAAK,EAAE,OAAO,GAAG,kBAAkB,IAAI,EAAE;QACzC,OAAO,EACL,+EAA+E;QACjF,KAAK,EAAE,mBAAmB,IAAI,IAAI,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE;QAC9D,MAAM,EAAE,GAAG,EAAE,kBACX,OAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC,CAClC,oBAAoB,GAAG,OAAO,IAAI,aAAa,CAChD,GAAA;KACJ,CAAC,CAAC;IACH,MAAM,KAAK,SAAG,SAAS,CAAC,KAAK,mCAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,UAAU,CACd,sCAAsC,EACtC,+BAA+B,IAAI,IAAI,GAAG,qBAAqB,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ;QACzD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KACvB,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,GAAG,gBAAgB,IAAI,EAAE,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,GAAiB;;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAA,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAAE,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,MAAA,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,CACd,kDAAkD,EAClD,gCAAgC,IAAI,IAAI,GAAG,iDAAiD,IAAI,IAAI,GAAG,oBAAoB,CAC5H,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU;QAC3D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;KAC9B,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,GAAG,aAAa,KAAK,EAAE,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,IAAiB;IACpD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,qBAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAC5C,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE;gBACL,iCAAiC,IAAI,CAAC,IAAI,CAAC,IAAI,gDAAgD;aAChG;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QACzC,IAAI,EACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;YAC1D,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI;QACV,IAAI,EAAE;YACJ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG;gBACV,cAAc,CAAC,MAAM,CAAC;aACvB,CAAC;YACF,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC;gBAC/C,KAAK,CAAC,GAAG;gBACT,eAAe,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE;aAClF,CAAC;SACH;QACD,KAAK,EAAE;YACL,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,uDAAuD;SAClG;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,GAAe,EACf,IAAmB,EACnB,KAAa;IAEb,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,uHAAuH,EACvH,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACrE,KAAK,CAAC,IAAI,CACR,qCAAqC,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CACR,2EAA2E,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,cAAc,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACtE,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC;oBACE;wBACE,OAAO;wBACP,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,CAAC,IAAI,EAAE,EAAE,CACP,GAAG,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,IAAI,CAAC,SAAS,GAAG,EAAE,CAC9G;qBACoB;iBACxB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAC3C,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,KAAK,WAAW;QAC3B,CAAC,CAAC,iBAAiB,MAAM,CAAC,SAAS,QAAQ,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC9E,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO;YACzB,CAAC,CAAC,UAAU,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7D,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9G,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9D,MAAM,IAAI,GAAG;QACX,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,GAAG,CAC9H;QACD,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CACjE;KACF,CAAC;IACF,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,GAAiB,EAAE,IAAY;;IACjD,MAAM,KAAK,GAAG,MAAA,GAAG,CAAC,IAAI,CAAC,KAAK,0CAAG,IAAI,CAAC,CAAC;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,GAAiB,EAAE,KAAa;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,CAAC,wBAAwB,KAAK,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,GAAiB;;IACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,GAAG,CAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC","sourcesContent":["import {\n  type TeamMcpList,\n  TeamMcpListSchema,\n  TeamMcpRemoveResultSchema,\n  type TeamMcpServer,\n  type TeamMcpStatus,\n  TeamMcpStatusSchema,\n} from '@ekanos/integration-schema';\n\nimport type { CliContext } from '../context';\nimport { invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { cli } from '../invocation';\nimport {\n  SINGLE_SECRET_FORMS,\n  collectSecrets,\n  readSecretFlags,\n  secretInputGiven,\n} from '../secret-input';\nimport { call } from '../teams-api';\nimport { promptHidden } from './apps';\nimport { type TeamAgentRun, requireOperand, usageFor } from './team-agents';\nimport { teamsSecretIO } from './teams';\nimport { confirmChange } from './teams-lifecycle';\n\n/**\n * `ekanos teams mcp list|add|status|token|effect|refresh|attach|detach|remove` — a team's MCP servers,\n * set up by its Source admin (`/api/partner/teams/<team>/mcp/*`).