@biznetgio/neo-app 0.4.37 → 0.4.39

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.37",
+  "version": "0.4.39",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -77,9 +77,11 @@ async function confirmCost(api, args, spec) {
   let book = null;
   try { book = (await api.get(orgId ? `/api/v1/orgs/${orgId}/pricing` : '/api/v1/pricing')).data; }
   catch { try { book = (await api.get('/api/v1/pricing')).data; } catch { book = null; } }
+  let cost = null;
+  if (book) { try { cost = estimateCost(book, spec); } catch { cost = null; } } // never fail the gate on an estimate error
   return {
     requiresConfirmation: true,
-    cost: book ? estimateCost(book, spec) : null,
+    cost,
     priceBook: orgId ? `org:${orgId}` : 'global-defaults',
     message: 'Billable resource — show the user this cost, then re-call with confirm:true to create. For an immutable, server-pinned quote use neo_plan_stack → neo_apply_stack.',
   };
@@ -140,10 +142,10 @@ export const TOOLS = [
       // Honest support matrix: what THIS build does, not the roadmap. `create`
       // is true, false, or 'via_folder' (created through neo_deploy_folder).
       const resourceTypes = [
-        { type: 'web', create: true, deploy: true, scale: true, logs: true, variables: true, delete: true },
-        { type: 'template', create: true, deploy: true, scale: false, logs: true, variables: true, delete: true },
-        { type: 'static_site', create: 'via_folder', deploy: true, scale: false, logs: true, variables: true, delete: true, nativeStatic: true, note: 'neo_deploy_folder serviceType=static_site with buildCommand/publishDirectory → native nginx static hosting (0.4.27); auto-detected for static-only folders' },
-        { type: 'worker', create: 'via_folder', deploy: true, scale: true, logs: true, variables: true, delete: true, note: 'neo_deploy_folder serviceType=worker — no public ingress; repo auto-detection still TODO (handoff 6)' },
+        { type: 'web', create: true, deploy: true, scale: true, update: true, domains: true, health: true, autoscale: true, logs: true, variables: true, usage: true, delete: true, note: 'neo_get/update_service (compute/replicas/autoscale/port/command/domain/tls/path/health) + scale + add/remove_service_domain + get_logs + service_usage' },
+        { type: 'template', create: true, deploy: true, scale: false, update: true, logs: true, variables: true, delete: true },
+        { type: 'static_site', create: 'via_folder', deploy: true, scale: false, update: true, domains: true, logs: true, variables: true, delete: true, nativeStatic: true, note: 'neo_deploy_folder serviceType=static_site with buildCommand/publishDirectory → native nginx (0.4.27); neo_update_service for domain/tls/path' },
+        { type: 'worker', create: 'via_folder', deploy: true, scale: true, update: true, health: true, autoscale: true, logs: true, variables: true, usage: true, delete: true, note: 'neo_deploy_folder serviceType=worker (no public ingress) + neo_update_service (compute/replicas/autoscale/command/health)' },
         { type: 'database', create: true, deploy: true, get: true, list: true, update: true, backup: true, restore: true, verify: true, publicAccess: true, delete: true, note: 'neo_create/deploy/list/get/update(resize)/delete_database + backup + restore (postgres, local backups) + verify (SQL round-trip) + enable/disable_db_public_access (handoff 4.4)' },
         { type: 'queue', create: true, deploy: true, get: true, list: true, update: true, verify: true, publicAccess: true, delete: true, note: 'neo_create/deploy/list/get/update/verify(publish→persist)/delete_queue + enable/disable_queue_public_access (handoff 4.5)' },
         { type: 'cron', create: true, get: true, list: true, run: true, runs: true, questionnaire: true, delete: true, note: 'neo_cron_questionnaire (guided) + create/list/get/run/list_runs/delete_cron (handoff 4.6)' },
@@ -155,7 +157,7 @@ export const TOOLS = [
         controlPlane,
         resourceTypes,
         // Verbs this MCP build exposes today (no create-DB/queue/cron/bucket, no costed plan/apply yet).
