@usex/mikrotik-mcp 3.37.0 → 3.39.0

package/dist/cli.js

@@ -84,7 +84,7 @@ import {
   toggleAaaEntity,
   updateAaaEntity,
   writeBackup
-} from "./shared/cli-9p1cxztb.js";
+} from "./shared/cli-ksdjs84m.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";
@@ -1948,6 +1948,90 @@ async function runDashboard(cfg, transportLabel) {
     const bearer = req.headers.get("authorization")?.replace(/^Bearer\s+/i, "");
     return bearer === cfg.token || url.searchParams.get("token") === cfg.token;
   };
+  async function dashboardRoute(req, url, srv, ca, tl) {
+    if (url.pathname === "/api/stream") {
+      if (srv.upgrade(req, { data: {} }))
+        return;
+      return new Response("WebSocket upgrade failed", { status: 400 });
+    }
+    if (url.pathname === "/api/sse") {
+      return sseResponse(tl);
+    }
+    const configResp = await configRoutes(req, url, ca);
+    if (configResp)
+      return configResp;
+    const modulesResp = await modulesRoutes(req, url);
+    if (modulesResp)
+      return modulesResp;
+    const captureResp = await captureRoutes(req, url);
+    if (captureResp)
+      return captureResp;
+    const clientsResp = await clientsRoutes(req, url);
+    if (clientsResp)
+      return clientsResp;
+    const aaaResp = await aaaRoutes(req, url);
+    if (aaaResp)
+      return aaaResp;
+    const usageResp = await usageRoutes(req, url);
+    if (usageResp)
+      return usageResp;
+    const featureResp = await featureRoutes(req, url);
+    if (featureResp)
+      return featureResp;
+    const db = getEventStore();
+    if (!db)
+      return json({ error: "recorder not active" }, 503);
+    if (url.pathname === "/api/events" && req.method === "DELETE") {
+      let body = {};
+      try {
+        body = await req.json();
+      } catch {}
+      const ids = Array.isArray(body.ids) ? body.ids.filter((x) => typeof x === "string") : [];
+      const removed = body.all === true ? db.clear() : db.delete(ids);
+      return json({ removed, total: db.total() });
+    }
+    if (url.pathname === "/api/devices") {
+      return json(devicesPayload(db));
+    }
+    if (url.pathname === "/api/topology") {
+      return json(topologyPayload());
+    }
+    if (url.pathname === "/api/config") {
+      return json(configPayload());
+    }
+    if (url.pathname === "/" || url.pathname === "/index.html") {
+      return new Response(dashboardHtml(), {
+        headers: { "content-type": "text/html; charset=utf-8" }
+      });
+    }
+    if (url.pathname === "/api/meta") {
+      const f = facets(db);
+      return json({
+        ...f,
+        risks: ["READ", "WRITE", "WRITE_IDEMPOTENT", "DESTRUCTIVE", "DANGEROUS"],
+        total: db.total(),
+        liveClients: subscriberCount(),
+        transport: tl
+      });
+    }
+    if (url.pathname === "/api/events") {
+      const filter = filterFromQuery(url);
+      return json({ events: db.query(filter), total: db.total() });
+    }
+    const eventMatch = url.pathname.match(/^\/api\/event\/(.+)$/);
+    if (eventMatch) {
+      const e = db.get(decodeURIComponent(eventMatch[1]));
+      return e ? json(e) : json({ error: "not found" }, 404);
+    }
+    if (url.pathname === "/api/stats") {
+      const now = Date.now();
+      const windowMs = Number(url.searchParams.get("window") ?? 3600000);
+      const buckets = Number(url.searchParams.get("buckets") ?? 60);
+      const events = db.query({ since: now - windowMs, limit: 5000 });
+      return json(computeStats(events, { now, windowMs, buckets }));
+    }
+    return new Response("Not Found", { status: 404 });
+  }
   const server = serve({
     hostname: cfg.host,
     port: cfg.port,
@@ -1959,88 +2043,13 @@ async function runDashboard(cfg, transportLabel) {
       if (!tokenOk(req, url)) {
         return new Response("Unauthorized", { status: 401 });
       }
-      if (url.pathname === "/api/stream") {
-        if (srv.upgrade(req, { data: {} }))
-          return;
-        return new Response("WebSocket upgrade failed", { status: 400 });
-      }
-      if (url.pathname === "/api/sse") {
-        return sseResponse(transportLabel);
-      }
-      const configResp = await configRoutes(req, url, configAdmin);
-      if (configResp)
-        return configResp;
