@calltelemetry/ct-lab-mcp 0.8.69 → 0.8.71

package/dist/src/tools/thin-storage-policy.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Thin-only guest disk policy (REL-1588, operator decision 2026-10-08:
+ * "Never thick disks").
+ *
+ * Every guest disk this server creates, clones or imports on Proxmox must live
+ * on thin-provisioned storage: `lvmthin` always, `zfspool` only when the pool
+ * is proven `sparse`. Anything else (plain `lvm`, `dir`, `nfs`, `iscsi`,
+ * `cifs`, `rbd`, an unknown or undeterminable type) is REFUSED with the stable
+ * code THICK_STORAGE_REFUSED before the mutating canonical call is made.
+ *
+ * Fail closed: when the storage type cannot be proven (host unreachable,
+ * malformed receipt, pool missing from the host, ...) the request is refused
+ * with the same code and a message that says the type could not be determined.
+ *
+ * Scope note: this module owns the TypeScript layer only. The canonical shell
+ * transports in ct-meta carry their own independent guard
+ * (`proxmox-thin-storage.sh`); this layer refuses earlier and with a typed
+ * error, it does not replace that one. Nothing here builds Proxmox disk
+ * options, so discard=on is owned by the transports/templates, not by this
+ * server (see docs in README).
+ *
+ * Storage that is NOT a guest-disk target is deliberately out of scope:
+ * `importStorage` (the dir storage that holds the downloaded image before it is
+ * imported) and ESXi datastores.
+ */
+import { CanonicalLabBridge } from "../canonical/bridge.js";
+import type { IHypervisorDriver } from "../hypervisors/types.js";
+import { CallToolResult } from "../types/mcp.js";
+/** Stable, machine-matchable error code for every thin-only refusal. */
+export declare const THICK_STORAGE_REFUSED: "THICK_STORAGE_REFUSED";
+/**
+ * The thin pool on every Proxmox lab host (`local-lvm`, type `lvmthin`). This is
+ * also the canonical CLI's default VM-disk storage, so an omitted `storage` is
+ * enforced against this pool rather than skipped.
+ */
+export declare const DEFAULT_THIN_STORAGE = "local-lvm";
+export type ThinStorageRefusalReason = "thick_storage_type" | "storage_type_undeterminable";
+export interface ThinStorageRefusalDetails extends Record<string, unknown> {
+    reason: ThinStorageRefusalReason;
+    storage: string;
+    storageType?: string;
+    hostAssetId?: string;
+    thinPool: string;
+}
+export declare class ThickStorageRefusedError extends Error {
+    readonly code: "THICK_STORAGE_REFUSED";
+    readonly details: ThinStorageRefusalDetails;
+    constructor(message: string, details: ThinStorageRefusalDetails);
+}
+/** True when a Proxmox storage of this type provides thin guest disks. */
+export declare function isThinGuestDiskStorage(storageType: string | null | undefined, options?: {
+    sparse?: boolean;
+}): boolean;
+export interface AssertThinStorageOptions {
+    /** Storage pool name the request targets. */
+    storage: string;
+    hostAssetId?: string;
+    /** Thin pool to recommend in the refusal message. */
+    thinPool?: string;
+    /** Proven `sparse` flag of a zfspool; absent means not proven. */
+    sparse?: boolean;
+}
+/**
+ * Pure policy check. Throws ThickStorageRefusedError (code THICK_STORAGE_REFUSED)
+ * unless the storage type is thin. An undefined/blank/"unknown" type means the
+ * type could not be determined and is refused as such (fail closed).
+ */
+export declare function assertThinStorage(storageType: string | null | undefined, options: AssertThinStorageOptions): void;
+export interface CanonicalThinStorageRequest {
+    /** Tool name for error details. */
+    operation: string;
+    /** Exact host asset id, or "auto"/undefined to check every canonical Proxmox host. */
+    hostAssetId?: string;
+    /** Requested VM-disk storage; omitted means the canonical CLI default pool. */
+    storage?: string;
+}
+/**
+ * Canonical-mode guard. Resolves the storage type through the same
+ * `host capacity` read path as list_storage (no new credentials) and refuses
+ * thick or undeterminable storage. Returns an error result to hand straight
+ * back to the caller, or undefined when the request may proceed. It must be
+ * called BEFORE the mutating canonical CLI call.
