@mseep/safe-omada-mcp 0.17.0

package/dist/server/stream.js

@@ -0,0 +1,157 @@
+import { randomUUID } from 'node:crypto';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { OmadaClient } from '../omadaClient/index.js';
+import { registerAllTools } from '../tools/index.js';
+import { logger } from '../utils/logger.js';
+import { createServer } from './common.js';
+function respondWithJson(res, statusCode, payload) {
+    const body = JSON.stringify(payload);
+    res.writeHead(statusCode, {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(body),
+    });
+    res.end(body);
+}
+async function connectSession(state) {
+    if (state.connected || state.closed) {
+        return;
+    }
+    if (typeof state.server.connect === 'function') {
+        await state.server.connect(state.transport);
+        state.connected = true;
+    }
+}
+async function closeTransport(state, sessionId) {
+    if (state.closed) {
+        return;
+    }
+    state.closed = true;
+    state.connected = false;
+    try {
+        if (typeof state.server.close === 'function') {
+            await state.server.close();
+        }
+    }
+    catch (error) {
+        logger.error('Failed to close Streamable HTTP server', { error, sessionId });
+    }
+    try {
+        if (typeof state.transport.close === 'function') {
+            await state.transport.close();
+        }
+    }
+    catch (error) {
+        logger.error('Failed to close Streamable HTTP transport', { error, sessionId });
+    }
+}
+function getSessionIdFromHeaders(req) {
+    const header = req.headers['mcp-session-id'];
+    if (Array.isArray(header)) {
+        return header[0];
+    }
+    return header;
+}
+/**
+ * Creates a Streamable HTTP transport
+ * This implements the MCP protocol version 2025-03-26
+ */
+export function createStreamTransport(client, config, hooks) {
+    const mcpServer = createServer();
+    registerAllTools(mcpServer, client, config.toolCategories);
+    logger.info('Starting Streamable HTTP transport; Mcp-Session-Id headers are optional in client-credentials mode');
+    logger.warn('HTTP transport is running in explicitly unsafe mode. The supported production baseline remains stdio only.');
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: () => randomUUID(),
+        allowedOrigins: config.httpAllowedOrigins,
+        enableDnsRebindingProtection: true,
+        onsessioninitialized: (sessionId) => {
+            logger.info('Session initialized', { sessionId });
+            hooks?.onSessionInitialized?.(sessionId);
+        },
+        onsessionclosed: (sessionId) => {
+            logger.info('Session closed', { sessionId });
+            hooks?.onSessionClosed?.(sessionId);
+        },
+    });
+    transport.onerror = (error) => {
+        logger.error('Streamable HTTP transport error', {
+            error,
+            message: error.message,
+        });
+    };
+    return {
+        transport,
+        server: mcpServer,
+        connected: false,
+        closed: false,
+        lastAccessed: Date.now(),
+    };
+}
+/**
+ * Handles incoming Streamable HTTP requests (GET, POST, DELETE) using persistent session state.
+ * For new sessions, resolves Omada credentials from env config (wins) and request headers (fallback).
+ * Existing sessions reuse the OmadaClient that was created when the session was initialized.
+ */
+export async function handleStreamRequest(config, omadaConfig, req, res, parsedBody = undefined, sessions) {
+    const originHeader = req.headers.origin;
+    const hostHeader = req.headers.host;
+    const headerSessionId = getSessionIdFromHeaders(req);
+    logger.info('Streamable HTTP request received', {
+        method: req.method,
+        url: req.url,
+        sessionId: headerSessionId ?? undefined,
+        origin: originHeader ?? '(not set)',
+        host: hostHeader ?? '(not set)',
+    });
+    let state = headerSessionId ? sessions.get(headerSessionId) : undefined;
+    if (headerSessionId && !state) {
+        logger.warn('Stream session not found', { sessionId: headerSessionId, method: req.method, url: req.url });
+        respondWithJson(res, 404, { error: 'Stream session not found', jsonrpc: '2.0', id: null });
+        return;
+    }
+    const isNewSession = !state;
+    if (!state) {
+        const client = new OmadaClient(omadaConfig);
+        let pendingState;
+        const lifecycleHooks = {
+            onSessionInitialized: (sessionId) => {
+                sessions.set(sessionId, pendingState);
+                logger.debug('Registered Streamable HTTP session', { sessionId });
+            },
+            onSessionClosed: (sessionId) => {
+                sessions.delete(sessionId);
+                void closeTransport(pendingState, sessionId);
+            },
+        };
+        pendingState = createStreamTransport(client, config, lifecycleHooks);
+        state = pendingState;
+        await connectSession(state);
+    }
+    state.lastAccessed = Date.now();
+    try {
+        await state.transport.handleRequest(req, res, parsedBody);
+        logger.debug('Streamable HTTP request handled', {
+            method: req.method,
+            sessionId: headerSessionId ?? (isNewSession ? '(new-session)' : undefined),
+        });
+    }
+    catch (error) {
+        logger.error('Failed to handle Streamable HTTP request', {
+            error,
+            method: req.method,
+            url: req.url,
+            origin: originHeader ?? '(not set)',
+            host: hostHeader ?? '(not set)',
+            allowedOrigins: config.httpAllowedOrigins,
+        });
+        throw error;
+    }
+}
+export async function closeAllStreamSessions(sessions) {
+    for (const [sessionId, state] of sessions.entries()) {
+        await closeTransport(state, sessionId);
+        sessions.delete(sessionId);
+        logger.info('Closed Streamable HTTP session', { sessionId });
+    }
+}
+//# sourceMappingURL=stream.js.map

package/dist/server/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/server/stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiB3C,SAAS,eAAe,CAAC,GAAmB,EAAE,UAAkB,EAAE,OAAgB;IAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;QACtB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;KAC5C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAA2B;IACrD,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,OAAO;IACX,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3B,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAA2B,EAAE,SAAkB;IACzE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,OAAO;IACX,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAmB,EAAE,MAAyB,EAAE,KAA4B;IAC9G,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAE3D,MAAM,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IAClH,MAAM,CAAC,IAAI,CAAC,4GAA4G,CAAC,CAAC;IAE1H,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAChD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QACtC,cAAc,EAAE,MAAM,CAAC,kBAAkB;QACzC,4BAA4B,EAAE,IAAI;QAClC,oBAAoB,EAAE,CAAC,SAAiB,EAAE,EAAE;YACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,KAAK,EAAE,oBAAoB,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,eAAe,EAAE,CAAC,SAAiB,EAAE,EAAE;YACnC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7C,KAAK,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC;KACJ,CAAC,CAAC;IAEH,SAAS,CAAC,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YAC5C,KAAK;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,OAAO;QACH,SAAS;QACT,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;KAC3B,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,MAAyB,EACzB,WAAkC,EAClC,GAAoB,EACpB,GAAmB,EACnB,aAAsB,SAAS,EAC/B,QAA0B;IAE1B,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,eAAe,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAErD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;QAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,eAAe,IAAI,SAAS;QACvC,MAAM,EAAE,YAAY,IAAI,WAAW;QACnC,IAAI,EAAE,UAAU,IAAI,WAAW;KAClC,CAAC,CAAC;IAEH,IAAI,KAAK,GAAqC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1G,IAAI,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1G,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,OAAO;IACX,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAE5C,IAAI,YAAkC,CAAC;QACvC,MAAM,cAAc,GAAyB;YACzC,oBAAoB,EAAE,CAAC,SAAiB,EAAE,EAAE;gBACxC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,eAAe,EAAE,CAAC,SAAiB,EAAE,EAAE;gBACnC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3B,KAAK,cAAc,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;SACJ,CAAC;QACF,YAAY,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QACrE,KAAK,GAAG,YAAY,CAAC;QACrB,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEhC,IAAI,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAE1D,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;YAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,eAAe,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;YACrD,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,YAAY,IAAI,WAAW;YACnC,IAAI,EAAE,UAAU,IAAI,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAA0B;IACnE,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,MAAM,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;AACL,CAAC"}

package/dist/tools/backupController.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerBackupControllerTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/backupController.js

