impreza-cli 0.3.1__tar.gz → 0.4.0__tar.gz

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: impreza-cli
-Version: 0.3.1
+Version: 0.4.0
 Summary: Official command-line interface for the Impreza Host public REST API
 Author-email: Impreza Host <support@imprezahost.com>
 License: MIT
@@ -142,10 +142,10 @@ to see the full subcommand list, or `impreza <group> <command>
 | `account` | `info / balance / services / topup / topup-status` | Profile + balance + services + crypto top-up |
 | `catalog` | `products / product / product-groups / tlds` | Pre-purchase discovery |
 | `domain` | `show / check / pricing / register / transfer / set-nameservers / lock / unlock / id-protection / raa-verify / gdpr-auth / transfer-approval` + `domain dns list / add / update / delete / activate` | Domain registrations + full DNS CRUD |
-| `vps` | `list / show / status / start / stop / reboot / shutdown / set-hostname / set-password / reinstall / migrate / cancel` + `vps proxmox snapshots / backups / backup-schedules / network` + `vps cloud images / rescue / iso / rdns / ssh-keys / vnc / vnc-password / resize / boot-order / ipv6` | Cross-backend (Proxmox + Cloud) VPS with smart dispatch |
+| `vps` | `list / show / status / start / stop / reboot / shutdown / set-hostname / set-password / reinstall / migrate / cancel` + `vps proxmox snapshots / backups / backup-schedules / network` + `vps cloud images / rescue / iso / ssh-keys / vnc / vnc-password / resize / boot-order / ipv6` | Cross-backend (Proxmox + Cloud) VPS with smart dispatch |
 | `order` | `list / show / create / upgrade` | Submit / browse product orders |
 | `service` | `cancel` | Submit cancellation request (any service) |
-| `webhook` | `list / show / create / update / delete / rotate-secret / deliveries / event-types` | Webhook subscription management + delivery history |
+| `webhook` | `list / show / create / update / delete / rotate-secret / deliveries / event-types` | Webhook subscription management + delivery history. Event-payload contract documented in [`../openapi/asyncapi.yaml`](../openapi/asyncapi.yaml). |
 | `invoice` | `list / show` | Invoices with line items + transactions |
 | `key` | `whoami` | Active API key identity + IP whitelist |
 

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/README.md

@@ -101,10 +101,10 @@ to see the full subcommand list, or `impreza <group> <command>
 | `account` | `info / balance / services / topup / topup-status` | Profile + balance + services + crypto top-up |
 | `catalog` | `products / product / product-groups / tlds` | Pre-purchase discovery |
 | `domain` | `show / check / pricing / register / transfer / set-nameservers / lock / unlock / id-protection / raa-verify / gdpr-auth / transfer-approval` + `domain dns list / add / update / delete / activate` | Domain registrations + full DNS CRUD |
-| `vps` | `list / show / status / start / stop / reboot / shutdown / set-hostname / set-password / reinstall / migrate / cancel` + `vps proxmox snapshots / backups / backup-schedules / network` + `vps cloud images / rescue / iso / rdns / ssh-keys / vnc / vnc-password / resize / boot-order / ipv6` | Cross-backend (Proxmox + Cloud) VPS with smart dispatch |
+| `vps` | `list / show / status / start / stop / reboot / shutdown / set-hostname / set-password / reinstall / migrate / cancel` + `vps proxmox snapshots / backups / backup-schedules / network` + `vps cloud images / rescue / iso / ssh-keys / vnc / vnc-password / resize / boot-order / ipv6` | Cross-backend (Proxmox + Cloud) VPS with smart dispatch |
 | `order` | `list / show / create / upgrade` | Submit / browse product orders |
 | `service` | `cancel` | Submit cancellation request (any service) |
-| `webhook` | `list / show / create / update / delete / rotate-secret / deliveries / event-types` | Webhook subscription management + delivery history |
+| `webhook` | `list / show / create / update / delete / rotate-secret / deliveries / event-types` | Webhook subscription management + delivery history. Event-payload contract documented in [`../openapi/asyncapi.yaml`](../openapi/asyncapi.yaml). |
 | `invoice` | `list / show` | Invoices with line items + transactions |
 | `key` | `whoami` | Active API key identity + IP whitelist |
 

