@meshxdata/fops 0.1.52 → 0.1.53

package/CHANGELOG.md

@@ -1,3 +1,375 @@
+## [0.1.45] - 2026-03-12
+
+- bump fops to 0.1.44 (8c0ef5d)
+- Mlflow and azure plugin fix (176881f)
+- fix lifecycle (a2cb9e7)
+- callback url for localhost (821fb94)
+- disable 4 scaffolding plugin by default. (bfb2b76)
+- jaccard improvements (b7494a0)
+- refactor azure plugin (68dfef4)
+- refactor azure plugin (b24a008)
+- fix trino catalog missing (4928a55)
+- v36 bump and changelog generation on openai (37a0440)
+- v36 bump and changelog generation on openai (a3b02d9)
+- bump (a990058)
+- status bar fix and new plugin for ttyd (27dde1e)
+- file demo and tray (1a3e704)
+- electron app (59ad0bb)
+- compose and fops file plugin (1cf0e81)
+- bump (346ffc1)
+- localhost replaced by 127.0.0.1 (82b9f30)
+- .29 (587b0e1)
+- improve up down and bootstrap script (b79ebaf)
+- checksum (22c8086)
+- checksum (96b434f)
+- checksum (15ed3c0)
+- checksum (8a6543a)
+- bump embed trino linksg (8440504)
+- bump data (765ffd9)
+- bump (cb8b232)
+- broken tests (c532229)
+- release 0.1.18, preflight checks (d902249)
+- fix compute display bug (d10f5d9)
+- cleanup packer files (6330f18)
+- plan mode (cb36a8a)
+- bump to 0.1.16 - agent ui (41ac1a2)
+- bump to 0.1.15 - agent ui (4ebe2e1)
+- bump to 0.1.14 (6c3a7fa)
+- bump to 0.1.13 (8db570f)
+- release 0.1.12 (c1c79e5)
+- bump (11aa3b0)
+- git keep and bump tui (be1678e)
+- skills, index, rrf, compacted context (100k > 10k) (7b2fffd)
+- cloudflare and token consumption, graphs indexing (0ad9eec)
+- bump storage default (22c83ba)
+- storage fix (68a22a0)
+- skills update (7f56500)
+- v9 bump (3864446)
+- bump (c95eedc)
+- rrf (dbf8c95)
+- feat: warning when running predictions (95e8c52)
+- feat: support for local predictions (45cf26b)
+- feat: wip support for predictions + mlflow (3457052)
+- add Reciprocal Rank Fusion (RRF) to knowledge and skill retrieval (61549bc)
+- validate CSV headers in compute_run readiness check (a8c7a43)
+- fix corrupted Iceberg metadata: probe tables + force cleanup on re-apply (50578af)
+- enforce: never use foundation_apply to fix broken products (2e049bf)
+- update SKILL.md with complete tool reference for knowledge retrieval (30b1924)
+- add storage read, input DP table probe, and compute_run improvements (34e6c4c)
+- skills update (1220385)
+- skills update (bb66958)
+- some tui improvement andd tools apply overwrite (e90c35c)
+- skills update (e9227a1)
+- skills update (669c4b3)
+- fix plugin pre-flight checks (f741743)
+- increase agent context (6479aaa)
+- skills and init sql fixes (5fce35e)
+- checksum (3518b56)
+- penging job limit (a139861)
+- checksum (575d28c)
+- bump (92049ba)
+- fix bug per tab status (0a33657)
+- fix bug per tab status (50457c6)
+- checksumming (0ad842e)
+- shot af mardkwon overlapping (51f63b9)
+- add spark dockerfile for multiarch builds (95abbd1)
+- fix plugin initialization (16b9782)
+- split index.js (50902a2)
+- cloudflare cidr (cc4e021)
+- cloduflare restrictions (2f6ba2d)
+- sequential start (86b496e)
+- sequential start (4930fe1)
+- sequential start (353f014)
+- qa tests (2dc6a1a)
+- bump sha for .85 (dc2edfe)
+- preserve env on sudo (7831227)
+- bump sha for .84 (6c052f9)
+- non interactive for azure vms (0aa8a2f)
+- keep .env if present (d072450)
+- bump (7a8e732)
+- ensure opa is on compose if not set (f4a5228)
+- checksum bump (a2ccc20)
+- netrc defensive checks (a0b0ccc)
+- netrc defensive checks (ae37403)
+- checksum (ec45d11)
+- update sync and fix up (7f9af72)
