proxmox-mcps 0.1.0

package/dist/proxmox/paths.js

@@ -0,0 +1,157 @@
+/**
+ * URL path builders. Single source of truth for Proxmox API paths.
+ *
+ * Each function returns a string ready for the client to GET/POST/PUT/DELETE.
+ * Path parameters are typed to catch typos at compile time.
+ */
+// ---- Cluster & nodes -----------------------------------------------------
+export const clusterStatus = () => "/cluster/status";
+export const clusterResources = (type) => type ? `/cluster/resources?type=${type}` : "/cluster/resources";
+export const nodes = () => "/nodes";
+export const nodeStatus = (node) => `/nodes/${node}/status`;
+export const nodeSyslog = (node, limit) => {
+    const q = limit ? `?limit=${limit}` : "";
+    return `/nodes/${node}/syslog${q}`;
+};
+export const nodeJournal = (node, limit) => {
+    const q = limit ? `?limit=${limit}` : "";
+    return `/nodes/${node}/journal${q}`;
+};
+// ---- Storage -------------------------------------------------------------
+export const storage = () => "/storage";
+export const nodeStorageStatus = (node, storage) => `/nodes/${node}/storage/${storage}/status`;
+export const nodeStorageContent = (node, storage, content) => `/nodes/${node}/storage/${storage}/content?content=${content}`;
+export const storageDownloadUrl = (node, storage) => `/nodes/${node}/storage/${storage}/download-url`;
+export const storageContent = (node, storage, volume) => `/nodes/${node}/storage/${storage}/content/${volume}`;
+export const pruneBackups = (storage) => `/storage/${storage}/prune-backups`;
+// ---- VM (QEMU) -----------------------------------------------------------
+export const qemu = (node) => `/nodes/${node}/qemu`;
+export const qemuVm = (node, vmid) => `/nodes/${node}/qemu/${vmid}`;
+export const qemuConfig = (node, vmid) => `/nodes/${node}/qemu/${vmid}/config`;
+export const qemuPending = (node, vmid) => `/nodes/${node}/qemu/${vmid}/pending`;
+export const qemuStatus = (node, vmid, action) => `/nodes/${node}/qemu/${vmid}/status/${action}`;
+export const qemuClone = (node, vmid) => `/nodes/${node}/qemu/${vmid}/clone`;
+export const qemuResize = (node, vmid, disk) => `/nodes/${node}/qemu/${vmid}/resize?disk=${encodeURIComponent(disk)}`;
+export const qemuMoveDisk = (node, vmid, disk) => `/nodes/${node}/qemu/${vmid}/move-disk?disk=${encodeURIComponent(disk)}`;
+export const qemuUnlink = (node, vmid, disk) => `/nodes/${node}/qemu/${vmid}/unlink?disk=${encodeURIComponent(disk)}`;
+export const qemuMigrate = (node, vmid) => `/nodes/${node}/qemu/${vmid}/migrate`;
+export const qemuTemplate = (node, vmid) => `/nodes/${node}/qemu/${vmid}/template`;
+export const qemuRrd = (node, vmid, timeframe) => `/nodes/${node}/qemu/${vmid}/rrd?timeframe=${timeframe}`;
+export const qemuRrdData = (node, vmid, timeframe) => `/nodes/${node}/qemu/${vmid}/rrddata?timeframe=${timeframe}`;
+// VM console
+export const qemuVncProxy = (node, vmid) => `/nodes/${node}/qemu/${vmid}/vncproxy`;
+export const qemuTermProxy = (node, vmid) => `/nodes/${node}/qemu/${vmid}/termproxy`;
+export const qemuSpiceProxy = (node, vmid) => `/nodes/${node}/qemu/${vmid}/spiceproxy`;
+export const qemuMtunnel = (node, vmid) => `/nodes/${node}/qemu/${vmid}/mtunnel`;
+export const qemuMtunnelWebsocket = (node, vmid) => `/nodes/${node}/qemu/${vmid}/mtunnelwebsocket`;
+export const qemuFeature = (node, vmid) => `/nodes/${node}/qemu/${vmid}/feature`;
+export const qemuMonitor = (node, vmid) => `/nodes/${node}/qemu/${vmid}/monitor`;
+export const qemuSendkey = (node, vmid) => `/nodes/${node}/qemu/${vmid}/sendkey`;
+// VM agent
+export const qemuAgent = (node, vmid, action) => `/nodes/${node}/qemu/${vmid}/agent/${action}`;
+export const qemuAgentExec = (node, vmid) => `/nodes/${node}/qemu/${vmid}/agent/exec`;
+export const qemuAgentExecStatus = (node, vmid, pid) => `/nodes/${node}/qemu/${vmid}/agent/exec-status?pid=${pid}`;
+// VM firewall
+export const qemuFirewallRules = (node, vmid) => `/nodes/${node}/qemu/${vmid}/firewall/rules`;
+export const qemuFirewallOptions = (node, vmid) => `/nodes/${node}/qemu/${vmid}/firewall/options`;
+export const qemuCloudinit = (node, vmid) => `/nodes/${node}/qemu/${vmid}/cloudinit`;
+// ---- LXC (Container) -----------------------------------------------------
+export const lxc = (node) => `/nodes/${node}/lxc`;
+export const lxcCt = (node, vmid) => `/nodes/${node}/lxc/${vmid}`;
+export const lxcConfig = (node, vmid) => `/nodes/${node}/lxc/${vmid}/config`;
+export const lxcPending = (node, vmid) => `/nodes/${node}/lxc/${vmid}/pending`;
