@soyrageagency/docker-mcp 1.1.0

package/dist/tools/compose.js

@@ -0,0 +1,145 @@
+/**
+ * Docker Compose tools.
+ *
+ * Read-only:
+ *   • compose_ps     — show the services and health of a stack.
+ *   • compose_config — validate & render the effective configuration.
+ *
+ * State-changing (skipped in read-only mode):
+ *   • deploy_stack    — `compose up -d` (optionally --build).
+ *   • compose_down    — tear a stack down.
+ *   • compose_restart — restart all/selected services.
+ *   • compose_pull    — pull the latest images.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import { z } from "zod";
+import { fail, guard, ok } from "../utils/result.js";
+/** Shared input fields identifying a Compose project. */
+const targetShape = {
+    file: z
+        .string()
+        .min(1)
+        .describe("Path to a compose file, or a directory containing one " +
+        "(compose.yaml / docker-compose.yml). Relative paths resolve against " +
+        "the server's configured Compose working directory."),
+    project: z
+        .string()
+        .optional()
+        .describe("Explicit Compose project name (defaults to the folder name)."),
+};
+/** Turn a ComposeResult into a readable tool result. */
+function present(action, result) {
+    const body = [result.stdout.trim(), result.stderr.trim()]
+        .filter(Boolean)
+        .join("\n");
+    if (result.code !== 0) {
+        return fail(`${action} failed (exit ${result.code}).\n\n${body || "(no output)"}`);
+    }
+    return ok(`${action} succeeded.\n\n\`\`\`\n${body || "(no output)"}\n\`\`\``);
+}
+export function registerComposeTools(ctx) {
+    const { server, compose, config, logger } = ctx;
+    // ---------- Read-only tools (always available) --------------------------
+    server.registerTool("compose_ps", {
+        title: "Compose: list services",
+        description: "List the services defined by a Compose stack and their current " +
+            "state/health. Point `file` at the compose file or its directory.",
+        inputSchema: targetShape,
+    }, async (args) => guard(async () => {
+        const result = await compose.ps(args);
+        if (result.code !== 0)
+            return present("compose ps", result);
+        // `--format json` yields one JSON object per line; render compactly.
+        const services = result.stdout
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .filter(Boolean)
+            .map((line) => {
+            try {
+                return JSON.parse(line);
+            }
+            catch {
+                return null;
+            }
+        })
+            .filter((entry) => entry !== null);
+        if (services.length === 0) {
+            return ok("No services are currently running for this stack.");
+        }
+        const lines = services.map((svc) => {
+            const name = svc.Service ?? svc.Name ?? "?";
+            const state = svc.State ?? "?";
+            const status = svc.Status ?? "";
+            return `• ${name}: ${state} ${status}`.trimEnd();
+        });
+        return ok(`${services.length} service(s):\n\n${lines.join("\n")}`);
+    }));
+    server.registerTool("compose_config", {
+        title: "Compose: validate config",
+        description: "Validate a Compose file and render its fully-resolved configuration " +
+            "(interpolated variables, merged overrides). A non-zero result means " +
+            "the file has errors.",
+        inputSchema: targetShape,
+    }, async (args) => guard(async () => present("compose config", await compose.config(args))));
+    // ---------- State-changing tools (respect read-only mode) ---------------
+    if (config.readOnly) {
+        logger.info("Read-only mode: Compose deploy/down/restart tools are disabled.");
+        return;
+    }
+    server.registerTool("deploy_stack", {
+        title: "Compose: deploy stack",
+        description: "Deploy or update a Compose stack in the background (`compose up -d`). " +
+            "Optionally rebuild images and/or scope to specific services. This is " +
+            "the one-shot 'ship it' action.",
+        inputSchema: {
+            ...targetShape,
+            build: z
+                .boolean()
+                .optional()
+                .describe("Rebuild images before starting (default: false)."),
+            services: z
+                .array(z.string())
+                .optional()
+                .describe("Limit the action to these services (default: all)."),
+        },
+    }, async ({ file, project, build, services }) => guard(async () => present("deploy_stack", await compose.up({ file, project }, { build, services }))));
+    server.registerTool("compose_down", {
+        title: "Compose: tear down stack",
+        description: "Stop and remove a Compose stack (`compose down`). Set " +
+            "`removeVolumes` to also delete named volumes — destructive.",
+        inputSchema: {
+            ...targetShape,
+            removeVolumes: z
+                .boolean()
+                .optional()
+                .describe("Also remove named volumes (default: false)."),
+        },
+    }, async ({ file, project, removeVolumes }) => guard(async () => present("compose_down", await compose.down({ file, project }, { volumes: removeVolumes }))));
+    server.registerTool("compose_restart", {
+        title: "Compose: restart services",
+        description: "Restart all services in a stack, or only the ones you name.",
+        inputSchema: {
+            ...targetShape,
+            services: z
+                .array(z.string())
+                .optional()
+                .describe("Services to restart (default: all)."),
+        },
+    }, async ({ file, project, services }) => guard(async () => present("compose_restart", await compose.restart({ file, project }, services ?? []))));
+    server.registerTool("compose_pull", {
+        title: "Compose: pull images",
+        description: "Pull the latest images referenced by a stack without starting it. " +
+            "Pair with `deploy_stack` to perform a rolling update.",
+        inputSchema: {
+            ...targetShape,
+            services: z
+                .array(z.string())
+                .optional()
+                .describe("Services to pull (default: all)."),
+        },
+    }, async ({ file, project, services }) => guard(async () => present("compose_pull", await compose.pull({ file, project }, services ?? []))));
+}
+//# sourceMappingURL=compose.js.map