impreza_cli-0.4.0/impreza_cli/commands/dedicated.py

@@ -0,0 +1,466 @@
+"""``impreza dedicated`` subcommand surface — Phase 8.
+
+Twenty verbs over the :class:`~impreza.DedicatedResource` shipped in
+the SDK alongside this CLI. The public ``/dedicated/*`` namespace is
+vendor-agnostic: operations are gated by per-service capabilities,
+and capability-gated endpoints return ``NOT_SUPPORTED`` when the
+underlying service doesn't advertise the feature. Always inspect
+``dedicated capabilities <id>`` first when scripting.
+
+Discovery & state:
+* ``list`` / ``show <id>`` / ``capabilities <id>`` / ``status <id>``
+* ``ips <id>`` — IPs with current PTR
+* ``os-images <id>`` — OS images available for reinstall
+
+Power:
+* ``start <id>`` / ``shutdown <id>`` / ``reboot <id>``
+
+rDNS:
+* ``set-rdns <id> --ip --hostname``
+* ``reset-rdns <id>``
+
+KVM / IPMI:
+* ``kvm <id>`` — current access info
+* ``enable-kvm <id>`` — the SDK / server inject the caller's public
+  IP as the session-binding IP when the service needs it.
+* ``disable-kvm <id>``
+
+Firewall (requires ``firewall`` capability):
+* ``firewall <id>`` / ``ddos-logs <id>``
+* ``set-firewall <id> --ip --state --sensitivity``
+
+Bandwidth (requires ``bandwidth`` capability):
+* ``bandwidth <id> --type --scale``
+
+VPN credentials (requires ``vpn`` capability):
+* ``vpn <id>``
+
+Reinstall (destructive — wipes ALL data):
+* ``reinstall <id> --os-id --password --confirm [--yes]``
+    Requires both the SDK's ``confirm=True`` flag and the
+    ``X-Impreza-Confirm: WIPE`` header (the SDK injects the header
+    when ``confirm=True``). The CLI also prompts on a TTY unless
+    ``--yes`` is passed.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+import typer
+from impreza.exceptions import ApiError
+
+from ..output import OutputFormat, error, info, print_dict, print_table, success
+from ..sdk import make_client_or_exit
+from ..state import confirm_or_exit, from_typer_context, resolve_output
+from ._helpers import exit_on_api_error
+
+app = typer.Typer(
+    name="dedicated",
+    help="Manage dedicated servers. Operations gated by per-service capabilities.",
+    no_args_is_help=True,
+)
+
+
+# ── helpers ─────────────────────────────────────────────────────────
+
+
+def _emit(value: Any, *, ctx: typer.Context) -> None:
+    """Render a heterogeneous payload (dict, list[dict], or scalar).
+
+    The /dedicated/* payloads vary by service — there's no single
+    typed projection that fits every endpoint. Tables turn into flat
+    key=value dumps; JSON / YAML pass the structure through.
+    """
+    state = from_typer_context(ctx)
+    fmt = resolve_output(state, override=None)
+    if fmt is OutputFormat.TABLE and isinstance(value, dict):
+        print_dict(value)
+    elif fmt is OutputFormat.TABLE and isinstance(value, list) and value and isinstance(value[0], dict):
+        # Use the first row's keys as the column order so the table
+        # is stable across runs.
+        columns = list(value[0].keys())
+        print_table(columns, value)
+    else:
+        print_dict(value) if isinstance(value, dict) else typer.echo(_serialize(value, fmt))
+
+
+def _serialize(value: Any, fmt: OutputFormat) -> str:
+    """Format a non-dict value for JSON / YAML output."""
+    import json
+
+    if fmt is OutputFormat.YAML:
+        try:
+            import yaml  # type: ignore[import-not-found]
+
+            return yaml.safe_dump(value, sort_keys=False).rstrip()
+        except ImportError:  # pragma: no cover
+            return json.dumps(value, indent=2, ensure_ascii=False)
+    return json.dumps(value, indent=2, ensure_ascii=False)
+
+
+# ── discovery ──────────────────────────────────────────────────────
+
+
+@app.command("list")
+def cmd_list(ctx: typer.Context) -> None:
+    """List every dedicated server on the account."""
+    client = make_client_or_exit(ctx)
+    try:
+        items = client.dedicated.list()
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    if not items:
+        info("No dedicated servers on this account.")
+        return
+    fmt = resolve_output(from_typer_context(ctx), override=None)
+    if fmt is OutputFormat.TABLE:
+        columns = ["service_id", "domain", "ip", "status", "capabilities"]
+        rows = [
+            {
+                "service_id": item.get("service_id"),
+                "domain": item.get("domain", ""),
+                "ip": item.get("ip", ""),
+                "status": item.get("status", ""),
+                "capabilities": ",".join(item.get("capabilities") or []),
+            }
+            for item in items
+        ]
+        print_table(columns, rows)
+    else:
+        _emit(items, ctx=ctx)
+
+
+@app.command("show")
+def cmd_show(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show full details for a dedicated server."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.info(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("capabilities")
+def cmd_capabilities(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show the capability list advertised by a dedicated server.
+
+    Call this before any capability-gated sub-command — firewall,
+    bandwidth, vpn, kvm, reinstall, power — so you don't waste a
+    round-trip on a NOT_SUPPORTED response.
+    """
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.capabilities(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("status")
+def cmd_status(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show current power / provisioning state."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.status(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("ips")
+def cmd_ips(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """List the IPs assigned to the server with current PTR."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.ips(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("os-images")
+def cmd_os_images(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """List OS images available for reinstall."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.os_images(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+# ── power ──────────────────────────────────────────────────────────
+
+
+@app.command("start")
+def cmd_start(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Power on a dedicated server."""
+    client = make_client_or_exit(ctx)
+    try:
+        client.dedicated.start(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    success(f"Dedicated server {service_id} start signal sent.")
+
+
+@app.command("shutdown")
+def cmd_shutdown(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Graceful shutdown."""
+    client = make_client_or_exit(ctx)
+    try:
+        client.dedicated.shutdown(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    success(f"Dedicated server {service_id} shutdown signal sent.")
+
+
