@calltelemetry/ct-lab-mcp 0.8.78 → 0.8.79

package/README.md

@@ -409,6 +409,18 @@ Canonical mutation parameters are deliberately explicit:
   Use separate unused plan/apply receipt paths. Failure records remain intact;
   an expired guest is never renewed or reused, and verified absence precedes
   ownership release. There is no force, host/IP selector or legacy fallback.
+- `create_snapshot` and `rollback_snapshot` take a claim-scoped path when
+  `assetId` is supplied (UAT-1767), forwarding to `vm snapshot` / `vm rollback`.
+  They require `linearIssue`, `leaseId`, `operatorClaimUid`, `operationId` and
+  `snapshotName`, are plan-only until `apply: true`, and apply additionally
+  requires `confirmAssetId`, `confirmSmbiosUuid`, `confirmSnapshotName` and
+  `confirmPlanSha` copied from the plan. Snapshots are disk-only; rollback
+  accepts only the most recent snapshot this tooling created for the claim. The
+  canonical CLI independently refuses fixtures, unclaimed guests and foreign
+  claims. There is no VMID, name, host or RAM-state selector, no snapshot
+  deletion, and no legacy fallback: a request without `assetId` keeps the
+  legacy refusal. Requires a lab-inventory bundle that includes ct-meta
+  `067fa4cc` or later.
 - `purge_slots` delegates only to `claims gc`; age, force, orphan, and VM-name
   shortcuts are rejected.
 

package/dist/src/tools/appliance-candidate-retire.d.ts

@@ -22,14 +22,14 @@ export declare const ApplianceCandidateRetireInputObjectSchema: z.ZodObject<{
     leaseId: string;
     assetId: string;
     operationId: string;
-    artifactReceipt: string;
     apply: boolean;
+    artifactReceipt: string;
     receiptFile: string;
     candidateOperationId: string;
     candidateReceipt: string;
     confirmAssetId?: string | undefined;
-    confirmVmid?: number | undefined;
     confirmSmbiosUuid?: string | undefined;
+    confirmVmid?: number | undefined;
 }, {
     linearIssue: string;
     reason: string;
@@ -42,8 +42,8 @@ export declare const ApplianceCandidateRetireInputObjectSchema: z.ZodObject<{
     candidateReceipt: string;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
-    confirmVmid?: number | undefined;
     confirmSmbiosUuid?: string | undefined;
+    confirmVmid?: number | undefined;
 }>;
 declare const inputSchema: z.ZodEffects<z.ZodObject<{
     assetId: z.ZodEffects<z.ZodString, string, string>;
@@ -65,14 +65,14 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     leaseId: string;
     assetId: string;
     operationId: string;
-    artifactReceipt: string;
     apply: boolean;
+    artifactReceipt: string;
     receiptFile: string;
     candidateOperationId: string;
     candidateReceipt: string;
     confirmAssetId?: string | undefined;
-    confirmVmid?: number | undefined;
     confirmSmbiosUuid?: string | undefined;
+    confirmVmid?: number | undefined;
 }, {
     linearIssue: string;
     reason: string;
@@ -85,22 +85,22 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     candidateReceipt: string;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
-    confirmVmid?: number | undefined;
     confirmSmbiosUuid?: string | undefined;
+    confirmVmid?: number | undefined;
 }>, {
     linearIssue: string;
     reason: string;
     leaseId: string;
     assetId: string;
     operationId: string;
-    artifactReceipt: string;
     apply: boolean;
+    artifactReceipt: string;
     receiptFile: string;
     candidateOperationId: string;
     candidateReceipt: string;
     confirmAssetId?: string | undefined;
-    confirmVmid?: number | undefined;
     confirmSmbiosUuid?: string | undefined;
+    confirmVmid?: number | undefined;
 }, {
     linearIssue: string;
     reason: string;
@@ -113,8 +113,8 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     candidateReceipt: string;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
-    confirmVmid?: number | undefined;
     confirmSmbiosUuid?: string | undefined;
+    confirmVmid?: number | undefined;
 }>;
 export type ApplianceCandidateRetireRawInput = z.input<typeof inputSchema>;
 export declare function handleApplianceCandidateRetire(raw: ApplianceCandidateRetireRawInput | undefined, context: ToolContext): Promise<CallToolResult>;

