nandi-proxmox-mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 NANDI Services
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,60 @@
+# nandi-proxmox-mcp
+
+Open source MCP Server for Proxmox, powered by NANDI Services.
+
+`nandi-proxmox-mcp` lets users connect to their own Proxmox server and operate nodes, VMs, and CT/LXC securely via MCP tools in VS Code.
+
+## Important: API token ownership
+The Proxmox API token is **not** delivered by npm, VS Code, or this MCP package.
+Each user must create a token in their own Proxmox environment with minimum ACL permissions.
+
+## 5-minute Quickstart (Windows)
+1. Install Node.js 20+.
+2. Run `npm install -g nandi-proxmox-mcp`.
+3. Run `nandi-proxmox-mcp setup` and complete guided onboarding.
+4. Run `nandi-proxmox-mcp doctor --check mcp-config,nodes,vms,cts,node-status,remote-op`.
+5. Open VS Code and confirm MCP server is registered (`.vscode/mcp.json`).
+
+Alternative direct run:
+- `npx nandi-proxmox-mcp setup`
+- `npx nandi-proxmox-mcp run`
+
+## VS Code / Codex plug-and-play paths
+- Custom server: use `.vscode/mcp.json` (root `servers` format).
+- Manifest install: use `mcp-manifest.json`.
+- User-level config template: `templates/vscode.user.mcp.template.json`.
+
+## MCP tools included
+- Inventory: `listNodes`, `listVMs`, `listContainers`
+- Status: `getNodeStatus`, `getVMStatus`, `getContainerStatus`
+- Control: `startVM`, `stopVM`, `startContainer`, `stopContainer`
+- CT operations: `execInContainer`, `dockerPsInContainer`, `dockerLogsInContainer`, `runRemoteDiagnostic`, `sshBatchDiagnostics`
+
+## Security principles
+- No hardcoded host/token secrets in versioned files.
+- Local sensitive config generated in `.nandi-proxmox-mcp/config.json`.
+- Templates with placeholders only.
+- CI includes secret scanning and dependency scanning.
+
+## Docs
+- [Quickstart](docs/QUICKSTART.md)
+- [Windows Installation](docs/INSTALL_WINDOWS.md)
+- [Proxmox Token + ACL Setup](docs/PROXMOX_SETUP.md)
+- [SSH Setup and Batch Validation](docs/SSH_SETUP.md)
+- [VS Code MCP Setup](docs/VSCODE_SETUP.md)
+- [Marketplace Go-Live](docs/MARKETPLACE_GO_LIVE.md)
+- [Security Guide](docs/SECURITY.md)
+- [Troubleshooting](docs/TROUBLESHOOTING.md)
+- [FAQ](docs/FAQ.md)
+- [CI Secrets Policy](docs/CI_SECRETS.md)
+
+## Development
+- `npm ci`
+- `npm run lint`
+- `npm run typecheck`
+- `npm test`
+- `npm run build`
+
+## License
+MIT. See LICENSE.
+

package/dist/src/cli/doctor.d.ts

@@ -0,0 +1,2 @@
+export declare const runDoctor: (checksArg?: string) => Promise<void>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/src/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/cli/doctor.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,SAAS,GAAU,YAAY,MAAM,KAAG,OAAO,CAAC,IAAI,CA4HhE,CAAC"}

package/dist/src/cli/doctor.js

@@ -0,0 +1,127 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { loadFileConfig } from "../config/fileConfig.js";
+import { ProxmoxClient } from "../proxmox/client.js";
+import { printReport } from "./report.js";
+import { runSshBatch } from "../ssh/sshClient.js";
+import { pctExec } from "../ssh/pctExec.js";
+import { normalizeMcpConfigDocument, validateMcpConfig, validateMcpManifest } from "../config/installDescriptor.js";
+const parseRequestedChecks = (value) => {
+    if (!value) {
+        return new Set(["mcp-config", "nodes", "vms", "cts", "node-status", "remote-op"]);
+    }
+    return new Set(value.split(",").map((segment) => segment.trim()).filter(Boolean));
+};
+export const runDoctor = async (checksArg) => {
+    const checks = parseRequestedChecks(checksArg);
+    const report = [];
+    const config = await loadFileConfig();
+    const client = new ProxmoxClient(config);
+    let firstNode = "";
+    if (checks.has("mcp-config")) {
+        try {
+            const mcpPath = resolve(process.cwd(), ".vscode", "mcp.json");
+            const manifestPath = resolve(process.cwd(), "mcp-manifest.json");
+            const mcpRaw = await readFile(mcpPath, "utf8");
+            const normalized = normalizeMcpConfigDocument(mcpRaw);
+            const configValidation = validateMcpConfig(normalized.normalized);
+            if (!configValidation.ok) {
+                throw new Error(configValidation.errors.join(" | "));
+            }
+            const manifestRaw = await readFile(manifestPath, "utf8");
+            const manifestValidation = validateMcpManifest(JSON.parse(manifestRaw));
+            if (!manifestValidation.ok) {
+                throw new Error(`Manifest invalid: ${manifestValidation.errors.join(" | ")}`);
+            }
+            report.push({ check: "mcpConfig", ok: true, detail: "MCP config and manifest are valid" });
+        }
+        catch (error) {
+            report.push({ check: "mcpConfig", ok: false, detail: error instanceof Error ? error.message : "Unknown error" });
+        }
+    }
+    if (checks.has("nodes")) {
+        try {
+            const nodes = await client.listNodes();
+            firstNode = nodes[0]?.node ?? "";
+            report.push({ check: "listNodes", ok: true, detail: `Found ${nodes.length} nodes` });
+        }
+        catch (error) {
+            report.push({
+                check: "listNodes",
+                ok: false,
+                detail: error instanceof Error ? error.message : "Unknown error"
+            });
+        }
+    }
+    if (checks.has("vms") && firstNode) {
+        try {
+            const vms = await client.listVms(firstNode);
+            report.push({ check: "listVMs", ok: true, detail: `Found ${vms.length} VMs on ${firstNode}` });
+        }
+        catch (error) {
+            report.push({ check: "listVMs", ok: false, detail: error instanceof Error ? error.message : "Unknown error" });
+        }
+    }
+    if (checks.has("cts") && firstNode) {
+        try {
+            const cts = await client.listContainers(firstNode);
+            report.push({ check: "listContainers", ok: true, detail: `Found ${cts.length} CTs on ${firstNode}` });
+        }
+        catch (error) {
+            report.push({ check: "listContainers", ok: false, detail: error instanceof Error ? error.message : "Unknown error" });
+        }
+    }
+    if (checks.has("node-status") && firstNode) {
+        try {
+            const status = await client.getNodeStatus(firstNode);
+            const keyCount = Object.keys(status).length;
+            report.push({ check: "getNodeStatus", ok: true, detail: `Status keys: ${keyCount}` });
+        }
+        catch (error) {
+            report.push({ check: "getNodeStatus", ok: false, detail: error instanceof Error ? error.message : "Unknown error" });
+        }
+    }
+    if (checks.has("remote-op")) {
+        try {
+            const sshRes = await runSshBatch({
+                host: config.sshHost,
+                port: config.sshPort,
+                user: config.sshUser,
+                keyPath: config.sshKeyPath,
+                timeoutMs: 15_000
+            }, "echo ssh-batch-ok");
+            if (sshRes.exitCode !== 0) {
+                throw new Error(`SSH batch failed. Interactive may still work. stderr=${sshRes.stderr.trim()}`);
+            }
+            report.push({ check: "sshBatch", ok: true, detail: "Batch SSH succeeded" });
+        }
+        catch (error) {
+            report.push({ check: "sshBatch", ok: false, detail: error instanceof Error ? error.message : "Unknown error" });
+        }
+        const ctid = Number.parseInt(process.env.NANDI_DOCTOR_CTID ?? "0", 10);
+        if (Number.isFinite(ctid) && ctid > 0) {
+            try {
+                await pctExec({
+                    host: config.sshHost,
+                    port: config.sshPort,
+                    user: config.sshUser,
+                    keyPath: config.sshKeyPath,
+                    timeoutMs: 20_000
+                }, ctid, "echo ct-remote-ok");
+                report.push({ check: "pctExec", ok: true, detail: `pct exec succeeded for CT ${ctid}` });
+            }
+            catch (error) {
+                report.push({ check: "pctExec", ok: false, detail: error instanceof Error ? error.message : "Unknown error" });
+            }
+        }
+        else {
+            report.push({
+                check: "pctExec",
+                ok: false,
+                detail: "Set NANDI_DOCTOR_CTID environment variable to validate CT remote operation"
+            });
+        }
+    }
+    printReport("Doctor report", report);
+};
+//# sourceMappingURL=doctor.js.map

