@calltelemetry/ct-lab-mcp 0.8.58 → 0.8.60

package/dist/src/tools/claim-first.js

@@ -0,0 +1,149 @@
+/**
+ * Claim-first provisioning (REL-1388, ADR 0779).
+ *
+ * The appliance operator destroys every guest no ApplianceClaim names within
+ * about five minutes. Any tool that creates a guest must therefore create the
+ * claim BEFORE the guest exists and remove it again if creation fails; a tool
+ * that cannot know which guest it will create refuses instead of silently
+ * creating an unclaimed one. Runbook:
+ * plugins/ct-lab/skills/ct-lab-mcp/references/appliance-claim-runbook.md
+ */
+import { ProxmoxErrorCode, createToolErrorResult } from "../types/mcp.js";
+import { buildApplianceClaimManifest, CreateApplianceClaimInputSchema, handleCreateApplianceClaim, handleDeleteApplianceClaim, patchApplianceClaimSpec, } from "./appliance-claim-tools.js";
+import { canonicalMode } from "./canonical-guard.js";
+export const CLAIM_FIRST_RUNBOOK = "plugins/ct-lab/skills/ct-lab-mcp/references/appliance-claim-runbook.md";
+const text = (r) => {
+    const block = r.content?.[0];
+    return block && block.type === "text" ? block.text : "";
+};
+/** Production hooks: bare ApplianceClaims through the same handlers the claim tools use. */
+export function createClaimFirstHooks() {
+    return {
+        async create(request) {
+            const claimName = claimNameFor(request);
+            const input = {
+                name: claimName,
+                node: request.node,
+                vmid: request.vmid,
+                vmName: request.vmName,
+                profile: "bare",
+                ttlHours: request.ttlHours,
+                linearIssue: request.linearIssue,
+                dryRun: false,
+            };
+            const res = await handleCreateApplianceClaim(input);
+            if (res.isError) {
+                if (/already ?exists|AlreadyExists|\(409\)/i.test(text(res))) {
+                    return { claimName, created: false };
+                }
+                throw new Error(text(res));
+            }
+            return { claimName, created: true };
+        },
+        async attachVmid(claimName, vmid) {
+            await patchApplianceClaimSpec(claimName, { vmid });
+        },
+        async remove(claimName) {
+            const res = await handleDeleteApplianceClaim({ name: claimName });
+            if (res.isError)
+                throw new Error(text(res));
+        },
+    };
+}
+export function claimNameFor(request) {
+    const issue = (request.linearIssue ?? "lab").toLowerCase().replace(/[^a-z0-9-]/g, "");
+    const tail = request.vmid ??
+        (request.vmName ?? "guest").toLowerCase().replace(/[^a-z0-9-]/g, "-").slice(0, 30);
+    return `claim-${issue}-${tail}`.replace(/-+$/g, "").slice(0, 63);
+}
+/** Canonical claim node for a hypervisor host id, or null when the operator would not track it. */
+export function claimNodeForHost(host) {
+    if (typeof host !== "string")
+        return null;
+    const h = host.trim().toLowerCase();
+    if (h === "proxmox-lab" || h === "proxmox")
+        return "proxmox";
+    if (h === "proxmox-mini" || h === "proxmox-minis-lab" || h === "minis")
+        return "minis";
+    if (h.startsWith("esxi"))
+        return "esxi";
+    return null;
+}
+export function ttlHoursFrom(args) {
+    const num = (v) => (typeof v === "number" && Number.isFinite(v) && v > 0 ? v : undefined);
+    const hours = num(args.ttlHours) ?? (num(args.ttlMinutes) ?? num(args.durationMinutes) ?? 24 * 60) / 60;
+    return Math.min(8760, Math.max(1, Math.ceil(hours)));
+}
+export function refusal(tool, why) {
+    return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, `${tool} refused: ${why} The strict appliance operator destroys every guest no ApplianceClaim names, so ${tool} will not create an unclaimed guest. Follow ${CLAIM_FIRST_RUNBOOK} (claim first; claimed_import_qcow or create_appliance_claim).`, { operation: tool, runbook: CLAIM_FIRST_RUNBOOK });
+}
+/**
+ * Wraps a canonical guest-creating apply: the claim is created first, the
+ * operation runs, and the claim is removed again when it fails. Plans create
+ * nothing and pass straight through.
+ */
+export async function claimFirstCanonicalApply(d, run, hooks = d.context.claimFirst) {
+    if (!d.apply || (!d.alwaysClaim && !canonicalMode(d.context)))
+        return run();
+    if (!hooks) {
+        return refusal(d.tool, "claim-first hooks are not available on this server instance.");
+    }
+    const node = claimNodeForHost(d.hostAssetId);
+    if (!node) {
+        return refusal(d.tool, `hostAssetId '${String(d.hostAssetId)}' does not map to a node the operator tracks (proxmox-lab, proxmox-minis-lab, esxi).`);
+    }
+    const vmidRaw = typeof d.vmid === "string" ? Number(d.vmid) : d.vmid;
+    const vmid = typeof vmidRaw === "number" && Number.isInteger(vmidRaw) && vmidRaw > 0 ? vmidRaw : undefined;
+    const vmName = typeof d.vmName === "string" && d.vmName ? d.vmName : undefined;
+    if (vmid === undefined && !(d.allowNameOnly && vmName)) {
+        return refusal(d.tool, d.allowNameOnly
+            ? "apply needs claimVmid or claimVmName so the claim can name the guest."
+            : "apply needs an explicit vmid so the claim can name the guest before it exists (pick a free VMID with list_inventory).");
+    }
+    const linearIssue = typeof d.linearIssue === "string" ? d.linearIssue : undefined;
+    const request = { node, vmid, vmName, ttlHours: ttlHoursFrom(d.ttl), linearIssue };
+    // Validate the manifest before touching anything.
+    const parsed = CreateApplianceClaimInputSchema.safeParse({
+        name: claimNameFor(request), node, vmid, vmName, profile: "bare", ttlHours: request.ttlHours, linearIssue, dryRun: true,
+    });
+    const built = parsed.success ? buildApplianceClaimManifest(parsed.data) : { error: parsed.error.message };
+    if ("error" in built)
+        return refusal(d.tool, `the claim for this guest is invalid: ${built.error}`);
+    let ref;
+    try {
+        ref = await hooks.create(request);
+    }
+    catch (err) {
+        return refusal(d.tool, `the claim could not be created (${err?.message ?? err}); nothing was provisioned.`);
+    }
+    let result;
+    try {
+        result = await run();
+    }
+    catch (err) {
+        result = createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `${d.tool} threw: ${err?.message ?? err}`);
+    }
+    if (result.isError && ref.created) {
+        try {
+            await hooks.remove(ref.claimName);
+        }
+        catch (err) {
+            return createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `${text(result)}\n\nClaim '${ref.claimName}' could NOT be removed (${err?.message ?? err}); delete it with delete_appliance_claim.`, { operation: d.tool, claimName: ref.claimName });
+        }
+    }
+    return result;
+}
+/** Legacy (non-canonical) handlers know the guest NAME before they create it. Claim it by name. */
+export async function claimLegacyGuest(context, guest) {
+    const hooks = context.claimFirst;
+    if (!hooks)
+        return undefined;
+    const node = claimNodeForHost(guest.hostId);
+    if (!node) {
+        throw new Error(`host '${String(guest.hostId)}' is not tracked by the appliance operator; refusing to create an unclaimed guest (${CLAIM_FIRST_RUNBOOK}).`);
+    }
+    return hooks.create({ node, vmName: guest.vmName, vmid: guest.vmid, ttlHours: guest.ttlHours, linearIssue: guest.linearIssue });
+}
+const NODE_HOST = { proxmox: "proxmox-lab", minis: "proxmox-minis-lab", esxi: "esxi" };
+export const hostForClaimNode = (node) => NODE_HOST[node];
+//# sourceMappingURL=claim-first.js.map

