@koda-sl/baker-cli 0.489.0 → 0.491.0

package/dist/mcp-GFKHLWDB.js

@@ -0,0 +1,714 @@
+import {
+  repeatedValues
+} from "./chunk-ERSX3MKH.js";
+import {
+  customMcpServerNameRequestSchema
+} from "./chunk-DAO63OOP.js";
+import "./chunk-GXDLWBOY.js";
+import "./chunk-GIWHHCD6.js";
+import "./chunk-XQIOCIDO.js";
+import "./chunk-WTJSMYY2.js";
+import {
+  ApiError,
+  apiGet,
+  apiPost
+} from "./chunk-XDZVBX6L.js";
+import "./chunk-N5O67GK5.js";
+import {
+  getEnv
+} from "./chunk-EE72SSB2.js";
+import {
+  registerSchema,
+  writeJson
+} from "./chunk-WNSE7N75.js";
+import "./chunk-YQSBHWOI.js";
+
+// ../api/src/mcp-catalog.ts
+import { z } from "zod";
+var MCP_CATALOG_DEFAULT_LIMIT = 8;
+var MCP_CATALOG_DESCRIPTION_MAX = 160;
+var mcpCatalogRequestSchema = z.object({
+  search: z.string().trim().min(1, "Provide --search").max(100),
+  limit: z.coerce.number().int().min(1).max(20).default(MCP_CATALOG_DEFAULT_LIMIT)
+});
+var mcpCatalogConnectSchema = z.enum(["sign-in", "key"]);
+var mcpCatalogEntrySchema = z.object({
+  /** The toolkit slug — what request_connection `{ app }` takes. */
+  app: z.string(),
+  name: z.string(),
+  description: z.string().max(MCP_CATALOG_DESCRIPTION_MAX),
+  connect: mcpCatalogConnectSchema,
+  connected: z.boolean()
+});
+var mcpCatalogResponseSchema = z.object({
+  apps: z.array(mcpCatalogEntrySchema),
+  /** Baker's own connections this search matched — ask for these with `{ platform }`, never a managed copy. */
+  platforms: z.array(z.string()).optional()
+});
+
+// src/commands/mcp/index.ts
+import { defineCommand as defineCommand2 } from "citty";
+
+// src/commands/mcp/catalog.ts
+var PREFER_VENDOR_HINT = 'The vendor\'s own MCP server comes before any app here. If you have not yet, WebSearch "<vendor> MCP server" and WebFetch its official docs for the remote https address and how it signs in, then ask for it with request_connection `{ server: { name, url, auth, keyHeader } }`. Only when the vendor has none, ask for an app from this catalog with request_connection `{ app: "<slug>", reason }` \u2014 the user connects it in the chat and its tools load right after, in this same turn.';
+var ALREADY_CONNECTED_HINT = "An app marked connected is already reachable \u2014 use its mcp__composio_* tools; do not ask again.";
+var NO_MATCH_HINT = "Nothing in the catalog matches. WebSearch for the vendor's official remote MCP server (its docs, its developer site) before telling the user it can't be connected \u2014 if one exists, ask for it with request_connection `{ server }`. Only when the web shows no official remote server either, say plainly this tool can't be connected yet and offer a Task.";
+function firstPartyHint(platforms) {
+  const asks = platforms.map((p) => `request_connection \`{ platform: "${p}" }\``).join(" or ");
+  return `This is one of Baker's own connections \u2014 ask for it with ${asks}. It is the one Baker's commands, staging and publish work with, so never connect it as a catalog app or as an MCP server, even one the vendor publishes or the user names. If it is already connected, read it with its own baker command family instead.`;
+}
+function catalogHints(apps, { platforms = [] } = {}) {
+  if (platforms.length > 0) {
+    return [firstPartyHint(platforms)];
+  }
+  const hints = [PREFER_VENDOR_HINT];
+  if (apps.some((a) => a.connected)) {
+    hints.push(ALREADY_CONNECTED_HINT);
+  }
+  if (apps.length === 0) {
+    hints.push(NO_MATCH_HINT);
+  }
+  return hints;
+}
+
+// ../api/src/mcp-tools.ts
+import { z as z2 } from "zod";
+var MCP_TOOLS_DEFAULT_LIMIT = 10;
+var MCP_TOOL_DESCRIPTION_MAX = 200;
+var mcpToolSlugSchema = z2.string().trim().min(1, "Provide --tool").max(120).regex(/^[A-Za-z0-9_]+$/, "A tool is named like GMAIL_FETCH_EMAILS \u2014 find one with `baker mcp tools --search`").transform((slug) => slug.toUpperCase());
