@calltelemetry/ct-lab-mcp 0.8.85 → 0.8.87

package/dist/src/tools/vm-action.d.ts

@@ -127,15 +127,15 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     timeoutSeconds: z.ZodOptional<z.ZodNumber>;
     format: z.ZodDefault<z.ZodOptional<z.ZodEnum<["table", "json"]>>>;
 }, "strip", z.ZodTypeAny, {
-    action: "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "status" | "destroy" | "clone";
+    action: "status" | "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "destroy" | "clone";
     format: "table" | "json";
     apply: boolean;
     force: boolean;
     ackUntracked: boolean;
     ackManualCleanup: boolean;
+    reason?: string | undefined;
     host?: string | undefined;
     vmid?: string | number | undefined;
-    reason?: string | undefined;
     timeoutSeconds?: number | undefined;
     hostAssetId?: string | undefined;
     assetId?: string | undefined;
@@ -162,11 +162,11 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
         macAddress?: string | undefined;
     } | undefined;
 }, {
-    action: "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "status" | "destroy" | "clone";
+    action: "status" | "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "destroy" | "clone";
+    reason?: string | undefined;
     host?: string | undefined;
     vmid?: string | number | undefined;
     format?: "table" | "json" | undefined;
-    reason?: string | undefined;
     timeoutSeconds?: number | undefined;
     hostAssetId?: string | undefined;
     assetId?: string | undefined;
@@ -197,15 +197,15 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
         macAddress?: string | undefined;
     } | undefined;
 }>, {
-    action: "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "status" | "destroy" | "clone";
+    action: "status" | "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "destroy" | "clone";
     format: "table" | "json";
     apply: boolean;
     force: boolean;
     ackUntracked: boolean;
     ackManualCleanup: boolean;
+    reason?: string | undefined;
     host?: string | undefined;
     vmid?: string | number | undefined;
-    reason?: string | undefined;
     timeoutSeconds?: number | undefined;
     hostAssetId?: string | undefined;
     assetId?: string | undefined;
@@ -232,11 +232,11 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
         macAddress?: string | undefined;
     } | undefined;
 }, {
-    action: "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "status" | "destroy" | "clone";
+    action: "status" | "config" | "start" | "stop" | "reboot" | "shutdown" | "reset" | "suspend" | "resume" | "destroy" | "clone";
+    reason?: string | undefined;
     host?: string | undefined;
     vmid?: string | number | undefined;
     format?: "table" | "json" | undefined;
-    reason?: string | undefined;
     timeoutSeconds?: number | undefined;
     hostAssetId?: string | undefined;
     assetId?: string | undefined;

package/dist/src/tools/vm-cleanup.d.ts

@@ -87,9 +87,9 @@ export declare const CleanupExpiredVmsInputSchema: z.ZodObject<{
     warnHours?: number | undefined;
     outputFile?: string | undefined;
 }, {
+    reason?: string | undefined;
     dryRun?: boolean | undefined;
     format?: "table" | "json" | undefined;
-    reason?: string | undefined;
     hostAssetId?: string | undefined;
     apply?: boolean | undefined;
     artifactReceipt?: string | undefined;

package/dist/src/worker-adapter.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Universal adapter bridging v1 MCP tool registration (`server.tool(...)`)
+ * onto v2 `@modelcontextprotocol/server` (`server.registerTool(...)`).
+ */
+export interface UniversalToolServer {
+    tool(name: string, ...args: any[]): void;
+    registerTool(name: string, config: any, handler: any): void;
+}
+export declare function createUniversalAdapter(server: any): UniversalToolServer;
+//# sourceMappingURL=worker-adapter.d.ts.map

package/dist/src/worker-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-adapter.d.ts","sourceRoot":"","sources":["../../src/worker-adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC;CAC7D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,mBAAmB,CA4FvE"}

