@calltelemetry/ct-lab-mcp 0.1.4 → 0.2.0

package/dist/src/tools/cube-provision.js

@@ -0,0 +1,892 @@
+/**
+ * MCP Tools: provision_cube & setup_cube_xcc
+ *
+ * Automates end-to-end provisioning, host ranking & slot partition allocation,
+ * aggressive config wiping, licensing activation (network-advantage / dna-advantage
+ * with mandatory write memory & reboot cycle), and XCC / WSAPI integration on Cisco
+ * Cat8000v CUBE routers for reliable UAT testing.
+ */
+import { z } from "zod";
+import { ProxmoxErrorCode, createToolErrorResult, createToolSuccessResult } from "../types/mcp.js";
+// ============================================================================
+// 1. provision_cube
+// ============================================================================
+export const ProvisionCubeInputShape = {
+    host: z
+        .string()
+        .optional()
+        .default("auto")
+        .describe("Target hypervisor host ('auto', 'proxmox-lab', 'proxmox-mini', 'esxi-intel-192-168-123-176'). Default: 'auto' (selects least-loaded host via slot ranking)."),
+    hypervisor: z
+        .enum(["proxmox", "esxi"])
+        .optional()
+        .describe("Target hypervisor type."),
+    vmid: z
+        .number()
+        .int()
+        .optional()
+        .describe("Specific VMID to assign (e.g. 205). Auto-allocated in 200-299 CUBE range if omitted."),
+    name: z
+        .string()
+        .optional()
+        .describe("Name for the CUBE router VM. Auto-generated as 'CUBE-8000V-<HOST>-<ISSUE>-<VMID>' if omitted."),
+    linearIssue: z
+        .string()
+        .optional()
+        .describe("Linear ticket key (e.g. 'CTUAT-389') for slot lease and naming correlation."),
+    purpose: z
+        .string()
+        .optional()
+        .describe("Workload purpose (e.g. 'cucm-xcc', 'pstn-emulator', 'soak')."),
+    vlan: z
+        .number()
+        .int()
+        .optional()
+        .default(125)
+        .describe("Network VLAN tag (default: 125 for lab telephony)."),
+    ipAddress: z
+        .string()
+        .optional()
+        .describe("Static IPv4 management address for GigabitEthernet1 (e.g. '192.168.125.60/24' or '192.168.125.60')."),
+    gatewayIp: z
+        .string()
+        .optional()
+        .describe("Default IPv4 gateway (e.g. '192.168.125.1')."),
+    applianceIp: z
+        .string()
+        .optional()
+        .describe("Target Call Telemetry appliance IP to point XCC WSAPI to (e.g. '192.168.124.120')."),
+    xccRemoteUrl: z
+        .string()
+        .optional()
+        .describe("Explicit WSAPI remote URL (e.g. 'http://192.168.124.120:80/wsapi'). Note: explicit :80 is required by Cat8000v 17.15."),
+    cucmIp: z
+        .string()
+        .optional()
+        .describe("Target Cisco CUCM Publisher IP for SIP trunking (e.g. '192.168.125.10')."),
+    templateVmid: z
+        .number()
+        .int()
+        .optional()
+        .describe("Template VMID to clone from (default: auto-detected or 102/200)."),
+    wipeExistingConfig: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Whether to aggressively wipe existing dial-peers and WSAPI message-accounts before applying fresh config (default: true)."),
+    activateLicenseAndReboot: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Whether to apply advanced DNA advantage license, execute 'wr mem', and trigger a reboot to activate (default: true)."),
+    licenseLevel: z
+        .string()
+        .optional()
+        .default("network-advantage addon dna-advantage")
+        .describe("Cisco IOS-XE license boot level."),
+    profile: z
+        .enum(["minimal", "standard", "performance"])
+        .optional()
+        .default("minimal")
+        .describe("Hardware sizing profile: 'minimal' (4GB RAM, 2 vCPUs - default minimum CUBE footprint), 'standard' (8GB RAM, 4 vCPUs), 'performance' (16GB RAM, 8 vCPUs)."),
+    memoryMb: z
+        .number()
+        .int()
+        .optional()
+        .describe("Explicit memory in MB (overrides profile default, e.g. 4096)."),
+    cpuCores: z
+        .number()
+        .int()
+        .optional()
+        .describe("Explicit vCPU cores count (overrides profile default, e.g. 2)."),
+    topologyRole: z
+        .enum(["cucm-edge", "att-pstn", "verizon-peer", "dual-cube-peer"])
+        .optional()
+        .default("cucm-edge")
+        .describe("CUBE topology role: 'cucm-edge' (internal CT edge with XCC prober + CUCM trunk), 'att-pstn' (ATT PSTN soak emulator peer), 'verizon-peer' (Verizon external SIP peer / QA-245 greeting injection test harness), 'dual-cube-peer' (dual-CUBE test leg)."),
+    peerTargetHost: z
+        .string()
+        .optional()
+        .describe("Target IP of the peer CUBE or SIP destination (e.g. '192.168.125.60' or '192.168.123.94')."),
+    peerTargetPort: z
+        .number()
+        .int()
+        .optional()
+        .default(5060)
+        .describe("Target port of the peer CUBE (default: 5060)."),
+    outboundPattern: z
+        .string()
+        .optional()
+        .describe("Dial-peer destination-pattern for outbound calls (e.g. '9...', '981...', '1...')."),
+    inboundPattern: z
+        .string()
+        .optional()
+        .default(".")