package/dist/src/tools/canonical-guard.d.ts

@@ -13,7 +13,7 @@ export declare const CANONICAL_VM_CREDENTIAL_ACTIONS: readonly ["status", "shutd
  * are not dispatcher operation IDs or an admission API. Actual calls use
  * canonicalBridgeOwnsCredentials with the bare operation and its arguments.
  */
-export declare const CANONICAL_CREDENTIAL_OPERATIONS: readonly ["lab_dev:doctor", "lab_dev:plan", "lab_dev:prepare", "lab_dev:status", "lab_dev:start", "lab_dev:sync", "lab_dev:stop", "lab_dev:cleanup", "list_hosts", "list_inventory", ...("vm_action:shutdown" | "vm_action:status")[], "vm_repair", "vm_renew", "vm_transfer", "release_slot", "list_expired_vms", "cleanup_expired_vms", "provision_vm", "auto_provision_vm", "proxmox_import_qcow", "claimed_import_qcow", "appliance_candidate_update", "purge_slots", "host_migrate_vm", "sandbox_clone", "sandbox_reset", "ferrum_fleet_metrics"];
+export declare const CANONICAL_CREDENTIAL_OPERATIONS: readonly ["lab_dev:doctor", "lab_dev:plan", "lab_dev:prepare", "lab_dev:status", "lab_dev:start", "lab_dev:sync", "lab_dev:stop", "lab_dev:cleanup", "list_hosts", "list_inventory", ...("vm_action:shutdown" | "vm_action:status")[], "vm_repair", "vm_renew", "vm_transfer", "release_slot", "list_expired_vms", "cleanup_expired_vms", "provision_vm", "auto_provision_vm", "proxmox_import_qcow", "claimed_import_qcow", "appliance_candidate_update", "purge_slots", "host_migrate_vm", "sandbox_clone", "sandbox_reset", "ferrum_fleet_metrics", "create_snapshot", "rollback_snapshot"];
 /**
  * Operations that run on the canonical bridge whenever it is configured, even
  * when the server is not in required (fail-closed) canonical mode. Both are

package/dist/src/tools/canonical-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-guard.d.ts","sourceRoot":"","sources":["../../../src/tools/canonical-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAkD,MAAM,iBAAiB,CAAC;AAEjG,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAE3D;AAED,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,iCAAiD,CAAC;AAE9F;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,whBA+BlC,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,yDAA0D,CAAC;AAErG,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAI5F;AAED,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,cAAc,GAAG,aAAa,GAAG,4BAA4B,GAAG,oBAAoB,CAAC;IAC7F,gBAAgB,EAAE,gBAAgB,GAAG,aAAa,GAAG,2BAA2B,CAAC;IACjF,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,MAAM,CAAC,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,WAAW,GACnB,4BAA4B,CAiD9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE;IACJ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,EACD,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1E,MAAM,EAAE,CAgCV;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EAAE,GAChB,MAAM,CAOR;AAQD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAoET;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAMzF;AAUD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAuCzB"}
+{"version":3,"file":"canonical-guard.d.ts","sourceRoot":"","sources":["../../../src/tools/canonical-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAkD,MAAM,iBAAiB,CAAC;AAGjG,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAE3D;AAED,kFAAkF;AAClF,eAAO,MAAM,+BAA+B,iCAAiD,CAAC;AAE9F;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,gkBAmClC,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,yDAA0D,CAAC;AAErG,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAI5F;AAED,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,eAAe,GAAG,iBAAiB,CAAC;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,cAAc,GAAG,aAAa,GAAG,4BAA4B,GAAG,oBAAoB,CAAC;IAC7F,gBAAgB,EAAE,gBAAgB,GAAG,aAAa,GAAG,2BAA2B,CAAC;IACjF,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,MAAM,CAAC,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,WAAW,GACnB,4BAA4B,CAiD9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE;IACJ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,EACD,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1E,MAAM,EAAE,CAgCV;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EAAE,GAChB,MAAM,CAOR;AAQD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAqET;AAED,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,CAMzF;AAUD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EAAE,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,CAAC,CAuCzB"}

package/dist/src/tools/canonical-guard.js

@@ -1,4 +1,5 @@
 import { createToolErrorResult, createToolSuccessResult } from "../types/mcp.js";
+import { isClaimedSnapshotCall } from "./claimed-snapshot.js";
 export function canonicalMode(context) {
     return context.canonicalBridge?.isRequired === true;
 }
@@ -44,6 +45,10 @@ export const CANONICAL_CREDENTIAL_OPERATIONS = [
     "sandbox_clone",
     "sandbox_reset",
     "ferrum_fleet_metrics",
+    // Claim-scoped snapshots (UAT-1767): the canonical CLI owns the exact claim,
+    // lease and provider credential checks; selected only by an explicit assetId.
+    "create_snapshot",
+    "rollback_snapshot",
 ];
 /**
  * Operations that run on the canonical bridge whenever it is configured, even
@@ -207,6 +212,8 @@ export function canonicalBridgeOwnsCredentials(context, operation, args) {
     }
     if (operation === "vm_repair")
         return true;
+    if (operation === "create_snapshot" || operation === "rollback_snapshot")
+        return isClaimedSnapshotCall(args);
     if (operation === "lab_dev") {
         const action = toolAction(args);
         return action === "doctor" || action === "plan" || action === "prepare" || action === "status"