+- expand test for azure and add new per app tag support (388a168)
+- checksum on update (44005fc)
+- cleanup for later (15e5313)
+- cleanup for later (11c9597)
+- switch branch feature (822fecc)
+- add pull (d1c19ab)
+- Bump hono from 4.11.9 to 4.12.0 in /operator-cli (ad25144)
+- tests (f180a9a)
+- cleanup (39c49a3)
+- registry (7b7126a)
+- reconcile kafka (832d0db)
+- gh login bug (025886c)
+- cleanup (bb96cab)
+- strip envs from process (2421180)
+- force use of gh creds not tokens in envs var (fff7787)
+- resolve import between npm installs and npm link (79522e1)
+- fix gh scope and azure states (afd846c)
+- refactoring (da50352)
+- split fops repo (d447638)
+- aks (b791f8f)
+- refactor azure (67d3bad)
+- wildcard (391f023)
+- azure plugin (c074074)
+- zap (d7e6e7f)
+- fix knock (cf89c05)
+- azure (4adec98)
+- Bump tar from 7.5.7 to 7.5.9 in /operator-cli (e41e98e)
+- azure stack index.js split (de12272)
+- Bump ajv from 8.17.1 to 8.18.0 in /operator-cli (76da21f)
+- packer (9665fbc)
+- remove stack api (db0fd4d)
+- packer cleanup (fe1bf14)
+- force refresh token (3a3d7e2)
+- provision shell (2ad505f)
+- azure vm management (91dcb31)
+- azure specific (2b0cca8)
+- azure packer (12175b8)
+- init hashed pwd (db8523c)
+- packer (5b5c7c4)
+- doctor for azure vm (ed524fa)
+- packer and 1pwd (c6d053e)
+- split big index.js (dc85a1b)
+- kafka volume update (21815ec)
+- fix openai azure tools confirmation and flow (0118cd1)
+- nighly fixx, test fix (5e0d04f)
+- open ai training (cdc494a)
+- openai integration in azure (1ca1475)
+- ci (672cea9)
+- refresh ghcr creds (4220c48)
+- cleaned up version (1a0074f)
+- traefik on ghcr and templates (8e31a05)
+- apply fcl (e78911f)
+- demo landscape (dd205fe)
+- smarter login and schema (1af514f)
+- no down before up unless something broke (56b1132)
+- dai, reconcile failed containers (12907fa)
+- reconcile dead container (7da75e4)
+- defensive around storage buckets dir (b98871d)
+- defensive around storage buckets dir (e86e132)
+- gear in for multiarch (bf3fa3e)
+- up autofix (99c7f89)
+- autofix stale containers on up (43c7d0f)
+- shared sessions fix (5de1359)
+- share sessions between ui and tui (8321391)
+- fix chat view display details (e263996)
+- fix chat view display details (9babdda)
+- tui up fixes (86e9f17)
+- fix commands init (442538b)
+- enable k3s profile (b2dcfc8)
+- test up till job creation (656d388)
+- tui fixes (0599779)
+- cleanup (27731f0)
+- train (90bf559)
+- training (f809bf6)
+- training (ba2b836)
+- training (6fc5267)
+- training (4af8ac9)
+- fix build script (bd82836)
+- infra test (5b79815)
+- infra test (3a0ac05)
+- infra test (e5c67b5)
+- tests (ae7b621)
+- tests (c09ae6a)
+- update tui (4784153)
+- training (0a5a330)
+- tui (df4dd4a)
+- pkg builds (4dc9993)
+- also source env for creds (9a17d8f)
+- fcl support (e8a5743)
+
+# Changelog
+
+All notable changes to @meshxdata/fops (Foundation Operator CLI) are documented here.
+
+## [0.1.53] - 2026-03-25
+
+- cluster discovery (009257d)
+- feat(storage): add loki container to provisioning (898c544)
+- feat(azure): add ping command to check backend health (8336825)
+- operator cli bump 0.1.52 (f052cb5)
+- fix(doctor): set KUBECONFIG for k3s kubectl commands (db9359b)
+- fix(azure): move --landscape to test run command, not separate subcommand (4b9b089)
+- feat(azure): add test integration command with landscape support (b2990a0)
+- fix(fleet): skip VMs without public IPs in fleet exec (39acbaa)
+- feat(azure): detect and fix External Secrets identity issues (f907d11)
