@dzhechkov/cloudru-hub 0.1.4

package/data/tools-list-snapshot.json

@@ -0,0 +1,585 @@
+{
+  "capturedAt": "2026-08-09",
+  "engineVersion": "cloudru-vm 0.2.3-20260718",
+  "engineSha256": "59f83fc0678b95146ca539764d0c805bd2514b8588f198c1e835b26e54c05124",
+  "method": "echo tools/list JSON-RPC | cloudru-vm mcp",
+  "toolCount": 144,
+  "tools": [
+    {
+      "name": "deploy",
+      "gated": false
+    },
+    {
+      "name": "provision",
+      "gated": false
+    },
+    {
+      "name": "status",
+      "gated": false
+    },
+    {
+      "name": "list",
+      "gated": false
+    },
+    {
+      "name": "vm_list",
+      "gated": false
+    },
+    {
+      "name": "vm_exec",
+      "gated": false
+    },
+    {
+      "name": "vm_get",
+      "gated": false
+    },
+    {
+      "name": "logs",
+      "gated": false
+    },
+    {
+      "name": "destroy",
+      "gated": true
+    },
+    {
+      "name": "list_zones",
+      "gated": false
+    },
+    {
+      "name": "list_images",
+      "gated": false
+    },
+    {
+      "name": "deploy_plan",
+      "gated": false
+    },
+    {
+      "name": "deploy_apply",
+      "gated": true
+    },
+    {
+      "name": "list_flavors",
+      "gated": false
+    },
+    {
+      "name": "list_disk_types",
+      "gated": false
+    },
+    {
+      "name": "list_subnets",
+      "gated": false
+    },
+    {
+      "name": "list_security_groups",
+      "gated": false
+    },
+    {
+      "name": "list_floating_ips",
+      "gated": false
+    },
+    {
+      "name": "open_ports",
+      "gated": true
+    },
+    {
+      "name": "k8s_list",
+      "gated": false
+    },
+    {
+      "name": "k8s_get",
+      "gated": false
+    },
+    {
+      "name": "k8s_options",
+      "gated": false
+    },
+    {
+      "name": "k8s_plan",
+      "gated": false
+    },
+    {
+      "name": "k8s_create",
+      "gated": true
+    },
+    {
+      "name": "k8s_kubeconfig",
+      "gated": false
+    },
+    {
+      "name": "k8s_delete",
+      "gated": true
+    },
+    {
+      "name": "k8s_nodepools",
+      "gated": false
+    },
+    {
+      "name": "k8s_add_nodepool",
+      "gated": true
+    },
+    {
+      "name": "k8s_kubectl",
+      "gated": true
+    },
+    {
+      "name": "k8s_apply",
+      "gated": true
+    },
+    {
+      "name": "k8s_helm",
+      "gated": true
+    },
+    {
+      "name": "disk_list",
+      "gated": false
+    },
+    {
+      "name": "disk_create",
+      "gated": true
+    },
+    {
+      "name": "disk_attach",
+      "gated": true
+    },
+    {
+      "name": "disk_detach",
+      "gated": true
+    },
+    {
+      "name": "disk_resize",
+      "gated": true
+    },
+    {
+      "name": "disk_delete",
+      "gated": true
+    },
+    {
+      "name": "ca_list",
+      "gated": false
+    },
+    {
+      "name": "ca_get",
+      "gated": false
+    },
+    {
+      "name": "ca_deploy",
+      "gated": true
+    },
+    {
+      "name": "ca_delete",
+      "gated": true
+    },
+    {
+      "name": "ca_logs",
+      "gated": false
+    },
+    {
+      "name": "ca_start",
+      "gated": false
+    },
+    {
+      "name": "ca_stop",
+      "gated": false
+    },
+    {
+      "name": "iam_service_accounts",
+      "gated": false
+    },
+    {
+      "name": "org_projects",
+      "gated": false
+    },
+    {
+      "name": "org_quotas",
+      "gated": false
+    },
+    {
+      "name": "release_floating_ip",
+      "gated": true
+    },
+    {
+      "name": "snat_list",
+      "gated": false
+    },
+    {
+      "name": "snat_create",
+      "gated": true
+    },
+    {
+      "name": "snat_delete",
+      "gated": true
+    },