package/dist/tools/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../src/tools/compose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AAErD,yDAAyD;AACzD,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,wDAAwD;QACtD,sEAAsE;QACtE,oDAAoD,CACvD;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;CAC5E,CAAC;AAEF,wDAAwD;AACxD,SAAS,OAAO,CAAC,MAAc,EAAE,MAAqB;IACpD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SACtD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CACT,GAAG,MAAM,iBAAiB,MAAM,CAAC,IAAI,SAAS,IAAI,IAAI,aAAa,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,MAAM,0BAA0B,IAAI,IAAI,aAAa,UAAU,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAgB;IACnD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAEhD,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,iEAAiE;YACjE,kEAAkE;QACpE,WAAW,EAAE,WAAW;KACzB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CACb,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,IAAqB,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAE5D,qEAAqE;QACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM;aAC3B,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAK,EAAoC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAEvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,mDAAmD,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;YAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC;YAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YAChC,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,mBAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,sEAAsE;YACtE,sEAAsE;YACtE,sBAAsB;QACxB,WAAW,EAAE,WAAW;KACzB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CACb,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,IAAqB,CAAC,CAAC,CAAC,CAC5F,CAAC;IAEF,2EAA2E;IAC3E,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,wEAAwE;YACxE,uEAAuE;YACvE,gCAAgC;QAClC,WAAW,EAAE;YACX,GAAG,WAAW;YACd,KAAK,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,oDAAoD,CAAC;SAClE;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC3C,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,OAAO,CACL,cAAc,EACd,MAAM,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACzD,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,wDAAwD;YACxD,6DAA6D;QAC/D,WAAW,EAAE;YACX,GAAG,WAAW;YACd,aAAa,EAAE,CAAC;iBACb,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;SAC3D;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CACzC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,OAAO,CACL,cAAc,EACd,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAClE,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,6DAA6D;QAC/D,WAAW,EAAE;YACX,GAAG,WAAW;YACd,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,qCAAqC,CAAC;SACnD;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CACpC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,OAAO,CACL,iBAAiB,EACjB,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CACzD,CACF,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,oEAAoE;YACpE,uDAAuD;QACzD,WAAW,EAAE;YACX,GAAG,WAAW;YACd,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,kCAAkC,CAAC;SAChD;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CACpC,KAAK,CAAC,KAAK,IAAI,EAAE,CACf,OAAO,CACL,cAAc,EACd,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC,CACtD,CACF,CACJ,CAAC;AACJ,CAAC"}

package/dist/tools/containers.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Read-only container insight tools.
+ *
+ *   • list_containers   — the "what's running?" overview
+ *   • inspect_container — full low-level configuration for one container
+ *   • container_stats   — a one-shot CPU / memory / network snapshot
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import type { ToolContext } from "./context.js";
+export declare function registerContainerTools({ server, docker }: ToolContext): void;

