helipod-mcp 0.5.8 → 0.5.10

package/dist/http.js

@@ -35582,10 +35582,12 @@ var EMPTY_COMPLETION_RESULT = {
 class HelipodError extends Error {
   status;
   code;
-  constructor(status, code, message) {
+  details;
+  constructor(status, code, message, details) {
     super(message);
     this.status = status;
     this.code = code;
+    this.details = details;
     this.name = "HelipodError";
   }
 }
@@ -35681,7 +35683,8 @@ class HelipodClient {
     if (!res.ok || json2?.success === false) {
       const retry = res.headers.get("retry-after");
       const msg = json2?.error ?? (text.slice(0, 300) || res.statusText);
-      throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg));
+      const details = json2?.details && typeof json2.details === "object" && !Array.isArray(json2.details) ? json2.details : undefined;
+      throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg), details);
     }
     return json2 && "data" in json2 ? json2.data : json2;
   }
@@ -35713,7 +35716,7 @@ function register(server, api2, defs) {
         const err = e instanceof HelipodError ? e : new HelipodError(0, "CLIENT_ERROR", String(e?.message ?? e));
         return {
           isError: true,
-          content: [{ type: "text", text: JSON.stringify({ status: err.status, code: err.code ?? null, error: err.message }, null, 2) }]
+          content: [{ type: "text", text: JSON.stringify({ status: err.status, code: err.code ?? null, error: err.message, ...err.details ? { details: err.details } : {} }, null, 2) }]
         };
       }
     });
@@ -35847,18 +35850,48 @@ var containerTools = [
     input: { serviceId: id("Service") },
     run: (a, api2) => api2.api("GET", `${C}/services/${a.serviceId}`)
   }),
+  defineTool({
+    name: "get_git_connections",
+    title: "Git connections",
+    kind: "read",
+    description: "Whether the user connected GitHub (sign-in + the Helipod GitHub App, with the accounts it is installed on) and GitLab, plus connectUrl: the Helipod page where the user connects them. Check this before deploying from a private repo. Connecting needs the user in a browser: give them connectUrl, never try to connect yourself.",
+    input: {},
+    run: (_a3, api2) => api2.api("GET", `${C}/git/connections`)
+  }),
+  defineTool({
+    name: "list_git_repos",
+    title: "List Git repositories",
+    kind: "read",
+    description: "Repositories the user's connected GitHub App installations (host github, default) or GitLab account (host gitlab) can reach: fullName, url, private, defaultBranch, newest first. Pass one url to create_service as repo. Not connected: 409 with details.connectUrl for the user.",
+    input: {
+      host: exports_external.enum(["github", "gitlab"]).optional().describe("github (default) or gitlab"),
+      installationId: exports_external.number().int().positive().optional().describe("Only this GitHub installation (id from get_git_connections)"),
+      search: exports_external.string().max(200).optional().describe("Filter by part of owner/name"),
+      limit: exports_external.number().int().min(1).max(100).optional().describe("Default 50"),
+      offset: exports_external.number().int().min(0).optional()
+    },
+    run: (a, api2) => api2.api("GET", `${C}/git/repos`, {
+      query: {
+        host: a.host,
+        installationId: a.installationId !== undefined ? String(a.installationId) : undefined,
+        search: a.search,
+        limit: a.limit !== undefined ? String(a.limit) : undefined,
+        offset: a.offset !== undefined ? String(a.offset) : undefined
+      }
+    })
+  }),
   defineTool({
     name: "create_service",
     title: "Create service",
     kind: "write",
-    description: "Create a service from a container image, a public Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
+    description: "Create a service from a container image, a Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. Private GitHub / GitLab repos work once connected (get_git_connections, list_git_repos); such services also redeploy on every push. A private repo that is not connected is refused (409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE, nothing created): give the user details.connectUrl and retry after they connect. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
     input: {
       environmentId: id("Environment"),
       name: exports_external.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/).describe("Service name (letters, digits, _ -; starts with a letter). Also used in references like ${{name.KEY}}"),
       image: exports_external.string().optional().describe("Container image, e.g. nginx:alpine or ghcr.io/acme/app:1.2"),
       registryUsername: exports_external.string().optional().describe("Private registry user (with registryPassword)"),
       registryPassword: exports_external.string().optional().describe("Private registry password or token"),
-      repo: exports_external.string().optional().describe("Public HTTPS Git repository URL (instead of image)"),
+      repo: exports_external.string().optional().describe("Git repository: https URL or owner/name for GitHub (instead of image). Private repos need a connected GitHub / GitLab (list_git_repos)"),
       branch: exports_external.string().optional().describe("Git branch (default main)"),
       rootDirectory: exports_external.string().optional().describe("Monorepo: folder to build, e.g. apps/web"),
       dockerfile: exports_external.string().optional().describe("Inline Dockerfile content (instead of image/repo)"),
@@ -36248,6 +36281,10 @@ var period = exports_external.enum(["monthly", "3month", "6month", "yearly"]);
 var pointId = exports_external.string().describe("Restore point id (from list_vps_restore_points)");
 var backupPath = exports_external.string().max(1024).describe("Absolute path inside the backup, e.g. /etc/nginx or /var/www/index.html");
 var migrationId = exports_external.string().describe("Migration id (from list_vps_migrations)");
+var dryRun2 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var idempotencyKey = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real call. Generated when omitted; pass the same value when retrying so it is never charged twice");
+var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryQuery = (d) => ({ dryRun: d ? "true" : undefined });
 var vpsTools = [
   defineTool({
     name: "list_vps_plans",
@@ -36277,7 +36314,7 @@ var vpsTools = [
     name: "create_vps",
     title: "Create VPS",
     kind: "write",
-    description: "Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Show the plan price from list_vps_plans and get the user's explicit OK first. Provisioning takes a few minutes: poll get_vps.",
+    description: `Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Call with dryRun=true first, show the price and the wallet after it, and get the user's explicit OK. ${DRY} autoRenew=false creates it with auto-renew off (renew it with renew_vps). Provisioning takes a few minutes: poll get_vps.`,
     input: {
       projectId: exports_external.string().uuid(),
       planId: exports_external.string(),
@@ -36285,9 +36322,12 @@ var vpsTools = [
       osType: exports_external.string().describe("From the plan's osTemplates, e.g. ubuntu"),
       osVersion: exports_external.string().describe("e.g. 24.04"),
       rootPassword: password,
-      billingPeriod: period.optional().describe("Default monthly")
+      billingPeriod: period.optional().describe("Default monthly"),
+      autoRenew: exports_external.boolean().optional().describe("false = no automatic renewal from the wallet (default true)"),
+      dryRun: dryRun2,
+      idempotencyKey
     },
-    run: (a, api2) => api2.api("POST", "/vps", { body: a })
+    run: ({ dryRun: dryRun3, idempotencyKey: idempotencyKey2, ...body }, api2) => api2.api("POST", "/vps", { body, query: dryQuery(dryRun3), idempotencyKey: purchaseKey(dryRun3, idempotencyKey2) })
   }),
   defineTool({
     name: "vps_power",
@@ -36341,17 +36381,17 @@ var vpsTools = [
     name: "renew_vps",
     title: "Renew VPS",
     kind: "write",
-    description: "Extend a server's paid period. COSTS MONEY: show the price from get_vps_renewal_options and get the user's OK.",
-    input: { vpsId, billingPeriod: period },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod } })
+    description: `Extend a server's paid period. COSTS MONEY: call with dryRun=true first, show the price and the wallet after it, and get the user's OK. ${DRY}`,
+    input: { vpsId, billingPeriod: period, dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "upgrade_vps",
     title: "Upgrade VPS plan",
     kind: "write",
-    description: "Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options, which also gives the price in IDR; the server restarts during the upgrade. Servers with providerCode 2 only.",
-    input: { vpsId, planId: exports_external.string() },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId } })
+    description: `Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options. Call with dryRun=true first and get the user's OK. ${DRY} Servers with providerCode 2 only.`,
+    input: { vpsId, planId: exports_external.string(), dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "get_vps_upgrade_options",
