@masonator/coolify-mcp 2.10.0 → 2.12.0

package/dist/__tests__/mcp-server.test.js

@@ -149,6 +149,61 @@ describe('CoolifyMcpServer v2', () => {
             expect(typeof client.updateCloudToken).toBe('function');
             expect(typeof client.deleteCloudToken).toBe('function');
             expect(typeof client.validateCloudToken).toBe('function');
+            // Application storage operations
+            expect(typeof client.listApplicationStorages).toBe('function');
+            expect(typeof client.createApplicationStorage).toBe('function');
+            expect(typeof client.updateApplicationStorage).toBe('function');
+            expect(typeof client.deleteApplicationStorage).toBe('function');
+            // Application scheduled task operations
+            expect(typeof client.listApplicationScheduledTasks).toBe('function');
+            expect(typeof client.createApplicationScheduledTask).toBe('function');
+            expect(typeof client.updateApplicationScheduledTask).toBe('function');
+            expect(typeof client.deleteApplicationScheduledTask).toBe('function');
+            expect(typeof client.listApplicationScheduledTaskExecutions).toBe('function');
+            // Application preview operations
+            expect(typeof client.deleteApplicationPreview).toBe('function');
+            // Database environment variable operations
+            expect(typeof client.listDatabaseEnvVars).toBe('function');
+            expect(typeof client.createDatabaseEnvVar).toBe('function');
+            expect(typeof client.updateDatabaseEnvVar).toBe('function');
+            expect(typeof client.bulkUpdateDatabaseEnvVars).toBe('function');
+            expect(typeof client.deleteDatabaseEnvVar).toBe('function');
+            // Database storage operations
+            expect(typeof client.listDatabaseStorages).toBe('function');
+            expect(typeof client.createDatabaseStorage).toBe('function');
+            expect(typeof client.updateDatabaseStorage).toBe('function');
+            expect(typeof client.deleteDatabaseStorage).toBe('function');
+            // Delete backup execution
+            expect(typeof client.deleteBackupExecution).toBe('function');
+            // Service env var bulk operations
+            expect(typeof client.bulkUpdateServiceEnvVars).toBe('function');
+            // Service storage operations
+            expect(typeof client.listServiceStorages).toBe('function');
+            expect(typeof client.createServiceStorage).toBe('function');
+            expect(typeof client.updateServiceStorage).toBe('function');
+            expect(typeof client.deleteServiceStorage).toBe('function');
+            // Service scheduled task operations
+            expect(typeof client.listServiceScheduledTasks).toBe('function');
+            expect(typeof client.createServiceScheduledTask).toBe('function');
+            expect(typeof client.updateServiceScheduledTask).toBe('function');
+            expect(typeof client.deleteServiceScheduledTask).toBe('function');
+            expect(typeof client.listServiceScheduledTaskExecutions).toBe('function');
+            // Hetzner cloud operations
+            expect(typeof client.listHetznerLocations).toBe('function');
+            expect(typeof client.listHetznerServerTypes).toBe('function');
+            expect(typeof client.listHetznerImages).toBe('function');
+            expect(typeof client.listHetznerSSHKeys).toBe('function');
+            expect(typeof client.createHetznerServer).toBe('function');
+            // GitHub App repository operations
+            expect(typeof client.listGitHubAppRepositories).toBe('function');
+            expect(typeof client.listGitHubAppBranches).toBe('function');
+            // Resources operations
+            expect(typeof client.listResources).toBe('function');
+            // Health operations
+            expect(typeof client.getHealth).toBe('function');
+            // API enable/disable operations
+            expect(typeof client.enableApi).toBe('function');
+            expect(typeof client.disableApi).toBe('function');
             // Version caching
             expect(typeof client.getCachedVersion).toBe('function');
         });
@@ -245,6 +300,22 @@ describe('CoolifyMcpServer v2', () => {
