@biznetgio/neo-app 0.4.23 → 0.4.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.23",
+  "version": "0.4.25",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/api.js

@@ -58,6 +58,18 @@ export class NeoApi {
     return { status: res.status, data: payload };
   }
 
+  // postForm sends a multipart/form-data body (FormData); fetch sets the boundary.
+  async postForm(path, form) {
+    const headers = {};
+    if (this.token) headers.Authorization = `Bearer ${this.token}`;
+    const res = await fetch(this.baseUrl + path, { method: 'POST', headers, body: form });
+    const payload = await res.json().catch(() => null);
+    if (res.status >= 400) {
+      throw new ApiError(res.status, (payload && payload.error) || res.statusText, payload);
+    }
+    return { status: res.status, data: payload };
+  }
+
   get(path, opts) {
     return this.request('GET', path, opts);
   }

package/src/mcp/tools.js

@@ -2,8 +2,8 @@
 // map). Read-only vs mutating is annotated; mutating tools surface the server's
 // 202 pending_approval result verbatim instead of treating it as success/failure.
 
-import { resolve } from 'node:path';
-import { statSync } from 'node:fs';
+import { resolve, basename } from 'node:path';
+import { statSync, readFileSync } from 'node:fs';
 import { deploySource } from '../deploySource.js';
 import { pkgVersion } from '../util.js';
 import { estimateCost } from '../pricing.js';
@@ -94,10 +94,10 @@ export const TOOLS = [
         { type: 'template', create: true, deploy: true, scale: false, logs: true, variables: true, delete: true },
         { type: 'static_site', create: 'via_folder', deploy: true, scale: false, logs: true, variables: true, delete: true, note: 'neo_deploy_folder serviceType=static_site (auto-detected for static-only folders); auto-detection from a repo/monorepo is still TODO (handoff 6)' },
         { type: 'worker', create: 'via_folder', deploy: true, scale: true, logs: true, variables: true, delete: true, note: 'neo_deploy_folder serviceType=worker — no public ingress; repo auto-detection still TODO (handoff 6)' },
-        { type: 'database', create: true, get: true, list: true, update: true, delete: true, note: 'neo_create/list/get/update(resize)/delete_database (0.4.15-0.4.21); backup/restore still TODO (handoff 4.4)' },
-        { type: 'queue', create: true, get: true, list: true, delete: true, note: 'neo_create/list/get/delete_queue (0.4.15); update/plan still TODO (handoff 4.5)' },
+        { type: 'database', create: true, get: true, list: true, update: true, backup: true, delete: true, note: 'neo_create/list/get/update(resize)/delete_database + backup (list/create/run); restore still TODO (handoff 4.4)' },
+        { type: 'queue', create: true, get: true, list: true, update: true, delete: true, note: 'neo_create/list/get/update/delete_queue (0.4.15-0.4.25) (handoff 4.5)' },
         { type: 'cron', create: true, get: true, list: true, run: true, runs: true, delete: true, note: 'neo_create/list/get/run/list_runs/delete_cron (0.4.15-0.4.21) (handoff 4.6)' },
-        { type: 'object_storage', create: true, get: true, list: true, objects: true, delete: true, note: 'neo_create/list/get/delete_bucket + list/delete objects (0.4.15-0.4.21); object upload still TODO (handoff 4.7)' },
+        { type: 'object_storage', create: true, get: true, list: true, objects: true, upload: true, delete: true, note: 'neo_create/list/get/delete_bucket + list/upload/presign(get)/delete objects (0.4.15-0.4.25) (handoff 4.7)' },
       ];
 
