@soyrageagency/proxmox-mcp 1.0.0

package/dist/assets.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Bundled-asset access — works the same whether we're running from `dist/` on a
+ * machine with Node, or as a single-file standalone binary (Node SEA) with no
+ * Node installed at all.
+ *
+ * When packaged, the update channel (and any other embedded resource) is baked
+ * into the executable and read from the SEA blob; otherwise it's read from disk.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** True when running as an injected single-file executable. */
+export declare function isPackaged(): boolean;
+/** Read a bundled asset as a Buffer: from the SEA blob when packaged, else disk. */
+export declare function readAssetBuffer(key: string, diskPath: string): Buffer;
+/** Read a bundled asset as UTF-8 text. Returns null if it can't be read. */
+export declare function readAssetText(key: string, diskPath: string): string | null;

package/dist/assets.js

@@ -0,0 +1,53 @@
+/**
+ * Bundled-asset access — works the same whether we're running from `dist/` on a
+ * machine with Node, or as a single-file standalone binary (Node SEA) with no
+ * Node installed at all.
+ *
+ * When packaged, the update channel (and any other embedded resource) is baked
+ * into the executable and read from the SEA blob; otherwise it's read from disk.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+let seaMod = null;
+try {
+    const require = createRequire(import.meta.url);
+    seaMod = require("node:sea");
+}
+catch {
+    seaMod = null;
+}
+/** True when running as an injected single-file executable. */
+export function isPackaged() {
+    try {
+        return Boolean(seaMod?.isSea());
+    }
+    catch {
+        return false;
+    }
+}
+/** Read a bundled asset as a Buffer: from the SEA blob when packaged, else disk. */
+export function readAssetBuffer(key, diskPath) {
+    if (seaMod && isPackaged()) {
+        try {
+            return Buffer.from(seaMod.getRawAsset(key));
+        }
+        catch {
+            /* fall through to disk */
+        }
+    }
+    return readFileSync(diskPath);
+}
+/** Read a bundled asset as UTF-8 text. Returns null if it can't be read. */
+export function readAssetText(key, diskPath) {
+    try {
+        return readAssetBuffer(key, diskPath).toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=assets.js.map

package/dist/assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../src/assets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,IAAI,MAAM,GAAkB,IAAI,CAAC;AACjC,IAAI,CAAC;IACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,GAAG,OAAO,CAAC,UAAU,CAAW,CAAC;AACzC,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,QAAgB;IAC3D,IAAI,MAAM,IAAI,UAAU,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,QAAgB;IACzD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/branding.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Branding & identity.
+ *
+ * Single source of truth for the project identity carried by the server: the
+ * startup banner, the MCP `instructions` payload and the `about` tool.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Identity of the project's author. */
+export declare const BRAND: Readonly<{
+    product: "Proxmox MCP Server";
+    author: "SoyRage Agency";
+    url: "https://soyrage.es/";
+    donate: "https://www.paypal.com/paypalme/soyrageagency";
+    tagline: "Chat with your Proxmox VE cluster — safely.";
+    version: "1.0.0";
+}>;
+/** ASCII welcome banner (ANSI Shadow style). */
+export declare const ASCII_BANNER: string;
+/** The full welcome block, banner + credits, used by the `about` tool. */
+export declare function welcomeBlock(): string;
+/**
+ * The MCP `instructions` payload — surfaced to the LLM by the client. Keep it
+ * strictly operational: what the server can do and how to use it safely.
+ */
+export declare function mcpInstructions(): string;

