@luxorai/mcp 0.0.0-stage → 0.3.1

package/dist/tools/templates.js

@@ -0,0 +1,142 @@
+import { z } from "zod";
+import { ok, envSchema } from "./common.js";
+/**
+ * Template tools — custom-image templates and their builds.
+ *
+ * A "template" is a reusable sandbox-image spec (base image + setup script +
+ * default resources/env); building one produces a snapshot/image that sandboxes
+ * can boot from. Method names and request fields are matched to the generated
+ * `tenki.sandbox.v1.SandboxService` protobuf (the wire contract the control
+ * plane actually speaks). Notable shapes: sizing is a nested `resources` object
+ * ({ cpuCores, memoryMb, diskSizeGb }); the env map is `envVars`; a build is
+ * addressed by `buildId`; and ListActiveTemplateBuilds is scoped by `templateId`.
+ */
+export function registerTemplates(server, client) {
+    /** Assemble the nested TemplateResources object from flat sizing params (omitting any unset). */
+    const resourcesFrom = (cpuCores, memoryMb, diskSizeGb) => {
+        const r = {};
+        if (cpuCores !== undefined)
+            r.cpuCores = cpuCores;
+        if (memoryMb !== undefined)
+            r.memoryMb = memoryMb;
+        if (diskSizeGb !== undefined)
+            r.diskSizeGb = diskSizeGb;
+        return r;
+    };
+    // ── Create ──────────────────────────────────────────────────────────────────
+    server.tool("tenki_create_template", "Create a custom-image template (a reusable sandbox-image spec: base image + setup script + default resources). Build it into a bootable image later with tenki_build_template. NOTE: only a TYPED template (created with builder_spec, no legacy fields) can build a named, publishable image (image_name) that tenki_create_sandbox boots via its `image` arg.", {
+        name: z.string().describe("Human-readable template name."),
+        base_image_id: z.string().optional().describe("Base image ID to build on top of."),
+        setup_script: z.string().optional().describe("Shell script run at build time to provision the image. Required for a from-scratch template (the API rejects a create without it unless you derive from a parent template/image)."),
+        start_cmd: z.string().optional().describe("Command run when a sandbox boots from this template."),
+        cpu_cores: z.number().int().min(1).max(16).optional().describe("Default vCPUs for sandboxes from this template (1-16)."),
+        memory_mb: z.number().int().min(512).max(65536).optional().describe("Default memory in MB (512-65536)."),
+        disk_size_gb: z.number().int().min(5).max(100).optional().describe("Default disk in GB (5-100)."),
+        env_vars: envSchema,
+        tags: z.array(z.string()).optional().describe("Tags for later filtering."),
+        parent_template_id: z.string().optional().describe("Derive this template from an existing template."),
+        parent_image: z.string().optional().describe("Derive this template from an existing built image reference."),
+        builder_spec: z
+            .record(z.string(), z.unknown())
+            .optional()
+            .describe("Typed template spec, passed through as-is — e.g. {specVersion:'tenki.template.v1', base:{image:'sandbox'}, workdir:'/home/tenki', steps:[{run:{command:'...'}}], resources:{cpuCores,memoryMb,diskSizeGb}}. Mutually exclusive with base_image_id/setup_script/start_cmd/env_vars/cpu_cores/memory_mb/disk_size_gb/parent_* (the API rejects mixing). Required if the template's builds should publish an image (tenki_build_template image_name)."),
+        workspace_id: z.string().optional().describe("Workspace to create in (defaults to the key's first workspace)."),
+    }, async (a) => {
+        const owner = await client.resolveOwner();
+        const workspaceId = a.workspace_id ?? owner.workspaceId;
+        const resources = resourcesFrom(a.cpu_cores, a.memory_mb, a.disk_size_gb);
+        const body = {
+            ...(workspaceId ? { workspaceId } : {}),
+            name: a.name,
