@calltelemetry/ct-lab-mcp 0.8.98 → 0.8.100

package/dist/src/tools/sandbox-tools.d.ts

@@ -65,8 +65,8 @@ export declare const SandboxCloneInputSchema: z.ZodEffects<z.ZodObject<{
     vmid?: number | undefined;
     diskGb?: number | undefined;
     confirmAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
     sshKey?: string | undefined;
     sshKeyFile?: string | undefined;
     confirmName?: string | undefined;
@@ -84,8 +84,8 @@ export declare const SandboxCloneInputSchema: z.ZodEffects<z.ZodObject<{
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
     templateAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
     baselineSnapshot?: string | undefined;
     sshKey?: string | undefined;
     sshKeyFile?: string | undefined;
@@ -107,8 +107,8 @@ export declare const SandboxCloneInputSchema: z.ZodEffects<z.ZodObject<{
     vmid?: number | undefined;
     diskGb?: number | undefined;
     confirmAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
     sshKey?: string | undefined;
     sshKeyFile?: string | undefined;
     confirmName?: string | undefined;
@@ -126,8 +126,8 @@ export declare const SandboxCloneInputSchema: z.ZodEffects<z.ZodObject<{
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
     templateAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
     baselineSnapshot?: string | undefined;
     sshKey?: string | undefined;
     sshKeyFile?: string | undefined;
@@ -170,8 +170,8 @@ export declare const SandboxResetInputSchema: z.ZodEffects<z.ZodObject<{
     waitAgent: boolean;
     vmid?: number | undefined;
     confirmAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
 }, {
     linearIssue: string;
     assetId: string;
@@ -181,8 +181,8 @@ export declare const SandboxResetInputSchema: z.ZodEffects<z.ZodObject<{
     snapshotName?: string | undefined;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
     waitAgent?: boolean | undefined;
 }>, {
     linearIssue: string;
@@ -194,8 +194,8 @@ export declare const SandboxResetInputSchema: z.ZodEffects<z.ZodObject<{
     waitAgent: boolean;
     vmid?: number | undefined;
     confirmAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
 }, {
     linearIssue: string;
     assetId: string;
@@ -205,8 +205,8 @@ export declare const SandboxResetInputSchema: z.ZodEffects<z.ZodObject<{
     snapshotName?: string | undefined;
     apply?: boolean | undefined;
     confirmAssetId?: string | undefined;
-    receiptFile?: string | undefined;
     planDigest?: string | undefined;
+    receiptFile?: string | undefined;
     waitAgent?: boolean | undefined;
 }>;
 export type SandboxResetInput = z.infer<typeof SandboxResetInputSchema>;

package/dist/src/tools/stig-tools.d.ts

@@ -0,0 +1,47 @@
+import { z } from "zod";
+import { CallToolResult } from "../types/mcp.js";
+import type { ToolContext } from "./list-hosts.js";
+import { StigRunner } from "../stig/runner.js";
+export declare const BuildStigTemplateInputShape: {
+    ssgDatastreamPath: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    dns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    ntp: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    apply: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    planDigest: z.ZodOptional<z.ZodString>;
+};
+export declare const CreateStigClaimInputShape: {
+    cloneName: z.ZodString;
+    templateRef: z.ZodOptional<z.ZodString>;
+    ttlHours: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    dns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    ntp: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    poolMaxPercent: z.ZodOptional<z.ZodNumber>;
+    apply: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    planDigest: z.ZodOptional<z.ZodString>;
+};
+export declare const ValidateStigClaimInputShape: {
+    cloneName: z.ZodString;
+    requireDisa: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+};
+export declare const GetStigReceiptInputShape: {
+    claim: z.ZodString;
+};
+export declare const ReleaseStigTemplateInputShape: {
+    claim: z.ZodString;
+    confirmDestroy: z.ZodBoolean;
+};
+export interface StigToolDeps {
+    makeRunner: () => StigRunner;
+}
+export declare function handleBuildStigTemplate(args: unknown, deps?: StigToolDeps): Promise<CallToolResult>;
+export declare function handleCreateStigClaim(args: unknown, deps?: StigToolDeps): Promise<CallToolResult>;
+export declare function handleValidateStigClaim(args: unknown, deps?: StigToolDeps): Promise<CallToolResult>;
+export declare function handleGetStigReceipt(args: unknown, deps?: StigToolDeps): Promise<CallToolResult>;
+export declare function handleReleaseStigTemplate(args: unknown, deps?: StigToolDeps): Promise<CallToolResult>;
+export declare const STIG_TOOL_NAMES: readonly ["build_stig_template", "create_stig_claim", "validate_stig_claim", "get_stig_receipt", "release_stig_template"];
+/** Registers the five tools on a server whose `.tool()` is already the guarded wrapper. */
+export declare function registerStigTools(server: {
+    tool: (...a: any[]) => unknown;
+}, _context: ToolContext, deps?: StigToolDeps): boolean;
+//# sourceMappingURL=stig-tools.d.ts.map

