@selfhost.dev/mcp-server 0.3.0 → 0.4.1

package/dist/tools/env-vars.js

@@ -0,0 +1,121 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+import { session } from "../session.js";
+/**
+ * Deployment environment variables. Stored encrypted at rest but returned in
+ * cleartext by the API (treat values as secrets).
+ *
+ * Endpoints (base /api/v1/platform/github_repo_deployments/:pid/env_vars):
+ * - GET    /env_vars            list { key, value }
+ * - PUT    /env_vars            FULL REPLACE - deletes keys not in the payload
+ * - PATCH  /env_vars            merge/upsert - never deletes
+ * - DELETE /env_vars/:key       remove one key
+ *
+ * Saving env vars triggers a redeploy on active deployments, rate-limited to
+ * one per 60s (the response `redeploy_triggered` flag tells you if it fired).
+ */
+const DEPLOYMENTS_BASE = "/api/v1/platform/github_repo_deployments";
+const KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const NO_ORG = "No active organization. Call `list_organizations` then `select_organization` first.";
+function hasOrg() {
+    return session.getActiveOrgId() !== null;
+}
+/** Validate a { KEY: value } map against the backend rules. Returns an error string or null. */
+function validateEnvVars(env) {
+    const keys = Object.keys(env);
+    if (keys.length === 0)
+        return "env_vars is empty - provide at least one { KEY: value } pair.";
+    for (const [k, v] of Object.entries(env)) {
+        if (!KEY_RE.test(k)) {
+            return `Invalid key "${k}": must match ^[A-Za-z_][A-Za-z0-9_]*$ (start with a letter or underscore).`;
+        }
+        if (v === undefined || v === null || v === "") {
+            return `Value for "${k}" is blank. Values must be non-empty - use delete_env_var to remove a variable.`;
+        }
+    }
+    return null;
+}
+export function registerEnvVarTools(server) {
+    server.tool("list_env_vars", "List a deployment's environment variables as { key, value } pairs. NOTE: values are returned in cleartext - handle as secrets. Call this before `set_env_vars` so you know the full current set (since `set_env_vars` replaces everything).", {
+        deployment_pid: z.string().min(1),
+    }, async ({ deployment_pid }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(`${DEPLOYMENTS_BASE}/${deployment_pid}/env_vars`, {
+            toolName: "list_env_vars",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to list env vars (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("set_env_vars", "REPLACE a deployment's ENTIRE set of environment variables with the provided map. ⚠️ Any existing key NOT included here is DELETED. To add or edit a few variables without removing the rest, use `merge_env_vars` instead - or call `list_env_vars` first and pass the full merged set here. Keys must match ^[A-Za-z_][A-Za-z0-9_]*$; values must be non-empty. Saving may trigger a rate-limited redeploy.", {
+        deployment_pid: z.string().min(1),
+        env_vars: z.record(z.string()).describe("The COMPLETE desired set { KEY: value }; replaces all existing vars"),
+    }, async ({ deployment_pid, env_vars }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const err = validateEnvVars(env_vars);
+        if (err)
+            return { content: [{ type: "text", text: err }] };
+        const result = await apiRequest(`${DEPLOYMENTS_BASE}/${deployment_pid}/env_vars`, {
+            method: "PUT",
+            body: { env_vars },
+            toolName: "set_env_vars",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to set env vars (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: "Environment variables replaced. If `redeploy_triggered` is false the change was throttled and applies within ~60s." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("merge_env_vars", "Add or update environment variables WITHOUT deleting any existing ones (upsert/merge). This is the safe way to set a few variables. Keys must match ^[A-Za-z_][A-Za-z0-9_]*$; values must be non-empty. To remove a variable use `delete_env_var`. Saving may trigger a rate-limited redeploy.", {
+        deployment_pid: z.string().min(1),
+        env_vars: z.record(z.string()).describe("The variables to add/update { KEY: value }; existing keys are preserved"),
+    }, async ({ deployment_pid, env_vars }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const err = validateEnvVars(env_vars);
+        if (err)
+            return { content: [{ type: "text", text: err }] };
+        const result = await apiRequest(`${DEPLOYMENTS_BASE}/${deployment_pid}/env_vars`, {
+            method: "PATCH",
+            body: { env_vars },
+            toolName: "merge_env_vars",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to merge env vars (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: "Environment variables merged. If `redeploy_triggered` is false the change was throttled and applies within ~60s." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("delete_env_var", "Delete a single environment variable by key. Returns 404 if the key doesn't exist. Saving may trigger a rate-limited redeploy.", {
+        deployment_pid: z.string().min(1),
+        key: z.string().min(1).describe("The variable key to remove"),
+    }, async ({ deployment_pid, key }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(`${DEPLOYMENTS_BASE}/${deployment_pid}/env_vars/${encodeURIComponent(key)}`, {
+            method: "DELETE",
+            toolName: "delete_env_var",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to delete env var (${result.statusCode}): ${result.message}` }] };
+        }
+        const parts = [
+            { type: "text", text: `Environment variable \`${key}\` removed.` },
+        ];
+        if (result.data)
+            parts.push({ type: "text", text: JSON.stringify(result.data, null, 2) });
+        return { content: parts };
+    });
+}
+//# sourceMappingURL=env-vars.js.map

