@cloudgrid-io/mcp 0.12.0 → 0.14.0

package/src/corpus/templates/calendar-scheduler/index.md

@@ -0,0 +1,85 @@
+# Template: calendar-scheduler (blueprint — persistent Next.js + Mongo)
+
+A **blueprint** for a calendar / scheduling app: events on a calendar, bookable
+availability slots, timezones + recurrence, and (once platform issue #1543 ships)
+scheduled reminders. It is the persistent Next.js + Mongo runtime shape (same base
+as `app-with-data` / `crm`) with a time/availability domain. This template ships
+**structure, not app code** — read the structure guide, then build the app
+following it.
+
+**This is a blueprint (tier D):** the deliverable is `cloudgrid.yaml` +
+`AGENTS.md`. Fetch the bundle, read `AGENTS.md`, then generate the files under
+`services/web/` and deploy.
+
+- **Structure guide:** `gridctl_fetch("template", "calendar-scheduler")` → read
+  **`AGENTS.md`** (file tree, Mongo collections, CloudGrid injection table,
+  optional auth/payments layers, the cron reminder shape blocked on #1543, deploy
+  steps, edition note).
+
+**Key rules (same runtime discipline as `app-with-data`):**
+
+1. **App code MUST live under `services/web/`, not the repo root.** `path: /` in
+   `cloudgrid.yaml` is the URL mount, NOT the filesystem path.
+2. **Read injected connection strings/keys LAZILY (inside a getter), never at
+   module top level** — a top-level read fails `next build`. The grid injects
+   `DATABASE_MONGODB_URL` (+ legacy `MONGODB_URL`); optional vault entries inject
+   `AUTH_PROVIDER_KEY` / `STRIPE_KEY` / `SENDGRID_API_KEY` when you add them.
+3. **Declare the datastore with `needs: { database: true }`** (canonical shape).
+   Never author `requires:`, and never set `needs:` and `requires:` together (the
+   validator rejects the combination).
+4. **Store all times as UTC `Date` in Mongo; convert at the edges.** Keep timezone
+   / recurrence / overlap logic in a pure `lib/time.js`.
+5. **Reminders want a `type: cron` service — BLOCKED on platform issue #1543.**
+   Ship the HTTP app now; add the cron service once #1543 lands (see AGENTS.md §5).
+
+Runtime app → **local edition** only (async build, poll to a live URL).
+
+## cloudgrid.yaml
+
+```yaml
+# On disk this file is the full-annotated reference (templates/_cloudgrid.yaml.reference) with EVERY
+# field present as a comment; only the fields below are uncommented, so it
+# deploys to exactly these active fields. (The file also carries a COMMENTED cron
+# `reminders` service — intended shape, blocked on #1543 — and a commented vault:
+# block for optional auth/payments/reminder secrets.)
+name: my-calendar
+services:
+  web:
+    type: nextjs
+    path: /
+needs:
+  database: true
+```
+
+> **Capability:** `needs: { database: true }` → the deployer provisions Mongo and
+> injects `DATABASE_MONGODB_URL` (plus legacy `MONGODB_URL`). Optional `vault:`
+> entries map org vault items → env vars (`AUTH_PROVIDER_KEY` for sign-in,
+> `STRIPE_KEY` + `STRIPE_WEBHOOK_SECRET` for paid bookings, `SENDGRID_API_KEY` for
+> reminder mail) — store real values with `grid secrets set`. The cron `reminders`
+> service is documented but not yet deployable (platform issue #1543). See the
+> capability-map for the full injection table.
+
+## Structure guide
+
+The real content of this blueprint is **`AGENTS.md`** — fetch the template bundle
+and read it. It covers the `services/web/` file tree, the `events` / `availability`
+/ `bookings` collections, the CloudGrid injection table (needs + optional vault +
+AI gateway), how to wire optional auth (Clerk/Auth0 + `ownerId`) and payments
+(Stripe Checkout + signed webhook), the intended cron reminder job shape (blocked
+on #1543), and the `grid init → fill → secrets set → grid plug → poll` deploy flow.
+
+## Adapt it
+
+- Single-user calendar? Drop `ownerId` + auth. Multi-user / invites? Add the auth
+  layer (`AUTH_PROVIDER_KEY`) and stamp `ownerId` on every write.
+- Booking SaaS with deposits? Add the Stripe layer (`STRIPE_KEY` +
+  `STRIPE_WEBHOOK_SECRET`) and a signed webhook.
+- Pick a date library (luxon / date-fns-tz) for timezone + recurrence math; keep
+  it in `lib/time.js`.
+- Add `needs: { ai: true }` (injects `AI_GATEWAY_URL`) only for AI features like
+  natural-language event entry.
+- Reminders: leave the cron `reminders` service commented until #1543 ships; use
+  the interim external-scheduler-hits-an-HTTP-route workaround (AGENTS.md §5) if
+  you need reminders now.
+- Build under `services/web/`, then `grid dev` (local) / `grid plug` (async — poll
+  to a live URL).

