|
|
766352ec00
|
feat(mcp): workspace-set-aware tenant safety + richer chat system prompt
Stage 2 of per-project Coolify isolation:
- Add getApplicationInWorkspace / getDatabaseInWorkspace / getServiceInWorkspace
helpers that verify a resource belongs to ANY of the workspace's owned
Coolify projects (legacy workspace project + per-Vibn-project projects).
- Replace all single-resource MCP lookups (apps.get/delete/deploy/exec/logs/
domains/envs/volumes/repair, databases.*, services) to use the new
workspace-set-aware variants. Single-resource tools now correctly find
apps deployed under per-project Coolify namespaces.
- Fix missing queryOne import.
Chat system prompt overhaul:
- Add deployment recipes (third-party app, custom Docker image, database, domain)
- Add troubleshooting playbook (stuck deploys, 502s, tenant errors, repair)
- Restate hard rules: always pass projectId, always search templates first,
destructive ops require name confirm, surface long-running op timing.
Made-with: Cursor
|
2026-04-27 19:21:20 -07:00 |
|