package/dist/tools/env-vars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-vars.js","sourceRoot":"","sources":["../../src/tools/env-vars.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;GAYG;AAEH,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;AACpE,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,MAAM,MAAM,GACV,qFAAqF,CAAC;AAExF,SAAS,MAAM;IACb,OAAO,OAAO,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,gGAAgG;AAChG,SAAS,eAAe,CAAC,GAA2B;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,+DAA+D,CAAC;IAC9F,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,gBAAgB,CAAC,6EAA6E,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9C,OAAO,cAAc,CAAC,iFAAiF,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,MAAM,CAAC,IAAI,CACT,eAAe,EACf,6OAA6O,EAC7O;QACE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAClC,EACD,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;QAC3B,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,gBAAgB,IAAI,cAAc,WAAW,EAAE;YACzF,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,+YAA+Y,EAC/Y;QACE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC;KAC/G,EACD,KAAK,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,gBAAgB,IAAI,cAAc,WAAW,EAAE;YACzF,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,QAAQ,EAAE;YAClB,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACnH,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oHAAoH,EAAE;gBAC5I,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,gSAAgS,EAChS;QACE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,yEAAyE,CAAC;KACnH,EACD,KAAK,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,gBAAgB,IAAI,cAAc,WAAW,EAAE;YACzF,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,QAAQ,EAAE;YAClB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACrH,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kHAAkH,EAAE;gBAC1I,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,gIAAgI,EAChI;QACE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KAC9D,EACD,KAAK,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,gBAAgB,IAAI,cAAc,aAAa,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE;YACpH,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACrH,CAAC;QACD,MAAM,KAAK,GAAqC;YAC9C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,GAAG,aAAa,EAAE;SACnE,CAAC;QACF,IAAI,MAAM,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/github.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerGithubTools(server: McpServer): void;

