@usex/mikrotik-mcp 3.21.0 → 3.23.0

package/dist/cli.js

@@ -239,13 +239,38 @@ function getConfig() {
 function listDevices() {
   return { names: Object.keys(active.devices), default: active.defaultDevice };
 }
+function deviceKeyForLabel(name) {
+  const target = name.trim().toLowerCase();
+  for (const [key, dc] of Object.entries(active.devices)) {
+    if (dc.description && dc.description.trim().toLowerCase() === target)
+      return key;
+  }
+  return;
+}
+function deviceLabels() {
+  const seen = new Set;
+  const out = [];
+  for (const [key, dc] of Object.entries(active.devices)) {
+    const label = dc.description?.trim();
+    if (label && label !== key && !(label in active.devices) && !seen.has(label)) {
+      seen.add(label);
+      out.push(label);
+    }
+  }
+  return out;
+}
 function resolveDeviceName(name) {
-  if (name && name in active.devices)
-    return name;
+  if (name) {
+    if (name in active.devices)
+      return name;
+    const byLabel = deviceKeyForLabel(name);
+    if (byLabel)
+      return byLabel;
+  }
   return active.defaultDevice in active.devices ? active.defaultDevice : Object.keys(active.devices)[0] ?? active.defaultDevice;
 }
 function getDevice(name) {
-  if (name && !(name in active.devices)) {
+  if (name && !(name in active.devices) && !deviceKeyForLabel(name)) {
     throw new Error(`Unknown device '${name}'. Configured devices: ${Object.keys(active.devices).join(", ")}`);
   }
   const key = resolveDeviceName(name);
@@ -894,31 +919,39 @@ class SafeModeManager {
   }
   commit() {
     return this.lock(async () => {
-      if (!this.active || !this.channel)
-        return "Safe mode is not active. Nothing to commit.";
-      this.channel.write(`
-`);
-      const probe = await this.readSettledPrompt();
-      const before = classifyPrompt(probe);
+      if (!this.active || !this.channel) {
+        return { ok: true, message: "Safe mode is not active. Nothing to commit." };
+      }
+      const before = await this.probeMode();
       if (before === "released") {
         this.cleanup();
-        return "Safe mode already exited \u2014 your changes are committed. Safe mode DISABLED.";
+        return {
+          ok: true,
+          message: "Safe mode already exited \u2014 your changes are committed. Safe mode DISABLED."
+        };
       }
       if (before === "unknown") {
-        return "Could not read a prompt to determine Safe Mode state. The session is left open so " + "nothing is reverted \u2014 call get_safe_mode_status, retry commit_safe_mode, or " + `rollback_safe_mode. Last output: ${probe.slice(-160)}`;
+        return {
+          ok: false,
+          message: "Could not read a prompt to determine Safe Mode state. The session is left open so " + "nothing is reverted \u2014 call get_safe_mode_status, retry commit_safe_mode, or rollback_safe_mode."
+        };
       }
       this.channel.write(CTRL_X);
-      this.channel.write(`
-`);
-      const after = await this.readSettledPrompt();
-      switch (classifyPrompt(after)) {
+      const after = await this.probeMode();
+      switch (after) {
         case "released":
           this.cleanup();
-          return "Changes committed successfully. Safe mode DISABLED.";
+          return { ok: true, message: "Changes committed successfully. Safe mode DISABLED." };
         case "safe":
-          return "Commit not completed \u2014 the device is still in Safe Mode. Your changes remain held " + "in memory (not reverted); call commit_safe_mode again to retry, or rollback_safe_mode " + "to discard them.";
+          return {
+            ok: false,
+            message: "Commit NOT completed \u2014 the device is still in Safe Mode (the Ctrl+X commit did not " + "take). Your changes remain held in memory and are NOT yet saved; call commit_safe_mode " + "again to retry, or rollback_safe_mode to discard them. If retries keep failing, this " + "RouterOS build may not accept an interactive Safe Mode commit over SSH \u2014 apply the " + "change without Safe Mode instead."
+          };
         default:
-          return "Commit status unclear \u2014 no prompt seen after exiting Safe Mode. The session is left " + "open so nothing is reverted; verify with get_safe_mode_status or retry commit_safe_mode. " + `Last output: ${after.slice(-160)}`;
+          return {
+            ok: false,
+            message: "Commit status unclear \u2014 no prompt seen after the commit. The session is left open so " + "nothing is reverted; verify with get_safe_mode_status or retry commit_safe_mode."
+          };
       }
     });
   }
@@ -955,32 +988,17 @@ class SafeModeManager {
       channel.on("data", onData);
     });
   }
-  readSettledPrompt(quietMs = 450, maxMs = 8000) {
-    const channel = this.channel;
-    if (!channel)
-      return Promise.resolve("");
-    return new Promise((resolve2) => {
-      let buf = "";
-      let quiet;
-      let hard;
-      function done() {
-        clearTimeout(hard);
-        if (quiet)
-          clearTimeout(quiet);
-        channel.removeListener("data", onData);
-        resolve2(stripAnsi(buf));
-      }
-      function onData(chunk) {
-        buf += decodeOutput(chunk);
-        if (PROMPT_RE.test(lastNonEmptyLine(stripAnsi(buf)))) {
-          if (quiet)
-            clearTimeout(quiet);
-          quiet = setTimeout(done, quietMs);
-        }
-      }
-      hard = setTimeout(done, maxMs);
-      channel.on("data", onData);
+  async probeMode() {
+    if (!this.channel)
+      return "unknown";
+    const token = "__MCP_SAFEMODE_PROBE__";
+    this.channel.write(`:put "${token}"
+`);
+    const out = await this.readUntilPrompt(8000, (cleaned) => {
+      const i = cleaned.lastIndexOf(token);
+      return i >= 0 && PROMPT_RE.test(cleaned.slice(i));
     });
+    return classifyPrompt(out);
   }
   extractOutput(raw, command) {
     const text = raw.replace(/\r\n/g, `
@@ -1654,6 +1672,7 @@ function recordToolCall(raw) {
 
