@roxyon/mcp 0.9.0 → 0.10.0

package/dist/{chunk-UO5XO6D2.js → chunk-BNRJ2C63.js}

@@ -4,10 +4,7 @@
 import { createRequire } from "module";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
-// src/baas-tools.ts
-import { readFile } from "fs/promises";
-import { join, resolve } from "path";
-import { BAAS_MAX_BATCH, BAAS_MAX_PAGE, BaasDataApi, parseEnv } from "@roxyon/api-client";
+// src/account-tools.ts
 import { z } from "zod";
 
 // src/context.ts
@@ -86,9 +83,109 @@ async function guard(fn) {
   }
 }
 
+// src/account-tools.ts
+var catalogue = [];
+var bridge = null;
+async function loadAccountTools(env, doFetch = globalThis.fetch) {
+  const url = (env.ROXYON_ENGAGE_URL ?? "").replace(/\/+$/, "");
+  const key = env.ROXYON_CONNECTOR_KEY ?? "";
+  if (!url || !key) return 0;
+  bridge = { url, key, fetch: doFetch };
+  try {
+    const res = await doFetch(`${url}/api/connector/tools`, {
+      method: "POST",
+      headers: { "x-roxyon-connector-key": key },
+      signal: AbortSignal.timeout(15e3)
+    });
+    const body = await res.json();
+    if (res.ok && Array.isArray(body.tools))
+      catalogue = body.tools.filter((t) => /^[a-z][a-z0-9_]{1,60}$/.test(t.name));
+  } catch {
+  }
+  return catalogue.length;
+}
+function registerAccountTools(server, taken) {
+  for (const t of catalogue) {
+    const name = `roxyon_${t.name}`;
+    if (taken.has(name)) continue;
+    taken.add(name);
+    server.registerTool(
+      name,
+      {
+        title: `Roxyon: ${t.name.replace(/_/g, " ")}`,
+        description: `${t.description}
+
+(Acts on the signed-in user's own Roxyon account with their console permissions. Text that says "the client" means this user.)`,
+        inputSchema: shapeOf(t.inputSchema),
+        annotations: { readOnlyHint: t.readOnly === true, destructiveHint: t.readOnly !== true }
+      },
+      async (args) => callTool(t.name, args)
+    );
+  }
+}
+async function callTool(tool, args) {
+  const token = currentContext().token;
+  if (!bridge || !token)
+    return errorResult("This tool works only through the Roxyon connector at mcp.roxyon.com.");
+  try {
+    const res = await bridge.fetch(`${bridge.url}/api/connector/call`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        "x-roxyon-connector-key": bridge.key,
+        authorization: `Bearer ${token}`
+      },
+      body: JSON.stringify({ tool, args }),
+      signal: AbortSignal.timeout(6e5)
+    });
+    const body = await res.json().catch(() => null);
+    if (!res.ok)
+      return errorResult(body?.message ?? body?.error ?? `Roxyon answered ${res.status}`);
+    if (!body?.ok) return errorResult(body?.error ?? "That action failed.");
+    const result = body.result;
+    return text(
+      typeof result === "string" ? result : JSON.stringify(result, null, 2),
+      result && typeof result === "object" && !Array.isArray(result) ? result : { result }
+    );
+  } catch (err) {
+    return errorResult(
+      `Could not reach Roxyon: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function shapeOf(schema) {
+  const props = schema?.properties ?? {};
+  const required = new Set(schema?.required ?? []);
+  const shape = {};
+  for (const [k, v] of Object.entries(props)) {
+    const t = zodOf(v);
+    shape[k] = required.has(k) ? t : t.optional();
+  }
+  return shape;
+}
+function zodOf(s) {
+  const type = Array.isArray(s.type) ? s.type.find((x) => x !== "null") : s.type;
+  let out;
+  if (Array.isArray(s.enum) && s.enum.length && s.enum.every((x) => typeof x === "string")) {
+    out = z.enum(s.enum);
+  } else if (type === "string") out = z.string();
+  else if (type === "number") out = z.number();
+  else if (type === "integer") out = z.number().int();
+  else if (type === "boolean") out = z.boolean();
+  else if (type === "array") out = z.array(s.items ? zodOf(s.items) : z.unknown());
+  else if (type === "object")
+    out = s.properties ? z.object(shapeOf(s)).passthrough() : z.record(z.unknown());
+  else out = z.unknown();
+  return s.description ? out.describe(s.description) : out;
+}
+
 // src/baas-tools.ts
+import { readFile } from "fs/promises";
+import { join, resolve } from "path";
+import { BAAS_MAX_BATCH, BAAS_MAX_PAGE, BaasDataApi, parseEnv } from "@roxyon/api-client";
+import { z as z2 } from "zod";
 var MAX_TEXT = 4e4;
-var dirArg = z.string().optional().describe("Project directory whose .env holds RX_SECRET_KEY. Defaults to cwd.");
+var dirArg = z2.string().optional().describe("Project directory whose .env holds RX_SECRET_KEY. Defaults to cwd.");
 function remoteBlock() {
   if (!currentContext().remote) return null;
   return errorResult(
@@ -126,13 +223,13 @@ function registerBaasTools(server) {
       description: `Read records of a class in the project's own app on BaaS V2. \`where\` is an object like {"Status":"active","Age":{"gt":18}}; for \`in\`, pass a comma-joined string. \`fields\` defaults to "*"; built-in meta columns must be named. Up to ${BAAS_MAX_PAGE} rows a page (use skip to page). ${SERVER_SCOPE}`,
       inputSchema: {
         dir: dirArg,
-        class: z.string(),
-        where: z.record(z.any()).optional(),
-        fields: z.string().optional(),
-        order: z.string().optional().describe('e.g. "-createdAt"'),
-        limit: z.number().int().min(1).max(BAAS_MAX_PAGE).optional(),
-        skip: z.number().int().min(0).optional(),
-        count: z.boolean().optional().describe("Also return the total number of matches.")
