@hoststack.dev/mcp 0.9.1 → 0.10.1

package/README.md

@@ -85,12 +85,12 @@ If `HOSTSTACK_API_KEY` is set in your shell, it gets baked into the snippet; oth
 
 ## Tool inventory
 
-58 tools, grouped by resource:
+60 tools, grouped by resource:
 
 | Category          | Read                                                                                                                              | Write                                                                                                                    |
 | ----------------- | --------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ |
 | **projects**      | `list_projects`, `get_project`                                                                                                    | `create_project`, `update_project`                                                                                       |
-| **services**      | `list_services`, `get_service`, `get_service_metrics`, `get_service_metrics_history`, `get_service_logs`, `get_service_logs_bulk` | `update_service`, `update_service_config`, `suspend_service`, `resume_service`                                           |
+| **services**      | `list_services`, `get_service`, `get_service_metrics`, `get_service_metrics_history`, `get_service_logs`, `get_service_logs_bulk` | `create_service`, `create_dev_environment`, `update_service`, `update_service_config`, `suspend_service`, `resume_service`                                           |
 | **deploys**       | `list_deploys`, `get_deploy`, `get_deploy_logs`, `diagnose_deploy`                                                                | `trigger_deploy`, `cancel_deploy`                                                                                        |
 | **environments**  | `list_environments`                                                                                                               | `create_environment`, `delete_environment`, `promote_deploy`                                                             |
 | **databases**     | `list_databases`, `get_database`, `get_database_cluster`, `query_database`                                                        | `update_database`, `upgrade_database_to_ha` (use the dashboard for create/delete/credentials)                            |
@@ -109,7 +109,7 @@ A few design notes worth knowing as a caller:
 - **`set_env_var` / `delete_env_var` are key-based.** You don't need an env-var ID; the MCP looks up the existing var by key first, then patches or deletes by ID under the hood.
 - **`list_env_vars` masks secret values.** Anything stored with `is_secret: true` comes back as `••••••`. The masking happens server-side, so you can't accidentally leak a secret to the agent's context window.
 - **`get_service_logs` and `get_deploy_logs` are snapshots.** Streaming logs over MCP isn't supported — re-call the tool to get newer entries. Use the dashboard's `/dashboard/services/:id/logs` for live tails.
-- **No `delete_project`, `delete_service`, or `create_service`.** Destructive cascades and the wizard flow are dashboard-only — too risky / too complex for v0.x.
+- **No `delete_project` or `delete_service`.** Destructive cascades are dashboard-only — too risky for an agent to call. Creating is supported via `create_service` / `create_dev_environment`.
 - **Telemetry, hosted only.** When you use `https://hoststack.dev/api/mcp`, we record one row per tool call (tool name, duration, ok/error, SHA-derived hash of input args — never the args themselves) for the analytics page and on-call alerts. Retained 30 days. The local stdio install records nothing.
 
 ## Environment variables

package/dist/hoststack-mcp.js

@@ -1154,20 +1154,23 @@ defineTool({
     "",
     "Inputs:",
     '  - type: "A" | "AAAA" | "CNAME" | "MX" | "TXT" | "NS" | "SRV" | "CAA" | "ALIAS".',
-    '  - name: "@" for the zone apex, or a subdomain label ("www", "api", "_acme-challenge").',
-    "  - content: the literal record value. For TXT pass the unquoted string \u2014 the PowerDNS layer handles quoting.",
+    '  - name: "@" for the zone apex, or a subdomain label ("www", "api", "_acme-challenge"). Do NOT include the zone suffix \u2014 the backend prepends it. "bounce" on zone "micci.dk" publishes "bounce.micci.dk"; passing "bounce.micci.dk" works (the backend strips the suffix) but is non-idiomatic.',
+    "  - content: the literal record value. For TXT pass the unquoted string \u2014 the PowerDNS layer handles quoting. For CNAME / MX / NS / SRV / ALIAS the target may be passed with or without a trailing dot; the adapter FQDN-izes it.",
     "  - ttl (optional): 60\u201386400 seconds, default 3600.",
     "  - priority (optional, required for MX and SRV): 0\u201365535.",
     "",
     "Returns: { record: Record } \u2014 see get_dns_record for the shape.",
     "",
+    "Notes:",
+    '  - CNAME at the apex is rejected (RFC 1034 forbids CNAME coexisting with NS/SOA). Use type="ALIAS" for apex aliasing.',
+    "",
     'Example: create_dns_record({ domain: "micci.dk", type: "TXT", name: "@", content: "google-site-verification=C0V0scK48g2\u2026", ttl: 300 })'
   ].join("\n"),
   input: {
     zone_id: z7.string().optional().describe("Zone publicId."),
     domain: z7.string().optional().describe("Apex or subdomain to resolve a hosted zone."),
     type: z7.enum(DNS_RECORD_TYPES).describe("DNS record type."),
-    name: z7.string().min(1).max(253).describe('"@" for apex, or label (no trailing dot).'),
+    name: z7.string().min(1).max(253).describe('"@" for apex, or a bare label. Do NOT include the zone suffix.'),
     content: z7.string().min(1).max(2e3).describe("Record value; TXT values are unquoted."),
     ttl: z7.number().int().min(60).max(86400).optional().describe("TTL in seconds (default 3600)."),
     priority: z7.number().int().min(0).max(65535).optional().describe("Required for MX / SRV.")
@@ -1221,7 +1224,7 @@ defineTool({
   input: {
     record_id: z7.string().describe("Record publicId."),
     type: z7.enum(DNS_RECORD_TYPES).describe("DNS record type."),
-    name: z7.string().min(1).max(253).describe('"@" for apex, or label.'),
+    name: z7.string().min(1).max(253).describe('"@" for apex, or a bare label. Do NOT include the zone suffix.'),
     content: z7.string().min(1).max(2e3).describe("Record value; TXT unquoted."),
     ttl: z7.number().int().min(60).max(86400).optional().describe("TTL in seconds (default 3600)."),
     priority: z7.number().int().min(0).max(65535).optional().describe("Required for MX / SRV.")
@@ -1937,6 +1940,7 @@ defineTool({
 
 // src/tools/projects.ts
 import { z as z12 } from "zod";
+var REGION_IDS = ["eu-central-1", "eu-central-2", "eu-west-1", "us-east-1"];
 defineTool({
   name: "list_projects",
   category: "projects",
@@ -1969,16 +1973,16 @@ defineTool({
     "Inputs:",
     "  - name: human-readable project name (1\u201360 chars).",
     "  - description (optional): short blurb shown in the dashboard.",
-    '  - region (optional): "fsn1" (Falkenstein) | "nbg1" (Nuremberg) | "hel1" (Helsinki). Default depends on team plan.',
+    '  - region (optional): "eu-central-1" (Falkenstein) | "eu-central-2" (Nuremberg) | "eu-west-1" (Helsinki) | "us-east-1" (Ashburn). Defaults to eu-central-2.',
     "",
     "Returns: { project: Project } \u2014 includes the new id and publicId.",
     "",
-    'Example: create_project({ name: "billing-api", description: "Stripe webhooks", region: "fsn1" }) \u2192 { project: { id: 12, publicId: "prj_\u2026", \u2026 } }'
+    'Example: create_project({ name: "billing-api", description: "Stripe webhooks", region: "eu-central-1" }) \u2192 { project: { id: 12, publicId: "prj_\u2026", \u2026 } }'
   ].join("\n"),
   input: {
     name: z12.string().min(1).max(60).describe("Project name (1\u201360 chars)."),
     description: z12.string().max(500).optional().describe("Short description (\u2264500 chars)."),
-    region: z12.enum(["fsn1", "nbg1", "hel1"]).optional().describe("Hetzner region: fsn1 | nbg1 | hel1.")
+    region: z12.enum(REGION_IDS).optional().describe("Region: eu-central-1 | eu-central-2 | eu-west-1 | us-east-1.")
   },
   handler: async (args2, ctx) => {
     const teamId = await ctx.resolveTeamId();
@@ -2058,6 +2062,24 @@ defineTool({
 