@@ -36378,11 +36418,20 @@ var vpsTools = [
     input: { vpsId, range: exports_external.enum(["1h", "6h", "24h", "7d", "30d"]).optional() },
     run: (a, api2) => api2.api("GET", `/vps/${a.vpsId}/metrics`, { query: { range: a.range } })
   }),
+  defineTool({
+    name: "set_vps_auto_renew",
+    title: "Set VPS auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn auto-renew on or off (sets the value, safe to repeat). With it off, the server is only renewed by renew_vps and expires otherwise.",
+    input: { vpsId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "toggle_vps_auto_renew",
     title: "Toggle VPS auto-renew",
     kind: "write",
-    description: "Flip auto-renew on or off; the response gives the new value.",
+    description: "Flip auto-renew to the other value; the response gives the new one. Prefer set_vps_auto_renew to reach a given state.",
     input: { vpsId },
     run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew-toggle`)
   }),
@@ -36711,8 +36760,8 @@ var vpsTools = [
 // src/tools/domains.ts
 var domainId = exports_external.number().int().positive().describe("Domain id (number, from list_my_domains)");
 var hostId = exports_external.number().int().positive().describe("Child nameserver id (from list_child_nameservers)");
-var dryRun2 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
-var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryRun3 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
+var DRY2 = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
 var record3 = exports_external.object({
   name: exports_external.string().describe('"@" for the domain itself, or the part before the domain, e.g. "www" or "_dmarc.mail". A full name like "www.example.com" is accepted and stored as "www"'),
   type: exports_external.enum(["A", "AAAA", "MX", "MXE", "CNAME", "SPF", "TXT"]),
@@ -36788,12 +36837,12 @@ var domainTools = [
     name: "register_domain",
     title: "Register domain",
     kind: "write",
-    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY} The dry run includes WHOIS privacy when whoisProtection is true.`,
+    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY2} The dry run includes WHOIS privacy when whoisProtection is true.`,
     input: {
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      dryRun: dryRun2
+      dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
@@ -36801,16 +36850,16 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun2 },
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
+    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "renew_domain",
     title: "Renew domain",
     kind: "write",
-    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY}`,
-    input: { domainId, dryRun: dryRun2 },
+    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/renew`, { body: { period: 1 }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
@@ -36973,7 +37022,7 @@ var message = exports_external.object({
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   idempotencyKey: exports_external.string().max(128).optional()
 });
-var dryRun3 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
 var MONEY = "COSTS MONEY from the wallet. dryRun=true returns the charge (IDR) and walletBalanceAfter without charging or changing anything.";
 var planCode = exports_external.string().min(1).max(50).describe("Plan code from list_email_plans");
@@ -37009,7 +37058,7 @@ var emailTools = [
     title: "Buy email plan",
     kind: "write",
     description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
-    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -37022,7 +37071,7 @@ var emailTools = [
     title: "Renew email plan",
     kind: "write",
     description: `Renew the project's ended or expiring email plan (409 PLAN_ACTIVE while one is still running and cannot be extended). Repeats the last plan and cycle unless planCode / months are given. ${MONEY}`,
-    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/renew", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -37035,7 +37084,7 @@ var emailTools = [
     title: "Change email plan",
     kind: "write",
     description: `Move the active email plan to another plan. An upgrade applies now and charges the prorated difference to the same end date; a downgrade is scheduled for the next cycle (no refund). ${MONEY}`,
-    input: { projectId, planCode, dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/change", {
       project: a.projectId,
       body: { planCode: a.planCode },
@@ -37052,7 +37101,7 @@ var emailTools = [
       projectId,
       extraMailboxes: exports_external.number().int().min(0).max(50).describe("Total extra mailboxes wanted (0-50)"),
       extraStorageGb: exports_external.number().int().min(0).max(1000).describe("Total extra inbox storage in GB (0-1000)"),
-      dryRun: dryRun3,
+      dryRun: dryRun4,
       idempotencyKey: idem2
     },
     run: (a, api2) => api2.email("POST", "/plan/addons", {
@@ -37622,7 +37671,7 @@ var emailTools = [
 // src/tools/databases.ts
 var databaseId = exports_external.string().uuid().describe("Database id (from list_databases)");
 var environmentId = exports_external.string().uuid().describe("Environment id (from list_projects). Omit for the primary (production) branch.");
-var dryRun4 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
+var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
 var databaseTools = [
   defineTool({
     name: "list_database_plans",
@@ -37716,7 +37765,7 @@ var databaseTools = [
       minCu: exports_external.number().min(0.25).max(10).optional(),
       maxCu: exports_external.number().min(0.25).max(10).optional(),
       suspendTimeoutSeconds: exports_external.number().int().min(0).max(604800).optional().describe("0 = never suspend, or 60-604800"),
-      dryRun: dryRun4
+      dryRun: dryRun5
     },
     run: (a, api2) => api2.api("PATCH", `/databases/${a.databaseId}/settings`, {
       body: { minCu: a.minCu, maxCu: a.maxCu, suspendTimeoutSeconds: a.suspendTimeoutSeconds },
@@ -37728,7 +37777,7 @@ var databaseTools = [
     title: "Upgrade database plan / top up",
     kind: "write",
     description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
-    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun4, idempotencyKey: exports_external.string().max(128).optional() },
+    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
@@ -37986,7 +38035,7 @@ var accountTools = [
 var projectId2 = exports_external.string().uuid().optional().describe("Limit to one project (a project key is always limited to its own)");
 var keyId = exports_external.string().uuid().optional().describe("Limit to one AI key (id from list_ai_keys)");
 var model = exports_external.string().max(100).optional().describe("Limit to one model id");
-var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
+var dryRun6 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
 var ACCOUNT_KEY2 = "Needs a whole-account key (a key limited to one project gets 403 ACCOUNT_KEY_REQUIRED).";
 var imageProject = exports_external.string().uuid().optional().describe("Project the images belong to (required with a whole-account key; a project key uses its own)");
 var INLINE_MAX_BYTES = 1500000;
@@ -38071,7 +38120,7 @@ var aiTools = [
       n: exports_external.number().int().min(1).max(10).optional().describe("Images in this request (up to the model's maxN; default 1)"),
       images: exports_external.array(exports_external.string().url().startsWith("https://")).max(10).optional().describe("Reference images as https:// links (only models with refImages > 0)"),
       projectId: imageProject,
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       wait: exports_external.number().int().min(0).max(55).optional().describe("Seconds to wait for the result (default 50; 0 = return the id at once)"),
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real request. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
@@ -38121,7 +38170,7 @@ var aiTools = [
     input: {
       packId: exports_external.string().min(1).max(64).optional(),
       amount: exports_external.number().min(1).max(1e9).optional().describe("IDR"),
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real top-up. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
     run: (a, api2) => {
@@ -38144,7 +38193,7 @@ var aiTools = [
       enabled: exports_external.boolean(),
       threshold: exports_external.number().min(1).optional().describe("Top up when the AI balance is below this (IDR)"),
       amount: exports_external.number().min(1).optional().describe("How much to top up each time (IDR)"),
-      dryRun: dryRun5
+      dryRun: dryRun6
     },
     run: (a, api2) => api2.api("PUT", "/ai/auto-topup", {
       body: { enabled: a.enabled, threshold: a.threshold, amount: a.amount },
@@ -38180,7 +38229,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.8";
+var VERSION = "0.5.10";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
@@ -38190,9 +38239,10 @@ var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Migrate (free): create_vps_import returns a one-time command for the USER to run as root on their old server (never run it yourself); before the first restore_vps_import, show fetchedIp and ask the user to confirm it is their server.
