@wirl/mcp 0.2.2 → 0.2.4

package/README.md

@@ -30,7 +30,7 @@ Cursor and anything else that speaks MCP take the same command in their own conf
 
 If your npm registry does not carry wirl, or to run exactly the build app.wirl.dev serves, name its address instead of the package: `claude mcp add wirl -- npx -y https://app.wirl.dev/cli/wirl-mcp.tgz`.
 
-The local server signs in the first time a wirl tool needs it: the agent calls `wirl_login`, which returns a link and a code, and the agent shows both to the person. The person approves the code in the browser, and the agent's next wirl tool call works. A machine already signed in with `npx wirl login` skips this. A local server acts with the CLI's credentials, which are full-scope; revoke them on the Connect an agent page at app.wirl.dev if an agent should lose access.
+The local server signs in the first time a wirl tool needs it: the agent calls `wirl_login`, which returns a link and a code, and the agent shows both to the person. The person approves the code in the browser, and the agent's next wirl tool call works. A machine already signed in with `npx wirl login` skips this. A local server acts with the CLI's credentials: build-and-update unless the person ticked full access on the approval page. Revoke them on the Connect an agent page at app.wirl.dev if an agent should lose access.
 
 ## Tools
 

package/bin.js

@@ -2363,6 +2363,9 @@ function parseManifest(input) {
     }
     accent = rawAccent;
   }
+  const rawVisibility = raw["visibility"];
+  if (rawVisibility !== void 0 && rawVisibility !== "private") return refuse(VISIBILITY_REFUSED);
+  const visibility = rawVisibility === "private" ? { visibility: "private" } : {};
   const flowResult = parseFlows(raw);
   if (!flowResult.ok) return refuse(flowResult.message);
   const flows = flowResult.flows;
@@ -2381,7 +2384,7 @@ function parseManifest(input) {
     if (!publicPathsResult2.ok) return refuse(publicPathsResult2.message);
     return {
       ok: true,
-      manifest: { runtime, connections: [], description, accent, schedules, flows, publicPaths: publicPathsResult2.publicPaths, static: staticFiles, migrations },
+      manifest: { runtime, connections: [], description, accent, schedules, flows, publicPaths: publicPathsResult2.publicPaths, static: staticFiles, migrations, ...visibility },
       warnings
     };
   }
@@ -2440,11 +2443,11 @@ function parseManifest(input) {
   if (!publicPathsResult.ok) return refuse(publicPathsResult.message);
   return {
     ok: true,
-    manifest: { runtime, connections, description, accent, schedules, flows, publicPaths: publicPathsResult.publicPaths, static: staticFiles, migrations },
+    manifest: { runtime, connections, description, accent, schedules, flows, publicPaths: publicPathsResult.publicPaths, static: staticFiles, migrations, ...visibility },
     warnings
   };
 }
-var CONNECTION_KINDS, UNDELIVERED_KINDS, CREATABLE_CONNECTION_KINDS, needsNoKey, ACCENTS, SCHEDULE_LIMITS, MANIFEST_KEYS, QUIET_KEYS, UNKNOWN_KEYS_NAMED, KEY_SHOWN, squash, ONE_EDIT_MIN_LETTERS, pluralOf, SLUG, LABEL, HOST_PATTERN, refuse, asHint, SCHEDULE_NAME, TIMEOUT_PATTERN, TIMEOUT_MESSAGE, FLOW_KEYS, MIGRATIONS_KEYS;
+var CONNECTION_KINDS, UNDELIVERED_KINDS, CREATABLE_CONNECTION_KINDS, needsNoKey, ACCENTS, SCHEDULE_LIMITS, MANIFEST_KEYS, QUIET_KEYS, UNKNOWN_KEYS_NAMED, KEY_SHOWN, squash, ONE_EDIT_MIN_LETTERS, pluralOf, SLUG, LABEL, HOST_PATTERN, refuse, asHint, SCHEDULE_NAME, TIMEOUT_PATTERN, TIMEOUT_MESSAGE, FLOW_KEYS, MIGRATIONS_KEYS, VISIBILITY_REFUSED;
 var init_manifest = __esm({
   "packages/core/src/manifest.ts"() {
     "use strict";
@@ -2460,7 +2463,7 @@ var init_manifest = __esm({
     };
     CREATABLE_CONNECTION_KINDS = CONNECTION_KINDS.filter((kind) => !(kind in UNDELIVERED_KINDS));
     needsNoKey = (kind) => kind === "none";
-    ACCENTS = ["blue", "green", "sun", "purple", "red", "sky", "orange", "lime"];
+    ACCENTS = ["blue", "green", "sun", "purple", "red", "sky", "orange", "lime", "mint", "butter", "blush", "lilac"];
     SCHEDULE_LIMITS = {
       perApp: 10,
       minTimeoutMs: 3e4,
@@ -2484,7 +2487,8 @@ var init_manifest = __esm({
       "server",
       "spa",
       "start",
-      "static"
+      "static",
+      "visibility"
     ]);
     QUIET_KEYS = Object.freeze(["$schema"]);
     UNKNOWN_KEYS_NAMED = 10;
@@ -2506,6 +2510,7 @@ var init_manifest = __esm({
     TIMEOUT_MESSAGE = (name) => `timeout for ${name} must be between 30s and 15m; a run longer than that should be split into resumable chunks.`;
     FLOW_KEYS = ["name", "step_timeout", "retries"];
     MIGRATIONS_KEYS = ["destructive"];
+    VISIBILITY_REFUSED = `visibility can only be "private": it sets who can open a new app when a deploy creates it. Change an existing app's visibility with wirl visibility.`;
   }
 });
 
@@ -2918,7 +2923,11 @@ var init_retention = __esm({
        * The counts settle a "why was my app paused" question and the claims
        * ration the mail; neither is worth anything two months on.
