dash 4.1.2 → 4.2.0

data/lib/dash/mcp/tools/autoscale_explain_tool.rb

@@ -0,0 +1,56 @@
+class Dash::Mcp::Tools::AutoscaleExplainTool < Dash::Mcp::BaseTool
+  tool_name "autoscale_explain"
+  title "Autoscale explain"
+  description <<~DESC
+    One live evaluation of a scaled role by the autoscale policy, as the controller's next tick would make it, without acting:
+    the action (scale_out, scale_in, replace_member, hold), the container counts from and to, the reason codes (schedule_floor,
+    at_min, at_max, at_target, cooldown, warming_up, paused, lock_busy, member_unreachable, host_unreachable, pool_unreadable,
+    action_failed, above_threshold, below_threshold, held_by_guard, missing_data), when a hold can next change (eligible_at),
+    and every input: running count, floor, min/max bounds, step, active schedule windows, cooldowns, warmup and boot timeout,
+    last scale times, warming and unreachable members, unreadable baseline hosts, pause, and for a role with a signal its
+    sample, its guards' samples, since when it has been above or below its band, and the band itself. controlled is false
+    for a role without a schedule or a signal, which the controller leaves alone.
+  DESC
+  input_schema properties: { role: { type: "string", description: "The scaled role" } }, required: [ "role" ], additionalProperties: false
+
+  def self.call(server_context:, role:)
+    answer(server_context) do
+      ensure_state_host_in_scope
+      Dash::Diagnostics::AutoscaleExplain.new(role: scoped_role(role)).to_h
+    end
+  end
+
+  def self.scoped_role(name)
+    role = DASH.config.role(name) || raise(ArgumentError, "No role named #{name} (#{DASH.config.roles.map(&:name).join(",")})")
+    raise ArgumentError, "#{name} is outside this server's --roles and --hosts" unless roles_in_scope.include?(role)
+
+    role
+  end
+
+  # The roles within --roles, and with a baseline host within --hosts - from deploy.yml,
+  # never DASH.roles: that would ask the provider for the pool, and a pool that does not
+  # answer is an answer explain should give.
+  def self.roles_in_scope
+    roles = DASH.specific_roles || DASH.config.roles
+    DASH.specific_hosts ? roles.select { |role| (role.baseline_hosts & DASH.specific_hosts).any? } : roles
+  end
+
+  # nil when nothing narrows the server: every role's decisions.
+  def self.role_names_in_scope
+    roles_in_scope.map(&:name) if DASH.specific_roles || DASH.specific_hosts
+  end
+
+  # The controller's state host (Dash::Autoscale::StateStore.host) must be within the
+  # server's --hosts, or the hosts of its --roles (as lock_status asks) - when it is one of
+  # the app's hosts. The ceiling is over those: an `autoscale.controller` ops host that is
+  # none of them is outside its reach, and always answers. Baseline hosts only, never the
+  # pool, which a scope check must not ask.
+  def self.ensure_state_host_in_scope
+    host = Dash::Autoscale::StateStore.host
+    return unless (DASH.config.roles.flat_map(&:baseline_hosts) + DASH.config.accessories.flat_map(&:hosts)).include?(host)
+
+    hosts = DASH.specific_hosts || DASH.specific_roles&.flat_map(&:baseline_hosts)
+
+    raise ArgumentError, "The autoscale state lives on #{host}, outside this server's --hosts and --roles" if hosts && !hosts.include?(host)
+  end
+end

data/lib/dash/mcp/tools/config_tool.rb

@@ -0,0 +1,10 @@
+class Dash::Mcp::Tools::ConfigTool < Dash::Mcp::BaseTool
+  tool_name "config"
+  title "Configuration"
+  description "The effective deploy configuration (redacted) and its topology: which hosts each role runs on, which roles are proxied, the proxy hosts and the load balancer. Local, no SSH."
+  input_schema properties: {}, additionalProperties: false
+
+  def self.call(server_context:)
+    answer(server_context) { Dash::Diagnostics::Config.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/container_stats_tool.rb