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+import { customHeadersSchema, wrapMutationToolHandler } from '../server/common.js';
+export function registerBackupControllerTool(server, client) {
+    const inputSchema = z.object({
+        retainUser: z.boolean().describe('Whether to retain user account data in the backup.'),
+        dryRun: z.boolean().optional().default(false).describe('If true, return the planned action without executing it.'),
+        customHeaders: customHeadersSchema,
+    });
+    server.registerTool('backupController', {
+        description: 'Trigger a controller configuration backup to the self/cloud server. Use getBackupResult to poll the backup status afterwards.',
+        inputSchema: inputSchema.shape,
+        annotations: {
+            destructiveHint: false,
+        },
+    }, wrapMutationToolHandler('backupController', ({ retainUser }, result, mode) => ({
+        action: 'backup-controller',
+        target: 'controller',
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run'
+            ? `Planned controller backup (retainUser=${retainUser}).`
+            : `Controller backup triggered (retainUser=${retainUser}).`,
+        result,
+    }), async ({ retainUser, dryRun, customHeaders }) => {
+        if (dryRun) {
+            return { accepted: true, dryRun: true, retainUser };
+        }
+        return await client.backupController(retainUser, customHeaders);
+    }));
+}
+//# sourceMappingURL=backupController.js.map

package/dist/tools/backupController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupController.js","sourceRoot":"","sources":["../../src/tools/backupController.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,UAAU,4BAA4B,CAAC,MAAiB,EAAE,MAAmB;IAC/E,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAClH,aAAa,EAAE,mBAAmB;KACrC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACf,kBAAkB,EAClB;QACI,WAAW,EACP,+HAA+H;QACnI,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,WAAW,EAAE;YACT,eAAe,EAAE,KAAK;SACzB;KACJ,EACD,uBAAuB,CACnB,kBAAkB,EAClB,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,EAAE,mBAAmB;QAC3B,MAAM,EAAE,YAAY;QACpB,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EACH,IAAI,KAAK,SAAS;YACd,CAAC,CAAC,yCAAyC,UAAU,IAAI;YACzD,CAAC,CAAC,2CAA2C,UAAU,IAAI;QACnE,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QAC5C,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/backupControllerToFileServer.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerBackupControllerToFileServerTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/backupControllerToFileServer.js

@@ -0,0 +1,40 @@
+import { z } from 'zod';
+import { customHeadersSchema, wrapMutationToolHandler } from '../server/common.js';
+const fileServerConfigSchema = z.object({
+    protocol: z.enum(['ftp', 'sftp']).describe('File server protocol.'),
+    hostname: z.string().min(1).describe('File server hostname or IP address.'),
+    port: z.number().int().min(1).max(65535).describe('File server port.'),
+    username: z.string().optional().describe('Login username.'),
+    password: z.string().optional().describe('Login password.'),
+});
+export function registerBackupControllerToFileServerTool(server, client) {
+    const inputSchema = z.object({
+        serverConfig: fileServerConfigSchema.describe('File server connection details.'),
+        filePath: z.string().min(1).describe('Destination path on the file server where the backup will be stored.'),
+        retainUser: z.boolean().describe('Whether to retain user account data in the backup.'),
+        dryRun: z.boolean().optional().default(false).describe('If true, return the planned action without executing it.'),
+        customHeaders: customHeadersSchema,
+    });
+    server.registerTool('backupControllerToFileServer', {
+        description: 'Trigger a controller configuration backup to an external file server (FTP/SFTP). Use getBackupResult to poll the backup status.',
+        inputSchema: inputSchema.shape,
+        annotations: {
+            destructiveHint: false,
+        },
+    }, wrapMutationToolHandler('backupControllerToFileServer', ({ filePath }, result, mode) => ({
+        action: 'backup-controller-file-server',
+        target: filePath,
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run'
+            ? `Planned controller backup to file server at ${filePath}.`
+            : `Controller backup to file server triggered at ${filePath}.`,
+        result,
+    }), async ({ serverConfig, filePath, retainUser, dryRun, customHeaders }) => {
+        if (dryRun) {
+            return { accepted: true, dryRun: true, filePath, retainUser };
+        }
+        return await client.backupControllerToFileServer(serverConfig, filePath, retainUser, customHeaders);
+    }));
+}
+//# sourceMappingURL=backupControllerToFileServer.js.map