+            ...(a.base_image_id ? { baseImageId: a.base_image_id } : {}),
+            ...(a.setup_script !== undefined ? { setupScript: a.setup_script } : {}),
+            ...(a.start_cmd !== undefined ? { startCmd: a.start_cmd } : {}),
+            ...(a.env_vars && Object.keys(a.env_vars).length ? { envVars: a.env_vars } : {}),
+            ...(Object.keys(resources).length ? { resources } : {}),
+            ...(a.tags && a.tags.length ? { tags: a.tags } : {}),
+            ...(a.parent_template_id ? { parentTemplateId: a.parent_template_id } : {}),
+            ...(a.parent_image ? { parentImage: a.parent_image } : {}),
+            ...(a.builder_spec ? { builderSpec: a.builder_spec } : {}),
+        };
+        return ok(await client.control("CreateTemplate", body));
+    });
+    // ── Get ─────────────────────────────────────────────────────────────────────
+    server.tool("tenki_get_template", "Retrieve one template by ID.", { template_id: z.string().describe("The template ID.") }, async ({ template_id }) => ok(await client.control("GetTemplate", { templateId: template_id })));
+    // ── List ────────────────────────────────────────────────────────────────────
+    server.tool("tenki_list_templates", "List templates for the workspace, optionally filtered by tags.", {
+        tags: z.array(z.string()).optional().describe("Only return templates that carry all of these tags."),
+        workspace_id: z.string().optional().describe("Workspace to list from (defaults to the key's first workspace)."),
+        page_size: z.number().int().positive().optional(),
+        page_token: z.string().optional(),
+    }, async ({ tags, workspace_id, page_size, page_token }) => {
+        const owner = await client.resolveOwner();
+        const workspaceId = workspace_id ?? owner.workspaceId;
+        return ok(await client.control("ListTemplates", {
+            ...(workspaceId ? { workspaceId } : {}),
+            ...(tags && tags.length ? { tags } : {}),
+            ...(page_size ? { pageSize: page_size } : {}),
+            ...(page_token ? { pageToken: page_token } : {}),
+        }));
+    });
+    // ── Update ──────────────────────────────────────────────────────────────────
+    server.tool("tenki_update_template", "Update mutable fields on a template. Only the fields you provide are changed; pass clear_tags to remove all tags.", {
+        template_id: z.string().describe("The template ID to update."),
+        name: z.string().optional().describe("New human-readable name."),
+        base_image_id: z.string().optional().describe("New base image ID."),
+        setup_script: z.string().optional().describe("New build-time provisioning script."),
+        start_cmd: z.string().optional().describe("New boot command."),
+        cpu_cores: z.number().int().min(1).max(16).optional().describe("New default vCPUs (1-16)."),
+        memory_mb: z.number().int().min(512).max(65536).optional().describe("New default memory in MB (512-65536)."),
+        disk_size_gb: z.number().int().min(5).max(100).optional().describe("New default disk in GB (5-100)."),
+        env_vars: envSchema,
+        tags: z.array(z.string()).optional().describe("Replacement set of tags."),
+        clear_tags: z.boolean().optional().describe("Remove all tags from the template."),
+        builder_spec: z.record(z.string(), z.unknown()).optional().describe("Advanced structured build spec (TemplateBuildSpec); passed through as-is."),
+    }, async (a) => {
+        const resources = resourcesFrom(a.cpu_cores, a.memory_mb, a.disk_size_gb);
+        const body = {
+            templateId: a.template_id,
+            ...(a.name !== undefined ? { name: a.name } : {}),
+            ...(a.base_image_id !== undefined ? { baseImageId: a.base_image_id } : {}),
+            ...(a.setup_script !== undefined ? { setupScript: a.setup_script } : {}),
+            ...(a.start_cmd !== undefined ? { startCmd: a.start_cmd } : {}),
