mlgym-deploy 3.0.8 → 3.2.2

package/index.js

@@ -17,7 +17,7 @@ import crypto from 'crypto';
 const execAsync = promisify(exec);
 
 // Current version of this MCP server - INCREMENT FOR WORKFLOW FIXES
-const CURRENT_VERSION = '3.0.8';  // Added extensive MCP >>> debug logging throughout deployment workflow
+const CURRENT_VERSION = '3.2.2';  // Added automatic validation and fixing for docker-compose and Dockerfile
 const PACKAGE_NAME = 'mlgym-deploy';
 
 // Debug logging configuration - ENABLED BY DEFAULT
@@ -963,6 +963,254 @@ async function smartDeploy(args) {
   }
 }
 
+// Deployment Strategy Detection (matches CLI logic)
+async function detectDeploymentStrategy(projectPath) {
+  const dockerfilePath = path.join(projectPath, 'Dockerfile');
+  const composePathYML = path.join(projectPath, 'docker-compose.yml');
+  const composePathYAML = path.join(projectPath, 'docker-compose.yaml');
+
+  const hasDockerfile = await fileExists(dockerfilePath);
+  const hasComposeYML = await fileExists(composePathYML);
+  const hasComposeYAML = await fileExists(composePathYAML);
+  const hasCompose = hasComposeYML || hasComposeYAML;
+  const composePath = hasComposeYML ? composePathYML : composePathYAML;
+
+  log.info(`MCP >>> [detectDeploymentStrategy] Dockerfile: ${hasDockerfile}, docker-compose: ${hasCompose}`);
+
+  // Case 1: Only Dockerfile
+  if (hasDockerfile && !hasCompose) {
+    log.info('MCP >>> [detectDeploymentStrategy] Strategy: dockerfile (Dockerfile only)');
+    return { type: 'dockerfile', reason: 'Dockerfile only' };
+  }
+
+  // Case 2: Only docker-compose
+  if (!hasDockerfile && hasCompose) {
+    log.info('MCP >>> [detectDeploymentStrategy] Strategy: docker-compose (compose only)');
+    return { type: 'docker-compose', reason: 'docker-compose.yml only' };
+  }
+
+  // Case 3: Both exist - analyze docker-compose to decide
+  if (hasDockerfile && hasCompose) {
+    log.info('MCP >>> [detectDeploymentStrategy] Both files found, analyzing compose...');
+
+    try {
+      const { webServiceCount, usesLocalDockerfile, totalServiceCount } = await analyzeComposeFile(composePath);
+
+      log.info(`MCP >>> [analyzeCompose] Total services: ${totalServiceCount}, Web services: ${webServiceCount}, Uses local Dockerfile: ${usesLocalDockerfile}`);
+
+      // SIMPLE: Only 1 web service, no other services, uses local Dockerfile
+      // → docker-compose is just convenience wrapper
+      if (totalServiceCount === 1 && webServiceCount === 1 && usesLocalDockerfile) {
+        log.info('MCP >>> [detectDeploymentStrategy] Strategy: dockerfile (single web service)');
+        return { type: 'dockerfile', reason: 'docker-compose.yml only has web service (convenience wrapper for Dockerfile)' };
+      }
+
+      // COMPLEX: Multiple services (web + database, etc.)
+      // → MUST use docker-compose for orchestration
+      log.info('MCP >>> [detectDeploymentStrategy] Strategy: docker-compose (multi-service)');
+      return { type: 'docker-compose', reason: 'Application requires multiple services (web + database/cache/etc)' };
+    } catch (err) {
+      log.error('MCP >>> [detectDeploymentStrategy] Analysis failed, defaulting to docker-compose:', err.message);
+      return { type: 'docker-compose', reason: 'Multiple deployment files found' };
+    }
+  }
+
+  // Case 4: No deployment files
+  log.info('MCP >>> [detectDeploymentStrategy] Strategy: none (no deployment files)');
+  return { type: 'none', reason: 'No Dockerfile or docker-compose.yml found' };
+}
+
+// Validate and potentially fix docker-compose.yml for Coolify compliance
+function validateAndFixDockerCompose(content) {
+  const lines = content.split('\n');
+  const issues = [];
+  const fixes = [];
+  let fixed = [...lines];
+  let inServicesSection = false;
+  let inPortsSection = false;
+  let currentService = '';
+  let currentIndent = '';
+
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    const trimmed = line.trim();
+
+    // Detect services section
+    if (trimmed === 'services:') {
+      inServicesSection = true;
+      continue;
+    }
+
+    if (!inServicesSection) continue;
+
+    // Check for service definition
+    if (trimmed && !line.startsWith(' ') && !line.startsWith('\t')) {
+      inServicesSection = false;
+      break;
+    }
+
+    // New service
+    if ((line.startsWith('  ') || line.startsWith('\t')) &&
+        trimmed.endsWith(':') &&
+        !trimmed.startsWith('-') &&
