proxmox-mcps 0.1.0

package/dist/jobs/sqlite-store.js

@@ -0,0 +1,282 @@
+/**
+ * SQLite-backed JobStore.
+ *
+ * Persists long-running Proxmox jobs across restarts. Schema is migrated
+ * forward by version — see `migrate()` for the canonical list of changes.
+ *
+ * Backed by `better-sqlite3` (synchronous, fast, single-process). For multi-
+ * process use, enable WAL mode (set by default) and serialize via a mutex.
+ */
+import BetterSqlite3 from "better-sqlite3";
+import { randomUUID } from "node:crypto";
+import { mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+const SCHEMA_VERSION = 1;
+const SCHEMA_DDL = {
+    1: `
+    CREATE TABLE IF NOT EXISTS jobs (
+      job_id        TEXT PRIMARY KEY,
+      upid          TEXT,
+      tool          TEXT NOT NULL,
+      args_json     TEXT NOT NULL,
+      node          TEXT,
+      status        TEXT NOT NULL,
+      started_at    INTEGER NOT NULL,
+      ended_at      INTEGER,
+      progress      INTEGER,
+      exit_status   TEXT,
+      result_json   TEXT,
+      last_error    TEXT,
+      retry_count   INTEGER NOT NULL DEFAULT 0,
+      previous_upids_json TEXT NOT NULL DEFAULT '[]',
+      retry_spec_json     TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_jobs_started_at ON jobs(started_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_jobs_status_started ON jobs(status, started_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_jobs_tool_started ON jobs(tool, started_at DESC);
+  `,
+};
+export class SqliteJobStore {
+    db;
+    ttlMs;
+    logger;
+    // Prepared statements (cached for perf)
+    stmtInsert;
+    stmtGet;
+    stmtList;
+    stmtUpdate;
+    stmtDelete;
+    stmtEvict;
+    stmtSetUpid;
+    constructor(opts) {
+        this.ttlMs = opts.ttlHours * 60 * 60 * 1000;
+        this.logger = opts.logger;
+        // Ensure parent directory exists
+        mkdirSync(dirname(opts.sqlitePath), { recursive: true });
+        this.db = new BetterSqlite3(opts.sqlitePath);
+        this.db.pragma("journal_mode = WAL");
+        this.db.pragma("synchronous = NORMAL");
+        this.db.pragma("busy_timeout = 5000");
+        this.db.pragma("foreign_keys = ON");
+        this.migrate();
+        this.stmtInsert = this.db.prepare(`
+      INSERT INTO jobs (
+        job_id, upid, tool, args_json, node, status, started_at, retry_count,
+        previous_upids_json, retry_spec_json
+      ) VALUES (
+        @job_id, @upid, @tool, @args_json, @node, @status, @started_at, @retry_count,
+        @previous_upids_json, @retry_spec_json
+      )
+    `);
+        this.stmtGet = this.db.prepare(`SELECT * FROM jobs WHERE job_id = ?`);
+        this.stmtList = this.db.prepare(`
+      SELECT * FROM jobs
+      WHERE (@status IS NULL OR status = @status)
+        AND (@tool IS NULL OR tool = @tool)
+      ORDER BY started_at DESC
+      LIMIT @limit
+    `);
+        this.stmtUpdate = this.db.prepare(`
+      UPDATE jobs SET
+        started_at = COALESCE(@started_at, started_at),
+        upid = COALESCE(@upid, upid),
+        status = COALESCE(@status, status),
+        progress = COALESCE(@progress, progress),
+        exit_status = COALESCE(@exit_status, exit_status),
+        ended_at = COALESCE(@ended_at, ended_at),
+        result_json = COALESCE(@result_json, result_json),
+        last_error = COALESCE(@last_error, last_error),
+        retry_count = COALESCE(@retry_count, retry_count),
+        previous_upids_json = COALESCE(@previous_upids_json, previous_upids_json),
+        retry_spec_json = COALESCE(@retry_spec_json, retry_spec_json)
+      WHERE job_id = @job_id
+    `);
+        this.stmtDelete = this.db.prepare(`DELETE FROM jobs WHERE job_id = ?`);
+        this.stmtEvict = this.db.prepare(`DELETE FROM jobs WHERE COALESCE(ended_at, started_at) < ?`);
+        this.stmtSetUpid = this.db.prepare(`
+      UPDATE jobs SET
+        previous_upids_json = @previous_upids_json,
+        upid = @upid,
+        status = 'running'
+      WHERE job_id = @job_id
+    `);
+    }
+    // ---- JobStore interface --------------------------------------------------
+    create(opts) {
+        const job = {
+            job_id: randomUUID(),
+            upid: opts.upid ?? null,
+            tool: opts.tool,
+            args: scrubArgs(opts.args),
+            node: opts.node ?? null,
+            status: opts.upid ? "running" : "queued",
+            started_at: Date.now(),
+            ended_at: null,
+            progress: null,
+            exit_status: null,
+            result: null,
+            last_error: null,
+            retry_count: 0,
+            previous_upids: [],
+            retry_spec: { tool: opts.tool, args: scrubArgs(opts.args) },
+        };
+        this.stmtInsert.run({
+            job_id: job.job_id,
+            upid: job.upid,
+            tool: job.tool,
+            args_json: JSON.stringify(job.args),
+            node: job.node,
+            status: job.status,
+            started_at: job.started_at,
+            retry_count: job.retry_count,
+            previous_upids_json: JSON.stringify(job.previous_upids),
