@aristanetworks/eos-mcp-server 0.6.1-beta → 0.8.0-beta

package/dist/diagnostics/concurrency.js

@@ -0,0 +1,157 @@
+import { randomUUID } from "node:crypto";
+import { AppError } from "../core/errors.js";
+/** One instance per server; uncertain remote execution never expires into free capacity. */
+export class DiagnosticConcurrency {
+    limit;
+    journal;
+    reservations = new Set();
+    waiting = [];
+    storageError;
+    closed = false;
+    constructor(limit, journal) {
+        this.limit = limit;
+        this.journal = journal;
+        for (const reservation of journal?.load() ?? []) {
+            this.reservations.add({ ...reservation });
+        }
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.rejectWaiters(new AppError("diagnostic_state_closed", "Diagnostic execution is shutting down"));
+        this.journal?.close();
+    }
+    snapshot() {
+        const reservations = [...this.reservations].map((reservation) => ({ ...reservation }));
+        const uncertain = reservations.filter((reservation) => reservation.state === "uncertain").length;
+        return {
+            scope: this.journal === undefined ? "server-instance" : "state-file",
+            ...(this.storageError === undefined ? {} : { storage_error_code: this.storageError.code }),
+            limit: this.limit,
+            available_count: this.closed || this.storageError !== undefined ? 0 : Math.max(0, this.limit - reservations.length),
+            active_count: reservations.length - uncertain,
+            uncertain_count: uncertain,
+            queued_count: this.waiting.length,
+            reservations
+        };
+    }
+    assertUsableCapacity() {
+        if (this.closed)
+            throw new AppError("diagnostic_state_closed", "Diagnostic execution is closed");
+        if (this.storageError !== undefined)
+            throw this.storageError;
+        if (this.isUncertainExhausted()) {
+            throw this.capacityError();
+        }
+    }
+    acquire(signal, intent) {
+        return new Promise((resolve, reject) => {
+            if (signal.aborted) {
+                reject(new AppError("operation_aborted", "Diagnostic was cancelled while waiting for capacity"));
+                return;
+            }
+            this.assertUsableCapacity();
+            const cancelled = () => {
+                const index = this.waiting.indexOf(waiter);
+                if (index >= 0)
+                    this.waiting.splice(index, 1);
+                waiter.reject(new AppError("operation_aborted", "Diagnostic was cancelled while waiting for capacity"));
+            };
+            const waiter = {
+                reject: (error) => {
+                    signal.removeEventListener("abort", cancelled);
+                    reject(error);
+                },
+                grant: () => {
+                    signal.removeEventListener("abort", cancelled);
+                    try {
+                        resolve(this.reserve(intent));
+                    }
+                    catch (error) {
+                        reject(error);
+                    }
+                }
+            };
+            if (this.reservations.size < this.limit) {
+                waiter.grant();
+            }
+            else {
+                this.waiting.push(waiter);
+                signal.addEventListener("abort", cancelled, { once: true });
+            }
+        });
+    }
+    reserve(intent) {
+        const requestId = randomUUID();
+        const state = {
+            reservation_id: requestId,
+            rpc_request_id: requestId,
+            inventory_hostname: intent.inventoryHostname,
+            diagnostic: intent.diagnostic,
+            state: "active",
+            reserved_at: new Date().toISOString()
+        };
+        try {
+            this.journal?.save(state);
+        }
+        catch {
+            throw this.failStorage();
+        }
+        this.reservations.add(state);
+        return {
+            requestId,
+            complete: () => this.complete(state),
+            markUncertain: (reasonCode) => this.markUncertain(state, reasonCode)
+        };
+    }
+    complete(state) {
+        if (!this.reservations.has(state))
+            return;
+        try {
+            this.journal?.remove(state.reservation_id);
+        }
+        catch {
+            state.state = "uncertain";
+            state.uncertain_since = new Date().toISOString();
+            state.reason_code = "diagnostic_state_write_failed";
+            throw this.failStorage();
+        }
+        this.reservations.delete(state);
+        this.waiting.shift()?.grant();
+    }
+    markUncertain(state, reasonCode) {
+        if (!this.reservations.has(state) || state.state === "uncertain")
+            return;
+        state.state = "uncertain";
+        state.uncertain_since = new Date().toISOString();
+        state.reason_code = reasonCode;
+        try {
+            this.journal?.save(state);
+        }
+        catch {
+            // Abort listeners must not throw. The committed active record
+            // still prevents fresh capacity on restart; stop all new work.
+            this.failStorage();
+        }
+        if (this.isUncertainExhausted())
+            this.rejectWaiters(this.capacityError());
+    }
+    isUncertainExhausted() {
+        return this.reservations.size >= this.limit && [...this.reservations].every((reservation) => reservation.state === "uncertain");
+    }
+    failStorage() {
+        const error = new AppError("diagnostic_state_write_failed", "Diagnostic state could not be committed; all new diagnostics are blocked until operator investigation");
+        this.storageError = error;
+        this.rejectWaiters(error);
+        return error;
+    }
+    rejectWaiters(error) {
+        for (const waiter of this.waiting.splice(0))
+            waiter.reject(error);
+    }
+    capacityError() {
+        return new AppError("diagnostic_capacity_uncertain", "Diagnostic capacity is reserved for executions with unknown remote completion. Inspect eos_get_server_info.diagnostics.capacity and contact an operator; reservations do not expire. Do not retry or restart merely to clear them.");
+    }
+}
+//# sourceMappingURL=concurrency.js.map

