hostctl 0.1.58 → 0.1.59

package/dist/bin/hostctl.js

@@ -14,7 +14,7 @@ import "zod";
 
 // src/app.ts
 import process3 from "process";
-import * as fs9 from "fs";
+import * as fs10 from "fs";
 import { homedir as homedir3 } from "os";
 
 // src/handlebars.ts
@@ -1839,8 +1839,12 @@ var TmpFileRegistry = class _TmpFileRegistry {
   constructor(rootPath) {
     this.rootPath = Path.new(rootPath);
     this.tempFilePaths = [];
+    this.ensureRootPathExists();
     process2.on("exit", (code) => this.exitCallback());
   }
+  ensureRootPathExists() {
+    fs.mkdirSync(this.rootPath.toString(), { recursive: true });
+  }
   randName() {
     return Math.random().toString(36).slice(-5) + Math.random().toString(36).slice(-5);
   }
@@ -1857,6 +1861,7 @@ var TmpFileRegistry = class _TmpFileRegistry {
   }
   // this file will be automatically cleaned up at program exit
   writeTmpFile(fileContent) {
+    this.ensureRootPathExists();
     const path14 = this.tmpPath();
     fs.writeFileSync(path14.toString(), fileContent);
     this.registerTempFileOrDir(path14.toString());
@@ -1898,6 +1903,7 @@ var Host = class {
     this.user = opts.user;
     this.password = opts.password;
     this.sshKey = opts.sshKey;
+    this.sshKeyPassphrase = opts.sshKeyPassphrase;
     this.tags = opts.tags ?? [];
     this.tagSet = new Set(this.tags);
   }
@@ -1909,6 +1915,7 @@ var Host = class {
   user;
   password;
   sshKey;
+  sshKeyPassphrase;
   tags;
   tagSet;
   async decryptedPassword() {
@@ -1928,6 +1935,16 @@ var Host = class {
       return await secret?.plaintext();
     }
   }
+  async decryptedSshKeyPassphrase() {
+    if (V(this.sshKeyPassphrase).isA(SecretRef)) {
+      const secretRef = this.sshKeyPassphrase;
+      const secret = this.config.getSecret(secretRef.name);
+      return await secret?.plaintext();
+    }
+    if (typeof this.sshKeyPassphrase === "string") {
+      return this.sshKeyPassphrase;
+    }
+  }
   toYAML() {
     let passwordForYaml = this.password;
     if (this.password && V(this.password).isA(SecretRef)) {
@@ -1937,6 +1954,10 @@ var Host = class {
     if (this.sshKey && V(this.sshKey).isA(SecretRef)) {
       sshKeyForYaml = this.sshKey.toYAML();
     }
+    let sshKeyPassphraseForYaml = this.sshKeyPassphrase;
+    if (this.sshKeyPassphrase && V(this.sshKeyPassphrase).isA(SecretRef)) {
+      sshKeyPassphraseForYaml = this.sshKeyPassphrase.toYAML();
+    }
     return {
       host: this.hostname,
       // Always include the host field
@@ -1945,6 +1966,7 @@ var Host = class {
       // Only include port if not default
       password: passwordForYaml,
       "ssh-key": sshKeyForYaml,
+      "ssh-key-passphrase": sshKeyPassphraseForYaml,
       tags: this.tags
     };
   }
@@ -2296,6 +2318,7 @@ var ConfigFile2 = class {
       hostObj ||= {};
       const password = this.parseSecretValue(hostObj.password);
       const sshKey = this.parseSecretValue(hostObj["ssh-key"]);
+      const sshKeyPassphrase = this.parseSecretValue(hostObj["ssh-key-passphrase"]);
       const hostname = hostObj.host || alias;
       hostMap.set(
         alias,
@@ -2310,6 +2333,7 @@ var ConfigFile2 = class {
           user: hostObj.user,
           password,
           sshKey,
+          sshKeyPassphrase,
           tags: hostObj.tags
         })
       );
@@ -2484,6 +2508,7 @@ var ProviderConfig = class _ProviderConfig {
       user: input.user,
       password: input.password,
       sshKey: input.sshKey,
+      sshKeyPassphrase: input.sshKeyPassphrase,
       tags: input.tags
     });
   }
@@ -2527,6 +2552,7 @@ var FileConfigProvider = class {
       port: h.port,
       password: h.password,
       sshKey: h.sshKey,
+      sshKeyPassphrase: h.sshKeyPassphrase,
       tags: h.tags
     }));
   }
@@ -3045,6 +3071,7 @@ var Invocation = class {
 // src/remote-runtime.ts
 import Handlebars2 from "handlebars";
 import "path";
+import * as fs5 from "fs";
 
 // src/ssh-session.ts
 import { signalsByName } from "human-signals";
@@ -3228,6 +3255,15 @@ function withSudo(password, existingInputMap = {}) {
 }
 
 // src/remote-runtime.ts
+function normalizePrivateKey(value) {
+  if (!value.includes("\n") && value.includes("\\n")) {
+    return value.replace(/\\n/g, "\n");
+  }
+  return value;
+}
+function looksLikePrivateKey(value) {
+  return /-----BEGIN [A-Z0-9 ]+PRIVATE KEY-----/.test(value);
+}
 function normalizeWriteMode(mode) {
   if (mode === void 0) {
     return void 0;
@@ -3467,9 +3503,28 @@ var RemoteRuntime = class {
       // Assuming defaultSshUser on App
       port: this.host.port,
       // node-ssh parses port from host string if present
-      privateKey: await this.host.plaintextSshKeyPath(),
       password: await this.host.decryptedPassword()
     };
+    const sshKeyPassphrase = await this.host.decryptedSshKeyPassphrase();
+    if (sshKeyPassphrase) {
+      sshConnectOpts.passphrase = sshKeyPassphrase;
+    }
+    const decryptedKey = await this.host.decryptedSshKey();
+    if (decryptedKey) {
+      const normalizedKey = normalizePrivateKey(decryptedKey).trim();
+      if (looksLikePrivateKey(normalizedKey)) {
+        sshConnectOpts.privateKey = normalizedKey;
+      } else if (fs5.existsSync(normalizedKey)) {
+        sshConnectOpts.privateKeyPath = normalizedKey;
+      } else {
+        sshConnectOpts.privateKey = normalizedKey;
+      }
+    } else {
+      const keyPath = await this.host.plaintextSshKeyPath();
+      if (keyPath) {
+        sshConnectOpts.privateKeyPath = keyPath;
+      }
+    }
     try {
       if (!this.sshSession.isConnected()) {
         await this.sshSession.connect(sshConnectOpts);
@@ -3560,7 +3615,7 @@ var RemoteRuntime = class {
 };
 
 // src/local-runtime.ts
-import * as fs5 from "fs";
+import * as fs6 from "fs";
 
 // src/ruspty-command.ts
 import { Pty } from "@replit/ruspty";
@@ -3640,7 +3695,7 @@ var LocalInvocation = class _LocalInvocation extends Invocation {
     )(params);
     this.config = this.runtime.app.config;
     this.file = {
-      read: async (path14) => fs5.promises.readFile(path14, "utf-8"),
+      read: async (path14) => fs6.promises.readFile(path14, "utf-8"),
       write: async (path14, content, options) => {
         const mode = normalizeMode(options?.mode);
         const writeOptions = {
@@ -3649,20 +3704,20 @@ var LocalInvocation = class _LocalInvocation extends Invocation {
         if (mode !== void 0) {
           writeOptions.mode = mode;
         }
-        await fs5.promises.writeFile(path14, content, writeOptions);
+        await fs6.promises.writeFile(path14, content, writeOptions);
       },
       exists: async (path14) => {
         try {
-          await fs5.promises.access(path14);
+          await fs6.promises.access(path14);
           return true;
         } catch {
           return false;
         }
       },
       mkdir: async (path14, options) => {
-        await fs5.promises.mkdir(path14, options);
+        await fs6.promises.mkdir(path14, options);
       },
-      rm: async (path14, options) => fs5.promises.rm(path14, options)
+      rm: async (path14, options) => fs6.promises.rm(path14, options)
     };
   }
   config;
@@ -3988,7 +4043,7 @@ var ParamMap = class _ParamMap {
 import * as z from "zod";
 
 // src/version.ts
-var version = "0.1.58";
+var version = "0.1.59";
 
 // src/app.ts
 import { retryUntilDefined } from "ts-retry";
@@ -4054,7 +4109,7 @@ var runAllRemote_default = task(run, {
 });
 
 // src/commands/pkg/package-manager.ts
-import { promises as fs6 } from "fs";
+import { promises as fs7 } from "fs";
 
 // src/node-runtime.ts
 import os3 from "os";
@@ -4305,7 +4360,7 @@ var PackageManager = class {
   async loadManifest() {
     try {
       if (await this.manifestPath.exists()) {
-        const manifestContent = await fs6.readFile(this.manifestPath.toString(), "utf-8");
+        const manifestContent = await fs7.readFile(this.manifestPath.toString(), "utf-8");
         this.manifest = JSON.parse(manifestContent);
       } else {
         this.manifest = { packages: [], version: "1.0" };
@@ -4318,7 +4373,7 @@ var PackageManager = class {
     }
   }
   async saveManifest() {
-    await fs6.writeFile(this.manifestPath.toString(), JSON.stringify(this.manifest, null, 2));
+    await fs7.writeFile(this.manifestPath.toString(), JSON.stringify(this.manifest, null, 2));
   }
   isLocalPath(source) {
     if (source.startsWith("file:")) {
@@ -4353,7 +4408,7 @@ var PackageManager = class {
   async discoverTasks(packagePath) {
     const tasks = [];
     try {
-      const entries = await fs6.readdir(packagePath.toString(), { withFileTypes: true });
+      const entries = await fs7.readdir(packagePath.toString(), { withFileTypes: true });
       for (const entry of entries) {
         if (entry.isFile() && (entry.name.endsWith(".ts") || entry.name.endsWith(".js"))) {
           if (entry.name === "index.ts" || entry.name === "index.js") {
@@ -4371,7 +4426,7 @@ var PackageManager = class {
       for (const subdir of subdirs) {
         const subdirPath = packagePath.join(subdir);
         if (await subdirPath.exists()) {
-          const subEntries = await fs6.readdir(subdirPath.toString(), { withFileTypes: true });
+          const subEntries = await fs7.readdir(subdirPath.toString(), { withFileTypes: true });
           for (const entry of subEntries) {
             if (entry.isFile() && (entry.name.endsWith(".ts") || entry.name.endsWith(".js"))) {
               const taskPath = subdirPath.join(entry.name);
@@ -4561,7 +4616,7 @@ var PackageManager = class {
       }
       const normalizedSource = this.normalizeSource(source);
       const packagesDir = this.app.packagesDir();
-      await fs6.mkdir(packagesDir.toString(), { recursive: true });
+      await fs7.mkdir(packagesDir.toString(), { recursive: true });
       const filenamifiedSource = filenamify(normalizedSource, { replacement: "_" });
       const installDir = packagesDir.join(filenamifiedSource);
       const existingPackage = this.findPackageBySource(normalizedSource);
@@ -4653,7 +4708,7 @@ var PackageManager = class {
     const overrideValue = hostctlOverride ? hostctlOverride.startsWith("file:") ? hostctlOverride : `file:${Path.new(hostctlOverride).absolute().toString()}` : void 0;
     let packageJson;
     if (await packageJsonPath.exists()) {
-      const raw = await fs6.readFile(packageJsonPath.toString(), "utf-8");
+      const raw = await fs7.readFile(packageJsonPath.toString(), "utf-8");
       packageJson = JSON.parse(raw);
     } else {
       packageJson = {
@@ -4666,7 +4721,7 @@ var PackageManager = class {
     if (overrideValue) {
       packageJson.overrides = { ...packageJson.overrides ?? {}, hostctl: overrideValue };
     }
-    await fs6.writeFile(packageJsonPath.toString(), JSON.stringify(packageJson, null, 2));
+    await fs7.writeFile(packageJsonPath.toString(), JSON.stringify(packageJson, null, 2));
   }
   // Scan node_modules for the real installed package (by name or repo match)
   async findRealInstalledNpmPackagePath(packagesDir, source) {
@@ -4677,14 +4732,14 @@ var PackageManager = class {
       }
       return { path: null, name: null };
     }
-    const entries = await fs6.readdir(nodeModulesPath.toString());
+    const entries = await fs7.readdir(nodeModulesPath.toString());
     for (const entry of entries) {
       const potentialPackagePath = nodeModulesPath.join(entry);
       if (await potentialPackagePath.isDirectory()) {
         const packageJsonPath = potentialPackagePath.join("package.json");
         if (await packageJsonPath.exists()) {
           try {
-            const packageJsonContent = await fs6.readFile(packageJsonPath.toString(), "utf-8");
+            const packageJsonContent = await fs7.readFile(packageJsonPath.toString(), "utf-8");
             const packageJson = JSON.parse(packageJsonContent);
             if (packageJson.repository && typeof packageJson.repository.url === "string" && packageJson.repository.url.includes(source.replace(/^https?:\/\//, "").replace(/\.git$/, "")) || packageJson.homepage && packageJson.homepage.includes(source.replace(/^https?:\/\//, "").replace(/\.git$/, ""))) {
               return { path: potentialPackagePath, name: packageJson.name };
@@ -4703,7 +4758,7 @@ var PackageManager = class {
       const packageJsonPath = potentialPackagePath.join("package.json");
       if (await packageJsonPath.exists()) {
         try {
-          const packageJsonContent = await fs6.readFile(packageJsonPath.toString(), "utf-8");
+          const packageJsonContent = await fs7.readFile(packageJsonPath.toString(), "utf-8");
           const packageJson = JSON.parse(packageJsonContent);
           return { path: potentialPackagePath, name: packageJson.name };
         } catch {
@@ -4743,7 +4798,7 @@ var PackageManager = class {
     try {
       const packageJsonPath = packagePath.join("package.json");
       if (await packageJsonPath.exists()) {
-        const packageJsonContent = await fs6.readFile(packageJsonPath.toString(), "utf-8");
+        const packageJsonContent = await fs7.readFile(packageJsonPath.toString(), "utf-8");
         const packageJson = JSON.parse(packageJsonContent);
         return {
           name: packageJson.name || fallbackName || packagePath.basename().toString(),
@@ -4760,7 +4815,7 @@ var PackageManager = class {
 };
 
