@xen-orchestra/rest-api 0.31.1 → 0.33.0

package/dist/users/user.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Delete, Deprecated, Example, Get, Middlewares, Patch, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Body, Delete, Deprecated, Example, Extension, Get, Middlewares, Patch, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { createLogger } from '@xen-orchestra/log';
 import { forbiddenOperation } from 'xo-common/api-errors.js';
 import { inject } from 'inversify';
@@ -217,6 +217,7 @@ let UserController = class UserController extends XoController {
 __decorate([
     Example(userIds),
     Example(partialUsers),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -228,6 +229,7 @@ __decorate([
 ], UserController.prototype, "getUsers", null);
 __decorate([
     Example(user),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({
         resource: 'user',
@@ -240,6 +242,7 @@ __decorate([
     __param(0, Path())
 ], UserController.prototype, "getUser", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Patch('{id}'),
     Middlewares([
         json(),
@@ -259,6 +262,7 @@ __decorate([
 ], UserController.prototype, "updateUser", null);
 __decorate([
     Example(userId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post(''),
     Middlewares([json(), acl({ resource: 'user', action: 'create', object: ({ req }) => req.body })]),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -268,6 +272,7 @@ __decorate([
     __param(0, Body())
 ], UserController.prototype, "createUser", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({
         resource: 'user',
@@ -283,6 +288,7 @@ __decorate([
 __decorate([
     Example(groupIds),
     Example(partialGroups),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/groups'),
     Security('*', ['acl']),
     Tags('groups'),
@@ -297,6 +303,7 @@ __decorate([
 ], UserController.prototype, "getUserGroups", null);
 __decorate([
     Example(authenticationTokens),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/authentication_tokens'),
     Security('*', ['acl']),
     Response(notFoundResp.status, notFoundResp.description),
@@ -309,6 +316,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -324,6 +332,7 @@ __decorate([
 __decorate([
     Example(authenticationToken),
     Deprecated(),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('authentication_tokens'),
     Middlewares(json()),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -332,6 +341,7 @@ __decorate([
 ], UserController.prototype, "postDeprecatedAuthenticationTokens", null);
 __decorate([
     Example(authenticationToken),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/authentication_tokens'),
     Middlewares(json()),
     Security('*', ['acl']),
@@ -344,9 +354,10 @@ __decorate([
 __decorate([
     Example(aclPrivilegeIds),
     Example(partialAclPrivileges),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/acl-privileges'),
     Security('*', ['acl']),
-    Tags('acls'),
+    Tags('rbacs'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Request()),
     __param(1, Path()),

package/dist/vbds/vbd.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Delete, Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { json } from 'express';
 import { inject } from 'inversify';
 import { invalidParameters as invalidParametersError } from 'xo-common/api-errors.js';
@@ -183,6 +183,7 @@ let VbdController = class VbdController extends XapiXoController {
 __decorate([
     Example(vbdIds),
     Example(partialVbds),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -194,6 +195,7 @@ __decorate([
 ], VbdController.prototype, "getVbds", null);
 __decorate([
     Example(vbd),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'vbd', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -202,6 +204,7 @@ __decorate([
 ], VbdController.prototype, "getVbd", null);
 __decorate([
     Example(vbdId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post(''),
     Middlewares(json()),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -210,6 +213,7 @@ __decorate([
     __param(0, Body())
 ], VbdController.prototype, "createVbd", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     SuccessResponse(noContentResp.status, noContentResp.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -217,6 +221,7 @@ __decorate([
 ], VbdController.prototype, "deleteVbd", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -232,6 +237,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -247,6 +253,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -261,6 +268,7 @@ __decorate([
 ], VbdController.prototype, "getVbdTasks", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/connect'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -271,6 +279,7 @@ __decorate([
 ], VbdController.prototype, "connectVbd", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/disconnect'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),