package/dist/tools/containers.js

@@ -0,0 +1,119 @@
+/**
+ * Read-only container insight tools.
+ *
+ *   • list_containers   — the "what's running?" overview
+ *   • inspect_container — full low-level configuration for one container
+ *   • container_stats   — a one-shot CPU / memory / network snapshot
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import { z } from "zod";
+import { normalizeName } from "../docker/client.js";
+import { asJsonBlock, formatBytes, formatRelativeTime, renderTable, truncate, } from "../utils/format.js";
+import { guard, ok } from "../utils/result.js";
+/** Compute a percentage from Docker's raw CPU accounting deltas. */
+function cpuPercent(stats) {
+    const cpuDelta = stats.cpu_stats.cpu_usage.total_usage -
+        stats.precpu_stats.cpu_usage.total_usage;
+    const systemDelta = (stats.cpu_stats.system_cpu_usage ?? 0) -
+        (stats.precpu_stats.system_cpu_usage ?? 0);
+    const cores = stats.cpu_stats.online_cpus ??
+        stats.cpu_stats.cpu_usage.percpu_usage?.length ??
+        1;
+    if (systemDelta <= 0 || cpuDelta <= 0)
+        return 0;
+    return (cpuDelta / systemDelta) * cores * 100;
+}
+export function registerContainerTools({ server, docker }) {
+    server.registerTool("list_containers", {
+        title: "List containers",
+        description: "List Docker containers with their status, image, ports and uptime. " +
+            "By default only running containers are shown; set `all` to include " +
+            "stopped ones. This is the best starting point to understand what is " +
+            "deployed on the host.",
+        inputSchema: {
+            all: z
+                .boolean()
+                .optional()
+                .describe("Include stopped/exited containers (default: false)."),
+        },
+    }, async ({ all }) => guard(async () => {
+        const containers = await docker.listContainers(all ?? false);
+        const rows = containers.map((c) => {
+            const name = normalizeName(c.Names[0] ?? c.Id);
+            const ports = (c.Ports ?? [])
+                .filter((p) => p.PublicPort)
+                .map((p) => `${p.PublicPort}→${p.PrivatePort}/${p.Type}`)
+                .join(", ");
+            return [
+                truncate(name, 24),
+                truncate(c.Image, 28),
+                c.State,
+                truncate(c.Status, 22),
+                ports || "—",
+            ];
+        });
+        const table = renderTable(["NAME", "IMAGE", "STATE", "STATUS", "PORTS"], rows);
+        const summary = `${containers.length} container(s)${all ? "" : " running"}.`;
+        return ok(`${summary}\n\n${table}`);
+    }));
+    server.registerTool("inspect_container", {
+        title: "Inspect container",
+        description: "Return the full low-level configuration of a single container " +
+            "(environment, mounts, network settings, restart policy, health, …). " +
+            "Accepts a container name, short id or full id.",
+        inputSchema: {
+            container: z
+                .string()
+                .min(1)
+                .describe("Container name, short id or full id."),
+        },
+    }, async ({ container }) => guard(async () => {
+        const handle = await docker.resolveContainer(container);
+        const details = await handle.inspect();
+        // Surface the most useful fields as a readable header, then the raw
+        // payload for anything the model wants to dig into.
+        const header = [
+            `Name:    ${normalizeName(details.Name)}`,
+            `Image:   ${details.Config.Image}`,
+            `State:   ${details.State.Status} (health: ${details.State.Health?.Status ?? "n/a"})`,
+            `Created: ${details.Created}`,
+            `Restart: ${details.HostConfig.RestartPolicy?.Name || "no"}`,
+        ].join("\n");
+        return ok(`${header}\n\n${asJsonBlock(details)}`);
+    }));
+    server.registerTool("container_stats", {
+        title: "Container resource stats",
+        description: "Take a one-shot snapshot of a container's live CPU %, memory usage " +
+            "and network I/O. Useful to answer 'why is my server slow?'.",
+        inputSchema: {
+            container: z
+                .string()
+                .min(1)
+                .describe("Container name, short id or full id."),
+        },
+    }, async ({ container }) => guard(async () => {
+        const handle = await docker.resolveContainer(container);
+        // `stream: false` returns a single sample instead of an endless stream.
+        const stats = (await handle.stats({
+            stream: false,
+        }));
+        const memUsage = stats.memory_stats.usage ?? 0;
+        const memLimit = stats.memory_stats.limit ?? 0;
+        const memPercent = memLimit > 0 ? (memUsage / memLimit) * 100 : 0;
+        const networks = stats.networks ?? {};
+        const rx = Object.values(networks).reduce((sum, n) => sum + n.rx_bytes, 0);
+        const tx = Object.values(networks).reduce((sum, n) => sum + n.tx_bytes, 0);
+        const lines = [
+            `Container: ${normalizeName(stats.name ?? container)}`,
+            `CPU:       ${cpuPercent(stats).toFixed(2)} %`,
+            `Memory:    ${formatBytes(memUsage)} / ${formatBytes(memLimit)} (${memPercent.toFixed(1)} %)`,
+            `Net RX/TX: ${formatBytes(rx)} / ${formatBytes(tx)}`,
+            `Sampled:   ${formatRelativeTime(Math.floor(new Date(stats.read).getTime() / 1000))}`,
+        ];
+        return ok(lines.join("\n"));
+    }));
+}
+//# sourceMappingURL=containers.js.map

