@hoststack.dev/mcp 0.25.0 → 0.26.0

package/dist/index.js

@@ -3,7 +3,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { HostStack } from "@hoststack.dev/sdk";
 
 // src/version.ts
-var MCP_VERSION = true ? "0.25.0" : "0.0.0-dev";
+var MCP_VERSION = true ? "0.26.0" : "0.0.0-dev";
 var USER_AGENT = `hoststack-mcp/${MCP_VERSION}`;
 
 // src/api-client.ts
@@ -656,6 +656,10 @@ async function resolveMachineId(ctx, teamId, machine) {
   return matches[0].id;
 }
 function describeMachine(m) {
+  if (m.kind === "infra") {
+    const state = m.status === "active" ? "online" : "offline";
+    return `${m.name}: infrastructure machine for project ${m.infraProjectId}, ${state} (only that project's services can be pinned to it)`;
+  }
   if (!m.enrolled) return `${m.name}: registered but never paired`;
   if (m.status !== "active") return `${m.name}: offline`;
   if (m.agentBuild === "from-source") return `${m.name}: online, agent running from source`;
@@ -1425,19 +1429,85 @@ defineTool({
     "",
     "When to use: discover which apex domains support record management before calling create_dns_record / list_dns_records. The dashboard equivalent is Domains \u2192 DNS.",
     "",
-    'Returns: { items: Zone[] } \u2014 each zone exposes publicId, domainName, status ("active" | "syncing" | "failed" | "deleting"), nsRecords (the nameservers the parent registry must delegate to), provider, createdAt.',
+    'Returns: { items: Zone[] } \u2014 each zone exposes publicId, domainName, status ("active" | "syncing" | "failed" | "deleting"), nsRecords (the nameservers the parent registry must delegate to), provider, createdAt, plus the delegation reading below.',
+    "",
+    'READ delegationStatus, NOT status, to answer "is this domain live?". `status` describes the zone on OUR side \u2014 "active" means PowerDNS holds it and answers for it. `delegationStatus` describes whether the parent registry actually SENDS anyone here:',
+    '  - "delegated" \u2014 the registry names our nameservers; queries reach us.',
+    '  - "foreign" \u2014 the registry names somebody else (delegationObservedNs says who). The zone is authoritative for nobody: its records are correct and unreachable, public lookups return the OLD host or nothing, and no domain under it can pass verification or get a certificate. This is the state a half-finished migration sits in, and it looks identical to a healthy zone on every other field.',
+    '  - "unknown" \u2014 no usable answer (SERVFAIL/timeout/never checked). NOT the same as "foreign"; do not tell a user to change their registrar on the strength of it. Call check_dns_delegation for a live reading.',
+    "",
+    "delegationObservedNs is the NS set the parent publishes today, and delegationCheckedAt is when it was read (refreshed hourly). For an answer current to the second \u2014 e.g. just after a registrar change \u2014 call check_dns_delegation.",
+    "",
+    'Example: list_dns_zones() \u2192 { items: [{ publicId: "dnz_abc", domainName: "micci.dk", status: "active", nsRecords: ["ns1.hoststack.dev","ns2.hoststack.dev"], delegationStatus: "foreign", delegationObservedNs: ["docks15.rzone.de","shades13.rzone.de"] }] }',
+    "",
+    'Each zone ALSO carries what the registry says about the REGISTRATION, refreshed daily over RDAP: registrar, registryStatus (EPP codes such as clientHold / pendingTransfer / pendingDelete / redemptionPeriod), registryExpiresAt, registryCheckedAt and registryCheckOutcome ("ok" | "not_found" | "unsupported" | "rate_limited" | "error").',
+    "",
+    'This is a different question from delegation, and a zone can fail either one alone. Delegation asks whether the world is being sent here; these fields ask whether the domain is still going to be the customer\'s next month. `status: "active"` answers neither \u2014 it describes our nameservers only.',
     "",
-    'Example: list_dns_zones() \u2192 { items: [{ publicId: "dnz_abc", domainName: "micci.dk", status: "active", nsRecords: ["ns1.hoststack.dev","ns2.hoststack.dev"] }] }'
+    'SILENCE IS NOT GOOD NEWS HERE. A null registryExpiresAt or registrar on a zone that HAS been checked means the registry publishes neither \u2014 DENIC publishes no expiry and no registrar for any .de \u2014 and registryCheckOutcome "unsupported" means the TLD has no RDAP service at all (there is none for .dk), so every field above it is unknowable rather than fine. Read registryCheckOutcome before drawing any conclusion from an empty field.',
+    "",