        */
-      flowDayRowsDays: 60
+      flowDayRowsDays: 60,
+      /** A row of the AI call ledger is kept this long, then removed. */
+      aiCallDays: 90,
+      /** An AI monthly total (the rows the caps read) is kept this long, 24 months. */
+      aiMonthDays: 730
     };
   }
 });
@@ -2951,6 +2960,7 @@ own live deploy and a person's yes. Declare a host under \`connections\`, then \
 wirl attaches the key. An undeclared host is refused; a public API needing no key uses \`"kind": "none"\`.
 Declaring one deploys before anyone approves it; the deploy says per connection whether it is usable now or
 waiting on an admin. A vendor has 60 seconds to answer, whole, unless it streams: ask a model for a stream.
+Models: \`https://ai.wirl/<vendor>/\u2026\` (openrouter, openai, anthropic, google) with the vendor's own API and no key; OpenRouter works out of the box on wirl's allowance, an org's own key lifts it. See Models.
 
 Six headers say who is asking: \`x-wirl-user-id\`, \`x-wirl-user-email\`, \`x-wirl-user-name\`,
 \`x-wirl-role\`, \`x-wirl-app-id\`, \`x-wirl-org\`. Read the name with
@@ -3003,7 +3013,7 @@ var init_version = __esm({
   "packages/core/src/version.ts"() {
     "use strict";
     WORKSPACE_VERSION = "0.0.0";
-    BUILT_VERSION = true ? "0.2.2" : null;
+    BUILT_VERSION = true ? "0.2.4" : null;
   }
 });
 
@@ -5190,11 +5200,12 @@ company email domain; in any other org, including a personal one or one
 made with \`wirl orgs create\`, it starts private. Deploys are one
 command; sharing is by email; a third-party API is declared, never pasted.`;
 var SKILL_DOCS_LINE = "Before you build, fetch https://docs.wirl.dev/llms-full.txt: every page of the docs as one Markdown file, so there is no need to read the site page by page.";
-var SKILL_RULES = `1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest).
+var SKILL_RULES = `1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest). Models need no key either: call https://ai.wirl/<vendor>/\u2026 (see Models).
 2. **Call third-party APIs by their real URL** (\`fetch("https://api.hubspot.com/...")\`). wirl attaches the key on the way out, deployed and under \`wirl dev\` alike.
-3. If a command names several organisations and asks which, ask the person; pass \`--org\` or put \`"org"\` in \`wirl.json\`.
-4. To keep a file out of the deploy, list it in a \`.wirlignore\` at the project root (gitignore-style lines; no \`!\` negation).
-5. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.`;
+3. **Asked to connect an app to Slack, or to receive events from any outside service:** follow the pattern on https://docs.wirl.dev/models (public path with "verify": "slack", a connection of kind http_bearer for the bot token and one of kind webhook_secret for the signing secret, the Slack app manifest you give the person to create the app with). Never ask for the token or secret in chat: the person pastes them on the app's Connections page, and you say which two values.
+4. If a command names several organisations and asks which, ask the person; pass \`--org\` or put \`"org"\` in \`wirl.json\`.
+5. To keep a file out of the deploy, list it in a \`.wirlignore\` at the project root (gitignore-style lines; no \`!\` negation).
+6. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.`;
 var SKILL_MANIFEST_EXAMPLE = `\`\`\`json
 { "app": "crm-sync", "server": "server.mjs", "connections": [{ "slug": "hubspot", "hosts": ["api.hubspot.com"] }] }
 \`\`\``;
@@ -5241,6 +5252,464 @@ ${FLOWS_CONTRACT}
 `;
 }
 
+// packages/cli/src/starter.ts
+init_src();
+var SUGGESTIONS = [
+  {
+    number: 1,
+    title: "Summarise the week",
+    capability: "A model comes with every app. Your agent just uses it; nothing to sign up for or paste.",
+    prompt: `Add a "Summarise this week" button above the notes. When pressed, send this week's notes to a language model and show a three-line summary at the top of the page. Try it with wirl dev, then deploy it with wirl deploy. Keep the latest summary so everyone who opens the page sees it.`,
+    youGet: "a summary card above the notes."
+  },
+  {
+    number: 2,
+    title: "Give notes a due date",
+    capability: "The database is yours. Changing its shape is one migration file and one deploy; wirl applies it before the new version goes live, and the Data page on the dashboard shows the result.",
+    prompt: "Add an optional due date to notes. Add the column in a new migration file with the next number, and never edit a migration that has already been applied. Let people set the date when they post or edit a note, show it on each note, and put notes due soonest at the top. Try it with wirl dev, then deploy it with wirl deploy.",
+    youGet: "a date on each note, the soonest first, and a new column on the Data page."
