feat(image): add property support to create/update/show

The CLI could not set or update custom Glance image properties
(`os_distro`, `os_version`, `hw_qemu_guest_agent`,
`cinder_img_volume_type`, …), which made inter-cloud image migration
lossy: properties present on the source image were silently dropped
on re-upload.

Three commands gain matching surface:

- `orca image create --property KEY=VALUE` (repeatable). Properties
  ride on the Glance v2 POST body as top-level keys.
- `orca image update --property KEY=VALUE` and `--remove-property KEY`
  (both repeatable), composable into a single atomic JSON-Patch.
  Add-vs-replace is decided after fetching the current image so
  untouched properties survive. Removes are strict by default and
  turn idempotent under `--ignore-missing`.
- `orca image show` now surfaces every custom property Glance returns
  plus the integrity fields (`checksum`, `os_hash_algo`,
  `os_hash_value`, `direct_url`, `tags`): a `Properties` sub-table
  in table format; a top-level `"properties"` aggregate in JSON; and
  `KEY VALUE` lines in value format. JSON dual-renders each custom
  property at the root *and* under `properties` so existing scripts
  doing `jq .os_distro` keep working alongside the new
  `jq .properties.os_distro`.

Property keys are validated client-side against Glance's
`^[A-Za-z0-9_:.\-]{1,255}$` schema before any HTTP round-trip — a
malformed key fails fast with a friendly error instead of an opaque
Glance 400. Only the first `=` splits a value, so URL-like values
(`--property url=https://x?a=1&b=2`) survive intact.

Tests cover the round-trip on create, untouched-on-update preservation
(only the changed key appears in the JSON-Patch), strict + idempotent
remove modes, key validation aborting before any HTTP write, value
preservation for `=`-bearing strings, and the three show formats
including the JSON dual-render rétrocompat.

Author: kallioli

CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to orca are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- **Full image-property support across `image create`, `image update` and
+  `image show`.** Custom Glance properties (`os_distro`, `os_version`,
+  `hw_qemu_guest_agent`, `cinder_img_volume_type`, …) can now be set on
+  creation (`--property KEY=VALUE`, repeatable) and edited atomically on
+  existing images (`--property` and `--remove-property`, `--ignore-missing`
+  for idempotent removal). Property keys are validated client-side against
+  Glance's `^[A-Za-z0-9_:.\-]{1,255}$` schema before any HTTP round-trip,
+  and only the first `=` splits the value so URL-like values survive intact
+  (`--property url=https://x?a=1&b=2`). `image show` surfaces every custom
+  key Glance returns plus the integrity fields (`checksum`, `os_hash_algo`,
+  `os_hash_value`, `direct_url`, `tags`): as a `Properties` sub-table in
+  table format, under a new top-level `"properties"` aggregate in JSON
+  (with each custom key **also** mirrored at the JSON root for backward
+  compatibility — `jq .os_distro` keeps working alongside the new
+  `jq .properties.os_distro`), and as `KEY VALUE` lines in value format.
+  This unblocks lossless inter-cloud image migration.
+
 ## [2.0.1] — 2026-04-22
 
 ### Fixed

docs/commands/image.md

@@ -71,7 +71,7 @@ orca image cache-queue [OPTIONS]
 Create a new image (and optionally upload data).
 
 ```bash
-orca image create [OPTIONS]
+orca image create [OPTIONS] NAME
 ```
 
 | Option | Description |
@@ -82,8 +82,16 @@ orca image create [OPTIONS]
 | `--min-ram INTEGER` | Min RAM (MB).  [default: 0] |
 | `--visibility [private|shared|community|public]` | |
 | `--file PATH` | Upload image data from file immediately. |
+| `--property KEY=VALUE` | Custom image property to set on creation (repeatable). Values may contain `=` — only the first `=` splits. Keys must match `^[A-Za-z0-9_:.\-]{1,255}$`. |
 | `--help` | Show this message and exit. |
 
+```bash
+orca image create ubuntu-24.04 --file ubuntu.qcow2 \
+    --property os_distro=ubuntu \
+    --property os_version=24.04 \
+    --property hw_qemu_guest_agent=yes
+```
+
 ---
 
 ## deactivate
@@ -276,18 +284,33 @@ orca image share-and-accept [OPTIONS]
 
 ## show
 
-Show image details.
+Show image details, including custom properties and integrity hashes.
 
 ```bash
-orca image show [OPTIONS]
+orca image show [OPTIONS] IMAGE_ID
 ```
 
+Custom properties (anything outside the Glance v2 standard schema, e.g.
+`os_distro`, `os_version`, `hw_qemu_guest_agent`, `cinder_img_volume_type`)
+are surfaced separately:
+
+- **table** — rendered as a `Properties` sub-table after the main table,
+  sorted by key.
+- **json** — exposed both at the top level (mirroring the raw Glance
+  response shape, so existing scripts using `jq .os_distro` keep working)
+  and under a new top-level `"properties"` aggregate so callers can also
+  do `orca image show <id> -f json | jq .properties`.
+- **value** — printed after the standard fields, one `KEY VALUE` per line.
+
+Integrity fields (`checksum`, `os_hash_algo`, `os_hash_value`, `direct_url`)
+and `tags` are always included as standard fields when Glance returns them.
+
 | Option | Description |
 |--------|-------------|
 | `--noindent` | Disable JSON indentation. |
 | `--max-width INTEGER` | Maximum table width (0 = unlimited). |
 | `--fit-width` | Fit table to terminal width. |
-| `-c, --column TEXT` | Column to include (repeatable). Shows all if |
+| `-c, --column TEXT` | Column to include (repeatable). Shows all if omitted. |
 | `-f, --format [table|json|value]` | |
 | `--help` | Show this message and exit. |
 
@@ -429,17 +452,32 @@ orca image unused [OPTIONS]
 Update image properties (JSON-Patch).
 
 ```bash
-orca image update [OPTIONS]
+orca image update [OPTIONS] IMAGE_ID
 ```
 
+All flags compose into a single atomic JSON-Patch document.
+`--property` emits `add` when the key is absent on the image and `replace` when
+it already exists, so untouched properties survive. `--remove-property` is
+strict by default (errors if the key is absent) and turns idempotent under
+`--ignore-missing`.
+
 | Option | Description |
 |--------|-------------|
 | `--name TEXT` | New name. |
 | `--min-disk INTEGER` | New min disk (GB). |
 | `--min-ram INTEGER` | New min RAM (MB). |
 | `--visibility [private|shared|community|public]` | |
+| `--property KEY=VALUE` | Set or replace a custom image property. Repeatable. |
+| `--remove-property KEY` | Remove a custom image property by key. Repeatable. |
+| `--ignore-missing` | With `--remove-property`: silently skip keys that are not present on the image. |
 | `--help` | Show this message and exit. |
 
+```bash
+orca image update <id> --property os_distro=ubuntu --property os_version=24.04
+orca image update <id> --remove-property hw_qemu_guest_agent
+orca image update <id> --remove-property foo --ignore-missing
+```
+
 ---
 
 ## upload