package/dist/branding.js

@@ -0,0 +1,58 @@
+/**
+ * Branding & identity.
+ *
+ * Single source of truth for the project identity carried by the server: the
+ * startup banner, the MCP `instructions` payload and the `about` tool.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Identity of the project's author. */
+export const BRAND = Object.freeze({
+    product: "Proxmox MCP Server",
+    author: "SoyRage Agency",
+    url: "https://soyrage.es/",
+    donate: "https://www.paypal.com/paypalme/soyrageagency",
+    tagline: "Chat with your Proxmox VE cluster — safely.",
+    version: "1.0.0",
+});
+/** ASCII welcome banner (ANSI Shadow style). */
+export const ASCII_BANNER = String.raw `
+ ███████╗ ██████╗ ██╗   ██╗██████╗  █████╗  ██████╗ ███████╗
+ ██╔════╝██╔═══██╗╚██╗ ██╔╝██╔══██╗██╔══██╗██╔════╝ ██╔════╝
+ ███████╗██║   ██║ ╚████╔╝ ██████╔╝███████║██║  ███╗█████╗
+ ╚════██║██║   ██║  ╚██╔╝  ██╔══██╗██╔══██║██║   ██║██╔══╝
+ ███████║╚██████╔╝   ██║   ██║  ██║██║  ██║╚██████╔╝███████╗
+ ╚══════╝ ╚═════╝    ╚═╝   ╚═╝  ╚═╝╚═╝  ╚═╝ ╚═════╝ ╚══════╝
+           P R O X M O X   M C P   S E R V E R
+        ~ Chat with your Proxmox VE cluster, safely ~
+`;
+/** The full welcome block, banner + credits, used by the `about` tool. */
+export function welcomeBlock() {
+    return [
+        ASCII_BANNER,
+        `  ${BRAND.product} v${BRAND.version}`,
+        `  Crafted with care by ${BRAND.author} — ${BRAND.url}`,
+        "  Free and open source under the MIT License.",
+        `  Support the project: ${BRAND.donate}`,
+        "",
+    ].join("\n");
+}
+/**
+ * The MCP `instructions` payload — surfaced to the LLM by the client. Keep it
+ * strictly operational: what the server can do and how to use it safely.
+ */
+export function mcpInstructions() {
+    return [
+        `You are connected to "${BRAND.product}", an MCP server for Proxmox VE.`,
+        "",
+        "CAPABILITIES:",
+        "- You can list cluster nodes, QEMU VMs and LXC containers, read their status/config, view storage, tasks and cluster health, and (unless read-only) start/stop/shutdown/reboot guests and create/rollback/delete snapshots.",
+        "- A VM/CT is identified by its numeric VMID. Prefer read-only tools to understand state before any action, and confirm destructive actions (stop, rollback_snapshot, delete_snapshot) with the user first — `stop` pulls the virtual power cord, `shutdown` is graceful.",
+        "",
+        "ABOUT:",
+        '- Call the "about" tool if the user asks what this server is, who built it or which version is running.',
+    ].join("\n");
+}
+//# sourceMappingURL=branding.js.map

package/dist/branding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.js","sourceRoot":"","sources":["../src/branding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,wCAAwC;AACxC,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,gBAAgB;IACxB,GAAG,EAAE,qBAAqB;IAC1B,MAAM,EAAE,+CAA+C;IACvD,OAAO,EAAE,6CAA6C;IACtD,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;CASrC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,YAAY;QACZ,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE;QACtC,0BAA0B,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE;QACvD,+CAA+C;QAC/C,0BAA0B,KAAK,CAAC,MAAM,EAAE;QACxC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,yBAAyB,KAAK,CAAC,OAAO,kCAAkC;QACxE,EAAE;QACF,eAAe;QACf,6NAA6N;QAC7N,0QAA0Q;QAC1Q,EAAE;QACF,QAAQ;QACR,yGAAyG;KAC1G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Runtime configuration.
+ *
+ * Layered so the server is fully customisable without code changes. Precedence,
+ * lowest to highest:
+ *   1. Built-in defaults.
+ *   2. An optional JSON config file (`proxmox-mcp.config.json`, or the path in
+ *      `PROXMOX_MCP_CONFIG`).
+ *   3. A local `.env` file.
+ *   4. Real environment variables (what your MCP client passes).
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+/** Supported diagnostic log levels, ordered by verbosity. */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+/** Plugin enable/disable selection. */
+export interface PluginSelection {
+    readonly enabled: readonly string[];
+    readonly disabled: readonly string[];
+}
+/** Fully-resolved, immutable server configuration. */
+export interface AppConfig {
+    /** Proxmox API base URL, e.g. https://host:8006 (no trailing slash). */
+    readonly host: string;
+    /** API token id "user@realm!tokenname" (preferred auth). */
+    readonly tokenId: string;
+    /** API token secret (UUID). */
+    readonly tokenSecret: string;
+    /** Username "user@realm" for ticket auth (fallback). */
+    readonly user: string;
+    /** Password for ticket auth (fallback). */
+    readonly password: string;
+    /** Whether to verify the node's TLS certificate. */
+    readonly verifyTls: boolean;
+    /** When true, all mutating tools are hidden. */
+    readonly readOnly: boolean;
+    /** When true, serve fabricated demo data instead of a real cluster. */
+    readonly demo: boolean;
+    /** Optional VMID/name allowlist (empty = allow all). */
+    readonly allowlist: readonly string[];
+    /** Diagnostic log level. */
+    readonly logLevel: LogLevel;
+    /** Modular plugin selection. */
+    readonly plugins: PluginSelection;
+    /** Optional OpenAI-compatible endpoint powering the TUI's AI copilot. */
+    readonly aiEndpoint: string;
+    /** API key for the AI endpoint (bearer). */
+    readonly aiKey: string;
+    /** Model name for the AI endpoint. */
+    readonly aiModel: string;
+    /** Resilience & compliance (backup verify, patching, DR drills). */
+    readonly resilience: ResilienceConfig;
+}
+/** Settings for the resilience & compliance capabilities. */
+export interface ResilienceConfig {
+    /** Directory where signed evidence reports are written. */
+    readonly dir: string;
+    /** Path to the Ed25519 signing key (auto-generated on first use if absent). */
+    readonly signingKey: string;
+    /** First VMID of the ephemeral range used for backup-verification restores. */
+    readonly ephemeralVmidBase: number;
+    /** Isolated bridge ephemeral guests are fenced onto (no production traffic). */
+    readonly isolatedBridge: string;
+    /** Maintenance window for patching, e.g. "Sat 02:00-05:00" (empty = anytime). */
+    readonly maintenanceWindow: string;
+}
+/** Build the configuration object. Called once from the entry point. */
+export declare function loadConfig(): AppConfig;

