fix: add input validation for non-interactive mcp add

- Validate server name is non-empty (reject whitespace-only)
- Use `trim().split(/\s+/).filter(Boolean)` for command parsing
  instead of naive `split(" ")` that breaks on multiple spaces
- Add `URL.canParse()` validation for remote server URLs,
  matching interactive mode's validation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: suryaiyer95

packages/opencode/src/cli/cmd/mcp.ts

@@ -453,6 +453,11 @@ export const McpAddCommand = cmd({
       async fn() {
         // Non-interactive mode: all required args provided via flags
         if (args.name && args.type) {
+          if (!args.name.trim()) {
+            console.error("MCP server name cannot be empty")
+            process.exit(1)
+          }
+
           const useGlobal = args.global || Instance.project.vcs !== "git"
           const configPath = await resolveConfigPath(
             useGlobal ? Global.Path.config : Instance.worktree,
@@ -462,19 +467,23 @@ export const McpAddCommand = cmd({
           let mcpConfig: Config.Mcp
 
           if (args.type === "local") {
-            if (!args.command) {
+            if (!args.command?.trim()) {
               console.error("--command is required for local type")
               process.exit(1)
             }
             mcpConfig = {
               type: "local",
-              command: args.command.split(" "),
+              command: args.command.trim().split(/\s+/).filter(Boolean),
             }
           } else {
             if (!args.url) {
               console.error("--url is required for remote type")
               process.exit(1)
             }
+            if (!URL.canParse(args.url)) {
+              console.error(`Invalid URL: ${args.url}`)
+              process.exit(1)
+            }
 
             const headers: Record<string, string> = {}
             if (args.header) {