@miosa/cli 1.0.8 → 1.0.10

package/dist/commands/mcp.js

@@ -22,7 +22,6 @@ import { request } from "undici";
 import chalk from "chalk";
 import { loadConfig } from "../config.js";
 import { MiosaClient } from "../client.js";
-import { banner, errorEnvelope, hintBlock, icon, kvPanel, printElapsed, formatDuration, } from "../ui/render.js";
 // ── Tool definitions — mirror the Python MCP server exactly ─────────────────
 const TOOL_LIST = [
     // Lifecycle
@@ -59,15 +58,6 @@ const TOOL_LIST = [
                     type: "string",
                     description: "Your internal project ID for attribution (optional)",
                 },
-                gpu_model: {
-                    type: "string",
-                    description: "GPU model to attach (e.g. 'nvidia-a10g', 'nvidia-t4'). Omit for CPU-only.",
-                },
-                gpu_count: {
-                    type: "integer",
-                    description: "Number of GPUs to attach (default: 1 when gpu_model is set).",
-                    default: 1,
-                },
             },
             required: ["name"],
         },
@@ -1317,971 +1307,368 @@ const TOOL_LIST = [
     },
     // Deployments
     {
-        name: "deployment_list",
-        description: "List all deployments in the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "deployment_get",
-        description: "Get details of a specific deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-            },
-            required: ["deployment_id"],
-        },
-    },
-    {
-        name: "deployment_create",
-        description: "Create a new deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Deployment name" },
-                type: {
-                    type: "string",
-                    description: "Deployment type (e.g. web, worker)",
-                },
-                source: { type: "object", description: "Source configuration" },
-                env_vars: {
-                    type: "object",
-                    description: "Environment variables as key-value pairs",
-                },
-                region: { type: "string", description: "Deployment region (optional)" },
-            },
-            required: ["name"],
-        },
-    },
-    {
-        name: "deployment_delete",
-        description: "Delete a deployment permanently.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: {
-                    type: "string",
-                    description: "Deployment ID to delete",
-                },
-            },
-            required: ["deployment_id"],
-        },
-    },
-    {
-        name: "deployment_publish",
-        description: "Publish a new version of a deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-                source: {
-                    type: "object",
-                    description: "Source configuration for the new version",
-                },
-            },
-            required: ["deployment_id"],
-        },
-    },
-    {
-        name: "deployment_rollback",
-        description: "Rollback a deployment to a previous version.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-                version_id: {
-                    type: "string",
-                    description: "Version ID to roll back to",
-                },
-            },
-            required: ["deployment_id", "version_id"],
-        },
-    },
-    {
-        name: "deployment_env_list",
-        description: "List environment variables for a deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-            },
-            required: ["deployment_id"],
-        },
-    },
-    {
-        name: "deployment_env_set",
-        description: "Set (create or update) an environment variable for a deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-                key: { type: "string", description: "Environment variable name" },
-                value: { type: "string", description: "Environment variable value" },
-            },
-            required: ["deployment_id", "key", "value"],
-        },
-    },
-    {
-        name: "deployment_logs",
-        description: "Get logs for a deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-                lines: {
-                    type: "integer",
-                    description: "Number of log lines to return (default: 100)",
-                    default: 100,
-                },
-                since: {
-                    type: "string",
-                    description: "ISO 8601 timestamp to fetch logs from (optional)",
-                },
-            },
-            required: ["deployment_id"],
-        },
-    },
-    {
-        name: "deployment_version_list",
-        description: "List all versions of a deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-            },
-            required: ["deployment_id"],
-        },
-    },
-    {
-        name: "deployment_version_promote",
-        description: "Promote a specific version to be the active deployment.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                deployment_id: { type: "string", description: "Deployment ID" },
-                version_id: { type: "string", description: "Version ID to promote" },
-            },
-            required: ["deployment_id", "version_id"],
-        },
-    },
-    // Storage
-    {
-        name: "storage_bucket_list",
-        description: "List all storage buckets in the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "storage_bucket_create",
-        description: "Create a new storage bucket.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Bucket name" },
-                region: { type: "string", description: "Bucket region (optional)" },
-                public: {
-                    type: "boolean",
-                    description: "Whether the bucket is publicly readable (default: false)",
-                    default: false,
-                },
-            },
-            required: ["name"],
-        },
-    },
-    {
-        name: "storage_bucket_delete",
-        description: "Delete a storage bucket.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                bucket_id: {
-                    type: "string",
-                    description: "Bucket ID or name to delete",
-                },
-            },
-            required: ["bucket_id"],
-        },
-    },
-    {
-        name: "storage_object_list",
-        description: "List objects in a storage bucket, optionally filtered by prefix.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                bucket_id: { type: "string", description: "Bucket ID or name" },
-                prefix: {
-                    type: "string",
-                    description: "Key prefix to filter by (optional)",
-                },
-            },
-            required: ["bucket_id"],
-        },
-    },
-    {
-        name: "storage_object_upload",
-        description: "Upload an object to a storage bucket.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                bucket_id: { type: "string", description: "Bucket ID or name" },
-                key: { type: "string", description: "Object key (path within bucket)" },
-                content: {
-                    type: "string",
-                    description: "Object content (text or base64-encoded binary)",
-                },
-                content_type: {
-                    type: "string",
-                    description: "MIME type of the object (optional)",
-                },
-            },
-            required: ["bucket_id", "key", "content"],
-        },
-    },
-    {
-        name: "storage_object_download",
-        description: "Download an object from a storage bucket.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                bucket_id: { type: "string", description: "Bucket ID or name" },
-                key: { type: "string", description: "Object key to download" },
-            },
-            required: ["bucket_id", "key"],
-        },
-    },
-    {
-        name: "storage_object_delete",
-        description: "Delete an object from a storage bucket.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                bucket_id: { type: "string", description: "Bucket ID or name" },
-                key: { type: "string", description: "Object key to delete" },
-            },
-            required: ["bucket_id", "key"],
-        },
-    },
-    {
-        name: "storage_presign",
-        description: "Get a presigned URL for temporary access to a storage object.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                bucket_id: { type: "string", description: "Bucket ID or name" },
-                key: { type: "string", description: "Object key" },
-                expires_in: {
-                    type: "integer",
-                    description: "URL expiry in seconds (default: 3600)",
-                    default: 3600,
-                },
-                method: {
-                    type: "string",
-                    enum: ["GET", "PUT"],
-                    description: "HTTP method (default: GET)",
-                    default: "GET",
-                },
-            },
-            required: ["bucket_id", "key"],
-        },
-    },
-    // Databases
-    {
-        name: "database_list",
-        description: "List all managed databases in the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "database_create",
-        description: "Create a new managed database.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Database name" },
-                engine: {
-                    type: "string",
-                    enum: ["postgres", "mysql", "redis"],
-                    description: "Database engine",
-                },
-                version: { type: "string", description: "Engine version (optional)" },
-                size: { type: "string", description: "Database size/tier (optional)" },
-                region: { type: "string", description: "Region (optional)" },
-            },
-            required: ["name", "engine"],
-        },
-    },
-    {
-        name: "database_get",
-        description: "Get details of a specific database.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                database_id: { type: "string", description: "Database ID" },
-            },
-            required: ["database_id"],
-        },
-    },
-    {
-        name: "database_delete",
-        description: "Delete a managed database permanently.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                database_id: { type: "string", description: "Database ID to delete" },
