naro-mcp 0.18.0 → 0.18.1

package/README.md

@@ -60,10 +60,10 @@ Headless/CI agents can skip `naro login` and set a token instead:
 | `whoami`, `list_teams`                                                                                                                                                                                            | Account / team context                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `list_projects`, `get_project`, `link_project`                                                                                                                                                                    | Project discovery + `.naro/project.json` linking                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `get_team_usage`                                                                                                                                                                                                  | Team usage for a UTC month (`month`, the current one by default): requests, builds and custom domains per day and per project, the plan's `limits`, the enforcement mode, and `summary` (each metric against its limit, and `status` paused/over/near). `team` defaults to the team linked in `directory`, then your only team; otherwise `needsTeam` with the list. Owner, billing and enterprise_viewer only (403 `FORBIDDEN` otherwise). Read-only                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
-| `deploy`                                                                                                                                                                                                          | Local Next.js build → upload → live URL (preview, `production: true`, or a named environment with `environment: "qa"` — not together with `production`; `production` and `preview` are not environment names). The result's `target` is `production`, `preview` or the environment's slug, and `environment` is the slug or null. Local .env files are never uploaded; unset keys come back as `missingEnvKeys`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `deploy`                                                                                                                                                                                                          | Local Next.js build → upload → live URL (preview, `production: true`, or a named environment with `environment: "qa"` — not together with `production`: both are refused with `VALIDATION_FAILED` `environment and production cannot be used together.` before any value is read, asked for or sent and before the deployment is created; `production` and `preview` are not environment names). The result's `target` is `production`, `preview` or the environment's slug, and `environment` is the slug or null. Local .env files are never uploaded; unset keys come back as `missingEnvKeys`                                                                                                                                                                                                                                                                                                                                |
 | `list_deployments`, `get_deployment`                                                                                                                                                                              | Deployment status / history                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | `get_build_logs`, `get_runtime_logs`                                                                                                                                                                              | Debugging failed builds and live workers                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| `list_environment_variables`, `set_environment_variable`, `remove_environment_variable`                                                                                                                           | Env management (secret values never returned). `target` is `production`, `preview`, `all` or an environment's slug (`all` by default when setting); without `target`, `remove_environment_variable` removes the `production`, `preview` and `all` rows and leaves an environment's value alone. A name that cannot be a slug is refused as `Invalid target "<value>" — use production, preview, all or an environment name.`; a slug that is not an environment answers `404 ENVIRONMENT_NOT_FOUND`                                                                                                                                                                                                                                                                                                                                                                                                                              |
+| `list_environment_variables`, `set_environment_variable`, `remove_environment_variable`                                                                                                                           | Env management (secret values never returned). `target` is `production`, `preview`, `all` or an environment's slug (`all` by default when setting); without `target`, `remove_environment_variable` removes the `production`, `preview` and `all` rows and leaves an environment's value alone. A name that cannot be a slug is refused as `Invalid target "<value>" — use production, preview, all or an environment name.`. For `set_environment_variable`, a slug that is not an environment answers `404 ENVIRONMENT_NOT_FOUND`; `remove_environment_variable` reads the list and answers `ENV_NOT_FOUND` (`No KEY variable found for the <slug> environment.`). Without `target`, a key only environments hold answers `ENV_NOT_FOUND` `No KEY variable found outside named environments. Pass the environment to remove it: qa.` with `key` and `environments`, and nothing is removed                                     |
 | `list_domains`, `add_domain`, `verify_domain`, `remove_domain`                                                                                                                                                    | Custom domains: the one CNAME to create (naro connects it within ~5 minutes), plus a re-check that says which of ownership / certificate / routing is still missing. An apex is attached as an apex+www pair by default (`withWww: false` to opt out)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | `promote_deployment`, `rollback_deployment`                                                                                                                                                                       | Production traffic control                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
 | `cancel_deployment`                                                                                                                                                                                               | Stops a build that is still running (QUEUED–BUILDING). Does not undo a deployment that already went live — use `rollback_deployment` for that                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |

package/dist/index.js

@@ -15595,6 +15595,8 @@ var DeploymentsApi = class {
     }
   }
 };
+var STATIC_ASSETS_BINDING = "ASSETS";
+var MANAGED_DATABASE_BINDING = "DB";
 var EnvApi = class {
   constructor(client) {
     this.client = client;
@@ -15624,6 +15626,37 @@ var EnvApi = class {
       }
     );
   }
+  /**
+   * The names the env route refuses as a key — `409 VALIDATION_FAILED`
+   * `<KEY> is already used by a storage binding.` — read the way it reads
+   * them: `ASSETS` (the static files), every binding of the project's storage
+   * and, on a project using the managed database (`database_provider` is
+   * `d1`), `DB`, which may not be a storage row yet. For a caller that sends
+   * many entries in several requests (`naro env import`) and has to refuse
+   * before the first one is saved. A control plane whose project row has no
+   * `database_provider` reads as having no managed database, so `DB` is only
+   * left out there.
