@fabricorg/cli 0.7.4 → 0.8.0

package/dist/fabric.js

@@ -6,7 +6,7 @@ import { Command as Command23 } from "commander";
 // package.json
 var package_default = {
   name: "@fabricorg/cli",
-  version: "0.7.4",
+  version: "0.8.0",
   description: "CLI for the Fabric AI platform",
   keywords: [
     "fabric",
@@ -57,7 +57,7 @@ var package_default = {
     tsup: "^8.0.0",
     tsx: "^4.21.0",
     typescript: "5.9.3",
-    vitest: "^4.1.11"
+    vitest: "^4.1.12"
   }
 };
 
@@ -2402,7 +2402,7 @@ function getDefaultContext() {
   return profileFor().defaultContext;
 }
 function getOutputFormat() {
-  if (process.env.FABRIC_FORMAT === "json" || process.env.FABRIC_FORMAT === "yaml" || process.env.FABRIC_FORMAT === "csv") {
+  if (process.env.FABRIC_FORMAT === "json" || process.env.FABRIC_FORMAT === "yaml" || process.env.FABRIC_FORMAT === "csv" || process.env.FABRIC_FORMAT === "plain" || process.env.FABRIC_FORMAT === "quiet") {
     return process.env.FABRIC_FORMAT;
   }
   return getConfig().defaultFormat;
@@ -3467,8 +3467,34 @@ async function revokeOAuthSession(credentials, fetchImpl = (input, init) => fetc
 
 // src/lib/output.ts
 import Table from "cli-table3";
+var OUTPUT_FORMATS = /* @__PURE__ */ new Set([
+  "table",
+  "json",
+  "yaml",
+  "csv",
+  "plain",
+  "quiet"
+]);
+function resolveOutputFormat(format) {
+  return format && OUTPUT_FORMATS.has(format) ? format : getOutputFormat();
+}
+function shouldDisableColor(env2 = process.env, isTTY = Boolean(process.stdout?.isTTY)) {
+  if (env2.NO_COLOR !== void 0 && env2.NO_COLOR !== "") {
+    return true;
+  }
+  if (env2.FABRIC_NO_COLOR === "1" || env2.FABRIC_NO_COLOR === "true") {
+    return true;
+  }
+  if (env2.TERM === "dumb") {
+    return true;
+  }
+  if (!isTTY) {
+    return true;
+  }
+  return false;
+}
 function printOutput(data, opts = {}) {
-  const format = opts.format ?? getOutputFormat();
+  const format = resolveOutputFormat(opts.format);
   if (format === "json") {
     process.stdout.write(`${JSON.stringify(data, null, 2)}
 `);
@@ -3491,6 +3517,20 @@ function printOutput(data, opts = {}) {
     }
     return;
   }
+  if (format === "plain") {
+    const rows2 = Array.isArray(data) ? data : [data];
+    if (rows2.length === 0) {
+      return;
+    }
+    const cols2 = opts.columns ?? Object.keys(rows2[0]);
+    for (const row of rows2) {
+      process.stdout.write(
+        `${cols2.map((c) => formatCell(row[c])).join("	")}
+`
+      );
+    }
+    return;
+  }
   if (format === "csv") {
     const rows2 = Array.isArray(data) ? data : [data];
     if (rows2.length === 0) {
@@ -3517,7 +3557,14 @@ function printOutput(data, opts = {}) {
     return;
   }
   const cols = opts.columns ?? Object.keys(rows[0]);
-  const table = new Table({ head: cols, style: { head: ["cyan"] } });
+  const noColor = shouldDisableColor();
+  const table = new Table({
+    head: cols,
+    style: {
+      head: noColor ? [] : ["cyan"],
+      border: noColor ? [] : void 0
+    }
+  });
   for (const row of rows) {
     table.push(
       cols.map((c) => formatCell(row[c]))
@@ -3527,16 +3574,18 @@ function printOutput(data, opts = {}) {
 `);
 }
 function printRecord(data, opts = {}) {
-  const format = opts.format ?? getOutputFormat();
-  if (format === "json") {
+  const format = resolveOutputFormat(opts.format);
+  if (format === "json" || format === "yaml" || format === "plain") {
     printOutput(data, opts);
     return;
   }
-  if (format === "yaml") {
-    printOutput(data, opts);
-    return;
-  }
-  const table = new Table({ style: { head: ["cyan"] } });
+  const noColor = shouldDisableColor();
+  const table = new Table({