+ */
+export declare function guardCanonicalThinStorage(bridge: CanonicalLabBridge | undefined, request: CanonicalThinStorageRequest): Promise<CallToolResult | undefined>;
+/**
+ * Legacy (non-canonical) clone guard. A clone lands on the explicit `storage`
+ * when one is given and otherwise on the storage that holds the source
+ * template's disks, so both are resolved against the driver's own storage list.
+ * ESXi drivers are out of scope. Missing driver capability fails closed.
+ */
+export declare function guardLegacyCloneThinStorage(plan: {
+    host: string;
+    source: string | number;
+    driver: IHypervisorDriver;
+}, request: {
+    operation: string;
+    storage?: string;
+}): Promise<CallToolResult | undefined>;
+//# sourceMappingURL=thin-storage-policy.d.ts.map

package/dist/src/tools/thin-storage-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thin-storage-policy.d.ts","sourceRoot":"","sources":["../../../src/tools/thin-storage-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAyB,MAAM,iBAAiB,CAAC;AAOxE,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,EAAG,uBAAgC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAIhD,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,GAAG,6BAA6B,CAAC;AAE5F,MAAM,WAAW,yBAA0B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxE,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,0BAAyB;IACtC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;gBAEhC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB;CAKhE;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAMT;AAED,MAAM,WAAW,wBAAwB;IACvC,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,OAAO,EAAE,wBAAwB,GAChC,IAAI,CA6BN;AAkCD,MAAM,WAAW,2BAA2B;IAC1C,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CA0ErC;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,EAC1E,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAgErC"}

package/dist/src/tools/thin-storage-policy.js

@@ -0,0 +1,236 @@
+/**
+ * Thin-only guest disk policy (REL-1588, operator decision 2026-10-08:
+ * "Never thick disks").
+ *
+ * Every guest disk this server creates, clones or imports on Proxmox must live
+ * on thin-provisioned storage: `lvmthin` always, `zfspool` only when the pool
+ * is proven `sparse`. Anything else (plain `lvm`, `dir`, `nfs`, `iscsi`,
+ * `cifs`, `rbd`, an unknown or undeterminable type) is REFUSED with the stable
+ * code THICK_STORAGE_REFUSED before the mutating canonical call is made.
+ *
+ * Fail closed: when the storage type cannot be proven (host unreachable,
+ * malformed receipt, pool missing from the host, ...) the request is refused
+ * with the same code and a message that says the type could not be determined.
+ *
+ * Scope note: this module owns the TypeScript layer only. The canonical shell
+ * transports in ct-meta carry their own independent guard
+ * (`proxmox-thin-storage.sh`); this layer refuses earlier and with a typed
+ * error, it does not replace that one. Nothing here builds Proxmox disk
+ * options, so discard=on is owned by the transports/templates, not by this
+ * server (see docs in README).
+ *
+ * Storage that is NOT a guest-disk target is deliberately out of scope:
+ * `importStorage` (the dir storage that holds the downloaded image before it is
+ * imported) and ESXi datastores.
+ */
+import { createToolErrorResult } from "../types/mcp.js";
+import { parseCanonicalHostCapacity } from "./storage-tools.js";
+import { PROXMOX_SLOT_POLICIES, } from "./proxmox-host-policy.js";
+/** Stable, machine-matchable error code for every thin-only refusal. */
+export const THICK_STORAGE_REFUSED = "THICK_STORAGE_REFUSED";
+/**
+ * The thin pool on every Proxmox lab host (`local-lvm`, type `lvmthin`). This is
+ * also the canonical CLI's default VM-disk storage, so an omitted `storage` is
+ * enforced against this pool rather than skipped.
+ */
+export const DEFAULT_THIN_STORAGE = "local-lvm";
+const CANONICAL_PROXMOX_HOSTS = ["proxmox-lab", "proxmox-minis-lab"];
+export class ThickStorageRefusedError extends Error {
+    code = THICK_STORAGE_REFUSED;
+    details;
+    constructor(message, details) {
+        super(message);
+        this.name = "ThickStorageRefusedError";
+        this.details = details;
+    }
+}
+/** True when a Proxmox storage of this type provides thin guest disks. */
+export function isThinGuestDiskStorage(storageType, options = {}) {
+    const type = (storageType ?? "").trim().toLowerCase();
+    if (type === "lvmthin")
+        return true;
+    // ZFS zvols are thin only when the pool is configured sparse.