             expect(result.content[0].text).toContain('key, value required');
         });
     });
+    describe('system tool handler', () => {
+        const callSystem = async (srv, args) => {
+            const tool = srv._registeredTools['system'];
+            return tool.handler(args, {});
+        };
+        it('forwards include_full and reveal to listResources', async () => {
+            const spy = jest.spyOn(server['client'], 'listResources').mockResolvedValue([]);
+            await callSystem(server, { action: 'list_resources', include_full: true, reveal: true });
+            expect(spy).toHaveBeenCalledWith({ include_full: true, reveal: true });
+        });
+        it('calls listResources with undefined flags when neither is passed', async () => {
+            const spy = jest.spyOn(server['client'], 'listResources').mockResolvedValue([]);
+            await callSystem(server, { action: 'list_resources' });
+            expect(spy).toHaveBeenCalledWith({ include_full: undefined, reveal: undefined });
+        });
+    });
     describe('bulk_env_update tool handler', () => {
         it('forwards is_buildtime/is_runtime to bulkEnvUpdate', async () => {
             const spy = jest.spyOn(server['client'], 'bulkEnvUpdate').mockResolvedValue({

package/dist/lib/coolify-client.d.ts

@@ -2,7 +2,7 @@
  * Coolify API Client
  * Complete HTTP client for the Coolify API v1
  */
-import type { CoolifyConfig, DeleteOptions, MessageResponse, UuidResponse, Server, ServerResource, ServerDomain, ServerValidation, CreateServerRequest, UpdateServerRequest, Project, CreateProjectRequest, UpdateProjectRequest, Environment, CreateEnvironmentRequest, Application, CreateApplicationPublicRequest, CreateApplicationPrivateGHRequest, CreateApplicationPrivateKeyRequest, CreateApplicationDockerfileRequest, CreateApplicationDockerImageRequest, CreateApplicationDockerComposeRequest, UpdateApplicationRequest, ApplicationActionResponse, EnvironmentVariable, EnvVarSummary, CreateEnvVarRequest, UpdateEnvVarRequest, BulkUpdateEnvVarsRequest, Database, UpdateDatabaseRequest, CreatePostgresqlRequest, CreateMysqlRequest, CreateMariadbRequest, CreateMongodbRequest, CreateRedisRequest, CreateKeydbRequest, CreateClickhouseRequest, CreateDragonflyRequest, CreateDatabaseResponse, DatabaseBackup, BackupExecution, CreateDatabaseBackupRequest, UpdateDatabaseBackupRequest, Service, CreateServiceRequest, UpdateServiceRequest, ServiceCreateResponse, Deployment, DeploymentEssential, Team, TeamMember, PrivateKey, CreatePrivateKeyRequest, UpdatePrivateKeyRequest, GitHubApp, CreateGitHubAppRequest, UpdateGitHubAppRequest, GitHubAppUpdateResponse, CloudToken, CreateCloudTokenRequest, UpdateCloudTokenRequest, CloudTokenValidation, Version, ApplicationDiagnostic, ServerDiagnostic, InfrastructureIssuesReport, BatchOperationResult } from '../types/coolify.js';
+import type { CoolifyConfig, DeleteOptions, MessageResponse, UuidResponse, Server, ServerResource, ServerDomain, ServerValidation, CreateServerRequest, UpdateServerRequest, Project, CreateProjectRequest, UpdateProjectRequest, Environment, CreateEnvironmentRequest, Application, CreateApplicationPublicRequest, CreateApplicationPrivateGHRequest, CreateApplicationPrivateKeyRequest, CreateApplicationDockerfileRequest, CreateApplicationDockerImageRequest, CreateApplicationDockerComposeRequest, UpdateApplicationRequest, ApplicationActionResponse, EnvironmentVariable, EnvVarSummary, CreateEnvVarRequest, UpdateEnvVarRequest, BulkUpdateEnvVarsRequest, Database, UpdateDatabaseRequest, CreatePostgresqlRequest, CreateMysqlRequest, CreateMariadbRequest, CreateMongodbRequest, CreateRedisRequest, CreateKeydbRequest, CreateClickhouseRequest, CreateDragonflyRequest, CreateDatabaseResponse, DatabaseBackup, BackupExecution, CreateDatabaseBackupRequest, UpdateDatabaseBackupRequest, Service, CreateServiceRequest, UpdateServiceRequest, ServiceCreateResponse, Deployment, DeploymentEssential, Team, TeamMember, PrivateKey, CreatePrivateKeyRequest, UpdatePrivateKeyRequest, GitHubApp, CreateGitHubAppRequest, UpdateGitHubAppRequest, GitHubAppUpdateResponse, CloudToken, CreateCloudTokenRequest, UpdateCloudTokenRequest, CloudTokenValidation, Version, StorageListResponse, CreateStorageRequest, UpdateStorageRequest, ScheduledTask, ScheduledTaskExecution, CreateScheduledTaskRequest, UpdateScheduledTaskRequest, HetznerLocation, HetznerServerType, HetznerImage, HetznerSSHKey, CreateHetznerServerRequest, CreateHetznerServerResponse, GitHubRepository, GitHubBranch, ApplicationDiagnostic, ServerDiagnostic, InfrastructureIssuesReport, BatchOperationResult, ResourceListItem, ResourceListItemFull } from '../types/coolify.js';
