antrieb

Previous value: -"VM topology. Each entry is either a shorthand string (\"ubuntu24.04\" = 1 VM, \"ubuntu24.04 x3\" = 3 VMs) OR an object {image, count?}. Init scripts are NOT part of provision — run them through exec with \"@namespace/name\" after the cluster is ready. This keeps provision sub-second and avoids hidden async state. Example: [{\"image\":\"ubuntu24.04\",\"count\":3},{\"image\":\"vyos\"}]"New value: +"VM topology. Each entry is either a shorthand string (\"ubuntu24.04\" = 1 VM, \"ubuntu24.04 x3\" = 3 VMs) OR an object {image, count?}. Cap: **max 4 target nodes per cluster**. Controller images (e.g. ansible-controller) do not count — an Ansible setup can be controller + 4 targets = 5 VMs. Init scripts are NOT part of provision — run them through exec with \"@namespace/name\" after the cluster is ready. This keeps provision sub-second and avoids hidden async state. Example: [{\"image\":\"ubuntu24.04\",\"count\":3},{\"image\":\"vyos\"}]"

Previous value: -"Required for type=runbook. Markdown document describing the scenario. Structure: `## Topology required` (describes cluster shape the runbook applies to — images, NICs, networks), `## Variables` (lists placeholders like `<LAN_SUBNET>` callers substitute), `## Steps` (numbered, one per major action, prose explaining WHY + fenced shell for the actual command, annotating which node each step targets), `## Verify` (how to confirm success). Keep imperative — the reader (another LLM) will substitute variables and issue exec calls. Write commands idempotently so a second application is safe (`id user || useradd`, `grep -q entry /etc/hosts || echo ... >> /etc/hosts`, `systemctl is-active svc || systemctl start svc`)."New value: +"Required for type=runbook. Markdown document describing the scenario. Structure: `## Topology required` (describes cluster shape the runbook applies to — images, NICs, networks), `## Variables` (lists placeholders like `<LAN_SUBNET>` callers substitute), `## Steps` (numbered, one per major action, prose explaining WHY + fenced shell for the actual command, annotating which node each step targets), `## Verify` (how to confirm success). Keep imperative — the reader (another LLM) will substitute variables and issue exec calls. Write commands idempotently so a second application is safe (`id user || useradd`, `grep -q entry /etc/hosts || echo ... >> /etc/hosts`, `systemctl is-active svc || systemctl start svc`). The backend validates that the session_id you pass actually exercised this scenario — if the judge returns FAIL, the save is refused with the reason."

Previous value: -"Required for type=image. Session ID of the provisioned cluster."New value: +"Required for type=image AND type=runbook. For type=image: the session whose node is being snapshotted. For type=runbook: the session whose exec history actually demonstrates the scenario — the backend judges the history against the runbook body with an LLM and refuses to save if the session did not exercise what the runbook claims. Only successful demonstrations become runbooks."

Previous value: -"The identifier of the thing to delete. For type=cluster: the session_id returned by provision. For type=image: the short image name (e.g. \"my-nginx\", not \"antrieb:my-nginx:v1\"). For type=function or type=network: the short name from your org (e.g. \"deploy-nginx\") or the fully-qualified \"namespace/name\" form."New value: +"The identifier of the thing to delete. For type=cluster: the session_id returned by provision. For type=image: the short image name. For type=runbook/network: the short name or \"namespace/short\" fq_name."

Previous value: -[
-  "cluster",
-  "image",
-  "function",
-  "network"
-]New value: +[
+  "cluster",
+  "image",
+  "runbook",
+  "network"
+]

Previous value: -"Shell command, or a saved-function reference \"@namespace/name\" (optionally prefixed with KEY=val env bindings)."New value: +"Literal shell command to run on the node. Cluster-scoped env vars (NODE_NAME, NODE_INDEX, NODE_IP, CLUSTER_HOSTS, CLUSTER_SSH_PUBKEY, CLUSTER_SSH_PRIVKEY) are available inside the command."