package/dist/src/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAEpH,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAe,EAAE;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,SAAkB,EAAiB,EAAE;IACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAClE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAC,CAAC;YACnF,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,MAAM,WAAW,SAAS,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,MAAM,WAAW,SAAS,EAAE,EAAE,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B;gBACE,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,OAAO,EAAE,MAAM,CAAC,UAAU;gBAC1B,SAAS,EAAE,MAAM;aAClB,EACD,mBAAmB,CACpB,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClG,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,CACX;oBACE,IAAI,EAAE,MAAM,CAAC,OAAO;oBACpB,IAAI,EAAE,MAAM,CAAC,OAAO;oBACpB,IAAI,EAAE,MAAM,CAAC,OAAO;oBACpB,OAAO,EAAE,MAAM,CAAC,UAAU;oBAC1B,SAAS,EAAE,MAAM;iBAClB,EACD,IAAI,EACJ,mBAAmB,CACpB,CAAC;gBAEF,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,SAAS;gBAChB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,4EAA4E;aACrF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC,CAAC"}

package/dist/src/cli/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/src/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../../src/cli/main.ts"],"names":[],"mappings":""}

package/dist/src/cli/main.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { runSetup } from "./setup.js";
+import { runDoctor } from "./doctor.js";
+import { loadFileConfig } from "../config/fileConfig.js";
+import { startMcpServer } from "../server/mcpServer.js";
+const program = new Command();
+program.name("nandi-proxmox-mcp").description("Proxmox MCP server - open source, powered by NANDI Services").version("0.1.0");
+program
+    .command("setup")
+    .description("Run interactive Windows-first setup")
+    .action(async () => {
+    await runSetup();
+});
+program
+    .command("doctor")
+    .description("Run post-install checks")
+    .option("--check <checks>", "Comma-separated checks: mcp-config,nodes,vms,cts,node-status,remote-op")
+    .action(async (options) => {
+    await runDoctor(options.check);
+});
+program
+    .command("run")
+    .description("Run MCP server over stdio")
+    .action(async () => {
+    const config = await loadFileConfig();
+    await startMcpServer(config);
+});
+void program.parseAsync(process.argv);
+//# sourceMappingURL=main.js.map

package/dist/src/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/cli/main.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,WAAW,CAAC,6DAA6D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAE9H,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,QAAQ,EAAE,CAAC;AACnB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,yBAAyB,CAAC;KACtC,MAAM,CAAC,kBAAkB,EAAE,wEAAwE,CAAC;KACpG,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;IAC5C,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;IACtC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEL,KAAK,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/src/cli/report.d.ts