+   */
+  async takenBindingNames(projectId) {
+    const base = `/api/projects/${encodeURIComponent(projectId)}`;
+    const [storage, project] = await Promise.all([
+      this.client.request(
+        `${base}/storage`,
+        { context: "List storage" }
+      ),
+      this.client.request(
+        base,
+        { context: "Read project" }
+      )
+    ]);
+    const names = /* @__PURE__ */ new Set([
+      STATIC_ASSETS_BINDING,
+      ...storage.storage.map((row) => row.bindingName)
+    ]);
+    if (project.project.database_provider === "d1")
+      names.add(MANAGED_DATABASE_BINDING);
+    return [...names];
+  }
   async removeById(projectId, envVarId) {
     await this.client.request(
       `/api/projects/${encodeURIComponent(projectId)}/env/${encodeURIComponent(envVarId)}`,
@@ -15634,13 +15667,28 @@ var EnvApi = class {
    * Removes a key's rows: the one `target` names, or, with no target, the
    * `production`, `preview` and `all` rows. An environment's value goes only
    * when its slug is the target, so removing a key everywhere else does not
-   * take a QA or staging value with it.
+   * take a QA or staging value with it. A key only environments hold fails
+   * ENV_NOT_FOUND naming them (`details.environments`), not as if there were
+   * none.
    */
   async remove(projectId, key, target) {
     const rows = await this.list(projectId);
     const matches = rows.filter(
       (row) => row.key === key && (target === void 0 ? isReservedEnvTarget(row.target) : row.target === target)
     );
+    if (matches.length === 0 && target === void 0) {
+      const environments = [
+        ...new Set(
+          rows.filter((row) => row.key === key).map((row) => row.target).filter((slug) => !isReservedEnvTarget(slug))
+        )
+      ].toSorted();
+      if (environments.length > 0)
+        throw new NaroError(
+          "ENV_NOT_FOUND",
+          `No ${key} variable found outside named environments. Pass the environment to remove it: ${environments.join(", ")}.`,
+          { details: { key, environments } }
+        );
+    }
     if (matches.length === 0) {
       throw new NaroError(
         "ENV_NOT_FOUND",
@@ -16912,6 +16960,7 @@ var MEDIA_TYPE = new RegExp(`^${TOKEN_CHARACTERS}+/${TOKEN_CHARACTERS}+$`);
 // ../../packages/data-core/src/storage-table.ts
 var STORAGE_OBJECTS = "storage.objects";
 var STORAGE_OBJECTS_TABLE = "_naro_storage_objects";
+var STORAGE_UNAVAILABLE_REASON = `${STORAGE_OBJECTS} is not available on this backend yet`;
 var STORAGE_BUCKETS_TABLE = "_naro_storage_buckets";
 var STORAGE_POLICY_COLUMNS = [
   "id",
@@ -17477,7 +17526,6 @@ var SPECIAL_WORDS = /* @__PURE__ */ new Set([
   "auth"
 ]);
 var TEXT_TYPES = /* @__PURE__ */ new Set(["text", "varchar", "uuid"]);
-var STORAGE_SUBQUERY_PROBLEM = "A policy cannot read storage.objects in a subquery yet";