package/dist/config.js

@@ -0,0 +1,119 @@
+/**
+ * Runtime configuration.
+ *
+ * Layered so the server is fully customisable without code changes. Precedence,
+ * lowest to highest:
+ *   1. Built-in defaults.
+ *   2. An optional JSON config file (`proxmox-mcp.config.json`, or the path in
+ *      `PROXMOX_MCP_CONFIG`).
+ *   3. A local `.env` file.
+ *   4. Real environment variables (what your MCP client passes).
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { resolve } from "node:path";
+/** Read and parse the JSON config file, if present. Never throws. */
+function loadConfigFile() {
+    const path = resolve(process.cwd(), process.env.PROXMOX_MCP_CONFIG?.trim() || "proxmox-mcp.config.json");
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        process.stderr.write(`[proxmox-mcp] Warning: could not parse config file at ${path}; ignoring it.\n`);
+        return {};
+    }
+}
+/** Minimal, dependency-free `.env` loader. Real env always wins. */
+function loadDotEnv() {
+    const path = resolve(process.cwd(), ".env");
+    if (!existsSync(path))
+        return;
+    for (const line of readFileSync(path, "utf8").split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eq = trimmed.indexOf("=");
+        if (eq === -1)
+            continue;
+        const key = trimmed.slice(0, eq).trim();
+        let value = trimmed.slice(eq + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key && process.env[key] === undefined)
+            process.env[key] = value;
+    }
+}
+function envFlag(name, fallback) {
+    const value = process.env[name];
+    if (value === undefined || value === "")
+        return fallback;
+    return /^(1|true|yes|on)$/i.test(value.trim());
+}
+function envStr(name, fallback) {
+    const value = process.env[name];
+    return value === undefined ? fallback : value.trim();
+}
+function envList(name, fallback) {
+    const value = process.env[name];
+    if (value === undefined)
+        return [...fallback];
+    return value
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+function envNum(name, fallback) {
+    const value = process.env[name];
+    if (value === undefined || value.trim() === "")
+        return fallback;
+    const n = Number(value);
+    return Number.isFinite(n) ? n : fallback;
+}
+/** Build the configuration object. Called once from the entry point. */
+export function loadConfig() {
+    const file = loadConfigFile();
+    loadDotEnv();
+    const rawLevel = envStr("PROXMOX_MCP_LOG_LEVEL", file.logLevel ?? "info").toLowerCase();
+    const logLevel = ["debug", "info", "warn", "error"].includes(rawLevel)
+        ? rawLevel
+        : "info";
+    // Normalise host: ensure scheme, strip trailing slash.
+    let host = envStr("PROXMOX_HOST", file.host ?? "");
+    if (host && !/^https?:\/\//i.test(host))
+        host = `https://${host}`;
+    host = host.replace(/\/+$/, "");
+    return Object.freeze({
+        host,
+        tokenId: envStr("PROXMOX_TOKEN_ID", file.tokenId ?? ""),
+        tokenSecret: envStr("PROXMOX_TOKEN_SECRET", file.tokenSecret ?? ""),
+        user: envStr("PROXMOX_USER", file.user ?? ""),
+        password: envStr("PROXMOX_PASSWORD", file.password ?? ""),
+        verifyTls: envFlag("PROXMOX_VERIFY_TLS", file.verifyTls ?? false),
+        readOnly: envFlag("PROXMOX_MCP_READONLY", file.readOnly ?? false),
+        demo: envFlag("PROXMOX_MCP_DEMO", file.demo ?? false),
+        allowlist: Object.freeze(envList("PROXMOX_MCP_ALLOWLIST", file.allowlist ?? [])),
+        logLevel,
+        plugins: Object.freeze({
+            enabled: Object.freeze(envList("PROXMOX_MCP_PLUGINS", file.plugins?.enabled ?? [])),
+            disabled: Object.freeze(envList("PROXMOX_MCP_DISABLED_PLUGINS", file.plugins?.disabled ?? [])),
+        }),