\n *\n * A bearer token is typed at the admin's terminal with hidden input or,\n * without one, read from `--secret-env`, `--secret-file`, `--secret-stdin`\n * or a `--browser` form (`secret-input.ts`) — never a value in argv. An\n * OAuth server is signed in by a team member in their own browser: the CLI\n * prints the link for them.\n */\n\nconst AUTH_FLAGS = { none: 'none', token: 'bearer', oauth: 'oauth' } as const;\n\nexport async function runTeamMcp(\n  ctx: CliContext,\n  run: TeamAgentRun,\n): Promise<ExitCode> {\n  switch (run.verb) {\n    case 'list':\n      return list(ctx, run);\n    case 'add':\n      return add(ctx, run);\n    case 'status':\n      return status(ctx, run);\n    case 'token':\n      return token(ctx, run);\n    case 'effect':\n      return effect(ctx, run);\n    case 'remove':\n      return remove(ctx, run);\n    case 'attach':\n    case 'detach':\n      return attachment(ctx, run, run.verb === 'attach');\n    case 'refresh':\n      return refresh(ctx, run);\n    default:\n      throw usageError(\n        `Unknown teams mcp subcommand \"${run.verb}\".`,\n        usageFor('mcp'),\n      );\n  }\n}\n\nasync function list(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  noExtra(run, 1);\n  const data = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpListSchema, {\n      method: 'GET',\n      path: mcpPath(team),\n      source: run.source,\n    }),\n  );\n  return ctx.succeed({ host: run.host, ...data }, renderList(ctx, data));\n}\n\nasync function add(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n\n  const url = stringFlag(run, 'url');\n  if (!url) {\n    throw usageError(\n      'teams mcp add needs the server URL.',\n      `Run \"ekanos teams mcp add ${team} ${key} --url https://… [--auth none|token|oauth]\".`,\n    );\n  }\n  const authFlag = stringFlag(run, 'auth') ?? 'oauth';\n  if (!(authFlag in AUTH_FLAGS)) {\n    throw usageError(\n      `--auth must be none, token or oauth (got \"${authFlag}\").`,\n      usageFor('mcp'),\n    );\n  }\n  const auth = AUTH_FLAGS[authFlag as keyof typeof AUTH_FLAGS];\n\n  const added = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'POST',\n      path: mcpPath(team),\n      source: run.source,\n      body: {\n        key,\n        url,\n        auth,\n        ...(stringFlag(run, 'name') ? { name: stringFlag(run, 'name') } : {}),\n      },\n    }),\n  );\n\n  if (\n    auth === 'bearer' &&\n    (canPrompt(ctx, run) || secretInputGiven(readSecretFlags(run.args.flags)))\n  ) {\n    return enterToken(ctx, run, team, key);\n  }\n  return ctx.succeed(\n    { host: run.host, ...added },\n    renderStatus(ctx, added, `Added ${key} to ${team}`),\n  );\n}\n\n/**\n * `teams mcp remove <team> <server-key> --yes`: the app's Remove — every\n * agent of the team loses the server, and its credentials are deleted.\n */\nasync function remove(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n  if (!run.args.yes) {\n    throw invalidStateError(\n      `Removing ${key} from ${team} takes it away from every agent of the team that uses it, and deletes its stored token or sign-in.`,\n      `Re-run with --yes: ekanos teams mcp remove ${team} ${key} --yes`,\n    );\n  }\n  const removed = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpRemoveResultSchema, {\n      method: 'DELETE',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}`,\n      source: run.source,\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...removed },\n    ctx.ui.result({\n      title: `Removed ${removed.removed} from ${removed.team.slug}`,\n      tone: 'warn',\n      rows: [\n        [\n          'Agents that lost it',\n          removed.agents.length > 0 ? removed.agents.join(', ') : 'none',\n        ],\n      ],\n    }),\n  );\n}\n\n/**\n * `teams mcp attach|detach <team> <server-key> <agent-key>`: the app's\n * Attach / Detach on the agent's Tools tab. A provided agent takes the\n * team's servers only where its template allows; one its template attached\n * stays. Detaching asks first at a terminal, `--yes` in a script.