-            },
-            required: ["database_id"],
-        },
-    },
-    {
-        name: "database_credentials",
-        description: "Get the connection string and credentials for a database.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                database_id: { type: "string", description: "Database ID" },
-            },
-            required: ["database_id"],
-        },
-    },
-    {
-        name: "database_logs",
-        description: "Get logs for a managed database.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                database_id: { type: "string", description: "Database ID" },
-                lines: {
-                    type: "integer",
-                    description: "Number of log lines to return (default: 100)",
-                    default: 100,
-                },
-                since: {
-                    type: "string",
-                    description: "ISO 8601 timestamp to fetch logs from (optional)",
-                },
-            },
-            required: ["database_id"],
-        },
-    },
-    // Workspaces
-    {
-        name: "workspace_list",
-        description: "List all workspaces in the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "workspace_create",
-        description: "Create a new workspace.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Workspace name" },
-                description: {
-                    type: "string",
-                    description: "Workspace description (optional)",
-                },
-            },
-            required: ["name"],
-        },
+        name: 'deployment_list',
+        description: 'List all deployments in the tenant.',
+        inputSchema: { type: 'object', properties: {} },
     },
     {
-        name: "workspace_get",
-        description: "Get details of a specific workspace.",
+        name: 'deployment_get',
+        description: 'Get details of a specific deployment.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                workspace_id: { type: "string", description: "Workspace ID" },
+                deployment_id: { type: 'string', description: 'Deployment ID' },
             },
-            required: ["workspace_id"],
+            required: ['deployment_id'],
         },
     },
     {
-        name: "workspace_update",
-        description: "Update a workspace's name or description.",
+        name: 'deployment_create',
+        description: 'Create a new deployment.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                workspace_id: { type: "string", description: "Workspace ID" },
-                name: { type: "string", description: "New workspace name (optional)" },
-                description: {
-                    type: "string",
-                    description: "New description (optional)",
-                },
+                name: { type: 'string', description: 'Deployment name' },
+                type: { type: 'string', description: 'Deployment type (e.g. web, worker)' },
+                source: { type: 'object', description: 'Source configuration' },
+                env_vars: { type: 'object', description: 'Environment variables as key-value pairs' },
+                region: { type: 'string', description: 'Deployment region (optional)' },
             },
-            required: ["workspace_id"],
+            required: ['name'],
         },
     },
     {
-        name: "workspace_stats",
-        description: "Get resource statistics for a workspace (computers, sandboxes, databases, etc.).",
+        name: 'deployment_delete',
+        description: 'Delete a deployment permanently.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                workspace_id: { type: "string", description: "Workspace ID" },
+                deployment_id: { type: 'string', description: 'Deployment ID to delete' },
             },
-            required: ["workspace_id"],
+            required: ['deployment_id'],
         },
     },
     {
-        name: "workspace_usage",
-        description: "Get usage data (compute hours, storage, bandwidth) for a workspace.",
+        name: 'deployment_publish',
+        description: 'Publish a new version of a deployment.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                workspace_id: { type: "string", description: "Workspace ID" },
-                period: {
-                    type: "string",
-                    description: "Billing period (e.g. '2026-05'). Defaults to current month.",
-                },
+                deployment_id: { type: 'string', description: 'Deployment ID' },
+                source: { type: 'object', description: 'Source configuration for the new version' },
             },
-            required: ["workspace_id"],
+            required: ['deployment_id'],
         },
     },
-    // Billing
-    {
-        name: "billing_usage",
-        description: "Get current billing period usage for the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "billing_plan",
-        description: "Get the current billing plan details for the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    // Tunnels / Port forwarding
     {
-        name: "computer_expose_port",
-        description: "Expose a port on the computer and return the public URL. The URL follows the pattern https://{port}-{slug}.computer.miosa.ai.",
+        name: 'deployment_rollback',
+        description: 'Rollback a deployment to a previous version.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                computer_id: { type: "string", description: "Computer ID." },
-                port: { type: "integer", description: "Port number to expose" },
-                protocol: {
-                    type: "string",
-                    enum: ["http", "https", "tcp"],
-                    description: "Protocol (default: http)",
-                },
+                deployment_id: { type: 'string', description: 'Deployment ID' },
+                version_id: { type: 'string', description: 'Version ID to roll back to' },
             },
-            required: ["computer_id", "port"],
+            required: ['deployment_id', 'version_id'],
         },
     },
     {
-        name: "computer_list_ports",
-        description: "List all currently exposed ports on the computer.",
+        name: 'deployment_env_list',
+        description: 'List environment variables for a deployment.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                computer_id: { type: "string", description: "Computer ID." },
+                deployment_id: { type: 'string', description: 'Deployment ID' },
             },
-            required: ["computer_id"],
+            required: ['deployment_id'],
         },
     },
     {
-        name: "computer_preview_url",
-        description: "Return the public preview URL for a given port on the computer. Format: https://{port}-{slug}.computer.miosa.ai",
+        name: 'deployment_env_set',
+        description: 'Set (create or update) an environment variable for a deployment.',
         inputSchema: {
-            type: "object",
-            properties: {
-                computer_id: { type: "string", description: "Computer ID." },
-                port: { type: "integer", description: "Port number" },
-            },
-            required: ["computer_id", "port"],
-        },
-    },
-    // Network policy
-    {
-        name: "computer_network_policy_get",
-        description: "Get the current network policy (firewall rules) for the computer.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                computer_id: { type: "string", description: "Computer ID." },
-            },
-            required: ["computer_id"],
-        },
-    },
-    {
-        name: "computer_network_policy_set",
-        description: "Set the network policy (firewall rules) for the computer.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                computer_id: { type: "string", description: "Computer ID." },
-                rules: {
-                    type: "array",
-                    items: { type: "object" },
-                    description: "List of firewall rule objects (e.g. {direction, protocol, port, action})",
-                },
-                default_effect: {
-                    type: "string",
-                    enum: ["allow", "deny"],
-                    description: "Default action when no rule matches (default: allow)",
-                },
-            },
-            required: ["computer_id", "rules"],
-        },
-    },
-    {
-        name: "computer_network_policy_reset",
-        description: "Reset the network policy for the computer to the platform default (allow all).",
-        inputSchema: {
-            type: "object",
-            properties: {
-                computer_id: { type: "string", description: "Computer ID." },
-            },
-            required: ["computer_id"],
-        },
-    },
-    // Webhooks
-    {
-        name: "webhook_list",
-        description: "List all webhooks registered in the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "webhook_create",
-        description: "Create a new webhook endpoint.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                url: {
-                    type: "string",
-                    description: "HTTPS URL to deliver webhook events to",
-                },
-                events: {
-                    type: "array",
-                    items: { type: "string" },
-                    description: "List of event types to subscribe to (e.g. ['computer.started', 'computer.stopped'])",
-                },
-            },
-            required: ["url", "events"],
-        },
-    },
-    {
-        name: "webhook_delete",
-        description: "Delete a webhook.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                webhook_id: { type: "string", description: "Webhook ID to delete" },
-            },
-            required: ["webhook_id"],
-        },
-    },
-    {
-        name: "webhook_test",
-        description: "Send a test event delivery to a webhook endpoint.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                webhook_id: { type: "string", description: "Webhook ID to test" },
-            },
-            required: ["webhook_id"],
-        },
-    },
-    // Functions
-    {
-        name: "function_list",
-        description: "List all serverless functions in the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "function_create",
-        description: "Create a new serverless function.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: { type: "string", description: "Function name" },