-      const modulesResp = await modulesRoutes(req, url);
-      if (modulesResp)
-        return modulesResp;
-      const captureResp = await captureRoutes(req, url);
-      if (captureResp)
-        return captureResp;
-      const clientsResp = await clientsRoutes(req, url);
-      if (clientsResp)
-        return clientsResp;
-      const aaaResp = await aaaRoutes(req, url);
-      if (aaaResp)
-        return aaaResp;
-      const usageResp = await usageRoutes(req, url);
-      if (usageResp)
-        return usageResp;
-      const featureResp = await featureRoutes(req, url);
-      if (featureResp)
-        return featureResp;
-      const db = getEventStore();
-      if (!db)
-        return json({ error: "recorder not active" }, 503);
-      if (url.pathname === "/api/events" && req.method === "DELETE") {
-        let body = {};
-        try {
-          body = await req.json();
-        } catch {}
-        const ids = Array.isArray(body.ids) ? body.ids.filter((x) => typeof x === "string") : [];
-        const removed = body.all === true ? db.clear() : db.delete(ids);
-        return json({ removed, total: db.total() });
-      }
-      if (url.pathname === "/api/devices") {
-        return json(devicesPayload(db));
-      }
-      if (url.pathname === "/api/topology") {
-        return json(topologyPayload());
-      }
-      if (url.pathname === "/api/config") {
-        return json(configPayload());
-      }
-      if (url.pathname === "/" || url.pathname === "/index.html") {
-        return new Response(dashboardHtml(), {
-          headers: { "content-type": "text/html; charset=utf-8" }
-        });
-      }
-      if (url.pathname === "/api/meta") {
-        const f = facets(db);
-        return json({
-          ...f,
-          risks: ["READ", "WRITE", "WRITE_IDEMPOTENT", "DESTRUCTIVE", "DANGEROUS"],
-          total: db.total(),
-          liveClients: subscriberCount(),
-          transport: transportLabel
-        });
-      }
-      if (url.pathname === "/api/events") {
-        const filter = filterFromQuery(url);
-        return json({ events: db.query(filter), total: db.total() });
-      }
-      const eventMatch = url.pathname.match(/^\/api\/event\/(.+)$/);
-      if (eventMatch) {
-        const e = db.get(decodeURIComponent(eventMatch[1]));
-        return e ? json(e) : json({ error: "not found" }, 404);
-      }
-      if (url.pathname === "/api/stats") {
-        const now = Date.now();
-        const windowMs = Number(url.searchParams.get("window") ?? 3600000);
-        const buckets = Number(url.searchParams.get("buckets") ?? 60);
-        const events = db.query({ since: now - windowMs, limit: 5000 });
-        return json(computeStats(events, { now, windowMs, buckets }));
+      try {
+        return await dashboardRoute(req, url, srv, configAdmin, transportLabel);
+      } catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        logger.error(`Dashboard request failed (${url.pathname}): ${msg}`);
+        return json({ error: msg }, 502);
       }
-      return new Response("Not Found", { status: 404 });
     },
     websocket: {
       open(ws) {
@@ -2233,7 +2242,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.37.0",
+  version: "3.39.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/index.js

@@ -21,7 +21,7 @@ import {
   resolveDeviceName,
   selectToolModules,
   setConfig
-} from "./shared/library-9pt0yeqy.js";
+} from "./shared/library-pvb7kh40.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
@@ -131,7 +131,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.37.0",
+  version: "3.39.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/shared/{cli-fpfchpjm.js → cli-17657c2v.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-9p1cxztb.js";
+} from "./cli-ksdjs84m.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{cli-9p1cxztb.js → cli-ksdjs84m.js}

@@ -3075,7 +3075,7 @@ var backupTools = [
           await executeMikrotikCommand(`/file remove ${deviceFile}`, ctx);
           return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Backup '${deviceFile}' created, downloaded to ` + `local vault as '${vaultName}' (${data.length} bytes) at ${backupDir()}, and removed from ` + "the device to free disk space.";