package/dist/src/tools/canonical-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-guard.js","sourceRoot":"","sources":["../../../src/tools/canonical-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkB,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAEjG,MAAM,UAAU,aAAa,CAAC,OAAoB;IAChD,OAAO,OAAO,CAAC,eAAe,EAAE,UAAU,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAU,CAAC,CAAC;AAE9F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,MAAM,EAAW,CAAC;IAClF,WAAW;IACX,UAAU;IACV,aAAa;IACb,cAAc;IACd,0EAA0E;IAC1E,wEAAwE;IACxE,+DAA+D;IAC/D,kBAAkB;IAClB,qBAAqB;IACrB,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,4BAA4B;IAC5B,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,sBAAsB;CACd,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,qBAAqB,EAAE,qBAAqB,CAAU,CAAC;AAErG,MAAM,UAAU,2BAA2B,CAAC,OAAoB,EAAE,SAAiB;IACjF,IAAI,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAQ,6BAAmD,CAAC,QAAQ,CAAC,SAAS,CAAC;WAC1E,OAAO,CAAC,eAAe,EAAE,YAAY,KAAK,IAAI,CAAC;AACtD,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAoB;IAEpB,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE,MAAM,mBAAmB,GAAG,CAAC,GAAG,+BAA+B,CAAC,CAAC;IAEjE,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC5B,yEAAyE;QACzE,6DAA6D;QAC7D,OAAO;YACL,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,oBAAoB;YAC5B,gBAAgB,EAAE,2BAA2B;YAC7C,mBAAmB,EAAE,CAAC,GAAG,6BAA6B,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU;YACV,MAAM,EAAE,cAAc;YACtB,gBAAgB,EAAE,gBAAgB;YAClC,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,aAAa;YACrB,gBAAgB,EAAE,aAAa;YAC/B,mBAAmB;YACnB,MAAM,EAAE,iCAAiC;SAC1C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,4BAA4B;QACpC,gBAAgB,EAAE,2BAA2B;QAC7C,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAiBC,EACD,IAA2E;IAE3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,KAAa,EAAE,EAAE;QAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC9C,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,uBAAuB,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,IAAY,EACZ,MAAc,EACd,OAAiB;IAEjB,OAAO,aAAa,IAAI,6CAA6C,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;UACnG,kGAAkG;UAClG,iEAAiE;UACjE,yEAAyE;UACzE,8FAA8F;UAC9F,iDAAiD,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAC;IACrD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAoB,EACpB,SAAiB,EACjB,IAAc;IAEd,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1C,qEAAqE;IACrE,0DAA0D;IAC1D,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,eAAe,EAAE,YAAY,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjE,uEAAuE;IACvE,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAE9E,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAI,IAAiD,EAAE,OAAO,CAAC;QAC5E,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,KAAK,MAAM,CAAC;eACnF,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,SAAS,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;eACzF,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;IAC5F,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,IACE,SAAS,KAAK,kBAAkB;WAC7B,SAAS,KAAK,qBAAqB;WACnC,SAAS,KAAK,cAAc;WAC5B,SAAS,KAAK,mBAAmB;QACpC,sEAAsE;QACtE,mEAAmE;QACnE,sDAAsD;WACnD,SAAS,KAAK,qBAAqB;QACtC,kEAAkE;QAClE,8DAA8D;WAC3D,SAAS,KAAK,qBAAqB;QACtC,qEAAqE;QACrE,sEAAsE;QACtE,0EAA0E;QAC1E,4DAA4D;WACzD,SAAS,KAAK,4BAA4B;WAC1C,SAAS,KAAK,aAAa;WAC3B,SAAS,KAAK,iBAAiB;WAC/B,SAAS,KAAK,eAAe;WAC7B,SAAS,KAAK,eAAe;WAC7B,SAAS,KAAK,sBAAsB;QACvC,wEAAwE;QACxE,yEAAyE;WACtE,SAAS,KAAK,UAAU;WACxB,SAAS,KAAK,aAAa;QAC9B,oEAAoE;QACpE,wEAAwE;WACrE,SAAS,KAAK,cAAc,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,IAAY;IACvE,OAAO,qBAAqB,CAC1B,qCAAqC,EACrC,GAAG,SAAS,uCAAuC,IAAI,EAAE,EACzD,EAAE,SAAS,EAAE,kBAAkB,EAAE,2DAA2D,EAAE,CAC/F,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAsC,EACtC,SAAiB,EACjB,IAAc,EACd,SAAkB;IAElB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,qBAAqB,CAAC,iCAAiC,EAAE,uCAAuC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACjD,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnD,MAAM,OAAO,GAAG;YACd,OAAO;YACP,SAAS;YACT,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,qBAAqB,CAC1B,4BAA4B,EAC5B,MAAM,CAAC,MAAM;mBACR,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;mBAC/D,MAAM,CAAC,MAAM;mBACb,GAAG,SAAS,8BAA8B,EAC/C,OAAO,CACR,CAAC;QACJ,CAAC;QACD,OAAO,uBAAuB,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,iCAAiC,EAAE,OAAO,CAAC,CAAC;IAC1G,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAC1B,iCAAiC,EACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD,EAAE,SAAS,EAAE,CACd,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"canonical-guard.js","sourceRoot":"","sources":["../../../src/tools/canonical-guard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkB,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,UAAU,aAAa,CAAC,OAAoB;IAChD,OAAO,OAAO,CAAC,eAAe,EAAE,UAAU,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAU,CAAC,CAAC;AAE9F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,MAAM,EAAW,CAAC;IAClF,WAAW;IACX,UAAU;IACV,aAAa;IACb,cAAc;IACd,0EAA0E;IAC1E,wEAAwE;IACxE,+DAA+D;IAC/D,kBAAkB;IAClB,qBAAqB;IACrB,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,4BAA4B;IAC5B,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,sBAAsB;IACtB,6EAA6E;IAC7E,8EAA8E;IAC9E,iBAAiB;IACjB,mBAAmB;CACX,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,qBAAqB,EAAE,qBAAqB,CAAU,CAAC;AAErG,MAAM,UAAU,2BAA2B,CAAC,OAAoB,EAAE,SAAiB;IACjF,IAAI,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAQ,6BAAmD,CAAC,QAAQ,CAAC,SAAS,CAAC;WAC1E,OAAO,CAAC,eAAe,EAAE,YAAY,KAAK,IAAI,CAAC;AACtD,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAoB;IAEpB,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE,MAAM,mBAAmB,GAAG,CAAC,GAAG,+BAA+B,CAAC,CAAC;IAEjE,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC5B,yEAAyE;QACzE,6DAA6D;QAC7D,OAAO;YACL,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,oBAAoB;YAC5B,gBAAgB,EAAE,2BAA2B;YAC7C,mBAAmB,EAAE,CAAC,GAAG,6BAA6B,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,KAAK;YACf,UAAU;YACV,MAAM,EAAE,cAAc;YACtB,gBAAgB,EAAE,gBAAgB;YAClC,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,aAAa;YACrB,gBAAgB,EAAE,aAAa;YAC/B,mBAAmB;YACnB,MAAM,EAAE,iCAAiC;SAC1C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,4BAA4B;QACpC,gBAAgB,EAAE,2BAA2B;QAC7C,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAiBC,EACD,IAA2E;IAE3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAE,KAAa,EAAE,EAAE;QAC/C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;QAC9C,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,uBAAuB,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,IAAY,EACZ,MAAc,EACd,OAAiB;IAEjB,OAAO,aAAa,IAAI,6CAA6C,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;UACnG,kGAAkG;UAClG,iEAAiE;UACjE,yEAAyE;UACzE,8FAA8F;UAC9F,iDAAiD,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACvF,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAC;IACrD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAoB,EACpB,SAAiB,EACjB,IAAc;IAEd,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1C,qEAAqE;IACrE,0DAA0D;IAC1D,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,eAAe,EAAE,YAAY,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjE,uEAAuE;IACvE,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAE9E,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,OAAO,GAAI,IAAiD,EAAE,OAAO,CAAC;QAC5E,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,aAAa,KAAK,MAAM,CAAC;eACnF,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,SAAS,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,mBAAmB;QAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;eACzF,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;IAC5F,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,IACE,SAAS,KAAK,kBAAkB;WAC7B,SAAS,KAAK,qBAAqB;WACnC,SAAS,KAAK,cAAc;WAC5B,SAAS,KAAK,mBAAmB;QACpC,sEAAsE;QACtE,mEAAmE;QACnE,sDAAsD;WACnD,SAAS,KAAK,qBAAqB;QACtC,kEAAkE;QAClE,8DAA8D;WAC3D,SAAS,KAAK,qBAAqB;QACtC,qEAAqE;QACrE,sEAAsE;QACtE,0EAA0E;QAC1E,4DAA4D;WACzD,SAAS,KAAK,4BAA4B;WAC1C,SAAS,KAAK,aAAa;WAC3B,SAAS,KAAK,iBAAiB;WAC/B,SAAS,KAAK,eAAe;WAC7B,SAAS,KAAK,eAAe;WAC7B,SAAS,KAAK,sBAAsB;QACvC,wEAAwE;QACxE,yEAAyE;WACtE,SAAS,KAAK,UAAU;WACxB,SAAS,KAAK,aAAa;QAC9B,oEAAoE;QACpE,wEAAwE;WACrE,SAAS,KAAK,cAAc,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,SAAiB,EAAE,IAAY;IACvE,OAAO,qBAAqB,CAC1B,qCAAqC,EACrC,GAAG,SAAS,uCAAuC,IAAI,EAAE,EACzD,EAAE,SAAS,EAAE,kBAAkB,EAAE,2DAA2D,EAAE,CAC/F,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAsC,EACtC,SAAiB,EACjB,IAAc,EACd,SAAkB;IAElB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,qBAAqB,CAAC,iCAAiC,EAAE,uCAAuC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACjD,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnD,MAAM,OAAO,GAAG;YACd,OAAO;YACP,SAAS;YACT,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,qBAAqB,CAC1B,4BAA4B,EAC5B,MAAM,CAAC,MAAM;mBACR,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,iCAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;mBAC/D,MAAM,CAAC,MAAM;mBACb,GAAG,SAAS,8BAA8B,EAC/C,OAAO,CACR,CAAC;QACJ,CAAC;QACD,OAAO,uBAAuB,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,iCAAiC,EAAE,OAAO,CAAC,CAAC;IAC1G,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAC1B,iCAAiC,EACjC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACtD,EAAE,SAAS,EAAE,CACd,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/tools/claim-lifecycle.d.ts