+    style: {
+      head: noColor ? [] : ["cyan"],
+      border: noColor ? [] : void 0
+    }
+  });
   for (const [key, val] of Object.entries(data)) {
     table.push({ [key]: formatCell(val) });
   }
@@ -4138,13 +4187,17 @@ function takeUpgradeNotice() {
 }
 
 // src/lib/client.ts
-function getClient(overrides = {}) {
+function resolveClientOrigin(overrides) {
   const origin = normalizeOrigin(
     overrides.baseUrl ?? getBaseUrl() ?? DEFAULT_ORIGIN
   );
   if (origin === null) {
     printError(BAD_BASE_URL_LINE, 2);
   }
+  return origin;
+}
+function resolveClientAuth(overrides) {
+  const origin = resolveClientOrigin(overrides);
   const projectOAuth = overrides.project === void 0 || process.env.FABRIC_API_KEY ? void 0 : getOAuth(origin, overrides.project);
   const apiKey = projectOAuth ? void 0 : hasStoredApiKey(origin) ? getApiKey(origin) : void 0;
   const oauth = projectOAuth ?? (apiKey ? void 0 : getOAuth(origin));
@@ -4157,6 +4210,25 @@ or, for CI:
       3
     );
   }
+  return { origin, apiKey, oauth, projectOAuth };
+}
+function getMcpAuthenticatedFetch(overrides = {}) {
+  const origin = resolveClientOrigin(overrides);
+  const apiKey = hasStoredApiKey(origin) ? getApiKey(origin) : void 0;
+  if (!apiKey) {
+    printError(
+      "Browser sign-in tokens are not valid for the MCP Gateway. Set FABRIC_API_KEY or run fabric auth login --key <api-key> before using fabric mcp tools or fabric mcp call.",
+      3
+    );
+  }
+  return {
+    origin,
+    fetch: globalThis.fetch,
+    authorizationHeader: `Bearer ${apiKey}`
+  };
+}
+function getClient(overrides = {}) {
+  const { origin, apiKey, oauth, projectOAuth } = resolveClientAuth(overrides);
   try {
     return new FabricClient({
       // A browser sign-in's token is refreshed per request by the fetch
@@ -4228,11 +4300,7 @@ function resolveContext(personal, org, required = true) {
 // src/commands/agents/index.ts
 function buildAgentsCommand() {
   const agents = new Command("agents").description("Manage agents");
-  agents.command("list").description("List agents").option("--org <slug>", "Organization context").option("--personal", "Retired \u2014 context is organization-only").option("--status <status>", "Filter: ACTIVE|INACTIVE|DEPRECATED").option("--limit <n>", "Max results", "50").option(
-    "--format <format>",
-    "Output format: table|json|yaml|csv",
-    "table"
-  ).option("-q, --quiet", "Print IDs only").action(
+  agents.command("list").description("List agents").option("--org <slug>", "Organization context").option("--personal", "Retired \u2014 context is organization-only").option("--status <status>", "Filter: ACTIVE|INACTIVE|DEPRECATED").option("--limit <n>", "Max results", "50").option("--format <format>", "Output format: table|json|yaml|csv").option("-q, --quiet", "Print IDs only").action(
     async (opts) => {
       const ctx = resolveContext(opts.personal, opts.org, false);
       const client = getClient();
@@ -4266,7 +4334,7 @@ function buildAgentsCommand() {
       });
     }
   );
-  agents.command("show <id>").description("Show agent details").option("--org <slug>", "Organization context").option("--personal", "Retired \u2014 context is organization-only").option("--format <format>", "Output format: table|json|yaml", "table").action(
+  agents.command("show <id>").description("Show agent details").option("--org <slug>", "Organization context").option("--personal", "Retired \u2014 context is organization-only").option("--format <format>", "Output format: table|json|yaml").action(
     async (id, opts) => {
       const ctx = resolveContext(opts.personal, opts.org, false);