 // src/task-registry-loader.ts
-import { promises as fs7 } from "fs";
+import { promises as fs8 } from "fs";
 import path4 from "path";
 import { pathToFileURL } from "url";
 function resolveExportsEntry(exportsField) {
@@ -4778,7 +4833,7 @@ function resolveExportsEntry(exportsField) {
 async function readPackageJson(packagePath) {
   const packageJsonPath = path4.join(packagePath, "package.json");
   try {
-    const raw = await fs7.readFile(packageJsonPath, "utf8");
+    const raw = await fs8.readFile(packageJsonPath, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -4786,7 +4841,7 @@ async function readPackageJson(packagePath) {
 }
 async function fileExists(filePath) {
   try {
-    const stat = await fs7.stat(filePath);
+    const stat = await fs8.stat(filePath);
     return stat.isFile();
   } catch {
     return false;
@@ -5392,7 +5447,7 @@ var DirCreateOutputSchema = z.object({
   })
 );
 async function runFn(context) {
-  const { params, exec, run: run253 } = context;
+  const { params, exec, run: run249 } = context;
   const sudoDefault = context.host ? !context.host.isLocal() : false;
   const { path: path14, mode, owner, sudo = sudoDefault } = params;
   if (!path14) {
@@ -5416,7 +5471,7 @@ async function runFn(context) {
       }
     }
     if (mode) {
-      const chmodResult = await run253(chmod_default({ path: path14, mode, sudo: true }));
+      const chmodResult = await run249(chmod_default({ path: path14, mode, sudo: true }));
       if (!chmodResult?.success) {
         return { success: false, error: chmodResult?.error ?? "Failed to set directory mode" };
       }
@@ -6009,7 +6064,7 @@ async function ensureFile(context, file, sudo) {
   await exec(["touch", file], { sudo });
 }
 async function runFn2(context) {
-  const { params, exec, info, run: run253, error } = context;
+  const { params, exec, info, run: run249, error } = context;
   const {
     file,
     state = "present",
@@ -6696,7 +6751,7 @@ async function getOsReleaseInfo(exec) {
     const cpeMatch = osRelease.match(/^CPE_NAME=(.*?)$/im);
     if (idMatch) {
       let id = idMatch[1].trim().replace(/"/g, "");
-      const idLike = idLikeMatch ? idLikeMatch[1].trim().replace(/"/g, "") : id;
+      let idLike = idLikeMatch ? idLikeMatch[1].trim().replace(/"/g, "") : id;
       const version2 = versionIdMatch && versionIdMatch[1].trim().replace(/"/g, "") || buildIdMatch && buildIdMatch[1].trim().replace(/"/g, "") || "unknown";
       const nameValue = nameMatch ? nameMatch[1].trim().replace(/"/g, "") : "";
       const prettyName = prettyNameMatch ? prettyNameMatch[1].trim().replace(/"/g, "") : "";
@@ -6705,6 +6760,10 @@ async function getOsReleaseInfo(exec) {
       if (normalizedName.includes("rocky") || idLike.toLowerCase().includes("rocky")) {
         id = "rocky";
       }
+      if (normalizedName.includes("xcp-ng") || id.toLowerCase() === "xenenterprise") {
+        id = "xcp-ng";
+        idLike = "xcp-ng";
+      }
       return {
         idLike,
         id,
@@ -6724,6 +6783,53 @@ async function getOsReleaseInfo(exec) {
     };
   }
 }
+function parseKeyValueFile(contents) {
+  return contents.split("\n").map((line) => line.trim()).filter(Boolean).reduce((acc, line) => {
+    const match7 = line.match(/^([A-Za-z0-9_]+)=(.*)$/);
+    if (!match7) {
+      return acc;
+    }
+    const key = match7[1];
+    const rawValue = match7[2];
+    const value = rawValue.replace(/^"(.*)"$/, "$1");
+    acc[key] = value;
+    return acc;
+  }, {});
+}
+async function detectSynologyInfo(exec) {
+  try {
+    const { stdout } = await exec(["cat", "/etc.defaults/VERSION"]);
+    const values3 = parseKeyValueFile(stdout);
+    const version2 = values3.productversion || values3.version || `${values3.major || ""}.${values3.minor || ""}`.trim();
+    if (!version2 || version2 === ".") {
+      return null;
+    }
+    return {
+      idLike: "synology",
+      id: "synology",
+      version: version2
+    };
+  } catch {
+    return null;
+  }
+}
+async function detectXcpNgInfo(exec) {
+  try {
+    const { stdout } = await exec(["cat", "/etc/redhat-release"]);
+    if (!stdout.toLowerCase().includes("xcp-ng")) {
+      return null;
+    }
+    const versionMatch = stdout.match(/([0-9]+(?:\.[0-9]+)+)/);
+    const version2 = versionMatch ? versionMatch[1] : "unknown";
+    return {
+      idLike: "xcp-ng",
+      id: "xcp-ng",
+      version: version2
+    };
+  } catch {
+    return null;
+  }
+}
 async function detectRockyLinux(exec) {
   try {
     const { stdout } = await exec([
@@ -6763,7 +6869,17 @@ var os_default = task(
             const { stdout: swVersOutput } = await exec(["sw_vers", "-productVersion"]);
             return [family, family, swVersOutput.trim()];
           }).with("linux", async () => {
-            const { idLike, id, version: version2 } = await getOsReleaseInfo(exec);
+            let { idLike, id, version: version2 } = await getOsReleaseInfo(exec);
+            if (id === "unknown") {
+              const synologyInfo = await detectSynologyInfo(exec);
+              if (synologyInfo) {
+                return [synologyInfo.idLike, synologyInfo.id, synologyInfo.version];
+              }
+              const xcpNgInfo = await detectXcpNgInfo(exec);
+              if (xcpNgInfo) {
+                return [xcpNgInfo.idLike, xcpNgInfo.id, xcpNgInfo.version];
+              }
+            }
             return [idLike, id, version2];
           }).with("solaris", async () => {
             const { stdout: unameROutput } = await exec(["uname", "-r"]);
@@ -6846,15 +6962,29 @@ async function run28(context) {
     const hostnameResult = await runTask(hostname_default({}));
     const name = hostnameResult.hostname;
     const os6 = await runTask(os_default({}));
-    const { stdout: lsbOutput } = await exec(["lsb_release", "-a"]);
-    const lsb_release = lsbOutput.split("\n").filter(Boolean).reduce((acc, line) => {
-      const [key, ...valueParts] = line.split(":");
-      const value = valueParts.join(":").trim();
-      acc[key.trim()] = value;
-      return acc;
-    }, {});
-    const { stdout: lscpuOutput } = await exec(["lscpu", "-J"]);
-    const lscpu = JSON.parse(lscpuOutput).lscpu;
+    let lsb_release = {
+      "Distributor ID": "",
+      Description: "",
+      Release: "",
+      Codename: ""
+    };
+    try {
+      const { stdout: lsbOutput } = await exec(["lsb_release", "-a"]);
+      lsb_release = lsbOutput.split("\n").filter(Boolean).reduce((acc, line) => {
+        const [key, ...valueParts] = line.split(":");
+        const value = valueParts.join(":").trim();
+        acc[key.trim()] = value;
+        return acc;
+      }, {});
+    } catch {
+    }
+    let lscpu = [];
+    try {
+      const { stdout: lscpuOutput } = await exec(["lscpu", "-J"]);
+      const parsed = JSON.parse(lscpuOutput);
+      lscpu = Array.isArray(parsed?.lscpu) ? parsed.lscpu : [];
+    } catch {
+    }
     return {
       host: {
         name,
@@ -8203,10 +8333,6 @@ var uninstall_default2 = task(run42, {
 // src/core/pkg/dnf/update.ts
 async function run43(context) {
   const { sudo = true, updateMetadata = true } = context.params;
-  const isProtectedPackageError = (output) => {
-    const normalized = output.toLowerCase();
-    return normalized.includes("protected packages") || normalized.includes("protected package") || normalized.includes("the following protected") || normalized.includes("systemd-udev");
-  };
   try {
     if (!updateMetadata) {
       return {
@@ -8217,55 +8343,25 @@ async function run43(context) {
         updatedPackages: []
       };
     }
-    const command = ["dnf", "update", "-y", "--quiet"];
+    const command = ["dnf", "makecache", "--refresh", "--quiet"];
     const result = await context.exec(command, { sudo });
-    const combinedOutput = `${result.stdout}
-${result.stderr}`;
     if (result.exitCode === 0) {
-      const updatedPackages = [];
-      let packagesUpdated = 0;
-      const lines = result.stdout.split("\n");
-      for (const line of lines) {
-        if (line.includes("packages upgraded")) {
-          const match7 = line.match(/(\d+)\s+packages? upgraded/);
-          if (match7) {
-            packagesUpdated = parseInt(match7[1], 10);
-          }
-        } else if (line.includes("Installing") || line.includes("Upgrading")) {
-          const match7 = line.match(/(?:Installing|Upgrading)\s+(\S+)/);
-          if (match7) {
-            updatedPackages.push(match7[1]);
-          }
-        }
-      }
       return {
         success: true,
         packageManager: "dnf",
         output: result.stdout,
-        packagesUpdated,
-        updatedPackages
-      };
-    } else {
-      if (isProtectedPackageError(combinedOutput)) {
-        context.warn("DNF skipped updates because the transaction would remove protected packages.");
-        return {
-          success: true,
-          packageManager: "dnf",
-          output: combinedOutput,
-          packagesUpdated: 0,
-          updatedPackages: [],
-          warning: "DNF skipped updates due to protected packages; leaving system unchanged."
-        };
-      }
-      return {
-        success: false,
-        error: result.stderr || "Update failed",
-        packageManager: "dnf",
-        output: result.stdout,
         packagesUpdated: 0,
         updatedPackages: []
       };
     }
+    return {
+      success: false,
+      error: result.stderr || "Update failed",
+      packageManager: "dnf",
+      output: result.stdout,
+      packagesUpdated: 0,
+      updatedPackages: []
+    };
   } catch (error) {
     context.error("Error updating packages:", error);
     return {
@@ -8279,7 +8375,7 @@ ${result.stderr}`;
 }
 var update_default2 = task(run43, {
   name: "update",
-  description: "Update packages using dnf package manager",
+  description: "Update package metadata using dnf package manager",
   inputSchema: DnfUpdateParamsSchema,
   outputSchema: DnfUpdateResultSchema
 });
@@ -10924,6 +11020,44 @@ async function packageManagerSpecificInstall(pkgManager, context) {
       return abstractInstallFallback(context, pkgManager);
   }
 }
+async function packageManagerSpecificUpdate(pkgManager, context) {
+  const mapAptParams = () => ({
+    ...context.params,
+    packageManager: "apt",
+    updateLists: true,
+    upgrade: false
+  });
+  const mapDnfParams = () => ({
+    ...context.params,
+    packageManager: "dnf",
+    updateMetadata: true,
+    upgrade: false
+  });
+  const mapPacmanParams = () => ({
+    ...context.params,
+    packageManager: "pacman",
+    updateMetadata: true,
+    upgrade: false
+  });
+  const mapYumParams = () => ({
+    ...context.params,
+    packageManager: "yum",
+    updateMetadata: true,
+    upgrade: false
+  });
+  switch (pkgManager.name) {
+    case "apt":
+      return await context.run(update_default(mapAptParams()));
+    case "dnf":
+      return await context.run(update_default2(mapDnfParams()));
+    case "pacman":
+      return await context.run(update_default3(mapPacmanParams()));
+    case "yum":
+      return await context.run(update_default4(mapYumParams()));
+    default:
+      return await abstractUpdateFallback(context, pkgManager);
+  }
+}
 function buildCommandArray(pkgManager, operation, packages, extraArgs) {
   const baseCommand = pkgManager[operation];
   if (!baseCommand) {
@@ -11213,8 +11347,8 @@ async function abstractUninstallFallback(context) {
   }
 }
 async function abstractUpdate(context) {
-  const { params, exec, log, warn, info } = context;
-  const { sudo = true, packageManager: forcedManager, extraArgs, input: userInput } = params;
+  const { params, warn } = context;
+  const { packageManager: forcedManager } = params;
   try {
     const pkgManager = forcedManager ? PACKAGE_MANAGERS[forcedManager] : await detectPackageManager(context);
     if (!pkgManager) {
@@ -11224,14 +11358,26 @@ async function abstractUpdate(context) {
       };
     }
     warn(`Using package manager: ${pkgManager.name}`);
-    if (pkgManager.name === "pacman") {
-      return await context.run(
-        update_default3({
-          ...context.params,
-          packageManager: "pacman"
-        })
-      );
+    return await packageManagerSpecificUpdate(pkgManager, context);
+  } catch (error) {
+    return {
+      success: false,
+      error: error instanceof Error ? error.message : String(error)
+    };
+  }
+}
+async function abstractUpdateFallback(context, detectedManager) {
+  const { params, exec, warn, info } = context;
+  const { sudo = true, packageManager: forcedManager, extraArgs, input: userInput } = params;
+  try {
+    const pkgManager = detectedManager || (forcedManager ? PACKAGE_MANAGERS[forcedManager] : await detectPackageManager(context));
+    if (!pkgManager) {
+      return {
+        success: false,
+        error: "No supported package manager detected. Please specify one explicitly."
+      };
     }
+    warn(`Using fallback implementation for package manager: ${pkgManager.name}`);
     const mergedInput = getInteractiveInput(pkgManager.name, userInput);
     const commandArray = buildCommandArray(pkgManager, "updateCommand", [], extraArgs);
     info(`Executing: ${commandArray.join(" ")}`);
@@ -11766,7 +11912,8 @@ async function abstractClean(context) {
 var AbstractPkgUpdateParamsSchema = AbstractPkgParamsSchema.pick({
   sudo: true,
   packageManager: true,
-  extraArgs: true
+  extraArgs: true,
+  input: true
 });
 var AbstractPkgUpdateResultSchema = AbstractPkgResultSchema;
 async function run69(context) {
@@ -12147,7 +12294,6 @@ async function run76(context) {
   const { params, run: runTask, exec, log, info, error } = context;
   let { public_key, user, sudo } = params;
   const publicKeyTrimmed = public_key.trim();
-  const sudoPrefix = sudo ? ["sudo"] : [];
   if (!user) {
     const usernameResult = await runTask(get_username_default());
     if (usernameResult instanceof Error) {
@@ -12201,9 +12347,7 @@ async function run76(context) {
     );
     return { success: false, changed: false };
   }
-  const checkKeyCommandParts = [];
-  checkKeyCommandParts.push("sudo", "-u", user, "grep", "-xqF", publicKeyTrimmed, authorizedKeysFile);
-  const checkKeyCmdResult = await exec(checkKeyCommandParts);
+  const checkKeyCmdResult = await exec(["grep", "-xqF", publicKeyTrimmed, authorizedKeysFile], { sudo });
   if (checkKeyCmdResult.exitCode === 0) {
     info(`SSH key already exists in ${authorizedKeysFile} for user ${user}.`);
     return { success: true, changed: false };
@@ -12213,7 +12357,7 @@ async function run76(context) {
   }
   const escapedPublicKey = publicKeyTrimmed.replace(/"/g, '\\"').replace(/\$/g, "\\$").replace(/`/g, "\\`");
   const command = `echo "${escapedPublicKey}" >> "${authorizedKeysFile}"`;
-  const addKeyResult = await exec([...sudoPrefix, "sh", "-c", command], { sudo });
+  const addKeyResult = await exec(["sh", "-c", command], { sudo });
   if (!addKeyResult.success) {
     error(`Failed to append public key to ${authorizedKeysFile}: ${addKeyResult.stderr}`);
     return { success: false, changed: false };
@@ -12511,7 +12655,7 @@ async function bootstrapServiceAccount(context) {
     create_home = true,
     create_group = true,
     system = false,
-    skip_packages = false
+    skip_packages = true
   } = params;
   const skipPackages = typeof skip_packages === "string" ? skip_packages === "true" : Boolean(skip_packages);
   if (!username || !password || !public_key) {
@@ -12764,7 +12908,6 @@ __export(pkg_exports, {
   removeCp: () => remove_cp_default,
   search: () => search_default5,
   update: () => update_default5,
-  updateCp: () => update_cp_default,
   upgrade: () => upgrade_default5,
   yum: () => yum_exports
 });
@@ -13275,94 +13418,6 @@ var remove_default = task(run90, {
 // src/core/pkg/remove-cp.ts
 var remove_cp_default = remove_default;
 
-// src/core/pkg/update/arch.ts
-async function run91(context) {
-  const {
-    params: { package: pkg, sudo = true },
-    exec
-  } = context;
-  const commandParts = [sudo ? "sudo" : "", "pacman", "-Syu", "--noconfirm"];
-  if (pkg && Array.isArray(pkg) && pkg.length) {
-    commandParts.push(...pkg);
-  }
-  const { success } = await exec(commandParts.filter(Boolean).join(" "), { sudo });
-  return { success };
-}
-var update = task(run91);
-
-// src/core/pkg/update/debian.ts
-async function run92(context) {
-  const {
-    params: { package: pkg, sudo = true, fullUpgrade = false },
-    exec
-  } = context;
-  const prefix = sudo ? "sudo " : "";
-  if (!pkg || Array.isArray(pkg) && pkg.length === 0) {
-    const upgradeCmd = fullUpgrade ? "apt-get dist-upgrade -y" : "apt-get upgrade -y";
-    const { success: u1 } = await exec(`${prefix}apt-get update`, { sudo });
-    if (!u1) return { success: false };
-    const { success: success2 } = await exec(prefix + upgradeCmd, { sudo });
-    return { success: success2 };
-  }
-  const packages = Array.isArray(pkg) ? pkg : [pkg];
-  const { success } = await exec(`${prefix}apt-get install -y --only-upgrade ${packages.join(" ")}`, { sudo });
-  return { success };
-}
-var update2 = task(run92);
-
-// src/core/pkg/update/fedora.ts
-async function run93(context) {
-  const {
-    params: { package: pkg, sudo = true },
-    exec
-  } = context;
-  const prefix = sudo ? "sudo " : "";
-  if (!pkg || Array.isArray(pkg) && pkg.length === 0) {
-    const { success: success2 } = await exec(`${prefix}dnf upgrade -y`, { sudo });
-    return { success: success2 };
-  }
-  const packages = Array.isArray(pkg) ? pkg : [pkg];
-  const { success } = await exec(`${prefix}dnf upgrade -y ${packages.join(" ")}`, { sudo });
-  return { success };
-}
-var update3 = task(run93);
-
-// src/core/pkg/update/index.ts
-async function run94(context) {
-  const { params: taskParams, run: runTask, error } = context;
-  const osDetails = await runTask(os_default());
-  if (osDetails instanceof Error) {
-    error(`Failed to determine OS details: ${osDetails.message}`);
-    return { success: false };
-  }
-  const baseOs = String(osDetails?.os ?? "");
-  let result;
-  if (/arch/.test(baseOs)) {
-    result = await runTask(update(taskParams));
-  } else if (/debian|ubuntu/.test(baseOs)) {
-    result = await runTask(update2(taskParams));
-  } else if (baseOs === "fedora") {
-    result = await runTask(update3(taskParams));
-  } else {
-    error(`Unsupported OS (${baseOs}) for pkg.update`);
-    return { success: false };
-  }
-  if (result instanceof Error) {
-    error(`pkg.update failed: ${result.message}`);
-    return { success: false };
-  }
-  return result;
-}
-var update_default6 = task(run94, {
-  name: "update",
-  description: "Updates packages using the appropriate OS package manager.",
-  inputSchema: PkgUpdateParamsSchema,
-  outputSchema: PkgUpdateResultSchema
-});
-
-// src/core/pkg/update-cp.ts
-var update_cp_default = update_default6;
-
 // src/core/pkg/search.ts
 var AbstractPkgSearchParamsSchema = z.object({
   /** Search query */
@@ -13371,13 +13426,13 @@ var AbstractPkgSearchParamsSchema = z.object({
   packageManager: z.string().optional()
 });
 var AbstractPkgSearchResultSchema = AbstractPkgResultSchema;
-async function run95(context) {
+async function run91(context) {
   const result = await abstractSearch(context);
   return {
     ...result
   };
 }
-var search_default5 = task(run95, {
+var search_default5 = task(run91, {
   description: "Search for packages using auto-detected or specified package manager",
   inputSchema: AbstractPkgSearchParamsSchema,
   outputSchema: AbstractPkgSearchResultSchema
@@ -13389,10 +13444,10 @@ var AbstractPkgListParamsSchema = z.object({
   packageManager: z.string().optional()
 });
 var AbstractPkgListResultSchema = AbstractPkgResultSchema;
-async function run96(context) {
+async function run92(context) {
   return await abstractList(context);
 }
-var list_default7 = task(run96, {
+var list_default7 = task(run92, {
   description: "List installed packages using auto-detected or specified package manager",
   inputSchema: AbstractPkgListParamsSchema,
   outputSchema: AbstractPkgListResultSchema
@@ -13404,10 +13459,10 @@ var AbstractPkgCleanParamsSchema = AbstractPkgParamsSchema.pick({
   sudo: true
 });
 var AbstractPkgCleanResultSchema = AbstractPkgResultSchema;
-async function run97(context) {
+async function run93(context) {
   return await abstractClean(context);
 }
-var clean_default5 = task(run97, {
+var clean_default5 = task(run93, {
   description: "Clean package cache using auto-detected or specified package manager",
   inputSchema: AbstractPkgCleanParamsSchema,
   outputSchema: AbstractPkgCleanResultSchema
@@ -13461,7 +13516,7 @@ var K3supInstallOutputSchema = z.object({
   /** The command that would be run if --print-command was used */
   executedCommand: z.string().optional()
 });
-async function run98(context) {
+async function run94(context) {
   const { params, exec, log, error, debug } = context;
   const k3supCmd = ["k3sup", "install"];
   const addFlag = (flag, condition) => {
@@ -13519,7 +13574,7 @@ async function run98(context) {
     throw e;
   }
 }
-var k3sup_install_default = task(run98, {
+var k3sup_install_default = task(run94, {
   name: "k3sup-install",
   description: "K3s k3sup-install.",
   inputSchema: K3supInstallInputSchema,
@@ -14283,7 +14338,7 @@ var AddUsersOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run99(context) {
+async function run95(context) {
   const { params, info, warn, error, run: runTask } = context;
   const { users } = params;
   if (!users || users.length === 0) {
@@ -14316,7 +14371,7 @@ async function run99(context) {
     return { success: false, error: message };
   }
 }
-var add_users_default = task(run99, {
+var add_users_default = task(run95, {
   description: "Adds one or more users to the docker group.",
   inputSchema: AddUsersInputSchema,
   outputSchema: AddUsersOutputSchema
@@ -14336,7 +14391,7 @@ var InstallComposeOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run100(context) {
+async function run96(context) {
   const { params, info, error, run: runTask } = context;
   const version2 = params.version ?? "v2.24.5";
   const composePath = params.path ?? "/usr/local/bin/docker-compose";
@@ -14374,7 +14429,7 @@ async function run100(context) {
     return { success: false, error: message };
   }
 }
-var install_compose_default = task(run100, {
+var install_compose_default = task(run96, {
   description: "Installs the Docker Compose standalone binary.",
   inputSchema: InstallComposeInputSchema,
   outputSchema: InstallComposeOutputSchema
@@ -14397,7 +14452,7 @@ var DockerInstallOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run101(context) {
+async function run97(context) {
   const { info, run: runTask, params, error: logError2 } = context;
   const installComposePlugin = params.install_compose_plugin !== false;
   const installComposeStandalone = params.install_compose_standalone === true;
@@ -14636,7 +14691,7 @@ function sanitizeSystemctlState(value) {
   }
   return value.replace(/\u001b\][^\u001b]*\u001b\\/g, "").replace(/\u001b\[[0-9;?]*[ -/]*[@-~]/g, "").trim().toLowerCase();
 }
-var install_default6 = task(run101, {
+var install_default6 = task(run97, {
   name: "install",
   description: "Installs and configures Docker, Docker Compose, and group membership.",
   inputSchema: DockerInstallInputSchema,
@@ -14785,7 +14840,7 @@ var DockerRunContainerOutputSchema = z.object({
   containerName: z.string().optional(),
   error: z.string().optional()
 });
-async function run102(context) {
+async function run98(context) {
   const { params, exec, info, error: logError2 } = context;
   if (!params.image) {
     const message = "Docker image is required.";
@@ -14826,7 +14881,7 @@ async function run102(context) {
     containerName: params.name
   };
 }
-var run_container_default = task(run102, {
+var run_container_default = task(run98, {
   description: "Runs a Docker container and returns its output (attached).",
   inputSchema: DockerRunContainerInputSchema,
   outputSchema: DockerRunContainerOutputSchema
@@ -14843,7 +14898,7 @@ var DockerRunDetachedOutputSchema = z.object({
   containerName: z.string().optional(),
   error: z.string().optional()
 });
-async function run103(context) {
+async function run99(context) {
   const { params, exec, info, error: logError2 } = context;
   if (!params.image) {
     const message = "Docker image is required.";
@@ -14883,7 +14938,7 @@ async function run103(context) {
     containerName: params.name
   };
 }
-var run_container_detached_default = task(run103, {
+var run_container_detached_default = task(run99, {
   description: "Runs a Docker container in detached mode and returns its metadata.",
   inputSchema: DockerRunDetachedInputSchema,
   outputSchema: DockerRunDetachedOutputSchema
@@ -14942,7 +14997,7 @@ var ProcessListOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run104(context) {
+async function run100(context) {
   const { params, exec, debug, error } = context;
   const { user, command, limit, sort, reverse } = params;
   try {
@@ -15028,7 +15083,7 @@ async function run104(context) {
     return { success: false, error: errorMsg };
   }
 }
-var list_default8 = task(run104, {
+var list_default8 = task(run100, {
   name: "list",
   description: "Lists processes on the system.",
   inputSchema: ProcessListInputSchema,
@@ -15074,7 +15129,7 @@ var ProcessSearchOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run105(context) {
+async function run101(context) {
   const { params, exec, debug, error } = context;
   const { name, user, pid, ppid, args, state, regex = false, ignoreCase = false, limit } = params;
   debug(`Searching processes with params: ${JSON.stringify(params)}`);
@@ -15188,7 +15243,7 @@ function filterProcesses(processes, filters) {
     return true;
   });
 }
-var search_default6 = task(run105, {
+var search_default6 = task(run101, {
   name: "search",
   description: "Search for processes matching specified criteria.",
   inputSchema: ProcessSearchInputSchema,
@@ -15216,7 +15271,7 @@ var ProcessKillOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run106(context) {
+async function run102(context) {
   const { params, exec, debug, error } = context;
   const { pid, user, command, signal = "TERM", force = false, sudo = false } = params;
   try {
@@ -15304,7 +15359,7 @@ async function run106(context) {
     return { success: false, error: errorMsg };
   }
 }
-var kill_default = task(run106, {
+var kill_default = task(run102, {
   name: "kill",
   description: "Kills processes matching specified criteria. Requires at least one filtering parameter (pid, user, or command) to prevent accidental killing of all processes.",
   inputSchema: ProcessKillInputSchema,
@@ -15325,7 +15380,7 @@ var ProcessSignalOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run107(context) {
+async function run103(context) {
   const { params, exec, debug, error } = context;
   const { pid, signal = "TERM", sudo = false } = params;
   if (!pid || pid <= 0) {
@@ -15348,7 +15403,7 @@ async function run107(context) {
     return { success: false, error: errorMsg };
   }
 }
-var signal_default = task(run107, {
+var signal_default = task(run103, {
   name: "signal",
   description: "Sends a signal to a process.",
   inputSchema: ProcessSignalInputSchema,
@@ -15384,7 +15439,7 @@ var ProcessInfoOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run108(context) {
+async function run104(context) {
   const { params, exec, debug, error } = context;
   const { pid } = params;
   if (!pid || pid <= 0) {
@@ -15460,7 +15515,7 @@ async function run108(context) {
     return { success: false, error: errorMsg };
   }
 }
-var info_default7 = task(run108, {
+var info_default7 = task(run104, {
   name: "info",
   description: "Gets detailed information about a specific process.",
   inputSchema: ProcessInfoInputSchema,
@@ -15524,7 +15579,7 @@ var ProcessTopOutputSchema = z.object({
     timestamp: z.string()
   })
 );
-async function run109(context) {
+async function run105(context) {
   const { params, exec, debug, error } = context;
   const {
     limit = 10,
@@ -15686,7 +15741,7 @@ function sortProcesses(processes, sort) {
     }
   });
 }
-var top_default = task(run109, {
+var top_default = task(run105, {
   name: "top",
   description: "Get top processes with system information.",
   inputSchema: ProcessTopInputSchema,
@@ -15750,7 +15805,7 @@ var ProcessStatsOutputSchema = z.object({
     timestamp: z.string()
   })
 );
-async function run110(context) {
+async function run106(context) {
   const { params, exec, debug, error } = context;
   const { includeUsers = true, includeStates = true, includeCommands = false, commandLimit = 10 } = params;
   debug(`Getting process statistics with params: ${JSON.stringify(params)}`);
@@ -15928,7 +15983,7 @@ function calculateCommandStats(processes, limit) {
   }
   return Array.from(commandMap.values()).sort((a, b) => b.cpu - a.cpu).slice(0, limit);
 }
-var stats_default = task(run110, {
+var stats_default = task(run106, {
   name: "stats",
   description: "Get system-wide process statistics.",
   inputSchema: ProcessStatsInputSchema,
@@ -15963,7 +16018,7 @@ var ProcessChildrenOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run111(context) {
+async function run107(context) {
   const { params, exec, debug, error } = context;
   const { pid, recursive = false, maxDepth } = params;
   debug(`Getting children for process ${pid} with params: ${JSON.stringify(params)}`);
@@ -16048,7 +16103,7 @@ async function getDescendants(exec, parentPid, currentDepth, maxDepth) {
   }
   return allDescendants;
 }
-var children_default = task(run111, {
+var children_default = task(run107, {
   name: "children",
   description: "Get child processes of a given PID.",
   inputSchema: ProcessChildrenInputSchema,
@@ -16081,7 +16136,7 @@ var RebootOutputSchema = z.object({
   error: z.string().optional(),
   status: z.string()
 });
-async function run112(context) {
+async function run108(context) {
   const { params, info, warn, exec } = context;
   const time = params.time || "now";
   const sudo = params.sudo ?? true;
@@ -16114,7 +16169,7 @@ stderr: ${stderr}`
     };
   }
 }
-var reboot_default = task(run112, {
+var reboot_default = task(run108, {
   description: "Reboots a system",
   inputSchema: RebootInputSchema,
   outputSchema: RebootOutputSchema
@@ -16134,7 +16189,7 @@ var ShutdownOutputSchema = z.object({
   error: z.string().optional(),
   status: z.string()
 });
-async function run113(context) {
+async function run109(context) {
   const { params, info, warn, exec } = context;
   const time = params.time || "now";
   const sudo = params.sudo ?? true;
@@ -16166,7 +16221,7 @@ stderr: ${stderr}`
     };
   }
 }
-var shutdown_default = task(run113, {
+var shutdown_default = task(run109, {
   description: "Shuts down a system",
   inputSchema: ShutdownInputSchema,
   outputSchema: ShutdownOutputSchema
@@ -16187,7 +16242,7 @@ var RebootIfNeededOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run114(context) {
+async function run110(context) {
   const { params, run: runTask, exec, error, info, warn } = context;
   const delayInSeconds = Math.max(1, params.delay ?? 1);
   const message = params.message ?? "Reboot is required. Initiating reboot sequence.";
@@ -16217,7 +16272,7 @@ ${stderr}`;
   }
   return { rebooting: true, success: true };
 }
-var reboot_if_needed_default = task(run114, {
+var reboot_if_needed_default = task(run110, {
   name: "reboot_if_needed",
   description: "Reboot if needed.",
   inputSchema: RebootIfNeededInputSchema,
@@ -16234,7 +16289,7 @@ var SystemUptimeOutputSchema = z.object({
   days: z.number().optional(),
   error: z.string().optional()
 });
-async function run115(context) {
+async function run111(context) {
   const { params, exec, error } = context;
   const sudo = params.sudo ?? false;
   const { success, stdout, stderr } = await exec(["cat", "/proc/uptime"], { sudo });
@@ -16253,7 +16308,7 @@ async function run115(context) {
     days: Math.floor(uptimeSeconds / 86400)
   };
 }
-var uptime_default = task(run115, {
+var uptime_default = task(run111, {
   name: "uptime",
   description: "Report system uptime.",
   inputSchema: SystemUptimeInputSchema,
@@ -16278,7 +16333,7 @@ var SystemDatetimeOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run116(context) {
+async function run112(context) {
   const { params, exec } = context;
   const sudo = params.sudo ?? false;
   const isoResult = await exec(["date", "--iso-8601=seconds"], { sudo }).catch((error) => error);
@@ -16299,7 +16354,7 @@ async function run116(context) {
     timezone
   };
 }
-var datetime_default = task(run116, {
+var datetime_default = task(run112, {
   name: "datetime",
   description: "Report system time and timezone.",
   inputSchema: SystemDatetimeInputSchema,
@@ -16326,7 +16381,7 @@ var SystemHardwareOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run117(context) {
+async function run113(context) {
   const { params, exec } = context;
   const sudo = params.sudo ?? false;
   const archResult = await exec(["uname", "-m"], { sudo }).catch((error) => error);
@@ -16353,7 +16408,7 @@ async function run117(context) {
     memTotalKb: Number.isFinite(memTotalKb ?? NaN) ? memTotalKb : void 0
   };
 }
-var hardware_default = task(run117, {
+var hardware_default = task(run113, {
   name: "hardware",
   description: "Report CPU and memory details.",
   inputSchema: SystemHardwareInputSchema,
@@ -16385,7 +16440,7 @@ var SystemdDisableOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run118(context) {
+async function run114(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16408,7 +16463,7 @@ async function run118(context) {
     };
   }
 }
-var disable_default = task(run118, {
+var disable_default = task(run114, {
   name: "disable",
   description: "Systemd disable.",
   inputSchema: SystemdDisableInputSchema,
@@ -16428,7 +16483,7 @@ var SystemdEnableOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run119(context) {
+async function run115(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16451,7 +16506,7 @@ async function run119(context) {
     };
   }
 }
-var enable_default = task(run119, {
+var enable_default = task(run115, {
   name: "enable",
   description: "Systemd enable.",
   inputSchema: SystemdEnableInputSchema,
@@ -16471,7 +16526,7 @@ var SystemdRestartOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run120(context) {
+async function run116(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16498,7 +16553,7 @@ async function run120(context) {
     };
   }
 }
-var restart_default = task(run120, {
+var restart_default = task(run116, {
   name: "restart",
   description: "Systemd restart.",
   inputSchema: SystemdRestartInputSchema,
@@ -16518,7 +16573,7 @@ var SystemdStartOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run121(context) {
+async function run117(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16541,7 +16596,7 @@ async function run121(context) {
     };
   }
 }
-var start_default = task(run121, {
+var start_default = task(run117, {
   name: "start",
   description: "Systemd start.",
   inputSchema: SystemdStartInputSchema,
@@ -16561,7 +16616,7 @@ var SystemdStopOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run122(context) {
+async function run118(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16588,7 +16643,7 @@ async function run122(context) {
     };
   }
 }
-var stop_default = task(run122, {
+var stop_default = task(run118, {
   name: "stop",
   description: "Systemd stop.",
   inputSchema: SystemdStopInputSchema,
@@ -16608,7 +16663,7 @@ var SystemdReloadOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run123(context) {
+async function run119(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16629,7 +16684,7 @@ async function run123(context) {
     };
   }
 }
-var reload_default = task(run123, {
+var reload_default = task(run119, {
   name: "reload",
   description: "Reloads a systemd service (e.g., re-reads configuration without full restart).",
   inputSchema: SystemdReloadInputSchema,
@@ -16651,7 +16706,7 @@ var SystemdStatusOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run124(context) {
+async function run120(context) {
   const { params, exec, error } = context;
   const { service, sudo = false } = params;
   if (!service) {
@@ -16674,7 +16729,7 @@ async function run124(context) {
     };
   }
 }
-var status_default = task(run124, {
+var status_default = task(run120, {
   name: "status",
   description: "Checks systemd service status.",
   inputSchema: SystemdStatusInputSchema,
@@ -16704,7 +16759,7 @@ var TemplateWriteOutputSchema = z.object({
   path: z.string()
 });
 async function runFn3(context) {
-  const { params, warn, error, debug, run: run253, file, exec } = context;
+  const { params, warn, error, debug, run: run249, file, exec } = context;
   const { template, template_file, variables, to, mode, owner, group, sudo } = params;
   let templateContent = template;
   if (template && template_file) {
@@ -16759,7 +16814,7 @@ EOF`;
     debug(`Setting mode ${mode} for ${outputPath}`);
     try {
       const chmodParams = { path: outputPath, mode, sudo };
-      const chmodResult = await run253(chmod_default(chmodParams));
+      const chmodResult = await run249(chmod_default(chmodParams));
       if (chmodResult instanceof Error) {
         error(`Error setting mode for ${outputPath}: ${chmodResult.message}`);
         overallSuccess = false;
@@ -16785,7 +16840,7 @@ EOF`;
       if (group) {
         chownTaskParams.group = group;
       }
-      const chownResult = await run253(chown_default(chownTaskParams));
+      const chownResult = await run249(chown_default(chownTaskParams));
       if (chownResult instanceof Error) {
         error(`Error setting owner/group for ${outputPath}: ${chownResult.message}`);
         overallSuccess = false;
@@ -16845,7 +16900,7 @@ var UfwAllowOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run125(context) {
+async function run121(context) {
   const { params, exec, info } = context;
   const { port, proto = "tcp", from } = params;
   if (!port) {
@@ -16876,7 +16931,7 @@ async function run125(context) {
     return { success: false, error };
   }
 }
-var allow_default = task(run125, {
+var allow_default = task(run121, {
   description: "Allows a port through UFW firewall.",
   inputSchema: UfwAllowInputSchema,
   outputSchema: UfwAllowOutputSchema
@@ -16897,7 +16952,7 @@ var UfwDenyOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run126(context) {
+async function run122(context) {
   const { params, exec, error, info } = context;
   const { port, proto = "tcp", from } = params;
   if (!port) {
@@ -16928,7 +16983,7 @@ async function run126(context) {
     };
   }
 }
-var deny_default = task(run126, {
+var deny_default = task(run122, {
   name: "deny",
   description: "Ufw deny.",
   inputSchema: UfwDenyInputSchema,
@@ -16947,7 +17002,7 @@ var UfwDeleteOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run127(context) {
+async function run123(context) {
   const { params, exec, error } = context;
   const { rule_number } = params;
   if (!rule_number || rule_number <= 0) {
@@ -16969,7 +17024,7 @@ async function run127(context) {
     };
   }
 }
-var delete_default4 = task(run127, {
+var delete_default4 = task(run123, {
   name: "delete",
   description: "Ufw delete.",
   inputSchema: UfwDeleteInputSchema,
@@ -16982,7 +17037,7 @@ var UfwDisableOutputSchema = z.object({
   success: z.boolean(),
   error: z.string().optional()
 });
-async function run128(context) {
+async function run124(context) {
   const { exec, error } = context;
   try {
     const result = await exec(["ufw", "disable"], { sudo: true });
@@ -16998,7 +17053,7 @@ async function run128(context) {
     return { success: false, error: errorMsg };
   }
 }
-var disable_default2 = task(run128, {
+var disable_default2 = task(run124, {
   description: "Disables UFW firewall.",
   inputSchema: UfwDisableInputSchema,
   outputSchema: UfwDisableOutputSchema
@@ -17010,7 +17065,7 @@ var UfwEnableOutputSchema = z.object({
   success: z.boolean(),
   error: z.string().optional()
 });
-async function run129(context) {
+async function run125(context) {
   const { exec, error } = context;
   try {
     const result = await exec(["ufw", "--force", "enable"], { sudo: true });
@@ -17026,7 +17081,7 @@ async function run129(context) {
     return { success: false, error: errorMsg };
   }
 }
-var enable_default2 = task(run129, {
+var enable_default2 = task(run125, {
   description: "Enables UFW firewall.",
   inputSchema: UfwEnableInputSchema,
   outputSchema: UfwEnableOutputSchema
@@ -17042,7 +17097,7 @@ var UfwInstallOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run130(context) {
+async function run126(context) {
   const { run: runTask, error } = context;
   try {
     const installResult = await runTask(install_default5({ package: "ufw", sudo: true }));
@@ -17061,7 +17116,7 @@ async function run130(context) {
     };
   }
 }
-var install_default7 = task(run130, {
+var install_default7 = task(run126, {
   name: "install",
   description: "Ufw install.",
   inputSchema: UfwInstallInputSchema,
@@ -17081,7 +17136,7 @@ var UfwLoggingOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run131(context) {
+async function run127(context) {
   const { params, exec, log } = context;
   const level = params.level || "on";
   try {
@@ -17098,7 +17153,7 @@ async function run131(context) {
     return { success: false, error };
   }
 }
-var logging_default = task(run131, {
+var logging_default = task(run127, {
   description: "Configures UFW logging",
   inputSchema: UfwLoggingInputSchema,
   outputSchema: UfwLoggingOutputSchema
@@ -17114,7 +17169,7 @@ var UfwReloadOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run132(context) {
+async function run128(context) {
   const { exec, error } = context;
   try {
     const { success } = await exec(["sudo", "ufw", "reload"], { sudo: true });
@@ -17126,7 +17181,7 @@ async function run132(context) {
     };
   }
 }
-var reload_default2 = task(run132, {
+var reload_default2 = task(run128, {
   name: "reload",
   description: "Ufw reload.",
   inputSchema: UfwReloadInputSchema,
@@ -17144,7 +17199,7 @@ var UfwResetOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run133(context) {
+async function run129(context) {
   const { exec, error, info } = context;
   try {
     const command = ["ufw", "--force", "reset"];
@@ -17165,7 +17220,7 @@ async function run133(context) {
     return { success: false, error: errorMsg };
   }
 }
-var reset_default = task(run133, {
+var reset_default = task(run129, {
   name: "reset",
   description: "Resets UFW firewall to default state.",
   inputSchema: UfwResetInputSchema,
@@ -17188,7 +17243,7 @@ var UfwStatusOutputSchema = z.object({
   rules: z.array(UfwRuleSchema).optional(),
   error: z.string().optional()
 });
-async function run134(context) {
+async function run130(context) {
   const { exec, error } = context;
   try {
     const result = await exec(["ufw", "status", "numbered"], { sudo: true });
@@ -17243,7 +17298,7 @@ async function run134(context) {
     return { success: false, error: errorMsg };
   }
 }
-var status_default2 = task(run134, {
+var status_default2 = task(run130, {
   description: "Gets UFW firewall status with numbered rules.",
   inputSchema: UfwStatusInputSchema,
   outputSchema: UfwStatusOutputSchema
@@ -17282,7 +17337,7 @@ var AddGroupsOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run135(context) {
+async function run131(context) {
   const { params, exec } = context;
   const { user, groups, sudo = true } = params;
   const normalizedGroups = Array.isArray(groups) ? groups : typeof groups === "string" ? groups.split(",").map((group) => group.trim()).filter(Boolean) : [];
@@ -17297,7 +17352,7 @@ async function run135(context) {
     error: success ? void 0 : stderr || stdout
   };
 }
-var add_groups_default = task(run135, {
+var add_groups_default = task(run131, {
   name: "add_groups",
   description: "User add groups.",
   inputSchema: AddGroupsInputSchema,
@@ -17317,7 +17372,7 @@ var GetGidOutputSchema = z.object({
     gid: z.string().optional()
   })
 );
-async function run136(context) {
+async function run132(context) {
   const { params, exec } = context;
   const { user } = params;
   const command = ["id", "-g", user].filter(Boolean).join(" ");
@@ -17327,7 +17382,7 @@ async function run136(context) {
     gid: gid.trim()
   };
 }
-var get_gid_default = task(run136, {
+var get_gid_default = task(run132, {
   name: "get_gid",
   description: "User get gid.",
   inputSchema: GetGidInputSchema,
@@ -17347,7 +17402,7 @@ var GetGroupsOutputSchema = z.object({
     groups: z.array(z.string()).optional()
   })
 );
-async function run137(context) {
+async function run133(context) {
   const { params, exec } = context;
   const { user } = params;
   const command = ["groups", user].filter(Boolean).join(" ");
@@ -17364,7 +17419,7 @@ async function run137(context) {
     groups
   };
 }
-var get_groups_default = task(run137, {
+var get_groups_default = task(run133, {
   name: "get_groups",
   description: "User get groups.",
   inputSchema: GetGroupsInputSchema,
@@ -17384,7 +17439,7 @@ var GetUidOutputSchema = z.object({
     uid: z.string().optional()
   })
 );
-async function run138(context) {
+async function run134(context) {
   const { params, exec } = context;
   const { user } = params;
   const command = ["id", "-u", user].filter(Boolean).join(" ");
@@ -17394,7 +17449,7 @@ async function run138(context) {
     uid: uid.trim()
   };
 }
-var get_uid_default = task(run138, {
+var get_uid_default = task(run134, {
   name: "get_uid",
   description: "User get uid.",
   inputSchema: GetUidInputSchema,
@@ -17415,7 +17470,7 @@ var SetUserGroupsOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run139(context) {
+async function run135(context) {
   const { params, exec } = context;
   const { user, groups, sudo = true } = params;
   const normalizedGroups = Array.isArray(groups) ? groups : typeof groups === "string" ? groups.split(",").map((group) => group.trim()).filter(Boolean) : [];
@@ -17430,7 +17485,7 @@ async function run139(context) {
     error: success ? void 0 : stderr || stdout
   };
 }
-var set_groups_default = task(run139, {
+var set_groups_default = task(run135, {
   name: "set_groups",
   description: "User set groups.",
   inputSchema: SetUserGroupsInputSchema,
@@ -17451,7 +17506,7 @@ var SetUserShellOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run140(context) {
+async function run136(context) {
   const { params, exec } = context;
   const { user, shell, sudo = true } = params;
   const command = [sudo ? "sudo" : "", "usermod", "-s", shell, user].filter(Boolean).join(" ");
@@ -17461,7 +17516,7 @@ async function run140(context) {
     error: success ? void 0 : stderr || stdout
   };
 }
-var set_shell_default = task(run140, {
+var set_shell_default = task(run136, {
   name: "set_shell",
   description: "User set shell.",
   inputSchema: SetUserShellInputSchema,
@@ -17480,8 +17535,8 @@ var UserDeleteOutputSchema = z.object({
   success: z.boolean(),
   error: z.string().optional()
 });
-async function run141(context) {
-  const { params, debug, exec, run: run253, error } = context;
+async function run137(context) {
+  const { params, debug, exec, run: run249, error } = context;
   const { user, remove: remove4 = false, sudo = true } = params;
   if (!user) {
     error('Required parameter "user" is missing');
@@ -17491,7 +17546,7 @@ async function run141(context) {
     };
   }
   try {
-    const { exists: userExists } = await run253(exists_default4({ user }));
+    const { exists: userExists } = await run249(exists_default4({ user }));
     if (!userExists) {
       debug(`User '${user}' does not exist, considering task successful (idempotent).`);
       return { success: true };
@@ -17519,7 +17574,7 @@ async function run141(context) {
     };
   }
 }
-var delete_default5 = task(run141, {
+var delete_default5 = task(run137, {
   description: "Deletes a user from the system idempotently",
   inputSchema: UserDeleteInputSchema,
   outputSchema: UserDeleteOutputSchema
@@ -17549,7 +17604,7 @@ var ModifyUserOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run142(context) {
+async function run138(context) {
   const { params, exec, run: runTask, error } = context;
   const {
     user,
@@ -17608,7 +17663,7 @@ async function run142(context) {
     };
   }
 }
-var modify_default2 = task(run142, {
+var modify_default2 = task(run138, {
   name: "modify",
   description: "Modify an existing user account.",
   inputSchema: ModifyUserInputSchema,
@@ -17893,7 +17948,7 @@ var XcpngAttachVdiResultSchema = z.object({
   plugged: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run143(context) {
+async function run139(context) {
   const { params, error, debug } = context;
   const { vm_uuid, vdi_uuid, device = "0", mode = "RW", bootable: rawBootable = false } = params;
   if (!vm_uuid) {
@@ -17952,7 +18007,7 @@ async function run143(context) {
     plugged: true
   };
 }
-var attach_vdi_default = task(run143, {
+var attach_vdi_default = task(run139, {
   inputSchema: XcpngAttachVdiParamsSchema,
   outputSchema: XcpngAttachVdiResultSchema,
   description: "Attaches an existing virtual disk image to a VM and plugs it into the guest."
@@ -18016,7 +18071,7 @@ var XcpngCreateVdiResultSchema = z.object({
   command: z.string().optional(),
   error: z.string().optional()
 });
-async function run144(context) {
+async function run140(context) {
   const { params, error } = context;
   const { name_label, sr_uuid, size_bytes, size_mb, size_gb, description, type = "user", shareable = false } = params;
   if (!name_label) {
@@ -18069,7 +18124,7 @@ async function run144(context) {
     command: result.command
   };
 }
-var create_vdi_default = task(run144, {
+var create_vdi_default = task(run140, {
   inputSchema: XcpngCreateVdiParamsSchema,
   outputSchema: XcpngCreateVdiResultSchema,
   description: "Creates a new virtual disk image on the specified XCP-ng storage repository."
@@ -18084,7 +18139,7 @@ var XcpngListSrParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run145(context) {
+async function run141(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "sr-param-list", filters);
   if (!result.success) {
@@ -18098,7 +18153,7 @@ async function run145(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_sr_params_default = task(run145, {
+var list_sr_params_default = task(run141, {
   inputSchema: XcpngListSrParamsParamsSchema,
   outputSchema: XcpngListSrParamsResultSchema,
   description: "Lists parameters for storage repositories (SRs) on an XCP-ng host."
@@ -18113,7 +18168,7 @@ var XcpngListStorageRepositoriesResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run146(context) {
+async function run142(context) {
   const { params } = context;
   const filters = normalizeFilterArgs(params?.filters);
   const result = await runXeCommand(context, "sr-list", filters);
@@ -18162,7 +18217,7 @@ async function run146(context) {
     items: enrichedItems
   };
 }
-var list_storage_repositories_default = task(run146, {
+var list_storage_repositories_default = task(run142, {
   inputSchema: XcpngListStorageRepositoriesParamsSchema,
   outputSchema: XcpngListStorageRepositoriesResultSchema,
   description: "Lists storage repositories on an XCP-ng host."
@@ -18185,7 +18240,7 @@ var XcpngFindStorageRepositoryResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run147(context) {
+async function run143(context) {
   const params = context.params ?? {};
   const {
     name_label: nameLabel,
@@ -18305,7 +18360,7 @@ async function runListStorageRepositories(context, params) {
     })
   );
 }
-var find_storage_repository_default = task(run147, {
+var find_storage_repository_default = task(run143, {
   inputSchema: XcpngFindStorageRepositoryParamsSchema,
   outputSchema: XcpngFindStorageRepositoryResultSchema,
   description: "Finds a single storage repository on an XCP-ng host, optionally allowing multiple matches."
@@ -18338,7 +18393,7 @@ var XcpngAddDiskResultSchema = z.object({
   plugged: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run148(context) {
+async function run144(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuid,
@@ -18471,7 +18526,7 @@ async function destroyVdi(context, vdiUuid, appliedCommands) {
     context.warn(`Failed to clean up VDI ${vdiUuid}: ${xeErrorMessage(result, "unknown error")}`);
   }
 }
-var add_disk_default = task(run148, {
+var add_disk_default = task(run144, {
   inputSchema: XcpngAddDiskParamsSchema,
   outputSchema: XcpngAddDiskResultSchema,
   description: "Creates a VDI and attaches it to a VM on XCP-ng."
@@ -18490,7 +18545,7 @@ var XcpngAttachIsoResultSchema = z.object({
   plugged: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run149(context) {
+async function run145(context) {
   const { params, error, debug } = context;
   const { vm_uuid, iso_vdi_uuid, device, eject_before_insert = true } = params;
   if (!vm_uuid) {
@@ -18583,7 +18638,7 @@ async function run149(context) {
     plugged
   };
 }
-var attach_iso_default = task(run149, {
+var attach_iso_default = task(run145, {
   inputSchema: XcpngAttachIsoParamsSchema,
   outputSchema: XcpngAttachIsoResultSchema,
   description: "Attaches an ISO image to a VM by invoking xe vm-cd-insert, ejecting existing media if requested."
@@ -18604,7 +18659,7 @@ var XcpngAttachNetworkInterfaceResultSchema = z.object({
   plugged: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run150(context) {
+async function run146(context) {
   const { params, error, debug } = context;
   const { vm_uuid, network_uuid, device = "0", mac_address, mtu } = params;
   if (!vm_uuid) {
@@ -18669,7 +18724,7 @@ async function run150(context) {
     plugged: true
   };
 }
-var attach_network_interface_default = task(run150, {
+var attach_network_interface_default = task(run146, {
   inputSchema: XcpngAttachNetworkInterfaceParamsSchema,
   outputSchema: XcpngAttachNetworkInterfaceResultSchema,
   description: "Creates and plugs a virtual network interface for a VM on XCP-ng."
@@ -18684,7 +18739,7 @@ var XcpngListTemplateParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run151(context) {
+async function run147(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "template-param-list", filters);
   if (!result.success) {
@@ -18698,7 +18753,7 @@ async function run151(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_template_params_default = task(run151, {
+var list_template_params_default = task(run147, {
   inputSchema: XcpngListTemplateParamsParamsSchema,
   outputSchema: XcpngListTemplateParamsResultSchema,
   description: "Lists parameters for templates on an XCP-ng host."
@@ -18713,7 +18768,7 @@ var XcpngListTemplatesResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run152(context) {
+async function run148(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "template-list", filters);
   if (!result.success) {
@@ -18763,7 +18818,7 @@ async function run152(context) {
     items: enriched
   };
 }
-var list_templates_default = task(run152, {
+var list_templates_default = task(run148, {
   inputSchema: XcpngListTemplatesParamsSchema,
   outputSchema: XcpngListTemplatesResultSchema,
   description: "Lists VM templates available on the XCP-ng host."
@@ -18784,7 +18839,7 @@ var XcpngFindTemplateResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run153(context) {
+async function run149(context) {
   const params = context.params ?? {};
   const {
     name_label: nameLabel,
@@ -18882,7 +18937,7 @@ async function runListTemplates(context, params) {
     })
   );
 }
-var find_template_default = task(run153, {
+var find_template_default = task(run149, {
   inputSchema: XcpngFindTemplateParamsSchema,
   outputSchema: XcpngFindTemplateResultSchema,
   description: "Finds a single template on an XCP-ng host, optionally allowing multiple matches."
@@ -18907,7 +18962,7 @@ var XcpngCloneTemplateResultSchema = z.object({
   alreadyExists: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run154(context) {
+async function run150(context) {
   const { params, error } = context;
   const {
     source_template_uuid: sourceTemplateUuidParam,
@@ -19027,7 +19082,7 @@ async function run154(context) {
     appliedCommands
   };
 }
-var clone_template_default = task(run154, {
+var clone_template_default = task(run150, {
   inputSchema: XcpngCloneTemplateParamsSchema,
   outputSchema: XcpngCloneTemplateResultSchema,
   description: "Clones an existing XCP-ng template to a new template name."
@@ -19042,7 +19097,7 @@ var XcpngListHostsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run155(context) {
+async function run151(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "host-list", filters);
   if (!result.success) {
@@ -19056,7 +19111,7 @@ async function run155(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_hosts_default = task(run155, {
+var list_hosts_default = task(run151, {
   inputSchema: XcpngListHostsParamsSchema,
   outputSchema: XcpngListHostsResultSchema,
   description: "Lists hosts in an XCP-ng pool, returning parsed xe host-list output."
@@ -19077,7 +19132,7 @@ var XcpngFindHostResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run156(context) {
+async function run152(context) {
   const params = context.params ?? {};
   const {
     name_label: nameLabel,
@@ -19177,7 +19232,7 @@ async function runListHosts(context, params) {
     })
   );
 }
-var find_host_default = task(run156, {
+var find_host_default = task(run152, {
   inputSchema: XcpngFindHostParamsSchema,
   outputSchema: XcpngFindHostResultSchema,
   description: "Finds a single host on an XCP-ng pool, optionally allowing multiple matches."
@@ -19192,7 +19247,7 @@ var XcpngListNetworkParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run157(context) {
+async function run153(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "network-param-list", filters);
   if (!result.success) {
@@ -19206,7 +19261,7 @@ async function run157(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_network_params_default = task(run157, {
+var list_network_params_default = task(run153, {
   inputSchema: XcpngListNetworkParamsParamsSchema,
   outputSchema: XcpngListNetworkParamsResultSchema,
   description: "Lists parameters for networks on an XCP-ng host."
@@ -19221,7 +19276,7 @@ var XcpngListNetworksResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run158(context) {
+async function run154(context) {
   const { params } = context;
   const filters = normalizeFilterArgs(params?.filters);
   const result = await runXeCommand(context, "network-list", filters);
@@ -19270,7 +19325,7 @@ async function run158(context) {
     items: enrichedItems
   };
 }
-var list_networks_default = task(run158, {
+var list_networks_default = task(run154, {
   inputSchema: XcpngListNetworksParamsSchema,
   outputSchema: XcpngListNetworksResultSchema,
   description: "Lists networks on an XCP-ng host."
@@ -19291,7 +19346,7 @@ var XcpngFindNetworkResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run159(context) {
+async function run155(context) {
   const params = context.params ?? {};
   const {
     name_label: nameLabel,
@@ -19382,7 +19437,7 @@ function buildMultipleMessage4(nameLabel, uuid, count) {
   const detail = identifiers.length > 0 ? identifiers.join(", ") : "specified criteria";
   return `Multiple networks (${count}) matched ${detail}; refine filters or set allow_multiple:true.`;
 }
-var find_network_default = task(run159, {
+var find_network_default = task(run155, {
   inputSchema: XcpngFindNetworkParamsSchema,
   outputSchema: XcpngFindNetworkResultSchema,
   description: "Finds a single network on an XCP-ng host, optionally allowing multiple matches."
@@ -19409,7 +19464,7 @@ var XcpngCreateBondResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run160(context) {
+async function run156(context) {
   const { params, error } = context;
   const {
     host_uuid: hostUuidParam,
@@ -19531,7 +19586,7 @@ async function run160(context) {
     appliedCommands
   };
 }
-var create_bond_default = task(run160, {
+var create_bond_default = task(run156, {
   inputSchema: XcpngCreateBondParamsSchema,
   outputSchema: XcpngCreateBondResultSchema,
   description: "Creates a bonded interface on a host, wrapping xe bond-create."
@@ -19546,7 +19601,7 @@ var XcpngListPbdParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run161(context) {
+async function run157(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "pbd-param-list", filters);
   if (!result.success) {
@@ -19560,7 +19615,7 @@ async function run161(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_pbd_params_default = task(run161, {
+var list_pbd_params_default = task(run157, {
   inputSchema: XcpngListPbdParamsParamsSchema,
   outputSchema: XcpngListPbdParamsResultSchema,
   description: "Lists parameters for PBDs on an XCP-ng host."
@@ -19575,7 +19630,7 @@ var XcpngListPbdsResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run162(context) {
+async function run158(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "pbd-list", filters);
   if (!result.success) {
@@ -19623,7 +19678,7 @@ async function run162(context) {
     items: enrichedItems
   };
 }
-var list_pbds_default = task(run162, {
+var list_pbds_default = task(run158, {
   inputSchema: XcpngListPbdsParamsSchema,
   outputSchema: XcpngListPbdsResultSchema,
   description: "Lists storage bindings (PBDs) between hosts and storage repositories."
@@ -19645,7 +19700,7 @@ var XcpngFindPbdResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run163(context) {
+async function run159(context) {
   const params = context.params ?? {};
   const {
     uuid,
@@ -19758,7 +19813,7 @@ async function runListPbds(context, params) {
     })
   );
 }
-var find_pbd_default = task(run163, {
+var find_pbd_default = task(run159, {
   inputSchema: XcpngFindPbdParamsSchema,
   outputSchema: XcpngFindPbdResultSchema,
   description: "Finds a single PBD (host \u2194 SR binding), optionally allowing multiple matches."
@@ -19783,7 +19838,7 @@ var XcpngCreatePbdResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run164(context) {
+async function run160(context) {
   const { params, error } = context;
   const {
     host_uuid: hostUuidParam,
@@ -19900,7 +19955,7 @@ async function run164(context) {
     appliedCommands
   };
 }
-var create_pbd_default = task(run164, {
+var create_pbd_default = task(run160, {
   inputSchema: XcpngCreatePbdParamsSchema,
   outputSchema: XcpngCreatePbdResultSchema,
   description: "Creates a host \u2194 storage repository binding (PBD)."
@@ -19915,7 +19970,7 @@ var XcpngListVmParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run165(context) {
+async function run161(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "vm-param-list", filters);
   if (!result.success) {
@@ -19929,7 +19984,7 @@ async function run165(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_vm_params_default = task(run165, {
+var list_vm_params_default = task(run161, {
   inputSchema: XcpngListVmParamsParamsSchema,
   outputSchema: XcpngListVmParamsResultSchema,
   description: "Lists virtual machines (VMs) on an XCP-ng host."
@@ -19945,7 +20000,7 @@ var XcpngListVmsResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run166(context) {
+async function run162(context) {
   const { params } = context;
   const filters = normalizeFilterArgs(params?.filters);
   const paramsArg = buildParamsArg(params?.params);
@@ -19998,7 +20053,7 @@ async function run166(context) {
     items: enrichedItems
   };
 }
-var list_vms_default = task(run166, {
+var list_vms_default = task(run162, {
   inputSchema: XcpngListVmsParamsSchema,
   outputSchema: XcpngListVmsResultSchema,
   description: "Lists VMs on an XCP-ng host and returns structured metadata."
@@ -20049,7 +20104,7 @@ var XcpngFindVmResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run167(context) {
+async function run163(context) {
   const params = context.params ?? {};
   const {
     name_label: nameLabel,
@@ -20177,7 +20232,7 @@ async function runListVms(context, params) {
     })
   );
 }
-var find_vm_default = task(run167, {
+var find_vm_default = task(run163, {
   inputSchema: XcpngFindVmParamsSchema,
   outputSchema: XcpngFindVmResultSchema,
   description: "Finds a single VM on an XCP-ng host, optionally allowing multiple matches."
@@ -20282,7 +20337,7 @@ var XcpngCreateTemplateResultSchema = z.object({
   powerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run168(context) {
+async function run164(context) {
   const { params, error } = context;
   const {
     source_vm_uuid: sourceVmUuidParam,
@@ -20390,7 +20445,7 @@ async function run168(context) {
     waitAttempts: ensureHalted.attempts
   };
 }
-var create_template_default = task(run168, {
+var create_template_default = task(run164, {
   inputSchema: XcpngCreateTemplateParamsSchema,
   outputSchema: XcpngCreateTemplateResultSchema,
   description: "Clones a VM and converts it into an XCP-ng template."
@@ -20417,7 +20472,7 @@ var XcpngCreateVmResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run169(context) {
+async function run165(context) {
   const { params, error } = context;
   const {
     name_label,
@@ -20543,7 +20598,7 @@ async function run169(context) {
     appliedCommands
   };
 }
-var create_vm_default = task(run169, {
+var create_vm_default = task(run165, {
   inputSchema: XcpngCreateVmParamsSchema,
   outputSchema: XcpngCreateVmResultSchema,
   description: "Creates a new VM on XCP-ng and optionally applies memory and CPU sizing."
@@ -20558,7 +20613,7 @@ var XcpngListVdiParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run170(context) {
+async function run166(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "vdi-param-list", filters);
   if (!result.success) {
@@ -20572,7 +20627,7 @@ async function run170(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_vdi_params_default = task(run170, {
+var list_vdi_params_default = task(run166, {
   inputSchema: XcpngListVdiParamsParamsSchema,
   outputSchema: XcpngListVdiParamsResultSchema,
   description: "Lists virtual disk image parameters (VDI params) on an XCP-ng host."
@@ -20587,7 +20642,7 @@ var XcpngListVdisResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run171(context) {
+async function run167(context) {
   const { params } = context;
   const filters = normalizeFilterArgs(params?.filters);
   const result = await runXeCommand(context, "vdi-list", filters);
@@ -20638,7 +20693,7 @@ async function run171(context) {
     items: enrichedItems
   };
 }
-var list_vdis_default = task(run171, {
+var list_vdis_default = task(run167, {
   inputSchema: XcpngListVdisParamsSchema,
   outputSchema: XcpngListVdisResultSchema,
   description: "Lists VDIs on an XCP-ng host with optional filtering."
@@ -20660,7 +20715,7 @@ var XcpngFindVdiResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run172(context) {
+async function run168(context) {
   const params = context.params ?? {};
   const {
     name_label: nameLabel,
@@ -20766,7 +20821,7 @@ function buildMultipleMessage7(nameLabel, uuid, srUuid, count) {
   const detail = identifiers.length > 0 ? identifiers.join(", ") : "specified criteria";
   return `Multiple VDIs (${count}) matched ${detail}; refine filters or set allow_multiple:true.`;
 }
-var find_vdi_default = task(run172, {
+var find_vdi_default = task(run168, {
   inputSchema: XcpngFindVdiParamsSchema,
   outputSchema: XcpngFindVdiResultSchema,
   description: "Finds a single VDI on an XCP-ng host, optionally allowing multiple matches."
@@ -20781,7 +20836,7 @@ var XcpngListVbdParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run173(context) {
+async function run169(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "vbd-param-list", filters);
   if (!result.success) {
@@ -20795,7 +20850,7 @@ async function run173(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_vbd_params_default = task(run173, {
+var list_vbd_params_default = task(run169, {
   inputSchema: XcpngListVbdParamsParamsSchema,
   outputSchema: XcpngListVbdParamsResultSchema,
   description: "Lists virtual block devices (VBDs) on an XCP-ng host."
@@ -20810,7 +20865,7 @@ var XcpngListVbdsResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run174(context) {
+async function run170(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "vbd-list", filters);
   if (!result.success) {
@@ -20860,7 +20915,7 @@ async function run174(context) {
     items: enrichedItems
   };
 }
-var list_vbds_default = task(run174, {
+var list_vbds_default = task(run170, {
   inputSchema: XcpngListVbdsParamsSchema,
   outputSchema: XcpngListVbdsResultSchema,
   description: "Lists virtual block devices (VBDs) on an XCP-ng host."
@@ -20877,7 +20932,7 @@ var XcpngListAttachedDisksResultSchema = z.object({
   disks: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run175(context) {
+async function run171(context) {
   const { params, error } = context;
   const { vm_uuid: vmUuid, include_readonly: rawIncludeReadonly } = params ?? {};
   if (!vmUuid) {
@@ -20971,7 +21026,7 @@ async function run175(context) {
     disks
   };
 }
-var list_attached_disks_default = task(run175, {
+var list_attached_disks_default = task(run171, {
   inputSchema: XcpngListAttachedDisksParamsSchema,
   outputSchema: XcpngListAttachedDisksResultSchema,
   description: "Lists VBDs attached to a VM and enriches them with VDI metadata so disks vs CD drives can be distinguished."
@@ -20998,7 +21053,7 @@ var XcpngRemoveDiskResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run176(context) {
+async function run172(context) {
   const { params, error } = context;
   const {
     vbd_uuid: vbdUuidParam,
@@ -21186,7 +21241,7 @@ async function waitForVdiRemoval(context, vdiUuid, timeoutMs) {
     await new Promise((resolve) => setTimeout(resolve, 1e3));
   }
 }
-var remove_disk_default = task(run176, {
+var remove_disk_default = task(run172, {
   inputSchema: XcpngRemoveDiskParamsSchema,
   outputSchema: XcpngRemoveDiskResultSchema,
   description: "Detaches a VDI from a VM and optionally destroys the backing disk on XCP-ng."
@@ -21203,7 +21258,7 @@ var XcpngSetBootOrderResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run177(context) {
+async function run173(context) {
   const { params, error } = context;
   const { vm_uuid, boot_order, firmware } = params;
   if (!vm_uuid) {
@@ -21267,7 +21322,7 @@ async function run177(context) {
     appliedCommands
   };
 }
-var set_boot_order_default = task(run177, {
+var set_boot_order_default = task(run173, {
   inputSchema: XcpngSetBootOrderParamsSchema,
   outputSchema: XcpngSetBootOrderResultSchema,
   description: "Configures VM boot order and optional firmware mode via xe vm-param-set."
@@ -21320,7 +21375,7 @@ var OTHER_CONFIG_KEYS_TO_REMOVE = [
   "cloud-init-hostname",
   "cloud-init-instance-id"
 ];
-async function run178(context) {
+async function run174(context) {
   if (!context.host) {
     const message = "core.xcpng.create-template-from-vdi must run against a remote XCP-ng host.";
     return {
@@ -21853,7 +21908,7 @@ async function run178(context) {
     steps
   };
 }
-var create_template_from_vdi_default = task(run178, {
+var create_template_from_vdi_default = task(run174, {
   inputSchema: XcpngCreateTemplateFromVdiParamsSchema,
   outputSchema: XcpngCreateTemplateFromVdiResultSchema,
   description: "Creates an XCP-ng template from an existing VDI by staging a VM and converting it."
@@ -21970,7 +22025,7 @@ var XcpngCreateNetworkResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run179(context) {
+async function run175(context) {
   const { params, error } = context;
   const { name_label: nameLabel, description, bridge, mtu, tags, allow_existing: rawAllowExisting } = params ?? {};
   if (!nameLabel) {
@@ -22035,7 +22090,7 @@ async function run179(context) {
     appliedCommands
   };
 }
-var create_network_default = task(run179, {
+var create_network_default = task(run175, {
   inputSchema: XcpngCreateNetworkParamsSchema,
   outputSchema: XcpngCreateNetworkResultSchema,
   description: "Creates a new network on an XCP-ng host (bridge, MTU, and tags optional)."
@@ -22067,7 +22122,7 @@ var XcpngFindOrCreateIsoSrResultSchema = z.object({
   commands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run180(context) {
+async function run176(context) {
   const { params, debug, error: logError2 } = context;
   const {
     name_label: nameLabel,
@@ -22219,7 +22274,7 @@ async function runDirCreate(context, params) {
     })
   );
 }
-var find_or_create_iso_sr_default = task(run180, {
+var find_or_create_iso_sr_default = task(run176, {
   inputSchema: XcpngFindOrCreateIsoSrParamsSchema,
   outputSchema: XcpngFindOrCreateIsoSrResultSchema,
   description: "Finds an ISO storage repository by name, creating it if missing using xe sr-create."
@@ -22262,7 +22317,7 @@ var XcpngCreateConfigDriveResultSchema = z.object({
   steps: z.array(z.any()),
   error: z.string().optional()
 });
-async function run181(context) {
+async function run177(context) {
   if (!context.host) {
     return {
       success: false,
@@ -22781,7 +22836,7 @@ function decodeBase64Field(field, value) {
     };
   }
 }
-var create_config_drive_default = task(run181, {
+var create_config_drive_default = task(run177, {
   inputSchema: XcpngCreateConfigDriveParamsSchema,
   outputSchema: XcpngCreateConfigDriveResultSchema,
   description: "Generates a NoCloud config-drive ISO, stores it in an ISO SR, and returns the associated VDI."
@@ -22805,7 +22860,7 @@ var XcpngConvertTemplateToVmResultSchema = z.object({
   alreadyVm: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run182(context) {
+async function run178(context) {
   const { params, error } = context;
   const {
     template_uuid: templateUuidParam,
@@ -22904,7 +22959,7 @@ async function run182(context) {
     alreadyVm
   };
 }
-var convert_template_to_vm_default = task(run182, {
+var convert_template_to_vm_default = task(run178, {
   inputSchema: XcpngConvertTemplateToVmParamsSchema,
   outputSchema: XcpngConvertTemplateToVmResultSchema,
   description: "Converts an XCP-ng template into a VM by clearing the template flag and optionally renaming it."
@@ -22925,7 +22980,7 @@ var XcpngDestroyIsoSrResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run183(context) {
+async function run179(context) {
   const { params, error } = context;
   const { sr_uuid: srUuidParam, sr_name_label: srName, location, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -23091,7 +23146,7 @@ async function detachSrPbds(context, srUuid, allowMissing) {
   }
   return { commands };
 }
-var destroy_iso_sr_default = task(run183, {
+var destroy_iso_sr_default = task(run179, {
   inputSchema: XcpngDestroyIsoSrParamsSchema,
   outputSchema: XcpngDestroyIsoSrResultSchema,
   description: "Destroys an ISO storage repository and optionally removes its backing directory."
@@ -23110,7 +23165,7 @@ var XcpngDestroyBondResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run184(context) {
+async function run180(context) {
   const { params, error } = context;
   const { bond_uuid: bondUuidParam, pif_uuid: pifUuidParam, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -23147,7 +23202,7 @@ async function run184(context) {
     appliedCommands
   };
 }
-var destroy_bond_default = task(run184, {
+var destroy_bond_default = task(run180, {
   inputSchema: XcpngDestroyBondParamsSchema,
   outputSchema: XcpngDestroyBondResultSchema,
   description: "Destroys a bonded interface, wrapping xe bond-destroy."
@@ -23169,7 +23224,7 @@ var XcpngCreateSrResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run185(context) {
+async function run181(context) {
   const { params, error } = context;
   const {
     name_label: nameLabel,
@@ -23244,7 +23299,7 @@ async function run185(context) {
     appliedCommands
   };
 }
-var create_sr_default = task(run185, {
+var create_sr_default = task(run181, {
   inputSchema: XcpngCreateSrParamsSchema,
   outputSchema: XcpngCreateSrResultSchema,
   description: "Creates a new storage repository (SR) with the specified device configuration."
@@ -23264,7 +23319,7 @@ var XcpngDestroySrResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run186(context) {
+async function run182(context) {
   const { params, error } = context;
   const {
     sr_uuid: srUuidParam,
@@ -23338,7 +23393,7 @@ async function run186(context) {
     appliedCommands
   };
 }
-var destroy_sr_default = task(run186, {
+var destroy_sr_default = task(run182, {
   inputSchema: XcpngDestroySrParamsSchema,
   outputSchema: XcpngDestroySrResultSchema,
   description: "Destroys a storage repository by UUID or name-label (optionally forcing)."
@@ -23357,7 +23412,7 @@ var XcpngDestroyNetworkResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run187(context) {
+async function run183(context) {
   const { params, error } = context;
   const {
     network_uuid: networkUuidParam,
@@ -23424,7 +23479,7 @@ async function run187(context) {
     appliedCommands
   };
 }
-var destroy_network_default = task(run187, {
+var destroy_network_default = task(run183, {
   inputSchema: XcpngDestroyNetworkParamsSchema,
   outputSchema: XcpngDestroyNetworkResultSchema,
   description: "Destroys an XCP-ng network by UUID or name-label."
@@ -23446,7 +23501,7 @@ var XcpngDestroyPbdResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run188(context) {
+async function run184(context) {
   const { params, error } = context;
   const {
     pbd_uuid: pbdUuidParam,
@@ -23555,7 +23610,7 @@ async function run188(context) {
     appliedCommands
   };
 }
-var destroy_pbd_default = task(run188, {
+var destroy_pbd_default = task(run184, {
   inputSchema: XcpngDestroyPbdParamsSchema,
   outputSchema: XcpngDestroyPbdResultSchema,
   description: "Destroys a host \u2194 storage repository binding (PBD)."
@@ -23571,7 +23626,7 @@ var XcpngDestroySnapshotResultSchema = z.object({
   command: z.string().optional(),
   error: z.string().optional()
 });
-async function run189(context) {
+async function run185(context) {
   const { params, error } = context;
   const { snapshot_uuid: snapshotUuid } = params ?? {};
   if (!snapshotUuid) {
@@ -23594,7 +23649,7 @@ async function run189(context) {
     command: result.command
   };
 }
-var destroy_snapshot_default = task(run189, {
+var destroy_snapshot_default = task(run185, {
   inputSchema: XcpngDestroySnapshotParamsSchema,
   outputSchema: XcpngDestroySnapshotResultSchema,
   description: "Destroys an XCP-ng VM snapshot."
@@ -23614,7 +23669,7 @@ var XcpngIntroduceSrResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run190(context) {
+async function run186(context) {
   const { params, error } = context;
   const { sr_uuid: srUuid, name_label: nameLabel, type, content_type: contentType, shared } = params ?? {};
   if (!srUuid) {
@@ -23655,7 +23710,7 @@ async function run190(context) {
     appliedCommands
   };
 }
-var introduce_sr_default = task(run190, {
+var introduce_sr_default = task(run186, {
   inputSchema: XcpngIntroduceSrParamsSchema,
   outputSchema: XcpngIntroduceSrResultSchema,
   description: "Introduces an existing storage repository into the pool."
@@ -23674,7 +23729,7 @@ var XcpngForgetSrResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run191(context) {
+async function run187(context) {
   const { params, error } = context;
   const { sr_uuid: srUuidParam, sr_name_label: srNameLabel, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -23737,7 +23792,7 @@ async function run191(context) {
     appliedCommands
   };
 }
-var forget_sr_default = task(run191, {
+var forget_sr_default = task(run187, {
   inputSchema: XcpngForgetSrParamsSchema,
   outputSchema: XcpngForgetSrResultSchema,
   description: "Forgets an SR from the pool metadata without destroying the underlying storage."
@@ -23752,7 +23807,7 @@ var XcpngListSnapshotsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run192(context) {
+async function run188(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "snapshot-list", filters);
   if (!result.success) {
@@ -23766,7 +23821,7 @@ async function run192(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_snapshots_default = task(run192, {
+var list_snapshots_default = task(run188, {
   inputSchema: XcpngListSnapshotsParamsSchema,
   outputSchema: XcpngListSnapshotsResultSchema,
   description: "Lists VM snapshots available on the host."
@@ -23781,7 +23836,7 @@ var XcpngListMessagesResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run193(context) {
+async function run189(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "message-list", filters);
   if (!result.success) {
@@ -23795,7 +23850,7 @@ async function run193(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_messages_default = task(run193, {
+var list_messages_default = task(run189, {
   inputSchema: XcpngListMessagesParamsSchema,
   outputSchema: XcpngListMessagesResultSchema,
   description: "Lists messages emitted by the XCP-ng pool."
@@ -23814,7 +23869,7 @@ var XcpngClearMessagesResultSchema = z.object({
   commands: z.any().optional(),
   error: z.string().optional()
 });
-async function run194(context) {
+async function run190(context) {
   const { params, error } = context;
   const { uuid, uuid_prefix: uuidPrefix, all: rawAll, filters } = params ?? {};
   const all = coerceBoolean(rawAll, false);
@@ -23872,7 +23927,7 @@ async function run194(context) {
     commands
   };
 }
-var clear_messages_default = task(run194, {
+var clear_messages_default = task(run190, {
   inputSchema: XcpngClearMessagesParamsSchema,
   outputSchema: XcpngClearMessagesResultSchema,
   description: "Clears messages (all, by UUID, or UUID prefix)."
@@ -23893,7 +23948,7 @@ var XcpngDestroyTemplateResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run195(context) {
+async function run191(context) {
   const { params, error } = context;
   const {
     template_uuid: templateUuidParam,
@@ -23968,7 +24023,7 @@ async function run195(context) {
     command: commandResult.command
   };
 }
-var destroy_template_default = task(run195, {
+var destroy_template_default = task(run191, {
   inputSchema: XcpngDestroyTemplateParamsSchema,
   outputSchema: XcpngDestroyTemplateResultSchema,
   description: "Destroys an XCP-ng template by UUID or name-label."
@@ -23988,7 +24043,7 @@ var XcpngDestroyVdiResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run196(context) {
+async function run192(context) {
   const { params, error } = context;
   const {
     vdi_uuid: vdiUuidParam,
@@ -24053,7 +24108,7 @@ async function run196(context) {
     command: result.command
   };
 }
-var destroy_vdi_default = task(run196, {
+var destroy_vdi_default = task(run192, {
   inputSchema: XcpngDestroyVdiParamsSchema,
   outputSchema: XcpngDestroyVdiResultSchema,
   description: "Destroys an XCP-ng VDI by UUID (optionally resolving by name-label)."
@@ -24078,7 +24133,7 @@ var XcpngDestroyVmResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run197(context) {
+async function run193(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -24241,7 +24296,7 @@ async function run197(context) {
     destroyedVdiUuids
   };
 }
-var destroy_vm_default = task(run197, {
+var destroy_vm_default = task(run193, {
   inputSchema: XcpngDestroyVmParamsSchema,
   outputSchema: XcpngDestroyVmResultSchema,
   description: "Destroys an XCP-ng VM, optionally forcing and pruning snapshots."
@@ -24270,7 +24325,7 @@ var XcpngCopyVdiResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run198(context) {
+async function run194(context) {
   const { params, error } = context;
   const {
     source_vdi_uuid: sourceVdiUuidParam,
@@ -24415,7 +24470,7 @@ async function run198(context) {
     appliedCommands
   };
 }
-var copy_vdi_default = task(run198, {
+var copy_vdi_default = task(run194, {
   inputSchema: XcpngCopyVdiParamsSchema,
   outputSchema: XcpngCopyVdiResultSchema,
   description: "Copies an XCP-ng VDI to a destination storage repository and optionally updates its metadata."
@@ -24433,7 +24488,7 @@ var XcpngDetachIsoResultSchema = z.object({
   alreadyEmpty: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run199(context) {
+async function run195(context) {
   const { params, error } = context;
   const { vm_uuid: vmUuid, allow_missing: rawAllowMissing } = params;
   if (!vmUuid) {
@@ -24465,7 +24520,7 @@ async function run199(context) {
     error: message
   };
 }
-var detach_iso_default = task(run199, {
+var detach_iso_default = task(run195, {
   inputSchema: XcpngDetachIsoParamsSchema,
   outputSchema: XcpngDetachIsoResultSchema,
   description: "Ejects ISO media from a VM, tolerating empty drives when allow_missing:true."
@@ -24491,7 +24546,7 @@ var XcpngDetachVdiResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run200(context) {
+async function run196(context) {
   const { params } = context;
   const {
     vbd_uuid,
@@ -24528,7 +24583,7 @@ async function run200(context) {
     error: result.error
   };
 }
-var detach_vdi_default = task(run200, {
+var detach_vdi_default = task(run196, {
   inputSchema: XcpngDetachVdiParamsSchema,
   outputSchema: XcpngDetachVdiResultSchema,
   description: "Detaches a VDI from a VM by unplugging and optionally destroying the VBD, leaving the VDI intact by default."
@@ -24550,7 +24605,7 @@ var XcpngDetachNetworkInterfaceResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run201(context) {
+async function run197(context) {
   const { params, error } = context;
   const {
     vif_uuid: vifUuidParam,
@@ -24644,7 +24699,7 @@ async function run201(context) {
     appliedCommands
   };
 }
-var detach_network_interface_default = task(run201, {
+var detach_network_interface_default = task(run197, {
   inputSchema: XcpngDetachNetworkInterfaceParamsSchema,
   outputSchema: XcpngDetachNetworkInterfaceResultSchema,
   description: "Unplugs (and optionally destroys) a virtual network interface from an XCP-ng VM."
@@ -24664,7 +24719,7 @@ var XcpngEnableHostResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run202(context) {
+async function run198(context) {
   const { params, error } = context;
   const {
     host_uuid: hostUuidParam,
@@ -24732,7 +24787,7 @@ async function run202(context) {
     appliedCommands
   };
 }
-var enable_host_default = task(run202, {
+var enable_host_default = task(run198, {
   inputSchema: XcpngEnableHostParamsSchema,
   outputSchema: XcpngEnableHostResultSchema,
   description: "Enables maintenance-disabled hosts so they rejoin scheduling."
@@ -24754,7 +24809,7 @@ var XcpngDisableHostResultSchema = z.object({
   evacuated: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run203(context) {
+async function run199(context) {
   const { params, error } = context;
   const {
     host_uuid: hostUuidParam,
@@ -24839,7 +24894,7 @@ async function run203(context) {
     evacuated: evacuate
   };
 }
-var disable_host_default = task(run203, {
+var disable_host_default = task(run199, {
   inputSchema: XcpngDisableHostParamsSchema,
   outputSchema: XcpngDisableHostResultSchema,
   description: "Disables a host (optionally evacuating resident VMs first)."
@@ -24859,7 +24914,7 @@ var XcpngPlugPbdResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run204(context) {
+async function run200(context) {
   const { params, error } = context;
   const { pbd_uuid: pbdUuidParam, sr_uuid: srUuid, host_uuid: hostUuid, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -24923,7 +24978,7 @@ async function run204(context) {
     appliedCommands
   };
 }
-var plug_pbd_default = task(run204, {
+var plug_pbd_default = task(run200, {
   inputSchema: XcpngPlugPbdParamsSchema,
   outputSchema: XcpngPlugPbdResultSchema,
   description: "Plugs a PBD so the host reattaches the storage repository."
@@ -24943,7 +24998,7 @@ var XcpngUnplugPbdResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run205(context) {
+async function run201(context) {
   const { params, error } = context;
   const { pbd_uuid: pbdUuidParam, sr_uuid: srUuid, host_uuid: hostUuid, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -25007,7 +25062,7 @@ async function run205(context) {
     appliedCommands
   };
 }
-var unplug_pbd_default = task(run205, {
+var unplug_pbd_default = task(run201, {
   inputSchema: XcpngUnplugPbdParamsSchema,
   outputSchema: XcpngUnplugPbdResultSchema,
   description: "Unplugs a PBD so the host detaches the storage repository."
@@ -25022,7 +25077,7 @@ var XcpngListPoolsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run206(context) {
+async function run202(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "pool-list", filters);
   if (!result.success) {
@@ -25036,7 +25091,7 @@ async function run206(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_pools_default = task(run206, {
+var list_pools_default = task(run202, {
   inputSchema: XcpngListPoolsParamsSchema,
   outputSchema: XcpngListPoolsResultSchema,
   description: "Lists pools available to the current host."
@@ -25057,7 +25112,7 @@ var XcpngFindPoolResultSchema = z.object({
   multiple: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run207(context) {
+async function run203(context) {
   const params = context.params ?? {};
   const {
     uuid,
@@ -25157,7 +25212,7 @@ async function runListPools(context, params) {
     })
   );
 }
-var find_pool_default = task(run207, {
+var find_pool_default = task(run203, {
   inputSchema: XcpngFindPoolParamsSchema,
   outputSchema: XcpngFindPoolResultSchema,
   description: "Finds a single pool by UUID or name-label, optionally allowing multiple matches."
@@ -25176,7 +25231,7 @@ var XcpngSetPoolParamResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run208(context) {
+async function run204(context) {
   const { params, error } = context;
   const { pool_uuid: poolUuidParam, pool_name_label: poolNameLabel, key, value } = params ?? {};
   if (!key) {
@@ -25237,7 +25292,7 @@ async function run208(context) {
     appliedCommands
   };
 }
-var set_pool_param_default = task(run208, {
+var set_pool_param_default = task(run204, {
   inputSchema: XcpngSetPoolParamParamsSchema,
   outputSchema: XcpngSetPoolParamResultSchema,
   description: "Updates a pool parameter (wraps xe pool-param-set)."
@@ -25257,7 +25312,7 @@ var XcpngRebootHostResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run209(context) {
+async function run205(context) {
   const { params, error } = context;
   const {
     host_uuid: hostUuidParam,
@@ -25323,7 +25378,7 @@ async function run209(context) {
     command: commandResult.command
   };
 }
-var reboot_host_default = task(run209, {
+var reboot_host_default = task(run205, {
   inputSchema: XcpngRebootHostParamsSchema,
   outputSchema: XcpngRebootHostResultSchema,
   description: "Reboots an XCP-ng host (optionally forcing)."
@@ -25343,7 +25398,7 @@ var XcpngShutdownHostResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run210(context) {
+async function run206(context) {
   const { params, error } = context;
   const {
     host_uuid: hostUuidParam,
@@ -25407,7 +25462,7 @@ async function run210(context) {
     command: commandResult.command
   };
 }
-var shutdown_host_default = task(run210, {
+var shutdown_host_default = task(run206, {
   inputSchema: XcpngShutdownHostParamsSchema,
   outputSchema: XcpngShutdownHostResultSchema,
   description: "Shuts down an XCP-ng host (optionally forcing)."
@@ -25426,7 +25481,7 @@ var XcpngEvacuateHostResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run211(context) {
+async function run207(context) {
   const { params, error } = context;
   const { host_uuid: hostUuidParam, host_name_label: hostNameLabel, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -25479,7 +25534,7 @@ async function run211(context) {
     command: commandResult.command
   };
 }
-var evacuate_host_default = task(run211, {
+var evacuate_host_default = task(run207, {
   inputSchema: XcpngEvacuateHostParamsSchema,
   outputSchema: XcpngEvacuateHostResultSchema,
   description: "Evacuates all VMs from a host."
@@ -25500,7 +25555,7 @@ var XcpngPlugPifResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run212(context) {
+async function run208(context) {
   const { params, error } = context;
   const {
     pif_uuid: pifUuidParam,
@@ -25597,7 +25652,7 @@ async function run212(context) {
     appliedCommands
   };
 }
-var plug_pif_default = task(run212, {
+var plug_pif_default = task(run208, {
   inputSchema: XcpngPlugPifParamsSchema,
   outputSchema: XcpngPlugPifResultSchema,
   description: "Plugs a physical interface (PIF) on the specified host."
@@ -25616,7 +25671,7 @@ var XcpngPifScanResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run213(context) {
+async function run209(context) {
   const { params, error } = context;
   const { host_uuid: hostUuidParam, host_name_label: hostNameLabel, allow_missing: rawAllowMissing } = params ?? {};
   const allowMissing = coerceBoolean(rawAllowMissing, false);
@@ -25681,7 +25736,7 @@ async function run213(context) {
     appliedCommands
   };
 }
-var pif_scan_default = task(run213, {
+var pif_scan_default = task(run209, {
   inputSchema: XcpngPifScanParamsSchema,
   outputSchema: XcpngPifScanResultSchema,
   description: "Rescans physical interfaces (PIFs) on a host to discover changes."
@@ -25702,7 +25757,7 @@ var XcpngUnplugPifResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run214(context) {
+async function run210(context) {
   const { params, error } = context;
   const {
     pif_uuid: pifUuidParam,
@@ -25799,7 +25854,7 @@ async function run214(context) {
     appliedCommands
   };
 }
-var unplug_pif_default = task(run214, {
+var unplug_pif_default = task(run210, {
   inputSchema: XcpngUnplugPifParamsSchema,
   outputSchema: XcpngUnplugPifResultSchema,
   description: "Unplugs a physical interface (PIF) on the specified host."
@@ -25817,7 +25872,7 @@ var XcpngSetPifParamResultSchema = z.object({
   command: z.string().optional(),
   error: z.string().optional()
 });
-async function run215(context) {
+async function run211(context) {
   const { params, error } = context;
   const { pif_uuid: pifUuid, key, value } = params ?? {};
   if (!pifUuid) {
@@ -25855,7 +25910,7 @@ async function run215(context) {
     command: commandResult.command
   };
 }
-var set_pif_param_default = task(run215, {
+var set_pif_param_default = task(run211, {
   inputSchema: XcpngSetPifParamParamsSchema,
   outputSchema: XcpngSetPifParamResultSchema,
   description: "Updates a PIF parameter (wraps `xe pif-param-set`)."
@@ -25872,7 +25927,7 @@ var XcpngUnplugVbdResultSchema = z.object({
   alreadyDetached: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run216(context) {
+async function run212(context) {
   const { params, error } = context;
   const { vbd_uuid: vbdUuid, allow_missing: rawAllowMissing } = params;
   if (!vbdUuid) {
@@ -25902,7 +25957,7 @@ async function run216(context) {
     error: message
   };
 }
-var unplug_vbd_default = task(run216, {
+var unplug_vbd_default = task(run212, {
   inputSchema: XcpngUnplugVbdParamsSchema,
   outputSchema: XcpngUnplugVbdResultSchema,
   description: "Unplugs a VBD from an XCP-ng VM, tolerating already-detached devices when allow_missing:true."
@@ -25922,7 +25977,7 @@ var XcpngSuspendVmResultSchema = z.object({
   waitAttempts: z.number().optional(),
   error: z.string().optional()
 });
-async function run217(context) {
+async function run213(context) {
   const { params, error } = context;
   const { vm_uuid: vmUuid, allow_running: rawAllowRunning } = params;
   if (!vmUuid) {
@@ -25983,7 +26038,7 @@ async function run217(context) {
     waitAttempts: waitResult.attempts
   };
 }
-var suspend_vm_default = task(run217, {
+var suspend_vm_default = task(run213, {
   inputSchema: XcpngSuspendVmParamsSchema,
   outputSchema: XcpngSuspendVmResultSchema,
   description: "Suspends an XCP-ng VM, waiting until the VM reports the suspended power state."
@@ -26004,7 +26059,7 @@ var XcpngResumeVmResultSchema = z.object({
   waitAttempts: z.number().optional(),
   error: z.string().optional()
 });
-async function run218(context) {
+async function run214(context) {
   const { params, error } = context;
   const { vm_uuid: vmUuid, start_paused: rawStartPaused, host_uuid: hostUuid } = params;
   if (!vmUuid) {
@@ -26069,7 +26124,7 @@ async function run218(context) {
     waitAttempts: waitResult.attempts
   };
 }
-var resume_vm_default = task(run218, {
+var resume_vm_default = task(run214, {
   inputSchema: XcpngResumeVmParamsSchema,
   outputSchema: XcpngResumeVmResultSchema,
   description: "Resumes a suspended XCP-ng VM, optionally starting it in a paused state or on a specific host."
@@ -26084,7 +26139,7 @@ var XcpngListVifParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run219(context) {
+async function run215(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "vif-param-list", filters);
   if (!result.success) {
@@ -26098,7 +26153,7 @@ async function run219(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_vif_params_default = task(run219, {
+var list_vif_params_default = task(run215, {
   inputSchema: XcpngListVifParamsParamsSchema,
   outputSchema: XcpngListVifParamsResultSchema,
   description: "Lists parameters for virtual interfaces (VIFs) on an XCP-ng host."
@@ -26113,7 +26168,7 @@ var XcpngListVifsResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run220(context) {
+async function run216(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "vif-list", filters);
   if (!result.success) {
@@ -26161,7 +26216,7 @@ async function run220(context) {
     items: enrichedItems
   };
 }
-var list_vifs_default = task(run220, {
+var list_vifs_default = task(run216, {
   inputSchema: XcpngListVifsParamsSchema,
   outputSchema: XcpngListVifsResultSchema,
   description: "Lists VIFs (virtual interfaces) attached to VMs."
@@ -26176,7 +26231,7 @@ var XcpngListPifParamsResultSchema = z.object({
   items: z.any().optional(),
   error: z.string().optional()
 });
-async function run221(context) {
+async function run217(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "pif-param-list", filters);
   if (!result.success) {
@@ -26190,7 +26245,7 @@ async function run221(context) {
     items: parseKeyValueOutput(result.stdout)
   };
 }
-var list_pif_params_default = task(run221, {
+var list_pif_params_default = task(run217, {
   inputSchema: XcpngListPifParamsParamsSchema,
   outputSchema: XcpngListPifParamsResultSchema,
   description: "Lists parameters for PIFs on an XCP-ng host."
@@ -26205,7 +26260,7 @@ var XcpngListPifsResultSchema = z.object({
   items: z.array(z.any()).optional(),
   error: z.string().optional()
 });
-async function run222(context) {
+async function run218(context) {
   const filters = normalizeFilterArgs(context.params?.filters);
   const result = await runXeCommand(context, "pif-list", filters);
   if (!result.success) {
@@ -26253,7 +26308,7 @@ async function run222(context) {
     items: enrichedItems
   };
 }
-var list_pifs_default = task(run222, {
+var list_pifs_default = task(run218, {
   inputSchema: XcpngListPifsParamsSchema,
   outputSchema: XcpngListPifsResultSchema,
   description: "Lists PIFs (physical interfaces) available on the XCP-ng host."
@@ -26273,7 +26328,7 @@ var XcpngRebootVmResultSchema = z.object({
   powerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run223(context) {
+async function run219(context) {
   const { params, error } = context;
   const { vm_uuid: vmUuidParam, vm_name_label: vmNameLabel, force: rawForce } = params ?? {};
   const force = coerceBoolean(rawForce, false);
@@ -26334,7 +26389,7 @@ async function run223(context) {
     waitAttempts: waitResult.attempts
   };
 }
-var reboot_vm_default = task(run223, {
+var reboot_vm_default = task(run219, {
   inputSchema: XcpngRebootVmParamsSchema,
   outputSchema: XcpngRebootVmResultSchema,
   description: "Reboots an XCP-ng VM using `xe vm-reboot`."
@@ -26353,7 +26408,7 @@ var XcpngSetNetworkParamResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run224(context) {
+async function run220(context) {
   const { params, error } = context;
   const { network_uuid: networkUuidParam, network_name_label: networkNameLabel, key, value } = params ?? {};
   if (!key) {
@@ -26414,7 +26469,7 @@ async function run224(context) {
     appliedCommands
   };
 }
-var set_network_param_default = task(run224, {
+var set_network_param_default = task(run220, {
   inputSchema: XcpngSetNetworkParamParamsSchema,
   outputSchema: XcpngSetNetworkParamResultSchema,
   description: "Updates a network parameter (wraps xe network-param-set)."
@@ -26438,7 +26493,7 @@ var XcpngResizeVdiResultSchema = z.object({
   newSizeBytes: z.number().optional(),
   error: z.string().optional()
 });
-async function run225(context) {
+async function run221(context) {
   const { params, error } = context;
   const {
     vdi_uuid: vdiUuidParam,
@@ -26512,7 +26567,7 @@ async function run225(context) {
     newSizeBytes: sizeBytes
   };
 }
-var resize_vdi_default = task(run225, {
+var resize_vdi_default = task(run221, {
   inputSchema: XcpngResizeVdiParamsSchema,
   outputSchema: XcpngResizeVdiResultSchema,
   description: "Resizes an existing VDI on XCP-ng using `xe vdi-resize`/`vdi-resize-online`."
@@ -26544,7 +26599,7 @@ var XcpngSetVmResourcesResultSchema = z.object({
   powerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run226(context) {
+async function run222(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -26792,14 +26847,14 @@ async function run226(context) {
         cpuUpdates.push({ field, value });
       }
     }
-    for (const update4 of cpuUpdates) {
+    for (const update of cpuUpdates) {
       const result = await runXeCommand(context, "vm-param-set", {
         uuid: vmUuid,
-        [update4.field]: update4.value
+        [update.field]: update.value
       });
       appliedCommands.push(result.command);
       if (!result.success) {
-        const message = xeErrorMessage(result, `xe vm-param-set (${update4.field}) failed`);
+        const message = xeErrorMessage(result, `xe vm-param-set (${update.field}) failed`);
         error(message);
         return {
           success: false,
@@ -26847,7 +26902,7 @@ function ensurePositiveMib(value, fieldName) {
     bytes: mibToBytes2(value)
   };
 }
-var set_vm_resources_default = task(run226, {
+var set_vm_resources_default = task(run222, {
   inputSchema: XcpngSetVmResourcesParamsSchema,
   outputSchema: XcpngSetVmResourcesResultSchema,
   description: "Updates VM memory and vCPU settings on an XCP-ng host."
@@ -26872,7 +26927,7 @@ var XcpngResizeVmCpusResultSchema = z.object({
   powerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run227(context) {
+async function run223(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuid,
@@ -26921,7 +26976,7 @@ async function run227(context) {
     waitAttempts: result.waitAttempts
   };
 }
-var resize_vm_cpus_default = task(run227, {
+var resize_vm_cpus_default = task(run223, {
   inputSchema: XcpngResizeVmCpusParamsSchema,
   outputSchema: XcpngResizeVmCpusResultSchema,
   description: "Resizes an XCP-ng VM\u2019s vCPU configuration."
@@ -26942,7 +26997,7 @@ var XcpngResizeVmMemoryResultSchema = z.object({
   powerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run228(context) {
+async function run224(context) {
   const { params, error } = context;
   const { vm_uuid: vmUuid, vm_name_label: vmNameLabel, memory_mib: memoryMib } = params ?? {};
   if (!memoryMib || !Number.isFinite(memoryMib) || memoryMib <= 0) {
@@ -26981,7 +27036,7 @@ async function run228(context) {
     waitAttempts: result.waitAttempts
   };
 }
-var resize_vm_memory_default = task(run228, {
+var resize_vm_memory_default = task(run224, {
   inputSchema: XcpngResizeVmMemoryParamsSchema,
   outputSchema: XcpngResizeVmMemoryResultSchema,
   description: "Resizes an XCP-ng VM\u2019s memory allocation (static/dynamic bounds)."
@@ -27000,7 +27055,7 @@ var XcpngRevertSnapshotResultSchema = z.object({
   powerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run229(context) {
+async function run225(context) {
   const { params, error } = context;
   const { snapshot_uuid: snapshotUuid } = params ?? {};
   if (!snapshotUuid) {
@@ -27089,7 +27144,7 @@ async function run229(context) {
     waitAttempts
   };
 }
-var revert_snapshot_default = task(run229, {
+var revert_snapshot_default = task(run225, {
   inputSchema: XcpngRevertSnapshotParamsSchema,
   outputSchema: XcpngRevertSnapshotResultSchema,
   description: "Reverts an XCP-ng VM to a specified snapshot."
@@ -27107,7 +27162,7 @@ var XcpngSetSnapshotParamResultSchema = z.object({
   command: z.string().optional(),
   error: z.string().optional()
 });
-async function run230(context) {
+async function run226(context) {
   const { params, error } = context;
   const { snapshot_uuid: snapshotUuid, key, value } = params ?? {};
   if (!snapshotUuid) {
@@ -27145,7 +27200,7 @@ async function run230(context) {
     command: commandResult.command
   };
 }
-var set_snapshot_param_default = task(run230, {
+var set_snapshot_param_default = task(run226, {
   inputSchema: XcpngSetSnapshotParamParamsSchema,
   outputSchema: XcpngSetSnapshotParamResultSchema,
   description: "Updates a snapshot parameter (wraps xe snapshot-param-set)."
@@ -27164,7 +27219,7 @@ var XcpngSetSrParamResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run231(context) {
+async function run227(context) {
   const { params, error } = context;
   const { sr_uuid: srUuidParam, sr_name_label: srNameLabel, key, value } = params ?? {};
   if (!key) {
@@ -27225,7 +27280,7 @@ async function run231(context) {
     appliedCommands
   };
 }
-var set_sr_param_default = task(run231, {
+var set_sr_param_default = task(run227, {
   inputSchema: XcpngSetSrParamParamsSchema,
   outputSchema: XcpngSetSrParamResultSchema,
   description: "Updates a storage repository parameter (wraps xe sr-param-set)."
@@ -27246,7 +27301,7 @@ var XcpngStartVmResultSchema = z.object({
   finalPowerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run232(context) {
+async function run228(context) {
   const { params, error } = context;
   const { vm_uuid, start_paused: rawStartPaused, force: rawForce } = params;
   const startPaused = coerceBoolean(rawStartPaused, false);
@@ -27313,7 +27368,7 @@ async function run232(context) {
     waitAttempts: waitResult.attempts
   };
 }
-var start_vm_default = task(run232, {
+var start_vm_default = task(run228, {
   inputSchema: XcpngStartVmParamsSchema,
   outputSchema: XcpngStartVmResultSchema,
   description: "Starts an XCP-ng virtual machine with optional paused or forced modes."
@@ -27334,7 +27389,7 @@ var XcpngStopVmResultSchema = z.object({
   finalPowerState: z.string().optional(),
   waitAttempts: z.number().optional()
 });
-async function run233(context) {
+async function run229(context) {
   const { params, error } = context;
   const { vm_uuid, force: rawForce, timeout_seconds: rawTimeout } = params;
   const force = coerceBoolean(rawForce, false);
@@ -27409,7 +27464,7 @@ async function run233(context) {
     waitAttempts: waitResult.attempts
   };
 }
-var stop_vm_default = task(run233, {
+var stop_vm_default = task(run229, {
   inputSchema: XcpngStopVmParamsSchema,
   outputSchema: XcpngStopVmResultSchema,
   description: "Stops an XCP-ng virtual machine gracefully or forcefully."
@@ -27438,7 +27493,7 @@ var XcpngImportIsoResultSchema = z.object({
   commands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run234(context) {
+async function run230(context) {
   if (!context.host) {
     return {
       success: false,
@@ -27644,7 +27699,7 @@ async function findIsoVdi2(context, srUuid, isoFileName) {
   }
   return { vdi };
 }
-var import_iso_default = task(run234, {
+var import_iso_default = task(run230, {
   inputSchema: XcpngImportIsoParamsSchema,
   outputSchema: XcpngImportIsoResultSchema,
   description: "Ensures an ISO file is represented as a VDI in an ISO SR by rescanning and importing when necessary."
@@ -27652,7 +27707,7 @@ var import_iso_default = task(run234, {
 
