VPS Guardian

Discover all scheduled cron jobs on the Linux system. Audits /etc/crontab, /etc/cron.d/, /etc/cron.* periodic scripts, and user crontabs. Returns: JSON string containing scheduled jobs with user, schedule expression, human-readable timing explanation, and command.

Inspect file and directory structures within authorized administrative paths. Permitted directories: /etc/nginx/, /etc/mysql/, /etc/postgresql/, /etc/docker/, /etc/caddy/, /var/www/ Args: dir_path: Path to the directory to inspect. max_depth: Exploration depth (1 to 3, default: 1). Returns: JSON string with item list (names, types, sizes, modification dates).

List Docker containers with their status, image, port bindings, volumes, and health. Args: all: Set to True to list all containers (running and stopped), False for running only. Returns: JSON string with list of containers, port forwards, and mount mappings.

List active maintenance windows, or include closed and expired history.

Recover private workspace IDs and candidate hashes after reconnecting, without source output.

List shared persistent drafts/history and Agent Jobs; metadata only, no source or tokens. Paginate drafts/history with next_before.

List command-free agent runbooks built from existing guarded MCP tools.

List active agent runbooks, with optional completed history.

List stored VPS state snapshots without exposing their collected content.

Audit active and pending systemd timers via 'systemctl list-timers'. Returns: JSON string with timer unit names, next execution time, countdown, and target services.

Inspect active Nginx virtual hosts, listening ports, SSL, and reverse proxy targets. Returns: JSON string with parsed virtual hosts from /etc/nginx/sites-enabled/ and conf.d/.

Reserve a workload briefly so concurrent agents do not make conflicting changes.

Open an expiring workload watch. Use get_event_watch later to retrieve new events.

Prepare reviewed runtime/dependency metadata for a capsule image; this does not build, download or verify the image.

Validate and preview an Nginx config or Caddyfile deployment. The candidate is staged outside the live path, syntax-checked, and shown as a bounded unified diff. No live configuration is modified. Nginx configs under /etc/nginx and Caddyfiles under /etc/caddy are supported. Args: file_path: Target config path under /etc/nginx or /etc/caddy. content: Complete proposed UTF-8 configuration (at most 200,000 bytes). service_name: Optional matching service name (nginx or caddy). Returns: JSON plan with validation output, diff, expiry, and a confirmation token in controlled mode.

Plan an environment repair without installing packages, changing service units or restarting applications.

Create an evidence-backed repair plan without changing the VPS.

Show secret-redacted diffs and request one confirmation for a ChangeSet.

Show secret-redacted source diff and obtain one confirmation token for a patch.

Apply the exact capsule-tested candidate using existing preview, confirmation and backup rules.

Propose one systemd-service restart after job checks; this does not execute it.

Read a bounded candidate fragment and hashes; resume via next_byte_offset.

Read up to 200 candidate lines/24 KB with this file's hash only; never execute code or authorize stale apply.

Read one non-binary project file without following symlinks; redact common secrets.

Read later lines or bytes of a large project file within a per-call limit; returns a file hash and continuation.

Safely fetch and optionally filter recent log lines for a service or Docker container. Args: service_name: Target unit (e.g. 'nginx', 'systemd:cron', 'docker:my_container'). lines_count: Number of recent lines to retrieve (default: 50, maximum: 1000). grep_filter: Optional case-insensitive keyword to filter lines (e.g. 'ERROR', '403', 'denied'). Returns: JSON string containing the extracted log lines and matching statistics.

Save one bounded, secret-redacted finding or decision to an active agent session.

Return an owned task to the queue with a secret-redacted reason.

Report working/blocked/needs_review with optional submitted workspace and unverified Job ID; never approve or finish.

Run only fixed safe checks: Git whitespace validation or bounded Python syntax parsing.

Bounded literal code search with ignored dependency folders and redacted output.

Set a safe web-readable mode (0644 or 0640) for a static file under /var/www. The content is untouched; arbitrary chmod modes and paths outside /var/www are rejected. Controlled mode requires a confirmation token.

Stage one Nginx configuration change; content is not applied yet.

Replace a private candidate using its current SHA-256; production remains unchanged.

Propose deleting a selected candidate with a current hash; operator apply retains a private baseline backup.

Edit inclusive candidate lines; end_line=start_line-1 inserts, including at EOF. No production write.

Propose creating a 0644 source file under an existing protected parent; independent operator apply required.

Stage one source-file replacement in an active project patch without applying it.

Stage only changed lines in a bounded project patch; preview and confirmation are still required.

Create an expiring, secret-safe shared task context for agents working on this VPS.

Open a bounded agent runbook; it never runs commands or bypasses confirmation.

Freeze a proposal for independent operator review; this does not grant permission to apply.

Group repeated service log lines into a short report; return unchanged for a known fingerprint.

Benchmark outbound network connectivity and latency using direct Python sockets. Measures DNS resolution latency, TCP handshake time, and TLS handshake latency without shell ping. Args: target_host: Destination hostname or IP address (e.g. 'api.github.com' or '8.8.8.8'). port: Destination port (1-65535, default 443). timeout_seconds: Network socket timeout (0.5 to 30.0 seconds, default 5.0). Returns: JSON string with stage latency breakdown, resolved IP addresses, and TLS session details.

Test Nginx configuration for syntax errors ('nginx -t') without reloading. Returns: JSON string indicating syntax validity, exit code, and syntax error messages.

Test staged code in one temporary, networkless, resource-limited Docker capsule; controlled mode requires confirmation.

Record the outcome of one runbook step after its separate guarded tool call.

Read service health after a job restart; never restart or roll back automatically.

Verify a Guardian tar.gz archive without extracting it. Only regular archives within the isolated Guardian backup directory are accepted. Very large member counts return a bounded partial result.

Safely read the content of an authorized configuration or web file. Permitted directories: /etc/nginx/, /etc/mysql/, /etc/postgresql/, /etc/docker/, /etc/caddy/, /var/www/ Strictly protected against path traversal attacks. Args: file_path: Canonical path or relative path to the configuration file. max_bytes: Maximum bytes to return (default: 50,000, capped at 200,000). Returns: JSON string with file content, size, and modification timestamp.