package/dist/src/worker-adapter.js

@@ -0,0 +1,94 @@
+/**
+ * Universal adapter bridging v1 MCP tool registration (`server.tool(...)`)
+ * onto v2 `@modelcontextprotocol/server` (`server.registerTool(...)`).
+ */
+import { z } from 'zod';
+import { zodToJsonSchema } from 'zod-to-json-schema';
+import { fromJsonSchema } from '@modelcontextprotocol/server';
+export function createUniversalAdapter(server) {
+    const adapter = {
+        registerTool(name, config, handler) {
+            let inputSchema = config?.inputSchema;
+            if (inputSchema && typeof inputSchema === 'object' && '_def' in inputSchema) {
+                const jsonSchema = zodToJsonSchema(inputSchema, { target: 'openApi3' });
+                inputSchema = fromJsonSchema(jsonSchema);
+            }
+            else if (inputSchema && typeof inputSchema === 'object' && !('type' in inputSchema) && !('$ref' in inputSchema)) {
+                const jsonSchema = zodToJsonSchema(z.object(inputSchema), { target: 'openApi3' });
+                inputSchema = fromJsonSchema(jsonSchema);
+            }
+            else if (inputSchema && typeof inputSchema === 'object') {
+                inputSchema = fromJsonSchema(inputSchema);
+            }
+            server.registerTool(name, {
+                description: config?.description || '',
+                inputSchema,
+            }, async (toolArgs) => {
+                try {
+                    return await handler(toolArgs);
+                }
+                catch (err) {
+                    return {
+                        isError: true,
+                        content: [
+                            {
+                                type: 'text',
+                                text: err instanceof Error ? err.message : String(err),
+                            },
+                        ],
+                    };
+                }
+            });
+        },
+        tool(name, ...args) {
+            let description = '';
+            let schema = {};
+            let cb;
+            if (args.length === 1) {
+                cb = args[0];
+            }
+            else if (args.length === 2) {
+                if (typeof args[0] === 'string') {
+                    description = args[0];
+                    cb = args[1];
+                }
+                else {
+                    schema = args[0];
+                    cb = args[1];
+                }
+            }
+            else if (args.length === 3) {
+                description = args[0];
+                schema = args[1];
+                cb = args[2];
+            }
+            else {
+                throw new Error(`Unexpected argument count ${args.length} for tool ${name}`);
+            }
+            // If schema is a raw shape object rather than a Zod schema instance, wrap with z.object()
+            const zodSchema = schema && typeof schema === 'object' && !('_def' in schema)
+                ? z.object(schema)
+                : (schema || z.object({}));
+            const jsonSchema = zodToJsonSchema(zodSchema, { target: 'openApi3' });
+            const inputSchema = fromJsonSchema(jsonSchema);
+            server.registerTool(name, { description, inputSchema }, async (toolArgs) => {
+                try {
+                    return await cb(toolArgs);
+                }
+                catch (err) {
+                    return {
+                        isError: true,
+                        content: [
+                            {
+                                type: 'text',
+                                text: err instanceof Error ? err.message : String(err),
+                            },
+                        ],
+                    };
+                }
+            });
+        },
+    };
+    return adapter;
+}
+//# sourceMappingURL=worker-adapter.js.map

package/dist/src/worker-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-adapter.js","sourceRoot":"","sources":["../../src/worker-adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAO9D,MAAM,UAAU,sBAAsB,CAAC,MAAW;IAChD,MAAM,OAAO,GAAwB;QACnC,YAAY,CAAC,IAAY,EAAE,MAAW,EAAE,OAAY;YAClD,IAAI,WAAW,GAAG,MAAM,EAAE,WAAW,CAAC;YACtC,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;gBAC5E,MAAM,UAAU,GAAG,eAAe,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxE,WAAW,GAAG,cAAc,CAAC,UAAiB,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC;gBAClH,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClF,WAAW,GAAG,cAAc,CAAC,UAAiB,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC1D,WAAW,GAAG,cAAc,CAAC,WAAkB,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;gBACE,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE;gBACtC,WAAW;aACZ,EACD,KAAK,EAAE,QAAa,EAAE,EAAE;gBACtB,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACjC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;6BACvD;yBACF;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAY,EAAE,GAAG,IAAW;YAC/B,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,IAAI,MAAM,GAAQ,EAAE,CAAC;YACrB,IAAI,EAA+B,CAAC;YAEpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAChC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACtB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,aAAa,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,0FAA0F;YAC1F,MAAM,SAAS,GACb,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;gBACzD,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBAClB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAE/B,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,cAAc,CAAC,UAAiB,CAAC,CAAC;YAEtD,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,KAAK,EAAE,QAAa,EAAE,EAAE;gBACtB,IAAI,CAAC;oBACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;6BACvD;yBACF;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/worker.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Cloudflare Workers entrypoint: stateless streamable-HTTP MCP (spec 2026-07-28)
+ * for Call Telemetry Lab MCP Server (ct-lab-mcp).
+ *
+ * One MCP server instance is created per request by `createMcpHandler`; there is
+ * no session map, so any isolate can serve any request.
+ */
+import { McpServer } from '@modelcontextprotocol/server';
+import { type AccessEnv } from './access-auth.js';
+export declare const SERVER_NAME = "ct-lab-mcp";
+export declare const SERVER_VERSION: string;
+export interface Env extends AccessEnv {
+    MCP_BASE_PATH?: string;
+    LAB_PROXMOX_URL?: string;
+    LAB_PROXMOX_USERNAME?: string;
+    LAB_PROXMOX_PASSWORD?: string;
+    LAB_PROXMOX_REALM?: string;
+    LAB_PROXMOX_MINIS_URL?: string;
+    LAB_PROXMOX_MINIS_USERNAME?: string;
+    LAB_PROXMOX_MINIS_PASSWORD?: string;
+    LAB_PROXMOX_MINIS_REALM?: string;
+    LAB_VM_CREDENTIALS_USERNAME?: string;
+    LAB_VM_CREDENTIALS_PASSWORD?: string;
+    ALLOW_ESXI_SLOTS?: string;
+    ESXI_SCAN?: string;
+}
+export declare function createWorkerServer(env: Env): McpServer;
+export interface WorkerExecutionContext {
+    waitUntil(promise: Promise<unknown>): void;
+    passThroughOnException?(): void;
+}
+declare const _default: {
+    fetch(request: Request, env: Env, ctx: WorkerExecutionContext): Promise<Response>;
+};
+export default _default;
+//# sourceMappingURL=worker.d.ts.map