@@ -0,0 +1,15 @@
+class Dash::Mcp::Tools::ContainerStatsTool < Dash::Mcp::BaseTool
+  tool_name "container_stats"
+  title "Container resource usage"
+  description <<~DESC
+    CPU %, memory and its limit, network and block I/O, and PIDs of every running container of this service per app host,
+    with role, replica slot and version - and under `accessories`, the same for each accessory's container on its own hosts.
+    A point-in-time sample: docker stats measures over about a second per host.
+    No argument reaches the command; hosts and roles only choose which configured hosts are asked.
+  DESC
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::ContainerStats.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/containers_tool.rb

@@ -0,0 +1,10 @@
+class Dash::Mcp::Tools::ContainersTool < Dash::Mcp::BaseTool
+  tool_name "containers"
+  title "Containers"
+  description "Every container of this service per app host: role, replica slot, version, state, health, image and creation time."
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::Containers.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/controller_status_tool.rb

@@ -0,0 +1,18 @@
+class Dash::Mcp::Tools::ControllerStatusTool < Dash::Mcp::BaseTool
+  tool_name "controller_status"
+  title "Autoscale controller"
+  description <<~DESC
+    Whether the autoscale controller (dash autoscale run) is running: its heartbeat - controller id, host, pid, dash version,
+    mode, interval, last tick and its age - read as running, stale (no tick for three intervals) or stopped; null when none ever ran.
+    Also the roles with a schedule or signal it controls, and the pauses in force (role, until, by whom).
+  DESC
+  input_schema properties: {}, additionalProperties: false
+
+  def self.call(server_context:)
+    answer(server_context) do
+      Dash::Mcp::Tools::AutoscaleExplainTool.ensure_state_host_in_scope
+
+      Dash::Diagnostics::ControllerStatus.new.to_h
+    end
+  end
+end

data/lib/dash/mcp/tools/deploy_reports_tool.rb

@@ -0,0 +1,10 @@
+class Dash::Mcp::Tools::DeployReportsTool < Dash::Mcp::BaseTool
+  tool_name "deploy_reports"
+  title "Deploy reports"
+  description "The saved deploy reports for this destination, most recent first: command, status, runtime, per-phase timings and advice. Local, no SSH."
+  input_schema properties: { last: { type: "integer", minimum: 1, maximum: Dash::Diagnostics::Reports::MAX, description: "How many reports (default 1)" } }, additionalProperties: false
+
+  def self.call(server_context:, last: 1)
+    answer(server_context) { Dash::Diagnostics::Reports.new(last: last).to_h }
+  end
+end

data/lib/dash/mcp/tools/doctor_tool.rb

@@ -0,0 +1,13 @@
+class Dash::Mcp::Tools::DoctorTool < Dash::Mcp::BaseTool
+  tool_name "doctor"
+  title "Doctor"
+  description <<~DESC
+    dash doctor's readiness checks as {check, target, status, detail}: SSH, Docker, proxy image and version, ports, DNS,
+    certificates, readiness gates and drift. The registry check is skipped: it runs docker login on each host.
+  DESC
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::Doctor.new(registry: false).to_h }
+  end
+end

data/lib/dash/mcp/tools/drift_tool.rb

@@ -0,0 +1,16 @@
+class Dash::Mcp::Tools::DriftTool < Dash::Mcp::BaseTool
+  tool_name "drift"
+  title "Drift"
+  description <<~DESC
+    Whether the proxy pool is consistent with what runs: compares containers with dash-proxy and load balancer targets.
+    Each mismatch has a code: proxy_target_not_running, running_not_targeted, loadbalancer_target_missing,
+    loadbalancer_target_extra, version_mismatch, multiple_running_versions, member_not_targeted (a started pool member
+    the load balancer does not forward to), member_orphan (a started pool member running nothing of its role).
+    Version codes are skipped while the deploy lock is held.
+  DESC
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::Drift.take.to_h }
+  end
+end

data/lib/dash/mcp/tools/host_stats_tool.rb

@@ -0,0 +1,14 @@
+class Dash::Mcp::Tools::HostStatsTool < Dash::Mcp::BaseTool
+  tool_name "host_stats"
+  title "Host resource usage"
+  description <<~DESC
+    Per host: load average (1/5/15 minutes, and per CPU), CPU count, memory and swap, disk for / and for Docker's data root,
+    and uptime. A point-in-time read of /proc and df. No argument reaches the command; hosts and roles only choose which
+    configured hosts are asked.
+  DESC
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::HostStats.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/lock_status_tool.rb

