@biznetgio/neo-app 0.4.75 → 0.4.78

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.75",
+  "version": "0.4.78",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/prompt.md

@@ -6,7 +6,7 @@ Keep this in sync with cli/prompt.md (the npm package's bundled copy).
 -->
 # Set this repo up on NEO App
 
-**Version:** 0.4.74 · **Last updated:** 2026-11-05
+**Version:** 0.4.78 · **Last updated:** 2026-11-09
 
 These are the official setup instructions from NEO App (Biznet Gio's managed-app
 platform). If you are an AI coding agent, complete the steps below yourself by running
@@ -141,6 +141,21 @@ tools — never the portal UI. The lifecycle is the same for every resource type
 For a **scheduled job**, call `neo_cron_questionnaire` first to collect the schedule and
 target, then `neo_create_cron`. To expose a managed database or queue to the internet,
 use `neo_enable_db_public_access` / `neo_enable_queue_public_access` (deploy it first).
+Secure public access is **PostgreSQL only** today — MySQL and Redis public access are
+deferred; keep those private (in-cluster) and reach them from a service in the same project.
+
+## Managed databases from the terminal (PostgreSQL · MySQL · Redis)
+
+- **Discover from the CLI:** `neo-app db` lists the whole lifecycle; `neo-app db list` and
+  `neo-app db get <id>` run directly (read-only). Connection strings are **redacted** in the
+  terminal — reveal the credential in the Portal, never in chat or logs.
+- **Create/mutate** through the MCP tools (`neo_create_database`, `neo_deploy_database`,
+  `neo_verify_database`, …) so cost-consent and audit apply.
+- **Backup/restore boundaries:** logical backup covers all three engines; **restore is
+  PostgreSQL and MySQL only** (`neo_restore_database` takes a SQL dump). **Redis logical
+  restore is not supported** — recover Redis from its persistence/replication, not a dump.
+- **Public access:** PostgreSQL only (see above); MySQL/Redis secure public access and Redis
+  auth/TLS are deferred follow-ups, not available capabilities.
 
 Never deploy to **production** without an explicit request, and never default a missing
 environment — every create/deploy names `staging` or `production`.

package/src/commands/db.js

@@ -9,6 +9,7 @@ import { getCredential } from '../creds.js';
 import { NeoApi } from '../api.js';
 import { readLink } from '../link.js';
 import { log, ok, fail, c } from '../util.js';
+import { redactSecrets } from '../redact.js';
 
 // The full lifecycle, with the MCP tool that performs each one. Shown by `neo-app db`.
 const OPS = [
@@ -22,7 +23,7 @@ const OPS = [
   ['metrics',       'neo_get_database_metrics',   'Engine-aware metrics snapshot'],
   ['backup',        'neo_run_backup / neo_create_backup', 'Create and run a logical backup'],
   ['restore',       'neo_restore_database',       'Restore a SQL dump (postgres/mysql)'],
-  ['public',        'neo_enable_db_public_access','Enable/disable TLS public access'],
+  ['public',        'neo_enable_db_public_access','Enable/disable TLS public access (PostgreSQL only — MySQL/Redis public access deferred)'],
   ['delete',        'neo_delete_database',        'Delete a database (billable stop)'],
 ];
 
@@ -59,6 +60,9 @@ export async function db(sub, opts = {}, positionals = []) {
     let dbs;
     try { dbs = (await api.get(`/api/v1/projects/${projectId}/databases`)).data?.databases || []; }
     catch (e) { fail(`list failed: ${e.message || e}`); process.exit(1); }
+    // Credentials are write-only: the API hands an owner/admin an unredacted
+    // connectionString (Portal reveal), but a terminal must never echo it (#149 retest).
+    dbs = redactSecrets(dbs);
     if (opts.json) return void process.stdout.write(JSON.stringify({ databases: dbs }, null, 2) + '\n');
     if (!dbs.length) return void ok('no databases in this project');
     for (const d of dbs) {
@@ -75,6 +79,7 @@ export async function db(sub, opts = {}, positionals = []) {
     let view;
     try { view = (await api.get(`/api/v1/databases/${id}`)).data; }
     catch (e) { fail(`get failed: ${e.message || e}`); process.exit(1); }
+    view = redactSecrets(view); // write-only credentials never reach the terminal (#149 retest)
     if (opts.json) return void process.stdout.write(JSON.stringify(view, null, 2) + '\n');
     for (const [k, v] of Object.entries(view)) if (v !== undefined && v !== null && v !== '') log(`  ${c.dim(k.padEnd(18))} ${v}`);
     return;