package/dist/src/tools/stig-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stig-tools.d.ts","sourceRoot":"","sources":["../../../src/tools/stig-tools.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAA2C,MAAM,iBAAiB,CAAC;AAC1F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAS/C,eAAO,MAAM,2BAA2B;;;;;;;CAOvC,CAAC;AACF,eAAO,MAAM,yBAAyB;;;;;;;;;CAQrC,CAAC;AACF,eAAO,MAAM,2BAA2B;;;CAGvC,CAAC;AACF,eAAO,MAAM,wBAAwB;;CAA0G,CAAC;AAChJ,eAAO,MAAM,6BAA6B;;;CAGzC,CAAC;AAEF,MAAM,WAAW,YAAY;IAAG,UAAU,EAAE,MAAM,UAAU,CAAA;CAAE;AAY9D,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,YAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAQxH;AACD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,YAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAItH;AACD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,YAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAIxH;AACD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,YAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAIrH;AACD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,YAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAI1H;AAED,eAAO,MAAM,eAAe,2HAA4H,CAAC;AAEzJ,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,OAAO,CAAA;CAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,GAAE,YAA4B,GAAG,OAAO,CAOhJ"}

package/dist/src/tools/stig-tools.js

@@ -0,0 +1,125 @@
+/**
+ * RHEL 8.10 STIG tools (docs/designs/stig-tools.md). Always registered; the safety guards are not optional.
+ *
+ *   build_stig_template   plan | apply   claim-first Packer build, scan gate, template verify, long-lived claim
+ *   create_stig_claim     plan | apply   claim-first full clone, fresh TPM, first-boot re-key, escrow, verify, fstrim
+ *   validate_stig_claim                  oscap scan on a clone, fail=0 gate, receipt summary on the claim
+ *   get_stig_receipt                     the annotated receipt summary and what status.stig will carry
+ *   release_stig_template                explicit template destroy, then claim deletion
+ *
+ * The shell recipe in ct-meta (rhel8-stig-template) remains the documented default until live parity passes.
+ */
+import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { z } from "zod";
+import { ProxmoxErrorCode, createToolErrorResult } from "../types/mcp.js";
+import { StigRunner } from "../stig/runner.js";
+import { liveDeps } from "../stig/live.js";
+import { redact } from "../stig/model.js";
+const hex64 = z.string().regex(/^[a-f0-9]{64}$/i);
+const dnsList = z.array(z.string().ip({ version: "v4" })).min(1).max(4);
+const ntpList = z.array(z.string().min(1).max(253)).max(4);
+const cloneName = z.string().regex(/^[a-z0-9]([a-z0-9-]{0,40}[a-z0-9])?$/, "lowercase DNS label");
+export const BuildStigTemplateInputShape = {
+    ssgDatastreamPath: z.string().min(1).describe("Path to the pinned scap-security-guide 0.1.82 ssg-rhel8-ds.xml on this host; its sha256 must equal the pin."),
+    name: z.string().regex(/^rhel810-stig-\d{8}-\d{4}$/).optional().describe("Template name (default rhel810-stig-<YYYYMMDD>-<vmid>)."),
+    dns: dnsList.optional().describe("DNS servers baked into the template's organization settings."),
+    ntp: ntpList.optional().describe("NTP servers baked into the template."),
+    apply: z.boolean().optional().default(false).describe("Omit for a plan. True runs the build (60-90 minutes) and needs planDigest."),
+    planDigest: hex64.optional().describe("planDigest from the plan; required with apply=true."),
+};
+export const CreateStigClaimInputShape = {
+    cloneName: cloneName.describe("Clone VM name; the claim is clone-<cloneName>, the escrow key LAB_RHEL8_RECOVERY_<CLONENAME>."),
+    templateRef: z.string().regex(/^rhel810-stig-\d{8}-\d{4}$/).optional().describe("Template to clone (default: the newest)."),
+    ttlHours: z.number().int().min(1).max(8760).optional().default(48),
+    dns: dnsList.optional(), ntp: ntpList.optional(),
+    poolMaxPercent: z.number().int().min(10).max(70).optional().describe("Refuse to start above this thin-pool use. Default and hard cap 70; it can only be tightened."),
+    apply: z.boolean().optional().default(false),
+    planDigest: hex64.optional().describe("planDigest from the plan; required with apply=true."),
+};
+export const ValidateStigClaimInputShape = {
+    cloneName,
+    requireDisa: z.boolean().optional().default(false).describe("Fail when the clone's template predates the DISA V2R8 dual-scan recipe (no benchmark baked in). Both scans must be fail=0 when present."),
+};
+export const GetStigReceiptInputShape = { claim: z.string().min(1).describe("ApplianceClaim name, e.g. clone-<cloneName> or tpl-<template>.") };
+export const ReleaseStigTemplateInputShape = {
+    claim: z.string().min(1),
+    confirmDestroy: z.boolean().describe("Must be true: templates are never reaped by the operator, so release destroys the template first, then deletes the claim."),
+};
+const defaultDeps = () => ({ makeRunner: () => new StigRunner(liveDeps()) });
+function ok(payload) {
+    return { content: [{ type: "text", text: redact(JSON.stringify({ success: true, ...payload }, null, 2)) }] };