 // src/core/registry.ts
 var AUTO_RECORDS_VERB = /^(list|get|show|print)_/;
+var UI_OUTPUT_SCHEMA = z2.object({}).passthrough();
 function effectiveUi(def) {
   if (def.ui)
     return { ui: def.ui, auto: false };
@@ -1694,12 +1713,13 @@ function defineTool(def) {
     inputSchema: def.inputSchema,
     ui: def.ui,
     register(server, opts = {}) {
-      const { sendLog, deviceNames } = opts;
+      const { sendLog, deviceNames, deviceAliases } = opts;
       const multiDevice = !!deviceNames && deviceNames.length > 1;
       const { ui, auto } = effectiveUi(def);
+      const selectorNames = multiDevice && deviceNames ? [...new Set([...deviceNames, ...deviceAliases ?? []])] : [];
       const inputSchema = multiDevice ? {
         ...def.inputSchema,
-        device: z2.enum(deviceNames).optional().describe(`Which configured MikroTik device to run this on. One of: ${deviceNames.join(", ")}. Omit to use the default device.`)
+        device: z2.enum(selectorNames).optional().describe(`Which configured MikroTik device to run this on. One of: ${selectorNames.join(", ")} (a config key or its label). Omit to use the default device.`)
       } : def.inputSchema;
       const risk = riskOf(def.annotations);
       const callback = async (args) => {
@@ -1722,7 +1742,10 @@ function defineTool(def) {
             return { content: [{ type: "text", text: out.text }], isError: true };
           }
           if (auto && !out.structuredContent) {
-            out.structuredContent = buildRecordsView(def.name, def.title, out.text, new Date().toISOString());
+            const view = buildRecordsView(def.name, def.title, out.text, new Date().toISOString());
+            if (view.rows.length > 0) {
+              out.structuredContent = view;
+            }
           }
           const result = {
             content: [{ type: "text", text: out.text }]
@@ -1765,7 +1788,8 @@ function defineTool(def) {
         description: def.description,
         inputSchema,
         annotations: { ...def.annotations, title: def.title },
-        ...ui ? { _meta: toolUiMeta(ui) } : {}
+        ...ui ? { _meta: toolUiMeta(ui) } : {},
+        ...ui && !auto ? { outputSchema: UI_OUTPUT_SCHEMA } : {}
       }, callback);
     }
   };
@@ -2632,11 +2656,19 @@ async function restoreLocalBackup(device, name, confirm) {
       return fail("device stopped responding after applying \u2014 rolled back to avoid a lock-out", applied);
     }
     const committed = await safe.commit();
+    if (!committed.ok) {
+      return {
+        ok: false,
+        applied,
+        committed: false,
+        message: `applied ${applied} command(s) but COMMIT FAILED \u2014 not saved: ${committed.message}`
+      };
+    }
     return {
       ok: true,
       applied,
       committed: true,
-      message: `committed ${applied} command(s). ${committed}`
+      message: `committed ${applied} command(s). ${committed.message}`
     };
   } catch (e) {
     await safe.rollback();
@@ -3870,9 +3902,14 @@ DRY-RUN: all changes rolled back. Re-run with confirm=true to commit.`;
 ABORTED: the device stopped responding after applying \u2014 changes rolled back to avoid a lock-out.`;
         }
         const committed = await safe.commit();
+        if (!committed.ok) {
+          return `${header}
+
+COMMIT FAILED \u2014 changes are NOT saved (still pending in Safe Mode). ` + `${committed.message}`;
+        }
         return `${header}
 
-COMMITTED: changes are now permanent. ${committed}`;
+COMMITTED: changes are now permanent. ${committed.message}`;
       } catch (e) {
         await safe.rollback();
         const msg = e instanceof Error ? e.message : String(e);
@@ -5935,8 +5972,12 @@ ${useSafe ? "Safe Mode rolled back \u2014 no changes kept." : "Partial rules rem
         }
         done.push(cmd);
       }
-      if (useSafe)
-        await mgr.commit();
+      if (useSafe) {
+        const c = await mgr.commit();
+        if (!c.ok) {
+          return `Applied ${done.length} rule(s) but Safe Mode COMMIT FAILED \u2014 changes are NOT saved ` + `and will revert: ${c.message}`;
+        }
+      }
       return `Security Shield applied \u2014 ${done.length} rule(s) across ${groups.length} protection(s)${useSafe ? " (committed via Safe Mode)" : ""}. Audit with audit_firewall_hardening; undo with remove_firewall_hardening.`;
     }
   }),
@@ -13512,7 +13553,7 @@ ${redactSecrets(result)}`;
 
 // src/tools/poe.ts
 import { z as z69 } from "zod";
-var NO_POE = "This device does not have PoE-out hardware \u2014 the /interface ethernet poe menu is not available.";
+var NO_POE = "This device has no PoE-OUT hardware, so the `/interface ethernet poe` menu " + "(used to SUPPLY power to other devices) is not available \u2014 this is normal, not an error. " + "Note: PoE-OUT (this router powering other devices) is different from PoE-IN (this router being " + "powered over Ethernet). If your device is PoE-powered, read its PoE-IN voltage/state with " + "get_system_health (`/system health`), not the PoE tools.";
 var poeTools = [
   defineTool({
     name: "get_poe_monitor",
@@ -17583,7 +17624,7 @@ var safeModeTools = [
     async handler(_a, ctx) {
       const device = resolveDeviceName(ctx.device);
       ctx.info(`[${device}] Committing safe mode changes`);
-      return getSafeModeManager(device).commit();
+      return (await getSafeModeManager(device).commit()).message;
     }
   }),
   defineTool({
@@ -23951,7 +23992,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.21.0",
+  version: "3.23.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",
@@ -24155,6 +24196,7 @@ function createServer(opts = {}) {
   const toolCount = registerTools(server, toolModules, {
     sendLog,
     deviceNames: names,
+    deviceAliases: deviceLabels(),
     readOnly
   });
   const promptCount = registerPrompts(server);