+            retry_spec_json: JSON.stringify(job.retry_spec),
+        });
+        this.logger?.debug({ job_id: job.job_id, tool: job.tool, upid: job.upid }, "jobs.created");
+        return job;
+    }
+    get(jobId) {
+        const row = this.stmtGet.get(jobId);
+        return row ? rowToJob(row) : null;
+    }
+    list(filter = {}) {
+        const rows = this.stmtList.all({
+            status: filter.status ?? null,
+            tool: filter.tool ?? null,
+            limit: filter.limit ?? 100,
+        });
+        return rows.map(rowToJob);
+    }
+    setUpid(jobId, upid) {
+        const existing = this.get(jobId);
+        if (!existing)
+            return;
+        const previous = [...existing.previous_upids];
+        if (existing.upid)
+            previous.push(existing.upid);
+        this.stmtSetUpid.run({
+            job_id: jobId,
+            upid,
+            previous_upids_json: JSON.stringify(previous),
+        });
+    }
+    update(jobId, patch) {
+        // prepared statement has all named params; provide null for any field
+        // we're not updating so better-sqlite3 doesn't throw "Missing parameter".
+        const row = {
+            job_id: jobId,
+            started_at: patch.started_at !== undefined ? patch.started_at : null,
+            upid: patch.upid !== undefined ? patch.upid : null,
+            status: patch.status !== undefined ? patch.status : null,
+            progress: patch.progress !== undefined ? patch.progress : null,
+            exit_status: patch.exit_status !== undefined ? patch.exit_status : null,
+            ended_at: patch.ended_at !== undefined ? patch.ended_at : null,
+            result_json: patch.result !== undefined ? JSON.stringify(patch.result) : null,
+            last_error: patch.last_error !== undefined ? patch.last_error : null,
+            retry_count: patch.retry_count !== undefined ? patch.retry_count : null,
+            previous_upids_json: patch.previous_upids !== undefined ? JSON.stringify(patch.previous_upids) : null,
+            retry_spec_json: patch.retry_spec !== undefined ? JSON.stringify(patch.retry_spec) : null,
+        };
+        this.stmtUpdate.run(row);
+    }
+    delete(jobId) {
+        const result = this.stmtDelete.run(jobId);
+        return result.changes > 0;
+    }
+    evictExpired() {
+        const cutoff = Date.now() - this.ttlMs;
+        const result = this.stmtEvict.run(cutoff);
+        if (result.changes > 0) {
+            this.logger?.debug({ removed: result.changes }, "jobs.evicted");
+        }
+        return result.changes;
+    }
+    close() {
+        this.db.close();
+    }
+    // ---- Internals -----------------------------------------------------------
+    migrate() {
+        // Bootstrap schema_migrations table
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS schema_migrations (
+        version INTEGER PRIMARY KEY,
+        applied_at INTEGER NOT NULL
+      );
+    `);
+        const applied = this.db.prepare(`SELECT MAX(version) AS v FROM schema_migrations`).get().v ?? 0;
+        for (let v = applied + 1; v <= SCHEMA_VERSION; v++) {
+            const ddl = SCHEMA_DDL[v];
+            if (!ddl)
+                continue;
+            this.db.transaction(() => {
+                this.db.exec(ddl);
+                this.db.prepare(`INSERT INTO schema_migrations (version, applied_at) VALUES (?, ?)`).run(v, Date.now());
+            })();
+            this.logger?.info({ version: v }, "jobs.migration_applied");
+        }
+    }
+}
+function rowToJob(row) {
+    let result = null;
+    try {
+        if (row.result_json)
+            result = JSON.parse(row.result_json);
+    }
+    catch {
+        /* ignore malformed */
+    }
+    let retrySpec = null;
+    try {
+        if (row.retry_spec_json)
+            retrySpec = JSON.parse(row.retry_spec_json);
+    }
+    catch {
+        /* ignore */
+    }
+    let previousUpids = [];
+    try {
+        if (row.previous_upids_json)
+            previousUpids = JSON.parse(row.previous_upids_json);
+    }
+    catch {
+        /* ignore */
+    }
+    let args = {};
+    try {
+        if (row.args_json)
+            args = JSON.parse(row.args_json);
+    }
+    catch {
+        /* ignore */
+    }
+    return {
+        job_id: row.job_id,
+        upid: row.upid,
+        tool: row.tool,
+        args,
+        node: row.node,
+        status: row.status,
+        started_at: row.started_at,
+        ended_at: row.ended_at,
+        progress: row.progress,
+        exit_status: row.exit_status,
+        result,
+        last_error: row.last_error,
+        retry_count: row.retry_count,
+        previous_upids: previousUpids,
+        retry_spec: retrySpec,
+    };
+}
+function scrubArgs(args) {
+    const out = {};
+    for (const [k, v] of Object.entries(args)) {
+        if (k === "approval_token" || k === "password" || k === "new_password" || k === "cipassword") {
+            out[k] = "[REDACTED]";
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=sqlite-store.js.map

