helipod-mcp 0.5.11 → 0.5.13

package/dist/http.js

@@ -35686,7 +35686,7 @@ class HelipodClient {
       const details = json2?.details && typeof json2.details === "object" && !Array.isArray(json2.details) ? json2.details : undefined;
       throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg), details);
     }
-    return json2 && "data" in json2 ? json2.data : json2;
+    return json2 && "data" in json2 ? json2.data : json2 ?? (text || null);
   }
 }
 
@@ -35730,7 +35730,7 @@ function purchaseKey(dryRun, given) {
 
 // src/tools/containers.ts
 var id = (what) => exports_external.string().uuid().describe(`${what} id (UUID)`);
-var dryRun = exports_external.boolean().optional().describe("true: return the daily cost (IDR) only, change nothing");
+var dryRun = exports_external.boolean().optional().describe("true: return the cost only (dailyCost list price, walletDailyCost what the wallet pays after the bundle), change nothing");
 var idem = exports_external.string().min(8).max(128).optional().describe("Idempotency-Key: a retry with the same value returns the first result instead of doing it twice");
 var C = "/containers";
 var port = exports_external.object({
@@ -35739,6 +35739,14 @@ var port = exports_external.object({
   public: exports_external.boolean().optional().describe("http ports: give it a *.helipod.app domain (default true)")
 });
 var containerTools = [
+  defineTool({
+    name: "get_bundle",
+    title: "Container bundle",
+    kind: "read",
+    description: "The account's container bundle: whether one is active, until when, quota used / max (vCPU, GB RAM, GB storage), what it covers and what it does not. Container services within the quota cost the wallet NOTHING: read this before telling the user to top up for a container deploy. The bundle covers containers only (not VPS, databases, email, domains or AI).",
+    input: {},
+    run: (_a3, api2) => api2.api("GET", `${C}/bundle`)
+  }),
   defineTool({
     name: "list_projects",
     title: "List projects",
@@ -35884,7 +35892,7 @@ var containerTools = [
     name: "create_service",
     title: "Create service",
     kind: "write",
-    description: "Create a service from a container image, a Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. Private GitHub / GitLab repos work once connected (get_git_connections, list_git_repos); such services also redeploy on every push. A private repo that is not connected is refused (409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE, nothing created): give the user details.connectUrl and retry after they connect. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
+    description: "Create a service from a container image, a Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. Private GitHub / GitLab repos work once connected (get_git_connections, list_git_repos); such services also redeploy on every push. A private repo that is not connected is refused (409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE, nothing created): give the user details.connectUrl and retry after they connect. COSTS MONEY once deployed, beyond the account's bundle: billed daily, from the bundle quota first and the wallet only beyond it. Call with dryRun=true first, tell the user what the wallet pays (walletDailyCost) and get their OK. Before saying a price, read walletDailyCost (what the wallet really pays per day) and bundle: with an active bundle that covers it (bundle.coversIt, walletDailyCost 0) nothing is charged and NO top-up is needed, even with a Rp 0 balance.",
     input: {
       environmentId: id("Environment"),
       name: exports_external.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/).describe("Service name (letters, digits, _ -; starts with a letter). Also used in references like ${{name.KEY}}"),
@@ -35902,6 +35910,7 @@ var containerTools = [
       ram: exports_external.number().int().min(128).max(8192).optional().describe("MB, multiple of 128"),
       startCommand: exports_external.string().optional(),
       healthcheckPath: exports_external.string().optional().describe("HTTP path answering 2xx when ready, e.g. /health"),
+      healthcheckTimeout: exports_external.number().int().min(1).max(3600).optional().describe("Seconds the first start may take before the health check counts (default from the platform)"),
       deploy: exports_external.boolean().optional().describe("false: create without deploying (nothing is charged)"),
       dryRun,
       idempotencyKey: idem
@@ -35923,7 +35932,7 @@ var containerTools = [
           cpu: a.cpu,
           ram: a.ram,
           startCommand: a.startCommand,
-          healthcheck: a.healthcheckPath ? { path: a.healthcheckPath } : undefined,
+          healthcheck: a.healthcheckPath ? { path: a.healthcheckPath, timeout: a.healthcheckTimeout } : undefined,
