@usex/mikrotik-mcp 3.38.0 → 3.40.0

package/dist/cli.js

@@ -84,7 +84,7 @@ import {
   toggleAaaEntity,
   updateAaaEntity,
   writeBackup
-} from "./shared/cli-e484wzek.js";
+} from "./shared/cli-jsf7zy89.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";
@@ -2242,7 +2242,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.38.0",
+  version: "3.40.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/index.js

@@ -21,7 +21,7 @@ import {
   resolveDeviceName,
   selectToolModules,
   setConfig
-} from "./shared/library-nxh3rb8t.js";
+} from "./shared/library-0x8fc0rw.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
@@ -131,7 +131,7 @@ function registerPrompts(server) {
 // package.json
 var package_default = {
   name: "@usex/mikrotik-mcp",
-  version: "3.38.0",
+  version: "3.40.0",
   description: "MCP server for MikroTik RouterOS \u2014 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   keywords: [
     "ai",

package/dist/shared/{cli-h0gydx8r.js → cli-28w9b076.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-e484wzek.js";
+} from "./cli-jsf7zy89.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{cli-e484wzek.js → cli-jsf7zy89.js}

@@ -3212,24 +3212,24 @@ ${fileDetails}` : `Section export '${name}.rsc' created successfully.`;
   }),
   defineTool({
     name: "download_file",
-    title: "Download File as Base64",
+    title: "Download File from Device",
     annotations: READ,
-    description: "Attempts to read a file from the device filesystem via `/file print file=<filename>` and" + " returns the RouterOS API text response base64-encoded as `FILE_CONTENT_BASE64:<data>`." + " NOTE: this is a simplified implementation. RouterOS has no file-content-read API over SSH;" + " `/file print file=<name>` saves the directory-listing output to a file named `<name>` rather" + " than streaming an existing file's bytes. The returned base64 payload is the RouterOS text" + " response to that command \u2014 not the actual file contents. Binary `.backup` files cannot be" + " reliably retrieved this way. Verifies file existence first" + " (`/file print count-only where name=<filename>`); returns a not-found message if absent." + " To list available files use `list_backups`; for file metadata only use `backup_info`.",
+    description: "Downloads a file from the device filesystem over SFTP and returns its raw bytes base64-encoded" + " as `FILE_CONTENT_BASE64:<data>`. Works for any file type \u2014 `.backup`, `.rsc`, `.p12`" + " certificates, keys, etc. Verifies file existence first (`/file print count-only`). The SSH" + " user MUST have the `read` policy (and `sensitive` for `.backup` / certificate files) on" + " RouterOS for SFTP downloads to work. NOT available on MAC-Telnet devices (Layer-2 has no" + " file transfer). To list available files use `list_backups`; for file metadata use" + " `backup_info`; to push a file onto the device use `upload_file`.",
     inputSchema: {
-      filename: z5.string(),
-      file_type: z5.enum(["backup", "export"]).default("backup")
+      filename: z5.string().describe("Name of the file on the device, e.g. 'cert.p12' or 'backup.backup'")
     },
     async handler(a, ctx) {
-      ctx.info(`Downloading file: filename=${a.filename}, type=${a.file_type}`);
+      ctx.info(`Downloading file: filename=${a.filename}`);
       const count = await executeMikrotikCommand(`/file print count-only where name=${a.filename}`, ctx);
       if (count.trim() === "0")
-        return `File '${a.filename}' not found.`;
-      const content = await executeMikrotikCommand(`/file print file=${a.filename}`, ctx);
-      if (content) {
-        const encoded = Buffer.from(content, "utf8").toString("base64");
+        return `File '${a.filename}' not found on the device.`;
+      try {
+        const data = await downloadFileFromDevice(ctx.device, a.filename);
+        const encoded = data.toString("base64");
         return `FILE_CONTENT_BASE64:${encoded}`;
+      } catch (e) {
+        return `Failed to download '${a.filename}': ${e instanceof Error ? e.message : String(e)}. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies on RouterOS.";
       }
-      return `Failed to download file '${a.filename}'.`;
     }
   }),
   defineTool({
@@ -6141,7 +6141,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./cli-h0gydx8r.js");
+  const { moduleCatalog } = await import("./cli-28w9b076.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {
@@ -8038,11 +8038,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ip firewall filter print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `Firewall filter rule created successfully:
+        return readBackUnavailable(details) ? "Firewall filter rule created successfully." : `Firewall filter rule created successfully:
 