+var mcpAppSlugSchema = z2.string().trim().min(1).max(60).regex(/^[a-z0-9_-]+$/i, "Name the app as `baker mcp connected` lists it, e.g. gmail").transform((slug) => slug.toLowerCase());
+var mcpToolsRequestSchema = z2.object({
+  search: z2.string().trim().min(1).max(200).optional(),
+  app: mcpAppSlugSchema.optional(),
+  limit: z2.coerce.number().int().min(1).max(50).default(MCP_TOOLS_DEFAULT_LIMIT)
+}).refine((request) => request.search !== void 0 || request.app !== void 0, {
+  message: "Provide --search, --app, or both"
+});
+var mcpToolSummarySchema = z2.object({
+  tool: z2.string(),
+  app: z2.string(),
+  name: z2.string(),
+  description: z2.string().max(MCP_TOOL_DESCRIPTION_MAX),
+  /** Only read-only tools run through `baker mcp execute`. */
+  readOnly: z2.boolean()
+});
+var mcpToolsResponseSchema = z2.object({
+  tools: z2.array(mcpToolSummarySchema),
+  /** The connected apps the search ran over. */
+  apps: z2.array(z2.string())
+});
+var mcpToolRequestSchema = z2.object({
+  tool: mcpToolSlugSchema,
+  full: z2.boolean().default(false)
+});
+var mcpToolInputSchema = z2.object({
+  name: z2.string(),
+  type: z2.string(),
+  required: z2.boolean(),
+  description: z2.string().optional(),
+  enum: z2.array(z2.unknown()).optional(),
+  default: z2.unknown().optional()
+});
+var mcpToolResponseSchema = z2.object({
+  tool: z2.string(),
+  app: z2.string(),
+  name: z2.string(),
+  description: z2.string(),
+  readOnly: z2.boolean(),
+  inputs: z2.array(mcpToolInputSchema),
+  /** The raw JSON schemas, with `--full` only. */
+  inputSchema: z2.unknown().optional(),
+  outputSchema: z2.unknown().optional()
+});
+var mcpExecuteRequestSchema = z2.object({
+  tool: mcpToolSlugSchema,
+  arguments: z2.record(z2.string(), z2.unknown()).default({}),
+  actingUserId: z2.string().optional()
+});
+var mcpExecuteResponseSchema = z2.object({
+  tool: z2.string(),
+  app: z2.string(),
+  /** Whose connection answered: `company` is the one a published Report reads. */
+  scope: z2.enum(["user", "user_org", "company", "org"]),
+  account: z2.string().nullable(),
+  /** What the tool returned, as the app returned it. */
+  data: z2.unknown()
+});
+
+// src/commands/mcp/execute.ts
+import { defineCommand } from "citty";
+var EXECUTE_TIMEOUT_MS = 12e4;
+function fail(err) {
+  if (err instanceof ApiError) {
+    writeJson({ ok: false, error: { code: err.code, message: err.message } });
+    process.exit(1);
+  }
+  writeJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
+  process.exit(1);
+}
+function invalid(message) {
+  return fail(new ApiError("VALIDATION_ERROR", message));
+}
+function actingUserId() {
+  return getEnv().BAKER_ACTING_USER_ID;
+}
+function executeHints(ran) {
+  const hints = [];
+  if (ran.scope !== "company") {
+    hints.push(
+      `This answer came from a ${ran.scope === "org" ? "connection shared by the organization" : "connection of the person sending this message"}. A published report reads only apps connected for the whole company, so ${ran.tool} will answer "not connected" there: ask the user to connect ${ran.app} for the whole company before building a report on it.`
+    );
+  }
+  hints.push(
+    `In a report endpoint: runReportBaker(event, ["mcp", "execute", "--tool", "${ran.tool}", "--data", JSON.stringify(args)]) \u2014 return only the fields the page shows.`
+  );
+  return hints;
+}
+var toolsArgs = {
+  search: {
+    type: "string",
+    description: 'What the tool should do, e.g. "fetch emails", "read sheet rows"',
+    required: false
+  },
+  app: {
+    type: "string",
+    description: "Only this connected app, as `baker mcp connected` lists it (gmail)",
+    required: false
+  },
+  limit: { type: "string", description: "Max tools to return, 1-50 (default 10)", required: false }