package/src/corpus/templates/changelog/README.md

@@ -0,0 +1,27 @@
+# changelog
+
+A single self-contained HTML changelog / release-notes page: reverse-chronological versioned entries, each with a date and tagged change items (added / fixed / changed / removed).
+
+Static inspiration — a single self-contained `index.html` (inline CSS and JS,
+no external CDNs). It deploys instantly via `gridctl_drop` and works on every
+CloudGrid edition, including hosted.
+
+## Fill it in
+
+Fetch the template with `gridctl_fetch("template", "changelog")`, then replace the
+placeholders:
+
+   - The product name and page intro.
+   - One entry per release, newest first: version, date, and a list of changes.
+   - Each change carries a tag pill — added, fixed, changed, or removed — set by its CSS class.
+
+Keep it a single self-contained HTML file. Do not add external scripts,
+stylesheets, fonts, or large embedded media.
+
+## Deploy
+
+- Hosted MCP edition: call the drop tool with the HTML.
+- Local MCP / CLI edition: write the HTML to a file and run `gridctl plug`.
+
+It deploys as an inspiration and returns a live share URL right away. Re-deploy
+with the same entity id to update the same URL.

package/src/corpus/templates/changelog/cloudgrid.yaml

@@ -0,0 +1,228 @@
+# ============================================================================
+# cloudgrid.yaml — Complete Example
+# ============================================================================
+#
+# This file shows EVERY field the platform supports, with comments explaining
+# each one. It is a reference — no real project would use all of these at once.
+#
+# STANDARD: every CloudGrid template ships its cloudgrid.yaml in THIS full form.
+# Uncomment ONLY the fields the archetype needs (always: name + services; plus
+# needs: for runtime apps). Leave everything else commented. Comments are
+# ignored by the parser, so the file deploys to exactly the active fields.
+#
+# Only two fields are required: name and services. Everything else is optional.
+# Full docs: docs/cloudgrid-yaml-reference.md
+# ============================================================================
+
+
+# ─── IDENTITY ───────────────────────────────────────────────────────────────
+
+# Entity slug (REQUIRED). 2-42 chars, lowercase alphanumeric + hyphens.
+# Must start and end with a letter or digit.
+# Becomes part of your public URL: <name>-<4hex>.<org>.cloudgrid.io
+name: changelog
+
+# One-line summary. Max 280 chars. If omitted, Grid Brain auto-generates one.
+# description: Order processing API for the e-commerce platform
+
+# Single emoji or short text shown as the entity icon. Max 64 chars.
+# icon: "📦"
+
+# Entity type: 'app' (default) or 'agent'. An agent is an app with an agent: block.
+# kind: app
+
+
+# ─── NETWORKING ─────────────────────────────────────────────────────────────
+
+# Whether this entity serves public HTTP traffic.
+# true = public URL + Ingress (default). false = internal only.
+# expose: true
+
+# Additional domain names this entity serves on (the platform URL is always active).
+# custom_domains:
+#   - orders.example.com
+#   - shop.example.com
+
+
+# ─── HEALTH PROBE (entity-level override) ──────────────────────────────────
+
+# Override the default health check for the entire entity.
+# probe:
+#   path: /healthz               # HTTP path to probe (default: /).
+#   expected: "<500"             # '<500' (default), '200', '2xx'.
+
+
+# ─── DEPLOY NOTIFICATIONS ──────────────────────────────────────────────────
+
+# Slack notification to the org's default channel on deploy failure.
+# true = notify (default), false = silent.
+# notify: true
+
+
+# ─── SCALING ────────────────────────────────────────────────────────────────
+
+# Replica scaling intent.
+#   'auto'  — platform decides from the grid tier (default).
+#   'alert' — single-replica, emit a SPOF warning at plug time.
+#   1-10    — explicit replica count, clamped to the grid max.
+# scale: auto
+
+
+# ─── INFRASTRUCTURE NEEDS ──────────────────────────────────────────────────
+#
+# Declare infrastructure; the platform provisions it and injects connection
+# details as env vars. Nine needs: database, cache, kv, queue, pubsub, vector,
+# object_storage, disk, ai. Simplest form is `true`.
+#
+# needs:
+#   # database — MongoDB. Injects DATABASE_MONGODB_URL (+ legacy MONGODB_URL).
+#   #   true | pool | dedicated | { tier: external, secret: MY_DB }
+#   database: true
+#   # cache — Redis, LRU eviction (derived data). Injects CACHE_REDIS_URL (+ REDIS_URL).
+#   #   true | redis | { engine: external, secret: MY_REDIS_URL }
+#   cache: true
+#   # kv — Redis, no eviction (durable: flags, idempotency). Injects KV_REDIS_URL.
+#   kv: true
+#   # queue — Redis job-queue substrate (BullMQ). Injects QUEUE_REDIS_URL.
+#   queue: true
+#   # pubsub — Redis broadcast pub/sub. Injects PUBSUB_REDIS_URL.
+#   pubsub: true
+#   # vector — pgvector on Postgres. Injects VECTOR_PGVECTOR_URL (+ PGVECTOR_URL).
+#   #   true | pgvector | { engine: pgvector, dim: 1536 }
+#   vector: pgvector
+#   # object_storage — GCS bucket. Injects OBJECT_STORAGE_GCS_BUCKET, _GCS_REGION.
+#   #   true | { size: 10Gi }
+#   object_storage: true
+#   # disk — persistent FS mount (PVC). Injects DISK_PATH. Pins to 1 replica.
+#   #   true | { size: 1Gi, mount: /var/data }  (forbidden: /proc /sys /dev)
+#   disk: true
+#   # ai — AI Gateway via @cloudgrid-io/ai. Injects AI_GATEWAY_URL. true | false.
+#   ai: true
+
+
+# ─── INTER-ENTITY COMMUNICATION ────────────────────────────────────────────
+
+# Entities this app calls (outbound). Service-account token injected per pair.
+# calls:
+#   - org:atomic/billing-api
+
+# Inbound caller policy — who can call YOUR entity.
+# callers:
+#   policy: auto                 # 'auto' | 'manual' (default).
+#   scope: org                   # 'org' (default) | 'space' | 'explicit'.
+#   fallback: deny               # 'deny' (default) | 'warn'.
+#   # allowed_apps:              # required only when scope: explicit
+#   #   - org:atomic/frontend
+
+
+# ─── VAULT ──────────────────────────────────────────────────────────────────
+
+# Map org vault items to env vars. Keys UPPER_SNAKE_CASE; values = vault item keys.
+# vault:
+#   STRIPE_KEY: stripe-live-key
+#   SENDGRID_API_KEY: sendgrid-key
+
+
+# ─── CONNECTORS AND HOOKS ──────────────────────────────────────────────────
+
+# connectors:
+#   - id: team-slack
+#     target: org                # 'system' | 'org'.
+#     channel: "#deploys"
+# hooks:
+#   - on: deploy.failed          # release.published | deploy.failed | feedback.received | entity.created
+#     via: team-slack