+}
+function fail(operation, err) {
+    const message = redact(String(err?.message ?? err));
+    const validation = /plan digest|must|cap|exceeds|refus|not a template|already exists|not found|re-encrypting|unreadable|datastream|packer|confirm|pinned|missing/i.test(message);
+    return createToolErrorResult(validation ? ProxmoxErrorCode.VALIDATION_ERROR : ProxmoxErrorCode.UPSTREAM_API_ERROR, `${operation}: ${message}`, { operation });
+}
+export async function handleBuildStigTemplate(args, deps = defaultDeps()) {
+    const p = z.object(BuildStigTemplateInputShape).strict().safeParse(args);
+    if (!p.success)
+        return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, p.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
+    try {
+        const sha = createHash("sha256").update(readFileSync(p.data.ssgDatastreamPath)).digest("hex");
+        const result = await deps.makeRunner().build({ name: p.data.name, ssgDatastream: p.data.ssgDatastreamPath, ssgDatastreamSha256: sha, apply: p.data.apply, planDigest: p.data.planDigest, dns: p.data.dns, ntp: p.data.ntp });
+        return ok(result);
+    }
+    catch (e) {
+        return fail("build_stig_template", e);
+    }
+}
+export async function handleCreateStigClaim(args, deps = defaultDeps()) {
+    const p = z.object(CreateStigClaimInputShape).strict().safeParse(args);
+    if (!p.success)
+        return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, p.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
+    try {
+        return ok(await deps.makeRunner().createClone(p.data));
+    }
+    catch (e) {
+        return fail("create_stig_claim", e);
+    }
+}
+export async function handleValidateStigClaim(args, deps = defaultDeps()) {
+    const p = z.object(ValidateStigClaimInputShape).strict().safeParse(args);
+    if (!p.success)
+        return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, p.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
+    try {
+        return ok(await deps.makeRunner().validate(p.data));
+    }
+    catch (e) {
+        return fail("validate_stig_claim", e);
+    }
+}
+export async function handleGetStigReceipt(args, deps = defaultDeps()) {
+    const p = z.object(GetStigReceiptInputShape).strict().safeParse(args);
+    if (!p.success)
+        return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, p.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
+    try {
+        return ok(await deps.makeRunner().getReceipt(p.data));
+    }
+    catch (e) {
+        return fail("get_stig_receipt", e);
+    }
+}
+export async function handleReleaseStigTemplate(args, deps = defaultDeps()) {
+    const p = z.object(ReleaseStigTemplateInputShape).strict().safeParse(args);
+    if (!p.success)
+        return createToolErrorResult(ProxmoxErrorCode.VALIDATION_ERROR, p.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
+    try {
+        return ok(await deps.makeRunner().releaseTemplate(p.data));
+    }
+    catch (e) {
+        return fail("release_stig_template", e);
+    }
+}
+export const STIG_TOOL_NAMES = ["build_stig_template", "create_stig_claim", "validate_stig_claim", "get_stig_receipt", "release_stig_template"];
+/** Registers the five tools on a server whose `.tool()` is already the guarded wrapper. */
+export function registerStigTools(server, _context, deps = defaultDeps()) {
+    server.tool("build_stig_template", "Plan or apply a RHEL 8.10 DISA STIG Proxmox template build on proxmox-minis-lab. Claim first (6h bare claim, Ready before Packer), pinned SSG 0.1.82 / STIG V2R8 / Packer 1.16.0, scan must be fail=0, template verified, then the claim renews to the TTL cap. Apply needs the plan's planDigest.", BuildStigTemplateInputShape, async (a) => handleBuildStigTemplate(a, deps));
+    server.tool("create_stig_claim", "Plan or apply a claim-backed clone of the newest STIG template: thin-pool guard (<=70%), one re-encrypting clone at a time, fresh tpmstate0, first-boot LUKS re-key bound to the clone's TPM2, recovery passphrase escrowed to Doppler by name, verify, fstrim. Apply needs the plan's planDigest.", CreateStigClaimInputShape, async (a) => handleCreateStigClaim(a, deps));
+    server.tool("validate_stig_claim", "Run the pinned, tailored oscap STIG scan on a STIG clone, gate on fail=0, record the LUKS volume-key digest, and annotate the claim with the secret-free receipt summary.", ValidateStigClaimInputShape, async (a) => handleValidateStigClaim(a, deps));
+    server.tool("get_stig_receipt", "Read a STIG claim's descriptor and receipt summary (counts, fail=0 gate, versions, artifact sha256, key digest) and what status.stig will carry when the operator projection is enabled.", GetStigReceiptInputShape, async (a) => handleGetStigReceipt(a, deps));
+    server.tool("release_stig_template", "Release a STIG template: verify it is the claimed template, destroy it explicitly (the operator never reaps templates), then delete its claim. Requires confirmDestroy=true.", ReleaseStigTemplateInputShape, async (a) => handleReleaseStigTemplate(a, deps));
+    return true;
+}
+//# sourceMappingURL=stig-tools.js.map