+  },
+  {
+    number: 3,
+    title: "Pull in something from outside",
+    capability: "Every call out goes through wirl. The agent declares the host as a connection; a public API needs no key, and one that does gets its key on the dashboard, never in the code.",
+    prompt: `Show today's weather under the notes for our city (ask me which city if you don't know), from a public weather API that needs no key. Declare the API's host as a connection in wirl.json with "kind": "none". Try it with wirl dev, then deploy it with wirl deploy. If the deploy says the connection is waiting on an admin, show me the link it prints.`,
+    youGet: "a weather line under the notes, and the host listed on the app's Connections page."
+  },
+  {
+    number: 4,
+    title: "Try a new look before anyone sees it",
+    // The mock says "Previews are free."; the starter carries no price words (its test forbids "free").
+    capability: "Previews are a safe place to try. A preview gets its own address and its own database, so you can look at a change with a colleague before it goes live.",
+    prompt: "Give the noticeboard a calmer look: more space between notes, a softer background, the newest note set apart at the top. Put it up as a preview called new-look with wirl preview and give me the link. Don't deploy it yet. Keep the change on a branch and don't run wirl deploy until I say deploy it.",
+    youGet: 'a second address to open next to this one. Say "deploy it" when you like it.'
+  },
+  {
+    number: 5,
+    title: "Share it with a colleague",
+    capability: "Company sign-in is already on. Anyone you name opens the link with their work account; the Access page shows who can, and you can take it back any time.",
+    prompt: "Help me share this app with a colleague: tell me how to give them access and the link they open.",
+    youGet: "their name on the Access page, and a link they open with their work account."
+  },
+  {
+    number: 6,
+    title: "Connect it to Slack",
+    capability: "Apps can reach the tools your company already uses. Your agent knows wirl's Slack pattern: it gives you a Slack app to create in one click, you paste two values on the app's Connections page, and the noticeboard starts a DM with you. Ask it about the notes, or tell it to add one, from Slack.",
+    prompt: "Connect this noticeboard to Slack so it DMs me this week's summary and I can chat with it there: ask it about the notes, or tell it to add or change one. Give me the Slack app manifest to create the app with, and tell me which two values to paste on the app's Connections page.",
+    youGet: "a DM from the noticeboard in Slack. Everything above works without it.",
+    optional: true
+  }
+];
+var splitCapability = (capability) => {
+  const stop = capability.indexOf(". ");
+  return [capability.slice(0, stop + 1), capability.slice(stop + 2)];
+};
+var SUGGESTIONS_SOURCE = [
+  "const SUGGESTIONS = [",
+  ...SUGGESTIONS.map(
+    ({ number, title, capability, prompt, youGet, optional }) => `  { number: ${String(number)}, title: ${JSON.stringify(title)}, capability: ${JSON.stringify(capability)}, prompt: ${JSON.stringify(prompt)}, youGet: ${JSON.stringify(youGet)}${optional ? ", optional: true" : ""} },`
+  ),
+  "];"
+].join("\n");
+var SERVER_HEAD = String.raw`/**
+ * Team noticeboard: your first app on wirl.
+ *
+ * Your team posts short notes here, tags them, pins the ones everyone should
+ * see, and edits or removes their own. Every night a schedule archives old
+ * notes nobody pinned. Below the notes, "Make it yours": six prompts to
+ * paste to your coding agent, in order, each saying what wirl gives the app
+ * and what you get. Under them, the app's pages on app.wirl.dev.
+ *
+ * The whole app is this one file:
+ * - The page is HTML this module returns: plain forms, no script.
+ * - Notes live in env.DB, a SQLite database that belongs to this app alone.
+ *   Its tables are in migrations/0001_init.sql, and wirl applies each new
+ *   file in migrations/ before a version goes live. Put the next change in
+ *   migrations/0002_<what>.sql rather than editing that one.
+ * - Who is asking arrives in headers wirl sets after signing them in, which
+ *   the browser cannot forge. Who may change a note is a line of code here:
+ *   a check in the page is only a suggestion to whoever holds the browser.
+ * - The nightly schedule is declared in wirl.json. wirl sends it here as a
+ *   POST to /__wirl/schedule/tidy, and what it answers becomes the run's note.
+ * - console.log lines appear on the app's Logs page, and in wirl logs.
+ */
+
+const TITLE = "Team noticeboard";
+const DASHBOARD = "https://app.wirl.dev";
+const ARCHIVE_AFTER_DAYS = 30;
+const LONGEST_NOTE = 2000;
+
+export default {
+  async fetch(request, env) {
+    const url = new URL(request.url);
+    // One line per request, on the Logs page.
+    console.log(request.method, url.pathname);
+
+    // The nightly tidy-up, sent by wirl at the time wirl.json gives. wirl
+    // names the schedule in x-wirl-schedule as well as in the path, and a
+    // request without that header is not one wirl sent.
+    if (url.pathname.startsWith("/__wirl/schedule/")) {
+      const name = url.pathname.slice("/__wirl/schedule/".length);
+      const fromWirl = request.headers.get("x-wirl-schedule") === name;
+      if (name === "tidy" && request.method === "POST" && fromWirl) return tidy(env);
+      return text("No such schedule", 404);
+    }
+
+    const me = visitor(request);
+
+    if (request.method === "POST") {
+      // A form posted from another site is never one of yours.