+    if (type === "zfspool")
+        return options.sparse === true;
+    return false;
+}
+/**
+ * Pure policy check. Throws ThickStorageRefusedError (code THICK_STORAGE_REFUSED)
+ * unless the storage type is thin. An undefined/blank/"unknown" type means the
+ * type could not be determined and is refused as such (fail closed).
+ */
+export function assertThinStorage(storageType, options) {
+    const thinPool = options.thinPool ?? DEFAULT_THIN_STORAGE;
+    const type = (storageType ?? "").trim();
+    const where = options.hostAssetId ? ` on host '${options.hostAssetId}'` : "";
+    const base = {
+        storage: options.storage,
+        thinPool,
+        ...(options.hostAssetId ? { hostAssetId: options.hostAssetId } : {}),
+    };
+    if (!type || type.toLowerCase() === "unknown") {
+        throw new ThickStorageRefusedError(`${THICK_STORAGE_REFUSED}: the type of storage '${options.storage}'${where} could not be determined, so it cannot be proven thin. `
+            + `Guest disks must be thin-provisioned (lvmthin, or zfspool with sparse=1) with discard=on; refusing fail-closed. `
+            + `Use thin pool '${thinPool}'. No Proxmox change was made.`, { ...base, reason: "storage_type_undeterminable" });
+    }
+    if (isThinGuestDiskStorage(type, { sparse: options.sparse }))
+        return;
+    const detail = type.toLowerCase() === "zfspool"
+        ? "zfspool is thin only with sparse=1, which was not proven"
+        : "not thin-provisioned";
+    throw new ThickStorageRefusedError(`${THICK_STORAGE_REFUSED}: storage '${options.storage}'${where} has type '${type}' (${detail}). `
+        + `Guest disks must be thin-provisioned (lvmthin, or zfspool with sparse=1) with discard=on; never thick. `
+        + `Use thin pool '${thinPool}' instead. No Proxmox change was made.`, { ...base, reason: "thick_storage_type", storageType: type });
+}
+function refusalResult(error, operation) {
+    return createToolErrorResult(error.code, error.message, { operation, ...error.details });
+}
+function undeterminable(storage, hostAssetId, why, thinPool) {
+    const where = hostAssetId ? ` on host '${hostAssetId}'` : "";
+    return new ThickStorageRefusedError(`${THICK_STORAGE_REFUSED}: the type of storage '${storage}'${where} could not be determined (${why}), so it cannot be proven thin. `
+        + `Guest disks must be thin-provisioned (lvmthin, or zfspool with sparse=1) with discard=on; refusing fail-closed. `
+        + `Use thin pool '${thinPool}'. No Proxmox change was made.`, {
+        reason: "storage_type_undeterminable",
+        storage,
+        thinPool,
+        ...(hostAssetId ? { hostAssetId } : {}),
+    });
+}
+function canonicalHostAlias(hostAssetId) {
+    return hostAssetId === "proxmox-mini" ? "proxmox-minis-lab" : hostAssetId;
+}
+function defaultThinPoolFor(hostAssetId) {
+    return PROXMOX_SLOT_POLICIES[hostAssetId]?.storage ?? DEFAULT_THIN_STORAGE;
+}
+/**
+ * Canonical-mode guard. Resolves the storage type through the same
+ * `host capacity` read path as list_storage (no new credentials) and refuses
+ * thick or undeterminable storage. Returns an error result to hand straight
+ * back to the caller, or undefined when the request may proceed. It must be
+ * called BEFORE the mutating canonical CLI call.
+ */
+export async function guardCanonicalThinStorage(bridge, request) {
+    const requestedHost = request.hostAssetId?.trim();
+    const hosts = !requestedHost || requestedHost === "auto"
+        ? [...CANONICAL_PROXMOX_HOSTS]
+        : [canonicalHostAlias(requestedHost)];
+    const auto = hosts.length > 1;
+    let verified = 0;
+    let missingOn;
+    try {
+        for (const hostAssetId of hosts) {
+            // An omitted storage means the canonical CLI default pool: still enforce it.
+            const storage = request.storage?.trim() || defaultThinPoolFor(hostAssetId);
+            const fallbackThin = defaultThinPoolFor(hostAssetId);
+            if (!bridge) {
+                throw undeterminable(storage, hostAssetId, "the canonical lab bridge is not available", fallbackThin);
+            }
+            let result;
+            try {
+                result = await bridge.run(["host", "capacity", "--asset-id", hostAssetId]);
+            }
+            catch (error) {
+                throw undeterminable(storage, hostAssetId, `host capacity failed: ${error instanceof Error ? error.message : String(error)}`, fallbackThin);
+            }
+            if (result.timedOut || result.exitCode !== 0) {
+                throw undeterminable(storage, hostAssetId, result.timedOut ? "host capacity timed out" : `host capacity exited ${result.exitCode}`, fallbackThin);
+            }
+            const capacity = parseCanonicalHostCapacity(result.stdout, hostAssetId);
+            if (!capacity) {
+                throw undeterminable(storage, hostAssetId, "host capacity returned an invalid receipt", fallbackThin);
+            }
+            // ESXi datastores are outside the Proxmox thin-only decision.
+            if (capacity.hypervisor !== "proxmox")
+                continue;
+            const thinPool = capacity.pools.find((pool) => pool.type.toLowerCase() === "lvmthin" && pool.content?.split(",").includes("images"))?.storage ?? fallbackThin;
+            const pool = capacity.pools.find((candidate) => candidate.storage === storage);
+            if (!pool) {
+                const known = capacity.pools.map((p) => p.storage).join(", ") || "none";
+                // With host=auto the canonical CLI cannot place on a host that lacks the
+                // pool, so only an exact host (or every host lacking it) is undeterminable.
+                if (!auto) {
+                    throw undeterminable(storage, hostAssetId, `the pool is not defined on that host; known pools: ${known}`, thinPool);
+                }
+                missingOn ??= { storage, hostAssetId, known, thinPool };
+                continue;
+            }
+            assertThinStorage(pool.type, { storage, hostAssetId, thinPool, sparse: pool.sparse });
+            verified += 1;
+        }
+        if (auto && verified === 0 && missingOn) {
+            throw undeterminable(missingOn.storage, undefined, `the pool is not defined on any canonical Proxmox host; known pools on ${missingOn.hostAssetId}: ${missingOn.known}`, missingOn.thinPool);
+        }
+    }
+    catch (error) {
+        if (error instanceof ThickStorageRefusedError)
+            return refusalResult(error, request.operation);
+        throw error;
+    }
+    return undefined;
+}
+/**
+ * Legacy (non-canonical) clone guard. A clone lands on the explicit `storage`
+ * when one is given and otherwise on the storage that holds the source
+ * template's disks, so both are resolved against the driver's own storage list.
+ * ESXi drivers are out of scope. Missing driver capability fails closed.
+ */
+export async function guardLegacyCloneThinStorage(plan, request) {
+    const { driver } = plan;
+    if (driver.hypervisorType !== "proxmox")
+        return undefined;
+    const hostAssetId = plan.host;
+    const fallbackThin = defaultThinPoolFor(canonicalHostAlias(hostAssetId));
+    try {
+        let targets;
+        if (request.storage?.trim()) {
+            targets = [request.storage.trim()];
+        }
+        else {
+            if (!driver.getVmStorage) {
+                throw undeterminable(String(plan.source), hostAssetId, "the clone source's disks cannot be read", fallbackThin);
+            }
+            let report;
+            try {
+                report = await driver.getVmStorage(plan.source);
+            }
+            catch (error) {
+                throw undeterminable(String(plan.source), hostAssetId, `reading the clone source's disks failed: ${error instanceof Error ? error.message : String(error)}`, fallbackThin);
+            }
+            targets = [...new Set(report.disks.map((disk) => disk.storage))];
+            if (targets.length === 0) {
+                throw undeterminable(String(plan.source), hostAssetId, "the clone source reports no disks", fallbackThin);
+            }
+        }
+        if (!driver.listStorage) {
+            throw undeterminable(targets[0], hostAssetId, "the host cannot list its storage pools", fallbackThin);
+        }
+        let pools;
+        try {
+            pools = await driver.listStorage();
+        }
+        catch (error) {
+            throw undeterminable(targets[0], hostAssetId, `listing storage pools failed: ${error instanceof Error ? error.message : String(error)}`, fallbackThin);
+        }
+        const thinPool = pools.find((pool) => pool.type.toLowerCase() === "lvmthin" && pool.content?.split(",").includes("images"))
+            ?.storage ?? fallbackThin;
+        for (const storage of targets) {
+            const pool = pools.find((candidate) => candidate.storage === storage);
+            if (!pool) {
+                throw undeterminable(storage, hostAssetId, "the pool is not defined on that host", thinPool);
+            }
+            assertThinStorage(pool.type, {
+                storage,
+                hostAssetId,
+                thinPool,
+                sparse: pool.sparse,
+            });
+        }
+    }
+    catch (error) {
+        if (error instanceof ThickStorageRefusedError)
+            return refusalResult(error, request.operation);
+        throw error;
+    }
+    return undefined;
+}
+//# sourceMappingURL=thin-storage-policy.js.map

package/dist/src/tools/thin-storage-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thin-storage-policy.js","sourceRoot":"","sources":["../../../src/tools/thin-storage-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,EAAkB,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EACL,qBAAqB,GAEtB,MAAM,0BAA0B,CAAC;AAElC,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAgC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEhD,MAAM,uBAAuB,GAAoC,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAYtG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,qBAAqB,CAAC;IAC7B,OAAO,CAA4B;IAE5C,YAAY,OAAe,EAAE,OAAkC;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CACpC,WAAsC,EACtC,UAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,8DAA8D;IAC9D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAsC,EACtC,OAAiC;IAEjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;IAEF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,wBAAwB,CAChC,GAAG,qBAAqB,0BAA0B,OAAO,CAAC,OAAO,IAAI,KAAK,yDAAyD;cACjI,kHAAkH;cAClH,kBAAkB,QAAQ,gCAAgC,EAC5D,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,OAAO;IAErE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS;QAC7C,CAAC,CAAC,0DAA0D;QAC5D,CAAC,CAAC,sBAAsB,CAAC;IAC3B,MAAM,IAAI,wBAAwB,CAChC,GAAG,qBAAqB,cAAc,OAAO,CAAC,OAAO,IAAI,KAAK,cAAc,IAAI,MAAM,MAAM,KAAK;UAC/F,yGAAyG;UACzG,kBAAkB,QAAQ,wCAAwC,EACpE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAA+B,EAAE,SAAiB;IACvE,OAAO,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,WAA+B,EAC/B,GAAW,EACX,QAAgB;IAEhB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,IAAI,wBAAwB,CACjC,GAAG,qBAAqB,0BAA0B,OAAO,IAAI,KAAK,6BAA6B,GAAG,kCAAkC;UAClI,kHAAkH;UAClH,kBAAkB,QAAQ,gCAAgC,EAC5D;QACE,MAAM,EAAE,6BAA6B;QACrC,OAAO;QACP,QAAQ;QACR,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,OAAO,WAAW,KAAK,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,OAAO,qBAAqB,CAAC,WAAmC,CAAC,EAAE,OAAO,IAAI,oBAAoB,CAAC;AACrG,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAsC,EACtC,OAAoC;IAEpC,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,KAAK,GAAa,CAAC,aAAa,IAAI,aAAa,KAAK,MAAM;QAChE,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC;QAC9B,CAAC,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,SAAgG,CAAC;IACrG,IAAI,CAAC;QACH,KAAK,MAAM,WAAW,IAAI,KAAK,EAAE,CAAC;YAChC,6EAA6E;YAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAC3E,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAErD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,2CAA2C,EAAE,YAAY,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;YAC7E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,cAAc,CAClB,OAAO,EACP,WAAW,EACX,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACjF,YAAY,CACb,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,cAAc,CAClB,OAAO,EACP,WAAW,EACX,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EACvF,YAAY,CACb,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,2CAA2C,EAAE,YAAY,CAAC,CAAC;YACxG,CAAC;YACD,8DAA8D;YAC9D,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;gBAAE,SAAS;YAEhD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC/F,EAAE,OAAO,IAAI,YAAY,CAAC;YAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;gBACxE,yEAAyE;gBACzE,4EAA4E;gBAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,sDAAsD,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACtH,CAAC;gBACD,SAAS,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,IAAI,QAAQ,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;YACxC,MAAM,cAAc,CAClB,SAAS,CAAC,OAAO,EACjB,SAAS,EACT,yEAAyE,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,KAAK,EAAE,EACpH,SAAS,CAAC,QAAQ,CACnB,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,IAA0E,EAC1E,OAAgD;IAEhD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,YAAY,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IAEzE,IAAI,CAAC;QACH,IAAI,OAAiB,CAAC;QACtB,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,YAAY,CAAC,CAAC;YAClH,CAAC;YACD,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,cAAc,CAClB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EACnB,WAAW,EACX,4CAA4C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpG,YAAY,CACb,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,YAAY,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,YAAY,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAClB,OAAO,CAAC,CAAC,CAAC,EACV,WAAW,EACX,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACzF,YAAY,CACb,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzH,EAAE,OAAO,IAAI,YAAY,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,sCAAsC,EAAE,QAAQ,CAAC,CAAC;YAC/F,CAAC;YACD,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,OAAO;gBACP,WAAW;gBACX,QAAQ;gBACR,MAAM,EAAG,IAA6B,CAAC,MAAM;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/tools/vm-action.d.ts

@@ -137,17 +137,17 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     vmid?: string | number | undefined;
     reason?: string | undefined;
     timeoutSeconds?: number | undefined;
-    assetId?: string | undefined;
     hostAssetId?: string | undefined;
+    assetId?: string | undefined;
     artifactReceipt?: string | undefined;
     receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
     targetHost?: string | undefined;
+    vmIdOrName?: string | number | undefined;
     confirmVmid?: string | number | undefined;
     smbiosUuid?: string | undefined;
     confirmHostAssetId?: string | undefined;
     confirmSmbiosUuid?: string | undefined;
-    vmIdOrName?: string | number | undefined;
     cloneOptions?: {
         full: boolean;
         name?: string | undefined;
@@ -168,21 +168,21 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     format?: "table" | "json" | undefined;
     reason?: string | undefined;
     timeoutSeconds?: number | undefined;
-    assetId?: string | undefined;
     hostAssetId?: string | undefined;
+    assetId?: string | undefined;
     artifactReceipt?: string | undefined;
     apply?: boolean | undefined;
     receiptFile?: string | undefined;
     force?: boolean | undefined;
     confirmAssetId?: string | undefined;
     targetHost?: string | undefined;
+    vmIdOrName?: string | number | undefined;
     confirmVmid?: string | number | undefined;
     smbiosUuid?: string | undefined;
     confirmHostAssetId?: string | undefined;
     confirmSmbiosUuid?: string | undefined;
     ackUntracked?: boolean | undefined;
     ackManualCleanup?: boolean | undefined;
-    vmIdOrName?: string | number | undefined;
     cloneOptions?: {
         name?: string | undefined;
         tags?: string | string[] | undefined;
@@ -207,17 +207,17 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     vmid?: string | number | undefined;
     reason?: string | undefined;
     timeoutSeconds?: number | undefined;
-    assetId?: string | undefined;
     hostAssetId?: string | undefined;
+    assetId?: string | undefined;
     artifactReceipt?: string | undefined;
     receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
     targetHost?: string | undefined;
+    vmIdOrName?: string | number | undefined;
     confirmVmid?: string | number | undefined;
     smbiosUuid?: string | undefined;
     confirmHostAssetId?: string | undefined;
     confirmSmbiosUuid?: string | undefined;
-    vmIdOrName?: string | number | undefined;
     cloneOptions?: {
         full: boolean;
         name?: string | undefined;
@@ -238,21 +238,21 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     format?: "table" | "json" | undefined;
     reason?: string | undefined;
     timeoutSeconds?: number | undefined;
-    assetId?: string | undefined;
     hostAssetId?: string | undefined;
+    assetId?: string | undefined;
     artifactReceipt?: string | undefined;
     apply?: boolean | undefined;
     receiptFile?: string | undefined;
     force?: boolean | undefined;
     confirmAssetId?: string | undefined;
     targetHost?: string | undefined;
+    vmIdOrName?: string | number | undefined;
     confirmVmid?: string | number | undefined;
     smbiosUuid?: string | undefined;
     confirmHostAssetId?: string | undefined;
     confirmSmbiosUuid?: string | undefined;
     ackUntracked?: boolean | undefined;
     ackManualCleanup?: boolean | undefined;
-    vmIdOrName?: string | number | undefined;
     cloneOptions?: {
         name?: string | undefined;
         tags?: string | string[] | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calltelemetry/ct-lab-mcp",
-  "version": "0.8.69",
+  "version": "0.8.71",
   "description": "Expanded Model Context Protocol (MCP) server for Call Telemetry lab, fleet, and appliance management across Proxmox VE and VMware ESXi.",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -15,7 +15,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && chmod +x dist/bin/*.js",
+    "build": "tsc -p tsconfig.build.json && node tools/copy-physical-slot-schema.mjs && chmod +x dist/bin/*.js",
     "typecheck": "tsc --noEmit",
     "pretest": "npm run build",
     "test": "vitest run",