@biznetgio/neo-app 0.4.17 → 0.4.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.17",
+  "version": "0.4.18",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -105,7 +105,8 @@ export const TOOLS = [
         controlPlane,
         resourceTypes,
         // Verbs this MCP build exposes today (no create-DB/queue/cron/bucket, no costed plan/apply yet).
-        lifecycleVerbs: ['create', 'list', 'get', 'deploy', 'scale', 'logs', 'get_variables', 'set_variable', 'delete', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
+        lifecycleVerbs: ['create', 'list', 'get', 'deploy', 'scale', 'logs', 'get_variables', 'set_variable', 'estimate', 'bind', 'unbind', 'run_cron', 'delete', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
+        bindings: { supported: true, targets: ['neo_db', 'neo_queue'], writeOnly: true, note: 'neo_bind_resource injects DATABASE_URL/NATS_URL server-side at deploy; the secret is never returned (handoff 5)' },
         sourceTypes: ['git', 'image', 'dockerfile', 'local', 'template'],
         environments: ['staging', 'production'],
         pricing,
@@ -572,6 +573,50 @@ export const TOOLS = [
       return redactSecrets((await api.get(`/api/v1/buckets/${args.bucketId}`)).data);
     },
   },
+  // --- Typed bindings (handoff 5): attach a DB/queue to a consumer service. The
+  // connection string is injected as an env var SERVER-SIDE at the consumer's next
+  // deploy (marked a secret) — it is never returned to the agent (write-only). ---
+  {
+    name: 'neo_bind_resource',
+    description:
+      'Bind a managed database or queue to a consumer service so its connection is injected as an environment variable at the consumer\'s next deploy — WITHOUT ever exposing the secret to you (handoff 5, write-only). envKey defaults to DATABASE_URL (neo_db) or NATS_URL (neo_queue). After binding, redeploy the consumer (neo_deploy) for it to take effect. The target and consumer must be in the same project.',
+    mutating: true,
+    schema: {
+      type: 'object',
+      properties: {
+        appId: str('Consumer service/app id that will receive the env var (from neo_list_services)'),
+        targetType: { type: 'string', enum: ['neo_db', 'neo_queue'], description: 'neo_db | neo_queue — the resource to attach' },
+        targetId: str('The database or queue id to bind'),
+        envKey: str('Env var name to inject (optional; default DATABASE_URL for neo_db, NATS_URL for neo_queue)'),
+      },
+      required: ['appId', 'targetType', 'targetId'],
+    },
+    async call(api, args) {
+      const { appId, ...body } = args;
+      const { status, data } = await api.post(`/api/v1/apps/${appId}/bindings`, body);
+      return redactSecrets(result(status, data));
+    },
+  },
+  {
+    name: 'neo_list_bindings',
+    description: 'List the resource bindings attached to a consumer service — the env keys and target resources, never the secret connection values.',
+    mutating: false,
+    schema: { type: 'object', properties: { appId: str('Consumer service/app id') }, required: ['appId'] },
+    async call(api, args) {
+      return redactSecrets((await api.get(`/api/v1/apps/${args.appId}/bindings`)).data);
+    },
+  },
+  {
+    name: 'neo_unbind_resource',
+    description: 'Remove a resource binding by id. The env var stops being injected on the consumer\'s next deploy. Removes the wiring only — the database/queue itself is untouched.',
+    mutating: true,
+    destructive: true,
+    schema: { type: 'object', properties: { bindingId: str('Binding id (from neo_list_bindings)') }, required: ['bindingId'] },
+    async call(api, args) {
+      const { status, data } = await api.del(`/api/v1/bindings/${args.bindingId}`);
+      return result(status, data);
+    },
+  },
   // --- Cleanup (handoff 3.6): MCP can delete every resource type it can reach, so
   // an agent never leaks a resource it created. These are DESTRUCTIVE and permanent;
   // the server hard-deletes the record and tears down the running workload. ---