 ${details}`;
       }
-      return "Firewall filter rule creation completed but unable to verify.";
+      return "Firewall filter rule created successfully.";
     }
   }),
   defineTool({
@@ -8452,11 +8452,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits2(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ip firewall nat print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `NAT rule created successfully:
+        return readBackUnavailable(details) ? "NAT rule created successfully." : `NAT rule created successfully:
 
 ${details}`;
       }
-      return "NAT rule creation completed but unable to verify.";
+      return "NAT rule created successfully.";
     }
   }),
   defineTool({
@@ -8857,11 +8857,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits3(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ip firewall mangle print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `Mangle rule created successfully:
+        return readBackUnavailable(details) ? "Mangle rule created successfully." : `Mangle rule created successfully:
 
 ${details}`;
       }
-      return "Mangle rule creation completed but unable to verify.";
+      return "Mangle rule created successfully.";
     }
   }),
   defineTool({
@@ -10765,11 +10765,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits4(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall filter print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall filter rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall filter rule created successfully." : `IPv6 firewall filter rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall filter rule creation completed but unable to verify.";
+      return "IPv6 firewall filter rule created successfully.";
     }
   }),
   defineTool({
@@ -11125,11 +11125,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits5(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall nat print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall NAT rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall NAT rule created successfully." : `IPv6 firewall NAT rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall NAT rule creation completed but unable to verify.";
+      return "IPv6 firewall NAT rule created successfully.";
     }
   }),
   defineTool({
@@ -11493,11 +11493,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits6(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall mangle print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall mangle rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall mangle rule created successfully." : `IPv6 firewall mangle rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall mangle rule creation completed but unable to verify.";
+      return "IPv6 firewall mangle rule created successfully.";
     }
   }),
   defineTool({
@@ -11794,11 +11794,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits7(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall raw print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall raw rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall raw rule created successfully." : `IPv6 firewall raw rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall raw rule creation completed but unable to verify.";
+      return "IPv6 firewall raw rule created successfully.";
     }
   }),
   defineTool({
@@ -21587,11 +21587,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits8(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/interface ethernet switch rule print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `Switch rule added successfully:
+        return readBackUnavailable(details) ? "Switch rule added successfully." : `Switch rule added successfully:
 
 ${details}`;
       }
-      return "Switch rule addition completed but unable to verify.";
+      return "Switch rule added successfully.";
     }
   }),
   defineTool({

package/dist/shared/{library-nxh3rb8t.js → library-0x8fc0rw.js}

@@ -3188,24 +3188,24 @@ ${fileDetails}` : `Section export '${name}.rsc' created successfully.`;
   }),
   defineTool({
     name: "download_file",
-    title: "Download File as Base64",
+    title: "Download File from Device",
     annotations: READ,
-    description: "Attempts to read a file from the device filesystem via `/file print file=<filename>` and" + " returns the RouterOS API text response base64-encoded as `FILE_CONTENT_BASE64:<data>`." + " NOTE: this is a simplified implementation. RouterOS has no file-content-read API over SSH;" + " `/file print file=<name>` saves the directory-listing output to a file named `<name>` rather" + " than streaming an existing file's bytes. The returned base64 payload is the RouterOS text" + " response to that command \u2014 not the actual file contents. Binary `.backup` files cannot be" + " reliably retrieved this way. Verifies file existence first" + " (`/file print count-only where name=<filename>`); returns a not-found message if absent." + " To list available files use `list_backups`; for file metadata only use `backup_info`.",
+    description: "Downloads a file from the device filesystem over SFTP and returns its raw bytes base64-encoded" + " as `FILE_CONTENT_BASE64:<data>`. Works for any file type \u2014 `.backup`, `.rsc`, `.p12`" + " certificates, keys, etc. Verifies file existence first (`/file print count-only`). The SSH" + " user MUST have the `read` policy (and `sensitive` for `.backup` / certificate files) on" + " RouterOS for SFTP downloads to work. NOT available on MAC-Telnet devices (Layer-2 has no" + " file transfer). To list available files use `list_backups`; for file metadata use" + " `backup_info`; to push a file onto the device use `upload_file`.",
     inputSchema: {
-      filename: z5.string(),
-      file_type: z5.enum(["backup", "export"]).default("backup")
+      filename: z5.string().describe("Name of the file on the device, e.g. 'cert.p12' or 'backup.backup'")
     },
     async handler(a, ctx) {
-      ctx.info(`Downloading file: filename=${a.filename}, type=${a.file_type}`);
+      ctx.info(`Downloading file: filename=${a.filename}`);
       const count = await executeMikrotikCommand(`/file print count-only where name=${a.filename}`, ctx);
       if (count.trim() === "0")
-        return `File '${a.filename}' not found.`;
-      const content = await executeMikrotikCommand(`/file print file=${a.filename}`, ctx);
-      if (content) {
-        const encoded = Buffer.from(content, "utf8").toString("base64");
+        return `File '${a.filename}' not found on the device.`;
+      try {
+        const data = await downloadFileFromDevice(ctx.device, a.filename);
+        const encoded = data.toString("base64");
         return `FILE_CONTENT_BASE64:${encoded}`;
+      } catch (e) {
+        return `Failed to download '${a.filename}': ${e instanceof Error ? e.message : String(e)}. ` + "Ensure the SSH user has the 'read' and 'sensitive' policies on RouterOS.";
       }
-      return `Failed to download file '${a.filename}'.`;
     }
   }),
   defineTool({
@@ -6117,7 +6117,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./library-q0q3kf6m.js");
+  const { moduleCatalog } = await import("./library-ke4kdmyj.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {
@@ -8014,11 +8014,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ip firewall filter print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `Firewall filter rule created successfully:
+        return readBackUnavailable(details) ? "Firewall filter rule created successfully." : `Firewall filter rule created successfully:
 
 ${details}`;
       }
-      return "Firewall filter rule creation completed but unable to verify.";
+      return "Firewall filter rule created successfully.";
     }
   }),
   defineTool({
@@ -8428,11 +8428,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits2(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ip firewall nat print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `NAT rule created successfully:
+        return readBackUnavailable(details) ? "NAT rule created successfully." : `NAT rule created successfully:
 
 ${details}`;
       }
-      return "NAT rule creation completed but unable to verify.";
+      return "NAT rule created successfully.";
     }
   }),
   defineTool({
@@ -8833,11 +8833,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits3(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ip firewall mangle print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `Mangle rule created successfully:
+        return readBackUnavailable(details) ? "Mangle rule created successfully." : `Mangle rule created successfully:
 
 ${details}`;
       }
-      return "Mangle rule creation completed but unable to verify.";
+      return "Mangle rule created successfully.";
     }
   }),
   defineTool({
@@ -10741,11 +10741,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits4(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall filter print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall filter rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall filter rule created successfully." : `IPv6 firewall filter rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall filter rule creation completed but unable to verify.";
+      return "IPv6 firewall filter rule created successfully.";
     }
   }),
   defineTool({
@@ -11101,11 +11101,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits5(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall nat print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall NAT rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall NAT rule created successfully." : `IPv6 firewall NAT rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall NAT rule creation completed but unable to verify.";
+      return "IPv6 firewall NAT rule created successfully.";
     }
   }),
   defineTool({
@@ -11469,11 +11469,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits6(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall mangle print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall mangle rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall mangle rule created successfully." : `IPv6 firewall mangle rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall mangle rule creation completed but unable to verify.";
+      return "IPv6 firewall mangle rule created successfully.";
     }
   }),
   defineTool({
@@ -11770,11 +11770,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits7(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/ipv6 firewall raw print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `IPv6 firewall raw rule created successfully:
+        return readBackUnavailable(details) ? "IPv6 firewall raw rule created successfully." : `IPv6 firewall raw rule created successfully:
 
 ${details}`;
       }
-      return "IPv6 firewall raw rule creation completed but unable to verify.";
+      return "IPv6 firewall raw rule created successfully.";
     }
   }),
   defineTool({
@@ -21563,11 +21563,11 @@ ${details}`;
       const c = count.trim();
       if (isDigits8(c) && Number.parseInt(c, 10) > 0) {
         const details = await executeMikrotikCommand(`/interface ethernet switch rule print detail from=${Number.parseInt(c, 10) - 1}`, ctx);
-        return `Switch rule added successfully:
+        return readBackUnavailable(details) ? "Switch rule added successfully." : `Switch rule added successfully:
 
 ${details}`;
       }
-      return "Switch rule addition completed but unable to verify.";
+      return "Switch rule added successfully.";
     }
   }),
   defineTool({

package/dist/shared/{library-q0q3kf6m.js → library-ke4kdmyj.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-nxh3rb8t.js";
+} from "./library-0x8fc0rw.js";
 export {
   selectToolModules,
   moduleCatalog,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usex/mikrotik-mcp",
-  "version": "3.38.0",
+  "version": "3.40.0",
   "description": "MCP server for MikroTik RouterOS — 660+ tools over SSH for firewall, NAT, routing, DHCP, DNS, WireGuard, wireless, QoS and more.",
   "keywords": [
     "ai",