\n */\nasync function attachment(\n  ctx: CliContext,\n  run: TeamAgentRun,\n  attach: boolean,\n): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  const agent = requireOperand(run.operands[2], 'agent key', 'mcp');\n  noExtra(run, 3);\n  if (!attach && !run.args.yes) {\n    await confirmChange(ctx, run.args, {\n      what: `Detaching ${key} from ${agent} on ${team} takes its tools away from that agent; the server stays on the team for its other agents.`,\n      command: `${cli()} teams mcp detach ${team} ${key} ${agent} --yes`,\n      question: `Detach ${key} from ${agent} on ${team}? [y/N]`,\n    });\n  }\n  const data = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: attach ? 'PUT' : 'DELETE',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}/agents/${encodeURIComponent(agent)}`,\n      source: run.source,\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...data },\n    renderStatus(\n      ctx,\n      data,\n      attach\n        ? `Attached ${key} to ${agent} on ${team}`\n        : `Detached ${key} from ${agent} on ${team}`,\n    ),\n  );\n}\n\n/**\n * `teams mcp refresh <team> <server-key>` — the app's Refresh: the server's\n * tools listed again. `--agent <key>` (no server key) refreshes every\n * server attached to that agent.\n */\nasync function refresh(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const agent = stringFlag(run, 'agent')?.toLowerCase();\n  if (agent && run.operands[1] !== undefined) {\n    throw usageError(\n      'Name a server key or --agent, not both.',\n      `e.g. ${cli()} teams mcp refresh ${team} --agent ${agent}`,\n    );\n  }\n  const keys = agent\n    ? await serversOf(run, team, agent)\n    : [requireOperand(run.operands[1], 'MCP server key', 'mcp')];\n  noExtra(run, agent ? 1 : 2);\n\n  const refreshed: TeamMcpStatus[] = [];\n  for (const key of keys) {\n    refreshed.push(\n      await run.client.call((accessToken) =>\n        call(run.host, accessToken, TeamMcpStatusSchema, {\n          method: 'POST',\n          path: `${mcpPath(team)}/${encodeURIComponent(key)}/refresh`,\n          source: run.source,\n        }),\n      ),\n    );\n  }\n  if (!agent) {\n    const data = refreshed[0]!;\n    return ctx.succeed(\n      { host: run.host, ...data },\n      renderStatus(\n        ctx,\n        data,\n        `Refreshed ${data.server.key}'s tools on ${team}`,\n      ),\n    );\n  }\n  return ctx.succeed(\n    { host: run.host, team: { slug: team }, agent, servers: refreshed },\n    refreshed.length === 0\n      ? ctx.ui.result({\n          title: `${agent} on ${team} has no MCP server attached`,\n          tone: 'warn',\n          notes: [\n            `Attach one: ${cli()} teams mcp attach ${team} <server-key> ${agent}`,\n          ],\n        })\n      : refreshed\n          .map((data) =>\n            renderStatus(\n              ctx,\n              data,\n              `Refreshed ${data.server.key}'s tools for ${agent} on ${team}`,\n            ),\n          )\n          .join('\\n\\n'),\n  );\n}\n\n/** The team's servers the agent has attached (by the team or its template). */\nasync function serversOf(\n  run: TeamAgentRun,\n  team: string,\n  agent: string,\n): Promise<string[]> {\n  const list = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpListSchema, {\n      method: 'GET',\n      path: mcpPath(team),\n      source: run.source,\n    }),\n  );\n  return list.servers\n    .filter((server) => server.agents.includes(agent))\n    .map((server) => server.key);\n}\n\nasync function status(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n  const data = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'GET',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}`,\n      source: run.source,\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...data },\n    renderStatus(ctx, data, `${key} on ${team}`),\n  );\n}\n\nasync function token(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  noExtra(run, 2);\n  const secret = readSecretFlags(run.args.flags);\n  if (!canPrompt(ctx, run) && !secretInputGiven(secret)) {\n    throw usageError(\n      \"teams mcp token needs the server's token, and there is no terminal to ask at.