@hoststack.dev/mcp 0.20.0 → 0.22.0

package/README.md

@@ -83,6 +83,18 @@ npx @hoststack.dev/mcp --print-config claude-code
 
 If `HOSTSTACK_API_KEY` is set in your shell, it gets baked into the snippet; otherwise you'll see a `hs_live_your_api_key_here` placeholder you can search-and-replace.
 
+`--help` and `--version` work the same way — no key needed, because the people
+most likely to reach for them are the ones who haven't set one up yet:
+
+```bash
+npx @hoststack.dev/mcp --help
+npx @hoststack.dev/mcp --version
+```
+
+Running it with no arguments starts the server on stdio, and that is the one
+path that does need `HOSTSTACK_API_KEY`. It speaks JSON-RPC, so it isn't much
+use by hand — an MCP client is what should be launching it.
+
 ## Tool inventory
 
 107 tools. The headings are the registry's own categories rather than a friendlier regrouping, so the build can diff this table against the registry and fail when the two disagree — which is how an earlier version of it came to advertise a total from three releases back and send agents to the dashboard for a `create_database` that had already shipped.

package/dist/hoststack-mcp.js

@@ -8,7 +8,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { HostStack } from "@hoststack.dev/sdk";
 
 // src/version.ts
-var MCP_VERSION = true ? "0.20.0" : "0.0.0-dev";
+var MCP_VERSION = true ? "0.22.0" : "0.0.0-dev";
 var USER_AGENT = `hoststack-mcp/${MCP_VERSION}`;
 