+};
+registerSchema({
+  command: "mcp.tools",
+  description: 'Find a connected app\'s tools to run with `baker mcp execute`. Searches the apps this chat reaches (or --app). Each tool: tool (slug), app, name, description, readOnly (only read-only tools run). Example: baker mcp tools --app googlesheets --search "read rows"',
+  args: toolsArgs
+});
+var toolsCommand = defineCommand({
+  meta: {
+    name: "tools",
+    description: `Find a connected app's tools to run from the command line with \`baker mcp execute\`.
+
+Start here:
+  baker mcp tools --search "fetch unread emails"          # across every connected app
+  baker mcp tools --app googlesheets --search "read rows"
+  baker mcp tools --app hubspot --limit 20                # an app's tools, no search
+
+Each tool: tool (the slug execute takes), app, name, description, readOnly.
+Only readOnly tools run through execute; a tool that changes things is the chat's own mcp__composio_* tool.`
+  },
+  args: toolsArgs,
+  run: async ({ args }) => {
+    const parsed = mcpToolsRequestSchema.safeParse({ search: args.search, app: args.app, limit: args.limit });
+    if (!parsed.success) {
+      invalid(parsed.error.issues[0]?.message ?? "Invalid arguments");
+    }
+    try {
+      const user = actingUserId();
+      const data = await apiGet("/api/mcp/tools", {
+        ...parsed.data.search ? { search: parsed.data.search } : {},
+        ...parsed.data.app ? { app: parsed.data.app } : {},
+        limit: String(parsed.data.limit),
+        ...user ? { actingUserId: user } : {}
+      });
+      const hints = data.apps.length === 0 ? [
+        "No app is connected here. Check `baker mcp connected`; connect one with request_connection, from the chat."
+      ] : [
+        "Run one with `baker mcp execute --tool <TOOL> --get-schema` first to see its inputs, then `--data '<json>'`.",
+        ...data.tools.some((tool) => !tool.readOnly) ? [
+          "readOnly: false tools cannot run through execute \u2014 they change things; use the chat's mcp__composio_* tool."
+        ] : []
+      ];
+      writeJson({ ok: true, data, hints });
+    } catch (err) {
+      fail(err);
+    }
+  }
+});
+var executeArgs = {
+  tool: { type: "string", description: "Tool slug from `baker mcp tools`, e.g. GMAIL_FETCH_EMAILS", required: true },
+  data: {
+    type: "string",
+    description: `The tool's arguments as a JSON object, e.g. '{"max_results":10}'`,
+    required: false
+  },
+  "get-schema": { type: "boolean", description: "Show the tool's inputs instead of running it", required: false },
+  full: {
+    type: "boolean",
+    description: "With --get-schema: the raw input and output JSON schemas too",
+    required: false
+  }
+};
+registerSchema({
+  command: "mcp.execute",
+  description: `Run one read-only tool of a connected app and print what it returned as JSON \u2014 for a report's data endpoint, a script, or keeping the answer. \`--get-schema\` shows its inputs first. A published report reaches only apps connected for the whole company. Example: baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{"spreadsheet_id":"\u2026","ranges":["A1:D50"]}'`,
+  args: executeArgs
+});
+function parseData(raw) {
+  if (raw === void 0 || raw === "") {
+    return {};
+  }
+  let value;
+  try {
+    value = JSON.parse(String(raw));
+  } catch {
+    invalid(`--data must be a JSON object, e.g. '{"max_results":10}' (keys and strings in double quotes).`);
+  }
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    invalid(`--data must be a JSON object, e.g. '{"max_results":10}'.`);
+  }
+  return value;
+}
+var executeCommand = defineCommand({
+  meta: {
+    name: "execute",
+    description: `Run one read-only tool of a connected app; prints what it returned as JSON.
