devchain-cli 0.23.4 → 0.24.0

package/dist/server/modules/vm-providers/proxmox-vm.provider.js

@@ -0,0 +1,265 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProxmoxVmProvider = exports.PROXMOX_CAPABILITIES = void 0;
+exports.proxmoxTarget = proxmoxTarget;
+exports.vmTags = vmTags;
+exports.isInPool = isInPool;
+const proxmox_client_1 = require("@devchain/proxmox-client");
+const error_types_1 = require("../../common/errors/error-types");
+const TASK_TIMEOUT_MS = 20 * 60_000;
+exports.PROXMOX_CAPABILITIES = { create: true, destroy: true, powerState: true };
+function proxmoxTarget(connection, tokenSecret) {
+    return {
+        origin: connection.apiUrl,
+        tokenId: connection.tokenId,
+        tokenSecret,
+        tlsFingerprint: connection.sslFingerprint,
+        caPem: connection.caPem,
+    };
+}
+function vmTags(config) {
+    return String(config.tags ?? '')
+        .split(/[;,\s]+/)
+        .filter(Boolean);
+}
+async function isInPool(client, target, pool, vmid) {
+    const response = (await client.request(target, {
+        method: 'GET',
+        path: `/api2/json/pools/${encodeURIComponent(pool)}`,
+    }));
+    return (response?.members?.some((member) => Number(member.vmid) === vmid || member.id === `qemu/${vmid}`) ?? false);
+}
+class ProxmoxVmProvider {
+    client;
+    connection;
+    kind = 'proxmox';
+    capabilities = exports.PROXMOX_CAPABILITIES;
+    target;
+    constructor(client, connection, tokenSecret) {
+        this.client = client;
+        this.connection = connection;
+        this.target = proxmoxTarget(connection, tokenSecret);
+    }
+    async destroyVm(vmIdentity) {
+        const vm = await this.findVm(vmIdentity);
+        if (!vm)
+            throw new error_types_1.NotFoundError('VM', vmIdentity);
+        await this.destroyLocation(vm);
+    }
+    async assertOwnedVmIdentity(vmIdentity) {
+        return (await this.getOwnedVm(vmIdentity)).vmid;
+    }
+    async getOwnedVm(vmIdentity) {
+        const vm = await this.findVm(vmIdentity);
+        if (!vm)
+            throw new error_types_1.NotFoundError('VM', vmIdentity);
+        const name = await this.assertDestroyGuard(vm);
+        return { vmid: vm.vmid, name };
+    }
+    async destroyOwnedVmid(vmid) {
+        await this.destroyLocation(await this.nodeVm(vmid));
+    }
+    async assertOwnedVmid(vmid) {
+        await this.assertDestroyGuard(await this.nodeVm(vmid));
+    }
+    async nodeVm(vmid) {
+        const vm = (await this.client.getQemuList(this.target, this.connection.node)).find((item) => item.vmid === vmid);
+        if (!vm)
+            throw new error_types_1.NotFoundError('VM', String(vmid));
+        return { ...vm, node: this.connection.node };
+    }
+    async destroyLocation(vm) {
+        await this.assertDestroyGuard(vm);
+        if (vm.status === 'running') {
+            const stop = await this.client.stopVm(this.target, vm.node, vm.vmid);
+            await this.client.waitForTask(this.target, vm.node, stop, TASK_TIMEOUT_MS);
+        }
+        const deletion = await this.client.deleteVm(this.target, vm.node, vm.vmid, {
+            purge: true,
+            destroyUnreferencedDisks: true,
+        });
+        await this.waitIfTask(deletion, vm.node);
+    }
+    async getPowerState(vmIdentity) {
+        const vm = await this.findVm(vmIdentity);
+        if (!vm)
+            return 'unknown';
+        const status = (await this.client.request(this.target, {
+            method: 'GET',
+            path: `/api2/json/nodes/${encodeURIComponent(vm.node)}/qemu/${vm.vmid}/status/current`,
+        }));
+        return status?.status === 'running' || status?.status === 'stopped' ? status.status : 'unknown';
+    }
+    async checkPermissions() {
+        const missing = [];
