@biznetgio/neo-app 0.4.77 → 0.4.79

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biznetgio/neo-app",
-  "version": "0.4.77",
+  "version": "0.4.79",
   "description": "NEO App CLI — one-command agent onboarding, MCP server, and project ops for coding agents (Codex, Claude Code).",
   "type": "module",
   "bin": {

package/prompt.md

@@ -6,7 +6,7 @@ Keep this in sync with cli/prompt.md (the npm package's bundled copy).
 -->
 # Set this repo up on NEO App
 
-**Version:** 0.4.77 · **Last updated:** 2026-11-07
+**Version:** 0.4.79 · **Last updated:** 2026-11-09
 
 These are the official setup instructions from NEO App (Biznet Gio's managed-app
 platform). If you are an AI coding agent, complete the steps below yourself by running
@@ -141,6 +141,21 @@ tools — never the portal UI. The lifecycle is the same for every resource type
 For a **scheduled job**, call `neo_cron_questionnaire` first to collect the schedule and
 target, then `neo_create_cron`. To expose a managed database or queue to the internet,
 use `neo_enable_db_public_access` / `neo_enable_queue_public_access` (deploy it first).
+Secure public access is **PostgreSQL only** today — MySQL and Redis public access are
+deferred; keep those private (in-cluster) and reach them from a service in the same project.
+
+## Managed databases from the terminal (PostgreSQL · MySQL · Redis)
+
+- **Discover from the CLI:** `neo-app db` lists the whole lifecycle; `neo-app db list` and
+  `neo-app db get <id>` run directly (read-only). Connection strings are **redacted** in the
+  terminal — reveal the credential in the Portal, never in chat or logs.
+- **Create/mutate** through the MCP tools (`neo_create_database`, `neo_deploy_database`,
+  `neo_verify_database`, …) so cost-consent and audit apply.
+- **Backup/restore boundaries:** logical backup covers all three engines; **restore is
+  PostgreSQL and MySQL only** (`neo_restore_database` takes a SQL dump). **Redis logical
+  restore is not supported** — recover Redis from its persistence/replication, not a dump.
+- **Public access:** PostgreSQL only (see above); MySQL/Redis secure public access and Redis
+  auth/TLS are deferred follow-ups, not available capabilities.
 
 Never deploy to **production** without an explicit request, and never default a missing
 environment — every create/deploy names `staging` or `production`.

package/src/commands/db.js

@@ -23,7 +23,7 @@ const OPS = [
   ['metrics',       'neo_get_database_metrics',   'Engine-aware metrics snapshot'],
   ['backup',        'neo_run_backup / neo_create_backup', 'Create and run a logical backup'],
   ['restore',       'neo_restore_database',       'Restore a SQL dump (postgres/mysql)'],
-  ['public',        'neo_enable_db_public_access','Enable/disable TLS public access'],
+  ['public',        'neo_enable_db_public_access','Enable/disable TLS public access (PostgreSQL only — MySQL/Redis public access deferred)'],
   ['delete',        'neo_delete_database',        'Delete a database (billable stop)'],
 ];
 

package/src/mcp/tools.js

@@ -1048,16 +1048,17 @@ export const TOOLS = [
   },
   {
     name: 'neo_list_templates',
-    description: 'List deployable templates (e.g. n8n) with their manifest: the Creates/Reuses resource graph, pinned source/version, min resources, public routes, and limitations — enough to show the resource graph and a live estimate before deploy. WordPress was retired.',
+    description: 'List deployable (APPROVED) templates with their manifest: the Creates/Reuses resource graph, pinned source/version + reviewedHash, status, min resources, public routes, and limitations — enough to show the graph and a live estimate before deploy. Only approved templates are returned by default (blocked/draft/retired are NOT deployable and are excluded); pass view:"all" for the research view that also includes blocked templates with their status + blockedReason. WordPress was retired.',
     mutating: false,
-    schema: { type: 'object', properties: {} },
-    async call(api) {
-      return (await api.get('/api/v1/templates')).data;
+    schema: { type: 'object', properties: { view: { type: 'string', enum: ['deployable', 'all'], description: 'deployable (default — approved only) | all (research view incl. blocked, with status)' } } },
+    async call(api, args) {
+      const q = args && args.view === 'all' ? '?view=all' : '';
+      return (await api.get('/api/v1/templates' + q)).data;
     },
   },
   {
     name: 'neo_deploy_template',
-    description: 'Deploy a template (e.g. n8n) into a project. May return pending_approval. Retired templates (e.g. wordpress) return 410 "no longer available".',
+    description: 'Deploy an APPROVED template (e.g. n8n) into a project. Only approved templates deploy: a blocked/draft template returns 409 with the requirements to unblock (e.g. documenso/listmonk need SMTP), and a retired template (e.g. wordpress) returns 410 "no longer available". May return pending_approval.',
     mutating: true,
     schema: {
       type: 'object',