-                runtime: {
-                    type: "string",
-                    description: "Runtime identifier (e.g. 'node20', 'python311', 'go122')",
-                },
-                code: {
-                    type: "string",
-                    description: "Inline function source code (optional)",
-                },
-            },
-            required: ["name", "runtime"],
-        },
-    },
-    {
-        name: "function_invoke",
-        description: "Invoke a serverless function and return its response.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                function_id: { type: "string", description: "Function ID to invoke" },
-                payload: {
-                    type: "object",
-                    description: "JSON payload to pass to the function (optional)",
-                },
-            },
-            required: ["function_id"],
-        },
-    },
-    {
-        name: "function_delete",
-        description: "Delete a serverless function permanently.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                function_id: { type: "string", description: "Function ID to delete" },
-            },
-            required: ["function_id"],
-        },
-    },
-    // API Keys
-    {
-        name: "api_key_list",
-        description: "List all API keys for the tenant.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "api_key_create",
-        description: "Create a new API key.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                name: {
-                    type: "string",
-                    description: "Human-readable label for the key",
-                },
-                scopes: {
-                    type: "array",
-                    items: { type: "string" },
-                    description: "Permission scopes for the key (optional; defaults to full access)",
-                },
-            },
-            required: ["name"],
-        },
-    },
-    {
-        name: "api_key_delete",
-        description: "Revoke and delete an API key.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                key_id: { type: "string", description: "API key ID to delete" },
-            },
-            required: ["key_id"],
-        },
-    },
-    // Regions
-    {
-        name: "region_list",
-        description: "List available regions and their GPU availability.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    {
-        name: "computer_list_regions",
-        description: "List available compute regions with GPU availability details.",
-        inputSchema: { type: "object", properties: {} },
-    },
-    // Computer templates
-    {
-        name: "computer_template_list",
-        description: "List computer templates available in a workspace.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                workspace_id: {
-                    type: "string",
-                    description: "Workspace ID to list templates for",
-                },
-            },
-            required: ["workspace_id"],
-        },
-    },
-    {
-        name: "computer_template_create",
-        description: "Create a new computer template in a workspace.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                workspace_id: {
-                    type: "string",
-                    description: "Workspace ID to create the template in",
-                },
-                name: {
-                    type: "string",
-                    description: "Human-readable name for the template",
-                },
-                template_type: {
-                    type: "string",
-                    description: "Base template type (e.g. miosa-desktop)",
-                },
-                size: {
-                    type: "string",
-                    enum: ["small", "medium", "large", "xl"],
-                    description: "VM size for the template",
-                },
-                selected_apps: {
-                    type: "array",
-                    items: { type: "string" },
-                    description: "List of app identifiers to pre-install",
-                },
-                settings: {
-                    type: "object",
-                    description: "Additional template settings (key-value pairs)",
-                },
+            type: 'object',
+            properties: {
+                deployment_id: { type: 'string', description: 'Deployment ID' },
+                key: { type: 'string', description: 'Environment variable name' },
+                value: { type: 'string', description: 'Environment variable value' },
             },
-            required: ["workspace_id", "name"],
+            required: ['deployment_id', 'key', 'value'],
         },
     },
-    // Settings
     {
-        name: "settings_get",
-        description: "Get all tenant-level settings.",
-        inputSchema: { type: "object", properties: {} },
+        name: 'deployment_logs',
+        description: 'Get logs for a deployment.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                deployment_id: { type: 'string', description: 'Deployment ID' },
+                lines: { type: 'integer', description: 'Number of log lines to return (default: 100)', default: 100 },
+                since: { type: 'string', description: 'ISO 8601 timestamp to fetch logs from (optional)' },
+            },
+            required: ['deployment_id'],
+        },
     },
     {
-        name: "settings_get_branding",
-        description: "Get tenant branding settings (logo, wallpaper, colours).",
-        inputSchema: { type: "object", properties: {} },
+        name: 'deployment_version_list',
+        description: 'List all versions of a deployment.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                deployment_id: { type: 'string', description: 'Deployment ID' },
+            },
+            required: ['deployment_id'],
+        },
     },
     {
-        name: "settings_update_branding",
-        description: "Update tenant branding settings.",
+        name: 'deployment_version_promote',
+        description: 'Promote a specific version to be the active deployment.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                desktop_wallpaper_url: {
-                    type: "string",
-                    description: "HTTPS URL for the default desktop wallpaper (optional)",
-                },
-                logo_url: {
-                    type: "string",
-                    description: "HTTPS URL for the tenant logo (optional)",
-                },
+                deployment_id: { type: 'string', description: 'Deployment ID' },
+                version_id: { type: 'string', description: 'Version ID to promote' },
             },
+            required: ['deployment_id', 'version_id'],
         },
     },
+    // Storage
     {
-        name: "settings_compute_pricing",
-        description: "Get compute pricing information for available sizes and GPU types.",
-        inputSchema: { type: "object", properties: {} },
+        name: 'storage_bucket_list',
+        description: 'List all storage buckets in the tenant.',
+        inputSchema: { type: 'object', properties: {} },
     },
-    // Sandbox template extensions
     {
-        name: "sandbox_template_get",
-        description: "Get details of a specific sandbox template.",
+        name: 'storage_bucket_create',
+        description: 'Create a new storage bucket.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                template_id: {
-                    type: "string",
-                    description: "Sandbox template ID or slug",
-                },
+                name: { type: 'string', description: 'Bucket name' },
+                region: { type: 'string', description: 'Bucket region (optional)' },
+                public: { type: 'boolean', description: 'Whether the bucket is publicly readable (default: false)', default: false },
             },
-            required: ["template_id"],
+            required: ['name'],
         },
     },
     {
-        name: "sandbox_template_builds",
-        description: "List builds for a sandbox template.",
+        name: 'storage_bucket_delete',
+        description: 'Delete a storage bucket.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                template_id: {
-                    type: "string",
-                    description: "Sandbox template ID or slug",
-                },
+                bucket_id: { type: 'string', description: 'Bucket ID or name to delete' },
             },
-            required: ["template_id"],
+            required: ['bucket_id'],
         },
     },
-    // Cron jobs
     {
-        name: "cron_list",
-        description: "List all cron jobs in the tenant, optionally filtered by computer.",
+        name: 'storage_object_list',
+        description: 'List objects in a storage bucket, optionally filtered by prefix.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                computer_id: {
-                    type: "string",
-                    description: "Filter cron jobs by computer ID (optional)",
-                },
+                bucket_id: { type: 'string', description: 'Bucket ID or name' },
+                prefix: { type: 'string', description: 'Key prefix to filter by (optional)' },
             },
+            required: ['bucket_id'],
         },
     },
     {
-        name: "cron_create",
-        description: "Create a new cron job that runs a command on a schedule.",
+        name: 'storage_object_upload',
+        description: 'Upload an object to a storage bucket.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                computer_id: {
-                    type: "string",
-                    description: "ID of the computer to run the cron job on",
-                },
-                schedule: {
-                    type: "string",
-                    description: "Cron schedule expression (e.g. '0 * * * *' for hourly)",
-                },
-                command: {
-                    type: "string",
-                    description: "Shell command to execute",
-                },
-                name: {
-                    type: "string",
-                    description: "Human-readable name for the cron job (optional)",
-                },
+                bucket_id: { type: 'string', description: 'Bucket ID or name' },
+                key: { type: 'string', description: 'Object key (path within bucket)' },