@@ -0,0 +1,7 @@
+export type ReportItem = {
+    check: string;
+    ok: boolean;
+    detail: string;
+};
+export declare const printReport: (title: string, items: ReportItem[]) => void;
+//# sourceMappingURL=report.d.ts.map

package/dist/src/cli/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/cli/report.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,EAAE,OAAO,UAAU,EAAE,KAAG,IAQhE,CAAC"}

package/dist/src/cli/report.js

@@ -0,0 +1,9 @@
+export const printReport = (title, items) => {
+    process.stdout.write(`\n${title}\n`);
+    process.stdout.write(`${"-".repeat(title.length)}\n`);
+    for (const item of items) {
+        const light = item.ok ? "GREEN" : "RED";
+        process.stdout.write(`[${light}] ${item.check}: ${item.detail}\n`);
+    }
+};
+//# sourceMappingURL=report.js.map

package/dist/src/cli/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/cli/report.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,KAAmB,EAAQ,EAAE;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACrE,CAAC;AACH,CAAC,CAAC"}

package/dist/src/cli/setup.d.ts

@@ -0,0 +1,2 @@
+export declare const runSetup: () => Promise<void>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/src/cli/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/cli/setup.ts"],"names":[],"mappings":"AA+JA,eAAO,MAAM,QAAQ,QAAa,OAAO,CAAC,IAAI,CAsB7C,CAAC"}