 var FOLDERNAME_INDEX_PROBLEM = `storage.foldername(name) is available only as (storage.foldername(name))[n] with n from 1 to ${String(MAX_FOLDERNAME_INDEX)}`;
 function storageHelperColumnProblem(fn) {
   return `storage.${fn}() takes the name column of storage.objects`;
@@ -17928,8 +17976,12 @@ function atRealtimeMessages(stream) {
 }
 function readTableName(stream) {
   const first = stream.peek();
-  if (atStorageObjects(stream))
-    throw new PolicySyntaxError(STORAGE_SUBQUERY_PROBLEM, first.position);
+  if (atStorageObjects(stream)) {
+    stream.next();
+    stream.next();
+    stream.next();
+    return STORAGE_OBJECTS;
+  }
   if (atRealtimeMessages(stream))
     throw new PolicySyntaxError(REALTIME_SUBQUERY_PROBLEM, first.position);
   let token = first;
@@ -18366,9 +18418,10 @@ function printValue(expr) {
 }
 function printSubquery(subquery) {
   const select = subquery.select === "*" ? "*" : printValue(subquery.select);
+  const table = asciiLower(subquery.table) === STORAGE_OBJECTS ? STORAGE_OBJECTS : quoteIdent(subquery.table);
   const alias = subquery.alias === null ? "" : ` ${quoteIdent(subquery.alias)}`;
   const where = subquery.where === null ? "" : ` WHERE ${printExpr(subquery.where)}`;
-  return `SELECT ${select} FROM ${quoteIdent(subquery.table)}${alias}${where}`;
+  return `SELECT ${select} FROM ${table}${alias}${where}`;
 }
 function printElement(element) {
   if (typeof element === "object") return printValue(element);
@@ -19326,70 +19379,9 @@ var PROJECT_BYTES = `(SELECT coalesce(sum(total_bytes), 0) FROM ${STORAGE_BUCKET
 var LIVE_BUCKET = `${STORAGE_BUCKET_DELETING_COLUMN.column} IS NULL`;
 
 // ../../packages/data-core/src/policy-check.ts
-var CONTEXTS = [
-  { role: "anon" },
-  {
-    role: "authenticated",
-    userId: "naro-policy-check",
-    email: "check@naro.invalid",
-    emailVerified: true
-  }
-];
 var STORAGE_PROBE_NONCE = "f".repeat(STORAGE_NONCE_MAX_DIGITS);
-var STORAGE_CONTEXTS = [
-  ...CONTEXTS,
-  { role: "authenticated", userId: "naro-policy-check" }
-];
 var REALTIME_PROBE_NONCE = "f".repeat(64);
 
-// ../../packages/data-core/src/policy-migration.ts
-var STORED_POLICIES_SQL = `SELECT table_name, name, kind, command, roles, using_expr, check_expr, owner_column, updated_at FROM ${NAMED_POLICY_TABLE} ORDER BY table_name, name`;
-var SYSTEM_PREDICATE = systemTablePredicate("name");
-var STORAGE_EXISTS = `EXISTS (SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ${sqlStringLiteral(STORAGE_OBJECTS_TABLE)})`;
-
-// ../../packages/data-core/src/realtime-limits.ts
-var HOBBY_REALTIME_LIMITS = Object.freeze({
-  connections: 200,
-  newConnectionsPerSecond: 10,
-  messagesPerSecond: 100,
-  joinsPerSecond: 100,
-  presencePerSecond: 20,
-  broadcastPayloadBytes: 262144,
-  policyChecksPerSecond: 100,
-  restRequestsPerSecond: 10
-});
-var PRO_REALTIME_LIMITS = Object.freeze({
-  connections: 500,
-  newConnectionsPerSecond: 25,
-  messagesPerSecond: 500,
-  joinsPerSecond: 500,