+        class: z2.string(),
+        where: z2.record(z2.any()).optional(),
+        fields: z2.string().optional(),
+        order: z2.string().optional().describe('e.g. "-createdAt"'),
+        limit: z2.number().int().min(1).max(BAAS_MAX_PAGE).optional(),
+        skip: z2.number().int().min(0).optional(),
+        count: z2.boolean().optional().describe("Also return the total number of matches.")
       }
     },
     (args) => guard(async () => {
@@ -157,7 +254,7 @@ ${JSON.stringify(rows, null, 2)}`), { rows, count });
     {
       title: "Roxyon BaaS: read one record",
       description: `Read one record by objectId. ${SERVER_SCOPE}`,
-      inputSchema: { dir: dirArg, class: z.string(), objectId: z.string() }
+      inputSchema: { dir: dirArg, class: z2.string(), objectId: z2.string() }
     },
     (args) => guard(async () => {
       const blocked = remoteBlock();
@@ -174,9 +271,9 @@ ${JSON.stringify(rows, null, 2)}`), { rows, count });
       description: `Insert one record into an existing class (V2 has no schema changes with a secret key: add classes and columns in the console). For relations store the other row's objectId in a string column. Needs confirm:true. ${SERVER_SCOPE}`,
       inputSchema: {
         dir: dirArg,
-        class: z.string(),
-        data: z.record(z.any()),
-        confirm: z.boolean().optional()
+        class: z2.string(),
+        data: z2.record(z2.any()),
+        confirm: z2.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -195,10 +292,10 @@ ${JSON.stringify(rows, null, 2)}`), { rows, count });
       description: `Set fields on one record by objectId. Needs confirm:true. ${SERVER_SCOPE}`,
       inputSchema: {
         dir: dirArg,
-        class: z.string(),
-        objectId: z.string(),
-        data: z.record(z.any()),
-        confirm: z.boolean().optional()
+        class: z2.string(),
+        objectId: z2.string(),
+        data: z2.record(z2.any()),
+        confirm: z2.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -219,9 +316,9 @@ ${JSON.stringify(rows, null, 2)}`), { rows, count });
       description: `Delete one record by objectId. Needs confirm:true. ${SERVER_SCOPE}`,
       inputSchema: {
         dir: dirArg,
-        class: z.string(),
-        objectId: z.string(),
-        confirm: z.boolean().optional()
+        class: z2.string(),
+        objectId: z2.string(),
+        confirm: z2.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -240,14 +337,14 @@ ${JSON.stringify(rows, null, 2)}`), { rows, count });
       description: `1 to ${BAAS_MAX_BATCH} record requests in one call, each answered on its own (one failing doesn't stop the others). path is /Class or /Class/<objectId>; for POST/PUT the body is {"data":{...}}; for GET the body holds query options (where, fields, limit\u2026). A batch with any write needs confirm:true. ${SERVER_SCOPE}`,
       inputSchema: {
         dir: dirArg,
-        requests: z.array(
-          z.object({
-            method: z.enum(["GET", "POST", "PUT", "DELETE"]),
-            path: z.string(),
-            body: z.record(z.any()).optional()
+        requests: z2.array(
+          z2.object({
+            method: z2.enum(["GET", "POST", "PUT", "DELETE"]),
+            path: z2.string(),
+            body: z2.record(z2.any()).optional()
           })
         ).min(1).max(BAAS_MAX_BATCH),
-        confirm: z.boolean().optional()
+        confirm: z2.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -276,7 +373,7 @@ ${JSON.stringify(results, null, 2)}`
 // src/commerce-tools.ts
 import { BILLING_CYCLES, Roxyon as Roxyon2 } from "@roxyon/api-client";
 import { endpointsFromEnv as endpointsFromEnv2 } from "@roxyon/deploy-core";
-import { z as z2 } from "zod";
+import { z as z3 } from "zod";
 function publicRoxyon() {
   const { apiUrl, consoleUrl } = endpointsFromEnv2();
