@biznetgio/neo-app 0.4.44 → 0.4.47

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.44",
+  "version": "0.4.47",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -1258,6 +1258,45 @@ export const TOOLS = [
       return result(status, data);
     },
   },
+  {
+    name: 'neo_plan_project_deletion',
+    description:
+      'Create a ZERO-WRITE, immutable deletion plan for a project (#107 §4): enumerates the full child inventory, pins it (planId/planHash, expires in 15 min), and returns the reverse-dependency delete phases + a server-side exact-name project_delete confirmation. Deletes NOTHING. Then: show the user the inventory + no-refund warning, call neo_confirm_action(confirmationId, "approve", confirmationPhrase=<EXACT project name>, and acknowledgeNoRefund:true if ackRequired), then neo_apply_project_deletion(planId, planHash, confirmationId). Poll neo_get_operation/neo_wait_operation. Destructive, irreversible, no refund; the organization is never deleted.',
+    mutating: false,
+    schema: {
+      type: 'object',
+      properties: {
+        projectId: str('Project id'),
+        cascade: { type: 'boolean', description: 'REQUIRED true for a non-empty project — plan deleting the project AND all of its resources.' },
+      },
+      required: ['projectId'],
+    },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/projects/${args.projectId}/plans/deletion`, { cascade: args.cascade === true });
+      return redactSecrets(result(status, data));
+    },
+  },
+  {
+    name: 'neo_apply_project_deletion',
+    description:
+      'Apply an APPROVED project-deletion plan (#107 §8): deletes the project and ALL its resources in reverse dependency order, server-enforced + single-use. Requires planId + planHash (from neo_plan_project_deletion) and an APPROVED confirmationId (from neo_confirm_action). Returns an operationId — poll neo_get_operation / neo_wait_operation for per-resource phase status (deleting_scheduled_jobs → applications → bindings → queues_and_buckets → databases → deleting_project → reconciling_metering; terminal applied|partial). Destructive, irreversible, no refund; the organization is never deleted.',
+    mutating: true,
+    destructive: true,
+    schema: {
+      type: 'object',
+      properties: {
+        planId: str('Plan id from neo_plan_project_deletion'),
+        planHash: str('Plan hash from neo_plan_project_deletion'),
+        confirmationId: str('An APPROVED project_delete confirmation id (from neo_confirm_action)'),
+        idempotencyKey: str('Optional idempotency key'),
+      },
+      required: ['planId', 'planHash', 'confirmationId'],
+    },
+    async call(api, args) {
+      const { status, data } = await api.post(`/api/v1/plans/${args.planId}/apply`, { planHash: args.planHash, confirmationId: args.confirmationId, idempotencyKey: args.idempotencyKey });
+      return redactSecrets(result(status, data));
+    },
+  },
   // --- Costed plan / apply backbone (handoff 3.3-3.5 + 7): plan a whole stack
   // zero-write, review the cost, then apply with the plan id+hash. The server
   // enforces the plan (hash/expiry/one-shot) and runs it in dependency order. ---
@@ -1367,23 +1406,29 @@ export const TOOLS = [
   },
   {
     name: 'neo_wait_operation',
-    description: 'Wait for a stack apply (operationId from neo_apply_stack) to finish — polls until the status is terminal (applied | partial | failed) or the timeout elapses, then returns the final operation with per-resource status (secrets redacted). Convenience over polling neo_get_operation yourself.',
+    description: 'Wait for an operation — a stack apply (neo_apply_stack) OR a project deletion (neo_apply_project_deletion) — to finish: polls until the status is terminal (applied | partial | failed) or the timeout elapses, then returns the final operation with per-resource status (secrets redacted). Pass afterRevision to also return as soon as the operation advances past a revision you already saw (resume observation after a disconnect). Convenience over polling neo_get_operation yourself.',
     mutating: false,
     schema: {
       type: 'object',
-      properties: { operationId: str('Operation id (= plan id)'), timeoutMs: int('Max wait in milliseconds (default 180000)') },
+      properties: {
+        operationId: str('Operation id (= plan id)'),
+        timeoutMs: int('Max wait in milliseconds (default 180000)'),
+        afterRevision: int('Return as soon as the operation revision exceeds this (resume observation); omit to wait for a terminal status'),
+      },
       required: ['operationId'],
     },
     async call(api, args) {
       const deadline = Date.now() + (args.timeoutMs && args.timeoutMs > 0 ? args.timeoutMs : 180000);
       const terminal = new Set(['applied', 'partial', 'failed']);
+      const after = Number.isInteger(args.afterRevision) ? args.afterRevision : undefined;
       let op;
       for (;;) {
         op = redactSecrets((await api.get(`/api/v1/plans/${args.operationId}`)).data);
-        if (terminal.has(op.status) || Date.now() >= deadline) break;
+        const advanced = after !== undefined && typeof op.revision === 'number' && op.revision > after;
+        if (terminal.has(op.status) || advanced || Date.now() >= deadline) break;
         await new Promise((r) => setTimeout(r, 5000));
       }
-      if (op && !terminal.has(op.status)) return { ...op, timedOut: true, note: 'still in progress at timeout — call neo_get_operation again' };
+      if (op && !terminal.has(op.status) && Date.now() >= deadline) return { ...op, timedOut: true, note: 'still in progress at timeout — call neo_get_operation again' };
       return op;
     },
   },