@xen-orchestra/rest-api 0.14.0 → 0.16.0

package/dist/users/user.controller.mjs

@@ -8,28 +8,35 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Body, Delete, Example, Get, Middlewares, Patch, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { inject } from 'inversify';
 import { json } from 'express';
 import { provide } from 'inversify-binding-decorators';
 import { createdResp, forbiddenOperationResp, invalidParameters, noContentResp, notFoundResp, resourceAlreadyExists, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { forbiddenOperation } from 'xo-common/api-errors.js';
-import { partialUsers, user, userId, userIds } from '../open-api/oa-examples/user.oa-example.mjs';
+import { partialUsers, user, authenticationTokens, userId, userIds } from '../open-api/oa-examples/user.oa-example.mjs';
+import { RestApi } from '../rest-api/rest-api.mjs';
+import { limitAndFilterArray } from '../helpers/utils.helper.mjs';
+import { UserService } from './user.service.mjs';
 import { XoController } from '../abstract-classes/xo-controller.mjs';
+import { groupIds, partialGroups } from '../open-api/oa-examples/group.oa-example.mjs';
 let UserController = class UserController extends XoController {
+    #userService;
+    constructor(restApi, userService) {
+        super(restApi);
+        this.#userService = userService;
+    }
     // --- abstract methods
     async getAllCollectionObjects() {
-        const users = await this.restApi.xoApp.getAllUsers();
-        return users.map(user => this.#sanitizeUser(user));
+        return this.#userService.getUsers();
     }
     async getCollectionObject(id) {
-        const user = await this.restApi.xoApp.getUser(id);
-        return this.#sanitizeUser(user);
+        return this.#userService.getUser(id);
     }
-    #sanitizeUser(user) {
-        const sanitizedUser = { ...user };
-        if (sanitizedUser.pw_hash !== undefined) {
-            sanitizedUser.pw_hash = '***obfuscated***';
-        }
-        return sanitizedUser;
+    #redirectCurrentUser(req) {
+        const currentUser = this.restApi.getCurrentUser();
+        const originalUrl = req.originalUrl;
+        const res = req.res;
+        res.redirect(307, originalUrl.replace(/\/users\/me(?=\/|$)/, `/users/${currentUser.id}`));
     }
     /**
      * @example fields "permission,name,id"
@@ -40,6 +47,18 @@ let UserController = class UserController extends XoController {
         const users = Object.values(await this.getObjects({ filter, limit }));
         return this.sendObjects(users, req);
     }
+    /**
+     * Redirect to `/users/:id`
+     */
+    redirectMe(req) {
+        this.#redirectCurrentUser(req);
+    }
+    /**
+     * Redirect to `/users/:id/<rest-of-your-path>`
+     */
+    redirectMeWithPath(req) {
+        this.#redirectCurrentUser(req);
+    }
     /**
      * @example id "722d17b9-699b-49d2-8193-be1ac573d3de"
      */