\",\n      `Without a terminal, pass ${SINGLE_SECRET_FORMS}. Or run it yourself in your terminal: ${cli()} teams mcp token ${team} ${key} --source ${run.source}`,\n    );\n  }\n  return enterToken(ctx, run, team, key);\n}\n\nasync function enterToken(\n  ctx: CliContext,\n  run: TeamAgentRun,\n  team: string,\n  key: string,\n): Promise<ExitCode> {\n  const collected = await collectSecrets(ctx, {\n    fields: [\n      { name: 'token', label: `Bearer token for ${key}`, sensitive: true },\n    ],\n    flags: readSecretFlags(run.args.flags),\n    io: teamsSecretIO(run.args),\n    interactive: canPrompt(ctx, run),\n    title: `the ${key} MCP server on ${team}`,\n    refusal:\n      \"teams mcp token needs the server's token, and there is no terminal to ask at.\",\n    again: `teams mcp token ${team} ${key} --source ${run.source}`,\n    prompt: () =>\n      (run.args.askSecret ?? promptHidden)(\n        `Bearer token for ${key} on ${team} (hidden): `,\n      ),\n  });\n  const value = collected.token ?? '';\n  if (!value) {\n    throw usageError(\n      'No token entered; nothing was saved.',\n      `Run \"ekanos teams mcp token ${team} ${key}\" when you have it.`,\n    );\n  }\n  const saved = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'PUT',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}/token`,\n      source: run.source,\n      body: { token: value },\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...saved },\n    renderStatus(ctx, saved, `Saved ${key}'s token for ${team}`),\n  );\n}\n\nasync function effect(ctx: CliContext, run: TeamAgentRun): Promise<ExitCode> {\n  const team = requireOperand(run.operands[0], 'team slug', 'mcp');\n  const key = requireOperand(run.operands[1], 'MCP server key', 'mcp');\n  const tool = run.operands[2]?.trim();\n  const value = run.operands[3]?.trim().toLowerCase();\n  noExtra(run, 4);\n  if (!tool || (value !== 'read' && value !== 'write')) {\n    throw usageError(\n      'teams mcp effect needs a tool and read or write.',\n      `Run \"ekanos teams mcp effect ${team} ${key} <tool> read|write\"; \"ekanos teams mcp status ${team} ${key}\" lists the tools.`,\n    );\n  }\n  const saved = await run.client.call((accessToken) =>\n    call(run.host, accessToken, TeamMcpStatusSchema, {\n      method: 'PUT',\n      path: `${mcpPath(team)}/${encodeURIComponent(key)}/effects`,\n      source: run.source,\n      body: { tool, effect: value },\n    }),\n  );\n  return ctx.succeed(\n    { host: run.host, ...saved },\n    renderStatus(ctx, saved, `${tool} on ${key} is now a ${value}`),\n  );\n}\n\nfunction renderList(ctx: CliContext, data: TeamMcpList): string {\n  if (data.servers.length === 0 && data.missing.length === 0) {\n    return ctx.ui.result({\n      title: `No MCP servers on ${data.team.slug}`,\n      tone: 'warn',\n      notes: [\n        `Add one: ekanos teams mcp add ${data.team.slug} <key> --url https://… --auth none|token|oauth`,\n      ],\n    });\n  }\n  return ctx.ui.result({\n    title: `MCP servers on ${data.team.slug}`,\n    tone:\n      data.missing.some((entry) => entry.required) ||\n      data.servers.some((server) => server.status !== 'connected')\n        ? 'warn'\n        : 'ok',\n    rows: [\n      ...data.servers.map((server): [string, string] => [\n        server.key,\n        describeServer(server),\n      ]),\n      ...data.missing.map((entry): [string, string] => [\n        entry.key,\n        `✗ missing — ${entry.agent} ${entry.required ? 'needs' : 'can use'} ${entry.url}`,\n      ]),\n    ],\n    notes: [\n      `\"ekanos teams mcp status ${data.team.slug} <key>\" shows a server's tools and how to connect it.