@amerged/ohmyhost-mcp 0.1.14 → 0.1.17

package/dist/index.js

@@ -2,7 +2,7 @@ import { createRequire as __ohmyhostCreateRequire } from "node:module"; const re
 import {
   createOhmyhostMcpServer,
   ohmyhostMcpHandler
-} from "./chunk-S2LJAGEP.js";
+} from "./chunk-SVJRXROG.js";
 export {
   createOhmyhostMcpServer,
   ohmyhostMcpHandler

package/dist/stdio-main.js

@@ -26,7 +26,7 @@ import {
   serverIdentityOf,
   setNegotiatedProtocolVersion,
   validateEnvelopeMeta
-} from "./chunk-S2LJAGEP.js";
+} from "./chunk-SVJRXROG.js";
 
 // node_modules/.pnpm/@modelcontextprotocol+server@2.0.0/node_modules/@modelcontextprotocol/server/dist/stdio.mjs
 var StdioServerTransport = class {
@@ -799,7 +799,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.14",
+  version: "0.1.17",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -1571,7 +1571,7 @@ var PROBLEM_POLICY = {
   cloudflare_zone_not_bound: {
     status: 409,
     retryable: false,
-    action: "Configure the project domain first with 'ohmyhost domain paid plan' then 'ohmyhost domain paid apply', or configure its sender domain with 'ohmyhost mail domain set'. Then request Cloudflare authorization for that domain's zone."
+    action: "Configure the project domain first with 'ohmyhost domain paid plan' then 'ohmyhost domain paid apply', or configure its sender domain with 'ohmyhost mail setup'. Then request Cloudflare authorization for that domain's zone."
   },
   github_connection_required: {
     status: 409,
@@ -1726,6 +1726,11 @@ var PROBLEM_POLICY = {
     retryable: false,
     action: "Select the current succeeded dev deployment and target prod."
   },
+  mail_capacity_unavailable: {
+    status: 503,
+    retryable: true,
+    action: "Report this request ID through feedback. The stored mail setup continues automatically once ohmyho.st has capacity; follow mail status and keep the original idempotency key."
+  },
   mail_domain_conflict: {
     status: 409,
     retryable: false,
@@ -1734,13 +1739,23 @@ var PROBLEM_POLICY = {
   mail_domain_required: {
     status: 409,
     retryable: false,
-    action: "Run 'ohmyhost mail domain set' for this project, then plan again."
+    action: "This app declares mail.enabled. Configure the project's own sender domain with 'ohmyhost mail setup' using its Prod environment ID, or set mail.enabled to false if the app sends no mail, then plan again."
   },
   storage_jurisdiction_conflict: {
     status: 409,
     retryable: false,
     action: "Set storage.jurisdiction in ohmyhost.yaml to the project's hosting region shown by project status, then plan again."
   },
+  shared_data_requires_promotion: {
+    status: 409,
+    retryable: false,
+    action: "Plan and deploy this commit to Dev, then run 'ohmyhost deployment promote plan' to reach Prod."
+  },
+  production_deployment_required: {
+    status: 409,
+    retryable: false,
+    action: "Deploy to Prod first: run 'ohmyhost plan --environment prod' and deploy that plan, or promote the current Dev deployment with 'ohmyhost deployment promote plan'. Then plan the domain again."