           deploy: a.deploy
         }
       });
@@ -35966,7 +35975,7 @@ var containerTools = [
     name: "deploy_service",
     title: "Deploy service",
     kind: "write",
-    description: "Start a new deployment (Git services build the latest commit). COSTS MONEY: charges today's cost when the build starts, refunded if it fails. dryRun=true returns the cost only. The deployment runs in the background; get_deployment returns its status.",
+    description: "Start a new deployment (Git services build the latest commit). COSTS MONEY beyond the bundle: charges today's cost when the build starts (refunded if it fails), nothing within an active bundle's quota. dryRun=true returns the cost only. Before saying a price, read walletDailyCost (what the wallet really pays per day) and bundle: with an active bundle that covers it (bundle.coversIt, walletDailyCost 0) nothing is charged and NO top-up is needed, even with a Rp 0 balance. The deployment runs in the background; get_deployment returns its status.",
     input: { serviceId: id("Service"), dryRun, idempotencyKey: idem },
     run: (a, api2) => api2.api("POST", `${C}/services/${a.serviceId}/deployments`, { query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
@@ -36053,6 +36062,14 @@ var containerTools = [
     },
     run: (a, api2) => api2.api("POST", `${C}/services/${a.serviceId}/domains`, { body: { kind: a.kind, domain: a.domain, port: a.port, protocol: a.protocol } })
   }),
+  defineTool({
+    name: "verify_service_domain",
+    title: "Check custom domain DNS",
+    kind: "write",
+    description: "Check a custom domain's DNS now instead of waiting for the automatic check. Answers the domain with its DNS state (verified, or what is still wrong); the certificate follows once the record points to Helipod (the record to add is in list_service_domains).",
+    input: { serviceId: id("Service"), domainId: id("Domain") },
+    run: (a, api2) => api2.api("POST", `${C}/services/${a.serviceId}/domains/${a.domainId}/verify`)
+  }),
   defineTool({
     name: "remove_service_domain",
     title: "Remove domain from service",
@@ -36074,7 +36091,7 @@ var containerTools = [
     title: "Scale service",
     kind: "write",
     idempotent: true,
-    description: "Change replicas, CPU or RAM (applies right away). COSTS MONEY on increase: call with dryRun=true first to show currentDailyCost vs newDailyCost and get the user's OK.",
+    description: "Change replicas, CPU or RAM (applies right away). An increase COSTS MONEY unless the bundle covers it: call with dryRun=true first to show currentDailyCost vs newDailyCost and walletDailyCost, and get the user's OK. Before saying a price, read walletDailyCost (what the wallet really pays per day) and bundle: with an active bundle that covers it (bundle.coversIt, walletDailyCost 0) nothing is charged and NO top-up is needed, even with a Rp 0 balance.",
     input: {
       serviceId: id("Service"),
       replicas: exports_external.number().int().min(1).max(20).optional(),
@@ -36122,7 +36139,7 @@ var containerTools = [
     name: "resize_volume",
     title: "Resize volume",
     kind: "write",
-    description: "Change a volume's size (1-50 GB; never below the space already used). A larger volume COSTS MONEY: it raises the daily cost, charged pro rata when the service is redeployed and in full from the next renewal. dryRun=true returns currentDailyCost and newDailyCost (IDR) without changing anything. Applies on the next deploy.",
+    description: "Change a volume's size (1-50 GB; never below the space already used). A larger volume COSTS MONEY: it raises the daily cost, charged pro rata when the service is redeployed and in full from the next renewal. dryRun=true returns currentDailyCost, newDailyCost and walletDailyCost (IDR) without changing anything. Applies on the next deploy. Before saying a price, read walletDailyCost (what the wallet really pays per day) and bundle: with an active bundle that covers it (bundle.coversIt, walletDailyCost 0) nothing is charged and NO top-up is needed, even with a Rp 0 balance.",
     input: {
       serviceId: id("Service"),
       volumeId: id("Volume"),
@@ -36244,20 +36261,21 @@ var containerTools = [
     name: "deploy_template",
     title: "Deploy template",
     kind: "write",
-    description: "Create every service of a template in an environment and deploy them. COSTS MONEY (each service is billed daily).",
+    description: "Create every service of a template in an environment and deploy them. COSTS MONEY beyond the bundle: each service is billed daily (bundle quota first, then the wallet). Call with dryRun=true first. " + "Before saying a price, read walletDailyCost (what the wallet really pays per day) and bundle: with an active bundle that covers it (bundle.coversIt, walletDailyCost 0) nothing is charged and NO top-up is needed, even with a Rp 0 balance.",
