@usex/mikrotik-mcp 3.36.0 → 3.38.0

package/dist/cli.js

@@ -84,7 +84,7 @@ import {
   toggleAaaEntity,
   updateAaaEntity,
   writeBackup
-} from "./shared/cli-3580mf22.js";
+} from "./shared/cli-e484wzek.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";
@@ -1948,6 +1948,90 @@ async function runDashboard(cfg, transportLabel) {
     const bearer = req.headers.get("authorization")?.replace(/^Bearer\s+/i, "");
     return bearer === cfg.token || url.searchParams.get("token") === cfg.token;
   };
+  async function dashboardRoute(req, url, srv, ca, tl) {
+    if (url.pathname === "/api/stream") {
+      if (srv.upgrade(req, { data: {} }))
+        return;
+      return new Response("WebSocket upgrade failed", { status: 400 });
+    }
+    if (url.pathname === "/api/sse") {
+      return sseResponse(tl);
+    }
+    const configResp = await configRoutes(req, url, ca);
+    if (configResp)
+      return configResp;
+    const modulesResp = await modulesRoutes(req, url);
+    if (modulesResp)
+      return modulesResp;
+    const captureResp = await captureRoutes(req, url);
+    if (captureResp)
+      return captureResp;
+    const clientsResp = await clientsRoutes(req, url);
+    if (clientsResp)
+      return clientsResp;
+    const aaaResp = await aaaRoutes(req, url);
+    if (aaaResp)
+      return aaaResp;
+    const usageResp = await usageRoutes(req, url);
+    if (usageResp)
+      return usageResp;
+    const featureResp = await featureRoutes(req, url);
+    if (featureResp)
+      return featureResp;
+    const db = getEventStore();
+    if (!db)
+      return json({ error: "recorder not active" }, 503);
+    if (url.pathname === "/api/events" && req.method === "DELETE") {
+      let body = {};
+      try {
+        body = await req.json();
+      } catch {}
+      const ids = Array.isArray(body.ids) ? body.ids.filter((x) => typeof x === "string") : [];
+      const removed = body.all === true ? db.clear() : db.delete(ids);
+      return json({ removed, total: db.total() });
+    }
+    if (url.pathname === "/api/devices") {
+      return json(devicesPayload(db));
+    }
+    if (url.pathname === "/api/topology") {
+      return json(topologyPayload());
+    }
+    if (url.pathname === "/api/config") {
+      return json(configPayload());
+    }
+    if (url.pathname === "/" || url.pathname === "/index.html") {
+      return new Response(dashboardHtml(), {
+        headers: { "content-type": "text/html; charset=utf-8" }
+      });
+    }
+    if (url.pathname === "/api/meta") {
+      const f = facets(db);
+      return json({
+        ...f,
+        risks: ["READ", "WRITE", "WRITE_IDEMPOTENT", "DESTRUCTIVE", "DANGEROUS"],
+        total: db.total(),
+        liveClients: subscriberCount(),
+        transport: tl
+      });
+    }
+    if (url.pathname === "/api/events") {
+      const filter = filterFromQuery(url);
+      return json({ events: db.query(filter), total: db.total() });
+    }
+    const eventMatch = url.pathname.match(/^\/api\/event\/(.+)$/);
+    if (eventMatch) {
+      const e = db.get(decodeURIComponent(eventMatch[1]));
+      return e ? json(e) : json({ error: "not found" }, 404);
+    }
+    if (url.pathname === "/api/stats") {
+      const now = Date.now();
+      const windowMs = Number(url.searchParams.get("window") ?? 3600000);
+      const buckets = Number(url.searchParams.get("buckets") ?? 60);
+      const events = db.query({ since: now - windowMs, limit: 5000 });
+      return json(computeStats(events, { now, windowMs, buckets }));
+    }
+    return new Response("Not Found", { status: 404 });
+  }
   const server = serve({
     hostname: cfg.host,
     port: cfg.port,
@@ -1959,88 +2043,13 @@ async function runDashboard(cfg, transportLabel) {
       if (!tokenOk(req, url)) {
         return new Response("Unauthorized", { status: 401 });
       }
-      if (url.pathname === "/api/stream") {
-        if (srv.upgrade(req, { data: {} }))
-          return;
-        return new Response("WebSocket upgrade failed", { status: 400 });
-      }
-      if (url.pathname === "/api/sse") {
-        return sseResponse(transportLabel);
-      }
-      const configResp = await configRoutes(req, url, configAdmin);
-      if (configResp)
-        return configResp;
-      const modulesResp = await modulesRoutes(req, url);
-      if (modulesResp)
-        return modulesResp;
-      const captureResp = await captureRoutes(req, url);
-      if (captureResp)
-        return captureResp;
-      const clientsResp = await clientsRoutes(req, url);
-      if (clientsResp)
-        return clientsResp;
-      const aaaResp = await aaaRoutes(req, url);
-      if (aaaResp)
-        return aaaResp;
-      const usageResp = await usageRoutes(req, url);
-      if (usageResp)
-        return usageResp;
-      const featureResp = await featureRoutes(req, url);
-      if (featureResp)
-        return featureResp;
-      const db = getEventStore();
-      if (!db)
-        return json({ error: "recorder not active" }, 503);
-      if (url.pathname === "/api/events" && req.method === "DELETE") {
-        let body = {};
-        try {
-          body = await req.json();
-        } catch {}
-        const ids = Array.isArray(body.ids) ? body.ids.filter((x) => typeof x === "string") : [];
-        const removed = body.all === true ? db.clear() : db.delete(ids);
-        return json({ removed, total: db.total() });
-      }
-      if (url.pathname === "/api/devices") {
-        return json(devicesPayload(db));
-      }
-      if (url.pathname === "/api/topology") {
-        return json(topologyPayload());
-      }
-      if (url.pathname === "/api/config") {
-        return json(configPayload());
-      }
-      if (url.pathname === "/" || url.pathname === "/index.html") {
-        return new Response(dashboardHtml(), {
-          headers: { "content-type": "text/html; charset=utf-8" }
-        });
-      }
-      if (url.pathname === "/api/meta") {
-        const f = facets(db);
-        return json({
-          ...f,
-          risks: ["READ", "WRITE", "WRITE_IDEMPOTENT", "DESTRUCTIVE", "DANGEROUS"],
-          total: db.total(),
-          liveClients: subscriberCount(),
-          transport: transportLabel
-        });
-      }
-      if (url.pathname === "/api/events") {
-        const filter = filterFromQuery(url);
-        return json({ events: db.query(filter), total: db.total() });
-      }
-      const eventMatch = url.pathname.match(/^\/api\/event\/(.+)$/);
-      if (eventMatch) {
-        const e = db.get(decodeURIComponent(eventMatch[1]));
-        return e ? json(e) : json({ error: "not found" }, 404);
-      }
-      if (url.pathname === "/api/stats") {
-        const now = Date.now();
-        const windowMs = Number(url.searchParams.get("window") ?? 3600000);
-        const buckets = Number(url.searchParams.get("buckets") ?? 60);
-        const events = db.query({ since: now - windowMs, limit: 5000 });
-        return json(computeStats(events, { now, windowMs, buckets }));
+      try {
+        return await dashboardRoute(req, url, srv, configAdmin, transportLabel);
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        logger.error(`Dashboard request failed (${url.pathname}): ${msg}`);
+        return json({ error: msg }, 502);
       }
-      return new Response("Not Found", { status: 404 });
     },
     websocket: {
       open(ws) {
@@ -2233,7 +2242,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.36.0",
+  version: "3.38.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/index.d.ts