 // src/core/xcpng/upload-iso.ts
 import { basename, posix as pathPosix3 } from "path";
-import { createReadStream, promises as fs8 } from "fs";
+import { createReadStream, promises as fs9 } from "fs";
 var DEFAULT_ISO_SR_PATH3 = "/var/opt/xen/iso-sr";
 var XcpngUploadIsoParamsSchema = z.object({
   source_path: z.string(),
@@ -27673,7 +27728,7 @@ var XcpngUploadIsoHostResultSchema = z.object({
   remotePath: z.string().optional(),
   error: z.string().optional()
 });
-async function run235(context) {
+async function run231(context) {
   if (context.host) {
     return {
       success: false,
@@ -27709,7 +27764,7 @@ async function run235(context) {
   const resolvedLocation = location ?? DEFAULT_ISO_SR_PATH3;
   const remoteFileName = filename ?? basename(sourcePath);
   try {
-    const stats = await fs8.stat(sourcePath);
+    const stats = await fs9.stat(sourcePath);
     if (!stats.isFile()) {
       return {
         success: false,
@@ -27728,10 +27783,10 @@ async function run235(context) {
   const uploads = await context.ssh(
     [],
     async (remoteContext) => {
-      const { run: run253 } = remoteContext;
+      const { run: run249 } = remoteContext;
       const remotePath = pathPosix3.join(resolvedLocation, remoteFileName);
       try {
-        const srResult = await run253(
+        const srResult = await run249(
           find_or_create_iso_sr_default({
             name_label: isoSrName,
             location: resolvedLocation,
@@ -27748,7 +27803,7 @@ async function run235(context) {
             error: srResult.error ?? "Failed to ensure ISO SR exists."
           };
         }
-        const fileExistsResult = await run253(exists_default2({ path: remotePath }));
+        const fileExistsResult = await run249(exists_default2({ path: remotePath }));
         if (fileExistsResult.exists) {
           return {
             success: true,
@@ -27815,7 +27870,7 @@ function resolveChunkSizeBytes(chunkSizeMb) {
   const bounded = Math.min(Math.max(safeSize, MIN_CHUNK_SIZE_MB), MAX_CHUNK_SIZE_MB);
   return bounded * 1024 * 1024;
 }
-var upload_iso_default = task(run235, {
+var upload_iso_default = task(run231, {
   inputSchema: XcpngUploadIsoParamsSchema,
   outputSchema: XcpngUploadIsoHostResultSchema,
   description: "Uploads a local ISO to the remote XCP-ng hypervisor, ensuring the target ISO SR exists beforehand."
@@ -27852,7 +27907,7 @@ function parseMapValue(raw) {
     return acc;
   }, {});
 }
-async function run236(context) {
+async function run232(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -27990,7 +28045,7 @@ async function run236(context) {
   }
   return result;
 }
-var get_vm_info_default = task(run236, {
+var get_vm_info_default = task(run232, {
   inputSchema: XcpngGetVmInfoParamsSchema,
   outputSchema: XcpngGetVmInfoResultSchema,
   description: "Returns structured VM details (platform, boot configuration, memory/CPU sizing, and optional VBD/VIF inventory)."
@@ -28014,7 +28069,7 @@ var XcpngExportVdiResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run237(context) {
+async function run233(context) {
   const { params, error } = context;
   const {
     vdi_uuid: vdiUuidParam,
@@ -28094,7 +28149,7 @@ async function run237(context) {
     appliedCommands
   };
 }
-var export_vdi_default = task(run237, {
+var export_vdi_default = task(run233, {
   inputSchema: XcpngExportVdiParamsSchema,
   outputSchema: XcpngExportVdiResultSchema,
   description: "Exports a VDI to the hypervisor filesystem via xe vdi-export."
@@ -28148,7 +28203,7 @@ var XcpngProvisionVmFromIsoResultSchema = z.object({
   steps: z.array(z.any()),
   error: z.string().optional()
 });
-async function run238(context) {
+async function run234(context) {
   if (!context.host) {
     return {
       success: false,
@@ -28475,7 +28530,7 @@ async function run238(context) {
     steps
   };
 }
-var provision_vm_from_iso_default = task(run238, {
+var provision_vm_from_iso_default = task(run234, {
   inputSchema: XcpngProvisionVmFromIsoParamsSchema,
   outputSchema: XcpngProvisionVmFromIsoResultSchema,
   description: "Creates a VM from a template, attaches storage, network, and ISO media, and optionally boots it for installation."
@@ -29505,7 +29560,7 @@ function resolveMemoryMib(input) {
   }
   return { value: Math.floor(value) };
 }
-async function run239(context) {
+async function run235(context) {
   if (!context.host) {
     return runLocal(context);
   }
@@ -29718,7 +29773,7 @@ function buildLocalFailure(step, message) {
     error: message
   };
 }
-var provision_vm_default = task(run239, {
+var provision_vm_default = task(run235, {
   inputSchema: XcpngProvisionVmParamsSchema,
   outputSchema: XcpngProvisionVmResultSchema,
   description: "Provisions a VM from an XCP-ng template by cloning its root disk, configuring cloud-init metadata, and attaching network resources."
@@ -29784,7 +29839,7 @@ var XcpngSnapshotVmResultSchema = z.object({
   command: z.string().optional(),
   error: z.string().optional()
 });
-async function run240(context) {
+async function run236(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -29854,7 +29909,7 @@ async function run240(context) {
     command: snapshotResult.command
   };
 }
-var snapshot_vm_default = task(run240, {
+var snapshot_vm_default = task(run236, {
   inputSchema: XcpngSnapshotVmParamsSchema,
   outputSchema: XcpngSnapshotVmResultSchema,
   description: "Creates a snapshot of an XCP-ng VM (optionally with quiesce)."
@@ -29881,7 +29936,7 @@ var XcpngImportVdiResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run241(context) {
+async function run237(context) {
   const { params, error } = context;
   const {
     sr_uuid: srUuidParam,
@@ -30003,7 +30058,7 @@ async function run241(context) {
     appliedCommands
   };
 }
-var import_vdi_default = task(run241, {
+var import_vdi_default = task(run237, {
   inputSchema: XcpngImportVdiParamsSchema,
   outputSchema: XcpngImportVdiResultSchema,
   description: "Imports a VDI file into a storage repository via xe vdi-import."
@@ -30105,7 +30160,7 @@ var XcpngVmMigrateResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run242(context) {
+async function run238(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -30229,7 +30284,7 @@ async function run242(context) {
     appliedCommands
   };
 }
-var vm_migrate_default = task(run242, {
+var vm_migrate_default = task(run238, {
   inputSchema: XcpngVmMigrateParamsSchema,
   outputSchema: XcpngVmMigrateResultSchema,
   description: "Migrates a VM to another host (and optionally storage repository) via xe vm-migrate."
@@ -30254,7 +30309,7 @@ var XcpngVmExportResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run243(context) {
+async function run239(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -30343,7 +30398,7 @@ async function run243(context) {
     appliedCommands
   };
 }
-var vm_export_default = task(run243, {
+var vm_export_default = task(run239, {
   inputSchema: XcpngVmExportParamsSchema,
   outputSchema: XcpngVmExportResultSchema,
   description: "Exports a VM to an XVA file via xe vm-export."
@@ -30365,7 +30420,7 @@ var XcpngVmImportResultSchema = z.object({
   appliedCommands: z.array(z.string()),
   error: z.string().optional()
 });
-async function run244(context) {
+async function run240(context) {
   const { params, error } = context;
   const {
     filename,
@@ -30434,7 +30489,7 @@ async function run244(context) {
     appliedCommands
   };
 }
-var vm_import_default = task(run244, {
+var vm_import_default = task(run240, {
   inputSchema: XcpngVmImportParamsSchema,
   outputSchema: XcpngVmImportResultSchema,
   description: "Imports a VM image from an XVA file via xe vm-import."
@@ -30461,7 +30516,7 @@ var XcpngVmCopyResultSchema = z.object({
   skipped: z.boolean().optional(),
   error: z.string().optional()
 });
-async function run245(context) {
+async function run241(context) {
   const { params, error } = context;
   const {
     vm_uuid: vmUuidParam,
@@ -30588,7 +30643,7 @@ async function run245(context) {
     appliedCommands
   };
 }
-var vm_copy_default = task(run245, {
+var vm_copy_default = task(run241, {
   inputSchema: XcpngVmCopyParamsSchema,
   outputSchema: XcpngVmCopyResultSchema,
   description: "Creates a full copy of a VM, optionally targeting a different SR."
@@ -30608,7 +30663,7 @@ var XcpngDetachCdMediaResultSchema = z.object({
   error: z.string().optional(),
   skipped: z.boolean().optional()
 });
-async function run246(context) {
+async function run242(context) {
   if (!context.host) {
     return {
       success: false,
@@ -30745,7 +30800,7 @@ function filterCdDisks(disks) {
   }
   return results;
 }
-var detach_cd_media_default = task(run246, {
+var detach_cd_media_default = task(run242, {
   inputSchema: XcpngDetachCdMediaParamsSchema,
   outputSchema: XcpngDetachCdMediaResultSchema,
   description: "Detaches CD/DVD virtual media from a VM by unplugging and destroying associated VBDs."
@@ -30768,7 +30823,7 @@ var XcpngCleanupConfigDriveResultSchema = z.object({
   error: z.string().optional(),
   skipped: z.boolean().optional()
 });
-async function run247(context) {
+async function run243(context) {
   if (!context.host) {
     return {
       success: false,
@@ -30968,7 +31023,7 @@ async function run247(context) {
     steps
   };
 }
-var cleanup_config_drive_default = task(run247, {
+var cleanup_config_drive_default = task(run243, {
   inputSchema: XcpngCleanupConfigDriveParamsSchema,
   outputSchema: XcpngCleanupConfigDriveResultSchema,
   description: "Detaches an attached config-drive ISO from a VM and removes the associated VDI once the guest is halted."
@@ -31107,7 +31162,7 @@ var YumAddRepositoryResultSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run248(context) {
+async function run244(context) {
   const { params, exec, info, error } = context;
   const { content, name, sudo = true } = params;
   if (!content) {
@@ -31139,7 +31194,7 @@ EOF`;
     return { success: false, error: errorMsg };
   }
 }
-var add_repository_default2 = task(run248, {
+var add_repository_default2 = task(run244, {
   description: "Adds a YUM repository.",
   inputSchema: YumAddRepositoryParamsSchema,
   outputSchema: YumAddRepositoryResultSchema
@@ -31165,7 +31220,7 @@ var DownloadOutputSchema = z.object({
   path: z.string().optional(),
   error: z.string().optional()
 });
-async function run249(context) {
+async function run245(context) {
   const { params, info, error, exec } = context;
   const { url, dest, mode, sudo = false } = params;
   if (!url || !dest) {
@@ -31210,7 +31265,7 @@ async function run249(context) {
     return { success: false, error: errorMsg };
   }
 }
-var download_default = task(run249, {
+var download_default = task(run245, {
   description: "Downloads a file from a URL using curl or wget.",
   inputSchema: DownloadInputSchema,
   outputSchema: DownloadOutputSchema
@@ -31241,7 +31296,7 @@ var InterfacesOutputSchema = z.object({
     error: z.string()
   })
 );
-async function run250(context) {
+async function run246(context) {
   const { params, info, error, exec } = context;
   const { sudo = false } = params;
   try {
@@ -31333,7 +31388,7 @@ async function run250(context) {
     return { success: false, error: errorMsg };
   }
 }
-var interfaces_default = task(run250, {
+var interfaces_default = task(run246, {
   name: "interfaces",
   description: "Lists network interfaces with their properties.",
   inputSchema: InterfacesInputSchema,
@@ -31359,7 +31414,7 @@ var NftablesApplyOutputSchema = z.object({
     error: z.string().optional()
   })
 );
-async function run251(context) {
+async function run247(context) {
   const { params, exec, info } = context;
   const { config } = params;
   if (!config) {
@@ -31383,7 +31438,7 @@ async function run251(context) {
     return { success: false, error };
   }
 }
-var apply_default = task(run251, {
+var apply_default = task(run247, {
   description: "Applies an nftables configuration.",
   inputSchema: NftablesApplyInputSchema,
   outputSchema: NftablesApplyOutputSchema
@@ -31406,7 +31461,7 @@ var FirewalldDisableResultSchema = z.object({
   success: z.boolean(),
   error: z.string().optional()
 });
-async function run252(context) {
+async function run248(context) {
   const { run: runTask, debug, error, info } = context;
   const statusResult = await runTask(status_default({ service: "firewalld", sudo: true }));
   if (!statusResult.success && (statusResult.error?.includes("Could not find") || statusResult.error?.includes("not-found"))) {
@@ -31430,7 +31485,7 @@ async function run252(context) {
   info("firewalld service disabled successfully.");
   return { success: true };
 }
-var disable_default3 = task(run252, {
+var disable_default3 = task(run248, {
   description: "Disables and stops the firewalld service.",
   inputSchema: FirewalldDisableInputSchema,
   outputSchema: FirewalldDisableResultSchema
@@ -31953,6 +32008,15 @@ var TaskCacheStore = class {
 };
 
 // src/app.ts
+function normalizePrivateKey2(value) {
+  if (!value.includes("\n") && value.includes("\\n")) {
+    return value.replace(/\\n/g, "\n");
+  }
+  return value;
+}
+function looksLikePrivateKey2(value) {
+  return /-----BEGIN [A-Z0-9 ]+PRIVATE KEY-----/.test(value);
+}
 var TaskTree = class {
   // private taskEventBus: Emittery<{ newTask: NewTaskEvent; taskComplete: TaskCompleteEvent }>;
   listr;
@@ -32073,8 +32137,8 @@ var App3 = class _App {
   }
   get tmpDir() {
     if (!this._tmpDir) {
-      if (!fs9.existsSync(this.hostctlDir().toString())) {
-        fs9.mkdirSync(this.hostctlDir().toString(), { recursive: true });
+      if (!fs10.existsSync(this.hostctlDir().toString())) {
+        fs10.mkdirSync(this.hostctlDir().toString(), { recursive: true });
       }
       this._tmpDir = this.createNamedTmpDir(version);
     }
@@ -32088,10 +32152,11 @@ var App3 = class _App {
     this.configProvider = provider;
     if (provider instanceof FileConfigProvider) {
       this.configRef = provider.path;
+      this._config = await provider.getConfigFile();
     } else {
       this.configRef = "provider";
+      this._config = await ProviderConfig.load(provider);
     }
-    this._config = await ProviderConfig.load(provider);
   }
   isValidUrl(url) {
     try {
@@ -32295,9 +32360,28 @@ ${cmdRes.stderr.trim()}`));
         host: host.hostname,
         port: host.port,
         username: host.user,
-        password: hostPassword,
-        privateKeyPath: await host.plaintextSshKeyPath()
+        password: hostPassword
       };
+      const sshKeyPassphrase = await host.decryptedSshKeyPassphrase();
+      if (sshKeyPassphrase) {
+        sshConnection.passphrase = sshKeyPassphrase;
+      }
+      const decryptedKey = await host.decryptedSshKey();
+      if (decryptedKey) {
+        const normalizedKey = normalizePrivateKey2(decryptedKey).trim();
+        if (looksLikePrivateKey2(normalizedKey)) {
+          sshConnection.privateKey = normalizedKey;
+        } else if (fs10.existsSync(normalizedKey)) {
+          sshConnection.privateKeyPath = normalizedKey;
+        } else {
+          sshConnection.privateKey = normalizedKey;
+        }
+      } else {
+        const keyPath = await host.plaintextSshKeyPath();
+        if (keyPath) {
+          sshConnection.privateKeyPath = keyPath;
+        }
+      }
       const interactionHandler = InteractionHandler.with(withSudo(hostPassword));
       const session = new SSHSession();
       await session.connect(sshConnection);
@@ -32707,7 +32791,7 @@ ${cmdRes.stderr.trim()}`));
       await configFile.decryptAllIfPossible();
       const successfullyUsedIdentityPaths = configFile.loadPrivateKeys().filter((identity2) => {
         try {
-          return fs9.existsSync(identity2.identityFilePath);
+          return fs10.existsSync(identity2.identityFilePath);
         } catch (e) {
           return false;
         }
@@ -33087,7 +33171,7 @@ ${successfullyUsedIdentityPaths}`);
 };
 
 // src/commands/pkg/create.ts
-import { promises as fs10 } from "fs";
+import { promises as fs11 } from "fs";
 import os5 from "os";
 import path11 from "path";
 function expandTildePath(input) {
@@ -33314,22 +33398,22 @@ async function createPackage(packageName, options, output) {
   const packageSlug = path11.basename(resolvedName);
   const packageJsonName = packageName.startsWith("@") ? packageName : packageSlug;
   const registryPrefix = registryPrefixFromPackageName(packageSlug);
-  await fs10.mkdir(packageDir, { recursive: true });
+  await fs11.mkdir(packageDir, { recursive: true });
   if (options.lang === "typescript") {
-    await fs10.writeFile(path11.join(packageDir, "package.json"), packageJsonTsTemplate(packageJsonName));
-    await fs10.writeFile(path11.join(packageDir, "tsconfig.json"), tsconfigTemplate);
-    await fs10.mkdir(path11.join(packageDir, "src", "tasks"), { recursive: true });
-    await fs10.writeFile(path11.join(packageDir, "src", "index.ts"), indexTsTemplate(registryPrefix));
-    await fs10.writeFile(path11.join(packageDir, "src", "tasks", "hello.ts"), sampleTaskTsTemplate);
-    await fs10.writeFile(path11.join(packageDir, "README.md"), readmeTemplate(packageJsonName, registryPrefix, true));
-    await fs10.writeFile(path11.join(packageDir, ".gitignore"), gitignoreTemplate);
+    await fs11.writeFile(path11.join(packageDir, "package.json"), packageJsonTsTemplate(packageJsonName));
+    await fs11.writeFile(path11.join(packageDir, "tsconfig.json"), tsconfigTemplate);
+    await fs11.mkdir(path11.join(packageDir, "src", "tasks"), { recursive: true });
+    await fs11.writeFile(path11.join(packageDir, "src", "index.ts"), indexTsTemplate(registryPrefix));
+    await fs11.writeFile(path11.join(packageDir, "src", "tasks", "hello.ts"), sampleTaskTsTemplate);
+    await fs11.writeFile(path11.join(packageDir, "README.md"), readmeTemplate(packageJsonName, registryPrefix, true));
+    await fs11.writeFile(path11.join(packageDir, ".gitignore"), gitignoreTemplate);
   } else {
-    await fs10.writeFile(path11.join(packageDir, "package.json"), packageJsonJsTemplate(packageJsonName));
-    await fs10.mkdir(path11.join(packageDir, "src", "tasks"), { recursive: true });
-    await fs10.writeFile(path11.join(packageDir, "src", "index.js"), indexJsTemplate(registryPrefix));
-    await fs10.writeFile(path11.join(packageDir, "src", "tasks", "hello.js"), sampleTaskJsTemplate);
-    await fs10.writeFile(path11.join(packageDir, "README.md"), readmeTemplate(packageJsonName, registryPrefix, false));
-    await fs10.writeFile(path11.join(packageDir, ".gitignore"), gitignoreTemplate);
+    await fs11.writeFile(path11.join(packageDir, "package.json"), packageJsonJsTemplate(packageJsonName));
+    await fs11.mkdir(path11.join(packageDir, "src", "tasks"), { recursive: true });
+    await fs11.writeFile(path11.join(packageDir, "src", "index.js"), indexJsTemplate(registryPrefix));
+    await fs11.writeFile(path11.join(packageDir, "src", "tasks", "hello.js"), sampleTaskJsTemplate);
+    await fs11.writeFile(path11.join(packageDir, "README.md"), readmeTemplate(packageJsonName, registryPrefix, false));
+    await fs11.writeFile(path11.join(packageDir, ".gitignore"), gitignoreTemplate);
   }
   const nextSteps = [];
   nextSteps.push(`cd ${packageDir}`);
@@ -33465,14 +33549,14 @@ async function removePackage(packageIdentifier, app, output) {
 import JSON5 from "json5";
 
 // src/task-discovery.ts
-import { promises as fs11 } from "fs";
+import { promises as fs12 } from "fs";
 import path12 from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
 import { glob as glob3 } from "glob";
 var metaCache = /* @__PURE__ */ new Map();
 async function readPackageJson2(pkgPath) {
   try {
-    const pkgJson = await fs11.readFile(path12.join(pkgPath, "package.json"), "utf8");
+    const pkgJson = await fs12.readFile(path12.join(pkgPath, "package.json"), "utf8");
     const parsed = JSON.parse(pkgJson);
     return { name: parsed.name, version: parsed.version };
   } catch {