@@ -40,8 +40,8 @@ export declare const RenewClaimInputSchema: z.ZodObject<{
     ttlHours?: number | undefined;
     assetId?: string | undefined;
     operationId?: string | undefined;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
 }, {
     linearIssue?: string | undefined;
     leaseId?: string | undefined;
@@ -49,8 +49,8 @@ export declare const RenewClaimInputSchema: z.ZodObject<{
     assetId?: string | undefined;
     operationId?: string | undefined;
     apply?: boolean | undefined;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     replaceClosedClaim?: boolean | undefined;
     allowRunning?: boolean | undefined;
 }>;
@@ -86,8 +86,8 @@ export declare const TransferClaimInputSchema: z.ZodObject<{
     ttlHours?: number | undefined;
     assetId?: string | undefined;
     operationId?: string | undefined;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     toLinearIssue?: string | undefined;
 }, {
     linearIssue?: string | undefined;
@@ -96,8 +96,8 @@ export declare const TransferClaimInputSchema: z.ZodObject<{
     assetId?: string | undefined;
     operationId?: string | undefined;
     apply?: boolean | undefined;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     toLinearIssue?: string | undefined;
     recoverExpiredRunning?: boolean | undefined;
 }>;

package/dist/src/tools/claimed-import-qcow.d.ts

@@ -75,9 +75,9 @@ export declare const ClaimedImportQcowInputObjectSchema: z.ZodObject<{
     diskGb?: number | undefined;
     ttlHours?: number | undefined;
     claimName?: string | undefined;
+    confirmAssetId?: string | undefined;
     workspaceRoot?: string | undefined;
     importStorage?: string | undefined;
-    confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;
@@ -103,10 +103,10 @@ export declare const ClaimedImportQcowInputObjectSchema: z.ZodObject<{
     purpose?: string | undefined;
     ttlHours?: number | undefined;
     claimName?: string | undefined;
-    workspaceRoot?: string | undefined;
-    importStorage?: string | undefined;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
+    workspaceRoot?: string | undefined;
+    importStorage?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;

package/dist/src/tools/claimed-snapshot.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Claim-scoped disk-only snapshot / rollback facade (UAT-1767).
+ *
+ * Thin by design: `lab-inventory vm snapshot|rollback` (UAT-1759) owns every
+ * authority decision (live Ready bare ApplianceClaim, canonical lease owned by
+ * the caller's Linear issue, protected/fixture refusal, marker, latest-only
+ * rollback, no snapshot deletion). This module only validates the closed
+ * input shape, refuses anything that is not an exact claimed-guest request,
+ * and forwards a fixed argument vector through the canonical bridge. There is
+ * no hypervisor, host, VMID, name or RAM-state selector, and no legacy
+ * fallback: an unclaimed request never reaches a provider.
+ */
+import { z } from "zod";
+import { type CallToolResult } from "../types/mcp.js";
+import type { ToolContext } from "./list-hosts.js";
+export type ClaimedSnapshotAction = "snapshot" | "rollback";
+/** Proxmox-compatible: 2-40 letters/digits/hyphen, a letter first; `current` is reserved. */
+export declare const SNAPSHOT_NAME_PATTERN: RegExp;
+/** Claim-scoped fields shared by create_snapshot and rollback_snapshot. */
+export declare const ClaimedSnapshotInputShape: {
+    assetId: z.ZodOptional<z.ZodString>;
+    linearIssue: z.ZodOptional<z.ZodString>;
+    leaseId: z.ZodOptional<z.ZodString>;
+    operatorClaimUid: z.ZodOptional<z.ZodString>;
+    operationId: z.ZodOptional<z.ZodString>;
+    apply: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    confirmAssetId: z.ZodOptional<z.ZodString>;
+    confirmSmbiosUuid: z.ZodOptional<z.ZodString>;
+    confirmSnapshotName: z.ZodOptional<z.ZodString>;
+    confirmPlanSha: z.ZodOptional<z.ZodString>;
+};
+/** True when the call selects the claim-scoped canonical path. */
+export declare function isClaimedSnapshotCall(args: unknown): boolean;
+export declare function handleClaimedSnapshot(action: ClaimedSnapshotAction, raw: unknown, context: ToolContext): Promise<CallToolResult>;
+//# sourceMappingURL=claimed-snapshot.d.ts.map

package/dist/src/tools/claimed-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claimed-snapshot.d.ts","sourceRoot":"","sources":["../../../src/tools/claimed-snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGnD,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,UAAU,CAAC;AAM5D,6FAA6F;AAC7F,eAAO,MAAM,qBAAqB,QAAiC,CAAC;AAKpE,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB;;;;;;;;;;;CAarC,CAAC;AAoCF,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAG5D;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAwBzB"}