+  },
   framework_conversion_required: {
     status: 409,
     retryable: false,
@@ -1888,6 +1903,12 @@ var parseCloudflareDnsAuthorizationStatus = (value) => {
   }
   return input;
 };
+var parseDevAccessState = (value) => {
+  const input = exactRecord2(value, ["project_id", "mode", "share_url"]);
+  if (!isUlid(input["project_id"]) || input["mode"] !== "protected" && input["mode"] !== "public" || input["mode"] === "public" && input["share_url"] !== null || input["share_url"] !== null && (typeof input["share_url"] !== "string" || !/^https:\/\/dev-[a-z0-9]+(?:-[a-z0-9]+){0,4}\.(?:dev\.)?check\.omh\.st\/\.ohmyhost\/dev-access\/redeem\?stage=dev&ticket=[A-Za-z0-9_-]{43}$/u.test(input["share_url"])))
+    throw new ResponseContractError();
+  return input;
+};
 var parseDevAccessTicket = (value) => {
   const input = exactRecord2(value, [
     "ticket_id",
@@ -1966,8 +1987,10 @@ var parseSafeProblem = (value) => {
   const retryAfter = input["retry_after_seconds"];
   if (retryAfter !== void 0 && (code !== "rate_limited" || typeof retryAfter !== "number" || !Number.isSafeInteger(retryAfter) || retryAfter < 1 || retryAfter > 86400))
     throw new ResponseContractError();
+  const docsUrl = String(input["type"]);
   return {
     requestId: input["request_id"],
+    ...docsUrl.startsWith("https://docs.ohmyho.st/errors/") ? { docsUrl } : {},
     code,
     retryable: policy.retryable,
     suggestedAction: (code === "framework_conversion_required" ? parseFrameworkConversionDetail(input["detail"]) ?? policy.action : policy.action) + (retryAfter === void 0 ? "" : ` Retry after ${String(retryAfter)} seconds.`),
@@ -2137,12 +2160,16 @@ var HELP_USAGE = Object.freeze({
   "token list": "ohmyhost token list --organization ULID [--after KEY_ID] --json",
   "token revoke": "ohmyhost token revoke --organization ULID --key KEY_ID --yes --json",
   "feedback submit": "ohmyhost feedback submit --organization ULID --kind bug|issue|feature_request --title TITLE --description REDACTED_REPORT [--project ULID] [--environment ULID] [--operation ULID] [--error-code CODE] [--client-version VERSION] --idempotency-key KEY --json",
-  "project create": "ohmyhost project create --organization ULID --name NAME [--data-mode shared|isolated] [--region us|eu] --idempotency-key KEY --json (the region is chosen once: us is the default, eu places the database, files and builds in the EU; it cannot be changed later)",
+  "project create": "ohmyhost project create --organization ULID --name NAME [--data-mode shared|isolated] [--dev-access-mode protected|public] [--region us|eu] --idempotency-key KEY --json (the region is chosen once: us is the default, eu places the database, files and builds in the EU; it cannot be changed later)",
   "project list": "ohmyhost project list [--cursor ULID] [--limit LIMIT] --json",
   "project context": "ohmyhost project context --project ULID --json",
   "project notes set": "ohmyhost project notes set --project ULID --version NUMBER --markdown TEXT --idempotency-key KEY --json (no credentials or signed URLs)",
   "project status": "ohmyhost project status --project ULID --json",
   "project dev-access create": "ohmyhost project dev-access create --project ULID --json",
+  "project dev-share link": "ohmyhost project dev-share link --project ULID --json",
+  "project dev-share rotate": "ohmyhost project dev-share rotate --project ULID --idempotency-key KEY --yes --json",
+  "project dev-share revoke": "ohmyhost project dev-share revoke --project ULID --idempotency-key KEY --yes --json",
+  "project dev-access mode": "ohmyhost project dev-access mode --project ULID --mode protected|public --idempotency-key KEY --yes --json",
   "project handle check": "ohmyhost project handle check --handle HANDLE --json (is this address free? answers with a reason and free alternatives; the address becomes HANDLE.check.omh.st)",
   "project handle set": "ohmyhost project handle set --project ULID --handle HANDLE --if-match ETAG --idempotency-key KEY --json (moves the project to a free address; the old one stops working and anyone may claim it)",
   "database compute set": "ohmyhost database compute set --project ULID --environment dev|prod --profile standard|performance --idempotency-key KEY --yes [--wait] --json\n  standard: Free 0.25 CU/1 GB/60s idle, Paid 0.5 CU/2 GB/60s idle. performance: Paid 1 CU/4 GB/300s idle, 2.5x database compute credits per equal active minute; longer idle time also consumes credits.",