package/dist/diagnostics/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../../src/diagnostics/concurrency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAoB7C,4FAA4F;AAC5F,MAAM,OAAO,qBAAqB;IAOH;IAAgC;IAN5C,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,OAAO,GAAa,EAAE,CAAC;IAEhC,YAAY,CAAuB;IACnC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,KAAa,EAAmB,OAA2B;QAA3D,UAAK,GAAL,KAAK,CAAQ;QAAmB,YAAO,GAAP,OAAO,CAAoB;QACtF,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,yBAAyB,EAAE,uCAAuC,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,QAAQ;QACN,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;QACjG,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY;YACpE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAC1F,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,eAAe,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC;YACnH,YAAY,EAAE,YAAY,CAAC,MAAM,GAAG,SAAS;YAC7C,eAAe,EAAE,SAAS;YAC1B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACjC,YAAY;SACb,CAAC;IACJ,CAAC;IAED,oBAAoB;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,gCAAgC,CAAC,CAAC;QACjG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,YAAY,CAAC;QAC7D,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAmB,EAAE,MAAmC;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC,CAAC;gBACjG,OAAO;YACT,CAAC;YACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,GAAS,EAAE;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,KAAK,IAAI,CAAC;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC,CAAC;YAC1G,CAAC,CAAC;YACF,MAAM,MAAM,GAAW;gBACrB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBAChB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAC/C,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBACD,KAAK,EAAE,GAAG,EAAE;oBACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;oBAChC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC;aACF,CAAC;YACF,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxC,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,MAAmC;QACjD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAA8B;YACvC,cAAc,EAAE,SAAS;YACzB,cAAc,EAAE,SAAS;YACzB,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;YAC5C,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,aAAa,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC;SACrE,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,KAAgC;QAC/C,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC;YAC1B,KAAK,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjD,KAAK,CAAC,WAAW,GAAG,+BAA+B,CAAC;YACpD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,aAAa,CAAC,KAAgC,EAAE,UAAkB;QACxE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QACzE,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC;QAC1B,KAAK,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,+DAA+D;YAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,oBAAoB,EAAE;YAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;IAEO,oBAAoB;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;IAClI,CAAC;IAEO,WAAW;QACjB,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,+BAA+B,EAAE,uGAAuG,CAAC,CAAC;QACrK,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,KAAe;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,QAAQ,CACjB,+BAA+B,EAC/B,oOAAoO,CACrO,CAAC;IACJ,CAAC;CACF"}