 - Images from generate_ai_image are deleted after 7 days: tell the user and have them download the ones they keep.
+- Deploying from Git: public repos need nothing. For a private repo check get_git_connections / list_git_repos first; when GitHub or GitLab is not connected (or a call returns 409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE), give the user details.connectUrl to open in their browser and try again after they confirm. Never ask for a GitHub token.
 - Deploys and VPS actions run in the background: poll get_deployment / get_vps until they settle; on a failed deploy read get_deployment_logs.
 - Never print secrets (passwords, secret variable values, secret files) unless the user asks for them. Domain owner details are personal data: use only what the user gave.
-- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
+- Errors come back as { status, code, error, details? }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
 Docs: https://docs.helipod.io`;
 var ALL_TOOLS = [...containerTools, ...databaseTools, ...vpsTools, ...domainTools, ...emailTools, ...accountTools, ...aiTools, ...generalTools];
 function createHelipodServer(config2) {

package/dist/index.js

@@ -34727,10 +34727,12 @@ var EMPTY_COMPLETION_RESULT = {
 class HelipodError extends Error {
   status;
   code;
-  constructor(status, code, message) {
+  details;
+  constructor(status, code, message, details) {
     super(message);
     this.status = status;
     this.code = code;
+    this.details = details;
     this.name = "HelipodError";
   }
 }
@@ -34826,7 +34828,8 @@ class HelipodClient {
     if (!res.ok || json2?.success === false) {
       const retry = res.headers.get("retry-after");
       const msg = json2?.error ?? (text.slice(0, 300) || res.statusText);
-      throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg));
+      const details = json2?.details && typeof json2.details === "object" && !Array.isArray(json2.details) ? json2.details : undefined;
+      throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg), details);
     }
     return json2 && "data" in json2 ? json2.data : json2;
   }
@@ -34858,7 +34861,7 @@ function register(server, api2, defs) {
         const err = e instanceof HelipodError ? e : new HelipodError(0, "CLIENT_ERROR", String(e?.message ?? e));
         return {
           isError: true,
-          content: [{ type: "text", text: JSON.stringify({ status: err.status, code: err.code ?? null, error: err.message }, null, 2) }]
+          content: [{ type: "text", text: JSON.stringify({ status: err.status, code: err.code ?? null, error: err.message, ...err.details ? { details: err.details } : {} }, null, 2) }]
         };
       }
     });
@@ -34992,18 +34995,48 @@ var containerTools = [
     input: { serviceId: id("Service") },
     run: (a, api2) => api2.api("GET", `${C}/services/${a.serviceId}`)
   }),
+  defineTool({
+    name: "get_git_connections",
+    title: "Git connections",
+    kind: "read",
+    description: "Whether the user connected GitHub (sign-in + the Helipod GitHub App, with the accounts it is installed on) and GitLab, plus connectUrl: the Helipod page where the user connects them. Check this before deploying from a private repo. Connecting needs the user in a browser: give them connectUrl, never try to connect yourself.",
+    input: {},
+    run: (_a3, api2) => api2.api("GET", `${C}/git/connections`)
+  }),
+  defineTool({
+    name: "list_git_repos",
+    title: "List Git repositories",
+    kind: "read",
+    description: "Repositories the user's connected GitHub App installations (host github, default) or GitLab account (host gitlab) can reach: fullName, url, private, defaultBranch, newest first. Pass one url to create_service as repo. Not connected: 409 with details.connectUrl for the user.",
+    input: {
+      host: exports_external.enum(["github", "gitlab"]).optional().describe("github (default) or gitlab"),
+      installationId: exports_external.number().int().positive().optional().describe("Only this GitHub installation (id from get_git_connections)"),
+      search: exports_external.string().max(200).optional().describe("Filter by part of owner/name"),
+      limit: exports_external.number().int().min(1).max(100).optional().describe("Default 50"),
+      offset: exports_external.number().int().min(0).optional()
+    },
+    run: (a, api2) => api2.api("GET", `${C}/git/repos`, {
+      query: {
+        host: a.host,
+        installationId: a.installationId !== undefined ? String(a.installationId) : undefined,
+        search: a.search,
+        limit: a.limit !== undefined ? String(a.limit) : undefined,
+        offset: a.offset !== undefined ? String(a.offset) : undefined
+      }
+    })
+  }),
   defineTool({
     name: "create_service",
     title: "Create service",
     kind: "write",
-    description: "Create a service from a container image, a public Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
+    description: "Create a service from a container image, a Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. Private GitHub / GitLab repos work once connected (get_git_connections, list_git_repos); such services also redeploy on every push. A private repo that is not connected is refused (409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE, nothing created): give the user details.connectUrl and retry after they connect. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
     input: {
       environmentId: id("Environment"),
       name: exports_external.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/).describe("Service name (letters, digits, _ -; starts with a letter). Also used in references like ${{name.KEY}}"),
       image: exports_external.string().optional().describe("Container image, e.g. nginx:alpine or ghcr.io/acme/app:1.2"),
       registryUsername: exports_external.string().optional().describe("Private registry user (with registryPassword)"),
       registryPassword: exports_external.string().optional().describe("Private registry password or token"),
-      repo: exports_external.string().optional().describe("Public HTTPS Git repository URL (instead of image)"),
+      repo: exports_external.string().optional().describe("Git repository: https URL or owner/name for GitHub (instead of image). Private repos need a connected GitHub / GitLab (list_git_repos)"),
       branch: exports_external.string().optional().describe("Git branch (default main)"),
       rootDirectory: exports_external.string().optional().describe("Monorepo: folder to build, e.g. apps/web"),
       dockerfile: exports_external.string().optional().describe("Inline Dockerfile content (instead of image/repo)"),
@@ -35393,6 +35426,10 @@ var period = exports_external.enum(["monthly", "3month", "6month", "yearly"]);
 var pointId = exports_external.string().describe("Restore point id (from list_vps_restore_points)");
 var backupPath = exports_external.string().max(1024).describe("Absolute path inside the backup, e.g. /etc/nginx or /var/www/index.html");
 var migrationId = exports_external.string().describe("Migration id (from list_vps_migrations)");
+var dryRun2 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var idempotencyKey = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real call. Generated when omitted; pass the same value when retrying so it is never charged twice");
+var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryQuery = (d) => ({ dryRun: d ? "true" : undefined });
 var vpsTools = [
   defineTool({
     name: "list_vps_plans",
@@ -35422,7 +35459,7 @@ var vpsTools = [
     name: "create_vps",
     title: "Create VPS",
     kind: "write",