@@ -2163,8 +2190,8 @@ var HELP_USAGE = Object.freeze({
   "domain paid apply": "ohmyhost domain paid apply --project ULID --hostname HOST --idempotency-key KEY --yes --json",
   "domain paid status": "ohmyhost domain paid status --project ULID --json",
   "domain paid delete": "ohmyhost domain paid delete --project ULID --hostname HOST --idempotency-key KEY --yes --json",
-  plan: "ohmyhost plan --project ULID --commit SHA --json",
-  deploy: "ohmyhost deploy --project ULID --plan-id ULID --idempotency-key KEY --yes [--wait] --json",
+  plan: "ohmyhost plan --project ULID --commit SHA [--environment dev|prod] --json",
+  deploy: "ohmyhost deploy --project ULID (--plan-id ULID | --commit SHA [--environment dev|prod]) --idempotency-key KEY --yes [--wait] --json",
   logs: "ohmyhost logs OPERATION_ULID --follow --json",
   "deployment logs": "ohmyhost deployment logs --project ULID --deployment ULID --follow --json",
   "rollback plan": "ohmyhost rollback plan --project ULID --deployment DEPLOYMENT_ULID --json",
@@ -2186,7 +2213,8 @@ var HELP_USAGE = Object.freeze({
   "mail messages get": "ohmyhost mail messages get --project ULID --environment ULID --message ULID --json",
   "mail messages retry": "ohmyhost mail messages retry --project ULID --environment ULID --message ULID --idempotency-key KEY --json",
   "mail domain set": "ohmyhost mail domain set --project ULID --environment ULID --domain DOMAIN --sending true --receiving false --idempotency-key KEY --json",
-  "mail domain status": "ohmyhost mail domain status --project ULID --environment ULID --json"
+  "mail domain status": "ohmyhost mail domain status --project ULID --environment ULID --json",
+  "mail domain delete": "ohmyhost mail domain delete --project ULID --environment ULID --idempotency-key KEY --yes --json"
 });
 var HELP_COMMANDS = Object.freeze(Object.entries(HELP_USAGE).map(([command, usage]) => Object.freeze({ command, usage })));
 var SIGN_IN_WINDOW_MS = 30 * 60 * 1e3;
@@ -3584,6 +3612,83 @@ var getProjectHandleAvailability = (parameters, options) => {
     ...params
   });
 };
+var revokeProjectDevShareLink = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-share-link",
+    ...options,
+    ...params
+  });
+};
+var ensureProjectDevShareLink = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-share-link",
+    ...options,
+    ...params
+  });
+};
+var rotateProjectDevShareLink = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-share-link:rotate",
+    ...options,
+    ...params
+  });
+};
+var setProjectDevAccessMode = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { key: "setDevAccessModeRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).put({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-access-mode",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
 var createProjectDevAccessTicket = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -4254,6 +4359,25 @@ var streamOperationEvents = (parameters, options) => {
     ...params
   });
 };
+var deleteManagedMailDomain = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "environment_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/environments/{environment_id}/mail-domain",
+    ...options,
+    ...params
+  });
+};
 var getManagedMailDomain = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -4480,6 +4604,14 @@ function assertManagedMailResponse(value, input) {
       invalid3();
     return;
   }
+  if (input.action === "domain_delete") {
+    exact3(r, ["status", "domain", "dns_records"]);
+    if (r["status"] !== "deleted")
+      invalid3();
+    domain(r["domain"]);
+    records(r["dns_records"]);
+    return;
+  }
   if (input.action === "messages_list") {
     exact3(r, ["items"]);
     if (!Array.isArray(r["items"]) || r["items"].length > 50)
@@ -4608,6 +4740,8 @@ function requestManagedMail(client2, input) {
       return verifyManagedMailWebhook({ ...scope, "Idempotency-Key": input.idempotencyKey }, { client: client2 });
     case "webhook_disable":
       return disableManagedMailReceiving({ ...scope, "Idempotency-Key": input.idempotencyKey }, { client: client2 });
+    case "domain_delete":
+      return deleteManagedMailDomain({ ...scope, "Idempotency-Key": input.idempotencyKey }, { client: client2 });
     case "messages_list":