+
+The same tools as the chat's mcp__composio_* servers, answered on stdout so a report's data endpoint,
+a script or a file can keep it. Find the tool with \`baker mcp tools\`, read its inputs, then run it:
+  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --get-schema
+  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{"spreadsheet_id":"1AbC\u2026","ranges":["Sheet1!A1:D50"]}'
+  baker mcp execute --tool GMAIL_FETCH_EMAILS --data '{"query":"is:unread newer_than:7d","max_results":20}' > /tmp/inbox.json
+
+Reads only: a tool that changes things (send, create, update) is refused \u2014 use the chat's own tool for it.
+A published report runs as nobody, so it reaches only apps connected for the whole company; a
+person's own connection answers in their chat and nowhere else.`
+  },
+  args: executeArgs,
+  run: async ({ args }) => {
+    if (args["get-schema"]) {
+      const parsed2 = mcpToolRequestSchema.safeParse({ tool: args.tool, full: args.full === true });
+      if (!parsed2.success) {
+        invalid(parsed2.error.issues[0]?.message ?? "Invalid arguments");
+      }
+      try {
+        const data = await apiGet("/api/mcp/tool", {
+          tool: parsed2.data.tool,
+          ...parsed2.data.full ? { full: "true" } : {}
+        });
+        writeJson({
+          ok: true,
+          data,
+          hints: data.readOnly ? [`Run it: baker mcp execute --tool ${data.tool} --data '<json object of the inputs above>'`] : [
+            `${data.tool} changes things, so execute refuses it. In a chat, use the app's own mcp__composio_* tool.`
+          ]
+        });
+      } catch (err) {
+        fail(err);
+      }
+      return;
+    }
+    const parsed = mcpExecuteRequestSchema.safeParse({
+      tool: args.tool,
+      arguments: parseData(args.data),
+      actingUserId: actingUserId()
+    });
+    if (!parsed.success) {
+      invalid(parsed.error.issues[0]?.message ?? "Invalid arguments");
+    }
+    try {
+      const data = await apiPost("/api/mcp/execute", parsed.data, {
+        timeoutMs: EXECUTE_TIMEOUT_MS
+      });
+      writeJson({ ok: true, data, hints: executeHints(data) });
+    } catch (err) {
+      fail(err);
+    }
+  }
+});
+
+// src/commands/mcp/platforms.ts
+function readsKey(label) {
+  const [first = "", ...rest] = label.split(" ");
+  return [first.toLowerCase(), ...rest].join("");
+}
+function platformEntry(platform) {
+  return {
+    platform: platform.label,
+    ...platform.account ? { account: platform.account } : {},
+    ...platform.readsLabel && platform.reads.length > 0 ? { [readsKey(platform.readsLabel)]: platform.reads } : {}
+  };
+}
+
+// src/commands/mcp/index.ts
+var SCOPES = ["user", "user_org", "company", "org"];
+function parseScope(raw) {
+  const scope = raw === void 0 ? "company" : String(raw);
+  if (!SCOPES.includes(scope)) {
+    throw new ApiError("VALIDATION_ERROR", `Invalid --scope "${scope}". Use user | user_org | company | org.`);
+  }
+  return scope;
+}
+function actingUserId2() {
+  return getEnv().BAKER_ACTING_USER_ID;
+}
+function customEntry(server) {
+  const failed = server.health && !server.health.ok;
+  const problem = server.health?.message ?? "This server's address is not serving tools.";
+  return {
+    name: server.name,
+    scope: server.scope,
+    enabled: server.enabled,
+    ...failed && !server.health?.transient ? { usable: false, problem } : {},
+    ...failed && server.health?.transient ? { lastCheck: "failed", problem } : {},
+    ...failed && server.health?.suggestedUrl ? { suggestedAddress: server.health.suggestedUrl } : {}
+  };
+}
+var BROKEN_SERVER_HINT = "A server marked usable=false will NOT answer: its tools are absent from this turn. Say plainly that the tool is not working and relay `problem`; never claim its tools are loading, coming next message, or temporarily unavailable. `problem` names what a person has to fix \u2014 the address, the sign-in, or the key the server was added with \u2014 so pass on that fix and no other: never tell the user to reconnect a server whose `problem` is its address or its key. The user makes the fix in the dashboard (Brain \u2192 Integrations \u2192 More apps). If `suggestedAddress` is present, that is the address to use.";
