@usex/mikrotik-mcp 4.21.0 → 4.23.0

package/dist/cli.js

@@ -11,6 +11,7 @@ import {
   LOGO_URL,
   MikrotikConfigSchema,
   PKG_META,
+  PROJECT_ROOT,
   PROMPTS_DIR,
   REDACTED,
   SERVER_DESCRIPTION,
@@ -124,7 +125,7 @@ import {
   updateAaaEntity,
   updateSummaryLine,
   writeBackup
-} from "./shared/cli-4tycy2mf.js";
+} from "./shared/cli-tssmr7sb.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";
@@ -132,8 +133,8 @@ import { existsSync as existsSync2 } from "fs";
 // src/observability/dashboard.ts
 import { spawn } from "child_process";
 import { readFileSync as readFileSync3 } from "fs";
-import { homedir, networkInterfaces } from "os";
-import { dirname as dirname5, join as join3 } from "path";
+import { homedir as homedir2, networkInterfaces } from "os";
+import { dirname as dirname5, join as join4 } from "path";
 var {serve } = globalThis.Bun;
 import { z as z2 } from "zod";
 
@@ -815,6 +816,142 @@ function stopHealthChecks() {
   }
 }
 
+// src/observability/geo.ts
+import { lookup } from "dns/promises";
+var LOG_TAG2 = "mikrotik-mcp";
+var cache = new Map;
+var REFRESH_MS = 24 * 60 * 60000;
+var timer2 = null;
+var inFlight2 = false;
+function getDeviceGeo(name) {
+  return cache.get(name)?.geo ?? null;
+}
+var IPV4_RE = /^\d{1,3}(?:\.\d{1,3}){3}$/;
+var PRIVATE_RE = /^(?:10\.|127\.|0\.|169\.254\.|192\.168\.|172\.(?:1[6-9]|2\d|3[01])\.|100\.(?:6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.|::1$|f[cd])/i;
+function isIpLiteral(host) {
+  return IPV4_RE.test(host) || host.includes(":");
+}
+async function publicIpOf(host) {
+  let ip = host;
+  if (!isIpLiteral(host)) {
+    try {
+      ip = (await lookup(host)).address;
+    } catch {
+      return null;
+    }
+  }
+  return PRIVATE_RE.test(ip) ? null : ip;
+}
+function toGeo(country, code, city) {
+  if (!code)
+    return null;
+  return { countryCode: code.toLowerCase(), country: country ?? code, city: city || undefined };
+}
+async function fetchIpkit(ip) {
+  const res = await fetch(`https://ipkit.ir/${ip}`, {
+    headers: { accept: "application/json" },
+    signal: AbortSignal.timeout(8000)
+  });
+  if (!res.ok)
+    throw new Error(`ipkit HTTP ${res.status}`);
+  const d = await res.json();
+  if (d.is_private)
+    return null;
+  return toGeo(d.country, d.country_code, d.city);
+}
+async function fetchIpquery(ip) {
+  const res = await fetch(`https://api.ipquery.io/${ip}`, { signal: AbortSignal.timeout(8000) });
+  if (!res.ok)
+    throw new Error(`ipquery HTTP ${res.status}`);
+  const d = await res.json();
+  return toGeo(d.location?.country, d.location?.country_code, d.location?.city);
+}
+async function fetchGeo(ip) {
+  try {
+    return await fetchIpkit(ip);
+  } catch (e) {
+    logger.warn(`[${LOG_TAG2}] ipkit geo failed for ${ip}, trying ipquery: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  try {
+    return await fetchIpquery(ip);
+  } catch (e) {
+    logger.warn(`[${LOG_TAG2}] geo lookup failed for ${ip}: ${e instanceof Error ? e.message : String(e)}`);
+    return null;
+  }
+}
+async function resolveDevice(name, host) {
+  const ip = host ? await publicIpOf(host) : null;
+  const geo = ip ? await fetchGeo(ip) : null;
+  cache.set(name, { geo, at: Date.now() });
+}
+async function refreshGeo() {
+  if (inFlight2)
+    return;
+  inFlight2 = true;
+  try {
+    const now = Date.now();
+    await Promise.all(Object.entries(getConfig().devices).map(([name, dc]) => {
+      const c = cache.get(name);
+      if (c && now - c.at < REFRESH_MS)
+        return Promise.resolve();
+      return resolveDevice(name, dc.mac ? undefined : dc.host);
+    }));
+  } finally {
+    inFlight2 = false;
+  }
+}
+function startGeoLookups() {
+  refreshGeo();
+  timer2 = setInterval(() => void refreshGeo(), REFRESH_MS);
+}
+function stopGeoLookups() {
+  if (timer2) {
+    clearInterval(timer2);
+    timer2 = null;
+  }
+}
+
+// src/observability/flags.ts
+import { join as join3 } from "path";
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { homedir } from "os";
+var LOG_TAG3 = "mikrotik-mcp";
+var CODE_RE = /^[a-z]{2}$/;
+var sourceUrl = (code) => `https://hatscripts.github.io/circle-flags/flags/${code}.svg`;
+var VENDOR_DIR = join3(PROJECT_ROOT, "assets", "flags");
+var CACHE_DIR = join3(homedir(), ".mikrotik-mcp", "flags");
+var mem = new Map;
+async function flagSvg(code) {
+  const c = code.toLowerCase();
+  if (!CODE_RE.test(c))
+    return null;
+  const cached = mem.get(c);
+  if (cached !== undefined)
+    return cached;
+  for (const file of [join3(VENDOR_DIR, `${c}.svg`), join3(CACHE_DIR, `${c}.svg`)]) {
+    try {
+      const svg = await readFile(file, "utf8");
+      mem.set(c, svg);
+      return svg;
+    } catch {}
+  }
+  try {
+    const res = await fetch(sourceUrl(c), { signal: AbortSignal.timeout(8000) });
+    if (!res.ok) {
+      if (res.status === 404)
+        mem.set(c, null);
+      return null;
+    }
+    const svg = await res.text();
+    mem.set(c, svg);
+    mkdir(CACHE_DIR, { recursive: true }).then(() => writeFile(join3(CACHE_DIR, `${c}.svg`), svg)).catch(() => {});
+    return svg;
+  } catch (e) {
+    logger.warn(`[${LOG_TAG3}] flag fetch failed for '${c}': ${e instanceof Error ? e.message : String(e)}`);
+    return null;
+  }
+}
+
 // src/observability/traffic-hub.ts
 var POLL_MS = 1000;
 var hubs = new Map;
@@ -1140,8 +1277,8 @@ var CAPSMAN_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
 var DEFAULT_CAPSMAN_INTERVAL_MS = 5 * 60000;
 var MIN_CAPSMAN_INTERVAL_MS = 60000;
 var MAX_CAPSMAN_INTERVAL_MS = 6 * 60 * 60000;
-var timer2 = null;
-var inFlight2 = false;
+var timer3 = null;
+var inFlight3 = false;
 var noCapsman = new Set;
 function clampInterval(ms) {
   if (!Number.isFinite(ms))
@@ -1168,9 +1305,9 @@ async function sampleDevice(store, device, ts) {
   store.recordRadioSamples(device, ts, samples);
 }
 async function sampleCapsmanOnce(store) {
-  if (inFlight2)
+  if (inFlight3)
     return;
-  inFlight2 = true;
+  inFlight3 = true;
   const ts = Date.now();
   try {
     const cfg = getConfig();
@@ -1185,18 +1322,18 @@ async function sampleCapsmanOnce(store) {
     }));
     store.pruneSamples(ts - CAPSMAN_RETENTION_MS);
   } finally {
-    inFlight2 = false;
+    inFlight3 = false;
   }
 }
 function startCapsmanSampler(store, intervalMs = DEFAULT_CAPSMAN_INTERVAL_MS) {
   const ms = clampInterval(intervalMs);
   sampleCapsmanOnce(store);
-  timer2 = setInterval(() => void sampleCapsmanOnce(store), ms);
+  timer3 = setInterval(() => void sampleCapsmanOnce(store), ms);
 }
 function stopCapsmanSampler() {
-  if (timer2) {
-    clearInterval(timer2);
-    timer2 = null;
+  if (timer3) {
+    clearInterval(timer3);
+    timer3 = null;
   }
 }
 
@@ -1336,8 +1473,8 @@ var USAGE_RETENTION_MS = 93 * 24 * 60 * 60 * 1000;
 var DEFAULT_USAGE_INTERVAL_MS = 60000;
 var MIN_USAGE_INTERVAL_MS = 30000;
 var MAX_USAGE_INTERVAL_MS = 6 * 60 * 60000;
-var timer3 = null;
-var inFlight3 = false;
+var timer4 = null;
+var inFlight4 = false;
 var currentStore = null;
 var currentIntervalMs = DEFAULT_USAGE_INTERVAL_MS;
 function clampInterval2(ms) {
@@ -1398,9 +1535,9 @@ async function ingestSessions(store, device) {
   store.upsertSessions(device, sessions);
 }
 async function sampleUsageOnce(store) {
-  if (inFlight3)
+  if (inFlight4)
     return;
-  inFlight3 = true;
+  inFlight4 = true;
   const ts = Date.now();
   try {
     const cfg = getConfig();
@@ -1416,32 +1553,32 @@ async function sampleUsageOnce(store) {
     }));
     store.pruneSamples(ts - USAGE_RETENTION_MS);
   } finally {
-    inFlight3 = false;
+    inFlight4 = false;
   }
 }
 function startUsageSampler(store, intervalMs = DEFAULT_USAGE_INTERVAL_MS) {
   currentStore = store;
   currentIntervalMs = clampInterval2(intervalMs);
   sampleUsageOnce(store);
-  timer3 = setInterval(() => void sampleUsageOnce(store), currentIntervalMs);
+  timer4 = setInterval(() => void sampleUsageOnce(store), currentIntervalMs);
 }
 function getUsageSamplerInterval() {
   return currentIntervalMs;
 }
 function setUsageSamplerInterval(intervalMs) {
   currentIntervalMs = clampInterval2(intervalMs);
-  if (timer3)
-    clearInterval(timer3);
+  if (timer4)
+    clearInterval(timer4);
   if (currentStore) {
     const store = currentStore;
-    timer3 = setInterval(() => void sampleUsageOnce(store), currentIntervalMs);
+    timer4 = setInterval(() => void sampleUsageOnce(store), currentIntervalMs);
   }
   return currentIntervalMs;
 }
 function stopUsageSampler() {
-  if (timer3) {
-    clearInterval(timer3);
-    timer3 = null;
+  if (timer4) {
+    clearInterval(timer4);
+    timer4 = null;
   }
   currentStore = null;
 }
@@ -1834,7 +1971,7 @@ function runUpgrade(spec) {
       env: process.env,
       stdio: ["ignore", "pipe", "pipe"]
     });
-    const timer4 = setTimeout(() => {
+    const timer5 = setTimeout(() => {
       child.kill();
       resolve({ ok: false, log: `${out}
 (timed out after 180s)` });
@@ -1842,19 +1979,19 @@ function runUpgrade(spec) {
     child.stdout?.on("data", (d) => out += d.toString());
     child.stderr?.on("data", (d) => out += d.toString());
     child.on("error", (e) => {
-      clearTimeout(timer4);
+      clearTimeout(timer5);
       resolve({ ok: false, log: `${out}
 spawn error: ${String(e)}` });
     });
     child.on("exit", (code) => {
-      clearTimeout(timer4);
+      clearTimeout(timer5);
       resolve({ ok: code === 0, log: out.trim() || `(exit ${code})` });
     });
   });
 }
 function dashboardHtml() {
   try {
-    return readFileSync3(join3(UI_DIST_DIR, "observability.html"), "utf8");
+    return readFileSync3(join4(UI_DIST_DIR, "observability.html"), "utf8");
   } catch {
     return `<!doctype html><meta charset=utf-8><body style="font:14px system-ui;padding:24px;background:#0b0d10;color:#e8eaed">
 <h2>MikroTik MCP \u2014 Observability Dashboard</h2>
@@ -1948,6 +2085,7 @@ function devicesPayload(store) {
       jumpVia: dc.jumpVia,
       jumpHost: dc.jumpHost ? { host: dc.jumpHost.host, port: dc.jumpHost.port } : undefined,
       status: getDeviceStatus(name),
+      geo: getDeviceGeo(name),
       history: getDeviceHistory(name),
       activity: activity.get(name) ?? {
         calls: 0,
@@ -2733,7 +2871,7 @@ async function featureRoutes(req, url) {
     const raw = b?.dir?.trim();
     if (!raw)
       return json3({ error: "dir required" }, 400);
-    const dir = raw === "~" || raw.startsWith("~/") ? join3(homedir(), raw.slice(1)) : raw;
+    const dir = raw === "~" || raw.startsWith("~/") ? join4(homedir2(), raw.slice(1)) : raw;
     const next = { ...getConfig(), backupDir: dir };
     setConfig(next);
     try {
@@ -2840,14 +2978,15 @@ async function runDashboard(cfg, transportLabel) {
     transport: transportLabel
   });
   startHealthChecks(30000);
+  startGeoLookups();
   try {
-    usageStore = await openUsageStore(join3(dirname5(cfg.dbPath), "usage.db"));
+    usageStore = await openUsageStore(join4(dirname5(cfg.dbPath), "usage.db"));
     startUsageSampler(usageStore);
   } catch (e) {
     logger.warn(`[${SERVER_TAG3}] usage history disabled: ${String(e)}`);
   }
   try {
-    capsmanStore = await openCapsmanStore(join3(dirname5(cfg.dbPath), "capsman.db"));
+    capsmanStore = await openCapsmanStore(join4(dirname5(cfg.dbPath), "capsman.db"));
     startCapsmanSampler(capsmanStore);
   } catch (e) {
     logger.warn(`[${SERVER_TAG3}] capsman trends disabled: ${String(e)}`);
@@ -2959,6 +3098,18 @@ async function runDashboard(cfg, transportLabel) {
         devices: ps
       });
     }
+    if (url.pathname.startsWith("/api/flag/")) {
+      const code = url.pathname.slice("/api/flag/".length).replace(/\.svg$/, "");
+      const svg = await flagSvg(code);
+      if (!svg)
+        return new Response("flag not found", { status: 404 });
+      return new Response(svg, {
+        headers: {
+          "content-type": "image/svg+xml; charset=utf-8",
+          "cache-control": "public, max-age=86400"
+        }
+      });
+    }
     if (url.pathname === "/api/devices") {
       return json3(devicesPayload(db));
     }
@@ -3169,6 +3320,7 @@ async function runDashboard(cfg, transportLabel) {
     store,
     stop() {
       stopHealthChecks();
+      stopGeoLookups();
       stopUsageSampler();
       stopCapsmanSampler();
       server.stop(true);
@@ -3268,7 +3420,18 @@ change, use diff_config_snapshots (from=latest, to=live) to confirm exactly what
 changed, and if something is wrong, get_config_snapshot returns the prior
 \`/export\` text to restore from. Do NOT use create_backup/create_export for this
 pre-change restore point \u2014 those write files to the device's flash; prefer the
-local snapshot to keep the device's disk clean.`;
+local snapshot to keep the device's disk clean.
+
+Local backup before high-risk edits \u2014 before CREATING A VPN TUNNEL, or before you
+start CHANGING ANY MANGLE OR FIREWALL FILTER RULE, ASK the user whether to create a
+restorable local backup first ("Create a local backup before this change?"). On
+yes, call create_local_backup for each device you will change (a host-side .rsc in
+the MCP vault \u2014 NOT on the device's flash \u2014 that you can restore_local_backup if the
+change cuts you off). These edits (tunnel interfaces/peers/routes, routing marks,
+filter rules) are the ones most likely to lock you out, which is why the restorable
+copy is worth it on top of the diff snapshot above. Skip the backup ONLY when the
+mangle/filter edit is minor and non-critical and the user declines \u2014 do not silently
+skip it, and never skip it for tunnel creation.`;
 var MULTI_DEVICE_INSTRUCTIONS = `
 
 Multiple devices are configured: {{names}} (default: {{default}}). Every tool
@@ -3359,18 +3522,18 @@ function installToolPagination(server, pageSize) {
   const sdkHandler = low._requestHandlers?.get("tools/list");
   if (typeof sdkHandler !== "function")
     return;
-  let cache = null;
+  let cache2 = null;
   server.server.setRequestHandler(ListToolsRequestSchema, async (request, extra) => {
-    if (!cache)
-      cache = (await sdkHandler(request, extra)).tools ?? [];
-    const total = cache.length;
+    if (!cache2)
+      cache2 = (await sdkHandler(request, extra)).tools ?? [];
+    const total = cache2.length;
     const cursor = request.params?.cursor;
     let start = 0;
     if (typeof cursor === "string") {
       const n = Number.parseInt(cursor, 10);
       start = Number.isFinite(n) && n > 0 ? Math.min(n, total) : 0;
     }
-    const tools = cache.slice(start, start + pageSize);
+    const tools = cache2.slice(start, start + pageSize);
     const end = start + tools.length;
     return end < total ? { tools, nextCursor: String(end) } : { tools };
   });

package/dist/index.js

@@ -29,7 +29,7 @@ import {
   selectToolModules,
   setConfig,
   updateSummaryLine
-} from "./shared/library-v21pwa2g.js";
+} from "./shared/library-2144zr9f.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
@@ -193,7 +193,18 @@ change, use diff_config_snapshots (from=latest, to=live) to confirm exactly what
 changed, and if something is wrong, get_config_snapshot returns the prior
 \`/export\` text to restore from. Do NOT use create_backup/create_export for this
 pre-change restore point \u2014 those write files to the device's flash; prefer the
-local snapshot to keep the device's disk clean.`;
+local snapshot to keep the device's disk clean.
+
+Local backup before high-risk edits \u2014 before CREATING A VPN TUNNEL, or before you
+start CHANGING ANY MANGLE OR FIREWALL FILTER RULE, ASK the user whether to create a
+restorable local backup first ("Create a local backup before this change?"). On
+yes, call create_local_backup for each device you will change (a host-side .rsc in
+the MCP vault \u2014 NOT on the device's flash \u2014 that you can restore_local_backup if the
+change cuts you off). These edits (tunnel interfaces/peers/routes, routing marks,
+filter rules) are the ones most likely to lock you out, which is why the restorable
+copy is worth it on top of the diff snapshot above. Skip the backup ONLY when the
+mangle/filter edit is minor and non-critical and the user declines \u2014 do not silently
+skip it, and never skip it for tunnel creation.`;
 var MULTI_DEVICE_INSTRUCTIONS = `
 
 Multiple devices are configured: {{names}} (default: {{default}}). Every tool

package/dist/shared/{cli-g27x73vg.js → cli-p673815b.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-4tycy2mf.js";
+} from "./cli-tssmr7sb.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{cli-4tycy2mf.js → cli-tssmr7sb.js}

@@ -2538,7 +2538,7 @@ function deviceSelectorDescription(selectorNames, directory) {
   if (directory && directory.length > 0) {
     const rows = directory.map((d) => `\u2022 ${d.key}${d.label && d.label !== d.key ? ` ("${d.label}")` : ""} \u2192 ${d.target}${d.isDefault ? " [default]" : ""}`).join(`
 `);
-    return "Which configured MikroTik device to run this on. Pass the EXACT config key (or its label) " + "that matches the user's wording \u2014 these are different physical routers, so never substitute " + `one for another (e.g. "Ali Home" is NOT "home"). Devices known at startup:
+    return "Which configured MikroTik device to run this on. Pass the EXACT config key (or its label) " + "that matches the user's wording \u2014 these are different physical routers in different places, " + "so never substitute one for another, and never swap in a different endpoint, country, or " + 'role than the user named (e.g. "Ali Home" is NOT "home"; a Netherlands VPS is NOT a Germany ' + "VPS). If the user's wording does not map to EXACTLY one row below, ask which device instead " + `of guessing. Devices known at startup:
 ` + `${rows}
 ` + "This list is a startup snapshot \u2014 devices can be added at runtime (e.g. from the dashboard), " + "so call list_mikrotik_devices for the authoritative current set if a name isn't listed here. " + "Omit only when the user did not name a device (uses the default).";
   }
@@ -9070,7 +9070,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./cli-g27x73vg.js");
+  const { moduleCatalog } = await import("./cli-p673815b.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {
@@ -33346,4 +33346,4 @@ function selectToolModules(filter = {}, catalog = moduleCatalog) {
   }).map((m) => m.tools);
 }
 
-export { __require, DEFAULT_SNAPSHOT_DB, DEFAULT_CONFIG_HISTORY_DIR, DeviceConfigSchema, ToolFilterSchema, MikrotikConfigSchema, getConfigSource, loadConfig, logger, setConfig, getConfig, listDevices, deviceLabels, resolveDeviceName, deviceDirectory, isMacTelnetDevice, createDeviceClient, describeTransport, isPoolEnabled, closeAll, closeDevice, poolStatus, getMemoryStore, closeMemoryStore, reopenMemoryStore, executeMikrotikCommand, createContext, Cmd, isEmpty, looksLikeError, commandUnsupported, parseKeyValues, parseRouterosDate, parseSize, parseSystemResource, parseRecords, parseLeadingNumber, parseDisks, riskOf, REDACTED, redact, configureRecorder, getEventStore, subscribe, subscriberCount, registerTools, fetchDevices, sampleDeviceTraffic, sampleAllTraffic, setDeviceLimits, blockDevice, allowDevice, makeDeviceStatic, setDeviceIp, setDeviceLabel, removeDeviceLease, devicesView, PROMPTS_DIR, UI_DIST_DIR, registerUiResources, backupDir, listBackups, readBackup, writeBackup, deleteBackup, renameBackup, createLocalBackup, restoreLocalBackup, isS3Configured, getS3Client, presignExpiresIn, s3Target, splitCommands, buildChangePlan, renderPlan, diffLines, normalizeExport, analyzeDrift, attributeChanges, openSnapshotStore, applyWritesSafely, captureSnapshot, DEFAULT_TZSP_PORT, capture2 as capture, AAA_ENTITIES, listAaaEntity, addAaaEntity, updateAaaEntity, removeAaaEntity, toggleAaaEntity, getRadiusIncoming, setRadiusIncoming, resetRadiusCounters, getUmSettings, setUmSettings, VERSION, WEBSITE_URL, LOGO_URL, SERVER_TITLE, SERVER_DESCRIPTION, SERVER_NAME, PKG_META, loadFileCacheSync, fetchLatestRelease, checkForUpdate, updateSummaryLine, fetchAllReleases, buildChannelPlanCommands, reportWeakClients, runCapsmanAudit, steerAlreadyPresent, buildSteerCommands, loadBalancePlan, buildLoadBalanceCommands, buildFtCommands, buildHaCommands, haGuidance, capsmanOverview, fetchCapsmanState, moduleCatalog, allToolModules, ALWAYS_ON_MODULES, selectToolModules };
+export { __require, DEFAULT_SNAPSHOT_DB, DEFAULT_CONFIG_HISTORY_DIR, DeviceConfigSchema, ToolFilterSchema, MikrotikConfigSchema, getConfigSource, loadConfig, logger, setConfig, getConfig, listDevices, deviceLabels, resolveDeviceName, deviceDirectory, isMacTelnetDevice, createDeviceClient, describeTransport, isPoolEnabled, closeAll, closeDevice, poolStatus, getMemoryStore, closeMemoryStore, reopenMemoryStore, executeMikrotikCommand, createContext, Cmd, isEmpty, looksLikeError, commandUnsupported, parseKeyValues, parseRouterosDate, parseSize, parseSystemResource, parseRecords, parseLeadingNumber, parseDisks, riskOf, REDACTED, redact, configureRecorder, getEventStore, subscribe, subscriberCount, registerTools, fetchDevices, sampleDeviceTraffic, sampleAllTraffic, setDeviceLimits, blockDevice, allowDevice, makeDeviceStatic, setDeviceIp, setDeviceLabel, removeDeviceLease, devicesView, PROMPTS_DIR, PROJECT_ROOT, UI_DIST_DIR, registerUiResources, backupDir, listBackups, readBackup, writeBackup, deleteBackup, renameBackup, createLocalBackup, restoreLocalBackup, isS3Configured, getS3Client, presignExpiresIn, s3Target, splitCommands, buildChangePlan, renderPlan, diffLines, normalizeExport, analyzeDrift, attributeChanges, openSnapshotStore, applyWritesSafely, captureSnapshot, DEFAULT_TZSP_PORT, capture2 as capture, AAA_ENTITIES, listAaaEntity, addAaaEntity, updateAaaEntity, removeAaaEntity, toggleAaaEntity, getRadiusIncoming, setRadiusIncoming, resetRadiusCounters, getUmSettings, setUmSettings, VERSION, WEBSITE_URL, LOGO_URL, SERVER_TITLE, SERVER_DESCRIPTION, SERVER_NAME, PKG_META, loadFileCacheSync, fetchLatestRelease, checkForUpdate, updateSummaryLine, fetchAllReleases, buildChannelPlanCommands, reportWeakClients, runCapsmanAudit, steerAlreadyPresent, buildSteerCommands, loadBalancePlan, buildLoadBalanceCommands, buildFtCommands, buildHaCommands, haGuidance, capsmanOverview, fetchCapsmanState, moduleCatalog, allToolModules, ALWAYS_ON_MODULES, selectToolModules };