package/dist/src/tools/claimed-snapshot.js

@@ -0,0 +1,101 @@
+/**
+ * Claim-scoped disk-only snapshot / rollback facade (UAT-1767).
+ *
+ * Thin by design: `lab-inventory vm snapshot|rollback` (UAT-1759) owns every
+ * authority decision (live Ready bare ApplianceClaim, canonical lease owned by
+ * the caller's Linear issue, protected/fixture refusal, marker, latest-only
+ * rollback, no snapshot deletion). This module only validates the closed
+ * input shape, refuses anything that is not an exact claimed-guest request,
+ * and forwards a fixed argument vector through the canonical bridge. There is
+ * no hypervisor, host, VMID, name or RAM-state selector, and no legacy
+ * fallback: an unclaimed request never reaches a provider.
+ */
+import { z } from "zod";
+import { createToolErrorResult } from "../types/mcp.js";
+import { canonicalMode, runCanonicalOperation } from "./canonical-guard.js";
+const reference = z.string().trim().min(1).max(256)
+    .refine((value) => !value.startsWith("--") && !/[\x00-\x1f\x7f]/.test(value), "must be printable text, not a command-line option");
+/** Proxmox-compatible: 2-40 letters/digits/hyphen, a letter first; `current` is reserved. */
+export const SNAPSHOT_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9-]{1,39}$/;
+const snapshotName = z.string().regex(SNAPSHOT_NAME_PATTERN, "2-40 characters: a letter first, then letters, digits or hyphen")
+    .refine((value) => value.toLowerCase() !== "current", "'current' is reserved");
+/** Claim-scoped fields shared by create_snapshot and rollback_snapshot. */
+export const ClaimedSnapshotInputShape = {
+    assetId: z.string().optional()
+        .describe("Claimed runtime slot asset ID. Presence selects the claim-scoped canonical path; there is no VMID, name or host selector."),
+    linearIssue: z.string().optional().describe("The caller's Linear issue that owns the claim (e.g. UAT-1759)."),
+    leaseId: z.string().optional().describe("Exact canonical lease ID."),
+    operatorClaimUid: z.string().optional().describe("UID of the live Ready bare ApplianceClaim."),
+    operationId: z.string().optional().describe("Unique idempotency key, 8-128 characters."),
+    apply: z.boolean().optional().default(false)
+        .describe("Plan only unless true. Apply needs every confirm* field from the plan output."),
+    confirmAssetId: z.string().optional(),
+    confirmSmbiosUuid: z.string().optional(),
+    confirmSnapshotName: z.string().optional(),
+    confirmPlanSha: z.string().optional(),
+};
+const claimedInputSchema = z.object({
+    assetId: reference,
+    linearIssue: z.string().regex(/^[A-Z][A-Z0-9]*-[1-9][0-9]*$/),
+    leaseId: reference,
+    operatorClaimUid: z.string().uuid(),
+    operationId: z.string().regex(/^[A-Za-z0-9._:-]{8,128}$/),
+    snapshotName,
+    apply: z.boolean().default(false),
+    confirmAssetId: reference.optional(),
+    confirmSmbiosUuid: z.string().uuid().optional(),
+    confirmSnapshotName: z.string().optional(),
+    confirmPlanSha: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+    // Legacy selectors are accepted only so they can be refused explicitly.
+    target: z.unknown().optional(),
+    vmIdOrName: z.unknown().optional(),
+    description: z.unknown().optional(),
+    includeRam: z.boolean().optional().default(false),
+    host: z.string().optional().default("auto"),
+}).strict().superRefine((value, ctx) => {
+    const refuse = (path, message) => ctx.addIssue({ code: z.ZodIssueCode.custom, path: [path], message });
+    for (const key of ["target", "vmIdOrName", "description"]) {
+        if (value[key] !== undefined)
+            refuse(key, "not accepted with assetId: the claim names the guest");
+    }
+    if (value.includeRam)
+        refuse("includeRam", "claimed snapshots are disk-only");
+    if (value.host !== "auto")
+        refuse("host", "not accepted with assetId: the claim names the host");
+    if (!value.apply)
+        return;
+    if (value.confirmAssetId !== value.assetId)
+        refuse("confirmAssetId", "must match assetId on apply");
+    if (value.confirmSnapshotName !== value.snapshotName)
+        refuse("confirmSnapshotName", "must match snapshotName on apply");
+    for (const key of ["confirmSmbiosUuid", "confirmPlanSha"]) {
+        if (value[key] === undefined)
+            refuse(key, "required on apply (copy it from the plan output)");
+    }
+});
+/** True when the call selects the claim-scoped canonical path. */
+export function isClaimedSnapshotCall(args) {
+    const assetId = args?.assetId;
+    return typeof assetId === "string" && assetId.trim().length > 0;
+}
+export async function handleClaimedSnapshot(action, raw, context) {
+    const tool = action === "snapshot" ? "create_snapshot" : "rollback_snapshot";
+    const parsed = claimedInputSchema.safeParse(raw ?? {});
+    if (!parsed.success)
+        return createToolErrorResult("VALIDATION_ERROR", parsed.error.errors.map((e) => `${e.path.join(".") || "input"}: ${e.message}`).join("; "));
+    if (!canonicalMode(context))
+        return createToolErrorResult("CANONICAL_OPERATION_REQUIRES_BRIDGE", `${tool} for a claimed guest requires the canonical lab-inventory bridge; no legacy fallback is allowed.`, { operation: tool });
+    const value = parsed.data;
+    const args = ["vm", action,
+        "--asset-id", value.assetId, "--linear-issue", value.linearIssue,
+        "--lease-id", value.leaseId, "--operator-claim-uid", value.operatorClaimUid,
+        "--operation-id", value.operationId, "--snapshot-name", value.snapshotName];
+    if (value.apply) {
+        // Snapshot of a large disk can outlast the CLI's default transport window.
+        args.push("--transport-timeout-seconds", "600", "--apply", "--confirm-asset-id", value.confirmAssetId, "--confirm-smbios-uuid", value.confirmSmbiosUuid, "--confirm-snapshot-name", value.confirmSnapshotName, "--confirm-plan-sha", value.confirmPlanSha);
+    }
+    // The CLI owns bounded Proxmox task waits, locks and journaling; the outer
+    // deadline must outlive them (transport 600s + coordinator/lock slack).
+    return runCanonicalOperation(context.canonicalBridge, tool, args, value.apply ? 900_000 : 120_000);
+}
+//# sourceMappingURL=claimed-snapshot.js.map