   return new Roxyon2({ baseUrl: apiUrl, consoleUrl });
@@ -296,8 +393,8 @@ function registerCommerceTools(server) {
       title: "Roxyon: product catalog",
       description: 'List what Roxyon sells: cloud servers (cloud.vps.launch / scale / power) and web hosting (cloud.hosting.solo / multiple / isolated). Each product has its planId (what roxyon_quote takes), SKU, specs (vCPU, RAM GB, disk GB, IPv4 included) for servers, list prices in USD per billing cycle BEFORE tax and currency conversion, and stock ("out" = cannot be ordered now). No sign-in needed. Use roxyon_quote for the exact amount a buyer would pay. Read-only.',
       inputSchema: {
-        category: z2.string().optional().describe('Filter by category prefix, e.g. "cloud.vps" or "cloud.hosting".'),
-        in_stock_only: z2.boolean().optional()
+        category: z3.string().optional().describe('Filter by category prefix, e.g. "cloud.vps" or "cloud.hosting".'),
+        in_stock_only: z3.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -316,10 +413,10 @@ function registerCommerceTools(server) {
       title: "Roxyon: price a new subscription",
       description: "The exact amount Roxyon's checkout would charge for a NEW subscription to one plan, computed by the platform itself (same server pricing the console checkout uses, setup fee included): line items, subtotal, tax, total, in the requested currency. Pass the buyer currency and country: without them the quote is in USD with no tax, while checkout uses the account's own currency/country. No sign-in needed. Read-only: creates no order. Domains are not priced by this tool yet.",
       inputSchema: {
-        plan: z2.string().describe('planId (or SKU, e.g. "SCALE-S") from roxyon_catalog.'),
-        cycle: z2.enum(BILLING_CYCLES),
-        currency: z2.string().length(3).optional().describe('ISO 4217, e.g. "USD", "SAR".'),
-        country: z2.string().length(2).optional().describe('ISO 3166 alpha-2, decides tax, e.g. "SA".')
+        plan: z3.string().describe('planId (or SKU, e.g. "SCALE-S") from roxyon_catalog.'),
+        cycle: z3.enum(BILLING_CYCLES),
+        currency: z3.string().length(3).optional().describe('ISO 4217, e.g. "USD", "SAR".'),
+        country: z3.string().length(2).optional().describe('ISO 3166 alpha-2, decides tax, e.g. "SA".')
       }
     },
     (args) => guard(async () => {
@@ -368,8 +465,8 @@ function registerCommerceTools(server) {
       title: "Roxyon: my invoices",
       description: "The signed-in user's own invoices, newest first: number, type, status (pending = unpaid, paid, overdue, void, failed, cancelled), total and currency, due date, and payUrl (the console page where the user pays; null when paid). Read-only: this never pays anything.",
       inputSchema: {
-        status: z2.enum(["pending", "paid", "overdue", "void", "failed", "cancelled"]).optional(),
-        limit: z2.number().int().min(1).max(100).optional().describe("Default 25.")
+        status: z3.enum(["pending", "paid", "overdue", "void", "failed", "cancelled"]).optional(),
+        limit: z3.number().int().min(1).max(100).optional().describe("Default 25.")
       }
     },
     (args) => guard(async () => {
@@ -390,7 +487,7 @@ function registerCommerceTools(server) {
       title: "Roxyon: where to pay an invoice",
       description: 'The URL where the signed-in user pays one of their own open invoices (status pending, overdue or failed), plus its amount and due date. Give the invoice number (e.g. "INV2610055") or id from roxyon_list_invoices. A human opens the link and pays in the console; this tool never charges anything. Paid or void invoices have no link.',
       inputSchema: {
-        invoice: z2.string().min(1).max(40).describe("Invoice number or id.")
+        invoice: z3.string().min(1).max(40).describe("Invoice number or id.")
