@mseep/safe-omada-mcp 0.17.0

package/dist/config.d.ts

@@ -0,0 +1,77 @@
+export type ToolPermission = 'read' | 'write';
+export type CapabilityProfile = 'safe-read' | 'ops-write' | 'admin' | 'compatibility';
+/** All known atomic category names */
+export declare const ALL_CATEGORIES: readonly ["dashboard", "client-insights", "insights", "clients", "devices-general", "devices-ap", "devices-switch", "devices-gateway", "wireless-ssid", "wireless-radio", "wireless-auth", "network-wan", "network-sim-lte", "network-lan", "network-routing", "network-nat", "network-services", "firewall-acl", "firewall-traffic", "firewall-ids", "security-threat", "security-wids", "vpn", "profiles", "schedules", "auth-profiles", "logs", "controller", "sites", "maintenance", "account-users", "account-sso", "account-cloud", "hotspot-portal", "hotspot-vouchers", "hotspot-users", "voip", "olt", "msp"];
+export type ToolCategory = (typeof ALL_CATEGORIES)[number];
+/** Categories declared in ALL_CATEGORIES but with no tool implementations yet (reserved for future phases). */
+export declare const FUTURE_CATEGORIES: Set<"dashboard" | "client-insights" | "insights" | "clients" | "devices-general" | "devices-ap" | "devices-switch" | "devices-gateway" | "wireless-ssid" | "wireless-radio" | "wireless-auth" | "network-wan" | "network-sim-lte" | "network-lan" | "network-routing" | "network-nat" | "network-services" | "firewall-acl" | "firewall-traffic" | "firewall-ids" | "security-threat" | "security-wids" | "vpn" | "profiles" | "schedules" | "auth-profiles" | "logs" | "controller" | "sites" | "maintenance" | "account-users" | "account-sso" | "account-cloud" | "hotspot-portal" | "hotspot-vouchers" | "hotspot-users" | "voip" | "olt" | "msp">;
+/** Group aliases that expand to multiple categories */
+export declare const CATEGORY_GROUP_ALIASES: Record<string, ToolCategory[]>;
+export interface ActiveCategoryEntry {
+    category: ToolCategory;
+    permissions: Set<ToolPermission>;
+}
+export interface ParseToolCategoriesResult {
+    categories: Map<ToolCategory, Set<ToolPermission>>;
+    warnings: string[];
+}
+/**
+ * Parse OMADA_TOOL_CATEGORIES string into a map of category → allowed permissions.
+ *
+ * Syntax: comma-separated tokens, each token is `<name>[:<suffix>]`
+ *   - suffix `:r`  → read only
+ *   - suffix `:w`  → write only
+ *   - suffix `:rw` → read and write
+ *   - no suffix    → read and write (`:rw`)
+ *
+ * Group aliases (e.g. `all`, `devices-all`) are expanded before the suffix is applied.
+ * Unknown category names produce a warning and are skipped.
+ * Future (unimplemented) categories produce a warning and are skipped.
+ *
+ * Returns a ParseToolCategoriesResult with categories map and buffered warnings.
+ */
+export declare function parseToolCategories(raw: string): ParseToolCategoriesResult;
+/** Default value for OMADA_TOOL_CATEGORIES */
+export declare const DEFAULT_TOOL_CATEGORIES = "dashboard:r,client-insights:r,clients:r,devices-all:r";
+export declare const DEFAULT_CAPABILITY_PROFILE: CapabilityProfile;
+export declare const CAPABILITY_PROFILE_DEFAULTS: Record<CapabilityProfile, string>;
+/**
+ * The resolved Omada connection parameters required to build an OmadaClient.
+ * All fields are guaranteed to be present.