@@ -0,0 +1,15 @@
+class Dash::Mcp::Tools::LockStatusTool < Dash::Mcp::BaseTool
+  tool_name "lock_status"
+  title "Deploy lock"
+  description "Whether this destination's deploy lock is held, by whom, since when, at which version and with what message."
+  input_schema properties: {}, additionalProperties: false
+
+  def self.call(server_context:)
+    answer(server_context) do
+      primary = DASH.config.primary_host
+      raise ArgumentError, "The deploy lock lives on the primary host #{primary}, outside this server's --hosts" unless DASH.hosts.include?(primary)
+
+      Dash::Diagnostics::Lock.new(host: primary).to_h
+    end
+  end
+end

data/lib/dash/mcp/tools/logs_tool.rb

@@ -0,0 +1,41 @@
+class Dash::Mcp::Tools::LogsTool < Dash::Mcp::BaseTool
+  tool_name "logs"
+  title "Container logs"
+  description <<~DESC
+    The tail of a role's containers on its hosts (every replica slot), or of an accessory's. Off unless the server was started with --allow-logs
+    (or DASH_MCP_ALLOW_LOGS=true): logs can carry personal data. grep is a plain substring match.
+  DESC
+  input_schema properties: {
+    role: { type: "string", description: "The role (default: the primary role)" },
+    accessory: { type: "string", description: "An accessory instead of a role (e.g. the database)" },
+    hosts: SCOPE[:hosts],
+    lines: { type: "integer", minimum: 1, maximum: Dash::Diagnostics::Lines::MAX, description: "Lines per container (default 100)" },
+    since: { type: "string", description: "A duration like 15m or 1h30m, or a timestamp like 2026-10-05T10:00:00Z" },
+    grep: { type: "string", maxLength: Dash::Diagnostics::Logs::MAX_GREP_LENGTH, description: "Only lines containing this text" }
+  }, additionalProperties: false
+
+  REFUSED = "The logs tool is off: container logs can carry personal data. Restart `dash mcp` with --allow-logs (or DASH_MCP_ALLOW_LOGS=true) to enable it."
+
+  def self.call(server_context:, role: nil, accessory: nil, hosts: nil, lines: 100, since: nil, grep: nil)
+    return error_response(REFUSED) unless server_context.fetch(:session).allow_logs?
+    return error_response("Pass a role or an accessory, not both") if role && accessory
+
+    answer(server_context, hosts: hosts) do
+      source = accessory ? { accessory: scoped_accessory(accessory) } : { role: scoped_role(role) }
+      Dash::Diagnostics::Logs.new(**source, lines: lines, since: since, grep: grep, redactor: server_context.fetch(:session).redactor).to_h
+    end
+  end
+
+  def self.scoped_accessory(name)
+    accessory = DASH.config.accessory(name) || raise(ArgumentError, "No accessory #{name} (#{DASH.accessory_names.join(",")})")
+    raise ArgumentError, "Accessory #{name} runs on no host within this server's scope" if (accessory.hosts & DASH.accessory_hosts).empty?
+
+    accessory
+  end
+
+  def self.scoped_role(name)
+    return DASH.primary_role unless name
+
+    DASH.roles.find { |role| role.name == name } || raise(ArgumentError, "No role #{name} within this server's scope (#{DASH.roles.map(&:name).join(",")})")
+  end
+end

data/lib/dash/mcp/tools/pool_members_tool.rb

@@ -0,0 +1,15 @@
+class Dash::Mcp::Tools::PoolMembersTool < Dash::Mcp::BaseTool
+  tool_name "pool_members"
+  title "Pool members"
+  description <<~DESC
+    The autoscale pool of every scaled role: its provider, members mode (power or create), host bounds and baseline
+    hosts, and per member its provider id, host, state (started, stopped, maintenance, error), labels, whether the
+    provider vouched for it (verified false: taken from --hosts while the provider was down), the versions a started
+    member runs, and orphan (started but running nothing of the role). A provider that does not answer is the role's error.
+  DESC
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::Pool.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/proxy_services_tool.rb