+        aiEndpoint: envStr("PROXMOX_MCP_AI_ENDPOINT", file.ai?.endpoint ?? ""),
+        aiKey: envStr("PROXMOX_MCP_AI_KEY", file.ai?.key ?? ""),
+        aiModel: envStr("PROXMOX_MCP_AI_MODEL", file.ai?.model ?? "gpt-4o-mini"),
+        resilience: Object.freeze({
+            dir: envStr("PROXMOX_MCP_RESILIENCE_DIR", file.resilience?.dir ?? "resilience-reports"),
+            signingKey: envStr("PROXMOX_MCP_SIGNING_KEY", file.resilience?.signingKey ?? ""),
+            ephemeralVmidBase: envNum("PROXMOX_MCP_EPHEMERAL_VMID_BASE", file.resilience?.ephemeralVmidBase ?? 90000),
+            isolatedBridge: envStr("PROXMOX_MCP_ISOLATED_BRIDGE", file.resilience?.isolatedBridge ?? "vmbr9"),
+            maintenanceWindow: envStr("PROXMOX_MCP_MAINT_WINDOW", file.resilience?.maintenanceWindow ?? ""),
+        }),
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BpC,qEAAqE;AACrE,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAClB,OAAO,CAAC,GAAG,EAAE,EACb,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,yBAAyB,CACpE,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,IAAI,kBAAkB,CAChF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAiB;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACzD,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAA2B;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC9C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAwDD,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAChE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,UAAU,EAAE,CAAC;IAEb,MAAM,QAAQ,GAAG,MAAM,CACrB,uBAAuB,EACvB,IAAI,CAAC,QAAQ,IAAI,MAAM,CACxB,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,QAAQ,GAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9E,CAAC,CAAE,QAAqB;QACxB,CAAC,CAAC,MAAM,CAAC;IAEX,uDAAuD;IACvD,IAAI,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,WAAW,IAAI,EAAE,CAAC;IAClE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,OAAO,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACvD,WAAW,EAAE,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QACnE,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACzD,SAAS,EAAE,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACjE,QAAQ,EAAE,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACjE,IAAI,EAAE,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;QACrD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAChF,QAAQ;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,OAAO,EAAE,MAAM,CAAC,MAAM,CACpB,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,CAC5D;YACD,QAAQ,EAAE,MAAM,CAAC,MAAM,CACrB,OAAO,CAAC,8BAA8B,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CACtE;SACF,CAAC;QACF,UAAU,EAAE,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAC;QACtE,KAAK,EAAE,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI,aAAa,CAAC;QACxE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;YACxB,GAAG,EAAE,MAAM,CAAC,4BAA4B,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,oBAAoB,CAAC;YACvF,UAAU,EAAE,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,EAAE,CAAC;YAChF,iBAAiB,EAAE,MAAM,CAAC,iCAAiC,EAAE,IAAI,CAAC,UAAU,EAAE,iBAAiB,IAAI,KAAK,CAAC;YACzG,cAAc,EAAE,MAAM,CAAC,6BAA6B,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,IAAI,OAAO,CAAC;YACjG,iBAAiB,EAAE,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,UAAU,EAAE,iBAAiB,IAAI,EAAE,CAAC;SAChG,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+/**
+ * Proxmox MCP Server — entry point.
+ *
+ * Boots a Model Context Protocol server over stdio that lets any MCP-capable
+ * LLM (Claude Desktop, Cursor, Continue, …) manage a Proxmox VE cluster in
+ * natural language: list nodes, VMs and containers, read status, control the
+ * guest lifecycle and take snapshots — with read-only and allowlist safety.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+export {};