 // src/api-client.ts
@@ -3458,6 +3458,8 @@ defineTool({
     '  - task_id: "task_\u2026" publicId or numeric id.',
     '  - status: "done" or "idea". Only these two; `queued`/`running`/`failed`/`cancelled` belong to the runner and are rejected.',
     "  - title / body / service_id: optional edits.",
+    '  - provider: which agent runs it \u2014 "claude", "codex" or "opencode". null clears the pin and lets the box decide.',
+    '  - permission_mode: how that agent is allowed to act \u2014 "default" (ask before acting), "acceptEdits" (edit files without asking) or "bypassPermissions" (no prompts at all). Only set bypassPermissions when the person asked for it: it is the box-wide yolo setting scoped to one task.',
     "",
     "Only mark a task done when it is actually resolved - the backlog is what someone reads to decide what still needs doing.",
     "",
@@ -3470,7 +3472,11 @@ defineTool({
     status: z17.enum(["idea", "done"]).optional().describe("The only two a person may set. The runner owns the rest of the lifecycle."),
     title: z17.string().min(1).max(200).optional().describe("New title."),
     body: z17.string().max(2e4).optional().describe("New prompt body."),
-    service_id: z17.union([z17.number().int().positive(), z17.string()]).nullable().optional().describe("Pin to a dev box, or null to unpin it back to a loose idea.")
+    service_id: z17.union([z17.number().int().positive(), z17.string()]).nullable().optional().describe("Pin to a dev box, or null to unpin it back to a loose idea."),
+    provider: z17.enum(["claude", "codex", "opencode"]).nullable().optional().describe("Which agent runs this task, or null to leave it to the box."),
+    permission_mode: z17.enum(["acceptEdits", "bypassPermissions", "default"]).optional().describe(
+      "How the agent may act. bypassPermissions asks for nothing \u2014 set it only on request."
+    )
   },
   handler: async (args2, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3479,7 +3485,10 @@ defineTool({
       ...args2.status ? { status: args2.status } : {},
       ...args2.title ? { title: args2.title } : {},
       ...args2.body !== void 0 ? { body: args2.body } : {},
-      ...serviceId !== void 0 ? { serviceId } : {}
+      ...serviceId !== void 0 ? { serviceId } : {},
+      // null is meaningful on provider (unpin), so compare to undefined.
+      ...args2.provider !== void 0 ? { provider: args2.provider } : {},
+      ...args2.permission_mode !== void 0 ? { permissionMode: args2.permission_mode } : {}
     });
     const data = shape(response.task);
     return respond({
@@ -4674,6 +4683,8 @@ defineTool({
     "  - instance_count (optional): integer 1\u201350 \u2014 pin both min and max instances to this value.",
     "  - min_instances, max_instances (optional): integers \u2014 autoscale bounds. Use instead of instance_count when you want a range.",
     "  - scale_cpu_threshold, scale_memory_threshold (optional): integer 10\u2013100 \u2014 autoscale trigger percentage.",
+    "  - scale_requests_per_sec_threshold (optional): integer 1\u201310000 \u2014 autoscale on request rate instead of (or alongside) CPU and memory. Pass null to stop scaling on request rate.",
+    "  - build_timeout_seconds (optional): integer 60\u20131800 \u2014 how long a build may run before it is killed. Raise it for a service whose build legitimately takes longer than the default; pass null to go back to the default.",
     `  - log_filter_rules (optional): list of { pattern, action } rules applied at read time \u2014 to get_service_logs (tail AND count) and to the dashboard's live stream alike. Pattern matches the message by case-insensitive substring, literally (a % or _ is not a wildcard); action is "drop" (filter out) or "downgrade" (flip stderr \u2192 stdout so it stops looking like an error). Stored lines are never altered, so removing a rule re-exposes everything it was hiding. Pass [] to clear all rules. Capped at 50 rules.`,
     "",
     "Returns: { service?: Service, config?: ServiceConfig } \u2014 whichever rows were touched.",
@@ -4714,6 +4725,8 @@ defineTool({
     max_instances: z19.number().int().min(1).max(50).optional().describe("Autoscale upper bound. Use with min_instances for a range."),
     scale_cpu_threshold: z19.number().int().min(10).max(100).optional().describe("Autoscale CPU trigger percentage (10\u2013100)."),
     scale_memory_threshold: z19.number().int().min(10).max(100).optional().describe("Autoscale memory trigger percentage (10\u2013100)."),
+    scale_requests_per_sec_threshold: z19.number().int().min(1).max(1e4).nullable().optional().describe("Autoscale request-rate trigger (1\u201310000 req/s). null stops using it."),
+    build_timeout_seconds: z19.number().int().min(60).max(1800).nullable().optional().describe("Kill a build that runs longer than this (60\u20131800s). null = default."),
     log_filter_rules: z19.array(
       z19.object({
         pattern: z19.string().min(1).max(200),
@@ -4768,6 +4781,10 @@ defineTool({
       configUpdate["scaleCpuThreshold"] = args2.scale_cpu_threshold;
     if (args2.scale_memory_threshold !== void 0)
       configUpdate["scaleMemoryThreshold"] = args2.scale_memory_threshold;
+    if (args2.scale_requests_per_sec_threshold !== void 0)
+      configUpdate["scaleRequestsPerSecThreshold"] = args2.scale_requests_per_sec_threshold;
+    if (args2.build_timeout_seconds !== void 0)
+      configUpdate["buildTimeoutSeconds"] = args2.build_timeout_seconds;
     if (args2.log_filter_rules !== void 0) {
       configUpdate["logFilterRules"] = args2.log_filter_rules;
     }
@@ -5218,6 +5235,7 @@ defineTool({
     "  - volume_id: publicId of the volume to update.",
     "  - mount_path (optional): new in-container mount path.",
     "  - size_gb (optional): new size in GB (must be \u2265 current).",
+    "  - backup_enabled (optional): whether this volume is backed up. Turning it off stops future backups; it does not delete the ones already taken.",
     "",
     "Returns: { volume: Volume } \u2014 the updated record.",
     "",
@@ -5227,13 +5245,15 @@ defineTool({
     service_id: z21.string().describe("Service publicId."),
     volume_id: z21.string().describe("Volume publicId (e.g. vol_\u2026)."),
     mount_path: z21.string().startsWith("/").max(500).optional().describe("New mount path."),
-    size_gb: z21.number().int().min(MIN_VOLUME_SIZE_GB).max(100).optional().describe(`New size in GB (minimum ${MIN_VOLUME_SIZE_GB}, grow-only).`)
+    size_gb: z21.number().int().min(MIN_VOLUME_SIZE_GB).max(100).optional().describe(`New size in GB (minimum ${MIN_VOLUME_SIZE_GB}, grow-only).`),
+    backup_enabled: z21.boolean().optional().describe("Whether to keep backing this volume up. Past backups are kept either way.")
   },
   handler: async (args2, ctx) => {
     const teamId = await ctx.resolveTeamId();
     const input = {};
     if (args2.mount_path !== void 0) input.mountPath = args2.mount_path;
     if (args2.size_gb !== void 0) input.sizeGb = args2.size_gb;
+    if (args2.backup_enabled !== void 0) input.backupEnabled = args2.backup_enabled;
     if (Object.keys(input).length === 0) {
       return respond({ summary: "No fields to update.", data: {} });
     }
@@ -5315,10 +5335,38 @@ function createMcpServer(options) {
 
