@mgsoftwarebv/mg-dashboard-mcp 7.0.8 → 7.0.10

package/dist/index.js

@@ -21,8 +21,7 @@ import { once } from 'events';
 import { lookup } from 'dns/promises';
 import { connect } from 'tls';
 import { pgTable, timestamp, jsonb, uuid, boolean, text, pgEnum, integer, uniqueIndex, index, bigint } from 'drizzle-orm/pg-core';
-import { tasks } from '@trigger.dev/sdk/v3';
-import { HeadObjectCommand, S3Client, ListObjectsV2Command, DeleteObjectsCommand, DeleteObjectCommand, CreateMultipartUploadCommand, UploadPartCommand, CompleteMultipartUploadCommand, AbortMultipartUploadCommand, PutObjectCommand, GetObjectCommand, CopyObjectCommand } from '@aws-sdk/client-s3';
+import { HeadObjectCommand, ListObjectsV2Command, DeleteObjectsCommand, S3Client, DeleteObjectCommand, CreateMultipartUploadCommand, UploadPartCommand, CompleteMultipartUploadCommand, AbortMultipartUploadCommand, PutObjectCommand, GetObjectCommand, CopyObjectCommand } from '@aws-sdk/client-s3';
 
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -684,10 +683,10 @@ var TRIGGER_TOOL_MODULE_MAP = {
   "trigger-run": "ci_cd"
 };
 async function discoverInstance(projectSlug, conn, proxy, sshExec2) {
-  const sql29 = `SELECT re.\\"apiKey\\" FROM \\"RuntimeEnvironment\\" re JOIN \\"Project\\" p ON re.\\"projectId\\" = p.id WHERE p.slug='${projectSlug}' AND re.slug='prod' LIMIT 1`;
+  const sql23 = `SELECT re.\\"apiKey\\" FROM \\"RuntimeEnvironment\\" re JOIN \\"Project\\" p ON re.\\"projectId\\" = p.id WHERE p.slug='${projectSlug}' AND re.slug='prod' LIMIT 1`;
   const cmd = [
     `PORT=$(docker port "${WA_CONTAINER}" 3000/tcp 2>/dev/null | head -1 | sed 's/.*://')`,
-    `KEY=$(docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql29}" 2>/dev/null | tr -d '[:space:]')`,
+    `KEY=$(docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql23}" 2>/dev/null | tr -d '[:space:]')`,
     'echo "$PORT|$KEY"'
   ].join(" && ");
   const result = await sshExec2(conn, cmd, proxy);
@@ -708,8 +707,8 @@ async function discoverInstance(projectSlug, conn, proxy, sshExec2) {
   return { port, apiKey: apiKey2 };
 }
 async function fetchRunLogs(runId, conn, proxy, sshExec2) {
-  const sql29 = `SELECT level, message, \\"isError\\", \\"createdAt\\" FROM \\"TaskEvent\\" WHERE \\"runId\\" = '${runId}' AND level IN ('INFO','WARN','ERROR','DEBUG','LOG','TRACE') ORDER BY \\"startTime\\" ASC LIMIT 200`;
-  const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql29}" 2>/dev/null`;
+  const sql23 = `SELECT level, message, \\"isError\\", \\"createdAt\\" FROM \\"TaskEvent\\" WHERE \\"runId\\" = '${runId}' AND level IN ('INFO','WARN','ERROR','DEBUG','LOG','TRACE') ORDER BY \\"startTime\\" ASC LIMIT 200`;
+  const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql23}" 2>/dev/null`;
   const result = await sshExec2(conn, cmd, proxy);
   const output = result.stdout.trim();
   if (!output) return "";
@@ -791,8 +790,8 @@ async function handleTriggerTool(name, args2, deps) {
   switch (name) {
     // -----------------------------------------------------------------
     case "trigger-list": {
-      const sql29 = 'SELECT slug, name FROM \\"Project\\" ORDER BY name';
-      const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql29}" 2>/dev/null`;
+      const sql23 = 'SELECT slug, name FROM \\"Project\\" ORDER BY name';
+      const cmd = `docker exec "${PG_CONTAINER}" psql -U postgres -d main -t -A -c "${sql23}" 2>/dev/null`;
       const result = await sshExec2(conn, cmd, proxy);
       const output = result.stdout.trim();
       if (!output) {
@@ -5746,563 +5745,7 @@ pgTable(
     index("github_webhook_secret_owner_idx").on(table.owner)
   ]
 );
-function assertPipelinePayload(payload) {
-  if (!payload.stepIds?.length) {
-    throw new Error("Cannot trigger execute-pipeline: stepIds is empty");
-  }
-}
-async function triggerPipeline(payload) {
-  assertPipelinePayload(payload);
-  return tasks.trigger(
-    "execute-pipeline",
-    payload
-  );
-}
-
-// ../jobs/src/github-changed-files.ts
 var GITHUB_API = "https://api.github.com";
-async function fetchCompareChangedPaths(repoFullName, baseSha, headSha, token) {
-  if (baseSha === headSha) return [];
-  const res = await fetch(
-    `${GITHUB_API}/repos/${repoFullName}/compare/${baseSha}...${headSha}`,
-    {
-      headers: {
-        Accept: "application/vnd.github.v3+json",
-        Authorization: `Bearer ${token}`
-      }
-    }
-  );
-  if (!res.ok) {
-    const body = await res.text().catch(() => "");
-    throw new Error(
-      `GitHub compare ${baseSha.slice(0, 8)}...${headSha.slice(0, 8)} failed (${res.status}): ${body.slice(0, 200)}`
-    );
-  }
-  const detail = await res.json();
-  return (detail.files ?? []).map((file) => file.filename).filter((name) => Boolean(name));
-}
-function globToRegex(pattern) {
-  const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "{{GLOBSTAR}}").replace(/\*/g, "[^/]*").replace(/{{GLOBSTAR}}/g, ".*");
-  return new RegExp(`^${escaped}$`);
-}
-function matchesPathPatterns(changedPaths, patterns) {
-  if (patterns.length === 0) return false;
-  const regexes = patterns.map(globToRegex);
-  return changedPaths.some((path) => regexes.some((regex) => regex.test(path)));
-}
-function parseScriptIdList(value) {
-  if (!Array.isArray(value)) return [];
-  return value.filter((item) => typeof item === "string");
-}
-async function fetchDeployRetryScripts(stageId) {
-  const rows = await getDb().execute(
-    sql`SELECT deploy_retry_scripts FROM release_profile_stage WHERE id = ${stageId} LIMIT 1`
-  );
-  return parseScriptIdList(rows[0]?.deploy_retry_scripts);
-}
-async function fetchLastSuccessfulScriptDeploySha(stageId, scriptId) {
-  const rows = await getDb().execute(
-    sql`SELECT r.trigger_sha
-        FROM release_step rs
-        JOIN release r ON r.id = rs.release_id
-        WHERE r.release_profile_stage_id = ${stageId}
-          AND rs.step_type = 'run_ssh_script'
-          AND rs.step_config->>'scriptId' = ${scriptId}
-          AND rs.status = 'success'
-          AND r.trigger_sha IS NOT NULL
-        ORDER BY rs.finished_at DESC NULLS LAST
-        LIMIT 1`
-  );
-  return rows[0]?.trigger_sha ?? null;