       return listManagedMailMessages({ ...scope, ...input.after ? { after: input.after } : {} }, { client: client2 });
     case "message_get":
@@ -5204,6 +5338,25 @@ var GeneratedSdkLocalMcpClient = class {
   getProject(projectId) {
     return getProject({ project_id: projectId }, { client: this.#client });
   }
+  async ensureDevShareLink(projectId) {
+    const result = parseDevAccessState(await ensureProjectDevShareLink({ project_id: projectId }, { client: this.#client }));
+    if (result.project_id !== projectId)
+      throw new TypeError("Unexpected Dev share project");
+    return result;
+  }
+  async setDevAccessMode(input) {
+    return parseDevAccessState(await setProjectDevAccessMode({
+      project_id: input.projectId,
+      "Idempotency-Key": input.idempotencyKey,
+      setDevAccessModeRequest: { mode: input.mode }
+    }, { client: this.#client }));
+  }
+  async rotateDevShareLink(input) {
+    return parseDevAccessState(await rotateProjectDevShareLink({ project_id: input.projectId, "Idempotency-Key": input.idempotencyKey }, { client: this.#client }));
+  }
+  async revokeDevShareLink(input) {
+    return parseDevAccessState(await revokeProjectDevShareLink({ project_id: input.projectId, "Idempotency-Key": input.idempotencyKey }, { client: this.#client }));
+  }
   async createDevAccessTicket(projectId) {
     const ticket = parseDevAccessTicket(await createProjectDevAccessTicket({ project_id: projectId }, { client: this.#client }));
     if (ticket.project_id !== projectId)
@@ -5314,6 +5467,7 @@ var GeneratedSdkLocalMcpClient = class {
         organization_id: input.organizationId,
         name: input.name,
         ...input.dataMode === void 0 ? {} : { data_mode: input.dataMode },
+        ...input.devAccessMode === void 0 ? {} : { dev_access_mode: input.devAccessMode },
         ...input.region === void 0 ? {} : { region: input.region }
       }
     }, { client: this.#client });
@@ -5339,7 +5493,10 @@ var GeneratedSdkLocalMcpClient = class {
     }, { client: this.#client });
   }
   planDeployment(input) {
-    return planDeployment({ project_id: input.projectId, planDeploymentRequest: { commit_sha: input.commitSha } }, { client: this.#client });
+    return planDeployment({
+      project_id: input.projectId,
+      planDeploymentRequest: { commit_sha: input.commitSha, environment: input.environment }
+    }, { client: this.#client });
   }
   createDeployment(input) {
     return createDeployment({
@@ -5521,8 +5678,8 @@ function createLocalOhmyhostMcpServer(dependencies) {
     idempotencyKey: input.idempotency_key
   }), mutationAnnotations());
   registerProductTool(server, dependencies, "domain_cloudflare_status", "Read the project's customer DNS authorization state, zone, scopes and expiry without credentials. authorized is not DNS/TLS readiness. For a Paid hostname, use domain_paid_apply with the original hostname/key after consent, then domain_paid_status. If DNS/TLS is pending, tell the customer to ask their agent again after 60 minutes; do not repeat correct records or create another deployment.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getCloudflareDnsStatus(input.project_id));
-  registerProductTool(server, dependencies, "domain_paid_plan", "Plan a customer-owned production hostname and return the manual CNAME/validation instructions. This does not activate or change DNS. Free projects use their platform domain without customer DNS authorization.", external_exports.object({ project_id: identifier2, hostname: domainName }), (client2, input) => client2.planPaidDomain({ projectId: input.project_id, hostname: input.hostname }));
-  registerProductTool(server, dependencies, "domain_paid_apply", "Activate the explicitly requested customer hostname. Requires Paid; the backend may reuse only its scoped customer OAuth grant. After domain_cloudflare_status is authorized, replay the original hostname/key to reconcile its exact DNS records. Otherwise return the manual DNS records to the human. Preserve the original hostname/key after uncertainty; no arbitrary DNS or provider credentials are accepted.", external_exports.object({
+  registerProductTool(server, dependencies, "domain_paid_plan", "Plan a customer-owned production hostname and return the manual CNAME/validation instructions. This does not activate or change DNS. Free projects use their platform domain without customer DNS authorization. production_deployment_required means Prod has no active deployment: deploy to Prod or promote the current Dev deployment, then plan again.", external_exports.object({ project_id: identifier2, hostname: domainName }), (client2, input) => client2.planPaidDomain({ projectId: input.project_id, hostname: input.hostname }));