 export interface ListOptions {
     page?: number;
     per_page?: number;
@@ -225,6 +225,65 @@ export declare class CoolifyClient {
     createDatabaseBackup(databaseUuid: string, data: CreateDatabaseBackupRequest): Promise<DatabaseBackup>;
     updateDatabaseBackup(databaseUuid: string, backupUuid: string, data: UpdateDatabaseBackupRequest): Promise<MessageResponse>;
     deleteDatabaseBackup(databaseUuid: string, backupUuid: string): Promise<MessageResponse>;
+    listApplicationStorages(uuid: string): Promise<StorageListResponse>;
+    createApplicationStorage(uuid: string, data: CreateStorageRequest): Promise<MessageResponse>;
+    updateApplicationStorage(uuid: string, data: UpdateStorageRequest): Promise<MessageResponse>;
+    deleteApplicationStorage(uuid: string, storageUuid: string): Promise<MessageResponse>;
+    listApplicationScheduledTasks(uuid: string): Promise<ScheduledTask[]>;
+    createApplicationScheduledTask(uuid: string, data: CreateScheduledTaskRequest): Promise<ScheduledTask>;
+    updateApplicationScheduledTask(uuid: string, taskUuid: string, data: UpdateScheduledTaskRequest): Promise<ScheduledTask>;
+    deleteApplicationScheduledTask(uuid: string, taskUuid: string): Promise<MessageResponse>;
+    listApplicationScheduledTaskExecutions(uuid: string, taskUuid: string): Promise<ScheduledTaskExecution[]>;
+    deleteApplicationPreview(uuid: string, pullRequestId: number): Promise<MessageResponse>;
+    listDatabaseEnvVars(uuid: string): Promise<EnvironmentVariable[]>;
+    createDatabaseEnvVar(uuid: string, data: CreateEnvVarRequest): Promise<UuidResponse>;
+    updateDatabaseEnvVar(uuid: string, data: UpdateEnvVarRequest): Promise<MessageResponse>;
+    bulkUpdateDatabaseEnvVars(uuid: string, data: BulkUpdateEnvVarsRequest): Promise<MessageResponse>;
+    deleteDatabaseEnvVar(uuid: string, envUuid: string): Promise<MessageResponse>;
+    listDatabaseStorages(uuid: string): Promise<StorageListResponse>;
+    createDatabaseStorage(uuid: string, data: CreateStorageRequest): Promise<MessageResponse>;
+    updateDatabaseStorage(uuid: string, data: UpdateStorageRequest): Promise<MessageResponse>;
+    deleteDatabaseStorage(uuid: string, storageUuid: string): Promise<MessageResponse>;
+    deleteBackupExecution(databaseUuid: string, backupUuid: string, executionUuid: string): Promise<MessageResponse>;
+    bulkUpdateServiceEnvVars(uuid: string, data: BulkUpdateEnvVarsRequest): Promise<MessageResponse>;
+    listServiceStorages(uuid: string): Promise<StorageListResponse>;
+    createServiceStorage(uuid: string, data: CreateStorageRequest): Promise<MessageResponse>;
+    updateServiceStorage(uuid: string, data: UpdateStorageRequest): Promise<MessageResponse>;
+    deleteServiceStorage(uuid: string, storageUuid: string): Promise<MessageResponse>;
+    listServiceScheduledTasks(uuid: string): Promise<ScheduledTask[]>;
+    createServiceScheduledTask(uuid: string, data: CreateScheduledTaskRequest): Promise<ScheduledTask>;
+    updateServiceScheduledTask(uuid: string, taskUuid: string, data: UpdateScheduledTaskRequest): Promise<ScheduledTask>;
+    deleteServiceScheduledTask(uuid: string, taskUuid: string): Promise<MessageResponse>;
+    listServiceScheduledTaskExecutions(uuid: string, taskUuid: string): Promise<ScheduledTaskExecution[]>;
+    listHetznerLocations(tokenUuid: string): Promise<HetznerLocation[]>;
+    listHetznerServerTypes(tokenUuid: string): Promise<HetznerServerType[]>;
+    listHetznerImages(tokenUuid: string): Promise<HetznerImage[]>;
+    listHetznerSSHKeys(tokenUuid: string): Promise<HetznerSSHKey[]>;
+    createHetznerServer(data: CreateHetznerServerRequest): Promise<CreateHetznerServerResponse>;
+    listGitHubAppRepositories(githubAppId: number): Promise<GitHubRepository[]>;
+    listGitHubAppBranches(githubAppId: number, owner: string, repo: string): Promise<GitHubBranch[]>;
+    /**
+     * List every resource on the Coolify instance.