+    {
+      "name": "pg_list",
+      "gated": false
+    },
+    {
+      "name": "pg_get",
+      "gated": false
+    },
+    {
+      "name": "pg_versions",
+      "gated": false
+    },
+    {
+      "name": "pg_specs",
+      "gated": false
+    },
+    {
+      "name": "pg_create",
+      "gated": true
+    },
+    {
+      "name": "pg_delete",
+      "gated": true
+    },
+    {
+      "name": "pg_operation",
+      "gated": false
+    },
+    {
+      "name": "kafka_list",
+      "gated": false
+    },
+    {
+      "name": "kafka_get",
+      "gated": false
+    },
+    {
+      "name": "kafka_versions",
+      "gated": false
+    },
+    {
+      "name": "kafka_specs",
+      "gated": false
+    },
+    {
+      "name": "kafka_create",
+      "gated": true
+    },
+    {
+      "name": "kafka_delete",
+      "gated": true
+    },
+    {
+      "name": "kafka_operation",
+      "gated": false
+    },
+    {
+      "name": "redis_list",
+      "gated": false
+    },
+    {
+      "name": "redis_get",
+      "gated": false
+    },
+    {
+      "name": "redis_versions",
+      "gated": false
+    },
+    {
+      "name": "redis_specs",
+      "gated": false
+    },
+    {
+      "name": "redis_create",
+      "gated": true
+    },
+    {
+      "name": "redis_delete",
+      "gated": true
+    },
+    {
+      "name": "redis_operation",
+      "gated": false
+    },
+    {
+      "name": "pg_databases",
+      "gated": false
+    },
+    {
+      "name": "pg_db_create",
+      "gated": true
+    },
+    {
+      "name": "pg_db_delete",
+      "gated": true
+    },
+    {
+      "name": "pg_users",
+      "gated": false
+    },
+    {
+      "name": "pg_user_create",
+      "gated": true
+    },
+    {
+      "name": "pg_user_delete",
+      "gated": true
+    },
+    {
+      "name": "pg_backups",
+      "gated": false
+    },
+    {
+      "name": "pg_backup_create",
+      "gated": true
+    },
+    {
+      "name": "lb_list",
+      "gated": false
+    },
+    {
+      "name": "lb_get",
+      "gated": false
+    },
+    {
+      "name": "lb_operation",
+      "gated": false
+    },
+    {
+      "name": "tg_list",
+      "gated": false
+    },
+    {
+      "name": "tg_get",
+      "gated": false
+    },
+    {
+      "name": "tg_create",
+      "gated": true
+    },
+    {
+      "name": "tg_delete",
+      "gated": true
+    },
+    {
+      "name": "lb_create",
+      "gated": true
+    },
+    {
+      "name": "lb_delete",
+      "gated": true
+    },
+    {
+      "name": "vpc_list",
+      "gated": false
+    },
+    {
+      "name": "vpc_get",
+      "gated": false
+    },
+    {
+      "name": "vpc_create",
+      "gated": true
+    },
+    {
+      "name": "vpc_delete",
+      "gated": true
+    },
+    {
+      "name": "vpc_operation",
+      "gated": false
+    },
+    {
+      "name": "vpc_routes",
+      "gated": false
+    },
+    {
+      "name": "vpc_route_create",
+      "gated": true
+    },
+    {
+      "name": "vpc_route_delete",
+      "gated": true
+    },
+    {
+      "name": "dns_zones",
+      "gated": false
+    },
+    {
+      "name": "dns_zone_get",
+      "gated": false
+    },
+    {
+      "name": "dns_zone_create",
+      "gated": true
+    },
+    {
+      "name": "dns_zone_delete",
+      "gated": true
+    },
+    {
+      "name": "dns_operation",
+      "gated": false
+    },
+    {
+      "name": "dns_records",
+      "gated": false
+    },
+    {
+      "name": "dns_record_get",
+      "gated": false
+    },
+    {
+      "name": "dns_record_create",
+      "gated": true
+    },
+    {
+      "name": "dns_record_delete",
+      "gated": true
+    },
+    {
+      "name": "secret_list",