package/dist/src/cli/setup.js

@@ -0,0 +1,150 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { ProxmoxClient } from "../proxmox/client.js";
+import { runtimeConfigSchema } from "../config/validate.js";
+import { printReport } from "./report.js";
+import { runSshBatch } from "../ssh/sshClient.js";
+import { buildWorkspaceMcpConfig, normalizeMcpConfigDocument, validateMcpConfig } from "../config/installDescriptor.js";
+const defaultConfigDir = resolve(process.cwd(), ".nandi-proxmox-mcp");
+const defaultConfigPath = resolve(defaultConfigDir, "config.json");
+const ask = async () => {
+    const rl = createInterface({ input, output });
+    const proxmoxHost = (await rl.question("Proxmox host (IP/FQDN): ")).trim();
+    const proxmoxPort = Number.parseInt((await rl.question("Proxmox port [8006]: ")).trim() || "8006", 10);
+    const proxmoxUser = (await rl.question("Proxmox user (without realm, e.g. svc_mcp): ")).trim();
+    const proxmoxRealm = (await rl.question("Proxmox realm [pve]: ")).trim() || "pve";
+    const tokenName = (await rl.question("API token name (e.g. nandi-mcp): ")).trim();
+    const tokenSecret = (await rl.question("API token secret: ")).trim();
+    const allowInsecureTls = ((await rl.question("Allow insecure TLS for self-signed cert? [no]: ")).trim() || "no")
+        .toLowerCase()
+        .startsWith("y");
+    const sshHost = (await rl.question("SSH host [same as Proxmox host]: ")).trim() || proxmoxHost;
+    const sshPort = Number.parseInt((await rl.question("SSH port [22]: ")).trim() || "22", 10);
+    const sshUser = (await rl.question("SSH user [root]: ")).trim() || "root";
+    const sshKeyPath = (await rl.question("SSH private key path [~/.ssh/id_ed25519]: ")).trim() ||
+        resolve(process.env.USERPROFILE ?? process.env.HOME ?? ".", ".ssh", "id_ed25519");
+    rl.close();
+    return runtimeConfigSchema.parse({
+        proxmoxHost,
+        proxmoxPort,
+        proxmoxUser,
+        proxmoxRealm,
+        tokenName,
+        tokenSecret,
+        allowInsecureTls,
+        sshHost,
+        sshPort,
+        sshUser,
+        sshKeyPath
+    });
+};
+const validatePrereqs = async () => {
+    const checks = [];
+    checks.push({
+        check: "Node.js",
+        ok: Number(process.versions.node.split(".")[0]) >= 20,
+        detail: `Detected ${process.versions.node}`
+    });
+    const npmUserAgent = process.env.npm_config_user_agent;
+    checks.push({
+        check: "npm",
+        ok: Boolean(npmUserAgent),
+        detail: npmUserAgent ?? "npm user agent not detected"
+    });
+    return checks;
+};
+const writeVscodeConfig = async () => {
+    const vscodeDir = resolve(process.cwd(), ".vscode");
+    await mkdir(vscodeDir, { recursive: true });
+    const mcpPath = resolve(vscodeDir, "mcp.json");
+    const resolvedConfigPath = resolve(process.cwd(), ".nandi-proxmox-mcp", "config.json");
+    let config = buildWorkspaceMcpConfig(resolvedConfigPath);
+    let migratedLegacy = false;
+    try {
+        const existing = await readFile(mcpPath, "utf8");
+        const normalized = normalizeMcpConfigDocument(existing);
+        config = normalized.normalized;
+        migratedLegacy = normalized.migratedLegacy;
+    }
+    catch {
+        // No previous config or invalid JSON, fall back to generated structure.
+    }
+    config.servers["nandi-proxmox-mcp"] = {
+        command: "npx",
+        args: ["nandi-proxmox-mcp", "run"],
+        env: {
+            NANDI_PROXMOX_CONFIG: resolvedConfigPath
+        }
+    };
+    const validation = validateMcpConfig(config);
+    if (!validation.ok) {
+        throw new Error(`Generated MCP config failed validation: ${validation.errors.join(" | ")}`);
+    }
+    await writeFile(mcpPath, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+    if (migratedLegacy) {
+        process.stdout.write("Migrated legacy `.vscode/mcp.json` format to root `servers` format.\n");
+    }
+};
+const connectivityChecks = async (config) => {
+    const client = new ProxmoxClient(config);
+    const checks = [];
+    try {
+        const nodes = await client.listNodes();
+        checks.push({
+            check: "Proxmox API token connectivity",
+            ok: true,
+            detail: `Connected. Nodes discovered: ${nodes.length}`
+        });
+    }
+    catch (error) {
+        checks.push({
+            check: "Proxmox API token connectivity",
+            ok: false,
+            detail: error instanceof Error ? error.message : "Unknown Proxmox connectivity error"
+        });
+    }
+    try {
+        const ssh = await runSshBatch({
+            host: config.sshHost,
+            port: config.sshPort,
+            user: config.sshUser,
+            keyPath: config.sshKeyPath,
+            timeoutMs: 12_000
+        }, "echo ssh-batch-ok");
+        checks.push({
+            check: "SSH batch (non-interactive)",
+            ok: ssh.exitCode === 0 && ssh.stdout.includes("ssh-batch-ok"),
+            detail: ssh.exitCode === 0 ? "Batch SSH command succeeded" : ssh.stderr.trim()
+        });
+    }
+    catch (error) {
+        checks.push({
+            check: "SSH batch (non-interactive)",
+            ok: false,
+            detail: error instanceof Error ? error.message : "Unknown SSH batch error"
+        });
+    }
+    return checks;
+};
+export const runSetup = async () => {
+    process.stdout.write("nandi-proxmox-mcp setup wizard\n");
+    process.stdout.write("The API token is NOT provided by npm or MCP. You must create it in your own Proxmox server.\n\n");
+    const prereq = await validatePrereqs();
+    printReport("Prerequisites", prereq);
+    const config = await ask();
+    await mkdir(defaultConfigDir, { recursive: true });
+    await writeFile(defaultConfigPath, `${JSON.stringify(config, null, 2)}\n`, "utf8");
+    await writeVscodeConfig();
+    const connectivity = await connectivityChecks(config);
+    printReport("Connectivity", connectivity);
+    const allOk = [...prereq, ...connectivity].every((item) => item.ok);
+    process.stdout.write(`\nFinal status: ${allOk ? "GREEN" : "RED"}\n`);
+    process.stdout.write(`Local config created at: ${defaultConfigPath}\n`);
+    process.stdout.write("\nNext steps for VS Code/Codex:\n");
+    process.stdout.write("1. Open MCP settings and verify `nandi-proxmox-mcp` appears.\n");
+    process.stdout.write("2. If needed, use `.vscode/mcp.json` generated by setup as your custom server source.\n");
+    process.stdout.write("3. Run `nandi-proxmox-mcp doctor --check mcp-config,nodes,vms,cts,node-status,remote-op`.\n");
+};
+//# sourceMappingURL=setup.js.map

