@tmhs/homelab-mcp 0.2.1 → 0.4.0

package/README.md

@@ -1,6 +1,6 @@
 # Home Lab MCP Server
 
-MCP (Model Context Protocol) server for home lab operations. Connects to a Raspberry Pi via SSH and provides 20 tools for system management, Docker Compose stacks, service monitoring, networking, and backups.
+MCP (Model Context Protocol) server for home lab operations. Connects to a Raspberry Pi via SSH and provides 29 tools for system management, Docker Compose stacks, service monitoring, networking, backups, and disaster recovery.
 
 ## Tools
 
@@ -20,11 +20,20 @@ MCP (Model Context Protocol) server for home lab operations. Connects to a Raspb
 | Network | `homelab_networkInfo` | IP addresses, DNS, Tailscale status |
 | Backup | `homelab_backupStatus` | Check latest restic snapshots |
 | Backup | `homelab_backupRun` | Trigger restic backup |
+| Backup | `homelab_backupList` | List all restic snapshots with filtering |
+| Backup | `homelab_backupRestore` | Restore files from a snapshot |
+| Backup | `homelab_backupDiff` | Diff two restic snapshots |
+| Backup | `homelab_volumeBackup` | Back up a Docker volume to restic |
 | Monitoring | `homelab_prometheusQuery` | Run PromQL queries against Prometheus |
 | Monitoring | `homelab_grafanaSnapshot` | Export Grafana dashboard config by UID |
 | Monitoring | `homelab_uptimeKumaStatus` | Get Uptime Kuma monitor statuses |
 | Monitoring | `homelab_alertList` | List Alertmanager alerts by state |
 | Monitoring | `homelab_speedtestResults` | Get recent Speedtest Tracker results |
+| DNS/Proxy | `homelab_adguardStats` | AdGuard Home DNS statistics |
+| DNS/Proxy | `homelab_adguardFilters` | List AdGuard filter lists and status |
+| DNS/Proxy | `homelab_adguardQueryLog` | Search AdGuard DNS query log |
+| DNS/Proxy | `homelab_npmProxyHosts` | List NPM proxy host configs |
+| DNS/Proxy | `homelab_npmCerts` | List SSL certificates and expiry |
 | SSH | `homelab_sshTest` | Test SSH connectivity |
 
 ## Setup
@@ -54,6 +63,12 @@ Set environment variables:
 | `HOMELAB_ALERTMANAGER_PORT` | `9093` | Alertmanager port override |
 | `HOMELAB_UPTIME_KUMA_PORT` | `3001` | Uptime Kuma port override |
 | `HOMELAB_SPEEDTEST_PORT` | `8765` | Speedtest Tracker port override |
+| `HOMELAB_ADGUARD_USER` | `admin` | AdGuard Home username |
+| `HOMELAB_ADGUARD_PASSWORD` | `admin` | AdGuard Home password |
+| `HOMELAB_ADGUARD_PORT` | `3000` | AdGuard Home port override |
+| `HOMELAB_NPM_EMAIL` | `admin@example.com` | NPM admin email |
+| `HOMELAB_NPM_PASSWORD` | `changeme` | NPM admin password |
+| `HOMELAB_NPM_PORT` | `81` | NPM admin API port override |
 
 ## Usage with Cursor
 

package/dist/index.js

@@ -21,9 +21,18 @@ import { register as registerGrafanaSnapshot } from "./tools/grafanaSnapshot.js"
 import { register as registerUptimeKumaStatus } from "./tools/uptimeKumaStatus.js";
 import { register as registerAlertList } from "./tools/alertList.js";
 import { register as registerSpeedtestResults } from "./tools/speedtestResults.js";
+import { register as registerAdguardStats } from "./tools/adguardStats.js";
+import { register as registerAdguardFilters } from "./tools/adguardFilters.js";
+import { register as registerAdguardQueryLog } from "./tools/adguardQueryLog.js";
+import { register as registerNpmProxyHosts } from "./tools/npmProxyHosts.js";
+import { register as registerNpmCerts } from "./tools/npmCerts.js";
+import { register as registerBackupList } from "./tools/backupList.js";
+import { register as registerBackupRestore } from "./tools/backupRestore.js";
+import { register as registerBackupDiff } from "./tools/backupDiff.js";
+import { register as registerVolumeBackup } from "./tools/volumeBackup.js";
 const server = new McpServer({
     name: "homelab-mcp",
-    version: "0.2.1",
+    version: "0.4.0",
 });
 registerPiStatus(server);
 registerPiReboot(server);
@@ -45,6 +54,15 @@ registerGrafanaSnapshot(server);
 registerUptimeKumaStatus(server);
 registerAlertList(server);
 registerSpeedtestResults(server);
+registerAdguardStats(server);
+registerAdguardFilters(server);
+registerAdguardQueryLog(server);
+registerNpmProxyHosts(server);
+registerNpmCerts(server);
+registerBackupList(server);
+registerBackupRestore(server);
+registerBackupDiff(server);
+registerVolumeBackup(server);
 async function main() {
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEnF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,eAAe,CAAC,MAAM,CAAC,CAAC;AACxB,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAEjC,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,eAAe,CAAC,MAAM,CAAC,CAAC;AACxB,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAC3B,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAC3B,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAE7B,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/adguardFilters.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=adguardFilters.d.ts.map