         } catch (e) {
-          return `Backup '${name}.backup' created on device, but the automatic download-and-cleanup ` + `failed: ${e instanceof Error ? e.message : String(e)}. The file is still on the device.`;
+          return `Backup '${name}.backup' created on device, but the automatic download-and-cleanup ` + `failed: ${e instanceof Error ? e.message : String(e)}. The file is still on the device. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies for SFTP downloads to work.";
         }
       }
       const fileDetails = await executeMikrotikCommand(`/file print detail where name=${name}.backup`, ctx);
@@ -3212,24 +3212,24 @@ ${fileDetails}` : `Section export '${name}.rsc' created successfully.`;
   }),
   defineTool({
     name: "download_file",
-    title: "Download File as Base64",
+    title: "Download File from Device",
     annotations: READ,
-    description: "Attempts to read a file from the device filesystem via `/file print file=<filename>` and" + " returns the RouterOS API text response base64-encoded as `FILE_CONTENT_BASE64:<data>`." + " NOTE: this is a simplified implementation. RouterOS has no file-content-read API over SSH;" + " `/file print file=<name>` saves the directory-listing output to a file named `<name>` rather" + " than streaming an existing file's bytes. The returned base64 payload is the RouterOS text" + " response to that command \u2014 not the actual file contents. Binary `.backup` files cannot be" + " reliably retrieved this way. Verifies file existence first" + " (`/file print count-only where name=<filename>`); returns a not-found message if absent." + " To list available files use `list_backups`; for file metadata only use `backup_info`.",
+    description: "Downloads a file from the device filesystem over SFTP and returns its raw bytes base64-encoded" + " as `FILE_CONTENT_BASE64:<data>`. Works for any file type \u2014 `.backup`, `.rsc`, `.p12`" + " certificates, keys, etc. Verifies file existence first (`/file print count-only`). The SSH" + " user MUST have the `read` policy (and `sensitive` for `.backup` / certificate files) on" + " RouterOS for SFTP downloads to work. NOT available on MAC-Telnet devices (Layer-2 has no" + " file transfer). To list available files use `list_backups`; for file metadata use" + " `backup_info`; to push a file onto the device use `upload_file`.",
     inputSchema: {
-      filename: z5.string(),
-      file_type: z5.enum(["backup", "export"]).default("backup")
+      filename: z5.string().describe("Name of the file on the device, e.g. 'cert.p12' or 'backup.backup'")
     },
     async handler(a, ctx) {
-      ctx.info(`Downloading file: filename=${a.filename}, type=${a.file_type}`);
+      ctx.info(`Downloading file: filename=${a.filename}`);
       const count = await executeMikrotikCommand(`/file print count-only where name=${a.filename}`, ctx);
       if (count.trim() === "0")
-        return `File '${a.filename}' not found.`;
-      const content = await executeMikrotikCommand(`/file print file=${a.filename}`, ctx);
-      if (content) {
-        const encoded = Buffer.from(content, "utf8").toString("base64");
+        return `File '${a.filename}' not found on the device.`;
+      try {
+        const data = await downloadFileFromDevice(ctx.device, a.filename);
+        const encoded = data.toString("base64");
         return `FILE_CONTENT_BASE64:${encoded}`;
+      } catch (e) {
+        return `Failed to download '${a.filename}': ${e instanceof Error ? e.message : String(e)}. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies on RouterOS.";
       }
-      return `Failed to download file '${a.filename}'.`;
     }
   }),
   defineTool({
@@ -6141,7 +6141,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./cli-fpfchpjm.js");
+  const { moduleCatalog } = await import("./cli-17657c2v.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/dist/shared/{library-r6dx5hw2.js → library-dhx14y24.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-9pt0yeqy.js";
+} from "./library-pvb7kh40.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{library-9pt0yeqy.js → library-pvb7kh40.js}

@@ -3051,7 +3051,7 @@ var backupTools = [
           await executeMikrotikCommand(`/file remove ${deviceFile}`, ctx);