+        !['ports:', 'expose:', 'environment:', 'volumes:', 'networks:'].includes(trimmed)) {
+      currentService = trimmed.slice(0, -1);
+      currentIndent = line.match(/^(\s*)/)[1];
+    }
+
+    // Check for ports section
+    if (trimmed === 'ports:') {
+      inPortsSection = true;
+      continue;
+    }
+
+    // Process port entries
+    if (inPortsSection && trimmed.startsWith('- ')) {
+      const portEntry = trimmed.slice(2).replace(/['"]/g, '');
+
+      if (portEntry.includes(':')) {
+        const [external, internal] = portEntry.split(':').map(p => p.trim());
+        const webPorts = ['80', '8080', '3000', '4000', '5000', '8000', '9000'];
+
+        if (webPorts.includes(internal)) {
+          issues.push({
+            line: i + 1,
+            service: currentService,
+            issue: `Port mapping "${external}:${internal}" not allowed`,
+            fix: 'Use port "80" only'
+          });
+
+          // Fix the line
+          fixed[i] = line.replace(trimmed, '- "80"');
+          fixes.push(`Fixed ${currentService}: ${external}:${internal} → 80`);
+        }
+      }
+    } else if (inPortsSection && !trimmed.startsWith('-')) {
+      inPortsSection = false;
+    }
+  }
+
+  return {
+    isValid: issues.length === 0,
+    issues,
+    fixes,
+    fixedContent: fixed.join('\n'),
+    hasChanges: fixes.length > 0
+  };
+}
+
+// Validate Dockerfile for Coolify compliance
+function validateDockerfile(content) {
+  const lines = content.split('\n');
+  const issues = [];
+  let hasExpose80 = false;
+
+  for (let i = 0; i < lines.length; i++) {
+    const trimmed = lines[i].trim().toUpperCase();
+
+    if (trimmed.startsWith('EXPOSE')) {
+      // Check if it exposes port 80
+      if (trimmed.includes('80') && !trimmed.includes('8080') && !trimmed.includes('8443')) {
+        hasExpose80 = true;
+      }
+    }
+  }
+
+  if (!hasExpose80) {
+    issues.push({
+      issue: 'Dockerfile does not EXPOSE port 80',
+      fix: 'Add "EXPOSE 80" to your Dockerfile'
+    });
+  }
+
+  return {
+    isValid: issues.length === 0,
+    issues
+  };
+}
+
+// Analyze docker-compose.yml to determine deployment strategy
+async function analyzeComposeFile(composePath) {
+  const content = await fs.readFile(composePath, 'utf-8');
+  const lines = content.split('\n');
+
+  let webServiceCount = 0;
+  let totalServiceCount = 0;
+  let usesLocalDockerfile = false;
+  let inServicesSection = false;
+  let currentService = '';
+  let currentServiceIsWeb = false;
+
+  for (const line of lines) {
+    const trimmed = line.trim();
+
+    // Detect services section
+    if (trimmed.startsWith('services:')) {
+      inServicesSection = true;
+      continue;
+    }
+
+    if (!inServicesSection) continue;
+
+    // End of services section
+    if (trimmed && !line.startsWith(' ') && !line.startsWith('\t')) {
+      inServicesSection = false;
+      break;
+    }
+
+    // New service definition (at 2-space or 1-tab indentation level)
+    if ((line.startsWith('  ') || line.startsWith('\t')) &&
+        trimmed.includes(':') &&
+        !trimmed.startsWith('-') &&
+        !trimmed.includes('image:') &&
+        !trimmed.includes('build:') &&
+        !trimmed.includes('ports:') &&
+        !trimmed.includes('expose:')) {
+
+      if (currentService) {
+        totalServiceCount++;
+        if (currentServiceIsWeb) {
+          webServiceCount++;
+        }
+      }
+
+      currentService = trimmed.split(':')[0].trim();
+      currentServiceIsWeb = false;
+      continue;
+    }
+
+    // Check if current service exposes web ports
+    if (trimmed.startsWith('ports:') || trimmed.startsWith('expose:')) {
+      currentServiceIsWeb = true;
+    }
+
+    // Check if service uses local Dockerfile
+    if (trimmed === 'build: .' || trimmed === 'build: ./') {
+      usesLocalDockerfile = true;
+    }
+  }
+
+  // Count last service
+  if (currentService) {
+    totalServiceCount++;
+    if (currentServiceIsWeb) {
+      webServiceCount++;
+    }
+  }
+
+  return { webServiceCount, usesLocalDockerfile, totalServiceCount };
+}
+
+// Helper to check if file exists
+async function fileExists(filePath) {
+  try {
+    await fs.access(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 // Initialize Project (requires authentication)
 async function initProject(args) {
   let { name, description, enable_deployment = true, hostname, local_path = '.' } = args;
@@ -1022,6 +1270,17 @@ async function initProject(args) {
   };
 