+            ...(a.env_vars && Object.keys(a.env_vars).length ? { envVars: a.env_vars } : {}),
+            ...(Object.keys(resources).length ? { resources } : {}),
+            ...(a.tags && a.tags.length ? { tags: a.tags } : {}),
+            ...(a.clear_tags ? { clearTags: true } : {}),
+            ...(a.builder_spec ? { builderSpec: a.builder_spec } : {}),
+        };
+        return ok(await client.control("UpdateTemplate", body));
+    });
+    // ── Delete ──────────────────────────────────────────────────────────────────
+    server.tool("tenki_delete_template", "Delete a template by ID. Pass force to delete even when builds or dependents exist.", {
+        template_id: z.string().describe("The template ID to delete."),
+        force: z.boolean().optional().describe("Force deletion despite dependents (default false)."),
+    }, async ({ template_id, force }) => ok(await client.control("DeleteTemplate", {
+        templateId: template_id,
+        ...(force ? { force: true } : {}),
+    })));
+    // ── Build ───────────────────────────────────────────────────────────────────
+    server.tool("tenki_build_template", "Trigger a build for a template, producing a bootable image. Returns the created build — poll it with tenki_get_template_build until READY; the ready build's imageDigestRef is what tenki_create_sandbox's `image` arg takes.", {
+        template_id: z.string().describe("The template ID to build."),
+        image_name: z
+            .string()
+            .optional()
+            .describe("Name for the resulting image. Requires a TYPED template (created with builder_spec) — the API rejects it for legacy setup-script templates."),
+        publish_raw_image: z.boolean().optional().describe("Publish the raw rootfs image alongside the build snapshot."),
+        build_secrets: z.record(z.string(), z.string()).optional().describe("Build-time secrets as a key→value object (not persisted into the image)."),
+        build_env: z.record(z.string(), z.string()).optional().describe("Per-build environment overrides frozen into this build only."),
+    }, async ({ template_id, image_name, publish_raw_image, build_secrets, build_env }) => ok(await client.control("BuildTemplate", {
+        templateId: template_id,
+        ...(image_name !== undefined ? { imageName: image_name } : {}),
+        ...(publish_raw_image !== undefined ? { publishRawImage: publish_raw_image } : {}),
+        ...(build_secrets && Object.keys(build_secrets).length ? { buildSecrets: build_secrets } : {}),
+        ...(build_env && Object.keys(build_env).length ? { buildEnv: build_env } : {}),
+    })));
+    // ── Cancel build ──────────────────────────────────────────────────────────────
+    server.tool("tenki_cancel_template_build", "Cancel an in-progress template build by its build ID.", { build_id: z.string().describe("The template build ID to cancel.") }, async ({ build_id }) => ok(await client.control("CancelTemplateBuild", { buildId: build_id })));
+    // ── Get build ─────────────────────────────────────────────────────────────────
+    server.tool("tenki_get_template_build", "Retrieve one template build by its build ID (state, progress, and result image). A READY build's imageDigestRef is the reference tenki_create_sandbox's `image` arg takes.", { build_id: z.string().describe("The template build ID.") }, async ({ build_id }) => ok(await client.control("GetTemplateBuild", { buildId: build_id })));
+    // ── List active builds ──────────────────────────────────────────────────────────
+    server.tool("tenki_list_active_template_builds", "List the currently active (in-progress) builds for a given template.", { template_id: z.string().describe("The template ID whose active builds to list.") }, async ({ template_id }) => ok(await client.control("ListActiveTemplateBuilds", { templateId: template_id })));
+}

package/dist/tools/volumes.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Volume tools — workspace-scoped persistent block storage for Tenki sandboxes.
