@tmhs/homelab-mcp 0.3.0 → 0.5.0

package/README.md

@@ -1,6 +1,6 @@
 # Home Lab MCP Server
 
-MCP (Model Context Protocol) server for home lab operations. Connects to a Raspberry Pi via SSH and provides 25 tools for system management, Docker Compose stacks, service monitoring, networking, and backups.
+MCP (Model Context Protocol) server for home lab operations. Connects to a Raspberry Pi via SSH and provides 33 tools for system management, Docker Compose stacks, service monitoring, networking, backups, disaster recovery, and security auditing.
 
 ## Tools
 
@@ -20,6 +20,10 @@ MCP (Model Context Protocol) server for home lab operations. Connects to a Raspb
 | Network | `homelab_networkInfo` | IP addresses, DNS, Tailscale status |
 | Backup | `homelab_backupStatus` | Check latest restic snapshots |
 | Backup | `homelab_backupRun` | Trigger restic backup |
+| Backup | `homelab_backupList` | List all restic snapshots with filtering |
+| Backup | `homelab_backupRestore` | Restore files from a snapshot |
+| Backup | `homelab_backupDiff` | Diff two restic snapshots |
+| Backup | `homelab_volumeBackup` | Back up a Docker volume to restic |
 | Monitoring | `homelab_prometheusQuery` | Run PromQL queries against Prometheus |
 | Monitoring | `homelab_grafanaSnapshot` | Export Grafana dashboard config by UID |
 | Monitoring | `homelab_uptimeKumaStatus` | Get Uptime Kuma monitor statuses |
@@ -30,6 +34,10 @@ MCP (Model Context Protocol) server for home lab operations. Connects to a Raspb
 | DNS/Proxy | `homelab_adguardQueryLog` | Search AdGuard DNS query log |
 | DNS/Proxy | `homelab_npmProxyHosts` | List NPM proxy host configs |
 | DNS/Proxy | `homelab_npmCerts` | List SSL certificates and expiry |
+| Security | `homelab_ufwStatus` | List UFW firewall rules and status |
+| Security | `homelab_fail2banStatus` | List fail2ban jails and banned IPs |
+| Security | `homelab_openPorts` | Scan listening TCP ports and map to processes |
+| Security | `homelab_containerScan` | Scan container images for vulnerabilities via Trivy |
 | SSH | `homelab_sshTest` | Test SSH connectivity |
 
 ## Setup

package/dist/index.js

@@ -26,9 +26,17 @@ import { register as registerAdguardFilters } from "./tools/adguardFilters.js";
 import { register as registerAdguardQueryLog } from "./tools/adguardQueryLog.js";
 import { register as registerNpmProxyHosts } from "./tools/npmProxyHosts.js";
 import { register as registerNpmCerts } from "./tools/npmCerts.js";
+import { register as registerBackupList } from "./tools/backupList.js";
+import { register as registerBackupRestore } from "./tools/backupRestore.js";
+import { register as registerBackupDiff } from "./tools/backupDiff.js";
+import { register as registerVolumeBackup } from "./tools/volumeBackup.js";
+import { register as registerUfwStatus } from "./tools/ufwStatus.js";
+import { register as registerFail2banStatus } from "./tools/fail2banStatus.js";
+import { register as registerOpenPorts } from "./tools/openPorts.js";
+import { register as registerContainerScan } from "./tools/containerScan.js";
 const server = new McpServer({
     name: "homelab-mcp",
-    version: "0.3.0",
+    version: "0.5.0",
 });
 registerPiStatus(server);
 registerPiReboot(server);
@@ -55,6 +63,14 @@ registerAdguardFilters(server);
 registerAdguardQueryLog(server);
 registerNpmProxyHosts(server);
 registerNpmCerts(server);
+registerBackupList(server);
+registerBackupRestore(server);
+registerBackupDiff(server);
+registerVolumeBackup(server);
+registerUfwStatus(server);
+registerFail2banStatus(server);
+registerOpenPorts(server);
+registerContainerScan(server);
 async function main() {
     const transport = new StdioServerTransport();
     await server.connect(transport);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,eAAe,CAAC,MAAM,CAAC,CAAC;AACxB,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAEzB,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAE7E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC5B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,eAAe,CAAC,MAAM,CAAC,CAAC;AACxB,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACjC,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAChC,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzB,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAC3B,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAC9B,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAC3B,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC7B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAC/B,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1B,qBAAqB,CAAC,MAAM,CAAC,CAAC;AAE9B,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/backupDiff.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=backupDiff.d.ts.map