+      if (request.headers.get("sec-fetch-site") === "cross-site") return text("Refused: this form came from another site.", 403);
+      if (me.id === "") return text("Sign in to change the board.", 403);
+      let form;
+      try {
+        form = await request.formData();
+      } catch {
+        return text("Send this as a form.", 400);
+      }
+      return change(url.pathname, form, me, env);
+    }
+
+    if (url.pathname === "/" && (request.method === "GET" || request.method === "HEAD")) {
+      return html(await page(request, url, me, env));
+    }
+    return text("Not found", 404);
+  },
+};
+
+// Set by wirl after it signed this person in. Never take identity from a form
+// or the query string: those say whatever the browser wants them to say. A
+// header carries only Latin-1 and a name can be anything, so wirl
+// percent-encodes the name; it is decoded here.
+function visitor(request) {
+  const header = (name) => decode(request.headers.get(name) || "");
+  return {
+    id: header("x-wirl-user-id"),
+    name: header("x-wirl-user-name") || header("x-wirl-user-email") || "someone",
+    role: header("x-wirl-role"),
+  };
+}
+
+// POST /notes, and POST /notes/<id>/<edit|pin|remove|restore>.
+async function change(path, form, me, env) {
+  const [, first, id, action] = path.split("/");
+  if (first !== "notes") return text("Not found", 404);
+
+  if (id === undefined) {
+    const body = clean(form.get("body"), LONGEST_NOTE);
+    if (body === "") return text("A note needs some words.", 400);
+    const { meta } = await env.DB.prepare("insert into notes (body, tags, author_id, author_name) values (?, ?, ?, ?)")
+      .bind(body, tags(form.get("tags")), me.id, me.name)
+      .run();
+    console.log("note", meta.last_row_id, "posted by", me.id);
+    return home();
+  }
+
+  const number = Number.parseInt(id, 10);
+  if (String(number) !== id) return text("Not found", 404);
+  const note = await env.DB.prepare("select id, author_id from notes where id = ?").bind(number).first();
+  if (!note) return text("No such note", 404);
+
+  // The rule that matters, in code: authors change their own notes, and the
+  // app's owner can change any. Anyone on the board can pin.
+  const mine = note.author_id === me.id || me.role === "owner";
+
+  if (action === "pin") {
+    await env.DB.prepare("update notes set pinned = 1 - pinned where id = ?").bind(number).run();
+    console.log("note", number, "pin changed by", me.id);
+    return home();
+  }
+  if (!mine) return text("Only the person who posted this note, or the app's owner, can change it.", 403);
+
+  if (action === "edit") {
+    const body = clean(form.get("body"), LONGEST_NOTE);
+    if (body === "") return text("A note needs some words.", 400);
+    await env.DB.prepare("update notes set body = ?, tags = ? where id = ?").bind(body, tags(form.get("tags")), number).run();
+    console.log("note", number, "edited by", me.id);
+    return home();
+  }
+  if (action === "remove") {
+    await env.DB.prepare("delete from notes where id = ?").bind(number).run();
+    console.log("note", number, "removed by", me.id);
+    return home();
+  }
+  if (action === "restore") {
+    // Back on the board as if posted today, so tonight's tidy-up leaves it be.
+    await env.DB.prepare("update notes set archived_at = null, created_at = datetime('now') where id = ?").bind(number).run();
+    console.log("note", number, "put back by", me.id);
+    return home("/?view=archived");
+  }
+  return text("Not found", 404);
+}
+
+// The schedule: archive notes older than ARCHIVE_AFTER_DAYS that nobody
+// pinned, and keep a line saying so, which the page shows as the last run.
+async function tidy(env) {
+  const { meta } = await env.DB.prepare(
+    "update notes set archived_at = datetime('now') where archived_at is null and pinned = 0 and created_at < datetime('now', ?)",
+  )
+    .bind("-" + ARCHIVE_AFTER_DAYS + " days")
+    .run();
+  const note = "Archived " + meta.changes + (meta.changes === 1 ? " note" : " notes") + " older than " + ARCHIVE_AFTER_DAYS + " days.";
+  await env.DB.prepare("insert into runs (schedule, note) values (?, ?)").bind("tidy", note).run();
+  console.log("tidy:", note);
+  return text(note);
+}
+
+async function page(request, url, me, env) {
+  const tag = tags(url.searchParams.get("tag")).split(",")[0];
+  const archived = url.searchParams.get("view") === "archived";
+  let sql = "select id, body, tags, pinned, author_id, author_name, created_at from notes where archived_at is " + (archived ? "not null" : "null");