package/dist/tools/github.js

@@ -0,0 +1,106 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+import { session } from "../session.js";
+/**
+ * GitHub integration - list connected App installations (+ their repos),
+ * list branches, auto-detect a repo's build config, and get the install URL.
+ *
+ * Endpoints:
+ * - GET  /api/v1/platform/github_installations
+ * - GET  /api/v1/platform/github_installations/:installation_pid/branches?repo_full_name=
+ * - POST /api/v1/platform/github_installations/detect_repo_config
+ * - GET  /github/connect?organization_pid=          (returns a browser install URL)
+ *
+ * NOTE: connecting a GitHub account is an interactive, browser-based GitHub App
+ * installation - it CANNOT be completed headlessly. `get_github_connect_url`
+ * returns a link for the human to open; afterwards poll `list_github_installations`
+ * to confirm the connection landed.
+ */
+const INSTALLATIONS_BASE = "/api/v1/platform/github_installations";
+const NO_ORG = "No active organization. Call `list_organizations` then `select_organization` first.";
+function orgId() {
+    return session.getActiveOrgId();
+}
+export function registerGithubTools(server) {
+    server.tool("list_github_installations", "List the GitHub App installations connected to the active organization, each with its accessible repositories embedded (`repos`: name, full_name, url, private, default_branch, description). Use `isActive`/status to pick a usable installation, and the repo's `default_branch` when listing branches. If empty, the org hasn't connected GitHub yet - use `get_github_connect_url`.", {}, async () => {
+        if (!orgId())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(INSTALLATIONS_BASE, {
+            toolName: "list_github_installations",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to list GitHub installations (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("list_repo_branches", "List branches of a repository accessible through a GitHub installation. Provide the installation pid (ghi_..., from `list_github_installations`) and the repo as owner/repo. The API does not flag the default branch - cross-reference the repo's `default_branch` from `list_github_installations`.", {
+        installation_pid: z.string().min(1).describe("Installation pid, e.g. ghi_01h..."),
+        repo_full_name: z.string().regex(/^[^/]+\/[^/]+$/, "owner/repo").describe("owner/repo"),
+        page: z.number().int().min(1).optional().describe("Page (default 1)"),
+        per_page: z.number().int().min(1).max(100).optional().describe("Per page (default 100, max 100)"),
+    }, async ({ installation_pid, repo_full_name, page, per_page }) => {
+        if (!orgId())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(`${INSTALLATIONS_BASE}/${installation_pid}/branches`, {
+            query: {
+                repo_full_name,
+                page: page === undefined ? undefined : String(page),
+                per_page: per_page === undefined ? undefined : String(per_page),
+            },
+            toolName: "list_repo_branches",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to list branches (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("detect_repo_config", "Scan a GitHub repo and auto-detect how to build/deploy it: visibility (`private`), `build_pack` (nixpacks | dockerfile | dockercompose | static), `port`, `dockerfile_path`, monorepo `base_directories`, and detected environment variables (`detected_vars` from .env.example/CI/workflows - these are hints, not secrets). Run this before `create_deployment` to pre-fill build settings. For PRIVATE repos you must pass `installation_pid` (else 422).", {
+        repo_url: z.string().min(1).describe("https://github.com/owner/repo"),
+        installation_pid: z.string().optional().describe("Installation pid (ghi_...); required for private repos"),
+        branch: z.string().optional().describe("Branch to scan (defaults to the repo's default branch)"),
+    }, async ({ repo_url, installation_pid, branch }) => {
+        if (!orgId())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const body = { repo_url };
+        if (installation_pid !== undefined)
+            body.installation_pid = installation_pid;
+        if (branch !== undefined)
+            body.branch = branch;
+        const result = await apiRequest(`${INSTALLATIONS_BASE}/detect_repo_config`, {
+            method: "POST",
+            body,
+            toolName: "detect_repo_config",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to detect repo config (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("get_github_connect_url", "Get a URL for the human to open in their browser to connect/install the SelfHost GitHub App on their account or org. Connecting GitHub is interactive (GitHub requires a logged-in user to approve and pick repos) and CANNOT be done headlessly. After the user completes it in the browser, poll `list_github_installations` to confirm the new installation appears (status `active`).", {
+        redirect_to_frontend: z.string().url().optional().describe("Optional URL to return the browser to after install"),
+    }, async ({ redirect_to_frontend }) => {
+        const id = orgId();
+        if (!id)
+            return { content: [{ type: "text", text: NO_ORG }] };
+        // /github/connect lives outside /api/v1/platform and expects `organization_pid` (not organization_id).
+        const result = await apiRequest("/github/connect", {
+            query: { organization_pid: id, redirect_to_frontend },
+            toolName: "get_github_connect_url",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to get GitHub connect URL (${result.statusCode}): ${result.message}` }] };
+        }
+        const url = (result.data && result.data.redirect_url) || null;
+        if (!url) {
+            return { content: [{ type: "text", text: `Could not read the connect URL from the response.\n${JSON.stringify(result.data, null, 2)}` }] };
+        }
+        return {
+            content: [{
+                    type: "text",
+                    text: `Open this link in a browser to connect GitHub, then approve the app and select repositories:\n\n${url}\n\nWhen done, call \`list_github_installations\` to confirm the installation appears.`,
+                }],
+        };
+    });
+}
+//# sourceMappingURL=github.js.map