+@app.command("reboot")
+def cmd_reboot(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Reboot."""
+    client = make_client_or_exit(ctx)
+    try:
+        client.dedicated.reboot(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    success(f"Dedicated server {service_id} reboot signal sent.")
+
+
+# ── rDNS ───────────────────────────────────────────────────────────
+
+
+@app.command("set-rdns")
+def cmd_set_rdns(
+    ctx: typer.Context,
+    service_id: int = typer.Argument(...),
+    ip: str = typer.Option(..., "--ip", help="IP whose PTR you want to set."),
+    hostname: str = typer.Option(..., "--hostname", help="New PTR value."),
+) -> None:
+    """Set the PTR for a single IP on a dedicated server.
+
+    Applied synchronously on most services. On services without an
+    automated rDNS path the response is ``{status: queued, ...}`` and
+    an operator on our side completes it within a few hours.
+    """
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.set_rdns(service_id, ip, hostname)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("reset-rdns")
+def cmd_reset_rdns(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Reset every PTR back to the Impreza default (impreza.host pattern)."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.reset_rdns(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+# ── KVM ────────────────────────────────────────────────────────────
+
+
+@app.command("kvm")
+def cmd_kvm(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show current KVM / IPMI access info."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.kvm(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("enable-kvm")
+def cmd_enable_kvm(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Open a KVM/IPMI session.
+
+    The caller's public IP is injected as the session-binding IP
+    automatically when the service needs it — nothing for you to
+    pass.
+    """
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.enable_kvm(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("disable-kvm")
+def cmd_disable_kvm(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Close the active KVM/IPMI session."""
+    client = make_client_or_exit(ctx)
+    try:
+        client.dedicated.disable_kvm(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    success(f"KVM session for service {service_id} disabled.")
+
+
+# ── Firewall (capability-gated) ────────────────────────────────────
+
+
+@app.command("firewall")
+def cmd_firewall(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show DDoS firewall state. Requires the ``firewall`` capability."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.firewall(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("ddos-logs")
+def cmd_ddos_logs(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show DDoS attack logs. Requires the ``firewall`` capability."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.ddos_logs(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+@app.command("set-firewall")
+def cmd_set_firewall(
+    ctx: typer.Context,
+    service_id: int = typer.Argument(...),
+    ip: str = typer.Option(..., "--ip", help="IP to update."),
+    state: str | None = typer.Option(
+        None,
+        "--state",
+        help="always_on | redirect_on_attack (omit to leave unchanged).",
+    ),
+    sensitivity: str | None = typer.Option(
+        None,
+        "--sensitivity",
+        help="low | normal | medium | high (omit to leave unchanged).",
+    ),
+) -> None:
+    """Update DDoS firewall state/sensitivity for an IP. Requires the ``firewall`` capability."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.set_firewall(
+            service_id, ip=ip, state=state, sensitivity=sensitivity
+        )
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+# ── Bandwidth (capability-gated) ───────────────────────────────────
+
+
+@app.command("bandwidth")
+def cmd_bandwidth(
+    ctx: typer.Context,
+    service_id: int = typer.Argument(...),
+    type: str = typer.Option(
+        "port_bits",
+        "--type",
+        help="port_bits | port_upkts | port_percent | port_errors | port_pktsize | port_discards",
+    ),
+    scale: str = typer.Option("month", "--scale", help="day | week | month"),
+) -> None:
+    """Bandwidth graph (PNG base64). Requires the ``bandwidth`` capability."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.bandwidth(service_id, type=type, scale=scale)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+# ── VPN (capability-gated) ─────────────────────────────────────────
+
+
+@app.command("vpn")
+def cmd_vpn(ctx: typer.Context, service_id: int = typer.Argument(...)) -> None:
+    """Show rotating VPN credentials. Requires the ``vpn`` capability."""
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.vpn(service_id)
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)
+
+
+# ── Reinstall (destructive) ────────────────────────────────────────
+
+
+@app.command("reinstall")
+def cmd_reinstall(
+    ctx: typer.Context,
+    service_id: int = typer.Argument(...),
+    os_id: str = typer.Option(..., "--os-id", help="OS id from `dedicated os-images <id>`."),
+    password: str = typer.Option(
+        ..., "--password", help="New root password (min 8 chars).", prompt=True, hide_input=True
+    ),
+    os_label: str | None = typer.Option(
+        None, "--os-label", help="Optional OS label — auto-resolved from os-id if absent."
+    ),
+    confirm: bool = typer.Option(
+        False,
+        "--confirm",
+        help="Acknowledge that ALL DATA will be wiped.",
+    ),
+    yes: bool = typer.Option(False, "--yes", "-y", help="Skip the interactive prompt."),
+) -> None:
+    """Reinstall the OS. Destructive — wipes ALL data.
+
+    On services that support a synchronous reinstall path, the result
+    returns immediately and includes the new root password. On services
+    where the reinstall has to be applied manually, the response is
+    ``{status: queued, message: ...}`` and our team executes the
+    reinstall within a few hours.
+
+    Both ``--confirm`` AND the prompt (or ``--yes``) must pass. The
+    required ``X-Impreza-Confirm: WIPE`` header is injected by the SDK
+    automatically.
+    """
+    if not confirm:
+        error("Reinstall is destructive — pass --confirm to acknowledge data loss.")
+        raise typer.Exit(code=1)
+    confirm_or_exit(
+        f"Reinstall service {service_id} to os-id={os_id}? ALL DATA WILL BE LOST.",
+        yes=yes,
+    )
+    client = make_client_or_exit(ctx)
+    try:
+        data = client.dedicated.reinstall(
+            service_id,
+            os_id=os_id,
+            password=password,
+            confirm=True,
+            os_label=os_label,
+        )
+    except ApiError as exc:
+        exit_on_api_error(exc)
+        return
+    _emit(data, ctx=ctx)