+  const binds = [];
+  if (tag !== "") {
+    sql += " and (',' || tags || ',') like ?";
+    binds.push("%," + tag + ",%");
+  }
+  sql += " order by pinned desc, id desc limit 200";
+  const notes = (await env.DB.prepare(sql).bind(...binds).all()).results;
+  const archivedCount = await env.DB.prepare("select count(*) as n from notes where archived_at is not null").first("n");
+  const lastRun = await env.DB.prepare("select note, ran_at from runs where schedule = 'tidy' order by id desc limit 1").first();
+
+  const shown = archived
+    ? "<p class='dim'>Notes the nightly tidy-up moved off the board. <a href='/'>Back to the board</a></p>"
+    : form() +
+      "<p class='dim filters'>" +
+      (tag === "" ? "All notes" : "Tagged <b>" + escape(tag) + "</b> · <a href='/'>show all</a>") +
+      " · <a href='/?view=archived'>Archived (" + archivedCount + ")</a></p>";
+
+  return [
+    "<!doctype html>",
+    "<html lang='en'>",
+    "<meta charset='utf-8'>",
+    "<meta name='viewport' content='width=device-width, initial-scale=1'>",
+    "<title>" + TITLE + "</title>",
+    "<style>" + STYLE + "</style>",
+    "<main>",
+    "<header><h1>" + TITLE + "</h1>",
+    "<p class='dim'>Your first app on wirl. Signed in as <b>" + escape(me.name) + "</b>" + (me.role ? " (" + escape(me.role) + ")" : "") + ".</p></header>",
+    shown,
+    "<ul class='notes'>" + (notes.length === 0 ? "<li class='dim'>Nothing here yet.</li>" : notes.map((note) => card(note, me, archived)).join("")) + "</ul>",
+    "<p class='dim'>Nightly tidy-up, which archives notes older than " + ARCHIVE_AFTER_DAYS + " days that nobody pinned: " +
+      (lastRun ? "last run " + escape(lastRun.ran_at.slice(0, 16)) + " UTC: " + escape(lastRun.note) : "Not run yet.") + "</p>",
+    prompts(request),
+    "</main>",
+    "</html>",
+  ].join("\n");
+}
+
+function form() {
+  return [
+    "<form class='add' method='post' action='/notes'>",
+    "<textarea name='body' rows='3' maxlength='" + LONGEST_NOTE + "' required placeholder='Post a note for the team'></textarea>",
+    "<input name='tags' placeholder='Tags, separated by commas'>",
+    "<button class='primary'>Post</button>",
+    "</form>",
+  ].join("");
+}
+
+function card(note, me, archived) {
+  const mine = note.author_id === me.id || me.role === "owner";
+  const action = (what, label) =>
+    "<form method='post' action='/notes/" + note.id + "/" + what + "'><button>" + label + "</button></form>";
+  const tagLinks = note.tags
+    .split(",")
+    .filter((tag) => tag !== "")
+    .map((tag) => "<a class='tag' href='/?tag=" + encodeURIComponent(tag) + "'>#" + escape(tag) + "</a>")
+    .join(" ");
+  const controls = archived
+    ? (mine ? action("restore", "Put back") : "")
+    : action("pin", note.pinned ? "Unpin" : "Pin") +
+      (mine
+        ? "<details><summary>Edit</summary><form class='edit' method='post' action='/notes/" + note.id + "/edit'>" +
+          "<textarea name='body' rows='3' maxlength='" + LONGEST_NOTE + "' required>" + escape(note.body) + "</textarea>" +
+          "<input name='tags' value='" + escape(note.tags.split(",").join(", ")) + "'>" +
+          "<button class='primary'>Save</button></form></details>" +
+          action("remove", "Remove")
+        : "");
+  return (
+    "<li class='note" + (note.pinned && !archived ? " pinned" : "") + "'>" +
+    "<p>" + escape(note.body) + "</p>" +
+    "<div class='meta dim'>" + (note.pinned && !archived ? "<b>Pinned</b> · " : "") +
+    escape(note.author_name || "someone") + " · " + escape(note.created_at.slice(0, 10)) + (tagLinks ? " · " + tagLinks : "") + "</div>" +
+    "<div class='actions'>" + controls + "</div>" +
+    "</li>"
+  );
+}
+
+// The app's pages on the dashboard, from the address it was opened at:
+// <org>--<app>.wirl.run, or <org>--<app>--<preview>.wirl.run for a preview.
+// Under wirl dev the address is 127.0.0.1, which names no app: null.
+function dashboard(request) {
+  const label = new URL(request.url).hostname.split(".")[0];
+  const parts = label.split("--");
+  if (parts.length < 2) return null;
+  const org = encodeURIComponent(request.headers.get("x-wirl-org") || parts[0]);
+  return { app: DASHBOARD + "/apps/" + org + "/" + encodeURIComponent(parts[1]), org: DASHBOARD + "/orgs/" + org };
+}
+
+// The onboarding path: each prompt whole, visible and ready to select and
+// copy, with what wirl gives the app and what you get. Then what the app
+// already uses, and its pages on the dashboard.