package/dist/tools/backupDiff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupDiff.d.ts","sourceRoot":"","sources":["../../src/tools/backupDiff.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAQzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkBhD"}

package/dist/tools/backupDiff.js

@@ -0,0 +1,19 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    snapshotA: z.string().min(1).describe("First snapshot ID (older)"),
+    snapshotB: z.string().min(1).describe("Second snapshot ID (newer)"),
+};
+export function register(server) {
+    server.tool("homelab_backupDiff", "Show the difference between two restic backup snapshots", inputSchema, async (args) => {
+        try {
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const output = await execSSH(`sudo restic -r ${repo} diff '${args.snapshotA}' '${args.snapshotB}' 2>&1`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=backupDiff.js.map

package/dist/tools/backupDiff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupDiff.js","sourceRoot":"","sources":["../../src/tools/backupDiff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CACpE,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,yDAAyD,EACzD,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,UAAU,IAAI,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,QAAQ,CAC3E,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/backupList.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=backupList.d.ts.map

package/dist/tools/backupList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupList.d.ts","sourceRoot":"","sources":["../../src/tools/backupList.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAuBhD"}

package/dist/tools/backupList.js

@@ -0,0 +1,28 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    path: z.string().optional().describe("Filter snapshots containing this path"),
+    tag: z.string().optional().describe("Filter snapshots by tag"),
+    host: z.string().optional().describe("Filter snapshots by hostname"),
+};
+export function register(server) {
+    server.tool("homelab_backupList", "List all restic backup snapshots with optional filtering by path, tag, or host", inputSchema, async (args) => {
+        try {
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const flags = [];
+            if (args.path)
+                flags.push(`--path '${args.path}'`);
+            if (args.tag)
+                flags.push(`--tag '${args.tag}'`);
+            if (args.host)
+                flags.push(`--host '${args.host}'`);
+            const extra = flags.length > 0 ? " " + flags.join(" ") : "";
+            const output = await execSSH(`sudo restic -r ${repo} snapshots${extra} --json 2>/dev/null || echo "No backup repo found at ${repo} or restic not configured"`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=backupList.js.map

package/dist/tools/backupList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupList.js","sourceRoot":"","sources":["../../src/tools/backupList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CACrE,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,gFAAgF,EAChF,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,aAAa,KAAK,wDAAwD,IAAI,4BAA4B,CACjI,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/backupRestore.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=backupRestore.d.ts.map

package/dist/tools/backupRestore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupRestore.d.ts","sourceRoot":"","sources":["../../src/tools/backupRestore.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAqBzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA4BhD"}

package/dist/tools/backupRestore.js

@@ -0,0 +1,41 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    snapshot: z
+        .string()
+        .min(1)
+        .describe('Snapshot ID to restore (short hash or "latest")'),
+    target: z
+        .string()
+        .min(1)
+        .describe("Destination path on the Pi to restore files into"),
+    include: z
+        .string()
+        .optional()
+        .describe("Only restore files matching this pattern (e.g. /opt/homelab/docker/)"),
+    confirm: z
+        .boolean()
+        .describe("Must be true to proceed with restore. Safety check."),
+};
+export function register(server) {
+    server.tool("homelab_backupRestore", "Restore files from a restic backup snapshot to a target path on the Pi", inputSchema, async (args) => {
+        try {
+            if (!args.confirm) {
+                return {
+                    content: [{
+                            type: "text",
+                            text: "Restore cancelled. Set confirm=true to proceed.",
+                        }],
+                };
+            }
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const includeFlag = args.include ? ` --include '${args.include}'` : "";
+            const output = await execSSH(`sudo restic -r ${repo} restore '${args.snapshot}' --target '${args.target}'${includeFlag} 2>&1`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=backupRestore.js.map

