@hoststack.dev/mcp 0.24.0 → 0.26.0

package/dist/index.js

@@ -3,7 +3,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { HostStack } from "@hoststack.dev/sdk";
 
 // src/version.ts
-var MCP_VERSION = true ? "0.24.0" : "0.0.0-dev";
+var MCP_VERSION = true ? "0.26.0" : "0.0.0-dev";
 var USER_AGENT = `hoststack-mcp/${MCP_VERSION}`;
 
 // src/api-client.ts
@@ -656,6 +656,10 @@ async function resolveMachineId(ctx, teamId, machine) {
   return matches[0].id;
 }
 function describeMachine(m) {
+  if (m.kind === "infra") {
+    const state = m.status === "active" ? "online" : "offline";
+    return `${m.name}: infrastructure machine for project ${m.infraProjectId}, ${state} (only that project's services can be pinned to it)`;
+  }
   if (!m.enrolled) return `${m.name}: registered but never paired`;
   if (m.status !== "active") return `${m.name}: offline`;
   if (m.agentBuild === "from-source") return `${m.name}: online, agent running from source`;
@@ -1394,7 +1398,7 @@ var DNS_RECORD_TYPES = [
 async function resolveZonePublicId(hoststack, teamId, input) {
   if (input.zone_id) {
     const { zones: zones2 } = await hoststack.dns.listZones(teamId);
-    const match = zones2.find((z22) => z22.publicId === input.zone_id);
+    const match = zones2.find((z23) => z23.publicId === input.zone_id);
     if (!match) {
       throw new Error(`Zone ${input.zone_id} not found on this team.`);
     }
@@ -1408,7 +1412,7 @@ async function resolveZonePublicId(hoststack, teamId, input) {
   const labels = fqdn.split(".");
   for (let i = 0; i < labels.length - 1; i++) {
     const candidate = labels.slice(i).join(".");
-    const match = zones.find((z22) => z22.domainName.toLowerCase() === candidate);
+    const match = zones.find((z23) => z23.domainName.toLowerCase() === candidate);
     if (match && match.status !== "deleting") {
       return { publicId: match.publicId, domainName: match.domainName };
     }
@@ -1425,19 +1429,85 @@ defineTool({
     "",
     "When to use: discover which apex domains support record management before calling create_dns_record / list_dns_records. The dashboard equivalent is Domains \u2192 DNS.",
     "",
-    'Returns: { items: Zone[] } \u2014 each zone exposes publicId, domainName, status ("active" | "syncing" | "failed" | "deleting"), nsRecords (the nameservers the parent registry must delegate to), provider, createdAt.',
+    'Returns: { items: Zone[] } \u2014 each zone exposes publicId, domainName, status ("active" | "syncing" | "failed" | "deleting"), nsRecords (the nameservers the parent registry must delegate to), provider, createdAt, plus the delegation reading below.',
+    "",
+    'READ delegationStatus, NOT status, to answer "is this domain live?". `status` describes the zone on OUR side \u2014 "active" means PowerDNS holds it and answers for it. `delegationStatus` describes whether the parent registry actually SENDS anyone here:',
+    '  - "delegated" \u2014 the registry names our nameservers; queries reach us.',
+    '  - "foreign" \u2014 the registry names somebody else (delegationObservedNs says who). The zone is authoritative for nobody: its records are correct and unreachable, public lookups return the OLD host or nothing, and no domain under it can pass verification or get a certificate. This is the state a half-finished migration sits in, and it looks identical to a healthy zone on every other field.',
+    '  - "unknown" \u2014 no usable answer (SERVFAIL/timeout/never checked). NOT the same as "foreign"; do not tell a user to change their registrar on the strength of it. Call check_dns_delegation for a live reading.',
+    "",
+    "delegationObservedNs is the NS set the parent publishes today, and delegationCheckedAt is when it was read (refreshed hourly). For an answer current to the second \u2014 e.g. just after a registrar change \u2014 call check_dns_delegation.",
+    "",
+    'Example: list_dns_zones() \u2192 { items: [{ publicId: "dnz_abc", domainName: "micci.dk", status: "active", nsRecords: ["ns1.hoststack.dev","ns2.hoststack.dev"], delegationStatus: "foreign", delegationObservedNs: ["docks15.rzone.de","shades13.rzone.de"] }] }',
+    "",
+    'Each zone ALSO carries what the registry says about the REGISTRATION, refreshed daily over RDAP: registrar, registryStatus (EPP codes such as clientHold / pendingTransfer / pendingDelete / redemptionPeriod), registryExpiresAt, registryCheckedAt and registryCheckOutcome ("ok" | "not_found" | "unsupported" | "rate_limited" | "error").',
     "",
-    'Example: list_dns_zones() \u2192 { items: [{ publicId: "dnz_abc", domainName: "micci.dk", status: "active", nsRecords: ["ns1.hoststack.dev","ns2.hoststack.dev"] }] }'
+    'This is a different question from delegation, and a zone can fail either one alone. Delegation asks whether the world is being sent here; these fields ask whether the domain is still going to be the customer\'s next month. `status: "active"` answers neither \u2014 it describes our nameservers only.',
+    "",
+    'SILENCE IS NOT GOOD NEWS HERE. A null registryExpiresAt or registrar on a zone that HAS been checked means the registry publishes neither \u2014 DENIC publishes no expiry and no registrar for any .de \u2014 and registryCheckOutcome "unsupported" means the TLD has no RDAP service at all (there is none for .dk), so every field above it is unknowable rather than fine. Read registryCheckOutcome before drawing any conclusion from an empty field.',
+    "",
+    "HostStack is not the registrar for a domain whose DNS it merely hosts. Nothing in this MCP, the CLI or the dashboard can renew, transfer or un-hold a registration \u2014 if registryStatus or registryExpiresAt shows trouble, the action is at the registrar named in `registrar`.",
+    "",
+    'Example: list_dns_zones() \u2192 { items: [{ publicId: "dnz_abc", domainName: "micci.dk", status: "active", nsRecords: ["ns1.hoststack.dev","ns2.hoststack.dev"], registrar: "GoDaddy.com, LLC", registryStatus: ["clientTransferProhibited"], registryExpiresAt: "2027-03-04T00:00:00Z", registryCheckOutcome: "ok" }] }'
   ].join("\n"),
   input: {},
   handler: async (_args, ctx) => {
     const teamId = await ctx.resolveTeamId();
     const response = await ctx.hoststack.dns.listZones(teamId);
-    const items = Array.isArray(response.zones) ? response.zones.map(shape) : [];
-    const summary = items.length === 0 ? "No DNS zones hosted on this team. Create one in the dashboard (Domains \u2192 DNS)." : `Found ${items.length} hosted DNS zone${items.length === 1 ? "" : "s"}.`;
+    const zones = Array.isArray(response.zones) ? response.zones : [];
+    const items = zones.map(shape);
+    const foreign = zones.filter((z23) => z23.delegationStatus === "foreign");
+    const foreignNote = foreign.length === 0 ? "" : ` WARNING: ${foreign.length} zone${foreign.length === 1 ? " is" : "s are"} hosted here but still delegated elsewhere by the registry \u2014 ` + foreign.map(
+      (z23) => `${z23.domainName} \u2192 ${(z23.delegationObservedNs ?? []).join(", ") || "unknown nameservers"}`
+    ).join("; ") + `. Records on ${foreign.length === 1 ? "it" : "them"} are correct but unreachable; the nameservers must be changed at the registrar.`;
+    const summary = items.length === 0 ? "No DNS zones hosted on this team. Create one in the dashboard (Domains \u2192 DNS)." : `Found ${items.length} hosted DNS zone${items.length === 1 ? "" : "s"}.${foreignNote}`;
     return respond({ summary, data: { items } });
   }
 });
+defineTool({
+  name: "check_dns_delegation",
+  category: "dns",
+  description: [
+    "Read, live, whether the parent registry actually delegates a zone's apex to HostStack \u2014 and store the reading on the zone.",
+    "",
+    'WHAT THIS ANSWERS that nothing else does: a hosted zone can be `status: "active"`, DNSSEC-signed, full of correct records, and authoritative for NOBODY, because the registry still points the domain at the previous host. Public lookups then return the old host (or nothing) while a query against our own nameservers returns the right answer \u2014 and every other field we expose says healthy. This is the normal shape of a half-finished migration, and it is what to check FIRST when a zone looks perfect but the site is not live, a domain will not verify, or a certificate will not issue.',
+    "",
+    "When to use: right after someone changes nameservers at a registrar (list_dns_zones carries the hourly reading, which will be stale by minutes); before telling anyone a cutover is done; or to explain why verify_domain keeps returning pending.",
+    "",
+    "Provide EITHER zone_id (the zone publicId) OR domain (apex or subdomain \u2014 the longest-matching hosted apex wins).",
+    "",
+    "Returns: { zone, delegation: { status, observedNameservers, expectedNameservers, checkedAt } }.",
+    `  - status "delegated": at least one of our nameservers is in the parent's NS set. Any, not all \u2014 a staged migration legitimately runs split for a while, and queries already reach us during it.`,
+    '  - status "foreign": the parent answered and named somebody else. observedNameservers is who. The fix is at the REGISTRAR of the apex, never in our records; expect up to 48h of propagation after the change.',
+    '  - status "unknown": no usable answer (SERVFAIL, timeout, NXDOMAIN). This is NOT "not delegated" \u2014 never tell someone to re-point a registrar on the strength of it. Retry, or check the domain is registered at all.',
+    "",
+    'Note for `.dk` and other strict registries: they refuse the nameserver change until we already answer authoritatively for the domain, so a zone there is legitimately "foreign" for a while by design. That is the ordering the registry imposes, not a mistake.',
+    "",
+    'Example: check_dns_delegation({ domain: "wohnwagen-wuckert.de" }) \u2192 { delegation: { status: "foreign", observedNameservers: ["docks15.rzone.de","shades13.rzone.de"], expectedNameservers: ["ns1.hoststack.dev","ns2.hoststack.dev"] } }'
+  ].join("\n"),
+  input: {
+    zone_id: z8.string().optional().describe('Zone publicId (e.g. "dnz_abc").'),
+    domain: z8.string().optional().describe("Apex or subdomain \u2014 resolves to the longest-matching hosted zone.")