@@ -0,0 +1,10 @@
+class Dash::Mcp::Tools::ProxyServicesTool < Dash::Mcp::BaseTool
+  tool_name "proxy_services"
+  title "Proxy services"
+  description "What dash-proxy routes for this deploy on each proxy host (domains, targets, state), and the load balancer's routes when load balancing is on."
+  input_schema properties: SCOPE.slice(:hosts), additionalProperties: false
+
+  def self.call(server_context:, hosts: nil)
+    answer(server_context, hosts: hosts) { Dash::Diagnostics::ProxyServices.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/scale_status_tool.rb

@@ -0,0 +1,10 @@
+class Dash::Mcp::Tools::ScaleStatusTool < Dash::Mcp::BaseTool
+  tool_name "scale_status"
+  title "Scale status"
+  description "Per role: its replicas bounds (min, max per host), how many containers run in total, and each host's replica slots with version and docker status. Hosts that could not be read are listed under unread. A role with scale also has its host bounds and its pool members (orphan: started but running nothing of the role)."
+  input_schema properties: SCOPE, additionalProperties: false
+
+  def self.call(server_context:, hosts: nil, roles: nil)
+    answer(server_context, hosts: hosts, roles: roles) { Dash::Diagnostics::Scale.new.to_h }
+  end
+end

data/lib/dash/mcp/tools/signal_sample_tool.rb

@@ -0,0 +1,19 @@
+class Dash::Mcp::Tools::SignalSampleTool < Dash::Mcp::BaseTool
+  tool_name "signal_sample"
+  title "Signal sample"
+  description <<~DESC
+    One live sample of a scaled role's autoscale signal (scale.signal: sidekiq or pgbus queue age in seconds, or a Prometheus
+    query) and of each of its saturation guards (scale.hold_when), read from the machine dash mcp runs on, each with its latency:
+    the source, value, time and error of the signal, where it sits against the role's band (above, inside, below) and the band
+    itself (up.above, up.for, down.below, down.for); per guard its index, source, bound, value, error and whether it is holding
+    a scale-out. The fields match the signal and guards inputs of the controller's decisions, so a sample compares directly
+    with autoscale_explain and autoscale_decisions. Reads only. configured is false for a role without a signal.
+  DESC
+  input_schema properties: { role: { type: "string", description: "The scaled role" } }, required: [ "role" ], additionalProperties: false
+
+  def self.call(server_context:, role:)
+    answer(server_context) do
+      Dash::Diagnostics::AutoscaleSignal.new(role: Dash::Mcp::Tools::AutoscaleExplainTool.scoped_role(role)).to_h
+    end
+  end
+end

data/lib/dash/mcp/transport.rb

@@ -0,0 +1,14 @@
+# stdio, with the protocol on an IO of its own. dash prints from everywhere - SSHKit's
+# formatter, `say`, hooks, warnings - and over stdio any line on stdout is a protocol
+# frame, so the Runner points $stdout at $stderr and hands the real stdout here.
+class Dash::Mcp::Transport < ::MCP::Server::Transports::StdioTransport
+  def initialize(server, output:)
+    super(server)
+    @output = output
+  end
+
+  def send_response(message)
+    @output.puts(message.is_a?(String) ? message : JSON.generate(message))
+    @output.flush
+  end
+end