package/dist/index.d.ts

@@ -49,9 +49,16 @@ interface UiLink {
 /** Options threaded into every tool registration. */
 interface RegisterOptions {
 	sendLog?: SendLog;
-	/** Configured device names; when more than one, a `device` selector is injected. */
+	/** Configured device KEYS; when more than one, a `device` selector is injected. */
 	deviceNames?: string[];
 	/**
+	* Extra accepted values for the `device` selector — a device's free-text
+	* label (`description`, e.g. "Ali Home") so the AI can target it by the
+	* friendly name as well as its config key. Resolved back to the key by
+	* {@link resolveDeviceName}. Does NOT affect the single-vs-multi decision.
+	*/
+	deviceAliases?: string[];
+	/**
 	* Read-only mode: register only tools annotated `readOnlyHint`. Used to
 	* withhold every write/destructive tool from a publicly-exposed surface (e.g.
 	* a ChatGPT Apps connector) until authentication is in place.
@@ -110,11 +117,15 @@ declare function listDevices(): {
 	names: string[];
 	default: string;
 };
-/** Resolve a (possibly undefined) device name to a concrete, existing name. */
+/**
+* Resolve a (possibly undefined) device name to a concrete, existing config key.
+* Accepts a config key OR a device's free-text label; falls back to the default.
+*/
 declare function resolveDeviceName(name?: string): string;
 /**
-* Return the connection config for a device by name (or the default when
-* `name` is undefined). Throws if an explicit, unknown name is given.
+* Return the connection config for a device by key or label (or the default when
+* `name` is undefined). Throws if an explicit name matches neither a key nor a
+* label.
 */
 declare function getDevice(name?: string): DeviceConfig;
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -163,6 +174,16 @@ declare class MikroTikSSHClient {
 	/** Close the SSH connection. Safe to call multiple times. */
 	disconnect(): void;
 }
+/**
+* Outcome of {@link SafeModeManager.commit}. `ok` is true ONLY when Safe Mode is
+* confirmed exited (changes persisted) — callers must check it before telling
+* the user anything was committed, so a failed commit can never masquerade as a
+* success that then silently reverts.
+*/
+interface CommitResult {
+	ok: boolean;
+	message: string;
+}
 declare class SafeModeManager {
 	private readonly deviceName;
 	private ssh;
@@ -179,8 +200,12 @@ declare class SafeModeManager {
 	enable(): Promise<string>;
 	/** Execute a command through the safe-mode persistent shell session. */
 	execute(command: string): Promise<string>;
-	/** Send Ctrl+X again to exit Safe Mode and persist all changes. */
-	commit(): Promise<string>;
+	/**
+	* Send Ctrl+X again to exit Safe Mode and persist all changes. Returns a
+	* structured result so callers NEVER report "committed" on a failed commit —
+	* `ok` is true only when Safe Mode is confirmed exited (changes saved).
+	*/
+	commit(): Promise<CommitResult>;
 	/** Close the session to trigger MikroTik's automatic safe-mode revert. */
 	rollback(): Promise<string>;
 	status(): string;
@@ -192,13 +217,14 @@ declare class SafeModeManager {
 	*/
 	private readUntilPrompt;
 	/**
-	* Read until the output SETTLES: once any prompt is visible, wait for a quiet
-	* gap (`quietMs` with no new bytes) before resolving, or give up at `maxMs`.
-	* Used by commit, where Ctrl+X + Enter can emit a transient `<SAFE>` redraw
-	* followed by the real post-commit prompt — settling on the LAST prompt after
-	* a quiet period is what makes mode detection reliable.
+	* Determine the shell's CURRENT mode definitively by round-tripping a sentinel
+	* command (`:put "<token>"`) and classifying the prompt that follows ITS
+	* output. A real command — not a bare Enter — forces RouterOS to fully process
+	* any pending Ctrl+X and render a prompt that reflects the true mode, so we
+	* never settle on a transient `<SAFE>`→normal redraw and report a commit that
+	* did not actually take. Returns `safe`, `released`, or `unknown` (no prompt).
 	*/
-	private readSettledPrompt;
+	private probeMode;
 	private extractOutput;
 	private cleanup;
 }

package/dist/index.js

@@ -231,13 +231,38 @@ function getConfig() {
 function listDevices() {
   return { names: Object.keys(active.devices), default: active.defaultDevice };
 }
+function deviceKeyForLabel(name) {
+  const target = name.trim().toLowerCase();
+  for (const [key, dc] of Object.entries(active.devices)) {
+    if (dc.description && dc.description.trim().toLowerCase() === target)
+      return key;
+  }
+  return;
+}
+function deviceLabels() {
+  const seen = new Set;
+  const out = [];
+  for (const [key, dc] of Object.entries(active.devices)) {
+    const label = dc.description?.trim();
+    if (label && label !== key && !(label in active.devices) && !seen.has(label)) {
+      seen.add(label);
+      out.push(label);
+    }
+  }
+  return out;
+}
 function resolveDeviceName(name) {
-  if (name && name in active.devices)
-    return name;
+  if (name) {
+    if (name in active.devices)
+      return name;
+    const byLabel = deviceKeyForLabel(name);
+    if (byLabel)
+      return byLabel;
+  }
   return active.defaultDevice in active.devices ? active.defaultDevice : Object.keys(active.devices)[0] ?? active.defaultDevice;
 }
 function getDevice(name) {
-  if (name && !(name in active.devices)) {
+  if (name && !(name in active.devices) && !deviceKeyForLabel(name)) {
     throw new Error(`Unknown device '${name}'. Configured devices: ${Object.keys(active.devices).join(", ")}`);
   }
   const key = resolveDeviceName(name);
@@ -880,31 +905,39 @@ class SafeModeManager {
   }
   commit() {
     return this.lock(async () => {
-      if (!this.active || !this.channel)
-        return "Safe mode is not active. Nothing to commit.";
-      this.channel.write(`
-`);
-      const probe = await this.readSettledPrompt();
-      const before = classifyPrompt(probe);
+      if (!this.active || !this.channel) {
+        return { ok: true, message: "Safe mode is not active. Nothing to commit." };
+      }
+      const before = await this.probeMode();
       if (before === "released") {
         this.cleanup();
-        return "Safe mode already exited \u2014 your changes are committed. Safe mode DISABLED.";
+        return {
+          ok: true,
+          message: "Safe mode already exited \u2014 your changes are committed. Safe mode DISABLED."
+        };
       }
       if (before === "unknown") {
-        return "Could not read a prompt to determine Safe Mode state. The session is left open so " + "nothing is reverted \u2014 call get_safe_mode_status, retry commit_safe_mode, or " + `rollback_safe_mode. Last output: ${probe.slice(-160)}`;
+        return {
+          ok: false,
+          message: "Could not read a prompt to determine Safe Mode state. The session is left open so " + "nothing is reverted \u2014 call get_safe_mode_status, retry commit_safe_mode, or rollback_safe_mode."
+        };
       }
       this.channel.write(CTRL_X);
-      this.channel.write(`
-`);
-      const after = await this.readSettledPrompt();
-      switch (classifyPrompt(after)) {
+      const after = await this.probeMode();
+      switch (after) {
         case "released":
           this.cleanup();
-          return "Changes committed successfully. Safe mode DISABLED.";
+          return { ok: true, message: "Changes committed successfully. Safe mode DISABLED." };
         case "safe":
-          return "Commit not completed \u2014 the device is still in Safe Mode. Your changes remain held " + "in memory (not reverted); call commit_safe_mode again to retry, or rollback_safe_mode " + "to discard them.";
+          return {
+            ok: false,
+            message: "Commit NOT completed \u2014 the device is still in Safe Mode (the Ctrl+X commit did not " + "take). Your changes remain held in memory and are NOT yet saved; call commit_safe_mode " + "again to retry, or rollback_safe_mode to discard them. If retries keep failing, this " + "RouterOS build may not accept an interactive Safe Mode commit over SSH \u2014 apply the " + "change without Safe Mode instead."
+          };
         default:
-          return "Commit status unclear \u2014 no prompt seen after exiting Safe Mode. The session is left " + "open so nothing is reverted; verify with get_safe_mode_status or retry commit_safe_mode. " + `Last output: ${after.slice(-160)}`;
+          return {
+            ok: false,
+            message: "Commit status unclear \u2014 no prompt seen after the commit. The session is left open so " + "nothing is reverted; verify with get_safe_mode_status or retry commit_safe_mode."
+          };
       }
     });
   }
@@ -941,32 +974,17 @@ class SafeModeManager {
       channel.on("data", onData);
     });
   }
-  readSettledPrompt(quietMs = 450, maxMs = 8000) {
-    const channel = this.channel;
-    if (!channel)
-      return Promise.resolve("");
-    return new Promise((resolve2) => {
-      let buf = "";
-      let quiet;
-      let hard;
-      function done() {
-        clearTimeout(hard);
-        if (quiet)
-          clearTimeout(quiet);
-        channel.removeListener("data", onData);
-        resolve2(stripAnsi(buf));
-      }
-      function onData(chunk) {
-        buf += decodeOutput(chunk);
-        if (PROMPT_RE.test(lastNonEmptyLine(stripAnsi(buf)))) {
-          if (quiet)
-            clearTimeout(quiet);
-          quiet = setTimeout(done, quietMs);
-        }
-      }
-      hard = setTimeout(done, maxMs);
-      channel.on("data", onData);
+  async probeMode() {
+    if (!this.channel)
+      return "unknown";
+    const token = "__MCP_SAFEMODE_PROBE__";
+    this.channel.write(`:put "${token}"
+`);
+    const out = await this.readUntilPrompt(8000, (cleaned) => {
+      const i = cleaned.lastIndexOf(token);
+      return i >= 0 && PROMPT_RE.test(cleaned.slice(i));
     });
+    return classifyPrompt(out);
   }
   extractOutput(raw, command) {
     const text = raw.replace(/\r\n/g, `
@@ -1560,6 +1578,7 @@ function recordToolCall(raw) {
 
