@selfhost.dev/mcp-server 0.7.0 → 0.9.0

package/dist/tools/webhooks.js

@@ -0,0 +1,195 @@
+import { z } from "zod";
+import { apiRequest } from "../client.js";
+import { session } from "../session.js";
+/**
+ * Outgoing webhook endpoints - HTTPS callbacks the platform POSTs to when
+ * something happens in the organization.
+ *
+ * Endpoints (org-scoped, full CRUD):
+ * - GET    /organizations/:pid/webhook_endpoints
+ * - GET    /organizations/:pid/webhook_endpoints/:id
+ * - POST   /organizations/:pid/webhook_endpoints
+ * - PATCH  /organizations/:pid/webhook_endpoints/:id
+ * - DELETE /organizations/:pid/webhook_endpoints/:id   (204)
+ *
+ * These are ORG-WIDE and event-typed, which makes them different from the
+ * deployment notification bindings in `deployment-notifications.ts` - those wire
+ * one deployment's outcomes to a notification channel (Slack, email). If a user
+ * wants "tell my Slack when this app deploys", that is the other module. If they
+ * want "POST to my service when anything of this type happens anywhere in the
+ * org", it is this one.
+ *
+ * A `secret` is generated server-side at create so the receiver can verify the
+ * signature. It is not settable.
+ */
+const VALID_EVENTS = [
+    "instance.scaling_failed",
+    "deploy_run.succeeded",
+    "deploy_run.failed",
+    "deploy_run.aborted",
+    "preview_deployment.created",
+    "preview_deployment.destroyed",
+    "database_user.password_rotated",
+];
+/** What each event is actually for - so a subscription is a choice, not a guess. */
+const EVENT_NOTES = [
+    "`instance.scaling_failed` - an auto-scale or resize did not complete. The one worth subscribing to for anything production: a failed scale is silent otherwise, and a failed cluster scale plan also blocks all further scaling for that group.",
+    "`deploy_run.succeeded` / `deploy_run.failed` / `deploy_run.aborted` - a build run reached a terminal state. Fires for every deployment in the org, not one app.",
+    "`preview_deployment.created` / `preview_deployment.destroyed` - a per-branch preview environment appeared or went away.",
+    "`database_user.password_rotated` - a database user's password was rotated. THIS IS THE SIGNAL a credential consumer needs when `password_rotation_enabled` is true on that user: the payload never carries the password, so the receiver must refetch with `rotate_database_user_password`. Subscribing to it is what makes automatic rotation safe rather than breaking.",
+].join("\n- ");
+const noOrgMessage = "No organization selected. Call `select_organization` first or pass an organization_id.";
+function resolveOrgId(organization_id) {
+    return organization_id || session.getActiveOrgId();
+}
+export function registerWebhookTools(server) {
+    server.tool("list_webhook_endpoints", `List the organization's outgoing webhook endpoints - the HTTPS URLs the platform calls when subscribed events happen.
+
+Each row carries its \`pid\`, \`url\` and \`subscribed_events\`.
+
+Not to be confused with deployment notification channels (\`list_deployment_notification_bindings\`), which push a specific deployment's outcome to Slack or email. These are org-wide, event-typed HTTP callbacks for a receiver you run.`, {
+        organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
+    }, async ({ organization_id }) => {
+        const orgId = resolveOrgId(organization_id);
+        if (!orgId)
+            return { content: [{ type: "text", text: noOrgMessage }] };
+        const result = await apiRequest(`/organizations/${orgId}/webhook_endpoints`, {
+            toolName: "list_webhook_endpoints",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to list webhook endpoints (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("get_webhook_endpoint", "Get one webhook endpoint - its URL and the events it is subscribed to. Use it to check what a receiver will actually be told before changing anything.", {
+        webhook_endpoint_id: z.string().min(1).describe("Endpoint pid, from `list_webhook_endpoints`"),
+        organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
+    }, async ({ webhook_endpoint_id, organization_id }) => {
+        const orgId = resolveOrgId(organization_id);
+        if (!orgId)
+            return { content: [{ type: "text", text: noOrgMessage }] };
+        const result = await apiRequest(`/organizations/${orgId}/webhook_endpoints/${webhook_endpoint_id}`, {
+            toolName: "get_webhook_endpoint",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to get webhook endpoint (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: JSON.stringify(result.data, null, 2) }] };
+    });
+    server.tool("create_webhook_endpoint", `Register an HTTPS URL to receive platform events for this organization.
+
+The URL MUST be HTTPS - plain HTTP is rejected. At least one event is required.
+
+Available events:
+- ${EVENT_NOTES}
+
+Subscribe deliberately: every event fires for the WHOLE organization, so \`deploy_run.*\` on a busy org is a lot of traffic to a receiver that only cares about one app.