package/dist/vdi-snapshots/vdi-snapshot.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Delete, Example, Get, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags } from 'tsoa';
+import { Delete, Example, Extension, Get, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { escapeUnsafeComplexMatcher } from '../helpers/utils.helper.mjs';
@@ -145,6 +145,7 @@ let VdiSnapshotController = class VdiSnapshotController extends XapiXoController
 __decorate([
     Example(vdiSnapshotIds),
     Example(partialVdiSnapshots),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -155,6 +156,7 @@ __decorate([
     __param(5, Query())
 ], VdiSnapshotController.prototype, "getVdiSnapshots", null);
 __decorate([
+    Extension('x-mcp-exposure', 'deny'),
     Get('{id}.{format}'),
     SuccessResponse(200, 'Download started', 'application/octet-stream'),
     Response(notFoundResp.status, notFoundResp.description),
@@ -165,12 +167,14 @@ __decorate([
 ], VdiSnapshotController.prototype, "exportVdiSnapshotContent", null);
 __decorate([
     Example(vdiSnapshot),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Response(notFoundResp.status, notFoundResp.description),
     __param(0, Path())
 ], VdiSnapshotController.prototype, "getVdiSnapshot", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -184,6 +188,7 @@ __decorate([
     __param(6, Query())
 ], VdiSnapshotController.prototype, "getVdiSnapshotAlarms", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     SuccessResponse(noContentResp.status, noContentResp.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -192,6 +197,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -207,6 +213,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -220,6 +227,7 @@ __decorate([
     __param(6, Query())
 ], VdiSnapshotController.prototype, "getVdiSnapshotTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     SuccessResponse(noContentResp.status, noContentResp.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -227,6 +235,7 @@ __decorate([
     __param(1, Path())
 ], VdiSnapshotController.prototype, "putVdiSnapshotTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     SuccessResponse(noContentResp.status, noContentResp.description),
     Response(notFoundResp.status, notFoundResp.description),

package/dist/vdis/vdi.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Delete, Example, Get, Middlewares, Path, Post, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { json } from 'express';
@@ -217,6 +217,7 @@ let VdiController = class VdiController extends XapiXoController {
 __decorate([
     Example(vdiIds),
     Example(partialVdis),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -227,6 +228,7 @@ __decorate([
     __param(5, Query())
 ], VdiController.prototype, "getVdis", null);
 __decorate([
+    Extension('x-mcp-exposure', 'deny'),
     Get('{id}.{format}'),
     Middlewares(acl({ resource: 'vdi', action: 'export-content', objectId: 'params.id' })),
     SuccessResponse(200, 'Download started', 'application/octet-stream'),
@@ -238,6 +240,7 @@ __decorate([
     __param(2, Path())
 ], VdiController.prototype, "exportVdiContent", null);
 __decorate([
+    Extension('x-mcp-exposure', 'deny'),
     Put('{id}.{format}'),
     Middlewares(acl({ resource: 'vdi', action: 'import-content', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -251,6 +254,7 @@ __decorate([
 ], VdiController.prototype, "importVdiContent", null);
 __decorate([
     Example(vdi),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'vdi', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -259,6 +263,7 @@ __decorate([
 ], VdiController.prototype, "getVdi", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -273,6 +278,7 @@ __decorate([
 ], VdiController.prototype, "getVdiAlarms", null);
 __decorate([
     Example(vdiId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post(''),
     Middlewares(json()),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -281,6 +287,7 @@ __decorate([
     __param(0, Body())
 ], VdiController.prototype, "createVdi", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({ resource: 'vdi', action: 'delete', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -291,6 +298,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -306,6 +314,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -321,6 +330,7 @@ __decorate([
 __decorate([
     Example(taskLocation),
     Example(vdiId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/migrate'),
     Middlewares(json()),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
@@ -332,6 +342,7 @@ __decorate([
     __param(2, Query())
 ], VdiController.prototype, "migrateVdi", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vdi', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -341,6 +352,7 @@ __decorate([
     __param(1, Path())
 ], VdiController.prototype, "putVdiTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vdi', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),