+     *
+     * Defaults to an essential projection ({@link ResourceListItem}: uuid, name,
+     * type, optional status) — Coolify's `/api/v1/resources` endpoint actually
+     * returns ~95 fields per row including the full build/healthcheck/limits
+     * config, which on a moderate instance can exceed 500 KB on a single call
+     * and blow MCP/LLM context budgets. Set `include_full: true` to opt back
+     * into the raw response shape ({@link ResourceListItemFull}).
+     *
+     * When `include_full: true`, sensitive fields ({@link SENSITIVE_RESOURCE_FIELDS}:
+     * webhook HMAC secrets + basic-auth password) are replaced with `'***'`
+     * unless the caller also passes `reveal: true`. Mirrors the v2.9.0 env_vars
+     * masking posture.
+     */
+    listResources(options?: {
+        include_full?: boolean;
+        reveal?: boolean;
+    }): Promise<ResourceListItem[] | ResourceListItemFull[]>;
+    getHealth(): Promise<MessageResponse>;
+    enableApi(): Promise<MessageResponse>;
+    disableApi(): Promise<MessageResponse>;
     cancelDeployment(uuid: string): Promise<MessageResponse>;
     /**
      * Check if a string looks like a UUID (Coolify format or standard format).

package/dist/lib/coolify-client.js

@@ -180,6 +180,58 @@ function maskEnvVarSummary(envVar) {
         value: MASKED_VALUE,
     };
 }
+/**
+ * Project a full Coolify resource row down to {@link ResourceListItem} — the
+ * four fields callers actually need for enumeration (uuid, name, type, status).
+ * Drops the ~90 extra fields Coolify returns by default to keep MCP token
+ * budgets sane.
+ */
+function toResourceListItemEssential(item) {
+    const essential = {
+        uuid: item.uuid,
+        name: item.name,
+        type: item.type,
+    };
+    if (typeof item.status === 'string') {
+        essential.status = item.status;
+    }
+    return essential;
+}
+/**
+ * Per-resource sensitive fields returned by Coolify's `/api/v1/resources`
+ * endpoint that are masked by default in {@link CoolifyClient.listResources}
+ * when `include_full: true` is passed. Mirrors the v2.9.0 env-var masking
+ * posture: the underlying API exposes these via the same access token, but
+ * the MCP layer narrows the trust boundary so an LLM client that was granted
+ * "list resources" doesn't silently exfiltrate webhook HMAC secrets or
+ * basic-auth credentials.
+ *
+ * The `manual_webhook_secret_*` fields are HMAC signing keys for inbound
+ * deploy webhooks — anyone with one can forge deploys for that repo
+ * independently of the Coolify API token. `http_basic_auth_password` is the
+ * password gating front-of-app access.
+ */
+const SENSITIVE_RESOURCE_FIELDS = [
+    'manual_webhook_secret_github',
+    'manual_webhook_secret_gitlab',
+    'manual_webhook_secret_gitea',
+    'manual_webhook_secret_bitbucket',
+    'http_basic_auth_password',
+];
+/**
+ * Replace each {@link SENSITIVE_RESOURCE_FIELDS} entry with `'***'` on a full
+ * resource row. Null/undefined values are preserved (since `null` conveys
+ * "no secret set" and matters to callers); only populated values get masked.