@@ -87,6 +106,31 @@ let UserController = class UserController extends XoController {
     async deleteUser(id) {
         await this.restApi.xoApp.deleteUser(id);
     }
+    /**
+     * @example id "722d17b9-699b-49d2-8193-be1ac573d3de"
+     * @example fields "name,id,users"
+     * @example filter "users:length:>0"
+     * @example limit 42
+     */
+    async getUserGroups(req, id, fields, ndjson, filter, limit) {
+        const user = await this.getObject(id);
+        const groups = await Promise.all(user.groups.map(group => this.restApi.xoApp.getGroup(group)));
+        return this.sendObjects(limitAndFilterArray(groups, { filter, limit }), req, 'groups');
+    }
+    /**
+     * @example id "722d17b9-699b-49d2-8193-be1ac573d3de"
+     * @example filter "expiration:>1757371582496"
+     * @example limit 42
+     */
+    async getAuthenticationTokens(req, id, filter, limit) {
+        const user = await this.getObject(id);
+        const me = this.restApi.getCurrentUser();
+        if (me.id !== user.id) {
+            throw forbiddenOperation('get authentication tokens', 'can only see own authentication tokens');
+        }
+        const tokens = await this.restApi.xoApp.getAuthenticationTokensForUser(user.id);
+        return limitAndFilterArray(tokens, { filter, limit });
+    }
 };
 __decorate([
     Example(userIds),
@@ -98,6 +142,16 @@ __decorate([
     __param(3, Query()),
     __param(4, Query())
 ], UserController.prototype, "getUsers", null);
+__decorate([
+    SuccessResponse(307, 'Temporary redirect'),
+    Get('me'),
+    __param(0, Request())
+], UserController.prototype, "redirectMe", null);
+__decorate([
+    SuccessResponse(307, 'Temporary redirect'),
+    Get('me/*'),
+    __param(0, Request())
+], UserController.prototype, "redirectMeWithPath", null);
 __decorate([
     Example(user),
     Get('{id}'),
@@ -129,11 +183,36 @@ __decorate([
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], UserController.prototype, "deleteUser", null);
+__decorate([
+    Example(groupIds),
+    Example(partialGroups),
+    Get('{id}/groups'),
+    Tags('groups'),
+    Response(notFoundResp.status, notFoundResp.description),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Query()),
+    __param(3, Query()),
+    __param(4, Query()),
+    __param(5, Query())
+], UserController.prototype, "getUserGroups", null);
+__decorate([
+    Example(authenticationTokens),
+    Get('{id}/authentication_tokens'),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Query()),
+    __param(3, Query())
+], UserController.prototype, "getAuthenticationTokens", null);
 UserController = __decorate([
     Route('users'),
     Security('*'),
     Response(unauthorizedResp.status, unauthorizedResp.description),
     Tags('users'),
-    provide(UserController)
+    provide(UserController),
+    __param(0, inject(RestApi)),
+    __param(1, inject(UserService))
 ], UserController);
 export { UserController };

