@pitcher/cli-scripts 3.1.0 → 3.1.1

package/README.md

@@ -502,7 +502,7 @@ p metadata-template scaffold --out ./schema.json
 p metadata-template upsert --instance-id 01... --sections-file ./schema.json --api-key myapikey
 ```
 
-`upsert` merges the incoming sections by section `label` — a section whose label matches an existing one is replaced, other sections are preserved. It **cannot remove** a section or field (that's a UI operation). `options` for `select`/`multi-select` fields are `{ label, value }` objects (bare strings are rejected). `upsert` requires an instance- or org-admin key; a non-admin member key is rejected (400 → `VALIDATION`).
+`upsert` merges the incoming sections by section `label` — a section whose label matches an existing one is **replaced whole** (fields left out of it are removed), other sections are preserved. It cannot remove a whole section (that's a UI operation). `options` for `select`/`multi-select` fields are `{ label, value }` objects (bare strings are rejected). `upsert` requires an instance- or org-admin key; a non-admin member key is rejected (400 → `VALIDATION`).
 
 ## To run the `dsr` command:
 

package/dist/src/commands/metadataTemplate.js

@@ -69,8 +69,9 @@ export async function runMetadataTemplateUpsert(opts, deps = {}) {
 const UPSERT_HELP = `
 Upserts the instance's metadata-field schema. POST is an upsert keyed by
 instance that MERGES the incoming sections by section 'label' — a section whose
-label matches an existing one is replaced, other sections are preserved. It
-CANNOT remove a section or field (a full-replace / UI operation).
+label matches an existing one is replaced whole (fields left out of it are
+removed), other sections are preserved. It cannot remove a whole section (a
+full-replace / UI operation).
   --instance-id    the instance whose schema to upsert (required)
   --sections       inline JSON array of sections, OR
   --sections-file  path to a JSON file with the sections array (exactly one)

package/dist/src/core/pitcherAuth.d.ts

@@ -28,8 +28,6 @@ export declare function orgSubdomain(domain: string): string;
  * in step when a tenant is added.
  */
 export declare const AUTH0_NATIVE_CLIENT_IDS: Readonly<Record<string, string>>;
-/** The hosted MCP connector's access for an org (`pitcher_organization.settings.mcp.access`, PIT-9768). */
-export type McpAccess = 'off' | 'read_only' | 'full';
 export interface OrgConfig {
     /** The Auth0 CUSTOM domain (`auth0.test-eu.pitcher.com`) — the key into the client-id maps. */
     auth0Domain: string;
@@ -38,11 +36,6 @@ export interface OrgConfig {
     organization: string | null;
     /** `'test' | 'production'`. OPTIONAL upstream: treat unknown as production. */
     environment?: string;
-    /**
-     * undefined = UNKNOWN: next-core's org lookup failed, or that region's next-core predates the field. Never
-     * read it as "off" and never as "on" — the hosted server retries or refuses (`mcp-server` `src/oauth/access.ts`).
-     */
-    mcpAccess?: McpAccess;
 }
 export interface Auth0Tokens {
     access_token: string;

package/dist/src/core/pitcherAuth.js

@@ -38,7 +38,6 @@ export const AUTH0_NATIVE_CLIENT_IDS = {
     'auth0.test-us.pitcher.com': 'sd6biLE9qGBwUfSzl2uRC1p5JdhKY06N',
     'auth0.us.pitcher.com': 'k6BgMI2Oy26RnyucUsWiL81JOeaufECm',
 };
-const MCP_ACCESS = new Set(['off', 'read_only', 'full']);
 export function createUpstreamError(kind, message) {
     return Object.assign(new Error(message), { isUpstreamError: true, kind });
 }
@@ -98,8 +97,6 @@ export async function fetchOrgConfig(domain, opts = {}) {
         audience: a.audience,
         organization: typeof a.organization === 'string' && a.organization ? a.organization : null,
         environment: typeof json.environment === 'string' ? json.environment : undefined,
-        // A value outside the three is a newer next-core than this code: refuse it like "off", not like unknown.