package/dist/index.js

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+/**
+ * Proxmox MCP Server — entry point.
+ *
+ * Boots a Model Context Protocol server over stdio that lets any MCP-capable
+ * LLM (Claude Desktop, Cursor, Continue, …) manage a Proxmox VE cluster in
+ * natural language: list nodes, VMs and containers, read status, control the
+ * guest lifecycle and take snapshots — with read-only and allowlist safety.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadConfig } from "./config.js";
+import { updateNoticeLine } from "./update/notice.js";
+import { Logger } from "./logger.js";
+import { ProxmoxClient } from "./proxmox/client.js";
+import { BUILTIN_PLUGINS, selectPlugins } from "./plugins.js";
+import { ASCII_BANNER, BRAND, mcpInstructions } from "./branding.js";
+const SERVER_NAME = "proxmox-mcp-server";
+const SERVER_VERSION = BRAND.version;
+async function main() {
+    const config = loadConfig();
+    const logger = new Logger(config.logLevel);
+    // Welcome banner → stderr (stdout is the JSON-RPC stream).
+    process.stderr.write(`${ASCII_BANNER}\n`);
+    process.stderr.write(`  ${BRAND.product} v${BRAND.version} — by ${BRAND.author} (${BRAND.url})\n\n`);
+    logger.info(`Starting ${SERVER_NAME} v${SERVER_VERSION}`);
+    logger.debug("Configuration", {
+        host: config.host || "(not configured)",
+        auth: config.tokenSecret ? "api-token" : config.password ? "ticket" : "(none)",
+        readOnly: config.readOnly,
+        allowlist: config.allowlist,
+    });
+    const proxmox = new ProxmoxClient(config, logger);
+    // Fail soft: probe the API but keep starting so tool calls return clean
+    // errors inside the chat client instead of a hard crash.
+    if (config.demo) {
+        logger.info("DEMO mode: serving fabricated cluster data (no real Proxmox needed).");
+    }
+    else if (config.host && (config.tokenSecret || config.password)) {
+        try {
+            await proxmox.ping();
+            logger.info(`Connected to Proxmox VE at ${config.host}.`);
+        }
+        catch (error) {
+            logger.error("Could not reach the Proxmox API. Check PROXMOX_HOST, credentials and TLS settings.", error);
+        }
+    }
+    else {
+        logger.warn("Proxmox host/credentials not configured — set them, or try PROXMOX_MCP_DEMO=true.");
+    }
+    const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION }, { instructions: mcpInstructions() });
+    // Resolve the modular plugin selection and register each enabled plugin.
+    const selected = selectPlugins(config, logger);
+    const enabledNames = new Set(selected.map((p) => p.name));
+    const pluginInfo = BUILTIN_PLUGINS.map((p) => ({
+        name: p.name,
+        title: p.title,
+        category: p.category,
+        mutating: p.mutating,
+        enabled: enabledNames.has(p.name),
+    }));
+    const context = { server, proxmox, config, logger, plugins: pluginInfo };
+    for (const plugin of selected)
+        plugin.register(context);
+    logger.info(config.readOnly
+        ? "Tools registered in READ-ONLY mode."
+        : "Tools registered in full read/write mode.");
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    logger.info("MCP server is ready and listening on stdio.");
+    // Non-blocking: note if a newer version is available (logs to stderr only).
+    void updateNoticeLine().then((line) => { if (line)
+        logger.info(line); }).catch(() => { });
+    const shutdown = (signal) => {
+        logger.info(`Received ${signal}, shutting down.`);
+        void server.close().finally(() => process.exit(0));
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+}
+main().catch((error) => {
+    process.stderr.write(`Fatal: ${error instanceof Error ? error.stack : error}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErE,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;AAErC,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE3C,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,GAAG,OAAO,CAC/E,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,YAAY,WAAW,KAAK,cAAc,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,kBAAkB;QACvC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QAC9E,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElD,wEAAwE;IACxE,yDAAyD;IACzD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,oFAAoF,EACpF,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,eAAe,EAAE,EAAE,CACpC,CAAC;IAEF,yEAAyE;IACzE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAiB,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACzE,KAAK,MAAM,MAAM,IAAI,QAAQ;QAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ;QACb,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,2CAA2C,CAChD,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,KAAK,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEzF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,kBAAkB,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Tiny structured logger.
+ *
+ * An MCP stdio server talks to its client over STDOUT, so every diagnostic
+ * line goes to STDERR only — anything else corrupts the JSON-RPC stream.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import type { LogLevel } from "./config.js";
+/** A namespaced logger that writes human-readable lines to stderr. */
+export declare class Logger {
+    private readonly threshold;
+    private readonly scope;
+    constructor(threshold: LogLevel, scope?: string);
+    child(scope: string): Logger;
+    debug(message: string, meta?: unknown): void;
+    info(message: string, meta?: unknown): void;
+    warn(message: string, meta?: unknown): void;
+    error(message: string, meta?: unknown): void;
+    private write;
+}

