@xen-orchestra/rest-api 0.31.1 → 0.33.0

package/dist/pbds/pbd.controller.mjs

@@ -9,7 +9,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
-import { Middlewares, Route, Security, Request, Response, Get, Query, Path, Tags, Example, Post, SuccessResponse } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { acl } from '../middlewares/acl.middleware.mjs';
 import { asynchronousActionResp, badRequestResp, internalServerErrorResp, invalidParameters as invalidParametersResp, noContentResp, forbiddenOperationResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
@@ -83,6 +83,7 @@ let PbdController = class PbdController extends XapiXoController {
 __decorate([
     Example(pbdIds),
     Example(partialPbds),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -94,6 +95,7 @@ __decorate([
 ], PbdController.prototype, "getPbds", null);
 __decorate([
     Example(pbd),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pbd', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -102,6 +104,7 @@ __decorate([
 ], PbdController.prototype, "getPbd", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/plug'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -113,6 +116,7 @@ __decorate([
 ], PbdController.prototype, "plugPbd", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/unplug'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),

package/dist/pcis/pci.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -46,6 +46,7 @@ let PciController = class PciController extends XapiXoController {
 __decorate([
     Example(pciIds),
     Example(partialPcis),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -57,6 +58,7 @@ __decorate([
 ], PciController.prototype, "getPcis", null);
 __decorate([
     Example(pci),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pci', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),

package/dist/pgpus/pgpu.controller.mjs

@@ -10,7 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { inject } from 'inversify';
 import { RestApi } from '../rest-api/rest-api.mjs';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { acl } from '../middlewares/acl.middleware.mjs';
 import { badRequestResp, forbiddenOperationResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { provide } from 'inversify-binding-decorators';
@@ -46,6 +46,7 @@ let PgpuController = class PgpuController extends XapiXoController {
 __decorate([
     Example(pgpuIds),
     Example(partialPgpus),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -57,6 +58,7 @@ __decorate([
 ], PgpuController.prototype, "getPgpus", null);
 __decorate([
     Example(pgpu),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pgpu', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),

package/dist/pifs/pif.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { AlarmService } from '../alarms/alarm.service.mjs';
@@ -107,6 +107,7 @@ let PifController = class PifController extends XapiXoController {
 __decorate([
     Example(pifIds),
     Example(partialPifs),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -118,6 +119,7 @@ __decorate([
 ], PifController.prototype, "getPifs", null);
 __decorate([
     Example(pif),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pif', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -126,6 +128,7 @@ __decorate([
 ], PifController.prototype, "getPif", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -141,6 +144,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -156,6 +160,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),

package/dist/pools/pool.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Path, Query, Response, Request, Route, Security, Tags, Post, Middlewares, Body, SuccessResponse, Put, Delete, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { invalidParameters } from 'xo-common/api-errors.js';
 import { PassThrough } from 'node:stream';
@@ -427,6 +427,7 @@ let PoolController = class PoolController extends XapiXoController {
 __decorate([
     Example(poolIds),
     Example(partialPools),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -438,6 +439,7 @@ __decorate([
 ], PoolController.prototype, "getPools", null);
 __decorate([
     Example(pool),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -447,6 +449,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createNetwork),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_network'),
     Middlewares([
         json(),
@@ -470,6 +473,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createNetwork),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_bonded_network'),
     Middlewares(json()),
     Tags('networks'),
@@ -485,6 +489,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createNetwork),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_internal_network'),
     Middlewares(json()),
     Tags('networks'),
@@ -499,6 +504,7 @@ __decorate([
 ], PoolController.prototype, "createInternalNetwork", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/emergency_shutdown'),
     Middlewares(acl({ resource: 'pool', action: 'emergency-shutdown', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -511,6 +517,7 @@ __decorate([
 ], PoolController.prototype, "emergencyShutdown", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/rolling_reboot'),
     Middlewares(acl({ resource: 'pool', action: 'rolling-reboot', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -523,6 +530,7 @@ __decorate([
 ], PoolController.prototype, "rollingReboot", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/rolling_update'),
     Middlewares(acl({ resource: 'pool', action: 'rolling-update', objectId: 'params.id' })),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -535,6 +543,7 @@ __decorate([
 ], PoolController.prototype, "rollingUpdate", null);
 __decorate([
     Example(importVm),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/vms'),
     Middlewares(acl([
         {
@@ -563,6 +572,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(createVm),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/create_vm'),
     Middlewares([
         json(),
@@ -607,6 +617,7 @@ __decorate([
 ], PoolController.prototype, "createVm", null);
 __decorate([
     Example(poolStats),
+    Extension('x-mcp-exposure', 'deny'),
     Get('{id}/stats'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -617,6 +628,7 @@ __decorate([
 ], PoolController.prototype, "getStats", null);
 __decorate([
     Example(poolDashboard),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/dashboard'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -627,6 +639,7 @@ __decorate([
 ], PoolController.prototype, "getPoolDashboard", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -641,6 +654,7 @@ __decorate([
 ], PoolController.prototype, "getPoolAlarms", null);
 __decorate([
     Example(poolMissingPatches),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/missing_patches'),
     Middlewares(acl({ resource: 'pool', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -651,6 +665,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -664,6 +679,7 @@ __decorate([
     __param(6, Query())
 ], PoolController.prototype, "getPoolMessages", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'pool', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -673,6 +689,7 @@ __decorate([
     __param(1, Path())
 ], PoolController.prototype, "putPoolTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'pool', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -684,6 +701,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -698,6 +716,7 @@ __decorate([
 ], PoolController.prototype, "getPoolTasks", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/management_reconfigure'),
     Middlewares(json()),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),

