Virtualization infrastructure that tells the truth.

# Records carry native dates and filesizes—not preformatted strings.
production〉 show hosts | select name state memory_available last_seen

name     state    memory_available   last_seen
kvm-1    online   38.2 GiB           2026-09-18 15:42:08
kvm-2    online   51.7 GiB           2026-09-18 15:42:09
kvm-3    online   91.4 GiB           2026-09-18 15:42:07

production〉 watch events | where ($in.data.kind == "host.offline") | first 1
◉ waiting for the next matching structured event…

# Filesize literals make capacity checks readable and exact.
production〉 show datastores | where ($it.available < 10gb) | select name kind available

name          kind     available
local-fast    zfs      7.8 GiB

production〉 show datastores | datastore refresh | select name available
✓ capacity refreshed across 3 datastores

# Inventory is data; provisioning uses the same names operators see.
production〉 show networks | select name bridge vlan

name          bridge   vlan
management    br0       —
production    br0       100
storage       br1       240

production〉 network add tenant-42 --host kvm-1 --bridge br0 --vlan 142
✓ network tenant-42 registered on kvm-1

# Snapshot before a risky change; recovery remains an auditable task.
production〉 vm snapshot create web-01 before-upgrade --live | task wait
✓ snapshot before-upgrade created

production〉 show events --all | where kind =~ "vm.error" | first 3

time       kind              resource
15:47:12   vm.error          web-01

production〉 vm snapshot revert web-01 before-upgrade --yes | task wait
✓ web-01 restored to before-upgrade

# Fan in every active task, keep only failures, emit machine-readable JSON.
production〉 show tasks --state running --all |
  task wait --parallel 8 --timeout 30min |
  where state != "succeeded" | select id kind target error | to json

[]

# The same pipeline runs non-interactively from CI or a timer.
$ nextvirt -c 'show tasks --state failed --all | to json'
✓ exit 0 · valid JSON on stdout

# Provision with real filesize values, wait, then return the created VM.
production〉 vm create web-02 --image alpine --datastore tank --network prod --memory 4gb |
  task wait | task result | select name power host memory

name      power     host     memory
web-02    running   kvm-2    4.0 GB

# 4gb is decimal; 4gib is binary. The distinction survives the API.
✓ VM created and task result resolved

# Evacuate kvm-1 one VM at a time with live migration.
production〉 show vms --host kvm-1 |
  vm migrate --to kvm-2 --live --parallel 1 | task wait

target          kind          state       elapsed
api-01          vm_migrate    succeeded   8.2sec
worker-03       vm_migrate    succeeded   11.7sec
metrics-01      vm_migrate    succeeded   6.9sec

✓ kvm-1 evacuated without parallel migration pressure

# A mutation returns a task; task result returns the resource it created.
production〉 vm clone web-01 web-02 | task wait | task result

name      power     cpus   memory    source
web-02    stopped   4      8.0 GB    web-01

production〉 show vm web-02 | get disks | select name size datastore
✓ clone inventory and disks are immediately pipeable

# Preview every request a destructive pipeline would send.
production〉 show vms --power stopped | vm remove --dry-run |
  select method path target.name

method   path                         target.name
DELETE   /api/v1/vms/4b1…            old-runner
DELETE   /api/v1/vms/91e…            test-db

DRY RUN · no requests sent · server state not inspected

# Query several control planes without changing the active context.
production〉 [lab prod] | each {|ctx| context with $ctx { show hosts } } | flatten |
  select context name state

context   name       state
lab       kvm-lab-1  online
prod      kvm-1      online
prod      kvm-2      online

✓ active context restored to production

# Serialize upgrades across online hosts and wait for every task.
production〉 show hosts | where state == "online" |
  host upgrade --parallel 1 | task wait
✓ 3 hosts upgraded sequentially

# Scoped maintenance and an HA-safe planned restart.
production〉 show hosts --cluster edge | host maintenance enter
production〉 host expect-restart kvm-1 --within 10min
◉ HA fencing suppressed for the declared restart window

# Diagnostics are records, so healthy checks disappear from the view.
production〉 doctor | where status != "ok"

check            status   detail
notifications    warn     WebSocket reconnecting

# The binary reports its compiled feature surface—including omissions.
production〉 version features | where not available
filesystem       false    restricted operator profile

# Switch from the operator projection to canonical OpenAPI field names.
production〉 show hosts --api | first | columns
[id, name, address, state, maintenance, capacity, last_seen_at, …]

# Formatting is the final pipeline stage, not a separate command path.
production〉 show vms | select name host power | sort-by name | to json
[{"name":"api-01","host":"kvm-2","power":"running"}, …]

✓ same records · machine-readable output