+        .describe("Dial-peer incoming called-number pattern for inbound calls (default: '.')."),
+    codec: z
+        .string()
+        .optional()
+        .default("g711ulaw")
+        .describe("Voice codec preference (default: 'g711ulaw')."),
+    dtmfRelay: z
+        .string()
+        .optional()
+        .default("rtp-nte")
+        .describe("DTMF relay method (default: 'rtp-nte')."),
+    syncCucmTrunk: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Whether to automatically synchronize matching CUCM SIP Trunk and Route Pattern via AXL (default: true)."),
+    cucmTrunkName: z
+        .string()
+        .optional()
+        .describe("Name of the matching CUCM SIP Trunk (auto-generated as 'CUBE-TRUNK-<IP>' if omitted).")
+};
+export const provisionCubeSchema = {
+    name: "provision_cube",
+    description: "Provisions a new Cisco Cat8000v CUBE router VM on the optimal ranked hypervisor host, reserves an 8GB slot lease, activates advanced licensing (network-advantage with reboot), and applies clean XCC/WSAPI config.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            host: {
+                type: "string",
+                description: "Target hypervisor host ('auto', 'proxmox-lab', 'proxmox-mini', 'esxi-intel-192-168-123-176'). Default: 'auto'."
+            },
+            name: {
+                type: "string",
+                description: "Name for the CUBE router VM (auto-generated if omitted)."
+            },
+            linearIssue: {
+                type: "string",
+                description: "Linear ticket key (e.g. 'CTUAT-389')."
+            },
+            purpose: {
+                type: "string",
+                description: "Workload purpose (e.g. 'cucm-xcc', 'pstn-emulator')."
+            },
+            vmid: {
+                type: "number",
+                description: "Specific VMID to assign."
+            },
+            vlan: {
+                type: "number",
+                description: "Network VLAN tag (default: 125)."
+            },
+            ipAddress: {
+                type: "string",
+                description: "Static IPv4 management address (e.g. '192.168.125.60/24')."
+            },
+            gatewayIp: {
+                type: "string",
+                description: "Default gateway (e.g. '192.168.125.1')."
+            },
+            applianceIp: {
+                type: "string",
+                description: "Target Call Telemetry appliance IP for XCC WSAPI."
+            },
+            cucmIp: {
+                type: "string",
+                description: "Target CUCM Publisher IP for SIP trunking."
+            },
+            wipeExistingConfig: {
+                type: "boolean",
+                description: "Whether to aggressively wipe old dial-peers and WSAPI accounts (default: true)."
+            },
+            activateLicenseAndReboot: {
+                type: "boolean",
+                description: "Whether to activate DNA advantage license and execute reboot cycle (default: true)."
+            }
+        }
+    }
+};
+export const ProvisionCubeInputSchema = z.object(ProvisionCubeInputShape);
+export async function handleProvisionCube(args, context) {
+    try {
+        const hypervisorManager = context.hypervisorManager;
+        if (!hypervisorManager) {
+            return createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, "Hypervisor manager is not initialized.");
+        }
+        const requestedHost = args.host || "auto";
+        const requestedVlan = args.vlan || 125;
+        const linearIssue = (args.linearIssue || args.issue);
+        const purpose = (args.purpose || "cucm-xcc");
+        // 1. Host Ranking & Placement
+        let selectedHostName = requestedHost;
+        if (selectedHostName === "auto" || !selectedHostName) {
+            const rankedHosts = await hypervisorManager.rankHostsForProvisioning();
+            const validCandidates = rankedHosts.filter(h => h.availableSlots > 0);
+            if (validCandidates.length === 0) {
+                return createToolErrorResult(ProxmoxErrorCode.CAPACITY_EXCEEDED, "No hypervisor hosts have available 8GB slot capacity for a new CUBE router.");
+            }
+            // If VLAN 125 is requested (telephony network), prefer proxmox-lab or esxi-intel
+            if (requestedVlan === 125) {
+                const vlan125Host = validCandidates.find(h => h.hostName === "proxmox-lab" || h.hostName.startsWith("esxi"));
+                selectedHostName = vlan125Host ? vlan125Host.hostName : validCandidates[0].hostName;
+            }
+            else {
+                selectedHostName = validCandidates[0].hostName;
+            }
+        }
+        const driver = hypervisorManager.getDriver(selectedHostName);
+        if (!driver) {
+            return createToolErrorResult(ProxmoxErrorCode.HOST_NOT_FOUND, `Hypervisor host '${selectedHostName}' not found.`);
+        }
+        // 2. Slot Capacity Reservation
+        let slotClaimResult;
+        if (context.slotManager) {
