feat: open a run's database in Postico (CLI + dashboard button)

[david-aurel]

Adds two ways to open a running environment's database in Postico (macOS) with the connection pre-filled — no copying the rotating clone port or password by hand.

1. CLI — veld postico

veld postico                  # auto-pick the run + database node
veld postico --name dev       # target a specific run
veld postico --node database  # disambiguate when several nodes expose DB outputs
veld postico --print          # print the postgresql:// URL instead of opening (e.g. for psql)
veld postico --json           # connection details as JSON (does not open)

Reads DB_HOST/DB_PORT/DB_USER/DB_PASS/DB_NAME from a node's live outputs, auto-detects the database node (--node to pick), builds a percent-encoded postgresql:// URL, and opens Postico (open -a Postico, falling back to the default postgresql:// handler, then an actionable error; non-macOS prints the URL). Run resolution reuses resolve_run_name. --print/--json keep stdout to the payload only.

Mirrors urls.rs (state read) and ui.rs (host open). Handlers return i32; output via crate::output.

2. Dashboard button (veld ui)

The management dashboard now shows a Postico button on the database row of each running environment.

• New daemon endpoint POST /api/environments/{run}/postico delegates to veld postico --name <run> via the existing run_veld_command path (same as stop/restart). Credentials never reach the browser — the daemon hands off to the CLI.
• NodeInfo gains a server-computed database: bool flag so the UI knows which row is a database; node outputs/sensitive_keys remain unserialized to the browser.
• Gated by the same X-Veld-Request CSRF check + validate_run_name; project root resolved server-side.

Shared logic

Database detection lives in veld_core::state::NodeState::exposes_database() (+ DATABASE_OUTPUT_KEYS), used by both the CLI command and the dashboard so they agree on what counts as a database node.

Docs (per AGENTS.md checklist)

README.md CLI table, skills/veld/SKILL.md (Postico section incl. the dashboard button), website/llms-full.txt + website/agents.html CLI tables. (docs/configuration.md / schema n/a — no config field.)

Test plan

• cargo fmt --check, cargo clippy --all-targets -- -D warnings (veld-core/veld/veld-daemon), and cargo test all green. New unit tests: build_connection_url/find_db_node (CLI) and exposes_database (veld-core).
• Frontend tsc --noEmit + vitest (396 tests) green on Node 24.
• Manual E2E (CLI): --print/--json clean; unknown --node errors; default invocation opened Postico against a live dblab clone.
• CI green on upstream runners.
• Dashboard button verified live (requires installing the new daemon + CLI).

Opened from a fork (david-aurel/veld) — no push access to upstream.

🤖 Generated with Claude Code