     input: {
       environmentId: id("Environment"),
       slug: exports_external.string().regex(/^[a-z0-9][a-z0-9-]{0,79}$/),
       inputs: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Answers to the template's inputs"),
+      dryRun,
       idempotencyKey: idem
     },
-    run: (a, api2) => api2.api("POST", `${C}/environments/${a.environmentId}/templates/${a.slug}`, { body: { inputs: a.inputs }, idempotencyKey: a.idempotencyKey })
+    run: (a, api2) => api2.api("POST", `${C}/environments/${a.environmentId}/templates/${a.slug}`, { body: { inputs: a.inputs }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
     name: "create_stack",
     title: "Create stack from spec",
     kind: "write",
-    description: "Create several connected services from a template spec ({ version: 1, inputs?, services: [...] }) and deploy them in dependency order. COSTS MONEY: dryRun=true first. See https://docs.helipod.io/docs/container-api/templates-and-stacks",
+    description: "Create several connected services from a template spec ({ version: 1, inputs?, services: [...] }) and deploy them in dependency order. COSTS MONEY beyond the bundle: billed daily (bundle quota first, then the wallet). dryRun=true first. Before saying a price, read walletDailyCost (what the wallet really pays per day) and bundle: with an active bundle that covers it (bundle.coversIt, walletDailyCost 0) nothing is charged and NO top-up is needed, even with a Rp 0 balance. See https://docs.helipod.io/docs/container-api/templates-and-stacks",
     input: {
       environmentId: id("Environment"),
       spec: exports_external.record(exports_external.string(), exports_external.any()).describe("Template spec object"),
@@ -36774,16 +36792,21 @@ var domainTools = [
     title: "Check domain availability",
     kind: "read",
     description: "Is a domain name available to register? No key needed.",
-    input: { domain: exports_external.string().describe("e.g. tokosaya.id") },
-    run: (a, api2) => api2.api("GET", "/domains/search", { query: { domain: a.domain }, auth: false })
+    input: { domain: exports_external.string().describe("e.g. tokosaya.id"), includePremium: exports_external.boolean().optional().describe("Also check names the registry sells as premium (is_premium_name). Premium names cannot be bought online: the user must contact support") },
+    run: (a, api2) => api2.api("GET", "/domains/search", { query: { domain: a.domain, includePremium: a.includePremium ? "true" : undefined }, auth: false })
   }),
   defineTool({
     name: "domain_prices",
     title: "Domain prices",
     kind: "read",
     description: "Registration, renewal and transfer prices per extension (IDR, VAT included) and the yearly WHOIS privacy price.",
-    input: { extension: exports_external.string().optional().describe("e.g. .id or .com"), limit: exports_external.number().int().min(1).max(100).optional() },
-    run: (a, api2) => api2.api("GET", "/domains/prices", { query: { extension: a.extension, limit: a.limit ?? 50 }, auth: false })
+    input: {
+      extension: exports_external.string().optional().describe("e.g. .id or .com"),
+      promo: exports_external.boolean().optional().describe("true: only extensions on promotion"),
+      limit: exports_external.number().int().min(1).max(100).optional(),
+      page: exports_external.number().int().min(1).optional()
+    },
+    run: (a, api2) => api2.api("GET", "/domains/prices", { query: { extension: a.extension, promo: a.promo === undefined ? undefined : String(a.promo), limit: a.limit ?? 50, page: a.page }, auth: false })
   }),
   defineTool({
     name: "list_my_domains",
@@ -36842,9 +36865,22 @@ var domainTools = [
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
+      registrant: exports_external.object({
+        name: exports_external.string().min(3).max(255),
+        email: exports_external.string().max(255).optional().describe("Gets the registry's verification email; defaults to the account email"),
+        organization: exports_external.string().max(255).optional(),
+        phone: exports_external.string().min(9).max(20).describe("e.g. +6281234567890"),
+        addressLine1: exports_external.string().min(3).max(500),
+        addressLine2: exports_external.string().max(500).optional(),
+        city: exports_external.string().min(3).max(100),
+        state: exports_external.string().min(1).max(100),
+        countryCode: exports_external.string().regex(/^[A-Za-z]{2}$/).describe("ISO 3166-1 alpha-2, e.g. ID"),
+        postalCode: exports_external.string().min(1).max(20),
+        fax: exports_external.string().max(50).optional()
