@usex/mikrotik-mcp 5.0.0 → 5.1.0

package/dist/cli.js

@@ -230,7 +230,7 @@ import {
   validatePolicyText,
   worstSeverity,
   writeBackup
-} from "./shared/cli-2dj736ma.js";
+} from "./shared/cli-mqb3rqfy.js";
 
 // src/cli.ts
 import { existsSync as existsSync2 } from "fs";
@@ -2703,12 +2703,27 @@ async function attackRoutes(req, url) {
     }, 501);
   }
   if (p === "/api/attacks/scan" && req.method === "POST") {
-    logger.info("attack sweep requested from the dashboard");
-    const result = await sweep({ respond: false });
+    const body = await req.json().catch(() => ({}));
+    const scope = body.devices?.length ? body.devices.join(", ") : body.onlineOnly ? "reachable devices" : "every device";
+    logger.info(`attack sweep requested from the dashboard (${scope})`);
+    const result = await sweep({
+      devices: body.devices?.length ? body.devices : undefined,
+      onlineOnly: body.onlineOnly,
+      respond: false
+    });
     return json9({
       incidents: result.incidents,
       unavailable: result.unavailable,
-      devices: result.devices
+      devices: result.devices,
+      skipped: result.skipped
+    });
+  }
+  if (p === "/api/attacks/devices" && req.method === "GET") {
+    return json9({
+      devices: listDevices().names.map((name) => ({
+        name,
+        reachable: getDeviceStatus(name).reachable
+      }))
     });
   }
   const rest = p.slice("/api/attacks/".length).split("/").filter(Boolean);

package/dist/index.js

@@ -29,7 +29,7 @@ import {
   selectToolModules,
   setConfig,
   updateSummaryLine
-} from "./shared/library-13dhfdnq.js";
+} from "./shared/library-tq8phch8.js";
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";

package/dist/shared/{cli-2dj736ma.js → cli-mqb3rqfy.js}

@@ -10832,7 +10832,7 @@ var cache2 = null;
 async function gateway() {
   if (cache2)
     return cache2;
-  const { moduleCatalog } = await import("./cli-vvy7yfyg.js");
+  const { moduleCatalog } = await import("./cli-s9fc4c7j.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {
@@ -34834,7 +34834,7 @@ var riskByTool = null;
 async function riskIndex() {
   if (riskByTool)
     return riskByTool;
-  const { moduleCatalog } = await import("./cli-vvy7yfyg.js");
+  const { moduleCatalog } = await import("./cli-s9fc4c7j.js");
   const index = new Map;
   for (const mod of moduleCatalog) {
     for (const tool of mod.tools)
@@ -37566,11 +37566,28 @@ function policyFromConfig() {
     autoRespondTo: cfg.autoRespondTo
   };
 }
+function resolveTargets2(spec) {
+  const all = spec.devices ?? listDevices().names;
+  if (!spec.onlineOnly)
+    return { targets: all, skipped: [] };
+  const targets = [];
+  const skipped = [];
+  for (const device of all) {
+    if (getDeviceStatus(device).reachable === false)
+      skipped.push(device);
+    else
+      targets.push(device);
+  }
+  return { targets, skipped };
+}
 async function sweep(options = {}) {
   const cfg = getConfig().attacks;
   const now = options.now ?? Date.now();
   const windowMinutes = options.windowMinutes ?? cfg.windowMinutes;
-  const targets = options.devices ?? listDevices().names;
+  const { targets, skipped } = resolveTargets2({
+    devices: options.devices,
+    onlineOnly: options.onlineOnly
+  });
   const store3 = await attackStore().catch(() => null);
   const signals = [];
   const unavailable = [];
@@ -37674,7 +37691,7 @@ async function sweep(options = {}) {
       });
     }
   }
-  return { incidents, unavailable, devices: deviceResults, responses };
+  return { incidents, unavailable, devices: deviceResults, responses, skipped };
 }
 var timer3 = null;
 var running2 = false;
@@ -37726,15 +37743,17 @@ var attackTools = [
     title: "Scan for Attacks Now",
     annotations: READ,
     noDevice: true,
-    description: "Reads recent logs from every configured device, runs the attack detectors, and correlates " + "what they find into incidents \u2014 brute force, credential spraying, a login that SUCCEEDED " + "after failures, port scans, management ports answering the internet, and unexplained " + "changes to security-relevant configuration. Read-only: it changes nothing on any device. " + "One source hitting several routers is reported as ONE incident, which is the pattern no " + "single router can see. Detectors whose input is missing say so and name the fix, rather " + "than reporting a quiet network.",
+    description: "Reads recent logs from every configured device, runs the attack detectors, and correlates " + "what they find into incidents \u2014 brute force, credential spraying, a login that SUCCEEDED " + "after failures, port scans, management ports answering the internet, and unexplained " + "changes to security-relevant configuration. Read-only: it changes nothing on any device. " + "One source hitting several routers is reported as ONE incident, which is the pattern no " + "single router can see. Detectors whose input is missing say so and name the fix, rather " + "than reporting a quiet network. Pass `devices` for one router, or `online_only` to skip " + "the ones currently unreachable \u2014 any device left out is named in the result.",
     inputSchema: {
       devices: z116.array(z116.string()).optional().describe("Limit to these devices (default: all)."),
+      online_only: z116.boolean().default(false).describe("Skip devices the health probe currently reports as unreachable. A device not yet " + "probed is still scanned \u2014 never probed is not the same as known-offline."),
       window_minutes: z116.coerce.number().int().positive().max(1440).optional().describe("How far back to read. Default from config (10).")
     },
     async handler(a, ctx) {
       ctx.info("Scanning the fleet for attacks");
       const result = await sweep({
         devices: a.devices,
+        onlineOnly: a.online_only,
         windowMinutes: a.window_minutes,
         respond: false
       });
@@ -37743,6 +37762,9 @@ var attackTools = [
       lines.push(`Scanned ${result.devices.length} device(s), ${result.devices.reduce((n, d) => n + d.events, 0)} log event(s).`);
       for (const f of failed)
         lines.push(`  \u2717 ${f.device}: ${f.error}`);
+      if (result.skipped.length > 0) {
+        lines.push(`  Skipped as unreachable: ${result.skipped.join(", ")}`);
+      }
       lines.push("");
       if (result.incidents.length === 0) {
         lines.push("No attack incidents found in this window.");

package/dist/shared/{cli-vvy7yfyg.js → cli-s9fc4c7j.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./cli-2dj736ma.js";
+} from "./cli-mqb3rqfy.js";
 export {
   selectToolModules,
   moduleCatalog,

package/dist/shared/{library-13dhfdnq.js → library-tq8phch8.js}

@@ -10607,7 +10607,7 @@ var cache2 = null;
 async function gateway() {
   if (cache2)
     return cache2;
-  const { moduleCatalog } = await import("./library-syt5fmtj.js");
+  const { moduleCatalog } = await import("./library-xgy70fsf.js");
   const forIndex = [];
   const byName = new Map;
   for (const mod of moduleCatalog) {
@@ -32930,6 +32930,10 @@ var HISTORY_CAP = 60;
 var statuses = new Map;
 var histories = new Map;
 var neighbors = new Map;
+var UNKNOWN = { reachable: null, checkedAt: null, latencyMs: null };
+function getDeviceStatus(name) {
+  return statuses.get(name) ?? UNKNOWN;
+}
 function pushHistory(name, sample) {
   const arr = histories.get(name) ?? [];
   arr.push(sample);
@@ -34330,7 +34334,7 @@ var riskByTool = null;
 async function riskIndex() {
   if (riskByTool)
     return riskByTool;
-  const { moduleCatalog } = await import("./library-syt5fmtj.js");
+  const { moduleCatalog } = await import("./library-xgy70fsf.js");
   const index = new Map;
   for (const mod of moduleCatalog) {
     for (const tool of mod.tools)
@@ -37004,11 +37008,28 @@ function policyFromConfig() {
     autoRespondTo: cfg.autoRespondTo
   };
 }
+function resolveTargets2(spec) {
+  const all = spec.devices ?? listDevices().names;
+  if (!spec.onlineOnly)
+    return { targets: all, skipped: [] };
+  const targets = [];
+  const skipped = [];
+  for (const device of all) {
+    if (getDeviceStatus(device).reachable === false)
+      skipped.push(device);
+    else
+      targets.push(device);
+  }
+  return { targets, skipped };
+}
 async function sweep(options = {}) {
   const cfg = getConfig().attacks;
   const now = options.now ?? Date.now();
   const windowMinutes = options.windowMinutes ?? cfg.windowMinutes;
-  const targets = options.devices ?? listDevices().names;
+  const { targets, skipped } = resolveTargets2({
+    devices: options.devices,
+    onlineOnly: options.onlineOnly
+  });
   const store3 = await attackStore().catch(() => null);
   const signals = [];
   const unavailable = [];
@@ -37112,7 +37133,7 @@ async function sweep(options = {}) {
       });
     }
   }
-  return { incidents, unavailable, devices: deviceResults, responses };
+  return { incidents, unavailable, devices: deviceResults, responses, skipped };
 }
 