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/impreza_cli/commands/vps_cloud.py

@@ -3,7 +3,7 @@
 Cloud sub-resources mounted on the main ``vps`` Typer
 app as the ``cloud`` namespace. Mirror of the 3.4 Proxmox layout.
 
-Five nested sub-apps + five inline verbs at the cloud root:
+Four nested sub-apps + five inline verbs at the cloud root:
 
 * ``vps cloud images`` — ``list / create / restore / delete``
   Account-scoped on the wire (the Cloud image catalog is
@@ -15,15 +15,22 @@ Five nested sub-apps + five inline verbs at the cloud root:
 
 * ``vps cloud iso`` — ``mount / unmount``
 
-* ``vps cloud rdns`` — ``get / set / delete``
-  Account-scoped on the API side (``/vps/cloud/rdns/{ip}``); the
-  SDK exposes it via the bound VPS for ergonomics. ``<ip>`` selects
-  the record within the account.
-
 * ``vps cloud ssh-keys`` — ``list / assign``
   ``list`` returns every key on the Cloud account; ``assign``
   attaches one or more existing keys to the bound VPS.
 
+* ``vps cloud rdns`` (``get / set / delete``) was previously here
+  but is **removed from the CLI surface in 7.7**. The
+  ``/vps/cloud/rdns/{ip}`` endpoint hits a WAF/mod_security rule
+  on the public edge (dotted-IPv4 path segments are flagged as
+  suspicious) and returns the WAF maintenance HTML page instead
+  of a JSON response. Server-side fix is owned by whoever
+  configures the WAF rules; until that lands, the CLI hides the
+  broken verbs rather than ship a known-broken surface. The SDK
+  resource (``vps.rdns.get/set/delete``) stays intact so library
+  consumers can still call it and handle the WAF response
+  themselves.
+
 Inline verbs (no sub-app):
 
 * ``vps cloud vnc <id>`` — read the VNC client triple (host, port,
@@ -65,7 +72,7 @@ from ._helpers import exit_on_api_error, resolve_vps_or_exit
 
 app = typer.Typer(
     name="cloud",
-    help="Cloud-only sub-resources: images, rescue, iso, rdns, ssh-keys, etc.",
+    help="Cloud-only sub-resources: images, rescue, iso, ssh-keys, etc.",
     no_args_is_help=True,
 )
 