+- operator cli bump 0.1.51 (db55bdc)
+- feat: add postgres-exporter and Azure tray menu improvements (2a337ac)
+- operator cli plugin fix (4dae908)
+- operator cli plugin fix (25620cc)
+- operator cli test fixes (1d1c18f)
+- feat(test): add setup-users command for QA test user creation (b929507)
+- feat(aks): show HA standby clusters with visual grouping (8fb640c)
+- refactor(provision): extract VM provisioning to dedicated module (af321a7)
+- refactor(provision): extract post-start health checks to dedicated module (6ed5f2d)
+- fix: ping timeout 15s, fix prometheus sed escaping (d11ac14)
+- refactor(vm): extract terraform HCL generation to dedicated module (896a64b)
+- refactor(keyvault): extract key operations to dedicated module (716bbe4)
+- refactor(azure): extract swarm functions to azure-fleet-swarm.js (4690e34)
+- refactor(azure): extract SSH/remote functions to azure-ops-ssh.js (e62b8f0)
+- refactor(azure): split azure-ops.js into smaller modules (4515425)
+- feat(aks): add --ha flag for full cross-region HA setup (ece68c5)
+- feat(fops): inject ENVIRONMENT_NAME on VM provisioning (6ef2a27)
+- fix(postgres): disable SSL mode to fix connection issues (c789ae9)
+- feat(trino): add caching configuration for docker-compose (3668224)
+- fix(fops-azure): run pytest directly instead of missing scripts (29f8410)
+- add -d detach option for local frontend dev, remove hive cpu limits (3306667)
+- release 0.1.49 (dcca32b)
+- release 0.1.48 (9b195e5)
+- stash on updates (2916c01)
+- stash on updates (b5c14df)
+- stash on updates (d0453d1)
+- frontend dev fixes (0ca7b00)
+- fix: update azure test commands (77c81da)
+- default locust to CLI mode, add --web for UI (ca35bff)
+- add locust command for load testing AKS clusters (1278722)
+- update spot node pool default autoscaling to 1-20 (617c182)
+- module for aks (3dd1a61)
+- add hive to PG_SERVICE_DBS for fops pg-setup (afccb16)
+- feat(azure): enhance aks doctor with ExternalSecrets and PGSSLMODE checks (8b14861)
+- add foundation-postgres ExternalName service to reconciler (ea88e11)
+- new flux templates (0e2e372)
+- feat(azure): add storage-engine secrets to Key Vault (a4f488e)
+- feat(azure-aks): add AUTH0_DOMAIN to template rendering variables (216c37e)
+- feat(azure): add storage account creation per cluster (aa1b138)
+- bump watcher (ab24473)
+- fix: concurrent compute calls (#66) (03e2edf)
+- bump backend version (5058ff5)
+- bump fops to 0.1.44 (8c0ef5d)
+- Mlflow and azure plugin fix (176881f)
+- fix lifecycle (a2cb9e7)
+- callback url for localhost (821fb94)
+- disable 4 scaffolding plugin by default. (bfb2b76)
+- jaccard improvements (b7494a0)
+- refactor azure plugin (68dfef4)
+- refactor azure plugin (b24a008)
+- fix trino catalog missing (4928a55)
+- v36 bump and changelog generation on openai (37a0440)
+- v36 bump and changelog generation on openai (a3b02d9)
+- bump (a990058)
+- status bar fix and new plugin for ttyd (27dde1e)
+- file demo and tray (1a3e704)
+- electron app (59ad0bb)
+- compose and fops file plugin (1cf0e81)
+- bump (346ffc1)
+- localhost replaced by 127.0.0.1 (82b9f30)
+- .29 (587b0e1)
+- improve up down and bootstrap script (b79ebaf)
+- checksum (22c8086)
+- checksum (96b434f)
+- checksum (15ed3c0)
+- checksum (8a6543a)
+- bump embed trino linksg (8440504)
+- bump data (765ffd9)
+- bump (cb8b232)
+- broken tests (c532229)
+- release 0.1.18, preflight checks (d902249)
+- fix compute display bug (d10f5d9)
+- cleanup packer files (6330f18)
+- plan mode (cb36a8a)