-}
-
-// ../jobs/src/release-pipeline-config.ts
-function shouldRunSshScript(script, context) {
-  if (script.always) return true;
-  if (!script.paths?.length) return false;
-  if (context.runAllConditional) return true;
-  if (context.latchedScriptIds?.includes(script.id)) return true;
-  const comparePaths = context.compareChangedPathsByScriptId?.[script.id];
-  if (comparePaths === null) return true;
-  if (comparePaths !== void 0) {
-    if (!comparePaths.length) return false;
-    return matchesPathPatterns(comparePaths, script.paths);
-  }
-  if (!context.changedPaths?.length) return false;
-  return matchesPathPatterns(context.changedPaths, script.paths);
-}
-function buildSkipReason(script) {
-  const patterns = script.paths?.join(", ") ?? "configured paths";
-  return `Skipped: no matching file changes (${patterns})`;
-}
-function parseReleasePipelineConfig(value) {
-  if (!value || typeof value !== "object") return null;
-  const config = value;
-  const hasSshScripts = Array.isArray(config.sshScripts) && config.sshScripts.length > 0;
-  const hasMigration = config.migration != null && typeof config.migration === "object";
-  const hasNpmPublish = Array.isArray(config.npmPublish) && config.npmPublish.length > 0;
-  if (!hasSshScripts && !hasMigration && !hasNpmPublish) return null;
-  return config;
-}
-function injectSshScriptSteps(baseSteps, config, context = {}) {
-  const scripts = config?.sshScripts;
-  if (!scripts?.length) return baseSteps;
-  const result = [];
-  for (const step of baseSteps) {
-    result.push(step);
-    for (const script of scripts) {
-      if (script.after !== step.type) continue;
-      const run = shouldRunSshScript(script, context);
-      result.push({
-        type: "run_ssh_script",
-        label: script.label,
-        stepConfig: {
-          scriptId: script.id,
-          script: script.script
-        },
-        initialStatus: run ? "pending" : "skipped",
-        skipReason: run ? void 0 : buildSkipReason(script)
-      });
-    }
-  }
-  return result;
-}
-function parseDeployRetryScripts(value) {
-  if (!Array.isArray(value)) return [];
-  return value.filter((item) => typeof item === "string");
-}
-async function resolveBuildStepListOptions(args2) {
-  const options = {};
-  const pipelineConfig = parseReleasePipelineConfig(
-    args2.profile.release_pipeline_config
-  );
-  if (!pipelineConfig?.sshScripts?.length) {
-    return options;
-  }
-  const latchedFromStage = args2.stageId ? await fetchDeployRetryScripts(args2.stageId) : parseDeployRetryScripts(args2.deployRetryScripts);
-  options.latchedScriptIds = latchedFromStage;
-  if (args2.isManual) {
-    options.runAllConditional = true;
-    return options;
-  }
-  if (!args2.triggerSha || !args2.profile.repo_full_name || !args2.githubToken) {
-    return options;
-  }
-  const compareChangedPathsByScriptId = {};
-  const conditionalScripts = pipelineConfig.sshScripts.filter(
-    (script) => !script.always && script.paths?.length
-  );
-  await Promise.all(
-    conditionalScripts.map(async (script) => {
-      if (latchedFromStage.includes(script.id)) return;
-      const stageId = args2.stageId;
-      const lastSuccessSha = stageId != null ? await fetchLastSuccessfulScriptDeploySha(stageId, script.id) : null;
-      if (!lastSuccessSha) {
-        compareChangedPathsByScriptId[script.id] = null;
-        return;
-      }
-      try {
-        compareChangedPathsByScriptId[script.id] = await fetchCompareChangedPaths(
-          args2.profile.repo_full_name,
-          lastSuccessSha,
-          args2.triggerSha,
-          args2.githubToken
-        );
-      } catch (err) {
-        console.warn(
-          `[release] compare failed for script ${script.id} (${args2.profile.repo_full_name}@${args2.triggerSha?.slice(0, 8)}):`,
-          err
-        );
-        compareChangedPathsByScriptId[script.id] = [];
-      }
-    })
-  );
-  options.compareChangedPathsByScriptId = compareChangedPathsByScriptId;
-  return options;
-}
-
-// ../jobs/src/pm2-deploy-script.ts
-var MG_DASHBOARD_REPO = "MGSoftwareBV/mg-dashboard";
-var MG_BOILER_REPO = "MGSoftwareBV/mg-boiler";
-function isBoilerPm2Build(buildFilters) {
-  return buildFilters.includes("@mgboiler/");
-}
-function shouldRunConventionTests(profile, ctx) {
-  const repo = profile.repo_full_name;
-  if (repo === MG_DASHBOARD_REPO || repo === MG_BOILER_REPO) return true;
-  return isBoilerPm2Build(ctx.buildFilters);
-}
-function npmPublishWatchPaths(config) {
-  if (config.paths?.length) return config.paths;
-  const dir = config.path.replace(/\/+$/, "");
-  return [`${dir}/**`];
-}
-
-// ../jobs/src/build-step-list.ts
-function buildStepList(stage, profile, options) {
-  const steps = [];
-  const dockerApps = (stage.stage_apps ?? []).filter(
-    (a) => a.enabled && a.deployMethod === "docker"
-  );
-  for (const _app of dockerApps) {
-    steps.push({ type: "deploy", label: "Deploy (Docker)" });
-  }
-  const pm2Apps = (stage.stage_apps ?? []).filter(
-    (a) => a.enabled && a.deployMethod === "pm2"
-  );
-  const pm2Servers = new Set(
-    pm2Apps.map((a) => a.deploymentServerId).filter(Boolean)
-  );
-  const boilerFilters = pm2Apps.map((a) => a.path ?? "").map((p) => p.match(/apps\/(backoffice|portal|web)/)?.[0]).filter((m) => Boolean(m)).map((m) => `--filter=@mgboiler/${m.replace("apps/", "")}`).join(" ");
-  const runConventions = profile?.repo_full_name != null && shouldRunConventionTests(
-    { repo_full_name: profile.repo_full_name },
-    { buildFilters: boilerFilters }
-  );
-  if (runConventions) {
-    for (const _server of pm2Servers) {
-      steps.push({ type: "run_conventions", label: "Convention tests" });
-    }
-  }
-  for (const _server of pm2Servers) {
-    steps.push({ type: "build_pm2", label: "Build (PM2)" });
-  }
-  if (stage.migrate_db) {
-    steps.push({ type: "migrate_db", label: "Apply Migrations" });
-  }
-  if (profile?.has_trigger_dev) {
-    steps.push({ type: "deploy_trigger_jobs" });
-  }
-  for (const _server of pm2Servers) {
-    steps.push({ type: "reload_pm2", label: "Reload PM2" });
-  }
-  const pipelineConfig = parseReleasePipelineConfig(