+function prompts(request) {
+  const where = dashboard(request);
+  const pages = [
+    ["Overview", "app", ""],
+    ["Data", "app", "/data"],
+    ["Access", "app", "/access"],
+    ["Logs", "app", "/logs"],
+    ["Deployments", "app", "/deployments"],
+    ["Models", "org", "/models"],
+    ["Connections", "app", "/connections"],
+    ["Settings", "app", "/settings"],
+  ];
+  const link = ([label, of, path]) =>
+    where === null ? "<span class='dim'>" + label + "</span>" : "<a href='" + escape(where[of] + path) + "'>" + label + "</a>";
+  const step = (each) => {
+    const stop = each.capability.indexOf(". ");
+    return (
+      "<li class='step" + (each.optional ? " optional" : "") + "'>" +
+      "<h3><span class='number'>" + each.number + "</span> " + escape(each.title) +
+      (each.optional ? " <span class='badge'>Optional. The big one.</span>" : "") + "</h3>" +
+      "<p class='dim'><b>" + escape(each.capability.slice(0, stop + 1)) + "</b> " + escape(each.capability.slice(stop + 2)) + "</p>" +
+      "<pre>" + escape(each.prompt) + "</pre>" +
+      "<p class='dim'>You get: " + escape(each.youGet) + "</p>" +
+      "</li>"
+    );
+  };
+  return [
+    "<section id='prompts'><h2>Make it yours</h2>",
+    "<p>This app is live, at a link your team can open. Everything below is a whole prompt. Copy one, paste it to the coding agent that made this app, and the feature appears here on the next deploy. Go in order or skip around; the last one is the big one.</p>",
+    "<ol class='steps'>",
+    ...SUGGESTIONS.map(step),
+    "</ol>",
+    "<p class='dim uses'>This app already uses a database, a nightly schedule, company sign-in and logs. Each has a page on the dashboard: " + pages.map(link).join(" · ") + "</p>",
+    where === null ? "<p class='dim'>Running under wirl dev, so these pages are not linked here: they open on app.wirl.dev once it is deployed.</p>" : "",
+    "</section>",
+  ].join("\n");
+}
+
+`;
+var SERVER_TAIL = String.raw`
+
+const STYLE = [
+  ":root { color-scheme: light dark; --ink: #1d1d1b; --dim: #66655f; --line: #e2e0d9; --card: #ffffff; --bg: #f7f6f2; --pin: #fff3bf; --accent: #2b6b5a; }",
+  "@media (prefers-color-scheme: dark) { :root { --ink: #ecebe6; --dim: #a6a59f; --line: #36352f; --card: #1f1f1c; --bg: #161614; --pin: #3b3420; --accent: #8fd1bd; } }",
+  "body { margin: 0; background: var(--bg); color: var(--ink); font: 15px/1.5 system-ui, sans-serif; }",
+  "main { max-width: 760px; margin: 0 auto; padding: 24px 16px 48px; }",
+  "h1 { font-size: 24px; margin: 0 0 4px; } h2 { font-size: 17px; margin: 36px 0 8px; }",
+  "a { color: var(--accent); } .dim { color: var(--dim); }",
+  "form.add, form.edit { display: grid; gap: 8px; margin: 16px 0 8px; }",
+  "textarea, input, button { font: inherit; color: inherit; padding: 7px 10px; border: 1px solid var(--line); border-radius: 6px; background: var(--card); }",
+  "button { cursor: pointer; } button.primary { justify-self: start; background: var(--accent); border-color: var(--accent); color: var(--bg); }",
+  "ul.notes { list-style: none; padding: 0; display: grid; gap: 10px; }",
+  ".note { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 12px 14px; }",
+  ".note.pinned { background: var(--pin); }",
+  ".note p { margin: 0 0 6px; white-space: pre-wrap; overflow-wrap: anywhere; }",
+  ".meta, .actions { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; font-size: 13px; }",
+  ".actions { margin-top: 8px; } .actions form { margin: 0; } .actions details { flex-basis: 100%; order: 3; }",
+  ".tag { text-decoration: none; }",
+  "ol.steps { list-style: none; padding: 0; display: grid; gap: 12px; }",
+  ".step { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 12px 14px; }",
+  ".step.optional { border: 2px solid var(--accent); }",
+  ".step h3 { font-size: 16px; margin: 0 0 6px; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }",
+  ".step p { margin: 6px 0; } .step b { color: var(--accent); }",
+  ".number { font-size: 12px; background: var(--ink); color: var(--bg); padding: 2px 7px; border-radius: 5px; }",
+  ".optional .number { background: var(--accent); }",
+  ".badge { font-size: 12px; font-weight: 600; color: var(--dim); border: 1px solid var(--line); padding: 1px 8px; border-radius: 999px; }",
+  ".uses { border-top: 1px solid var(--line); padding-top: 12px; font-size: 14px; }",
+  "pre { white-space: pre-wrap; user-select: all; background: var(--bg); border: 1px solid var(--line); border-radius: 6px; padding: 10px; font-size: 13px; }",
+  "details { margin: 6px 0; } summary { cursor: pointer; }",
+].join("\n");
+
+const home = (to = "/") => new Response(null, { status: 303, headers: { location: to } });
+
+const text = (body, status = 200) => new Response(body, { status, headers: { "content-type": "text/plain; charset=utf-8" } });
+
+const html = (markup) => new Response(markup, { headers: { "content-type": "text/html; charset=utf-8" } });
+
+// Escapes text for HTML, in content and in quoted attribute values alike.
+const escape = (value) =>
+  String(value).replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+
+const decode = (value) => {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return value;
+  }
+};
+
+// A form field as trimmed text, at most max characters.
+const clean = (value, max) => (typeof value === "string" ? value.trim().slice(0, max) : "");
+
+// "Team, Stand-up" becomes "team,stand-up": lowercase words, letters, digits
+// and hyphens only, so a tag is safe in a link and in the LIKE above.