package/dist/vifs/vif.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Body, Delete, Example, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
+import { Body, Delete, Example, Extension, Get, Middlewares, Path, Post, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { json } from 'express';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -189,6 +189,7 @@ let VifController = class VifController extends XapiXoController {
 __decorate([
     Example(vifIds),
     Example(partialVifs),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -200,6 +201,7 @@ __decorate([
 ], VifController.prototype, "getVifs", null);
 __decorate([
     Example(vif),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'vif', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -208,6 +210,7 @@ __decorate([
 ], VifController.prototype, "getVif", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -223,6 +226,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -238,6 +242,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -252,6 +257,7 @@ __decorate([
 ], VifController.prototype, "getVifTasks", null);
 __decorate([
     Example(vifId),
+    Extension('x-mcp-exposure', 'confirm'),
     Post(''),
     Middlewares(json()),
     SuccessResponse(createdResp.status, createdResp.description),
@@ -261,6 +267,7 @@ __decorate([
     __param(0, Body())
 ], VifController.prototype, "createVif", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     SuccessResponse(noContentResp.status, noContentResp.description),
     Response(notFoundResp.status, notFoundResp.description),
@@ -269,6 +276,7 @@ __decorate([
 ], VifController.prototype, "destroyVif", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/connect'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),
@@ -279,6 +287,7 @@ __decorate([
 ], VifController.prototype, "connectVif", null);
 __decorate([
     Example(taskLocation),
+    Extension('x-mcp-exposure', 'confirm'),
     Post('{id}/actions/disconnect'),
     SuccessResponse(asynchronousActionResp.status, asynchronousActionResp.description),
     Response(noContentResp.status, noContentResp.description),

package/dist/vm-controller/vm-controller.controller.mjs

@@ -10,7 +10,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { inject } from 'inversify';
 import { XapiXoController } from '../abstract-classes/xapi-xo-controller.mjs';
 import { RestApi } from '../rest-api/rest-api.mjs';
-import { Delete, Example, Get, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, Middlewares } from 'tsoa';
+import { Delete, Example, Extension, Get, Middlewares, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { AlarmService } from '../alarms/alarm.service.mjs';
 import { escapeUnsafeComplexMatcher, limitAndFilterArray } from '../helpers/utils.helper.mjs';
 import { acl } from '../middlewares/acl.middleware.mjs';
@@ -149,6 +149,7 @@ let VmControllerController = class VmControllerController extends XapiXoControll
 __decorate([
     Example(vmControllerIds),
     Example(partialVmControllers),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -160,6 +161,7 @@ __decorate([
 ], VmControllerController.prototype, "getVmControllers", null);
 __decorate([
     Example(vmController),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'vm-controller', action: 'read', objectId: 'params.id' })),
     Response(notFoundResp.status, notFoundResp.description),
@@ -168,6 +170,7 @@ __decorate([
 ], VmControllerController.prototype, "getVmController", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -182,6 +185,7 @@ __decorate([
 ], VmControllerController.prototype, "getVmControllerAlarms", null);
 __decorate([
     Example(vmControllerVdis),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/vdis'),
     Security('*', ['acl']),
     Tags('vdis'),
@@ -197,6 +201,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -212,6 +217,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -225,6 +231,7 @@ __decorate([
     __param(6, Query())
 ], VmControllerController.prototype, "getVmControllerTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vm-controller', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -234,6 +241,7 @@ __decorate([
     __param(1, Path())
 ], VmControllerController.prototype, "putVmControllerTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vm-controller', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),

package/dist/vm-snapshots/vm-snapshot.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Delete, Example, Get, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, Middlewares, } from 'tsoa';
+import { Delete, Example, Extension, Get, Middlewares, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { AlarmService } from '../alarms/alarm.service.mjs';
 import { escapeUnsafeComplexMatcher, limitAndFilterArray } from '../helpers/utils.helper.mjs';
@@ -178,6 +178,7 @@ let VmSnapshotController = class VmSnapshotController extends XapiXoController {
 __decorate([
     Example(vmSnapshotIds),
     Example(partialVmSnapshots),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -188,6 +189,7 @@ __decorate([
     __param(5, Query())
 ], VmSnapshotController.prototype, "getVmSnapshots", null);
 __decorate([
+    Extension('x-mcp-exposure', 'deny'),
     Get('{id}.{format}'),
     Middlewares(acl({ resource: 'vm-snapshot', action: 'export', objectId: 'params.id' })),
     SuccessResponse(200, 'Download started', 'application/octet-stream'),
@@ -201,6 +203,7 @@ __decorate([
 ], VmSnapshotController.prototype, "exportVmSnapshot", null);
 __decorate([
     Example(vmSnapshot),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'vm-snapshot', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -208,6 +211,7 @@ __decorate([
     __param(0, Path())
 ], VmSnapshotController.prototype, "getVmSnapshot", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({ resource: 'vm-snapshot', action: 'delete', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -218,6 +222,7 @@ __decorate([
 ], VmSnapshotController.prototype, "deleteVmSnapshot", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -232,6 +237,7 @@ __decorate([
 ], VmSnapshotController.prototype, "getVmSnapshotAlarms", null);
 __decorate([
     Example(vmSnapshotVdis),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/vdis'),
     Security('*', ['acl']),
     Tags('vdis'),
@@ -247,6 +253,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -262,6 +269,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -275,6 +283,7 @@ __decorate([
     __param(6, Query())
 ], VmSnapshotController.prototype, "getVmSnapshotTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vm-snapshot', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -284,6 +293,7 @@ __decorate([
     __param(1, Path())
 ], VmSnapshotController.prototype, "putVmSnapshotTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vm-snapshot', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),