package/dist/users/user.service.mjs

@@ -0,0 +1,21 @@
+export class UserService {
+    #restApi;
+    constructor(restApi) {
+        this.#restApi = restApi;
+    }
+    #sanitizeUser(user) {
+        const sanitizedUser = { ...user };
+        if (sanitizedUser.pw_hash !== undefined) {
+            sanitizedUser.pw_hash = '***obfuscated***';
+        }
+        return sanitizedUser;
+    }
+    async getUser(id) {
+        const user = await this.#restApi.xoApp.getUser(id);
+        return this.#sanitizeUser(user);
+    }
+    async getUsers() {
+        const users = await this.#restApi.xoApp.getAllUsers();
+        return users.map(user => this.#sanitizeUser(user));
+    }
+}

package/dist/vdi-snapshots/vdi-snapshot.controller.mjs

@@ -7,21 +7,24 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Delete, Example, Get, Path, Query, Request, Response, Route, Security, SuccessResponse, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { escapeUnsafeComplexMatcher } from '../helpers/utils.helper.mjs';
-import { notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
+import { noContentResp, notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
 import { partialVdiSnapshots, vdiSnapshot, vdiSnapshotIds } from '../open-api/oa-examples/vdi-snapshot.oa-example.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
 import { genericAlarmsExample } from '../open-api/oa-examples/alarm.oa-example.mjs';
 import { AlarmService } from '../alarms/alarm.service.mjs';
+import { VdiService } from '../vdis/vdi.service.mjs';
 let VdiSnapshotController = class VdiSnapshotController extends XapiXoController {
     #alarmService;
-    constructor(restApi, alarmService) {
+    #vdiService;
+    constructor(restApi, alarmService, vdiService) {
         super('VDI-snapshot', restApi);
         this.#alarmService = alarmService;
+        this.#vdiService = vdiService;
     }
     /**
      * @example fields "uuid,snapshot_time,$snapshot_of"
@@ -31,6 +34,22 @@ let VdiSnapshotController = class VdiSnapshotController extends XapiXoController
     getVdiSnapshots(req, fields, ndjson, filter, limit) {
         return this.sendObjects(Object.values(this.getObjects({ filter, limit })), req);
     }
+    /**
+     *
+     * Export VDI-snapshot content
+     *
+     * @example id "d2727772-735b-478f-b6f9-11e7db56dfd0"
+     */
+    async exportVdiSnapshotContent(req, id, format) {
+        const res = req.res;
+        const stream = await this.#vdiService.exportContent(id, 'VDI-snapshot', {
+            format,
+            response: res,
+        });
+        process.on('SIGTERM', () => req.destroy());
+        req.on('close', () => stream.destroy());
+        return stream;
+    }
     /**
      * @example id "d2727772-735b-478f-b6f9-11e7db56dfd0"
      */
@@ -51,6 +70,13 @@ let VdiSnapshotController = class VdiSnapshotController extends XapiXoController
         });
         return this.sendObjects(Object.values(alarms), req, 'alarms');
     }
+    /**
+     * @example id "d2727772-735b-478f-b6f9-11e7db56dfd0"
+     */
+    async deleteVdiSnapshot(id) {
+        const xapiVdiSnapshot = this.getXapiObject(id);
+        await xapiVdiSnapshot.$xapi.VDI_destroy(xapiVdiSnapshot.$ref);
+    }
 };
 __decorate([
     Example(vdiSnapshotIds),
@@ -62,6 +88,15 @@ __decorate([
     __param(3, Query()),
     __param(4, Query())
 ], VdiSnapshotController.prototype, "getVdiSnapshots", null);
+__decorate([
+    Get('{id}.{format}'),
+    SuccessResponse(200, 'Download started', 'application/octet-stream'),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(422, 'Invalid format'),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Path())
+], VdiSnapshotController.prototype, "exportVdiSnapshotContent", null);
 __decorate([
     Example(vdiSnapshot),
     Get('{id}'),
@@ -80,6 +115,12 @@ __decorate([
     __param(4, Query()),
     __param(5, Query())
 ], VdiSnapshotController.prototype, "getVdiSnapshotAlarms", null);
+__decorate([
+    Delete('{id}'),
+    SuccessResponse(noContentResp.status, noContentResp.description),
+    Response(notFoundResp.status, notFoundResp.description),
+    __param(0, Path())
+], VdiSnapshotController.prototype, "deleteVdiSnapshot", null);
 VdiSnapshotController = __decorate([
     Route('vdi-snapshots'),
     Security('*'),
@@ -87,6 +128,7 @@ VdiSnapshotController = __decorate([
     Tags('vdis'),
     provide(VdiSnapshotController),
     __param(0, inject(RestApi)),
-    __param(1, inject(AlarmService))
+    __param(1, inject(AlarmService)),
+    __param(2, inject(VdiService))
 ], VdiSnapshotController);
 export { VdiSnapshotController };

