@biznetgio/neo-app 0.4.33 → 0.4.35

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.33",
+  "version": "0.4.35",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -40,6 +40,26 @@ function requireEnv(env) {
   return e;
 }
 
+// deleteAndConverge deletes a resource, then polls its endpoint until the inventory
+// actually converges (GET → 404), so a delete isn't reported done while the record
+// still exists. Returns a durable operation reference (`del-<id>`) + convergence
+// state (handoff 3.6; 0.4.34 retest §9 "every delete returns a durable operation ID").
+async function deleteAndConverge(api, path, resourceId, kind) {
+  const { status, data } = await api.del(path);
+  let converged = false, checks = 0;
+  for (let i = 0; i < 12; i++) {
+    checks++;
+    try {
+      await api.get(path);
+      await new Promise((r) => setTimeout(r, 500)); // still present — keep polling
+    } catch (e) {
+      if (e && e.status === 404) { converged = true; break; }
+      await new Promise((r) => setTimeout(r, 500));
+    }
+  }
+  return { operationId: 'del-' + resourceId, kind, status: (data && data.status) || 'deleted', converged, convergenceChecks: checks };
+}
+
 // gbFromSize parses "10Gi"/"10G"/"10" → 10 (integer GB), else undefined.
 function gbFromSize(v) {
   if (v == null) return undefined;
@@ -820,8 +840,16 @@ export const TOOLS = [
         ],
         branches: {
           app_command: 'Provide serviceId (an existing service) OR image, plus command (argv array).',
-          http_endpoint: 'Provide url and method (GET/POST/…).',
+          http_endpoint: 'Provide url and method (GET/POST/…). Optional: headers (object), body + contentType, expectedStatus (exact code required for success), timeoutSeconds, retryCount, concurrencyPolicy (Allow|Forbid|Replace).',
         },
+        httpOptions: [
+          { field: 'headers', ask: 'Any request headers? (e.g. Authorization) — object', optional: true },
+          { field: 'body', ask: 'A request body? (+ contentType, e.g. application/json)', optional: true },
+          { field: 'expectedStatus', ask: 'A specific expected HTTP status for success? (default: any 2xx)', optional: true },
+          { field: 'timeoutSeconds', ask: 'A per-run timeout (seconds)?', optional: true },
+          { field: 'retryCount', ask: 'How many retries on failure?', optional: true },
+          { field: 'concurrencyPolicy', ask: 'If a run overruns the next schedule: Allow | Forbid | Replace?', optional: true },
+        ],
         examples: [
           { intent: 'Run `node cleanup.js` in my web service every night at 2am Jakarta', args: { name: 'nightly-cleanup', mode: 'app_command', scheduleType: 'cron', schedule: '0 2 * * *', timezone: 'Asia/Jakarta', serviceId: '<web service id>', command: ['node', 'cleanup.js'], environment: 'staging' } },
           { intent: 'Ping a health URL every 15 minutes', args: { name: 'healthcheck', mode: 'http_endpoint', scheduleType: 'interval', intervalMinutes: 15, url: 'https://example.app/health', method: 'GET', environment: 'production' } },
@@ -849,6 +877,13 @@ export const TOOLS = [
         command: { type: 'array', items: { type: 'string' }, description: 'Command argv (mode=app_command)' },
         url: str('Target URL (mode=http_endpoint)'),
         method: str('HTTP method (mode=http_endpoint), e.g. GET/POST'),
+        headers: { type: 'object', description: 'HTTP request headers (mode=http_endpoint), e.g. {"Authorization":"Bearer …"}. Secret header values are redacted when read back.' },
+        body: str('HTTP request body (mode=http_endpoint)'),
+        contentType: str('Content-Type for the body (mode=http_endpoint), e.g. "application/json" — merged into headers'),
+        expectedStatus: int('Exact HTTP status a run must receive to count as success (mode=http_endpoint; default: any 2xx)'),
+        timeoutSeconds: int('Per-run timeout in seconds (optional) → activeDeadlineSeconds'),
+        retryCount: int('Retries on failure (optional) → backoffLimit'),
+        concurrencyPolicy: { type: 'string', enum: ['Allow', 'Forbid', 'Replace'], description: 'Overlap policy if a run is still going when the next is due (optional, default Allow)' },
         environment: { type: 'string', enum: ['staging', 'production'], description: 'REQUIRED — staging or production (never defaulted, handoff §2)' },
         confirm: { type: 'boolean', description: 'Approve & Create: without confirm:true the tool returns the cost (crons are billed per run — variable) and creates nothing. Re-call with confirm:true to create.' },
       },
@@ -858,7 +893,11 @@ export const TOOLS = [
       requireEnv(args.environment);
       const gate = await confirmCost(api, args, {}); // cron cost is variable (per-run) — gate surfaces the rate
       if (gate) return gate;
-      const { projectId, confirm, orgId, ...body } = args;
+      // Merge contentType into headers for convenience (unless already set).