package/dist/src/cli/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/cli/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,iBAAiB,EAElB,MAAM,gCAAgC,CAAC;AAExC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACtE,MAAM,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAEnE,MAAM,GAAG,GAAG,KAAK,IAA4B,EAAE;IAC7C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAE9C,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;IAClF,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;SAC7G,WAAW,EAAE;SACb,UAAU,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC;IAC1E,MAAM,UAAU,GACd,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC,CAAC,IAAI,EAAE;QACxE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAEpF,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,OAAO,mBAAmB,CAAC,KAAK,CAAC;QAC/B,WAAW;QACX,WAAW;QACX,WAAW;QACX,YAAY;QACZ,SAAS;QACT,WAAW;QACX,gBAAgB;QAChB,OAAO;QACP,OAAO;QACP,OAAO;QACP,UAAU;KACX,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,KAAK,IAA2B,EAAE;IACxD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC;QACV,KAAK,EAAE,SAAS;QAChB,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACrD,MAAM,EAAE,YAAY,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;KAC5C,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACvD,MAAM,CAAC,IAAI,CAAC;QACV,KAAK,EAAE,KAAK;QACZ,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC;QACzB,MAAM,EAAE,YAAY,IAAI,6BAA6B;KACtD,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;IAEvF,IAAI,MAAM,GAAkB,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;IACxE,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC;QAC/B,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG;QACpC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC;QAClC,GAAG,EAAE;YACH,oBAAoB,EAAE,kBAAkB;SACzC;KACF,CAAC;IAEF,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEzE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAChG,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAqB,EAAyB,EAAE;IAChF,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,gCAAgC;YACvC,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,gCAAgC,KAAK,CAAC,MAAM,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,gCAAgC;YACvC,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oCAAoC;SACtF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B;YACE,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,OAAO,EAAE,MAAM,CAAC,UAAU;YAC1B,SAAS,EAAE,MAAM;SAClB,EACD,mBAAmB,CACpB,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,6BAA6B;YACpC,EAAE,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC7D,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;SAC/E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,6BAA6B;YACpC,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;IAExH,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,iBAAiB,EAAE,CAAC;IAE1B,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACtD,WAAW,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAE1C,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,iBAAiB,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAChH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC;AACtH,CAAC,CAAC"}

package/dist/src/config/env.d.ts

@@ -0,0 +1,3 @@
+import { type RuntimeConfig } from "./validate.js";
+export declare const loadEnvConfig: () => RuntimeConfig;
+//# sourceMappingURL=env.d.ts.map

package/dist/src/config/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAGxE,eAAO,MAAM,aAAa,QAAO,aAgBhC,CAAC"}

package/dist/src/config/env.js

@@ -0,0 +1,19 @@
+import { runtimeConfigSchema } from "./validate.js";
+import { parseBool, parseInteger } from "../utils/parsing.js";
+export const loadEnvConfig = () => {
+    const candidate = {
+        proxmoxHost: process.env.PROXMOX_HOST,
+        proxmoxPort: parseInteger(process.env.PROXMOX_PORT, 8006),
+        proxmoxUser: process.env.PROXMOX_USER,
+        proxmoxRealm: process.env.PROXMOX_REALM,
+        tokenName: process.env.PROXMOX_TOKEN_NAME,
+        tokenSecret: process.env.PROXMOX_TOKEN_SECRET,
+        allowInsecureTls: parseBool(process.env.PROXMOX_ALLOW_INSECURE_TLS, false),
+        sshHost: process.env.PROXMOX_SSH_HOST ?? process.env.PROXMOX_HOST,
+        sshPort: parseInteger(process.env.PROXMOX_SSH_PORT, 22),
+        sshUser: process.env.PROXMOX_SSH_USER ?? "root",
+        sshKeyPath: process.env.PROXMOX_SSH_KEY_PATH ?? ""
+    };
+    return runtimeConfigSchema.parse(candidate);
+};
+//# sourceMappingURL=env.js.map