package/dist/vdis/vdi.controller.mjs

@@ -7,21 +7,24 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Delete, Example, Get, Path, Query, Request, Response, Route, Security, SuccessResponse, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { AlarmService } from '../alarms/alarm.service.mjs';
 import { escapeUnsafeComplexMatcher } from '../helpers/utils.helper.mjs';
 import { genericAlarmsExample } from '../open-api/oa-examples/alarm.oa-example.mjs';
-import { notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
+import { noContentResp, notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
 import { partialVdis, vdi, vdiIds } from '../open-api/oa-examples/vdi.oa-example.mjs';
+import { VdiService } from './vdi.service.mjs';
 let VdiController = class VdiController extends XapiXoController {
     #alarmService;
-    constructor(restApi, alarmService) {
+    #vdiService;
+    constructor(restApi, alarmService, vdiService) {
         super('VDI', restApi);
         this.#alarmService = alarmService;
+        this.#vdiService = vdiService;
     }
     /**
      * @example fields "*"
@@ -31,6 +34,19 @@ let VdiController = class VdiController extends XapiXoController {
     getVdis(req, fields, ndjson, filter, limit) {
         return this.sendObjects(Object.values(this.getObjects({ filter, limit })), req);
     }
+    /**
+     *
+     * Export VDI content
+     *
+     * @example id "c77f9955-c1d2-4b39-aa1c-73cdb2dacb7e"
+     */
+    async exportVdiContent(req, id, format) {
+        const res = req.res;
+        const stream = await this.#vdiService.exportContent(id, 'VDI', { format, response: res });
+        process.on('SIGTERM', () => req.destroy());
+        req.on('close', () => stream.destroy());
+        return stream;
+    }
     /**
      * @example id "c77f9955-c1d2-4b39-aa1c-73cdb2dacb7e"
      */
@@ -51,6 +67,13 @@ let VdiController = class VdiController extends XapiXoController {
         });
         return this.sendObjects(Object.values(alarms), req, 'alarms');
     }
+    /**
+     * @example id "c77f9955-c1d2-4b39-aa1c-73cdb2dacb7e"
+     */
+    async deleteVdi(id) {
+        const xapiVdi = this.getXapiObject(id);
+        await xapiVdi.$xapi.VDI_destroy(xapiVdi.$ref);
+    }
 };
 __decorate([
     Example(vdiIds),
@@ -62,6 +85,15 @@ __decorate([
     __param(3, Query()),
     __param(4, Query())
 ], VdiController.prototype, "getVdis", null);
+__decorate([
+    Get('{id}.{format}'),
+    SuccessResponse(200, 'Download started', 'application/octet-stream'),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(422, 'Invalid format'),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Path())
+], VdiController.prototype, "exportVdiContent", null);
 __decorate([
     Example(vdi),
     Get('{id}'),
@@ -80,6 +112,12 @@ __decorate([
     __param(4, Query()),
     __param(5, Query())
 ], VdiController.prototype, "getVdiAlarms", null);
+__decorate([
+    Delete('{id}'),
+    SuccessResponse(noContentResp.status, noContentResp.description),
+    Response(notFoundResp.status, notFoundResp.description),
+    __param(0, Path())
+], VdiController.prototype, "deleteVdi", null);
 VdiController = __decorate([
     Route('vdis'),
     Security('*'),
@@ -87,6 +125,7 @@ VdiController = __decorate([
     Tags('vdis'),
     provide(VdiController),
     __param(0, inject(RestApi)),
-    __param(1, inject(AlarmService))
+    __param(1, inject(AlarmService)),
+    __param(2, inject(VdiService))
 ], VdiController);
 export { VdiController };

package/dist/vdis/vdi.service.mjs

@@ -0,0 +1,21 @@
+export class VdiService {
+    #restApi;
+    constructor(restApi) {
+        this.#restApi = restApi;
+    }
+    async exportContent(id, type, { format, response }) {
+        const xapiVdi = this.#restApi.getXapiObject(id, type);
+        const stream = await xapiVdi.$xapi.VDI_exportContent(xapiVdi.$ref, { format });
+        if (response !== undefined) {
+            const headers = new Headers({
+                'content-disposition': `attachment; filename=${id}.${format}`,
+                'content-type': 'application/octet-stream',
+            });
+            if (stream.length !== undefined) {
+                headers.append('content-length', stream.length.toString());
+            }
+            response.setHeaders(headers);
+        }
+        return stream;
+    }
+}