-    profile?.release_pipeline_config
-  );
-  for (const pkg of pipelineConfig?.npmPublish ?? []) {
-    if (!pkg.id || !pkg.path) continue;
-    steps.push({
-      type: "publish_npm",
-      label: pkg.label ?? `Publish npm (${pkg.path})`,
-      stepConfig: {
-        packageId: pkg.id,
-        packagePath: pkg.path,
-        watchPaths: npmPublishWatchPaths(pkg),
-        tokenEnvVar: pkg.tokenEnvVar
-      }
-    });
-  }
-  const withScripts = injectSshScriptSteps(steps, pipelineConfig, {
-    changedPaths: options?.changedPaths,
-    runAllConditional: options?.runAllConditional,
-    latchedScriptIds: options?.latchedScriptIds,
-    compareChangedPathsByScriptId: options?.compareChangedPathsByScriptId
-  });
-  if (stage.stage === "prod") {
-    withScripts.push({
-      type: "update_release_branch",
-      label: "Fast-forward main"
-    });
-  }
-  return withScripts;
-}
-async function insertReleaseSteps(releaseId, steps) {
-  const db2 = getDb();
-  const stepIds = [];
-  for (let i = 0; i < steps.length; i++) {
-    const step = steps[i];
-    const status = step.initialStatus ?? "pending";
-    const logs = status === "skipped" && step.skipReason ? step.skipReason : null;
-    const stepConfigJson = step.stepConfig ? JSON.stringify(step.stepConfig) : null;
-    const stepRows = await db2.execute(
-      stepConfigJson ? sql`INSERT INTO release_step (
-                release_id, step_type, step_order, status, step_label, step_config, logs
-              ) VALUES (
-                ${releaseId}, ${step.type}, ${i + 1}, ${status}, ${step.label ?? null},
-                ${stepConfigJson}::jsonb, ${logs}
-              )
-              RETURNING id` : sql`INSERT INTO release_step (
-                release_id, step_type, step_order, status, step_label, logs
-              ) VALUES (
-                ${releaseId}, ${step.type}, ${i + 1}, ${status}, ${step.label ?? null}, ${logs}
-              )
-              RETURNING id`
-    );
-    const id = stepRows[0]?.id;
-    if (id) stepIds.push(id);
-  }
-  return stepIds;
-}
-var ACTIVE_STATUSES = [
-  "pending",
-  "pending_approval",
-  "reviewing",
-  "running"
-];
-async function cancelReleaseRow(releaseId, reason, allowedStatuses) {
-  const db2 = getDb();
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const releaseResult = await db2.execute(sql`
-    UPDATE release
-    SET status = 'cancelled',
-        finished_at = ${now},
-        error_message = ${reason},
-        updated_at = ${now}
-    WHERE id = ${releaseId}
-      AND status IN ${allowedStatuses}
-    RETURNING id
-  `);
-  if (releaseResult.length === 0) return false;
-  await db2.execute(sql`
-    UPDATE release_step
-    SET status = 'skipped'
-    WHERE release_id = ${releaseId}
-      AND status = 'pending'
-  `);
-  return true;
-}
-async function cancelActiveReleasesForStage(stageId, reason) {
-  const db2 = getDb();
-  const active = await db2.execute(sql`
-    SELECT id FROM release
-    WHERE release_profile_stage_id = ${stageId}
-      AND status IN ${ACTIVE_STATUSES}
-  `);
-  const cancelled = [];
-  for (const row of active) {
-    if (await cancelReleaseRow(row.id, reason, ACTIVE_STATUSES)) {
-      cancelled.push(row.id);
-    }
-  }
-  return cancelled;
-}
-function isPostgresUniqueViolation(err) {
-  return typeof err === "object" && err !== null && "code" in err && err.code === "23505";
-}
-async function resolveUserDisplayName(userId) {
-  const rows = await getDb().execute(sql`
-    SELECT full_name, email
-    FROM "user"
-    WHERE id = ${userId}
-    LIMIT 1
-  `);
-  const user = rows[0];
-  if (!user) return null;
-  const fullName = user.full_name?.trim();
-  return fullName || user.email || null;
-}
-
-// ../jobs/src/create-release-for-stage.ts
-var GITHUB_API2 = "https://api.github.com";
-var CreateReleaseError = class extends Error {
-  constructor(message, code = "INTERNAL_SERVER_ERROR") {
-    super(message);
-    this.code = code;
-    this.name = "CreateReleaseError";
-  }
-};
-async function resolveBranchHeadSha(repoFullName, branch, token) {
-  const headers = {
-    Accept: "application/vnd.github.v3+json",
-    Authorization: `Bearer ${token}`
-  };
-  const refRes = await fetch(
-    `${GITHUB_API2}/repos/${repoFullName}/git/ref/heads/${branch}`,
-    { headers }
-  );
-  if (!refRes.ok) {
-    throw new CreateReleaseError(
-      `Could not find branch ${branch} to deploy from`,
-      "BAD_REQUEST"
-    );
-  }
-  const refData = await refRes.json();
-  const sha = refData.object?.sha;
-  if (!sha) {
-    throw new CreateReleaseError(
-      `Could not determine SHA for branch ${branch}`,
-      "INTERNAL_SERVER_ERROR"
-    );
-  }
-  return sha;
-}
-async function createReleaseForStage(userId, params) {
-  const triggerType = params.triggerType ?? "manual";
-  const db2 = getDb();
-  const stageRows = await db2.execute(
-    sql`SELECT * FROM release_profile_stage WHERE id = ${params.stageId} LIMIT 1`
-  );
-  const stage = stageRows[0];
-  if (!stage) {
-    throw new CreateReleaseError("Stage not found", "NOT_FOUND");
-  }
-  const profileRows = await db2.execute(
-    sql`SELECT * FROM release_profile WHERE id = ${stage.release_profile_id} LIMIT 1`
-  );
-  const profile = profileRows[0];
-  if (!profile) {
-    throw new CreateReleaseError("Release profile not found", "NOT_FOUND");
-  }
-  if (!profile.enabled || !stage.enabled) {
-    throw new CreateReleaseError(
-      "Profile or stage is disabled",
-      "BAD_REQUEST"
-    );
-  }
-  const deployBranch = stage.trigger_branch?.trim() || stage.release_branch?.trim() || null;
-  if (!deployBranch) {
-    throw new CreateReleaseError(
-      "Stage has no release or trigger branch configured",
-      "BAD_REQUEST"
-    );
-  }
-  const { token } = await resolveReleaseGitHubToken(
-    profile.github_token_id ?? null
-  );
-  if (!token) {
-    throw new CreateReleaseError(
-      "GitHub token is not configured",
-      "PRECONDITION_FAILED"
-    );
-  }
-  const triggerSha = await resolveBranchHeadSha(
-    profile.repo_full_name,
-    deployBranch,
-    token
-  );
-  if (params.skipIfActiveSameSha) {