package/dist/src/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAehE,eAAO,MAAM,WAAW,eAAe,CAAC;AACxC,eAAO,MAAM,cAAc,QAA8B,CAAC;AAE1D,MAAM,WAAW,GAAI,SAAQ,SAAS;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CA0FtD;AASD,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,sBAAsB,CAAC,IAAI,IAAI,CAAC;CACjC;;mBAGsB,OAAO,OAAO,GAAG,OAAO,sBAAsB,GAAG,OAAO,CAAC,QAAQ,CAAC;;AADzF,wBAsDE"}

package/dist/src/worker.js

@@ -0,0 +1,151 @@
+/**
+ * Cloudflare Workers entrypoint: stateless streamable-HTTP MCP (spec 2026-07-28)
+ * for Call Telemetry Lab MCP Server (ct-lab-mcp).
+ *
+ * One MCP server instance is created per request by `createMcpHandler`; there is
+ * no session map, so any isolate can serve any request.
+ */
+import { McpServer } from '@modelcontextprotocol/server';
+import { createMcpHandler } from 'agents/mcp/server';
+import { verifyAccess } from './access-auth.js';
+import { agentOf } from './agent.js';
+import { createUniversalAdapter } from './worker-adapter.js';
+import { registerAllTools } from './tools/index.js';
+import { MultiHypervisorManager } from './hypervisors/manager.js';
+import { SlotManager } from './slot/manager.js';
+import { defaultSafetyGuardrailEngine } from './guardrails/safety.js';
+import { mockApplianceExecutor } from './appliance/mock.js';
+import { RUNTIME_VERSION } from './provenance.js';
+if (typeof process !== 'undefined' && process.env) {
+    process.env.CLOUDFLARE_WORKER = '1';
+}
+export const SERVER_NAME = 'ct-lab-mcp';
+export const SERVER_VERSION = RUNTIME_VERSION || '0.8.85';
+export function createWorkerServer(env) {
+    const v2Server = new McpServer({
+        name: SERVER_NAME,
+        version: SERVER_VERSION,
+    });
+    const proxmoxUrl = (env.LAB_PROXMOX_URL || 'https://lab-pve.calltelemetry.com').replace(/\/+$/, '');
+    const proxmoxUsername = env.LAB_PROXMOX_USERNAME || 'root';
+    const proxmoxPassword = env.LAB_PROXMOX_PASSWORD || 'T3klinks!';
+    const proxmoxRealm = env.LAB_PROXMOX_REALM || 'pam';
+    const proxmoxLabConfig = {
+        id: 'proxmox-lab',
+        name: 'Proxmox VE Lab Cluster',
+        baseUrl: proxmoxUrl,
+        nodeName: 'proxmox',
+        slotSizeMb: 8192,
+        allowInsecureTls: true,
+        auth: {
+            type: 'ticket',
+            username: proxmoxUsername,
+            password: proxmoxPassword,
+            realm: proxmoxRealm,
+        },
+        protectedVmids: [100, 101, 102, 104],
+        isMock: false,
+    };
+    const proxmoxConfigs = [proxmoxLabConfig];
+    if (env.LAB_PROXMOX_MINIS_URL) {
+        proxmoxConfigs.push({
+            id: 'proxmox-mini',
+            name: 'Proxmox VE Minisforum (64GB)',
+            baseUrl: env.LAB_PROXMOX_MINIS_URL.replace(/\/+$/, ''),
+            nodeName: 'proxmox-minis',
+            slotSizeMb: 8192,
+            allowInsecureTls: true,
+            auth: {
+                type: 'ticket',
+                username: env.LAB_PROXMOX_MINIS_USERNAME || proxmoxUsername,