package/dist/proxies/proxy.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -53,6 +53,7 @@ let ProxyController = class ProxyController extends XoController {
 __decorate([
     Example(proxyIds),
     Example(partialProxies),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -64,6 +65,7 @@ __decorate([
 ], ProxyController.prototype, "getProxies", null);
 __decorate([
     Example(proxy),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'proxy',

package/dist/restore-logs/restore-log.controller.mjs

@@ -8,7 +8,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { createLogger } from '@xen-orchestra/log';
-import { Deprecated, Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Deprecated, Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl, autoBindService } from '../middlewares/acl.middleware.mjs';
@@ -59,6 +59,7 @@ let RestoreLogController = class RestoreLogController extends XoController {
 __decorate([
     Example(restoreLogIds),
     Example(partialRestoreLogs),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -70,6 +71,7 @@ __decorate([
 ], RestoreLogController.prototype, "getRestoreLogs", null);
 __decorate([
     Example(restoreLog),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'restore-log',
@@ -133,6 +135,7 @@ __decorate([
     Example(restoreLogIds),
     Example(partialRestoreLogs),
     Deprecated(),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     __param(0, Request()),
     __param(1, Query()),
@@ -144,6 +147,7 @@ __decorate([
 __decorate([
     Example(restoreLog),
     Deprecated(),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     __param(0, Path())
 ], DeprecatedRestoreController.prototype, "getDeprecatedRestoreLog", null);

package/dist/schedules/schedule.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -76,6 +76,7 @@ let ScheduleController = class ScheduleController extends XoController {
 __decorate([
     Example(scheduleIds),
     Example(partialSchedules),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -87,6 +88,7 @@ __decorate([
 ], ScheduleController.prototype, "getSchedules", null);
 __decorate([
     Example(schedule),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'schedule',
@@ -100,6 +102,7 @@ __decorate([
 ], ScheduleController.prototype, "getSchedule", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/run'),
     Middlewares(acl({
         resource: 'schedule',

package/dist/servers/server.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Delete, Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { json } from 'express';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
@@ -131,6 +131,7 @@ let ServerController = class ServerController extends XoController {
 __decorate([
     Example(serverIds),
     Example(partialServers),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -142,6 +143,7 @@ __decorate([
 ], ServerController.prototype, "getServers", null);
 __decorate([
     Example(server),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'server',
@@ -154,6 +156,7 @@ __decorate([
     __param(0, Path())
 ], ServerController.prototype, "getServer", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({
         resource: 'server',
@@ -168,6 +171,7 @@ __decorate([
 ], ServerController.prototype, "deleteServer", null);
 __decorate([
     Example(serverId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post(''),
     Middlewares([json(), acl({ resource: 'server', action: 'create', object: ({ req }) => req.body })]),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -178,6 +182,7 @@ __decorate([
 ], ServerController.prototype, "addServer", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/connect'),
     Middlewares(acl({
         resource: 'server',
@@ -195,6 +200,7 @@ __decorate([
 ], ServerController.prototype, "connectServer", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/disconnect'),
     Middlewares(acl({
         resource: 'server',
@@ -213,6 +219,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),