package/dist/tools/containers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containers.js","sourceRoot":"","sources":["../../src/tools/containers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AAE/C,oEAAoE;AACpE,SAAS,UAAU,CAAC,KAA4B;IAC9C,MAAM,QAAQ,GACZ,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW;QACrC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC;IAC3C,MAAM,WAAW,GACf,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACvC,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GACT,KAAK,CAAC,SAAS,CAAC,WAAW;QAC3B,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM;QAC9C,CAAC,CAAC;IAEJ,IAAI,WAAW,IAAI,CAAC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAChD,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAe;IACpE,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,qEAAqE;YACrE,qEAAqE;YACrE,sEAAsE;YACtE,uBAAuB;QACzB,WAAW,EAAE;YACX,GAAG,EAAE,CAAC;iBACH,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,qDAAqD,CAAC;SACnE;KACF,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAChB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC;QAE7D,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;iBAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;iBACxD,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;gBACL,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACrB,CAAC,CAAC,KAAK;gBACP,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,KAAK,IAAI,GAAG;aACb,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAC7C,IAAI,CACL,CAAC;QAEF,MAAM,OAAO,GAAG,GAAG,UAAU,CAAC,MAAM,gBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UACb,GAAG,CAAC;QACJ,OAAO,EAAE,CAAC,GAAG,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,gEAAgE;YAChE,sEAAsE;YACtE,gDAAgD;QAClD,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,sCAAsC,CAAC;SACpD;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CACtB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QAEvC,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,MAAM,GAAG;YACb,YAAY,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACzC,YAAY,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE;YAClC,YAAY,OAAO,CAAC,KAAK,CAAC,MAAM,aAC9B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,KAClC,GAAG;YACH,YAAY,OAAO,CAAC,OAAO,EAAE;YAC7B,YAAY,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,IAAI,IAAI,EAAE;SAC7D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,CAAC,GAAG,MAAM,OAAO,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,qEAAqE;YACrE,6DAA6D;QAC/D,WAAW,EAAE;YACX,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,sCAAsC,CAAC;SACpD;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CACtB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACxD,wEAAwE;QACxE,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC;YAChC,MAAM,EAAE,KAAK;SACd,CAAC,CAGD,CAAC;QAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAG;YACZ,cAAc,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE;YACtD,cAAc,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAC9C,cAAc,WAAW,CAAC,QAAQ,CAAC,MAAM,WAAW,CAClD,QAAQ,CACT,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;YAChC,cAAc,WAAW,CAAC,EAAE,CAAC,MAAM,WAAW,CAAC,EAAE,CAAC,EAAE;YACpD,cAAc,kBAAkB,CAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAClD,EAAE;SACJ,CAAC;QAEF,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}