+export const lxcStatus = (node, vmid, action) => `/nodes/${node}/lxc/${vmid}/status/${action}`;
+export const lxcClone = (node, vmid) => `/nodes/${node}/lxc/${vmid}/clone`;
+export const lxcResize = (node, vmid, disk) => `/nodes/${node}/lxc/${vmid}/resize?disk=${encodeURIComponent(disk)}`;
+export const lxcMoveDisk = (node, vmid, disk) => `/nodes/${node}/lxc/${vmid}/move-disk?disk=${encodeURIComponent(disk)}`;
+export const lxcMoveVolume = (node, vmid, volume) => `/nodes/${node}/lxc/${vmid}/move-volume?volume=${encodeURIComponent(volume)}`;
+export const lxcUnlink = (node, vmid, volume) => `/nodes/${node}/lxc/${vmid}/unlink?volume=${encodeURIComponent(volume)}`;
+export const lxcMigrate = (node, vmid) => `/nodes/${node}/lxc/${vmid}/migrate`;
+export const lxcTemplate = (node, vmid) => `/nodes/${node}/lxc/${vmid}/template`;
+export const lxcRrd = (node, vmid, timeframe) => `/nodes/${node}/lxc/${vmid}/rrd?timeframe=${timeframe}`;
+export const lxcRrdData = (node, vmid, timeframe) => `/nodes/${node}/lxc/${vmid}/rrddata?timeframe=${timeframe}`;
+export const lxcInterfaces = (node, vmid) => `/nodes/${node}/lxc/${vmid}/interfaces`;
+// LXC console
+export const lxcVncProxy = (node, vmid) => `/nodes/${node}/lxc/${vmid}/vncproxy`;
+export const lxcTermProxy = (node, vmid) => `/nodes/${node}/lxc/${vmid}/termproxy`;
+export const lxcSpiceProxy = (node, vmid) => `/nodes/${node}/lxc/${vmid}/spiceproxy`;
+// LXC firewall
+export const lxcFirewallRules = (node, vmid) => `/nodes/${node}/lxc/${vmid}/firewall/rules`;
+export const lxcFirewallOptions = (node, vmid) => `/nodes/${node}/lxc/${vmid}/firewall/options`;
+// ---- Snapshots & backups --------------------------------------------------
+export const snapshotList = (node, type, vmid) => `/nodes/${node}/${type}/${vmid}/snapshot`;
+export const snapshotCreate = (node, type, vmid) => `/nodes/${node}/${type}/${vmid}/snapshot`;
+export const snapshotDelete = (node, type, vmid, snapname) => `/nodes/${node}/${type}/${vmid}/snapshot/${encodeURIComponent(snapname)}`;
+export const snapshotRollback = (node, type, vmid, snapname) => `/nodes/${node}/${type}/${vmid}/snapshot/${encodeURIComponent(snapname)}/rollback`;
+export const vzdump = (node) => `/nodes/${node}/vzdump`;
+// ---- Tasks (UPIDs) -------------------------------------------------------
+export const taskStatus = (node, upid) => `/nodes/${node}/tasks/${encodeURIComponent(upid)}/status`;
+export const taskLog = (node, upid, limit) => {
+    const q = limit ? `?limit=${limit}` : "";
+    return `/nodes/${node}/tasks/${encodeURIComponent(upid)}/log${q}`;
+};
+export const taskStop = (node, upid) => `/nodes/${node}/tasks/${encodeURIComponent(upid)}/status/stop`;
+export const clusterTasks = () => "/cluster/tasks";
+// ---- Pools ----------------------------------------------------------------
+export const pools = () => "/pools";
+export const pool = (poolid) => `/pools/${encodeURIComponent(poolid)}`;
+// ---- Cluster HA -----------------------------------------------------------
+export const haResources = () => "/cluster/ha";
+export const haResource = (sid) => `/cluster/ha/${encodeURIComponent(sid)}`;
+export const haResourceStatus = (sid) => `/cluster/ha/${encodeURIComponent(sid)}/status`;
+export const haGroups = () => "/cluster/ha/groups";
+export const haGroup = (group) => `/cluster/ha/groups/${encodeURIComponent(group)}`;
+export const haStatus = () => "/cluster/ha/status";
+// ---- Cluster Backup Schedule ----------------------------------------------
+export const backupJobs = () => "/cluster/backup";
+export const backupJob = (id) => `/cluster/backup/${encodeURIComponent(id)}`;
+export const runBackupJob = (id) => `/cluster/backup/${encodeURIComponent(id)}/run`;
+export const backupJobIncluded = (id) => `/cluster/backup/${encodeURIComponent(id)}/included`;
+// ---- Cluster Replication --------------------------------------------------
+export const replication = () => "/cluster/replication";
+export const replicationJob = (id) => `/cluster/replication/${encodeURIComponent(id)}`;
+export const replicationStatus = (id) => `/cluster/replication/${encodeURIComponent(id)}/status`;
+export const nodeReplication = (node) => `/nodes/${node}/replication`;
+// ---- Cluster SDN ----------------------------------------------------------
+export const sdnControllers = () => "/cluster/sdn/controllers";
+export const sdnController = (name) => `/cluster/sdn/controllers/${encodeURIComponent(name)}`;
+export const sdnVnets = () => "/cluster/sdn/vnets";
+export const sdnVnet = (name) => `/cluster/sdn/vnets/${encodeURIComponent(name)}`;