-    const existing = await db2.execute(sql`
-      SELECT
-        r.id,
-        r.status,
-        r.version,
-        r.trigger_author_name,
-        COUNT(rs.id)::int AS steps_count
-      FROM release r
-      LEFT JOIN release_step rs ON rs.release_id = r.id
-      WHERE r.release_profile_stage_id = ${params.stageId}
-        AND r.trigger_sha = ${triggerSha}
-        AND r.status IN ('pending', 'pending_approval', 'running', 'reviewing', 'success')
-      GROUP BY r.id
-      ORDER BY r.created_at DESC
-      LIMIT 1
-    `);
-    if (existing[0]) {
-      return {
-        id: existing[0].id,
-        status: existing[0].status ?? "running",
-        version: existing[0].version ?? null,
-        stepsCount: Number(existing[0].steps_count ?? 0),
-        authorName: existing[0].trigger_author_name ?? null
-      };
-    }
-  }
-  await cancelActiveReleasesForStage(
-    params.stageId,
-    "Superseded by newer manual trigger"
-  );
-  let triggerAuthorName = params.triggerAuthorName?.trim() || null;
-  if (!triggerAuthorName && userId) {
-    triggerAuthorName = await resolveUserDisplayName(userId);
-  }
-  const enabledSteps = buildStepList(
-    stage,
-    profile,
-    await resolveBuildStepListOptions({
-      profile,
-      triggerSha,
-      githubToken: token,
-      isManual: triggerType === "manual" || triggerType === "mcp",
-      stageId: params.stageId,
-      deployRetryScripts: stage.deploy_retry_scripts
-    })
-  );
-  if (enabledSteps.length === 0) {
-    throw new CreateReleaseError(
-      "No pipeline steps configured for this stage (enable a PM2/Docker stage_app or deployment_project_server)",
-      "PRECONDITION_FAILED"
-    );
-  }
-  const initialStatus = "running";
-  let release;
-  try {
-    const inserted = await db2.execute(sql`
-      INSERT INTO release (
-        release_profile_id, release_profile_stage_id, status, started_at,
-        version, version_type, trigger_type, skip_pr_flow, created_by,
-        trigger_kind, trigger_branch, trigger_sha, source_commit,
-        trigger_author_name
-      ) VALUES (
-        ${profile.id}, ${params.stageId}, ${initialStatus}, ${(/* @__PURE__ */ new Date()).toISOString()},
-        NULL, ${params.versionType}, ${triggerType}, ${params.skipPrFlow}, ${userId},
-        'branch', ${deployBranch}, ${triggerSha}, ${triggerSha},
-        ${triggerAuthorName}
-      )
-      RETURNING *
-    `);
-    if (!inserted[0]) {
-      throw new Error("INSERT did not return a row");
-    }
-    release = inserted[0];
-  } catch (err) {
-    if (isPostgresUniqueViolation(err)) {
-      throw new CreateReleaseError(
-        "A release is already running for this stage.",
-        "CONFLICT"
-      );
-    }
-    throw new CreateReleaseError(
-      `Failed to create release: ${err instanceof Error ? err.message : String(err)}`,
-      "INTERNAL_SERVER_ERROR"
-    );
-  }
-  const stepIds = [];
-  try {
-    stepIds.push(...await insertReleaseSteps(release.id, enabledSteps));
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    await db2.execute(sql`
-      UPDATE release
-      SET status = 'failed',
-          error_message = ${`Failed to create steps: ${msg}`},
-          finished_at = ${(/* @__PURE__ */ new Date()).toISOString()}
-      WHERE id = ${release.id}
-    `);
-    throw new CreateReleaseError(
-      `Failed to create release steps: ${msg}`,
-      "INTERNAL_SERVER_ERROR"
-    );
-  }
-  try {
-    await triggerPipeline({
-      releaseId: release.id,
-      profileId: profile.id,
-      stageId: stage.id,
-      stepIds,
-      version: null
-    });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    await db2.execute(sql`
-      UPDATE release
-      SET status = 'failed',
-          error_message = ${`Failed to start pipeline: ${msg}`},
-          finished_at = ${(/* @__PURE__ */ new Date()).toISOString()}
-      WHERE id = ${release.id}
-    `);
-    throw new CreateReleaseError(
-      `Failed to start pipeline: ${msg}`,
-      "INTERNAL_SERVER_ERROR"
-    );
-  }
-  return {
-    id: release.id,
-    status: initialStatus,
-    version: null,
-    stepsCount: enabledSteps.length,
-    authorName: triggerAuthorName
-  };
-}
-var GITHUB_API3 = "https://api.github.com";
 var ReleaseProfileQuickCreateError = class extends Error {
   constructor(message, code = "INTERNAL_SERVER_ERROR") {
     super(message);
@@ -6330,7 +5773,7 @@ async function scanRepoForApps(repoFullName, githubToken2, ref = "main") {
   };
   async function fetchContents(path) {
     const res = await fetch(
-      `${GITHUB_API3}/repos/${repoFullName}/contents/${path}?ref=${ref}`,
+      `${GITHUB_API}/repos/${repoFullName}/contents/${path}?ref=${ref}`,
       { headers }
     );
     if (!res.ok) return null;
@@ -6339,7 +5782,7 @@ async function scanRepoForApps(repoFullName, githubToken2, ref = "main") {
   }
   async function fileExists(path) {
     const res = await fetch(
-      `${GITHUB_API3}/repos/${repoFullName}/contents/${path}?ref=${ref}`,
+      `${GITHUB_API}/repos/${repoFullName}/contents/${path}?ref=${ref}`,
       { headers, method: "HEAD" }
     );
     return res.ok;
@@ -6478,20 +5921,20 @@ async function ensureGitHubBranchExists(repoFullName, branchName, fromBranch, gi
     "Content-Type": "application/json"
   };
   const checkRes = await fetch(
-    `${GITHUB_API3}/repos/${repoFullName}/git/ref/heads/${branchName}`,
+    `${GITHUB_API}/repos/${repoFullName}/git/ref/heads/${branchName}`,
     { headers }
   );
   if (checkRes.ok) return;
   let sha;
   const sourceRes = await fetch(
-    `${GITHUB_API3}/repos/${repoFullName}/git/ref/heads/${fromBranch}`,
+    `${GITHUB_API}/repos/${repoFullName}/git/ref/heads/${fromBranch}`,
     { headers }
   );
   if (sourceRes.ok) {
     const data = await sourceRes.json();
     sha = data.object?.sha;
   } else {
-    const repoRes = await fetch(`${GITHUB_API3}/repos/${repoFullName}`, {
+    const repoRes = await fetch(`${GITHUB_API}/repos/${repoFullName}`, {
       headers
     });
     if (!repoRes.ok) {
@@ -6500,7 +5943,7 @@ async function ensureGitHubBranchExists(repoFullName, branchName, fromBranch, gi
     const repo = await repoRes.json();