+      "gated": false
+    },
+    {
+      "name": "secret_get",
+      "gated": false
+    },
+    {
+      "name": "secret_value",
+      "gated": false
+    },
+    {
+      "name": "secret_create",
+      "gated": true
+    },
+    {
+      "name": "secret_add_version",
+      "gated": true
+    },
+    {
+      "name": "secret_delete",
+      "gated": true
+    },
+    {
+      "name": "ar_list",
+      "gated": false
+    },
+    {
+      "name": "ar_get",
+      "gated": false
+    },
+    {
+      "name": "ar_create",
+      "gated": true
+    },
+    {
+      "name": "ar_delete",
+      "gated": true
+    },
+    {
+      "name": "ar_operation",
+      "gated": false
+    },
+    {
+      "name": "billing_balance",
+      "gated": false
+    },
+    {
+      "name": "billing_consumption",
+      "gated": false
+    },
+    {
+      "name": "billing_finops",
+      "gated": false
+    },
+    {
+      "name": "metrics_history",
+      "gated": false
+    },
+    {
+      "name": "metrics_scrape",
+      "gated": false
+    },
+    {
+      "name": "audit_events",
+      "gated": false
+    },
+    {
+      "name": "cert_list",
+      "gated": false
+    },
+    {
+      "name": "cert_get",
+      "gated": false
+    },
+    {
+      "name": "cert_issue_le",
+      "gated": false
+    },
+    {
+      "name": "cert_import",
+      "gated": false
+    },
+    {
+      "name": "cert_renew",
+      "gated": false
+    },
+    {
+      "name": "cert_delete",
+      "gated": true
+    },
+    {
+      "name": "cert_usage",
+      "gated": false
+    },
+    {
+      "name": "cert_versions",
+      "gated": false
+    },
+    {
+      "name": "cert_private_key",
+      "gated": true
+    },
+    {
+      "name": "cert_operation",
+      "gated": false
+    },
+    {
+      "name": "s3_buckets",
+      "gated": false
+    },
+    {
+      "name": "s3_ls",
+      "gated": false
+    },
+    {
+      "name": "s3_get",
+      "gated": false
+    },
+    {
+      "name": "s3_put",
+      "gated": false
+    },
+    {
+      "name": "s3_rm",
+      "gated": true
+    },
+    {
+      "name": "s3_bucket_create",
+      "gated": false
+    },
+    {
+      "name": "s3_bucket_delete",
+      "gated": true
+    },
+    {
+      "name": "stack_plan",
+      "gated": false
+    },
+    {
+      "name": "stack_apply",
+      "gated": true
+    },
+    {
+      "name": "stack_status",
+      "gated": false
+    },
+    {
+      "name": "stack_destroy",
+      "gated": true
+    }
+  ]
+}

package/docs/LOCAL-TESTING.md

@@ -0,0 +1,77 @@
+# Local testing — @dzhechkov/cloudru-hub (no publish, no licence needed)
+
+The launcher and everything around it run TODAY against a locally present engine build.
+Nothing here publishes anything; the ADR-001 hold stays untouched.
+
+## 1. Point the launcher at an engine binary
+
+Any of the three, in this precedence order:
+
+```bash
+# a) environment variable (simplest — what the self-test proof below uses)
+export CLOUDRU_VM_BIN=/path/to/hermes-engine-main/engine-build/cloudru-vm
+
+# b) persistent config
+mkdir -p ~/.cloudru-hub
+cat > ~/.cloudru-hub/config.json <<'EOF'
+{ "enginePath": "/path/to/hermes-engine-main/engine-build/cloudru-vm" }
+EOF
+
+# c) (post-grant only) the platform package @dzhechkov/cloudru-vm-linux-x64
+```
+
+The pinned baseline archive is
+`features/hermes-claude-adaptation/evidence/hermes-engine-src-20260718.tgz` (sha256 in
+`evidence/ENGINE-BASELINE.json`); the matching prebuilt binary identifies itself as
+`cloudru-vm 0.2.3-20260718`, sha256
+`59f83fc0678b95146ca539764d0c805bd2514b8588f198c1e835b26e54c05124` — the launcher
+verifies the resolved binary against exactly this pin and says so.
