@forhuman/flowmcp 0.1.0

package/commands/rename.sh

@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+# Usage: flowmcp rename <old-org> <new-org> [--dry-run] [--json]
+# Renames an org: moves its profile and saved credentials without any
+# re-authentication, and updates the entry name in any client config where
+# it was already installed (server names are derived from the org name, so
+# a rename has to touch those too, not just our own storage).
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/../lib/bootstrap.sh"
+
+old="${1:?Usage: flowmcp rename <old-org> <new-org> [--dry-run]}"
+new="${2:?Usage: flowmcp rename <old-org> <new-org> [--dry-run]}"
+shift 2 || true
+dry_run="" json_flag=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dry-run) dry_run="1"; shift ;;
+    --json) json_flag="1"; shift ;;
+    *) echo "error: unknown option '$1'" >&2; exit 1 ;;
+  esac
+done
+
+wfw_valid_org "$new" || {
+  wfw_say_err "$(wfw_t msg_invalid_org "$new")"
+  exit 1
+}
+
+wfw_profile_exists "$old" || {
+  wfw_say_err "$(wfw_t msg_org_not_found "$old")"
+  exit 1
+}
+
+if wfw_profile_exists "$new"; then
+  wfw_say_err "$(wfw_t msg_rename_new_exists "$new")"
+  exit 1
+fi
+
+auth_method="$(jq -r '.auth_method // "pat"' <<<"$(wfw_profile_read "$old")")"
+
+# find which already-installed client configs would need updating, whether
+# this is a real run or a dry-run — the scan itself never writes anything.
+would_update=()
+for spec in "claude-code:user" "claude-code:project" "claude-desktop:user" "cursor:user" "cursor:project"; do
+  client="${spec%%:*}"; scope="${spec#*:}"
+  path="$(wfw_client_config_path "$client" "$scope" 2>/dev/null || true)"
+  [[ -z "$path" || ! -f "$path" ]] && continue
+  jq empty "$path" >/dev/null 2>&1 || continue
+  has_old="$(jq -r --arg n "webflow-$old" '.mcpServers[$n] // empty' "$path")"
+  [[ -z "$has_old" ]] && continue
+  would_update+=("$path")
+done
+
+if [[ -n "$dry_run" ]]; then
+  if wfw_json_mode "$json_flag"; then
+    jq -nc --arg old "$old" --arg new "$new" \
+      --argjson updated "$(printf '%s\n' "${would_update[@]:-}" | jq -R . | jq -sc 'map(select(length>0))')" \
+      '{ok: true, dry_run: true, old: $old, new: $new, would_update: $updated}'
+  else
+    echo "${WFW_C_DIM}dry-run — would rename '$old' to '$new' (no re-login needed)${WFW_C_RESET}"
+    for p in "${would_update[@]:-}"; do
+      echo "${WFW_C_DIM}would update: $p (webflow-$old -> webflow-$new)${WFW_C_RESET}"
+    done
+  fi
+  exit 0
+fi
+
+jq --arg org "$new" '.org = $org' "$(wfw_profile_path "$old")" > "$(wfw_profile_path "$new")"
+rm -f "$(wfw_profile_path "$old")"
+
+if [[ "$auth_method" == "mcp-remote" ]]; then
+  old_dir="$(wfw_mcp_remote_dir "$old")"
+  new_dir="$(wfw_mcp_remote_dir "$new")"
+  [[ -d "$old_dir" ]] && mv "$old_dir" "$new_dir"
+else
+  wfw_old_token="$(wfw_secret_get "$old" || true)"
+  if [[ -n "$wfw_old_token" ]]; then
+    wfw_secret_set "$new" wfw_old_token
+    wfw_secret_delete "$old"
+  fi
+fi
+
+updated=()
+for path in "${would_update[@]:-}"; do
+  server_json="$(wfw_build_server_json "$new" "$auth_method")"
+  wfw_client_remove_server "$path" "webflow-$old"
+  wfw_client_merge_server "$path" "webflow-$new" "$server_json" "--force"
+  updated+=("$path")
+done
+
+wfw_audit_log "rename" "$old" "ok" "to=$new"
+
+if wfw_json_mode "$json_flag"; then
+  jq -nc --arg old "$old" --arg new "$new" \
+    --argjson updated "$(printf '%s\n' "${updated[@]:-}" | jq -R . | jq -sc 'map(select(length>0))')" \
+    '{ok: true, dry_run: false, old: $old, new: $new, updated: $updated,
+      next_steps: (if ($updated | length) > 0 then ["restart any client whose config was just updated"] else [] end)}'
+else
+  wfw_say_ok "$(wfw_t msg_rename_ok "$old" "$new")"
+  if [[ ${#updated[@]} -gt 0 ]]; then
+    for p in "${updated[@]}"; do
+      echo "${WFW_C_DIM}updated: $p (webflow-$old -> webflow-$new)${WFW_C_RESET}"
+    done
+    wfw_say_hint "$(wfw_t msg_rename_hint)"
+  fi
+fi