@@ -240,6 +240,12 @@ declare class MikroTikSSHClient {
 	* Resolves on success; rejects with a clear reason on failure.
 	*/
 	uploadFile(remotePath: string, data: Buffer): Promise<void>;
+	/**
+	* Download a file's bytes from the device over SFTP. `remotePath` is relative
+	* to the SFTP default directory (the flash root). Resolves with the raw file
+	* contents; rejects with a clear reason on failure.
+	*/
+	downloadFile(remotePath: string): Promise<Buffer>;
 	/** Open a persistent interactive shell channel (used by Safe Mode). */
 	shell(opts?: {
 		term?: string;

package/dist/index.js

@@ -21,7 +21,7 @@ import {
   resolveDeviceName,
   selectToolModules,
   setConfig
-} from "./shared/library-jm3khjrr.js";
+} from "./shared/library-nxh3rb8t.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
@@ -131,7 +131,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.36.0",
+  version: "3.38.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/shared/{cli-3580mf22.js → cli-e484wzek.js}

@@ -906,6 +906,29 @@ class MikroTikSSHClient {
       });
     });
   }
+  downloadFile(remotePath) {
+    if (!this.client) {
+      return Promise.reject(new Error("Not connected to MikroTik device"));
+    }
+    const openSftp = this.client.sftp.bind(this.client);
+    return new Promise((resolve2, reject) => {
+      openSftp((err, sftp) => {
+        if (err) {
+          reject(new Error(`SFTP subsystem unavailable: ${err.message}`));
+          return;
+        }
+        sftp.readFile(remotePath, (rerr, data) => {
+          try {
+            sftp.end();
+          } catch {}
+          if (rerr)
+            reject(new Error(`SFTP read failed: ${rerr.message}`));
+          else
+            resolve2(data);
+        });
+      });
+    });
+  }
   shell(opts = {}) {
     if (!this.client) {
       return Promise.reject(new Error("Not connected to MikroTik device"));
@@ -1258,6 +1281,22 @@ async function uploadFileToDevice(deviceName, remotePath, data) {
     ssh.disconnect();
   }
 }
+async function downloadFileFromDevice(deviceName, remotePath) {
+  const name = resolveDeviceName(deviceName);
+  const dc = getDevice(deviceName);
+  if (isMacTelnetDevice(dc)) {
+    throw new Error(`Cannot download a file from '${name}': it is reached over Layer-2 MAC-Telnet, which has no ` + "file transfer. Configure SSH (host + credentials) for this device, or use a text export " + "(stdout mode) instead of a binary backup.");
+  }
+  const ssh = new MikroTikSSHClient({ ...sshOptionsOf(dc), jump: resolveJump(dc) });
+  if (!await ssh.connect()) {
+    throw new Error(connectErrorMessage(name, dc, ssh.lastError));
+  }
+  try {
+    return await ssh.downloadFile(remotePath);
+  } finally {
+    ssh.disconnect();
+  }
+}
 
 // src/core/registry.ts
 import { z as z2 } from "zod";
@@ -2759,6 +2798,158 @@ ${rows.slice(0, 40).map((r) => `  \u2022 ${r.name ?? "?"} (${r.type ?? "?"})${r.
 // src/tools/backup.ts
 import { z as z5 } from "zod";
 