       const client = getClient();
@@ -4278,7 +4346,7 @@ function buildAgentsCommand() {
       } catch (err) {
         printError(err.message, 1);
       }
-      const fmt = opts.format;
+      const fmt = resolveOutputFormat(opts.format);
       if (fmt === "json" || fmt === "yaml") {
         printOutput(agent, { format: fmt });
         return;
@@ -4295,7 +4363,7 @@ function buildAgentsCommand() {
       });
     }
   );
-  agents.command("execute <id>").description("Execute an agent").option("--org <slug>", "Organization context").option("--personal", "Retired \u2014 context is organization-only").option("--input <json>", `Input JSON (e.g. '{"key":"value"}')`).option("--format <format>", "Output format: table|json|yaml", "table").action(
+  agents.command("execute <id>").description("Execute an agent").option("--org <slug>", "Organization context").option("--personal", "Retired \u2014 context is organization-only").option("--input <json>", `Input JSON (e.g. '{"key":"value"}')`).option("--format <format>", "Output format: table|json|yaml").action(
     async (id, opts) => {
       const ctx = resolveContext(opts.personal, opts.org, false);
       const client = getClient();
@@ -4316,7 +4384,7 @@ function buildAgentsCommand() {
       } catch (err) {
         printError(err.message, 1);
       }
-      const fmt = opts.format;
+      const fmt = resolveOutputFormat(opts.format);
       if (fmt === "json" || fmt === "yaml") {
         printOutput(result, { format: fmt });
         return;
@@ -4330,6 +4398,209 @@ function buildAgentsCommand() {
       });
     }
   );
+  agents.command("delegate").description(
+    "Delegate a coding task to Fabric Desktop (fabricagents://) or Remote Fabric Agents Server using subscription harnesses"
+  ).option("--org <slug>", "Organization context").option("--project <id>", "Project ID to bind the delegated session to").option("--project-slug <slug>", "Project slug for workspace routing").option(
+    "--target <target>",
+    "Execution target: desktop|remote",
+    "remote"
+  ).option(
+    "--server-url <url>",
+    "Remote Fabric Agents Server URL",
+    process.env.FABRIC_AGENTS_SERVER_URL ?? "https://agents.example.com"
+  ).option(
+    "--harness <harness>",
+    "Subscription harness: auto|claude-max|codex|droid-cli|grok-cli|kimi-cli|antigravity-cli|cursor",
+    "claude-max"
+  ).option("--model <model>", "Optional model override").option(
+    "--fallback <policy>",
+    "Quota fallback policy: subscription_harnesses|org_paid_api|pause_on_limit",
+    "subscription_harnesses"
+  ).option("--prompt <text>", "Task prompt to dispatch").option(
+    "--durable",
+    "Request durable handling when the generated link is opened"
+  ).option("--format <format>", "Output format: table|json|yaml|plain").option("-q, --quiet", "Print delegation URL only").addHelpText(
+    "after",
+    `
+Examples:
+  $ fabric agents delegate --target remote --harness claude-max --prompt "Refactor auth middleware"
+  $ fabric agents delegate --target desktop --project-slug payments-v2 --prompt "Add unit tests" -q
+  $ fabric agents delegate --target remote --harness codex --fallback org_paid_api --format json
+`
+  ).action(
+    async (opts) => {
+      const target = opts.target === "desktop" ? "desktop" : "remote";
+      const query = new URLSearchParams();
+      if (opts.projectSlug) {
+        query.set("workspace", opts.projectSlug);
+        query.set("project", opts.projectSlug);
+      }
+      if (opts.project) {
+        query.set("projectId", opts.project);
+      }
+      query.set("harness", opts.harness);
+      if (opts.model) {