+ */
+export interface OmadaConnectionConfig {
+    baseUrl: string;
+    clientId: string;
+    clientSecret: string;
+    omadacId: string;
+    siteId?: string;
+    strictSsl: boolean;
+    requestTimeout?: number;
+}
+export interface EnvironmentConfig {
+    capabilityProfile: CapabilityProfile;
+    toolCategories: Map<ToolCategory, Set<ToolPermission>>;
+    startupWarnings: string[];
+    baseUrl: string;
+    clientId?: string;
+    clientSecret?: string;
+    omadacId?: string;
+    siteId?: string;
+    strictSsl: boolean;
+    requestTimeout?: number;
+    logLevel: 'debug' | 'info' | 'warn' | 'error';
+    logFormat: 'plain' | 'json' | 'gcp-json';
+    useHttp: boolean;
+    unsafeEnableHttp: boolean;
+    httpPort?: number;
+    httpTransport: 'stream';
+    httpBindAddr?: string;
+    httpPath?: string;
+    httpEnableHealthcheck: boolean;
+    httpHealthcheckPath?: string;
+    httpAllowCors: boolean;
+    httpAllowedOrigins?: string[];
+    httpNgrokEnabled: boolean;
+    httpNgrokAuthToken?: string;
+}
+export declare function loadConfigFromEnv(env?: NodeJS.ProcessEnv): EnvironmentConfig;

package/dist/config.js

@@ -0,0 +1,357 @@
+import { z } from 'zod';
+import { isLoopbackBindAddress, isValidBindAddress, isValidOrigin } from './utils/config-validations.js';
+/** All known atomic category names */
+export const ALL_CATEGORIES = [
+    // Dashboard & Insights
+    'dashboard',
+    'client-insights',
+    'insights',
+    // Clients
+    'clients',
+    // Devices
+    'devices-general',
+    'devices-ap',
+    'devices-switch',
+    'devices-gateway',
+    // Wireless
+    'wireless-ssid',
+    'wireless-radio',
+    'wireless-auth',
+    // Network
+    'network-wan',
+    'network-sim-lte',
+    'network-lan',
+    'network-routing',
+    'network-nat',
+    'network-services',
+    // Firewall & Security
+    'firewall-acl',
+    'firewall-traffic',
+    'firewall-ids',
+    'security-threat',
+    'security-wids',
+    // VPN
+    'vpn',
+    // Profiles & Schedules
+    'profiles',
+    'schedules',
+    'auth-profiles',
+    // Logs
+    'logs',
+    // Controller & Org
+    'controller',
+    'sites',
+    'maintenance',
+    'account-users',
+    'account-sso',
+    'account-cloud',
+    // Hotspot
+    'hotspot-portal',
+    'hotspot-vouchers',
+    'hotspot-users',
+    // Niche
+    'voip',
+    'olt',
+    'msp',
+];
+/** Categories declared in ALL_CATEGORIES but with no tool implementations yet (reserved for future phases). */
+export const FUTURE_CATEGORIES = new Set([
+    'insights',
+    'network-sim-lte',
+    'account-sso',
+    'hotspot-portal',
+    'hotspot-vouchers',
+    'hotspot-users',
+    'voip',
+    'olt',
+    'msp',
+]);
+/** Group aliases that expand to multiple categories */
+export const CATEGORY_GROUP_ALIASES = {
+    all: [...ALL_CATEGORIES],
+    'devices-all': ['devices-general', 'devices-ap', 'devices-switch', 'devices-gateway'],
+    'wireless-all': ['wireless-ssid', 'wireless-radio', 'wireless-auth'],
+    'network-all': ['network-wan', 'network-lan', 'network-routing', 'network-nat', 'network-services'],
+    'firewall-all': ['firewall-acl', 'firewall-traffic', 'firewall-ids'],
+    'security-all': ['security-threat', 'security-wids'],
+};
+/**
+ * Parse OMADA_TOOL_CATEGORIES string into a map of category → allowed permissions.
+ *
+ * Syntax: comma-separated tokens, each token is `<name>[:<suffix>]`
+ *   - suffix `:r`  → read only
+ *   - suffix `:w`  → write only
+ *   - suffix `:rw` → read and write
+ *   - no suffix    → read and write (`:rw`)
+ *
+ * Group aliases (e.g. `all`, `devices-all`) are expanded before the suffix is applied.
+ * Unknown category names produce a warning and are skipped.
+ * Future (unimplemented) categories produce a warning and are skipped.
+ *
+ * Returns a ParseToolCategoriesResult with categories map and buffered warnings.