data/lib/dash/mcp.rb

@@ -0,0 +1,56 @@
+# `dash mcp`: read-only diagnostics for an AI agent over the Model Context Protocol.
+#
+# Kept out of Zeitwerk (lib/dash.rb ignores lib/dash/mcp/) because the tools subclass
+# `MCP::Tool` from the optional `mcp` gem, which a deploy should never need. This file
+# stays autoloadable so `dash mcp` can say what to install; `load!` pulls in the rest.
+module Dash::Mcp
+  module Tools; end
+
+  REQUIRES = %w[
+    dash/mcp/session
+    dash/mcp/base_tool
+    dash/mcp/tools/config_tool
+    dash/mcp/tools/containers_tool
+    dash/mcp/tools/proxy_services_tool
+    dash/mcp/tools/drift_tool
+    dash/mcp/tools/deploy_reports_tool
+    dash/mcp/tools/audit_tool
+    dash/mcp/tools/lock_status_tool
+    dash/mcp/tools/doctor_tool
+    dash/mcp/tools/logs_tool
+    dash/mcp/tools/scale_status_tool
+    dash/mcp/tools/pool_members_tool
+    dash/mcp/tools/autoscale_explain_tool
+    dash/mcp/tools/autoscale_decisions_tool
+    dash/mcp/tools/controller_status_tool
+    dash/mcp/tools/signal_sample_tool
+    dash/mcp/tools/container_stats_tool
+    dash/mcp/tools/host_stats_tool
+    dash/mcp/server
+    dash/mcp/transport
+    dash/mcp/runner
+  ].freeze
+
+  # Everything that prints after this lands on stderr; the returned IO carries only the
+  # protocol. `dash mcp` calls it first, before even the gem loads, so nothing - not the
+  # "add the gem" error either - can print onto the protocol stream.
+  def self.reserve_stdout!
+    protocol = $stdout
+    protocol.set_encoding("UTF-8")
+    $stdout = $stderr
+    SSHKit.config.output = SSHKit::Formatter::Pretty.new($stderr)
+    protocol
+  end
+
+  # Only the gem's own require is rescued, so a broken dash/mcp/* require shows up as
+  # itself instead of as "add the gem".
+  def self.load!
+    begin
+      require "mcp"
+    rescue LoadError
+      raise Dash::ConfigurationError, "dash mcp needs the `mcp` gem: add `gem \"mcp\", \"~> 1.6\"` to your Gemfile and run `bundle install`"
+    end
+
+    REQUIRES.each { |path| require path }
+  end
+end

data/lib/dash/sshkit_with_ext.rb

@@ -45,10 +45,10 @@ class SSHKit::Backend::Abstract
       $stdout.binmode
       $stdout.write(output)
     else
-      unless quiet
-        puts "#{type} Host: #{host}"
-      end
-      puts "#{output}\n\n"
+      # One write: hosts print from parallel threads onto an unbuffered stdout, so a header
+      # written on its own can end up above another host's output.
+      header = "#{type} Host: #{host}\n" unless quiet
+      puts "#{header}#{output}\n\n"
     end
   end
 

data/lib/dash/utils.rb

@@ -93,6 +93,13 @@ module Dash::Utils
       .join
   end
 
+  # Wraps a value in single quotes, closing and reopening them around any quote the value
+  # carries, so the shell reads it as one literal word: no expansion, no command
+  # substitution, no way out of the quotes. `grep 'my-id'` stays `grep 'my-id'`.
+  def single_quote(value)
+    "'#{value.to_s.gsub("'") { %q('\\'') }}'"
+  end
+
   def escape_ascii_shell_value(value)
     value.to_s.dump
       .gsub(/`/, '\\\\`')

data/lib/dash/version.rb

@@ -1,3 +1,3 @@
 module Dash
-  VERSION = "4.1.2"
+  VERSION = "4.2.0"
 end

data/lib/dash.rb

@@ -26,5 +26,7 @@ require "digest/sha2"
 