-        mcpAccess: typeof json.mcp?.access === 'string' ? (MCP_ACCESS.has(json.mcp.access) ? json.mcp.access : 'off') : undefined,
     };
 }
 async function postJson(url, body, opts) {

package/dist/src/mcp/hosted.js

@@ -50,7 +50,7 @@ const HOSTED_DESCRIPTIONS = {
     pitcher_files_update: 'Update a file by ID (name, folder, access, tags, metadata). sourceUrl replaces/overwrites the file binary; metadata is deep-merged.',
     pitcher_announcements_create: 'Create a wa-announcements appsDB record (title/body, optional media, CTA link, scheduling, group targeting). Requires title and body. Additive.',
     pitcher_dsr_create: 'Create a Digital Sales Room (a canvas share link) and get a clickable link back. Source is a canvas (canvasId) OR files (shareboxFileIds) - exactly one. Optional email/domain gating and a bound landing-page template. Returns the share: id, url (the full link), short_url, and a nested canvas object - there is no full_url field. This endpoint is a GET-OR-CREATE: sharing an already-shared canvas returns the existing link and only updates the fields you pass, so use pitcher_dsr_update to change or remove a value on an existing share. A failed landing bind does not fail the call: it returns the link with a warning - and binding a landing page needs instanceId, without which the bind is skipped with that warning. tags are a ShareBox-only field (they name the canvas the server builds from shareboxFileIds), so non-empty tags together with canvasId are REJECTED rather than silently dropped by the server.',
-    pitcher_metadata_template_upsert: "Upsert an instance's metadata-field schema. Merges the incoming sections by section 'label' — a section whose label matches an existing one is replaced, other sections are preserved. Cannot remove a section or field. Requires an instance- or org-admin role.",
+    pitcher_metadata_template_upsert: "Upsert an instance's metadata-field schema. Merges the incoming sections by section 'label' — a section whose label matches an existing one is REPLACED WHOLE (fields left out of it are removed), other sections are preserved. Cannot remove a whole section. To add a field, send the section with all its existing fields plus the new one. Requires an instance- or org-admin role.",
 };
 // Field descriptions that name a stripped key, rewritten for hosted (`tool name → field → text`).
 const HOSTED_FIELD_DESCRIPTIONS = {

package/dist/src/mcp/index.d.ts

@@ -1,4 +1,4 @@
-export { buildServer, type McpRunContext, type BuildServerOptions } from './server.js';
+export { buildServer, PITCHER_ICON, type McpRunContext, type BuildServerOptions } from './server.js';
 export { hostedTools, hostedReadOnlyTools, readOnlyPrompts, LOCAL_ONLY, FILE_KEY, ID_KEY, HOSTED_BUILD_OPTIONS, } from './hosted.js';
 export { allTools } from './registry.js';
 export { allPrompts } from './prompts/registry.js';

package/dist/src/mcp/index.js

@@ -1,5 +1,5 @@
 // Public entry `@pitcher/cli-scripts/mcp` — what the hosted MCP server (web/packages/mcp-server) consumes.
-export { buildServer } from './server.js';
+export { buildServer, PITCHER_ICON } from './server.js';
 export { hostedTools, hostedReadOnlyTools, readOnlyPrompts, LOCAL_ONLY, FILE_KEY, ID_KEY, HOSTED_BUILD_OPTIONS, } from './hosted.js';
 export { allTools } from './registry.js';
 export { allPrompts } from './prompts/registry.js';

package/dist/src/mcp/server.d.ts

@@ -3,6 +3,7 @@ import type { Credential } from '../core/credential.js';
 import type { ToolDescriptor } from './tools/types.js';
 import type { PromptDescriptor } from './prompts/types.js';
 import type { ResourceDescriptor } from './resources/types.js';
+export declare const PITCHER_ICON = "data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA1MTIgNTEyIiB3aWR0aD0iNTEyIiBoZWlnaHQ9IjUxMiI+PHJlY3Qgd2lkdGg9IjUxMiIgaGVpZ2h0PSI1MTIiIHJ4PSIxMTYiIGZpbGw9IiMyOTMzNUMiLz48Y2lyY2xlIGN4PSIzNzIiIGN5PSIxNTAiIHI9IjMwIiBmaWxsPSIjQ0MwMDAwIi8+PHBhdGggZmlsbD0iI2ZmZmZmZiIgZD0iTTE1MCAxMTZoOTZhOTIgOTIgMCAwIDEgMCAxODRoLTUwdjk2aC00NnoiLz48cGF0aCBmaWxsPSIjMjkzMzVDIiBkPSJNMTk2IDE2MHY5Nmg1MGE0OCA0OCAwIDAgMCAwLTk2eiIvPjwvc3ZnPg==";
 /**
  * The per-server request context: who every tool call runs as, and against which origin.