package/dist/tools/backupRestore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupRestore.js","sourceRoot":"","sources":["../../src/tools/backupRestore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,qDAAqD,CAAC;CACnE,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,wEAAwE,EACxE,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,iDAAiD;yBACxD,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,aAAa,IAAI,CAAC,QAAQ,eAAe,IAAI,CAAC,MAAM,IAAI,WAAW,OAAO,CACjG,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/containerScan.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=containerScan.d.ts.map

package/dist/tools/containerScan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerScan.d.ts","sourceRoot":"","sources":["../../src/tools/containerScan.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAkChD"}

package/dist/tools/containerScan.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    image: z
+        .string()
+        .optional()
+        .describe("Specific container image to scan. Scans all running images if omitted"),
+};
+export function register(server) {
+    server.tool("homelab_containerScan", "Scan running container images for HIGH/CRITICAL vulnerabilities using Trivy", inputSchema, async (args) => {
+        try {
+            const trivyCheck = await execSSH("command -v trivy >/dev/null 2>&1 && echo 'installed' || echo 'missing'");
+            if (trivyCheck.trim() === "missing") {
+                return {
+                    content: [{
+                            type: "text",
+                            text: "Trivy is not installed on the Pi. Install it with:\n\n" +
+                                "sudo apt install -y apt-transport-https gnupg\n" +
+                                "wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | gpg --dearmor | sudo tee /usr/share/keyrings/trivy.gpg > /dev/null\n" +
+                                'echo "deb [signed-by=/usr/share/keyrings/trivy.gpg] https://aquasecurity.github.io/trivy-repo/deb generic main" | sudo tee /etc/apt/sources.list.d/trivy.list\n' +
+                                "sudo apt update && sudo apt install -y trivy",
+                        }],
+                };
+            }
+            const cmd = args.image
+                ? `trivy image --severity HIGH,CRITICAL --format table '${args.image}' 2>&1`
+                : "docker ps --format '{{.Image}}' | sort -u | while read img; do echo \"=== $img ===\"; trivy image --severity HIGH,CRITICAL --format table \"$img\" 2>&1; echo; done";
+            const output = await execSSH(cmd);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=containerScan.js.map

package/dist/tools/containerScan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerScan.js","sourceRoot":"","sources":["../../src/tools/containerScan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,uEAAuE,CAAC;CACrF,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,6EAA6E,EAC7E,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,OAAO,CAC9B,wEAAwE,CACzE,CAAC;YAEF,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,wDAAwD;gCAC5D,iDAAiD;gCACjD,4IAA4I;gCAC5I,iKAAiK;gCACjK,8CAA8C;yBACjD,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK;gBACpB,CAAC,CAAC,wDAAwD,IAAI,CAAC,KAAK,QAAQ;gBAC5E,CAAC,CAAC,qKAAqK,CAAC;YAC1K,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/fail2banStatus.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=fail2banStatus.d.ts.map

package/dist/tools/fail2banStatus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fail2banStatus.d.ts","sourceRoot":"","sources":["../../src/tools/fail2banStatus.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAiBhD"}

package/dist/tools/fail2banStatus.js

@@ -0,0 +1,23 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    jail: z
+        .string()
+        .optional()
+        .describe("Specific jail name to query (e.g. sshd). Returns all jails if omitted"),
+};
+export function register(server) {
+    server.tool("homelab_fail2banStatus", "List fail2ban jails, banned IPs, and ban counts", inputSchema, async (args) => {
+        try {
+            const cmd = args.jail
+                ? `sudo fail2ban-client status '${args.jail}' 2>&1`
+                : "sudo fail2ban-client status 2>&1";
+            const output = await execSSH(cmd);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=fail2banStatus.js.map

package/dist/tools/fail2banStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fail2banStatus.js","sourceRoot":"","sources":["../../src/tools/fail2banStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,uEAAuE,CAAC;CACrF,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,iDAAiD,EACjD,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI;gBACnB,CAAC,CAAC,gCAAgC,IAAI,CAAC,IAAI,QAAQ;gBACnD,CAAC,CAAC,kCAAkC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/openPorts.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=openPorts.d.ts.map