+                content: { type: 'string', description: 'Object content (text or base64-encoded binary)' },
+                content_type: { type: 'string', description: 'MIME type of the object (optional)' },
             },
-            required: ["computer_id", "schedule", "command"],
+            required: ['bucket_id', 'key', 'content'],
         },
     },
     {
-        name: "cron_get",
-        description: "Get details of a specific cron job.",
+        name: 'storage_object_download',
+        description: 'Download an object from a storage bucket.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                cron_id: { type: "string", description: "Cron job ID" },
+                bucket_id: { type: 'string', description: 'Bucket ID or name' },
+                key: { type: 'string', description: 'Object key to download' },
             },
-            required: ["cron_id"],
+            required: ['bucket_id', 'key'],
         },
     },
     {
-        name: "cron_delete",
-        description: "Delete a cron job permanently.",
+        name: 'storage_object_delete',
+        description: 'Delete an object from a storage bucket.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                cron_id: { type: "string", description: "Cron job ID to delete" },
+                bucket_id: { type: 'string', description: 'Bucket ID or name' },
+                key: { type: 'string', description: 'Object key to delete' },
             },
-            required: ["cron_id"],
+            required: ['bucket_id', 'key'],
         },
     },
     {
-        name: "cron_pause",
-        description: "Pause a cron job so it stops running on schedule.",
+        name: 'storage_presign',
+        description: 'Get a presigned URL for temporary access to a storage object.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                cron_id: { type: "string", description: "Cron job ID to pause" },
+                bucket_id: { type: 'string', description: 'Bucket ID or name' },
+                key: { type: 'string', description: 'Object key' },
+                expires_in: { type: 'integer', description: 'URL expiry in seconds (default: 3600)', default: 3600 },
+                method: { type: 'string', enum: ['GET', 'PUT'], description: 'HTTP method (default: GET)', default: 'GET' },
             },
-            required: ["cron_id"],
+            required: ['bucket_id', 'key'],
         },
     },
+    // Databases
+    {
+        name: 'database_list',
+        description: 'List all managed databases in the tenant.',
+        inputSchema: { type: 'object', properties: {} },
+    },
     {
-        name: "cron_resume",
-        description: "Resume a paused cron job.",
+        name: 'database_create',
+        description: 'Create a new managed database.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                cron_id: { type: "string", description: "Cron job ID to resume" },
+                name: { type: 'string', description: 'Database name' },
+                engine: { type: 'string', enum: ['postgres', 'postgresql', 'mysql', 'redis'], description: 'Database engine' },
+                version: { type: 'string', description: 'Engine version (optional)' },
+                size: { type: 'string', description: 'Database size/tier (optional)' },
+                region: { type: 'string', description: 'Region (optional)' },
             },
-            required: ["cron_id"],
+            required: ['name', 'engine'],
         },
     },
     {
-        name: "cron_run_now",
-        description: "Trigger an immediate one-off execution of a cron job outside its schedule.",
+        name: 'database_get',
+        description: 'Get details of a specific database.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                cron_id: {
-                    type: "string",
-                    description: "Cron job ID to run immediately",
-                },
+                database_id: { type: 'string', description: 'Database ID' },
             },
-            required: ["cron_id"],
+            required: ['database_id'],
         },
     },
     {
-        name: "cron_executions",
-        description: "List recent execution history for a cron job.",
+        name: 'database_delete',
+        description: 'Delete a managed database permanently.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                cron_id: { type: "string", description: "Cron job ID" },
+                database_id: { type: 'string', description: 'Database ID to delete' },
             },
-            required: ["cron_id"],
+            required: ['database_id'],
         },
     },
-    // Volumes
     {
-        name: "volume_list",
-        description: "List all volumes in the tenant.",
-        inputSchema: { type: "object", properties: {} },
+        name: 'database_credentials',
+        description: 'Get the connection string and credentials for a database.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                database_id: { type: 'string', description: 'Database ID' },
+            },
+            required: ['database_id'],
+        },
     },
     {
-        name: "volume_create",
-        description: "Create a new persistent volume.",
+        name: 'database_logs',
+        description: 'Get logs for a managed database.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                name: {
-                    type: "string",
-                    description: "Human-readable name for the volume",
-                },
-                size_gb: {
-                    type: "integer",
-                    description: "Size of the volume in GB (optional)",
-                },
-                region: {
-                    type: "string",
-                    description: "Region to create the volume in (optional)",
-                },
+                database_id: { type: 'string', description: 'Database ID' },
+                lines: { type: 'integer', description: 'Number of log lines to return (default: 100)', default: 100 },
+                since: { type: 'string', description: 'ISO 8601 timestamp to fetch logs from (optional)' },
             },
-            required: ["name"],
+            required: ['database_id'],
         },
     },
+    // Workspaces
+    {
+        name: 'workspace_list',
+        description: 'List all workspaces in the tenant.',
+        inputSchema: { type: 'object', properties: {} },
+    },
     {
-        name: "volume_get",
-        description: "Get details of a specific volume.",
+        name: 'workspace_create',
+        description: 'Create a new workspace.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                volume_id: { type: "string", description: "Volume ID" },
+                name: { type: 'string', description: 'Workspace name' },
+                description: { type: 'string', description: 'Workspace description (optional)' },
             },
-            required: ["volume_id"],
+            required: ['name'],
         },
     },
     {
-        name: "volume_delete",
-        description: "Delete a volume permanently.",
+        name: 'workspace_get',
+        description: 'Get details of a specific workspace.',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                volume_id: { type: "string", description: "Volume ID to delete" },
+                workspace_id: { type: 'string', description: 'Workspace ID' },
             },
-            required: ["volume_id"],
+            required: ['workspace_id'],
         },
     },
     {
-        name: "volume_attach",
-        description: "Attach a volume to a computer at a given mount path.",
+        name: 'workspace_update',
+        description: "Update a workspace's name or description.",
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                computer_id: {
-                    type: "string",
-                    description: "Computer ID to attach the volume to",
-                },
-                volume_id: { type: "string", description: "Volume ID to attach" },
-                mount_path: {
-                    type: "string",
-                    description: "Path inside the VM to mount the volume (optional)",
-                },
+                workspace_id: { type: 'string', description: 'Workspace ID' },
+                name: { type: 'string', description: 'New workspace name (optional)' },
+                description: { type: 'string', description: 'New description (optional)' },
             },
-            required: ["computer_id", "volume_id"],
+            required: ['workspace_id'],
         },
     },
     {
-        name: "volume_detach",
-        description: "Detach a volume attachment from a computer.",
+        name: 'workspace_stats',
+        description: 'Get resource statistics for a workspace (computers, sandboxes, databases, etc.).',
         inputSchema: {
-            type: "object",
+            type: 'object',
             properties: {
-                computer_id: { type: "string", description: "Computer ID" },
-                attachment_id: {
-                    type: "string",
-                    description: "Attachment ID to remove",
-                },
+                workspace_id: { type: 'string', description: 'Workspace ID' },
+            },
+            required: ['workspace_id'],
+        },
+    },
+    {
+        name: 'workspace_usage',
+        description: 'Get usage data (compute hours, storage, bandwidth) for a workspace.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                workspace_id: { type: 'string', description: 'Workspace ID' },
+                period: { type: 'string', description: "Billing period (e.g. '2026-05'). Defaults to current month." },
             },
-            required: ["computer_id", "attachment_id"],
+            required: ['workspace_id'],
         },
     },
+    // Billing
+    {
+        name: 'billing_usage',
+        description: 'Get current billing period usage for the tenant.',
+        inputSchema: { type: 'object', properties: {} },
+    },
+    {
+        name: 'billing_plan',
+        description: 'Get the current billing plan details for the tenant.',
+        inputSchema: { type: 'object', properties: {} },
+    },
 ];
 // ── Wire helpers ─────────────────────────────────────────────────────────────
 function ok(text) {
@@ -2290,6 +1677,16 @@ function ok(text) {
 function err(msg) {
     return { content: [{ type: "text", text: `Error: ${msg}` }], isError: true };
 }
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function commandInCwd(command, cwd) {
+    return cwd ? `cd ${shellQuote(cwd)} && ${command}` : command;