+export const sdnZones = () => "/cluster/sdn/zones";
+export const sdnZone = (name) => `/cluster/sdn/zones/${encodeURIComponent(name)}`;
+export const sdnSubnets = (vnet) => `/cluster/sdn/vnets/${encodeURIComponent(vnet)}/subnets`;
+export const sdnSubnet = (vnet, subnet) => `/cluster/sdn/vnets/${encodeURIComponent(vnet)}/subnets/${encodeURIComponent(subnet)}`;
+// ---- Node admin (Phase 2C) ------------------------------------------------
+export const nodeAptUpdate = (node) => `/nodes/${node}/apt/update`;
+export const nodeAptRepos = (node) => `/nodes/${node}/repositories`;
+export const nodeAptVersions = (node) => `/nodes/${node}/apt/versions`;
+export const nodeDns = (node) => `/nodes/${node}/dns`;
+export const nodeHosts = (node) => `/nodes/${node}/hosts`;
+export const nodeTime = (node) => `/nodes/${node}/time`;
+export const nodeTimezone = (node) => `/nodes/${node}/time/timezone`;
+export const nodeConfig = (node) => `/nodes/${node}/config`;
+export const nodeReport = (node) => `/nodes/${node}/report`;
+export const nodeStartAll = (node) => `/nodes/${node}/startall`;
+export const nodeStopAll = (node) => `/nodes/${node}/stopall`;
+export const nodeMigrateAll = (node) => `/nodes/${node}/migrateall`;
+export const nodeWakeOnLan = (node) => `/nodes/${node}/wakeonlan`;
+export const nodeSubscription = (node) => `/nodes/${node}/subscription`;
+// Node services
+export const nodeServices = (node) => `/nodes/${node}/services`;
+export const nodeService = (node, service) => `/nodes/${node}/services/${encodeURIComponent(service)}`;
+// Node network
+export const nodeNetwork = (node) => `/nodes/${node}/network`;
+export const nodeIface = (node, iface) => `/nodes/${node}/network/${encodeURIComponent(iface)}`;
+// Node disks
+export const nodeDisks = (node) => `/nodes/${node}/disks`;
+export const nodeDisksList = (node) => `/nodes/${node}/disks/list`;
+export const nodeDiskInit = (node, disk) => `/nodes/${node}/disks/init?disk=${encodeURIComponent(disk)}`;
+export const nodeDiskWipe = (node, disk) => `/nodes/${node}/disks/wipedisk?disk=${encodeURIComponent(disk)}`;
+export const nodeDiskZfs = (node) => `/nodes/${node}/disks/zfs`;
+export const nodeDiskZfsCreate = (node) => `/nodes/${node}/disks/zfs`;
+// Node certificates
+export const nodeCert = (node) => `/nodes/${node}/certificates`;
+// Storage admin (Phase 2D)
+export const storageCreate = () => "/storage";
+export const storageUpdate = (storage) => `/storage/${encodeURIComponent(storage)}`;
+//# sourceMappingURL=paths.js.map

package/dist/proxmox/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/proxmox/paths.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAE7E,MAAM,CAAC,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,iBAAiB,CAAC;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAgC,EAAU,EAAE,CAC3E,IAAI,CAAC,CAAC,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC;AAClE,MAAM,CAAC,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,QAAQ,CAAC;AAC5C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,SAAS,CAAC;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAc,EAAU,EAAE;IACjE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,OAAO,UAAU,IAAI,UAAU,CAAC,EAAE,CAAC;AACrC,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAc,EAAU,EAAE;IAClE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,OAAO,UAAU,IAAI,WAAW,CAAC,EAAE,CAAC;AACtC,CAAC,CAAC;AAEF,6EAA6E;AAE7E,MAAM,CAAC,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,UAAU,CAAC;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CACzE,UAAU,IAAI,YAAY,OAAO,SAAS,CAAC;AAC7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,IAAY,EACZ,OAAe,EACf,OAAoC,EAC5B,EAAE,CAAC,UAAU,IAAI,YAAY,OAAO,oBAAoB,OAAO,EAAE,CAAC;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CAC1E,UAAU,IAAI,YAAY,OAAO,eAAe,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,MAAc,EAAU,EAAE,CACtF,UAAU,IAAI,YAAY,OAAO,YAAY,MAAM,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,YAAY,OAAO,gBAAgB,CAAC;AAE7F,6EAA6E;AAE7E,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,OAAO,CAAC;AACpE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACpE,UAAU,IAAI,SAAS,IAAI,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACxE,UAAU,IAAI,SAAS,IAAI,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,SAAS,IAAI,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,IAAY,EACZ,IAAqB,EACrB,MAA6F,EACrF,EAAE,CAAC,UAAU,IAAI,SAAS,IAAI,WAAW,MAAM,EAAE,CAAC;AAC5D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACvE,UAAU,IAAI,SAAS,IAAI,QAAQ,CAAC;AACtC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,IAAY,EAAU,EAAE,CACtF,UAAU,IAAI,SAAS,IAAI,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACxE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,IAAY,EAAU,EAAE,CACxF,UAAU,IAAI,SAAS,IAAI,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,IAAY,EAAU,EAAE,CACtF,UAAU,IAAI,SAAS,IAAI,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACxE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,SAAS,IAAI,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC1E,UAAU,IAAI,SAAS,IAAI,WAAW,CAAC;AACzC,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,IAAY,EACZ,IAAqB,EACrB,SAAqD,EAC7C,EAAE,CAAC,UAAU,IAAI,SAAS,IAAI,kBAAkB,SAAS,EAAE,CAAC;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,IAAY,EACZ,IAAqB,EACrB,SAAqD,EAC7C,EAAE,CAAC,UAAU,IAAI,SAAS,IAAI,sBAAsB,SAAS,EAAE,CAAC;AAE1E,aAAa;AACb,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC1E,UAAU,IAAI,SAAS,IAAI,WAAW,CAAC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC3E,UAAU,IAAI,SAAS,IAAI,YAAY,CAAC;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC5E,UAAU,IAAI,SAAS,IAAI,aAAa,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,SAAS,IAAI,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAClF,UAAU,IAAI,SAAS,IAAI,mBAAmB,CAAC;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,SAAS,IAAI,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,SAAS,IAAI,UAAU,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,SAAS,IAAI,UAAU,CAAC;AAExC,WAAW;AACX,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,IAAY,EACZ,IAAqB,EACrB,MAWU,EACF,EAAE,CAAC,UAAU,IAAI,SAAS,IAAI,UAAU,MAAM,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC3E,UAAU,IAAI,SAAS,IAAI,aAAa,CAAC;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,IAAY,EACZ,IAAqB,EACrB,GAAoB,EACZ,EAAE,CAAC,UAAU,IAAI,SAAS,IAAI,0BAA0B,GAAG,EAAE,CAAC;AAExE,cAAc;AACd,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC/E,UAAU,IAAI,SAAS,IAAI,iBAAiB,CAAC;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACjF,UAAU,IAAI,SAAS,IAAI,mBAAmB,CAAC;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC3E,UAAU,IAAI,SAAS,IAAI,YAAY,CAAC;AAE1C,6EAA6E;AAE7E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,MAAM,CAAC;AAClE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACnE,UAAU,IAAI,QAAQ,IAAI,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACvE,UAAU,IAAI,QAAQ,IAAI,SAAS,CAAC;AACtC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACxE,UAAU,IAAI,QAAQ,IAAI,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,IAAY,EACZ,IAAqB,EACrB,MAA4D,EACpD,EAAE,CAAC,UAAU,IAAI,QAAQ,IAAI,WAAW,MAAM,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACtE,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC;AACrC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,IAAY,EAAU,EAAE,CACrF,UAAU,IAAI,QAAQ,IAAI,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,IAAY,EAAU,EAAE,CACvF,UAAU,IAAI,QAAQ,IAAI,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,MAAc,EAAU,EAAE,CAC3F,UAAU,IAAI,QAAQ,IAAI,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAE,MAAc,EAAU,EAAE,CACvF,UAAU,IAAI,QAAQ,IAAI,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACxE,UAAU,IAAI,QAAQ,IAAI,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,QAAQ,IAAI,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,IAAY,EACZ,IAAqB,EACrB,SAAqD,EAC7C,EAAE,CAAC,UAAU,IAAI,QAAQ,IAAI,kBAAkB,SAAS,EAAE,CAAC;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,IAAY,EACZ,IAAqB,EACrB,SAAqD,EAC7C,EAAE,CAAC,UAAU,IAAI,QAAQ,IAAI,sBAAsB,SAAS,EAAE,CAAC;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC3E,UAAU,IAAI,QAAQ,IAAI,aAAa,CAAC;AAE1C,cAAc;AACd,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CACzE,UAAU,IAAI,QAAQ,IAAI,WAAW,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC1E,UAAU,IAAI,QAAQ,IAAI,YAAY,CAAC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC3E,UAAU,IAAI,QAAQ,IAAI,aAAa,CAAC;AAE1C,eAAe;AACf,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAC9E,UAAU,IAAI,QAAQ,IAAI,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAE,IAAqB,EAAU,EAAE,CAChF,UAAU,IAAI,QAAQ,IAAI,mBAAmB,CAAC;AAEhD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAoB,EAAE,IAAqB,EAAU,EAAE,CAChG,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,WAAW,CAAC;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,IAAoB,EAAE,IAAqB,EAAU,EAAE,CAClG,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,WAAW,CAAC;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,IAAY,EACZ,IAAoB,EACpB,IAAqB,EACrB,QAAgB,EACR,EAAE,CAAC,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAY,EACZ,IAAoB,EACpB,IAAqB,EACrB,QAAgB,EACR,EAAE,CAAC,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,aAAa,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;AAEhG,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,SAAS,CAAC;AAExE,6EAA6E;AAE7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAC/D,UAAU,IAAI,UAAU,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;AAC5D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc,EAAU,EAAE;IAC5E,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,OAAO,UAAU,IAAI,UAAU,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AACpE,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CAC7D,UAAU,IAAI,UAAU,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;AACjE,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,gBAAgB,CAAC;AAE3D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,QAAQ,CAAC;AAC5C,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAEvF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,aAAa,CAAC;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,eAAe,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAU,EAAE,CACtD,eAAe,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;AAClD,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAC/C,sBAAsB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACpD,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,oBAAoB,CAAC;AAE3D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,iBAAiB,CAAC;AAC1D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAU,EAAU,EAAE,CACjD,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAU,EAAU,EAAE,CACtD,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,WAAW,CAAC;AAEvD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,sBAAsB,CAAC;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAU,EAAU,EAAE,CACnD,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAU,EAAU,EAAE,CACtD,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,SAAS,CAAC;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,cAAc,CAAC;AAEtF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CACpD,4BAA4B,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAClG,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAClG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CACjD,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;AAC3D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,MAAc,EAAU,EAAE,CAChE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAEzF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,aAAa,CAAC;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,eAAe,CAAC;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,eAAe,CAAC;AACvF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,MAAM,CAAC;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC1E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,OAAO,CAAC;AACxE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,gBAAgB,CAAC;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,SAAS,CAAC;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,SAAS,CAAC;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,WAAW,CAAC;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,UAAU,CAAC;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,aAAa,CAAC;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,YAAY,CAAC;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,eAAe,CAAC;AAExF,gBAAgB;AAChB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,WAAW,CAAC;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAe,EAAU,EAAE,CACnE,UAAU,IAAI,aAAa,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAE3D,eAAe;AACf,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,UAAU,CAAC;AAC9E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAC/D,UAAU,IAAI,YAAY,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAExD,aAAa;AACb,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC1E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,aAAa,CAAC;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CACjE,UAAU,IAAI,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE,CACjE,UAAU,IAAI,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,YAAY,CAAC;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,YAAY,CAAC;AAEtF,oBAAoB;AACpB,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,IAAI,eAAe,CAAC;AAEhF,2BAA2B;AAC3B,MAAM,CAAC,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,UAAU,CAAC;AACtD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC"}

package/dist/proxmox/types.d.ts

@@ -0,0 +1,255 @@
+/**
+ * Response shapes returned by Proxmox API.
+ *
+ * Proxmox wraps every successful response in `{ data: ... }`. The actual
+ * content varies wildly per endpoint, so we keep these types loose (`unknown`
+ * for the body) and let tools narrow as needed.
+ */
+/** Standard Proxmox API envelope. */
+export interface ProxmoxResponse<T = unknown> {
+    data: T;
+}
+/** Error envelope: errors keyed by form field. */
+export interface ProxmoxErrorResponse {
+    errors?: Record<string, string>;
+    data?: unknown;
+    message?: string;
+}
+export interface ClusterNodeInfo {
+    type: string;
+    id?: string;
+    name?: string;
+    ip?: string;
+    level?: string;
+    local?: boolean;
+    nodeid?: number;
+    online?: boolean;
+    quorate?: number;
+}
+export interface ClusterStatus {
+    name?: string;
+    quorate?: number;
+    id?: string;
+    version?: number;
+    nodes?: ClusterNodeInfo[];
+}
+export interface NodeStatus {
+    node: string;
+    status: "online" | "offline" | "unknown";
+    cpu?: number;
+    level?: string;
+    maxcpu?: number;
+    mem?: number;
+    maxmem?: number;
+    uptime?: number;
+    id?: string;
+    ip?: string;
+    storage?: number;
+    maxstorage?: number;
+}
+export interface ResourceListItem {
+    id: string;
+    type: "vm" | "node" | "storage" | "pool" | "sdn";
+    node?: string;
+    vmid?: number;
+    name?: string;
+    status?: string;
+    template?: number;
+    cpu?: number;
+    cpus?: number;
+    mem?: number;
+    maxmem?: number;
+    disk?: number;
+    maxdisk?: number;
+    uptime?: number;
+    pool?: string;
+}
+export interface VmConfig {
+    name?: string;
+    cores?: number;
+    sockets?: number;
+    memory?: number;
+    ostype?: string;
+    scsi0?: string;
+    scsihw?: string;
+    net0?: string;
+    boot?: string;
+    cpu?: string;
+    bios?: string;
+    machine?: string;
+    description?: string;
+    template?: number;
+    agent?: string;
+    [key: string]: unknown;
+}
+export interface VmStatus {
+    status: "running" | "stopped" | "paused";
+    vmid: number;
+    name?: string;
+    cpu?: number;
+    cpus?: number;
+    mem?: number;
+    maxmem?: number;
+    disk?: number;
+    maxdisk?: number;
+    uptime?: number;
+    template?: number;
+    pid?: number;
+    qmpstatus?: string;
+    running_machine?: string;
+    running_qemu?: string;
+}
+export interface VmAgentExecResult {
+    pid: number;
+    exited?: number;
+    exitcode?: number;
+    signal?: number;
+    outData?: string;
+    errData?: string;
+}
+export interface VmRrdPoint {
+    time: number;
+    cpu?: number;
+    mem?: number;
+    netin?: number;
+    netout?: number;
+    diskread?: number;
+    diskwrite?: number;
+    [key: string]: number | undefined;
+}
+export interface VncTicket {
+    port: number;
+    ticket: string;
+    cert?: string;
+    upid?: string;
+}
+export interface SpiceTicket extends VncTicket {
+    type: "spice";
+}
+export interface LxcConfig {
+    hostname?: string;
+    cores?: number;
+    memory?: number;
+    swap?: number;
+    rootfs?: string;
+    net0?: string;
+    ostype?: string;
+    arch?: string;
+    features?: string;
+    description?: string;
+    template?: number;
+    onboot?: number;
+    unprivileged?: number;
+    [key: string]: unknown;
+}
+export interface LxcStatus {
+    status: "running" | "stopped";
+    vmid: number;
+    name?: string;
+    cpu?: number;
+    cpus?: number;
+    mem?: number;
+    maxmem?: number;
+    swap?: number;
+    maxswap?: number;
+    disk?: number;
+    maxdisk?: number;
+    uptime?: number;
+    template?: number;
+    pid?: number;
+}
+export interface LxcInterface {
+    name: string;
+    ip_addresses?: Array<{
+        ip_address: string;
+        prefix: number;
+        family: string;
+    }>;
+    mac_address?: string;
+    stats?: Record<string, number>;
+}
+export interface SnapshotInfo {
+    name: string;
+    description?: string;
+    snaptime?: number;
+    parent?: string;
+    vmstate?: number;
+    [key: string]: unknown;
+}
+export interface BackupEntry {
+    volid: string;
+    format: string;
+    size: number;
+    ctime: number;
+    vmid?: number;
+    notes?: string;
+    protected?: boolean;
+    [key: string]: unknown;
+}
+export interface IsoEntry {
+    volid: string;
+    format: string;
+    size: number;
+    ctime: number;
+    [key: string]: unknown;
+}
+export interface TemplateEntry {
+    volid: string;
+    format: string;
+    size: number;
+    ctime: number;
+    [key: string]: unknown;
+}
+export interface TaskStatus {
+    upid: string;
+    node: string;