package/dist/tools/backupControllerToFileServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupControllerToFileServer.js","sourceRoot":"","sources":["../../src/tools/backupControllerToFileServer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC3E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,UAAU,wCAAwC,CAAC,MAAiB,EAAE,MAAmB;IAC3F,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,YAAY,EAAE,sBAAsB,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAChF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sEAAsE,CAAC;QAC5G,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QACtF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAClH,aAAa,EAAE,mBAAmB;KACrC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACf,8BAA8B,EAC9B;QACI,WAAW,EACP,iIAAiI;QACrI,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,WAAW,EAAE;YACT,eAAe,EAAE,KAAK;SACzB;KACJ,EACD,uBAAuB,CACnB,8BAA8B,EAC9B,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,QAAQ;QAChB,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EACH,IAAI,KAAK,SAAS;YACd,CAAC,CAAC,+CAA+C,QAAQ,GAAG;YAC5D,CAAC,CAAC,iDAAiD,QAAQ,GAAG;QACtE,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QACpE,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACxG,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/backupSites.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerBackupSitesTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/backupSites.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { customHeadersSchema, wrapMutationToolHandler } from '../server/common.js';
+export function registerBackupSitesTool(server, client) {
+    const inputSchema = z.object({
+        siteIds: z.array(z.string().min(1)).min(1).max(300).describe('List of site IDs to back up (up to 300).'),
+        dryRun: z.boolean().optional().default(false).describe('If true, return the planned action without executing it.'),
+        customHeaders: customHeadersSchema,
+    });
+    server.registerTool('backupSites', {
+        description: 'Trigger a multi-site configuration backup to the self/cloud server (up to 300 sites). Use getSiteBackupResult to poll the backup status for a specific site.',
+        inputSchema: inputSchema.shape,
+        annotations: {
+            destructiveHint: false,
+        },
+    }, wrapMutationToolHandler('backupSites', ({ siteIds }, result, mode) => ({
+        action: 'backup-sites',
+        target: siteIds.join(', '),
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run' ? `Planned backup for ${siteIds.length} site(s).` : `Backup triggered for ${siteIds.length} site(s).`,
+        result,
+    }), async ({ siteIds, dryRun, customHeaders }) => {
+        if (dryRun) {
+            return { accepted: true, dryRun: true, siteIds };
+        }
+        return await client.backupSites(siteIds, customHeaders);
+    }));
+}
+//# sourceMappingURL=backupSites.js.map

package/dist/tools/backupSites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupSites.js","sourceRoot":"","sources":["../../src/tools/backupSites.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,MAAmB;IAC1E,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxG,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAClH,aAAa,EAAE,mBAAmB;KACrC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACf,aAAa,EACb;QACI,WAAW,EACP,8JAA8J;QAClK,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,WAAW,EAAE;YACT,eAAe,EAAE,KAAK;SACzB;KACJ,EACD,uBAAuB,CACnB,aAAa,EACb,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5B,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,wBAAwB,OAAO,CAAC,MAAM,WAAW;QACjI,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QACzC,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC5D,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/backupSitesToFileServer.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerBackupSitesToFileServerTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/backupSitesToFileServer.js