+}
+function normalizeDatabaseEngine(engine) {
+    const value = String(engine ?? "postgresql").trim().toLowerCase();
+    return value === "postgres" ? "postgresql" : value;
+}
 function image(pngBytes) {
     return {
         content: [
@@ -2321,10 +1718,6 @@ async function dispatchTool(client, name, args) {
                 body["external_workspace_id"] = args["external_workspace_id"];
             if (args["external_project_id"])
                 body["external_project_id"] = args["external_project_id"];
-            if (args["gpu_model"]) {
-                body["gpu_model"] = args["gpu_model"];
-                body["gpu_count"] = args["gpu_count"] ?? 1;
-            }
             const computer = await client.apiPost("/api/v1/computers", body);
             const data = unwrapData(computer);
             const id = String(data["id"] ?? "");
@@ -3057,9 +2450,14 @@ async function dispatchTool(client, name, args) {
             const sid = String(args["sandbox_id"] ?? "");
             if (!sid)
                 return err("sandbox_id is required");
-            const body = { command: args["command"] };
-            if (args["cwd"])
-                body["cwd"] = args["cwd"];
+            const cwd = args["cwd"] ? String(args["cwd"]) : undefined;
+            const body = {
+                command: commandInCwd(String(args["command"] ?? ""), cwd),
+            };
+            if (cwd) {
+                body["cwd"] = cwd;
+                body["dir"] = cwd;
+            }
             if (args["timeout"] !== undefined)
                 body["timeout"] = args["timeout"];
             const result = await client.apiPost(`/api/v1/sandboxes/${encodeURIComponent(sid)}/exec`, body);
@@ -3355,12 +2753,7 @@ async function dispatchTool(client, name, args) {
             const lines = ["Deployments:"];
             for (const d of items) {
                 const r = d;
-                lines.push("  " +
-                    r["id"] +
-                    "  " +
-                    r["name"] +
-                    "  " +
-                    (r["status"] ?? r["state"] ?? ""));
+                lines.push("  " + r["id"] + "  " + r["name"] + "  " + (r["status"] ?? r["state"] ?? ""));
             }
             return ok(lines.join("\n"));
         }
@@ -3383,11 +2776,7 @@ async function dispatchTool(client, name, args) {
                 body["region"] = args["region"];
             const result = await client.apiPost("/api/v1/deployments", body);
             const data = unwrapData(result);
-            return ok("Created deployment '" +
-                String(data["name"] ?? args["name"]) +
-                "' (id=" +
-                data["id"] +
-                ")");
+            return ok("Created deployment '" + String(data["name"] ?? args["name"]) + "' (id=" + data["id"] + ")");
         }
         if (name === "deployment_delete") {
             const did = String(args["deployment_id"] ?? "");
@@ -3405,11 +2794,7 @@ async function dispatchTool(client, name, args) {
                 body["source"] = args["source"];
             const result = await client.apiPost("/api/v1/deployments/" + encodeURIComponent(did) + "/publish", body);
             const data = unwrapData(result);
-            return ok("Published deployment " +
-                did +
-                " (version id=" +
-                (data["id"] ?? "unknown") +
-                ")");
+            return ok("Published deployment " + did + " (version id=" + (data["id"] ?? "unknown") + ")");
         }
         if (name === "deployment_rollback") {
             const did = String(args["deployment_id"] ?? "");
@@ -3427,8 +2812,7 @@ async function dispatchTool(client, name, args) {
                 return err("deployment_id is required");
             const result = await client.apiGet("/api/v1/deployments/" + encodeURIComponent(did) + "/env");
             const envVars = unwrapData(result);
-            if (!envVars ||
-                (Array.isArray(envVars) && envVars.length === 0))
+            if (!envVars || (Array.isArray(envVars) && envVars.length === 0))
                 return ok("No environment variables set.");
             const lines = ["Environment variables:"];
             if (typeof envVars === "object" && !Array.isArray(envVars)) {
@@ -3454,20 +2838,13 @@ async function dispatchTool(client, name, args) {
             const did = String(args["deployment_id"] ?? "");
             if (!did)
                 return err("deployment_id is required");
-            const params = new URLSearchParams({
-                lines: String(args["lines"] ?? 100),
-            });
+            const params = new URLSearchParams({ lines: String(args["lines"] ?? 100) });
             if (args["since"])
                 params.set("since", String(args["since"]));
-            const result = await client.apiGet("/api/v1/deployments/" +
-                encodeURIComponent(did) +
-                "/logs?" +
-                params.toString());
+            const result = await client.apiGet("/api/v1/deployments/" + encodeURIComponent(did) + "/logs?" + params.toString());
             const logs = unwrapData(result);
             if (Array.isArray(logs))
-                return ok(logs.length
-                    ? logs.map(String).join("\n")
-                    : "No logs.");
+                return ok(logs.length ? logs.map(String).join("\n") : "No logs.");
             return ok(String(logs));
         }
         if (name === "deployment_version_list") {
@@ -3481,12 +2858,7 @@ async function dispatchTool(client, name, args) {
             const lines = ["Versions:"];
             for (const v of versions) {
                 const r = v;
-                lines.push("  " +
-                    r["id"] +
-                    "  " +
-                    (r["created_at"] ?? "") +
-                    "  " +
-                    (r["status"] ?? ""));
+                lines.push("  " + r["id"] + "  " + (r["created_at"] ?? "") + "  " + (r["status"] ?? ""));
             }
             return ok(lines.join("\n"));
         }
@@ -3497,11 +2869,7 @@ async function dispatchTool(client, name, args) {
                 return err("deployment_id is required");
             if (!vid)
                 return err("version_id is required");
-            await client.apiPost("/api/v1/deployments/" +
-                encodeURIComponent(did) +
-                "/versions/" +
-                encodeURIComponent(vid) +
-                "/promote", {});
+            await client.apiPost("/api/v1/deployments/" + encodeURIComponent(did) + "/versions/" + encodeURIComponent(vid) + "/promote", {});
             return ok("Version " + vid + " promoted on deployment " + did + ".");
         }
         // ── Storage ───────────────────────────────────────────────────────────
@@ -3525,11 +2893,7 @@ async function dispatchTool(client, name, args) {
                 body["public"] = args["public"];
             const result = await client.apiPost("/api/v1/storage/buckets", body);
             const data = unwrapData(result);
-            return ok("Created bucket '" +
-                String(data["name"] ?? args["name"]) +
-                "' (id=" +
-                data["id"] +
-                ")");
+            return ok("Created bucket '" + String(data["name"] ?? args["name"]) + "' (id=" + data["id"] + ")");
         }
         if (name === "storage_bucket_delete") {
             const bid = String(args["bucket_id"] ?? "");
@@ -3553,12 +2917,7 @@ async function dispatchTool(client, name, args) {
             const lines = ["Objects:"];
             for (const o of items) {
                 const r = o;
-                lines.push("  " +
-                    r["key"] +
-                    "  " +
-                    (r["size"] ?? "") +
-                    "  " +
-                    (r["last_modified"] ?? ""));
+                lines.push("  " + r["key"] + "  " + (r["size"] ?? "") + "  " + (r["last_modified"] ?? ""));
             }
             return ok(lines.join("\n"));
         }
@@ -3577,10 +2936,7 @@ async function dispatchTool(client, name, args) {
             const bid = String(args["bucket_id"] ?? "");
             if (!bid)
                 return err("bucket_id is required");
-            const result = await client.apiGet("/api/v1/storage/buckets/" +
-                encodeURIComponent(bid) +
-                "/objects/" +
-                encodeURIComponent(String(args["key"] ?? "")));
+            const result = await client.apiGet("/api/v1/storage/buckets/" + encodeURIComponent(bid) + "/objects/" + encodeURIComponent(String(args["key"] ?? "")));
             const data = unwrapData(result);
             const content = typeof data["content"] === "string"
                 ? Buffer.from(data["content"], "base64").toString("utf8")
@@ -3593,10 +2949,7 @@ async function dispatchTool(client, name, args) {
             const bid = String(args["bucket_id"] ?? "");
             if (!bid)
                 return err("bucket_id is required");
-            await client.apiDelete("/api/v1/storage/buckets/" +
-                encodeURIComponent(bid) +
-                "/objects/" +
-                encodeURIComponent(String(args["key"] ?? "")));
+            await client.apiDelete("/api/v1/storage/buckets/" + encodeURIComponent(bid) + "/objects/" + encodeURIComponent(String(args["key"] ?? "")));
             return ok("Deleted " + String(args["key"]) + " from bucket " + bid + ".");
         }
         if (name === "storage_presign") {
@@ -3620,33 +2973,24 @@ async function dispatchTool(client, name, args) {
             const lines = ["Databases:"];
             for (const d of items) {
                 const r = d;
-                lines.push("  " +
-                    r["id"] +
-                    "  " +
-                    r["name"] +
-                    "  " +
-                    (r["engine"] ?? "") +
-                    "  " +
-                    (r["status"] ?? ""));
+                lines.push("  " + r["id"] + "  " + r["name"] + "  " + (r["engine"] ?? "") + "  " + (r["status"] ?? ""));
             }
             return ok(lines.join("\n"));
         }
         if (name === "database_create") {
-            const body = {
-                name: args["name"],
-                engine: args["engine"],
-            };
-            for (const key of ["version", "size", "region"]) {
+            const engine = normalizeDatabaseEngine(args["engine"]);
+            const body = { name: args["name"], engine };
+            if (engine === "postgresql" && !args["version"])
+                body["engine_version"] = "15";