package/dist/src/tools/claim-first.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-first.js","sourceRoot":"","sources":["../../../src/tools/claim-first.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAkB,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAEL,2BAA2B,EAC3B,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,wEAAwE,CAAC;AAsB3E,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAU,EAAE;IACzC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG;gBACZ,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,MAAe;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,MAAM,EAAE,KAAK;aACd,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,IAAI,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7D,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACvC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI;YAC9B,MAAM,uBAAuB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,IAAI,GAAG,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA0B;IACrD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACtF,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,OAAO,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7D,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACvF,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAI5B;IACC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACxG,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAW;IAC/C,OAAO,qBAAqB,CAC1B,gBAAgB,CAAC,gBAAgB,EACjC,GAAG,IAAI,aAAa,GAAG,mFAAmF,IAAI,+CAA+C,mBAAmB,gEAAgE,EAChP,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAClD,CAAC;AACJ,CAAC;AAiBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,CAA2B,EAC3B,GAAkC,EAClC,QAAqC,CAAC,CAAC,OAAO,CAAC,UAAU;IAEzD,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,GAAG,EAAE,CAAC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,sFAAsF,CAAC,CAAC;IACtJ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,EAAE,CAAC;QACvD,OAAO,OAAO,CACZ,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,aAAa;YACb,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,uHAAuH,CAC5H,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,OAAO,GAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;IAEtG,kDAAkD;IAClD,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC;QACvD,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI;KACxH,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC1G,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,wCAAwC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAEpG,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,mCAAmC,GAAG,EAAE,OAAO,IAAI,GAAG,6BAA6B,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,WAAW,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,qBAAqB,CAC1B,gBAAgB,CAAC,kBAAkB,EACnC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC,SAAS,2BAA2B,GAAG,EAAE,OAAO,IAAI,GAAG,2CAA2C,EACnI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EACpB,KAAiG;IAEjG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,SAAS,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sFAAsF,mBAAmB,IAAI,CAC3I,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAClI,CAAC;AAED,MAAM,SAAS,GAA8B,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC"}