package/dist/src/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAsB,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,CAAC,MAAM,aAAa,GAAG,GAAkB,EAAE;IAC/C,MAAM,SAAS,GAAG;QAChB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACrC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;QACzD,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;QACrC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QACvC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QACzC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAC7C,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC;QAC1E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QACjE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACvD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM;QAC/C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE;KACnD,CAAC;IAEF,OAAO,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC,CAAC"}

package/dist/src/config/fileConfig.d.ts

@@ -0,0 +1,4 @@
+import { type RuntimeConfig } from "./validate.js";
+export declare const defaultConfigPath: () => string;
+export declare const loadFileConfig: (explicitPath?: string) => Promise<RuntimeConfig>;
+//# sourceMappingURL=fileConfig.d.ts.map

package/dist/src/config/fileConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileConfig.d.ts","sourceRoot":"","sources":["../../../src/config/fileConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAExE,eAAO,MAAM,iBAAiB,QAAO,MAEpC,CAAC;AAEF,eAAO,MAAM,cAAc,GAAU,eAAe,MAAM,KAAG,OAAO,CAAC,aAAa,CAKjF,CAAC"}

package/dist/src/config/fileConfig.js

@@ -0,0 +1,13 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { runtimeConfigSchema } from "./validate.js";
+export const defaultConfigPath = () => {
+    return resolve(process.cwd(), ".nandi-proxmox-mcp", "config.json");
+};
+export const loadFileConfig = async (explicitPath) => {
+    const path = explicitPath ?? process.env.NANDI_PROXMOX_CONFIG ?? defaultConfigPath();
+    const raw = await readFile(path, "utf8");
+    const parsed = JSON.parse(raw);
+    return runtimeConfigSchema.parse(parsed);
+};
+//# sourceMappingURL=fileConfig.js.map

package/dist/src/config/fileConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileConfig.js","sourceRoot":"","sources":["../../../src/config/fileConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAsB,MAAM,eAAe,CAAC;AAExE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAW,EAAE;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAAE,YAAqB,EAA0B,EAAE;IACpF,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,iBAAiB,EAAE,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,OAAO,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC"}

package/dist/src/config/installDescriptor.d.ts

@@ -0,0 +1,36 @@
+export type McpServerEntry = {
+    command: string;
+    args: string[];
+    env?: Record<string, string>;
+};
+export type McpConfigFile = {
+    servers: Record<string, McpServerEntry>;
+};
+export type McpManifest = {
+    schema_version: string;
+    id: string;
+    display_name: string;
+    description: string;
+    transport: "stdio";
+    runtime: McpServerEntry;
+    docs: {
+        quickstart: string;
+        security: string;
+        troubleshooting: string;
+    };
+};
+export declare const serverId = "nandi-proxmox-mcp";
+export declare const buildWorkspaceMcpConfig: (configPath: string) => McpConfigFile;
+export declare const normalizeMcpConfigDocument: (raw: string) => {
+    normalized: McpConfigFile;
+    migratedLegacy: boolean;
+};
+export declare const validateMcpConfig: (value: unknown) => {
+    ok: boolean;
+    errors: string[];
+};
+export declare const validateMcpManifest: (value: unknown) => {
+    ok: boolean;
+    errors: string[];
+};
+//# sourceMappingURL=installDescriptor.d.ts.map

package/dist/src/config/installDescriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installDescriptor.d.ts","sourceRoot":"","sources":["../../../src/config/installDescriptor.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,eAAO,MAAM,QAAQ,sBAAsB,CAAC;AAE5C,eAAO,MAAM,uBAAuB,GAAI,YAAY,MAAM,KAAG,aAU3D,CAAC;AAEH,eAAO,MAAM,0BAA0B,GAAI,KAAK,MAAM,KAAG;IACvD,UAAU,EAAE,aAAa,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CAiCzB,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAkCjF,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,KAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAmBnF,CAAC"}