package/dist/tools/adguardFilters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adguardFilters.d.ts","sourceRoot":"","sources":["../../src/tools/adguardFilters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkBzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAqChD"}

package/dist/tools/adguardFilters.js

@@ -0,0 +1,37 @@
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+import { CommandFailedError } from "../utils/errors.js";
+const DEFAULT_PORT = 3000;
+const SERVICE_NAME = "AdGuard Home";
+function getPort() {
+    const override = process.env.HOMELAB_ADGUARD_PORT;
+    return override ? parseInt(override, 10) : DEFAULT_PORT;
+}
+function buildAuth() {
+    const user = process.env.HOMELAB_ADGUARD_USER || "admin";
+    const password = process.env.HOMELAB_ADGUARD_PASSWORD || "admin";
+    return `-u '${user}:${password}'`;
+}
+export function register(server) {
+    server.tool("homelab_adguardFilters", "List AdGuard Home filter lists with name, URL, enabled status, and rule count", {}, async () => {
+        const port = getPort();
+        try {
+            const auth = buildAuth();
+            const output = await execSSH(`curl -sf ${auth} 'http://localhost:${port}/control/filtering/status'`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            if (error instanceof CommandFailedError) {
+                if (error.exitCode === 7) {
+                    return errorResponse(new Error(`Could not connect to ${SERVICE_NAME} on port ${port}. Is it running? ` +
+                        `Set HOMELAB_ADGUARD_PORT if using a non-default port.`));
+                }
+                if (error.exitCode === 22) {
+                    return errorResponse(new Error(`${SERVICE_NAME} returned an HTTP error. Check authentication -- ` +
+                        `set HOMELAB_ADGUARD_USER and HOMELAB_ADGUARD_PASSWORD.`));
+                }
+            }
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=adguardFilters.js.map

package/dist/tools/adguardFilters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adguardFilters.js","sourceRoot":"","sources":["../../src/tools/adguardFilters.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,SAAS,OAAO;IACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC;IACjE,OAAO,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,+EAA+E,EAC/E,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,YAAY,IAAI,sBAAsB,IAAI,4BAA4B,CACvE,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,wBAAwB,YAAY,YAAY,IAAI,mBAAmB;wBACrE,uDAAuD,CAC1D,CACF,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC1B,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,GAAG,YAAY,mDAAmD;wBAChE,wDAAwD,CAC3D,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/adguardQueryLog.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=adguardQueryLog.d.ts.map

package/dist/tools/adguardQueryLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adguardQueryLog.d.ts","sourceRoot":"","sources":["../../src/tools/adguardQueryLog.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgCzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA0ChD"}