+ *
+ * Volumes are durable disks that outlive any single sandbox: create one in a
+ * workspace, then attach it into a running session at a mount path. All calls
+ * here are control-plane (tenki.sandbox.v1.SandboxService). Method names and
+ * request field shapes are ported from the live-verified n8n community node
+ * (github.com/opencolin/n8n-nodes-tenki) and its endpoint research:
+ *   CreateVolume · GetVolume · ListVolumes · UpdateVolume · DeleteVolume ·
+ *   ResizeVolume · AttachVolume · DetachVolume
+ *
+ * CreateVolumeRequest is flat: { workspaceId, name, sizeBytes (int64) }.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { TenkiClient } from "../client.js";
+export declare function registerVolumes(server: McpServer, client: TenkiClient): void;

package/dist/tools/volumes.js

@@ -0,0 +1,77 @@
+import { z } from "zod";
+import { ok, pathSchema, sessionIdSchema } from "./common.js";
+/** Volume size bounds the control plane accepts: 1 MiB … 100 GiB, in bytes. */
+const MIN_VOLUME_BYTES = 1_048_576; // 1 MiB
+const MAX_VOLUME_BYTES = 107_374_182_400; // 100 GiB
+/** Shared size-in-bytes schema for create + resize, range-checked before the call. */
+const sizeBytesSchema = z
+    .number()
+    .int()
+    .min(MIN_VOLUME_BYTES)
+    .max(MAX_VOLUME_BYTES)
+    .describe("Volume size in bytes. Must be between 1 MiB (1048576) and 100 GiB (107374182400).");
+export function registerVolumes(server, client) {
+    // ── Create ────────────────────────────────────────────────────────────────
+    server.tool("tenki_create_volume", "Create a workspace-scoped persistent volume — durable block storage that survives sandbox teardown. Defaults the workspace to the API key's first; override with workspace_id.", {
+        name: z.string().describe("Human-readable name for the volume."),
+        size_bytes: sizeBytesSchema,
+        workspace_id: z.string().optional().describe("Workspace to create the volume in (defaults to the key's first workspace)."),
+    }, async ({ name, size_bytes, workspace_id }) => {
+        const workspaceId = workspace_id ?? (await client.resolveOwner()).workspaceId;
+        return ok(await client.control("CreateVolume", {
+            ...(workspaceId ? { workspaceId } : {}),
+            name,
+            sizeBytes: size_bytes,
+        }));
+    });
+    // ── Get ───────────────────────────────────────────────────────────────────
+    server.tool("tenki_get_volume", "Fetch a single volume's metadata and current state by its id.", { volume_id: z.string().describe("The volume id, e.g. vol_….") }, async ({ volume_id }) => ok(await client.control("GetVolume", { volumeId: volume_id })));
+    // ── List ──────────────────────────────────────────────────────────────────
+    server.tool("tenki_list_volumes", "List persistent volumes in a workspace (defaults to the key's first workspace). Supports pagination.", {
+        workspace_id: z.string().optional().describe("Workspace to list volumes from (defaults to the key's first workspace)."),
+        page_size: z.number().int().positive().optional().describe("Max volumes to return per page."),
+        page_token: z.string().optional().describe("Page token from a previous response's nextPageToken."),
+    }, async ({ workspace_id, page_size, page_token }) => {
+        const owner = await client.resolveOwner();
+        const workspaceId = workspace_id ?? owner.workspaceId;
+        return ok(await client.control("ListVolumes", {
+            ...(workspaceId ? { workspaceId } : {}),
+            ...(page_size ? { pageSize: page_size } : {}),
+            ...(page_token ? { pageToken: page_token } : {}),
+        }));
+    });
+    // ── Update ────────────────────────────────────────────────────────────────
+    server.tool("tenki_update_volume", "Rename a volume (update its human-readable name). To change a volume's size use tenki_resize_volume instead.", {
+        volume_id: z.string().describe("The volume id to update."),
+        name: z.string().describe("New human-readable name for the volume."),
+    }, async ({ volume_id, name }) => ok(await client.control("UpdateVolume", { volumeId: volume_id, name })));
+    // ── Delete ────────────────────────────────────────────────────────────────