+            try {
+                slotClaimResult = await context.slotManager.claimSlot({
+                    host: selectedHostName,
+                    linearIssue: linearIssue || "CUBE-PROVISION",
+                    workloadType: "cube",
+                    ttlMinutes: 60,
+                    label: `CUBE Router Slot (${purpose})`,
+                    tags: ["role=cube", "model=Cat8000v", `purpose=${purpose}`]
+                });
+            }
+            catch (slotErr) {
+                if (slotErr.code === "CAPACITY_EXCEEDED" || slotErr.message?.includes("capacity")) {
+                    return createToolErrorResult(ProxmoxErrorCode.CAPACITY_EXCEEDED, `Cannot provision CUBE on '${selectedHostName}': Host slot capacity limit exceeded (2 on proxmox-lab, 4 on proxmox-mini).`);
+                }
+            }
+        }
+        // 3. Dynamic VMID Allocation & Structured Naming Convention
+        let targetVmid = args.vmid;
+        if (!targetVmid) {
+            try {
+                const vms = await driver.listVms();
+                const usedVmids = new Set(vms.map((v) => Number(v.id)).filter((n) => !isNaN(n)));
+                let candidate = 205;
+                while (usedVmids.has(candidate)) {
+                    candidate++;
+                }
+                targetVmid = candidate;
+            }
+            catch {
+                targetVmid = 205;
+            }
+        }
+        const hostAlias = selectedHostName === "proxmox-lab" ? "PMX" : selectedHostName === "proxmox-mini" ? "MINI" : "ESX";
+        const cleanPurpose = (linearIssue || purpose || "UAT").replace(/[^a-zA-Z0-9]/g, "").toUpperCase();
+        const vmName = args.name || `CUBE-8000V-${hostAlias}-${cleanPurpose}-${targetVmid}`;
+        const profile = args.profile || "minimal";
+        let memoryMb = args.memoryMb;
+        let cpuCores = args.cpuCores;
+        if (!memoryMb) {
+            memoryMb = profile === "minimal" ? 4096 : profile === "performance" ? 16384 : 8192;
+        }
+        if (!cpuCores) {
+            cpuCores = profile === "minimal" ? 2 : profile === "performance" ? 8 : 4;
+        }
+        const vlan = requestedVlan;
+        const ipAddress = args.ipAddress || "192.168.125.60/24";
+        const gatewayIp = args.gatewayIp || "192.168.125.1";
+        const applianceIp = args.applianceIp || "192.168.124.120";
+        const cucmIp = args.cucmIp || "192.168.125.10";
+        const wipeExistingConfig = args.wipeExistingConfig !== false;
+        const activateLicenseAndReboot = args.activateLicenseAndReboot !== false;
+        const licenseLevel = args.licenseLevel || "network-advantage addon dna-advantage";
+        // 4. Clone/allocate VM on hypervisor
+        let provisionResult;
+        if (driver.hypervisorType === "proxmox") {
+            let templateId = args.templateVmid;
+            if (!templateId) {
+                try {
+                    const vms = await driver.listVms();
+                    const candidate = vms.find(v => v.name.toLowerCase().includes("cube") ||
+                        v.id === "200" ||
+                        v.id === "102" ||
+                        v.id === "100");
+                    templateId = candidate ? Number(candidate.id) : 200;
+                }
+                catch {
+                    templateId = 200;
+                }
+            }
+            try {
+                provisionResult = await driver.cloneVm({
+                    sourceVmIdOrName: templateId,
+                    newVmName: vmName,
+                    newVmId: targetVmid,
+                    vlan,
+                    memoryBytes: memoryMb * 1024 * 1024,
+                    cpuCores,
+                    fullClone: args.fullClone === true
+                });
+            }
+            catch (cloneErr) {
+                if (cloneErr.message?.includes("Linked clone feature is not supported") || cloneErr.message?.includes("linked clone")) {
+                    // Retry with full clone for LVM storage pools
+                    provisionResult = await driver.cloneVm({
+                        sourceVmIdOrName: templateId,
+                        newVmName: vmName,
+                        newVmId: targetVmid,
+                        vlan,
+                        memoryBytes: memoryMb * 1024 * 1024,
+                        cpuCores,
+                        fullClone: true
+                    });
+                }
+                else {
+                    throw cloneErr;
+                }
+            }
+        }
+        // 5. Register in SlotManager CUBE Catalog
+        if (context.slotManager) {
+            const cleanIp = ipAddress.split("/")[0];
+            const cubeId = vmName.toLowerCase().replace(/[^a-z0-9-_]/g, "-");
+            context.slotManager.cubes.set(cubeId, {
+                cubeId,
+                name: vmName,
+                hostName: selectedHostName,
+                hypervisor: driver.hypervisorType,
+                vmid: targetVmid,
+                ipAddress: cleanIp,
+                model: "Cat8000v",
+                status: "running",
+                claimState: linearIssue ? "CLAIMED" : "AVAILABLE",
+                claimId: slotClaimResult?.claimId || null,
+                claimedAt: new Date().toISOString(),
+                expiresAt: new Date(Date.now() + 60 * 60 * 1000).toISOString(),
+                durationMinutes: 60,
+                linearIssue: linearIssue || null,
+                requester: "ai-agent",
+                licenseLevel
+            });
+        }
+        // 6. Generate configuration stages report
+        const lines = [];
+        lines.push(`### 🚀 Cisco Cat8000v CUBE Provisioned & Initialized: **${vmName}**\n`);
+        lines.push(`> 🎯 **Host:** \`${selectedHostName}\` (Ranked #1) | **VMID:** \`${targetVmid}\` | **VLAN:** \`${vlan}\`\n`);
+        const topologyRole = args.topologyRole || "cucm-edge";
+        const peerTargetHost = args.peerTargetHost || (topologyRole === "att-pstn" ? "192.168.125.60" : cucmIp);
+        const peerTargetPort = args.peerTargetPort || 5060;
+        const outboundPattern = args.outboundPattern || (topologyRole === "verizon-peer" ? "981..." : topologyRole === "att-pstn" ? "9..." : "1...");
+        const inboundPattern = args.inboundPattern || ".";
+        const codec = args.codec || "g711ulaw";
+        const dtmfRelay = args.dtmfRelay || "rtp-nte";
+        lines.push("#### 📋 1. Virtual Hardware & Slot Reservation");
+        lines.push("| Property | Configured Value |");
+        lines.push("|---|---|");
+        lines.push(`| **Router Platform** | Cisco Catalyst 8000v (IOS-XE) |`);
+        lines.push(`| **VM Name** | \`${vmName}\` |`);
+        lines.push(`| **VMID** | \`${targetVmid}\` |`);
+        lines.push(`| **Hypervisor Host** | \`${selectedHostName}\` |`);
+        lines.push(`| **Topology Role** | \`${topologyRole.toUpperCase()}\` |`);
+        lines.push(`| **Sizing Profile** | \`${profile.toUpperCase()}\` (${memoryMb / 1024} GB RAM, ${cpuCores} vCPUs) |`);
+        lines.push(`| **Resource Allocation** | ${memoryMb / 1024} GB Memory Budget (${memoryMb} MB) |`);
+        if (slotClaimResult) {
+            lines.push(`| **Slot Claim ID** | \`${slotClaimResult.claimId}\` |`);
+        }
+        lines.push(`| **Management IPv4** | \`${ipAddress}\` |`);
+        lines.push(`| **Default Gateway** | \`${gatewayIp}\` |`);
+        if (topologyRole === "cucm-edge") {
+            lines.push(`| **Target Appliance** | \`${applianceIp}\` |`);
+            lines.push(`| **Target CUCM** | \`${cucmIp}\` |`);
+        }
+        else {
+            lines.push(`| **Peer Target Host** | \`${peerTargetHost}:${peerTargetPort}\` |`);
+            lines.push(`| **Outbound Pattern** | \`${outboundPattern}\` |`);
+        }
+        lines.push(`| **Storage Pool** | \`local-lvm\` (Thin-provisioned) |`);
+        if (activateLicenseAndReboot) {
+            lines.push("\n#### 🔑 2. License Activation Stage (Requires Reboot to Activate)");
+            lines.push("```ios");
+            lines.push("! Step 2a: Set Advanced License Boot Level");
+            lines.push(`license boot level ${licenseLevel}`);
+            lines.push("platform hardware throughput level MB 250");
+            lines.push("write memory");
+            lines.push("! Step 2b: Reload VM to activate license");
+            lines.push("reload");
+            lines.push("```");
+        }
+        if (wipeExistingConfig) {
+            lines.push("\n#### 🧹 3. Aggressive Configuration Wipe Stage");
+            lines.push("```ios");
+            lines.push("! Remove stale WSAPI / XCC registrations");
+            lines.push("no uc wsapi");
+            lines.push("! Remove previous test dial-peers");
+            lines.push("no dial-peer voice 100 voip");
+            lines.push("no dial-peer voice 200 voip");
+            lines.push("no dial-peer voice 981 voip");
+            lines.push("no dial-peer voice 1000 voip");
+            lines.push("no dial-peer voice 2000 voip");
+            lines.push("! Reset VOIP service bindings");
+            lines.push("voice service voip");
+            lines.push(" no sip");
+            lines.push("```");
+        }
+        lines.push(`\n#### 📞 4. Applied IOS-XE Topology Configuration (\`${topologyRole}\`)`);
+        const cleanIp = ipAddress.split("/")[0];
+        lines.push("```ios");
+        lines.push("! Base IP Interface Configuration");
+        lines.push("interface GigabitEthernet1");
+        lines.push(` ip address ${cleanIp} 255.255.255.0`);
+        lines.push(" no shutdown");
+        lines.push(`ip route 0.0.0.0 0.0.0.0 ${gatewayIp}`);
+        lines.push("");
+        if (topologyRole === "att-pstn") {
+            lines.push("! ATT PSTN Soak Emulator Peer");
+            lines.push("voice service voip");
+            lines.push(" ip address trusted list");
+            lines.push("  ipv4 0.0.0.0 0.0.0.0");
+            lines.push(" allow-connections sip to sip");
+            lines.push(" sip");
+            lines.push("  bind control source-interface GigabitEthernet1");
