@coffeerunhobby/mcp-ha-connect 2.2.1 → 2.4.0

package/src/types/omada/clientActivity.ts

@@ -1,32 +0,0 @@
-/**
- * Client activity information from dashboard.
- * Contains statistics about new, active, and disconnected clients over time.
- */
-export interface ClientActivity {
-    /** Number of new wireless (EAP) clients */
-    newEapClientNum: number;
-    /** Number of new wired (switch) clients */
-    newSwitchClientNum: number;
-    /** Number of active wireless (EAP) clients */
-    activeEapClientNum: number;
-    /** Number of active wired (switch) clients */
-    activeSwitchClientNum: number;
-    /** Number of disconnected wireless (EAP) clients */
-    disconnectEapClientNum: number;
-    /** Number of disconnected wired (switch) clients */
-    disconnectSwitchClientNum: number;
-    /** Timestamp for this activity snapshot (Unix timestamp in seconds) */
-    time: number;
-}
-
-/**
- * Options for retrieving client activity.
- */
-export interface GetClientActivityOptions {
-    /** Optional site ID, uses default from config if not provided */
-    siteId?: string;
-    /** Optional start timestamp in seconds (e.g., 1682000000) */
-    start?: number;
-    /** Optional end timestamp in seconds (e.g., 1682000000) */
-    end?: number;
-}

package/src/types/omada/clientBlockStatus.ts

@@ -1,11 +0,0 @@
-/**
- * Result of a client block/unblock operation.
- */
-export interface ClientBlockStatus {
-    /** MAC address of the client that was blocked or unblocked. */
-    mac: string;
-    /** Site the operation was applied to. */
-    siteId: string;
-    /** True if the client is now blocked, false if it was unblocked. */
-    blocked: boolean;
-}

package/src/types/omada/clientPastConnection.ts

@@ -1,82 +0,0 @@
-/**
- * Client past connection information from the Omada API.
- * Represents historical client connection data.
- */
-export interface ClientPastConnection {
-    /** Client History ID */
-    id?: string;
-
-    /** Client MAC Address */
-    mac?: string;
-
-    /** Downstream traffic (bytes) */
-    download?: number;
-
-    /** Upstream traffic (bytes) */
-    upload?: number;
-
-    /** Up time (seconds) */
-    duration?: number;
-
-    /** The timestamp (ms) when the client connected */
-    firstSeen?: number;
-
-    /** Last found time, timestamp (ms) */
-    lastSeen?: number;
-
-    /** Client Name */
-    name?: string;
-
-    /** (Wireless) SSID name */
-    ssid?: string;
-
-    /** (Wired) Port ID */
-    port?: number;
-
-    /** (Wireless) Whether it is Guest (used to display the wireless Guest client icon) */
-    guest?: boolean;
-
-    /** Device name */
-    deviceName?: string;
-
-    /** (Wireless) The time (ms) it takes for the client to connect to SSID */
-    associationTime?: number;
-
-    /** IP Address */
-    ip?: string;
-
-    /** IPv6 Addresses */
-    ipv6List?: string[];
-
-    /** Client portal authentication information */
-    authInfo?: unknown[]; // AuthInfoOpenApiVO structure not fully specified
-}
-
-/**
- * Options for listing client past connections.
- */
-export interface ListClientsPastConnectionsOptions {
-    /** Optional site ID. If not provided, uses the default site from configuration */
-    siteId?: string;
-
-    /** Start page number. Start from 1 */
-    page: number;
-
-    /** Number of entries per page. It should be within the range of 1–1000 */
-    pageSize: number;
-
-    /** Sort parameter may be one of asc or desc. When there are more than one, the first one takes effect */
-    sortLastSeen?: 'asc' | 'desc';
-
-    /** Filter query parameters, support field time range: start timestamp (ms) */
-    timeStart?: number;
-
-    /** Filter query parameters, support field time range: end timestamp (ms) */
-    timeEnd?: number;
-
-    /** Filter query parameters, support field guest: true/false */
-    guest?: boolean;
-
-    /** Fuzzy query parameters, support field name,mac,ssid */
-    searchKey?: string;
-}