package/dist/tools/adguardQueryLog.js

@@ -0,0 +1,56 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+import { CommandFailedError } from "../utils/errors.js";
+const DEFAULT_PORT = 3000;
+const SERVICE_NAME = "AdGuard Home";
+const inputSchema = {
+    search: z
+        .string()
+        .optional()
+        .describe("Filter queries by domain or client IP"),
+    count: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .default(25)
+        .describe("Number of recent queries to return"),
+};
+function getPort() {
+    const override = process.env.HOMELAB_ADGUARD_PORT;
+    return override ? parseInt(override, 10) : DEFAULT_PORT;
+}
+function buildAuth() {
+    const user = process.env.HOMELAB_ADGUARD_USER || "admin";
+    const password = process.env.HOMELAB_ADGUARD_PASSWORD || "admin";
+    return `-u '${user}:${password}'`;
+}
+export function register(server) {
+    server.tool("homelab_adguardQueryLog", "Search the AdGuard Home DNS query log", inputSchema, async (args) => {
+        const port = getPort();
+        try {
+            const auth = buildAuth();
+            const params = [`limit=${args.count}`];
+            if (args.search) {
+                params.push(`search=${encodeURIComponent(args.search)}`);
+            }
+            const query = params.join("&");
+            const output = await execSSH(`curl -sf ${auth} 'http://localhost:${port}/control/querylog?${query}'`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            if (error instanceof CommandFailedError) {
+                if (error.exitCode === 7) {
+                    return errorResponse(new Error(`Could not connect to ${SERVICE_NAME} on port ${port}. Is it running? ` +
+                        `Set HOMELAB_ADGUARD_PORT if using a non-default port.`));
+                }
+                if (error.exitCode === 22) {
+                    return errorResponse(new Error(`${SERVICE_NAME} returned an HTTP error. Check authentication -- ` +
+                        `set HOMELAB_ADGUARD_USER and HOMELAB_ADGUARD_PASSWORD.`));
+                }
+            }
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=adguardQueryLog.js.map

package/dist/tools/adguardQueryLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adguardQueryLog.js","sourceRoot":"","sources":["../../src/tools/adguardQueryLog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,uCAAuC,CAAC;IACpD,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,oCAAoC,CAAC;CAClD,CAAC;AAEF,SAAS,OAAO;IACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC;IACjE,OAAO,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,yBAAyB,EACzB,uCAAuC,EACvC,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAa,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,YAAY,IAAI,sBAAsB,IAAI,qBAAqB,KAAK,GAAG,CACxE,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,wBAAwB,YAAY,YAAY,IAAI,mBAAmB;wBACrE,uDAAuD,CAC1D,CACF,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC1B,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,GAAG,YAAY,mDAAmD;wBAChE,wDAAwD,CAC3D,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/adguardStats.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=adguardStats.d.ts.map

package/dist/tools/adguardStats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adguardStats.d.ts","sourceRoot":"","sources":["../../src/tools/adguardStats.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkBzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAqChD"}

package/dist/tools/adguardStats.js

@@ -0,0 +1,37 @@
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+import { CommandFailedError } from "../utils/errors.js";
+const DEFAULT_PORT = 3000;
+const SERVICE_NAME = "AdGuard Home";
+function getPort() {
+    const override = process.env.HOMELAB_ADGUARD_PORT;
+    return override ? parseInt(override, 10) : DEFAULT_PORT;
+}
+function buildAuth() {
+    const user = process.env.HOMELAB_ADGUARD_USER || "admin";
+    const password = process.env.HOMELAB_ADGUARD_PASSWORD || "admin";
+    return `-u '${user}:${password}'`;
+}
+export function register(server) {
+    server.tool("homelab_adguardStats", "Get AdGuard Home DNS statistics including query counts, blocked domains, and top clients", {}, async () => {
+        const port = getPort();
+        try {
+            const auth = buildAuth();
+            const output = await execSSH(`curl -sf ${auth} 'http://localhost:${port}/control/stats'`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            if (error instanceof CommandFailedError) {
+                if (error.exitCode === 7) {
+                    return errorResponse(new Error(`Could not connect to ${SERVICE_NAME} on port ${port}. Is it running? ` +
+                        `Set HOMELAB_ADGUARD_PORT if using a non-default port.`));
+                }
+                if (error.exitCode === 22) {
+                    return errorResponse(new Error(`${SERVICE_NAME} returned an HTTP error. Check authentication -- ` +
+                        `set HOMELAB_ADGUARD_USER and HOMELAB_ADGUARD_PASSWORD.`));
+                }
+            }
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=adguardStats.js.map

package/dist/tools/adguardStats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adguardStats.js","sourceRoot":"","sources":["../../src/tools/adguardStats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,SAAS,OAAO;IACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC;IACjE,OAAO,OAAO,IAAI,IAAI,QAAQ,GAAG,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,0FAA0F,EAC1F,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,YAAY,IAAI,sBAAsB,IAAI,iBAAiB,CAC5D,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,wBAAwB,YAAY,YAAY,IAAI,mBAAmB;wBACrE,uDAAuD,CAC1D,CACF,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC1B,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,GAAG,YAAY,mDAAmD;wBAChE,wDAAwD,CAC3D,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/backupDiff.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=backupDiff.d.ts.map