+    "HostStack is not the registrar for a domain whose DNS it merely hosts. Nothing in this MCP, the CLI or the dashboard can renew, transfer or un-hold a registration \u2014 if registryStatus or registryExpiresAt shows trouble, the action is at the registrar named in `registrar`.",
+    "",
+    'Example: list_dns_zones() \u2192 { items: [{ publicId: "dnz_abc", domainName: "micci.dk", status: "active", nsRecords: ["ns1.hoststack.dev","ns2.hoststack.dev"], registrar: "GoDaddy.com, LLC", registryStatus: ["clientTransferProhibited"], registryExpiresAt: "2027-03-04T00:00:00Z", registryCheckOutcome: "ok" }] }'
   ].join("\n"),
   input: {},
   handler: async (_args, ctx) => {
     const teamId = await ctx.resolveTeamId();
     const response = await ctx.hoststack.dns.listZones(teamId);
-    const items = Array.isArray(response.zones) ? response.zones.map(shape) : [];
-    const summary = items.length === 0 ? "No DNS zones hosted on this team. Create one in the dashboard (Domains \u2192 DNS)." : `Found ${items.length} hosted DNS zone${items.length === 1 ? "" : "s"}.`;
+    const zones = Array.isArray(response.zones) ? response.zones : [];
+    const items = zones.map(shape);
+    const foreign = zones.filter((z23) => z23.delegationStatus === "foreign");
+    const foreignNote = foreign.length === 0 ? "" : ` WARNING: ${foreign.length} zone${foreign.length === 1 ? " is" : "s are"} hosted here but still delegated elsewhere by the registry \u2014 ` + foreign.map(
+      (z23) => `${z23.domainName} \u2192 ${(z23.delegationObservedNs ?? []).join(", ") || "unknown nameservers"}`
+    ).join("; ") + `. Records on ${foreign.length === 1 ? "it" : "them"} are correct but unreachable; the nameservers must be changed at the registrar.`;
+    const summary = items.length === 0 ? "No DNS zones hosted on this team. Create one in the dashboard (Domains \u2192 DNS)." : `Found ${items.length} hosted DNS zone${items.length === 1 ? "" : "s"}.${foreignNote}`;
     return respond({ summary, data: { items } });
   }
 });
+defineTool({
+  name: "check_dns_delegation",
+  category: "dns",
+  description: [
+    "Read, live, whether the parent registry actually delegates a zone's apex to HostStack \u2014 and store the reading on the zone.",
+    "",
+    'WHAT THIS ANSWERS that nothing else does: a hosted zone can be `status: "active"`, DNSSEC-signed, full of correct records, and authoritative for NOBODY, because the registry still points the domain at the previous host. Public lookups then return the old host (or nothing) while a query against our own nameservers returns the right answer \u2014 and every other field we expose says healthy. This is the normal shape of a half-finished migration, and it is what to check FIRST when a zone looks perfect but the site is not live, a domain will not verify, or a certificate will not issue.',
+    "",
+    "When to use: right after someone changes nameservers at a registrar (list_dns_zones carries the hourly reading, which will be stale by minutes); before telling anyone a cutover is done; or to explain why verify_domain keeps returning pending.",
+    "",
+    "Provide EITHER zone_id (the zone publicId) OR domain (apex or subdomain \u2014 the longest-matching hosted apex wins).",
+    "",
+    "Returns: { zone, delegation: { status, observedNameservers, expectedNameservers, checkedAt } }.",
+    `  - status "delegated": at least one of our nameservers is in the parent's NS set. Any, not all \u2014 a staged migration legitimately runs split for a while, and queries already reach us during it.`,
+    '  - status "foreign": the parent answered and named somebody else. observedNameservers is who. The fix is at the REGISTRAR of the apex, never in our records; expect up to 48h of propagation after the change.',
+    '  - status "unknown": no usable answer (SERVFAIL, timeout, NXDOMAIN). This is NOT "not delegated" \u2014 never tell someone to re-point a registrar on the strength of it. Retry, or check the domain is registered at all.',
+    "",
+    'Note for `.dk` and other strict registries: they refuse the nameserver change until we already answer authoritatively for the domain, so a zone there is legitimately "foreign" for a while by design. That is the ordering the registry imposes, not a mistake.',
+    "",
+    'Example: check_dns_delegation({ domain: "wohnwagen-wuckert.de" }) \u2192 { delegation: { status: "foreign", observedNameservers: ["docks15.rzone.de","shades13.rzone.de"], expectedNameservers: ["ns1.hoststack.dev","ns2.hoststack.dev"] } }'
+  ].join("\n"),
+  input: {
+    zone_id: z8.string().optional().describe('Zone publicId (e.g. "dnz_abc").'),
+    domain: z8.string().optional().describe("Apex or subdomain \u2014 resolves to the longest-matching hosted zone.")