+ */
+export function parseToolCategories(raw) {
+    const categories = new Map();
+    const warnings = [];
+    const tokens = raw
+        .split(',')
+        .map((t) => t.trim())
+        .filter(Boolean);
+    for (const token of tokens) {
+        // Split on the LAST colon to separate name from suffix
+        const lastColon = token.lastIndexOf(':');
+        let name;
+        let suffix;
+        if (lastColon !== -1) {
+            const candidate = token.slice(lastColon + 1);
+            if (candidate === 'r' || candidate === 'w' || candidate === 'rw') {
+                name = token.slice(0, lastColon);
+                suffix = candidate;
+            }
+            else {
+                // Colon present but not a valid suffix — treat whole token as name
+                name = token;
+                suffix = undefined;
+            }
+        }
+        else {
+            name = token;
+            suffix = undefined;
+        }
+        const permissions = new Set();
+        if (!suffix || suffix === 'rw') {
+            permissions.add('read');
+            permissions.add('write');
+        }
+        else if (suffix === 'r') {
+            permissions.add('read');
+        }
+        else {
+            permissions.add('write');
+        }
+        // Expand group aliases
+        if (name in CATEGORY_GROUP_ALIASES) {
+            for (const cat of CATEGORY_GROUP_ALIASES[name]) {
+                if (FUTURE_CATEGORIES.has(cat)) {
+                    warnings.push(`OMADA_TOOL_CATEGORIES: category "${cat}" (from alias "${name}") is reserved for a future phase and has no tools yet — skipping`);
+                }
+                else {
+                    mergePermissions(categories, cat, permissions);
+                }
+            }
+            continue;
+        }
+        // Validate atomic category name
+        if (!ALL_CATEGORIES.includes(name)) {
+            warnings.push(`OMADA_TOOL_CATEGORIES: unknown category "${name}" — skipping`);
+            continue;
+        }
+        // Skip future/unimplemented categories
+        if (FUTURE_CATEGORIES.has(name)) {
+            warnings.push(`OMADA_TOOL_CATEGORIES: category "${name}" is reserved for a future phase and has no tools yet — skipping`);
+            continue;
+        }
+        mergePermissions(categories, name, permissions);
+    }
+    return { categories, warnings };
+}
+function mergePermissions(map, cat, perms) {
+    const existing = map.get(cat);
+    if (existing) {
+        for (const p of perms)
+            existing.add(p);
+    }
+    else {
+        map.set(cat, new Set(perms));
+    }
+}
+/** Default value for OMADA_TOOL_CATEGORIES */
+export const DEFAULT_TOOL_CATEGORIES = 'dashboard:r,client-insights:r,clients:r,devices-all:r';
+export const DEFAULT_CAPABILITY_PROFILE = 'safe-read';
+export const CAPABILITY_PROFILE_DEFAULTS = {
+    'safe-read': DEFAULT_TOOL_CATEGORIES,
+    'ops-write': 'dashboard:r,client-insights:r,clients:rw,devices-all:r,maintenance:rw,logs:r,network-wan:r,security-threat:r,vpn:r',
+    admin: 'all:rw',
+    compatibility: 'all:rw',
+};
+const createBooleanStringSchema = (defaultValue) => z
+    .union([z.literal('true'), z.literal('false')])
+    .optional()
+    .transform((value) => {
+    if (value === undefined)
+        return defaultValue;
+    return value === 'true';
+});
+const numericStringSchema = z
+    .string()
+    .optional()
+    .transform((value) => (value ? Number.parseInt(value, 10) : undefined))
+    .pipe(z.number().positive().optional());
+const listStringSchema = z
+    .string()
+    .optional()
+    .transform((value) => value
+    ? value
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean)
+    : undefined);
+const envSchema = z
+    .object({
+    capabilityProfile: z.enum(['safe-read', 'ops-write', 'admin', 'compatibility']).optional().default(DEFAULT_CAPABILITY_PROFILE),
+    // Tool category filtering
+    toolCategories: z.string().optional(),
+    // Omada Client Configuration
+    baseUrl: z.string().url({ message: 'OMADA_BASE_URL must be a valid URL' }),
+    clientId: z.string().min(1, 'OMADA_CLIENT_ID must not be empty').optional(),
+    clientSecret: z.string().min(1, 'OMADA_CLIENT_SECRET must not be empty').optional(),
+    omadacId: z.string().min(1, 'OMADA_OMADAC_ID must not be empty').optional(),
+    siteId: z.string().min(1).optional(),
+    strictSsl: createBooleanStringSchema(true),
+    requestTimeout: numericStringSchema,
+    // MCP Generic Server Configuration
+    logLevel: z.enum(['debug', 'info', 'warn', 'error']).optional().default('info'),
+    logFormat: z.enum(['plain', 'json', 'gcp-json']).optional().default('plain'),
+    useHttp: createBooleanStringSchema(false),
+    unsafeEnableHttp: createBooleanStringSchema(false),
+    // MCP Server HTTP Configuration
+    httpPort: numericStringSchema,
+    httpBindAddr: z.string().optional(),
+    httpPath: z.string().optional(),
+    httpEnableHealthcheck: createBooleanStringSchema(true),
+    httpHealthcheckPath: z.string().optional(),
+    httpAllowCors: createBooleanStringSchema(true),
+    httpAllowedOrigins: listStringSchema,
+    httpNgrokEnabled: createBooleanStringSchema(false),
+    httpNgrokAuthToken: z.string().optional(),
+})
+    .refine((data) => !!data.clientId, { message: 'OMADA_CLIENT_ID is required', path: ['clientId'] })
+    .refine((data) => !!data.clientSecret, {
+    message: 'OMADA_CLIENT_SECRET is required',
+    path: ['clientSecret'],
+})
+    .refine((data) => !!data.omadacId, { message: 'OMADA_OMADAC_ID is required', path: ['omadacId'] })
+    .refine((data) => !data.useHttp || data.unsafeEnableHttp, {
+    message: 'MCP_SERVER_USE_HTTP requires MCP_UNSAFE_ENABLE_HTTP=true. HTTP transport is intentionally unsupported for the safe baseline.',
+    path: ['unsafeEnableHttp'],
+})
+    .refine((data) => !data.useHttp || !data.httpBindAddr || isLoopbackBindAddress(data.httpBindAddr), {
+    message: 'HTTP transport is only allowed on loopback addresses (127.0.0.1 or ::1) in the safe baseline.',
+    path: ['httpBindAddr'],
+})
+    .refine((data) => {
+    // Validate httpBindAddr if provided
+    if (data.httpBindAddr && !isValidBindAddress(data.httpBindAddr)) {
+        return false;
+    }
+    return true;
+}, {
+    message: 'MCP_HTTP_BIND_ADDR must be a valid IPv4 or IPv6 address',
+    path: ['httpBindAddr'],
+})
+    .refine((data) => {
+    // Validate httpAllowedOrigins if provided
+    if (data.httpAllowedOrigins) {
+        for (const origin of data.httpAllowedOrigins) {
+            if (!isValidOrigin(origin)) {
+                return false;
+            }
+        }
+    }
+    return true;
+}, (data) => {
+    const invalidOrigin = data.httpAllowedOrigins?.find((origin) => !isValidOrigin(origin));
+    return {
+        message: `MCP_HTTP_ALLOWED_ORIGINS contains invalid origin: ${invalidOrigin}`,
+        path: ['httpAllowedOrigins'],
+    };
+});
+export function loadConfigFromEnv(env = process.env) {
+    const parsed = envSchema.safeParse({
+        capabilityProfile: env.OMADA_CAPABILITY_PROFILE,
+        // Tool category filtering
+        toolCategories: env.OMADA_TOOL_CATEGORIES,
+        // Omada Client Configuration
+        baseUrl: env.OMADA_BASE_URL,
+        clientId: env.OMADA_CLIENT_ID,
+        clientSecret: env.OMADA_CLIENT_SECRET,
+        omadacId: env.OMADA_OMADAC_ID,
+        siteId: env.OMADA_SITE_ID,
+        strictSsl: env.OMADA_STRICT_SSL,
+        requestTimeout: env.OMADA_TIMEOUT,
+        // MCP Generic Server Configuration
+        logLevel: env.MCP_SERVER_LOG_LEVEL,
+        logFormat: env.MCP_SERVER_LOG_FORMAT,
+        useHttp: env.MCP_SERVER_USE_HTTP,
+        unsafeEnableHttp: env.MCP_UNSAFE_ENABLE_HTTP,
+        // MCP Server HTTP Configuration
+        httpPort: env.MCP_HTTP_PORT,
+        httpBindAddr: env.MCP_HTTP_BIND_ADDR,
+        httpPath: env.MCP_HTTP_PATH,
+        httpEnableHealthcheck: env.MCP_HTTP_ENABLE_HEALTHCHECK,
+        httpHealthcheckPath: env.MCP_HTTP_HEALTHCHECK_PATH,
+        httpAllowCors: env.MCP_HTTP_ALLOW_CORS,
+        httpAllowedOrigins: env.MCP_HTTP_ALLOWED_ORIGINS,
+        httpNgrokEnabled: env.MCP_HTTP_NGROK_ENABLED,
+        httpNgrokAuthToken: env.MCP_HTTP_NGROK_AUTH_TOKEN,
+    });
+    if (!parsed.success) {
+        const messages = parsed.error.issues.map((issue) => issue.message);
+        throw new Error(`Invalid environment configuration:\n${messages.join('\n')}`);
+    }
+    // Determine default httpPath
+    const httpPath = parsed.data.httpPath ?? '/mcp';
+    // Set default bind address and allowed origins for security
+    const httpBindAddr = parsed.data.httpBindAddr ?? '127.0.0.1';
+    let httpAllowedOrigins = parsed.data.httpAllowedOrigins ?? ['127.0.0.1', 'localhost'];
+    const warnings = [];
+    // If wildcard is present, use empty array to disable SDK origin validation
+    // (we'll handle it in our error handler with better logging)
+    if (httpAllowedOrigins.includes('*')) {
+        warnings.push('Wildcard (*) origin allowed - origin validation is disabled. This should only be used in development.');
+        httpAllowedOrigins = [];
+    }
+    const rawToolCategories = parsed.data.toolCategories ?? CAPABILITY_PROFILE_DEFAULTS[parsed.data.capabilityProfile];
+    const { categories: toolCategories, warnings: categoryWarnings } = parseToolCategories(rawToolCategories);
+    warnings.push(...categoryWarnings);
+    if (!parsed.data.toolCategories) {
+        warnings.push(`OMADA_CAPABILITY_PROFILE=${parsed.data.capabilityProfile} selected default tool categories: ${rawToolCategories}`);
+    }
+    if (parsed.data.capabilityProfile === 'compatibility') {
+        warnings.push('Compatibility profile is reserved for future controller-specific fallback modules and should stay disabled in production.');
+    }
+    if (parsed.data.useHttp) {
+        warnings.push('HTTP transport is enabled with explicit unsafe acknowledgement. The supported production baseline remains stdio only.');
+    }
+    return {
+        capabilityProfile: parsed.data.capabilityProfile,
+        // Tool category filtering
+        toolCategories,
+        startupWarnings: warnings,
+        // Omada Client Configuration
+        baseUrl: parsed.data.baseUrl.replace(/\/$/, ''),
+        clientId: parsed.data.clientId,
+        clientSecret: parsed.data.clientSecret,
+        omadacId: parsed.data.omadacId,
+        siteId: parsed.data.siteId,
+        strictSsl: parsed.data.strictSsl,
+        requestTimeout: parsed.data.requestTimeout,
+        // MCP Generic Server Configuration
+        logLevel: parsed.data.logLevel,
+        logFormat: parsed.data.logFormat,
+        useHttp: parsed.data.useHttp,
+        unsafeEnableHttp: parsed.data.unsafeEnableHttp,
+        // MCP Server HTTP Configuration
+        httpPort: parsed.data.httpPort,
+        httpTransport: 'stream',
+        httpBindAddr,
+        httpPath,
+        httpEnableHealthcheck: parsed.data.httpEnableHealthcheck,
+        httpHealthcheckPath: parsed.data.httpHealthcheckPath,
+        httpAllowCors: parsed.data.httpAllowCors,
+        httpAllowedOrigins,
+        httpNgrokEnabled: parsed.data.httpNgrokEnabled,
+        httpNgrokAuthToken: parsed.data.httpNgrokAuthToken,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AASzG,sCAAsC;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,uBAAuB;IACvB,WAAW;IACX,iBAAiB;IACjB,UAAU;IACV,UAAU;IACV,SAAS;IACT,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,kBAAkB;IAClB,sBAAsB;IACtB,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,MAAM;IACN,KAAK;IACL,uBAAuB;IACvB,UAAU;IACV,WAAW;IACX,eAAe;IACf,OAAO;IACP,MAAM;IACN,mBAAmB;IACnB,YAAY;IACZ,OAAO;IACP,aAAa;IACb,eAAe;IACf,aAAa;IACb,eAAe;IACf,UAAU;IACV,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,QAAQ;IACR,MAAM;IACN,KAAK;IACL,KAAK;CACC,CAAC;AAIX,+GAA+G;AAC/G,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAe;IACnD,UAAU;IACV,iBAAiB;IACjB,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,MAAM;IACN,KAAK;IACL,KAAK;CACR,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IAClE,GAAG,EAAE,CAAC,GAAG,cAAc,CAAC;IACxB,aAAa,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;IACrF,cAAc,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,eAAe,CAAC;IACpE,aAAa,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,CAAC;IACnG,cAAc,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,cAAc,CAAC;IACpE,cAAc,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;CACvD,CAAC;AAYF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqC,CAAC;IAChE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,GAAG;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,uDAAuD;QACvD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAY,CAAC;QACjB,IAAI,MAA0B,CAAC;QAE/B,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC/D,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACjC,MAAM,GAAG,SAAS,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACJ,mEAAmE;gBACnE,IAAI,GAAG,KAAK,CAAC;gBACb,MAAM,GAAG,SAAS,CAAC;YACvB,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,IAAI,GAAG,KAAK,CAAC;YACb,MAAM,GAAG,SAAS,CAAC;QACvB,CAAC;QAED,MAAM,WAAW,GAAwB,IAAI,GAAG,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC7B,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,IAAI,sBAAsB,EAAE,CAAC;YACjC,KAAK,MAAM,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CACT,oCAAoC,GAAG,kBAAkB,IAAI,mEAAmE,CACnI,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACJ,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;YACD,SAAS;QACb,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,4CAA4C,IAAI,cAAc,CAAC,CAAC;YAC9E,SAAS;QACb,CAAC;QAED,uCAAuC;QACvC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAoB,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,oCAAoC,IAAI,kEAAkE,CAAC,CAAC;YAC1H,SAAS;QACb,CAAC;QAED,gBAAgB,CAAC,UAAU,EAAE,IAAoB,EAAE,WAAW,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA2C,EAAE,GAAiB,EAAE,KAA0B;IAChH,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG,uDAAuD,CAAC;AAE/F,MAAM,CAAC,MAAM,0BAA0B,GAAsB,WAAW,CAAC;AAEzE,MAAM,CAAC,MAAM,2BAA2B,GAAsC;IAC1E,WAAW,EAAE,uBAAuB;IACpC,WAAW,EAAE,oHAAoH;IACjI,KAAK,EAAE,QAAQ;IACf,aAAa,EAAE,QAAQ;CAC1B,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAC9B,YAAqB,EACwG,EAAE,CAC/H,CAAC;KACI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;KAC9C,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAmC,EAAE,EAAE;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAC7C,OAAO,KAAK,KAAK,MAAM,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEX,MAAM,mBAAmB,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAyB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KAC1F,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAE5C,MAAM,gBAAgB,GAAG,CAAC;KACrB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAyB,EAAE,EAAE,CACrC,KAAK;IACD,CAAC,CAAC,KAAK;SACA,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;IACtB,CAAC,CAAC,SAAS,CAClB,CAAC;AAEN,MAAM,SAAS,GAAG,CAAC;KACd,MAAM,CAAC;IACJ,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC9H,0BAA0B;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAErC,6BAA6B;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC,QAAQ,EAAE;IAC3E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAC,QAAQ,EAAE;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC,QAAQ,EAAE;IAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,yBAAyB,CAAC,IAAI,CAAC;IAC1C,cAAc,EAAE,mBAAmB;IAEnC,mCAAmC;IACnC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5E,OAAO,EAAE,yBAAyB,CAAC,KAAK,CAAC;IACzC,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC;IAElD,gCAAgC;IAChC,QAAQ,EAAE,mBAAmB;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,qBAAqB,EAAE,yBAAyB,CAAC,IAAI,CAAC;IACtD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,yBAAyB,CAAC,IAAI,CAAC;IAC9C,kBAAkB,EAAE,gBAAgB;IACpC,gBAAgB,EAAE,yBAAyB,CAAC,KAAK,CAAC;IAClD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;KACjG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;IACnC,OAAO,EAAE,iCAAiC;IAC1C,IAAI,EAAE,CAAC,cAAc,CAAC;CACzB,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;KACjG,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,gBAAgB,EAAE;IACtD,OAAO,EAAE,8HAA8H;IACvI,IAAI,EAAE,CAAC,kBAAkB,CAAC;CAC7B,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE;IAC/F,OAAO,EAAE,+FAA+F;IACxG,IAAI,EAAE,CAAC,cAAc,CAAC;CACzB,CAAC;KACD,MAAM,CACH,CAAC,IAAI,EAAE,EAAE;IACL,oCAAoC;IACpC,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,EACD;IACI,OAAO,EAAE,yDAAyD;IAClE,IAAI,EAAE,CAAC,cAAc,CAAC;CACzB,CACJ;KACA,MAAM,CACH,CAAC,IAAI,EAAE,EAAE;IACL,0CAA0C;IAC1C,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC;YACjB,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC,EACD,CAAC,IAAI,EAAE,EAAE;IACL,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,OAAO;QACH,OAAO,EAAE,qDAAqD,aAAa,EAAE;QAC7E,IAAI,EAAE,CAAC,oBAAoB,CAAC;KAC/B,CAAC;AACN,CAAC,CACJ,CAAC;AAoDN,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;QAC/B,iBAAiB,EAAE,GAAG,CAAC,wBAAwB;QAC/C,0BAA0B;QAC1B,cAAc,EAAE,GAAG,CAAC,qBAAqB;QAEzC,6BAA6B;QAC7B,OAAO,EAAE,GAAG,CAAC,cAAc;QAC3B,QAAQ,EAAE,GAAG,CAAC,eAAe;QAC7B,YAAY,EAAE,GAAG,CAAC,mBAAmB;QACrC,QAAQ,EAAE,GAAG,CAAC,eAAe;QAC7B,MAAM,EAAE,GAAG,CAAC,aAAa;QACzB,SAAS,EAAE,GAAG,CAAC,gBAAgB;QAC/B,cAAc,EAAE,GAAG,CAAC,aAAa;QAEjC,mCAAmC;QACnC,QAAQ,EAAE,GAAG,CAAC,oBAAoB;QAClC,SAAS,EAAE,GAAG,CAAC,qBAAqB;QACpC,OAAO,EAAE,GAAG,CAAC,mBAAmB;QAChC,gBAAgB,EAAE,GAAG,CAAC,sBAAsB;QAE5C,gCAAgC;QAChC,QAAQ,EAAE,GAAG,CAAC,aAAa;QAC3B,YAAY,EAAE,GAAG,CAAC,kBAAkB;QACpC,QAAQ,EAAE,GAAG,CAAC,aAAa;QAC3B,qBAAqB,EAAE,GAAG,CAAC,2BAA2B;QACtD,mBAAmB,EAAE,GAAG,CAAC,yBAAyB;QAClD,aAAa,EAAE,GAAG,CAAC,mBAAmB;QACtC,kBAAkB,EAAE,GAAG,CAAC,wBAAwB;QAChD,gBAAgB,EAAE,GAAG,CAAC,sBAAsB;QAC5C,kBAAkB,EAAE,GAAG,CAAC,yBAAyB;KACpD,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IAEhD,4DAA4D;IAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC;IAC7D,IAAI,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAEtF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,2EAA2E;IAC3E,6DAA6D;IAC7D,IAAI,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;QACvH,kBAAkB,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnH,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAC1G,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,IAAI,CAAC,iBAAiB,sCAAsC,iBAAiB,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,KAAK,eAAe,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,2HAA2H,CAAC,CAAC;IAC/I,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,uHAAuH,CAAC,CAAC;IAC3I,CAAC;IAED,OAAO;QACH,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB;QAChD,0BAA0B;QAC1B,cAAc;QACd,eAAe,EAAE,QAAQ;QAEzB,6BAA6B;QAC7B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACtC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;QAE1C,mCAAmC;QACnC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;QAE9C,gCAAgC;QAChC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QAC9B,aAAa,EAAE,QAAiB;QAChC,YAAY;QACZ,QAAQ;QACR,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB;QACxD,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB;QACpD,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;QACxC,kBAAkB;QAClB,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB;QAC9C,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB;KACrD,CAAC;AACN,CAAC"}

package/dist/env.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/env.js

@@ -0,0 +1,9 @@
+import { existsSync } from 'node:fs';
+import { config } from 'dotenv';
+// Load .env first (base config)
+config({ path: '.env' });
+// Load .env.local if it exists (overrides)
+if (existsSync('.env.local')) {
+    config({ path: '.env.local', override: true });
+}
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,gCAAgC;AAChC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAEzB,2CAA2C;AAC3C,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3B,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1 @@
+import './env.js';

package/dist/index.js

@@ -0,0 +1,61 @@
+import './env.js';
+import pkg from '../package.json' with { type: 'json' };
+import { loadConfigFromEnv } from './config.js';
+import { OmadaClient } from './omadaClient/index.js';
+import { startHttpServer } from './server/http.js';
+import { startStdioServer } from './server/stdio.js';
+import { initLogger, logger } from './utils/logger.js';
+async function main() {
+    const config = loadConfigFromEnv();
+    // When running in stdio mode, logs must go to stderr to avoid interfering with MCP protocol on stdout
+    const useStderr = !config.useHttp;
+    // Initialize logger with configured level, format, and output stream
+    initLogger(config.logLevel, config.logFormat, useStderr);
+    // Startup banner
+    logger.info('Starting Safe Omada MCP server', {
+        name: pkg.name,
+        version: pkg.version,
+        description: pkg.description,
+        mode: config.useHttp ? 'http' : 'stdio',
+        logLevel: config.logLevel,
+        nodeVersion: process.version,
+        platform: process.platform,
+        arch: process.arch,
+    });
+    for (const warning of config.startupWarnings) {
+        logger.warn(warning);
+    }
+    logger.info('Loaded Omada configuration', {
+        baseUrl: config.baseUrl,
+        omadacId: config.omadacId,
+        siteId: config.siteId ?? null,
+        strictSsl: config.strictSsl,
+        requestTimeout: config.requestTimeout ?? null,
+        capabilityProfile: config.capabilityProfile,
+    });
+    if (config.useHttp) {
+        await startHttpServer(config);
+    }
+    else {
+        // In stdio mode, the three credential fields are validated as required by loadConfigFromEnv
+        const omadaConfig = {
+            baseUrl: config.baseUrl,
+            clientId: config.clientId,
+            clientSecret: config.clientSecret,
+            omadacId: config.omadacId,
+            siteId: config.siteId,
+            strictSsl: config.strictSsl,
+            requestTimeout: config.requestTimeout,
+        };
+        const client = new OmadaClient(omadaConfig);
+        await startStdioServer(client, config.toolCategories);
+    }
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    // Use process.stderr.write directly — logger may not have been initialized yet
+    // (e.g. if loadConfigFromEnv() threw before initLogger() was called)
+    process.stderr.write(`Failed to start Omada MCP server: ${message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,CAAC;AAClB,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEvD,KAAK,UAAU,IAAI;IACf,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IAEnC,sGAAsG;IACtG,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAElC,qEAAqE;IACrE,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEzD,iBAAiB;IACjB,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;QAC1C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;KACrB,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;QACtC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;QAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC9C,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACJ,4FAA4F;QAC5F,MAAM,WAAW,GAA0B;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAkB;YACnC,YAAY,EAAE,MAAM,CAAC,YAAsB;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAkB;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;SACxC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;AACL,CAAC;AACD,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACnB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,+EAA+E;IAC/E,qEAAqE;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,OAAO,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC"}

package/dist/omadaClient/account.d.ts

@@ -0,0 +1,61 @@
+import type { CustomHeaders } from '../types/index.js';
+import type { RequestHandler } from './request.js';
+/**
+ * Account-related operations for the Omada API.
+ * Covers users, roles, cloud access, and MFA settings.
+ */
+export declare class AccountOperations {
+    private readonly request;
+    private readonly buildPath;
+    constructor(request: RequestHandler, buildPath: (path: string) => string);
+    /**
+     * Get all cloud users (excluding root).
+     * OperationId: getAllCloudUsersExcludeRoot
+     */
+    getAllCloudUsers(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get all local users (excluding root).
+     * OperationId: getAllLocalUsersExcludeRoot
+     */
+    getAllLocalUsers(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get all roles.
+     * OperationId: getAllRoles
+     */
+    getAllRoles(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get role detail by role ID.
+     * OperationId: getRole
+     */
+    getRoleDetail(roleId: string, customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get available roles for assignment.
+     * OperationId: getAvailableRole
+     */
+    getAvailableRoles(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get all users (app grid view).
+     * OperationId: getAppGridUsers
+     */
+    getAllUsersApp(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get cloud access status.
+     * OperationId: getCloudAccessStatus
+     */
+    getCloudAccessStatus(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get cloud user info.
+     * OperationId: getCloudUserInfo
+     */
+    getCloudUserInfo(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get global MFA status.
+     * OperationId: getGlobalMFAStatus
+     */
+    getMfaStatus(customHeaders?: CustomHeaders): Promise<unknown>;
+    /**
+     * Get remote binding status.
+     * OperationId: getRemoteBindingStatus
+     */
+    getRemoteBindingStatus(customHeaders?: CustomHeaders): Promise<unknown>;
+}