package/dist/tools/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/tools/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AAEH,MAAM,kBAAkB,GAAG,uCAAuC,CAAC;AAEnE,MAAM,MAAM,GACV,qFAAqF,CAAC;AAExF,SAAS,KAAK;IACZ,OAAO,OAAO,CAAC,cAAc,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,MAAM,CAAC,IAAI,CACT,2BAA2B,EAC3B,yXAAyX,EACzX,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,EAAE;YAC3D,QAAQ,EAAE,2BAA2B;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAChI,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,uSAAuS,EACvS;QACE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACjF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KAClG,EACD,KAAK,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC7D,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,kBAAkB,IAAI,gBAAgB,WAAW,EAAE;YAC7F,KAAK,EAAE;gBACL,cAAc;gBACd,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnD,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;aAChE;YACD,QAAQ,EAAE,oBAAoB;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,8bAA8b,EAC9b;QACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QACrE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QAC1G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;KACjG,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/C,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAA4B,EAAE,QAAQ,EAAE,CAAC;QACnD,IAAI,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,kBAAkB,qBAAqB,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,oBAAoB;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACzH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,2XAA2X,EAC3X;QACE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;KAClH,EACD,KAAK,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC9D,uGAAuG;QACvG,MAAM,MAAM,GAAG,MAAM,UAAU,CAA4B,iBAAiB,EAAE;YAC5E,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,oBAAoB,EAAE;YACrD,QAAQ,EAAE,wBAAwB;YAClC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,IAAK,MAAM,CAAC,IAAkC,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;QAC7F,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sDAAsD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7I,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,mGAAmG,GAAG,wFAAwF;iBACrM,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/hetzner.js

@@ -2,17 +2,17 @@ import { z } from "zod";
 import { apiRequest } from "../client.js";
 import { session } from "../session.js";
 /**
- * Hetzner Cloud — Postgres-only provisioning.
+ * Hetzner Cloud - Postgres-only provisioning.
  *
  * Backend endpoints (added in selfhost-dev/selfhost PR #983):
- * - POST   /hetzner/v1/instances             — provision
- * - GET    /hetzner/v1/instances/:pid        — read
- * - GET    /hetzner/v1/instances/:pid/status — provisioning progress
- * - DELETE /hetzner/v1/instances/:pid        — destroy
+ * - POST   /hetzner/v1/instances             - provision
+ * - GET    /hetzner/v1/instances/:pid        - read
+ * - GET    /hetzner/v1/instances/:pid/status - provisioning progress
+ * - DELETE /hetzner/v1/instances/:pid        - destroy
  *
  * Limitations vs AWS today:
  * - Postgres only (no MySQL, no MongoDB)
- * - No list endpoint — callers must keep track of `pid` after create
+ * - No list endpoint - callers must keep track of `pid` after create
  * - No start / stop / reboot / update / fork
  * - No scaling, no PITR, no PgBouncer, no database-user management
  *
@@ -70,7 +70,7 @@ const SERVER_TYPE_CODES = HETZNER_SERVER_TYPES.map((s) => s.code);
 // --- Registration ------------------------------------------------------------
 export function registerHetznerTools(server) {
     // ----- Provider discovery -------------------------------------------------
-    server.tool("list_cloud_providers", "List the cloud providers SelfHost can provision Postgres on. Call this whenever the user expresses an intent to create a database — present the options and ask which one they want before choosing the create tool. The response includes capabilities and the specific create tool for each provider.", {}, async () => {
+    server.tool("list_cloud_providers", "List the cloud providers SelfHost can provision Postgres on. Call this whenever the user expresses an intent to create a database - present the options and ask which one they want before choosing the create tool. The response includes capabilities and the specific create tool for each provider.", {}, async () => {
         return {
             content: [
                 { type: "text", text: JSON.stringify(CLOUD_PROVIDERS, null, 2) },
@@ -102,7 +102,7 @@ RECOMMENDED FLOW:
 5. Then call this tool.
 