+            for (const key of ["size", "region"]) {
                 if (args[key])
                     body[key] = args[key];
             }
+            if (args["version"])
+                body["engine_version"] = args["version"];
             const result = await client.apiPost("/api/v1/databases", body);
             const data = unwrapData(result);
-            return ok("Created database '" +
-                String(data["name"] ?? args["name"]) +
-                "' (id=" +
-                data["id"] +
-                ")");
+            return ok("Created database '" + String(data["name"] ?? args["name"]) + "' (id=" + data["id"] + ")");
         }
         if (name === "database_get") {
             const dbid = String(args["database_id"] ?? "");
@@ -3669,14 +3013,7 @@ async function dispatchTool(client, name, args) {
             const result = await client.apiGet("/api/v1/databases/" + encodeURIComponent(dbid) + "/credentials");
             const data = unwrapData(result);
             const lines = ["Database credentials:"];
-            for (const field of [
-                "connection_string",
-                "host",
-                "port",
-                "database",
-                "username",
-                "password",
-            ]) {
+            for (const field of ["connection_string", "host", "port", "database", "username", "password"]) {
                 if (data[field])
                     lines.push("  " + field + ": " + data[field]);
             }
@@ -3686,20 +3023,13 @@ async function dispatchTool(client, name, args) {
             const dbid = String(args["database_id"] ?? "");
             if (!dbid)
                 return err("database_id is required");
-            const params = new URLSearchParams({
-                lines: String(args["lines"] ?? 100),
-            });
+            const params = new URLSearchParams({ lines: String(args["lines"] ?? 100) });
             if (args["since"])
                 params.set("since", String(args["since"]));
-            const result = await client.apiGet("/api/v1/databases/" +
-                encodeURIComponent(dbid) +
-                "/logs?" +
-                params.toString());
+            const result = await client.apiGet("/api/v1/databases/" + encodeURIComponent(dbid) + "/logs?" + params.toString());
             const logs = unwrapData(result);
             if (Array.isArray(logs))
-                return ok(logs.length
-                    ? logs.map(String).join("\n")
-                    : "No logs.");
+                return ok(logs.length ? logs.map(String).join("\n") : "No logs.");
             return ok(String(logs));
         }
         // ── Workspaces ────────────────────────────────────────────────────────
@@ -3721,11 +3051,7 @@ async function dispatchTool(client, name, args) {
                 body["description"] = args["description"];
             const result = await client.apiPost("/api/v1/workspaces", body);
             const data = unwrapData(result);
-            return ok("Created workspace '" +
-                String(data["name"] ?? args["name"]) +
-                "' (id=" +
-                data["id"] +
-                ")");
+            return ok("Created workspace '" + String(data["name"] ?? args["name"]) + "' (id=" + data["id"] + ")");
         }
         if (name === "workspace_get") {
             const wid = String(args["workspace_id"] ?? "");
@@ -3773,425 +3099,6 @@ async function dispatchTool(client, name, args) {
             const result = await client.apiGet("/api/v1/billing/plan");
             return ok(JSON.stringify(unwrapData(result), null, 2));
         }
-        // ── Tunnels / Port forwarding ─────────────────────────────────────────
-        if (name === "computer_expose_port") {
-            if (!cid)
-                return err("computer_id is required");
-            const body = { port: args["port"] };
-            if (args["protocol"])
-                body["protocol"] = args["protocol"];
-            const result = await client.apiPost(`/api/v1/computers/${encodeURIComponent(cid)}/ports`, body);
-            const data = unwrapData(result);
-            const url = String(data["url"] ?? data["public_url"] ?? "");
-            return ok(`Port ${args["port"]} exposed. URL: ${url}`);
-        }
-        if (name === "computer_list_ports") {
-            if (!cid)
-                return err("computer_id is required");
-            const result = await client.apiGet(`/api/v1/computers/${encodeURIComponent(cid)}/ports`);
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No ports currently exposed.");
-            const lines = ["Exposed ports:"];
-            for (const p of items) {
-                const r = p;
-                lines.push(`  port=${r["port"]}  protocol=${r["protocol"] ?? "http"}  url=${r["url"] ?? r["public_url"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "computer_preview_url") {
-            if (!cid)
-                return err("computer_id is required");
-            const port = args["port"];
-            const result = await client.apiGet(`/api/v1/computers/${encodeURIComponent(cid)}/ports/${encodeURIComponent(String(port))}/url`);
-            const data = unwrapData(result);
-            const url = String(data["url"] ?? data["public_url"] ?? "") ||
-                `https://${port}-${cid}.computer.miosa.ai`;
-            return ok(`Preview URL: ${url}`);
-        }
-        // ── Network policy ────────────────────────────────────────────────────
-        if (name === "computer_network_policy_get") {
-            if (!cid)
-                return err("computer_id is required");
-            const result = await client.apiGet(`/api/v1/computers/${encodeURIComponent(cid)}/network-policy`);
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        if (name === "computer_network_policy_set") {
-            if (!cid)
-                return err("computer_id is required");
-            const body = { rules: args["rules"] };
-            if (args["default_effect"])
-                body["default_effect"] = args["default_effect"];
-            await client.apiPut(`/api/v1/computers/${encodeURIComponent(cid)}/network-policy`, body);
-            return ok(`Network policy updated for computer ${cid}.`);
-        }
-        if (name === "computer_network_policy_reset") {
-            if (!cid)
-                return err("computer_id is required");
-            await client.apiDelete(`/api/v1/computers/${encodeURIComponent(cid)}/network-policy`);
-            return ok(`Network policy reset to default for computer ${cid}.`);
-        }
-        // ── Webhooks ──────────────────────────────────────────────────────────
-        if (name === "webhook_list") {
-            const result = await client.apiGet("/api/v1/webhooks");
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No webhooks found.");
-            const lines = ["Webhooks:"];
-            for (const w of items) {
-                const r = w;
-                lines.push(`  ${r["id"]}  ${r["url"]}  events=${JSON.stringify(r["events"] ?? [])}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "webhook_create") {
-            const result = await client.apiPost("/api/v1/webhooks", {
-                url: args["url"],
-                events: args["events"],
-            });
-            const data = unwrapData(result);
-            return ok(`Created webhook (id=${data["id"] ?? "?"}).`);
-        }
-        if (name === "webhook_delete") {
-            const whId = String(args["webhook_id"] ?? "");
-            if (!whId)
-                return err("webhook_id is required");
-            await client.apiDelete(`/api/v1/webhooks/${encodeURIComponent(whId)}`);
-            return ok(`Webhook ${whId} deleted.`);
-        }
-        if (name === "webhook_test") {
-            const whId = String(args["webhook_id"] ?? "");
-            if (!whId)
-                return err("webhook_id is required");
-            const result = await client.apiPost(`/api/v1/webhooks/${encodeURIComponent(whId)}/test`, {});
-            const data = unwrapData(result);
-            const status = String(data["status"] ?? "delivered");
-            return ok(`Test event sent to webhook ${whId} (status=${status}).`);
-        }
-        // ── Functions ─────────────────────────────────────────────────────────
-        if (name === "function_list") {
-            const result = await client.apiGet("/api/v1/functions");
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No functions found.");
-            const lines = ["Functions:"];
-            for (const f of items) {
-                const r = f;
-                lines.push(`  ${r["id"]}  ${r["name"]}  runtime=${r["runtime"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "function_create") {
-            const body = {
-                name: args["name"],
-                runtime: args["runtime"],
-            };
-            if (args["code"])
-                body["code"] = args["code"];
-            const result = await client.apiPost("/api/v1/functions", body);
-            const data = unwrapData(result);
-            return ok(`Created function '${data["name"] ?? args["name"]}' (id=${data["id"]}).`);
-        }
-        if (name === "function_invoke") {
-            const fnId = String(args["function_id"] ?? "");
-            if (!fnId)
-                return err("function_id is required");
-            const body = {};
-            if (args["payload"] !== undefined)
-                body["payload"] = args["payload"];
-            const result = await client.apiPost(`/api/v1/functions/${encodeURIComponent(fnId)}/invoke`, body);
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        if (name === "function_delete") {
-            const fnId = String(args["function_id"] ?? "");
-            if (!fnId)
-                return err("function_id is required");
-            await client.apiDelete(`/api/v1/functions/${encodeURIComponent(fnId)}`);
-            return ok(`Function ${fnId} deleted.`);
-        }
-        // ── API Keys ──────────────────────────────────────────────────────────
-        if (name === "api_key_list") {
-            const result = await client.apiGet("/api/v1/api-keys");
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No API keys found.");
-            const lines = ["API keys:"];
-            for (const k of items) {
-                const r = k;
-                const scopes = Array.isArray(r["scopes"])
-                    ? r["scopes"].join(", ")
-                    : String(r["scopes"] ?? "");