+  registerProductTool(server, dependencies, "domain_paid_apply", "Activate the explicitly requested customer hostname. Requires Paid; the backend may reuse only its scoped customer OAuth grant. After domain_cloudflare_status is authorized, replay the original hostname/key to reconcile its exact DNS records. Otherwise return the manual DNS records to the human. Preserve the original hostname/key after uncertainty; no arbitrary DNS or provider credentials are accepted. production_deployment_required changed nothing: deploy to Prod or promote Dev first, then repeat the same hostname/key.", external_exports.object({
     project_id: identifier2,
     hostname: domainName,
     idempotency_key: idempotencyKey,
@@ -5751,22 +5908,42 @@ function createLocalOhmyhostMcpServer(dependencies) {
     const { idempotency_key, ...report } = input;
     return client2.submitFeedback({ report, idempotencyKey: idempotency_key });
   }, mutationAnnotations());
-  registerProductTool(server, dependencies, "project_create", "Create an ohmyho.st project. Recommend isolated Dev/Prod data, but respect the customer's choice and added database consumption. shared is the default and uses one database/file namespace; isolated separates database/Auth records and files. Choose before provisioning; changing the established mode requires a data migration. region defaults to us; eu places the project's database, files and builds in the EU at the same prices. The region cannot be changed later, and ohmyhost.yaml storage.jurisdiction must equal it.", external_exports.object({
+  registerProductTool(server, dependencies, "project_create", "Create an ohmyho.st project. Ask whether Dev should be protected (default) or public before creation; public means anyone with the Dev URL can open it, including when Dev and Prod share data. Recommend isolated Dev/Prod data, but respect the customer's choice and added database consumption. shared is the default and uses one database/file namespace; isolated separates database/Auth records and files. Choose before provisioning; changing the established mode requires a data migration. region defaults to us; eu places the project's database, files and builds in the EU at the same prices. The region cannot be changed later, and ohmyhost.yaml storage.jurisdiction must equal it.", external_exports.object({
     organization_id: identifier2,
     name: external_exports.string().min(1).max(128),
     data_mode: external_exports.enum(["shared", "isolated"]).optional(),
+    dev_access_mode: external_exports.enum(["protected", "public"]).optional(),
     region: external_exports.enum(["us", "eu"]).optional(),
     idempotency_key: idempotencyKey
   }), (client2, input) => client2.createProject({
     organizationId: input.organization_id,
     name: input.name,
     ...input.data_mode === void 0 ? {} : { dataMode: input.data_mode },
+    ...input.dev_access_mode === void 0 ? {} : { devAccessMode: input.dev_access_mode },
     ...input.region === void 0 ? {} : { region: input.region },
     idempotencyKey: input.idempotency_key
   }), mutationAnnotations());
   registerProductTool(server, dependencies, "project_get", "Get one project", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getProject(input.project_id));
-  registerProductTool(server, dependencies, "project_status", "Get source, both Dev/Prod environment IDs, deployment URLs, latest operation and cleanup status. Dev URLs are protected: use project_dev_access_create before browser verification. Select environments by name when configuring secrets; never infer a Prod ID from the default Dev environment.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getProjectStatus(input.project_id));
-  registerProductTool(server, dependencies, "project_dev_access_create", "Create an owner-only ten-minute single-use access link for the protected Dev app. Anonymous Dev HTTP 404 is expected; it does not prove deployment failure. Open redeem_url once in the intended browser or isolated cookie jar, then use the clean origin with its session cookie. Keep the link and cookie private, out of reports, logs and project notes. A new ticket invalidates earlier Dev access and unused owner tickets; do not blindly retry an uncertain request. This grants no customer application login or Prod access.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.createDevAccessTicket(input.project_id), { ...mutationAnnotations(), idempotentHint: false });