-  presencePerSecond: 50,
-  broadcastPayloadBytes: 3072e3,
-  policyChecksPerSecond: 250,
-  restRequestsPerSecond: 25
-});
-var ENTERPRISE_REALTIME_LIMITS = Object.freeze({
-  connections: 2e3,
-  newConnectionsPerSecond: 100,
-  messagesPerSecond: 1e3,
-  joinsPerSecond: 1e3,
-  presencePerSecond: 1e3,
-  broadcastPayloadBytes: 3072e3,
-  policyChecksPerSecond: 500,
-  restRequestsPerSecond: 100
-});
-
-// ../../packages/data-core/src/storage-multipart.ts
-var MiB = 1024 * 1024;
-var MULTIPART_PART_SIZES = [16 * MiB, 32 * MiB, 64 * MiB];
-var MAX_MULTIPART_PARTS = 1e4;
-var MAX_MULTIPART_BYTES = 64 * MiB * MAX_MULTIPART_PARTS;
-var MULTIPART_LOCK_MS = 60 * 60 * 1e3;
-var MULTIPART_PART_EXTEND_BELOW_MS = 30 * 60 * 1e3;
-var MULTIPART_COMPLETE_LOCK_MS = 15 * 60 * 1e3;
-var UUID = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
-var UPLOAD_ID = new RegExp(`^(${UUID})\\.(${UUID})$`);
-
 // ../../packages/data-core/src/system-sql.ts
 async function convertLegacyPolicies(db, found) {
   const rows = rowsOf(await db.prepare(POLICY_SQL.list).all());
@@ -19420,6 +19412,9 @@ async function convertLegacyPolicies(db, found) {
   return statements;
 }
 var MIGRATIONS_TABLE = "CREATE TABLE IF NOT EXISTS _naro_migrations (version INTEGER PRIMARY KEY, name TEXT NOT NULL, applied_at TEXT NOT NULL DEFAULT (datetime('now')))";
+var STORAGE_SUBQUERIES_VERSION = 7;
+var STORAGE_SUBQUERIES_NAME = "storage_subquery_policies";
+var STORAGE_SUBQUERIES_SQL = `SELECT version FROM _naro_migrations WHERE version = ${String(STORAGE_SUBQUERIES_VERSION)} AND name = '${STORAGE_SUBQUERIES_NAME}'`;
 var SYSTEM_MIGRATIONS = [
   {
     version: 1,
@@ -19488,9 +19483,78 @@ var SYSTEM_MIGRATIONS = [
     name: "storage_bucket_deleting",
     statements: [],
     addColumns: [STORAGE_BUCKET_DELETING_COLUMN]
+  },
+  {
+    // Storage 3-1j (plan correction (p)): no schema — the mark that a worker
+    // which reads storage.objects in a policy's subquery has migrated this
+    // database. Only the Naro worker's own `internal/migrate` applies system
+    // migrations, so the row is there once such a worker has run, and stays:
+    // every later worker reads them too — as long as the worker bundle does
+    // not go back. Deploying web from before 3-1j makes the next upgrade
+    // put an older worker back, and a run that lost its lease may upload
+    // one late; such a policy then answers 500 POLICY_INVALID (closed, no
+    // rows) until it is dropped or the newer worker is uploaded again
+    // (3-1j 최종 리뷰). Migration 5 alone cannot tell —
+    // backends migrated by 3-1a to 3-1i have it, and their worker refuses
+    // such a policy ("A policy cannot read storage.objects in a subquery
+    // yet") and answers every request of its table 500 POLICY_INVALID until
+    // the next upgrade. The control plane takes one only where this row is
+    // (`STORAGE_SUBQUERIES_SQL`, `buildPolicyBatch`).