package/commands/rotate.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+# Usage: flowmcp rotate <org>
+# Same interactive, human-only flow as secret-set — overwrites the existing
+# token for an org that's already registered.
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/../lib/bootstrap.sh"
+
+org="${1:?Usage: flowmcp rotate <org>}"
+
+wfw_profile_exists "$org" || {
+  echo "error: no org '$org' registered" >&2
+  exit 1
+}
+
+if [[ ! -t 0 ]]; then
+  wfw_t msg_need_tty_rotate >&2
+  wfw_t msg_run_yourself_short >&2
+  exit 1
+fi
+
+wfw_t msg_rotate_enter "$org"
+read -rs wfw_token_input
+echo
+if [[ -z "$wfw_token_input" ]]; then
+  echo "error: empty token, aborting" >&2
+  exit 1
+fi
+
+wfw_secret_set "$org" wfw_token_input
+wfw_audit_log "rotate" "$org" "ok"
+
+wfw_t msg_rotate_done "$org" "$(wfw_secret_backend)"
+wfw_t msg_test_hint_new "$org"

package/commands/run-mcp.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+# Usage: run-mcp.sh <org>
+#
+# NOT meant to be run by a human or an agent directly. This is what the
+# `command` field in the generated mcpServers entry points to — the MCP
+# client (Claude Code / Claude Desktop / Cursor) launches this at server
+# start time. It looks up the token for <org> from the secret backend,
+# exports it, and execs webflow-mcp-server. The token therefore never
+# needs to appear in any client's config JSON file on disk.
+
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=../lib/common.sh
+source "$SCRIPT_DIR/../lib/common.sh"
+# shellcheck source=../lib/secrets.sh
+source "$SCRIPT_DIR/../lib/secrets.sh"
+
+org="${1:?Usage: run-mcp.sh <org>}"
+
+WEBFLOW_TOKEN="$(wfw_secret_get "$org" || true)"
+if [[ -z "$WEBFLOW_TOKEN" ]]; then
+  echo "flowmcp: no token stored for org '$org'. Run 'flowmcp secret-set $org'." >&2
+  exit 1
+fi
+export WEBFLOW_TOKEN
+
+exec npx -y webflow-mcp-server@latest

