@mokoconsulting/mcp-windows 3.0.0

package/src/tools/theme.ts

@@ -0,0 +1,205 @@
+/* Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * Tools: windows_theme_get (#52), windows_theme_set (#53),
+ *        windows_focus_mode (#55), windows_default_apps (#56)
+ */
+
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { runPowerShell } from '../shell.js';
+
+export function registerThemeTools(server: McpServer): void {
+	server.tool(
+		'windows_theme_get',
+		'Get current Windows theme: dark/light mode, accent color, wallpaper, transparency, taskbar alignment.',
+		{},
+		async () => {
+			const ps = `
+$personalize = 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize'
+$accent = 'HKCU:\\Software\\Microsoft\\Windows\\DWM'
+$taskbar = 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced'
+$wallpaper = (Get-ItemProperty -Path 'HKCU:\\Control Panel\\Desktop' -Name Wallpaper -ErrorAction SilentlyContinue).Wallpaper
+
+$appsDark = (Get-ItemProperty -Path $personalize -Name AppsUseLightTheme -ErrorAction SilentlyContinue).AppsUseLightTheme -eq 0
+$systemDark = (Get-ItemProperty -Path $personalize -Name SystemUsesLightTheme -ErrorAction SilentlyContinue).SystemUsesLightTheme -eq 0
+$transparency = (Get-ItemProperty -Path $personalize -Name EnableTransparency -ErrorAction SilentlyContinue).EnableTransparency -eq 1
+$accentColor = (Get-ItemProperty -Path $accent -Name AccentColor -ErrorAction SilentlyContinue).AccentColor
+$taskbarAlign = (Get-ItemProperty -Path $taskbar -Name TaskbarAl -ErrorAction SilentlyContinue).TaskbarAl
+
+$accentHex = if ($accentColor) {
+  $b = ($accentColor -band 0xFF0000) -shr 16
+  $g = ($accentColor -band 0x00FF00) -shr 8
+  $r = ($accentColor -band 0x0000FF)
+  '#{0:X2}{1:X2}{2:X2}' -f $r, $g, $b
+} else { 'Unknown' }
+
+[PSCustomObject]@{
+  AppsDarkMode = $appsDark
+  SystemDarkMode = $systemDark
+  AccentColor = $accentHex
+  Transparency = $transparency
+  Wallpaper = $wallpaper
+  TaskbarAlignment = if ($taskbarAlign -eq 0) { 'Left' } else { 'Center' }
+} | ConvertTo-Json -Compress`;
+
+			const result = await runPowerShell(ps, { timeout: 10000 });
+			if (result.exitCode !== 0) {
+				return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+			}
+
+			const t = JSON.parse(result.stdout);
+			return {
+				content: [{
+					type: 'text',
+					text: [
+						`Dark mode: Apps=${t.AppsDarkMode}, System=${t.SystemDarkMode}`,
+						`Accent color: ${t.AccentColor}`,
+						`Transparency: ${t.Transparency ? 'On' : 'Off'}`,
+						`Taskbar: ${t.TaskbarAlignment}`,
+						`Wallpaper: ${t.Wallpaper || '(none)'}`,
+					].join('\n'),
+				}],
+			};
+		},
+	);
+
+	server.tool(
+		'windows_theme_set',
+		'Set dark/light mode, accent color, wallpaper, transparency, or taskbar alignment.',
+		{
+			dark_mode: z.enum(['on', 'off']).optional().describe('Set dark mode for apps and system'),
+			wallpaper: z.string().optional().describe('Wallpaper file path'),
+			wallpaper_fit: z.enum(['fill', 'fit', 'stretch', 'tile', 'center', 'span']).optional().describe('Wallpaper fit mode'),
+			transparency: z.enum(['on', 'off']).optional().describe('Transparency effects'),
+			taskbar_align: z.enum(['left', 'center']).optional().describe('Taskbar alignment'),
+		},
+		async ({ dark_mode, wallpaper, wallpaper_fit, transparency, taskbar_align }) => {
