@koda-sl/baker-cli 0.113.1 → 0.113.2

package/README.md

@@ -2500,7 +2500,11 @@ baker mcp remove --name weather
 ```
 
 - `--url` must be HTTPS and public; loopback / private / cloud-metadata hosts are rejected.
-- `--scope company` (default) shares with every chat in the company; `--scope org` needs an admin API key; `--scope user` binds to the current message sender (requires running inside a chat turn — the bridge supplies the sender via `BAKER_ACTING_USER_ID`).
+- Scope is two independent choices — audience (just you / everyone) × level (this company / whole org):
+  - `--scope company` (default) — everyone in this company.
+  - `--scope org` — everyone across the org; needs an admin API key.
+  - `--scope user` — only you, in this company; binds to the current message sender (requires a chat turn — the bridge supplies the sender via `BAKER_ACTING_USER_ID`).
+  - `--scope user_org` — only you, across every company in the org; also binds to the sender (no admin needed — it only affects your own turns).
 - Repeat `--header "Key: Value"` for multiple auth headers. Header values are stored server-side and ride the MCP transport — `list` returns only the header keys, never the values.
 
 ---

package/dist/cli.js

@@ -18583,11 +18583,11 @@ Paid transforms (run on the Convex backend, cost-tracked):
 
 // src/commands/mcp/index.ts
 import { defineCommand as defineCommand123 } from "citty";
-var SCOPES = ["user", "company", "org"];
+var SCOPES = ["user", "user_org", "company", "org"];
 function parseScope(raw) {
   const scope = raw === void 0 ? "company" : String(raw);
   if (!SCOPES.includes(scope)) {
-    throw new ApiError("VALIDATION_ERROR", `Invalid --scope "${scope}". Use user | company | org.`);
+    throw new ApiError("VALIDATION_ERROR", `Invalid --scope "${scope}". Use user | user_org | company | org.`);
   }
   return scope;
 }
@@ -18642,7 +18642,7 @@ registerSchema({
   args: {
     name: { type: "string", description: "Server name \u2192 tools appear as mcp__<name>__*", required: true },
     url: { type: "string", description: "HTTPS MCP endpoint", required: true },
-    scope: { type: "string", description: "user | company | org (default company)", required: false },
+    scope: { type: "string", description: "user | user_org | company | org (default company)", required: false },
     header: { type: "string", description: 'Auth header "Key: Value" (repeatable)', required: false }
   }
 });
@@ -18661,7 +18661,7 @@ Examples:
   args: {
     name: { type: "string", description: "Server name (mcp__<name>__*)", required: true },
     url: { type: "string", description: "HTTPS MCP endpoint", required: true },
-    scope: { type: "string", description: "user | company | org (default company)", required: false },
+    scope: { type: "string", description: "user | user_org | company | org (default company)", required: false },
     header: { type: "string", description: 'Auth header "Key: Value" (repeatable)', required: false }
   },
   run: async ({ args }) => {