package/commands/schema.sh

@@ -0,0 +1,131 @@
+#!/usr/bin/env bash
+# Usage: flowmcp schema
+# Machine-readable description of every command: args, flags, and the JSON
+# shape it emits in --json mode. Always JSON, regardless of TTY — an agent
+# should be able to `flowmcp schema` once at the start of a
+# session and know the whole surface without parsing --help text.
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/../lib/bootstrap.sh"
+
+jq -nc --arg version "$(wfw_version)" '
+{
+  schema_version: 1,
+  cli_version: $version,
+  commands: [
+    {
+      name: "connect",
+      usage: "connect <org> [--label NAME]",
+      mutates: true,
+      requires_tty: true,
+      description: "Add/reconnect an org via browser OAuth (mcp-remote, no setup needed).",
+      output: null
+    },
+    {
+      name: "add",
+      usage: "add <org> [--label NAME]",
+      mutates: true,
+      requires_tty: false,
+      description: "Register org metadata only, no secret.",
+      output: null
+    },
+    {
+      name: "secret-set",
+      usage: "secret-set <org>",
+      mutates: true,
+      requires_tty: true,
+      description: "Interactively paste a token. Refuses to run without a real TTY.",
+      output: null
+    },
+    {
+      name: "rotate",
+      usage: "rotate <org>",
+      mutates: true,
+      requires_tty: true,
+      description: "Replace a stored token. Refuses to run without a real TTY.",
+      output: null
+    },
+    {
+      name: "list",
+      usage: "list [--json]",
+      mutates: false,
+      requires_tty: false,
+      description: "List registered orgs and last test status.",
+      output: {shape: "array", item: "profile"}
+    },
+    {
+      name: "inspect",
+      usage: "inspect <org> [--live] [--json]",
+      mutates: false,
+      requires_tty: false,
+      description: "Show one profile in full, plus a connected boolean. --live re-runs test first.",
+      output: {shape: "object", item: "profile + connected"}
+    },
+    {
+      name: "test",
+      usage: "test <org> [--json]",
+      mutates: false,
+      requires_tty: false,
+      description: "Validate stored credentials (network call for pat orgs, file check for mcp-remote orgs).",
+      output: {shape: "object", fields: ["org","auth_method","status","sites_count","scopes","error"]}
+    },
+    {
+      name: "install",
+      usage: "install <org> <client> [--scope user|project] [--force] [--dry-run] [--json]",
+      mutates: true,
+      requires_tty: false,
+      destructive: false,
+      description: "Merge an mcpServers entry into a client config. --dry-run prints the entry without writing.",
+      clients: ["claude-code","claude-desktop","cursor"],
+      output: {shape: "object", fields: ["ok","org","client","scope","path","dry_run"]}
+    },
+    {
+      name: "remove",
+      usage: "remove <org> --yes [--from client:scope]... [--dry-run] [--json]",
+      mutates: true,
+      requires_tty: false,
+      destructive: true,
+      description: "Delete profile + credentials, optionally strip client entries. Requires --yes, no prompt.",
+      output: {shape: "object", fields: ["ok","org","removed_from","dry_run"]}
+    },
+    {
+      name: "rename",
+      usage: "rename <old-org> <new-org> [--dry-run] [--json]",
+      mutates: true,
+      requires_tty: false,
+      destructive: false,
+      description: "Move a profile + saved session to a new org name, no re-login, updates installed client configs.",
+      output: {shape: "object", fields: ["ok","old","new","updated"]}
+    },
+    {
+      name: "debug",
+      usage: "debug <org> [--json]",
+      mutates: false,
+      requires_tty: false,
+      description: "Diagnose profile/credential/network/config issues.",
+      output: {shape: "object", fields: ["org","checks"]}
+    },
+    {
+      name: "schema",
+      usage: "schema",
+      mutates: false,
+      requires_tty: false,
+      description: "This output.",
+      output: {shape: "object", fields: ["schema_version","cli_version","commands"]}
+    },
+    {
+      name: "lang",
+      usage: "lang [en|es] [--json]",
+      mutates: true,
+      requires_tty: false,
+      description: "View or change the saved human-readable output language. Only affects --help/banner text, never JSON.",
+      output: {shape: "object", fields: ["lang"]}
+    }
+  ],
+  conventions: {
+    json_auto: "list/inspect/test/debug/install/remove/rename print JSON automatically when stdout is not a TTY, no --json flag required",
+    next_steps_field: "JSON output includes next_steps: [string] where applicable — suggested commands to run next",
+    exit_codes: {"0": "success", "1": "user error or failed check (org not found, gate refused, test failed)"},
+    secrets: "no command ever accepts a token as an argument or prints one; secret-set/rotate require a real TTY"
+  }
+}
+'

package/commands/secret-set.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# Usage: flowmcp secret-set <org>
+#
+# INTERACTIVE ONLY. This is the one command in this tool that must be run
+# by a human, in their own terminal, never through an agent's tool-call
+# interface — the token is read with a hidden prompt and never touches
+# argv, stdout, or any log. If stdin isn't a real TTY, this refuses to run.
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/../lib/bootstrap.sh"
+
+org="${1:?Usage: flowmcp secret-set <org>}"
+
+wfw_profile_exists "$org" || {
+  echo "error: no org '$org' — run 'flowmcp add $org' first" >&2
+  exit 1
+}
+
+if [[ ! -t 0 ]]; then
+  wfw_t msg_need_tty_secret >&2
+  wfw_t msg_run_yourself1 >&2
+  wfw_t msg_run_yourself2 >&2
+  exit 1
+fi
+
+wfw_t msg_secretset_enter "$org"
+read -rs wfw_token_input
+echo
+if [[ -z "$wfw_token_input" ]]; then
+  echo "error: empty token, aborting" >&2
+  exit 1
+fi
+
+wfw_secret_set "$org" wfw_token_input
+wfw_audit_log "secret-set" "$org" "ok"
+
+wfw_t msg_secretset_stored "$org" "$(wfw_secret_backend)"
+wfw_t msg_test_hint "$org"

package/commands/test.sh

@@ -0,0 +1,131 @@
+#!/usr/bin/env bash
+# Usage: flowmcp test <org> [--json]
+# Validates the stored credentials. For "pat" orgs, the token is read into
+# a local variable and used only in an Authorization header — it is never
+# echoed, logged, or included in any error message. For "mcp-remote" orgs
+# we deliberately don't make a live call here (it could trigger mcp-remote
+# to silently pop open a browser if the session needs re-auth) — we just
+# check that a completed session exists on disk.
+# JSON automatically when stdout isn't a real TTY (e.g. an agent's tool call).
+
+source "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/../lib/bootstrap.sh"
+
+org="${1:?Usage: flowmcp test <org> [--json]}"
+shift || true
+json_flag=""
+[[ "${1:-}" == "--json" ]] && json_flag="1"
+
+wfw_profile_exists "$org" || {
+  if wfw_json_mode "$json_flag"; then
+    jq -nc --arg org "$org" '{org: $org, status: "fail", error: "org not registered"}'
+  else
+    wfw_say_err "$(wfw_t msg_org_not_found "$org")"
+  fi
+  exit 1
+}
+
+auth_method="$(jq -r '.auth_method // "pat"' <<<"$(wfw_profile_read "$org")")"
+
+# wfw_test_emit <status> <hint> — final output in whichever mode was requested.
+wfw_test_emit() {
+  local status="$1" hint="${2:-}"
+  if wfw_json_mode "$json_flag"; then
+    local next_hint="$hint"
+    [[ "$status" == "ok" ]] && next_hint="flowmcp install $org <client>"
+    jq -nc \
+      --arg org "$org" --arg auth "$auth_method" --arg status "$status" \
+      --arg error "$err_msg" --argjson scopes "${scopes_json:-[]}" \
+      --argjson sites "${sites_count:-null}" --arg next_hint "$next_hint" \
+      '{org: $org, auth_method: $auth, status: $status,
+        sites_count: $sites, scopes: $scopes,
+        error: (if $error == "" then null else $error end),
+        next_steps: (if $next_hint == "" then [] else [$next_hint] end)}'
+  else
+    if [[ "$status" == "ok" ]]; then
+      if [[ "$auth_method" == "mcp-remote" ]]; then
+        wfw_say_ok "$(wfw_t msg_test_mcpremote_ok "$org")"
+        echo "${WFW_C_DIM}$(wfw_t msg_test_note1)"
+        echo "$(wfw_t msg_test_note2)"
+        echo "$(wfw_t msg_test_note3)${WFW_C_RESET}"
+      else
+        wfw_say_ok "$(wfw_t msg_test_pat_ok "$org" "$sites_count")"
+        [[ "$scopes_json" != "[]" ]] && echo "${WFW_C_DIM}$(wfw_t msg_test_scopes "$(jq -r 'join(", ")' <<<"$scopes_json")")${WFW_C_RESET}"
+      fi
+      echo
+      wfw_say_next "$(wfw_t msg_test_next_intro)"
+      echo "  - claude-code:    flowmcp install $org claude-code"
+      echo "  - claude-desktop: flowmcp install $org claude-desktop"