   if (enable_deployment) {
+    // Detect deployment strategy from local directory (like CLI does)
+    const absolutePath = path.resolve(local_path);
+    log.info(`MCP >>> [initProject] Detecting deployment strategy in: ${absolutePath}`);
+
+    const strategy = await detectDeploymentStrategy(absolutePath);
+    log.info(`MCP >>> [initProject] Detected strategy: ${strategy.type} - ${strategy.reason}`);
+    console.error(`🔍 Detected deployment strategy: ${strategy.type}`);
+    if (strategy.reason) {
+      console.error(`   Reason: ${strategy.reason}`);
+    }
+
     // Generate a secure webhook secret for deployments
     const webhookSecret = Array.from(
       crypto.getRandomValues(new Uint8Array(32)),
@@ -1029,10 +1288,40 @@ async function initProject(args) {
     ).join('');
 
     // Use FLAT structure exactly like CLI does - no nested deployment_info
+    // CRITICAL: Send deployment_type so backend doesn't try to detect from empty repo
     projectData.enable_deployment = true;
+    projectData.deployment_type = strategy.type;  // ← NEW: Send detected type!
     projectData.webhook_secret = webhookSecret;
     projectData.hostname = hostname;
     projectData.local_path = local_path;
+
+    // Read docker-compose content if using docker-compose strategy (v3.2.1+)
+    if (strategy.type === 'docker-compose') {
+      const composeFiles = ['docker-compose.yml', 'docker-compose.yaml'];
+      let composeContent = null;
+
+      for (const filename of composeFiles) {
+        const composePath = path.join(local_path, filename);
+        if (fs.existsSync(composePath)) {
+          try {
+            composeContent = fs.readFileSync(composePath, 'utf8');
+            log.info(`MCP >>> [initProject] Read ${filename}: ${composeContent.length} bytes`);
+            break;
+          } catch (err) {
+            log.error(`MCP >>> [initProject] Error reading ${filename}:`, err.message);
+          }
+        }
+      }
+
+      if (composeContent) {
+        projectData.docker_compose_content = composeContent;
+        log.info(`MCP >>> [initProject] Sending docker-compose content: ${composeContent.length} bytes`);
+      } else {
+        log.warn('MCP >>> [initProject] docker-compose strategy but no compose file found!');
+      }
+    }
+
+    log.info(`MCP >>> [initProject] Sending deployment_type: ${strategy.type} to backend`);
   }
 
   const result = await apiRequest('POST', '/api/v1/projects', projectData, true);
@@ -1718,6 +2007,83 @@ async function deployProject(args) {
     log.success('MCP >>> STEP 4: Project preparation complete');
     log.debug('MCP >>> Preparation actions:', prepResult);
 