 IMPORTANT:
-- The password returned in the response is shown ONCE. Save it immediately — there's no way to retrieve it.
+- The password returned in the response is shown ONCE. Save it immediately - there's no way to retrieve it.
 - Hetzner integration is currently provision/delete only. After creation, use \`get_hetzner_instance_status\` to poll provisioning progress, and \`get_hetzner_instance\` to read details. To remove it, use \`delete_hetzner_instance\`.
 - Provisioning takes ~5-10 minutes (network + firewall + SSH key + server + volume + load balancer + Ansible/autobase playbook + Cloudflare DNS).`, {
         organization_id: z.string().optional()
@@ -110,9 +110,9 @@ IMPORTANT:
         name: z.string().min(1).max(63)
             .describe("Instance name (used for DNS host)"),
         region: z.enum(LOCATION_CODES)
-            .describe("Hetzner location code — call list_hetzner_locations to see options"),
+            .describe("Hetzner location code - call list_hetzner_locations to see options"),
         server_type: z.enum(SERVER_TYPE_CODES)
-            .describe("Hetzner server type — call list_hetzner_server_types to see options"),
+            .describe("Hetzner server type - call list_hetzner_server_types to see options"),
         storage_size: z.number().int().min(10).max(10240)
             .describe("Database storage size in GB (Hetzner Volume, separate from server local disk)"),
         db_version: z.string().optional()
@@ -182,10 +182,10 @@ IMPORTANT:
         if (data.password) {
             lines.push(`Password: ${data.password}`);
             lines.push("");
-            lines.push("⚠️  SAVE THIS PASSWORD NOW — it cannot be retrieved again.");
+            lines.push("⚠️  SAVE THIS PASSWORD NOW - it cannot be retrieved again.");
         }
         lines.push("");
-        lines.push(`Poll provisioning progress with \`get_hetzner_instance_status\` (pid: ${data.pid}). Provisioning typically takes 5–10 minutes.`);
+        lines.push(`Poll provisioning progress with \`get_hetzner_instance_status\` (pid: ${data.pid}). Provisioning typically takes 5-10 minutes.`);
         return {
             content: [
                 { type: "text", text: lines.join("\n") },
@@ -227,7 +227,7 @@ IMPORTANT:
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
-    server.tool("delete_hetzner_instance", "Delete a Hetzner instance and all associated resources (server, volume, firewall, network, load balancer if HA, DNS record). IRREVERSIBLE — there's no `start` / `stop` on Hetzner; deletion is the only way to remove an instance.", {
+    server.tool("delete_hetzner_instance", "Delete a Hetzner instance and all associated resources (server, volume, firewall, network, load balancer if HA, DNS record). IRREVERSIBLE - there's no `start` / `stop` on Hetzner; deletion is the only way to remove an instance.", {
         pid: z.string().min(1),
         confirm: z.boolean().describe("Must be true to proceed. ALL DATA on this instance will be permanently lost."),
     }, async ({ pid, confirm }) => {

package/dist/tools/instances.js

@@ -179,14 +179,14 @@ Returns an itemized cost breakdown including compute, storage, markup, and add-o
         return { content: [{ type: "text", text: lines.join("\n") }] };
     });
     // --- Instance lifecycle tools ---
-    server.tool("create_instance", `Create a new database instance on AWS. This is the core AWS provisioning tool. For Hetzner Cloud, use \`create_hetzner_instance\` instead — call \`list_cloud_providers\` first to confirm which provider the user wants.
+    server.tool("create_instance", `Create a new database instance on AWS. This is the core AWS provisioning tool. For Hetzner Cloud, use \`create_hetzner_instance\` instead - call \`list_cloud_providers\` first to confirm which provider the user wants.
 