+        query.set("model", opts.model);
+      }
+      query.set("fallback", opts.fallback);
+      if (opts.prompt) {
+        query.set("input", opts.prompt);
+        query.set("prompt", opts.prompt);
+        query.set("send", "true");
+      }
+      if (opts.durable) {
+        query.set("durable", "true");
+      }
+      const desktopDeepLink = `fabricagents://action/new-chat?${query.toString()}`;
+      const cleanServer = opts.serverUrl.replace(/\/+$/, "");
+      const remoteDelegationUrl = `${cleanServer}/?${query.toString()}`;
+      const activeUrl = target === "desktop" ? desktopDeepLink : remoteDelegationUrl;
+      if (opts.quiet) {
+        process.stdout.write(`${activeUrl}
+`);
+        return;
+      }
+      const payload = {
+        status: "link_created",
+        message: "A link was created locally. No task was dispatched by this command.",
+        target,
+        harness: opts.harness,
+        model: opts.model ?? "default",
+        fallbackPolicy: opts.fallback,
+        billingMode: "subscription_tokens",
+        durable: Boolean(opts.durable),
+        projectId: opts.project ?? null,
+        projectSlug: opts.projectSlug ?? null,
+        delegationUrl: activeUrl,
+        desktopDeepLink,
+        remoteDelegationUrl
+      };
+      const fmt = resolveOutputFormat(opts.format);
+      if (fmt === "json" || fmt === "yaml" || fmt === "plain") {
+        printOutput(payload, { format: fmt });
+        return;
+      }
+      printRecord({
+        Status: payload.status,
+        Target: target === "desktop" ? "Fabric Desktop (fabricagents://)" : `Remote Fabric Agents Server (${cleanServer})`,
+        Harness: payload.harness,
+        Model: payload.model,
+        "Fallback Policy": payload.fallbackPolicy,
+        "Billing Mode": "Subscription Credits (0 API Key Spend)",
+        Durable: payload.durable ? "requested in link" : "no",
+        "Delegation URL": payload.delegationUrl
+      });
+    }
+  );
+  agents.command("desktop").description(
+    "Generate a 1-click Fabric Desktop (fabricagents://) deep link for a project or view"
+  ).option("--project <id>", "Project ID").option("--project-slug <slug>", "Project slug").option(
+    "--view <view>",
+    "Target view: allSessions|settings|sources|agents|skills",
+    "allSessions"
+  ).option("--prompt <text>", "Pre-filled prompt for a new chat").option("--format <format>", "Output format: table|json|yaml|plain").option("-q, --quiet", "Print deep link URL only").action(
+    async (opts) => {
+      const query = new URLSearchParams();
+      if (opts.projectSlug) {
+        query.set("workspace", opts.projectSlug);
+      }
+      if (opts.project) {
+        query.set("projectId", opts.project);
+      }
+      if (opts.prompt) {
+        query.set("input", opts.prompt);
+        query.set("send", "true");
+      }
+      const path42 = opts.prompt ? "action/new-chat" : opts.view || "allSessions";
+      const qs = query.toString();
+      const deepLink = `fabricagents://${path42}${qs ? `?${qs}` : ""}`;
+      if (opts.quiet) {
+        process.stdout.write(`${deepLink}
+`);
+        return;
+      }
+      const payload = {
+        deepLink,
+        view: opts.view,
+        projectId: opts.project ?? null,
+        projectSlug: opts.projectSlug ?? null
+      };
+      const fmt = resolveOutputFormat(opts.format);
+      if (fmt === "json" || fmt === "yaml" || fmt === "plain") {
+        printOutput(payload, { format: fmt });
+        return;
+      }
+      printRecord({
+        "Deep Link": deepLink,
+        View: opts.view,
+        Project: opts.projectSlug ?? opts.project ?? "(workspace)"