@@ -84,11 +91,6 @@ iso_app = typer.Typer(
     help="Mount / unmount an ISO on a Cloud VPS.",
     no_args_is_help=True,
 )
-rdns_app = typer.Typer(
-    name="rdns",
-    help="Reverse-DNS records for Cloud account IPs.",
-    no_args_is_help=True,
-)
 ssh_keys_app = typer.Typer(
     name="ssh-keys",
     help="List account-level SSH keys and assign to a Cloud VPS.",
@@ -100,10 +102,11 @@ ipv6_app = typer.Typer(
     no_args_is_help=True,
 )
 
+# rdns sub-app removed in 7.7 (WAF-blocked endpoint). SDK resource
+# `vps.rdns.get/set/delete` stays available for library consumers.
 app.add_typer(images_app)
 app.add_typer(rescue_app)
 app.add_typer(iso_app)
-app.add_typer(rdns_app)
 app.add_typer(ssh_keys_app)
 app.add_typer(ipv6_app)
 
@@ -448,117 +451,21 @@ def iso_unmount(
 
 
 # ══════════════════════════════════════════════════════════════════════
-# rDNS
+# rDNS — removed from CLI surface in 7.7
 # ══════════════════════════════════════════════════════════════════════
-
-
-@rdns_app.command("get")
-def rdns_get(
-    typer_ctx: typer.Context,
-    service_id: int = typer.Argument(
-        ...,
-        help=(
-            "Service id of any Cloud VPS on the account (rDNS is "
-            "account-scoped; this id is only used to confirm the account)."
-        ),
-    ),
-    ip: str = typer.Argument(..., help="IP address whose rDNS to read."),
-    output: OutputFormat | None = typer.Option(
-        None, "--output", "-o",
-        help="Output format. Overrides the global --output flag.",
-        case_sensitive=False,
-    ),
-) -> None:
-    """Read the rDNS record for an IP.
-
-    Wraps ``vps.rdns.get(ip)``. The API path is account-scoped
-    (``GET /vps/cloud/rdns/{ip}``).
-    """
-    state = from_typer_context(typer_ctx)
-    fmt = resolve_output(state, output)
-    with make_client_or_exit(state) as client:
-        vps = resolve_vps_or_exit(client, service_id)
-        try:
-            result = vps.rdns.get(ip)
-        except BackendNotSupported:
-            _cloud_only_exit("rdns")
-            return
-        except ApiError as exc:
-            exit_on_api_error(exc)
-            return
-
-    if not result:
-        typer.echo(f"No rDNS record for {ip}.")
-        return
-    print_dict(f"rDNS — {ip}", {str(k): v for k, v in result.items()}, fmt=fmt)
-
-
-@rdns_app.command("set")
-def rdns_set(
-    typer_ctx: typer.Context,
-    service_id: int = typer.Argument(
-        ...,
-        help="Service id of any Cloud VPS on the account (see `rdns get`).",
-    ),
-    ip: str = typer.Argument(..., help="IP address to set rDNS on."),
-    hostname: str = typer.Argument(..., help="Hostname to point the rDNS PTR at."),
-) -> None:
-    """Set the rDNS PTR record for an IP.
-
-    Wraps ``vps.rdns.set(ip, hostname)``. Some upstreams reject
-    hostnames that don't resolve forward to the IP — those return
-    a 4xx and the SDK surfaces it as :class:`InvalidRequest`.
-    """
-    state = from_typer_context(typer_ctx)
-    with make_client_or_exit(state) as client:
-        vps = resolve_vps_or_exit(client, service_id)
-        try:
-            vps.rdns.set(ip, hostname)
-        except BackendNotSupported:
-            _cloud_only_exit("rdns")
-            return
-        except ApiError as exc:
-            exit_on_api_error(exc)
-            return
-    success(f"rDNS for {ip} set to {hostname!r}.")
-
-
-@rdns_app.command("delete")
-def rdns_delete(
-    typer_ctx: typer.Context,
-    service_id: int = typer.Argument(
-        ...,
-        help="Service id of any Cloud VPS on the account (see `rdns get`).",
-    ),
-    ip: str = typer.Argument(..., help="IP address whose rDNS to clear."),
-    yes: bool = typer.Option(
-        False, "--yes", "-y", help="Skip the deletion confirmation prompt."
-    ),
-) -> None:
-    """Delete the rDNS record for an IP.
-
-    Wraps ``vps.rdns.delete(ip)``. After deletion, reverse-DNS
-    lookups on the IP return whatever default the upstream
-    configures.
-    """
-    state = from_typer_context(typer_ctx)
-    confirm_or_exit(
-        f"Removing rDNS for {ip} reverts reverse-DNS lookups to the "
-        "upstream default. Mail servers and rate-limiters relying on "
-        "the PTR may behave differently.",
-        yes=yes,
-    )
-    with make_client_or_exit(state) as client:
-        vps = resolve_vps_or_exit(client, service_id)
-        try:
-            vps.rdns.delete(ip)
-        except BackendNotSupported:
-            _cloud_only_exit("rdns")
-            return
-        except ApiError as exc:
-            exit_on_api_error(exc)
-            return
-    success(f"rDNS removed for {ip}.")
+#
+# `rdns_app` + the get/set/delete commands lived here through 0.3.1.
+# The /vps/cloud/rdns/{ip} endpoint hits a WAF rule on the public
+# edge (dotted-IPv4 path segments) and returns HTML instead of JSON,
+# so the verbs are unusable end-to-end. SDK methods stay available
+# (`client.vps.get(id).rdns.get/set/delete`) for library consumers
+# who want to handle the WAF response themselves.
+#
+# Re-add the typer app + commands here when the server-side WAF rule
+# is fixed. The shape was three commands matching `vps.rdns.{get,
+# set, delete}` with a service-id positional + `<ip>` (+ `<hostname>`
+# for set) — see git history at tag `cli-v0.3.1` for the original
+# code if you need to restore it.
 
