@homespunapps/mcp 1.6.78 → 1.6.80

package/dist/tools.js

@@ -179,6 +179,29 @@ function invalidArgs(message) {
         isError: true,
     }, "invalid_args");
 }
+/**
+ * The `transfer` tool talks to /v1/apps/:id/transfer through
+ * HomespunClient.call(), the one low-level primitive it exposes publicly,
+ * because that route has no typed wrapper yet. asRelayObject()/failRelay()
+ * mirror the private asObject()/fail() pair every typed wrapper method uses
+ * internally, so a raw call() still produces the same HomespunApiError shape
+ * errorResult() already knows how to report.
+ */
+function asRelayObject(r) {
+    if (r.data === null || typeof r.data !== "object" || Array.isArray(r.data)) {
+        throw new HomespunApiError(r.status, "invalid_response", `relay returned a ${r.status} with a non-object body`, { body: r.data });
+    }
+    return r.data;
+}
+/** Throw a HomespunApiError from a failed RelayResponse (see asRelayObject). */
+function failRelay(r) {
+    const err = r.data?.error;
+    throw new HomespunApiError(r.status, err?.code ?? "relay_error", err?.message ?? `relay returned ${r.status}`, err?.details, {
+        hint: err?.hint,
+        retryable: err?.retryable,
+        docsUrl: err?.docs_url,
+    });
+}
 /** Read a required string arg; returns undefined when absent/empty. */
 function str(args, key) {
     const v = args[key];
@@ -553,6 +576,20 @@ const grantsShape = {
         .optional()
         .describe("revoke only. The grant link id (see list's `id` field)."),
 };
+const transferShape = {
+    action: z
+        .enum(["start", "status", "cancel"])
+        .describe("A v2 app's ownership transfer (issue #1847). start does not move ownership: it only mints a pending offer and emails the named person an accept link, and the app stays owned here until they open it and accept (app_id+email; optional keep_as_member). status: the app's pending transfer, or null if none is pending (app_id). cancel: withdraw a pending transfer; idempotent, so cancelling with none pending is still a success (app_id)."),
+    app_id: z.string().min(1).describe("The app id."),
+    email: z
+        .string()
+        .optional()
+        .describe("start only. The email to offer ownership to. The relay sends that address an accept link; ownership moves only when they open it and accept, never at start itself. 409s if a transfer is already pending for this app, or if the email already owns it."),
+    keep_as_member: z
+        .boolean()
+        .optional()
+        .describe("start only. Whether the current owner stays on as an ordinary member once the transfer is accepted, losing owner powers but keeping app access. Defaults to true. Has no effect unless and until the transfer is actually accepted."),
+};
 const credentialsShape = {
     action: z
         .enum(["mint", "list", "pause", "resume", "rotate", "revoke"])
@@ -1643,6 +1680,77 @@ export const TOOLS = [
             }
         },
     },
+    {
+        name: "transfer",
+        description: "A v2 app's ownership transfer (issue #1847): handing the app, and the quota and billing responsibility that come with it, to a different human. This is two steps, and `start` completing is only the first one. start mints a pending offer and emails the named person an accept link; the app is still owned here when the call returns, stays owned here while the offer is pending, and only moves once that person opens the link and accepts it. Reporting the transfer as done after `start` would be wrong: check `status` to see whether it is still pending or has dropped to null (accepted, expired, or withdrawn), and the caller's own agent key stops being able to deploy this app only at the moment it actually moves. Actions: start offers the app to an email address, 409ing if a transfer is already pending or the email already owns the app; status returns the pending transfer, or null if none; cancel withdraws a pending transfer and is idempotent, so cancelling with nothing pending is still a success.",
+        inputSchema: transferShape,
+        // Consolidated tool: read action (status) + mutating ones (start/cancel).
+        // Hint reflects start, the most-privileged action: it hands the app to
+        // someone else once accepted.
+        annotations: {
+            title: "Manage App Ownership Transfer",
+            readOnlyHint: false,
+            // Destructive in effect once accepted: `start` sets an app on a path to
+            // a different owner, and `cancel` withdraws that path.
+            destructiveHint: true,
+            // NOT idempotent: `start` mints a fresh pending offer, and a retry
+            // while one is already pending 409s rather than silently having no
+            // further effect. Matches the `grants` tool, which is the same shape.
+            idempotentHint: false,
+            openWorldHint: false,
+        },
+        handler: async (client, args) => {
+            const action = String(args["action"]);
+            if (str(args, "app_id") === undefined) {
+                return invalidArgs(`${action} requires \`app_id\``);
+            }
+            const appId = String(args["app_id"]);
+            const path = `/v1/apps/${encodeURIComponent(appId)}/transfer`;
+            try {
+                switch (action) {
+                    case "start": {
+                        if (str(args, "email") === undefined) {
+                            return invalidArgs("start requires `email`");
+                        }
+                        const keepAsMember = bool(args, "keep_as_member");
+                        const r = await client.call("POST", path, {
+                            email: String(args["email"]),
+                            ...(keepAsMember !== undefined ? { keepAsMember } : {}),
+                        });
+                        if (!r.ok)
+                            failRelay(r);
+                        const started = asRelayObject(r);
+                        return jsonResult({
+                            ...started,
+                            // See the tool description: `start` succeeding only means the
+                            // offer was sent, not that ownership moved. Stated again here,
+                            // in the result itself, so a caller reading just this response
+                            // cannot mistake it for a completed transfer.
+                            ownership_moved: false,
+                            note: "Ownership has not moved. It only moves once the recipient opens the emailed link and accepts; poll `status` to see when that happens.",
+                        });
+                    }
+                    case "status": {
+                        const r = await client.call("GET", path);
+                        if (!r.ok)
+                            failRelay(r);
+                        return jsonResult(asRelayObject(r));
+                    }
+                    case "cancel": {
+                        const r = await client.call("DELETE", path);
+                        if (!r.ok)
+                            failRelay(r);
+                        return jsonResult({ app_id: appId, cancelled: true });
+                    }
+                    default:
+                        return invalidArgs(`unknown transfer action '${action}'`);
+                }
+            }
+            catch (e) {
+                return errorResult(e);
+            }
+        },
+    },
     // ----- consolidated management tools --------------------------------------
     {
         name: "credentials",

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.6.78";
+export declare const VERSION = "1.6.80";

package/dist/version.js

@@ -1,3 +1,3 @@
 // Single source of the package version, reported in the MCP server's
 // serverInfo. Kept in sync with package.json by the release tooling.
-export const VERSION = "1.6.78";
+export const VERSION = "1.6.80";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@homespunapps/mcp",
   "mcpName": "dev.homespun/homespun",
-  "version": "1.6.78",
+  "version": "1.6.80",
   "description": "Model Context Protocol (stdio) server for Homespun: lets any MCP client (Claude Desktop, Cursor, …) deploy a multi-user web app with hosting, auth, a shared database and permissions included.",
   "license": "MIT",
   "type": "module",
@@ -46,7 +46,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@homespunapps/core": "^1.6.78",
+    "@homespunapps/core": "^1.6.80",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/server.json

@@ -3,14 +3,14 @@
   "name": "dev.homespun/homespun",
   "title": "Homespun",
   "description": "Deploy a multi-user web app from your agent: hosting, auth, database, and permissions.",
-  "version": "1.6.78",
+  "version": "1.6.80",
   "websiteUrl": "https://homespun.dev",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@homespunapps/mcp",
-      "version": "1.6.78",
+      "version": "1.6.80",
       "transport": {
         "type": "stdio"
       },