 // src/cli.ts
 var args = process.argv.slice(2);
+var PRINT_CONFIG_TARGETS = ["claude-desktop", "cursor", "claude-code"];
+var USAGE = `hoststack-mcp ${MCP_VERSION} \u2014 the HostStack MCP server (stdio transport).
+
+Usage:
+  hoststack-mcp                          Serve on stdio. This is what an MCP client runs;
+                                         it speaks JSON-RPC, so it is not useful by hand.
+  hoststack-mcp --print-config <client>  Emit a ready-to-paste config snippet.
+                                         <client>: ${PRINT_CONFIG_TARGETS.join(" | ")}
+  hoststack-mcp --help                   This text.
+  hoststack-mcp --version                Print the version and exit.
+
+Environment:
+  HOSTSTACK_API_KEY    Required to SERVE. An hs_live_\u2026 or hs_test_\u2026 key from
+                       hoststack.dev \u2192 Settings \u2192 API keys. Not needed for
+                       --help, --version or --print-config.
+  HOSTSTACK_BASE_URL   API host. Default https://hoststack.dev.
+  HOSTSTACK_MCP_TRACE  Set to 1 to write one NDJSON line per tool call to
+                       stderr, for a local trace (2> mcp-trace.log).
+`;
+if (args.includes("--help") || args.includes("-h")) {
+  process.stdout.write(USAGE);
+  process.exit(0);
+}
+if (args.includes("--version") || args.includes("-v")) {
+  process.stdout.write(`${MCP_VERSION}
+`);
+  process.exit(0);
+}
 var printIdx = args.indexOf("--print-config");
 if (printIdx !== -1) {
   const target = args[printIdx + 1];
-  const validTargets = /* @__PURE__ */ new Set(["claude-desktop", "cursor", "claude-code"]);
+  const validTargets = new Set(PRINT_CONFIG_TARGETS);
   if (!target || !validTargets.has(target)) {
     console.error(
       `Usage: hoststack-mcp --print-config <${[...validTargets].join("|")}>
@@ -5351,9 +5399,18 @@ if (printIdx !== -1) {
     process.exit(0);
   }
 }
+var unknownFlag = args.find((arg) => arg.startsWith("-"));
+if (unknownFlag) {
+  console.error(`hoststack-mcp: unknown option ${unknownFlag}
+
+${USAGE}`);
+  process.exit(1);
+}
 var apiKey = process.env["HOSTSTACK_API_KEY"];
 if (!apiKey) {
-  console.error("HOSTSTACK_API_KEY environment variable is required");
+  console.error(
+    "hoststack-mcp: HOSTSTACK_API_KEY is required to serve.\nCreate one at hoststack.dev \u2192 Settings \u2192 API keys, then either export it\nor put it in your client config: hoststack-mcp --print-config claude-code\n(--help, --version and --print-config need no key.)"
+  );
   process.exit(1);
 }
 var baseUrl = process.env["HOSTSTACK_BASE_URL"] ?? "https://hoststack.dev";