@biznetgio/neo-app 0.4.67 → 0.4.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.67",
+  "version": "0.4.69",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/src/mcp/tools.js

@@ -270,6 +270,25 @@ export const TOOLS = [
       return { environment: sessionEnv, ...acct };
     },
   },
+  {
+    name: 'neo_list_tokens',
+    description: 'List your API tokens — the agent/MCP & CLI SESSIONS that can act as you (JNG #109). Returns id, name, scope, createdAt, and lastUsed (so you can spot stale or unexpected sessions). Token secrets are never returned (write-only). Use with neo_revoke_token to terminate a session.',
+    mutating: false,
+    schema: { type: 'object', properties: {} },
+    async call(api) {
+      return (await api.get('/api/v1/tokens')).data;
+    },
+  },
+  {
+    name: 'neo_revoke_token',
+    description: 'Revoke (terminate) an API token / agent session by id — the token stops working immediately and cannot be restored (JNG #109). DESTRUCTIVE: confirm with the user which session to revoke first, and do NOT revoke the token this session is currently using unless the user explicitly wants to end it. Use neo_list_tokens to find the id.',
+    mutating: true,
+    destructive: true,
+    schema: { type: 'object', properties: { tokenId: str('Token/session id (from neo_list_tokens)') }, required: ['tokenId'] },
+    async call(api, args) {
+      return (await api.del(`/api/v1/tokens/${args.tokenId}`)).data;
+    },
+  },
   {
     name: 'neo_get_capabilities',
     description:
@@ -313,7 +332,7 @@ export const TOOLS = [
         controlPlane,
         resourceTypes,
         // Verbs this MCP build exposes today (no create-DB/queue/cron/bucket, no costed plan/apply yet).
-        lifecycleVerbs: ['plan', 'apply', 'plan_promotion', 'get_operation', 'wait_operation', 'delete_stack', 'reconcile_usage', 'service_usage', 'create', 'list', 'get', 'update', 'verify', 'enable_public_access', 'disable_public_access', 'deploy', 'scale', 'add_domain', 'remove_domain', 'domain_status', 'logs', 'get_variables', 'set_variable', 'estimate', 'scan_repo', 'bind', 'unbind', 'run_cron', 'cron_questionnaire', 'presign_object', 'backup', 'restore', 'delete', 'delete_project', 'list_approvals', 'get_approval', 'get_credit', 'list_templates'],
+        lifecycleVerbs: ['plan', 'apply', 'plan_promotion', 'get_operation', 'wait_operation', 'delete_stack', 'reconcile_usage', 'service_usage', 'create', 'list', 'get', 'update', 'verify', 'enable_public_access', 'disable_public_access', 'deploy', 'scale', 'add_domain', 'remove_domain', 'domain_status', 'logs', 'get_variables', 'set_variable', 'estimate', 'scan_repo', 'bind', 'unbind', 'run_cron', 'cron_questionnaire', 'presign_object', 'backup', 'restore', 'delete', 'delete_project', 'list_approvals', 'get_approval', 'get_credit', 'list_templates', 'list_tokens', 'revoke_token'],
         promotion: { supported: true, byCopy: true, tool: 'neo_plan_promotion', note: 'staging→production promotion by copy (JNG #112 §8.7): an immutable costed prod stack plan; applied with neo_apply_stack; copies build/compute/env/bound foundations, never custom domains or secret values, never mutates the source.' },
         bindings: { supported: true, targets: ['neo_db', 'neo_queue', 'neo_object_storage'], writeOnly: true, note: 'neo_bind_resource + neo_plan_stack bindings inject DATABASE_URL / NATS_URL (+ NATS_HOST/PORT/USER/PASSWORD) / S3_* server-side at deploy; secrets never returned (handoff 5)' },
         sourceTypes: ['git', 'image', 'dockerfile', 'local', 'template'],
@@ -510,6 +529,15 @@ export const TOOLS = [
       return result(status, data);
     },
   },
+  {
+    name: 'neo_get_webhook',
+    description: 'Push-to-deploy (auto-deploy) integration status for a service (JNG #142). "Auto-deploy enabled" is NOT the same as "webhook active": this returns `status` = active (a delivery has been received) or **pending_setup** (NEO has never heard from the git provider — the webhook was likely never installed), plus `lastDeliveryAt` and the `setupUrl` to add to the repo. If pending_setup, add `setupUrl` as a push webhook (content-type application/json) in the repo\'s Settings → Webhooks; manual neo_deploy always works meanwhile.',
+    mutating: false,
+    schema: { type: 'object', properties: { appId: str('Service/app id') }, required: ['appId'] },
+    async call(api, args) {
+      return (await api.get(`/api/v1/apps/${args.appId}/webhook`)).data;
+    },
+  },
   {
     name: 'neo_get_domain_status',
     description: 'Check a custom domain\'s readiness to a TERMINAL state (JNG #112 §8.6): whether it is attached, whether DNS resolves to the expected CNAME target (with an expected-vs-observed diagnostic), whether managed TLS has been issued, and whether HTTPS actually serves a valid certificate for the host. Poll this after neo_add_service_domain + redeploy until ready:true — do NOT assume "attach accepted" means live. Returns {attached, expectedTarget, dns:{pointed,observed,diagnostic}, tls:{issued}, https:{ok,statusCode,certHostnameValid}, ready}.',