-    description: "Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Show the plan price from list_vps_plans and get the user's explicit OK first. Provisioning takes a few minutes: poll get_vps.",
+    description: `Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Call with dryRun=true first, show the price and the wallet after it, and get the user's explicit OK. ${DRY} autoRenew=false creates it with auto-renew off (renew it with renew_vps). Provisioning takes a few minutes: poll get_vps.`,
     input: {
       projectId: exports_external.string().uuid(),
       planId: exports_external.string(),
@@ -35430,9 +35467,12 @@ var vpsTools = [
       osType: exports_external.string().describe("From the plan's osTemplates, e.g. ubuntu"),
       osVersion: exports_external.string().describe("e.g. 24.04"),
       rootPassword: password,
-      billingPeriod: period.optional().describe("Default monthly")
+      billingPeriod: period.optional().describe("Default monthly"),
+      autoRenew: exports_external.boolean().optional().describe("false = no automatic renewal from the wallet (default true)"),
+      dryRun: dryRun2,
+      idempotencyKey
     },
-    run: (a, api2) => api2.api("POST", "/vps", { body: a })
+    run: ({ dryRun: dryRun3, idempotencyKey: idempotencyKey2, ...body }, api2) => api2.api("POST", "/vps", { body, query: dryQuery(dryRun3), idempotencyKey: purchaseKey(dryRun3, idempotencyKey2) })
   }),
   defineTool({
     name: "vps_power",
@@ -35486,17 +35526,17 @@ var vpsTools = [
     name: "renew_vps",
     title: "Renew VPS",
     kind: "write",
-    description: "Extend a server's paid period. COSTS MONEY: show the price from get_vps_renewal_options and get the user's OK.",
-    input: { vpsId, billingPeriod: period },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod } })
+    description: `Extend a server's paid period. COSTS MONEY: call with dryRun=true first, show the price and the wallet after it, and get the user's OK. ${DRY}`,
+    input: { vpsId, billingPeriod: period, dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "upgrade_vps",
     title: "Upgrade VPS plan",
     kind: "write",
-    description: "Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options, which also gives the price in IDR; the server restarts during the upgrade. Servers with providerCode 2 only.",
-    input: { vpsId, planId: exports_external.string() },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId } })
+    description: `Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options. Call with dryRun=true first and get the user's OK. ${DRY} Servers with providerCode 2 only.`,
+    input: { vpsId, planId: exports_external.string(), dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "get_vps_upgrade_options",
@@ -35523,11 +35563,20 @@ var vpsTools = [
     input: { vpsId, range: exports_external.enum(["1h", "6h", "24h", "7d", "30d"]).optional() },
     run: (a, api2) => api2.api("GET", `/vps/${a.vpsId}/metrics`, { query: { range: a.range } })
   }),
+  defineTool({
+    name: "set_vps_auto_renew",
+    title: "Set VPS auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn auto-renew on or off (sets the value, safe to repeat). With it off, the server is only renewed by renew_vps and expires otherwise.",
+    input: { vpsId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "toggle_vps_auto_renew",
     title: "Toggle VPS auto-renew",
     kind: "write",
-    description: "Flip auto-renew on or off; the response gives the new value.",
+    description: "Flip auto-renew to the other value; the response gives the new one. Prefer set_vps_auto_renew to reach a given state.",
     input: { vpsId },
     run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew-toggle`)
   }),
@@ -35856,8 +35905,8 @@ var vpsTools = [
 // src/tools/domains.ts
 var domainId = exports_external.number().int().positive().describe("Domain id (number, from list_my_domains)");
 var hostId = exports_external.number().int().positive().describe("Child nameserver id (from list_child_nameservers)");
-var dryRun2 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
-var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryRun3 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
+var DRY2 = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
 var record3 = exports_external.object({
   name: exports_external.string().describe('"@" for the domain itself, or the part before the domain, e.g. "www" or "_dmarc.mail". A full name like "www.example.com" is accepted and stored as "www"'),
   type: exports_external.enum(["A", "AAAA", "MX", "MXE", "CNAME", "SPF", "TXT"]),
@@ -35933,12 +35982,12 @@ var domainTools = [
     name: "register_domain",
     title: "Register domain",
     kind: "write",
-    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY} The dry run includes WHOIS privacy when whoisProtection is true.`,
+    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY2} The dry run includes WHOIS privacy when whoisProtection is true.`,
     input: {
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      dryRun: dryRun2
+      dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
@@ -35946,16 +35995,16 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun2 },
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
+    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "renew_domain",
     title: "Renew domain",
     kind: "write",
-    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY}`,
-    input: { domainId, dryRun: dryRun2 },
+    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/renew`, { body: { period: 1 }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
@@ -36118,7 +36167,7 @@ var message = exports_external.object({
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   idempotencyKey: exports_external.string().max(128).optional()
 });
-var dryRun3 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
 var MONEY = "COSTS MONEY from the wallet. dryRun=true returns the charge (IDR) and walletBalanceAfter without charging or changing anything.";
 var planCode = exports_external.string().min(1).max(50).describe("Plan code from list_email_plans");
@@ -36154,7 +36203,7 @@ var emailTools = [
     title: "Buy email plan",
     kind: "write",
     description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
-    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36167,7 +36216,7 @@ var emailTools = [
     title: "Renew email plan",
     kind: "write",
     description: `Renew the project's ended or expiring email plan (409 PLAN_ACTIVE while one is still running and cannot be extended). Repeats the last plan and cycle unless planCode / months are given. ${MONEY}`,
-    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/renew", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36180,7 +36229,7 @@ var emailTools = [
     title: "Change email plan",
     kind: "write",
     description: `Move the active email plan to another plan. An upgrade applies now and charges the prorated difference to the same end date; a downgrade is scheduled for the next cycle (no refund). ${MONEY}`,
-    input: { projectId, planCode, dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/change", {
       project: a.projectId,
       body: { planCode: a.planCode },
@@ -36197,7 +36246,7 @@ var emailTools = [
       projectId,
       extraMailboxes: exports_external.number().int().min(0).max(50).describe("Total extra mailboxes wanted (0-50)"),
       extraStorageGb: exports_external.number().int().min(0).max(1000).describe("Total extra inbox storage in GB (0-1000)"),
-      dryRun: dryRun3,
+      dryRun: dryRun4,
       idempotencyKey: idem2
     },
     run: (a, api2) => api2.email("POST", "/plan/addons", {
@@ -36767,7 +36816,7 @@ var emailTools = [