package/dist/tools/backupDiff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupDiff.d.ts","sourceRoot":"","sources":["../../src/tools/backupDiff.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAQzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkBhD"}

package/dist/tools/backupDiff.js

@@ -0,0 +1,19 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    snapshotA: z.string().min(1).describe("First snapshot ID (older)"),
+    snapshotB: z.string().min(1).describe("Second snapshot ID (newer)"),
+};
+export function register(server) {
+    server.tool("homelab_backupDiff", "Show the difference between two restic backup snapshots", inputSchema, async (args) => {
+        try {
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const output = await execSSH(`sudo restic -r ${repo} diff '${args.snapshotA}' '${args.snapshotB}' 2>&1`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=backupDiff.js.map

package/dist/tools/backupDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupDiff.js","sourceRoot":"","sources":["../../src/tools/backupDiff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CACpE,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,yDAAyD,EACzD,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,UAAU,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,QAAQ,CAC3E,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/backupList.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=backupList.d.ts.map

package/dist/tools/backupList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupList.d.ts","sourceRoot":"","sources":["../../src/tools/backupList.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAuBhD"}

package/dist/tools/backupList.js

@@ -0,0 +1,28 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    path: z.string().optional().describe("Filter snapshots containing this path"),
+    tag: z.string().optional().describe("Filter snapshots by tag"),
+    host: z.string().optional().describe("Filter snapshots by hostname"),
+};
+export function register(server) {
+    server.tool("homelab_backupList", "List all restic backup snapshots with optional filtering by path, tag, or host", inputSchema, async (args) => {
+        try {
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const flags = [];
+            if (args.path)
+                flags.push(`--path '${args.path}'`);
+            if (args.tag)
+                flags.push(`--tag '${args.tag}'`);
+            if (args.host)
+                flags.push(`--host '${args.host}'`);
+            const extra = flags.length > 0 ? " " + flags.join(" ") : "";
+            const output = await execSSH(`sudo restic -r ${repo} snapshots${extra} --json 2>/dev/null || echo "No backup repo found at ${repo} or restic not configured"`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=backupList.js.map

package/dist/tools/backupList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupList.js","sourceRoot":"","sources":["../../src/tools/backupList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACrE,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,gFAAgF,EAChF,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,aAAa,KAAK,wDAAwD,IAAI,4BAA4B,CACjI,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/backupRestore.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=backupRestore.d.ts.map

package/dist/tools/backupRestore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupRestore.d.ts","sourceRoot":"","sources":["../../src/tools/backupRestore.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAqBzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA4BhD"}

package/dist/tools/backupRestore.js

@@ -0,0 +1,41 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    snapshot: z
+        .string()
+        .min(1)
+        .describe('Snapshot ID to restore (short hash or "latest")'),
+    target: z
+        .string()
+        .min(1)
+        .describe("Destination path on the Pi to restore files into"),
+    include: z
+        .string()
+        .optional()
+        .describe("Only restore files matching this pattern (e.g. /opt/homelab/docker/)"),
+    confirm: z
+        .boolean()
+        .describe("Must be true to proceed with restore. Safety check."),
+};
+export function register(server) {
+    server.tool("homelab_backupRestore", "Restore files from a restic backup snapshot to a target path on the Pi", inputSchema, async (args) => {
+        try {
+            if (!args.confirm) {
+                return {
+                    content: [{
+                            type: "text",
+                            text: "Restore cancelled. Set confirm=true to proceed.",
+                        }],
+                };
+            }
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const includeFlag = args.include ? ` --include '${args.include}'` : "";
+            const output = await execSSH(`sudo restic -r ${repo} restore '${args.snapshot}' --target '${args.target}'${includeFlag} 2>&1`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=backupRestore.js.map

package/dist/tools/backupRestore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupRestore.js","sourceRoot":"","sources":["../../src/tools/backupRestore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,qDAAqD,CAAC;CACnE,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,wEAAwE,EACxE,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,iDAAiD;yBACxD,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,aAAa,IAAI,CAAC,QAAQ,eAAe,IAAI,CAAC,MAAM,IAAI,WAAW,OAAO,CACjG,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/npmCerts.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=npmCerts.d.ts.map

package/dist/tools/npmCerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npmCerts.d.ts","sourceRoot":"","sources":["../../src/tools/npmCerts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA8BzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA8ChD"}