package/src/types/omada/index.ts

@@ -1,14 +0,0 @@
-export type { ActiveClientInfo } from './activeClientInfo.js';
-export type { ClientActivity, GetClientActivityOptions } from './clientActivity.js';
-export type { ClientBlockStatus } from './clientBlockStatus.js';
-export type { ClientPastConnection, ListClientsPastConnectionsOptions } from './clientPastConnection.js';
-export type { OmadaApiResponse } from './omadaApiResponse.js';
-export type { OmadaClientInfo } from './omadaClientInfo.js';
-export type { OmadaDeviceInfo } from './omadaDeviceInfo.js';
-export type { GetDeviceStatsOptions, OmadaDeviceStatItem, OmadaDeviceStats } from './omadaDeviceStats.js';
-export type { OmadaSiteSummary } from './omadaSiteSummary.js';
-export type { OswStackDetail } from './oswStackDetail.js';
-export type { PaginatedResult } from './paginatedResult.js';
-export type { ClientRateLimitSetting, RateLimitProfile, UpdateClientRateLimitRequest } from './rateLimitProfile.js';
-export type { GetThreatListOptions, ThreatInfo } from './threatInfo.js';
-export type { TokenResult } from './tokenResult.js';

package/src/types/omada/omadaApiResponse.ts

@@ -1,5 +0,0 @@
-export interface OmadaApiResponse<T> {
-    errorCode: number;
-    msg?: string;
-    result?: T;
-}

package/src/types/omada/omadaClientInfo.ts

@@ -1,11 +0,0 @@
-export interface OmadaClientInfo {
-    id?: string;
-    mac: string;
-    name?: string;
-    hostName?: string;
-    deviceType?: string;
-    ssid?: string;
-    ip?: string;
-    siteId?: string;
-    [key: string]: unknown;
-}

package/src/types/omada/omadaDeviceInfo.ts

@@ -1,11 +0,0 @@
-export interface OmadaDeviceInfo {
-    mac: string;
-    name?: string;
-    deviceId?: string;
-    type?: string;
-    model?: string;
-    ip?: string;
-    status?: string;
-    siteId?: string;
-    [key: string]: unknown;
-}

package/src/types/omada/omadaDeviceStats.ts

@@ -1,31 +0,0 @@
-export interface OmadaDeviceStats {
-    page: number;
-    pageSize: number;
-    totalRows: number;
-    data: OmadaDeviceStatItem[];
-}
-
-export interface OmadaDeviceStatItem {
-    mac?: string;
-    name?: string;
-    model?: string;
-    sn?: string;
-    type?: string;
-    status?: string;
-    site?: string;
-    siteId?: string;
-    tag?: string;
-    deviceSeriesType?: number;
-    [key: string]: unknown;
-}
-
-export interface GetDeviceStatsOptions {
-    page: number;
-    pageSize: number;
-    searchMacs?: string;
-    searchNames?: string;
-    searchModels?: string;
-    searchSns?: string;
-    filterTag?: string;
-    filterDeviceSeriesType?: string;
-}

package/src/types/omada/omadaSiteSummary.ts

@@ -1,5 +0,0 @@
-export interface OmadaSiteSummary {
-    siteId: string;
-    name: string;
-    [key: string]: unknown;
-}

package/src/types/omada/oswStackDetail.ts

@@ -1,11 +0,0 @@
-export interface OswStackDetail {
-    id?: string;
-    name?: string;
-    siteId?: string;
-    masterMac?: string;
-    stackDevice?: boolean;
-    member?: Array<Record<string, unknown>>;
-    ports?: Array<Record<string, unknown>>;
-    lags?: Array<Record<string, unknown>>;
-    [key: string]: unknown;
-}

package/src/types/omada/paginatedResult.ts

@@ -1,6 +0,0 @@
-export interface PaginatedResult<T> {
-    totalRows?: number;
-    currentPage?: number;
-    currentSize?: number;
-    data?: T[];
-}

