@koda-sl/baker-cli 0.361.0-dev.abddfd7be → 0.361.0

package/README.md

@@ -3567,6 +3567,7 @@ See everything a chat can reach — managed integrations, custom servers, and co
 baker mcp connected
 baker mcp list
 baker mcp add --name weather --url https://mcp.example.com/mcp
+baker mcp add --name acme --url https://acme.dev/mcp --header "Authorization: Bearer sk-…"
 baker mcp add --name mine --url https://my.dev/mcp --scope user
 baker mcp remove --name weather
 ```
@@ -3578,7 +3579,7 @@ baker mcp remove --name weather
   - `--scope org` — everyone across the org; needs an admin API key.
   - `--scope user` — only you, in this company; binds to the current message sender (requires a chat turn — the bridge supplies the sender via `BAKER_ACTING_USER_ID`).
   - `--scope user_org` — only you, across every company in the org; also binds to the sender (no admin needed — it only affects your own turns).
-- Repeat `--header "Key: Value"` for extra request headers. Never pass a key, token or password with it, and never ask the user for one in chat: a server that needs a key is added by the user in the dashboard (Brain → Integrations → MCPs → Add custom server), where the model never sees it. Header values are stored server-side and ride the MCP transport — `list` returns only the header keys, never the values.
+- Repeat `--header "Key: Value"` for multiple auth headers. Header values are stored server-side and ride the MCP transport — `list` returns only the header keys, never the values.
 
 ---
 
@@ -5301,7 +5302,7 @@ Every run gets its own directory:
 - Naming: `<node_id>__<slot>[__<index>].<ext>`.
 - `_final.<ext>` is a copy of whichever node the top-level `output` points at.
 - `manifest.json` is what `baker canvas inspect` reads — duration, cache hit/miss, asset refs, errors.
-- Default root is `./canvas/`. Override with `--outputs-dir`.
+- Default root is `canvas/` at the workspace root (the nearest folder with a `package.json` above the canvas file), whichever directory you run from. Override with `--outputs-dir`.
 
 ---
 
@@ -5313,7 +5314,7 @@ Cache key:
 sha256(canonical({ node_id, node_version, params, input_hashes, cache_salt, extras }))
 ```
 
-- Entries live in `./canvas/.cache/` (index + content-addressed blobs).
+- Entries live in `canvas/.cache/` at the workspace root (index + content-addressed blobs).
 - Cache hits re-materialize asset files into the new run dir instantly; misses execute the node and write a new entry atomically.
 - `hyperframe_*` folds a recursive sha256 of the composition directory into `extras` — edit any file in `my-composition/` and the cache busts automatically. No version bump needed.
 - If computing `extras` fails (e.g. the composition directory is unreadable), the node fails with that error — it never falls back to a partial cache key, so stale results can't be served silently.
@@ -5408,8 +5409,8 @@ Validate, then execute the graph. Blocks until done. Logs one line per node. Ret
 
 | Flag | Default | Effect |
 |---|---|---|
-| `--cache-dir <path>` | `./canvas/.cache` | Where content-addressed bytes + cache index live. |
-| `--outputs-dir <path>` | `./canvas` | Root for per-run output directories. |
+| `--cache-dir <path>` | `<workspace root>/canvas/.cache` | Where content-addressed bytes + cache index live. |
+| `--outputs-dir <path>` | `<workspace root>/canvas` | Root for per-run output directories. |
 | `--run-id <id>` | auto ULID | Override the generated run id. |
 | `--cache-policy <policy>` | `read_write` | `read_write`, `bypass`, or `read_only`. |
 | `--concurrency <n>` | `5` (or `BAKER_CANVAS_CONCURRENCY`) | Max nodes executing at once within a layer. |

package/canvas/avocado-tutorial.json

@@ -74,7 +74,7 @@
         "transcript": "$ref:transcribe.transcript"
       },
       "params": {
-        "composition": "./packages/cli/canvas/tiktok-captions-composition",
+        "composition": "./tiktok-captions-composition",
         "words_per_group": 3,
         "font_size": 72,
         "text_color": "#ffffff",

package/canvas/hello-world-overlay.json

@@ -22,7 +22,7 @@
         "background": "$ref:person_image.images#0"
       },
       "params": {
-        "composition": "./packages/cli/canvas/hello-world-composition",
+        "composition": "./hello-world-composition",
         "text": "HELLO WORLD!!",
         "font_size": 128,
         "text_color": "#ffffff",

package/dist/{chunk-K2IKLMCM.js → chunk-AI4HWQVN.js}

@@ -20,9 +20,9 @@ import {
   shouldEscalate
 } from "./chunk-2OKSJNLA.js";
 
-// ../../.pnpm-store/v10/links/@/safe-stable-stringify/2.5.0/766ad107c42df28eeadaf0ac2f9089c8a9e200f6ba0b2b1a817b8d536cbdcc49/node_modules/safe-stable-stringify/index.js
+// ../../node_modules/.pnpm/safe-stable-stringify@2.5.0/node_modules/safe-stable-stringify/index.js
 var require_safe_stable_stringify = __commonJS({
-  "../../.pnpm-store/v10/links/@/safe-stable-stringify/2.5.0/766ad107c42df28eeadaf0ac2f9089c8a9e200f6ba0b2b1a817b8d536cbdcc49/node_modules/safe-stable-stringify/index.js"(exports, module) {
+  "../../node_modules/.pnpm/safe-stable-stringify@2.5.0/node_modules/safe-stable-stringify/index.js"(exports, module) {
     "use strict";
     var { hasOwnProperty } = Object.prototype;
     var stringify = configure2();
@@ -1114,7 +1114,7 @@ function resolveAdaptFormats(params) {
   return params.formats ?? [];
 }
 
-// ../../.pnpm-store/v10/links/@/safe-stable-stringify/2.5.0/766ad107c42df28eeadaf0ac2f9089c8a9e200f6ba0b2b1a817b8d536cbdcc49/node_modules/safe-stable-stringify/esm/wrapper.js
+// ../../node_modules/.pnpm/safe-stable-stringify@2.5.0/node_modules/safe-stable-stringify/esm/wrapper.js
 var import__ = __toESM(require_safe_stable_stringify(), 1);
 var configure = import__.default.configure;
 var wrapper_default = import__.default;
@@ -9904,4 +9904,4 @@ export {
   defaultRegistry,
   createEngineFromEnv
 };
-//# sourceMappingURL=chunk-K2IKLMCM.js.map
+//# sourceMappingURL=chunk-AI4HWQVN.js.map