package/dist/vm-snapshots/vm-snapshot.controller.mjs

@@ -7,17 +7,18 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Delete, Example, Get, Path, Query, Request, Response, Route, Security, SuccessResponse, Tags } from 'tsoa';
 import { inject } from 'inversify';
-import { AlarmService } from '../alarms/alarm.service.mjs';
+import { AlarmService, RAW_ALARM_FILTER } from '../alarms/alarm.service.mjs';
 import { escapeUnsafeComplexMatcher, limitAndFilterArray } from '../helpers/utils.helper.mjs';
 import { genericAlarmsExample } from '../open-api/oa-examples/alarm.oa-example.mjs';
-import { notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
+import { forbiddenOperationResp, incorrectStateResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
 import { provide } from 'inversify-binding-decorators';
 import { partialVmSnapshots, vmSnapshot, vmSnapshotIds, vmSnapshotVdis, } from '../open-api/oa-examples/vm-snapshot.oa-example.mjs';
 import { VmService } from '../vms/vm.service.mjs';
+import { messageIds, partialMessages } from '../open-api/oa-examples/message.oa-example.mjs';
 let VmSnapshotController = class VmSnapshotController extends XapiXoController {
     #alarmService;
     #vmService;
@@ -35,12 +36,35 @@ let VmSnapshotController = class VmSnapshotController extends XapiXoController {
     getVmSnapshots(req, fields, ndjson, filter, limit) {
         return this.sendObjects(Object.values(this.getObjects({ filter, limit })), req);
     }
+    /**
+     *
+     * Export VM-snapshot. Compress is only used for XVA format
+     *
+     * @example id "d68fca2c-41e6-be87-d790-105c1642a090"
+     */
+    async exportVmSnapshot(req, id, format, compress) {
+        const stream = await this.#vmService.export(id, 'VM-snapshot', {
+            compress,
+            format,
+            response: req.res,
+        });
+        process.on('SIGTERM', () => req.destroy());
+        req.on('close', () => stream.destroy());
+        return stream;
+    }
     /**
      * @example id "d68fca2c-41e6-be87-d790-105c1642a090"
      */
     getVmSnapshot(id) {
         return this.getObject(id);
     }
+    /**
+     * @example id "d68fca2c-41e6-be87-d790-105c1642a090"
+     */
+    async deleteVmSnapshot(id) {
+        const xapiVmSnapshot = this.getXapiObject(id);
+        await xapiVmSnapshot.$xapi.VM_destroy(xapiVmSnapshot.$ref);
+    }
     /**
      * @example id "d68fca2c-41e6-be87-d790-105c1642a090"
      * @example fields "id,time"
@@ -65,6 +89,20 @@ let VmSnapshotController = class VmSnapshotController extends XapiXoController {
         const vdis = this.#vmService.getVmVdis(id, 'VM-snapshot');
         return this.sendObjects(limitAndFilterArray(vdis, { filter, limit }), req, obj => obj.type.toLowerCase() + 's');
     }
+    /**
+     * @example id "d68fca2c-41e6-be87-d790-105c1642a090"
+     * @example fields "name,id,$object"
+     * @example filter "name:VM_STARTED"
+     * @example limit 42
+     */
+    getVmSnapshotsMessages(req, id, fields, ndjson, filter, limit) {
+        const vm = this.getObject(id);
+        const messages = this.restApi.getObjectsByType('message', {
+            filter: `${escapeUnsafeComplexMatcher(filter) ?? ''} $object:${vm.uuid} !${RAW_ALARM_FILTER}`,
+            limit,
+        });
+        return this.sendObjects(Object.values(messages), req, 'messages');
+    }
 };
 __decorate([
     Example(vmSnapshotIds),
@@ -76,12 +114,30 @@ __decorate([
     __param(3, Query()),
     __param(4, Query())
 ], VmSnapshotController.prototype, "getVmSnapshots", null);
+__decorate([
+    Get('{id}.{format}'),
+    SuccessResponse(200, 'Download started', 'application/octet-stream'),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(422, 'Invalid format, Invalid compress'),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Path()),
+    __param(3, Query())
+], VmSnapshotController.prototype, "exportVmSnapshot", null);
 __decorate([
     Example(vmSnapshot),
     Get('{id}'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], VmSnapshotController.prototype, "getVmSnapshot", null);
+__decorate([
+    Delete('{id}'),
+    SuccessResponse(noContentResp.status, noContentResp.description),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
+    Response(incorrectStateResp.status, incorrectStateResp.description),
+    __param(0, Path())
+], VmSnapshotController.prototype, "deleteVmSnapshot", null);
 __decorate([
     Example(genericAlarmsExample),
     Get('{id}/alarms'),
@@ -106,6 +162,19 @@ __decorate([
     __param(4, Query()),
     __param(5, Query())
 ], VmSnapshotController.prototype, "getVmSnapshotVdis", null);
+__decorate([
+    Example(messageIds),
+    Example(partialMessages),
+    Get('{id}/messages'),
+    Tags('messages'),
+    Response(notFoundResp.status, notFoundResp.description),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Query()),
+    __param(3, Query()),
+    __param(4, Query()),
+    __param(5, Query())
+], VmSnapshotController.prototype, "getVmSnapshotsMessages", null);
 VmSnapshotController = __decorate([
     Route('vm-snapshots'),
     Security('*'),