       }
     },
     (args) => guard(async () => {
@@ -422,16 +519,16 @@ Pay at ${inv.payUrl} (sign in, open Invoices, choose this invoice).`,
       title: "Roxyon: place an order (a person pays)",
       description: 'Order a new web-hosting plan or cloud server for the signed-in user. The platform prices it and creates the subscription and a pending invoice; a PERSON then pays at the returned payUrl (nothing is charged by this tool, and the service is set up only after payment). Always call it first WITHOUT confirm: that dry run returns the exact quote and the token budget and writes nothing. Show it to the user, then call again with confirm:true. Rules: `sku` from roxyon_catalog (out-of-stock plans are refused); servers need `image` (e.g. "ubuntu-24.04"); `username` must be free. Needs a sign-in, or a token created with the "billing:order" scope (`roxyon token create <name> --scopes billing:order --budget <USD> [--skus SCALE-S,\u2026]`): it is refused past that monthly budget (USD, before tax) or outside its SKUs.',
       inputSchema: {
-        sku: z2.string().describe('Plan code from roxyon_catalog, e.g. "SCALE-S".'),
-        cycle: z2.enum(BILLING_CYCLES),
-        name: z2.string().min(1).max(100).describe("A name for the service."),
-        username: z2.string().regex(/^[a-z0-9][a-z0-9.-]{1,62}$/).describe("Account/server name: lowercase letters, digits, dots, dashes; must be free."),
-        image: z2.string().optional().describe('Servers only: OS image, e.g. "ubuntu-24.04".'),
-        ssh_key: z2.string().optional().describe("Servers only: an SSH public key for root."),
-        php_version: z2.string().optional().describe('Hosting only, e.g. "8.3".'),
-        currency: z2.string().length(3).optional(),
-        country: z2.string().length(2).optional().describe('Decides tax, e.g. "SA".'),
-        confirm: z2.boolean().optional()
+        sku: z3.string().describe('Plan code from roxyon_catalog, e.g. "SCALE-S".'),
+        cycle: z3.enum(BILLING_CYCLES),
+        name: z3.string().min(1).max(100).describe("A name for the service."),
+        username: z3.string().regex(/^[a-z0-9][a-z0-9.-]{1,62}$/).describe("Account/server name: lowercase letters, digits, dots, dashes; must be free."),
+        image: z3.string().optional().describe('Servers only: OS image, e.g. "ubuntu-24.04".'),
+        ssh_key: z3.string().optional().describe("Servers only: an SSH public key for root."),
+        php_version: z3.string().optional().describe('Hosting only, e.g. "8.3".'),
+        currency: z3.string().length(3).optional(),
+        country: z3.string().length(2).optional().describe('Decides tax, e.g. "SA".'),
+        confirm: z3.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -475,7 +572,7 @@ Pay at ${inv.payUrl} (sign in, open Invoices, choose this invoice).`,
 }
 
 // src/prompts.ts
-import { z as z3 } from "zod";
+import { z as z4 } from "zod";
 function registerPrompts(server) {
   server.registerPrompt(
     "scaffold-lumen-app",
@@ -483,8 +580,8 @@ function registerPrompts(server) {
       title: "Scaffold a LumenJS + Roxyon app",
       description: "Guidance for creating a new LumenJS SPA wired to the Roxyon BaaS and ready to deploy.",
       argsSchema: {
-        idea: z3.string().describe("What the app should do."),
-        dir: z3.string().optional().describe("Where to create it.")
+        idea: z4.string().describe("What the app should do."),
+        dir: z4.string().optional().describe("Where to create it.")
       }
     },
     ({ idea, dir }) => ({
@@ -511,8 +608,8 @@ Steps:
       title: "Build a site and host it on Roxyon",
       description: "Generate a static site (or no-build LumenJS SPA) in the conversation and publish it to a Roxyon host \u2014 for the hosted connector, no local files.",
       argsSchema: {
-        brief: z3.string().describe("What the site should be."),
-        host: z3.string().describe("Where to host it, e.g. promo.mycompany.com")
+        brief: z4.string().describe("What the site should be."),
+        host: z4.string().describe("Where to host it, e.g. promo.mycompany.com")
       }
     },
     ({ brief, host }) => ({
@@ -541,7 +638,7 @@ Brief: ${brief}
       title: "Install WordPress on Roxyon",
       description: "Provision a host + database and install WordPress core \u2014 local/CLI MCP only.",
       argsSchema: {
-        host: z3.string().describe("Where to install it, e.g. blog.mycompany.com")
+        host: z4.string().describe("Where to install it, e.g. blog.mycompany.com")
       }
     },
     ({ host }) => ({
@@ -566,7 +663,7 @@ Brief: ${brief}
     {
       title: "Deploy this project to Roxyon",
       description: "Walk through deploying the current project to Roxyon infrastructure.",
-      argsSchema: { dir: z3.string().describe("Absolute path to the project.") }
+      argsSchema: { dir: z4.string().describe("Absolute path to the project.") }
     },
     ({ dir }) => ({
       messages: [
@@ -660,7 +757,7 @@ import {
   packFiles,
   saveProjectConfig
 } from "@roxyon/deploy-core";
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 var MAX_FILES = 60;
 var MAX_FILE_BYTES = 1024 * 1024;
 var MAX_TOTAL_BYTES = 2 * 1024 * 1024;
@@ -763,11 +860,11 @@ function registerTools(server) {
       title: "Roxyon: initialise a project",
       description: "Detect a project's type and write roxyon.json. Run this once per project before roxyon_deploy. Does not create anything on the platform.",
       inputSchema: {
-        dir: z4.string().describe("Absolute path to the project directory."),
-        runtime: z4.enum(["lumen", "node", "python", "php"]).optional(),
-        host: z4.string().optional().describe("Deploy host (a domain on the subscription)."),
-        folder: z4.string().optional().describe('Sub-path under the host; "" = site root.'),
-        overwrite: z4.boolean().optional().describe("Replace an existing roxyon.json.")