package/src/index.js

@@ -109,7 +109,10 @@ export async function main(argv = process.argv.slice(2)) {
   // still error (nonzero exit) even with `--help`, so a bad command isn't silently
   // accepted (JNG #97). Per-subcommand help is tracked in #89.
   const KNOWN_COMMANDS = new Set(['agent', 'setup', 'config', 'login', 'deploy', 'estimate', 'link', 'project', 'status', 'whoami', 'mcp', 'db', 'version', 'help']);
-  if (positionals.length === 0 || (opts.help && KNOWN_COMMANDS.has(cmd))) return void console.log(HELP);
+  // `db --help` renders the DB-specific help (its usage() lists the lifecycle), not the
+  // generic top-level help — #149 retest CLI discoverability caveat. Other known commands
+  // still fall back to the root HELP (per-subcommand help tracked in #89).
+  if (positionals.length === 0 || (opts.help && KNOWN_COMMANDS.has(cmd) && cmd !== 'db')) return void console.log(HELP);
 
   try {
     // `agent setup` and `setup agent` both work (parity with InstaCloud's `setup agent`).

package/src/mcp/tools.js

@@ -7,6 +7,7 @@ import { statSync, readFileSync } from 'node:fs';
 import { deploySource } from '../deploySource.js';
 import { pkgVersion } from '../util.js';
 import { specToResources, formatCost } from '../cost.js';
+import { redactSecrets } from '../redact.js';
 
 const str = (description) => ({ type: 'string', description });
 const int = (description) => ({ type: 'integer', description });
@@ -245,22 +246,8 @@ async function billableGate(api, { projectId, kind, name, confirmationId, confir
   };
 }
 
-const SECRET_KEY = /(password|secret|secretkey|accesskey|connectionstring|connstr|dsn|token|privatekey|apikey|authorization)/i;
-// Deployment snapshots (exact keys) embed rendered configs with plaintext creds — a
-// queue's `--pass`, a DB's POSTGRES_PASSWORD. Redact by EXACT key so we don't also
-// hit resourceId/source-of-truth-style names (substring match would catch "reSOURCEid").
-const SECRET_EXACT = new Set(['source', 'installed']);
-function redactSecrets(value) {
-  if (Array.isArray(value)) return value.map(redactSecrets);
-  if (value && typeof value === 'object') {
-    const out = {};
-    for (const [k, v] of Object.entries(value)) {
-      out[k] = (SECRET_KEY.test(k) || SECRET_EXACT.has(k.toLowerCase())) ? '[redacted — credentials are write-only; bind them to a consumer instead]' : redactSecrets(v);
-    }
-    return out;
-  }
-  return value;
-}
+// redactSecrets lives in ../redact.js — the single redactor the CLI `db` commands share,
+// so every terminal/JSON output path masks credentials identically (#149 retest).
 