package/dist/sms/sm.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
+import { Example, Extension, Get, Middlewares, Path, Query, Request, Response, Route, Security, Tags } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -46,6 +46,7 @@ let SmController = class SmController extends XapiXoController {
 __decorate([
     Example(smIds),
     Example(partialSms),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -57,6 +58,7 @@ __decorate([
 ], SmController.prototype, "getSrs", null);
 __decorate([
     Example(sm),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'sm', action: 'read', objectId: 'params.id' })),
     Response(notFoundResp.status, notFoundResp.description),

package/dist/srs/sr.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Delete, Example, Get, Middlewares, Path, Post, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Delete, Example, Extension, Get, Middlewares, Path, Post, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { SUPPORTED_VDI_FORMAT } from '@vates/types';
@@ -224,6 +224,7 @@ let SrController = class SrController extends XapiXoController {
 __decorate([
     Example(srIds),
     Example(partialSrs),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -235,6 +236,7 @@ __decorate([
 ], SrController.prototype, "getSrs", null);
 __decorate([
     Example(sr),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'sr', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -243,6 +245,7 @@ __decorate([
 ], SrController.prototype, "getSr", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -257,6 +260,7 @@ __decorate([
 ], SrController.prototype, "getSrAlarms", null);
 __decorate([
     Example(vdiId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/vdis'),
     Middlewares(acl({ resource: 'sr', action: 'import:vdi', objectId: 'params.id' })),
     Tags('vdis'),
@@ -272,6 +276,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -287,6 +292,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -300,6 +306,7 @@ __decorate([
     __param(6, Query())
 ], SrController.prototype, "getSrTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'sr', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -309,6 +316,7 @@ __decorate([
     __param(1, Path())
 ], SrController.prototype, "putSrTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'sr', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -319,6 +327,7 @@ __decorate([
 ], SrController.prototype, "deleteSrTag", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/reclaim_space'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -330,6 +339,7 @@ __decorate([
 ], SrController.prototype, "reclaimSpaceSr", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/scan'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -341,6 +351,7 @@ __decorate([
 ], SrController.prototype, "scanSr", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/forget'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -351,6 +362,7 @@ __decorate([
     __param(1, Query())
 ], SrController.prototype, "forgetSr", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({ resource: 'sr', action: 'delete', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),

package/dist/tasks/task.controller.mjs

@@ -8,7 +8,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { XoController } from '../abstract-classes/xo-controller.mjs';
-import { Get, Path, Query, Request, Route, Security, Tags, Response, Example, Delete, Post, SuccessResponse, Middlewares, } from 'tsoa';
+import { Delete, Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { acl } from '../middlewares/acl.middleware.mjs';
 import { asynchronousActionResp, badRequestResp, forbiddenOperationResp, noContentResp, notFoundResp, unauthorizedResp, } from '../open-api/common/response.common.mjs';
 import { inject } from 'inversify';
@@ -167,6 +167,7 @@ let TaskController = class TaskController extends XoController {
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     Response(badRequestResp.status, badRequestResp.description),
@@ -180,6 +181,7 @@ __decorate([
 ], TaskController.prototype, "getTasks", null);
 __decorate([
     Example(task),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'task',
@@ -194,11 +196,13 @@ __decorate([
     __param(2, Query())
 ], TaskController.prototype, "getTask", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete(''),
     Security('*', ['acl']),
     SuccessResponse(noContentResp.status, noContentResp.description)
 ], TaskController.prototype, "deleteTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({
         resource: 'task',
@@ -213,6 +217,7 @@ __decorate([
 ], TaskController.prototype, "deleteTask", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/abort'),
     Middlewares(acl({
         resource: 'task',