package/dist/src/tools/claim-lifecycle.d.ts

@@ -37,19 +37,19 @@ export declare const RenewClaimInputSchema: z.ZodObject<{
     allowRunning: boolean;
     linearIssue?: string | undefined;
     leaseId?: string | undefined;
+    ttlHours?: number | undefined;
     assetId?: string | undefined;
     operationId?: string | undefined;
     receiptFile?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
 }, {
     linearIssue?: string | undefined;
     leaseId?: string | undefined;
+    ttlHours?: number | undefined;
     assetId?: string | undefined;
     operationId?: string | undefined;
     apply?: boolean | undefined;
     receiptFile?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     replaceClosedClaim?: boolean | undefined;
     allowRunning?: boolean | undefined;
@@ -83,20 +83,20 @@ export declare const TransferClaimInputSchema: z.ZodObject<{
     recoverExpiredRunning: boolean;
     linearIssue?: string | undefined;
     leaseId?: string | undefined;
+    ttlHours?: number | undefined;
     assetId?: string | undefined;
     operationId?: string | undefined;
     receiptFile?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     toLinearIssue?: string | undefined;
 }, {
     linearIssue?: string | undefined;
     leaseId?: string | undefined;
+    ttlHours?: number | undefined;
     assetId?: string | undefined;
     operationId?: string | undefined;
     apply?: boolean | undefined;
     receiptFile?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     toLinearIssue?: string | undefined;
     recoverExpiredRunning?: boolean | undefined;