+      });
+    }
+  );
+  agents.command("subscriptions").description(
+    "List known Remote Fabric Agents Server harness choices without checking availability"
+  ).option(
+    "--server-url <url>",
+    "Remote Fabric Agents Server URL",
+    process.env.FABRIC_AGENTS_SERVER_URL ?? "https://agents.example.com"
+  ).option("--format <format>", "Output format: table|json|yaml|plain").option("-q, --quiet", "Print harness IDs only").action(
+    async (opts) => {
+      const harnesses = [
+        {
+          id: "claude-max",
+          name: "Claude (Opus 4.6 / Sonnet 4.6)",
+          billing: "subscription_oauth",
+          credits: "not_checked",
+          fallbackOrder: 1
+        },
+        {
+          id: "codex",
+          name: "Codex (GPT-5.4 / o3)",
+          billing: "subscription_oauth",
+          credits: "not_checked",
+          fallbackOrder: 2
+        },
+        {
+          id: "droid-cli",
+          name: "Droid (Factory Multi-Model)",
+          billing: "subscription_oauth",
+          credits: "not_checked",
+          fallbackOrder: 3
+        },
+        {
+          id: "grok-cli",
+          name: "Grok (Grok 4 Heavy / Fast)",
+          billing: "subscription_oauth",
+          credits: "not_checked",
+          fallbackOrder: 4
+        },
+        {
+          id: "kimi-cli",
+          name: "Kimi (Kimi K2.5 Thinking)",
+          billing: "subscription_oauth",
+          credits: "not_checked",
+          fallbackOrder: 5
+        }
+      ];
+      if (opts.quiet) {
+        for (const h of harnesses) {
+          process.stdout.write(`${h.id}
+`);
+        }
+        return;
+      }
+      printOutput(harnesses, {
+        format: opts.format,
+        columns: [
+          "id",
+          "name",
+          "billing",
+          "credits",
+          "fallbackOrder"
+        ]
+      });
+    }
+  );
   return agents;
 }
 
@@ -8497,7 +8768,7 @@ function exitReason(result) {
   if (/must be run in a work tree/i.test(text3)) {
     return "not a working tree (a bare repository, or inside .git)";
   }
-  if (/not a git repository/i.test(text3)) {
+  if (/not a git repository/i.test(text3) || /does not point to a valid repository/i.test(text3)) {
     return "its .git points to a repository that does not exist";
   }
   if (/permission denied/i.test(text3)) {
@@ -10754,7 +11025,6 @@ function registrationOf(servers, name) {
 // src/lib/instructions/hook.ts
 import { createHash as createHash4 } from "crypto";
 import { mkdir as mkdir3 } from "fs/promises";
-import { tmpdir } from "os";
 import path12 from "path";
 
 // src/lib/instructions/identifiers.ts
@@ -10785,8 +11055,8 @@ function subcommandsForEvent(event) {
   return event === "Stop" ? STOP_SUBCOMMANDS : SESSION_START_SUBCOMMANDS;
 }
 async function withHookConfigLock(root, posixPath, work) {
-  const directory = path12.join(tmpdir(), "fabric-instructions-hook-locks");
-  await mkdir3(directory, { recursive: true });
+  const directory = path12.join(path12.dirname(getConfigPath()), "hook-locks");
+  await mkdir3(directory, { recursive: true, mode: 448 });
   const identity = createHash4("sha256").update(path12.resolve(root)).update("\0").update(posixPath).digest("hex");
   const lockPath2 = path12.join(directory, `${identity}.lock`);
   try {
@@ -12853,12 +13123,12 @@ function isTooLarge(error) {
 // src/lib/instructions/staged-files.ts
 import { createHash as createHash8 } from "crypto";
 import { mkdtemp, realpath as realpath4, rm } from "fs/promises";
-import { tmpdir as tmpdir2 } from "os";
+import { tmpdir } from "os";
 import path16 from "path";