 
 # ══════════════════════════════════════════════════════════════════════

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/impreza_cli/main.py

@@ -19,6 +19,7 @@ from . import __version__
 from .commands import account as account_cmd
 from .commands import catalog as catalog_cmd
 from .commands import context as context_cmd
+from .commands import dedicated as dedicated_cmd
 from .commands import doctor as doctor_cmd
 from .commands import domain as domain_cmd
 from .commands import invoice as invoice_cmd
@@ -86,6 +87,7 @@ def _root(
 app.add_typer(account_cmd.app, name="account")
 app.add_typer(catalog_cmd.app, name="catalog")
 app.add_typer(context_cmd.app, name="context")
+app.add_typer(dedicated_cmd.app, name="dedicated")
 app.add_typer(doctor_cmd.app, name="doctor")
 app.add_typer(domain_cmd.app, name="domain")
 app.add_typer(invoice_cmd.app, name="invoice")

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/impreza_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: impreza-cli
-Version: 0.3.1
+Version: 0.4.0
 Summary: Official command-line interface for the Impreza Host public REST API
 Author-email: Impreza Host <support@imprezahost.com>
 License: MIT
@@ -142,10 +142,10 @@ to see the full subcommand list, or `impreza <group> <command>
 | `account` | `info / balance / services / topup / topup-status` | Profile + balance + services + crypto top-up |
 | `catalog` | `products / product / product-groups / tlds` | Pre-purchase discovery |
 | `domain` | `show / check / pricing / register / transfer / set-nameservers / lock / unlock / id-protection / raa-verify / gdpr-auth / transfer-approval` + `domain dns list / add / update / delete / activate` | Domain registrations + full DNS CRUD |
-| `vps` | `list / show / status / start / stop / reboot / shutdown / set-hostname / set-password / reinstall / migrate / cancel` + `vps proxmox snapshots / backups / backup-schedules / network` + `vps cloud images / rescue / iso / rdns / ssh-keys / vnc / vnc-password / resize / boot-order / ipv6` | Cross-backend (Proxmox + Cloud) VPS with smart dispatch |
+| `vps` | `list / show / status / start / stop / reboot / shutdown / set-hostname / set-password / reinstall / migrate / cancel` + `vps proxmox snapshots / backups / backup-schedules / network` + `vps cloud images / rescue / iso / ssh-keys / vnc / vnc-password / resize / boot-order / ipv6` | Cross-backend (Proxmox + Cloud) VPS with smart dispatch |
 | `order` | `list / show / create / upgrade` | Submit / browse product orders |
 | `service` | `cancel` | Submit cancellation request (any service) |
-| `webhook` | `list / show / create / update / delete / rotate-secret / deliveries / event-types` | Webhook subscription management + delivery history |
+| `webhook` | `list / show / create / update / delete / rotate-secret / deliveries / event-types` | Webhook subscription management + delivery history. Event-payload contract documented in [`../openapi/asyncapi.yaml`](../openapi/asyncapi.yaml). |
 | `invoice` | `list / show` | Invoices with line items + transactions |
 | `key` | `whoami` | Active API key identity + IP whitelist |
 

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/impreza_cli.egg-info/SOURCES.txt

@@ -17,6 +17,7 @@ impreza_cli/commands/_helpers.py
 impreza_cli/commands/account.py
 impreza_cli/commands/catalog.py
 impreza_cli/commands/context.py
+impreza_cli/commands/dedicated.py
 impreza_cli/commands/doctor.py
 impreza_cli/commands/domain.py
 impreza_cli/commands/invoice.py

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/tests/test_phase_3_5_smoke.py

@@ -8,24 +8,25 @@ Bucketed by reversibility, the same way 3.3 / 3.4 are:
   smokes so a casual ``pytest`` run never touches the live API.
 * **Catastrophic** (images create/restore/delete, resize,
   boot-order, vnc-password rotate, rescue enable, iso mount,
-  rdns set/delete, ipv6 enable): real state changes — some
-  reversible (boot-order, rescue, iso) and some that consume
-  storage quota (images create) or have billing impact
-  (resize). Mock-only by design.
+  ipv6 enable): real state changes — some reversible
+  (boot-order, rescue, iso) and some that consume storage quota
+  (images create) or have billing impact (resize). Mock-only by
+  design.
 