     const defaultBranch = repo.default_branch ?? "main";
     const defaultRes = await fetch(
-      `${GITHUB_API3}/repos/${repoFullName}/git/ref/heads/${defaultBranch}`,
+      `${GITHUB_API}/repos/${repoFullName}/git/ref/heads/${defaultBranch}`,
       { headers }
     );
     if (!defaultRes.ok) {
@@ -6513,7 +5956,7 @@ async function ensureGitHubBranchExists(repoFullName, branchName, fromBranch, gi
     throw new Error(`Could not determine SHA to create branch ${branchName}`);
   }
   const createRes = await fetch(
-    `${GITHUB_API3}/repos/${repoFullName}/git/refs`,
+    `${GITHUB_API}/repos/${repoFullName}/git/refs`,
     {
       method: "POST",
       headers,
@@ -6759,6 +6202,7 @@ var apiKey = getArg2("api-key") || process.env.MG_DASHBOARD_API_KEY;
 var sshKeyPath = getArg2("ssh-key") || process.env.MG_DASHBOARD_SSH_KEY;
 var databaseUrl = getArg2("database-url") || process.env.DATABASE_PRIMARY_POOLER_URL || process.env.DATABASE_PRIMARY_URL;
 var encryptionKey = getArg2("encryption-key") || process.env.ENCRYPTION_KEY;
+var dashboardBaseUrl = (getArg2("dashboard-url") || process.env.MG_DASHBOARD_BASE_URL || "https://dashboard.mgsoftware.nl").replace(/\/$/, "");
 var mijnhostApiKey = getArg2("mijnhost-api-key") || process.env.MIJNHOST_API_KEY;
 function isMijnhostViaSshProxyEnabled() {
   const arg = getArg2("mijnhost-via-ssh-proxy");
@@ -6975,7 +6419,6 @@ var TOOL_MODULE_MAP = {
   "docker-logs": "ssh_servers",
   "docker-exec": "ssh_servers",
   "docker-compose": "ssh_servers",
-  "wait-for": "ssh_servers",
   "db-discover": "ssh_servers",
   "db-tables": "ssh_servers",
   "db-query": "ssh_servers",
@@ -6985,10 +6428,8 @@ var TOOL_MODULE_MAP = {
   "env-list": "ci_cd",
   "env-get": "ci_cd",
   "env-store": "ci_cd",
-  "release-trigger": "ci_cd",
   "release-profile-list": "ci_cd",
-  "release-profile-create": "ci_cd",
-  "release-profile-update": "ci_cd",
+  "release-profile": "ci_cd",
   "domain-list": "domains",
   "dns-list": "domains",
   "dns-record": "domains",
@@ -9550,11 +8991,11 @@ CREATE TABLE IF NOT EXISTS _mcp_migrations (
   applied_by  TEXT
 );
 `.trim();
-function normaliseMigrationSql(sql29) {
-  return sql29.replace(/\r\n/g, "\n").trim() + "\n";
+function normaliseMigrationSql(sql23) {
+  return sql23.replace(/\r\n/g, "\n").trim() + "\n";
 }
-function migrationSha256(sql29) {
-  return createHash("sha256").update(normaliseMigrationSql(sql29), "utf8").digest("hex");
+function migrationSha256(sql23) {
+  return createHash("sha256").update(normaliseMigrationSql(sql23), "utf8").digest("hex");
 }
 function dollarQuoteTag(value) {
   let tag = "_mcp";
@@ -10294,48 +9735,6 @@ var TOOLS = [
       required: ["serverId", "projectPath", "action"]
     }
   },
-  {
-    name: "wait-for",
-    description: 'Poll until a condition holds (or timeout). Replaces 30+ ad-hoc loops the LLM would otherwise build itself. Four condition types:\n- `url`: `target: "https://..."`, `until: 200` (HTTP status, default 200). 10s per probe.\n- `container-health`: `serverId`, `target: "container-name"`, `until: "healthy" | "running" | "exited"` (default "healthy"). Uses `docker inspect`.\n- `file-exists`: `serverId`, `target: "/path/to/file"` \u2014 SSH stat check.\n- `sftp-exists`: same as file-exists but with `bucket: "name"` instead of serverId for R2.\n\nReturns a per-attempt trail so you can see how long it took to converge.',
-    inputSchema: {
-      type: "object",
-      properties: {
-        type: {
-          type: "string",
-          enum: ["url", "container-health", "file-exists", "sftp-exists"],
-          description: "Condition type to wait on."
-        },
-        target: {
-          type: "string",
-          description: "Target identifier: URL, container name, file path, or R2 key (depends on type)."
-        },
-        until: {
-          description: 'Expected end-state (depends on type): for url an HTTP status (default 200), for container-health a state string (default "healthy"). Omit for file-exists/sftp-exists.'
-        },
-        serverId: {
-          type: "string",
-          description: "SSH server UUID (required for container-health and file-exists)."
-        },
-        bucket: {
-          type: "string",
-          description: "R2 bucket name (used with sftp-exists when checking an R2 object)."
-        },
-        path: {
-          type: "string",
-          description: "Alias for `target` for file-exists/sftp-exists."
-        },
-        intervalSeconds: {
-          type: "number",
-          description: "Poll interval in seconds (default 3, max 60)."
-        },
-        timeout: {
-          type: "number",
-          description: "Total deadline in seconds (default 120, max 1800)."
-        }
-      },
-      required: ["type", "target"]
-    }
-  },
   {
     name: "db-discover",
     description: 'Discover databases available on an SSH server. Use this first to find what is reachable before running other db-* tools.\n\nModes (pass via `include` array, default `["www"]`):\n- `"www"` \u2014 scan `/var/www` for WordPress / PrestaShop / Laravel / generic .env apps. Returns sitePath, db name, user, host, port.\n- `"postgres-containers"` \u2014 enumerate running Docker containers that expose `POSTGRES_USER` / `POSTGRES_DB` env vars (vanilla `postgres:*` / `pgvector/*` images). Returns container name, db, user, host port mapping, and whether a password is set. Use the returned (container, db, user) tuple directly with `db-query containerName=\u2026` or `db-apply-migration`.\n\nPass multiple modes to scan in parallel: `{ include: ["www", "postgres-containers"] }`.',
@@ -10594,33 +9993,6 @@ var TOOLS = [
       required: ["appName", "environment", "content"]
     }
   },
-  {
-    name: "release-trigger",
-    description: "Start a release/deploy pipeline for a release profile stage. Attributes the deploy to the MCP API key owner. Requires ci_cd permission.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        releaseProfile: {
-          type: "string",
-          description: "Release profile name (usually matches the project folder name or git repo name, e.g. mg-dashboard)."