package/dist/tools/context.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Shared tool context.
+ *
+ * Every tool-registration function receives one of these. It bundles the
+ * collaborators tools need (Docker client, Compose driver, config, logger) so
+ * individual modules stay free of global state and are trivial to test.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { AppConfig } from "../config.js";
+import type { Logger } from "../logger.js";
+import type { DockerClient } from "../docker/client.js";
+import type { ComposeDriver } from "../docker/compose.js";
+/**
+ * Lightweight plugin metadata surfaced to tools (e.g. `list_plugins`) without
+ * pulling in the plugin module, keeping the dependency graph acyclic.
+ */
+export interface PluginInfo {
+    readonly name: string;
+    readonly title: string;
+    readonly category: string;
+    readonly mutating: boolean;
+    readonly enabled: boolean;
+}
+/** Dependencies handed to each tool group at registration time. */
+export interface ToolContext {
+    readonly server: McpServer;
+    readonly docker: DockerClient;
+    readonly compose: ComposeDriver;
+    readonly config: AppConfig;
+    readonly logger: Logger;
+    /** The full plugin catalogue with per-plugin enabled state. */
+    readonly plugins: readonly PluginInfo[];
+}

package/dist/tools/context.js

@@ -0,0 +1,13 @@
+/**
+ * Shared tool context.
+ *
+ * Every tool-registration function receives one of these. It bundles the
+ * collaborators tools need (Docker client, Compose driver, config, logger) so
+ * individual modules stay free of global state and are trivial to test.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+export {};
+//# sourceMappingURL=context.js.map

package/dist/tools/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/tools/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/tools/images.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Image inventory tools.
+ *
+ *   • list_images — show locally cached images with size and age.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import type { ToolContext } from "./context.js";
+export declare function registerImageTools({ server, docker }: ToolContext): void;

package/dist/tools/images.js

@@ -0,0 +1,38 @@
+/**
+ * Image inventory tools.
+ *
+ *   • list_images — show locally cached images with size and age.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import { formatBytes, formatRelativeTime, renderTable, truncate, } from "../utils/format.js";
+import { guard, ok } from "../utils/result.js";
+export function registerImageTools({ server, docker }) {
+    server.registerTool("list_images", {
+        title: "List images",
+        description: "List Docker images cached on the host, including repository:tag, " +
+            "size and how long ago they were created. Handy for spotting stale " +
+            "or oversized images before a cleanup.",
+        inputSchema: {},
+    }, async () => guard(async () => {
+        const images = await docker.listImages();
+        // Flatten one row per repo tag; untagged images show as <none>.
+        const rows = images.flatMap((image) => {
+            const tags = image.RepoTags && image.RepoTags.length > 0
+                ? image.RepoTags
+                : ["<none>:<none>"];
+            return tags.map((tag) => [
+                truncate(tag, 40),
+                (image.Id ?? "").replace("sha256:", "").slice(0, 12),
+                formatBytes(image.Size),
+                formatRelativeTime(image.Created),
+            ]);
+        });
+        const table = renderTable(["REPOSITORY:TAG", "IMAGE ID", "SIZE", "CREATED"], rows);
+        const total = images.reduce((sum, image) => sum + image.Size, 0);
+        return ok(`${images.length} image(s), ${formatBytes(total)} total on disk.\n\n${table}`);
+    }));
+}
+//# sourceMappingURL=images.js.map

package/dist/tools/images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"images.js","sourceRoot":"","sources":["../../src/tools/images.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,QAAQ,GACT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAe;IAChE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,mEAAmE;YACnE,oEAAoE;YACpE,uCAAuC;QACzC,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE,CACT,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAEzC,gEAAgE;QAChE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACpC,MAAM,IAAI,GACR,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACzC,CAAC,CAAC,KAAK,CAAC,QAAQ;gBAChB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpD,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;gBACvB,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;aAClC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,WAAW,CACvB,CAAC,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EACjD,IAAI,CACL,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAEjE,OAAO,EAAE,CACP,GAAG,MAAM,CAAC,MAAM,cAAc,WAAW,CAAC,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAC9E,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Tool registry.
+ *
+ * Registers every tool group against the MCP server in one place. The order is
+ * purely cosmetic (it influences how clients that preserve order list tools).
+ * Read-only and opt-in gating is handled inside each group.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import type { ToolContext } from "./context.js";
+/** Wire up all tools. Called once from the entry point. */
+export declare function registerAllTools(context: ToolContext): void;
+export type { ToolContext };