Previous value: -"Required for type=function. The function body — string for one command, or array of strings for a sequence of steps. **Each step runs in its own shell invocation**, so variables set in one step are NOT visible in the next — if a step needs state from an earlier step, have it read from a file, a known path, or re-derive. **Write each step to be idempotent** — functions get re-invoked on retries, on different nodes, and on already-configured VMs; guard mutations (e.g. `id user || useradd …`, `grep -q entry /etc/hosts || echo entry >> /etc/hosts`, `systemctl is-active svc || systemctl start svc`) so a second invocation is a no-op rather than a failure or a duplicate."New value: +"Required for type=runbook. Markdown document describing the scenario. Structure: `## Topology required` (describes cluster shape the runbook applies to — images, NICs, networks), `## Variables` (lists placeholders like `<LAN_SUBNET>` callers substitute), `## Steps` (numbered, one per major action, prose explaining WHY + fenced shell for the actual command, annotating which node each step targets), `## Verify` (how to confirm success). Keep imperative — the reader (another LLM) will substitute variables and issue exec calls. Write commands idempotently so a second application is safe (`id user || useradd`, `grep -q entry /etc/hosts || echo ... >> /etc/hosts`, `systemctl is-active svc || systemctl start svc`)."

Removed value: -[
-  {
-    "type": "string"
-  },
-  {
-    "items": {
-      "type": "string"
-    },
-    "type": "array"
-  }
-]

Added value: +"string"

Previous value: -"Optional for type=function/network. Short human description used by search."New value: +"Optional for type=runbook/network. Short human description used by search. Critical for runbooks — the description is what the LLM sees in browse mode; make it specific enough to distinguish from similar-named variants."

Previous value: -"Name for the saved entity (lowercase, hyphens). For type=image: becomes antrieb:<name>:v1. For type=function/network: becomes referenceable as @<namespace>/<name>."New value: +"Name for the saved entity (lowercase, hyphens). For type=image: becomes antrieb:<name>:v1. For type=runbook/network: becomes referenceable as @<namespace>/<name>."

Previous value: -[
-  "image",
-  "function",
-  "network"
-]New value: +[
+  "image",
+  "runbook",
+  "network"
+]

Added value: +{
+  "description": "Fully-qualified name (namespace/name) of a specific runbook to fetch. When set for type=runbook, returns the runbook WITH its full markdown body — use this after browsing so you can read the scenario steps before applying them. Ignored for type=image/network/cluster.",
+  "type": "string"
+}

Previous value: -"Full-text filter on name, description, and fq_name. Applies to type=image, type=function, and type=network. Ignored for type=cluster."New value: +"Full-text filter on name, description, and fq_name. Applies to type=image/runbook/network. Ignored for type=cluster, and ignored when fq_name is set."

Previous value: -"Max results (default 20, max 100)."New value: +"Max results (default 20, max 100). Ignored when fq_name is set."

Previous value: -"Catalog to query. \"image\" (default) — VM images available to provision. \"cluster\" — clusters you currently have running (ignores keywords/limit). \"function\" — saved functions you can invoke through exec. \"network\" — saved network specs you can reference in provision.networks. Uses the same enum values as save."New value: +"Catalog to query. \"image\" (default) — VM images available to provision. \"cluster\" — clusters you currently have running (ignores keywords/limit). \"runbook\" — saved scenarios in markdown. \"network\" — saved network specs. Uses the same enum values as save."

Previous value: -[
-  "image",
-  "cluster",
-  "function",
-  "network"
-]New value: +[
+  "image",
+  "cluster",
+  "runbook",
+  "network"
+]

Previous value: -"Required for type=function. The function body — string for one command, or array of strings for a sequence of steps."New value: +"Required for type=function. The function body — string for one command, or array of strings for a sequence of steps. **Each step runs in its own shell invocation**, so variables set in one step are NOT visible in the next — if a step needs state from an earlier step, have it read from a file, a known path, or re-derive. **Write each step to be idempotent** — functions get re-invoked on retries, on different nodes, and on already-configured VMs; guard mutations (e.g. `id user || useradd …`, `grep -q entry /etc/hosts || echo entry >> /etc/hosts`, `systemctl is-active svc || systemctl start svc`) so a second invocation is a no-op rather than a failure or a duplicate."