+var LAST_CHECK_FAILED_HINT = "A server with lastCheck=failed was unreachable or erroring when it was last checked \u2014 that may already have passed, and its tools ARE loaded this turn. Try the tool; if it works, say nothing about the check. If it fails, report `problem` as what happened rather than guessing.";
+function parseHeaders(raw, rawArgs) {
+  const list = repeatedValues(rawArgs, "header", raw);
+  const headers = {};
+  for (const entry of list) {
+    const text = String(entry);
+    const sep = text.indexOf(":") >= 0 && (text.indexOf(":") < text.indexOf("=") || text.indexOf("=") < 0) ? ":" : "=";
+    const at = text.indexOf(sep);
+    if (at <= 0) {
+      throw new ApiError("VALIDATION_ERROR", `Invalid header "${text}". Use "Key: Value".`);
+    }
+    headers[text.slice(0, at).trim()] = text.slice(at + 1).trim();
+  }
+  return Object.keys(headers).length > 0 ? headers : void 0;
+}
+function fail2(err) {
+  if (err instanceof ApiError) {
+    writeJson({ ok: false, error: { code: err.code, message: err.message } });
+    process.exit(1);
+  }
+  writeJson({ ok: false, error: { code: "NETWORK_ERROR", message: "Unexpected error" } });
+  process.exit(1);
+}
+var PLATFORMS_HINT = "`platforms` are connected accounts you reach through `baker` commands (HubSpot, Google Ads, GA4, Search Console, Tag Manager, \u2026), NOT mcp__* tools \u2014 there is no tool to call for them. A platform listed here IS connected: never tell the user to connect it, and never conclude it is missing because it has no mcp__* entry. Read what it holds with its own command family (`baker hubspot \u2026`, `baker ads google \u2026`, `baker ga4 \u2026`, and so on).";
+registerSchema({
+  command: "mcp.connected",
+  description: "List everything this chat can reach: managed integrations (Attio, Slack, Gmail, Google Sheets, \u2026), custom MCP servers, and the platforms the company signed in to (HubSpot, Google Ads, GA4, Search Console, Tag Manager) which you read through their own `baker` commands. Start here when the user mentions an external tool or platform.",
+  args: {}
+});
+var connectedCommand = defineCommand2({
+  meta: {
+    name: "connected",
+    description: `Everything this chat can reach \u2014 managed integrations, custom MCP servers, and connected platforms.
+
+Managed tools ride the composio servers (mcp__composio_<scope>__*); custom servers expose mcp__<name>__*.
+Platforms (HubSpot, Google Ads, GA4, \u2026) have no mcp__* tools at all \u2014 you read them with their own
+\`baker\` command family, and one listed here is connected and ready to use.
+A tool or platform the user names that is NOT listed anywhere here is simply not connected yet.`
+  },
+  run: async () => {
+    try {
+      const user = actingUserId2();
+      const data = await apiGet("/api/mcp/connected", user ? { actingUserId: user } : void 0);
+      const managed = data.managed.map((c) => ({
+        toolkit: c.toolkitSlug,
+        scope: c.scope,
+        ...c.status !== "ACTIVE" ? { status: c.status } : {},
+        ...c.accountLabel ? { account: c.accountLabel } : {},
+        ...c.readOnly ? { readOnly: true } : {}
+      }));
+      const custom = data.custom.map(customEntry);
+      const platforms = (data.platforms ?? []).map(platformEntry);
+      const hints = [];
+      if (platforms.length > 0) {
+        hints.push(PLATFORMS_HINT);
+      }
+      if (data.custom.some((s) => s.health && !s.health.ok && !s.health.transient)) {
+        hints.push(BROKEN_SERVER_HINT);
+      }
+      if (data.custom.some((s) => s.health && !s.health.ok && s.health.transient)) {
+        hints.push(LAST_CHECK_FAILED_HINT);
+      }
+      if ([...data.managed, ...data.custom].some((e) => e.scope === "user" || e.scope === "user_org")) {
+        hints.push(
+          "user/user_org entries are personal: they belong to the current message sender and load only in their turns \u2014 other users in this chat won't have them."