+    server.tool("tenki_delete_volume", "Permanently delete a volume and destroy its data. Fails with VolumeInUse if the volume is still attached to a session — detach it first.", { volume_id: z.string().describe("The volume id to delete.") }, async ({ volume_id }) => ok(await client.control("DeleteVolume", { volumeId: volume_id })));
+    // ── Resize ────────────────────────────────────────────────────────────────
+    server.tool("tenki_resize_volume", "Grow a volume to a new size in bytes (1 MiB … 100 GiB). Volumes can grow but not shrink.", {
+        volume_id: z.string().describe("The volume id to resize."),
+        size_bytes: sizeBytesSchema,
+    }, async ({ volume_id, size_bytes }) => ok(await client.control("ResizeVolume", { volumeId: volume_id, newSizeBytes: size_bytes })));
+    // ── Attach ────────────────────────────────────────────────────────────────
+    server.tool("tenki_attach_volume", "Mount a volume into a running sandbox at an absolute path. Set read_only to mount without write access.", {
+        session_id: sessionIdSchema.describe("The sandbox session to attach the volume to."),
+        volume_id: z.string().describe("The volume id to attach."),
+        mount_path: pathSchema.describe("Absolute path inside the sandbox to mount at, e.g. /mnt/data."),
+        read_only: z.boolean().optional().describe("Mount the volume read-only (default false = read-write)."),
+    }, async ({ session_id, volume_id, mount_path, read_only }) => ok(
+    // AttachVolumeRequest nests the target under a `volume` sub-message
+    // (live-verified: a flat volumeId is rejected "volume: value is required").
+    await client.control("AttachVolume", {
+        sessionId: session_id,
+        volume: {
+            volumeId: volume_id,
+            mountPath: mount_path,
+            ...(read_only !== undefined ? { readOnly: read_only } : {}),
+        },
+    })));
+    // ── Detach ────────────────────────────────────────────────────────────────
+    server.tool("tenki_detach_volume", "Unmount a volume from a sandbox session.", {
+        session_id: sessionIdSchema.describe("The sandbox session to detach the volume from."),
+        volume_id: z.string().describe("The volume id to detach."),
+    }, async ({ session_id, volume_id }) => ok(await client.control("DetachVolume", { sessionId: session_id, volumeId: volume_id })));
+}

package/dist/tools/workspace.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { TenkiClient } from "../client.js";
+/** Workspace-level sandbox usage + default settings (incl. snapshot retention). */
+export declare function registerWorkspace(server: McpServer, client: TenkiClient): void;

package/dist/tools/workspace.js

@@ -0,0 +1,129 @@
+import { z } from "zod";
+import { ok } from "./common.js";
+/**
+ * Resolve which workspace an op targets: honour an explicit id, else fall back
+ * to the API key's first workspace (via WhoAmI, inside resolveOwner). Mirrors
+ * the live-verified n8n node's `resolveWorkspaceId` helper.
+ */
+async function resolveWorkspaceId(client, provided) {
+    if (provided && provided.trim())
+        return provided.trim();
+    const owner = await client.resolveOwner();
+    return owner.workspaceId;
+}
+/** Workspace-level sandbox usage + default settings (incl. snapshot retention). */
+export function registerWorkspace(server, client) {
+    server.tool("tenki_get_workspace_usage", "Get per-second sandbox billing and usage figures for a workspace — use this for cost visibility across all of the workspace's sandboxes.", {
+        workspace_id: z
+            .string()
+            .optional()
+            .describe("Workspace to report on. Omit to use the API key's first workspace."),
+    }, async ({ workspace_id }) => {
+        const workspaceId = await resolveWorkspaceId(client, workspace_id);
+        return ok(await client.control("GetWorkspaceSandboxUsage", {
+            ...(workspaceId ? { workspaceId } : {}),
+        }));
+    });
+    server.tool("tenki_get_workspace_settings", "Read a workspace's sandbox quotas and retention policy: max snapshots/templates/volumes/total bytes, max concurrent and sticky sessions, max preview URLs, and the pause/snapshot retention periods. These are workspace limits — there are no per-session defaults (idle timeout and max duration are set per sandbox at creation).", {