 // src/core/registry.ts
 var AUTO_RECORDS_VERB = /^(list|get|show|print)_/;
+var UI_OUTPUT_SCHEMA = z2.object({}).passthrough();
 function effectiveUi(def) {
   if (def.ui)
     return { ui: def.ui, auto: false };
@@ -1600,12 +1619,13 @@ function defineTool(def) {
     inputSchema: def.inputSchema,
     ui: def.ui,
     register(server, opts = {}) {
-      const { sendLog, deviceNames } = opts;
+      const { sendLog, deviceNames, deviceAliases } = opts;
       const multiDevice = !!deviceNames && deviceNames.length > 1;
       const { ui, auto } = effectiveUi(def);
+      const selectorNames = multiDevice && deviceNames ? [...new Set([...deviceNames, ...deviceAliases ?? []])] : [];
       const inputSchema = multiDevice ? {
         ...def.inputSchema,
-        device: z2.enum(deviceNames).optional().describe(`Which configured MikroTik device to run this on. One of: ${deviceNames.join(", ")}. Omit to use the default device.`)
+        device: z2.enum(selectorNames).optional().describe(`Which configured MikroTik device to run this on. One of: ${selectorNames.join(", ")} (a config key or its label). Omit to use the default device.`)
       } : def.inputSchema;
       const risk = riskOf(def.annotations);
       const callback = async (args) => {
@@ -1628,7 +1648,10 @@ function defineTool(def) {
             return { content: [{ type: "text", text: out.text }], isError: true };
           }
           if (auto && !out.structuredContent) {
-            out.structuredContent = buildRecordsView(def.name, def.title, out.text, new Date().toISOString());
+            const view = buildRecordsView(def.name, def.title, out.text, new Date().toISOString());
+            if (view.rows.length > 0) {
+              out.structuredContent = view;
+            }
           }
           const result = {
             content: [{ type: "text", text: out.text }]
@@ -1671,7 +1694,8 @@ function defineTool(def) {
         description: def.description,
         inputSchema,
         annotations: { ...def.annotations, title: def.title },
-        ...ui ? { _meta: toolUiMeta(ui) } : {}
+        ...ui ? { _meta: toolUiMeta(ui) } : {},
+        ...ui && !auto ? { outputSchema: UI_OUTPUT_SCHEMA } : {}
       }, callback);
     }
   };
@@ -2644,11 +2668,19 @@ async function restoreLocalBackup(device, name, confirm) {
       return fail("device stopped responding after applying \u2014 rolled back to avoid a lock-out", applied);
     }
     const committed = await safe.commit();
+    if (!committed.ok) {
+      return {
+        ok: false,
+        applied,
+        committed: false,
+        message: `applied ${applied} command(s) but COMMIT FAILED \u2014 not saved: ${committed.message}`
+      };
+    }
     return {
       ok: true,
       applied,
       committed: true,
-      message: `committed ${applied} command(s). ${committed}`
+      message: `committed ${applied} command(s). ${committed.message}`
     };
   } catch (e) {
     await safe.rollback();
@@ -3882,9 +3914,14 @@ DRY-RUN: all changes rolled back. Re-run with confirm=true to commit.`;
 ABORTED: the device stopped responding after applying \u2014 changes rolled back to avoid a lock-out.`;
         }
         const committed = await safe.commit();
+        if (!committed.ok) {
+          return `${header}
+
+COMMIT FAILED \u2014 changes are NOT saved (still pending in Safe Mode). ` + `${committed.message}`;
+        }
         return `${header}
 
-COMMITTED: changes are now permanent. ${committed}`;
+COMMITTED: changes are now permanent. ${committed.message}`;
       } catch (e) {
         await safe.rollback();
         const msg = e instanceof Error ? e.message : String(e);
@@ -5947,8 +5984,12 @@ ${useSafe ? "Safe Mode rolled back \u2014 no changes kept." : "Partial rules rem
         }
         done.push(cmd);
       }
-      if (useSafe)
-        await mgr.commit();
+      if (useSafe) {
+        const c = await mgr.commit();
+        if (!c.ok) {
+          return `Applied ${done.length} rule(s) but Safe Mode COMMIT FAILED \u2014 changes are NOT saved ` + `and will revert: ${c.message}`;
+        }
+      }
       return `Security Shield applied \u2014 ${done.length} rule(s) across ${groups.length} protection(s)${useSafe ? " (committed via Safe Mode)" : ""}. Audit with audit_firewall_hardening; undo with remove_firewall_hardening.`;
     }
   }),
@@ -13524,7 +13565,7 @@ ${redactSecrets(result)}`;
 