+      }).optional().describe("Owner of THIS domain instead of the account's owner details (e.g. a reseller's customer). .id domains only: others answer 400 REGISTRANT_NOT_SUPPORTED. Use only details the user gave."),
       dryRun: dryRun3
     },
-    run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
+    run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection, registrant: a.registrant }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "transfer_domain",
@@ -36899,9 +36935,9 @@ var domainTools = [
     name: "enable_whois_privacy",
     title: "Enable WHOIS privacy",
     kind: "write",
-    description: "Hide the owner's details in WHOIS. COSTS MONEY (the whois_protection price per year).",
-    input: { domainId },
-    run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/whois-protection`)
+    description: `Hide the owner's details in WHOIS. COSTS MONEY (the whois_protection price per year). ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
+    run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/whois-protection`, { query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "get_domain_price",
@@ -36944,6 +36980,23 @@ var domainTools = [
     input: { domainId, emailDomainId: exports_external.string().uuid() },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/email-records`, { body: { emailDomainId: a.emailDomainId } })
   }),
+  defineTool({
+    name: "get_child_nameserver",
+    title: "Get child nameserver",
+    kind: "read",
+    description: "One child nameserver (glue record) of a registered domain: hostname and IP address.",
+    input: { domainId, hostId },
+    run: (a, api2) => api2.api("GET", `/domains/${a.domainId}/hosts/${a.hostId}`)
+  }),
+  defineTool({
+    name: "set_domain_auto_renew",
+    title: "Set domain auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn automatic renewal of a domain on or off (sets the value given; calling it twice is safe). On: renewed from the wallet before it expires. Off: it expires unless renewed by hand (renew_domain). Nothing is charged now.",
+    input: { domainId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("PATCH", `/domains/${a.domainId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "list_child_nameservers",
     title: "List child nameservers",
@@ -37020,7 +37073,10 @@ var message = exports_external.object({
   templateId: exports_external.string().optional(),
   templateData: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-  idempotencyKey: exports_external.string().max(128).optional()
+  idempotencyKey: exports_external.string().max(128).optional(),
+  headers: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Extra MIME headers (letters, digits, hyphens in names; no line breaks). Not with templateId"),
+  metadata: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Your own key/value data, stored with the email (get_email returns it)"),
+  sensitive: exports_external.boolean().optional().describe("true when templateData or variables carry a secret (password, one-time code): their values are wiped from the job record after the send")
 });
 var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
@@ -37129,7 +37185,10 @@ var emailTools = [
       templateId: exports_external.string().optional(),
       templateData: exports_external.record(exports_external.string(), exports_external.string()).optional(),
       variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
-      idempotencyKey: exports_external.string().max(128).optional()
+      idempotencyKey: exports_external.string().max(128).optional(),
+      headers: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Extra MIME headers (letters, digits, hyphens in names; no line breaks). Not with templateId"),
+      metadata: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Your own key/value data, stored with the email (get_email returns it)"),
+      sensitive: exports_external.boolean().optional().describe("true when templateData or variables carry a secret (password, one-time code): their values are wiped from the job record after the send")
     },
     run: ({ projectId: project, ...a }, api2) => api2.email("POST", "/send", { body: a, project })
   }),
@@ -37138,7 +37197,15 @@ var emailTools = [
     title: "List sent emails",
     kind: "read",
     description: "Email log, newest first, with delivery status.",
-    input: { projectId, status: exports_external.string().optional(), search: exports_external.string().optional(), limit: exports_external.number().int().min(1).max(100).optional(), cursor: exports_external.string().optional() },
+    input: {
+      projectId,
+      status: exports_external.string().optional(),
+      search: exports_external.string().optional(),