+			const commands: string[] = [];
+
+			if (dark_mode) {
+				const val = dark_mode === 'on' ? 0 : 1;
+				commands.push(`Set-ItemProperty -Path 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize' -Name AppsUseLightTheme -Value ${val}`);
+				commands.push(`Set-ItemProperty -Path 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize' -Name SystemUsesLightTheme -Value ${val}`);
+				commands.push(`"Dark mode: ${dark_mode}"`);
+			}
+
+			if (transparency) {
+				const val = transparency === 'on' ? 1 : 0;
+				commands.push(`Set-ItemProperty -Path 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize' -Name EnableTransparency -Value ${val}`);
+				commands.push(`"Transparency: ${transparency}"`);
+			}
+
+			if (taskbar_align) {
+				const val = taskbar_align === 'left' ? 0 : 1;
+				commands.push(`Set-ItemProperty -Path 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced' -Name TaskbarAl -Value ${val}`);
+				commands.push(`"Taskbar: ${taskbar_align}"`);
+			}
+
+			if (wallpaper) {
+				const fitMap: Record<string, string> = { fill: '10', fit: '6', stretch: '2', tile: '0', center: '0', span: '22' };
+				const fit = wallpaper_fit || 'fill';
+				commands.push(`
+Set-ItemProperty -Path 'HKCU:\\Control Panel\\Desktop' -Name WallpaperStyle -Value '${fitMap[fit]}'
+Set-ItemProperty -Path 'HKCU:\\Control Panel\\Desktop' -Name TileWallpaper -Value '${fit === 'tile' ? '1' : '0'}'
+Add-Type -TypeDefinition 'using System.Runtime.InteropServices; public class Wallpaper { [DllImport("user32.dll", CharSet=CharSet.Auto)] public static extern int SystemParametersInfo(int uAction, int uParam, string lpvParam, int fuWinIni); }'
+[Wallpaper]::SystemParametersInfo(0x0014, 0, '${wallpaper.replace(/'/g, "''")}', 0x01 -bor 0x02) | Out-Null
+"Wallpaper set: ${wallpaper} (${fit})"
+`);
+			}
+
+			if (commands.length === 0) {
+				return { content: [{ type: 'text', text: 'No changes specified.' }], isError: true };
+			}
+
+			const result = await runPowerShell(commands.join('\n'), { timeout: 15000 });
+			return {
+				content: [{ type: 'text', text: result.stdout || result.stderr }],
+				isError: result.exitCode !== 0,
+			};
+		},
+	);
+
+	server.tool(
+		'windows_focus_mode',
+		'Get or set Windows Focus Assist / Do Not Disturb mode.',
+		{
+			action: z.enum(['get', 'priority', 'alarms', 'off']).default('get').describe('Get status or set mode'),
+		},
+		async ({ action }) => {
+			if (action === 'get') {
+				const ps = `
+$regPath = 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\CloudStore\\Store\\DefaultAccount\\Current\\default$windows.data.notifications.quiethourssettings\\windows.data.notifications.quiethourssettings'
+$mode = 'Unknown'
+try {
+  $val = (Get-ItemProperty -Path $regPath -ErrorAction Stop).Data
+  if ($val) {
+    # The focus assist state is encoded in the binary blob
+    $mode = 'Check via Settings app (binary registry format)'
+  }
+} catch { $mode = 'Off (or unable to read)' }
+"Focus Assist: $mode"`;
+				const result = await runPowerShell(ps, { timeout: 10000 });
+				return { content: [{ type: 'text', text: result.stdout || result.stderr }] };
+			}
+
+			// Setting focus assist requires ms-settings URI
+			const ps = `Start-Process 'ms-settings:quiethours'; "Opened Focus Assist settings. Mode requested: ${action}"`;