package/dist/diagnostics/eapiRunner.d.ts

@@ -0,0 +1,10 @@
+import type { ResolvedServerConfig } from "../config/schema.js";
+import type { EosTextCommandRunner } from "../eapi/types.js";
+import type { InventoryHostModel } from "../inventory/types.js";
+import type { DiagnosticDeviceRunner, DiagnosticExecutionContext, DiagnosticObservation, PreparedDiagnostic } from "./types.js";
+export declare class EapiDiagnosticRunner implements DiagnosticDeviceRunner {
+    private readonly config;
+    private readonly runner;
+    constructor(config: ResolvedServerConfig, runner: EosTextCommandRunner);
+    execute(host: InventoryHostModel, request: PreparedDiagnostic, context: DiagnosticExecutionContext): Promise<DiagnosticObservation>;
+}

package/dist/diagnostics/eapiRunner.js

@@ -0,0 +1,46 @@
+import { resolveEapiConnection } from "../connection/resolveConnection.js";
+import { AppError, toErrorCode, toErrorMessage } from "../core/errors.js";
+import { isObject } from "../utils/value.js";
+import { DiagnosticExecutionError } from "./executionError.js";
+import { buildPingCommand } from "./ping.js";
+export class EapiDiagnosticRunner {
+    config;
+    runner;
+    constructor(config, runner) {
+        this.config = config;
+        this.runner = runner;
+    }
+    async execute(host, request, context) {
+        let connection;
+        try {
+            connection = { ...resolveEapiConnection(this.config, host), timeoutMs: this.config.diagnostics.httpTimeoutMs };
+        }
+        catch (error) {
+            throw new DiagnosticExecutionError(toErrorCode(error, "diagnostic_execution_failed"), toErrorMessage(error), "not_dispatched");
+        }
+        try {
+            const results = await this.runner.runTextCommands(connection, [buildPingCommand(request)], { enable: true, signal: context.signal, requestId: context.requestId });
+            const output = results[0]?.output;
+            if (results.length !== 1 || typeof output !== "string") {
+                throw new DiagnosticExecutionError("diagnostic_output_unrecognized", "Expected one text result from EOS", "unknown");
+            }
+            return { kind: request.kind, output };
+        }
+        catch (error) {
+            // After dispatch, an error is never proof that remote work has stopped.
+            const code = toErrorCode(error, "diagnostic_execution_failed");
+            if (!["eapi_json_rpc_error", "json_output_unavailable", "eapi_http_error", "eapi_response_invalid_json"].includes(code))
+                throw error;
+            const data = error instanceof AppError ? error.details?.data : undefined;
+            const text = Array.isArray(data)
+                ? data.filter(isObject).map((entry) => entry.output).filter((entry) => typeof entry === "string").join("")
+                : undefined;
+            // Preserve EOS error evidence internally; only the executor's explicit
+            // includeRaw path may expose it. RPC error messages contain raw data.
+            throw new DiagnosticExecutionError(code, `EOS diagnostic request failed (${code})`, "unknown", {
+                raw_output: text || toErrorMessage(error)
+            });
+        }
+    }
+}
+//# sourceMappingURL=eapiRunner.js.map

package/dist/diagnostics/eapiRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eapiRunner.js","sourceRoot":"","sources":["../../src/diagnostics/eapiRunner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG1E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAG7C,MAAM,OAAO,oBAAoB;IACF;IAA+C;IAA5E,YAA6B,MAA4B,EAAmB,MAA4B;QAA3E,WAAM,GAAN,MAAM,CAAsB;QAAmB,WAAM,GAAN,MAAM,CAAsB;IAAG,CAAC;IAE5G,KAAK,CAAC,OAAO,CAAC,IAAwB,EAAE,OAA2B,EAAE,OAAmC;QACtG,IAAI,UAAgC,CAAC;QACrC,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;QACjH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,wBAAwB,CAAC,WAAW,CAAC,KAAK,EAAE,6BAA6B,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACjI,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACnK,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YAClC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,wBAAwB,CAAC,gCAAgC,EAAE,mCAAmC,EAAE,SAAS,CAAC,CAAC;YACvH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrI,MAAM,IAAI,GAAG,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3H,CAAC,CAAC,SAAS,CAAC;YACd,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,IAAI,wBAAwB,CAAC,IAAI,EAAE,kCAAkC,IAAI,GAAG,EAAE,SAAS,EAAE;gBAC7F,UAAU,EAAE,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/diagnostics/executionError.d.ts

@@ -0,0 +1,7 @@
+import { AppError } from "../core/errors.js";
+export type DiagnosticExecutionState = "not_dispatched" | "completed" | "unknown";
+/** Explicit adapter classification; ordinary errors leave execution state unknown. */
+export declare class DiagnosticExecutionError extends AppError {
+    readonly executionState: DiagnosticExecutionState;
+    constructor(code: string, message: string, executionState: DiagnosticExecutionState, details?: Record<string, unknown>);
+}

package/dist/diagnostics/executionError.js

@@ -0,0 +1,10 @@
+import { AppError } from "../core/errors.js";
+/** Explicit adapter classification; ordinary errors leave execution state unknown. */
+export class DiagnosticExecutionError extends AppError {
+    executionState;
+    constructor(code, message, executionState, details) {
+        super(code, message, details);
+        this.executionState = executionState;
+    }
+}
+//# sourceMappingURL=executionError.js.map

package/dist/diagnostics/executionError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionError.js","sourceRoot":"","sources":["../../src/diagnostics/executionError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,sFAAsF;AACtF,MAAM,OAAO,wBAAyB,SAAQ,QAAQ;IAIzC;IAHX,YACE,IAAY,EACZ,OAAe,EACN,cAAwC,EACjD,OAAiC;QAEjC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAHrB,mBAAc,GAAd,cAAc,CAA0B;IAInD,CAAC;CACF"}

package/dist/diagnostics/executor.d.ts

@@ -0,0 +1,32 @@
+import type { ResolvedServerConfig } from "../config/schema.js";
+import type { InventoryModel } from "../inventory/types.js";
+import { type ReadDeviceResultBase, type ReadOperationResultEnvelope } from "../operations/readExecution.js";
+import type { DiagnosticJournal } from "./journalTypes.js";
+import type { DiagnosticCapacitySnapshot, DiagnosticDeviceRunner, DiagnosticFinding, DiagnosticRequest, ResolvedDiagnosticRequest } from "./types.js";
+export interface DiagnosticDeviceResult extends ReadDeviceResultBase {
+    destination: string;
+    finding?: DiagnosticFinding;
+    raw_output?: string;
+}
+export type DiagnosticResult = ReadOperationResultEnvelope<DiagnosticDeviceResult> & {
+    request: ResolvedDiagnosticRequest;
+};
+/** Owns policy, budgets, fan-out, global admission, cancellation, and result normalization. */
+export declare class DiagnosticExecutor {
+    private readonly model;
+    private readonly config;
+    private readonly runner;
+    private readonly concurrency;
+    private readonly shutdown;
+    constructor(model: InventoryModel, config: ResolvedServerConfig, runner: DiagnosticDeviceRunner, journal?: DiagnosticJournal);
+    close(): void;
+    getCapacity(): DiagnosticCapacitySnapshot;
+    execute(options: {
+        target: string;
+        request: DiagnosticRequest;
+        includeRaw?: boolean;
+        signal?: AbortSignal;
+    }): Promise<DiagnosticResult>;
+    private runExecution;
+    private executeOnDevice;
+}

package/dist/diagnostics/executor.js

@@ -0,0 +1,115 @@
+import { AppError, toErrorCode } from "../core/errors.js";
+import { resolveInventoryTarget } from "../inventory/resolveTarget.js";
+import { buildDeviceResultSummary, buildReadDeviceFailure, buildReadDeviceSuccess, buildReadOperationResultEnvelope, enforceReadTargetLimit, mapWithConcurrency, runWithOperationTimeout } from "../operations/readExecution.js";
+import { DiagnosticConcurrency } from "./concurrency.js";
+import { DiagnosticExecutionError } from "./executionError.js";
+import { pingDiagnostic } from "./ping.js";
+const diagnosticDefinitions = {
+    ping: pingDiagnostic
+};
+/** Owns policy, budgets, fan-out, global admission, cancellation, and result normalization. */
+export class DiagnosticExecutor {
+    model;
+    config;
+    runner;
+    concurrency;
+    shutdown = new AbortController();
+    constructor(model, config, runner, journal) {
+        this.model = model;
+        this.config = config;
+        this.runner = runner;
+        this.concurrency = new DiagnosticConcurrency(config.diagnostics.deviceConcurrency, journal);
+    }
+    close() {
+        this.shutdown.abort(new AppError("diagnostic_server_stopping", "Diagnostic executor is stopping"));
+        this.concurrency.close();
+    }
+    getCapacity() {
+        return this.concurrency.snapshot();
+    }
+    async execute(options) {
+        const signal = options.signal === undefined ? this.shutdown.signal : AbortSignal.any([options.signal, this.shutdown.signal]);
+        const definition = diagnosticDefinitions[options.request.kind];
+        const prepared = definition.prepare(options.request, this.config.diagnostics);
+        const operationName = `eos_${options.request.kind}`;
+        const operationConfig = {
+            ...this.config,
+            deviceConcurrency: this.config.diagnostics.deviceConcurrency,
+            overallOperationTimeoutMs: this.config.diagnostics.overallOperationTimeoutMs
+        };
+        const resolvedTarget = resolveInventoryTarget(this.model, { target: options.target });
+        enforceReadTargetLimit(operationConfig, resolvedTarget.resolvedHosts.length);
+        const denied = resolvedTarget.resolvedHosts.filter((host) => !host.diagnosticsAllowed);
+        if (denied.length > 0) {
+            throw new AppError("diagnostic_policy_denied", `Diagnostic permission denied for: ${denied.map((host) => host.inventoryHostname).join(", ")}`);
+        }
+        const probesPerHost = prepared.executions.reduce((total, execution) => total + definition.probeCount(execution), 0);
+        if (resolvedTarget.resolvedHosts.length * probesPerHost > this.config.diagnostics.maxProbesPerRequest) {
+            throw new AppError("diagnostic_probe_limit_exceeded", `Request exceeds maxProbesPerRequest ${this.config.diagnostics.maxProbesPerRequest}`);
+        }
+        this.concurrency.assertUsableCapacity();
+        // Each host/execution pair takes its own reservation; results stay in host-then-execution order.
+        const hostExecutions = resolvedTarget.resolvedHosts.flatMap((host) => prepared.executions.map((execution) => ({ host, execution })));
+        const results = await runWithOperationTimeout(operationConfig, operationName, (operationSignal) => mapWithConcurrency(hostExecutions, operationConfig.deviceConcurrency, async ({ host, execution }) => {
+            try {
+                return await this.runExecution(definition, host, execution, operationSignal, options.includeRaw === true);
+            }
+            catch (error) {
+                return {
+                    ...buildReadDeviceFailure(host, "diagnostic_execution_failed", error),
+                    destination: execution.destination,
+                    ...(options.includeRaw === true && error instanceof AppError && typeof error.details?.raw_output === "string"
+                        ? { raw_output: error.details.raw_output }
+                        : {})
+                };
+            }
+        }, operationSignal), signal);
+        return buildReadOperationResultEnvelope(options.target, { resolvedTarget, results, summary: buildDeviceResultSummary(results) }, {
+            extra: { request: prepared.request },
+            responseSizeLimit: { config: this.config, operationName }
+        });
+    }
+    async runExecution(definition, host, execution, signal, includeRaw) {
+        const observation = await this.executeOnDevice(host, execution, signal);
+        try {
+            return buildReadDeviceSuccess(host, {
+                destination: execution.destination,
+                finding: definition.interpret(observation.output, execution),
+                ...(includeRaw ? { raw_output: observation.output } : {})
+            });
+        }
+        catch (error) {
+            if (error instanceof AppError && includeRaw) {
+                throw new AppError(error.code, error.message, { raw_output: observation.output });
+            }
+            throw error;
+        }
+    }
+    async executeOnDevice(host, request, signal) {
+        const reservation = await this.concurrency.acquire(signal, { inventoryHostname: host.inventoryHostname, diagnostic: request.kind });
+        if (signal.aborted) {