+        dir: z5.string().describe("Absolute path to the project directory."),
+        runtime: z5.enum(["lumen", "node", "python", "php"]).optional(),
+        host: z5.string().optional().describe("Deploy host (a domain on the subscription)."),
+        folder: z5.string().optional().describe('Sub-path under the host; "" = site root.'),
+        overwrite: z5.boolean().optional().describe("Replace an existing roxyon.json.")
       }
     },
     (args) => guard(async () => {
@@ -818,10 +915,10 @@ ${JSON.stringify(config, null, 2)}`,
       title: "Roxyon: deploy a project",
       description: 'Build (if configured) and deploy the project in "dir" to Roxyon. Without confirm:true this returns a dry-run plan (what would build, where it would go, how many files). With confirm:true it runs the build, uploads, and \u2014 for app runtimes \u2014 waits for it to go live. Requires roxyon.json (run roxyon_init first).',
       inputSchema: {
-        dir: z4.string().describe("Absolute path to the project directory (must contain roxyon.json)."),
-        confirm: z4.boolean().optional().describe("Actually deploy. Omit for a dry-run plan."),
-        build: z4.boolean().optional().describe("Run the configured build command (default true)."),
-        follow: z4.boolean().optional().describe("For app runtimes, wait until running/failed (default true).")
+        dir: z5.string().describe("Absolute path to the project directory (must contain roxyon.json)."),
+        confirm: z5.boolean().optional().describe("Actually deploy. Omit for a dry-run plan."),
+        build: z5.boolean().optional().describe("Run the configured build command (default true)."),
+        follow: z5.boolean().optional().describe("For app runtimes, wait until running/failed (default true).")
       }
     },
     (args) => guard(async () => {
@@ -902,8 +999,8 @@ ${JSON.stringify(config, null, 2)}`,
       title: "Roxyon: application status",
       description: "Current status, revisions and last error for an application (by id or project dir).",
       inputSchema: {
-        application: z4.string().optional(),
-        dir: z4.string().optional().describe("A project directory whose roxyon.json links an application.")
+        application: z5.string().optional(),
+        dir: z5.string().optional().describe("A project directory whose roxyon.json links an application.")
       }
     },
     (args) => guard(async () => {
@@ -937,9 +1034,9 @@ ${app.lastError}` : ""
       title: "Roxyon: application logs",
       description: "Recent journal lines for an application (by id or project dir).",
       inputSchema: {
-        application: z4.string().optional(),
-        dir: z4.string().optional(),
-        lines: z4.number().int().min(1).max(1e3).optional().describe("How many lines (default 100).")
+        application: z5.string().optional(),
+        dir: z5.string().optional(),
+        lines: z5.number().int().min(1).max(1e3).optional().describe("How many lines (default 100).")