+
+A signing \`secret\` is generated server-side at create and is NOT settable. The receiver should verify it - tell the user to grab it from the create response, because that is how they authenticate the calls.
+
+Requires \`webhook_endpoints:create\` (owner or admin).`, {
+        organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
+        url: z.string().url().describe("HTTPS URL to POST events to. Plain HTTP is rejected."),
+        subscribed_events: z.array(z.enum(VALID_EVENTS)).min(1).describe("Events to send. An unknown event name is rejected with the offending value named."),
+    }, async ({ organization_id, url, subscribed_events }) => {
+        const orgId = resolveOrgId(organization_id);
+        if (!orgId)
+            return { content: [{ type: "text", text: noOrgMessage }] };
+        if (!url.toLowerCase().startsWith("https://")) {
+            return { content: [{ type: "text", text: "Webhook URLs must be HTTPS - the backend rejects plain HTTP. Events carry account activity, so the transport has to be encrypted." }] };
+        }
+        const result = await apiRequest(`/organizations/${orgId}/webhook_endpoints`, {
+            method: "POST",
+            body: { webhook_endpoint: { url, subscribed_events } },
+            toolName: "create_webhook_endpoint",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to create webhook endpoint (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: `Webhook endpoint created for ${url}, subscribed to ${subscribed_events.length} event type(s). The response includes a signing secret - the receiver needs it to verify calls, so pass it to the user now; it is generated once.` },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("update_webhook_endpoint", `Change a webhook endpoint's URL or which events it receives.
+
+\`subscribed_events\` REPLACES the list, it does not add to it. Read the current set with \`get_webhook_endpoint\` and send the full intended list, or you will silently unsubscribe the receiver from everything you left out.
+
+Available events:
+- ${EVENT_NOTES}
+
+Requires \`webhook_endpoints:update\` (owner or admin).`, {
+        webhook_endpoint_id: z.string().min(1).describe("Endpoint pid, from `list_webhook_endpoints`"),
+        organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
+        url: z.string().url().optional().describe("New HTTPS URL"),
+        subscribed_events: z.array(z.enum(VALID_EVENTS)).min(1).optional().describe("REPLACES the whole subscription list - include everything the endpoint should keep receiving"),
+    }, async ({ webhook_endpoint_id, organization_id, url, subscribed_events }) => {
+        const orgId = resolveOrgId(organization_id);
+        if (!orgId)
+            return { content: [{ type: "text", text: noOrgMessage }] };
+        if (url && !url.toLowerCase().startsWith("https://")) {
+            return { content: [{ type: "text", text: "Webhook URLs must be HTTPS - the backend rejects plain HTTP." }] };
+        }
+        const endpoint = {};
+        if (url !== undefined)
+            endpoint.url = url;
+        if (subscribed_events !== undefined)
+            endpoint.subscribed_events = subscribed_events;
+        if (Object.keys(endpoint).length === 0) {
+            return { content: [{ type: "text", text: "No changes to apply - pass `url`, `subscribed_events`, or both." }] };
+        }
+        const result = await apiRequest(`/organizations/${orgId}/webhook_endpoints/${webhook_endpoint_id}`, {
+            method: "PATCH",
+            body: { webhook_endpoint: endpoint },
+            toolName: "update_webhook_endpoint",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to update webhook endpoint (${result.statusCode}): ${result.message}` }] };
+        }
+        return {
+            content: [
+                { type: "text", text: subscribed_events ? "Webhook endpoint updated. Its subscription is now exactly the list you sent." : "Webhook endpoint updated." },
+                { type: "text", text: JSON.stringify(result.data, null, 2) },
+            ],
+        };
+    });
+    server.tool("delete_webhook_endpoint", `DESTRUCTIVE: delete a webhook endpoint. Its delivery history goes with it and the receiver stops being told anything.
+
+Check what it was subscribed to first (\`get_webhook_endpoint\`). If it carried \`database_user.password_rotated\` for a user with automatic rotation on, deleting this silently removes the only signal that credential's consumer gets - that consumer will break at the next rotation with nothing to explain why. Say so before proceeding.
+
+If the goal is to receive less rather than nothing, \`update_webhook_endpoint\` can narrow the event list instead.
+
+Requires \`webhook_endpoints:destroy\` (owner or admin). You MUST set confirm=true.`, {
+        webhook_endpoint_id: z.string().min(1).describe("Endpoint pid, from `list_webhook_endpoints`"),