+// src/backups/disk-check.ts
+var DISK_THRESHOLD_PCT = 90;
+async function checkDiskSpace(ctx) {
+  try {
+    const raw = await executeMikrotikCommand("/system resource print", ctx);
+    const sys = parseSystemResource(raw);
+    if (!sys || sys.hddUsedPct == null) {
+      return { low: false };
+    }
+    return {
+      low: sys.hddUsedPct >= DISK_THRESHOLD_PCT,
+      usedPct: sys.hddUsedPct,
+      freeBytes: sys.freeHdd,
+      totalBytes: sys.totalHdd
+    };
+  } catch {
+    return { low: false };
+  }
+}
+
+// src/backups/vault.ts
+import {
+  existsSync as existsSync2,
+  mkdirSync,
+  readFileSync as readFileSync4,
+  readdirSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeFileSync
+} from "fs";
+import { basename, join as join4 } from "path";
+function backupDir() {
+  if (process.env.MIKROTIK_BACKUP_DIR)
+    return process.env.MIKROTIK_BACKUP_DIR;
+  try {
+    const dir = getConfig().backupDir;
+    if (dir)
+      return dir;
+  } catch {}
+  return DEFAULT_BACKUP_DIR;
+}
+function safeName(name) {
+  const base = basename(name);
+  if (base !== name || base === "." || base === ".." || !/^[A-Za-z0-9._-]+$/.test(base)) {
+    throw new Error(`invalid backup name: ${name}`);
+  }
+  return base;
+}
+function listBackups() {
+  const dir = backupDir();
+  if (!existsSync2(dir))
+    return [];
+  return readdirSync(dir).filter((f) => f.endsWith(".rsc") || f.endsWith(".backup")).map((f) => {
+    const st = statSync(join4(dir, f));
+    const us = f.indexOf("_");
+    return {
+      name: f,
+      bytes: st.size,
+      modified: st.mtimeMs,
+      device: us > 0 ? f.slice(0, us) : undefined,
+      type: f.endsWith(".backup") ? "backup" : "rsc"
+    };
+  }).sort((a, b) => b.modified - a.modified);
+}
+function readBackup(name) {
+  return readFileSync4(join4(backupDir(), safeName(name)), "utf8");
+}
+function writeBackup(name, content) {
+  const dir = backupDir();
+  mkdirSync(dir, { recursive: true });
+  let final = safeName(name);
+  if (existsSync2(join4(dir, final))) {
+    const dot = final.lastIndexOf(".");
+    const stem = dot > 0 ? final.slice(0, dot) : final;
+    const ext = dot > 0 ? final.slice(dot) : "";
+    let n = 2;
+    while (existsSync2(join4(dir, `${stem}_${n}${ext}`)))
+      n++;
+    final = `${stem}_${n}${ext}`;
+  }
+  writeFileSync(join4(dir, final), content, "utf8");
+  return final;
+}
+function writeBinaryBackup(name, data) {
+  const dir = backupDir();
+  mkdirSync(dir, { recursive: true });
+  let final = safeName(name);
+  if (existsSync2(join4(dir, final))) {
+    const dot = final.lastIndexOf(".");
+    const stem = dot > 0 ? final.slice(0, dot) : final;
+    const ext = dot > 0 ? final.slice(dot) : "";
+    let n = 2;
+    while (existsSync2(join4(dir, `${stem}_${n}${ext}`)))
+      n++;
+    final = `${stem}_${n}${ext}`;
+  }
+  writeFileSync(join4(dir, final), data);
+  return final;
+}
+function deleteBackup(name) {
+  const p = join4(backupDir(), safeName(name));
+  if (!existsSync2(p))
+    return false;
+  rmSync(p);
+  return true;
+}
+function renameBackup(oldName, newName) {
+  const dir = backupDir();
+  const from = join4(dir, safeName(oldName));
+  let to = safeName(newName);
+  if (!to.endsWith(".rsc"))
+    to += ".rsc";
+  const toPath = join4(dir, to);
+  if (!existsSync2(from))
+    throw new Error(`backup not found: ${oldName}`);
+  if (existsSync2(toPath))
+    throw new Error(`a backup named '${to}' already exists`);
+  renameSync(from, toPath);
+  return to;
+}
+function exportToCommands(text) {
+  const lines = [];
+  let buf = "";
+  for (const raw of text.split(`
+`)) {
+    const line = raw.replace(/\r$/, "");
+    buf = buf ? `${buf} ${line.trim()}` : line;
+    if (buf.trimEnd().endsWith("\\")) {
+      buf = buf.trimEnd().slice(0, -1).trimEnd();
+      continue;
+    }
+    lines.push(buf);
+    buf = "";
+  }
+  if (buf)
+    lines.push(buf);
+  const cmds = [];
+  let section = "";
+  for (const line of lines) {
+    const t = line.trim();
+    if (!t || t.startsWith("#"))
+      continue;
+    if (t.startsWith("/")) {
+      section = t;
+      continue;
+    }
+    cmds.push(section ? `${section} ${t}` : t);
+  }
+  return cmds;
+}
+
 // src/core/datestamp.ts
 var MONTHS2 = ["jan", "feb", "mar", "apr", "may", "jun", "jul", "aug", "sep", "oct", "nov", "dec"];
 function pad(n) {
@@ -2831,6 +3022,12 @@ async function deviceDateStamp(ctx) {
   return hostStamp(new Date);
 }
 
+// src/core/slug.ts
+function deviceSlug(name) {
+  const s = (name ?? "").replace(/[^A-Za-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
+  return s || "device";
+}
+
 // src/tools/backup.ts
 var backupTools = [
   defineTool({
@@ -2847,6 +3044,7 @@ var backupTools = [
     async handler(a, ctx) {
       const name = a.name || `backup_${await deviceDateStamp(ctx)}`;
       ctx.info(`Creating backup: name=${name}`);
+      const disk = await checkDiskSpace(ctx);
       const cmd = new Cmd("/system backup save").set("name", name);
       if (a.dont_encrypt)
         cmd.raw("dont-encrypt=yes");
@@ -2855,13 +3053,35 @@ var backupTools = [
       if (!a.include_password)
         cmd.raw("password-file=no");
       const result = await executeMikrotikCommand(cmd.build(), ctx);
-      if (result.includes("saved") || result.trim() === "") {
-        const fileDetails = await executeMikrotikCommand(`/file print detail where name=${name}.backup`, ctx);
-        return fileDetails ? `Backup created successfully:
+      if (!(result.includes("saved") || result.trim() === "")) {
+        if (disk.low) {
+          return `Failed to create backup (device disk is ${disk.usedPct?.toFixed(0)}% used): ${result}
 