       return {
@@ -232,6 +232,26 @@ export const TOOLS = [
       return out;
     },
   },
+  {
+    name: 'neo_set_service_variable',
+    description:
+      'Set ONE PER-SERVICE environment variable on a specific service (merged server-side — other vars are preserved, unlike project-wide neo_set_variable). Pass secret:true to store it as a cluster Secret. Redeploy the service (neo_deploy) for it to take effect. The value is never echoed back.',
+    mutating: true,
+    schema: {
+      type: 'object',
+      properties: {
+        appId: str('Service/app id (from neo_list_services)'),
+        key: str('Variable name'),
+        value: str('Variable value'),
+        secret: { type: 'boolean', description: 'Store as a secret (default false)' },
+      },
+      required: ['appId', 'key', 'value'],
+    },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/apps/${args.appId}/variables`, { key: args.key, value: args.value, secret: !!args.secret });
+      return result(status, data); // {status:"set", key, redeployRequired} — no value returned
+    },
+  },
   {
     name: 'neo_scale_service',
     description: 'Scale a service to N replicas. May return pending_approval under org policy.',
@@ -328,17 +348,20 @@ export const TOOLS = [
         suggestedServiceType: s.type === 'static' ? 'static_site' : 'web',
         suggestedBuildType: s.type === 'docker' ? 'dockerfile' : 'railpack',
         contextDir: s.path || undefined,
+        detectedDependencies: s.deps || [], // database | queue | object_storage, inferred from the manifest
       }));
+      const anyDeps = components.some((c) => c.detectedDependencies.length);
       return {
         repoUrl: args.repoUrl,
         count: components.length,
         components,
         note:
-          components.length > 1
+          (components.length > 1
             ? 'Monorepo: multiple deployable components. Ask the user which to deploy and create each selected one with its `contextDir` — do NOT collapse them into one service (handoff 6). Worker vs web cannot be inferred from the tree alone; confirm the type with the user.'
             : components.length === 1
               ? 'One deployable component found.'
-              : 'No deployable component found (no Dockerfile/package.json/go.mod/requirements.txt/index.html/… at any root).',
+              : 'No deployable component found (no Dockerfile/package.json/go.mod/requirements.txt/index.html/… at any root).')
+          + (anyDeps ? ' A component lists detectedDependencies (database/queue/object_storage) from its manifest — consider planning those resources and binding them (neo_bind_resource); confirm with the user first.' : ''),
       };
     },
   },
@@ -494,6 +517,45 @@ export const TOOLS = [
       return redactSecrets(result(status, data));
     },
   },
+  {
+    name: 'neo_list_backups',
+    description: 'List configured database backups in a project (handoff 4.4): schedule, destination, last run status.',
+    mutating: false,
+    schema: { type: 'object', properties: { projectId: str('Project id') }, required: ['projectId'] },
+    async call(api, args) {
+      return redactSecrets((await api.get(`/api/v1/projects/${args.projectId}/backups`)).data);
+    },
+  },
+  {
+    name: 'neo_create_backup',
+    description: 'Configure a backup for a managed database (handoff 4.4). `cron` sets a schedule (empty = manual only); `destination` is local (default) or s3. Trigger it with neo_run_backup.',
+    mutating: true,
+    schema: {
+      type: 'object',
+      properties: {
+        projectId: str('Project id'),
+        databaseId: str('Database id to back up'),
+        cron: str('Cron schedule (optional; empty = manual)'),
+        destination: { type: 'string', enum: ['local', 's3'], description: 'local (default) | s3' },
+      },
+      required: ['projectId', 'databaseId'],
+    },
+    async call(api, args) {
+      const { projectId, ...body } = args;
+      const { status, data } = await api.post(`/api/v1/projects/${projectId}/backups`, body);
+      return redactSecrets(result(status, data));
+    },
+  },
+  {
+    name: 'neo_run_backup',
+    description: 'Trigger a configured database backup to run now (handoff 4.4).',
+    mutating: true,
+    schema: { type: 'object', properties: { backupId: str('Backup id (from neo_list_backups)') }, required: ['backupId'] },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/backups/${args.backupId}/run`);
+      return redactSecrets(result(status, data));
+    },
+  },
   {
     name: 'neo_create_queue',
     description: 'Create a managed queue in a project (handoff 4.5). Credentials redacted. May return pending_approval.',
@@ -535,6 +597,27 @@ export const TOOLS = [
       return redactSecrets((await api.get(`/api/v1/queues/${args.queueId}`)).data);