 RECOMMENDED FLOW (follow this before calling create_instance):
 1. Ask the user: host on SelfHost's cloud (platform-managed) or their own AWS account (BYOC)?
-2. Call list_credentials — filter results by cloud_provider matching chosen provider AND status "active".
+2. Call list_credentials - filter results by cloud_provider matching chosen provider AND status "active".
    - Platform-managed: pick credential where is_platform_managed=true
    - BYOC: pick credential where is_platform_managed=false. If none exist, user must add_credential first.
-3. If BYOC: call list_vpcs with the credential's id and chosen region — only present VPCs from the "public" group. vpc_id is REQUIRED for BYOC.
+3. If BYOC: call list_vpcs with the credential's id and chosen region - only present VPCs from the "public" group. vpc_id is REQUIRED for BYOC.
 4. If platform-managed: vpc_id is NOT needed (skip VPC selection entirely).
 5. Call estimate_instance_cost to show the user the estimated monthly cost before deploying.
 6. Only call create_instance after the user confirms the cost is acceptable.
@@ -209,7 +209,7 @@ IMPORTANT:
         custom_password: z.string().min(8).max(128).optional().describe("Database password (8-128 printable ASCII chars). Auto-generated if omitted."),
         description: z.string().optional(),
         cloud_credential_id: z.string().optional().describe("Credential PID from list_credentials. Use is_platform_managed=true credential for SelfHost's cloud, or is_platform_managed=false for BYOC. Always ask the user which they prefer."),
-        vpc_id: z.string().optional().describe("VPC ID — REQUIRED when using BYOC credentials (is_platform_managed=false). Use list_vpcs and only pick from the 'public' group. Not needed for platform-managed."),
+        vpc_id: z.string().optional().describe("VPC ID - REQUIRED when using BYOC credentials (is_platform_managed=false). Use list_vpcs and only pick from the 'public' group. Not needed for platform-managed."),
         multi_az: z.boolean().optional().describe("Enable multi-AZ replication (default: false)"),
         replica_count: z.number().int().min(1).max(2).optional().describe("Number of replicas if multi_az (1 or 2)"),
         delete_protection: z.boolean().optional().describe("Prevent accidental deletion (default: true recommended)"),
@@ -235,7 +235,7 @@ IMPORTANT:
         if (params.storage.size < spec.minSize) {
             return { content: [{ type: "text", text: `For ${params.storage.type}, storage size must be at least ${spec.minSize} GiB` }] };
         }
-        // Build request body — only include defined fields
+        // Build request body - only include defined fields
         const body = {
             organization_id: orgId,
             identifier: params.identifier,
@@ -247,7 +247,7 @@ IMPORTANT:
                 iops: params.storage.iops ?? 0,
                 throughput: params.storage.throughput ?? 0,
             },
-            public_access: true, // Always true — private access not yet supported
+            public_access: true, // Always true - private access not yet supported
         };
         if (params.db_version)
             body.db_version = params.db_version;
@@ -306,7 +306,7 @@ IMPORTANT:
                         `Username: ${data.username}`,
                         `Password: ${data.password}`,
                         "",
-                        "⚠️  SAVE THIS PASSWORD NOW — it cannot be retrieved again.",
+                        "⚠️  SAVE THIS PASSWORD NOW - it cannot be retrieved again.",
                         "",
                         `Group ID: ${data.group_id}`,
                         `Organization: ${data.organization_id}`,
@@ -357,7 +357,7 @@ IMPORTANT:
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
-    server.tool("update_instance", "Update an instance's configuration. Some changes are synchronous (db_port, backup, CIDR ranges), others are async (instance_type, multi_az, storage). Cannot update replicas — update the master instead.", {
+    server.tool("update_instance", "Update an instance's configuration. Some changes are synchronous (db_port, backup, CIDR ranges), others are async (instance_type, multi_az, storage). Cannot update replicas - update the master instead.", {
         instance_id: z.string().min(1, "Instance PID is required"),
         identifier: z.string().optional().describe("New instance name"),
         delete_protection: z.boolean().optional(),
@@ -400,7 +400,7 @@ IMPORTANT:
             ],
         };
     });
-    server.tool("stop_instance", "DESTRUCTIVE: Stop one or more running database instances. Databases will become unavailable. Cannot stop replicas independently — stop the master to stop all. You MUST set confirm=true to proceed.", {
+    server.tool("stop_instance", "DESTRUCTIVE: Stop one or more running database instances. Databases will become unavailable. Cannot stop replicas independently - stop the master to stop all. You MUST set confirm=true to proceed.", {
         pids: z.array(z.string().min(1)).min(1, "At least one instance PID is required"),
         confirm: z.boolean().describe("Must be true to proceed. Ask the user for explicit confirmation before setting this."),
     }, async ({ pids, confirm }) => {
@@ -489,7 +489,7 @@ You MUST set confirm=true to proceed. Before calling this tool, always ask the u
         }
         return { content: [{ type: "text", text: `Instance(s) ${pids.join(", ")} deletion initiated.` }] };
     });
-    server.tool("fork_instance", "Fork (clone) an existing database instance into a new independent instance. Cannot fork replicas or deleted instances. Returns a new password — save it immediately.", {
+    server.tool("fork_instance", "Fork (clone) an existing database instance into a new independent instance. Cannot fork replicas or deleted instances. Returns a new password - save it immediately.", {
         instance_id: z.string().min(1, "Source instance PID is required"),
         instance_name: z.string().min(1, "Name for the forked instance"),
         cloud_credential_id: z.string().optional().describe("Credential PID (defaults to source instance's credential)"),
@@ -518,7 +518,7 @@ You MUST set confirm=true to proceed. Before calling this tool, always ask the u
                         `Username: ${data.username}`,
                         `Password: ${data.password}`,
                         "",
-                        "⚠️  SAVE THIS PASSWORD NOW — it cannot be retrieved again.",
+                        "⚠️  SAVE THIS PASSWORD NOW - it cannot be retrieved again.",
                         "",
                         `Group ID: ${data.group_id}`,
                         `Organization: ${data.organization_id}`,