-        },
-        stage: {
-          type: "string",
-          description: "Stage slug or name (e.g. dev, production). Required when the profile has multiple enabled stages."
-        },
-        versionType: {
-          type: "string",
-          enum: ["major", "minor", "patch"],
-          description: "Semver bump type when versioning applies (default: minor)."
-        },
-        skipPrFlow: {
-          type: "boolean",
-          description: "Skip PR approval flow (default: false)."
-        }
-      },
-      required: ["releaseProfile"]
-    }
-  },
   {
     name: "release-profile-list",
     description: "List all release profiles with repo, enabled state, release type, GitHub key and a summary of their stages. Requires ci_cd permission.",
@@ -10631,67 +10003,55 @@ var TOOLS = [
     }
   },
   {
-    name: "release-profile-create",
-    description: "One-step release profile creation: scans the GitHub repo, detects apps (Next.js/Docker/PM2), creates the profile plus dev/prod stages with smart defaults (dev: release-dev + PR webhook + auto-approve, prod: release-prod + manual + DB backup) and seeds the stage apps. Release branches are created on GitHub automatically. Deployment servers must be assigned afterwards in the dashboard (Releases \u2192 Profiles). Requires ci_cd permission.",
+    name: "release-profile",
+    description: 'Create or update a release profile. Pick the operation with `action`:\n- "create": one-step creation \u2014 scans the GitHub repo, detects apps (Next.js/Docker/PM2), creates the profile plus dev/prod stages with smart defaults (dev: release-dev + PR webhook + auto-approve, prod: release-prod + manual + DB backup) and seeds the stage apps. Release branches are created on GitHub automatically. Required: repoFullName. Optional: githubKey, name, releaseType. Assign deployment servers afterwards in the dashboard (Releases \u2192 Profiles).\n- "update": change settings of an existing profile located by `releaseProfile` (name or repo). Changing releaseType reconfigures the stages (missing stages are created with smart defaults, out-of-scope stages are disabled). Required: releaseProfile. Optional: name, enabled, releaseType, githubKey, useChangesBranch, hasTriggerDev, workDirectory.\n\nRequires ci_cd permission.',
     inputSchema: {
       type: "object",
       properties: {
+        action: {
+          type: "string",
+          enum: ["create", "update"],
+          description: "Which operation to perform."
+        },
         repoFullName: {
           type: "string",
-          description: 'Repository in "owner/name" format (e.g. MGSoftwareBV/mg-dashboard).'
+          description: 'Repository in "owner/name" format (e.g. MGSoftwareBV/mg-dashboard). Required for action="create".'
         },
-        githubKey: {
+        releaseProfile: {
           type: "string",
-          description: 'Named GitHub key (github_token label or owner, e.g. "AVARC Solutions") used for all GitHub API calls for this profile. Omit for the default MG Software token.'
+          description: 'Profile name or repo full name to locate the profile. Required for action="update".'
         },
         name: {
           type: "string",
-          description: 'Profile name override. Default: title-cased repo name (mg-dashboard \u2192 "Mg Dashboard").'
+          description: 'Profile name. For create: name override (default: title-cased repo name, e.g. mg-dashboard \u2192 "Mg Dashboard"). For update: new profile name.'
         },
-        releaseType: {
-          type: "string",
-          enum: ["dev_only", "prod_only", "both"],
-          description: "Which stages to create (default: both = dev + prod)."
-        }
-      },
-      required: ["repoFullName"]
-    }
-  },
-  {
-    name: "release-profile-update",
-    description: "Update release profile settings. Locate the profile by name or repo. Changing releaseType reconfigures the stages (missing stages are created with smart defaults, out-of-scope stages are disabled). Requires ci_cd permission.",
-    inputSchema: {
-      type: "object",
-      properties: {
-        releaseProfile: {
-          type: "string",
-          description: "Profile name or repo full name to locate the profile."
+        enabled: {
+          type: "boolean",
+          description: "Enable/disable the profile (update only)."
         },
-        name: { type: "string", description: "New profile name." },
-        enabled: { type: "boolean", description: "Enable/disable the profile." },
         releaseType: {
           type: "string",
           enum: ["dev_only", "prod_only", "both"],
-          description: "New release type \u2014 reconfigures stages accordingly."
+          description: "Which stages exist (default for create: both = dev + prod). Changing it on update reconfigures the stages."
         },
         githubKey: {
           type: "string",
-          description: 'Named GitHub key (github_token label or owner). Pass "default" to reset to the default MG Software token.'
+          description: 'Named GitHub key (github_token label or owner, e.g. "AVARC Solutions") used for all GitHub API calls for this profile. Omit for the default MG Software token. On update, pass "default" to reset to the default token.'
         },
         useChangesBranch: {
           type: "boolean",
-          description: "Use a long-lived -changes accumulation branch."
+          description: "Use a long-lived -changes accumulation branch (update only)."
         },
         hasTriggerDev: {
           type: "boolean",
-          description: "Deploy Trigger.dev jobs during production releases."
+          description: "Deploy Trigger.dev jobs during production releases (update only)."
         },
         workDirectory: {
           type: "string",
-          description: 'Working directory within the repo (e.g. ".").'
+          description: 'Working directory within the repo (e.g. "."). Update only.'
         }
       },
-      required: ["releaseProfile"]
+      required: ["action"]
     }
   },
   {
@@ -10790,6 +10150,34 @@ var TOOLS = [
       required: ["action", "domain", "type", "name"]
     }
   },
+  // ----- Team memory -----
+  {
+    name: "search-team-memory",
+    description: "Search the team's ENTIRE past Cursor history (every developer, every project) for how something was handled before. Use this FIRST, before investigating from scratch, whenever you: hit a non-trivial bug or error, are about to build something that may have been done before, need a project-specific convention/gotcha, or the user asks 'have we done X', 'how did we fix Y', or 'did we solve this already'. Hybrid semantic + keyword search over mirrored conversations. Returns ranked past chats with repo, date, a solution snippet and a similarity score. Phrase the query as the problem in natural language (e.g. 'release pipeline PM2 deploy fails with module not found').",
+    inputSchema: {
+      type: "object",
+      properties: {
+        query: {
+          type: "string",
+          description: "The problem/topic in natural language. Include error text, tool/module names, or symptoms for best recall."
+        },
+        repo: {
+          type: "string",
+          description: "Optional repo filter, e.g. 'github.com/MGSoftwareBV/mg-dashboard'. Omit to search across all projects."
+        },
+        scope: {
+          type: "string",
+          enum: ["team", "mine"],
+          description: "'team' (default) searches everyone's history; 'mine' restricts to the calling user's own conversations."
+        },
+        limit: {
+          type: "number",
+          description: "Max results to return (1-25, default 8)."