package/src/types/omada/rateLimitProfile.ts

@@ -1,58 +0,0 @@
-/**
- * Rate limit profile information from Omada API
- */
-export interface RateLimitProfile {
-    /** Profile ID */
-    id: string;
-    /** Profile name (1-64 characters) */
-    name: string;
-    /** Whether download limit is enabled */
-    downLimitEnable: boolean;
-    /** Download limit in Kbps (when downLimitEnable is true) */
-    downLimit?: number;
-    /** Whether upload limit is enabled */
-    upLimitEnable: boolean;
-    /** Upload limit in Kbps (when upLimitEnable is true) */
-    upLimit?: number;
-}
-
-/**
- * Client rate limit setting
- */
-export interface ClientRateLimitSetting {
-    /** Rate limit profile ID (null when using custom rate limit) */
-    rateLimitId?: string | null;
-    /** Whether rate limit is enabled */
-    enable: boolean;
-    /** Whether upload limit is enabled (for custom rate limit) */
-    upEnable?: boolean;
-    /** Upload limit in Kbps (for custom rate limit) */
-    upLimit?: number;
-    /** Whether download limit is enabled (for custom rate limit) */
-    downEnable?: boolean;
-    /** Download limit in Kbps (for custom rate limit) */
-    downLimit?: number;
-}
-
-/**
- * Request to update client rate limit setting
- */
-export interface UpdateClientRateLimitRequest {
-    /** Mode: 0 = custom rate limit, 1 = use rate limit profile */
-    mode: 0 | 1;
-    /** Rate limit profile ID (required when mode = 1) */
-    rateLimitProfileId?: string;
-    /** Custom rate limit settings (required when mode = 0) */
-    customRateLimit?: {
-        /** Whether rate limit is enabled */
-        enable: boolean;
-        /** Whether upload limit is enabled */
-        upEnable?: boolean;
-        /** Upload limit in Kbps */
-        upLimit?: number;
-        /** Whether download limit is enabled */
-        downEnable?: boolean;
-        /** Download limit in Kbps */
-        downLimit?: number;
-    };
-}

package/src/types/omada/threatInfo.ts

@@ -1,38 +0,0 @@
-export interface ThreatInfo {
-    id?: string;
-    omadacId?: string;
-    siteId?: string;
-    siteName?: string;
-    time?: number;
-    severity?: number;
-    service?: string;
-    signature?: string;
-    category?: number;
-    activity?: string;
-    dataUsage?: number;
-    srcIp?: string;
-    dstIp?: string;
-    srcCountry?: string;
-    dstCountry?: string;
-    protocol?: string;
-    sid?: number;
-    srcLatitude?: number;
-    srcLongitude?: number;
-    dstLatitude?: number;
-    dstLongitude?: number;
-    archived?: boolean;
-    classification?: string;
-    createTime?: number;
-}
-
-export interface GetThreatListOptions {
-    siteList?: string;
-    archived: boolean;
-    page: number;
-    pageSize: number;
-    startTime: number;
-    endTime: number;
-    severity?: number;
-    sortTime?: 'asc' | 'desc';
-    searchKey?: string;
-}

package/src/types/omada/tokenResult.ts

@@ -1,6 +0,0 @@
-export interface TokenResult {
-    accessToken: string;
-    tokenType: string;
-    expiresIn: number;
-    refreshToken?: string;
-}

package/src/types.ts

@@ -1,2 +0,0 @@
-// Barrel re-export from types folder
-export * from './types/index.js';

package/src/utils/config-validations.ts

@@ -1,68 +0,0 @@
-/**
- * Configuration validation utilities
- * Uses Node's built-in net module for reliable IP validation
- */
-
-import { isIPv4, isIPv6 } from 'node:net';
-
-/**
- * Validates if a string is a valid IPv4 or IPv6 address for binding
- */
-export function isValidBindAddress(addr: string): boolean {
-  return isIPv4(addr) || isIPv6(addr);
-}
-
-/**
- * Returns true if the address is a loopback address (localhost-only).
- *
- * Used to enforce that an unauthenticated server (MCP_AUTH_METHOD=none) may only
- * be bound to a loopback interface — never to `0.0.0.0`/`::` or a LAN address.
- */
-export function isLoopbackAddress(addr: string): boolean {
-  if (!addr) return false;
-  const a = addr.toLowerCase();
-  if (a === 'localhost' || a === '::1') return true;
-  // IPv4 loopback is the whole 127.0.0.0/8 block.
-  if (isIPv4(a) && a.startsWith('127.')) return true;
-  return false;
-}
-
-/**
- * Validates if a string is a valid hostname
- * Allows alphanumeric characters, hyphens, and dots
- * Must not start or end with hyphen or dot
- */
-export function isValidHostname(hostname: string): boolean {
-  if (!hostname || hostname.length > 253) return false;
-
-  // Check each label (part between dots)
-  const labels = hostname.split('.');
-  return labels.every((label) => {
-    if (!label || label.length > 63) return false;
-    // Must start with alphanumeric, can contain hyphens, must end with alphanumeric
-    return /^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?$/.test(label) || label.length === 1;
-  });
-}
-
-/**
- * Validates if a string is a valid origin (for CORS)
- * Accepts: wildcard (*), valid URLs, hostnames, or IP addresses
- */
-export function isValidOrigin(origin: string): boolean {
-  // Allow wildcard
-  if (origin === '*') return true;
-
-  // Check if it's a valid IP address
-  if (isValidBindAddress(origin)) return true;
-
-  // Check if it's a valid hostname (like 'localhost')
-  if (isValidHostname(origin)) return true;
-
-  // Validate URL format (like 'http://example.com')
-  try {
-    new URL(origin);
-    return true;
-  } catch {
-    return false;
-  }
-}

