@usex/mikrotik-mcp 3.38.0 → 3.39.0

package/dist/cli.js

@@ -84,7 +84,7 @@ import {
   toggleAaaEntity,
   updateAaaEntity,
   writeBackup
-} from "./shared/cli-e484wzek.js";
+} from "./shared/cli-ksdjs84m.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";
@@ -2242,7 +2242,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.38.0",
+  version: "3.39.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/index.js

@@ -21,7 +21,7 @@ import {
   resolveDeviceName,
   selectToolModules,
   setConfig
-} from "./shared/library-nxh3rb8t.js";
+} from "./shared/library-pvb7kh40.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
@@ -131,7 +131,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.38.0",
+  version: "3.39.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/shared/{cli-h0gydx8r.js → cli-17657c2v.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-e484wzek.js";
+} from "./cli-ksdjs84m.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{cli-e484wzek.js → cli-ksdjs84m.js}

@@ -3212,24 +3212,24 @@ ${fileDetails}` : `Section export '${name}.rsc' created successfully.`;
   }),
   defineTool({
     name: "download_file",
-    title: "Download File as Base64",
+    title: "Download File from Device",
     annotations: READ,
-    description: "Attempts to read a file from the device filesystem via `/file print file=<filename>` and" + " returns the RouterOS API text response base64-encoded as `FILE_CONTENT_BASE64:<data>`." + " NOTE: this is a simplified implementation. RouterOS has no file-content-read API over SSH;" + " `/file print file=<name>` saves the directory-listing output to a file named `<name>` rather" + " than streaming an existing file's bytes. The returned base64 payload is the RouterOS text" + " response to that command \u2014 not the actual file contents. Binary `.backup` files cannot be" + " reliably retrieved this way. Verifies file existence first" + " (`/file print count-only where name=<filename>`); returns a not-found message if absent." + " To list available files use `list_backups`; for file metadata only use `backup_info`.",
+    description: "Downloads a file from the device filesystem over SFTP and returns its raw bytes base64-encoded" + " as `FILE_CONTENT_BASE64:<data>`. Works for any file type \u2014 `.backup`, `.rsc`, `.p12`" + " certificates, keys, etc. Verifies file existence first (`/file print count-only`). The SSH" + " user MUST have the `read` policy (and `sensitive` for `.backup` / certificate files) on" + " RouterOS for SFTP downloads to work. NOT available on MAC-Telnet devices (Layer-2 has no" + " file transfer). To list available files use `list_backups`; for file metadata use" + " `backup_info`; to push a file onto the device use `upload_file`.",
     inputSchema: {
-      filename: z5.string(),
-      file_type: z5.enum(["backup", "export"]).default("backup")
+      filename: z5.string().describe("Name of the file on the device, e.g. 'cert.p12' or 'backup.backup'")
     },
     async handler(a, ctx) {
-      ctx.info(`Downloading file: filename=${a.filename}, type=${a.file_type}`);
+      ctx.info(`Downloading file: filename=${a.filename}`);
       const count = await executeMikrotikCommand(`/file print count-only where name=${a.filename}`, ctx);
       if (count.trim() === "0")
-        return `File '${a.filename}' not found.`;
-      const content = await executeMikrotikCommand(`/file print file=${a.filename}`, ctx);
-      if (content) {
-        const encoded = Buffer.from(content, "utf8").toString("base64");
+        return `File '${a.filename}' not found on the device.`;
+      try {
+        const data = await downloadFileFromDevice(ctx.device, a.filename);
+        const encoded = data.toString("base64");
         return `FILE_CONTENT_BASE64:${encoded}`;
+      } catch (e) {
+        return `Failed to download '${a.filename}': ${e instanceof Error ? e.message : String(e)}. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies on RouterOS.";
       }
-      return `Failed to download file '${a.filename}'.`;
     }
   }),
   defineTool({
@@ -6141,7 +6141,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./cli-h0gydx8r.js");
+  const { moduleCatalog } = await import("./cli-17657c2v.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/dist/shared/{library-q0q3kf6m.js → library-dhx14y24.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-nxh3rb8t.js";
+} from "./library-pvb7kh40.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{library-nxh3rb8t.js → library-pvb7kh40.js}

@@ -3188,24 +3188,24 @@ ${fileDetails}` : `Section export '${name}.rsc' created successfully.`;
   }),
   defineTool({
     name: "download_file",
-    title: "Download File as Base64",
+    title: "Download File from Device",
     annotations: READ,
-    description: "Attempts to read a file from the device filesystem via `/file print file=<filename>` and" + " returns the RouterOS API text response base64-encoded as `FILE_CONTENT_BASE64:<data>`." + " NOTE: this is a simplified implementation. RouterOS has no file-content-read API over SSH;" + " `/file print file=<name>` saves the directory-listing output to a file named `<name>` rather" + " than streaming an existing file's bytes. The returned base64 payload is the RouterOS text" + " response to that command \u2014 not the actual file contents. Binary `.backup` files cannot be" + " reliably retrieved this way. Verifies file existence first" + " (`/file print count-only where name=<filename>`); returns a not-found message if absent." + " To list available files use `list_backups`; for file metadata only use `backup_info`.",
+    description: "Downloads a file from the device filesystem over SFTP and returns its raw bytes base64-encoded" + " as `FILE_CONTENT_BASE64:<data>`. Works for any file type \u2014 `.backup`, `.rsc`, `.p12`" + " certificates, keys, etc. Verifies file existence first (`/file print count-only`). The SSH" + " user MUST have the `read` policy (and `sensitive` for `.backup` / certificate files) on" + " RouterOS for SFTP downloads to work. NOT available on MAC-Telnet devices (Layer-2 has no" + " file transfer). To list available files use `list_backups`; for file metadata use" + " `backup_info`; to push a file onto the device use `upload_file`.",
     inputSchema: {
-      filename: z5.string(),
-      file_type: z5.enum(["backup", "export"]).default("backup")
+      filename: z5.string().describe("Name of the file on the device, e.g. 'cert.p12' or 'backup.backup'")
     },
     async handler(a, ctx) {
-      ctx.info(`Downloading file: filename=${a.filename}, type=${a.file_type}`);
+      ctx.info(`Downloading file: filename=${a.filename}`);
       const count = await executeMikrotikCommand(`/file print count-only where name=${a.filename}`, ctx);
       if (count.trim() === "0")
-        return `File '${a.filename}' not found.`;
-      const content = await executeMikrotikCommand(`/file print file=${a.filename}`, ctx);
-      if (content) {
-        const encoded = Buffer.from(content, "utf8").toString("base64");
+        return `File '${a.filename}' not found on the device.`;
+      try {
+        const data = await downloadFileFromDevice(ctx.device, a.filename);
+        const encoded = data.toString("base64");
         return `FILE_CONTENT_BASE64:${encoded}`;
+      } catch (e) {
+        return `Failed to download '${a.filename}': ${e instanceof Error ? e.message : String(e)}. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies on RouterOS.";
       }
-      return `Failed to download file '${a.filename}'.`;
     }
   }),
   defineTool({
@@ -6117,7 +6117,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./library-q0q3kf6m.js");
+  const { moduleCatalog } = await import("./library-dhx14y24.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.38.0",
+  "version": "3.39.0",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",