+      from: exports_external.string().optional().describe("Sent at or after (ISO 8601), e.g. 2026-10-01T00:00:00Z"),
+      to: exports_external.string().optional().describe("Sent before (ISO 8601)"),
+      limit: exports_external.number().int().min(1).max(100).optional(),
+      cursor: exports_external.string().optional()
+    },
     run: ({ projectId: project, ...a }, api2) => api2.email("GET", "/emails", { query: a, project })
   }),
   defineTool({
@@ -37186,7 +37253,16 @@ var emailTools = [
     title: "Add contact",
     kind: "write",
     description: "Add or update an audience contact.",
-    input: { projectId, email: exports_external.string(), firstName: exports_external.string().optional(), lastName: exports_external.string().optional() },
+    input: {
+      projectId,
+      email: exports_external.string(),
+      firstName: exports_external.string().optional(),
+      lastName: exports_external.string().optional(),
+      status: exports_external.enum(["subscribed", "unsubscribed"]).optional(),
+      properties: exports_external.record(exports_external.string(), exports_external.string()).optional().describe("Custom properties (used by segments and {{placeholders}})"),
+      consentConfirmed: exports_external.boolean().optional().describe("true only when the person agreed to receive email (you have their opt-in)"),
+      consentSource: exports_external.string().max(50).optional().describe("Where the consent came from, e.g. signup_form")
+    },
     run: ({ projectId: project, ...a }, api2) => api2.email("POST", "/contacts", { body: a, project })
   }),
   defineTool({
@@ -37665,6 +37741,162 @@ var emailTools = [
     description: "Delete a received message permanently.",
     input: { projectId, messageId: uid("Message") },
     run: (a, api2) => api2.email("DELETE", `/inbound/messages/${a.messageId}`, { project: a.projectId })
+  }),
+  defineTool({
+    name: "add_email_contacts",
+    title: "Add contacts (bulk)",
+    kind: "write",
+    description: "Add or update up to 1000 contacts in one call (same fields as add_contact). For a CSV file use import_email_contacts.",
+    input: {
+      projectId,
+      contacts: exports_external.array(exports_external.object({
+        email: exports_external.string(),
+        firstName: exports_external.string().max(100).optional(),
+        lastName: exports_external.string().max(100).optional(),
+        status: exports_external.enum(["subscribed", "unsubscribed"]).optional(),
+        properties: exports_external.record(exports_external.string(), exports_external.string()).optional()
+      })).min(1).max(1000),
+      consentConfirmed: exports_external.boolean().optional().describe("true only when every one of them opted in"),
+      consentSource: exports_external.string().max(50).optional()
+    },
+    run: ({ projectId: project, ...body }, api2) => api2.email("POST", "/contacts", { body, project })
+  }),
+  defineTool({
+    name: "import_email_contacts",
+    title: "Import contacts from CSV",
+    kind: "write",
+    description: "Import contacts from CSV text (header row with email, optional firstName, lastName and property columns). Runs in the background: the answer has a job id for get_email_job.",
+    input: {
+      projectId,
+      csv: exports_external.string().min(1).max(1e7),
+      consentConfirmed: exports_external.boolean().optional().describe("true only when every contact in the file opted in"),
+      consentSource: exports_external.string().max(50).optional()
+    },
+    run: ({ projectId: project, ...body }, api2) => api2.email("POST", "/contacts/import", { body, project })
+  }),
+  defineTool({
+    name: "export_email_contacts",
+    title: "Export contacts (CSV)",
+    kind: "read",
+    description: "Every contact as CSV text (up to 50,000). Contact data is personal: give it only to the user who asked.",
+    input: { projectId },
+    run: (a, api2) => api2.email("GET", "/contacts/export", { project: a.projectId })
+  }),
+  defineTool({
+    name: "set_email_contact_properties",
+    title: "Set contact properties",
+    kind: "write",
+    idempotent: true,
+    description: "Set custom properties of a contact. Given keys are overwritten, other keys are kept.",
+    input: { projectId, contactId: uid("Contact"), properties: exports_external.record(exports_external.string(), exports_external.string()) },
+    run: (a, api2) => api2.email("PUT", `/contacts/${a.contactId}/properties`, { body: { properties: a.properties }, project: a.projectId })
+  }),
+  defineTool({
+    name: "set_email_contact_topics",
+    title: "Subscribe contact to topics",
+    kind: "write",
+    idempotent: true,
+    description: "Subscribe a contact to the given topics (ids from list_email_topics).",