+      if (args.contentType) {
+        args = { ...args, headers: { 'Content-Type': args.contentType, ...(args.headers || {}) } };
+      }
+      const { projectId, confirm, orgId, contentType, ...body } = args;
       const { status, data } = await api.post(`/api/v1/projects/${projectId}/crons`, body);
       return redactSecrets(result(status, data));
     },
@@ -1046,7 +1085,7 @@ export const TOOLS = [
   {
     name: 'neo_plan_stack',
     description:
-      'Create an immutable, COSTED plan for a whole stack (services + databases/queues/buckets + scheduled jobs + bindings) WITHOUT creating anything — zero-write (handoff 3.3). Supports kind: app|database|queue|bucket|cron and bindings to neo_db|neo_queue|neo_object_storage. Returns planId, planHash, itemized monthly/hourly cost, and ordered phases. Show the cost to the user for approval, then call neo_apply_stack with planId+planHash. The plan expires in 15 minutes.',
+      'Create an immutable, COSTED plan for a whole stack (services + databases/queues/buckets + scheduled jobs + bindings) WITHOUT creating anything — zero-write (handoff 3.3). Supports kind: app|database|queue|bucket|cron and bindings to neo_db|neo_queue|neo_object_storage. An http_endpoint cron can target a same-stack web app by name (targetService+targetPath) — its URL is resolved at apply. Returns planId, planHash, itemized monthly/hourly cost, and ordered phases. Show the cost to the user for approval, then call neo_apply_stack with planId+planHash. The plan expires in 15 minutes.',
     mutating: false,
     schema: {
       type: 'object',
@@ -1081,7 +1120,9 @@ export const TOOLS = [
               timezone: str('cron: IANA timezone (optional)'),
               serviceId: str('cron app_command: target service — another resource NAME in this stack, or a literal service id'),
               command: { type: 'array', items: { type: 'string' }, description: 'cron app_command: command argv' },
-              url: str('cron http_endpoint: target URL'),
+              url: str('cron http_endpoint: literal target URL'),
+              targetService: str('cron http_endpoint: name of a web app resource IN THIS STACK to hit — its deployed URL is resolved at apply (use instead of a literal url for a same-stack service)'),
+              targetPath: str('cron http_endpoint: path appended to the targetService URL (e.g. "/cron")'),
               method: str('cron http_endpoint: HTTP method'),
             },
             required: ['kind', 'name'],
@@ -1226,8 +1267,7 @@ export const TOOLS = [
     destructive: true,
     schema: { type: 'object', properties: { appId: str('Service/app id (from neo_list_services)') }, required: ['appId'] },
     async call(api, args) {
-      const { status, data } = await api.del(`/api/v1/apps/${args.appId}`);
-      return result(status, data);
+      return deleteAndConverge(api, `/api/v1/apps/${args.appId}`, args.appId, 'service');
     },
   },
   {
@@ -1237,8 +1277,7 @@ export const TOOLS = [
     destructive: true,
     schema: { type: 'object', properties: { databaseId: str('Database id') }, required: ['databaseId'] },
     async call(api, args) {
-      const { status, data } = await api.del(`/api/v1/databases/${args.databaseId}`);
-      return result(status, data);
+      return deleteAndConverge(api, `/api/v1/databases/${args.databaseId}`, args.databaseId, 'database');
     },
   },
   {
@@ -1248,8 +1287,7 @@ export const TOOLS = [
     destructive: true,
     schema: { type: 'object', properties: { queueId: str('Queue id') }, required: ['queueId'] },
     async call(api, args) {
-      const { status, data } = await api.del(`/api/v1/queues/${args.queueId}`);
-      return result(status, data);
+      return deleteAndConverge(api, `/api/v1/queues/${args.queueId}`, args.queueId, 'queue');
     },
   },
   {
@@ -1259,8 +1297,7 @@ export const TOOLS = [
     destructive: true,
     schema: { type: 'object', properties: { cronId: str('Cron/scheduled-job id') }, required: ['cronId'] },
     async call(api, args) {
-      const { status, data } = await api.del(`/api/v1/crons/${args.cronId}`);
-      return result(status, data);
+      return deleteAndConverge(api, `/api/v1/crons/${args.cronId}`, args.cronId, 'cron');
     },
   },
   {
@@ -1270,8 +1307,7 @@ export const TOOLS = [
     destructive: true,
     schema: { type: 'object', properties: { bucketId: str('Bucket id') }, required: ['bucketId'] },
     async call(api, args) {
-      const { status, data } = await api.del(`/api/v1/buckets/${args.bucketId}`);
-      return result(status, data);
+      return deleteAndConverge(api, `/api/v1/buckets/${args.bucketId}`, args.bucketId, 'bucket');
     },
   },
   {