+        }
+      },
+      required: ["query"]
+    }
+  },
   // ----- Trigger.dev -----
   ...TRIGGER_TOOLS
 ];
@@ -10861,6 +10249,65 @@ async function executeToolCall(name, a, _serverId) {
   const ctx = authContext;
   try {
     switch (name) {
+      // ----- Team memory -----
+      case "search-team-memory": {
+        const query = typeof a.query === "string" ? a.query.trim() : "";
+        if (!query) {
+          return { content: [{ type: "text", text: "Error: query is required" }] };
+        }
+        const res = await fetch(`${dashboardBaseUrl}/api/team-memory/search`, {
+          method: "POST",
+          headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${apiKey}`
+          },
+          body: JSON.stringify({
+            query,
+            repo: typeof a.repo === "string" ? a.repo : void 0,
+            scope: a.scope === "mine" ? "mine" : "team",
+            limit: typeof a.limit === "number" ? a.limit : void 0
+          })
+        });
+        if (!res.ok) {
+          const detail = await res.text().catch(() => "");
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Error: team-memory search failed (${res.status}). ${detail.slice(0, 300)}`
+              }
+            ]
+          };
+        }
+        const data = await res.json();
+        if (data.count === 0) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `No prior team conversations matched "${query}". Proceed from scratch.`
+              }
+            ]
+          };
+        }
+        const lines = data.hits.map((hit, index5) => {
+          const when = hit.lastMessageAt ? new Date(hit.lastMessageAt).toISOString().slice(0, 10) : "unknown date";
+          const repo = hit.repo ?? "unknown repo";
+          const sim = hit.similarity !== null ? ` \xB7 ${(hit.similarity * 100).toFixed(0)}% match` : "";
+          return `${index5 + 1}. [${repo} \xB7 ${when}${sim}] ${hit.title}
+   ${(hit.summary ?? hit.snippet).replace(/\s+/g, " ").slice(0, 500)}`;
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Found ${data.count} prior conversation(s) (${data.mode} search) \u2014 reuse this before solving from scratch:
+
+` + lines.join("\n\n")
+            }
+          ]
+        };
+      }
       // ----- Servers -----
       case "list-servers": {
         const data = ctx.allowedServerIds !== null ? await db.execute(sql`
@@ -12156,163 +11603,6 @@ ${stderrOut}`);
 ${result.stderr}`);
         return { content: [{ type: "text", text: output.join("\n") }] };
       }
-      // ----- wait-for: poll until a condition holds (one tool, four types) -----
-      case "wait-for": {
-        const type = String(a.type || "");
-        if (!["url", "container-health", "file-exists", "sftp-exists"].includes(
-          type
-        )) {
-          return {
-            content: [
-              {
-                type: "text",
-                text: "Error: type must be one of: url, container-health, file-exists, sftp-exists"
-              }
-            ]
-          };
-        }
-        const timeoutSeconds = Math.max(
-          1,
-          Math.min(1800, Number(a.timeout) || 120)
-        );
-        const intervalSeconds = Math.max(
-          1,
-          Math.min(60, Number(a.intervalSeconds) || 3)
-        );
-        const deadline = Date.now() + timeoutSeconds * 1e3;
-        const trail = [];
-        const check = async () => {
-          if (type === "url") {
-            const target = String(a.target || "");
-            if (!target) return { ok: false, observed: "no target url" };
-            const expectStatus = a.until !== void 0 ? Number(a.until) : 200;
-            try {
-              const ctrl = new AbortController();
-              const t = setTimeout(() => ctrl.abort(), 1e4);
-              const res = await fetch(target, {
-                signal: ctrl.signal,
-                redirect: "manual"
-              });
-              clearTimeout(t);
-              const ok2 = res.status === expectStatus || expectStatus === 200 && res.status >= 200 && res.status < 300;
-              return { ok: ok2, observed: `HTTP ${res.status}` };
-            } catch (e) {
-              return {
-                ok: false,
-                observed: e instanceof Error ? e.message : String(e)
-              };
-            }
-          }
-          if (type === "container-health") {
-            const containerName = String(a.target || "").replace(
-              /[^a-zA-Z0-9._-]/g,
-              ""
-            );
-            const until = String(a.until || "healthy");
-            if (!containerName)
-              return { ok: false, observed: "no container name" };
-            if (!a.serverId)
-              return {
-                ok: false,
-                observed: "serverId is required for container-health"
-              };
-            const { conn: conn2, proxy: proxy2 } = await getServerConnection(
-              String(a.serverId)
-            );
-            const cmd2 = `docker inspect --format '{{json .State}}' ${containerName} 2>&1`;
-            const r2 = await sshExec(conn2, cmd2, proxy2);
-            if (r2.exitCode !== 0)
-              return {
-                ok: false,
-                observed: r2.stderr.trim().slice(0, 80) || "inspect failed"
-              };
-            try {
-              const state = JSON.parse(r2.stdout.trim());
-              const healthStatus = state.Health?.Status;
-              if (until === "healthy") {
-                return {
-                  ok: healthStatus === "healthy",
-                  observed: `Status=${state.Status} Health=${healthStatus || "no-check"}`
-                };
-              }
-              return {
-                ok: state.Status === until,
-                observed: `Status=${state.Status}`
-              };
-            } catch (e) {
-              return {
-                ok: false,
-                observed: "parse error: " + (e instanceof Error ? e.message : String(e))
-              };
-            }
-          }
-          const bucket = typeof a.bucket === "string" && a.bucket ? a.bucket : "";
-          const path = String(a.target || a.path || "");
-          if (!path) return { ok: false, observed: "no path" };
-          if (bucket) {
-            try {
-              await getR2Client().send(
-                new HeadObjectCommand({ Bucket: bucket, Key: r2Key(path) })
-              );
-              return { ok: true, observed: `r2://${bucket}/${path} exists` };
-            } catch {
-              return {
-                ok: false,
-                observed: `r2://${bucket}/${path} not found`
-              };
-            }
-          }
-          if (!a.serverId)
-            return {
-              ok: false,
-              observed: "serverId or bucket is required for file-exists"
-            };
-          const { conn, proxy } = await getServerConnection(String(a.serverId));
-          const safe = sanitizePath(path);
-          const cmd = `test -e ${posixQuote(safe)} && echo OK || echo MISSING`;
-          const r = await sshExec(conn, cmd, proxy);
-          const ok = r.stdout.trim() === "OK";
-          return { ok, observed: ok ? `${safe} exists` : `${safe} missing` };
-        };
-        let attempts = 0;
-        let lastObserved = "";
-        while (Date.now() < deadline) {
-          attempts++;
-          const r = await check();
-          lastObserved = r.observed;
-          trail.push(
-            `[${attempts}] ${(/* @__PURE__ */ new Date()).toISOString().slice(11, 19)}  ${r.ok ? "OK" : ".."}  ${r.observed}`
-          );
-          if (r.ok) {
-            return {
-              content: [
-                {
-                  type: "text",
-                  text: `Condition met after ${attempts} attempt(s) in ${((Date.now() - (deadline - timeoutSeconds * 1e3)) / 1e3).toFixed(1)}s.
