@biznetgio/neo-app 0.4.22 → 0.4.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.22",
+  "version": "0.4.23",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -105,7 +105,7 @@ export const TOOLS = [
         controlPlane,
         resourceTypes,
         // Verbs this MCP build exposes today (no create-DB/queue/cron/bucket, no costed plan/apply yet).
-        lifecycleVerbs: ['plan', 'apply', 'get_operation', 'create', 'list', 'get', 'deploy', 'scale', 'logs', 'get_variables', 'set_variable', 'estimate', 'bind', 'unbind', 'run_cron', 'delete', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
+        lifecycleVerbs: ['plan', 'apply', 'get_operation', 'wait_operation', 'create', 'list', 'get', 'update', 'deploy', 'scale', 'logs', 'get_variables', 'set_variable', 'estimate', 'scan_repo', 'bind', 'unbind', 'run_cron', 'presign_object', 'delete', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
         bindings: { supported: true, targets: ['neo_db', 'neo_queue'], writeOnly: true, note: 'neo_bind_resource injects DATABASE_URL/NATS_URL server-side at deploy; the secret is never returned (handoff 5)' },
         sourceTypes: ['git', 'image', 'dockerfile', 'local', 'template'],
         environments: ['staging', 'production'],
@@ -661,6 +661,15 @@ export const TOOLS = [
       return result(status, data);
     },
   },
+  {
+    name: 'neo_presign_bucket_object',
+    description: 'Get a time-limited presigned URL to download an object from a bucket (handoff 4.7 — object get). The URL is a short-lived signed link, not long-term credentials.',
+    mutating: false,
+    schema: { type: 'object', properties: { bucketId: str('Bucket id'), object: str('Object key/path') }, required: ['bucketId', 'object'] },
+    async call(api, args) {
+      return (await api.get(`/api/v1/buckets/${args.bucketId}/objects/presign`, { query: { object: args.object } })).data;
+    },
+  },
   // --- Typed bindings (handoff 5): attach a DB/queue to a consumer service. The
   // connection string is injected as an env var SERVER-SIDE at the consumer's next
   // deploy (marked a secret) — it is never returned to the agent (write-only). ---
@@ -785,13 +794,35 @@ export const TOOLS = [
   },
   {
     name: 'neo_get_operation',
-    description: 'Get the status of a stack apply (the operationId/planId from neo_apply_stack): overall status (applying | applied | failed) plus per-resource status (creating | deploying | deployed | failed). Apply waits for each deploy — "applied" means every resource reached a successful deploy (databases/queues rollout-ready), not merely that the manifest was submitted. Poll until terminal.',
+    description: 'Get the status of a stack apply (the operationId/planId from neo_apply_stack). Overall status: applying | applied | partial | failed. Per-resource status: creating | deploying | deployed | ready | blocked | failed, plus a `healthy` flag + `url` for services (apply probes the public URL — "ready" means it actually responded) and `blockedBy` when a consumer\'s foundation failed. Poll until terminal.',
     mutating: false,
     schema: { type: 'object', properties: { operationId: str('Operation id (= plan id from neo_apply_stack)') }, required: ['operationId'] },
     async call(api, args) {
       return redactSecrets((await api.get(`/api/v1/plans/${args.operationId}`)).data);
     },
   },
+  {
+    name: 'neo_wait_operation',
+    description: 'Wait for a stack apply (operationId from neo_apply_stack) to finish — polls until the status is terminal (applied | partial | failed) or the timeout elapses, then returns the final operation with per-resource status (secrets redacted). Convenience over polling neo_get_operation yourself.',
+    mutating: false,
+    schema: {
+      type: 'object',
+      properties: { operationId: str('Operation id (= plan id)'), timeoutMs: int('Max wait in milliseconds (default 180000)') },
+      required: ['operationId'],
+    },
+    async call(api, args) {
+      const deadline = Date.now() + (args.timeoutMs && args.timeoutMs > 0 ? args.timeoutMs : 180000);
+      const terminal = new Set(['applied', 'partial', 'failed']);
+      let op;
+      for (;;) {
+        op = redactSecrets((await api.get(`/api/v1/plans/${args.operationId}`)).data);
+        if (terminal.has(op.status) || Date.now() >= deadline) break;
+        await new Promise((r) => setTimeout(r, 5000));
+      }
+      if (op && !terminal.has(op.status)) return { ...op, timedOut: true, note: 'still in progress at timeout — call neo_get_operation again' };
+      return op;
+    },
+  },
   // --- Cleanup (handoff 3.6): MCP can delete every resource type it can reach, so
   // an agent never leaks a resource it created. These are DESTRUCTIVE and permanent;
   // the server hard-deletes the record and tears down the running workload. ---