 // src/tools/databases.ts
 var databaseId = exports_external.string().uuid().describe("Database id (from list_databases)");
 var environmentId = exports_external.string().uuid().describe("Environment id (from list_projects). Omit for the primary (production) branch.");
-var dryRun4 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
+var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
 var databaseTools = [
   defineTool({
     name: "list_database_plans",
@@ -36861,7 +36910,7 @@ var databaseTools = [
       minCu: exports_external.number().min(0.25).max(10).optional(),
       maxCu: exports_external.number().min(0.25).max(10).optional(),
       suspendTimeoutSeconds: exports_external.number().int().min(0).max(604800).optional().describe("0 = never suspend, or 60-604800"),
-      dryRun: dryRun4
+      dryRun: dryRun5
     },
     run: (a, api2) => api2.api("PATCH", `/databases/${a.databaseId}/settings`, {
       body: { minCu: a.minCu, maxCu: a.maxCu, suspendTimeoutSeconds: a.suspendTimeoutSeconds },
@@ -36873,7 +36922,7 @@ var databaseTools = [
     title: "Upgrade database plan / top up",
     kind: "write",
     description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
-    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun4, idempotencyKey: exports_external.string().max(128).optional() },
+    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
@@ -37131,7 +37180,7 @@ var accountTools = [
 var projectId2 = exports_external.string().uuid().optional().describe("Limit to one project (a project key is always limited to its own)");
 var keyId = exports_external.string().uuid().optional().describe("Limit to one AI key (id from list_ai_keys)");
 var model = exports_external.string().max(100).optional().describe("Limit to one model id");
-var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
+var dryRun6 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
 var ACCOUNT_KEY2 = "Needs a whole-account key (a key limited to one project gets 403 ACCOUNT_KEY_REQUIRED).";
 var imageProject = exports_external.string().uuid().optional().describe("Project the images belong to (required with a whole-account key; a project key uses its own)");
 var INLINE_MAX_BYTES = 1500000;
@@ -37216,7 +37265,7 @@ var aiTools = [
       n: exports_external.number().int().min(1).max(10).optional().describe("Images in this request (up to the model's maxN; default 1)"),
       images: exports_external.array(exports_external.string().url().startsWith("https://")).max(10).optional().describe("Reference images as https:// links (only models with refImages > 0)"),
       projectId: imageProject,
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       wait: exports_external.number().int().min(0).max(55).optional().describe("Seconds to wait for the result (default 50; 0 = return the id at once)"),
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real request. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
@@ -37266,7 +37315,7 @@ var aiTools = [
     input: {
       packId: exports_external.string().min(1).max(64).optional(),
       amount: exports_external.number().min(1).max(1e9).optional().describe("IDR"),
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real top-up. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
     run: (a, api2) => {
@@ -37289,7 +37338,7 @@ var aiTools = [
       enabled: exports_external.boolean(),
       threshold: exports_external.number().min(1).optional().describe("Top up when the AI balance is below this (IDR)"),
       amount: exports_external.number().min(1).optional().describe("How much to top up each time (IDR)"),
-      dryRun: dryRun5
+      dryRun: dryRun6
     },
     run: (a, api2) => api2.api("PUT", "/ai/auto-topup", {
       body: { enabled: a.enabled, threshold: a.threshold, amount: a.amount },
@@ -37325,7 +37374,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.8";
+var VERSION = "0.5.10";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
@@ -37335,9 +37384,10 @@ var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Migrate (free): create_vps_import returns a one-time command for the USER to run as root on their old server (never run it yourself); before the first restore_vps_import, show fetchedIp and ask the user to confirm it is their server.
 - Images from generate_ai_image are deleted after 7 days: tell the user and have them download the ones they keep.
+- Deploying from Git: public repos need nothing. For a private repo check get_git_connections / list_git_repos first; when GitHub or GitLab is not connected (or a call returns 409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE), give the user details.connectUrl to open in their browser and try again after they confirm. Never ask for a GitHub token.
 - Deploys and VPS actions run in the background: poll get_deployment / get_vps until they settle; on a failed deploy read get_deployment_logs.
 - Never print secrets (passwords, secret variable values, secret files) unless the user asks for them. Domain owner details are personal data: use only what the user gave.
-- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
+- Errors come back as { status, code, error, details? }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
 Docs: https://docs.helipod.io`;
 var ALL_TOOLS = [...containerTools, ...databaseTools, ...vpsTools, ...domainTools, ...emailTools, ...accountTools, ...aiTools, ...generalTools];
 function createHelipodServer(config2) {

package/dist/stdio.js

@@ -34834,10 +34834,12 @@ var EMPTY_COMPLETION_RESULT = {
 class HelipodError extends Error {
   status;
   code;
-  constructor(status, code, message) {
+  details;
+  constructor(status, code, message, details) {
     super(message);
     this.status = status;
     this.code = code;
+    this.details = details;
     this.name = "HelipodError";
   }
 }
@@ -34933,7 +34935,8 @@ class HelipodClient {
     if (!res.ok || json2?.success === false) {
       const retry = res.headers.get("retry-after");
       const msg = json2?.error ?? (text.slice(0, 300) || res.statusText);
-      throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg));
+      const details = json2?.details && typeof json2.details === "object" && !Array.isArray(json2.details) ? json2.details : undefined;
+      throw new HelipodError(res.status, json2?.code, retry ? `${msg} (retry after ${retry}s)` : String(msg), details);
     }
     return json2 && "data" in json2 ? json2.data : json2;
   }
@@ -34965,7 +34968,7 @@ function register(server, api2, defs) {
         const err = e instanceof HelipodError ? e : new HelipodError(0, "CLIENT_ERROR", String(e?.message ?? e));
         return {
           isError: true,
-          content: [{ type: "text", text: JSON.stringify({ status: err.status, code: err.code ?? null, error: err.message }, null, 2) }]
+          content: [{ type: "text", text: JSON.stringify({ status: err.status, code: err.code ?? null, error: err.message, ...err.details ? { details: err.details } : {} }, null, 2) }]
         };
       }
     });
@@ -35099,18 +35102,48 @@ var containerTools = [
     input: { serviceId: id("Service") },
     run: (a, api2) => api2.api("GET", `${C}/services/${a.serviceId}`)
   }),
+  defineTool({
+    name: "get_git_connections",
+    title: "Git connections",
+    kind: "read",
+    description: "Whether the user connected GitHub (sign-in + the Helipod GitHub App, with the accounts it is installed on) and GitLab, plus connectUrl: the Helipod page where the user connects them. Check this before deploying from a private repo. Connecting needs the user in a browser: give them connectUrl, never try to connect yourself.",
+    input: {},
+    run: (_a3, api2) => api2.api("GET", `${C}/git/connections`)