+        workspace_id: z
+            .string()
+            .optional()
+            .describe("Workspace to read. Omit to use the API key's first workspace."),
+    }, async ({ workspace_id }) => {
+        const workspaceId = await resolveWorkspaceId(client, workspace_id);
+        return ok(await client.control("GetWorkspaceSandboxSettings", {
+            ...(workspaceId ? { workspaceId } : {}),
+        }));
+    });
+    server.tool("tenki_update_workspace_settings", "Update a workspace's sandbox quotas and retention periods. Only the fields you pass change. Each quota has a matching clear_* flag to remove the override and fall back to the platform default; pass the value OR its clear flag, not both. There are no per-session defaults here — idle timeout and max duration are set per sandbox at creation.", {
+        workspace_id: z
+            .string()
+            .optional()
+            .describe("Workspace to update. Omit to use the API key's first workspace."),
+        pause_retention_days: z
+            .number()
+            .int()
+            .positive()
+            .optional()
+            .describe("How long a paused sandbox's snapshot is kept before it becomes unresumable."),
+        clear_pause_retention: z.boolean().optional().describe("Remove the pause-retention override (use the platform default)."),
+        snapshot_retention_days: z
+            .number()
+            .int()
+            .positive()
+            .optional()
+            .describe("How long snapshots are kept before automatic cleanup."),
+        clear_snapshot_retention: z
+            .boolean()
+            .optional()
+            .describe("Remove the snapshot-retention override, i.e. keep snapshots indefinitely."),
+        max_snapshots: z.number().int().positive().optional().describe("Maximum snapshots in the workspace."),
+        max_templates: z.number().int().positive().optional().describe("Maximum templates in the workspace."),
+        max_volumes: z.number().int().positive().optional().describe("Maximum volumes in the workspace."),
+        max_total_bytes: z.number().int().positive().optional().describe("Maximum combined snapshot + volume storage in bytes."),
+        max_concurrent_sessions: z.number().int().positive().optional().describe("Maximum simultaneously active sandboxes."),
+        max_sticky_sessions: z.number().int().positive().optional().describe("Maximum sticky sandboxes."),
+        max_preview_urls: z.number().int().positive().optional().describe("Maximum preview URLs in the workspace."),
+    }, async (a) => {
+        const workspaceId = await resolveWorkspaceId(client, a.workspace_id);
+        const body = { ...(workspaceId ? { workspaceId } : {}) };
+        // Durations are protobuf Duration — JSON wants a seconds string ("2592000s").
+        if (a.pause_retention_days !== undefined)
+            body.pauseRetention = `${a.pause_retention_days * 86400}s`;
+        if (a.clear_pause_retention)
+            body.clearPauseRetention = true;
+        if (a.snapshot_retention_days !== undefined)
+            body.snapshotRetention = `${a.snapshot_retention_days * 86400}s`;
+        if (a.clear_snapshot_retention)
+            body.clearSnapshotRetention = true;
+        if (a.max_snapshots !== undefined)
+            body.maxSnapshots = a.max_snapshots;
+        if (a.max_templates !== undefined)
+            body.maxTemplates = a.max_templates;
+        if (a.max_volumes !== undefined)
+            body.maxVolumes = a.max_volumes;
+        // int64 on the wire — send as a string so large values survive JSON.
+        if (a.max_total_bytes !== undefined)
+            body.maxTotalBytes = String(a.max_total_bytes);
+        if (a.max_concurrent_sessions !== undefined)
+            body.maxConcurrentSessions = a.max_concurrent_sessions;
+        if (a.max_sticky_sessions !== undefined)
+            body.maxStickySessions = a.max_sticky_sessions;
+        // The per-project field is deprecated; the workspace alias is backed by the same quota.