package/dist/vm-templates/vm-template.controller.mjs

@@ -7,13 +7,13 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Security, Query, Request, Response, Route, Tags, Path } from 'tsoa';
+import { Example, Get, Security, Query, Request, Response, Route, Tags, Path, Delete, SuccessResponse } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { AlarmService } from '../alarms/alarm.service.mjs';
 import { escapeUnsafeComplexMatcher, limitAndFilterArray } from '../helpers/utils.helper.mjs';
 import { genericAlarmsExample } from '../open-api/oa-examples/alarm.oa-example.mjs';
-import { notFoundResp, unauthorizedResp } from '../open-api/common/response.common.mjs';
+import { forbiddenOperationResp, incorrectStateResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
 import { partialVmTemplates, vmTemplate, vmTemplateIds, vmTemplateVdis, } from '../open-api/oa-examples/vm-template.oa-example.mjs';
@@ -34,12 +34,35 @@ let VmTemplateController = class VmTemplateController extends XapiXoController {
     getVmTemplates(req, fields, ndjson, filter, limit) {
         return this.sendObjects(Object.values(this.getObjects({ filter, limit })), req);
     }
+    /**
+     *
+     * Export VM-template. Compress is only used for XVA format
+     *
+     * @example id "b7569d99-30f8-178a-7d94-801de3e29b5b-f873abe0-b138-4995-8f6f-498b423d234d"
+     */
+    async exportVmTemplate(req, id, format, compress) {
+        const stream = await this.#vmService.export(id, 'VM-template', {
+            compress,
+            format,
+            response: req.res,
+        });
+        process.on('SIGTERM', () => req.destroy());
+        req.on('close', () => stream.destroy());
+        return stream;
+    }
     /**
      * @example id "b7569d99-30f8-178a-7d94-801de3e29b5b-f873abe0-b138-4995-8f6f-498b423d234d"
      * */
     getVmTemplate(id) {
         return this.getObject(id);
     }
+    /**
+     * @example id "6d50ba76-0f11-1ff1-4f6a-b502afc31b8e"
+     */
+    async deleteVmTemplate(id) {
+        const xapiVmTemplate = this.getXapiObject(id);
+        await xapiVmTemplate.$xapi.VM_destroy(xapiVmTemplate.$ref);
+    }
     /**
      * @example id "b7569d99-30f8-178a-7d94-801de3e29b5b-f873abe0-b138-4995-8f6f-498b423d234d"
      * @example fields "id,time"
@@ -75,12 +98,30 @@ __decorate([
     __param(3, Query()),
     __param(4, Query())
 ], VmTemplateController.prototype, "getVmTemplates", null);
+__decorate([
+    Get('{id}.{format}'),
+    SuccessResponse(200, 'Download started', 'application/octet-stream'),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(422, 'Invalid format, Invalid compress'),
+    __param(0, Request()),
+    __param(1, Path()),
+    __param(2, Path()),
+    __param(3, Query())
+], VmTemplateController.prototype, "exportVmTemplate", null);
 __decorate([
     Example(vmTemplate),
     Get('{id}'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], VmTemplateController.prototype, "getVmTemplate", null);
+__decorate([
+    Delete('{id}'),
+    SuccessResponse(noContentResp.status, noContentResp.description),
+    Response(notFoundResp.status, notFoundResp.description),
+    Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
+    Response(incorrectStateResp.status, incorrectStateResp.description),
+    __param(0, Path())
+], VmTemplateController.prototype, "deleteVmTemplate", null);
 __decorate([
     Example(genericAlarmsExample),
     Get('{id}/alarms'),