# cue-skills — repo-level DSH bundle.
#
# This is the repository-root bundle entry, so that a single command wires the
# whole Cue surface into any DeepSeek Harness profile:
#
#   dsh plugin --profile web add github:sensedeal/cue-skills#<commit>
#
# It mounts two capabilities as one `insert` list:
#   * mcp-omni      -> the audited Cue Omni Reader MCP server  (mcp__omni__*)
#   * mcp-cue_*     -> Cue public data MCP services            (mcp__cue_*)
#
# Requirements: Node >= 20.12 and CUE_API_KEY in the environment (set it in
# $DSH_HOME/.env or export it before launching dsh). Secrets never go in this
# file; local reads are bounded by OMNI_ALLOWED_ROOTS.
#
# The optional SSRF/consent hardening lives in its own opt-in bundle
# (`dsh/cue-omni-reader-guard/`): it fails closed on local files until an
# explicit root is authorized, so it is deliberately NOT part of this default
# repo bundle.
#
# The Bridge version is pinned (never an implicit `latest`).

- insert:
    - id: mcp-omni
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: omni
        transport: stdio
        command: npx
        args: ['-y', '@cueai/omni-reader-mcp@1.8.6']
        cwd: !!js process.cwd()
        env:
          CUE_API_KEY: !!js process.env.CUE_API_KEY
          # Configurable, never hardcoded: explicit root wins, else the dsh cwd.
          OMNI_ALLOWED_ROOTS: !!js 'process.env.OMNI_ALLOWED_ROOTS || process.cwd()'
    - id: mcp-cue_regulatory
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_regulatory
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/regulatory/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_regulatory_cn
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_regulatory_cn
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/regulatory_cn/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_macro
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_macro
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/macro/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_disclosure
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_disclosure
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/disclosure/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_disclosure_cn
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_disclosure_cn
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/disclosure_cn/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_margin
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_margin
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/margin/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_statute
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_statute
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/statute/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_institutional
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_institutional
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/institutional/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_entity_data
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_entity_data
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/entity_data/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_academic
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_academic
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/academic/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_fr_fact_index
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_fr_fact_index
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/fr_fact_index/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_ipo
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_ipo
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/ipo/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_esop
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_esop
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/esop/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_buyback
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_buyback
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/buyback/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"
    - id: mcp-cue_fr_footnote
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: cue_fr_footnote
        transport: streamable-http
        url: https://mcp.cuecue.cn/api/fr_footnote/mcp/
        headers:
          Authorization: !!js '`Bearer ${process.env.CUE_API_KEY}`'
          Accept: "application/json, text/event-stream"