vibn-frontend

mark/vibn-frontend

Fork 0

Commit Graph

Author	SHA1	Message	Date
Mark Henderson	8c83f8c490	feat(mcp): apps.exec — run one-shot commands in app containers Companion to apps.logs. SSH to the Coolify host as vibn-logs, resolve the target container by app uuid + service, and run the caller's command through `docker exec ... sh -lc`. No TTY, no stdin — this is the write-path sibling of apps.logs, purpose-built for migrations, seeds, CLI invocations, and ad-hoc debugging. - lib/coolify-containers.ts extracts container enumeration + service resolution into a shared helper used by both logs and exec. - lib/coolify-exec.ts wraps docker exec with timeout (60s default, 10-min cap), output byte cap (1 MB default, 5 MB cap), optional --user / --workdir, and structured audit logging of the command + target (never the output). - app/api/mcp/route.ts wires `apps.exec` into the dispatcher and advertises it in the capabilities manifest. - app/api/workspaces/[slug]/apps/[uuid]/exec/route.ts exposes the same tool over REST for session-cookie callers. Tenant safety: every entrypoint runs getApplicationInProject before touching SSH, so an agent can only exec in apps belonging to their workspace. Made-with: Cursor	2026-04-23 14:18:49 -07:00
Mark Henderson	d86f2bea03	feat(mcp): apps.logs — compose-aware runtime logs Adds apps.logs MCP tool + session REST endpoint for tailing runtime container logs. Unblocks cold-start debugging for agent-deployed compose apps (Twenty, Cal.com, Plane, etc.) where Coolify's own /applications/{uuid}/logs endpoint returns empty. Architecture: - dockerfile / nixpacks / static apps → Coolify's REST logs API - dockercompose apps → SSH into Coolify host, `docker logs` per service New SSH path uses a dedicated `vibn-logs` user (docker group, no sudo, no pty, no port-forwarding, single ed25519 key). Private key lives in COOLIFY_SSH_PRIVATE_KEY_B64 on the vibn-frontend Coolify app; authorized_key is installed by scripts/setup-vibn-logs-user.sh on the Coolify host. Tool shape: params: { uuid, service?, lines? (default 200, max 5000) } returns: { uuid, buildPack, source: 'coolify_api'\|'ssh_docker'\|'empty', services: { [name]: { container, lines, bytes, logs, status? } }, warnings: string[], truncated: boolean } Made-with: Cursor	2026-04-23 13:21:52 -07:00

Author

SHA1

Message

Date

Mark Henderson

8c83f8c490

feat(mcp): apps.exec — run one-shot commands in app containers

Companion to apps.logs. SSH to the Coolify host as vibn-logs, resolve
the target container by app uuid + service, and run the caller's
command through `docker exec ... sh -lc`. No TTY, no stdin — this is
the write-path sibling of apps.logs, purpose-built for migrations,
seeds, CLI invocations, and ad-hoc debugging.

- lib/coolify-containers.ts extracts container enumeration + service
  resolution into a shared helper used by both logs and exec.
- lib/coolify-exec.ts wraps docker exec with timeout (60s default,
  10-min cap), output byte cap (1 MB default, 5 MB cap), optional
  --user / --workdir, and structured audit logging of the command +
  target (never the output).
- app/api/mcp/route.ts wires `apps.exec` into the dispatcher and
  advertises it in the capabilities manifest.
- app/api/workspaces/[slug]/apps/[uuid]/exec/route.ts exposes the same
  tool over REST for session-cookie callers.

Tenant safety: every entrypoint runs getApplicationInProject before
touching SSH, so an agent can only exec in apps belonging to their
workspace.

Made-with: Cursor

2026-04-23 14:18:49 -07:00

Mark Henderson

d86f2bea03

feat(mcp): apps.logs — compose-aware runtime logs

Adds apps.logs MCP tool + session REST endpoint for tailing runtime
container logs. Unblocks cold-start debugging for agent-deployed
compose apps (Twenty, Cal.com, Plane, etc.) where Coolify's own
/applications/{uuid}/logs endpoint returns empty.

Architecture:
  - dockerfile / nixpacks / static apps → Coolify's REST logs API
  - dockercompose apps                  → SSH into Coolify host,
                                          `docker logs` per service

New SSH path uses a dedicated `vibn-logs` user (docker group, no
sudo, no pty, no port-forwarding, single ed25519 key). Private key
lives in COOLIFY_SSH_PRIVATE_KEY_B64 on the vibn-frontend Coolify
app; authorized_key is installed by scripts/setup-vibn-logs-user.sh
on the Coolify host.

Tool shape:
  params:   { uuid, service?, lines? (default 200, max 5000) }
  returns:  { uuid, buildPack, source: 'coolify_api'|'ssh_docker'|'empty',
              services: { [name]: { container, lines, bytes, logs, status? } },
              warnings: string[], truncated: boolean }

Made-with: Cursor

2026-04-23 13:21:52 -07:00

2 Commits