package/dist/tools/pgbouncer.js

@@ -71,7 +71,7 @@ export function registerPgBouncerTools(server) {
         }
         return {
             content: [
-                { type: "text", text: "PgBouncer enable requested — status will transition to `enabled` once the configuration is applied. Poll `get_pgbouncer` to track progress." },
+                { type: "text", text: "PgBouncer enable requested - status will transition to `enabled` once the configuration is applied. Poll `get_pgbouncer` to track progress." },
                 { type: "text", text: JSON.stringify(result.data, null, 2) },
             ],
         };
@@ -99,7 +99,7 @@ export function registerPgBouncerTools(server) {
             return {
                 content: [{
                         type: "text",
-                        text: "No changes to apply — pass at least one of pool_mode / max_client_conn / default_pool_size / min_pool_size / reserve_pool_size.",
+                        text: "No changes to apply - pass at least one of pool_mode / max_client_conn / default_pool_size / min_pool_size / reserve_pool_size.",
                     }],
             };
         }
@@ -119,7 +119,7 @@ export function registerPgBouncerTools(server) {
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
-    server.tool("disable_pgbouncer", "Disable PgBouncer on an instance. Existing connections drain gracefully. The config row is preserved so you can re-enable later with `enable_pgbouncer`. Valid from `enabled` or `error` state — use this to recover from `error`.", {
+    server.tool("disable_pgbouncer", "Disable PgBouncer on an instance. Existing connections drain gracefully. The config row is preserved so you can re-enable later with `enable_pgbouncer`. Valid from `enabled` or `error` state - use this to recover from `error`.", {
         instance_id: z.string().min(1),
         confirm: z.boolean().describe("Must be true to proceed. Disabling will drop pool warmth and force clients back to port 5432."),
     }, async ({ instance_id, confirm }) => {
@@ -146,7 +146,7 @@ export function registerPgBouncerTools(server) {
         }
         return {
             content: [
-                { type: "text", text: "PgBouncer disable requested — clients should switch to port 5432." },
+                { type: "text", text: "PgBouncer disable requested - clients should switch to port 5432." },
                 { type: "text", text: JSON.stringify(result.data, null, 2) },
             ],
         };