-                lines.push(`  ${r["id"]}  ${r["name"]}  scopes=[${scopes}]`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "api_key_create") {
-            const body = { name: args["name"] };
-            if (args["scopes"])
-                body["scopes"] = args["scopes"];
-            const result = await client.apiPost("/api/v1/api-keys", body);
-            const data = unwrapData(result);
-            const keyId = String(data["id"] ?? "?");
-            const keyValue = String(data["key"] ?? data["token"] ?? data["secret"] ?? "");
-            let msg = `Created API key '${args["name"]}' (id=${keyId}).`;
-            if (keyValue)
-                msg += `\nKey value (shown once): ${keyValue}`;
-            return ok(msg);
-        }
-        if (name === "api_key_delete") {
-            const keyId = String(args["key_id"] ?? "");
-            if (!keyId)
-                return err("key_id is required");
-            await client.apiDelete(`/api/v1/api-keys/${encodeURIComponent(keyId)}`);
-            return ok(`API key ${keyId} deleted.`);
-        }
-        // ── Cron jobs ─────────────────────────────────────────────────────────
-        if (name === "cron_list") {
-            const params = new URLSearchParams();
-            if (args["computer_id"])
-                params.set("computer_id", String(args["computer_id"]));
-            const qs = params.toString() ? `?${params.toString()}` : "";
-            const result = await client.apiGet(`/api/v1/cron-jobs${qs}`);
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No cron jobs found.");
-            const lines = ["Cron jobs:"];
-            for (const j of items) {
-                const r = j;
-                lines.push(`  ${r["id"]}  ${r["name"] ?? ""}  ${r["schedule"] ?? ""}  status=${r["status"] ?? r["state"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "cron_create") {
-            const body = {
-                computer_id: args["computer_id"],
-                schedule: args["schedule"],
-                command: args["command"],
-            };
-            if (args["name"])
-                body["name"] = args["name"];
-            const result = await client.apiPost("/api/v1/cron-jobs", body);
-            const data = unwrapData(result);
-            return ok(`Created cron job '${data["name"] ?? args["name"] ?? ""}' (id=${data["id"]}).`);
-        }
-        if (name === "cron_get") {
-            const cronId = String(args["cron_id"] ?? "");
-            if (!cronId)
-                return err("cron_id is required");
-            const result = await client.apiGet(`/api/v1/cron-jobs/${encodeURIComponent(cronId)}`);
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        if (name === "cron_delete") {
-            const cronId = String(args["cron_id"] ?? "");
-            if (!cronId)
-                return err("cron_id is required");
-            await client.apiDelete(`/api/v1/cron-jobs/${encodeURIComponent(cronId)}`);
-            return ok(`Cron job ${cronId} deleted.`);
-        }
-        if (name === "cron_pause") {
-            const cronId = String(args["cron_id"] ?? "");
-            if (!cronId)
-                return err("cron_id is required");
-            await client.apiPost(`/api/v1/cron-jobs/${encodeURIComponent(cronId)}/pause`, {});
-            return ok(`Cron job ${cronId} paused.`);
-        }
-        if (name === "cron_resume") {
-            const cronId = String(args["cron_id"] ?? "");
-            if (!cronId)
-                return err("cron_id is required");
-            await client.apiPost(`/api/v1/cron-jobs/${encodeURIComponent(cronId)}/resume`, {});
-            return ok(`Cron job ${cronId} resumed.`);
-        }
-        if (name === "cron_run_now") {
-            const cronId = String(args["cron_id"] ?? "");
-            if (!cronId)
-                return err("cron_id is required");
-            const result = await client.apiPost(`/api/v1/cron-jobs/${encodeURIComponent(cronId)}/run-now`, {});
-            const data = unwrapData(result);
-            const execId = data["id"] ?? data["execution_id"];
-            return ok(`Cron job ${cronId} triggered.${execId ? ` Execution id=${execId}.` : ""}`);
-        }
-        if (name === "cron_executions") {
-            const cronId = String(args["cron_id"] ?? "");
-            if (!cronId)
-                return err("cron_id is required");
-            const result = await client.apiGet(`/api/v1/cron-jobs/${encodeURIComponent(cronId)}/executions`);
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No executions found.");
-            const lines = ["Executions:"];
-            for (const e of items) {
-                const r = e;
-                lines.push(`  ${r["id"]}  ${r["started_at"] ?? r["created_at"] ?? ""}  status=${r["status"] ?? ""}  exit_code=${r["exit_code"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        // ── Regions ────────────────────────────────────────────────────────────
-        if (name === "region_list" || name === "computer_list_regions") {
-            const result = await client.apiGet("/api/v1/regions");
-            const regions = (() => {
-                const d = unwrapData(result);
-                if (Array.isArray(d))
-                    return d;
-                const r = d;
-                for (const key of ["regions", "data", "items"]) {
-                    if (Array.isArray(r[key]))
-                        return r[key];
-                }
-                return Object.values(r);
-            })();
-            if (regions.length === 0)
-                return ok("No regions found.");
-            const lines = ["Regions:"];
-            for (const region of regions) {
-                const r = region;
-                const gpuTypes = r["gpu_types"] ?? r["gpus"] ?? [];
-                const gpuInfo = Array.isArray(gpuTypes) && gpuTypes.length > 0
-                    ? `  gpus=${JSON.stringify(gpuTypes)}`
-                    : "";
-                lines.push(`  ${r["id"] ?? r["slug"] ?? ""}  ${r["name"] ?? ""}  status=${r["status"] ?? "available"}${gpuInfo}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        // ── Computer templates ─────────────────────────────────────────────────
-        if (name === "computer_template_list") {
-            const wid = String(args["workspace_id"] ?? "");
-            if (!wid)
-                return err("workspace_id is required");
-            const result = await client.apiGet(`/api/v1/workspaces/${encodeURIComponent(wid)}/computer-templates`);
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No computer templates found.");
-            const lines = ["Computer templates:"];
-            for (const t of items) {
-                const r = t;
-                lines.push(`  ${r["id"]}  ${r["name"]}  type=${r["template_type"] ?? ""}  size=${r["size"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "computer_template_create") {
-            const wid = String(args["workspace_id"] ?? "");
-            if (!wid)
-                return err("workspace_id is required");
-            const body = { name: args["name"] };
-            if (args["template_type"])
-                body["template_type"] = args["template_type"];
-            if (args["size"])
-                body["size"] = args["size"];
-            if (args["selected_apps"])
-                body["selected_apps"] = args["selected_apps"];
-            if (args["settings"])
-                body["settings"] = args["settings"];
-            const result = await client.apiPost(`/api/v1/workspaces/${encodeURIComponent(wid)}/computer-templates`, body);
-            const data = unwrapData(result);
-            return ok(`Created computer template '${data["name"] ?? args["name"]}' (id=${data["id"]}).`);
-        }
-        // ── Settings ───────────────────────────────────────────────────────────
-        if (name === "settings_get") {
-            const result = await client.apiGet("/api/v1/settings");
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        if (name === "settings_get_branding") {
-            const result = await client.apiGet("/api/v1/settings/branding");
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        if (name === "settings_update_branding") {
-            const body = {};
-            if (args["desktop_wallpaper_url"])
-                body["desktop_wallpaper_url"] = args["desktop_wallpaper_url"];
-            if (args["logo_url"])
-                body["logo_url"] = args["logo_url"];
-            const result = await client.apiPut("/api/v1/settings/branding", body);
-            return ok(`Branding updated: ${JSON.stringify(unwrapData(result), null, 2)}`);
-        }
-        if (name === "settings_compute_pricing") {
-            const result = await client.apiGet("/api/v1/settings/compute-pricing");
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        // ── Sandbox template extensions ────────────────────────────────────────
-        if (name === "sandbox_template_get") {
-            const tid = String(args["template_id"] ?? "");
-            if (!tid)
-                return err("template_id is required");
-            const result = await client.apiGet(`/api/v1/sandbox-templates/${encodeURIComponent(tid)}`);
-            return ok(JSON.stringify(unwrapData(result), null, 2));
-        }
-        if (name === "sandbox_template_builds") {
-            const tid = String(args["template_id"] ?? "");
-            if (!tid)
-                return err("template_id is required");
-            const result = await client.apiGet(`/api/v1/sandbox-templates/${encodeURIComponent(tid)}/builds`);
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No builds found.");
-            const lines = ["Builds:"];
-            for (const b of items) {
-                const r = b;
-                lines.push(`  ${r["id"]}  ${r["status"] ?? ""}  created_at=${r["created_at"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        // ── Volumes ───────────────────────────────────────────────────────────
-        if (name === "volume_list") {
-            const result = await client.apiGet("/api/v1/volumes");
-            const items = listOf(result);
-            if (items.length === 0)
-                return ok("No volumes found.");
-            const lines = ["Volumes:"];
-            for (const v of items) {
-                const r = v;
-                lines.push(`  ${r["id"]}  ${r["name"]}  size_gb=${r["size_gb"] ?? ""}  region=${r["region"] ?? ""}  status=${r["status"] ?? ""}`);
-            }
-            return ok(lines.join("\n"));
-        }
-        if (name === "volume_create") {