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const zoneInput = {};
+    if (args.zone_id !== void 0) zoneInput.zone_id = args.zone_id;
+    if (args.domain !== void 0) zoneInput.domain = args.domain;
+    const zone = await resolveZonePublicId(ctx.hoststack, teamId, zoneInput);
+    const { delegation } = await ctx.hoststack.dns.checkDelegation(teamId, zone.publicId);
+    const observed = delegation.observedNameservers.join(", ");
+    const expected = delegation.expectedNameservers.join(" / ");
+    const summary = delegation.status === "delegated" ? `${zone.domainName} is delegated to HostStack (${observed}). Queries for it reach this zone.` : delegation.status === "foreign" ? `${zone.domainName} is HOSTED here but NOT delegated here: the registry still points it at ${observed}. Records in this zone are correct but nobody is being sent to read them \u2014 public lookups return the old host. Change the nameservers at the registrar of ${zone.domainName} to ${expected}; propagation can take up to 48 hours.` : `Could not determine the delegation for ${zone.domainName} \u2014 the NS lookup returned no usable answer (SERVFAIL, timeout, or the domain is not registered). This is NOT evidence that the delegation is wrong; do not change a registrar on the strength of it. Retry in a moment.`;
+    return respond({
+      summary,
+      data: {
+        zone: { publicId: zone.publicId, domainName: zone.domainName },
+        delegation
+      }
+    });
+  }
+});
 defineTool({
   name: "list_dns_records",
   category: "dns",
@@ -1769,10 +1839,14 @@ defineTool({
     };
     if (args.path_prefix !== void 0) input.pathPrefix = args.path_prefix;
     const response = await ctx.hoststack.domains.add(teamId, input);
-    const dnsSyncWarning = response.domain.dnsSyncWarning;
-    const data = dnsSyncWarning ? { domain: shapeDomain(response.domain), dnsSyncWarning } : { domain: shapeDomain(response.domain) };
+    const { dnsSyncWarning, delegationWarning } = response.domain;
+    const data = {
+      domain: shapeDomain(response.domain),
+      ...dnsSyncWarning ? { dnsSyncWarning } : {},
+      ...delegationWarning ? { delegationWarning } : {}
+    };
     return respond({
-      summary: dnsSyncWarning ? `Added domain ${args.hostname}, but its auto-created DNS record hasn't synced yet \u2014 ${dnsSyncWarning}` : `Added domain ${args.hostname}. Configure DNS, then call verify_domain.`,
+      summary: delegationWarning ? `Added domain ${args.hostname}, but it CANNOT verify yet: ${delegationWarning}` : dnsSyncWarning ? `Added domain ${args.hostname}, but its auto-created DNS record hasn't synced yet \u2014 ${dnsSyncWarning}` : `Added domain ${args.hostname}. Configure DNS, then call verify_domain.`,
       data
     });
   }
@@ -1788,19 +1862,30 @@ defineTool({
     "Inputs:",
     "  - domain_id: publicId of the domain (from list_domains or add_domain).",
     "",
-    "Returns: { ok: true }. Re-call list_domains to inspect the updated verified flag and SSL status.",
+    "Returns: { domain, verified }. `verified` is the outcome of THIS check \u2014 the call does not merely queue one.",
+    "",
+    "If it fails and HostStack hosts the zone, the response may carry `delegationWarning`: the records are ours and correct, but the registry still delegates the apex to another host, so queries never reach us. That will NOT resolve by waiting or by calling this again \u2014 the nameservers have to change at the registrar. Use check_dns_delegation to see who the apex currently points at.",
     "",
-    'Example: verify_domain({ domain_id: "dom_xyz" }) \u2192 { ok: true }'
+    "It may instead carry `dnsSyncWarning`: the record HostStack creates for this hostname could not be published, usually because a record already at that name conflicts with it (a CNAME and an A cannot share a name). Also not fixable by retrying \u2014 resolve the conflict it names with list_dns_records / delete_dns_record first.",
+    "",
+    'Example: verify_domain({ domain_id: "dom_xyz" }) \u2192 { verified: false, delegationWarning: "\u2026the registry still delegates wohnwagen-wuckert.de to docks15.rzone.de\u2026" }'
   ].join("\n"),
   input: {
     domain_id: z9.string().describe("Domain publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
-    await ctx.hoststack.domains.verify(teamId, args.domain_id);
+    const { domain } = await ctx.hoststack.domains.verify(teamId, args.domain_id);
+    const verified = domain.status === "active";
+    const summary = verified ? `Verified ${domain.domain} \u2014 it is now active.` : domain.delegationWarning ? `${domain.domain} did NOT verify, and retrying will not help: ${domain.delegationWarning}` : domain.dnsSyncWarning ? `${domain.domain} did NOT verify, and retrying will not help: ${domain.dnsSyncWarning}` : `${domain.domain} did not verify yet (status: ${domain.status}). DNS changes can take time to propagate; check the records resolve publicly, then call this again.`;
     return respond({
-      summary: `Triggered DNS verification for ${args.domain_id}.`,
-      data: { ok: true }
+      summary,
+      data: {
+        domain: shapeDomain(domain),
+        verified,
+        ...domain.delegationWarning ? { delegationWarning: domain.delegationWarning } : {},
+        ...domain.dnsSyncWarning ? { dnsSyncWarning: domain.dnsSyncWarning } : {}
+      }
     });
   }
 });
@@ -2894,19 +2979,69 @@ defineTool({
 });
 
 // src/tools/github.ts
+import { z as z14 } from "zod";
+function shapeRepo(repo) {
+  return {
+    id: repo.id,
+    fullName: repo.fullName,
+    defaultBranch: repo.defaultBranch,
+    private: repo.isPrivate,
+    url: repo.htmlUrl,
+    ...repo.language ? { language: repo.language } : {}
+  };
+}
+defineTool({
+  name: "list_github_repos",
+  category: "github",
+  description: [
+    "Every GitHub repository this team can deploy, with the `id` create_service takes \u2014 and the `owner/name` you can pass instead of it.",
+    "",
+    "When to use: before create_service or create_standalone_dev_environment with a repo source. `github_repo_id` is a HostStack row id, NOT the id GitHub shows \u2014 it appears in no clone URL and no GitHub API response, so it cannot be derived and must not be guessed. (Guessing used to be survivable-looking: the create returned 200 and the mistake surfaced one step later as `Invalid git clone URL` from the deploy. It is now refused at create time.)",
+    "",
+    "Inputs:",
+    '  - q (optional): case-insensitive substring of the full name ("owner/name"). Omit for everything.',
+    "",
+    "Returns: { items: [{ id, fullName, defaultBranch, private, url, language? }], total } \u2014 `total` is the count before `q` filtered it.",
+    "",
+    "If the repo you just pushed is missing, call sync_github_repos first: HostStack cannot see a brand-new repository until an installation re-sync runs.",
+    "",
+    'Example: list_github_repos({ q: "stenshoppen" }) \u2192 { items: [{ id: 143, fullName: "acme/stenshoppen", defaultBranch: "master", private: true }], total: 45 }',
+    'Then either: create_service({ \u2026, github_repo: "acme/stenshoppen" }) \u2014 or the id, if you prefer.'
+  ].join("\n"),
+  input: {
+    q: z14.string().min(1).max(200).optional().describe('Case-insensitive substring of "owner/name". Omit to list everything.')
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const { repos } = await ctx.api.get(
+      `/api/github/${teamId}/repos`
+    );
+    const needle = args.q?.trim().toLowerCase();
+    const matched = needle ? repos.filter((r) => r.fullName.toLowerCase().includes(needle)) : repos;
+    const items = matched.map(shapeRepo).sort((a, b) => a.fullName.localeCompare(b.fullName));
+    if (repos.length === 0) {
+      return respond({
+        summary: "No GitHub repositories are connected to this team. Install the HostStack GitHub App from the dashboard (Settings \u2192 GitHub), then call sync_github_repos.",
+        data: { items, total: 0 }
+      });
+    }
+    const summary = needle ? items.length === 0 ? `No connected repository matches "${args.q}" (${repos.length} connected). Push it, then call sync_github_repos.` : `${items.length} of ${repos.length} connected repositories match "${args.q}".` : `${items.length} connected repositor${items.length === 1 ? "y" : "ies"}.`;
+    return respond({ summary, data: { items, total: repos.length } });
+  }
+});
 defineTool({
   name: "sync_github_repos",
   category: "github",
   description: [
-    "Re-sync the repository list from GitHub for every connected GitHub App installation.",
+    "Re-sync the repository list from GitHub for every connected GitHub App installation, and return what that now exposes.",
     "",
-    "When to use: right after pushing a brand-new repository, HostStack cannot see it until an installation re-sync runs \u2014 so create_service with a github_repo_id would fail. Call this first. (Same operation as the dashboard's refresh icon on the repo picker.)",
+    "When to use: right after pushing a brand-new repository, HostStack cannot see it until an installation re-sync runs \u2014 so create_service with a github_repo_id or github_repo would fail. Call this first. (Same operation as the dashboard's refresh icon on the repo picker.) To read the list WITHOUT re-syncing, call list_github_repos.",
     "",
     "No inputs.",
     "",
-    "Returns: { installations: number, repos: [{ account, count }], totalRepos } \u2014 the accounts synced and how many repos each now exposes.",
+    "Returns: { installations: number, accounts: [{ account, count }], totalRepos, repos: [{ id, fullName }] } \u2014 `repos` carries the ids create_service takes, so a sync is enough to act on; it does not have to be followed by a list.",
     "",
-    'Example: sync_github_repos({}) \u2192 { installations: 1, repos: [{ account: "acme", count: 12 }], totalRepos: 12 }'
+    'Example: sync_github_repos({}) \u2192 { installations: 1, accounts: [{ account: "acme", count: 12 }], totalRepos: 12, repos: [{ id: 143, fullName: "acme/stenshoppen" }, \u2026] }'
   ].join("\n"),
   input: {},
   handler: async (_args, ctx) => {
@@ -2920,23 +3055,29 @@ defineTool({
       );
     }
     const perAccount = [];
-    let totalRepos = 0;
+    const synced = [];
     for (const inst of installations) {
       const { repos } = await ctx.api.post(
         `/api/github/${teamId}/installations/${inst.id}/sync`
       );
       perAccount.push({ account: inst.accountLogin, count: repos.length });
-      totalRepos += repos.length;
+      for (const repo of repos) synced.push({ id: repo.id, fullName: repo.fullName });
     }
+    synced.sort((a, b) => a.fullName.localeCompare(b.fullName));
     return respond({
-      summary: `Synced ${totalRepos} repositories across ${installations.length} installation(s).`,
-      data: { installations: installations.length, repos: perAccount, totalRepos }
+      summary: `Synced ${synced.length} repositories across ${installations.length} installation(s).`,
+      data: {
+        installations: installations.length,
+        accounts: perAccount,
+        totalRepos: synced.length,
+        repos: synced
+      }
     });
   }
 });
 
 // src/tools/issue-reports.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 defineTool({
   name: "report_issue",
   category: "support",
@@ -2958,16 +3099,16 @@ defineTool({
     "Example: report_issue({ title: 'Dev box deploys fail with 404 No such image', description: 'Every deploy of svc 172 since 2026-08-22 09:03 fails at container create with `404 No such image: \u2026/dev-env:latest`. The deploy log reports \"Image ready in 1s\" for a 5.5 GB image, so the pull is not happening. The image pulls fine by hand from the same registry.', severity: 'high', serviceId: 172 }) \u2192 { ticket: { publicId: 'tkt_\u2026' } }"
   ].join("\n"),
   input: {
-    title: z14.string().min(1).max(300).describe("One-line summary of the fault."),
-    description: z14.string().min(1).max(1e4).describe("What happened, what you expected instead, and what you already ruled out."),
-    severity: z14.enum(["low", "normal", "high", "urgent"]).optional().describe(
+    title: z15.string().min(1).max(300).describe("One-line summary of the fault."),
+    description: z15.string().min(1).max(1e4).describe("What happened, what you expected instead, and what you already ruled out."),
+    severity: z15.enum(["low", "normal", "high", "urgent"]).optional().describe(
       'Default normal. Use high/urgent only when something is DOWN or losing data \u2014 not for "this is annoying".'