+#     template: "Deploy failed for {entity_name}: {error}"
+#     channel: "#alerts"
+# triggers:
+#   - from: team-slack
+#     event: message
+#     channel: "#support"
+#     route: /webhooks/slack
+
+
+# ─── LOCAL DEVELOPMENT ──────────────────────────────────────────────────────
+
+# Config for `grid dev`. Redact fields in dev data snapshots.
+# dev:
+#   snapshot:
+#     mask:
+#       - users.email
+#       - users.phone
+
+
+# ─── AGENT METADATA ────────────────────────────────────────────────────────
+
+# An agent is an app with kind: agent (above) and an agent: block.
+# agent:
+#   purpose: Sync customer data from external CRM every night
+#   schedule: "0 2 * * *"
+#   trigger: webhook
+
+
+# ─── PRIVATE RESOURCE AUTO-DEPENDENCIES ────────────────────────────────────
+
+# When true (default), private resources are auto-injected as depends_on.
+# auto_depends_on_private_requires: true
+
+
+# ─── SERVICES (REQUIRED) ───────────────────────────────────────────────────
+#
+# At least one service is required. Key = service name (slug rules).
+# Types: node, nextjs, python, static, cron.
+#
+services:
+  web:
+    # type (REQUIRED): node | nextjs | python | static | cron
+    type: static
+    # HTTP route: '/' | '/api' | false (internal) | omitted (=false + warning).
+    # Only one service per entity can claim '/'.
+    path: /
+    # Container port (default 8080; read process.env.PORT). Not for cron.
+    # port: 3000
+    # nextjs only: base_image: distroless (default) | alpine
+    # base_image: distroless
+    # node only: lang: javascript (default) | typescript
+    # lang: typescript
+    # Custom source location (default services/<name>/). '.' = project root.
+    # source:
+    #   path: src/worker
+    # Health probe: false/omitted (TCP) | true (/health) | "/path" | {path,expected}
+    # health:
+    #   path: /api/health
+    #   expected: "200"
+    # Static runtime env vars (strings). Reserved: PORT, APP_NAME, SERVICE_NAME,
+    # NODE_ENV, MONGODB_URL, REDIS_URL, AI_GATEWAY_URL, N8N_WEBHOOK_URL, CLOUDGRID_*.
+    # env:
+    #   LOG_LEVEL: info
+    # Sibling services/private resources that must be Ready first (no cron, no cycles).
+    # depends_on:
+    #   - worker
+    # Per-service needs override (merges with app-level needs).
+    # needs:
+    #   queue: true
+    # Static-only build step:
+    # build:
+    #   command: npm run build
+    #   output: dist
+    #   env:
+    #     VITE_API_URL: https://api.example.com
+    # node_version: "22"          # static build step: '18'|'20'|'22'|'24' (quoted)
+    # Cron-only: schedule (REQUIRED), timezone (UTC|EST|PST), run (job | https URL)
+    # schedule: "0 9 * * 1"
+    # timezone: UTC
+    # run: job
+    # Verbose per-service persistence (prefer needs.disk):
+    # persist:
+    #   - name: scratch
+    #     path: /tmp/scratch
+    #     size: 500Mi
+
+
+# ============================================================================
+# NOTES
+# - NOT here: org:/entity_id: (→ .cloudgrid/link.json), secrets (→ grid secrets set),
+#   Dockerfile (platform generates from services.*.type).
+# - Deploy: grid plug   |   Local with grid resources: grid dev
+# - Full reference: docs/cloudgrid-yaml-reference.md  |  CLI: docs/cli-reference.md
+# ============================================================================

package/src/corpus/templates/changelog/index.html

@@ -0,0 +1,80 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>{{PRODUCT_NAME}} changelog</title>
+<style>
+  :root {
+    --bg: #0b0f17; --panel: #121826; --fg: #e8edf5; --muted: #9aa7bd;
+    --accent: #5b8cff; --border: #223049;
+    --added: #34d399; --fixed: #5b8cff; --changed: #fbbf24; --removed: #f87171;
+  }
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  body {
+    background: var(--bg); color: var(--fg);
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+    -webkit-font-smoothing: antialiased; line-height: 1.6;
+  }
+  .wrap { max-width: 720px; margin: 0 auto; padding: clamp(1.5rem, 5vw, 3.5rem) 1.25rem; }
+  header { margin-bottom: 3rem; }
+  header h1 { font-size: clamp(2rem, 5vw, 2.8rem); letter-spacing: -0.02em; margin-bottom: 0.5rem; }
+  header p { color: var(--muted); }
+
+  .entry { position: relative; padding-left: 1.5rem; padding-bottom: 2.5rem; border-left: 2px solid var(--border); }
+  .entry:last-child { border-left-color: transparent; padding-bottom: 0; }
+  .entry::before { content: ""; position: absolute; left: -7px; top: 4px; width: 12px; height: 12px; border-radius: 50%; background: var(--accent); border: 3px solid var(--bg); }
+  .entry .meta { display: flex; align-items: baseline; gap: 0.75rem; margin-bottom: 1rem; flex-wrap: wrap; }
+  .entry .version { font-size: 1.35rem; font-weight: 700; letter-spacing: -0.01em; }
+  .entry .date { color: var(--muted); font-size: 0.9rem; }
+  .entry ul { list-style: none; display: grid; gap: 0.6rem; }
+  .entry li { display: flex; gap: 0.65rem; align-items: baseline; color: var(--fg); }
+  .tag { flex: none; font-size: 0.7rem; font-weight: 700; text-transform: uppercase; letter-spacing: 0.04em;
+    padding: 0.15rem 0.5rem; border-radius: 6px; min-width: 62px; text-align: center; }
+  .tag.added { color: var(--added); background: rgba(52,211,153,0.12); }
+  .tag.fixed { color: var(--fixed); background: rgba(91,140,255,0.12); }
+  .tag.changed { color: var(--changed); background: rgba(251,191,36,0.12); }
+  .tag.removed { color: var(--removed); background: rgba(248,113,113,0.12); }
+  .entry li span.text { color: var(--muted); }
+  footer { color: var(--muted); font-size: 0.85rem; margin-top: 2rem; text-align: center; }
+</style>
+</head>
+<body>
+  <div class="wrap">
+    <header>
+      <h1>{{PRODUCT_NAME}} changelog</h1>
+      <p>{{CHANGELOG_INTRO}}</p>
+    </header>
+
+    <!-- ENTRIES_START -->
+    <!-- Newest release first. Each li: <span class="tag TYPE">TYPE</span>
+         where TYPE is added / fixed / changed / removed. -->
+    <div class="entry">
+      <div class="meta">
+        <span class="version">{{ENTRY_1_VERSION}}</span>
+        <span class="date">{{ENTRY_1_DATE}}</span>
+      </div>
+      <ul>
+        <li><span class="tag added">Added</span><span class="text">{{ENTRY_1_ITEM_1}}</span></li>
+        <li><span class="tag fixed">Fixed</span><span class="text">{{ENTRY_1_ITEM_2}}</span></li>
+        <li><span class="tag changed">Changed</span><span class="text">{{ENTRY_1_ITEM_3}}</span></li>
+      </ul>
+    </div>
+
+    <div class="entry">
+      <div class="meta">
+        <span class="version">{{ENTRY_2_VERSION}}</span>
+        <span class="date">{{ENTRY_2_DATE}}</span>
+      </div>
+      <ul>
+        <li><span class="tag added">Added</span><span class="text">{{ENTRY_2_ITEM_1}}</span></li>
+        <li><span class="tag removed">Removed</span><span class="text">{{ENTRY_2_ITEM_2}}</span></li>
+      </ul>
+    </div>
+    <!-- Add more .entry blocks below, newest first. -->
+    <!-- ENTRIES_END -->
+
+    <footer>{{FOOTER_TEXT}}</footer>
+  </div>
+</body>
+</html>

