@biznetgio/neo-app 0.4.40 → 0.4.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.40",
+  "version": "0.4.41",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/api.js

@@ -3,6 +3,8 @@
 // All routes are under /api/v1. A 202 + {status:"pending_approval"} is a normal
 // result (org approval policy), NOT an error, so only >=400 throws.
 
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
 export class ApiError extends Error {
   constructor(status, message, body) {
     super(message);
@@ -28,12 +30,28 @@ export class NeoApi {
     const headers = { Accept: accept || 'application/json' };
     if (this.token) headers.Authorization = `Bearer ${this.token}`;
     if (body !== undefined) headers['Content-Type'] = 'application/json';
+    const init = { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined };
 
-    const res = await fetch(url, {
-      method,
-      headers,
-      body: body !== undefined ? JSON.stringify(body) : undefined,
-    });
+    // Transient-failure retry: a long stack apply polls for minutes, and a single
+    // dropped connection ("fetch failed") or a brief 502/503/504 shouldn't fail the
+    // whole operation. Only retry IDEMPOTENT methods automatically — a POST/PUT that
+    // may have been processed must not be silently re-sent.
+    const idempotent = method === 'GET' || method === 'DELETE';
+    const maxTries = idempotent ? 4 : 1;
+    let res, lastErr;
+    for (let attempt = 1; attempt <= maxTries; attempt++) {
+      try {
+        res = await fetch(url, init);
+      } catch (e) {
+        lastErr = e; // connection never completed — transient
+        if (idempotent && attempt < maxTries) { await sleep(250 * 2 ** (attempt - 1)); continue; }
+        throw new ApiError(0, `network error contacting ${this.baseUrl}: ${e?.message || e}`, null);
+      }
+      if (idempotent && [502, 503, 504].includes(res.status) && attempt < maxTries) {
+        await sleep(250 * 2 ** (attempt - 1)); continue;
+      }
+      break;
+    }
 
     const ctype = res.headers.get('content-type') || '';
     const isJson = ctype.includes('application/json');

package/src/mcp/tools.js

@@ -1242,6 +1242,13 @@ export const TOOLS = [
               targetService: str('cron http_endpoint: name of a web app resource IN THIS STACK to hit — its deployed URL is resolved at apply (use instead of a literal url for a same-stack service)'),
               targetPath: str('cron http_endpoint: path appended to the targetService URL (e.g. "/cron")'),
               method: str('cron http_endpoint: HTTP method'),
+              headers: { type: 'object', description: 'cron http_endpoint: request headers (secret values redacted on read-back)' },
+              body: str('cron http_endpoint: request body'),
+              contentType: str('cron http_endpoint: Content-Type for the body (merged into headers)'),
+              expectedStatus: int('cron http_endpoint: exact HTTP status required for a run to succeed (default any 2xx)'),
+              timeoutSeconds: int('cron: per-run timeout (seconds)'),
+              retryCount: int('cron: retries on failure'),
+              concurrencyPolicy: { type: 'string', enum: ['Allow', 'Forbid', 'Replace'], description: 'cron: overlap policy (default Allow)' },
             },
             required: ['kind', 'name'],
           },