package/dist/tools/index.js

@@ -0,0 +1,34 @@
+/**
+ * Tool registry.
+ *
+ * Registers every tool group against the MCP server in one place. The order is
+ * purely cosmetic (it influences how clients that preserve order list tools).
+ * Read-only and opt-in gating is handled inside each group.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import { registerAboutTool } from "./about.js";
+import { registerContainerTools } from "./containers.js";
+import { registerLogTools } from "./logs.js";
+import { registerLifecycleTools } from "./lifecycle.js";
+import { registerImageTools } from "./images.js";
+import { registerSystemTools } from "./system.js";
+import { registerComposeTools } from "./compose.js";
+/** Wire up all tools. Called once from the entry point. */
+export function registerAllTools(context) {
+    // Identity first so it heads the tool list and the assistant can greet.
+    registerAboutTool(context);
+    registerContainerTools(context);
+    registerLogTools(context);
+    registerImageTools(context);
+    registerSystemTools(context);
+    registerComposeTools(context);
+    // Registered last so mutating actions appear after insight in tool lists.
+    registerLifecycleTools(context);
+    context.logger.info(context.config.readOnly
+        ? "Tools registered in READ-ONLY mode."
+        : "Tools registered in full read/write mode.");
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IACnD,wEAAwE;IACxE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,0EAA0E;IAC1E,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,OAAO,CAAC,MAAM,CAAC,QAAQ;QACrB,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,2CAA2C,CAChD,CAAC;AACJ,CAAC"}

package/dist/tools/lifecycle.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Container lifecycle tools (state-changing).
+ *
+ *   • start_container    • stop_container
+ *   • restart_container  • remove_container
+ *   • exec_in_container  (opt-in via DOCKER_MCP_ALLOW_EXEC)
+ *
+ * The entire group is skipped when the server runs in read-only mode, so a
+ * demo deployment can safely expose insight without risk of mutation.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import type { ToolContext } from "./context.js";
+export declare function registerLifecycleTools(ctx: ToolContext): void;