+const tags = (value) =>
+  clean(value, 200)
+    .split(",")
+    .map((tag) => tag.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((word) => word !== "").join("-"))
+    .filter((tag, i, all) => tag !== "" && all.indexOf(tag) === i)
+    .slice(0, 8)
+    .join(",");
+`;
+var SERVER_MODULE = `${SERVER_HEAD}${SUGGESTIONS_SOURCE}${SERVER_TAIL}`;
+var STARTER_MIGRATION = [
+  "-- The noticeboard's tables. wirl applies each new file here, in order, before a version goes live.",
+  "-- Make the next change in 0002_<what>.sql; never edit a file that has been deployed.",
+  "create table notes (id integer primary key, body text not null, tags text not null default '', pinned integer not null default 0, author_id text not null, author_name text not null default '', created_at text not null default (datetime('now')), archived_at text)",
+  "create table runs (id integer primary key, schedule text not null, note text not null, ran_at text not null default (datetime('now')))",
+  "insert into notes (body, tags, pinned, author_id, author_name) values ('Welcome to the noticeboard. Post a note below, tag it, and pin the ones everyone should see.', 'welcome', 1, '', 'wirl')",
+  ""
+].join("\n");
+function starterManifest(app, org) {
+  const manifest = {
+    app,
+    ...org ? { org } : {},
+    dir: ".",
+    server: "server.mjs",
+    description: "A team noticeboard: your first app on wirl",
+    visibility: "private",
+    schedules: [{ name: "tidy", cron: "0 2 * * *", timezone: "UTC" }]
+  };
+  return `${JSON.stringify(manifest, null, 2)}
+`;
+}
+var README = [
+  "# Team noticeboard",
+  "",
+  "Your first app on wirl: a board where your team posts short notes, tags them, pins the ones everyone should see, and edits or removes their own. Every night a schedule archives old notes nobody pinned.",
+  "",
+  "Open it at the address `wirl deploy` prints. It starts private to you. Its page is the way in: six prompts to give your coding agent, each saying what wirl gives the app and what you get, and under them the app's pages on app.wirl.dev.",
+  "",
+  "## What is where",
+  "",
+  "- `server.mjs`: the whole app, one module with one `fetch`. The page, the forms, who may change a note, and the nightly tidy-up.",
+  "- `migrations/0001_init.sql`: the tables, one statement a line. Put the next change in `migrations/0002_<what>.sql`.",
+  "- `wirl.json`: the app's name, its module, its nightly schedule, and that it is created private.",
+  "- `.claude/skills/wirl/SKILL.md`: how a coding agent works with wirl.",
+  "",
+  "## Run it on this computer",
+  "",
+  `    ${WIRL_BIN} dev`,
+  "",
+  "It prints the address to open, and a `curl` line that runs the nightly tidy-up now.",
+  "",
+  "## Make it yours",
+  "",
+  "The same six prompts as the page. Each is a whole prompt: paste it to your coding agent as it is. Go in order or skip around; the last one is the big one.",
+  "",
+  ...SUGGESTIONS.flatMap(({ number, title, capability, prompt, youGet, optional }) => {
+    const [bold, rest] = splitCapability(capability);
+    return [`### ${String(number)}. ${title}`, "", ...optional ? ["Optional. The big one.", ""] : [], `**${bold}** ${rest}`, "", `> ${prompt}`, "", `You get: ${youGet}`, ""];
+  })
+].join("\n");
+var STARTER_FILES = {
+  "server.mjs": SERVER_MODULE,
+  "migrations/0001_init.sql": STARTER_MIGRATION,
+  "README.md": README,
+  "wirl.json": starterManifest("starter")
+};
+
 // packages/cli/src/core.ts
 function credentialsPath(env = process.env) {
   return env["WIRL_CREDENTIALS_PATH"] || join5(homedir(), ".config", "wirl", "credentials.json");
@@ -5809,7 +6278,7 @@ async function callApi(creds, path, options = {}) {
     const body = parsed ?? {};
     const refusal = apiRefusal(parsed, response);
     if (response.status === 403 && body.error === "insufficient_scope" && body.message) {
-      throw new CliError(body.message, "Ask the person to do it in the dashboard, or reconnect with full access.", refusal);
+      throw new CliError(body.message, `Ask the person to do it in the dashboard, or run ${WIRL_BIN} login and tick full access on the approval page.`, refusal);
     }
     if (response.status === 403 && (body.error === "person_only" || body.error === "bad_confirmation") && body.message) {
       throw new CliError(body.message, void 0, refusal);
@@ -5847,7 +6316,7 @@ async function callApiBytes(creds, path, options = {}) {
       body = {};
     }
     if (response.status === 401 || response.status === 403) {
-      throw new CliError("Not signed in, or this token cannot do that.", `Try \`${WIRL_BIN} login\`.`);
+      throw new CliError("Not signed in, or this token cannot do that.", `Try \`${WIRL_BIN} login\`.`, { code: "unauthenticated" });
     }
     if (response.status === 404) throw new CliError("Not found, or you do not have access to it.");
     throw new CliError(body.message ?? body.error ?? `Request failed (${response.status}).`);
@@ -5990,6 +6459,11 @@ function manifestWarningLines(manifest) {
   const parsed = parseManifest(manifest);
   return parsed.ok ? parsed.warnings.map((warning) => `Warning: ${warning}`) : [];
 }
+function manifestVisibility(manifest) {
+  if (manifest === null || manifest === void 0) return void 0;
+  const parsed = parseManifest(manifest);
+  return parsed.ok ? parsed.manifest.visibility : void 0;
+}
 async function prepareDeployBundle(dir, manifest, door, projectDir) {
   let server;
   let rules = NO_MANIFEST;
@@ -6198,13 +6672,25 @@ function chooseOrg(orgs, given, hint = 'Pass --org <slug>, or add "org" to wirl.
   throw new CliError(`Which organisation? You belong to ${orgs.map((o) => o.slug).join(", ")}.`, hint, { code: "missing_argument" });
 }
 var listApps = (creds, org) => callApi(creds, `/api/v1/orgs/${seg(org)}/apps`);
-var createRemoteApp = (creds, org, slug, name) => callApi(creds, `/api/v1/orgs/${seg(org)}/apps`, {
+var createRemoteApp = (creds, org, slug, name, visibility) => callApi(creds, `/api/v1/orgs/${seg(org)}/apps`, {
   method: "POST",
-  body: JSON.stringify({ slug, name: name ?? slug }),
+  // `visibility` rides along only when wirl.json said it: absent, the
+  // org's default holds. It applies to the app this create makes and to
+  // no other: an app that exists answers 409 and is left as it is.