package/dist/jobs/sqlite-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-store.js","sourceRoot":"","sources":["../../src/jobs/sqlite-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,aAAkD,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAUpC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,UAAU,GAA2B;IACzC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;GAqBF;CACF,CAAC;AAEF,MAAM,OAAO,cAAc;IACR,EAAE,CAAiB;IACnB,KAAK,CAAS;IACd,MAAM,CAAqB;IAE5C,wCAAwC;IACvB,UAAU,CAA0B;IACpC,OAAO,CAA0B;IACjC,QAAQ,CAA0B;IAClC,UAAU,CAA0B;IACpC,UAAU,CAA0B;IACpC,SAAS,CAA0B;IACnC,WAAW,CAA0B;IAEtD,YAAY,IAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,iCAAiC;QACjC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC,EAAE,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAEpC,IAAI,CAAC,OAAO,EAAE,CAAC;QAEf,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;KAQjC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QAEtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;KAM/B,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;KAcjC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC;QAC9F,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;KAMlC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAE7E,MAAM,CAAC,IAAmB;QACxB,MAAM,GAAG,GAAc;YACrB,MAAM,EAAE,UAAU,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACxC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5D,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;YACvD,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;SAChD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QAC3F,OAAO,GAAG,CAAC;IACb,CAAC;IAED,GAAG,CAAC,KAAa;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAuB,CAAC;QAC1D,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,SAAgE,EAAE;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG;SAC3B,CAAa,CAAC;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,IAAY;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,KAAyB;QAC7C,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,GAAG,GAA4B;YACnC,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YACpE,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YAClD,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC9D,WAAW,EAAE,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACvE,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC9D,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7E,UAAU,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YACpE,WAAW,EAAE,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACvE,mBAAmB,EACjB,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;YAClF,eAAe,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;SAC1F,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,6EAA6E;IAErE,OAAO;QACb,oCAAoC;QACpC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;KAKZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,EAA2B,CAAC,CAAC,IAAI,CAAC,CAAC;QAE1H,KAAK,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1G,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CACF;AAsBD,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,MAAM,GAAY,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,WAAW;YAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,IAAI,SAAS,GAA4B,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,eAAe;YAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,IAAI,aAAa,GAAa,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,mBAAmB;YAAE,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,SAAS;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI;QACJ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM;QACN,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B;IAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YAC7F,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/jobs/store.d.ts

