tsdevstack/cli-mcp

Add an object storage bucket to the project. What it does locally: - Adds bucket to storage.buckets in config.json - Regenerates docker-compose.yml with MinIO (S3-compatible) container + minio-init job that auto-creates the bucket - Regenerates secrets with STORAGE_ENDPOINT, STORAGE_ACCESS_KEY, STO…

Add an async messaging topic to the project. What it does: - Adds topic to messaging.topics in config.json with publishers and subscribers - Validates name (kebab-case, no duplicates, not reserved) - Validates publisher/subscriber service names exist and are NestJS type - Runs sync Service selecti…

Add a new service (nestjs, nextjs, or spa). After this, run sync to regenerate all config. Types: nestjs (backend API), nextjs (SSR frontend), spa (Rsbuild SPA).

Initialize cloud provider credentials for a specific provider (gcp, aws, azure). One-time setup per provider. Provider must be passed as flag to skip interactive prompt.

Push secrets to cloud. Generates framework secrets, prompts for DOMAIN/RESEND_API_KEY/EMAIL_FROM, auto-derives the rest. Run once per environment during initial setup.

Remove a secret from cloud secret manager. Verify the secret is unused before removing.

Set or update a single secret in cloud. Use for overrides or adding new third-party API keys.

Rebuild and deploy Kong gateway. Run after changing routes (adding endpoints, changing auth decorators).

Deploy/update the load balancer. Run after changing domains or adding frontend apps. Outputs DNS records and SSL validation info.

Deploy a single scheduled job. Alternative to batch deploy_schedulers.

Deploy all scheduled jobs (cron tasks) to cloud.

Build, push, deploy a single service (full workflow). Alternative to deploy_services --service. Supports optional tag override.

Deploy code changes to existing services only. Faster than full deploy. Use for code updates when no infrastructure changes are needed. Supports optional service filter.

Generate TypeScript HTTP client + DTOs from a service's OpenAPI spec. Other services import this for type-safe API calls.

Regenerate docker-compose.yml from current config. Run after adding services or storage buckets. When storage buckets exist in config.json, includes MinIO (S3-compatible storage) on ports 9000 (API) + 9001 (console) with a minio-init job that auto-creates buckets.

Regenerate Kong gateway config from OpenAPI specs. Run after adding/changing API endpoints or decorators.

Regenerate local secrets files. Run after editing .secrets.user.json or after adding/removing storage buckets. Preserves existing JWT keys and passwords. When storage buckets exist, generates STORAGE_ENDPOINT, STORAGE_ACCESS_KEY, STORAGE_SECRET_KEY (for MinIO), and STORAGE_BUCKET_{NAME} for each buc…

Bootstrap cloud project (enable APIs, add roles). One-time setup per environment.

Build Docker images with BuildKit. Usually called internally by deploy. Supports --service for single build, --tag for custom tag (defaults to git SHA).

Build Kong Docker image. Usually called internally by deploy-kong.

Full deployment: Terraform infra (VPC, DB, Redis, storage buckets) + build + push + deploy all services + Kong + LB. Required when adding new services or new storage buckets. Terraform creates cloud buckets (S3/GCS/Azure Blob) and post-Terraform sync pushes STORAGE_BUCKET_* secrets to cloud secret m…

Destroy ALL cloud infrastructure for an environment. Permanently deletes databases, services, and all data. Cannot be undone. Use with extreme caution.

Regenerate CI workflows from ci.json. No credentials required.

Generate Dockerfiles for services. Usually called internally by deploy. Supports optional service filter.

Generate Kong declarative config from OpenAPI specs for cloud deployment. Usually called internally by deploy-kong.

Generate Terraform files from config. Usually called internally by deploy, but useful for previewing generated output.

Initialize CI/CD workflows (GitHub Actions). No credentials required.

Initialize infrastructure (creates Terraform state bucket). One-time setup per environment.

Push Docker images to registry. Usually called internally by deploy. Supports --service for single push.

Register a detached worker in config.json. Only updates config — does NOT scaffold files. User must create worker.ts, worker.module.ts, and processor files manually using nest-common's startWorker(). After registering, run sync then infra_deploy.

Remove a storage bucket from the project configuration. What it does locally: - Removes bucket from storage.buckets in config.json - Regenerates docker-compose.yml (removes MinIO entirely if last bucket) - Regenerates secrets (removes STORAGE_* secrets if last bucket) - Does NOT delete any data fro…

Remove a detached worker from cloud. Cannot be undone.

Remove an async messaging topic from the project. What it does: - Removes topic from messaging.topics in config.json - Runs sync Does NOT delete stream data in Redis — existing messages are unaffected and get trimmed naturally via MAXLEN as new messages push old entries out.

Remove a single scheduled job from cloud. Cannot be undone.

Remove a service from cloud (deletes container, secrets, database). Cannot be undone. Data is permanently lost. Follow-up (suggest to the user): if the removed service was a backend (nestjs), Kong still holds stale routes pointing to the deleted service. Run deploy_kong with the same env afterward …

Remove a service from the local project (deletes files, updates config). Does NOT remove from cloud — use remove_service_cloud for that.

Apply pending Prisma migrations for a service in cloud. Run plan_db_migrate first to preview changes.

Regenerate all local config: secrets, docker-compose, kong, migrations. Run after adding services or changing secrets.

Remove a detached worker entry from config.json. Does NOT remove from cloud — use remove_detached_worker for that.

Sets the publishers and subscribers for a topic. Values replace the current list entirely — pass all desired services, not just additions. For example, if a topic currently has subscribers ["offers-service", "notifications-service"] and you call this with subscribers "offers-service", the result wi…

Validate a service follows naming conventions and structure.

Compare local secret names vs cloud — shows what's missing or extra. Run before deploying to catch mismatches.

Per-environment infrastructure settings: DB tiers, domains, scaling, custom overrides. This is a user-created file.

Full project configuration including service names, types, and workspace setup.

Get a single secret value from cloud. Use to check if a secret is set (e.g., DOMAIN). Returns the value — use with care.

Cloud resource status for a specific service (running, image tag, URL, health).

Terraform plan — preview infrastructure changes without applying. Always run before `infra_deploy`.

Check if infrastructure configuration is in sync (Terraform state vs config files).

All deployed services in a cloud environment with their current status.

List configured cloud environments (dev, staging, prod) and their providers.

Scheduled jobs (cron tasks) and their deployment status.

Secret names stored in a cloud environment's secret manager. Does NOT return values.

List all services in the project with their types and ports. Use this first to understand the project.

Show pending Prisma database migrations for a service. Run before `run_db_migrate` to preview changes.