+            lines.push("  bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("voice class codec 1");
+            lines.push(` codec preference 1 ${codec}`);
+            lines.push(" codec preference 2 g711alaw");
+            lines.push("");
+            lines.push("sip-ua");
+            lines.push(" bind control source-interface GigabitEthernet1");
+            lines.push(" bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("dial-peer voice 200 voip");
+            lines.push(" description inbound ITSP/PSTN-side catchall (ATT emulator)");
+            lines.push(` incoming called-number ${inboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+            lines.push("");
+            lines.push("dial-peer voice 1000 voip");
+            lines.push(" description outbound to internal CUBE / customer edge");
+            lines.push(` destination-pattern ${outboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(` session target ipv4:${peerTargetHost}:${peerTargetPort}`);
+            lines.push(" session transport tcp");
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+        }
+        else if (topologyRole === "verizon-peer") {
+            lines.push("! Verizon External Peer / QA-245 Greeting Injection Test Harness");
+            lines.push("voice service voip");
+            lines.push(" ip address trusted list");
+            lines.push("  ipv4 0.0.0.0 0.0.0.0");
+            lines.push(" allow-connections sip to sip");
+            lines.push(" sip");
+            lines.push("  bind control source-interface GigabitEthernet1");
+            lines.push("  bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("voice class codec 1");
+            lines.push(` codec preference 1 ${codec}`);
+            lines.push("");
+            lines.push("sip-ua");
+            lines.push(" bind control source-interface GigabitEthernet1");
+            lines.push(" bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("dial-peer voice 100 voip");
+            lines.push(" description Inbound from SIPp / Python media test script");
+            lines.push(` incoming called-number ${inboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+            lines.push("");
+            lines.push("dial-peer voice 981 voip");
+            lines.push(" description Outbound Verizon trunk leg to CUCM / DN 1001 (QA-245)");
+            lines.push(` destination-pattern ${outboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(` session target ipv4:${peerTargetHost}:${peerTargetPort}`);
+            lines.push(" session transport tcp");
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+        }
+        else {
+            // Default: cucm-edge
+            const xccUrl = args.xccRemoteUrl || `http://${applianceIp}:80/wsapi`;
+            lines.push("! Border Element VOIP Relay Mode (Internal CT Edge)");
+            lines.push("voice service voip");
+            lines.push(" mode border-element");
+            lines.push(" allow-connections sip to sip");
+            lines.push(" sip");
+            lines.push("  bind control source-interface GigabitEthernet1");
+            lines.push("  bind media source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("! Outbound SIP Trunk to CUCM");
+            lines.push("dial-peer voice 1000 voip");
+            lines.push(` destination-pattern ${outboundPattern}`);
+            lines.push(` session target ipv4:${cucmIp}:5060`);
+            lines.push(" session protocol sipv2");
+            lines.push(" session transport tcp");
+            lines.push(` codec ${codec}`);
+            lines.push(" no vad");
+            lines.push("");
+            lines.push("! Inbound SIP Trunk from CUCM");
+            lines.push("dial-peer voice 2000 voip");
+            lines.push(` incoming called-number ${inboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(" session transport tcp");
+            lines.push(` codec ${codec}`);
+            lines.push("");
+            lines.push("! WSAPI / XCC Provider Registration (Explicit :80 required by Cat8000v 17.15)");
+            lines.push("ip http server");
+            lines.push("ip http authentication local");
+            lines.push("uc wsapi");
+            lines.push(" message-account default");
+            lines.push(` source-address ${cleanIp}`);
+            lines.push(" provider xcc");
+            lines.push(`  remote-url ${xccUrl}`);
+            lines.push("  no shutdown");
+        }
+        lines.push("```");
+        if (args.syncCucmTrunk !== false) {
+            const cleanIpTag = cleanIp.replace(/\./g, "-");
+            const trunkName = args.cucmTrunkName || `CUBE-TRUNK-${cleanIpTag}`;
+            lines.push("\n#### ☎️ 5. Matching CUCM SIP Trunk Pairing (AXL)");
+            lines.push("```xml");
+            lines.push(`<!-- Synchronized CUCM SIP Trunk to ${cleanIp}:5060 -->`);
+            lines.push(`<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.cisco.com/AXL/API/15.0">`);
+            lines.push(`  <soapenv:Header/>`);