 var IN_MEMORY_SNAPSHOT_BYTES = 50 * 1024 * 1024;
 async function stageFilesByUrl(options) {
   const root = await realpath4(
-    await mkdtemp(path16.join(tmpdir2(), "fabric-instructions-"))
+    await mkdtemp(path16.join(tmpdir(), "fabric-instructions-"))
   );
   const files = /* @__PURE__ */ new Map();
   const dispose = () => rm(root, { recursive: true, force: true });
@@ -22526,6 +22796,25 @@ async function runLessonPromptCommand(opts) {
 
 // src/commands/mcp/index.ts
 import { Command as Command14 } from "commander";
+async function resolveMcpOrganizationId(organization, client) {
+  if (!organization) {
+    return void 0;
+  }
+  const organizationClient = client ?? getClient();
+  let organizations;
+  try {
+    organizations = await organizationClient.orgs.list();
+  } catch (error) {
+    printError(error.message, 1);
+  }
+  const match = organizations.find(
+    (candidate) => candidate.id === organization || candidate.slug === organization
+  );
+  if (!match) {
+    printError(`Organization not found: ${organization}`, 4);
+  }
+  return match.id;
+}
 function buildMcpCommand() {
   const mcp = new Command14("mcp").description(
     "Manage MCP servers and configurations"
@@ -22665,6 +22954,219 @@ function buildMcpCommand() {
     const { runStdio } = await import("@fabricorg/sdk-mcp/stdio");
     await runStdio();
   });
+  mcp.command("tools").description(
+    "List MCP tools exposed by the Fabric MCP Gateway (supports stateless MCP mode)"
+  ).option("--org <slug>", "Organization ID or slug").option("--project <id>", "Project ID to scope the gateway connection").option("--mode <mode>", "Tool list mode: full|discovery", "full").option(
+    "--stateless",
+    "Send stateless MCP JSON-RPC request (X-Mcp-Stateless: true)",
+    true
+  ).option(
+    "--no-stateless",
+    "Use a persistent MCP session instead of stateless mode"
+  ).option("--format <format>", "Output format: table|json|yaml|plain").option("-q, --quiet", "Print tool names only").action(
+    async (opts) => {
+      const auth2 = getMcpAuthenticatedFetch({
+        project: opts.project
+      });
+      const organizationId = await resolveMcpOrganizationId(opts.org);
+      const base = auth2.origin.replace(/\/+$/, "");
+      const path42 = opts.project ? `/api/mcp-gateway/projects/${encodeURIComponent(opts.project)}` : "/api/mcp-gateway";
+      const url = new URL(`${base}${path42}`);
+      if (opts.mode === "discovery") {
+        url.searchParams.set("mode", "discovery");
+      }
+      if (opts.stateless) {
+        url.searchParams.set("stateless", "1");
+      }
+      const headers = {
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      };
+      headers.Authorization = auth2.authorizationHeader;
+      if (organizationId) {
+        headers["X-Organization-Id"] = organizationId;
+      }
+      if (opts.stateless) {
+        headers["X-Mcp-Stateless"] = "true";
+      }
+      let res;
+      try {
+        res = await auth2.fetch(url.toString(), {
+          method: "POST",
+          headers,
+          body: JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/list",
+            params: {}
+          })
+        });
+      } catch (err) {
+        printError(err.message, 1);
+      }
+      const payload = await res.json();
+      if (!res.ok || payload.error) {
+        printError(
+          payload.error?.message ?? `MCP Gateway returned HTTP ${res.status}`,
+          1
+        );
+      }
+      const tools = (payload.result?.tools ?? []).map((t) => ({
+        name: t.name,
+        uiApp: t._meta?.ui?.resourceUri ?? "",
+        description: (t.description ?? "").slice(0, 72)