+    pid: number;
+    pstart: number;
+    starttime: number;
+    type: string;
+    user: string;
+    status: "running" | "stopped" | "OK" | "WARNINGS" | "ERROR" | "unknown";
+    exitstatus?: string;
+    endtime?: number;
+}
+export interface TaskLogLine {
+    n: number;
+    t: string;
+}
+export interface StorageInfo {
+    storage: string;
+    type: string;
+    content?: string;
+    path?: string;
+    shared?: number;
+    total?: number;
+    used?: number;
+    available?: number;
+    active?: number;
+    enabled?: number;
+}
+export interface FirewallRule {
+    pos: number;
+    type: "in" | "out" | "group";
+    action: "ACCEPT" | "DROP" | "REJECT";
+    enable?: number;
+    source?: string;
+    dest?: string;
+    proto?: string;
+    dport?: string;
+    sport?: string;
+    comment?: string;
+    [key: string]: unknown;
+}
+export interface FirewallOptions {
+    enable?: number;
+    dhcp?: number;
+    ndp?: number;
+    macfilter?: number;
+    ipfilter?: number;
+    radv?: number;
+    log_level_in?: string;
+    log_level_out?: string;
+    [key: string]: unknown;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/proxmox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/proxmox/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,qCAAqC;AACrC,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,IAAI,EAAE,CAAC,CAAC;CACT;AAED,kDAAkD;AAClD,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,IAAI,EAAE,OAAO,CAAC;CACf;AAID,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,KAAK,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAID,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,IAAI,GAAG,KAAK,GAAG,OAAO,CAAC;IAC7B,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/proxmox/types.js

@@ -0,0 +1,9 @@
+/**
+ * Response shapes returned by Proxmox API.
+ *
+ * Proxmox wraps every successful response in `{ data: ... }`. The actual
+ * content varies wildly per endpoint, so we keep these types loose (`unknown`
+ * for the body) and let tools narrow as needed.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/proxmox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/proxmox/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/retry.d.ts

@@ -0,0 +1,18 @@
+export interface RetryConfig {
+    max: number;
+    baseMs: number;
+}
+export declare const DEFAULT_RETRY: RetryConfig;
+/**
+ * Predicate: should this error be retried?
+ *
+ * Default: only network errors and HTTP 5xx/429 are retried. 4xx (other than
+ * 429) is treated as a permanent failure (bad request, not found, etc.).
+ */
+export type ShouldRetry = (err: unknown) => boolean;
+export declare function defaultShouldRetry(err: unknown): boolean;
+/**
+ * Run `fn` with retry. Honors Retry-After hint on 429/503 when available.
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, cfg?: RetryConfig, shouldRetry?: ShouldRetry, onFailedAttempt?: (err: unknown, attempt: number) => void): Promise<T>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,aAAa,EAAE,WAAqC,CAAC;AAElE;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;AAEpD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAexD;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,GAAG,GAAE,WAA2B,EAChC,WAAW,GAAE,WAAgC,EAC7C,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GACxD,OAAO,CAAC,CAAC,CAAC,CAkBZ"}

package/dist/retry.js

@@ -0,0 +1,50 @@
+/**
+ * Retry wrapper using p-retry with exponential backoff + jitter.
+ *
+ * Only retries on transient errors (network, 5xx, 429). 4xx errors bubble up
+ * immediately so the caller gets a fast-fail for bad requests.
+ */
+import pRetry from "p-retry";
+export const DEFAULT_RETRY = { max: 3, baseMs: 200 };
+export function defaultShouldRetry(err) {
+    // Network / DNS / socket-level errors usually surface as plain Error with no
+    // .status; let p-retry treat those as transient.
+    if (err instanceof Error) {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const status = err.status;
+        if (typeof status === "number") {
+            if (status === 429)
+                return true;
+            if (status >= 500 && status < 600)
+                return true;
+            return false;
+        }
+        // No status => likely a network error
+        return true;
+    }
+    return false;
+}
+/**
+ * Run `fn` with retry. Honors Retry-After hint on 429/503 when available.