package/dist/src/tools/stig-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stig-tools.js","sourceRoot":"","sources":["../../../src/tools/stig-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAkB,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE1F,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAClD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxE,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,EAAE,qBAAqB,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6GAA6G,CAAC;IAC5J,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;IACnI,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;IAChG,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACxE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,4EAA4E,CAAC;IACnI,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CAC7F,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,+FAA+F,CAAC;IAC9H,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAC3H,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE;IAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8FAA8F,CAAC;IACpK,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CAC7F,CAAC;AACF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,SAAS;IACT,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yIAAyI,CAAC;CACvM,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gEAAgE,CAAC,EAAE,CAAC;AAChJ,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,2HAA2H,CAAC;CAClK,CAAC;AAGF,MAAM,WAAW,GAAG,GAAiB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAE3F,SAAS,EAAE,CAAC,OAAgB;IAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAI,OAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3H,CAAC;AACD,SAAS,IAAI,CAAC,SAAiB,EAAE,GAAQ;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,+IAA+I,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjL,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,SAAS,KAAK,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAChK,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAa,EAAE,OAAqB,WAAW,EAAE;IAC7F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3J,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7N,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;AACxD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAa,EAAE,OAAqB,WAAW,EAAE;IAC3F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3J,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;AACpH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAa,EAAE,OAAqB,WAAW,EAAE;IAC7F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3J,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;AACnH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAa,EAAE,OAAqB,WAAW,EAAE;IAC1F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3J,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;AAClH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAa,EAAE,OAAqB,WAAW,EAAE;IAC/F,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3J,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,uBAAuB,CAAU,CAAC;AAEzJ,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,MAA0C,EAAE,QAAqB,EAAE,OAAqB,WAAW,EAAE;IACrI,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,oSAAoS,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9Z,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,oSAAoS,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACxZ,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,2KAA2K,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACrS,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,0LAA0L,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3S,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,8KAA8K,EAAE,6BAA6B,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9S,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/tools/vm-action.d.ts

@@ -174,9 +174,9 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     confirmAssetId?: string | undefined;
     confirmSmbiosUuid?: string | undefined;
     vmIdOrName?: string | number | undefined;
+    force?: boolean | undefined;
     artifactReceipt?: string | undefined;
     receiptFile?: string | undefined;
-    force?: boolean | undefined;
     targetHost?: string | undefined;
     confirmVmid?: string | number | undefined;
     smbiosUuid?: string | undefined;
@@ -244,9 +244,9 @@ export declare const VmActionInputSchema: z.ZodEffects<z.ZodObject<{
     confirmAssetId?: string | undefined;
     confirmSmbiosUuid?: string | undefined;
     vmIdOrName?: string | number | undefined;
+    force?: boolean | undefined;
     artifactReceipt?: string | undefined;
     receiptFile?: string | undefined;
-    force?: boolean | undefined;
     targetHost?: string | undefined;
     confirmVmid?: string | number | undefined;
     smbiosUuid?: string | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calltelemetry/ct-lab-mcp",
-  "version": "0.8.98",
+  "version": "0.8.100",
   "description": "Expanded Model Context Protocol (MCP) server for Call Telemetry lab, fleet, and appliance management across Proxmox VE (ESXi is retired).",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -11,6 +11,7 @@
   "files": [
     "dist/src",
     "dist/bin/ct-lab-mcp.js",
+    "assets/stig",
     "README.md",
     "LICENSE"
   ],