 // src/tools/services.ts
 import { z as z13 } from "zod";
+var DEV_ENV_IMAGE = "hoststack/dev-env:claude";
+var DEV_ENV_VOLUME = { name: "workspace", mountPath: "/workspace", sizeGb: 10 };
+var SERVICE_TYPES = [
+  "web_service",
+  "private_service",
+  "worker",
+  "cron_job",
+  "static_site"
+];
+var SERVICE_PLANS = [
+  "pico",
+  "nano",
+  "micro",
+  "starter",
+  "standard",
+  "pro_standard",
+  "pro_large"
+];
 defineTool({
   name: "list_services",
   category: "services",
@@ -2109,10 +2131,171 @@ defineTool({
       args2.status ? `status=${args2.status}` : null,
       args2.type ? `type=${args2.type}` : null
     ].filter(Boolean).join(", ");
-    const summary = data.items.length === 0 ? filterDesc ? `No services match the given filters (${filterDesc}).` : "No services yet \u2014 create one with create_service or via the dashboard." : `Found ${data.items.length} service${data.items.length === 1 ? "" : "s"}${filterDesc ? ` matching ${filterDesc}` : ""}.`;
+    const summary = data.items.length === 0 ? filterDesc ? `No services match the given filters (${filterDesc}).` : "No services yet \u2014 create one with create_service (or create_dev_environment for an AI dev box), or via the dashboard." : `Found ${data.items.length} service${data.items.length === 1 ? "" : "s"}${filterDesc ? ` matching ${filterDesc}` : ""}.`;
     return respond({ summary, data });
   }
 });
+defineTool({
+  name: "create_service",
+  category: "services",
+  description: [
+    "Create a new service in a project. Source is either a connected git repo (github_repo_id) OR a pre-built docker_image \u2014 never both.",
+    "",
+    "When to use: the user wants to deploy something new. For a one-command AI dev environment specifically, prefer create_dev_environment (it also attaches the /workspace volume and sets the MCP keys).",
+    "",
+    "Inputs:",
+    '  - project_id: numeric id or publicId ("prj_\u2026") of the target project.',
+    "  - name: service name (1\u2013100 chars).",
+    '  - type: "web_service" | "private_service" | "worker" | "cron_job" | "static_site".',
+    "  - docker_image (optional): pre-built image ref to deploy instead of building from source.",
+    "  - github_repo_id (optional): connect a previously-linked GitHub repo by numeric id.",
+    '  - branch (optional): git branch (default "main").',
+    "  - install_command / build_command / start_command (optional): build/run shell commands. start_command is required for web/private services without a docker_image.",
+    "  - cron_schedule (optional): cron expression \u2014 required for cron_job.",
+    '  - publish_path (optional): static-site output dir (e.g. "dist").',
+    '  - runtime (optional): "node" | "bun" | "python" | \u2026 (auto-detected from a repo when omitted).',
+    '  - plan (optional): service size (default "micro").',
+    "  - environment_id (optional): bind to a specific environment; defaults to the project Production env.",
+    "  - auto_deploy (optional, default true): trigger the first deploy immediately when a source is present.",
+    "",
+    "Returns: { service: Service, deployId: number | null }.",
+    "",
+    'Example: create_service({ project_id: "prj_abc", name: "api", type: "web_service", github_repo_id: 42 }) \u2192 { service: { publicId: "svc_\u2026" }, deployId: 1234 }'
+  ].join("\n"),
+  input: {
+    project_id: z13.union([z13.number().int().positive(), z13.string()]).describe("Target project \u2014 numeric id or publicId."),
+    name: z13.string().min(1).max(100).describe("Service name (1\u2013100 chars)."),
+    type: z13.enum(SERVICE_TYPES).describe("Service type."),
+    docker_image: z13.string().max(500).optional().describe("Pre-built image ref. Mutually exclusive with github_repo_id."),
+    github_repo_id: z13.number().int().positive().optional().describe("Linked GitHub repo numeric id. Mutually exclusive with docker_image."),
+    branch: z13.string().max(200).optional().describe('Git branch (default "main").'),
+    install_command: z13.string().max(1e3).optional().describe("Install shell command."),
+    build_command: z13.string().max(1e3).optional().describe("Build shell command."),
+    start_command: z13.string().max(1e3).optional().describe("Start shell command (required for web/private services without an image)."),
+    cron_schedule: z13.string().max(100).optional().describe("Cron expression \u2014 required for cron_job."),
+    publish_path: z13.string().max(500).optional().describe("Static-site output dir."),
+    runtime: z13.string().max(50).optional().describe("Runtime hint (node/bun/python/\u2026)."),
+    plan: z13.enum(SERVICE_PLANS).optional().describe('Service size (default "micro").'),
+    environment_id: z13.union([z13.number().int().positive(), z13.string()]).optional().describe("Bind to a specific environment; defaults to Production."),
+    auto_deploy: z13.boolean().optional().describe("Trigger the first deploy immediately (default true).")
+  },
+  handler: async (args2, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const projectId = await ctx.hoststack.resolveId(args2.project_id, {
+      kind: "project",
+      teamId
+    });
+    const input = {
+      name: args2.name,
+      type: args2.type,
+      projectId
+    };
+    if (args2.docker_image !== void 0) input.dockerImage = args2.docker_image;
+    if (args2.github_repo_id !== void 0) input.githubRepoId = args2.github_repo_id;
+    if (args2.branch !== void 0) input.branch = args2.branch;