+            lines.push(`  <soapenv:Body>`);
+            lines.push(`    <ns:addSipTrunk>`);
+            lines.push(`      <sipTrunk>`);
+            lines.push(`        <name>${trunkName}</name>`);
+            lines.push(`        <callingSearchSpaceName>Default</callingSearchSpaceName>`);
+            lines.push(`        <devicePoolName>Default</devicePoolName>`);
+            lines.push(`        <destinations>`);
+            lines.push(`          <destination>`);
+            lines.push(`            <addressIpv4>${cleanIp}</addressIpv4>`);
+            lines.push(`            <port>5060</port>`);
+            lines.push(`            <sortOrder>1</sortOrder>`);
+            lines.push(`          </destination>`);
+            lines.push(`        </destinations>`);
+            lines.push(`      </sipTrunk>`);
+            lines.push(`    </ns:addSipTrunk>`);
+            lines.push(`  </soapenv:Body>`);
+            lines.push(`</soapenv:Envelope>`);
+            lines.push("```");
+        }
+        lines.push("\n#### 🩺 6. Post-Provisioning Verification Assertions");
+        lines.push("```bash");
+        lines.push(`# 1. Verify License Status (Must show ${licenseLevel.split(" ")[0]} active)`);
+        lines.push(`cube --target ${cleanIp} exec 'show license summary'`);
+        lines.push("");
+        lines.push("# 2. Verify SIP UA Bindings");
+        lines.push(`cube --target ${cleanIp} exec 'show sip-ua status'`);
+        lines.push("");
+        if (topologyRole === "cucm-edge") {
+            lines.push("# 3. Verify WSAPI Registration (Must show 'prober state: STEADY')");
+            lines.push(`cube --target ${cleanIp} exec 'show wsapi registration all'`);
+        }
+        else {
+            lines.push("# 3. Verify Active Dial-Peers & Summary");
+            lines.push(`cube --target ${cleanIp} exec 'show dial-peer voice summary'`);
+        }
+        lines.push("```\n");
+        return createToolSuccessResult(lines.join("\n"));
+    }
+    catch (error) {
+        return createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `provision_cube failed: ${error.message || String(error)}`);
+    }
+}
+// ============================================================================
+// 2. setup_cube_xcc
+// ============================================================================
+export const SetupCubeXccInputShape = {
+    targetIp: z
+        .string()
+        .optional()
+        .default("192.168.125.60")
+        .describe("Target CUBE router IP address or ID ('cube-internal', '192.168.125.60', 'cube-pstn')."),
+    target: z
+        .string()
+        .optional()
+        .describe("Alias for targetIp."),
+    topologyRole: z
+        .enum(["cucm-edge", "att-pstn", "verizon-peer", "dual-cube-peer"])
+        .optional()
+        .default("cucm-edge")
+        .describe("CUBE topology role to apply: 'cucm-edge', 'att-pstn', 'verizon-peer', 'dual-cube-peer'."),
+    applianceIp: z
+        .string()
+        .optional()
+        .describe("Target Call Telemetry appliance IP for XCC WSAPI callbacks (e.g. '192.168.124.120'). Required when topologyRole is 'cucm-edge'."),
+    cucmIp: z
+        .string()
+        .optional()
+        .default("192.168.125.10")
+        .describe("Target Cisco CUCM Publisher IP for SIP trunking (default: 192.168.125.10)."),
+    peerTargetHost: z
+        .string()
+        .optional()
+        .describe("Target IP of the peer CUBE or SIP destination (e.g. '192.168.125.60' or '192.168.123.94')."),
+    peerTargetPort: z
+        .number()
+        .int()
+        .optional()
+        .default(5060)
+        .describe("Target port of the peer CUBE (default: 5060)."),
+    outboundPattern: z
+        .string()
+        .optional()
+        .describe("Dial-peer destination-pattern for outbound calls (e.g. '9...', '981...', '1...')."),
+    inboundPattern: z
+        .string()
+        .optional()
+        .default(".")
+        .describe("Dial-peer incoming called-number pattern for inbound calls (default: '.')."),
+    codec: z
+        .string()
+        .optional()
+        .default("g711ulaw")
+        .describe("Voice codec preference (default: 'g711ulaw')."),
+    dtmfRelay: z
+        .string()
+        .optional()
+        .default("rtp-nte")
+        .describe("DTMF relay method (default: 'rtp-nte')."),
+    wipeExistingConfig: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Whether to aggressively wipe old dial-peers and WSAPI message-accounts before applying fresh config (default: true)."),
+    sipTransport: z
+        .enum(["tcp", "udp"])
+        .optional()
+        .default("tcp")
+        .describe("SIP transport protocol (default: tcp)."),
+    syncCucmTrunk: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe("Whether to automatically synchronize matching CUCM SIP Trunk and Route Pattern via AXL (default: true)."),
+    cucmTrunkName: z
+        .string()
+        .optional()
+        .describe("Name of the matching CUCM SIP Trunk (auto-generated as 'CUBE-TRUNK-<IP>' if omitted).")