+- bump to 0.1.16 - agent ui (41ac1a2)
+- bump to 0.1.15 - agent ui (4ebe2e1)
+- bump to 0.1.14 (6c3a7fa)
+- bump to 0.1.13 (8db570f)
+- release 0.1.12 (c1c79e5)
+- bump (11aa3b0)
+- git keep and bump tui (be1678e)
+- skills, index, rrf, compacted context (100k > 10k) (7b2fffd)
+- cloudflare and token consumption, graphs indexing (0ad9eec)
+- bump storage default (22c83ba)
+- storage fix (68a22a0)
+- skills update (7f56500)
+- v9 bump (3864446)
+- bump (c95eedc)
+- rrf (dbf8c95)
+- feat: warning when running predictions (95e8c52)
+- feat: support for local predictions (45cf26b)
+- feat: wip support for predictions + mlflow (3457052)
+- add Reciprocal Rank Fusion (RRF) to knowledge and skill retrieval (61549bc)
+- validate CSV headers in compute_run readiness check (a8c7a43)
+- fix corrupted Iceberg metadata: probe tables + force cleanup on re-apply (50578af)
+- enforce: never use foundation_apply to fix broken products (2e049bf)
+- update SKILL.md with complete tool reference for knowledge retrieval (30b1924)
+- add storage read, input DP table probe, and compute_run improvements (34e6c4c)
+- skills update (1220385)
+- skills update (bb66958)
+- some tui improvement andd tools apply overwrite (e90c35c)
+- skills update (e9227a1)
+- skills update (669c4b3)
+- fix plugin pre-flight checks (f741743)
+- increase agent context (6479aaa)
+- skills and init sql fixes (5fce35e)
+- checksum (3518b56)
+- penging job limit (a139861)
+- checksum (575d28c)
+- bump (92049ba)
+- fix bug per tab status (0a33657)
+- fix bug per tab status (50457c6)
+- checksumming (0ad842e)
+- shot af mardkwon overlapping (51f63b9)
+- add spark dockerfile for multiarch builds (95abbd1)
+- fix plugin initialization (16b9782)
+- split index.js (50902a2)
+- cloudflare cidr (cc4e021)
+- cloduflare restrictions (2f6ba2d)
+- sequential start (86b496e)
+- sequential start (4930fe1)
+- sequential start (353f014)
+- qa tests (2dc6a1a)
+- bump sha for .85 (dc2edfe)
+- preserve env on sudo (7831227)
+- bump sha for .84 (6c052f9)
+- non interactive for azure vms (0aa8a2f)
+- keep .env if present (d072450)
+- bump (7a8e732)
+- ensure opa is on compose if not set (f4a5228)
+- checksum bump (a2ccc20)
+- netrc defensive checks (a0b0ccc)
+- netrc defensive checks (ae37403)
+- checksum (ec45d11)
+- update sync and fix up (7f9af72)
+- expand test for azure and add new per app tag support (388a168)
+- checksum on update (44005fc)
+- cleanup for later (15e5313)
+- cleanup for later (11c9597)
+- switch branch feature (822fecc)
+- add pull (d1c19ab)
+- Bump hono from 4.11.9 to 4.12.0 in /operator-cli (ad25144)
+- tests (f180a9a)
+- cleanup (39c49a3)
+- registry (7b7126a)
+- reconcile kafka (832d0db)
+- gh login bug (025886c)
+- cleanup (bb96cab)
+- strip envs from process (2421180)
+- force use of gh creds not tokens in envs var (fff7787)
+- resolve import between npm installs and npm link (79522e1)
+- fix gh scope and azure states (afd846c)
+- refactoring (da50352)
+- split fops repo (d447638)
+- aks (b791f8f)
+- refactor azure (67d3bad)
+- wildcard (391f023)
+- azure plugin (c074074)
+- zap (d7e6e7f)
+- fix knock (cf89c05)
+- azure (4adec98)
+- Bump tar from 7.5.7 to 7.5.9 in /operator-cli (e41e98e)
+- azure stack index.js split (de12272)
+- Bump ajv from 8.17.1 to 8.18.0 in /operator-cli (76da21f)
+- packer (9665fbc)
+- remove stack api (db0fd4d)
+- packer cleanup (fe1bf14)
+- force refresh token (3a3d7e2)
+- provision shell (2ad505f)
+- azure vm management (91dcb31)
+- azure specific (2b0cca8)
+
 ## [0.1.52] - 2026-03-24
 