package/dist/src/tools/claimed-import-qcow.d.ts

@@ -0,0 +1,117 @@
+/**
+ * MCP tool: claimed_import_qcow
+ *
+ * The one sanctioned path from a published (or private candidate) appliance
+ * image to a CLAIMED Proxmox guest (REL-1388, ADR 0779).
+ *
+ * The strict appliance operator destroys every guest no ApplianceClaim names, on
+ * a 5-minute pass. A plain proxmox_import_qcow guest has no claim and would be
+ * destroyed minutes after it boots. This tool therefore claims FIRST:
+ *
+ *   1. validate everything (import contract + claim contract) before any mutation
+ *   2. create a profile=bare ApplianceClaim naming node + VMID + VM name
+ *      (no seed, no license, no bootstrap: the imported image stays exactly as
+ *      published), with a finite TTL
+ *   3. run the canonical `lab-inventory vm import-qcow` apply (digest-bound,
+ *      leased, receipts) through proxmox_import_qcow
+ *   4. if the import fails, delete the claim again so nothing is left half-owned
+ *
+ * Dry-run (the default) runs the canonical import PLAN and previews the claim
+ * manifest without creating anything. Renew with renew_appliance_claim, release
+ * with delete_appliance_claim (the operator then destroys the guest).
+ */
+import { z } from "zod";
+import { CallToolResult } from "../types/mcp.js";
+import { ToolContext } from "./list-hosts.js";
+export declare const ClaimedImportQcowInputObjectSchema: z.ZodObject<{
+    readonly assetId: z.ZodString;
+    readonly hostAssetId: z.ZodString;
+    readonly linearIssue: z.ZodString;
+    readonly imageUrl: z.ZodString;
+    readonly imageSha256: z.ZodString;
+    readonly operationId: z.ZodString;
+    readonly receiptFile: z.ZodString;
+    readonly vmid: z.ZodOptional<z.ZodNumber>;
+    readonly vmPrefix: z.ZodOptional<z.ZodString>;
+    readonly memoryMb: z.ZodOptional<z.ZodNumber>;
+    readonly vcpus: z.ZodOptional<z.ZodNumber>;
+    readonly diskGb: z.ZodOptional<z.ZodNumber>;
+    readonly storage: z.ZodOptional<z.ZodString>;
+    readonly importStorage: z.ZodOptional<z.ZodString>;
+    readonly network: z.ZodOptional<z.ZodString>;
+    readonly vlanTag: z.ZodOptional<z.ZodNumber>;
+    readonly purpose: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    readonly ttlHours: z.ZodOptional<z.ZodNumber>;
+    readonly apply: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    readonly confirmAssetId: z.ZodOptional<z.ZodString>;
+    readonly confirmVmPrefix: z.ZodOptional<z.ZodString>;
+    readonly confirmVmid: z.ZodOptional<z.ZodNumber>;
+    readonly confirmImageSha256: z.ZodOptional<z.ZodString>;
+} & {
+    node: z.ZodEnum<["minis", "proxmox"]>;
+    claimName: z.ZodOptional<z.ZodString>;
+    claimTtlHours: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    node: "proxmox" | "minis";
+    linearIssue: string;
+    purpose: string;
+    assetId: string;
+    hostAssetId: string;
+    operationId: string;
+    apply: boolean;
+    receiptFile: string;
+    imageUrl: string;
+    imageSha256: string;
+    storage?: string | undefined;
+    memoryMb?: number | undefined;
+    vmid?: number | undefined;
+    network?: string | undefined;
+    ttlHours?: number | undefined;
+    claimName?: string | undefined;
+    diskGb?: number | undefined;
+    importStorage?: string | undefined;
+    confirmAssetId?: string | undefined;
+    confirmVmPrefix?: string | undefined;
+    confirmVmid?: number | undefined;
+    vcpus?: number | undefined;
+    vlanTag?: number | undefined;
+    vmPrefix?: string | undefined;
+    confirmImageSha256?: string | undefined;
+    claimTtlHours?: number | undefined;
+}, {
+    node: "proxmox" | "minis";
+    linearIssue: string;
+    assetId: string;
+    hostAssetId: string;
+    operationId: string;
+    receiptFile: string;
+    imageUrl: string;
+    imageSha256: string;
+    storage?: string | undefined;
+    memoryMb?: number | undefined;
+    vmid?: number | undefined;
+    network?: string | undefined;
+    purpose?: string | undefined;
+    ttlHours?: number | undefined;
+    claimName?: string | undefined;
+    diskGb?: number | undefined;
+    importStorage?: string | undefined;
+    apply?: boolean | undefined;
+    confirmAssetId?: string | undefined;
+    confirmVmPrefix?: string | undefined;
+    confirmVmid?: number | undefined;
+    vcpus?: number | undefined;
+    vlanTag?: number | undefined;
+    vmPrefix?: string | undefined;
+    confirmImageSha256?: string | undefined;
+    claimTtlHours?: number | undefined;
+}>;
+export type ClaimedImportQcowRawInput = z.input<typeof ClaimedImportQcowInputObjectSchema>;
+export interface ClaimedImportDeps {
+    createClaim: (args: unknown) => Promise<CallToolResult>;
+    deleteClaim: (args: unknown) => Promise<CallToolResult>;
+    importQcow: (args: unknown, context: ToolContext) => Promise<CallToolResult>;
+}
+export declare function handleClaimedImportQcow(rawArgs: ClaimedImportQcowRawInput | undefined, context: ToolContext, deps?: ClaimedImportDeps): Promise<CallToolResult>;
+export declare const CLAIMED_IMPORT_QCOW_TOOL_DESCRIPTION = "Import a published or private-candidate appliance QCOW2 as a Proxmox lab guest AND claim it, in one sanctioned step. The strict appliance operator destroys every guest no ApplianceClaim names within ~5 minutes, so this tool creates a profile=bare ApplianceClaim (no seed, no license, no bootstrap; names node + VMID + VM name; finite TTL) FIRST, then runs the canonical lab-inventory vm import-qcow apply (digest-bound, leased, receipted), and deletes the claim again if the import fails. Dry-run is the default: it runs the canonical import plan and previews the claim. Requires vmid, vmPrefix and node (minis|proxmox, matching hostAssetId). Renew with renew_appliance_claim; release with delete_appliance_claim.";
+//# sourceMappingURL=claimed-import-qcow.d.ts.map