+  registerProductTool(server, dependencies, "project_status", "Get source, both Dev/Prod environment IDs, deployment URLs, Dev access mode, latest operation and cleanup status. Protected Dev needs project_dev_share_link_get for a persistent share link. Select environments by name when configuring secrets; never infer a Prod ID from the default Dev environment.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getProjectStatus(input.project_id));
+  registerProductTool(server, dependencies, "project_dev_share_link_get", "Owner only: get or create the persistent protected Dev link. The same link works for multiple visitors and has no automatic expiry. Keep it out of notes and logs.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.ensureDevShareLink(input.project_id), mutationAnnotations());
+  registerProductTool(server, dependencies, "project_dev_access_mode_set", "Owner only: choose public Dev (no platform token) or protected Dev (share link required). A switch takes effect on the next request; switching back creates a new link.", external_exports.object({
+    project_id: identifier2,
+    mode: external_exports.enum(["protected", "public"]),
+    idempotency_key: idempotencyKey
+  }), (client2, input) => client2.setDevAccessMode({
+    projectId: input.project_id,
+    mode: input.mode,
+    idempotencyKey: input.idempotency_key
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "project_dev_share_link_rotate", "Owner only: replace the persistent Dev link and immediately revoke old links and sessions. Repeat the same key after uncertainty.", external_exports.object({ project_id: identifier2, idempotency_key: idempotencyKey }), (client2, input) => client2.rotateDevShareLink({
+    projectId: input.project_id,
+    idempotencyKey: input.idempotency_key
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "project_dev_share_link_revoke", "Owner only: revoke the persistent Dev link and active sessions immediately; Dev stays protected until a new link is obtained.", external_exports.object({ project_id: identifier2, idempotency_key: idempotencyKey }), (client2, input) => client2.revokeDevShareLink({
+    projectId: input.project_id,
+    idempotencyKey: input.idempotency_key
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "project_dev_access_create", "Create an owner-only one-hour single-use access link for the protected Dev app. Anonymous Dev HTTP 404 is expected; it does not prove deployment failure. Open redeem_url once in the intended browser or isolated cookie jar, then use the clean origin with its session cookie. Keep the link and cookie private, out of reports, logs and project notes. A new ticket invalidates earlier one-time ticket sessions and unused owner tickets but not the persistent share link; do not blindly retry an uncertain request. This grants no customer application login or Prod access.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.createDevAccessTicket(input.project_id), { ...mutationAnnotations(), idempotentHint: false });
   registerProductTool(server, dependencies, "github_connect", "Owner or Admin: connect GitHub once for this workspace. Give authorization_url to the customer and repeat identical arguments and key to observe completion. One connection covers subsequent source_link calls; no provider token is returned. Failed or expired attempts require a fresh key for this same workspace, never a new project.", external_exports.object({ organization_id: identifier2, idempotency_key: idempotencyKey }), (client2, input) => client2.connectGithub({
     organizationId: input.organization_id,
     idempotencyKey: input.idempotency_key
@@ -5784,7 +5961,15 @@ function createLocalOhmyhostMcpServer(dependencies) {
     idempotencyKey: input.idempotency_key
   }), mutationAnnotations());
   registerProductTool(server, dependencies, "source_get", "Get linked source status", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getSource(input.project_id));