 - fix(doctor): set KUBECONFIG for k3s kubectl commands (db9359b)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meshxdata/fops",
-  "version": "0.1.52",
+  "version": "0.1.53",
   "description": "CLI to install and manage data mesh platforms",
   "keywords": [
     "fops",
@@ -17,11 +17,7 @@
     "fops.mjs",
     "src/",
     "!src/**/*.test.js",
-    "!src/**/__test-fixtures__/",
-    "!src/**/test-helpers.js",
-    "!src/web/frontend/src/",
-    "!src/web/frontend/vite.config.js",
-    "!src/web/frontend/index.html",
+    "!src/**/node_modules",
     "!scripts/",
     "README.md",
     "CHANGELOG.md"

package/src/agent/agent.js

@@ -376,6 +376,11 @@ export async function runAgentSingleTurn(root, message, opts = {}) {
       const { runToolLoop } = await import("./tool-loop.js");
       const messages = [{ role: "user", content: message }];
       const toolNames = activeAgent ? activeAgent.tools : [];
+      // Auto-approve tool confirmations when there's no TTY (e.g. fops exec, piped)
+      const noTty = !process.stdin.isTTY;
+      const autoConfirmFn = noTty
+        ? async () => ({ action: "yes" })
+        : undefined;
       const toolResult = await runToolLoop({
         messages,
         systemPrompt: systemContent,
@@ -383,6 +388,7 @@ export async function runAgentSingleTurn(root, message, opts = {}) {
         maxIterations: activeAgent?.maxIterations || 10,
         registry,
         context: { root },
+        confirmFn: autoConfirmFn,
       });
       replyText = toolResult.finalResponse;
       if (toolResult.usage && (toolResult.usage.input_tokens || toolResult.usage.output_tokens)) {

package/src/commands/setup.js

@@ -58,6 +58,40 @@ export function registerSetupCommands(program, registry) {
     .command("config")
     .description("Manage feature flags and component versions");
 
+  config
+    .command("set <key> <value>")
+    .description("Set a top-level key in ~/.fops.json (e.g. projectRoot)")
+    .action(async (key, value) => {
+      const { readState, saveState } = await import("../state.js");
+      const state = readState();
+      state[key] = value;
+      saveState(state);
+      const configPath = path.join(os.homedir(), ".fops.json");
+      console.log(OK(`  ✓ ${key} = ${value}`), DIM(`(${configPath})`));
+    });
+
+  config
+    .command("get [key]")
+    .description("Show a key from ~/.fops.json, or all top-level keys")
+    .action(async (key) => {
+      const { readState } = await import("../state.js");
+      const state = readState();
+      if (key) {
+        const val = state[key];
+        if (val === undefined) {
+          console.log(DIM(`  ${key} is not set`));
+        } else {
+          console.log(`  ${key} = ${typeof val === "object" ? JSON.stringify(val) : val}`);
+        }
+      } else {
+        const skip = new Set(["azure", "_meta"]);
+        for (const [k, v] of Object.entries(state)) {
+          if (skip.has(k)) continue;
+          console.log(`  ${k} = ${typeof v === "object" ? JSON.stringify(v) : v}`);
+        }
+      }
+    });
+
   config
     .command("flags", { isDefault: true })
     .description("Toggle MX_FF_* feature flags and restart affected services")