package/src/utils/jwt.ts

@@ -1,112 +0,0 @@
-/**
- * Minimal Bearer token verification (HS256 JWT)
- * Zero dependencies - uses Node's crypto
- */
-
-import { createHmac, timingSafeEqual } from 'node:crypto';
-
-export interface JwtPayload {
-  sub?: string;
-  exp?: number;
-  iat?: number;
-  nbf?: number;
-  iss?: string;
-  aud?: string | string[];
-  [key: string]: unknown;
-}
-
-export interface JwtResult {
-  valid: boolean;
-  payload?: JwtPayload;
-  error?: string;
-}
-
-/** Optional claim-validation policy for verifyJwt. */
-export interface JwtVerifyOptions {
-  /** Reject tokens that have no `exp` claim (H3). Default: false (backward-compatible). */
-  requireExp?: boolean;
-  /** Require `iss` to equal this value when set (L6). */
-  issuer?: string;
-  /** Require `aud` to include this value when set (L6). */
-  audience?: string;
-  /** Allowable clock skew in seconds for exp/nbf comparisons (L6). Default: 0. */
-  clockSkewSec?: number;
-}
-
-function b64decode(str: string): string {
-  const pad = str + '='.repeat((4 - (str.length % 4)) % 4);
-  return Buffer.from(pad.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString();
-}
-
-function b64encode(data: Buffer): string {
-  return data.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
-}
-
-export function verifyJwt(token: string, secret: string, options: JwtVerifyOptions = {}): JwtResult {
-  const parts = token.split('.');
-  if (parts.length !== 3) {
-    return { valid: false, error: 'bad format' };
-  }
-
-  const [h, p, sig] = parts;
-
-  // Verify signature (timing-safe)
-  const expected = b64encode(createHmac('sha256', secret).update(`${h}.${p}`).digest());
-  const sigBuf = Buffer.from(sig);
-  const expBuf = Buffer.from(expected);
-
-  if (sigBuf.length !== expBuf.length || !timingSafeEqual(sigBuf, expBuf)) {
-    return { valid: false, error: 'bad signature' };
-  }
-
-  // Parse payload
-  let payload: JwtPayload;
-  try {
-    payload = JSON.parse(b64decode(p));
-  } catch {
-    return { valid: false, error: 'bad payload' };
-  }
-
-  const now = Date.now() / 1000;
-  const skew = options.clockSkewSec ?? 0;
-
-  // Expiration (H3): enforce when present; optionally require it.
-  if (payload.exp !== undefined) {
-    if (typeof payload.exp !== 'number' || payload.exp < now - skew) {
-      return { valid: false, error: 'expired' };
-    }
-  } else if (options.requireExp) {
-    return { valid: false, error: 'missing exp' };
-  }
-
-  // Not-before (L6)
-  if (payload.nbf !== undefined) {
-    if (typeof payload.nbf !== 'number' || payload.nbf > now + skew) {
-      return { valid: false, error: 'not yet valid' };
-    }
-  }
-
-  // Issuer (L6): only checked when an expected issuer is configured.
-  if (options.issuer !== undefined && payload.iss !== options.issuer) {
-    return { valid: false, error: 'bad issuer' };
-  }
-
-  // Audience (L6): only checked when an expected audience is configured.
-  if (options.audience !== undefined) {
-    const aud = payload.aud;
-    const ok = Array.isArray(aud) ? aud.includes(options.audience) : aud === options.audience;
-    if (!ok) {
-      return { valid: false, error: 'bad audience' };
-    }
-  }
-
-  return { valid: true, payload };
-}
-
-/** Create JWT (for testing/tooling) */
-export function createJwt(payload: JwtPayload, secret: string): string {
-  const h = Buffer.from('{"alg":"HS256","typ":"JWT"}').toString('base64url');
-  const p = Buffer.from(JSON.stringify(payload)).toString('base64url');
-  const sig = b64encode(createHmac('sha256', secret).update(`${h}.${p}`).digest());
-  return `${h}.${p}.${sig}`;
-}