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const zoneInput = {};
+    if (args.zone_id !== void 0) zoneInput.zone_id = args.zone_id;
+    if (args.domain !== void 0) zoneInput.domain = args.domain;
+    const zone = await resolveZonePublicId(ctx.hoststack, teamId, zoneInput);
+    const { delegation } = await ctx.hoststack.dns.checkDelegation(teamId, zone.publicId);
+    const observed = delegation.observedNameservers.join(", ");
+    const expected = delegation.expectedNameservers.join(" / ");
+    const summary = delegation.status === "delegated" ? `${zone.domainName} is delegated to HostStack (${observed}). Queries for it reach this zone.` : delegation.status === "foreign" ? `${zone.domainName} is HOSTED here but NOT delegated here: the registry still points it at ${observed}. Records in this zone are correct but nobody is being sent to read them \u2014 public lookups return the old host. Change the nameservers at the registrar of ${zone.domainName} to ${expected}; propagation can take up to 48 hours.` : `Could not determine the delegation for ${zone.domainName} \u2014 the NS lookup returned no usable answer (SERVFAIL, timeout, or the domain is not registered). This is NOT evidence that the delegation is wrong; do not change a registrar on the strength of it. Retry in a moment.`;
+    return respond({
+      summary,
+      data: {
+        zone: { publicId: zone.publicId, domainName: zone.domainName },
+        delegation
+      }
+    });
+  }
+});
 defineTool({
   name: "list_dns_records",
   category: "dns",
@@ -1769,10 +1839,14 @@ defineTool({
     };
     if (args.path_prefix !== void 0) input.pathPrefix = args.path_prefix;
     const response = await ctx.hoststack.domains.add(teamId, input);
-    const dnsSyncWarning = response.domain.dnsSyncWarning;
-    const data = dnsSyncWarning ? { domain: shapeDomain(response.domain), dnsSyncWarning } : { domain: shapeDomain(response.domain) };
+    const { dnsSyncWarning, delegationWarning } = response.domain;
+    const data = {
+      domain: shapeDomain(response.domain),
+      ...dnsSyncWarning ? { dnsSyncWarning } : {},
+      ...delegationWarning ? { delegationWarning } : {}
+    };
     return respond({
-      summary: dnsSyncWarning ? `Added domain ${args.hostname}, but its auto-created DNS record hasn't synced yet \u2014 ${dnsSyncWarning}` : `Added domain ${args.hostname}. Configure DNS, then call verify_domain.`,
+      summary: delegationWarning ? `Added domain ${args.hostname}, but it CANNOT verify yet: ${delegationWarning}` : dnsSyncWarning ? `Added domain ${args.hostname}, but its auto-created DNS record hasn't synced yet \u2014 ${dnsSyncWarning}` : `Added domain ${args.hostname}. Configure DNS, then call verify_domain.`,
       data
     });
   }
@@ -1788,19 +1862,30 @@ defineTool({
     "Inputs:",
     "  - domain_id: publicId of the domain (from list_domains or add_domain).",
     "",
-    "Returns: { ok: true }. Re-call list_domains to inspect the updated verified flag and SSL status.",
+    "Returns: { domain, verified }. `verified` is the outcome of THIS check \u2014 the call does not merely queue one.",
     "",
-    'Example: verify_domain({ domain_id: "dom_xyz" }) \u2192 { ok: true }'
+    "If it fails and HostStack hosts the zone, the response may carry `delegationWarning`: the records are ours and correct, but the registry still delegates the apex to another host, so queries never reach us. That will NOT resolve by waiting or by calling this again \u2014 the nameservers have to change at the registrar. Use check_dns_delegation to see who the apex currently points at.",
+    "",
+    "It may instead carry `dnsSyncWarning`: the record HostStack creates for this hostname could not be published, usually because a record already at that name conflicts with it (a CNAME and an A cannot share a name). Also not fixable by retrying \u2014 resolve the conflict it names with list_dns_records / delete_dns_record first.",
+    "",
+    'Example: verify_domain({ domain_id: "dom_xyz" }) \u2192 { verified: false, delegationWarning: "\u2026the registry still delegates wohnwagen-wuckert.de to docks15.rzone.de\u2026" }'
   ].join("\n"),
   input: {
     domain_id: z9.string().describe("Domain publicId.")