+  }),
+  defineTool({
+    name: "list_git_repos",
+    title: "List Git repositories",
+    kind: "read",
+    description: "Repositories the user's connected GitHub App installations (host github, default) or GitLab account (host gitlab) can reach: fullName, url, private, defaultBranch, newest first. Pass one url to create_service as repo. Not connected: 409 with details.connectUrl for the user.",
+    input: {
+      host: exports_external.enum(["github", "gitlab"]).optional().describe("github (default) or gitlab"),
+      installationId: exports_external.number().int().positive().optional().describe("Only this GitHub installation (id from get_git_connections)"),
+      search: exports_external.string().max(200).optional().describe("Filter by part of owner/name"),
+      limit: exports_external.number().int().min(1).max(100).optional().describe("Default 50"),
+      offset: exports_external.number().int().min(0).optional()
+    },
+    run: (a, api2) => api2.api("GET", `${C}/git/repos`, {
+      query: {
+        host: a.host,
+        installationId: a.installationId !== undefined ? String(a.installationId) : undefined,
+        search: a.search,
+        limit: a.limit !== undefined ? String(a.limit) : undefined,
+        offset: a.offset !== undefined ? String(a.offset) : undefined
+      }
+    })
+  }),
   defineTool({
     name: "create_service",
     title: "Create service",
     kind: "write",
-    description: "Create a service from a container image, a public Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
+    description: "Create a service from a container image, a Git repository or an inline Dockerfile, and (unless deploy=false) start its first deploy. Private GitHub / GitLab repos work once connected (get_git_connections, list_git_repos); such services also redeploy on every push. A private repo that is not connected is refused (409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE, nothing created): give the user details.connectUrl and retry after they connect. COSTS MONEY once deployed (billed daily from the wallet): call with dryRun=true first, show the dailyCost to the user and get their OK.",
     input: {
       environmentId: id("Environment"),
       name: exports_external.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/).describe("Service name (letters, digits, _ -; starts with a letter). Also used in references like ${{name.KEY}}"),
       image: exports_external.string().optional().describe("Container image, e.g. nginx:alpine or ghcr.io/acme/app:1.2"),
       registryUsername: exports_external.string().optional().describe("Private registry user (with registryPassword)"),
       registryPassword: exports_external.string().optional().describe("Private registry password or token"),
-      repo: exports_external.string().optional().describe("Public HTTPS Git repository URL (instead of image)"),
+      repo: exports_external.string().optional().describe("Git repository: https URL or owner/name for GitHub (instead of image). Private repos need a connected GitHub / GitLab (list_git_repos)"),
       branch: exports_external.string().optional().describe("Git branch (default main)"),
       rootDirectory: exports_external.string().optional().describe("Monorepo: folder to build, e.g. apps/web"),
       dockerfile: exports_external.string().optional().describe("Inline Dockerfile content (instead of image/repo)"),
@@ -35500,6 +35533,10 @@ var period = exports_external.enum(["monthly", "3month", "6month", "yearly"]);
 var pointId = exports_external.string().describe("Restore point id (from list_vps_restore_points)");
 var backupPath = exports_external.string().max(1024).describe("Absolute path inside the backup, e.g. /etc/nginx or /var/www/index.html");
 var migrationId = exports_external.string().describe("Migration id (from list_vps_migrations)");
+var dryRun2 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var idempotencyKey = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real call. Generated when omitted; pass the same value when retrying so it is never charged twice");
+var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryQuery = (d) => ({ dryRun: d ? "true" : undefined });
 var vpsTools = [
   defineTool({
     name: "list_vps_plans",
@@ -35529,7 +35566,7 @@ var vpsTools = [
     name: "create_vps",
     title: "Create VPS",
     kind: "write",
-    description: "Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Show the plan price from list_vps_plans and get the user's explicit OK first. Provisioning takes a few minutes: poll get_vps.",
+    description: `Order a server. COSTS MONEY right away (the whole billing period is charged from the wallet; refunded if provisioning fails). Call with dryRun=true first, show the price and the wallet after it, and get the user's explicit OK. ${DRY} autoRenew=false creates it with auto-renew off (renew it with renew_vps). Provisioning takes a few minutes: poll get_vps.`,
     input: {
       projectId: exports_external.string().uuid(),
       planId: exports_external.string(),
@@ -35537,9 +35574,12 @@ var vpsTools = [
       osType: exports_external.string().describe("From the plan's osTemplates, e.g. ubuntu"),
       osVersion: exports_external.string().describe("e.g. 24.04"),
       rootPassword: password,
-      billingPeriod: period.optional().describe("Default monthly")
+      billingPeriod: period.optional().describe("Default monthly"),
+      autoRenew: exports_external.boolean().optional().describe("false = no automatic renewal from the wallet (default true)"),
+      dryRun: dryRun2,
+      idempotencyKey
     },
-    run: (a, api2) => api2.api("POST", "/vps", { body: a })
+    run: ({ dryRun: dryRun3, idempotencyKey: idempotencyKey2, ...body }, api2) => api2.api("POST", "/vps", { body, query: dryQuery(dryRun3), idempotencyKey: purchaseKey(dryRun3, idempotencyKey2) })
   }),
   defineTool({
     name: "vps_power",
@@ -35593,17 +35633,17 @@ var vpsTools = [
     name: "renew_vps",
     title: "Renew VPS",
     kind: "write",
-    description: "Extend a server's paid period. COSTS MONEY: show the price from get_vps_renewal_options and get the user's OK.",
-    input: { vpsId, billingPeriod: period },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod } })
+    description: `Extend a server's paid period. COSTS MONEY: call with dryRun=true first, show the price and the wallet after it, and get the user's OK. ${DRY}`,
+    input: { vpsId, billingPeriod: period, dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/renew`, { body: { billingPeriod: a.billingPeriod }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "upgrade_vps",
     title: "Upgrade VPS plan",
     kind: "write",
-    description: "Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options, which also gives the price in IDR; the server restarts during the upgrade. Servers with providerCode 2 only.",
-    input: { vpsId, planId: exports_external.string() },
-    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId } })
+    description: `Move a server to a larger plan in the same family and region. COSTS MONEY (the difference for the days left) and restarts the server. planId must be one listed by get_vps_upgrade_options. Call with dryRun=true first and get the user's OK. ${DRY} Servers with providerCode 2 only.`,
+    input: { vpsId, planId: exports_external.string(), dryRun: dryRun2, idempotencyKey },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/upgrade`, { body: { planId: a.planId }, query: dryQuery(a.dryRun), idempotencyKey: purchaseKey(a.dryRun, a.idempotencyKey) })
   }),
   defineTool({
     name: "get_vps_upgrade_options",
@@ -35630,11 +35670,20 @@ var vpsTools = [