 loader = Zeitwerk::Loader.for_gem
 loader.ignore(File.join(__dir__, "dash", "sshkit_with_ext.rb"))
+# The MCP tools subclass MCP::Tool from the optional `mcp` gem; Dash::Mcp.load! requires them.
+loader.ignore(File.join(__dir__, "dash", "mcp"))
 loader.setup
 loader.eager_load_namespace(Dash::Cli) # We need all commands loaded.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dash
 version: !ruby/object:Gem::Version
-  version: 4.1.2
+  version: 4.2.0
 platform: ruby
 authors:
 - Mikael Henriksson
@@ -177,6 +177,43 @@ files:
 - README.md
 - bin/dash
 - lib/dash.rb
+- lib/dash/autoscale/connections.rb
+- lib/dash/autoscale/connections/builder.rb
+- lib/dash/autoscale/controller.rb
+- lib/dash/autoscale/cron.rb
+- lib/dash/autoscale/decision.rb
+- lib/dash/autoscale/duration.rb
+- lib/dash/autoscale/evaluation.rb
+- lib/dash/autoscale/guard.rb
+- lib/dash/autoscale/lease.rb
+- lib/dash/autoscale/lease_held.rb
+- lib/dash/autoscale/lease_lost.rb
+- lib/dash/autoscale/member.rb
+- lib/dash/autoscale/metrics.rb
+- lib/dash/autoscale/metrics_server.rb
+- lib/dash/autoscale/observation.rb
+- lib/dash/autoscale/pause.rb
+- lib/dash/autoscale/policy.rb
+- lib/dash/autoscale/pool.rb
+- lib/dash/autoscale/prometheus_client.rb
+- lib/dash/autoscale/provider.rb
+- lib/dash/autoscale/provider/base.rb
+- lib/dash/autoscale/provider/exec.rb
+- lib/dash/autoscale/provider/upcloud.rb
+- lib/dash/autoscale/provider_error.rb
+- lib/dash/autoscale/read_only_query.rb
+- lib/dash/autoscale/reader.rb
+- lib/dash/autoscale/recorder.rb
+- lib/dash/autoscale/role_state.rb
+- lib/dash/autoscale/sample.rb
+- lib/dash/autoscale/signal.rb
+- lib/dash/autoscale/signal/pgbus.rb
+- lib/dash/autoscale/signal/prometheus.rb
+- lib/dash/autoscale/signal/sidekiq.rb
+- lib/dash/autoscale/simulation.rb
+- lib/dash/autoscale/state_store.rb
+- lib/dash/autoscale/timestamp.rb
+- lib/dash/autoscale/tunnel.rb
 - lib/dash/build/progress_parser.rb
 - lib/dash/build/report.rb
 - lib/dash/build/step.rb
@@ -186,17 +223,17 @@ files:
 - lib/dash/cli/app.rb
 - lib/dash/cli/app/assets.rb
 - lib/dash/cli/app/boot.rb
+- lib/dash/cli/app/boot_state.rb
 - lib/dash/cli/app/error_pages.rb
 - lib/dash/cli/app/rollout_boot.rb
+- lib/dash/cli/app/running_targets.rb
+- lib/dash/cli/app/slot_version.rb
 - lib/dash/cli/app/ssl_certificates.rb
+- lib/dash/cli/autoscale.rb
 - lib/dash/cli/base.rb
 - lib/dash/cli/build.rb
 - lib/dash/cli/build/clone.rb
 - lib/dash/cli/build/port_forwarding.rb
-- lib/dash/cli/doctor.rb
-- lib/dash/cli/doctor/config_checks.rb
-- lib/dash/cli/doctor/endpoint_checks.rb
-- lib/dash/cli/doctor/host_checks.rb
 - lib/dash/cli/healthcheck/barrier.rb
 - lib/dash/cli/healthcheck/drift_error.rb
 - lib/dash/cli/healthcheck/error.rb
@@ -207,15 +244,26 @@ files:
 - lib/dash/cli/main/migrate.rb
 - lib/dash/cli/proxy.rb
 - lib/dash/cli/proxy/drift.rb
+- lib/dash/cli/proxy/inspection.rb
 - lib/dash/cli/proxy/legacy_rename.rb
 - lib/dash/cli/proxy/loadbalancer_claim.rb