+ */
+function maskResourceItemFull(item) {
+    const masked = { ...item };
+    for (const field of SENSITIVE_RESOURCE_FIELDS) {
+        if (masked[field] != null) {
+            masked[field] = MASKED_VALUE;
+        }
+    }
+    return masked;
+}
 /**
  * HTTP client for the Coolify API
  */
@@ -922,6 +974,250 @@ export class CoolifyClient {
         });
     }
     // ===========================================================================
+    // Application Storage endpoints
+    // ===========================================================================
+    async listApplicationStorages(uuid) {
+        return this.request(`/applications/${uuid}/storages`);
+    }
+    async createApplicationStorage(uuid, data) {
+        return this.request(`/applications/${uuid}/storages`, {
+            method: 'POST',
+            body: JSON.stringify(data),
+        });
+    }
+    async updateApplicationStorage(uuid, data) {
+        return this.request(`/applications/${uuid}/storages`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    async deleteApplicationStorage(uuid, storageUuid) {
+        return this.request(`/applications/${uuid}/storages/${storageUuid}`, {
+            method: 'DELETE',
+        });
+    }
+    // ===========================================================================
+    // Application Scheduled Task endpoints
+    // ===========================================================================
+    async listApplicationScheduledTasks(uuid) {
+        return this.request(`/applications/${uuid}/scheduled-tasks`);
+    }
+    async createApplicationScheduledTask(uuid, data) {
+        return this.request(`/applications/${uuid}/scheduled-tasks`, {
+            method: 'POST',
+            body: JSON.stringify(data),
+        });
+    }
+    async updateApplicationScheduledTask(uuid, taskUuid, data) {
+        return this.request(`/applications/${uuid}/scheduled-tasks/${taskUuid}`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    async deleteApplicationScheduledTask(uuid, taskUuid) {
+        return this.request(`/applications/${uuid}/scheduled-tasks/${taskUuid}`, {
+            method: 'DELETE',
+        });
+    }
+    async listApplicationScheduledTaskExecutions(uuid, taskUuid) {
+        return this.request(`/applications/${uuid}/scheduled-tasks/${taskUuid}/executions`);
+    }
+    // ===========================================================================
+    // Application Preview endpoints
+    // ===========================================================================
+    async deleteApplicationPreview(uuid, pullRequestId) {
+        return this.request(`/applications/${uuid}/previews/${pullRequestId}`, {
+            method: 'DELETE',
+        });
+    }
+    // ===========================================================================
+    // Database Environment Variable endpoints
+    // ===========================================================================
+    async listDatabaseEnvVars(uuid) {
+        return this.request(`/databases/${uuid}/envs`);
+    }
+    async createDatabaseEnvVar(uuid, data) {
+        return this.request(`/databases/${uuid}/envs`, {
+            method: 'POST',
+            body: JSON.stringify(cleanRequestData(data)),
+        });
+    }
+    async updateDatabaseEnvVar(uuid, data) {
+        return this.request(`/databases/${uuid}/envs`, {
+            method: 'PATCH',
+            body: JSON.stringify(cleanRequestData(data)),
+        });
+    }
+    async bulkUpdateDatabaseEnvVars(uuid, data) {
+        return this.request(`/databases/${uuid}/envs/bulk`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    async deleteDatabaseEnvVar(uuid, envUuid) {
+        return this.request(`/databases/${uuid}/envs/${envUuid}`, {
+            method: 'DELETE',
+        });
+    }
+    // ===========================================================================
+    // Database Storage endpoints
+    // ===========================================================================
+    async listDatabaseStorages(uuid) {
+        return this.request(`/databases/${uuid}/storages`);
+    }
+    async createDatabaseStorage(uuid, data) {
+        return this.request(`/databases/${uuid}/storages`, {
+            method: 'POST',
+            body: JSON.stringify(data),
+        });
+    }
+    async updateDatabaseStorage(uuid, data) {
+        return this.request(`/databases/${uuid}/storages`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    async deleteDatabaseStorage(uuid, storageUuid) {
+        return this.request(`/databases/${uuid}/storages/${storageUuid}`, {
+            method: 'DELETE',
+        });
+    }
+    // ===========================================================================
+    // Delete Backup Execution endpoint
+    // ===========================================================================
+    async deleteBackupExecution(databaseUuid, backupUuid, executionUuid) {
+        return this.request(`/databases/${databaseUuid}/backups/${backupUuid}/executions/${executionUuid}`, { method: 'DELETE' });
+    }
+    // ===========================================================================
+    // Service Environment Variable (bulk) endpoint
+    // ===========================================================================
+    async bulkUpdateServiceEnvVars(uuid, data) {
+        return this.request(`/services/${uuid}/envs/bulk`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    // ===========================================================================
+    // Service Storage endpoints