@@ -0,0 +1,40 @@
+import { z } from 'zod';
+import { customHeadersSchema, wrapMutationToolHandler } from '../server/common.js';
+const fileServerConfigSchema = z.object({
+    protocol: z.enum(['ftp', 'sftp']).describe('File server protocol.'),
+    hostname: z.string().min(1).describe('File server hostname or IP address.'),
+    port: z.number().int().min(1).max(65535).describe('File server port.'),
+    username: z.string().optional().describe('Login username.'),
+    password: z.string().optional().describe('Login password.'),
+});
+export function registerBackupSitesToFileServerTool(server, client) {
+    const inputSchema = z.object({
+        serverConfig: fileServerConfigSchema.describe('File server connection details.'),
+        filePath: z.string().min(1).describe('Destination path on the file server where the backup will be stored.'),
+        siteIds: z.array(z.string().min(1)).min(1).max(300).describe('List of site IDs to back up (up to 300).'),
+        dryRun: z.boolean().optional().default(false).describe('If true, return the planned action without executing it.'),
+        customHeaders: customHeadersSchema,
+    });
+    server.registerTool('backupSitesToFileServer', {
+        description: 'Trigger a multi-site configuration backup to an external file server (FTP/SFTP, up to 300 sites). Use getSiteBackupResult to poll the backup status for a specific site.',
+        inputSchema: inputSchema.shape,
+        annotations: {
+            destructiveHint: false,
+        },
+    }, wrapMutationToolHandler('backupSitesToFileServer', ({ siteIds, filePath }, result, mode) => ({
+        action: 'backup-sites-file-server',
+        target: filePath,
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run'
+            ? `Planned backup of ${siteIds.length} site(s) to file server at "${filePath}".`
+            : `Backup of ${siteIds.length} site(s) to file server triggered at "${filePath}".`,
+        result,
+    }), async ({ serverConfig, filePath, siteIds, dryRun, customHeaders }) => {
+        if (dryRun) {
+            return { accepted: true, dryRun: true, filePath, siteIds };
+        }
+        return await client.backupSitesToFileServer(serverConfig, filePath, siteIds, customHeaders);
+    }));
+}
+//# sourceMappingURL=backupSitesToFileServer.js.map

package/dist/tools/backupSitesToFileServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupSitesToFileServer.js","sourceRoot":"","sources":["../../src/tools/backupSitesToFileServer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC3E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,UAAU,mCAAmC,CAAC,MAAiB,EAAE,MAAmB;IACtF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;QACzB,YAAY,EAAE,sBAAsB,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAChF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sEAAsE,CAAC;QAC5G,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxG,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAClH,aAAa,EAAE,mBAAmB;KACrC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACf,yBAAyB,EACzB;QACI,WAAW,EACP,0KAA0K;QAC9K,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,WAAW,EAAE;YACT,eAAe,EAAE,KAAK;SACzB;KACJ,EACD,uBAAuB,CACnB,yBAAyB,EACzB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,0BAA0B;QAClC,MAAM,EAAE,QAAQ;QAChB,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EACH,IAAI,KAAK,SAAS;YACd,CAAC,CAAC,qBAAqB,OAAO,CAAC,MAAM,+BAA+B,QAAQ,IAAI;YAChF,CAAC,CAAC,aAAa,OAAO,CAAC,MAAM,yCAAyC,QAAQ,IAAI;QAC1F,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QACjE,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAChG,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/blockClient.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerBlockClientTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/blockClient.js

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+import { siteInputSchema, wrapMutationToolHandler } from '../server/common.js';
+const clientMacSchema = z
+    .string()
+    .trim()
+    .regex(/^[0-9A-Fa-f]{2}([:-][0-9A-Fa-f]{2}){5}$/, 'Invalid client MAC address format. Expected "AA-BB-CC-DD-EE-FF" or "AA:BB:CC:DD:EE:FF".');
+export function registerBlockClientTool(server, client) {
+    const inputSchema = siteInputSchema.extend({
+        clientMac: clientMacSchema.describe('Client MAC address to block.'),
+        dryRun: z.boolean().optional().default(false).describe('If true, return the planned action without sending it to the controller.'),
+    });
+    server.registerTool('blockClient', {
+        description: 'Block a client from network access through the official Omada Open API.',
+        inputSchema: inputSchema.shape,
+        annotations: {
+            destructiveHint: true,
+        },
+    }, wrapMutationToolHandler('blockClient', ({ clientMac, siteId }, result, mode) => ({
+        action: 'block-client',
+        target: clientMac,
+        siteId,
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run' ? `Planned client block for ${clientMac}.` : `Client block requested for ${clientMac}.`,
+        result,
+    }), async ({ clientMac, siteId, customHeaders, dryRun }) => {
+        if (dryRun) {
+            return { accepted: true, dryRun: true };
+        }
+        return await client.blockClient(clientMac, siteId, customHeaders);
+    }));
+}
+//# sourceMappingURL=blockClient.js.map

