@biznetgio/neo-app 0.4.43 → 0.4.46

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.43",
+  "version": "0.4.46",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -210,6 +210,13 @@ export const TOOLS = [
         environments: ['staging', 'production'],
         pricing,
         costConsent: { estimateAvailable: true, dryRunIncludesCost: true, planApplyEnforced: true, note: 'neo_plan_stack returns a costed immutable plan; neo_apply_stack is server-enforced (hash/expiry/one-shot) so a billable stack requires a reviewed plan (handoff 3.3-3.5)' },
+        // Project/organization lifecycle (issue #107 §3). Honest to THIS build: project
+        // deletion is zero-write-preview → exact-name server confirmation → cascade delete;
+        // a dedicated costed plan (neo_plan_project_deletion) is not yet exposed, so
+        // requiresPlan is false. Organization deletion is unsupported and out of scope —
+        // no org-delete tool exists, and deleting a project never deletes its organization.
+        project: { delete: true, cascadeDelete: true, requiresPlan: false, requiresConfirmation: true, note: 'neo_delete_project: zero-write preview → exact-name, single-use server confirmation → cascade delete of all child resources.' },
+        organization: { delete: false, note: 'Organization deletion is unsupported and out of scope; no organization-delete tool is exposed.' },
         minClientVersion: pkgVersion(),
         deprecations: [],
       };
@@ -264,7 +271,7 @@ export const TOOLS = [
   },
   {
     name: 'neo_confirm_action',
-    description: 'Record a human DECISION on a confirmation (NEVER creates or deletes anything itself) — the server-enforced approval step for a high-risk action (project/service deletion, billable create). decision is approve | decline | cancel. Approving a DELETION requires confirmationPhrase to exactly equal the target name (the human must type it). After approve, call the action tool again with this confirmationId to actually perform it (single-use). Show the human the summary from the preview and ask once; never infer consent.',
+    description: 'Record a human DECISION on a confirmation (NEVER creates or deletes anything itself) — the server-enforced approval step for a high-risk action (project/service deletion, billable create). decision is approve | decline | cancel. Approving a DELETION requires confirmationPhrase to exactly equal the target name (the human must type it — never manufacture it). If the confirmation has ackRequired:true (a project with production resources), approving ALSO requires acknowledgeNoRefund:true. After approve, call the action tool again with this confirmationId to actually perform it (single-use). Show the human the summary from the preview and ask once; never infer consent.',
     mutating: true,
     schema: {
       type: 'object',
@@ -272,11 +279,12 @@ export const TOOLS = [
         confirmationId: str('Confirmation id (from a destructive preview or a plan)'),
         decision: { type: 'string', enum: ['approve', 'decline', 'cancel'], description: 'approve | decline | cancel' },
         confirmationPhrase: str('For a deletion: the EXACT target name, typed by the human, required to approve'),
+        acknowledgeNoRefund: { type: 'boolean', description: 'Required to approve when the confirmation has ackRequired:true (production project delete): the human explicitly acknowledges there is no refund, credit, or proration.' },
       },
       required: ['confirmationId', 'decision'],
     },
     async call(api, args) {
-      const { status, data } = await api.post(`/api/v1/confirmations/${args.confirmationId}/decide`, { decision: args.decision, confirmationPhrase: args.confirmationPhrase });
+      const { status, data } = await api.post(`/api/v1/confirmations/${args.confirmationId}/decide`, { decision: args.decision, confirmationPhrase: args.confirmationPhrase, acknowledgeNoRefund: args.acknowledgeNoRefund === true });
       return result(status, data);
     },
   },
@@ -1250,6 +1258,45 @@ export const TOOLS = [
       return result(status, data);
     },
   },
+  {
+    name: 'neo_plan_project_deletion',
+    description:
+      'Create a ZERO-WRITE, immutable deletion plan for a project (#107 §4): enumerates the full child inventory, pins it (planId/planHash, expires in 15 min), and returns the reverse-dependency delete phases + a server-side exact-name project_delete confirmation. Deletes NOTHING. Then: show the user the inventory + no-refund warning, call neo_confirm_action(confirmationId, "approve", confirmationPhrase=<EXACT project name>, and acknowledgeNoRefund:true if ackRequired), then neo_apply_project_deletion(planId, planHash, confirmationId). Poll neo_get_operation/neo_wait_operation. Destructive, irreversible, no refund; the organization is never deleted.',
+    mutating: false,
+    schema: {
+      type: 'object',
+      properties: {
+        projectId: str('Project id'),
+        cascade: { type: 'boolean', description: 'REQUIRED true for a non-empty project — plan deleting the project AND all of its resources.' },
+      },
+      required: ['projectId'],
+    },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/projects/${args.projectId}/plans/deletion`, { cascade: args.cascade === true });
+      return redactSecrets(result(status, data));
+    },
+  },
+  {
+    name: 'neo_apply_project_deletion',
+    description:
+      'Apply an APPROVED project-deletion plan (#107 §8): deletes the project and ALL its resources in reverse dependency order, server-enforced + single-use. Requires planId + planHash (from neo_plan_project_deletion) and an APPROVED confirmationId (from neo_confirm_action). Returns an operationId — poll neo_get_operation / neo_wait_operation for per-resource phase status (deleting_scheduled_jobs → applications → bindings → queues_and_buckets → databases → deleting_project → reconciling_metering; terminal applied|partial). Destructive, irreversible, no refund; the organization is never deleted.',
+    mutating: true,
+    destructive: true,
+    schema: {
+      type: 'object',
+      properties: {
+        planId: str('Plan id from neo_plan_project_deletion'),
+        planHash: str('Plan hash from neo_plan_project_deletion'),
+        confirmationId: str('An APPROVED project_delete confirmation id (from neo_confirm_action)'),
+        idempotencyKey: str('Optional idempotency key'),
+      },
+      required: ['planId', 'planHash', 'confirmationId'],
+    },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/plans/${args.planId}/apply`, { planHash: args.planHash, confirmationId: args.confirmationId, idempotencyKey: args.idempotencyKey });
+      return redactSecrets(result(status, data));
+    },
+  },
   // --- Costed plan / apply backbone (handoff 3.3-3.5 + 7): plan a whole stack
   // zero-write, review the cost, then apply with the plan id+hash. The server
   // enforces the plan (hash/expiry/one-shot) and runs it in dependency order. ---