-            const body = { name: args["name"] };
-            if (args["size_gb"] !== undefined)
-                body["size_gb"] = args["size_gb"];
-            if (args["region"])
-                body["region"] = args["region"];
-            const result = await client.apiPost("/api/v1/volumes", body);
-            const data = unwrapData(result);
-            return ok(`Created volume '${data["name"] ?? args["name"]}' (id=${data["id"]}).`);
-        }
-        if (name === "volume_get") {
-            const vid = String(args["volume_id"] ?? "");
-            if (!vid)
-                return err("volume_id is required");
-            const result = await client.apiGet(`/api/v1/volumes/${encodeURIComponent(vid)}`);
-            const data = unwrapData(result);
-            return ok(`id=${data["id"]}  name=${JSON.stringify(data["name"])}  size_gb=${data["size_gb"] ?? ""}  region=${data["region"] ?? ""}  status=${data["status"] ?? ""}`);
-        }
-        if (name === "volume_delete") {
-            const vid = String(args["volume_id"] ?? "");
-            if (!vid)
-                return err("volume_id is required");
-            await client.apiDelete(`/api/v1/volumes/${encodeURIComponent(vid)}`);
-            return ok(`Volume ${vid} deleted.`);
-        }
-        if (name === "volume_attach") {
-            const attachCid = String(args["computer_id"] ?? "");
-            if (!attachCid)
-                return err("computer_id is required");
-            const attachBody = {
-                volume_id: args["volume_id"],
-            };
-            if (args["mount_path"])
-                attachBody["mount_path"] = args["mount_path"];
-            const result = await client.apiPost(`/api/v1/computers/${encodeURIComponent(attachCid)}/volumes`, attachBody);
-            const data = unwrapData(result);
-            return ok(`Volume ${args["volume_id"]} attached to computer ${attachCid} (attachment id=${data["id"] ?? "?"}).`);
-        }
-        if (name === "volume_detach") {
-            const detachCid = String(args["computer_id"] ?? "");
-            if (!detachCid)
-                return err("computer_id is required");
-            const attId = String(args["attachment_id"] ?? "");
-            if (!attId)
-                return err("attachment_id is required");
-            await client.apiDelete(`/api/v1/computers/${encodeURIComponent(detachCid)}/volumes/${encodeURIComponent(attId)}`);
-            return ok(`Attachment ${attId} removed from computer ${detachCid}.`);
-        }
         return err(`Unknown tool: ${name}`);
     }
     catch (e) {
@@ -4256,47 +3163,7 @@ async function runServer() {
                     result: {
                         protocolVersion: "2024-11-05",
                         capabilities: { tools: {} },
-                        serverInfo: { name: "miosa-mcp", version: "0.1.2" },
-                        instructions: [
-                            "MIOSA cloud infrastructure — Firecracker microVMs you control via API.",
-                            "",
-                            "## Concepts",
-                            "- **Computer**: full Linux desktop VM (GUI, browser, apps). Use for visual tasks, browser automation, desktop control.",
-                            "- **Sandbox**: headless Linux VM. Use for code execution, builds, CI, scripts. No desktop.",
-                            "- **Deployment**: git-based app hosting with builds, releases, domains.",
-                            "- **Storage**: S3-compatible object storage (buckets + objects).",
-                            "- **Database**: managed Postgres, MySQL, or Redis.",
-                            "- **Volume**: persistent block storage, attachable to computers.",
-                            "",
-                            "## Core workflows",
-                            "",
-                            "### Run code (sandbox)",
-                            "create_sandbox → exec (or exec_python) → read output → destroy_sandbox",
-                            "",
-                            "### Desktop automation (computer)",
-                            "computer_create → computer_screenshot → computer_click/type/key → computer_screenshot → repeat",
-                            "",
-                            "### Deploy an app",
-                            "deployment_create(repo_url) → deployment_publish → custom_domain_add (optional)",
-                            "",
-                            "### Store files",
-                            "storage_bucket_create → storage_object_upload → storage_object_presign (for public URL)",
-                            "",
-                            "### Provision a database",
-                            'database_create(engine="postgres") → database_credentials → use connection string',
-                            "",
-                            "## Conventions",
-                            "- IDs: pass computer_id or sandbox_id to every tool that operates on a resource.",
-                            "- Sizes: xs (1cpu/2GB), small (2cpu/4GB), medium (4cpu/8GB), large (8cpu/16GB), xl (16cpu/32GB).",
-                            '- Status: "running" = ready. Poll with get/list until status is "running".',
-                            "- File paths inside VMs: /workspace is the default working directory. /home/user also writable.",
-                            "- exec timeout: default 30s. For installs (npm/pip), set timeout_ms=120000.",
-                            "- Screenshots: PNG bytes, 1024x768 default. Coordinates are absolute pixels from top-left (0,0).",
-                            "",
-                            "## Tool naming",
-                            "{resource}_{action} — e.g. computer_create, sandbox_exec, storage_bucket_list.",
-                            "Desktop tools: computer_screenshot, computer_click, computer_type, computer_key, computer_scroll.",
-                        ].join("\n"),
+                        serverInfo: { name: "miosa-mcp", version: "0.1.1" },
                     },
                 });
                 break;
@@ -4368,19 +3235,17 @@ async function runDeviceFlow(endpoint, clientName) {
     }
     const flow = start.body;
     console.log();
-    console.log(`  ${banner({ subtitle: "MCP install" })}`);
+    console.log(chalk.bold("Authorize MIOSA MCP for this device"));
     console.log();
-    console.log(kvPanel([
-        { label: "Open", value: chalk.cyan(flow.verification_uri_complete) },
-        { label: "Code", value: chalk.bold(flow.user_code) },
-    ]));
+    console.log(`  Open: ${chalk.cyan(flow.verification_uri_complete)}`);
+    console.log(`  Code: ${chalk.bold(flow.user_code)}`);
     console.log();
     try {
         openUrl(flow.verification_uri_complete);
-        console.log(`  ${icon.pending}  ${chalk.dim("Browser opened. Waiting for approval…")}`);
+        console.log(chalk.dim("  Browser opened. Waiting for approval..."));
     }
     catch {
-        console.log(`  ${icon.warn}  ${chalk.dim("Could not open a browser automatically.")}`);
+        console.log(chalk.dim("  Could not open a browser automatically."));
     }
     const deadline = Date.now() + flow.expires_in * 1000;
     const intervalMs = Math.max(flow.interval || 3, 1) * 1000;
@@ -4467,50 +3332,26 @@ function printManualSnippet(client, apiKey, remoteUrl) {
     console.log(`    ${chalk.cyan(`--header "Authorization: Bearer ${apiKey}"`)}`);
 }
 async function runInstall(opts) {
-    const startTime = Date.now();
     const config = loadConfig();
     const clientName = `MIOSA MCP (${opts.client === "manual" ? "manual" : opts.client})`;
+    console.log(chalk.bold("MIOSA MCP installer"), chalk.dim(`— wiring ${opts.client} → ${opts.remoteUrl}`));
     const apiKey = await runDeviceFlow(config.endpoint, clientName);
     if (opts.client === "claude") {
         const wired = wireClaudeCode(apiKey, opts.remoteUrl, opts.scope);
         if (wired.ok) {
             console.log();
-            console.log(kvPanel([
-                {
-                    icon: icon.ok,
-                    label: "Server",
-                    value: chalk.bold(MCP_SERVER_NAME),
-                },
-                {
-                    icon: icon.ok,
-                    label: "Client",
-                    value: chalk.bold("Claude Code") + chalk.dim(` · ${opts.scope} scope`),
-                },
-                {
-                    icon: icon.ok,
-                    label: "Endpoint",
-                    value: chalk.dim(opts.remoteUrl),
-                },
-            ]));
+            console.log(chalk.green("✓"), `MCP server '${MCP_SERVER_NAME}' added to Claude Code (${opts.scope} scope).`);
+            console.log();
+            console.log(chalk.dim("Verify:"));
+            console.log(`  ${chalk.cyan("claude mcp list")}`);
             console.log();
-            console.log(hintBlock("Next", [
-                "claude mcp list",
-                "Try in Claude Code: 'Create a MIOSA sandbox and run python -c print(2+2)'",
-            ]));
-            printElapsed(formatDuration(Date.now() - startTime));
+            console.log(chalk.dim("Try in a fresh Claude Code session:"));
+            console.log(chalk.dim(`  "Create a MIOSA sandbox, run \`python -c 'print(2+2)'\`, then destroy it."`));
             return;
         }
         console.log();
-        console.log(errorEnvelope({
-            title: "Could not auto-wire Claude Code",
-            body: wired.reason,
-            suggest: [
-                "miosa mcp install  # try again",
-                "miosa mcp install --client manual  # get the snippet instead",
-            ],
-            withDebugHint: true,
-        }));
-        console.log();
+        console.log(chalk.yellow("!"), `Could not auto-wire Claude Code: ${wired.reason}`);
+        console.log(chalk.yellow("  Falling back to manual snippet:"));
         printManualSnippet("claude", apiKey, opts.remoteUrl);
         return;
     }
@@ -4548,16 +3389,7 @@ export function register(program) {
         }
         catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
-            console.log();
-            console.log(errorEnvelope({
-                title: "MCP install failed",
-                body: msg,
-                suggest: [
-                    "miosa mcp install  # try again",
-                    "miosa login  # re-authenticate first",
-                ],
-                withDebugHint: true,
-            }));
+            console.error(chalk.red(`Error: ${msg}`));
             process.exit(3);
         }
     });