       }
     },
     (args) => guard(async () => {
@@ -955,9 +1052,9 @@ ${app.lastError}` : ""
       title: "Roxyon: restart an application",
       description: "Bounce the application process (no rebuild). Needs confirm:true.",
       inputSchema: {
-        application: z4.string().optional(),
-        dir: z4.string().optional(),
-        confirm: z4.boolean().optional()
+        application: z5.string().optional(),
+        dir: z5.string().optional(),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -974,7 +1071,7 @@ ${app.lastError}` : ""
     {
       title: "Roxyon: read environment variables",
       description: "An application's environment variables as KEY=value lines.",
-      inputSchema: { application: z4.string().optional(), dir: z4.string().optional() }
+      inputSchema: { application: z5.string().optional(), dir: z5.string().optional() }
     },
     (args) => guard(async () => {
       const session = await getSession();
@@ -989,11 +1086,11 @@ ${app.lastError}` : ""
       title: "Roxyon: set environment variables",
       description: "Merge variables into an application's environment and bump its revision. Run roxyon_deploy afterwards to apply. Needs confirm:true. PORT and HOST are platform-managed and ignored.",
       inputSchema: {
-        application: z4.string().optional(),
-        dir: z4.string().optional(),
-        vars: z4.record(z4.string()).describe('{ KEY: "value", ... } to set.'),
-        remove: z4.array(z4.string()).optional().describe("Keys to delete."),
-        confirm: z4.boolean().optional()
+        application: z5.string().optional(),
+        dir: z5.string().optional(),
+        vars: z5.record(z5.string()).describe('{ KEY: "value", ... } to set.'),
+        remove: z5.array(z5.string()).optional().describe("Keys to delete."),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1028,11 +1125,11 @@ ${app.lastError}` : ""
       title: "Roxyon: connect a git remote",
       description: "Connect a git repository to an application for push-to-deploy. Returns the deploy key and webhook URL to add to the repo. Needs confirm:true.",
       inputSchema: {
-        application: z4.string().optional(),
-        dir: z4.string().optional(),
-        repoUrl: z4.string().describe("SSH git URL, e.g. git@github.com:you/app.git"),
-        branch: z4.string().optional().describe("Branch to deploy (default main)."),
-        confirm: z4.boolean().optional()
+        application: z5.string().optional(),
+        dir: z5.string().optional(),
+        repoUrl: z5.string().describe("SSH git URL, e.g. git@github.com:you/app.git"),
+        branch: z5.string().optional().describe("Branch to deploy (default main)."),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1074,13 +1171,13 @@ ${res.hint}` : ""
       title: "Roxyon: add a subdomain / host",
       description: "Provision a host \u2014 DNS + web server + automatic HTTPS. The host must be a subdomain of a domain the account already hosts (or a *.roxyon.com subdomain). Returns while it is still coming up; TLS follows a minute or two later. Needs confirm:true.",
       inputSchema: {
-        host: z4.string().describe("The full hostname, e.g. promo.mycompany.com"),
-        subscription: z4.string().optional().describe("Which subscription to attach it to (omit if the account has one)."),
-        spa: z4.boolean().optional().describe("Single-page app: unmatched paths serve /index.html."),
-        phpVersion: z4.string().optional().describe(
+        host: z5.string().describe("The full hostname, e.g. promo.mycompany.com"),
+        subscription: z5.string().optional().describe("Which subscription to attach it to (omit if the account has one)."),
+        spa: z5.boolean().optional().describe("Single-page app: unmatched paths serve /index.html."),
+        phpVersion: z5.string().optional().describe(
           'PHP version for the vhost, e.g. "8.3" (needed to run PHP apps like WordPress).'
         ),
-        confirm: z4.boolean().optional()
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1119,18 +1216,18 @@ ${res.hint}` : ""
         `${(MAX_TOTAL_BYTES / 1024 / 1024).toFixed(1)} MB total (base64-encode binaries).`
       ].join(" "),
       inputSchema: {
-        host: z4.string().describe("Target host, e.g. promo.mycompany.com"),
-        folder: z4.string().optional().describe('Sub-path under the host; "" = site root.'),
-        files: z4.array(
-          z4.object({
-            path: z4.string().describe("Relative path, e.g. index.html, about/index.html"),
-            content: z4.string(),
-            encoding: z4.enum(["utf8", "base64"]).optional()
+        host: z5.string().describe("Target host, e.g. promo.mycompany.com"),
+        folder: z5.string().optional().describe('Sub-path under the host; "" = site root.'),
+        files: z5.array(
+          z5.object({
+            path: z5.string().describe("Relative path, e.g. index.html, about/index.html"),
+            content: z5.string(),
+            encoding: z5.enum(["utf8", "base64"]).optional()
           })
         ).min(1),
-        clean: z4.boolean().optional().describe("Replace the whole docroot (keeps .well-known)."),
-        spa: z4.boolean().optional().describe("Also flip the host to SPA routing."),
-        confirm: z4.boolean().optional()
+        clean: z5.boolean().optional().describe("Replace the whole docroot (keeps .well-known)."),
+        spa: z5.boolean().optional().describe("Also flip the host to SPA routing."),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1187,9 +1284,9 @@ ${res.hint}` : ""
       title: "Roxyon: list a site\u2019s files",
       description: "The files currently deployed to a host's document root.",
       inputSchema: {
-        host: z4.string(),
-        folder: z4.string().optional(),
-        path: z4.string().optional().describe("List under this sub-path only.")
+        host: z5.string(),
+        folder: z5.string().optional(),
+        path: z5.string().optional().describe("List under this sub-path only.")