 The cheap round-trips that 3.3's set-hostname / 3.4's snapshots
-create+delete enabled don't have direct equivalents here:
-
-  - rdns get is safe to read but requires knowing a valid IP
-    (the VPS's dedicated_ip from `vps show`). Could be done as
-    a round-trip (`set sentinel → get → delete-or-restore`)
-    but the upstream may reject hostnames that don't resolve
-    forward, so the test would need to construct a resolvable
-    sentinel. Deferred for now.
+create+delete enabled don't have a direct equivalent here:
+
   - vnc read returns short-lived credentials; testing them
     would require an actual VNC client. Just exercise the
     request-response.
 
+The earlier ``vps cloud rdns`` smoke (read for the VPS's
+dedicated_ip) was removed in 7.7 along with the CLI verbs —
+the public-edge WAF rejects /vps/cloud/rdns/{ip} paths and
+returns HTML instead of JSON. SDK-level unit tests for the
+underlying ``vps.rdns`` resource still live in
+sdk-python/tests/test_vps_specific_unit.py.
+
 If we add reversible round-trips later, gate them behind
 extra opt-in flags (``IMPREZA_TEST_ALLOW_RDNS_CHANGE=1`` etc.),
 following the 3.3 ``IMPREZA_TEST_ALLOW_PASSWORD_RESET`` pattern.
@@ -175,59 +176,8 @@ def test_smoke_vnc_read(live_seeded_config: Path) -> None:
     )
 
 
-# ── rdns: read for the VPS's own dedicated IP ───────────────────────
-
-
-@pytest.mark.skipif(
-    os.environ.get("IMPREZA_DESTRUCTIVE_TESTS") != "1",
-    reason="reads from a real account",
-)
-def test_smoke_rdns_get_dedicated_ip(live_seeded_config: Path) -> None:
-    """Best-effort: look up the VPS's dedicated_ip via `vps show`,
-    then read its rDNS. Skips cleanly if the VPS doesn't have a
-    dedicated_ip exposed (some flavours don't).
-    """
-    vps_id = _test_cloud_vps_id()
-
-    show_result = runner.invoke(
-        app, ["vps", "show", str(vps_id), "--output", "json"]
-    )
-    if show_result.exit_code != 0:
-        pytest.fail(f"vps show failed: {show_result.stderr.strip()!r}")
-    info = json.loads(show_result.stdout)
-    dedicated_ip = info.get("dedicated_ip")
-    if not dedicated_ip:
-        pytest.skip(
-            f"VPS {vps_id} has no dedicated_ip in its Service record "
-            "— rDNS read needs a specific IP target"
-        )
-
-    result = runner.invoke(
-        app,
-        ["vps", "cloud", "rdns", "get", str(vps_id), dedicated_ip,
-         "--output", "json"],
-    )
-    if result.exit_code != 0:
-        if "Proxmox backend" in result.stderr:
-            pytest.skip(f"VPS {vps_id} is on Proxmox — rdns is Cloud-only")
-        # rDNS-not-set is a legitimate state; the SDK returns an empty
-        # dict and the CLI prints "No rDNS record" on stdout. Treat
-        # any non-zero exit other than that as a failure.
-        if "No rDNS record" in result.stdout:
-            print(f"\n  VPS {vps_id}: no rDNS record for {dedicated_ip}")
-            return
-        # the Cloud backend sometimes returns 502 instead of 404 when the
-        # rDNS record isn't set or the IP isn't in their managed pool.
-        # Treat as skip rather than failure — the integration plumbing
-        # is covered by unit tests with respx mocks.
-        if "502" in result.stderr or "UPSTREAM_ERROR" in result.stderr:
-            pytest.skip(
-                f"Cloud backend rejected rDNS read for {dedicated_ip} "
-                f"(upstream 502): {result.stderr.strip()!r}"
-            )
-        pytest.fail(f"rdns get failed: {result.stderr.strip()!r}")
-    if result.stdout.strip().startswith("{"):
-        parsed = json.loads(result.stdout)
-        print(f"\n  VPS {vps_id}: rDNS for {dedicated_ip} = {parsed}")
-    else:
-        print(f"\n  VPS {vps_id}: rDNS for {dedicated_ip} read OK (empty)")
+# rdns smoke test removed in 7.7. The `vps cloud rdns get` verb is
+# no longer exposed by the CLI (WAF-blocked endpoint — the public
+# edge returns the maintenance HTML page for /vps/cloud/rdns/{ip}
+# paths with dotted-IPv4 segments). Re-add when the server-side WAF
+# rule is fixed and `rdns_app` returns to commands/vps_cloud.py.