+    // Step 4.5: Validate and fix deployment files for Coolify compliance
+    log.info('MCP >>> STEP 4.5: Validating deployment configuration...');
+    const strategy = detectDeploymentStrategy(local_path);
+
+    if (strategy.type === 'docker-compose') {
+      const composePath = path.join(local_path, 'docker-compose.yml');
+      const composePathYAML = path.join(local_path, 'docker-compose.yaml');
+      const actualPath = fs.existsSync(composePath) ? composePath : composePathYAML;
+
+      if (fs.existsSync(actualPath)) {
+        const content = fs.readFileSync(actualPath, 'utf8');
+        const validation = validateAndFixDockerCompose(content);
+
+        if (!validation.isValid) {
+          log.warning('MCP >>> Docker-compose validation issues found:');
+          validation.issues.forEach(issue => {
+            log.warning(`  - Line ${issue.line}: ${issue.issue} (${issue.fix})`);
+          });
+
+          // Auto-fix the issues
+          log.info('MCP >>> Auto-fixing docker-compose.yml port mappings...');
+          fs.writeFileSync(actualPath, validation.fixedContent);
+
+          // Create backup
+          const backupPath = actualPath + '.backup';
+          fs.writeFileSync(backupPath, content);
+          log.info(`MCP >>> Created backup at ${backupPath}`);
+
+          log.success('MCP >>> Fixed docker-compose.yml:');
+          validation.fixes.forEach(fix => log.success(`  - ${fix}`));
+        } else {
+          log.success('MCP >>> Docker-compose.yml is Coolify compliant');
+        }
+      }
+    } else if (strategy.type === 'dockerfile') {
+      const dockerfilePath = path.join(local_path, 'Dockerfile');
+
+      if (fs.existsSync(dockerfilePath)) {
+        const content = fs.readFileSync(dockerfilePath, 'utf8');
+        const validation = validateDockerfile(content);
+
+        if (!validation.isValid) {
+          log.warning('MCP >>> Dockerfile validation issues:');
+          validation.issues.forEach(issue => {
+            log.warning(`  - ${issue.issue}`);
+            log.info(`    Fix: ${issue.fix}`);
+          });
+
+          // For Dockerfile, we'll add EXPOSE 80 if missing
+          if (!content.includes('EXPOSE 80')) {
+            log.info('MCP >>> Auto-fixing Dockerfile: adding EXPOSE 80...');
+            const lines = content.split('\n');
+
+            // Find the last FROM or WORKDIR line to add EXPOSE after it
+            let insertIndex = lines.length - 1;
+            for (let i = lines.length - 1; i >= 0; i--) {
+              if (lines[i].trim().startsWith('WORKDIR') || lines[i].trim().startsWith('FROM')) {
+                insertIndex = i + 1;
+                break;
+              }
+            }
+
+            lines.splice(insertIndex, 0, '', 'EXPOSE 80');
+            const fixedContent = lines.join('\n');
+
+            // Create backup
+            fs.writeFileSync(dockerfilePath + '.backup', content);
+            fs.writeFileSync(dockerfilePath, fixedContent);
+
+            log.success('MCP >>> Fixed Dockerfile: added EXPOSE 80');
+          }
+        } else {
+          log.success('MCP >>> Dockerfile is Coolify compliant');
+        }
+      }
+    }
+
     // Step 5: Create GitLab project and deploy
     log.info('MCP >>> STEP 5: Creating GitLab project and deploying...');
     log.debug('MCP >>> Project params:', { name: project_name, hostname: hostname || project_name, local_path });
@@ -1830,6 +2196,121 @@ async function getStatus(args) {
   }
 }
 