+        if (a.max_preview_urls !== undefined)
+            body.maxPreviewUrlsPerWorkspace = a.max_preview_urls;
+        if (Object.keys(body).length <= 1) {
+            throw new Error("tenki_update_workspace_settings: pass at least one setting to change. Nothing was sent — the API would have returned the unchanged settings, which reads like a successful update.");
+        }
+        return ok(await client.control("UpdateWorkspaceSandboxSettings", body));
+    });
+    server.tool("tenki_get_snapshot_retention_settings", "Get the workspace's pause- and snapshot-retention periods. DEPRECATED upstream: this RPC is marked deprecated in the API — tenki_get_workspace_settings returns the same retention fields alongside the quotas. An empty response means no retention override, i.e. kept indefinitely.", { workspace_id: z.string().optional().describe("Workspace (defaults to the key's first workspace).") }, async ({ workspace_id }) => {
+        const workspaceId = workspace_id ?? (await client.resolveOwner()).workspaceId;
+        return ok(await client.control("GetWorkspaceSnapshotRetentionSettings", { ...(workspaceId ? { workspaceId } : {}) }));
+    });
+    server.tool("tenki_update_snapshot_retention_settings", "Update the workspace's snapshot-retention policy: how long snapshots are kept before automatic cleanup. Pass retention_days to set it, or clear_retention to keep snapshots indefinitely (the unset state) — exactly one of the two. DEPRECATED upstream: prefer tenki_update_workspace_settings, which sets the same retention (and pause retention) alongside the quotas.", {
+        retention_days: z
+            .number()
+            .int()
+            .positive()
+            .optional()
+            .describe("Days to retain snapshots before automatic cleanup. Omit and pass clear_retention to keep them indefinitely."),
+        clear_retention: z
+            .boolean()
+            .optional()
+            .describe("Remove the retention period so snapshots are kept indefinitely. Mutually exclusive with retention_days."),
+        workspace_id: z.string().optional().describe("Workspace (defaults to the key's first workspace)."),
+    }, async ({ retention_days, clear_retention, workspace_id }) => {
+        if ((retention_days === undefined) === (clear_retention !== true)) {
+            throw new Error("tenki_update_snapshot_retention_settings: pass exactly one of retention_days (to set a period) or clear_retention: true (to keep snapshots indefinitely).");
+        }
+        const workspaceId = workspace_id ?? (await client.resolveOwner()).workspaceId;
+        return ok(await client.control("UpdateWorkspaceSnapshotRetentionSettings", {
+            ...(workspaceId ? { workspaceId } : {}),
+            // protobuf Duration on the wire, with a companion clear flag —
+            // there is no `retentionDays` field (sending one is silently dropped).
+            ...(retention_days !== undefined ? { snapshotRetention: `${retention_days * 86400}s` } : {}),
+            ...(clear_retention ? { clearSnapshotRetention: true } : {}),
+        }));
+    });
+}

package/package.json

@@ -1,6 +1,61 @@
 {
   "name": "@luxorai/mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.1",
+  "mcpName": "io.github.LuxorLabs/tenki-mcp",
+  "description": "Model Context Protocol server for Tenki Cloud — disposable microVM sandboxes for AI agents. Create sandboxes, run code, read/write files, run git, expose preview URLs — from any MCP client.",
+  "type": "module",
+  "bin": {
+    "tenki-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "SECURITY.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsc --watch",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run build",
+    "pretest": "npm run build",
+    "test": "node test/offline.test.mjs && node test/public-shapes.test.mjs && node test/exec-output.test.mjs && node test/http-input.test.mjs && node test/oauth-http.test.mjs && node test/security.test.mjs && node test/client-net.test.mjs",
+    "test:all": "npm run build && node test/run.mjs",
+    "test:offline": "npm run build && node test/offline.test.mjs"
+  },
+  "keywords": [
+    "tenki",
+    "mcp",
+    "model-context-protocol",
+    "sandbox",
+    "microvm",
+    "ai-agents",
+    "code-execution"
+  ],
+  "license": "MIT",
+  "author": "Tenki Cloud (https://tenki.cloud)",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/node": "^26.2.0",
+    "typescript": "^7.0.2"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/LuxorLabs/tenki-mcp.git"
+  },
+  "homepage": "https://github.com/LuxorLabs/tenki-mcp#readme",
+  "bugs": {
+    "url": "https://github.com/LuxorLabs/tenki-mcp/issues"
+  }
+}