package/dist/tools/blockClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blockClient.js","sourceRoot":"","sources":["../../src/tools/blockClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,MAAM,eAAe,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,yCAAyC,EAAE,yFAAyF,CAAC,CAAC;AAEjJ,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,MAAmB;IAC1E,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,0EAA0E,CAAC;KACrI,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACf,aAAa,EACb;QACI,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,WAAW,EAAE;YACT,eAAe,EAAE,IAAI;SACxB;KACJ,EACD,uBAAuB,CACnB,aAAa,EACb,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,SAAS;QACjB,MAAM;QACN,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,4BAA4B,SAAS,GAAG,CAAC,CAAC,CAAC,8BAA8B,SAAS,GAAG;QACnH,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;QACnD,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACtE,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/createDhcpReservation.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerCreateDhcpReservationTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/createDhcpReservation.js

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+import { siteInputSchema, wrapMutationToolHandler } from '../server/common.js';
+import { dhcpReservationPayloadSchema, findLanNetworkById, findReservationByIp, findReservationByMac, getAllDhcpReservations, validateReservationIpAgainstNetwork, } from './dhcpReservationShared.js';
+export function registerCreateDhcpReservationTool(server, client) {
+    const inputSchema = siteInputSchema.extend({
+        ...dhcpReservationPayloadSchema.shape,
+        dryRun: z.boolean().optional().default(false).describe('If true, validate and summarize the planned reservation without applying it.'),
+    });
+    server.registerTool('createDhcpReservation', {
+        description: 'Create a DHCP reservation for a specific LAN network after validating the selected network and reservation IP.',
+        inputSchema: inputSchema.shape,
+        annotations: {
+            destructiveHint: true,
+        },
+    }, wrapMutationToolHandler('createDhcpReservation', ({ mac, siteId }, result, mode) => ({
+        action: 'create-dhcp-reservation',
+        target: mac,
+        siteId,
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run' ? `Planned DHCP reservation for ${mac}.` : `DHCP reservation requested for ${mac}.`,
+        result,
+    }), async ({ mac, netId, status, ip, description, confirmConflict, options, dryRun, siteId, customHeaders }) => {
+        const reservationPayload = {
+            mac,
+            netId,
+            status,
+            ip,
+            description,
+            confirmConflict,
+            options,
+        };
+        const [lanNetworks, existingReservations] = await Promise.all([
+            client.getLanNetworkList(siteId, customHeaders),
+            getAllDhcpReservations(client, siteId, customHeaders),
+        ]);
+        const targetNetwork = findLanNetworkById(lanNetworks, reservationPayload.netId);
+        if (!targetNetwork) {
+            throw new Error(`LAN network ${reservationPayload.netId} was not found in the selected site.`);
+        }
+        validateReservationIpAgainstNetwork(reservationPayload.ip, targetNetwork);
+        const existing = findReservationByMac(existingReservations, reservationPayload.mac);
+        if (existing) {
+            throw new Error(`A DHCP reservation for ${reservationPayload.mac} already exists. Use updateDhcpReservation instead.`);
+        }
+        if (reservationPayload.ip) {
+            const conflictingReservation = findReservationByIp(existingReservations, reservationPayload.ip);
+            if (conflictingReservation && !reservationPayload.confirmConflict) {
+                throw new Error(`IP ${reservationPayload.ip} is already reserved by ${conflictingReservation.mac}. Set confirmConflict to true only if you intend to override the controller conflict warning.`);
+            }
+        }
+        if (dryRun) {
+            return {
+                accepted: true,
+                dryRun: true,
+                network: targetNetwork,
+                plannedReservation: reservationPayload,
+            };
+        }
+        return await client.createDhcpReservation(reservationPayload, siteId, customHeaders);
+    }));
+}
+//# sourceMappingURL=createDhcpReservation.js.map

