@jurislm/coolify-plugin 4.0.3 → 4.0.5

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "coolify-plugin",
-  "version": "4.0.3",
+  "version": "4.0.5",
   "description": "Fallback Codex metadata for local stdio Coolify tools.",
   "author": {
     "name": "JurisLM",

package/.mcp.json

@@ -3,7 +3,8 @@
     "coolify": {
       "type": "stdio",
       "command": "bunx",
-      "args": ["-y", "@jurislm/coolify-plugin@latest"]
+      "args": ["-y", "@jurislm/coolify-plugin@latest"],
+      "env_vars": ["COOLIFY_BASE_URL", "COOLIFY_ACCESS_TOKEN"]
     }
   }
 }

package/README.md

@@ -22,6 +22,7 @@ bun dist/index.js
 `mcp.json` and `.mcp.json` use the same published-package `bunx` stdio registration as the Woodpecker CI plugin. `.mcp.json.example` contains placeholder environment values only. NPM package release is allowed. Remote MCP transport, OAuth, vault, hosting, and OpenAI Plugin Directory submission are out of scope.
 
 For Codex repository marketplace installation, use the repository root and leave the sparse path empty. The supported marketplace manifest is `.agents/plugins/marketplace.json`; do not enter `plugins/codex`.
+The Codex MCP registration forwards `COOLIFY_BASE_URL` and `COOLIFY_ACCESS_TOKEN` from the Codex session environment. A desktop session may not inherit values exported in a terminal; start a new task after configuring the app environment, then verify a read-only Coolify tool before making changes.
 
 ```sh
 codex plugin marketplace add https://github.com/jurislm/coolify-plugin

package/api/manifest.json

@@ -1,7 +1,7 @@
 {
   "sourceUrl": "https://raw.githubusercontent.com/coollabsio/coolify/v4.3.23/openapi.json",
-  "fetchedAt": "2026-09-23T12:23:33.000Z",
-  "sha256": "e80f5efe8df44d0887285a8b923bca84bfc3af6a62b1e63405164e71939d6595",
+  "fetchedAt": "2026-09-25T02:22:36.551Z",
+  "sha256": "cdada83c8199f7b517bb19049ce7cb18773acee51f2fbadfb5a8370bd9d5f892",
   "upstreamSha256": "964360ffb3d4c026252aa4657d6561190f59ac4256395bf0645bf6a4f171ec88",
   "openapiVersion": "3.1.0",
   "infoVersion": "0.1",
@@ -15,6 +15,12 @@
     "Unsupported server validation operation removed",
     "Database PATCH omits unspecified health-check defaults",
     "Server reachability and service status are response fields",
-    "Server metadata, deployment git type, and environment descriptions can be null"
+    "Server metadata, deployment git type, and environment descriptions can be null",
+    "Database responses and nullable service hash match live Coolify payloads",
+    "Application settings, destination lists, shared environment variables, and log drain nulls match live responses",
+    "Shared environment variable writes accept bodies and return live response shapes",
+    "Plain Dockerfile input is encoded for the API",
+    "Cloud-init, notifications, GitHub apps, private keys, and team metadata match live response shapes",
+    "Resource creation accepts either environment name or UUID as documented"
   ]
 }

package/dist/client.js

@@ -1,5 +1,5 @@
 import { CoolifyApiError } from "./errors.js";
-const sensitiveKey = /(^value$|real_?value|private_?key|token|secret|password|authorization|cookie)/iu;
+const sensitiveKey = /(^value$|real_?value|private_?key|api_?key|user_?key|webhook_?url|token|secret|password|authorization|cookie)/iu;
 export function redactSensitive(value) {
     if (Array.isArray(value))
         return value.map(redactSensitive);
@@ -59,7 +59,10 @@ export class CoolifyClient {
         const init = { method: operation.method, headers, signal: AbortSignal.timeout(this.config.timeoutMs) };
         if (input.body !== undefined && !["GET", "HEAD"].includes(operation.method)) {
             headers.set("content-type", "application/json");
-            init.body = JSON.stringify(input.body);
+            const body = input.body;
+            init.body = JSON.stringify(operation.path === "/applications/dockerfile" && typeof body.dockerfile === "string"
+                ? { ...body, dockerfile: Buffer.from(body.dockerfile, "utf8").toString("base64") }
+                : body);
         }
         let response;
         try {
@@ -68,8 +71,20 @@ export class CoolifyClient {
         catch (error) {
             throw new CoolifyApiError(0, operation.method, path, `Coolify request failed for ${operation.method} ${path}: ${error instanceof Error ? error.message.replaceAll(token, "[REDACTED]") : "request error"}`);
         }
-        if (!response.ok)
-            throw new CoolifyApiError(response.status, operation.method, path, `Coolify API returned ${response.status} for ${operation.method} ${path}`);
+        if (!response.ok) {
+            let fields = "";
+            if (response.status === 422) {
+                try {
+                    const body = await response.json();
+                    const errors = body?.errors;
+                    if (errors && typeof errors === "object" && !Array.isArray(errors)) {
+                        fields = Object.keys(errors).filter((key) => /^[a-z][a-z0-9_.-]{0,63}$/iu.test(key)).slice(0, 8).map((key) => key.replaceAll(token, "[REDACTED]")).join(", ");
+                    }
+                }
+                catch { }
+            }
+            throw new CoolifyApiError(response.status, operation.method, path, `Coolify API returned ${response.status} for ${operation.method} ${path}${fields ? `; fields: ${fields}` : ""}`);
+        }
         let data = null;
         if (response.status !== 204) {
             const contentType = response.headers.get("content-type")?.toLowerCase() ?? "";