Add MCP servers and custom tools for bots

Two new settings pages, MCPs and Tools. Super admins define them; super
admins and admins attach them to bots, to workspaces (every bot there),
or to every bot. Bots get them in chat replies and tasks.

- Custom tools: a JSON-schema of arguments plus an HTTP request, a script
  on the bot's computer, or a prompt, templated with {{args.x}} and
  {{env.KEY}}, secrets redacted from results.
- MCP servers: remote (URL and headers) or stdio commands run on the host
  with a setup command and an isolated env, in a per-process pool. Tools
  are listed into a cache and connect on first call.
- Add, edit, access and try open in modals.
- Markdown, JSON and command fields use twui's AceEditor (CodeEditor),
  its scripts loaded on demand.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/extensions/grab-tools-overview.ts

@@ -0,0 +1,42 @@
+import BunSQLite from "@moduletrace/bun-sqlite";
+import type { BUN_SQLITE_COBBLE_CUSTOM_TOOLS } from "@/db/types/db";
+import type { CustomToolsOverviewPayload } from "@/src/types";
+import grabCrewRole from "../access/grab-crew-role";
+import grabExtensionAccess from "./grab-extension-access";
+import grabExtensionTargets from "./grab-extension-targets";
+import parseCustomToolRow from "./parse-custom-tool-row";
+
+type Params = {
+    user_id: number | string;
+};
+
+/**
+ * The Tools settings page: every custom tool with who gets it, and what it
+ * can be attached to. Its arguments and how it runs only go to the super
+ * admin.
+ */
+export default async function grabToolsOverview({ user_id }: Params): Promise<CustomToolsOverviewPayload> {
+    const role = await grabCrewRole({ user_id });
+    const [rows, access, targets] = await Promise.all([
+        BunSQLite.sql<BUN_SQLITE_COBBLE_CUSTOM_TOOLS>({ sql: `SELECT * FROM custom_tools ORDER BY name ASC, id ASC` }),
+        grabExtensionAccess({ kind: "tool" }),
+        grabExtensionTargets({ role }),
+    ]);
+
+    return {
+        ...targets,
+        tools: (rows.payload || []).map((row) => {
+            const tool = parseCustomToolRow({ row });
+
+            return {
+                id: tool.id,
+                name: tool.name,
+                description: tool.description,
+                kind: tool.kind,
+                enabled: tool.enabled,
+                access: { all_bots: tool.all_bots, ...access(tool.id) },
+                ...(targets.can_edit ? { parameters: tool.parameters, config: tool.config } : {}),
+            };
+        }),
+    };
+}