package/dist/tools/createDhcpReservation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createDhcpReservation.js","sourceRoot":"","sources":["../../src/tools/createDhcpReservation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAEH,4BAA4B,EAC5B,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,mCAAmC,GACtC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,iCAAiC,CAAC,MAAiB,EAAE,MAAmB;IACpF,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC;QACvC,GAAG,4BAA4B,CAAC,KAAK;QACrC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,8EAA8E,CAAC;KACzI,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CACf,uBAAuB,EACvB;QACI,WAAW,EAAE,gHAAgH;QAC7H,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,WAAW,EAAE;YACT,eAAe,EAAE,IAAI;SACxB;KACJ,EACD,uBAAuB,CACnB,uBAAuB,EACvB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,yBAAyB;QACjC,MAAM,EAAE,GAAG;QACX,MAAM;QACN,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC,CAAC,kCAAkC,GAAG,GAAG;QAC/G,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QACvG,MAAM,kBAAkB,GAA2B;YAC/C,GAAG;YACH,KAAK;YACL,MAAM;YACN,EAAE;YACF,WAAW;YACX,eAAe;YACf,OAAO;SACV,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC;YAC/C,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC;SACxD,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,eAAe,kBAAkB,CAAC,KAAK,sCAAsC,CAAC,CAAC;QACnG,CAAC;QAED,mCAAmC,CAAC,kBAAkB,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpF,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0BAA0B,kBAAkB,CAAC,GAAG,qDAAqD,CAAC,CAAC;QAC3H,CAAC;QAED,IAAI,kBAAkB,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,sBAAsB,GAAG,mBAAmB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAChG,IAAI,sBAAsB,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CACX,MAAM,kBAAkB,CAAC,EAAE,2BAA2B,sBAAsB,CAAC,GAAG,+FAA+F,CAClL,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,aAAa;gBACtB,kBAAkB,EAAE,kBAAkB;aACzC,CAAC;QACN,CAAC;QAED,OAAO,MAAM,MAAM,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACzF,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/createEapAcl.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerCreateEapAclTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/createEapAcl.js

@@ -0,0 +1,52 @@
+import { wrapMutationToolHandler } from '../server/common.js';
+import { createEapAclInputSchema, eapAclPayloadSchema, findCreatedAclByDescription, getAclRecordId, validateEapAclPayloadReferences, } from './gatewayAclShared.js';
+export function registerCreateEapAclTool(server, client) {
+    server.registerTool('createEapAcl', {
+        description: 'Create an EAP ACL rule for wireless access policy control using the official Omada Open API.',
+        inputSchema: createEapAclInputSchema.shape,
+        annotations: {
+            destructiveHint: true,
+        },
+    }, wrapMutationToolHandler('createEapAcl', ({ siteId }, result, mode) => ({
+        action: 'create-eap-acl',
+        target: siteId ?? 'default-site',
+        siteId,
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run' ? 'Planned EAP ACL creation.' : 'EAP ACL creation requested.',
+        result,
+    }), async ({ payload, dryRun, siteId, customHeaders }) => {
+        const parsedPayload = eapAclPayloadSchema.parse(payload);
+        const existingAcls = await client.listEapAcls(siteId, customHeaders);
+        await validateEapAclPayloadReferences(client, parsedPayload, siteId, customHeaders);
+        if (dryRun) {
+            return {
+                accepted: true,
+                dryRun: true,
+                plannedAcl: parsedPayload,
+            };
+        }
+        const createResult = await client.createEapAcl(parsedPayload, siteId, customHeaders);
+        const createdAclId = (() => {
+            if (!createResult || typeof createResult !== 'object') {
+                return undefined;
+            }
+            const maybeId = createResult.id ??
+                createResult.aclId;
+            return maybeId === undefined ? undefined : String(maybeId);
+        })();
+        if (createdAclId) {
+            return createResult;
+        }
+        const aclsAfterCreate = await client.listEapAcls(siteId, customHeaders);
+        const createdAcl = findCreatedAclByDescription(existingAcls, aclsAfterCreate, parsedPayload.description);
+        if (createdAcl) {
+            return {
+                aclId: getAclRecordId(createdAcl),
+                createdAcl,
+            };
+        }
+        return createResult;
+    }));
+}
+//# sourceMappingURL=createEapAcl.js.map

package/dist/tools/createEapAcl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createEapAcl.js","sourceRoot":"","sources":["../../src/tools/createEapAcl.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACH,uBAAuB,EACvB,mBAAmB,EACnB,2BAA2B,EAC3B,cAAc,EACd,+BAA+B,GAClC,MAAM,uBAAuB,CAAC;AAE/B,MAAM,UAAU,wBAAwB,CAAC,MAAiB,EAAE,MAAmB;IAC3E,MAAM,CAAC,YAAY,CACf,cAAc,EACd;QACI,WAAW,EAAE,8FAA8F;QAC3G,WAAW,EAAE,uBAAuB,CAAC,KAAK;QAC1C,WAAW,EAAE;YACT,eAAe,EAAE,IAAI;SACxB;KACJ,EACD,uBAAuB,CACnB,cAAc,EACd,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,MAAM,IAAI,cAAc;QAChC,MAAM;QACN,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,6BAA6B;QACzF,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QACjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACrE,MAAM,+BAA+B,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAEpF,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,aAAa;aAC5B,CAAC;QACN,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;YACvB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACpD,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,MAAM,OAAO,GACR,YAAkE,CAAC,EAAE;gBACrE,YAAkE,CAAC,KAAK,CAAC;YAC9E,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,YAAY,EAAE,CAAC;YACf,OAAO,YAAY,CAAC;QACxB,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,2BAA2B,CAAC,YAAY,EAAE,eAAe,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;QAEzG,IAAI,UAAU,EAAE,CAAC;YACb,OAAO;gBACH,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC;gBACjC,UAAU;aACb,CAAC;QACN,CAAC;QAED,OAAO,YAAY,CAAC;IACxB,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/createGatewayAcl.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerCreateGatewayAclTool(server: McpServer, client: OmadaClient): void;

package/dist/tools/createGatewayAcl.js

@@ -0,0 +1,29 @@
+import { wrapMutationToolHandler } from '../server/common.js';
+import { createGatewayAclInputSchema } from './gatewayAclShared.js';
+export function registerCreateGatewayAclTool(server, client) {
+    server.registerTool('createGatewayAcl', {
+        description: 'Create a gateway ACL rule for site firewall policy control using the official Omada Open API.',
+        inputSchema: createGatewayAclInputSchema.shape,
+        annotations: {
+            destructiveHint: true,
+        },
+    }, wrapMutationToolHandler('createGatewayAcl', ({ siteId }, result, mode) => ({
+        action: 'create-gateway-acl',
+        target: siteId ?? 'default-site',
+        siteId,
+        mode,
+        status: mode === 'dry-run' ? 'planned' : 'applied',
+        summary: mode === 'dry-run' ? 'Planned gateway ACL creation.' : 'Gateway ACL creation requested.',
+        result,
+    }), async ({ payload, dryRun, siteId, customHeaders }) => {
+        if (dryRun) {
+            return {
+                accepted: true,
+                dryRun: true,
+                plannedAcl: payload,
+            };
+        }
+        return await client.createOsgAcl(payload, siteId, customHeaders);
+    }));
+}
+//# sourceMappingURL=createGatewayAcl.js.map

package/dist/tools/createGatewayAcl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createGatewayAcl.js","sourceRoot":"","sources":["../../src/tools/createGatewayAcl.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,UAAU,4BAA4B,CAAC,MAAiB,EAAE,MAAmB;IAC/E,MAAM,CAAC,YAAY,CACf,kBAAkB,EAClB;QACI,WAAW,EAAE,+FAA+F;QAC5G,WAAW,EAAE,2BAA2B,CAAC,KAAK;QAC9C,WAAW,EAAE;YACT,eAAe,EAAE,IAAI;SACxB;KACJ,EACD,uBAAuB,CACnB,kBAAkB,EAClB,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE,oBAAoB;QAC5B,MAAM,EAAE,MAAM,IAAI,cAAc;QAChC,MAAM;QACN,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAClD,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,iCAAiC;QACjG,MAAM;KACT,CAAC,EACF,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QACjD,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,OAAO;aACtB,CAAC;QACN,CAAC;QAED,OAAO,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACrE,CAAC,CACJ,CACJ,CAAC;AACN,CAAC"}

package/dist/tools/deleteAcl.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function registerDeleteAclTool(server: McpServer, client: OmadaClient): void;