Add MCP servers and custom tools for bots

Two new settings pages, MCPs and Tools. Super admins define them; super
admins and admins attach them to bots, to workspaces (every bot there),
or to every bot. Bots get them in chat replies and tasks.

- Custom tools: a JSON-schema of arguments plus an HTTP request, a script
  on the bot's computer, or a prompt, templated with {{args.x}} and
  {{env.KEY}}, secrets redacted from results.
- MCP servers: remote (URL and headers) or stdio commands run on the host
  with a setup command and an isolated env, in a per-process pool. Tools
  are listed into a cache and connect on first call.
- Add, edit, access and try open in modals.
- Markdown, JSON and command fields use twui's AceEditor (CodeEditor),
  its scripts loaded on demand.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/extensions/grab-bot-extensions.ts

@@ -0,0 +1,26 @@
+import BunSQLite from "@moduletrace/bun-sqlite";
+import type { BUN_SQLITE_COBBLE_CUSTOM_TOOLS, BUN_SQLITE_COBBLE_MCP_SERVERS } from "@/db/types/db";
+import botExtensionsSql from "@/src/utils/bot-extensions-sql";
+import parseCustomToolRow from "./parse-custom-tool-row";
+import parseMcpServerRow from "./parse-mcp-server-row";
+
+type Params = {
+    bot_id: number | string;
+    workspace_id?: number | string | null;
+};
+
+/**
+ * The MCP servers and custom tools a bot gets on one run
+ * (`botExtensionsSql`): every bot's, its own, and its workspace's there.
+ */
+export default async function grabBotExtensions({ bot_id, workspace_id }: Params) {
+    const [servers, tools] = await Promise.all([
+        BunSQLite.sql<BUN_SQLITE_COBBLE_MCP_SERVERS>(botExtensionsSql({ kind: "mcp", bot_id, workspace_id })),
+        BunSQLite.sql<BUN_SQLITE_COBBLE_CUSTOM_TOOLS>(botExtensionsSql({ kind: "tool", bot_id, workspace_id })),
+    ]);
+
+    return {
+        servers: (servers.payload || []).map((row) => parseMcpServerRow({ row })),
+        tools: (tools.payload || []).map((row) => parseCustomToolRow({ row })),
+    };
+}