 export const TOOLS = [
   {
@@ -972,7 +959,7 @@ export const TOOLS = [
   {
     name: 'neo_estimate',
     description:
-      'Estimate the hourly and monthly cost (IDR) of a service or resource from the LIVE price book, so you can show the user the cost BEFORE a billable create/deploy (handoff 3.3/3.4). Read-only. Compute is resource-based (#144): priced per vCPU-hour + GB-RAM-hour independently (no packages), hourly, capped at 730 billable hours/month. Covers compute (vcpu+memoryMB, or a legacy tier shorthand that resolves to concrete vCPU/RAM), persistent storage, and object storage (all per GB-hour); variable usage (queue messages, cron runs) is excluded and noted. The monthly figure is a non-authoritative estimate (hourly × up to 730). Pass orgId to apply that org\'s price overrides.',
+      'Estimate the hourly and monthly cost (IDR) of a service or resource from the LIVE price book, so you can show the user the cost BEFORE a billable create/deploy (handoff 3.3/3.4). Read-only. Compute is resource-based (#144): priced per vCPU-hour + GB-RAM-hour independently (no packages), hourly, capped at 730 billable hours/month. Covers compute (vcpu+memoryMB, or a legacy tier shorthand that resolves to concrete vCPU/RAM), persistent storage, and object storage (all per GB-hour), plus queue and cron (0 fixed cost — their per-message/per-run rates are disclosed in variable[]). The monthly figure is a non-authoritative estimate (hourly × up to 730). Pass orgId to apply that org\'s price overrides.',
     mutating: false,
     schema: {
       type: 'object',
@@ -982,6 +969,8 @@ export const TOOLS = [
         memoryMB: int('Memory in MB — priced per GB-RAM-hour (use with vcpu)'),
         storageGB: int('Persistent/database storage in GB (optional)'),
         objectStorageGB: int('Object-storage quota in GB (optional)'),
+        queue: { type: 'boolean', description: 'Include a NEO Queue — 0 fixed cost; discloses the per-message (queue_message) rate in variable[]' },
+        cron: { type: 'boolean', description: 'Include a Scheduled Job — 0 fixed cost; discloses the per-run (cron_run) rate in variable[]' },
         replicas: int('Replica count (default 1)'),
         orgId: str('Organization id (optional — applies that org\'s price overrides)'),
       },
@@ -993,7 +982,7 @@ export const TOOLS = [
       if (!orgId) { try { orgId = await api.resolveOrgId(); } catch { orgId = null; } }
       if (!orgId) throw new Error('no organization for this account — cannot estimate cost');
       const resources = specToResources(args);
-      if (!resources.length) throw new Error('nothing to estimate — pass computeTier (or vcpu+memoryMB), storageGB, and/or objectStorageGB');
+      if (!resources.length) throw new Error('nothing to estimate — pass computeTier (or vcpu+memoryMB), storageGB, objectStorageGB, queue, and/or cron');
       const { cost } = await api.estimate({ orgId }, { resources });
       return cost; // normalized contract: currency/hourly/monthly/breakdown/variable/upfront/priceBook/priceBookVersion/assumptions
     },

package/src/redact.js

@@ -0,0 +1,26 @@
+// Single redactor for every CLI/MCP path that prints a control-plane response to a
+// terminal, a file, or JSON (#149 retest SECURITY BLOCKER): managed-DB/queue credentials
+// are write-only. The control-plane API still returns an unredacted connectionString to an
+// owner/admin (the Portal's RBAC-gated reveal), so a terminal tool that echoes that response
+// raw leaks a plaintext password. Every CLI/MCP output routes through redactSecrets so a
+// credential never reaches a shell, a log, or a JSON dump — matching MCP's write-only stance.
+
+const SECRET_KEY = /(password|secret|secretkey|accesskey|connectionstring|connstr|dsn|token|privatekey|apikey|authorization)/i;
+// Deployment snapshots (exact keys) embed rendered configs with plaintext creds — a
+// queue's `--pass`, a DB's POSTGRES_PASSWORD. Redact by EXACT key so we don't also hit
+// resourceId/source-of-truth-style names (a substring match would catch "reSOURCEid").
+const SECRET_EXACT = new Set(['source', 'installed']);
+
+export const REDACTED = '[redacted — credentials are write-only; bind them to a consumer instead]';
+
+export function redactSecrets(value) {
+  if (Array.isArray(value)) return value.map(redactSecrets);
+  if (value && typeof value === 'object') {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = (SECRET_KEY.test(k) || SECRET_EXACT.has(k.toLowerCase())) ? REDACTED : redactSecrets(v);
+    }
+    return out;
+  }
+  return value;
+}