+			const result = await runPowerShell(ps, { timeout: 10000 });
+			return { content: [{ type: 'text', text: result.stdout || result.stderr }] };
+		},
+	);
+
+	server.tool(
+		'windows_default_apps',
+		'Get default applications or open the default apps settings page.',
+		{
+			action: z.enum(['get', 'open_settings']).default('get').describe('Get defaults or open settings'),
+			extension: z.string().optional().describe('File extension to check (e.g. ".pdf")'),
+		},
+		async ({ action, extension }) => {
+			if (action === 'open_settings') {
+				await runPowerShell('Start-Process "ms-settings:defaultapps"');
+				return { content: [{ type: 'text', text: 'Opened Default Apps settings.' }] };
+			}
+
+			if (extension) {
+				const ps = `
+$assoc = cmd /c assoc ${extension} 2>$null
+$ftype = if ($assoc) { $type = ($assoc -split '=')[1]; cmd /c ftype $type 2>$null } else { $null }
+[PSCustomObject]@{
+  Extension = '${extension}'
+  FileType = if ($assoc) { ($assoc -split '=')[1] } else { 'Not associated' }
+  OpensWith = if ($ftype) { ($ftype -split '=')[1] } else { 'Unknown' }
+} | ConvertTo-Json -Compress`;
+				const result = await runPowerShell(ps, { timeout: 10000 });
+				if (result.exitCode !== 0) {
+					return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+				}
+				const info = JSON.parse(result.stdout);
+				return { content: [{ type: 'text', text: `${info.Extension} -> ${info.FileType} -> ${info.OpensWith}` }] };
+			}
+
+			// List common defaults
+			const ps = `
+$defaults = @('.html','.pdf','.txt','.jpg','.png','.mp3','.mp4','.zip') | ForEach-Object {
+  $ext = $_
+  $assoc = cmd /c assoc $ext 2>$null
+  $type = if ($assoc) { ($assoc -split '=')[1] } else { 'N/A' }
+  [PSCustomObject]@{ Extension = $ext; FileType = $type }
+}
+$defaults | ConvertTo-Json -Depth 3 -Compress`;
+
+			const result = await runPowerShell(ps, { timeout: 15000 });
+			if (result.exitCode !== 0) {
+				return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+			}
+
+			const defaults = Array.isArray(JSON.parse(result.stdout)) ? JSON.parse(result.stdout) : [JSON.parse(result.stdout)];
+			const lines = defaults.map((d: { Extension: string; FileType: string }) =>
+				`  ${d.Extension.padEnd(8)}  ${d.FileType}`,
+			);
+			return { content: [{ type: 'text', text: `Default file associations:\n${lines.join('\n')}` }] };
+		},
+	);
+}

package/src/tools/usb.ts

@@ -0,0 +1,65 @@
+/* Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * Tool: windows_usb_devices (#49)
+ */
+
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { runPowerShell } from '../shell.js';
+
+export function registerUsbTools(server: McpServer): void {
+	server.tool(
+		'windows_usb_devices',
+		'List connected USB devices with name, manufacturer, type, and status. Supports safe eject for storage.',
+		{
+			eject: z.string().optional().describe('Drive letter to safely eject (e.g. "E:")'),
+		},
+		async ({ eject }) => {
+			if (eject) {
+				const letter = eject.replace(':', '').toUpperCase();
+				const ps = `
+$vol = Get-CimInstance Win32_Volume -Filter "DriveLetter='${letter}:'" -ErrorAction Stop
+$ejectResult = $vol | Invoke-CimMethod -MethodName Dismount -Arguments @{Force=$false} -ErrorAction Stop