package/dist/tools/npmCerts.js

@@ -0,0 +1,51 @@
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+import { CommandFailedError } from "../utils/errors.js";
+const DEFAULT_PORT = 81;
+const SERVICE_NAME = "Nginx Proxy Manager";
+function getPort() {
+    const override = process.env.HOMELAB_NPM_PORT;
+    return override ? parseInt(override, 10) : DEFAULT_PORT;
+}
+function getCredentials() {
+    return {
+        email: process.env.HOMELAB_NPM_EMAIL || "admin@example.com",
+        password: process.env.HOMELAB_NPM_PASSWORD || "changeme",
+    };
+}
+async function getNpmToken(port) {
+    const { email, password } = getCredentials();
+    const payload = JSON.stringify({ identity: email, secret: password });
+    const output = await execSSH(`curl -sf -X POST -H 'Content-Type: application/json' ` +
+        `-d '${payload}' 'http://localhost:${port}/api/tokens'`);
+    const parsed = JSON.parse(output);
+    return parsed.token;
+}
+export function register(server) {
+    server.tool("homelab_npmCerts", "List SSL certificates managed by Nginx Proxy Manager with expiry dates", {}, async () => {
+        const port = getPort();
+        try {
+            const token = await getNpmToken(port);
+            const output = await execSSH(`curl -sf -H 'Authorization: Bearer ${token}' ` +
+                `'http://localhost:${port}/api/nginx/certificates'`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            if (error instanceof CommandFailedError) {
+                if (error.exitCode === 7) {
+                    return errorResponse(new Error(`Could not connect to ${SERVICE_NAME} on port ${port}. Is it running? ` +
+                        `Set HOMELAB_NPM_PORT if using a non-default port.`));
+                }
+                if (error.exitCode === 22) {
+                    return errorResponse(new Error(`${SERVICE_NAME} returned an HTTP error. Check authentication -- ` +
+                        `set HOMELAB_NPM_EMAIL and HOMELAB_NPM_PASSWORD.`));
+                }
+            }
+            if (error instanceof SyntaxError) {
+                return errorResponse(new Error(`Failed to parse ${SERVICE_NAME} authentication response. ` +
+                    `Verify HOMELAB_NPM_EMAIL and HOMELAB_NPM_PASSWORD are correct.`));
+            }
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=npmCerts.js.map

package/dist/tools/npmCerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npmCerts.js","sourceRoot":"","sources":["../../src/tools/npmCerts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,SAAS,OAAO;IACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,mBAAmB;QAC3D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,UAAU;KACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,uDAAuD;QACrD,OAAO,OAAO,uBAAuB,IAAI,cAAc,CAC1D,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,wEAAwE,EACxE,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,sCAAsC,KAAK,IAAI;gBAC7C,qBAAqB,IAAI,0BAA0B,CACtD,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,wBAAwB,YAAY,YAAY,IAAI,mBAAmB;wBACrE,mDAAmD,CACtD,CACF,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC1B,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,GAAG,YAAY,mDAAmD;wBAChE,iDAAiD,CACpD,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,mBAAmB,YAAY,4BAA4B;oBACzD,gEAAgE,CACnE,CACF,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/npmProxyHosts.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=npmProxyHosts.d.ts.map

package/dist/tools/npmProxyHosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npmProxyHosts.d.ts","sourceRoot":"","sources":["../../src/tools/npmProxyHosts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AA8BzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA8ChD"}

package/dist/tools/npmProxyHosts.js

@@ -0,0 +1,51 @@
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+import { CommandFailedError } from "../utils/errors.js";
+const DEFAULT_PORT = 81;
+const SERVICE_NAME = "Nginx Proxy Manager";
+function getPort() {
+    const override = process.env.HOMELAB_NPM_PORT;
+    return override ? parseInt(override, 10) : DEFAULT_PORT;
+}
+function getCredentials() {
+    return {
+        email: process.env.HOMELAB_NPM_EMAIL || "admin@example.com",
+        password: process.env.HOMELAB_NPM_PASSWORD || "changeme",
+    };
+}
+async function getNpmToken(port) {
+    const { email, password } = getCredentials();
+    const payload = JSON.stringify({ identity: email, secret: password });
+    const output = await execSSH(`curl -sf -X POST -H 'Content-Type: application/json' ` +
+        `-d '${payload}' 'http://localhost:${port}/api/tokens'`);
+    const parsed = JSON.parse(output);
+    return parsed.token;
+}
+export function register(server) {
+    server.tool("homelab_npmProxyHosts", "List all Nginx Proxy Manager proxy host configurations", {}, async () => {
+        const port = getPort();
+        try {
+            const token = await getNpmToken(port);
+            const output = await execSSH(`curl -sf -H 'Authorization: Bearer ${token}' ` +
+                `'http://localhost:${port}/api/nginx/proxy-hosts'`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            if (error instanceof CommandFailedError) {
+                if (error.exitCode === 7) {
+                    return errorResponse(new Error(`Could not connect to ${SERVICE_NAME} on port ${port}. Is it running? ` +
+                        `Set HOMELAB_NPM_PORT if using a non-default port.`));
+                }
+                if (error.exitCode === 22) {
+                    return errorResponse(new Error(`${SERVICE_NAME} returned an HTTP error. Check authentication -- ` +
+                        `set HOMELAB_NPM_EMAIL and HOMELAB_NPM_PASSWORD.`));
+                }
+            }
+            if (error instanceof SyntaxError) {
+                return errorResponse(new Error(`Failed to parse ${SERVICE_NAME} authentication response. ` +
+                    `Verify HOMELAB_NPM_EMAIL and HOMELAB_NPM_PASSWORD are correct.`));
+            }
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=npmProxyHosts.js.map

package/dist/tools/npmProxyHosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npmProxyHosts.js","sourceRoot":"","sources":["../../src/tools/npmProxyHosts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,SAAS,OAAO;IACd,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,mBAAmB;QAC3D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,UAAU;KACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,uDAAuD;QACrD,OAAO,OAAO,uBAAuB,IAAI,cAAc,CAC1D,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,wDAAwD,EACxD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,sCAAsC,KAAK,IAAI;gBAC7C,qBAAqB,IAAI,yBAAyB,CACrD,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,wBAAwB,YAAY,YAAY,IAAI,mBAAmB;wBACrE,mDAAmD,CACtD,CACF,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC1B,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,GAAG,YAAY,mDAAmD;wBAChE,iDAAiD,CACpD,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,OAAO,aAAa,CAClB,IAAI,KAAK,CACP,mBAAmB,YAAY,4BAA4B;oBACzD,gEAAgE,CACnE,CACF,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/volumeBackup.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=volumeBackup.d.ts.map

package/dist/tools/volumeBackup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"volumeBackup.d.ts","sourceRoot":"","sources":["../../src/tools/volumeBackup.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA4BhD"}

package/dist/tools/volumeBackup.js

@@ -0,0 +1,30 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    volume: z.string().min(1).describe("Docker volume name to back up"),
+    confirm: z
+        .boolean()
+        .describe("Must be true to trigger backup. Safety check."),
+};
+export function register(server) {
+    server.tool("homelab_volumeBackup", "Back up a specific Docker volume to the restic repository", inputSchema, async (args) => {
+        try {
+            if (!args.confirm) {
+                return {
+                    content: [{
+                            type: "text",
+                            text: "Volume backup cancelled. Set confirm=true to proceed.",
+                        }],
+                };
+            }
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const volumePath = `/var/lib/docker/volumes/${args.volume}/_data`;
+            const output = await execSSH(`sudo restic -r ${repo} backup '${volumePath}' --tag docker-volume --tag '${args.volume}' 2>&1`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=volumeBackup.js.map

package/dist/tools/volumeBackup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volumeBackup.js","sourceRoot":"","sources":["../../src/tools/volumeBackup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACnE,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,2DAA2D,EAC3D,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uDAAuD;yBAC9D,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,UAAU,GAAG,2BAA2B,IAAI,CAAC,MAAM,QAAQ,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,YAAY,UAAU,gCAAgC,IAAI,CAAC,MAAM,QAAQ,CAChG,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tmhs/homelab-mcp",
-  "version": "0.2.1",
-  "description": "MCP server for home lab operations via SSH - 20 tools for system status, Docker Compose management, service health, monitoring, networking, backups, and administration on a Raspberry Pi.",
+  "version": "0.4.0",
+  "description": "MCP server for home lab operations via SSH - 29 tools for system status, Docker Compose management, service health, monitoring, DNS, reverse proxy, networking, backups, disaster recovery, and administration on a Raspberry Pi.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {