@usex/mikrotik-mcp 3.51.0 → 3.52.0

package/dist/cli.js

@@ -95,7 +95,7 @@ import {
   toggleAaaEntity,
   updateAaaEntity,
   writeBackup
-} from "./shared/cli-22wrpg71.js";
+} from "./shared/cli-ewkttc56.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";

package/dist/index.js

@@ -22,7 +22,7 @@ import {
   resolveDeviceName,
   selectToolModules,
   setConfig
-} from "./shared/library-mwcpnqqg.js";
+} from "./shared/library-n3yvjpkm.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";

package/dist/shared/{cli-22wrpg71.js → cli-ewkttc56.js}

@@ -5797,7 +5797,7 @@ function renderComplianceReport(report, device, options) {
 `).trimEnd();
 }
 
-// src/tools/compliance-audit.ts
+// src/utils/safe-exec.ts
 async function safe(cmd, ctx) {
   try {
     const out = await executeMikrotikCommand(cmd, ctx);
@@ -5806,6 +5806,8 @@ async function safe(cmd, ctx) {
     return "";
   }
 }
+
+// src/tools/compliance-audit.ts
 async function fetchComplianceState(ctx) {
   const [
     sshRaw,
@@ -7163,6 +7165,31 @@ ${created.join(`
 // src/tools/container.ts
 import { z as z17 } from "zod";
 
+// src/utils/ip.ts
+function isIpAddress(s) {
+  return /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(s);
+}
+function isIpLike(s) {
+  return /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(\/\d+)?$/.test(s);
+}
+function isPrivateIp(ip) {
+  const p = ip.split(".").map(Number);
+  if (p.length !== 4)
+    return false;
+  if (p[0] === 10)
+    return true;
+  if (p[0] === 172 && p[1] >= 16 && p[1] <= 31)
+    return true;
+  if (p[0] === 192 && p[1] === 168)
+    return true;
+  if (p[0] === 169 && p[1] === 254)
+    return true;
+  return false;
+}
+// src/utils/num.ts
+function num(s) {
+  return Number.parseInt(s ?? "0", 10) || 0;
+}
 // src/utils/or-match.ts
 function orMatch(field, values, op = "~") {
   if (values.length === 0)
@@ -7934,7 +7961,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./cli-dq28zbns.js");
+  const { moduleCatalog } = await import("./cli-thdzk64q.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {
@@ -8904,7 +8931,7 @@ function rulesFromRows(rows) {
       else
         match[k] = v;
     }
-    const num = (s) => {
+    const num2 = (s) => {
       if (s == null)
         return;
       const n = Number(s.replace(/\s/g, ""));
@@ -8917,8 +8944,8 @@ function rulesFromRows(rows) {
       disabled: flags.includes("X"),
       dynamic: flags.includes("D"),
       comment: r.comment,
-      packets: num(r.packets),
-      bytes: num(r.bytes),
+      packets: num2(r.packets),
+      bytes: num2(r.bytes),
       match,
       transform,
       raw: r
@@ -8987,6 +9014,8 @@ function matchSummary(rule) {
     "dst-port",
     "in-interface",
     "out-interface",
+    "in-interface-list",
+    "out-interface-list",
     "connection-state",
     "src-address-list",
     "dst-address-list"
@@ -9735,11 +9764,12 @@ async function updateFilterRule(a, ctx) {
   }
   if (updates.length === 0)
     return "No updates specified.";
-  const cmd = `/ip firewall filter set ${a.rule_id} ${updates.join(" ")}`;
+  const id = /^\d+$/.test(a.rule_id) ? `*${a.rule_id}` : a.rule_id;
+  const cmd = `/ip firewall filter set ${id} ${updates.join(" ")}`;
   const result = await executeMikrotikCommand(cmd, ctx);
   if (looksLikeError(result))
     return `Failed to update firewall filter rule: ${result}`;
-  const details = await executeMikrotikCommand(`/ip firewall filter print detail where .id=${a.rule_id}`, ctx);
+  const details = await executeMikrotikCommand(`/ip firewall filter print detail where .id=${id}`, ctx);
   return `Firewall filter rule updated successfully:
 
 ${details}`;
@@ -9894,7 +9924,8 @@ ${result}`;
     },
     async handler(a, ctx) {
       ctx.info(`Getting firewall filter rule details: rule_id=${a.rule_id}`);
-      const result = await executeMikrotikCommand(`/ip firewall filter print detail where .id=${a.rule_id}`, ctx);
+      const id = /^\d+$/.test(a.rule_id) ? `*${a.rule_id}` : a.rule_id;
+      const result = await executeMikrotikCommand(`/ip firewall filter print detail where .id=${id}`, ctx);
       return isEmpty(result) ? `Firewall filter rule with ID '${a.rule_id}' not found.` : `FIREWALL FILTER RULE DETAILS:
 
 ${result}`;
@@ -9970,10 +10001,11 @@ ${result}`;
     inputSchema: { rule_id: z28.string() },
     async handler(a, ctx) {
       ctx.info(`Removing firewall filter rule: rule_id=${a.rule_id}`);
-      const count = await executeMikrotikCommand(`/ip firewall filter print count-only where .id=${a.rule_id}`, ctx);
+      const id = /^\d+$/.test(a.rule_id) ? `*${a.rule_id}` : a.rule_id;
+      const count = await executeMikrotikCommand(`/ip firewall filter print count-only where .id=${id}`, ctx);
       if (count.trim() === "0")
         return `Firewall filter rule with ID '${a.rule_id}' not found.`;
-      const result = await executeMikrotikCommand(`/ip firewall filter remove ${a.rule_id}`, ctx);
+      const result = await executeMikrotikCommand(`/ip firewall filter remove ${id}`, ctx);
       if (looksLikeError(result))
         return `Failed to remove firewall filter rule: ${result}`;
       return `Firewall filter rule with ID '${a.rule_id}' removed successfully.`;
@@ -9990,10 +10022,11 @@ ${result}`;
     },
     async handler(a, ctx) {
       ctx.info(`Moving firewall filter rule: rule_id=${a.rule_id} to position ${a.destination}`);
-      const count = await executeMikrotikCommand(`/ip firewall filter print count-only where .id=${a.rule_id}`, ctx);
+      const id = /^\d+$/.test(a.rule_id) ? `*${a.rule_id}` : a.rule_id;
+      const count = await executeMikrotikCommand(`/ip firewall filter print count-only where .id=${id}`, ctx);
       if (count.trim() === "0")
         return `Firewall filter rule with ID '${a.rule_id}' not found.`;
-      const result = await executeMikrotikCommand(`/ip firewall filter move ${a.rule_id} destination=${a.destination}`, ctx);
+      const result = await executeMikrotikCommand(`/ip firewall filter move ${id} destination=${a.destination}`, ctx);
       if (looksLikeError(result))
         return `Failed to move firewall filter rule: ${result}`;
       return `Firewall filter rule with ID '${a.rule_id}' moved to position ${a.destination}.`;
@@ -10890,7 +10923,7 @@ function assessUpgradeReadiness(state) {
     });
   }
   const cpuNum = Number.parseInt(state.cpuLoad, 10);
-  if (!isNaN(cpuNum) && cpuNum > 80) {
+  if (!Number.isNaN(cpuNum) && cpuNum > 80) {
     checks.push({
       label: "CPU load",
       status: "caution",
@@ -10903,8 +10936,8 @@ function assessUpgradeReadiness(state) {
       detail: `${state.cpuLoad}`
     });
   }
-  const free = parseMem(state.freeMemory);
-  const total = parseMem(state.totalMemory);
+  const free = parseSize(state.freeMemory) ?? 0;
+  const total = parseSize(state.totalMemory) ?? 0;
   if (free > 0 && total > 0) {
     const pct2 = Math.round(free / total * 100);
     if (pct2 < 20) {
@@ -10941,20 +10974,6 @@ function assessUpgradeReadiness(state) {
   }
   return checks;
 }
-function parseMem(s) {
-  const m = s.match(/([\d.]+)\s*(MiB|GiB|KiB)?/i);
-  if (!m)
-    return 0;
-  const val = Number.parseFloat(m[1]);
-  const unit = (m[2] ?? "").toLowerCase();
-  if (unit === "gib")
-    return val * 1024 * 1024 * 1024;
-  if (unit === "mib")
-    return val * 1024 * 1024;
-  if (unit === "kib")
-    return val * 1024;
-  return val;
-}
 function renderFirmwareStatus(state, device) {
   const lines = [];
   lines.push(`FIRMWARE STATUS \u2014 ${device}`);
@@ -11092,14 +11111,6 @@ function renderReadiness(checks) {
 }
 
 // src/tools/firmware-lifecycle.ts
-async function safe2(cmd, ctx) {
-  try {
-    const out = await executeMikrotikCommand(cmd, ctx);
-    return looksLikeError(out) ? "" : out;
-  } catch {
-    return "";
-  }
-}
 function parsePackages(raw) {
   if (!raw)
     return [];
@@ -11144,10 +11155,10 @@ function parseUpdateInfo(raw) {
 }
 async function fetchFirmwareState(ctx) {
   const [resourceRaw, packagesRaw, routerboardRaw, updateRaw] = await Promise.all([
-    safe2("/system resource print", ctx),
-    safe2("/system package print detail", ctx),
-    safe2("/system routerboard print", ctx),
-    safe2("/system package update print", ctx)
+    safe("/system resource print", ctx),
+    safe("/system package print detail", ctx),
+    safe("/system routerboard print", ctx),
+    safe("/system package update print", ctx)
   ]);
   const res = parseKeyValues(resourceRaw);
   return {
@@ -11165,12 +11176,12 @@ async function fetchFirmwareState(ctx) {
 }
 async function captureHealthSnapshot(ctx) {
   const [resourceRaw, healthRaw, routesRaw, interfacesRaw, pppRaw, dhcpRaw] = await Promise.all([
-    safe2("/system resource print", ctx),
-    safe2("/system health print", ctx),
-    safe2("/ip route print count-only", ctx),
-    safe2("/interface print detail", ctx),
-    safe2("/ppp active print count-only", ctx),
-    safe2("/ip dhcp-server lease print count-only where status=bound", ctx)
+    safe("/system resource print", ctx),
+    safe("/system health print", ctx),
+    safe("/ip route print count-only", ctx),
+    safe("/interface print detail", ctx),
+    safe("/ppp active print count-only", ctx),
+    safe("/ip dhcp-server lease print count-only where status=bound", ctx)
   ]);
   const res = parseKeyValues(resourceRaw);
   const ifRows = interfacesRaw ? parseRecords(interfacesRaw).rows : [];
@@ -11270,8 +11281,8 @@ var firmwareLifecycleTools = [
         if (looksLikeError(chResult))
           return `Failed to set channel: ${chResult}`;
       }
-      const checkResult = await executeMikrotikCommand("/system package update check-for-updates once", ctx);
-      const updateRaw = await safe2("/system package update print", ctx);
+      await executeMikrotikCommand("/system package update check-for-updates once", ctx);
+      const updateRaw = await safe("/system package update print", ctx);
       const updateInfo = parseUpdateInfo(updateRaw);
       if (!updateInfo?.updateAvailable) {
         return `No update available on '${device}'.
@@ -11285,7 +11296,7 @@ var firmwareLifecycleTools = [
       if (looksLikeError(dlResult)) {
         return `Failed to download update packages: ${dlResult}`;
       }
-      const postRaw = await safe2("/system package update print", ctx);
+      const postRaw = await safe("/system package update print", ctx);
       const postStatus = parseKeyValues(postRaw);
       const lines = [];
       lines.push(`FIRMWARE STAGED \u2014 ${device}`);
@@ -11318,7 +11329,7 @@ var firmwareLifecycleTools = [
         return "Upgrade not confirmed. Pass confirm=true to proceed. The device WILL reboot.";
       const device = resolveDeviceName(ctx.device);
       ctx.info(`Firmware upgrade on '${device}'`);
-      const updateRaw = await safe2("/system package update print", ctx);
+      const updateRaw = await safe("/system package update print", ctx);
       const updateInfo = parseUpdateInfo(updateRaw);
       if (!updateInfo?.updateAvailable) {
         return `No update available on '${device}'. ` + `Run \`firmware_check\` or \`firmware_stage\` first.
@@ -11427,7 +11438,7 @@ var firmwareLifecycleTools = [
         lines.push(`  Current: ${state.routerboard.currentFirmware}  \u2192  Available: ${state.routerboard.upgradeFirmware}`);
         lines.push("  Use `firmware_upgrade` with `upgrade_routerboard=true` to include it.");
       }
-      const schedRaw = await safe2('/system scheduler print detail where name="mcp-firmware-upgrade"', ctx);
+      const schedRaw = await safe('/system scheduler print detail where name="mcp-firmware-upgrade"', ctx);
       if (schedRaw && !isEmpty(schedRaw)) {
         lines.push("");
         lines.push("PENDING SCHEDULED UPGRADE:");
@@ -20385,7 +20396,7 @@ function analyzeRootCause(data) {
       summary: `${boundLeases.length} active DHCP leases`
     });
   }
-  if (isIpAddress(data.target)) {
+  if (isIpAddress(data.target) && isPrivateIp(data.target)) {
     const lease = data.dhcpLeases.find((l) => l.address === data.target);
     const arp = data.arpEntries.find((e) => e.address === data.target);
     if (!lease && !arp) {
@@ -20640,7 +20651,7 @@ function correlateRootCauses(data, evidence, causes) {
       dimensions: ["resources"]
     });
   }
-  if (isIpAddress(data.target)) {
+  if (isIpAddress(data.target) && isPrivateIp(data.target)) {
     const arp = data.arpEntries.find((e) => e.address === data.target);
     if (arp && !arp.complete && data.ping?.lossPct === 100) {
       causes.push({
@@ -20695,9 +20706,6 @@ function correlateRootCauses(data, evidence, causes) {
     });
   }
 }
-function isIpAddress(s) {
-  return /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(s);
-}
 function formatRule(r) {
   const parts = [`chain=${r.chain}`, `action=${r.action}`];
   if (r.srcAddress)
@@ -20857,19 +20865,8 @@ ${footer}`;
 }
 
 // src/tools/root-cause.ts
-async function safe3(cmd, ctx) {
-  try {
-    const out = await executeMikrotikCommand(cmd, ctx);
-    return looksLikeError(out) ? "" : out;
-  } catch {
-    return "";
-  }
-}
-function num(s) {
-  return Number.parseInt(s ?? "0", 10) || 0;
-}
 async function collectInterfaces(ctx) {
-  const raw = await safe3("/interface print detail", ctx);
+  const raw = await safe("/interface print detail", ctx);
   if (!raw)
     return [];
   return parseRecords(raw).rows.map((r) => ({
@@ -20887,7 +20884,7 @@ async function collectInterfaces(ctx) {
   }));
 }
 async function collectRoutes(ctx) {
-  const raw = await safe3("/ip route print detail", ctx);
+  const raw = await safe("/ip route print detail", ctx);
   if (!raw)
     return { routes: [], count: 0, hasDefault: false };
   const rows = parseRecords(raw).rows;
@@ -20902,7 +20899,7 @@ async function collectRoutes(ctx) {
   return { routes, count: routes.length, hasDefault };
 }
 async function collectOspfNeighbors(ctx) {
-  const raw = await safe3("/routing ospf neighbor print detail", ctx);
+  const raw = await safe("/routing ospf neighbor print detail", ctx);
   if (!raw)
     return [];
   return parseRecords(raw).rows.map((r) => ({
@@ -20914,9 +20911,9 @@ async function collectOspfNeighbors(ctx) {
   }));
 }
 async function collectBgpPeers(ctx) {
-  const raw = await safe3("/routing bgp session print detail", ctx);
+  const raw = await safe("/routing bgp session print detail", ctx);
   if (!raw) {
-    const raw2 = await safe3("/routing bgp peer print detail", ctx);
+    const raw2 = await safe("/routing bgp peer print detail", ctx);
     if (!raw2)
       return [];
     return parseRecords(raw2).rows.map((r) => ({
@@ -20936,12 +20933,12 @@ async function collectBgpPeers(ctx) {
   }));
 }
 async function collectFirewallRules(target, ctx) {
-  const raw = await safe3("/ip firewall filter print detail", ctx);
+  const raw = await safe("/ip firewall filter print detail", ctx);
   if (!raw)
     return { matching: [], totalCount: 0 };
   const rows = parseRecords(raw).rows;
   const all = rows.map(parseFirewallRow);
-  const isIp = /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(target);
+  const isIp = isIpAddress(target);
   const matching = isIp ? all.filter((r) => !r.srcAddress || r.srcAddress === target || !r.dstAddress || r.dstAddress === target) : all;
   return { matching, totalCount: all.length };
 }
@@ -20961,13 +20958,13 @@ function parseFirewallRow(r, i) {
   };
 }
 async function collectNatRules(ctx) {
-  const raw = await safe3("/ip firewall nat print detail", ctx);
+  const raw = await safe("/ip firewall nat print detail", ctx);
   if (!raw)
     return [];
   return parseRecords(raw).rows.map(parseFirewallRow);
 }
 async function collectArp(ctx) {
-  const raw = await safe3("/ip arp print detail", ctx);
+  const raw = await safe("/ip arp print detail", ctx);
   if (!raw)
     return [];
   return parseRecords(raw).rows.map((r) => ({
@@ -20979,7 +20976,7 @@ async function collectArp(ctx) {
   }));
 }
 async function collectDhcpLeases(ctx) {
-  const raw = await safe3("/ip dhcp-server lease print detail", ctx);
+  const raw = await safe("/ip dhcp-server lease print detail", ctx);
   if (!raw)
     return [];
   return parseRecords(raw).rows.map((r) => ({
@@ -20992,7 +20989,7 @@ async function collectDhcpLeases(ctx) {
   }));
 }
 async function collectLogs(target, ctx) {
-  const raw = await safe3('/log print where topics~"error" or topics~"warning" or topics~"critical" or topics~"firewall" or topics~"system"', ctx);
+  const raw = await safe('/log print where topics~"error" or topics~"warning" or topics~"critical" or topics~"firewall" or topics~"system"', ctx);
   if (!raw)
     return [];
   const rows = parseRecords(raw).rows;
@@ -21003,7 +21000,7 @@ async function collectLogs(target, ctx) {
   }));
 }
 async function collectTunnels(ctx) {
-  const raw = await safe3('/interface print detail where type~"gre|ipip|eoip|vxlan|wireguard|ovpn|sstp|pptp|l2tp"', ctx);
+  const raw = await safe('/interface print detail where type~"gre|ipip|eoip|vxlan|wireguard|ovpn|sstp|pptp|l2tp"', ctx);
   if (!raw)
     return [];
   return parseRecords(raw).rows.map((r) => ({
@@ -21038,27 +21035,27 @@ async function collectDiagnosticData(target, ctx, dimensions) {
     logs,
     tunnels
   ] = await Promise.all([
-    dims.has("connectivity") ? safe3(`/ping ${quoteValue(target)} count=5`, ctx) : Promise.resolve(""),
+    dims.has("connectivity") ? safe(`/ping ${quoteValue(target)} count=5`, ctx) : Promise.resolve(""),
     dims.has("interfaces") ? collectInterfaces(ctx) : Promise.resolve([]),
     dims.has("routing") ? collectRoutes(ctx) : Promise.resolve({ routes: [], count: 0, hasDefault: true }),
     dims.has("routing") ? collectOspfNeighbors(ctx) : Promise.resolve([]),
     dims.has("routing") ? collectBgpPeers(ctx) : Promise.resolve([]),
     dims.has("firewall") ? collectFirewallRules(target, ctx) : Promise.resolve({ matching: [], totalCount: 0 }),
     dims.has("nat") ? collectNatRules(ctx) : Promise.resolve([]),
-    dims.has("nat") ? safe3("/ip firewall connection print count-only", ctx) : Promise.resolve("0"),
+    dims.has("nat") ? safe("/ip firewall connection print count-only", ctx) : Promise.resolve("0"),
     dims.has("arp_dhcp") ? collectArp(ctx) : Promise.resolve([]),
     dims.has("arp_dhcp") ? collectDhcpLeases(ctx) : Promise.resolve([]),
-    dims.has("dns") && !isIpLike(target) ? safe3(`[:resolve ${quoteValue(target)}]`, ctx) : Promise.resolve(undefined),
-    dims.has("dns") ? safe3("/ip dns print", ctx) : Promise.resolve(""),
-    dims.has("resources") ? safe3("/system resource print", ctx) : Promise.resolve(""),
+    dims.has("dns") && !isIpLike(target) ? safe(`[:resolve ${quoteValue(target)}]`, ctx) : Promise.resolve(undefined),
+    dims.has("dns") ? safe("/ip dns print", ctx) : Promise.resolve(""),
+    dims.has("resources") ? safe("/system resource print", ctx) : Promise.resolve(""),
     dims.has("logs") ? collectLogs(target, ctx) : Promise.resolve([]),
     dims.has("vpn") ? collectTunnels(ctx) : Promise.resolve([])
   ]);
   const ping = pingResult ? parsePingSummary(pingResult) ?? undefined : undefined;
   const dnsKv = parseKeyValues(dnsSettingsRaw);
   const resKv = parseKeyValues(resourceRaw);
-  const totalMem = parseMemMiB(resKv["total-memory"]);
-  const freeMem = parseMemMiB(resKv["free-memory"]);
+  const totalMem = parseSize(resKv["total-memory"]) ?? 0;
+  const freeMem = parseSize(resKv["free-memory"]) ?? 0;
   const memUsedPct = totalMem > 0 ? Math.round((totalMem - freeMem) / totalMem * 100) : 0;
   return {
     target,
@@ -21077,9 +21074,9 @@ async function collectDiagnosticData(target, ctx, dimensions) {
     arpEntries,
     dhcpLeases,
     dnsResolveResult: dnsResult ?? undefined,
-    dnsServers: dnsKv.servers ?? "",
+    dnsServers: [dnsKv.servers, dnsKv["dynamic-servers"]].filter(Boolean).join(",") || "",
     dnsAllowRemote: (dnsKv["allow-remote-requests"] ?? "").toLowerCase() === "yes",
-    cpuLoad: num(resKv["cpu-load"]),
+    cpuLoad: parsePercent(resKv["cpu-load"]) ?? 0,
     memoryUsedPct: memUsedPct,
     uptime: resKv.uptime ?? "",
     rosVersion: resKv.version ?? "",
@@ -21087,23 +21084,6 @@ async function collectDiagnosticData(target, ctx, dimensions) {
     tunnelInterfaces: tunnels
   };
 }
-function isIpLike(s) {
-  return /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(\/\d+)?$/.test(s);
-}
-function parseMemMiB(s) {
-  if (!s)
-    return 0;
-  const m = s.match(/([\d.]+)\s*(MiB|GiB|KiB)?/i);
-  if (!m)
-    return 0;
-  const v = Number.parseFloat(m[1]);
-  const u = (m[2] ?? "").toLowerCase();
-  if (u === "gib")
-    return v * 1024;
-  if (u === "kib")
-    return v / 1024;
-  return v;
-}
 var dimensionEnum = z86.enum(ALL_DIMENSIONS).describe("Diagnostic dimension to investigate.");
 var rootCauseTools = [
   defineTool({
@@ -21145,9 +21125,9 @@ var rootCauseTools = [
       const device = resolveDeviceName(ctx.device);
       ctx.info(`Tracing path from '${device}' to ${a.target}`);
       const [traceResult, pingResult, routeResult] = await Promise.all([
-        safe3(`/tool traceroute ${quoteValue(a.target)} count=${a.count} use-dns=${a.use_dns ? "yes" : "no"}`, ctx),
-        safe3(`/ping ${quoteValue(a.target)} count=5`, ctx),
-        safe3(`/ip route print where dst-address=0.0.0.0/0`, ctx)
+        safe(`/tool traceroute ${quoteValue(a.target)} count=${a.count} use-dns=${a.use_dns ? "yes" : "no"}`, ctx),
+        safe(`/ping ${quoteValue(a.target)} count=5`, ctx),
+        safe(`/ip route print where dst-address=0.0.0.0/0`, ctx)
       ]);
       const ping = parsePingSummary(pingResult);
       const lines = [];
@@ -21209,7 +21189,7 @@ var rootCauseTools = [
         filters.push(`message~"${a.keyword}"`);
       }
       const where = filters.length > 0 ? ` where ${filters.join(" ")}` : "";
-      const raw = await safe3(`/log print detail${where}`, ctx);
+      const raw = await safe(`/log print detail${where}`, ctx);
       if (!raw || isEmpty(raw)) {
         return `No matching log events found on '${device}' in the last ${a.time_window}.`;
       }

package/dist/shared/{cli-dq28zbns.js → cli-thdzk64q.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-22wrpg71.js";
+} from "./cli-ewkttc56.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{library-510csx1a.js → library-4npjv6jq.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-mwcpnqqg.js";
+} from "./library-n3yvjpkm.js";
 export {
   selectToolModules,
   moduleCatalog,