log10x-mcp 1.30.21 → 1.30.23

package/build/tools/advise-install.d.ts

@@ -7,8 +7,10 @@
  *
  *   1. Asks the next missing question (returning markdown that the agent
  *      surfaces to the user), or
- *   2. Once all answers are in, emits a concrete install plan with the
- *      license JWT pre-filled (auto-fetched from the gateway if absent).
+ *   2. Once all answers are in, emits a concrete install plan. By default
+ *      the plan carries no licence and the engine runs its built-in
+ *      evaluation licence; a signed-in, pasted or demo JWT is wired in
+ *      only when the caller asks for one via `license_source`.
  *
  * The five decisions, by dependency order:
  *
@@ -16,26 +18,31 @@
  *       "plug into existing forwarder" (Receiver). The biggest fork.
  *   Q2. (Receiver only) Which forwarder — auto-uses the snapshot's
  *       detected forwarder when there's exactly one; asks if multiple.
- *   Q3. Backend — where TenXSummary metrics go. Default suggestion:
- *       log10x SaaS unless airgapped or a backend agent is already
- *       detected in the cluster.
+ *   Q3. Backend — where TenXSummary metrics go: the user's own TSDB
+ *       (prometheus, datadog, elastic, cloudwatch). Backends whose agent
+ *       discovery detected are listed first. The log10x-hosted backend is
+ *       for the public demo, not customer installs, so it is never offered
+ *       or defaulted; it is accepted only when passed explicitly, and then
+ *       needs a user licence (signin / paste) to receive anything.
  *   Q4. (Backend ≠ log10x only) Airgapped — opt-in for CISO-friction
  *       reduction. Skipped silently when backend=log10x (SaaS implies
  *       not-airgapped).
- *   Q5. License — auto-fetched from `/api/v1/license/demo` if the user
- *       hasn't signed in. When `airgapped=true` and the only available
- *       license is a demo, the wizard surfaces a soft warning that
- *       demo licenses can't run airgapped (engine downgrades silently
- *       to online mode), and offers sign-in or proceed-without-airgapped.
+ *   Q5. License — not asked. The default (`license_source: "builtin"`)
+ *       puts no licence in the plan: the engine runs its built-in
+ *       evaluation licence (10 nodes, 30 days from each start,
+ *       airgapped), so there is nothing to mint, store or mount.
+ *       `signin` (user-scoped JWT), `paste` (a JWT the user holds) and
+ *       `demo` (1-node, 14-day JWT) stay available as explicit choices,
+ *       and each adds a step that creates the licence Secret.
  *
  * State retention is via WizardSession on the snapshot store — the
  * MCP itself is stateless per call, but the snapshot store's 30-min TTL
  * gives the agent a coherent conversation thread.
  *
- * **Credential note.** The wizard mints a LICENSE JWT (not an api_key)
- * for the install plan. The license JWT is the credential the deployed
- * engine pods consume — it goes into the helm chart's `log10xLicenseJwt`
- * value. The wizard never touches the user's api_key; the api_key stays
+ * **Credential note.** When asked to (`signin` / `demo`), the wizard mints
+ * a LICENSE JWT (not an api_key) for the install plan. The license JWT is
+ * the credential the deployed engine pods consume: it goes into the helm
+ * chart's `log10xLicenseJwt` value or a mounted Secret. The wizard never touches the user's api_key; the api_key stays
  * with the MCP for user-action calls (queries, env management, etc.).
  * See `../lib/auth-model.ts` for the full split.
  */
@@ -60,7 +67,7 @@ export declare const adviseInstallSchema: {
         secretName: string;
         plainValues?: Record<string, string> | undefined;
     }>>>;
-    license_source: z.ZodDefault<z.ZodEnum<["signin", "demo", "paste"]>>;
+    license_source: z.ZodOptional<z.ZodEnum<["builtin", "signin", "demo", "paste"]>>;
     license_jwt_paste: z.ZodOptional<z.ZodString>;
     namespace: z.ZodOptional<z.ZodString>;
     release_name: z.ZodOptional<z.ZodString>;
@@ -82,13 +89,12 @@ declare const schemaObj: z.ZodObject<{
         secretName: string;
         plainValues?: Record<string, string> | undefined;
     }>>>;
-    license_source: z.ZodDefault<z.ZodEnum<["signin", "demo", "paste"]>>;
+    license_source: z.ZodOptional<z.ZodEnum<["builtin", "signin", "demo", "paste"]>>;
     license_jwt_paste: z.ZodOptional<z.ZodString>;
     namespace: z.ZodOptional<z.ZodString>;
     release_name: z.ZodOptional<z.ZodString>;
     action: z.ZodOptional<z.ZodEnum<["install", "verify", "teardown", "all"]>>;
 }, "strip", z.ZodTypeAny, {
-    license_source: "demo" | "signin" | "paste";
     namespace?: string | undefined;
     app?: "reporter" | "receiver" | undefined;
     forwarder?: "vector" | "fluentbit" | "fluentd" | "filebeat" | "logstash" | "otel-collector" | undefined;
@@ -96,6 +102,7 @@ declare const schemaObj: z.ZodObject<{
     snapshot_id?: string | undefined;
     backends?: string[] | undefined;
     airgapped?: boolean | undefined;
+    license_source?: "demo" | "builtin" | "signin" | "paste" | undefined;
     license_jwt_paste?: string | undefined;
     release_name?: string | undefined;
     backend_credentials?: Record<string, {
@@ -110,7 +117,7 @@ declare const schemaObj: z.ZodObject<{
     snapshot_id?: string | undefined;
     backends?: string[] | undefined;
     airgapped?: boolean | undefined;
-    license_source?: "demo" | "signin" | "paste" | undefined;
+    license_source?: "demo" | "builtin" | "signin" | "paste" | undefined;
     license_jwt_paste?: string | undefined;
     release_name?: string | undefined;
     backend_credentials?: Record<string, {