package/dist/src/tools/claimed-import-qcow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claimed-import-qcow.d.ts","sourceRoot":"","sources":["../../../src/tools/claimed-import-qcow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAA2C,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAgB9C,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBpC,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE3F,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC9E;AAoBD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,yBAAyB,GAAG,SAAS,EAC9C,OAAO,EAAE,WAAW,EACpB,IAAI,GAAE,iBAA+B,GACpC,OAAO,CAAC,cAAc,CAAC,CAkIzB;AAED,eAAO,MAAM,oCAAoC,8sBAC4pB,CAAC"}

package/dist/src/tools/claimed-import-qcow.js

@@ -0,0 +1,171 @@
+/**
+ * MCP tool: claimed_import_qcow
+ *
+ * The one sanctioned path from a published (or private candidate) appliance
+ * image to a CLAIMED Proxmox guest (REL-1388, ADR 0779).
+ *
+ * The strict appliance operator destroys every guest no ApplianceClaim names, on
+ * a 5-minute pass. A plain proxmox_import_qcow guest has no claim and would be
+ * destroyed minutes after it boots. This tool therefore claims FIRST:
+ *
+ *   1. validate everything (import contract + claim contract) before any mutation
+ *   2. create a profile=bare ApplianceClaim naming node + VMID + VM name
+ *      (no seed, no license, no bootstrap: the imported image stays exactly as
+ *      published), with a finite TTL
+ *   3. run the canonical `lab-inventory vm import-qcow` apply (digest-bound,
+ *      leased, receipts) through proxmox_import_qcow
+ *   4. if the import fails, delete the claim again so nothing is left half-owned
+ *
+ * Dry-run (the default) runs the canonical import PLAN and previews the claim
+ * manifest without creating anything. Renew with renew_appliance_claim, release
+ * with delete_appliance_claim (the operator then destroys the guest).
+ */
+import { z } from "zod";
+import { ProxmoxErrorCode, createToolErrorResult } from "../types/mcp.js";
+import { canonicalMode } from "./canonical-guard.js";
+import { reservedIdentityError } from "./sha-channel.js";
+import { ImportQcowInputObjectSchema, ImportQcowInputSchema, handleProxmoxImportQcow, } from "./import-qcow.js";
+import { buildApplianceClaimManifest, handleCreateApplianceClaim, handleDeleteApplianceClaim, normalizeClaimNode, CreateApplianceClaimInputSchema, } from "./appliance-claim-tools.js";
+export const ClaimedImportQcowInputObjectSchema = ImportQcowInputObjectSchema.extend({
+    node: z
+        .enum(["minis", "proxmox"])
+        .describe("Proxmox node the guest lands on, as the operator tracks claims: 'minis' (proxmox-minis-lab / proxmox-mini) or 'proxmox' (proxmox-lab). Must match hostAssetId."),
+    claimName: z
+        .string()
+        .trim()
+        .min(1)
+        .max(63)
+        .regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/, "must be a DNS-1123 label")
+        .optional()
+        .describe("ApplianceClaim name (default: claim-<linearIssue>-<vmid>)."),
+    claimTtlHours: z
+        .number()
+        .int()
+        .min(1)
+        .max(8760)
+        .optional()
+        .describe("Claim TTL in hours; the operator destroys the guest when it elapses (default: ttlHours, else 24). Renew with renew_appliance_claim."),
+}).strict();
+const defaultDeps = {
+    createClaim: (args) => handleCreateApplianceClaim(args),
+    deleteClaim: (args) => handleDeleteApplianceClaim(args),
+    importQcow: (args, context) => handleProxmoxImportQcow(args, context),
+};
+function textOf(result) {
+    const block = result.content?.[0];
+    return block && block.type === "text" ? block.text : "";
+}
+function fail(message, details) {
+    return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, message, {
+        operation: "claimed_import_qcow",
+        ...details,
+    });
+}
+export async function handleClaimedImportQcow(rawArgs, context, deps = defaultDeps) {
+    const parsed = ClaimedImportQcowInputObjectSchema.safeParse(rawArgs ?? {});
+    if (!parsed.success) {
+        return fail(parsed.error.errors.map((e) => `${e.path.join(".")}: ${e.message}`).join("; "));
+    }
+    const { node, claimName, claimTtlHours, ...importArgs } = parsed.data;
+    // The import contract (apply confirmations, URL allowlist, ...) is validated
+    // up front so a bad request never reaches the claim step.
+    const importCheck = ImportQcowInputSchema.safeParse(importArgs);
+    if (!importCheck.success) {
+        return fail(importCheck.error.errors.map((e) => `${e.path.join(".")}: ${e.message}`).join("; "));
+    }
+    const imp = importCheck.data;
+    if (imp.vmid === undefined || !imp.vmPrefix) {
+        return fail("claimed_import_qcow needs both vmid and vmPrefix: the claim names the guest by node + VMID + VM name, and the canonical CLI names the guest exactly vmPrefix.");
+    }
+    const reserved = reservedIdentityError(imp.vmid);
+    if (reserved)
+        return fail(reserved);