@@ -0,0 +1,66 @@
+import type { Logger } from "../log.js";
+export type JobStatus = "queued" | "running" | "completed" | "failed" | "cancelled";
+export interface JobRecord {
+    job_id: string;
+    upid: string | null;
+    tool: string;
+    args: Record<string, unknown>;
+    node: string | null;
+    status: JobStatus;
+    started_at: number;
+    ended_at: number | null;
+    progress: number | null;
+    exit_status: string | null;
+    result: unknown;
+    last_error: string | null;
+    retry_count: number;
+    previous_upids: string[];
+    /** Stored recipe to re-invoke the tool on retry. */
+    retry_spec: RetrySpec | null;
+}
+export interface RetrySpec {
+    tool: string;
+    args: Record<string, unknown>;
+}
+export interface CreateJobOpts {
+    tool: string;
+    args: Record<string, unknown>;
+    node?: string | null;
+    upid?: string | null;
+}
+export interface JobStore {
+    create(opts: CreateJobOpts): JobRecord;
+    get(jobId: string): JobRecord | null;
+    list(filter?: {
+        status?: JobStatus;
+        tool?: string;
+        limit?: number;
+    }): JobRecord[];
+    setUpid(jobId: string, upid: string): void;
+    update(jobId: string, patch: Partial<JobRecord>): void;
+    delete(jobId: string): boolean;
+    /** Remove jobs older than `ttlHours`. */
+    evictExpired(): number;
+}
+export interface InMemoryJobStoreOptions {
+    ttlHours: number;
+    logger?: Logger;
+}
+export declare class InMemoryJobStore implements JobStore {
+    private readonly jobs;
+    private readonly ttlMs;
+    private readonly logger;
+    constructor(opts: InMemoryJobStoreOptions);
+    create(opts: CreateJobOpts): JobRecord;
+    get(jobId: string): JobRecord | null;
+    list(filter?: {
+        status?: JobStatus;
+        tool?: string;
+        limit?: number;
+    }): JobRecord[];
+    setUpid(jobId: string, upid: string): void;
+    update(jobId: string, patch: Partial<JobRecord>): void;
+    delete(jobId: string): boolean;
+    evictExpired(): number;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/jobs/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/jobs/store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEpF,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oDAAoD;IACpD,UAAU,EAAE,SAAS,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CAAC;IACvC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,EAAE,CAAC;IAClF,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACvD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,yCAAyC;IACzC,YAAY,IAAI,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,gBAAiB,YAAW,QAAQ;IAC/C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,IAAI,EAAE,uBAAuB;IAKzC,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS;IAuBtC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIpC,IAAI,CAAC,MAAM,GAAE;QAAE,MAAM,CAAC,EAAE,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,SAAS,EAAE;IAYrF,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAU1C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI;IAMtD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI9B,YAAY,IAAI,MAAM;CAevB"}