+if ($ejectResult.ReturnValue -eq 0) { "Safely ejected ${letter}:" } else { "Eject failed (code: $($ejectResult.ReturnValue)). Close all files on the drive first." }`;
+
+				const result = await runPowerShell(ps, { timeout: 15000 });
+				return {
+					content: [{ type: 'text', text: result.stdout || result.stderr }],
+					isError: result.exitCode !== 0,
+				};
+			}
+
+			const ps = `
+Get-PnpDevice -Class USB -PresentOnly -ErrorAction SilentlyContinue | ForEach-Object {
+  [PSCustomObject]@{
+    Name = $_.FriendlyName
+    Status = $_.Status
+    Manufacturer = $_.Manufacturer
+    InstanceId = $_.InstanceId
+    Class = $_.Class
+  }
+} | Where-Object { $_.Name } | Sort-Object Name | ConvertTo-Json -Depth 3 -Compress`;
+
+			const result = await runPowerShell(ps, { timeout: 15000 });
+			if (result.exitCode !== 0) {
+				return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+			}
+
+			if (!result.stdout) {
+				return { content: [{ type: 'text', text: 'No USB devices found.' }] };
+			}
+
+			const devices = Array.isArray(JSON.parse(result.stdout)) ? JSON.parse(result.stdout) : [JSON.parse(result.stdout)];
+			const lines = devices.map((d: { Name: string; Status: string; Manufacturer: string }) => {
+				const status = d.Status === 'OK' ? '[OK]' : `[${d.Status?.slice(0, 3) || '?'}]`;
+				return `${status}  ${(d.Name || '').padEnd(45).slice(0, 45)}  ${(d.Manufacturer || '').slice(0, 25)}`;
+			});
+
+			const header = `Sta  ${'Name'.padEnd(45)}  Manufacturer`;
+			return {
+				content: [{ type: 'text', text: `${header}\n${'─'.repeat(80)}\n${lines.join('\n')}\n\n${devices.length} USB devices` }],
+			};
+		},
+	);
+}

package/src/tools/virtual_desktop.ts

@@ -0,0 +1,122 @@
+/* Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * Tool: windows_virtual_desktop (#54)
+ */
+
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { runPowerShell } from '../shell.js';
+
+export function registerVirtualDesktopTools(server: McpServer): void {
+	server.tool(
+		'windows_virtual_desktop',
+		'List, create, switch, or remove virtual desktops.',
+		{
+			action: z.enum(['list', 'create', 'switch', 'remove']).default('list').describe('Action'),
+			index: z.number().optional().describe('Desktop index (0-based, for switch/remove)'),
+		},
+		async ({ action, index }) => {
+			switch (action) {
+				case 'list': {
+					const ps = `
+$desktops = Get-CimInstance -Namespace root\\cimv2 -ClassName Win32_Desktop -ErrorAction SilentlyContinue
+# Virtual desktops are best accessed via COM, but we can detect count from registry
+$vdKey = 'HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\VirtualDesktops'
+$ids = (Get-ItemProperty -Path $vdKey -Name VirtualDesktopIDs -ErrorAction SilentlyContinue).VirtualDesktopIDs
+$currentId = (Get-ItemProperty -Path $vdKey -Name CurrentVirtualDesktop -ErrorAction SilentlyContinue).CurrentVirtualDesktop
+$count = if ($ids) { $ids.Length / 16 } else { 1 }
+[PSCustomObject]@{
+  Count = $count
+  CurrentIndex = 'Use Ctrl+Win+Left/Right to navigate'
+  Note = 'Windows does not expose virtual desktop names via public API'
+} | ConvertTo-Json -Compress`;
+					const result = await runPowerShell(ps, { timeout: 10000 });
+					if (result.exitCode !== 0) {
+						return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+					}