-  registerProductTool(server, dependencies, "deployment_plan", "Plan an immutable deployment. Preserve the customer's existing authentication integration, such as Better Auth or WorkOS, and use the same generic Next.js/Vite/TanStack runtime contract. ohmyho.st login is separate. Read the app Skill's auth guidance and report actual plan blockers, required secret names/callback configuration and unverified runtime compatibility. Never assume a working platform login proves application login or silently replace its auth provider.", external_exports.object({ project_id: identifier2, commit_sha: commitSha }), (client2, input) => client2.planDeployment({ projectId: input.project_id, commitSha: input.commit_sha }));
+  registerProductTool(server, dependencies, "deployment_plan", "Plan an immutable deployment. Preserve the customer's existing authentication integration, such as Better Auth or WorkOS, and use the same generic Next.js/Vite/TanStack runtime contract. ohmyho.st login is separate. Read the app Skill's auth guidance and report actual plan blockers, required secret names/callback configuration and unverified runtime compatibility. Hosting, including Better Auth, needs no mail domain unless the app declares mail.enabled. Never assume a working platform login proves application login or silently replace its auth provider. The plan builds into Dev unless environment is prod; prod builds straight into Prod without a Dev deployment (a project with shared data and a database must deploy to Dev and promote instead). The plan stays valid for 24 hours.", external_exports.object({
+    project_id: identifier2,
+    commit_sha: commitSha,
+    environment: external_exports.enum(["dev", "prod"]).optional()
+  }), (client2, input) => client2.planDeployment({
+    projectId: input.project_id,
+    commitSha: input.commit_sha,
+    environment: input.environment ?? "dev"
+  }));
   registerProductTool(server, dependencies, "deployment_create", "Start a reviewed deployment plan", external_exports.object({ project_id: identifier2, plan_id: identifier2, idempotency_key: idempotencyKey }), (client2, input) => client2.createDeployment({
     projectId: input.project_id,
     planId: input.plan_id,
@@ -5831,7 +6016,7 @@ function createLocalOhmyhostMcpServer(dependencies) {
     operationId: input.operation_id,
     idempotencyKey: input.idempotency_key
   })), mutationAnnotations());
-  registerProductTool(server, dependencies, "mail_setup", "Configure the customer's one production mail domain using the project Prod environment ID. The Dev and Prod application URLs do not create separate mail domains. Ask whether they want sending and receiving. Configure sending first; receiving requires mail_webhook_set, application signature verification and mail_webhook_verify. Preserve existing mailbox MX records. No Resend account or key is needed.", external_exports.object({
+  registerProductTool(server, dependencies, "mail_setup", "Configure the customer's one production mail domain using the project Prod environment ID, only when the customer wants mail or the app declares mail.enabled; hosting needs no mail domain and none is registered automatically. The Dev and Prod application URLs do not create separate mail domains. Ask whether they want sending and receiving. Configure sending first; receiving requires mail_webhook_set, application signature verification and mail_webhook_verify. Preserve existing mailbox MX records. No Resend account or key is needed.", external_exports.object({
     project_id: identifier2,
     environment_id: identifier2,
     domain: external_exports.string(),
@@ -5952,6 +6137,21 @@ function createLocalOhmyhostMcpServer(dependencies) {
       environmentId: input.environment_id
     });
   });
+  registerProductTool(server, dependencies, "mail_domain_delete", "Retire the project's mail domain while the project stays active; use its Prod environment ID. Sending and receiving stop at once, then its provider domain and key are removed. DNS is not changed: remove the returned dns_records from the domain's DNS. Only when the customer no longer wants mail. Requires explicit confirmation; repeat the same key after uncertainty.", external_exports.object({
+    project_id: identifier2,
+    environment_id: identifier2,
+    idempotency_key: idempotencyKey,
+    confirm: external_exports.literal(true)
+  }), async (client2, input) => {
+    if (!client2.managedMail)
+      throw new Error("Mail unavailable");