package/dist/src/tools/claimed-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claimed-snapshot.js","sourceRoot":"","sources":["../../../src/tools/claimed-snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAuB,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAI5E,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KAChD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1E,mDAAmD,CAAC,CAAC;AAEzD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AACpE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,EACzD,iEAAiE,CAAC;KACjE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,uBAAuB,CAAC,CAAC;AAEjF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC3B,QAAQ,CAAC,2HAA2H,CAAC;IACxI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;IAC7G,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACpE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC9F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACxF,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SACzC,QAAQ,CAAC,+EAA+E,CAAC;IAC5F,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC;IAC7D,OAAO,EAAE,SAAS;IAClB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC;IACzD,YAAY;IACZ,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjC,cAAc,EAAE,SAAS,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC7D,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAC/C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAU,EAAE,CAAC;QACnE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,EAAE,sDAAsD,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,KAAK,CAAC,UAAU;QAAE,MAAM,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;IACjG,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO;IACzB,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,mBAAmB,KAAK,KAAK,CAAC,YAAY;QAAE,MAAM,CAAC,qBAAqB,EAAE,kCAAkC,CAAC,CAAC;IACxH,KAAK,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACnE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IAChG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,MAAM,OAAO,GAAI,IAAiD,EAAE,OAAO,CAAC;IAC5E,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAA6B,EAC7B,GAAY,EACZ,OAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC7E,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC,kBAAkB,EAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CACvD,qCAAqC,EACrC,GAAG,IAAI,kGAAkG,EACzG,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM;QACxB,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,WAAW;QAChE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,KAAK,CAAC,gBAAgB;QAC3E,gBAAgB,EAAE,KAAK,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,SAAS,EACvD,oBAAoB,EAAE,KAAK,CAAC,cAAe,EAAE,uBAAuB,EAAE,KAAK,CAAC,iBAAkB,EAC9F,yBAAyB,EAAE,KAAK,CAAC,mBAAoB,EAAE,oBAAoB,EAAE,KAAK,CAAC,cAAe,CAAC,CAAC;IACxG,CAAC;IACD,2EAA2E;IAC3E,wEAAwE;IACxE,OAAO,qBAAqB,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACrG,CAAC"}

package/dist/src/tools/host-migrate-vm.d.ts

@@ -40,8 +40,8 @@ export declare const HostMigrateVmInputSchema: z.ZodEffects<z.ZodObject<{
     targetHost: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64";
     lockTimeoutSeconds: number;
     targetStorage: string;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     planDigest?: string | undefined;
     confirmTargetHost?: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64" | undefined;
     targetBridge?: string | undefined;
@@ -51,8 +51,8 @@ export declare const HostMigrateVmInputSchema: z.ZodEffects<z.ZodObject<{
     operationId: string;
     targetHost: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64";
     apply?: boolean | undefined;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     lockTimeoutSeconds?: number | undefined;
     planDigest?: string | undefined;
     confirmTargetHost?: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64" | undefined;
@@ -66,8 +66,8 @@ export declare const HostMigrateVmInputSchema: z.ZodEffects<z.ZodObject<{
     targetHost: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64";
     lockTimeoutSeconds: number;
     targetStorage: string;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     planDigest?: string | undefined;
     confirmTargetHost?: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64" | undefined;
     targetBridge?: string | undefined;
@@ -77,8 +77,8 @@ export declare const HostMigrateVmInputSchema: z.ZodEffects<z.ZodObject<{
     operationId: string;
     targetHost: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64";
     apply?: boolean | undefined;
-    receiptFile?: string | undefined;
     confirmAssetId?: string | undefined;
+    receiptFile?: string | undefined;
     lockTimeoutSeconds?: number | undefined;
     planDigest?: string | undefined;
     confirmTargetHost?: "proxmox-lab" | "proxmox-mini" | "proxmox-minis-lab" | "proxmox-ibm64" | undefined;

package/dist/src/tools/import-qcow.d.ts

@@ -116,9 +116,9 @@ export declare const ImportQcowInputObjectSchema: z.ZodObject<{
     network?: string | undefined;
     diskGb?: number | undefined;
     ttlHours?: number | undefined;
+    confirmAssetId?: string | undefined;
     workspaceRoot?: string | undefined;
     importStorage?: string | undefined;
-    confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;
@@ -141,10 +141,10 @@ export declare const ImportQcowInputObjectSchema: z.ZodObject<{
     diskGb?: number | undefined;
     purpose?: string | undefined;
     ttlHours?: number | undefined;
-    workspaceRoot?: string | undefined;
-    importStorage?: string | undefined;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
+    workspaceRoot?: string | undefined;
+    importStorage?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;
@@ -195,9 +195,9 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     network?: string | undefined;
     diskGb?: number | undefined;
     ttlHours?: number | undefined;
+    confirmAssetId?: string | undefined;
     workspaceRoot?: string | undefined;
     importStorage?: string | undefined;
-    confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;
@@ -220,10 +220,10 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     diskGb?: number | undefined;
     purpose?: string | undefined;
     ttlHours?: number | undefined;
-    workspaceRoot?: string | undefined;
-    importStorage?: string | undefined;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
+    workspaceRoot?: string | undefined;
+    importStorage?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;
@@ -247,9 +247,9 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     network?: string | undefined;
     diskGb?: number | undefined;
     ttlHours?: number | undefined;
+    confirmAssetId?: string | undefined;
     workspaceRoot?: string | undefined;
     importStorage?: string | undefined;
-    confirmAssetId?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;
@@ -272,10 +272,10 @@ export declare const ImportQcowInputSchema: z.ZodEffects<z.ZodObject<{
     diskGb?: number | undefined;
     purpose?: string | undefined;
     ttlHours?: number | undefined;
-    workspaceRoot?: string | undefined;
-    importStorage?: string | undefined;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
+    workspaceRoot?: string | undefined;
+    importStorage?: string | undefined;
     confirmVmPrefix?: string | undefined;
     confirmVmid?: number | undefined;
     vcpus?: number | undefined;

package/dist/src/tools/index.js

@@ -56,7 +56,7 @@ import { SandboxCloneInputShape, handleSandboxClone, SandboxResetInputShape, han
 import { FerrumFleetMetricsInputShape, handleFerrumFleetMetrics, } from "./fleet-metrics.js";
 import { ListApplianceClaimsInputShape, handleListApplianceClaims, GetApplianceClaimInputShape, handleGetApplianceClaim, CreateApplianceClaimInputShape, handleCreateApplianceClaim, DeleteApplianceClaimInputShape, handleDeleteApplianceClaim, PauseApplianceClaimInputShape, handlePauseApplianceClaim, RenewApplianceClaimInputShape, handleRenewApplianceClaim, independentClaimVerb, verifyIndependentClaimAccess, } from "./appliance-claim-tools.js";
 import { claimFirstCanonicalApply, hostForClaimNode } from "./claim-first.js";
-import { legacyGuestHandlerBlocked, LEGACY_GUEST_AUTHORITY_ERROR } from "./legacy-guest-guard.js";
+import { isClaimedSnapshotToolCall, legacyGuestHandlerBlocked, LEGACY_GUEST_AUTHORITY_ERROR } from "./legacy-guest-guard.js";
 import { ClaimedImportQcowInputObjectSchema, CLAIMED_IMPORT_QCOW_TOOL_DESCRIPTION, handleClaimedImportQcow, } from "./claimed-import-qcow.js";
 import { SideloadApplianceRunnerInputShape, handleSideloadApplianceRunner, } from "./sideload-runner.js";
 import { GetApplianceIdInputShape, handleGetApplianceId, } from "./appliance-id.js";
@@ -193,7 +193,7 @@ export function registerAllTools(mcpServer, context) {
         else if (legacyGuestHandlerBlocked(name, toolArgs, canonicalMode(context))) {
             result = createToolErrorResult(LEGACY_GUEST_AUTHORITY_ERROR, "This legacy SDK guest effect has no claimed canonical physical-slot authority and is unavailable. Use only an implemented typed canonical lifecycle operation; caller flags cannot enable this handler.", { operation: name });
         }
-        else if (canonicalMode(context) && canonicalDirectTools.has(name)) {
+        else if (canonicalMode(context) && canonicalDirectTools.has(name) && !isClaimedSnapshotToolCall(name, toolArgs)) {
             result = canonicalOperationBlocked(name, "this legacy handler is not an identity-bound canonical operation; use the canonical lab workflow");
         }
         else {
@@ -407,11 +407,11 @@ export function registerAllTools(mcpServer, context) {
         return handleUnmountIso(args, context);
     });
     // 17. create_snapshot
-    server.tool("create_snapshot", "Create a new snapshot of a target VM with optional RAM state and description.", CreateSnapshotInputShape, async (args) => {
+    server.tool("create_snapshot", "Create a new snapshot of a target VM with optional RAM state and description. For a claimed bare guest pass assetId, linearIssue, leaseId, operatorClaimUid, operationId and snapshotName instead: this routes to canonical lab-inventory vm snapshot (disk-only, plan by default; apply needs the confirm* fields from the plan).", CreateSnapshotInputShape, async (args) => {
         return handleCreateSnapshot(args, context);
     });
     // 18. rollback_snapshot
-    server.tool("rollback_snapshot", "Revert / rollback a target VM to a specified snapshot with safety validation protecting core infrastructure.", RollbackSnapshotInputShape, async (args) => {
+    server.tool("rollback_snapshot", "Revert / rollback a target VM to a specified snapshot with safety validation protecting core infrastructure. For a claimed bare guest pass assetId, linearIssue, leaseId, operatorClaimUid, operationId and snapshotName instead: this routes to canonical lab-inventory vm rollback (latest snapshot made by this tooling for the claim only; plan by default).", RollbackSnapshotInputShape, async (args) => {
         return handleRollbackSnapshot(args, context);
     });
     // 19. update_appliance_cli