-${fileDetails}` : `Backup '${name}.backup' created successfully.`;
+` + "Tip: use create_local_backup or create_export instead \u2014 text exports can be captured " + "directly to the local vault without using any device disk space.";
+        }
+        return `Failed to create backup: ${result}`;
+      }
+      if (disk.low) {
+        const dc = getDevice(ctx.device);
+        if (isMacTelnetDevice(dc)) {
+          return `Backup '${name}.backup' created on device, but disk is ${disk.usedPct?.toFixed(0)}% used. ` + "This is a MAC-Telnet device (no SFTP), so the file cannot be downloaded automatically. " + "Free disk space manually or use create_local_backup for a text export that bypasses device storage.";
+        }
+        const deviceFile = `${name}.backup`;
+        try {
+          ctx.info(`Low disk (${disk.usedPct?.toFixed(0)}%) \u2014 downloading backup to local vault`);
+          const data = await downloadFileFromDevice(ctx.device, deviceFile);
+          const device = resolveDeviceName(ctx.device);
+          const vaultName = writeBinaryBackup(`${deviceSlug(device)}_${deviceFile}`, data);
+          await executeMikrotikCommand(`/file remove ${deviceFile}`, ctx);
+          return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Backup '${deviceFile}' created, downloaded to ` + `local vault as '${vaultName}' (${data.length} bytes) at ${backupDir()}, and removed from ` + "the device to free disk space.";
+        } catch (e) {
+          return `Backup '${name}.backup' created on device, but the automatic download-and-cleanup ` + `failed: ${e instanceof Error ? e.message : String(e)}. The file is still on the device. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies for SFTP downloads to work.";
+        }
       }
-      return `Failed to create backup: ${result}`;
+      const fileDetails = await executeMikrotikCommand(`/file print detail where name=${name}.backup`, ctx);
+      return fileDetails ? `Backup created successfully:
+
+${fileDetails}` : `Backup '${name}.backup' created successfully.`;
     }
   }),
   defineTool({
@@ -2910,6 +3130,21 @@ ${result}`;
     async handler(a, ctx) {
       const name = a.name || `export_${await deviceDateStamp(ctx)}`;
       ctx.info(`Creating export: name=${name}, format=${a.file_format}`);
+      const disk = await checkDiskSpace(ctx);
+      if (disk.low) {
+        ctx.info(`Low disk (${disk.usedPct?.toFixed(0)}%) \u2014 redirecting export to local vault`);
+        const cmd2 = new Cmd("/export");
+        cmd2.raw(a.verbose ? "verbose" : null);
+        cmd2.raw(a.compact ? "compact" : null);
+        cmd2.raw(!a.hide_sensitive ? "show-sensitive" : null);
+        const body = await executeMikrotikCommand(cmd2.build(), ctx);
+        if (isEmpty(body) || looksLikeError(body)) {
+          return `Failed to create export: ${body}`;
+        }
+        const device = resolveDeviceName(ctx.device);
+        const vaultName = writeBackup(`${deviceSlug(device)}_${name}.rsc`, body);
+        return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Export saved to LOCAL VAULT as '${vaultName}' ` + `(${Buffer.byteLength(body)} bytes) at ${backupDir()} \u2014 no file was written to the device.`;
+      }
       const extension = a.file_format === "json" || a.file_format === "xml" ? a.file_format : "rsc";
       const fullName = `${name}.${extension}`;
       const cmd = new Cmd("/export");
@@ -2948,6 +3183,20 @@ ${fileDetails}` : `Export '${fullName}' created successfully.`;
         name = `export_${cleanSection}_${await deviceDateStamp(ctx)}`;
       }
       ctx.info(`Exporting section: section=${a.section}, name=${name}`);
+      const disk = await checkDiskSpace(ctx);
+      if (disk.low) {
+        ctx.info(`Low disk (${disk.usedPct?.toFixed(0)}%) \u2014 redirecting section export to local vault`);
+        const cmd2 = new Cmd(`/${a.section} export`);
+        cmd2.raw(!a.hide_sensitive ? "show-sensitive" : null);
+        cmd2.raw(a.compact ? "compact" : null);
+        const body = await executeMikrotikCommand(cmd2.build(), ctx);
+        if (isEmpty(body) || looksLikeError(body)) {
+          return `Failed to export section: ${body}`;
+        }
+        const device = resolveDeviceName(ctx.device);
+        const vaultName = writeBackup(`${deviceSlug(device)}_${name}.rsc`, body);
+        return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Section export saved to LOCAL VAULT as ` + `'${vaultName}' (${Buffer.byteLength(body)} bytes) at ${backupDir()} \u2014 no file was written ` + "to the device.";
+      }
       const cmd = new Cmd(`/${a.section} export`).set("file", name);
       cmd.raw(!a.hide_sensitive ? "show-sensitive" : null);
       cmd.raw(a.compact ? "compact" : null);
@@ -3098,127 +3347,6 @@ ${result}`;
 // src/tools/local-backup.ts
 import { z as z6 } from "zod";
 
-// src/core/slug.ts
-function deviceSlug(name) {
-  const s = (name ?? "").replace(/[^A-Za-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
-  return s || "device";
-}
-
-// src/backups/vault.ts
-import {
-  existsSync as existsSync2,
-  mkdirSync,
-  readFileSync as readFileSync4,
-  readdirSync,
-  renameSync,
-  rmSync,
-  statSync,
-  writeFileSync
-} from "fs";
-import { basename, join as join4 } from "path";
-function backupDir() {
-  if (process.env.MIKROTIK_BACKUP_DIR)
-    return process.env.MIKROTIK_BACKUP_DIR;
-  try {
-    const dir = getConfig().backupDir;
-    if (dir)
-      return dir;
-  } catch {}
-  return DEFAULT_BACKUP_DIR;
-}
-function safeName(name) {
-  const base = basename(name);
-  if (base !== name || base === "." || base === ".." || !/^[A-Za-z0-9._-]+$/.test(base)) {
-    throw new Error(`invalid backup name: ${name}`);
-  }
-  return base;
-}
-function listBackups() {
-  const dir = backupDir();
-  if (!existsSync2(dir))
-    return [];
-  return readdirSync(dir).filter((f) => f.endsWith(".rsc")).map((f) => {
-    const st = statSync(join4(dir, f));
-    const us = f.indexOf("_");
-    return {
-      name: f,
-      bytes: st.size,
-      modified: st.mtimeMs,
-      device: us > 0 ? f.slice(0, us) : undefined
-    };
-  }).sort((a, b) => b.modified - a.modified);
-}
-function readBackup(name) {
-  return readFileSync4(join4(backupDir(), safeName(name)), "utf8");
-}
-function writeBackup(name, content) {
-  const dir = backupDir();
-  mkdirSync(dir, { recursive: true });
-  let final = safeName(name);
-  if (existsSync2(join4(dir, final))) {
-    const dot = final.lastIndexOf(".");
-    const stem = dot > 0 ? final.slice(0, dot) : final;
-    const ext = dot > 0 ? final.slice(dot) : "";
-    let n = 2;
-    while (existsSync2(join4(dir, `${stem}_${n}${ext}`)))
-      n++;
-    final = `${stem}_${n}${ext}`;
-  }
-  writeFileSync(join4(dir, final), content, "utf8");
-  return final;
-}
-function deleteBackup(name) {
-  const p = join4(backupDir(), safeName(name));
-  if (!existsSync2(p))
-    return false;
-  rmSync(p);
-  return true;
-}
-function renameBackup(oldName, newName) {
-  const dir = backupDir();
-  const from = join4(dir, safeName(oldName));
-  let to = safeName(newName);
-  if (!to.endsWith(".rsc"))
-    to += ".rsc";
-  const toPath = join4(dir, to);
-  if (!existsSync2(from))
-    throw new Error(`backup not found: ${oldName}`);
-  if (existsSync2(toPath))
-    throw new Error(`a backup named '${to}' already exists`);
-  renameSync(from, toPath);
-  return to;
-}
-function exportToCommands(text) {
-  const lines = [];
-  let buf = "";
-  for (const raw of text.split(`
-`)) {
-    const line = raw.replace(/\r$/, "");
-    buf = buf ? `${buf} ${line.trim()}` : line;
-    if (buf.trimEnd().endsWith("\\")) {
-      buf = buf.trimEnd().slice(0, -1).trimEnd();
-      continue;
-    }
-    lines.push(buf);
-    buf = "";
-  }
-  if (buf)
-    lines.push(buf);
-  const cmds = [];
-  let section = "";
-  for (const line of lines) {
-    const t = line.trim();
-    if (!t || t.startsWith("#"))
-      continue;
-    if (t.startsWith("/")) {
-      section = t;
-      continue;
-    }
-    cmds.push(section ? `${section} ${t}` : t);
-  }
-  return cmds;
-}
-
 // src/backups/create.ts
 function labelSlug(label) {
   const s = (label ?? "").replace(/[^A-Za-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
@@ -6013,7 +6141,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./cli-ckbcx5hs.js");
+  const { moduleCatalog } = await import("./cli-h0gydx8r.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/dist/shared/{cli-ckbcx5hs.js → cli-h0gydx8r.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-3580mf22.js";
+} from "./cli-e484wzek.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{library-jm3khjrr.js → library-nxh3rb8t.js}

@@ -903,6 +903,29 @@ class MikroTikSSHClient {
       });
     });
   }
+  downloadFile(remotePath) {
+    if (!this.client) {
+      return Promise.reject(new Error("Not connected to MikroTik device"));
+    }
+    const openSftp = this.client.sftp.bind(this.client);
+    return new Promise((resolve2, reject) => {
+      openSftp((err, sftp) => {
+        if (err) {
+          reject(new Error(`SFTP subsystem unavailable: ${err.message}`));
+          return;
+        }
+        sftp.readFile(remotePath, (rerr, data) => {
+          try {
+            sftp.end();
+          } catch {}
+          if (rerr)
+            reject(new Error(`SFTP read failed: ${rerr.message}`));
+          else
+            resolve2(data);
+        });
+      });
+    });
+  }
   shell(opts = {}) {
     if (!this.client) {
       return Promise.reject(new Error("Not connected to MikroTik device"));
@@ -1252,6 +1275,22 @@ async function uploadFileToDevice(deviceName, remotePath, data) {
     ssh.disconnect();
   }
 }
+async function downloadFileFromDevice(deviceName, remotePath) {
+  const name = resolveDeviceName(deviceName);
+  const dc = getDevice(deviceName);
+  if (isMacTelnetDevice(dc)) {
+    throw new Error(`Cannot download a file from '${name}': it is reached over Layer-2 MAC-Telnet, which has no ` + "file transfer. Configure SSH (host + credentials) for this device, or use a text export " + "(stdout mode) instead of a binary backup.");
+  }
+  const ssh = new MikroTikSSHClient({ ...sshOptionsOf(dc), jump: resolveJump(dc) });
+  if (!await ssh.connect()) {
+    throw new Error(connectErrorMessage(name, dc, ssh.lastError));
+  }
+  try {
+    return await ssh.downloadFile(remotePath);
+  } finally {
+    ssh.disconnect();
+  }
+}
 
 // src/core/registry.ts
 import { z as z2 } from "zod";
@@ -1465,6 +1504,67 @@ function parseCertExpiry(detail, nowMs) {
   }
   return out;
 }
+function parseSize(s) {
+  if (!s)
+    return;
+  const m = s.trim().match(/^([\d.]+)\s*([KMGT]i?B|B)?$/i);
+  if (!m)
+    return;
+  const val = Number.parseFloat(m[1]);
+  if (!Number.isFinite(val))
+    return;
+  const mult = {
+    B: 1,
+    KIB: 1024,
+    MIB: 1024 ** 2,
+    GIB: 1024 ** 3,
+    TIB: 1024 ** 4,
+    KB: 1000,
+    MB: 1e6,
+    GB: 1e9,
+    TB: 1000000000000
+  };
+  return val * (mult[(m[2] ?? "B").toUpperCase()] ?? 1);
+}
+function parsePercent(s) {
+  if (!s)
+    return;
+  const m = s.trim().match(/^([\d.]+)\s*%?$/);
+  if (!m)
+    return;
+  const v = Number.parseFloat(m[1]);
+  return Number.isFinite(v) ? v : undefined;
+}
+function usedPct(total, free) {
+  if (total == null || free == null || total <= 0)
+    return;
+  return Math.max(0, Math.min(100, (total - free) / total * 100));
+}
+function parseSystemResource(text) {
+  const r = parseKeyValues(text);
+  const totalMemory = parseSize(r["total-memory"]);
+  const freeMemory = parseSize(r["free-memory"]);
+  const totalHdd = parseSize(r["total-hdd-space"]);
+  const freeHdd = parseSize(r["free-hdd-space"]);
+  const cpuLoad = parsePercent(r["cpu-load"]);
+  const cpuCount = Number.parseInt(r["cpu-count"] ?? "", 10);
+  const out = {
+    version: r.version || undefined,
+    boardName: r["board-name"] || undefined,
+    architecture: r["architecture-name"] || undefined,
+    cpuCount: Number.isFinite(cpuCount) ? cpuCount : undefined,
+    cpuLoad,
+    freeMemory,
+    totalMemory,
+    memUsedPct: usedPct(totalMemory, freeMemory),
+    freeHdd,
+    totalHdd,
+    hddUsedPct: usedPct(totalHdd, freeHdd),
+    uptime: r.uptime || undefined
+  };
+  const gotMetric = out.cpuLoad != null || out.totalMemory != null || out.totalHdd != null || out.version != null || out.uptime != null;
+  return gotMetric ? out : null;
+}
 function parseFlagLegend(text) {
   const out = {};
   const line = text.split(`
@@ -2674,6 +2774,158 @@ ${rows.slice(0, 40).map((r) => `  \u2022 ${r.name ?? "?"} (${r.type ?? "?"})${r.
 // src/tools/backup.ts
 import { z as z5 } from "zod";
 
+// src/backups/disk-check.ts
+var DISK_THRESHOLD_PCT = 90;
+async function checkDiskSpace(ctx) {
+  try {
+    const raw = await executeMikrotikCommand("/system resource print", ctx);
+    const sys = parseSystemResource(raw);
+    if (!sys || sys.hddUsedPct == null) {
+      return { low: false };
+    }
+    return {
+      low: sys.hddUsedPct >= DISK_THRESHOLD_PCT,
+      usedPct: sys.hddUsedPct,
+      freeBytes: sys.freeHdd,
+      totalBytes: sys.totalHdd
+    };
+  } catch {
+    return { low: false };
+  }
+}
+
+// src/backups/vault.ts
+import {
+  existsSync as existsSync2,
+  mkdirSync,
+  readFileSync as readFileSync4,
+  readdirSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeFileSync
+} from "fs";
+import { basename, join as join4 } from "path";
+function backupDir() {
+  if (process.env.MIKROTIK_BACKUP_DIR)
+    return process.env.MIKROTIK_BACKUP_DIR;
+  try {
+    const dir = getConfig().backupDir;
+    if (dir)
+      return dir;
+  } catch {}
+  return DEFAULT_BACKUP_DIR;
+}
+function safeName(name) {
+  const base = basename(name);
+  if (base !== name || base === "." || base === ".." || !/^[A-Za-z0-9._-]+$/.test(base)) {
+    throw new Error(`invalid backup name: ${name}`);
+  }
+  return base;
+}
+function listBackups() {
+  const dir = backupDir();
+  if (!existsSync2(dir))
+    return [];
+  return readdirSync(dir).filter((f) => f.endsWith(".rsc") || f.endsWith(".backup")).map((f) => {
+    const st = statSync(join4(dir, f));
+    const us = f.indexOf("_");
+    return {
+      name: f,
+      bytes: st.size,
+      modified: st.mtimeMs,
+      device: us > 0 ? f.slice(0, us) : undefined,
+      type: f.endsWith(".backup") ? "backup" : "rsc"
+    };
+  }).sort((a, b) => b.modified - a.modified);
+}
+function readBackup(name) {
+  return readFileSync4(join4(backupDir(), safeName(name)), "utf8");
+}
+function writeBackup(name, content) {
+  const dir = backupDir();
+  mkdirSync(dir, { recursive: true });
+  let final = safeName(name);
+  if (existsSync2(join4(dir, final))) {
+    const dot = final.lastIndexOf(".");
+    const stem = dot > 0 ? final.slice(0, dot) : final;
+    const ext = dot > 0 ? final.slice(dot) : "";
+    let n = 2;
+    while (existsSync2(join4(dir, `${stem}_${n}${ext}`)))
+      n++;
+    final = `${stem}_${n}${ext}`;
+  }
+  writeFileSync(join4(dir, final), content, "utf8");
+  return final;
+}
+function writeBinaryBackup(name, data) {
+  const dir = backupDir();
+  mkdirSync(dir, { recursive: true });
+  let final = safeName(name);
+  if (existsSync2(join4(dir, final))) {
+    const dot = final.lastIndexOf(".");
+    const stem = dot > 0 ? final.slice(0, dot) : final;
+    const ext = dot > 0 ? final.slice(dot) : "";
+    let n = 2;
+    while (existsSync2(join4(dir, `${stem}_${n}${ext}`)))
+      n++;
+    final = `${stem}_${n}${ext}`;
+  }
+  writeFileSync(join4(dir, final), data);
+  return final;
+}
+function deleteBackup(name) {
+  const p = join4(backupDir(), safeName(name));
+  if (!existsSync2(p))
+    return false;
+  rmSync(p);
+  return true;
+}
+function renameBackup(oldName, newName) {
+  const dir = backupDir();
+  const from = join4(dir, safeName(oldName));
+  let to = safeName(newName);
+  if (!to.endsWith(".rsc"))
+    to += ".rsc";
+  const toPath = join4(dir, to);
+  if (!existsSync2(from))
+    throw new Error(`backup not found: ${oldName}`);
+  if (existsSync2(toPath))
+    throw new Error(`a backup named '${to}' already exists`);
+  renameSync(from, toPath);
+  return to;
+}
+function exportToCommands(text) {
+  const lines = [];
+  let buf = "";
+  for (const raw of text.split(`
+`)) {
+    const line = raw.replace(/\r$/, "");
+    buf = buf ? `${buf} ${line.trim()}` : line;
+    if (buf.trimEnd().endsWith("\\")) {
+      buf = buf.trimEnd().slice(0, -1).trimEnd();
+      continue;
+    }
+    lines.push(buf);
+    buf = "";
+  }
+  if (buf)
+    lines.push(buf);
+  const cmds = [];
+  let section = "";
+  for (const line of lines) {
+    const t = line.trim();
+    if (!t || t.startsWith("#"))
+      continue;
+    if (t.startsWith("/")) {
+      section = t;
+      continue;
+    }
+    cmds.push(section ? `${section} ${t}` : t);
+  }
+  return cmds;
+}
+
 // src/core/datestamp.ts
 var MONTHS2 = ["jan", "feb", "mar", "apr", "may", "jun", "jul", "aug", "sep", "oct", "nov", "dec"];
 function pad(n) {
@@ -2746,6 +2998,12 @@ async function deviceDateStamp(ctx) {
   return hostStamp(new Date);
 }
 
+// src/core/slug.ts
+function deviceSlug(name) {
+  const s = (name ?? "").replace(/[^A-Za-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
+  return s || "device";
+}
+
 // src/tools/backup.ts
 var backupTools = [
   defineTool({
@@ -2762,6 +3020,7 @@ var backupTools = [
     async handler(a, ctx) {
       const name = a.name || `backup_${await deviceDateStamp(ctx)}`;
       ctx.info(`Creating backup: name=${name}`);
+      const disk = await checkDiskSpace(ctx);
       const cmd = new Cmd("/system backup save").set("name", name);
       if (a.dont_encrypt)
         cmd.raw("dont-encrypt=yes");
@@ -2770,13 +3029,35 @@ var backupTools = [
       if (!a.include_password)
         cmd.raw("password-file=no");
       const result = await executeMikrotikCommand(cmd.build(), ctx);
-      if (result.includes("saved") || result.trim() === "") {
-        const fileDetails = await executeMikrotikCommand(`/file print detail where name=${name}.backup`, ctx);
-        return fileDetails ? `Backup created successfully:
+      if (!(result.includes("saved") || result.trim() === "")) {
+        if (disk.low) {
+          return `Failed to create backup (device disk is ${disk.usedPct?.toFixed(0)}% used): ${result}
 
-${fileDetails}` : `Backup '${name}.backup' created successfully.`;
+` + "Tip: use create_local_backup or create_export instead \u2014 text exports can be captured " + "directly to the local vault without using any device disk space.";
+        }
+        return `Failed to create backup: ${result}`;
+      }
+      if (disk.low) {
+        const dc = getDevice(ctx.device);
+        if (isMacTelnetDevice(dc)) {
+          return `Backup '${name}.backup' created on device, but disk is ${disk.usedPct?.toFixed(0)}% used. ` + "This is a MAC-Telnet device (no SFTP), so the file cannot be downloaded automatically. " + "Free disk space manually or use create_local_backup for a text export that bypasses device storage.";
+        }
+        const deviceFile = `${name}.backup`;
+        try {
+          ctx.info(`Low disk (${disk.usedPct?.toFixed(0)}%) \u2014 downloading backup to local vault`);
+          const data = await downloadFileFromDevice(ctx.device, deviceFile);
+          const device = resolveDeviceName(ctx.device);
+          const vaultName = writeBinaryBackup(`${deviceSlug(device)}_${deviceFile}`, data);
+          await executeMikrotikCommand(`/file remove ${deviceFile}`, ctx);
+          return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Backup '${deviceFile}' created, downloaded to ` + `local vault as '${vaultName}' (${data.length} bytes) at ${backupDir()}, and removed from ` + "the device to free disk space.";
+        } catch (e) {
+          return `Backup '${name}.backup' created on device, but the automatic download-and-cleanup ` + `failed: ${e instanceof Error ? e.message : String(e)}. The file is still on the device. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies for SFTP downloads to work.";
+        }
       }
-      return `Failed to create backup: ${result}`;
+      const fileDetails = await executeMikrotikCommand(`/file print detail where name=${name}.backup`, ctx);
+      return fileDetails ? `Backup created successfully:
+
+${fileDetails}` : `Backup '${name}.backup' created successfully.`;
     }
   }),
   defineTool({
@@ -2825,6 +3106,21 @@ ${result}`;
     async handler(a, ctx) {
       const name = a.name || `export_${await deviceDateStamp(ctx)}`;
       ctx.info(`Creating export: name=${name}, format=${a.file_format}`);
+      const disk = await checkDiskSpace(ctx);
+      if (disk.low) {
+        ctx.info(`Low disk (${disk.usedPct?.toFixed(0)}%) \u2014 redirecting export to local vault`);
+        const cmd2 = new Cmd("/export");
+        cmd2.raw(a.verbose ? "verbose" : null);
+        cmd2.raw(a.compact ? "compact" : null);
+        cmd2.raw(!a.hide_sensitive ? "show-sensitive" : null);
+        const body = await executeMikrotikCommand(cmd2.build(), ctx);
+        if (isEmpty(body) || looksLikeError(body)) {
+          return `Failed to create export: ${body}`;
+        }
+        const device = resolveDeviceName(ctx.device);
+        const vaultName = writeBackup(`${deviceSlug(device)}_${name}.rsc`, body);
+        return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Export saved to LOCAL VAULT as '${vaultName}' ` + `(${Buffer.byteLength(body)} bytes) at ${backupDir()} \u2014 no file was written to the device.`;
+      }
       const extension = a.file_format === "json" || a.file_format === "xml" ? a.file_format : "rsc";
       const fullName = `${name}.${extension}`;
       const cmd = new Cmd("/export");
@@ -2863,6 +3159,20 @@ ${fileDetails}` : `Export '${fullName}' created successfully.`;
         name = `export_${cleanSection}_${await deviceDateStamp(ctx)}`;
       }
       ctx.info(`Exporting section: section=${a.section}, name=${name}`);
+      const disk = await checkDiskSpace(ctx);
+      if (disk.low) {
+        ctx.info(`Low disk (${disk.usedPct?.toFixed(0)}%) \u2014 redirecting section export to local vault`);
+        const cmd2 = new Cmd(`/${a.section} export`);
+        cmd2.raw(!a.hide_sensitive ? "show-sensitive" : null);
+        cmd2.raw(a.compact ? "compact" : null);
+        const body = await executeMikrotikCommand(cmd2.build(), ctx);
+        if (isEmpty(body) || looksLikeError(body)) {
+          return `Failed to export section: ${body}`;
+        }
+        const device = resolveDeviceName(ctx.device);
+        const vaultName = writeBackup(`${deviceSlug(device)}_${name}.rsc`, body);
+        return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Section export saved to LOCAL VAULT as ` + `'${vaultName}' (${Buffer.byteLength(body)} bytes) at ${backupDir()} \u2014 no file was written ` + "to the device.";
+      }
       const cmd = new Cmd(`/${a.section} export`).set("file", name);
       cmd.raw(!a.hide_sensitive ? "show-sensitive" : null);
       cmd.raw(a.compact ? "compact" : null);
@@ -3013,127 +3323,6 @@ ${result}`;
 // src/tools/local-backup.ts
 import { z as z6 } from "zod";
 
-// src/core/slug.ts
-function deviceSlug(name) {
-  const s = (name ?? "").replace(/[^A-Za-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
-  return s || "device";
-}
-
-// src/backups/vault.ts
-import {
-  existsSync as existsSync2,
-  mkdirSync,
-  readFileSync as readFileSync4,
-  readdirSync,
-  renameSync,
-  rmSync,
-  statSync,
-  writeFileSync
-} from "fs";
-import { basename, join as join4 } from "path";
-function backupDir() {
-  if (process.env.MIKROTIK_BACKUP_DIR)
-    return process.env.MIKROTIK_BACKUP_DIR;
-  try {
-    const dir = getConfig().backupDir;
-    if (dir)
-      return dir;
-  } catch {}
-  return DEFAULT_BACKUP_DIR;
-}
-function safeName(name) {
-  const base = basename(name);
-  if (base !== name || base === "." || base === ".." || !/^[A-Za-z0-9._-]+$/.test(base)) {
-    throw new Error(`invalid backup name: ${name}`);
-  }
-  return base;
-}
-function listBackups() {
-  const dir = backupDir();
-  if (!existsSync2(dir))
-    return [];
-  return readdirSync(dir).filter((f) => f.endsWith(".rsc")).map((f) => {
-    const st = statSync(join4(dir, f));
-    const us = f.indexOf("_");
-    return {
-      name: f,
-      bytes: st.size,
-      modified: st.mtimeMs,
-      device: us > 0 ? f.slice(0, us) : undefined
-    };
-  }).sort((a, b) => b.modified - a.modified);
-}
-function readBackup(name) {
-  return readFileSync4(join4(backupDir(), safeName(name)), "utf8");
-}
-function writeBackup(name, content) {
-  const dir = backupDir();
-  mkdirSync(dir, { recursive: true });
-  let final = safeName(name);
-  if (existsSync2(join4(dir, final))) {
-    const dot = final.lastIndexOf(".");
-    const stem = dot > 0 ? final.slice(0, dot) : final;
-    const ext = dot > 0 ? final.slice(dot) : "";
-    let n = 2;
-    while (existsSync2(join4(dir, `${stem}_${n}${ext}`)))
-      n++;
-    final = `${stem}_${n}${ext}`;
-  }
-  writeFileSync(join4(dir, final), content, "utf8");
-  return final;
-}
-function deleteBackup(name) {
-  const p = join4(backupDir(), safeName(name));
-  if (!existsSync2(p))
-    return false;
-  rmSync(p);
-  return true;
-}
-function renameBackup(oldName, newName) {
-  const dir = backupDir();
-  const from = join4(dir, safeName(oldName));
-  let to = safeName(newName);
-  if (!to.endsWith(".rsc"))
-    to += ".rsc";
-  const toPath = join4(dir, to);
-  if (!existsSync2(from))
-    throw new Error(`backup not found: ${oldName}`);
-  if (existsSync2(toPath))
-    throw new Error(`a backup named '${to}' already exists`);
-  renameSync(from, toPath);
-  return to;
-}
-function exportToCommands(text) {
-  const lines = [];
-  let buf = "";
-  for (const raw of text.split(`
-`)) {
-    const line = raw.replace(/\r$/, "");
-    buf = buf ? `${buf} ${line.trim()}` : line;
-    if (buf.trimEnd().endsWith("\\")) {
-      buf = buf.trimEnd().slice(0, -1).trimEnd();
-      continue;
-    }
-    lines.push(buf);
-    buf = "";
-  }
-  if (buf)
-    lines.push(buf);
-  const cmds = [];
-  let section = "";
-  for (const line of lines) {
-    const t = line.trim();
-    if (!t || t.startsWith("#"))
-      continue;
-    if (t.startsWith("/")) {
-      section = t;
-      continue;
-    }
-    cmds.push(section ? `${section} ${t}` : t);
-  }
-  return cmds;
-}
-
 // src/backups/create.ts
 function labelSlug(label) {
   const s = (label ?? "").replace(/[^A-Za-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
@@ -5928,7 +6117,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./library-jrp4dawm.js");
+  const { moduleCatalog } = await import("./library-q0q3kf6m.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/dist/shared/{library-jrp4dawm.js → library-q0q3kf6m.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-jm3khjrr.js";
+} from "./library-nxh3rb8t.js";
 export {
   selectToolModules,
   moduleCatalog,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.36.0",
+  "version": "3.38.0",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",