+    return client2.managedMail({
+      action: "domain_delete",
+      projectId: input.project_id,
+      environmentId: input.environment_id,
+      idempotencyKey: input.idempotency_key
+    });
+  }, destructiveAnnotations());
   registerProductTool(server, dependencies, "secrets_list", "List secret metadata without values", external_exports.object({ project_id: identifier2, environment_id: identifier2 }), (client2, input) => client2.listEnvironmentSecrets({
     projectId: input.project_id,
     environmentId: input.environment_id

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-mcp",
-  "version": "0.1.14",
+  "version": "0.1.17",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/mcp/local-client.ts

@@ -24,6 +24,10 @@ import {
 } from "@ohmyhost/contracts/billing";
 import {
   createProjectDevAccessTicket,
+  ensureProjectDevShareLink,
+  setProjectDevAccessMode,
+  rotateProjectDevShareLink,
+  revokeProjectDevShareLink,
   createCloudflareDnsAuthorization,
   getAccountProfile,
   getCloudflareDnsAuthorizationStatus,
@@ -87,6 +91,7 @@ import {
   reconcileOperation,
   streamOperationEvents,
   type DevAccessTicket,
+  type DevAccessState,
   type CloudflareDnsAuthorization,
   type CloudflareDnsAuthorizationStatus,
   type OhMyHostClient,
@@ -104,6 +109,7 @@ import {
   prepareUserTokenFile,
   ProductApiAuthenticationError,
   parseDevAccessTicket,
+  parseDevAccessState,
   parseCloudflareDnsAuthorization,
   parseCloudflareDnsAuthorizationStatus,
   parsePaidDomain,
@@ -507,6 +513,51 @@ export class GeneratedSdkLocalMcpClient implements LocalMcpProductClient {
   public getProject(projectId: string) {
     return getProject({ project_id: projectId }, { client: this.#client });
   }
+  public async ensureDevShareLink(projectId: string): Promise<DevAccessState> {
+    const result = parseDevAccessState(
+      await ensureProjectDevShareLink({ project_id: projectId }, { client: this.#client }),
+    );
+    if (result.project_id !== projectId) throw new TypeError("Unexpected Dev share project");
+    return result;
+  }
+  public async setDevAccessMode(input: {
+    projectId: string;
+    mode: "protected" | "public";
+    idempotencyKey: string;
+  }): Promise<DevAccessState> {
+    return parseDevAccessState(
+      await setProjectDevAccessMode(
+        {
+          project_id: input.projectId,
+          "Idempotency-Key": input.idempotencyKey,
+          setDevAccessModeRequest: { mode: input.mode },
+        },
+        { client: this.#client },
+      ),
+    );
+  }
+  public async rotateDevShareLink(input: {
+    projectId: string;
+    idempotencyKey: string;
+  }): Promise<DevAccessState> {
+    return parseDevAccessState(
+      await rotateProjectDevShareLink(
+        { project_id: input.projectId, "Idempotency-Key": input.idempotencyKey },
+        { client: this.#client },
+      ),
+    );
+  }
+  public async revokeDevShareLink(input: {
+    projectId: string;
+    idempotencyKey: string;
+  }): Promise<DevAccessState> {
+    return parseDevAccessState(
+      await revokeProjectDevShareLink(
+        { project_id: input.projectId, "Idempotency-Key": input.idempotencyKey },
+        { client: this.#client },
+      ),
+    );
+  }
   public async createDevAccessTicket(projectId: string): Promise<DevAccessTicket> {
     const ticket = parseDevAccessTicket(
       await createProjectDevAccessTicket({ project_id: projectId }, { client: this.#client }),
@@ -675,6 +726,7 @@ export class GeneratedSdkLocalMcpClient implements LocalMcpProductClient {
           organization_id: input.organizationId,
           name: input.name,
           ...(input.dataMode === undefined ? {} : { data_mode: input.dataMode }),
+          ...(input.devAccessMode === undefined ? {} : { dev_access_mode: input.devAccessMode }),
           ...(input.region === undefined ? {} : { region: input.region }),
         },
       },
@@ -716,7 +768,10 @@ export class GeneratedSdkLocalMcpClient implements LocalMcpProductClient {
 
   public planDeployment(input: Parameters<LocalMcpProductClient["planDeployment"]>[0]) {
     return planDeployment(
-      { project_id: input.projectId, planDeploymentRequest: { commit_sha: input.commitSha } },
+      {
+        project_id: input.projectId,
+        planDeploymentRequest: { commit_sha: input.commitSha, environment: input.environment },
+      },
       { client: this.#client },
     );
   }