     },
   },
+  {
+    name: 'neo_update_queue',
+    description: 'Update a managed queue (handoff 4.5): plan class, DLQ, retention, and storage (grow-only — a smaller volumeSize is rejected). Redeploy the queue for it to take effect.',
+    mutating: true,
+    schema: {
+      type: 'object',
+      properties: {
+        queueId: str('Queue id'),
+        planClass: str('dev | standard'),
+        dlqEnabled: { type: 'boolean', description: 'Enable/disable the dead-letter queue' },
+        volumeSize: str('New storage size, e.g. "20Gi" — must be >= current (grow-only)'),
+        retention: { type: 'object', description: 'Retention policy {maxAgeSeconds, maxBytes, maxMsgs}' },
+      },
+      required: ['queueId'],
+    },
+    async call(api, args) {
+      const { queueId, ...body } = args;
+      const { status, data } = await api.put(`/api/v1/queues/${queueId}`, body);
+      return redactSecrets(result(status, data));
+    },
+  },
   {
     name: 'neo_create_cron',
     description: 'Create a scheduled job (cron) in a project (handoff 4.6). Target is either an existing service command (mode=app_command, serviceId+command) or an HTTP endpoint (mode=http_endpoint, url+method). Schedule via scheduleType (cron|interval|once|seconds) + schedule/intervalMinutes. May return pending_approval.',
@@ -670,21 +753,46 @@ export const TOOLS = [
       return (await api.get(`/api/v1/buckets/${args.bucketId}/objects/presign`, { query: { object: args.object } })).data;
     },
   },
+  {
+    name: 'neo_upload_bucket_object',
+    description: 'Upload a LOCAL file to an object-storage bucket (handoff 4.7 — object put). The path is on the machine running this MCP server. objectName defaults to the file\'s basename.',
+    mutating: true,
+    schema: {
+      type: 'object',
+      properties: {
+        bucketId: str('Bucket id'),
+        filePath: str('Local file path to upload'),
+        objectName: str('Object key/name in the bucket (optional; default the file basename)'),
+      },
+      required: ['bucketId', 'filePath'],
+    },
+    async call(api, args) {
+      const p = resolve(args.filePath);
+      const st = statSync(p);
+      if (!st.isFile()) throw new Error(`not a file: ${args.filePath}`);
+      const name = args.objectName || basename(p);
+      const form = new FormData();
+      form.append('object_name', name);
+      form.append('file', new Blob([readFileSync(p)]), name);
+      const { status, data } = await api.postForm(`/api/v1/buckets/${args.bucketId}/objects`, form);
+      return result(status, data);
+    },
+  },
   // --- Typed bindings (handoff 5): attach a DB/queue to a consumer service. The
   // connection string is injected as an env var SERVER-SIDE at the consumer's next
   // deploy (marked a secret) — it is never returned to the agent (write-only). ---
   {
     name: 'neo_bind_resource',
     description:
-      'Bind a managed database or queue to a consumer service so its connection is injected as an environment variable at the consumer\'s next deploy — WITHOUT ever exposing the secret to you (handoff 5, write-only). envKey defaults to DATABASE_URL (neo_db) or NATS_URL (neo_queue). After binding, redeploy the consumer (neo_deploy) for it to take effect. The target and consumer must be in the same project.',
+      'Bind a managed database, queue, or object-storage bucket to a consumer service so its connection is injected as environment variable(s) at the consumer\'s next deploy — WITHOUT ever exposing the secret to you (handoff 5, write-only). envKey defaults: DATABASE_URL (neo_db), NATS_URL (neo_queue); for neo_object_storage it is a PREFIX (default S3) injecting <P>_ENDPOINT/_BUCKET/_REGION + secret <P>_ACCESS_KEY/_SECRET_KEY. After binding, redeploy the consumer. Target and consumer must be in the same project.',
     mutating: true,
     schema: {
       type: 'object',
       properties: {
         appId: str('Consumer service/app id that will receive the env var (from neo_list_services)'),
-        targetType: { type: 'string', enum: ['neo_db', 'neo_queue'], description: 'neo_db | neo_queue — the resource to attach' },
-        targetId: str('The database or queue id to bind'),
-        envKey: str('Env var name to inject (optional; default DATABASE_URL for neo_db, NATS_URL for neo_queue)'),
+        targetType: { type: 'string', enum: ['neo_db', 'neo_queue', 'neo_object_storage'], description: 'neo_db | neo_queue | neo_object_storage — the resource to attach' },
+        targetId: str('The database, queue, or bucket id to bind'),
+        envKey: str('Env var name / prefix (optional; default DATABASE_URL, NATS_URL, or S3 prefix)'),
       },
       required: ['appId', 'targetType', 'targetId'],
     },