 // src/tools/poe.ts
 import { z as z70 } from "zod";
-var NO_POE = "This device does not have PoE-out hardware \u2014 the /interface ethernet poe menu is not available.";
+var NO_POE = "This device has no PoE-OUT hardware, so the `/interface ethernet poe` menu " + "(used to SUPPLY power to other devices) is not available \u2014 this is normal, not an error. " + "Note: PoE-OUT (this router powering other devices) is different from PoE-IN (this router being " + "powered over Ethernet). If your device is PoE-powered, read its PoE-IN voltage/state with " + "get_system_health (`/system health`), not the PoE tools.";
 var poeTools = [
   defineTool({
     name: "get_poe_monitor",
@@ -17595,7 +17636,7 @@ var safeModeTools = [
     async handler(_a, ctx) {
       const device = resolveDeviceName(ctx.device);
       ctx.info(`[${device}] Committing safe mode changes`);
-      return getSafeModeManager(device).commit();
+      return (await getSafeModeManager(device).commit()).message;
     }
   }),
   defineTool({
@@ -22351,7 +22392,7 @@ function selectToolModules(filter = {}, catalog = moduleCatalog) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.21.0",
+  version: "3.23.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",
@@ -22555,6 +22596,7 @@ function createServer(opts = {}) {
   const toolCount = registerTools(server, toolModules, {
     sendLog,
     deviceNames: names,
+    deviceAliases: deviceLabels(),
     readOnly
   });
   const promptCount = registerPrompts(server);

package/dist/ui/dashboard.html

@@ -3,6 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
     <title>MikroTik Device Dashboard</title>
     <script type="module">
 import{a as e,i as t,n,r,t as i}from"./app-DU6NBjf_.js";var a=`show_system_dashboard`,o=document.getElementById(`app`);function s(e,t={},...n){let r=document.createElement(e);for(let[e,n]of Object.entries(t))e===`class`?r.className=n:r.setAttribute(e,n);for(let e of n.flat())e===!1||e==null||r.append(e instanceof Node?e:document.createTextNode(String(e)));return r}function c(e){if(e==null)return`—`;let t=[`B`,`KiB`,`MiB`,`GiB`,`TiB`],n=0,r=e;for(;r>=1024&&n<t.length-1;)r/=1024,n++;return`${r.toFixed(+(r<10&&n>0))} ${t[n]}`}function l(e){return e==null?``:e>=90?`is-bad`:e>=70?`is-warn`:`is-good`}var u=`http://www.w3.org/2000/svg`;function d(e,t){let n=document.createElementNS(u,e);for(let[e,r]of Object.entries(t))n.setAttribute(e,String(r));return n}function f(e,t,n){let r=2*Math.PI*26,i=t==null?0:Math.max(0,Math.min(100,t))/100,a=d(`svg`,{width:64,height:64,viewBox:`0 0 64 64`}),o=d(`circle`,{cx:32,cy:32,r:26,fill:`none`,"stroke-width":7});o.setAttribute(`class`,`gauge__track`);let c=d(`circle`,{cx:32,cy:32,r:26,fill:`none`,"stroke-width":7,"stroke-dasharray":r,"stroke-dashoffset":r*(1-i)});c.setAttribute(`class`,`gauge__bar ${l(t)}`);let u=d(`text`,{x:32,y:37,"text-anchor":`middle`});return u.setAttribute(`class`,`gauge__pct`),u.textContent=t==null?`—`:`${Math.round(t)}%`,a.replaceChildren(o,c,u),s(`div`,{class:`card gauge`},a,s(`div`,{class:`gauge__meta`},s(`p`,{class:`card__label`},e),s(`small`,{},n)))}function p(e,t){return s(`div`,{class:`card`},s(`p`,{class:`card__label`},e),s(`div`,{class:`card__value`},t))}function m(e,t){let n=Object.entries(t);if(n.length===0)return null;let r=s(`div`,{class:`kv__body`},...n.flatMap(([e,t])=>[s(`div`,{class:`kv__k`},e),s(`div`,{class:`kv__v`},t||`—`)]));return s(`details`,{class:`kv`},s(`summary`,{},`${e} (${n.length})`),r)}var h=null,g=!1;function _(){if(!h){o.replaceChildren(s(`div`,{class:`skeleton`},`Waiting for device data…`));return}let e=h,t=e.derived,n=e.resource.version??`?`,r=e.routerboard.model??e.resource[`board-name`]??`?`,i=[f(`CPU load`,t.cpuLoadPct,`${e.resource[`cpu-count`]??`?`} cores`),f(`Memory`,t.memUsedPct,`${c(t.memUsedBytes)} / ${c(t.memTotalBytes)}`),t.hddUsedPct!=null&&f(`Disk`,t.hddUsedPct,`${c(t.hddUsedBytes)} / ${c(t.hddTotalBytes)}`)].filter(Boolean),a=[p(`Uptime`,e.resource.uptime??`—`),t.temperatureC!=null&&p(`Temperature`,`${t.temperatureC} °C`),t.voltageV!=null&&p(`Voltage`,`${t.voltageV} V`),p(`Architecture`,e.resource[`architecture-name`]??`—`)].filter(Boolean),l=s(`button`,{class:`btn`},g?`Refreshing…`:`↻ Refresh`);g&&l.setAttribute(`disabled`,`true`),l.addEventListener(`click`,b);let u=s(`span`,{class:`pill`},`device `,s(`b`,{},e.device)),d=s(`header`,{class:`hd`},s(`span`,{class:`hd__dot`}),s(`div`,{},s(`h1`,{class:`hd__title`},e.identity),s(`p`,{class:`hd__sub`},`${r} · RouterOS ${n}`)),s(`span`,{class:`hd__spacer`}),u),_=s(`footer`,{class:`foot`},l,s(`span`,{},`updated ${new Date(e.generatedAt).toLocaleTimeString()}`)),v=[d,s(`section`,{class:`grid`},...i),s(`section`,{class:`grid`},...a),m(`System resource`,e.resource),m(`RouterBOARD`,e.routerboard),_].filter(e=>e!=null);o.replaceChildren(...v)}var v=new t({name:`mikrotik-dashboard`,version:`1.0.0`});function y(e){e&&typeof e==`object`&&`device`in e&&(h=e,_())}async function b(){if(!g){g=!0,_();try{y((await v.callServerTool({name:a,arguments:{}})).structuredContent)}catch(e){console.error(`[dashboard] refresh failed`,e)}finally{g=!1,_()}}}v.ontoolresult=e=>y(e.structuredContent),v.ontoolinput=()=>{h||_()},v.onhostcontextchanged=t=>{if(t.theme&&e(t.theme),t.styles?.variables&&r(t.styles.variables),t.styles?.css?.fonts&&n(t.styles.css.fonts),t.safeAreaInsets){let{top:e,right:n,bottom:r,left:i}=t.safeAreaInsets;document.body.style.padding=`${e+16}px ${n+16}px ${r+16}px ${i+16}px`}},v.onteardown=async()=>({}),e(i()),_(),v.connect().catch(e=>console.error(`[dashboard] connect failed`,e));