`,\n    ],\n  });\n}\n\nfunction renderStatus(\n  ctx: CliContext,\n  data: TeamMcpStatus,\n  title: string,\n): string {\n  const { server } = data;\n  const notes: string[] = [];\n  if (data.syncError) notes.push(`Listing its tools failed: ${data.syncError}`);\n  if (data.connectUrl) {\n    notes.push(\n      'A team member who manages agents opens this link, signed in to the team, to connect it (you cannot sign in for them):',\n      data.connectUrl,\n    );\n  } else if (server.auth === 'bearer' && server.status !== 'connected') {\n    notes.push(\n      `Enter its token in your terminal: ${cli()} teams mcp token ${data.team.slug} ${server.key}`,\n    );\n  }\n  if (data.effectsFromTemplate) {\n    notes.push(\n      \"Its tools' effects come from the agent template (toolEffects in agent.json).\",\n    );\n  } else if (data.tools.some((tool) => !tool.confirmed)) {\n    notes.push(\n      `Unconfirmed tools count as writes. Mark a read: ekanos teams mcp effect ${data.team.slug} ${server.key} <tool> read`,\n    );\n  }\n  return ctx.ui.result({\n    title,\n    tone: server.status === 'connected' && !data.syncError ? 'ok' : 'warn',\n    rows: [\n      ['Server', describeServer(server)],\n      ['URL', server.url],\n      ...(data.tools.length > 0\n        ? [\n            [\n              'Tools',\n              data.tools.map(\n                (tool) =>\n                  `${tool.name} · ${tool.effect}${tool.confirmed ? '' : ` (unconfirmed, server suggests ${tool.suggested})`}`,\n              ),\n            ] as [string, string[]],\n          ]\n        : []),\n    ],\n    notes,\n  });\n}\n\nfunction describeServer(server: TeamMcpServer): string {\n  const state =\n    server.status === 'connected'\n      ? `✓ connected · ${server.toolCount} tool${server.toolCount === 1 ? '' : 's'}`\n      : server.status === 'error'\n        ? `✗ error${server.lastError ? `: ${server.lastError}` : ''}`\n        : `✗ needs ${server.auth === 'oauth' ? 'sign-in' : server.auth === 'bearer' ? 'a token' : 'a refresh'}`;\n  const auth = server.auth === 'bearer' ? 'token' : server.auth;\n  const used = [\n    ...server.declaredBy.map(\n      (use) =>\n        `${use.agent} (${use.required ? 'required' : 'optional'}${use.urlMatches ? '' : ', different URL — not the one it needs'})`,\n    ),\n    ...server.agents.filter(\n      (agent) => !server.declaredBy.some((use) => use.agent === agent),\n    ),\n  ];\n  return `${state} · ${auth}${used.length > 0 ? ` · used by ${used.join(', ')}` : ''}`;\n}\n\nfunction mcpPath(team: string): string {\n  return `/api/partner/teams/${encodeURIComponent(team)}/mcp`;\n}\n\nfunction stringFlag(run: TeamAgentRun, name: string): string | undefined {\n  const value = run.args.flags?.[name];\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction noExtra(run: TeamAgentRun, count: number): void {\n  const extra = run.operands[count];\n  if (extra !== undefined) {\n    throw usageError(`Unexpected argument \"${extra}\".`, usageFor('mcp'));\n  }\n}\n\nfunction canPrompt(ctx: CliContext, run: TeamAgentRun): boolean {\n  return !ctx.jsonMode && (run.args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n"]}

package/dist/commands/team-agents-triggers.d.ts

@@ -2,7 +2,7 @@ import type { CliContext } from '../context.js';
 import type { ExitCode } from '../exit-codes.js';
 import { type TeamAgentRun } from './team-agents.js';
 /**
- * `ekanos teams triggers list|add|remove` and `ekanos teams links
+ * `ekanos teams triggers list|add|remove|rotate|enable|disable|edit` and `ekanos teams links
  * list|add|remove` — a team agent's triggers and outgoing links, set up by
  * the Source admin. When the template keeps an area, the host shows the
  * effective rows and refuses changes with the command that hands the area

package/dist/commands/team-agents-triggers.js

@@ -9,14 +9,16 @@ var __rest = (this && this.__rest) || function (s, e) {
         }
     return t;
 };
-import { TeamAgentLinkAddResultSchema, TeamAgentLinkListSchema, TeamAgentRowRemoveResultSchema, TeamAgentTriggerAddResultSchema, TeamAgentTriggerListSchema, } from '@ekanos/integration-schema';
+import { TeamAgentLinkAddResultSchema, TeamAgentLinkListSchema, TeamAgentRowRemoveResultSchema, TeamAgentTriggerAddResultSchema, TeamAgentTriggerListSchema, TeamAgentTriggerUpdateResultSchema, } from '@ekanos/integration-schema';
 import { invalidStateError, usageError } from '../errors.js';