     ),
-    serviceId: z14.number().int().positive().optional().describe(
+    serviceId: z15.number().int().positive().optional().describe(
       "The affected service. Attaches the service, its latest deploy, and that deploy log tail automatically."
     ),
-    deployId: z14.number().int().positive().optional().describe("Pin a specific deploy instead of the service\u2019s most recent one."),
-    databaseId: z14.number().int().positive().optional().describe("The affected database.")
+    deployId: z15.number().int().positive().optional().describe("Pin a specific deploy instead of the service\u2019s most recent one."),
+    databaseId: z15.number().int().positive().optional().describe("The affected database.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3055,7 +3196,7 @@ defineTool({
 });
 
 // src/tools/notifications.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var NOTIFICATION_EVENTS = [
   "deploy.started",
   "deploy.succeeded",
@@ -3081,6 +3222,7 @@ var NOTIFICATION_EVENTS = [
   "error.issue_regressed",
   "git.auth_failed",
   "cron.execution_failed",
+  "cron.schedule_missed",
   "workflow.failed",
   "devenv.agent.needs_input",
   "devenv.agent.finished",
@@ -3093,6 +3235,10 @@ var NOTIFICATION_EVENTS = [
   "database.restore_failed",
   "volume.backup_failed",
   "volume.backup_overdue",
+  "dns.registry_status_changed",
+  "dns.registry_expiring",
+  "dns.registry_domain_missing",
+  "dns.registry_record_changed",
   "domain.registrant_verification_lapsed",
   "service.auto_restarted",
   "machine.offline",
@@ -3149,10 +3295,10 @@ defineTool({
     "Example: create_notification_channel({ type: 'slack', name: 'eng-alerts', webhook_url: 'https://hooks.slack.com/\u2026', events: ['deploy.failed', 'git.auth_failed', 'service.restart_failed'] })"
   ].join("\n"),
   input: {
-    type: z15.enum(["slack", "discord", "email"]).describe("Channel type."),
-    name: z15.string().min(1).max(128).describe("Human-readable label."),
-    webhook_url: z15.string().max(500).describe("Slack/Discord webhook URL or email address (when type=email)."),
-    events: z15.array(z15.enum(NOTIFICATION_EVENTS)).describe(
+    type: z16.enum(["slack", "discord", "email"]).describe("Channel type."),
+    name: z16.string().min(1).max(128).describe("Human-readable label."),
+    webhook_url: z16.string().max(500).describe("Slack/Discord webhook URL or email address (when type=email)."),
+    events: z16.array(z16.enum(NOTIFICATION_EVENTS)).describe(
       "List of events the channel subscribes to. Empty list = subscribe to nothing."
     )
   },
@@ -3190,10 +3336,10 @@ defineTool({
     "Example: update_notification_channel({ channel_id: 3, events: ['deploy.failed', 'service.restart_failed', 'git.auth_failed'] })"
   ].join("\n"),
   input: {
-    channel_id: z15.number().int().positive().describe("Numeric channel id from list_notification_channels."),
-    name: z15.string().min(1).max(128).optional().describe("New label."),
-    active: z15.boolean().optional().describe("false silences without deleting."),
-    events: z15.array(z15.enum(NOTIFICATION_EVENTS)).optional().describe("Replaces the full subscription list.")
+    channel_id: z16.number().int().positive().describe("Numeric channel id from list_notification_channels."),
+    name: z16.string().min(1).max(128).optional().describe("New label."),
+    active: z16.boolean().optional().describe("false silences without deleting."),
+    events: z16.array(z16.enum(NOTIFICATION_EVENTS)).optional().describe("Replaces the full subscription list.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3232,7 +3378,7 @@ defineTool({
     "Example: delete_notification_channel({ channel_id: 3 }) \u2192 { ok: true }"
   ].join("\n"),
   input: {
-    channel_id: z15.number().int().positive().describe("Numeric channel id.")
+    channel_id: z16.number().int().positive().describe("Numeric channel id.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3259,7 +3405,7 @@ defineTool({
     "Example: test_notification_channel({ channel_id: 3 }) \u2192 { success: true }"
   ].join("\n"),
   input: {
-    channel_id: z15.number().int().positive().describe("Numeric channel id.")
+    channel_id: z16.number().int().positive().describe("Numeric channel id.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3274,7 +3420,7 @@ defineTool({
 });
 
 // src/tools/projects.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var AVAILABLE_REGION_IDS = ["eu-central-1"];
 defineTool({
   name: "list_projects",
@@ -3315,9 +3461,9 @@ defineTool({
     'Example: create_project({ name: "billing-api", description: "Stripe webhooks", region: "eu-central-1" }) \u2192 { project: { id: 12, publicId: "prj_\u2026", \u2026 } }'
   ].join("\n"),
   input: {
-    name: z16.string().min(1).max(60).describe("Project name (1\u201360 chars)."),
-    description: z16.string().max(500).optional().describe("Short description (\u2264500 chars)."),
-    region: z16.enum(AVAILABLE_REGION_IDS).optional().describe("Region: eu-central-1 (Falkenstein) \u2014 currently the only available region.")
+    name: z17.string().min(1).max(60).describe("Project name (1\u201360 chars)."),
+    description: z17.string().max(500).optional().describe("Short description (\u2264500 chars)."),
+    region: z17.enum(AVAILABLE_REGION_IDS).optional().describe("Region: eu-central-1 (Falkenstein) \u2014 currently the only available region.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3350,9 +3496,9 @@ defineTool({
     'Example: update_project({ project_id: "prj_abc", name: "billing-prod" }) \u2192 { project: { name: "billing-prod", \u2026 } }'
   ].join("\n"),
   input: {
-    project_id: z16.string().describe("Project publicId."),
-    name: z16.string().min(1).max(60).optional().describe("New name (1\u201360 chars)."),
-    description: z16.string().max(500).optional().describe("New description (\u2264500 chars).")
+    project_id: z17.string().describe("Project publicId."),
+    name: z17.string().min(1).max(60).optional().describe("New name (1\u201360 chars)."),
+    description: z17.string().max(500).optional().describe("New description (\u2264500 chars).")
   },
   handler: async (args, ctx) => {
     if (args.name === void 0 && args.description === void 0) {
@@ -3386,7 +3532,7 @@ defineTool({
     'Example: get_project({ project_id: "prj_abc" }) \u2192 { project: { id: 12, name: "billing", \u2026 } }'
   ].join("\n"),
   input: {
-    project_id: z16.string().describe("Project publicId (e.g. prj_abc123).")
+    project_id: z17.string().describe("Project publicId (e.g. prj_abc123).")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3398,7 +3544,7 @@ defineTool({
 });
 
 // src/tools/dev-tasks.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 var NOT_A_RUN = "Filing a task does NOT start an agent. It writes a prompt into the box's backlog for someone to run; a suspended box keeps it until it wakes.";
 defineTool({
   name: "list_dev_tasks",
@@ -3418,7 +3564,7 @@ defineTool({
     'Example: list_dev_tasks({ project_id: 26 }) \u2192 { items: [{ publicId: "task_\u2026", status: "idea", title: "Fix the footprint join" }] }'
   ].join("\n"),
   input: {
-    project_id: z17.union([z17.number().int().positive(), z17.string()]).describe('Project \u2014 publicId ("prj_\u2026") or numeric id.')
+    project_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Project \u2014 publicId ("prj_\u2026") or numeric id.')
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3447,7 +3593,7 @@ defineTool({
     'Example: get_dev_task({ task_id: "task_hy1i2jdp\u2026" }) \u2192 { data: { title: "Footprint coverage", body: "The BBRUUID join returns 17 of 49 \u2026", status: "idea" } }'
   ].join("\n"),
   input: {
-    task_id: z17.union([z17.number().int().positive(), z17.string()]).describe('Task \u2014 publicId ("task_\u2026") or numeric id.')
+    task_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Task \u2014 publicId ("task_\u2026") or numeric id.')
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3475,10 +3621,10 @@ defineTool({
     'Example: create_dev_task({ project_id: 26, service_id: 51, title: "Footprint coverage", body: "The BBRUUID join returns 17 of 49 \u2026" })'
   ].join("\n"),
   input: {
-    project_id: z17.union([z17.number().int().positive(), z17.string()]).describe('Project \u2014 publicId ("prj_\u2026") or numeric id.'),
-    title: z17.string().min(1).max(200).describe("One-line title, \u2264200 chars."),
-    body: z17.string().max(2e4).optional().describe("The prompt handed to the agent. Markdown, \u226420 000 chars."),
-    service_id: z17.union([z17.number().int().positive(), z17.string()]).optional().describe(
+    project_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Project \u2014 publicId ("prj_\u2026") or numeric id.'),
+    title: z18.string().min(1).max(200).describe("One-line title, \u2264200 chars."),
+    body: z18.string().max(2e4).optional().describe("The prompt handed to the agent. Markdown, \u226420 000 chars."),
+    service_id: z18.union([z18.number().int().positive(), z18.string()]).optional().describe(
       'Dev box to pin it to \u2014 publicId ("svc_\u2026") or numeric id. Omit for a loose idea.'