package/dist/tools/openPorts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openPorts.d.ts","sourceRoot":"","sources":["../../src/tools/openPorts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAchD"}

package/dist/tools/openPorts.js

@@ -0,0 +1,13 @@
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+export function register(server) {
+    server.tool("homelab_openPorts", "Scan for listening TCP ports and map them to processes", {}, async () => {
+        try {
+            const output = await execSSH("sudo ss -tlnp 2>&1");
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=openPorts.js.map

package/dist/tools/openPorts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openPorts.js","sourceRoot":"","sources":["../../src/tools/openPorts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,wDAAwD,EACxD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACnD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/ufwStatus.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=ufwStatus.d.ts.map

package/dist/tools/ufwStatus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ufwStatus.d.ts","sourceRoot":"","sources":["../../src/tools/ufwStatus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAchD"}

package/dist/tools/ufwStatus.js

@@ -0,0 +1,13 @@
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+export function register(server) {
+    server.tool("homelab_ufwStatus", "List UFW firewall rules and status", {}, async () => {
+        try {
+            const output = await execSSH("sudo ufw status numbered 2>&1");
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=ufwStatus.js.map

package/dist/tools/ufwStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ufwStatus.js","sourceRoot":"","sources":["../../src/tools/ufwStatus.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,oCAAoC,EACpC,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/volumeBackup.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function register(server: McpServer): void;
+//# sourceMappingURL=volumeBackup.d.ts.map

package/dist/tools/volumeBackup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"volumeBackup.d.ts","sourceRoot":"","sources":["../../src/tools/volumeBackup.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA4BhD"}

package/dist/tools/volumeBackup.js

@@ -0,0 +1,30 @@
+import { z } from "zod";
+import { execSSH, errorResponse } from "../utils/ssh-api.js";
+const inputSchema = {
+    volume: z.string().min(1).describe("Docker volume name to back up"),
+    confirm: z
+        .boolean()
+        .describe("Must be true to trigger backup. Safety check."),
+};
+export function register(server) {
+    server.tool("homelab_volumeBackup", "Back up a specific Docker volume to the restic repository", inputSchema, async (args) => {
+        try {
+            if (!args.confirm) {
+                return {
+                    content: [{
+                            type: "text",
+                            text: "Volume backup cancelled. Set confirm=true to proceed.",
+                        }],
+                };
+            }
+            const repo = process.env.HOMELAB_BACKUP_REPO || "/mnt/backup/restic";
+            const volumePath = `/var/lib/docker/volumes/${args.volume}/_data`;
+            const output = await execSSH(`sudo restic -r ${repo} backup '${volumePath}' --tag docker-volume --tag '${args.volume}' 2>&1`);
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return errorResponse(error);
+        }
+    });
+}
+//# sourceMappingURL=volumeBackup.js.map

package/dist/tools/volumeBackup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volumeBackup.js","sourceRoot":"","sources":["../../src/tools/volumeBackup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACnE,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAiB;IACxC,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,2DAA2D,EAC3D,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uDAAuD;yBAC9D,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC;YACrE,MAAM,UAAU,GAAG,2BAA2B,IAAI,CAAC,MAAM,QAAQ,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,kBAAkB,IAAI,YAAY,UAAU,gCAAgC,IAAI,CAAC,MAAM,QAAQ,CAChG,CAAC;YAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tmhs/homelab-mcp",
-  "version": "0.3.0",
-  "description": "MCP server for home lab operations via SSH - 25 tools for system status, Docker Compose management, service health, monitoring, DNS, reverse proxy, networking, backups, and administration on a Raspberry Pi.",
+  "version": "0.5.0",
+  "description": "MCP server for home lab operations via SSH - 33 tools for system status, Docker Compose management, service health, monitoring, DNS, reverse proxy, networking, backups, disaster recovery, security auditing, and administration on a Raspberry Pi.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {