impreza-mcp 0.46.0 → 0.48.0

package/dist/failover-workflows.d.ts

@@ -0,0 +1,201 @@
+import type { ImprezaClient } from './client.js';
+export declare const CUSTOMER_DOMAIN_FAILOVER_TOOLS: {
+    name: "impreza_challenge_failover_domain" | "impreza_verify_failover_domain" | "impreza_get_failover_domain";
+    title: "Request a hostname TXT challenge" | "Verify customer hostname ownership" | "Read customer hostname verification";
+    description: "Create a 15-minute account-bound, one-use TXT challenge for the customer hostname on this running app. Publish the returned TXT yourself. Impreza only queries DNS. Manage scope; account credential without confinement." | "Query the exact ownership TXT through Impreza local uncached Unbound. A successful challenge is consumed once; verification lasts 24 hours and TXT is checked again before pairing, review and cutover. Manage scope; account credential without confinement." | "Read the pending TXT challenge or saved ownership verification for this account app. This read does not prove current DNS freshness. Read scope; account credential without confinement.";
+    inputSchema: {
+        type: "object";
+        properties: {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly challenge_id: {
+                readonly type: "string";
+                readonly pattern: "^fdc_[a-f0-9]{24}$";
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        };
+        required: ("deployment_id" | "challenge_id")[];
+        additionalProperties: boolean;
+    };
+    annotations: {
+        openWorldHint: boolean;
+        idempotentHint?: boolean;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+    };
+}[];
+export declare const FAILOVER_TOOLS: ({
+    name: "impreza_declare_external_failover_country" | "impreza_pair_failover_standby" | "impreza_get_failover_standby" | "impreza_confirm_failover_sync" | "impreza_prepare_failover" | "impreza_get_failover" | "impreza_apply_failover" | "impreza_retry_failover_activation" | "impreza_prepare_failback" | "impreza_get_failback" | "impreza_apply_failback" | "impreza_set_failover_drill_policy" | "impreza_run_failover_drill" | "impreza_get_failover_drill";
+    title: "Declare an external server country" | "Pair a cold standby" | "Read a standby pair" | "Verify a cold standby copy" | "Review a cold failover" | "Read a failover receipt" | "Apply a reviewed failover" | "Retry reviewed target activation" | "Review a failback" | "Read a failback receipt" | "Apply a reviewed failback" | "Schedule standby drills" | "Run a standby drill now" | "Read a standby drill";
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            cutover_id: {
+                type: string;
+                pattern: string;
+            };
+            review_digest: {
+                type: string;
+                pattern: string;
+            };
+            confirm: {
+                type: string;
+                const: boolean;
+            };
+        } | {
+            readonly agent_id: {
+                readonly type: "string";
+                readonly pattern: "^agt_[a-f0-9]{16,32}$";
+            };
+            readonly country_code: {
+                readonly type: "string";
+                readonly pattern: "^[A-Z]{2}$";
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly target_deployment_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly mode: {
+                readonly type: "string";
+                readonly enum: readonly ["cold"];
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly backup_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly restore_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly deploy_command_id: {
+                readonly type: "string";
+                readonly pattern: "^cmd_[a-f0-9]{16,32}$";
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly cutover_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly cutover_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly failback_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly failback_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly review_digest: {
+                readonly type: "string";
+                readonly pattern: "^[a-f0-9]{64}$";
+            };
+            readonly confirm: {
+                readonly type: "boolean";
+                readonly const: true;
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly interval_minutes: {
+                readonly type: readonly ["integer", "null"];
+                readonly minimum: 60;
+                readonly maximum: 10080;
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly drill_id: {
+                type: string;
+                pattern: string;
+            };
+        };
+        required: ("mode" | "deployment_id" | "review_digest" | "confirm" | "backup_id" | "agent_id" | "country_code" | "target_deployment_id" | "restore_id" | "deploy_command_id" | "cutover_id" | "failback_id" | "interval_minutes" | "drill_id")[];
+        additionalProperties: boolean;
+    };
+    annotations: {
+        idempotentHint?: boolean;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        openWorldHint: boolean;
+    };
+} | {
+    name: "impreza_challenge_failover_domain" | "impreza_verify_failover_domain" | "impreza_get_failover_domain";
+    title: "Request a hostname TXT challenge" | "Verify customer hostname ownership" | "Read customer hostname verification";
+    description: "Create a 15-minute account-bound, one-use TXT challenge for the customer hostname on this running app. Publish the returned TXT yourself. Impreza only queries DNS. Manage scope; account credential without confinement." | "Query the exact ownership TXT through Impreza local uncached Unbound. A successful challenge is consumed once; verification lasts 24 hours and TXT is checked again before pairing, review and cutover. Manage scope; account credential without confinement." | "Read the pending TXT challenge or saved ownership verification for this account app. This read does not prove current DNS freshness. Read scope; account credential without confinement.";
+    inputSchema: {
+        type: "object";
+        properties: {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+            readonly challenge_id: {
+                readonly type: "string";
+                readonly pattern: "^fdc_[a-f0-9]{24}$";
+            };
+        } | {
+            readonly deployment_id: {
+                type: string;
+                pattern: string;
+            };
+        };
+        required: ("deployment_id" | "challenge_id")[];
+        additionalProperties: boolean;
+    };
+    annotations: {
+        openWorldHint: boolean;
+        idempotentHint?: boolean;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+    };
+})[];
+export declare function isFailoverTool(name: string): boolean;
+export declare function callFailoverTool(client: ImprezaClient, name: string, args: Record<string, unknown>): Promise<unknown>;

package/dist/failover-workflows.js

@@ -0,0 +1,100 @@
+import { z } from 'zod';
+const deployment = z.string().regex(/^dpl_(?:[a-f0-9]{16}|[a-f0-9]{24})$(?![\s\S])/);
+const cutover = z.string().regex(/^fov_[a-f0-9]{24}$(?![\s\S])/);
+const failback = z.string().regex(/^fbk_[a-f0-9]{24}$(?![\s\S])/);
+const drill = z.string().regex(/^fdr_[a-f0-9]{24}$(?![\s\S])/);
+const backup = z.string().regex(/^bkp_[a-f0-9]{16}$(?![\s\S])/);
+const command = z.string().regex(/^cmd_[a-f0-9]{16,32}$(?![\s\S])/);
+const digest = z.string().regex(/^[a-f0-9]{64}$(?![\s\S])/);
+const confirmation = { cutover_id: cutover, review_digest: digest, confirm: z.literal(true) };
+const agent = z.string().regex(/^agt_[a-f0-9]{16,32}$(?![\s\S])/);
+const countries = new Set('AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW'.split(' '));
+const schemas = {
+    impreza_challenge_failover_domain: z.object({ deployment_id: deployment }).strict(),
+    impreza_verify_failover_domain: z.object({ deployment_id: deployment, challenge_id: z.string().regex(/^fdc_[a-f0-9]{24}$/) }).strict(),
+    impreza_get_failover_domain: z.object({ deployment_id: deployment }).strict(),
+    impreza_declare_external_failover_country: z.object({ agent_id: agent, country_code: z.string().refine(v => countries.has(v), 'Use a valid ISO country code') }).strict(),
+    impreza_pair_failover_standby: z.object({ deployment_id: deployment, target_deployment_id: deployment, mode: z.literal('cold') }).strict().refine(v => v.deployment_id !== v.target_deployment_id, 'Choose a different standby deployment'),
+    impreza_get_failover_standby: z.object({ deployment_id: deployment }).strict(),
+    impreza_confirm_failover_sync: z.object({ deployment_id: deployment, backup_id: backup, restore_id: backup, deploy_command_id: command }).strict(),
+    impreza_prepare_failover: z.object({ deployment_id: deployment }).strict(),
+    impreza_get_failover: z.object({ cutover_id: cutover }).strict(),
+    impreza_apply_failover: z.object(confirmation).strict(),
+    impreza_retry_failover_activation: z.object(confirmation).strict(),
+    impreza_prepare_failback: z.object({ cutover_id: cutover }).strict(),
+    impreza_get_failback: z.object({ failback_id: failback }).strict(),
+    impreza_apply_failback: z.object({ failback_id: failback, review_digest: digest, confirm: z.literal(true) }).strict(),
+    impreza_set_failover_drill_policy: z.object({ deployment_id: deployment, interval_minutes: z.union([z.number().int().min(60).max(10080), z.null()]) }).strict(),
+    impreza_run_failover_drill: z.object({ deployment_id: deployment }).strict(),
+    impreza_get_failover_drill: z.object({ drill_id: drill }).strict(),
+};
+const dep = { type: 'string', pattern: '^dpl_(?:[a-f0-9]{16}|[a-f0-9]{24})$' };
+const fov = { type: 'string', pattern: '^fov_[a-f0-9]{24}$' };
+const bkp = { type: 'string', pattern: '^bkp_[a-f0-9]{16}$' };
+const fbk = { type: 'string', pattern: '^fbk_[a-f0-9]{24}$' };
+const fdr = { type: 'string', pattern: '^fdr_[a-f0-9]{24}$' };
+const apply = { cutover_id: fov, review_digest: { type: 'string', pattern: '^[a-f0-9]{64}$' }, confirm: { type: 'boolean', const: true } };
+const specs = [
+    ['impreza_declare_external_failover_country', 'Declare an external server country', 'Record your declared country for an online external agent before pairing. Country declared by you, not verified by Impreza. A changed agent IP requires a new declaration. Deploy scope.', { agent_id: { type: 'string', pattern: '^agt_[a-f0-9]{16,32}$' }, country_code: { type: 'string', pattern: '^[A-Z]{2}$' } }, ['agent_id', 'country_code'], false, false, true],
+    ['impreza_pair_failover_standby', 'Pair a cold standby', 'Pair two existing compatible apps on this account in different reported countries. Managed countries come from internal inventory; an external country is declared by the customer and is not verified by Impreza. Deploy scope. Does not provision servers, copy data or switch traffic. First create the reviewed catalog standby with impreza_deploy_catalog_app and standby:true, without domain or onion. The standby must have no public route or onion. Failover moves only a hostname in the managed zone or a public .onion: custom domains, private onion services, database bindings and dedicated servers are not supported.', { deployment_id: dep, target_deployment_id: dep, mode: { type: 'string', enum: ['cold'] } }, ['deployment_id', 'target_deployment_id', 'mode'], false, false, false],
+    ['impreza_get_failover_standby', 'Read a standby pair', 'Read the standby and its saved sync receipt. Read scope. A ready label is revalidated before cutover.', { deployment_id: dep }, ['deployment_id'], true, false, true],
+    ['impreza_confirm_failover_sync', 'Verify a cold standby copy', 'Verify the exact completed source backup, target restore and healthy redeploy caused by that restore. Manage scope. Does not copy data or activate traffic. Unrelated, stale or cross-account receipts are refused.', { deployment_id: dep, backup_id: bkp, restore_id: bkp, deploy_command_id: { type: 'string', pattern: '^cmd_[a-f0-9]{16,32}$' } }, ['deployment_id', 'backup_id', 'restore_id', 'deploy_command_id'], false, false, true],
+    ['impreza_prepare_failover', 'Review a cold failover', 'Create a 15-minute review for a planned failover. Deploy scope. Does not stop apps or switch traffic. Inspect source, target, hostname, countries, backup age and interruption risk before asking the user to confirm. Backup age is not a promise of zero loss.', { deployment_id: dep }, ['deployment_id'], false, false, false],
+    ['impreza_get_failover', 'Read a failover receipt', 'Read a reviewed failover and its saved progress receipt. Read scope. Accepted or activating is not verified completion; retain the cutover_id and read until verified or actionable failure.', { cutover_id: fov }, ['cutover_id'], true, false, true],
+    ['impreza_apply_failover', 'Apply a reviewed failover', 'After explicit user confirmation, submit confirm=true and the exact review_digest. Manage scope. Stops and fences the source writer, transfers the managed hostname and activates the restored standby; a public onion is sealed to the standby, published there and its old copy purged. Interrupts traffic and may lose changes since the copied backup. Acceptance only queues work; read the receipt to verify. Repeating the same accepted review returns its receipt.', apply, ['cutover_id', 'review_digest', 'confirm'], false, true, true],
+    ['impreza_retry_failover_activation', 'Retry reviewed target activation', 'Retry a failed target activation only after reviewing the existing failover receipt and obtaining explicit user confirmation. Manage scope. Requires the original digest and confirm=true; retries are bounded and revalidate ownership, route and DNS. Does not undo the source fence or create a new failover.', apply, ['cutover_id', 'review_digest', 'confirm'], false, true, false],
+    ['impreza_prepare_failback', 'Review a failback', 'Create a 15-minute review to fail back a verified cutover. Deploy scope. Does not start apps, copy data or switch traffic. The review lifts only the old primary fence and then makes the old primary the cold standby of the current one; the way back is an ordinary backup, restore, sync confirmation and reviewed cutover.', { cutover_id: fov }, ['cutover_id'], false, false, false],
+    ['impreza_get_failback', 'Read a failback receipt', 'Read a failback review and its receipt. Read scope. Releasing is not completion; retain the failback_id and read until inverted or an actionable failure.', { failback_id: fbk }, ['failback_id'], true, false, true],
+    ['impreza_apply_failback', 'Apply a reviewed failback', 'After explicit user confirmation, submit confirm=true and the exact review_digest. Manage scope. The old host releases exactly the fence of the verified cutover; its app stays stopped and unrouted, and the pair is inverted so the old primary becomes an unprovisioned standby. Moves no traffic. Next, back up the current primary, restore that backup into the old one, confirm the sync and review the return cutover. Repeating the same accepted review returns its receipt.', { failback_id: fbk, review_digest: { type: 'string', pattern: '^[a-f0-9]{64}$' }, confirm: { type: 'boolean', const: true } }, ['failback_id', 'review_digest', 'confirm'], false, true, true],
+    ['impreza_set_failover_drill_policy', 'Schedule standby drills', 'Set how often the cold standby is re-copied and verified, from 60 to 10080 minutes, or null to stop. Manage scope. Each drill backs up the primary, restores that copy over the standby in its country, waits for a healthy redeploy and records the verified copy; it never switches traffic. The first drill is one interval away.', { deployment_id: dep, interval_minutes: { type: ['integer', 'null'], minimum: 60, maximum: 10080 } }, ['deployment_id', 'interval_minutes'], false, true, true],
+    ['impreza_run_failover_drill', 'Run a standby drill now', 'Start a drill of the cold standby now. Manage scope. It backs up the primary, restores that copy over the standby, waits for the healthy redeploy the restore causes and records the verified copy with measured durations. The standby data is replaced; the primary is only read and no traffic moves. Read the drill until verified or failed.', { deployment_id: dep }, ['deployment_id'], false, true, false],
+    ['impreza_get_failover_drill', 'Read a standby drill', 'Read a standby drill, its current step and, when verified, the exact receipts and measured durations. Read scope. Durations describe that drill, not a recovery promise.', { drill_id: fdr }, ['drill_id'], true, false, true],
+];
+const V1_FAILOVER_TOOLS = specs.map(([name, title, description, properties, required, readOnlyHint, destructiveHint, idempotentHint]) => ({
+    name, title, description: description + ' Hosted MCP requires an account credential without resource confinement.',
+    inputSchema: { type: 'object', properties, required: [...required], additionalProperties: false },
+    annotations: { readOnlyHint, destructiveHint, openWorldHint: true, ...(readOnlyHint ? {} : { idempotentHint }) },
+}));
+const customerDomainEnabled = process.env.IMPREZA_CUSTOMER_DOMAIN_FAILOVER === '1';
+const customerDomainSpecs = [
+    ['impreza_challenge_failover_domain', 'Request a hostname TXT challenge', 'Create a 15-minute account-bound, one-use TXT challenge for the customer hostname on this running app. Publish the returned TXT yourself. Impreza only queries DNS. Manage scope; account credential without confinement.', { deployment_id: dep }, ['deployment_id'], false],
+    ['impreza_verify_failover_domain', 'Verify customer hostname ownership', 'Query the exact ownership TXT through Impreza local uncached Unbound. A successful challenge is consumed once; verification lasts 24 hours and TXT is checked again before pairing, review and cutover. Manage scope; account credential without confinement.', { deployment_id: dep, challenge_id: { type: 'string', pattern: '^fdc_[a-f0-9]{24}$' } }, ['deployment_id', 'challenge_id'], false],
+    ['impreza_get_failover_domain', 'Read customer hostname verification', 'Read the pending TXT challenge or saved ownership verification for this account app. This read does not prove current DNS freshness. Read scope; account credential without confinement.', { deployment_id: dep }, ['deployment_id'], true],
+];
+export const CUSTOMER_DOMAIN_FAILOVER_TOOLS = customerDomainSpecs.map(([name, title, description, properties, required, readOnlyHint]) => ({
+    name, title, description, inputSchema: { type: 'object', properties, required: [...required], additionalProperties: false },
+    annotations: { readOnlyHint, destructiveHint: false, ...(!readOnlyHint ? { idempotentHint: false } : {}), openWorldHint: true },
+}));
+export const FAILOVER_TOOLS = [...V1_FAILOVER_TOOLS, ...(customerDomainEnabled ? CUSTOMER_DOMAIN_FAILOVER_TOOLS : [])];
+const customerDomainNames = new Set(CUSTOMER_DOMAIN_FAILOVER_TOOLS.map(t => t.name));
+const routes = {
+    impreza_challenge_failover_domain: ['POST', '/v1/platform/deployments/{deployment_id}/failover-domain/challenge'],
+    impreza_verify_failover_domain: ['POST', '/v1/platform/deployments/{deployment_id}/failover-domain/verify'],
+    impreza_get_failover_domain: ['GET', '/v1/platform/deployments/{deployment_id}/failover-domain'],
+    impreza_declare_external_failover_country: ['POST', '/v1/platform/agents/{agent_id}/failover-jurisdiction'],
+    impreza_pair_failover_standby: ['POST', '/v1/platform/deployments/custom/{deployment_id}/failover-standby'],
+    impreza_get_failover_standby: ['GET', '/v1/platform/deployments/custom/{deployment_id}/failover-standby'],
+    impreza_confirm_failover_sync: ['POST', '/v1/platform/deployments/custom/{deployment_id}/failover-standby/confirm-sync'],
+    impreza_prepare_failover: ['POST', '/v1/platform/deployments/custom/{deployment_id}/prepare-failover'],
+    impreza_get_failover: ['GET', '/v1/platform/failover-cutovers/{cutover_id}'],
+    impreza_apply_failover: ['POST', '/v1/platform/failover-cutovers/{cutover_id}/apply'],
+    impreza_retry_failover_activation: ['POST', '/v1/platform/failover-cutovers/{cutover_id}/retry-activation'],
+    impreza_prepare_failback: ['POST', '/v1/platform/failover-cutovers/{cutover_id}/prepare-failback'],
+    impreza_get_failback: ['GET', '/v1/platform/failover-failbacks/{failback_id}'],
+    impreza_apply_failback: ['POST', '/v1/platform/failover-failbacks/{failback_id}/apply'],
+    impreza_set_failover_drill_policy: ['POST', '/v1/platform/deployments/custom/{deployment_id}/failover-standby/drill-policy'],
+    impreza_run_failover_drill: ['POST', '/v1/platform/deployments/custom/{deployment_id}/failover-standby/drills'],
+    impreza_get_failover_drill: ['GET', '/v1/platform/failover-drills/{drill_id}'],
+};
+export function isFailoverTool(name) { return Object.hasOwn(routes, name) && (!customerDomainNames.has(name) || customerDomainEnabled); }
+export async function callFailoverTool(client, name, args) {
+    if (!isFailoverTool(name))
+        throw new Error('Unknown failover workflow');
+    const route = routes[name], schema = schemas[name];
+    if (!route || !schema)
+        throw new Error('Unknown failover workflow');
+    const body = schema.parse(args);
+    const path = route[1].replace(/\{([a-z_]+)\}/g, (_, key) => { const value = body[key]; delete body[key]; return encodeURIComponent(String(value)); });
+    return route[0] === 'GET' ? client.get(path) : client.post(path, body);
+}
+//# sourceMappingURL=failover-workflows.js.map

package/dist/failover-workflows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failover-workflows.js","sourceRoot":"","sources":["../src/failover-workflows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,MAAM,UAAU,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnF,MAAM,OAAO,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC/D,MAAM,QAAQ,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAChE,MAAM,KAAK,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC7D,MAAM,MAAM,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAC9D,MAAM,OAAO,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAClE,MAAM,MAAM,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC1D,MAAM,YAAY,GAAC,EAAC,UAAU,EAAC,OAAO,EAAC,aAAa,EAAC,MAAM,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,CAAC;AACrF,MAAM,KAAK,GAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AAChE,MAAM,SAAS,GAAC,IAAI,GAAG,CAAC,4uBAA4uB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACjxB,MAAM,OAAO,GAA6B;IACzC,iCAAiC,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE;IAC/E,8BAA8B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,YAAY,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE;IAChI,2BAA2B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE;IACzE,yCAAyC,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,YAAY,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,8BAA8B,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE;IAChK,6BAA6B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,oBAAoB,EAAC,UAAU,EAAC,IAAI,EAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,aAAa,KAAG,CAAC,CAAC,oBAAoB,EAAC,uCAAuC,CAAC;IAC9N,4BAA4B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE;IAC1E,6BAA6B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,UAAU,EAAC,MAAM,EAAC,iBAAiB,EAAC,OAAO,EAAC,CAAC,CAAC,MAAM,EAAE;IACxI,wBAAwB,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE;IACtE,oBAAoB,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,OAAO,EAAC,CAAC,CAAC,MAAM,EAAE;IAC5D,sBAAsB,EAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE;IACtD,iCAAiC,EAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE;IACjE,wBAAwB,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,OAAO,EAAC,CAAC,CAAC,MAAM,EAAE;IAChE,oBAAoB,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE;IAC9D,sBAAsB,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,QAAQ,EAAC,aAAa,EAAC,MAAM,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE;IAC7G,iCAAiC,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,gBAAgB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE;IACxJ,0BAA0B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE;IACxE,0BAA0B,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAC,MAAM,EAAE;CAC9D,CAAC;AACF,MAAM,GAAG,GAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,qCAAqC,EAAC,CAAC;AACxE,MAAM,GAAG,GAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,oBAAoB,EAAC,CAAC;AACvD,MAAM,GAAG,GAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,oBAAoB,EAAC,CAAC;AACvD,MAAM,GAAG,GAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,oBAAoB,EAAC,CAAC;AACvD,MAAM,GAAG,GAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,oBAAoB,EAAC,CAAC;AACvD,MAAM,KAAK,GAAC,EAAC,UAAU,EAAC,GAAG,EAAC,aAAa,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,gBAAgB,EAAC,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,CAAC;AACxH,MAAM,KAAK,GAAC;IACX,CAAC,2CAA2C,EAAC,oCAAoC,EAAC,0LAA0L,EAAC,EAAC,QAAQ,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,uBAAuB,EAAC,EAAC,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,YAAY,EAAC,EAAC,EAAC,CAAC,UAAU,EAAC,cAAc,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC;IACva,CAAC,+BAA+B,EAAC,qBAAqB,EAAC,0mBAA0mB,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,oBAAoB,EAAC,GAAG,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC,MAAM,CAAC,EAAC,EAAC,EAAC,CAAC,eAAe,EAAC,sBAAsB,EAAC,MAAM,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,CAAC;IACpzB,CAAC,8BAA8B,EAAC,qBAAqB,EAAC,uGAAuG,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,EAAC,CAAC,eAAe,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC;IACpN,CAAC,+BAA+B,EAAC,4BAA4B,EAAC,qNAAqN,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,SAAS,EAAC,GAAG,EAAC,UAAU,EAAC,GAAG,EAAC,iBAAiB,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,uBAAuB,EAAC,EAAC,EAAC,CAAC,eAAe,EAAC,WAAW,EAAC,YAAY,EAAC,mBAAmB,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC;IACvd,CAAC,0BAA0B,EAAC,wBAAwB,EAAC,kQAAkQ,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,EAAC,CAAC,eAAe,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,CAAC;IAChX,CAAC,sBAAsB,EAAC,yBAAyB,EAAC,8LAA8L,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,EAAC,CAAC,YAAY,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC;IACjS,CAAC,wBAAwB,EAAC,2BAA2B,EAAC,6cAA6c,EAAC,KAAK,EAAC,CAAC,YAAY,EAAC,eAAe,EAAC,SAAS,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,CAAC;IACnkB,CAAC,mCAAmC,EAAC,kCAAkC,EAAC,kTAAkT,EAAC,KAAK,EAAC,CAAC,YAAY,EAAC,eAAe,EAAC,SAAS,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC;IAC3b,CAAC,0BAA0B,EAAC,mBAAmB,EAAC,iUAAiU,EAAC,EAAC,UAAU,EAAC,GAAG,EAAC,EAAC,CAAC,YAAY,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,CAAC;IACpa,CAAC,sBAAsB,EAAC,yBAAyB,EAAC,2JAA2J,EAAC,EAAC,WAAW,EAAC,GAAG,EAAC,EAAC,CAAC,aAAa,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC;IAChQ,CAAC,wBAAwB,EAAC,2BAA2B,EAAC,wdAAwd,EAAC,EAAC,WAAW,EAAC,GAAG,EAAC,aAAa,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,gBAAgB,EAAC,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,EAAC,CAAC,aAAa,EAAC,eAAe,EAAC,SAAS,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,CAAC;IACtrB,CAAC,mCAAmC,EAAC,yBAAyB,EAAC,sUAAsU,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,gBAAgB,EAAC,EAAC,IAAI,EAAC,CAAC,SAAS,EAAC,MAAM,CAAC,EAAC,OAAO,EAAC,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,EAAC,EAAC,CAAC,eAAe,EAAC,kBAAkB,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,IAAI,CAAC;IACnhB,CAAC,4BAA4B,EAAC,yBAAyB,EAAC,mVAAmV,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,EAAC,CAAC,eAAe,CAAC,EAAC,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC;IACnc,CAAC,4BAA4B,EAAC,sBAAsB,EAAC,0KAA0K,EAAC,EAAC,QAAQ,EAAC,GAAG,EAAC,EAAC,CAAC,UAAU,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,CAAC;CACnQ,CAAC;AACX,MAAM,iBAAiB,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,WAAW,EAAC,UAAU,EAAC,QAAQ,EAAC,YAAY,EAAC,eAAe,EAAC,cAAc,CAAC,EAAC,EAAE,CAAA,CAAC;IAC9H,IAAI,EAAC,KAAK,EAAC,WAAW,EAAC,WAAW,GAAC,0EAA0E;IAC7G,WAAW,EAAC,EAAC,IAAI,EAAC,QAAiB,EAAC,UAAU,EAAC,QAAQ,EAAC,CAAC,GAAG,QAAQ,CAAC,EAAC,oBAAoB,EAAC,KAAK,EAAC;IACjG,WAAW,EAAC,EAAC,YAAY,EAAC,eAAe,EAAC,aAAa,EAAC,IAAI,EAAC,GAAG,CAAC,YAAY,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,cAAc,EAAC,CAAC,EAAC;CACnG,CAAC,CAAC,CAAC;AACJ,MAAM,qBAAqB,GAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAG,GAAG,CAAC;AAC/E,MAAM,mBAAmB,GAAC;IACzB,CAAC,mCAAmC,EAAC,kCAAkC,EAAC,2NAA2N,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,EAAC,CAAC,eAAe,CAAC,EAAC,KAAK,CAAC;IAChV,CAAC,gCAAgC,EAAC,oCAAoC,EAAC,+PAA+P,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,YAAY,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,oBAAoB,EAAC,EAAC,EAAC,CAAC,eAAe,EAAC,cAAc,CAAC,EAAC,KAAK,CAAC;IAC5b,CAAC,6BAA6B,EAAC,qCAAqC,EAAC,0LAA0L,EAAC,EAAC,aAAa,EAAC,GAAG,EAAC,EAAC,CAAC,eAAe,CAAC,EAAC,IAAI,CAAC;CAClS,CAAC;AACX,MAAM,CAAC,MAAM,8BAA8B,GAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAC,KAAK,EAAC,WAAW,EAAC,UAAU,EAAC,QAAQ,EAAC,YAAY,CAAC,EAAC,EAAE,CAAA,CAAC;IACjI,IAAI,EAAC,KAAK,EAAC,WAAW,EAAC,WAAW,EAAC,EAAC,IAAI,EAAC,QAAiB,EAAC,UAAU,EAAC,QAAQ,EAAC,CAAC,GAAG,QAAQ,CAAC,EAAC,oBAAoB,EAAC,KAAK,EAAC;IACxH,WAAW,EAAC,EAAC,YAAY,EAAC,eAAe,EAAC,KAAK,EAAC,GAAG,CAAC,CAAC,YAAY,CAAA,CAAC,CAAA,EAAC,cAAc,EAAC,KAAK,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,aAAa,EAAC,IAAI,EAAC;CAChH,CAAC,CAAC,CAAC;AACJ,MAAM,CAAC,MAAM,cAAc,GAAC,CAAC,GAAG,iBAAiB,EAAC,GAAG,CAAC,qBAAqB,CAAA,CAAC,CAAA,8BAA8B,CAAA,CAAC,CAAA,EAAE,CAAC,CAAC,CAAC;AAChH,MAAM,mBAAmB,GAAC,IAAI,GAAG,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACjF,MAAM,MAAM,GAAgC;IAC3C,iCAAiC,EAAC,CAAC,MAAM,EAAC,oEAAoE,CAAC;IAC/G,8BAA8B,EAAC,CAAC,MAAM,EAAC,iEAAiE,CAAC;IACzG,2BAA2B,EAAC,CAAC,KAAK,EAAC,0DAA0D,CAAC;IAC9F,yCAAyC,EAAC,CAAC,MAAM,EAAC,sDAAsD,CAAC;IACzG,6BAA6B,EAAC,CAAC,MAAM,EAAC,kEAAkE,CAAC;IACzG,4BAA4B,EAAC,CAAC,KAAK,EAAC,kEAAkE,CAAC;IACvG,6BAA6B,EAAC,CAAC,MAAM,EAAC,+EAA+E,CAAC;IACtH,wBAAwB,EAAC,CAAC,MAAM,EAAC,kEAAkE,CAAC;IACpG,oBAAoB,EAAC,CAAC,KAAK,EAAC,6CAA6C,CAAC;IAC1E,sBAAsB,EAAC,CAAC,MAAM,EAAC,mDAAmD,CAAC;IACnF,iCAAiC,EAAC,CAAC,MAAM,EAAC,8DAA8D,CAAC;IACzG,wBAAwB,EAAC,CAAC,MAAM,EAAC,8DAA8D,CAAC;IAChG,oBAAoB,EAAC,CAAC,KAAK,EAAC,+CAA+C,CAAC;IAC5E,sBAAsB,EAAC,CAAC,MAAM,EAAC,qDAAqD,CAAC;IACrF,iCAAiC,EAAC,CAAC,MAAM,EAAC,+EAA+E,CAAC;IAC1H,0BAA0B,EAAC,CAAC,MAAM,EAAC,yEAAyE,CAAC;IAC7G,0BAA0B,EAAC,CAAC,KAAK,EAAC,yCAAyC,CAAC;CAC5E,CAAC;AACF,MAAM,UAAU,cAAc,CAAC,IAAW,IAAU,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,IAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAa,CAAC,IAAE,qBAAqB,CAAC,CAAC,CAAA,CAAC;AACzJ,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAoB,EAAC,IAAW,EAAC,IAA2B;IAClG,IAAG,CAAC,cAAc,CAAC,IAAI,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACtE,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,EAAC,MAAM,GAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAG,CAAC,KAAK,IAAI,CAAC,MAAM;QAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;IACxD,MAAM,IAAI,GAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAC,CAAC,CAAQ,EAAC,GAAU,EAAC,EAAE,GAAC,MAAM,KAAK,GAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACxJ,OAAO,KAAK,CAAC,CAAC,CAAC,KAAG,KAAK,CAAA,CAAC,CAAA,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,IAAI,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;AACjE,CAAC"}

package/dist/host-inventory-privacy.d.ts

@@ -0,0 +1 @@
+export declare function hostInventoryForMcp(payload: unknown, includeSshFingerprints?: boolean): unknown;

package/dist/host-inventory-privacy.js

@@ -0,0 +1,16 @@
+// Project only MCP output; preserve the REST object and its strict output schema.
+export function hostInventoryForMcp(payload, includeSshFingerprints = false) {
+    if (includeSshFingerprints || !payload || typeof payload !== 'object')
+        return payload;
+    const view = payload;
+    if (!view.facts || typeof view.facts !== 'object')
+        return payload;
+    const facts = view.facts;
+    if (!facts.ssh || typeof facts.ssh !== 'object')
+        return payload;
+    const ssh = facts.ssh;
+    if (!ssh.value || typeof ssh.value !== 'object' || Array.isArray(ssh.value))
+        return payload;
+    return { ...view, facts: { ...facts, ssh: { ...ssh, value: { ...ssh.value, fingerprints: [] } } } };
+}
+//# sourceMappingURL=host-inventory-privacy.js.map

package/dist/host-inventory-privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-inventory-privacy.js","sourceRoot":"","sources":["../src/host-inventory-privacy.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,sBAAsB,GAAG,KAAK;IAClF,IAAI,sBAAsB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACtF,MAAM,IAAI,GAAG,OAAkC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAgC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,GAA8B,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5F,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AACtG,CAAC"}