package/dist/vm-templates/vm-template.controller.mjs

@@ -7,7 +7,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-import { Example, Get, Security, Query, Request, Response, Route, Tags, Path, Delete, SuccessResponse, Put, Middlewares, } from 'tsoa';
+import { Delete, Example, Extension, Get, Middlewares, Path, Put, Query, Request, Response, Route, Security, SuccessResponse, Tags, } from 'tsoa';
 import { inject } from 'inversify';
 import { provide } from 'inversify-binding-decorators';
 import { AlarmService } from '../alarms/alarm.service.mjs';
@@ -178,6 +178,7 @@ let VmTemplateController = class VmTemplateController extends XapiXoController {
 __decorate([
     Example(vmTemplateIds),
     Example(partialVmTemplates),
+    Extension('x-mcp-exposure', 'allow'),
     Get(''),
     Security('*', ['acl']),
     __param(0, Request()),
@@ -188,6 +189,7 @@ __decorate([
     __param(5, Query())
 ], VmTemplateController.prototype, "getVmTemplates", null);
 __decorate([
+    Extension('x-mcp-exposure', 'deny'),
     Get('{id}.{format}'),
     Middlewares(acl({ resource: 'vm-template', action: 'export', objectId: 'params.id' })),
     SuccessResponse(200, 'Download started', 'application/octet-stream'),
@@ -201,6 +203,7 @@ __decorate([
 ], VmTemplateController.prototype, "exportVmTemplate", null);
 __decorate([
     Example(vmTemplate),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}'),
     Middlewares(acl({ resource: 'vm-template', action: 'read', objectId: 'params.id' })),
     Response(forbiddenOperationResp.status, forbiddenOperationResp.description),
@@ -208,6 +211,7 @@ __decorate([
     __param(0, Path())
 ], VmTemplateController.prototype, "getVmTemplate", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}'),
     Middlewares(acl({ resource: 'vm-template', action: 'delete', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -218,6 +222,7 @@ __decorate([
 ], VmTemplateController.prototype, "deleteVmTemplate", null);
 __decorate([
     Example(genericAlarmsExample),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/alarms'),
     Security('*', ['acl']),
     Tags('alarms'),
@@ -232,6 +237,7 @@ __decorate([
 ], VmTemplateController.prototype, "getVmTemplateAlarms", null);
 __decorate([
     Example(vmTemplateVdis),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/vdis'),
     Security('*', ['acl']),
     Tags('vdis'),
@@ -247,6 +253,7 @@ __decorate([
 __decorate([
     Example(messageIds),
     Example(partialMessages),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/messages'),
     Security('*', ['acl']),
     Tags('messages'),
@@ -262,6 +269,7 @@ __decorate([
 __decorate([
     Example(taskIds),
     Example(partialTasks),
+    Extension('x-mcp-exposure', 'allow'),
     Get('{id}/tasks'),
     Security('*', ['acl']),
     Tags('tasks'),
@@ -275,6 +283,7 @@ __decorate([
     __param(6, Query())
 ], VmTemplateController.prototype, "getVmTemplateTasks", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Put('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vm-template', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),
@@ -284,6 +293,7 @@ __decorate([
     __param(1, Path())
 ], VmTemplateController.prototype, "putVmTemplateTag", null);
 __decorate([
+    Extension('x-mcp-exposure', 'confirm'),
     Delete('{id}/tags/{tag}'),
     Middlewares(acl({ resource: 'vm-template', action: 'update:tags', objectId: 'params.id' })),
     SuccessResponse(noContentResp.status, noContentResp.description),