 // src/tools/attack.ts
@@ -37137,15 +37158,17 @@ var attackTools = [
     title: "Scan for Attacks Now",
     annotations: READ,
     noDevice: true,
-    description: "Reads recent logs from every configured device, runs the attack detectors, and correlates " + "what they find into incidents \u2014 brute force, credential spraying, a login that SUCCEEDED " + "after failures, port scans, management ports answering the internet, and unexplained " + "changes to security-relevant configuration. Read-only: it changes nothing on any device. " + "One source hitting several routers is reported as ONE incident, which is the pattern no " + "single router can see. Detectors whose input is missing say so and name the fix, rather " + "than reporting a quiet network.",
+    description: "Reads recent logs from every configured device, runs the attack detectors, and correlates " + "what they find into incidents \u2014 brute force, credential spraying, a login that SUCCEEDED " + "after failures, port scans, management ports answering the internet, and unexplained " + "changes to security-relevant configuration. Read-only: it changes nothing on any device. " + "One source hitting several routers is reported as ONE incident, which is the pattern no " + "single router can see. Detectors whose input is missing say so and name the fix, rather " + "than reporting a quiet network. Pass `devices` for one router, or `online_only` to skip " + "the ones currently unreachable \u2014 any device left out is named in the result.",
     inputSchema: {
       devices: z116.array(z116.string()).optional().describe("Limit to these devices (default: all)."),
+      online_only: z116.boolean().default(false).describe("Skip devices the health probe currently reports as unreachable. A device not yet " + "probed is still scanned \u2014 never probed is not the same as known-offline."),
       window_minutes: z116.coerce.number().int().positive().max(1440).optional().describe("How far back to read. Default from config (10).")
     },
     async handler(a, ctx) {
       ctx.info("Scanning the fleet for attacks");
       const result = await sweep({
         devices: a.devices,
+        onlineOnly: a.online_only,
         windowMinutes: a.window_minutes,
         respond: false
       });
@@ -37154,6 +37177,9 @@ var attackTools = [
       lines.push(`Scanned ${result.devices.length} device(s), ${result.devices.reduce((n, d) => n + d.events, 0)} log event(s).`);
       for (const f of failed)
         lines.push(`  \u2717 ${f.device}: ${f.error}`);
+      if (result.skipped.length > 0) {
+        lines.push(`  Skipped as unreachable: ${result.skipped.join(", ")}`);
+      }
       lines.push("");
       if (result.incidents.length === 0) {
         lines.push("No attack incidents found in this window.");

package/dist/shared/{library-syt5fmtj.js → library-xgy70fsf.js}

@@ -4,7 +4,7 @@ import {
   allToolModules,
   moduleCatalog,
   selectToolModules
-} from "./library-13dhfdnq.js";
+} from "./library-tq8phch8.js";
 export {
   selectToolModules,
   moduleCatalog,