+      echo "  - cursor:         flowmcp install $org cursor"
+    else
+      wfw_say_err "$err_msg"
+      [[ -n "$hint" ]] && wfw_say_hint "$hint"
+    fi
+  fi
+}
+
+err_msg="" scopes_json="[]" sites_count="null"
+
+if [[ "$auth_method" == "mcp-remote" ]]; then
+  if wfw_mcp_remote_connected "$org"; then
+    wfw_profile_update_last_test "$org" "ok" "[]" "null" ""
+    wfw_audit_log "test" "$org" "ok" "mcp-remote session present"
+    wfw_test_emit "ok"
+    exit 0
+  else
+    err_msg="no mcp-remote session found"
+    wfw_profile_update_last_test "$org" "fail" "[]" "null" "$err_msg"
+    wfw_audit_log "test" "$org" "fail" "$err_msg"
+    wfw_test_emit "fail" "run 'flowmcp connect $org' to log in"
+    exit 1
+  fi
+fi
+
+wfw_require_curl
+
+wfw_token="$(wfw_secret_get "$org" || true)"
+if [[ -z "$wfw_token" ]]; then
+  err_msg="no token stored"
+  wfw_profile_update_last_test "$org" "fail" "[]" "null" "$err_msg"
+  wfw_test_emit "fail" "run 'flowmcp secret-set $org'"
+  exit 1
+fi
+
+body_file="$(mktemp)"
+trap 'rm -f "$body_file"; unset wfw_token' EXIT
+
+http_code="$(curl -s -o "$body_file" -w "%{http_code}" \
+  -H "Authorization: Bearer $wfw_token" \
+  -H "accept: application/json" \
+  "https://api.webflow.com/v2/sites")"
+
+if [[ "$http_code" == "200" ]]; then
+  sites_count="$(jq '.sites | length' "$body_file" 2>/dev/null || echo 0)"
+
+  auth_body_file="$(mktemp)"
+  auth_code="$(curl -s -o "$auth_body_file" -w "%{http_code}" \
+    -H "Authorization: Bearer $wfw_token" \
+    -H "accept: application/json" \
+    "https://api.webflow.com/v2/token/authorized_by")"
+  if [[ "$auth_code" == "200" ]] && jq -e '.scope' "$auth_body_file" >/dev/null 2>&1; then
+    scopes_json="$(jq -c '.scope | split(" ")' "$auth_body_file")"
+  fi
+  rm -f "$auth_body_file"
+
+  wfw_profile_update_last_test "$org" "ok" "$scopes_json" "$sites_count" ""
+  wfw_audit_log "test" "$org" "ok" "sites=$sites_count"
+  wfw_test_emit "ok"
+else
+  err_msg="HTTP $http_code"
+  detail="$(jq -r '.message // empty' "$body_file" 2>/dev/null || true)"
+  [[ -n "$detail" ]] && err_msg="$err_msg: $detail"
+  wfw_profile_update_last_test "$org" "fail" "[]" "null" "$err_msg"
+  wfw_audit_log "test" "$org" "fail" "$err_msg"
+  hint=""
+  case "$http_code" in
+    401) hint="token is invalid, revoked, or expired — try 'flowmcp rotate $org'" ;;
+    403) hint="token is valid but lacks required scopes for this site/workspace" ;;
+    000) hint="no response — check network connectivity / DNS / proxy" ;;
+  esac
+  wfw_test_emit "fail" "$hint"
+  exit 1
+fi