Removed value: -{
-  "description": "Image name to decommission (e.g. \"my-nginx\").",
-  "type": "string"
-}

Added value: +{
+  "description": "The identifier of the thing to delete. For type=cluster: the session_id returned by provision. For type=image: the short image name (e.g. \"my-nginx\", not \"antrieb:my-nginx:v1\"). For type=function or type=network: the short name from your org (e.g. \"deploy-nginx\") or the fully-qualified \"namespace/name\" form.",
+  "type": "string"
+}

Removed value: -{
-  "description": "Session ID of the cluster to destroy.",
-  "type": "string"
-}

Added value: +{
+  "description": "What to delete. Uses the same enum values as save (plus \"cluster\").",
+  "enum": [
+    "cluster",
+    "image",
+    "function",
+    "network"
+  ],
+  "type": "string"
+}

Added value: +[
+  "type",
+  "name"
+]

Previous value: -"Shell command, or a saved-init reference \"@namespace/name\" (optionally prefixed with KEY=val env bindings)."New value: +"Shell command, or a saved-function reference \"@namespace/name\" (optionally prefixed with KEY=val env bindings)."

Previous value: -"Required for type=init. The init script — string for one command, or array of strings for a sequence."New value: +"Required for type=function. The function body — string for one command, or array of strings for a sequence of steps."

Previous value: -"Optional for type=init/network. Short human description used by search."New value: +"Optional for type=function/network. Short human description used by search."

Previous value: -"Name for the saved entity (lowercase, hyphens). For type=image: becomes antrieb:<name>:v1. For type=init/network: becomes referenceable as @<namespace>/<name>."New value: +"Name for the saved entity (lowercase, hyphens). For type=image: becomes antrieb:<name>:v1. For type=function/network: becomes referenceable as @<namespace>/<name>."

Previous value: -[
-  "image",
-  "init",
-  "network"
-]New value: +[
+  "image",
+  "function",
+  "network"
+]

Previous value: -"Search keywords to filter images (searches name, description, tags). Only for type=images."New value: +"Full-text filter on name, description, and fq_name. Applies to type=image, type=function, and type=network. Ignored for type=cluster."

Previous value: -"Max results (default: 20, max: 100)"New value: +"Max results (default 20, max 100)."

Previous value: -"What to search: \"image\" (default — VM images), \"cluster\" (your active clusters), \"init\" (saved init scripts), \"network\" (saved network specs from your platform team — reference them as @namespace/name in provision's networks array). Matches the type values used by the save tool."New value: +"Catalog to query. \"image\" (default) — VM images available to provision. \"cluster\" — clusters you currently have running (ignores keywords/limit). \"function\" — saved functions you can invoke through exec. \"network\" — saved network specs you can reference in provision.networks. Uses the same enum values as save."

Previous value: -[
-  "image",
-  "cluster",
-  "init",
-  "network"
-]New value: +[
+  "image",
+  "cluster",
+  "function",
+  "network"
+]

Previous value: -"Shell command to execute on the node."New value: +"Shell command, or a saved-init reference \"@namespace/name\" (optionally prefixed with KEY=val env bindings)."

Previous value: -"VM topology. Each entry is either a shorthand string (\"ubuntu24.04\" = 1 VM, \"ubuntu24.04 x3\" = 3 VMs) OR an object {image, count?, init?}. The object form lets you attach an init script (a single command string OR an array of command strings) that runs on every VM from that entry once the cluster is ready (analogous to EC2 user_data). Per-entry init = each tier of a heterogeneous cluster gets its own setup. Env vars exposed to init: NODE_NAME (e.g. node1), NODE_INDEX (1,2,...), NODE_IP. Example: [{\"image\":\"ubuntu24.04\",\"count\":3,\"init\":\"apt-get install -y nginx\"},{\"image\":\"vyos\",\"init\":[\"configure\",\"commit\"]}]"New value: +"VM topology. Each entry is either a shorthand string (\"ubuntu24.04\" = 1 VM, \"ubuntu24.04 x3\" = 3 VMs) OR an object {image, count?}. Init scripts are NOT part of provision — run them through exec with \"@namespace/name\" after the cluster is ready. This keeps provision sub-second and avoids hidden async state. Example: [{\"image\":\"ubuntu24.04\",\"count\":3},{\"image\":\"vyos\"}]"