package/src/utils/logger.ts

@@ -1,121 +0,0 @@
-/**
- * Minimal zero-dependency logger
- * Designed for constrained environments (MIPS, embedded, low RAM)
- */
-
-type LogFields = Record<string, unknown>;
-type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'silent';
-type LogFormat = 'plain' | 'json' | 'gcp-json';
-
-const LEVELS: Record<LogLevel, number> = {
-  debug: 0,
-  info: 1,
-  warn: 2,
-  error: 3,
-  silent: 4,
-};
-
-const SEVERITY: Record<LogLevel, string> = {
-  debug: 'DEBUG',
-  info: 'INFO',
-  warn: 'WARNING',
-  error: 'ERROR',
-  silent: 'SILENT',
-};
-
-let currentLevel: LogLevel = 'info';
-let currentFormat: LogFormat = 'plain';
-let output: NodeJS.WriteStream = process.stderr;
-
-/**
- * Initialize the logger with a specific log level and format.
- */
-export function initLogger(level: LogLevel, format: LogFormat = 'plain', useStderr = false): void {
-  currentLevel = level;
-  currentFormat = format;
-  output = useStderr ? process.stderr : process.stdout;
-}
-
-/**
- * Set the logger level dynamically
- */
-export function setLevel(level: LogLevel): void {
-  currentLevel = level;
-}
-
-function formatPlain(_level: LogLevel, message: string, meta?: LogFields): string {
-  let metaStr = '';
-  if (meta && Object.keys(meta).length > 0) {
-    const parts = Object.entries(meta).map(([k, v]) => {
-      if (v === undefined || v === null) return `${k}=null`;
-      if (typeof v === 'object') return `${k}=${JSON.stringify(v)}`;
-      return `${k}=${v}`;
-    });
-    metaStr = ` (${parts.join(', ')})`;
-  }
-  return `${message}${metaStr}\n`;
-}
-
-function formatJson(level: LogLevel, message: string, meta?: LogFields): string {
-  const obj: Record<string, unknown> = {
-    level: level.toUpperCase(),
-    time: new Date().toISOString(),
-    message,
-    ...meta,
-  };
-  return JSON.stringify(obj) + '\n';
-}
-
-function formatGcp(level: LogLevel, message: string, meta?: LogFields): string {
-  const obj: Record<string, unknown> = {
-    severity: SEVERITY[level],
-    time: new Date().toISOString(),
-    message,
-    ...meta,
-  };
-  return JSON.stringify(obj) + '\n';
-}
-
-function write(level: LogLevel, message: string, meta?: LogFields): void {
-  if (LEVELS[level] < LEVELS[currentLevel]) return;
-
-  // Normalize errors in meta
-  if (meta) {
-    for (const [key, value] of Object.entries(meta)) {
-      if (value instanceof Error) {
-        meta[key] = { message: value.message, stack: value.stack };
-      }
-    }
-  }
-
-  let line: string;
-  switch (currentFormat) {
-    case 'json':
-      line = formatJson(level, message, meta);
-      break;
-    case 'gcp-json':
-      line = formatGcp(level, message, meta);
-      break;
-    default:
-      line = formatPlain(level, message, meta);
-  }
-
-  output.write(line);
-}
-
-export const logger = {
-  debug(message: string, meta?: LogFields) {
-    write('debug', message, meta);
-  },
-  info(message: string, meta?: LogFields) {
-    write('info', message, meta);
-  },
-  warn(message: string, meta?: LogFields) {
-    write('warn', message, meta);
-  },
-  error(message: string, meta?: LogFields) {
-    write('error', message, meta);
-  },
-};
-
-export type { LogLevel, LogFormat, LogFields };