package/dist/jobs/store.js

@@ -0,0 +1,101 @@
+/**
+ * JobStore — track long-running Proxmox tasks behind stable job_ids.
+ *
+ * Phase 1 ships an in-memory implementation behind a JobStore interface, so
+ * Phase 2 can swap in SQLite-backed persistence without changing tool code.
+ */
+import { randomUUID } from "node:crypto";
+export class InMemoryJobStore {
+    jobs = new Map();
+    ttlMs;
+    logger;
+    constructor(opts) {
+        this.ttlMs = opts.ttlHours * 60 * 60 * 1000;
+        this.logger = opts.logger;
+    }
+    create(opts) {
+        const job = {
+            job_id: randomUUID(),
+            upid: opts.upid ?? null,
+            tool: opts.tool,
+            args: scrubArgs(opts.args),
+            node: opts.node ?? null,
+            status: opts.upid ? "running" : "queued",
+            started_at: Date.now(),
+            ended_at: null,
+            progress: null,
+            exit_status: null,
+            result: null,
+            last_error: null,
+            retry_count: 0,
+            previous_upids: [],
+            retry_spec: { tool: opts.tool, args: scrubArgs(opts.args) },
+        };
+        this.jobs.set(job.job_id, job);
+        this.logger?.debug({ job_id: job.job_id, tool: job.tool, upid: job.upid }, "jobs.created");
+        return job;
+    }
+    get(jobId) {
+        return this.jobs.get(jobId) ?? null;
+    }
+    list(filter = {}) {
+        const all = Array.from(this.jobs.values());
+        const filtered = all.filter((j) => {
+            if (filter.status && j.status !== filter.status)
+                return false;
+            if (filter.tool && j.tool !== filter.tool)
+                return false;
+            return true;
+        });
+        // Newest first
+        filtered.sort((a, b) => b.started_at - a.started_at);
+        return filter.limit ? filtered.slice(0, filter.limit) : filtered;
+    }
+    setUpid(jobId, upid) {
+        const job = this.jobs.get(jobId);
+        if (!job)
+            return;
+        if (job.upid) {
+            job.previous_upids.push(job.upid);
+        }
+        job.upid = upid;
+        job.status = "running";
+    }
+    update(jobId, patch) {
+        const job = this.jobs.get(jobId);
+        if (!job)
+            return;
+        Object.assign(job, patch);
+    }
+    delete(jobId) {
+        return this.jobs.delete(jobId);
+    }
+    evictExpired() {
+        const cutoff = Date.now() - this.ttlMs;
+        let removed = 0;
+        for (const [id, job] of this.jobs) {
+            const referenceTime = job.ended_at ?? job.started_at;
+            if (referenceTime < cutoff) {
+                this.jobs.delete(id);
+                removed++;
+            }
+        }
+        if (removed > 0) {
+            this.logger?.debug({ removed }, "jobs.evicted");
+        }
+        return removed;
+    }
+}
+function scrubArgs(args) {
+    const out = {};
+    for (const [k, v] of Object.entries(args)) {
+        if (k === "approval_token" || k === "password" || k === "new_password" || k === "cipassword") {
+            out[k] = "[REDACTED]";
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=store.js.map