   },
   handler: async (args, ctx) => {
     const teamId = await ctx.resolveTeamId();
-    await ctx.hoststack.domains.verify(teamId, args.domain_id);
+    const { domain } = await ctx.hoststack.domains.verify(teamId, args.domain_id);
+    const verified = domain.status === "active";
+    const summary = verified ? `Verified ${domain.domain} \u2014 it is now active.` : domain.delegationWarning ? `${domain.domain} did NOT verify, and retrying will not help: ${domain.delegationWarning}` : domain.dnsSyncWarning ? `${domain.domain} did NOT verify, and retrying will not help: ${domain.dnsSyncWarning}` : `${domain.domain} did not verify yet (status: ${domain.status}). DNS changes can take time to propagate; check the records resolve publicly, then call this again.`;
     return respond({
-      summary: `Triggered DNS verification for ${args.domain_id}.`,
-      data: { ok: true }
+      summary,
+      data: {
+        domain: shapeDomain(domain),
+        verified,
+        ...domain.delegationWarning ? { delegationWarning: domain.delegationWarning } : {},
+        ...domain.dnsSyncWarning ? { dnsSyncWarning: domain.dnsSyncWarning } : {}
+      }
     });
   }
 });
@@ -3150,6 +3235,10 @@ var NOTIFICATION_EVENTS = [
   "database.restore_failed",
   "volume.backup_failed",
   "volume.backup_overdue",
+  "dns.registry_status_changed",
+  "dns.registry_expiring",
+  "dns.registry_domain_missing",
+  "dns.registry_record_changed",
   "domain.registrant_verification_lapsed",
   "service.auto_restarted",
   "machine.offline",
@@ -5308,9 +5397,11 @@ defineTool({
     "Inputs:",
     "  - service_id: publicId of the service.",
     "",
-    "Returns: { items: Volume[] } \u2014 each entry has id, publicId, name, mountPath, sizeGb, status (pending|active|deleting), createdAt, updatedAt.",
+    "Returns: { items: Volume[] } \u2014 each entry has id, publicId, name, mountPath, sizeGb, status (pending|active|deleting), backupEnabled, createdAt, updatedAt.",
     "",
-    'Example: list_volumes({ service_id: "svc_abc" }) \u2192 { items: [{ name: "data", mountPath: "/var/data", sizeGb: 10, status: "active" }] }'
+    "`backupEnabled` says backups are being TAKEN, not that any exist. Call list_volume_backups to see which archives are actually restorable \u2014 a volume can be enabled and have nothing behind it (nothing has completed yet, or the host has no upload grant and is writing tars onto the very disk it is backing up, which is not a copy of anything). Turn it on with update_volume({ backup_enabled: true }).",
+    "",
+    'Example: list_volumes({ service_id: "svc_abc" }) \u2192 { items: [{ name: "data", mountPath: "/var/data", sizeGb: 10, status: "active", backupEnabled: false }] }'
   ].join("\n"),
   input: {
     service_id: z22.string().describe("Service publicId (e.g. svc_abc123).")
@@ -5382,7 +5473,9 @@ defineTool({
     "  - volume_id: publicId of the volume to update.",
     "  - mount_path (optional): new in-container mount path.",
     "  - size_gb (optional): new size in GB (must be \u2265 current).",
-    "  - backup_enabled (optional): whether this volume is backed up. Turning it off stops future backups; it does not delete the ones already taken.",
+    "  - backup_enabled (optional): whether this volume is backed up nightly. Turning it off stops future backups; it does not delete the ones already taken. Verify with list_volume_backups \u2014 enabling is not the same as having a backup.",
+    "",
+    "IMPORTANT about what a volume backup is: a block-level tar of a LIVE filesystem, i.e. CRASH CONSISTENT, not application consistent. Nothing is quiesced. For a container running its own database (WordPress + MariaDB in one box, Postgres on a disk, SQLite under write), the archive captures whatever was on disk mid-write \u2014 the same state the database would face after a power cut. Usually recoverable, occasionally not. Recommend this as the disaster fallback and a scheduled dump as the actual backup; do not present it as a substitute for one.",
     "",
     "Returns: { volume: Volume } \u2014 the updated record.",
     "",
@@ -5415,6 +5508,78 @@ defineTool({
     return respond({ summary: `Updated ${fields} on volume ${args.volume_id}.`, data });
   }
 });
+defineTool({
+  name: "list_volume_backups",
+  category: "volumes",
+  description: [
+    "List the archives a volume can be restored from, newest first.",
+    "",