     input: { vpsId, range: exports_external.enum(["1h", "6h", "24h", "7d", "30d"]).optional() },
     run: (a, api2) => api2.api("GET", `/vps/${a.vpsId}/metrics`, { query: { range: a.range } })
   }),
+  defineTool({
+    name: "set_vps_auto_renew",
+    title: "Set VPS auto-renew",
+    kind: "write",
+    idempotent: true,
+    description: "Turn auto-renew on or off (sets the value, safe to repeat). With it off, the server is only renewed by renew_vps and expires otherwise.",
+    input: { vpsId, autoRenew: exports_external.boolean() },
+    run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew`, { body: { autoRenew: a.autoRenew } })
+  }),
   defineTool({
     name: "toggle_vps_auto_renew",
     title: "Toggle VPS auto-renew",
     kind: "write",
-    description: "Flip auto-renew on or off; the response gives the new value.",
+    description: "Flip auto-renew to the other value; the response gives the new one. Prefer set_vps_auto_renew to reach a given state.",
     input: { vpsId },
     run: (a, api2) => api2.api("POST", `/vps/${a.vpsId}/auto-renew-toggle`)
   }),
@@ -35963,8 +36012,8 @@ var vpsTools = [
 // src/tools/domains.ts
 var domainId = exports_external.number().int().positive().describe("Domain id (number, from list_my_domains)");
 var hostId = exports_external.number().int().positive().describe("Child nameserver id (from list_child_nameservers)");
-var dryRun2 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
-var DRY = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
+var dryRun3 = exports_external.boolean().optional().describe("true = return the exact price (IDR, VAT included) and the wallet balance after it; nothing is charged or registered");
+var DRY2 = "dryRun=true returns the price and walletBalanceAfter without charging or changing anything.";
 var record3 = exports_external.object({
   name: exports_external.string().describe('"@" for the domain itself, or the part before the domain, e.g. "www" or "_dmarc.mail". A full name like "www.example.com" is accepted and stored as "www"'),
   type: exports_external.enum(["A", "AAAA", "MX", "MXE", "CNAME", "SPF", "TXT"]),
@@ -36040,12 +36089,12 @@ var domainTools = [
     name: "register_domain",
     title: "Register domain",
     kind: "write",
-    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY} The dry run includes WHOIS privacy when whoisProtection is true.`,
+    description: `Register a domain for 1 year. COSTS MONEY from the wallet. Check search_domain, and that the owner details are complete (check_registrant / update_registrant). ${DRY2} The dry run includes WHOIS privacy when whoisProtection is true.`,
     input: {
       name: exports_external.string().describe("Full domain, e.g. tokosaya.id"),
       nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(),
       whoisProtection: exports_external.boolean().optional(),
-      dryRun: dryRun2
+      dryRun: dryRun3
     },
     run: (a, api2) => api2.api("POST", "/domains/register", { body: { name: a.name, period: 1, nameservers: a.nameservers, whoisProtection: a.whoisProtection }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
@@ -36053,16 +36102,16 @@ var domainTools = [
     name: "transfer_domain",
     title: "Transfer domain in",
     kind: "write",
-    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY}`,
-    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun2 },
+    description: `Transfer a domain from another registrar (adds 1 year). COSTS MONEY from the wallet. Needs the domain's auth code. ${DRY2}`,
+    input: { name: exports_external.string(), authCode: exports_external.string(), nameservers: exports_external.array(exports_external.string()).min(2).max(5).optional(), dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", "/domains/transfer", { body: { name: a.name, authCode: a.authCode, period: 1, nameservers: a.nameservers }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
     name: "renew_domain",
     title: "Renew domain",
     kind: "write",
-    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY}`,
-    input: { domainId, dryRun: dryRun2 },
+    description: `Renew a domain for 1 year (plus WHOIS privacy when it is on). COSTS MONEY from the wallet. ${DRY2}`,
+    input: { domainId, dryRun: dryRun3 },
     run: (a, api2) => api2.api("POST", `/domains/${a.domainId}/renew`, { body: { period: 1 }, query: { dryRun: a.dryRun ? "true" : undefined } })
   }),
   defineTool({
@@ -36225,7 +36274,7 @@ var message = exports_external.object({
   variables: exports_external.record(exports_external.string(), exports_external.string()).optional(),
   idempotencyKey: exports_external.string().max(128).optional()
 });
-var dryRun3 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
+var dryRun4 = exports_external.boolean().optional().describe("true = return the price (IDR) and the wallet balance after it; nothing is charged or changed");
 var idem2 = exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real purchase. Generated when omitted; pass the same value when retrying so it is never charged twice");
 var MONEY = "COSTS MONEY from the wallet. dryRun=true returns the charge (IDR) and walletBalanceAfter without charging or changing anything.";
 var planCode = exports_external.string().min(1).max(50).describe("Plan code from list_email_plans");
@@ -36261,7 +36310,7 @@ var emailTools = [
     title: "Buy email plan",
     kind: "write",
     description: `Start an email plan for the project (a free plan activates without charge). Works for a project with no email yet: the real call also sets email up (result.setup). ${MONEY} The dry run's mode says purchase, activate_free or already_active.`,
-    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional().describe("Billing cycle, default 1"), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36274,7 +36323,7 @@ var emailTools = [
     title: "Renew email plan",
     kind: "write",
     description: `Renew the project's ended or expiring email plan (409 PLAN_ACTIVE while one is still running and cannot be extended). Repeats the last plan and cycle unless planCode / months are given. ${MONEY}`,
-    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode: planCode.optional(), months: exports_external.union([exports_external.literal(1), exports_external.literal(3), exports_external.literal(6), exports_external.literal(12)]).optional(), dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/renew", {
       project: a.projectId,
       body: { planCode: a.planCode, months: a.months },
@@ -36287,7 +36336,7 @@ var emailTools = [
     title: "Change email plan",
     kind: "write",
     description: `Move the active email plan to another plan. An upgrade applies now and charges the prorated difference to the same end date; a downgrade is scheduled for the next cycle (no refund). ${MONEY}`,
-    input: { projectId, planCode, dryRun: dryRun3, idempotencyKey: idem2 },
+    input: { projectId, planCode, dryRun: dryRun4, idempotencyKey: idem2 },
     run: (a, api2) => api2.email("POST", "/plan/change", {
       project: a.projectId,
       body: { planCode: a.planCode },
@@ -36304,7 +36353,7 @@ var emailTools = [
       projectId,
       extraMailboxes: exports_external.number().int().min(0).max(50).describe("Total extra mailboxes wanted (0-50)"),
       extraStorageGb: exports_external.number().int().min(0).max(1000).describe("Total extra inbox storage in GB (0-1000)"),
-      dryRun: dryRun3,
+      dryRun: dryRun4,
       idempotencyKey: idem2
     },
     run: (a, api2) => api2.email("POST", "/plan/addons", {
@@ -36874,7 +36923,7 @@ var emailTools = [
 // src/tools/databases.ts
 var databaseId = exports_external.string().uuid().describe("Database id (from list_databases)");