package/dist/jobs/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/jobs/store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAoDzC,MAAM,OAAO,gBAAgB;IACV,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpC,KAAK,CAAS;IACd,MAAM,CAAqB;IAE5C,YAAY,IAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,IAAmB;QACxB,MAAM,GAAG,GAAc;YACrB,MAAM,EAAE,UAAU,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACxC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5D,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QAC3F,OAAO,GAAG,CAAC;IACb,CAAC;IAED,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,SAAgE,EAAE;QACrE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC9D,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,eAAe;QACf,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,IAAY;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChB,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,KAAyB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC;YACrD,IAAI,aAAa,GAAG,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAA6B;IAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;YAC7F,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/log.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Logger singleton — pino configured for stdio MCP transport.
+ *
+ * All log lines go to **stderr** (stdout is reserved for JSON-RPC).
+ * Sensitive fields (tokens, passwords, SSH keys) are redacted automatically.
+ */
+import { type Logger } from "pino";
+export type { Logger };
+export interface LoggerConfig {
+    level: "debug" | "info" | "warn" | "error";
+    pretty: boolean;
+}
+/**
+ * Build (or return cached) logger instance.
+ *
+ * @param cfg.level - pino log level
+ * @param cfg.pretty - pretty-print via pino-pretty (dev only)
+ */
+export declare function getLogger(cfg?: LoggerConfig): Logger;
+/**
+ * Reset the cached logger. Useful for tests.
+ */
+export declare function resetLogger(): void;
+//# sourceMappingURL=log.d.ts.map

package/dist/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAa,EAAE,KAAK,MAAM,EAAsB,MAAM,MAAM,CAAC;AAE7D,YAAY,EAAE,MAAM,EAAE,CAAC;AA0BvB,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,MAAM,EAAE,OAAO,CAAC;CACjB;AAID;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,GAAE,YAA+C,GAAG,MAAM,CAuBtF;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC"}

package/dist/log.js

@@ -0,0 +1,64 @@
+/**
+ * Logger singleton — pino configured for stdio MCP transport.
+ *
+ * All log lines go to **stderr** (stdout is reserved for JSON-RPC).
+ * Sensitive fields (tokens, passwords, SSH keys) are redacted automatically.
+ */
+import pino from "pino";
+/** Fields that should never appear in log output. */
+const REDACT_PATHS = [
+    "*.token_value",
+    "*.token",
+    "*.tokenValue",
+    "*.password",
+    "*.ssh_password",
+    "*.ssh_private_key",
+    "*.approval_token",
+    "*.approvalToken",
+    "*.new_password",
+    "*.cipassword",
+    "api.token",
+    "config.PROXMOX_TOKEN_VALUE",
+    "config.PROXMOX_SSH_PASSWORD",
+    "config.PROXMOX_MCP_APPROVAL_TOKEN",
+    "config.proxmox.tokenValue",
+    "config.safety.approvalToken",
+    "config.proxmox.tokenName",
+    "env.PROXMOX_TOKEN_VALUE",
+    "env.PROXMOX_SSH_PASSWORD",
+    "env.PROXMOX_MCP_APPROVAL_TOKEN",
+];
+let _logger = null;
+/**
+ * Build (or return cached) logger instance.
+ *
+ * @param cfg.level - pino log level
+ * @param cfg.pretty - pretty-print via pino-pretty (dev only)
+ */
+export function getLogger(cfg = { level: "info", pretty: false }) {
+    if (_logger)
+        return _logger;
+    const options = {
+        level: cfg.level,
+        redact: { paths: REDACT_PATHS, censor: "[REDACTED]" },
+        base: { service: "proxmox-mcp" },
+        timestamp: pino.stdTimeFunctions.isoTime,
+    };
+    if (cfg.pretty) {
+        _logger = pino(options, pino.transport({
+            target: "pino-pretty",
+            options: { colorize: true, translateTime: "SYS:HH:MM:ss.l" },
+        }));
+    }
+    else {
+        _logger = pino(options);
+    }
+    return _logger;
+}
+/**
+ * Reset the cached logger. Useful for tests.
+ */
+export function resetLogger() {
+    _logger = null;
+}
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,IAAyC,MAAM,MAAM,CAAC;AAI7D,qDAAqD;AACrD,MAAM,YAAY,GAAG;IACnB,eAAe;IACf,SAAS;IACT,cAAc;IACd,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,WAAW;IACX,4BAA4B;IAC5B,6BAA6B;IAC7B,mCAAmC;IACnC,2BAA2B;IAC3B,6BAA6B;IAC7B,0BAA0B;IAC1B,yBAAyB;IACzB,0BAA0B;IAC1B,gCAAgC;CACjC,CAAC;AAOF,IAAI,OAAO,GAAkB,IAAI,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,MAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAC5E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,MAAM,OAAO,GAAkB;QAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;QACrD,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE;QAChC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;KACzC,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,OAAO,GAAG,IAAI,CACZ,OAAO,EACP,IAAI,CAAC,SAAS,CAAC;YACb,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,EAAE;SAC7D,CAAsC,CACxC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,GAAG,IAAI,CAAC;AACjB,CAAC"}