+      }));
+      if (opts.quiet) {
+        for (const t of tools) {
+          process.stdout.write(`${t.name}
+`);
+        }
+        return;
+      }
+      printOutput(tools, {
+        format: opts.format,
+        columns: ["name", "uiApp", "description"]
+      });
+    }
+  );
+  mcp.command("call <tool>").description(
+    "Execute a Fabric MCP tool over Streamable HTTP with optional 24-hour idempotent durable calls"
+  ).option("--org <slug>", "Organization ID or slug").option("--project <id>", "Project ID to scope the gateway connection").option("--input <json>", "Tool arguments as JSON object", "{}").option(
+    "--stateless",
+    "Execute without persisting server session (X-Mcp-Stateless: true)",
+    true
+  ).option(
+    "--no-stateless",
+    "Use a persistent MCP session instead of stateless mode"
+  ).option(
+    "--durable",
+    "Use the Fabric idempotency store (X-Mcp-Durable: true)"
+  ).option(
+    "--idempotency-key <key>",
+    "Explicit key for 24-hour durable-call deduplication"
+  ).option("--format <format>", "Output format: table|json|yaml|plain").action(
+    async (tool, opts) => {
+      let toolArgs = {};
+      try {
+        toolArgs = JSON.parse(opts.input);
+      } catch {
+        printError("--input must be valid JSON", 2);
+      }
+      const auth2 = getMcpAuthenticatedFetch({
+        project: opts.project
+      });
+      const organizationId = await resolveMcpOrganizationId(opts.org);
+      const base = auth2.origin.replace(/\/+$/, "");
+      const path42 = opts.project ? `/api/mcp-gateway/projects/${encodeURIComponent(opts.project)}` : "/api/mcp-gateway";
+      const url = new URL(`${base}${path42}`);
+      if (opts.stateless) {
+        url.searchParams.set("stateless", "1");
+      }
+      const headers = {
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      };
+      headers.Authorization = auth2.authorizationHeader;
+      if (organizationId) {
+        headers["X-Organization-Id"] = organizationId;
+      }
+      if (opts.stateless) {
+        headers["X-Mcp-Stateless"] = "true";
+      }
+      if (opts.durable) {
+        headers["X-Mcp-Durable"] = "true";
+      }
+      if (opts.idempotencyKey) {
+        headers["X-Mcp-Idempotency-Key"] = opts.idempotencyKey;
+      }
+      let res;
+      try {
+        res = await auth2.fetch(url.toString(), {
+          method: "POST",
+          headers,
+          body: JSON.stringify({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/call",
+            params: {
+              name: tool,
+              arguments: toolArgs,
+              ...opts.durable || opts.idempotencyKey ? {
+                _meta: {
+                  durable: Boolean(opts.durable),
+                  ...opts.idempotencyKey ? {
+                    idempotencyKey: opts.idempotencyKey
+                  } : {}
+                }
+              } : {}
+            }
+          })
+        });
+      } catch (err) {
+        printError(err.message, 1);
+      }
+      const payload = await res.json();
+      if (!res.ok || payload.error) {
+        printError(
+          payload.error?.message ?? `MCP tool call failed with HTTP ${res.status}`,
+          1
+        );
+      }
+      printOutput(payload.result ?? payload, {
+        format: opts.format
+      });
+    }
+  );
+  mcp.command("apps").description(
+    "List or inspect built-in MCP Apps (ui://fabric/*) for native rendering in Fabric Desktop"
+  ).option("--uri <uri>", "Read a specific ui://fabric/* MCP App resource").option("--format <format>", "Output format: table|json|yaml|plain").option("-q, --quiet", "Print MCP App URIs only").action(