+    version: STORAGE_SUBQUERIES_VERSION,
+    name: STORAGE_SUBQUERIES_NAME,
+    statements: []
   }
 ];
 
+// ../../packages/data-core/src/policy-migration.ts
+var STORED_POLICIES_SQL = `SELECT table_name, name, kind, command, roles, using_expr, check_expr, owner_column, updated_at FROM ${NAMED_POLICY_TABLE} ORDER BY table_name, name`;
+var SYSTEM_PREDICATE = systemTablePredicate("name");
+var STORAGE_EXISTS = `EXISTS (SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ${sqlStringLiteral(STORAGE_OBJECTS_TABLE)})`;
+var STORAGE_SUBQUERIES_READY = `EXISTS (${STORAGE_SUBQUERIES_SQL})`;
+
+// ../../packages/data-core/src/realtime-limits.ts
+var HOBBY_REALTIME_LIMITS = Object.freeze({
+  connections: 200,
+  newConnectionsPerSecond: 10,
+  messagesPerSecond: 100,
+  joinsPerSecond: 100,
+  presencePerSecond: 20,
+  broadcastPayloadBytes: 262144,
+  policyChecksPerSecond: 100,
+  restRequestsPerSecond: 10
+});
+var PRO_REALTIME_LIMITS = Object.freeze({
+  connections: 500,
+  newConnectionsPerSecond: 25,
+  messagesPerSecond: 500,
+  joinsPerSecond: 500,
+  presencePerSecond: 50,
+  broadcastPayloadBytes: 3072e3,
+  policyChecksPerSecond: 250,
+  restRequestsPerSecond: 25
+});
+var ENTERPRISE_REALTIME_LIMITS = Object.freeze({
+  connections: 2e3,
+  newConnectionsPerSecond: 100,
+  messagesPerSecond: 1e3,
+  joinsPerSecond: 1e3,
+  presencePerSecond: 1e3,
+  broadcastPayloadBytes: 3072e3,
+  policyChecksPerSecond: 500,
+  restRequestsPerSecond: 100
+});
+
+// ../../packages/data-core/src/storage-multipart.ts
+var MiB = 1024 * 1024;
+var MULTIPART_PART_SIZES = [16 * MiB, 32 * MiB, 64 * MiB];
+var MAX_MULTIPART_PARTS = 1e4;
+var MAX_MULTIPART_BYTES = 64 * MiB * MAX_MULTIPART_PARTS;
+var MULTIPART_LOCK_MS = 60 * 60 * 1e3;
+var MULTIPART_PART_EXTEND_BELOW_MS = 30 * 60 * 1e3;
+var MULTIPART_COMPLETE_LOCK_MS = 15 * 60 * 1e3;
+var UUID = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
+var UPLOAD_ID = new RegExp(`^(${UUID})\\.(${UUID})$`);
+
 // ../../packages/data-core/src/write-quota.ts
 var WRITE_QUOTA_KEY = "write_quota";
 var WRITE_QUOTA_SQL = {
@@ -20627,7 +20691,7 @@ var DATABASE_TOOLS = [
       destructiveHint: true,
       idempotentHint: false
     },
-    description: `${DESTRUCTIVE}applies a migration (DDL) to the D1 database and records it in the d1_migrations ledger \u2014 the same ledger wrangler uses. \`name\` is a short snake_case title; naro numbers it (NNNN_name.sql) and, when the project directory is known, writes the file to ./migrations so \`naro db push\` sees it as applied. All-or-nothing: if a statement fails, the whole migration is rolled back and not recorded. Write CREATE POLICY in the same migration as the table, as in Supabase: it is applied with the table, all or nothing. A table without a policy refuses every anon and signed-in request to the Data API. DROP POLICY [IF EXISTS], COMMENT ON POLICY p ON t IS 'naro:owner <column>' and ALTER TABLE t ENABLE ROW LEVEL SECURITY are accepted too; DISABLE ROW LEVEL SECURITY, GRANT, REVOKE and ALTER POLICY are refused before anything runs. Dropping a table drops its policies, so a SQLite table rebuild (create __new_x, copy, drop x, rename) must create the policies again after the rename: warnings lists the ones it removed, with their SQL. ALTER TABLE a RENAME TO b moves a's policies to b and rewrites the policies of other tables that read a, as in Postgres: do not create them again on b, where one of the same name is refused. ${UNTRUSTED} ${SHARED_DATABASE} ${LIMITS}`,
+    description: `${DESTRUCTIVE}applies a migration (DDL) to the D1 database and records it in the d1_migrations ledger \u2014 the same ledger wrangler uses. \`name\` is a short snake_case title; naro numbers it (NNNN_name.sql) and, when the project directory is known, writes the file to ./migrations so \`naro db push\` sees it as applied. All-or-nothing: if a statement fails, the whole migration is rolled back and not recorded. Write CREATE POLICY in the same migration as the table, as in Supabase: it is applied with the table, all or nothing. A table without a policy refuses every anon and signed-in request to the Data API. DROP POLICY [IF EXISTS], COMMENT ON POLICY p ON t IS 'naro:owner <column>' and ALTER TABLE t ENABLE ROW LEVEL SECURITY are accepted too; DISABLE ROW LEVEL SECURITY, GRANT, REVOKE and ALTER POLICY are refused before anything runs. Dropping a table drops its policies, so a SQLite table rebuild (create __new_x, copy, drop x, rename) must create the policies again after the rename: warnings lists the ones it removed, with their SQL. ALTER TABLE a RENAME TO b moves a's policies to b and rewrites the policies of other tables that read a, as in Postgres: do not create them again on b, where one of the same name is refused. ALTER TABLE t RENAME COLUMN c TO d rewrites every policy that reads t.c, an owner rule's column included, to read t.d; a rename such a policy cannot follow is refused before anything runs. ${UNTRUSTED} ${SHARED_DATABASE} ${LIMITS}`,
     inputSchema: {
