@selfhost.dev/mcp-server 0.7.0 → 0.9.0

package/dist/tools/organizations.js

@@ -5,6 +5,33 @@ import { session } from "../session.js";
 function resolveOrgId(organization_id) {
     return organization_id || session.getActiveOrgId();
 }
+/**
+ * The five organization roles. `pid` values are seeded literals (`db/seeds.rb`),
+ * shared across every org and stable, which is why they can be named here.
+ *
+ * They have to be: the API takes `role_pid`, but NOTHING returns the full role
+ * catalogue. `list_members` gives each member's role as a SLUG only, and
+ * `get_my_memberships` gives a pid only for the caller's own role. Without this
+ * table an agent cannot name a role it is not already holding.
+ *
+ * `priority` is what the backend's authorization compares, so it is the number
+ * that decides whether a caller may grant or change a given role.
+ */
+const ROLES = {
+    owner: { pid: "role_owner", name: "Owner", priority: 100, summary: "Full control, including billing and deleting the org" },
+    admin: { pid: "role_admin", name: "Admin", priority: 80, summary: "Manages members, settings, projects, instances and alerts; reads billing" },
+    billing: { pid: "role_billing", name: "Billing", priority: 60, summary: "Billing and payment management" },
+    manager: { pid: "role_manager", name: "Manager", priority: 40, summary: "Operates resources without member or billing control" },
+    member: { pid: "role_member", name: "Member", priority: 20, summary: "Day-to-day access, no administrative control" },
+};
+const ROLE_SLUGS = ["owner", "admin", "billing", "manager", "member"];
+/** Rendered into the tool descriptions so the model sees the ladder, not just names. */
+const ROLE_LADDER = ROLE_SLUGS.map((r) => `\`${r}\` ${ROLES[r].name} (priority ${ROLES[r].priority}) - ${ROLES[r].summary}`).join("; ");
+/**
+ * The rule the backend applies to both role changes and member removal. Stated in
+ * full because a caller who trips it gets a 422 that reads like a bug otherwise.
+ */
+const ROLE_AUTHORITY_RULE = "AUTHORITY: an owner may manage everyone. An admin may only manage STRICTLY BELOW their own priority - never a peer admin, and never grant a role at or above their own. You can never change your OWN role (self-demotion would lock you out, self-promotion would be an escalation); an owner stepping down has to be demoted by another owner. The last owner cannot be demoted or removed.";
 export function registerOrganizationTools(server) {
     server.tool("list_organizations", "List all organizations you belong to", {}, async () => {
         const result = await apiRequest("/organizations", {
@@ -34,11 +61,15 @@ export function registerOrganizationTools(server) {
             return { content: [{ type: "text", text: `Failed to create organization (${result.statusCode}): ${result.message}` }] };
         }
         const org = result.data;
-        // Auto-select the newly created org
-        session.setActiveOrg({
-            id: org.id,
-            name: org.name,
-        });
+        // Auto-select the newly created org. The payload carries `pid`, not `id` - reading
+        // `id` here left the session unset, so the very next call claimed no org was selected.
+        const newOrgId = org.pid ?? org.id;
+        if (newOrgId) {
+            session.setActiveOrg({
+                id: newOrgId,
+                name: org.name,
+            });
+        }
         return {
             content: [
                 { type: "text", text: `Organization "${org.name}" created. You are now working in this org.` },
@@ -118,7 +149,11 @@ export function registerOrganizationTools(server) {
         }
         return { content: [{ type: "text", text: `Organization ${orgId} deleted.` }] };
     });
-    server.tool("list_members", "List members of an organization with their roles", {
+    server.tool("list_members", `List members of an organization with their roles. Each row carries the user pid (as \`id\`), email, name, \`last_active_at\`, \`joined_at\` and \`role\`.
+
+\`role\` is a SLUG, not a pid: one of ${ROLE_SLUGS.map((r) => `\`${r}\``).join(", ")}. \`update_member_role\` takes the slug too, so you can pass what you read here straight through.
+
+The ladder, highest first: ${ROLE_LADDER}.`, {
         organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
     }, async ({ organization_id }) => {
         const orgId = resolveOrgId(organization_id);
@@ -134,9 +169,15 @@ export function registerOrganizationTools(server) {
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
-    server.tool("remove_member", "DESTRUCTIVE: Remove a member from an organization (requires owner or admin role). Cannot remove the last owner. You MUST set confirm=true to proceed.", {
+    server.tool("remove_member", `DESTRUCTIVE: Remove a member from an organization. They lose access immediately.
+
+${ROLE_AUTHORITY_RULE} The same strict-priority rule applies here as to \`update_member_role\`, deliberately - otherwise an admin blocked from demoting a peer could just remove them instead. Removing YOURSELF (leaving the org) is allowed.
+
+If the intent is to reduce someone's access rather than end it, \`update_member_role\` is the tool - offer that first.
+
+You MUST set confirm=true to proceed.`, {
         organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
-        user_id: z.string().min(1, "User PID is required"),
+        user_id: z.string().min(1, "User PID is required").describe("The member's user pid - the `id` field from `list_members`"),
         confirm: z.boolean().describe("Must be true to proceed. Ask the user for explicit confirmation before setting this."),
     }, async ({ organization_id, user_id, confirm }) => {
         const orgId = resolveOrgId(organization_id);
@@ -161,27 +202,80 @@ export function registerOrganizationTools(server) {
         }
         return { content: [{ type: "text", text: `Member ${user_id} removed from organization.` }] };
     });
-    server.tool("invite_to_org", "Invite a user to your organization by email. Requires members:invite permission. Role hierarchy is enforced (can only invite at or below your role).", {
+    server.tool("invite_to_org", `Invite a user to your organization by email, at a role you choose.
+
+Pass \`role\` as a slug - ${ROLE_SLUGS.map((r) => `\`${r}\``).join(", ")} - and this resolves it to the pid the API wants. (\`role_pid\` is still accepted for a role this tool does not know about, but you should not normally need it.)
+
+The ladder: ${ROLE_LADDER}.
+
+${ROLE_AUTHORITY_RULE}
+
+Requires \`members:invite\`. The invitee gets an email with a token; the membership does not exist until they accept, so they will not show in \`list_members\` yet - track them with \`list_org_invitations\`.`, {
         organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
         email: z.string().email("Valid email is required"),
-        role_pid: z.string().min(1, "Role PID is required (e.g. role PID for member, admin, etc.)"),
-    }, async ({ organization_id, email, role_pid }) => {
+        role: z.enum(ROLE_SLUGS).optional().describe("Role to invite at, by slug. Resolved to the backend's role pid for you. Prefer this over role_pid."),
+        role_pid: z.string().min(1).optional().describe("Escape hatch: pass a raw role pid instead of `role`. Only needed for a role this tool does not list."),
+    }, async ({ organization_id, email, role, role_pid }) => {
         const orgId = resolveOrgId(organization_id);
         if (!orgId) {
             return { content: [{ type: "text", text: "No organization selected. Call `select_organization` first or pass an organization_id." }] };
         }
+        const resolvedPid = role ? ROLES[role].pid : role_pid;
+        if (!resolvedPid) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Which role should ${email} be invited at? Pass \`role\` as one of ${ROLE_SLUGS.join(", ")}. Ask the user rather than picking - the roles differ in who can manage members and see billing: ${ROLE_LADDER}.`,
+                    }],
+            };
+        }
         const result = await apiRequest(`/organizations/${orgId}/invitations`, {
             method: "POST",
-            body: { email, role_pid },
+            body: { email, role_pid: resolvedPid },
             toolName: "invite_to_org",
             skipOrgInjection: true,
         });
         if (!result.success) {
             return { content: [{ type: "text", text: `Failed to send invitation (${result.statusCode}): ${result.message}` }] };
         }
+        const roleLabel = role ? ROLES[role].name : resolvedPid;
+        return {
+            content: [
+                { type: "text", text: `Invitation sent to ${email} as ${roleLabel}. They appear in \`list_org_invitations\` until they accept, then in \`list_members\`.` },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("update_member_role", `Change an existing member's role. This is the only way to promote or demote someone after they have joined - inviting them again does not do it.
+
+Pass \`role\` as a slug: ${ROLE_SLUGS.map((r) => `\`${r}\``).join(", ")}. The ladder, highest first: ${ROLE_LADDER}.
+
+${ROLE_AUTHORITY_RULE}
+
+\`user_id\` is the member's USER pid - the \`id\` field from \`list_members\`, not their membership or email.
+
+A 422 here is almost always one of the authority rules above rather than a fault: read the message back to the user instead of retrying. Confirm the change with them first - a demotion can remove someone's access to billing or to every instance in the org.`, {
+        organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
+        user_id: z.string().min(1).describe("The member's user pid - the `id` field from `list_members`"),
+        role: z.enum(ROLE_SLUGS).describe("The role to move them to"),
+    }, async ({ organization_id, user_id, role }) => {
+        const orgId = resolveOrgId(organization_id);
+        if (!orgId) {
+            return { content: [{ type: "text", text: "No organization selected. Call `select_organization` first or pass an organization_id." }] };
+        }
+        const target = ROLES[role];
+        const result = await apiRequest(`/organizations/${orgId}/members/${user_id}/role`, {
+            method: "PATCH",
+            body: { role_pid: target.pid },
+            toolName: "update_member_role",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to change member role (${result.statusCode}): ${result.message}` }] };
+        }
         return {
             content: [
-                { type: "text", text: `Invitation sent to ${email}.` },
+                { type: "text", text: `Member ${user_id} is now ${target.name} (priority ${target.priority}).` },
                 { type: "text", text: JSON.stringify(result.data, null, 2) },
             ],
         };

package/dist/tools/organizations.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../src/tools/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,kFAAkF;AAClF,SAAS,YAAY,CAAC,eAAwB;IAC5C,OAAO,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IACzD,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,sCAAsC,EACtC,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,UAAU,CAAiB,gBAAgB,EAAE;YAChE,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACzH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,mGAAmG,EACnG;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,+BAA+B,CAAC;QACjE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrD,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE,EAAE;QAC7D,MAAM,IAAI,GAA4B;YACpC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE;SACnE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,gBAAgB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAK,CAAC;QACzB,oCAAoC;QACpC,OAAO,CAAC,YAAY,CAAC;YACnB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,IAAI,6CAA6C,EAAE;gBAC9F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACrD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,8DAA8D,EAC9D;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,kBAAkB,KAAK,EAAE,EAAE;YACvE,QAAQ,EAAE,kBAAkB;YAC5B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACvH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,wFAAwF,EACxF;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrD,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE,EAAE;QAC9E,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,kBAAkB,KAAK,EAAE,EAAE;YACvE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE;YAC5E,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE;gBAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,gKAAgK,EAChK;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wCAAwC,KAAK,2JAA2J;qBAC/M,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,EAAE,EAAE;YAClE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd,kDAAkD,EAClD;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,UAAU,EAAE;YAC1E,QAAQ,EAAE,cAAc;YACxB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACnH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,uJAAuJ,EACvJ;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;QAClD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kCAAkC,OAAO,sBAAsB,KAAK,sGAAsG;qBACjL,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,YAAY,OAAO,EAAE,EAAE;YACrF,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,eAAe;YACzB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACpH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,6BAA6B,EAAE,CAAC,EAAE,CAAC;IAC/F,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,sJAAsJ,EACtJ;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8DAA8D,CAAC;KAC5F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,cAAc,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;YACzB,QAAQ,EAAE,eAAe;YACzB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACtH,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,KAAK,GAAG,EAAE;gBACtD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,8CAA8C,EAC9C;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,cAAc,EAAE;YAC9E,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACvH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,8FAA8F,EAC9F;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sCAAsC,aAAa,2GAA2G;qBACrK,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,gBAAgB,aAAa,EAAE,EAAE;YAC/F,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,mBAAmB;YAC7B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACxH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,aAAa,aAAa,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,mDAAmD,EACnD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,iBAAiB,EAAE;YAC1D,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACtH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,iEAAiE,EACjE;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,gBAAgB,EAAE;YAChF,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACzH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../src/tools/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAGxC,kFAAkF;AAClF,SAAS,YAAY,CAAC,eAAwB;IAC5C,OAAO,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,KAAK,GAAG;IACZ,KAAK,EAAI,EAAE,GAAG,EAAE,YAAY,EAAI,IAAI,EAAE,OAAO,EAAI,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,sDAAsD,EAAE;IACjI,KAAK,EAAI,EAAE,GAAG,EAAE,YAAY,EAAI,IAAI,EAAE,OAAO,EAAI,QAAQ,EAAE,EAAE,EAAG,OAAO,EAAE,0EAA0E,EAAE;IACrJ,OAAO,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAG,OAAO,EAAE,gCAAgC,EAAE;IAC3G,OAAO,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAG,OAAO,EAAE,sDAAsD,EAAE;IACjI,MAAM,EAAG,EAAE,GAAG,EAAE,aAAa,EAAG,IAAI,EAAE,QAAQ,EAAG,QAAQ,EAAE,EAAE,EAAG,OAAO,EAAE,8CAA8C,EAAE;CACjH,CAAC;AAIX,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAE/E,wFAAwF;AACxF,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAExI;;;GAGG;AACH,MAAM,mBAAmB,GACvB,+XAA+X,CAAC;AAElY,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IACzD,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,sCAAsC,EACtC,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,UAAU,CAAiB,gBAAgB,EAAE;YAChE,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACzH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,mGAAmG,EACnG;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,+BAA+B,CAAC;QACjE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrD,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE,EAAE;QAC7D,MAAM,IAAI,GAA4B;YACpC,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE;SACnE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,gBAAgB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAK,CAAC;QACzB,mFAAmF;QACnF,uFAAuF;QACvF,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,YAAY,CAAC;gBACnB,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,IAAI,6CAA6C,EAAE;gBAC9F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACrD;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,8DAA8D,EAC9D;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,kBAAkB,KAAK,EAAE,EAAE;YACvE,QAAQ,EAAE,kBAAkB;YAC5B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACvH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,wFAAwF,EACxF;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrD,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE,EAAE;QAC9E,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAe,kBAAkB,KAAK,EAAE,EAAE;YACvE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE,EAAE;YAC5E,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE;gBAC/C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,gKAAgK,EAChK;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wCAAwC,KAAK,2JAA2J;qBAC/M,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,EAAE,EAAE;YAClE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,qBAAqB;YAC/B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;QAED,sDAAsD;QACtD,IAAI,OAAO,CAAC,cAAc,EAAE,KAAK,KAAK,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,cAAc,EACd;;wCAEoC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;6BAEvD,WAAW,GAAG,EACvC;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,UAAU,EAAE;YAC1E,QAAQ,EAAE,cAAc;YACxB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACnH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf;;EAEF,mBAAmB;;;;sCAIiB,EAClC;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QACzH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,kCAAkC,OAAO,sBAAsB,KAAK,sGAAsG;qBACjL,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,YAAY,OAAO,EAAE,EAAE;YACrF,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,eAAe;YACzB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACpH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,6BAA6B,EAAE,CAAC,EAAE,CAAC;IAC/F,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf;;4BAEwB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;cAE1D,WAAW;;EAEvB,mBAAmB;;gNAE2L,EAC5M;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;QAClD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oGAAoG,CAAC;QAClJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sGAAsG,CAAC;KACxJ,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,qBAAqB,KAAK,2CAA2C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,oGAAoG,WAAW,GAAG;qBACnN,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,cAAc,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE;YACtC,QAAQ,EAAE,eAAe;YACzB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACtH,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QACpE,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,KAAK,OAAO,SAAS,wFAAwF,EAAE;gBAC3J,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB;;2BAEuB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,WAAW;;EAEhH,mBAAmB;;;;iQAI4O,EAC7P;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QACjG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;KAC9D,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAgB,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,YAAY,OAAO,OAAO,EAAE;YAC1F,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE;YAC9B,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACzH,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,WAAW,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,QAAQ,IAAI,EAAE;gBAChG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,8CAA8C,EAC9C;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,cAAc,EAAE;YAC9E,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACvH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,8FAA8F,EAC9F;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sCAAsC,aAAa,2GAA2G;qBACrK,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,gBAAgB,aAAa,EAAE,EAAE;YAC/F,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,mBAAmB;YAC7B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACxH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,aAAa,aAAa,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,mDAAmD,EACnD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,iBAAiB,EAAE;YAC1D,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACtH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,iEAAiE,EACjE;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wFAAwF,EAAE,CAAC,EAAE,CAAC;QACzI,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,gBAAgB,EAAE;YAChF,QAAQ,EAAE,oBAAoB;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACzH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/postgres-tls.d.ts

@@ -0,0 +1,16 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * PostgreSQL client TLS - encryption in transit for client connections.
+ *
+ * Endpoint: PATCH /aws/v1/instances/:pid with `{ tls_enabled }` and NOTHING ELSE.
+ * The backend refuses the request outright if any other field rides along
+ * ("tls_enabled must be sent alone"), which is why this is its own tool rather
+ * than another optional field on `update_instance`.
+ *
+ * State is per instance GROUP, not per instance: one call fans out across the
+ * primary and every replica, and certificates are issued lazily per group. A
+ * restore or a fork deliberately drops the TLS flag, because the new group has
+ * no certificate of its own yet - so TLS has to be re-enabled on a restored or
+ * forked instance.
+ */
+export declare function registerPostgresTlsTools(server: McpServer): void;

package/dist/tools/postgres-tls.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+/**
+ * PostgreSQL client TLS - encryption in transit for client connections.
+ *
+ * Endpoint: PATCH /aws/v1/instances/:pid with `{ tls_enabled }` and NOTHING ELSE.
+ * The backend refuses the request outright if any other field rides along
+ * ("tls_enabled must be sent alone"), which is why this is its own tool rather
+ * than another optional field on `update_instance`.
+ *
+ * State is per instance GROUP, not per instance: one call fans out across the
+ * primary and every replica, and certificates are issued lazily per group. A
+ * restore or a fork deliberately drops the TLS flag, because the new group has
+ * no certificate of its own yet - so TLS has to be re-enabled on a restored or
+ * forked instance.
+ */
+export function registerPostgresTlsTools(server) {
+    server.tool("set_postgres_tls", `Turn client TLS on or off for a PostgreSQL instance group - encryption in transit between clients and the database.
+
+WHOLE GROUP, ONE CALL. TLS is group state, so this covers the primary and every replica together; there is no per-replica setting. Certificates are issued lazily per group.
+
+Enabling is the right default for anything a client connects to over a network the user does not control, and worth recommending if a production Postgres has it off. Once on, clients should connect with \`sslmode=require\` (or stricter) - a client left on the default may keep connecting in the clear.
+
+TURNING IT OFF is a downgrade, not a cleanup: connections go back to plaintext and any client pinned to \`sslmode=require\` starts failing. Confirm the user means it.
+
+Postgres ONLY (422 on any other engine). The instance must be \`running\` or \`provisioned\` and must have a registered agent. Fan-out is dispatched as tasks; a response saying TLS is "already" in that state is a no-op, not a failure.
+
+AFTER A RESTORE OR A FORK, TLS IS OFF even if the source had it on - the new group starts without a certificate. Re-enable it explicitly and tell the user, because a restored instance silently serving plaintext is the kind of thing nobody checks.`, {
+        instance_id: z.string().min(1, "Instance PID is required"),
+        tls_enabled: z.boolean().describe("true = require/allow TLS for client connections across the group; false = back to plaintext"),
+        confirm: z.boolean().optional().describe("Required only when turning TLS OFF, since that downgrades every client connection in the group."),
+    }, async ({ instance_id, tls_enabled, confirm }) => {
+        if (!tls_enabled && !confirm) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `About to DISABLE client TLS on instance group ${instance_id}.\n\nConnections revert to plaintext across the primary and every replica, and any client configured with \`sslmode=require\` will stop connecting.\n\nIf the goal is to fix a connection problem, check the client's sslmode first - disabling TLS server-side is rarely the right fix. To proceed, call again with confirm=true.`,
+                    }],
+            };
+        }
+        // Sent alone, deliberately: the backend 422s if any other key is present.
+        const result = await apiRequest(`/aws/v1/instances/${instance_id}`, {
+            method: "PATCH",
+            body: { tls_enabled },
+            toolName: "set_postgres_tls",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to change TLS (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: tls_enabled
+                        ? "TLS enablement dispatched across the instance group. Once it completes, point clients at `sslmode=require` - until they do, they may still connect in the clear."
+                        : "TLS disablement dispatched across the instance group. Client connections will be plaintext; clients pinned to `sslmode=require` will fail.",
+                },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=postgres-tls.js.map

package/dist/tools/postgres-tls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-tls.js","sourceRoot":"","sources":["../../src/tools/postgres-tls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;;;;;;;GAaG;AAEH,MAAM,UAAU,wBAAwB,CAAC,MAAiB;IACxD,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB;;;;;;;;;;uPAUmP,EACnP;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;QAC1D,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,6FAA6F,CAAC;QAChI,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iGAAiG,CAAC;KAC5I,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9C,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,iDAAiD,WAAW,oUAAoU;qBACvY,CAAC;aACH,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,qBAAqB,WAAW,EAAE,EAAE;YAC3E,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,WAAW,EAAE;YACrB,QAAQ,EAAE,kBAAkB;YAC5B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QACjH,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW;wBACf,CAAC,CAAC,kKAAkK;wBACpK,CAAC,CAAC,4IAA4I;iBACjJ;gBACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/project-activities.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerProjectActivityTools(server: McpServer): void;

package/dist/tools/project-activities.js

@@ -0,0 +1,52 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+import { session } from "../session.js";
+/**
+ * Project activity feed - one chronological list per project, merging Hetzner's
+ * server-action history with the platform's own ActivityLog.
+ *
+ * Endpoint:
+ * - GET /api/v1/platform/projects/:pid/activities?page=&per_page=
+ *
+ * Read-only and ungated: it works on a stopped or billing-suspended project, which
+ * is exactly when someone needs it.
+ */
+const PROJECTS_BASE = "/api/v1/platform/projects";
+const NO_ORG = "No active organization. Call `list_organizations` then `select_organization` first.";
+function hasOrg() {
+    return session.getActiveOrgId() !== null;
+}
+export function registerProjectActivityTools(server) {
+    server.tool("list_project_activities", `The history of what has happened to a project, newest first. This is the tool for "why did my project go down", "when was this restarted", "who deleted that service" - questions no other project tool can answer.
+
+Two sources merged into one chronological, paginated feed, each item tagged with \`source\`:
+- \`hetzner\` - infrastructure actions on the server itself: create_server, rebuild, enable_backup, assign_primary_ip and so on.
+- \`platform\` - our own events: backups, restores, deployments, provisioning stages, lifecycle changes including credit-driven stops.
+
+Reading them together is the point. A project that stopped answering shows the platform event and the server action side by side, which is usually enough to tell "we stopped it for billing" from "the machine was rebuilt".
+
+If Hetzner is unreachable the feed degrades to platform events only and sets \`meta.server_activities_available: false\` rather than failing. Check that flag before concluding nothing happened at the infrastructure level - an empty infra history and an unavailable one look identical otherwise.
+
+Works on a stopped or billing-suspended project.`, {
+        project_pid: z.string().min(1),
+        page: z.number().int().min(1).optional().describe("1-based page number; omit for the first (newest) page"),
+        per_page: z.number().int().min(1).max(100).optional().describe("Items per page"),
+    }, async ({ project_pid, page, per_page }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const query = {};
+        if (page !== undefined)
+            query.page = String(page);
+        if (per_page !== undefined)
+            query.per_page = String(per_page);
+        const result = await apiRequest(`${PROJECTS_BASE}/${project_pid}/activities`, {
+            toolName: "list_project_activities",
+            query,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to list project activities (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+}
+//# sourceMappingURL=project-activities.js.map

package/dist/tools/project-activities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-activities.js","sourceRoot":"","sources":["../../src/tools/project-activities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;GASG;AAEH,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,MAAM,MAAM,GACV,qFAAqF,CAAC;AAExF,SAAS,MAAM;IACb,OAAO,OAAO,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAiB;IAC5D,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB;;;;;;;;;;iDAU6C,EAC7C;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KACjF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QACxC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,KAAK,GAAuC,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,aAAa,IAAI,WAAW,aAAa,EAAE;YACrF,QAAQ,EAAE,yBAAyB;YACnC,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/project-backups.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerProjectBackupTools(server: McpServer): void;

package/dist/tools/project-backups.js

@@ -0,0 +1,159 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+import { session } from "../session.js";
+/**
+ * Project backups - native Hetzner snapshots of a project's whole VM.
+ *
+ * Endpoints:
+ * - GET  /api/v1/platform/projects/:pid/backups
+ * - POST /api/v1/platform/projects/:pid/backups/enable    (202)
+ * - POST /api/v1/platform/projects/:pid/backups/disable   (202 - DELETES existing backups)
+ * - POST /api/v1/platform/projects/:pid/backups/restore   (202 - rebuilds the VM's boot disk)
+ *
+ * Hetzner owns the schedule and retention; there is no local backup record, so
+ * `list_project_backups` reads through to Hetzner and the toggles only flip project
+ * state. Hetzner rotates and auto-deletes backups with the server.
+ *
+ * DIFFERENT THING from the managed-database backups in `backups.ts`. Those are EBS
+ * disk snapshots and ClickHouse data backups of an AWS instance. These are whole-VM
+ * images of a PaaS project's server, and they are the ONLY backup a project has -
+ * a project's databases and services live on that VM.
+ *
+ * NOT BILLED. There is no backup component for coolify and no `hetzner_*_backup` SKU,
+ * so the platform absorbs Hetzner's charge in full. An earlier version of this screen
+ * told users it added ~20% to the server cost; that was wrong and was removed. Do not
+ * reintroduce a cost claim here.
+ */
+const PROJECTS_BASE = "/api/v1/platform/projects";
+const NO_ORG = "No active organization. Call `list_organizations` then `select_organization` first.";
+function hasOrg() {
+    return session.getActiveOrgId() !== null;
+}
+/** Shared with every tool here: what a failure actually means. */
+const FAILURE_NOTE = "A 409 means the project is not `active` yet (or its server is not up) - wait, do not retry in a loop. A 502 means Hetzner refused the operation.";
+export function registerProjectBackupTools(server) {
+    server.tool("list_project_backups", `List the automatic backups of a project's server, read live from Hetzner.
+
+Returns \`backups_enabled\`, a \`backup_schedule\` (\`cadence\`, \`retention\`, and the UTC window) and the \`backups\` themselves. Each backup carries the image id you pass to \`restore_project_backup\`.
+
+Backups are daily and seven are kept - both fixed, neither configurable. Hetzner assigns the daily window shortly AFTER backups are switched on, so a just-enabled project can legitimately report the cadence and retention with a null window; that is "window pending", not a fault.
+
+This is a read and works on a stopped or billing-suspended project, so it is safe to call when a project is in trouble and the user is deciding whether they can recover it.
+
+Backups cost the customer nothing - the platform absorbs the provider charge. Do not quote a backup price.`, {
+        project_pid: z.string().min(1),
+    }, async ({ project_pid }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(`${PROJECTS_BASE}/${project_pid}/backups`, {
+            toolName: "list_project_backups",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to list project backups (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("enable_project_backups", `Turn on automatic daily backups of a project's server. Seven are kept, on a window Hetzner assigns shortly after this call.
+
+FREE. There is no backup SKU for projects, so this adds nothing to the bill - the platform absorbs the provider cost. Say that plainly if the user asks what it costs; do not hedge with a percentage.
+
+Given that, this is close to a straight win for any project holding real data, and worth recommending when a user has databases or services in a project with backups off.
+
+The project must be \`active\`. ${FAILURE_NOTE}
+
+Returns 202. Confirm with \`list_project_backups\`; the first backup appears after the first window passes, not immediately.`, {
+        project_pid: z.string().min(1),
+    }, async ({ project_pid }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(`${PROJECTS_BASE}/${project_pid}/backups/enable`, {
+            method: "POST",
+            toolName: "enable_project_backups",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to enable project backups (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: "Automatic daily backups enabled (7 kept, no extra charge). The window is assigned shortly - `list_project_backups` will show it, and the first backup lands after the first window passes." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("disable_project_backups", `DESTRUCTIVE: turn off automatic backups for a project AND DELETE THE BACKUPS ALREADY TAKEN. Hetzner removes them with the schedule; there is no pause that keeps them and no way to get them back.
+
+So this is not "stop making new backups" - it is "stop, and throw away every restore point this project has". Check with the user that they mean both. If they only want to stop paying for something, tell them backups are free and there is nothing to save.
+
+The project must be \`active\`. ${FAILURE_NOTE}
+
+You MUST set confirm=true to proceed.`, {
+        project_pid: z.string().min(1),
+        confirm: z.boolean().describe("Must be true. Deletes every existing backup of this project, irreversibly."),
+    }, async ({ project_pid, confirm }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        if (!confirm) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `About to disable backups on project ${project_pid}.\n\nThis DELETES every backup already taken - the project loses all of its restore points, permanently. Backups are free, so there is no cost reason to do this.\n\nCall \`list_project_backups\` first if the user wants to see what they are giving up. To proceed, call again with confirm=true.`,
+                    }],
+            };
+        }
+        const result = await apiRequest(`${PROJECTS_BASE}/${project_pid}/backups/disable`, {
+            method: "POST",
+            toolName: "disable_project_backups",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to disable project backups (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: "Automatic backups disabled and existing backups removed." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("restore_project_backup", `DESTRUCTIVE: rebuild a project's server from one of its backups. The VM's boot disk is overwritten, so EVERYTHING on it goes back to the state it was in when that backup was taken - the Coolify install, every service, and every project database, including anything written since.
+
+This is a real rollback, unlike the ClickHouse data restore in \`restore_backup\` which merges. Data created after the chosen backup is gone and cannot be recovered.
+
+The project goes to status \`restoring\` and is UNAVAILABLE while the server is rebuilt. Every app and database in it is down for the duration.
+
+Requires \`image_id\` from \`list_project_backups\`, and \`name\` must exactly match the project's current name (422 otherwise) - that check exists so a restore cannot be fired at the wrong project. Backups must be enabled.
+
+${FAILURE_NOTE}
+
+Before calling: show the user the backup list with dates, get them to pick, and state what they will lose. You MUST set confirm=true.`, {
+        project_pid: z.string().min(1),
+        image_id: z.union([z.string(), z.number()]).describe("The backup image to restore, from `list_project_backups`"),
+        name: z.string().min(1).describe("The project's exact current name - must match or the backend refuses"),
+        confirm: z.boolean().describe("Must be true. Overwrites the server's disk; everything written since this backup is lost."),
+    }, async ({ project_pid, image_id, name, confirm }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        if (!confirm) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `About to REBUILD project \`${name}\` (${project_pid}) from backup image ${image_id}.\n\nThe server's disk is overwritten. Coolify, every service and every project database revert to that backup's state, and anything written since is permanently lost. The project is unavailable throughout.\n\nConfirm with the user which backup they picked and what they are discarding, then call again with confirm=true.`,
+                    }],
+            };
+        }
+        const result = await apiRequest(`${PROJECTS_BASE}/${project_pid}/backups/restore`, {
+            method: "POST",
+            body: { image_id, name },
+            toolName: "restore_project_backup",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to start project restore (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: "Restore started. The project is now `restoring` and unavailable until the server has been rebuilt - poll `get_project` until it returns to `active`." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=project-backups.js.map

package/dist/tools/project-backups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-backups.js","sourceRoot":"","sources":["../../src/tools/project-backups.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,MAAM,MAAM,GACV,qFAAqF,CAAC;AAExF,SAAS,MAAM;IACb,OAAO,OAAO,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,kEAAkE;AAClE,MAAM,YAAY,GAChB,kJAAkJ,CAAC;AAErJ,MAAM,UAAU,0BAA0B,CAAC,MAAiB;IAC1D,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB;;;;;;;;2GAQuG,EACvG;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,aAAa,IAAI,WAAW,UAAU,EAAE;YAClF,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3H,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB;;;;;;kCAM8B,YAAY;;6HAE+E,EACzH;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,aAAa,IAAI,WAAW,iBAAiB,EAAE;YACzF,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,wBAAwB;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4LAA4L,EAAE;gBACpN,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB;;;;kCAI8B,YAAY;;sCAER,EAClC;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;KAC5G,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;QACjC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,uCAAuC,WAAW,sSAAsS;qBAC/V,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,aAAa,IAAI,WAAW,kBAAkB,EAAE;YAC1F,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,yBAAyB;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0DAA0D,EAAE;gBAClF,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB;;;;;;;;EAQF,YAAY;;sIAEwH,EAClI;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAChH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sEAAsE,CAAC;QACxG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,2FAA2F,CAAC;KAC3H,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QACjD,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,8BAA8B,IAAI,OAAO,WAAW,uBAAuB,QAAQ,mUAAmU;qBAC7Z,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,GAAG,aAAa,IAAI,WAAW,kBAAkB,EAAE;YAC1F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YACxB,QAAQ,EAAE,wBAAwB;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC5H,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sJAAsJ,EAAE;gBAC9K,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/project-databases.js

@@ -9,10 +9,12 @@ import { session } from "../session.js";
  *
  * Endpoints:
  * - GET    /api/v1/platform/projects/:pid/databases
+ * - GET    /api/v1/platform/projects/:pid/databases/:database_pid   (refreshes status live)
  * - POST   /api/v1/platform/projects/:pid/databases/:db_type   (202 - async provisioning)
  * - DELETE /api/v1/platform/projects/:pid/databases/:database_pid   (202; body {name} must match)
  *
- * The project must be `active` before creating a database (409 otherwise).
+ * The project must be `active` before creating a database (409 otherwise). `show` is
+ * NOT gated that way - a billing-stopped project can still be inspected.
  */
 const PROJECTS_BASE = "/api/v1/platform/projects";
 const DB_TYPES = ["postgres", "redis", "mysql", "mongodb"];
@@ -36,7 +38,9 @@ function checkPassword(label, v) {
     return null;
 }
 export function registerProjectDatabaseTools(server) {
-    server.tool("list_project_databases", "List the databases attached to a project (Postgres/Redis/MySQL/MongoDB provisioned via Coolify, NOT AWS managed instances). Returns pid, name, db_type, status (active | inactive | creating | failed | unknown), is_public, and public_port. Passwords are never returned here.", {
+    server.tool("list_project_databases", `List the databases attached to a project (Postgres/Redis/MySQL/MongoDB provisioned via Coolify, NOT AWS managed instances). Returns pid, name, db_type, status (\`active\` | \`inactive\` | \`creating\` | \`failed\` | \`unknown\`), is_public, public_port, \`vector_enabled\` / \`timescaledb_enabled\` on Postgres, and a \`provisioning\` block with per-stage progress.
+
+Passwords are never returned here. Statuses on this list are the last known values; \`get_project_database\` re-reads one live from Coolify.`, {
         project_pid: z.string().min(1),
     }, async ({ project_pid }) => {
         if (!hasOrg())
@@ -49,6 +53,26 @@ export function registerProjectDatabaseTools(server) {
         }
         return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
     });
+    server.tool("get_project_database", `Get one project database, with its status re-read LIVE from Coolify rather than served from the last known value. Use this when \`list_project_databases\` shows \`creating\` and you need to know whether it has actually finished, or when a status looks stale.
+
+Also returns \`vector_enabled\` / \`timescaledb_enabled\` (Postgres) and the \`provisioning\` stage block, so it is the tool to reach for when a user asks why provisioning is taking so long.
+
+Unlike create, this works on a stopped or billing-suspended project. On one of those the live refresh is skipped (the server is powered off and there is nothing to ask) and you get the stored record - so a \`creating\` status on a stopped project means "we never found out", not "still working".
+
+Passwords are not returned. Connection details for a project database come from the console.`, {
+        project_pid: z.string().min(1),
+        database_pid: z.string().min(1),
+    }, async ({ project_pid, database_pid }) => {
+        if (!hasOrg())
+            return { content: [{ type: "text", text: NO_ORG }] };
+        const result = await apiRequest(`${PROJECTS_BASE}/${project_pid}/databases/${database_pid}`, {
+            toolName: "get_project_database",
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to get project database (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
     server.tool("create_project_database", `Create a database inside a project (provisioned via Coolify; returns 202, status starts \`creating\` - poll \`list_project_databases\`). The project must be \`active\`. Provide the type-specific credentials (see fields). Passwords must be 8+ chars with no spaces or shell-dangerous chars. \`is_public\` is REQUIRED and has no default: ASK THE USER whether the database should be publicly reachable on a port (convenient for external clients but exposes it to the internet) or kept private to the project (safer). Do not assume.
 
 POSTGRES EXTENSIONS (create-time only here - unlike AWS instances, a project database cannot gain an extension later; you would have to recreate it):