-Last observation: ${r.observed}
-
---- trail ---
-${trail.join("\n")}`
-                }
-              ]
-            };
-          }
-          if (Date.now() + intervalSeconds * 1e3 >= deadline) break;
-          await new Promise((res) => setTimeout(res, intervalSeconds * 1e3));
-        }
-        return {
-          content: [
-            {
-              type: "text",
-              text: `Timed out after ${timeoutSeconds}s without seeing condition (${attempts} probe(s)).
-Last observation: ${lastObserved}
-
---- trail ---
-${trail.join("\n")}`
-            }
-          ]
-        };
-      }
       // ----- Database -----
       case "db-discover": {
         const { serverId, conn, proxy } = await getServerConnection(
@@ -13188,53 +12478,6 @@ LIMIT ${limit};
         }
         return { content: [{ type: "text", text: saveMsg }] };
       }
-      case "release-trigger": {
-        const releaseProfile = String(a.releaseProfile);
-        const stageFilter = a.stage ? String(a.stage) : null;
-        const versionType = String(a.versionType ?? "minor");
-        if (versionType !== "major" && versionType !== "minor" && versionType !== "patch") {
-          throw new Error(
-            `Invalid versionType "${versionType}". Expected major, minor, or patch.`
-          );
-        }
-        const skipPrFlow = a.skipPrFlow === true;
-        const resolved = await resolveReleaseTriggerStage(
-          releaseProfile,
-          stageFilter
-        );
-        try {
-          const result = await createReleaseForStage(authContext.userId, {
-            stageId: resolved.stageId,
-            versionType,
-            skipPrFlow,
-            triggerType: "mcp"
-          });
-          return {
-            content: [
-              {
-                type: "text",
-                text: JSON.stringify(
-                  {
-                    releaseId: result.id,
-                    status: result.status,
-                    stepsCount: result.stepsCount,
-                    author: result.authorName,
-                    profile: resolved.profileName,
-                    stage: resolved.stageName
-                  },
-                  null,
-                  2
-                )
-              }
-            ]
-          };
-        } catch (err) {
-          if (err instanceof CreateReleaseError) {
-            throw new Error(err.message);
-          }
-          throw err;
-        }
-      }
       case "release-profile-list": {
         const profiles = await db.execute(sql`
           SELECT
@@ -13282,64 +12525,74 @@ ${lines.join("\n\n")}`
           ]
         };
       }
-      case "release-profile-create": {
-        const repoFullName = String(a.repoFullName ?? "").trim();
-        const githubTokenId = a.githubKey ? await resolveGitHubTokenIdByKey(String(a.githubKey)) : null;
-        const releaseType = a.releaseType ? String(a.releaseType) : null;
-        if (releaseType !== null && releaseType !== "dev_only" && releaseType !== "prod_only" && releaseType !== "both") {
-          throw new Error(
-            `Invalid releaseType "${releaseType}". Expected dev_only, prod_only, or both.`
-          );
+      case "release-profile": {
+        const action = String(a.action);
+        if (action !== "create" && action !== "update") {
+          throw new Error("action must be one of: create, update");
         }
-        try {
-          const result = await quickCreateReleaseProfile(
-            authContext.userId,
-            {
-              repoFullName,
-              githubTokenId,
-              name: a.name ? String(a.name) : null,
-              releaseType
-            }
-          );
-          return {
-            content: [
+        if (action === "create") {
+          const repoFullName = String(a.repoFullName ?? "").trim();
+          if (!repoFullName) {
+            throw new Error('action="create" requires repoFullName');
+          }
+          const githubTokenId2 = a.githubKey ? await resolveGitHubTokenIdByKey(String(a.githubKey)) : null;
+          const releaseType2 = a.releaseType ? String(a.releaseType) : null;
+          if (releaseType2 !== null && releaseType2 !== "dev_only" && releaseType2 !== "prod_only" && releaseType2 !== "both") {
+            throw new Error(
+              `Invalid releaseType "${releaseType2}". Expected dev_only, prod_only, or both.`
+            );
+          }
+          try {
+            const result = await quickCreateReleaseProfile(
+              authContext.userId,
               {
-                type: "text",
-                text: JSON.stringify(
-                  {
-                    profileId: result.profile.id,
-                    name: result.profile.name,
-                    repo: repoFullName,
-                    releaseType: releaseType ?? "both",
-                    appsDetected: result.scan.apps.map((app) => ({
-                      path: app.path,
-                      label: app.label,
-                      deployMethod: app.deployMethod
-                    })),
-                    stages: result.stages.map((s) => ({
-                      stage: s.stage,
-                      name: s.name,
-                      releaseBranch: s.release_branch,
-                      triggerMode: s.trigger_mode
-                    })),
-                    branchWarnings: result.branchWarnings,
-                    hint: "Assign deployment servers per stage app in the dashboard (Releases \u2192 Profiles) before triggering a release."
-                  },
-                  null,
-                  2
-                )
+                repoFullName,
+                githubTokenId: githubTokenId2,
+                name: a.name ? String(a.name) : null,
+                releaseType: releaseType2
               }
-            ]
-          };
-        } catch (err) {
-          if (err instanceof ReleaseProfileQuickCreateError) {
-            throw new Error(err.message);
+            );
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: JSON.stringify(
+                    {
+                      profileId: result.profile.id,
+                      name: result.profile.name,
+                      repo: repoFullName,
+                      releaseType: releaseType2 ?? "both",
+                      appsDetected: result.scan.apps.map((app) => ({
+                        path: app.path,
+                        label: app.label,
+                        deployMethod: app.deployMethod
+                      })),
+                      stages: result.stages.map((s) => ({
+                        stage: s.stage,
+                        name: s.name,
+                        releaseBranch: s.release_branch,
+                        triggerMode: s.trigger_mode
+                      })),
+                      branchWarnings: result.branchWarnings,
+                      hint: "Assign deployment servers per stage app in the dashboard (Releases \u2192 Profiles) before triggering a release."
+                    },
+                    null,
+                    2
+                  )
+                }
+              ]
+            };
+          } catch (err) {
+            if (err instanceof ReleaseProfileQuickCreateError) {
+              throw new Error(err.message);
+            }
+            throw err;
           }
-          throw err;
         }
-      }
-      case "release-profile-update": {
         const identifier = String(a.releaseProfile ?? "").trim();
+        if (!identifier) {
+          throw new Error('action="update" requires releaseProfile');
+        }
         const profileRows = await db.execute(sql`
           SELECT id, name FROM release_profile
           WHERE name ILIKE ${identifier} OR repo_full_name ILIKE ${identifier}