+        organization_id: z.string().optional().describe("Organization PID (defaults to active org)"),
+        confirm: z.boolean().describe("Must be true. The receiver stops getting events and the delivery history is removed."),
+    }, async ({ webhook_endpoint_id, organization_id, confirm }) => {
+        const orgId = resolveOrgId(organization_id);
+        if (!orgId)
+            return { content: [{ type: "text", text: noOrgMessage }] };
+        if (!confirm) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `About to delete webhook endpoint ${webhook_endpoint_id}. Its receiver stops getting events and the delivery history is removed.\n\nCall \`get_webhook_endpoint\` first and check what it is subscribed to - if it carries \`database_user.password_rotated\`, something downstream may depend on it to refetch credentials. To narrow the events instead of removing the endpoint, use \`update_webhook_endpoint\`.\n\nTo proceed, call again with confirm=true.`,
+                    }],
+            };
+        }
+        const result = await apiRequest(`/organizations/${orgId}/webhook_endpoints/${webhook_endpoint_id}`, {
+            method: "DELETE",
+            toolName: "delete_webhook_endpoint",
+            skipOrgInjection: true,
+        });
+        if (!result.success) {
+            return { content: [{ type: "text", text: `Failed to delete webhook endpoint (${result.statusCode}): ${result.message}` }] };
+        }
+        return { content: [{ type: "text", text: `Webhook endpoint ${webhook_endpoint_id} deleted.` }] };
+    });
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/tools/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/tools/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,YAAY,GAAG;IACnB,yBAAyB;IACzB,sBAAsB;IACtB,mBAAmB;IACnB,oBAAoB;IACpB,4BAA4B;IAC5B,8BAA8B;IAC9B,gCAAgC;CACxB,CAAC;AAEX,oFAAoF;AACpF,MAAM,WAAW,GAAG;IAClB,iPAAiP;IACjP,iKAAiK;IACjK,yHAAyH;IACzH,2WAA2W;CAC5W,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAEf,MAAM,YAAY,GAAG,wFAAwF,CAAC;AAE9G,SAAS,YAAY,CAAC,eAAwB;IAC5C,OAAO,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB;;;;2OAIuO,EACvO;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,oBAAoB,EAAE;YACpF,QAAQ,EAAE,wBAAwB;YAClC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,wJAAwJ,EACxJ;QACE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QAC9F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC7F,EACD,KAAK,EAAE,EAAE,mBAAmB,EAAE,eAAe,EAAE,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAEvE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,sBAAsB,mBAAmB,EAAE,EAAE;YAC3G,QAAQ,EAAE,sBAAsB;YAChC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3H,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB;;;;;IAKA,WAAW;;;;;;wDAMyC,EACpD;QACE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;QACtF,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mFAAmF,CAAC;KACtJ,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAEvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mIAAmI,EAAE,CAAC,EAAE,CAAC;QACpL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,oBAAoB,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE;YACtD,QAAQ,EAAE,yBAAyB;YACnC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,GAAG,mBAAmB,iBAAiB,CAAC,MAAM,mJAAmJ,EAAE;gBACzP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB;;;;;IAKA,WAAW;;wDAEyC,EACpD;QACE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QAC9F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC1D,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8FAA8F,CAAC;KAC5K,EACD,KAAK,EAAE,EAAE,mBAAmB,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAEvE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8DAA8D,EAAE,CAAC,EAAE,CAAC;QAC/G,CAAC;QAED,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC;QAC1C,IAAI,iBAAiB,KAAK,SAAS;YAAE,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QACpF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAC,EAAE,CAAC;QAClH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,sBAAsB,mBAAmB,EAAE,EAAE;YAC3G,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE;YACpC,QAAQ,EAAE,yBAAyB;YACnC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,2BAA2B,EAAE;gBACxJ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7D;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB;;;;;;oFAMgF,EAChF;QACE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QAC9F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QAC5F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;KACtH,EACD,KAAK,EAAE,EAAE,mBAAmB,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAEvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,oCAAoC,mBAAmB,2YAA2Y;qBACzc,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAU,kBAAkB,KAAK,sBAAsB,mBAAmB,EAAE,EAAE;YAC3G,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,yBAAyB;YACnC,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9H,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,mBAAmB,WAAW,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/types/models.d.ts