     )
   },
@@ -3524,13 +3670,13 @@ defineTool({
     'Example: update_dev_task({ task_id: "task_hy1i2jdp\u2026", status: "done" }) \u2192 { data: { status: "done" } }'
   ].join("\n"),
   input: {
-    task_id: z17.union([z17.number().int().positive(), z17.string()]).describe('Task \u2014 publicId ("task_\u2026") or numeric id.'),
-    status: z17.enum(["idea", "done"]).optional().describe("The only two a person may set. The runner owns the rest of the lifecycle."),
-    title: z17.string().min(1).max(200).optional().describe("New title."),
-    body: z17.string().max(2e4).optional().describe("New prompt body."),
-    service_id: z17.union([z17.number().int().positive(), z17.string()]).nullable().optional().describe("Pin to a dev box, or null to unpin it back to a loose idea."),
-    provider: z17.enum(["claude", "codex", "opencode"]).nullable().optional().describe("Which agent runs this task, or null to leave it to the box."),
-    permission_mode: z17.enum(["acceptEdits", "bypassPermissions", "default"]).optional().describe(
+    task_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Task \u2014 publicId ("task_\u2026") or numeric id.'),
+    status: z18.enum(["idea", "done"]).optional().describe("The only two a person may set. The runner owns the rest of the lifecycle."),
+    title: z18.string().min(1).max(200).optional().describe("New title."),
+    body: z18.string().max(2e4).optional().describe("New prompt body."),
+    service_id: z18.union([z18.number().int().positive(), z18.string()]).nullable().optional().describe("Pin to a dev box, or null to unpin it back to a loose idea."),
+    provider: z18.enum(["claude", "codex", "opencode"]).nullable().optional().describe("Which agent runs this task, or null to leave it to the box."),
+    permission_mode: z18.enum(["acceptEdits", "bypassPermissions", "default"]).optional().describe(
       "How the agent may act. bypassPermissions asks for nothing \u2014 set it only on request."
     )
   },
@@ -3555,7 +3701,7 @@ defineTool({
 });
 
 // src/tools/resource-links.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var RESOURCE_LINK_TYPES = [
   "database",
   "object_storage",
@@ -3616,7 +3762,7 @@ defineTool({
     'Example: list_service_resources({ service_id: "svc_abc" }) \u2192 { items: [{ id: 7, resourceType: "database", resourceId: 42, alias: "APP_DB" }] }'
   ].join("\n"),
   input: {
-    service_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Service \u2014 publicId ("svc_\u2026") or numeric id.')
+    service_id: z19.union([z19.number().int().positive(), z19.string()]).describe('Service \u2014 publicId ("svc_\u2026") or numeric id.')
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3653,10 +3799,10 @@ defineTool({
     'Example: link_resource_to_service({ service_id: "svc_abc", resource_type: "database", resource_id: 42, alias: "APP_DB" }) \u2192 { link: { id: 7, alias: "APP_DB" } }'
   ].join("\n"),
   input: {
-    service_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Consuming service \u2014 publicId ("svc_\u2026") or numeric id.'),
-    resource_type: z18.enum(RESOURCE_LINK_TYPES).describe("Kind of resource being linked."),
-    resource_id: z18.number().int().positive().describe("NUMERIC id of the resource (e.g. database.id) \u2014 not the publicId."),
-    alias: z18.string().min(1).max(48).regex(
+    service_id: z19.union([z19.number().int().positive(), z19.string()]).describe('Consuming service \u2014 publicId ("svc_\u2026") or numeric id.'),
+    resource_type: z19.enum(RESOURCE_LINK_TYPES).describe("Kind of resource being linked."),
+    resource_id: z19.number().int().positive().describe("NUMERIC id of the resource (e.g. database.id) \u2014 not the publicId."),
+    alias: z19.string().min(1).max(48).regex(
       /^[A-Z][A-Z0-9_]*$/,
       "Alias must be uppercase letters, digits and underscores, starting with a letter."
     ).describe('Uppercase env-var prefix, e.g. "APP_DB". Unique within the service.')
@@ -3692,8 +3838,8 @@ defineTool({
     'Example: unlink_resource_from_service({ service_id: "svc_abc", link_id: 7 }) \u2192 { ok: true }'
   ].join("\n"),
   input: {
-    service_id: z18.union([z18.number().int().positive(), z18.string()]).describe('Service \u2014 publicId ("svc_\u2026") or numeric id.'),
-    link_id: z18.number().int().positive().describe("Numeric linkId from list_service_resources (the link's own `id`).")
+    service_id: z19.union([z19.number().int().positive(), z19.string()]).describe('Service \u2014 publicId ("svc_\u2026") or numeric id.'),
+    link_id: z19.number().int().positive().describe("Numeric linkId from list_service_resources (the link's own `id`).")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -3705,7 +3851,7 @@ defineTool({
 });
 
 // src/tools/services.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 
 // src/lib/app-templates.ts
 var MCP_APP_TEMPLATES = [
@@ -3957,16 +4103,16 @@ defineTool({
     '  - type: "web_service" | "private_service" | "worker" | "cron_job" | "static_site".',
     "  - dev_environment: include Dev Boxes in the results (excluded by default).",
     "",
-    "Returns: { items: Service[] } \u2014 each service includes id, publicId, name, type, status, projectId, repoUrl, branch, runtime, createdAt.",
+    "Returns: { items: Service[] } \u2014 each service includes id, publicId, name, type, status, projectId, branch, runtime, createdAt, and, for a source-built service, repoProvider/repoFullName/repoUrl (what it actually builds \u2014 the stored id alone names no repository).",
     "",
     'Example: list_services({ status: "failed" }) \u2192 only services that need attention.'
   ].join("\n"),
   input: {
-    project_id: z19.union([z19.number().int().positive(), z19.string()]).optional().describe("Project filter \u2014 numeric id or publicId."),
-    environment_id: z19.union([z19.number().int().positive(), z19.string()]).optional().describe("Environment filter \u2014 numeric id or publicId."),
-    status: z19.enum(["active", "deploying", "suspended", "failed", "not_deployed"]).optional().describe("Filter by current runtime status."),
-    type: z19.enum(["web_service", "private_service", "worker", "cron_job", "static_site"]).optional().describe("Filter by service type."),
-    dev_environment: z19.boolean().optional().describe(
+    project_id: z20.union([z20.number().int().positive(), z20.string()]).optional().describe("Project filter \u2014 numeric id or publicId."),
+    environment_id: z20.union([z20.number().int().positive(), z20.string()]).optional().describe("Environment filter \u2014 numeric id or publicId."),
+    status: z20.enum(["active", "deploying", "suspended", "failed", "not_deployed"]).optional().describe("Filter by current runtime status."),
+    type: z20.enum(["web_service", "private_service", "worker", "cron_job", "static_site"]).optional().describe("Filter by service type."),
+    dev_environment: z20.boolean().optional().describe(
       "Include agentic Dev Boxes in the results (excluded by default; see list_dev_environments)."
     )
   },
@@ -4007,7 +4153,7 @@ defineTool({
   name: "create_service",
   category: "services",
   description: [
-    "Create a new service in a project. Source is either a connected git repo (github_repo_id) OR a pre-built docker_image \u2014 never both.",
+    'Create a new service in a project. Source is either a connected git repo (github_repo "owner/name", or github_repo_id) OR a pre-built docker_image \u2014 never both.',
     "",
     "When to use: the user wants to deploy something new. For a one-command AI dev environment specifically, prefer create_dev_environment (it also attaches the /workspace volume and sets the MCP keys).",
     "",
@@ -4020,7 +4166,8 @@ defineTool({
     "  - name: service name (1\u2013100 chars).",
     '  - type: "web_service" | "private_service" | "worker" | "cron_job" | "static_site".',
     "  - docker_image (optional): pre-built image ref to deploy instead of building from source.",
-    "  - github_repo_id (optional): connect a previously-linked GitHub repo by numeric id.",
+    '  - github_repo (optional): connect a connected GitHub repo by name \u2014 "owner/name". Preferred over github_repo_id: it is what you actually know, and a wrong name is refused here instead of failing the deploy.',
+    "  - github_repo_id (optional): the same repo by its HostStack numeric id (from list_github_repos). NOT GitHub's id. Mutually exclusive with github_repo.",
     "  - git_repo_url (optional): a PUBLIC https git URL, for a repo that is not connected through GitHub. Private repos do not work here \u2014 they need a provider connection, because this field carries no credentials and embedding them in the URL is rejected. Mutually exclusive with github_repo_id and docker_image.",
     '  - branch (optional): git branch (default "main").',
     "  - install_command / build_command / start_command (optional): build/run shell commands. start_command is required for web/private services without a docker_image.",
@@ -4036,36 +4183,42 @@ defineTool({
     "",
     "Returns: { service: Service, deployId: number | null }.",
     "",
-    'Example: create_service({ project_id: "prj_abc", name: "api", type: "web_service", github_repo_id: 42 }) \u2192 { service: { publicId: "svc_\u2026" }, deployId: 1234 }',
+    'Example: create_service({ project_id: "prj_abc", name: "api", type: "web_service", github_repo: "acme/api" }) \u2192 { service: { publicId: "svc_\u2026", repoUrl: "https://github.com/acme/api" }, deployId: 1234 }',
+    "Repo not listed by list_github_repos? Call sync_github_repos \u2014 a repository pushed since the last sync is invisible until then.",
     'Example (one-click app): create_service({ project_id: "prj_abc", name: "blog", type: "web_service", template_id: "wordpress", docker_image: "wordpress:php8.3-apache", port: 80 }) \u2014 the wp-content volume, the www-data uid, the Apache scratch dirs and the managed MySQL come from the template id.'
   ].join("\n"),
   input: {
-    project_id: z19.union([z19.number().int().positive(), z19.string()]).describe("Target project \u2014 numeric id or publicId."),
-    name: z19.string().min(1).max(100).describe("Service name (1\u2013100 chars)."),
-    type: z19.enum(SERVICE_TYPES).describe("Service type."),
-    docker_image: z19.string().max(500).optional().describe(
+    project_id: z20.union([z20.number().int().positive(), z20.string()]).describe("Target project \u2014 numeric id or publicId."),
+    name: z20.string().min(1).max(100).describe("Service name (1\u2013100 chars)."),
+    type: z20.enum(SERVICE_TYPES).describe("Service type."),
+    docker_image: z20.string().max(500).optional().describe(
       "Pre-built APPLICATION image ref. Mutually exclusive with github_repo_id. Not for databases \u2014 use create_database for postgres/redis/mysql/mariadb/mongodb."