-        lifecycleVerbs: ['plan', 'apply', 'get_operation', 'wait_operation', 'delete_stack', 'reconcile_usage', 'service_usage', 'create', 'list', 'get', 'update', 'verify', 'enable_public_access', 'disable_public_access', 'deploy', 'scale', 'logs', 'get_variables', 'set_variable', 'estimate', 'scan_repo', 'bind', 'unbind', 'run_cron', 'cron_questionnaire', 'presign_object', 'backup', 'restore', 'delete', 'delete_project', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
+        lifecycleVerbs: ['plan', 'apply', 'get_operation', 'wait_operation', 'delete_stack', 'reconcile_usage', 'service_usage', 'create', 'list', 'get', 'update', 'verify', 'enable_public_access', 'disable_public_access', 'deploy', 'scale', 'add_domain', 'remove_domain', 'logs', 'get_variables', 'set_variable', 'estimate', 'scan_repo', 'bind', 'unbind', 'run_cron', 'cron_questionnaire', 'presign_object', 'backup', 'restore', 'delete', 'delete_project', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
         bindings: { supported: true, targets: ['neo_db', 'neo_queue', 'neo_object_storage'], writeOnly: true, note: 'neo_bind_resource + neo_plan_stack bindings inject DATABASE_URL / NATS_URL (+ NATS_HOST/PORT/USER/PASSWORD) / S3_* server-side at deploy; secrets never returned (handoff 5)' },
         sourceTypes: ['git', 'image', 'dockerfile', 'local', 'template'],
         environments: ['staging', 'production'],
@@ -240,6 +242,81 @@ export const TOOLS = [
       return (await api.get(`/api/v1/projects/${args.projectId}/apps`)).data;
     },
   },
+  {
+    name: 'neo_get_service',
+    description: 'Get one service/app by id — its type, compute, replicas/autoscale, port, command, domain/TLS/custom domains, health-check paths, and env keys (secret values redacted). Redeploy for config changes to take effect.',
+    mutating: false,
+    schema: { type: 'object', properties: { appId: str('Service/app id (from neo_list_services)') }, required: ['appId'] },
+    async call(api, args) {
+      return redactSecrets((await api.get(`/api/v1/apps/${args.appId}`)).data);
+    },
+  },
+  {
+    name: 'neo_update_service',
+    description: 'Update a service/app config (handoff §4.1/§4.2). Exposes compute (computeTier OR cpuLimit+memoryLimit), replicas, autoscale, port, command, domain, tls, ingress path, and health/liveness/readiness/startup checks. Cost-changing fields (compute/replicas/autoscale) require confirm:true — without it the new cost is returned and nothing is applied. Redeploy the service for changes to take effect. Omitted fields are left unchanged.',
+    mutating: true,
+    schema: {
+      type: 'object',
+      properties: {
+        appId: str('Service/app id'),
+        computeTier: str('Bundled compute tier (micro | small | medium | large | xlarge)'),
+        cpuLimit: str('Custom CPU limit, e.g. "500m" (use with memoryLimit; unbundled)'),
+        memoryLimit: str('Custom memory limit, e.g. "512Mi" (unbundled)'),
+        replicas: int('Fixed replica count'),
+        autoscaleMin: int('Autoscale min replicas'),
+        autoscaleMax: int('Autoscale max replicas'),
+        autoscaleCpu: int('Autoscale target CPU %'),
+        autoscaleMemory: int('Autoscale target memory %'),
+        port: int('Container port'),
+        command: { type: 'array', items: { type: 'string' }, description: 'Override the image command (argv)' },
+        domain: str('Primary domain ("" clears it back to the default host)'),
+        tls: { type: 'boolean', description: 'Enable/disable managed TLS on the domain' },
+        path: str('Ingress path prefix'),
+        healthPath: str('HTTP health-check path'),
+        livenessPath: str('Liveness probe path'),
+        readinessPath: str('Readiness probe path'),
+        startupPath: str('Startup probe path'),
+        healthTimeoutSeconds: int('Health-check timeout (s)'),
+        healthGraceSeconds: int('Health-check grace period (s)'),
+        confirm: { type: 'boolean', description: 'Approve a cost change (compute/replicas/autoscale): without it the new cost is returned and nothing is applied.' },
+      },
+      required: ['appId'],
+    },
+    async call(api, args) {
+      const { appId, confirm, orgId, computeTier, ...rest } = args;
+      const body = { ...rest };
+      if (computeTier) { body.billingMode = 'bundled'; body.cpuLimit = computeTier; }
+      else if (args.cpuLimit || args.memoryLimit) { body.billingMode = 'unbundled'; }
+      const costChanging = computeTier || args.cpuLimit || args.memoryLimit || args.replicas !== undefined || args.autoscaleMax !== undefined;
+      if (costChanging && confirm !== true) {
+        const gate = await confirmCost(api, args, { computeTier, replicas: args.replicas ?? args.autoscaleMax });
+        if (gate) return { ...gate, change: 'update service compute/scaling', message: 'This changes cost — re-call with confirm:true to apply.' };
+      }
+      const { status, data } = await api.put(`/api/v1/apps/${appId}`, body);
+      return redactSecrets(result(status, data));
+    },
+  },
+  {
+    name: 'neo_add_service_domain',
+    description: 'Attach an additional custom ingress domain to a service (handoff §4.1). Point the domain\'s DNS at the platform first; managed TLS is issued automatically. The default platform host is preserved.',
+    mutating: true,
+    schema: { type: 'object', properties: { appId: str('Service/app id'), domain: str('Custom domain host, e.g. "app.example.com"') }, required: ['appId', 'domain'] },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/apps/${args.appId}/domains`, { domain: args.domain });
+      return result(status, data);
+    },
+  },
+  {
+    name: 'neo_remove_service_domain',
+    description: 'Detach a custom domain from a service. The default platform host and other domains are untouched.',
+    mutating: true,
+    destructive: true,
+    schema: { type: 'object', properties: { appId: str('Service/app id'), domain: str('Custom domain host to remove') }, required: ['appId', 'domain'] },
+    async call(api, args) {
+      const { status, data } = await api.del(`/api/v1/apps/${args.appId}/domains`, { body: { domain: args.domain } });
+      return result(status, data);
+    },
+  },
   {
     name: 'neo_get_deployment',
     description: 'Get a deployment by id (poll this after neo_deploy until status is terminal).',