+					const info = JSON.parse(result.stdout);
+					return { content: [{ type: 'text', text: `Virtual desktops: ${info.Count}\n${info.Note}` }] };
+				}
+
+				case 'create': {
+					// Use keyboard shortcut via SendKeys
+					const ps = `
+Add-Type @'
+using System;
+using System.Runtime.InteropServices;
+public class VDKeys {
+    [DllImport("user32.dll")] public static extern void keybd_event(byte bVk, byte bScan, uint dwFlags, UIntPtr dwExtraInfo);
+    public static void NewDesktop() {
+        // Ctrl+Win+D
+        keybd_event(0x11, 0, 0, UIntPtr.Zero); // Ctrl down
+        keybd_event(0x5B, 0, 0, UIntPtr.Zero); // Win down
+        keybd_event(0x44, 0, 0, UIntPtr.Zero); // D down
+        keybd_event(0x44, 0, 2, UIntPtr.Zero); // D up
+        keybd_event(0x5B, 0, 2, UIntPtr.Zero); // Win up
+        keybd_event(0x11, 0, 2, UIntPtr.Zero); // Ctrl up
+    }
+}
+'@
+[VDKeys]::NewDesktop()
+Start-Sleep -Milliseconds 500
+"New virtual desktop created (switched to it)"`;
+					const result = await runPowerShell(ps, { timeout: 10000 });
+					return { content: [{ type: 'text', text: result.stdout || result.stderr }] };
+				}
+
+				case 'switch': {
+					if (index === undefined) {
+						return { content: [{ type: 'text', text: 'Switch requires index.' }], isError: true };
+					}
+					// Navigate left/right to reach target
+					const ps = `
+Add-Type @'
+using System;
+using System.Runtime.InteropServices;
+public class VDSwitch {
+    [DllImport("user32.dll")] public static extern void keybd_event(byte bVk, byte bScan, uint dwFlags, UIntPtr dwExtraInfo);
+    public static void Left() {
+        keybd_event(0x11, 0, 0, UIntPtr.Zero); keybd_event(0x5B, 0, 0, UIntPtr.Zero);
+        keybd_event(0x25, 0, 0, UIntPtr.Zero); keybd_event(0x25, 0, 2, UIntPtr.Zero);
+        keybd_event(0x5B, 0, 2, UIntPtr.Zero); keybd_event(0x11, 0, 2, UIntPtr.Zero);
+    }
+    public static void Right() {
+        keybd_event(0x11, 0, 0, UIntPtr.Zero); keybd_event(0x5B, 0, 0, UIntPtr.Zero);
+        keybd_event(0x27, 0, 0, UIntPtr.Zero); keybd_event(0x27, 0, 2, UIntPtr.Zero);
+        keybd_event(0x5B, 0, 2, UIntPtr.Zero); keybd_event(0x11, 0, 2, UIntPtr.Zero);
+    }
+}
+'@
+# Go far left first, then right to target index
+for ($i = 0; $i -lt 20; $i++) { [VDSwitch]::Left(); Start-Sleep -Milliseconds 100 }
+for ($i = 0; $i -lt ${index}; $i++) { [VDSwitch]::Right(); Start-Sleep -Milliseconds 100 }
+"Switched to desktop ${index}"`;
+					const result = await runPowerShell(ps, { timeout: 15000 });
+					return { content: [{ type: 'text', text: result.stdout || result.stderr }] };
+				}
+
+				case 'remove': {
+					const ps = `
+Add-Type @'
+using System;
+using System.Runtime.InteropServices;
+public class VDClose {
+    [DllImport("user32.dll")] public static extern void keybd_event(byte bVk, byte bScan, uint dwFlags, UIntPtr dwExtraInfo);
+    public static void CloseDesktop() {
+        keybd_event(0x11, 0, 0, UIntPtr.Zero); keybd_event(0x5B, 0, 0, UIntPtr.Zero);
+        keybd_event(0x73, 0, 0, UIntPtr.Zero); // F4
+        keybd_event(0x73, 0, 2, UIntPtr.Zero);
+        keybd_event(0x5B, 0, 2, UIntPtr.Zero); keybd_event(0x11, 0, 2, UIntPtr.Zero);
+    }
+}
+'@
+[VDClose]::CloseDesktop()
+"Current virtual desktop removed"`;
+					const result = await runPowerShell(ps, { timeout: 10000 });