       type: "object",
       properties: {
@@ -20731,7 +20795,7 @@ var DATABASE_TOOLS = [
       destructiveHint: true,
       idempotentHint: false
     },
-    description: `${DESTRUCTIVE}changes a table of the project's D1 database without writing SQL, as one migration recorded in d1_migrations and written to ./migrations when the project directory is known. action is add_column (newColumn, shaped like a create_table column), rename_column (column, to), rename_table (to) or drop_column (column) \u2014 which deletes the column and its value in every row and needs confirm set to "<table>.<column>". SQLite cannot add a PRIMARY KEY or UNIQUE column, a NOT NULL column without a default that is not NULL, or a column defaulting to CURRENT_TIMESTAMP, and cannot drop a primary key, UNIQUE or indexed column: naro refuses those up front and says why. It also refuses to drop or rename a table or column that a trigger or view uses (read from their SQL; when the SQL leaves it open, a warning instead) \u2014 drop or recreate that trigger or view with apply_migration first. Changing a column's type is not an action \u2014 it needs a table rebuild, so write that migration with apply_migration. rename_table moves the table's Data API policies to the new name and rewrites the policies of other tables that read it by name, in the same migration, as in Postgres: warnings says which. A rename such a policy cannot follow (an alias in it already goes by the new name) is refused before anything runs. Policies an earlier table left under the new name are removed: removedPolicies lists them: statements has each as the CREATE POLICY that naro policy create takes back, except an owner rule (its ownerColumn is set), which CREATE POLICY cannot say \u2014 setCommand is the naro policy set command that sets those again. A rename or drop that takes a table or column from under a policy \u2014 this table's or, through a subquery, another table's \u2014 makes the requests that policy applies to answer 500 POLICY_INVALID: warnings names each policy the change breaks, with dryRun: true before anything is applied. Read warnings after a rename or a drop. dryRun: true returns the SQL without applying anything. ${UNTRUSTED} ${SHARED_DATABASE}`,
+    description: `${DESTRUCTIVE}changes a table of the project's D1 database without writing SQL, as one migration recorded in d1_migrations and written to ./migrations when the project directory is known. action is add_column (newColumn, shaped like a create_table column), rename_column (column, to), rename_table (to) or drop_column (column) \u2014 which deletes the column and its value in every row and needs confirm set to "<table>.<column>". SQLite cannot add a PRIMARY KEY or UNIQUE column, a NOT NULL column without a default that is not NULL, or a column defaulting to CURRENT_TIMESTAMP, and cannot drop a primary key, UNIQUE or indexed column: naro refuses those up front and says why. It also refuses to drop or rename a table or column that a trigger or view uses (read from their SQL; when the SQL leaves it open, a warning instead) \u2014 drop or recreate that trigger or view with apply_migration first. Changing a column's type is not an action \u2014 it needs a table rebuild, so write that migration with apply_migration. rename_table moves the table's Data API policies to the new name and rewrites the policies of other tables that read it by name, in the same migration, as in Postgres: warnings says which. rename_column rewrites every policy that reads the column, this table's or another's through a subquery, an owner rule's column included: warnings says which. A rename such a policy cannot follow (an alias in it already goes by the new name, or a policy already reads the new column name) is refused before anything runs. Policies an earlier table left under the new name are removed: removedPolicies lists them: statements has each as the CREATE POLICY that naro policy create takes back, except an owner rule (its ownerColumn is set), which CREATE POLICY cannot say \u2014 setCommand is the naro policy set command that sets those again. A rename or drop that takes a table or column from under a policy \u2014 this table's or, through a subquery, another table's \u2014 makes the requests that policy applies to answer 500 POLICY_INVALID: warnings names each policy the change breaks, with dryRun: true before anything is applied. Read warnings after a rename or a drop. dryRun: true returns the SQL without applying anything. ${UNTRUSTED} ${SHARED_DATABASE}`,
     inputSchema: {
       type: "object",
       properties: {
@@ -22075,7 +22139,7 @@ var REGISTERED = [
         },
         environment: {
           type: "string",
-          description: "Slug of a named environment (list_environments, create_environment) to deploy to instead of preview, such as qa. Not together with production: true \u2014 the control plane refuses both. production and preview are not environment names: use production: true, or omit this for a preview."