+        );
+      }
+      hints.push(
+        "Not listed anywhere = not connected \u2014 connect it from the chat with request_connection, never by sending the user to the dashboard: a Baker platform (HubSpot, Google Ads, GA4, \u2026) \u2192 { platform }; anything else \u2192 the vendor's own MCP server FIRST: use the address the user gave you, or WebSearch '<vendor> MCP server' and WebFetch its official docs for the remote https address and how it signs in, then { server: { name, url, auth, keyHeader } }; only when the vendor has none \u2192 `baker mcp catalog --search <name>`, then { app }. Research before you ask the user anything. What they connect loads into this same turn."
+      );
+      writeJson({
+        ok: true,
+        data: { managed, custom, platforms },
+        hints
+      });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+var catalogArgs = {
+  search: { type: "string", description: "App or vendor name, e.g. notion, clarity, pipedrive", required: true },
+  limit: { type: "string", description: "Max apps to return, 1-20 (default 8)", required: false }
+};
+registerSchema({
+  command: "mcp.catalog",
+  description: "Search the managed apps you can ask the user to connect when a vendor has no MCP server of its own. Each app says how the user connects it (sign-in | key) and whether this chat already reaches it. Example: baker mcp catalog --search notion",
+  args: catalogArgs
+});
+var catalogCommand = defineCommand2({
+  meta: {
+    name: "catalog",
+    description: `Managed apps you can ask the user to connect when a vendor has no MCP server of its own.
+
+For a tool \`baker mcp connected\` does not list whose vendor has no official remote MCP server:
+  baker mcp catalog --search notion
+  baker mcp catalog --search "microsoft clarity" --limit 3
+
+Each app: app (slug for request_connection), name, description, connect (sign-in | key), connected.
+Prefer the vendor's own MCP server when it publishes one; a catalog app is the fallback.`
+  },
+  args: catalogArgs,
+  run: async ({ args }) => {
+    const parsed = mcpCatalogRequestSchema.safeParse({ search: args.search, limit: args.limit });
+    if (!parsed.success) {
+      writeJson({
+        ok: false,
+        error: { code: "VALIDATION_ERROR", message: parsed.error.issues[0]?.message ?? "Invalid arguments" }
+      });
+      process.exit(1);
+    }
+    try {
+      const user = actingUserId2();
+      const data = await apiGet("/api/mcp/catalog", {
+        search: parsed.data.search,
+        limit: String(parsed.data.limit),
+        ...user ? { actingUserId: user } : {}
+      });
+      writeJson({
+        ok: true,
+        data: {
+          apps: data.apps,
+          ...data.platforms?.length ? { platforms: data.platforms } : {}
+        },
+        hints: catalogHints(data.apps, { platforms: data.platforms ?? [] })
+      });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+registerSchema({
+  command: "mcp.list",
+  description: "List the custom MCP servers this company's chats see (org + company + your own user scope).",
+  args: {}
+});
+var listCommand = defineCommand2({
+  meta: { name: "list", description: "List custom MCP servers visible to this company's chats." },
+  run: async () => {
+    try {
+      const user = actingUserId2();
+      const data = await apiGet(
+        "/api/mcp/custom",
+        user ? { actingUserId: user } : void 0
+      );
+      writeJson({
+        ok: true,
+        // Detail view: the full row (address included) plus the usability verdict.
+        // `health` itself is folded into `usable`/`problem` by `customEntry`.