+import { cli } from '../invocation.js';
 import { ensureSecretsDir, writeSecretFile } from '../secret-file.js';
 import { call } from '../teams-api.js';
 import { parseFilters } from './agents-edit.js';
 import { requireOperand, usageFor } from './team-agents.js';
+import { confirmChange } from './teams-lifecycle.js';
 /**
- * `ekanos teams triggers list|add|remove` and `ekanos teams links
+ * `ekanos teams triggers list|add|remove|rotate|enable|disable|edit` and `ekanos teams links
  * list|add|remove` — a team agent's triggers and outgoing links, set up by
  * the Source admin. When the template keeps an area, the host shows the
  * effective rows and refuses changes with the command that hands the area
@@ -78,11 +80,15 @@ export async function runTeamTriggers(ctx, run) {
                 : null;
             if (saved)
                 rows.push(...saved.rows);
-            return ctx.succeed(Object.assign(Object.assign({ host: run.host }, rest), { webhook: (_d = saved === null || saved === void 0 ? void 0 : saved.json) !== null && _d !== void 0 ? _d : null }), ctx.ui.result({
+            const personal = added.agent.ownership === 'personal';
+            return ctx.succeed(Object.assign(Object.assign(Object.assign({ host: run.host }, rest), { webhook: (_d = saved === null || saved === void 0 ? void 0 : saved.json) !== null && _d !== void 0 ? _d : null }), (personal ? { actsFor: 'creator' } : {})), ctx.ui.result({
                 title: `Added a ${added.trigger.type} trigger to ${added.agent.slug} on ${added.team.slug}`,
-                tone: saved ? 'warn' : 'ok',
+                tone: saved || personal ? 'warn' : 'ok',
                 rows,
-                notes: saved ? saved.notes : [],
+                notes: [
+                    ...(personal ? personalTriggerNotes(added.trigger.type) : []),
+                    ...(saved ? saved.notes : []),
+                ],
             }));
         }
         case 'remove': {
@@ -104,6 +110,10 @@ export async function runTeamTriggers(ctx, run) {
         }
         case 'rotate':
             return rotateSecret(ctx, run, team, key);
+        case 'enable':
+        case 'disable':
+        case 'edit':
+            return updateTrigger(ctx, run, team, key, run.verb);
         default:
             throw usageError(`Unknown teams triggers subcommand "${run.verb}".`, usageFor('triggers'));
     }
@@ -220,6 +230,9 @@ async function rotateSecret(ctx, run, team, key) {
         tone: 'warn',
         rows: (_g = saved === null || saved === void 0 ? void 0 : saved.rows) !== null && _g !== void 0 ? _g : [],
         notes: [
+            ...(rotated.agent.ownership === 'personal'
+                ? personalTriggerNotes('webhook')
+                : []),
             ...((_h = saved === null || saved === void 0 ? void 0 : saved.notes) !== null && _h !== void 0 ? _h : []),
             ...(trigger.secretSet === false
                 ? []
@@ -254,6 +267,125 @@ function saveTriggerToken(run, dir, input) {
         ],
     };
 }
+/**
+ * A personal agent's trigger acts for its creator, with their own
+ * connections (plan 247 decision 3) — so its webhook token is as good as
+ * their say-so, within the agent's tools and policy.
+ */
+function personalTriggerNotes(type) {
+    return type === 'webhook'
+        ? [
+            'This is a personal agent: each request to this webhook makes it act as its creator, with their own connections. Whoever holds the token can do that, within its tools and policy (a write set to approve still waits for them). Keep the token secret, and rotate it if it may have leaked.',
+        ]
+        : [
+            'This is a personal agent: each run this trigger starts acts as its creator, with their own connections.',
+        ];
+}
+/**
+ * `teams triggers enable|disable|edit <team> <key> <trigger-id|key>` — the
+ * app's trigger switch and Edit. The trigger stays what it is: same type,
+ * same install or event, and a webhook keeps its URL and token (only
+ * `teams triggers rotate` makes a new one). Turning one off, or changing who
+ * a Slack trigger answers, asks first at a terminal; `--yes` in a script.