+        let pveMajor = null;
+        try {
+            const version = await this.client.getVersion(this.target);
+            const match = typeof version.version === 'string' ? /^(\d+)/.exec(version.version) : null;
+            pveMajor = match ? Number(match[1]) : null;
+        }
+        catch {
+            missing.push('API access');
+        }
+        const missingGuestAgentRight = pveMajor === null
+            ? 'VM.Monitor or VM.GuestAgent.Audit'
+            : pveMajor >= 9
+                ? 'VM.GuestAgent.Audit'
+                : 'VM.Monitor';
+        const fileReadRights = pveMajor === null
+            ? ['VM.GuestAgent.FileRead', 'VM.GuestAgent.Unrestricted', 'VM.Monitor']
+            : pveMajor >= 9
+                ? ['VM.GuestAgent.FileRead', 'VM.GuestAgent.Unrestricted']
+                : ['VM.Monitor'];
+        const missingFileReadRight = fileReadRights
+            .filter((right) => right !== 'VM.GuestAgent.Unrestricted')
+            .join(' or ');
+        const probe = async (label, call) => {
+            try {
+                await call();
+            }
+            catch {
+                missing.push(label);
+            }
+        };
+        await probe(`Datastore.Audit on /storage/${this.connection.imageStorage}`, () => this.client.listStorageContent(this.target, this.connection.node, this.connection.imageStorage, 'import'));
+        let nextId = null;
+        try {
+            const candidate = await this.client.getNextId(this.target);
+            if (candidate < 100 || candidate > 999_999_999)
+                throw new Error('Invalid Proxmox VMID');
+            nextId = candidate;
+        }
+        catch {
+            missing.push('VM.Allocate (nextid)');
+        }
+        const required = [
+            [
+                `/pool/${this.connection.pool}`,
+                [
+                    'Pool.Audit',
+                    'VM.Allocate',
+                    'VM.Audit',
+                    'VM.Clone',
+                    'VM.Config.CPU',
+                    'VM.Config.Memory',
+                    'VM.Config.Disk',
+                    'VM.Config.Network',
+                    'VM.PowerMgmt',
+                ],
+            ],
+            [`/storage/${this.connection.storage}`, ['Datastore.Audit', 'Datastore.AllocateSpace']],
+            [
+                `/storage/${this.connection.imageStorage}`,
+                ['Datastore.Audit', 'Datastore.AllocateSpace', 'Datastore.AllocateTemplate'],
+            ],
+            [`/sdn/zones/localnetwork/${this.connection.bridge}`, ['SDN.Use']],
+            [`/nodes/${this.connection.node}`, ['Sys.AccessNetwork']],
+        ];
+        for (const [path, privileges] of required) {
+            try {
+                const response = await this.client.request(this.target, {
+                    method: 'GET',
+                    path: `/api2/json/access/permissions?path=${encodeURIComponent(path)}`,
+                });
+                const granted = this.readAclPrivileges(response, path);
+                for (const privilege of privileges) {
+                    if (!(privilege in granted))
+                        missing.push(`${privilege} on ${path}`);
+                }
+                if (path === `/pool/${this.connection.pool}` &&
+                    !('VM.Monitor' in granted) &&
+                    !('VM.GuestAgent.Audit' in granted)) {
+                    missing.push(`${missingGuestAgentRight} on ${path}`);
+                }
+                if (path === `/pool/${this.connection.pool}` &&
+                    !fileReadRights.some((right) => right in granted)) {
+                    missing.push(`${missingFileReadRight} on ${path}`);
+                }
+            }