       }
     },
     (args) => guard(async () => {
@@ -1211,9 +1308,9 @@ ${res.hint}` : ""
       title: "Roxyon: read a site file",
       description: "Read one file from a host's document root (to review or edit it).",
       inputSchema: {
-        host: z4.string(),
-        folder: z4.string().optional(),
-        path: z4.string().describe("Relative path, e.g. index.html")
+        host: z5.string(),
+        folder: z5.string().optional(),
+        path: z5.string().describe("Relative path, e.g. index.html")
       }
     },
     (args) => guard(async () => {
@@ -1236,11 +1333,11 @@ ${f.content.slice(0, 4096)}`,
       title: "Roxyon: create a database (MySQL, PostgreSQL or Redis)",
       description: `Provision a data store on a Roxyon hosting account. engine "mysql" (MySQL/MariaDB, default; localhost:3306), "postgres" (PostgreSQL 15 inside the account, localhost:5432; the first one installs it in a few minutes) or "redis" (Redis inside the account, 127.0.0.1:6379 with a password, 128 MB, saved to disk; one per account; give apps REDIS_URL=redis://:<password>@127.0.0.1:6379). Every hosting account has all three: never tell the user to get a VPS or an outside service for PostgreSQL or Redis. The name is prefixed with the account's own username \u2014 pass just the suffix, e.g. "wordpress" (for Redis any short name, e.g. "cache"). The password is shown once in the result; there is no way to retrieve it later. Needs confirm:true.`,
       inputSchema: {
-        name: z4.string().describe("DB name suffix: lowercase letters, digits, underscore."),
-        subscription: z4.string().optional(),
-        password: z4.string().optional().describe("Omit to have Roxyon generate one."),
-        engine: z4.enum(["mysql", "postgres", "redis"]).optional().describe("mysql (default), postgres or redis."),
-        confirm: z4.boolean().optional()
+        name: z5.string().describe("DB name suffix: lowercase letters, digits, underscore."),
+        subscription: z5.string().optional(),
+        password: z5.string().optional().describe("Omit to have Roxyon generate one."),
+        engine: z5.enum(["mysql", "postgres", "redis"]).optional().describe("mysql (default), postgres or redis."),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1284,7 +1381,7 @@ ${r.password}` : "",
     {
       title: "Roxyon: list databases",
       description: "Databases on the active subscription.",
-      inputSchema: { subscription: z4.string().optional() }
+      inputSchema: { subscription: z5.string().optional() }
     },
     (args) => guard(async () => {
       const session = await getSession();
@@ -1302,7 +1399,7 @@ ${r.password}` : "",
     {
       title: "Roxyon: delete a database",
       description: "Delete a database by its objectId (from roxyon_database_create/roxyon_list_databases). Needs confirm:true.",
-      inputSchema: { database: z4.string(), confirm: z4.boolean().optional() }
+      inputSchema: { database: z5.string(), confirm: z5.boolean().optional() }
     },
     (args) => guard(async () => {
       const session = await getSession();
@@ -1321,13 +1418,13 @@ ${r.password}` : "",
       title: "Roxyon: create a mailbox",
       description: "Provision a mailbox on a host already on the account. The password is shown once in the result; there is no way to retrieve it later. Needs confirm:true.",
       inputSchema: {
-        localPart: z4.string().describe('The part before @, e.g. "info".'),
-        domain: z4.string().describe("A hostname already on the account."),
-        password: z4.string().optional().describe("Omit to have Roxyon generate one."),
-        quota: z4.number().int().positive().optional().describe("Quota in MB (default 1024)."),
-        forwardTo: z4.string().optional(),
-        saveCopy: z4.boolean().optional(),
-        confirm: z4.boolean().optional()
+        localPart: z5.string().describe('The part before @, e.g. "info".'),
+        domain: z5.string().describe("A hostname already on the account."),
+        password: z5.string().optional().describe("Omit to have Roxyon generate one."),
+        quota: z5.number().int().positive().optional().describe("Quota in MB (default 1024)."),
+        forwardTo: z5.string().optional(),
+        saveCopy: z5.boolean().optional(),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1358,7 +1455,7 @@ ${r.password}` : ""
     {
       title: "Roxyon: list mailboxes",
       description: "Mailboxes on the active subscription.",
-      inputSchema: { subscription: z4.string().optional() }
+      inputSchema: { subscription: z5.string().optional() }
     },
     (args) => guard(async () => {
       const session = await getSession();
@@ -1374,7 +1471,7 @@ ${r.password}` : ""
     {
       title: "Roxyon: delete a mailbox",
       description: "Delete a mailbox by its objectId (from roxyon_email_create/roxyon_list_emails). Needs confirm:true.",
-      inputSchema: { email: z4.string(), confirm: z4.boolean().optional() }
+      inputSchema: { email: z5.string(), confirm: z5.boolean().optional() }
     },
     (args) => guard(async () => {
       const session = await getSession();
@@ -1391,9 +1488,9 @@ ${r.password}` : ""
       title: "Roxyon: reset the SSH/SFTP password",
       description: "Reset a subscription's shell password \u2014 used for SSH, SFTP, and the file manager. Changing it signs out anything using the old one. The password is shown once in the result; the platform never stores or re-shows it. Needs confirm:true.",
       inputSchema: {
-        subscription: z4.string().optional(),
-        password: z4.string().optional().describe("Omit to have Roxyon generate one (12+ chars, mixed case, number, symbol)."),
-        confirm: z4.boolean().optional()
+        subscription: z5.string().optional(),
+        password: z5.string().optional().describe("Omit to have Roxyon generate one (12+ chars, mixed case, number, symbol)."),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1425,14 +1522,14 @@ ${r.password}`,
         "this from the CLI-backed MCP, not the hosted mcp.roxyon.com connector. Needs confirm:true."