+                password: env.LAB_PROXMOX_MINIS_PASSWORD || proxmoxPassword,
+                realm: env.LAB_PROXMOX_MINIS_REALM || proxmoxRealm,
+            },
+            protectedVmids: [182],
+            isMock: false,
+        });
+    }
+    const credentials = {
+        tier: 'direct_env',
+        hosts: proxmoxConfigs,
+        proxmoxHosts: proxmoxConfigs,
+        esxiHosts: [],
+        vmCredentials: {
+            username: env.LAB_VM_CREDENTIALS_USERNAME || 'admin',
+            password: env.LAB_VM_CREDENTIALS_PASSWORD || '',
+            port: 2222,
+        },
+    };
+    const guardrailEngine = defaultSafetyGuardrailEngine;
+    const hypervisorManager = new MultiHypervisorManager({
+        proxmoxConfigs,
+        esxiConfigs: [],
+        safetyEngine: guardrailEngine,
+        forceMock: false,
+    });
+    const slotManager = new SlotManager({
+        hypervisorManager,
+        guardrailEngine,
+        includeEsxi: false,
+    });
+    const context = {
+        slotManager,
+        hypervisorManager,
+        guardrailEngine,
+        applianceExecutor: mockApplianceExecutor,
+        credentials,
+        mockPermitted: false,
+        plane: 'local-sse',
+    };
+    const adapter = createUniversalAdapter(v2Server);
+    registerAllTools(adapter, context);
+    return v2Server;
+}
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+export default {
+    async fetch(request, env, ctx) {
+        const base = (env.MCP_BASE_PATH ?? '/ct_lab').replace(/\/+$/, '');
+        const { pathname } = new URL(request.url);
+        if (pathname === `${base}/healthz` ||
+            pathname === '/healthz' ||
+            pathname === `${base}/health` ||
+            pathname === '/health') {
+            return json(200, {
+                status: 'ok',
+                service: SERVER_NAME,
+                version: SERVER_VERSION,
+                transport: 'streamable-http',
+            });
+        }
+        if (pathname !== `${base}/mcp`)
+            return json(404, { error: 'not found' });
+        const access = await verifyAccess(request, env);
+        if (!access.ok) {
+            console.log(JSON.stringify({
+                event: 'mcp_access_denied',
+                server: SERVER_NAME,
+                status: access.status,
+                reason: access.reason,
+            }));
+            return json(access.status, { error: access.reason });
+        }
+        const agent = await agentOf(request.headers);
+        console.log(JSON.stringify({
+            event: 'mcp_access',
+            server: SERVER_NAME,
+            identity: access.identity ?? 'unknown',
+            kind: access.kind ?? 'unknown',
+            agent,
+            method: request.method,
+            mcp_method: request.headers.get('Mcp-Method'),
+            tool: request.headers.get('Mcp-Name'),
+        }));
+        return createMcpHandler(() => createWorkerServer(env), { route: `${base}/mcp` })(request, env, ctx);
+    },
+};
+//# sourceMappingURL=worker.js.map

package/dist/src/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/worker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAkB,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,IAAI,QAAQ,CAAC;AAkB1D,MAAM,UAAU,kBAAkB,CAAC,GAAQ;IACzC,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC;QAC7B,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,mCAAmC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpG,MAAM,eAAe,GAAG,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC;IAC3D,MAAM,eAAe,GAAG,GAAG,CAAC,oBAAoB,IAAI,WAAW,CAAC;IAChE,MAAM,YAAY,GAAG,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAEpD,MAAM,gBAAgB,GAAsB;QAC1C,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,IAAI;QACtB,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,eAAe;YACzB,KAAK,EAAE,YAAY;SACpB;QACD,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QACpC,MAAM,EAAE,KAAK;KACd,CAAC;IAEF,MAAM,cAAc,GAAwB,CAAC,gBAAgB,CAAC,CAAC;IAE/D,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC;YAClB,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtD,QAAQ,EAAE,eAAe;YACzB,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,IAAI;YACtB,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,GAAG,CAAC,0BAA0B,IAAI,eAAe;gBAC3D,QAAQ,EAAE,GAAG,CAAC,0BAA0B,IAAI,eAAe;gBAC3D,KAAK,EAAE,GAAG,CAAC,uBAAuB,IAAI,YAAY;aACnD;YACD,cAAc,EAAE,CAAC,GAAG,CAAC;YACrB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAA+B;QAC9C,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,cAAc;QACrB,YAAY,EAAE,cAAc;QAC5B,SAAS,EAAE,EAAE;QACb,aAAa,EAAE;YACb,QAAQ,EAAE,GAAG,CAAC,2BAA2B,IAAI,OAAO;YACpD,QAAQ,EAAE,GAAG,CAAC,2BAA2B,IAAI,EAAE;YAC/C,IAAI,EAAE,IAAI;SACX;KACF,CAAC;IAEF,MAAM,eAAe,GAAG,4BAA4B,CAAC;IAErD,MAAM,iBAAiB,GAAG,IAAI,sBAAsB,CAAC;QACnD,cAAc;QACd,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,iBAAiB;QACjB,eAAe;QACf,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAgB;QAC3B,WAAW;QACX,iBAAiB;QACjB,eAAe;QACf,iBAAiB,EAAE,qBAAqB;QACxC,WAAW;QACX,aAAa,EAAE,KAAK;QACpB,KAAK,EAAE,WAAW;KACnB,CAAC;IAEF,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,gBAAgB,CAAC,OAAc,EAAE,OAAO,CAAC,CAAC;IAE1C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa;IACzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAOD,eAAe;IACb,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAQ,EAAE,GAA2B;QACjE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE1C,IACE,QAAQ,KAAK,GAAG,IAAI,UAAU;YAC9B,QAAQ,KAAK,UAAU;YACvB,QAAQ,KAAK,GAAG,IAAI,SAAS;YAC7B,QAAQ,KAAK,SAAS,EACtB,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,cAAc;gBACvB,SAAS,EAAE,iBAAiB;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,KAAK,GAAG,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CACH,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YACtC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YAC9B,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAC7C,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;SACtC,CAAC,CACH,CAAC;QAEF,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,MAAM,EAAE,CAAC,CAC9E,OAAO,EACP,GAAG,EACH,GAAY,CACb,CAAC;IACJ,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calltelemetry/ct-lab-mcp",
-  "version": "0.8.85",
+  "version": "0.8.87",
   "description": "Expanded Model Context Protocol (MCP) server for Call Telemetry lab, fleet, and appliance management across Proxmox VE and VMware ESXi.",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -24,7 +24,10 @@
     "test:coverage": "vitest run --coverage",
     "prepack": "npm run build",
     "prepublishOnly": "npm run build",
-    "start": "node dist/bin/ct-lab-mcp.js"
+    "start": "node dist/bin/ct-lab-mcp.js",
+    "dev:worker": "wrangler dev --env development",
+    "deploy:worker": "wrangler deploy",
+    "build:worker": "wrangler deploy --dry-run --outdir dist-worker"
   },
   "publishConfig": {
     "access": "public"
@@ -54,15 +57,20 @@
   "license": "MIT",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.6.0",
+    "@modelcontextprotocol/server": "2.0.0",
+    "agents": "^0.28.0",
     "commander": "^13.1.0",
     "dotenv": "^16.4.7",
     "express": "^4.21.2",
+    "jose": "^6.2.12",
     "js-yaml": "^5.3.0",
     "ssh2": "^1.16.0",
     "undici": "^7.4.0",
-    "zod": "^3.24.2"
+    "zod": "^3.24.2",
+    "zod-to-json-schema": "^3.25.2"
   },
   "devDependencies": {
+    "@cloudflare/workers-types": "^5.20261010.1",
     "@types/express": "^5.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.13.5",
@@ -71,7 +79,8 @@
     "ajv": "^8.20.0",
     "tsx": "^4.19.3",
     "typescript": "^5.7.3",
-    "vitest": "^3.0.7"
+    "vitest": "^3.0.7",
+    "wrangler": "^4.149.0"
   },
   "engines": {
     "node": ">=20.0.0"