+ */
+export async function withRetry(fn, cfg = DEFAULT_RETRY, shouldRetry = defaultShouldRetry, onFailedAttempt) {
+    const opts = {
+        retries: cfg.max,
+        minTimeout: cfg.baseMs,
+        maxTimeout: cfg.baseMs * 32, // exponential ceiling
+        factor: 2,
+        randomize: true,
+        shouldRetry: (err) => shouldRetry(err),
+    };
+    return pRetry(async (attempt) => {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            if (onFailedAttempt)
+                onFailedAttempt(err, attempt);
+            throw err;
+        }
+    }, opts);
+}
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,MAAyC,MAAM,SAAS,CAAC;AAOhE,MAAM,CAAC,MAAM,aAAa,GAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAUlE,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,6EAA6E;IAC7E,iDAAiD;IACjD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,8DAA8D;QAC9D,MAAM,MAAM,GAAI,GAAW,CAAC,MAA4B,CAAC;QACzD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,sCAAsC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,MAAmB,aAAa,EAChC,cAA2B,kBAAkB,EAC7C,eAAyD;IAEzD,MAAM,IAAI,GAAkB;QAC1B,OAAO,EAAE,GAAG,CAAC,GAAG;QAChB,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,UAAU,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,sBAAsB;QACnD,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;KACvC,CAAC;IAEF,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,eAAe;gBAAE,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,CAAC;AACX,CAAC"}

package/dist/safety/policy.d.ts

@@ -0,0 +1,23 @@
+import type { SafetyConfig } from "../config/types.js";
+import type { Logger } from "../log.js";
+export type Risk = "low" | "medium" | "high" | "destructive";
+export interface PolicyGateOptions {
+    safety: SafetyConfig;
+    logger?: Logger;
+}
+export declare function registerRisk(toolName: string, risk: Risk): void;
+export declare function getRisk(toolName: string): Risk;
+export declare function listRiskRegistry(): Record<string, Risk>;
+export declare class PolicyGate {
+    private readonly safety;
+    private readonly logger;
+    constructor(opts: PolicyGateOptions);
+    /**
+     * Decide whether a tool call should proceed. Throws ApprovalRequiredError
+     * if the tool is high/destructive risk and neither token nor flag is set.
+     *
+     * @returns true if the call should proceed
+     */
+    assertAllowed(toolName: string, args: Record<string, unknown>): boolean;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/safety/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/safety/policy.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,MAAM,IAAI,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAKD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAE/D;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAEvD;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,IAAI,EAAE,iBAAiB;IAKnC;;;;;OAKG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO;CA4BxE"}

package/dist/safety/policy.js

@@ -0,0 +1,81 @@
+/**
+ * PolicyGate — safety gate for tool invocations.
+ *
+ * Classifies tools by risk (low/medium/high/destructive) and enforces
+ * approval-token + dangerously_allow_destructive policy.
+ *
+ * Full tool registry lives in `risk.ts`. Phase 1A provides only the gate
+ * skeleton; tool registrations add entries to the registry in 1B–1D.
+ */
+import { timingSafeEqual } from "node:crypto";
+import { ApprovalRequiredError } from "../proxmox/errors.js";
+/** Mutable risk registry keyed by tool name. */
+const RISK_REGISTRY = new Map();
+export function registerRisk(toolName, risk) {
+    RISK_REGISTRY.set(toolName, risk);
+}
+export function getRisk(toolName) {
+    return RISK_REGISTRY.get(toolName) ?? "low";
+}
+export function listRiskRegistry() {
+    return Object.fromEntries(RISK_REGISTRY);
+}
+export class PolicyGate {
+    safety;
+    logger;
+    constructor(opts) {
+        this.safety = opts.safety;
+        this.logger = opts.logger;
+    }
+    /**
+     * Decide whether a tool call should proceed. Throws ApprovalRequiredError
+     * if the tool is high/destructive risk and neither token nor flag is set.
+     *
+     * @returns true if the call should proceed
+     */
+    assertAllowed(toolName, args) {
+        const risk = getRisk(toolName);
+        if (risk === "low")
+            return true;
+        if (risk === "medium") {
+            if (this.safety.auditOnly) {
+                this.logger?.info({ tool: toolName, risk, args: scrubArgs(args) }, "policy.audit");
+            }
+            return true;
+        }
+        // risk === "high" || risk === "destructive"
+        if (this.safety.dangerouslyAllowDestructive) {
+            this.logger?.warn({ tool: toolName, risk, args: scrubArgs(args), bypass: "dangerously_allow_destructive" }, "policy.bypass");
+            return true;
+        }
+        const providedToken = typeof args.approval_token === "string" ? args.approval_token : null;
+        if (providedToken && this.safety.approvalToken && tokensMatch(providedToken, this.safety.approvalToken)) {
+            this.logger?.warn({ tool: toolName, risk, args: scrubArgs(args) }, "policy.approved");
+            return true;
+        }
+        throw new ApprovalRequiredError(toolName, risk);
+    }
+}
+function tokensMatch(provided, expected) {
+    if (provided.length !== expected.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+    }
+    catch {
+        return false;
+    }
+}
+function scrubArgs(args) {
+    const out = {};
+    for (const [k, v] of Object.entries(args)) {
+        if (k === "approval_token" || k === "password" || k === "new_password" || k === "cipassword") {
+            out[k] = "[REDACTED]";
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=policy.js.map