package/dist/shared/{library-v21pwa2g.js → library-2144zr9f.js}

@@ -2460,7 +2460,7 @@ function deviceSelectorDescription(selectorNames, directory) {
   if (directory && directory.length > 0) {
     const rows = directory.map((d) => `\u2022 ${d.key}${d.label && d.label !== d.key ? ` ("${d.label}")` : ""} \u2192 ${d.target}${d.isDefault ? " [default]" : ""}`).join(`
 `);
-    return "Which configured MikroTik device to run this on. Pass the EXACT config key (or its label) " + "that matches the user's wording \u2014 these are different physical routers, so never substitute " + `one for another (e.g. "Ali Home" is NOT "home"). Devices known at startup:
+    return "Which configured MikroTik device to run this on. Pass the EXACT config key (or its label) " + "that matches the user's wording \u2014 these are different physical routers in different places, " + "so never substitute one for another, and never swap in a different endpoint, country, or " + 'role than the user named (e.g. "Ali Home" is NOT "home"; a Netherlands VPS is NOT a Germany ' + "VPS). If the user's wording does not map to EXACTLY one row below, ask which device instead " + `of guessing. Devices known at startup:
 ` + `${rows}
 ` + "This list is a startup snapshot \u2014 devices can be added at runtime (e.g. from the dashboard), " + "so call list_mikrotik_devices for the authoritative current set if a name isn't listed here. " + "Omit only when the user did not name a device (uses the default).";
   }
@@ -8849,7 +8849,7 @@ var cache = null;
 async function gateway() {
   if (cache)
     return cache;
-  const { moduleCatalog } = await import("./library-w7gzvedz.js");
+  const { moduleCatalog } = await import("./library-8f4pbp0x.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {

package/dist/shared/{library-w7gzvedz.js → library-8f4pbp0x.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-v21pwa2g.js";
+} from "./library-2144zr9f.js";
 export {
   selectToolModules,
   moduleCatalog,