       ].join(" "),
       inputSchema: {
-        host: z4.string().describe("The site host, e.g. blog.mycompany.com \u2014 created if it does not exist."),
-        folder: z4.string().optional().describe('Sub-path under the host; "" = site root (recommended).'),
-        subscription: z4.string().optional(),
-        dbName: z4.string().optional().describe(
+        host: z5.string().describe("The site host, e.g. blog.mycompany.com \u2014 created if it does not exist."),
+        folder: z5.string().optional().describe('Sub-path under the host; "" = site root (recommended).'),
+        subscription: z5.string().optional(),
+        dbName: z5.string().optional().describe(
           "Database name suffix (default derived from the host). See roxyon_database_create."
         ),
-        phpVersion: z4.string().optional().describe('Default "8.3".'),
-        confirm: z4.boolean().optional()
+        phpVersion: z5.string().optional().describe('Default "8.3".'),
+        confirm: z5.boolean().optional()
       }
     },
     (args) => guard(async () => {
@@ -1498,7 +1595,7 @@ function createServer() {
   const server = new McpServer(
     { name: SERVER_NAME, version: SERVER_VERSION },
     {
-      instructions: 'Roxyon lets you build LumenJS SPAs, use the Roxyon BaaS, and deploy apps and web projects to Roxyon infrastructure. Read the roxyon://docs/* resources before writing LumenJS or calling the BaaS. To deploy: roxyon_init once per project, then roxyon_deploy (dry run, then confirm:true). Side-effecting tools require confirm:true. Every Roxyon hosting account includes MySQL, PostgreSQL and Redis (roxyon_database_create with engine "mysql" | "postgres" | "redis"), mailboxes, domains with free SSL, Node/PHP apps, env vars, logs and SSH: never send the user to a VPS or an outside service for any of these. If something the user asks for has no tool here, say exactly which step is missing and that it can be done in the Roxyon Console or by Roxyon AI there (console.roxyon.com/agent); never invent a workaround or claim it is impossible on Roxyon.'
+      instructions: `Roxyon lets you build LumenJS SPAs, use the Roxyon BaaS, and deploy apps and web projects to Roxyon infrastructure. Read the roxyon://docs/* resources before writing LumenJS or calling the BaaS. To deploy: roxyon_init once per project, then roxyon_deploy (dry run, then confirm:true). Side-effecting tools require confirm:true. Every Roxyon hosting account includes MySQL, PostgreSQL and Redis (roxyon_database_create with engine "mysql" | "postgres" | "redis"), mailboxes, domains with free SSL, Node/PHP apps, env vars, logs and SSH: never send the user to a VPS or an outside service for any of these. If something the user asks for has no tool here, say exactly which step is missing and that it can be done in the Roxyon Console or by Roxyon AI there (console.roxyon.com/agent); never invent a workaround or claim it is impossible on Roxyon. Besides the deploy tools, the remote connector offers the same account tools Roxyon AI uses in the console, acting as the signed-in user with their permissions: site files (read, write, move, delete), site_tools (cron jobs, PHP settings, permissions, zip/unzip, search), run_in_site (a shell command in their hosting), DNS records, SSL, mailboxes, forwarding and auto-replies, databases (export, restore, SQL), nightly backups and restores, cloud servers (start/stop/restart, root password, firewall), plans, invoices and payments, Roxyon Base, newsletters, Engage and social posts. Actions that change something need the user's explicit yes first (confirmed: true).`
     }
   );
   registerResources(server);
@@ -1506,13 +1603,20 @@ function createServer() {
   registerTools(server);
   registerBaasTools(server);
   registerCommerceTools(server);
+  const taken = new Set(
+    Object.keys(
+      server._registeredTools
+    )
+  );
+  registerAccountTools(server, taken);
   return server;
 }
 
 export {
   runWithContext,
+  loadAccountTools,
   SERVER_NAME,
   SERVER_VERSION,
   createServer
 };
-//# sourceMappingURL=chunk-UO5XO6D2.js.map
+//# sourceMappingURL=chunk-BNRJ2C63.js.map