+            catch {
+                for (const privilege of privileges)
+                    missing.push(`${privilege} on ${path}`);
+                if (path === `/pool/${this.connection.pool}`) {
+                    missing.push(`${missingGuestAgentRight} on ${path}`);
+                    missing.push(`${missingFileReadRight} on ${path}`);
+                }
+            }
+        }
+        if (nextId === null) {
+            missing.push('VM.Allocate outside pool (could not verify)');
+        }
+        else {
+            try {
+                const path = `/vms/${nextId}`;
+                const permissions = await this.client.getOwnVmAclPermissions(this.target, nextId);
+                if ('VM.Allocate' in this.readAclPrivileges(permissions, path)) {
+                    missing.push('VM.Allocate outside pool');
+                }
+            }
+            catch {
+                missing.push('VM.Allocate outside pool (could not verify)');
+            }
+        }
+        return { ok: missing.length === 0, missing: [...new Set(missing)] };
+    }
+    readAclPrivileges(response, path) {
+        if (typeof response !== 'object' || response === null || Array.isArray(response)) {
+            throw new Error('Invalid permissions response');
+        }
+        const paths = response;
+        if (Object.keys(paths).length === 0)
+            return {};
+        if (!Object.prototype.hasOwnProperty.call(paths, path)) {
+            throw new Error('Missing ACL path in permissions response');
+        }
+        const privileges = paths[path];
+        if (typeof privileges !== 'object' || privileges === null || Array.isArray(privileges)) {
+            throw new Error('Invalid ACL privileges');
+        }
+        for (const value of Object.values(privileges)) {
+            if (typeof value !== 'number' || !Number.isFinite(value)) {
+                throw new Error('Invalid ACL privilege value');
+            }
+        }
+        return privileges;
+    }
+    async findVm(vmIdentity) {
+        const resources = await this.client.getClusterVmResources(this.target);
+        for (const resource of resources) {
+            if (!resource.node || resource.template)
+                continue;
+            try {
+                const config = await this.client.getVmConfig(this.target, resource.node, resource.vmid);
+                if ((0, proxmox_client_1.parseSmbiosUuid)(config) === vmIdentity.toLowerCase()) {
+                    return { ...resource, node: resource.node };
+                }
+            }
+            catch {
+            }
+        }
+        return null;
+    }
+    async assertDestroyGuard(vm) {
+        const config = await this.client.getVmConfig(this.target, vm.node, vm.vmid);
+        const inPool = await isInPool(this.client, this.target, this.connection.pool, vm.vmid);
+        const name = typeof config.name === 'string' ? config.name : '';
+        const failures = [
+            ...(!inPool ? ['pool'] : []),
+            ...(!vmTags(config).includes(this.connection.tag) ? ['tag'] : []),
+            ...(!name.startsWith(this.connection.namePrefix) ? ['name prefix'] : []),
+            ...(vm.vmid < this.connection.vmidMin || vm.vmid > this.connection.vmidMax
+                ? ['VMID range']
+                : []),
+        ];
+        if (failures.length > 0)
+            throw new error_types_1.ConflictError(`VM destroy guard refused: ${failures.join(', ')}.`);
+        return name;
+    }
+    async waitIfTask(upid, node = this.connection.node) {
+        if (upid)
+            await this.client.waitForTask(this.target, node, upid, TASK_TIMEOUT_MS);
+    }
+}
+exports.ProxmoxVmProvider = ProxmoxVmProvider;
+//# sourceMappingURL=proxmox-vm.provider.js.map

package/dist/server/modules/vm-providers/proxmox-vm.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxmox-vm.provider.js","sourceRoot":"","sources":["../../../src/modules/vm-providers/proxmox-vm.provider.ts"],"names":[],"mappings":";;;AAiBA,sCAaC;AAED,wBAIC;AAED,4BAeC;AArDD,6DAMkC;AAClC,iEAA+E;AAI/E,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvB,QAAA,oBAAoB,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAW,CAAC;AAI/F,SAAgB,aAAa,CAC3B,UAEC,EACD,WAAmB;IAEnB,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,WAAW;QACX,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,KAAK,EAAE,UAAU,CAAC,KAAK;KACxB,CAAC;AACJ,CAAC;AAED,SAAgB,MAAM,CAAC,MAAuB;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;SAC7B,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAEM,KAAK,UAAU,QAAQ,CAC5B,MAAqB,EACrB,MAAqB,EACrB,IAAY,EACZ,IAAY;IAEZ,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,EAAE;KACrD,CAAC,CAAwD,CAAC;IAC3D,OAAO,CACL,QAAQ,EAAE,OAAO,EAAE,IAAI,CACrB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,CACzE,IAAI,KAAK,CACX,CAAC;AACJ,CAAC;AAED,MAAa,iBAAiB;IAMT;IACA;IANV,IAAI,GAAG,SAAkB,CAAC;IAC1B,YAAY,GAAG,4BAAoB,CAAC;IAC5B,MAAM,CAAgB;IAEvC,YACmB,MAAqB,EACrB,UAAgC,EACjD,WAAmB;QAFF,WAAM,GAAN,MAAM,CAAe;QACrB,eAAU,GAAV,UAAU,CAAsB;QAGjD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB;QAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,2BAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,UAAkB;QAC5C,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,2BAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAY;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAChF,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAC7B,CAAC;QACF,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,2BAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,EAAc;QAC1C,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;YACzE,KAAK,EAAE,IAAI;YACX,wBAAwB,EAAE,IAAI;SAC/B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE;YACrD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oBAAoB,kBAAkB,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,iBAAiB;SACvF,CAAC,CAAyB,CAAC;QAC5B,OAAO,MAAM,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1F,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,sBAAsB,GAC1B,QAAQ,KAAK,IAAI;YACf,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,QAAQ,IAAI,CAAC;gBACb,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,YAAY,CAAC;QAErB,MAAM,cAAc,GAClB,QAAQ,KAAK,IAAI;YACf,CAAC,CAAC,CAAC,wBAAwB,EAAE,4BAA4B,EAAE,YAAY,CAAC;YACxE,CAAC,CAAC,QAAQ,IAAI,CAAC;gBACb,CAAC,CAAC,CAAC,wBAAwB,EAAE,4BAA4B,CAAC;gBAC1D,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAEvB,MAAM,oBAAoB,GAAG,cAAc;aACxC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,4BAA4B,CAAC;aACzD,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,EAAE,KAAa,EAAE,IAA4B,EAAiB,EAAE;YACjF,IAAI,CAAC;gBACH,MAAM,IAAI,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,CAAC,+BAA+B,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,CAC9E,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAC5B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,CAAC,IAAI,EACpB,IAAI,CAAC,UAAU,CAAC,YAAY,EAC5B,QAAQ,CACT,CACF,CAAC;QACF,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACxF,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,QAAQ,GAA8B;YAC1C;gBACE,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC/B;oBACE,YAAY;oBACZ,aAAa;oBACb,UAAU;oBACV,UAAU;oBACV,eAAe;oBACf,kBAAkB;oBAClB,gBAAgB;oBAChB,mBAAmB;oBACnB,cAAc;iBACf;aACF;YACD,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;YACvF;gBACE,YAAY,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE;gBAC1C,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,4BAA4B,CAAC;aAC7E;YACD,CAAC,2BAA2B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAClE,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC;SAC1D,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAY,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC/D,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,sCAAsC,kBAAkB,CAAC,IAAI,CAAC,EAAE;iBACvE,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACvD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,OAAO,IAAI,EAAE,CAAC,CAAC;gBACvE,CAAC;gBACD,IACE,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;oBACxC,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC;oBAC1B,CAAC,CAAC,qBAAqB,IAAI,OAAO,CAAC,EACnC,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,GAAG,sBAAsB,OAAO,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,IACE,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;oBACxC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,OAAO,CAAC,EACjD,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,OAAO,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,MAAM,SAAS,IAAI,UAAU;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC5E,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,sBAAsB,OAAO,IAAI,EAAE,CAAC,CAAC;oBACrD,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,OAAO,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QAID,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,MAAM,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAY,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC3F,IAAI,aAAa,IAAI,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;oBAC/D,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;IAEO,iBAAiB,CAAC,QAAiB,EAAE,IAAY;QACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,GAAG,QAAmC,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,UAAoC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,UAAkB;QACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ;gBAAE,SAAS;YAClD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxF,IAAI,IAAA,gCAAe,EAAC,MAAM,CAAC,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBACzD,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC9C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,EAAc;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO;gBACxE,CAAC,CAAC,CAAC,YAAY,CAAC;gBAChB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrB,MAAM,IAAI,2BAAa,CAAC,6BAA6B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAmB,EAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI;QACvE,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IACpF,CAAC;CACF;AA1PD,8CA0PC"}

package/dist/server/modules/vm-providers/vm-provider.dto.d.ts

@@ -0,0 +1,87 @@
+import { z } from 'zod';
+export declare const CreateVmProviderConnectionSchema: z.ZodEffects<z.ZodObject<{
+    kind: z.ZodLiteral<"proxmox">;
+    name: z.ZodString;
+    apiUrl: z.ZodEffects<z.ZodString, string, string>;
+    node: z.ZodString;
+    pool: z.ZodString;
+    storage: z.ZodString;
+    imageStorage: z.ZodString;
+    bridge: z.ZodString;
+    vmidMin: z.ZodNumber;
+    vmidMax: z.ZodNumber;
+    namePrefix: z.ZodString;
+    tag: z.ZodString;
+    sslFingerprint: z.ZodString;
+    caPem: z.ZodOptional<z.ZodString>;
+    tokenId: z.ZodString;
+    tokenSecret: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    kind: "proxmox";
+    apiUrl: string;
+    node: string;
+    pool: string;
+    storage: string;
+    imageStorage: string;
+    bridge: string;
+    vmidMin: number;
+    vmidMax: number;
+    namePrefix: string;
+    tag: string;
+    sslFingerprint: string;
+    tokenId: string;
+    tokenSecret: string;
+    caPem?: string | undefined;
+}, {
+    name: string;
+    kind: "proxmox";
+    apiUrl: string;
+    node: string;
+    pool: string;
+    storage: string;
+    imageStorage: string;
+    bridge: string;
+    vmidMin: number;
+    vmidMax: number;
+    namePrefix: string;
+    tag: string;
+    sslFingerprint: string;
+    tokenId: string;
+    tokenSecret: string;
+    caPem?: string | undefined;
+}>, {
+    name: string;
+    kind: "proxmox";
+    apiUrl: string;
+    node: string;
+    pool: string;
+    storage: string;
+    imageStorage: string;
+    bridge: string;
+    vmidMin: number;
+    vmidMax: number;
+    namePrefix: string;
+    tag: string;
+    sslFingerprint: string;
+    tokenId: string;
+    tokenSecret: string;
+    caPem?: string | undefined;
+}, {
+    name: string;
+    kind: "proxmox";
+    apiUrl: string;
+    node: string;
+    pool: string;
+    storage: string;
+    imageStorage: string;
+    bridge: string;
+    vmidMin: number;
+    vmidMax: number;
+    namePrefix: string;
+    tag: string;
+    sslFingerprint: string;
+    tokenId: string;
+    tokenSecret: string;
+    caPem?: string | undefined;
+}>;

package/dist/server/modules/vm-providers/vm-provider.dto.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateVmProviderConnectionSchema = void 0;
+const zod_1 = require("zod");
+function invalidHttpsOrigin(ctx) {
+    ctx.addIssue({ code: zod_1.z.ZodIssueCode.custom, message: 'apiUrl must be an HTTPS origin' });
+    return zod_1.z.NEVER;
+}
+const HttpsOriginSchema = zod_1.z.string().transform((value, ctx) => {
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        return invalidHttpsOrigin(ctx);
+    }
+    if (url.protocol === 'https:' &&
+        !url.username &&
+        !url.password &&
+        url.pathname === '/' &&
+        !url.search &&
+        !url.hash) {
+        return url.origin;
+    }
+    return invalidHttpsOrigin(ctx);
+});
+exports.CreateVmProviderConnectionSchema = zod_1.z
+    .object({
+    kind: zod_1.z.literal('proxmox'),
+    name: zod_1.z.string().trim().min(1).max(128),
+    apiUrl: HttpsOriginSchema,
+    node: zod_1.z.string().trim().min(1),
+    pool: zod_1.z.string().trim().min(1),
+    storage: zod_1.z.string().trim().min(1),
+    imageStorage: zod_1.z.string().trim().min(1),
+    bridge: zod_1.z.string().trim().min(1),
+    vmidMin: zod_1.z.number().int().positive(),
+    vmidMax: zod_1.z.number().int().positive(),
+    namePrefix: zod_1.z.string().min(1),
+    tag: zod_1.z.string().min(1),
+    sslFingerprint: zod_1.z.string().regex(/^([0-9a-fA-F]{2}:){31}[0-9a-fA-F]{2}$|^[0-9a-fA-F]{64}$/),
+    caPem: zod_1.z.string().min(1).optional(),
+    tokenId: zod_1.z.string().min(1),
+    tokenSecret: zod_1.z.string().min(1),
+})
+    .strict()
+    .refine((value) => value.vmidMax >= value.vmidMin, {
+    path: ['vmidMax'],
+    message: 'vmidMax must be at least vmidMin',
+});
+//# sourceMappingURL=vm-provider.dto.js.map

package/dist/server/modules/vm-providers/vm-provider.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-provider.dto.js","sourceRoot":"","sources":["../../../src/modules/vm-providers/vm-provider.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,SAAS,kBAAkB,CAAC,GAAoB;IAC9C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;IACzF,OAAO,OAAC,CAAC,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,CAAC,GAAG,CAAC,QAAQ;QACb,CAAC,GAAG,CAAC,QAAQ;QACb,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,CAAC,GAAG,CAAC,MAAM;QACX,CAAC,GAAG,CAAC,IAAI,EACT,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IACD,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEU,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,MAAM,EAAE,iBAAiB;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yDAAyD,CAAC;IAC3F,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE;IACjD,IAAI,EAAE,CAAC,SAAS,CAAC;IACjB,OAAO,EAAE,kCAAkC;CAC5C,CAAC,CAAC"}

package/dist/server/modules/vm-providers/vm-provider.port.d.ts

@@ -0,0 +1,15 @@
+export type VmPowerState = 'running' | 'stopped' | 'unknown';
+export interface VmProvider {
+    readonly kind: 'address' | 'proxmox';
+    readonly capabilities: Readonly<{
+        create: boolean;
+        destroy: boolean;
+        powerState: boolean;
+    }>;
+    destroyVm(vmIdentity: string): Promise<void>;
+    getPowerState(vmIdentity: string): Promise<VmPowerState>;
+    checkPermissions(): Promise<{
+        ok: boolean;
+        missing: string[];
+    }>;
+}

package/dist/server/modules/{orchestrator/sync/dtos/task-merge.dto.js → vm-providers/vm-provider.port.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=task-merge.dto.js.map
+//# sourceMappingURL=vm-provider.port.js.map

package/dist/server/modules/vm-providers/vm-provider.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-provider.port.js","sourceRoot":"","sources":["../../../src/modules/vm-providers/vm-provider.port.ts"],"names":[],"mappings":""}

package/dist/server/modules/vm-providers/vm-providers.controller.d.ts

@@ -0,0 +1,26 @@
+import { VmProvidersService, type PublicVmProviderConnection } from './vm-providers.service';
+export declare class VmProvidersController {
+    private readonly providers;
+    constructor(providers: VmProvidersService);
+    setupBlock(query: unknown): {
+        block: string;
+    };
+    connect(body: unknown): Promise<import("./vm-providers.service").ConnectProxmoxResult>;
+    list(): Promise<{
+        items: PublicVmProviderConnection[];
+        address: {
+            kind: 'address';
+            capabilities: {
+                create: false;
+                destroy: false;
+                powerState: false;
+            };
+        };
+    }>;
+    create(body: unknown): Promise<PublicVmProviderConnection>;
+    delete(id: string): Promise<void>;
+    check(id: string): Promise<{
+        ok: boolean;
+        missing: string[];
+    }>;
+}

package/dist/server/modules/vm-providers/vm-providers.controller.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VmProvidersController = void 0;
+const common_1 = require("@nestjs/common");
+const zod_1 = require("zod");
+const swagger_1 = require("@nestjs/swagger");
+const vm_provider_dto_1 = require("./vm-provider.dto");
+const vm_providers_service_1 = require("./vm-providers.service");
+const connection_string_1 = require("./proxmox/connection-string");
+const setup_block_1 = require("./proxmox/setup-block");
+const IdSchema = zod_1.z.string().uuid();
+let VmProvidersController = class VmProvidersController {
+    providers;
+    constructor(providers) {
+        this.providers = providers;
+    }
+    setupBlock(query) {
+        return { block: (0, setup_block_1.generateProxmoxSetupBlock)(setup_block_1.ProxmoxSetupBlockQuerySchema.parse(query)) };
+    }
+    connect(body) {
+        const request = connection_string_1.ConnectProxmoxRequestSchema.parse(body);
+        return this.providers.connectFromString(request.connectionString, request.confirmFingerprint === true);
+    }
+    async list() {
+        return {
+            items: await this.providers.listConnections(),
+            address: {
+                kind: 'address',
+                capabilities: { create: false, destroy: false, powerState: false },
+            },
+        };
+    }
+    create(body) {
+        return this.providers.createConnection(vm_provider_dto_1.CreateVmProviderConnectionSchema.parse(body));
+    }
+    delete(id) {
+        return this.providers.deleteConnection(IdSchema.parse(id));
+    }
+    check(id) {
+        return this.providers.checkPermissions(IdSchema.parse(id));
+    }
+};
+exports.VmProvidersController = VmProvidersController;
+__decorate([
+    (0, common_1.Get)('proxmox/setup-block'),
+    (0, swagger_1.ApiOperation)({ summary: 'Generate the Proxmox root-shell onboarding block' }),
+    (0, swagger_1.ApiQuery)({
+        name: 'address',
+        required: false,
+        description: 'Proxmox host name or IP used as the setup block default for PVE_HOST.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'One copy-paste shell block' }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Invalid setup-block input' }),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Object)
+], VmProvidersController.prototype, "setupBlock", null);
+__decorate([
+    (0, common_1.Post)('proxmox/connect'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({ summary: 'Preview or confirm a Proxmox connection string' }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Fingerprint confirmation or saved connection and permission check',
+    }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], VmProvidersController.prototype, "connect", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, swagger_1.ApiOperation)({ summary: 'List VM provider connections and address capabilities' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Connections without token secrets' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], VmProvidersController.prototype, "list", null);
+__decorate([
+    (0, common_1.Post)(),
+    (0, swagger_1.ApiOperation)({ summary: 'Save an encrypted Proxmox connection' }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Connection without token secret' }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], VmProvidersController.prototype, "create", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    (0, swagger_1.ApiOperation)({ summary: 'Delete an unused VM provider connection' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Connection deleted' }),
+    __param(0, (0, common_1.Param)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], VmProvidersController.prototype, "delete", null);
+__decorate([
+    (0, common_1.Post)(':id/check'),
+    (0, swagger_1.ApiOperation)({ summary: 'Check Proxmox connection permissions' }),
+    (0, swagger_1.ApiResponse)({ status: 201, description: 'Missing privileges by name' }),
+    __param(0, (0, common_1.Param)('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], VmProvidersController.prototype, "check", null);
+exports.VmProvidersController = VmProvidersController = __decorate([
+    (0, swagger_1.ApiTags)('vm-providers'),
+    (0, common_1.Controller)('api/vm-providers'),
+    __metadata("design:paramtypes", [vm_providers_service_1.VmProvidersService])
+], VmProvidersController);
+//# sourceMappingURL=vm-providers.controller.js.map

package/dist/server/modules/vm-providers/vm-providers.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-providers.controller.js","sourceRoot":"","sources":["../../../src/modules/vm-providers/vm-providers.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAUwB;AACxB,6BAAwB;AACxB,6CAA+E;AAC/E,uDAAqE;AACrE,iEAA6F;AAC7F,mEAA0E;AAC1E,uDAAgG;AAEhG,MAAM,QAAQ,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAI5B,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IACH;IAA7B,YAA6B,SAA6B;QAA7B,cAAS,GAAT,SAAS,CAAoB;IAAG,CAAC;IAW9D,UAAU,CAAU,KAAc;QAChC,OAAO,EAAE,KAAK,EAAE,IAAA,uCAAyB,EAAC,0CAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IASD,OAAO,CAAS,IAAa;QAC3B,MAAM,OAAO,GAAG,+CAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACrC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,kBAAkB,KAAK,IAAI,CACpC,CAAC;IACJ,CAAC;IAKK,AAAN,KAAK,CAAC,IAAI;QAOR,OAAO;YACL,KAAK,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE;YAC7C,OAAO,EAAE;gBACP,IAAI,EAAE,SAAS;gBACf,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;aACnE;SACF,CAAC;IACJ,CAAC;IAKD,MAAM,CAAS,IAAa;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,kDAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,CAAC;IAKD,MAAM,CAAc,EAAU;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAKD,KAAK,CAAc,EAAU;QAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;CACF,CAAA;AAtEY,sDAAqB;AAYhC;IATC,IAAA,YAAG,EAAC,qBAAqB,CAAC;IAC1B,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IAC7E,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,uEAAuE;KACrF,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACvE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;IAC3D,WAAA,IAAA,cAAK,GAAE,CAAA;;;;uDAElB;AASD;IAPC,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;IAC3E,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,mEAAmE;KACjF,CAAC;IACO,WAAA,IAAA,aAAI,GAAE,CAAA;;;;oDAMd;AAKK;IAHL,IAAA,YAAG,GAAE;IACL,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;IAClF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;;;;iDAe9E;AAKD;IAHC,IAAA,aAAI,GAAE;IACN,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IACjE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;IACrE,WAAA,IAAA,aAAI,GAAE,CAAA;;;;mDAEb;AAKD;IAHC,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACpE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACxD,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;mDAElB;AAKD;IAHC,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;IACjE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACjE,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;kDAEjB;gCArEU,qBAAqB;IAFjC,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,mBAAU,EAAC,kBAAkB,CAAC;qCAEW,yCAAkB;GAD/C,qBAAqB,CAsEjC"}

package/dist/server/modules/vm-providers/vm-providers.module.d.ts

@@ -0,0 +1,2 @@
+export declare class VmProvidersModule {
+}

package/dist/server/modules/vm-providers/vm-providers.module.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VmProvidersModule = void 0;
+const common_1 = require("@nestjs/common");
+const proxmox_client_1 = require("@devchain/proxmox-client");
+const storage_module_1 = require("../storage/storage.module");
+const address_vm_provider_1 = require("./address-vm.provider");
+const vm_providers_controller_1 = require("./vm-providers.controller");
+const vm_providers_service_1 = require("./vm-providers.service");
+const proxmox_vm_lifecycle_service_1 = require("./proxmox-vm-lifecycle.service");
+let VmProvidersModule = class VmProvidersModule {
+};
+exports.VmProvidersModule = VmProvidersModule;
+exports.VmProvidersModule = VmProvidersModule = __decorate([
+    (0, common_1.Module)({
+        imports: [storage_module_1.StorageModule],
+        controllers: [vm_providers_controller_1.VmProvidersController],
+        providers: [
+            address_vm_provider_1.AddressVmProvider,
+            vm_providers_service_1.VmProvidersService,
+            proxmox_vm_lifecycle_service_1.ProxmoxVmLifecycleService,
+            {
+                provide: proxmox_client_1.ProxmoxClient,
+                useFactory: () => new proxmox_client_1.ProxmoxClient({ requestTimeoutMs: 10_000, maxResponseBytes: 5 * 1024 * 1024 }),
+            },
+        ],
+        exports: [vm_providers_service_1.VmProvidersService, proxmox_vm_lifecycle_service_1.ProxmoxVmLifecycleService],
+    })
+], VmProvidersModule);
+//# sourceMappingURL=vm-providers.module.js.map

package/dist/server/modules/vm-providers/vm-providers.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-providers.module.js","sourceRoot":"","sources":["../../../src/modules/vm-providers/vm-providers.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,6DAAyD;AACzD,8DAA0D;AAC1D,+DAA0D;AAC1D,uEAAkE;AAClE,iEAA4D;AAC5D,iFAA2E;AAiBpE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAAG,CAAA;AAApB,8CAAiB;4BAAjB,iBAAiB;IAf7B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,8BAAa,CAAC;QACxB,WAAW,EAAE,CAAC,+CAAqB,CAAC;QACpC,SAAS,EAAE;YACT,uCAAiB;YACjB,yCAAkB;YAClB,wDAAyB;YACzB;gBACE,OAAO,EAAE,8BAAa;gBACtB,UAAU,EAAE,GAAG,EAAE,CACf,IAAI,8BAAa,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;aACrF;SACF;QACD,OAAO,EAAE,CAAC,yCAAkB,EAAE,wDAAyB,CAAC;KACzD,CAAC;GACW,iBAAiB,CAAG"}