 var environmentId = exports_external.string().uuid().describe("Environment id (from list_projects). Omit for the primary (production) branch.");
-var dryRun4 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
+var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result or price; nothing changes");
 var databaseTools = [
   defineTool({
     name: "list_database_plans",
@@ -36968,7 +37017,7 @@ var databaseTools = [
       minCu: exports_external.number().min(0.25).max(10).optional(),
       maxCu: exports_external.number().min(0.25).max(10).optional(),
       suspendTimeoutSeconds: exports_external.number().int().min(0).max(604800).optional().describe("0 = never suspend, or 60-604800"),
-      dryRun: dryRun4
+      dryRun: dryRun5
     },
     run: (a, api2) => api2.api("PATCH", `/databases/${a.databaseId}/settings`, {
       body: { minCu: a.minCu, maxCu: a.maxCu, suspendTimeoutSeconds: a.suspendTimeoutSeconds },
@@ -36980,7 +37029,7 @@ var databaseTools = [
     title: "Upgrade database plan / top up",
     kind: "write",
     description: "Buy a paid plan or top up credits. COSTS MONEY from the wallet: call with dryRun first, show price and wallet balance after, and get the user's explicit OK.",
-    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun4, idempotencyKey: exports_external.string().max(128).optional() },
+    input: { databaseId, plan: exports_external.string().describe("Plan code (e.g. STARTER) or id from list_database_plans"), dryRun: dryRun5, idempotencyKey: exports_external.string().max(128).optional() },
     run: (a, api2) => api2.api("POST", `/databases/${a.databaseId}/upgrade`, { body: { plan: a.plan }, query: { dryRun: a.dryRun ? "true" : undefined }, idempotencyKey: a.idempotencyKey })
   }),
   defineTool({
@@ -37238,7 +37287,7 @@ var accountTools = [
 var projectId2 = exports_external.string().uuid().optional().describe("Limit to one project (a project key is always limited to its own)");
 var keyId = exports_external.string().uuid().optional().describe("Limit to one AI key (id from list_ai_keys)");
 var model = exports_external.string().max(100).optional().describe("Limit to one model id");
-var dryRun5 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
+var dryRun6 = exports_external.boolean().optional().describe("true = only check and show the result; nothing is charged or changed");
 var ACCOUNT_KEY2 = "Needs a whole-account key (a key limited to one project gets 403 ACCOUNT_KEY_REQUIRED).";
 var imageProject = exports_external.string().uuid().optional().describe("Project the images belong to (required with a whole-account key; a project key uses its own)");
 var INLINE_MAX_BYTES = 1500000;
@@ -37323,7 +37372,7 @@ var aiTools = [
       n: exports_external.number().int().min(1).max(10).optional().describe("Images in this request (up to the model's maxN; default 1)"),
       images: exports_external.array(exports_external.string().url().startsWith("https://")).max(10).optional().describe("Reference images as https:// links (only models with refImages > 0)"),
       projectId: imageProject,
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       wait: exports_external.number().int().min(0).max(55).optional().describe("Seconds to wait for the result (default 50; 0 = return the id at once)"),
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real request. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
@@ -37373,7 +37422,7 @@ var aiTools = [
     input: {
       packId: exports_external.string().min(1).max(64).optional(),
       amount: exports_external.number().min(1).max(1e9).optional().describe("IDR"),
-      dryRun: dryRun5,
+      dryRun: dryRun6,
       idempotencyKey: exports_external.string().regex(/^[A-Za-z0-9_.:-]{8,128}$/).optional().describe("Idempotency-Key for the real top-up. Generated when omitted; pass the same value when retrying so it is never charged twice")
     },
     run: (a, api2) => {
@@ -37396,7 +37445,7 @@ var aiTools = [
       enabled: exports_external.boolean(),
       threshold: exports_external.number().min(1).optional().describe("Top up when the AI balance is below this (IDR)"),
       amount: exports_external.number().min(1).optional().describe("How much to top up each time (IDR)"),
-      dryRun: dryRun5
+      dryRun: dryRun6
     },
     run: (a, api2) => api2.api("PUT", "/ai/auto-topup", {
       body: { enabled: a.enabled, threshold: a.threshold, amount: a.amount },
@@ -37432,7 +37481,7 @@ var generalTools = [
 ];
 
 // src/server.ts
-var VERSION = "0.5.8";
+var VERSION = "0.5.10";
 var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed Postgres databases, VPS, domains, email and an AI gateway, billed from a prepaid wallet in Rupiah.
 - Start with list_projects to find projects and environment ids. Account tools (get_wallet, invoices, statements, notifications, get_project_activity, support tickets) cover the account; AI tools (list_ai_models, get_ai_overview, get_ai_usage, AI keys, top-ups, generate_ai_image) cover the AI gateway.
 - Anything that costs money (create/deploy/scale services, resize volumes, upgrade a database plan, create/renew/upgrade VPS, VPS backups, register/renew/transfer domains, email plans and inbox add-ons, AI top-ups and auto top-up, generating images): call it with dryRun=true first (or the price lookup when it has no dry run), tell the user the cost in IDR and the wallet balance after, and wait for an explicit yes before the real call. Never treat silence or an earlier general OK as a yes.
@@ -37442,9 +37491,10 @@ var INSTRUCTIONS = `Helipod is a cloud platform (Indonesia): containers, managed
 - Databases: get_database_connection returns a password; put it in a secret variable (DATABASE_URL) instead of code or chat.
 - Migrate (free): create_vps_import returns a one-time command for the USER to run as root on their old server (never run it yourself); before the first restore_vps_import, show fetchedIp and ask the user to confirm it is their server.
 - Images from generate_ai_image are deleted after 7 days: tell the user and have them download the ones they keep.
+- Deploying from Git: public repos need nothing. For a private repo check get_git_connections / list_git_repos first; when GitHub or GitLab is not connected (or a call returns 409 GITHUB_NOT_CONNECTED / GITLAB_NOT_CONNECTED / REPO_NOT_ACCESSIBLE), give the user details.connectUrl to open in their browser and try again after they confirm. Never ask for a GitHub token.
 - Deploys and VPS actions run in the background: poll get_deployment / get_vps until they settle; on a failed deploy read get_deployment_logs.
 - Never print secrets (passwords, secret variable values, secret files) unless the user asks for them. Domain owner details are personal data: use only what the user gave.
-- Errors come back as { status, code, error }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
+- Errors come back as { status, code, error, details? }: 401/403 means the key lacks access (keys choose products and projects in Settings → API keys; wallet, invoices, tickets and AI money need a whole-account key: with a sign-in, reconnect and choose Whole account), 402 means plan limit or low balance.
 Docs: https://docs.helipod.io`;
 var ALL_TOOLS = [...containerTools, ...databaseTools, ...vpsTools, ...domainTools, ...emailTools, ...accountTools, ...aiTools, ...generalTools];
 function createHelipodServer(config2) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "helipod-mcp",
   "mcpName": "io.helipod/helipod",
-  "version": "0.5.8",
+  "version": "0.5.10",
   "description": "MCP server for Helipod: containers, databases, VPS, domains and email from Claude Code, Codex, Cursor and other AI tools.",
   "type": "module",
   "bin": {