package/dist/tools/pitr.js

@@ -1,20 +1,20 @@
 import { z } from "zod";
 import { apiRequest } from "../client.js";
 /**
- * Point-in-Time Recovery (PITR) — continuous WAL archiving to S3 + restore
+ * Point-in-Time Recovery (PITR) - continuous WAL archiving to S3 + restore
  * to any second within the retention window.
  *
  * Endpoints:
- * - GET    /aws/v1/instances/:id/pitr             — current config + restore window
- * - POST   /aws/v1/instances/:id/pitr             — enable
- * - PUT    /aws/v1/instances/:id/pitr/configure   — toggle enabled/disabled
- * - POST   /aws/v1/instances/:id/pitr/retry       — recover from error
- * - POST   /aws/v1/instances/:id/pitr/base_backup — trigger one-off backup
- * - GET    /aws/v1/instances/:id/pitr/base_backups — list base backups
- * - POST   /aws/v1/instances/:id/pitr/restore     — restore to point-in-time
+ * - GET    /aws/v1/instances/:id/pitr             - current config + restore window
+ * - POST   /aws/v1/instances/:id/pitr             - enable
+ * - PUT    /aws/v1/instances/:id/pitr/configure   - toggle enabled/disabled
+ * - POST   /aws/v1/instances/:id/pitr/retry       - recover from error
+ * - POST   /aws/v1/instances/:id/pitr/base_backup - trigger one-off backup
+ * - GET    /aws/v1/instances/:id/pitr/base_backups - list base backups
+ * - POST   /aws/v1/instances/:id/pitr/restore     - restore to point-in-time
  *
  * Postgres-only, Pro+ plan only. Status: configuring | enabled | disabled |
- * error. Restore creates a NEW instance — the source stays untouched.
+ * error. Restore creates a NEW instance - the source stays untouched.
  */
 const PITR_TOGGLE = ["enabled", "disabled"];
 export function registerPitrTools(server) {
@@ -35,7 +35,7 @@ export function registerPitrTools(server) {
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
-    server.tool("enable_pitr", "Enable PITR on a Postgres instance — streams WAL to S3 continuously and takes nightly base backups. The S3 bucket must exist in the same region; the instance role needs s3:PutObject / GetObject / ListBucket. Status transitions: configuring → enabled (or error).", {
+    server.tool("enable_pitr", "Enable PITR on a Postgres instance - streams WAL to S3 continuously and takes nightly base backups. The S3 bucket must exist in the same region; the instance role needs s3:PutObject / GetObject / ListBucket. Status transitions: configuring → enabled (or error).", {
         instance_id: z.string().min(1),
         s3_bucket: z.string().min(3).max(63).regex(/^[a-z0-9.-]+$/, "lowercase letters, digits, dots, hyphens only")
             .describe("S3 bucket name (must exist in same region)"),
@@ -65,7 +65,7 @@ export function registerPitrTools(server) {
     });
     server.tool("configure_pitr", "Toggle an existing PITR config between `enabled` (resume WAL archiving) and `disabled` (pause). The bucket and retention are preserved either way. Use `enable_pitr` for first-time setup, not this.", {
         instance_id: z.string().min(1),
-        status: z.enum(PITR_TOGGLE).describe("Target state — enabled resumes WAL, disabled pauses it"),
+        status: z.enum(PITR_TOGGLE).describe("Target state - enabled resumes WAL, disabled pauses it"),
     }, async ({ instance_id, status }) => {
         const result = await apiRequest(`/aws/v1/instances/${instance_id}/pitr/configure`, {
             method: "PUT",
@@ -86,8 +86,8 @@ export function registerPitrTools(server) {
                 {
                     type: "text",
                     text: status === "enabled"
-                        ? "PITR resumed — WAL archiving is back on."
-                        : "PITR paused — no new WAL or base backups. Existing backups are preserved.",
+                        ? "PITR resumed - WAL archiving is back on."
+                        : "PITR paused - no new WAL or base backups. Existing backups are preserved.",
                 },
                 { type: "text", text: JSON.stringify(result.data, null, 2) },
             ],
@@ -116,7 +116,7 @@ export function registerPitrTools(server) {
             ],
         };
     });
-    server.tool("trigger_pitr_base_backup", "Trigger a one-off base backup now. The backup runs `wal-g backup-push` in the background — your instance keeps serving traffic. Useful before risky migrations or to seed the restore window after a fresh enable.", {
+    server.tool("trigger_pitr_base_backup", "Trigger a one-off base backup now. The backup runs `wal-g backup-push` in the background - your instance keeps serving traffic. Useful before risky migrations or to seed the restore window after a fresh enable.", {
         instance_id: z.string().min(1),
     }, async ({ instance_id }) => {
         const result = await apiRequest(`/aws/v1/instances/${instance_id}/pitr/base_backup`, {
@@ -134,7 +134,7 @@ export function registerPitrTools(server) {
         }
         return {
             content: [
-                { type: "text", text: "Base backup triggered. Track it via `list_pitr_base_backups` — status moves pending → running → completed (or failed)." },
+                { type: "text", text: "Base backup triggered. Track it via `list_pitr_base_backups` - status moves pending → running → completed (or failed)." },
                 { type: "text", text: JSON.stringify(result.data, null, 2) },
             ],
         };
@@ -156,7 +156,7 @@ export function registerPitrTools(server) {
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
-    server.tool("restore_pitr", "Restore an instance to a point in time. Creates a NEW Postgres instance recovered to `target_time` — the source instance is untouched. `target_time` must fall within the source instance's [oldest_restore_point, latest_restore_point] window (see `get_pitr`). `name` is the new instance name; must start with a letter and use letters/digits/hyphens only.", {
+    server.tool("restore_pitr", "Restore an instance to a point in time. Creates a NEW Postgres instance recovered to `target_time` - the source instance is untouched. `target_time` must fall within the source instance's [oldest_restore_point, latest_restore_point] window (see `get_pitr`). `name` is the new instance name; must start with a letter and use letters/digits/hyphens only.", {
         instance_id: z.string().min(1).describe("Source instance to restore FROM"),
         target_time: z.string().regex(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?Z?$/, "ISO 8601 timestamp, ideally with Z suffix (UTC)").describe("Target moment, e.g. 2026-05-12T14:30:00Z"),
         name: z.string().regex(/^[a-zA-Z][a-zA-Z0-9-]{0,62}$/, "1-63 chars, must start with a letter")

package/dist/tools/project-databases.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerProjectDatabaseTools(server: McpServer): void;