+// Get deployment logs for a project
+async function getDeploymentLogs(args) {
+  const local_path = args.local_path || '.';
+  const depth = args.depth || 1;
+  const project_name = args.project_name;
+
+  log.info(`MCP >>> [getDeploymentLogs] Getting logs for project: ${project_name || 'auto-detect'}, depth: ${depth}`);
+
+  try {
+    // Check authentication
+    const auth = await loadAuth();
+    if (!auth.token) {
+      throw new Error('Authentication required. Please deploy or login first.');
+    }
+
+    // Determine project name
+    let projectName = project_name;
+    if (!projectName) {
+      // Try to get from git remote
+      const projectStatus = await checkExistingProject(local_path);
+      if (!projectStatus.exists) {
+        throw new Error('Project not found. Please specify project_name or run from a project directory with git remote.');
+      }
+      projectName = projectStatus.name;
+    }
+
+    log.info(`MCP >>> [getDeploymentLogs] Detected project name: ${projectName}`);
+
+    // Get project details from backend to get Coolify app UUID
+    const projectsResult = await apiRequest('GET', '/api/v1/projects', null, true);
+    if (!projectsResult.success) {
+      throw new Error(`Failed to get projects: ${projectsResult.error}`);
+    }
+
+    const project = projectsResult.data.projects?.find(p => p.name === projectName);
+    if (!project) {
+      throw new Error(`Project "${projectName}" not found in your account`);
+    }
+
+    if (!project.coolify_app_uuid) {
+      throw new Error(`Project "${projectName}" does not have deployment enabled`);
+    }
+
+    const appUUID = project.coolify_app_uuid;
+    log.info(`MCP >>> [getDeploymentLogs] Found Coolify app UUID: ${appUUID}`);
+
+    // Call User Agent API to get deployment logs
+    const userAgentURL = 'http://coolify.eu.ezb.net:9000';
+    const endpoint = `${userAgentURL}/applications/${appUUID}/deployment-logs?depth=${depth}`;
+
+    log.info(`MCP >>> [getDeploymentLogs] Calling User Agent: ${endpoint}`);
+
+    const response = await axios.get(endpoint, {
+      headers: {
+        'Authorization': 'Bearer 1|Jkztb5qPptwRKgtocfbT2TLjp8WGJG1SkPE4DzLt4c5d600f',
+        'Content-Type': 'application/json'
+      }
+    });
+
+    const logsData = response.data;
+    log.info(`MCP >>> [getDeploymentLogs] Retrieved ${logsData.count} deployment(s)`);
+
+    // Format the response
+    if (logsData.count === 0) {
+      return {
+        content: [{
+          type: 'text',
+          text: JSON.stringify({
+            status: 'ok',
+            project_name: projectName,
+            app_uuid: appUUID,
+            count: 0,
+            message: 'No deployment logs found for this application. To create a deployment, push code to GitLab.'
+          }, null, 2)
+        }]
+      };
+    }
+
+    // Format deployments with readable timestamps
+    const formattedDeployments = logsData.deployments.map(dep => ({
+      id: dep.id,
+      status: dep.status,
+      created_at: new Date(dep.created_at).toISOString().replace('T', ' ').substring(0, 19),
+      updated_at: new Date(dep.updated_at).toISOString().replace('T', ' ').substring(0, 19),
+      output: dep.output || 'No logs available'
+    }));
+
+    return {
+      content: [{
+        type: 'text',
+        text: JSON.stringify({
+          status: 'ok',
+          project_name: projectName,
+          app_uuid: appUUID,
+          count: logsData.count,
+          deployments: formattedDeployments
+        }, null, 2)
+      }]
+    };
+
+  } catch (error) {
+    log.error(`MCP >>> [getDeploymentLogs] Error: ${error.message}`);
+    return {
+      content: [{
+        type: 'text',
+        text: JSON.stringify({
+          status: 'error',
+          error: error.message,
+          hint: 'Make sure the project exists and has deployment enabled'
+        }, null, 2)
+      }]
+    };
+  }
+}
+
 // Create the MCP server
 const server = new Server(
   {
@@ -1921,6 +2402,33 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
           }
         }
       },
+      {
+        name: 'mlgym_deploy_logs',
+        description: 'View deployment history and logs for a project. Shows the last N deployments with their status, timestamps, and build logs.',
+        inputSchema: {
+          type: 'object',
+          properties: {
+            project_name: {
+              type: 'string',
+              description: 'Project name (optional if in project directory with git remote)',
+              pattern: '^[a-z0-9][a-z0-9-]*[a-z0-9]$',
+              minLength: 3
+            },
+            depth: {
+              type: 'number',
+              description: 'Number of deployments to retrieve (1-10, default: 1)',
+              minimum: 1,
+              maximum: 10,
+              default: 1
+            },
+            local_path: {
+              type: 'string',
+              description: 'Local project directory path (optional, defaults to current directory)',
+              default: '.'
+            }
+          }
+        }
+      },
       // ========== LEGACY TOOLS (Re-enabled for specific use cases) ==========
       {
         name: 'mlgym_user_create',
@@ -1998,6 +2506,11 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         result = await getStatus(args);
         break;
 