+					return { content: [{ type: 'text', text: result.stdout || result.stderr }] };
+				}
+			}
+		},
+	);
+}

package/src/tools/wifi.ts

@@ -0,0 +1,157 @@
+/* Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
+ * SPDX-License-Identifier: GPL-3.0-or-later
+ *
+ * Tools: windows_wifi_networks (#47), windows_wifi_connect (#48)
+ */
+
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { runPowerShell } from '../shell.js';
+
+export function registerWifiTools(server: McpServer): void {
+	server.tool(
+		'windows_wifi_networks',
+		'Scan and list available Wi-Fi networks with signal strength, security, and saved profiles.',
+		{
+			rescan: z.boolean().default(false).describe('Force a rescan before listing'),
+			saved: z.boolean().default(false).describe('List saved profiles instead of available networks'),
+		},
+		async ({ rescan, saved }) => {
+			if (saved) {
+				const ps = `netsh wlan show profiles | Select-String 'All User Profile' | ForEach-Object { ($_ -split ':')[1].Trim() }`;
+				const result = await runPowerShell(ps, { timeout: 10000 });
+				if (result.exitCode !== 0) {
+					return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+				}
+				const profiles = result.stdout ? result.stdout.split('\n').filter(Boolean) : [];
+				return {
+					content: [{ type: 'text', text: `Saved Wi-Fi profiles (${profiles.length}):\n${profiles.map(p => `  ${p}`).join('\n')}` }],
+				};
+			}
+
+			const scanCmd = rescan ? `netsh wlan scan; Start-Sleep -Seconds 3;` : '';
+			const ps = `
+${scanCmd}
+$output = netsh wlan show networks mode=bssid 2>&1
+$networks = [System.Collections.Generic.List[PSObject]]::new()
+$current = @{}
+
+foreach ($line in ($output -split [char]10)) {
+  $line = $line.Trim()
+  if ($line -match '^SSID \\d+ : (.*)') {
+    if ($current.SSID) { $networks.Add([PSCustomObject]$current) }
+    $current = @{ SSID = $Matches[1]; Signal = ''; Auth = ''; Channel = ''; BSSID = '' }
+  }
+  elseif ($line -match '^Signal\\s+: (.*)') { $current.Signal = $Matches[1] }
+  elseif ($line -match '^Authentication\\s+: (.*)') { $current.Auth = $Matches[1] }
+  elseif ($line -match '^Channel\\s+: (.*)') { $current.Channel = $Matches[1] }
+  elseif ($line -match '^BSSID \\d+\\s+: (.*)') { $current.BSSID = $Matches[1] }
+}
+if ($current.SSID) { $networks.Add([PSCustomObject]$current) }
+
+# Current connection
+$connected = (netsh wlan show interfaces | Select-String 'SSID\\s+:' | Select-Object -First 1) -replace '.*:\\s*',''
+
+$networks | Sort-Object { [int]($_.Signal -replace '%','') } -Descending | ConvertTo-Json -Depth 3 -Compress
+Write-Output "---CONNECTED:$($connected.Trim())"`;
+
+			const result = await runPowerShell(ps, { timeout: 20000 });
+			if (result.exitCode !== 0) {
+				return { content: [{ type: 'text', text: `Error: ${result.stderr}` }], isError: true };
+			}
+
+			const outputLines = result.stdout.split('\n');
+			const connectedLine = outputLines.find(l => l.startsWith('---CONNECTED:'));
+			const connected = connectedLine ? connectedLine.replace('---CONNECTED:', '').trim() : '';
+			const jsonLine = outputLines.filter(l => !l.startsWith('---CONNECTED:')).join('\n');
+
+			let networks: Array<{ SSID: string; Signal: string; Auth: string; Channel: string }> = [];
+			if (jsonLine.trim()) {