+        data: data.servers.map((server) => ({ ...server, health: void 0, ...customEntry(server) })),
+        ...data.servers.some((s) => s.health && !s.health.ok) ? {
+          hints: data.servers.some((s) => s.health && !s.health.ok && !s.health.transient) ? [BROKEN_SERVER_HINT] : [LAST_CHECK_FAILED_HINT]
+        } : {}
+      });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+registerSchema({
+  command: "mcp.add",
+  description: "Register a custom MCP server. Tools appear as mcp__<name>__* on the next message. URL must be HTTPS. Scope: company (default, all chats) | org (org admin key) | user (only the current sender).",
+  args: {
+    name: { type: "string", description: "Server name \u2192 tools appear as mcp__<name>__*", required: true },
+    url: {
+      type: "string",
+      description: "Full HTTPS MCP endpoint (commonly ends in /mcp, not just the domain)",
+      required: true
+    },
+    scope: { type: "string", description: "user | user_org | company | org (default company)", required: false },
+    header: { type: "string", description: 'Auth header "Key: Value" (repeatable)', required: false }
+  }
+});
+var addCommand = defineCommand2({
+  meta: {
+    name: "add",
+    description: `Register a custom MCP server. Tools appear as mcp__<name>__* on the NEXT message.
+For a server the USER asks for, use request_connection { server } instead: they confirm who can use it,
+type any key into the card (never the chat), and its tools load in this same turn.
+
+Scope: company (default \u2014 every chat in the company) | org (all companies in the org; needs an admin key) | user (only the current message sender).
+
+Examples:
+  baker mcp add --name weather --url https://mcp.example.com/mcp
+  baker mcp add --name acme --url https://acme.dev/mcp --header "Authorization: Bearer sk-\u2026"
+  baker mcp add --name mine --url https://my.dev/mcp --scope user`
+  },
+  args: {
+    name: { type: "string", description: "Server name (mcp__<name>__*)", required: true },
+    url: {
+      type: "string",
+      description: "Full HTTPS MCP endpoint (commonly ends in /mcp, not just the domain)",
+      required: true
+    },
+    scope: { type: "string", description: "user | user_org | company | org (default company)", required: false },
+    header: { type: "string", description: 'Auth header "Key: Value" (repeatable)', required: false }
+  },
+  run: async ({ args, rawArgs }) => {
+    try {
+      const scope = parseScope(args.scope);
+      const user = actingUserId2();
+      const headers = parseHeaders(args.header, rawArgs);
+      const data = await apiPost("/api/mcp/custom", {
+        name: args.name,
+        url: args.url,
+        scope,
+        ...user ? { actingUserId: user } : {},
+        ...headers ? { headers } : {}
+      });
+      writeJson({
+        ok: true,
+        data,
+        hints: [
+          "The address must be the full MCP endpoint (commonly ending in /mcp), not just the domain \u2014 a domain on its own usually answers sign-in and then serves no tools.",
+          "The address is checked in the background. Run `baker mcp connected` on the next message to confirm it serves tools before promising the user anything."
+        ]
+      });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+registerSchema({
+  command: "mcp.remove",
+  description: "Remove a company custom MCP server by name.",
+  args: { name: { type: "string", description: "Server name to remove", required: true } }
+});
+var removeCommand = defineCommand2({
+  meta: {
+    name: "remove",
+    description: `Remove a company custom MCP server by name.
+
+Example:
+  baker mcp remove --name weather`
+  },
+  args: { name: { type: "string", description: "Server name to remove", required: true } },
+  run: async ({ args }) => {
+    try {
+      const user = actingUserId2();
+      const data = await apiPost("/api/mcp/custom/remove", {
+        name: args.name,
+        ...user ? { actingUserId: user } : {}
+      });
+      writeJson({ ok: true, data });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+var serverNameArgs = {
+  name: { type: "string", description: "Custom server name, as `baker mcp list` shows it", required: true }
+};
+registerSchema({
+  command: "mcp.verify",
+  description: "Check a custom MCP server now (the dashboard's 'Check now') and store the result. Use after the user fixed its address or sign-in, or when its tools failed this turn.",
+  args: serverNameArgs
+});
+var verifyCommand = defineCommand2({
+  meta: {
+    name: "verify",
+    description: `Check a custom MCP server now and store the result.