+ */
+async function updateTrigger(ctx, run, team, key, verb) {
+    var _a;
+    var _b, _c;
+    const ref = (_a = run.operands[2]) === null || _a === void 0 ? void 0 : _a.trim();
+    if (!ref) {
+        throw usageError(`Name the trigger to ${verb}, by its id or key.`, `List them: ${cli()} teams triggers list ${team} ${key}`);
+    }
+    noExtra(run.operands, 3, 'triggers');
+    const body = verb === 'edit'
+        ? editBody(run, team, key, ref)
+        : { enabled: verb === 'enable' };
+    const audience = body.channels !== undefined || body.directMessages !== undefined;
+    if (!run.args.yes && (verb === 'disable' || audience)) {
+        await confirmChange(ctx, run.args, verb === 'disable'
+            ? {
+                what: `Turning trigger ${ref} of ${key} on ${team} off stops it starting runs until it is turned on again. A webhook keeps its URL and token.`,
+                command: `${cli()} teams triggers disable ${team} ${key} ${ref} --yes`,
+                question: `Turn trigger ${ref} of ${key} on ${team} off? [y/N]`,
+            }
+            : {
+                what: 'Anyone in those channels, and anyone who messages the bot, can then ask the agent to act with everything it is granted.',
+                command: `${cli()} teams triggers edit ${team} ${key} ${ref} … --yes`,
+                question: `Let that audience ask ${key} on ${team} to act? [y/N]`,
+            });
+    }
+    const result = await run.client.call((token) => call(run.host, token, TeamAgentTriggerUpdateResultSchema, {
+        method: 'PATCH',
+        path: `${agentPath(team, key)}/triggers/${encodeURIComponent(ref)}`,
+        source: run.source,
+        body: audience ? Object.assign(Object.assign({}, body), { confirmAudience: true }) : body,
+    }));
+    const title = verb === 'edit'
+        ? `Changed trigger ${(_b = result.trigger.key) !== null && _b !== void 0 ? _b : result.trigger.id} of ${result.agent.slug} on ${result.team.slug}`
+        : `Turned trigger ${(_c = result.trigger.key) !== null && _c !== void 0 ? _c : result.trigger.id} of ${result.agent.slug} on ${result.team.slug} ${verb === 'enable' ? 'on' : 'off'}`;
+    return ctx.succeed(Object.assign({ host: run.host }, result), ctx.ui.result({
+        title,
+        tone: 'ok',
+        rows: [
+            ['Trigger', result.trigger.id],
+            ['Fires on', describeTrigger(result.trigger)],
+            ...(verb === 'edit'
+                ? [
+                    [
+                        'Changed',
+                        result.changed
+                            .map((field) => { var _a; return (_a = CHANGED_WORDS[field]) !== null && _a !== void 0 ? _a : field; })
+                            .join(', '),
+                    ],
+                ]
+                : []),
+        ],
+        notes: result.trigger.type === 'webhook'
+            ? ['Its URL and token are unchanged.']
+            : [],
+    }));
+}
+/** A changed field as `teams triggers edit` names it. */
+const CHANGED_WORDS = {
+    enabled: 'on/off',
+    promptTemplate: 'prompt',
+    scheduleCron: 'cron',
+    timezone: 'time zone',
+    filter: 'filter',
+    channels: 'channels',
+    directMessages: 'direct messages',
+    onMention: 'mentions',
+    labelNames: 'labels',
+};
+/** What `teams triggers edit` changes, from its flags; at least one. */
+function editBody(run, team, key, ref) {
+    var _a;
+    const flags = (_a = run.args.flags) !== null && _a !== void 0 ? _a : {};
+    const body = {};
+    const prompt = flags.prompt;
+    if (typeof prompt === 'string')
+        body.promptTemplate = prompt.trim();
+    const cron = flag(run, 'cron');
+    if (cron)
+        body.scheduleCron = cron;
+    const timezone = flag(run, 'timezone');
+    if (timezone)
+        body.timezone = timezone;
+    const filters = filterFlag(run);
+    if (filters.length > 0)
+        body.filter = parseFilters(filters);
+    if (flags.channel !== undefined)
+        body.channels = listFlag(run, 'channel');
+    if (typeof flags.dms === 'boolean')
+        body.directMessages = flags.dms;
+    if (flags.label !== undefined)
+        body.labelNames = listFlag(run, 'label');
+    if (typeof flags.mention === 'boolean')
+        body.onMention = flags.mention;
+    if (Object.keys(body).length === 0) {
+        throw usageError('Say what to change.', `e.g. ${cli()} teams triggers edit ${team} ${key} ${ref} --prompt "…" (or --cron, --timezone, --filter, --channel, --dms, --label, --mention). To turn it on or off: ${cli()} teams triggers enable|disable ${team} ${key} ${ref}`);
+    }
+    return body;
+}
 function triggerBody(run, team, key) {
     var _a, _b, _c, _d;
     var _e, _f;