package/dist/proxmox/auth.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Proxmox API authentication helpers.
+ *
+ * API token format: PVEAPIToken=<user>@<realm>!<tokenname>=<token-value>
+ * See: https://pve.proxmox.com/pve-docs/api-viewer/#/access/users/userid/token
+ */
+/**
+ * Construct the full token string used in the Authorization header.
+ *
+ * @example
+ * buildPveApiToken("root@pam", "mcp", "abc-def-...")
+ * // => "root@pam!mcp=abc-def-..."
+ */
+export declare function buildPveApiToken(user: string, tokenName: string, tokenValue: string): string;
+/**
+ * Construct the full Authorization header value.
+ *
+ * @example
+ * authHeader("root@pam", "mcp", "abc-def-...")
+ * // => "PVEAPIToken=root@pam!mcp=abc-def-..."
+ */
+export declare function authHeader(user: string, tokenName: string, tokenValue: string): string;
+/**
+ * Extract the user portion from an API token string (sanity check / display).
+ *
+ * @example
+ * parseTokenUser("root@pam!mcp=abc-def") => "root@pam"
+ */
+export declare function parseTokenUser(tokenStr: string): string | null;
+//# sourceMappingURL=auth.d.ts.map

package/dist/proxmox/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/proxmox/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE5F;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI9D"}

package/dist/proxmox/auth.js

@@ -0,0 +1,39 @@
+/**
+ * Proxmox API authentication helpers.
+ *
+ * API token format: PVEAPIToken=<user>@<realm>!<tokenname>=<token-value>
+ * See: https://pve.proxmox.com/pve-docs/api-viewer/#/access/users/userid/token
+ */
+/**
+ * Construct the full token string used in the Authorization header.
+ *
+ * @example
+ * buildPveApiToken("root@pam", "mcp", "abc-def-...")
+ * // => "root@pam!mcp=abc-def-..."
+ */
+export function buildPveApiToken(user, tokenName, tokenValue) {
+    return `${user}!${tokenName}=${tokenValue}`;
+}
+/**
+ * Construct the full Authorization header value.
+ *
+ * @example
+ * authHeader("root@pam", "mcp", "abc-def-...")
+ * // => "PVEAPIToken=root@pam!mcp=abc-def-..."
+ */
+export function authHeader(user, tokenName, tokenValue) {
+    return `PVEAPIToken=${buildPveApiToken(user, tokenName, tokenValue)}`;
+}
+/**
+ * Extract the user portion from an API token string (sanity check / display).
+ *
+ * @example
+ * parseTokenUser("root@pam!mcp=abc-def") => "root@pam"
+ */
+export function parseTokenUser(tokenStr) {
+    const bang = tokenStr.indexOf("!");
+    if (bang < 0)
+        return null;
+    return tokenStr.slice(0, bang);
+}
+//# sourceMappingURL=auth.js.map

package/dist/proxmox/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/proxmox/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAkB;IAClF,OAAO,GAAG,IAAI,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAkB;IAC5E,OAAO,eAAe,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC"}