+				try {
+					const parsed = JSON.parse(jsonLine);
+					networks = Array.isArray(parsed) ? parsed : [parsed];
+				} catch { /* empty */ }
+			}
+
+			const lines = networks.map(n => {
+				const icon = n.SSID === connected ? ' *' : '  ';
+				return `${icon} ${n.Signal.padStart(4)}  ${n.Auth.padEnd(18)}  Ch ${(n.Channel || '?').padEnd(3)}  ${n.SSID}`;
+			});
+
+			const header = `   ${'Sig'.padStart(4)}  ${'Security'.padEnd(18)}  ${'Ch'.padEnd(5)}  SSID`;
+			return {
+				content: [{
+					type: 'text',
+					text: `Connected: ${connected || '(none)'}\n\n${header}\n${'─'.repeat(65)}\n${lines.join('\n')}\n\n${networks.length} networks (* = connected)`,
+				}],
+			};
+		},
+	);
+
+	server.tool(
+		'windows_wifi_connect',
+		'Connect to a Wi-Fi network, disconnect, or forget a saved profile.',
+		{
+			action: z.enum(['connect', 'disconnect', 'forget']).describe('Action'),
+			ssid: z.string().optional().describe('Network SSID (for connect/forget)'),
+			password: z.string().optional().describe('Password (for connecting to a new network)'),
+		},
+		async ({ action, ssid, password }) => {
+			let ps: string;
+
+			switch (action) {
+				case 'disconnect':
+					ps = `netsh wlan disconnect; "Disconnected from Wi-Fi"`;
+					break;
+
+				case 'forget':
+					if (!ssid) {
+						return { content: [{ type: 'text', text: 'Forget requires ssid.' }], isError: true };
+					}
+					ps = `netsh wlan delete profile name="${ssid.replace(/"/g, '""')}" 2>&1; "Forgot network: ${ssid}"`;
+					break;
+
+				case 'connect':
+					if (!ssid) {
+						return { content: [{ type: 'text', text: 'Connect requires ssid.' }], isError: true };
+					}
+					// Check if profile exists
+					if (password) {
+						// Create a temporary profile XML for new networks
+						ps = `
+$profileXml = @"
+<?xml version="1.0"?>
+<WLANProfile xmlns="http://www.microsoft.com/networking/WLAN/profile/v1">
+  <name>${ssid}</name>
+  <SSIDConfig><SSID><name>${ssid}</name></SSID></SSIDConfig>
+  <connectionType>ESS</connectionType>
+  <connectionMode>auto</connectionMode>
+  <MSM><security>
+    <authEncryption><authentication>WPA2PSK</authentication><encryption>AES</encryption><useOneX>false</useOneX></authEncryption>
+    <sharedKey><keyType>passPhrase</keyType><protected>false</protected><keyMaterial>${password}</keyMaterial></sharedKey>
+  </security></MSM>
+</WLANProfile>
+"@
+$tempFile = [IO.Path]::GetTempFileName()
+$profileXml | Out-File -Encoding UTF8 $tempFile
+netsh wlan add profile filename="$tempFile" 2>&1 | Out-Null
+Remove-Item $tempFile
+netsh wlan connect name="${ssid.replace(/"/g, '""')}" 2>&1
+Start-Sleep -Seconds 3
+$iface = netsh wlan show interfaces
+$connectedSsid = ($iface | Select-String 'SSID\\s+:' | Select-Object -First 1) -replace '.*:\\s*',''
+if ($connectedSsid.Trim() -eq '${ssid}') { "Connected to ${ssid}" } else { "Connection attempt sent for ${ssid}" }`;
+					} else {
+						ps = `netsh wlan connect name="${ssid.replace(/"/g, '""')}" 2>&1; Start-Sleep -Seconds 2; "Connect attempt sent for ${ssid}"`;
+					}
+					break;
+			}
+
+			const result = await runPowerShell(ps, { timeout: 20000 });
+			return {
+				content: [{ type: 'text', text: result.stdout || result.stderr }],
+				isError: result.exitCode !== 0,
+			};
+		},
+	);
+}