Previous value: -[
-  {
-    "type": "string"
-  },
-  {
-    "properties": {
-      "count": {
-        "description": "Number of VMs from this entry. Default 1.",
-        "type": "number"
-      },
-      "image": {
-        "description": "Image name or ANI (e.g. \"ubuntu24.04\" or \"antrieb:ubuntu24.04:v1\").",
-        "type": "string"
-      },
-      "init": {
-        "description": "Optional init script. Single command string OR array of command strings (run sequentially on each VM from this entry). Runs in background after cluster is ready; provision_time_ms is unaffected.",
-        "oneOf": [
-          {
-            "type": "string"
-          },
-          {
-            "items": {
-              "type": "string"
-            },
-            "type": "array"
-          }
-        ]
-      }
-    },
-    "required": [
-      "image"
-    ],
-    "type": "object"
-  }
-]New value: +[
+  {
+    "type": "string"
+  },
+  {
+    "properties": {
+      "count": {
+        "description": "Number of VMs from this entry. Default 1.",
+        "type": "number"
+      },
+      "image": {
+        "description": "Image name or ANI (e.g. \"ubuntu24.04\" or \"antrieb:ubuntu24.04:v1\").",
+        "type": "string"
+      }
+    },
+    "required": [
+      "image"
+    ],
+    "type": "object"
+  }
+]

Previous value: -"Optional. Per-cluster private networks. Each is its own libvirt-managed bridge with its own DHCP. CIDRs are auto-allocated unless specified. Default (when omitted): one network named \"default\" with NAT egress. Example: [{\"name\":\"lan-a\",\"cidr\":\"10.10.1.0/24\",\"egress\":false},{\"name\":\"wan\",\"egress\":true}]"New value: +"Optional. Per-cluster private networks. Each is its own isolated L2 segment with its own DHCP. CIDRs are auto-allocated unless specified. Default (when omitted): one network named \"default\" with NAT egress. Example: [{\"name\":\"lan-a\",\"cidr\":\"10.10.1.0/24\",\"egress\":false},{\"name\":\"wan\",\"egress\":true}]"

Previous value: -"true = libvirt runs dnsmasq with DHCP; false = no DHCP (run your own inside a VM). Default true."New value: +"true = framework runs DHCP for the network; false = no DHCP (run your own inside a VM). Default true."

Previous value: -"Optional for type=network. true = libvirt DHCP; false = bring your own."New value: +"Optional for type=network. true = framework DHCP; false = bring your own."

Previous value: -"VM topology. Supports shortcuts: \"ubuntu24.04\" expands to \"antrieb:ubuntu24.04:v1\", \"ubuntu24.04 x3\" creates 3 VMs."New value: +"VM topology. Each entry is either a shorthand string (\"ubuntu24.04\" = 1 VM, \"ubuntu24.04 x3\" = 3 VMs) OR an object {image, count?, init?}. The object form lets you attach an init script (a single command string OR an array of command strings) that runs on every VM from that entry once the cluster is ready (analogous to EC2 user_data). Per-entry init = each tier of a heterogeneous cluster gets its own setup. Env vars exposed to init: NODE_NAME (e.g. node1), NODE_INDEX (1,2,...), NODE_IP. Example: [{\"image\":\"ubuntu24.04\",\"count\":3,\"init\":\"apt-get install -y nginx\"},{\"image\":\"vyos\",\"init\":[\"configure\",\"commit\"]}]"

Added value: +[
+  {
+    "type": "string"
+  },
+  {
+    "properties": {
+      "count": {
+        "description": "Number of VMs from this entry. Default 1.",
+        "type": "number"
+      },
+      "image": {
+        "description": "Image name or ANI (e.g. \"ubuntu24.04\" or \"antrieb:ubuntu24.04:v1\").",
+        "type": "string"
+      },
+      "init": {
+        "description": "Optional init script. Single command string OR array of command strings (run sequentially on each VM from this entry). Runs in background after cluster is ready; provision_time_ms is unaffected.",
+        "oneOf": [
+          {
+            "type": "string"
+          },
+          {
+            "items": {
+              "type": "string"
+            },
+            "type": "array"
+          }
+        ]
+      }
+    },
+    "required": [
+      "image"
+    ],
+    "type": "object"
+  }
+]

Removed value: -"string"

Added value: +{
+  "description": "Required for type=init. The init script — string for one command, or array of strings for a sequence.",
+  "oneOf": [
+    {
+      "type": "string"
+    },
+    {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    }
+  ]
+}

Added value: +{
+  "description": "Optional for type=network. /24 CIDR like \"10.10.1.0/24\". Omit to auto-allocate at each provision.",
+  "type": "string"
+}

Previous value: -"Ordered list of successful commands that were executed on this node."New value: +"Required for type=image. Ordered list of successful commands that were executed on this node."

Added value: +{
+  "description": "Optional for type=init/network. Short human description used by search.",
+  "type": "string"
+}

Added value: +{
+  "description": "Optional for type=network. true = libvirt DHCP; false = bring your own.",
+  "type": "boolean"
+}

Added value: +{
+  "description": "Optional for type=network. true = NAT to internet; false = isolated.",
+  "type": "boolean"
+}

Previous value: -"Image name (e.g. \"my-nginx\"). Will become antrieb:<name>:v1."New value: +"Name for the saved entity (lowercase, hyphens). For type=image: becomes antrieb:<name>:v1. For type=init/network: becomes referenceable as @<namespace>/<name>."

Previous value: -"Node name to save (e.g. \"node1\")."New value: +"Required for type=image. Node name to save (e.g. \"node1\")."

Previous value: -"Session ID of the provisioned cluster."New value: +"Required for type=image. Session ID of the provisioned cluster."

Added value: +{
+  "description": "What to save. Default \"image\".",
+  "enum": [
+    "image",
+    "init",
+    "network"
+  ],
+  "type": "string"
+}

Previous value: -[
-  "session_id",
-  "node",
-  "name",
-  "commands"
-]New value: +[
+  "name"
+]

Previous value: -"What to search: \"images\" (default) or \"clusters\" (your active clusters)."New value: +"What to search: \"image\" (default — VM images), \"cluster\" (your active clusters), \"init\" (saved init scripts), \"network\" (saved network specs from your platform team — reference them as @namespace/name in provision's networks array). Matches the type values used by the save tool."

Previous value: -[
-  "images",
-  "clusters"
-]New value: +[
+  "image",
+  "cluster",
+  "init",
+  "network"
+]

Added value: +{
+  "description": "Optional. Per-cluster private networks. Each is its own libvirt-managed bridge with its own DHCP. CIDRs are auto-allocated unless specified. Default (when omitted): one network named \"default\" with NAT egress. Example: [{\"name\":\"lan-a\",\"cidr\":\"10.10.1.0/24\",\"egress\":false},{\"name\":\"wan\",\"egress\":true}]",
+  "items": {
+    "properties": {
+      "cidr": {
+        "description": "Optional 10.x.y.0/24 CIDR. Auto-allocated if omitted.",
+        "type": "string"
+      },
+      "dhcp": {
+        "description": "true = libvirt runs dnsmasq with DHCP; false = no DHCP (run your own inside a VM). Default true.",
+        "type": "boolean"
+      },
+      "egress": {
+        "description": "true = NAT to internet; false = isolated. Default false (true only for the \"default\" network).",
+        "type": "boolean"
+      },
+      "name": {
+        "description": "Lowercase alphanumeric+hyphen identifier (e.g. \"lan-a\", \"wan\").",
+        "type": "string"
+      }
+    },
+    "required": [
+      "name"
+    ],
+    "type": "object"
+  },
+  "type": "array"
+}

Added value: +{
+  "additionalProperties": {
+    "items": {
+      "properties": {
+        "net": {
+          "description": "Name of a declared network.",
+          "type": "string"
+        }
+      },
+      "required": [
+        "net"
+      ],
+      "type": "object"
+    },
+    "type": "array"
+  },
+  "description": "Optional. Per-node NIC declarations keyed by node name (\"node1\", \"node2\", ...). Default (when omitted): every node gets one NIC on the first declared network. Example: {\"node1\":[{\"net\":\"lan-a\"}],\"node3\":[{\"net\":\"wan\"},{\"net\":\"lan-a\"}]}",
+  "type": "object"
+}