+    input: { projectId, contactId: uid("Contact"), topicIds: exports_external.array(exports_external.string().uuid()).max(50) },
+    run: (a, api2) => api2.email("PUT", `/contacts/${a.contactId}/topics`, { body: { topicIds: a.topicIds }, project: a.projectId })
+  }),
+  defineTool({
+    name: "get_email_segment",
+    title: "Get segment",
+    kind: "read",
+    description: "One segment with its filter and contact count.",
+    input: { projectId, segmentId: uid("Segment") },
+    run: (a, api2) => api2.email("GET", `/segments/${a.segmentId}`, { project: a.projectId })
+  }),
+  defineTool({
+    name: "recalculate_email_segment",
+    title: "Recalculate segment",
+    kind: "write",
+    description: "Rebuild a segment's member list now (in the background) after contacts or properties changed.",
+    input: { projectId, segmentId: uid("Segment") },
+    run: (a, api2) => api2.email("POST", `/segments/${a.segmentId}/recalculate`, { project: a.projectId })
+  }),
+  defineTool({
+    name: "delete_email_broadcast",
+    title: "Delete broadcast",
+    kind: "destructive",
+    description: "Delete a broadcast that is not sending right now (a draft, scheduled, cancelled or finished one). Use cancel_email_broadcast to stop one that is sending.",
+    input: { projectId, broadcastId: uid("Broadcast") },
+    run: (a, api2) => api2.email("DELETE", `/broadcasts/${a.broadcastId}`, { project: a.projectId })
+  }),
+  defineTool({
+    name: "check_email_inbound",
+    title: "Check domain for receiving",
+    kind: "read",
+    description: "Before turning on receiving: the MX records of the host that would receive mail. existingMx not empty = mail for that host currently goes to another provider and would move to Helipod: suggest a subdomain (e.g. mail.example.com) to keep it.",
+    input: { projectId, domainId: uid("Sending domain"), host: exports_external.string().max(254).optional().describe("The domain or a subdomain of it; default the domain") },
+    run: (a, api2) => api2.email("GET", `/domains/${a.domainId}/inbound/check`, { query: { host: a.host }, project: a.projectId })
+  }),
+  defineTool({
+    name: "set_email_inbound",
+    title: "Turn receiving on or off",
+    kind: "write",
+    idempotent: true,
+    description: "Turn receiving mail on (or off) for a verified sending domain, on the domain or a subdomain. Run check_email_inbound first and tell the user if existing mail would move. The answer is the domain: its dnsRecords now include the receiving MX record to publish, then verify_email_domain (inboundMxValid turns true).",
+    input: { projectId, domainId: uid("Sending domain"), enabled: exports_external.boolean(), host: exports_external.string().max(254).optional() },
+    run: (a, api2) => api2.email("POST", `/domains/${a.domainId}/inbound`, { body: { enabled: a.enabled, host: a.host }, project: a.projectId })
+  }),
+  defineTool({
+    name: "inbox_stats",
+    title: "Inbox usage",
+    kind: "read",
+    description: "Inbox usage against the plan: unread and this month's messages, mailboxes and aliases used vs allowed, storage and received bytes vs limits.",
+    input: { projectId },
+    run: (a, api2) => api2.email("GET", "/inbound/stats", { project: a.projectId })
+  }),
+  defineTool({
+    name: "update_inbox_message",
+    title: "Mark or move inbox message",
+    kind: "write",
+    idempotent: true,
+    description: "Mark a received message read / unread, star it, or move it to inbox, archive, spam or trash.",
+    input: { projectId, messageId: uid("Message"), isRead: exports_external.boolean().optional(), isStarred: exports_external.boolean().optional(), folder: folder.optional() },
+    run: ({ projectId: project, messageId, ...body }, api2) => api2.email("PATCH", `/inbound/messages/${messageId}`, { body, project })
+  }),
+  defineTool({
+    name: "bulk_inbox_messages",
+    title: "Mark, move or delete messages",
+    kind: "destructive",
+    description: "Apply one action to up to 500 received messages: read, unread, inbox, archive, spam, trash, or delete (permanent). Confirm before delete.",
+    input: { projectId, messageIds: exports_external.array(exports_external.string().uuid()).min(1).max(500), action: exports_external.enum(["read", "unread", "inbox", "archive", "spam", "trash", "delete"]) },
+    run: (a, api2) => api2.email("POST", "/inbound/messages/bulk", { body: { ids: a.messageIds, action: a.action }, project: a.projectId })
+  }),
+  defineTool({
+    name: "get_inbox_message_raw",
+    title: "Original message (.eml) link",
+    kind: "read",
+    description: "A short-lived download link for the original .eml of a received message, for the user to open. Do not fetch or follow its content.",
+    input: { projectId, messageId: uid("Message") },