+- lib/dash/cli/proxy/loadbalancer_deploy.rb
 - lib/dash/cli/proxy/loadbalancer_reboot.rb
 - lib/dash/cli/proxy/reboot.rb
 - lib/dash/cli/prune.rb
 - lib/dash/cli/registry.rb
 - lib/dash/cli/report.rb
+- lib/dash/cli/scale.rb
+- lib/dash/cli/scale/host_plan.rb
+- lib/dash/cli/scale/join.rb
+- lib/dash/cli/scale/leave.rb
+- lib/dash/cli/scale/placement.rb
+- lib/dash/cli/scale/power_off.rb
+- lib/dash/cli/scale/replica_join.rb
+- lib/dash/cli/scale/replica_leave.rb
 - lib/dash/cli/secrets.rb
 - lib/dash/cli/server.rb
+- lib/dash/cli/stats_table.rb
 - lib/dash/cli/templates/deploy.yml
 - lib/dash/cli/templates/sample_hooks/docker-setup.sample
 - lib/dash/cli/templates/sample_hooks/post-app-boot.sample
@@ -223,6 +271,8 @@ files:
 - lib/dash/cli/templates/sample_hooks/post-deploy.sample
 - lib/dash/cli/templates/sample_hooks/post-proxy-deploy.sample
 - lib/dash/cli/templates/sample_hooks/post-proxy-reboot.sample
+- lib/dash/cli/templates/sample_hooks/post-scale-in.sample
+- lib/dash/cli/templates/sample_hooks/post-scale-out.sample
 - lib/dash/cli/templates/sample_hooks/pre-app-boot.sample
 - lib/dash/cli/templates/sample_hooks/pre-app-stop.sample
 - lib/dash/cli/templates/sample_hooks/pre-build.sample
@@ -230,6 +280,8 @@ files:
 - lib/dash/cli/templates/sample_hooks/pre-deploy.sample
 - lib/dash/cli/templates/sample_hooks/pre-proxy-deploy.sample
 - lib/dash/cli/templates/sample_hooks/pre-proxy-reboot.sample
+- lib/dash/cli/templates/sample_hooks/pre-scale-in.sample
+- lib/dash/cli/templates/sample_hooks/pre-scale-out.sample
 - lib/dash/cli/templates/secrets
 - lib/dash/commander.rb
 - lib/dash/commander/specifics.rb
@@ -245,6 +297,7 @@ files:
 - lib/dash/commands/app/logging.rb
 - lib/dash/commands/app/proxy.rb
 - lib/dash/commands/auditor.rb
+- lib/dash/commands/autoscale.rb
 - lib/dash/commands/base.rb
 - lib/dash/commands/builder.rb
 - lib/dash/commands/builder/base.rb
@@ -260,6 +313,7 @@ files:
 - lib/dash/commands/lock.rb
 - lib/dash/commands/proxy.rb
 - lib/dash/commands/proxy/cert_transfer.rb
+- lib/dash/commands/proxy/services.rb
 - lib/dash/commands/proxy/state.rb
 - lib/dash/commands/prune.rb
 - lib/dash/commands/registry.rb
@@ -267,10 +321,12 @@ files:
 - lib/dash/configuration.rb
 - lib/dash/configuration/accessory.rb
 - lib/dash/configuration/alias.rb
+- lib/dash/configuration/autoscale.rb
 - lib/dash/configuration/boot.rb
 - lib/dash/configuration/builder.rb
 - lib/dash/configuration/docs/accessory.yml
 - lib/dash/configuration/docs/alias.yml
+- lib/dash/configuration/docs/autoscale.yml
 - lib/dash/configuration/docs/boot.yml
 - lib/dash/configuration/docs/builder.yml
 - lib/dash/configuration/docs/configuration.yml
@@ -296,7 +352,13 @@ files:
 - lib/dash/configuration/registry.rb
 - lib/dash/configuration/report.rb
 - lib/dash/configuration/role.rb
+- lib/dash/configuration/role/drain.rb
 - lib/dash/configuration/role/healthcheck.rb
+- lib/dash/configuration/role/replicas.rb
+- lib/dash/configuration/role/scale.rb
+- lib/dash/configuration/role/scale/guard.rb