+      case 'mlgym_deploy_logs':
+        log.info(`Retrieving deployment logs...`);
+        result = await getDeploymentLogs(args);
+        break;
+
       case 'mlgym_user_create':
         log.info(`Creating user account...`);
         result = await createUser(args);
@@ -2009,7 +2522,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         break;
 
       default:
-        throw new Error(`Unknown tool: ${name}. Available tools: mlgym_deploy, mlgym_status, mlgym_user_create, mlgym_auth_login`);
+        throw new Error(`Unknown tool: ${name}. Available tools: mlgym_deploy, mlgym_status, mlgym_deploy_logs, mlgym_user_create, mlgym_auth_login`);
     }
 
     const duration = Date.now() - startTime;

package/mcp-docker-compose-patch.js

@@ -0,0 +1,189 @@
+// MCP Patch: Add docker-compose.yml content reading (matching CLI v2.0.14+)
+//
+// This patch ensures MCP reads docker-compose.yml content and sends it to the backend
+// just like the CLI does, so the backend can store it in Coolify's database.
+
+// Add this function after detectDeploymentStrategy function:
+function readDockerComposeContent(projectPath) {
+  const fs = require('fs');
+  const path = require('path');
+
+  // Check both .yml and .yaml extensions
+  const composeFiles = ['docker-compose.yml', 'docker-compose.yaml'];
+
+  for (const filename of composeFiles) {
+    const composePath = path.join(projectPath, filename);
+    if (fs.existsSync(composePath)) {
+      try {
+        const content = fs.readFileSync(composePath, 'utf8');
+        console.log(`[MCP] Read ${filename}: ${content.length} bytes`);
+        return content;
+      } catch (err) {
+        console.error(`[MCP] Error reading ${filename}:`, err.message);
+      }
+    }
+  }
+
+  return null;
+}
+
+// MODIFICATION NEEDED in initProject function (around line 1180-1190):
+//
+// FIND THIS BLOCK:
+//     projectData.deployment_type = strategy.type;  // ← NEW: Send detected type!
+//     log.info(`MCP >>> [initProject] Sending deployment_type: ${strategy.type} to backend`);
+//
+// ADD AFTER IT:
+//     // Read docker-compose content if using docker-compose strategy
+//     if (strategy.type === 'docker-compose') {
+//       const composeContent = readDockerComposeContent(projectPath);
+//       if (composeContent) {
+//         projectData.docker_compose_content = composeContent;
+//         log.info(`MCP >>> [initProject] Sending docker-compose content: ${composeContent.length} bytes`);
+//       } else {
+//         log.warn('MCP >>> [initProject] docker-compose strategy but no compose file found!');
+//       }
+//     }
+
+// The complete section should look like:
+/*
+    // CRITICAL: Send deployment_type so backend doesn't try to detect from empty repo
+    log.info(`MCP >>> [initProject] Using strategy: ${JSON.stringify(strategy)}`);
+    projectData.deployment_type = strategy.type;  // ← NEW: Send detected type!
+
+    // Read docker-compose content if using docker-compose strategy (v3.2.1+)
+    if (strategy.type === 'docker-compose') {
+      const composeContent = readDockerComposeContent(projectPath);
+      if (composeContent) {
+        projectData.docker_compose_content = composeContent;
+        log.info(`MCP >>> [initProject] Sending docker-compose content: ${composeContent.length} bytes`);
+      } else {
+        log.warn('MCP >>> [initProject] docker-compose strategy but no compose file found!');
+      }
+    }
+
+    log.info(`MCP >>> [initProject] Sending deployment_type: ${strategy.type} to backend`);
+*/
+
+// Also add validation function:
+function validateDockerCompose(content) {
+  const issues = [];
+
+  try {
+    // Parse YAML to check structure
+    const lines = content.split('\n');
+
+    // Check for 'ports' vs 'expose'
+    const hasPortsMapping = content.includes('ports:');
+    const hasExposeOnly = content.includes('expose:') && !hasPortsMapping;
+
+    if (!hasPortsMapping) {
+      issues.push({
+        level: 'ERROR',
+        message: 'No service exposes ports for web traffic',
+        suggestion: 'At least one service must have "ports:" configuration for Coolify/Traefik routing'
+      });
+    }
+
+    if (hasExposeOnly) {
+      issues.push({
+        level: 'WARNING',
+        message: 'Service uses "expose" instead of "ports"',
+        suggestion: 'Change "expose" to "ports" for proper Traefik routing'
+      });
+    }
+
+    // Check for hardcoded passwords
+    const passwordPatterns = [
+      /password:\s*["'](?!.*\$\{).*["']/gi,
+      /PASSWORD=(?!.*\$\{)[^$\s]+/gi,
+      /secret:\s*["'](?!.*\$\{).*["']/gi
+    ];
+
+    for (const pattern of passwordPatterns) {
+      if (pattern.test(content)) {
+        issues.push({
+          level: 'WARNING',
+          message: 'Hardcoded password detected',
+          suggestion: 'Use environment variables: PASSWORD=${PASSWORD}'
+        });
+        break;
+      }
+    }
+
+    // Check for absolute volume paths
+    if (/volumes:\s*\n\s*-\s*\//m.test(content)) {
+      issues.push({
+        level: 'WARNING',
+        message: 'Absolute host path in volume mount',
+        suggestion: 'Use named volumes instead of absolute paths'
+      });
+    }
+
+  } catch (err) {
+    issues.push({
+      level: 'ERROR',
+      message: `Invalid docker-compose format: ${err.message}`,
+      suggestion: 'Fix YAML syntax errors'
+    });
+  }
+
+  return issues;
+}
+
+function validateDockerfile(projectPath) {
+  const fs = require('fs');
+  const path = require('path');
+  const dockerfilePath = path.join(projectPath, 'Dockerfile');
+
+  if (!fs.existsSync(dockerfilePath)) {
+    return [];
+  }
+
+  const issues = [];
+
+  try {
+    const content = fs.readFileSync(dockerfilePath, 'utf8');
+
+    // Check for EXPOSE directive
+    if (!content.includes('EXPOSE ')) {
+      issues.push({
+        level: 'WARNING',
+        message: 'Dockerfile has no EXPOSE directive',
+        suggestion: 'Add EXPOSE 80 or appropriate port'
+      });
+    }
+
+    // Check for USER directive (security)
+    if (!content.includes('USER ') || content.includes('USER root')) {
+      issues.push({
+        level: 'WARNING',
+        message: 'Dockerfile runs as root user',
+        suggestion: 'Add non-root USER for better security'
+      });
+    }
+
+    // Check for WORKDIR
+    if (!content.includes('WORKDIR ')) {
+      issues.push({
+        level: 'INFO',
+        message: 'No WORKDIR set in Dockerfile',
+        suggestion: 'Consider setting WORKDIR for organization'
+      });
+    }
+
+  } catch (err) {
+    // Ignore read errors
+  }
+
+  return issues;
+}
+
+// Export for testing
+if (typeof module !== 'undefined') {
+  module.exports = {
+    readDockerComposeContent,
+    validateDockerCompose,
+    validateDockerfile
+  };
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mlgym-deploy",
-  "version": "3.0.8",
-  "description": "MCP server for MLGym - Added extensive debug logging with MCP >>> prefix",
+  "version": "3.2.2",
+  "description": "MCP server for MLGym - Auto-validates and fixes docker-compose/Dockerfile for Coolify",
   "main": "index.js",
   "type": "module",
   "bin": {