+    if (args2.install_command !== void 0) input.installCommand = args2.install_command;
+    if (args2.build_command !== void 0) input.buildCommand = args2.build_command;
+    if (args2.start_command !== void 0) input.startCommand = args2.start_command;
+    if (args2.cron_schedule !== void 0) input.cronSchedule = args2.cron_schedule;
+    if (args2.publish_path !== void 0) input.publishPath = args2.publish_path;
+    if (args2.runtime !== void 0) input.runtime = args2.runtime;
+    if (args2.plan !== void 0) input.plan = args2.plan;
+    if (args2.auto_deploy !== void 0) input.autoDeploy = args2.auto_deploy;
+    if (args2.environment_id !== void 0) {
+      input.environmentId = await ctx.hoststack.resolveId(args2.environment_id, {
+        kind: "environment",
+        teamId
+      });
+    }
+    const response = await ctx.hoststack.services.create(teamId, input);
+    const data = {
+      service: shapeService(response.service),
+      deployId: response.deployId ?? null
+    };
+    const publicId = data.service && "publicId" in data.service ? data.service.publicId : "unknown";
+    return respond({ summary: `Created service "${args2.name}" (${publicId}).`, data });
+  }
+});
+defineTool({
+  name: "create_dev_environment",
+  category: "services",
+  description: [
+    "Spin up an AI dev environment in one call: a private service from the agentic dev-env image (Claude Code + Codex + OpenCode + MCPs preinstalled), with a persistent /workspace volume and the MCP API keys set, then fire the first deploy.",
+    "",
+    `When to use: the user wants a cloud terminal / dev box they can drive coding agents in (from a desk or a phone). This mirrors the dashboard's "AI Dev Environment" wizard preset \u2014 create (deploy deferred) \u2192 set keys \u2192 attach /workspace \u2192 deploy, so the first container boots with its volume and keys already in place.`,
+    "",
+    "Inputs:",
+    '  - project_id: numeric id or publicId ("prj_\u2026") of the target project.',
+    '  - name (optional): service name (default "dev-environment").',
+    '  - plan (optional): service size (default "micro").',
+    "  - disk_gb (optional): /workspace volume size in GB (default 10, 1\u2013100).",
+    "  - hoststack_api_key (optional): sets HOSTSTACK_API_KEY so the hoststack MCP works inside the container.",
+    "  - poststack_api_key (optional): sets POSTSTACK_API_KEY so the poststack MCP works inside the container.",
+    "",
+    "Returns: { service: Service, volumeAttached: boolean, deployId: number | null }. Open the Terminal tab on the service (dashboard or phone) once it is running; log in once with `claude /login` inside the container.",
+    "",
+    'Example: create_dev_environment({ project_id: "prj_abc", name: "scratch", hoststack_api_key: "hs_live_\u2026" })'
+  ].join("\n"),
+  input: {
+    project_id: z13.union([z13.number().int().positive(), z13.string()]).describe("Target project \u2014 numeric id or publicId."),
+    name: z13.string().min(1).max(100).optional().describe('Service name (default "dev-environment").'),
+    plan: z13.enum(SERVICE_PLANS).optional().describe('Service size (default "micro").'),
+    disk_gb: z13.number().int().min(1).max(100).optional().describe("/workspace volume size in GB (default 10)."),
+    hoststack_api_key: z13.string().optional().describe("Value for HOSTSTACK_API_KEY (enables the hoststack MCP in-container)."),
+    poststack_api_key: z13.string().optional().describe("Value for POSTSTACK_API_KEY (enables the poststack MCP in-container).")
+  },
+  handler: async (args2, ctx) => {
+    const teamId = await ctx.resolveTeamId();
+    const projectId = await ctx.hoststack.resolveId(args2.project_id, {
+      kind: "project",
+      teamId
+    });
+    const name = args2.name ?? "dev-environment";
+    const sizeGb = args2.disk_gb ?? DEV_ENV_VOLUME.sizeGb;
+    const createInput = {
+      name,
+      type: "private_service",
+      projectId,
+      dockerImage: DEV_ENV_IMAGE,
+      autoDeploy: false
+    };
+    if (args2.plan !== void 0) createInput.plan = args2.plan;
+    const created = await ctx.hoststack.services.create(teamId, createInput);
+    const service = created.service;
+    const envVars = [];
+    if (args2.hoststack_api_key)
+      envVars.push({
+        key: "HOSTSTACK_API_KEY",
+        value: args2.hoststack_api_key,
+        isSecret: true
+      });
+    if (args2.poststack_api_key)
+      envVars.push({
+        key: "POSTSTACK_API_KEY",
+        value: args2.poststack_api_key,
+        isSecret: true
+      });
+    if (envVars.length > 0) {
+      await ctx.hoststack.envVars.bulkSet(teamId, service.id, { vars: envVars });
+    }
+    let volumeAttached = false;
+    try {
+      await ctx.hoststack.volumes.create(teamId, service.id, {
+        name: DEV_ENV_VOLUME.name,
+        mountPath: DEV_ENV_VOLUME.mountPath,
+        sizeGb
+      });
+      volumeAttached = true;
+    } catch {
+    }
+    const deploy = await ctx.hoststack.deploys.trigger(teamId, service.id);
+    const deployId = deploy.deploy?.id ?? null;
+    return respond({
+      summary: `Created AI dev environment "${name}" (${service.publicId})${volumeAttached ? " with a /workspace volume" : ""} \u2014 deploying. Open its Terminal tab once running.`,
+      data: { service: shapeService(service), volumeAttached, deployId }
+    });
+  }
+});
 defineTool({
   name: "get_service",
   category: "services",