     ),
-    github_repo_id: z19.number().int().positive().optional().describe("Linked GitHub repo numeric id. Mutually exclusive with docker_image."),
-    git_repo_url: z19.string().max(2048).optional().describe(
+    github_repo: z20.string().min(1).max(255).optional().describe(
+      'Connected GitHub repo as "owner/name" (see list_github_repos). Resolved server-side. Mutually exclusive with github_repo_id and docker_image.'
+    ),
+    github_repo_id: z20.number().int().positive().optional().describe(
+      "HostStack row id of a connected GitHub repo (list_github_repos) \u2014 not GitHub's own id. Prefer github_repo. Mutually exclusive with docker_image."
+    ),
+    git_repo_url: z20.string().max(2048).optional().describe(
       "Public https git URL. No embedded credentials \u2014 private repos need a provider connection. Mutually exclusive with github_repo_id and docker_image."
     ),
-    branch: z19.string().max(200).optional().describe('Git branch (default "main").'),
-    install_command: z19.string().max(1e3).optional().describe("Install shell command."),
-    build_command: z19.string().max(1e3).optional().describe("Build shell command."),
-    start_command: z19.string().max(1e3).optional().describe("Start shell command (required for web/private services without an image)."),
-    cron_schedule: z19.string().max(100).optional().describe("Cron expression \u2014 required for cron_job."),
-    publish_path: z19.string().max(500).optional().describe("Static-site output dir."),
-    runtime: z19.string().max(50).optional().describe("Runtime hint (node/bun/python/\u2026)."),
-    port: z19.number().int().min(1).max(65535).optional().describe(
+    branch: z20.string().max(200).optional().describe('Git branch (default "main").'),
+    install_command: z20.string().max(1e3).optional().describe("Install shell command."),
+    build_command: z20.string().max(1e3).optional().describe("Build shell command."),
+    start_command: z20.string().max(1e3).optional().describe("Start shell command (required for web/private services without an image)."),
+    cron_schedule: z20.string().max(100).optional().describe("Cron expression \u2014 required for cron_job."),
+    publish_path: z20.string().max(500).optional().describe("Static-site output dir."),
+    runtime: z20.string().max(50).optional().describe("Runtime hint (node/bun/python/\u2026)."),
+    port: z20.number().int().min(1).max(65535).optional().describe(
       "Listen port, for a prebuilt image whose port is fixed by the image. Omit for a source-built service \u2014 it binds the injected $PORT."
     ),
-    template_id: z19.string().max(64).optional().describe(
+    template_id: z20.string().max(64).optional().describe(
       "Quickstart template id from list_templates. Its volumes, scratch dirs, uid, secrets and companion database are resolved server-side; for an image template also pass its docker_image and port."
     ),
-    plan: z19.enum(SERVICE_PLANS).optional().describe('Service size (default "micro").'),
-    environment_id: z19.union([z19.number().int().positive(), z19.string()]).optional().describe("Bind to a specific environment; defaults to Production."),
-    auto_deploy: z19.boolean().optional().describe("Trigger the first deploy immediately (default true)."),
+    plan: z20.enum(SERVICE_PLANS).optional().describe('Service size (default "micro").'),
+    environment_id: z20.union([z20.number().int().positive(), z20.string()]).optional().describe("Bind to a specific environment; defaults to Production."),
+    auto_deploy: z20.boolean().optional().describe("Trigger the first deploy immediately (default true)."),
     machine: machineInput
   },
   handler: async (args, ctx) => {
@@ -4080,6 +4233,7 @@ defineTool({
       projectId
     };
     if (args.docker_image !== void 0) input.dockerImage = args.docker_image;
+    if (args.github_repo !== void 0) input.githubRepo = args.github_repo;
     if (args.github_repo_id !== void 0) input.githubRepoId = args.github_repo_id;
     if (args.git_repo_url !== void 0) input.gitRepoUrl = args.git_repo_url;
     if (args.branch !== void 0) input.branch = args.branch;
@@ -4137,18 +4291,18 @@ defineTool({
     'Example: create_dev_environment({ project_id: "prj_abc", name: "scratch", hoststack_api_key: "hs_live_\u2026" })'
   ].join("\n"),
   input: {
-    project_id: z19.union([z19.number().int().positive(), z19.string()]).describe("Target project \u2014 numeric id or publicId."),
-    name: z19.string().min(1).max(100).optional().describe('Service name (default "dev-environment").'),
-    plan: z19.enum(SERVICE_PLANS).optional().describe(
+    project_id: z20.union([z20.number().int().positive(), z20.string()]).describe("Target project \u2014 numeric id or publicId."),
+    name: z20.string().min(1).max(100).optional().describe('Service name (default "dev-environment").'),
+    plan: z20.enum(SERVICE_PLANS).optional().describe(
       'Box size (default "standard" \u2014 2 GB, the OOM-safe floor; a smaller plan is clamped up to "standard").'
     ),
-    disk_gb: z19.number().int().min(10).max(10240).optional().describe("/workspace volume size in GB (default 10, min 10, max 10240)."),
-    hoststack_api_key: z19.string().optional().describe("Value for HOSTSTACK_API_KEY (enables the hoststack MCP in-container)."),
-    poststack_api_key: z19.string().optional().describe("Value for POSTSTACK_API_KEY (enables the poststack MCP in-container)."),
-    repo_url: z19.string().max(500).optional().describe(
+    disk_gb: z20.number().int().min(10).max(10240).optional().describe("/workspace volume size in GB (default 10, min 10, max 10240)."),
+    hoststack_api_key: z20.string().optional().describe("Value for HOSTSTACK_API_KEY (enables the hoststack MCP in-container)."),
+    poststack_api_key: z20.string().optional().describe("Value for POSTSTACK_API_KEY (enables the poststack MCP in-container)."),
+    repo_url: z20.string().max(500).optional().describe(
       "Clone this git URL into /workspace on first boot (HTTPS, or SSH once a key is set)."
     ),
-    branch: z19.string().max(200).optional().describe("Branch to clone (with repo_url)."),
+    branch: z20.string().max(200).optional().describe("Branch to clone (with repo_url)."),
     machine: machineInput
   },
   handler: async (args, ctx) => {
@@ -4265,9 +4419,9 @@ defineTool({
     'Example: spin_up_dev_environment({ service_id: "svc_api" }) \u2192 a dev box running a clone of the api service (repo + env-vars + cloned DB) with a public dev URL.'
   ].join("\n"),
   input: {
-    service_id: z19.union([z19.number().int().positive(), z19.string()]).describe("Source service to debug \u2014 numeric id or publicId."),
-    include_database_clone: z19.boolean().optional().describe("Clone the linked database so the app runs on copied data (default true)."),
-    name: z19.string().min(1).max(100).optional().describe('Dev box name (default "<source>-dev").')
+    service_id: z20.union([z20.number().int().positive(), z20.string()]).describe("Source service to debug \u2014 numeric id or publicId."),
+    include_database_clone: z20.boolean().optional().describe("Clone the linked database so the app runs on copied data (default true)."),
+    name: z20.string().min(1).max(100).optional().describe('Dev box name (default "<source>-dev").')
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4308,7 +4462,7 @@ defineTool({
     'Example: delete_dev_environment({ service_id: "svc_api_dev" }) \u2192 removes the dev box, its cloned database, and the /workspace volume.'
   ].join("\n"),
   input: {
-    service_id: z19.union([z19.number().int().positive(), z19.string()]).describe("The dev box to tear down \u2014 numeric id or publicId.")
+    service_id: z20.union([z20.number().int().positive(), z20.string()]).describe("The dev box to tear down \u2014 numeric id or publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4346,8 +4500,8 @@ defineTool({
     'Example: resize_dev_environment({ service_id: "svc_skyskraber_dev", size: "large" }) \u2192 bumps the box to the large tier, applied live.'
   ].join("\n"),
   input: {
-    service_id: z19.union([z19.number().int().positive(), z19.string()]).describe("The box to resize \u2014 numeric id or publicId."),
-    size: z19.enum(SERVICE_PLANS).describe(
+    service_id: z20.union([z20.number().int().positive(), z20.string()]).describe("The box to resize \u2014 numeric id or publicId."),
+    size: z20.enum(SERVICE_PLANS).describe(
       'Target size tier (service catalog size, e.g. "standard", "large", "xlarge").'
     )
   },
@@ -4484,7 +4638,7 @@ defineTool({
     "Inputs:",
     '  - name (optional): the Dev Box name. Omit it and the box is named after its source (the repo name, or "dev-box" when blank), with a numeric suffix if that name is taken \u2014 so "give me a dev box" needs no invented name.',
     '  - source_kind: "github_repo" (clone a connected repo \u2014 needs github_repo_id), "url" (clone any http(s) git URL \u2014 needs clone_url), or "blank" (empty box).',
-    "  - github_repo_id (for github_repo): numeric id of a connected GitHub repo.",
+    "  - github_repo_id (for github_repo): HostStack row id of a connected GitHub repo \u2014 call list_github_repos for it. It is NOT the id GitHub shows, and it cannot be guessed.",
     "  - clone_url (for url): an http(s) git clone URL.",
     "  - branch (optional): branch to clone.",
     '  - databases (optional): companion services to attach \u2014 any of "postgres", "redis", "meilisearch".',
@@ -4494,24 +4648,26 @@ defineTool({
     "",
     "Returns: { service, devUrl, deployId } \u2014 deploying. Once live: open the Terminal tab, run `claude`, start the dev server on $PORT, view at https://<devUrl>. Tear down with delete_dev_environment.",
     "",
-    'Example: create_standalone_dev_environment({ name: "app-dev", source_kind: "github_repo", github_repo_id: 42, databases: ["postgres","redis"] })'
+    'Example: list_github_repos({ q: "app" }) \u2192 id 42, then create_standalone_dev_environment({ name: "app-dev", source_kind: "github_repo", github_repo_id: 42, databases: ["postgres","redis"] })'
   ].join("\n"),
   input: {
-    name: z19.string().min(1).max(100).optional().describe(
+    name: z20.string().min(1).max(100).optional().describe(
       'Dev Box name. Omit to have it named after the source (the repo name, or "dev-box" for a blank one), de-duplicated against existing boxes.'
     ),
-    source_kind: z19.enum(["github_repo", "url", "blank"]).describe("Where the code comes from."),
-    github_repo_id: z19.number().int().positive().optional().describe('Connected GitHub repo id (required when source_kind="github_repo").'),
-    clone_url: z19.string().url().optional().describe('http(s) git clone URL (required when source_kind="url").'),
-    branch: z19.string().min(1).max(255).optional().describe("Branch to clone."),
-    databases: z19.array(z19.enum(["postgres", "redis", "meilisearch"])).optional().describe("Companion services to attach (fresh + empty)."),
-    plan: z19.enum(SERVICE_PLANS).optional().describe(
+    source_kind: z20.enum(["github_repo", "url", "blank"]).describe("Where the code comes from."),
+    github_repo_id: z20.number().int().positive().optional().describe(
+      'Connected GitHub repo id from list_github_repos (required when source_kind="github_repo").'
+    ),
+    clone_url: z20.string().url().optional().describe('http(s) git clone URL (required when source_kind="url").'),
+    branch: z20.string().min(1).max(255).optional().describe("Branch to clone."),
+    databases: z20.array(z20.enum(["postgres", "redis", "meilisearch"])).optional().describe("Companion services to attach (fresh + empty)."),
+    plan: z20.enum(SERVICE_PLANS).optional().describe(
       'Box size (default "standard" \u2014 2 GB; a smaller plan is floored to "standard").'
     ),
-    agent_accounts: z19.array(
-      z19.object({
-        provider: z19.enum(["claude", "codex", "opencode"]),
-        account_id: z19.number().int().positive()
+    agent_accounts: z20.array(
+      z20.object({
+        provider: z20.enum(["claude", "codex", "opencode"]),
+        account_id: z20.number().int().positive()
       })
     ).max(3).optional().describe(
       "Bind saved agent logins by account id per provider. Omit to inherit the box owner's default logins automatically."
@@ -4584,12 +4740,12 @@ defineTool({
     "Inputs:",
     '  - service_id: publicId of the service (e.g. "svc_abc123").',
     "",
-    'Returns: { service: Service, config: ServiceConfig } \u2014 service has type/status/runtime/repoUrl/branch/autoDeploy/region/plan/timestamps; config has memoryMb, cpuShares, diskSizeGb, port, protocol, healthCheckEnabled, healthCheckInterval, healthCheckTimeout, healthCheckGracePeriodSec, allowSearchIndexing, restartPolicy, deployStrategy ("rolling" | "recreate"), preDeployCommand, min/maxInstances, scale thresholds.',
+    'Returns: { service: Service, config: ServiceConfig } \u2014 service has type/status/runtime/branch/autoDeploy/region/plan/timestamps plus repoProvider/repoFullName/repoUrl for a source-built service (absent when it deploys a prebuilt image); config has memoryMb, cpuShares, diskSizeGb, port, protocol, healthCheckEnabled, healthCheckInterval, healthCheckTimeout, healthCheckGracePeriodSec, allowSearchIndexing, restartPolicy, deployStrategy ("rolling" | "recreate"), preDeployCommand, min/maxInstances, scale thresholds.',
     "",
     'Example: get_service({ service_id: "svc_abc" }) \u2192 { service: { type: "web", status: "running", \u2026 }, config: { healthCheckGracePeriodSec: 120, \u2026 } }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId (e.g. svc_abc123).")
+    service_id: z20.string().describe("Service publicId (e.g. svc_abc123).")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4621,7 +4777,7 @@ defineTool({
     'Example: get_service_metrics({ service_id: "svc_abc" }) \u2192 { metrics: { cpu: 0.42, memory: 0.71, \u2026 } }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId.")
+    service_id: z20.string().describe("Service publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4654,9 +4810,9 @@ defineTool({
     'Example: get_service_metrics_history({ service_id: "svc_abc", from: "-1h" }) \u2192 ~120 points for the last hour.'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId."),
-    from: z19.string().optional().describe('ISO-8601 lower bound or relative offset (e.g. "-1h", "-2d").'),
-    to: z19.string().optional().describe("ISO-8601 upper bound; defaults to now.")
+    service_id: z20.string().describe("Service publicId."),
+    from: z20.string().optional().describe('ISO-8601 lower bound or relative offset (e.g. "-1h", "-2d").'),
+    to: z20.string().optional().describe("ISO-8601 upper bound; defaults to now.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4700,8 +4856,8 @@ defineTool({
     'Example: update_service({ service_id: "svc_abc", name: "api-prod" }) \u2192 { service: { name: "api-prod", \u2026 } }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId."),
-    name: z19.string().min(1).max(60).describe("New service name (1\u201360 chars).")
+    service_id: z20.string().describe("Service publicId."),
+    name: z20.string().min(1).max(60).describe("New service name (1\u201360 chars).")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4758,54 +4914,54 @@ defineTool({
     'Example: update_service_config({ service_id: "svc_abc", health_check_grace_period_sec: 180 }) \u2192 { config: { healthCheckGracePeriodSec: 180, \u2026 } }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId."),
-    install_command: z19.string().nullable().optional().describe("Install shell command. Null clears."),
-    build_command: z19.string().nullable().optional().describe("Build shell command. Null clears."),
-    start_command: z19.string().nullable().optional().describe("Start shell command. Null clears."),
-    branch: z19.string().optional().describe("Git branch to track."),
-    root_directory: z19.string().optional().describe("Build context root."),
-    dockerfile_path: z19.string().nullable().optional().describe("Path to Dockerfile relative to root. Null clears."),
-    auto_deploy: z19.boolean().optional().describe("Auto-deploy on push."),
-    health_check_path: z19.string().nullable().optional().describe('HTTP health-check path (e.g. "/health"). Null = TCP-only check.'),
-    health_check_enabled: z19.boolean().optional().describe("Toggle health checking on/off."),
-    allow_search_indexing: z19.boolean().optional().describe(
+    service_id: z20.string().describe("Service publicId."),
+    install_command: z20.string().nullable().optional().describe("Install shell command. Null clears."),
+    build_command: z20.string().nullable().optional().describe("Build shell command. Null clears."),
+    start_command: z20.string().nullable().optional().describe("Start shell command. Null clears."),
+    branch: z20.string().optional().describe("Git branch to track."),
+    root_directory: z20.string().optional().describe("Build context root."),
+    dockerfile_path: z20.string().nullable().optional().describe("Path to Dockerfile relative to root. Null clears."),
+    auto_deploy: z20.boolean().optional().describe("Auto-deploy on push."),
+    health_check_path: z20.string().nullable().optional().describe('HTTP health-check path (e.g. "/health"). Null = TCP-only check.'),
+    health_check_enabled: z20.boolean().optional().describe("Toggle health checking on/off."),
+    allow_search_indexing: z20.boolean().optional().describe(
       "Let search engines index the free *.hoststack.dev platform URL (off by default). Custom domains are always indexable. Applies on the next deploy."
     ),
-    health_check_interval: z19.number().int().min(5).max(300).optional().describe("How often the check runs, in seconds (5\u2013300)."),
-    health_check_timeout: z19.number().int().min(1).max(60).optional().describe("Single-attempt timeout in seconds (1\u201360)."),
-    health_check_grace_period_sec: z19.number().int().min(1).max(1800).optional().describe(
+    health_check_interval: z20.number().int().min(5).max(300).optional().describe("How often the check runs, in seconds (5\u2013300)."),
+    health_check_timeout: z20.number().int().min(1).max(60).optional().describe("Single-attempt timeout in seconds (1\u201360)."),
+    health_check_grace_period_sec: z20.number().int().min(1).max(1800).optional().describe(
       "Startup grace period in seconds (1\u20131800). Raise this if the app needs more time to boot before health checks start counting failures."
     ),
-    memory_mb: z19.number().int().min(128).max(16384).optional().describe("Container memory cap in MB (128\u201316384)."),
-    cpu_shares: z19.number().int().min(128).max(4096).optional().describe("Relative CPU weight (128\u20134096)."),
-    disk_size_gb: z19.number().int().min(1).max(100).optional().describe("Ephemeral disk size in GB (1\u2013100)."),
-    port: z19.number().int().min(1).max(65535).optional().describe("Container port the platform forwards traffic to."),
-    protocol: z19.enum(["http", "tcp"]).optional().describe("Traffic protocol."),
-    restart_policy: z19.enum(["always", "on-failure", "no"]).optional().describe("Docker restart policy."),
-    deploy_strategy: z19.enum(["rolling", "recreate"]).optional().describe(
+    memory_mb: z20.number().int().min(128).max(16384).optional().describe("Container memory cap in MB (128\u201316384)."),
+    cpu_shares: z20.number().int().min(128).max(4096).optional().describe("Relative CPU weight (128\u20134096)."),
+    disk_size_gb: z20.number().int().min(1).max(100).optional().describe("Ephemeral disk size in GB (1\u2013100)."),
+    port: z20.number().int().min(1).max(65535).optional().describe("Container port the platform forwards traffic to."),
+    protocol: z20.enum(["http", "tcp"]).optional().describe("Traffic protocol."),
+    restart_policy: z20.enum(["always", "on-failure", "no"]).optional().describe("Docker restart policy."),
+    deploy_strategy: z20.enum(["rolling", "recreate"]).optional().describe(
       'How a deploy replaces the container. "rolling" (default) = start new, wait for healthy, switch traffic, stop old (zero downtime). "recreate" = stop old first, then start new (brief outage) \u2014 required for a container holding an exclusive lock on a mounted volume, which cannot deploy at all under rolling.'
     ),
-    pre_deploy_command: z19.string().optional().describe("Shell command run before the new release accepts traffic."),
-    instance_count: z19.number().int().positive().max(50).optional().describe("Pin min and max instances to this value (1\u201350)."),
-    min_instances: z19.number().int().min(0).max(50).optional().describe("Autoscale lower bound. Use with max_instances for a range."),
-    max_instances: z19.number().int().min(1).max(50).optional().describe("Autoscale upper bound. Use with min_instances for a range."),
-    scale_cpu_threshold: z19.number().int().min(10).max(100).optional().describe("Autoscale CPU trigger percentage (10\u2013100)."),
-    scale_memory_threshold: z19.number().int().min(10).max(100).optional().describe("Autoscale memory trigger percentage (10\u2013100)."),
-    scale_requests_per_sec_threshold: z19.number().int().min(1).max(1e4).nullable().optional().describe("Autoscale request-rate trigger (1\u201310000 req/s). null stops using it."),
-    build_timeout_seconds: z19.number().int().min(60).max(1800).nullable().optional().describe("Kill a build that runs longer than this (60\u20131800s). null = default."),
-    plan: z19.enum(SERVICE_PLANS).optional().describe(
+    pre_deploy_command: z20.string().optional().describe("Shell command run before the new release accepts traffic."),
+    instance_count: z20.number().int().positive().max(50).optional().describe("Pin min and max instances to this value (1\u201350)."),
+    min_instances: z20.number().int().min(0).max(50).optional().describe("Autoscale lower bound. Use with max_instances for a range."),
+    max_instances: z20.number().int().min(1).max(50).optional().describe("Autoscale upper bound. Use with min_instances for a range."),
+    scale_cpu_threshold: z20.number().int().min(10).max(100).optional().describe("Autoscale CPU trigger percentage (10\u2013100)."),
+    scale_memory_threshold: z20.number().int().min(10).max(100).optional().describe("Autoscale memory trigger percentage (10\u2013100)."),
+    scale_requests_per_sec_threshold: z20.number().int().min(1).max(1e4).nullable().optional().describe("Autoscale request-rate trigger (1\u201310000 req/s). null stops using it."),
+    build_timeout_seconds: z20.number().int().min(60).max(1800).nullable().optional().describe("Kill a build that runs longer than this (60\u20131800s). null = default."),
+    plan: z20.enum(SERVICE_PLANS).optional().describe(
       "Move to a different size tier. memory_mb and cpu_shares are clamped to the tier, so this is what raises the ceiling. Changes cost."
     ),
-    docker_image: z19.string().max(500).nullable().optional().describe(
+    docker_image: z20.string().max(500).nullable().optional().describe(
       "Repoint an image-backed service. Applies on the next deploy. null clears it."
     ),
-    cron_schedule: z19.string().max(100).nullable().optional().describe("Cron expression for a cron_job service. null clears it."),
-    publish_path: z19.string().max(500).nullable().optional().describe('Static-site output directory, e.g. "dist". null clears it.'),
-    runtime: z19.string().max(50).optional().describe("Runtime hint (node/bun/python/\u2026). Normally auto-detected."),
-    log_filter_rules: z19.array(
-      z19.object({
-        pattern: z19.string().min(1).max(200),
-        action: z19.enum(["drop", "downgrade"])
+    cron_schedule: z20.string().max(100).nullable().optional().describe("Cron expression for a cron_job service. null clears it."),
+    publish_path: z20.string().max(500).nullable().optional().describe('Static-site output directory, e.g. "dist". null clears it.'),
+    runtime: z20.string().max(50).optional().describe("Runtime hint (node/bun/python/\u2026). Normally auto-detected."),
+    log_filter_rules: z20.array(
+      z20.object({
+        pattern: z20.string().min(1).max(200),
+        action: z20.enum(["drop", "downgrade"])
       })
     ).max(50).optional().describe(
       "Runtime-log filter rules. Empty array [] clears all rules. Each pattern is case-insensitive substring match against the message."
@@ -4913,7 +5069,7 @@ defineTool({
     'Example: suspend_service({ service_id: "svc_dev" }) \u2192 { ok: true }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId.")
+    service_id: z20.string().describe("Service publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4937,7 +5093,7 @@ defineTool({
     'Example: resume_service({ service_id: "svc_dev" }) \u2192 { ok: true }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId.")
+    service_id: z20.string().describe("Service publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -4963,7 +5119,7 @@ defineTool({
     'Example: delete_service({ service_id: "svc_abandoned" }) \u2192 { ok: true }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId.")
+    service_id: z20.string().describe("Service publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -5002,16 +5158,16 @@ defineTool({
     '  - Just count error lines without fetching them: get_service_logs({ service_id: "svc_abc", level: "error", since: "-5m", count_only: true }) \u2192 { count: 47 }'
   ].join("\n"),
   input: {
-    service_id: z19.string().describe("Service publicId."),
-    lines: z19.number().int().positive().max(1e3).optional().describe("Tail size; default 200, hard cap 1000."),
-    since: z19.string().optional().describe('ISO-8601 timestamp or relative offset (e.g. "-5m", "-1h").'),
-    until: z19.string().optional().describe("ISO-8601 timestamp or relative offset upper bound."),
-    stream: z19.enum(["stdout", "stderr"]).optional().describe("Restrict to one stream."),
-    level: z19.enum(["stdout", "stderr", "trace", "debug", "info", "warn", "error", "fatal"]).optional().describe(
+    service_id: z20.string().describe("Service publicId."),
+    lines: z20.number().int().positive().max(1e3).optional().describe("Tail size; default 200, hard cap 1000."),
+    since: z20.string().optional().describe('ISO-8601 timestamp or relative offset (e.g. "-5m", "-1h").'),
+    until: z20.string().optional().describe("ISO-8601 timestamp or relative offset upper bound."),
+    stream: z20.enum(["stdout", "stderr"]).optional().describe("Restrict to one stream."),
+    level: z20.enum(["stdout", "stderr", "trace", "debug", "info", "warn", "error", "fatal"]).optional().describe(
       "Filter by structured JSON log level (pino/bunyan/severity). Falls back to a stream-alias hint for plain-text logs (info/debug\u2192stdout, warn/error/fatal\u2192stderr)."
     ),
-    search: z19.string().max(100).optional().describe("Case-insensitive substring filter."),
-    count_only: z19.boolean().optional().describe("When true, return only { count } \u2014 skips the log payload.")
+    search: z20.string().max(100).optional().describe("Case-insensitive substring filter."),
+    count_only: z20.boolean().optional().describe("When true, return only { count } \u2014 skips the log payload.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -5060,14 +5216,14 @@ defineTool({
     'Example: get_service_logs_bulk({ service_ids: ["svc_api", "svc_worker"], level: "error", since: "-15m", count_only: true }) \u2192 { results: { svc_api: { count: 0 }, svc_worker: { count: 12 } } }.'
   ].join("\n"),
   input: {
-    service_ids: z19.array(z19.string()).min(1).max(10).describe("Service publicIds (1\u201310). Hard cap 10 to bound parallel work."),
-    lines_per_service: z19.number().int().positive().max(500).optional().describe("Tail size per service; default 100, hard cap 500."),
-    since: z19.string().optional().describe('ISO-8601 timestamp or relative offset (e.g. "-5m", "-1h").'),
-    until: z19.string().optional().describe("ISO-8601 timestamp or relative offset upper bound."),
-    stream: z19.enum(["stdout", "stderr"]).optional().describe("Restrict to one stream."),
-    level: z19.enum(["stdout", "stderr", "trace", "debug", "info", "warn", "error", "fatal"]).optional().describe("Structured log level filter (same as get_service_logs)."),
-    search: z19.string().max(100).optional().describe("Case-insensitive substring filter."),
-    count_only: z19.boolean().optional().describe("When true, return only counts per service \u2014 skips the log payload.")
+    service_ids: z20.array(z20.string()).min(1).max(10).describe("Service publicIds (1\u201310). Hard cap 10 to bound parallel work."),
+    lines_per_service: z20.number().int().positive().max(500).optional().describe("Tail size per service; default 100, hard cap 500."),
+    since: z20.string().optional().describe('ISO-8601 timestamp or relative offset (e.g. "-5m", "-1h").'),
+    until: z20.string().optional().describe("ISO-8601 timestamp or relative offset upper bound."),
+    stream: z20.enum(["stdout", "stderr"]).optional().describe("Restrict to one stream."),
+    level: z20.enum(["stdout", "stderr", "trace", "debug", "info", "warn", "error", "fatal"]).optional().describe("Structured log level filter (same as get_service_logs)."),
+    search: z20.string().max(100).optional().describe("Case-insensitive substring filter."),
+    count_only: z20.boolean().optional().describe("When true, return only counts per service \u2014 skips the log payload.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -5113,7 +5269,7 @@ defineTool({
 });
 
 // src/tools/uptime.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 var STATUS_MEANING = [
   "Status vocabulary: `up` answering as expected \xB7 `down` failed the threshold and an alert is open \xB7 `unknown` not probed yet \xB7 `unresolvable` the service has no active domain to request \xB7 `paused` the service is not meant to be answering (suspended, mid-deploy, never deployed) OR it sleeps when idle and probing it would keep it awake."
 ].join("\n");
@@ -5135,7 +5291,7 @@ defineTool({
     "",
     "Example: get_uptime_check({ serviceId: 48 }) \u2192 { check: { path: '/healthz', status: 'down', consecutiveFailures: 5, lastError: 'No response within 10000ms', lastChangedAt: '2026-08-21T04:12:00Z', lastTargetUrl: 'https://grundfast.dk/healthz' } }."
   ].join("\n"),
-  input: { serviceId: z20.number().int().positive() },
+  input: { serviceId: z21.number().int().positive() },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
     const response = await ctx.api.get(
@@ -5181,14 +5337,14 @@ defineTool({
     "Example: set_uptime_check({ serviceId: 48, path: '/healthz', intervalSeconds: 60, failureThreshold: 3 }) \u2192 { check: { status: 'unknown', \u2026 } }."
   ].join("\n"),
   input: {
-    serviceId: z20.number().int().positive(),
-    enabled: z20.boolean().optional(),
-    path: z20.string().max(500).optional().describe('Must start with /. Default "/".'),
-    method: z20.enum(["GET", "HEAD"]).optional(),
-    expectedStatus: z20.number().int().min(100).max(599).optional(),
-    timeoutMs: z20.number().int().min(1e3).max(6e4).optional(),
-    intervalSeconds: z20.number().int().min(30).max(3600).optional(),
-    failureThreshold: z20.number().int().min(1).max(10).optional()
+    serviceId: z21.number().int().positive(),
+    enabled: z21.boolean().optional(),
+    path: z21.string().max(500).optional().describe('Must start with /. Default "/".'),
+    method: z21.enum(["GET", "HEAD"]).optional(),
+    expectedStatus: z21.number().int().min(100).max(599).optional(),
+    timeoutMs: z21.number().int().min(1e3).max(6e4).optional(),
+    intervalSeconds: z21.number().int().min(30).max(3600).optional(),
+    failureThreshold: z21.number().int().min(1).max(10).optional()
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -5219,7 +5375,7 @@ defineTool({
     "",
     "Example: delete_uptime_check({ serviceId: 48 }) \u2192 { success: true }."
   ].join("\n"),
-  input: { serviceId: z20.number().int().positive() },
+  input: { serviceId: z21.number().int().positive() },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
     await ctx.api.delete(`/api/services/${teamId}/${args.serviceId}/uptime-check`);
@@ -5228,7 +5384,7 @@ defineTool({
 });
 
 // src/tools/volumes.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 var MIN_VOLUME_SIZE_GB = 10;
 defineTool({
   name: "list_volumes",
@@ -5241,12 +5397,14 @@ defineTool({
     "Inputs:",
     "  - service_id: publicId of the service.",
     "",
-    "Returns: { items: Volume[] } \u2014 each entry has id, publicId, name, mountPath, sizeGb, status (pending|active|deleting), createdAt, updatedAt.",
+    "Returns: { items: Volume[] } \u2014 each entry has id, publicId, name, mountPath, sizeGb, status (pending|active|deleting), backupEnabled, createdAt, updatedAt.",
+    "",
+    "`backupEnabled` says backups are being TAKEN, not that any exist. Call list_volume_backups to see which archives are actually restorable \u2014 a volume can be enabled and have nothing behind it (nothing has completed yet, or the host has no upload grant and is writing tars onto the very disk it is backing up, which is not a copy of anything). Turn it on with update_volume({ backup_enabled: true }).",
     "",
-    'Example: list_volumes({ service_id: "svc_abc" }) \u2192 { items: [{ name: "data", mountPath: "/var/data", sizeGb: 10, status: "active" }] }'
+    'Example: list_volumes({ service_id: "svc_abc" }) \u2192 { items: [{ name: "data", mountPath: "/var/data", sizeGb: 10, status: "active", backupEnabled: false }] }'
   ].join("\n"),
   input: {
-    service_id: z21.string().describe("Service publicId (e.g. svc_abc123).")
+    service_id: z22.string().describe("Service publicId (e.g. svc_abc123).")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -5275,15 +5433,15 @@ defineTool({
     'Example: create_volume({ service_id: "svc_abc", name: "data", mount_path: "/var/data", size_gb: 10 }) \u2192 { volume: { name: "data", mountPath: "/var/data", sizeGb: 10, status: "pending" } }'
   ].join("\n"),
   input: {
-    service_id: z21.string().describe("Service publicId."),
-    name: z21.string().min(1).max(64).regex(/^[a-z0-9-]+$/).describe("Volume name (lowercase alphanumeric + hyphens)."),
-    mount_path: z21.string().startsWith("/").max(500).describe("In-container mount path (absolute)."),
+    service_id: z22.string().describe("Service publicId."),
+    name: z22.string().min(1).max(64).regex(/^[a-z0-9-]+$/).describe("Volume name (lowercase alphanumeric + hyphens)."),
+    mount_path: z22.string().startsWith("/").max(500).describe("In-container mount path (absolute)."),
     // 10 GB is the real floor: the block-storage backend rejects anything
     // smaller. Advertising 1 GB here (and defaulting to it) meant taking the
     // defaults produced a volume that provisioned with `Hetzner API error:
     // 422` on the NEXT deploy, with nothing tying the failure back to the
     // size. Reject it at the call instead.
-    size_gb: z21.number().int().min(MIN_VOLUME_SIZE_GB).max(100).optional().describe(
+    size_gb: z22.number().int().min(MIN_VOLUME_SIZE_GB).max(100).optional().describe(
       `Disk size in GB (minimum ${MIN_VOLUME_SIZE_GB}, default ${MIN_VOLUME_SIZE_GB}, max 100 via MCP).`
     )
   },
@@ -5315,18 +5473,20 @@ defineTool({
     "  - volume_id: publicId of the volume to update.",
     "  - mount_path (optional): new in-container mount path.",
     "  - size_gb (optional): new size in GB (must be \u2265 current).",
-    "  - backup_enabled (optional): whether this volume is backed up. Turning it off stops future backups; it does not delete the ones already taken.",
+    "  - backup_enabled (optional): whether this volume is backed up nightly. Turning it off stops future backups; it does not delete the ones already taken. Verify with list_volume_backups \u2014 enabling is not the same as having a backup.",
+    "",
+    "IMPORTANT about what a volume backup is: a block-level tar of a LIVE filesystem, i.e. CRASH CONSISTENT, not application consistent. Nothing is quiesced. For a container running its own database (WordPress + MariaDB in one box, Postgres on a disk, SQLite under write), the archive captures whatever was on disk mid-write \u2014 the same state the database would face after a power cut. Usually recoverable, occasionally not. Recommend this as the disaster fallback and a scheduled dump as the actual backup; do not present it as a substitute for one.",
     "",
     "Returns: { volume: Volume } \u2014 the updated record.",
     "",
     'Example: update_volume({ service_id: "svc_abc", volume_id: "vol_xyz", size_gb: 20 }) \u2192 { volume: { sizeGb: 20, \u2026 } }'
   ].join("\n"),
   input: {
-    service_id: z21.string().describe("Service publicId."),
-    volume_id: z21.string().describe("Volume publicId (e.g. vol_\u2026)."),
-    mount_path: z21.string().startsWith("/").max(500).optional().describe("New mount path."),
-    size_gb: z21.number().int().min(MIN_VOLUME_SIZE_GB).max(100).optional().describe(`New size in GB (minimum ${MIN_VOLUME_SIZE_GB}, grow-only).`),
-    backup_enabled: z21.boolean().optional().describe("Whether to keep backing this volume up. Past backups are kept either way.")
+    service_id: z22.string().describe("Service publicId."),
+    volume_id: z22.string().describe("Volume publicId (e.g. vol_\u2026)."),
+    mount_path: z22.string().startsWith("/").max(500).optional().describe("New mount path."),
+    size_gb: z22.number().int().min(MIN_VOLUME_SIZE_GB).max(100).optional().describe(`New size in GB (minimum ${MIN_VOLUME_SIZE_GB}, grow-only).`),
+    backup_enabled: z22.boolean().optional().describe("Whether to keep backing this volume up. Past backups are kept either way.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -5348,6 +5508,78 @@ defineTool({
     return respond({ summary: `Updated ${fields} on volume ${args.volume_id}.`, data });
   }
 });
+defineTool({
+  name: "list_volume_backups",
+  category: "volumes",
+  description: [
+    "List the archives a volume can be restored from, newest first.",
+    "",
+    'WHY THIS MATTERS: `backupEnabled` on a volume says backups are being TAKEN. It does not say any exist. A volume can be enabled and have nothing behind it \u2014 nothing has completed a cycle yet, or the host has no upload grant and is writing its tar onto the very disk it is backing up (that file is not a copy of anything and is deliberately NOT listed here). This tool is how you tell "protected" from "believed to be protected". Check it whenever a volume holds the only copy of something.',
+    "",
+    "When to use: before a risky migration or deploy, when someone asks what the recovery position is, or to pick an archive to hand to restore_volume.",
+    "",
+    "Inputs:",
+    "  - service_id: publicId of the service.",
+    "  - volume_id: publicId of the volume (vol_\u2026).",
+    "",
+    "Returns: { items: RestorePoint[] } \u2014 id (pass to restore_volume), archiveName, sizeBytes (may be null on older agents), createdAt, s3Url. Only the most recent few are kept: the host prunes older archives out of the bucket on its own schedule.",
+    "",
+    'Example: list_volume_backups({ service_id: "svc_abc", volume_id: "vol_xyz" }) \u2192 { items: [{ id: 41, archiveName: "backup-20260911-0300.tar.gz", sizeBytes: 184532992, createdAt: "2026-09-11T03:00:11Z" }] }'
+  ].join("\n"),
+  input: {
+    service_id: z22.string().describe("Service publicId."),
+    volume_id: z22.string().describe("Volume publicId (e.g. vol_\u2026).")
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const response = await ctx.hoststack.volumes.listRestorePoints(
+      teamId,
+      args.service_id,
+      args.volume_id
+    );
+    const data = shapeList(response, "restorePoints", shape);
+    const newest = response.restorePoints[0];
+    const summary = data.items.length === 0 ? `Volume ${args.volume_id} has NO restore points. If backupEnabled is true, either no backup has completed yet or the host cannot upload off-site \u2014 either way there is currently nothing to restore from.` : `Volume ${args.volume_id} has ${data.items.length} restore point${data.items.length === 1 ? "" : "s"}; newest ${newest?.archiveName} from ${newest?.createdAt}.`;
+    return respond({ summary, data });
+  }
+});
+defineTool({
+  name: "restore_volume",
+  category: "volumes",
+  description: [
+    "Unpack one of a volume's archives back over its contents.",
+    "",
+    'DESTRUCTIVE AND NOT REVERSIBLE. Everything on the disk now is replaced by what was on it when the archive was taken. Nothing snapshots the pre-restore state first, so a restore to the wrong point loses the data you had. CONFIRM WITH THE USER \u2014 naming the archive and its timestamp \u2014 before calling this. Never call it to "check whether a backup works".',
+    "",
+    "What the archive is: a block-level tar of a filesystem that was LIVE when it was taken \u2014 crash consistent, not application consistent. A database inside it will come back the way it would after a power cut, and may need its own recovery on first start. Stop the service before restoring if you can.",
+    "",
+    "When to use: the user explicitly asks to roll a volume back to an earlier state, or to recover after data loss.",
+    "",
+    "Inputs:",
+    "  - service_id: publicId of the service.",
+    "  - volume_id: publicId of the volume.",
+    "  - backup_id: the numeric id of a restore point from list_volume_backups. Call that FIRST and show the user the choice \u2014 never guess an id.",
+    "",
+    "Returns: { ok: true } once the host has accepted the restore. The unpack itself runs on the host; re-check the service afterwards.",
+    "",
+    'Example: restore_volume({ service_id: "svc_abc", volume_id: "vol_xyz", backup_id: 41 })'
+  ].join("\n"),
+  input: {
+    service_id: z22.string().describe("Service publicId."),
+    volume_id: z22.string().describe("Volume publicId."),
+    backup_id: z22.number().int().positive().describe("Restore-point id from list_volume_backups. Confirm with the user first.")
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    await ctx.hoststack.volumes.restore(teamId, args.service_id, args.volume_id, {
+      backupId: args.backup_id
+    });
+    return respond({
+      summary: `Restore of volume ${args.volume_id} from backup ${args.backup_id} accepted \u2014 the host is unpacking the archive over the volume's contents. Check the service once it finishes; a database on this volume may run its own crash recovery on first start.`,
+      data: { ok: true }
+    });
+  }
+});
 defineTool({
   name: "delete_volume",
   category: "volumes",
@@ -5365,8 +5597,8 @@ defineTool({
     'Example: delete_volume({ service_id: "svc_abc", volume_id: "vol_xyz" }) \u2192 { ok: true }'
   ].join("\n"),
   input: {
-    service_id: z21.string().describe("Service publicId."),
-    volume_id: z21.string().describe("Volume publicId.")
+    service_id: z22.string().describe("Service publicId."),
+    volume_id: z22.string().describe("Volume publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();