+    const hostNode = normalizeClaimNode(imp.hostAssetId);
+    if (hostNode && hostNode !== node) {
+        return fail(`node '${node}' does not match hostAssetId '${imp.hostAssetId}' (${hostNode}); the claim would not protect the guest.`);
+    }
+    if (!canonicalMode(context)) {
+        return createToolErrorResult("CANONICAL_OPERATION_REQUIRES_BRIDGE", "claimed_import_qcow requires canonical lab mode (image qualification, digest verification and guest evidence are owned by lab-inventory vm import-qcow); no claim was created.", { operation: "claimed_import_qcow" });
+    }
+    const claimInput = {
+        name: claimName ?? `claim-${imp.linearIssue.toLowerCase()}-${imp.vmid}`,
+        targetIp: undefined,
+        node,
+        vmid: imp.vmid,
+        vmName: imp.vmPrefix,
+        profile: "bare",
+        ttlHours: claimTtlHours ?? imp.ttlHours ?? 24,
+        linearIssue: imp.linearIssue,
+        dryRun: !imp.apply,
+    };
+    const claimParsed = CreateApplianceClaimInputSchema.safeParse(claimInput);
+    if (!claimParsed.success) {
+        return fail(claimParsed.error.errors.map((e) => `claim.${e.path.join(".")}: ${e.message}`).join("; "));
+    }
+    const built = buildApplianceClaimManifest(claimParsed.data);
+    if ("error" in built)
+        return fail(built.error);
+    // Plan: canonical import plan + claim preview. Nothing is created.
+    if (!imp.apply) {
+        const plan = await deps.importQcow(importArgs, context);
+        if (plan.isError)
+            return plan;
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        success: true,
+                        mode: "plan",
+                        claim: { name: built.claimName, manifest: built.manifest },
+                        import: textOf(plan),
+                        next: "Re-run with apply=true and the confirm* fields. The claim is created first, then the import runs; a failed import deletes the claim again.",
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    // Apply: claim FIRST so the strict operator never sees an unclaimed guest.
+    const created = await deps.createClaim({ ...claimInput, dryRun: false });
+    if (created.isError) {
+        return createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `claim creation failed; the image was NOT imported: ${textOf(created)}`, { operation: "claimed_import_qcow", claimName: built.claimName });
+    }
+    let imported;
+    try {
+        imported = await deps.importQcow(importArgs, context);
+    }
+    catch (err) {
+        imported = createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `import threw: ${err?.message ?? err}`);
+    }
+    if (imported.isError) {
+        // Do not leave a claim holding a guest that never came up. Any partial guest
+        // is unclaimed after this and is reclaimed by the strict operator; the
+        // canonical CLI journal keeps the evidence.
+        const released = await deps.deleteClaim({ name: built.claimName, namespace: built.manifest.metadata.namespace });
+        return createToolErrorResult(ProxmoxErrorCode.UPSTREAM_API_ERROR, `import failed; claim '${built.claimName}' was ${released.isError ? "NOT deleted (delete it manually)" : "deleted"}. ${textOf(imported)}`, { operation: "claimed_import_qcow", claimName: built.claimName });
+    }
+    return {
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify({
+                    success: true,
+                    mode: "apply",
+                    claim: {
+                        name: built.claimName,
+                        namespace: built.manifest.metadata.namespace,
+                        profile: "bare",
+                        node,
+                        vmid: imp.vmid,
+                        vmName: imp.vmPrefix,
+                        ttlHours: claimInput.ttlHours,
+                    },
+                    import: textOf(imported),
+                    lifecycle: "The guest is claimed (no seed, no license, no bootstrap) and lives for ttlHours. renew_appliance_claim extends it; delete_appliance_claim makes the operator destroy it.",
+                }, null, 2),
+            },
+        ],
+    };
+}
+export const CLAIMED_IMPORT_QCOW_TOOL_DESCRIPTION = "Import a published or private-candidate appliance QCOW2 as a Proxmox lab guest AND claim it, in one sanctioned step. The strict appliance operator destroys every guest no ApplianceClaim names within ~5 minutes, so this tool creates a profile=bare ApplianceClaim (no seed, no license, no bootstrap; names node + VMID + VM name; finite TTL) FIRST, then runs the canonical lab-inventory vm import-qcow apply (digest-bound, leased, receipted), and deletes the claim again if the import fails. Dry-run is the default: it runs the canonical import plan and previews the claim. Requires vmid, vmPrefix and node (minis|proxmox, matching hostAssetId). Renew with renew_appliance_claim; release with delete_appliance_claim.";
+//# sourceMappingURL=claimed-import-qcow.js.map