package/dist/ui/firewall-audit.html

@@ -3,6 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
     <title>MikroTik Firewall Audit</title>
     <script type="module">
 import{i as e}from"./app-DU6NBjf_.js";import{i as t,o as n,t as r}from"./kit-DAVkZl3Q.js";var i=`firewall_audit`,a=document.getElementById(`app`),o=null,s=!1,c=null,l=new e({name:`mikrotik-firewall-audit`,version:`1.0.0`});function u(e){return e===`clean`||e===`good`?`is-good`:e===`fair`?`is-warn`:`is-bad`}function d(e){return e===`high`?`is-bad`:e===`medium`?`is-warn`:`is-low`}function f(e,t){let n=2*Math.PI*34,r=Math.max(0,Math.min(100,e))/100,i=document.createElementNS(`http://www.w3.org/2000/svg`,`svg`);i.setAttribute(`viewBox`,`0 0 88 88`),i.setAttribute(`class`,`gauge ${u(t)}`);let a=(e,t)=>{let n=document.createElementNS(`http://www.w3.org/2000/svg`,`circle`);n.setAttribute(`class`,e),n.setAttribute(`cx`,`44`),n.setAttribute(`cy`,`44`),n.setAttribute(`r`,`34`);for(let[e,r]of Object.entries(t))n.setAttribute(e,r);return n};i.append(a(`gauge__bg`,{})),i.append(a(`gauge__fg`,{"stroke-dasharray":`${n*r} ${n}`,transform:`rotate(-90 44 44)`}));let o=document.createElementNS(`http://www.w3.org/2000/svg`,`text`);return o.setAttribute(`x`,`44`),o.setAttribute(`y`,`48`),o.setAttribute(`text-anchor`,`middle`),o.setAttribute(`class`,`gauge__num`),o.textContent=String(e),i.append(o),i}async function p(e,t){if(!(!e.action||s)){c=t,h();try{await l.callServerTool({name:e.action.tool,arguments:e.action.args}),await _()}catch(e){console.error(`[firewall-audit] action failed`,e)}finally{c=null,h()}}}function m(e,n){let i=`${e.kind}-${e.table}-${e.ruleIndex??e.chain}-${n}`,a=t(`div`,{class:`f-head`},t(`span`,{class:`chip ${d(e.severity)}`},e.severity),t(`span`,{class:`f-title`},e.title),t(`span`,{class:`f-where`},`${e.table}/${e.chain}`)),o=t(`div`,{class:`f-body`},t(`p`,{class:`f-detail`},e.detail),t(`p`,{class:`f-fix`},t(`b`,{},`Fix: `),e.suggestion)),l=t(`div`,{class:`f-card ${d(e.severity)}`},a,o);if(e.action){let n=c===i?`Working…`:e.action.label;l.append(t(`div`,{class:`f-actions`},r(n,()=>void p(e,i),{class:`btn-danger`,disabled:s||c===i,title:`Calls ${e.action.tool}`})))}return l}function h(){if(!o){a.replaceChildren(t(`div`,{class:`skeleton`},`Running firewall audit…`));return}let e=o,n=t(`header`,{class:`hd`},f(e.riskScore,e.grade),t(`div`,{class:`hd__meta`},t(`h1`,{class:`hd__title`},`Firewall audit`),t(`p`,{class:`hd__sub`},`device `,t(`b`,{},e.device),` · ${e.ruleCount} rules · grade `,t(`b`,{class:u(e.grade)},e.grade)),t(`div`,{class:`counts`},t(`span`,{class:`chip is-bad`},`${e.counts.high} high`),t(`span`,{class:`chip is-warn`},`${e.counts.medium} medium`),t(`span`,{class:`chip is-low`},`${e.counts.low} low`))),t(`span`,{class:`hd__spacer`}),r(s?`Auditing…`:`↻ Re-audit`,_,{disabled:s})),i;i=e.findings.length===0?t(`div`,{class:`empty`},`No issues found — the ruleset looks clean. ✓`):t(`div`,{class:`f-list`},...e.findings.map(m));let c=t(`footer`,{class:`foot`},t(`span`,{class:`grow`}),t(`span`,{},`updated ${new Date(e.generatedAt).toLocaleTimeString()}`));a.replaceChildren(n,i,c)}function g(e){e&&typeof e==`object`&&e.__mikrotikView===`firewall-audit`&&(o=e,h())}async function _(){if(!s){s=!0,h();try{g((await l.callServerTool({name:i,arguments:{}})).structuredContent)}catch(e){console.error(`[firewall-audit] refresh failed`,e)}finally{s=!1,h()}}}l.ontoolresult=e=>g(e.structuredContent),l.ontoolinput=()=>{o||h()},n(l),l.onteardown=async()=>({}),h(),l.connect().catch(e=>console.error(`[firewall-audit] connect failed`,e));

package/dist/ui/firewall.html

@@ -3,6 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
     <title>MikroTik Firewall Rules</title>
     <script type="module">
 import{i as e}from"./app-DU6NBjf_.js";import{a as t,i as n,o as r,r as i,t as a}from"./kit-DAVkZl3Q.js";var o=`show_firewall_filter`,s=document.getElementById(`app`),c=null,l=``,u=!1,d=[`protocol`,`src-address`,`dst-address`,`src-port`,`dst-port`,`in-interface`,`out-interface`,`in-interface-list`,`out-interface-list`,`connection-state`,`src-address-list`,`dst-address-list`];function f(e){return e===`accept`?`act is-accept`:e===`drop`||e===`reject`?`act is-drop`:e===`jump`||e===`return`?`act is-jump`:`act`}function p(e){let t=Number(e);if(!e||Number.isNaN(t))return e??`—`;if(t<1e3)return String(t);let n=[`k`,`M`,`G`,`T`],r=-1,i=t;for(;i>=1e3&&r<n.length-1;)i/=1e3,r++;return`${i.toFixed(1)}${n[r]}`}function m(e){let t=[];for(let r of d)e[r]&&t.push(n(`span`,{},`${r}=`,n(`b`,{},e[r])));let r=n(`td`,{class:`matchers`});return t.forEach((e,t)=>{t&&r.append(document.createTextNode(`  `)),r.append(e)}),t.length||r.append(document.createTextNode(e.comment??`—`)),r}function h(e){let t=l.trim().toLowerCase();return t?e.rows.filter(e=>Object.values(e).some(e=>e.toLowerCase().includes(t))):e.rows}function g(e){let t=(e.flags??``).includes(`X`),r=e.action??`—`,i=n(`tr`,t?{class:`is-disabled`}:{});return i.append(n(`td`,{class:`col-num`},e[`#`]??`—`),n(`td`,{},e.chain??`—`),n(`td`,{},n(`span`,{class:f(r)},r)),m(e),n(`td`,{class:`num`},p(e.packets)),n(`td`,{class:`num`},p(e.bytes))),i}function _(){if(!c){s.replaceChildren(n(`div`,{class:`skeleton`},`Waiting for firewall rules…`));return}let e=c,r=h(e),o=e.rows.filter(e=>(e.flags??``).includes(`X`)).length,f=n(`input`,{class:`search`,type:`search`,placeholder:`Search ${e.rows.length} rule(s)…`,value:l});f.addEventListener(`input`,()=>{l=f.value,_()});let p=n(`header`,{class:`hd`},n(`span`,{class:`hd__dot`}),n(`div`,{},n(`h1`,{class:`hd__title`},`Firewall — Filter`),n(`p`,{class:`hd__sub`},`${e.rows.length} rules · ${o} disabled`)),n(`span`,{class:`hd__spacer`}),n(`span`,{class:`pill`},`device `,n(`b`,{},e.device))),m=n(`div`,{class:`toolbar`},n(`div`,{class:`grow`},f),a(u?`Refreshing…`:`↻ Refresh`,b,{disabled:u}),a(`CSV`,()=>{let n=[`#`,`chain`,`action`,...d,`packets`,`bytes`];i(`firewall-${e.chain}.csv`,t(n,h(e)),`text/csv`)},{title:`Export visible rules as CSV`})),v;v=e.rows.length?r.length?n(`div`,{class:`tablewrap`},n(`table`,{class:`tbl`},n(`thead`,{},n(`tr`,{},n(`th`,{class:`col-num`},`#`),n(`th`,{},`chain`),n(`th`,{},`action`),n(`th`,{},`matchers`),n(`th`,{class:`num`},`packets`),n(`th`,{class:`num`},`bytes`))),n(`tbody`,{},...r.map(g)))):n(`div`,{class:`empty`},`No rules match the search.`):n(`div`,{class:`empty`},`No filter rules configured.`);let y=n(`footer`,{class:`foot`},n(`span`,{class:`grow`}),n(`span`,{},`updated ${new Date(e.generatedAt).toLocaleTimeString()}`));s.replaceChildren(p,m,v,y)}var v=new e({name:`mikrotik-firewall`,version:`1.0.0`});function y(e){e&&typeof e==`object`&&e.__mikrotikView===`firewall`&&(c=e,_())}async function b(){if(!u){u=!0,_();try{y((await v.callServerTool({name:o,arguments:{}})).structuredContent)}catch(e){console.error(`[firewall] refresh failed`,e)}finally{u=!1,_()}}}v.ontoolresult=e=>y(e.structuredContent),v.ontoolinput=()=>{c||_()},r(v),v.onteardown=async()=>({}),_(),v.connect().catch(e=>console.error(`[firewall] connect failed`,e));

package/dist/ui/interfaces.html

@@ -3,6 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
     <title>MikroTik Interfaces</title>
     <script type="module">
 import{i as e}from"./app-DU6NBjf_.js";import{i as t,o as n,t as r}from"./kit-DAVkZl3Q.js";var i=`show_interfaces`,a=document.getElementById(`app`),o=null,s=``,c=!1;function l(e){return(e.flags??``).includes(`R`)||e.running===`true`}function u(e){return(e.flags??``).includes(`X`)||e.disabled===`true`}function d(e,n){return!!n&&t(`div`,{class:`contents`},t(`span`,{},e),t(`b`,{},n))}function f(e){let n=u(e),r=n?`dot is-down`:l(e)?`dot is-up`:`dot`,i=t(`div`,{class:`if-card__meta`},d(`MTU`,e.mtu??e[`actual-mtu`]),d(`MAC`,e[`mac-address`]),d(`comment`,e.comment));return t(`div`,{class:`card if-card${n?` is-disabled`:``}`},t(`div`,{class:`if-card__top`},t(`span`,{class:r}),t(`span`,{class:`if-card__name`},e.name??`?`),t(`span`,{class:`badge`},e.type??`—`)),i)}function p(e){let t=s.trim().toLowerCase();return t?e.rows.filter(e=>Object.values(e).some(e=>e.toLowerCase().includes(t))):e.rows}function m(){if(!o){a.replaceChildren(t(`div`,{class:`skeleton`},`Waiting for interfaces…`));return}let e=o,n=p(e),i=e.rows.filter(l).length,d=e.rows.filter(u).length,h=t(`input`,{class:`search`,type:`search`,placeholder:`Search ${e.rows.length} interface(s)…`,value:s});h.addEventListener(`input`,()=>{s=h.value,m()});let g=t(`header`,{class:`hd`},t(`span`,{class:`hd__dot`}),t(`div`,{},t(`h1`,{class:`hd__title`},`Interfaces`),t(`p`,{class:`hd__sub`},`${i} running · ${d} disabled · ${e.rows.length} total`)),t(`span`,{class:`hd__spacer`}),t(`span`,{class:`pill`},`device `,t(`b`,{},e.device))),v=t(`div`,{class:`toolbar`},t(`div`,{class:`grow`},h),r(c?`Refreshing…`:`↻ Refresh`,_,{disabled:c})),y=n.length?t(`section`,{class:`if-grid`},...n.map(f)):t(`div`,{class:`empty`},`No interfaces match the search.`),b=t(`footer`,{class:`foot`},t(`span`,{class:`grow`}),t(`span`,{},`updated ${new Date(e.generatedAt).toLocaleTimeString()}`));a.replaceChildren(g,v,y,b)}var h=new e({name:`mikrotik-interfaces`,version:`1.0.0`});function g(e){e&&typeof e==`object`&&e.__mikrotikView===`interfaces`&&(o=e,m())}async function _(){if(!c){c=!0,m();try{g((await h.callServerTool({name:i,arguments:{}})).structuredContent)}catch(e){console.error(`[interfaces] refresh failed`,e)}finally{c=!1,m()}}}h.ontoolresult=e=>g(e.structuredContent),h.ontoolinput=()=>{o||m()},n(h),h.onteardown=async()=>({}),m(),h.connect().catch(e=>console.error(`[interfaces] connect failed`,e));

package/dist/ui/records.html

@@ -3,6 +3,7 @@
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="color-scheme" content="light dark" />
     <title>MikroTik Records Viewer</title>
     <script type="module">
 import{i as e}from"./app-DU6NBjf_.js";import{a as t,i as n,n as r,o as i,r as a,t as o}from"./kit-DAVkZl3Q.js";var s=document.getElementById(`app`),c=null,l=``,u=null,d=1,f=new Set,p=null,m=!1,h=0,g=null,_={};function v(e){let t=[`#`,`flags`].filter(t=>e.columns.includes(t));return[...t,...e.columns.filter(e=>!t.includes(e))]}function y(e){let t=l.trim().toLowerCase(),n=e.rows;if(t&&(n=n.filter(e=>Object.values(e).some(e=>e.toLowerCase().includes(t)))),f.size&&(n=n.filter(e=>{let t=e.flags??``;return[...f].every(e=>t.includes(e))})),u){let e=u;n=[...n].sort((t,n)=>{let r=t[e]??``,i=n[e]??``,a=Number(r),o=Number(i);return(r!==``&&i!==``&&!Number.isNaN(a)&&!Number.isNaN(o)?a-o:r.localeCompare(i))*d})}return n}function b(e){let t=new Set;for(let n of e.rows)for(let e of n.flags??``)t.add(e);return[...t].sort()}function x(e){return Object.entries(e).filter(([e])=>e!==`#`&&e!==`flags`).map(([e,t])=>/\s/.test(t)?`${e}="${t}"`:`${e}=${t}`).join(` `)}function S(e){let t=b(e);return t.length?n(`div`,{class:`toolbar`},...t.map(t=>{let n=e.flags[t]??t,r=f.has(t);return o(`${t} · ${n}`,()=>{r?f.delete(t):f.add(t),j()},{class:r?`is-active`:``,title:`Filter rows flagged "${n}"`})})):!1}function C(e){let t=n(`th`,e===`#`?{class:`col-num`}:{},e);return u===e&&t.append(n(`span`,{class:`arrow`},d===1?`▲`:`▼`)),t.addEventListener(`click`,()=>{u===e?d=d===1?-1:1:(u=e,d=1),j()}),t}function w(e,t){let r=v(e),i=n(`thead`,{},n(`tr`,{},...r.map(C))),a=n(`tbody`);return t.forEach(t=>{let i=n(`tr`,(t.flags??``).includes(`X`)?{class:`is-disabled`}:{});for(let e of r)i.append(n(`td`,e===`#`?{class:`col-num`}:{},t[e]??`—`));i.addEventListener(`click`,()=>{p=e.rows.indexOf(t),j()}),a.append(i)}),n(`div`,{class:`tablewrap`},n(`table`,{class:`tbl`},i,a))}function T(e){let t=n(`div`,{class:`kv__body`});for(let[r,i]of Object.entries(e))t.append(n(`div`,{class:`kv__k`},r),n(`div`,{class:`kv__v`},i||`—`));return t}function E(e){if(p==null||!e.rows[p])return!1;let t=e.rows[p],i=t.name??t[`#`]??`record`;return n(`div`,{class:`drawer`},n(`div`,{class:`drawer__hd`},n(`span`,{},`Row `),n(`b`,{},String(i)),n(`span`,{class:`hd__spacer`}),o(`Copy as CLI`,()=>void r(x(t)),{title:`Copy key=value pairs`}),o(`Close`,()=>{p=null,j()})),T(t))}function D(e,i){let s=n(`input`,{class:`search`,type:`search`,placeholder:`Search ${e.count} row${e.count===1?``:`s`}…`,value:l});s.addEventListener(`input`,()=>{l=s.value,p=null,k()});let c=n(`select`,{class:`btn`,title:`Auto-refresh interval`});for(let[e,t]of[[`Auto: off`,`0`],[`Auto: 5s`,`5000`],[`Auto: 15s`,`15000`],[`Auto: 60s`,`60000`]]){let r=n(`option`,{value:t},e);Number(t)===h&&(r.selected=!0),c.append(r)}c.addEventListener(`change`,()=>F(Number(c.value)));let u=()=>y(e),d=v(e);return n(`div`,{class:`toolbar`},n(`div`,{class:`grow`},s),o(m?`Refreshing…`:`↻ Refresh`,P,{disabled:m}),c,o(`CSV`,()=>a(`${e.tool}.csv`,t(d,u()),`text/csv`),{title:`Export visible rows as CSV`}),o(`JSON`,()=>a(`${e.tool}.json`,JSON.stringify(u(),null,2),`application/json`),{title:`Export visible rows as JSON`}),o(`Copy`,()=>void r(JSON.stringify(u(),null,2)),{title:`Copy visible rows as JSON`}),n(`span`,{class:`pill count-pill`},`showing `,n(`b`,{},`${i}/${e.count}`)))}function O(e){return n(`header`,{class:`hd`},n(`span`,{class:`hd__dot`}),n(`div`,{},n(`h1`,{class:`hd__title`},e.title),n(`p`,{class:`hd__sub`},e.tool)),n(`span`,{class:`hd__spacer`}))}function k(){if(!c)return;let e=document.getElementById(`results`);if(!e){j();return}e.replaceChildren(A(c));let t=document.querySelector(`.count-pill b`);t&&(t.textContent=`${y(c).length}/${c.count}`)}function A(e){let t=y(e);return e.rows.length===0?e.raw?n(`pre`,{class:`raw`},e.raw):n(`div`,{class:`empty`},`No records returned.`):e.kind===`record`&&e.rows.length===1?T(e.rows[0]):t.length===0?n(`div`,{class:`empty`},`No rows match the current filter.`):w(e,t)}function j(){if(!c){s.replaceChildren(n(`div`,{class:`skeleton`},`Waiting for data…`));return}let e=c,t=y(e).length,r=e.kind===`list`&&e.rows.length>0,i=[O(e),r&&D(e,t),r&&S(e),n(`div`,{id:`results`},A(e)),E(e),n(`footer`,{class:`foot`},n(`span`,{},`format: ${e.format}`),n(`span`,{class:`grow`}),n(`span`,{},`updated ${new Date(e.generatedAt).toLocaleTimeString()}`))];s.replaceChildren(...i.filter(Boolean))}var M=new e({name:`mikrotik-records`,version:`1.0.0`});function N(e){e&&typeof e==`object`&&e.__mikrotikView===`records`&&(c=e,p=null,j())}async function P(){if(!(m||!c)){m=!0,j();try{N((await M.callServerTool({name:c.tool,arguments:_})).structuredContent)}catch(e){console.error(`[records] refresh failed`,e)}finally{m=!1,j()}}}function F(e){h=e,g&&=(clearInterval(g),null),e>0&&(g=setInterval(()=>void P(),e)),j()}M.ontoolresult=e=>N(e.structuredContent),M.ontoolinput=e=>{e&&typeof e==`object`&&`arguments`in e&&(_=e.arguments??{}),c||j()},i(M),M.onteardown=async()=>(g&&clearInterval(g),{}),j(),M.connect().catch(e=>console.error(`[records] connect failed`,e));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.21.0",
+  "version": "3.23.0",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",