package/dist/tools/lifecycle.js

@@ -0,0 +1,165 @@
+/**
+ * Container lifecycle tools (state-changing).
+ *
+ *   • start_container    • stop_container
+ *   • restart_container  • remove_container
+ *   • exec_in_container  (opt-in via DOCKER_MCP_ALLOW_EXEC)
+ *
+ * The entire group is skipped when the server runs in read-only mode, so a
+ * demo deployment can safely expose insight without risk of mutation.
+ *
+ * Part of Docker MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * Licensed under the MIT License.
+ */
+import { z } from "zod";
+import { normalizeName } from "../docker/client.js";
+import { guard, ok } from "../utils/result.js";
+export function registerLifecycleTools(ctx) {
+    const { server, docker, config, logger } = ctx;
+    // Respect read-only mode: register nothing state-changing.
+    if (config.readOnly) {
+        logger.info("Read-only mode: lifecycle tools are disabled.");
+        return;
+    }
+    server.registerTool("start_container", {
+        title: "Start container",
+        description: "Start a stopped container. No-op if it is already running. " +
+            "Returns the resulting state.",
+        inputSchema: {
+            container: z.string().min(1).describe("Container name or id."),
+        },
+    }, async ({ container }) => guard(async () => {
+        const handle = await docker.resolveContainer(container);
+        const info = await handle.inspect();
+        if (info.State.Running) {
+            return ok(`Container "${normalizeName(container)}" is already running.`);
+        }
+        await handle.start();
+        return ok(`Started "${normalizeName(container)}".`);
+    }));
+    server.registerTool("stop_container", {
+        title: "Stop container",
+        description: "Gracefully stop a running container (SIGTERM, then SIGKILL after a " +
+            "grace period). No-op if it is already stopped.",
+        inputSchema: {
+            container: z.string().min(1).describe("Container name or id."),
+            timeout: z
+                .number()
+                .int()
+                .positive()
+                .max(300)
+                .optional()
+                .describe("Seconds to wait before force-killing (default: 10)."),
+        },
+    }, async ({ container, timeout }) => guard(async () => {
+        const handle = await docker.resolveContainer(container);
+        const info = await handle.inspect();
+        if (!info.State.Running) {
+            return ok(`Container "${normalizeName(container)}" is already stopped.`);
+        }
+        await handle.stop({ t: timeout ?? 10 });
+        return ok(`Stopped "${normalizeName(container)}".`);
+    }));
+    server.registerTool("restart_container", {
+        title: "Restart container",
+        description: "Restart a container. This is the go-to fix for 'turn it off and on " +
+            "again' style requests.",
+        inputSchema: {
+            container: z.string().min(1).describe("Container name or id."),
+            timeout: z
+                .number()
+                .int()
+                .positive()
+                .max(300)
+                .optional()
+                .describe("Seconds to wait before force-killing (default: 10)."),
+        },
+    }, async ({ container, timeout }) => guard(async () => {
+        const handle = await docker.resolveContainer(container);
+        await handle.restart({ t: timeout ?? 10 });
+        return ok(`Restarted "${normalizeName(container)}".`);
+    }));
+    server.registerTool("remove_container", {
+        title: "Remove container",
+        description: "Remove a container. Requires `force` to remove a running one. This " +
+            "is destructive and cannot be undone — prefer stopping first.",
+        inputSchema: {
+            container: z.string().min(1).describe("Container name or id."),
+            force: z
+                .boolean()
+                .optional()
+                .describe("Remove even if running (default: false)."),
+            removeVolumes: z
+                .boolean()
+                .optional()
+                .describe("Also remove anonymous volumes (default: false)."),
+        },
+    }, async ({ container, force, removeVolumes }) => guard(async () => {
+        const handle = await docker.resolveContainer(container);
+        await handle.remove({ force: force ?? false, v: removeVolumes ?? false });
+        return ok(`Removed "${normalizeName(container)}".`);
+    }));
+    // ---- Optional, powerful: run a command inside a container ---------------
+    if (config.allowExec) {
+        logger.info("exec_in_container tool is ENABLED (DOCKER_MCP_ALLOW_EXEC).");
+        server.registerTool("exec_in_container", {
+            title: "Execute command in container",
+            description: "Run a one-off command inside a running container and return its " +
+                "combined output. The command is passed as an argument array (no " +
+                "shell), e.g. [\"ls\", \"-la\", \"/app\"]. Disabled unless the " +
+                "server operator opts in.",
+            inputSchema: {
+                container: z.string().min(1).describe("Container name or id."),
+                command: z
+                    .array(z.string())
+                    .min(1)
+                    .describe('Argument array, e.g. ["cat", "/etc/hostname"].'),
+                workdir: z
+                    .string()
+                    .optional()
+                    .describe("Working directory inside the container."),
+            },
+        }, async ({ container, command, workdir }) => guard(async () => {
+            const handle = await docker.resolveContainer(container);
+            const exec = await handle.exec({
+                Cmd: command,
+                AttachStdout: true,
+                AttachStderr: true,
+                WorkingDir: workdir,
+            });
+            const stream = await exec.start({});
+            const output = await collectStream(stream);
+            const inspect = await exec.inspect();
+            const header = `exit code ${inspect.ExitCode ?? "?"}`;
+            return ok(`\`${command.join(" ")}\` → ${header}\n\n\`\`\`\n${output.trimEnd()}\n\`\`\``);
+        }));
+    }
+}
+/** Read a dockerode exec stream to completion, demultiplexing frame headers. */
+function collectStream(stream) {
+    return new Promise((resolveStream, rejectStream) => {
+        const chunks = [];
+        stream.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
+        stream.on("end", () => {
+            const buffer = Buffer.concat(chunks);
+            const out = [];
+            let offset = 0;
+            // Best-effort demultiplex; fall back to raw text if unframed.
+            while (offset + 8 <= buffer.length) {
+                const type = buffer[offset];
+                if (type > 2 || buffer[offset + 1] !== 0) {
+                    resolveStream(buffer.toString("utf8"));
+                    return;
+                }
+                const size = buffer.readUInt32BE(offset + 4);
+                const start = offset + 8;
+                out.push(buffer.subarray(start, start + size).toString("utf8"));
+                offset = start + size;
+            }
+            resolveStream(out.length ? out.join("") : buffer.toString("utf8"));
+        });
+        stream.on("error", rejectStream);
+    });
+}
+//# sourceMappingURL=lifecycle.js.map