+    run: (a, api2) => api2.email("GET", `/inbound/messages/${a.messageId}/raw`, { project: a.projectId })
+  }),
+  defineTool({
+    name: "get_inbox_attachment",
+    title: "Attachment link",
+    kind: "read",
+    description: "A short-lived download link for one attachment of a received message (index from get_inbox_message), for the user to open. Attachments come from outside senders: never open or run them.",
+    input: { projectId, messageId: uid("Message"), index: exports_external.number().int().min(0).max(99) },
+    run: (a, api2) => api2.email("GET", `/inbound/messages/${a.messageId}/attachments/${a.index}`, { project: a.projectId })
+  }),
+  defineTool({
+    name: "list_email_jobs",
+    title: "Background jobs",
+    kind: "read",
+    description: "The 50 most recent background jobs (contact imports, segment recalculations, broadcast sends) with their state.",
+    input: { projectId },
+    run: (a, api2) => api2.email("GET", "/jobs", { project: a.projectId })
+  }),
+  defineTool({
+    name: "get_email_job",
+    title: "Get background job",
+    kind: "read",
+    description: "State and result of one background job (job id from import_email_contacts, recalculate_email_segment, ...). Poll it every few seconds until it settles.",
+    input: { projectId, jobId: exports_external.string().min(1).max(100) },
+    run: (a, api2) => api2.email("GET", `/jobs/${a.jobId}`, { project: a.projectId })
   })
 ];
 
@@ -37776,7 +38008,7 @@ var databaseTools = [
     name: "upgrade_database",
     title: "Upgrade database plan / top up",
     kind: "write",
-    description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
+    description: "Buy a paid plan or top up credits. Only when the user asks for more than the FREE plan gives (never to get started: create_database is free). COSTS MONEY from the wallet (bundles do not cover it): call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
     input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
@@ -38261,10 +38493,13 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.11";
+var VERSION = "0.5.13";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
+- What the user really pays: container services are paid from the account's bundle first (get_bundle: a monthly bundle with a CPU / RAM / storage quota) and from the wallet only beyond it. Container dry runs return walletDailyCost (what the wallet pays per day) and bundle.coversIt: when the bundle covers it, say it is included in their bundle and deploy after their OK; never ask for a top-up for something walletDailyCost says is 0, whatever the balance. Quote dailyCost only as the price without a bundle. The bundle covers containers only: VPS, domains, AI, paid database plans and paid email plans are paid from the wallet.
+- Free first: the managed Postgres database (create_database) starts on the FREE plan and email (buy_email_plan with the FREE plan) costs nothing. For a database, use create_database rather than running Postgres as a container service, and do not offer upgrade_database or a paid email plan unless the user asks for more or hits a limit.
+- Deploying an app, step by step: list_projects (pick the project and its production environmentId) -> get_bundle (is it covered?) -> if it needs Postgres: create_database, then get_database_connection and store DATABASE_URL with set_variables (secrets) after the service exists, or pass it in create_service variables -> create_service with dryRun=true (repo or image, port, variables) -> tell the user the cost (included in the bundle, or walletDailyCost per day) and wait for their OK -> create_service for real -> poll get_deployment until it settles, read get_deployment_logs if it failed -> give the user the *.helipod.app URL from get_service. Ask the user for secrets (API keys) only when the app needs them; never invent values.
 - Destructive tools (delete, terminate, reinstall, rollback, restore a backup or an import, copy a backup onto another VPS, replace DNS, revoke a key, remove an SSH key or port forward, send a broadcast, execute_database_sql): confirm with the user and name what will be lost. Before execute_database_sql, run classify_database_sql.
 - Email: when a project has no email yet (email_status shows activated false) or its plan ended, start it with buy_email_plan (dryRun first; the FREE plan costs nothing, still confirm). That also sets email up for the project; then add and verify a sending domain.
 - Before replacing all DNS records (set_dns_records), read list_dns_records and keep every record the user still needs. Before sending or scheduling a broadcast, tell the user how many contacts it reaches. Before deleting or replacing code, files or variables, read the current value. After renaming a service, fix the variable references listed in warnings.