package/src/fleet-registry.js

@@ -102,13 +102,31 @@ function parseSnapshot(raw, vmMeta) {
     if (eq > 0) flags[line.slice(0, eq)] = line.slice(eq + 1);
   }
 
-  // Services
+  // Services — health + version from container images
+  const SERVICE_IMAGE_MAP = {
+    be: "foundation-backend",
+    fe: "foundation-frontend",
+    pr: "foundation-processor",
+    wa: "foundation-watcher",
+    sc: "foundation-scheduler",
+    se: "foundation-storage-engine",
+  };
+
   const services = {
     backend: (raw.backendHealth || "").trim() === "OK" ? "healthy" : "down",
     frontend: (raw.frontendHealth || "").trim() === "OK" ? "healthy" : "down",
     storage: (raw.storageHealth || "").trim() === "OK" ? "healthy" : "down",
   };
 
+  // Extract version tags from container images
+  for (const [key, imageName] of Object.entries(SERVICE_IMAGE_MAP)) {
+    const c = containers.find((c) => c.image?.includes(imageName));
+    if (c?.image) {
+      const tag = c.image.split(":").pop() || "";
+      services[key] = { tag, health: c.healthy ? "healthy" : c.unhealthy ? "unhealthy" : "down" };
+    }
+  }
+
   // Foundation entities (meshes, data systems, data sources, data products)
   let foundation = null;
   try {
@@ -306,7 +324,25 @@ export class FleetRegistry {
         fopsVersion: s.stack.fopsVersion,
         branch: s.stack.gitBranch,
         commit: s.stack.gitSha,
-        services: s.services,
+        services: (() => {
+          const svc = { ...s.services };
+          // HTTP scrape puts versions in a nested object; merge them up
+          if (svc.versions) {
+            Object.assign(svc, svc.versions);
+            delete svc.versions;
+          }
+          // If still no version keys, extract from container images
+          if (!svc.be && s.containers?.list) {
+            const IMAGE_MAP = { be: "foundation-backend", fe: "foundation-frontend", pr: "foundation-processor", wa: "foundation-watcher", sc: "foundation-scheduler", se: "foundation-storage-engine" };
+            for (const [key, img] of Object.entries(IMAGE_MAP)) {
+              const c = s.containers.list.find((c) => c.image?.includes(img));
+              if (c?.image) {
+                svc[key] = { tag: c.image.split(":").pop() || "", health: c.healthy ? "healthy" : c.unhealthy ? "unhealthy" : "down" };
+              }
+            }
+          }
+          return svc;
+        })(),
         lastScrape: entry.lastScrape,
       });
     }

package/src/plugins/__test-fixtures__/fake-plugin.js

@@ -0,0 +1,2 @@
+// Test fixture: minimal plugin with register function
+export function register(api) {}

package/src/plugins/__test-fixtures__/no-register-plugin.js

@@ -0,0 +1,2 @@
+// Test fixture: plugin without register function
+export const name = "no-register";

package/src/plugins/__test-fixtures__/with-register/index.js

@@ -0,0 +1,2 @@
+// Test fixture: discovered plugin with register function
+export function register(api) {}

package/src/plugins/__test-fixtures__/without-register/index.js

@@ -0,0 +1,2 @@
+// Test fixture: discovered plugin without register function
+export const name = "no-register";

package/src/plugins/api.js

@@ -98,6 +98,10 @@ export function createPluginApi(pluginId, registry, opts = {}) {
       registry.services.push({ pluginId, name, instance });
     },
 