+
+Example:
+  baker mcp verify --name weather`
+  },
+  args: serverNameArgs,
+  run: async ({ args }) => {
+    const parsed = customMcpServerNameRequestSchema.safeParse({ name: args.name, actingUserId: actingUserId2() });
+    if (!parsed.success) {
+      fail2(new ApiError("VALIDATION_ERROR", parsed.error.issues[0]?.message ?? "Invalid arguments"));
+    }
+    try {
+      const data = await apiPost("/api/mcp/custom/verify", parsed.data);
+      writeJson({
+        ok: true,
+        data,
+        hints: [
+          data.ok ? "The server answers and serves tools. Its tools load on the next message." : data.transient ? LAST_CHECK_FAILED_HINT : BROKEN_SERVER_HINT
+        ]
+      });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+registerSchema({
+  command: "mcp.disable",
+  description: "Switch a custom MCP server off so its tools stop loading; its address and sign-in are kept. Turning it back on is done by a person in the dashboard, never by the agent.",
+  args: serverNameArgs
+});
+var disableCommand = defineCommand2({
+  meta: {
+    name: "disable",
+    description: `Switch a custom MCP server off (its tools stop loading). Only a person can turn it back on, in the dashboard.
+
+Example:
+  baker mcp disable --name weather`
+  },
+  args: serverNameArgs,
+  run: async ({ args }) => {
+    const parsed = customMcpServerNameRequestSchema.safeParse({ name: args.name, actingUserId: actingUserId2() });
+    if (!parsed.success) {
+      fail2(new ApiError("VALIDATION_ERROR", parsed.error.issues[0]?.message ?? "Invalid arguments"));
+    }
+    try {
+      const data = await apiPost("/api/mcp/custom/disable", parsed.data);
+      writeJson({
+        ok: true,
+        data,
+        hints: [
+          "Its tools stop loading from the next message, and this applies right away \u2014 publishing or discarding this chat does not undo it. Tell the user they can turn it back on in Brain \u2192 Integrations \u2192 More apps."
+        ]
+      });
+    } catch (err) {
+      fail2(err);
+    }
+  }
+});
+var mcpCommand = defineCommand2({
+  meta: {
+    name: "mcp",
+    description: `Third-party tools for this company \u2014 see what's connected, register custom HTTPS MCP endpoints.
+
+Tools from a registered server appear as mcp__<name>__* on the next message.
+Managed here are **company-scoped** servers; user- and org-scoped servers are managed in the dashboard.
+
+Start here:
+  baker mcp connected   # everything this chat can reach: managed integrations, custom servers, connected platforms
+  baker mcp catalog --search notion   # managed apps you can connect when a vendor has no MCP server of its own
+
+Run a connected app's read-only tool from the command line (JSON on stdout \u2014 for reports and scripts):
+  baker mcp tools --app googlesheets --search "read rows"
+  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --get-schema
+  baker mcp execute --tool GOOGLESHEETS_BATCH_GET --data '{"spreadsheet_id":"\u2026","ranges":["A1:D50"]}'
+
+Examples:
+  baker mcp add --name weather --url https://mcp.example.com/mcp
+  baker mcp add --name acme --url https://acme.dev/mcp --header "Authorization: Bearer sk-\u2026"
+  baker mcp remove --name weather
+  baker mcp verify --name weather    # check it now after the user fixed it
+  baker mcp disable --name weather   # stop its tools loading (only a person turns it back on)
+Full guide: __tooling__/docs/tools/baker/mcp.md`
+  },
+  subCommands: {
+    connected: connectedCommand,
+    catalog: catalogCommand,
+    tools: toolsCommand,
+    execute: executeCommand,
+    list: listCommand,
+    add: addCommand,
+    remove: removeCommand,
+    verify: verifyCommand,
+    disable: disableCommand
+  }
+});
+export {
+  mcpCommand
+};
+//# sourceMappingURL=mcp-GFKHLWDB.js.map