v0.4.0 — guest-destroy blast-radius + pve_doctor
First public release since 0.2.0 — rolls up everything in between as one version.
Added
- Blast-radius op-class #4 — guest-destroy.
pve_delete_guestdry-run now computes, at PLAN time, what destroying a guest actually does, conditional onpurge/force: what PVE will refuse (protection / template-with-linked-clones / running-without-force), what references it leaves dangling vs cleans up (HA / replication / backup — backup coverage resolved per selection mode), and what it intrinsically removes (disks+storages, real snapshots, pool membership). Fail-closed and honest: a failed read is flagged incomplete, never reported as "nothing found." - Blast-radius classes (storage/disk · access/ACL · firewall reach + network-apply lockout) and
pve_doctoronboarding preflight (the internal 0.3.0 work, first public here).
Additive and backward-compatible. 144 MCP tools, 2276 tests. Full detail in CHANGELOG ([0.4.0] and [0.3.0]).