+    registerWebPanel(panel) {
+      registry.addWebPanel({ pluginId, ...panel });
+    },
+
     registerIndexSource(source) {
       if (!registry.indexSources) registry.indexSources = [];
       registry.indexSources.push({ pluginId, name: source.name, fn: source.fn });

package/src/plugins/builtins/docker-compose.js

@@ -465,6 +465,65 @@ You manage Docker Compose stacks: inspect containers, read logs, restart service
 - If asked about security or CVEs, use compose_scan.`,
     });
 
+    // ── Debug Agent ───────────────────────────────────────────────────
+    api.registerAgent({
+      name: "debug",
+      description: "Debug stack issues — diagnose alerts, check containers, logs, metrics, and suggest fixes",
+      contextMode: "minimal",
+      tools: [
+        "compose_ps",
+        "compose_logs",
+        "compose_restart",
+        "compose_exec",
+        "compose_inspect",
+        "compose_stats",
+        "compose_images",
+        "embeddings_search",
+      ],
+      maxIterations: 20,
+      systemPrompt: `You are FOPS Debug Agent — an expert platform debugger for Foundation stack issues.
+
+## Role
+You investigate alerts, diagnose service failures, and suggest fixes. You have direct access to Docker containers, logs, and system metrics. You are called by the Glue bot when monitoring alerts fire.
+
+## Tools Available
+- **compose_ps**: List all containers and their status (start here)
+- **compose_logs**: Read container logs (check for errors, crashes, OOM)
+- **compose_inspect**: Get container details (health checks, env vars, mounts, restarts)
+- **compose_stats**: CPU/memory/network usage per container
+- **compose_exec**: Run commands inside containers (e.g. check disk, network, processes)
+- **compose_images**: List images and versions
+- **compose_restart**: Restart specific services
+- **embeddings_search**: Search docs, configs, and past knowledge for context
+
+## Investigation Approach
+1. **Triage**: Run compose_ps to see overall stack health. Identify unhealthy/restarting containers.
+2. **Diagnose**: For each affected container:
+   - compose_logs to find errors, exceptions, OOM kills, crash traces
+   - compose_inspect for health check failures, restart count, resource limits
+   - compose_stats for CPU/memory spikes
+3. **Context**: Use embeddings_search to find relevant docs or known issues.
+4. **Root cause**: Correlate findings — is it a code bug, resource exhaustion, dependency failure, config issue?
+5. **Fix**: Suggest specific actions (restart, config change, scale, rollback).
+
+## Output Format
+Structure your response as:
+- **Status**: One-line summary (e.g. "Processor container restarting due to OOM")
+- **Findings**: What you discovered from each tool
+- **Root Cause**: Most likely cause
+- **Actions**: Specific steps to fix
+- **Prevention**: How to avoid this in the future
+
+## Rules
+- Always check compose_ps first.
+- Check logs BEFORE suggesting restarts.
+- Look for patterns: repeated restarts, OOM kills, connection refused, timeout errors.
+- If a dependency is down (postgres, kafka), flag it — fixing the dependency fixes the dependent.
+- Be concise — this output goes into a Glue chat thread.
+- Never suggest 'docker compose down' — prefer targeted restarts.
+- After restarting, verify with compose_ps.`,
+    });
+
     // ── Doctor check: Trivy ───────────────────────────────────────────
     api.registerDoctorCheck({
       name: "Trivy",

package/src/plugins/bundled/fops-plugin-azure/index.js

@@ -23,6 +23,10 @@ import { registerRegistryCommands } from "./lib/commands/registry-cmds.js";
 export { resolveFoundationCreds, resolveAuth0Config, authenticateVm, vmFetch };
 
 export async function register(api) {
+  // ── Service: expose structured API for cross-plugin use ──
+  const { AzureService } = await import("./lib/azure-service.js");
+  api.registerService("azure", new AzureService());
+
   // ── Commands ──────────────────────────────────────────────────────────
 
   api.registerCommand((program, registry) => {