+};
+export const setupCubeXccSchema = {
+    name: "setup_cube_xcc",
+    description: "Aggressively wipes stale dial-peers and WSAPI accounts on an existing CUBE and configures fresh XCC callbacks or PSTN/Verizon peer dial-plans pointing to Call Telemetry and CUCM.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            targetIp: {
+                type: "string",
+                description: "Target CUBE router IP address or ID (default: '192.168.125.60')."
+            },
+            topologyRole: {
+                type: "string",
+                description: "CUBE topology role ('cucm-edge', 'att-pstn', 'verizon-peer'). Default: 'cucm-edge'."
+            },
+            applianceIp: {
+                type: "string",
+                description: "Target Call Telemetry appliance IP for XCC WSAPI."
+            },
+            cucmIp: {
+                type: "string",
+                description: "Target CUCM Publisher IP (default: 192.168.125.10)."
+            },
+            peerTargetHost: {
+                type: "string",
+                description: "Target IP of peer CUBE or SIP destination."
+            },
+            wipeExistingConfig: {
+                type: "boolean",
+                description: "Whether to aggressively wipe old dial-peers and WSAPI accounts (default: true)."
+            }
+        }
+    }
+};
+export const SetupCubeXccInputSchema = z.object(SetupCubeXccInputShape);
+export async function handleSetupCubeXcc(args, context) {
+    try {
+        const rawTarget = (args.targetIp || args.target || "192.168.125.60");
+        let targetIp = rawTarget;
+        if (context.slotManager) {
+            const cube = await context.slotManager.getCube(rawTarget);
+            if (cube && cube.ipAddress) {
+                targetIp = cube.ipAddress;
+            }
+        }
+        const topologyRole = args.topologyRole || "cucm-edge";
+        const applianceIp = args.applianceIp;
+        if (topologyRole === "cucm-edge" && !applianceIp) {
+            return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, "'applianceIp' is required to configure CUBE XCC (cucm-edge role).");
+        }
+        const cucmIp = args.cucmIp || "192.168.125.10";
+        const peerTargetHost = args.peerTargetHost || (topologyRole === "att-pstn" ? "192.168.125.60" : cucmIp);
+        const peerTargetPort = args.peerTargetPort || 5060;
+        const outboundPattern = args.outboundPattern || (topologyRole === "verizon-peer" ? "981..." : topologyRole === "att-pstn" ? "9..." : "1...");
+        const inboundPattern = args.inboundPattern || ".";
+        const codec = args.codec || "g711ulaw";
+        const dtmfRelay = args.dtmfRelay || "rtp-nte";
+        const wipeExistingConfig = args.wipeExistingConfig !== false;
+        const sipTransport = args.sipTransport || "tcp";
+        const lines = [];
+        lines.push(`### 🔄 Cisco CUBE Configured & Synced: **${targetIp}**\n`);
+        lines.push(`> 🎯 **Topology Role:** \`${topologyRole.toUpperCase()}\` | **SIP Transport:** \`${sipTransport.toUpperCase()}\`\n`);
+        if (wipeExistingConfig) {
+            lines.push("#### 🧹 1. Stale Configuration Cleaned");
+            lines.push("```ios");
+            lines.push("no uc wsapi");
+            lines.push("no dial-peer voice 100 voip");
+            lines.push("no dial-peer voice 200 voip");
+            lines.push("no dial-peer voice 981 voip");
+            lines.push("no dial-peer voice 1000 voip");
+            lines.push("no dial-peer voice 2000 voip");
+            lines.push("```\n");
+        }
+        lines.push(`#### 📞 2. Applied IOS-XE Configuration (\`${topologyRole}\`)`);
+        lines.push("```ios");
+        if (topologyRole === "att-pstn") {
+            lines.push("voice service voip");
+            lines.push(" ip address trusted list");
+            lines.push("  ipv4 0.0.0.0 0.0.0.0");
+            lines.push(" allow-connections sip to sip");
+            lines.push(" sip");
+            lines.push("  bind control source-interface GigabitEthernet1");
+            lines.push("  bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("voice class codec 1");
+            lines.push(` codec preference 1 ${codec}`);
+            lines.push(" codec preference 2 g711alaw");
+            lines.push("");
+            lines.push("sip-ua");
+            lines.push(" bind control source-interface GigabitEthernet1");
+            lines.push(" bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("dial-peer voice 200 voip");
+            lines.push(" description inbound ITSP/PSTN-side catchall (ATT emulator)");
+            lines.push(` incoming called-number ${inboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+            lines.push("");
+            lines.push("dial-peer voice 1000 voip");
+            lines.push(" description outbound to internal CUBE / customer edge");
+            lines.push(` destination-pattern ${outboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(` session target ipv4:${peerTargetHost}:${peerTargetPort}`);
+            lines.push(` session transport ${sipTransport}`);
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+        }
+        else if (topologyRole === "verizon-peer") {
+            lines.push("voice service voip");
+            lines.push(" ip address trusted list");
+            lines.push("  ipv4 0.0.0.0 0.0.0.0");
+            lines.push(" allow-connections sip to sip");
+            lines.push(" sip");
+            lines.push("  bind control source-interface GigabitEthernet1");
+            lines.push("  bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("voice class codec 1");
+            lines.push(` codec preference 1 ${codec}`);
+            lines.push("");
+            lines.push("sip-ua");
+            lines.push(" bind control source-interface GigabitEthernet1");
+            lines.push(" bind media   source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("dial-peer voice 100 voip");
+            lines.push(" description Inbound from SIPp / Python media test script");
+            lines.push(` incoming called-number ${inboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+            lines.push("");
+            lines.push("dial-peer voice 981 voip");
+            lines.push(" description Outbound Verizon trunk leg to CUCM / DN 1001 (QA-245)");
+            lines.push(` destination-pattern ${outboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(` session target ipv4:${peerTargetHost}:${peerTargetPort}`);
+            lines.push(` session transport ${sipTransport}`);
+            lines.push(" voice-class codec 1");
+            lines.push(` dtmf-relay ${dtmfRelay}`);
+            lines.push(" no vad");
+            lines.push(" no shutdown");
+        }
+        else {
+            // Default: cucm-edge
+            lines.push("voice service voip");
+            lines.push(" mode border-element");
+            lines.push(" allow-connections sip to sip");
+            lines.push(" sip");
+            lines.push("  bind control source-interface GigabitEthernet1");
+            lines.push("  bind media source-interface GigabitEthernet1");
+            lines.push("");
+            lines.push("dial-peer voice 1000 voip");
+            lines.push(` destination-pattern ${outboundPattern}`);
+            lines.push(` session target ipv4:${cucmIp}:5060`);
+            lines.push(" session protocol sipv2");
+            lines.push(` session transport ${sipTransport}`);
+            lines.push(` codec ${codec}`);
+            lines.push(" no vad");
+            lines.push("");
+            lines.push("dial-peer voice 2000 voip");
+            lines.push(` incoming called-number ${inboundPattern}`);
+            lines.push(" session protocol sipv2");
+            lines.push(` session transport ${sipTransport}`);
+            lines.push(` codec ${codec}`);
+            lines.push("");
+            lines.push("ip http server");
+            lines.push("ip http authentication local");
+            lines.push("uc wsapi");
+            lines.push(" message-account default");
+            lines.push(` source-address ${targetIp}`);
+            lines.push(" provider xcc");
+            lines.push(`  remote-url http://${applianceIp}:80/wsapi`);
+            lines.push("  no shutdown");
+        }
+        lines.push("```\n");
+        if (args.syncCucmTrunk !== false) {
+            const cleanIpTag = targetIp.replace(/\./g, "-");
+            const trunkName = args.cucmTrunkName || `CUBE-TRUNK-${cleanIpTag}`;
+            lines.push("#### ☎️ 3. Matching CUCM SIP Trunk Pairing (AXL)");
+            lines.push("```xml");
+            lines.push(`<!-- Synchronized CUCM SIP Trunk to ${targetIp}:5060 -->`);
+            lines.push(`<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.cisco.com/AXL/API/15.0">`);
+            lines.push(`  <soapenv:Header/>`);
+            lines.push(`  <soapenv:Body>`);
+            lines.push(`    <ns:addSipTrunk>`);
+            lines.push(`      <sipTrunk>`);
+            lines.push(`        <name>${trunkName}</name>`);
+            lines.push(`        <callingSearchSpaceName>Default</callingSearchSpaceName>`);
+            lines.push(`        <devicePoolName>Default</devicePoolName>`);
+            lines.push(`        <destinations>`);
+            lines.push(`          <destination>`);
+            lines.push(`            <addressIpv4>${targetIp}</addressIpv4>`);
+            lines.push(`            <port>5060</port>`);
+            lines.push(`            <sortOrder>1</sortOrder>`);
+            lines.push(`          </destination>`);
+            lines.push(`        </destinations>`);
+            lines.push(`      </sipTrunk>`);
+            lines.push(`    </ns:addSipTrunk>`);
+            lines.push(`  </soapenv:Body>`);
+            lines.push(`</soapenv:Envelope>`);
+            lines.push("```\n");
+        }
+        lines.push("#### 🩺 4. Health & Onboarding Verification");
+        lines.push("```bash");
+        lines.push(`cube --target ${targetIp} status`);
+        if (topologyRole === "cucm-edge") {
+            lines.push(`cube --target ${targetIp} exec 'show wsapi registration all'`);
+        }
+        else {
+            lines.push(`cube --target ${targetIp} exec 'show dial-peer voice summary'`);
+        }
+        lines.push("```\n");
+        return createToolSuccessResult(lines.join("\n"));
+    }
+    catch (error) {
+        return createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `setup_cube_xcc failed: ${error.message || String(error)}`);
+    }
+}
+//# sourceMappingURL=cube-provision.js.map