+  body: JSON.stringify({ slug, name: name ?? slug, ...visibility === void 0 ? {} : { visibility } }),
   contentType: "application/json"
 });
-async function ensureRemoteApp(creds, org, app) {
-  return createRemoteApp(creds, org, app).then(() => true, (error) => {
+async function ensureRemoteApp(creds, org, app, visibility) {
+  return createRemoteApp(creds, org, app, void 0, visibility).then((created) => {
+    const made = created.app?.visibility;
+    if (visibility === "private" && typeof made === "string" && made !== "private") {
+      process.stderr.write(
+        `${terminalSafe(`wirl: asked for a private app, but ${org}/${app} was created visible to everyone in the organisation (an older control plane, or someone created it first). Change it with: wirl visibility private --org ${org} --app ${app}`)}
+`
+      );
+    }
+    return true;
+  }, (error) => {
     if (!(error instanceof CliError)) throw error;
     if (error.fields["code"] === "app_deleted") throw deletedNameError(error, app);
     if (error.fields["code"] === "app_exists" || error.fields["code"] === "app_moved") throw takenNameError(error, app);
@@ -7463,9 +7949,16 @@ function loginInstructions(login) {
     `  ${login.verificationUriComplete}`,
     `  Code: ${login.userCode}`,
     "",
+    "Approving gives build-and-update access: deploy, preview, logs, roll back and pull. If you will need to share, delete or manage connections, ask the person to tick full access on the approval page.",
+    "",
     `Once they have approved, call the wirl tool again. The code expires in ${Math.round(login.expiresIn / 60)} minutes.`
   ].join("\n");
 }
+function alreadySignedIn(me) {
+  const orgs = `Organisations: ${me.orgs.map((o) => o.slug).join(", ") || "none yet"}.`;
+  if ((me.scope ?? "full") === "full") return `Already signed in, with full access. ${orgs}`;
+  return `Already signed in, with build-and-update access. ${orgs} To share, delete or manage connections, the person runs ${WIRL_BIN} login in a terminal and ticks full access on the approval page.`;
+}
 async function beginLogin() {
   const apiOrigin = apiOriginFromEnv();
   const login = await startDeviceLogin(apiOrigin, { client: `Claude Code on ${hostname()}` });
@@ -8171,8 +8664,7 @@ var LOGIN = {
   async handler() {
     try {
       const creds = await loadCredentials();
-      const me = await whoami(creds);
-      return `Already signed in. Organisations: ${me.orgs.map((o) => o.slug).join(", ") || "none yet"}.`;
+      return alreadySignedIn(await whoami(creds));
     } catch {
     }
     const pending = pendingLogin;
@@ -8209,7 +8701,7 @@ var LOCAL_DEPLOY = {
       throw withManifestWarnings(error, manifestWarnings);
     });
     const warnings = [...manifestWarnings, ...prepared.notices];
-    const made = await ensureRemoteApp(ctx.creds, org, app);
+    const made = await ensureRemoteApp(ctx.creds, org, app, manifestVisibility(manifest));
     const result2 = await deploy(ctx.creds, { ...upload, prepared }).catch((error) => {
       throw withManifestWarnings(withMadeApp(error, made, "wirl_deploy", app), warnings);
     });
@@ -8306,7 +8798,7 @@ var LOCAL_PREVIEW = {
       throw withManifestWarnings(error, manifestWarnings);
     });
     const warnings = [...manifestWarnings, ...prepared.notices];
-    const made = await ensureRemoteApp(ctx.creds, org, app);
+    const made = await ensureRemoteApp(ctx.creds, org, app, manifestVisibility(manifest));
     const result2 = await deployPreview(ctx.creds, { ...upload, prepared }).catch((error) => {
       throw withManifestWarnings(withMadeApp(error, made, "wirl_preview", app), warnings);
     });
@@ -8367,7 +8859,7 @@ function npmFallbackLines() {
 }
 var REMOTE_DEPLOY = {
   name: "wirl_deploy",
-  description: "Deploy a directory of files to a URL that colleagues can open. This server runs at app.wirl.dev and cannot read files on the machine you are on, so it returns the exact commands to run in a terminal (and makes the app first, when you name one); the upload itself happens from the machine holding the files, never through this chat. A new app is visible to everyone in the org when the org came from a company email domain; in any other org, including a personal one or one made with wirl orgs create, it starts private. Returns the URL it will get. " + versionNumbersSentence("wirl_list_versions"),
+  description: `Deploy a directory of files to a URL that colleagues can open. This server runs at app.wirl.dev and cannot read files on the machine you are on, so it returns the exact commands to run in a terminal (and makes the app first, when you name one); the upload itself happens from the machine holding the files, never through this chat. A new app is visible to everyone in the org when the org came from a company email domain; in any other org, including a personal one or one made with wirl orgs create, it starts private. A "visibility": "private" in wirl.json does not apply when this tool creates the app; the wirl CLI's deploy honours it. Returns the URL it will get. ` + versionNumbersSentence("wirl_list_versions"),
   annotations: { title: "Deploy an app", readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
   inputSchema: {
     type: "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirl/mcp",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "MCP server for wirl: let your coding agent deploy what it just built, privately.",
   "keywords": [
     "mcp",