package/friction.md

@@ -0,0 +1,67 @@
+# friction.md
+
+Written retrospectively (this file should have been opened on day one — see
+the case entry for that admission). Kept going forward for anything that
+turns out wrong for this domain.
+
+## Contract origin
+
+Mixed. `lib/profiles.sh` / `lib/secrets.sh` / `lib/clients.sh` are a defined
+contract — we own the shape of a "profile" and a "client config entry".
+The OAuth surface (`mcp.webflow.com`'s `.well-known/oauth-authorization-server`,
+DCR at `/oauth/register`, PKCE support) was discovered, not assumed — verified
+live with a real registration + full token exchange before writing `connect`
+against it, rather than guessing at Webflow's OAuth behavior from docs.
+
+## Rejected
+
+- **Hand-rolled OAuth (PKCE + refresh + local callback server).** Built once,
+  worked, then thrown away in favor of shelling out to `mcp-remote`
+  (github.com/punkpeye/mcp-remote). Reason: it already solves this exact
+  problem (stdio↔remote-HTTP-MCP OAuth proxy) and is what the MCP ecosystem
+  actually uses — re-implementing token refresh and SSE proxying ourselves
+  was surface area with no payoff. The one thing we still own is per-org
+  isolation, via `MCP_REMOTE_CONFIG_DIR`.
+- **Custom OAuth App setup step (client_id/secret the user creates by hand).**
+  Assumed necessary at first because that's how Webflow's classic Data API
+  OAuth (`api.webflow.com/oauth`) works — no PKCE alternative there. Turned
+  out false for the hosted MCP server specifically: `mcp.webflow.com`
+  supports Dynamic Client Registration, so `connect` needed zero setup.
+  Confirmed by reading the metadata endpoint, not by assumption.
+- **`flowmcp` as a Claude-Code-only tool.** Considered scoping
+  install targets to just `claude-code`. Rejected once it became clear the
+  actual pain point (Claude Desktop's native Connector supporting only one
+  Webflow account) lives in Claude Desktop, not Claude Code — `install`
+  needed `claude-desktop` and `cursor` from the start.
+
+## What turned out wrong
+
+- **Test-org naming.** Used a throwaway name (`aktis-juanpa`) during manual
+  testing of `rename` that collided with a real, already-connected client
+  org of the same name. `rename`'s client-config scan resolves through the
+  real `$HOME` (by design — `install`/`remove`/`rename` are meant to touch
+  real, shared, global client config files), so it silently repointed a real
+  entry in the user's real Claude Desktop config at a fake session directory.
+  Recovered via `wfw_client_merge_server`'s own `.bak` backup, no data lost.
+  Fix going forward: test org names must be obviously fake (`zzz-test-*`)
+  and functional tests must run under an isolated `WFW_HOME`/`HOME`, not the
+  real ones — see the test blocks now embedded in the build for `schema`,
+  `--dry-run`, and `next_steps`.
+- **`set -e` swallowing errors on command substitution.** Recurred four
+  separate times (`wfw_secret_get` in `test.sh`, `run-mcp.sh`, and the
+  `wfw_wait_with_logo`/`wait` pattern in `lib/ui.sh`): assigning the output
+  of a command that can fail, without wrapping it in `if`/`|| true`, kills
+  the whole script silently before the intended error handling runs. Now a
+  standing check whenever a new command script reads a keychain value.
+
+## Conventions this build confirms
+
+- `--json` automatically on non-TTY stdout, no flag required — implemented
+  across every read command (`list`/`inspect`/`test`/`debug`) plus every
+  write command that now also supports `--json` (`install`/`remove`/`rename`).
+- `next_steps` in structured output, so an agent isn't left to guess the
+  follow-up command from prose it may not even be shown.
+- `schema` command, versioned (`schema_version`), listing every command's
+  usage, JSON output shape, and whether it mutates/requires a TTY/is
+  destructive — added specifically because the skill flagged it as the
+  highest-value, least-adopted convention in its corpus.

package/lib/audit.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# Append-only audit log. Never write secret values here.
+
+wfw_audit_log() {
+  local action="$1" org="$2" result="$3" detail="${4:-}"
+  local month file
+  month="$(date -u +%Y-%m)"
+  file="$WFW_AUDIT_DIR/$month.jsonl"
+  jq -nc \
+    --arg ts "$(wfw_now)" \
+    --arg action "$action" \
+    --arg org "$org" \
+    --arg result "$result" \
+    --arg detail "$detail" \
+    '{ts: $ts, action: $action, org: $org, result: $result, detail: (if $detail == "" then null else $detail end)}' \
+    >> "$file"
+}

package/lib/bootstrap.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# Idempotent loader: makes every command script work whether it's
+# `source`d by bin/flowmcp (functions already in-process) or
+# executed as its own subprocess (e.g. debug.sh shelling out to test.sh).
+BOOTSTRAP_LIB_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+: "${WFW_LIB_DIR:=$BOOTSTRAP_LIB_DIR}"
+: "${WFW_COMMANDS_DIR:=$BOOTSTRAP_LIB_DIR/../commands}"
+
+if ! declare -f wfw_profile_exists >/dev/null 2>&1; then
+  source "$WFW_LIB_DIR/common.sh"
+  source "$WFW_LIB_DIR/secrets.sh"
+  source "$WFW_LIB_DIR/profiles.sh"
+  source "$WFW_LIB_DIR/audit.sh"
+  source "$WFW_LIB_DIR/clients.sh"
+  source "$WFW_LIB_DIR/oauth.sh"
+  source "$WFW_LIB_DIR/ui.sh"
+  source "$WFW_LIB_DIR/i18n.sh"
+fi