+- lib/dash/configuration/role/scale/signal.rb
+- lib/dash/configuration/role/scale/window.rb
 - lib/dash/configuration/servers.rb
 - lib/dash/configuration/ssh.rb
 - lib/dash/configuration/sshkit.rb
@@ -304,6 +366,7 @@ files:
 - lib/dash/configuration/validator.rb
 - lib/dash/configuration/validator/accessory.rb
 - lib/dash/configuration/validator/alias.rb
+- lib/dash/configuration/validator/autoscale.rb
 - lib/dash/configuration/validator/builder.rb
 - lib/dash/configuration/validator/configuration.rb
 - lib/dash/configuration/validator/env.rb
@@ -312,6 +375,34 @@ files:
 - lib/dash/configuration/validator/role.rb
 - lib/dash/configuration/validator/servers.rb
 - lib/dash/configuration/volume.rb
+- lib/dash/diagnostics/audit.rb
+- lib/dash/diagnostics/autoscale_decisions.rb
+- lib/dash/diagnostics/autoscale_explain.rb
+- lib/dash/diagnostics/autoscale_signal.rb
+- lib/dash/diagnostics/base.rb
+- lib/dash/diagnostics/config.rb
+- lib/dash/diagnostics/container_stats.rb
+- lib/dash/diagnostics/containers.rb
+- lib/dash/diagnostics/controller_status.rb
+- lib/dash/diagnostics/docker_ps.rb
+- lib/dash/diagnostics/doctor.rb
+- lib/dash/diagnostics/doctor/config_checks.rb
+- lib/dash/diagnostics/doctor/controller_checks.rb
+- lib/dash/diagnostics/doctor/endpoint_checks.rb
+- lib/dash/diagnostics/doctor/host_checks.rb
+- lib/dash/diagnostics/doctor/pool_checks.rb
+- lib/dash/diagnostics/doctor/signal_checks.rb
+- lib/dash/diagnostics/drift.rb
+- lib/dash/diagnostics/host_stats.rb
+- lib/dash/diagnostics/lines.rb
+- lib/dash/diagnostics/lock.rb
+- lib/dash/diagnostics/logs.rb
+- lib/dash/diagnostics/pool.rb
+- lib/dash/diagnostics/proxy_services.rb
+- lib/dash/diagnostics/redactor.rb
+- lib/dash/diagnostics/reports.rb
+- lib/dash/diagnostics/scale.rb
+- lib/dash/diagnostics/units.rb
 - lib/dash/docker.rb
 - lib/dash/dockerfile/analyzer.rb
 - lib/dash/dockerfile/context.rb
@@ -340,6 +431,29 @@ files:
 - lib/dash/dockerfile/stage.rb
 - lib/dash/env_file.rb
 - lib/dash/git.rb
+- lib/dash/mcp.rb
+- lib/dash/mcp/base_tool.rb
+- lib/dash/mcp/runner.rb
+- lib/dash/mcp/server.rb
+- lib/dash/mcp/session.rb
+- lib/dash/mcp/tools/audit_tool.rb
+- lib/dash/mcp/tools/autoscale_decisions_tool.rb
+- lib/dash/mcp/tools/autoscale_explain_tool.rb
+- lib/dash/mcp/tools/config_tool.rb
+- lib/dash/mcp/tools/container_stats_tool.rb
+- lib/dash/mcp/tools/containers_tool.rb
+- lib/dash/mcp/tools/controller_status_tool.rb
+- lib/dash/mcp/tools/deploy_reports_tool.rb
+- lib/dash/mcp/tools/doctor_tool.rb
+- lib/dash/mcp/tools/drift_tool.rb
+- lib/dash/mcp/tools/host_stats_tool.rb
+- lib/dash/mcp/tools/lock_status_tool.rb
+- lib/dash/mcp/tools/logs_tool.rb
+- lib/dash/mcp/tools/pool_members_tool.rb
+- lib/dash/mcp/tools/proxy_services_tool.rb
+- lib/dash/mcp/tools/scale_status_tool.rb
+- lib/dash/mcp/tools/signal_sample_tool.rb
+- lib/dash/mcp/transport.rb
 - lib/dash/otel_shipper.rb
 - lib/dash/output/base_logger.rb
 - lib/dash/output/file_logger.rb