package/dist/logger.js

@@ -0,0 +1,65 @@
+/**
+ * Tiny structured logger.
+ *
+ * An MCP stdio server talks to its client over STDOUT, so every diagnostic
+ * line goes to STDERR only — anything else corrupts the JSON-RPC stream.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+const LEVEL_WEIGHT = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+};
+/** A namespaced logger that writes human-readable lines to stderr. */
+export class Logger {
+    threshold;
+    scope;
+    constructor(threshold, scope = "proxmox-mcp") {
+        this.threshold = threshold;
+        this.scope = scope;
+    }
+    child(scope) {
+        return new Logger(this.threshold, `${this.scope}:${scope}`);
+    }
+    debug(message, meta) {
+        this.write("debug", message, meta);
+    }
+    info(message, meta) {
+        this.write("info", message, meta);
+    }
+    warn(message, meta) {
+        this.write("warn", message, meta);
+    }
+    error(message, meta) {
+        this.write("error", message, meta);
+    }
+    write(level, message, meta) {
+        if (LEVEL_WEIGHT[level] < LEVEL_WEIGHT[this.threshold])
+            return;
+        const timestamp = new Date().toISOString();
+        const tag = level.toUpperCase().padEnd(5);
+        let line = `${timestamp} ${tag} [${this.scope}] ${message}`;
+        if (meta !== undefined) {
+            const rendered = meta instanceof Error
+                ? meta.stack ?? meta.message
+                : typeof meta === "string"
+                    ? meta
+                    : safeJson(meta);
+            line += ` ${rendered}`;
+        }
+        process.stderr.write(`${line}\n`);
+    }
+}
+function safeJson(value) {
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,sEAAsE;AACtE,MAAM,OAAO,MAAM;IAEE;IACA;IAFnB,YACmB,SAAmB,EACnB,QAAQ,aAAa;QADrB,cAAS,GAAT,SAAS,CAAU;QACnB,UAAK,GAAL,KAAK,CAAgB;IACrC,CAAC;IAEJ,KAAK,CAAC,KAAa;QACjB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAAc;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,IAAc;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,IAAc;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,IAAc;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,KAAe,EAAE,OAAe,EAAE,IAAc;QAC5D,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO;QAC/D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,GAAG,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,QAAQ,GACZ,IAAI,YAAY,KAAK;gBACnB,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO;gBAC5B,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ;oBACxB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/plugins.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Plugin registry & loader.
+ *
+ * The server is built as a set of independent *plugins*, each owning one
+ * capability group. Which plugins load is fully driven by configuration.
+ *
+ * The `about` plugin is NON-DISABLEABLE: it carries the SoyRage Agency identity
+ * and attribution, which the license requires to stay present.
+ *
+ * Part of Proxmox MCP Server.
+ * Crafted by SoyRage Agency — https://soyrage.es/
+ * MIT licensed (see LICENSE).
+ */
+import type { AppConfig } from "./config.js";
+import type { Logger } from "./logger.js";
+import type { ToolContext } from "./tools/context.js";
+/** High-level grouping used for docs. */
+export type PluginCategory = "identity" | "nodes" | "guests" | "storage" | "tasks" | "cluster" | "snapshots" | "lifecycle" | "management" | "backups" | "provisioning" | "resilience";
+/** A self-contained capability group that can be toggled on or off. */
+export interface ToolPlugin {
+    readonly name: string;
+    readonly title: string;
+    readonly description: string;
+    readonly category: PluginCategory;
+    readonly mutating: boolean;
+    readonly locked?: boolean;
+    readonly register: (ctx: ToolContext) => void;
+}
+/** The built-in plugin catalogue. */
+export declare const BUILTIN_PLUGINS: readonly ToolPlugin[];
+/** Resolve which plugins should load, applying the enable/disable selection. */
+export declare function selectPlugins(config: AppConfig, logger: Logger, catalogue?: readonly ToolPlugin[]): ToolPlugin[];