+            reservation.complete();
+            throw new AppError("operation_aborted", "Diagnostic was cancelled before dispatch");
+        }
+        const onAbort = () => reservation.markUncertain(toErrorCode(signal.reason, "operation_aborted"));
+        signal.addEventListener("abort", onAbort, { once: true });
+        try {
+            const observation = await this.runner.execute(host, request, { signal, requestId: reservation.requestId });
+            reservation.complete();
+            return observation;
+        }
+        catch (error) {
+            if (error instanceof DiagnosticExecutionError && (error.executionState === "not_dispatched" || error.executionState === "completed")) {
+                reservation.complete();
+            }
+            else {
+                reservation.markUncertain(toErrorCode(error, "diagnostic_execution_failed"));
+            }
+            throw error;
+        }
+        finally {
+            signal.removeEventListener("abort", onAbort);
+        }
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/diagnostics/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/diagnostics/executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,gCAAgC,EAChC,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EAGxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAsB3C,MAAM,qBAAqB,GAA4D;IACrF,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF,+FAA+F;AAC/F,MAAM,OAAO,kBAAkB;IAKV;IACA;IACA;IANF,WAAW,CAAwB;IACnC,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IAElD,YACmB,KAAqB,EACrB,MAA4B,EAC5B,MAA8B,EAC/C,OAA2B;QAHV,UAAK,GAAL,KAAK,CAAgB;QACrB,WAAM,GAAN,MAAM,CAAsB;QAC5B,WAAM,GAAN,MAAM,CAAwB;QAG/C,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,4BAA4B,EAAE,iCAAiC,CAAC,CAAC,CAAC;QACnG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAKb;QACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7H,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9E,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,eAAe,GAAyB;YAC5C,GAAG,IAAI,CAAC,MAAM;YACd,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,iBAAiB;YAC5D,yBAAyB,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,yBAAyB;SAC7E,CAAC;QAEF,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,sBAAsB,CAAC,eAAe,EAAE,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,0BAA0B,EAAE,qCAAqC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjJ,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpH,IAAI,cAAc,CAAC,aAAa,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC;YACtG,MAAM,IAAI,QAAQ,CAAC,iCAAiC,EAAE,uCAAuC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC9I,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,oBAAoB,EAAE,CAAC;QAExC,iGAAiG;QACjG,MAAM,cAAc,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACrI,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,eAAe,EAAE,aAAa,EAAE,CAAC,eAAe,EAAE,EAAE,CAChG,kBAAkB,CAAC,cAAc,EAAE,eAAe,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;YAClG,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;YAC5G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,GAAG,sBAAsB,CAAC,IAAI,EAAE,6BAA6B,EAAE,KAAK,CAAC;oBACrE,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,YAAY,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,UAAU,KAAK,QAAQ;wBAC3G,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE;wBAC1C,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/B,OAAO,gCAAgC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,EAAE;YAC/H,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE;YACpC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,UAAgC,EAChC,IAAwB,EACxB,SAA6B,EAC7B,MAAmB,EACnB,UAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,OAAO,sBAAsB,CAAC,IAAI,EAAE;gBAClC,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC5D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,IAAwB,EACxB,OAA2B,EAC3B,MAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,WAAW,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3G,WAAW,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,wBAAwB,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,gBAAgB,IAAI,KAAK,CAAC,cAAc,KAAK,WAAW,CAAC,EAAE,CAAC;gBACrI,WAAW,CAAC,QAAQ,EAAE,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF"}

package/dist/diagnostics/journal.d.ts

@@ -0,0 +1,14 @@
+import type { DiagnosticJournal } from "./journalTypes.js";
+import type { DiagnosticReservationInfo } from "./types.js";
+import { type DiagnosticReleaseAudit, type DiagnosticReleaseRequest, type DiagnosticReleaseResult } from "./releaseEvidence.js";
+export declare function openDiagnosticJournal(stateFile: string, inventoryIdentity: string): DiagnosticJournal;
+/** No API device calls: release is explicitly authorized operator authority, not observed completion. */
+export declare function releaseDiagnosticReservations(stateFile: string, request: DiagnosticReleaseRequest): DiagnosticReleaseResult;
+export interface DiagnosticJournalInspection {
+    schema_version: 1 | 2;
+    inventory_identity: string;
+    reservations: DiagnosticReservationInfo[];
+    release_audit: DiagnosticReleaseAudit[];
+}
+/** Read-only inspection never acquires ownership, clears reservations, or normalizes state. */
+export declare function inspectDiagnosticJournal(stateFile: string): DiagnosticJournalInspection;