+    async (opts) => {
+      const apps = [
+        {
+          uri: "ui://fabric/project-dashboard",
+          name: "Fabric Project Overview & Desktop Launcher",
+          mimeType: "text/html;profile=mcp-app",
+          linkedTool: "fabric_get_project"
+        },
+        {
+          uri: "ui://fabric/agent-delegation",
+          name: "Fabric Agents Delegation & Subscription Credits",
+          mimeType: "text/html;profile=mcp-app",
+          linkedTool: "fabric_list_features"
+        },
+        {
+          uri: "ui://fabric/workflow-visualizer",
+          name: "Fabric Visual Data Prep & Durable Workflow Inspector",
+          mimeType: "text/html;profile=mcp-app",
+          linkedTool: "fabric_execute_workflow"
+        },
+        {
+          uri: "ui://fabric/genie-insights",
+          name: "Fabric Genie Agent & Lakebase Query Explorer",
+          mimeType: "text/html;profile=mcp-app",
+          linkedTool: "fabric_query_workspace"
+        },
+        {
+          uri: "ui://fabric/visualize",
+          name: "Fabric Interactive A2UI Card Composer",
+          mimeType: "text/html;profile=mcp-app",
+          linkedTool: "fabric_visualize"
+        }
+      ];
+      const filtered = opts.uri ? apps.filter((a) => a.uri === opts.uri) : apps;
+      if (opts.quiet) {
+        for (const a of filtered) {
+          process.stdout.write(`${a.uri}
+`);
+        }
+        return;
+      }
+      printOutput(filtered, {
+        format: opts.format,
+        columns: ["uri", "name", "mimeType", "linkedTool"]
+      });
+    }
+  );
   return mcp;
 }
 
@@ -24813,11 +25315,44 @@ function buildWorkspacesCommand() {
 hookTiming.processStartedAt = Math.round(Date.now() - process.uptime() * 1e3);
 hookTiming.exitWhenDone = true;
 var program = new Command23();
-program.name("fabric").description("Fabric AI platform CLI").version(package_default.version).option(
+program.name("fabric").description("Fabric AI platform CLI \u2014 portal, MCP, and agent delegation").version(package_default.version).option(
   "--format <format>",
-  "Output format: table|json|yaml|csv",
+  "Output format: table|json|yaml|csv|plain|quiet",
   process.env.FABRIC_FORMAT ?? "table"
-);
+).option("--json", "Shorthand for --format json").option(
+  "--plain",
+  "Shorthand for --format plain (tab-separated, pipe-friendly)"
+).option("--no-color", "Disable ANSI color output (also honors NO_COLOR)").addHelpText(
+  "after",
+  `
+Examples:
+  $ fabric auth login
+  $ fabric connect
+  $ fabric agents delegate --target remote --harness claude-max --prompt "Implement OAuth callback"
+  $ fabric agents desktop --project proj_123 --view allSessions
+  $ fabric mcp tools --stateless
+  $ fabric mcp call fabric_get_identity --stateless --durable
+
+Environment Variables:
+  FABRIC_API_KEY     API key (fab_... or org_...) for non-interactive authentication
+  FABRIC_BASE_URL    Fabric instance URL (default: https://app.fabric.pro)
+  FABRIC_FORMAT      Default output format (table|json|yaml|csv|plain|quiet)
+  NO_COLOR           Set to any non-empty value to disable ANSI color output
+`
+).hook("preAction", (thisCommand) => {
+  const opts = thisCommand.optsWithGlobals();
+  if (typeof opts.format === "string") {
+    process.env.FABRIC_FORMAT = opts.format;
+  }
+  if (opts.color === false) {
+    process.env.FABRIC_NO_COLOR = "1";
+  }
+  if (opts.json) {
+    process.env.FABRIC_FORMAT = "json";
+  } else if (opts.plain) {
+    process.env.FABRIC_FORMAT = "plain";
+  }
+});
 var auth = new Command23("auth").description(
   "Authenticate and manage API keys"
 );