package/src/corpus/templates/changelog/index.md

@@ -0,0 +1,28 @@
+# Template: changelog (static)
+
+A single self-contained HTML changelog / release-notes page: reverse-chronological versioned entries, each with a date and tagged change items (added / fixed / changed / removed). **No infrastructure** — no database, no backend, no `needs:`.
+State (if any) lives only in memory and is lost on refresh.
+
+## How it deploys
+
+To publish this page, use **`gridctl_drop`** (or `gridctl_plug` with the inline
+HTML): it deploys as an **inspiration** — instant, and works on the **hosted**
+edition (Claude Web) as well as local. The reference `cloudgrid.yaml` in this
+directory (`type: static`) is ONLY for plugging the page as an OWNED static
+runtime (async, local edition only); the fast path is `gridctl_drop`.
+
+The fillable HTML is the real template — fetch it with
+`gridctl_fetch("template", "changelog")` and fill in the user's content.
+
+## cloudgrid.yaml (reference only)
+
+```yaml
+# On disk this file is the full-annotated reference (templates/_cloudgrid.yaml.reference) with EVERY
+# field present as a comment; only the fields below are uncommented, so it
+# deploys to exactly these active fields.
+name: changelog
+services:
+  web:
+    type: static
+    path: /
+```

package/src/corpus/templates/company-website/README.md

@@ -0,0 +1,54 @@
+# Template: company-website (static)
+
+A single self-contained HTML company website — a multi-section business site with
+hero, about, services, team, and contact sections. **No infrastructure** — no
+database, no backend, no `needs:`. It is one HTML file with inline CSS and inline
+JS (no external scripts, stylesheets, fonts, or CDNs), so it renders anywhere.
+
+The contact form is client-side only (validates and shows a thank-you message);
+wire it to your own email service or form endpoint if you want real submissions.
+
+## How it deploys
+
+To publish this page, use **`gridctl_drop`** (or `gridctl_plug` with the inline
+HTML): it deploys as an **inspiration** — instant, and works on the **hosted**
+edition (Claude Web) as well as local. The reference `cloudgrid.yaml` in this
+directory (`type: static`) is ONLY for plugging the page as an OWNED static
+runtime (async, local edition only); the fast path is `gridctl_drop`.
+
+The fillable HTML is the real template — fetch it with
+`gridctl_fetch("template", "company-website")` and fill in the user's content.
+
+## How to adapt
+
+Replace the `{{PLACEHOLDER}}` tokens in `index.html`:
+
+- **Identity:** `{{COMPANY_NAME}}`, `{{COMPANY_TAGLINE}}`.
+- **Hero:** `{{HERO_HEADLINE}}`, `{{HERO_SUBHEAD}}`, `{{PRIMARY_CTA}}`, `{{SECONDARY_CTA}}`.
+- **About:** `{{ABOUT_HEADLINE}}`, `{{ABOUT_PARA_1}}`, `{{ABOUT_PARA_2}}`, and four
+  `{{STAT_n_NUM}}` / `{{STAT_n_LABEL}}` pairs.
+- **Services:** `{{SERVICES_HEADLINE}}`, `{{SERVICES_SUBHEAD}}`, and one card per
+  service (`{{SERVICE_n_ICON}}` is a single emoji, plus title and body). Duplicate
+  a `.card` block between the `SERVICES_START` / `SERVICES_END` comments to add more.
+- **Team:** `{{TEAM_HEADLINE}}`, `{{TEAM_SUBHEAD}}`, and one `.member` per person
+  (`{{MEMBER_n_INITIALS}}` renders in the avatar circle, plus name, role, bio).
+  Duplicate a `.member` block between `TEAM_START` / `TEAM_END` to add more.
+- **Contact:** `{{CONTACT_HEADLINE}}`, `{{CONTACT_SUBHEAD}}`, `{{CONTACT_EMAIL}}`,
+  `{{CONTACT_PHONE}}`, `{{CONTACT_ADDRESS}}`, `{{CONTACT_HOURS}}`.
+
+Keep it a single self-contained HTML file — do not add external scripts,
+stylesheets, fonts, or large embedded media. Recolor by editing the CSS
+variables in `:root` (`--accent`, `--bg`, `--fg`, etc.).
+
+## cloudgrid.yaml (reference only)
+
+```yaml
+# On disk this file is the full-annotated reference (templates/_cloudgrid.yaml.reference) with EVERY
+# field present as a comment; only the fields below are uncommented, so it
+# deploys to exactly these active fields.
+name: company-website
+services:
+  web:
+    type: static
+    path: /
+```