ML-163: implementation

docs/production-infrastructure.md

@@ -229,6 +229,26 @@ and the offending batch is dropped. Tracks:
 - Oban Web (`/dev/oban`)
 - ErrorTracker (`/dev/errors`)
 
+### Pi coding agent tools
+
+Pi extensions provide additional tools for production observability without manual SSH
+or browser access. Each extension reads its own environment variables from the pi
+runtime environment (not server-side config).
+
+| Extension | Tools | Env vars |
+|-----------|-------|----------|
+| `prod-logs` | `fetch_production_logs` | `PI_COOLIFY_HOST`, `PI_COOLIFY_APP_UUID`, `PI_COOLIFY_TOKEN` |
+| `prod-errors` | `fetch_production_errors`, `fetch_production_error` | `PI_API_TOKEN`, `PI_SERVICE_FQDN_WEB` |
+
+**`prod-logs` env vars:**
+- `PI_COOLIFY_HOST` — Coolify server base URL (e.g., `https://coolify.example.com`)
+- `PI_COOLIFY_APP_UUID` — Application UUID in Coolify
+- `PI_COOLIFY_TOKEN` — Coolify API Bearer token
+
+**`prod-errors` env vars:**
+- `PI_API_TOKEN` — Must match the `API_TOKEN` env var on the production server (used for Bearer auth on `/api/v1/*`)
+- `PI_SERVICE_FQDN_WEB` — Production domain with protocol (e.g., `https://musiclibrary.claudio-ortolina.org`, no trailing slash)
+
 ---
 
 ## Email