           return `[LOW DISK \u2014 ${disk.usedPct?.toFixed(0)}% used] Backup '${deviceFile}' created, downloaded to ` + `local vault as '${vaultName}' (${data.length} bytes) at ${backupDir()}, and removed from ` + "the device to free disk space.";
         } catch (e) {
-          return `Backup '${name}.backup' created on device, but the automatic download-and-cleanup ` + `failed: ${e instanceof Error ? e.message : String(e)}. The file is still on the device.`;
+          return `Backup '${name}.backup' created on device, but the automatic download-and-cleanup ` + `failed: ${e instanceof Error ? e.message : String(e)}. The file is still on the device. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies for SFTP downloads to work.";
         }
       }
       const fileDetails = await executeMikrotikCommand(`/file print detail where name=${name}.backup`, ctx);
@@ -3188,24 +3188,24 @@ ${fileDetails}` : `Section export '${name}.rsc' created successfully.`;
   }),
   defineTool({
     name: "download_file",
-    title: "Download File as Base64",
+    title: "Download File from Device",
     annotations: READ,
-    description: "Attempts to read a file from the device filesystem via `/file print file=<filename>` and" + " returns the RouterOS API text response base64-encoded as `FILE_CONTENT_BASE64:<data>`." + " NOTE: this is a simplified implementation. RouterOS has no file-content-read API over SSH;" + " `/file print file=<name>` saves the directory-listing output to a file named `<name>` rather" + " than streaming an existing file's bytes. The returned base64 payload is the RouterOS text" + " response to that command \u2014 not the actual file contents. Binary `.backup` files cannot be" + " reliably retrieved this way. Verifies file existence first" + " (`/file print count-only where name=<filename>`); returns a not-found message if absent." + " To list available files use `list_backups`; for file metadata only use `backup_info`.",
+    description: "Downloads a file from the device filesystem over SFTP and returns its raw bytes base64-encoded" + " as `FILE_CONTENT_BASE64:<data>`. Works for any file type \u2014 `.backup`, `.rsc`, `.p12`" + " certificates, keys, etc. Verifies file existence first (`/file print count-only`). The SSH" + " user MUST have the `read` policy (and `sensitive` for `.backup` / certificate files) on" + " RouterOS for SFTP downloads to work. NOT available on MAC-Telnet devices (Layer-2 has no" + " file transfer). To list available files use `list_backups`; for file metadata use" + " `backup_info`; to push a file onto the device use `upload_file`.",
     inputSchema: {
-      filename: z5.string(),
-      file_type: z5.enum(["backup", "export"]).default("backup")
+      filename: z5.string().describe("Name of the file on the device, e.g. 'cert.p12' or 'backup.backup'")
     },
     async handler(a, ctx) {
-      ctx.info(`Downloading file: filename=${a.filename}, type=${a.file_type}`);
+      ctx.info(`Downloading file: filename=${a.filename}`);
       const count = await executeMikrotikCommand(`/file print count-only where name=${a.filename}`, ctx);
       if (count.trim() === "0")
-        return `File '${a.filename}' not found.`;
-      const content = await executeMikrotikCommand(`/file print file=${a.filename}`, ctx);
-      if (content) {
-        const encoded = Buffer.from(content, "utf8").toString("base64");
+        return `File '${a.filename}' not found on the device.`;
+      try {
+        const data = await downloadFileFromDevice(ctx.device, a.filename);
+        const encoded = data.toString("base64");
         return `FILE_CONTENT_BASE64:${encoded}`;
+      } catch (e) {
+        return `Failed to download '${a.filename}': ${e instanceof Error ? e.message : String(e)}. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies on RouterOS.";
       }
-      return `Failed to download file '${a.filename}'.`;
     }
   }),
   defineTool({
@@ -6117,7 +6117,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./library-r6dx5hw2.js");
+  const { moduleCatalog } = await import("./library-dhx14y24.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.37.0",
+  "version": "3.39.0",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",