@koda-sl/baker-cli 0.419.0-dev.ce424234b → 0.421.0-dev.3613db443

package/README.md

@@ -3745,7 +3745,7 @@ baker mcp remove --name weather
 ```
 
 - `connected` returns three lists. `managed` and `custom` are MCP tools the agent calls directly; `platforms` are the accounts the company signed in to (HubSpot, Google Ads, GA4, Search Console, Tag Manager, LinkedIn Ads), each with its login and the resources it may read. A platform has **no** `mcp__*` tools — it is read through its own command family — so it is listed here to keep the agent from concluding a working connection is missing.
-- `catalog --search <name> [--limit 1-20]` searches the managed apps a user can connect when a vendor has no MCP server of its own. Each app reports its slug (`app`), how the user connects it (`sign-in`, `key` or `none`) and whether this chat already reaches it (`connected`).
+- `catalog --search <name> [--limit 1-20]` searches the managed apps a user can connect when a vendor has no MCP server of its own. Each app reports its slug (`app`), how the user connects it (`sign-in` or `key`; apps that need no sign-in cannot be connected and are left out) — never a managed copy of one of Baker's own connections: those come back under `platforms`, to ask for with `{ platform }` and whether this chat already reaches it (`connected`).
 - `--url` must be the **full MCP endpoint** (commonly ending in `/mcp`), HTTPS and public; loopback / private / cloud-metadata hosts are rejected. A bare domain frequently accepts the OAuth sign-in and then serves no tools, so every address is handshake-checked after it changes: `connected` and `list` report `usable: false` plus a `problem` (and a `suggestedAddress` when the server advertises a better endpoint) for a server that isn't serving tools, or `lastCheck: failed` when the last check only hit an outage — that one may work anyway, and a later turn re-checks it automatically. Repointing a server at a different host clears its saved sign-in: a token belongs to the host that issued it, so the server has to be connected again.
 - Scope is two independent choices — audience (just you / everyone) × level (this company / whole org):
   - `--scope company` (default) — everyone in this company.

package/dist/cli.js

@@ -92627,7 +92627,7 @@ var mcpCatalogRequestSchema = z64.object({
   search: z64.string().trim().min(1, "Provide --search").max(100),
   limit: z64.coerce.number().int().min(1).max(20).default(MCP_CATALOG_DEFAULT_LIMIT)
 });
-var mcpCatalogConnectSchema = z64.enum(["sign-in", "key", "none"]);
+var mcpCatalogConnectSchema = z64.enum(["sign-in", "key"]);
 var mcpCatalogEntrySchema = z64.object({
   /** The toolkit slug — what request_connection `{ app }` takes. */
   app: z64.string(),
@@ -92639,7 +92639,9 @@ var mcpCatalogEntrySchema = z64.object({
 var mcpCatalogResponseSchema = z64.object({
   apps: z64.array(mcpCatalogEntrySchema),
   /** The company has managed apps switched off: nothing here can be connected, so `apps` is empty. */
-  managedDisabled: z64.boolean().optional()
+  managedDisabled: z64.boolean().optional(),
+  /** Baker's own connections this search matched — ask for these with `{ platform }`, never a managed copy. */
+  platforms: z64.array(z64.string()).optional()
 });
 
 // src/commands/mcp/index.ts
@@ -92650,7 +92652,14 @@ var PREFER_VENDOR_HINT = 'The vendor\'s own MCP server comes before any app here
 var ALREADY_CONNECTED_HINT = "An app marked connected is already reachable \u2014 use its mcp__composio_* tools; do not ask again.";
 var NO_MATCH_HINT = "Nothing in the catalog matches. WebSearch for the vendor's official remote MCP server (its docs, its developer site) before telling the user it can't be connected \u2014 if one exists, ask for it with request_connection `{ server }`. Only when the web shows no official remote server either, say plainly this tool can't be connected yet and offer a Task.";
 var MANAGED_DISABLED_HINT = "Managed apps are switched off for this company, so none can be connected here. Use the vendor's own MCP server \u2014 WebSearch \"<vendor> MCP server\" and WebFetch its official docs, then request_connection `{ server }`; when it has none, say plainly this tool can't be connected yet and offer a Task.";
-function catalogHints(apps, { managedDisabled = false } = {}) {
+function firstPartyHint(platforms) {
+  const asks = platforms.map((p) => `request_connection \`{ platform: "${p}" }\``).join(" or ");
+  return `This is one of Baker's own connections \u2014 ask for it with ${asks}. It is the one Baker's commands, staging and publish work with, so never connect it as a catalog app or as an MCP server, even one the vendor publishes or the user names. If it is already connected, read it with its own baker command family instead.`;
+}
+function catalogHints(apps, { managedDisabled = false, platforms = [] } = {}) {
+  if (platforms.length > 0) {
+    return [firstPartyHint(platforms)];
+  }
   if (managedDisabled) {
     return [MANAGED_DISABLED_HINT];
   }
@@ -92791,7 +92800,7 @@ var catalogArgs = {
 };
 registerSchema({
   command: "mcp.catalog",
-  description: "Search the managed apps you can ask the user to connect when a vendor has no MCP server of its own. Each app says how the user connects it (sign-in | key | none) and whether this chat already reaches it. Example: baker mcp catalog --search notion",
+  description: "Search the managed apps you can ask the user to connect when a vendor has no MCP server of its own. Each app says how the user connects it (sign-in | key) and whether this chat already reaches it. Example: baker mcp catalog --search notion",
   args: catalogArgs
 });
 var catalogCommand2 = defineCommand210({
@@ -92803,7 +92812,7 @@ For a tool \`baker mcp connected\` does not list whose vendor has no official re
   baker mcp catalog --search notion
   baker mcp catalog --search "microsoft clarity" --limit 3
 
-Each app: app (slug for request_connection), name, description, connect (sign-in | key | none), connected.
+Each app: app (slug for request_connection), name, description, connect (sign-in | key), connected.
 Prefer the vendor's own MCP server when it publishes one; a catalog app is the fallback.`
   },
   args: catalogArgs,
@@ -92825,8 +92834,15 @@ Prefer the vendor's own MCP server when it publishes one; a catalog app is the f
       });
       writeJson({
         ok: true,
-        data: { apps: data.apps, ...data.managedDisabled ? { managedDisabled: true } : {} },
-        hints: catalogHints(data.apps, { managedDisabled: data.managedDisabled === true })
+        data: {
+          apps: data.apps,
+          ...data.platforms?.length ? { platforms: data.platforms } : {},
+          ...data.managedDisabled ? { managedDisabled: true } : {}
+        },
+        hints: catalogHints(data.apps, {
+          managedDisabled: data.managedDisabled === true,
+          platforms: data.platforms ?? []
+        })
       });
     } catch (err) {
       fail10(err);