+    // ===========================================================================
+    async listServiceStorages(uuid) {
+        return this.request(`/services/${uuid}/storages`);
+    }
+    async createServiceStorage(uuid, data) {
+        return this.request(`/services/${uuid}/storages`, {
+            method: 'POST',
+            body: JSON.stringify(data),
+        });
+    }
+    async updateServiceStorage(uuid, data) {
+        return this.request(`/services/${uuid}/storages`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    async deleteServiceStorage(uuid, storageUuid) {
+        return this.request(`/services/${uuid}/storages/${storageUuid}`, {
+            method: 'DELETE',
+        });
+    }
+    // ===========================================================================
+    // Service Scheduled Task endpoints
+    // ===========================================================================
+    async listServiceScheduledTasks(uuid) {
+        return this.request(`/services/${uuid}/scheduled-tasks`);
+    }
+    async createServiceScheduledTask(uuid, data) {
+        return this.request(`/services/${uuid}/scheduled-tasks`, {
+            method: 'POST',
+            body: JSON.stringify(data),
+        });
+    }
+    async updateServiceScheduledTask(uuid, taskUuid, data) {
+        return this.request(`/services/${uuid}/scheduled-tasks/${taskUuid}`, {
+            method: 'PATCH',
+            body: JSON.stringify(data),
+        });
+    }
+    async deleteServiceScheduledTask(uuid, taskUuid) {
+        return this.request(`/services/${uuid}/scheduled-tasks/${taskUuid}`, {
+            method: 'DELETE',
+        });
+    }
+    async listServiceScheduledTaskExecutions(uuid, taskUuid) {
+        return this.request(`/services/${uuid}/scheduled-tasks/${taskUuid}/executions`);
+    }
+    // ===========================================================================
+    // Hetzner Cloud endpoints
+    // ===========================================================================
+    async listHetznerLocations(tokenUuid) {
+        return this.request(`/hetzner/locations?cloud_provider_token_uuid=${encodeURIComponent(tokenUuid)}`);
+    }
+    async listHetznerServerTypes(tokenUuid) {
+        return this.request(`/hetzner/server-types?cloud_provider_token_uuid=${encodeURIComponent(tokenUuid)}`);
+    }
+    async listHetznerImages(tokenUuid) {
+        return this.request(`/hetzner/images?cloud_provider_token_uuid=${encodeURIComponent(tokenUuid)}`);
+    }
+    async listHetznerSSHKeys(tokenUuid) {
+        return this.request(`/hetzner/ssh-keys?cloud_provider_token_uuid=${encodeURIComponent(tokenUuid)}`);
+    }
+    async createHetznerServer(data) {
+        return this.request('/servers/hetzner', {
+            method: 'POST',
+            body: JSON.stringify(data),
+        });
+    }
+    // ===========================================================================
+    // GitHub App Repository endpoints
+    // ===========================================================================
+    async listGitHubAppRepositories(githubAppId) {
+        const response = await this.request(`/github-apps/${githubAppId}/repositories`);
+        return response.repositories ?? [];
+    }
+    async listGitHubAppBranches(githubAppId, owner, repo) {
+        return this.request(`/github-apps/${githubAppId}/repositories/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/branches`);
+    }
+    // ===========================================================================
+    // Resources endpoint
+    // ===========================================================================
+    /**
+     * List every resource on the Coolify instance.
+     *
+     * Defaults to an essential projection ({@link ResourceListItem}: uuid, name,
+     * type, optional status) — Coolify's `/api/v1/resources` endpoint actually
+     * returns ~95 fields per row including the full build/healthcheck/limits
+     * config, which on a moderate instance can exceed 500 KB on a single call
+     * and blow MCP/LLM context budgets. Set `include_full: true` to opt back
+     * into the raw response shape ({@link ResourceListItemFull}).
+     *
+     * When `include_full: true`, sensitive fields ({@link SENSITIVE_RESOURCE_FIELDS}:
+     * webhook HMAC secrets + basic-auth password) are replaced with `'***'`
+     * unless the caller also passes `reveal: true`. Mirrors the v2.9.0 env_vars
+     * masking posture.
+     */
+    async listResources(options) {
+        const full = await this.request('/resources');
+        if (options?.include_full !== true) {
+            return full.map(toResourceListItemEssential);
+        }
+        return options.reveal === true ? full : full.map(maskResourceItemFull);
+    }
+    // ===========================================================================
+    // Health endpoint
+    // ===========================================================================
+    async getHealth() {
+        return this.request('/health');
+    }
+    // ===========================================================================
+    // API Enable/Disable endpoints
+    // ===========================================================================
+    async enableApi() {
+        return this.request('/enable', { method: 'GET' });
+    }
+    async disableApi() {
+        return this.request('/disable', { method: 'GET' });
+    }
+    // ===========================================================================
     // Deployment Control endpoints
     // ===========================================================================
     async cancelDeployment(uuid) {