+    'WHY THIS MATTERS: `backupEnabled` on a volume says backups are being TAKEN. It does not say any exist. A volume can be enabled and have nothing behind it \u2014 nothing has completed a cycle yet, or the host has no upload grant and is writing its tar onto the very disk it is backing up (that file is not a copy of anything and is deliberately NOT listed here). This tool is how you tell "protected" from "believed to be protected". Check it whenever a volume holds the only copy of something.',
+    "",
+    "When to use: before a risky migration or deploy, when someone asks what the recovery position is, or to pick an archive to hand to restore_volume.",
+    "",
+    "Inputs:",
+    "  - service_id: publicId of the service.",
+    "  - volume_id: publicId of the volume (vol_\u2026).",
+    "",
+    "Returns: { items: RestorePoint[] } \u2014 id (pass to restore_volume), archiveName, sizeBytes (may be null on older agents), createdAt, s3Url. Only the most recent few are kept: the host prunes older archives out of the bucket on its own schedule.",
+    "",
+    'Example: list_volume_backups({ service_id: "svc_abc", volume_id: "vol_xyz" }) \u2192 { items: [{ id: 41, archiveName: "backup-20260911-0300.tar.gz", sizeBytes: 184532992, createdAt: "2026-09-11T03:00:11Z" }] }'
+  ].join("\n"),
+  input: {
+    service_id: z22.string().describe("Service publicId."),
+    volume_id: z22.string().describe("Volume publicId (e.g. vol_\u2026).")
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const response = await ctx.hoststack.volumes.listRestorePoints(
+      teamId,
+      args.service_id,
+      args.volume_id
+    );
+    const data = shapeList(response, "restorePoints", shape);
+    const newest = response.restorePoints[0];
+    const summary = data.items.length === 0 ? `Volume ${args.volume_id} has NO restore points. If backupEnabled is true, either no backup has completed yet or the host cannot upload off-site \u2014 either way there is currently nothing to restore from.` : `Volume ${args.volume_id} has ${data.items.length} restore point${data.items.length === 1 ? "" : "s"}; newest ${newest?.archiveName} from ${newest?.createdAt}.`;
+    return respond({ summary, data });
+  }
+});
+defineTool({
+  name: "restore_volume",
+  category: "volumes",
+  description: [
+    "Unpack one of a volume's archives back over its contents.",
+    "",
+    'DESTRUCTIVE AND NOT REVERSIBLE. Everything on the disk now is replaced by what was on it when the archive was taken. Nothing snapshots the pre-restore state first, so a restore to the wrong point loses the data you had. CONFIRM WITH THE USER \u2014 naming the archive and its timestamp \u2014 before calling this. Never call it to "check whether a backup works".',
+    "",
+    "What the archive is: a block-level tar of a filesystem that was LIVE when it was taken \u2014 crash consistent, not application consistent. A database inside it will come back the way it would after a power cut, and may need its own recovery on first start. Stop the service before restoring if you can.",
+    "",
+    "When to use: the user explicitly asks to roll a volume back to an earlier state, or to recover after data loss.",
+    "",
+    "Inputs:",
+    "  - service_id: publicId of the service.",
+    "  - volume_id: publicId of the volume.",
+    "  - backup_id: the numeric id of a restore point from list_volume_backups. Call that FIRST and show the user the choice \u2014 never guess an id.",
+    "",
+    "Returns: { ok: true } once the host has accepted the restore. The unpack itself runs on the host; re-check the service afterwards.",
+    "",
+    'Example: restore_volume({ service_id: "svc_abc", volume_id: "vol_xyz", backup_id: 41 })'
+  ].join("\n"),
+  input: {
+    service_id: z22.string().describe("Service publicId."),
+    volume_id: z22.string().describe("Volume publicId."),
+    backup_id: z22.number().int().positive().describe("Restore-point id from list_volume_backups. Confirm with the user first.")
+  },
+  handler: async (args, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    await ctx.hoststack.volumes.restore(teamId, args.service_id, args.volume_id, {
+      backupId: args.backup_id
+    });
+    return respond({
+      summary: `Restore of volume ${args.volume_id} from backup ${args.backup_id} accepted \u2014 the host is unpacking the archive over the volume's contents. Check the service once it finishes; a database on this volume may run its own crash recovery on first start.`,
+      data: { ok: true }
+    });
+  }
+});
 defineTool({
   name: "delete_volume",
   category: "volumes",