+
+## 2. Self-test (end-to-end, no credentials required)
+
+```bash
+cd packages/@dzhechkov/cloudru-hub
+node bin/cloudru-hub.js self-test
+```
+
+Expected output (MEASURED — live run on this server, 2026-08-10, baseline binary):
+
+```
+✓ resolve: …/engine-build/cloudru-vm (source: env)
+✓ sha256: 59f83fc0678b95146ca539764d0c805bd2514b8588f198c1e835b26e54c05124 — MATCHES pinned baseline
+✓ engine-version: cloudru-vm 0.2.3-20260718
+✓ tools-list: 144 tools live (snapshot: 144)
+✓ classification-coverage: every live tool is classified (144 golden entries)
+self-test: ALL GREEN
+```
+
+`tools/list` needs no Cloud.ru credentials; real tool calls do (env
+`CLOUDRU_KEY_ID`/`CLOUDRU_SECRET`/`CLOUDRU_PROJECT_ID`, see the engine's own docs).
+
+## 3. Optional: `npm link` for a global `cloudru-hub`
+
+```bash
+cd packages/@dzhechkov/cloudru-hub && npm link   # linking is not publishing
+cloudru-hub resolve
+```
+
+## 4. Wire it into a Claude Code project
+
+```bash
+node bin/cloudru-hub.js install --target claude-code --dir /path/to/project
+```
+
+This merges (never clobbers) `.mcp.json` (server `cloudru-vm` → the local launcher),
+`.claude/settings.json` (the ADR-004 permission brake: ask on every mutating tool, deny
+on the secret readers, allow on read-only recon; both `mcp__cloudru-vm__`/`mcp__cloudru_vm__`
+spellings until the prefix is live-probed) and copies the PreToolUse veto hook — then
+RUNS the forbidden-command fixtures through the emitted hook and refuses to claim
+success unless the veto executes. Finish with the manual probe it prints: in a fresh
+Claude Code session, call `mcp__cloudru-vm__deploy` and confirm a permission prompt
+appears; note which prefix spelling the runtime used.
+
+## 5. Testing from another server AFTER the grant (`npm install` path)
+
+Blocked until ADR-001 clears — see README "Post-grant publish checklist". Until then,
+another server can test by copying this package directory (or `npm pack` + install the
+tarball) plus an engine binary, then steps 1–4 exactly as above.

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@dzhechkov/cloudru-hub",
+  "version": "0.1.4",
+  "licenseHold": {
+    "adr": "features/hermes-claude-adaptation/03_adr/001-licence-and-provenance-precondition.md",
+    "note": "SATISFIED hold (ADR-001 AM-2, grant recorded 2026-08-12 — see grant-record-2026-08-12.md). The field deliberately STAYS: the dz guard `licence-hold` rule passes a satisfied hold with the trigger in place and keeps verifying LICENSE (no PENDING placeholder, Grant-Confirmation URL), THIRD_PARTY_NOTICES and the SPDX license field on every publish. test/pack-holds.test.mjs goes RED if this field is dropped or the LICENSE grant record is degraded."
+  },
+  "description": "Unofficial Cloud.ru Evolution launcher for Claude Code and harness-cli targets: thin JS launcher for the cloudru-vm MCP engine (144 tools), per-target installers with a deterministic paid-step brake (permission ask/deny + PreToolUse veto hooks), and skill dialect compiler. The engine binary is resolved at RUNTIME, never bundled. NOT affiliated with Cloud.ru.",
+  "main": "src/cli.js",
+  "bin": {
+    "cloudru-hub": "./bin/cloudru-hub.js"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "templates/",
+    "data/",
+    "docs/",
+    "test/",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    ".dz-manifest.json",
+    "sbom.json"
+  ],
+  "cloudruHub": {
+    "binaryHashes": {
+      "linux-x64": "59f83fc0678b95146ca539764d0c805bd2514b8588f198c1e835b26e54c05124"
+    },
+    "engineVersion": "cloudru-vm 0.2.3-20260718",
+    "platformPackages": {
+      "linux-x64": "@dzhechkov/cloudru-vm-linux-x64"
+    }
+  },
+  "keywords": [
+    "cloudru",
+    "cloud-ru",
+    "evolution",
+    "mcp",
+    "claude",
+    "claude-code",
+    "deploy",
+    "vps",
+    "unofficial"
+  ],
+  "author": "dzhechko",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/djd1m/dz-harness-hub.git",
+    "directory": "packages/@dzhechkov/cloudru-hub"
+  },
+  "homepage": "https://github.com/djd1m/dz-harness-hub/tree/main/packages/@dzhechkov/cloudru-hub#readme",
+  "bugs": {
+    "url": "https://github.com/djd1m/dz-harness-hub/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "node --test 'test/*.test.mjs'"
+  }
+}