package/dist/src/tools/claimed-import-qcow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claimed-import-qcow.js","sourceRoot":"","sources":["../../../src/tools/claimed-import-qcow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE1F,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,CAAC,MAAM,kCAAkC,GAAG,2BAA2B,CAAC,MAAM,CAAC;IACnF,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;SAC1B,QAAQ,CACP,gKAAgK,CACjK;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,mCAAmC,EAAE,0BAA0B,CAAC;SACtE,QAAQ,EAAE;SACV,QAAQ,CAAC,4DAA4D,CAAC;IACzE,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,qIAAqI,CAAC;CACnJ,CAAC,CAAC,MAAM,EAAE,CAAC;AAUZ,MAAM,WAAW,GAAsB;IACrC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;IACvD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;IACvD,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAW,EAAE,OAAO,CAAC;CAC7E,CAAC;AAEF,SAAS,MAAM,CAAC,MAAsB;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,OAAe,EAAE,OAAiC;IAC9D,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,EAAE;QACvE,SAAS,EAAE,qBAAqB;QAChC,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA8C,EAC9C,OAAoB,EACpB,OAA0B,WAAW;IAErC,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAEtE,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC;IAE7B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,+JAA+J,CAAC,CAAC;IAC/K,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,IAAI,iCAAiC,GAAG,CAAC,WAAW,MAAM,QAAQ,2CAA2C,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAC1B,qCAAqC,EACrC,gLAAgL,EAChL,EAAE,SAAS,EAAE,qBAAqB,EAAE,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,SAAS,IAAI,SAAS,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE;QACvE,QAAQ,EAAE,SAAS;QACnB,IAAI;QACJ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,QAAQ;QACpB,OAAO,EAAE,MAAe;QACxB,QAAQ,EAAE,aAAa,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE;QAC7C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK;KACnB,CAAC;IACF,MAAM,WAAW,GAAG,+BAA+B,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,KAAK,GAAG,2BAA2B,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/C,mEAAmE;IACnE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;wBAC1D,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;wBACpB,IAAI,EAAE,4IAA4I;qBACnJ,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,qBAAqB,CAC1B,gBAAgB,CAAC,kBAAkB,EACnC,sDAAsD,MAAM,CAAC,OAAO,CAAC,EAAE,EACvE,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,QAAQ,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,iBAAiB,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,6EAA6E;QAC7E,uEAAuE;QACvE,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACjH,OAAO,qBAAqB,CAC1B,gBAAgB,CAAC,kBAAkB,EACnC,yBAAyB,KAAK,CAAC,SAAS,SAAS,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,EACzI,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,KAAK,CAAC,SAAS;wBACrB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS;wBAC5C,OAAO,EAAE,MAAM;wBACf,IAAI;wBACJ,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,MAAM,EAAE,GAAG,CAAC,QAAQ;wBACpB,QAAQ,EAAE,UAAU,CAAC,QAAQ;qBAC9B;oBACD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;oBACxB,SAAS,EACP,0KAA0K;iBAC7K,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oCAAoC,GAC/C,2sBAA2sB,CAAC"}

package/dist/src/tools/cube-provision.d.ts

@@ -128,10 +128,10 @@ export declare const ProvisionCubeInputSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     host: string;
     vlan: number;
+    profile: "standard" | "minimal" | "performance";
     wipeExistingConfig: boolean;
     activateLicenseAndReboot: boolean;
     licenseLevel: string;
-    profile: "standard" | "minimal" | "performance";
     topologyRole: "cucm-edge" | "att-pstn" | "verizon-peer" | "dual-cube-peer";
     peerTargetPort: number;
     inboundPattern: string;
@@ -165,6 +165,7 @@ export declare const ProvisionCubeInputSchema: z.ZodObject<{
     vlan?: number | undefined;
     cpuCores?: number | undefined;
     purpose?: string | undefined;
+    profile?: "standard" | "minimal" | "performance" | undefined;
     gatewayIp?: string | undefined;
     applianceIp?: string | undefined;
     xccRemoteUrl?: string | undefined;
@@ -173,7 +174,6 @@ export declare const ProvisionCubeInputSchema: z.ZodObject<{
     wipeExistingConfig?: boolean | undefined;
     activateLicenseAndReboot?: boolean | undefined;
     licenseLevel?: string | undefined;
-    profile?: "standard" | "minimal" | "performance" | undefined;
     topologyRole?: "cucm-edge" | "att-pstn" | "verizon-peer" | "dual-cube-peer" | undefined;
     peerTargetHost?: string | undefined;
     peerTargetPort?: number | undefined;

package/dist/src/tools/factory-reset.d.ts

@@ -32,9 +32,9 @@ export declare const FactoryResetInputSchema: z.ZodObject<{
     timeoutMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
     targetIp: string;
-    timeoutMs: number;
-    licenseDays: number;
     licenseTier: string;
+    licenseDays: number;
+    timeoutMs: number;
     applyLicense: boolean;
     runMigrations: boolean;
     assertHealth: boolean;
@@ -42,9 +42,9 @@ export declare const FactoryResetInputSchema: z.ZodObject<{
 }, {
     targetIp: string;
     version?: string | undefined;
-    timeoutMs?: number | undefined;
-    licenseDays?: number | undefined;
     licenseTier?: string | undefined;
+    licenseDays?: number | undefined;
+    timeoutMs?: number | undefined;
     applyLicense?: boolean | undefined;
     runMigrations?: boolean | undefined;
     assertHealth?: boolean | undefined;

package/dist/src/tools/import-qcow.d.ts

@@ -97,9 +97,9 @@ export declare const ImportQcowInputObjectSchema: z.ZodObject<{
     memoryMb?: number | undefined;
     vmid?: number | undefined;
     network?: string | undefined;
+    ttlHours?: number | undefined;
     diskGb?: number | undefined;
     importStorage?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
@@ -120,10 +120,10 @@ export declare const ImportQcowInputObjectSchema: z.ZodObject<{
     vmid?: number | undefined;
     network?: string | undefined;
     purpose?: string | undefined;
+    ttlHours?: number | undefined;
     diskGb?: number | undefined;
     importStorage?: string | undefined;
     apply?: boolean | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
@@ -170,9 +170,9 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     memoryMb?: number | undefined;
     vmid?: number | undefined;
     network?: string | undefined;
+    ttlHours?: number | undefined;
     diskGb?: number | undefined;
     importStorage?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
@@ -193,10 +193,10 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     vmid?: number | undefined;
     network?: string | undefined;
     purpose?: string | undefined;
+    ttlHours?: number | undefined;
     diskGb?: number | undefined;
     importStorage?: string | undefined;
     apply?: boolean | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
@@ -218,9 +218,9 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     memoryMb?: number | undefined;
     vmid?: number | undefined;
     network?: string | undefined;
+    ttlHours?: number | undefined;
     diskGb?: number | undefined;
     importStorage?: string | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
@@ -241,10 +241,10 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     vmid?: number | undefined;
     network?: string | undefined;
     purpose?: string | undefined;
+    ttlHours?: number | undefined;
     diskGb?: number | undefined;
     importStorage?: string | undefined;
     apply?: boolean | undefined;
-    ttlHours?: number | undefined;
     confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;

package/dist/src/tools/index.d.ts

@@ -54,6 +54,7 @@ export * from "./host-migrate-vm.js";
 export * from "./sandbox-tools.js";
 export * from "./fleet-metrics.js";
 export * from "./appliance-claim-tools.js";
+export * from "./claimed-import-qcow.js";
 export * from "./sideload-runner.js";
 export * from "./appliance-id.js";
 export * from "./verify-demo.js";

package/dist/src/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAIL,WAAW,EACZ,MAAM,iBAAiB,CAAC;AA8RzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AAYjC,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CA61BjF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAIL,WAAW,EACZ,MAAM,iBAAiB,CAAC;AAuSzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AAYjC,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,CA66BjF"}