  * Captured at build time — local stdio `p mcp` builds one from the `p login` session; the hosted server

package/dist/src/mcp/server.js

@@ -18,10 +18,10 @@ const version = (() => {
         return '0.0.0';
     }
 })();
-// Connector branding shown by MCP hosts (Claude Desktop, Cursor). Self-contained
-// data URI so it needs no network/asset resolution: a navy (#29335C) tile with a
+// Connector branding shown by MCP hosts (Claude Desktop, Cursor) and on the hosted server's own pages.
+// Self-contained data URI so it needs no network/asset resolution: a navy (#29335C) tile with a
 // white "P" and the Pitcher-red (#CC0000) accent from the wordmark.
-const icon = 'data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA1MTIgNTEyIiB3aWR0aD0iNTEyIiBoZWlnaHQ9IjUxMiI+PHJlY3Qgd2lkdGg9IjUxMiIgaGVpZ2h0PSI1MTIiIHJ4PSIxMTYiIGZpbGw9IiMyOTMzNUMiLz48Y2lyY2xlIGN4PSIzNzIiIGN5PSIxNTAiIHI9IjMwIiBmaWxsPSIjQ0MwMDAwIi8+PHBhdGggZmlsbD0iI2ZmZmZmZiIgZD0iTTE1MCAxMTZoOTZhOTIgOTIgMCAwIDEgMCAxODRoLTUwdjk2aC00NnoiLz48cGF0aCBmaWxsPSIjMjkzMzVDIiBkPSJNMTk2IDE2MHY5Nmg1MGE0OCA0OCAwIDAgMCAwLTk2eiIvPjwvc3ZnPg==';
+export const PITCHER_ICON = 'data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA1MTIgNTEyIiB3aWR0aD0iNTEyIiBoZWlnaHQ9IjUxMiI+PHJlY3Qgd2lkdGg9IjUxMiIgaGVpZ2h0PSI1MTIiIHJ4PSIxMTYiIGZpbGw9IiMyOTMzNUMiLz48Y2lyY2xlIGN4PSIzNzIiIGN5PSIxNTAiIHI9IjMwIiBmaWxsPSIjQ0MwMDAwIi8+PHBhdGggZmlsbD0iI2ZmZmZmZiIgZD0iTTE1MCAxMTZoOTZhOTIgOTIgMCAwIDEgMCAxODRoLTUwdjk2aC00NnoiLz48cGF0aCBmaWxsPSIjMjkzMzVDIiBkPSJNMTk2IDE2MHY5Nmg1MGE0OCA0OCAwIDAgMCAwLTk2eiIvPjwvc3ZnPg==';
 // Compact, sanitized error string (no raw stack) — shared by the prompt/resource callbacks.
 function errorText(e) {
     if (isCliError(e))
@@ -35,7 +35,7 @@ export function buildServer(ctx, tools = allTools, prompts = allPrompts, resourc
         title: 'Pitcher',
         description: 'Search, manage, and share Pitcher content, canvases, files, DSRs, and instances.',
         websiteUrl: 'https://www.pitcher.com',
-        icons: [{ src: icon, mimeType: 'image/svg+xml', sizes: ['any'] }],
+        icons: [{ src: PITCHER_ICON, mimeType: 'image/svg+xml', sizes: ['any'] }],
     }, 
     // Surfaced to the host model via InitializeResult.instructions — the analytics answer-rendering
     // policy so a natural-language question gets a right-sized reply (sentence / table / chart /

package/dist/src/mcp/tools/metadataTemplate.js

@@ -25,8 +25,9 @@ export const metadataTemplateTools = [
         name: 'pitcher_metadata_template_upsert',
         title: 'Upsert a metadata template',
         description: "Upsert an instance's metadata-field schema. Merges the incoming sections by section 'label' — a " +
-            'section whose label matches an existing one is replaced, other sections are preserved. Cannot remove ' +
-            'a section or field. Pass exactly one of sections or sectionsFile. Requires an instance- or org-admin key.',
+            'section whose label matches an existing one is REPLACED WHOLE (fields left out of it are removed), other ' +
+            'sections are preserved. Cannot remove a whole section. Pass exactly one of sections or sectionsFile. ' +
+            'Requires an instance- or org-admin key.',
         inputShape: {
             instanceId: z.string().describe('Instance ID (required)'),
             sections: z.string().optional().describe('Sections JSON array (inline)'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pitcher/cli-scripts",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "The Pitcher CLI for various tasks in its ecosystem.",
   "author": "Pitcher AG",
   "license": "MIT",