@biznetgio/neo-app 0.4.35 → 0.4.36

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.35",
+  "version": "0.4.36",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -333,7 +333,7 @@ export const TOOLS = [
   },
   {
     name: 'neo_scale_service',
-    description: 'Scale a service to N replicas. May return pending_approval under org policy.',
+    description: 'Scale a service to N replicas. Scaling changes cost, so without confirm:true it returns the new estimated cost and scales nothing (re-call with confirm:true). May return pending_approval under org policy.',
     mutating: true,
     schema: {
       type: 'object',
@@ -341,10 +341,22 @@ export const TOOLS = [
         projectId: str('Project id'),
         service: str('Service/app name'),
         replicas: int('Desired replica count (>=0)'),
+        confirm: { type: 'boolean', description: 'Approve the cost change: without confirm:true the tool returns the new cost and scales nothing.' },
       },
       required: ['projectId', 'service', 'replicas'],
     },
     async call(api, args) {
+      if (args.confirm !== true) {
+        let computeTier;
+        try {
+          const apps = (await api.get(`/api/v1/projects/${args.projectId}/apps`)).data;
+          const list = Array.isArray(apps) ? apps : (apps.applications || []);
+          const svc = list.find((a) => a.name === args.service || a.id === args.service);
+          computeTier = svc && (svc.cpuLimit || svc.computeTier);
+        } catch { /* best effort — gate regardless */ }
+        const gate = await confirmCost(api, args, { computeTier, replicas: args.replicas });
+        if (gate) return { ...gate, change: `scale "${args.service}" to ${args.replicas} replica(s)`, message: 'Scaling changes cost — show the user and re-call with confirm:true to apply.' };
+      }
       const { status, data } = await api.post(
         `/api/v1/projects/${args.projectId}/services/${args.service}/scale`,
         { replicas: args.replicas }
@@ -641,10 +653,16 @@ export const TOOLS = [
         databaseId: str('Database id'),
         volumeSize: str('New storage size, e.g. "20Gi" — must be >= current (grow-only)'),
         replicas: int('Read/failover replicas (CNPG/postgres); total instances = 1 + replicas'),
+        confirm: { type: 'boolean', description: 'Approve the cost change: without confirm:true a storage/replica resize returns the new cost and applies nothing.' },
       },
       required: ['databaseId'],
     },
     async call(api, args) {
+      const costChanging = args.volumeSize || args.replicas !== undefined;
+      if (costChanging && args.confirm !== true) {
+        const gate = await confirmCost(api, args, { storageGB: gbFromSize(args.volumeSize), replicas: args.replicas });
+        if (gate) return { ...gate, change: 'resize database (storage/replicas)', message: 'Resizing changes cost — re-call with confirm:true to apply.' };
+      }
       const body = {};
       if (args.volumeSize) body.volumeSize = args.volumeSize;
       if (args.replicas !== undefined) body.replicas = args.replicas;
@@ -807,11 +825,17 @@ export const TOOLS = [
         dlqEnabled: { type: 'boolean', description: 'Enable/disable the dead-letter queue' },
         volumeSize: str('New storage size, e.g. "20Gi" — must be >= current (grow-only)'),
         retention: { type: 'object', description: 'Retention policy {maxAgeSeconds, maxBytes, maxMsgs}' },
+        confirm: { type: 'boolean', description: 'Approve the cost change: without confirm:true a storage/plan change returns the new cost and applies nothing. DLQ/retention-only edits apply directly.' },
       },
       required: ['queueId'],
     },
     async call(api, args) {
-      const { queueId, ...body } = args;
+      const costChanging = args.volumeSize || args.planClass;
+      if (costChanging && args.confirm !== true) {
+        const gate = await confirmCost(api, args, { storageGB: gbFromSize(args.volumeSize) });
+        if (gate) return { ...gate, change: 'update queue (storage/plan)', message: 'This changes cost — re-call with confirm:true to apply.' };
+      }
+      const { queueId, confirm, orgId, ...body } = args;
       const { status, data } = await api.put(`/api/v1/queues/${queueId}`, body);
       return redactSecrets(result(status, data));
     },