{impreza_cli-0.3.1 → impreza_cli-0.4.0}/tests/test_vps_cloud_commands.py

@@ -1,17 +1,19 @@
-"""Unit tests for ``impreza vps cloud`` (Phase 3.5).
+"""Unit tests for ``impreza vps cloud`` (Phase 3.5; 7.7 trimmed rdns).
 
-Mirrors the 3.4 Proxmox unit suite — covers the five nested
-sub-apps (images, rescue, iso, rdns, ssh-keys) plus the five
-inline verbs at the cloud root (vnc, vnc-password, resize,
-boot-order, ipv6 enable).
+Mirrors the 3.4 Proxmox unit suite — covers the four nested
+sub-apps (images, rescue, iso, ssh-keys) plus the five inline
+verbs at the cloud root (vnc, vnc-password, resize, boot-order,
+ipv6 enable). The fifth sub-app (rdns) was removed from the CLI
+surface in 7.7 (WAF-blocked endpoint); SDK-level tests for
+`vps.rdns.get/set/delete` stay in
+sdk-python/tests/test_vps_specific_unit.py.
 
 For each verb:
 
 * happy-path test pins the URL + body
 * a Proxmox-backend test asserts the friendly "Cloud-only" stderr
   line (the inverse of 3.4's BackendNotSupported handling)
-* destructive verbs (delete, restore, rdns delete) get a
-  decline-at-prompt test
+* destructive verbs (delete, restore) get a decline-at-prompt test
 * boot-order has a client-side validation test (unknown --order
   rejected before any HTTP)
 """
@@ -299,56 +301,11 @@ def test_iso_unmount(seeded_config: Path) -> None:
 # ══════════════════════════════════════════════════════════════════════
 
 
-@respx.mock
-def test_rdns_get(seeded_config: Path) -> None:
-    respx.get(f"{BASE}/account/services/17987").mock(
-        return_value=httpx.Response(200, json=_service_envelope(_cloud_service()))
-    )
-    route = respx.get(f"{BASE}/vps/cloud/rdns/1.2.3.4").mock(
-        return_value=httpx.Response(
-            200, json=_ok({"ip": "1.2.3.4", "hostname": "mail.example.com"})
-        )
-    )
-    result = runner.invoke(
-        app, ["vps", "cloud", "rdns", "get", "17987", "1.2.3.4"]
-    )
-    assert result.exit_code == 0, result.stderr
-    assert route.called
-    assert "mail.example.com" in result.stdout
-
-
-@respx.mock
-def test_rdns_set(seeded_config: Path) -> None:
-    respx.get(f"{BASE}/account/services/17987").mock(
-        return_value=httpx.Response(200, json=_service_envelope(_cloud_service()))
-    )
-    route = respx.put(f"{BASE}/vps/cloud/rdns/1.2.3.4").mock(
-        return_value=httpx.Response(200, json=_ok())
-    )
-    result = runner.invoke(
-        app,
-        ["vps", "cloud", "rdns", "set", "17987", "1.2.3.4", "mail.example.com"],
-    )
-    assert result.exit_code == 0, result.stderr
-    assert route.called
-    body = json.loads(route.calls.last.request.content)
-    assert body == {"hostname": "mail.example.com"}
-
-
-@respx.mock
-def test_rdns_delete_with_yes(seeded_config: Path) -> None:
-    respx.get(f"{BASE}/account/services/17987").mock(
-        return_value=httpx.Response(200, json=_service_envelope(_cloud_service()))
-    )
-    route = respx.delete(f"{BASE}/vps/cloud/rdns/1.2.3.4").mock(
-        return_value=httpx.Response(200, json=_ok())
-    )
-    result = runner.invoke(
-        app,
-        ["vps", "cloud", "rdns", "delete", "17987", "1.2.3.4", "--yes"],
-    )
-    assert result.exit_code == 0, result.stderr
-    assert route.called
+# rdns CLI tests removed in 7.7. The `vps cloud rdns` sub-app is no
+# longer registered (WAF-blocked endpoint); SDK-level tests for
+# `vps.rdns.get/set/delete` still live in
+# sdk-python/tests/test_vps_specific_unit.py for library consumers
+# who route around the CLI surface.
 
 
 # ══════════════════════════════════════════════════════════════════════