@@ -9,7 +9,14 @@ export interface User {
     updated_at: string;
 }
 export interface Organization {
-    id: string;
+    /**
+     * The organization's public id. `Organization` uses `pid` as its primary key on the
+     * backend and the table has no `id` column, so the API never serializes one - reading
+     * `id` here silently yields undefined. `id` stays declared, optional, only so an older
+     * or differently-shaped payload still type-checks.
+     */
+    pid: string;
+    id?: string;
     name: string;
     description: string | null;
     is_creator: boolean;

package/dist/types/tiers.js

@@ -9,6 +9,8 @@ export const EXEMPT_TOOLS = new Set([
     "list_regions",
     "get_instance_types_for_region",
     "list_storage_types",
+    // Project server sizes - public reference data, same stance as the AWS lookups above.
+    "list_server_types",
 ]);
 export const WRITE_TOOLS = new Set([
     "create_or_login_user",
@@ -127,6 +129,9 @@ export const WRITE_TOOLS = new Set([
     // Postgres extensions (Module 26)
     "enable_timescaledb",
     "enable_pgvector",
+    // GitHub installation teardown (Module 19)
+    "disconnect_github_installation",
+    "disconnect_all_github_installations",
 ]);
 export function categorizeOperation(toolName) {
     if (EXEMPT_TOOLS.has(toolName))

package/dist/types/tiers.js.map

@@ -1 +1 @@
-{"version":3,"file":"tiers.js","sourceRoot":"","sources":["../../src/types/tiers.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,YAAY,GAAmD;IAC1E,OAAO,EAAE;QACP,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QAC3C,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QAC5C,aAAa,EAAE,EAAE;KAClB;CACF,CAAC;AAIF,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAClC,cAAc;IACd,+BAA+B;IAC/B,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,6BAA6B;IAC7B,6BAA6B;IAC7B,6BAA6B;IAC7B,2BAA2B;IAC3B,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IACvB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,6BAA6B;IAC7B,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,+BAA+B;IAC/B,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,0BAA0B;IAC1B,cAAc;IACd,sBAAsB;IACtB,cAAc;IACd,6BAA6B;IAC7B,wBAAwB;IACxB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;IACpB,yBAAyB;IACzB,qBAAqB;IACrB,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,iCAAiC;IACjC,mBAAmB;IACnB,mBAAmB;IACnB,gCAAgC;IAChC,mBAAmB;IACnB,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,oCAAoC;IACpC,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,sBAAsB;IACtB,2CAA2C;IAC3C,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,uCAAuC;IACvC,yBAAyB;IACzB,yBAAyB;IACzB,sCAAsC;IACtC,wBAAwB;IACxB,wBAAwB;IACxB,8CAA8C;IAC9C,sCAAsC;IACtC,wCAAwC;IACxC,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;IAClB,2BAA2B;IAC3B,qBAAqB;IACrB,uEAAuE;IACvE,gBAAgB;IAChB,qBAAqB;IACrB,iBAAiB;IACjB,4BAA4B;IAC5B,kCAAkC;IAClC,oBAAoB;IACpB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"tiers.js","sourceRoot":"","sources":["../../src/types/tiers.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,YAAY,GAAmD;IAC1E,OAAO,EAAE;QACP,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QAC3C,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QAC5C,aAAa,EAAE,EAAE;KAClB;CACF,CAAC;AAIF,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAClC,cAAc;IACd,+BAA+B;IAC/B,oBAAoB;IACpB,sFAAsF;IACtF,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IACjC,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,uBAAuB;IACvB,uBAAuB;IACvB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,6BAA6B;IAC7B,6BAA6B;IAC7B,6BAA6B;IAC7B,2BAA2B;IAC3B,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IACvB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,6BAA6B;IAC7B,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,+BAA+B;IAC/B,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,0BAA0B;IAC1B,cAAc;IACd,sBAAsB;IACtB,cAAc;IACd,6BAA6B;IAC7B,wBAAwB;IACxB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,oBAAoB;IACpB,yBAAyB;IACzB,qBAAqB;IACrB,8BAA8B;IAC9B,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,iCAAiC;IACjC,mBAAmB;IACnB,mBAAmB;IACnB,gCAAgC;IAChC,mBAAmB;IACnB,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,oCAAoC;IACpC,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,sBAAsB;IACtB,2CAA2C;IAC3C,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,uCAAuC;IACvC,yBAAyB;IACzB,yBAAyB;IACzB,sCAAsC;IACtC,wBAAwB;IACxB,wBAAwB;IACxB,8CAA8C;IAC9C,sCAAsC;IACtC,wCAAwC;IACxC,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;IACtB,kBAAkB;IAClB,2BAA2B;IAC3B,qBAAqB;IACrB,uEAAuE;IACvE,gBAAgB;IAChB,qBAAqB;IACrB,iBAAiB;IACjB,4BAA4B;IAC5B,kCAAkC;IAClC,oBAAoB;IACpB,iBAAiB;IACjB,2CAA2C;IAC3C,gCAAgC;IAChC,qCAAqC;CACtC,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selfhost.dev/mcp-server",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "MCP server for SelfHost.dev - provision managed databases and deploy apps (PaaS) via natural language",
   "type": "module",
   "main": "dist/index.js",
@@ -48,7 +48,8 @@
     "start": "node dist/index.js",
     "dev": "tsx src/index.ts",
     "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run check && npm run build",
+    "check": "node scripts/check-tools.mjs"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",