+          description: "Slug of a named environment (list_environments, create_environment) to deploy to instead of preview, such as qa. Not together with production: true \u2014 both are refused (VALIDATION_FAILED) before any value is read, asked for or sent and before the deployment is created. production and preview are not environment names: use production: true, or omit this for a preview."
         },
         branch: {
           type: "string",
@@ -22124,8 +22188,9 @@ var REGISTERED = [
           projectId: link?.projectId,
           teamSlug: team.slug,
           production: args.production === true,
-          // Sent beside production, not instead of it: the control plane
-          // refuses both together and that answer is the one shown.
+          // Passed beside production, not instead of it: deployDirectory
+          // refuses both together before any request (an older control plane
+          // would deploy production), and that answer is the one shown.
           environment,
           // Never a surprise browser window: this server may be headless.
           allowLogin: false,
@@ -22678,7 +22743,7 @@ var REGISTERED = [
       destructiveHint: false,
       idempotentHint: true
     },
-    description: 'Connects the project to a GitHub repository so every push to the default branch deploys automatically. Use after deploy reports gitConnection.state "available" AND the user has agreed. If the response has connected:false with an installUrl, the GitHub App is not installed on that account yet \u2014 give the user the installUrl to open in their own browser, then call this tool again once they confirm. With installUrl null there is nothing to install from here: tell the user to connect from the Naro dashboard. Never open a browser yourself.',
+    description: 'Connects the project to a GitHub repository so every push to the default branch deploys automatically. Use after deploy reports gitConnection.state "available" AND the user has agreed. If the response has connected:false with an installUrl, Naro cannot reach the repository yet \u2014 the installUrl either installs the GitHub App on that account or imports the GitHub access of the user for an account the team already connected. Give it to the user to open in their own browser; if the repository is not among the ones the App was granted on GitHub, they add it there first. Call this tool again once they confirm. With installUrl null there is nothing to install from here: tell the user to connect from the Naro dashboard. Never open a browser yourself.',
     inputSchema: {
       type: "object",
       properties: {
@@ -22719,7 +22784,7 @@ var REGISTERED = [
           // installing from here would not connect anything. "Open the
           // installUrl" sent the agent guessing one (known-issues #42); point
           // at the dashboard, as the CLI does.
-          message: result.installUrl ? `Naro cannot reach ${fullName} yet. Ask the user to open the installUrl in their browser and install the GitHub App, then call this tool again.` : `Naro cannot reach ${fullName}, and no install link was offered. Tell the user to connect the repository from the Naro dashboard \u2014 do not make up a link.`
+          message: result.installUrl ? `Naro cannot reach ${fullName} yet. Ask the user to open the installUrl in their browser (and, if the repository is not among the ones the GitHub App was granted on GitHub, add it there first), then call this tool again.` : `Naro cannot reach ${fullName}, and no install link was offered. Tell the user to connect the repository from the Naro dashboard \u2014 do not make up a link.`
         };
       }
       return {
@@ -22786,7 +22851,7 @@ async function openClaims(client, projectId) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.18.0";
+var SERVER_VERSION = "0.18.1";
 function visibleTools(options2) {
   const { features, readOnly } = options2;
   return TOOLS.flatMap((tool) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naro-mcp",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "type": "module",
   "bin": {
     "naro-mcp": "./dist/index.js"
@@ -18,7 +18,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@supabase/supabase-js": "2.112.3",
-    "naro-cli": "0.19.0"
+    "naro-cli": "0.19.1"
   },
   "devDependencies": {
     "tsup": "8.5.0",